last executing test programs: 12m40.24895673s ago: executing program 2 (id=3860): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x1ff) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)=@newtfilter={0x44, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x6, 0x5}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0xd, 0x7, 0x0, 0x3d3f, 0x0, 0xffc, 0xb709, 0x58f}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004884}, 0x24040084) 12m40.099793398s ago: executing program 2 (id=3862): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r0) r2 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000040)=0x14) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000300)={0x0, 0x0, 0x3, 0x0, '\x00', [{0x3, 0x4, 0xc00000, 0xdae, 0x8000, 0xc1}, {0xfffffffb, 0x200, 0xf8a4, 0x0, 0xe, 0x4}], ['\x00', '\x00', '\x00']}) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x14, r1, 0x1, 0x70bd28, 0x25dfdbfb}, 0x14}}, 0x4040) 12m40.058651656s ago: executing program 2 (id=3864): clock_gettime(0xfffffffffffffffd, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000003200)={0xffffffffffffffff, 0x2f00020b, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7515, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x10, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20000000}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3268}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0xf00}, {}, {0x85, 0x0, 0x0, 0x76}}]}, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x7e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x5d}, [@ldst={0x5}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010001fff000000008100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000200012800b00010067656e657665000010000280060005004e24000004000e0008000a00", @ANYRES32=r4], 0x48}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 12m39.863593488s ago: executing program 2 (id=3865): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0x200, 0x70bd26, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x3, 0x4, 0x0, 0x1, 0x0, 0x5, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x10, 0x0, 0x7, 0x4], 0x2, [0x1, 0x2, 0xfffe, 0x0, 0x8000, 0x0, 0x0, 0x4, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc, 0x0, 0x1000], [0x0, 0x4, 0x0, 0x0, 0xffff, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x2, 0xfffd, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x20008004}, 0x20000000) write(0xffffffffffffffff, &(0x7f0000000300)="600000001800050601000000000000000a400000fe040001000000001400200020010db8000100000000000000000001080004000100000006", 0x39) r2 = socket$igmp(0x2, 0x3, 0x2) r3 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r3, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x24) sendmsg$inet(r3, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8b26, &(0x7f0000000140)={'wlan1\x00', @random="018d00008d00"}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="4000000041000100000000000000000001010000000000000400060004000280200001801000040000000000000000000000000004"], 0x40}}, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(r2, 0x5000940f, &(0x7f0000000540)={{r0}, "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"}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x34, 0x9, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}, @IPSET_ATTR_ADT={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000500)={@map=0x1, 0xffffffffffffffff, 0x22, 0x2004}, 0x20) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000006540000000c0a01010000000000000000010000000900020073797a32000000002800038024000080090026400000000018000b80140001800a0001006c696d697400000004fe02800900010073797a30"], 0xd8}}, 0x0) connect$bt_l2cap(r8, &(0x7f0000000040)={0x1f, 0x0, @none, 0x701, 0x1}, 0xe) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x23, 0x3, 0x1, 0x0, 0xffffffffffffffff, 0x37}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r10, &(0x7f0000000100), 0x0}, 0x20) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@bridge_dellink={0x20, 0x11, 0x5, 0x1000000, 0xfffffffe, {0x7, 0x0, 0x0, r1, 0x6201a, 0x100}}, 0x20}, 0x1, 0x0, 0x0, 0x800c000}, 0x40000) 12m39.823168755s ago: executing program 2 (id=3866): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth0_to_bond\x00', &(0x7f0000000540)=@ethtool_gstrings={0x1b, 0x9}}) (async) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth0_to_bond\x00', &(0x7f0000000540)=@ethtool_gstrings={0x1b, 0x9}}) r0 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r0, 0x111, 0x4, 0x0, 0x4) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x8}}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000052a61685165b8ec808000100736974000c000280080002007f00000108001f0009000000"], 0x40}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'wlan0\x00', 0x0}) (async) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'wlan0\x00', 0x0}) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$igmp(0x2, 0x3, 0x2) (async) r5 = socket$igmp(0x2, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d00000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d00000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x0, 0x0, 0xfffffffffffffce5, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x0}, 0x50) getsockopt$inet_opts(r5, 0x0, 0xc, 0x0, &(0x7f0000000780)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r7) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=@deltclass={0x3c, 0x29, 0x100, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0xc, 0x2}, {0xfff1, 0x1}, {0xa, 0xa}}, [@TCA_RATE={0x6, 0x5, {0x2, 0xf7}}, @TCA_RATE={0x6, 0x5, {0x20, 0xff}}, @TCA_RATE={0x6, 0x5, {0x5, 0x1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x2000c080) (async) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=@deltclass={0x3c, 0x29, 0x100, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0xc, 0x2}, {0xfff1, 0x1}, {0xa, 0xa}}, [@TCA_RATE={0x6, 0x5, {0x2, 0xf7}}, @TCA_RATE={0x6, 0x5, {0x20, 0xff}}, @TCA_RATE={0x6, 0x5, {0x5, 0x1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x2000c080) sendmsg$NBD_CMD_CONNECT(r7, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) (async) sendmsg$NBD_CMD_CONNECT(r7, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) read(r4, &(0x7f0000000080)=""/180, 0xb4) 12m39.62361136s ago: executing program 2 (id=3868): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r0, 0x215eb000) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)={0x14, 0x27, 0x9, 0x70bd24, 0x25dfdc00, {0x6}}, 0x14}}, 0x4040080) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r2, 0x5) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000003540)=ANY=[@ANYBLOB="b70000001a000000bca30000000000002403000040feffff7b1af0ff0000000079a4f0ff000000001f030000000000002e030200000000002604fdffffff000e61141800000000001d430000000000007a0a00fe0000001f6114140000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f30002af51efd601b6bf01c8e8b1fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566de74e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48b936e6f9e0fcda88fe4413537528fd79153baae244e7bf573eac34b781337ad5901a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b602396df7e0c1e02b88c114f2440000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb1188883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d648532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54dd84323afc4c10eff462c8843187f1dd48ef0900000000000000ff0f4000000000f00700003c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c1011e32f808890205f0e6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c9494963442aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2869291b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e637d4219ef7ec61261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addbc4b3093c91b8068c5adfcb0d7fd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf699b3746979f99f6a1527f004f37e84fb478199dc1020f4beb98b8074bf7df8b5e783637daf121f175a81cffff4ac55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a4a274000000000000000000000000000000000000000000000009dd14b38f2f5426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4120260ffcd030000006d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10b0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c88629a6c921c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07e18b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e8c0a0d213c3ffad44d2a376def42e41e9fc3167a257e040fa7cf32c221aaac6cfdeb33c27500001a0000000000000000000017350000c11ae694b0c69c2c03f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d10522a7a945b93fbf05b95b6aae27a8fab1e6984c8bdc12360627137ab6737b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481ffe46a4ce86be0b1f8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0b74903580ac98708007c80d6c7d0de4614195e40d797c0348dd70f36a220e8b3710fb5358c27e90793bcb9ee6319342c4b239ca8cbc6fc83d32e6eb62ad92e43991f2447be9c2a1ae1119eafb901a43d57e885116d19aa152bfb89f8d0b2516f80120a1cddff771657f3d0288ec3899f1e3ba0151c4037148fb479de703fc52b6573349c28d1b107d859b4961324c17756dde99de1924a1d2b7095d34a55060f47f4407d89acf9f285b20c2e6b3d0491d0d3591b0d94713332b6b79c8297117b0d14eff64e0aca8a4b4aa773d8fba1217e9519952419bb9dd998d0ec870ff00b6d556018602738fbc6cec89d6dd13cf55b96f6fe9a137d2d6a56ad78e52c23ed080000000000002bc261a781fd14126c146a0aac4221839a4b9bbf61e4bba695a41e2109eba8e40c370267cc51ffadbd15cafc97a4d3edfdcb9b5729307c6bdaf7b69325fb05fa8a9869de0600ee477d71ca3e36d1d9019edfa27aae24b632f251df210c86a18fae731ecb8b0d48357378caf2b6789509b1bacfd4fa812dc341875cfa5e798bbf59770000000000000000c8a594ea3c3347962d9113b1fecdfad5a8da641053f02e49456f5d21674521e67a5b18ea451eccf69dd6af928d2d68da9304a296c22fdcea26498d26229110b1aade386b113045033a6188d56e675564d8cb8d5b40114b0f5bf15dd64c9ece60b8588ee8777d0ea8f4713b258427c7d90f9e93348e17723ba9ab8ae790f74cc41ae5795835f3cec40dff485d2802c08611454d9ea784a205bcc07ec26f906f3cf45bb37014ab6f22af6213618e242b283ea9d3f0677ee598072ec06f7170009d92bb7ed9d12c378dfd3e74ec056ee83eef666423d934fc5908c9ff98715218a5964f1e00000000426ac9588e27aefe307f49662990ee823568bbc2f89596ced7c6c52d76b8096f1848410843b93fd404f535be474f456778b5ef85abb8fc2336abd5ea64a6efea8a5aca0015499b88ae780a7bae4df603bd3c72808cf300440b1b638a6640f7de8d0d82f359ca2f779cd48cd8d3603f4f69e47f386988c9b7b5d6dd3d48a1fdca780049d7c87bea42161a4c0d7cf0125b43dc9d8845f3c05a08acda647e7143d0e0aee2949a45e2848890522c2288072467d2afe269f589fb7e034b92d3ca245b16b71998711bfe206c9690b6d0eebb06a29349229eb45ff15c63aa2c82c56d7420738cd1b04eb16e87cb524315d7361ea3635d3799bb7fcc56aa5e1dbe031a7a12554dee6754b72f43a6fddf427f32ec3df274a88097725679769beebf1aa6eb09d5154e4900000000000d0f7160a05911d969879953d3d4702b2676c07bb0fd14020a66718378825d5ed789711b77d40dc31e0b8fc651b45559da463f0000000000000000000000000052d42124e9c26aba885015e69d42ecd710342ac597ebea576ae15fdf611356f622e831741ab15549e0d7a2bd0324e2b3b48a10551607492c19eaf58485feb4cab19c303b30ba2ddea0d792d77724c9fa4ed58b93668fc20484f141ee2b6a0029e88fdc853189b4dafd36ff23b11967090e508f45e3f10857038a52ef275cf9e3e4b5d30b12d138dfa70930c603b5e3f4b7be67be3dba3cbd8d4d143195af0697d779445d67dcfbd922d12a8b49f93eac7a72faacf80346b3b60f132a2bf8a858392f34072d99aee0ec70aa6d75096e608d97ac4b7bfa2e0ae3e59718e7a7691a98b1334e34553300000000000000000000000000000000062c7cf52e9624806a4833e1c0059e5a703ab9c2e9b38779270dc5e80af75d509b1a31fe6ed3f8c0172659256dc88de4e377c8a07e95ec5549ae47dc43b93a159a201be254048b9e0857ea3c736c761e686f9b3d0690f035617a12055b2cb3a03794d67b95e7f4fc6af323120c09d0503c8ce92e869e22bb2590299ad76d541f844d32f96184f74d433793bbd75ec15fb1497ce835445212421cb4e3ce08395c9055a2"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0xffffff6a) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000580)={'ip6tnl0\x00', &(0x7f0000000500)={'ip6gre0\x00', 0x0, 0x29, 0xf8, 0x8, 0x7, 0x22, @empty, @empty, 0x8, 0x80, 0x3, 0xcdb}}) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x8) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x1, 0x0, 0x1, 0x200, '\x00', r5, r1, 0x5, 0x4, 0x1}, 0x50) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000280)={r3, r9}, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r8, 0x215eb000) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0x20, 0x0, 0x0) r10 = socket(0x2a, 0x2, 0x0) sendmsg$NL80211_CMD_SET_MPATH(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x2400c890}, 0x40000) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000000780)={{r4, &(0x7f0000000080)='\x00', 0x8201, &(0x7f0000000140)={@_ha_fsid={[0x7f, 0x9]}, {0x2, 0x7b, 0xfff}}, 0x3, &(0x7f00000002c0), &(0x7f0000000380)=0x3}, 0x3, &(0x7f0000000700)=[{0x2, 0x9, &(0x7f0000000440)='.(##)t{\':\x00', &(0x7f0000000480)="40f1c4c29d948a1281578eeaf8129bd8937649bf5a92459c2d97d85b0b8b0ed24f73ef09d2078bc7cc418cccca751a19dd3e3a4b972deea52039867708d901a4a0af569d6d4da57292819e5e8d4897e25817a912793acd5308d224d9e1f93ce103a4be1b0965360619a512", 0x6b, 0x20}, {0x1, 0x81, &(0x7f00000005c0)='ip6tnl0\x00', &(0x7f0000000600)="4c9aee44c62f735c180859d79377f29b963db747969f242998238d38463d37b88943cc715150abf787bbaa248e9eab98d2de09974007c2d87eac12d7a7c68466104d99c9cb605dde8c78ed1bcca78959c4d669c7ab363345cefd09a58aafa8fa76ea2fb0fa448d3655b27de6d6b86de728485dcea61d367e56529c52d4091d49", 0x80, 0x10}, {0x3, 0x3, &(0x7f0000000680)='\x00', &(0x7f00000006c0)="f65c463b1ba5fd4fad1d0b284f937e853bb7d31910ae0175753b1fa6e7c1a84671c25b3c24edb88630fd90", 0x2b}]}) sendmsg$TCPDIAG_GETSOCK(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x4c, 0x14, 0x101, 0x70bd27, 0x25dfdbfd, {0x1, 0x9, 0x8, 0x10, {0x4e24, 0x4e24, [0x3, 0xffff, 0xf, 0xc3], [0x6, 0x20000000, 0x40000000, 0x7], 0x0, [0x1, 0x7ffffffb]}, 0x80, 0xc7}}, 0x4c}, 0x1, 0x0, 0x0, 0x40480cc}, 0x10) 12m24.591565016s ago: executing program 32 (id=3868): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r0, 0x215eb000) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)={0x14, 0x27, 0x9, 0x70bd24, 0x25dfdc00, {0x6}}, 0x14}}, 0x4040080) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r2, 0x5) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000003540)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0xffffff6a) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000580)={'ip6tnl0\x00', &(0x7f0000000500)={'ip6gre0\x00', 0x0, 0x29, 0xf8, 0x8, 0x7, 0x22, @empty, @empty, 0x8, 0x80, 0x3, 0xcdb}}) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x8) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x1, 0x0, 0x1, 0x200, '\x00', r5, r1, 0x5, 0x4, 0x1}, 0x50) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000280)={r3, r9}, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r8, 0x215eb000) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0x20, 0x0, 0x0) r10 = socket(0x2a, 0x2, 0x0) sendmsg$NL80211_CMD_SET_MPATH(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x2400c890}, 0x40000) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000000780)={{r4, &(0x7f0000000080)='\x00', 0x8201, &(0x7f0000000140)={@_ha_fsid={[0x7f, 0x9]}, {0x2, 0x7b, 0xfff}}, 0x3, &(0x7f00000002c0), &(0x7f0000000380)=0x3}, 0x3, &(0x7f0000000700)=[{0x2, 0x9, &(0x7f0000000440)='.(##)t{\':\x00', &(0x7f0000000480)="40f1c4c29d948a1281578eeaf8129bd8937649bf5a92459c2d97d85b0b8b0ed24f73ef09d2078bc7cc418cccca751a19dd3e3a4b972deea52039867708d901a4a0af569d6d4da57292819e5e8d4897e25817a912793acd5308d224d9e1f93ce103a4be1b0965360619a512", 0x6b, 0x20}, {0x1, 0x81, &(0x7f00000005c0)='ip6tnl0\x00', &(0x7f0000000600)="4c9aee44c62f735c180859d79377f29b963db747969f242998238d38463d37b88943cc715150abf787bbaa248e9eab98d2de09974007c2d87eac12d7a7c68466104d99c9cb605dde8c78ed1bcca78959c4d669c7ab363345cefd09a58aafa8fa76ea2fb0fa448d3655b27de6d6b86de728485dcea61d367e56529c52d4091d49", 0x80, 0x10}, {0x3, 0x3, &(0x7f0000000680)='\x00', &(0x7f00000006c0)="f65c463b1ba5fd4fad1d0b284f937e853bb7d31910ae0175753b1fa6e7c1a84671c25b3c24edb88630fd90", 0x2b}]}) sendmsg$TCPDIAG_GETSOCK(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x4c, 0x14, 0x101, 0x70bd27, 0x25dfdbfd, {0x1, 0x9, 0x8, 0x10, {0x4e24, 0x4e24, [0x3, 0xffff, 0xf, 0xc3], [0x6, 0x20000000, 0x40000000, 0x7], 0x0, [0x1, 0x7ffffffb]}, 0x80, 0xc7}}, 0x4c}, 0x1, 0x0, 0x0, 0x40480cc}, 0x10) 5m31.41231109s ago: executing program 0 (id=7441): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x30, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) syz_emit_ethernet(0x12, &(0x7f0000000640)=ANY=[@ANYBLOB="5fc60e15c5acdf7a1b52d883e24959"], 0x0) 5m31.341599933s ago: executing program 0 (id=7442): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000580)=@newsa={0x138, 0x18, 0x1, 0xfffffffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x1, 0x717, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@mcast1, {0xfe, 0x1000000000000192, 0x1000000000000192, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x9}, 0x8070bd2d, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x81}, 0x840) 5m31.020248472s ago: executing program 0 (id=7444): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x90) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r2, 0xc) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x14, r5, 0x1, 0x0, 0x0, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x8) 5m24.201652105s ago: executing program 0 (id=7451): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg(r0, &(0x7f0000001dc0)={&(0x7f0000000100)=@ll={0x11, 0xf6, r1}, 0x80, 0x0, 0x0, &(0x7f0000001c00)=[{0x10, 0x1, 0xfffffffe}], 0x10}, 0x0) 5m23.81207219s ago: executing program 0 (id=7454): socket$inet(0x2, 0x800, 0x3) 5m23.172323247s ago: executing program 0 (id=7462): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000640)=[{&(0x7f0000000080)="89e7ee2c67062f080700000088ca", 0xe}], 0x1) 5m7.912004311s ago: executing program 33 (id=7462): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000640)=[{&(0x7f0000000080)="89e7ee2c67062f080700000088ca", 0xe}], 0x1) 1m7.196206939s ago: executing program 6 (id=8738): sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x40000) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x10, 0x803, 0x2) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r6, @ANYRES16=r5], 0x3c}, 0x1, 0x0, 0x0, 0x40020c1}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x56, r2}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 1m6.700288117s ago: executing program 6 (id=8742): setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000000)={0xd44, 0x64f6, 0x0, 0x8}, 0x8) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)="27030200dc0f14000e0005", 0xb}], 0x1}, 0x4005) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a01000000000000000000050000000900010073797a300000000064000000120a01000000000000000000050000000900010073797a30000000000900020073797a3100000000080003000000000630000480080001000000123414000280080002"], 0xb0}, 0x1, 0x0, 0x0, 0x20004081}, 0x40800) 1m6.623954527s ago: executing program 1 (id=8743): r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r3 = accept4$tipc(r1, &(0x7f0000002e80), &(0x7f0000002ec0)=0x10, 0x41800) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000002f00)) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x3000000, @mcast2}, 0x1c) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000002dc0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5, @ANYRESDEC=0x0, @ANYRESOCT=r1, @ANYBLOB="08002618853600000a00180000000000040000001c005aa07833faa6119ea1f618e0479a91294ae6feea02857bffff008d18e99b1d0240abb1e692e0be5bcb0181c1334b2b0b28e0016575b72438e24bf1b9dfacc502d7e4722e03c8156938ac013e5927e02b472eaa93560cb1a03525d7a4ed2c09d44f059044d512dbe53ed188b438aae7fbeb3a9b"], 0x4c}}, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r1, &(0x7f0000002c80)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10078000}, 0xc, &(0x7f0000002c40)={&(0x7f0000000080)={0x1bb4, r5, 0x800, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x29}, @void, @val={0xc, 0x99, {0x8, 0x28}}}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x1b8c, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_PKT_PATTERN={0x1b78, 0x4, 0x0, 0x1, [{0xbc, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x9}, @NL80211_PKTPAT_MASK={0x42, 0x1, "3e1d3b493db188065c7f8362dcf294e0510e2d5ebc98d8cde3227e1db3d8dc9e738f401ca4fef321b6c2790caeb1813baba0c93238fe4d08281b6c241247"}, @NL80211_PKTPAT_PATTERN={0x6c, 0x2, "795cf786d15cf118ab9787962137d04ffc041158b441b3493dfbb7fbd628ee3602fa28ce5cd85849f24814240fa0d8f4190a16fdf87d5f67660824e0db8f3993ea75a8803f087100453fff3d5454c3efa84c0685f7cde58c899c7c23375839ba546a5ca16f7d704e"}]}, {0x254, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_PATTERN={0xb9, 0x2, "7e0afe9ca924b17bd66084106fbc0805e9515390ac6b2fe6588cd7c33d9247dd81010e645ba87b443b6c3f0a298ee04e3c89847d9ea8bf2d2ee618ea615f6f871ffad9afb9f65ac0372713b51c34606d878ab6d6be5e9bf67e6efaee97e877d75898e213e6d6eb564df43c38b687688454d9d7d07b0ce39c552a021954ef9d26d671c0f2e838d442d94c6bcc5d067dcfc53a2065f92a6fbb89600982d29d1a984109631eed1451af0c464db095b2d6b7912c15b8b5"}, @NL80211_PKTPAT_OFFSET={0x8}, @NL80211_PKTPAT_MASK={0x56, 0x1, "6abcc1bae45c001c14ade4a1218a4392eee23d241cb672aa20a7870195ccfe7f387f0804934b6a593227778aa4d8d3d99089cfba7f2c4af2bc048b4f7376f0039a96cd447f68d9d63e80f8470ec547786ddb"}, @NL80211_PKTPAT_PATTERN={0x36, 0x2, "6fe0c0d6597067b8e470c8f0dfddc0e8a1b7e4ee23a356a517d484fa4a8a33e4a4e2d4d938e23df400fe2d32c92e6bc7066f"}, @NL80211_PKTPAT_MASK={0x21, 0x1, "0b339a5fa0b7ccf4b5fdd2310c662fbc150c0bdee7a9e15533658a4c0c"}, @NL80211_PKTPAT_PATTERN={0xd6, 0x2, "25d9c04ca7b6abcd67eb4c4e4755dc5deca0fefa3a8904e134c806e174973f4413a478244c4d0870141bbc5ecc61e198843df9c77d44cc104ea29e9d89e680c906e68f5d557a0e514aae85744f93d569bfbc2e906a5f7064d632a884bbcc766b723c2008a0e646e6e2ee29b35eff13f485fd0b4ca7e18821e3f91b9e5b70512ba08c296ca22981247c9cfd8d148cdac7cb717b0273e0f206867742d3c85be4891659a4777aae329a035e0bbdc4d8d5425c6fbbe1276b02cb367ed9b06f29e4b508ef1d3115ac915f31f4a89b248aa35d2176"}]}, {0x128, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_MASK={0x56, 0x1, "bb644fe7170ee56da6a6d068fb37fdc218c62fe41536013bdd647206d81b5dbac068803bf1367481a493c5ac68cd0e71e187ed1e1661460057d0458c1ca374d1cbe5fd9c8b1b8617e49ce8746853c3df902e"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x2}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x9}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x8}, @NL80211_PKTPAT_PATTERN={0x73, 0x2, "bd6c1f54dbcb960b0277d69f885c44caa0b90514e731aabf4e0e8aada36976a3044aad4c888bd4feedc4b5a7284a18572983af0e5e14ce797ea2b925037fbc4884a2daacd2771c37db57db0dc91245c972ba57e74c995733b8318e5470943d841c9e6e7359c18c2892d3bb8ea19eac"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x5391}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x8}, @NL80211_PKTPAT_MASK={0x27, 0x1, "1c0309c8812cae5a5edd4dc15f7e90a9aeaab527dded513293677fe7bcab279f1877c0"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x8}]}, {0x11cc, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_MASK={0xa6, 0x1, "5d818f65f7e58dd88947195731e386a82c546fb16bfa9a5501bca0acc5e004914ea5782221efc62ca7cb393f185da24be6c483eb62be483441ffb2fda008ceebc67ea2425d48337767448a4473894a904b79c188baa149b95954a5881de5509639ab8cb609b85bd891079adf698458ea01d96378d49a391610f9bb8db72c6af624cd0228ae95db493e3cd2333e09bb3d5d88262edb2a187283748ab7f754ccc194bb"}, @NL80211_PKTPAT_MASK={0x13, 0x1, "9fd9afcd820acd065017916858252b"}, @NL80211_PKTPAT_PATTERN={0x1004, 0x2, "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"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0xf}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x4b0b}, @NL80211_PKTPAT_MASK={0xf7, 0x1, "c66dece3c43b518d1fce1d61ba844481f9c430cca00b4fb6cfc1d7e9c0405a514453e5389925b97134066d8645c7f6567cd3edd638d1710208f3f13bdec28f3320ebb8af89cec775a6abf73ad7f987f3c2b2d53e5605c88c2b32f88cbfaa23dd125a5f5227babf646be00fb9d9c0e987dea549442d9eee2c7835fe12c59f38827f8eb9465af57827a108fe99f9dab02545795e61a03883e9752f77735d893809faaca473a4e8d7fe17026bdd0ed9eb09f64097ac8f8eae383078f18695aebec1272cb20ef4c28e626eaecac4b566e95cdcbfb66d747583aac277d01a1c793ec725b2721582e2fab29ab169b4ee77730c81badb"}]}, {0x534, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_PATTERN={0xcf, 0x2, "1c3405ce1c837b280870c3b05dc2ac1a090918ef8a00e9d0e09cf77d2fec133a60818df6344ac347fa30c0a00e9f430f5a8d079a42a769f4588bd6952aa74ae8d4c76d111701e6eeff4ade84bb17ce59ac84c162a1226867ebef68fdb5d96f7bbe31dbf938286be60ba05685b55ce1c08b3211431e91f0114b33c48d6b20ef187f4241f1606c3fda0ae0cdf8cb23a05e822a4ca6c2a967aad231357ee43277485c2198115e6f436302e4eb5bab7a9216e9a196de19a7165b3bd230134b4db0a178efbbdd424be1a8860ee4"}, @NL80211_PKTPAT_PATTERN={0xda, 0x2, "38eb00531bf53fc95216b22fece7490b5700aed5887aec8ed45e483a9e5eadedcbf530746d3cccf33e6e598f84bf13be4bd0fd24b575610194425552df13c559e73e0ded21274b5758c34ca074c8785d0cbeebf6977b4e1a495cff352b5308222a3b12f66c3b8caf72925ae6051d2f68c362bc87b948d1cd08ed15edd58fe9ea60e8bc86f46e8782b3379b429cba722ba04b2e4e85e6a4b8780f371a1793f3c03f2a9f2a04c97735c16f175d9f1c221bdd766529562b15cbbd67cbfbf266b60fd5be15de36a4104c0ce9c0ea070263eeb64b385f7132"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x9}, @NL80211_PKTPAT_PATTERN={0xea, 0x2, "9cc5482c8e0f1d5337393d39c6b4f03e6cced01aa03d10220526718bffce602686797f96b28619c7ae27598b59b87aba9976eab8f0f31fb1c8e5c2f9309c790d3729b26f784a8dbfaefce8e5f7c6a1d5e81224a4f25571c46c9298fec8411194d044040f39c5bb47d874c1841b0f6abffc15e9dabac77217642a2f62bae87da1630cf0d2c40bd4d04f48cd47ea50ee850cef1e86610d44c49af394a374451d988d5f67ac0f1dbee88ba0ab1eef2e053f021c76f84664955eefb6c47b4490d52f3756c641aff63f232e51f3754e365fe9ed4cc4a8f6627db7a0af76b02277b80c924b84a0a153"}, @NL80211_PKTPAT_MASK={0x82, 0x1, "7ce7d516c425a35b2a91a4d7b961aee7af18ed5ac7d81e25da458dbae59ac8a2aa491c745283d0e98213c57935f8c5704b0ad2812e7d1a03df2ea931121ea6b3ccf02ecc6661835f63ab523d680da984d7007a242143491bee6fd851281142e39241fbe9509b2b975bd3f50852c4e6897bd5df49eb434df7d405a1be750e"}, @NL80211_PKTPAT_PATTERN={0x61, 0x2, "7578ca12f302611c022b4bfa6f1b6286b43cde3cf06cf75efeae35866368be061c509bc4310d46732ffd36983c1bc45bc1d8e35df5ba9cc884aeb2e073716ad20dee60fbef656f9dfc51fa935cfd1c26664e73cfbc92040a276714d139"}, @NL80211_PKTPAT_MASK={0x74, 0x1, "109eaf2c6b7736731eb0602dcb257afc363a514883d5cf173a12defe725564188c8db64067012fc49b66396eca844ca85793c6d340922b8c4f33de6672406b919635115fa44dd95b07cd4974213dc9b992589a7064965713a2e6b13329ad4349d86baa299b97c82d7c71e1ce657177ad"}, @NL80211_PKTPAT_PATTERN={0x43, 