last executing test programs: 18.371332553s ago: executing program 1 (id=1721): r0 = socket(0x2a, 0x2, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) listen(r1, 0x6) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0xd, 0x4, 0x4, 0x9, 0x150}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xf, &(0x7f0000000e80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="01030000030000000008000b00", @ANYRES32=r7, @ANYBLOB, @ANYRESHEX, @ANYRESOCT=r5, @ANYRES32=r7], 0x1c}, 0x1, 0x0, 0x0, 0x400c001}, 0x20000090) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x12, 0x7, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x40}, 0x50) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x80000001, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0xb}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x4}, {0x7, 0x0, 0xa}, {0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x1d}, {0x18, 0x9, 0x2, 0x0, r8}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xc, 0x9, 0x4}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) close(0x4) 18.317079629s ago: executing program 2 (id=1722): r0 = socket(0x2a, 0x2, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) listen(r1, 0x6) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0xd, 0x4, 0x4, 0x9, 0x150}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xf, &(0x7f0000000e80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="01030000030000000008000b00", @ANYRES32=r7, @ANYBLOB, @ANYRESHEX, @ANYRESOCT=r5, @ANYRES32=r7], 0x1c}, 0x1, 0x0, 0x0, 0x400c001}, 0x20000090) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x12, 0x7, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x40}, 0x50) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x80000001, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0xb}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x4}, {0x7, 0x0, 0xa}, {0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x1d}, {0x18, 0x9, 0x2, 0x0, r8}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xc, 0x9, 0x4}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) close(0x4) 18.210783591s ago: executing program 3 (id=1724): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newtaction={0x48, 0x30, 0x2, 0x70bd25, 0x0, {}, [{0x34, 0x1, [@m_vlan={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=@newsa={0x138, 0x10, 0x1, 0x8000000, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x33}, @in=@local, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x5680000000}, {0x10, 0x9, 0x2}, 0x0, 0x0, 0x2, 0x3}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) (async) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="f002000040000b000000000003000000030000000c0002000700000000000000d00201"], 0x2f0}}, 0x48840) (async) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000006000000000000000000000d02000000000000000000000300000000020000000300000000000000040000000000000801000000000071005f00"], 0x0, 0x4e, 0x0, 0x9}, 0x28) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r3, 0x6, 0xd, 0x0, &(0x7f0000000000)) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) (async) r4 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000b95000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000040)=0x40) 18.088676465s ago: executing program 3 (id=1725): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@rand_addr=0x64010101, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x3f}, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newpolicy={0xe0, 0x13, 0x10, 0x70bd29, 0x25dfdbff, {{@in=@remote, @in=@dev={0xac, 0x14, 0x14, 0x3d}, 0x4e24, 0xc, 0x4e1f, 0x2, 0xa, 0x20, 0xa0, 0x2e, r3}, {0x1, 0x8000000000000000, 0xffffffffffffffff, 0x5, 0x101, 0xd41, 0x6, 0x5}, {0xff, 0x400, 0x4, 0x38ee}, 0x7, 0x6e6bb7, 0x0, 0x0, 0x2}, [@address_filter={0x28, 0x1a, {@in6=@private0, @in6=@dev={0xfe, 0x80, '\x00', 0x17}, 0xa, 0x5, 0x8}}]}, 0xe0}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0) sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000001e40)={0xbb8, 0x1, 0x5, 0x5, 0x0, 0x0, {0x0, 0x0, 0x9}, [{{0x254, 0x1, {{0x0, 0x8001}, 0x8, 0x10, 0x2, 0xe, 0x1c, 'syz0\x00', "f105826985959adf42f6a79e0f1a08fc2ea8bdf34a0ef23315c4f4114ca2ebeb", "5a623679591419064579711a4a8cbf91ca5792991612dca0876b91c52eb7a6f1", [{0x1b, 0x0, {0x2, 0x9}}, {0x8, 0x1, {0x2, 0x6}}, {0x5, 0x8, {0x3, 0x7}}, {0x4, 0x1, {0x1, 0x4}}, {0x80, 0x2, {0x0, 0x3}}, {0x401, 0x3, {0x2, 0x92}}, {0x2, 0xffbe, {0x1, 0x40000000}}, {0x9, 0x3, {0x0, 0x9}}, {0x7, 0x7, {0x3, 0x9}}, {0x9, 0x8, {0x0, 0x9069905}}, {0x1ff, 0x8, {0x0, 0xffffffff}}, {0x8, 0x101, {0x2, 0x80}}, {0x6, 0x5b8, {0x2}}, {0x7, 0x2, {0x3, 0x4}}, {0x8001, 0x2, {0x2, 0x49bb}}, {0x3, 0xc, {0x3, 0x80}}, {0xdcf5, 0x9, {0x3, 0x7f}}, {0x57, 0x40, {0x1, 0x10001}}, {0x7, 0xfff9, {0x0, 0xd1}}, {0x2, 0x8}, {0xb23, 0x2, {0x3, 0x8}}, {0x1b, 0x5, {0x2, 0x2}}, {0x9, 0x4, {0x2, 0x15}}, {0x7, 0x9, {0x1, 0x4}}, {0x8001, 0x7, {0x3, 0xfc35}}, {0x800, 0x6, {0x1, 0xc}}, {0x7, 0x80, {0x0, 0x10001}}, {0x2, 0x0, {0x0, 0xfffffffc}}, {0x1c00, 0x100, {0x0, 0x5}}, {0x1, 0x7, {0x3, 0x82}}, {0x7fff, 0x6, {0x0, 0x8}}, {0x81, 0xd1ac, {0x0, 0x7fffffff}}, {0x1, 0x6, {0x0, 0x2}}, {0x3f57, 0x0, {0x3, 0x7}}, {0xbc0f, 0x5, {0x3, 0x8001}}, {0x401, 0x7, {0x3, 0x72}}, {0x7, 0x8, {0x0, 0x58}}, {0x81, 0x1f9, {0x3, 0x7ff}}, {0x5, 0x8, {0x1, 0x3}}, {0x8, 0x3d7, {0x6930401f08c1f485, 0x4}}]}}}, {{0x254, 0x1, {{0x0, 0x1000}, 0x2, 0x2, 0x3, 0x3, 0xd, 'syz1\x00', "1872f220c8dab6ce6cfe7d0299576ca8be95f6030043976e94765c2854881652", "f8ca13f8572021115079e2c5295d098c3e9610de4dfef61b785fec235d0ce053", [{0x5, 0x6, {0x0, 0x6}}, {0x4b, 0x3ff, {0x3, 0x7}}, {0x4, 0x2, {0x3, 0x8}}, {0x800, 0x8cf, {0x1}}, {0x7, 0x1517, {0x3, 0xfe000000}}, {0x7, 0x81, {0x1, 0x5}}, {0x8000, 0x7a, {0x1, 0xfffffff9}}, {0x2, 0x4, {0x3, 0x6}}, {0x5, 0x8, {0x1, 0x4}}, {0x40, 0x9bd4, {0x1, 0x8}}, {0x2, 0x3, {0x2, 0x3000}}, {0x1000, 0xfff, {0x3}}, {0x100, 0x7f, {0x2, 0x6}}, {0xffff, 0x4, {0x0, 0x7}}, {0xee, 0x1, {0x2, 0x1}}, {0x7, 0xf801, {0x2, 0x4}}, {0x8, 0x3, {0x3, 0x8}}, {0x5, 0x5, {0x3, 0x2e1c}}, {0xfff8, 0x5, {0x0, 0xfffffff8}}, {0x6, 0xc, {0x3, 0x6}}, {0x0, 0x3, {0x0, 0x3}}, {0xc, 0x206, {0x1, 0x4}}, {0x7ea, 0x8, {0x1, 0x401}}, {0xd, 0x5, {0x1, 0xb8}}, {0x7, 0x81, {0x0, 0x80000000}}, {0x6, 0xc12, {0x0, 0x10000}}, {0x6, 0x2, {0x1, 0x8}}, {0x7, 0x469, {0x3, 0x5}}, {0x8, 0xae29, {0x1, 0x80000000}}, {0xcb, 0xffa, {0x1, 0xfffffffc}}, {0x2, 0x451, {0x0, 0x8}}, {0x4, 0xb, {0x447a7bcb9be509f9, 0x3}}, {0x1, 0x4, {0x0, 0x3}}, {0x200, 0x7, {0x1, 0xf9e}}, {0xfff7, 0x8000, {0x3, 0xf}}, {0xffd4, 0x8000, {0x0, 0x400}}, {0x920, 0x5, {0x3, 0x2}}, {0x1, 0x6, {0x3, 0x6}}, {0x10, 0x5c9a, {0x2, 0x80}}, {0x7f, 