last executing test programs: 4m37.162155928s ago: executing program 4 (id=15352): unshare(0x8040480) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, 0x0}, 0x0) (async, rerun: 32) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) (rerun: 32) getsockopt$inet_mptcp_buf(r1, 0x11c, 0x2, &(0x7f0000000040)=""/167, &(0x7f0000000100)=0xa7) (async, rerun: 32) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) (async) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x7ffffffffffffffe, 0x3ff}) (async) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)={0x2c, r2, 0xd66771a5e8224ded, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r4}]}, 0x2c}}, 0x0) 4m36.862462399s ago: executing program 4 (id=15359): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB='\x00'/14], 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRESDEC=r0, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x30}}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x0) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) close(r5) r6 = socket$kcm(0xa, 0x3, 0x87) sendmsg$kcm(r6, &(0x7f0000000580)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f00000004c0), 0x3e}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r2}, @IFLA_LINKMODE={0x5, 0x11, 0x9}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0xd}]}, 0x50}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 4m36.658831252s ago: executing program 4 (id=15362): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)="08e0ac8fb1d99df61d7b518d0a62", 0xe}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f00000005c0)="f5fbfd4f1595317700ff55f1f960ff70fba64053ef1c952b8561071ccfbed96b7227eaaf92a1358afc148a8aafa58b2444561acf9a5114b207019da8518fea9fd189e3616ec0ad37f86f431d6f4f1fbe1b0e3e640ac2b1f7ff33cf28d27c40513b6cee87fbd144c842c5c7b6752ea19efcfca738ac5207318c1bc30db2a727ce9a82303920eb2a3b0aa99902f8423e754843e7d6ceb06048a8d918680c042a42370dc807a398af793f4b1a3107c3771474ba13d826ce5634d33c485f3f97cffc9ea1e026f4327e96d5a40268c75358061e75633ebe43e946f2bad55973c81fff7d4843dd1db36180dd3b5692f98ace", 0xef}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce90bfdb", 0x4}, {&(0x7f00000007c0)="f2e659", 0x3}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2964dd1", 0x4}, {&(0x7f0000000580)="b8a2f6", 0x3}, {&(0x7f0000000ac0)="7940e900e0377757a9edc0d9376c21328ad2f7583b1184ad388c53ae4fe4c8b712b3e5e08ecff5258151bd9eea7b4ce21f67ab51922ce035987127fda5812df903188e321419610f4beb6cdf6fa073876157c4f1d2054439d8db3f4d937872de928b62741fd60e6b56979ad883f89a02e24a577275bfb498b7a127abd0eb099e704d18d63dad611b45acfc3b8dc5457c8383d7d8621942e8e2ce6e4017dd6e5ed9732e739be6593c3b033524669ce17c3b822a6953eb11a2092122146b6ac69aa39298c22cff45249c95c42949f3c24875ee336e1dbd5ce380a8793d1e3e564461febfdd4762cc863a68597023", 0xed}, {&(0x7f0000000280)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000880)="87", 0x1}, {&(0x7f0000000900)="11", 0x1}], 0x2}}], 0x4, 0x4000000) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="000225bd7000fbdbdf2501000000adfac0dd4341d02ff823aa924a3064c8cef5c6cc2303a74fb097ebab803fb675fadb9302695a71a6cd5047fa6228c09d62897f"], 0x14}, 0x1, 0x0, 0x0, 0x20004005}, 0x4) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) 4m36.559065207s ago: executing program 4 (id=15364): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) syz_genetlink_get_family_id$nl80211(0x0, r0) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="0f198d5aa5caa1c55b84b414797cbdd4e8c576a921a070fc828060506683fd1106a961ac55b5b8ea3342ca7de5559ca2c14e05e42aed8ba14b2c78cb540f71a817d80fbf1945a046ebda494a8048a106a4d49d7f214735ada53397db3b203885ce39ee48d69465935eade21ce36e61826c52c82f038341d9bab5687c740ed3c18897094e7e1391eb84a4052e03c0c7c39ae86d454938f65e284620b99481c33d9f5e5b7a6c0d7548723f55b213c76be37f40c850c38e265758ebd8238257a146d6eced16fd658a784c928fea7a841db1a7fd6520442dae5fc0d3a3d3a5f16fcf6fe4f062ecdad7d0f3c6cd339339533c0ef28ad1e2729907094c3de93c1b1b00ad6df89507000000fb7565d3a8e9eaea020ed173c2179fb03e0944460989240a689c7fe795d310be4e7a6b778a903280dbf426b39c3603c49049980767e31edb997f59785184cbd7b9070400000073c745f71db0906cb51780f908fa61634af8ac85d9f04f3dff0a948e81cd3229a59aaeb00995358155343e3239588a0383e4df109d5ca24276d0d83a27d0e9bf681c1bbea12a6f3c20ad50f63430333bb327eb6ae32fe8809065bce26d2dc2fbb2b48d404637d61fd86852e0e1b6ccc6f75b1107aaa5f60ef45f94e953b3f213c3cb4ca4c716565078c666f84e1a99bb4cb5c7190648132f6ff1f6cb79b93f20752753c938da6241607a742361d995188b23cb4b8269e98e822585695962620673433748e476f7cc3e37db88639c525ff3a502c82c283b00aecfe7734ab369e1ed7c75e27a5a333641817baa3ea37844e20e6266c5095abf9d47ca5f8ad93f1a4d8795daec222ada00d65cf91425fae7939ceaa8d94ec1ab5082e1d251c27b3132119b350e81771f3733be232ffb90c03a818bf458aac3314007c3e35d5e4bed6b897608b01e7e26a54433e5f5c74a2ee3c2fc50067be05a677f122b7dba7010830b879a41b579d44158fb89ea05761d2d369853bea84dfb8081ed7b891dcb3bb3361534fdc5252e4964aed936ad2838e7af14fc65c7c1c6d44c6256f2462ae83cfd6a6b2651da607fe79d345e5080098e9e6e7482cc5c267e00d8d09dcde70b60fe6220fe9530547201664db91cf1885ecc2f106b66cd99131523c99f6102ddd7403791b3a7ac59b256cc4c938fe01740ae4f19b5204ca305b1666b0c2a7e5015d6d530995843adfbac3954306d4cd82257d4d2c3283d45dbae43548fed9879328f114f7c8238ac955391b24614d91be1701ae07c170a9c299fcf3d0ac4cea07e88fbf66b697883af17a06ac3f9954eb2fbd20f101802cd023fc48c5d464c16059cc9dce8558c5322ac7612db0e2725427628c2c41a21f0d2f3962e32f710bf9e216ff1694e8d88c8a81328744b36d9ef9f08c0ea3ccd4f8729e2f00a048162834a95", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x13e, 0x0, 0x0) sendmsg$nl_route(r1, 0x0, 0x40000) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) pselect6(0x40, &(0x7f00000002c0)={0x4, 0xffff, 0x645b, 0x5, 0x854c, 0x5, 0x67, 0x5}, 0x0, &(0x7f00000005c0)={0x9, 0x6, 0x3, 0x6, 0xd, 0x10000, 0x4, 0x5}, &(0x7f0000000600)={0x0, 0x989680}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000003a40)=[{{&(0x7f0000000000)={0x2, 0x4e21, @private=0xa010102}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000d00)="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", 0x1000}, {&(0x7f00000006c0)="78da797b9c0d738a2f69b8b25dcb9e28a1cdb1182688ee477b7860dda9f3053bbf14b6fa5129e99fa9109ffe966c4911c9f3f7823f09dac4e9ae1359d0b9e40868dc72e1ef973186d8fd8321cbeb8b49978bf8cd2ba06d618009695e9a01bd14b5f55ef32b2e9dbdb8e64300333b9ec8f74269111c769692bd56c3e753b89d07801096f13fe93de1d84bf73cb8871c2ed2f3a1546858ede3933f126b5daec02c9dc254ae3fecb531cdc1afa8727fee53fff3812a4b7071d6eeb651bd4887458bebf10b6aac9210dc06860e24932d5f0c4f62a5f42ca3cb83fd", 0xd9}, {&(0x7f0000000080)="75738953da08ac486c47856b0df64805474cdb66923dfc088df490f47e52ef1af045afadcee73d0e671d7cc7f04278b333d07f49952e26234b8453bfb9c04082d6879f8d1d5ffcd472b12eccb5", 0x4d}, {&(0x7f0000000140)="41179bb86094b29dcf4334469e96e3f64dda1aab", 0x14}, {&(0x7f00000007c0)="717e2b94d6743086ae86fe68df0ecc8c326bfeb52cf22e595998188eb44d476b59b32013e449692f904934572deed73bb78026ec7cfad746abf566352c94845463106e1f51d0abf9399bfa879a27575761dd71a0a7b50998a0b26996a906dba7be1cf914db9b081996e220064fd6075a444f474a03397e3bb8f9b03e4172e9bb9e78d7d9f508e412956b663e1a5c5781ae6aace00273", 0x96}, {&(0x7f0000001d00)="f880583e2e2a80494e2bfa78d75e67c538dd3c8907d35fc7b8f4a28e0765d9d6317a116e526e66685b7fc7f62adad6df19cbf37c41cb51d9e08efd2331a1d2f025f840701c09237e8531914e20b6c70c53159d7e96fca2818f558954f819c4c96d9828092a982c1eed9e53e1f3c42a32a3dec4f74000d0415a0715adda759c4a5c8dd8e1ba87482840de89e495abe0b72537413082fe5f91e1a2678f5daa46d8844e6f1742a4d18ce06ac6968c9ad5dd183f77ff208b06936cea320900e305c9f28002ef77993946f80ef8", 0xcb}, {&(0x7f0000000180)="02e97d7e", 0x4}], 0x7, &(0x7f0000001e00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010101, @remote}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xf5}}, @ip_retopts={{0x70, 0x0, 0x7, {[@cipso={0x86, 0x4b, 0x3, [{0x2, 0x3, 'b'}, {0x2, 0xd, "ac7b971f675e56de6d4c36"}, {0x5, 0x6, "c6651d85"}, {0x7, 0x5, "50b58e"}, {0x1, 0xe, "778642450ec815c1964b411f"}, {0x0, 0x8, "a1ba137e92d2"}, {0x5, 0x8, "92df7d0f375f"}, {0x2, 0xc, "1bdbd66d0fe0aa93ac94"}]}, @ssrr={0x89, 0x7, 0x6, [@broadcast]}, @noop, @noop, @timestamp_addr={0x44, 0xc, 0xbd, 0x1, 0x7, [{@rand_addr=0x64010102, 0x19e}]}]}}}], 0xc0}}, {{&(0x7f0000000880)={0x2, 0x4e23, @private=0xa010100}, 0x10, &(0x7f0000002040)=[{&(0x7f0000001ec0)="eaa6fe92c27c1af20075a0585cf3726ea4fe1395b0e9efcd23927feb7aac5f69ffda302874d429c50cb9d83f0b47356039424404675fd5a3961782", 0x3b}, {&(0x7f0000001f00)="384f44c2e50bdc4406bfb506d88e9be3b617aa96d17fabe47948dfe1a7a0d1e6fe705fee8b6f07fc946040fa1d721189b2c1", 0x32}, {&(0x7f0000001f40)="110386a678b236eefaa0ab4cf3dff1cd28bee676c333b9530b4c7b1bc98cece4dc3c1abc67704ae609fd036aa4c8fc2417508628b75029ad8ffd39da74bcad0ac2f8e66bcfcd5d3156efc65dfbffa8c2434ec85b4cf277335e30c53ee2bff86ce280ccdc435a5b31ff6327cc646737102a2c2118293269d8132f3e24f6a42958a233017c2a2ae7baf9578cd5af9b1cd6d2ef199f3c1a97052c0d83ce91d09587b5b8fabd4a75ffd53239ff5b01cb4f45ec1aff590610c7640ccce573", 0xbc}, {&(0x7f0000002000)="40b44c28e698c06cacf67a3e61", 0xd}], 0x4}}, {{&(0x7f0000002080)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000002440)=[{&(0x7f00000020c0)="34f4b4afabec253d4bfbaefd85174b1a358c14db2d12beeb005adc6dfa63a074c9e41cf5f68720f2490c2a66245f0cf565a4a57fb093483906414a1aa898d496a0f503383dad888aaa8175b5a850352497b3cccc86bc6b28dbf47f0a706d6f54391924c25f68c990902137442a2a563c493c1a932fc2e13161a63f6e2860d3cdea1fb4758480817acc5fd6fcaa635e3554ca9da040c779e963afa8561c40751fd370590b9226add1f62a87087319868d0e09a8f6f2592f5adb9fef45a6edcaef0c4cfa4298d9a1211037a6c33ef47dbe1cdaf3d3a775496e794c2c0ecedd3a0629b2050805dce195d823662ad3c5739e33139e95452cad", 0xf7}, {0x0}, {&(0x7f0000002240)="e81b8bef2bdf4948b1d0cfef802a1434db0fd5115273672d0fd79701a473c0c1009c4b06b943b238c41fc5a69fb1a69d43321db15fd4c0a7a2682d70fc1de908cc01228da3354a005985555a6c3affe6b8b62b5a846232946f4816e2838059735d1784e009a488440ad0c119770bf337cf42aed6b05d573beff66439938a18384400d739017c085ed4419dc91bce98edd1015d523e4fba9fed76906209874c0a78db8c40acdfa8c7aa82fd81f77fc6460bfa6060328ffb5eacc80d29052c17cc3b4e681e858b9845951bb54c19442a09f7", 0xd1}, {&(0x7f0000002340)="26b6e6facbbbceef46da0e7c8cfab670ee10e5d38700567a7efa5eaf9ae33ed90cada8ff0a185488805d58bb3664367b52b2e1ccb4b1292d1ef4db6498199203a855a6367395ffdba87c1515165b6d1cff01a5788d05dcb06e498b46cd7b6f", 0x5f}, {&(0x7f00000023c0)="e8b778736c3763086c0d11316a452e16f6a14795be7c52d25d9243c5e85f745696ce9174006ac1c8ea17d199f28a93673d333697f904d9f5d7e4e3b7064eeba240258bb6184cbbb0b8a55e7e077997b10fc9d4939e1d3fe515f702c10aef22e46250a77212c0f11c2bddfc4284f5", 0x6e}], 0x5}}, {{&(0x7f00000024c0)={0x2, 0x4e20, @empty}, 0x10, &(0x7f0000003980)=[{&(0x7f0000002500)="1d9d45699ed775cb263c907a73ad8c415ed899b3f1bf2e0e31f4add1268c85b05e5db8344fc8eaaf8956b7aed973cafaa7357afe587debb8c3fd404b24d47f0a6635a01dde7d1c0d6219dd8e41faa928ec4813c6e6c71618aa62f2864496c068184ade18634f720e2a6bdb7508f0e9", 0x6f}, {&(0x7f0000002580)="dd0532b39a8fa5be731492de3db2630a9e95f11f5c96b1d0d2e8c0872171d179cdebec2fd3e00aa41ee4f4d792207cb230e68bd57f2c93656d5e4cbd230e30114426864fbc893445d19dfb6a4501209a6aff3ed7a957ba047640de9e276a3e120b67e7c43c5db68feece6905333fae1c00df80c5f27ca7ea4008a29a370b0a49a73abdbde271f8", 0x87}, {&(0x7f0000002640)="85615f741865f080bf075db6bf7d3d307af6676fb4286e068216e36902f57e3e50240ae37c4dcefeed8549474676f5840b28088d0e329f56fe6b97829c5a57140117c2859994ac", 0x47}, {&(0x7f00000026c0)="0437c23bd9cc8bd1b328d211b89e9fd5fce2536e133eee7389a487991020f0ebf32ee4e6b05aa4c92159aeae6694647d939c172122d65852c4496f166ed8d1ee818ad680ccf0a18d94ada074ef721cf275d615ab2e8282a4c5fa7d7e", 0x5c}, {&(0x7f0000002740)="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", 0xfd}, {&(0x7f0000002840)="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", 0xffe}, {&(0x7f0000003840)="7be30228fdddf2d6aca79ac8ecffe3cda8bd2c8f827ca2731024a80b73bf684bb39223fe69227d45569fba42cf2844b8858ec0e53697b12a16b6eef54543d2aa7d524ee20fb52d731d9e7a69182022c0fd3f68fce281b2fa1a5bb374c6771138fcbf7854310835550b2fbe936dca788ba88fcdfe6dd3fc7053c0572012af9d5715bc8d2f4383e6570eb4884ea891186e0afd", 0x92}, {&(0x7f0000003900)="0ab599ae0fb98245947084a04c3190d9a3504069840293c080601c1c79a3e4a66809dca6e1080460e551055fa2eae6a3454ad4e0076485aeda1430adae32d7e749b2ef2daf65c20efa87ed366bac24ee6575ba8beecb4f242e51d70fe9108e58a14d413e9393f70fa931ba9aea6b1dac30a1f75be2546129", 0x78}], 0x8, &(0x7f0000003a00)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x2}}], 0x18}}], 0x4, 0x0) 4m36.143276701s ago: executing program 4 (id=15366): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)="b91701811a1e42b5ba4375aa85a84e4f9c95a6c555a1f5c9a528732192fc2f922cad1ab69dcd8fe6992886e8a95d7a0869644c5e1fd07d9e2867458a5d5b13c9e077ce1b8df3c8827af7b4f1f325f69f92ee22e5a8f58df2959db69d16", 0x5d}], 0x1}, 0x4000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19}, 0x94) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 4m36.065933747s ago: executing program 4 (id=15369): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="8e00000004000000800000000100000028000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000003480)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000000c0)=""/249, 0xf9}], 0x1}, 0xa}], 0x1, 0x40002100, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="58010000100013"], 0x158}, 0x1, 0x0, 0x0, 0x4048010}, 0x24040014) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200"/28], 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000800)=@bpf_lsm={0xd, 0x0, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) socket$nl_crypto(0x10, 0x3, 0x15) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x4, 0xc, &(0x7f0000001180)=ANY=[@ANYBLOB="180000000000000000000000000000008500000060000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b200000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) ioctl$TUNSETLINK(r3, 0x400454cd, 0x306) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f00000000c0)={'pim6reg1\x00', @multicast}) close(0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000240)='qdisc_enqueue\x00', r0, 0x0, 0x40}, 0x18) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r5, &(0x7f00000000c0), 0x2, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000180), 0x12) 4m20.898224467s ago: executing program 32 (id=15369): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="8e00000004000000800000000100000028000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000003480)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000000c0)=""/249, 0xf9}], 0x1}, 0xa}], 0x1, 0x40002100, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="58010000100013"], 0x158}, 0x1, 0x0, 0x0, 0x4048010}, 0x24040014) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200"/28], 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000800)=@bpf_lsm={0xd, 0x0, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) socket$nl_crypto(0x10, 0x3, 0x15) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x4, 0xc, &(0x7f0000001180)=ANY=[@ANYBLOB="180000000000000000000000000000008500000060000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b200000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) ioctl$TUNSETLINK(r3, 0x400454cd, 0x306) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f00000000c0)={'pim6reg1\x00', @multicast}) close(0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000240)='qdisc_enqueue\x00', r0, 0x0, 0x40}, 0x18) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r5, &(0x7f00000000c0), 0x2, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000180), 0x12) 3.623642327s ago: executing program 1 (id=18182): setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x0) r0 = socket$kcm(0xa, 0x6, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 3.393344416s ago: executing program 1 (id=18185): bpf$MAP_CREATE(0x180, &(0x7f0000000300)=@base={0x14, 0x4, 0x4, 0x20002, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) 3.266927887s ago: executing program 1 (id=18187): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x7fffffff, 0x4) getpeername$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendto$packet(r0, &(0x7f0000000040)="6cbfeb4006df61664e50ddb7235ca00bd41ac0109196a3762d8756a83d1f4c031b231ae56e36cd1599e293f2bc6ea53c077fea128754e6a288e2b1885fe881cac66510b12e7bc6b5cdeb0b84c46133cd01491cc36d5e516f5feb7e0f7a1b5d2837c90168bd2ea6e0877a1f46507bd661dd27a33759c10e3a4c67f9cd6f157670f64c14e6310996406fffbb13c69e2a068e2793772b1123a649796b296e30709fe36a417fd303c88664d0733835b2031b8d275b", 0xb3, 0x20000040, &(0x7f0000000180)={0x11, 0x8, r1, 0x1, 0x79, 0x6, @remote}, 0x14) read(r0, &(0x7f0000001bc0)=""/55, 0x37) 2.582509511s ago: executing program 1 (id=18197): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b7040000000000008500000033000000180100002020692500000000002020207b1ad8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000e62a0000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$key(0xf, 0x3, 0x2) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newtaction={0x18, 0x30, 0x1, 0x4000000, 0x0, {0x0, 0x0, 0x6a00}, [{0x4}]}, 0x18}}, 0x0) write$tun(0xffffffffffffffff, 0x0, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r7}, 0x18) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000, 0x0, 0x4}, 0x20) setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@ipv6_newaddr={0x18, 0x14, 0x9535393fea6295b5}, 0x18}}, 0x0) openat$cgroup_freezer_state(r5, &(0x7f0000000380), 0x2, 0x0) connect$bt_rfcomm(r4, &(0x7f00000001c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1}, 0xa) sendmsg$key(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x2, 0xb, 0x2, 0x3, 0x2}, 0x10}}, 0x0) sendto$inet(r2, 0x0, 0x0, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) ioctl$sock_inet_tcp_SIOCINQ(r2, 0x541b, &(0x7f0000000000)) 2.141855489s ago: executing program 2 (id=18198): r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) recvmsg(r0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x2) 1.998742118s ago: executing program 0 (id=18200): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x34, r1, 0x6a98047402e98331, 0x1000000, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x50}, 0x4886) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@getchain={0x24, 0x66, 0x200, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xc, 0x5}, {0xe, 0x6}, {0xd, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x101}, @TCA_FQ_PIE_TARGET={0x8, 0x3, 0x4}]}}]}, 0x44}}, 0x20004055) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) r3 = socket$netlink(0x10, 0x3, 0x0) (async) r4 = socket(0x2, 0x2, 0x1) bind$bt_sco(r4, 0x0, 0x0) (async) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.901559295s ago: executing program 5 (id=18201): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x391, 0xffffffffffffffff, 0x4}, 0x38) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500030020"}) 1.793270303s ago: executing program 3 (id=18202): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b04, 0x0) ioctl$SIOCGETSGCNT(0xffffffffffffffff, 0x89e1, 0x0) pipe(0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xea, &(0x7f0000000540)={@local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "081200", 0xb4, 0x2b, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @local, {[@srh={0x3a, 0x2, 0x2, 0x1, 0x0, 0x0, 0x0, [@local]}], {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x3, "916af0f55560756c35981e9bb17b5d164b513ac5076cec8e627d1f11d4d2e0bb", "554be330d4c210f12d543f5c857e93a92c13894238af9d8dc4c51dd19e310066a58b96f1cc6bef08fe017c9a8cecefca", "9e2bfa55586b2b8667a5de151bc6966746a9d51a9b0c9d23df2a5305", {"ea35ee4f68295bbe625b292ccbc4b0cd", "74cbd05d2b4b910854d5ec2c9274d312"}}}}}}}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c00090008"], 0x4c}}, 0x40000) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, 0x2, 0x3, 0x201, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x101}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x7}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x3}}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x8}]}, 0x34}}, 0x60) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xfc) 1.718688029s ago: executing program 0 (id=18203): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec850000007500000085"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f0000007640)={0x0, 0x0, &(0x7f0000007600)={&(0x7f0000000040)={0x20, 0x0, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x2}, @ETHTOOL_A_CHANNELS_HEADER={0x4}]}, 0x20}}, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x20, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10}}, 0x20}}, 0x10) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, 0x0, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x40000d0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r5, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x60, r3, 0x20, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0xa}}}}, [@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6}, @NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5, 0x13, 0x1}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0x31}]}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x60}}, 0x4008000) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x6, 0x8, 0x8, 0x41}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000540)='signal_deliver\x00', 0xffffffffffffffff, 0x0, 0xd}, 0x18) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e21, 0x2, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x98}, 0x1c) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c) listen(r1, 0x200204) 1.718175203s ago: executing program 5 (id=18204): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) (async) r0 = socket(0x2, 0x80805, 0x0) (async, rerun: 32) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) (rerun: 32) shutdown(r1, 0x0) (async) r2 = socket(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x40000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10) (async) sendmsg$kcm(r2, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e0000004a008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) close(0x3) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) (async, rerun: 64) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000400)=@assoc_value={r3, 0x5}, 0x8) (rerun: 64) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0, 0x0, 0x7}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x60}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1f, 0x3, &(0x7f00000001c0)=@framed, &(0x7f0000000240)='GPL\x00', 0x4, 0x1005, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x94) 1.698218399s ago: executing program 3 (id=18205): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a0, 0x0, 0x111, 0x4b4, 0x1c0, 0xd4feffff, 0x2d0, 0x20a, 0x278, 0x2d0, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0x0, 0xffffff00], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6, 0xfe}, 0x0, 0x198, 0x1c0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2, 0xe}}, @common=@unspec=@string={{0xc0}, {0x0, 0xfffd, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@loopback, @mcast2, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040), 0x6) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x6, 0x6, 0x5, 0x0, 0x0, {0xa, 0x0, 0xa}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x84}, 0x40094) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4e20, 0x6, @private0, 