0x2, "ccfb5fcf0f5fec5757b490f3cfe5f75c99e092c7b13298ae99c7b9a778272c4290feac3d6c134c18bc5eee35e428a6e5e6990a561acb0ad6f50f7d990dca0f"}, @NL80211_PKTPAT_MASK={0xee, 0x1, "d6fcfd9ef4cf2f101ebf44c1a86523dd75f62fcec0130ebecdf46f17e22d5edef0ad6de67cd5b3667f095b1cad7a2285063a1612fe99c1aaac4812bdd516a2c7bc183c50282d972faa693456cacebab7d2ea799a58351c72807cb3447e5d6e9fe539bb44015d447e16e37669728c8030778cd2bc1127a94b9fcb08ad4eb4ca6c7970e7fb44eebc2924c3f757a6d1df080d9dc807ad418d74358ef6414ea93e2c33616d0171b0f5d65211130d07351a9fbdc67531e3ea2bfc1d6f76d246aa6347f8938a15d2d821edfc4ebaeeb4aa77bc6a27c5757c8ed6808aca92243c8adbe3527a1b7f824acd6cf25c"}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_MASK={0x37, 0x1, "c03d1cde153ac48b9966fb84e7326c59547329eb4a331dede08ea42d0ef83f46bae23f076246d086a43aa71ec6c6915a651ce7"}]}]}, @NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}]}]}, 0x1bb4}, 0x1, 0x0, 0x0, 0x2000c001}, 0x4) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) close(0x3) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r8, &(0x7f0000003340)=[{{&(0x7f00000003c0)={0xa, 0x4e22, 0x7fff, @loopback, 0x5}, 0x1c, &(0x7f0000001b00)=[{&(0x7f0000001a80)='g', 0x1}], 0x1}}, {{&(0x7f0000001bc0)={0xa, 0x4e20, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000001c00)="1b", 0x1}], 0x1}}], 0x2, 0x40) sendto$inet6(r8, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r8, 0x1) writev(r7, &(0x7f0000001540)=[{&(0x7f0000000300)='.', 0x1}], 0x1) setsockopt$sock_int(r7, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, 0x0, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x800442d2, &(0x7f0000000000)={0x800000000000218, &(0x7f0000000080)}) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r6, &(0x7f0000002d80)={&(0x7f0000002cc0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002d40)={&(0x7f0000002d00)={0x20, r5, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x80, 0x69}}}}, ["", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8080}, 0x0) 56.50348713s ago: executing program 6 (id=8746): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x9, [@enum={0x0, 0x0, 0x0, 0x4}, @var={0x5, 0x0, 0x0, 0xe, 0x1, 0x1}, @struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x1000000, [{0x0, 0x2, 0x2}]}]}, {0x0, [0x30, 0x61, 0x61, 0x30, 0x61, 0x5f, 0x30, 0x61, 0x5f]}}, 0x0, 0x8a}, 0x28) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000540), &(0x7f0000000580)=r1}, 0x20) (async, rerun: 32) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r0, &(0x7f0000000780)}, 0x20) (rerun: 32) 54.633914944s ago: executing program 1 (id=8748): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0xfd}, {0x16}]}, 0x10) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000140)={0x2, 0x80, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) sendmmsg$inet(r1, &(0x7f0000000c00)=[{{&(0x7f0000000080)={0x2, 0x4e22, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r1, &(0x7f0000000c80)="e8", 0x6200, 0x10000000, 0x0, 0x0) 54.583707994s ago: executing program 4 (id=8749): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x50, 0xb, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x5}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x5}, @NFTA_SET_EXPR={0x14, 0x11, 0x0, 0x1, @connlimit={{0xe}, @void}}, @NFTA_SET_ID={0x8}]}, @NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}]}, @NFTA_RULE_USERDATA={0x3a, 0x7, 0x1, 0x0, "282a8451d4f739f5bd8683754abf086b243de4720f74a13649bb81d6aa60ca83fa0e49b8954c52ea9477c157e23ea455028f1202ef06"}]}], {0x14}}, 0x104}, 0x1, 0x0, 0x0, 0x4008040}, 0x840) 54.275524569s ago: executing program 5 (id=8750): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x5, 0x0) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8153, 0x2000, 0x800, 0x9, 0x2}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$xdp(r1, &(0x7f00000003c0)={0x2c, 0x2, r3, 0x0, 0x0}, 0x10) mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r1, 0x80000000) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000040)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x8000000000000000}, 0x0, 0x0) (fail_nth: 2) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x8044000) 54.106260698s ago: executing program 3 (id=8751): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1234, 0x2, 0x10, {0x2, 0x5678, @empty}}, 0x24) listen(r0, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg(r0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[{0x18, 0x110, 0x1, "02"}, {0x10, 0x110, 0xe}], 0x28}, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) sendmsg(r1, &(0x7f0000000100)={&(0x7f0000000800)=@rxrpc=@in4={0x21, 0x1234, 0x2, 0x10, {0x2, 0x5678, @loopback}}, 0x24, &(0x7f0000000200)=[{&(0x7f0000000300), 0x1000}], 0x1, &(0x7f0000000400)=[{0x18, 0x110, 0x1, "0100000000000000"}], 0x18}, 0x0) recvmsg(r0, &(0x7f0000000900)={0x0, 0xf5, &(0x7f0000000380)=[{&(0x7f0000000280)=""/227, 0xe3}], 0x1}, 0x0) 54.089228365s ago: executing program 6 (id=8752): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000000), r1) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000400)={'team_slave_1\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000000980)={0x5c, r2, 0x1, 0x0, 0x25dfdbff, {}, [{{0x8, 0x1, r4}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44040}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="00010000180000012cbd7000fedbdf25ffffffff000000000000000000000000ac1e01010000000000000000000000004e2000004e2400001100200004000000", @ANYRES32=r4, @ANYRES32=0x0, @ANYBLOB="ac1e0001000000000000000000000000000004d5ff000000e00000020000000000000000000000000500008000000000ffffffff0000000000100000000000000500000000e60000030000000000000008000000000600000400000000000000000000000000000001000000000000000600000000000000050000000000000000100000800000000000000000000000030000002bbd7000073500000a000103180000000000000064000000000000000600250046920000"], 0x100}, 0x1, 0x0, 0x0, 0xc000}, 0x0) 54.088976875s ago: executing program 1 (id=8753): sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x40000) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x10, 0x803, 0x2) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r6, @ANYRES16=r5], 0x3c}, 0x1, 0x0, 0x0, 0x40020c1}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x56, r2}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 54.039276015s ago: executing program 4 (id=8754): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x5, 0x0) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8153, 0x2000, 0x800, 0x9, 0x2}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$xdp(r1, &(0x7f00000003c0)={0x2c, 0x2, r3, 0x0, 0x0}, 0x10) mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r1, 0x80000000) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000040)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x8000000000000000}, 0x0, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x8044000) 53.443181732s ago: executing program 5 (id=8755): socket$key(0xf, 0x3, 0x2) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)=@newsa={0x128, 0x10, 0x7, 0x0, 0x0, {{@in6=@empty, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x3, 0x1, 0x2, 0x9, 0x10000000, 0x1}, {0x0, 0x2, 0x7}, {0x40000, 0xffffffff, 0xae8}, 0x0, 0x3504, 0xa, 0x2, 0xfe, 0x34}, [@coaddr={0x14, 0xe, @in6=@remote}, @lifetime_val={0x24, 0x9, {0x6b8f, 0x2, 0xb4, 0x5}}]}, 0x128}, 0x1, 0x0, 0x0, 0x1}, 0x890) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x104, 0x1a, 0x7, 0x70bd2a, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in6=@empty, 0x3, 0x0, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x5a, 0xb400, 0x2, 0x4, 0x0, 0x60000, 0x0, 0xdea1}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x8001, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in=@remote}]}, 0x104}}, 0x8000) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r2) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000900)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000740)={0x14c, r5, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x24}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_BEARER={0xf8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @local}}, {0x14, 0x2, @in={0x2, 0x4e23, @remote}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0xffffffff, @local, 0x7}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x8, @mcast1, 0xdcb2}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, '\x00', 0x14}, 0x800}}}}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x7ff}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0xc001}, 0x20040001) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x609, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_LIMIT={0x5, 0xb, 0x7}]}}}]}, 0x40}}, 0x0) connect$tipc(r2, &(0x7f0000000000)=@id={0x1e, 0x3, 0x0, {0x4e24}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) r6 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a9b80"], 0xfe33) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x28, 0x0, 0x230, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7860, 0x5f}}}}}, 0x28}, 0x1, 0x0, 0x0, 0xc804}, 0x40) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b4000000cc00000064c98181d0ab33ffd7200000000000009500001600000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x35}, 0x94) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="440000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00040000000000001c001280ad000100697036677265746170000000080002800400120008000a00", @ANYRES32=r9, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) 53.385016138s ago: executing program 3 (id=8756): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0xfffffffc, @loopback}, 0x1c) listen(r0, 0x4) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x1, 0x408a0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @private0, 0x47}, 0x1c) 53.053883838s ago: executing program 5 (id=8757): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newtfilter={0x54, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) recvmmsg$unix(r0, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/219, 0xdb}], 0x1}}], 0x1, 0x60, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, 0x0, {0x10}, {0xa, 0x3}, {0xfff2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20040098}, 0x880) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0xc3}, 0x1, 0x100000000000000, 0x0, 0x2000}, 0x40400c0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 52.97312573s ago: executing program 5 (id=8758): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000040)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x59}]}]}]}, 0x2c}}, 0x0) socket$unix(0x1, 0x5, 0x0) socket(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_DELCHAIN={0x28, 0x5, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_CHAIN_TABLE={0x0, 0x1, 'syz1\x00'}, @NFTA_CHAIN_POLICY={0x0, 0x5, 0x1, 0x0, 0xffffffffffffffff}]}], {0x14}}, 0x50}}, 0x0) socket$packet(0x11, 0x2, 0x300) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8153, 0x2000, 0x800, 0x9, 0x2}, 0x20) setsockopt$XDP_TX_RING(r5, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0x48) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000500)={0x34, r8, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x22000092}, 0x10) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x70, r8, 0x400, 0x70bd26, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x3}}]}, 0x70}, 0x1, 0x0, 0x0, 0xd4}, 0x8015) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={r6}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r6, @ANYBLOB="0000000000000000610200000000000095"], &(0x7f0000000d40)='syzkaller\x00'}, 0x90) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$xdp(r5, &(0x7f00000003c0)={0x2c, 0x2, r10, 0x0, 0x0}, 0x10) ioctl$INCFS_IOC_FILL_BLOCKS(0xffffffffffffffff, 0x80106720, &(0x7f0000000940)={0x5, &(0x7f0000000880)=[{0x2, 0x22, &(0x7f0000000400)="a3e06d771e47f31bb75b18bce868d61d0b9319b79c055ae746c2933dfd008a7a2cc8", 0x1, 0x1}, {0x5, 0xe7, &(0x7f0000000540)="30e2d4b63ed20761cfee8da4468580ee5c09ce4a3506007919b33ea3f0a775c2deca170e707d009850070f76b0248deb0e9c55da9ac150c7bcff2bd5234803dd5863ab4b708e46341db495984cc00cfb74a6339ecb0f0dade5be9325b40111b59f932a4cc85ffb632ebb66feec8013b8a71c939e99a317a471f232219adb738e6e91432db7f3f55b4cd0fe47fed06df1afe61e81d73701f867c807f67d98df430e8cb7c39e98ccccd255175094c18ae5545bd369eef98d50873208c6cc6539a19ac4e4d14902c9de7971c2543f0241ac2c7b8024505a1008b16d976811fecb1c841b84c6c2a293", 0x1}, {0x3, 0x0, &(0x7f0000000640), 0x1, 0x1}, {0xe0, 0xb5, &(0x7f0000000700)="41e250f733b9830236be08525e548faa1db4c2df1a4ca8986b5d4e212c80b276c11c67bbb5b2f325058859e8e3fb79df810890b3f99e0958637f9c169066aaa90036ea2dff216d1f7ec9d28a49ec4957210942be5504d17c3af7eb7d6a0ab6691ccb8a90d9ee6fcbdcf54b9aa0988f00a750acbc04181cc7ad77dacd9c5ad9184172eea36f62ce26b35adecb8a7f33e954c366e4c516f056e72e3b1e0cc4d5a4e49e9a296ee03d26506c780a2920ae7d187e129f77", 0x0, 0x1}, {0x0, 0xb4, &(0x7f00000007c0)="c1b662b152ae5e61b43666da4549790b9582627a0b7d5caa6c4976a61828b628aade963d200bd073dcd0868a45d963709fa293f57a9de6d88583ab89466bf0783e03cd75e337aee0c18990c3d0f6ea40bddb27e3a436269a517047063670ab47f16ab32c8414eb278767f939545a64bc402c1fee7e23d319a62ab9c7fc577f86d613f08845545354626e0b79eec48e7384a15c7c88971cc050edc270d548e5affd79935a050ffaede80a4fba23db0140fd7b5ada", 0x3}]}) mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r5, 0x80000000) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000040)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x8000000000000000}, 0x0, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x8044000) 52.603844076s ago: executing program 4 (id=8759): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000001100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000ec0)="0ca5ac161ae2541e0ff5602427566e18598aec611c87996d108995edde93cac9842fbb23ace316d4ada7a614ef3590992b6dc78a0bac56", 0x37}], 0x1}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000280)='R', 0x1}], 0x1}}], 0x2, 0x4000001) sendto$inet(r0, &(0x7f0000001a00)="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", 0x2fc, 0x14, 0x0, 0x0) 52.354491039s ago: executing program 3 (id=8760): r0 = socket(0x2b, 0x80801, 0x1) listen(r0, 0x7) accept4$vsock_stream(r0, 0x0, 0x0, 0x80000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000004000000000000001154d1ff85100000010000009500000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000002300000018010000646c6c2500000000002020200600000000000000bf0600000000000007010000f8ffffffb702000008000000b703000059e70000a50000000600000095"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) 52.274114536s ago: executing program 3 (id=8761): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000080)={0x84, @rand_addr=0x64010101, 0x4e1d, 0x3, 'lblcr\x00', 0x0, 0xa8a, 0x2c}, 0x2c) socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'gre0\x00', 0x5001}) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, 0x0, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e24, 0x10000, 0x0, 0x12d5c, 0x12d4c}}, 0x44) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x2000000) 52.235900981s ago: executing program 6 (id=8762): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4f24, @remote}}, 0x0, 0x0, 0x18, 0x0, "e83ae75240c2d658ec87bb53679fd04d00780b8ceb6c4414faff919616e19a1b76aea5922406b64eddaeb9d339ba3c01c2c7d0df8e61740b9af2d5e491d58654a4cf4fa0ce00"}, 0xd8) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000000)=0xcc, 0x4) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="010000006b0100000100000000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=r3, @ANYBLOB="0000000001"], 0x48}}, 0x20000000) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xa2732}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) 52.00276865s ago: executing program 3 (id=8763): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, 0x0, &(0x7f0000000180)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth0_to_bond\x00', &(0x7f0000000540)=@ethtool_gstrings={0x1b, 0x9}}) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000002000010000000000000000000af9130000000002000000001400010000000000000000000000000000000001140002"], 0x44}}, 0x84) 51.950125187s ago: executing program 5 (id=8764): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000040)=@in4={0x21, 0x1234, 0x2, 0x10, {0x2, 0x5678, @broadcast}}, 0x24) listen(r0, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r5], 0x1c}}, 0x4008054) recvmsg(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x51c275c25f0c1afb) sendmsg(r0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[{0x18, 0x110, 0x1, "02"}, {0x10, 0x110, 0xe}], 0x28}, 0x0) r6 = socket$rxrpc(0x21, 0x2, 0x2) sendmsg(r6, &(0x7f0000000100)={&(0x7f0000000800)=@rxrpc=@in4={0x21, 0x1234, 0x2, 0x10, {0x2, 0x5678, @loopback}}, 0x24, &(0x7f0000000200)=[{&(0x7f0000000300), 0x1000}], 0x1, &(0x7f0000000400)=[{0x18, 0x110, 0x1, "0100000000000000"}], 0x18}, 0x0) recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000280)=""/227, 0xe3}], 0x1}, 0x0) 51.680481148s ago: executing program 4 (id=8765): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000000)={0x28, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x28}}, 0x0) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000700)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="030027bd7000fddbdf251b00000008000300", @ANYRES32=r3, @ANYBLOB="10002e"], 0x2c}, 0x1, 0x0, 0x1000000, 0x8000}, 0x200000c0) 51.671414301s ago: executing program 1 (id=8766): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@link_local, @empty, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @broadcast, @remote, @multicast, @loopback}}}}, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000480)={0x89, 0x0, 0x1, 0x80}, 0x8) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = accept4(0xffffffffffffffff, &(0x7f0000000180)=@pppol2tpin6, &(0x7f0000000200)=0x80, 0x180000) recvfrom$inet6(r4, &(0x7f00000002c0)=""/203, 0xcb, 0x40000023, &(0x7f00000003c0)={0xa, 0x4e20, 0x400, @local, 0x1}, 0x1c) sendmsg$nl_route_sched(r3, &(0x7f0000019580)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000c40)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689e5dd0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x8000, 0x10000000, 0x400, 0x4, 0x5, {0x9, 0x0, 0x1, 0x2, 0x8, 0x3}, {0x7, 0x2, 0x10, 0x0, 0x1, 0xfffffffe}, 0x80, 0x0, 0x9}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0) ioctl$PPPIOCGFLAGS(r2, 0x8004745a, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x300, 0x0, 0x150}, [@IFLA_VFINFO_LIST={0xc, 0x16, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x4}]}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x18, 0x0, 0x2, 0x401, 0x0, 0x0, {0x2}, [@CTA_EXPECT_TUPLE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000880}, 0x0) 51.341351651s ago: executing program 4 (id=8767): socket$inet(0x2, 0xa, 0x400) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x1f4, 0xe, 0x0, &(0x7f00000001c0)="ffffffff7f833e9762a536c801d7", 0x0, 0x304, 0x300, 0xf4, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x8}, 0x50) 51.340997548s ago: executing program 1 (id=8768): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newtfilter={0x54, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) recvmmsg$unix(r0, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/219, 0xdb}], 0x1}}], 0x1, 0x60, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, 0x0, {0x10}, {0xa, 0x3}, {0xfff2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20040098}, 0x880) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0xc3}, 0x1, 0x100000000000000, 0x0, 0x2000}, 0x40400c0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 51.190280744s ago: executing program 6 (id=8769): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="28000000020605000000000000000000005c4f5c2c3c9baea8001500030000000500010006000000"], 0x28}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000002e00)={'filter\x00', 0x7, 0x4, 0x3f0, 0x1f8, 0x110, 0x0, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="d1f5c2b93bc3", @empty, @empty, @loopback, 0x2, 0xffffffff}}}, {{@arp={@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffff00, 0xff000000, 0x6, 0xc, {@empty, {[0xff, 0x0, 0xff, 0x0, 0xff, 0xff]}}, {@mac=@multicast, {[0xb4e44995cf4cc780, 0x5400faa9f5c6f977, 0x0, 0x0, 0xff, 0xff]}}, 0x5, 0x8, 0xf, 0x6, 0x8, 0x100, 'dummy0\x00', 'macvtap0\x00', {0xeddc69e01a7ac061}, {}, 0x0, 0x4}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28}}, {{@arp={@remote, @multicast2, 0xffffff00, 0x0, 0x4, 0xb, {@empty, {[0xff, 0x0, 0x0, 0xff, 0x0, 0xff]}}, {@mac=@multicast, {[0x0, 0xff, 0x0, 0xff, 0xff]}}, 0x1ff, 0x1, 0xc, 0x68d9, 0xfff, 0x5, 'nicvf0\x00', 'batadv0\x00', {0xff}, {}, 0x0, 0x220}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, @empty, @rand_addr=0x64010102, @private, 0x1, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x34, r2, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0xa2}]}, 0x34}}, 0x4000080) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000040)={0x2, 0xe, 0x6, 0x0, 0x9}) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000038c0), r5) sendmsg$IEEE802154_ASSOCIATE_RESP(r5, &(0x7f0000003980)={0x0, 0x0, &(0x7f0000003940)={&(0x7f0000003900)={0x14, r6, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x200008d0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e80), r7) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000001600)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r7, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010065bd7000ffdbdf252100000008000300", @ANYRES32=r9, @ANYRESHEX=r7], 0x40}, 0x1, 0x0, 0x0, 0x24880}, 0x4000880) sendmsg$IEEE802154_LIST_IFACE(r4, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x78, r6, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r11, 0x8b04, &(0x7f00000000c0)={'virt_wifi0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xc}}) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000700)={'wpan0\x00', 0x0}) socketpair(0x27, 0x1, 0x2, &(0x7f00000002c0)={0xffffffffffffffff}) r14 = socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r14, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r15, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac1414aa00000000000000001400020002000000e000000200000000000004000d0001007564703a73"], 0x54}}, 0x0) sendmsg$TIPC_NL_MEDIA_GET(r13, &(0x7f0000000bc0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000b80)={&(0x7f0000000800)={0x334, r15, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0xa4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x957}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x43b}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}]}, @TIPC_NLA_LINK={0x7c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd3c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x12c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "404c3e0fc679cb88dacd1d24509e18ad3e08238003"}}, @TIPC_NLA_NODE_ID={0xd7, 0x3, "8ba20500cfa45f6e04f3ec5a5db5611a46705a7ff91860a992fcfea49cc3ad8a7fd31f2494b214679466c70754a63eb31fe80c7fdfa634b626ca59a7709a2cbc02c608a99c6b7352ace293ad9ebd0d879a6b1f16b3521f496daa3282e76a8f9a64ad32695264892fd7e977779fbc9fafdc80530d9d4e6a1b6ba5abd6cc5ebb30a9aa9492e42be676b07784afc815dcb75eb216dc7c71bd7d73c378f6bd1fe7d8214528592014fe9042b15bb331b9acb35c0d1d78d26745ada5467f13539175b100fb6ff5e552a42952fa50ca5e9289a7fb76df"}]}, @TIPC_NLA_MEDIA={0x58, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3e20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}]}, @TIPC_NLA_NODE={0x7c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x6c, 0x3, "cddfc78fc8fbe3481e3ad8edf5a2292bf64463668f6df3926e32a5ff737b31d1e3feee015ece9e609fef802bf1ae1f4e00924fe36fa7339ebd99b73a68f092aeb2fc86f1f8d5e97c2b685dad89ead0c02902b308436de94d876857e542315540afa5b8e0c17a4240"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x334}, 0x1, 0x0, 0x0, 0x34040044}, 0x4008000) sendmsg$NL802154_CMD_DEL_SEC_DEV(r10, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="030027bd7000fddbdf251b00000008000300", @ANYRES32=r12, @ANYBLOB="10002e"], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x200000c0) 47.484299991s ago: executing program 1 (id=8770): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r3, r2, 0x25, 0x0, @void}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x4) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xf87, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) sendmsg$nl_generic(r4, 0x0, 0xc000) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="1800200bb165ccd93b834509c8d600800000200000009500"/36], &(0x7f00000005c0)='syzkaller\x00', 0xa}, 0x94) 43.023826854s ago: executing program 4 (id=8771): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x38ffffff, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x24, 0x12, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x5, 0x84}}}, 0xb0}, 0x1, 0x0, 0x0, 0x20004010}, 0x20050800) 42.474415366s ago: executing program 3 (id=8772): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0a000000560000004200000002"], 0x50) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) write(r1, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000280), 0xffff, r0}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0), &(0x7f00000002c0), 0x1006, r0, 0x0, 0xd88d02a0}, 0x38) 41.795447504s ago: executing program 5 (id=8773): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000003000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x4, &(0x7f0000000b00)=ANY=[@ANYBLOB="660a00000000000061119d0000000000850000006300000095"], &(0x7f0000000200)='syzkaller\x00'}, 0x90) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000410001002a007000040000000100000004004480140001800d00108006000a003a000000e10000000c0002"], 0x38}, 0x1, 0x0, 0x0, 0x4060000}, 0x4008094) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f00000003c0)={0xffffffffffffffff}) bind$bt_hci(r5, &(0x7f0000000440)={0x1f, 0x3, 0x4}, 0x6) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x34, r3, 0x6a9354ab0d020bb7, 0x0, 0x0, {0xf}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280), r2) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, r6, 0x4, 0x70bd25, 0x0, {{}, {}, {0x4c, 0x18, {0x7, @link='broadcast-link\x00'}}}, ["", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x20000004}, 