last executing test programs: 3.34784243s ago: executing program 2 (id=6055): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x4, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 2.467693852s ago: executing program 2 (id=6076): r0 = socket$unix(0x1, 0x1, 0x0) ioctl$OCFS2_IOC_RESVSP64(r0, 0x4030582a, &(0x7f00000001c0)={0x2, 0x2, 0x7, 0x100000000ad2, 0x4, 0x3}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x100) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) close(r5) setsockopt$inet_int(r6, 0x0, 0x8, &(0x7f0000000200)=0x10000, 0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x84800, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="af75355d1696"}) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0xffff, 0x5}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x5, 0x7, 0x10000000, 0x1, 0x4}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) poll(&(0x7f0000002000)=[{r2, 0x93d4}], 0x1, 0x9) socket$kcm(0x11, 0x3, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x7c, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0xfff3, 0xc}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4c, 0x2, [@TCA_CGROUP_EMATCHES={0x3d, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x3c, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x38, 0x1, 0x0, 0x0, {{0xe38, 0x9, 0x4}, [@TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}, @TCA_EM_IPT_MATCH_DATA={0x7, 0x5, "4b15a3"}, @TCA_EM_IPT_MATCH_REVISION={0x5}]}}]}]}]}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x84}, 0x40010) r12 = socket(0x2, 0x3, 0xff) connect$inet(r12, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) sendmsg$key(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x18}}, 0x4020) 2.005244479s ago: executing program 2 (id=6081): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r3) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@delchain={0xb0, 0x64, 0xf31, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x2}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x80, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x64, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x3c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0xc}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0xfffe}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x7}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x24, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x80}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0xc0}]}]}, @TCA_FLOWER_KEY_MPLS_BOS={0x5}, @TCA_FLOWER_KEY_ENC_IP_TTL={0x5, 0x52, 0x5}, @TCA_FLOWER_KEY_IP_TOS_MASK={0x5, 0x4a, 0xfb}]}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x40054}, 0x4804) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xb, 0x9}, {0xfff3, 0xc}, {0xffe0, 0x6}}, [@TCA_RATE={0x6, 0x5, {0x7f, 0xc}}, @qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000840}, 0x0) 1.816864214s ago: executing program 2 (id=6084): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(0x0, r0) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000740)={0x24, r1, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_ENABLED={0x5, 0x29, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) listen(r5, 0x0) r6 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @remote}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) sendmsg$kcm(r6, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e21, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x20000000) sendmsg$kcm(r6, &(0x7f0000000100)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x23}}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="1800000000000000100100000100000051d833483cc75d51900000000000000004000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319e2e66d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, 0x0) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r8 = accept(r5, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x2400c840}, 0x0) connect$unix(r8, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) 1.802881076s ago: executing program 3 (id=6085): socketpair$unix(0x1, 0x1, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, 0x0, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) r1 = socket(0x1, 0x1, 0x1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f0000000700)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010029bd7000fbdbdf25010000000c000200d5400000000000001c0007800c000180", @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) 1.782948187s ago: executing program 4 (id=6086): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x4, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 1.651270706s ago: executing program 3 (id=6088): r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x10, 0x0, &(0x7f00000004c0)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="3400000040000100fcff0700040000000100000007004880100001800c00108004000880040008800c0002"], 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SPLIT(r1, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="f8000000", @ANYRES16=r2, @ANYBLOB="00082abd7000fddbdf25090000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000300000000000800090000000000080001007063690011000200303030303a30303a31302e300000000008000300020000000800090008000000080001007063690011000200303030303a30303a31702e300000000008000300020000000800090005000000080001007063690011000200303030303a30303a31302e3000000000080003000000000008000900070000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000300010000000800090005000000"], 0xf8}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x8044) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ABORT_SCAN(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="379511000000000003e77200000708000300", @ANYRES32=r9], 0x1c}}, 0x0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, r4, 0x100, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x707f, 0x5b}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4008080}, 0x4040) socket$xdp(0x2c, 0x3, 0x0) (async) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x10, 0x0, &(0x7f00000004c0)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="3400000040000100fcff0700040000000100000007004880100001800c00108004000880040008800c0002"], 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$DEVLINK_CMD_PORT_SPLIT(r1, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="f8000000", @ANYRES16=r2, @ANYBLOB="00082abd7000fddbdf25090000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000300000000000800090000000000080001007063690011000200303030303a30303a31302e300000000008000300020000000800090008000000080001007063690011000200303030303a30303a31702e300000000008000300020000000800090005000000080001007063690011000200303030303a30303a31302e3000000000080003000000000008000900070000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000300010000000800090005000000"], 0xf8}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x8044) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_ABORT_SCAN(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="379511000000000003e77200000708000300", @ANYRES32=r9], 0x1c}}, 0x0) (async) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, r4, 0x100, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x707f, 0x5b}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4008080}, 0x4040) (async) 1.513097116s ago: executing program 3 (id=6090): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f00000000c0)={0x4, 0x747, 0x3, 0x4, 0xfb, 0x8, 0x101}, 0xc) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000400)=ANY=[@ANYBLOB="900000001000030400ddff00fbdbdf2500000000", @ANYBLOB="0011000000000000540034801400350064766d727030000000000000000000001400350073797a6b616c6c657231000000000000140035006261746164765f736c6176655f310000140035007369743000000000000000000000000008001c00", @ANYBLOB="04001400080013"], 0x90}, 0x1, 0xba01}, 0x810) sendmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000001c80)=[{&(0x7f0000000180)="fbecb183a9cffc0ee5d1d434a494db587414a63ef7fed2175c894997b4760cede524e40ae9a937434e1756f7b60d81a7da87fa2614c509b671a7bf8557275e807e7af1c65c1860dcd7b32c", 0x4b}, {&(0x7f0000000340)="36da21ba0be270a73a76b0b2c1b08b0aa7b634bde7b42b05fff77a1bd375fa61812e0a3df2dc7fea643e6cf5ef23233fe2b752a206d9be7865e37ef0b528cde3720d51a67f20caab530191c4", 0x4c}, {&(0x7f00000006c0)="8b3e97e66c34520fa8e2a370f6233f47fa505952ceaf6714d4030cf71b06d9c227e92f4a323b6ebf087032d4498fdc03e86e62f25a610270568c2c7147975019b3fa481fe21ab4ed149068e364b45ddd86efa6b28b42f1977be3937c8b1edf121d5defd4180ca936d2169e6734570a3e713fb30c4e18c13d66b17b808cad9e8c9af357cb504fbec0bf4cb07af24b4d49049ad0b80472ce7e307a5b4892afbe4edb5ec566ae52aac0ea58afb19188f9161d0a12fba2e42b9cdbeec498cebe3698e1bdd29ebfbe8237fc0e", 0xca}, {&(0x7f00000007c0)="259c1e0da026f141b18e0c546887d455a791e379a60024c5ad2fbb3662f2ee18c44653c3c3e3b7f6056f06544e49d92544e11e70c7", 0x35}, {&(0x7f0000000800)="f1f90ee8d3a476eafbc79faa69937cde26a691e03e6ceed21bf980b72b9f21463b3821266ad276f81429b7f50c09b18445106c2a77a8787e813e50cb0fdc2d4b67f07fed507e5fc76d", 0x49}, {&(0x7f0000000c00)="7f25cd96a5e8de01c3720eadae70abcf606a39a66c714306f2be45b395680cf663327f5b1f590a4b9273770c61e75a67b9211a387cd0646ff53d9b880502b50a83ee5ac90fe95bcd39f716f625b634d40ac1ab36169915060ba4fac920e64086d634feeec74c4568caa325b7bf381dff6805ffad258dfb99ead4956d0363cb743a31e744fdb58109136bb61ecdd9122bfa854bd64b9b374498b79f2b4c5d9f642180871eecc1f4c4edd399ae9d1b6db243415da8bd6188673025fc05818f2e544ae9", 0xc2}], 0x6}}], 0x1, 0x20000000) r2 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_control(r2, &(0x7f0000000100)='connect aa:aa:aa:aa:aa:11 1', 0x1b) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@ipv4_newrule={0x28, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x4, 0xfd, 0x0, 0x0, 0x1, 0xc}, [@FRA_GENERIC_POLICY=@FRA_UID_RANGE={0xc, 0x14, {r5}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40488d4}, 0x20044840) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000001080)=0x0) r7 = getuid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000010c0)={0x0, 0x0, 0x0}, &(0x7f0000001100)=0xc) r9 = getpid() r10 = getuid() r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180200000400000000000000fcffff0185000000bc0000001801000020646c2400000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000f000000850000000600000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r11, 0x20000000, 0xfe5a, 0x0, &(0x7f0000000200)="32087d1c9cb361397a127acf6646", 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r13 = getpid() bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r12, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000340)='./cgroup/cgroup.procs\x00', &(0x7f00000008c0)=[0x45c, 0x9], 0x0, 0x0, 0x2, 0x1, r13}}, 0x40) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r14, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0}, &(0x7f00000013c0)=0xc) r16 = getgid() socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000880), 0x0, &(0x7f0000000900)=[@cred={{0x1c, 0x1, 0x2, {r13, r15, r16}}}, @rights={{0x18, 0x1, 0x1, [r11, r11]}}], 0x38, 0x24008800}, 0x40040c4) sendmsg$netlink(r1, &(0x7f00000011c0)={&(0x7f0000000140)=@proc={0x10, 0x0, 0x25dfdbfb, 0x20000000}, 0xc, &(0x7f0000001040)=[{&(0x7f0000000880)={0x2a4, 0x3c, 0x10, 0x70bd29, 0x25dfdbfb, "", [@generic="77c7135f542db8ac9619e00dc7ec2f9a9495b64a006b683e", @generic="2c9ad8d3cab76ada7801a3e9ca4b9d5e6985ff4f30d0e9d4e5d5d49aca4ae813fa33be7d640da728418afae3a99644831f20dae7508e2f55514a7c92f7f16d83efe107f17c0a7253fe436a71a24bac62da80101786a12ca06e948f055b22e2ee86b020f864cded2475977c5505f7ced6d9aefb11a150", @generic="6463da46c3a2126b0d23ba981f99148385318bb80786170ce071456b01a276f2515d8365792038a414d5d4f4de79f57a61cd4116c1728f7751e495d76c00356b187f19fc42c6ee3e0484c2fe3945c304ccb4809171d890c4d4ff70c09464ac5cca7efaa5e47ca9f4efedc1cb8735704bd350c4e81edafed7a11c3c8f1b409a3f4b298b3a9492a3eb5a2245647609602c5ae60e1cd5cd8d5515c2ec43db8697e7baa1038c22c79102dc46c9e396d57717c987e83a45cafb", @generic="bc43bd3ae665852df1c8da5a1f0472779ea9eaced818c4511e42a86ee4755c2736837bbfd9b797c94ae5f0dda57abcc6800dc8ef380e", @nested={0x117, 0x137, 0x0, 0x1, [@nested={0x4, 0x3c}, @typed={0x14, 0x17, 0x0, 0x0, @ipv6=@mcast1}, @generic="1e93999c699bf2c2e1ee5c471b666ac59aa2360a408d4d2a226a0cff2dedbc6da5bd016c8575cc8cd177a97a8302cb59c57187dfdc9478b596708bcb4ef40e3e3bc00c5f201807192fd262e627864707f5d4bf696faa16f18bcdee3695f977661849565f8749815afbefab3e5d2a4a09c92d0163d5c2385d7c420fc173c85f444b5c83330bd19a3a933dda88e2ba67e7f1a212323fa119d9832d8ff5891f9b7f4d30f2eded5538db5b809496824f462b7a0cf650f69dd40de3668da52dce5fafe35293031b3053328cf66671cb514299e8642a048c5caba9fbb8f11242ab581164d1f6aff15dbac7663199962d1ad8c65639230d905231af680caa"]}]}, 0x2a4}, {&(0x7f0000000d00)={0x134, 0x3f, 0x200, 0x70bd2d, 0x25dfdbfe, "", [@typed={0xc, 0xf0, 0x0, 0x0, @u64=0x2}, @nested={0xe4, 0x53, 0x0, 0x1, [@generic="fc681ee954dd229abba6df2f9a65", @generic="0fda83d8874d3dde6b6022d097795f56831f9849cea5ad16c44c8cb8d2f8ae32aee3a50c5f600f25be4b658809ebc334a64bd9f59590bb061f3af78af88898450e0bae412a2d9b719f016088eb9e73a510e6631e786e1a85a5c2093707883ba0ce73bf924965c21674b0423a74ce74853df27c5e0db75d1451237243ef8c256db59e95cba0d36f2861791a9f96503e0195d8607ebf41cbeb56b511860e15d365746ffa1afb9a802621b5399a54726eca155291b0178973d394948cd646ebfcc861fc72c35164e7b11a786744dd632d74ad4e"]}, @generic="cc81ed6d8d3b43095a795047915c871a8ab2f18dd344122751d0c9a62eda11cc8a1b384b4ddcc529d56f6c4aa7e23f24e916d67e"]}, 0x134}, {&(0x7f0000001200)={0x10c, 0x26, 0x400, 0x70bd29, 0x25dfdbfb, "", [@typed={0x8, 0x114, 0x0, 0x0, @ipv4=@loopback}, @typed={0x7c, 0x45, 0x0, 0x0, @binary="c3826f18928660e5ab7e6ad51d11fba57c390d7922aaafdbc26de70cb77abf40b9c605a0f5618c9a96c8a1763352915941aec8df5f3a7d8cf99899fc17f5df38e2289d6ae2a81e1a5073a6c54f5ecb31e0a48c149bce6dadd69ed3a221d83b29163a06a1fc33d2485823b94db6ec3ef89d8a0f84b91ca66f"}, @nested={0x26, 0xdb, 0x0, 0x1, [@generic="e4210bb7b3cddf1edc0fe4575199aa21b41773b4722ffa7eca00270e29692b4ebffc"]}, @generic="85e704340eceb4e517711a97eeb256324259d308df2cee83e83cc4a1cdefb702633c5cf4e993e1555b58dd2ff6d93d7c16cdddd7e35d377f319a457667848b1efddb7f2d7c", @typed={0x8, 0xb1, 0x0, 0x0, @uid=r5}]}, 0x10c}, {&(0x7f0000000480)={0xa4, 0x29, 0x8, 0x70bd2b, 0x25dfdbfb, "", [@nested={0x8, 0x77, 0x0, 0x1, [@typed={0x4, 0x102}]}, @generic="4c9a191f350e649b47b1f67d3e1cd1c752f0dc253b3bb84f1f60dfbbf02fa9306a3662f755df487836e1302f6871dbce901810cfbdb87789640b4f31d8403d241b6a207db9f3777697433567e10eb7a21b857f8eed927e9c7b720e97613b1fff45d983707235de8d035b9a12de8a2881ec683b37534e7d", @typed={0x14, 0x132, 0x0, 0x0, @ipv6=@mcast2}]}, 0xa4}], 0x4, &(0x7f0000001140)=[@rights={{0x1c, 0x1, 0x1, [r0, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r6, r7, r8}}}, @cred={{0x1c, 0x1, 0x2, {r9, r10, r16}}}], 0x60}, 0x8012) 1.477825167s ago: executing program 1 (id=6091): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x300, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 1.425855332s ago: executing program 1 (id=6092): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x6558, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="2800000076000d000040000000000000030000000000000008000a"], 0x28}}, 0x0) 1.338914s ago: executing program 1 (id=6093): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f00000000c0)={0x4, 0x747, 0x3, 0x4, 0xfb, 0x8, 0x101}, 0xc) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000400)=ANY=[@ANYBLOB="900000001000030400ddff00fbdbdf2500000000", @ANYBLOB="0011000000000000540034801400350064766d727030000000000000000000001400350073797a6b616c6c657231000000000000140035006261746164765f736c6176655f310000140035007369743000000000000000000000000008001c00", @ANYBLOB="04001400"], 0x90}, 0x1, 0xba01}, 0x810) sendmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000001c80)=[{&(0x7f0000000180)="fbecb183a9cffc0ee5d1d434a494db587414a63ef7fed2175c894997b4760cede524e40ae9a937434e1756f7b60d81a7da87fa2614c509b671a7bf8557275e807e7af1c65c1860dcd7b32c", 0x4b}, {&(0x7f0000000340)="36da21ba0be270a73a76b0b2c1b08b0aa7b634bde7b42b05fff77a1bd375fa61812e0a3df2dc7fea643e6cf5ef23233fe2b752a206d9be7865e37ef0b528cde3720d51a67f20caab530191c4", 0x4c}, {&(0x7f00000006c0)="8b3e97e66c34520fa8e2a370f6233f47fa505952ceaf6714d4030cf71b06d9c227e92f4a323b6ebf087032d4498fdc03e86e62f25a610270568c2c7147975019b3fa481fe21ab4ed149068e364b45ddd86efa6b28b42f1977be3937c8b1edf121d5defd4180ca936d2169e6734570a3e713fb30c4e18c13d66b17b808cad9e8c9af357cb504fbec0bf4cb07af24b4d49049ad0b80472ce7e307a5b4892afbe4edb5ec566ae52aac0ea58afb19188f9161d0a12fba2e42b9cdbeec498cebe3698e1bdd29ebfbe8237fc0e", 0xca}, {&(0x7f00000007c0)="259c1e0da026f141b18e0c546887d455a791e379a60024c5ad2fbb3662f2ee18c44653c3c3e3b7f6056f06544e49d92544e11e70", 0x34}, {&(0x7f0000000800)="f1f90ee8d3a476eafbc79faa69937cde26a691e03e6ceed21bf980b72b9f21463b3821266ad276f81429b7f50c09b18445106c2a77a8787e813e50cb0fdc2d4b67f07fed507e5fc76d", 0x49}, {&(0x7f0000000c00)="7f25cd96a5e8de01c3720eadae70abcf606a39a66c714306f2be45b395680cf663327f5b1f590a4b9273770c61e75a67b9211a387cd0646ff53d9b880502b50a83ee5ac90fe95bcd39f716f625b634d40ac1ab36169915060ba4fac920e64086d634feeec74c4568caa325b7bf381dff6805ffad258dfb99ead4956d0363cb743a31e744fdb58109136bb61ecdd9122bfa854bd64b9b374498b79f2b4c5d9f642180871eecc1f4c4edd399ae9d1b6db243415da8bd6188673025fc05818f2e544ae9", 0xc2}], 0x6}}], 0x1, 0x20000000) r2 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_control(r2, &(0x7f0000000100)='connect aa:aa:aa:aa:aa:11 1', 0x1b) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@ipv4_newrule={0x28, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x4, 0xfd, 0x0, 0x0, 0x1, 0xc}, [@FRA_GENERIC_POLICY=@FRA_UID_RANGE={0xc, 0x14, {r5}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40488d4}, 0x20044840) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000001080)=0x0) r7 = getuid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000010c0)={0x0, 0x0, 0x0}, &(0x7f0000001100)=0xc) r9 = getpid() r10 = getuid() r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180200000400000000000000fcffff0185000000bc0000001801000020646c2400000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000f000000850000000600000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r11, 0x20000000, 0xfe5a, 0x0, &(0x7f0000000200)="32087d1c9cb361397a127acf6646", 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r13 = getpid() bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r12, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000340)='./cgroup/cgroup.procs\x00', &(0x7f00000008c0)=[0x45c, 0x9], 0x0, 0x0, 0x2, 0x1, r13}}, 0x40) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0}, &(0x7f00000013c0)=0xc) r15 = getgid() socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000880), 0x0, &(0x7f0000000900)=[@cred={{0x1c, 0x1, 0x2, {r13, r14, r15}}}, @rights={{0x18, 0x1, 0x1, [r11, r11]}}], 0x38, 0x24008800}, 0x40040c4) sendmsg$netlink(r1, &(0x7f00000011c0)={&(0x7f0000000140)=@proc={0x10, 0x0, 0x25dfdbfb, 0x20000000}, 0xc, &(0x7f0000001040)=[{&(0x7f0000000880)={0x2d8, 0x3c, 0x10, 0x70bd29, 0x25dfdbfb, "", [@generic="77c7135f542db8ac9619e00dc7ec2f9a9495b64a006b683e", @generic="2c9ad8d3cab76ada7801a3e9ca4b9d5e6985ff4f30d0e9d4e5d5d49aca4ae813fa33be7d640da728418afae3a99644831f20dae7508e2f55514a7c92f7f16d83efe107f17c0a7253fe436a71a24bac62da80101786a12ca06e948f055b22e2ee86b020f864cded2475977c5505f7ced6d9aefb11a150", @generic="6463da46c3a2126b0d23ba981f99148385318bb80786170ce071456b01a276f2515d8365792038a414d5d4f4de79f57a61cd4116c1728f7751e495d76c00356b187f19fc42c6ee3e0484c2fe3945c304ccb4809171d890c4d4ff70c09464ac5cca7efaa5e47ca9f4efedc1cb8735704bd350c4e81edafed7a11c3c8f1b409a3f4b298b3a9492a3eb5a2245647609602c5ae60e1cd5cd8d5515c2ec43db8697e7baa1038c22c79102dc46c9e396d57717c987e83a45cafb", @generic="bc43bd3ae665852df1c8da5a1f0472779ea9eaced818c4511e42a86ee4755c2736837bbfd9b797c94ae5f0dda57abcc6800dc8ef380ecbc35b44ba647b25d52ef6740811a89212bdda86ce23790d7cd9765c06595e7e26fa21d42768305ce079a47f09bc83fcc0f6", @nested={0x117, 0x137, 0x0, 0x1, [@nested={0x4, 0x3c}, @typed={0x14, 0x17, 0x0, 0x0, @ipv6=@mcast1}, @generic="1e93999c699bf2c2e1ee5c471b666ac59aa2360a408d4d2a226a0cff2dedbc6da5bd016c8575cc8cd177a97a8302cb59c57187dfdc9478b596708bcb4ef40e3e3bc00c5f201807192fd262e627864707f5d4bf696faa16f18bcdee3695f977661849565f8749815afbefab3e5d2a4a09c92d0163d5c2385d7c420fc173c85f444b5c83330bd19a3a933dda88e2ba67e7f1a212323fa119d9832d8ff5891f9b7f4d30f2eded5538db5b809496824f462b7a0cf650f69dd40de3668da52dce5fafe35293031b3053328cf66671cb514299e8642a048c5caba9fbb8f11242ab581164d1f6aff15dbac7663199962d1ad8c65639230d905231af680caa"]}]}, 0x2d8}, {&(0x7f0000000d00)={0x134, 0x3f, 0x200, 0x70bd2d, 0x25dfdbfe, "", [@typed={0xc, 0xf0, 0x0, 0x0, @u64=0x2}, @nested={0xe4, 0x53, 0x0, 0x1, [@generic="fc681ee954dd229abba6df2f9a65", @generic="0fda83d8874d3dde6b6022d097795f56831f9849cea5ad16c44c8cb8d2f8ae32aee3a50c5f600f25be4b658809ebc334a64bd9f59590bb061f3af78af88898450e0bae412a2d9b719f016088eb9e73a510e6631e786e1a85a5c2093707883ba0ce73bf924965c21674b0423a74ce74853df27c5e0db75d1451237243ef8c256db59e95cba0d36f2861791a9f96503e0195d8607ebf41cbeb56b511860e15d365746ffa1afb9a802621b5399a54726eca155291b0178973d394948cd646ebfcc861fc72c35164e7b11a786744dd632d74ad4e"]}, @generic="cc81ed6d8d3b43095a795047915c871a8ab2f18dd344122751d0c9a62eda11cc8a1b384b4ddcc529d56f6c4aa7e23f24e916d67e"]}, 0x134}, {&(0x7f0000000480)={0xa4, 0x29, 0x8, 0x70bd2b, 0x25dfdbfb, "", [@nested={0x8, 0x77, 0x0, 0x1, [@typed={0x4, 0x102}]}, @generic="4c9a191f350e649b47b1f67d3e1cd1c752f0dc253b3bb84f1f60dfbbf02fa9306a3662f755df487836e1302f6871dbce901810cfbdb87789640b4f31d8403d241b6a207db9f3777697433567e10eb7a21b857f8eed927e9c7b720e97613b1fff45d983707235de8d035b9a12de8a2881ec683b37534e7d", @typed={0x14, 0x132, 0x0, 0x0, @ipv6=@mcast2}]}, 0xa4}], 0x3, &(0x7f0000001140)=[@rights={{0x1c, 0x1, 0x1, [r0, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r6, r7, r8}}}, @cred={{0x1c, 