0x7ff}, 0x1c) 1.663958604s ago: executing program 0 (id=18206): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000000)={0x18, 0x0, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000040)={0x18, 0x0, {0x1, @empty, 'ip6gre0\x00'}}, 0x1e) connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0x2, @empty, 'ip_vti0\x00'}}, 0x1e) close(r3) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@bridge_delvlan={0x24, 0x70, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r5}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x4, 0x3}}}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000050}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) 1.556790921s ago: executing program 0 (id=18207): r0 = socket$packet(0x11, 0x5, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r3, &(0x7f00000001c0)="d2013cc5b6e70f83763e7a27fec2df70e89fbf3e4a32dcc38ce936a8e5bc12f6e72de8e342f55d6e601e883366505d77b6aea856780e0a9c8b07d240482b5c1b8e3b1e349df7cd0f2962100e86d8a67854a145a92171b458ea5f0eb85ec93f7ea1b7acda43f9daf31556d7ffdff0552f81661b5e21753c11180348d45524463ef2b355b6b3dc19da9a660e41f415a95ea48ff642a7bbe6311c4154c46d3414e044bf914931", &(0x7f0000000280)=@tcp6=r4, 0x4}, 0x20) r5 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r5, &(0x7f0000000440)={&(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x4, 0x2, 0x0, {0xa, 0x4e20, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}}}, 0x80, &(0x7f0000001380)=[{&(0x7f0000001340)="a00041020eaa4da2", 0x8}], 0x1, 0x0, 0x0, 0x900}, 0x4000190) sendto$packet(r0, &(0x7f0000000300)="09000000e700140000007ef52f55", 0xe, 0x24000801, &(0x7f0000000080)={0x11, 0x88a8, r2, 0x1, 0x8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}}, 0x14) 1.546921193s ago: executing program 1 (id=18208): r0 = socket$kcm(0x11, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r4, 0x0) r5 = socket(0x8, 0x3, 0x0) ioctl$IMGETCOUNT(r5, 0x61d9, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r6}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x4, 0xfffffffffffffffd, 0x9323, 0xfffffffffffffffe, 0x7ff}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x1, 0x5, 0x7fffffff}, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000fc0)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x31}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000040)="b8b2cc1e00c1dba49d23bb66cb3a66bb0280000788fb", 0x16}], 0x1}, 0x24000004) accept(r0, &(0x7f0000000080)=@ieee802154={0x24, @short}, &(0x7f0000000100)=0x80) 1.434722248s ago: executing program 3 (id=18209): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002536702500000000690000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x1c}, [@ldst={0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffff0}]}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0xcab5, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a38000000030a1b0000000000000000000a0000090c00024000000000000000010900010073797a31000000000900030073797a310000000014000000110001"], 0x60}, 0x1, 0x0, 0x0, 0x4048851}, 0x490) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="310300000000000000000900000008000300", @ANYRES32=r4], 0x24}}, 0x4000) 1.407687327s ago: executing program 0 (id=18210): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x2, 0x0, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) bind$inet6(r1, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000900)={@link_local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x8, 0x11, 0x0, @empty, @mcast2, {[], {0x0, 0xe22, 0x8}}}}}}, 0x0) sendto$inet6(r0, &(0x7f0000000580), 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2, 0x6}, 0x1c) r2 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x10000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x420}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) socket(0x400000000010, 0x3, 0x0) r4 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r4, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) writev(r4, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) shutdown(r0, 0x1) 1.333890247s ago: executing program 3 (id=18211): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TRIM(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f6, 0x2, 0x70bd2d, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0x4004810}, 0x20000800) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r3) sendmsg$NLBL_MGMT_C_ADD(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x44, r4, 0x1, 0x0, 0x2, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}, @NLBL_MGMT_A_DOMAIN={0xa, 0x1, '&%[{$\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000019}, 0x4800) r5 = socket(0x11, 0x3, 0x0) socket(0x0, 0x5, 0x4) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r5, 0x89f4, &(0x7f0000000700)={'sit0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x50a10, 0x33822}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x480c1}, 0x240408d0) 1.206801107s ago: executing program 5 (id=18212): r0 = socket(0x3, 0xa, 0x0) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r0, 0x8982, &(0x7f0000000100)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1200000004000000040000000200000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000000000000000000000000000c0cec66dcab627b538007a9c9051d9def6c10047c5b424f2", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r2}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r1}, 0x20) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xc4}}, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r2, &(0x7f0000000040)}, 0x20) (async) ioctl$SIOCGETMIFCNT_IN6(r1, 0x89e0, &(0x7f00000000c0)={0x3}) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x7, {{0xa, 0x4e24, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0xe7}}, {{0xa, 0x4e22, 0x2, @local, 0x4}}}, 0x108) (async) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$X25_QBITINCL(r5, 0x106, 0x1, &(0x7f0000000000), 0x4) (async) r6 = socket(0x1d, 0x2, 0x6) (async) getsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000340), &(0x7f00000003c0)=0x8) (async) unshare(0x22020400) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, 0x1403, 0x5201b6fc21c13c7a, 0x70bd28, 0x25dfdbff, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ipvlan0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'virt_wifi0\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x8004000}, 0x24004000) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x13, r7, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r6, 0x6a, 0x3, 0x0, 0x0) (async) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004840)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="3107000000fffa0400003800000008000100"], 0x38}, 0x1, 0x2, 0x0, 0x20040080}, 0x800) (async) sendmmsg$inet_sctp(r0, &(0x7f0000004380)=[{&(0x7f0000000000)=@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000040)='r', 0x1}], 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="20000000000000008400090000000000200100000000000000000000000000021800000000000000840000000000000000000900"], 0x38, 0x20000010}], 0x1, 0x4000) 1.141685593s ago: executing program 5 (id=18213): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0500000004000000032000000c"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffeff) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r0}, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmmsg$inet(r3, &(0x7f0000003b00)=[{{&(0x7f0000000040)={0x2, 0x0, @empty}, 0x10, 0x0}}, {{&(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000002940)="2e7be370f88e801dcbfd6fc9b169aadf2d788f31060000002c9c1ea0d17dc8387758e4428f3e298ab317415fd80b0cf47466f42c8884034bfe4e7ea097451bdc05d7b582537e4ab091cd008a8000000000000000368d5e9e19a9d33882be8e62fd0bbfcc94c842aa81c90fab7ab87fa321", 0xfffffffffffffe40}], 0x1}}], 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000300)="09000000e700140000007ef52f55", 0xe, 0x24000801, &(0x7f0000000080)={0x11, 0x88a8, r5, 0x1, 0x8}, 0x14) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r6, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000c80)={0x544, r7, 0x100, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_WANTED={0x478, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x5c, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'tlb_flush\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\x16#\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffff8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_MASK={0xc8, 0x5, "2b540e91aeb2c905fdab23663750ed9e3876dc84eb212c9705bafa310b9d8bee1eee101bb1aba34aadec66dcf0829149ab997f996fd74cbe72a3950971639bdfc6d74b1f4fb609e34079155d1457d4e0bbdb720d27f13b0d41a05baaee65ae80aa298b27032741bd062505127568dba497e663c94e8093772d0bca35c3c6ec8f84766ee67e8d4ab1671a45f87bece77487e5bd8beea89aa2d2098ba1aaecf2735720603cafd00e7c63671cf17ed7f380a28e4c2087270afd56fb333e6503cdd36a2fc94a"}, @ETHTOOL_A_BITSET_VALUE={0x100, 0x4, "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"}, @ETHTOOL_A_BITSET_VALUE={0xaa, 0x4, "740a5b1a0d4c6ab0b009690f7ac56c7bd8b7ce18b107ff35a0933026444ba40c8712c6b852383403d4f8a8ac1a9910c54a1aec1a7072e92ab718f9a57e3ef4ae7c35986c6f87c8985e38981dc571dc623b8a4db44e4f8a7cedea1d8039a44c62188307e5878a4083446a98c9a75c6a7acdb45f33123e41c49426f185abaac5e1bd64777869247905137b431ab1a7d6a5a52e0304625d98296132502931b1be1a7d99ca0234eb"}, @ETHTOOL_A_BITSET_BITS={0x44, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '(+\x00'}]}, {0x4}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x100}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}]}, @ETHTOOL_A_BITSET_BITS={0x15c, 0x3, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '@\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '-%*@\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'tlb_flush\x00'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffd}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '#\xa5\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf159}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '+\xbd:\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ',\'\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x101}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'tlb_flush\x00'}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa46}, @ETHTOOL_A_BITSET_BIT_NAME={0x16, 0x2, '-^[^\x01\'@[)\xfe-&}/,$)\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}]}, @ETHTOOL_A_FEATURES_WANTED={0xa0, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x95, 0x4, "7f861e410d13e68335e6c5f96aef59177712bd26a5b7a5ee7374b324d79ade0debb1527c3554de3eb2b0cfa850e7c024d15cdf9ec38e4a3883852f4631b6394e6f4a5266df96cef1c67d740426d9281cae4b82583ed7caacdaadf9e0bff114ecaecb843c6ae2ec459921e0c950c0c9c7802774bbc988bf136131629abf54971abb1a6b88d4b572a5e0562bba72fc9f9967"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}]}, 0x544}, 0x1, 0x0, 0x0, 0xc0448d4}, 0x1) 1.123144724s ago: executing program 2 (id=18214): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000680)={&(0x7f0000000740)={0x2, 0x4e20, @local}, 0x10, 0x0, 0x64, &(0x7f0000000240)=[@ip_retopts={{0x10}}], 0x10}, 0x4000810) 1.010791013s ago: executing program 2 (id=18215): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)="b91701811a1e42b5ba4375aa85a84e4f9c95a6c555a1f5c9a528732192fc2f922cad1ab69dcd8fe6992886e8a95d7a0869644c5e1fd07d9e2867458a5d5b13c9e077ce1b8df3c8827af7b4f1f325f69f92ee22e5a8f58df2959db69d163a50f24485ecba1927b9eb6c227224ad5720a2d097fe61894aec1d383ed10e", 0x7c}], 0x1}, 0x4000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0x18, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018", @ANYBLOB="0000000000000000b70500000800000085000000a7000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x19}, 0x94) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB], 0x6f4}}, 0x0) 1.010504955s ago: executing program 3 (id=18216): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec85000000750000008500000008"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f0000007640)={0x0, 0x0, &(0x7f0000007600)={&(0x7f0000000040)={0x20, 0x0, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x2}, @ETHTOOL_A_CHANNELS_HEADER={0x4}]}, 0x20}}, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x20, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10}}, 0x20}}, 0x10) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, 0x0, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x40000d0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r5, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x60, r3, 0x20, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0xa}}}}, [@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6}, @NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5, 0x13, 0x1}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0x31}]}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x60}}, 0x4008000) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x6, 0x8, 0x8, 0x41}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000540)='signal_deliver\x00', 0xffffffffffffffff, 0x0, 0xd}, 0x18) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e21, 0x2, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x98}, 0x1c) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c) listen(r1, 0x200204) 980.318795ms ago: executing program 5 (id=18217): r0 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ppoll(&(0x7f0000000500)=[{}], 0x1, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003a80)=ANY=[@ANYBLOB="883800003f000701feffffff02000000027c00000400f6000c0001800600060089"], 0x3888}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x9}, 0x1c) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)={0x2, 0x3, 0x0, 0x2, 0xc, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "fd"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x36}}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0xd5}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}]}, 0x60}, 0x1, 0x7}, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='bic', 0x3) sendto$inet6(r2, &(0x7f0000000580), 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2, 0x6}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)={0x14, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x4000804) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0x42, 0x4, 0x370, 0xffffffff, 0xf8, 0xf8, 0x1b8, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x11}, 0x0, 0xd0, 0xf8, 0x0, {0x100000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x0, 0xf}}, @common=@unspec=@connmark={{0x30}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@state={{0x28}, {0x7}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ip={@multicast2, @private=0xa010102, 0x0, 0x0, 'veth1_virt_wifi\x00', '\x00', {}, {}, 0x0, 0x1}, 0x0, 0xe0, 0x120, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x9}}, @common=@socket0={{0x20}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d0) 910.264728ms ago: executing program 2 (id=18218): r0 = socket(0x23, 0x5, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) socket$inet6_icmp(0xa, 0x2, 0x3a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000010000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r1, @ANYBLOB="0000000002000000b70500000800000085000000c200000095"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100}, 0x94) bind$unix(r0, &(0x7f0000000340)=@file={0x1, './file0\x00'}, 0x6e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1f, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x51, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) 838.755873ms ago: executing program 3 (id=18219): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_KEY(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010026bd7000fbdbdf250b00000008000300", @ANYRES32=r4, @ANYBLOB="1c0050800500021302000000040004"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x8814) sendmsg$NL80211_CMD_LEAVE_MESH(r1, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r3, 0x200, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000040) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$unix(0x1, 0x2, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x58, r8, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x67}, @val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x7ff, 0xf8}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}]]}, 0x58}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$cgroup_int(r13, &(0x7f0000000000), 0xffffff6a) ioctl$FS_IOC_RESVSP(r13, 0x4030582b, &(0x7f00000001c0)={0x1100, 0x2, 0x3, 0x9}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r14, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r14, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}, 0xffff36bf}], 0x1, 0x0, 0x0) recvmsg(r14, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x40002000) close(0x3) r15 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r12, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r15, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r16, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000040)={&(0x7f00000006c0)={0x1c, r11, 0x20, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r10}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x48010}, 0x24) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r10, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0) 803.763413ms ago: executing program 2 (id=18220): r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="190000000400000004000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000340)=ANY=[@ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) bind$can_raw(0xffffffffffffffff, &(0x7f0000000040), 0x10) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x9}, 0xee2}, 0x1c) socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)='X', 0x1}], 0x1}, 0x40c4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r5, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @rand_addr=0x64010101}, 0xc) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100010000001300000003000000400001802c0004001400010002000000ac1414aa00000000000000001400020002000000e000000200000000000000000d0001007564703a73"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) bind$rxrpc(r0, &(0x7f0000001280)=@in6={0x21, 0x20, 0x2, 0x1c, {0xa, 0x800, 0x8000, @mcast1}}, 0x24) 646.147374ms ago: executing program 2 (id=18221): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x800) socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) accept4(r1, 0x0, 0x0, 0x800) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x22d00, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r3, 0x4004743d, 0x110e22fff6) close(r2) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000001c0)={0x40000008}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x14, 0x30, 0x53b, 0x0, 0x0, {0x9}}, 0x14}}, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f00000005c0), 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x30, &(0x7f0000000b80)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00 \x00', 0x1c, 0x2b, 0x0, @remote, @local, {[@routing={0x0, 0x0, 0x2, 0x80}], {{0x4e20, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) recvmmsg(r5, &(0x7f00000099c0)=[{{0x0, 0x0, 0x0}, 0x4251}, {{0x0, 0x0, &(0x7f0000007040)=[{&(0x7f0000006040)=""/4086, 0x1000}], 0x1}, 0x8000}], 0x3fffffffffffdfc, 0x10002, 0x0) sendmsg$can_bcm(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa}, 0x50) ioctl$FS_IOC_GETFLAGS(r6, 0x80086601, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xd, 0x20000000ec071, 0xffffffffffffffff, 0x0) 546.694338ms ago: executing program 1 (id=18222): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x18, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}}, 0x4000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000000340)={'ip6_vti0\x00', 0x0, 0x4, 0x0, 0x2, 0x1, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x10, 0x1, 0x8, 0x2e}}) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x6, [@const={0x5, 0x0, 0x0, 0xa, 0x4}, @func={0x2, 0x0, 0x0, 0xc, 0x5}]}, {0x0, [0x30, 0x61, 0x30, 0x30]}}, &(0x7f0000000640)=""/195, 0x36, 0xc3, 0x0, 0x6, 0x10000}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f00000002c0)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x1c, 0x0, "246575a4000000004fb62fe6bce0eef5607264c7f28557a8046964d292934c2a2bb1dcc5a80c0107040000000000001e0000009000000000000800"}, 0xf0) setsockopt$inet_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000e80)={@in={{0x2, 0x0, @private=0xa010100}}, 0x0, 0x0, 0x22, 0x0, "70a59b8ef73b52114bf0854b6d184de8fb2add2d2bb9149a8c9b8ad1ff7568565a98f80146847b0c6c4698efb8d42bed462e33eef5219090f01c40a3103cf5a30f2c0cdc339b7665ca4fe3c1d75e3fda"}, 0xd8) setsockopt$inet_tcp_int(r5, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r4}, 0x50) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000180)={0xfffffc}, 0x10) write(r7, &(0x7f0000000000)="1c0000001a005f0214f9f407000901ff80000000fe03000100000000", 0x1c) r8 = socket(0xa, 0x2, 0x0) getpeername$packet(r8, &(0x7f0000000200)={0x11, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', r9}, 0x50) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x20, &(0x7f0000000280)={&(0x7f0000000a40)=""/4096, 0x1000, 0x0, 0x0}}, 0x10) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r12, &(0x7f00000000c0), 0x9) sendfile(r12, r11, 0x0, 0x10000) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000020000000000000000800018150000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff0000009ac74f51fe657400bfa20000000000000702000000feffffb703000008000000b704000000000000850000005500001995000000000000001216f2bf96fb6c1c4a0130dd566d4a53195214b66a6e2f1f2560dad9beac8fe08f863dd929a7f7bbc2ccc0f65f41f13f9b336ab1d15714dae4bb99458d19a6c354f79f29c20713a7327da5c676e30d1eb452721fe18427d996ccbe88fce9d7260c8507"], &(0x7f0000000300)='syzkaller\x00', 0x5b8c, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @xdp, r11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r10, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x10, &(0x7f0000000300)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4b, '\x00', 0x0, @fallback=0x36, r12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19, r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) r13 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0), 0x20100, 0x0) read$rfkill(r13, 0x0, 0x0) r14 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000540)=@o_path={&(0x7f0000000500)='./file0\x00', 0x0, 0x10, r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xd, &(0x7f0000000140)=@raw=[@ldst={0x2, 0x2, 0x3, 0x5, 0x3, 0x18, 0xffffffffffffffff}, @ldst={0x2, 0x2, 0x4, 0x4, 0x2, 0xfffffffffffffff4, 0xffffffffffffffff}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x37}], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xcb, &(0x7f0000000200)=""/203, 0x41100, 0x0, '\x00', r3, @fallback=0x23, r4, 0x8, &(0x7f0000000480)={0x3, 0x2}, 0x8, 0x10, &(0x7f00000004c0)={0x4, 0x0, 0x81, 0x8}, 0x10, r10, r14, 0x6, 0x0, &(0x7f0000000580)=[{0x4, 0x2, 0xc, 0x3}, {0x4, 0x3, 0xf, 0x5}, {0x2, 0x2, 0xf}, {0x2, 0x5, 0x9, 0x2}, {0x3, 0x2, 0xc, 0x3}, {0x5, 0x5, 0x4, 0x6}], 0x10, 0x7}, 0x94) 413.900855ms ago: executing program 0 (id=18223): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x400454de, 0x0) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1, 0x100005, 0x5, 0x5, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r5}, 0x0, 0x0}, 