0x184) r7 = gettid() getsockopt$PNPIPE_IFINDEX(r5, 0x113, 0x2, &(0x7f00000005c0)=0x0, &(0x7f0000000840)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x1b, 0x1000, 0x4, 0x9, 0x32890, r0, 0xfffffff7, '\x00', r8, 0xffffffffffffffff, 0x2, 0x1, 0x2, 0x0, @void, @value, @value=r5}, 0x50) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000004c0)={0x0}, &(0x7f0000000500)=0xc) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000540)={0x0}, &(0x7f0000000580)=0xc) sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000800)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000680)={0x11c, r3, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r7}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r9}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r10}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x40040}, 0x40001) unshare(0x400) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xd50, 0x0, &(0x7f0000000000)="aaf3a4cd08258cebe46db996738b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 30.321480413s ago: executing program 34 (id=8769): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="28000000020605000000000000000000005c4f5c2c3c9baea8001500030000000500010006000000"], 0x28}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000002e00)={'filter\x00', 0x7, 0x4, 0x3f0, 0x1f8, 0x110, 0x0, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="d1f5c2b93bc3", @empty, @empty, @loopback, 0x2, 0xffffffff}}}, {{@arp={@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffff00, 0xff000000, 0x6, 0xc, {@empty, {[0xff, 0x0, 0xff, 0x0, 0xff, 0xff]}}, {@mac=@multicast, {[0xb4e44995cf4cc780, 0x5400faa9f5c6f977, 0x0, 0x0, 0xff, 0xff]}}, 0x5, 0x8, 0xf, 0x6, 0x8, 0x100, 'dummy0\x00', 'macvtap0\x00', {0xeddc69e01a7ac061}, {}, 0x0, 0x4}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28}}, {{@arp={@remote, @multicast2, 0xffffff00, 0x0, 0x4, 0xb, {@empty, {[0xff, 0x0, 0x0, 0xff, 0x0, 0xff]}}, {@mac=@multicast, {[0x0, 0xff, 0x0, 0xff, 0xff]}}, 0x1ff, 0x1, 0xc, 0x68d9, 0xfff, 0x5, 'nicvf0\x00', 'batadv0\x00', {0xff}, {}, 0x0, 0x220}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, @empty, @rand_addr=0x64010102, @private, 0x1, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x34, r2, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0xa2}]}, 0x34}}, 0x4000080) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000040)={0x2, 0xe, 0x6, 0x0, 0x9}) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000038c0), r5) sendmsg$IEEE802154_ASSOCIATE_RESP(r5, &(0x7f0000003980)={0x0, 0x0, &(0x7f0000003940)={&(0x7f0000003900)={0x14, r6, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x200008d0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e80), r7) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000001600)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r7, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010065bd7000ffdbdf252100000008000300", @ANYRES32=r9, @ANYRESHEX=r7], 0x40}, 0x1, 0x0, 0x0, 0x24880}, 0x4000880) sendmsg$IEEE802154_LIST_IFACE(r4, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x78, r6, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r11, 0x8b04, &(0x7f00000000c0)={'virt_wifi0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xc}}) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000700)={'wpan0\x00', 0x0}) socketpair(0x27, 0x1, 0x2, &(0x7f00000002c0)={0xffffffffffffffff}) r14 = socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r14, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r15, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac1414aa00000000000000001400020002000000e000000200000000000004000d0001007564703a73"], 0x54}}, 0x0) sendmsg$TIPC_NL_MEDIA_GET(r13, &(0x7f0000000bc0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000b80)={&(0x7f0000000800)={0x334, r15, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0xa4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x957}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x43b}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}]}, @TIPC_NLA_LINK={0x7c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd3c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x12c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "404c3e0fc679cb88dacd1d24509e18ad3e08238003"}}, @TIPC_NLA_NODE_ID={0xd7, 0x3, "8ba20500cfa45f6e04f3ec5a5db5611a46705a7ff91860a992fcfea49cc3ad8a7fd31f2494b214679466c70754a63eb31fe80c7fdfa634b626ca59a7709a2cbc02c608a99c6b7352ace293ad9ebd0d879a6b1f16b3521f496daa3282e76a8f9a64ad32695264892fd7e977779fbc9fafdc80530d9d4e6a1b6ba5abd6cc5ebb30a9aa9492e42be676b07784afc815dcb75eb216dc7c71bd7d73c378f6bd1fe7d8214528592014fe9042b15bb331b9acb35c0d1d78d26745ada5467f13539175b100fb6ff5e552a42952fa50ca5e9289a7fb76df"}]}, @TIPC_NLA_MEDIA={0x58, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3e20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}]}, @TIPC_NLA_NODE={0x7c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x6c, 0x3, "cddfc78fc8fbe3481e3ad8edf5a2292bf64463668f6df3926e32a5ff737b31d1e3feee015ece9e609fef802bf1ae1f4e00924fe36fa7339ebd99b73a68f092aeb2fc86f1f8d5e97c2b685dad89ead0c02902b308436de94d876857e542315540afa5b8e0c17a4240"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x334}, 0x1, 0x0, 0x0, 0x34040044}, 0x4008000) sendmsg$NL802154_CMD_DEL_SEC_DEV(r10, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="030027bd7000fddbdf251b00000008000300", @ANYRES32=r12, @ANYBLOB="10002e"], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x200000c0) 23.527674437s ago: executing program 35 (id=8770): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r3, r2, 0x25, 0x0, @void}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x4) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xf87, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) sendmsg$nl_generic(r4, 0x0, 0xc000) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="1800200bb165ccd93b834509c8d600800000200000009500"/36], &(0x7f00000005c0)='syzkaller\x00', 0xa}, 0x94) 14.647745925s ago: executing program 36 (id=8773): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000003000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x4, &(0x7f0000000b00)=ANY=[@ANYBLOB="660a00000000000061119d0000000000850000006300000095"], &(0x7f0000000200)='syzkaller\x00'}, 0x90) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000410001002a007000040000000100000004004480140001800d00108006000a003a000000e10000000c0002"], 0x38}, 0x1, 0x0, 0x0, 0x4060000}, 0x4008094) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f00000003c0)={0xffffffffffffffff}) bind$bt_hci(r5, &(0x7f0000000440)={0x1f, 0x3, 0x4}, 0x6) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x34, r3, 0x6a9354ab0d020bb7, 0x0, 0x0, {0xf}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280), r2) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, r6, 0x4, 0x70bd25, 0x0, {{}, {}, {0x4c, 0x18, {0x7, @link='broadcast-link\x00'}}}, ["", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x20000004}, 0x184) r7 = gettid() getsockopt$PNPIPE_IFINDEX(r5, 0x113, 0x2, &(0x7f00000005c0)=0x0, &(0x7f0000000840)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x1b, 0x1000, 0x4, 0x9, 0x32890, r0, 0xfffffff7, '\x00', r8, 0xffffffffffffffff, 0x2, 0x1, 0x2, 0x0, @void, @value, @value=r5}, 0x50) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000004c0)={0x0}, &(0x7f0000000500)=0xc) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000540)={0x0}, &(0x7f0000000580)=0xc) sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000800)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000680)={0x11c, r3, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r7}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r9}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r10}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x40040}, 0x40001) unshare(0x400) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xd50, 0x0, &(0x7f0000000000)="aaf3a4cd08258cebe46db996738b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 7.900351144s ago: executing program 37 (id=8772): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0a000000560000004200000002"], 0x50) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) write(r1, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000280), 0xffff, r0}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0), &(0x7f00000002c0), 0x1006, r0, 0x0, 0xd88d02a0}, 0x38) 0s ago: executing program 38 (id=8771): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x38ffffff, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x24, 0x12, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x5, 0x84}}}, 0xb0}, 0x1, 0x0, 0x0, 0x20004010}, 0x20050800) kernel console output (not intermixed with test programs): 1098.833094][T32183] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1098.838712][T32183] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1098.838754][T32183] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1099.288207][ T4318] netlink: 28 bytes leftover after parsing attributes in process `syz.6.8176'. [ 1099.288291][ T4318] netlink: 'syz.6.8176': attribute type 8 has an invalid length. [ 1099.288756][ T4318] netlink: 16 bytes leftover after parsing attributes in process `syz.6.8176'. [ 1099.792965][T31328] hid-generic 0005:4C4A:0058.0003: item fetching failed at offset 0/1 [ 1099.793765][T31328] hid-generic 0005:4C4A:0058.0003: probe with driver hid-generic failed with error -22 [ 1100.181236][ T4357] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8191'. [ 1100.196532][ T4357] netlink: 'syz.3.8191': attribute type 8 has an invalid length. [ 1100.196578][ T4357] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8191'. [ 1100.296443][ T4362] sctp: [Deprecated]: syz.4.8193 (pid 4362) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1100.296443][ T4362] Use struct sctp_sack_info instead [ 1100.714948][ T4371] FAULT_INJECTION: forcing a failure. [ 1100.714948][ T4371] name failslab, interval 1, probability 0, space 0, times 0 [ 1100.728296][ T4371] CPU: 0 UID: 0 PID: 4371 Comm: syz.3.8195 Not tainted syzkaller #0 PREEMPT(full) [ 1100.728326][ T4371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1100.728338][ T4371] Call Trace: [ 1100.728346][ T4371] [ 1100.728355][ T4371] dump_stack_lvl+0xe8/0x150 [ 1100.728386][ T4371] should_fail_ex+0x410/0x560 [ 1100.728417][ T4371] ? __alloc_skb+0x1db/0x7a0 [ 1100.728444][ T4371] should_failslab+0xa8/0x100 [ 1100.728467][ T4371] ? __alloc_skb+0x1db/0x7a0 [ 1100.728492][ T4371] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 1100.728521][ T4371] ? __alloc_skb+0x18d/0x7a0 [ 1100.728548][ T4371] ? __alloc_skb+0x1db/0x7a0 [ 1100.728581][ T4371] __alloc_skb+0x1db/0x7a0 [ 1100.728612][ T4371] netlink_sendmsg+0x5d4/0xb40 [ 1100.728647][ T4371] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1100.728679][ T4371] ? apparmor_socket_sendmsg+0x18b/0x360 [ 1100.728709][ T4371] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1100.728731][ T4371] sock_sendmsg_nosec+0x13a/0x180 [ 1100.728777][ T4371] ____sys_sendmsg+0x54e/0x850 [ 1100.728803][ T4371] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1100.728833][ T4371] ? import_iovec+0x73/0xa0 [ 1100.728857][ T4371] ___sys_sendmsg+0x2a5/0x360 [ 1100.728877][ T4371] ? __lock_acquire+0x6df/0x2e50 [ 1100.728901][ T4371] ? __pfx____sys_sendmsg+0x10/0x10 [ 1100.728956][ T4371] ? __fget_files+0x2a/0x420 [ 1100.728979][ T4371] ? __fget_files+0x3a2/0x420 [ 1100.729013][ T4371] __x64_sys_sendmsg+0x1b1/0x290 [ 1100.729037][ T4371] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1100.729079][ T4371] do_syscall_64+0x166/0x520 [ 1100.729112][ T4371] ? trace_irq_disable+0x3b/0x140 [ 1100.729131][ T4371] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1100.729151][ T4371] ? clear_bhb_loop+0x70/0xc0 [ 1100.729175][ T4371] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1100.729194][ T4371] RIP: 0033:0x7fb18cb9e159 [ 1100.729213][ T4371] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1100.729229][ T4371] RSP: 002b:00007fb18dac7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1100.729250][ T4371] RAX: ffffffffffffffda RBX: 00007fb18ce25fa0 RCX: 00007fb18cb9e159 [ 1100.729264][ T4371] RDX: 0000000020050800 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1100.729277][ T4371] RBP: 00007fb18dac7090 R08: 0000000000000000 R09: 0000000000000000 [ 1100.729289][ T4371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1100.729301][ T4371] R13: 00007fb18ce26038 R14: 00007fb18ce25fa0 R15: 00007ffd970ae7c8 [ 1100.729332][ T4371] [ 1101.841216][ T4394] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8205'. [ 1101.841266][ T4394] netlink: 'syz.1.8205': attribute type 8 has an invalid length. [ 1101.841298][ T4394] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8205'. [ 1102.044721][ T4399] FAULT_INJECTION: forcing a failure. [ 1102.044721][ T4399] name failslab, interval 1, probability 0, space 0, times 0 [ 1102.116563][ T4399] CPU: 0 UID: 0 PID: 4399 Comm: syz.1.8207 Not tainted syzkaller #0 PREEMPT(full) [ 1102.116594][ T4399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1102.116606][ T4399] Call Trace: [ 1102.116617][ T4399] [ 1102.116627][ T4399] dump_stack_lvl+0xe8/0x150 [ 1102.116660][ T4399] should_fail_ex+0x410/0x560 [ 1102.116695][ T4399] should_failslab+0xa8/0x100 [ 1102.116720][ T4399] __kmalloc_noprof+0xfe/0x720 [ 1102.116750][ T4399] ? tomoyo_encode+0x2ad/0x570 [ 1102.116771][ T4399] ? tomoyo_encode+0x2ad/0x570 [ 1102.116801][ T4399] tomoyo_encode+0x2ad/0x570 [ 1102.116829][ T4399] tomoyo_realpath_from_path+0x5fa/0x640 [ 1102.116862][ T4399] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1102.116890][ T4399] tomoyo_path_number_perm+0x246/0x5f0 [ 1102.116922][ T4399] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1102.116949][ T4399] ? __lock_acquire+0x6df/0x2e50 [ 1102.116984][ T4399] ? hook_file_ioctl+0x1f2/0x600 [ 1102.117022][ T4399] ? __fget_files+0x2a/0x420 [ 1102.117049][ T4399] ? __fget_files+0x2a/0x420 [ 1102.117072][ T4399] ? __fget_files+0x3a2/0x420 [ 1102.117094][ T4399] ? __fget_files+0x2a/0x420 [ 1102.117123][ T4399] security_file_ioctl+0xc3/0x2a0 [ 1102.117152][ T4399] __se_sys_ioctl+0x47/0x170 [ 1102.117175][ T4399] do_syscall_64+0x166/0x520 [ 1102.117203][ T4399] ? trace_irq_disable+0x3b/0x140 [ 1102.117222][ T4399] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1102.117242][ T4399] ? clear_bhb_loop+0x70/0xc0 [ 1102.117266][ T4399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1102.117284][ T4399] RIP: 0033:0x7f799ad9e159 [ 1102.117304][ T4399] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1102.117320][ T4399] RSP: 002b:00007f799bd15028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1102.117341][ T4399] RAX: ffffffffffffffda RBX: 00007f799b025fa0 RCX: 00007f799ad9e159 [ 1102.117356][ T4399] RDX: 0000200000000080 RSI: 00000000800442d2 RDI: 0000000000000004 [ 1102.117369][ T4399] RBP: 00007f799bd15090 R08: 0000000000000000 R09: 0000000000000000 [ 1102.117381][ T4399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1102.117393][ T4399] R13: 00007f799b026038 R14: 00007f799b025fa0 R15: 00007ffe8a0ef6f8 [ 1102.117425][ T4399] [ 1102.269151][ T4399] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1102.830285][ T4406] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8210'. [ 1103.099129][ T4418] netlink: 'syz.1.8215': attribute type 1 has an invalid length. [ 1103.234269][ T4418] bond3: entered promiscuous mode [ 1103.234727][ T4418] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1103.443050][ T4426] bond3: (slave bridge3): making interface the new active one [ 1103.454596][ T4426] bridge3: entered promiscuous mode [ 1103.471564][ T4426] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 1104.013163][ T4447] xt_hashlimit: size too large, truncated to 1048576 [ 1104.249169][ T4452] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8225'. [ 1106.246665][ T4496] openvswitch: netlink: EtherType 300 is less than min 600 [ 1106.279293][ T4501] netlink: 'syz.4.8246': attribute type 1 has an invalid length. [ 1106.279337][ T4501] netlink: 224 bytes leftover after parsing attributes in process `syz.4.8246'. [ 1106.620068][ T4511] FAULT_INJECTION: forcing a failure. [ 1106.620068][ T4511] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1106.620119][ T4511] CPU: 0 UID: 0 PID: 4511 Comm: syz.6.8250 Not tainted syzkaller #0 PREEMPT(full) [ 1106.620139][ T4511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1106.620156][ T4511] Call Trace: [ 1106.620163][ T4511] [ 1106.620169][ T4511] dump_stack_lvl+0xe8/0x150 [ 1106.620202][ T4511] should_fail_ex+0x410/0x560 [ 1106.620238][ T4511] _copy_from_iter+0x1d3/0x1660 [ 1106.620264][ T4511] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1106.620290][ T4511] ? __pfx_policy_nodemask+0x10/0x10 [ 1106.620311][ T4511] ? lock_acquire+0x115/0x350 [ 1106.620330][ T4511] ? __pfx__copy_from_iter+0x10/0x10 [ 1106.620360][ T4511] ? alloc_pages_mpol+0x256/0x390 [ 1106.620389][ T4511] copy_page_from_iter+0x219/0x2d0 [ 1106.620420][ T4511] tun_get_user+0x1c16/0x44d0 [ 1106.620583][ T4511] ? tun_get_user+0x70a/0x44d0 [ 1106.620623][ T4511] ? aa_file_perm+0x4ed/0x15f0 [ 1106.620647][ T4511] ? __pfx_tun_get_user+0x10/0x10 [ 1106.620675][ T4511] ? __lock_acquire+0x6df/0x2e50 [ 1106.620705][ T4511] ? ref_tracker_alloc+0x341/0x4b0 [ 1106.620770][ T4511] ? lock_acquire+0x115/0x350 [ 1106.620789][ T4511] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1106.620810][ T4511] ? lock_acquire+0x115/0x350 [ 1106.620827][ T4511] ? tun_get+0x1c/0x2f0 [ 1106.620858][ T4511] ? tun_get+0x1c/0x2f0 [ 1106.620882][ T4511] ? tun_get+0x1c/0x2f0 [ 1106.620911][ T4511] tun_chr_write_iter+0x113/0x200 [ 1106.620939][ T4511] vfs_write+0x612/0xba0 [ 1106.620972][ T4511] ? __pfx_vfs_write+0x10/0x10 [ 1106.621005][ T4511] ? __fget_files+0x2a/0x420 [ 1106.621037][ T4511] ksys_write+0x150/0x270 [ 1106.621064][ T4511] ? __pfx_ksys_write+0x10/0x10 [ 1106.621099][ T4511] do_syscall_64+0x166/0x520 [ 1106.621126][ T4511] ? trace_irq_disable+0x3b/0x140 [ 1106.621145][ T4511] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1106.621165][ T4511] ? clear_bhb_loop+0x70/0xc0 [ 1106.621187][ T4511] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1106.621205][ T4511] RIP: 0033:0x7f8e6b95e98e [ 1106.621223][ T4511] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1106.621238][ T4511] RSP: 002b:00007f8e6c7e6fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1106.621259][ T4511] RAX: ffffffffffffffda RBX: 00007f8e6c7e76c0 RCX: 00007f8e6b95e98e [ 1106.621272][ T4511] RDX: 000000000000008e RSI: 0000200000000100 RDI: 00000000000000c8 [ 1106.621284][ T4511] RBP: 00007f8e6c7e7090 R08: 0000000000000000 R09: 0000000000000000 [ 1106.621296][ T4511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1106.621307][ T4511] R13: 00007f8e6bc26038 R14: 00007f8e6bc25fa0 R15: 00007ffe68397658 [ 1106.621335][ T4511] [ 1107.104038][ T4519] FAULT_INJECTION: forcing a failure. [ 1107.104038][ T4519] name failslab, interval 1, probability 0, space 0, times 0 [ 1107.128383][ T4519] CPU: 1 UID: 0 PID: 4519 Comm: syz.1.8254 Not tainted syzkaller #0 PREEMPT(full) [ 1107.128410][ T4519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1107.128421][ T4519] Call Trace: [ 1107.128429][ T4519] [ 1107.128438][ T4519] dump_stack_lvl+0xe8/0x150 [ 1107.128469][ T4519] should_fail_ex+0x410/0x560 [ 1107.128503][ T4519] should_failslab+0xa8/0x100 [ 1107.128523][ T4519] ? __pmd_alloc+0xc1/0x5c0 [ 1107.128545][ T4519] kmem_cache_alloc_noprof+0xa1/0x600 [ 1107.128569][ T4519] ? alloc_pages_mpol+0x256/0x390 [ 1107.128603][ T4519] ? __pmd_alloc+0xc1/0x5c0 [ 1107.128630][ T4519] __pmd_alloc+0xc1/0x5c0 [ 1107.128657][ T4519] handle_mm_fault+0xe9d/0x3750 [ 1107.128689][ T4519] ? handle_mm_fault+0xf1/0x3750 [ 1107.128723][ T4519] ? __pfx_handle_mm_fault+0x10/0x10 [ 1107.128759][ T4519] ? __lock_acquire+0x6df/0x2e50 [ 1107.128783][ T4519] ? lock_mm_and_find_vma+0xa7/0x340 [ 1107.128813][ T4519] do_user_addr_fault+0x746/0x1340 [ 1107.128881][ T4519] exc_page_fault+0x6a/0xc0 [ 1107.128909][ T4519] asm_exc_page_fault+0x26/0x30 [ 1107.128927][ T4519] RIP: 0010:rep_movs_alternative+0xf/0xa0 [ 1107.128948][ T4519] Code: c4 10 c3 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f <8a> 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 7d 66 04 00 66 2e [ 1107.128962][ T4519] RSP: 0018:ffffc9000dc4fd58 EFLAGS: 00050202 [ 1107.128979][ T4519] RAX: 00007ffffffff001 RBX: 0000000000000004 RCX: 0000000000000004 [ 1107.128990][ T4519] RDX: 0000000000000001 RSI: 0000000000004000 RDI: ffff88808ccf0704 [ 1107.129001][ T4519] RBP: ffffc9000dc4fe48 R08: ffff88808ccf0707 R09: 1ffff1101199e0e0 [ 1107.129014][ T4519] R10: dffffc0000000000 R11: ffffed101199e0e1 R12: 1ffff92001b89fb8 [ 1107.129026][ T4519] R13: 1ffff92001b89fb8 R14: ffff88808ccf0704 R15: 0000000000004000 [ 1107.129053][ T4519] _copy_from_user+0x7a/0xb0 [ 1107.129074][ T4519] isotp_setsockopt+0x3a3/0x940 [ 1107.129102][ T4519] ? __pfx_aa_sk_perm+0x10/0x10 [ 1107.129123][ T4519] ? __pfx_isotp_setsockopt+0x10/0x10 [ 1107.129150][ T4519] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1107.129173][ T4519] ? __pfx_isotp_setsockopt+0x10/0x10 [ 1107.129197][ T4519] do_sock_setsockopt+0x17c/0x1b0 [ 1107.129223][ T4519] __x64_sys_setsockopt+0x13d/0x1b0 [ 1107.129247][ T4519] do_syscall_64+0x166/0x520 [ 1107.129272][ T4519] ? trace_irq_disable+0x3b/0x140 [ 1107.129290][ T4519] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1107.129309][ T4519] ? clear_bhb_loop+0x70/0xc0 [ 1107.129332][ T4519] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1107.129351][ T4519] RIP: 0033:0x7f799ad9e159 [ 1107.129368][ T4519] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1107.129384][ T4519] RSP: 002b:00007f799bd15028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1107.129403][ T4519] RAX: ffffffffffffffda RBX: 00007f799b025fa0 RCX: 00007f799ad9e159 [ 1107.129417][ T4519] RDX: 0000000000000003 RSI: 000000000000006a RDI: 0000000000000003 [ 1107.129428][ T4519] RBP: 00007f799bd15090 R08: 0000000000000004 R09: 0000000000000000 [ 1107.129440][ T4519] R10: 0000000000004000 R11: 0000000000000246 R12: 0000000000000001 [ 1107.129451][ T4519] R13: 00007f799b026038 R14: 00007f799b025fa0 R15: 00007ffe8a0ef6f8 [ 1107.129483][ T4519] [ 1109.107668][ T4561] FAULT_INJECTION: forcing a failure. [ 1109.107668][ T4561] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1109.107726][ T4561] CPU: 0 UID: 0 PID: 4561 Comm: syz.3.8269 Not tainted syzkaller #0 PREEMPT(full) [ 1109.107748][ T4561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1109.107762][ T4561] Call Trace: [ 1109.107771][ T4561] [ 1109.107780][ T4561] dump_stack_lvl+0xe8/0x150 [ 1109.107813][ T4561] should_fail_ex+0x410/0x560 [ 1109.107846][ T4561] _copy_from_user+0x2d/0xb0 [ 1109.107869][ T4561] do_bnep_sock_ioctl+0x2cd/0x650 [ 1109.108015][ T4561] ? __pfx_do_bnep_sock_ioctl+0x10/0x10 [ 1109.108050][ T4561] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1109.108097][ T4561] sock_do_ioctl+0x101/0x320 [ 1109.108126][ T4561] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1109.108147][ T4561] ? hook_file_ioctl+0x1f2/0x600 [ 1109.108203][ T4561] sock_ioctl+0x57a/0x7e0 [ 1109.108229][ T4561] ? __pfx_sock_ioctl+0x10/0x10 [ 1109.108253][ T4561] ? __fget_files+0x2a/0x420 [ 1109.108277][ T4561] ? __fget_files+0x3a2/0x420 [ 1109.108299][ T4561] ? __fget_files+0x2a/0x420 [ 1109.108326][ T4561] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1109.108347][ T4561] ? __pfx_sock_ioctl+0x10/0x10 [ 1109.108368][ T4561] __se_sys_ioctl+0xfc/0x170 [ 1109.108391][ T4561] do_syscall_64+0x166/0x520 [ 1109.108417][ T4561] ? trace_irq_disable+0x3b/0x140 [ 1109.108444][ T4561] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1109.108463][ T4561] ? clear_bhb_loop+0x70/0xc0 [ 1109.108487][ T4561] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1109.108506][ T4561] RIP: 0033:0x7fb18cb9e159 [ 1109.108525][ T4561] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1109.108540][ T4561] RSP: 002b:00007fb18dac7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1109.108561][ T4561] RAX: ffffffffffffffda RBX: 00007fb18ce25fa0 RCX: 00007fb18cb9e159 [ 1109.108575][ T4561] RDX: 0000200000000080 RSI: 00000000800442d2 RDI: 0000000000000004 [ 1109.108589][ T4561] RBP: 00007fb18dac7090 R08: 0000000000000000 R09: 0000000000000000 [ 1109.108600][ T4561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1109.108612][ T4561] R13: 00007fb18ce26038 R14: 00007fb18ce25fa0 R15: 00007ffd970ae7c8 [ 1109.108644][ T4561] [ 1110.027704][ T4576] mac80211_hwsim hwsim59 syzkaller0: left promiscuous mode [ 1110.041793][ T4576] mac80211_hwsim hwsim59 syzkaller0: left allmulticast mode [ 1110.126592][ T4572] can: request_module (can-proto-4) failed. [ 1110.380067][ T4580] netlink: Conntrack attr type has unexpected length (type=0, length=5, expected=0) [ 1110.380124][ T4580] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1110.941134][ T4595] FAULT_INJECTION: forcing a failure. [ 1110.941134][ T4595] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1110.959591][ T4595] CPU: 0 UID: 0 PID: 4595 Comm: syz.3.8283 Not tainted syzkaller #0 PREEMPT(full) [ 1110.959618][ T4595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1110.959629][ T4595] Call Trace: [ 1110.959637][ T4595] [ 1110.959645][ T4595] dump_stack_lvl+0xe8/0x150 [ 1110.959678][ T4595] should_fail_ex+0x410/0x560 [ 1110.959709][ T4595] _copy_from_iter+0x1d3/0x1660 [ 1110.959737][ T4595] ? __alloc_skb+0x27a/0x7a0 [ 1110.959766][ T4595] ? __alloc_skb+0x27a/0x7a0 [ 1110.959794][ T4595] ? __alloc_skb+0x27a/0x7a0 [ 1110.959818][ T4595] ? __pfx__copy_from_iter+0x10/0x10 [ 1110.959843][ T4595] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 1110.959869][ T4595] ? __alloc_skb+0x27a/0x7a0 [ 1110.959890][ T4595] ? __alloc_skb+0x27a/0x7a0 [ 1110.959918][ T4595] ? netlink_sendmsg+0x650/0xb40 [ 1110.959939][ T4595] ? skb_put+0x112/0x210 [ 1110.959959][ T4595] netlink_sendmsg+0x6c0/0xb40 [ 1110.959991][ T4595] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1110.960020][ T4595] ? apparmor_socket_sendmsg+0x98/0x360 [ 