last executing test programs: 23.571480295s ago: executing program 2 (id=804): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0xfe}}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000040)="17", 0x1}], 0x1}}, {{&(0x7f0000000600)={0xa, 0x4e1c, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}, 0x1c, &(0x7f0000001480)=[{&(0x7f0000000500)="7ff958c3252b53bef3509df0fec0cc1625dc6812a6a0905309d5b36fd81adacf2891bcb7329903b4018947ae2076981d4b767281b18aba656bd22622af600c0c1cecf7dc7a592ba2b0927ab7e7d56352475a28ce852f5aaaf78d92e24e1c828fa4b707757d93e1540520cc6f2d3e7978491a9e16071913a8", 0x78}], 0x1}}, {{&(0x7f00000000c0)={0xa, 0x4e20, 0x9, @private0, 0x2}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000100)="0fc297c833e5897cbf871a468fee81d6ba826094cf399460ded9c808a5aaee06fa4acfaef3774174a5796ba10a607586c34398d27fd2d014deaad11b520b728b2cd6d02ee99559cdf00ca53613b3ae5b3780af2e6008a6e56fdfceddf10e37f9fad2f35d4a7919e66fad4904855c1194934e168b81b31c417e5b4ebe81bdb4258d111310d6b0897983", 0x89}, {&(0x7f0000000240)="c6e35398cb668488b9d6a0c0f30f4c32ffe9f9667ae4388545addd88014ab454001d1ea6bdbd6528e523f84d8968908f6d6efd648d40279563dd81f254245abbcd6c8261c5c42bfdf306adbe", 0x4c}, {&(0x7f00000001c0)="417c4eb93d720818981410743e26cfac42396638ffd99de0e0a748af05d702ae57541c6d7cab48777f7cbd3d72f321a2c859ba2c", 0x34}], 0x3, &(0x7f0000000700)=[@rthdrdstopts={{0x78, 0x29, 0x37, {0x84, 0xb, '\x00', [@jumbo={0xc2, 0x4, 0x8}, @ra={0x5, 0x2, 0x2}, @calipso={0x7, 0x18, {0x2, 0x4, 0x4, 0xf, [0xd0, 0x3]}}, @padn={0x1, 0x2, [0x0, 0x0]}, @calipso={0x7, 0x30, {0x2, 0xa, 0xfd, 0x6, [0x4, 0x7, 0x13, 0x80000001, 0x7]}}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', r1}}}, @hopopts_2292={{0x70, 0x29, 0x36, {0x3b, 0xa, '\x00', [@jumbo={0xc2, 0x4, 0x1}, @hao={0xc9, 0x10, @mcast2}, @generic={0x9, 0x8, "0dbbe4d18be47a15"}, @calipso={0x7, 0x20, {0x1, 0x6, 0x7f, 0x7ff, [0xffff, 0xb8, 0x1000]}}, @jumbo={0xc2, 0x4, 0x7}, @ra={0x5, 0x2, 0x5}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x1, [0x0]}]}}}, @rthdr={{0x28, 0x29, 0x39, {0x11, 0x2, 0x0, 0xe, 0x0, [@empty]}}}], 0x138}}], 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f00000004c0)=0x1, 0x4) writev(r2, &(0x7f0000001780)=[{&(0x7f00000006c0)="ba", 0x1}], 0x1) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0xf3a, 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xc, 0x8031, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000002c0)={0xf21b, 0x4, 0x8000, 0x4, 0xffff, 0x4, 0x9, 0x4}, &(0x7f0000000380)=0x20) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r5, 0x5452, &(0x7f0000000000)=0xbe3) syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @generic={{0xd, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @rand_addr=0x64010100, {[@noop, @timestamp_addr={0x44, 0x1c, 0x19, 0x1, 0x0, [{@local}, {@broadcast}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}]}}}}}}, 0x0) 22.913802579s ago: executing program 2 (id=810): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000000)=0x6, 0x4) bind$inet6(r0, &(0x7f0000000400)={0xa, 0x2, 0xac3, @loopback, 0x9}, 0x1c) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x1000000}, 0x1c) 22.780028863s ago: executing program 2 (id=813): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="053853396abbffb3206c401c304775eb", @ANYRES32=r2, @ANYBLOB="0800050002000000"], 0x24}}, 0x0) 22.709027341s ago: executing program 2 (id=814): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000040000000090a010400000000000000000700000008000a40000000030000000000000030000000000900010073797a3b00000000080005400000000204001280140000001000010000000000000000000084000a"], 0x88}}, 0x28010804) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000700)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180", @ANYRESDEC=r0, @ANYRESHEX], 0xe8}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r0) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r4, 0x800, 0x70bd29, 0x25dfdbff, {{}, {}, {0x42, 0x13, @udp='udp:syz2\x00'}}, ["", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x48}, 0x400c000) getsockopt$bt_hci(r3, 0x0, 0x30, 0x0, &(0x7f000000a500)) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(r5, 0x0, 0x2e, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108) setsockopt$inet_group_source_req(r5, 0x0, 0x2e, &(0x7f0000000480)={0x5, {{0x2, 0x0, @multicast1}}}, 0x108) r6 = socket(0x1d, 0x2, 0x6) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x80d0}, 0x20010) bind$can_j1939(r6, &(0x7f0000000000)={0x1d, r7, 0x3, {}, 0xfe}, 0x18) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) r11 = socket$igmp(0x2, 0x3, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r11, 0x0, 0x80, &(0x7f0000001200)=@broute={'broute\x00', 0x5e04, 0x1, 0x90, [0x0, 0x0, 0x200000000400], 0x2, 0x0, &(0x7f0000000400)=[{}, {0x0, '\x00', 0x1}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}]}, 0x108) r12 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000800)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000005c0)={&(0x7f0000000300)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xc, 0xe}}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000010) r13 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000600)=[{r11, 0x2001}, {r0, 0xa0}, {r5, 0x20}, {r1, 0x6100}, {0xffffffffffffffff, 0x2100}, {0xffffffffffffffff, 0x22}, {r12, 0x110a}, {r5, 0x1008}, {r13, 0x1}, {0xffffffffffffffff, 0x120}], 0xa, &(0x7f0000000680), &(0x7f00000006c0)={[0x8]}, 0x8) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r10, {0xb, 0x6}, {0x3, 0xfff9}, {0x2}}}, 0x24}}, 0x4040064) close(0x3) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, &(0x7f0000000a40)={0x2, {{0x2, 0x0, @multicast1}}}, 0x90) socket$kcm(0x29, 0x7, 0x0) 22.288018473s ago: executing program 2 (id=820): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @empty}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0xce20, @remote}, 0x2) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020506050e020409430009003f000c00100006000d0085a168d0bf46d32345653600648d0a00120002000a0000005ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a", 0x65, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @fixed}, 0xe) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r2) socket$unix(0x1, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000002280)={'team_slave_1\x00', @random="2b0100004e03"}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x4000) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f00000000c0)=0x4, 0x4) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r4) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x24, 0x2, [@TCA_HTB_INIT={0x18}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x7ff}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r3) sendmsg$IEEE802154_ADD_IFACE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000ecffffffffff2000000005002000000000000c001f0070687930"], 0x28}}, 0x0) 22.052355624s ago: executing program 2 (id=823): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000013c0)=[{{&(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000c00)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="28000000350001002bbd7004fedbdb2504000000080004"], 0x28}, 0x1, 0x0, 0x0, 0x20040050}, 0x24000080) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r6, &(0x7f0000001040)={0x27, r8, 0xffffffffffffffff, 0x5, 0x2, 0x0, "d32984bd1ca44c066af5160e961701a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000001200000000001900", 0x3c}, 0x60) r9 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r9, &(0x7f00000000c0)={0x27, r8, 0x1, 0x4, 0x0, 0xff, "bac5115c7dad488702b535116fad55baf63cdd52fc30106310abb622a1c3c01c13c04df6b906288e64e96754059e65c39c5759b069d6e6d9589e5f2348878c", 0x24}, 0x60) close(r7) sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=@ipv6_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x18, {0x4e22, 0xffff}}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r11 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x1, 0x0, 0x0, {0xa, 0xa0, 0x0, 0x0, r13}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@delqdisc={0x148, 0x25, 0x8, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xf, 0x6}, {0xffe0, 0x3}, {0x3, 0x9}}, [@TCA_STAB={0x124, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0xf, 0x1ff, 0x7, 0x1, 0x3, 0x8, 0x3}}, {0xa, 0x2, [0xfffa, 0x0, 0x2]}}, {{0x1c, 0x1, {0xfb, 0x4, 0x2d1, 0xf, 0x1, 0x54, 0xe, 0x5}}, {0xe, 0x2, [0x5, 0x3, 0x1, 0x5, 0x2]}}, {{0x1c, 0x1, {0x1, 0x5, 0x46, 0x9, 0x0, 0x2, 0xfb5a, 0x2}}, {0x8, 0x2, [0x8000, 0x100]}}, {{0x1c, 0x1, {0xf9, 0x40, 0x8, 0xfffffff9, 0x0, 0x101, 0x0, 0x6}}, {0x10, 0x2, [0x1, 0x3, 0xe3, 0x8, 0x0, 0x9]}}, {{0x1c, 0x1, {0x8, 0xa, 0x9, 0x4, 0x3, 0x3, 0x0, 0x7}}, {0x12, 0x2, [0x6a, 0x6, 0x5b5, 0x7, 0x800, 0x1, 0x5478]}}, {{0x1c, 0x1, {0x6, 0xc, 0x8, 0x2, 0x2, 0x9, 0x4, 0x5}}, {0xe, 0x2, [0x7fff, 0x1, 0x0, 0x81, 0xa]}}, {{0x1c, 0x1, {0x4, 0x9, 0xfff8, 0x40, 0x1, 0x6, 0x7}}, {0x4}}]}]}, 0x148}}, 0x0) 22.020424521s ago: executing program 4 (id=824): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) r2 = socket(0x28, 0x5, 0x0) r3 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_CLASS={0x6}}}}]}, 0x38}}, 0x0) listen(r3, 0x4) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) r6 = accept$unix(r3, 0x0, 0x0) sendmmsg$unix(r6, &(0x7f0000002a00)=[{{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000000280)='0', 0x1}], 0x1, 0x0, 0x0, 0x4000}}], 0x1, 0x20) recvmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x2000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000e80)="b9e403c6631e39495aa05dc7cf1c", 0x0, 0x7ab, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) (async) close(r1) (async) socket(0x28, 0x5, 0x0) (async) socket(0x28, 0x5, 0x0) (async) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_CLASS={0x6}}}}]}, 0x38}}, 0x0) (async) listen(r3, 0x4) (async) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) (async) accept$unix(r3, 0x0, 0x0) (async) sendmmsg$unix(r6, &(0x7f0000002a00)=[{{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000000280)='0', 0x1}], 0x1, 0x0, 0x0, 0x4000}}], 0x1, 0x20) (async) recvmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x2000) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000e80)="b9e403c6631e39495aa05dc7cf1c", 0x0, 0x7ab, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) 21.925028582s ago: executing program 1 (id=825): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)={0x1c, r2, 0x5, 0x4000, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8000080}, 0x0) 21.812487918s ago: executing program 4 (id=827): r0 = socket$netlink(0x10, 0x3, 0x8) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0x9c, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3, 0x5b}}}}, [@acl_policy=[@NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x34, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x1c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x4}, @NL80211_ATTR_HIDDEN_SSID={0x8, 0x7e, 0x1}, @crypto_settings=[@NL80211_ATTR_CONTROL_PORT={0x4}]]}, 0x9c}, 0x1, 0x0, 0x0, 0x1}, 0x8081) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000080)={r1, 0xf, 0x25, 0x2, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x40) 21.80680968s ago: executing program 1 (id=829): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(wp512-generic,cbc-camellia-aesni-avx2)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x2b04, 0x4) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$sock_proto_private(r2, 0x89e8, &(0x7f0000000b80)="da745502116f7ffad3799cc22bbf26d5ad3fb0579fc54bd68266f6bf416c1ca6538e59ff49d662f639") r3 = socket$kcm(0x10, 0x7, 0x0) setsockopt$inet_tcp_buf(r1, 0x6, 0x1a, &(0x7f00000000c0)="c066b6f118bc1632c97162b2ef081f93238bfbd7ebf926bb0c4e9d49b45e512d94a4b651b9cc56f2264d1c8166d200", 0x2f) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000100240248ff050005001200", 0x2e}], 0x1}, 0x40880) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f0000004080)=[{&(0x7f0000001380)="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", 0x222}], 0x1}}], 0x1, 0x4) socket$alg(0x26, 0x5, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x40b, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_USERDATA={0x65, 0x7, 0x1, 0x0, "012be784351a4ada27dc457ebfb5b267cc443d6f5f5bcd386159ef18068ede957884529effebfdc4406049d3637d08a8a83b2a3d83d9be5155815938a0800d94ec396aa8b25b6e995d2e1b64f7db6e19080987120b41e0cf11ef4d33859ad17c5d"}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xbc}}, 0x0) sendto$inet(r0, &(0x7f00000002c0)="d7f0fcc5819f12ed780b80f87505bfe5a0109e5ffc756f3593a84cfd650fff6fd7fe3c6cf2ec30abed8e8157b8f52cf9bf9151c0d649c55312b1f122ad5535fb2524a62a86157173253e8473aa97a0890c4885c07358555d5c10e36acc448a299998ca", 0x63, 0x20000800, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 21.656301826s ago: executing program 4 (id=831): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_inet_SIOCDELRT(r1, 0x890c, &(0x7f00000001c0)={0x0, {0x2, 0x4e21, @loopback}, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e21, @empty}, 0x2b3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7f, 0x4, 0x400}) r2 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), r0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000fc0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000001d40)={0x0, 0x0, &(0x7f0000001d00)={&(0x7f0000000200)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000fddbdf250100000008000100", @ANYRES32=r3, @ANYBLOB="4400028040000100240001006c625f686173685f73746174730000000000007cd6df1dbb1a48fe0000000000050003"], 0x60}, 0x1, 0x0, 0x0, 0x40004}, 0x884) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x30, r6, 0x5, 0x4000, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random="8b"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x30}}, 0x40008000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x130, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0xd}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xd8}]}}, @TCA_RATE={0x6, 0x5, {0xb, 0x40}}, @filter_kind_options=@f_bpf={{0x8}, {0xe8, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0xd0, 0x1, [@m_simple={0x30, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_simple={0x9c, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x6d, 0x6, "9787c29d6ac649e7ec160dfef7c4cea330102e688fe12213d2bfb320865cee27f05adfbc7dae04880a34e7bf775010128401ec5a80f551da79136f2a4ff74f3588c03c976e1c54366c6747dbbdd2e1e0d6da659b84a2ea14191b4223d2b6eeb465498ad518ee2114b5"}, {0xc, 0x7, {0x0, 0x79d0f023c2b305dd}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}}]}, 0x130}, 0x1, 0x0, 0x0, 0x40008c5}, 0x20000080) r9 = socket(0x10, 0x803, 0x0) sendto(r9, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r9, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) sendmsg$NL80211_CMD_GET_POWER_SAVE(r7, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="04e8e28c1ebb3670c36f7b264163963c8de8d3d82523000000", @ANYRES16=r8, @ANYBLOB="000828bd7000ffdbdf253e00000008000300", @ANYRES32=r5, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x804) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r11, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r12 = socket$inet_sctp(0x2, 0x5, 0x84) r13 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r13, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x18, 0x52, 0x1, 0x0, 0x0, {0x1c}, [@typed={0x4, 0x2, 0x0, 0x0, @binary}]}, 0x18}}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r12, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000300)={0x3, 'wg1\x00', {0x1}, 0x5}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r11, 0x84, 0x9, &(0x7f00000001c0)={r14, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xd4}, 0x9c) setsockopt$inet_sctp6_SCTP_MAXSEG(r10, 0x84, 0xd, &(0x7f0000000180)=@assoc_value={r14, 0x51}, 0x8) socket$rds(0x15, 0x5, 0x0) 21.646652156s ago: executing program 1 (id=833): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2}, &(0x7f0000000140), &(0x7f0000000180)=r0}, 0x20) syz_emit_ethernet(0x2c, &(0x7f0000000080)={@broadcast, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1e, 0x0, 0x4000, 0x6, 0x11, 0x0, @empty, @empty}, {0x4, 0x4e20, 0xa, 0x0, @opaque="421c"}}}}}, 0x0) 21.478333347s ago: executing program 4 (id=836): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) r4 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r5, {0x4, 0xffe0}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8847}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x81}, 0x24000000) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="94000000", @ANYRES16=r2, @ANYBLOB="010027bd7000ffdbdf252100000008000300", @ANYRES32=r3, @ANYBLOB="08007700ff01000054002d801e00"], 0x94}, 0x1, 0x0, 0x0, 0x24008010}, 0x4000004) 21.433356819s ago: executing program 1 (id=837): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@mangle={'mangle\x00', 0x2, 0x6, 0x510, 0x370, 0x0, 0x280, 0xd0, 0xd0, 0x440, 0x440, 0x440, 0x440, 0x440, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [0xff, 0xff000000], [0x0, 0xff000000], 'syzkaller0\x00', 'bridge0\x00', {0xff}, {}, 0x0, 0x2}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff}, {0xffffffffffffffff, 0x0, 0x7}, {}, 0x2}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x3ff}}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x0, 0xff], [], 'bond_slave_1\x00', 'pim6reg1\x00', {0xff}, {}, 0x0, 0x9}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4, 0x0, 0x2b}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [0xffffff00, 0xffffffff, 0xff000000], [0xffffffff, 0xffffffff, 0x0, 0xffffffff], 'xfrm0\x00', 'team_slave_1\x00', {0xff}, {}, 0x11, 0x9, 0x1, 0x40}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x3, 0x4}, {0x2, 0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570) syz_emit_ethernet(0x3b6, &(0x7f0000000680)={@local, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '!\x00', 0x380, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x19, 0x300, 0x0, [{0x5, 0xa, "a78ce5400659808000000000004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000000000001991319c00"}, {0x19, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde27a5b85b9d930914625d8a049b4cf0d129806a610ad8467a6b2600000000000055a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef5523e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18989f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}, {0x0, 0xb, "d47ae6e8805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "fcf98a102ec1876d4e6fa3b20519bbaa8a029cee00b8d3485e3b63ed09bdb581c9fe68a356f542b01b9387f85932e740e077e1d16212fb"}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa76ffff9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4828288e62afbf03269f1f98aea6a58cf45d7c5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c258a6f"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02c226a6bce65f81ed"}]}}}}}}, 0x0) 21.371446398s ago: executing program 4 (id=838): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, &(0x7f0000000500)=[{&(0x7f00000006c0)="27031c001c0014000000002f1eafacf706e105400000894f00050003ee0b80558ddbba9b37242d37a518fc9c5be50eaf07c3650596", 0xfdac}], 0x1}, 0x4) 21.236899591s ago: executing program 4 (id=841): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@bridge_newvlan={0x24, 0x70, 0x239, 0x70bd26, 0x25dfdbff, {0x7, 0x0, 0x0, r1}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xd}}]}, 0x24}, 0x1, 0x0, 0x0, 0x804}, 0x4c010) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x60480) connect$netlink(r3, &(0x7f0000000300)=@unspec, 0xc) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000000), 0x10) syz_emit_ethernet(0x4e, 0x0, 0x0) sendmsg$can_bcm(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x4) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) getsockopt$IPT_SO_GET_INFO(r6, 0x0, 0x40, &(0x7f0000000100)={'security\x00', 0x0, [0x0, 0x5, 0x1000, 0x2, 0x1]}, &(0x7f00000003c0)=0x54) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r4, &(0x7f0000001040)={0x27, r8, 0xffffffffffffffff, 0x0, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) close(r7) close(0x4) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 21.219394988s ago: executing program 1 (id=842): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x1, 0x0, &(0x7f0000000200)="7f", 0x0}, 0x50) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x4, 0x2}, 0x48) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c00000002"], 0x5c}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r5, 0x84, 0x24, 0x0, &(0x7f0000000040)) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r3, 0x0, 0x0}, 0x20) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a300000000040000000030a01080000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d65746100000000140002800800014000000012080002400000001914000000110001"], 0xd8}}, 0x80) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x28, r2, 0x5, 0x4000, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0x74}}}}}, 0x28}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000100)={'erspan0\x00', &(0x7f0000000040)=@ethtool_wolinfo={0x4b, 0x7, 0x1ff, "fac16a590b17"}}) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f0000000080)={0x0, 0x2, 0x3}, 0x8) r8 = socket(0x400000000010, 0x3, 0x0) write(r8, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc02802000030004000500e1000c04001e001a030700", 0x33a) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$inet_mptcp_buf(r8, 0x11c, 0x3, &(0x7f0000000240)=""/120, &(0x7f00000002c0)=0x78) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000480)={0x8f8, r2, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x52}}}}, [@beacon=[@NL80211_ATTR_IE_ASSOC_RESP={0xa, 0x80, [@ext_channel_switch={0x3c, 0x4, {0x1, 0x1, 0x76, 0x5}}]}, @NL80211_ATTR_IE_ASSOC_RESP={0xfb, 0x80, [@measure_req={0x26, 0xf5, {0xa, 0x67, 0x0, "0c8e3f9e36a739321b012e876d4639f76a512882c90ed904910edfa49cf6e0891dd218ad68040b69a391f896fe2192967121b082976654a54274cbe3f74131def560d9b879ef06d3649dadb6d32895a94287e2f555468b2744169733450db2c22f13bcdfa0e3b0b1ba805ce8c472d4c5026c9fa3f61f76af02b2efbafb669baf41ed1818a8c3115db2a231f990d32acb18146545d3d96936199e5f2fdaea7fb544b723db3bdf07cdfa79eb60ccc8d5a6b082ca80cfcdeb143e5dbe65d404e1bfa1f64e7e8e292bc55f82a238da8b2287a4a111da8667ea2b8b7b3c4b344c94a74afa42f9f47aef83e6755d60fc30b9aa1cd5"}}]}, @NL80211_ATTR_BEACON_HEAD={0x281, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x2421}, @device_b, @broadcast, @initial, {0xb, 0x3e6}}, 0x1, @default, 0x2081, @val={0x0, 0x6, @default_ibss_ssid}, @void, @void, @void, @void, @void, @val={0x25, 0x3, {0x1, 0xaf, 0x5}}, @void, @val={0x3c, 0x4, {0x1, 0x4, 0x4c, 0x7}}, @val={0x2d, 0x1a, {0x80, 0x0, 0x1, 0x0, {0x8, 0x4, 0x0, 0xe, 0x0, 0x1, 0x0, 0x1}, 0x1, 0x2, 0x4}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x60}}, @void, [{0xdd, 0x6d, "e8b20b43bb6b271f9a10a16f495d0a6a1d15a39c0f77e1a9fd3a71a2a6334480c87ca6f31137b9051e8655f138a525e5acac01325a23e3851b2499714a574961c3b417da68557c8d12e8f40e7e3bdcfd6faa9c209dfdd2964200b6765e6668f23d5cc981fbc7c612f71b4896ac"}, {0xdd, 0xaa, "8010c0d0c802d3aaec35a05e3299a3d8ea82c9d8b412587e76b8ceae105bb67e456432bb0b5c833af605883aca5bf4bc5a86d63366d85185a4f1884b16309b165530ccbae6a58abc7d4fab475de7f05368a4e8ed22d53ade53d9521b3e8841e117196702ee0a9f537d75f537a8227c55356d78aff7c40828221e33a61e6abbf2f1bc4450fc648c4938e4fdad80ddc9853fb75b693197ffbcf3848f38641b038f86c33e2dca600c38f921"}, {0xdd, 0xfc, "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"}]}}, @NL80211_ATTR_PROBE_RESP={0x542, 0x91, "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"}]]}, 0x8f8}, 0x1, 0x0, 0x0, 0x81}, 0x80) 20.956468541s ago: executing program 1 (id=843): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[], 0x18}}, 0x0) getsockopt(r0, 0x200000000114, 0x271e, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r1, r3, 0x25, 0x0, @void}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0x2}, {}, {0x9, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x88a8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000810}, 0x20084084) r8 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1}}) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800}) 20.601785225s ago: executing program 3 (id=844): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0x3, &(0x7f0000000000)=0x4, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000fbdbdf251900000008000300", @ANYRES32=r1, @ANYBLOB="050024"], 0x34}, 0x1, 0x0, 0x0, 0x2004c051}, 0x10) 20.536830136s ago: executing program 3 (id=845): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, 0x0, 0x0}, 0x94) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r1, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) r2 = socket$kcm(0x11, 