0x1, 0x2, {r9, r10, r15}}}], 0x60}, 0x8012) 931.22492ms ago: executing program 0 (id=6096): socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x1c, r4, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) openat$cgroup_devices(r1, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0xc, &(0x7f00000000c0)="e0", 0x1) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001d00070f000200000000000007000000", @ANYRES32=r6, @ANYBLOB='\x00\x00g\x00\b\x00\b\x00', @ANYRES16=r5], 0x24}, 0x1, 0x0, 0x0, 0x4008004}, 0x0) r7 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$FICLONE(r7, 0x40049409, r7) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, 0x0, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) 845.747818ms ago: executing program 2 (id=6097): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xf, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0xe, 0x0, &(0x7f00000000c0)="b994bc444b9893b04bf30981fd1a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x50) 845.553824ms ago: executing program 4 (id=6098): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000240)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x24}, 0x1, 0x0, 0x0, 0x60000001}, 0x10) 793.539613ms ago: executing program 2 (id=6099): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x38, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xfffff66d}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4894}, 0x2) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100766574680000000004000280", @ANYRES32], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000023c0)=@newlink={0x38, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40810, 0x1}, [@IFLA_GROUP={0x8}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x10000}, @IFLA_TXQLEN={0x8, 0xd, 0x80}]}, 0x38}, 0x1, 0x0, 0x0, 0x24040051}, 0x4000000) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000002900)=r8, 0x4) bind$netlink(r7, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$netlink(0x10, 0x3, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r10) sendmsg$NLBL_CIPSOV4_C_ADD(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x58, r11, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x34, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r12 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r12, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$XFS_IOC_GETBMAP(r8, 0xc0205826, &(0x7f0000000180)={0xfd, 0xc85a, 0xfff, 0x3ff, 0x7}) r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r13, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) socket$nl_route(0x10, 0x3, 0x0) 761.593659ms ago: executing program 4 (id=6100): pselect6(0x40, &(0x7f00000000c0)={0x1b3, 0x2, 0xa, 0x1880000000000000, 0x80000001, 0xf, 0x7, 0x1}, &(0x7f0000000100)={0x6, 0x6735, 0x6da, 0x4, 0x9, 0x7, 0x0, 0x20}, &(0x7f0000000140)={0x7fff, 0x10, 0x1, 0x7a8872b7, 0x243a, 0x7ff, 0x5, 0x5}, &(0x7f0000000180)={0x77359400}, &(0x7f0000000200)={&(0x7f00000001c0)={[0xfff]}, 0x8}) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x10003, 0xffffffff, 0xd7c7, 0x401}, 0x10) epoll_create1(0x80000) write(r1, &(0x7f0000000040)="240000001e005f0214fffffffffffff701000000000000000000000008000ac0b3c60000", 0x2e) (async) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="000101012600000000000000000a0000080c00028006000340000000001c001980080002000400004e1df70651af0008000100000500000800000000"], 0x3c}, 0x1, 0x0, 0x0, 0x8011}, 0x20000000) 707.776802ms ago: executing program 0 (id=6101): socket(0x10, 0x3, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000001000000000000008018000095"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0}, 0x94) socket$inet6_mptcp(0xa, 0x1, 0x106) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$igmp(0x2, 0x3, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x80000000000000a, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) socket(0x10, 0x803, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000006080)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1}, &(0x7f0000000840), &(0x7f0000000880)=r2}, 0x20) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, r4, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000300)=ANY=[], 0x0) 652.016028ms ago: executing program 4 (id=6102): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1f, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000a6000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x48) 651.316189ms ago: executing program 3 (id=6103): socket$key(0xf, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, 0x0, 0x0) unshare(0x20400) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r0, &(0x7f0000000000)={0x24, @short={0x2, 0x1, 0xaaa0}}, 0xb) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[], 0x48}}, 0x0) sendmmsg$inet(r1, 0x0, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r3, 0x8919, &(0x7f0000000000)={'bond0\x00', @ifru_flags=0x1000}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYRESHEX=0x0, @ANYBLOB="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", @ANYRES64=r4], 0x18}, 0x1, 0x0, 0x0, 0x24000804}, 0x4000) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000006000000080000000600000008080000", @ANYRES32=0x1, @ANYBLOB="9a080000000000000000000000000000000000001ea1fdbec7060309974839cd", @ANYRES32=r7, @ANYRESHEX=r5, @ANYBLOB="0400d1783a333d8ee9ff0c8e41f4cd373f65"], 0x50) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) bpf$MAP_CREATE(0x0, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="e0000000000101040000000000000000020000001c001880080001400100000000000000000000020800034000000002240001801400018008000100e000000108000200e00000010c000280050001000000000004001640440010"], 0xe0}, 0x1, 0x0, 0x0, 0x800}, 0x0) r9 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_int(r9, 0x29, 0x43, &(0x7f0000000000)=0x3b5, 0x4) unshare(0x26020480) 552.621173ms ago: executing program 4 (id=6104): r0 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="ac0100001700010000000000000000007f0000010000000000000000000000000000000000000000fe8000000000000000000000000000bbac1414bb000000000000000000000000fc00000000000000000000000000000000000000000000000000006400000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000ffffffff00000000000000000000000000000000000000000a00800000000000", @ANYRESHEX=r1, @ANYRES32=0xee00, @ANYRES8=r1], 0x1ac}}, 0x0) 550.772979ms ago: executing program 0 (id=6105): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x110}}, 0x0) 464.220038ms ago: executing program 1 (id=6106): socket$alg(0x26, 0x5, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x800) recvmsg(r2, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000680)=""/23, 0x17}], 0x1}, 0x142) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x0, 0x0, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x4, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000003e80)=[{{0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000380)="a5", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000014c0)="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", 0x393}], 0x1}}], 0x2, 0x42054) 407.56329ms ago: executing program 0 (id=6107): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x4, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 341.18116ms ago: executing program 4 (id=6108): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x4, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000003e80)=[{{0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000380)="a5", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000014c0)="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", 0x393}], 0x1}}], 0x2, 0x42054) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 340.989933ms ago: executing program 3 (id=6109): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xf, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0xe, 0x0, &(0x7f00000000c0)="b994bc444b9893b04bf30981fd1a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x50) 294.203519ms ago: executing program 1 (id=6110): socket$alg(0x26, 0x5, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x4, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000003e80)=[{{0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000380)="a5", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000014c0)="cd5927a8b2a00ee8cc111509a5dcf0343c2c5b667c514bb3055b96ebda11b4c8308aef587ef82686dc7f027c402a00582f1b338d80160b21beef66b139a7061ff65ea9c6ed4de3c272fcce0b257c322f54ca01000000bb318d29a96c5035fd713f02f959dc5e55bd518d2ce967008eb6db0a89b4129c5b692bff14aeaa783a3cb22eb1004d87c97e8c8c587adeff394c43b74f5ba5ce66df35b3f4e7d9d7cbc36a20ec75e5dc96701ef447ee3160e70ad13117e96c171be8f0ba442afef0d073a33d7eb218dbb9c065f38a22096306c1e1c7a8268d7373f2f6ca476174e543a37052c6e08007c7afd75fabaf6645dfaad713688d9af3e70e752f3698b8cd0d75efd5eb50f5c4ef48aa62b641104abb1ce0e8ebcea9485d77bb9b523a47f1de80c1456f62e1387435d3f41d2d6c9e04c1f51401aa6b5204972b93c5783233a1002a1c0d9680c43f078cb2fac20df2296408b52ac0338cee4c92445b44b8d802184f15b34dcd5be61c6f55f73559343ad384c6d05afae20646676c06b0d4bba9d96bdb045fb0e8b50b7a84489a59bc371e066b4ae38c5cb05035cbe8d2123dd28d85db900da33b1f01dd306558dc437606314814aaf7416b8e1e4ab0d9fc2a220d009edee9d94fd184c52a5c4fbee4197f30986533be2b656535c6621f15d4a700de437afd57cb91c00e692b5b4bcfbac44a33a917c9fce46b308775e1ba4e4d93388a11deda12d7270634704d2e2846caedba24b226247029d706b423a295689289bfa250f45ae88432d5721129c9ad9a5f4c5bdd4d653a024e9b16c0e96b35920fbd236d1566cc2efd366f327b04e508254cea66bd2977e016757f0cd7169706543cfa571b99084098464ab7dba3b313cc17463d3d26dadf42f5327637d67464d3dcf6ec8d88621c51892bf61685f551df8bd2620976d502ef3df7456865e1b45136bf141b9444680b6658127b7e8d088af71b9206fd177e579b81f284c6aa7694e8241f34ac5308e98776afeeaad59a473d500d9ad99c594e44b6e9a739c218b97ddc1c8219d134cb14fb1513fdae7ecca1ad9beacdb16e577e8820a239011aab5504da2eb368fb8718773026e44c3e63ab2e4f5d8c2ab2e0c69a64d85131a9d1af9cec5b4cb1e39ccafd7e6a03094ed52d30f516d5daf04be1add1bdd830f3a1684b61f6a6366751bda829d0c8160da6784bbd61fc74425d34cf2700887ad4dd109ddf2bad712242cdb68f57923378ee3f0b9b9f7810c3dbea8192a9b92375583b7a2875b15baed35f239f143b976a79d587", 0x393}], 0x1}}], 0x2, 0x42054) 244.779222ms ago: executing program 0 (id=6111): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000005"], 0x18}, 0x440e0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42072, 0xffffffffffffffff, 0x0) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_proto_private(r3, 0x89e0, 0x0) syz_emit_ethernet(0x66, &(0x7f00000003c0)=ANY=[@ANYBLOB="2aaaaaaaaa276487a2bed3d608004500005800000000006c9078ac141430000000000420880b0000000080000800000086dd080088be000f4d00100000000100000000000000080022eb0000000020000000020000000000000000000000080065580000aaf4", @ANYRES64=0xffffffffffffffff, @ANYRESHEX=0x0, @ANYRESOCT=r0, @ANYRES8=r1, @ANYRESDEC=r3, @ANYRES32=r2], 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x1031, 0xffffffffffffffff, 0x0) r6 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000004c0), 0x35c, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000280)=ANY=[@ANYRESHEX=r4], 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @sk_msg}, 0x94) socket$nl_crypto(0x10, 0x3, 0x15) preadv(r6, &(0x7f0000000040)=[{&(0x7f00000013c0)=""/4096, 0x5}], 0x3f, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000140)=0x3) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f0000000500)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x4}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000200)=0xf, 0x12) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r7, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x10, &(0x7f0000000180)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}]}, &(0x7f0000000480)=0x10) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r8, 0x6, 0x1f, &(0x7f00000000c0)='2', 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000080)=0x9, 0x4) 180.976485ms ago: executing program 3 (id=6112): socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0e000000040000000400000009"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = socket(0x2, 0x80805, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x4d, 0x800000, 0x8, 0x5, 0x80, 0x81}) write$bt_hci(r3, &(0x7f0000000080)=ANY=[], 0x6) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000010c0), r2) r5 = socket(0x10, 0x803, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newtfilter={0xb8, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x5}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x84, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}, @TCA_U32_POLICE={0x48, 0x6, [@TCA_POLICE_TBF={0x3c, 0x1, {0xf, 0x10000000, 0x6ed, 0xfffffff8, 0x1000, {0x4, 0x2, 0x1, 0x6ca, 0x8}, {0xc, 0x2, 0x5, 0xfffc, 0x4, 0x8}, 0x78, 0xfffffffe, 0x6}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}]}, @TCA_U32_INDEV={0x14, 0x8, 'veth0_to_hsr\x00'}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0xe}}]}, 0xb8}}, 0x24040084) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000001180)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="020029bd7000fedbdf2531000000080001006700000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900070000006600000008005200", @ANYRES32, @ANYBLOB="0800136f27f33184"], 0x40}, 0x1, 0x0, 0x0, 0x20008000}, 0x40004) getsockopt$bt_hci(r2, 0x84, 0x80, &(0x7f0000000000)=""/4103, &(0x7f0000001080)=0x1007) r8 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x4) ioctl$EXT4_IOC_GETSTATE(r8, 0x40046629, &(0x7f00000011c0)) socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000002c0)={r9, 0xffff}, &(0x7f0000000300)=0x8) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000014480000000c0a010100004365000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c000440000000000000000b14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r10 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r10, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42, 0xfffffffc}}}, 0x10) close(r10) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001200)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x24008805}, 0x8000) 149.931721ms ago: executing program 1 (id=6113): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f00000000c0)={0x4, 0x747, 0x3, 0x4, 0xfb, 0x8, 0x101}, 0xc) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000400)=ANY=[@ANYBLOB="900000001000030400ddff00fbdbdf2500000000", @ANYBLOB="0011000000000000540034801400350064766d727030000000000000000000001400350073797a6b616c6c657231000000000000140035006261746164765f736c6176655f310000140035007369743000000000000000000000000008001c00", @ANYBLOB="04001400080013"], 0x90}, 0x1, 0xba01}, 0x810) sendmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000001c80)=[{&(0x7f0000000180)="fbecb183a9cffc0ee5d1d434a494db587414a63ef7fed2175c894997b4760cede524e40ae9a937434e1756f7b60d81a7da87fa2614c509b671a7bf8557275e807e7af1c65c1860dcd7b32c", 0x4b}, {&(0x7f0000000340)="36da21ba0be270a73a76b0b2c1b08b0aa7b634bde7b42b05fff77a1bd375fa61812e0a3df2dc7fea643e6cf5ef23233fe2b752a206d9be7865e37ef0b528cde3720d51a67f20caab530191c4", 0x4c}, {&(0x7f00000006c0)="8b3e97e66c34520fa8e2a370f6233f47fa505952ceaf6714d4030cf71b06d9c227e92f4a323b6ebf087032d4498fdc03e86e62f25a610270568c2c7147975019b3fa481fe21ab4ed149068e364b45ddd86efa6b28b42f1977be3937c8b1edf121d5defd4180ca936d2169e6734570a3e713fb30c4e18c13d66b17b808cad9e8c9af357cb504fbec0bf4cb07af24b4d49049ad0b80472ce7e307a5b4892afbe4edb5ec566ae52aac0ea58afb19188f9161d0a12fba2e42b9cdbeec498cebe3698e1bdd29ebfbe8237fc0e", 0xca}, {&(0x7f00000007c0)="259c1e0da026f141b18e0c546887d455a791e379a60024c5ad2fbb3662f2ee18c44653c3c3e3b7f6056f06544e49d92544e11e70c7", 0x35}, {&(0x7f0000000800)="f1f90ee8d3a476eafbc79faa69937cde26a691e03e6ceed21bf980b72b9f21463b3821266ad276f81429b7f50c09b18445106c2a77a8787e813e50cb0fdc2d4b67f07fed507e5fc76d", 0x49}, {&(0x7f0000000c00)="7f25cd96a5e8de01c3720eadae70abcf606a39a66c714306f2be45b395680cf663327f5b1f590a4b9273770c61e75a67b9211a387cd0646ff53d9b880502b50a83ee5ac90fe95bcd39f716f625b634d40ac1ab36169915060ba4fac920e64086d634feeec74c4568caa325b7bf381dff6805ffad258dfb99ead4956d0363cb743a31e744fdb58109136bb61ecdd9122bfa854bd64b9b374498b79f2b4c5d9f642180871eecc1f4c4edd399ae9d1b6db243415da8bd6188673025fc05818f2e544ae9", 0xc2}], 0x6}}], 0x1, 0x20000000) r2 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_control(r2, &(0x7f0000000100)='connect aa:aa:aa:aa:aa:11 1', 0x1b) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@ipv4_newrule={0x28, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x4, 0xfd, 0x0, 0x0, 0x1, 0xc}, [@FRA_GENERIC_POLICY=@FRA_UID_RANGE={0xc, 0x14, {r5}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40488d4}, 0x20044840) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000001080)=0x0) r7 = getuid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000010c0)={0x0, 0x0, 0x0}, &(0x7f0000001100)=0xc) r9 = getpid() r10 = getuid() r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180200000400000000000000fcffff0185000000bc0000001801000020646c2400000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000f000000850000000600000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r11, 0x20000000, 0xfe5a, 0x0, &(0x7f0000000200)="32087d1c9cb361397a127acf6646", 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r13 = getpid() bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r12, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000340)='./cgroup/cgroup.procs\x00', &(0x7f00000008c0)=[0x45c, 0x9], 0x0, 0x0, 0x2, 0x1, r13}}, 0x40) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r14, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0}, &(0x7f00000013c0)=0xc) r16 = getgid() socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000880), 0x0, &(0x7f0000000900)=[@cred={{0x1c, 0x1, 0x2, {r13, r15, r16}}}, @rights={{0x18, 0x1, 0x1, [r11, r11]}}], 0x38, 0x24008800}, 0x40040c4) sendmsg$netlink(r1, &(0x7f00000011c0)={&(0x7f0000000140)=@proc={0x10, 0x0, 0x25dfdbfb, 0x20000000}, 0xc, &(0x7f0000001040)=[{&(0x7f0000000880)={0x2a4, 0x3c, 0x10, 0x70bd29, 0x25dfdbfb, "", [@generic="77c7135f542db8ac9619e00dc7ec2f9a9495b64a006b683e", @generic="2c9ad8d3cab76ada7801a3e9ca4b9d5e6985ff4f30d0e9d4e5d5d49aca4ae813fa33be7d640da728418afae3a99644831f20dae7508e2f55514a7c92f7f16d83efe107f17c0a7253fe436a71a24bac62da80101786a12ca06e948f055b22e2ee86b020f864cded2475977c5505f7ced6d9aefb11a150", @generic="6463da46c3a2126b0d23ba981f99148385318bb80786170ce071456b01a276f2515d8365792038a414d5d4f4de79f57a61cd4116c1728f7751e495d76c00356b187f19fc42c6ee3e0484c2fe3945c304ccb4809171d890c4d4ff70c09464ac5cca7efaa5e47ca9f4efedc1cb8735704bd350c4e81edafed7a11c3c8f1b409a3f4b298b3a9492a3eb5a2245647609602c5ae60e1cd5cd8d5515c2ec43db8697e7baa1038c22c79102dc46c9e396d57717c987e83a45cafb", @generic="bc43bd3ae665852df1c8da5a1f0472779ea9eaced818c4511e42a86ee4755c2736837bbfd9b797c94ae5f0dda57abcc6800dc8ef380e", @nested={0x117, 0x137, 0x0, 0x1, [@nested={0x4, 0x3c}, @typed={0x14, 0x17, 0x0, 0x0, @ipv6=@mcast1}, @generic="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"]}]}, 0x2a4}, {&(0x7f0000000d00)={0x134, 0x3f, 0x200, 0x70bd2d, 0x25dfdbfe, "", [@typed={0xc, 0xf0, 0x0, 0x0, @u64=0x2}, @nested={0xe4, 0x53, 0x0, 0x1, [@generic="fc681ee954dd229abba6df2f9a65", @generic="0fda83d8874d3dde6b6022d097795f56831f9849cea5ad16c44c8cb8d2f8ae32aee3a50c5f600f25be4b658809ebc334a64bd9f59590bb061f3af78af88898450e0bae412a2d9b719f016088eb9e73a510e6631e786e1a85a5c2093707883ba0ce73bf924965c21674b0423a74ce74853df27c5e0db75d1451237243ef8c256db59e95cba0d36f2861791a9f96503e0195d8607ebf41cbeb56b511860e15d365746ffa1afb9a802621b5399a54726eca155291b0178973d394948cd646ebfcc861fc72c35164e7b11a786744dd632d74ad4e"]}, @generic="cc81ed6d8d3b43095a795047915c871a8ab2f18dd344122751d0c9a62eda11cc8a1b384b4ddcc529d56f6c4aa7e23f24e916d67e"]}, 0x134}, {&(0x7f0000001200)={0x10c, 0x26, 0x400, 0x70bd29, 0x25dfdbfb, "", [@typed={0x8, 0x114, 0x0, 0x0, @ipv4=@loopback}, @typed={0x7c, 0x45, 0x0, 0x0, @binary="c3826f18928660e5ab7e6ad51d11fba57c390d7922aaafdbc26de70cb77abf40b9c605a0f5618c9a96c8a1763352915941aec8df5f3a7d8cf99899fc17f5df38e2289d6ae2a81e1a5073a6c54f5ecb31e0a48c149bce6dadd69ed3a221d83b29163a06a1fc33d2485823b94db6ec3ef89d8a0f84b91ca66f"}, @nested={0x26, 0xdb, 0x0, 0x1, [@generic="e4210bb7b3cddf1edc0fe4575199aa21b41773b4722ffa7eca00270e29692b4ebffc"]}, @generic="85e704340eceb4e517711a97eeb256324259d308df2cee83e83cc4a1cdefb702633c5cf4e993e1555b58dd2ff6d93d7c16cdddd7e35d377f319a457667848b1efddb7f2d7c", @typed={0x8, 0xb1, 0x0, 0x0, @uid=r5}]}, 0x10c}, {&(0x7f0000000480)={0xa4, 0x29, 0x8, 0x70bd2b, 0x25dfdbfb, "", [@nested={0x8, 0x77, 0x0, 0x1, [@typed={0x4, 0x102}]}, @generic="4c9a191f350e649b47b1f67d3e1cd1c752f0dc253b3bb84f1f60dfbbf02fa9306a3662f755df487836e1302f6871dbce901810cfbdb87789640b4f31d8403d241b6a207db9f3777697433567e10eb7a21b857f8eed927e9c7b720e97613b1fff45d983707235de8d035b9a12de8a2881ec683b37534e7d", @typed={0x14, 0x132, 0x0, 0x0, @ipv6=@mcast2}]}, 0xa4}], 0x4, &(0x7f0000001140)=[@rights={{0x1c, 0x1, 0x1, [r0, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r6, r7, r8}}}, @cred={{0x1c, 0x1, 0x2, {r9, r10, r16}}}], 0x60}, 0x8012) 0s ago: executing program 0 (id=6114): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000060000000400000000000012020000000000000000000001050000018000000000000000010000850200000000000000010000000000000400000000da"], 0x0, 0x52}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000140)={r1, 0x20, &(0x7f00000001c0)={&(0x7f0000002700)=""/4116, 0x1014, 0x0, &(0x7f0000000000)=""/89, 0x59}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1200000003000000040000000200000000000000", @ANYRES32, @ANYBLOB="8000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x24, 0x66, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0xfff3, 0x1}, {0x0, 0x1b}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x800) kernel console output (not intermixed with test programs): yz.2.5484'. [ 