0x20) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000029700100001e0a01080000000000000000070000060900020073797a31000000000900010073797a3000000000440103804001ae5e34010180b4000100"], 0x1f4}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x460241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r0, &(0x7f0000000140)="d2338c47000d040dbf3f9dba71b97d65825686a2f8d3096084b3cd18a71fda016d349b0caff288a6acd8b318a3f8facfd131e2801fedb94b718f4e30ac73", &(0x7f0000000240)=""/66}, 0x20) r7 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r6, &(0x7f0000000840)=ANY=[@ANYBLOB="0800080006000600000014000000450a0fc0006600000b89907864010102ffffffff3297e3ba0fa8a2e71bd9fe1a399b5110420b70460c0dad392d66248a43540df968e7fcaab34569c0e36170578c0d3c546a98b26295e2592f360905866eb4720fed03a977a3df4224895629fd6ccec64f13a999f18f518e3ee28798381975e862f1db9dccdb2f1c1fb60f5ffc7a339d40a8bd1f24cede8a32f186f142e194d4fb48224759faf813ea80e6a853e79b4fe27fe3e1aec5897b314a7f0d515b07b1835986b4885e9826d902c40f16cd77c58b6433ab039955ce9db11f36f459e7114ace6c9989eecea80a81fd39f339356c7c3391af83da2486503a7973f6db4806cf3e5ca94cf7e1f79fd00decd76100c18251a59d1474caabf4d3ca6a9a9885df710e68c5b0dc11832dbb5eecb5c88c2f8f02bdbd88569ad4a740359cbca8c378118220d73bdd1e661c3a74f77aa931b11cd38119b0f084bb96e84803fca6566c33ee1e4e34ab0253fbf24f9f5974af5e1fc2a43a4ec9dd9928a8f38a128ea27c429300ae5a6bd7740471f973d8224b2b07879f4fbe7dcbed776a72ebdc713bcf1d7aa45b01c32a1003e6670d58510bd79ba2fde5cb2b82cef2cc315648f4e9d96d848ba327949b8926253cbdef6888a8982108b6ac7a1108533dd3fe125002e2e286362d1055082a9d73ec5ac3080f2a501ff27250b62c8965f371cf92b32d6422d79f66261eb08a2f8fe50049e1d0834208cc957d0f1376457a90245816d7642412897fdd2f982fdfbc3af65aa0446b00c767b79aec40e460887ea02188e3a0960eea39b144859467b881978378c9fd593259e0f63148179fe2c2f6d40987b63a6e384e63027f03d8039d707522942d5dc88fd842524d006290b6a65e9cc86cc5b401a60ec4aedfb3bf4d0447bb681810a16b9684b72c2f4593ef834a0203e78cd1d9dbc978e9ae8f3ab62c07f1e41d59470decee7b0cc41ac49e4b7589ab6da65849f62ec217bb39ed161e7d337822d96badbd74d66451ea9a74bed591dc9631bf639dcf7846ee428a9fa55bfceedf3b1c23642f3b58dd0a7273664c6c49c9160a4b9cc5b72d0210e305b94e2cb09ae1d4af9d365b5093851f229c8c30aef75d45ccdbab4b86d801a9ad3b27f26ba601d531c0743717aa7aae29d37f496fec7682c5a1abd321ad61941a2d23fcac6af1d1875e308c8d8c64a5152be47b59c09d293f46b857310a99f1885f0a49d432aa0d39a3e8fc885e75e66b63215133175a19267c8d0adf7d8f644e742ec4369d1405e99e63b78727f135e0243f24d9ce354a1562102ee8de4c191508343b86bf7e7519ddd770ce55e17e590561b2f437194c97ad46622a6ae3dd68d9993e6744954f4cd308bd6594fdccedc578e80aed274a65219697229059723ac37d535cca0e9c314e7941b4160bbd2ffba71f26ffe3228431bc81463078ad70583277ef18bce23ca2e5b9a00670956ea8e0e2c739c006106c8c9ee3f92ba728d8490742b74a9a18cbedfc4e69bb87e0da4c7dfb964374c28c837d4641fb99a19b233675f8526af395335e0185cf3934805442ac379980b687a7128e53284ba9e741b5fe9bc969bfbd55cbce76842915e076e2adf844338d16d3802c681bafdcc60465bd34dfc2d1c069ceee40060e0570fc1275ccabfe3f9be3e84ceedf72cd649c082232008e2b0c94594588c00e0fe911bbf1c12eb6c37ce05674a7597feecf27f5e051ffa824d9ff93638dfa9a84c77562aa2cf897f55a97b79c18544ad03480e1011b8f93e0ead9c2c6672448f585c5803ae99be777fbc662ef4450c1e936ed8b3c8047f00e72adc84561f417f8e5e1dde4967005d96a64fc75d9f486b3ebdb5904a0a56ec48542f0efce939f66fd69259e7376ad37e84434ea90f35b2d3bd63b5c36b267d8f2c7dc5a50b46e00ed086dff8b039e07b84c60611269d4f282ad04dc8e0b481eece2f8a614734be73617f0ad5be195446b09dca4cf1f32653dd3e188aece76f3014deb2ba61744835c0f735234b6a4637c948a7b4fd4203b286ca87d669e325d70277075b094f59eb1dff6c9c05c40d5e464c563df79486e1a32e6ed9bcf675aac7968b4e98dc4e210215b0d3b6a2525b2e3df11f3f1490eb39cabffbe32e23659121fde8e4e346e0f595aaf3666a5f6f118c1a1128039502ac04c40b85eb4c54e6c95b8d1c2aac74ae9e1c355ccde9d54d5d833293f5df09224482179e5bcd8e227c99172a6e14c2cd4e6462ceb0a905a1d64804840ce62e350c6efac10a7fcb029f84af64e2256d45afd3b3f59379895740e0cd2fd24c63264f785bb6e3f40ec72ed67d1a7d87dd264743d9c951cb5aa8bc6f1d1bc9b23303d5aa7f8f6f961326757456057000cb2bacf78cc229002777e932c2640b8dfa793846ca49fa93996db95104a8808a1906b19df17e754b90582b6c49efb3ddce067dd9292291cfd2bb0323ce8098f29e4fce0de31cf5c7e2e2da5d0d0996a8be776de8fecfd3ce68e80d21f1701f6b90ac51278abbd727d19415e0ebe001b990b177b8db0c592b18a4b5e4a6221902362e5b20e6e6f2131a5a5e03c1150b179ef40c933c2fef1b79de738652ec4c32565f5cf751a11db177099c4e2e5bd7616cd0dd501d5bfccf5691de3cca590365328648baf8a9487a3c212193c9bb837594460967e823067a9465eba7001eaf609a810488ef5c147aaa5e9e8c75b585ac3582b6915e20b5aa2f79b7a94857122988c56dbce1ea52de1a56652e839bb853be3ee16052b33fb83ca54d8e4e19440a5e81492107043a66286f63ca87a1f7b8a4e9547a7eb6005419cfd28cb37e9e374f4d0143973286e87070754025c1a6fccfdc6858eaca8c35ecb19584ce7141cc79a5bc813469161b87a19fc21f3373d1f25b3427916dd1be2a589b70ea3b39fcc7801e13beaf19b76164faf3dc4ab8faa5648d24eddd6caceaa0d5ac9cad633c19a4a4d059ee823a49b7cf82c5777d376c111f58ea8fd473429907852301a2c856f27bd0c687ab5be0e2bbef64ddee1601375a4440e3f59d60f57caebfe457f82432523ec4a61cdbb7f1e91e4b05fda892df131c274b19929d26f7a5a6d3ca487983f729601ed9bb4bf5c1cc3d453d406e9534688dec6a2dd0b9db149365c125a95e129565e62cc91f7d960abe1055b730ae0994e7eb08392d5745d0e4f529c4defc3d3e43d0815b0cc63effa88d20c13b14e780c2f6c89a1ee5e4db45a5c272186cc3e51b13dab3add5f467e8ca0f4c45a1fc76db2f0cbf794102946aafcd8cd8a3e935a606b9721645c4d550ae0907f345593736506efc626498c974753d474a73626041d3a54f8fb50de2a6335611a3779da3a02daceb2256d9b102d4d30dd3cd389a04b1a7a6076879f36534bb3379debb46ed1fa2c40096c752017dd024345c58313b43070ff7bef94dc3cafbe6ec20d59e5ea3c196ba3b783bfa87384407efc664cd350c80ac397516018e35371956e414755cde304d2a228c1540ba6fd6a7402d11c666964f024da4c016eb556ba2c5fab86c60c12efb1496295d80f0383526e8e0fc55a287bbd3cb966a916f57958d8b6ef97aa0c4b47f7746bab6b99698c1c96b25c4e2e084147866fe0970b109dd26984adc0758eb6442712cc46dcd8ed3038b0595252eed1b8a46525862662d1e67eba66ac341f8d27853eed54854f488f079bd48df6ce7a4be8b1b61fd23a2dc4d3ade0992011539cc63f80fcfc75008c20cb639348cb218f8f476a6d56917f4ca07e67fc20ea2e9642eaf2182b397e279f5f6c70438fb8aa39cba788588c181461ea7efe1a0dd5b95eb26f7158b91012f7ce0ee1b4e79ce4da377bea4551738a0f491a84f19b3be9827b4469c299527aa9c20b8bf12f919976a0356bba720fb91010763c79bcbb10d89280f0f97cdd19aa0d54828b308195fac170613cf4b515e340a9ef2c97f618a9f50b30ae34ebeed9a38b4c6969680accc740b154ecb014fb5d543a59ccb98a7de2823a2dec39f331cb503eb74fef61262c6d4050bc723caee834eb28c64ce007f6027375e936b62387cf1778970e88b0574a0106d4c855be7425767c551b2fa644d9d8a59f787e7610581b768057d229673344571c3d6e3f10975b2859f568398b1f38f89524d9ad0c1588617c3883a1227b714c81cdf28da54f33968c1c50f28da01c308eb31d319b3e77f96bec001c9300000000000000009cc0062283ac112868592619db14d629c47bfb793a723dcd2f7b07ae4ec14ca3ef4b955ea5b2b153a279b080f6236d418075b86850974c8850efb306d5c304e726bf2643b4403e6d46b0e0395b02e93308b4b2c3e957308d497dc51c753344a7878f1f0c91295fd76e3d1cc9ef813161c6b92b7ea6068ceb97d8f45a4ce57af7d7632d699951f7fe3c71c3a32b014c74425c67e5030546b10cf7edcec2eca5ba31dc62c08f83f35bc2e36b93f15f071bc2537ebe9ca19f86dce4e84272e10323d0ceaa2cc47fe4f6ad101d454c761f9863e94af91199ce5f12469bca7ba39314b84aa7efa4bdc18f7700c19511d48d6132450111d70401a8ac73565d5386ca12345e884d08b23f9c901000a95eb4167865e58c28b112f47c96beeaa6657c923e25e56529107c5c30e65bb485d5ed21b91332db4e09df7e59dcfa05c994570deb3f9b838e22ae4abbf9a9a8c319cc9112c8dba7c2278f78b9578b0254c46a4c04b8fa4fedad6bd275f70b1618971ef6503379bfb0a508c9944328af2c820091a89e3f75e68e7f980ddc9154d273f7f2ce7a6294aefe93136860786679b80e41f6636ff45efeacfb52e2ba2bd9bd9c9030079a46caca5c4b340c17d01ba8ecbc5c561b2038481a8321c009d12136a3ad5461881d998eeaac5236fdcd8f81fb5e53848bb096d9198fd0d38830d1809f2a632b31e2b67754140c907ed58aead048b2d8af9a1c407e48db815212cfdcca97222dabdfe01f311a73e1e82c3e189ec5add48d3f8190eb9e14b58e540f7f1388a7c687629eadb19fd8a133dc8177629270ecaabff79efb6c1f750d89b9e6c5f34c6238066f8e3e425e46a27b3c0d2e9e2ed3cffe2a6f39b8e0137ea5de689b94107fb4748a5feb3902f0feba64dae4c2e69bc8d86463575c6b0ef4a8a64fef41121e57a8c67eda07e9fc8f98299677de198ea0a649ef3c00591940b2c27ba1414aaa1633deb52e3a44cfa8d7a00d014317c026a7d7f42a34b97128e1bf9cda4d8315819ac73ed5061bf9b5631d07b09b85b78ff1b6eb86e9e8c4faa0f991cd6fa0b0eb71b39c20ca9bc7c156f3bd255a5b408df172396bafd7f0fb11c6eaf1eb0a06576d37bee00424bf699584b1dfed68f0d8d8a35f0427c783fe2d79b4373628971e87501a5e4bb05b5058d0b2132741f26e76065b6f4017d963c8ee5605c4c5b6eebb96fca0a41893cb6add3fb0d728abeb860f22cedbd36e464bdaf124a7041460f7af3d64b54e9ffd240b5afad9baf6e5dd8406bc1b205da5848f51fc9dd5197716e144e1b0386614bd3cfd5ddb80ada1e5ca74c8960093a553b1f6288aa7f53663cdd867f658e51b95772dc7a6fa45fa03e14988a33250e6c16fbf0351769080d64ddfbdbf77e1215563bf2e82ecc38a682846d7e2e2ac4e87d715f97f15e84c3df04affee49612a735907d3c4d310a54a6f609873ad56f29a138f4d5661f6865e03048700000000000000"], 0xfce) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r8, @ANYBLOB="000024000000000024001200140001006272696467655f736c617665800000000c0005"], 0x3}, 0x1, 0x0, 0x0, 0x8001}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000380)={'ip6_vti0\x00', &(0x7f0000000300)={'ip6tnl0\x00', r8, 0x4, 0x80, 0x6, 0x8, 0x1f, @private1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80, 0x20, 0xffffffff, 0x3}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000003c0)={'syztnl2\x00', &(0x7f0000000440)={'tunl0\x00', r8, 0x8000, 0x10, 0x0, 0x16d5c336, {{0x25, 0x4, 0x1, 0x2, 0x94, 0x67, 0x0, 0x3, 0x2f, 0x0, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0xe}, {[@timestamp_addr={0x44, 0x44, 0x7a, 0x1, 0x3, [{@broadcast, 0x3}, {@multicast1, 0x6}, {@broadcast, 0x7fffffff}, {@private=0xa010100, 0x10}, {@dev={0xac, 0x14, 0x14, 0x2b}, 0xf}, {@broadcast, 0x8}, {@empty, 0xf6}, {@empty, 0x8001}]}, @cipso={0x86, 0x38, 0x2, [{0x2, 0x11, "5f68d01067aa8c36ac212ce373ecb0"}, {0x6, 0x12, "73092897fe2ff5dd1b2111339316db86"}, {0x1, 0xa, "9123bdd49685cd5e"}, {0x0, 0x5, "7bbafa"}]}, @end]}}}}}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000600)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0xc0, r9, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x6}, @ETHTOOL_A_CHANNELS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x200}, @ETHTOOL_A_CHANNELS_HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x8}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0xf5a}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0xfffffff7}]}, 0xc0}, 0x1, 0x0, 0x0, 0x20000804}, 0x14) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r12, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}}, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0x80087601, &(0x7f0000000640)) splice(r0, 0x0, r2, 0x0, 0x10d00, 0x0) 0s ago: executing program 5 (id=18224): r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xfe33) recvmsg(r0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x2) kernel console output (not intermixed with test programs): 28005] dump_stack_lvl+0x189/0x250 [ 1783.316839][T28005] ? __pfx____ratelimit+0x10/0x10 [ 1783.316866][T28005] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1783.316885][T28005] ? __pfx__printk+0x10/0x10 [ 1783.316916][T28005] should_fail_ex+0x414/0x560 [ 1783.316946][T28005] _copy_to_user+0x31/0xb0 [ 1783.316971][T28005] simple_read_from_buffer+0xe1/0x170 [ 1783.316996][T28005] proc_fail_nth_read+0x1b3/0x220 [ 1783.317025][T28005] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1783.317054][T28005] ? rw_verify_area+0x2a6/0x4d0 [ 1783.317071][T28005] ? __lock_acquire+0xab9/0xd20 [ 1783.317091][T28005] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1783.317116][T28005] vfs_read+0x200/0xa30 [ 1783.317133][T28005] ? fdget_pos+0x247/0x320 [ 1783.317159][T28005] ? __pfx___mutex_lock+0x10/0x10 [ 1783.317179][T28005] ? __pfx_vfs_read+0x10/0x10 [ 1783.317200][T28005] ? __fget_files+0x2a/0x420 [ 1783.317225][T28005] ? __fget_files+0x3a0/0x420 [ 1783.317244][T28005] ? __fget_files+0x2a/0x420 [ 1783.317274][T28005] ksys_read+0x145/0x250 [ 1783.317299][T28005] ? __pfx_ksys_read+0x10/0x10 [ 1783.317320][T28005] ? do_syscall_64+0xbe/0xfa0 [ 1783.317341][T28005] do_syscall_64+0xfa/0xfa0 [ 1783.317356][T28005] ? lockdep_hardirqs_on+0x9c/0x150 [ 1783.317372][T28005] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1783.317389][T28005] ? clear_bhb_loop+0x60/0xb0 [ 1783.317410][T28005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1783.317427][T28005] RIP: 0033:0x7fcba078d9dc [ 1783.317445][T28005] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1783.317461][T28005] RSP: 002b:00007fcba16b3030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1783.317481][T28005] RAX: ffffffffffffffda RBX: 00007fcba09e5fa0 RCX: 00007fcba078d9dc [ 1783.317493][T28005] RDX: 000000000000000f RSI: 00007fcba16b30a0 RDI: 0000000000000004 [ 1783.317504][T28005] RBP: 00007fcba16b3090 R08: 0000000000000000 R09: 0000000000000000 [ 1783.317514][T28005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1783.317525][T28005] R13: 00007fcba09e6038 R14: 00007fcba09e5fa0 R15: 00007fffa3c7e5b8 [ 1783.317556][T28005] [ 1783.609610][T28007] netlink: 'syz.3.17669': attribute type 2 has an invalid length. [ 1783.622845][T28007] netlink: 244 bytes leftover after parsing attributes in process `syz.3.17669'. [ 1783.637980][ T30] audit: type=1800 audit(1760751710.700:9): pid=28007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.17669" name="memory.events" dev="tmpfs" ino=943 res=0 errno=0 [ 1783.926065][T28020] bond3: entered promiscuous mode [ 1783.954871][T28020] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1783.956061][T28026] netlink: 'syz.2.17671': attribute type 1 has an invalid length. [ 1783.998496][T28028] netlink: 'syz.0.17674': attribute type 12 has an invalid length. [ 1784.006557][T28028] netlink: 'syz.0.17674': attribute type 29 has an invalid length. [ 1784.341703][T27969] Bluetooth: hci1: command 0x0406 tx timeout [ 1784.407784][T17219] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1784.625003][T28071] __nla_validate_parse: 11 callbacks suppressed [ 1784.625022][T28071] netlink: 44 bytes leftover after parsing attributes in process `syz.1.17689'. [ 1787.773635][T28112] FAULT_INJECTION: forcing a failure. [ 1787.773635][T28112] name failslab, interval 1, probability 0, space 0, times 0 [ 1787.792365][T28112] CPU: 1 UID: 0 PID: 28112 Comm: syz.2.17700 Not tainted syzkaller #0 PREEMPT(full) [ 1787.792393][T28112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1787.792404][T28112] Call Trace: [ 1787.792413][T28112] [ 1787.792423][T28112] dump_stack_lvl+0x189/0x250 [ 1787.792450][T28112] ? __pfx____ratelimit+0x10/0x10 [ 1787.792478][T28112] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1787.792498][T28112] ? __pfx__printk+0x10/0x10 [ 1787.792525][T28112] ? __pfx___might_resched+0x10/0x10 [ 1787.792556][T28112] should_fail_ex+0x414/0x560 [ 1787.792596][T28112] should_failslab+0xa8/0x100 [ 1787.792622][T28112] kmem_cache_alloc_lru_noprof+0x79/0x6d0 [ 1787.792643][T28112] ? __d_alloc+0x36/0x7a0 [ 1787.792665][T28112] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1787.792685][T28112] ? arch_stack_walk+0xfc/0x150 [ 1787.792715][T28112] __d_alloc+0x36/0x7a0 [ 1787.792752][T28112] d_alloc_parallel+0xe1/0x1610 [ 1787.792779][T28112] ? __pfx_stack_trace_save+0x10/0x10 [ 1787.792800][T28112] ? stack_depot_save_flags+0x40/0x860 [ 1787.792838][T28112] ? __lock_acquire+0xab9/0xd20 [ 1787.792867][T28112] ? __pfx_d_alloc_parallel+0x10/0x10 [ 1787.792927][T28112] ? __raw_spin_lock_init+0x45/0x100 [ 1787.792958][T28112] ? __init_waitqueue_head+0xa9/0x150 [ 1787.792984][T28112] __lookup_slow+0x116/0x3d0 [ 1787.793013][T28112] ? __pfx___lookup_slow+0x10/0x10 [ 1787.793050][T28112] ? d_lookup+0x8a/0xa0 [ 1787.793076][T28112] ? lookup_noperm+0x112/0x220 [ 1787.793110][T28112] simple_start_creating+0xfd/0x1e0 [ 1787.793139][T28112] ? __pfx_simple_start_creating+0x10/0x10 [ 1787.793163][T28112] ? do_raw_spin_unlock+0x122/0x240 [ 1787.793183][T28112] ? mntput+0x65/0xc0 [ 1787.793208][T28112] debugfs_start_creating+0x10f/0x180 [ 1787.793233][T28112] debugfs_create_dir+0x28/0x420 [ 1787.793258][T28112] ieee80211_debugfs_recreate_netdev+0x1a6/0x1460 [ 1787.793288][T28112] ? __pfx_ieee80211_debugfs_recreate_netdev+0x10/0x10 [ 1787.793310][T28112] ? ieee80211_do_open+0x2160/0x24c0 [ 1787.793342][T28112] ieee80211_if_change_type+0x156/0x990 [ 1787.793371][T28112] ieee80211_change_iface+0xd5/0x510 [ 1787.793406][T28112] cfg80211_change_iface+0x795/0xef0 [ 1787.793441][T28112] nl80211_set_interface+0x773/0xaa0 [ 1787.793479][T28112] ? __pfx_nl80211_set_interface+0x10/0x10 [ 1787.793510][T28112] ? nl80211_pre_doit+0x4fb/0x930 [ 1787.793542][T28112] genl_family_rcv_msg_doit+0x215/0x300 [ 1787.793572][T28112] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1787.793613][T28112] ? bpf_lsm_capable+0x9/0x20 [ 1787.793630][T28112] ? security_capable+0x7e/0x2e0 [ 1787.793658][T28112] genl_rcv_msg+0x60e/0x790 [ 1787.793692][T28112] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1787.793720][T28112] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 1787.793745][T28112] ? __pfx_nl80211_set_interface+0x10/0x10 [ 1787.793780][T28112] ? __pfx_nl80211_post_doit+0x10/0x10 [ 1787.793805][T28112] ? __asan_memcpy+0x40/0x70 [ 1787.793827][T28112] ? __pfx_ref_tracker_free+0x10/0x10 [ 1787.793861][T28112] netlink_rcv_skb+0x208/0x470 [ 1787.793888][T28112] ? __lock_acquire+0xab9/0xd20 [ 1787.793923][T28112] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1787.793960][T28112] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1787.794022][T28112] ? down_read+0x1ad/0x2e0 [ 1787.794046][T28112] genl_rcv+0x28/0x40 [ 1787.794064][T28112] netlink_unicast+0x82f/0x9e0 [ 1787.794096][T28112] ? __pfx_netlink_unicast+0x10/0x10 [ 1787.794121][T28112] ? netlink_sendmsg+0x642/0xb30 [ 1787.794144][T28112] ? skb_put+0x11b/0x210 [ 1787.794174][T28112] netlink_sendmsg+0x805/0xb30 [ 1787.794211][T28112] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1787.794240][T28112] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1787.794264][T28112] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1787.794285][T28112] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1787.794311][T28112] __sock_sendmsg+0x21c/0x270 [ 1787.794338][T28112] ____sys_sendmsg+0x505/0x830 [ 1787.794363][T28112] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1787.794402][T28112] ? import_iovec+0x74/0xa0 [ 1787.794430][T28112] ___sys_sendmsg+0x21f/0x2a0 [ 1787.794451][T28112] ? __pfx____sys_sendmsg+0x10/0x10 [ 1787.794514][T28112] ? __fget_files+0x2a/0x420 [ 1787.794534][T28112] ? __fget_files+0x3a0/0x420 [ 1787.794569][T28112] __x64_sys_sendmsg+0x19b/0x260 [ 1787.794598][T28112] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1787.794628][T28112] ? __pfx_ksys_write+0x10/0x10 [ 1787.794652][T28112] ? do_syscall_64+0xbe/0xfa0 [ 1787.794675][T28112] do_syscall_64+0xfa/0xfa0 [ 1787.794693][T28112] ? lockdep_hardirqs_on+0x9c/0x150 [ 1787.794711][T28112] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1787.794730][T28112] ? clear_bhb_loop+0x60/0xb0 [ 1787.794753][T28112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1787.794772][T28112] RIP: 0033:0x7f6d7fd8efc9 [ 1787.794790][T28112] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1787.794807][T28112] RSP: 002b:00007f6d80c51038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1787.794827][T28112] RAX: ffffffffffffffda RBX: 00007f6d7ffe5fa0 RCX: 00007f6d7fd8efc9 [ 1787.794841][T28112] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 1787.794854][T28112] RBP: 00007f6d80c51090 R08: 0000000000000000 R09: 0000000000000000 [ 1787.794866][T28112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1787.794877][T28112] R13: 00007f6d7ffe6038 R14: 00007f6d7ffe5fa0 R15: 00007fffb8a27e08 [ 1787.794913][T28112] [ 1788.353417][T28115] lo speed is unknown, defaulting to 1000 [ 1788.375313][T28107] lo speed is unknown, defaulting to 1000 [ 1788.409309][T28125] netlink: 44 bytes leftover after parsing attributes in process `syz.3.17703'. [ 1788.425490][T28107] vxcan1 speed is unknown, defaulting to 1000 [ 1788.548347][T28133] netlink: 136 bytes leftover after parsing attributes in process `syz.2.17706'. [ 1788.750392][T28115] vxcan1 speed is unknown, defaulting to 1000 [ 1788.908000][T28143] tipc: Enabling of bearer rejected, failed to enable media [ 1788.918694][T28144] tipc: Enabling of bearer rejected, failed to enable media [ 1789.003963][T28148] FAULT_INJECTION: forcing a failure. [ 1789.003963][T28148] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1789.024748][T28148] CPU: 1 UID: 0 PID: 28148 Comm: syz.2.17712 Not tainted syzkaller #0 PREEMPT(full) [ 1789.024776][T28148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1789.024787][T28148] Call Trace: [ 1789.024796][T28148] [ 1789.024805][T28148] dump_stack_lvl+0x189/0x250 [ 1789.024830][T28148] ? __pfx____ratelimit+0x10/0x10 [ 1789.024858][T28148] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1789.024878][T28148] ? __pfx__printk+0x10/0x10 [ 1789.024897][T28148] ? __might_fault+0xb0/0x130 [ 1789.024930][T28148] should_fail_ex+0x414/0x560 [ 1789.024963][T28148] _copy_from_user+0x2d/0xb0 [ 1789.024987][T28148] kstrtouint_from_user+0xc4/0x170 [ 1789.025012][T28148] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1789.025051][T28148] proc_fail_nth_write+0x88/0x200 [ 1789.025078][T28148] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1789.025111][T28148] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1789.025138][T28148] vfs_write+0x27e/0xb30 [ 1789.025169][T28148] ? __pfx_vfs_write+0x10/0x10 [ 1789.025190][T28148] ? __fget_files+0x2a/0x420 [ 1789.025217][T28148] ? __fget_files+0x3a0/0x420 [ 1789.025236][T28148] ? __fget_files+0x2a/0x420 [ 1789.025267][T28148] ksys_write+0x145/0x250 [ 1789.025289][T28148] ? __pfx_ksys_write+0x10/0x10 [ 1789.025313][T28148] ? do_syscall_64+0xbe/0xfa0 [ 1789.025336][T28148] do_syscall_64+0xfa/0xfa0 [ 1789.025353][T28148] ? lockdep_hardirqs_on+0x9c/0x150 [ 1789.025371][T28148] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1789.025389][T28148] ? clear_bhb_loop+0x60/0xb0 [ 1789.025411][T28148] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1789.025429][T28148] RIP: 0033:0x7f6d7fd8da7f [ 1789.025446][T28148] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 1789.025462][T28148] RSP: 002b:00007f6d80c51030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1789.025482][T28148] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f6d7fd8da7f [ 1789.025495][T28148] RDX: 0000000000000001 RSI: 00007f6d80c510a0 RDI: 0000000000000004 [ 1789.025507][T28148] RBP: 00007f6d80c51090 R08: 0000000000000000 R09: 0000000000000000 [ 1789.025524][T28148] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 1789.025535][T28148] R13: 00007f6d7ffe6038 R14: 00007f6d7ffe5fa0 R15: 00007fffb8a27e08 [ 1789.025569][T28148] [ 1790.575544][T28172] netlink: 'syz.5.17724': attribute type 27 has an invalid length. [ 1790.584418][T28172] netlink: 'syz.5.17724': attribute type 1 has an invalid length. [ 1790.885194][T28196] netlink: 364 bytes leftover after parsing attributes in process `syz.0.17733'. [ 1791.005950][T28205] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17736'. [ 1791.010625][T28196] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17733'. [ 1791.293333][T28209] lo speed is unknown, defaulting to 1000 [ 1791.301635][T28209] vxcan1 speed is unknown, defaulting to 1000 [ 