0xfff7, {0x1, 0x39}}]}}}, {{0x254, 0x1, {{0x0, 0xffffffff}, 0x10, 0x5, 0x5, 0xfe12, 0x1d, 'syz0\x00', "49d563dbe5dd69ded6519b80c832c97daba5d7587cf1c04ae41c96efe3b5ac66", "47927c4677ac9c5f2ce142447ec3ec0e8a81fec7365113743887cd2087075a3b", [{0x0, 0x9, {0x0, 0x45ca27ea}}, {0x9, 0x2, {0x1, 0x1ff}}, {0x6, 0x5, {0x3, 0x81}}, {0x18, 0x2, {0x1, 0x2}}, {0x9, 0xb, {0x0, 0x6}}, {0x3, 0x8000, {0x1, 0x1}}, {0x1, 0x3, {0x1, 0x4}}, {0x0, 0x9, {0x3123a711beb26ab3, 0x9}}, {0x6, 0x6, {0xccc8e3974a69e360, 0x6}}, {0x3, 0x81, {0x3, 0x1}}, {0x2, 0xd, {0x1, 0x10}}, {0x5, 0x4, {0x2, 0x8001}}, {0x8, 0xf, {0x6, 0x2}}, {0x6, 0x5, {0x0, 0x9}}, {0x400, 0x8, {0x3, 0x6}}, {0x6, 0x9, {0x3, 0x6}}, {0x0, 0x8, {0x0, 0x7}}, {0x7, 0x68, {0x1}}, {0x8, 0x4, {0x2, 0xffff1846}}, {0x1, 0x618, {0x3, 0x5}}, {0x9, 0x6, {0x1, 0x8}}, {0x6, 0x8, {0x1, 0x100}}, {0x800, 0x3, {0x3, 0x101}}, {0x2, 0x6, {0x2}}, {0xf22, 0xf769, {0x1}}, {0x8, 0x744, {0x3, 0xfff}}, {0x4, 0x8, {0x2, 0x7}}, {0x1697, 0x5, {0x3, 0xe7bb}}, {0x0, 0x3, {0x1, 0x1}}, {0x3, 0x2, {0x3}}, {0x3809, 0x3, {0x0, 0x6}}, {0x5, 0x400, {0x2, 0x4a4}}, {0x5, 0xfeff, {0x2, 0x6cf}}, {0x6, 0x0, {0x0, 0x100}}, {0x6, 0x6}, {0x7, 0x101, {0x2, 0x2}}, {0x9, 0xeca, {0x2, 0x1}}, {0x8, 0x1, {0x3, 0xffff}}, {0x5, 0x6, {0x2, 0xd}}, {0xeffb, 0x6, {0x0, 0x70f9}}]}}}, {{0x254, 0x1, {{0x1, 0x6}, 0x2, 0xb1, 0x0, 0x0, 0xc, 'syz1\x00', "887f5003f96c0088d30ba59611748df3d6cf5778fba904b185cd8ad32d4a1541", "52651b83431a47a59eeea884edf8448b3faa182ae0a7e42b3bbeccaaeba7f80e", [{0x6, 0x554, {0x2, 0x9}}, {0x3, 0x9, {0x0, 0x4}}, {0x5, 0x4, {0x0, 0x4}}, {0x0, 0xd7b, {0x0, 0x1}}, {0x4, 0x2, {0x0, 0xec53}}, {0x3, 0x80, {0x2, 0x5}}, {0x8, 0x0, {0x1, 0x1ff}}, {0xe08f, 0x2, {0x1, 0x4}}, {0x8001, 0x5, {0x0, 0x84dd}}, {0xe, 0x8, {0x2, 0xff}}, {0x0, 0x863f, {0x0, 0x7}}, {0xda44, 0x840, {0x0, 0x1}}, {0x6983, 0x9, {0x1, 0xfffffff2}}, {0x400, 0x101, {0x3}}, {0x5, 0x8, {0x2, 0x8}}, {0x634, 0xa527, {0x3, 0xe944}}, {0x739, 0x1, {0x2}}, {0x7ff, 0xfffd, {0x0, 0x8}}, {0x3, 0x4, {0x2, 0x2}}, {0x4, 0x3, {0x0, 0x7fe}}, {0x5, 0x1, {0x0, 0xffff952b}}, {0x9, 0x9, {0x3, 0x101}}, {0x7, 0x3, {0x0, 0xa17d}}, {0x4936, 0x1, {0x1, 0xa}}, {0x8001, 0x2, {0x2, 0x3}}, {0x7f, 0x8, {0x0, 0x1}}, {0x9, 0x9, {0x1, 0x8}}, {0x1, 0x0, {0x3, 0x1}}, {0x7f, 0x6, {0x2, 0x8}}, {0x1, 0x2, {0x0, 0x7fffffff}}, {0x3, 0x100, {0x3, 0x38662bca}}, {0x0, 0x463, {0x3, 0xffff}}, {0x5, 0x5, {0x1, 0x400}}, {0x4, 0xc4f9, {0x3, 0x7}}, {0x100, 0x3, {0x3, 0x6}}, {0x5, 0x2, {0x7, 0x49cd}}, {0x8, 0x7096, {0x2, 0x2}}, {0x401, 0x8, {0x1, 0x5}}, {0x3, 0x7, {0x1, 0x7fff}}, {0x4, 0x2}]}}}, {{0x254, 0x1, {{0x1, 0x5712}, 0xf4, 0x0, 0x8, 0x9, 0xe, 'syz1\x00', "97245d982ba837cbe72cb90ffc30e16793b7c7312f58b51707a921548110c1a8", "9ec3caaee8f206794964592bfaf505610e27e90e95f43c410b554b6eb6eb74d3", [{0x6, 0x4, {0x0, 0x2}}, {0x7ff, 0x4, {0x0, 0x1}}, {0x5, 0x7c, {0x0, 0x10001}}, {0x4, 0x3, {0x3, 0x2}}, {0x7f, 0x1, {0x2, 0x7}}, {0x9, 0x0, {0x3}}, {0x9, 0x2, {0x0, 0x3}}, {0x8, 0xfffc, {0x0, 0x9da}}, {0x7, 0xde8c, {0x2, 0x5}}, {0xc693, 0xff, {0x6bea33e65550381f, 0x10000}}, {0x400, 0x2, {0x0, 0x10001}}, {0x2, 0x0, {0x3, 0x2}}, {0x9, 0x100, {0x3, 0x200}}, {0x8e, 0x6, {0x0, 0x9bf}}, {0x2, 0x3, {0x0, 0x8519}}, {0x9, 0xb, {0x2, 0xa}}, {0x4, 0x6, {0x0, 0x6}}, {0x4, 0x401, {0x1, 0x5bc}}, {0x6, 0xa6a0, {0x0, 0x4}}, {0x4, 0xc, {0x2, 0x4135}}, {0x7f, 0x4, {0x1, 0x800}}, {0xfffd, 0xfffc, {0x3, 0x791}}, {0x8, 0x6, {0x1, 0x300}}, {0xfff, 0x9, {0x2, 0x6}}, {0x8f7, 0x36c0, {0x1}}, {0x7, 0x9, {0x2, 0x4}}, {0x2, 0x3, {0x3, 0xdb}}, {0x1, 0x4, {0x1, 0x4}}, {0xa, 0x9, {0x1, 0xbd00}}, {0xe655, 0xd, {0x2, 0x1}}, {0x6, 0x6, {0x1, 0x3}}, {0x1, 0xfffa, {0x1, 0x9}}, {0x5, 0x3, {0x3, 0x6}}, {0x7, 0x9, {0x2, 0xb}}, {0x6, 0x5, {0x2, 0x2}}, {0x8001, 0x324, {0x3, 0x9}}, {0x8001, 0x1, {0x2, 0x13}}, {0x8, 0xc9db, {0x3, 0x6}}, {0x9, 0x8, {0x0, 0x1ff}}, {0x9, 0xf, {0x1, 0x100}}]}}}]}, 0xbb8}, 0x1, 0x0, 0x0, 0x4}, 0x4000) sendmsg$key(r4, &(0x7f0000000000)={0x1900, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000200)={0x0, 0x7fffffff}, 0xc) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={r5, &(0x7f0000000e40)="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"}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) sendmsg$nl_route(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c000000190001000100000000000a008020140000040005"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) 17.889089522s ago: executing program 3 (id=1728): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) socket$inet(0x10, 0x3, 0x0) socket$kcm(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f0000000640)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x54}, 0x1, 0x0, 0x0, 0x40814}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 17.65231221s ago: executing program 0 (id=1730): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = getpid() openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_BROADCAST={0xa}, @IFLA_NET_NS_PID={0x8, 0x13, r1}, @IFLA_MTU={0x8, 0x4, 0xffe1}]}, 0x50}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}, 0x1, 0x0, 0x0, 0x20000040}, 0x24004000) sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000100)={&(0x7f000000c300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x2000000}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}], {0x14}}, 0x64}}, 0x0) 17.613189879s ago: executing program 3 (id=1731): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="fd7f1d77fbd79159a1aa0100000042000000f05a583b3e4d0600000008002d3335e6b50ec12cf8b833cfe4cf8f6e060036a17f52fc0a226707f83707028cc1a6bb02fc5b53fb7239d81f0e0aeea5023ed4f0f2f00e968e736f1eef9c13542c5e5bb7ffffffff4914aa8888ff6b97b7fc80b1ba08c1d696700668bdf32271c48a26f711a4917d18b289ea491d04272e2a40c3567621db86bd6887aa1e9593691bb7c062d39e41fa4bff4b0818d2d8d268ef9e8157856bcf8c9584bacaec01676dbc1d85600a0175d8c3392a5c41a5322b124420349ad0b0f4e4ebbf5a65e130ec3c60712f44", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="04000000040000000400000089"], 0x48) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="c4000000190001000080000000000000fc020000000000000000000000000001000000020000000000000000000000004e2300004e2600000a0000f3"], 0xc4}, 0x1, 0x0, 0x0, 0x4}, 0x20004800) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r2, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x4) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22fff6) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r6, 0x4004743d, 0x110e22fff6) write$cgroup_type(r6, &(0x7f0000000280), 0xfffffeed) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {}, {0xfffffffe}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5ea}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x10001}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@delchain={0x3c, 