828.104532][ T50] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 828.110711][ T5633] Bluetooth: hci2: command 0x0406 tx timeout [ 828.378874][T26621] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5491'. [ 828.446111][T26616] syzkaller0: entered promiscuous mode [ 828.464354][T26616] syzkaller0: entered allmulticast mode [ 828.470122][T26626] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5493'. [ 828.489943][T26616] tipc: Enabled bearer , priority 0 [ 828.556149][T26616] tipc: Resetting bearer [ 828.562269][T26616] tipc: Resetting bearer [ 828.608164][T26612] tipc: Resetting bearer [ 828.630608][T26612] tipc: Disabling bearer [ 828.792816][T26633] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 828.939930][T26638] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5497'. [ 829.087086][T26644] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5499'. [ 829.452967][T26655] syzkaller0: entered promiscuous mode [ 829.467415][T26655] syzkaller0: entered allmulticast mode [ 829.479902][T26655] tipc: Enabled bearer , priority 0 [ 829.496733][T26654] tipc: Resetting bearer [ 829.533776][T26654] tipc: Disabling bearer [ 830.003175][T26679] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 831.000257][T26704] veth103: entered allmulticast mode [ 831.027399][T26704] bond9: (slave veth103): Enslaving as an active interface with an up link [ 831.058049][T26711] bond9 (unregistering): (slave veth103): Releasing backup interface [ 831.085795][T26711] bond9 (unregistering): Released all slaves [ 831.253521][T26729] vlan2: entered promiscuous mode [ 831.288707][T26723] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 831.356426][T26735] FAULT_INJECTION: forcing a failure. [ 831.356426][T26735] name failslab, interval 1, probability 0, space 0, times 0 [ 831.372691][T26735] CPU: 0 UID: 0 PID: 26735 Comm: syz.3.5536 Not tainted syzkaller #0 PREEMPT(full) [ 831.372715][T26735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 831.372726][T26735] Call Trace: [ 831.372733][T26735] [ 831.372741][T26735] dump_stack_lvl+0xe8/0x150 [ 831.372767][T26735] should_fail_ex+0x40c/0x560 [ 831.372799][T26735] should_failslab+0xa8/0x100 [ 831.372817][T26735] ? skb_clone+0x212/0x3a0 [ 831.372838][T26735] kmem_cache_alloc_noprof+0x87/0x650 [ 831.372878][T26735] skb_clone+0x212/0x3a0 [ 831.372901][T26735] __netlink_deliver_tap+0x413/0x860 [ 831.372931][T26735] ? netlink_deliver_tap+0x2e/0x1b0 [ 831.372953][T26735] netlink_deliver_tap+0x19c/0x1b0 [ 831.372974][T26735] netlink_unicast+0x77f/0x940 [ 831.373010][T26735] netlink_sendmsg+0x813/0xb40 [ 831.373039][T26735] ? __pfx_netlink_sendmsg+0x10/0x10 [ 831.373062][T26735] ? aa_sock_msg_perm+0xf1/0x1b0 [ 831.373089][T26735] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 831.373111][T26735] ? __pfx_netlink_sendmsg+0x10/0x10 [ 831.373132][T26735] ____sys_sendmsg+0x9b9/0xa20 [ 831.373151][T26735] ? __might_fault+0xaf/0x130 [ 831.373179][T26735] ? __pfx_____sys_sendmsg+0x10/0x10 [ 831.373207][T26735] ? import_iovec+0x73/0xa0 [ 831.373232][T26735] ___sys_sendmsg+0x2a5/0x360 [ 831.373249][T26735] ? __lock_acquire+0x683/0x2cd0 [ 831.373271][T26735] ? __pfx____sys_sendmsg+0x10/0x10 [ 831.373321][T26735] ? __fget_files+0x2a/0x420 [ 831.373342][T26735] ? __fget_files+0x3a2/0x420 [ 831.373372][T26735] __x64_sys_sendmsg+0x1bd/0x2a0 [ 831.373395][T26735] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 831.373424][T26735] ? __pfx_ksys_write+0x10/0x10 [ 831.373456][T26735] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 831.373475][T26735] do_syscall_64+0x174/0x580 [ 831.373496][T26735] ? trace_irq_disable+0x3b/0x140 [ 831.373520][T26735] ? clear_bhb_loop+0x40/0x90 [ 831.373541][T26735] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 831.373559][T26735] RIP: 0033:0x7fd2a639ce59 [ 831.373576][T26735] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 831.373591][T26735] RSP: 002b:00007fd2a7314028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 831.373611][T26735] RAX: ffffffffffffffda RBX: 00007fd2a6615fa0 RCX: 00007fd2a639ce59 [ 831.373623][T26735] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 831.373634][T26735] RBP: 00007fd2a7314090 R08: 0000000000000000 R09: 0000000000000000 [ 831.373646][T26735] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 831.373656][T26735] R13: 00007fd2a6616038 R14: 00007fd2a6615fa0 R15: 00007ffc70306238 [ 831.373684][T26735] [ 831.701517][T26742] __nla_validate_parse: 12 callbacks suppressed [ 831.701537][T26742] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5535'. [ 831.747899][T26747] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.5540'. [ 831.886695][T26744] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 831.897302][T26744] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 57742 - 0 [ 831.916538][T26753] FAULT_INJECTION: forcing a failure. [ 831.916538][T26753] name failslab, interval 1, probability 0, space 0, times 0 [ 831.929649][T26753] CPU: 0 UID: 0 PID: 26753 Comm: syz.1.5542 Not tainted syzkaller #0 PREEMPT(full) [ 831.929672][T26753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 831.929683][T26753] Call Trace: [ 831.929690][T26753] [ 831.929698][T26753] dump_stack_lvl+0xe8/0x150 [ 831.929723][T26753] should_fail_ex+0x40c/0x560 [ 831.929755][T26753] should_failslab+0xa8/0x100 [ 831.929775][T26753] kmem_cache_alloc_node_noprof+0x8f/0x680 [ 831.929800][T26753] ? __alloc_skb+0x189/0x7a0 [ 831.929824][T26753] ? __alloc_skb+0x1d7/0x7a0 [ 831.929846][T26753] ? __local_bh_enable_ip+0xd0/0x130 [ 831.929869][T26753] __alloc_skb+0x1d7/0x7a0 [ 831.929897][T26753] netlink_ack+0x136/0xb30 [ 831.929914][T26753] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 831.930035][T26753] ? __lock_acquire+0x683/0x2cd0 [ 831.930067][T26753] netlink_rcv_skb+0x2a4/0x4a0 [ 831.930087][T26753] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 831.930115][T26753] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 831.930146][T26753] ? netlink_deliver_tap+0x2e/0x1b0 [ 831.930166][T26753] ? netlink_deliver_tap+0x2e/0x1b0 [ 831.930190][T26753] netlink_unicast+0x7bb/0x940 [ 831.930227][T26753] netlink_sendmsg+0x813/0xb40 [ 831.930256][T26753] ? __pfx_netlink_sendmsg+0x10/0x10 [ 831.930279][T26753] ? aa_sock_msg_perm+0xf1/0x1b0 [ 831.930306][T26753] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 831.930335][T26753] ? __pfx_netlink_sendmsg+0x10/0x10 [ 831.930357][T26753] ____sys_sendmsg+0x9b9/0xa20 [ 831.930376][T26753] ? __might_fault+0xaf/0x130 [ 831.930405][T26753] ? __pfx_____sys_sendmsg+0x10/0x10 [ 831.930433][T26753] ? import_iovec+0x73/0xa0 [ 831.930460][T26753] ___sys_sendmsg+0x2a5/0x360 [ 831.930479][T26753] ? __lock_acquire+0x683/0x2cd0 [ 831.930502][T26753] ? __pfx____sys_sendmsg+0x10/0x10 [ 831.930556][T26753] ? __fget_files+0x2a/0x420 [ 831.930577][T26753] ? __fget_files+0x3a2/0x420 [ 831.930608][T26753] __x64_sys_sendmsg+0x1bd/0x2a0 [ 831.930630][T26753] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 831.930659][T26753] ? __pfx_ksys_write+0x10/0x10 [ 831.930693][T26753] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 831.930713][T26753] do_syscall_64+0x174/0x580 [ 831.930733][T26753] ? trace_irq_disable+0x3b/0x140 [ 831.930758][T26753] ? clear_bhb_loop+0x40/0x90 [ 831.930781][T26753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 831.930799][T26753] RIP: 0033:0x7ff2c779ce59 [ 831.930816][T26753] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 831.930831][T26753] RSP: 002b:00007ff2c86af028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 831.930850][T26753] RAX: ffffffffffffffda RBX: 00007ff2c7a15fa0 RCX: 00007ff2c779ce59 [ 831.930863][T26753] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 831.930875][T26753] RBP: 00007ff2c86af090 R08: 0000000000000000 R09: 0000000000000000 [ 831.930887][T26753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 831.930898][T26753] R13: 00007ff2c7a16038 R14: 00007ff2c7a15fa0 R15: 00007ffe89013ad8 [ 831.930929][T26753] [ 832.507555][T26767] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5546'. [ 832.547063][T26744] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 832.567086][T26744] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 57742 - 0 [ 832.688542][T26767] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 832.726271][T26772] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5548'. [ 832.824672][T26744] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 832.838716][T26744] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 57742 - 0 [ 832.861464][T26780] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5550'. [ 832.872567][T26780] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5550'. [ 832.898344][T26779] netdevsim netdevsim3: Firmware load for './file0/file0/..' refused, path contains '..' component [ 832.937687][T26780] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5550'. [ 832.958597][T26782] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.5551'. [ 832.968483][T26780] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5550'. [ 832.986667][T26744] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 832.993757][T26780] netlink: 'syz.3.5550': attribute type 18 has an invalid length. [ 832.999539][T26744] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 57742 - 0 [ 833.189030][ T62] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 57742 - 0 [ 833.197881][ T62] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 833.232975][ T62] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 57742 - 0 [ 833.241959][ T62] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 833.266814][T26792] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5554'. [ 833.346236][T26796] netlink: 'syz.3.5556': attribute type 1 has an invalid length. [ 833.370793][ T62] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 57742 - 0 [ 833.379342][ T62] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 833.419292][T26798] netlink: 'syz.2.5557': attribute type 1 has an invalid length. [ 833.421216][T26796] erspan1: entered allmulticast mode [ 833.460638][ T62] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 57742 - 0 [ 833.469718][ T62] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 833.493390][T26798] bond8: entered promiscuous mode [ 833.498735][T26798] bond8: entered allmulticast mode [ 833.504575][T26798] 8021q: adding VLAN 0 to HW filter on device bond8 [ 834.624965][T26853] netlink: 'syz.4.5576': attribute type 1 has an invalid length. [ 834.632920][T26853] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 834.744604][T26865] syzkaller0: entered promiscuous mode [ 834.750155][T26865] syzkaller0: entered allmulticast mode [ 837.565373][T26856] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 837.737242][T26885] __nla_validate_parse: 8 callbacks suppressed [ 837.737260][T26885] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5584'. [ 837.930984][T26897] netlink: 'syz.3.5592': attribute type 1 has an invalid length. [ 838.002670][T26897] bond9: entered promiscuous mode [ 838.007922][T26897] bond9: entered allmulticast mode [ 838.015743][T26897] 8021q: adding VLAN 0 to HW filter on device bond9 [ 838.025316][T26902] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5590'. [ 838.071110][T26903] erspan1: entered allmulticast mode [ 838.084123][T26910] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5590'. [ 838.098200][T26903] bond9: (slave erspan1): making interface the new active one [ 838.114134][T26913] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5593'. [ 838.120673][T26914] netlink: 108 bytes leftover after parsing attributes in process `syz.0.5596'. [ 838.123172][T26903] erspan1: entered promiscuous mode [ 838.169578][T26903] bond9: (slave erspan1): Enslaving as an active interface with an up link [ 838.179955][T26905] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5594'. [ 838.751068][T26939] netlink: 108 bytes leftover after parsing attributes in process `syz.4.5607'. [ 838.896942][T26945] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5608'. [ 838.915202][T26946] netlink: 'syz.0.5609': attribute type 1 has an invalid length. [ 838.968263][T26951] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5611'. [ 838.984515][T26946] bond10: entered promiscuous mode [ 838.989827][T26946] bond10: entered allmulticast mode [ 838.995594][T26946] 8021q: adding VLAN 0 to HW filter on device bond10 [ 839.003262][T26945] FAULT_INJECTION: forcing a failure. [ 839.003262][T26945] name failslab, interval 1, probability 0, space 0, times 0 [ 839.032108][T26945] CPU: 0 UID: 0 PID: 26945 Comm: syz.4.5608 Not tainted syzkaller #0 PREEMPT(full) [ 839.032131][T26945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 839.032142][T26945] Call Trace: [ 839.032150][T26945] [ 839.032158][T26945] dump_stack_lvl+0xe8/0x150 [ 839.032183][T26945] should_fail_ex+0x40c/0x560 [ 839.032215][T26945] should_failslab+0xa8/0x100 [ 839.032235][T26945] __kmalloc_cache_noprof+0x88/0x660 [ 839.032260][T26945] ? ip_fib_metrics_init+0xbe/0x6f0 [ 839.032360][T26945] ip_fib_metrics_init+0xbe/0x6f0 [ 839.032384][T26945] ? rcu_is_watching+0x15/0xb0 [ 839.032405][T26945] ? __pfx_ip_fib_metrics_init+0x10/0x10 [ 839.032424][T26945] ? trace_kmalloc+0x2a/0xf0 [ 839.032448][T26945] ? __kmalloc_noprof+0x379/0x750 [ 839.032471][T26945] ? fib_create_info+0x16fe/0x3170 [ 839.032518][T26945] ? __kmalloc_noprof+0x1b4/0x750 [ 839.032546][T26945] fib_create_info+0x1778/0x3170 [ 839.032589][T26945] fib_table_insert+0xcb/0x1b10 [ 839.032621][T26945] ? fib_trie_table+0x142/0x1d0 [ 839.032643][T26945] ? fib_new_table+0x2c7/0x320 [ 839.032693][T26945] inet_rtm_newroute+0x14f/0x250 [ 839.032724][T26945] ? __local_bh_enable_ip+0xd0/0x130 [ 839.032741][T26945] ? __dev_queue_xmit+0x29b/0x37f0 [ 839.032795][T26945] ? __pfx_inet_rtm_newroute+0x10/0x10 [ 839.032841][T26945] ? __pfx_inet_rtm_newroute+0x10/0x10 [ 839.032864][T26945] rtnetlink_rcv_msg+0x802/0xc00 [ 839.032895][T26945] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 839.032920][T26945] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 839.032944][T26945] ? ref_tracker_free+0x689/0x830 [ 839.032967][T26945] ? __pfx_ref_tracker_free+0x10/0x10 [ 839.032996][T26945] netlink_rcv_skb+0x226/0x4a0 [ 839.033018][T26945] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 839.033046][T26945] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 839.033062][T26945] ? lockdep_hardirqs_on+0x7a/0x110 [ 839.033107][T26945] netlink_unicast+0x7bb/0x940 [ 839.033143][T26945] netlink_sendmsg+0x813/0xb40 [ 839.033171][T26945] ? __pfx_netlink_sendmsg+0x10/0x10 [ 839.033192][T26945] ? __fget_files+0x2a/0x420 [ 839.033213][T26945] ? aa_sock_msg_perm+0xf1/0x1b0 [ 839.033239][T26945] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 839.033262][T26945] ? __pfx_netlink_sendmsg+0x10/0x10 [ 839.033283][T26945] __sys_sendto+0x672/0x710 [ 839.033312][T26945] ? __pfx___sys_sendto+0x10/0x10 [ 839.033335][T26945] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 839.033369][T26945] ? __fget_files+0x3a2/0x420 [ 839.033399][T26945] ? ksys_write+0x242/0x270 [ 839.033424][T26945] ? __pfx_ksys_write+0x10/0x10 [ 839.033453][T26945] __x64_sys_sendto+0xde/0x100 [ 839.033478][T26945] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 839.033499][T26945] do_syscall_64+0x174/0x580 [ 839.033518][T26945] ? trace_irq_disable+0x3b/0x140 [ 839.033542][T26945] ? clear_bhb_loop+0x40/0x90 [ 839.033565][T26945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 839.033583][T26945] RIP: 0033:0x7f7d4299ce59 [ 839.033600][T26945] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 839.033615][T26945] RSP: 002b:00007f7d43826028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 839.033634][T26945] RAX: ffffffffffffffda RBX: 00007f7d42c15fa0 RCX: 00007f7d4299ce59 [ 839.033647][T26945] RDX: 0000000000000078 RSI: 0000200000000000 RDI: 0000000000000003 [ 839.033658][T26945] RBP: 00007f7d43826090 R08: 0000000000000000 R09: 0000000000000000 [ 839.033669][T26945] R10: 0000000024080000 R11: 0000000000000246 R12: 0000000000000001 [ 839.033680][T26945] R13: 00007f7d42c16038 R14: 00007f7d42c15fa0 R15: 00007ffce2368678 [ 839.033719][T26945] [ 839.478453][T26962] netlink: 'syz.4.5614': attribute type 4 has an invalid length. [ 839.486574][T26962] netlink: 17 bytes leftover after parsing attributes in process `syz.4.5614'. [ 839.863590][ T5633] Bluetooth: hci2: command 0x0406 tx timeout [ 839.863604][ T50] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 840.100761][T26990] netlink: 'syz.1.5628': attribute type 10 has an invalid length. [ 840.127475][T26993] netlink: 'syz.4.5627': attribute type 11 has an invalid length. [ 841.171066][T27032] FAULT_INJECTION: forcing a failure. [ 841.171066][T27032] name failslab, interval 1, probability 0, space 0, times 0 [ 841.185610][T27032] CPU: 0 UID: 0 PID: 27032 Comm: syz.1.5639 Not tainted syzkaller #0 PREEMPT(full) [ 841.185634][T27032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 841.185645][T27032] Call Trace: [ 841.185652][T27032] [ 841.185660][T27032] dump_stack_lvl+0xe8/0x150 [ 841.185686][T27032] should_fail_ex+0x40c/0x560 [ 841.185717][T27032] should_failslab+0xa8/0x100 [ 841.185736][T27032] __kmalloc_noprof+0xe8/0x750 [ 841.185761][T27032] ? fib6_info_alloc+0x30/0xf0 [ 841.185873][T27032] fib6_info_alloc+0x30/0xf0 [ 841.185893][T27032] ip6_route_info_create+0x149/0x890 [ 841.185943][T27032] ? __lock_acquire+0x683/0x2cd0 [ 841.185965][T27032] ip6_route_add+0x49/0x1b0 [ 841.185990][T27032] inet6_rtm_newroute+0x267/0x1a30 [ 841.186013][T27032] ? unwind_next_frame+0x8f/0x2550 [ 841.186050][T27032] ? is_bpf_text_address+0x26/0x2b0 [ 841.186070][T27032] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 841.186100][T27032] ? __lock_acquire+0x683/0x2cd0 [ 841.186123][T27032] ? kernel_text_address+0xa5/0xe0 [ 841.186161][T27032] ? __kernel_text_address+0xd/0x30 [ 841.186183][T27032] ? unwind_get_return_address+0x4d/0x90 [ 841.186228][T27032] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 841.186246][T27032] rtnetlink_rcv_msg+0x802/0xc00 [ 841.186270][T27032] ? kasan_save_track+0x3e/0x80 [ 841.186296][T27032] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 841.186319][T27032] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 841.186345][T27032] ? __lock_acquire+0x683/0x2cd0 [ 841.186372][T27032] netlink_rcv_skb+0x226/0x4a0 [ 841.186389][T27032] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 841.186415][T27032] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 841.186444][T27032] ? netlink_deliver_tap+0x2e/0x1b0 [ 841.186463][T27032] ? netlink_deliver_tap+0x2e/0x1b0 [ 841.186486][T27032] netlink_unicast+0x7bb/0x940 [ 841.186522][T27032] netlink_sendmsg+0x813/0xb40 [ 841.186549][T27032] ? __pfx_netlink_sendmsg+0x10/0x10 [ 841.186571][T27032] ? aa_sock_msg_perm+0xf1/0x1b0 [ 841.186597][T27032] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 841.186619][T27032] ? __pfx_netlink_sendmsg+0x10/0x10 [ 841.186639][T27032] ____sys_sendmsg+0x9b9/0xa20 [ 841.186659][T27032] ? __might_fault+0xaf/0x130 [ 841.186687][T27032] ? __pfx_____sys_sendmsg+0x10/0x10 [ 841.186712][T27032] ? import_iovec+0x73/0xa0 [ 841.186735][T27032] ___sys_sendmsg+0x2a5/0x360 [ 841.186752][T27032] ? __lock_acquire+0x683/0x2cd0 [ 841.186773][T27032] ? __pfx____sys_sendmsg+0x10/0x10 [ 841.186823][T27032] ? __fget_files+0x2a/0x420 [ 841.186844][T27032] ? __fget_files+0x3a2/0x420 [ 841.186874][T27032] __x64_sys_sendmsg+0x1bd/0x2a0 [ 841.186896][T27032] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 841.186923][T27032] ? __pfx_ksys_write+0x10/0x10 [ 841.186954][T27032] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 841.186973][T27032] do_syscall_64+0x174/0x580 [ 841.186993][T27032] ? trace_irq_disable+0x3b/0x140 [ 841.187017][T27032] ? clear_bhb_loop+0x40/0x90 [ 841.187038][T27032] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 841.187063][T27032] RIP: 0033:0x7ff2c779ce59 [ 841.187081][T27032] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 841.187096][T27032] RSP: 002b:00007ff2c86af028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 841.187115][T27032] RAX: ffffffffffffffda RBX: 00007ff2c7a15fa0 RCX: 00007ff2c779ce59 [ 841.187128][T27032] RDX: 0000000000000010 RSI: 0000200000000680 RDI: 0000000000000004 [ 841.187140][T27032] RBP: 00007ff2c86af090 R08: 0000000000000000 R09: 0000000000000000 [ 841.187151][T27032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 841.187161][T27032] R13: 00007ff2c7a16038 R14: 00007ff2c7a15fa0 R15: 00007ffe89013ad8 [ 841.187188][T27032] [ 843.316270][T27003] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 844.000592][T27079] FAULT_INJECTION: forcing a failure. [ 844.000592][T27079] name failslab, interval 1, probability 0, space 0, times 0 [ 844.022550][T27080] __nla_validate_parse: 10 callbacks suppressed [ 844.022569][T27080] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5653'. [ 844.036629][T27079] CPU: 1 UID: 0 PID: 27079 Comm: syz.1.5655 Not tainted syzkaller #0 PREEMPT(full) [ 844.036652][T27079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 844.036663][T27079] Call Trace: [ 844.036670][T27079] [ 844.036678][T27079] dump_stack_lvl+0xe8/0x150 [ 844.036703][T27079] should_fail_ex+0x40c/0x560 [ 844.036736][T27079] should_failslab+0xa8/0x100 [ 844.036754][T27079] __kmalloc_noprof+0xe8/0x750 [ 844.036778][T27079] ? seg6_local_build_state+0x151/0xdd0 [ 844.036910][T27079] seg6_local_build_state+0x151/0xdd0 [ 844.036937][T27079] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 844.036965][T27079] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 844.036987][T27079] ? __pfx_seg6_local_build_state+0x10/0x10 [ 844.037031][T27079] ? lwtunnel_build_state+0xe2/0x4c0 [ 844.037113][T27079] lwtunnel_build_state+0x384/0x4c0 [ 844.037139][T27079] ? lwtunnel_build_state+0xe2/0x4c0 [ 844.037163][T27079] fib_nh_common_init+0x130/0x3d0 [ 844.037190][T27079] ? in6_dev_get+0x1a/0x290 [ 844.037214][T27079] ? __pfx_fib_nh_common_init+0x10/0x10 [ 844.037239][T27079] ? in6_dev_get+0x1a/0x290 [ 844.037259][T27079] ? in6_dev_get+0x1a/0x290 [ 844.037282][T27079] fib6_nh_init+0xd20/0x1e40 [ 844.037316][T27079] ? __pfx_fib6_nh_init+0x10/0x10 [ 844.037335][T27079] ? kasan_save_track+0x4f/0x80 [ 844.037356][T27079] ? kasan_save_track+0x3e/0x80 [ 844.037376][T27079] ? __kasan_kmalloc+0x93/0xb0 [ 844.037398][T27079] ? __kmalloc_noprof+0x358/0x750 [ 844.037419][T27079] ? fib6_info_alloc+0x30/0xf0 [ 844.037437][T27079] ? ip6_route_info_create+0x149/0x890 [ 844.037458][T27079] ? ip6_route_add+0x49/0x1b0 [ 844.037477][T27079] ? inet6_rtm_newroute+0x267/0x1a30 [ 844.037495][T27079] ? rtnetlink_rcv_msg+0x802/0xc00 [ 844.037519][T27079] ? netlink_rcv_skb+0x226/0x4a0 [ 844.037536][T27079] ? netlink_unicast+0x7bb/0x940 [ 844.037559][T27079] ? netlink_sendmsg+0x813/0xb40 [ 844.037578][T27079] ? ____sys_sendmsg+0x9b9/0xa20 [ 844.037595][T27079] ? ___sys_sendmsg+0x2a5/0x360 [ 844.037611][T27079] ? __x64_sys_sendmsg+0x1bd/0x2a0 [ 844.037628][T27079] ? do_syscall_64+0x174/0x580 [ 844.037646][T27079] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 844.037694][T27079] ? ip_fib_metrics_init+0x419/0x6f0 [ 844.037720][T27079] ip6_route_info_create_nh+0x16a/0xad0 [ 844.037742][T27079] ? ipv6_addr_prefix+0x5d/0x1a0 [ 844.037761][T27079] ? __asan_memcpy+0x40/0x70 [ 844.037782][T27079] ? __pfx_ip6_route_info_create_nh+0x10/0x10 [ 844.037803][T27079] ? ipv6_addr_prefix+0xd6/0x1a0 [ 844.037824][T27079] ? ip6_route_info_create+0x545/0x890 [ 844.037851][T27079] ip6_route_add+0x6e/0x1b0 [ 844.037874][T27079] inet6_rtm_newroute+0x267/0x1a30 [ 844.037897][T27079] ? unwind_next_frame+0x8f/0x2550 [ 844.037924][T27079] ? is_bpf_text_address+0x26/0x2b0 [ 844.037942][T27079] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 844.037972][T27079] ? __lock_acquire+0x683/0x2cd0 [ 844.038003][T27079] ? kernel_text_address+0xa5/0xe0 [ 844.038027][T27079] ? __kernel_text_address+0xd/0x30 [ 844.038049][T27079] ? unwind_get_return_address+0x4d/0x90 [ 844.038093][T27079] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 844.038113][T27079] rtnetlink_rcv_msg+0x802/0xc00 [ 844.038137][T27079] ? kasan_save_track+0x3e/0x80 [ 844.038162][T27079] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 844.038187][T27079] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 844.038213][T27079] ? __lock_acquire+0x683/0x2cd0 [ 844.038242][T27079] netlink_rcv_skb+0x226/0x4a0 [ 844.038261][T27079] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 844.038288][T27079] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 844.038318][T27079] ? netlink_deliver_tap+0x2e/0x1b0 [ 844.038336][T27079] ? netlink_deliver_tap+0x2e/0x1b0 [ 844.038358][T27079] netlink_unicast+0x7bb/0x940 [ 844.038393][T27079] netlink_sendmsg+0x813/0xb40 [ 844.038420][T27079] ? __pfx_netlink_sendmsg+0x10/0x10 [ 844.038442][T27079] ? aa_sock_msg_perm+0xf1/0x1b0 [ 844.038467][T27079] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 844.038489][T27079] ? __pfx_netlink_sendmsg+0x10/0x10 [ 844.038510][T27079] ____sys_sendmsg+0x9b9/0xa20 [ 844.038528][T27079] ? __might_fault+0xaf/0x130 [ 844.038555][T27079] ? __pfx_____sys_sendmsg+0x10/0x10 [ 844.038582][T27079] ? import_iovec+0x73/0xa0 [ 844.038605][T27079] ___sys_sendmsg+0x2a5/0x360 [ 844.038623][T27079] ? __lock_acquire+0x683/0x2cd0 [ 844.038644][T27079] ? __pfx____sys_sendmsg+0x10/0x10 [ 844.038694][T27079] ? __fget_files+0x2a/0x420 [ 844.038714][T27079] ? __fget_files+0x3a2/0x420 [ 844.038743][T27079] __x64_sys_sendmsg+0x1bd/0x2a0 [ 844.038764][T27079] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 844.038791][T27079] ? __pfx_ksys_write+0x10/0x10 [ 844.038823][T27079] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 844.038841][T27079] do_syscall_64+0x174/0x580 [ 844.038860][T27079] ? trace_irq_disable+0x3b/0x140 [ 844.038884][T27079] ? clear_bhb_loop+0x40/0x90 [ 844.038906][T27079] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 844.038923][T27079] RIP: 0033:0x7ff2c779ce59 [ 844.038940][T27079] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 844.038954][T27079] RSP: 002b:00007ff2c86af028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 844.038973][T27079] RAX: ffffffffffffffda RBX: 00007ff2c7a15fa0 RCX: 00007ff2c779ce59 [ 844.038986][T27079] RDX: 0000000000000010 RSI: 0000200000000680 RDI: 0000000000000003 [ 844.039003][T27079] RBP: 00007ff2c86af090 R08: 0000000000000000 R09: 0000000000000000 [ 844.039015][T27079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 844.039025][T27079] R13: 00007ff2c7a16038 R14: 00007ff2c7a15fa0 R15: 00007ffe89013ad8 [ 844.039053][T27079] [ 844.660308][T27098] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5657'. [ 844.785304][ T185] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 57742 - 0 [ 844.808932][ T185] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 844.823598][ T185] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 57742 - 0 [ 844.838751][ T185] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 844.921409][ T185] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 57742 - 0 [ 844.949024][ T185] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 844.976751][ T185] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 57742 - 0 [ 845.026464][ T185] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 845.173650][T27118] netlink: 76 bytes leftover after parsing attributes in process `syz.1.5664'. [ 845.228934][T27118] hmac(sha224): entered promiscuous mode [ 845.295026][T27122] Cannot find del_set index 8192 as target [ 845.461538][T27127] FAULT_INJECTION: forcing a failure. [ 845.461538][T27127] name failslab, interval 1, probability 0, space 0, times 0 [ 845.504903][T27127] CPU: 0 UID: 0 PID: 27127 Comm: syz.1.5667 Not tainted syzkaller #0 PREEMPT(full) [ 845.504928][T27127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 845.504939][T27127] Call Trace: [ 845.504946][T27127] [ 845.504955][T27127] dump_stack_lvl+0xe8/0x150 [ 845.504980][T27127] should_fail_ex+0x40c/0x560 [ 845.505013][T27127] should_failslab+0xa8/0x100 [ 845.505033][T27127] __kmalloc_cache_noprof+0x88/0x660 [ 845.505057][T27127] ? do_raw_spin_lock+0x12b/0x2f0 [ 845.505082][T27127] ? mgmt_pending_new+0x65/0x1e0 [ 845.505180][T27127] mgmt_pending_new+0x65/0x1e0 [ 845.505217][T27127] mgmt_pending_add+0x35/0x140 [ 845.505245][T27127] start_discovery_internal+0x3b7/0x5f0 [ 845.505271][T27127] hci_mgmt_cmd+0xa2c/0xfc0 [ 845.505307][T27127] hci_sock_sendmsg+0x6e1/0xf50 [ 845.505331][T27127] ? __pfx_aa_sk_perm+0x10/0x10 [ 845.505358][T27127] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 845.505383][T27127] ? aa_sock_msg_perm+0xf1/0x1b0 [ 845.505409][T27127] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 845.505434][T27127] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 845.505457][T27127] sock_write_iter+0x498/0x4e0 [ 845.505483][T27127] ? __pfx_sock_write_iter+0x10/0x10 [ 845.505515][T27127] ? bpf_lsm_file_permission+0x9/0x20 [ 845.505539][T27127] ? security_file_permission+0x75/0x260 [ 845.505571][T27127] vfs_write+0x612/0xba0 [ 845.505604][T27127] ? __pfx_vfs_write+0x10/0x10 [ 845.505639][T27127] ? __fget_files+0x2a/0x420 [ 845.505669][T27127] ksys_write+0x150/0x270 [ 845.505697][T27127] ? __pfx_ksys_write+0x10/0x10 [ 845.505730][T27127] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 845.505750][T27127] do_syscall_64+0x174/0x580 [ 845.505770][T27127] ? trace_irq_disable+0x3b/0x140 [ 845.505795][T27127] ? clear_bhb_loop+0x40/0x90 [ 845.505817][T27127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 845.505834][T27127] RIP: 0033:0x7ff2c779ce59 [ 845.505851][T27127] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 845.505865][T27127] RSP: 002b:00007ff2c86af028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 845.505884][T27127] RAX: ffffffffffffffda RBX: 00007ff2c7a15fa0 RCX: 00007ff2c779ce59 [ 845.505897][T27127] RDX: 0000000000000007 RSI: 0000200000000000 RDI: 0000000000000005 [ 845.505908][T27127] RBP: 00007ff2c86af090 R08: 0000000000000000 R09: 0000000000000000 [ 845.505919][T27127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 845.505929][T27127] R13: 00007ff2c7a16038 R14: 00007ff2c7a15fa0 R15: 00007ffe89013ad8 [ 845.505961][T27127] [ 845.519763][T27135] netlink: 'syz.4.5670': attribute type 1 has an invalid length. [ 845.624539][ T5633] Bluetooth: hci3: command 0x0405 tx timeout [ 845.635098][T27137] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5668'. [ 845.658090][T27136] erspan1: entered allmulticast mode [ 845.826928][T27147] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.5673'. [ 845.959780][T27135] bond6: entered promiscuous mode [ 845.973626][T27135] bond6: entered allmulticast mode [ 845.989386][T27135] 8021q: adding VLAN 0 to HW filter on device bond6 [ 846.220970][T27162] FAULT_INJECTION: forcing a failure. [ 846.220970][T27162] name failslab, interval 1, probability 0, space 0, times 0 [ 846.244698][T27162] CPU: 0 UID: 0 PID: 27162 Comm: syz.1.5675 Not tainted syzkaller #0 PREEMPT(full) [ 846.244723][T27162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 846.244734][T27162] Call Trace: [ 846.244741][T27162] [ 846.244749][T27162] dump_stack_lvl+0xe8/0x150 [ 846.244776][T27162] should_fail_ex+0x40c/0x560 [ 846.244809][T27162] should_failslab+0xa8/0x100 [ 846.244836][T27162] __kmalloc_noprof+0xe8/0x750 [ 846.244861][T27162] ? seg6_local_build_state+0x151/0xdd0 [ 846.244892][T27162] seg6_local_build_state+0x151/0xdd0 [ 846.244917][T27162] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 846.244945][T27162] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 846.244965][T27162] ? __pfx_seg6_local_build_state+0x10/0x10 [ 846.245006][T27162] ? lwtunnel_build_state+0xe2/0x4c0 [ 846.245034][T27162] lwtunnel_build_state+0x384/0x4c0 [ 846.245057][T27162] ? lwtunnel_build_state+0xe2/0x4c0 [ 846.245082][T27162] fib_nh_common_init+0x130/0x3d0 [ 846.245107][T27162] ? in6_dev_get+0x1a/0x290 [ 846.245131][T27162] ? __pfx_fib_nh_common_init+0x10/0x10 [ 846.245154][T27162] ? in6_dev_get+0x1a/0x290 [ 846.245175][T27162] ? in6_dev_get+0x1a/0x290 [ 846.245197][T27162] fib6_nh_init+0xd20/0x1e40 [ 846.245231][T27162] ? __pfx_fib6_nh_init+0x10/0x10 [ 846.245251][T27162] ? kasan_save_track+0x4f/0x80 [ 846.245272][T27162] ? kasan_save_track+0x3e/0x80 [ 846.245292][T27162] ? __kasan_kmalloc+0x93/0xb0 [ 846.245313][T27162] ? __kmalloc_noprof+0x358/0x750 [ 846.245333][T27162] ? fib6_info_alloc+0x30/0xf0 [ 846.245352][T27162] ? ip6_route_info_create+0x149/0x890 [ 846.245372][T27162] ? ip6_route_add+0x49/0x1b0 [ 846.245392][T27162] ? inet6_rtm_newroute+0x267/0x1a30 [ 846.245410][T27162] ? rtnetlink_rcv_msg+0x802/0xc00 [ 846.245435][T27162] ? netlink_rcv_skb+0x226/0x4a0 [ 846.245451][T27162] ? netlink_unicast+0x7bb/0x940 [ 846.245472][T27162] ? netlink_sendmsg+0x813/0xb40 [ 846.245489][T27162] ? ____sys_sendmsg+0x9b9/0xa20 [ 846.245505][T27162] ? ___sys_sendmsg+0x2a5/0x360 [ 846.245522][T27162] ? __x64_sys_sendmsg+0x1bd/0x2a0 [ 846.245538][T27162] ? do_syscall_64+0x174/0x580 [ 846.245557][T27162] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 846.245608][T27162] ? ip_fib_metrics_init+0x419/0x6f0 [ 846.245634][T27162] ip6_route_info_create_nh+0x16a/0xad0 [ 846.245657][T27162] ? ipv6_addr_prefix+0x5d/0x1a0 [ 846.245677][T27162] ? __asan_memcpy+0x40/0x70 [ 846.245700][T27162] ? __pfx_ip6_route_info_create_nh+0x10/0x10 [ 846.245722][T27162] ? ipv6_addr_prefix+0xd6/0x1a0 [ 846.245743][T27162] ? ip6_route_info_create+0x545/0x890 [ 846.245771][T27162] ip6_route_add+0x6e/0x1b0 [ 846.245796][T27162] inet6_rtm_newroute+0x267/0x1a30 [ 846.245819][T27162] ? unwind_next_frame+0x8f/0x2550 [ 846.245855][T27162] ? is_bpf_text_address+0x26/0x2b0 [ 846.245874][T27162] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 846.245906][T27162] ? __lock_acquire+0x683/0x2cd0 [ 846.245931][T27162] ? kernel_text_address+0xa5/0xe0 [ 846.245954][T27162] ? __kernel_text_address+0xd/0x30 [ 846.245977][T27162] ? unwind_get_return_address+0x4d/0x90 [ 846.246026][T27162] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 846.246045][T27162] rtnetlink_rcv_msg+0x802/0xc00 [ 846.246070][T27162] ? kasan_save_track+0x3e/0x80 [ 846.246096][T27162] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 846.246121][T27162] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 846.246147][T27162] ? __lock_acquire+0x683/0x2cd0 [ 846.246177][T27162] netlink_rcv_skb+0x226/0x4a0 [ 846.246197][T27162] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 846.246225][T27162] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 846.246257][T27162] ? netlink_deliver_tap+0x2e/0x1b0 [ 846.246276][T27162] ? netlink_deliver_tap+0x2e/0x1b0 [ 846.246299][T27162] netlink_unicast+0x7bb/0x940 [ 846.246333][T27162] netlink_sendmsg+0x813/0xb40 [ 846.246362][T27162] ? __pfx_netlink_sendmsg+0x10/0x10 [ 846.246384][T27162] ? aa_sock_msg_perm+0xf1/0x1b0 [ 846.246412][T27162] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 846.246434][T27162] ? __pfx_netlink_sendmsg+0x10/0x10 [ 846.246455][T27162] ____sys_sendmsg+0x9b9/0xa20 [ 846.246472][T27162] ? __might_fault+0xaf/0x130 [ 846.246501][T27162] ? __pfx_____sys_sendmsg+0x10/0x10 [ 846.246528][T27162] ? import_iovec+0x73/0xa0 [ 846.246554][T27162] ___sys_sendmsg+0x2a5/0x360 [ 846.246571][T27162] ? __lock_acquire+0x683/0x2cd0 [ 846.246592][T27162] ? __pfx____sys_sendmsg+0x10/0x10 [ 846.246646][T27162] ? __fget_files+0x2a/0x420 [ 846.246667][T27162] ? __fget_files+0x3a2/0x420 [ 846.246696][T27162] __x64_sys_sendmsg+0x1bd/0x2a0 [ 846.246718][T27162] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 846.246746][T27162] ? __pfx_ksys_write+0x10/0x10 [ 846.246780][T27162] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 846.246800][T27162] do_syscall_64+0x174/0x580 [ 846.246820][T27162] ? trace_irq_disable+0x3b/0x140 [ 846.246852][T27162] ? clear_bhb_loop+0x40/0x90 [ 846.246875][T27162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 846.246893][T27162] RIP: 0033:0x7ff2c779ce59 [ 846.246910][T27162] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 846.246926][T27162] RSP: 002b:00007ff2c86af028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 846.246946][T27162] RAX: ffffffffffffffda RBX: 00007ff2c7a15fa0 RCX: 00007ff2c779ce59 [ 846.246960][T27162] RDX: 0000000000000010 RSI: 0000200000000680 RDI: 0000000000000009 [ 846.246972][T27162] RBP: 00007ff2c86af090 R08: 0000000000000000 R09: 0000000000000000 [ 846.246983][T27162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 846.246995][T27162] R13: 00007ff2c7a16038 R14: 00007ff2c7a15fa0 R15: 00007ffe89013ad8 [ 846.247025][T27162] [ 846.823371][T27168] FAULT_INJECTION: forcing a failure. [ 846.823371][T27168] name failslab, interval 1, probability 0, space 0, times 0 [ 846.836184][T27168] CPU: 0 UID: 0 PID: 27168 Comm: syz.0.5678 Not tainted syzkaller #0 PREEMPT(full) [ 846.836208][T27168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 846.836219][T27168] Call Trace: [ 846.836226][T27168] [ 846.836234][T27168] dump_stack_lvl+0xe8/0x150 [ 846.836260][T27168] should_fail_ex+0x40c/0x560 [ 846.836292][T27168] should_failslab+0xa8/0x100 [ 846.836312][T27168] __kmalloc_cache_noprof+0x88/0x660 [ 846.836338][T27168] ? nfnetlink_rcv+0x1021/0x28c0 [ 846.836468][T27168] nfnetlink_rcv+0x1021/0x28c0 [ 846.836494][T27168] ? is_bpf_text_address+0x292/0x2b0 [ 846.836546][T27168] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 846.836616][T27168] ? netlink_deliver_tap+0x2e/0x1b0 [ 846.836647][T27168] ? netlink_deliver_tap+0x2e/0x1b0 [ 846.836666][T27168] ? netlink_deliver_tap+0x2e/0x1b0 [ 846.836691][T27168] netlink_unicast+0x7bb/0x940 [ 846.836729][T27168] netlink_sendmsg+0x813/0xb40 [ 846.836757][T27168] ? __pfx_netlink_sendmsg+0x10/0x10 [ 846.836788][T27168] ? aa_sock_msg_perm+0xf1/0x1b0 [ 846.836815][T27168] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 846.836838][T27168] ? __pfx_netlink_sendmsg+0x10/0x10 [ 846.836859][T27168] ____sys_sendmsg+0x9b9/0xa20 [ 846.836878][T27168] ? __might_fault+0xaf/0x130 [ 846.836907][T27168] ? __pfx_____sys_sendmsg+0x10/0x10 [ 846.836936][T27168] ? import_iovec+0x73/0xa0 [ 846.836958][T27168] ___sys_sendmsg+0x2a5/0x360 [ 846.836976][T27168] ? __lock_acquire+0x683/0x2cd0 [ 846.836998][T27168] ? __pfx____sys_sendmsg+0x10/0x10 [ 846.837048][T27168] ? __fget_files+0x2a/0x420 [ 846.837069][T27168] ? __fget_files+0x3a2/0x420 [ 846.837101][T27168] __x64_sys_sendmsg+0x1bd/0x2a0 [ 846.837123][T27168] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 846.837153][T27168] ? __pfx_ksys_write+0x10/0x10 [ 846.837186][T27168] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 846.837206][T27168] do_syscall_64+0x174/0x580 [ 846.837226][T27168] ? trace_irq_disable+0x3b/0x140 [ 846.837250][T27168] ? clear_bhb_loop+0x40/0x90 [ 846.837273][T27168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 846.837290][T27168] RIP: 0033:0x7f7859f9ce59 [ 846.837307][T27168] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 846.837321][T27168] RSP: 002b:00007f785ad81028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 846.837340][T27168] RAX: ffffffffffffffda RBX: 00007f785a215fa0 RCX: 00007f7859f9ce59 [ 846.837353][T27168] RDX: 0000000000000000 RSI: 000020000000c2c0 RDI: 0000000000000003 [ 846.837365][T27168] RBP: 00007f785ad81090 R08: 0000000000000000 R09: 0000000000000000 [ 846.837375][T27168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 846.837386][T27168] R13: 00007f785a216038 R14: 00007f785a215fa0 R15: 00007ffe08c03048 [ 846.837415][T27168] [ 847.359089][T27167] veth73: entered allmulticast mode [ 847.459368][T27180] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 847.510330][T27195] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5683'. [ 847.520391][T27193] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5682'. [ 847.545940][T27200] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5684'. [ 847.692709][T27209] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5686'. [ 847.708487][ T5633] Bluetooth: hci3: command 0x0405 tx timeout [ 847.810504][T27195] veth105: entered allmulticast mode [ 847.936968][T27212] tipc: Enabled bearer , priority 0 [ 847.985696][T27212] tipc: Resetting bearer [ 848.030723][T27211] tipc: Disabling bearer [ 848.126354][T27237] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5690'. [ 848.165730][T27236] syzkaller1: entered promiscuous mode [ 848.180271][T27236] syzkaller1: entered allmulticast mode [ 848.459718][T27248] hmac(sha224): entered promiscuous mode [ 849.198130][T27285] Bluetooth: MGMT ver 1.23 [ 849.246382][T27289] syzkaller0: entered promiscuous mode [ 849.271156][T27289] syzkaller0: entered allmulticast mode [ 849.306161][T27289] __nla_validate_parse: 2 callbacks suppressed [ 849.306180][T27289] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5710'. [ 849.596494][T27307] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5718'. [ 849.769294][T27314] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5721'. [ 849.795706][T27315] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5722'. [ 849.810307][T27315] netlink: 9 bytes leftover after parsing attributes in process `syz.2.5722'. [ 849.950817][T27318] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5723'. [ 849.971570][T27318] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5723'. [ 849.994729][T27318] netlink: 'syz.2.5723': attribute type 4 has an invalid length. [ 850.061981][T27324] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5726'. [ 850.071837][T27324] FAULT_INJECTION: forcing a failure. [ 850.071837][T27324] name failslab, interval 1, probability 0, space 0, times 0 [ 850.096506][T27324] CPU: 0 UID: 0 PID: 27324 Comm: syz.1.5726 Not tainted syzkaller #0 PREEMPT(full) [ 850.096528][T27324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 850.096539][T27324] Call Trace: [ 850.096546][T27324] [ 850.096554][T27324] dump_stack_lvl+0xe8/0x150 [ 850.096580][T27324] should_fail_ex+0x40c/0x560 [ 850.096613][T27324] should_failslab+0xa8/0x100 [ 850.096633][T27324] kmem_cache_alloc_node_noprof+0x8f/0x680 [ 850.096660][T27324] ? __alloc_skb+0x1d7/0x7a0 [ 850.096683][T27324] ? __local_bh_enable_ip+0xd0/0x130 [ 850.096706][T27324] __alloc_skb+0x1d7/0x7a0 [ 850.096730][T27324] netlink_ack+0x136/0xb30 [ 850.096747][T27324] ? __pfx_genl_rcv_msg+0x10/0x10 [ 850.096787][T27324] netlink_rcv_skb+0x2a4/0x4a0 [ 850.096808][T27324] ? __pfx_genl_rcv_msg+0x10/0x10 [ 850.096832][T27324] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 850.096867][T27324] ? down_read+0x270/0x2e0 [ 850.096888][T27324] ? genl_rcv+0xd/0x40 [ 850.096913][T27324] genl_rcv+0x28/0x40 [ 850.096933][T27324] netlink_unicast+0x7bb/0x940 [ 850.096969][T27324] netlink_sendmsg+0x813/0xb40 [ 850.096998][T27324] ? __pfx_netlink_sendmsg+0x10/0x10 [ 850.097022][T27324] ? aa_sock_msg_perm+0xf1/0x1b0 [ 850.097048][T27324] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 850.097071][T27324] ? __pfx_netlink_sendmsg+0x10/0x10 [ 850.097092][T27324] ____sys_sendmsg+0x9b9/0xa20 [ 850.097111][T27324] ? __might_fault+0xaf/0x130 [ 850.097137][T27324] ? __pfx_____sys_sendmsg+0x10/0x10 [ 850.097157][T27324] ? import_iovec+0x73/0xa0 [ 850.097176][T27324] ___sys_sendmsg+0x2a5/0x360 [ 850.097190][T27324] ? __lock_acquire+0x683/0x2cd0 [ 850.097207][T27324] ? __pfx____sys_sendmsg+0x10/0x10 [ 850.097247][T27324] ? __fget_files+0x2a/0x420 [ 850.097263][T27324] ? __fget_files+0x3a2/0x420 [ 850.097286][T27324] __x64_sys_sendmsg+0x1bd/0x2a0 [ 850.097302][T27324] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 850.097323][T27324] ? __pfx_ksys_write+0x10/0x10 [ 850.097349][T27324] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 