1791.919068][T28227] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 1791.923936][T28229] FAULT_INJECTION: forcing a failure. [ 1791.923936][T28229] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1791.966411][T28229] CPU: 1 UID: 0 PID: 28229 Comm: syz.3.17741 Not tainted syzkaller #0 PREEMPT(full) [ 1791.966438][T28229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1791.966448][T28229] Call Trace: [ 1791.966455][T28229] [ 1791.966463][T28229] dump_stack_lvl+0x189/0x250 [ 1791.966484][T28229] ? __pfx____ratelimit+0x10/0x10 [ 1791.966506][T28229] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1791.966520][T28229] ? __pfx__printk+0x10/0x10 [ 1791.966534][T28229] ? __might_fault+0xb0/0x130 [ 1791.966559][T28229] should_fail_ex+0x414/0x560 [ 1791.966589][T28229] _copy_from_iter+0x1de/0x1790 [ 1791.966614][T28229] ? rcu_is_watching+0x15/0xb0 [ 1791.966641][T28229] ? kmalloc_reserve+0xbd/0x290 [ 1791.966665][T28229] ? __pfx__copy_from_iter+0x10/0x10 [ 1791.966687][T28229] ? __build_skb_around+0x262/0x3f0 [ 1791.966711][T28229] ? netlink_sendmsg+0x642/0xb30 [ 1791.966733][T28229] ? skb_put+0x11b/0x210 [ 1791.966758][T28229] netlink_sendmsg+0x6b2/0xb30 [ 1791.966789][T28229] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1791.966816][T28229] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1791.966837][T28229] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1791.966857][T28229] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1791.966881][T28229] __sock_sendmsg+0x21c/0x270 [ 1791.966902][T28229] ____sys_sendmsg+0x52d/0x830 [ 1791.966925][T28229] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1791.966959][T28229] ? import_iovec+0x74/0xa0 [ 1791.966984][T28229] ___sys_sendmsg+0x21f/0x2a0 [ 1791.967003][T28229] ? __pfx____sys_sendmsg+0x10/0x10 [ 1791.967071][T28229] ? __might_fault+0xb0/0x130 [ 1791.967093][T28229] __sys_sendmmsg+0x227/0x430 [ 1791.967115][T28229] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1791.967141][T28229] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1791.967179][T28229] ? ksys_write+0x22a/0x250 [ 1791.967201][T28229] ? __pfx_ksys_write+0x10/0x10 [ 1791.967225][T28229] __x64_sys_sendmmsg+0xa0/0xc0 [ 1791.967245][T28229] do_syscall_64+0xfa/0xfa0 [ 1791.967262][T28229] ? lockdep_hardirqs_on+0x9c/0x150 [ 1791.967279][T28229] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1791.967300][T28229] ? clear_bhb_loop+0x60/0xb0 [ 1791.967320][T28229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1791.967336][T28229] RIP: 0033:0x7f501c38efc9 [ 1791.967353][T28229] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1791.967367][T28229] RSP: 002b:00007f501d303038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1791.967386][T28229] RAX: ffffffffffffffda RBX: 00007f501c5e5fa0 RCX: 00007f501c38efc9 [ 1791.967400][T28229] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000006 [ 1791.967412][T28229] RBP: 00007f501d303090 R08: 0000000000000000 R09: 0000000000000000 [ 1791.967424][T28229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1791.967435][T28229] R13: 00007f501c5e6038 R14: 00007f501c5e5fa0 R15: 00007ffea63c76c8 [ 1791.967466][T28229] [ 1792.026381][T28233] netlink: 'syz.2.17743': attribute type 16 has an invalid length. [ 1792.267775][T28233] netlink: 'syz.2.17743': attribute type 17 has an invalid length. [ 1792.368449][T28233] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1792.856636][T28258] FAULT_INJECTION: forcing a failure. [ 1792.856636][T28258] name failslab, interval 1, probability 0, space 0, times 0 [ 1792.880131][T28257] netlink: 32 bytes leftover after parsing attributes in process `syz.0.17753'. [ 1792.905192][T28257] xt_l2tp: invalid flags combination: 0 [ 1792.942027][T28258] CPU: 1 UID: 0 PID: 28258 Comm: syz.3.17751 Not tainted syzkaller #0 PREEMPT(full) [ 1792.942052][T28258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1792.942064][T28258] Call Trace: [ 1792.942071][T28258] [ 1792.942080][T28258] dump_stack_lvl+0x189/0x250 [ 1792.942105][T28258] ? __pfx____ratelimit+0x10/0x10 [ 1792.942131][T28258] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1792.942149][T28258] ? __pfx__printk+0x10/0x10 [ 1792.942173][T28258] ? __pfx___might_resched+0x10/0x10 [ 1792.942202][T28258] should_fail_ex+0x414/0x560 [ 1792.942240][T28258] should_failslab+0xa8/0x100 [ 1792.942265][T28258] kmem_cache_alloc_node_noprof+0x77/0x710 [ 1792.942284][T28258] ? __alloc_skb+0x112/0x2d0 [ 1792.942317][T28258] __alloc_skb+0x112/0x2d0 [ 1792.942344][T28258] netlink_ack+0x146/0xa50 [ 1792.942365][T28258] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1792.942400][T28258] netlink_rcv_skb+0x28c/0x470 [ 1792.942422][T28258] ? __lock_acquire+0xab9/0xd20 [ 1792.942444][T28258] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1792.942469][T28258] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1792.942503][T28258] ? netlink_deliver_tap+0x2e/0x1b0 [ 1792.942534][T28258] netlink_unicast+0x82f/0x9e0 [ 1792.942565][T28258] ? __pfx_netlink_unicast+0x10/0x10 [ 1792.942588][T28258] ? netlink_sendmsg+0x642/0xb30 [ 1792.942610][T28258] ? skb_put+0x11b/0x210 [ 1792.942636][T28258] netlink_sendmsg+0x805/0xb30 [ 1792.942669][T28258] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1792.942696][T28258] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1792.942718][T28258] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1792.942740][T28258] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1792.942765][T28258] __sock_sendmsg+0x21c/0x270 [ 1792.942790][T28258] ____sys_sendmsg+0x505/0x830 [ 1792.942812][T28258] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1792.942847][T28258] ? import_iovec+0x74/0xa0 [ 1792.942872][T28258] ___sys_sendmsg+0x21f/0x2a0 [ 1792.942891][T28258] ? __pfx____sys_sendmsg+0x10/0x10 [ 1792.942938][T28258] ? __fget_files+0x2a/0x420 [ 1792.942959][T28258] ? __fget_files+0x3a0/0x420 [ 1792.942992][T28258] __x64_sys_sendmsg+0x19b/0x260 [ 1792.943013][T28258] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1792.943040][T28258] ? __pfx_ksys_write+0x10/0x10 [ 1792.943065][T28258] ? do_syscall_64+0xbe/0xfa0 [ 1792.943087][T28258] do_syscall_64+0xfa/0xfa0 [ 1792.943103][T28258] ? lockdep_hardirqs_on+0x9c/0x150 [ 1792.943122][T28258] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1792.943143][T28258] ? clear_bhb_loop+0x60/0xb0 [ 1792.943166][T28258] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1792.943183][T28258] RIP: 0033:0x7f501c38efc9 [ 1792.943200][T28258] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1792.943216][T28258] RSP: 002b:00007f501d2e2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1792.943241][T28258] RAX: ffffffffffffffda RBX: 00007f501c5e6090 RCX: 00007f501c38efc9 [ 1792.943254][T28258] RDX: 0000000000000000 RSI: 00002000000007c0 RDI: 0000000000000004 [ 1792.943266][T28258] RBP: 00007f501d2e2090 R08: 0000000000000000 R09: 0000000000000000 [ 1792.943278][T28258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1792.943290][T28258] R13: 00007f501c5e6128 R14: 00007f501c5e6090 R15: 00007ffea63c76c8 [ 1792.943321][T28258] [ 1793.507120][T28281] netlink: 592 bytes leftover after parsing attributes in process `syz.3.17762'. [ 1793.858921][T28295] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17768'. [ 1793.870138][T28295] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17768'. [ 1793.906705][T28295] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17768'. [ 1793.906745][T30974] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1793.926745][T28295] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17768'. [ 1793.957066][T30974] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1793.970317][T30974] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1793.998885][T30974] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1794.030083][T28308] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17770'. [ 1794.225623][T28321] tipc: Enabled bearer , priority 11 [ 1794.405406][T28329] tipc: Started in network mode [ 1794.432631][T28329] tipc: Node identity b2c42aa79f68, cluster identity 4711 [ 1794.461321][T28329] tipc: Enabled bearer , priority 0 [ 1794.480213][T28334] syzkaller0: entered promiscuous mode [ 1794.500378][T28334] syzkaller0: entered allmulticast mode [ 1794.927444][T28328] tipc: Resetting bearer [ 1794.990182][T28328] tipc: Disabling bearer [ 1795.144304][T28352] lo speed is unknown, defaulting to 1000 [ 1795.153392][T28352] vxcan1 speed is unknown, defaulting to 1000 [ 1795.978245][T28376] __nla_validate_parse: 1 callbacks suppressed [ 1795.978262][T28376] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17790'. [ 1796.471385][T28373] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1796.484583][T28373] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1796.660766][T28373] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1796.671877][T28373] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1796.754715][T28373] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1796.773408][T28373] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1796.846339][T28399] tipc: Enabled bearer , priority 0 [ 1796.858102][T28399] syzkaller0: entered promiscuous mode [ 1796.864073][T28399] syzkaller0: entered allmulticast mode [ 1796.919048][T28373] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1796.931566][T28373] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1796.953361][T28398] tipc: Resetting bearer [ 1796.984629][T28398] tipc: Disabling bearer [ 1797.126346][T30974] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1797.136815][T30974] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1797.149437][T28407] netlink: 40 bytes leftover after parsing attributes in process `syz.2.17800'. [ 1797.177816][T30974] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1797.186332][T30974] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1797.228380][T30974] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1797.236813][T30974] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1797.266146][T30974] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1797.274754][T30974] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1797.350817][T28411] FAULT_INJECTION: forcing a failure. [ 1797.350817][T28411] name failslab, interval 1, probability 0, space 0, times 0 [ 1797.369297][T28411] CPU: 1 UID: 0 PID: 28411 Comm: syz.2.17802 Not tainted syzkaller #0 PREEMPT(full) [ 1797.369323][T28411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1797.369334][T28411] Call Trace: [ 1797.369342][T28411] [ 1797.369350][T28411] dump_stack_lvl+0x189/0x250 [ 1797.369375][T28411] ? __pfx____ratelimit+0x10/0x10 [ 1797.369402][T28411] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1797.369422][T28411] ? __pfx__printk+0x10/0x10 [ 1797.369447][T28411] ? __pfx___might_resched+0x10/0x10 [ 1797.369477][T28411] should_fail_ex+0x414/0x560 [ 1797.369508][T28411] should_failslab+0xa8/0x100 [ 1797.369533][T28411] kmem_cache_alloc_node_noprof+0x77/0x710 [ 1797.369555][T28411] ? __alloc_skb+0x112/0x2d0 [ 1797.369586][T28411] __alloc_skb+0x112/0x2d0 [ 1797.369614][T28411] netlink_ack+0x146/0xa50 [ 1797.369636][T28411] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1797.369653][T28411] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 1797.369675][T28411] ? __pfx_nl80211_post_doit+0x10/0x10 [ 1797.369700][T28411] ? __asan_memcpy+0x40/0x70 [ 1797.369717][T28411] ? __pfx_ref_tracker_free+0x10/0x10 [ 1797.369744][T28411] netlink_rcv_skb+0x28c/0x470 [ 1797.369767][T28411] ? __lock_acquire+0xab9/0xd20 [ 1797.369788][T28411] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1797.369810][T28411] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1797.369852][T28411] ? down_read+0x1ad/0x2e0 [ 1797.369875][T28411] genl_rcv+0x28/0x40 [ 1797.369892][T28411] netlink_unicast+0x82f/0x9e0 [ 1797.369931][T28411] ? __pfx_netlink_unicast+0x10/0x10 [ 1797.369955][T28411] ? netlink_sendmsg+0x642/0xb30 [ 1797.369977][T28411] ? skb_put+0x11b/0x210 [ 1797.370006][T28411] netlink_sendmsg+0x805/0xb30 [ 1797.370041][T28411] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1797.370069][T28411] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1797.370093][T28411] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1797.370115][T28411] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1797.370141][T28411] __sock_sendmsg+0x21c/0x270 [ 1797.370167][T28411] ____sys_sendmsg+0x505/0x830 [ 1797.370192][T28411] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1797.370228][T28411] ? import_iovec+0x74/0xa0 [ 1797.370256][T28411] ___sys_sendmsg+0x21f/0x2a0 [ 1797.370277][T28411] ? __pfx____sys_sendmsg+0x10/0x10 [ 1797.370334][T28411] ? __fget_files+0x2a/0x420 [ 1797.370356][T28411] ? __fget_files+0x3a0/0x420 [ 1797.370389][T28411] __x64_sys_sendmsg+0x19b/0x260 [ 1797.370410][T28411] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1797.370439][T28411] ? __pfx_ksys_write+0x10/0x10 [ 1797.370463][T28411] ? do_syscall_64+0xbe/0xfa0 [ 1797.370486][T28411] do_syscall_64+0xfa/0xfa0 [ 1797.370503][T28411] ? lockdep_hardirqs_on+0x9c/0x150 [ 1797.370521][T28411] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1797.370539][T28411] ? clear_bhb_loop+0x60/0xb0 [ 1797.370561][T28411] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1797.370579][T28411] RIP: 0033:0x7f6d7fd8efc9 [ 1797.370596][T28411] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1797.370611][T28411] RSP: 002b:00007f6d80c51038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1797.370631][T28411] RAX: ffffffffffffffda RBX: 00007f6d7ffe5fa0 RCX: 00007f6d7fd8efc9 [ 1797.370645][T28411] RDX: 0000000000000800 RSI: 0000200000003700 RDI: 0000000000000003 [ 1797.370656][T28411] RBP: 00007f6d80c51090 R08: 0000000000000000 R09: 0000000000000000 [ 1797.370668][T28411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1797.370679][T28411] R13: 00007f6d7ffe6038 R14: 00007f6d7ffe5fa0 R15: 00007fffb8a27e08 [ 1797.370713][T28411] [ 1797.955064][T28429] FAULT_INJECTION: forcing a failure. [ 1797.955064][T28429] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1797.969113][T28429] CPU: 1 UID: 0 PID: 28429 Comm: syz.3.17808 Not tainted syzkaller #0 PREEMPT(full) [ 1797.969139][T28429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1797.969150][T28429] Call Trace: [ 1797.969159][T28429] [ 1797.969168][T28429] dump_stack_lvl+0x189/0x250 [ 1797.969197][T28429] ? __pfx____ratelimit+0x10/0x10 [ 1797.969225][T28429] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1797.969244][T28429] ? __pfx__printk+0x10/0x10 [ 1797.969276][T28429] should_fail_ex+0x414/0x560 [ 1797.969309][T28429] _copy_to_user+0x31/0xb0 [ 1797.969335][T28429] simple_read_from_buffer+0xe1/0x170 [ 1797.969361][T28429] proc_fail_nth_read+0x1b3/0x220 [ 1797.969389][T28429] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1797.969418][T28429] ? rw_verify_area+0x2a6/0x4d0 [ 1797.969436][T28429] ? __lock_acquire+0xab9/0xd20 [ 1797.969456][T28429] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1797.969483][T28429] vfs_read+0x200/0xa30 [ 1797.969501][T28429] ? fdget_pos+0x247/0x320 [ 1797.969527][T28429] ? __pfx___mutex_lock+0x10/0x10 [ 1797.969547][T28429] ? __pfx_vfs_read+0x10/0x10 [ 1797.969568][T28429] ? __fget_files+0x2a/0x420 [ 1797.969602][T28429] ? __fget_files+0x3a0/0x420 [ 1797.969622][T28429] ? __fget_files+0x2a/0x420 [ 1797.969652][T28429] ksys_read+0x145/0x250 [ 1797.969674][T28429] ? __pfx_ksys_read+0x10/0x10 [ 1797.969696][T28429] ? do_syscall_64+0xbe/0xfa0 [ 1797.969719][T28429] do_syscall_64+0xfa/0xfa0 [ 1797.969736][T28429] ? lockdep_hardirqs_on+0x9c/0x150 [ 1797.969754][T28429] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1797.969773][T28429] ? clear_bhb_loop+0x60/0xb0 [ 1797.969796][T28429] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1797.969814][T28429] RIP: 0033:0x7f501c38d9dc [ 1797.969831][T28429] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1797.969847][T28429] RSP: 002b:00007f501d303030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1797.969867][T28429] RAX: ffffffffffffffda RBX: 00007f501c5e5fa0 RCX: 00007f501c38d9dc [ 1797.969881][T28429] RDX: 000000000000000f RSI: 00007f501d3030a0 RDI: 0000000000000005 [ 1797.969893][T28429] RBP: 00007f501d303090 R08: 0000000000000000 R09: 0000000000000000 [ 1797.969904][T28429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1797.969915][T28429] R13: 00007f501c5e6038 R14: 00007f501c5e5fa0 R15: 00007ffea63c76c8 [ 1797.969948][T28429] [ 1797.972469][T28430] tipc: Enabled bearer , priority 0 [ 1798.057278][T28433] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17811'. [ 1798.233118][T28433] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17811'. [ 1798.243189][T28433] netlink: 124 bytes leftover after parsing attributes in process `syz.0.17811'. [ 1798.270337][T28442] syzkaller0: entered promiscuous mode [ 1798.275842][T28442] syzkaller0: entered allmulticast mode [ 1798.309762][T28430] tipc: Resetting bearer [ 1798.337812][T28428] tipc: Resetting bearer [ 1798.366918][T28428] tipc: Disabling bearer [ 1798.413746][T28449] lo speed is unknown, defaulting to 1000 [ 1798.423800][T28449] vxcan1 speed is unknown, defaulting to 1000 [ 1799.045538][T28472] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17821'. [ 1799.206194][T28476] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17822'. [ 1799.345661][T28483] FAULT_INJECTION: forcing a failure. [ 1799.345661][T28483] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1799.359171][T28483] CPU: 1 UID: 0 PID: 28483 Comm: syz.0.17823 Not tainted syzkaller #0 PREEMPT(full) [ 1799.359198][T28483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1799.359211][T28483] Call Trace: [ 1799.359219][T28483] [ 1799.359228][T28483] dump_stack_lvl+0x189/0x250 [ 1799.359252][T28483] ? __pfx____ratelimit+0x10/0x10 [ 1799.359277][T28483] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1799.359294][T28483] ? __pfx__printk+0x10/0x10 [ 1799.359328][T28483] should_fail_ex+0x414/0x560 [ 1799.359361][T28483] strncpy_from_user+0x36/0x290 [ 1799.359392][T28483] strncpy_from_user_nofault+0x72/0x150 [ 1799.359422][T28483] bpf_bprintf_prepare+0xb91/0x13a0 [ 1799.359460][T28483] ? __pfx_bpf_bprintf_prepare+0x10/0x10 [ 1799.359489][T28483] ? bpf_trace_printk+0xc1/0x190 [ 1799.359513][T28483] bpf_trace_printk+0xdb/0x190 [ 1799.359528][T28483] ? __lock_acquire+0xab9/0xd20 [ 1799.359557][T28483] ? __pfx_bpf_trace_printk+0x10/0x10 [ 1799.359586][T28483] ? bpf_trace_run2+0x186/0x4b0 [ 1799.359615][T28483] ? __schedule+0x17ae/0x4cc0 [ 1799.359646][T28483] bpf_prog_930ede9872f2967c+0x3e/0x44 [ 1799.359665][T28483] bpf_trace_run2+0x284/0x4b0 [ 1799.359686][T28483] ? bpf_trace_run2+0x186/0x4b0 [ 1799.359709][T28483] ? __pfx_bpf_trace_run2+0x10/0x10 [ 1799.359734][T28483] ? do_raw_spin_lock+0x121/0x290 [ 1799.359752][T28483] ? __bpf_trace_contention_begin+0xcd/0x130 [ 1799.359791][T28483] __bpf_trace_contention_begin+0xdc/0x130 [ 1799.359816][T28483] ? __pfx___bpf_trace_contention_begin+0x10/0x10 [ 1799.359843][T28483] ? __mutex_trylock_common+0x84/0x260 [ 1799.359884][T28483] trace_contention_begin+0xf4/0x120 [ 1799.359911][T28483] __mutex_lock+0x61a/0x1350 [ 1799.359936][T28483] ? __mutex_lock+0x5bb/0x1350 [ 1799.359961][T28483] ? nl80211_pre_doit+0x5f/0x930 [ 1799.359988][T28483] ? __pfx___mutex_lock+0x10/0x10 [ 1799.360014][T28483] ? rcu_is_watching+0x15/0xb0 [ 1799.360042][T28483] ? __nla_parse+0x40/0x60 [ 1799.360066][T28483] nl80211_pre_doit+0x5f/0x930 [ 1799.360088][T28483] ? genl_family_rcv_msg_attrs_parse+0x212/0x2a0 [ 1799.360118][T28483] genl_family_rcv_msg_doit+0x1be/0x300 [ 1799.360146][T28483] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1799.360181][T28483] ? bpf_lsm_capable+0x9/0x20 [ 1799.360197][T28483] ? security_capable+0x7e/0x2e0 [ 1799.360223][T28483] genl_rcv_msg+0x60e/0x790 [ 1799.360251][T28483] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1799.360269][T28483] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 1799.360290][T28483] ? __pfx_nl80211_channel_switch+0x10/0x10 [ 1799.360311][T28483] ? __pfx_nl80211_post_doit+0x10/0x10 [ 1799.360350][T28483] netlink_rcv_skb+0x208/0x470 [ 1799.360372][T28483] ? __lock_acquire+0xab9/0xd20 [ 1799.360395][T28483] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1799.360416][T28483] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1799.360462][T28483] ? down_read+0x1ad/0x2e0 [ 1799.360485][T28483] genl_rcv+0x28/0x40 [ 1799.360503][T28483] netlink_unicast+0x82f/0x9e0 [ 1799.360535][T28483] ? __pfx_netlink_unicast+0x10/0x10 [ 1799.360560][T28483] ? netlink_sendmsg+0x642/0xb30 [ 1799.360582][T28483] ? skb_put+0x11b/0x210 [ 1799.360611][T28483] netlink_sendmsg+0x805/0xb30 [ 1799.360647][T28483] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1799.360677][T28483] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1799.360700][T28483] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1799.360722][T28483] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1799.360748][T28483] __sock_sendmsg+0x21c/0x270 [ 1799.360780][T28483] ____sys_sendmsg+0x505/0x830 [ 1799.360805][T28483] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1799.360842][T28483] ? import_iovec+0x74/0xa0 [ 1799.360869][T28483] ___sys_sendmsg+0x21f/0x2a0 [ 1799.360891][T28483] ? __pfx____sys_sendmsg+0x10/0x10 [ 1799.360950][T28483] ? __fget_files+0x2a/0x420 [ 1799.360970][T28483] ? __fget_files+0x3a0/0x420 [ 1799.361004][T28483] __x64_sys_sendmsg+0x19b/0x260 [ 1799.361026][T28483] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1799.361055][T28483] ? __pfx_ksys_write+0x10/0x10 [ 1799.361080][T28483] ? do_syscall_64+0xbe/0xfa0 [ 1799.361103][T28483] do_syscall_64+0xfa/0xfa0 [ 1799.361120][T28483] ? lockdep_hardirqs_on+0x9c/0x150 [ 1799.361139][T28483] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1799.361157][T28483] ? clear_bhb_loop+0x60/0xb0 [ 1799.361180][T28483] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1799.361198][T28483] RIP: 0033:0x7f4a05f8efc9 [ 1799.361216][T28483] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1799.361232][T28483] RSP: 002b:00007f4a06edf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1799.361251][T28483] RAX: ffffffffffffffda RBX: 00007f4a061e5fa0 RCX: 00007f4a05f8efc9 [ 1799.361265][T28483] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000004 [ 1799.361277][T28483] RBP: 00007f4a06edf090 R08: 0000000000000000 R09: 0000000000000000 [ 1799.361289][T28483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1799.361300][T28483] R13: 00007f4a061e6038 R14: 00007f4a061e5fa0 R15: 00007fff6c3d6628 [ 1799.361334][T28483] [ 1800.802718][T28511] netlink: 592 bytes leftover after parsing attributes in process `syz.2.17833'. [ 1801.452403][T28526] netlink: 48 bytes leftover after parsing attributes in process `syz.1.17838'. [ 1801.466497][T28527] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17840'. [ 1801.493670][T28526] netlink: 48 bytes leftover after parsing attributes in process `syz.1.17838'. [ 1801.518223][T28527] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 1801.583518][T28532] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17834'. [ 1801.805264][T28543] netlink: 592 bytes leftover after parsing attributes