0x4, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000002c0)="7cac3763a96cd2f6e8ca55b9ef13f2fca7b72d13228efc7ccf6e0ed34e0296df1983e33fefc79ceeeabde37f79b0a8bb97b6ec90e65c0c0a3ee4cc961a81951b01e38ca757646cc9a5f3104f41075e240e6df2b312a844698db0e71f90293a270fb3568d23c91bc5404885102d9c80fce4de7705ae708c80317f39bbeccd408deaa1cdcd3c316188007e4022c19c4c4b789a0e2ff231eff478df8ab2180afc3f6e9ade7c3dfbc71612c38d3d235cacc78baf97d7e78c1175f784f4006e1d1d90ed0a3c3cba0c1e697fb4da763508b2b73d049adb5b9cf4ddf614c51fd02d", 0xde) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0x0) sendmsg$kcm(r2, &(0x7f0000000280)={&(0x7f00000001c0)=@nfc={0x27, r3, 0x0, 0x3}, 0x80, &(0x7f00000000c0)}, 0x30004802) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000240)=r0}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'batadv_slave_1\x00', 0x0}) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000500), 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000600)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x16f2, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x4}, 0x50) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfd, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x4}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000780)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)='%pK \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000840)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000007c0), &(0x7f0000000800)='%pK \x00'}, 0x20) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000880)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x5}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000900)={0x1, 0xffffffffffffffff}, 0x4) r14 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r14}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0xb}, {0x66, 0x0, 0x0, 0x2000000}}, [@printk={@lld, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x5, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x15}}], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_ext={0x1c, 0x9, &(0x7f0000000400)=@raw=[@ldst={0x1, 0x2, 0x0, 0x2, 0x6, 0x40, 0xfffffffffffffff0}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @ldst={0x1, 0x2, 0x4, 0xb, 0x7, 0xc, 0x10}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x3}], &(0x7f0000000480)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x26, '\x00', r5, 0x0, r6, 0x8, &(0x7f0000000540)={0x3, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x122cf, 0xffffffffffffffff, 0x3, &(0x7f0000000940)=[r7, r8, r9, r10, r11, r12, r13, r14], &(0x7f0000000980)=[{0x3, 0x2, 0xb, 0x6}, {0x1, 0x5, 0xe, 0x7}, {0x4, 0x1, 0x1, 0xa}], 0x10, 0x935f}, 0x94) 20.420485531s ago: executing program 3 (id=846): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r2, 0x0, 0x2, &(0x7f0000000080), 0x4) getsockopt$WPAN_SECURITY_LEVEL(r2, 0x0, 0x2, 0x0, &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010028bd7000000000016600382bc4ce05f80824de4dd004277b080000080003003e8b625a0bbc3854e522ebdb348d27bceb63eb3c31ed89b514b0bce609a6283e47ceed3e94867e2acf123bfce827b603eb91eef75e15f5835bf9369409147905b59a32bbca76c473ec6b9dd9565cb198cedad94d60b45bf35ef78a8b2daeef3745dfdd25d535b38892a3a600770f731f716519102e655720f9f0fa99619bf7", @ANYRES32=r3, @ANYBLOB="080026006c0900000800b70099000000"], 0x2c}}, 0x0) 20.399403372s ago: executing program 3 (id=847): sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000100)="c7a33173d86b27dde42034283e10c4ff10b35bfc2da6b41e1a6238044f7d41f88297c3ed71b139", 0x27}], 0x1, 0x0, 0x30}, 0x800) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="9115463ecc790180c20000030806000108000604"], 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x300, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) 20.272382221s ago: executing program 3 (id=849): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)={{0x14}, [@NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0x7c}}, 0x0) (fail_nth: 12) 20.178641774s ago: executing program 3 (id=851): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r2, &(0x7f0000001040)={0x27, r4, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000400), r0) bind$nfc_llcp(r5, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x5, 0xfd, 0x5, "750538440ff92fe2aaf1beea7cdcc151042cd9893bc31f80716a120d8be6d7f81cd81ec275000386e7255f0669b740a5418d69d00000d51de08a00ee1d9a34", 0x400000011}, 0x60) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)=0x0) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000000c0)=0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket(0x400000000010, 0xa, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0xc, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x102}}}]}, 0x38}}, 0x40080) ioctl$sock_bt_bnep_BNEPCONNADD(r10, 0x400442c8, &(0x7f00000002c0)=ANY=[@ANYRES32=r2, @ANYBLOB="02000000dc08b8eefb65992f3ed80f8704e860a0db291d2d71b961811db548320ecf94b3dd48326816a593eed20a052273914b686cb537"]) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f0000000300)=0x0) bind$nfc_llcp(r13, &(0x7f0000000340)={0x27, r14, 0x1, 0x4, 0x6, 0x9, "93ace04247290986e36e0c07e306075ce4c56203bf96c5e41e2b3719750c7cc7145f10fe64b29856cf80869501dda0de21d9d6ad5f9f0752a3cda08ed3c733", 0x19}, 0x60) r15 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r15) sendmsg$NFC_CMD_DEV_UP(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x1c, r16, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r0, &(0x7f0000000280)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00029805d448d7c0d6cf3414bb000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000400ffffffff08000400ffffffff08000100", @ANYRES32=r14, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000014007910480000000000690022000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xa3}, 0x21) r17 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x14, r17, 0x1, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) 16.084496161s ago: executing program 0 (id=878): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2c000000130001c30000000000000000000008", @ANYRES32, @ANYBLOB="0000d40000000000a5c50b000009"], 0x2c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x42}, 0xe0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000000)=0x6, 0x4) bind$inet6(r0, &(0x7f0000000400)={0xa, 0x2, 0xac3, @loopback, 0x9}, 0x1c) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 16.084040889s ago: executing program 0 (id=879): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="c50a00000000000061139c00000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) syz_emit_ethernet(0x1a0, &(0x7f0000000080)={@broadcast, @remote, @void, {@ipv6={0x86dd, @generic={0x6, 0x6, "348a7b", 0x16a, 0x2c, 0x1, @remote, @local, {[@dstopts={0x21, 0x4, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0xa9}, @ra={0x5, 0x2, 0x7}, @ra={0x5, 0x2, 0xfffe}, @hao={0xc9, 0x10, @mcast2}]}, @hopopts={0x3a, 0x9, '\x00', [@calipso={0x7, 0x40, {0x2, 0xe, 0x1, 0x2, [0x3, 0x0, 0x8, 0x3, 0x87, 0x5, 0x6]}}, @ra={0x5, 0x2, 0x7f7a}, @enc_lim]}, @fragment={0xc, 0x0, 0x9, 0x1, 0x0, 0x8, 0x64}, @srh={0x4, 0x6, 0x4, 0x3, 0x8, 0x58, 0x90, [@empty, @private0={0xfc, 0x0, '\x00', 0x1}, @private2]}, @srh={0x0, 0x2, 0x4, 0x1, 0x6, 0x58, 0xb, [@local]}], "6b2ee9345b7cea6e58a9fe4067e23cf12fe7c0cbf0eb7e9179c585f1dfc94876fab274c10e67fa11e3b2dc65fb7bc13841912ee15c350fb64e78db68f70bc02345f292813721b1213cb7bbd36d9f1c4534ed58ee709fc3fea232e63dc7183f4f9f93bccac571bae4a1602c37de8331835322784f2142186660ec984fd1edb83b8e233c751588963fc1f9"}}}}}, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000002e40)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [{0x0, 0x2, "122b472e41e24b11f34b608816e5"}]}}}}}}, 0x0) syz_emit_ethernet(0x34e, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0) 16.064963136s ago: executing program 0 (id=880): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000001440)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x0, {0x1, 0x1, 0x4}, 0x1}, 0x18) setsockopt$sock_int(r0, 0x1, 0x6, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="81b641f1f3843704b6", 0x9}], 0x1}, 0x48005) readv(r0, &(0x7f00000005c0)=[{&(0x7f00000000c0)=""/25, 0x19}], 0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) 15.206420912s ago: executing program 0 (id=881): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_int(r0, 0x0, 0x4, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) unshare(0x2c060000) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) unshare(0x20000300) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') (async) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x0, @dev}, 0x10) 15.135283694s ago: executing program 0 (id=882): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) r4 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@gettfilter={0x24, 0x2e, 0x0, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xf, 0x8}, {0xc}, {0xb, 0xffde}}}, 0x24}}, 0x40051) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, {0x4, 0xffe0}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8847}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x81}, 0x24000000) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="94000000", @ANYRES16=r2, @ANYBLOB="010027bd7000ffdbdf252100000008000300", @ANYRES32=r3, @ANYBLOB="08007700ff01000054002d801e00"], 0x94}, 0x1, 0x0, 0x0, 0x24008010}, 0x4000004) 15.13442612s ago: executing program 0 (id=883): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000300)={0x80, 0x19, 0x9, 0x7, 0x7, 0x0, 0x2, 0x8, 0x2, 0x29, 0x7, 0xb5, 0xc, 0x81}, 0xe) r1 = socket$kcm(0x2d, 0x2, 0x0) r2 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000100)={r2}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="050000004000"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) sendmsg$can_bcm(r4, &(0x7f0000009c40)={0x0, 0x0, &(0x7f0000007100)={&(0x7f0000000080)=ANY=[@ANYBLOB="0500000003a69400062472fed6340b77", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001000000000000000000000097a56f6048021ea4"], 0x48}}, 0x0) r5 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000340)={r5}) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'veth1_to_hsr\x00', 0x0}) bind$xdp(r6, &(0x7f00000005c0)={0x2d, 0x0, r8, 0xc}, 0x10) bind$xdp(r3, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10) close(r1) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @local}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_CONTEXT(r6, 0x84, 0x11, &(0x7f00000003c0)={r9, 0x6}, &(0x7f0000000400)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r6, 0x84, 0x10, &(0x7f0000002240)=@sack_info={r9, 0x8}, &(0x7f0000002280)=0xc) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ppoll(&(0x7f0000000240)=[{r10, 0x8108}], 0x1, 0x0, 0x0, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0xa, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) write$tun(r10, &(0x7f0000000200)={@val={0x0, 0x6a01}, @val={0x3, 0x80, 0x71, 0x800, 0x10, 0x8}, @mpls={[{0xe, 0x0, 0x1}, {0x697, 0x0, 0x1}, {0x4, 0x0, 0x1}], @ipv4=@icmp={{0x8, 0x4, 0x0, 0x8, 0x28, 0x65, 0x0, 0x7, 0x1, 0x0, @loopback, @local, {[@timestamp_prespec={0x44, 0xc, 0x13, 0x3, 0xf, [{@dev={0xac, 0x14, 0x14, 0x30}, 0x2}]}]}}, @info_reply={0x10, 0x0, 0x0, 0x7, 0x7}}}}, 0x42) r14 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=@bridge_getlink={0x34, 0x12, 0x10, 0x0, 0x25dfdbfc, {}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'wg0\x00'}]}, 0x34}}, 0x0) 6.11200325s ago: executing program 32 (id=823): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000013c0)=[{{&(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000c00)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="28000000350001002bbd7004fedbdb2504000000080004"], 0x28}, 0x1, 0x0, 0x0, 0x20040050}, 0x24000080) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r6, &(0x7f0000001040)={0x27, r8, 0xffffffffffffffff, 0x5, 0x2, 0x0, "d32984bd1ca44c066af5160e961701a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000001200000000001900", 0x3c}, 0x60) r9 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r9, &(0x7f00000000c0)={0x27, r8, 0x1, 0x4, 0x0, 0xff, "bac5115c7dad488702b535116fad55baf63cdd52fc30106310abb622a1c3c01c13c04df6b906288e64e96754059e65c39c5759b069d6e6d9589e5f2348878c", 0x24}, 0x60) close(r7) sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=@ipv6_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x18, {0x4e22, 0xffff}}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r11 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x1, 0x0, 0x0, {0xa, 0xa0, 0x0, 0x0, r13}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@delqdisc={0x148, 0x25, 0x8, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xf, 0x6}, {0xffe0, 0x3}, {0x3, 0x9}}, [@TCA_STAB={0x124, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0xf, 0x1ff, 0x7, 0x1, 0x3, 0x8, 0x3}}, {0xa, 0x2, [0xfffa, 0x0, 0x2]}}, {{0x1c, 0x1, {0xfb, 0x4, 0x2d1, 0xf, 0x1, 0x54, 0xe, 0x5}}, {0xe, 0x2, [0x5, 0x3, 0x1, 0x5, 0x2]}}, {{0x1c, 0x1, {0x1, 0x5, 0x46, 0x9, 0x0, 0x2, 0xfb5a, 0x2}}, {0x8, 0x2, [0x8000, 0x100]}}, {{0x1c, 0x1, {0xf9, 0x40, 0x8, 0xfffffff9, 0x0, 0x101, 0x0, 0x6}}, {0x10, 0x2, [0x1, 0x3, 0xe3, 0x8, 0x0, 0x9]}}, {{0x1c, 0x1, {0x8, 0xa, 0x9, 0x4, 0x3, 0x3, 0x0, 0x7}}, {0x12, 0x2, [0x6a, 0x6, 0x5b5, 0x7, 0x800, 0x1, 0x5478]}}, {{0x1c, 0x1, {0x6, 0xc, 0x8, 0x2, 0x2, 0x9, 0x4, 0x5}}, {0xe, 0x2, [0x7fff, 0x1, 0x0, 0x81, 0xa]}}, {{0x1c, 0x1, {0x4, 0x9, 0xfff8, 0x40, 0x1, 0x6, 0x7}}, {0x4}}]}]}, 0x148}}, 0x0) 6.067367108s ago: executing program 33 (id=841): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@bridge_newvlan={0x24, 0x70, 0x239, 0x70bd26, 0x25dfdbff, {0x7, 0x0, 0x0, r1}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xd}}]}, 0x24}, 0x1, 0x0, 0x0, 0x804}, 0x4c010) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x60480) connect$netlink(r3, &(0x7f0000000300)=@unspec, 0xc) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000000), 0x10) syz_emit_ethernet(0x4e, 0x0, 0x0) sendmsg$can_bcm(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x4) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) getsockopt$IPT_SO_GET_INFO(r6, 0x0, 0x40, &(0x7f0000000100)={'security\x00', 0x0, [0x0, 0x5, 0x1000, 0x2, 0x1]}, &(0x7f00000003c0)=0x54) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r4, &(0x7f0000001040)={0x27, r8, 0xffffffffffffffff, 0x0, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) close(r7) close(0x4) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 5.041912294s ago: executing program 34 (id=843): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[], 0x18}}, 0x0) getsockopt(r0, 0x200000000114, 0x271e, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r1, r3, 0x25, 0x0, @void}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0x2}, {}, {0x9, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x88a8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000810}, 0x20084084) r8 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1}}) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800}) 5.02109288s ago: executing program 35 (id=851): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r2, &(0x7f0000001040)={0x27, r4, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000400), r0) bind$nfc_llcp(r5, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x5, 0xfd, 0x5, "750538440ff92fe2aaf1beea7cdcc151042cd9893bc31f80716a120d8be6d7f81cd81ec275000386e7255f0669b740a5418d69d00000d51de08a00ee1d9a34", 0x400000011}, 0x60) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)=0x0) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000000c0)=0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket(0x400000000010, 0xa, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0xc, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x102}}}]}, 0x38}}, 0x40080) ioctl$sock_bt_bnep_BNEPCONNADD(r10, 0x400442c8, &(0x7f00000002c0)=ANY=[@ANYRES32=r2, @ANYBLOB="02000000dc08b8eefb65992f3ed80f8704e860a0db291d2d71b961811db548320ecf94b3dd48326816a593eed20a052273914b686cb537"]) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f0000000300)=0x0) bind$nfc_llcp(r13, &(0x7f0000000340)={0x27, r14, 0x1, 0x4, 0x6, 0x9, "93ace04247290986e36e0c07e306075ce4c56203bf96c5e41e2b3719750c7cc7145f10fe64b29856cf80869501dda0de21d9d6ad5f9f0752a3cda08ed3c733", 0x19}, 0x60) r15 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r15) sendmsg$NFC_CMD_DEV_UP(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x1c, r16, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r0, &(0x7f0000000280)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00029805d448d7c0d6cf3414bb000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000400ffffffff08000400ffffffff08000100", @ANYRES32=r14, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000014007910480000000000690022000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xa3}, 0x21) r17 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x14, r17, 0x1, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) 0s ago: executing program 36 (id=883): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000300)={0x80, 0x19, 0x9, 0x7, 0x7, 0x0, 0x2, 0x8, 0x2, 0x29, 0x7, 0xb5, 0xc, 0x81}, 0xe) r1 = socket$kcm(0x2d, 0x2, 0x0) r2 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000100)={r2}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="050000004000"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) sendmsg$can_bcm(r4, &(0x7f0000009c40)={0x0, 0x0, &(0x7f0000007100)={&(0x7f0000000080)=ANY=[@ANYBLOB="0500000003a69400062472fed6340b77", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001000000000000000000000097a56f6048021ea4"], 0x48}}, 0x0) r5 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000340)={r5}) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'veth1_to_hsr\x00', 0x0}) bind$xdp(r6, &(0x7f00000005c0)={0x2d, 0x0, r8, 0xc}, 0x10) bind$xdp(r3, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10) close(r1) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @local}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_CONTEXT(r6, 0x84, 0x11, &(0x7f00000003c0)={r9, 0x6}, &(0x7f0000000400)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r6, 0x84, 0x10, &(0x7f0000002240)=@sack_info={r9, 0x8}, &(0x7f0000002280)=0xc) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ppoll(&(0x7f0000000240)=[{r10, 0x8108}], 0x1, 0x0, 0x0, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0xa, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) write$tun(r10, &(0x7f0000000200)={@val={0x0, 0x6a01}, @val={0x3, 0x80, 0x71, 0x800, 0x10, 0x8}, @mpls={[{0xe, 0x0, 0x1}, {0x697, 0x0, 0x1}, {0x4, 0x0, 0x1}], @ipv4=@icmp={{0x8, 0x4, 0x0, 0x8, 0x28, 0x65, 0x0, 0x7, 0x1, 0x0, @loopback, @local, {[@timestamp_prespec={0x44, 0xc, 0x13, 0x3, 0xf, [{@dev={0xac, 0x14, 0x14, 0x30}, 0x2}]}]}}, @info_reply={0x10, 0x0, 0x0, 0x7, 0x7}}}}, 0x42) r14 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=@bridge_getlink={0x34, 0x12, 0x10, 0x0, 0x25dfdbfc, {}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'wg0\x00'}]}, 0x34}}, 0x0) kernel console output (not intermixed with test programs): 4100][ T6945] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.544113][ T6945] ? clear_bhb_loop+0x60/0xb0 [ 106.544130][ T6945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.544143][ T6945] RIP: 0033:0x7faddbf8e0dc [ 106.544155][ T6945] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 106.544166][ T6945] RSP: 002b:00007faddce82030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 106.544181][ T6945] RAX: ffffffffffffffda RBX: 00007faddc1e5fa0 RCX: 00007faddbf8e0dc [ 106.544191][ T6945] RDX: 000000000000000f RSI: 00007faddce820a0 RDI: 0000000000000004 [ 106.544199][ T6945] RBP: 00007faddce82090 R08: 0000000000000000 R09: 0000000000000000 [ 106.544208][ T6945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 106.544216][ T6945] R13: 00007faddc1e6038 R14: 00007faddc1e5fa0 R15: 00007ffcc734a2e8 [ 106.544241][ T6945] [ 106.845711][ T6951] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.375'. [ 106.981674][ T6961] FAULT_INJECTION: forcing a failure. [ 106.981674][ T6961] name failslab, interval 1, probability 0, space 0, times 0 [ 107.062540][ T6961] CPU: 0 UID: 0 PID: 6961 Comm: syz.2.379 Not tainted syzkaller #0 PREEMPT(full) [ 107.062567][ T6961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 107.062578][ T6961] Call Trace: [ 107.062585][ T6961] [ 107.062593][ T6961] dump_stack_lvl+0x189/0x250 [ 107.062620][ T6961] ? __pfx____ratelimit+0x10/0x10 [ 107.062643][ T6961] ? __pfx_dump_stack_lvl+0x10/0x10 [ 107.062666][ T6961] ? __pfx__printk+0x10/0x10 [ 107.062690][ T6961] ? __pfx___might_resched+0x10/0x10 [ 107.062714][ T6961] should_fail_ex+0x414/0x560 [ 107.062745][ T6961] should_failslab+0xa8/0x100 [ 107.062765][ T6961] kmem_cache_alloc_lru_noprof+0x79/0x6d0 [ 107.062788][ T6961] ? __d_alloc+0x36/0x7a0 [ 107.062813][ T6961] __d_alloc+0x36/0x7a0 [ 107.062838][ T6961] d_alloc_parallel+0xe1/0x1610 [ 107.062858][ T6961] ? __lock_acquire+0xab9/0xd20 [ 107.062886][ T6961] ? __lock_acquire+0xab9/0xd20 [ 107.062909][ T6961] ? __pfx_d_alloc_parallel+0x10/0x10 [ 107.062934][ T6961] ? __raw_spin_lock_init+0x45/0x100 [ 107.062959][ T6961] ? __init_waitqueue_head+0xa9/0x150 [ 107.062986][ T6961] __lookup_slow+0x116/0x3d0 [ 107.063009][ T6961] ? __pfx___lookup_slow+0x10/0x10 [ 107.063038][ T6961] ? d_lookup+0x8a/0xa0 [ 107.063057][ T6961] ? lookup_noperm+0x112/0x220 [ 107.063081][ T6961] simple_start_creating+0xfd/0x1e0 [ 107.063099][ T6961] ? __pfx_simple_start_creating+0x10/0x10 [ 107.063130][ T6961] debugfs_start_creating+0x10f/0x180 [ 107.063156][ T6961] __debugfs_create_file+0x79/0x4f0 [ 107.063186][ T6961] debugfs_create_file_full+0x3f/0x60 [ 107.063213][ T6961] ref_tracker_dir_debugfs+0x14e/0x270 [ 107.063231][ T6961] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 107.063284][ T6961] ? trace_kmalloc+0x1f/0xd0 [ 107.063303][ T6961] ? __kvmalloc_node_noprof+0x5ed/0x910 [ 107.063332][ T6961] ? __raw_spin_lock_init+0x45/0x100 [ 107.063357][ T6961] alloc_netdev_mqs+0x272/0x11b0 [ 107.063377][ T6961] ? __pfx_ip6gre_tap_setup+0x10/0x10 [ 107.063436][ T6961] rtnl_create_link+0x31f/0xd10 [ 107.063463][ T6961] rtnl_newlink_create+0x25c/0xb00 [ 107.063486][ T6961] ? __lock_acquire+0xab9/0xd20 [ 107.063507][ T6961] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 107.063529][ T6961] ? __pfx___mutex_lock+0x10/0x10 [ 107.063572][ T6961] ? ns_capable+0x8a/0xf0 [ 107.063595][ T6961] rtnl_newlink+0x16e4/0x1c80 [ 107.063621][ T6961] ? netlink_deliver_tap+0x19c/0x1b0 [ 107.063650][ T6961] ? __pfx_rtnl_newlink+0x10/0x10 [ 107.063701][ T6961] ? kasan_quarantine_put+0xdd/0x220 [ 107.063724][ T6961] ? lockdep_hardirqs_on+0x9c/0x150 [ 107.063754][ T6961] ? nlmon_xmit+0xb0/0x100 [ 107.063772][ T6961] ? kmem_cache_free+0x19b/0x690 [ 107.063805][ T6961] ? __local_bh_enable_ip+0x12d/0x1c0 [ 107.063824][ T6961] ? lockdep_hardirqs_on+0x9c/0x150 [ 107.063847][ T6961] ? __local_bh_enable_ip+0x12d/0x1c0 [ 107.063866][ T6961] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 107.063888][ T6961] ? __dev_queue_xmit+0x27b/0x3b50 [ 107.063908][ T6961] ? __dev_queue_xmit+0x27b/0x3b50 [ 107.063925][ T6961] ? __dev_queue_xmit+0x27b/0x3b50 [ 107.063946][ T6961] ? __dev_queue_xmit+0x1d79/0x3b50 [ 107.063963][ T6961] ? kasan_save_track+0x3e/0x80 [ 107.063984][ T6961] ? __kasan_slab_alloc+0x6c/0x80 [ 107.064010][ T6961] ? __lock_acquire+0xab9/0xd20 [ 107.064054][ T6961] ? __pfx_rtnl_newlink+0x10/0x10 [ 107.064077][ T6961] rtnetlink_rcv_msg+0x7cf/0xb70 [ 107.064105][ T6961] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 107.064128][ T6961] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 107.064149][ T6961] ? ref_tracker_free+0x63a/0x7d0 [ 107.064166][ T6961] ? __asan_memcpy+0x40/0x70 [ 107.064186][ T6961] ? __pfx_ref_tracker_free+0x10/0x10 [ 107.064200][ T6961] ? __skb_clone+0x63/0x7a0 [ 107.064229][ T6961] netlink_rcv_skb+0x208/0x470 [ 107.064253][ T6961] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 107.064278][ T6961] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 107.064308][ T6961] ? netlink_deliver_tap+0x2e/0x1b0 [ 107.064334][ T6961] netlink_unicast+0x82f/0x9e0 [ 107.064366][ T6961] ? __pfx_netlink_unicast+0x10/0x10 [ 107.064392][ T6961] ? netlink_sendmsg+0x642/0xb30 [ 107.064406][ T6961] ? skb_put+0x11b/0x210 [ 107.064427][ T6961] netlink_sendmsg+0x805/0xb30 [ 107.064454][ T6961] ? __pfx_netlink_sendmsg+0x10/0x10 [ 107.064475][ T6961] ? aa_sock_msg_perm+0xf1/0x1d0 [ 107.064502][ T6961] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 107.064519][ T6961] ? __pfx_netlink_sendmsg+0x10/0x10 [ 107.064538][ T6961] __sock_sendmsg+0x21c/0x270 [ 107.064563][ T6961] ____sys_sendmsg+0x505/0x830 [ 107.064588][ T6961] ? __pfx_____sys_sendmsg+0x10/0x10 [ 107.064616][ T6961] ? import_iovec+0x74/0xa0 [ 107.064641][ T6961] ___sys_sendmsg+0x21f/0x2a0 [ 107.064663][ T6961] ? __pfx____sys_sendmsg+0x10/0x10 [ 107.064720][ T6961] ? __fget_files+0x2a/0x420 [ 107.064736][ T6961] ? __fget_files+0x3a0/0x420 [ 107.064764][ T6961] __x64_sys_sendmsg+0x19b/0x260 [ 107.064786][ T6961] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 107.064815][ T6961] ? __pfx_ksys_write+0x10/0x10 [ 107.064842][ T6961] ? do_syscall_64+0xbe/0xfa0 [ 107.064869][ T6961] do_syscall_64+0xfa/0xfa0 [ 107.064890][ T6961] ? lockdep_hardirqs_on+0x9c/0x150 [ 107.064912][ T6961] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.064929][ T6961] ? clear_bhb_loop+0x60/0xb0 [ 107.064950][ T6961] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.064967][ T6961] RIP: 0033:0x7fdfb198f6c9 [ 107.064983][ T6961] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.064997][ T6961] RSP: 002b:00007fdfb2849038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 107.065016][ T6961] RAX: ffffffffffffffda RBX: 00007fdfb1be5fa0 RCX: 00007fdfb198f6c9 [ 107.065028][ T6961] RDX: 0000000020040000 RSI: 0000200000000000 RDI: 0000000000000004 [ 107.065039][ T6961] RBP: 00007fdfb2849090 R08: 0000000000000000 R09: 0000000000000000 [ 107.065050][ T6961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 107.065060][ T6961] R13: 00007fdfb1be6038 R14: 00007fdfb1be5fa0 R15: 00007ffd9fc65a88 [ 107.065092][ T6961] [ 107.681497][ T6961] team0: Port device ip6gretap1 added [ 107.902801][ T6981] netlink: 4 bytes leftover after parsing attributes in process `syz.0.384'. [ 107.944124][ T6987] sctp: [Deprecated]: syz.3.383 (pid 6987) Use of struct sctp_assoc_value in delayed_ack socket option. [ 107.944124][ T6987] Use struct sctp_sack_info instead [ 108.032970][ T6990] netlink: 28 bytes leftover after parsing attributes in process `syz.2.389'. [ 108.178255][ T7003] FAULT_INJECTION: forcing a failure. [ 108.178255][ T7003] name failslab, interval 1, probability 0, space 0, times 0 [ 108.192706][ T7003] CPU: 0 UID: 0 PID: 7003 Comm: syz.0.395 Not tainted syzkaller #0 PREEMPT(full) [ 108.192730][ T7003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 108.192740][ T7003] Call Trace: [ 108.192747][ T7003] [ 108.192754][ T7003] dump_stack_lvl+0x189/0x250 [ 108.192781][ T7003] ? __pfx____ratelimit+0x10/0x10 [ 108.192803][ T7003] ? __pfx_dump_stack_lvl+0x10/0x10 [ 108.192825][ T7003] ? __pfx__printk+0x10/0x10 [ 108.192850][ T7003] ? __pfx___might_resched+0x10/0x10 [ 108.192873][ T7003] should_fail_ex+0x414/0x560 [ 108.192903][ T7003] should_failslab+0xa8/0x100 [ 108.192923][ T7003] kmem_cache_alloc_node_noprof+0x77/0x710 [ 108.192947][ T7003] ? __alloc_skb+0x112/0x2d0 [ 108.192969][ T7003] __alloc_skb+0x112/0x2d0 [ 108.192989][ T7003] netlink_ack+0x146/0xa50 [ 108.193017][ T7003] ? __pfx_genl_rcv_msg+0x10/0x10 [ 108.193036][ T7003] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 108.193055][ T7003] ? __pfx_nl80211_post_doit+0x10/0x10 [ 108.193076][ T7003] ? __asan_memcpy+0x40/0x70 [ 108.193097][ T7003] ? __pfx_ref_tracker_free+0x10/0x10 [ 108.193122][ T7003] netlink_rcv_skb+0x28c/0x470 [ 108.193137][ T7003] ? __lock_acquire+0xab9/0xd20 [ 108.193154][ T7003] ? __pfx_genl_rcv_msg+0x10/0x10 [ 108.193176][ T7003] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 108.193213][ T7003] ? down_read+0x1ad/0x2e0 [ 108.193233][ T7003] genl_rcv+0x28/0x40 [ 108.193251][ T7003] netlink_unicast+0x82f/0x9e0 [ 108.193283][ T7003] ? __pfx_netlink_unicast+0x10/0x10 [ 108.193308][ T7003] ? netlink_sendmsg+0x642/0xb30 [ 108.193322][ T7003] ? skb_put+0x11b/0x210 [ 108.193342][ T7003] netlink_sendmsg+0x805/0xb30 [ 108.193369][ T7003] ? __pfx_netlink_sendmsg+0x10/0x10 [ 108.193391][ T7003] ? aa_sock_msg_perm+0xf1/0x1d0 [ 108.193420][ T7003] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 108.193436][ T7003] ? __pfx_netlink_sendmsg+0x10/0x10 [ 108.193452][ T7003] __sock_sendmsg+0x21c/0x270 [ 108.193476][ T7003] ____sys_sendmsg+0x505/0x830 [ 108.193499][ T7003] ? __pfx_____sys_sendmsg+0x10/0x10 [ 108.193527][ T7003] ? import_iovec+0x74/0xa0 [ 108.193551][ T7003] ___sys_sendmsg+0x21f/0x2a0 [ 108.193572][ T7003] ? __pfx____sys_sendmsg+0x10/0x10 [ 108.193618][ T7003] ? __fget_files+0x2a/0x420 [ 108.193631][ T7003] ? __fget_files+0x3a0/0x420 [ 108.193654][ T7003] __x64_sys_sendmsg+0x19b/0x260 [ 108.193675][ T7003] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 108.193699][ T7003] ? __pfx_ksys_write+0x10/0x10 [ 108.193726][ T7003] ? do_syscall_64+0xbe/0xfa0 [ 108.193751][ T7003] do_syscall_64+0xfa/0xfa0 [ 108.193770][ T7003] ? lockdep_hardirqs_on+0x9c/0x150 [ 108.193789][ T7003] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.193805][ T7003] ? clear_bhb_loop+0x60/0xb0 [ 108.193825][ T7003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.193840][ T7003] RIP: 0033:0x7faddbf8f6c9 [ 108.193855][ T7003] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 108.193869][ T7003] RSP: 002b:00007faddce82038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 108.193886][ T7003] RAX: ffffffffffffffda RBX: 00007faddc1e5fa0 RCX: 00007faddbf8f6c9 [ 108.193898][ T7003] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 108.193908][ T7003] RBP: 00007faddce82090 R08: 0000000000000000 R09: 0000000000000000 [ 108.193917][ T7003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 108.193926][ T7003] R13: 00007faddc1e6038 R14: 00007faddc1e5fa0 R15: 00007ffcc734a2e8 [ 108.193955][ T7003] [ 108.196693][ T7001] mac80211_hwsim hwsim7 syzkaller0: Caught tx_queue_len zero misconfig [ 108.393108][ T7015] FAULT_INJECTION: forcing a failure. [ 108.393108][ T7015] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 108.620894][ T7015] CPU: 1 UID: 0 PID: 7015 Comm: syz.2.399 Not tainted syzkaller #0 PREEMPT(full) [ 108.620918][ T7015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 108.620928][ T7015] Call Trace: [ 108.620935][ T7015] [ 108.620942][ T7015] dump_stack_lvl+0x189/0x250 [ 108.620968][ T7015] ? __pfx____ratelimit+0x10/0x10 [ 108.620990][ T7015] ? __pfx_dump_stack_lvl+0x10/0x10 [ 108.621010][ T7015] ? __pfx__printk+0x10/0x10 [ 108.621027][ T7015] ? __might_fault+0xb0/0x130 [ 108.621060][ T7015] should_fail_ex+0x414/0x560 [ 108.621085][ T7015] _copy_from_iter+0x1de/0x1790 [ 108.621111][ T7015] ? _copy_from_iter+0x24f/0x1790 [ 108.621133][ T7015] ? __pfx__copy_from_iter+0x10/0x10 [ 108.621149][ T7015] ? sock_alloc_send_pskb+0x86b/0x980 [ 108.621174][ T7015] ? __pfx__copy_from_iter+0x10/0x10 [ 108.621195][ T7015] ? page_copy_sane+0x16a/0x280 [ 108.621215][ T7015] copy_page_from_iter+0xdd/0x170 [ 108.621239][ T7015] skb_copy_datagram_from_iter+0x306/0x720 [ 108.621270][ T7015] packet_sendmsg+0x3797/0x5080 [ 108.621302][ T7015] ? aa_new_mount+0x330/0x810 [ 108.621341][ T7015] ? __pfx___might_resched+0x10/0x10 [ 108.621375][ T7015] ? __pfx_packet_sendmsg+0x10/0x10 [ 108.621396][ T7015] ? aa_sk_perm+0x81e/0x950 [ 108.621422][ T7015] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 108.621451][ T7015] ? __lock_acquire+0xab9/0xd20 [ 108.621466][ T7015] ? aa_sock_msg_perm+0xf1/0x1d0 [ 108.621490][ T7015] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 108.621507][ T7015] ? __pfx_packet_sendmsg+0x10/0x10 [ 108.621531][ T7015] __sock_sendmsg+0x21c/0x270 [ 108.621556][ T7015] ____sys_sendmsg+0x505/0x830 [ 108.621578][ T7015] ? __pfx_____sys_sendmsg+0x10/0x10 [ 108.621605][ T7015] ? import_iovec+0x74/0xa0 [ 108.621628][ T7015] ___sys_sendmsg+0x21f/0x2a0 [ 108.621646][ T7015] ? __pfx____sys_sendmsg+0x10/0x10 [ 108.621696][ T7015] ? __fget_files+0x2a/0x420 [ 108.621712][ T7015] ? __fget_files+0x3a0/0x420 [ 108.621738][ T7015] __x64_sys_sendmsg+0x19b/0x260 [ 108.621758][ T7015] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 108.621786][ T7015] ? __pfx_ksys_write+0x10/0x10 [ 108.621812][ T7015] ? do_syscall_64+0xbe/0xfa0 [ 108.621838][ T7015] do_syscall_64+0xfa/0xfa0 [ 108.621881][ T7015] ? lockdep_hardirqs_on+0x9c/0x150 [ 108.621904][ T7015] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.621920][ T7015] ? clear_bhb_loop+0x60/0xb0 [ 108.621940][ T7015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.621955][ T7015] RIP: 0033:0x7fdfb198f6c9 [ 108.621970][ T7015] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 108.621983][ T7015] RSP: 002b:00007fdfb2849038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 108.622001][ T7015] RAX: ffffffffffffffda RBX: 00007fdfb1be5fa0 RCX: 00007fdfb198f6c9 [ 108.622013][ T7015] RDX: 0000000000000004 RSI: 00002000000000c0 RDI: 0000000000000003 [ 108.622024][ T7015] RBP: 00007fdfb2849090 R08: 0000000000000000 R09: 0000000000000000 [ 108.622034][ T7015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 108.622044][ T7015] R13: 00007fdfb1be6038 R14: 00007fdfb1be5fa0 R15: 00007ffd9fc65a88 [ 108.622074][ T7015] [ 109.040187][ T7029] ipvlan2: entered promiscuous mode [ 109.218314][ T7046] FAULT_INJECTION: forcing a failure. [ 109.218314][ T7046] name failslab, interval 1, probability 0, space 0, times 0 [ 109.231128][ T7046] CPU: 1 UID: 0 PID: 7046 Comm: syz.2.409 Not tainted syzkaller #0 PREEMPT(full) [ 109.231151][ T7046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 109.231161][ T7046] Call Trace: [ 109.231169][ T7046] [ 109.231177][ T7046] dump_stack_lvl+0x189/0x250 [ 109.231203][ T7046] ? __pfx____ratelimit+0x10/0x10 [ 109.231225][ T7046] ? __pfx_dump_stack_lvl+0x10/0x10 [ 109.231247][ T7046] ? __pfx__printk+0x10/0x10 [ 109.231270][ T7046] ? __pfx___might_resched+0x10/0x10 [ 109.231294][ T7046] should_fail_ex+0x414/0x560 [ 109.231323][ T7046] should_failslab+0xa8/0x100 [ 109.231341][ T7046] __kmalloc_noprof+0xcb/0x7f0 [ 109.231363][ T7046] ? __register_sysctl_table+0x72/0x1340 [ 109.231391][ T7046] __register_sysctl_table+0x72/0x1340 [ 109.231414][ T7046] ? kmemdup_noprof+0x55/0x70 [ 109.231433][ T7046] ? __asan_memcpy+0x40/0x70 [ 109.231458][ T7046] register_pidns_sysctls+0x137/0x1f0 [ 109.231486][ T7046] copy_pid_ns+0x57f/0x960 [ 109.231511][ T7046] ? __pfx_copy_pid_ns+0x10/0x10 [ 109.231528][ T7046] ? __ns_tree_add_raw+0x400/0x4c0 [ 109.231548][ T7046] ? copy_utsname+0x2c7/0x3c0 [ 109.231584][ T7046] create_new_namespaces+0x2b8/0x720 [ 109.231607][ T7046] ? security_capable+0x7e/0x2e0 [ 109.231636][ T7046] unshare_nsproxy_namespaces+0x11c/0x170 [ 109.231658][ T7046] ksys_unshare+0x4c8/0x8c0 [ 109.231684][ T7046] ? __pfx_ksys_unshare+0x10/0x10 [ 109.231702][ T7046] ? ksys_write+0x22a/0x250 [ 109.231727][ T7046] ? __pfx_ksys_write+0x10/0x10 [ 109.231757][ T7046] __x64_sys_unshare+0x38/0x50 [ 109.231777][ T7046] do_syscall_64+0xfa/0xfa0 [ 109.231798][ T7046] ? lockdep_hardirqs_on+0x9c/0x150 [ 109.231821][ T7046] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.231844][ T7046] ? clear_bhb_loop+0x60/0xb0 [ 109.231865][ T7046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.231881][ T7046] RIP: 0033:0x7fdfb198f6c9 [ 109.231896][ T7046] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 109.231910][ T7046] RSP: 002b:00007fdfb2849038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 109.231929][ T7046] RAX: ffffffffffffffda RBX: 00007fdfb1be5fa0 RCX: 00007fdfb198f6c9 [ 109.231941][ T7046] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000064000600 [ 109.231952][ T7046] RBP: 00007fdfb2849090 R08: 0000000000000000 R09: 0000000000000000 [ 109.231963][ T7046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 109.231973][ T7046] R13: 00007fdfb1be6038 R14: 00007fdfb1be5fa0 R15: 00007ffd9fc65a88 [ 109.232001][ T7046] [ 109.554042][ T7055] __nla_validate_parse: 6 callbacks suppressed [ 109.554057][ T7055] netlink: 28 bytes leftover after parsing attributes in process `syz.1.411'. [ 109.636578][ T7059] netlink: 28 bytes leftover after parsing attributes in process `syz.2.413'. [ 109.646093][ T7058] netlink: 8 bytes leftover after parsing attributes in process `syz.1.414'. [ 109.725508][ T7062] FAULT_INJECTION: forcing a failure. [ 109.725508][ T7062] name failslab, interval 1, probability 0, space 0, times 0 [ 109.738509][ T7062] CPU: 1 UID: 0 PID: 7062 Comm: syz.2.417 Not tainted syzkaller #0 PREEMPT(full) [ 109.738529][ T7062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 109.738538][ T7062] Call Trace: [ 109.738545][ T7062] [ 109.738552][ T7062] dump_stack_lvl+0x189/0x250 [ 109.738578][ T7062] ? __pfx____ratelimit+0x10/0x10 [ 109.738599][ T7062] ? __pfx_dump_stack_lvl+0x10/0x10 [ 109.738620][ T7062] ? __pfx__printk+0x10/0x10 [ 109.738639][ T7062] ? __pfx___might_resched+0x10/0x10 [ 109.738657][ T7062] ? fs_reclaim_acquire+0x7d/0x100 [ 109.738678][ T7062] should_fail_ex+0x414/0x560 [ 109.738707][ T7062] should_failslab+0xa8/0x100 [ 109.738725][ T7062] __kmalloc_cache_noprof+0x6f/0x6f0 [ 109.738748][ T7062] ? nf_tables_newchain+0xfe5/0x2750 [ 109.738774][ T7062] nf_tables_newchain+0xfe5/0x2750 [ 109.738852][ T7062] ? __pfx_nf_tables_newchain+0x10/0x10 [ 109.738906][ T7062] ? nfnl_pernet+0x23/0x240 [ 109.738939][ T7062] ? __nla_parse+0x40/0x60 [ 109.738961][ T7062] nfnetlink_rcv+0x11d9/0x2590 [ 109.739017][ T7062] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 109.739054][ T7062] ? ref_tracker_free+0x63a/0x7d0 [ 109.739098][ T7062] ? __netlink_deliver_tap+0x807/0x850 [ 109.739115][ T7062] ? netlink_deliver_tap+0x2e/0x1b0 [ 109.739148][ T7062] netlink_unicast+0x82f/0x9e0 [ 109.739180][ T7062] ? __pfx_netlink_unicast+0x10/0x10 [ 109.739204][ T7062] ? netlink_sendmsg+0x642/0xb30 [ 109.739218][ T7062] ? skb_put+0x11b/0x210 [ 109.739238][ T7062] netlink_sendmsg+0x805/0xb30 [ 109.739262][ T7062] ? __pfx_netlink_sendmsg+0x10/0x10 [ 109.739281][ T7062] ? aa_sock_msg_perm+0xf1/0x1d0 [ 109.739307][ T7062] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 109.739323][ T7062] ? __pfx_netlink_sendmsg+0x10/0x10 [ 109.739341][ T7062] __sock_sendmsg+0x21c/0x270 [ 109.739365][ T7062] ____sys_sendmsg+0x505/0x830 [ 109.739389][ T7062] ? __pfx_____sys_sendmsg+0x10/0x10 [ 109.739416][ T7062] ? import_iovec+0x74/0xa0 [ 109.739440][ T7062] ___sys_sendmsg+0x21f/0x2a0 [ 109.739460][ T7062] ? __pfx____sys_sendmsg+0x10/0x10 [ 109.739514][ T7062] ? __fget_files+0x2a/0x420 [ 109.739529][ T7062] ? __fget_files+0x3a0/0x420 [ 109.739556][ T7062] __x64_sys_sendmsg+0x19b/0x260 [ 109.739578][ T7062] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 109.739607][ T7062] ? __pfx_ksys_write+0x10/0x10 [ 109.739634][ T7062] ? do_syscall_64+0xbe/0xfa0 [ 109.739661][ T7062] do_syscall_64+0xfa/0xfa0 [ 109.739680][ T7062] ? lockdep_hardirqs_on+0x9c/0x150 [ 109.739702][ T7062] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.739719][ T7062] ? clear_bhb_loop+0x60/0xb0 [ 109.739739][ T7062] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.739755][ T7062] RIP: 0033:0x7fdfb198f6c9 [ 109.739771][ T7062] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 109.739790][ T7062] RSP: 002b:00007fdfb2849038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 109.739809][ T7062] RAX: ffffffffffffffda RBX: 00007fdfb1be5fa0 RCX: 00007fdfb198f6c9 [ 109.739822][ T7062] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 109.739833][ T7062] RBP: 00007fdfb2849090 R08: 0000000000000000 R09: 0000000000000000 [ 109.739844][ T7062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 109.739854][ T7062] R13: 00007fdfb1be6038 R14: 00007fdfb1be5fa0 R15: 00007ffd9fc65a88 [ 109.739884][ T7062] [ 109.742176][ T7063] IPv6: addrconf: prefix option has invalid lifetime [ 110.062431][ T7076] netlink: 8 bytes leftover after parsing attributes in process `syz.0.419'. [ 110.134500][ T7074] netlink: 14544 bytes leftover after parsing attributes in process `syz.2.418'. [ 110.144452][ T7077] netlink: 16 bytes leftover after parsing attributes in process `syz.0.419'. [ 110.153334][ T7077] FAULT_INJECTION: forcing a failure. [ 110.153334][ T7077] name failslab, interval 1, probability 0, space 0, times 0 [ 110.172347][ T7077] CPU: 1 UID: 0 PID: 7077 Comm: syz.0.419 Not tainted syzkaller #0 PREEMPT(full) [ 110.172371][ T7077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 110.172381][ T7077] Call Trace: [ 110.172388][ T7077] [ 110.172395][ T7077] dump_stack_lvl+0x189/0x250 [ 110.172420][ T7077] ? __pfx____ratelimit+0x10/0x10 [ 110.172442][ T7077] ? __pfx_dump_stack_lvl+0x10/0x10 [ 110.172464][ T7077] ? __pfx__printk+0x10/0x10 [ 110.172487][ T7077] ? __pfx___might_resched+0x10/0x10 [ 110.172511][ T7077] should_fail_ex+0x414/0x560 [ 110.172537][ T7077] should_failslab+0xa8/0x100 [ 110.172555][ T7077] kmem_cache_alloc_node_noprof+0x77/0x710 [ 110.172577][ T7077] ? __alloc_skb+0x112/0x2d0 [ 110.172594][ T7077] __alloc_skb+0x112/0x2d0 [ 110.172611][ T7077] netlink_ack+0x146/0xa50 [ 110.172631][ T7077] ? __pfx_genl_rcv_msg+0x10/0x10 [ 110.172654][ T7077] ? __asan_memcpy+0x40/0x70 [ 110.172673][ T7077] ? __pfx_ref_tracker_free+0x10/0x10 [ 110.172696][ T7077] netlink_rcv_skb+0x28c/0x470 [ 110.172711][ T7077] ? __lock_acquire+0xab9/0xd20 [ 110.172727][ T7077] ? __pfx_genl_rcv_msg+0x10/0x10 [ 110.172757][ T7077] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 110.172791][ T7077] ? down_read+0x1ad/0x2e0 [ 110.172810][ T7077] genl_rcv+0x28/0x40 [ 110.172828][ T7077] netlink_unicast+0x82f/0x9e0 [ 110.172856][ T7077] ? __pfx_netlink_unicast+0x10/0x10 [ 110.172879][ T7077] ? netlink_sendmsg+0x642/0xb30 [ 110.172893][ T7077] ? skb_put+0x11b/0x210 [ 110.172912][ T7077] netlink_sendmsg+0x805/0xb30 [ 110.172938][ T7077] ? __pfx_netlink_sendmsg+0x10/0x10 [ 110.172957][ T7077] ? aa_sock_msg_perm+0xf1/0x1d0 [ 110.172980][ T7077] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 110.172995][ T7077] ? __pfx_netlink_sendmsg+0x10/0x10 [ 110.173012][ T7077] __sock_sendmsg+0x21c/0x270 [ 110.173037][ T7077] ____sys_sendmsg+0x505/0x830 [ 110.173060][ T7077] ? __pfx_____sys_sendmsg+0x10/0x10 [ 110.173091][ T7077] ? import_iovec+0x74/0xa0 [ 110.173115][ T7077] ___sys_sendmsg+0x21f/0x2a0 [ 110.173135][ T7077] ? __pfx____sys_sendmsg+0x10/0x10 [ 110.173190][ T7077] ? __fget_files+0x2a/0x420 [ 110.173205][ T7077] ? __fget_files+0x3a0/0x420 [ 110.173230][ T7077] __x64_sys_sendmsg+0x19b/0x260 [ 110.173249][ T7077] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 110.173275][ T7077] ? __pfx_ksys_write+0x10/0x10 [ 110.173300][ T7077] ? do_syscall_64+0xbe/0xfa0 [ 110.173326][ T7077] do_syscall_64+0xfa/0xfa0 [ 110.173345][ T7077] ? lockdep_hardirqs_on+0x9c/0x150 [ 110.173367][ T7077] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.173382][ T7077] ? clear_bhb_loop+0x60/0xb0 [ 110.173402][ T7077] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.173418][ T7077] RIP: 0033:0x7faddbf8f6c9 [ 110.173432][ T7077] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 110.173446][ T7077] RSP: 002b:00007faddce61038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 110.173464][ T7077] RAX: ffffffffffffffda RBX: 00007faddc1e6090 RCX: 00007faddbf8f6c9 [ 110.173476][ T7077] RDX: 0000000000000004 RSI: 00002000000003c0 RDI: 0000000000000003 [ 110.173485][ T7077] RBP: 00007faddce61090 R08: 0000000000000000 R09: 0000000000000000 [ 110.173496][ T7077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 110.173506][ T7077] R13: 00007faddc1e6128 R14: 00007faddc1e6090 R15: 00007ffcc734a2e8 [ 110.173536][ T7077] [ 110.711950][ T7094] IPv6: addrconf: prefix option has invalid lifetime [ 110.726711][ T7096] netlink: 28 bytes leftover after parsing attributes in process `syz.0.428'. [ 110.789289][ T7098] netlink: 12 bytes leftover after parsing attributes in process `syz.2.430'. [ 110.957967][ T7111] netlink: 28 bytes leftover after parsing attributes in process `syz.0.434'. [ 110.974523][ T7111] FAULT_INJECTION: forcing a failure. [ 110.974523][ T7111] name failslab, interval 1, probability 0, space 0, times 0 [ 110.987342][ T7111] CPU: 1 UID: 0 PID: 7111 Comm: syz.0.434 Not tainted syzkaller #0 PREEMPT(full) [ 110.987364][ T7111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 110.987375][ T7111] Call Trace: [ 110.987382][ T7111] [ 110.987390][ T7111] dump_stack_lvl+0x189/0x250 [ 110.987416][ T7111] ? __pfx____ratelimit+0x10/0x10 [ 110.987438][ T7111] ? __pfx_dump_stack_lvl+0x10/0x10 [ 110.987460][ T7111] ? __pfx__printk+0x10/0x10 [ 110.987484][ T7111] ? __pfx___might_resched+0x10/0x10 [ 110.987507][ T7111] should_fail_ex+0x414/0x560 [ 110.987536][ T7111] should_failslab+0xa8/0x100 [ 110.987555][ T7111] kmem_cache_alloc_node_noprof+0x77/0x710 [ 110.987577][ T7111] ? __alloc_skb+0x112/0x2d0 [ 110.987599][ T7111] __alloc_skb+0x112/0x2d0 [ 110.987618][ T7111] netlink_ack+0x146/0xa50 [ 110.987639][ T7111] ? __pfx_genl_rcv_msg+0x10/0x10 [ 110.987657][ T7111] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 110.987685][ T7111] ? __pfx_nl80211_post_doit+0x10/0x10 [ 110.987704][ T7111] ? __asan_memcpy+0x40/0x70 [ 110.987726][ T7111] ? __pfx_ref_tracker_free+0x10/0x10 [ 110.987751][ T7111] netlink_rcv_skb+0x28c/0x470 [ 110.987765][ T7111] ? __lock_acquire+0xab9/0xd20 [ 110.987783][ T7111] ? __pfx_genl_rcv_msg+0x10/0x10 [ 110.987804][ T7111] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 110.987840][ T7111] ? down_read+0x1ad/0x2e0 [ 110.987860][ T7111] genl_rcv+0x28/0x40 [ 110.987877][ T7111] netlink_unicast+0x82f/0x9e0 [ 110.987907][ T7111] ? __pfx_netlink_unicast+0x10/0x10 [ 110.987931][ T7111] ? netlink_sendmsg+0x642/0xb30 [ 110.987946][ T7111] ? skb_put+0x11b/0x210 [ 110.987967][ T7111] netlink_sendmsg+0x805/0xb30 [ 110.987994][ T7111] ? __pfx_netlink_sendmsg+0x10/0x10 [ 110.988014][ T7111] ? aa_sock_msg_perm+0xf1/0x1d0 [ 110.988040][ T7111] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 110.988057][ T7111] ? __pfx_netlink_sendmsg+0x10/0x10 [ 110.988075][ T7111] __sock_sendmsg+0x21c/0x270 [ 110.988099][ T7111] ____sys_sendmsg+0x505/0x830 [ 110.988123][ T7111] ? __pfx_____sys_sendmsg+0x10/0x10 [ 110.988149][ T7111] ? import_iovec+0x74/0xa0 [ 110.988174][ T7111] ___sys_sendmsg+0x21f/0x2a0 [ 110.988195][ T7111] ? __pfx____sys_sendmsg+0x10/0x10 [ 110.988251][ T7111] ? __fget_files+0x2a/0x420 [ 110.988267][ T7111] ? __fget_files+0x3a0/0x420 [ 110.988294][ T7111] __x64_sys_sendmsg+0x19b/0x260 [ 110.988316][ T7111] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 110.988344][ T7111] ? __pfx_ksys_write+0x10/0x10 [ 110.988375][ T7111] ? do_syscall_64+0xbe/0xfa0 [ 110.988402][ T7111] do_syscall_64+0xfa/0xfa0 [ 110.988425][ T7111] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.988442][ T7111] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 110.988458][ T7111] ? clear_bhb_loop+0x60/0xb0 [ 110.988480][ T7111] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.988496][ T7111] RIP: 0033:0x7faddbf8f6c9 [ 110.988512][ T7111] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 110.988526][ T7111] RSP: 002b:00007faddce82038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 110.988545][ T7111] RAX: ffffffffffffffda RBX: 00007faddc1e5fa0 RCX: 00007faddbf8f6c9 [ 110.988558][ T7111] RDX: 0000000004000004 RSI: 0000200000000380 RDI: 0000000000000004 [ 110.988570][ T7111] RBP: 00007faddce82090 R08: 0000000000000000 R09: 0000000000000000 [ 110.988581][ T7111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 110.988591][ T7111] R13: 00007faddc1e6038 R14: 00007faddc1e5fa0 R15: 00007ffcc734a2e8 [ 110.988622][ T7111] [ 111.505479][ T7117] netlink: 4 bytes leftover after parsing attributes in process `syz.0.438'. [ 111.978805][ T7159] netlink: 'syz.3.453': attribute type 1 has an invalid length. [ 112.044335][ T7161] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 112.051810][ T7161] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 112.263712][ T7175] netlink: 'syz.3.460': attribute type 1 has an invalid length. [ 112.446858][ T7185] netlink: 'syz.1.465': attribute type 22 has an invalid length. [ 112.522509][ T7188] team0: Port device ip6gretap1 added [ 112.654106][ T7147] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 112.700122][ T7203] Bluetooth: MGMT ver 1.23 [ 112.751022][ T7207] netlink: 'syz.0.475': attribute type 12 has an invalid length. [ 113.155714][ T7239] FAULT_INJECTION: forcing a failure. [ 113.155714][ T7239] name failslab, interval 1, probability 0, space 0, times 0 [ 113.186142][ T7239] CPU: 1 UID: 0 PID: 7239 Comm: syz.2.487 Not tainted syzkaller #0 PREEMPT(full) [ 113.186167][ T7239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 113.186177][ T7239] Call Trace: [ 113.186184][ T7239] [ 113.186192][ T7239] dump_stack_lvl+0x189/0x250 [ 113.186218][ T7239] ? __pfx____ratelimit+0x10/0x10 [ 113.186241][ T7239] ? __pfx_dump_stack_lvl+0x10/0x10 [ 113.186262][ T7239] ? __pfx__printk+0x10/0x10 [ 113.186276][ T7239] ? netlink_sendmsg+0x805/0xb30 [ 113.186294][ T7239] ? __x64_sys_sendmsg+0x19b/0x260 [ 113.186311][ T7239] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.186338][ T7239] should_fail_ex+0x414/0x560 [ 113.186368][ T7239] should_failslab+0xa8/0x100 [ 113.186388][ T7239] kmem_cache_alloc_noprof+0x74/0x6e0 [ 113.186411][ T7239] ? skb_clone+0x212/0x3a0 [ 113.186436][ T7239] skb_clone+0x212/0x3a0 [ 113.186458][ T7239] __netlink_deliver_tap+0x404/0x850 [ 113.186486][ T7239] ? netlink_deliver_tap+0x2e/0x1b0 [ 113.186500][ T7239] netlink_deliver_tap+0x19c/0x1b0 [ 113.186516][ T7239] netlink_sendskb+0x68/0x140 [ 113.186542][ T7239] netlink_unicast+0x397/0x9e0 [ 113.186561][ T7239] ? __asan_memcpy+0x40/0x70 [ 113.186592][ T7239] ? __pfx_netlink_unicast+0x10/0x10 [ 113.186625][ T7239] netlink_rcv_skb+0x28c/0x470 [ 113.186639][ T7239] ? __lock_acquire+0xab9/0xd20 [ 113.186657][ T7239] ? __pfx_genl_rcv_msg+0x10/0x10 [ 113.186680][ T7239] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 113.186717][ T7239] ? down_read+0x1ad/0x2e0 [ 113.186743][ T7239] genl_rcv+0x28/0x40 [ 113.186761][ T7239] netlink_unicast+0x82f/0x9e0 [ 113.186791][ T7239] ? __pfx_netlink_unicast+0x10/0x10 [ 113.186816][ T7239] ? netlink_sendmsg+0x642/0xb30 [ 113.186831][ T7239] ? skb_put+0x11b/0x210 [ 113.186852][ T7239] netlink_sendmsg+0x805/0xb30 [ 113.186879][ T7239] ? __pfx_netlink_sendmsg+0x10/0x10 [ 113.186899][ T7239] ? aa_sock_msg_perm+0xf1/0x1d0 [ 113.186925][ T7239] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 113.186943][ T7239] ? __pfx_netlink_sendmsg+0x10/0x10 [ 113.186961][ T7239] __sock_sendmsg+0x21c/0x270 [ 113.186986][ T7239] ____sys_sendmsg+0x505/0x830 [ 113.187011][ T7239] ? __pfx_____sys_sendmsg+0x10/0x10 [ 113.187040][ T7239] ? import_iovec+0x74/0xa0 [ 113.187065][ T7239] ___sys_sendmsg+0x21f/0x2a0 [ 113.187086][ T7239] ? __pfx____sys_sendmsg+0x10/0x10 [ 113.187143][ T7239] ? __fget_files+0x2a/0x420 [ 113.187158][ T7239] ? __fget_files+0x3a0/0x420 [ 113.187186][ T7239] __x64_sys_sendmsg+0x19b/0x260 [ 113.187207][ T7239] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 113.187236][ T7239] ? __pfx_ksys_write+0x10/0x10 [ 113.187263][ T7239] ? do_syscall_64+0xbe/0xfa0 [ 113.187290][ T7239] do_syscall_64+0xfa/0xfa0 [ 113.187310][ T7239] ? lockdep_hardirqs_on+0x9c/0x150 [ 113.187332][ T7239] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.187348][ T7239] ? clear_bhb_loop+0x60/0xb0 [ 113.187369][ T7239] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.187385][ T7239] RIP: 0033:0x7fdfb198f6c9 [ 113.187400][ T7239] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 113.187414][ T7239] RSP: 002b:00007fdfb2849038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 113.187433][ T7239] RAX: ffffffffffffffda RBX: 00007fdfb1be5fa0 RCX: 00007fdfb198f6c9 [ 113.187446][ T7239] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 113.187456][ T7239] RBP: 00007fdfb2849090 R08: 0000000000000000 R09: 0000000000000000 [ 113.187467][ T7239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 113.187478][ T7239] R13: 00007fdfb1be6038 R14: 00007fdfb1be5fa0 R15: 00007ffd9fc65a88 [ 113.187509][ T7239] [ 113.465234][ C0] wlan0: beacon TX faster than countdown (channel/color switch) completion [ 113.562205][ T7244] netlink: 'syz.4.488': attribute type 5 has an invalid length. [ 113.627587][ T7247] netlink: 'syz.2.490': attribute type 32 has an invalid length. [ 113.814750][ T7260] FAULT_INJECTION: forcing a failure. [ 113.814750][ T7260] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 113.818217][ T7261] netlink: 'syz.3.492': attribute type 1 has an invalid length. [ 113.843508][ T5838] Bluetooth: hci0: command 0x0401 tx timeout [ 113.882048][ T7260] CPU: 1 UID: 0 PID: 7260 Comm: syz.4.493 Not tainted syzkaller #0 PREEMPT(full) [ 113.882071][ T7260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 113.882081][ T7260] Call Trace: [ 113.882087][ T7260] [ 113.882094][ T7260] dump_stack_lvl+0x189/0x250 [ 113.882122][ T7260] ? __pfx____ratelimit+0x10/0x10 [ 113.882144][ T7260] ? __pfx_dump_stack_lvl+0x10/0x10 [ 113.882163][ T7260] ? __pfx__printk+0x10/0x10 [ 113.882179][ T7260] ? __might_fault+0xb0/0x130 [ 113.882212][ T7260] should_fail_ex+0x414/0x560 [ 113.882240][ T7260] _copy_from_iter+0x1de/0x1790 [ 113.882266][ T7260] ? _copy_from_iter+0x24f/0x1790 [ 113.882290][ T7260] ? __pfx__copy_from_iter+0x10/0x10 [ 113.882306][ T7260] ? sock_alloc_send_pskb+0x86b/0x980 [ 113.882332][ T7260] ? __pfx__copy_from_iter+0x10/0x10 [ 113.882353][ T7260] ? page_copy_sane+0x16a/0x280 [ 113.882373][ T7260] copy_page_from_iter+0xdd/0x170 [ 113.882397][ T7260] skb_copy_datagram_from_iter+0x306/0x720 [ 113.882436][ T7260] packet_sendmsg+0x3797/0x5080 [ 113.882467][ T7260] ? aa_new_mount+0x330/0x810 [ 113.882504][ T7260] ? __pfx___might_resched+0x10/0x10 [ 113.882533][ T7260] ? __pfx_packet_sendmsg+0x10/0x10 [ 113.882553][ T7260] ? aa_sk_perm+0x81e/0x950 [ 113.882578][ T7260] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 113.882604][ T7260] ? __lock_acquire+0xab9/0xd20 [ 113.882618][ T7260] ? aa_sock_msg_perm+0xf1/0x1d0 [ 113.882641][ T7260] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 113.882658][ T7260] ? __pfx_packet_sendmsg+0x10/0x10 [ 113.882679][ T7260] __sock_sendmsg+0x21c/0x270 [ 113.882700][ T7260] ____sys_sendmsg+0x505/0x830 [ 113.882720][ T7260] ? __pfx_____sys_sendmsg+0x10/0x10 [ 113.882743][ T7260] ? import_iovec+0x74/0xa0 [ 113.882767][ T7260] ___sys_sendmsg+0x21f/0x2a0 [ 113.882786][ T7260] ? __pfx____sys_sendmsg+0x10/0x10 [ 113.882836][ T7260] ? __fget_files+0x2a/0x420 [ 113.882850][ T7260] ? __fget_files+0x3a0/0x420 [ 113.882874][ T7260] __x64_sys_sendmsg+0x19b/0x260 [ 113.882902][ T7260] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 113.882928][ T7260] ? __pfx_ksys_write+0x10/0x10 [ 113.882954][ T7260] ? do_syscall_64+0xbe/0xfa0 [ 113.882979][ T7260] do_syscall_64+0xfa/0xfa0 [ 113.882999][ T7260] ? lockdep_hardirqs_on+0x9c/0x150 [ 113.883021][ T7260] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.883038][ T7260] ? clear_bhb_loop+0x60/0xb0 [ 113.883057][ T7260] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.883072][ T7260] RIP: 0033:0x7fba8d98f6c9 [ 113.883086][ T7260] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 113.883100][ T7260] RSP: 002b:00007fba8e755038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 113.883118][ T7260] RAX: ffffffffffffffda RBX: 00007fba8dbe5fa0 RCX: 00007fba8d98f6c9 [ 113.883130][ T7260] RDX: 0000000000000004 RSI: 00002000000000c0 RDI: 0000000000000003 [ 113.883138][ T7260] RBP: 00007fba8e755090 R08: 0000000000000000 R09: 0000000000000000 [ 113.883149][ T7260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 113.883158][ T7260] R13: 00007fba8dbe6038 R14: 00007fba8dbe5fa0 R15: 00007ffccd2b8498 [ 113.883187][ T7260] [ 114.458349][ T7278] syzkaller0: entered promiscuous mode [ 114.471948][ T7278] syzkaller0: entered allmulticast mode [ 114.662547][ T7295] FAULT_INJECTION: forcing a failure. [ 114.662547][ T7295] name failslab, interval 1, probability 0, space 0, times 0 [ 114.675844][ T7295] CPU: 1 UID: 0 PID: 7295 Comm: syz.3.508 Not tainted syzkaller #0 PREEMPT(full) [ 114.675867][ T7295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 114.675877][ T7295] Call Trace: [ 114.675884][ T7295] [ 114.675892][ T7295] dump_stack_lvl+0x189/0x250 [ 114.675917][ T7295] ? __pfx____ratelimit+0x10/0x10 [ 114.675940][ T7295] ? __pfx_dump_stack_lvl+0x10/0x10 [ 114.675961][ T7295] ? __pfx__printk+0x10/0x10 [ 114.675985][ T7295] ? __pfx___might_resched+0x10/0x10 [ 114.676003][ T7295] ? fs_reclaim_acquire+0x7d/0x100 [ 114.676024][ T7295] should_fail_ex+0x414/0x560 [ 114.676054][ T7295] should_failslab+0xa8/0x100 [ 114.676073][ T7295] __kmalloc_noprof+0xcb/0x7f0 [ 114.676094][ T7295] ? nla_strdup+0x9d/0x140 [ 114.676112][ T7295] ? __kmalloc_cache_noprof+0x3d5/0x6f0 [ 114.676138][ T7295] nla_strdup+0x9d/0x140 [ 114.676158][ T7295] nf_tables_newchain+0x1988/0x2750 [ 114.676194][ T7295] ? __pfx_nf_tables_newchain+0x10/0x10 [ 114.676249][ T7295] ? nfnl_pernet+0x23/0x240 [ 114.676281][ T7295] ? __nla_parse+0x40/0x60 [ 114.676303][ T7295] nfnetlink_rcv+0x11d9/0x2590 [ 114.676368][ T7295] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 114.676407][ T7295] ? ref_tracker_free+0x63a/0x7d0 [ 114.676453][ T7295] ? __netlink_deliver_tap+0x807/0x850 [ 114.676470][ T7295] ? netlink_deliver_tap+0x2e/0x1b0 [ 114.676505][ T7295] netlink_unicast+0x82f/0x9e0 [ 114.676537][ T7295] ? __pfx_netlink_unicast+0x10/0x10 [ 114.676562][ T7295] ? netlink_sendmsg+0x642/0xb30 [ 114.676577][ T7295] ? skb_put+0x11b/0x210 [ 114.676598][ T7295] netlink_sendmsg+0x805/0xb30 [ 114.676624][ T7295] ? __pfx_netlink_sendmsg+0x10/0x10 [ 114.676645][ T7295] ? aa_sock_msg_perm+0xf1/0x1d0 [ 114.676671][ T7295] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 114.676688][ T7295] ? __pfx_netlink_sendmsg+0x10/0x10 [ 114.676706][ T7295] __sock_sendmsg+0x21c/0x270 [ 114.676731][ T7295] ____sys_sendmsg+0x505/0x830 [ 114.676755][ T7295] ? __pfx_____sys_sendmsg+0x10/0x10 [ 114.676784][ T7295] ? import_iovec+0x74/0xa0 [ 114.676809][ T7295] ___sys_sendmsg+0x21f/0x2a0 [ 114.676830][ T7295] ? __pfx____sys_sendmsg+0x10/0x10 [ 114.676886][ T7295] ? __fget_files+0x2a/0x420 [ 114.676902][ T7295] ? __fget_files+0x3a0/0x420 [ 114.676929][ T7295] __x64_sys_sendmsg+0x19b/0x260 [ 114.676951][ T7295] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 114.676980][ T7295] ? __pfx_ksys_write+0x10/0x10 [ 114.677006][ T7295] ? do_syscall_64+0xbe/0xfa0 [ 114.677032][ T7295] do_syscall_64+0xfa/0xfa0 [ 114.677053][ T7295] ? lockdep_hardirqs_on+0x9c/0x150 [ 114.677075][ T7295] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.677092][ T7295] ? clear_bhb_loop+0x60/0xb0 [ 114.677113][ T7295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.677129][ T7295] RIP: 0033:0x7ff3b9b8f6c9 [ 114.677145][ T7295] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 114.677160][ T7295] RSP: 002b:00007ff3baaab038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 114.677179][ T7295] RAX: ffffffffffffffda RBX: 00007ff3b9de5fa0 RCX: 00007ff3b9b8f6c9 [ 114.677191][ T7295] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 114.677202][ T7295] RBP: 00007ff3baaab090 R08: 0000000000000000 R09: 0000000000000000 [ 114.677212][ T7295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 114.677223][ T7295] R13: 00007ff3b9de6038 R14: 00007ff3b9de5fa0 R15: 00007ffee45359f8 [ 114.677253][ T7295] [ 115.034715][ T7293] syzkaller0: entered promiscuous mode [ 115.040235][ T7293] syzkaller0: entered allmulticast mode [ 115.053844][ T7298] __nla_validate_parse: 17 callbacks suppressed [ 115.053860][ T7298] netlink: 28 bytes leftover after parsing attributes in process `syz.1.507'. [ 115.110198][ T7303] tipc: Enabling of bearer rejected, already enabled [ 115.121637][ T7303] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 115.192960][ T7309] IPv6: addrconf: prefix option has invalid lifetime [ 115.202642][ T7303] tipc: Resetting bearer [ 115.277534][ T7306] netlink: 28 bytes leftover after parsing attributes in process `syz.3.510'. [ 115.313063][ T7316] netlink: 28 bytes leftover after parsing attributes in process `syz.4.516'. [ 115.329680][ T7319] netlink: 8 bytes leftover after parsing attributes in process `syz.0.517'. [ 115.340188][ T7319] netlink: 16 bytes leftover after parsing attributes in process `syz.0.517'. [ 115.482076][ T7327] netlink: 28 bytes leftover after parsing attributes in process `syz.3.521'. [ 115.624013][ T7341] netlink: 'syz.1.526': attribute type 12 has an invalid length. [ 115.651892][ T7341] netlink: 24 bytes leftover after parsing attributes in process `syz.1.526'. [ 115.894890][ T7353] netlink: 'syz.3.531': attribute type 2 has an invalid length. [ 116.051681][ T7361] netlink: 28 bytes leftover after parsing attributes in process `syz.1.534'. [ 116.170841][ T7368] netlink: 2412 bytes leftover after parsing attributes in process `syz.0.537'. [ 116.240116][ T7374] x_tables: duplicate underflow at hook 1 [ 116.328018][ T7380] FAULT_INJECTION: forcing a failure. [ 116.328018][ T7380] name failslab, interval 1, probability 0, space 0, times 0 [ 116.377169][ T7380] CPU: 1 UID: 0 PID: 7380 Comm: syz.1.543 Not tainted syzkaller #0 PREEMPT(full) [ 116.377195][ T7380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 116.377205][ T7380] Call Trace: [ 116.377213][ T7380] [ 116.377220][ T7380] dump_stack_lvl+0x189/0x250 [ 116.377248][ T7380] ? __pfx____ratelimit+0x10/0x10 [ 116.377269][ T7380] ? __pfx_dump_stack_lvl+0x10/0x10 [ 116.377297][ T7380] ? __pfx__printk+0x10/0x10 [ 116.377321][ T7380] ? __pfx___might_resched+0x10/0x10 [ 116.377337][ T7380] ? fs_reclaim_acquire+0x7d/0x100 [ 116.377360][ T7380] should_fail_ex+0x414/0x560 [ 116.377390][ T7380] should_failslab+0xa8/0x100 [ 116.377410][ T7380] kmem_cache_alloc_node_noprof+0x77/0x710 [ 116.377436][ T7380] ? __alloc_skb+0x112/0x2d0 [ 116.377452][ T7380] ? __build_skb_around+0x262/0x3f0 [ 116.377480][ T7380] __alloc_skb+0x112/0x2d0 [ 116.377498][ T7380] skb_copy+0x188/0x800 [ 116.377520][ T7380] ? __pfx___netdev_alloc_skb+0x10/0x10 [ 116.377542][ T7380] ieee80211_attach_ack_skb+0x29/0x290 [ 116.377567][ T7380] ieee80211_mgmt_tx+0x1cab/0x22e0 [ 116.377597][ T7380] ? ieee80211_mgmt_tx+0xa20/0x22e0 [ 116.377633][ T7380] cfg80211_mlme_mgmt_tx+0x7bc/0x1420 [ 116.377668][ T7380] nl80211_tx_mgmt+0xa64/0xdf0 [ 116.377698][ T7380] ? __pfx_nl80211_tx_mgmt+0x10/0x10 [ 116.377722][ T7380] ? __pfx___mutex_lock+0x10/0x10 [ 116.377767][ T7380] ? nl80211_pre_doit+0x4f1/0x930 [ 116.377792][ T7380] genl_family_rcv_msg_doit+0x215/0x300 [ 116.377821][ T7380] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 116.377855][ T7380] ? bpf_lsm_capable+0x9/0x20 [ 116.377874][ T7380] ? security_capable+0x7e/0x2e0 [ 116.377903][ T7380] genl_rcv_msg+0x60e/0x790 [ 116.377931][ T7380] ? __pfx_genl_rcv_msg+0x10/0x10 [ 116.377949][ T7380] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 116.377967][ T7380] ? __pfx_nl80211_tx_mgmt+0x10/0x10 [ 116.377988][ T7380] ? __pfx_nl80211_post_doit+0x10/0x10 [ 116.378008][ T7380] ? __asan_memcpy+0x40/0x70 [ 116.378027][ T7380] ? __pfx_ref_tracker_free+0x10/0x10 [ 116.378050][ T7380] netlink_rcv_skb+0x208/0x470 [ 116.378064][ T7380] ? __lock_acquire+0xab9/0xd20 [ 116.378080][ T7380] ? __pfx_genl_rcv_msg+0x10/0x10 [ 116.378099][ T7380] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 116.378132][ T7380] ? down_read+0x1ad/0x2e0 [ 116.378149][ T7380] genl_rcv+0x28/0x40 [ 116.378167][ T7380] netlink_unicast+0x82f/0x9e0 [ 116.378196][ T7380] ? __pfx_netlink_unicast+0x10/0x10 [ 116.378220][ T7380] ? netlink_sendmsg+0x642/0xb30 [ 116.378234][ T7380] ? skb_put+0x11b/0x210 [ 116.378255][ T7380] netlink_sendmsg+0x805/0xb30 [ 116.378288][ T7380] ? __pfx_netlink_sendmsg+0x10/0x10 [ 116.378308][ T7380] ? aa_sock_msg_perm+0xf1/0x1d0 [ 116.378333][ T7380] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 116.378349][ T7380] ? __pfx_netlink_sendmsg+0x10/0x10 [ 116.378367][ T7380] __sock_sendmsg+0x21c/0x270 [ 116.378392][ T7380] ____sys_sendmsg+0x505/0x830 [ 116.378415][ T7380] ? __pfx_____sys_sendmsg+0x10/0x10 [ 116.378443][ T7380] ? import_iovec+0x74/0xa0 [ 116.378467][ T7380] ___sys_sendmsg+0x21f/0x2a0 [ 116.378488][ T7380] ? __pfx____sys_sendmsg+0x10/0x10 [ 116.378545][ T7380] ? __fget_files+0x2a/0x420 [ 116.378560][ T7380] ? __fget_files+0x3a0/0x420 [ 116.378586][ T7380] __x64_sys_sendmsg+0x19b/0x260 [ 116.378608][ T7380] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 116.378636][ T7380] ? __pfx_ksys_write+0x10/0x10 [ 116.378663][ T7380] ? do_syscall_64+0xbe/0xfa0 [ 116.378689][ T7380] do_syscall_64+0xfa/0xfa0 [ 116.378710][ T7380] ? lockdep_hardirqs_on+0x9c/0x150 [ 116.378732][ T7380] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.378749][ T7380] ? clear_bhb_loop+0x60/0xb0 [ 116.378767][ T7380] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.378783][ T7380] RIP: 0033:0x7fb64dd8f6c9 [ 116.378798][ T7380] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 116.378813][ T7380] RSP: 002b:00007fb64bff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 116.378833][ T7380] RAX: ffffffffffffffda RBX: 00007fb64dfe5fa0 RCX: 00007fb64dd8f6c9 [ 116.378846][ T7380] RDX: 0000000000000010 RSI: 0000200000000240 RDI: 0000000000000003 [ 116.378856][ T7380] RBP: 00007fb64bff6090 R08: 0000000000000000 R09: 0000000000000000 [ 116.378866][ T7380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 116.378876][ T7380] R13: 00007fb64dfe6038 R14: 00007fb64dfe5fa0 R15: 00007fffd8f05588 [ 116.378909][ T7380] [ 116.457858][ T7390] netlink: 8 bytes leftover after parsing attributes in process `syz.4.544'. [ 116.778625][ T43] IPVS: starting estimator thread 0... [ 117.013613][ T7412] IPVS: using max 38 ests per chain, 91200 per kthread [ 117.221266][ T7431] sctp: [Deprecated]: syz.1.559 (pid 7431) Use of int in max_burst socket option. [ 117.221266][ T7431] Use struct sctp_assoc_value instead [ 117.287015][ T7433] IPv6: NLM_F_CREATE should be specified when creating new route [ 117.551887][ T7454] FAULT_INJECTION: forcing a failure. [ 117.551887][ T7454] name failslab, interval 1, probability 0, space 0, times 0 [ 117.572118][ T7457] vlan2: entered promiscuous mode [ 117.579442][ T7457] geneve1: entered promiscuous mode [ 117.584806][ T7454] CPU: 0 UID: 0 PID: 7454 Comm: syz.0.567 Not tainted syzkaller #0 PREEMPT(full) [ 117.584828][ T7454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 117.584839][ T7454] Call Trace: [ 117.584846][ T7454] [ 117.584853][ T7454] dump_stack_lvl+0x189/0x250 [ 117.584880][ T7454] ? __pfx____ratelimit+0x10/0x10 [ 117.584902][ T7454] ? __pfx_dump_stack_lvl+0x10/0x10 [ 117.584924][ T7454] ? __pfx__printk+0x10/0x10 [ 117.584938][ T7454] ? netlink_sendmsg+0x805/0xb30 [ 117.584956][ T7454] ? __x64_sys_sendmsg+0x19b/0x260 [ 117.584973][ T7454] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.584998][ T7454] should_fail_ex+0x414/0x560 [ 117.585028][ T7454] should_failslab+0xa8/0x100 [ 117.585047][ T7454] kmem_cache_alloc_noprof+0x74/0x6e0 [ 117.585070][ T7454] ? skb_clone+0x212/0x3a0 [ 117.585094][ T7454] skb_clone+0x212/0x3a0 [ 117.585115][ T7454] __netlink_deliver_tap+0x404/0x850 [ 117.585152][ T7454] ? netlink_deliver_tap+0x2e/0x1b0 [ 117.585170][ T7454] netlink_deliver_tap+0x19c/0x1b0 [ 117.585188][ T7454] netlink_sendskb+0x68/0x140 [ 117.585212][ T7454] netlink_unicast+0x397/0x9e0 [ 117.585231][ T7454] ? __asan_memcpy+0x40/0x70 [ 117.585259][ T7454] ? __pfx_netlink_unicast+0x10/0x10 [ 117.585308][ T7454] netlink_rcv_skb+0x28c/0x470 [ 117.585322][ T7454] ? __lock_acquire+0xab9/0xd20 [ 117.585340][ T7454] ? __pfx_genl_rcv_msg+0x10/0x10 [ 117.585362][ T7454] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 117.585398][ T7454] ? down_read+0x1ad/0x2e0 [ 117.585418][ T7454] genl_rcv+0x28/0x40 [ 117.585435][ T7454] netlink_unicast+0x82f/0x9e0 [ 117.585476][ T7454] ? __pfx_netlink_unicast+0x10/0x10 [ 117.585500][ T7454] ? netlink_sendmsg+0x642/0xb30 [ 117.585514][ T7454] ? skb_put+0x11b/0x210 [ 117.585533][ T7454] netlink_sendmsg+0x805/0xb30 [ 117.585560][ T7454] ? __pfx_netlink_sendmsg+0x10/0x10 [ 117.585580][ T7454] ? aa_sock_msg_perm+0xf1/0x1d0 [ 117.585605][ T7454] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 117.585623][ T7454] ? __pfx_netlink_sendmsg+0x10/0x10 [ 117.585641][ T7454] __sock_sendmsg+0x21c/0x270 [ 117.585665][ T7454] ____sys_sendmsg+0x505/0x830 [ 117.585689][ T7454] ? __pfx_____sys_sendmsg+0x10/0x10 [ 117.585717][ T7454] ? import_iovec+0x74/0xa0 [ 117.585742][ T7454] ___sys_sendmsg+0x21f/0x2a0 [ 117.585763][ T7454] ? __pfx____sys_sendmsg+0x10/0x10 [ 117.585820][ T7454] ? __fget_files+0x2a/0x420 [ 117.585835][ T7454] ? __fget_files+0x3a0/0x420 [ 117.585862][ T7454] __x64_sys_sendmsg+0x19b/0x260 [ 117.585883][ T7454] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 117.585912][ T7454] ? __pfx_ksys_write+0x10/0x10 [ 117.585939][ T7454] ? do_syscall_64+0xbe/0xfa0 [ 117.585965][ T7454] do_syscall_64+0xfa/0xfa0 [ 117.585986][ T7454] ? lockdep_hardirqs_on+0x9c/0x150 [ 117.586007][ T7454] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.586024][ T7454] ? clear_bhb_loop+0x60/0xb0 [ 117.586045][ T7454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.586061][ T7454] RIP: 0033:0x7faddbf8f6c9 [ 117.586076][ T7454] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 117.586096][ T7454] RSP: 002b:00007faddce82038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 117.586115][ T7454] RAX: ffffffffffffffda RBX: 00007faddc1e5fa0 RCX: 00007faddbf8f6c9 [ 117.586127][ T7454] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 117.586144][ T7454] RBP: 00007faddce82090 R08: 0000000000000000 R09: 0000000000000000 [ 117.586154][ T7454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 117.586165][ T7454] R13: 00007faddc1e6038 R14: 00007faddc1e5fa0 R15: 00007ffcc734a2e8 [ 117.586196][ T7454] [ 117.586609][ T7457] vlan2: entered allmulticast mode [ 117.958023][ T7457] geneve1: entered allmulticast mode [ 118.074216][ T7474] IPv6: sit1: Disabled Multicast RS [ 118.341426][ T7494] netlink: 'syz.3.578': attribute type 3 has an invalid length. [ 118.511138][ T7505] IPVS: set_ctl: invalid protocol: 44 100.1.1.3:20003 [ 118.901994][ T7532] FAULT_INJECTION: forcing a failure. [ 118.901994][ T7532] name failslab, interval 1, probability 0, space 0, times 0 [ 118.914735][ T7532] CPU: 0 UID: 0 PID: 7532 Comm: syz.3.594 Not tainted syzkaller #0 PREEMPT(full) [ 118.914757][ T7532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 118.914767][ T7532] Call Trace: [ 118.914774][ T7532] [ 118.914781][ T7532] dump_stack_lvl+0x189/0x250 [ 118.914798][ T7532] ? __pfx____ratelimit+0x10/0x10 [ 118.914812][ T7532] ? __pfx_dump_stack_lvl+0x10/0x10 [ 118.914824][ T7532] ? __pfx__printk+0x10/0x10 [ 118.914836][ T7532] ? __pfx___might_resched+0x10/0x10 [ 118.914846][ T7532] ? fs_reclaim_acquire+0x7d/0x100 [ 118.914858][ T7532] should_fail_ex+0x414/0x560 [ 118.914875][ T7532] should_failslab+0xa8/0x100 [ 118.914886][ T7532] kmem_cache_alloc_noprof+0x74/0x6e0 [ 118.914898][ T7532] ? __kmalloc_noprof+0x432/0x7f0 [ 118.914909][ T7532] ? copy_net_ns+0x110/0x4e0 [ 118.914921][ T7532] ? copy_net_ns+0x142/0x4e0 [ 118.914936][ T7532] copy_net_ns+0x142/0x4e0 [ 118.914948][ T7532] ? copy_cgroup_ns+0x8b/0x5c0 [ 118.914961][ T7532] create_new_namespaces+0x3f3/0x720 [ 118.914975][ T7532] ? security_capable+0x7e/0x2e0 [ 118.914992][ T7532] unshare_nsproxy_namespaces+0x11c/0x170 [ 118.915004][ T7532] ksys_unshare+0x4c8/0x8c0 [ 118.915026][ T7532] ? __pfx_ksys_unshare+0x10/0x10 [ 118.915036][ T7532] ? ksys_write+0x22a/0x250 [ 118.915050][ T7532] ? __pfx_ksys_write+0x10/0x10 [ 118.915066][ T7532] __x64_sys_unshare+0x38/0x50 [ 118.915078][ T7532] do_syscall_64+0xfa/0xfa0 [ 118.915090][ T7532] ? lockdep_hardirqs_on+0x9c/0x150 [ 118.915103][ T7532] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.915113][ T7532] ? clear_bhb_loop+0x60/0xb0 [ 118.915124][ T7532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.915133][ T7532] RIP: 0033:0x7ff3b9b8f6c9 [ 118.915142][ T7532] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 118.915151][ T7532] RSP: 002b:00007ff3baaab038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 118.915162][ T7532] RAX: ffffffffffffffda RBX: 00007ff3b9de5fa0 RCX: 00007ff3b9b8f6c9 [ 118.915169][ T7532] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000064000600 [ 118.915174][ T7532] RBP: 00007ff3baaab090 R08: 0000000000000000 R09: 0000000000000000 [ 118.915181][ T7532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 118.915186][ T7532] R13: 00007ff3b9de6038 R14: 00007ff3b9de5fa0 R15: 00007ffee45359f8 [ 118.915203][ T7532] [ 119.266011][ T7537] FAULT_INJECTION: forcing a failure. [ 119.266011][ T7537] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 119.280135][ T7537] CPU: 0 UID: 0 PID: 7537 Comm: syz.1.597 Not tainted syzkaller #0 PREEMPT(full) [ 119.280157][ T7537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 119.280166][ T7537] Call Trace: [ 119.280173][ T7537] [ 119.280180][ T7537] dump_stack_lvl+0x189/0x250 [ 119.280206][ T7537] ? __pfx____ratelimit+0x10/0x10 [ 119.280226][ T7537] ? __pfx_dump_stack_lvl+0x10/0x10 [ 119.280247][ T7537] ? __pfx__printk+0x10/0x10 [ 119.280277][ T7537] should_fail_ex+0x414/0x560 [ 119.280305][ T7537] _copy_to_user+0x31/0xb0 [ 119.280328][ T7537] simple_read_from_buffer+0xe1/0x170 [ 119.280356][ T7537] proc_fail_nth_read+0x1b3/0x220 [ 119.280380][ T7537] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 119.280404][ T7537] ? rw_verify_area+0x2a6/0x4d0 [ 119.280425][ T7537] ? __lock_acquire+0xab9/0xd20 [ 119.280440][ T7537] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 119.280462][ T7537] vfs_read+0x200/0xa30 [ 119.280482][ T7537] ? fdget_pos+0x247/0x320 [ 119.280502][ T7537] ? __pfx___mutex_lock+0x10/0x10 [ 119.280526][ T7537] ? __pfx_vfs_read+0x10/0x10 [ 119.280549][ T7537] ? __fget_files+0x2a/0x420 [ 119.280570][ T7537] ? __fget_files+0x3a0/0x420 [ 119.280585][ T7537] ? __fget_files+0x2a/0x420 [ 119.280610][ T7537] ksys_read+0x145/0x250 [ 119.280632][ T7537] ? __pfx_ksys_read+0x10/0x10 [ 119.280656][ T7537] ? do_syscall_64+0xbe/0xfa0 [ 119.280683][ T7537] do_syscall_64+0xfa/0xfa0 [ 119.280704][ T7537] ? lockdep_hardirqs_on+0x9c/0x150 [ 119.280725][ T7537] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.280742][ T7537] ? clear_bhb_loop+0x60/0xb0 [ 119.280763][ T7537] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.280779][ T7537] RIP: 0033:0x7fb64dd8e0dc [ 119.280794][ T7537] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 119.280807][ T7537] RSP: 002b:00007fb64bff6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 119.280825][ T7537] RAX: ffffffffffffffda RBX: 00007fb64dfe5fa0 RCX: 00007fb64dd8e0dc [ 119.280837][ T7537] RDX: 000000000000000f RSI: 00007fb64bff60a0 RDI: 0000000000000005 [ 119.280848][ T7537] RBP: 00007fb64bff6090 R08: 0000000000000000 R09: 0000000000000000 [ 119.280858][ T7537] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 119.280869][ T7537] R13: 00007fb64dfe6038 R14: 00007fb64dfe5fa0 R15: 00007fffd8f05588 [ 119.280899][ T7537] [ 119.572873][ T7543] FAULT_INJECTION: forcing a failure. [ 119.572873][ T7543] name failslab, interval 1, probability 0, space 0, times 0 [ 119.586923][ T7543] CPU: 0 UID: 0 PID: 7543 Comm: syz.1.600 Not tainted syzkaller #0 PREEMPT(full) [ 119.586946][ T7543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 119.586956][ T7543] Call Trace: [ 119.586963][ T7543] [ 119.586970][ T7543] dump_stack_lvl+0x189/0x250 [ 119.586997][ T7543] ? __pfx____ratelimit+0x10/0x10 [ 119.587019][ T7543] ? __pfx_dump_stack_lvl+0x10/0x10 [ 119.587039][ T7543] ? __pfx__printk+0x10/0x10 [ 119.587061][ T7543] ? __pfx___might_resched+0x10/0x10 [ 119.587078][ T7543] ? fs_reclaim_acquire+0x7d/0x100 [ 119.587099][ T7543] should_fail_ex+0x414/0x560 [ 119.587128][ T7543] should_failslab+0xa8/0x100 [ 119.587147][ T7543] __kvmalloc_node_noprof+0x158/0x910 [ 119.587172][ T7543] ? nf_tables_newchain+0x1b68/0x2750 [ 119.587190][ T7543] ? __asan_memcpy+0x40/0x70 [ 119.587224][ T7543] nf_tables_newchain+0x1b68/0x2750 [ 119.587260][ T7543] ? __pfx_nf_tables_newchain+0x10/0x10 [ 119.587314][ T7543] ? nfnl_pernet+0x23/0x240 [ 119.587345][ T7543] ? __nla_parse+0x40/0x60 [ 119.587369][ T7543] nfnetlink_rcv+0x11d9/0x2590 [ 119.587417][ T7543] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 119.587446][ T7543] ? ref_tracker_free+0x63a/0x7d0 [ 119.587480][ T7543] ? __netlink_deliver_tap+0x807/0x850 [ 119.587493][ T7543] ? netlink_deliver_tap+0x2e/0x1b0 [ 119.587518][ T7543] netlink_unicast+0x82f/0x9e0 [ 119.587542][ T7543] ? __pfx_netlink_unicast+0x10/0x10 [ 119.587561][ T7543] ? netlink_sendmsg+0x642/0xb30 [ 119.587572][ T7543] ? skb_put+0x11b/0x210 [ 119.587587][ T7543] netlink_sendmsg+0x805/0xb30 [ 119.587607][ T7543] ? __pfx_netlink_sendmsg+0x10/0x10 [ 119.587622][ T7543] ? aa_sock_msg_perm+0xf1/0x1d0 [ 119.587642][ T7543] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 119.587654][ T7543] ? __pfx_netlink_sendmsg+0x10/0x10 [ 119.587668][ T7543] __sock_sendmsg+0x21c/0x270 [ 119.587687][ T7543] ____sys_sendmsg+0x505/0x830 [ 119.587705][ T7543] ? __pfx_____sys_sendmsg+0x10/0x10 [ 119.587725][ T7543] ? import_iovec+0x74/0xa0 [ 119.587744][ T7543] ___sys_sendmsg+0x21f/0x2a0 [ 119.587759][ T7543] ? __pfx____sys_sendmsg+0x10/0x10 [ 119.587800][ T7543] ? __fget_files+0x2a/0x420 [ 119.587811][ T7543] ? __fget_files+0x3a0/0x420 [ 119.587831][ T7543] __x64_sys_sendmsg+0x19b/0x260 [ 119.587847][ T7543] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 119.587872][ T7543] ? __pfx_ksys_write+0x10/0x10 [ 119.587893][ T7543] ? do_syscall_64+0xbe/0xfa0 [ 119.587914][ T7543] do_syscall_64+0xfa/0xfa0 [ 119.587930][ T7543] ? lockdep_hardirqs_on+0x9c/0x150 [ 119.587946][ T7543] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.587960][ T7543] ? clear_bhb_loop+0x60/0xb0 [ 119.587976][ T7543] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.587988][ T7543] RIP: 0033:0x7fb64dd8f6c9 [ 119.588001][ T7543] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 119.588012][ T7543] RSP: 002b:00007fb64bff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 119.588027][ T7543] RAX: ffffffffffffffda RBX: 00007fb64dfe5fa0 RCX: 00007fb64dd8f6c9 [ 119.588036][ T7543] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 119.588044][ T7543] RBP: 00007fb64bff6090 R08: 0000000000000000 R09: 0000000000000000 [ 119.588052][ T7543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 119.588060][ T7543] R13: 00007fb64dfe6038 R14: 00007fb64dfe5fa0 R15: 00007fffd8f05588 [ 119.588083][ T7543] [ 119.928485][ T7547] FAULT_INJECTION: forcing a failure. [ 119.928485][ T7547] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 119.959466][ T7547] CPU: 0 UID: 0 PID: 7547 Comm: syz.2.599 Not tainted syzkaller #0 PREEMPT(full) [ 119.959489][ T7547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 119.959499][ T7547] Call Trace: [ 119.959506][ T7547] [ 119.959514][ T7547] dump_stack_lvl+0x189/0x250 [ 119.959540][ T7547] ? __pfx____ratelimit+0x10/0x10 [ 119.959563][ T7547] ? __pfx_dump_stack_lvl+0x10/0x10 [ 119.959584][ T7547] ? __pfx__printk+0x10/0x10 [ 119.959612][ T7547] should_fail_ex+0x414/0x560 [ 119.959641][ T7547] _copy_to_user+0x31/0xb0 [ 119.959664][ T7547] simple_read_from_buffer+0xe1/0x170 [ 119.959692][ T7547] proc_fail_nth_read+0x1b3/0x220 [ 119.959716][ T7547] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 119.959737][ T7547] ? rw_verify_area+0x2a6/0x4d0 [ 119.959757][ T7547] ? __lock_acquire+0xab9/0xd20 [ 119.959773][ T7547] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 119.959794][ T7547] vfs_read+0x200/0xa30 [ 119.959815][ T7547] ? fdget_pos+0x247/0x320 [ 119.959835][ T7547] ? __pfx___mutex_lock+0x10/0x10 [ 119.959859][ T7547] ? __pfx_vfs_read+0x10/0x10 [ 119.959882][ T7547] ? __fget_files+0x2a/0x420 [ 119.959902][ T7547] ? __fget_files+0x3a0/0x420 [ 119.959916][ T7547] ? __fget_files+0x2a/0x420 [ 119.959940][ T7547] ksys_read+0x145/0x250 [ 119.959964][ T7547] ? __pfx_ksys_read+0x10/0x10 [ 119.959988][ T7547] ? do_syscall_64+0xbe/0xfa0 [ 119.960013][ T7547] do_syscall_64+0xfa/0xfa0 [ 119.960034][ T7547] ? lockdep_hardirqs_on+0x9c/0x150 [ 119.960055][ T7547] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.960072][ T7547] ? clear_bhb_loop+0x60/0xb0 [ 119.960092][ T7547] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.960109][ T7547] RIP: 0033:0x7fdfb198e0dc [ 119.960124][ T7547] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 119.960139][ T7547] RSP: 002b:00007fdfb2849030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 119.960157][ T7547] RAX: ffffffffffffffda RBX: 00007fdfb1be5fa0 RCX: 00007fdfb198e0dc [ 119.960170][ T7547] RDX: 000000000000000f RSI: 00007fdfb28490a0 RDI: 0000000000000005 [ 119.960187][ T7547] RBP: 00007fdfb2849090 R08: 0000000000000000 R09: 0000000000000000 [ 119.960198][ T7547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 119.960207][ T7547] R13: 00007fdfb1be6038 R14: 00007fdfb1be5fa0 R15: 00007ffd9fc65a88 [ 119.960239][ T7547] [ 120.299398][ T7555] __nla_validate_parse: 12 callbacks suppressed [ 120.299414][ T7555] netlink: 8 bytes leftover after parsing attributes in process `syz.2.604'. [ 120.309472][ T7557] netlink: 28 bytes leftover after parsing attributes in process `syz.1.603'. [ 120.335412][ T7553] netlink: 84 bytes leftover after parsing attributes in process `syz.3.606'. [ 120.375386][ T7559] netlink: 16 bytes leftover after parsing attributes in process `syz.2.604'. [ 120.385135][ T7559] FAULT_INJECTION: forcing a failure. [ 120.385135][ T7559] name failslab, interval 1, probability 0, space 0, times 0 [ 120.398129][ T7559] CPU: 0 UID: 0 PID: 7559 Comm: syz.2.604 Not tainted syzkaller #0 PREEMPT(full) [ 120.398151][ T7559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 120.398160][ T7559] Call Trace: [ 120.398167][ T7559] [ 120.398174][ T7559] dump_stack_lvl+0x189/0x250 [ 120.398204][ T7559] ? __pfx____ratelimit+0x10/0x10 [ 120.398225][ T7559] ? __pfx_dump_stack_lvl+0x10/0x10 [ 120.398245][ T7559] ? __pfx__printk+0x10/0x10 [ 120.398258][ T7559] ? netlink_sendmsg+0x805/0xb30 [ 120.398274][ T7559] ? __x64_sys_sendmsg+0x19b/0x260 [ 120.398291][ T7559] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.398317][ T7559] should_fail_ex+0x414/0x560 [ 120.398345][ T7559] should_failslab+0xa8/0x100 [ 120.398360][ T7559] kmem_cache_alloc_noprof+0x74/0x6e0 [ 120.398378][ T7559] ? skb_clone+0x212/0x3a0 [ 120.398397][ T7559] skb_clone+0x212/0x3a0 [ 120.398415][ T7559] __netlink_deliver_tap+0x404/0x850 [ 120.398440][ T7559] ? netlink_deliver_tap+0x2e/0x1b0 [ 120.398458][ T7559] netlink_deliver_tap+0x19c/0x1b0 [ 120.398475][ T7559] netlink_sendskb+0x68/0x140 [ 120.398499][ T7559] netlink_unicast+0x397/0x9e0 [ 120.398520][ T7559] ? __asan_memcpy+0x40/0x70 [ 120.398549][ T7559] ? __pfx_netlink_unicast+0x10/0x10 [ 120.398582][ T7559] netlink_rcv_skb+0x28c/0x470 [ 120.398597][ T7559] ? __lock_acquire+0xab9/0xd20 [ 120.398615][ T7559] ? __pfx_genl_rcv_msg+0x10/0x10 [ 120.398636][ T7559] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 120.398669][ T7559] ? down_read+0x1ad/0x2e0 [ 120.398689][ T7559] genl_rcv+0x28/0x40 [ 120.398705][ T7559] netlink_unicast+0x82f/0x9e0 [ 120.398735][ T7559] ? __pfx_netlink_unicast+0x10/0x10 [ 120.398759][ T7559] ? netlink_sendmsg+0x642/0xb30 [ 120.398772][ T7559] ? skb_put+0x11b/0x210 [ 120.398792][ T7559] netlink_sendmsg+0x805/0xb30 [ 120.398818][ T7559] ? __pfx_netlink_sendmsg+0x10/0x10 [ 120.398837][ T7559] ? aa_sock_msg_perm+0xf1/0x1d0 [ 120.398862][ T7559] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 120.398878][ T7559] ? __pfx_netlink_sendmsg+0x10/0x10 [ 120.398895][ T7559] __sock_sendmsg+0x21c/0x270 [ 120.398921][ T7559] ____sys_sendmsg+0x505/0x830 [ 120.398943][ T7559] ? __pfx_____sys_sendmsg+0x10/0x10 [ 120.398967][ T7559] ? import_iovec+0x74/0xa0 [ 120.398992][ T7559] ___sys_sendmsg+0x21f/0x2a0 [ 120.399011][ T7559] ? __pfx____sys_sendmsg+0x10/0x10 [ 120.399066][ T7559] ? __fget_files+0x2a/0x420 [ 120.399081][ T7559] ? __fget_files+0x3a0/0x420 [ 120.399108][ T7559] __x64_sys_sendmsg+0x19b/0x260 [ 120.399135][ T7559] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 120.399164][ T7559] ? __pfx_ksys_write+0x10/0x10 [ 120.399188][ T7559] ? do_syscall_64+0xbe/0xfa0 [ 120.399223][ T7559] do_syscall_64+0xfa/0xfa0 [ 120.399245][ T7559] ? lockdep_hardirqs_on+0x9c/0x150 [ 120.399267][ T7559] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.399284][ T7559] ? clear_bhb_loop+0x60/0xb0 [ 120.399305][ T7559] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.399321][ T7559] RIP: 0033:0x7fdfb198f6c9 [ 120.399337][ T7559] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.399351][ T7559] RSP: 002b:00007fdfb2828038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 120.399370][ T7559] RAX: ffffffffffffffda RBX: 00007fdfb1be6090 RCX: 00007fdfb198f6c9 [ 120.399382][ T7559] RDX: 0000000000000004 RSI: 00002000000003c0 RDI: 0000000000000003 [ 120.399392][ T7559] RBP: 00007fdfb2828090 R08: 0000000000000000 R09: 0000000000000000 [ 120.399403][ T7559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 120.399413][ T7559] R13: 00007fdfb1be6128 R14: 00007fdfb1be6090 R15: 00007ffd9fc65a88 [ 120.399442][ T7559] [ 120.778117][ T7564] netlink: 8 bytes leftover after parsing attributes in process `syz.1.609'. [ 120.789538][ T7564] FAULT_INJECTION: forcing a failure. [ 120.789538][ T7564] name failslab, interval 1, probability 0, space 0, times 0 [ 120.802395][ T7564] CPU: 1 UID: 0 PID: 7564 Comm: syz.1.609 Not tainted syzkaller #0 PREEMPT(full) [ 120.802418][ T7564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 120.802428][ T7564] Call Trace: [ 120.802435][ T7564] [ 120.802443][ T7564] dump_stack_lvl+0x189/0x250 [ 120.802468][ T7564] ? __pfx____ratelimit+0x10/0x10 [ 120.802490][ T7564] ? __pfx_dump_stack_lvl+0x10/0x10 [ 120.802509][ T7564] ? __pfx__printk+0x10/0x10 [ 120.802530][ T7564] ? skb_network_protocol+0x4fe/0x760 [ 120.802555][ T7564] should_fail_ex+0x414/0x560 [ 120.802585][ T7564] should_failslab+0xa8/0x100 [ 120.802603][ T7564] kmem_cache_alloc_noprof+0x74/0x6e0 [ 120.802623][ T7564] ? dev_queue_xmit_nit+0x2d/0xcc0 [ 120.802638][ T7564] ? skb_clone+0x212/0x3a0 [ 120.802659][ T7564] skb_clone+0x212/0x3a0 [ 120.802674][ T7564] ? dev_queue_xmit_nit+0x25a/0xcc0 [ 120.802691][ T7564] dev_queue_xmit_nit+0x416/0xcc0 [ 120.802707][ T7564] ? dev_queue_xmit_nit+0x2d/0xcc0 [ 120.802735][ T7564] dev_hard_start_xmit+0x1be/0x830 [ 120.802769][ T7564] __dev_queue_xmit+0x1b8d/0x3b50 [ 120.802786][ T7564] ? kasan_save_track+0x4f/0x80 [ 120.802805][ T7564] ? kasan_save_track+0x3e/0x80 [ 120.802831][ T7564] ? __dev_queue_xmit+0x27b/0x3b50 [ 120.802865][ T7564] ? __pfx___dev_queue_xmit+0x10/0x10 [ 120.802895][ T7564] ? __copy_skb_header+0xa7/0x550 [ 120.802912][ T7564] ? __asan_memcpy+0x40/0x70 [ 120.802942][ T7564] ? __skb_clone+0x63/0x7a0 [ 120.802964][ T7564] ? __skb_clone+0x483/0x7a0 [ 120.802989][ T7564] ? skb_clone+0x246/0x3a0 [ 120.803010][ T7564] __netlink_deliver_tap+0x5ad/0x850 [ 120.803040][ T7564] ? netlink_deliver_tap+0x2e/0x1b0 [ 120.803059][ T7564] netlink_deliver_tap+0x19c/0x1b0 [ 120.803077][ T7564] netlink_sendskb+0x68/0x140 [ 120.803099][ T7564] netlink_unicast+0x397/0x9e0 [ 120.803118][ T7564] ? __asan_memcpy+0x40/0x70 [ 120.803143][ T7564] ? __pfx_netlink_unicast+0x10/0x10 [ 120.803174][ T7564] netlink_rcv_skb+0x28c/0x470 [ 120.803190][ T7564] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 120.803215][ T7564] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 120.803242][ T7564] ? netlink_deliver_tap+0x2e/0x1b0 [ 120.803266][ T7564] netlink_unicast+0x82f/0x9e0 [ 120.803297][ T7564] ? __pfx_netlink_unicast+0x10/0x10 [ 120.803321][ T7564] ? netlink_sendmsg+0x642/0xb30 [ 120.803335][ T7564] ? skb_put+0x11b/0x210 [ 120.803355][ T7564] netlink_sendmsg+0x805/0xb30 [ 120.803381][ T7564] ? __pfx_netlink_sendmsg+0x10/0x10 [ 120.803400][ T7564] ? aa_sock_msg_perm+0xf1/0x1d0 [ 120.803429][ T7564] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 120.803445][ T7564] ? __pfx_netlink_sendmsg+0x10/0x10 [ 120.803461][ T7564] __sock_sendmsg+0x21c/0x270 [ 120.803484][ T7564] ____sys_sendmsg+0x505/0x830 [ 120.803506][ T7564] ? __pfx_____sys_sendmsg+0x10/0x10 [ 120.803531][ T7564] ? import_iovec+0x74/0xa0 [ 120.803553][ T7564] ___sys_sendmsg+0x21f/0x2a0 [ 120.803573][ T7564] ? __pfx____sys_sendmsg+0x10/0x10 [ 120.803623][ T7564] ? __fget_files+0x2a/0x420 [ 120.803638][ T7564] ? __fget_files+0x3a0/0x420 [ 120.803664][ T7564] __x64_sys_sendmsg+0x19b/0x260 [ 120.803685][ T7564] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 120.803714][ T7564] ? __pfx_ksys_write+0x10/0x10 [ 120.803740][ T7564] ? do_syscall_64+0xbe/0xfa0 [ 120.803765][ T7564] do_syscall_64+0xfa/0xfa0 [ 120.803784][ T7564] ? lockdep_hardirqs_on+0x9c/0x150 [ 120.803806][ T7564] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.803823][ T7564] ? clear_bhb_loop+0x60/0xb0 [ 120.803843][ T7564] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.803858][ T7564] RIP: 0033:0x7fb64dd8f6c9 [ 120.803873][ T7564] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.803886][ T7564] RSP: 002b:00007fb64bff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 120.803904][ T7564] RAX: ffffffffffffffda RBX: 00007fb64dfe5fa0 RCX: 00007fb64dd8f6c9 [ 120.803927][ T7564] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000004 [ 120.803937][ T7564] RBP: 00007fb64bff6090 R08: 0000000000000000 R09: 0000000000000000 [ 120.803948][ T7564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 120.803957][ T7564] R13: 00007fb64dfe6038 R14: 00007fb64dfe5fa0 R15: 00007fffd8f05588 [ 120.803987][ T7564] [ 121.314895][ T7572] netlink: 2412 bytes leftover after parsing attributes in process `syz.1.613'. [ 121.326816][ T7572] FAULT_INJECTION: forcing a failure. [ 121.326816][ T7572] name failslab, interval 1, probability 0, space 0, times 0 [ 121.339777][ T7572] CPU: 1 UID: 0 PID: 7572 Comm: syz.1.613 Not tainted syzkaller #0 PREEMPT(full) [ 121.339801][ T7572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 121.339812][ T7572] Call Trace: [ 121.339819][ T7572] [ 121.339827][ T7572] dump_stack_lvl+0x189/0x250 [ 121.339853][ T7572] ? __pfx____ratelimit+0x10/0x10 [ 121.339884][ T7572] ? __pfx_dump_stack_lvl+0x10/0x10 [ 121.339906][ T7572] ? __pfx__printk+0x10/0x10 [ 121.339920][ T7572] ? netlink_sendmsg+0x805/0xb30 [ 121.339937][ T7572] ? __x64_sys_sendmsg+0x19b/0x260 [ 121.339955][ T7572] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.339981][ T7572] should_fail_ex+0x414/0x560 [ 121.340011][ T7572] should_failslab+0xa8/0x100 [ 121.340030][ T7572] kmem_cache_alloc_node_noprof+0x77/0x710 [ 121.340053][ T7572] ? __alloc_skb+0x112/0x2d0 [ 121.340074][ T7572] __alloc_skb+0x112/0x2d0 [ 121.340094][ T7572] nl80211_frame_tx_status+0x2bf/0xbd0 [ 121.340121][ T7572] ? __pfx_nl80211_frame_tx_status+0x10/0x10 [ 121.340145][ T7572] ? __lock_acquire+0xab9/0xd20 [ 121.340167][ T7572] ? ieee80211_report_used_skb+0x1684/0x2820 [ 121.340193][ T7572] cfg80211_control_port_tx_status+0x7d/0xb0 [ 121.340218][ T7572] ieee80211_report_used_skb+0x1c2b/0x2820 [ 121.340242][ T7572] ? ieee80211_report_used_skb+0x1684/0x2820 [ 121.340271][ T7572] ? __pfx_ieee80211_report_used_skb+0x10/0x10 [ 121.340295][ T7572] ? sta_info_get+0x4f/0x300 [ 121.340315][ T7572] ? sta_info_get+0x4f/0x300 [ 121.340333][ T7572] ? sta_info_get+0x4f/0x300 [ 121.340354][ T7572] ? sta_info_get+0x2ec/0x300 [ 121.340379][ T7572] ieee80211_free_txskb+0x24/0x40 [ 121.340399][ T7572] invoke_tx_handlers_early+0x123b/0x1d50 [ 121.340431][ T7572] ieee80211_tx+0x263/0x460 [ 121.340450][ T7572] ? __pfx_ieee80211_tx+0x10/0x10 [ 121.340488][ T7572] ? ieee80211_xmit+0x315/0x400 [ 121.340509][ T7572] __ieee80211_subif_start_xmit+0xccf/0x1610 [ 121.340529][ T7572] ? __ieee80211_subif_start_xmit+0x2be/0x1610 [ 121.340560][ T7572] ? __pfx___ieee80211_subif_start_xmit+0x10/0x10 [ 121.340585][ T7572] ? ieee80211_tx_control_port+0x765/0xcc0 [ 121.340607][ T7572] ? ieee80211_tx_control_port+0xa82/0xcc0 [ 121.340627][ T7572] ieee80211_tx_control_port+0xabd/0xcc0 [ 121.340659][ T7572] nl80211_tx_control_port+0x613/0x980 [ 121.340691][ T7572] ? __pfx_nl80211_tx_control_port+0x10/0x10 [ 121.340714][ T7572] ? nl80211_pre_doit+0x4f1/0x930 [ 121.340738][ T7572] genl_family_rcv_msg_doit+0x215/0x300 [ 121.340765][ T7572] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 121.340816][ T7572] ? bpf_lsm_capable+0x9/0x20 [ 121.340835][ T7572] ? security_capable+0x7e/0x2e0 [ 121.340863][ T7572] genl_rcv_msg+0x60e/0x790 [ 121.340895][ T7572] ? __pfx_genl_rcv_msg+0x10/0x10 [ 121.340913][ T7572] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 121.340929][ T7572] ? __pfx_nl80211_tx_control_port+0x10/0x10 [ 121.340945][ T7572] ? __pfx_nl80211_post_doit+0x10/0x10 [ 121.340965][ T7572] ? __asan_memcpy+0x40/0x70 [ 121.340985][ T7572] ? __pfx_ref_tracker_free+0x10/0x10 [ 121.341009][ T7572] netlink_rcv_skb+0x208/0x470 [ 121.341023][ T7572] ? __lock_acquire+0xab9/0xd20 [ 121.341039][ T7572] ? __pfx_genl_rcv_msg+0x10/0x10 [ 121.341061][ T7572] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 121.341097][ T7572] ? down_read+0x1ad/0x2e0 [ 121.341116][ T7572] genl_rcv+0x28/0x40 [ 121.341134][ T7572] netlink_unicast+0x82f/0x9e0 [ 121.341166][ T7572] ? __pfx_netlink_unicast+0x10/0x10 [ 121.341191][ T7572] ? netlink_sendmsg+0x642/0xb30 [ 121.341205][ T7572] ? skb_put+0x11b/0x210 [ 121.341225][ T7572] netlink_sendmsg+0x805/0xb30 [ 121.341251][ T7572] ? __pfx_netlink_sendmsg+0x10/0x10 [ 121.341271][ T7572] ? aa_sock_msg_perm+0xf1/0x1d0 [ 121.341296][ T7572] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 121.341311][ T7572] ? __pfx_netlink_sendmsg+0x10/0x10 [ 121.341329][ T7572] __sock_sendmsg+0x21c/0x270 [ 121.341352][ T7572] ____sys_sendmsg+0x505/0x830 [ 121.341377][ T7572] ? __pfx_____sys_sendmsg+0x10/0x10 [ 121.341404][ T7572] ? import_iovec+0x74/0xa0 [ 121.341427][ T7572] ___sys_sendmsg+0x21f/0x2a0 [ 121.341448][ T7572] ? __pfx____sys_sendmsg+0x10/0x10 [ 121.341503][ T7572] ? __fget_files+0x2a/0x420 [ 121.341518][ T7572] ? __fget_files+0x3a0/0x420 [ 121.341544][ T7572] __x64_sys_sendmsg+0x19b/0x260 [ 121.341565][ T7572] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 121.341593][ T7572] ? __pfx_ksys_write+0x10/0x10 [ 121.341618][ T7572] ? do_syscall_64+0xbe/0xfa0 [ 121.341643][ T7572] do_syscall_64+0xfa/0xfa0 [ 121.341662][ T7572] ? lockdep_hardirqs_on+0x9c/0x150 [ 121.341681][ T7572] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.341696][ T7572] ? clear_bhb_loop+0x60/0xb0 [ 121.341714][ T7572] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.341729][ T7572] RIP: 0033:0x7fb64dd8f6c9 [ 121.341743][ T7572] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 121.341756][ T7572] RSP: 002b:00007fb64bff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 121.341774][ T7572] RAX: ffffffffffffffda RBX: 00007fb64dfe5fa0 RCX: 00007fb64dd8f6c9 [ 121.341786][ T7572] RDX: 0000000024004000 RSI: 0000200000000f80 RDI: 0000000000000003 [ 121.341796][ T7572] RBP: 00007fb64bff6090 R08: 0000000000000000 R09: 0000000000000000 [ 121.341806][ T7572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 121.341815][ T7572] R13: 00007fb64dfe6038 R14: 00007fb64dfe5fa0 R15: 00007fffd8f05588 [ 121.341839][ T7572] [ 122.128545][ T7592] netlink: 28 bytes leftover after parsing attributes in process `syz.3.620'. [ 122.247098][ T7600] IPv6: addrconf: prefix option has invalid lifetime [ 122.449606][ T7619] netlink: 8 bytes leftover after parsing attributes in process `syz.3.628'. [ 123.686268][ T7694] netlink: 'syz.1.643': attribute type 22 has an invalid length. [ 123.907229][ T7711] FAULT_INJECTION: forcing a failure. [ 123.907229][ T7711] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 123.918614][ T7713] netlink: 16 bytes leftover after parsing attributes in process `syz.4.649'. [ 123.932295][ T7711] CPU: 0 UID: 0 PID: 7711 Comm: syz.3.647 Not tainted syzkaller #0 PREEMPT(full) [ 123.932319][ T7711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 123.932329][ T7711] Call Trace: [ 123.932336][ T7711] [ 123.932343][ T7711] dump_stack_lvl+0x189/0x250 [ 123.932371][ T7711] ? __pfx____ratelimit+0x10/0x10 [ 123.932391][ T7711] ? __pfx_dump_stack_lvl+0x10/0x10 [ 123.932414][ T7711] ? __pfx__printk+0x10/0x10 [ 123.932444][ T7711] should_fail_ex+0x414/0x560 [ 123.932474][ T7711] _copy_to_user+0x31/0xb0 [ 123.932496][ T7711] simple_read_from_buffer+0xe1/0x170 [ 123.932525][ T7711] proc_fail_nth_read+0x1b3/0x220 [ 123.932551][ T7711] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 123.932603][ T7711] ? rw_verify_area+0x2a6/0x4d0 [ 123.932624][ T7711] ? __lock_acquire+0xab9/0xd20 [ 123.932640][ T7711] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 123.932662][ T7711] vfs_read+0x200/0xa30 [ 123.932682][ T7711] ? fdget_pos+0x247/0x320 [ 123.932703][ T7711] ? __pfx___mutex_lock+0x10/0x10 [ 123.932727][ T7711] ? __pfx_vfs_read+0x10/0x10 [ 123.932751][ T7711] ? __fget_files+0x2a/0x420 [ 123.932771][ T7711] ? __fget_files+0x3a0/0x420 [ 123.932786][ T7711] ? __fget_files+0x2a/0x420 [ 123.932812][ T7711] ksys_read+0x145/0x250 [ 123.932835][ T7711] ? __pfx_ksys_read+0x10/0x10 [ 123.932860][ T7711] ? do_syscall_64+0xbe/0xfa0 [ 123.932887][ T7711] do_syscall_64+0xfa/0xfa0 [ 123.932911][ T7711] ? lockdep_hardirqs_on+0x9c/0x150 [ 123.932933][ T7711] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.932950][ T7711] ? clear_bhb_loop+0x60/0xb0 [ 123.932971][ T7711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.932988][ T7711] RIP: 0033:0x7ff3b9b8e0dc [ 123.933004][ T7711] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 123.933018][ T7711] RSP: 002b:00007ff3baaab030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 123.933037][ T7711] RAX: ffffffffffffffda RBX: 00007ff3b9de5fa0 RCX: 00007ff3b9b8e0dc [ 123.933049][ T7711] RDX: 000000000000000f RSI: 00007ff3baaab0a0 RDI: 0000000000000004 [ 123.933059][ T7711] RBP: 00007ff3baaab090 R08: 0000000000000000 R09: 0000000000000000 [ 123.933069][ T7711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 123.933078][ T7711] R13: 00007ff3b9de6038 R14: 00007ff3b9de5fa0 R15: 00007ffee45359f8 [ 123.933108][ T7711] [ 124.292602][ T7719] netlink: 112 bytes leftover after parsing attributes in process `syz.3.650'. [ 124.683464][ T7746] netem: unknown loss type 0 [ 124.715256][ T7748] netlink: 'syz.2.656': attribute type 2 has an invalid length. [ 124.723573][ T7746] netem: change failed [ 124.745163][ T7748] netlink: 'syz.2.656': attribute type 8 has an invalid length. [ 124.976224][ T7764] netlink: 'syz.2.662': attribute type 12 has an invalid length. [ 124.989439][ T7765] af_packet: tpacket_rcv: packet too big, clamped from 15 to 4294967286. macoff=82 [ 125.001230][ T7764] netlink: 'syz.2.662': attribute type 29 has an invalid length. [ 125.009668][ T7764] netlink: 'syz.2.662': attribute type 1 has an invalid length. [ 125.042071][ T7772] netlink: 'syz.4.665': attribute type 23 has an