850.097363][T27324] do_syscall_64+0x174/0x580 [ 850.097378][T27324] ? trace_irq_disable+0x3b/0x140 [ 850.097397][T27324] ? clear_bhb_loop+0x40/0x90 [ 850.097414][T27324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 850.097427][T27324] RIP: 0033:0x7ff2c779ce59 [ 850.097440][T27324] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 850.097452][T27324] RSP: 002b:00007ff2c86af028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 850.097475][T27324] RAX: ffffffffffffffda RBX: 00007ff2c7a15fa0 RCX: 00007ff2c779ce59 [ 850.097486][T27324] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 850.097495][T27324] RBP: 00007ff2c86af090 R08: 0000000000000000 R09: 0000000000000000 [ 850.097503][T27324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 850.097511][T27324] R13: 00007ff2c7a16038 R14: 00007ff2c7a15fa0 R15: 00007ffe89013ad8 [ 850.097534][T27324] [ 850.707687][T27337] FAULT_INJECTION: forcing a failure. [ 850.707687][T27337] name failslab, interval 1, probability 0, space 0, times 0 [ 850.731954][T27337] CPU: 1 UID: 0 PID: 27337 Comm: syz.1.5731 Not tainted syzkaller #0 PREEMPT(full) [ 850.731979][T27337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 850.731990][T27337] Call Trace: [ 850.731998][T27337] [ 850.732006][T27337] dump_stack_lvl+0xe8/0x150 [ 850.732032][T27337] should_fail_ex+0x40c/0x560 [ 850.732065][T27337] should_failslab+0xa8/0x100 [ 850.732085][T27337] __kmalloc_noprof+0xe8/0x750 [ 850.732110][T27337] ? nf_tables_newrule+0x1524/0x28a0 [ 850.732240][T27337] nf_tables_newrule+0x1524/0x28a0 [ 850.732281][T27337] ? __pfx_nf_tables_newrule+0x10/0x10 [ 850.732310][T27337] ? nfnl_pernet+0x23/0x240 [ 850.732337][T27337] ? nfnl_pernet+0x23/0x240 [ 850.732371][T27337] ? __nla_parse+0x40/0x60 [ 850.732396][T27337] nfnetlink_rcv+0x1288/0x28c0 [ 850.732420][T27337] ? is_bpf_text_address+0x292/0x2b0 [ 850.732472][T27337] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 850.732544][T27337] ? netlink_deliver_tap+0x2e/0x1b0 [ 850.732574][T27337] ? netlink_deliver_tap+0x2e/0x1b0 [ 850.732593][T27337] ? netlink_deliver_tap+0x2e/0x1b0 [ 850.732618][T27337] netlink_unicast+0x7bb/0x940 [ 850.732655][T27337] netlink_sendmsg+0x813/0xb40 [ 850.732684][T27337] ? __pfx_netlink_sendmsg+0x10/0x10 [ 850.732708][T27337] ? aa_sock_msg_perm+0xf1/0x1b0 [ 850.732735][T27337] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 850.732757][T27337] ? __pfx_netlink_sendmsg+0x10/0x10 [ 850.732779][T27337] ____sys_sendmsg+0x9b9/0xa20 [ 850.732798][T27337] ? __might_fault+0xaf/0x130 [ 850.732828][T27337] ? __pfx_____sys_sendmsg+0x10/0x10 [ 850.732856][T27337] ? import_iovec+0x73/0xa0 [ 850.732881][T27337] ___sys_sendmsg+0x2a5/0x360 [ 850.732899][T27337] ? __lock_acquire+0x683/0x2cd0 [ 850.732922][T27337] ? __pfx____sys_sendmsg+0x10/0x10 [ 850.732976][T27337] ? __fget_files+0x2a/0x420 [ 850.732997][T27337] ? __fget_files+0x3a2/0x420 [ 850.733027][T27337] __x64_sys_sendmsg+0x1bd/0x2a0 [ 850.733050][T27337] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 850.733077][T27337] ? __pfx_ksys_write+0x10/0x10 [ 850.733108][T27337] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 850.733126][T27337] do_syscall_64+0x174/0x580 [ 850.733146][T27337] ? trace_irq_disable+0x3b/0x140 [ 850.733170][T27337] ? clear_bhb_loop+0x40/0x90 [ 850.733191][T27337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 850.733209][T27337] RIP: 0033:0x7ff2c779ce59 [ 850.733226][T27337] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 850.733242][T27337] RSP: 002b:00007ff2c86af028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 850.733261][T27337] RAX: ffffffffffffffda RBX: 00007ff2c7a15fa0 RCX: 00007ff2c779ce59 [ 850.733274][T27337] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 850.733286][T27337] RBP: 00007ff2c86af090 R08: 0000000000000000 R09: 0000000000000000 [ 850.733303][T27337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 850.733313][T27337] R13: 00007ff2c7a16038 R14: 00007ff2c7a15fa0 R15: 00007ffe89013ad8 [ 850.733343][T27337] [ 851.028909][T27342] FAULT_INJECTION: forcing a failure. [ 851.028909][T27342] name failslab, interval 1, probability 0, space 0, times 0 [ 851.042032][T27342] CPU: 0 UID: 0 PID: 27342 Comm: syz.0.5732 Not tainted syzkaller #0 PREEMPT(full) [ 851.042055][T27342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 851.042066][T27342] Call Trace: [ 851.042073][T27342] [ 851.042079][T27342] dump_stack_lvl+0xe8/0x150 [ 851.042104][T27342] should_fail_ex+0x40c/0x560 [ 851.042135][T27342] should_failslab+0xa8/0x100 [ 851.042154][T27342] kmem_cache_alloc_node_noprof+0x8f/0x680 [ 851.042178][T27342] ? __alloc_skb+0x189/0x7a0 [ 851.042202][T27342] ? __alloc_skb+0x1d7/0x7a0 [ 851.042224][T27342] ? __local_bh_enable_ip+0xd0/0x130 [ 851.042246][T27342] __alloc_skb+0x1d7/0x7a0 [ 851.042273][T27342] netlink_ack+0x136/0xb30 [ 851.042290][T27342] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 851.042317][T27342] ? __lock_acquire+0x683/0x2cd0 [ 851.042346][T27342] netlink_rcv_skb+0x2a4/0x4a0 [ 851.042365][T27342] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 851.042391][T27342] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 851.042419][T27342] ? netlink_deliver_tap+0x2e/0x1b0 [ 851.042437][T27342] ? netlink_deliver_tap+0x2e/0x1b0 [ 851.042460][T27342] netlink_unicast+0x7bb/0x940 [ 851.042496][T27342] netlink_sendmsg+0x813/0xb40 [ 851.042524][T27342] ? __pfx_netlink_sendmsg+0x10/0x10 [ 851.042546][T27342] ? aa_sock_msg_perm+0xf1/0x1b0 [ 851.042571][T27342] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 851.042593][T27342] ? __pfx_netlink_sendmsg+0x10/0x10 [ 851.042614][T27342] ____sys_sendmsg+0x9b9/0xa20 [ 851.042632][T27342] ? __might_fault+0xaf/0x130 [ 851.042658][T27342] ? __pfx_____sys_sendmsg+0x10/0x10 [ 851.042685][T27342] ? import_iovec+0x73/0xa0 [ 851.042708][T27342] ___sys_sendmsg+0x2a5/0x360 [ 851.042727][T27342] ? __lock_acquire+0x683/0x2cd0 [ 851.042772][T27342] ? __pfx____sys_sendmsg+0x10/0x10 [ 851.042824][T27342] ? __fget_files+0x2a/0x420 [ 851.042845][T27342] ? __fget_files+0x3a2/0x420 [ 851.042875][T27342] __x64_sys_sendmsg+0x1bd/0x2a0 [ 851.042897][T27342] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 851.042924][T27342] ? __pfx_ksys_write+0x10/0x10 [ 851.042956][T27342] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 851.042976][T27342] do_syscall_64+0x174/0x580 [ 851.042999][T27342] ? trace_irq_disable+0x3b/0x140 [ 851.043024][T27342] ? clear_bhb_loop+0x40/0x90 [ 851.043046][T27342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 851.043064][T27342] RIP: 0033:0x7f7859f9ce59 [ 851.043081][T27342] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 851.043095][T27342] RSP: 002b:00007f78581f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 851.043115][T27342] RAX: ffffffffffffffda RBX: 00007f785a216090 RCX: 00007f7859f9ce59 [ 851.043128][T27342] RDX: 0000000000000010 RSI: 0000200000000680 RDI: 0000000000000003 [ 851.043140][T27342] RBP: 00007f78581f6090 R08: 0000000000000000 R09: 0000000000000000 [ 851.043151][T27342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 851.043162][T27342] R13: 00007f785a216128 R14: 00007f785a216090 R15: 00007ffe08c03048 [ 851.043191][T27342] [ 851.493690][T27348] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5734'. [ 851.574595][T27351] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5736'. [ 852.030115][T27376] FAULT_INJECTION: forcing a failure. [ 852.030115][T27376] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 852.047189][T27376] CPU: 1 UID: 0 PID: 27376 Comm: syz.3.5742 Not tainted syzkaller #0 PREEMPT(full) [ 852.047212][T27376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 852.047224][T27376] Call Trace: [ 852.047231][T27376] [ 852.047239][T27376] dump_stack_lvl+0xe8/0x150 [ 852.047266][T27376] should_fail_ex+0x40c/0x560 [ 852.047298][T27376] _copy_to_user+0x31/0xb0 [ 852.047319][T27376] simple_read_from_buffer+0xe1/0x170 [ 852.047344][T27376] proc_fail_nth_read+0x1bb/0x230 [ 852.047375][T27376] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 852.047401][T27376] ? rw_verify_area+0x24a/0x4c0 [ 852.047425][T27376] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 852.047447][T27376] vfs_read+0x213/0xa80 [ 852.047474][T27376] ? __pfx___mutex_lock+0x10/0x10 [ 852.047497][T27376] ? __pfx_vfs_read+0x10/0x10 [ 852.047521][T27376] ? __fget_files+0x2a/0x420 [ 852.047547][T27376] ? __fget_files+0x3a2/0x420 [ 852.047567][T27376] ? __fget_files+0x2a/0x420 [ 852.047597][T27376] ksys_read+0x150/0x270 [ 852.047622][T27376] ? __pfx_ksys_read+0x10/0x10 [ 852.047653][T27376] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 852.047671][T27376] do_syscall_64+0x174/0x580 [ 852.047691][T27376] ? trace_irq_disable+0x3b/0x140 [ 852.047715][T27376] ? clear_bhb_loop+0x40/0x90 [ 852.047737][T27376] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 852.047754][T27376] RIP: 0033:0x7fd2a635d68e [ 852.047771][T27376] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 852.047785][T27376] RSP: 002b:00007fd2a7313fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 852.047803][T27376] RAX: ffffffffffffffda RBX: 00007fd2a73146c0 RCX: 00007fd2a635d68e [ 852.047824][T27376] RDX: 000000000000000f RSI: 00007fd2a73140a0 RDI: 000000000000000b [ 852.047835][T27376] RBP: 00007fd2a7314090 R08: 0000000000000000 R09: 0000000000000000 [ 852.047845][T27376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 852.047854][T27376] R13: 00007fd2a6616038 R14: 00007fd2a6615fa0 R15: 00007ffc70306238 [ 852.047886][T27376] [ 852.061806][T27378] ipvlan9: entered allmulticast mode [ 852.461964][T27387] FAULT_INJECTION: forcing a failure. [ 852.461964][T27387] name failslab, interval 1, probability 0, space 0, times 0 [ 852.503125][T27387] CPU: 0 UID: 0 PID: 27387 Comm: syz.4.5746 Not tainted syzkaller #0 PREEMPT(full) [ 852.503150][T27387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 852.503160][T27387] Call Trace: [ 852.503176][T27387] [ 852.503184][T27387] dump_stack_lvl+0xe8/0x150 [ 852.503209][T27387] should_fail_ex+0x40c/0x560 [ 852.503239][T27387] should_failslab+0xa8/0x100 [ 852.503258][T27387] __kmalloc_cache_noprof+0x88/0x660 [ 852.503280][T27387] ? nft_pernet+0x23/0x240 [ 852.503378][T27387] ? nf_tables_newtable+0x43e/0x1940 [ 852.503406][T27387] nf_tables_newtable+0x43e/0x1940 [ 852.503449][T27387] nfnetlink_rcv+0x1288/0x28c0 [ 852.503505][T27387] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 852.503543][T27387] ? ref_tracker_free+0x689/0x830 [ 852.503583][T27387] ? skb_clone+0x246/0x3a0 [ 852.503605][T27387] ? __netlink_deliver_tap+0x811/0x860 [ 852.503631][T27387] ? netlink_deliver_tap+0x2e/0x1b0 [ 852.503648][T27387] ? netlink_deliver_tap+0x2e/0x1b0 [ 852.503669][T27387] netlink_unicast+0x7bb/0x940 [ 852.503704][T27387] netlink_sendmsg+0x813/0xb40 [ 852.503731][T27387] ? __pfx_netlink_sendmsg+0x10/0x10 [ 852.503752][T27387] ? aa_sock_msg_perm+0xf1/0x1b0 [ 852.503777][T27387] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 852.503797][T27387] ? __pfx_netlink_sendmsg+0x10/0x10 [ 852.503816][T27387] ____sys_sendmsg+0x9b9/0xa20 [ 852.503834][T27387] ? __might_fault+0xaf/0x130 [ 852.503861][T27387] ? __pfx_____sys_sendmsg+0x10/0x10 [ 852.503887][T27387] ? import_iovec+0x73/0xa0 [ 852.503909][T27387] ___sys_sendmsg+0x2a5/0x360 [ 852.503926][T27387] ? __lock_acquire+0x683/0x2cd0 [ 852.503947][T27387] ? __pfx____sys_sendmsg+0x10/0x10 [ 852.503998][T27387] ? __fget_files+0x2a/0x420 [ 852.504016][T27387] ? __fget_files+0x3a2/0x420 [ 852.504045][T27387] __x64_sys_sendmsg+0x1bd/0x2a0 [ 852.504065][T27387] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 852.504092][T27387] ? __pfx_ksys_write+0x10/0x10 [ 852.504122][T27387] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 852.504141][T27387] do_syscall_64+0x174/0x580 [ 852.504159][T27387] ? trace_irq_disable+0x3b/0x140 [ 852.504193][T27387] ? clear_bhb_loop+0x40/0x90 [ 852.504213][T27387] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 852.504229][T27387] RIP: 0033:0x7f7d4299ce59 [ 852.504246][T27387] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 852.504261][T27387] RSP: 002b:00007f7d43826028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 852.504279][T27387] RAX: ffffffffffffffda RBX: 00007f7d42c15fa0 RCX: 00007f7d4299ce59 [ 852.504291][T27387] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 852.504301][T27387] RBP: 00007f7d43826090 R08: 0000000000000000 R09: 0000000000000000 [ 852.504311][T27387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 852.504320][T27387] R13: 00007f7d42c16038 R14: 00007f7d42c15fa0 R15: 00007ffce2368678 [ 852.504348][T27387] [ 852.857828][T27382] veth75: entered promiscuous mode [ 852.994370][T27404] netlink: 'syz.4.5752': attribute type 1 has an invalid length. [ 853.079619][T27404] bond7: entered promiscuous mode [ 853.086853][T27404] bond7: entered allmulticast mode [ 853.092478][T27404] 8021q: adding VLAN 0 to HW filter on device bond7 [ 853.236009][T27419] FAULT_INJECTION: forcing a failure. [ 853.236009][T27419] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 853.250505][T27419] CPU: 1 UID: 0 PID: 27419 Comm: syz.3.5757 Not tainted syzkaller #0 PREEMPT(full) [ 853.250528][T27419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 853.250538][T27419] Call Trace: [ 853.250545][T27419] [ 853.250553][T27419] dump_stack_lvl+0xe8/0x150 [ 853.250583][T27419] should_fail_ex+0x40c/0x560 [ 853.250622][T27419] _copy_to_user+0x31/0xb0 [ 853.250644][T27419] simple_read_from_buffer+0xe1/0x170 [ 853.250671][T27419] proc_fail_nth_read+0x1bb/0x230 [ 853.250696][T27419] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 853.250720][T27419] ? rw_verify_area+0x24a/0x4c0 [ 853.250745][T27419] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 853.250767][T27419] vfs_read+0x213/0xa80 [ 853.250796][T27419] ? __pfx___mutex_lock+0x10/0x10 [ 853.250818][T27419] ? __pfx_vfs_read+0x10/0x10 [ 853.250844][T27419] ? __fget_files+0x2a/0x420 [ 853.250870][T27419] ? __fget_files+0x3a2/0x420 [ 853.250889][T27419] ? __fget_files+0x2a/0x420 [ 853.250918][T27419] ksys_read+0x150/0x270 [ 853.250945][T27419] ? __pfx_ksys_read+0x10/0x10 [ 853.250977][T27419] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 853.250996][T27419] do_syscall_64+0x174/0x580 [ 853.251016][T27419] ? trace_irq_disable+0x3b/0x140 [ 853.251040][T27419] ? clear_bhb_loop+0x40/0x90 [ 853.251062][T27419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 853.251079][T27419] RIP: 0033:0x7fd2a635d68e [ 853.251096][T27419] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 853.251111][T27419] RSP: 002b:00007fd2a7313fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 853.251129][T27419] RAX: ffffffffffffffda RBX: 00007fd2a73146c0 RCX: 00007fd2a635d68e [ 853.251141][T27419] RDX: 000000000000000f RSI: 00007fd2a73140a0 RDI: 0000000000000004 [ 853.251152][T27419] RBP: 00007fd2a7314090 R08: 0000000000000000 R09: 0000000000000000 [ 853.251162][T27419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 853.251173][T27419] R13: 00007fd2a6616038 R14: 00007fd2a6615fa0 R15: 00007ffc70306238 [ 853.251199][T27419] [ 853.590085][T27427] FAULT_INJECTION: forcing a failure. [ 853.590085][T27427] name failslab, interval 1, probability 0, space 0, times 0 [ 853.604262][T27427] CPU: 1 UID: 0 PID: 27427 Comm: syz.3.5761 Not tainted syzkaller #0 PREEMPT(full) [ 853.604287][T27427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 853.604297][T27427] Call Trace: [ 853.604304][T27427] [ 853.604312][T27427] dump_stack_lvl+0xe8/0x150 [ 853.604338][T27427] should_fail_ex+0x40c/0x560 [ 853.604369][T27427] should_failslab+0xa8/0x100 [ 853.604389][T27427] __kmalloc_noprof+0xe8/0x750 [ 853.604414][T27427] ? seg6_local_build_state+0x151/0xdd0 [ 853.604452][T27427] seg6_local_build_state+0x151/0xdd0 [ 853.604478][T27427] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 853.604506][T27427] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 853.604528][T27427] ? __pfx_seg6_local_build_state+0x10/0x10 [ 853.604565][T27427] ? lwtunnel_build_state+0xe2/0x4c0 [ 853.604597][T27427] lwtunnel_build_state+0x384/0x4c0 [ 853.604622][T27427] ? lwtunnel_build_state+0xe2/0x4c0 [ 853.604647][T27427] fib_nh_common_init+0x130/0x3d0 [ 853.604674][T27427] ? in6_dev_get+0x1a/0x290 [ 853.604698][T27427] ? __pfx_fib_nh_common_init+0x10/0x10 [ 853.604723][T27427] ? in6_dev_get+0x1a/0x290 [ 853.604742][T27427] ? in6_dev_get+0x1a/0x290 [ 853.604771][T27427] fib6_nh_init+0xd20/0x1e40 [ 853.604805][T27427] ? __pfx_fib6_nh_init+0x10/0x10 [ 853.604826][T27427] ? kasan_save_track+0x4f/0x80 [ 853.604848][T27427] ? kasan_save_track+0x3e/0x80 [ 853.604869][T27427] ? __kasan_kmalloc+0x93/0xb0 [ 853.604892][T27427] ? __kmalloc_noprof+0x358/0x750 [ 853.604913][T27427] ? fib6_info_alloc+0x30/0xf0 [ 853.604932][T27427] ? ip6_route_info_create+0x149/0x890 [ 853.604957][T27427] ? ip6_route_add+0x49/0x1b0 [ 853.604976][T27427] ? inet6_rtm_newroute+0x267/0x1a30 [ 853.604994][T27427] ? rtnetlink_rcv_msg+0x802/0xc00 [ 853.605017][T27427] ? netlink_rcv_skb+0x226/0x4a0 [ 853.605034][T27427] ? netlink_unicast+0x7bb/0x940 [ 853.605063][T27427] ? netlink_sendmsg+0x813/0xb40 [ 853.605078][T27427] ? ____sys_sendmsg+0x9b9/0xa20 [ 853.605093][T27427] ? ___sys_sendmsg+0x2a5/0x360 [ 853.605108][T27427] ? __x64_sys_sendmsg+0x1bd/0x2a0 [ 853.605124][T27427] ? do_syscall_64+0x174/0x580 [ 853.605143][T27427] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 853.605195][T27427] ? ip_fib_metrics_init+0x419/0x6f0 [ 853.605219][T27427] ip6_route_info_create_nh+0x16a/0xad0 [ 853.605254][T27427] ? ipv6_addr_prefix+0x5d/0x1a0 [ 853.605273][T27427] ? __asan_memcpy+0x40/0x70 [ 853.605293][T27427] ? __pfx_ip6_route_info_create_nh+0x10/0x10 [ 853.605311][T27427] ? ipv6_addr_prefix+0xd6/0x1a0 [ 853.605330][T27427] ? ip6_route_info_create+0x545/0x890 [ 853.605356][T27427] ip6_route_add+0x6e/0x1b0 [ 853.605380][T27427] inet6_rtm_newroute+0x267/0x1a30 [ 853.605407][T27427] ? kasan_quarantine_put+0xbb/0x1f0 [ 853.605430][T27427] ? lockdep_hardirqs_on+0x7a/0x110 [ 853.605451][T27427] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 853.605468][T27427] ? nlmon_xmit+0xb0/0x100 [ 853.605554][T27427] ? kmem_cache_free+0x182/0x650 [ 853.605584][T27427] ? __lock_acquire+0x683/0x2cd0 [ 853.605605][T27427] ? __dev_queue_xmit+0x29b/0x37f0 [ 853.605628][T27427] ? __local_bh_enable_ip+0xd0/0x130 [ 853.605645][T27427] ? lockdep_hardirqs_on+0x7a/0x110 [ 853.605690][T27427] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 853.605710][T27427] rtnetlink_rcv_msg+0x802/0xc00 [ 853.605738][T27427] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 853.605762][T27427] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 853.605785][T27427] ? ref_tracker_free+0x689/0x830 [ 853.605807][T27427] ? __pfx_ref_tracker_free+0x10/0x10 [ 853.605836][T27427] netlink_rcv_skb+0x226/0x4a0 [ 853.605857][T27427] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 853.605884][T27427] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 853.605915][T27427] ? netlink_deliver_tap+0x2e/0x1b0 [ 853.605933][T27427] ? netlink_deliver_tap+0x2e/0x1b0 [ 853.605957][T27427] netlink_unicast+0x7bb/0x940 [ 853.605993][T27427] netlink_sendmsg+0x813/0xb40 [ 853.606021][T27427] ? __pfx_netlink_sendmsg+0x10/0x10 [ 853.606044][T27427] ? aa_sock_msg_perm+0xf1/0x1b0 [ 853.606078][T27427] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 853.606100][T27427] ? __pfx_netlink_sendmsg+0x10/0x10 [ 853.606121][T27427] ____sys_sendmsg+0x9b9/0xa20 [ 853.606140][T27427] ? __might_fault+0xaf/0x130 [ 853.606168][T27427] ? __pfx_____sys_sendmsg+0x10/0x10 [ 853.606195][T27427] ? import_iovec+0x73/0xa0 [ 853.606219][T27427] ___sys_sendmsg+0x2a5/0x360 [ 853.606237][T27427] ? __lock_acquire+0x683/0x2cd0 [ 853.606259][T27427] ? __pfx____sys_sendmsg+0x10/0x10 [ 853.606311][T27427] ? __fget_files+0x2a/0x420 [ 853.606331][T27427] ? __fget_files+0x3a2/0x420 [ 853.606362][T27427] __x64_sys_sendmsg+0x1bd/0x2a0 [ 853.606383][T27427] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 853.606411][T27427] ? __pfx_ksys_write+0x10/0x10 [ 853.606443][T27427] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 853.606463][T27427] do_syscall_64+0x174/0x580 [ 853.606482][T27427] ? trace_irq_disable+0x3b/0x140 [ 853.606507][T27427] ? clear_bhb_loop+0x40/0x90 [ 853.606528][T27427] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 853.606544][T27427] RIP: 0033:0x7fd2a639ce59 [ 853.606561][T27427] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 853.606574][T27427] RSP: 002b:00007fd2a7314028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 853.606592][T27427] RAX: ffffffffffffffda RBX: 00007fd2a6615fa0 RCX: 00007fd2a639ce59 [ 853.606605][T27427] RDX: 0000000000000010 RSI: 0000200000000680 RDI: 0000000000000003 [ 853.606615][T27427] RBP: 00007fd2a7314090 R08: 0000000000000000 R09: 0000000000000000 [ 853.606627][T27427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 853.606637][T27427] R13: 00007fd2a6616038 R14: 00007fd2a6615fa0 R15: 00007ffc70306238 [ 853.606666][T27427] [ 854.378785][T27436] __nla_validate_parse: 10 callbacks suppressed [ 854.378804][T27436] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5763'. [ 854.413946][T27436] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5763'. [ 854.444318][T27441] syzkaller0: entered promiscuous mode [ 854.478228][T27442] netlink: 67 bytes leftover after parsing attributes in process `syz.0.5759'. [ 854.565794][T27441] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5764'. [ 854.788219][T27446] syzkaller0: entered promiscuous mode [ 854.898811][T27460] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5770'. [ 854.920041][T27456] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 855.222232][T27470] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.5775'. [ 855.439370][T27476] syzkaller0: entered promiscuous