in process `syz.2.17845'. [ 1801.931847][T28549] macsec0: entered promiscuous mode [ 1801.942775][T28549] macsec0: entered allmulticast mode [ 1802.801376][T28565] netlink: 48 bytes leftover after parsing attributes in process `syz.1.17852'. [ 1802.821367][T28565] netlink: 48 bytes leftover after parsing attributes in process `syz.1.17852'. [ 1802.998197][T28576] lo: entered allmulticast mode [ 1803.030032][T28577] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17854'. [ 1803.358198][T28587] netlink: 1688 bytes leftover after parsing attributes in process `syz.0.17856'. [ 1803.611191][T28576] lo: left allmulticast mode [ 1803.691639][T28589] netlink: 592 bytes leftover after parsing attributes in process `syz.1.17857'. [ 1804.293407][T28609] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1804.298287][T28611] netlink: 'syz.0.17864': attribute type 30 has an invalid length. [ 1804.551012][T28620] netlink: 'syz.2.17868': attribute type 72 has an invalid length. [ 1804.666208][T28631] IPv4: Oversized IP packet from 127.202.26.0 [ 1805.205867][T28649] bond4: option tlb_dynamic_lb: invalid value (71) [ 1805.238804][T28649] bond4 (unregistering): Released all slaves [ 1805.700008][T28668] netlink: 'syz.5.17881': attribute type 72 has an invalid length. [ 1805.798961][T28672] IPv4: Oversized IP packet from 127.202.26.0 [ 1805.821978][T28674] netdevsim netdevsim3: Direct firmware load for  failed with error -2 [ 1805.854105][T28674] netdevsim netdevsim3: Falling back to sysfs fallback for:  [ 1805.863444][T28676] FAULT_INJECTION: forcing a failure. [ 1805.863444][T28676] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1805.911489][T28676] CPU: 0 UID: 0 PID: 28676 Comm: syz.1.17885 Not tainted syzkaller #0 PREEMPT(full) [ 1805.911516][T28676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1805.911527][T28676] Call Trace: [ 1805.911536][T28676] [ 1805.911545][T28676] dump_stack_lvl+0x189/0x250 [ 1805.911569][T28676] ? __pfx____ratelimit+0x10/0x10 [ 1805.911595][T28676] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1805.911613][T28676] ? __pfx__printk+0x10/0x10 [ 1805.911630][T28676] ? __might_fault+0xb0/0x130 [ 1805.911660][T28676] should_fail_ex+0x414/0x560 [ 1805.911694][T28676] _copy_from_iter+0x1de/0x1790 [ 1805.911721][T28676] ? rcu_is_watching+0x15/0xb0 [ 1805.911748][T28676] ? kmalloc_reserve+0xbd/0x290 [ 1805.911772][T28676] ? __pfx__copy_from_iter+0x10/0x10 [ 1805.911792][T28676] ? __build_skb_around+0x262/0x3f0 [ 1805.911818][T28676] ? netlink_sendmsg+0x642/0xb30 [ 1805.911841][T28676] ? skb_put+0x11b/0x210 [ 1805.911867][T28676] netlink_sendmsg+0x6b2/0xb30 [ 1805.911900][T28676] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1805.911926][T28676] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1805.911947][T28676] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1805.911969][T28676] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1805.911993][T28676] __sock_sendmsg+0x21c/0x270 [ 1805.912017][T28676] ____sys_sendmsg+0x505/0x830 [ 1805.912039][T28676] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1805.912075][T28676] ? import_iovec+0x74/0xa0 [ 1805.912102][T28676] ___sys_sendmsg+0x21f/0x2a0 [ 1805.912122][T28676] ? __pfx____sys_sendmsg+0x10/0x10 [ 1805.912174][T28676] ? __fget_files+0x2a/0x420 [ 1805.912195][T28676] ? __fget_files+0x3a0/0x420 [ 1805.912227][T28676] __x64_sys_sendmsg+0x19b/0x260 [ 1805.912248][T28676] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1805.912276][T28676] ? __pfx_ksys_write+0x10/0x10 [ 1805.912308][T28676] ? do_syscall_64+0xbe/0xfa0 [ 1805.912330][T28676] do_syscall_64+0xfa/0xfa0 [ 1805.912347][T28676] ? lockdep_hardirqs_on+0x9c/0x150 [ 1805.912365][T28676] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1805.912383][T28676] ? clear_bhb_loop+0x60/0xb0 [ 1805.912406][T28676] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1805.912424][T28676] RIP: 0033:0x7fcba078efc9 [ 1805.912442][T28676] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1805.912459][T28676] RSP: 002b:00007fcba16b3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1805.912479][T28676] RAX: ffffffffffffffda RBX: 00007fcba09e5fa0 RCX: 00007fcba078efc9 [ 1805.912493][T28676] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000006 [ 1805.912505][T28676] RBP: 00007fcba16b3090 R08: 0000000000000000 R09: 0000000000000000 [ 1805.912517][T28676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1805.912529][T28676] R13: 00007fcba09e6038 R14: 00007fcba09e5fa0 R15: 00007fffa3c7e5b8 [ 1805.912562][T28676] [ 1806.368949][T28687] bond2: left promiscuous mode [ 1806.541912][T28696] __nla_validate_parse: 8 callbacks suppressed [ 1806.541931][T28696] netlink: 48 bytes leftover after parsing attributes in process `syz.0.17893'. [ 1806.559140][T28696] netlink: 48 bytes leftover after parsing attributes in process `syz.0.17893'. [ 1806.931231][T28709] netlink: 140 bytes leftover after parsing attributes in process `syz.3.17899'. [ 1807.261786][T28721] FAULT_INJECTION: forcing a failure. [ 1807.261786][T28721] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1807.294559][T28721] CPU: 1 UID: 0 PID: 28721 Comm: syz.1.17904 Not tainted syzkaller #0 PREEMPT(full) [ 1807.294586][T28721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1807.294598][T28721] Call Trace: [ 1807.294605][T28721] [ 1807.294614][T28721] dump_stack_lvl+0x189/0x250 [ 1807.294639][T28721] ? __pfx____ratelimit+0x10/0x10 [ 1807.294665][T28721] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1807.294684][T28721] ? __pfx__printk+0x10/0x10 [ 1807.294702][T28721] ? __might_fault+0xb0/0x130 [ 1807.294732][T28721] should_fail_ex+0x414/0x560 [ 1807.294763][T28721] _copy_from_iter+0x1de/0x1790 [ 1807.294800][T28721] ? __pfx__copy_from_iter+0x10/0x10 [ 1807.294822][T28721] ? __build_skb_around+0x262/0x3f0 [ 1807.294848][T28721] ? netlink_sendmsg+0x642/0xb30 [ 1807.294870][T28721] ? skb_put+0x11b/0x210 [ 1807.294896][T28721] netlink_sendmsg+0x6b2/0xb30 [ 1807.294939][T28721] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1807.294965][T28721] ? __lock_acquire+0xab9/0xd20 [ 1807.294987][T28721] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1807.295009][T28721] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1807.295031][T28721] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1807.295056][T28721] __sock_sendmsg+0x21c/0x270 [ 1807.295081][T28721] sock_write_iter+0x279/0x360 [ 1807.295104][T28721] ? __pfx_sock_write_iter+0x10/0x10 [ 1807.295133][T28721] ? bpf_lsm_file_permission+0x9/0x20 [ 1807.295156][T28721] ? security_file_permission+0x75/0x290 [ 1807.295185][T28721] vfs_write+0x5c9/0xb30 [ 1807.295208][T28721] ? __pfx_sock_write_iter+0x10/0x10 [ 1807.295229][T28721] ? __pfx_vfs_write+0x10/0x10 [ 1807.295257][T28721] ? __fget_files+0x2a/0x420 [ 1807.295288][T28721] ksys_write+0x145/0x250 [ 1807.295309][T28721] ? __pfx_ksys_write+0x10/0x10 [ 1807.295331][T28721] ? do_syscall_64+0xbe/0xfa0 [ 1807.295354][T28721] do_syscall_64+0xfa/0xfa0 [ 1807.295369][T28721] ? lockdep_hardirqs_on+0x9c/0x150 [ 1807.295385][T28721] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1807.295402][T28721] ? clear_bhb_loop+0x60/0xb0 [ 1807.295425][T28721] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1807.295442][T28721] RIP: 0033:0x7fcba078efc9 [ 1807.295459][T28721] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1807.295474][T28721] RSP: 002b:00007fcba16b3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1807.295494][T28721] RAX: ffffffffffffffda RBX: 00007fcba09e5fa0 RCX: 00007fcba078efc9 [ 1807.295507][T28721] RDX: 000000000000fe33 RSI: 0000200000000000 RDI: 0000000000000003 [ 1807.295519][T28721] RBP: 00007fcba16b3090 R08: 0000000000000000 R09: 0000000000000000 [ 1807.295530][T28721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1807.295542][T28721] R13: 00007fcba09e6038 R14: 00007fcba09e5fa0 R15: 00007fffa3c7e5b8 [ 1807.295574][T28721] [ 1807.584565][T28727] netlink: 48 bytes leftover after parsing attributes in process `syz.2.17905'. [ 1807.602768][T28727] netlink: 48 bytes leftover after parsing attributes in process `syz.2.17905'. [ 1807.620885][T28718] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17903'. [ 1807.630492][T28718] netlink: 28 bytes leftover after parsing attributes in process `syz.3.17903'. [ 1807.650250][T28718] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17903'. [ 1807.666712][T28718] netlink: 28 bytes leftover after parsing attributes in process `syz.3.17903'. [ 1807.678209][T28718] netlink: 'syz.3.17903': attribute type 6 has an invalid length. [ 1807.825640][T28738] FAULT_INJECTION: forcing a failure. [ 1807.825640][T28738] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1807.849763][T28738] CPU: 1 UID: 0 PID: 28738 Comm: syz.2.17909 Not tainted syzkaller #0 PREEMPT(full) [ 1807.849788][T28738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1807.849799][T28738] Call Trace: [ 1807.849807][T28738] [ 1807.849816][T28738] dump_stack_lvl+0x189/0x250 [ 1807.849842][T28738] ? __pfx____ratelimit+0x10/0x10 [ 1807.849878][T28738] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1807.849895][T28738] ? __pfx__printk+0x10/0x10 [ 1807.849915][T28738] ? fs_reclaim_acquire+0x7d/0x100 [ 1807.849945][T28738] should_fail_ex+0x414/0x560 [ 1807.849977][T28738] prepare_alloc_pages+0x213/0x610 [ 1807.850008][T28738] __alloc_frozen_pages_noprof+0x123/0x370 [ 1807.850035][T28738] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1807.850056][T28738] ? css_rstat_updated+0x23a/0x4f0 [ 1807.850089][T28738] ? policy_nodemask+0x27c/0x720 [ 1807.850114][T28738] alloc_pages_mpol+0x232/0x4a0 [ 1807.850141][T28738] folio_alloc_mpol_noprof+0x39/0x70 [ 1807.850166][T28738] shmem_alloc_and_add_folio+0x447/0xf60 [ 1807.850191][T28738] ? filemap_get_entry+0xad/0x2f0 [ 1807.850212][T28738] ? filemap_get_entry+0xad/0x2f0 [ 1807.850230][T28738] ? filemap_get_entry+0xad/0x2f0 [ 1807.850256][T28738] ? shmem_huge_global_enabled+0x296/0x320 [ 1807.850282][T28738] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 1807.850306][T28738] ? shmem_allowable_huge_orders+0x4c6/0x4f0 [ 1807.850342][T28738] shmem_get_folio_gfp+0x59d/0x1660 [ 1807.850391][T28738] shmem_fault+0x179/0x390 [ 1807.850422][T28738] __do_fault+0x138/0x390 [ 1807.850446][T28738] __handle_mm_fault+0x1847/0x5400 [ 1807.850483][T28738] ? __pfx___handle_mm_fault+0x10/0x10 [ 1807.850518][T28738] ? follow_page_pte+0x7ef/0x13e0 [ 1807.850546][T28738] handle_mm_fault+0x40a/0x8e0 [ 1807.850574][T28738] __get_user_pages+0x165c/0x2a00 [ 1807.850635][T28738] __gup_longterm_locked+0x3dc/0x1660 [ 1807.850675][T28738] ? trace_kmalloc+0x1f/0xd0 [ 1807.850696][T28738] ? __kvmalloc_node_noprof+0x5ed/0x910 [ 1807.850722][T28738] pin_user_pages+0x9e/0xd0 [ 1807.850745][T28738] xdp_umem_pin_pages+0x11c/0x350 [ 1807.850771][T28738] xdp_umem_create+0x677/0x8e0 [ 1807.850809][T28738] xsk_setsockopt+0x7b0/0x8d0 [ 1807.850837][T28738] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1807.850874][T28738] ? __pfx_aa_sk_perm+0x10/0x10 [ 1807.850895][T28738] ? aa_sock_opt_perm+0xff/0x1b0 [ 1807.850920][T28738] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1807.850941][T28738] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1807.850968][T28738] do_sock_setsockopt+0x17c/0x1b0 [ 1807.851000][T28738] __x64_sys_setsockopt+0x13f/0x1b0 [ 1807.851033][T28738] do_syscall_64+0xfa/0xfa0 [ 1807.851050][T28738] ? lockdep_hardirqs_on+0x9c/0x150 [ 1807.851069][T28738] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1807.851088][T28738] ? clear_bhb_loop+0x60/0xb0 [ 1807.851110][T28738] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1807.851128][T28738] RIP: 0033:0x7f6d7fd8efc9 [ 1807.851146][T28738] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1807.851162][T28738] RSP: 002b:00007f6d80c51038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1807.851183][T28738] RAX: ffffffffffffffda RBX: 00007f6d7ffe5fa0 RCX: 00007f6d7fd8efc9 [ 1807.851197][T28738] RDX: 0000000000000004 RSI: 000000000000011b RDI: 0000000000000006 [ 1807.851209][T28738] RBP: 00007f6d80c51090 R08: 000000000000001c R09: 0000000000000000 [ 1807.851229][T28738] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000002 [ 1807.851241][T28738] R13: 00007f6d7ffe6038 R14: 00007f6d7ffe5fa0 R15: 00007fffb8a27e08 [ 1807.851277][T28738] [ 1808.570017][T28760] netlink: 'syz.3.17916': attribute type 4 has an invalid length. [ 1808.584914][T28760] netlink: 17 bytes leftover after parsing attributes in process `syz.3.17916'. [ 1808.602980][T28752] Bluetooth: hci0: invalid length 0, exp 2 for type 4 [ 1808.727177][T28770] syzkaller0: entered promiscuous mode [ 1808.743777][T28770] syzkaller0: entered allmulticast mode [ 1808.910324][T28777] Bluetooth: hci0: invalid length 0, exp 2 for type 14 [ 1809.000274][T28779] lo speed is unknown, defaulting to 1000 [ 1809.008886][T28779] vxcan1 speed is unknown, defaulting to 1000 [ 1809.429086][T28796] tipc: Started in network mode [ 1809.433988][T28796] tipc: Node identity 0a9489652956, cluster identity 4711 [ 1809.465094][T28796] tipc: Enabled bearer , priority 0 [ 1809.493034][T28794] lo speed is unknown, defaulting to 1000 [ 1809.634052][T28800] syzkaller0: entered promiscuous mode [ 1809.640080][T28800] syzkaller0: entered allmulticast mode [ 1809.646336][T28800] tipc: Resetting bearer [ 1809.683918][T28795] tipc: Resetting bearer [ 1810.561103][T27115] tipc: Node number set to 599951717 [ 1811.914039][T28795] tipc: Disabling bearer [ 1811.923174][T28813] kthread_run failed with err -4 [ 1811.931447][T28794] vxcan1 speed is unknown, defaulting to 1000 [ 1812.235968][T28821] lo speed is unknown, defaulting to 1000 [ 1812.359680][T28834] __nla_validate_parse: 3 callbacks suppressed [ 1812.359701][T28834] netlink: 244 bytes leftover after parsing attributes in process `syz.1.17941'. [ 1812.392549][T28821] vxcan1 speed is unknown, defaulting to 1000 [ 1812.551946][T28838] lo: entered allmulticast mode [ 1812.573692][T28840] sctp: [Deprecated]: syz.3.17942 (pid 28840) Use of int in max_burst socket option. [ 1812.573692][T28840] Use struct sctp_assoc_value instead [ 1812.865197][T28845] netlink: 24 bytes leftover after parsing attributes in process `syz.1.17945'. [ 1812.896095][T28845] netlink: 68 bytes leftover after parsing attributes in process `syz.1.17945'. [ 1813.164522][T28850] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17947'. [ 1813.174274][T28850] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17947'. [ 1813.207762][T28850] netlink: 124 bytes leftover after parsing attributes in process `syz.2.17947'. [ 1813.546099][T28861] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17951'. [ 1813.711525][T28871] FAULT_INJECTION: forcing a failure. [ 1813.711525][T28871] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1813.730521][T28871] CPU: 1 UID: 0 PID: 28871 Comm: syz.0.17955 Not tainted syzkaller #0 PREEMPT(full) [ 1813.730548][T28871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1813.730558][T28871] Call Trace: [ 1813.730566][T28871] [ 1813.730574][T28871] dump_stack_lvl+0x189/0x250 [ 1813.730598][T28871] ? __pfx____ratelimit+0x10/0x10 [ 1813.730625][T28871] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1813.730644][T28871] ? __pfx__printk+0x10/0x10 [ 1813.730661][T28871] ? __might_fault+0xb0/0x130 [ 1813.730690][T28871] should_fail_ex+0x414/0x560 [ 1813.730720][T28871] _copy_from_user+0x2d/0xb0 [ 1813.730744][T28871] do_ip6t_set_ctl+0x69f/0xce0 [ 1813.730768][T28871] ? rcu_is_watching+0x15/0xb0 [ 1813.730793][T28871] ? trace_contention_end+0x39/0x120 [ 1813.730817][T28871] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 1813.730858][T28871] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1813.730890][T28871] ? __lock_acquire+0xab9/0xd20 [ 1813.730914][T28871] nf_setsockopt+0x26f/0x290 [ 1813.730939][T28871] rawv6_setsockopt+0x23b/0x5b0 [ 1813.730964][T28871] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 1813.730984][T28871] ? aa_sock_opt_perm+0xff/0x1b0 [ 1813.731006][T28871] ? sock_common_setsockopt+0x36/0xc0 [ 1813.731028][T28871] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1813.731050][T28871] do_sock_setsockopt+0x17c/0x1b0 [ 1813.731080][T28871] __x64_sys_setsockopt+0x13f/0x1b0 [ 1813.731110][T28871] do_syscall_64+0xfa/0xfa0 [ 1813.731125][T28871] ? lockdep_hardirqs_on+0x9c/0x150 [ 1813.731142][T28871] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1813.731158][T28871] ? clear_bhb_loop+0x60/0xb0 [ 1813.731178][T28871] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1813.731194][T28871] RIP: 0033:0x7f4a05f8efc9 [ 1813.731211][T28871] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1813.731225][T28871] RSP: 002b:00007f4a06edf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1813.731244][T28871] RAX: ffffffffffffffda RBX: 00007f4a061e5fa0 RCX: 00007f4a05f8efc9 [ 1813.731258][T28871] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 1813.731269][T28871] RBP: 00007f4a06edf090 R08: 00000000000003f8 R09: 0000000000000000 [ 1813.731282][T28871] R10: 0000200000000440 R11: 0000000000000246 R12: 0000000000000001 [ 1813.731295][T28871] R13: 00007f4a061e6038 R14: 00007f4a061e5fa0 R15: 00007fff6c3d6628 [ 1813.731325][T28871] [ 1813.843862][T28879] sctp: [Deprecated]: syz.5.17952 (pid 28879) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1813.843862][T28879] Use struct sctp_sack_info instead [ 1813.868320][T28864] bond3: option arp_interval: invalid value (18446744073709551615) [ 1813.872538][T28879] sctp: [Deprecated]: syz.5.17952 (pid 28879) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1813.872538][T28879] Use struct sctp_sack_info instead [ 1813.874108][T28864] bond3: option arp_interval: allowed values 0 - 2147483647 [ 1814.026040][T28864] bond3 (unregistering): Released all slaves [ 1814.052171][T28868] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17953'. [ 1814.062235][T28868] netlink: 12 bytes leftover after parsing attributes in process `syz.2.17953'. [ 1814.127889][T28887] FAULT_INJECTION: forcing a failure. [ 1814.127889][T28887] name failslab, interval 1, probability 0, space 0, times 0 [ 1814.143333][T28887] CPU: 0 UID: 0 PID: 28887 Comm: syz.0.17958 Not tainted syzkaller #0 PREEMPT(full) [ 1814.143360][T28887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1814.143371][T28887] Call Trace: [ 1814.143379][T28887] [ 1814.143388][T28887] dump_stack_lvl+0x189/0x250 [ 1814.143412][T28887] ? __pfx____ratelimit+0x10/0x10 [ 1814.143439][T28887] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1814.143458][T28887] ? __pfx__printk+0x10/0x10 [ 1814.143474][T28887] ? netlink_sendmsg+0x805/0xb30 [ 1814.143500][T28887] ? __x64_sys_sendmsg+0x19b/0x260 [ 1814.143518][T28887] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1814.143546][T28887] should_fail_ex+0x414/0x560 [ 1814.143577][T28887] should_failslab+0xa8/0x100 [ 1814.143599][T28887] kmem_cache_alloc_noprof+0x74/0x6e0 [ 1814.143617][T28887] ? skb_clone+0x212/0x3a0 [ 1814.143641][T28887] skb_clone+0x212/0x3a0 [ 1814.143661][T28887] __netlink_deliver_tap+0x404/0x850 [ 1814.143703][T28887] ? netlink_deliver_tap+0x2e/0x1b0 [ 1814.143728][T28887] netlink_deliver_tap+0x19c/0x1b0 [ 1814.143755][T28887] netlink_sendskb+0x68/0x140 [ 1814.143780][T28887] netlink_unicast+0x397/0x9e0 [ 1814.143799][T28887] ? __asan_memcpy+0x40/0x70 [ 1814.143825][T28887] ? __pfx_netlink_unicast+0x10/0x10 [ 1814.143856][T28887] netlink_rcv_skb+0x28c/0x470 [ 1814.143878][T28887] ? __lock_acquire+0xab9/0xd20 [ 1814.143898][T28887] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1814.143919][T28887] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1814.143963][T28887] ? down_read+0x1ad/0x2e0 [ 1814.143986][T28887] genl_rcv+0x28/0x40 [ 1814.144002][T28887] netlink_unicast+0x82f/0x9e0 [ 1814.144034][T28887] ? __pfx_netlink_unicast+0x10/0x10 [ 1814.144059][T28887] ? netlink_sendmsg+0x642/0xb30 [ 1814.144081][T28887] ? skb_put+0x11b/0x210 [ 1814.144110][T28887] netlink_sendmsg+0x805/0xb30 [ 1814.144144][T28887] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1814.144172][T28887] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1814.144194][T28887] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1814.144217][T28887] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1814.144242][T28887] __sock_sendmsg+0x21c/0x270 [ 1814.144267][T28887] ____sys_sendmsg+0x505/0x830 [ 1814.144290][T28887] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1814.144328][T28887] ? import_iovec+0x74/0xa0 [ 1814.144356][T28887] ___sys_sendmsg+0x21f/0x2a0 [ 1814.144377][T28887] ? __pfx____sys_sendmsg+0x10/0x10 [ 1814.144434][T28887] ? __fget_files+0x2a/0x420 [ 1814.144455][T28887] ? __fget_files+0x3a0/0x420 [ 1814.144488][T28887] __x64_sys_sendmsg+0x19b/0x260 [ 1814.144509][T28887] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1814.144537][T28887] ? __pfx_ksys_write+0x10/0x10 [ 1814.144561][T28887] ? do_syscall_64+0xbe/0xfa0 [ 1814.144583][T28887] do_syscall_64+0xfa/0xfa0 [ 1814.144600][T28887] ? lockdep_hardirqs_on+0x9c/0x150 [ 1814.144618][T28887] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1814.144636][T28887] ? clear_bhb_loop+0x60/0xb0 [ 1814.144658][T28887] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1814.144682][T28887] RIP: 0033:0x7f4a05f8efc9 [ 1814.144699][T28887] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1814.144715][T28887] RSP: 002b:00007f4a06edf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1814.144736][T28887] RAX: ffffffffffffffda RBX: 00007f4a061e5fa0 RCX: 00007f4a05f8efc9 [ 1814.144750][T28887] RDX: 0000000004004050 RSI: 00002000000001c0 RDI: 0000000000000003 [ 1814.144762][T28887] RBP: 00007f4a06edf090 R08: 0000000000000000 R09: 0000000000000000 [ 1814.144774][T28887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1814.144785][T28887] R13: 00007f4a061e6038 R14: 00007f4a061e5fa0 R15: 00007fff6c3d6628 [ 1814.144819][T28887] [ 1814.515049][T28868] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17953'. [ 1814.621544][T28890] bridge0: entered allmulticast mode [ 1814.666164][T28890] xfrm1: entered allmulticast mode [ 1814.758561][T28900] tipc: Started in network mode [ 1814.763573][T28900] tipc: Node identity 56912dc5afdb, cluster identity 4711 [ 1814.771004][T28900] tipc: Enabled bearer , priority 0 [ 1814.782135][T28900] syzkaller0: entered promiscuous mode [ 1814.787701][T28900] syzkaller0: entered allmulticast mode [ 1814.810425][T28900] tipc: Resetting bearer [ 1814.857919][T28899] tipc: Resetting bearer [ 1814.909281][T28899] tipc: Disabling bearer [ 1815.020471][T28912] FAULT_INJECTION: forcing a failure. [ 1815.020471][T28912] name failslab, interval 1, probability 0, space 0, times 0 [ 1815.036201][T28912] CPU: 1 UID: 0 PID: 28912 Comm: syz.2.17967 Not tainted syzkaller #0 PREEMPT(full) [ 1815.036226][T28912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1815.036237][T28912] Call Trace: [ 1815.036245][T28912] [ 1815.036253][T28912] dump_stack_lvl+0x189/0x250 [ 1815.036276][T28912] ? __pfx____ratelimit+0x10/0x10 [ 1815.036301][T28912] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1815.036319][T28912] ? __pfx__printk+0x10/0x10 [ 1815.036336][T28912] ? netlink_sendmsg+0x805/0xb30 [ 1815.036361][T28912] ? __x64_sys_sendmsg+0x19b/0x260 [ 1815.036378][T28912] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1815.036408][T28912] should_fail_ex+0x414/0x560 [ 1815.036441][T28912] should_failslab+0xa8/0x100 [ 1815.036467][T28912] kmem_cache_alloc_noprof+0x74/0x6e0 [ 1815.036488][T28912] ? skb_clone+0x212/0x3a0 [ 1815.036513][T28912] skb_clone+0x212/0x3a0 [ 1815.036536][T28912] __netlink_deliver_tap+0x404/0x850 [ 1815.036574][T28912] ? netlink_deliver_tap+0x2e/0x1b0 [ 1815.036607][T28912] netlink_deliver_tap+0x19c/0x1b0 [ 1815.036634][T28912] netlink_sendskb+0x68/0x140 [ 1815.036660][T28912] netlink_unicast+0x397/0x9e0 [ 1815.036681][T28912] ? __asan_memcpy+0x40/0x70 [ 1815.036709][T28912] ? __pfx_netlink_unicast+0x10/0x10 [ 1815.036743][T28912] netlink_rcv_skb+0x28c/0x470 [ 1815.036765][T28912] ? __lock_acquire+0xab9/0xd20 [ 1815.036789][T28912] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1815.036811][T28912] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1815.036859][T28912] ? down_read+0x1ad/0x2e0 [ 1815.036884][T28912] genl_rcv+0x28/0x40 [ 1815.036902][T28912] netlink_unicast+0x82f/0x9e0 [ 1815.036939][T28912] ? __pfx_netlink_unicast+0x10/0x10 [ 1815.036965][T28912] ? netlink_sendmsg+0x642/0xb30 [ 1815.036987][T28912] ? skb_put+0x11b/0x210 [ 1815.037017][T28912] netlink_sendmsg+0x805/0xb30 [ 1815.037053][T28912] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1815.037082][T28912] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1815.037105][T28912] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1815.037129][T28912] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1815.037154][T28912] __sock_sendmsg+0x21c/0x270 [ 1815.037180][T28912] ____sys_sendmsg+0x505/0x830 [ 1815.037204][T28912] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1815.037242][T28912] ? import_iovec+0x74/0xa0 [ 1815.037270][T28912] ___sys_sendmsg+0x21f/0x2a0 [ 1815.037290][T28912] ? __pfx____sys_sendmsg+0x10/0x10 [ 1815.037341][T28912] ? __fget_files+0x2a/0x420 [ 1815.037362][T28912] ? __fget_files+0x3a0/0x420 [ 1815.037394][T28912] __x64_sys_sendmsg+0x19b/0x260 [ 1815.037415][T28912] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1815.037444][T28912] ? __pfx_ksys_write+0x10/0x10 [ 1815.037468][T28912] ? do_syscall_64+0xbe/0xfa0 [ 1815.037490][T28912] do_syscall_64+0xfa/0xfa0 [ 1815.037508][T28912] ? lockdep_hardirqs_on+0x9c/0x150 [ 1815.037527][T28912] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1815.037544][T28912] ? clear_bhb_loop+0x60/0xb0 [ 1815.037566][T28912] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1815.037584][T28912] RIP: 0033:0x7f6d7fd8efc9 [ 1815.037607][T28912] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1815.037622][T28912] RSP: 002b:00007f6d80c51038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1815.037642][T28912] RAX: ffffffffffffffda RBX: 00007f6d7ffe5fa0 RCX: 00007f6d7fd8efc9 [ 1815.037657][T28912] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 1815.037667][T28912] RBP: 00007f6d80c51090 R08: 0000000000000000 R09: 0000000000000000 [ 1815.037679][T28912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1815.037689][T28912] R13: 00007f6d7ffe6038 R14: 00007f6d7ffe5fa0 R15: 00007fffb8a27e08 [ 1815.037719][T28912] [ 1815.514123][T28919] lo speed is unknown, defaulting to 1000 [ 1815.540626][T28919] vxcan1 speed is unknown, defaulting to 1000 [ 1815.602105][T28927] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 1815.647561][T28927] FAULT_INJECTION: forcing a failure. [ 1815.647561][T28927] name failslab, interval 1, probability 0, space 0, times 0 [ 1815.660720][T28927] CPU: 1 UID: 0 PID: 28927 Comm: syz.0.17973 Not tainted syzkaller #0 PREEMPT(full) [ 1815.660746][T28927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1815.660757][T28927] Call Trace: [ 1815.660766][T28927] [ 1815.660775][T28927] dump_stack_lvl+0x189/0x250 [ 1815.660800][T28927] ? __pfx____ratelimit+0x10/0x10 [ 1815.660825][T28927] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1815.660844][T28927] ? __pfx__printk+0x10/0x10 [ 1815.660859][T28927] ? netlink_sendmsg+0x805/0xb30 [ 1815.660885][T28927] ? __x64_sys_sendmsg+0x19b/0x260 [ 1815.660902][T28927] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1815.660931][T28927] should_fail_ex+0x414/0x560 [ 1815.660963][T28927] should_failslab+0xa8/0x100 [ 1815.660987][T28927] kmem_cache_alloc_noprof+0x74/0x6e0 [ 1815.661008][T28927] ? skb_clone+0x212/0x3a0 [ 1815.661032][T28927] skb_clone+0x212/0x3a0 [ 1815.661054][T28927] __netlink_deliver_tap+0x404/0x850 [ 1815.661092][T28927] ? netlink_deliver_tap+0x2e/0x1b0 [ 1815.661117][T28927] netlink_deliver_tap+0x19c/0x1b0 [ 1815.661143][T28927] netlink_sendskb+0x68/0x140 [ 1815.661168][T28927] netlink_unicast+0x397/0x9e0 [ 1815.661186][T28927] ? __asan_memcpy+0x40/0x70 [ 1815.661211][T28927] ? __pfx_netlink_unicast+0x10/0x10 [ 1815.661243][T28927] netlink_rcv_skb+0x28c/0x470 [ 1815.661265][T28927] ? __lock_acquire+0xab9/0xd20 [ 1815.661288][T28927] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1815.661320][T28927] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1815.661366][T28927] ? down_read+0x1ad/0x2e0 [ 1815.661389][T28927] genl_rcv+0x28/0x40 [ 1815.661407][T28927] netlink_unicast+0x82f/0x9e0 [ 1815.661439][T28927] ? __pfx_netlink_unicast+0x10/0x10 [ 1815.661463][T28927] ? netlink_sendmsg+0x642/0xb30 [ 1815.661486][T28927] ? skb_put+0x11b/0x210 [ 1815.661515][T28927] netlink_sendmsg+0x805/0xb30 [ 1815.661550][T28927] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1815.661579][T28927] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1815.661601][T28927] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1815.661623][T28927] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1815.661647][T28927] __sock_sendmsg+0x21c/0x270 [ 1815.661670][T28927] ____sys_sendmsg+0x505/0x830 [ 1815.661692][T28927] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1815.661727][T28927] ? import_iovec+0x74/0xa0 [ 1815.661757][T28927] ___sys_sendmsg+0x21f/0x2a0 [ 1815.661778][T28927] ? __pfx____sys_sendmsg+0x10/0x10 [ 1815.661831][T28927] ? __fget_files+0x2a/0x420 [ 1815.661852][T28927] ? __fget_files+0x3a0/0x420 [ 1815.661885][T28927] __x64_sys_sendmsg+0x19b/0x260 [ 1815.661907][T28927] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1815.661936][T28927] ? __pfx_ksys_write+0x10/0x10 [ 1815.661961][T28927] ? do_syscall_64+0xbe/0xfa0 [ 1815.661984][T28927] do_syscall_64+0xfa/0xfa0 [ 1815.662001][T28927] ? lockdep_hardirqs_on+0x9c/0x150 [ 1815.662020][T28927] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1815.662038][T28927] ? clear_bhb_loop+0x60/0xb0 [ 1815.662061][T28927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1815.662079][T28927] RIP: 0033:0x7f4a05f8efc9 [ 1815.662097][T28927] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1815.662114][T28927] RSP: 002b:00007f4a06edf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1815.662135][T28927] RAX: ffffffffffffffda RBX: 00007f4a061e5fa0 RCX: 00007f4a05f8efc9 [ 1815.662149][T28927] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1815.662162][T28927] RBP: 00007f4a06edf090 R08: 0000000000000000 R09: 0000000000000000 [ 1815.662174][T28927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1815.662186][T28927] R13: 00007f4a061e6038 R14: 00007f4a061e5fa0 R15: 00007fff6c3d6628 [ 1815.662220][T28927] [ 1817.170320][T28961] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 1817.208244][T28956] bridge0: left promiscuous mode [ 1817.213245][T28956] bridge0: left allmulticast mode [ 1817.803701][T28971] __nla_validate_parse: 10 callbacks suppressed [ 1817.803721][T28971] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17986'. [ 1817.833474][T28971] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17986'. [ 1817.971023][T28971] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17986'. [ 1817.989962][T28971] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17986'. [ 1818.272765][T29000] lo speed is unknown, defaulting to 1000 [ 1818.280846][T29000] vxcan1 speed is unknown, defaulting to 1000 [ 1819.066817][T29025] netlink: 'syz.0.18002': attribute type 1 has an invalid length. [ 1819.224417][T29025] netlink: 224 bytes leftover after parsing attributes in process `syz.0.18002'. [ 1819.312899][T29015] tipc: Enabled bearer , priority 0 [ 1819.558607][T29014] tipc: Disabling bearer [ 1819.560240][T29034] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18005'. [ 1819.615211][T29034] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18005'. [ 1819.680576][T29034] netlink: 124 bytes leftover after parsing attributes in process `syz.0.18005'. [ 1820.398417][T29056] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18012'. [ 1820.415048][T29056] FAULT_INJECTION: forcing a failure. [ 1820.415048][T29056] name failslab, interval 1, probability 0, space 0, times 0 [ 1820.458800][T29056] CPU: 0 UID: 0 PID: 29056 Comm: syz.0.18012 Not tainted syzkaller #0 PREEMPT(full) [ 1820.458827][T29056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1820.458839][T29056] Call Trace: [ 1820.458846][T29056] [ 1820.458856][T29056] dump_stack_lvl+0x189/0x250 [ 1820.458883][T29056] ? __pfx____ratelimit+0x10/0x10 [ 1820.458910][T29056] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1820.458926][T29056] ? __pfx__printk+0x10/0x10 [ 1820.458947][T29056] ? __pfx___might_resched+0x10/0x10 [ 1820.458972][T29056] ? fs_reclaim_acquire+0x7d/0x100 [ 1820.458998][T29056] should_fail_ex+0x414/0x560 [ 1820.459031][T29056] should_failslab+0xa8/0x100 [ 1820.459056][T29056] kmem_cache_alloc_node_noprof+0x77/0x710 [ 1820.459077][T29056] ? __alloc_skb+0x112/0x2d0 [ 1820.459107][T29056] __alloc_skb+0x112/0x2d0 [ 1820.459136][T29056] inet_ifmcaddr_notify+0x7e/0x150 [ 1820.459169][T29056] __ip_mc_dec_group+0x40b/0x690 [ 1820.459191][T29056] inetdev_event+0x2a7/0x15b0 [ 1820.459220][T29056] ? __pfx_inetdev_event+0x10/0x10 [ 1820.459253][T29056] notifier_call_chain+0x1b6/0x3e0 [ 1820.459287][T29056] netif_close_many+0x29c/0x410 [ 1820.459310][T29056] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1820.459341][T29056] ? __pfx_netif_close_many+0x10/0x10 [ 1820.459361][T29056] ? rcu_is_watching+0x15/0xb0 [ 1820.459386][T29056] ? trace_contention_end+0x39/0x120 [ 1820.459419][T29056] unregister_netdevice_many_notify+0xb29/0x2390 [ 1820.459446][T29056] ? kasan_save_track+0x4f/0x80 [ 1820.459463][T29056] ? kasan_save_track+0x3e/0x80 [ 1820.459480][T29056] ? __kasan_save_free_info+0x46/0x50 [ 1820.459505][T29056] ? nlmon_xmit+0xb0/0x100 [ 1820.459529][T29056] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 1820.459552][T29056] ? unregister_netdevice_queue+0x1b3/0x380 [ 1820.459576][T29056] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 1820.459599][T29056] ? __nla_parse+0x40/0x60 [ 1820.459622][T29056] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 1820.459641][T29056] rtnl_dellink+0x489/0x700 [ 1820.459669][T29056] ? __pfx_rtnl_dellink+0x10/0x10 [ 1820.459701][T29056] ? kasan_quarantine_put+0xdd/0x220 [ 1820.459720][T29056] ? lockdep_hardirqs_on+0x9c/0x150 [ 1820.459825][T29056] ? __pfx_rtnl_dellink+0x10/0x10 [ 1820.459848][T29056] rtnetlink_rcv_msg+0x7cf/0xb70 [ 1820.459875][T29056] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 1820.459898][T29056] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1820.459918][T29056] ? ref_tracker_free+0x63a/0x7d0 [ 1820.460004][T29056] ? __asan_memcpy+0x40/0x70 [ 1820.460032][T29056] ? __pfx_ref_tracker_free+0x10/0x10 [ 1820.460064][T29056] netlink_rcv_skb+0x208/0x470 [ 1820.460091][T29056] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1820.460119][T29056] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1820.460156][T29056] ? netlink_deliver_tap+0x2e/0x1b0 [ 1820.460185][T29056] netlink_unicast+0x82f/0x9e0 [ 1820.460226][T29056] ? __pfx_netlink_unicast+0x10/0x10 [ 1820.460250][T29056] ? netlink_sendmsg+0x642/0xb30 [ 1820.460271][T29056] ? skb_put+0x11b/0x210 [ 1820.460297][T29056] netlink_sendmsg+0x805/0xb30 [ 1820.460329][T29056] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1820.460355][T29056] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1820.460376][T29056] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1820.460398][T29056] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1820.460421][T29056] __sock_sendmsg+0x21c/0x270 [ 1820.460446][T29056] ____sys_sendmsg+0x505/0x830 [ 1820.460468][T29056] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1820.460503][T29056] ? import_iovec+0x74/0xa0 [ 1820.460529][T29056] ___sys_sendmsg+0x21f/0x2a0 [ 1820.460549][T29056] ? __pfx____sys_sendmsg+0x10/0x10 [ 1820.460600][T29056] ? __fget_files+0x2a/0x420 [ 1820.460619][T29056] ? __fget_files+0x3a0/0x420 [ 1820.460650][T29056] __x64_sys_sendmsg+0x19b/0x260 [ 1820.460672][T29056] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1820.460701][T29056] ? __pfx_ksys_write+0x10/0x10 [ 1820.460726][T29056] ? do_syscall_64+0xbe/0xfa0 [ 1820.460750][T29056] do_syscall_64+0xfa/0xfa0 [ 1820.460767][T29056] ? lockdep_hardirqs_on+0x9c/0x150 [ 1820.460785][T29056] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1820.460804][T29056] ? clear_bhb_loop+0x60/0xb0 [ 1820.460827][T29056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1820.460845][T29056] RIP: 0033:0x7f4a05f8efc9 [ 1820.460862][T29056] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1820.460880][T29056] RSP: 002b:00007f4a06edf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1820.460901][T29056] RAX: ffffffffffffffda RBX: 00007f4a061e5fa0 RCX: 00007f4a05f8efc9 [ 1820.460915][T29056] RDX: 0000000020000050 RSI: 00002000000002c0 RDI: 0000000000000003 [ 1820.460929][T29056] RBP: 00007f4a06edf090 R08: 0000000000000000 R09: 0000000000000000 [ 1820.460942][T29056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1820.460953][T29056] R13: 00007f4a061e6038 R14: 00007f4a061e5fa0 R15: 00007fff6c3d6628 [ 1820.460986][T29056] [ 1820.646386][ C1] vcan0: j1939_tp_rxtimer: 0xffff888055be1800: rx timeout, send abort [ 1821.054811][T29062] FAULT_INJECTION: forcing a failure. [ 1821.054811][T29062] name failslab, interval 1, probability 0, space 0, times 0 [ 1821.137853][T29062] CPU: 0 UID: 0 PID: 29062 Comm: syz.5.18015 Not tainted syzkaller #0 PREEMPT(full) [ 1821.137881][T29062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1821.137893][T29062] Call Trace: [ 1821.137900][T29062] [ 1821.137909][T29062] dump_stack_lvl+0x189/0x250 [ 1821.137934][T29062] ? __pfx____ratelimit+0x10/0x10 [ 1821.137961][T29062] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1821.137980][T29062] ? __pfx__printk+0x10/0x10 [ 1821.138005][T29062] ? __pfx___might_resched+0x10/0x10 [ 1821.138027][T29062] ? fs_reclaim_acquire+0x7d/0x100 [ 1821.138054][T29062] should_fail_ex+0x414/0x560 [ 1821.138086][T29062] should_failslab+0xa8/0x100 [ 1821.138110][T29062] __kmalloc_cache_noprof+0x6f/0x6f0 [ 1821.138131][T29062] ? call_usermodehelper_setup+0x8e/0x270 [ 1821.138160][T29062] ? trace_kmalloc+0x1f/0xd0 [ 1821.138177][T29062] ? __kmalloc_node_track_caller_noprof+0x587/0x800 [ 1821.138203][T29062] call_usermodehelper_setup+0x8e/0x270 [ 1821.138223][T29062] ? __pfx_free_modprobe_argv+0x10/0x10 [ 1821.138250][T29062] __request_module+0x39f/0x5e0 [ 1821.138277][T29062] ? rtnl_link_ops_get+0x23/0x250 [ 1821.138302][T29062] ? __pfx___request_module+0x10/0x10 [ 1821.138336][T29062] ? rtnl_link_ops_get+0x23/0x250 [ 1821.138359][T29062] ? rtnl_link_ops_get+0x23/0x250 [ 1821.138384][T29062] ? rtnl_link_ops_get+0x215/0x250 [ 1821.138411][T29062] rtnl_newlink+0x65d/0x1c80 [ 1821.138447][T29062] ? __pfx_rtnl_newlink+0x10/0x10 [ 1821.138481][T29062] ? __lock_acquire+0xab9/0xd20 [ 1821.138510][T29062] ? __lock_acquire+0xab9/0xd20 [ 1821.138544][T29062] ? __lock_acquire+0xab9/0xd20 [ 1821.138586][T29062] ? is_bpf_text_address+0x26/0x2b0 [ 1821.138615][T29062] ? is_bpf_text_address+0x292/0x2b0 [ 1821.138637][T29062] ? is_bpf_text_address+0x26/0x2b0 [ 1821.138669][T29062] ? __lock_acquire+0xab9/0xd20 [ 1821.138716][T29062] ? __pfx_rtnl_newlink+0x10/0x10 [ 1821.138738][T29062] rtnetlink_rcv_msg+0x7cf/0xb70 [ 1821.138761][T29062] ? __lock_acquire+0xab9/0xd20 [ 1821.138785][T29062] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 1821.138806][T29062] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1821.138846][T29062] netlink_rcv_skb+0x208/0x470 [ 1821.138869][T29062] ? __lock_acquire+0xab9/0xd20 [ 1821.138890][T29062] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1821.138915][T29062] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1821.138951][T29062] ? netlink_deliver_tap+0x2e/0x1b0 [ 1821.138983][T29062] netlink_unicast+0x82f/0x9e0 [ 1821.139032][T29062] ? __pfx_netlink_unicast+0x10/0x10 [ 1821.139056][T29062] ? netlink_sendmsg+0x642/0xb30 [ 1821.139079][T29062] ? skb_put+0x11b/0x210 [ 1821.139106][T29062] netlink_sendmsg+0x805/0xb30 [ 1821.139140][T29062] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1821.139173][T29062] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1821.139195][T29062] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1821.139216][T29062] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1821.139242][T29062] __sock_sendmsg+0x21c/0x270 [ 1821.139266][T29062] ____sys_sendmsg+0x52d/0x830 [ 1821.139291][T29062] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1821.139326][T29062] ? import_iovec+0x74/0xa0 [ 1821.139353][T29062] ___sys_sendmsg+0x21f/0x2a0 [ 1821.139374][T29062] ? __pfx____sys_sendmsg+0x10/0x10 [ 1821.139428][T29062] ? __fget_files+0x2a/0x420 [ 1821.139448][T29062] ? __fget_files+0x3a0/0x420 [ 1821.139479][T29062] __sys_sendmmsg+0x227/0x430 [ 1821.139500][T29062] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1821.139524][T29062] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1821.139558][T29062] ? ksys_write+0x22a/0x250 [ 1821.139581][T29062] ? __pfx_ksys_write+0x10/0x10 [ 1821.139606][T29062] __x64_sys_sendmmsg+0xa0/0xc0 [ 1821.139626][T29062] do_syscall_64+0xfa/0xfa0 [ 1821.139644][T29062] ? lockdep_hardirqs_on+0x9c/0x150 [ 1821.139662][T29062] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1821.139680][T29062] ? clear_bhb_loop+0x60/0xb0 [ 1821.139703][T29062] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1821.139721][T29062] RIP: 0033:0x7f44a8f8efc9 [ 1821.139738][T29062] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1821.139754][T29062] RSP: 002b:00007f44a9e3f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1821.139775][T29062] RAX: ffffffffffffffda RBX: 00007f44a91e5fa0 RCX: 00007f44a8f8efc9 [ 1821.139789][T29062] RDX: 0400000000000235 RSI: 0000200000000000 RDI: 0000000000000003 [ 1821.139802][T29062] RBP: 00007f44a9e3f090 R08: 0000000000000000 R09: 0000000000000000 [ 1821.139813][T29062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1821.139824][T29062] R13: 00007f44a91e6038 R14: 00007f44a91e5fa0 R15: 00007ffc15ab5c68 [ 1821.139856][T29062] [ 1821.139979][T29062] netlink: 40 bytes leftover after parsing attributes in process `syz.5.18015'. [ 1821.933130][T29082] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 1821.984517][T29076] netlink: 'syz.5.18020': attribute type 25 has an invalid length. [ 1822.241853][T29097] FAULT_INJECTION: forcing a failure. [ 1822.241853][T29097] name failslab, interval 1, probability 0, space 0, times 0 [ 1822.257270][T29097] CPU: 1 UID: 0 PID: 29097 Comm: syz.0.18030 Not tainted syzkaller #0 PREEMPT(full) [ 1822.257300][T29097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1822.257311][T29097] Call Trace: [ 1822.257320][T29097] [ 1822.257328][T29097] dump_stack_lvl+0x189/0x250 [ 1822.257354][T29097] ? __pfx____ratelimit+0x10/0x10 [ 1822.257380][T29097] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1822.257399][T29097] ? __pfx__printk+0x10/0x10 [ 1822.257415][T29097] ? __sock_sendmsg+0x21c/0x270 [ 1822.257437][T29097] ? __x64_sys_sendmmsg+0xa0/0xc0 [ 1822.257453][T29097] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1822.257479][T29097] should_fail_ex+0x414/0x560 [ 1822.257510][T29097] should_failslab+0xa8/0x100 [ 1822.257535][T29097] kmem_cache_alloc_noprof+0x74/0x6e0 [ 1822.257554][T29097] ? skb_clone+0x212/0x3a0 [ 1822.257578][T29097] skb_clone+0x212/0x3a0 [ 1822.257599][T29097] __netlink_deliver_tap+0x404/0x850 [ 1822.257635][T29097] ? netlink_deliver_tap+0x2e/0x1b0 [ 1822.257660][T29097] netlink_deliver_tap+0x19c/0x1b0 [ 1822.257686][T29097] netlink_sendskb+0x68/0x140 [ 1822.257711][T29097] netlink_unicast+0x397/0x9e0 [ 1822.257731][T29097] ? __asan_memcpy+0x40/0x70 [ 1822.257757][T29097] ? __pfx_netlink_unicast+0x10/0x10 [ 1822.257791][T29097] netlink_rcv_skb+0x28c/0x470 [ 1822.257817][T29097] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1822.257855][T29097] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1822.257892][T29097] ? netlink_deliver_tap+0x2e/0x1b0 [ 1822.257925][T29097] netlink_unicast+0x82f/0x9e0 [ 1822.257958][T29097] ? __pfx_netlink_unicast+0x10/0x10 [ 1822.257982][T29097] ? netlink_sendmsg+0x642/0xb30 [ 1822.258004][T29097] ? skb_put+0x11b/0x210 [ 1822.258034][T29097] netlink_sendmsg+0x805/0xb30 [ 1822.258069][T29097] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1822.258097][T29097] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1822.258120][T29097] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1822.258142][T29097] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1822.258167][T29097] __sock_sendmsg+0x21c/0x270 [ 1822.258192][T29097] ____sys_sendmsg+0x52d/0x830 [ 1822.258217][T29097] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1822.258254][T29097] ? import_iovec+0x74/0xa0 [ 1822.258280][T29097] ___sys_sendmsg+0x21f/0x2a0 [ 1822.258301][T29097] ? __pfx____sys_sendmsg+0x10/0x10 [ 1822.258359][T29097] ? __fget_files+0x2a/0x420 [ 1822.258380][T29097] ? __fget_files+0x3a0/0x420 [ 1822.258413][T29097] __sys_sendmmsg+0x227/0x430 [ 1822.258437][T29097] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1822.258465][T29097] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1822.258510][T29097] ? ksys_write+0x22a/0x250 [ 1822.258533][T29097] ? __pfx_ksys_write+0x10/0x10 [ 1822.258558][T29097] __x64_sys_sendmmsg+0xa0/0xc0 [ 1822.258579][T29097] do_syscall_64+0xfa/0xfa0 [ 1822.258596][T29097] ? lockdep_hardirqs_on+0x9c/0x150 [ 1822.258614][T29097] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1822.258632][T29097] ? clear_bhb_loop+0x60/0xb0 [ 1822.258655][T29097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1822.258673][T29097] RIP: 0033:0x7f4a05f8efc9 [ 1822.258691][T29097] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1822.258707][T29097] RSP: 002b:00007f4a06edf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1822.258727][T29097] RAX: ffffffffffffffda RBX: 00007f4a061e5fa0 RCX: 00007f4a05f8efc9 [ 1822.258741][T29097] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000003 [ 1822.258753][T29097] RBP: 00007f4a06edf090 R08: 0000000000000000 R09: 0000000000000000 [ 1822.258765][T29097] R10: 00000000000000fc R11: 0000000000000246 R12: 0000000000000001 [ 1822.258777][T29097] R13: 00007f4a061e6038 R14: 00007f4a061e5fa0 R15: 00007fff6c3d6628 [ 1822.258815][T29097] [ 1822.967760][T27115] IPVS: starting estimator thread 0... [ 1822.993635][T29119] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 1823.068269][T29122] IPVS: using