invalid length. [ 125.439803][ T7800] sctp: [Deprecated]: syz.3.675 (pid 7800) Use of struct sctp_assoc_value in delayed_ack socket option. [ 125.439803][ T7800] Use struct sctp_sack_info instead [ 125.495635][ T7804] FAULT_INJECTION: forcing a failure. [ 125.495635][ T7804] name failslab, interval 1, probability 0, space 0, times 0 [ 125.523662][ T7804] CPU: 1 UID: 0 PID: 7804 Comm: syz.2.677 Not tainted syzkaller #0 PREEMPT(full) [ 125.523687][ T7804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 125.523696][ T7804] Call Trace: [ 125.523711][ T7804] [ 125.523718][ T7804] dump_stack_lvl+0x189/0x250 [ 125.523746][ T7804] ? __pfx____ratelimit+0x10/0x10 [ 125.523769][ T7804] ? __pfx_dump_stack_lvl+0x10/0x10 [ 125.523790][ T7804] ? __pfx__printk+0x10/0x10 [ 125.523810][ T7804] ? __pfx___might_resched+0x10/0x10 [ 125.523828][ T7804] ? fs_reclaim_acquire+0x7d/0x100 [ 125.523850][ T7804] should_fail_ex+0x414/0x560 [ 125.523880][ T7804] should_failslab+0xa8/0x100 [ 125.523899][ T7804] kmem_cache_alloc_noprof+0x74/0x6e0 [ 125.523922][ T7804] ? security_inode_alloc+0x39/0x330 [ 125.523952][ T7804] security_inode_alloc+0x39/0x330 [ 125.523976][ T7804] inode_init_always_gfp+0x9ed/0xdc0 [ 125.524006][ T7804] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 125.524030][ T7804] alloc_inode+0x82/0x1b0 [ 125.524055][ T7804] new_inode+0x22/0x170 [ 125.524076][ T7804] __debugfs_create_file+0x14d/0x4f0 [ 125.524104][ T7804] debugfs_create_file_full+0x3f/0x60 [ 125.524131][ T7804] ref_tracker_dir_debugfs+0x14e/0x270 [ 125.524150][ T7804] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 125.524195][ T7804] ? trace_kmalloc+0x1f/0xd0 [ 125.524213][ T7804] ? __kvmalloc_node_noprof+0x5ed/0x910 [ 125.524242][ T7804] ? __raw_spin_lock_init+0x45/0x100 [ 125.524267][ T7804] alloc_netdev_mqs+0x272/0x11b0 [ 125.524286][ T7804] ? __pfx_ip6gre_tap_setup+0x10/0x10 [ 125.524316][ T7804] rtnl_create_link+0x31f/0xd10 [ 125.524343][ T7804] rtnl_newlink_create+0x25c/0xb00 [ 125.524366][ T7804] ? __lock_acquire+0xab9/0xd20 [ 125.524389][ T7804] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 125.524410][ T7804] ? __pfx___mutex_lock+0x10/0x10 [ 125.524452][ T7804] ? ns_capable+0x8a/0xf0 [ 125.524475][ T7804] rtnl_newlink+0x16e4/0x1c80 [ 125.524500][ T7804] ? netlink_deliver_tap+0x19c/0x1b0 [ 125.524529][ T7804] ? __pfx_rtnl_newlink+0x10/0x10 [ 125.524579][ T7804] ? kasan_quarantine_put+0xdd/0x220 [ 125.524602][ T7804] ? lockdep_hardirqs_on+0x9c/0x150 [ 125.524632][ T7804] ? nlmon_xmit+0xb0/0x100 [ 125.524650][ T7804] ? kmem_cache_free+0x19b/0x690 [ 125.524682][ T7804] ? __local_bh_enable_ip+0x12d/0x1c0 [ 125.524706][ T7804] ? lockdep_hardirqs_on+0x9c/0x150 [ 125.524730][ T7804] ? __local_bh_enable_ip+0x12d/0x1c0 [ 125.524747][ T7804] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 125.524770][ T7804] ? __dev_queue_xmit+0x27b/0x3b50 [ 125.524789][ T7804] ? __dev_queue_xmit+0x27b/0x3b50 [ 125.524806][ T7804] ? __dev_queue_xmit+0x27b/0x3b50 [ 125.524826][ T7804] ? __dev_queue_xmit+0x1d79/0x3b50 [ 125.524844][ T7804] ? kasan_save_track+0x3e/0x80 [ 125.524865][ T7804] ? __kasan_slab_alloc+0x6c/0x80 [ 125.524892][ T7804] ? __lock_acquire+0xab9/0xd20 [ 125.524936][ T7804] ? __pfx_rtnl_newlink+0x10/0x10 [ 125.524959][ T7804] rtnetlink_rcv_msg+0x7cf/0xb70 [ 125.524987][ T7804] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 125.525009][ T7804] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 125.525031][ T7804] ? ref_tracker_free+0x63a/0x7d0 [ 125.525051][ T7804] ? __asan_memcpy+0x40/0x70 [ 125.525072][ T7804] ? __pfx_ref_tracker_free+0x10/0x10 [ 125.525086][ T7804] ? __skb_clone+0x63/0x7a0 [ 125.525115][ T7804] netlink_rcv_skb+0x208/0x470 [ 125.525133][ T7804] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 125.525158][ T7804] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 125.525187][ T7804] ? netlink_deliver_tap+0x2e/0x1b0 [ 125.525213][ T7804] netlink_unicast+0x82f/0x9e0 [ 125.525250][ T7804] ? __pfx_netlink_unicast+0x10/0x10 [ 125.525275][ T7804] ? netlink_sendmsg+0x642/0xb30 [ 125.525289][ T7804] ? skb_put+0x11b/0x210 [ 125.525307][ T7804] netlink_sendmsg+0x805/0xb30 [ 125.525333][ T7804] ? __pfx_netlink_sendmsg+0x10/0x10 [ 125.525353][ T7804] ? aa_sock_msg_perm+0xf1/0x1d0 [ 125.525378][ T7804] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 125.525394][ T7804] ? __pfx_netlink_sendmsg+0x10/0x10 [ 125.525410][ T7804] __sock_sendmsg+0x21c/0x270 [ 125.525434][ T7804] ____sys_sendmsg+0x505/0x830 [ 125.525458][ T7804] ? __pfx_____sys_sendmsg+0x10/0x10 [ 125.525484][ T7804] ? import_iovec+0x74/0xa0 [ 125.525508][ T7804] ___sys_sendmsg+0x21f/0x2a0 [ 125.525529][ T7804] ? __pfx____sys_sendmsg+0x10/0x10 [ 125.525587][ T7804] ? __fget_files+0x2a/0x420 [ 125.525602][ T7804] ? __fget_files+0x3a0/0x420 [ 125.525631][ T7804] __x64_sys_sendmsg+0x19b/0x260 [ 125.525657][ T7804] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 125.525686][ T7804] ? __pfx_ksys_write+0x10/0x10 [ 125.525717][ T7804] ? do_syscall_64+0xbe/0xfa0 [ 125.525743][ T7804] do_syscall_64+0xfa/0xfa0 [ 125.525762][ T7804] ? lockdep_hardirqs_on+0x9c/0x150 [ 125.525781][ T7804] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.525797][ T7804] ? clear_bhb_loop+0x60/0xb0 [ 125.525817][ T7804] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.525832][ T7804] RIP: 0033:0x7fdfb198f6c9 [ 125.525848][ T7804] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 125.525861][ T7804] RSP: 002b:00007fdfb2849038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 125.525879][ T7804] RAX: ffffffffffffffda RBX: 00007fdfb1be5fa0 RCX: 00007fdfb198f6c9 [ 125.525892][ T7804] RDX: 0000000020040000 RSI: 0000200000000000 RDI: 0000000000000004 [ 125.525903][ T7804] RBP: 00007fdfb2849090 R08: 0000000000000000 R09: 0000000000000000 [ 125.525914][ T7804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 125.525924][ T7804] R13: 00007fdfb1be6038 R14: 00007fdfb1be5fa0 R15: 00007ffd9fc65a88 [ 125.525955][ T7804] [ 125.526018][ T7804] debugfs: out of free dentries, can not create file 'netdev@ffff888058f5e618' [ 126.216138][ T7827] netlink: 'syz.4.685': attribute type 3 has an invalid length. [ 126.224887][ T7827] __nla_validate_parse: 5 callbacks suppressed [ 126.224901][ T7827] netlink: 666 bytes leftover after parsing attributes in process `syz.4.685'. [ 126.385720][ T7835] FAULT_INJECTION: forcing a failure. [ 126.385720][ T7835] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 126.428668][ T7835] CPU: 1 UID: 0 PID: 7835 Comm: syz.4.688 Not tainted syzkaller #0 PREEMPT(full) [ 126.428693][ T7835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 126.428703][ T7835] Call Trace: [ 126.428710][ T7835] [ 126.428718][ T7835] dump_stack_lvl+0x189/0x250 [ 126.428743][ T7835] ? __pfx____ratelimit+0x10/0x10 [ 126.428765][ T7835] ? __pfx_dump_stack_lvl+0x10/0x10 [ 126.428786][ T7835] ? __pfx__printk+0x10/0x10 [ 126.428802][ T7835] ? __might_fault+0xb0/0x130 [ 126.428832][ T7835] should_fail_ex+0x414/0x560 [ 126.428860][ T7835] _copy_from_iter+0x1de/0x1790 [ 126.428884][ T7835] ? _copy_from_iter+0x24f/0x1790 [ 126.428907][ T7835] ? __pfx__copy_from_iter+0x10/0x10 [ 126.428923][ T7835] ? sock_alloc_send_pskb+0x86b/0x980 [ 126.428949][ T7835] ? __pfx__copy_from_iter+0x10/0x10 [ 126.428970][ T7835] ? page_copy_sane+0x16a/0x280 [ 126.428990][ T7835] copy_page_from_iter+0xdd/0x170 [ 126.429013][ T7835] skb_copy_datagram_from_iter+0x306/0x720 [ 126.429042][ T7835] packet_sendmsg+0x3797/0x5080 [ 126.429073][ T7835] ? aa_new_mount+0x330/0x810 [ 126.429110][ T7835] ? __pfx___might_resched+0x10/0x10 [ 126.429144][ T7835] ? __pfx_packet_sendmsg+0x10/0x10 [ 126.429166][ T7835] ? aa_sk_perm+0x81e/0x950 [ 126.429192][ T7835] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 126.429221][ T7835] ? __lock_acquire+0xab9/0xd20 [ 126.429235][ T7835] ? aa_sock_msg_perm+0xf1/0x1d0 [ 126.429259][ T7835] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 126.429274][ T7835] ? __pfx_packet_sendmsg+0x10/0x10 [ 126.429297][ T7835] __sock_sendmsg+0x21c/0x270 [ 126.429319][ T7835] ____sys_sendmsg+0x505/0x830 [ 126.429341][ T7835] ? __pfx_____sys_sendmsg+0x10/0x10 [ 126.429367][ T7835] ? import_iovec+0x74/0xa0 [ 126.429387][ T7835] ___sys_sendmsg+0x21f/0x2a0 [ 126.429406][ T7835] ? __pfx____sys_sendmsg+0x10/0x10 [ 126.429455][ T7835] ? __fget_files+0x2a/0x420 [ 126.429471][ T7835] ? __fget_files+0x3a0/0x420 [ 126.429495][ T7835] __x64_sys_sendmsg+0x19b/0x260 [ 126.429516][ T7835] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 126.429543][ T7835] ? __pfx_ksys_write+0x10/0x10 [ 126.429568][ T7835] ? do_syscall_64+0xbe/0xfa0 [ 126.429592][ T7835] do_syscall_64+0xfa/0xfa0 [ 126.429612][ T7835] ? lockdep_hardirqs_on+0x9c/0x150 [ 126.429641][ T7835] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.429656][ T7835] ? clear_bhb_loop+0x60/0xb0 [ 126.429676][ T7835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.429692][ T7835] RIP: 0033:0x7fba8d98f6c9 [ 126.429708][ T7835] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.429721][ T7835] RSP: 002b:00007fba8e755038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 126.429740][ T7835] RAX: ffffffffffffffda RBX: 00007fba8dbe5fa0 RCX: 00007fba8d98f6c9 [ 126.429753][ T7835] RDX: 0000000000000004 RSI: 00002000000000c0 RDI: 0000000000000003 [ 126.429762][ T7835] RBP: 00007fba8e755090 R08: 0000000000000000 R09: 0000000000000000 [ 126.429771][ T7835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 126.429781][ T7835] R13: 00007fba8dbe6038 R14: 00007fba8dbe5fa0 R15: 00007ffccd2b8498 [ 126.429810][ T7835] [ 126.431228][ T7840] netlink: 96 bytes leftover after parsing attributes in process `syz.2.690'. [ 126.756954][ T7837] netlink: 8 bytes leftover after parsing attributes in process `syz.1.689'. [ 127.053930][ T7848] syzkaller1: entered promiscuous mode [ 127.059439][ T7848] syzkaller1: entered allmulticast mode [ 127.202556][ T7868] netlink: 12 bytes leftover after parsing attributes in process `syz.1.701'. [ 127.208256][ T7869] netlink: 28 bytes leftover after parsing attributes in process `syz.4.700'. [ 127.254523][ T7868] IPv6: addrconf: prefix option has invalid lifetime [ 127.398360][ T7880] netlink: 32 bytes leftover after parsing attributes in process `syz.4.704'. [ 127.410410][ T7881] netlink: 8 bytes leftover after parsing attributes in process `syz.1.705'. [ 127.461997][ T7889] netlink: 16 bytes leftover after parsing attributes in process `syz.1.705'. [ 127.505484][ T7889] FAULT_INJECTION: forcing a failure. [ 127.505484][ T7889] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 127.521632][ T7891] netlink: 8 bytes leftover after parsing attributes in process `syz.4.709'. [ 127.525186][ T7889] CPU: 1 UID: 0 PID: 7889 Comm: syz.1.705 Not tainted syzkaller #0 PREEMPT(full) [ 127.525208][ T7889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 127.525218][ T7889] Call Trace: [ 127.525225][ T7889] [ 127.525232][ T7889] dump_stack_lvl+0x189/0x250 [ 127.525260][ T7889] ? __pfx____ratelimit+0x10/0x10 [ 127.525281][ T7889] ? __pfx_dump_stack_lvl+0x10/0x10 [ 127.525309][ T7889] ? __pfx__printk+0x10/0x10 [ 127.525338][ T7889] should_fail_ex+0x414/0x560 [ 127.525367][ T7889] _copy_to_user+0x31/0xb0 [ 127.525389][ T7889] simple_read_from_buffer+0xe1/0x170 [ 127.525417][ T7889] proc_fail_nth_read+0x1b3/0x220 [ 127.525441][ T7889] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 127.525464][ T7889] ? rw_verify_area+0x2a6/0x4d0 [ 127.525483][ T7889] ? __lock_acquire+0xab9/0xd20 [ 127.525498][ T7889] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 127.525519][ T7889] vfs_read+0x200/0xa30 [ 127.525538][ T7889] ? fdget_pos+0x247/0x320 [ 127.525558][ T7889] ? __pfx___mutex_lock+0x10/0x10 [ 127.525581][ T7889] ? __pfx_vfs_read+0x10/0x10 [ 127.525603][ T7889] ? __fget_files+0x2a/0x420 [ 127.525623][ T7889] ? __fget_files+0x3a0/0x420 [ 127.525637][ T7889] ? __fget_files+0x2a/0x420 [ 127.525661][ T7889] ksys_read+0x145/0x250 [ 127.525684][ T7889] ? __pfx_ksys_read+0x10/0x10 [ 127.525708][ T7889] ? do_syscall_64+0xbe/0xfa0 [ 127.525734][ T7889] do_syscall_64+0xfa/0xfa0 [ 127.525754][ T7889] ? lockdep_hardirqs_on+0x9c/0x150 [ 127.525775][ T7889] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.525791][ T7889] ? clear_bhb_loop+0x60/0xb0 [ 127.525811][ T7889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.525827][ T7889] RIP: 0033:0x7fb64dd8e0dc [ 127.525842][ T7889] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 127.525856][ T7889] RSP: 002b:00007fb64bfd5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 127.525874][ T7889] RAX: ffffffffffffffda RBX: 00007fb64dfe6090 RCX: 00007fb64dd8e0dc [ 127.525886][ T7889] RDX: 000000000000000f RSI: 00007fb64bfd50a0 RDI: 0000000000000005 [ 127.525896][ T7889] RBP: 00007fb64bfd5090 R08: 0000000000000000 R09: 0000000000000000 [ 127.525907][ T7889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 127.525917][ T7889] R13: 00007fb64dfe6128 R14: 00007fb64dfe6090 R15: 00007fffd8f05588 [ 127.525947][ T7889] [ 127.773775][ T7891] FAULT_INJECTION: forcing a failure. [ 127.773775][ T7891] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 127.790558][ T7904] IPVS: length: 82 != 24 [ 127.799155][ T7891] CPU: 0 UID: 0 PID: 7891 Comm: syz.4.709 Not tainted syzkaller #0 PREEMPT(full) [ 127.799177][ T7891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 127.799187][ T7891] Call Trace: [ 127.799194][ T7891] [ 127.799201][ T7891] dump_stack_lvl+0x189/0x250 [ 127.799227][ T7891] ? __pfx____ratelimit+0x10/0x10 [ 127.799247][ T7891] ? __pfx_dump_stack_lvl+0x10/0x10 [ 127.799263][ T7891] ? __pfx__printk+0x10/0x10 [ 127.799286][ T7891] should_fail_ex+0x414/0x560 [ 127.799309][ T7891] _copy_to_user+0x31/0xb0 [ 127.799327][ T7891] simple_read_from_buffer+0xe1/0x170 [ 127.799351][ T7891] proc_fail_nth_read+0x1b3/0x220 [ 127.799371][ T7891] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 127.799389][ T7891] ? rw_verify_area+0x2a6/0x4d0 [ 127.799405][ T7891] ? __lock_acquire+0xab9/0xd20 [ 127.799418][ T7891] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 127.799439][ T7891] vfs_read+0x200/0xa30 [ 127.799459][ T7891] ? fdget_pos+0x247/0x320 [ 127.799475][ T7891] ? __pfx___mutex_lock+0x10/0x10 [ 127.799496][ T7891] ? __pfx_vfs_read+0x10/0x10 [ 127.799524][ T7891] ? __fget_files+0x2a/0x420 [ 127.799540][ T7891] ? __fget_files+0x3a0/0x420 [ 127.799551][ T7891] ? __fget_files+0x2a/0x420 [ 127.799570][ T7891] ksys_read+0x145/0x250 [ 127.799589][ T7891] ? __pfx_ksys_read+0x10/0x10 [ 127.799608][ T7891] ? do_syscall_64+0xbe/0xfa0 [ 127.799630][ T7891] do_syscall_64+0xfa/0xfa0 [ 127.799648][ T7891] ? lockdep_hardirqs_on+0x9c/0x150 [ 127.799668][ T7891] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.799684][ T7891] ? clear_bhb_loop+0x60/0xb0 [ 127.799703][ T7891] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.799718][ T7891] RIP: 0033:0x7fba8d98e0dc [ 127.799733][ T7891] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 127.799747][ T7891] RSP: 002b:00007fba8e755030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 127.799765][ T7891] RAX: ffffffffffffffda RBX: 00007fba8dbe5fa0 RCX: 00007fba8d98e0dc [ 127.799778][ T7891] RDX: 000000000000000f RSI: 00007fba8e7550a0 RDI: 0000000000000005 [ 127.799789][ T7891] RBP: 00007fba8e755090 R08: 0000000000000000 R09: 0000000000000000 [ 127.799799][ T7891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 127.799809][ T7891] R13: 00007fba8dbe6038 R14: 00007fba8dbe5fa0 R15: 00007ffccd2b8498 [ 127.799840][ T7891] [ 128.055591][ T7907] syzkaller0: entered promiscuous mode [ 128.061085][ T7907] syzkaller0: entered allmulticast mode [ 128.119415][ T7906] netlink: 32 bytes leftover after parsing attributes in process `syz.2.715'. [ 128.403494][ T5845] Bluetooth: hci4: command 0x0405 tx timeout [ 128.490416][ T7932] delete_channel: no stack [ 128.735239][ T7951] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 128.742474][ T7951] IPv6: NLM_F_CREATE should be set when creating new route [ 128.978672][ T7968] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 129.636848][ T8008] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 129.866244][ T8024] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 129.872889][ T8024] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 129.886194][ T8027] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 129.892624][ T8027] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 129.948349][ T8030] netlink: 'syz.1.764': attribute type 4 has an invalid length. [ 130.051877][ T8032] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 130.059636][ T5884] IPVS: starting estimator thread 0... [ 130.173509][ T8036] IPVS: using max 34 ests per chain, 81600 per kthread [ 130.185913][ T8046] FAULT_INJECTION: forcing a failure. [ 130.185913][ T8046] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 130.214945][ T8046] CPU: 1 UID: 0 PID: 8046 Comm: syz.1.770 Not tainted syzkaller #0 PREEMPT(full) [ 130.214969][ T8046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 130.214979][ T8046] Call Trace: [ 130.214987][ T8046] [ 130.214994][ T8046] dump_stack_lvl+0x189/0x250 [ 130.215020][ T8046] ? __pfx____ratelimit+0x10/0x10 [ 130.215043][ T8046] ? __pfx_dump_stack_lvl+0x10/0x10 [ 130.215064][ T8046] ? __pfx__printk+0x10/0x10 [ 130.215081][ T8046] ? __might_fault+0xb0/0x130 [ 130.215113][ T8046] should_fail_ex+0x414/0x560 [ 130.215141][ T8046] _copy_from_iter+0x1de/0x1790 [ 130.215163][ T8046] ? _copy_from_iter+0x24f/0x1790 [ 130.215185][ T8046] ? __pfx__copy_from_iter+0x10/0x10 [ 130.215200][ T8046] ? sock_alloc_send_pskb+0x86b/0x980 [ 130.215217][ T8046] ? __lock_acquire+0xab9/0xd20 [ 130.215238][ T8046] ? __pfx__copy_from_iter+0x10/0x10 [ 130.215258][ T8046] ? page_copy_sane+0x16a/0x280 [ 130.215277][ T8046] copy_page_from_iter+0xdd/0x170 [ 130.215301][ T8046] skb_copy_datagram_from_iter+0x306/0x720 [ 130.215339][ T8046] tun_get_user+0x1691/0x3e90 [ 130.215381][ T8046] ? __pfx_tun_get_user+0x10/0x10 [ 130.215400][ T8046] ? __pfx___schedule+0x10/0x10 [ 130.215430][ T8046] ? __lock_acquire+0xab9/0xd20 [ 130.215452][ T8046] ? ref_tracker_alloc+0x318/0x460 [ 130.215466][ T8046] ? __lock_acquire+0xab9/0xd20 [ 130.215485][ T8046] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 130.215506][ T8046] ? tun_get+0x1c/0x2f0 [ 130.215530][ T8046] ? tun_get+0x1c/0x2f0 [ 130.215547][ T8046] ? tun_get+0x1c/0x2f0 [ 130.215568][ T8046] tun_chr_write_iter+0x113/0x200 [ 130.215589][ T8046] vfs_write+0x5c9/0xb30 [ 130.215615][ T8046] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 130.215633][ T8046] ? __pfx_vfs_write+0x10/0x10 [ 130.215663][ T8046] ? __fget_files+0x2a/0x420 [ 130.215687][ T8046] ksys_write+0x145/0x250 [ 130.215709][ T8046] ? __pfx_ksys_write+0x10/0x10 [ 130.215733][ T8046] ? do_syscall_64+0xbe/0xfa0 [ 130.215759][ T8046] do_syscall_64+0xfa/0xfa0 [ 130.215777][ T8046] ? lockdep_hardirqs_on+0x9c/0x150 [ 130.215799][ T8046] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.215816][ T8046] ? clear_bhb_loop+0x60/0xb0 [ 130.215835][ T8046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.215851][ T8046] RIP: 0033:0x7fb64dd8e17f [ 130.215865][ T8046] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 130.215877][ T8046] RSP: 002b:00007fb64bff6000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 130.215893][ T8046] RAX: ffffffffffffffda RBX: 00007fb64dfe5fa0 RCX: 00007fb64dd8e17f [ 130.215905][ T8046] RDX: 000000000000fcf0 RSI: 0000200000000340 RDI: 00000000000000c8 [ 130.215915][ T8046] RBP: 00007fb64bff6090 R08: 0000000000000000 R09: 0000000000000000 [ 130.215926][ T8046] R10: 000000000000fcf0 R11: 0000000000000293 R12: 0000000000000002 [ 130.215936][ T8046] R13: 00007fb64dfe6038 R14: 00007fb64dfe5fa0 R15: 00007fffd8f05588 [ 130.215965][ T8046] [ 130.533513][ T5845] Bluetooth: hci0: command 0x0401 tx timeout [ 130.569858][ T5838] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 130.614961][ T8056] netlink: 'syz.4.775': attribute type 22 has an invalid length. [ 130.641387][ T8058] netlink: 'syz.0.776': attribute type 1 has an invalid length. [ 130.707367][ T8058] netlink: 'syz.0.776': attribute type 1 has an invalid length. [ 131.715032][ T8111] __nla_validate_parse: 18 callbacks suppressed [ 131.715049][ T8111] netlink: 104 bytes leftover after parsing attributes in process `syz.3.793'. [ 131.779398][ T8120] netlink: 32 bytes leftover after parsing attributes in process `syz.2.797'. [ 131.815204][ T8123] netlink: 20 bytes leftover after parsing attributes in process `syz.3.798'. [ 131.824644][ T8123] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 131.917709][ T8128] netlink: 8 bytes leftover after parsing attributes in process `syz.2.800'. [ 132.041624][ T8135] netlink: 28 bytes leftover after parsing attributes in process `syz.2.802'. [ 132.099487][ T8139] FAULT_INJECTION: forcing a failure. [ 132.099487][ T8139] name failslab, interval 1, probability 0, space 0, times 0 [ 132.118653][ T8139] CPU: 0 UID: 0 PID: 8139 Comm: syz.2.803 Not tainted syzkaller #0 PREEMPT(full) [ 132.118677][ T8139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 132.118687][ T8139] Call Trace: [ 132.118694][ T8139] [ 132.118701][ T8139] dump_stack_lvl+0x189/0x250 [ 132.118729][ T8139] ? __pfx____ratelimit+0x10/0x10 [ 132.118752][ T8139] ? __pfx_dump_stack_lvl+0x10/0x10 [ 132.118773][ T8139] ? __pfx__printk+0x10/0x10 [ 132.118797][ T8139] ? __pfx___might_resched+0x10/0x10 [ 132.118815][ T8139] ? fs_reclaim_acquire+0x7d/0x100 [ 132.118838][ T8139] should_fail_ex+0x414/0x560 [ 132.118868][ T8139] should_failslab+0xa8/0x100 [ 132.118887][ T8139] __kvmalloc_node_noprof+0x158/0x910 [ 132.118912][ T8139] ? nf_hook_entries_grow+0x281/0x720 [ 132.118929][ T8139] ? __pfx___mutex_lock+0x10/0x10 [ 132.118958][ T8139] nf_hook_entries_grow+0x281/0x720 [ 132.118991][ T8139] __nf_register_net_hook+0x2c9/0x930 [ 132.119007][ T8139] ? __pfx_nft_chain_add+0x10/0x10 [ 132.119038][ T8139] nf_register_net_hook+0xda/0x190 [ 132.119057][ T8139] nf_tables_newchain+0x222c/0x2750 [ 132.119095][ T8139] ? __pfx_nf_tables_newchain+0x10/0x10 [ 132.119159][ T8139] ? nfnl_pernet+0x23/0x240 [ 132.119191][ T8139] ? __nla_parse+0x40/0x60 [ 132.119213][ T8139] nfnetlink_rcv+0x11d9/0x2590 [ 132.119273][ T8139] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 132.119314][ T8139] ? ref_tracker_free+0x63a/0x7d0 [ 132.119360][ T8139] ? __netlink_deliver_tap+0x807/0x850 [ 132.119377][ T8139] ? netlink_deliver_tap+0x2e/0x1b0 [ 132.119412][ T8139] netlink_unicast+0x82f/0x9e0 [ 132.119445][ T8139] ? __pfx_netlink_unicast+0x10/0x10 [ 132.119469][ T8139] ? netlink_sendmsg+0x642/0xb30 [ 132.119484][ T8139] ? skb_put+0x11b/0x210 [ 132.119505][ T8139] netlink_sendmsg+0x805/0xb30 [ 132.119532][ T8139] ? __pfx_netlink_sendmsg+0x10/0x10 [ 132.119551][ T8139] ? aa_sock_msg_perm+0xf1/0x1d0 [ 132.119577][ T8139] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 132.119594][ T8139] ? __pfx_netlink_sendmsg+0x10/0x10 [ 132.119612][ T8139] __sock_sendmsg+0x21c/0x270 [ 132.119637][ T8139] ____sys_sendmsg+0x505/0x830 [ 132.119662][ T8139] ? __pfx_____sys_sendmsg+0x10/0x10 [ 132.119691][ T8139] ? import_iovec+0x74/0xa0 [ 132.119715][ T8139] ___sys_sendmsg+0x21f/0x2a0 [ 132.119736][ T8139] ? __pfx____sys_sendmsg+0x10/0x10 [ 132.119794][ T8139] ? __fget_files+0x2a/0x420 [ 132.119809][ T8139] ? __fget_files+0x3a0/0x420 [ 132.119836][ T8139] __x64_sys_sendmsg+0x19b/0x260 [ 132.119857][ T8139] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 132.119886][ T8139] ? __pfx_ksys_write+0x10/0x10 [ 132.119928][ T8139] ? do_syscall_64+0xbe/0xfa0 [ 132.119955][ T8139] do_syscall_64+0xfa/0xfa0 [ 132.119976][ T8139] ? lockdep_hardirqs_on+0x9c/0x150 [ 132.119999][ T8139] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.120016][ T8139] ? clear_bhb_loop+0x60/0xb0 [ 132.120037][ T8139] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.120053][ T8139] RIP: 0033:0x7fdfb198f6c9 [ 132.120069][ T8139] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 132.120084][ T8139] RSP: 002b:00007fdfb2849038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 132.120102][ T8139] RAX: ffffffffffffffda RBX: 00007fdfb1be5fa0 RCX: 00007fdfb198f6c9 [ 132.120115][ T8139] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 132.120125][ T8139] RBP: 00007fdfb2849090 R08: 0000000000000000 R09: 0000000000000000 [ 132.120135][ T8139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 132.120151][ T8139] R13: 00007fdfb1be6038 R14: 00007fdfb1be5fa0 R15: 00007ffd9fc65a88 [ 132.120181][ T8139] [ 132.713826][ T8125] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 132.739535][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.749682][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.757566][ T8156] IPv6: addrconf: prefix option has invalid