mode [ 855.453136][T27476] syzkaller0: entered allmulticast mode [ 855.478189][T27476] tipc: Enabled bearer , priority 0 [ 855.508270][T27476] tipc: Resetting bearer [ 855.523031][T27474] tipc: Resetting bearer [ 855.570016][T27474] tipc: Disabling bearer [ 855.597793][T27481] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5779'. [ 855.645561][T27481] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5779'. [ 855.980695][T27496] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.5785'. [ 856.168540][T27502] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.5788'. [ 858.395481][T27519] netlink: 'syz.2.5795': attribute type 16 has an invalid length. [ 858.409863][T27519] netlink: 'syz.2.5795': attribute type 17 has an invalid length. [ 858.669886][T27531] FAULT_INJECTION: forcing a failure. [ 858.669886][T27531] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 858.715985][T27531] CPU: 0 UID: 0 PID: 27531 Comm: syz.3.5798 Not tainted syzkaller #0 PREEMPT(full) [ 858.716011][T27531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 858.716021][T27531] Call Trace: [ 858.716029][T27531] [ 858.716037][T27531] dump_stack_lvl+0xe8/0x150 [ 858.716064][T27531] should_fail_ex+0x40c/0x560 [ 858.716096][T27531] _copy_from_user+0x2d/0xb0 [ 858.716121][T27531] bpf_prog_test_run_xdp+0xe12/0x11d0 [ 858.716158][T27531] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 858.716184][T27531] ? __fget_files+0x2a/0x420 [ 858.716210][T27531] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 858.716232][T27531] bpf_prog_test_run+0x2c5/0x340 [ 858.716255][T27531] __sys_bpf+0x643/0x950 [ 858.716282][T27531] ? __pfx___sys_bpf+0x10/0x10 [ 858.716328][T27531] ? rcu_is_watching+0x15/0xb0 [ 858.716354][T27531] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 858.716374][T27531] __x64_sys_bpf+0x7c/0x90 [ 858.716399][T27531] do_syscall_64+0x174/0x580 [ 858.716418][T27531] ? trace_irq_disable+0x3b/0x140 [ 858.716443][T27531] ? clear_bhb_loop+0x40/0x90 [ 858.716466][T27531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 858.716484][T27531] RIP: 0033:0x7fd2a639ce59 [ 858.716501][T27531] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 858.716517][T27531] RSP: 002b:00007fd2a7314028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 858.716536][T27531] RAX: ffffffffffffffda RBX: 00007fd2a6615fa0 RCX: 00007fd2a639ce59 [ 858.716550][T27531] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 858.716562][T27531] RBP: 00007fd2a7314090 R08: 0000000000000000 R09: 0000000000000000 [ 858.716573][T27531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 858.716585][T27531] R13: 00007fd2a6616038 R14: 00007fd2a6615fa0 R15: 00007ffc70306238 [ 858.716615][T27531] [ 859.441252][T27561] __nla_validate_parse: 5 callbacks suppressed [ 859.441271][T27561] netlink: 148 bytes leftover after parsing attributes in process `syz.0.5808'. [ 859.613532][T27567] batadv0: entered promiscuous mode [ 859.675875][T27567] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 860.229321][T27579] FAULT_INJECTION: forcing a failure. [ 860.229321][T27579] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 860.258630][T27579] CPU: 0 UID: 0 PID: 27579 Comm: syz.0.5813 Not tainted syzkaller #0 PREEMPT(full) [ 860.258656][T27579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 860.258667][T27579] Call Trace: [ 860.258675][T27579] [ 860.258683][T27579] dump_stack_lvl+0xe8/0x150 [ 860.258709][T27579] should_fail_ex+0x40c/0x560 [ 860.258742][T27579] _copy_from_user+0x2d/0xb0 [ 860.258763][T27579] ___sys_sendmsg+0x1c6/0x360 [ 860.258782][T27579] ? __lock_acquire+0x683/0x2cd0 [ 860.258805][T27579] ? __pfx____sys_sendmsg+0x10/0x10 [ 860.258857][T27579] ? __fget_files+0x2a/0x420 [ 860.258878][T27579] ? __fget_files+0x3a2/0x420 [ 860.258908][T27579] __x64_sys_sendmsg+0x1bd/0x2a0 [ 860.258931][T27579] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 860.258958][T27579] ? __pfx_ksys_write+0x10/0x10 [ 860.258990][T27579] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 860.259009][T27579] do_syscall_64+0x174/0x580 [ 860.259030][T27579] ? trace_irq_disable+0x3b/0x140 [ 860.259054][T27579] ? clear_bhb_loop+0x40/0x90 [ 860.259076][T27579] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 860.259094][T27579] RIP: 0033:0x7f7859f9ce59 [ 860.259111][T27579] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 860.259124][T27579] RSP: 002b:00007f785ad81028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 860.259142][T27579] RAX: ffffffffffffffda RBX: 00007f785a215fa0 RCX: 00007f7859f9ce59 [ 860.259154][T27579] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 860.259165][T27579] RBP: 00007f785ad81090 R08: 0000000000000000 R09: 0000000000000000 [ 860.259176][T27579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 860.259187][T27579] R13: 00007f785a216038 R14: 00007f785a215fa0 R15: 00007ffe08c03048 [ 860.259216][T27579] [ 860.500077][T27582] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5814'. [ 860.520886][T27582] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5814'. [ 860.534076][T27585] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5815'. [ 860.621309][T27587] netlink: 160 bytes leftover after parsing attributes in process `syz.3.5817'. [ 860.637749][T27587] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5817'. [ 860.650305][T27587] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 860.659262][T27587] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 860.668049][T27587] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 860.690661][T27589] netlink: 'syz.4.5816': attribute type 1 has an invalid length. [ 860.691636][T27591] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5818'. [ 860.718582][T27589] bond8: entered promiscuous mode [ 860.723806][T27589] bond8: entered allmulticast mode [ 860.730199][T27589] 8021q: adding VLAN 0 to HW filter on device bond8 [ 860.761236][T27589] erspan1: entered allmulticast mode [ 860.776089][T27589] bond8: (slave erspan1): making interface the new active one [ 860.783969][T27589] erspan1: entered promiscuous mode [ 860.790511][T27589] bond8: (slave erspan1): Enslaving as an active interface with an up link [ 860.791595][T27595] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.5819'. [ 860.995131][T27600] FAULT_INJECTION: forcing a failure. [ 860.995131][T27600] name failslab, interval 1, probability 0, space 0, times 0 [ 861.011343][T27600] CPU: 1 UID: 0 PID: 27600 Comm: syz.4.5821 Not tainted syzkaller #0 PREEMPT(full) [ 861.011367][T27600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 861.011378][T27600] Call Trace: [ 861.011386][T27600] [ 861.011394][T27600] dump_stack_lvl+0xe8/0x150 [ 861.011419][T27600] should_fail_ex+0x40c/0x560 [ 861.011453][T27600] should_failslab+0xa8/0x100 [ 861.011471][T27600] ? skb_clone+0x212/0x3a0 [ 861.011491][T27600] kmem_cache_alloc_noprof+0x87/0x650 [ 861.011523][T27600] skb_clone+0x212/0x3a0 [ 861.011546][T27600] __netlink_deliver_tap+0x413/0x860 [ 861.011577][T27600] ? netlink_deliver_tap+0x2e/0x1b0 [ 861.011599][T27600] netlink_deliver_tap+0x19c/0x1b0 [ 861.011620][T27600] netlink_sendskb+0x68/0x140 [ 861.011648][T27600] nfnetlink_rcv+0x260c/0x28c0 [ 861.011709][T27600] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 861.011749][T27600] ? ref_tracker_free+0x689/0x830 [ 861.011793][T27600] ? skb_clone+0x246/0x3a0 [ 861.011815][T27600] ? __netlink_deliver_tap+0x811/0x860 [ 861.011842][T27600] ? netlink_deliver_tap+0x2e/0x1b0 [ 861.011861][T27600] ? netlink_deliver_tap+0x2e/0x1b0 [ 861.011883][T27600] netlink_unicast+0x7bb/0x940 [ 861.011920][T27600] netlink_sendmsg+0x813/0xb40 [ 861.011949][T27600] ? __pfx_netlink_sendmsg+0x10/0x10 [ 861.011972][T27600] ? aa_sock_msg_perm+0xf1/0x1b0 [ 861.012002][T27600] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 861.012024][T27600] ? __pfx_netlink_sendmsg+0x10/0x10 [ 861.012045][T27600] ____sys_sendmsg+0x9b9/0xa20 [ 861.012065][T27600] ? __might_fault+0xaf/0x130 [ 861.012100][T27600] ? __pfx_____sys_sendmsg+0x10/0x10 [ 861.012129][T27600] ? import_iovec+0x73/0xa0 [ 861.012153][T27600] ___sys_sendmsg+0x2a5/0x360 [ 861.012171][T27600] ? __lock_acquire+0x683/0x2cd0 [ 861.012195][T27600] ? __pfx____sys_sendmsg+0x10/0x10 [ 861.012248][T27600] ? __fget_files+0x2a/0x420 [ 861.012269][T27600] ? __fget_files+0x3a2/0x420 [ 861.012300][T27600] __x64_sys_sendmsg+0x1bd/0x2a0 [ 861.012321][T27600] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 861.012349][T27600] ? __pfx_ksys_write+0x10/0x10 [ 861.012380][T27600] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 861.012399][T27600] do_syscall_64+0x174/0x580 [ 861.012419][T27600] ? trace_irq_disable+0x3b/0x140 [ 861.012444][T27600] ? clear_bhb_loop+0x40/0x90 [ 861.012464][T27600] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 861.012480][T27600] RIP: 0033:0x7f7d4299ce59 [ 861.012497][T27600] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 861.012512][T27600] RSP: 002b:00007f7d43826028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 861.012530][T27600] RAX: ffffffffffffffda RBX: 00007f7d42c15fa0 RCX: 00007f7d4299ce59 [ 861.012543][T27600] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 861.012554][T27600] RBP: 00007f7d43826090 R08: 0000000000000000 R09: 0000000000000000 [ 861.012565][T27600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 861.012575][T27600] R13: 00007f7d42c16038 R14: 00007f7d42c15fa0 R15: 00007ffce2368678 [ 861.012605][T27600] [ 861.350876][T27583] Bluetooth: hci3: Opcode 0x0401 failed: -4 [ 861.365278][T27605] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5824'. [ 861.630686][T27619] FAULT_INJECTION: forcing a failure. [ 861.630686][T27619] name failslab, interval 1, probability 0, space 0, times 0 [ 861.659840][T27619] CPU: 1 UID: 0 PID: 27619 Comm: syz.3.5827 Not tainted syzkaller #0 PREEMPT(full) [ 861.659865][T27619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 861.659875][T27619] Call Trace: [ 861.659883][T27619] [ 861.659890][T27619] dump_stack_lvl+0xe8/0x150 [ 861.659933][T27619] should_fail_ex+0x40c/0x560 [ 861.659967][T27619] should_failslab+0xa8/0x100 [ 861.659985][T27619] ? skb_clone+0x212/0x3a0 [ 861.660005][T27619] kmem_cache_alloc_noprof+0x87/0x650 [ 861.660037][T27619] skb_clone+0x212/0x3a0 [ 861.660060][T27619] __netlink_deliver_tap+0x413/0x860 [ 861.660092][T27619] ? netlink_deliver_tap+0x2e/0x1b0 [ 861.660112][T27619] netlink_deliver_tap+0x19c/0x1b0 [ 861.660133][T27619] netlink_sendskb+0x68/0x140 [ 861.660161][T27619] netlink_rcv_skb+0x2a4/0x4a0 [ 861.660181][T27619] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 861.660210][T27619] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 861.660242][T27619] ? netlink_deliver_tap+0x2e/0x1b0 [ 861.660261][T27619] ? netlink_deliver_tap+0x2e/0x1b0 [ 861.660286][T27619] netlink_unicast+0x7bb/0x940 [ 861.660322][T27619] netlink_sendmsg+0x813/0xb40 [ 861.660351][T27619] ? __pfx_netlink_sendmsg+0x10/0x10 [ 861.660375][T27619] ? aa_sock_msg_perm+0xf1/0x1b0 [ 861.660401][T27619] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 861.660423][T27619] ? __pfx_netlink_sendmsg+0x10/0x10 [ 861.660444][T27619] ____sys_sendmsg+0x9b9/0xa20 [ 861.660463][T27619] ? __might_fault+0xaf/0x130 [ 861.660491][T27619] ? __pfx_____sys_sendmsg+0x10/0x10 [ 861.660520][T27619] ? import_iovec+0x73/0xa0 [ 861.660545][T27619] ___sys_sendmsg+0x2a5/0x360 [ 861.660562][T27619] ? __lock_acquire+0x683/0x2cd0 [ 861.660586][T27619] ? __pfx____sys_sendmsg+0x10/0x10 [ 861.660637][T27619] ? __fget_files+0x2a/0x420 [ 861.660658][T27619] ? __fget_files+0x3a2/0x420 [ 861.660686][T27619] __x64_sys_sendmsg+0x1bd/0x2a0 [ 861.660707][T27619] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 861.660733][T27619] ? __pfx_ksys_write+0x10/0x10 [ 861.660765][T27619] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 861.660783][T27619] do_syscall_64+0x174/0x580 [ 861.660803][T27619] ? trace_irq_disable+0x3b/0x140 [ 861.660826][T27619] ? clear_bhb_loop+0x40/0x90 [ 861.660848][T27619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 861.660865][T27619] RIP: 0033:0x7fd2a639ce59 [ 861.660882][T27619] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 861.660904][T27619] RSP: 002b:00007fd2a7314028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 861.660923][T27619] RAX: ffffffffffffffda RBX: 00007fd2a6615fa0 RCX: 00007fd2a639ce59 [ 861.660936][T27619] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 861.660947][T27619] RBP: 00007fd2a7314090 R08: 0000000000000000 R09: 0000000000000000 [ 861.660958][T27619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 861.660968][T27619] R13: 00007fd2a6616038 R14: 00007fd2a6615fa0 R15: 00007ffc70306238 [ 861.660996][T27619] [ 862.006281][T27621] syzkaller1: entered promiscuous mode [ 862.014497][T27621] syzkaller1: entered allmulticast mode [ 862.172787][T27629] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.5831'. [ 862.613513][ T5633] Bluetooth: hci3: command 0x0405 tx timeout [ 862.742148][T27655] FAULT_INJECTION: forcing a failure. [ 862.742148][T27655] name failslab, interval 1, probability 0, space 0, times 0 [ 862.755210][T27655] CPU: 0 UID: 0 PID: 27655 Comm: syz.4.5839 Not tainted syzkaller #0 PREEMPT(full) [ 862.755233][T27655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 862.755244][T27655] Call Trace: [ 862.755252][T27655] [ 862.755259][T27655] dump_stack_lvl+0xe8/0x150 [ 862.755286][T27655] should_fail_ex+0x40c/0x560 [ 862.755318][T27655] should_failslab+0xa8/0x100 [ 862.755338][T27655] __kmalloc_cache_noprof+0x88/0x660 [ 862.755371][T27655] ? nfnetlink_rcv+0x1021/0x28c0 [ 862.755403][T27655] nfnetlink_rcv+0x1021/0x28c0 [ 862.755464][T27655] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 862.755506][T27655] ? ref_tracker_free+0x689/0x830 [ 862.755550][T27655] ? skb_clone+0x246/0x3a0 [ 862.755574][T27655] ? __netlink_deliver_tap+0x811/0x860 [ 862.755602][T27655] ? netlink_deliver_tap+0x2e/0x1b0 [ 862.755622][T27655] ? netlink_deliver_tap+0x2e/0x1b0 [ 862.755647][T27655] netlink_unicast+0x7bb/0x940 [ 862.755685][T27655] netlink_sendmsg+0x813/0xb40 [ 862.755715][T27655] ? __pfx_netlink_sendmsg+0x10/0x10 [ 862.755738][T27655] ? aa_sock_msg_perm+0xf1/0x1b0 [ 862.755766][T27655] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 862.755788][T27655] ? __pfx_netlink_sendmsg+0x10/0x10 [ 862.755810][T27655] ____sys_sendmsg+0x9b9/0xa20 [ 862.755833][T27655] ? __might_fault+0xaf/0x130 [ 862.755861][T27655] ? __pfx_____sys_sendmsg+0x10/0x10 [ 862.755890][T27655] ? import_iovec+0x73/0xa0 [ 862.755915][T27655] ___sys_sendmsg+0x2a5/0x360 [ 862.755933][T27655] ? __lock_acquire+0x683/0x2cd0 [ 862.755957][T27655] ? __pfx____sys_sendmsg+0x10/0x10 [ 862.756012][T27655] ? __fget_files+0x2a/0x420 [ 862.756033][T27655] ? __fget_files+0x3a2/0x420 [ 862.756065][T27655] __x64_sys_sendmsg+0x1bd/0x2a0 [ 862.756087][T27655] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 862.756115][T27655] ? __pfx_ksys_write+0x10/0x10 [ 862.756150][T27655] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 862.756170][T27655] do_syscall_64+0x174/0x580 [ 862.756190][T27655] ? trace_irq_disable+0x3b/0x140 [ 862.756215][T27655] ? clear_bhb_loop+0x40/0x90 [ 862.756238][T27655] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 862.756256][T27655] RIP: 0033:0x7f7d4299ce59 [ 862.756274][T27655] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 862.756289][T27655] RSP: 002b:00007f7d43826028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 862.756309][T27655] RAX: ffffffffffffffda RBX: 00007f7d42c15fa0 RCX: 00007f7d4299ce59 [ 862.756323][T27655] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 862.756335][T27655] RBP: 00007f7d43826090 R08: 0000000000000000 R09: 0000000000000000 [ 862.756346][T27655] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 862.756357][T27655] R13: 00007f7d42c16038 R14: 00007f7d42c15fa0 R15: 00007ffce2368678 [ 862.756395][T27655] [ 863.309478][T27668] netlink: 'syz.0.5846': attribute type 1 has an invalid length. [ 863.361673][T27670] netlink: 'syz.2.5847': attribute type 1 has an invalid length. [ 863.369766][T27670] netlink: 'syz.2.5847': attribute type 1 has an invalid length. [ 863.465122][T27668] bond11: entered promiscuous mode [ 863.489625][T27668] bond11: entered allmulticast mode [ 863.512874][T27668] 8021q: adding VLAN 0 to HW filter on device bond11 [ 863.600689][T27683] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 863.633239][T27686] FAULT_INJECTION: forcing a failure. [ 863.633239][T27686] name failslab, interval 1, probability 0, space 0, times 0 [ 863.683741][T27686] CPU: 0 UID: 0 PID: 27686 Comm: syz.2.5852 Not tainted syzkaller #0 PREEMPT(full) [ 863.683765][T27686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 863.683776][T27686] Call Trace: [ 863.683783][T27686] [ 863.683791][T27686] dump_stack_lvl+0xe8/0x150 [ 863.683817][T27686] should_fail_ex+0x40c/0x560 [ 863.683849][T27686] should_failslab+0xa8/0x100 [ 863.683869][T27686] __kmalloc_noprof+0xe8/0x750 [ 863.683890][T27686] ? __kasan_kmalloc+0x93/0xb0 [ 863.683914][T27686] ? nla_strdup+0x9d/0x140 [ 863.683933][T27686] ? __kmalloc_cache_noprof+0x318/0x660 [ 863.683960][T27686] nla_strdup+0x9d/0x140 [ 863.683981][T27686] nf_tables_newtable+0x49a/0x1940 [ 863.684018][T27686] nfnetlink_rcv+0x1288/0x28c0 [ 863.684073][T27686] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 863.684111][T27686] ? ref_tracker_free+0x689/0x830 [ 863.684148][T27686] ? skb_clone+0x246/0x3a0 [ 863.684170][T27686] ? __netlink_deliver_tap+0x811/0x860 [ 863.684197][T27686] ? netlink_deliver_tap+0x2e/0x1b0 [ 863.684225][T27686] ? netlink_deliver_tap+0x2e/0x1b0 [ 863.684249][T27686] netlink_unicast+0x7bb/0x940 [ 863.684286][T27686] netlink_sendmsg+0x813/0xb40 [ 863.684315][T27686] ? __pfx_netlink_sendmsg+0x10/0x10 [ 863.684338][T27686] ? aa_sock_msg_perm+0xf1/0x1b0 [ 863.684365][T27686] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 863.684385][T27686] ? __pfx_netlink_sendmsg+0x10/0x10 [ 863.684406][T27686] ____sys_sendmsg+0x9b9/0xa20 [ 863.684425][T27686] ? __might_fault+0xaf/0x130 [ 863.684453][T27686] ? __pfx_____sys_sendmsg+0x10/0x10 [ 863.684482][T27686] ? import_iovec+0x73/0xa0 [ 863.684505][T27686] ___sys_sendmsg+0x2a5/0x360 [ 863.684522][T27686] ? __lock_acquire+0x683/0x2cd0 [ 863.684546][T27686] ? __pfx____sys_sendmsg+0x10/0x10 [ 863.684600][T27686] ? __fget_files+0x2a/0x420 [ 863.684620][T27686] ? __fget_files+0x3a2/0x420 [ 863.684650][T27686] __x64_sys_sendmsg+0x1bd/0x2a0 [ 863.684671][T27686] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 863.684698][T27686] ? __pfx_ksys_write+0x10/0x10 [ 863.684731][T27686] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 863.684752][T27686] do_syscall_64+0x174/0x580 [ 863.684774][T27686] ? clear_bhb_loop+0x40/0x90 [ 863.684797][T27686] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 863.684813][T27686] RIP: 0033:0x7efc34d9ce59 [ 863.684830][T27686] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 863.684843][T27686] RSP: 002b:00007efc35c17028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 863.684858][T27686] RAX: ffffffffffffffda RBX: 00007efc35015fa0 RCX: 00007efc34d9ce59 [ 863.684868][T27686] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 863.684876][T27686] RBP: 00007efc35c17090 R08: 0000000000000000 R09: 0000000000000000 [ 863.684885][T27686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 863.684895][T27686] R13: 00007efc35016038 R14: 00007efc35015fa0 R15: 00007ffe555bcc68 [ 863.684925][T27686] [ 864.104738][ T4948] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 864.111304][ T4948] Bluetooth: hci2: command 0x0406 tx timeout [ 864.492301][T27704] netlink: 'syz.2.5859': attribute type 1 has an invalid length. [ 864.819792][T27704] bond10: entered promiscuous mode [ 864.825384][T27704] bond10: entered allmulticast mode [ 864.831195][T27704] 8021q: adding VLAN 0 to HW filter on device bond10 [ 864.961734][T27726] __nla_validate_parse: 4 callbacks suppressed [ 864.961752][T27726] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5867'. [ 865.430161][T27761] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5877'. [ 865.664116][T27770] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5879'. [ 865.752754][T27775] netlink: 'syz.4.5882': attribute type 4 has an invalid length. [ 865.769591][T27775] netlink: 'syz.4.5882': attribute type 4 has an invalid length. [ 866.052377][T27778] FAULT_INJECTION: forcing a failure. [ 866.052377][T27778] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 866.080585][T27784] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5884'. [ 866.104416][T27778] CPU: 0 UID: 0 PID: 27778 Comm: syz.4.5883 Not tainted syzkaller #0 PREEMPT(full) [ 866.104439][T27778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 866.104449][T27778] Call Trace: [ 866.104456][T27778] [ 866.104463][T27778] dump_stack_lvl+0xe8/0x150 [ 866.104487][T27778] should_fail_ex+0x40c/0x560 [ 866.104516][T27778] _copy_from_user+0x2d/0xb0 [ 866.104535][T27778] ___sys_recvmsg+0x173/0x590 [ 866.104553][T27778] ? ktime_get_ts64+0xa9/0x410 [ 866.104579][T27778] ? __pfx____sys_recvmsg+0x10/0x10 [ 866.104602][T27778] ? ktime_get_ts64+0xa9/0x410 [ 866.104649][T27778] do_recvmmsg+0x329/0x810 [ 866.104674][T27778] ? __pfx_do_recvmmsg+0x10/0x10 [ 866.104702][T27778] ? _copy_from_user+0x94/0xb0 [ 866.104734][T27778] __x64_sys_recvmmsg+0x1b7/0x250 [ 866.104754][T27778] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 866.104779][T27778] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 866.104797][T27778] do_syscall_64+0x174/0x580 [ 866.104817][T27778] ? clear_bhb_loop+0x40/0x90 [ 866.104837][T27778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 866.104852][T27778] RIP: 0033:0x7f7d4299ce59 [ 866.104868][T27778] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 866.104880][T27778] RSP: 