max 27 ests per chain, 64800 per kthread [ 1823.232145][T29134] IPVS: length: 24 != 6072 [ 1823.304937][T29137] FAULT_INJECTION: forcing a failure. [ 1823.304937][T29137] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1823.332146][T29137] CPU: 0 UID: 0 PID: 29137 Comm: syz.0.18043 Not tainted syzkaller #0 PREEMPT(full) [ 1823.332177][T29137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1823.332188][T29137] Call Trace: [ 1823.332196][T29137] [ 1823.332205][T29137] dump_stack_lvl+0x189/0x250 [ 1823.332231][T29137] ? __pfx____ratelimit+0x10/0x10 [ 1823.332259][T29137] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1823.332278][T29137] ? __pfx__printk+0x10/0x10 [ 1823.332297][T29137] ? __might_fault+0xb0/0x130 [ 1823.332329][T29137] should_fail_ex+0x414/0x560 [ 1823.332361][T29137] _copy_from_iter+0x1de/0x1790 [ 1823.332389][T29137] ? rcu_is_watching+0x15/0xb0 [ 1823.332417][T29137] ? kmalloc_reserve+0xbd/0x290 [ 1823.332442][T29137] ? __pfx__copy_from_iter+0x10/0x10 [ 1823.332466][T29137] ? __build_skb_around+0x262/0x3f0 [ 1823.332494][T29137] ? netlink_sendmsg+0x642/0xb30 [ 1823.332518][T29137] ? skb_put+0x11b/0x210 [ 1823.332546][T29137] netlink_sendmsg+0x6b2/0xb30 [ 1823.332581][T29137] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1823.332610][T29137] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1823.332632][T29137] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1823.332655][T29137] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1823.332681][T29137] __sock_sendmsg+0x21c/0x270 [ 1823.332706][T29137] ____sys_sendmsg+0x52d/0x830 [ 1823.332731][T29137] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1823.332767][T29137] ? import_iovec+0x74/0xa0 [ 1823.332793][T29137] ___sys_sendmsg+0x21f/0x2a0 [ 1823.332815][T29137] ? __pfx____sys_sendmsg+0x10/0x10 [ 1823.332878][T29137] ? __might_fault+0xb0/0x130 [ 1823.332902][T29137] __sys_sendmmsg+0x227/0x430 [ 1823.332927][T29137] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1823.332954][T29137] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1823.333002][T29137] ? ksys_write+0x22a/0x250 [ 1823.333026][T29137] ? __pfx_ksys_write+0x10/0x10 [ 1823.333051][T29137] __x64_sys_sendmmsg+0xa0/0xc0 [ 1823.333072][T29137] do_syscall_64+0xfa/0xfa0 [ 1823.333089][T29137] ? lockdep_hardirqs_on+0x9c/0x150 [ 1823.333107][T29137] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1823.333126][T29137] ? clear_bhb_loop+0x60/0xb0 [ 1823.333149][T29137] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1823.333166][T29137] RIP: 0033:0x7f4a05f8efc9 [ 1823.333184][T29137] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1823.333199][T29137] RSP: 002b:00007f4a06edf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1823.333220][T29137] RAX: ffffffffffffffda RBX: 00007f4a061e5fa0 RCX: 00007f4a05f8efc9 [ 1823.333233][T29137] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000006 [ 1823.333246][T29137] RBP: 00007f4a06edf090 R08: 0000000000000000 R09: 0000000000000000 [ 1823.333258][T29137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1823.333269][T29137] R13: 00007f4a061e6038 R14: 00007f4a061e5fa0 R15: 00007fff6c3d6628 [ 1823.333302][T29137] [ 1823.880746][T29139] __nla_validate_parse: 4 callbacks suppressed [ 1823.880764][T29139] netlink: 12 bytes leftover after parsing attributes in process `syz.0.18044'. [ 1823.922108][T29139] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1824.548681][T29158] FAULT_INJECTION: forcing a failure. [ 1824.548681][T29158] name failslab, interval 1, probability 0, space 0, times 0 [ 1824.564448][T29158] CPU: 1 UID: 0 PID: 29158 Comm: syz.0.18052 Not tainted syzkaller #0 PREEMPT(full) [ 1824.564475][T29158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1824.564486][T29158] Call Trace: [ 1824.564495][T29158] [ 1824.564503][T29158] dump_stack_lvl+0x189/0x250 [ 1824.564528][T29158] ? __pfx____ratelimit+0x10/0x10 [ 1824.564556][T29158] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1824.564576][T29158] ? __pfx__printk+0x10/0x10 [ 1824.564596][T29158] ? rcu_is_watching+0x15/0xb0 [ 1824.564631][T29158] should_fail_ex+0x414/0x560 [ 1824.564664][T29158] should_failslab+0xa8/0x100 [ 1824.564690][T29158] kmem_cache_alloc_noprof+0x74/0x6e0 [ 1824.564710][T29158] ? dst_alloc+0x105/0x170 [ 1824.564736][T29158] dst_alloc+0x105/0x170 [ 1824.564761][T29158] ip_route_output_key_hash_rcu+0x1560/0x23e0 [ 1824.564785][T29158] ? ip_route_output_key_hash_rcu+0x12f1/0x23e0 [ 1824.564814][T29158] ? ip_route_output_key_hash+0xc1/0x280 [ 1824.564838][T29158] ip_route_output_key_hash+0x174/0x280 [ 1824.564869][T29158] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 1824.564896][T29158] ? string+0x279/0x2b0 [ 1824.564930][T29158] tcp_v4_connect+0x751/0x1a00 [ 1824.564979][T29158] ? __pfx_tcp_v4_connect+0x10/0x10 [ 1824.565006][T29158] ? tcp_v6_connect+0x62f/0x1870 [ 1824.565029][T29158] tcp_v6_connect+0xab1/0x1870 [ 1824.565061][T29158] ? __pfx_tcp_v6_connect+0x10/0x10 [ 1824.565087][T29158] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 1824.565136][T29158] __inet_stream_connect+0x2ae/0xe70 [ 1824.565172][T29158] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1824.565196][T29158] ? __pfx___inet_stream_connect+0x10/0x10 [ 1824.565220][T29158] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1824.565243][T29158] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1824.565278][T29158] inet_stream_connect+0x66/0xa0 [ 1824.565306][T29158] __sys_connect+0x316/0x440 [ 1824.565329][T29158] ? __fget_files+0x3a0/0x420 [ 1824.565351][T29158] ? __pfx___sys_connect+0x10/0x10 [ 1824.565389][T29158] ? __pfx_ksys_write+0x10/0x10 [ 1824.565415][T29158] __x64_sys_connect+0x7a/0x90 [ 1824.565440][T29158] do_syscall_64+0xfa/0xfa0 [ 1824.565457][T29158] ? lockdep_hardirqs_on+0x9c/0x150 [ 1824.565475][T29158] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1824.565493][T29158] ? clear_bhb_loop+0x60/0xb0 [ 1824.565516][T29158] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1824.565534][T29158] RIP: 0033:0x7f4a05f8efc9 [ 1824.565550][T29158] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1824.565565][T29158] RSP: 002b:00007f4a06edf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 1824.565586][T29158] RAX: ffffffffffffffda RBX: 00007f4a061e5fa0 RCX: 00007f4a05f8efc9 [ 1824.565600][T29158] RDX: 000000000000001c RSI: 0000200000000000 RDI: 0000000000000003 [ 1824.565611][T29158] RBP: 00007f4a06edf090 R08: 0000000000000000 R09: 0000000000000000 [ 1824.565624][T29158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1824.565635][T29158] R13: 00007f4a061e6038 R14: 00007f4a061e5fa0 R15: 00007fff6c3d6628 [ 1824.565669][T29158] [ 1824.876566][T17219] Bluetooth: hci4: command 0x0406 tx timeout [ 1825.047968][T17219] Bluetooth: hci0: command tx timeout [ 1825.082544][T29167] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18056'. [ 1825.092362][T29167] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18056'. [ 1825.102254][T29167] netlink: 124 bytes leftover after parsing attributes in process `syz.0.18056'. [ 1825.486468][T29185] netlink: 8 bytes leftover after parsing attributes in process `syz.5.18061'. [ 1825.516306][T29189] netlink: 'syz.1.18064': attribute type 12 has an invalid length. [ 1825.526945][T29189] netlink: 'syz.1.18064': attribute type 29 has an invalid length. [ 1825.536197][T29189] netlink: 148 bytes leftover after parsing attributes in process `syz.1.18064'. [ 1825.789035][T29199] FAULT_INJECTION: forcing a failure. [ 1825.789035][T29199] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1825.823051][T29199] CPU: 0 UID: 0 PID: 29199 Comm: syz.5.18068 Not tainted syzkaller #0 PREEMPT(full) [ 1825.823078][T29199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1825.823090][T29199] Call Trace: [ 1825.823099][T29199] [ 1825.823108][T29199] dump_stack_lvl+0x189/0x250 [ 1825.823133][T29199] ? __pfx____ratelimit+0x10/0x10 [ 1825.823159][T29199] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1825.823179][T29199] ? __pfx__printk+0x10/0x10 [ 1825.823197][T29199] ? __might_fault+0xb0/0x130 [ 1825.823228][T29199] should_fail_ex+0x414/0x560 [ 1825.823260][T29199] _copy_from_iter+0x1de/0x1790 [ 1825.823286][T29199] ? rcu_is_watching+0x15/0xb0 [ 1825.823314][T29199] ? kmalloc_reserve+0xbd/0x290 [ 1825.823338][T29199] ? __pfx__copy_from_iter+0x10/0x10 [ 1825.823361][T29199] ? __build_skb_around+0x262/0x3f0 [ 1825.823388][T29199] ? netlink_sendmsg+0x642/0xb30 [ 1825.823410][T29199] ? skb_put+0x11b/0x210 [ 1825.823437][T29199] netlink_sendmsg+0x6b2/0xb30 [ 1825.823471][T29199] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1825.823500][T29199] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1825.823521][T29199] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1825.823543][T29199] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1825.823575][T29199] __sock_sendmsg+0x21c/0x270 [ 1825.823600][T29199] ____sys_sendmsg+0x505/0x830 [ 1825.823620][T29199] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1825.823646][T29199] ? import_iovec+0x74/0xa0 [ 1825.823669][T29199] ___sys_sendmsg+0x21f/0x2a0 [ 1825.823688][T29199] ? __pfx____sys_sendmsg+0x10/0x10 [ 1825.823738][T29199] ? __fget_files+0x2a/0x420 [ 1825.823757][T29199] ? __fget_files+0x3a0/0x420 [ 1825.823787][T29199] __x64_sys_sendmsg+0x19b/0x260 [ 1825.823805][T29199] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1825.823831][T29199] ? __pfx_ksys_write+0x10/0x10 [ 1825.823854][T29199] ? do_syscall_64+0xbe/0xfa0 [ 1825.823874][T29199] do_syscall_64+0xfa/0xfa0 [ 1825.823891][T29199] ? lockdep_hardirqs_on+0x9c/0x150 [ 1825.823908][T29199] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1825.823925][T29199] ? clear_bhb_loop+0x60/0xb0 [ 1825.823947][T29199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1825.823963][T29199] RIP: 0033:0x7f44a8f8efc9 [ 1825.823980][T29199] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1825.823997][T29199] RSP: 002b:00007f44a9e3f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1825.824016][T29199] RAX: ffffffffffffffda RBX: 00007f44a91e5fa0 RCX: 00007f44a8f8efc9 [ 1825.824030][T29199] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 1825.824043][T29199] RBP: 00007f44a9e3f090 R08: 0000000000000000 R09: 0000000000000000 [ 1825.824055][T29199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1825.824066][T29199] R13: 00007f44a91e6038 R14: 00007f44a91e5fa0 R15: 00007ffc15ab5c68 [ 1825.824098][T29199] [ 1826.444251][T29209] netlink: 8 bytes leftover after parsing attributes in process `syz.5.18072'. [ 1826.468140][T29209] netlink: 8 bytes leftover after parsing attributes in process `syz.5.18072'. [ 1826.488531][T29209] netlink: 124 bytes leftover after parsing attributes in process `syz.5.18072'. [ 1826.919986][T29230] lo speed is unknown, defaulting to 1000 [ 1826.931688][T29230] vxcan1 speed is unknown, defaulting to 1000 [ 1826.946928][T29222] netlink: 'syz.1.18077': attribute type 4 has an invalid length. [ 1826.962534][T29222] netlink: 'syz.1.18077': attribute type 1 has an invalid length. [ 1826.988491][T29222] netlink: 20 bytes leftover after parsing attributes in process `syz.1.18077'. [ 1827.808062][T29245] !: renamed from dummy0 (while UP) [ 1827.895931][T29251] FAULT_INJECTION: forcing a failure. [ 1827.895931][T29251] name failslab, interval 1, probability 0, space 0, times 0 [ 1827.921027][T29251] CPU: 1 UID: 0 PID: 29251 Comm: syz.5.18084 Not tainted syzkaller #0 PREEMPT(full) [ 1827.921053][T29251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1827.921063][T29251] Call Trace: [ 1827.921071][T29251] [ 1827.921079][T29251] dump_stack_lvl+0x189/0x250 [ 1827.921105][T29251] ? __pfx____ratelimit+0x10/0x10 [ 1827.921132][T29251] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1827.921151][T29251] ? __pfx__printk+0x10/0x10 [ 1827.921176][T29251] ? __pfx___might_resched+0x10/0x10 [ 1827.921200][T29251] ? fs_reclaim_acquire+0x7d/0x100 [ 1827.921227][T29251] should_fail_ex+0x414/0x560 [ 1827.921259][T29251] should_failslab+0xa8/0x100 [ 1827.921283][T29251] __kmalloc_node_track_caller_noprof+0xcd/0x800 [ 1827.921304][T29251] ? __request_module+0x2d1/0x5e0 [ 1827.921327][T29251] ? __kmalloc_cache_noprof+0x3d5/0x6f0 [ 1827.921351][T29251] kstrdup+0x42/0x100 [ 1827.921377][T29251] __request_module+0x2d1/0x5e0 [ 1827.921412][T29251] ? rtnl_link_ops_get+0x23/0x250 [ 1827.921438][T29251] ? __pfx___request_module+0x10/0x10 [ 1827.921473][T29251] ? rtnl_link_ops_get+0x23/0x250 [ 1827.921496][T29251] ? rtnl_link_ops_get+0x23/0x250 [ 1827.921521][T29251] ? rtnl_link_ops_get+0x215/0x250 [ 1827.921548][T29251] rtnl_newlink+0x65d/0x1c80 [ 1827.921582][T29251] ? __pfx_rtnl_newlink+0x10/0x10 [ 1827.921609][T29251] ? is_bpf_text_address+0x26/0x2b0 [ 1827.921636][T29251] ? is_bpf_text_address+0x292/0x2b0 [ 1827.921656][T29251] ? is_bpf_text_address+0x26/0x2b0 [ 1827.921683][T29251] ? __lock_acquire+0xab9/0xd20 [ 1827.921718][T29251] ? __lock_acquire+0xab9/0xd20 [ 1827.921761][T29251] ? is_bpf_text_address+0x26/0x2b0 [ 1827.921789][T29251] ? is_bpf_text_address+0x292/0x2b0 [ 1827.921811][T29251] ? is_bpf_text_address+0x26/0x2b0 [ 1827.921843][T29251] ? __lock_acquire+0xab9/0xd20 [ 1827.921889][T29251] ? __pfx_rtnl_newlink+0x10/0x10 [ 1827.921910][T29251] rtnetlink_rcv_msg+0x7cf/0xb70 [ 1827.921932][T29251] ? __lock_acquire+0xab9/0xd20 [ 1827.921953][T29251] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 1827.921974][T29251] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1827.922014][T29251] netlink_rcv_skb+0x208/0x470 [ 1827.922035][T29251] ? __lock_acquire+0xab9/0xd20 [ 1827.922056][T29251] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1827.922079][T29251] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1827.922114][T29251] ? netlink_deliver_tap+0x2e/0x1b0 [ 1827.922145][T29251] netlink_unicast+0x82f/0x9e0 [ 1827.922175][T29251] ? __pfx_netlink_unicast+0x10/0x10 [ 1827.922199][T29251] ? netlink_sendmsg+0x642/0xb30 [ 1827.922221][T29251] ? skb_put+0x11b/0x210 [ 1827.922251][T29251] netlink_sendmsg+0x805/0xb30 [ 1827.922285][T29251] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1827.922312][T29251] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1827.922335][T29251] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1827.922356][T29251] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1827.922381][T29251] __sock_sendmsg+0x21c/0x270 [ 1827.922413][T29251] ____sys_sendmsg+0x505/0x830 [ 1827.922437][T29251] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1827.922472][T29251] ? import_iovec+0x74/0xa0 [ 1827.922498][T29251] ___sys_sendmsg+0x21f/0x2a0 [ 1827.922517][T29251] ? __pfx____sys_sendmsg+0x10/0x10 [ 1827.922571][T29251] ? __fget_files+0x2a/0x420 [ 1827.922592][T29251] ? __fget_files+0x3a0/0x420 [ 1827.922624][T29251] __x64_sys_sendmsg+0x19b/0x260 [ 1827.922644][T29251] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1827.922670][T29251] ? __pfx_ksys_write+0x10/0x10 [ 1827.922692][T29251] ? do_syscall_64+0xbe/0xfa0 [ 1827.922713][T29251] do_syscall_64+0xfa/0xfa0 [ 1827.922729][T29251] ? lockdep_hardirqs_on+0x9c/0x150 [ 1827.922746][T29251] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1827.922764][T29251] ? clear_bhb_loop+0x60/0xb0 [ 1827.922785][T29251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1827.922802][T29251] RIP: 0033:0x7f44a8f8efc9 [ 1827.922820][T29251] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1827.922835][T29251] RSP: 002b:00007f44a9e3f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1827.922855][T29251] RAX: ffffffffffffffda RBX: 00007f44a91e5fa0 RCX: 00007f44a8f8efc9 [ 1827.922868][T29251] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 1827.922879][T29251] RBP: 00007f44a9e3f090 R08: 0000000000000000 R09: 0000000000000000 [ 1827.922891][T29251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1827.922902][T29251] R13: 00007f44a91e6038 R14: 00007f44a91e5fa0 R15: 00007ffc15ab5c68 [ 1827.922930][T29251] [ 1827.982507][T29252] lo speed is unknown, defaulting to 1000 [ 1828.430751][T29252] vxcan1 speed is unknown, defaulting to 1000 [ 1828.865420][T29293] bridge_slave_0: default FDB implementation only supports local addresses [ 1829.293185][T29314] netlink: 'syz.3.18097': attribute type 29 has an invalid length. [ 1829.329167][T29314] netlink: 'syz.3.18097': attribute type 29 has an invalid length. [ 1829.474893][T29322] tipc: Enabled bearer , priority 0 [ 1829.576698][T29322] syzkaller0: entered promiscuous mode [ 1829.588227][T29322] syzkaller0: entered allmulticast mode [ 1829.604494][T29322] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1829.635788][T29322] tipc: Resetting bearer [ 1829.666180][T29320] tipc: Resetting bearer [ 1829.712356][T29320] tipc: Disabling bearer [ 1829.945125][T29344] openvswitch: netlink: IP tunnel dst address not specified [ 1830.719611][T29359] FAULT_INJECTION: forcing a failure. [ 1830.719611][T29359] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1830.740741][T29359] CPU: 0 UID: 0 PID: 29359 Comm: syz.3.18113 Not tainted syzkaller #0 PREEMPT(full) [ 1830.740768][T29359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1830.740779][T29359] Call Trace: [ 1830.740787][T29359] [ 1830.740796][T29359] dump_stack_lvl+0x189/0x250 [ 1830.740820][T29359] ? __pfx____ratelimit+0x10/0x10 [ 1830.740846][T29359] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1830.740865][T29359] ? __pfx__printk+0x10/0x10 [ 1830.740884][T29359] ? __might_fault+0xb0/0x130 [ 1830.740910][T29359] should_fail_ex+0x414/0x560 [ 1830.740940][T29359] _copy_from_user+0x2d/0xb0 [ 1830.740964][T29359] __sys_bpf+0x1e3/0x860 [ 1830.740987][T29359] ? __pfx___sys_bpf+0x10/0x10 [ 1830.741023][T29359] ? ksys_write+0x22a/0x250 [ 1830.741045][T29359] ? __pfx_ksys_write+0x10/0x10 [ 1830.741070][T29359] __x64_sys_bpf+0x7c/0x90 [ 1830.741091][T29359] do_syscall_64+0xfa/0xfa0 [ 1830.741107][T29359] ? lockdep_hardirqs_on+0x9c/0x150 [ 1830.741125][T29359] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1830.741143][T29359] ? clear_bhb_loop+0x60/0xb0 [ 1830.741165][T29359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1830.741183][T29359] RIP: 0033:0x7f501c38efc9 [ 1830.741198][T29359] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1830.741214][T29359] RSP: 002b:00007f501d303038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1830.741233][T29359] RAX: ffffffffffffffda RBX: 00007f501c5e5fa0 RCX: 00007f501c38efc9 [ 1830.741246][T29359] RDX: 0000000000000004 RSI: 0000200000002180 RDI: 0000000000000016 [ 1830.741257][T29359] RBP: 00007f501d303090 R08: 0000000000000000 R09: 0000000000000000 [ 1830.741268][T29359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1830.741279][T29359] R13: 00007f501c5e6038 R14: 00007f501c5e5fa0 R15: 00007ffea63c76c8 [ 1830.741311][T29359] [ 1831.345099][T29372] bridge_slave_1: entered promiscuous mode [ 1831.426857][T29383] __nla_validate_parse: 3 callbacks suppressed [ 1831.426876][T29383] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18122'. [ 1831.546411][T29387] FAULT_INJECTION: forcing a failure. [ 1831.546411][T29387] name failslab, interval 1, probability 0, space 0, times 0 [ 1831.580875][T29387] CPU: 1 UID: 0 PID: 29387 Comm: syz.1.18121 Not tainted syzkaller #0 PREEMPT(full) [ 1831.580902][T29387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1831.580913][T29387] Call Trace: [ 1831.580922][T29387] [ 1831.580931][T29387] dump_stack_lvl+0x189/0x250 [ 1831.580957][T29387] ? __pfx____ratelimit+0x10/0x10 [ 1831.580983][T29387] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1831.581003][T29387] ? __pfx__printk+0x10/0x10 [ 1831.581029][T29387] ? __pfx___might_resched+0x10/0x10 [ 1831.581053][T29387] ? fs_reclaim_acquire+0x7d/0x100 [ 1831.581080][T29387] should_fail_ex+0x414/0x560 [ 1831.581113][T29387] should_failslab+0xa8/0x100 [ 1831.581145][T29387] kmem_cache_alloc_node_noprof+0x77/0x710 [ 1831.581166][T29387] ? __alloc_skb+0x112/0x2d0 [ 1831.581197][T29387] __alloc_skb+0x112/0x2d0 [ 1831.581226][T29387] inet6_ifmcaddr_notify+0xeb/0x1d0 [ 1831.581246][T29387] ? __pfx_inet6_ifmcaddr_notify+0x10/0x10 [ 1831.581281][T29387] __ipv6_dev_mc_dec+0x2dc/0x330 [ 1831.581310][T29387] ipv6_mc_destroy_dev+0x33c/0x5a0 [ 1831.581329][T29387] ? addrconf_ifdown+0x1396/0x1880 [ 1831.581364][T29387] addrconf_ifdown+0x139e/0x1880 [ 1831.581400][T29387] ? tls_dev_event+0x717/0xec0 [ 1831.581424][T29387] ? __pfx_addrconf_ifdown+0x10/0x10 [ 1831.581466][T29387] addrconf_notify+0x1bc/0x1010 [ 1831.581493][T29387] notifier_call_chain+0x1b6/0x3e0 [ 1831.581528][T29387] unregister_netdevice_many_notify+0x1860/0x2390 [ 1831.581566][T29387] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 1831.581594][T29387] ? __lock_acquire+0xab9/0xd20 [ 1831.581631][T29387] unregister_netdevice_queue+0x33c/0x380 [ 1831.581653][T29387] ? apparmor_capable+0x137/0x1b0 [ 1831.581677][T29387] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 1831.581698][T29387] ? security_capable+0x7e/0x2e0 [ 1831.581725][T29387] vti6_siocdevprivate+0x300/0x700 [ 1831.581750][T29387] ? __pfx_vti6_siocdevprivate+0x10/0x10 [ 1831.581768][T29387] ? trace_contention_end+0x39/0x120 [ 1831.581822][T29387] ? netdev_name_node_lookup+0xdf/0x120 [ 1831.581847][T29387] dev_ifsioc+0xb57/0xf00 [ 1831.581882][T29387] dev_ioctl+0x84c/0x1150 [ 1831.581910][T29387] sock_ioctl+0x719/0x790 [ 1831.581934][T29387] ? __pfx_sock_ioctl+0x10/0x10 [ 1831.581959][T29387] ? __fget_files+0x3a0/0x420 [ 1831.581981][T29387] ? __fget_files+0x2a/0x420 [ 1831.582006][T29387] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1831.582030][T29387] ? __pfx_sock_ioctl+0x10/0x10 [ 1831.582050][T29387] __se_sys_ioctl+0xfc/0x170 [ 1831.582072][T29387] do_syscall_64+0xfa/0xfa0 [ 1831.582090][T29387] ? lockdep_hardirqs_on+0x9c/0x150 [ 1831.582108][T29387] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1831.582127][T29387] ? clear_bhb_loop+0x60/0xb0 [ 1831.582157][T29387] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1831.582175][T29387] RIP: 0033:0x7fcba078efc9 [ 1831.582193][T29387] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1831.582210][T29387] RSP: 002b:00007fcba1692038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1831.582230][T29387] RAX: ffffffffffffffda RBX: 00007fcba09e6090 RCX: 00007fcba078efc9 [ 1831.582243][T29387] RDX: 0000200000000680 RSI: 00000000000089f2 RDI: 0000000000000003 [ 1831.582256][T29387] RBP: 00007fcba1692090 R08: 0000000000000000 R09: 0000000000000000 [ 1831.582268][T29387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1831.582280][T29387] R13: 00007fcba09e6128 R14: 00007fcba09e6090 R15: 00007fffa3c7e5b8 [ 1831.582314][T29387] [ 1832.131261][T29392] FAULT_INJECTION: forcing a failure. [ 1832.131261][T29392] name failslab, interval 1, probability 0, space 0, times 0 [ 1832.192934][T29392] CPU: 0 UID: 0 PID: 29392 Comm: syz.3.18125 Not tainted syzkaller #0 PREEMPT(full) [ 1832.192960][T29392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1832.192972][T29392] Call Trace: [ 1832.192980][T29392] [ 1832.192990][T29392] dump_stack_lvl+0x189/0x250 [ 1832.193015][T29392] ? __pfx____ratelimit+0x10/0x10 [ 1832.193042][T29392] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1832.193062][T29392] ? __pfx__printk+0x10/0x10 [ 