lifetime [ 132.764369][ T8156] FAULT_INJECTION: forcing a failure. [ 132.764369][ T8156] name failslab, interval 1, probability 0, space 0, times 0 [ 132.776996][ T8156] CPU: 1 UID: 0 PID: 8156 Comm: syz.0.808 Not tainted syzkaller #0 PREEMPT(full) [ 132.777018][ T8156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 132.777028][ T8156] Call Trace: [ 132.777035][ T8156] [ 132.777042][ T8156] dump_stack_lvl+0x189/0x250 [ 132.777069][ T8156] ? __pfx____ratelimit+0x10/0x10 [ 132.777091][ T8156] ? __pfx_dump_stack_lvl+0x10/0x10 [ 132.777111][ T8156] ? __pfx__printk+0x10/0x10 [ 132.777123][ T8156] ? consume_skb+0xce/0xf0 [ 132.777140][ T8156] ? netlink_broadcast_filtered+0xf55/0x1000 [ 132.777176][ T8156] should_fail_ex+0x414/0x560 [ 132.777206][ T8156] should_failslab+0xa8/0x100 [ 132.777226][ T8156] kmem_cache_alloc_node_noprof+0x77/0x710 [ 132.777249][ T8156] ? __alloc_skb+0x112/0x2d0 [ 132.777267][ T8156] ? nla_put+0xd0/0x150 [ 132.777287][ T8156] __alloc_skb+0x112/0x2d0 [ 132.777307][ T8156] ndisc_router_discovery+0x1bb8/0x3dc0 [ 132.777334][ T8156] ? ndisc_router_discovery+0x6e1/0x3dc0 [ 132.777363][ T8156] ? __pfx_ndisc_router_discovery+0x10/0x10 [ 132.777401][ T8156] ? skb_checksum+0x7c1/0x8c0 [ 132.777433][ T8156] ? ndisc_rcv+0x4b0/0x8a0 [ 132.777457][ T8156] icmpv6_rcv+0x139a/0x1c80 [ 132.777481][ T8156] ? ipv6_chk_mcast_addr+0x77f/0x860 [ 132.777507][ T8156] ? __pfx_icmpv6_rcv+0x10/0x10 [ 132.777526][ T8156] ip6_protocol_deliver_rcu+0xe0b/0x15c0 [ 132.777569][ T8156] ip6_input_finish+0x191/0x370 [ 132.777591][ T8156] NF_HOOK+0x30c/0x3a0 [ 132.777608][ T8156] ? __pfx_ip6_input_finish+0x10/0x10 [ 132.777623][ T8156] ? NF_HOOK+0x9a/0x3a0 [ 132.777637][ T8156] ? __pfx_NF_HOOK+0x10/0x10 [ 132.777654][ T8156] ? __pfx_ip6_input_finish+0x10/0x10 [ 132.777683][ T8156] ip6_input+0x16a/0x270 [ 132.777697][ T8156] ? ip6_input+0x23/0x270 [ 132.777716][ T8156] ip6_mc_input+0x655/0xb70 [ 132.777738][ T8156] ? __pfx_ip6_mc_input+0x10/0x10 [ 132.777755][ T8156] ? skb_dst+0x71/0xd0 [ 132.777771][ T8156] ? ip6_rcv_finish+0x29e/0x2e0 [ 132.777797][ T8156] NF_HOOK+0x30c/0x3a0 [ 132.777810][ T8156] ? skb_orphan+0x4f/0xd0 [ 132.777827][ T8156] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 132.777846][ T8156] ? NF_HOOK+0x9a/0x3a0 [ 132.777857][ T8156] ? __pfx_NF_HOOK+0x10/0x10 [ 132.777874][ T8156] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 132.777918][ T8156] __netif_receive_skb+0xd3/0x380 [ 132.777946][ T8156] ? netif_receive_skb+0x115/0x790 [ 132.777967][ T8156] netif_receive_skb+0x1cb/0x790 [ 132.777987][ T8156] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 132.778007][ T8156] ? __pfx_netif_receive_skb+0x10/0x10 [ 132.778035][ T8156] ? tun_rx_batched+0x160/0x730 [ 132.778058][ T8156] tun_rx_batched+0x1b9/0x730 [ 132.778076][ T8156] ? __lock_acquire+0xab9/0xd20 [ 132.778098][ T8156] ? __pfx_tun_rx_batched+0x10/0x10 [ 132.778119][ T8156] ? tun_get_user+0x272f/0x3e90 [ 132.778151][ T8156] tun_get_user+0x2b65/0x3e90 [ 132.778177][ T8156] ? tun_get_user+0x6f6/0x3e90 [ 132.778198][ T8156] ? tun_get_user+0x272f/0x3e90 [ 132.778222][ T8156] ? aa_file_perm+0x44d/0x1550 [ 132.778239][ T8156] ? __pfx_tun_get_user+0x10/0x10 [ 132.778269][ T8156] ? __lock_acquire+0xab9/0xd20 [ 132.778290][ T8156] ? ref_tracker_alloc+0x318/0x460 [ 132.778304][ T8156] ? __lock_acquire+0xab9/0xd20 [ 132.778323][ T8156] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 132.778346][ T8156] ? tun_get+0x1c/0x2f0 [ 132.778370][ T8156] ? tun_get+0x1c/0x2f0 [ 132.778388][ T8156] ? tun_get+0x1c/0x2f0 [ 132.778412][ T8156] tun_chr_write_iter+0x113/0x200 [ 132.778434][ T8156] vfs_write+0x5c9/0xb30 [ 132.778461][ T8156] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 132.778482][ T8156] ? __pfx_vfs_write+0x10/0x10 [ 132.778516][ T8156] ? __fget_files+0x2a/0x420 [ 132.778541][ T8156] ksys_write+0x145/0x250 [ 132.778564][ T8156] ? __pfx_ksys_write+0x10/0x10 [ 132.778589][ T8156] ? do_syscall_64+0xbe/0xfa0 [ 132.778616][ T8156] do_syscall_64+0xfa/0xfa0 [ 132.778635][ T8156] ? lockdep_hardirqs_on+0x9c/0x150 [ 132.778657][ T8156] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.778673][ T8156] ? clear_bhb_loop+0x60/0xb0 [ 132.778694][ T8156] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.778710][ T8156] RIP: 0033:0x7faddbf8e17f [ 132.778725][ T8156] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 132.778739][ T8156] RSP: 002b:00007faddce82000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 132.778757][ T8156] RAX: ffffffffffffffda RBX: 00007faddc1e5fa0 RCX: 00007faddbf8e17f [ 132.778769][ T8156] RDX: 000000000000034e RSI: 0000200000000780 RDI: 00000000000000c8 [ 132.778778][ T8156] RBP: 00007faddce82090 R08: 0000000000000000 R09: 0000000000000000 [ 132.778787][ T8156] R10: 000000000000034e R11: 0000000000000293 R12: 0000000000000001 [ 132.778796][ T8156] R13: 00007faddc1e6038 R14: 00007faddc1e5fa0 R15: 00007ffcc734a2e8 [ 132.778824][ T8156] [ 132.907442][ T8125] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 133.345223][ T8125] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 133.374438][ T8125] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 133.432733][ T8177] netlink: 36 bytes leftover after parsing attributes in process `syz.2.814'. [ 133.444536][ T8125] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 133.462786][ T8125] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 133.488241][ T8177] netlink: 36 bytes leftover after parsing attributes in process `syz.2.814'. [ 133.515467][ T8182] netlink: 8 bytes leftover after parsing attributes in process `syz.4.816'. [ 133.528849][ T8125] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 133.543031][ T8177] netlink: 4 bytes leftover after parsing attributes in process `syz.2.814'. [ 133.549170][ T8125] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 133.578610][ T8182] netlink: 16 bytes leftover after parsing attributes in process `syz.4.816'. [ 133.592153][ T8125] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 133.600454][ T8125] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 134.469893][ T8235] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 134.745996][ T8255] Cannot find map_set index 0 as target [ 135.800250][ T8320] FAULT_INJECTION: forcing a failure. [ 135.800250][ T8320] name failslab, interval 1, probability 0, space 0, times 0 [ 135.815188][ T8320] CPU: 0 UID: 0 PID: 8320 Comm: syz.3.849 Not tainted syzkaller #0 PREEMPT(full) [ 135.815211][ T8320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 135.815221][ T8320] Call Trace: [ 135.815229][ T8320] [ 135.815237][ T8320] dump_stack_lvl+0x189/0x250 [ 135.815263][ T8320] ? __pfx____ratelimit+0x10/0x10 [ 135.815286][ T8320] ? __pfx_dump_stack_lvl+0x10/0x10 [ 135.815308][ T8320] ? __pfx__printk+0x10/0x10 [ 135.815332][ T8320] ? __pfx___might_resched+0x10/0x10 [ 135.815355][ T8320] should_fail_ex+0x414/0x560 [ 135.815385][ T8320] should_failslab+0xa8/0x100 [ 135.815404][ T8320] __kmalloc_cache_noprof+0x6f/0x6f0 [ 135.815427][ T8320] ? nft_trans_table_add+0x56/0x430 [ 135.815455][ T8320] nft_trans_table_add+0x56/0x430 [ 135.815482][ T8320] nf_tables_newtable+0xce3/0x1890 [ 135.815522][ T8320] nfnetlink_rcv+0x11d9/0x2590 [ 135.815581][ T8320] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 135.815621][ T8320] ? ref_tracker_free+0x63a/0x7d0 [ 135.815667][ T8320] ? __netlink_deliver_tap+0x807/0x850 [ 135.815683][ T8320] ? netlink_deliver_tap+0x2e/0x1b0 [ 135.815718][ T8320] netlink_unicast+0x82f/0x9e0 [ 135.815751][ T8320] ? __pfx_netlink_unicast+0x10/0x10 [ 135.815775][ T8320] ? netlink_sendmsg+0x642/0xb30 [ 135.815790][ T8320] ? skb_put+0x11b/0x210 [ 135.815810][ T8320] netlink_sendmsg+0x805/0xb30 [ 135.815837][ T8320] ? __pfx_netlink_sendmsg+0x10/0x10 [ 135.815858][ T8320] ? aa_sock_msg_perm+0xf1/0x1d0 [ 135.815883][ T8320] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 135.815899][ T8320] ? __pfx_netlink_sendmsg+0x10/0x10 [ 135.815923][ T8320] __sock_sendmsg+0x21c/0x270 [ 135.815948][ T8320] ____sys_sendmsg+0x505/0x830 [ 135.815973][ T8320] ? __pfx_____sys_sendmsg+0x10/0x10 [ 135.816001][ T8320] ? import_iovec+0x74/0xa0 [ 135.816025][ T8320] ___sys_sendmsg+0x21f/0x2a0 [ 135.816046][ T8320] ? __pfx____sys_sendmsg+0x10/0x10 [ 135.816103][ T8320] ? __fget_files+0x2a/0x420 [ 135.816118][ T8320] ? __fget_files+0x3a0/0x420 [ 135.816145][ T8320] __x64_sys_sendmsg+0x19b/0x260 [ 135.816167][ T8320] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 135.816199][ T8320] ? __pfx_ksys_write+0x10/0x10 [ 135.816225][ T8320] ? do_syscall_64+0xbe/0xfa0 [ 135.816251][ T8320] do_syscall_64+0xfa/0xfa0 [ 135.816271][ T8320] ? lockdep_hardirqs_on+0x9c/0x150 [ 135.816293][ T8320] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.816310][ T8320] ? clear_bhb_loop+0x60/0xb0 [ 135.816331][ T8320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.816347][ T8320] RIP: 0033:0x7ff3b9b8f6c9 [ 135.816362][ T8320] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 135.816375][ T8320] RSP: 002b:00007ff3baaab038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 135.816394][ T8320] RAX: ffffffffffffffda RBX: 00007ff3b9de5fa0 RCX: 00007ff3b9b8f6c9 [ 135.816407][ T8320] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 135.816417][ T8320] RBP: 00007ff3baaab090 R08: 0000000000000000 R09: 0000000000000000 [ 135.816427][ T8320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 135.816437][ T8320] R13: 00007ff3b9de6038 R14: 00007ff3b9de5fa0 R15: 00007ffee45359f8 [ 135.816468][ T8320] [ 136.445093][ T8344] nbd: must specify an index to disconnect [ 136.654629][ T8354] netlink: 'syz.0.857': attribute type 8 has an invalid length. [ 137.656228][ T8362] __nla_validate_parse: 10 callbacks suppressed [ 137.656241][ T8362] netlink: 28 bytes leftover after parsing attributes in process `syz.0.860'. [ 137.701045][ T8364] FAULT_INJECTION: forcing a failure. [ 137.701045][ T8364] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 137.714260][ T8364] CPU: 1 UID: 0 PID: 8364 Comm: syz.0.861 Not tainted syzkaller #0 PREEMPT(full) [ 137.714282][ T8364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 137.714292][ T8364] Call Trace: [ 137.714299][ T8364] [ 137.714307][ T8364] dump_stack_lvl+0x189/0x250 [ 137.714327][ T8364] ? __pfx____ratelimit+0x10/0x10 [ 137.714341][ T8364] ? __pfx_dump_stack_lvl+0x10/0x10 [ 137.714353][ T8364] ? __pfx__printk+0x10/0x10 [ 137.714363][ T8364] ? __might_fault+0xb0/0x130 [ 137.714382][ T8364] should_fail_ex+0x414/0x560 [ 137.714399][ T8364] _copy_from_iter+0x1de/0x1790 [ 137.714413][ T8364] ? _copy_from_iter+0x24f/0x1790 [ 137.714433][ T8364] ? __pfx__copy_from_iter+0x10/0x10 [ 137.714442][ T8364] ? sock_alloc_send_pskb+0x86b/0x980 [ 137.714456][ T8364] ? __pfx__copy_from_iter+0x10/0x10 [ 137.714468][ T8364] ? page_copy_sane+0x16a/0x280 [ 137.714479][ T8364] copy_page_from_iter+0xdd/0x170 [ 137.714492][ T8364] skb_copy_datagram_from_iter+0x306/0x720 [ 137.714509][ T8364] tun_get_user+0x1691/0x3e90 [ 137.714530][ T8364] ? aa_file_perm+0x44d/0x1550 [ 137.714540][ T8364] ? __pfx_tun_get_user+0x10/0x10 [ 137.714550][ T8364] ? _parse_integer_limit+0x1ae/0x1f0 [ 137.714567][ T8364] ? __lock_acquire+0xab9/0xd20 [ 137.714581][ T8364] ? ref_tracker_alloc+0x318/0x460 [ 137.714589][ T8364] ? __lock_acquire+0xab9/0xd20 [ 137.714599][ T8364] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 137.714611][ T8364] ? tun_get+0x1c/0x2f0 [ 137.714625][ T8364] ? tun_get+0x1c/0x2f0 [ 137.714634][ T8364] ? tun_get+0x1c/0x2f0 [ 137.714647][ T8364] tun_chr_write_iter+0x113/0x200 [ 137.714659][ T8364] vfs_write+0x5c9/0xb30 [ 137.714674][ T8364] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 137.714686][ T8364] ? __pfx_vfs_write+0x10/0x10 [ 137.714703][ T8364] ? __fget_files+0x2a/0x420 [ 137.714717][ T8364] ksys_write+0x145/0x250 [ 137.714730][ T8364] ? __pfx_ksys_write+0x10/0x10 [ 137.714744][ T8364] ? do_syscall_64+0xbe/0xfa0 [ 137.714759][ T8364] do_syscall_64+0xfa/0xfa0 [ 137.714770][ T8364] ? lockdep_hardirqs_on+0x9c/0x150 [ 137.714783][ T8364] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.714793][ T8364] ? clear_bhb_loop+0x60/0xb0 [ 137.714804][ T8364] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.714813][ T8364] RIP: 0033:0x7faddbf8e17f [ 137.714822][ T8364] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 137.714831][ T8364] RSP: 002b:00007faddce82000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 137.714842][ T8364] RAX: ffffffffffffffda RBX: 00007faddc1e5fa0 RCX: 00007faddbf8e17f [ 137.714849][ T8364] RDX: 000000000000fcf0 RSI: 0000200000000340 RDI: 00000000000000c8 [ 137.714856][ T8364] RBP: 00007faddce82090 R08: 0000000000000000 R09: 0000000000000000 [ 137.714861][ T8364] R10: 000000000000fcf0 R11: 0000000000000293 R12: 0000000000000002 [ 137.714867][ T8364] R13: 00007faddc1e6038 R14: 00007faddc1e5fa0 R15: 00007ffcc734a2e8 [ 137.714884][ T8364] [ 138.230636][ T8375] team0: Port device ip6gretap1 added [ 138.267810][ T8377] netlink: 'syz.0.867': attribute type 1 has an invalid length. [ 138.291442][ T8377] bond1 (unregistering): Released all slaves [ 139.291985][ T8388] netlink: 28 bytes leftover after parsing attributes in process `syz.0.871'. [ 139.484905][ T8399] FAULT_INJECTION: forcing a failure. [ 139.484905][ T8399] name failslab, interval 1, probability 0, space 0, times 0 [ 139.497597][ T8399] CPU: 0 UID: 0 PID: 8399 Comm: syz.0.875 Not tainted syzkaller #0 PREEMPT(full) [ 139.497619][ T8399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 139.497628][ T8399] Call Trace: [ 139.497636][ T8399] [ 139.497644][ T8399] dump_stack_lvl+0x189/0x250 [ 139.497665][ T8399] ? __pfx____ratelimit+0x10/0x10 [ 139.497678][ T8399] ? __pfx_dump_stack_lvl+0x10/0x10 [ 139.497690][ T8399] ? __pfx__printk+0x10/0x10 [ 139.497704][ T8399] ? __pfx___might_resched+0x10/0x10 [ 139.497714][ T8399] ? fs_reclaim_acquire+0x7d/0x100 [ 139.497727][ T8399] should_fail_ex+0x414/0x560 [ 139.497744][ T8399] should_failslab+0xa8/0x100 [ 139.497755][ T8399] __kvmalloc_node_noprof+0x158/0x910 [ 139.497769][ T8399] ? nf_hook_entries_grow+0x281/0x720 [ 139.497779][ T8399] ? __pfx___mutex_lock+0x10/0x10 [ 139.497796][ T8399] nf_hook_entries_grow+0x281/0x720 [ 139.497814][ T8399] __nf_register_net_hook+0x2c9/0x930 [ 139.497830][ T8399] nf_register_net_hook+0xf9/0x190 [ 139.497841][ T8399] nf_tables_newchain+0x222c/0x2750 [ 139.497862][ T8399] ? __pfx_nf_tables_newchain+0x10/0x10 [ 139.497892][ T8399] ? nfnl_pernet+0x23/0x240 [ 139.497910][ T8399] ? __nla_parse+0x40/0x60 [ 139.497922][ T8399] nfnetlink_rcv+0x11d9/0x2590 [ 139.497954][ T8399] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 139.497976][ T8399] ? ref_tracker_free+0x63a/0x7d0 [ 139.498001][ T8399] ? __netlink_deliver_tap+0x807/0x850 [ 139.498011][ T8399] ? netlink_deliver_tap+0x2e/0x1b0 [ 139.498030][ T8399] netlink_unicast+0x82f/0x9e0 [ 139.498048][ T8399] ? __pfx_netlink_unicast+0x10/0x10 [ 139.498062][ T8399] ? netlink_sendmsg+0x642/0xb30 [ 139.498070][ T8399] ? skb_put+0x11b/0x210 [ 139.498081][ T8399] netlink_sendmsg+0x805/0xb30 [ 139.498096][ T8399] ? __pfx_netlink_sendmsg+0x10/0x10 [ 139.498107][ T8399] ? aa_sock_msg_perm+0xf1/0x1d0 [ 139.498122][ T8399] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 139.498131][ T8399] ? __pfx_netlink_sendmsg+0x10/0x10 [ 139.498141][ T8399] __sock_sendmsg+0x21c/0x270 [ 139.498156][ T8399] ____sys_sendmsg+0x505/0x830 [ 139.498170][ T8399] ? __pfx_____sys_sendmsg+0x10/0x10 [ 139.498185][ T8399] ? import_iovec+0x74/0xa0 [ 139.498199][ T8399] ___sys_sendmsg+0x21f/0x2a0 [ 139.498210][ T8399] ? __pfx____sys_sendmsg+0x10/0x10 [ 139.498241][ T8399] ? __fget_files+0x2a/0x420 [ 139.498249][ T8399] ? __fget_files+0x3a0/0x420 [ 139.498264][ T8399] __x64_sys_sendmsg+0x19b/0x260 [ 139.498276][ T8399] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 139.498292][ T8399] ? __pfx_ksys_write+0x10/0x10 [ 139.498307][ T8399] ? do_syscall_64+0xbe/0xfa0 [ 139.498322][ T8399] do_syscall_64+0xfa/0xfa0 [ 139.498334][ T8399] ? lockdep_hardirqs_on+0x9c/0x150 [ 139.498351][ T8399] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.498361][ T8399] ? clear_bhb_loop+0x60/0xb0 [ 139.498373][ T8399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.498382][ T8399] RIP: 0033:0x7faddbf8f6c9 [ 139.498392][ T8399] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 139.498400][ T8399] RSP: 002b:00007faddce82038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 139.498411][ T8399] RAX: ffffffffffffffda RBX: 00007faddc1e5fa0 RCX: 00007faddbf8f6c9 [ 139.498418][ T8399] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 139.498424][ T8399] RBP: 00007faddce82090 R08: 0000000000000000 R09: 0000000000000000 [ 139.498430][ T8399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 139.498435][ T8399] R13: 00007faddc1e6038 R14: 00007faddc1e5fa0 R15: 00007ffcc734a2e8 [ 139.498453][ T8399] [ 140.907477][ T8420] netlink: 28 bytes leftover after parsing attributes in process `syz.0.882'. [ 141.052191][ T8424] netlink: 16 bytes leftover after parsing attributes in process `syz.0.883'. [ 141.061276][ T8424] netlink: 6 bytes leftover after parsing attributes in process `syz.0.883'. [ 194.173004][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.179559][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.605812][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.612123][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 289.523584][ T31] INFO: task kworker/0:0:9 blocked for more than 143 seconds. [ 289.531084][ T31] Not tainted syzkaller #0 [ 289.536209][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 289.544926][ T31] task:kworker/0:0 state:D stack:22984 pid:9 tgid:9 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 289.558009][ T31] Workqueue: events rfkill_sync_work [ 289.563394][ T31] Call Trace: [ 289.566766][ T31] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 289.569704][ T31] __schedule+0x1798/0x4cc0 [ 289.574309][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 289.579814][ T31] ? __pfx___schedule+0x10/0x10 [ 289.584751][ T31] ? schedule+0x91/0x360 [ 289.589011][ T31] schedule+0x165/0x360 [ 289.593177][ T31] schedule_preempt_disabled+0x13/0x30 [ 289.598723][ T31] __mutex_lock+0x7e6/0x1350 [ 289.603326][ T31] ? __mutex_lock+0x5bb/0x1350 [ 289.638203][ T31] ? nfc_rfkill_set_block+0x50/0x2e0 [ 289.663478][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 289.668547][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 289.683996][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 289.689921][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 289.713453][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 289.719207][ T31] nfc_rfkill_set_block+0x50/0x2e0 [ 289.726886][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 289.732624][ T31] rfkill_set_block+0x1d2/0x440 [ 289.737559][ T31] rfkill_sync_work+0x114/0x200 [ 289.742400][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 289.748128][ T31] process_scheduled_works+0xae1/0x17b0 [ 289.753811][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 289.759783][ T31] worker_thread+0x8a0/0xda0 [ 289.764457][ T31] kthread+0x711/0x8a0 [ 289.768514][ T31] ? __pfx_worker_thread+0x10/0x10 [ 289.773706][ T31] ? __pfx_kthread+0x10/0x10 [ 289.778298][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 289.783528][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 289.788733][ T31] ? __pfx_kthread+0x10/0x10 [ 289.793305][ T31] ret_from_fork+0x4bc/0x870 [ 289.797950][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 289.803058][ T31] ? __switch_to_asm+0x39/0x70 [ 289.807827][ T31] ? __switch_to_asm+0x33/0x70 [ 289.812568][ T31] ? __pfx_kthread+0x10/0x10 [ 289.817213][ T31] ret_from_fork_asm+0x1a/0x30 [ 289.821972][ T31] [ 289.825112][ T31] INFO: task kworker/0:5:5892 blocked for more than 143 seconds. [ 289.832808][ T31] Not tainted syzkaller #0 [ 289.837843][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 289.846619][ T31] task:kworker/0:5 state:D stack:23240 pid:5892 tgid:5892 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 289.858701][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 289.865503][ T31] Call Trace: [ 289.868778][ T31] [ 289.871698][ T31] __schedule+0x1798/0x4cc0 [ 289.876290][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 289.881655][ T31] ? __pfx___schedule+0x10/0x10 [ 289.886541][ T31] ? schedule+0x91/0x360 [ 289.890774][ T31] schedule+0x165/0x360 [ 289.895016][ T31] schedule_preempt_disabled+0x13/0x30 [ 289.900479][ T31] __mutex_lock+0x7e6/0x1350 [ 289.905139][ T31] ? __mutex_lock+0x5bb/0x1350 [ 289.909911][ T31] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 289.916208][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 289.921220][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 289.926956][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 289.932654][ T31] rfkill_global_led_trigger_worker+0x27/0xd0 [ 289.938780][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 289.944512][ T31] process_scheduled_works+0xae1/0x17b0 [ 289.950141][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 289.956181][ T31] worker_thread+0x8a0/0xda0 [ 289.960757][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 289.967111][ T31] ? __kthread_parkme+0x7b/0x200 [ 289.972032][ T31] kthread+0x711/0x8a0 [ 289.976298][ T31] ? __pfx_worker_thread+0x10/0x10 [ 289.981404][ T31] ? __pfx_kthread+0x10/0x10 [ 289.986011][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 289.991191][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 289.996435][ T31] ? __pfx_kthread+0x10/0x10 [ 290.001006][ T31] ret_from_fork+0x4bc/0x870 [ 290.005633][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 290.010749][ T31] ? __switch_to_asm+0x39/0x70 [ 290.015563][ T31] ? __switch_to_asm+0x33/0x70 [ 290.020306][ T31] ? __pfx_kthread+0x10/0x10 [ 290.024961][ T31] ret_from_fork_asm+0x1a/0x30 [ 290.029737][ T31] [ 290.032765][ T31] INFO: task syz.2.823:8205 blocked for more than 143 seconds. [ 290.040533][ T31] Not tainted syzkaller #0 [ 290.045488][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 290.054201][ T31] task:syz.2.823 state:D stack:25960 pid:8205 tgid:8205 ppid:5828 task_flags:0x400040 flags:0x00080003 [ 290.066197][ T31] Call Trace: [ 290.069459][ T31] [ 290.072372][ T31] __schedule+0x1798/0x4cc0 [ 290.076936][ T31] ? validate_chain+0x897/0x2140 [ 290.081860][ T31] ? __lock_acquire+0xab9/0xd20 [ 290.086844][ T31] ? __pfx___schedule+0x10/0x10 [ 290.091689][ T31] ? schedule+0x91/0x360 [ 290.096084][ T31] schedule+0x165/0x360 [ 290.100327][ T31] schedule_timeout+0x9a/0x270 [ 290.105133][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 290.110494][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 290.115750][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 290.120931][ T31] ? wait_for_completion+0x267/0x5d0 [ 290.126255][ T31] wait_for_completion+0x2bf/0x5d0 [ 290.131388][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 290.137124][ T31] ? __flush_work+0xd2/0xbc0 [ 290.141718][ T31] ? __flush_work+0xd2/0xbc0 [ 290.146337][ T31] __flush_work+0x9b9/0xbc0 [ 290.150824][ T31] ? __flush_work+0xd2/0xbc0 [ 290.155456][ T31] ? __pfx___flush_work+0x10/0x10 [ 290.160462][ T31] ? __pfx_wq_barrier_func+0x10/0x10 [ 290.165918][ T31] ? __pfx___cancel_work+0x10/0x10 [ 290.171033][ T31] ? nfc_genl_device_removed+0x23c/0x330 [ 290.176722][ T31] __cancel_work_sync+0xbe/0x110 [ 290.181646][ T31] rfkill_unregister+0x92/0x220 [ 290.186508][ T31] nfc_unregister_device+0x96/0x2a0 [ 290.191685][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 290.197540][ T31] virtual_ncidev_close+0x56/0x90 [ 290.202549][ T31] __fput+0x44c/0xa70 [ 290.206555][ T31] task_work_run+0x1d4/0x260 [ 290.211130][ T31] ? __pfx_task_work_run+0x10/0x10 [ 290.216282][ T31] ? exit_to_user_mode_loop+0x40/0x130 [ 290.221725][ T31] exit_to_user_mode_loop+0xe9/0x130 [ 290.227024][ T31] do_syscall_64+0x2bd/0xfa0 [ 290.231598][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 290.236847][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.242891][ T31] ? clear_bhb_loop+0x60/0xb0 [ 290.247589][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.253551][ T31] RIP: 0033:0x7fdfb198f6c9 [ 290.257981][ T31] RSP: 002b:00007ffd9fc65be8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 290.268721][ T31] RAX: 0000000000000000 RBX: 00007fdfb1be7da0 RCX: 00007fdfb198f6c9 [ 290.276798][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 290.284816][ T31] RBP: 00007fdfb1be7da0 R08: 0000000000000174 R09: 000000169fc65edf [ 290.292780][ T31] R10: 00000000003ffc68 R11: 0000000000000246 R12: 0000000000020ec0 [ 290.300826][ T31] R13: 00007fdfb1be6090 R14: ffffffffffffffff R15: 00007ffd9fc65d00 [ 290.308925][ T31] [ 290.312051][ T31] INFO: task