0x2c, 0xf31, 0x80, 0x2000, {0x0, 0x0, 0x0, r8, {}, {0xfff2, 0xffff}, {0xffff, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x3}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008844}, 0x4010) socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'macvtap0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_newneigh={0x30, 0x1c, 0x1, 0x70bd28, 0x25dfdbfc, {0x7, 0x0, 0x0, r10, 0x2, 0x26, 0xa}, [@NDA_VLAN={0x6, 0x5, 0x4}, @NDA_LLADDR={0xa, 0x2, @broadcast}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4040880) syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) syz_init_net_socket$x25(0x9, 0x5, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) 17.471942469s ago: executing program 0 (id=1732): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000c40)=[{0x0}, {&(0x7f0000000580)="23a9", 0x2}, {&(0x7f0000002000)="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", 0x1000}], 0x3, 0x0, 0x0, 0x24000040}}], 0x1, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@link_local={0x5}, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @empty}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x800, [0x1000, 0x2]}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x6, 0xffff]}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0xb2}}}}}}}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x9c, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x8, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0x4}]}]}, 0x9c}}, 0x0) 17.432849214s ago: executing program 4 (id=1733): setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r2, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@delchain={0x3c, 0x2c, 0xf31, 0x600, 0x25dfcbfb, {0x0, 0x0, 0x0, r5, {}, {0xfff2, 0xffff}, {0xffff, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x0, 0xe}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008844}, 0x4010) 17.314599574s ago: executing program 0 (id=1734): pipe(&(0x7f00000001c0)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) close(0x4) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0xf3a, 0x0) splice(r0, 0x0, r3, 0x0, 0x80, 0x6) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) write(r3, &(0x7f0000003300)="ac", 0x1) write(r1, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) ioctl$F2FS_IOC_DECOMPRESS_FILE(r0, 0xf517, 0x0) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r7, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r9, 0x0, 0x7f}, 0x18) bpf$ITER_CREATE(0x21, &(0x7f00000002c0), 0x8) r10 = socket$inet6(0xa, 0x3, 0x3c) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(r10, &(0x7f0000000000)={0xa, 0x5000, 0x0, @loopback, 0x5}, 0x1c) writev(r10, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) sendmsg$nl_generic(r8, &(0x7f0000000600)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x10) 17.313607709s ago: executing program 3 (id=1735): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r2, &(0x7f0000000000), 0x8) listen(r2, 0x0) r3 = epoll_create(0xaa22) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)={0x3000000d}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) getsockname$netlink(r0, &(0x7f0000000040), &(0x7f0000000140)=0xc) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xc}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x77359401}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x1}]}}]}, 0x48}}, 0x0) r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f0000000280)={r6, r6, 0x1, 0x0, 0x0, 0x48, 0x1, 0x7, 0x8, 0x8, 0x1, 0x0, 'syz0\x00'}) r7 = socket$kcm(0xa, 0x2, 0x73) setsockopt$sock_attach_bpf(r7, 0x29, 0x21, &(0x7f0000000200), 0x4) sendmsg$kcm(r7, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x4, @rand_addr=' \x01\x00', 0x6, 0x2}, 0x80, 0x0}, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r5, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) 17.193054822s ago: executing program 4 (id=1736): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="020a0b020500000025bd700081fb1eda010017"], 0x28}}, 0x20008004) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)}}], 0x1, 0x40000) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r2, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r3) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r5) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0}, &(0x7f0000000180)=0x14) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000240)={'syztnl0\x00', &(0x7f00000001c0)={'ip6_vti0\x00', r7, 0x4, 0x7, 0x59, 0xa, 0x60, @empty, @private2, 0x1, 0x1, 0x644e, 0xd}}) r8 = socket(0x400000000010, 0x3, 0x0) socket$kcm(0x21, 0x2, 0x2) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$sock_inet6_SIOCDELRT(r4, 0x890c, &(0x7f0000000040)={@mcast2, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3, 0x1000, 0x2, 0x100, 0xfffffffffffffffe, 0x50000c0}) 17.018686397s ago: executing program 3 (id=1737): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) syz_open_procfs$namespace(0x0, 0x0) unshare(0x6a040000) socket(0x8, 0x3, 0x0) socket$kcm(0x2, 0x1, 0x84) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r1}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x12, 0x0, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sock_addr=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x5}, 0x50) bind$isdn_base(r0, 0x0, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000026c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x10}]}}}]}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x8044) socket$inet6(0xa, 0x5, 0x0) r5 = accept(r2, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x2400c840}, 0x0) connect$unix(r5, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) syz_emit_ethernet(0x12, &(0x7f0000000080)={@random="659b3dfadf01", @link_local, @void, {@llc={0x4, {@llc={0x0, 0x0, "e3", "dd"}}}}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="7a0a00ff00000000711089000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) 16.799620778s ago: executing program 4 (id=1738): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x1000000) 16.684487444s ago: executing program 1 (id=1739): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x40, r1, 0x506, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000004}, 0x841) (async) sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x40, r1, 0x506, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000004}, 0x841) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x11, 0x4, 0x4, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 16.682936216s ago: executing program 2 (id=1740): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003b00)=[{{&(0x7f0000000040)={0x2, 0x0, @empty}, 0x10, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)=0x20) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008"], 0x48) 16.525303895s ago: executing program 4 (id=1741): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) socket$inet(0x10, 0x3, 0x0) socket$kcm(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f0000000640)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x54}, 0x1, 0x0, 0x0, 0x40814}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 16.50047138s ago: executing program 1 (id=1742): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = getpid() openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_BROADCAST={0xa}, @IFLA_NET_NS_PID={0x8, 0x13, r1}, @IFLA_MTU={0x8, 0x4, 0xffe1}]}, 0x50}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}, 0x1, 0x0, 0x0, 0x20000040}, 0x24004000) sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000100)={&(0x7f000000c300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x2000000}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}], {0x14}}, 0x64}}, 0x0) 16.461837416s ago: executing program 2 (id=1743): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 16.323995147s ago: executing program 1 (id=1744): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x7, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x600, 0x3}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000240)='syzkaller\x00'}, 0x94) 16.225698456s ago: executing program 2 (id=1745): r0 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x94, 0x24, 0xf0b, 0xf1, 0xfffffffe, {0x0, 0x0, 0x12, r1, {0x0, 0xc00}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffd], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x6}]}}]}, 0x94}}, 0x0) 16.208514991s ago: executing program 4 (id=1746): setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r2, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@delchain={0x3c, 0x2c, 0xf31, 0x600, 0x25dfcbfb, {0x0, 0x0, 0x0, r5, {}, {0xfff2, 0xffff}, {0xffff, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x0, 0xe}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008844}, 0x4010) 16.117261594s ago: executing program 1 (id=1747): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="230900000000000000000100000005000700000000000800090000000000060002000100000008000a000000000008001700", @ANYRES32=r0], 0x3c}}, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="3ffb99b81d3a0378f44122"], 0x14}}, 0x0) socket$kcm(0x10, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0a00000004000000080000000d"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000004007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000002400000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = socket(0x2, 0x80000, 0x9d4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r7, 0x84, 0x6e, &(0x7f0000000580)=[@in6={0xa, 0x4e20, 0x7fff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xfff}, @in={0x2, 0x4e23, @empty}, @in6={0xa, 0x4e22, 0x7, @loopback, 0x400}, @in={0x2, 0x4e24, @empty}, @in={0x2, 0x4e21, @private=0xa010100}, @in={0x2, 0x4e20, @loopback}], 0x78) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r8, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) readv(r4, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/89, 0x59}, {&(0x7f0000000040)=""/16, 0x10}, {&(0x7f0000000140)=""/244, 0xf4}], 0x3) 15.974363602s ago: executing program 2 (id=1748): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="020a0b020500000025bd700081fb1eda010017"], 0x28}}, 0x20008004) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)}}], 0x1, 0x40000) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r2, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r3) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r5) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0}, &(0x7f0000000180)=0x14) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000240)={'syztnl0\x00', &(0x7f00000001c0)={'ip6_vti0\x00', r7, 0x4, 0x7, 0x59, 0xa, 0x60, @empty, @private2, 0x1, 0x1, 0x644e, 0xd}}) r8 = socket(0x400000000010, 0x3, 0x0) socket$kcm(0x21, 0x2, 0x2) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$sock_inet6_SIOCDELRT(r4, 0x890c, &(0x7f0000000040)={@mcast2, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3, 0x1000, 0x2, 0x100, 0xfffffffffffffffe, 0x50000c0}) 15.97383613s ago: executing program 4 (id=1749): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') r0 = socket(0x10, 0x3, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr=0x64010102}, 0x10) getsockopt$packet_int(r0, 0x107, 0x13, &(0x7f0000000440), &(0x7f0000000480)=0x4) unshare(0x6a040000) socket$nl_generic(0x10, 0x3, 0x10) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'streebog512\x00'}, 0x58) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=@newtaction={0x37c, 0x30, 0x1, 0x2, 0x25dfdbfc, {}, [{0x368, 0x1, [@m_police={0x2f8, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x2, 0x0, 0x0, {}, {0x0, 0x2, 0x0, 0x0, 0x4}, 0xfffffffd}}]]}, {0x290, 0x6, "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"}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x0, 0x3, 0x1, 0x0, {0x0, 0x0, 0x8, 0x401}}}]]}, {0xb}, {0xc}, {0xc}}}]}]}, 0x37c}, 0x1, 0x0, 0x0, 0x8010}, 0x2000000) r2 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r1}, 0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r3) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x8100, 0x0) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x20400) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffe, 0x0, 0x0, 0x3, 0x2000000000000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="05a300000000000000000d00000008000300", @ANYRES32=r4], 0x1c}}, 0x0) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1e10450108000000000000000000000000000000d796d57fcbab14f2f4a64b301d792758d66e8aed8d6ee6a4dc635b46698c203a488ab6dad41056b1b3379faadbfd5fd92f52310a0cab10d7181453881cc4d410824c699c1fbc417322e35095e64428b4ee717cff06e9ea5738b15c4f970300364e33f1eccd50d0d21b3340e7b9c6473008a89873d86f731d80f4cc176489cfe923b60107e3249010d0", @ANYRES32=r6, @ANYBLOB, @ANYRES32=r4, @ANYRES32=r8, @ANYBLOB="0400000002000000050000000600"/24, @ANYRES32=r2, @ANYBLOB], 0x50) syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) 15.74214487s ago: executing program 2 (id=1750): unshare(0x6a040000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) unshare(0x600) write(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000500)=0xffffffffffffffff, 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x20, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r4, 