1832.193093][T29392] ? __pfx___might_resched+0x10/0x10 [ 1832.193122][T29392] should_fail_ex+0x414/0x560 [ 1832.193155][T29392] should_failslab+0xa8/0x100 [ 1832.193180][T29392] __kmalloc_cache_noprof+0x6f/0x6f0 [ 1832.193201][T29392] ? nft_trans_table_add+0x56/0x430 [ 1832.193229][T29392] nft_trans_table_add+0x56/0x430 [ 1832.193257][T29392] nf_tables_newtable+0xce3/0x1890 [ 1832.193299][T29392] nfnetlink_rcv+0x11d9/0x2590 [ 1832.193358][T29392] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1832.193437][T29392] ? netlink_deliver_tap+0x2e/0x1b0 [ 1832.193482][T29392] netlink_unicast+0x82f/0x9e0 [ 1832.193514][T29392] ? __pfx_netlink_unicast+0x10/0x10 [ 1832.193540][T29392] ? netlink_sendmsg+0x642/0xb30 [ 1832.193562][T29392] ? skb_put+0x11b/0x210 [ 1832.193591][T29392] netlink_sendmsg+0x805/0xb30 [ 1832.193626][T29392] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1832.193655][T29392] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1832.193678][T29392] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1832.193705][T29392] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1832.193731][T29392] __sock_sendmsg+0x21c/0x270 [ 1832.193757][T29392] ____sys_sendmsg+0x505/0x830 [ 1832.193782][T29392] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1832.193820][T29392] ? import_iovec+0x74/0xa0 [ 1832.193848][T29392] ___sys_sendmsg+0x21f/0x2a0 [ 1832.193869][T29392] ? __pfx____sys_sendmsg+0x10/0x10 [ 1832.193929][T29392] ? __fget_files+0x2a/0x420 [ 1832.193949][T29392] ? __fget_files+0x3a0/0x420 [ 1832.193986][T29392] __x64_sys_sendmsg+0x19b/0x260 [ 1832.194008][T29392] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1832.194038][T29392] ? __pfx_ksys_write+0x10/0x10 [ 1832.194062][T29392] ? do_syscall_64+0xbe/0xfa0 [ 1832.194085][T29392] do_syscall_64+0xfa/0xfa0 [ 1832.194106][T29392] ? lockdep_hardirqs_on+0x9c/0x150 [ 1832.194125][T29392] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1832.194143][T29392] ? clear_bhb_loop+0x60/0xb0 [ 1832.194166][T29392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1832.194184][T29392] RIP: 0033:0x7f501c38efc9 [ 1832.194202][T29392] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1832.194218][T29392] RSP: 002b:00007f501d303038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1832.194239][T29392] RAX: ffffffffffffffda RBX: 00007f501c5e5fa0 RCX: 00007f501c38efc9 [ 1832.194253][T29392] RDX: 0000000000000080 RSI: 0000200000000500 RDI: 0000000000000003 [ 1832.194265][T29392] RBP: 00007f501d303090 R08: 0000000000000000 R09: 0000000000000000 [ 1832.194276][T29392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1832.194287][T29392] R13: 00007f501c5e6038 R14: 00007f501c5e5fa0 R15: 00007ffea63c76c8 [ 1832.194322][T29392] [ 1832.734393][T29400] netlink: 16 bytes leftover after parsing attributes in process `syz.1.18127'. [ 1832.750431][T29400] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18127'. [ 1832.765869][T29400] netlink: 'syz.1.18127': attribute type 30 has an invalid length. [ 1832.887139][T30977] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1832.896244][T30977] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1832.926431][T30977] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1832.944821][T30977] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1833.003374][T29411] bridge_slave_1: left promiscuous mode [ 1833.191235][T29417] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18134'. [ 1833.202046][T29417] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18134'. [ 1833.213345][T29417] netlink: 124 bytes leftover after parsing attributes in process `syz.1.18134'. [ 1833.405914][T29425] netlink: 16 bytes leftover after parsing attributes in process `syz.2.18136'. [ 1833.434955][T29425] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18136'. [ 1833.458029][T29425] netlink: 'syz.2.18136': attribute type 30 has an invalid length. [ 1833.513204][T30977] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1833.529068][T30977] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1833.558681][T30977] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1833.587851][T30977] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1833.874328][T29440] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18142'. [ 1833.884185][T29440] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18142'. [ 1834.220122][ T30] audit: type=1800 audit(1760751761.280:10): pid=29454 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.18145" name="memory.events" dev="tmpfs" ino=1432 res=0 errno=0 [ 1834.283001][ T30] audit: type=1804 audit(1760751761.280:11): pid=29454 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.18145" name="memory.events" dev="tmpfs" ino=1432 res=1 errno=0 [ 1834.562206][T29460] lo speed is unknown, defaulting to 1000 [ 1834.680296][T29465] lo speed is unknown, defaulting to 1000 [ 1834.680306][T29460] vxcan1 speed is unknown, defaulting to 1000 [ 1834.760843][T29463] lo speed is unknown, defaulting to 1000 [ 1834.971182][T29477] bridge0: port 1(bridge_slave_0) entered disabled state [ 1835.335195][T29477] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1835.352690][T29477] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1835.456850][T29477] bond1: left promiscuous mode [ 1835.492288][T29465] vxcan1 speed is unknown, defaulting to 1000 [ 1835.501351][ T36] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1835.527400][ T36] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1835.547869][ T36] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1835.556253][ T36] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1835.603433][T30968] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1835.631043][T30968] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1835.655673][T30968] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1835.674940][T30968] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1835.988019][T29463] vxcan1 speed is unknown, defaulting to 1000 [ 1836.240995][T29506] tipc: Enabled bearer , priority 0 [ 1836.268825][T29512] FAULT_INJECTION: forcing a failure. [ 1836.268825][T29512] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1836.270375][T29508] syzkaller0: entered promiscuous mode [ 1836.288137][T29512] CPU: 1 UID: 0 PID: 29512 Comm: syz.1.18164 Not tainted syzkaller #0 PREEMPT(full) [ 1836.288162][T29512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1836.288172][T29512] Call Trace: [ 1836.288179][T29512] [ 1836.288187][T29512] dump_stack_lvl+0x189/0x250 [ 1836.288209][T29512] ? __pfx____ratelimit+0x10/0x10 [ 1836.288236][T29512] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1836.288254][T29512] ? __pfx__printk+0x10/0x10 [ 1836.288273][T29512] ? __might_fault+0xb0/0x130 [ 1836.288303][T29512] should_fail_ex+0x414/0x560 [ 1836.288333][T29512] _copy_from_user+0x2d/0xb0 [ 1836.288357][T29512] kstrtouint_from_user+0xc4/0x170 [ 1836.288378][T29512] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1836.288414][T29512] proc_fail_nth_write+0x88/0x200 [ 1836.288441][T29512] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1836.288474][T29512] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1836.288502][T29512] vfs_write+0x27e/0xb30 [ 1836.288532][T29512] ? __pfx_vfs_write+0x10/0x10 [ 1836.288554][T29512] ? __fget_files+0x2a/0x420 [ 1836.288581][T29512] ? __fget_files+0x3a0/0x420 [ 1836.288601][T29512] ? __fget_files+0x2a/0x420 [ 1836.288632][T29512] ksys_write+0x145/0x250 [ 1836.288655][T29512] ? __pfx_ksys_write+0x10/0x10 [ 1836.288679][T29512] ? do_syscall_64+0xbe/0xfa0 [ 1836.288702][T29512] do_syscall_64+0xfa/0xfa0 [ 1836.288719][T29512] ? lockdep_hardirqs_on+0x9c/0x150 [ 1836.288738][T29512] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1836.288757][T29512] ? clear_bhb_loop+0x60/0xb0 [ 1836.288776][T29512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1836.288791][T29512] RIP: 0033:0x7fcba078da7f [ 1836.288808][T29512] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 1836.288825][T29512] RSP: 002b:00007fcba16b3030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1836.288844][T29512] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fcba078da7f [ 1836.288859][T29512] RDX: 0000000000000001 RSI: 00007fcba16b30a0 RDI: 000000000000000c [ 1836.288870][T29512] RBP: 00007fcba16b3090 R08: 0000000000000000 R09: 0000000000000000 [ 1836.288882][T29512] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 1836.288894][T29512] R13: 00007fcba09e6038 R14: 00007fcba09e5fa0 R15: 00007fffa3c7e5b8 [ 1836.288929][T29512] [ 1836.328008][T29508] syzkaller0: entered allmulticast mode [ 1836.603963][T29510] tipc: Resetting bearer [ 1836.688484][T29505] tipc: Resetting bearer [ 1836.734196][T29505] tipc: Disabling bearer [ 1836.855416][T29517] FAULT_INJECTION: forcing a failure. [ 1836.855416][T29517] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1836.877805][T29517] CPU: 0 UID: 0 PID: 29517 Comm: syz.1.18166 Not tainted syzkaller #0 PREEMPT(full) [ 1836.877832][T29517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1836.877843][T29517] Call Trace: [ 1836.877851][T29517] [ 1836.877859][T29517] dump_stack_lvl+0x189/0x250 [ 1836.877884][T29517] ? __pfx____ratelimit+0x10/0x10 [ 1836.877912][T29517] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1836.877930][T29517] ? __pfx__printk+0x10/0x10 [ 1836.877959][T29517] should_fail_ex+0x414/0x560 [ 1836.877991][T29517] _copy_to_user+0x31/0xb0 [ 1836.878022][T29517] simple_read_from_buffer+0xe1/0x170 [ 1836.878048][T29517] proc_fail_nth_read+0x1b3/0x220 [ 1836.878076][T29517] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1836.878102][T29517] ? rw_verify_area+0x2a6/0x4d0 [ 1836.878118][T29517] ? __lock_acquire+0xab9/0xd20 [ 1836.878137][T29517] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1836.878164][T29517] vfs_read+0x200/0xa30 [ 1836.878183][T29517] ? fdget_pos+0x247/0x320 [ 1836.878206][T29517] ? __pfx___mutex_lock+0x10/0x10 [ 1836.878226][T29517] ? __pfx_vfs_read+0x10/0x10 [ 1836.878246][T29517] ? __fget_files+0x2a/0x420 [ 1836.878270][T29517] ? __fget_files+0x3a0/0x420 [ 1836.878290][T29517] ? __fget_files+0x2a/0x420 [ 1836.878319][T29517] ksys_read+0x145/0x250 [ 1836.878340][T29517] ? __pfx_ksys_read+0x10/0x10 [ 1836.878361][T29517] ? do_syscall_64+0xbe/0xfa0 [ 1836.878381][T29517] do_syscall_64+0xfa/0xfa0 [ 1836.878397][T29517] ? lockdep_hardirqs_on+0x9c/0x150 [ 1836.878416][T29517] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1836.878434][T29517] ? clear_bhb_loop+0x60/0xb0 [ 1836.878455][T29517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1836.878472][T29517] RIP: 0033:0x7fcba078d9dc [ 1836.878489][T29517] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1836.878506][T29517] RSP: 002b:00007fcba16b3030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1836.878524][T29517] RAX: ffffffffffffffda RBX: 00007fcba09e5fa0 RCX: 00007fcba078d9dc [ 1836.878538][T29517] RDX: 000000000000000f RSI: 00007fcba16b30a0 RDI: 0000000000000005 [ 1836.878549][T29517] RBP: 00007fcba16b3090 R08: 0000000000000000 R09: 0000000000000000 [ 1836.878561][T29517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1836.878571][T29517] R13: 00007fcba09e6038 R14: 00007fcba09e5fa0 R15: 00007fffa3c7e5b8 [ 1836.878604][T29517] [ 1837.419245][T29534] __nla_validate_parse: 11 callbacks suppressed [ 1837.419265][T29534] netlink: 16 bytes leftover after parsing attributes in process `syz.5.18173'. [ 1837.438708][T29534] netlink: 8 bytes leftover after parsing attributes in process `syz.5.18173'. [ 1837.451842][T29534] netlink: 'syz.5.18173': attribute type 30 has an invalid length. [ 1837.582696][T30977] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1837.591121][T30977] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1837.655228][T30977] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1837.666355][T30977] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1837.715344][T29542] netlink: 12 bytes leftover after parsing attributes in process `syz.2.18177'. [ 1837.742180][T29544] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18176'. [ 1837.751964][T29544] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18176'. [ 1837.761147][T29544] netlink: 124 bytes leftover after parsing attributes in process `syz.3.18176'. [ 1838.051431][T29560] netlink: 4 bytes leftover after parsing attributes in process `syz.5.18180'. [ 1838.452760][T29572] xt_recent: Unsupported userspace flags (000000b1) [ 1838.851507][T29585] tipc: Enabled bearer , priority 0 [ 1838.873275][T29585] syzkaller0: entered promiscuous mode [ 1838.885313][T29585] syzkaller0: entered allmulticast mode [ 1838.924723][T29585] tipc: Resetting bearer [ 1838.939567][T29584] tipc: Resetting bearer [ 1838.989537][T29584] tipc: Disabling bearer [ 1839.072650][T29591] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1839.292656][T29598] netlink: 4 bytes leftover after parsing attributes in process `syz.5.18194'. [ 1839.384147][T29601] FAULT_INJECTION: forcing a failure. [ 1839.384147][T29601] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1839.398696][T29601] CPU: 1 UID: 0 PID: 29601 Comm: syz.2.18196 Not tainted syzkaller #0 PREEMPT(full) [ 1839.398722][T29601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1839.398734][T29601] Call Trace: [ 1839.398742][T29601] [ 1839.398750][T29601] dump_stack_lvl+0x189/0x250 [ 1839.398776][T29601] ? __pfx____ratelimit+0x10/0x10 [ 1839.398804][T29601] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1839.398828][T29601] ? __pfx__printk+0x10/0x10 [ 1839.398861][T29601] should_fail_ex+0x414/0x560 [ 1839.398894][T29601] _copy_to_user+0x31/0xb0 [ 1839.398920][T29601] simple_read_from_buffer+0xe1/0x170 [ 1839.398947][T29601] proc_fail_nth_read+0x1b3/0x220 [ 1839.398977][T29601] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1839.399006][T29601] ? rw_verify_area+0x2a6/0x4d0 [ 1839.399023][T29601] ? __lock_acquire+0xab9/0xd20 [ 1839.399042][T29601] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1839.399068][T29601] vfs_read+0x200/0xa30 [ 1839.399086][T29601] ? fdget_pos+0x247/0x320 [ 1839.399112][T29601] ? __pfx___mutex_lock+0x10/0x10 [ 1839.399132][T29601] ? __pfx_vfs_read+0x10/0x10 [ 1839.399153][T29601] ? __fget_files+0x2a/0x420 [ 1839.399179][T29601] ? __fget_files+0x3a0/0x420 [ 1839.399199][T29601] ? __fget_files+0x2a/0x420 [ 1839.399230][T29601] ksys_read+0x145/0x250 [ 1839.399252][T29601] ? __pfx_ksys_read+0x10/0x10 [ 1839.399280][T29601] ? do_syscall_64+0xbe/0xfa0 [ 1839.399303][T29601] do_syscall_64+0xfa/0xfa0 [ 1839.399322][T29601] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1839.399340][T29601] ? asm_sysvec_call_function_single+0x1a/0x20 [ 1839.399358][T29601] ? clear_bhb_loop+0x60/0xb0 [ 1839.399380][T29601] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1839.399398][T29601] RIP: 0033:0x7f6d7fd8d9dc [ 1839.399416][T29601] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1839.399431][T29601] RSP: 002b:00007f6d80c51030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1839.399452][T29601] RAX: ffffffffffffffda RBX: 00007f6d7ffe5fa0 RCX: 00007f6d7fd8d9dc [ 1839.399466][T29601] RDX: 000000000000000f RSI: 00007f6d80c510a0 RDI: 0000000000000006 [ 1839.399478][T29601] RBP: 00007f6d80c51090 R08: 0000000000000000 R09: 0000000000000000 [ 1839.399490][T29601] R10: 000000000000004e R11: 0000000000000246 R12: 0000000000000001 [ 1839.399502][T29601] R13: 00007f6d7ffe6038 R14: 00007f6d7ffe5fa0 R15: 00007fffb8a27e08 [ 1839.399543][T29601] [ 1839.656325][T17219] Bluetooth: hci1: link tx timeout [ 1839.662080][T17219] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 1839.913353][T29612] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18200'. [ 1839.942357][T29612] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18200'. [ 1839.995805][ T1103] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1840.017877][ T1103] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1840.038158][ T1103] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1840.046899][ T1103] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1840.221884][T29622] sctp: [Deprecated]: syz.5.18204 (pid 29622) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1840.221884][T29622] Use struct sctp_sack_info instead [ 1840.245304][T29622] sctp: [Deprecated]: syz.5.18204 (pid 29622) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1840.245304][T29622] Use struct sctp_sack_info instead [ 1840.274923][T29622] sctp: [Deprecated]: syz.5.18204 (pid 29622) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1840.274923][T29622] Use struct sctp_sack_info instead [ 1840.291107][T29628] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1840.292938][T29622] sctp: [Deprecated]: syz.5.18204 (pid 29622) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1840.292938][T29622] Use struct sctp_sack_info instead [ 1840.323737][T29622] sctp: [Deprecated]: syz.5.18204 (pid 29622) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1840.323737][T29622] Use struct sctp_sack_info instead [ 1840.344329][T29622] sctp: [Deprecated]: syz.5.18204 (pid 29622) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1840.344329][T29622] Use struct sctp_sack_info instead [ 1840.367844][T29622] sctp: [Deprecated]: syz.5.18204 (pid 29622) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1840.367844][T29622] Use struct sctp_sack_info instead [ 1840.385676][T29622] sctp: [Deprecated]: syz.5.18204 (pid 29622) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1840.385676][T29622] Use struct sctp_sack_info instead [ 1840.412467][T29622] sctp: [Deprecated]: syz.5.18204 (pid 29622) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1840.412467][T29622] Use struct sctp_sack_info instead [ 1840.471686][T29622] sctp: [Deprecated]: syz.5.18204 (pid 29622) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1840.471686][T29622] Use struct sctp_sack_info instead [ 1840.497047][T29632] lo speed is unknown, defaulting to 1000 [ 1840.520116][T29632] vxcan1 speed is unknown, defaulting to 1000 [ 1840.619562][ T1103] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1840.632664][ T1103] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1840.656931][ T1103] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1840.707249][T29640] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1840.719114][T29640] team0: Port device bond0 added [ 1840.726251][ T1103] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1841.079479][T29665] x_tables: ip_tables: osf match: only valid for protocol 6 [ 1841.153222][T29668] tipc: Enabled bearer , priority 11 [ 1841.697616][T25398] Bluetooth: hci1: command 0x0406 tx timeout [ 1842.070158][T17219] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN PTI [ 1842.082089][T17219] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 1842.090516][T17219] CPU: 1 UID: 0 PID: 17219 Comm: kworker/u9:3 Not tainted syzkaller #0 PREEMPT(full) [ 1842.100071][T17219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1842.110137][T17219] Workqueue: hci1 hci_cmd_sync_work [ 1842.115371][T17219] RIP: 0010:klist_remove+0x14a/0x340 [ 1842.120674][T17219] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 c9 36 e3 f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 aa 36 e3 f6 49 8b 44 24 58 48 89 44 24 08 [ 1842.140289][T17219] RSP: 0018:ffffc9000caef6a0 EFLAGS: 00010202 [ 1842.146354][T17219] RAX: 000000000000000b RBX: ffff888055610000 RCX: 0000000000000000 [ 1842.154315][T17219] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058 [ 1842.162274][T17219] RBP: ffffc9000caef7a0 R08: ffffffff8f84c103 R09: 1ffffffff1f09820 [ 1842.170247][T17219] R10: dffffc0000000000 R11: fffffbfff1f09821 R12: 0000000000000000 [ 1842.178255][T17219] R13: 1ffff1100afc448c R14: ffff888057e22460 R15: dffffc0000000000 [ 1842.186217][T17219] FS: 0000000000000000(0000) GS:ffff888125e0c000(0000) knlGS:0000000000000000 [ 1842.195140][T17219] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1842.201710][T17219] CR2: 0000001b2ed09ff8 CR3: 000000003512e000 CR4: 00000000003526f0 [ 1842.209673][T17219] Call Trace: [ 1842.212939][T17219] [ 1842.215857][T17219] ? __pfx_klist_remove+0x10/0x10 [ 1842.221053][T17219] ? __pfx_kobject_move+0x10/0x10 [ 1842.226066][T17219] ? do_raw_spin_unlock+0x122/0x240 [ 1842.231255][T17219] ? get_device_parent+0x366/0x3a0 [ 1842.236384][T17219] device_move+0x193/0x700 [ 1842.240796][T17219] hci_conn_del_sysfs+0xb8/0x170 [ 1842.245734][T17219] hci_conn_del+0xc33/0x11b0 [ 1842.250401][T17219] ? hci_abort_conn_sync+0x24e/0xe30 [ 1842.255673][T17219] hci_abort_conn_sync+0x658/0xe30 [ 1842.260777][T17219] ? __pfx_hci_abort_conn_sync+0x10/0x10 [ 1842.266399][T17219] ? hci_conn_valid+0x21/0x230 [ 1842.271153][T17219] ? hci_conn_valid+0x21/0x230 [ 1842.275906][T17219] ? hci_conn_valid+0x21/0x230 [ 1842.280661][T17219] ? hci_conn_valid+0x211/0x230 [ 1842.285526][T17219] ? __pfx_abort_conn_sync+0x10/0x10 [ 1842.290806][T17219] hci_cmd_sync_work+0x213/0x3a0 [ 1842.295741][T17219] ? process_scheduled_works+0x9ef/0x17b0 [ 1842.301457][T17219] process_scheduled_works+0xae1/0x17b0 [ 1842.307010][T17219] ? __pfx_process_scheduled_works+0x10/0x10 [ 1842.312992][T17219] worker_thread+0x8a0/0xda0 [ 1842.317931][T17219] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1842.324253][T17219] ? __kthread_parkme+0x7b/0x200 [ 1842.329188][T17219] kthread+0x711/0x8a0 [ 1842.333249][T17219] ? __pfx_worker_thread+0x10/0x10 [ 1842.338352][T17219] ? __pfx_kthread+0x10/0x10 [ 1842.342927][T17219] ? _raw_spin_unlock_irq+0x23/0x50 [ 1842.348114][T17219] ? lockdep_hardirqs_on+0x9c/0x150 [ 1842.353301][T17219] ? __pfx_kthread+0x10/0x10 [ 1842.357875][T17219] ret_from_fork+0x4bc/0x870 [ 1842.362457][T17219] ? __pfx_ret_from_fork+0x10/0x10 [ 1842.367564][T17219] ? __switch_to_asm+0x39/0x70 [ 1842.372319][T17219] ? __switch_to_asm+0x33/0x70 [ 1842.377069][T17219] ? __pfx_kthread+0x10/0x10 [ 1842.381646][T17219] ret_from_fork_asm+0x1a/0x30 [ 1842.386403][T17219] [ 1842.389415][T17219] Modules linked in: [ 1842.395510][T17219] ---[ end trace 0000000000000000 ]--- [ 1842.411633][ T43] tipc: Node number set to 766257831 [ 1842.417217][T17219] RIP: 0010:klist_remove+0x14a/0x340 [ 1842.423185][T17219] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 c9 36 e3 f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 aa 36 e3 f6 49 8b 44 24 58 48 89 44 24 08 [ 1842.443652][T17219] RSP: 0018:ffffc9000caef6a0 EFLAGS: 00010202 [ 1842.453749][T17219] RAX: 000000000000000b RBX: ffff888055610000 RCX: 0000000000000000 [ 1842.462028][T17219] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058 [ 1842.470235][T17219] RBP: ffffc9000caef7a0 R08: ffffffff8f84c103 R09: 1ffffffff1f09820 [ 1842.480030][T17219] R10: dffffc0000000000 R11: fffffbfff1f09821 R12: 0000000000000000 [ 1842.488795][T17219] R13: 1ffff1100afc448c R14: ffff888057e22460 R15: dffffc0000000000 [ 1842.496892][T17219] FS: 0000000000000000(0000) GS:ffff888125e0c000(0000) knlGS:0000000000000000 [ 1842.506942][T17219] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1842.514092][T17219] CR2: 000055557e02c5c8 CR3: 0000000061616000 CR4: 00000000003526f0 [ 1842.524844][T17219] Kernel panic - not syncing: Fatal exception [ 1842.531191][T17219] Kernel Offset: disabled [ 1842.535503][T17219] Rebooting in 86400 seconds..