1110.960048][ T4595] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1110.960069][ T4595] sock_sendmsg_nosec+0x13a/0x180 [ 1110.960097][ T4595] ____sys_sendmsg+0x54e/0x850 [ 1110.960124][ T4595] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1110.960153][ T4595] ? import_iovec+0x73/0xa0 [ 1110.960175][ T4595] ___sys_sendmsg+0x2a5/0x360 [ 1110.960194][ T4595] ? __lock_acquire+0x6df/0x2e50 [ 1110.960216][ T4595] ? __pfx____sys_sendmsg+0x10/0x10 [ 1110.960267][ T4595] ? __fget_files+0x2a/0x420 [ 1110.960288][ T4595] ? __fget_files+0x3a2/0x420 [ 1110.960320][ T4595] __x64_sys_sendmsg+0x1b1/0x290 [ 1110.960342][ T4595] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1110.960386][ T4595] do_syscall_64+0x166/0x520 [ 1110.960412][ T4595] ? trace_irq_disable+0x3b/0x140 [ 1110.960431][ T4595] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1110.960451][ T4595] ? clear_bhb_loop+0x70/0xc0 [ 1110.960474][ T4595] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1110.960494][ T4595] RIP: 0033:0x7fb18cb9e159 [ 1110.960513][ T4595] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1110.960530][ T4595] RSP: 002b:00007fb18dac7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1110.960551][ T4595] RAX: ffffffffffffffda RBX: 00007fb18ce25fa0 RCX: 00007fb18cb9e159 [ 1110.960565][ T4595] RDX: 0000000000008090 RSI: 00002000000000c0 RDI: 0000000000000004 [ 1110.960576][ T4595] RBP: 00007fb18dac7090 R08: 0000000000000000 R09: 0000000000000000 [ 1110.960586][ T4595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1110.960596][ T4595] R13: 00007fb18ce26038 R14: 00007fb18ce25fa0 R15: 00007ffd970ae7c8 [ 1110.960623][ T4595] [ 1111.541819][ T4598] syzkaller0: entered promiscuous mode [ 1111.551758][ T4598] syzkaller0: entered allmulticast mode [ 1112.241541][ T4624] netlink: 56 bytes leftover after parsing attributes in process `syz.4.8291'. [ 1112.978946][ T4631] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8293'. [ 1120.094361][ T4664] FAULT_INJECTION: forcing a failure. [ 1120.094361][ T4664] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 1120.094412][ T4664] CPU: 0 UID: 0 PID: 4664 Comm: syz.6.8305 Not tainted syzkaller #0 PREEMPT(full) [ 1120.094433][ T4664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1120.094445][ T4664] Call Trace: [ 1120.094453][ T4664] [ 1120.094462][ T4664] dump_stack_lvl+0xe8/0x150 [ 1120.094495][ T4664] should_fail_ex+0x410/0x560 [ 1120.094529][ T4664] prepare_alloc_pages+0x223/0x600 [ 1120.094557][ T4664] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 1120.094581][ T4664] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1120.094606][ T4664] ? __pfx_policy_nodemask+0x10/0x10 [ 1120.094630][ T4664] ? __lock_acquire+0x6df/0x2e50 [ 1120.094808][ T4664] alloc_pages_mpol+0x21e/0x390 [ 1120.094837][ T4664] alloc_pages_noprof+0xb1/0x2b0 [ 1120.094862][ T4664] pte_alloc_one+0x22/0x370 [ 1120.094888][ T4664] __pte_alloc+0x25/0x1a0 [ 1120.094921][ T4664] do_pte_missing+0x2db7/0x34b0 [ 1120.094951][ T4664] ? do_raw_spin_unlock+0xf5/0x200 [ 1120.094981][ T4664] ? __pmd_alloc+0x40a/0x5c0 [ 1120.095009][ T4664] handle_mm_fault+0x1a53/0x3750 [ 1120.095044][ T4664] ? handle_mm_fault+0xf1/0x3750 [ 1120.095083][ T4664] ? __pfx_handle_mm_fault+0x10/0x10 [ 1120.095121][ T4664] ? __lock_acquire+0x6df/0x2e50 [ 1120.095145][ T4664] ? lock_mm_and_find_vma+0xa7/0x340 [ 1120.095266][ T4664] do_user_addr_fault+0x746/0x1340 [ 1120.095305][ T4664] exc_page_fault+0x6a/0xc0 [ 1120.095334][ T4664] asm_exc_page_fault+0x26/0x30 [ 1120.095354][ T4664] RIP: 0010:rep_movs_alternative+0xf/0xa0 [ 1120.095376][ T4664] Code: c4 10 c3 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f <8a> 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 7d 66 04 00 66 2e [ 1120.095393][ T4664] RSP: 0018:ffffc90005e37d58 EFLAGS: 00050202 [ 1120.095411][ T4664] RAX: 00007ffffffff001 RBX: 0000000000000004 RCX: 0000000000000004 [ 1120.095424][ T4664] RDX: 0000000000000001 RSI: 0000000000004000 RDI: ffff888082f30704 [ 1120.095437][ T4664] RBP: ffffc90005e37e48 R08: ffff888082f30707 R09: 1ffff110105e60e0 [ 1120.095452][ T4664] R10: dffffc0000000000 R11: ffffed10105e60e1 R12: 1ffff92000bc6fb8 [ 1120.095466][ T4664] R13: 1ffff92000bc6fb8 R14: ffff888082f30704 R15: 0000000000004000 [ 1120.095498][ T4664] _copy_from_user+0x7a/0xb0 [ 1120.095521][ T4664] isotp_setsockopt+0x3a3/0x940 [ 1120.095547][ T4664] ? __pfx_aa_sk_perm+0x10/0x10 [ 1120.095570][ T4664] ? __pfx_isotp_setsockopt+0x10/0x10 [ 1120.095598][ T4664] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1120.095622][ T4664] ? __pfx_isotp_setsockopt+0x10/0x10 [ 1120.095648][ T4664] do_sock_setsockopt+0x17c/0x1b0 [ 1120.095672][ T4664] __x64_sys_setsockopt+0x13d/0x1b0 [ 1120.095694][ T4664] do_syscall_64+0x166/0x520 [ 1120.095719][ T4664] ? trace_irq_disable+0x3b/0x140 [ 1120.095738][ T4664] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1120.095754][ T4664] ? clear_bhb_loop+0x70/0xc0 [ 1120.095774][ T4664] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1120.095791][ T4664] RIP: 0033:0x7f8e6b99e159 [ 1120.095807][ T4664] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1120.095822][ T4664] RSP: 002b:00007f8e6c7e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1120.095841][ T4664] RAX: ffffffffffffffda RBX: 00007f8e6bc25fa0 RCX: 00007f8e6b99e159 [ 1120.095855][ T4664] RDX: 0000000000000003 RSI: 000000000000006a RDI: 0000000000000003 [ 1120.095866][ T4664] RBP: 00007f8e6c7e7090 R08: 0000000000000004 R09: 0000000000000000 [ 1120.095877][ T4664] R10: 0000000000004000 R11: 0000000000000246 R12: 0000000000000001 [ 1120.095888][ T4664] R13: 00007f8e6bc26038 R14: 00007f8e6bc25fa0 R15: 00007ffe68397658 [ 1120.095920][ T4664] [ 1120.122013][ T4660] mac80211_hwsim hwsim59 syzkaller0: entered promiscuous mode [ 1120.122192][ T4660] mac80211_hwsim hwsim59 syzkaller0: entered allmulticast mode [ 1120.581469][ T4670] tipc: Enabling of bearer rejected, already enabled [ 1120.590238][ T4670] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8308'. [ 1120.600514][ T4670] netlink: 'syz.3.8308': attribute type 1 has an invalid length. [ 1120.632233][ T4670] bond4: entered promiscuous mode [ 1120.637814][ T4670] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1120.653521][ T4670] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8308'. [ 1120.676595][ T4670] bond4: (slave bridge3): making interface the new active one [ 1120.696419][ T4670] bridge3: entered promiscuous mode [ 1120.728747][ T4670] bond4: (slave bridge3): Enslaving as an active interface with an up link [ 1121.216236][ T4678] mac80211_hwsim hwsim68 syzkaller0: entered promiscuous mode [ 1121.226846][ T4678] mac80211_hwsim hwsim68 syzkaller0: entered allmulticast mode [ 1121.240389][ T4680] FAULT_INJECTION: forcing a failure. [ 1121.240389][ T4680] name failslab, interval 1, probability 0, space 0, times 0 [ 1121.287362][ T4680] CPU: 0 UID: 0 PID: 4680 Comm: syz.3.8311 Not tainted syzkaller #0 PREEMPT(full) [ 1121.287391][ T4680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1121.287404][ T4680] Call Trace: [ 1121.287413][ T4680] [ 1121.287422][ T4680] dump_stack_lvl+0xe8/0x150 [ 1121.287457][ T4680] should_fail_ex+0x410/0x560 [ 1121.287491][ T4680] should_failslab+0xa8/0x100 [ 1121.287514][ T4680] ? dst_alloc+0x105/0x170 [ 1121.287615][ T4680] kmem_cache_alloc_noprof+0xa1/0x600 [ 1121.287642][ T4680] ? lock_acquire+0x115/0x350 [ 1121.287662][ T4680] ? dst_alloc+0x105/0x170 [ 1121.287698][ T4680] dst_alloc+0x105/0x170 [ 1121.287726][ T4680] ip_route_output_key_hash_rcu+0x14ac/0x2720 [ 1121.287831][ T4680] ? ip_route_output_key_hash_rcu+0x1dc1/0x2720 [ 1121.287863][ T4680] ? ip_route_output_key_hash+0xd8/0x2a0 [ 1121.287889][ T4680] ip_route_output_key_hash+0x18d/0x2a0 [ 1121.287917][ T4680] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 1121.287946][ T4680] ? call_rcu+0x64d/0x8b0 [ 1121.287968][ T4680] ? lockdep_hardirqs_on+0x7b/0x110 [ 1121.288002][ T4680] ip_route_output_flow+0x2a/0x150 [ 1121.288023][ T4680] ? security_sk_classify_flow+0x6d/0x150 [ 1121.288053][ T4680] tcp_v4_connect+0x7b4/0x1950 [ 1121.288154][ T4680] ? __pfx_tcp_v4_connect+0x10/0x10 [ 1121.288187][ T4680] ? stack_depot_save_flags+0x33/0x7f0 [ 1121.288217][ T4680] ? tcp_v6_connect+0x6bc/0x1cf0 [ 1121.288314][ T4680] tcp_v6_connect+0xcb1/0x1cf0 [ 1121.288333][ T4680] ? tcp_sendmsg_locked+0x4d3d/0x5640 [ 1121.288383][ T4680] ? tcp_sendmsg+0x2f/0x50 [ 1121.288410][ T4680] ? __x64_sys_sendto+0xde/0x100 [ 1121.288440][ T4680] ? __pfx_tcp_v6_connect+0x10/0x10 [ 1121.288477][ T4680] __inet_stream_connect+0x258/0xe00 [ 1121.288543][ T4680] ? __pfx___inet_stream_connect+0x10/0x10 [ 1121.288568][ T4680] ? __kasan_kmalloc+0x93/0xb0 [ 1121.288590][ T4680] ? __kmalloc_cache_noprof+0x321/0x600 [ 1121.288618][ T4680] ? __kmalloc_cache_noprof+0x14d/0x600 [ 1121.288644][ T4680] ? tcp_sendmsg_fastopen+0x1e7/0x5f0 [ 1121.288678][ T4680] tcp_sendmsg_fastopen+0x3af/0x5f0 [ 1121.288720][ T4680] tcp_sendmsg_locked+0x4d3d/0x5640 [ 1121.288765][ T4680] ? __lock_acquire+0x6df/0x2e50 [ 1121.288798][ T4680] ? kstrtouint+0x6e/0xe0 [ 1121.288826][ T4680] ? lock_acquire+0x115/0x350 [ 1121.288852][ T4680] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 1121.288887][ T4680] ? tcp_sendmsg+0x21/0x50 [ 1121.288916][ T4680] ? __local_bh_enable_ip+0xd6/0x140 [ 1121.288957][ T4680] tcp_sendmsg+0x2f/0x50 [ 1121.288984][ T4680] ? __pfx_inet6_sendmsg+0x10/0x10 [ 1121.289061][ T4680] sock_sendmsg_nosec+0x90/0x180 [ 1121.289090][ T4680] __sys_sendto+0x408/0x5a0 [ 1121.289108][ T4680] ? ksys_write+0x1e6/0x270 [ 1121.289139][ T4680] ? __pfx___sys_sendto+0x10/0x10 [ 1121.289193][ T4680] ? __mutex_unlock_slowpath+0x731/0x900 [ 1121.289251][ T4680] ? __pfx_ksys_write+0x10/0x10 [ 1121.289283][ T4680] __x64_sys_sendto+0xde/0x100 [ 1121.289306][ T4680] do_syscall_64+0x166/0x520 [ 1121.289332][ T4680] ? trace_irq_disable+0x3b/0x140 [ 1121.289350][ T4680] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1121.289370][ T4680] ? clear_bhb_loop+0x70/0xc0 [ 1121.289394][ T4680] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1121.289412][ T4680] RIP: 0033:0x7fb18cb9e159 [ 1121.289432][ T4680] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1121.289448][ T4680] RSP: 002b:00007fb18dac7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1121.289469][ T4680] RAX: ffffffffffffffda RBX: 00007fb18ce25fa0 RCX: 00007fb18cb9e159 [ 1121.289483][ T4680] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1121.289494][ T4680] RBP: 00007fb18dac7090 R08: 00002000000001c0 R09: 000000000000001c [ 1121.289507][ T4680] R10: 0000000020008045 R11: 0000000000000246 R12: 0000000000000001 [ 1121.289520][ T4680] R13: 00007fb18ce26038 R14: 00007fb18ce25fa0 R15: 00007ffd970ae7c8 [ 1121.289551][ T4680] [ 1121.912126][ T4685] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1122.162957][ T4693] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8315'. [ 1122.434249][ T4693] team0: Port device dummy0 removed [ 1123.004490][ T4717] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8323'. [ 1123.014147][ T4717] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8323'. [ 1123.064614][ T4719] FAULT_INJECTION: forcing a failure. [ 1123.064614][ T4719] name failslab, interval 1, probability 0, space 0, times 0 [ 1123.083397][ T4719] CPU: 0 UID: 0 PID: 4719 Comm: syz.3.8324 Not tainted syzkaller #0 PREEMPT(full) [ 1123.083426][ T4719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1123.083439][ T4719] Call Trace: [ 1123.083447][ T4719] [ 1123.083457][ T4719] dump_stack_lvl+0xe8/0x150 [ 1123.083491][ T4719] should_fail_ex+0x410/0x560 [ 1123.083534][ T4719] ? __alloc_skb+0x1db/0x7a0 [ 1123.083563][ T4719] should_failslab+0xa8/0x100 [ 1123.083590][ T4719] ? __alloc_skb+0x1db/0x7a0 [ 1123.083615][ T4719] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 1123.083644][ T4719] ? __alloc_skb+0x18d/0x7a0 [ 1123.083671][ T4719] ? __alloc_skb+0x1db/0x7a0 [ 1123.083705][ T4719] __alloc_skb+0x1db/0x7a0 [ 1123.083738][ T4719] xfrm_send_acquire+0x156/0xe70 [ 1123.083917][ T4719] ? __pfx_xfrm_send_acquire+0x10/0x10 [ 1123.083944][ T4719] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1123.083970][ T4719] ? xfrm_init_tempstate+0xa9a/0x1270 [ 1123.084024][ T4719] ? km_query+0x2e/0x210 [ 1123.084047][ T4719] km_query+0x11c/0x210 [ 1123.084067][ T4719] ? km_query+0x2e/0x210 [ 1123.084091][ T4719] xfrm_state_find+0x3fe6/0x5f90 [ 1123.084127][ T4719] ? kernel_text_address+0xa5/0xe0 [ 1123.084153][ T4719] ? unwind_get_return_address+0x4d/0x90 [ 1123.084175][ T4719] ? xfrm_state_find+0x1f2/0x5f90 [ 1123.084204][ T4719] ? __pfx_xfrm_state_find+0x10/0x10 [ 1123.084230][ T4719] ? stack_trace_save+0xa9/0x100 [ 1123.084265][ T4719] ? __pfx_stack_trace_save+0x10/0x10 [ 1123.084302][ T4719] xfrm_resolve_and_create_bundle+0x7f3/0x3070 [ 1123.084364][ T4719] ? kasan_record_aux_stack+0xbd/0xd0 [ 1123.084409][ T4719] ? __lock_acquire+0x6df/0x2e50 [ 1123.084433][ T4719] ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10 [ 1123.084458][ T4719] ? __lock_acquire+0x6df/0x2e50 [ 1123.084482][ T4719] ? rcu_is_watching+0x16/0xb0 [ 1123.084562][ T4719] ? xfrm_sk_policy_lookup+0x6db/0x720 [ 1123.084602][ T4719] ? xfrm_expand_policies+0x489/0x740 [ 1123.084635][ T4719] xfrm_lookup_with_ifid+0x2a6/0x1b40 [ 1123.084669][ T4719] ? ip_route_output_key_hash+0x222/0x2a0 [ 1123.084694][ T4719] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 1123.084720][ T4719] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 1123.084757][ T4719] xfrm_lookup_route+0x3c/0x1c0 [ 1123.084787][ T4719] __ip4_datagram_connect+0x940/0x1220 [ 1123.084862][ T4719] __ip6_datagram_connect+0x1bf/0x10e0 [ 1123.084902][ T4719] ? __pfx___ip6_datagram_connect+0x10/0x10 [ 1123.084930][ T4719] ? ip6_datagram_connect_v6_only+0x56/0xa0 [ 1123.084962][ T4719] ? __local_bh_enable_ip+0xd6/0x140 [ 1123.084991][ T4719] ip6_datagram_connect_v6_only+0x63/0xa0 [ 1123.085022][ T4719] __sys_connect+0x316/0x450 [ 1123.085053][ T4719] ? __pfx___sys_connect+0x10/0x10 [ 1123.085094][ T4719] ? __pfx_ksys_write+0x10/0x10 [ 1123.085130][ T4719] __x64_sys_connect+0x7a/0x90 [ 1123.085159][ T4719] do_syscall_64+0x166/0x520 [ 1123.085186][ T4719] ? trace_irq_disable+0x3b/0x140 [ 1123.085204][ T4719] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1123.085224][ T4719] ? clear_bhb_loop+0x70/0xc0 [ 1123.085248][ T4719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1123.085267][ T4719] RIP: 0033:0x7fb18cb9e159 [ 1123.085288][ T4719] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1123.085305][ T4719] RSP: 002b:00007fb18dac7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 1123.085326][ T4719] RAX: ffffffffffffffda RBX: 00007fb18ce25fa0 RCX: 00007fb18cb9e159 [ 1123.085340][ T4719] RDX: 000000000000001c RSI: 0000200000000040 RDI: 0000000000000006 [ 1123.085353][ T4719] RBP: 00007fb18dac7090 R08: 0000000000000000 R09: 0000000000000000 [ 1123.085365][ T4719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1123.085377][ T4719] R13: 00007fb18ce26038 R14: 00007fb18ce25fa0 R15: 00007ffd970ae7c8 [ 1123.085410][ T4719] [ 1124.018718][ T4725] syzkaller0: entered promiscuous mode [ 1124.019095][ T4725] syzkaller0: entered allmulticast mode [ 1124.138205][ T4741] Bluetooth: MGMT ver 1.23 [ 1124.343486][ T4749] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8335'. [ 1125.023947][ T4766] FAULT_INJECTION: forcing a failure. [ 1125.023947][ T4766] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1125.023997][ T4766] CPU: 0 UID: 0 PID: 4766 Comm: syz.5.8341 Not tainted syzkaller #0 PREEMPT(full) [ 1125.024019][ T4766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1125.024031][ T4766] Call Trace: [ 1125.024039][ T4766] [ 1125.024046][ T4766] dump_stack_lvl+0xe8/0x150 [ 1125.024079][ T4766] should_fail_ex+0x410/0x560 [ 1125.024113][ T4766] _copy_to_user+0x31/0xb0 [ 1125.024137][ T4766] simple_read_from_buffer+0xe1/0x170 [ 1125.024168][ T4766] proc_fail_nth_read+0x1bb/0x230 [ 1125.024196][ T4766] ? common_file_perm+0x20e/0x2b0 [ 1125.024219][ T4766] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1125.024251][ T4766] ? rw_verify_area+0x24a/0x4c0 [ 1125.024276][ T4766] ? tun_chr_write_iter+0x18a/0x200 [ 1125.024303][ T4766] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1125.024332][ T4766] vfs_read+0x213/0xa80 [ 1125.024363][ T4766] ? __pfx___mutex_lock+0x10/0x10 [ 1125.024393][ T4766] ? __pfx_vfs_read+0x10/0x10 [ 1125.024421][ T4766] ? __fget_files+0x2a/0x420 [ 1125.024450][ T4766] ? __fget_files+0x3a2/0x420 [ 1125.024472][ T4766] ? __fget_files+0x2a/0x420 [ 1125.024505][ T4766] ksys_read+0x150/0x270 [ 1125.024533][ T4766] ? __pfx_ksys_read+0x10/0x10 [ 1125.024571][ T4766] do_syscall_64+0x166/0x520 [ 1125.024597][ T4766] ? trace_irq_disable+0x3b/0x140 [ 1125.024616][ T4766] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1125.024637][ T4766] ? clear_bhb_loop+0x70/0xc0 [ 1125.024661][ T4766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1125.024680][ T4766] RIP: 0033:0x7f159635e98e [ 1125.024698][ T4766] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1125.024715][ T4766] RSP: 002b:00007f15971befe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1125.024737][ T4766] RAX: ffffffffffffffda RBX: 00007f15971bf6c0 RCX: 00007f159635e98e [ 1125.024751][ T4766] RDX: 000000000000000f RSI: 00007f15971bf0a0 RDI: 0000000000000004 [ 1125.024764][ T4766] RBP: 00007f15971bf090 R08: 0000000000000000 R09: 0000000000000000 [ 1125.024776][ T4766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1125.024788][ T4766] R13: 00007f1596626038 R14: 00007f1596625fa0 R15: 00007fffcc729018 [ 1125.024827][ T4766] [ 1132.411940][ T4778] netlink: 'syz.1.8344': attribute type 5 has an invalid length. [ 1132.493346][ T4780] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8346'. [ 1132.493426][ T4780] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8346'. [ 1132.639466][ T4785] syzkaller0: entered promiscuous mode [ 1132.646722][ T4785] syzkaller0: entered allmulticast mode [ 1132.819239][ T4789] FAULT_INJECTION: forcing a failure. [ 1132.819239][ T4789] name failslab, interval 1, probability 0, space 0, times 0 [ 1132.819288][ T4789] CPU: 0 UID: 0 PID: 4789 Comm: syz.5.8350 Not tainted syzkaller #0 PREEMPT(full) [ 1132.819310][ T4789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1132.819323][ T4789] Call Trace: [ 1132.819331][ T4789] [ 1132.819340][ T4789] dump_stack_lvl+0xe8/0x150 [ 1132.819376][ T4789] should_fail_ex+0x410/0x560 [ 1132.819418][ T4789] should_failslab+0xa8/0x100 [ 1132.819443][ T4789] __kmalloc_cache_node_noprof+0xaa/0x620 [ 1132.819475][ T4789] ? bpf_test_run_xdp_live+0x220/0x1c20 [ 1132.819573][ T4789] ? page_pool_create_percpu+0x73/0xc70 [ 1132.819673][ T4789] ? page_pool_create_percpu+0x73/0xc70 [ 1132.819705][ T4789] page_pool_create_percpu+0x73/0xc70 [ 1132.819730][ T4789] ? page_pool_create+0xd/0x20 [ 1132.819758][ T4789] bpf_test_run_xdp_live+0x23a/0x1c20 [ 1132.819785][ T4789] ? bpf_dispatcher_change_prog+0xc4c/0xf20 [ 1132.819820][ T4789] ? __mutex_unlock_slowpath+0x731/0x900 [ 1132.819854][ T4789] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1132.819886][ T4789] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 1132.819909][ T4789] ? bpf_dispatcher_xdp+0x800/0x1000 [ 1132.819974][ T4789] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 1132.820007][ T4789] ? _copy_from_user+0x94/0xb0 [ 1132.820028][ T4789] ? bpf_test_init+0x113/0x150 [ 1132.820049][ T4789] ? xdp_convert_md_to_buff+0x5b/0x330 [ 1132.820075][ T4789] bpf_prog_test_run_xdp+0x7d8/0x11d0 [ 1132.820114][ T4789] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1132.820143][ T4789] ? __fget_files+0x2a/0x420 [ 1132.820172][ T4789] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1132.820197][ T4789] bpf_prog_test_run+0x2c5/0x340 [ 1132.820231][ T4789] __sys_bpf+0xa22/0xd90 [ 1132.820260][ T4789] ? __pfx___sys_bpf+0x10/0x10 [ 1132.820292][ T4789] ? __fget_files+0x2a/0x420 [ 1132.820340][ T4789] ? ksys_write+0x242/0x270 [ 1132.820369][ T4789] ? __pfx_ksys_write+0x10/0x10 [ 1132.820406][ T4789] __x64_sys_bpf+0xba/0xd0 [ 1132.820428][ T4789] do_syscall_64+0x166/0x520 [ 1132.820454][ T4789] ? trace_irq_disable+0x3b/0x140 [ 1132.820473][ T4789] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1132.820492][ T4789] ? clear_bhb_loop+0x70/0xc0 [ 1132.820516][ T4789] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1132.820535][ T4789] RIP: 0033:0x7f159639e159 [ 1132.820554][ T4789] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1132.820572][ T4789] RSP: 002b:00007f15971bf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1132.820593][ T4789] RAX: ffffffffffffffda RBX: 00007f1596625fa0 RCX: 00007f159639e159 [ 1132.820608][ T4789] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 1132.820620][ T4789] RBP: 00007f15971bf090 R08: 0000000000000000 R09: 0000000000000000 [ 1132.820633][ T4789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1132.820645][ T4789] R13: 00007f1596626038 R14: 00007f1596625fa0 R15: 00007fffcc729018 [ 1132.820676][ T4789] [ 1133.811113][ T4799] syzkaller0: entered promiscuous mode [ 1133.817623][ T4799] syzkaller0: entered allmulticast mode [ 1134.995315][ T3862] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1135.020072][ T3862] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1135.029624][ T3862] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1135.043973][ T3862] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1135.052636][ T3862] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1137.143606][ T5616] Bluetooth: hci1: command tx timeout [ 1139.200290][ T5616] Bluetooth: hci1: command tx timeout [ 1141.291812][ T5616] Bluetooth: hci1: command tx timeout [ 1142.247493][ T5616] Bluetooth: hci4: link tx timeout [ 1142.247529][ T5616] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 1142.427237][ T4830] netlink: 'syz.6.8361': attribute type 8 has an invalid length. [ 1143.338825][ T3862] Bluetooth: hci1: command tx timeout [ 1143.355464][ T49] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1143.412458][ T4846] syzkaller0: entered promiscuous mode [ 1143.412494][ T4846] syzkaller0: entered allmulticast mode [ 1143.584789][ T49] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1143.812418][ T4819] wg0 speed is unknown, defaulting to 1000 [ 1143.816443][ T4819] hsr0 speed is unknown, defaulting to 1000 [ 1143.892450][ T49] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1143.928761][ T4819] lo speed is unknown, defaulting to 1000 [ 1144.299212][ T3862] Bluetooth: hci4: command 0x0406 tx timeout [ 1145.052720][ T4877] mac80211_hwsim hwsim68 syzkaller0: left promiscuous mode [ 1145.064547][ T4877] mac80211_hwsim hwsim68 syzkaller0: left allmulticast mode [ 1145.602943][ T4894] FAULT_INJECTION: forcing a failure. [ 1145.602943][ T4894] name failslab, interval 1, probability 0, space 0, times 0 [ 1145.617138][ T4894] CPU: 0 UID: 0 PID: 4894 Comm: syz.4.8380 Not tainted syzkaller #0 PREEMPT(full) [ 1145.617168][ T4894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1145.617181][ T4894] Call Trace: [ 1145.617189][ T4894] [ 1145.617197][ T4894] dump_stack_lvl+0xe8/0x150 [ 1145.617232][ T4894] should_fail_ex+0x410/0x560 [ 1145.617266][ T4894] should_failslab+0xa8/0x100 [ 1145.617292][ T4894] __kmalloc_cache_noprof+0xa3/0x600 [ 1145.617321][ T4894] ? lock_acquire+0x115/0x350 [ 1145.617342][ T4894] ? sctp_add_bind_addr+0x8c/0x370 [ 1145.617488][ T4894] ? sctp_add_bind_addr+0x8c/0x370 [ 1145.617518][ T4894] sctp_add_bind_addr+0x8c/0x370 [ 1145.617545][ T4894] sctp_copy_local_addr_list+0x31a/0x4e0 [ 1145.617636][ T4894] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 1145.617660][ T4894] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1145.617685][ T4894] ? sctp_v6_is_any+0x64/0x80 [ 1145.617762][ T4894] ? sctp_copy_one_addr+0x93/0x360 [ 1145.617788][ T4894] sctp_bind_addr_copy+0xb3/0x3c0 [ 1145.617812][ T4894] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1145.617836][ T4894] sctp_connect_new_asoc+0x2ff/0x6b0 [ 1145.617866][ T4894] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1145.617900][ T4894] ? __local_bh_enable_ip+0xd6/0x140 [ 1145.617924][ T4894] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1145.617949][ T4894] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1145.617980][ T4894] sctp_sendmsg+0x159b/0x2d00 [ 1145.618018][ T4894] ? kstrtouint+0x6e/0xe0 [ 1145.618044][ T4894] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1145.618068][ T4894] ? lock_acquire+0x115/0x350 [ 1145.618087][ T4894] ? get_pid_task+0x20/0x1f0 [ 1145.618123][ T4894] ? aa_sock_msg_perm+0xf5/0x210 [ 1145.618143][ T4894] ? sock_rps_record_flow+0x19/0x350 [ 1145.618171][ T4894] ? inet_sendmsg+0x298/0x320 [ 1145.618197][ T4894] ? __pfx_inet_sendmsg+0x10/0x10 [ 1145.618219][ T4894] sock_sendmsg_nosec+0x10e/0x180 [ 1145.618248][ T4894] __sys_sendto+0x408/0x5a0 [ 1145.618266][ T4894] ? ksys_write+0x1e6/0x270 [ 1145.618297][ T4894] ? __pfx___sys_sendto+0x10/0x10 [ 1145.618323][ T4894] ? __mutex_unlock_slowpath+0x731/0x900 [ 1145.618372][ T4894] ? __pfx_ksys_write+0x10/0x10 [ 1145.618401][ T4894] __x64_sys_sendto+0xde/0x100 [ 1145.618423][ T4894] do_syscall_64+0x166/0x520 [ 1145.618449][ T4894] ? trace_irq_disable+0x3b/0x140 [ 1145.618468][ T4894] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1145.618487][ T4894] ? clear_bhb_loop+0x70/0xc0 [ 1145.618511][ T4894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1145.618530][ T4894] RIP: 0033:0x7f18c599e159 [ 1145.618565][ T4894] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1145.618581][ T4894] RSP: 002b:00007f18c6799028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1145.618602][ T4894] RAX: ffffffffffffffda RBX: 00007f18c5c25fa0 RCX: 00007f18c599e159 [ 1145.618616][ T4894] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000004 [ 1145.618629][ T4894] RBP: 00007f18c6799090 R08: 000020000005ffe4 R09: 000000000000001c [ 1145.618642][ T4894] R10: 00000000000000e0 R11: 0000000000000246 R12: 0000000000000001 [ 1145.618653][ T4894] R13: 00007f18c5c26038 R14: 00007f18c5c25fa0 R15: 00007fffbfe00578 [ 1145.618686][ T4894] [ 1146.226597][ T4905] FAULT_INJECTION: forcing a failure. [ 