0x8, 0x2}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r6}, 0xc) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x6}, &(0x7f0000000400)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000440)={r7, 0x4000}, 0x8) sendto$inet6(r3, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000080)}}, {{0x0, 0x0, &(0x7f0000000480)=[{0x0}], 0x1}}], 0x2, 0x4048884) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x6, @mcast2}, 0x1c) 15.687157121s ago: executing program 0 (id=1751): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40840}, 0x0) 15.588749187s ago: executing program 0 (id=1752): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xcc}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0xf1, @loopback, 0x19f49a9}], 0x1c) sendmsg$inet_sctp(r2, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0x44, @loopback, 0x5}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="e6", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000008400000007000000ac1414aa0000000020000000000000008400000008000000200100000000000000001e0000000000"], 0x38, 0x4855}, 0x20040056) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400ff0100000000000000000000000000010c0002800500010000000000470002800500010001000000060006400000000006"], 0xe4}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010400000000000000000100fffc0900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000054000000060a010400000000000000000100000008000b40000000002c00048028000180080001006e6174001c000280080002400000000a080001400000000108000340030000000900010073797a300000"], 0xc8}}, 0x0) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_mreqsrc(r5, 0x0, 0x27, &(0x7f0000000440)={@multicast2, @loopback, @rand_addr=0x64010101}, 0xc) getsockopt$inet_buf(r5, 0x0, 0x7fdb51972096928d, &(0x7f0000000600)=""/214, &(0x7f0000000700)=0xd6) recvmmsg(r0, &(0x7f0000001b80)=[{{0x0, 0x0, 0x0}, 0x80000001}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0xff}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000440)=""/183, 0xb7}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000000000)=""/41, 0x29}, {&(0x7f00000008c0)=""/4119, 0x1017}, {&(0x7f0000000340)=""/75, 0x4b}, {&(0x7f0000000500)=""/236, 0xec}, {&(0x7f00000000c0)=""/237, 0xed}], 0x7}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x200}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x6}], 0x9, 0x4022, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000001dc0)={0x0, 0xf60, "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"}, &(0x7f0000000040)=0xf68) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000001c0)={0x30bd, 0x6, 0x0, 0x7, 0x1, 0xc, 0x9, 0xfffffffb, r6}, 0x20) 15.325236484s ago: executing program 0 (id=1753): socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x80001, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="54000000020603000000000000000000000000000d000300686173683a6e65740000000005000400000000000900020073797a31000000000c00078008001340000017e50500050002000000050001000600000018392268fef45a4a8c031d34c9c473da8a57a21e328c67cf94dfc7d2d05fd1905d39748d91d4ff4287b34cb5cf"], 0x54}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) r6 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r6, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast1}}}], 0x20}, 0x4008804) sendmsg$inet(r6, &(0x7f0000000500)={&(0x7f00000000c0)={0x2, 0x80, @private=0xa010100}, 0x10, 0x0}, 0x880) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x18, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f0000000a00)={0x2, {{0xa, 0x4e20, 0x0, @mcast1, 0x4}}, {{0xa, 0x4e20, 0x0, @empty, 0x8}}}, 0x108) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000380)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002"], 0x190) 15.196477779s ago: executing program 1 (id=1754): socket$nl_rdma(0x10, 0x3, 0x14) socket$igmp6(0xa, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0xa, 0x801, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) socket$vsock_stream(0x28, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 1.540519777s ago: executing program 32 (id=1737): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) syz_open_procfs$namespace(0x0, 0x0) unshare(0x6a040000) socket(0x8, 0x3, 0x0) socket$kcm(0x2, 0x1, 0x84) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r1}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x12, 0x0, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sock_addr=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x5}, 0x50) bind$isdn_base(r0, 0x0, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000026c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x10}]}}}]}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x8044) socket$inet6(0xa, 0x5, 0x0) r5 = accept(r2, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x2400c840}, 0x0) connect$unix(r5, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) syz_emit_ethernet(0x12, &(0x7f0000000080)={@random="659b3dfadf01", @link_local, @void, {@llc={0x4, {@llc={0x0, 0x0, "e3", "dd"}}}}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="7a0a00ff00000000711089000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) 540.328703ms ago: executing program 33 (id=1750): unshare(0x6a040000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) unshare(0x600) write(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000500)=0xffffffffffffffff, 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x20, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r4, 0x8, 0x2}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r6}, 0xc) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x6}, &(0x7f0000000400)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000440)={r7, 0x4000}, 0x8) sendto$inet6(r3, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000080)}}, {{0x0, 0x0, &(0x7f0000000480)=[{0x0}], 0x1}}], 0x2, 0x4048884) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x6, @mcast2}, 0x1c) 501.167408ms ago: executing program 34 (id=1749): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') r0 = socket(0x10, 0x3, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr=0x64010102}, 0x10) getsockopt$packet_int(r0, 0x107, 0x13, &(0x7f0000000440), &(0x7f0000000480)=0x4) unshare(0x6a040000) socket$nl_generic(0x10, 0x3, 0x10) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'streebog512\x00'}, 0x58) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=@newtaction={0x37c, 0x30, 0x1, 0x2, 0x25dfdbfc, {}, [{0x368, 0x1, [@m_police={0x2f8, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x2, 0x0, 0x0, {}, {0x0, 0x2, 0x0, 0x0, 0x4}, 