syz.4.841:8264 blocked for more than 144 seconds. [ 290.321273][ T31] Not tainted syzkaller #0 [ 290.326221][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 290.334932][ T31] task:syz.4.841 state:D stack:25160 pid:8264 tgid:8263 ppid:5833 task_flags:0x400140 flags:0x00080002 [ 290.346842][ T31] Call Trace: [ 290.350101][ T31] [ 290.353012][ T31] __schedule+0x1798/0x4cc0 [ 290.357580][ T31] ? __lock_acquire+0xab9/0xd20 [ 290.362413][ T31] ? __lock_acquire+0xab9/0xd20 [ 290.367284][ T31] ? __pfx___schedule+0x10/0x10 [ 290.372123][ T31] ? schedule+0x91/0x360 [ 290.376474][ T31] schedule+0x165/0x360 [ 290.380634][ T31] schedule_preempt_disabled+0x13/0x30 [ 290.386105][ T31] __mutex_lock+0x7e6/0x1350 [ 290.390683][ T31] ? __mutex_lock+0x5bb/0x1350 [ 290.395533][ T31] ? rfkill_register+0x37/0x8e0 [ 290.400386][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 290.405431][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 290.410790][ T31] ? device_initialize+0x24b/0x440 [ 290.416042][ T31] rfkill_register+0x37/0x8e0 [ 290.420710][ T31] nfc_register_device+0x14a/0x320 [ 290.425835][ T31] nci_register_device+0x87f/0x9d0 [ 290.430932][ T31] ? __pfx_nci_register_device+0x10/0x10 [ 290.436612][ T31] ? __raw_spin_lock_init+0x45/0x100 [ 290.441881][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 290.447304][ T31] virtual_ncidev_open+0x129/0x1a0 [ 290.452419][ T31] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 290.458094][ T31] misc_open+0x2d5/0x350 [ 290.462365][ T31] chrdev_open+0x4cc/0x5e0 [ 290.466811][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 290.471730][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 290.478113][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 290.483027][ T31] do_dentry_open+0x953/0x13f0 [ 290.487855][ T31] vfs_open+0x3b/0x340 [ 290.491903][ T31] ? path_openat+0x2ecd/0x3830 [ 290.496761][ T31] path_openat+0x2ee5/0x3830 [ 290.501373][ T31] ? __pfx_path_openat+0x10/0x10 [ 290.506337][ T31] do_filp_open+0x1fa/0x410 [ 290.510823][ T31] ? __lock_acquire+0xab9/0xd20 [ 290.515718][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 290.520737][ T31] ? _raw_spin_unlock+0x28/0x50 [ 290.525710][ T31] ? alloc_fd+0x64c/0x6c0 [ 290.530031][ T31] do_sys_openat2+0x121/0x1c0 [ 290.534769][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 290.539949][ T31] ? rcu_is_watching+0x15/0xb0 [ 290.544723][ T31] __x64_sys_openat+0x138/0x170 [ 290.549558][ T31] do_syscall_64+0xfa/0xfa0 [ 290.554140][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 290.559344][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.565455][ T31] ? clear_bhb_loop+0x60/0xb0 [ 290.570132][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.576070][ T31] RIP: 0033:0x7fba8d98f6c9 [ 290.580465][ T31] RSP: 002b:00007fba8e755038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 290.588887][ T31] RAX: ffffffffffffffda RBX: 00007fba8dbe5fa0 RCX: 00007fba8d98f6c9 [ 290.596903][ T31] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 290.604919][ T31] RBP: 00007fba8da11f91 R08: 0000000000000000 R09: 0000000000000000 [ 290.612890][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 290.620962][ T31] R13: 00007fba8dbe6038 R14: 00007fba8dbe5fa0 R15: 00007ffccd2b8498 [ 290.628986][ T31] [ 290.632011][ T31] INFO: task syz.1.843:8283 blocked for more than 144 seconds. [ 290.639699][ T31] Not tainted syzkaller #0 [ 290.644787][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 290.653778][ T31] task:syz.1.843 state:D stack:25736 pid:8283 tgid:8281 ppid:5827 task_flags:0x400140 flags:0x00080002 [ 290.665734][ T31] Call Trace: [ 290.668994][ T31] [ 290.671904][ T31] __schedule+0x1798/0x4cc0 [ 290.676478][ T31] ? security_file_open+0xb1/0x270 [ 290.681577][ T31] ? __lock_acquire+0xab9/0xd20 [ 290.686470][ T31] ? __lock_acquire+0xab9/0xd20 [ 290.691299][ T31] ? __pfx___schedule+0x10/0x10 [ 290.696222][ T31] ? schedule+0x91/0x360 [ 290.700459][ T31] schedule+0x165/0x360 [ 290.704666][ T31] schedule_preempt_disabled+0x13/0x30 [ 290.710105][ T31] __mutex_lock+0x7e6/0x1350 [ 290.714700][ T31] ? __mutex_lock+0x5bb/0x1350 [ 290.719450][ T31] ? misc_open+0x51/0x350 [ 290.723990][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 290.729059][ T31] misc_open+0x51/0x350 [ 290.733212][ T31] chrdev_open+0x4cc/0x5e0 [ 290.737642][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 290.742566][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 290.749120][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 290.754086][ T31] do_dentry_open+0x953/0x13f0 [ 290.758838][ T31] vfs_open+0x3b/0x340 [ 290.762879][ T31] ? path_openat+0x2ecd/0x3830 [ 290.767670][ T31] path_openat+0x2ee5/0x3830 [ 290.772278][ T31] ? __pfx_path_openat+0x10/0x10 [ 290.777332][ T31] do_filp_open+0x1fa/0x410 [ 290.781842][ T31] ? __lock_acquire+0xab9/0xd20 [ 290.786804][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 290.791834][ T31] ? _raw_spin_unlock+0x28/0x50 [ 290.796686][ T31] ? alloc_fd+0x64c/0x6c0 [ 290.801002][ T31] do_sys_openat2+0x121/0x1c0 [ 290.805817][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 290.811000][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 290.816240][ T31] __x64_sys_openat+0x138/0x170 [ 290.821100][ T31] do_syscall_64+0xfa/0xfa0 [ 290.825672][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 290.830858][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.836920][ T31] ? clear_bhb_loop+0x60/0xb0 [ 290.841577][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.847537][ T31] RIP: 0033:0x7fb64dd8f6c9 [ 290.851932][ T31] RSP: 002b:00007fb64bff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 290.860445][ T31] RAX: ffffffffffffffda RBX: 00007fb64dfe5fa0 RCX: 00007fb64dd8f6c9 [ 290.868462][ T31] RDX: 0000000000000000 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 290.876447][ T31] RBP: 00007fb64de11f91 R08: 0000000000000000 R09: 0000000000000000 [ 290.884520][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 290.892484][ T31] R13: 00007fb64dfe6038 R14: 00007fb64dfe5fa0 R15: 00007fffd8f05588 [ 290.900505][ T31] [ 290.903655][ T31] INFO: task syz.3.851:8326 blocked for more than 144 seconds. [ 290.911195][ T31] Not tainted syzkaller #0 [ 290.916204][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 290.924951][ T31] task:syz.3.851 state:D stack:28008 pid:8326 tgid:8324 ppid:5836 task_flags:0x400140 flags:0x00080002 [ 290.936901][ T31] Call Trace: [ 290.940193][ T31] [ 290.943111][ T31] __schedule+0x1798/0x4cc0 [ 290.947683][ T31] ? security_file_open+0xb1/0x270 [ 290.952785][ T31] ? __lock_acquire+0xab9/0xd20 [ 290.957745][ T31] ? __lock_acquire+0xab9/0xd20 [ 290.962579][ T31] ? __pfx___schedule+0x10/0x10 [ 290.967593][ T31] ? schedule+0x91/0x360 [ 290.971827][ T31] schedule+0x165/0x360 [ 290.975987][ T31] schedule_preempt_disabled+0x13/0x30 [ 290.981426][ T31] __mutex_lock+0x7e6/0x1350 [ 290.986093][ T31] ? __mutex_lock+0x5bb/0x1350 [ 290.990848][ T31] ? misc_open+0x51/0x350 [ 290.995198][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 291.000216][ T31] misc_open+0x51/0x350 [ 291.004435][ T31] chrdev_open+0x4cc/0x5e0 [ 291.008840][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 291.013790][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 291.020101][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 291.025092][ T31] do_dentry_open+0x953/0x13f0 [ 291.029847][ T31] vfs_open+0x3b/0x340 [ 291.033910][ T31] ? path_openat+0x2ecd/0x3830 [ 291.038657][ T31] path_openat+0x2ee5/0x3830 [ 291.043243][ T31] ? __pfx_path_openat+0x10/0x10 [ 291.048254][ T31] do_filp_open+0x1fa/0x410 [ 291.052736][ T31] ? __lock_acquire+0xab9/0xd20 [ 291.057626][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 291.062663][ T31] ? _raw_spin_unlock+0x28/0x50 [ 291.067631][ T31] ? alloc_fd+0x64c/0x6c0 [ 291.071978][ T31] do_sys_openat2+0x121/0x1c0 [ 291.076798][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 291.081991][ T31] ? rcu_is_watching+0x15/0xb0 [ 291.086814][ T31] __x64_sys_openat+0x138/0x170 [ 291.091652][ T31] do_syscall_64+0xfa/0xfa0 [ 291.096173][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 291.102324][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.108467][ T31] ? clear_bhb_loop+0x60/0xb0 [ 291.113132][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.119047][ T31] RIP: 0033:0x7ff3b9b8f6c9 [ 291.123520][ T31] RSP: 002b:00007ff3baaab038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 291.131916][ T31] RAX: ffffffffffffffda RBX: 00007ff3b9de5fa0 RCX: 00007ff3b9b8f6c9 [ 291.140033][ T31] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 291.148109][ T31] RBP: 00007ff3b9c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 291.156114][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 291.164181][ T31] R13: 00007ff3b9de6038 R14: 00007ff3b9de5fa0 R15: 00007ffee45359f8 [ 291.172166][ T31] [ 291.175236][ T31] INFO: task syz.3.851:8330 blocked for more than 145 seconds. [ 291.182767][ T31] Not tainted syzkaller #0 [ 291.188042][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 291.196722][ T31] task:syz.3.851 state:D stack:27656 pid:8330 tgid:8324 ppid:5836 task_flags:0x400140 flags:0x00080002 [ 291.208731][ T31] Call Trace: [ 291.211993][ T31] [ 291.214948][ T31] __schedule+0x1798/0x4cc0 [ 291.219466][ T31] ? security_file_open+0xb1/0x270 [ 291.224663][ T31] ? __lock_acquire+0xab9/0xd20 [ 291.229500][ T31] ? __lock_acquire+0xab9/0xd20 [ 291.234369][ T31] ? __pfx___schedule+0x10/0x10 [ 291.239214][ T31] ? schedule+0x91/0x360 [ 291.243516][ T31] schedule+0x165/0x360 [ 291.247656][ T31] schedule_preempt_disabled+0x13/0x30 [ 291.253091][ T31] __mutex_lock+0x7e6/0x1350 [ 291.257682][ T31] ? __mutex_lock+0x5bb/0x1350 [ 291.262428][ T31] ? misc_open+0x51/0x350 [ 291.266800][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 291.271817][ T31] misc_open+0x51/0x350 [ 291.275981][ T31] chrdev_open+0x4cc/0x5e0 [ 291.280376][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 291.285512][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 291.291829][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 291.296884][ T31] do_dentry_open+0x953/0x13f0 [ 291.301640][ T31] vfs_open+0x3b/0x340 [ 291.305766][ T31] ? path_openat+0x2ecd/0x3830 [ 291.310634][ T31] path_openat+0x2ee5/0x3830 [ 291.315249][ T31] ? __pfx_path_openat+0x10/0x10 [ 291.320178][ T31] do_filp_open+0x1fa/0x410 [ 291.324771][ T31] ? __lock_acquire+0xab9/0xd20 [ 291.329616][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 291.334660][ T31] ? _raw_spin_unlock+0x28/0x50 [ 291.339492][ T31] ? alloc_fd+0x64c/0x6c0 [ 291.343882][ T31] do_sys_openat2+0x121/0x1c0 [ 291.348544][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 291.353743][ T31] ? rcu_is_watching+0x15/0xb0 [ 291.358485][ T31] __x64_sys_openat+0x138/0x170 [ 291.363313][ T31] do_syscall_64+0xfa/0xfa0 [ 291.367895][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 291.373074][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.379188][ T31] ? clear_bhb_loop+0x60/0xb0 [ 291.383938][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.389812][ T31] RIP: 0033:0x7ff3b9b8f6c9 [ 291.394252][ T31] RSP: 002b:00007ff3baa8a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 291.402670][ T31] RAX: ffffffffffffffda RBX: 00007ff3b9de6090 RCX: 00007ff3b9b8f6c9 [ 291.410896][ T31] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 291.418893][ T31] RBP: 00007ff3b9c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 291.426920][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 291.434911][ T31] R13: 00007ff3b9de6128 R14: 00007ff3b9de6090 R15: 00007ffee45359f8 [ 291.442875][ T31] [ 291.447302][ T31] INFO: task syz.3.851:8338 blocked for more than 145 seconds. [ 291.455083][ T31] Not tainted syzkaller #0 [ 291.460031][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 291.468701][ T31] task:syz.3.851 state:D stack:27112 pid:8338 tgid:8324 ppid:5836 task_flags:0x400140 flags:0x00080002 [ 291.480598][ T31] Call Trace: [ 291.483881][ T31] [ 291.486797][ T31] __schedule+0x1798/0x4cc0 [ 291.491288][ T31] ? security_file_open+0xb1/0x270 [ 291.496469][ T31] ? __lock_acquire+0xab9/0xd20 [ 291.501326][ T31] ? __lock_acquire+0xab9/0xd20 [ 291.506579][ T31] ? __pfx___schedule+0x10/0x10 [ 291.511422][ T31] ? schedule+0x91/0x360 [ 291.515818][ T31] schedule+0x165/0x360 [ 291.519963][ T31] schedule_preempt_disabled+0x13/0x30 [ 291.525462][ T31] __mutex_lock+0x7e6/0x1350 [ 291.530084][ T31] ? __mutex_lock+0x5bb/0x1350 [ 291.534984][ T31] ? misc_open+0x51/0x350 [ 291.539323][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 291.544382][ T31] misc_open+0x51/0x350 [ 291.548524][ T31] chrdev_open+0x4cc/0x5e0 [ 291.552927][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 291.557955][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 291.564311][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 291.569228][ T31] do_dentry_open+0x953/0x13f0 [ 291.574091][ T31] vfs_open+0x3b/0x340 [ 291.578148][ T31] ? path_openat+0x2ecd/0x3830 [ 291.582893][ T31] path_openat+0x2ee5/0x3830 [ 291.587550][ T31] ? __pfx_path_openat+0x10/0x10 [ 291.592501][ T31] do_filp_open+0x1fa/0x410 [ 291.597069][ T31] ? __lock_acquire+0xab9/0xd20 [ 291.601901][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 291.606990][ T31] ? _raw_spin_unlock+0x28/0x50 [ 291.611824][ T31] ? alloc_fd+0x64c/0x6c0 [ 291.616215][ T31] do_sys_openat2+0x121/0x1c0 [ 291.620877][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 291.626200][ T31] ? rcu_is_watching+0x15/0xb0 [ 291.630954][ T31] __x64_sys_openat+0x138/0x170 [ 291.635858][ T31] do_syscall_64+0xfa/0xfa0 [ 291.640347][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 291.645574][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.651710][ T31] ? clear_bhb_loop+0x60/0xb0 [ 291.656443][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.662315][ T31] RIP: 0033:0x7ff3b9b8f6c9 [ 291.666750][ T31] RSP: 002b:00007ff3baa69038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 291.675246][ T31] RAX: ffffffffffffffda RBX: 00007ff3b9de6180 RCX: 00007ff3b9b8f6c9 [ 291.683211][ T31] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 291.693529][ T31] RBP: 00007ff3b9c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 291.701515][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 291.709492][ T31] R13: 00007ff3b9de6218 R14: 00007ff3b9de6180 R15: 00007ffee45359f8 [ 291.717510][ T31] [ 291.720537][ T31] INFO: task syz.0.883:8422 blocked for more than 145 seconds. [ 291.728150][ T31] Not tainted syzkaller #0 [ 291.733159][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 291.741972][ T31] task:syz.0.883 state:D stack:25672 pid:8422 tgid:8421 ppid:5839 task_flags:0x400140 flags:0x00080002 [ 291.753938][ T31] Call Trace: [ 291.757215][ T31] [ 291.760141][ T31] __schedule+0x1798/0x4cc0 [ 291.764770][ T31] ? security_file_open+0xb1/0x270 [ 291.769895][ T31] ? __lock_acquire+0xab9/0xd20 [ 291.774806][ T31] ? __lock_acquire+0xab9/0xd20 [ 291.779644][ T31] ? __pfx___schedule+0x10/0x10 [ 291.784518][ T31] ? schedule+0x91/0x360 [ 291.788744][ T31] schedule+0x165/0x360 [ 291.792894][ T31] schedule_preempt_disabled+0x13/0x30 [ 291.798347][ T31] __mutex_lock+0x7e6/0x1350 [ 291.802922][ T31] ? __mutex_lock+0x5bb/0x1350 [ 291.807684][ T31] ? misc_open+0x51/0x350 [ 291.811993][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 291.817057][ T31] misc_open+0x51/0x350 [ 291.821205][ T31] chrdev_open+0x4cc/0x5e0 [ 291.825625][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 291.830544][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 291.836895][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 291.841833][ T31] do_dentry_open+0x953/0x13f0 [ 291.846644][ T31] vfs_open+0x3b/0x340 [ 291.850720][ T31] ? path_openat+0x2ecd/0x3830 [ 291.855496][ T31] path_openat+0x2ee5/0x3830 [ 291.860114][ T31] ? __pfx_path_openat+0x10/0x10 [ 291.865072][ T31] do_filp_open+0x1fa/0x410 [ 291.869559][ T31] ? __lock_acquire+0xab9/0xd20 [ 291.874412][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 291.879440][ T31] ? _raw_spin_unlock+0x28/0x50 [ 291.884297][ T31] ? alloc_fd+0x64c/0x6c0 [ 291.888629][ T31] do_sys_openat2+0x121/0x1c0 [ 291.893296][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 291.898515][ T31] ? __pfx___se_sys_futex+0x10/0x10 [ 291.903725][ T31] ? fput+0xa0/0xd0 [ 291.907515][ T31] __x64_sys_openat+0x138/0x170 [ 291.912359][ T31] do_syscall_64+0xfa/0xfa0 [ 291.916868][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 291.922052][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.928170][ T31] ? clear_bhb_loop+0x60/0xb0 [ 291.932850][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.938748][ T31] RIP: 0033:0x7faddbf8f6c9 [ 291.943146][ T31] RSP: 002b:00007faddce82038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 291.951591][ T31] RAX: ffffffffffffffda RBX: 00007faddc1e5fa0 RCX: 00007faddbf8f6c9 [ 291.959586][ T31] RDX: 0000000000048241 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 291.967603][ T31] RBP: 00007faddc011f91 R08: 0000000000000000 R09: 0000000000000000 [ 291.975606][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 291.983603][ T31] R13: 00007faddc1e6038 R14: 00007faddc1e5fa0 R15: 00007ffcc734a2e8 [ 291.991598][ T31] [ 291.994670][ T31] [ 291.994670][ T31] Showing all locks held in the system: [ 292.002361][ T31] 4 locks held by kworker/0:0/9: [ 292.007301][ T31] #0: ffff88801a055948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 292.018369][ T31] #1: ffffc900000e7ba0 ((work_completion)(&rfkill->sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 292.030746][ T31] #2: ffffffff8f5ab6a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_sync_work+0x2e/0x200 [ 292.040750][ T31] #3: ffff88807da11100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0 [ 292.050411][ T31] 1 lock held by khungtaskd/31: [ 292.055263][ T31] #0: ffffffff8df3d6a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 292.065127][ T31] 2 locks held by getty/5592: [ 292.069780][ T31] #0: ffff888033ab60a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 292.079703][ T31] #1: ffffc900036c32f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 292.089881][ T31] 3 locks held by kworker/0:5/5892: [ 292.095099][ T31] #0: ffff88801a055948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 292.106091][ T31] #1: ffffc90004d1fba0 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 292.119571][ T31] #2: ffffffff8f5ab6a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 292.130880][ T31] 1 lock held by syz.2.823/8205: [ 292.135828][ T31] #0: ffff88807da11100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0 [ 292.145564][ T31] 3 locks held by syz.4.841/8264: [ 292.150561][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 292.158986][ T31] #1: ffff8880597ec100 (&dev->mutex){....}-{4:4}, at: nfc_register_device+0xa1/0x320 [ 292.169459][ T31] #2: ffffffff8f5ab6a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 292.179431][ T31] 1 lock held by syz.1.843/8283: [ 292.184380][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 292.192836][ T31] 1 lock held by syz.3.851/8326: [ 292.197780][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 292.206226][ T31] 1 lock held by syz.3.851/8330: [ 292.211139][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 292.219571][ T31] 1 lock held by syz.3.851/8338: [ 292.224512][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 292.232959][ T31] 1 lock held by syz.0.883/8422: [ 292.237882][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 292.246389][ T31] 1 lock held by syz-executor/8427: [ 292.251574][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 292.260008][ T31] 1 lock held by syz-executor/8428: [ 292.265209][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 292.273658][ T31] 1 lock held by syz-executor/8431: [ 292.278851][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 292.287329][ T31] 1 lock held by syz-executor/8432: [ 292.292517][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 292.300993][ T31] 1 lock held by syz-executor/8434: [ 292.306191][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 292.314636][ T31] 1 lock held by syz-executor/8441: [ 292.319806][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 292.328237][ T31] 1 lock held by syz-executor/8442: [ 292.333465][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 292.341912][ T31] 1 lock held by syz-executor/8445: [ 292.347106][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 292.355535][ T31] 1 lock held by syz-executor/8446: [ 292.360707][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 292.369144][ T31] 1 lock held by syz-executor/8448: [ 292.374332][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 292.382752][ T31] 1 lock held by syz-executor/8454: [ 292.387957][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 292.396401][ T31] 1 lock held by syz-executor/8456: [ 292.401613][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 292.410489][ T31] 1 lock held by syz-executor/8459: [ 292.415698][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 292.424148][ T31] 1 lock held by syz-executor/8460: [ 292.429332][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 292.437766][ T31] 1 lock held by syz-executor/8462: [ 292.442937][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 292.451384][ T31] [ 292.453704][ T31] ============================================= [ 292.453704][ T31] [ 292.462097][ T31] NMI backtrace for cpu 1 [ 292.462110][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 292.462120][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 292.462126][ T31] Call Trace: [ 292.462131][ T31] [ 292.462136][ T31] dump_stack_lvl+0x189/0x250 [ 292.462153][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 292.462165][ T31] ? __pfx__printk+0x10/0x10 [ 292.462182][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 292.462195][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 292.462206][ T31] ? __pfx__printk+0x10/0x10 [ 292.462218][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 292.462234][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 292.462245][ T31] watchdog+0xf60/0xfa0 [ 292.462258][ T31] ? watchdog+0x1e2/0xfa0 [ 292.462270][ T31] kthread+0x711/0x8a0 [ 292.462284][ T31] ? __pfx_watchdog+0x10/0x10 [ 292.462293][ T31] ? __pfx_kthread+0x10/0x10 [ 292.462306][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 292.462317][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 292.462329][ T31] ? __pfx_kthread+0x10/0x10 [ 292.462341][ T31] ret_from_fork+0x4bc/0x870 [ 292.462352][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 292.462366][ T31] ? __switch_to_asm+0x39/0x70 [ 292.462373][ T31] ? __switch_to_asm+0x33/0x70 [ 292.462380][ T31] ? __pfx_kthread+0x10/0x10 [ 292.462392][ T31] ret_from_fork_asm+0x1a/0x30 [ 292.462408][ T31] [ 292.462412][ T31] Sending NMI from CPU 1 to CPUs 0: [ 292.606785][ C0] NMI backtrace for cpu 0 [ 292.606813][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 292.606830][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 292.606838][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 292.606863][ C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d f3 c0 21 00 f3 0f 1e fa fb f4 c8 e6 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 292.606876][ C0] RSP: 0018:ffffffff8dc07d80 EFLAGS: 000002c6 [ 292.606890][ C0] RAX: c6c60fd1d96e5300 RBX: ffffffff81967b47 RCX: c6c60fd1d96e5300 [ 292.606901][ C0] RDX: 0000000000000001 RSI: ffffffff8d70e04f RDI: ffffffff8bbf0760 [ 292.606911][ C0] RBP: ffffffff8dc07ea8 R08: ffff8880b8832fdb R09: 1ffff110171065fb [ 292.606922][ C0] R10: dffffc0000000000 R11: ffffed10171065fc R12: ffffffff8f7ce870 [ 292.606933][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1b92a40 [ 292.606943][ C0] FS: 0000000000000000(0000) GS:ffff88812613b000(0000) knlGS:0000000000000000 [ 292.606955][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 292.606965][ C0] CR2: 00007ffc0560c0d8 CR3: 000000000dd38000 CR4: 00000000003526f0 [ 292.606978][ C0] Call Trace: [ 292.606984][ C0] [ 292.606990][ C0] default_idle+0x13/0x20 [ 292.607003][ C0] default_idle_call+0x73/0xb0 [ 292.607017][ C0] do_idle+0x1e7/0x510 [ 292.607036][ C0] ? __pfx_do_idle+0x10/0x10 [ 292.607051][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 292.607069][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 292.607086][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 292.607107][ C0] cpu_startup_entry+0x44/0x60 [ 292.607121][ C0] rest_init+0x2de/0x300 [ 292.607136][ C0] start_kernel+0x3ae/0x410 [ 292.607153][ C0] x86_64_start_reservations+0x24/0x30 [ 292.607171][ C0] x86_64_start_kernel+0x143/0x1c0 [ 292.607189][ C0] common_startup_64+0x13e/0x147 [ 292.607216][ C0]