1146.226597][ T4905] name failslab, interval 1, probability 0, space 0, times 0 [ 1146.242741][ T4905] CPU: 0 UID: 0 PID: 4905 Comm: syz.4.8382 Not tainted syzkaller #0 PREEMPT(full) [ 1146.242768][ T4905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1146.242780][ T4905] Call Trace: [ 1146.242787][ T4905] [ 1146.242796][ T4905] dump_stack_lvl+0xe8/0x150 [ 1146.242828][ T4905] should_fail_ex+0x410/0x560 [ 1146.242861][ T4905] should_failslab+0xa8/0x100 [ 1146.242885][ T4905] __kvmalloc_node_noprof+0x176/0x820 [ 1146.242909][ T4905] ? __rhashtable_init_noprof+0x545/0xaf0 [ 1146.242938][ T4905] ? __rhashtable_init_noprof+0x545/0xaf0 [ 1146.242972][ T4905] __rhashtable_init_noprof+0x545/0xaf0 [ 1146.243005][ T4905] __rhltable_init_noprof+0x26/0x70 [ 1146.243026][ T4905] nf_tables_newtable+0x6e0/0x1990 [ 1146.243136][ T4905] nfnetlink_rcv+0x1288/0x28c0 [ 1146.243214][ T4905] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1146.243241][ T4905] ? ref_tracker_free+0x689/0x830 [ 1146.243276][ T4905] ? skb_clone+0x246/0x3a0 [ 1146.243294][ T4905] ? __netlink_deliver_tap+0x811/0x860 [ 1146.243318][ T4905] ? netlink_deliver_tap+0x2e/0x1b0 [ 1146.243343][ T4905] ? netlink_deliver_tap+0x2e/0x1b0 [ 1146.243364][ T4905] netlink_unicast+0x7bd/0x940 [ 1146.243389][ T4905] netlink_sendmsg+0x813/0xb40 [ 1146.243414][ T4905] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1146.243439][ T4905] ? apparmor_socket_sendmsg+0x18b/0x360 [ 1146.243468][ T4905] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1146.243487][ T4905] sock_sendmsg_nosec+0x13a/0x180 [ 1146.243508][ T4905] ____sys_sendmsg+0x54e/0x850 [ 1146.243534][ T4905] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1146.243561][ T4905] ? import_iovec+0x73/0xa0 [ 1146.243585][ T4905] ___sys_sendmsg+0x2a5/0x360 [ 1146.243606][ T4905] ? __lock_acquire+0x6df/0x2e50 [ 1146.243631][ T4905] ? __pfx____sys_sendmsg+0x10/0x10 [ 1146.243688][ T4905] ? __fget_files+0x2a/0x420 [ 1146.243712][ T4905] ? __fget_files+0x3a2/0x420 [ 1146.243744][ T4905] __x64_sys_sendmsg+0x1b1/0x290 [ 1146.243766][ T4905] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1146.243802][ T4905] do_syscall_64+0x166/0x520 [ 1146.243827][ T4905] ? trace_irq_disable+0x3b/0x140 [ 1146.243843][ T4905] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1146.243859][ T4905] ? clear_bhb_loop+0x70/0xc0 [ 1146.243881][ T4905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1146.243899][ T4905] RIP: 0033:0x7f18c599e159 [ 1146.243917][ T4905] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1146.243932][ T4905] RSP: 002b:00007f18c6799028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1146.243950][ T4905] RAX: ffffffffffffffda RBX: 00007f18c5c25fa0 RCX: 00007f18c599e159 [ 1146.243962][ T4905] RDX: 0000000020050800 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1146.243973][ T4905] RBP: 00007f18c6799090 R08: 0000000000000000 R09: 0000000000000000 [ 1146.243984][ T4905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1146.243996][ T4905] R13: 00007f18c5c26038 R14: 00007f18c5c25fa0 R15: 00007fffbfe00578 [ 1146.244029][ T4905] [ 1146.728715][ T4907] netlink: 'syz.1.8381': attribute type 1 has an invalid length. [ 1146.827634][ T4909] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8381'. [ 1146.893949][ T4902] mac80211_hwsim hwsim70 syzkaller0: entered promiscuous mode [ 1146.894284][ T4902] mac80211_hwsim hwsim70 syzkaller0: entered allmulticast mode [ 1146.996474][ T4900] tipc: Enabling of bearer rejected, already enabled [ 1147.019274][ T4906] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8381'. [ 1147.822167][ T49] pimreg3: left allmulticast mode [ 1148.896875][ T49] bond3 (unregistering): (slave geneve2): Releasing active interface [ 1149.034934][ T49] bond2 (unregistering): (slave bridge1): Releasing backup interface [ 1149.081648][ T49] bond4 (unregistering): (slave bridge3): Releasing backup interface [ 1149.092449][ T49] bridge3 (unregistering): left promiscuous mode [ 1149.113457][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1149.126443][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1149.140732][ T49] bond0 (unregistering): Released all slaves [ 1149.160684][ T49] bond1 (unregistering): Released all slaves [ 1149.197071][ T49] bond2 (unregistering): Released all slaves [ 1149.240550][ T49] bond3 (unregistering): Released all slaves [ 1149.272856][ T49] bond4 (unregistering): Released all slaves [ 1149.295163][ T4942] mac80211_hwsim hwsim70 syzkaller0: left promiscuous mode [ 1149.295208][ T4942] mac80211_hwsim hwsim70 syzkaller0: left allmulticast mode [ 1149.801601][ T49] tipc: Disabling bearer [ 1149.801790][ T49] tipc: Left network mode [ 1149.957785][ T4984] netlink: 112 bytes leftover after parsing attributes in process `syz.4.8397'. [ 1150.056410][ T4990] netlink: 112 bytes leftover after parsing attributes in process `syz.4.8397'. [ 1150.620527][ T4819] bridge0: port 1(bridge_slave_0) entered blocking state [ 1150.630875][ T4819] bridge0: port 1(bridge_slave_0) entered disabled state [ 1150.638825][ T4819] bridge_slave_0: entered allmulticast mode [ 1150.647547][ T4819] bridge_slave_0: entered promiscuous mode [ 1150.712751][ T4819] bridge0: port 2(bridge_slave_1) entered blocking state [ 1150.725078][ T4819] bridge0: port 2(bridge_slave_1) entered disabled state [ 1150.733303][ T4819] bridge_slave_1: entered allmulticast mode [ 1150.741729][ T4819] bridge_slave_1: entered promiscuous mode [ 1150.842318][ T4819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1151.239154][ T5012] netlink: 'syz.5.8402': attribute type 8 has an invalid length. [ 1151.306797][ T4819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1151.389799][ T5021] netlink: 'syz.6.8404': attribute type 142 has an invalid length. [ 1151.468166][ T5018] netlink: 16215 bytes leftover after parsing attributes in process `syz.5.8405'. [ 1151.479497][ T5019] netlink: 'syz.5.8405': attribute type 6 has an invalid length. [ 1151.934004][ T5037] netlink: 112 bytes leftover after parsing attributes in process `syz.6.8409'. [ 1152.008402][ T5040] netlink: 112 bytes leftover after parsing attributes in process `syz.6.8409'. [ 1152.037213][ T5025] syzkaller0: entered promiscuous mode [ 1152.037567][ T5025] syzkaller0: entered allmulticast mode [ 1152.175509][ T4819] team0: Port device team_slave_0 added [ 1152.244712][ T4819] team0: Port device team_slave_1 added [ 1152.371720][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1153.153619][ T49] team0 (unregistering): Port device team_slave_1 removed [ 1153.174011][ T49] team0 (unregistering): Port device team_slave_0 removed [ 1153.745886][ T5074] FAULT_INJECTION: forcing a failure. [ 1153.745886][ T5074] name failslab, interval 1, probability 0, space 0, times 0 [ 1153.745938][ T5074] CPU: 0 UID: 0 PID: 5074 Comm: syz.5.8415 Not tainted syzkaller #0 PREEMPT(full) [ 1153.745961][ T5074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1153.745973][ T5074] Call Trace: [ 1153.745981][ T5074] [ 1153.745989][ T5074] dump_stack_lvl+0xe8/0x150 [ 1153.746023][ T5074] should_fail_ex+0x410/0x560 [ 1153.746056][ T5074] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 1153.746208][ T5074] should_failslab+0xa8/0x100 [ 1153.746233][ T5074] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 1153.746257][ T5074] kmem_cache_alloc_lru_noprof+0xa7/0x5f0 [ 1153.746287][ T5074] ? alloc_inode+0x6a/0x1b0 [ 1153.746307][ T5074] ? alloc_inode+0x6a/0x1b0 [ 1153.746334][ T5074] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 1153.746359][ T5074] alloc_inode+0x6a/0x1b0 [ 1153.746383][ T5074] new_inode+0x1f/0x170 [ 1153.746410][ T5074] __debugfs_create_file+0xb8/0x400 [ 1153.746440][ T5074] debugfs_create_file_full+0x3f/0x60 [ 1153.746469][ T5074] ref_tracker_dir_debugfs+0x197/0x360 [ 1153.746490][ T5074] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 1153.746536][ T5074] ? __kvmalloc_node_noprof+0x345/0x820 [ 1153.746563][ T5074] ? __raw_spin_lock_init+0x45/0x100 [ 1153.746591][ T5074] alloc_netdev_mqs+0x275/0x12a0 [ 1153.746651][ T5074] ? __pfx_bnep_net_setup+0x10/0x10 [ 1153.746691][ T5074] bnep_add_connection+0x210/0xc80 [ 1153.746728][ T5074] ? __pfx_bnep_add_connection+0x10/0x10 [ 1153.746755][ T5074] ? __fget_files+0x3a2/0x420 [ 1153.746797][ T5074] do_bnep_sock_ioctl+0x40b/0x650 [ 1153.746829][ T5074] ? __pfx_do_bnep_sock_ioctl+0x10/0x10 [ 1153.746864][ T5074] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1153.746912][ T5074] sock_do_ioctl+0x101/0x320 [ 1153.746940][ T5074] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1153.746962][ T5074] ? hook_file_ioctl+0x1f2/0x600 [ 1153.746998][ T5074] sock_ioctl+0x57a/0x7e0 [ 1153.747024][ T5074] ? __pfx_sock_ioctl+0x10/0x10 [ 1153.747048][ T5074] ? __fget_files+0x2a/0x420 [ 1153.747071][ T5074] ? __fget_files+0x3a2/0x420 [ 1153.747093][ T5074] ? __fget_files+0x2a/0x420 [ 1153.747121][ T5074] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1153.747146][ T5074] ? __pfx_sock_ioctl+0x10/0x10 [ 1153.747169][ T5074] __se_sys_ioctl+0xfc/0x170 [ 1153.747191][ T5074] do_syscall_64+0x166/0x520 [ 1153.747217][ T5074] ? trace_irq_disable+0x3b/0x140 [ 1153.747236][ T5074] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1153.747256][ T5074] ? clear_bhb_loop+0x70/0xc0 [ 1153.747279][ T5074] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1153.747299][ T5074] RIP: 0033:0x7f159639e159 [ 1153.747318][ T5074] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1153.747334][ T5074] RSP: 002b:00007f15971bf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1153.747355][ T5074] RAX: ffffffffffffffda RBX: 00007f1596625fa0 RCX: 00007f159639e159 [ 1153.747369][ T5074] RDX: 0000200000001e40 RSI: 00000000400442c8 RDI: 0000000000000005 [ 1153.747382][ T5074] RBP: 00007f15971bf090 R08: 0000000000000000 R09: 0000000000000000 [ 1153.747394][ T5074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1153.747406][ T5074] R13: 00007f1596626038 R14: 00007f1596625fa0 R15: 00007fffcc729018 [ 1153.747438][ T5074] [ 1153.834943][ T5074] debugfs: out of free dentries, can not create file 'netdev@ffff88807ca58700' [ 1157.862939][ T5103] netlink: 112 bytes leftover after parsing attributes in process `syz.5.8421'. [ 1157.948109][ T5104] netlink: 112 bytes leftover after parsing attributes in process `syz.5.8421'. [ 1161.914045][ T4819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1161.914177][ T4819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1161.914201][ T4819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1161.917676][ T4819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1161.917692][ T4819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1161.917716][ T4819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1161.972124][ T5106] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 1162.841818][ T4819] hsr_slave_0: entered promiscuous mode [ 1162.884392][ T4819] hsr_slave_1: entered promiscuous mode [ 1162.936161][ T5118] mac80211_hwsim hwsim68 syzkaller0: entered promiscuous mode [ 1162.936203][ T5118] mac80211_hwsim hwsim68 syzkaller0: entered allmulticast mode [ 1162.973320][ T5129] syz_tun: entered allmulticast mode [ 1163.423832][ T49] IPVS: stop unused estimator thread 0... [ 1163.435461][ T5134] FAULT_INJECTION: forcing a failure. [ 1163.435461][ T5134] name failslab, interval 1, probability 0, space 0, times 0 [ 1163.435661][ T5134] CPU: 1 UID: 0 PID: 5134 Comm: syz.4.8427 Not tainted syzkaller #0 PREEMPT(full) [ 1163.435683][ T5134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1163.435694][ T5134] Call Trace: [ 1163.435703][ T5134] [ 1163.435710][ T5134] dump_stack_lvl+0xe8/0x150 [ 1163.435742][ T5134] should_fail_ex+0x410/0x560 [ 1163.435775][ T5134] should_failslab+0xa8/0x100 [ 1163.435799][ T5134] __kmalloc_cache_noprof+0xa3/0x600 [ 1163.435829][ T5134] ? __kmalloc_cache_noprof+0x14d/0x600 [ 1163.435854][ T5134] ? sctp_add_bind_addr+0x8c/0x370 [ 1163.435875][ T5134] ? sctp_add_bind_addr+0x8c/0x370 [ 1163.435901][ T5134] sctp_add_bind_addr+0x8c/0x370 [ 1163.435927][ T5134] sctp_copy_local_addr_list+0x31a/0x4e0 [ 1163.435952][ T5134] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 1163.435974][ T5134] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1163.435997][ T5134] ? sctp_v6_is_any+0x64/0x80 [ 1163.436022][ T5134] ? sctp_copy_one_addr+0x93/0x360 [ 1163.436046][ T5134] sctp_bind_addr_copy+0xb3/0x3c0 [ 1163.436069][ T5134] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1163.436101][ T5134] sctp_connect_new_asoc+0x2ff/0x6b0 [ 1163.436130][ T5134] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1163.436162][ T5134] ? __local_bh_enable_ip+0xd6/0x140 [ 1163.436185][ T5134] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1163.436208][ T5134] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1163.436238][ T5134] sctp_sendmsg+0x159b/0x2d00 [ 1163.436274][ T5134] ? kstrtouint+0x6e/0xe0 [ 1163.436299][ T5134] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1163.436322][ T5134] ? lock_acquire+0x115/0x350 [ 1163.436341][ T5134] ? get_pid_task+0x20/0x1f0 [ 1163.436376][ T5134] ? aa_sock_msg_perm+0xf5/0x210 [ 1163.436394][ T5134] ? sock_rps_record_flow+0x19/0x350 [ 1163.436420][ T5134] ? inet_sendmsg+0x298/0x320 [ 1163.436445][ T5134] ? __pfx_inet_sendmsg+0x10/0x10 [ 1163.436467][ T5134] sock_sendmsg_nosec+0x10e/0x180 [ 1163.436499][ T5134] __sys_sendto+0x408/0x5a0 [ 1163.436515][ T5134] ? ksys_write+0x1e6/0x270 [ 1163.436543][ T5134] ? __pfx___sys_sendto+0x10/0x10 [ 1163.436568][ T5134] ? __mutex_unlock_slowpath+0x731/0x900 [ 1163.436622][ T5134] ? __pfx_ksys_write+0x10/0x10 [ 1163.436652][ T5134] __x64_sys_sendto+0xde/0x100 [ 1163.436674][ T5134] do_syscall_64+0x166/0x520 [ 1163.436699][ T5134] ? trace_irq_disable+0x3b/0x140 [ 1163.436716][ T5134] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1163.436735][ T5134] ? clear_bhb_loop+0x70/0xc0 [ 1163.436758][ T5134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1163.436777][ T5134] RIP: 0033:0x7f18c599e159 [ 1163.436794][ T5134] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1163.436810][ T5134] RSP: 002b:00007f18c6799028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1163.436829][ T5134] RAX: ffffffffffffffda RBX: 00007f18c5c25fa0 RCX: 00007f18c599e159 [ 1163.436842][ T5134] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000004 [ 1163.436855][ T5134] RBP: 00007f18c6799090 R08: 000020000005ffe4 R09: 000000000000001c [ 1163.436867][ T5134] R10: 00000000000000e0 R11: 0000000000000246 R12: 0000000000000001 [ 1163.436878][ T5134] R13: 00007f18c5c26038 R14: 00007f18c5c25fa0 R15: 00007fffbfe00578 [ 1163.436909][ T5134] [ 1165.335974][ T5153] netlink: 112 bytes leftover after parsing attributes in process `syz.6.8432'. [ 1165.399828][ T5155] netlink: 112 bytes leftover after parsing attributes in process `syz.6.8432'. [ 1166.699027][ T5172] mac80211_hwsim hwsim70 syzkaller0: entered promiscuous mode [ 1166.699075][ T5172] mac80211_hwsim hwsim70 syzkaller0: entered allmulticast mode [ 1167.502307][ T5197] netlink: 112 bytes leftover after parsing attributes in process `syz.1.8443'. [ 1167.554342][ T5203] netlink: 'syz.5.8444': attribute type 8 has an invalid length. [ 1167.563137][ T5204] netlink: 112 bytes leftover after parsing attributes in process `syz.1.8443'. [ 1168.407534][ T5216] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1168.681590][ T4819] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1168.752073][ T4819] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1168.752872][ T4819] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1168.911220][ T4819] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1169.012112][ T4819] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1169.050885][ T5231] netlink: 'syz.6.8448': attribute type 1 has an invalid length. [ 1169.051102][ T5231] netlink: 224 bytes leftover after parsing attributes in process `syz.6.8448'. [ 1169.083219][ T4819] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1169.085185][ T4819] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1169.221056][ T4819] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1169.472796][ T5225] syzkaller0: entered promiscuous mode [ 1169.481820][ T5225] syzkaller0: entered allmulticast mode [ 1177.252460][ T5268] mac80211_hwsim hwsim70 syzkaller0: left promiscuous mode [ 1177.252825][ T5268] mac80211_hwsim hwsim70 syzkaller0: left allmulticast mode [ 1177.726688][ T5302] netlink: 112 bytes leftover after parsing attributes in process `syz.5.8456'. [ 1177.751480][ T5301] mac80211_hwsim hwsim68 syzkaller0: left promiscuous mode [ 1177.751524][ T5301] mac80211_hwsim hwsim68 syzkaller0: left allmulticast mode [ 1177.771659][ T5302] netlink: 112 bytes leftover after parsing attributes in process `syz.5.8456'. [ 1177.976429][ T4819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1178.045411][ T4819] 8021q: adding VLAN 0 to HW filter on device team0 [ 1178.096710][ T1100] bridge0: port 1(bridge_slave_0) entered blocking state [ 1178.096842][ T1100] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1178.145168][ T7071] bridge0: port 2(bridge_slave_1) entered blocking state [ 1178.145314][ T7071] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1178.295094][ T5320] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8457'. [ 1178.306193][ T5320] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8457'. [ 1178.567796][ T5327] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8461'. [ 1180.943826][ T5616] Bluetooth: hci1: link tx timeout [ 1180.944037][ T5616] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 1181.366927][ T5383] FAULT_INJECTION: forcing a failure. [ 1181.366927][ T5383] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1181.366987][ T5383] CPU: 0 UID: 0 PID: 5383 Comm: syz.6.8472 Not tainted syzkaller #0 PREEMPT(full) [ 1181.367009][ T5383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1181.367021][ T5383] Call Trace: [ 1181.367029][ T5383] [ 1181.367039][ T5383] dump_stack_lvl+0xe8/0x150 [ 1181.367071][ T5383] should_fail_ex+0x410/0x560 [ 1181.367105][ T5383] _copy_from_user+0x2d/0xb0 [ 1181.367127][ T5383] __copy_msghdr+0x390/0x590 [ 1181.367154][ T5383] ___sys_sendmsg+0x213/0x360 [ 1181.367174][ T5383] ? __lock_acquire+0x6df/0x2e50 [ 1181.367198][ T5383] ? __pfx____sys_sendmsg+0x10/0x10 [ 1181.367253][ T5383] ? __fget_files+0x2a/0x420 [ 1181.367277][ T5383] ? __fget_files+0x3a2/0x420 [ 1181.367311][ T5383] __x64_sys_sendmsg+0x1b1/0x290 [ 1181.367335][ T5383] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1181.367377][ T5383] do_syscall_64+0x166/0x520 [ 1181.367404][ T5383] ? trace_irq_disable+0x3b/0x140 [ 1181.367422][ T5383] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1181.367442][ T5383] ? clear_bhb_loop+0x70/0xc0 [ 1181.367465][ T5383] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1181.367484][ T5383] RIP: 0033:0x7f8e6b99e159 [ 1181.367503][ T5383] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1181.367520][ T5383] RSP: 002b:00007f8e6c7e7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1181.367541][ T5383] RAX: ffffffffffffffda RBX: 00007f8e6bc25fa0 RCX: 00007f8e6b99e159 [ 1181.367556][ T5383] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000006 [ 1181.367568][ T5383] RBP: 00007f8e6c7e7090 R08: 0000000000000000 R09: 0000000000000000 [ 1181.367581][ T5383] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1181.367592][ T5383] R13: 00007f8e6bc26038 R14: 00007f8e6bc25fa0 R15: 00007ffe68397658 [ 1181.367623][ T5383] [ 1181.708079][ T4819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1182.064673][ T4819] veth0_vlan: entered promiscuous mode [ 1182.099045][ T5389] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8473'. [ 1182.099089][ T5389] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8473'. [ 1182.190676][ T4819] veth1_vlan: entered promiscuous mode [ 1182.493154][ T4819] veth0_macvtap: entered promiscuous mode [ 1182.535794][ T4819] veth1_macvtap: entered promiscuous mode [ 1182.684639][ T4819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1182.744328][ T4819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1182.819736][ T7065] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1182.820155][ T7065] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1182.820454][ T7065] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1182.820638][ T7065] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1183.023162][ T5616] Bluetooth: hci1: command 0x0406 tx timeout [ 1183.661610][ T5622] hid-generic 0005:04F3:0058.0004: item fetching failed at offset 0/1 [ 1183.681586][ T5622] hid-generic 0005:04F3:0058.0004: probe with driver hid-generic failed with error -22 [ 1183.823889][ T8882] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1183.823932][ T8882] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1184.132201][ T5425] netlink: 'syz.5.8481': attribute type 1 has an invalid length. [ 1184.237761][ T5428] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8481'. [ 1184.255465][ T5423] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1184.407275][ T5433] netlink: 'syz.1.8483': attribute type 4 has an invalid length. [ 1184.417766][ T5433] netlink: 152 bytes leftover after parsing attributes in process `syz.1.8483'. [ 1184.429288][ T5425] bond2: entered promiscuous mode [ 1184.435060][ T5425] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1184.458140][ T5436] netlink: 72 bytes leftover after parsing attributes in process `syz.4.8482'. [ 1184.550647][ T5429] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8482'. [ 1184.550690][ T5429] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8482'. [ 1184.550721][ T5429] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8482'. [ 1184.593360][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1184.593398][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1184.745768][ T5433] .`: renamed from bond0 [ 1185.228820][ T5438] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1185.229012][ T5438] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 1185.412308][ T5438] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1185.437847][ T5438] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1185.514588][ T5456] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8358'. [ 1185.632598][ T5438] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1185.639186][ T5438] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1185.795091][ T5438] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1185.802421][ T5438] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 1187.091726][ T5505] netlink: 'syz.5.8495': attribute type 1 has an invalid length. [ 1187.135049][ T5506] FAULT_INJECTION: forcing a failure. [ 1187.135049][ T5506] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1187.173794][ T5506] CPU: 0 UID: 0 PID: 5506 Comm: syz.4.8496 Not tainted syzkaller #0 PREEMPT(full) [ 1187.173823][ T5506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1187.173834][ T5506] Call Trace: [ 1187.173843][ T5506] [ 1187.173852][ T5506] dump_stack_lvl+0xe8/0x150 [ 1187.173884][ T5506] should_fail_ex+0x410/0x560 [ 1187.173918][ T5506] prepare_alloc_pages+0x223/0x600 [ 1187.173945][ T5506] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 1187.173970][ T5506] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1187.173993][ T5506] ? __pfx_policy_nodemask+0x10/0x10 [ 1187.174016][ T5506] ? lockdep_hardirqs_on+0x7b/0x110 [ 1187.174052][ T5506] alloc_pages_mpol+0x21e/0x390 [ 1187.174081][ T5506] folio_alloc_mpol_noprof+0x39/0x160 [ 1187.174106][ T5506] vma_alloc_folio_noprof+0xe1/0x1e0 [ 1187.174133][ T5506] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1187.174168][ T5506] do_wp_page+0x117d/0x4b80 [ 1187.174211][ T5506] ? __pfx_do_wp_page+0x10/0x10 [ 1187.174231][ T5506] ? do_raw_spin_lock+0x12b/0x2f0 [ 1187.174260][ T5506] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1187.174296][ T5506] handle_mm_fault+0x15d7/0x3750 [ 1187.174332][ T5506] ? handle_mm_fault+0xf1/0x3750 [ 1187.174367][ T5506] ? __pfx_handle_mm_fault+0x10/0x10 [ 1187.174402][ T5506] ? __lock_acquire+0x6df/0x2e50 [ 1187.174424][ T5506] ? lock_mm_and_find_vma+0xa7/0x340 [ 1187.174453][ T5506] do_user_addr_fault+0x746/0x1340 [ 1187.174495][ T5506] exc_page_fault+0x6a/0xc0 [ 1187.174522][ T5506] asm_exc_page_fault+0x26/0x30 [ 1187.174542][ T5506] RIP: 0010:rep_movs_alternative+0x4a/0xa0 [ 1187.174565][ T5506] Code: 66 04 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 4f 66 04 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 1187.174582][ T5506] RSP: 0018:ffffc9000a6f7278 EFLAGS: 00050206 [ 1187.174601][ T5506] RAX: ffffffff84db8901 RBX: ffff888053d20000 RCX: 0000000000006740 [ 1187.174615][ T5506] RDX: 0000000000000000 RSI: ffff888053d218c0 RDI: 0000200000002000 [ 1187.174629][ T5506] RBP: ffffc9000a6f73f0 R08: ffff888053d27fff R09: 1ffff1100a7a4fff [ 1187.174643][ T5506] R10: dffffc0000000000 R11: ffffed100a7a5000 R12: 1ffff920014defc3 [ 1187.174658][ T5506] R13: 0000200000000740 R14: ffffc9000a6f7e28 R15: 0000000000008000 [ 1187.174679][ T5506] ? _copy_to_iter+0x161/0x1810 [ 1187.174715][ T5506] _copy_to_iter+0x255/0x1810 [ 1187.174749][ T5506] ? __lock_acquire+0x6df/0x2e50 [ 1187.174771][ T5506] ? is_bpf_text_address+0x292/0x2b0 [ 1187.174794][ T5506] ? is_bpf_text_address+0x26/0x2b0 [ 1187.174816][ T5506] ? __pfx__copy_to_iter+0x10/0x10 [ 1187.174844][ T5506] ? kernel_text_address+0xa5/0xe0 [ 1187.174866][ T5506] ? __kernel_text_address+0xd/0x30 [ 1187.174886][ T5506] ? unwind_get_return_address+0x4d/0x90 [ 1187.174908][ T5506] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1187.174946][ T5506] __skb_datagram_iter+0x419/0x980 [ 1187.174972][ T5506] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 1187.175003][ T5506] skb_copy_datagram_iter+0xb5/0x240 [ 1187.175030][ T5506] tcp_recvmsg_locked+0xf52/0x3770 [ 1187.175052][ T5506] ? __kasan_slab_free+0x5c/0x80 [ 1187.175099][ T5506] ? process_measurement+0x7b2/0x1c10 [ 1187.175136][ T5506] ? __lock_acquire+0x6df/0x2e50 [ 1187.175158][ T5506] ? __pfx_tcp_recvmsg_locked+0x10/0x10 [ 1187.175195][ T5506] ? aa_inet_msg_perm+0xb78/0x1010 [ 