0xfffffffd}}]]}, {0x290, 0x6, "c3259b02f6457905ad16ede266908b173adb603bb199e89d344a5e8e0243772e71f0a1c0ceeddf0f2bc0b72f02546b0ed5e3b9dafcfbbed37302bf6a1f2293d3c810a083729aaf40ff4a6a711f8ef78f8a5dded1107f4e9e35cfed630907a582050000000000000044ead51f7d846792fbe1ee00d0167894fa8b3e3031cdac0e6cfa85416035bd56f596b9b9cf1dcca7fb17841c834cc185e6f0d8775508dd36a3831a75815e6038e7b12d7a07b4db3ed09816392e2e7c465dd200735e311d65dc4fa71cc51c75152a71752e836365646ee406d7714b2e534c64d6f36fc02fabfa230b34d8f83eab035546ed545057b9b0331227820ed73bbb7047c6faecb84c1933cad6bec4093b5ad5e4a3c7c3e2d769463f6978fc74d2ea45a3b8a78763cc1eea0a6a7814d179db274334c877a8e59c2f90e25d8b9016c76bc5a11abb119a42b09c12d04bf815af47d837e41afb5c1cb67d64f931ea654965d8e31b7e238c22c513241bff1469c22837999471128af815a15fe14a4348476f231bc81646c33aa93e265579ff5b1121284933df4a96b71fc7ceb36284b5284ba12a891b6f3af7e63f05ea35b169f160b74aebc787c86994d3e4dd17ff9bbd71fb262a79f3c835cb808e0d0bd784df3b7eb5a4882fade418fb7d8a000202220293e3171f50b0a6a6ca58d9b3a9cc3500f3a852caf602020b65746b517c4b167cd80f2e855d6e09ae1279994260f0cf481ff6b47e237858c26818fe03936b3fa79c038df5aa8f2e9db0d37021a0a3e1df648b4b2cbba71c38ebccc8615462d5641a9f9d3090ab3e90022618d1b3e70dc8d3d5581875c8271c05abbbc16eabac2b1ea7febc745424666986884c85156aa5f161282ee58fc2ea52e8cb281b76ba5a52945a7f94133a339237b9079be8cc13d690"}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x0, 0x3, 0x1, 0x0, {0x0, 0x0, 0x8, 0x401}}}]]}, {0xb}, {0xc}, {0xc}}}]}]}, 0x37c}, 0x1, 0x0, 0x0, 0x8010}, 0x2000000) r2 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r1}, 0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r3) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x8100, 0x0) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x20400) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffe, 0x0, 0x0, 0x3, 0x2000000000000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="05a300000000000000000d00000008000300", @ANYRES32=r4], 0x1c}}, 0x0) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1e10450108000000000000000000000000000000d796d57fcbab14f2f4a64b301d792758d66e8aed8d6ee6a4dc635b46698c203a488ab6dad41056b1b3379faadbfd5fd92f52310a0cab10d7181453881cc4d410824c699c1fbc417322e35095e64428b4ee717cff06e9ea5738b15c4f970300364e33f1eccd50d0d21b3340e7b9c6473008a89873d86f731d80f4cc176489cfe923b60107e3249010d0", @ANYRES32=r6, @ANYBLOB, @ANYRES32=r4, @ANYRES32=r8, @ANYBLOB="0400000002000000050000000600"/24, @ANYRES32=r2, @ANYBLOB], 0x50) syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) 40.023459ms ago: executing program 35 (id=1753): socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x80001, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="54000000020603000000000000000000000000000d000300686173683a6e65740000000005000400000000000900020073797a31000000000c00078008001340000017e50500050002000000050001000600000018392268fef45a4a8c031d34c9c473da8a57a21e328c67cf94dfc7d2d05fd1905d39748d91d4ff4287b34cb5cf"], 0x54}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) r6 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r6, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast1}}}], 0x20}, 0x4008804) sendmsg$inet(r6, &(0x7f0000000500)={&(0x7f00000000c0)={0x2, 0x80, @private=0xa010100}, 0x10, 0x0}, 0x880) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x18, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f0000000a00)={0x2, {{0xa, 0x4e20, 0x0, @mcast1, 0x4}}, {{0xa, 0x4e20, 0x0, @empty, 0x8}}}, 0x108) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000380)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002"], 0x190) 0s ago: executing program 36 (id=1754): socket$nl_rdma(0x10, 0x3, 0x14) socket$igmp6(0xa, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0xa, 0x801, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) socket$vsock_stream(0x28, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) kernel console output (not intermixed with test programs): nted syzkaller #0 PREEMPT(full) [ 265.773397][T10078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 265.773411][T10078] Call Trace: [ 265.773420][T10078] [ 265.773429][T10078] dump_stack_lvl+0x189/0x250 [ 265.773456][T10078] ? lockdep_hardirqs_on+0x9c/0x150 [ 265.773484][T10078] ? __pfx_dump_stack_lvl+0x10/0x10 [ 265.773521][T10078] should_fail_ex+0x414/0x560 [ 265.773550][T10078] should_failslab+0xa8/0x100 [ 265.773573][T10078] __kmalloc_cache_noprof+0x6f/0x6f0 [ 265.773603][T10078] ? taprio_change+0xd33/0x3c40 [ 265.773623][T10078] ? taprio_change+0xaa6/0x3c40 [ 265.773650][T10078] taprio_change+0xd33/0x3c40 [ 265.773693][T10078] ? __pfx_taprio_change+0x10/0x10 [ 265.773729][T10078] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 265.773794][T10078] taprio_init+0x959/0xbd0 [ 265.773829][T10078] ? __pfx_taprio_init+0x10/0x10 [ 265.773854][T10078] ? lockdep_rtnl_is_held+0x26/0x40 [ 265.773880][T10078] ? qdisc_lookup+0x36d/0x6d0 [ 265.773906][T10078] ? __pfx_taprio_init+0x10/0x10 [ 265.773926][T10078] qdisc_create+0x7ac/0xea0 [ 265.773962][T10078] tc_modify_qdisc+0x1538/0x20e0 [ 265.774000][T10078] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 265.774052][T10078] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 265.774074][T10078] rtnetlink_rcv_msg+0x77c/0xb70 [ 265.774095][T10078] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 265.774111][T10078] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 265.774126][T10078] ? ref_tracker_free+0x63a/0x7d0 [ 265.774149][T10078] ? __asan_memcpy+0x40/0x70 [ 265.774171][T10078] ? __pfx_ref_tracker_free+0x10/0x10 [ 265.774202][T10078] netlink_rcv_skb+0x205/0x470 [ 265.774221][T10078] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 265.774239][T10078] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 265.774267][T10078] ? netlink_deliver_tap+0x2e/0x1b0 [ 265.774299][T10078] netlink_unicast+0x82f/0x9e0 [ 265.774333][T10078] ? __pfx_netlink_unicast+0x10/0x10 [ 265.774361][T10078] ? netlink_sendmsg+0x642/0xb30 [ 265.774377][T10078] ? skb_put+0x11b/0x210 [ 265.774399][T10078] netlink_sendmsg+0x805/0xb30 [ 265.774425][T10078] ? __pfx_netlink_sendmsg+0x10/0x10 [ 265.774446][T10078] ? aa_sock_msg_perm+0xf1/0x1d0 [ 265.774472][T10078] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 265.774489][T10078] ? __pfx_netlink_sendmsg+0x10/0x10 [ 265.774508][T10078] __sock_sendmsg+0x21c/0x270 [ 265.774536][T10078] ____sys_sendmsg+0x505/0x830 [ 265.774561][T10078] ? __pfx_____sys_sendmsg+0x10/0x10 [ 265.774589][T10078] ? import_iovec+0x74/0xa0 [ 265.774609][T10078] ___sys_sendmsg+0x21f/0x2a0 [ 265.774631][T10078] ? __pfx____sys_sendmsg+0x10/0x10 [ 265.774683][T10078] ? __fget_files+0x2a/0x420 [ 265.774698][T10078] ? __fget_files+0x3a0/0x420 [ 265.774722][T10078] __x64_sys_sendmsg+0x19b/0x260 [ 265.774745][T10078] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 265.774774][T10078] ? __pfx_ksys_write+0x10/0x10 [ 265.774801][T10078] ? do_syscall_64+0xbe/0xfa0 [ 265.774826][T10078] do_syscall_64+0xfa/0xfa0 [ 265.774845][T10078] ? lockdep_hardirqs_on+0x9c/0x150 [ 265.774890][T10078] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.774907][T10078] ? clear_bhb_loop+0x60/0xb0 [ 265.774929][T10078] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.774945][T10078] RIP: 0033:0x7f18b4d8eec9 [ 265.774962][T10078] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 265.774977][T10078] RSP: 002b:00007f18b5c55038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 265.774996][T10078] RAX: ffffffffffffffda RBX: 00007f18b4fe5fa0 RCX: 00007f18b4d8eec9 [ 265.775009][T10078] RDX: 0000000000000000 RSI: 00002000000007c0 RDI: 0000000000000003 [ 265.775020][T10078] RBP: 00007f18b5c55090 R08: 0000000000000000 R09: 0000000000000000 [ 265.775031][T10078] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 265.775041][T10078] R13: 00007f18b4fe6038 R14: 00007f18b4fe5fa0 R15: 00007ffe8c6bc8e8 [ 265.775070][T10078] [ 266.353068][T10085] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1210'. [ 267.243071][T10113] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1216'. [ 267.847696][T10128] can: request_module (can-proto-0) failed. [ 267.991576][T10138] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1225'. [ 268.057242][T10142] FAULT_INJECTION: forcing a failure. [ 268.057242][T10142] name failslab, interval 1, probability 0, space 0, times 0 [ 268.108611][T10142] CPU: 1 UID: 0 PID: 10142 Comm: syz.3.1224 Not tainted syzkaller #0 PREEMPT(full) [ 268.108641][T10142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 268.108655][T10142] Call Trace: [ 268.108664][T10142] [ 268.108674][T10142] dump_stack_lvl+0x189/0x250 [ 268.108703][T10142] ? __pfx____ratelimit+0x10/0x10 [ 268.108729][T10142] ? __pfx_dump_stack_lvl+0x10/0x10 [ 268.108753][T10142] ? __pfx__printk+0x10/0x10 [ 268.108772][T10142] ? rcu_is_watching+0x15/0xb0 [ 268.108804][T10142] ? __lock_acquire+0xab9/0xd20 [ 268.108833][T10142] should_fail_ex+0x414/0x560 [ 268.108865][T10142] should_failslab+0xa8/0x100 [ 268.108889][T10142] kmem_cache_alloc_noprof+0x74/0x6e0 [ 268.108919][T10142] ? skb_clone+0x212/0x3a0 [ 268.108952][T10142] skb_clone+0x212/0x3a0 [ 268.108985][T10142] __netlink_deliver_tap+0x404/0x850 [ 268.109022][T10142] ? netlink_deliver_tap+0x2e/0x1b0 [ 268.109047][T10142] netlink_deliver_tap+0x19c/0x1b0 [ 268.109072][T10142] netlink_dump+0x92b/0xe90 [ 268.109117][T10142] ? __pfx_netlink_dump+0x10/0x10 [ 268.109158][T10142] ? netlink_recvmsg+0x5b2/0xa30 [ 268.109179][T10142] ? kmem_cache_free+0x19b/0x690 [ 268.109218][T10142] netlink_recvmsg+0x676/0xa30 [ 268.109251][T10142] ? __pfx_netlink_recvmsg+0x10/0x10 [ 268.109273][T10142] ? __lock_acquire+0xab9/0xd20 [ 268.109300][T10142] ? aa_sock_msg_perm+0xf1/0x1d0 [ 268.109332][T10142] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 268.109355][T10142] ? __pfx_netlink_recvmsg+0x10/0x10 [ 268.109380][T10142] sock_recvmsg_nosec+0x183/0x1c0 [ 268.109417][T10142] ____sys_recvmsg+0x3aa/0x460 [ 268.109455][T10142] ? __pfx_____sys_recvmsg+0x10/0x10 [ 268.109501][T10142] ? import_iovec+0x74/0xa0 [ 268.109527][T10142] ___sys_recvmsg+0x1b5/0x510 [ 268.109561][T10142] ? __pfx____sys_recvmsg+0x10/0x10 [ 268.109625][T10142] ? __might_fault+0xb0/0x130 [ 268.109658][T10142] do_recvmmsg+0x307/0x770 [ 268.109696][T10142] ? __pfx_do_recvmmsg+0x10/0x10 [ 268.109738][T10142] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 268.109788][T10142] __x64_sys_recvmmsg+0x190/0x240 [ 268.109820][T10142] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 268.109853][T10142] ? do_syscall_64+0xbe/0xfa0 [ 268.109884][T10142] do_syscall_64+0xfa/0xfa0 [ 268.109909][T10142] ? lockdep_hardirqs_on+0x9c/0x150 [ 268.109936][T10142] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.109957][T10142] ? clear_bhb_loop+0x60/0xb0 [ 268.109985][T10142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.110006][T10142] RIP: 0033:0x7f815f38eec9 [ 268.110026][T10142] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 268.110045][T10142] RSP: 002b:00007f81601a2038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 268.110068][T10142] RAX: ffffffffffffffda RBX: 00007f815f5e5fa0 RCX: 00007f815f38eec9 [ 268.110085][T10142] RDX: 0000000000000008 RSI: 0000200000002c00 RDI: 0000000000000003 [ 268.110107][T10142] RBP: 00007f81601a2090 R08: 0000000000000000 R09: 0000000000000000 [ 268.110120][T10142] R10: 0000000040010020 R11: 0000000000000246 R12: 0000000000000001 [ 268.110134][T10142] R13: 00007f815f5e6038 R14: 00007f815f5e5fa0 R15: 00007fffacdc4eb8 [ 268.110172][T10142] [ 268.612710][T10152] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1229'. [ 268.622028][T10152] netlink: 35 bytes leftover after parsing attributes in process `syz.0.1229'. [ 268.631798][T10152] netlink: 'syz.0.1229': attribute type 6 has an invalid length. [ 268.641549][T10152] netlink: 35 bytes leftover after parsing attributes in process `syz.0.1229'. [ 268.801312][T10163] FAULT_INJECTION: forcing a failure. [ 268.801312][T10163] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 268.834861][T10163] CPU: 1 UID: 0 PID: 10163 Comm: syz.0.1235 Not tainted syzkaller #0 PREEMPT(full) [ 268.834893][T10163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 268.834906][T10163] Call Trace: [ 268.834915][T10163] [ 268.834924][T10163] dump_stack_lvl+0x189/0x250 [ 268.834953][T10163] ? __pfx____ratelimit+0x10/0x10 [ 268.834979][T10163] ? __pfx_dump_stack_lvl+0x10/0x10 [ 268.835003][T10163] ? __pfx__printk+0x10/0x10 [ 268.835027][T10163] ? __might_fault+0xb0/0x130 [ 268.835070][T10163] should_fail_ex+0x414/0x560 [ 268.835104][T10163] _copy_from_iter+0x1de/0x1790 [ 268.835145][T10163] ? rcu_is_watching+0x15/0xb0 [ 268.835175][T10163] ? kmalloc_reserve+0xbd/0x290 [ 268.835199][T10163] ? __pfx__copy_from_iter+0x10/0x10 [ 268.835234][T10163] ? __build_skb_around+0x262/0x3f0 [ 268.835261][T10163] ? netlink_sendmsg+0x642/0xb30 [ 268.835283][T10163] ? skb_put+0x11b/0x210 [ 268.835312][T10163] netlink_sendmsg+0x6b2/0xb30 [ 268.835347][T10163] ? __pfx_netlink_sendmsg+0x10/0x10 [ 268.835375][T10163] ? aa_sock_msg_perm+0xf1/0x1d0 [ 268.835409][T10163] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 268.835431][T10163] ? __pfx_netlink_sendmsg+0x10/0x10 [ 268.835457][T10163] __sock_sendmsg+0x21c/0x270 [ 