002b:00007f7d43826028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 866.104898][T27778] RAX: ffffffffffffffda RBX: 00007f7d42c15fa0 RCX: 00007f7d4299ce59 [ 866.104909][T27778] RDX: 00000000000006f5 RSI: 0000200000000440 RDI: 0000000000000003 [ 866.104919][T27778] RBP: 00007f7d43826090 R08: 0000200000000480 R09: 0000000000000000 [ 866.104930][T27778] R10: 0000002000000022 R11: 0000000000000246 R12: 0000000000000001 [ 866.104940][T27778] R13: 00007f7d42c16038 R14: 00007f7d42c15fa0 R15: 00007ffce2368678 [ 866.104966][T27778] [ 866.112585][T27783] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5885'. [ 866.482566][T27783] veth77: entered allmulticast mode [ 866.507927][T27783] bond11: (slave veth77): Enslaving as an active interface with an up link [ 866.557284][T27793] bond11 (unregistering): (slave veth77): Releasing backup interface [ 866.588655][T27793] bond11 (unregistering): Released all slaves [ 866.649704][T27798] syzkaller0: entered promiscuous mode [ 866.661187][T27798] syzkaller0: entered allmulticast mode [ 866.670788][T27809] tipc: Enabled bearer , priority 0 [ 866.741742][T27798] tipc: Resetting bearer [ 866.764219][T27797] tipc: Resetting bearer [ 866.804576][T27797] tipc: Disabling bearer [ 866.824646][T27816] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5895'. [ 866.843922][T27816] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5895'. [ 867.027041][T27825] netlink: 'syz.2.5899': attribute type 1 has an invalid length. [ 868.045881][T27855] netlink: 27 bytes leftover after parsing attributes in process `syz.1.5907'. [ 868.246305][ T185] nci: nci_ntf_packet: unsupported ntf opcode 0xf00 [ 868.808659][T27856] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 868.983288][T27825] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 869.169589][T27872] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5911'. [ 869.176827][T27868] syzkaller1: entered promiscuous mode [ 869.201612][T27872] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5911'. [ 869.217870][T27868] syzkaller1: entered allmulticast mode [ 869.287677][T27879] FAULT_INJECTION: forcing a failure. [ 869.287677][T27879] name failslab, interval 1, probability 0, space 0, times 0 [ 869.312948][T27879] CPU: 0 UID: 0 PID: 27879 Comm: syz.0.5913 Not tainted syzkaller #0 PREEMPT(full) [ 869.312972][T27879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 869.312982][T27879] Call Trace: [ 869.312990][T27879] [ 869.312999][T27879] dump_stack_lvl+0xe8/0x150 [ 869.313024][T27879] should_fail_ex+0x40c/0x560 [ 869.313055][T27879] should_failslab+0xa8/0x100 [ 869.313072][T27879] ? security_inode_alloc+0x39/0x310 [ 869.313169][T27879] kmem_cache_alloc_noprof+0x87/0x650 [ 869.313201][T27879] security_inode_alloc+0x39/0x310 [ 869.313228][T27879] inode_init_always_gfp+0x97e/0xd30 [ 869.313253][T27879] ? __pfx_proc_alloc_inode+0x10/0x10 [ 869.313275][T27879] alloc_inode+0x82/0x1b0 [ 869.313296][T27879] new_inode+0x1f/0x170 [ 869.313316][T27879] ? proc_pid_make_inode+0x19/0x130 [ 869.313352][T27879] proc_pid_make_inode+0x21/0x130 [ 869.313379][T27879] proc_pident_instantiate+0x6d/0x2a0 [ 869.313403][T27879] proc_pident_lookup+0x1b7/0x270 [ 869.313428][T27879] __lookup_slow+0x2b7/0x410 [ 869.313453][T27879] ? __pfx___lookup_slow+0x10/0x10 [ 869.313485][T27879] ? down_read+0x270/0x2e0 [ 869.313510][T27879] lookup_slow+0x53/0x70 [ 869.313532][T27879] link_path_walk+0xd2a/0x1910 [ 869.313571][T27879] path_openat+0x2c6/0x3890 [ 869.313593][T27879] ? arch_stack_walk+0xfb/0x150 [ 869.313622][T27879] ? do_getname+0x2e/0x250 [ 869.313649][T27879] ? stack_depot_save_flags+0x33/0x800 [ 869.313677][T27879] ? __pfx_path_openat+0x10/0x10 [ 869.313700][T27879] ? __x64_sys_openat+0x138/0x170 [ 869.313725][T27879] ? __lock_acquire+0x683/0x2cd0 [ 869.313756][T27879] do_file_open+0x23e/0x4a0 [ 869.313785][T27879] ? __pfx_do_file_open+0x10/0x10 [ 869.313819][T27879] ? __pfx_kfree_link+0x10/0x10 [ 869.313848][T27879] ? alloc_fd+0x62e/0x6a0 [ 869.313880][T27879] do_sys_openat2+0x113/0x200 [ 869.313903][T27879] ? __pfx_do_sys_openat2+0x10/0x10 [ 869.313924][T27879] ? ksys_write+0x242/0x270 [ 869.313950][T27879] ? __pfx_ksys_write+0x10/0x10 [ 869.313978][T27879] __x64_sys_openat+0x138/0x170 [ 869.314001][T27879] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 869.314020][T27879] do_syscall_64+0x174/0x580 [ 869.314039][T27879] ? trace_irq_disable+0x3b/0x140 [ 869.314064][T27879] ? clear_bhb_loop+0x40/0x90 [ 869.314087][T27879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 869.314104][T27879] RIP: 0033:0x7f7859f5d68e [ 869.314122][T27879] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 869.314137][T27879] RSP: 002b:00007f785ad80f18 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 869.314157][T27879] RAX: ffffffffffffffda RBX: 00007f785ad816c0 RCX: 00007f7859f5d68e [ 869.314170][T27879] RDX: 0000000000000000 RSI: 00007f785a0324aa RDI: ffffffffffffff9c [ 869.314182][T27879] RBP: 00007f785ad81090 R08: 0000000000000000 R09: 0000000000000000 [ 869.314194][T27879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 869.314205][T27879] R13: 00007f785a216038 R14: 00007f785a215fa0 R15: 00007ffe08c03048 [ 869.314235][T27879] [ 869.875595][T27892] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 869.970648][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.020226][T27909] __nla_validate_parse: 1 callbacks suppressed [ 870.020244][T27909] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5925'. [ 870.081262][T27909] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5925'. [ 870.324177][T27917] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 870.501340][T27933] syzkaller1: entered promiscuous mode [ 870.507419][T27933] syzkaller1: entered allmulticast mode [ 870.570550][T27935] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5938'. [ 871.056192][T27953] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 871.137834][T27960] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5950'. [ 871.172066][T27965] syzkaller0: entered promiscuous mode [ 871.184333][T27965] syzkaller0: entered allmulticast mode [ 871.202636][T27965] tipc: Enabled bearer , priority 0 [ 871.231955][T27965] tipc: Resetting bearer [ 871.253788][T27964] tipc: Resetting bearer [ 871.321931][T27964] tipc: Disabling bearer [ 871.389193][T27971] syzkaller0: entered promiscuous mode [ 871.404248][T27971] syzkaller0: entered allmulticast mode [ 871.677244][T27989] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5960'. [ 871.820450][T27997] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.5961'. [ 871.867507][T28004] syzkaller0: entered promiscuous mode [ 871.873459][T28004] syzkaller0: entered allmulticast mode [ 871.882758][T28004] tipc: Enabled bearer , priority 0 [ 871.893890][T28004] tipc: Resetting bearer [ 871.906448][T28003] tipc: Resetting bearer [ 871.931036][T28003] tipc: Disabling bearer [ 872.095568][ T29] audit: type=1804 audit(1781630517.504:3): pid=28012 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.5968" name="/newroot/1243/cgroup.controllers" dev="tmpfs" ino=6378 res=1 errno=0 [ 872.134836][ T29] audit: type=1800 audit(1781630517.504:4): pid=28012 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.5968" name="cgroup.controllers" dev="tmpfs" ino=6378 res=0 errno=0 [ 872.239872][T28020] netlink: 'syz.3.5972': attribute type 10 has an invalid length. [ 872.270835][T28020] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 872.288379][T28020] team0: Port device netdevsim1 added [ 872.340844][T28025] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5973'. [ 872.350002][T28025] tc_dump_action: action bad kind [ 872.382443][T28027] FAULT_INJECTION: forcing a failure. [ 872.382443][T28027] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 872.422445][T28027] CPU: 0 UID: 0 PID: 28027 Comm: syz.4.5974 Not tainted syzkaller #0 PREEMPT(full) [ 872.422471][T28027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 872.422481][T28027] Call Trace: [ 872.422488][T28027] [ 872.422496][T28027] dump_stack_lvl+0xe8/0x150 [ 872.422523][T28027] should_fail_ex+0x40c/0x560 [ 872.422556][T28027] _copy_to_user+0x31/0xb0 [ 872.422579][T28027] simple_read_from_buffer+0xe1/0x170 [ 872.422607][T28027] proc_fail_nth_read+0x1bb/0x230 [ 872.422633][T28027] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 872.422659][T28027] ? rw_verify_area+0x24a/0x4c0 [ 872.422684][T28027] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 872.422706][T28027] vfs_read+0x213/0xa80 [ 872.422734][T28027] ? __pfx___mutex_lock+0x10/0x10 [ 872.422758][T28027] ? __pfx_vfs_read+0x10/0x10 [ 872.422782][T28027] ? __fget_files+0x2a/0x420 [ 872.422806][T28027] ? __fget_files+0x3a2/0x420 [ 872.422826][T28027] ? __fget_files+0x2a/0x420 [ 872.422855][T28027] ksys_read+0x150/0x270 [ 872.422881][T28027] ? __pfx_ksys_read+0x10/0x10 [ 872.422913][T28027] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 872.422933][T28027] do_syscall_64+0x174/0x580 [ 872.422952][T28027] ? trace_irq_disable+0x3b/0x140 [ 872.422977][T28027] ? clear_bhb_loop+0x40/0x90 [ 872.422999][T28027] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 872.423017][T28027] RIP: 0033:0x7f7d4295d68e [ 872.423034][T28027] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 872.423049][T28027] RSP: 002b:00007f7d43825fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 872.423071][T28027] RAX: ffffffffffffffda RBX: 00007f7d438266c0 RCX: 00007f7d4295d68e [ 872.423084][T28027] RDX: 000000000000000f RSI: 00007f7d438260a0 RDI: 0000000000000004 [ 872.423095][T28027] RBP: 00007f7d43826090 R08: 0000000000000000 R09: 0000000000000000 [ 872.423106][T28027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 872.423116][T28027] R13: 00007f7d42c16038 R14: 00007f7d42c15fa0 R15: 00007ffce2368678 [ 872.423146][T28027] [ 872.667467][ T5633] Bluetooth: hci2: command 0x0406 tx timeout [ 872.673583][ T4948] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 872.731034][T28038] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5978'. [ 872.779720][T28044] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5979'. [ 872.846802][T28047] syzkaller0: entered promiscuous mode [ 872.852435][T28047] syzkaller0: entered allmulticast mode [ 872.861920][T28047] tipc: Enabled bearer , priority 0 [ 872.872244][T28047] tipc: Resetting bearer [ 872.881427][T28046] tipc: Resetting bearer [ 872.899508][T28046] tipc: Disabling bearer [ 873.213893][T28069] netlink: 88 bytes leftover after parsing attributes in process `syz.3.5989'. [ 873.227810][T28069] nbd: must specify a size in bytes for the device [ 873.962077][T28108] veth79: entered allmulticast mode [ 874.127299][T28123] FAULT_INJECTION: forcing a failure. [ 874.127299][T28123] name failslab, interval 1, probability 0, space 0, times 0 [ 874.163546][T28123] CPU: 0 UID: 0 PID: 28123 Comm: syz.2.6004 Not tainted syzkaller #0 PREEMPT(full) [ 874.163570][T28123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 874.163580][T28123] Call Trace: [ 874.163588][T28123] [ 874.163596][T28123] dump_stack_lvl+0xe8/0x150 [ 874.163622][T28123] should_fail_ex+0x40c/0x560 [ 874.163654][T28123] should_failslab+0xa8/0x100 [ 874.163675][T28123] kmem_cache_alloc_node_noprof+0x8f/0x680 [ 874.163700][T28123] ? __alloc_skb+0x189/0x7a0 [ 874.163724][T28123] ? __alloc_skb+0x1d7/0x7a0 [ 874.163747][T28123] ? __local_bh_enable_ip+0xd0/0x130 [ 874.163770][T28123] __alloc_skb+0x1d7/0x7a0 [ 874.163799][T28123] netlink_ack+0x136/0xb30 [ 874.163816][T28123] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 874.163840][T28123] ? ref_tracker_free+0x689/0x830 [ 874.163862][T28123] ? __pfx_ref_tracker_free+0x10/0x10 [ 874.163891][T28123] netlink_rcv_skb+0x2a4/0x4a0 [ 874.163914][T28123] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 874.163942][T28123] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 874.163972][T28123] ? netlink_deliver_tap+0x2e/0x1b0 [ 874.163991][T28123] ? netlink_deliver_tap+0x2e/0x1b0 [ 874.164022][T28123] netlink_unicast+0x7bb/0x940 [ 874.164058][T28123] netlink_sendmsg+0x813/0xb40 [ 874.164086][T28123] ? __pfx_netlink_sendmsg+0x10/0x10 [ 874.164109][T28123] ? aa_sock_msg_perm+0xf1/0x1b0 [ 874.164135][T28123] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 874.164157][T28123] ? __pfx_netlink_sendmsg+0x10/0x10 [ 874.164179][T28123] ____sys_sendmsg+0x9b9/0xa20 [ 874.164198][T28123] ? __might_fault+0xaf/0x130 [ 874.164224][T28123] ? __pfx_____sys_sendmsg+0x10/0x10 [ 874.164252][T28123] ? import_iovec+0x73/0xa0 [ 874.164276][T28123] ___sys_sendmsg+0x2a5/0x360 [ 874.164294][T28123] ? __lock_acquire+0x683/0x2cd0 [ 874.164317][T28123] ? __pfx____sys_sendmsg+0x10/0x10 [ 874.164369][T28123] ? __fget_files+0x2a/0x420 [ 874.164389][T28123] ? __fget_files+0x3a2/0x420 [ 874.164420][T28123] __x64_sys_sendmsg+0x1bd/0x2a0 [ 874.164442][T28123] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 874.164470][T28123] ? __pfx_ksys_write+0x10/0x10 [ 874.164501][T28123] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 874.164521][T28123] do_syscall_64+0x174/0x580 [ 874.164541][T28123] ? trace_irq_disable+0x3b/0x140 [ 874.164565][T28123] ? clear_bhb_loop+0x40/0x90 [ 874.164588][T28123] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 874.164605][T28123] RIP: 0033:0x7efc34d9ce59 [ 874.164623][T28123] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 874.164638][T28123] RSP: 002b:00007efc35c17028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 874.164656][T28123] RAX: ffffffffffffffda RBX: 00007efc35015fa0 RCX: 00007efc34d9ce59 [ 874.164670][T28123] RDX: 0000000000000010 RSI: 0000200000000680 RDI: 0000000000000004 [ 874.164682][T28123] RBP: 00007efc35c17090 R08: 0000000000000000 R09: 0000000000000000 [ 874.164693][T28123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 874.164704][T28123] R13: 00007efc35016038 R14: 00007efc35015fa0 R15: 00007ffe555bcc68 [ 874.164733][T28123] [ 874.652189][T28142] FAULT_INJECTION: forcing a failure. [ 874.652189][T28142] name failslab, interval 1, probability 0, space 0, times 0 [ 874.667701][T28142] CPU: 0 UID: 0 PID: 28142 Comm: syz.3.6009 Not tainted syzkaller #0 PREEMPT(full) [ 874.667724][T28142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 874.667734][T28142] Call Trace: [ 874.667742][T28142] [ 874.667749][T28142] dump_stack_lvl+0xe8/0x150 [ 874.667776][T28142] should_fail_ex+0x40c/0x560 [ 874.667806][T28142] should_failslab+0xa8/0x100 [ 874.667826][T28142] __kmalloc_noprof+0xe8/0x750 [ 874.667850][T28142] ? tomoyo_encode+0x2ad/0x570 [ 874.667880][T28142] tomoyo_encode+0x2ad/0x570 [ 874.667910][T28142] tomoyo_realpath_from_path+0x5fa/0x640 [ 874.667944][T28142] ? tomoyo_path_number_perm+0x219/0x5f0 [ 874.667975][T28142] tomoyo_path_number_perm+0x246/0x5f0 [ 874.668000][T28142] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 874.668021][T28142] ? __lock_acquire+0x683/0x2cd0 [ 874.668055][T28142] ? hook_file_ioctl+0x1f0/0x5c0 [ 874.668098][T28142] ? __fget_files+0x2a/0x420 [ 874.668121][T28142] ? __fget_files+0x2a/0x420 [ 874.668141][T28142] ? __fget_files+0x3a2/0x420 [ 874.668159][T28142] ? __fget_files+0x2a/0x420 [ 874.668183][T28142] security_file_ioctl+0xc3/0x2a0 [ 874.668207][T28142] __se_sys_ioctl+0x47/0x170 [ 874.668232][T28142] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 874.668252][T28142] do_syscall_64+0x174/0x580 [ 874.668272][T28142] ? trace_irq_disable+0x3b/0x140 [ 874.668295][T28142] ? clear_bhb_loop+0x40/0x90 [ 874.668317][T28142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 874.668335][T28142] RIP: 0033:0x7fd2a639ce59 [ 874.668353][T28142] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 874.668368][T28142] RSP: 002b:00007fd2a7314028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 874.668387][T28142] RAX: ffffffffffffffda RBX: 00007fd2a6615fa0 RCX: 00007fd2a639ce59 [ 874.668400][T28142] RDX: 0000000000000000 RSI: 000000000000541b RDI: 0000000000000003 [ 874.668412][T28142] RBP: 00007fd2a7314090 R08: 0000000000000000 R09: 0000000000000000 [ 874.668423][T28142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 874.668434][T28142] R13: 00007fd2a6616038 R14: 00007fd2a6615fa0 R15: 00007ffc70306238 [ 874.668463][T28142] [ 874.668481][T28142] ERROR: Out of memory at tomoyo_realpath_from_path. [ 875.110879][T28168] netlink: 'syz.1.6014': attribute type 1 has an invalid length. [ 875.135657][T28168] bond7: entered promiscuous mode [ 875.140996][T28168] bond7: entered allmulticast mode [ 875.147259][T28168] 8021q: adding VLAN 0 to HW filter on device bond7 [ 877.558406][T28132] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 877.812547][T28190] __nla_validate_parse: 3 callbacks suppressed [ 877.812567][T28190] netlink: 1319 bytes leftover after parsing attributes in process `syz.0.6022'. [ 877.890051][T28198] FAULT_INJECTION: forcing a failure. [ 877.890051][T28198] name failslab, interval 1, probability 0, space 0, times 0 [ 877.906730][T28200] tipc: Enabling of bearer rejected, already enabled [ 877.916645][T28200] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6024'. [ 877.931408][T28198] CPU: 1 UID: 0 PID: 28198 Comm: syz.3.6023 Not tainted syzkaller #0 PREEMPT(full) [ 877.931436][T28198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 877.931448][T28198] Call Trace: [ 877.931455][T28198] [ 877.931463][T28198] dump_stack_lvl+0xe8/0x150 [ 877.931488][T28198] should_fail_ex+0x40c/0x560 [ 877.931519][T28198] should_failslab+0xa8/0x100 [ 877.931539][T28198] kmem_cache_alloc_node_noprof+0x8f/0x680 [ 877.931563][T28198] ? __alloc_skb+0x189/0x7a0 [ 877.931587][T28198] ? __alloc_skb+0x1d7/0x7a0 [ 877.931610][T28198] ? __local_bh_enable_ip+0xd0/0x130 [ 877.931633][T28198] __alloc_skb+0x1d7/0x7a0 [ 877.931661][T28198] netlink_ack+0x136/0xb30 [ 877.931685][T28198] ? __kmalloc_cache_noprof+0x318/0x660 [ 877.931721][T28198] nfnetlink_rcv+0x260c/0x28c0 [ 877.931779][T28198] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 877.931819][T28198] ? ref_tracker_free+0x689/0x830 [ 877.931860][T28198] ? skb_clone+0x246/0x3a0 [ 877.931882][T28198] ? __netlink_deliver_tap+0x811/0x860 [ 877.931910][T28198] ? netlink_deliver_tap+0x2e/0x1b0 [ 877.931928][T28198] ? netlink_deliver_tap+0x2e/0x1b0 [ 877.931953][T28198] netlink_unicast+0x7bb/0x940 [ 877.931988][T28198] netlink_sendmsg+0x813/0xb40 [ 877.932016][T28198] ? __pfx_netlink_sendmsg+0x10/0x10 [ 877.932037][T28198] ? aa_sock_msg_perm+0xf1/0x1b0 [ 877.932063][T28198] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 877.932085][T28198] ? __pfx_netlink_sendmsg+0x10/0x10 [ 877.932107][T28198] ____sys_sendmsg+0x9b9/0xa20 [ 877.932125][T28198] ? __might_fault+0xaf/0x130 [ 877.932150][T28198] ? __pfx_____sys_sendmsg+0x10/0x10 [ 877.932178][T28198] ? import_iovec+0x73/0xa0 [ 877.932201][T28198] ___sys_sendmsg+0x2a5/0x360 [ 877.932218][T28198] ? __lock_acquire+0x683/0x2cd0 [ 877.932241][T28198] ? __pfx____sys_sendmsg+0x10/0x10 [ 877.932291][T28198] ? __fget_files+0x2a/0x420 [ 877.932311][T28198] ? __fget_files+0x3a2/0x420 [ 877.932343][T28198] __x64_sys_sendmsg+0x1bd/0x2a0 [ 877.932365][T28198] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 877.932396][T28198] ? __pfx_ksys_write+0x10/0x10 [ 877.932429][T28198] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 877.932449][T28198] do_syscall_64+0x174/0x580 [ 877.932469][T28198] ? trace_irq_disable+0x3b/0x140 [ 877.932494][T28198] ? clear_bhb_loop+0x40/0x90 [ 877.932516][T28198] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 877.932532][T28198] RIP: 0033:0x7fd2a639ce59 [ 877.932547][T28198] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 877.932561][T28198] RSP: 002b:00007fd2a7314028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 877.932579][T28198] RAX: ffffffffffffffda RBX: 00007fd2a6615fa0 RCX: 00007fd2a639ce59 [ 877.932592][T28198] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000004 [ 877.932603][T28198] RBP: 00007fd2a7314090 R08: 0000000000000000 R09: 0000000000000000 [ 877.932614][T28198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 877.932624][T28198] R13: 00007fd2a6616038 R14: 00007fd2a6615fa0 R15: 00007ffc70306238 [ 877.932653][T28198] [ 878.358854][T28216] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6027'. [ 878.680154][T28222] tipc: Enabled bearer , priority 0 [ 878.699250][T27096] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 878.714974][T27096] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 878.726517][T28213] tipc: Resetting bearer [ 878.746528][T28212] tipc: Disabling bearer [ 878.777963][T27096] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 878.795207][T27096] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 878.799634][T28237] netlink: 124 bytes leftover after parsing attributes in process `syz.4.6032'. [ 878.804274][T27096] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 878.804303][T27096] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 878.804335][T27096] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 878.804358][T27096] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 878.886174][T28239] FAULT_INJECTION: forcing a failure. [ 878.886174][T28239] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 878.902155][T28239] CPU: 1 UID: 0 PID: 28239 Comm: syz.2.6033 Not tainted syzkaller #0 PREEMPT(full) [ 878.902179][T28239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 878.902196][T28239] Call Trace: [ 878.902203][T28239] [ 878.902212][T28239] dump_stack_lvl+0xe8/0x150 [ 878.902238][T28239] should_fail_ex+0x40c/0x560 [ 878.902270][T28239] _copy_to_user+0x31/0xb0 [ 878.902294][T28239] btf_new_fd+0x5bb/0xd40 [ 878.902344][T28239] ? apparmor_capable+0x126/0x170 [ 878.902373][T28239] ? __pfx_btf_new_fd+0x10/0x10 [ 878.902395][T28239] ? bpf_token_put+0x143/0x160 [ 878.902416][T28239] ? bpf_btf_load+0x128/0x190 [ 878.902436][T28239] __sys_bpf+0x4e5/0x950 [ 878.902462][T28239] ? __pfx___sys_bpf+0x10/0x10 [ 878.902502][T28239] ? ksys_write+0x242/0x270 [ 878.902530][T28239] ? __pfx_ksys_write+0x10/0x10 [ 878.902559][T28239] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 878.902579][T28239] __x64_sys_bpf+0x7c/0x90 [ 878.902604][T28239] do_syscall_64+0x174/0x580 [ 878.902624][T28239] ? trace_irq_disable+0x3b/0x140 [ 878.902649][T28239] ? clear_bhb_loop+0x40/0x90 [ 878.902674][T28239] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 878.902692][T28239] RIP: 0033:0x7efc34d9ce59 [ 878.902709][T28239] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 878.902725][T28239] RSP: 002b:00007efc35c17028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 878.902744][T28239] RAX: ffffffffffffffda RBX: 00007efc35015fa0 RCX: 00007efc34d9ce59 [ 878.902758][T28239] RDX: 0000000000000028 RSI: 0000200000000100 RDI: 0000000000000012 [ 878.902770][T28239] RBP: 00007efc35c17090 R08: 0000000000000000 R09: 0000000000000000 [ 878.902781][T28239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 878.902792][T28239] R13: 00007efc35016038 R14: 00007efc35015fa0 R15: 00007ffe555bcc68 [ 878.902824][T28239] [ 879.098064][T28241] FAULT_INJECTION: forcing a failure. [ 879.098064][T28241] name failslab, interval 1, probability 0, space 0, times 0 [ 879.116762][T28241] CPU: 0 UID: 0 PID: 28241 Comm: syz.4.6034 Not tainted syzkaller #0 PREEMPT(full) [ 879.116785][T28241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 879.116796][T28241] Call Trace: [ 879.116803][T28241] [ 879.116811][T28241] dump_stack_lvl+0xe8/0x150 [ 879.116837][T28241] should_fail_ex+0x40c/0x560 [ 879.116871][T28241] should_failslab+0xa8/0x100 [ 879.116889][T28241] ? security_inode_alloc+0x39/0x310 [ 879.116916][T28241] kmem_cache_alloc_noprof+0x87/0x650 [ 879.116950][T28241] security_inode_alloc+0x39/0x310 [ 879.116979][T28241] inode_init_always_gfp+0x97e/0xd30 [ 879.117007][T28241] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 879.117028][T28241] alloc_inode+0x82/0x1b0 [ 879.117049][T28241] new_inode+0x1f/0x170 [ 879.117074][T28241] __debugfs_create_file+0xb8/0x400 [ 879.117099][T28241] debugfs_create_file_full+0x3f/0x60 [ 879.117124][T28241] ref_tracker_dir_debugfs+0x197/0x360 [ 879.117145][T28241] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 879.117193][T28241] ? __kvmalloc_node_noprof+0x53d/0x890 [ 879.117218][T28241] ? alloc_netdev_mqs+0xa9/0x1220 [ 879.117315][T28241] ? __raw_spin_lock_init+0x45/0x100 [ 879.117343][T28241] alloc_netdev_mqs+0x275/0x1220 [ 879.117363][T28241] ? __pfx_snprintf+0x10/0x10 [ 879.117420][T28241] ? __pfx_veth_setup+0x10/0x10 [ 879.117499][T28241] rtnl_create_link+0x321/0xd70 [ 879.117528][T28241] rtnl_newlink_create+0x25f/0xb00 [ 879.117558][T28241] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 879.117582][T28241] ? __pfx___mutex_lock+0x10/0x10 [ 879.117615][T28241] ? ns_capable+0x89/0xe0 [ 879.117641][T28241] rtnl_newlink+0x167f/0x1bd0 [ 879.117690][T28241] ? __pfx_rtnl_newlink+0x10/0x10 [ 879.117720][T28241] ? __lock_acquire+0x683/0x2cd0 [ 879.117807][T28241] ? kernel_text_address+0xa5/0xe0 [ 879.117831][T28241] ? __kernel_text_address+0xd/0x30 [ 879.117854][T28241] ? unwind_get_return_address+0x4d/0x90 [ 879.117874][T28241] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 879.117899][T28241] ? arch_stack_walk+0xfb/0x150 [ 879.117929][T28241] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 879.117973][T28241] ? __pfx_rtnl_newlink+0x10/0x10 [ 879.118002][T28241] rtnetlink_rcv_msg+0x802/0xc00 [ 879.118026][T28241] ? kasan_save_track+0x3e/0x80 [ 879.118053][T28241] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 879.118078][T28241] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 879.118106][T28241] ? __lock_acquire+0x683/0x2cd0 [ 879.118139][T28241] netlink_rcv_skb+0x226/0x4a0 [ 879.118161][T28241] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 879.118188][T28241] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 879.118221][T28241] ? netlink_deliver_tap+0x2e/0x1b0 [ 879.118241][T28241] ? netlink_deliver_tap+0x2e/0x1b0 [ 879.118267][T28241] netlink_unicast+0x7bb/0x940 [ 879.118306][T28241] netlink_sendmsg+0x813/0xb40 [ 879.118336][T28241] ? __pfx_netlink_sendmsg+0x10/0x10 [ 879.118360][T28241] ? aa_sock_msg_perm+0xf1/0x1b0 [ 879.118387][T28241] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 879.118410][T28241] ? __pfx_netlink_sendmsg+0x10/0x10 [ 879.118432][T28241] ____sys_sendmsg+0x9b9/0xa20 [ 879.118452][T28241] ? __might_fault+0xaf/0x130 [ 879.118481][T28241] ? __pfx_____sys_sendmsg+0x10/0x10 [ 879.118511][T28241] ? import_iovec+0x73/0xa0 [ 879.118536][T28241] ___sys_sendmsg+0x2a5/0x360 [ 879.118555][T28241] ? __lock_acquire+0x683/0x2cd0 [ 879.118578][T28241] ? __pfx____sys_sendmsg+0x10/0x10 [ 879.118637][T28241] ? __fget_files+0x2a/0x420 [ 879.118657][T28241] ? __fget_files+0x3a2/0x420 [ 879.118697][T28241] __x64_sys_sendmsg+0x1bd/0x2a0 [ 879.118719][T28241] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 879.118750][T28241] ? __pfx_ksys_write+0x10/0x10 [ 879.118785][T28241] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 879.118805][T28241] do_syscall_64+0x174/0x580 [ 879.118828][T28241] ? clear_bhb_loop+0x40/0x90 [ 879.118852][T28241] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 879.118870][T28241] RIP: 0033:0x7f7d4299ce59 [ 879.118888][T28241] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 879.118903][T28241] RSP: 002b:00007f7d43826028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 879.118922][T28241] RAX: ffffffffffffffda RBX: 00007f7d42c15fa0 RCX: 00007f7d4299ce59 [ 879.118935][T28241] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 879.118947][T28241] RBP: 00007f7d43826090 R08: 0000000000000000 R09: 0000000000000000 [ 879.118958][T28241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 879.118968][T28241] R13: 00007f7d42c16038 R14: 00007f7d42c15fa0 R15: 00007ffce2368678 [ 879.118999][T28241] [ 879.119139][T28241] debugfs: out of free dentries, can not create file 'netdev@ffff8880529446a8' [ 879.597069][T28241] veth93: entered allmulticast mode [ 879.873097][T28258] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6039'. [ 879.892805][T28248] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6037'. [ 879.961454][T28261] syzkaller0: entered promiscuous mode [ 879.977244][T28261] syzkaller0: entered allmulticast mode [ 880.066822][T28256] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6041'. [ 880.072834][T28267] netlink: 124 bytes leftover after parsing attributes in process `syz.1.6044'. [ 880.113371][T28262] bridge2: entered promiscuous mode [ 880.123610][T28262] bridge2: entered allmulticast mode [ 880.262462][T28282] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6046'. [ 880.769069][T28302] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6053'. [ 881.099287][T28316] ipvlan9: entered allmulticast mode [ 881.753966][T28355] syzkaller0: entered promiscuous mode [ 881.759645][T28355] syzkaller0: entered allmulticast mode [ 881.801874][T28359] FAULT_INJECTION: forcing a failure. [ 881.801874][T28359] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 881.817438][T28359] CPU: 0 UID: 0 PID: 28359 Comm: syz.3.6075 Not tainted syzkaller #0 PREEMPT(full) [ 881.817463][T28359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 881.817473][T28359] Call Trace: [ 881.817481][T28359] [ 881.817489][T28359] dump_stack_lvl+0xe8/0x150 [ 881.817515][T28359] should_fail_ex+0x40c/0x560 [ 881.817548][T28359] _copy_from_iter+0x1d3/0x1660 [ 881.817570][T28359] ? rcu_is_watching+0x15/0xb0 [ 881.817596][T28359] ? __pfx__copy_from_iter+0x10/0x10 [ 881.817612][T28359] ? kmem_cache_alloc_node_noprof+0x3ca/0x680 [ 881.817644][T28359] ? netlink_sendmsg+0x650/0xb40 [ 881.817664][T28359] ? skb_put+0x112/0x210 [ 881.817685][T28359] netlink_sendmsg+0x6c0/0xb40 [ 881.817713][T28359] ? __pfx_netlink_sendmsg+0x10/0x10 [ 881.817736][T28359] ? aa_sock_msg_perm+0xf1/0x1b0 [ 881.817762][T28359] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 881.817784][T28359] ? __pfx_netlink_sendmsg+0x10/0x10 [ 881.817805][T28359] ____sys_sendmsg+0x9b9/0xa20 [ 881.817824][T28359] ? __might_fault+0xaf/0x130 [ 881.817856][T28359] ? __pfx_____sys_sendmsg+0x10/0x10 [ 881.817883][T28359] ? import_iovec+0x73/0xa0 [ 881.817906][T28359] ___sys_sendmsg+0x2a5/0x360 [ 881.817923][T28359] ? __lock_acquire+0x683/0x2cd0 [ 881.817946][T28359] ? __pfx____sys_sendmsg+0x10/0x10 [ 881.817999][T28359] ? __fget_files+0x2a/0x420 [ 881.818020][T28359] ? __fget_files+0x3a2/0x420 [ 881.818051][T28359] __x64_sys_sendmsg+0x1bd/0x2a0 [ 881.818073][T28359] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 881.818102][T28359] ? __pfx_ksys_write+0x10/0x10 [ 881.818134][T28359] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 881.818154][T28359] do_syscall_64+0x174/0x580 [ 881.818174][T28359] ? trace_irq_disable+0x3b/0x140 [ 881.818199][T28359] ? clear_bhb_loop+0x40/0x90 [ 881.818221][T28359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 881.818238][T28359] RIP: 0033:0x7fd2a639ce59 [ 881.818255][T28359] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 881.818271][T28359] RSP: 002b:00007fd2a7314028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 881.818290][T28359] RAX: ffffffffffffffda RBX: 00007fd2a6615fa0 RCX: 00007fd2a639ce59 [ 881.818303][T28359] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 881.818322][T28359] RBP: 00007fd2a7314090 R08: 0000000000000000 R09: 0000000000000000 [ 881.818333][T28359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 881.818344][T28359] R13: 00007fd2a6616038 R14: 00007fd2a6615fa0 R15: 00007ffc70306238 [ 881.818375][T28359] [ 882.104677][T28361] syzkaller0: entered promiscuous mode [ 882.652796][T28392] openvswitch: netlink: Multiple metadata blocks provided [ 882.673967][T28395] openvswitch: netlink: Multiple metadata blocks provided [ 882.968601][T28411] __nla_validate_parse: 15 callbacks suppressed [ 882.968613][T28411] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6093'. [ 883.081859][T28413] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6094'. [ 883.138782][T28413] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6094'. [ 883.731562][T28441] netlink: 68 bytes leftover after parsing attributes in process `syz.3.6103'. [ 883.773588][T28441] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6103'. [ 883.805672][T28445] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6104'. [ 884.234601][T28467] sctp: [Deprecated]: syz.3.6112 (pid 28467) Use of int in max_burst socket option. [ 884.234601][T28467] Use struct sctp_assoc_value instead [ 884.306869][T28470] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6113'. [ 884.464759][T28431] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 884.486320][T28431] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 884.537170][ T139] [ 884.539524][ T139] ====================================================== [ 884.546533][ T139] WARNING: possible circular locking dependency detected [ 884.553542][ T139] syzkaller #0 Not tainted [ 884.557933][ T139] ------------------------------------------------------ [ 884.564931][ T139] kworker/u8:5/139 is trying to acquire lock: [ 884.570986][ T139] ffff88803444d030 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x237/0x360 [ 884.580110][ T139] [ 884.580110][ T139] but task is already holding lock: [ 884.587460][ T139] ffff888059fc7d58 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 884.597362][ T139] [ 884.597362][ T139] which lock already depends on the new lock. [ 884.597362][ T139] [ 884.607760][ T139] [ 884.607760][ T139] the existing dependency chain (in reverse order) is: [ 884.616757][ T139] [ 884.616757][ T139] -> #1 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}: [ 884.624986][ T139] _raw_spin_lock+0x2e/0x40 [ 884.630062][ T139] sch_direct_xmit+0x15f/0x4c0 [ 884.635337][ T139] __dev_queue_xmit+0x1754/0x37f0 [ 884.640867][ T139] hsr_forward_skb+0x152a/0x28c0 [ 884.646316][ T139] hsr_dev_xmit+0x242/0x360 [ 884.651322][ T139] dev_hard_start_xmit+0x2cd/0x830 [ 884.656936][ T139] __dev_queue_xmit+0x1435/0x37f0 [ 884.662482][ T139] ip6_output+0x337/0x540 [ 884.667370][ T139] NF_HOOK+0x177/0x4f0 [ 884.671977][ T139] mld_sendpack+0x890/0xe10 [ 884.676981][ T139] mld_ifc_work+0x839/0xe70 [ 884.681989][ T139] process_scheduled_works+0xa8e/0x14e0 [ 884.688041][ T139] worker_thread+0xa47/0xfb0 [ 884.693158][ T139] kthread+0x389/0x470 [ 884.697726][ T139] ret_from_fork+0x514/0xb70 [ 884.702814][ T139] ret_from_fork_asm+0x1a/0x30 [ 884.708081][ T139] [ 884.708081][ T139] -> #0 (&hsr->seqnr_lock){+.-.}-{3:3}: [ 884.715784][ T139] __lock_acquire+0x1520/0x2cd0 [ 884.721139][ T139] lock_acquire+0x106/0x350 [ 884.726148][ T139] _raw_spin_lock_bh+0x36/0x50 [ 884.731422][ T139] hsr_dev_xmit+0x237/0x360 [ 884.736429][ T139] dev_hard_start_xmit+0x2cd/0x830 [ 884.742042][ T139] __dev_queue_xmit+0x1435/0x37f0 [ 884.747580][ T139] NF_HOOK+0x33a/0x3c0 [ 884.752215][ T139] arp_xmit+0x16c/0x270 [ 884.756873][ T139] arp_solicit+0xbdc/0xe40 [ 884.761795][ T139] __neigh_event_send+0xf0c/0x1510 [ 884.767409][ T139] neigh_resolve_output+0x1a1/0x720 [ 884.773133][ T139] ip_finish_output2+0xc4b/0x10b0 [ 884.779614][ T139] ip_output+0x29f/0x450 [ 884.784471][ T139] iptunnel_xmit+0x626/0xd10 [ 884.789582][ T139] ip_tunnel_xmit+0x195b/0x2040 [ 884.794960][ T139] __gre_xmit+0x19e/0x240 [ 884.799895][ T139] erspan_xmit+0xad5/0x1590 [ 884.804902][ T139] dev_hard_start_xmit+0x2cd/0x830 [ 884.810516][ T139] sch_direct_xmit+0x257/0x4c0 [ 884.815790][ T139] __dev_queue_xmit+0x1754/0x37f0 [ 884.821322][ T139] alb_send_lp_vid+0x348/0x550 [ 884.826641][ T139] alb_send_learning_packets+0x12c/0x300 [ 884.832815][ T139] bond_alb_monitor+0x3d0/0x17c0 [ 884.838264][ T139] process_scheduled_works+0xa8e/0x14e0 [ 884.844314][ T139] worker_thread+0xa47/0xfb0 [ 884.849408][ T139] kthread+0x389/0x470 [ 884.853980][ T139] ret_from_fork+0x514/0xb70 [ 884.859069][ T139] ret_from_fork_asm+0x1a/0x30 [ 884.864333][ T139] [ 884.864333][ T139] other info that might help us debug this: [ 884.864333][ T139] [ 884.874536][ T139] Possible unsafe locking scenario: [ 884.874536][ T139] [ 884.881961][ T139] CPU0 CPU1 [ 884.887304][ T139] ---- ---- [ 884.892648][ T139] lock(&qdisc_xmit_lock_key#4); [ 884.897662][ T139] lock(&hsr->seqnr_lock); [ 884.904667][ T139] lock(&qdisc_xmit_lock_key#4); [ 884.912193][ T139] lock(&hsr->seqnr_lock); [ 884.916684][ T139] [ 884.916684][ T139] *** DEADLOCK *** [ 884.916684][ T139] [ 884.924826][ T139] 11 locks held by kworker/u8:5/139: [ 884.930200][ T139] #0: ffff888056cfd140 ((wq_completion)bond5#2){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 884.941244][ T139] #1: ffffc90002f4fc40 ((work_completion)(&(&bond->alb_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 884.954102][ T139] #2: ffffffff8e958780 (rcu_read_lock){....}-{1:3}, at: bond_alb_monitor+0xf3/0x17c0 [ 884.963665][ T139] #3: ffffffff8e9587e0 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x29b/0x37f0 [ 884.973566][ T139] #4: ffff888033a82228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#5){+...}-{3:3}, at: __dev_queue_xmit+0x112b/0x37f0 [ 884.986157][ T139] #5: ffff888059fc7d58 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 884.996412][ T139] #6: ffffffff8e958780 (rcu_read_lock){....}-{1:3}, at: ip_output+0x5a/0x450 [ 885.005270][ T139] #7: ffffffff8e958780 (rcu_read_lock){....}-{1:3}, at: ip_finish_output2+0x3de/0x10b0 [ 885.014998][ T139] #8: ffffffff8e958780 (rcu_read_lock){....}-{1:3}, at: arp_xmit+0x23/0x270 [ 885.023770][ T139] #9: ffffffff8e9587e0 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x29b/0x37f0 [ 885.033666][ T139] #10: ffffffff8e958780 (rcu_read_lock){....}-{1:3}, at: hsr_dev_xmit+0x2d/0x360 [ 885.042869][ T139] [ 885.042869][ T139] stack backtrace: [ 885.048737][ T139] CPU: 1 UID: 0 PID: 139 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT(full) [ 885.048753][ T139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 885.048763][ T139] Workqueue: bond5 bond_alb_monitor [ 885.048785][ T139] Call Trace: [ 885.048791][ T139] [ 885.048798][ T139] dump_stack_lvl+0xe8/0x150 [ 885.048813][ T139] print_circular_bug+0x2e1/0x300 [ 885.048832][ T139] check_noncircular+0x12e/0x150 [ 885.048850][ T139] __lock_acquire+0x1520/0x2cd0 [ 885.048866][ T139] ? __siphash_unaligned+0x28d/0x3e0 [ 885.048884][ T139] ? skb_network_protocol+0x23d/0x400 [ 885.048900][ T139] ? hsr_dev_xmit+0x237/0x360 [ 885.048916][ T139] lock_acquire+0x106/0x350 [ 885.048929][ T139] ? hsr_dev_xmit+0x237/0x360 [ 885.048949][ T139] ? hsr_dev_xmit+0x237/0x360 [ 885.048966][ T139] _raw_spin_lock_bh+0x36/0x50 [ 885.048979][ T139] ? hsr_dev_xmit+0x237/0x360 [ 885.048996][ T139] hsr_dev_xmit+0x237/0x360 [ 885.049012][ T139] ? hsr_dev_xmit+0x2d/0x360 [ 885.049031][ T139] dev_hard_start_xmit+0x2cd/0x830 [ 885.049051][ T139] __dev_queue_xmit+0x1435/0x37f0 [ 885.049070][ T139] ? __dev_queue_xmit+0x29b/0x37f0 [ 885.049085][ T139] ? __lock_acquire+0x683/0x2cd0 [ 885.049098][ T139] ? arpt_do_table+0x25b/0x1f90 [ 885.049184][ T139] ? __pfx___dev_queue_xmit+0x10/0x10 [ 885.049202][ T139] ? __pfx_arpt_do_table+0x10/0x10 [ 885.049223][ T139] ? NF_HOOK+0xa2/0x3c0 [ 885.049241][ T139] NF_HOOK+0x33a/0x3c0 [ 885.049259][ T139] ? __pfx_arp_xmit_finish+0x10/0x10 [ 885.049276][ T139] ? NF_HOOK+0xa2/0x3c0 [ 885.049292][ T139] ? __pfx_NF_HOOK+0x10/0x10 [ 885.049308][ T139] ? lock_acquire+0x106/0x350 [ 885.049321][ T139] ? __pfx_arp_xmit_finish+0x10/0x10 [ 885.049339][ T139] ? inet_addr_type_dev_table+0x25/0x190 [ 885.049359][ T139] arp_xmit+0x16c/0x270 [ 885.049375][ T139] ? arp_xmit+0x23/0x270 [ 885.049392][ T139] arp_solicit+0xbdc/0xe40 [ 885.049413][ T139] ? __pfx_arp_solicit+0x10/0x10 [ 885.049431][ T139] ? __neigh_event_send+0xea4/0x1510 [ 885.049451][ T139] ? __pfx_arp_solicit+0x10/0x10 [ 885.049468][ T139] __neigh_event_send+0xf0c/0x1510 [ 885.049491][ T139] neigh_resolve_output+0x1a1/0x720 [ 885.049510][ T139] ? __pfx_ip_neigh_gw4+0x10/0x10 [ 885.049538][ T139] ? ip_finish_output2+0x3de/0x10b0 [ 885.049556][ T139] ip_finish_output2+0xc4b/0x10b0 [ 885.049575][ T139] ? ip_skb_dst_mtu+0x811/0xa50 [ 885.049592][ T139] ? ip_finish_output2+0x3de/0x10b0 [ 885.049612][ T139] ? ip_finish_output+0x40b/0x530 [ 885.049630][ T139] ip_output+0x29f/0x450 [ 885.049647][ T139] ? ip_output+0x5a/0x450 [ 885.049664][ T139] iptunnel_xmit+0x626/0xd10 [ 885.049681][ T139] ip_tunnel_xmit+0x195b/0x2040 [ 885.049705][ T139] ? __pfx_ip_tunnel_xmit+0x10/0x10 [ 885.049724][ T139] ? __pfx_gre_build_header+0x10/0x10 [ 885.049741][ T139] ? kfree+0x1c5/0x640 [ 885.049757][ T139] ? pskb_expand_head+0x469/0x13a0 [ 885.049773][ T139] __gre_xmit+0x19e/0x240 [ 885.049788][ T139] ? __pfx___gre_xmit+0x10/0x10 [ 885.049806][ T139] erspan_xmit+0xad5/0x1590 [ 885.049827][ T139] ? __pfx_erspan_xmit+0x10/0x10 [ 885.049843][ T139] ? __lock_acquire+0x683/0x2cd0 [ 885.049858][ T139] dev_hard_start_xmit+0x2cd/0x830 [ 885.049878][ T139] sch_direct_xmit+0x257/0x4c0 [ 885.049898][ T139] ? __pfx_sch_direct_xmit+0x10/0x10 [ 885.049917][ T139] ? process_scheduled_works+0xa30/0x14e0 [ 885.049932][ T139] __dev_queue_xmit+0x1754/0x37f0 [ 885.049951][ T139] ? __dev_queue_xmit+0x29b/0x37f0 [ 885.049968][ T139] ? __pfx___dev_queue_xmit+0x10/0x10 [ 885.049984][ T139] ? rcu_is_watching+0x15/0xb0 [ 885.049999][ T139] ? trace_kmem_cache_alloc+0x29/0xe0 [ 885.050016][ T139] ? kmem_cache_alloc_node_noprof+0x3ca/0x680 [ 885.050037][ T139] ? __alloc_skb+0x4cc/0x7a0 [ 885.050057][ T139] ? alb_send_lp_vid+0x14e/0x550 [ 885.050071][ T139] alb_send_lp_vid+0x348/0x550 [ 885.050086][ T139] ? __pfx_alb_send_lp_vid+0x10/0x10 [ 885.050104][ T139] alb_send_learning_packets+0x12c/0x300 [ 885.050125][ T139] ? __pfx_alb_send_learning_packets+0x10/0x10 [ 885.050144][ T139] ? bond_alb_monitor+0xf3/0x17c0 [ 885.050165][ T139] ? netdev_lower_get_next_private_rcu+0x9f/0x100 [ 885.050186][ T139] bond_alb_monitor+0x3d0/0x17c0 [ 885.050206][ T139] ? bond_alb_monitor+0xf3/0x17c0 [ 885.050226][ T139] ? __pfx_bond_alb_monitor+0x10/0x10 [ 885.050245][ T139] ? rcu_is_watching+0x15/0xb0 [ 885.050260][ T139] ? process_scheduled_works+0xa20/0x14e0 [ 885.050273][ T139] process_scheduled_works+0xa8e/0x14e0 [ 885.050294][ T139] ? __pfx_process_scheduled_works+0x10/0x10 [ 885.050309][ T139] ? assign_work+0x3cf/0x5d0 [ 885.050322][ T139] worker_thread+0xa47/0xfb0 [ 885.050344][ T139] kthread+0x389/0x470 [ 885.050359][ T139] ? __pfx_worker_thread+0x10/0x10 [ 885.050372][ T139] ? __pfx_kthread+0x10/0x10 [ 885.050388][ T139] ret_from_fork+0x514/0xb70 [ 885.050402][ T139] ? __pfx_ret_from_fork+0x10/0x10 [ 885.050415][ T139] ? __switch_to+0xc89/0x1420 [ 885.050434][ T139] ? __pfx_kthread+0x10/0x10 [ 885.050450][ T139] ret_from_fork_asm+0x1a/0x30 [ 885.050471][ T139] [ 885.531324][ T139] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 885.537770][ T139] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 885.746931][T28431] batman_adv: batadv0: Interface deactivated: gretap1 [ 885.808564][ T139] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 885.825822][ T139] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 885.834756][ T139] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 885.843992][ T139] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 885.852851][ T139] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 885.861747][ T139] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 885.871074][ T139] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 885.880002][ T139] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 885.889178][ T139] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 885.898194][ T139] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 885.907261][ T139] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 885.916158][ T139] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0