1187.175230][ T5506] ? do_raw_spin_lock+0x12b/0x2f0 [ 1187.175258][ T5506] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1187.175293][ T5506] ? tcp_recvmsg+0x1df/0x7f0 [ 1187.175327][ T5506] ? __local_bh_enable_ip+0xd6/0x140 [ 1187.175357][ T5506] tcp_recvmsg+0x203/0x7f0 [ 1187.175391][ T5506] ? lock_acquire+0x115/0x350 [ 1187.175410][ T5506] ? __pfx_tcp_recvmsg+0x10/0x10 [ 1187.175441][ T5506] ? sock_rps_record_flow+0x19/0x350 [ 1187.175468][ T5506] ? inet_recvmsg+0xb3/0x120 [ 1187.175498][ T5506] ? __pfx_inet_recvmsg+0x10/0x10 [ 1187.175521][ T5506] sock_recvmsg+0x166/0x1e0 [ 1187.175549][ T5506] ____sys_recvmsg+0x1e6/0x4a0 [ 1187.175587][ T5506] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1187.175624][ T5506] ? import_iovec+0x73/0xa0 [ 1187.175648][ T5506] ___sys_recvmsg+0x213/0x5a0 [ 1187.175676][ T5506] ? __pfx____sys_recvmsg+0x10/0x10 [ 1187.175703][ T5506] ? lock_acquire+0x115/0x350 [ 1187.175739][ T5506] ? __fget_files+0x3a2/0x420 [ 1187.175775][ T5506] __x64_sys_recvmsg+0x1ae/0x290 [ 1187.175799][ T5506] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 1187.175844][ T5506] do_syscall_64+0x166/0x520 [ 1187.175870][ T5506] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1187.175890][ T5506] ? clear_bhb_loop+0x70/0xc0 [ 1187.175914][ T5506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1187.175933][ T5506] RIP: 0033:0x7f18c599e159 [ 1187.175951][ T5506] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1187.175967][ T5506] RSP: 002b:00007f18c6799028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1187.175986][ T5506] RAX: ffffffffffffffda RBX: 00007f18c5c25fa0 RCX: 00007f18c599e159 [ 1187.176001][ T5506] RDX: 0000000000000700 RSI: 0000200000000580 RDI: 0000000000000003 [ 1187.176013][ T5506] RBP: 00007f18c6799090 R08: 0000000000000000 R09: 0000000000000000 [ 1187.176026][ T5506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1187.176038][ T5506] R13: 00007f18c5c26038 R14: 00007f18c5c25fa0 R15: 00007fffbfe00578 [ 1187.176071][ T5506] [ 1187.208733][ T5509] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8495'. [ 1187.309780][ T5510] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8497'. [ 1187.824994][ T5505] bond3: entered promiscuous mode [ 1187.841315][ T5505] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1188.696319][ T5539] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8504'. [ 1188.721351][ T5539] openvswitch: netlink: Flow key attr not present in new flow. [ 1188.730379][ T5523] FAULT_INJECTION: forcing a failure. [ 1188.730379][ T5523] name failslab, interval 1, probability 0, space 0, times 0 [ 1188.730459][ T5523] CPU: 0 UID: 0 PID: 5523 Comm: syz.6.8500 Not tainted syzkaller #0 PREEMPT(full) [ 1188.730481][ T5523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1188.730493][ T5523] Call Trace: [ 1188.730501][ T5523] [ 1188.730510][ T5523] dump_stack_lvl+0xe8/0x150 [ 1188.730542][ T5523] should_fail_ex+0x410/0x560 [ 1188.730576][ T5523] should_failslab+0xa8/0x100 [ 1188.730601][ T5523] kmem_cache_alloc_bulk_noprof+0x8b/0x7b0 [ 1188.730623][ T5523] ? pfn_valid+0x125/0x4c0 [ 1188.730647][ T5523] ? pfn_valid+0x125/0x4c0 [ 1188.730670][ T5523] ? pfn_valid+0x125/0x4c0 [ 1188.730698][ T5523] bpf_test_run_xdp_live+0x16e9/0x1c20 [ 1188.730734][ T5523] ? bpf_test_run_xdp_live+0x43e/0x1c20 [ 1188.730769][ T5523] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 1188.730793][ T5523] ? bpf_dispatcher_xdp+0x800/0x1000 [ 1188.730861][ T5523] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 1188.730892][ T5523] ? _copy_from_user+0x94/0xb0 [ 1188.730913][ T5523] ? bpf_test_init+0x113/0x150 [ 1188.730933][ T5523] ? xdp_convert_md_to_buff+0x5b/0x330 [ 1188.730959][ T5523] bpf_prog_test_run_xdp+0x7d8/0x11d0 [ 1188.730998][ T5523] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1188.731027][ T5523] ? __fget_files+0x2a/0x420 [ 1188.731056][ T5523] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1188.731081][ T5523] bpf_prog_test_run+0x2c5/0x340 [ 1188.731107][ T5523] __sys_bpf+0xa22/0xd90 [ 1188.731136][ T5523] ? __pfx___sys_bpf+0x10/0x10 [ 1188.731169][ T5523] ? __fget_files+0x2a/0x420 [ 1188.731210][ T5523] ? ksys_write+0x242/0x270 [ 1188.731238][ T5523] ? __pfx_ksys_write+0x10/0x10 [ 1188.731270][ T5523] __x64_sys_bpf+0xba/0xd0 [ 1188.731291][ T5523] do_syscall_64+0x166/0x520 [ 1188.731317][ T5523] ? trace_irq_disable+0x3b/0x140 [ 1188.731335][ T5523] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1188.731355][ T5523] ? clear_bhb_loop+0x70/0xc0 [ 1188.731386][ T5523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1188.731404][ T5523] RIP: 0033:0x7f8e6b99e159 [ 1188.731422][ T5523] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1188.731437][ T5523] RSP: 002b:00007f8e6c7e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1188.731458][ T5523] RAX: ffffffffffffffda RBX: 00007f8e6bc25fa0 RCX: 00007f8e6b99e159 [ 1188.731472][ T5523] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 1188.731484][ T5523] RBP: 00007f8e6c7e7090 R08: 0000000000000000 R09: 0000000000000000 [ 1188.731497][ T5523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1188.731508][ T5523] R13: 00007f8e6bc26038 R14: 00007f8e6bc25fa0 R15: 00007ffe68397658 [ 1188.731540][ T5523] [ 1189.648209][ T5549] FAULT_INJECTION: forcing a failure. [ 1189.648209][ T5549] name failslab, interval 1, probability 0, space 0, times 0 [ 1189.648271][ T5549] CPU: 0 UID: 0 PID: 5549 Comm: syz.3.8506 Not tainted syzkaller #0 PREEMPT(full) [ 1189.648295][ T5549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1189.648308][ T5549] Call Trace: [ 1189.648316][ T5549] [ 1189.648327][ T5549] dump_stack_lvl+0xe8/0x150 [ 1189.648358][ T5549] should_fail_ex+0x410/0x560 [ 1189.648394][ T5549] should_failslab+0xa8/0x100 [ 1189.648421][ T5549] __kmalloc_cache_noprof+0xa3/0x600 [ 1189.648452][ T5549] ? __kmalloc_cache_noprof+0x14d/0x600 [ 1189.648479][ T5549] ? sctp_add_bind_addr+0x8c/0x370 [ 1189.648502][ T5549] ? sctp_add_bind_addr+0x8c/0x370 [ 1189.648532][ T5549] sctp_add_bind_addr+0x8c/0x370 [ 1189.648560][ T5549] sctp_copy_local_addr_list+0x31a/0x4e0 [ 1189.648589][ T5549] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 1189.648614][ T5549] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1189.648640][ T5549] ? sctp_v6_is_any+0x64/0x80 [ 1189.648666][ T5549] ? sctp_copy_one_addr+0x93/0x360 [ 1189.648694][ T5549] sctp_bind_addr_copy+0xb3/0x3c0 [ 1189.648719][ T5549] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1189.648744][ T5549] sctp_connect_new_asoc+0x2ff/0x6b0 [ 1189.648774][ T5549] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1189.648810][ T5549] ? __local_bh_enable_ip+0xd6/0x140 [ 1189.648833][ T5549] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1189.648858][ T5549] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1189.648890][ T5549] sctp_sendmsg+0x159b/0x2d00 [ 1189.648929][ T5549] ? kstrtouint+0x6e/0xe0 [ 1189.648956][ T5549] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1189.648982][ T5549] ? lock_acquire+0x115/0x350 [ 1189.649002][ T5549] ? get_pid_task+0x20/0x1f0 [ 1189.649040][ T5549] ? aa_sock_msg_perm+0xf5/0x210 [ 1189.649061][ T5549] ? sock_rps_record_flow+0x19/0x350 [ 1189.649090][ T5549] ? inet_sendmsg+0x298/0x320 [ 1189.649165][ T5549] ? __pfx_inet_sendmsg+0x10/0x10 [ 1189.649189][ T5549] sock_sendmsg_nosec+0x10e/0x180 [ 1189.649218][ T5549] __sys_sendto+0x408/0x5a0 [ 1189.649237][ T5549] ? ksys_write+0x1e6/0x270 [ 1189.649274][ T5549] ? __pfx___sys_sendto+0x10/0x10 [ 1189.649301][ T5549] ? __mutex_unlock_slowpath+0x731/0x900 [ 1189.649358][ T5549] ? __pfx_ksys_write+0x10/0x10 [ 1189.649391][ T5549] __x64_sys_sendto+0xde/0x100 [ 1189.649413][ T5549] do_syscall_64+0x166/0x520 [ 1189.649439][ T5549] ? trace_irq_disable+0x3b/0x140 [ 1189.649458][ T5549] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1189.649477][ T5549] ? clear_bhb_loop+0x70/0xc0 [ 1189.649538][ T5549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1189.649557][ T5549] RIP: 0033:0x7fa13499e159 [ 1189.649576][ T5549] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1189.649593][ T5549] RSP: 002b:00007fa1357c4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1189.649614][ T5549] RAX: ffffffffffffffda RBX: 00007fa134c25fa0 RCX: 00007fa13499e159 [ 1189.649628][ T5549] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000004 [ 1189.649642][ T5549] RBP: 00007fa1357c4090 R08: 000020000005ffe4 R09: 000000000000001c [ 1189.649655][ T5549] R10: 00000000000000e0 R11: 0000000000000246 R12: 0000000000000002 [ 1189.649667][ T5549] R13: 00007fa134c26038 R14: 00007fa134c25fa0 R15: 00007ffe5931f008 [ 1189.649699][ T5549] [ 1190.544955][ T5560] __nla_validate_parse: 3 callbacks suppressed [ 1190.545006][ T5560] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8511'. [ 1190.645966][ T5565] netlink: 68 bytes leftover after parsing attributes in process `syz.3.8510'. [ 1190.803514][ T5569] netlink: 104 bytes leftover after parsing attributes in process `syz.5.8513'. [ 1191.436785][ T5580] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8516'. [ 1191.556251][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880547c6c00: rx timeout, send abort [ 1192.056320][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880547c6c00: abort rx timeout. Force session deactivation [ 1192.056538][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803951d400: rx timeout, send abort [ 1192.349666][ T5614] FAULT_INJECTION: forcing a failure. [ 1192.349666][ T5614] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1192.424730][ T5614] CPU: 0 UID: 0 PID: 5614 Comm: syz.4.8524 Not tainted syzkaller #0 PREEMPT(full) [ 1192.424761][ T5614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1192.424773][ T5614] Call Trace: [ 1192.424781][ T5614] [ 1192.424790][ T5614] dump_stack_lvl+0xe8/0x150 [ 1192.424824][ T5614] should_fail_ex+0x410/0x560 [ 1192.424858][ T5614] _copy_to_user+0x31/0xb0 [ 1192.424882][ T5614] simple_read_from_buffer+0xe1/0x170 [ 1192.424913][ T5614] proc_fail_nth_read+0x1bb/0x230 [ 1192.424940][ T5614] ? common_file_perm+0x20e/0x2b0 [ 1192.424964][ T5614] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1192.424995][ T5614] ? rw_verify_area+0x24a/0x4c0 [ 1192.425023][ T5614] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1192.425050][ T5614] vfs_read+0x213/0xa80 [ 1192.425081][ T5614] ? __pfx___mutex_lock+0x10/0x10 [ 1192.425118][ T5614] ? __pfx_vfs_read+0x10/0x10 [ 1192.425145][ T5614] ? __fget_files+0x2a/0x420 [ 1192.425174][ T5614] ? __fget_files+0x3a2/0x420 [ 1192.425199][ T5614] ? __fget_files+0x2a/0x420 [ 1192.425232][ T5614] ksys_read+0x150/0x270 [ 1192.425261][ T5614] ? __pfx_ksys_read+0x10/0x10 [ 1192.425305][ T5614] do_syscall_64+0x166/0x520 [ 1192.425332][ T5614] ? trace_irq_disable+0x3b/0x140 [ 1192.425351][ T5614] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1192.425370][ T5614] ? clear_bhb_loop+0x70/0xc0 [ 1192.425394][ T5614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1192.425414][ T5614] RIP: 0033:0x7f18c595e98e [ 1192.425431][ T5614] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1192.425449][ T5614] RSP: 002b:00007f18c3bf5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1192.425470][ T5614] RAX: ffffffffffffffda RBX: 00007f18c3bf66c0 RCX: 00007f18c595e98e [ 1192.425484][ T5614] RDX: 000000000000000f RSI: 00007f18c3bf60a0 RDI: 0000000000000003 [ 1192.425497][ T5614] RBP: 00007f18c3bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 1192.425509][ T5614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1192.425521][ T5614] R13: 00007f18c5c26128 R14: 00007f18c5c26090 R15: 00007fffbfe00578 [ 1192.425553][ T5614] [ 1192.556841][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803951d400: abort rx timeout. Force session deactivation [ 1193.118953][ T5632] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8529'. [ 1193.147012][ T5633] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8527'. [ 1193.402479][ T5639] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8530'. [ 1193.415242][ T5639] netlink: 'syz.5.8530': attribute type 8 has an invalid length. [ 1193.415261][ T5639] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8530'. [ 1193.514132][ T5641] FAULT_INJECTION: forcing a failure. [ 1193.514132][ T5641] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1193.514183][ T5641] CPU: 0 UID: 0 PID: 5641 Comm: syz.5.8530 Not tainted syzkaller #0 PREEMPT(full) [ 1193.514206][ T5641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1193.514218][ T5641] Call Trace: [ 1193.514226][ T5641] [ 1193.514235][ T5641] dump_stack_lvl+0xe8/0x150 [ 1193.514268][ T5641] should_fail_ex+0x410/0x560 [ 1193.514302][ T5641] _copy_from_user+0x2d/0xb0 [ 1193.514324][ T5641] ___sys_sendmsg+0x1c6/0x360 [ 1193.514345][ T5641] ? __lock_acquire+0x6df/0x2e50 [ 1193.514370][ T5641] ? __pfx____sys_sendmsg+0x10/0x10 [ 1193.514396][ T5641] ? kstrtouint+0x6e/0xe0 [ 1193.514446][ T5641] ? __fget_files+0x2a/0x420 [ 1193.514471][ T5641] ? __fget_files+0x3a2/0x420 [ 1193.514511][ T5641] __sys_sendmmsg+0x273/0x4d0 [ 1193.514538][ T5641] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1193.514568][ T5641] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1193.514613][ T5641] ? ksys_write+0x242/0x270 [ 1193.514642][ T5641] ? __pfx_ksys_write+0x10/0x10 [ 1193.514676][ T5641] __x64_sys_sendmmsg+0xa0/0xc0 [ 1193.514698][ T5641] do_syscall_64+0x166/0x520 [ 1193.514726][ T5641] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1193.514746][ T5641] ? clear_bhb_loop+0x70/0xc0 [ 1193.514770][ T5641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1193.514789][ T5641] RIP: 0033:0x7f159639e159 [ 1193.514807][ T5641] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1193.514825][ T5641] RSP: 002b:00007f159719e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1193.514846][ T5641] RAX: ffffffffffffffda RBX: 00007f1596626090 RCX: 00007f159639e159 [ 1193.514860][ T5641] RDX: 0400000000000235 RSI: 0000200000000000 RDI: 0000000000000005 [ 1193.514874][ T5641] RBP: 00007f159719e090 R08: 0000000000000000 R09: 0000000000000000 [ 1193.514886][ T5641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1193.514898][ T5641] R13: 00007f1596626128 R14: 00007f1596626090 R15: 00007fffcc729018 [ 1193.514929][ T5641] [ 1194.071483][ T5644] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8531'. [ 1194.116117][ T5644] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8531'. [ 1194.296221][ T5649] mac80211_hwsim hwsim68 syzkaller0: entered promiscuous mode [ 1194.305730][ T5649] mac80211_hwsim hwsim68 syzkaller0: entered allmulticast mode [ 1195.144708][ T5673] xt_IDLETIMER: label is empty or not nul-terminated [ 1196.011035][ T5708] syzkaller0: entered promiscuous mode [ 1196.012443][ T5708] syzkaller0: entered allmulticast mode [ 1196.198286][ T5714] FAULT_INJECTION: forcing a failure. [ 1196.198286][ T5714] name failslab, interval 1, probability 0, space 0, times 0 [ 1196.199028][ T5714] CPU: 0 UID: 0 PID: 5714 Comm: syz.3.8551 Not tainted syzkaller #0 PREEMPT(full) [ 1196.199053][ T5714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1196.199065][ T5714] Call Trace: [ 1196.199073][ T5714] [ 1196.199082][ T5714] dump_stack_lvl+0xe8/0x150 [ 1196.199115][ T5714] should_fail_ex+0x410/0x560 [ 1196.199149][ T5714] should_failslab+0xa8/0x100 [ 1196.199174][ T5714] __kmalloc_noprof+0xfe/0x720 [ 1196.199201][ T5714] ? rcu_is_watching+0x16/0xb0 [ 1196.199225][ T5714] ? tomoyo_realpath_from_path+0xef/0x640 [ 1196.199247][ T5714] ? tomoyo_realpath_from_path+0xef/0x640 [ 1196.199276][ T5714] tomoyo_realpath_from_path+0xef/0x640 [ 1196.199308][ T5714] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1196.199337][ T5714] tomoyo_path_number_perm+0x246/0x5f0 [ 1196.199368][ T5714] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1196.199398][ T5714] ? __lock_acquire+0x6df/0x2e50 [ 1196.199433][ T5714] ? hook_file_ioctl+0x1f2/0x600 [ 1196.199474][ T5714] ? __fget_files+0x2a/0x420 [ 1196.199501][ T5714] ? __fget_files+0x2a/0x420 [ 1196.199524][ T5714] ? __fget_files+0x3a2/0x420 [ 1196.199546][ T5714] ? __fget_files+0x2a/0x420 [ 1196.199574][ T5714] security_file_ioctl+0xc3/0x2a0 [ 1196.199604][ T5714] __se_sys_ioctl+0x47/0x170 [ 1196.199626][ T5714] do_syscall_64+0x166/0x520 [ 1196.199653][ T5714] ? trace_irq_disable+0x3b/0x140 [ 1196.199672][ T5714] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1196.199693][ T5714] ? clear_bhb_loop+0x70/0xc0 [ 1196.199716][ T5714] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1196.199735][ T5714] RIP: 0033:0x7fa13499e159 [ 1196.199754][ T5714] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1196.199771][ T5714] RSP: 002b:00007fa1357c4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1196.199792][ T5714] RAX: ffffffffffffffda RBX: 00007fa134c25fa0 RCX: 00007fa13499e159 [ 1196.199813][ T5714] RDX: 0000200000000000 RSI: 00000000800442d2 RDI: 0000000000000004 [ 1196.199827][ T5714] RBP: 00007fa1357c4090 R08: 0000000000000000 R09: 0000000000000000 [ 1196.199839][ T5714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1196.199851][ T5714] R13: 00007fa134c26038 R14: 00007fa134c25fa0 R15: 00007ffe5931f008 [ 1196.199884][ T5714] [ 1196.229477][ T5714] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1197.763764][ T5759] __nla_validate_parse: 6 callbacks suppressed [ 1197.763949][ T5759] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8561'. [ 1197.763977][ T5759] netlink: 'syz.3.8561': attribute type 8 has an invalid length. [ 1197.763989][ T5759] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8561'. [ 1197.912067][ T5764] FAULT_INJECTION: forcing a failure. [ 1197.912067][ T5764] name failslab, interval 1, probability 0, space 0, times 0 [ 1197.912119][ T5764] CPU: 0 UID: 0 PID: 5764 Comm: syz.3.8561 Not tainted syzkaller #0 PREEMPT(full) [ 1197.912141][ T5764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1197.912152][ T5764] Call Trace: [ 1197.912159][ T5764] [ 1197.912167][ T5764] dump_stack_lvl+0xe8/0x150 [ 1197.912197][ T5764] should_fail_ex+0x410/0x560 [ 1197.912224][ T5764] ? __alloc_skb+0x1db/0x7a0 [ 1197.912252][ T5764] should_failslab+0xa8/0x100 [ 1197.912275][ T5764] ? __alloc_skb+0x1db/0x7a0 [ 1197.912300][ T5764] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 1197.912328][ T5764] ? __alloc_skb+0x18d/0x7a0 [ 1197.912356][ T5764] ? __alloc_skb+0x1db/0x7a0 [ 1197.912389][ T5764] __alloc_skb+0x1db/0x7a0 [ 1197.912420][ T5764] netlink_sendmsg+0x5d4/0xb40 [ 1197.912454][ T5764] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1197.912485][ T5764] ? apparmor_socket_sendmsg+0x98/0x360 [ 1197.912516][ T5764] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1197.912538][ T5764] sock_sendmsg_nosec+0x13a/0x180 [ 1197.912566][ T5764] ____sys_sendmsg+0x54e/0x850 [ 1197.912591][ T5764] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1197.912621][ T5764] ? import_iovec+0x73/0xa0 [ 1197.912646][ T5764] ___sys_sendmsg+0x2a5/0x360 [ 1197.912674][ T5764] ? __lock_acquire+0x6df/0x2e50 [ 1197.912698][ T5764] ? __pfx____sys_sendmsg+0x10/0x10 [ 1197.912724][ T5764] ? kstrtouint+0x6e/0xe0 [ 1197.912774][ T5764] ? __fget_files+0x2a/0x420 [ 1197.912797][ T5764] ? __fget_files+0x3a2/0x420 [ 1197.912831][ T5764] __sys_sendmmsg+0x273/0x4d0 [ 1197.912857][ T5764] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1197.912888][ T5764] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1197.912930][ T5764] ? ksys_write+0x242/0x270 [ 1197.912958][ T5764] ? __pfx_ksys_write+0x10/0x10 [ 1197.912990][ T5764] __x64_sys_sendmmsg+0xa0/0xc0 [ 1197.913016][ T5764] do_syscall_64+0x166/0x520 [ 1197.913042][ T5764] ? trace_irq_disable+0x3b/0x140 [ 1197.913061][ T5764] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1197.913081][ T5764] ? clear_bhb_loop+0x70/0xc0 [ 1197.913104][ T5764] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1197.913123][ T5764] RIP: 0033:0x7fa13499e159 [ 1197.913141][ T5764] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1197.913158][ T5764] RSP: 002b:00007fa1357a3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1197.913178][ T5764] RAX: ffffffffffffffda RBX: 00007fa134c26090 RCX: 00007fa13499e159 [ 1197.913193][ T5764] RDX: 0400000000000235 RSI: 0000200000000000 RDI: 0000000000000005 [ 1197.913206][ T5764] RBP: 00007fa1357a3090 R08: 0000000000000000 R09: 0000000000000000 [ 1197.913219][ T5764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1197.913230][ T5764] R13: 00007fa134c26128 R14: 00007fa134c26090 R15: 00007ffe5931f008 [ 1197.913261][ T5764] [ 1198.739774][ T5776] IPVS: set_ctl: invalid protocol: 58 224.0.0.1:20000 [ 1198.777642][ T5775] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8566'. [ 1198.777684][ T5775] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8566'. [ 1198.777724][ T5775] netlink: 'syz.4.8566': attribute type 15 has an invalid length. [ 1198.862601][ T5783] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8566'. [ 1198.874409][ T5779] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8568'. [ 1199.029359][ T49] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 256 - 0 [ 1199.030318][ T49] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0 [ 1199.030424][ T49] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0 [ 1199.030464][ T49] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0 [ 1199.132363][ T5776] IPVS: set_ctl: invalid protocol: 43 10.1.1.0:20001 [ 1199.350646][ T35] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1199.350925][ T35] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1199.371431][T31896] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1199.675766][ T5798] netlink: 72 bytes leftover after parsing attributes in process `syz.4.8570'. [ 1199.899376][ T1682] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1199.989907][T31896] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1200.011793][ T5810] FAULT_INJECTION: forcing a failure. [ 1200.011793][ T5810] name failslab, interval 1, probability 0, space 0, times 0 [ 1200.011998][ T5810] CPU: 1 UID: 0 PID: 5810 Comm: syz.5.8574 Not tainted syzkaller #0 PREEMPT(full) [ 1200.012019][ T5810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1200.012030][ T5810] Call Trace: [ 1200.012038][ T5810] [ 1200.012045][ T5810] dump_stack_lvl+0xe8/0x150 [ 1200.012077][ T5810] should_fail_ex+0x410/0x560 [ 1200.012109][ T5810] should_failslab+0xa8/0x100 [ 1200.012134][ T5810] __kmalloc_noprof+0xfe/0x720 [ 1200.012162][ T5810] ? tomoyo_encode+0x2ad/0x570 [ 1200.012182][ T5810] ? tomoyo_encode+0x2ad/0x570 [ 1200.012208][ T5810] tomoyo_encode+0x2ad/0x570 [ 1200.012233][ T5810] tomoyo_realpath_from_path+0x5fa/0x640 [ 1200.012263][ T5810] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1200.012291][ T5810] tomoyo_path_number_perm+0x246/0x5f0 [ 1200.012320][ T5810] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1200.012345][ T5810] ? __lock_acquire+0x6df/0x2e50 [ 1200.012378][ T5810] ? hook_file_ioctl+0x1f2/0x600 [ 1200.012416][ T5810] ? __fget_files+0x2a/0x420 [ 1200.012441][ T5810] ? __fget_files+0x2a/0x420 [ 1200.012463][ T5810] ? __fget_files+0x3a2/0x420 [ 1200.012484][ T5810] ? __fget_files+0x2a/0x420 [ 1200.012517][ T5810] security_file_ioctl+0xc3/0x2a0 [ 1200.012545][ T5810] __se_sys_ioctl+0x47/0x170 [ 1200.012566][ T5810] do_syscall_64+0x166/0x520 [ 1200.012592][ T5810] ? trace_irq_disable+0x3b/0x140 [ 1200.012609][ T5810] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1200.012629][ T5810] ? clear_bhb_loop+0x70/0xc0 [ 1200.012651][ T5810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1200.012669][ T5810] RIP: 0033:0x7f159639e159 [ 1200.012686][ T5810] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1200.012702][ T5810] RSP: 002b:00007f15971bf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1200.012721][ T5810] RAX: ffffffffffffffda RBX: 00007f1596625fa0 RCX: 00007f159639e159 [ 1200.012734][ T5810] RDX: 0000200000000000 RSI: 00000000800442d2 RDI: 0000000000000004 [ 1200.012747][ T5810] RBP: 00007f15971bf090 R08: 0000000000000000 R09: 0000000000000000 [ 1200.012758][ T5810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1200.012769][ T5810] R13: 00007f1596626038 R14: 00007f1596625fa0 R15: 00007fffcc729018 [ 1200.012800][ T5810] [ 1200.012818][ T5810] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1201.473425][ T5844] netlink: 56 bytes leftover after parsing attributes in process `syz.3.8587'. [ 1201.517807][ T5847] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 1202.583401][ T7065] IPVS: starting estimator thread 0... [ 1202.604895][ T5862] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8593'. [ 1202.618611][ T5863] netlink: 'syz.4.8594': attribute type 1 has an invalid length. [ 1202.678513][ T5865] IPVS: using max 29 ests per chain, 69600 per kthread [ 1203.436845][ T5877] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8600'. [ 1203.579971][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1203.793855][ T5888] FAULT_INJECTION: forcing a failure. [ 1203.793855][ T5888] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1203.809680][ T5888] CPU: 0 UID: 0 PID: 5888 Comm: syz.3.8605 Not tainted syzkaller #0 PREEMPT(full) [ 1203.809709][ T5888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1203.809722][ T5888] Call Trace: [ 1203.809731][ T5888] [ 1203.809740][ T5888] dump_stack_lvl+0xe8/0x150 [ 1203.809775][ T5888] should_fail_ex+0x410/0x560 [ 1203.809808][ T5888] _copy_from_user+0x2d/0xb0 [ 1203.809830][ T5888] do_bnep_sock_ioctl+0x2cd/0x650 [ 1203.809864][ T5888] ? __pfx_do_bnep_sock_ioctl+0x10/0x10 [ 1203.809899][ T5888] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1203.809946][ T5888] sock_do_ioctl+0x101/0x320 [ 1203.809974][ T5888] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1203.809996][ T5888] ? hook_file_ioctl+0x1f2/0x600 [ 1203.810030][ T5888] sock_ioctl+0x57a/0x7e0 [ 1203.810056][ T5888] ? __pfx_sock_ioctl+0x10/0x10 [ 1203.810080][ T5888] ? __fget_files+0x2a/0x420 [ 1203.810104][ T5888] ? __fget_files+0x3a2/0x420 [ 1203.810127][ T5888] ? __fget_files+0x2a/0x420 [ 1203.810154][ T5888] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1203.810180][ T5888] ? __pfx_sock_ioctl+0x10/0x10 [ 1203.810204][ T5888] __se_sys_ioctl+0xfc/0x170 [ 1203.810225][ T5888] do_syscall_64+0x166/0x520 [ 1203.810252][ T5888] ? trace_irq_disable+0x3b/0x140 [ 1203.810271][ T5888] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1203.810298][ T5888] ? clear_bhb_loop+0x70/0xc0 [ 1203.810321][ T5888] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1203.810341][ T5888] RIP: 0033:0x7fa13499e159 [ 1203.810359][ T5888] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1203.810377][ T5888] RSP: 002b:00007fa1357c4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1203.810398][ T5888] RAX: ffffffffffffffda RBX: 00007fa134c25fa0 RCX: 00007fa13499e159 [ 1203.810412][ T5888] RDX: 0000200000000000 RSI: 00000000800442d2 RDI: 0000000000000004 [ 1203.810425][ T5888] RBP: 00007fa1357c4090 R08: 0000000000000000 R09: 0000000000000000 [ 1203.810437][ T5888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1203.810449][ T5888] R13: 00007fa134c26038 R14: 00007fa134c25fa0 R15: 00007ffe5931f008 [ 1203.810481][ T5888] [ 1204.522677][ T5898] FAULT_INJECTION: forcing a failure. [ 1204.522677][ T5898] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1204.536423][ T5898] CPU: 0 UID: 0 PID: 5898 Comm: syz.3.8608 Not tainted syzkaller #0 PREEMPT(full) [ 1204.536450][ T5898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1204.536461][ T5898] Call Trace: [ 1204.536471][ T5898] [ 1204.536481][ T5898] dump_stack_lvl+0xe8/0x150 [ 1204.536514][ T5898] should_fail_ex+0x410/0x560 [ 1204.536548][ T5898] _copy_from_user+0x2d/0xb0 [ 1204.536571][ T5898] ___sys_recvmsg+0x173/0x5a0 [ 1204.536599][ T5898] ? __pfx____sys_recvmsg+0x10/0x10 [ 1204.536626][ T5898] ? lock_acquire+0x115/0x350 [ 1204.536662][ T5898] ? __fget_files+0x3a2/0x420 [ 1204.536697][ T5898] __x64_sys_recvmsg+0x1ae/0x290 [ 1204.536722][ T5898] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 1204.536763][ T5898] do_syscall_64+0x166/0x520 [ 1204.536790][ T5898] ? trace_irq_disable+0x3b/0x140 [ 1204.536808][ T5898] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1204.536828][ T5898] ? clear_bhb_loop+0x70/0xc0 [ 1204.536851][ T5898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1204.536871][ T5898] RIP: 0033:0x7fa13499e159 [ 1204.536893][ T5898] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1204.536910][ T5898] RSP: 002b:00007fa1357c4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1204.536930][ T5898] RAX: ffffffffffffffda RBX: 00007fa134c25fa0 RCX: 00007fa13499e159 [ 1204.536945][ T5898] RDX: 0000000000000000 RSI: 0000200000000900 RDI: 0000000000000003 [ 1204.536957][ T5898] RBP: 00007fa1357c4090 R08: 0000000000000000 R09: 0000000000000000 [ 1204.536969][ T5898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1204.536981][ T5898] R13: 00007fa134c26038 R14: 00007fa134c25fa0 R15: 00007ffe5931f008 [ 1204.537012][ T5898] [ 1205.234408][ T5922] syz.3.8612 (5922) used obsolete PPPIOCDETACH ioctl [ 1205.827682][ T5943] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 1205.827725][ T5943] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1206.113738][ T5944] netlink: 64 bytes leftover after parsing attributes in process `syz.4.8619'. [ 1206.146894][ T5950] netlink: 60 bytes leftover after parsing attributes in process `syz.6.8623'. [ 1206.182325][ T5944] syzkaller1: entered promiscuous mode [ 1206.189751][ T5944] syzkaller1: entered allmulticast mode [ 1207.293242][ T5980] FAULT_INJECTION: forcing a failure. [ 1207.293242][ T5980] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1207.294627][ T5980] CPU: 1 UID: 0 PID: 5980 Comm: syz.5.8634 Not tainted syzkaller #0 PREEMPT(full) [ 1207.294652][ T5980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1207.294664][ T5980] Call Trace: [ 1207.294672][ T5980] [ 1207.294680][ T5980] dump_stack_lvl+0xe8/0x150 [ 1207.294711][ T5980] should_fail_ex+0x410/0x560 [ 1207.294744][ T5980] _copy_to_user+0x31/0xb0 [ 1207.294767][ T5980] do_bnep_sock_ioctl+0x4b5/0x650 [ 1207.294797][ T5980] ? __pfx_do_bnep_sock_ioctl+0x10/0x10 [ 1207.294831][ T5980] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1207.294875][ T5980] sock_do_ioctl+0x101/0x320 [ 1207.294902][ T5980] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1207.294923][ T5980] ? hook_file_ioctl+0x1f2/0x600 [ 1207.294956][ T5980] sock_ioctl+0x57a/0x7e0 [ 1207.294980][ T5980] ? __pfx_sock_ioctl+0x10/0x10 [ 1207.295002][ T5980] ? __fget_files+0x2a/0x420 [ 1207.295025][ T5980] ? __fget_files+0x3a2/0x420 [ 1207.295055][ T5980] ? __fget_files+0x2a/0x420 [ 1207.295080][ T5980] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1207.295105][ T5980] ? __pfx_sock_ioctl+0x10/0x10 [ 1207.295127][ T5980] __se_sys_ioctl+0xfc/0x170 [ 1207.295147][ T5980] do_syscall_64+0x166/0x520 [ 1207.295173][ T5980] ? trace_irq_disable+0x3b/0x140 [ 1207.295191][ T5980] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1207.295210][ T5980] ? clear_bhb_loop+0x70/0xc0 [ 1207.295232][ T5980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1207.295251][ T5980] RIP: 0033:0x7f159639e159 [ 1207.295275][ T5980] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1207.295291][ T5980] RSP: 002b:00007f15971bf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1207.295311][ T5980] RAX: ffffffffffffffda RBX: 00007f1596625fa0 RCX: 00007f159639e159 [ 1207.295324][ T5980] RDX: 0000200000000000 RSI: 00000000800442d2 RDI: 0000000000000004 [ 1207.295337][ T5980] RBP: 00007f15971bf090 R08: 0000000000000000 R09: 0000000000000000 [ 1207.295349][ T5980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1207.295361][ T5980] R13: 00007f1596626038 R14: 00007f1596625fa0 R15: 00007fffcc729018 [ 1207.295390][ T5980] [ 1207.552498][ T5983] Unsupported ieee802154 address type: 0 [ 1207.617940][ T5984] ip_tables: iptables: counters copy to user failed while replacing table [ 1207.786400][ T5986] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 1207.805526][ T5988] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8636'. [ 1207.805577][ T5988] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8636'. [ 1208.375927][ T6002] netlink: 'syz.1.8643': attribute type 1 has an invalid length. [ 1208.470358][ T6002] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8643'. [ 1208.932298][ T6020] netlink: 420 bytes leftover after parsing attributes in process `syz.1.8649'. [ 1208.947009][ T6020] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8649'. [ 1209.011730][ T6020] netlink: 'syz.1.8649': attribute type 1 has an invalid length. [ 1209.128825][ T6025] netlink: NAT flags may be given only when NAT range (SRC or DST) is also specified. [ 1209.128877][ T6025] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1209.404741][ T6020] bond0: option mode: invalid value (14) [ 1209.423188][ T6020] bond0 (unregistering): Released all slaves [ 1209.514462][ T6031] netlink: 76 bytes leftover after parsing attributes in process `syz.6.8652'. [ 1210.861463][ T6062] netlink: 'syz.4.8656': attribute type 16 has an invalid length. [ 1210.861505][ T6062] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.8656'. [ 1211.077207][ T6064] netlink: 'syz.3.8658': attribute type 1 has an invalid length. [ 1211.095602][ T6061] wg0 speed is unknown, defaulting to 1000 [ 1211.114117][ T6061] hsr0 speed is unknown, defaulting to 1000 [ 1211.122161][ T6064] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8658'. [ 1211.145161][ T6061] lo speed is unknown, defaulting to 1000 [ 1211.272763][ T6069] netlink: 'syz.5.8659': attribute type 4 has an invalid length. [ 1212.538574][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1212.734771][ T6106] FAULT_INJECTION: forcing a failure. [ 1212.734771][ T6106] name failslab, interval 1, probability 0, space 0, times 0 [ 1212.757306][ T6106] CPU: 0 UID: 0 PID: 6106 Comm: syz.4.8672 Not tainted syzkaller #0 PREEMPT(full) [ 1212.757336][ T6106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1212.757348][ T6106] Call Trace: [ 1212.757357][ T6106] [ 1212.757366][ T6106] dump_stack_lvl+0xe8/0x150 [ 1212.757400][ T6106] should_fail_ex+0x410/0x560 [ 1212.757435][ T6106] should_failslab+0xa8/0x100 [ 1212.757461][ T6106] __kmalloc_cache_noprof+0xa3/0x600 [ 1212.757490][ T6106] ? __kmalloc_cache_noprof+0x14d/0x600 [ 1212.757517][ T6106] ? sctp_add_bind_addr+0x8c/0x370 [ 1212.757538][ T6106] ? sctp_add_bind_addr+0x8c/0x370 [ 1212.757567][ T6106] sctp_add_bind_addr+0x8c/0x370 [ 1212.757594][ T6106] sctp_copy_local_addr_list+0x31a/0x4e0 [ 1212.757620][ T6106] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 1212.757642][ T6106] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1212.757665][ T6106] ? sctp_v6_is_any+0x64/0x80 [ 1212.757689][ T6106] ? sctp_copy_one_addr+0x93/0x360 [ 1212.757712][ T6106] sctp_bind_addr_copy+0xb3/0x3c0 [ 1212.757736][ T6106] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1212.757759][ T6106] sctp_connect_new_asoc+0x2ff/0x6b0 [ 1212.757790][ T6106] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1212.757826][ T6106] ? __local_bh_enable_ip+0xd6/0x140 [ 1212.757848][ T6106] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1212.757872][ T6106] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1212.757901][ T6106] sctp_sendmsg+0x159b/0x2d00 [ 1212.757936][ T6106] ? kstrtouint+0x6e/0xe0 [ 1212.757962][ T6106] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1212.757988][ T6106] ? lock_acquire+0x115/0x350 [ 1212.758009][ T6106] ? get_pid_task+0x20/0x1f0 [ 1212.758045][ T6106] ? aa_sock_msg_perm+0xf5/0x210 [ 1212.758065][ T6106] ? sock_rps_record_flow+0x19/0x350 [ 1212.758094][ T6106] ? inet_sendmsg+0x298/0x320 [ 1212.758120][ T6106] ? __pfx_inet_sendmsg+0x10/0x10 [ 1212.758143][ T6106] sock_sendmsg_nosec+0x10e/0x180 [ 1212.758173][ T6106] __sys_sendto+0x408/0x5a0 [ 1212.758200][ T6106] ? ksys_write+0x1e6/0x270 [ 1212.758230][ T6106] ? __pfx___sys_sendto+0x10/0x10 [ 1212.758256][ T6106] ? __mutex_unlock_slowpath+0x731/0x900 [ 1212.758314][ T6106] ? __pfx_ksys_write+0x10/0x10 [ 1212.758341][ T6106] __x64_sys_sendto+0xde/0x100 [ 1212.758363][ T6106] do_syscall_64+0x166/0x520 [ 1212.758386][ T6106] ? trace_irq_disable+0x3b/0x140 [ 1212.758402][ T6106] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1212.758421][ T6106] ? clear_bhb_loop+0x70/0xc0 [ 1212.758443][ T6106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1212.758466][ T6106] RIP: 0033:0x7f18c599e159 [ 1212.758485][ T6106] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1212.758501][ T6106] RSP: 002b:00007f18c6799028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1212.758523][ T6106] RAX: ffffffffffffffda RBX: 00007f18c5c25fa0 RCX: 00007f18c599e159 [ 1212.758538][ T6106] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000004 [ 1212.758551][ T6106] RBP: 00007f18c6799090 R08: 000020000005ffe4 R09: 000000000000001c [ 1212.758564][ T6106] R10: 00000000000000e0 R11: 0000000000000246 R12: 0000000000000002 [ 1212.758576][ T6106] R13: 00007f18c5c26038 R14: 00007f18c5c25fa0 R15: 00007fffbfe00578 [ 1212.758609][ T6106] [ 1213.188082][ T6108] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8673'. [ 1213.499163][ T6089] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8666'. [ 1213.519937][ T6089] netlink: 'syz.5.8666': attribute type 4 has an invalid length. [ 1213.520129][ T6089] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8666'. [ 1213.931812][ T6123] netlink: 244 bytes leftover after parsing attributes in process `syz.1.8676'. [ 1215.281607][ T6158] TCP: TCP_TX_DELAY enabled [ 1215.543386][ T6160] netlink: 'syz.6.8685': attribute type 1 has an invalid length. [ 1215.811357][ T6164] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8687'. [ 1215.973492][ T6174] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8686'. [ 1216.117483][ T6182] netlink: 'syz.1.8692': attribute type 26 has an invalid length. [ 1216.205195][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888044822c00: rx timeout, send abort [ 1216.494595][ T6186] FAULT_INJECTION: forcing a failure. [ 1216.494595][ T6186] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1216.523783][ T6186] CPU: 0 UID: 0 PID: 6186 Comm: syz.5.8694 Not tainted syzkaller #0 PREEMPT(full) [ 1216.523812][ T6186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1216.523824][ T6186] Call Trace: [ 1216.523834][ T6186] [ 1216.523844][ T6186] dump_stack_lvl+0xe8/0x150 [ 1216.523878][ T6186] should_fail_ex+0x410/0x560 [ 1216.523913][ T6186] _copy_from_user+0x2d/0xb0 [ 1216.523935][ T6186] kstrtouint_from_user+0xd6/0x180 [ 1216.523972][ T6186] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1216.524008][ T6186] ? lock_acquire+0x115/0x350 [ 1216.524033][ T6186] proc_fail_nth_write+0x8e/0x210 [ 1216.524061][ T6186] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1216.524098][ T6186] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1216.524125][ T6186] vfs_write+0x296/0xba0 [ 1216.524160][ T6186] ? __pfx_vfs_write+0x10/0x10 [ 1216.524189][ T6186] ? __fget_files+0x2a/0x420 [ 1216.524218][ T6186] ? __fget_files+0x3a2/0x420 [ 1216.524241][ T6186] ? __fget_files+0x2a/0x420 [ 1216.524274][ T6186] ksys_write+0x150/0x270 [ 1216.524303][ T6186] ? __pfx_ksys_write+0x10/0x10 [ 1216.524328][ T6186] ? __pfx_sock_ioctl+0x10/0x10 [ 1216.524362][ T6186] do_syscall_64+0x166/0x520 [ 1216.524390][ T6186] ? trace_irq_disable+0x3b/0x140 [ 1216.524408][ T6186] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1216.524428][ T6186] ? clear_bhb_loop+0x70/0xc0 [ 1216.524451][ T6186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1216.524471][ T6186] RIP: 0033:0x7f159635e98e [ 1216.524490][ T6186] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1216.524507][ T6186] RSP: 002b:00007f15971befe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1216.524528][ T6186] RAX: ffffffffffffffda RBX: 00007f15971bf6c0 RCX: 00007f159635e98e [ 1216.524542][ T6186] RDX: 0000000000000001 RSI: 00007f15971bf0a0 RDI: 0000000000000003 [ 1216.524554][ T6186] RBP: 00007f15971bf090 R08: 0000000000000000 R09: 0000000000000000 [ 1216.524566][ T6186] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1216.524578][ T6186] R13: 00007f1596626038 R14: 00007f1596625fa0 R15: 00007fffcc729018 [ 1216.524610][ T6186] [ 1216.935350][ T6182] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1216.987704][ T6182] bond0 (unregistering): Released all slaves [ 1217.192256][ T6193] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8695'. [ 1217.343467][ T6194] netlink: 'syz.4.8696': attribute type 1 has an invalid length. [ 1218.037135][ T6216] x_tables: duplicate underflow at hook 1 [ 1218.071054][ T6218] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 1218.331091][ T6224] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8705'. [ 1218.426131][ T6231] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8710'. [ 1218.450673][ T6231] macsec1: entered promiscuous mode [ 1218.456308][ T6231] bridge0: entered promiscuous mode [ 1218.472916][ T6231] macsec1: entered allmulticast mode [ 1218.478900][ T6231] bridge0: entered allmulticast mode [ 1218.485182][ T6231] bridge0: port 3(macsec1) entered blocking state [ 1218.493827][ T6231] bridge0: port 3(macsec1) entered disabled state [ 1218.537778][ T6231] bridge0: left allmulticast mode [ 1218.537823][ T6231] bridge0: left promiscuous mode [ 1218.653262][ T6238] FAULT_INJECTION: forcing a failure. [ 1218.653262][ T6238] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1218.670209][ T6238] CPU: 0 UID: 0 PID: 6238 Comm: syz.1.8711 Not tainted syzkaller #0 PREEMPT(full) [ 1218.670238][ T6238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1218.670249][ T6238] Call Trace: [ 1218.670258][ T6238] [ 1218.670267][ T6238] dump_stack_lvl+0xe8/0x150 [ 1218.670300][ T6238] should_fail_ex+0x410/0x560 [ 1218.670334][ T6238] _copy_from_user+0x2d/0xb0 [ 1218.670356][ T6238] core_sys_select+0x509/0xb40 [ 1218.670378][ T6238] ? get_pid_task+0x20/0x1f0 [ 1218.670411][ T6238] ? __pfx_core_sys_select+0x10/0x10 [ 1218.670456][ T6238] ? __pfx_set_user_sigmask+0x10/0x10 [ 1218.670482][ T6238] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1218.670519][ T6238] __se_sys_pselect6+0x267/0x320 [ 1218.670547][ T6238] ? __pfx___se_sys_pselect6+0x10/0x10 [ 1218.670568][ T6238] ? __pfx_ksys_write+0x10/0x10 [ 1218.670600][ T6238] ? __x64_sys_pselect6+0x21/0xf0 [ 1218.670625][ T6238] do_syscall_64+0x166/0x520 [ 1218.670651][ T6238] ? trace_irq_disable+0x3b/0x140 [ 1218.670670][ T6238] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1218.670690][ T6238] ? clear_bhb_loop+0x70/0xc0 [ 1218.670713][ T6238] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1218.670733][ T6238] RIP: 0033:0x7f799ad9e159 [ 1218.670752][ T6238] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1218.670769][ T6238] RSP: 002b:00007f799bd15028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 1218.670790][ T6238] RAX: ffffffffffffffda RBX: 00007f799b025fa0 RCX: 00007f799ad9e159 [ 1218.670805][ T6238] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000040 [ 1218.670818][ T6238] RBP: 00007f799bd15090 R08: 0000000000000000 R09: 0000000000000000 [ 1218.670830][ T6238] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 1218.670843][ T6238] R13: 00007f799b026038 R14: 00007f799b025fa0 R15: 00007ffe8a0ef6f8 [ 1218.670874][ T6238] [ 1219.881255][ T6258] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8721'. [ 1220.858259][ T6280] netlink: 'syz.3.8728': attribute type 1 has an invalid length. [ 1221.226849][ T6296] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8733'. [ 1221.699384][ T6311] netlink: 28 bytes leftover after parsing attributes in process `syz.6.8738'. [ 1221.848139][ T6313] netlink: 88 bytes leftover after parsing attributes in process `syz.3.8739'. [ 1221.864913][ T6313] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8739'. [ 1223.970427][ T6325] netlink: 'syz.6.8742': attribute type 5 has an invalid length. [ 1223.970652][ T6325] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8742'. [ 1227.013376][ C0] sched: DL replenish lagged too much [ 1230.464164][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1234.673803][ T6347] FAULT_INJECTION: forcing a failure. [ 1234.673803][ T6347] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1234.687747][ T6347] CPU: 0 UID: 0 PID: 6347 Comm: syz.5.8750 Not tainted syzkaller #0 PREEMPT(full) [ 1234.687775][ T6347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1234.687786][ T6347] Call Trace: [ 1234.687794][ T6347] [ 1234.687804][ T6347] dump_stack_lvl+0xe8/0x150 [ 1234.687838][ T6347] should_fail_ex+0x410/0x560 [ 1234.687874][ T6347] _copy_from_user+0x2d/0xb0 [ 1234.687895][ T6347] core_sys_select+0x671/0xb40 [ 1234.687918][ T6347] ? get_pid_task+0x20/0x1f0 [ 1234.687950][ T6347] ? __pfx_core_sys_select+0x10/0x10 [ 1234.687996][ T6347] ? __pfx_set_user_sigmask+0x10/0x10 [ 1234.688021][ T6347] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1234.688060][ T6347] __se_sys_pselect6+0x267/0x320 [ 1234.688087][ T6347] ? __pfx___se_sys_pselect6+0x10/0x10 [ 1234.688109][ T6347] ? __pfx_ksys_write+0x10/0x10 [ 1234.688140][ T6347] ? __x64_sys_pselect6+0x21/0xf0 [ 1234.688164][ T6347] do_syscall_64+0x166/0x520 [ 1234.688198][ T6347] ? trace_irq_disable+0x3b/0x140 [ 1234.688218][ T6347] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1234.688238][ T6347] ? clear_bhb_loop+0x70/0xc0 [ 1234.688261][ T6347] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1234.688280][ T6347] RIP: 0033:0x7f159639e159 [ 1234.688298][ T6347] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1234.688315][ T6347] RSP: 002b:00007f15971bf028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 1234.688337][ T6347] RAX: ffffffffffffffda RBX: 00007f1596625fa0 RCX: 00007f159639e159 [ 1234.688350][ T6347] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000040 [ 1234.688362][ T6347] RBP: 00007f15971bf090 R08: 0000000000000000 R09: 0000000000000000 [ 1234.688374][ T6347] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 1234.688386][ T6347] R13: 00007f1596626038 R14: 00007f1596625fa0 R15: 00007fffcc729018 [ 1234.688417][ T6347] [ 1235.069856][ T6352] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8752'. [ 1235.069955][ T6352] bridge_slave_1: left allmulticast mode [ 1235.069993][ T6352] bridge_slave_1: left promiscuous mode [ 1235.070216][ T6352] bridge0: port 2(bridge_slave_1) entered disabled state [ 1235.156705][ T6352] bridge_slave_0: left allmulticast mode [ 1235.168096][ T6352] bridge_slave_0: left promiscuous mode [ 1235.176745][ T6352] bridge0: port 1(bridge_slave_0) entered disabled state [ 1235.215057][ T6355] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8753'. [ 1235.517814][ T6365] netlink: 65047 bytes leftover after parsing attributes in process `syz.5.8755'. [ 1235.532738][ T6365] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8755'. [ 1235.757094][ T6372] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8758'. [ 1237.168269][ T6398] lo: entered promiscuous mode [ 1237.175395][ T6398] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1266.955742][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1324.313003][ T3862] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1324.883863][ T3862] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1324.901146][ T3862] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1324.903110][ T3862] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1324.904520][ T3862] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1329.351192][ T3862] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 1329.353045][ T4932] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1330.538747][ T3862] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1331.983901][ T6438] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1334.068428][ T6432] Bluetooth: hci6: Opcode 0x1001 failed: -110 [ 1339.368964][ T6438] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1339.728837][ T6438] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1339.747466][ T6438] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1339.968511][ T6438] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1340.113193][ T6438] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1341.179394][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1342.549883][ T5616] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1343.913893][ T5616] Bluetooth: hci5: command tx timeout [ 1344.268739][ T5616] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1344.285149][ T5616] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1345.330082][ T3862] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1345.460345][ T3862] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1345.815532][ T3862] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1345.978900][ T6447] Bluetooth: hci5: command tx timeout [ 1347.939349][ T5616] Bluetooth: hci8: Opcode 0x1003 failed: -110 [ 1348.072850][ T5616] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1348.080945][ T6438] Bluetooth: hci5: command tx timeout [ 1348.099784][ T5616] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1348.382184][ T5616] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1349.109231][ T6438] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1349.352451][ T6438] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1350.147384][ T5616] Bluetooth: hci5: command tx timeout [ 1350.479752][ T6447] Bluetooth: hci7: command tx timeout [ 1352.614489][ T5616] Bluetooth: hci7: command tx timeout [ 1352.787395][ T5616] Bluetooth: hci8: command tx timeout [ 1354.869153][ T5616] Bluetooth: hci7: command tx timeout [ 1355.228019][ T6438] Bluetooth: hci8: command tx timeout [ 1357.088383][ T6438] Bluetooth: hci7: command tx timeout [ 1357.478428][ T6438] Bluetooth: hci8: command tx timeout [ 1359.517856][ T6438] Bluetooth: hci8: command tx timeout [ 1414.798482][ T2037] syz_tun (unregistering): left allmulticast mode [ 1466.222596][ T5616] Bluetooth: hci5: command 0x0406 tx timeout [ 1471.276260][ T6447] Bluetooth: hci7: command 0x0406 tx timeout [ 1475.821973][T30692] syz_tun (unregistering): left promiscuous mode [ 1476.646324][ T4932] Bluetooth: hci8: command 0x0406 tx timeout [ 1480.694943][ T4932] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1484.249559][ T4932] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1487.229346][ T6438] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1487.242350][ T6438] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1487.753183][ T6438] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1488.422007][ T6438] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1489.671664][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1492.134428][ T6438] Bluetooth: hci0: command tx timeout [ 1494.278566][ T6438] Bluetooth: hci0: command tx timeout [ 1496.323196][ T6447] Bluetooth: hci0: command tx timeout [ 1498.558603][ T6438] Bluetooth: hci0: command tx timeout [ 1505.199308][ T6447] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1506.721824][ T6447] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1508.596425][ T6447] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1508.648899][ T6447] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1508.825533][ T6447] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1512.438421][ T6438] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 1513.719121][ T5616] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1514.588393][ T6486] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 1515.152404][ T5616] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1516.201569][ T5616] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1517.118506][ T5616] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1519.169805][ T5616] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1519.258662][ T6483] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1520.038740][ T32] INFO: task syz-executor:741 blocked for more than 143 seconds. [ 1520.039599][ T32] Not tainted syzkaller #0 [ 1520.039794][ T32] Blocked by coredump. [ 1520.039970][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1520.040140][ T32] task:syz-executor state:D stack:22192 pid:741 tgid:741 ppid:1 task_flags:0x40054c flags:0x00080003 [ 1520.040516][ T32] Call Trace: [ 1520.040686][ T32] [ 1520.040867][ T32] __schedule+0x17db/0x58f0 [ 1520.041108][ T32] ? stack_trace_save+0xa9/0x100 [ 1520.041302][ T32] ? __pfx_stack_trace_save+0x10/0x10 [ 1520.041494][ T32] ? stack_depot_save_flags+0x33/0x7f0 [ 1520.041693][ T32] ? __pfx___schedule+0x10/0x10 [ 1520.041890][ T32] ? schedule+0x90/0x2b0 [ 1520.042087][ T32] schedule+0x164/0x2b0 [ 1520.042277][ T32] schedule_preempt_disabled+0x13/0x30 [ 1520.042465][ T32] __mutex_lock+0x7c1/0x1550 [ 1520.042661][ T32] ? __mutex_lock+0x5d4/0x1550 [ 1520.042853][ T32] ? tun_chr_close+0x3e/0x1c0 [ 1520.043052][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 1520.043260][ T32] ? __pfx_tun_chr_close+0x10/0x10 [ 1520.043449][ T32] tun_chr_close+0x3e/0x1c0 [ 1520.043637][ T32] ? __pfx_tun_chr_close+0x10/0x10 [ 1520.043826][ T32] __fput+0x418/0xa50 [ 1520.044029][ T32] task_work_run+0x1d9/0x270 [ 1520.044217][ T32] ? __pfx_task_work_run+0x10/0x10 [ 1520.044400][ T32] ? do_exit+0x735/0x2360 [ 1520.044580][ T32] ? kmem_cache_free+0x182/0x650 [ 1520.044761][ T32] ? put_net+0x191/0x260 [ 1520.044957][ T32] do_exit+0x73a/0x2360 [ 1520.045145][ T32] ? lock_acquire+0x115/0x350 [ 1520.045333][ T32] ? __pfx_do_exit+0x10/0x10 [ 1520.045519][ T32] ? do_raw_spin_lock+0x12b/0x2f0 [ 1520.045716][ T32] do_group_exit+0x22d/0x2f0 [ 1520.045895][ T32] ? _raw_spin_unlock_irq+0x23/0x50 [ 1520.046092][ T32] get_signal+0x121b/0x12c0 [ 1520.046300][ T32] arch_do_signal_or_restart+0xbb/0x860 [ 1520.046526][ T32] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 1520.046718][ T32] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1520.046922][ T32] ? __se_sys_clock_nanosleep+0x35b/0x3b0 [ 1520.047122][ T32] exit_to_user_mode_loop+0x10e/0x770 [ 1520.047305][ T32] ? rcu_is_watching+0x16/0xb0 [ 1520.047493][ T32] do_syscall_64+0x328/0x520 [ 1520.047683][ T32] ? trace_irq_disable+0x3b/0x140 [ 1520.047864][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1520.048053][ T32] ? clear_bhb_loop+0x70/0xc0 [ 1520.048238][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1520.879384][ T32] RIP: 0033:0x7f159635e98e [ 1520.879415][ T32] RSP: 002b:00007fffcc7292f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 1520.879438][ T32] RAX: fffffffffffffdfc RBX: 0000555560b24500 RCX: 00007f159635e98e [ 1520.879452][ T32] RDX: 00007fffcc729350 RSI: 0000000000000000 RDI: 0000000000000000 [ 1520.879465][ T32] RBP: 00007fffcc7293bc R08: 0000000000000000 R09: 0000000000000000 [ 1520.879478][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000139 [ 1520.879490][ T32] R13: 0000000000000016 R14: 0000000000134c0a R15: 00007fffcc729410 [ 1520.879522][ T32] [ 1520.879559][ T32] INFO: task syz-executor:4819 blocked for more than 144 seconds. [ 1520.879574][ T32] Not tainted syzkaller #0 [ 1520.879584][ T32] Blocked by coredump. [ 1520.879591][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1520.879599][ T32] task:syz-executor state:D stack:22544 pid:4819 tgid:4819 ppid:1 task_flags:0x40054c flags:0x00080003 [ 1520.879649][ T32] Call Trace: [ 1520.879656][ T32] [ 1520.879668][ T32] __schedule+0x17db/0x58f0 [ 1520.879707][ T32] ? stack_trace_save+0xa9/0x100 [ 1520.879735][ T32] ? __pfx_stack_trace_save+0x10/0x10 [ 1520.879765][ T32] ? stack_depot_save_flags+0x33/0x7f0 [ 1520.879807][ T32] ? __pfx___schedule+0x10/0x10 [ 1520.879842][ T32] ? schedule+0x90/0x2b0 [ 1520.879869][ T32] schedule+0x164/0x2b0 [ 1520.879896][ T32] schedule_preempt_disabled+0x13/0x30 [ 1520.879920][ T32] __mutex_lock+0x7c1/0x1550 [ 1520.879952][ T32] ? __mutex_lock+0x5d4/0x1550 [ 1520.879983][ T32] ? tun_chr_close+0x3e/0x1c0 [ 1520.880012][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 1520.880058][ T32] ? __pfx_tun_chr_close+0x10/0x10 [ 1520.880084][ T32] tun_chr_close+0x3e/0x1c0 [ 1520.880109][ T32] ? __pfx_tun_chr_close+0x10/0x10 [ 1520.880135][ T32] __fput+0x418/0xa50 [ 1520.880167][ T32] task_work_run+0x1d9/0x270 [ 1520.880191][ T32] ? __pfx_task_work_run+0x10/0x10 [ 1520.880212][ T32] ? do_exit+0x735/0x2360 [ 1520.880229][ T32] ? kmem_cache_free+0x182/0x650 [ 1520.880248][ T32] ? put_net+0x191/0x260 [ 1520.880277][ T32] do_exit+0x73a/0x2360 [ 1520.880301][ T32] ? lock_acquire+0x115/0x350 [ 1520.880320][ T32] ? __pfx_do_exit+0x10/0x10 [ 1520.880343][ T32] ? do_raw_spin_lock+0x12b/0x2f0 [ 1520.880378][ T32] do_group_exit+0x22d/0x2f0 [ 1520.880396][ T32] ? _raw_spin_unlock_irq+0x23/0x50 [ 1520.880424][ T32] get_signal+0x121b/0x12c0 [ 1520.880470][ T32] arch_do_signal_or_restart+0xbb/0x860 [ 1520.880501][ T32] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1520.880547][ T32] exit_to_user_mode_loop+0x10e/0x770 [ 1520.880567][ T32] ? rcu_is_watching+0x16/0xb0 [ 1520.880593][ T32] do_syscall_64+0x328/0x520 [ 1520.880620][ T32] ? trace_irq_disable+0x3b/0x140 [ 1520.880638][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1520.880658][ T32] ? clear_bhb_loop+0x70/0xc0 [ 1520.880681][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1520.880701][ T32] RIP: 0033:0x7fa13499f99a [ 1520.880717][ T32] RSP: 002b:00007ffe5931ec78 EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1520.880735][ T32] RAX: 0000000000000000 RBX: 00007ffe5931ed00 RCX: 00007fa13499f99a [ 1520.880749][ T32] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 1520.880760][ T32] RBP: 0000000000000003 R08: 0000000000000408 R09: 0000000000000000 [ 1520.880772][ T32] R10: 00007fa134bf0da0 R11: 0000000000000206 R12: 00007fa134bf0d40 [ 1520.880785][ T32] R13: 00007ffe5931ec9c R14: 0000000000000000 R15: 00007fa134bf2180 [ 1520.880824][ T32] [ 1520.880868][ T32] [ 1520.880868][ T32] Showing all locks held in the system: [ 1520.880877][ T32] locks held by pool_workqueue_/3: 1, on CPU#1: [ 1520.880891][ T32] #0: ffffffff8ed62aa8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 1520.880943][ T32] locks held by pr/ttyS0/16: 1, last CPU#1: [ 1520.880957][ T32] #0: ffffffff8ec362b8 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60 [ 1520.881004][ T32] locks held by khungtaskd/32: 1, last CPU#1: [ 1520.881018][ T32] #0: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1520.881090][ T32] locks held by kworker/u8:2/35: 3, last CPU#1: [ 1520.881103][ T32] #0: ffff8880782f6940 ((wq_completion)krds_cp_wq#3/4){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1520.881153][ T32] #1: ffffc90000ab7c40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1520.881202][ T32] #2: ffff8880531aad80 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 1520.881315][ T32] locks held by kworker/u8:3/49: 3, last CPU#1: [ 1520.881328][ T32] #0: ffff88802a862140 ((wq_completion)krds_cp_wq#3/5){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1520.881377][ T32] #1: ffffc90000ba7c40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1520.881426][ T32] #2: ffff8880531aaa80 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 1520.881479][ T32] locks held by kworker/u8:7/1100: 3, on CPU#1: [ 1520.881492][ T32] #0: ffff8880330c9140 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1520.881541][ T32] #1: ffffc900050cfc40 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1520.881590][ T32] #2: ffffffff90250d40 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 1520.881679][ T32] locks held by kworker/0:2/1682: 2, last CPU#0: [ 1520.881693][ T32] #0: ffff888032445d40 ((wq_completion)wg-kex-wg1#28){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1520.881748][ T32] #1: ffffc900054cfc40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1520.881830][ T32] locks held by getty/5369: 2, on CPU#1: [ 1520.881842][ T32] #0: ffff888036be20a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1520.881984][ T32] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 1520.882029][ T32] locks held by kworker/0:4/5617: 3, last CPU#0: [ 1520.882043][ T32] #0: ffff8880565a8d40 ((wq_completion)wg-kex-wg1#6){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1520.882097][ T32] #1: ffffc90003b67c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1520.882157][ T32] #2: ffff88801228f028 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x36/0xbf0 [ 1520.882252][ T32] locks held by kworker/0:5/5622: 3, last CPU#0: [ 1520.882266][ T32] #0: ffff88807eef3140 ((wq_completion)wg-kex-wg2#6){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1520.882314][ T32] #1: ffffc90003bb7c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1520.882360][ T32] #2: ffff888034809440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_response+0x22d/0xbd0 [ 1520.882409][ T32] locks held by kworker/u8:13/7065: 4, last CPU#1: [ 1520.882422][ T32] #0: ffff8880782f5140 ((wq_completion)krds_cp_wq#3/3){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1520.882471][ T32] #1: ffffc900051efc40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1520.882520][ T32] #2: ffff8880531ab080 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 1520.882566][ T32] #3: ffff88807ba08260 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: __inet6_bind+0x301/0xf30 [ 1520.882625][ T32] locks held by kworker/u8:15/7068: 4, last CPU#1: [ 1520.882639][ T32] #0: ffff88802175d940 ((wq_completion)wg-kex-wg1#17){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1520.882691][ T32] #1: ffffc90004dafc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1520.882753][ T32] #2: ffff8880343bd440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 1520.882810][ T32] #3: ffff88807e7a5270 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 1520.882861][ T32] locks held by kworker/u8:18/7071: 6, on CPU#1: [ 1520.882879][ T32] #0: ffff88801c2d6140 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1520.882928][ T32] #1: ffffc90004d5fc40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1520.882977][ T32] #2: ffffffff902424e8 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810 [ 1520.883035][ T32] #3: ffff88805cba6128 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x129/0x420 [ 1520.883149][ T32] #4: ffff888026103258 (&devlink->lock_key#17){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x142/0x420 [ 1520.883206][ T32] #5: ffffffff90250d40 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_dev_lock+0x257/0x2f0 [ 1520.883258][ T32] locks held by kworker/u8:24/7078: 5, last CPU#0: [ 1520.883272][ T32] #0: ffff8880782f7140 ((wq_completion)krds_cp_wq#3/0){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1520.883316][ T32] #1: ffffc90004c8fc40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1520.883359][ T32] #2: ffff8880531ab980 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 1520.883403][ T32] #3: ffff888079bcee60 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: __inet6_bind+0x301/0xf30 [ 1520.883449][ T32] #4: ffffffff8ed5c800 (rcu_callback){....}-{0:0}, at: rcu_core+0x8a8/0x1260 [ 1520.883494][ T32] locks held by kworker/u8:31/8882: 3, last CPU#1: [ 1520.883507][ T32] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1520.883556][ T32] #1: ffffc90003987c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1520.883606][ T32] #2: ffff888026229258 (&devlink->lock_key#8){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb40 [ 1520.883756][ T32] locks held by kworker/0:1/19542: 3, last CPU#0: [ 1520.883770][ T32] #0: ffff88801b06b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1520.883847][ T32] #1: ffffc9000205fc40 ((debug_obj_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1520.883896][ T32] #2: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 1520.883959][ T32] locks held by syz-executor/30692: 1, last CPU#1: [ 1520.883971][ T32] #0: ffffffff90250d40 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 1520.884018][ T32] locks held by kworker/1:6/31326: 4, on CPU#1: [ 1520.884030][ T32] #0: ffff8880565a8d40 ((wq_completion)wg-kex-wg1#6){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1520.884081][ T32] #1: ffffc900042c7c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1520.884145][ T32] #2: ffff88803480d440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1a2/0x9b0 [ 1520.884192][ T32] #3: ffff88801228f028 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x59c/0x9b0 [ 1520.884242][ T32] locks held by syz-executor/31551: 1, on CPU#1: [ 1520.884255][ T32] #0: ffffffff90250d40 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 1520.884314][ T32] locks held by kworker/u8:0/32177: 5, last CPU#1: [ 1520.884328][ T32] #0: ffff888050f4a140 ((wq_completion)krds_cp_wq#7/0){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1520.884383][ T32] #1: ffffc90005a4fc40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1520.884443][ T32] #2: ffff888050faa780 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 1520.884494][ T32] #3: ffffffff8eeabc30 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 1520.884547][ T32] #4: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 1520.884600][ T32] locks held by syz-executor/741: 1, on CPU#1: [ 1520.884613][ T32] #0: ffffffff90250d40 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 1520.884669][ T32] locks held by syz-executor/4819: 1, on CPU#1: [ 1520.884682][ T32] #0: ffffffff90250d40 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 1520.884733][ T32] locks held by kworker/u8:1/5610: 2, last CPU#1: [ 1520.884746][ T32] #0: ffff8880323a0140 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1520.884795][ T32] #1: ffffc900032b7c40 ( [ 1522.905077][ T5616] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1523.610294][ T32] (work_completion)(&(&bat_priv->tt.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1523.610352][ T32] locks held by kworker/u8:4/5904: 3, on CPU#1: [ 1523.610367][ T32] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1523.610416][ T32] #1: ffffc9000e0efc40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1523.610464][ T32] #2: ffffffff90250d40 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 1523.610596][ T32] locks held by kworker/u8:6/6326: 3, last CPU#1: [ 1523.610610][ T32] #0: ffff88806a2d2140 ((wq_completion)krds_cp_wq#6/0#3){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1523.610665][ T32] #1: ffffc9000520fc40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1523.610713][ T32] #2: ffff88807846d060 (k-sk_lock-AF_INET){+.+.}-{0:0}, at: tcp_close+0x1d/0x110 [ 1523.610769][ T32] locks held by kworker/u8:8/6331: 2, last CPU#1: [ 1523.610782][ T32] #0: ffff8880323a0140 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1523.610831][ T32] #1: ffffc9000504fc40 ((work_completion)(&(&bat_priv->dat.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1523.610882][ T32] locks held by kworker/u8:9/6332: 3, last CPU#0: [ 1523.610895][ T32] #0: ffff88801c328140 ((wq_completion)krds_cp_wq#3/7){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1523.610943][ T32] #1: ffffc900074e7c40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1523.610997][ T32] #2: ffff8880531aa480 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 1523.611044][ T32] locks held by kworker/u8:10/6404: 2, last CPU#0: [ 1523.611058][ T32] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1523.611106][ T32] #1: ffffc90004287c40 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1523.611155][ T32] locks held by kworker/u8:11/6406: 2, on CPU#1: [ 1523.611169][ T32] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1523.611217][ T32] #1: ffffc90005fbfc40 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1523.611265][ T32] locks held by kworker/u8:12/6414: 4, last CPU#1: [ 1523.611279][ T32] #0: ffff88807c5c1940 ((wq_completion)wg-kex-wg0#3){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1523.611331][ T32] #1: ffffc90004f0fc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1523.611381][ T32] #2: ffff8880260d5440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 1523.611433][ T32] #3: ffff888078583ea0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 1523.611483][ T32] locks held by kworker/0:8/6427: 3, on CPU#0: [ 1523.611496][ T32] #0: ffff88801b06b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1523.611543][ T32] #1: ffffc90005ec7c40 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1523.611591][ T32] #2: ffffffff90250d40 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 1523.611712][ T32] locks held by kworker/1:0/6428: 3, last CPU#1: [ 1523.611726][ T32] #0: ffff88801b069d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1523.611784][ T32] #1: ffffc9000565fc40 ((work_completion)(&(&gc_work->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1523.611833][ T32] #2: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: gc_worker+0x274/0x1890 [ 1523.611912][ T32] locks held by syz-executor/6430: 1, on CPU#1: [ 1523.611926][ T32] #0: ffffffff90250d40 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 1523.611973][ T32] locks held by kworker/u8:14/6431: 4, last CPU#1: [ 1523.611986][ T32] #0: ffff88801c32e140 ((wq_completion)krds_cp_wq#3/6){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1523.612035][ T32] #1: ffffc9000514fc40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1523.612084][ T32] #2: ffff8880531aa780 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 1523.612311][ T32] #3: ffff88807ba0c5e0 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: __inet6_bind+0x301/0xf30 [ 1523.612358][ T32] locks held by kworker/u9:3/6438: 3, on CPU#1: [ 1523.612372][ T32] #0: ffff888088d8d940 ((wq_completion)hci3){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1523.612420][ T32] #1: ffffc90003b17c40 ((work_completion)(&hdev->power_on)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1523.612469][ T32] #2: ffff888043f08ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_power_on+0x1a2/0x750 [ 1523.612556][ T32] locks held by syz-executor/6441: 1, on CPU#1: [ 1523.612571][ T32] #0: ffffffff90250d40 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 1523.612617][ T32] locks held by syz-executor/6442: 1, on CPU#1: [ 1523.612631][ T32] #0: ffffffff90250d40 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 1523.612678][ T32] locks held by kworker/u8:17/6454: 4, last CPU#0: [ 1523.612692][ T32] #0: ffff88805691f140 ((wq_completion)krds_cp_wq#16/0){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1523.612741][ T32] #1: ffffc9000607fc40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1524.162540][ T32] #2: ffff88805566b680 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 1524.162590][ T32] #3: ffffffff8eeabc30 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 1524.162646][ T32] locks held by syz-executor/6480: 2, last CPU#0: [ 1524.162660][ T32] #0: ffffffff8eeabc30 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 1524.162711][ T32] #1: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 1524.162759][ T32] locks held by syz-executor/6485: 2, last CPU#1: [ 1524.162772][ T32] #0: ffff88801b091d38 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 1524.162821][ T32] #1: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 1524.162870][ T32] locks held by modprobe/6491: 2, last CPU#1: [ 1524.162883][ T32] #0: ffff88807e8569b8 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1dd/0x4e0 [ 1524.162963][ T32] #1: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 1524.163011][ T32] [ 1524.163017][ T32] ============================================= [ 1524.163017][ T32] [ 1524.163033][ T32] NMI backtrace for cpu 1 [ 1524.163049][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1524.163091][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1524.163102][ T32] Call Trace: [ 1524.163110][ T32] [ 1524.163120][ T32] dump_stack_lvl+0xe8/0x150 [ 1524.163154][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 1524.163235][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1524.163273][ T32] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 1524.163298][ T32] sys_info+0x135/0x170 [ 1524.163317][ T32] watchdog+0xfd7/0x1030 [ 1524.163353][ T32] ? watchdog+0x1c7/0x1030 [ 1524.163378][ T32] kthread+0x38b/0x480 [ 1524.163396][ T32] ? __pfx_watchdog+0x10/0x10 [ 1524.163412][ T32] ? __pfx_kthread+0x10/0x10 [ 1524.163431][ T32] ret_from_fork+0x514/0xb70 [ 1524.163452][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1524.163479][ T32] ? __switch_to+0xc89/0x1420 [ 1524.163507][ T32] ? __pfx_kthread+0x10/0x10 [ 1524.163526][ T32] ret_from_fork_asm+0x1a/0x30 [ 1524.163567][ T32] [ 1524.163575][ T32] Sending NMI from CPU 1 to CPUs 0: [ 1524.163605][ C0] NMI backtrace for cpu 0 [ 1524.163619][ C0] CPU: 0 UID: 0 PID: 7078 Comm: kworker/u8:24 Not tainted syzkaller #0 PREEMPT(full) [ 1524.163639][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1524.163657][ C0] Workqueue: krds_cp_wq#3/0 rds_connect_worker [ 1524.163734][ C0] RIP: 0010:__lock_acquire+0x6f0/0x2e50 [ 1524.163756][ C0] Code: 20 a9 00 00 18 00 0f 84 b9 00 00 00 4c 89 f6 ba 08 00 00 00 e8 81 47 00 00 31 ed 85 c0 0f 84 93 0d 00 00 83 3d d0 90 fa 18 00 <75> 13 48 63 44 24 10 48 0f a3 05 e1 00 f7 12 0f 83 45 1f 00 00 48 [ 1524.163774][ C0] RSP: 0018:ffffc900000076f8 EFLAGS: 00000046 [ 1524.163790][ C0] RAX: 0000000000000001 RBX: ffff8880322ecb18 RCX: ffffffff943b2a48 [ 1524.163805][ C0] RDX: 0000000000000008 RSI: ffff8880322ecaf8 RDI: ffff8880322ebe80 [ 1524.163820][ C0] RBP: 0000000000000000 R08: 4e00000000000000 R09: 0000000000000000 [ 1524.163833][ C0] R10: 0000000000000000 R11: ffffffff8ed5c6e0 R12: 0000000000000003 [ 1524.163847][ C0] R13: 0000000000000000 R14: ffff8880322ecaf8 R15: 0000000000000005 [ 1524.163860][ C0] FS: 0000000000000000(0000) GS:ffff888124cd9000(0000) knlGS:0000000000000000 [ 1524.163876][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1524.163891][ C0] CR2: 00007f53a70f3080 CR3: 000000000eb48000 CR4: 00000000003526f0 [ 1524.163909][ C0] Call Trace: [ 1524.163916][ C0] [ 1524.163927][ C0] ? unwind_next_frame+0x8f/0x2550 [ 1524.163954][ C0] ? lock_acquire+0x115/0x350 [ 1524.163975][ C0] lock_acquire+0x115/0x350 [ 1524.163992][ C0] ? unwind_next_frame+0x8f/0x2550 [ 1524.164019][ C0] ? unwind_next_frame+0x8f/0x2550 [ 1524.164041][ C0] ? __inet6_bind+0x301/0xf30 [ 1524.164064][ C0] ? unwind_next_frame+0x8f/0x2550 [ 1524.164086][ C0] unwind_next_frame+0xac/0x2550 [ 1524.164107][ C0] ? unwind_next_frame+0x8f/0x2550 [ 1524.164132][ C0] ? __local_bh_enable_ip+0x100/0x140 [ 1524.164157][ C0] ? unwind_next_frame+0x8f/0x2550 [ 1524.164181][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1524.164212][ C0] arch_stack_walk+0x11b/0x150 [ 1524.164237][ C0] ? __inet6_bind+0x301/0xf30 [ 1524.164261][ C0] stack_trace_save+0xa9/0x100 [ 1524.164290][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1524.164323][ C0] ? __lock_acquire+0x6df/0x2e50 [ 1524.164343][ C0] kasan_save_track+0x3e/0x80 [ 1524.164362][ C0] ? kasan_save_track+0x3e/0x80 [ 1524.164379][ C0] ? kasan_save_free_info+0x40/0x50 [ 1524.164405][ C0] ? __kasan_slab_free+0x5c/0x80 [ 1524.164424][ C0] ? kmem_cache_free+0x182/0x650 [ 1524.164441][ C0] ? dst_destroy+0x22f/0x340 [ 1524.164466][ C0] ? rcu_core+0x926/0x1260 [ 1524.164485][ C0] ? handle_softirqs+0x226/0x860 [ 1524.164509][ C0] ? do_softirq+0x77/0xd0 [ 1524.164532][ C0] ? __local_bh_enable_ip+0x100/0x140 [ 1524.164556][ C0] ? __inet6_bind+0x301/0xf30 [ 1524.164599][ C0] ? dst_destroy+0x22f/0x340 [ 1524.164622][ C0] kasan_save_free_info+0x40/0x50 [ 1524.164655][ C0] __kasan_slab_free+0x5c/0x80 [ 1524.164675][ C0] kmem_cache_free+0x182/0x650 [ 1524.164693][ C0] ? __local_bh_enable_ip+0xd6/0x140 [ 1524.164721][ C0] dst_destroy+0x22f/0x340 [ 1524.164744][ C0] ? __pfx_dst_destroy_rcu+0x10/0x10 [ 1524.164769][ C0] ? rcu_core+0x8a8/0x1260 [ 1524.164789][ C0] rcu_core+0x926/0x1260 [ 1524.164815][ C0] ? __pfx_rcu_core+0x10/0x10 [ 1524.164842][ C0] handle_softirqs+0x226/0x860 [ 1524.164869][ C0] ? do_softirq+0x77/0xd0 [ 1524.164895][ C0] ? __inet6_bind+0x301/0xf30 [ 1524.164917][ C0] do_softirq+0x77/0xd0 [ 1524.164940][ C0] [ 1524.164947][ C0] [ 1524.164954][ C0] __local_bh_enable_ip+0x100/0x140 [ 1524.164979][ C0] __inet6_bind+0x301/0xf30 [ 1524.165006][ C0] kernel_bind+0x13e/0x1c0 [ 1524.165031][ C0] ? __pfx_kernel_bind+0x10/0x10 [ 1524.165060][ C0] ? rds_tcp_conn_path_connect+0x336/0x920 [ 1524.165084][ C0] rds_tcp_conn_path_connect+0x53b/0x920 [ 1524.165110][ C0] ? __pfx_rds_tcp_conn_path_connect+0x10/0x10 [ 1524.165134][ C0] ? lock_acquire+0x115/0x350 [ 1524.165157][ C0] rds_connect_worker+0x1d8/0x290 [ 1524.165184][ C0] ? process_scheduled_works+0x97a/0x1630 [ 1524.165210][ C0] process_scheduled_works+0xc3d/0x1630 [ 1524.165249][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1524.165282][ C0] ? assign_work+0x3cf/0x5d0 [ 1524.165308][ C0] worker_thread+0xa47/0xfb0 [ 1524.165347][ C0] kthread+0x38b/0x480 [ 1524.165364][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1524.165389][ C0] ? __pfx_kthread+0x10/0x10 [ 1524.165407][ C0] ret_from_fork+0x514/0xb70 [ 1524.165426][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1524.165456][ C0] ? __switch_to+0xc89/0x1420 [ 1524.165483][ C0] ? __pfx_kthread+0x10/0x10 [ 1524.165502][ C0] ret_from_fork_asm+0x1a/0x30 [ 1524.165539][ C0] [ 1524.165607][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 1526.300417][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1526.309540][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1526.319608][ T32] Call Trace: [ 1526.322909][ T32] [ 1526.325854][ T32] vpanic+0x56d/0xa60 [ 1526.329864][ T32] ? __pfx_vpanic+0x10/0x10 [ 1526.334389][ T32] ? console_srcu_read_unlock+0x3a/0x60 [ 1526.339957][ T32] panic+0xc5/0xd0 [ 1526.343702][ T32] ? __pfx_panic+0x10/0x10 [ 1526.348135][ T32] ? wq_watchdog_touch+0xf9/0x160 [ 1526.353177][ T32] ? nmi_trigger_cpumask_backtrace+0x24d/0x390 [ 1526.359349][ T32] watchdog+0x1030/0x1030 [ 1526.363700][ T32] ? watchdog+0x1c7/0x1030 [ 1526.368138][ T32] kthread+0x38b/0x480 [ 1526.372218][ T32] ? __pfx_watchdog+0x10/0x10 [ 1526.376903][ T32] ? __pfx_kthread+0x10/0x10 [ 1526.381516][ T32] ret_from_fork+0x514/0xb70 [ 1526.386209][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1526.391348][ T32] ? __switch_to+0xc89/0x1420 [ 1526.396046][ T32] ? __pfx_kthread+0x10/0x10 [ 1526.400655][ T32] ret_from_fork_asm+0x1a/0x30 [ 1526.405458][ T32] [ 1526.408812][ T32] Kernel Offset: disabled [ 1526.413138][ T32] Rebooting in 86400 seconds..