268.835492][T10163] ____sys_sendmsg+0x505/0x830 [ 268.835525][T10163] ? __pfx_____sys_sendmsg+0x10/0x10 [ 268.835562][T10163] ? import_iovec+0x74/0xa0 [ 268.835587][T10163] ___sys_sendmsg+0x21f/0x2a0 [ 268.835616][T10163] ? __pfx____sys_sendmsg+0x10/0x10 [ 268.835683][T10163] ? __fget_files+0x2a/0x420 [ 268.835702][T10163] ? __fget_files+0x3a0/0x420 [ 268.835734][T10163] __x64_sys_sendmsg+0x19b/0x260 [ 268.835774][T10163] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 268.835812][T10163] ? __pfx_ksys_write+0x10/0x10 [ 268.835847][T10163] ? do_syscall_64+0xbe/0xfa0 [ 268.835879][T10163] do_syscall_64+0xfa/0xfa0 [ 268.835905][T10163] ? lockdep_hardirqs_on+0x9c/0x150 [ 268.835931][T10163] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.835954][T10163] ? clear_bhb_loop+0x60/0xb0 [ 268.835980][T10163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.836002][T10163] RIP: 0033:0x7f6de798eec9 [ 268.836022][T10163] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 268.836042][T10163] RSP: 002b:00007f6de8800038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 268.836065][T10163] RAX: ffffffffffffffda RBX: 00007f6de7be5fa0 RCX: 00007f6de798eec9 [ 268.836082][T10163] RDX: 000000000000084c RSI: 0000200000005d00 RDI: 0000000000000004 [ 268.836096][T10163] RBP: 00007f6de8800090 R08: 0000000000000000 R09: 0000000000000000 [ 268.836109][T10163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 268.836122][T10163] R13: 00007f6de7be6038 R14: 00007f6de7be5fa0 R15: 00007ffcc01ff7d8 [ 268.836159][T10163] [ 269.616144][T10188] lo speed is unknown, defaulting to 1000 [ 270.129595][T10205] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1246'. [ 270.239607][T10207] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 270.340788][T10212] SET target dimension over the limit! [ 270.504850][T10219] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1250'. [ 272.337835][T10253] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1263'. [ 272.532756][T10259] FAULT_INJECTION: forcing a failure. [ 272.532756][T10259] name failslab, interval 1, probability 0, space 0, times 0 [ 272.553525][T10259] CPU: 1 UID: 0 PID: 10259 Comm: syz.0.1267 Not tainted syzkaller #0 PREEMPT(full) [ 272.553556][T10259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 272.553571][T10259] Call Trace: [ 272.553580][T10259] [ 272.553589][T10259] dump_stack_lvl+0x189/0x250 [ 272.553618][T10259] ? __pfx____ratelimit+0x10/0x10 [ 272.553644][T10259] ? __pfx_dump_stack_lvl+0x10/0x10 [ 272.553667][T10259] ? __pfx__printk+0x10/0x10 [ 272.553693][T10259] ? __pfx___might_resched+0x10/0x10 [ 272.553717][T10259] ? fs_reclaim_acquire+0x7d/0x100 [ 272.553757][T10259] should_fail_ex+0x414/0x560 [ 272.553788][T10259] should_failslab+0xa8/0x100 [ 272.553812][T10259] __kvmalloc_node_noprof+0x158/0x910 [ 272.553844][T10259] ? __kmalloc_cache_node_noprof+0x471/0x6f0 [ 272.553875][T10259] ? page_pool_create_percpu+0x314/0xbc0 [ 272.553906][T10259] ? page_pool_create_percpu+0xb2/0xbc0 [ 272.553949][T10259] page_pool_create_percpu+0x314/0xbc0 [ 272.553990][T10259] __veth_napi_enable_range+0x16c/0x700 [ 272.554034][T10259] ? __pfx___veth_napi_enable_range+0x10/0x10 [ 272.554083][T10259] ? netif_napi_set_irq_locked+0x20b/0x720 [ 272.554123][T10259] veth_napi_enable_range+0xff/0x200 [ 272.554164][T10259] veth_set_features+0x1c8/0x2a0 [ 272.554197][T10259] __netdev_update_features+0xa43/0x1be0 [ 272.554230][T10259] ? __bpf_trace_contention_end+0xdc/0x130 [ 272.554286][T10259] ? __pfx___bpf_trace_contention_end+0x10/0x10 [ 272.554321][T10259] ? __pfx___netdev_update_features+0x10/0x10 [ 272.554350][T10259] ? __lock_acquire+0xab9/0xd20 [ 272.554384][T10259] ? __might_fault+0xb0/0x130 [ 272.554440][T10259] ethtool_set_one_feature+0x2b4/0x300 [ 272.554482][T10259] ? __pfx_ethtool_set_one_feature+0x10/0x10 [ 272.554515][T10259] ? bpf_lsm_capable+0x9/0x20 [ 272.554541][T10259] ? security_capable+0x7e/0x2e0 [ 272.554581][T10259] dev_ethtool+0x1098/0x19c0 [ 272.554624][T10259] ? __pfx_dev_ethtool+0x10/0x10 [ 272.554670][T10259] ? dev_load+0x21/0x1f0 [ 272.554694][T10259] dev_ioctl+0x392/0x1150 [ 272.554719][T10259] sock_do_ioctl+0x22c/0x300 [ 272.554754][T10259] ? __pfx_sock_do_ioctl+0x10/0x10 [ 272.554804][T10259] sock_ioctl+0x576/0x790 [ 272.554837][T10259] ? __pfx_sock_ioctl+0x10/0x10 [ 272.554871][T10259] ? __fget_files+0x3a0/0x420 [ 272.554890][T10259] ? __fget_files+0x2a/0x420 [ 272.554913][T10259] ? bpf_lsm_file_ioctl+0x9/0x20 [ 272.554938][T10259] ? __pfx_sock_ioctl+0x10/0x10 [ 272.554967][T10259] __se_sys_ioctl+0xfc/0x170 [ 272.554998][T10259] do_syscall_64+0xfa/0xfa0 [ 272.555023][T10259] ? lockdep_hardirqs_on+0x9c/0x150 [ 272.555049][T10259] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.555071][T10259] ? clear_bhb_loop+0x60/0xb0 [ 272.555099][T10259] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.555126][T10259] RIP: 0033:0x7f6de798eec9 [ 272.555146][T10259] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 272.555165][T10259] RSP: 002b:00007f6de8800038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 272.555189][T10259] RAX: ffffffffffffffda RBX: 00007f6de7be5fa0 RCX: 00007f6de798eec9 [ 272.555206][T10259] RDX: 00002000000002c0 RSI: 0000000000008946 RDI: 0000000000000003 [ 272.555220][T10259] RBP: 00007f6de8800090 R08: 0000000000000000 R09: 0000000000000000 [ 272.555234][T10259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 272.555246][T10259] R13: 00007f6de7be6038 R14: 00007f6de7be5fa0 R15: 00007ffcc01ff7d8 [ 272.555284][T10259] [ 272.555898][T10259] page_pool_create_percpu() gave up with errno -12 [ 272.876375][T10264] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1265'. [ 272.922440][T10259] veth0_to_team: set_features() failed (-12); wanted 0x0000612e4fdd49e9, left 0x0000612e4fdd09e9 [ 272.951645][T10257] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 273.046206][T10269] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1268'. [ 273.240966][T10273] FAULT_INJECTION: forcing a failure. [ 273.240966][T10273] name failslab, interval 1, probability 0, space 0, times 0 [ 273.258705][T10273] CPU: 1 UID: 0 PID: 10273 Comm: syz.0.1270 Not tainted syzkaller #0 PREEMPT(full) [ 273.258734][T10273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 273.258748][T10273] Call Trace: [ 273.258757][T10273] [ 273.258766][T10273] dump_stack_lvl+0x189/0x250 [ 273.258795][T10273] ? __pfx____ratelimit+0x10/0x10 [ 273.258821][T10273] ? __pfx_dump_stack_lvl+0x10/0x10 [ 273.258844][T10273] ? __pfx__printk+0x10/0x10 [ 273.258870][T10273] ? __pfx___might_resched+0x10/0x10 [ 273.258895][T10273] ? fs_reclaim_acquire+0x7d/0x100 [ 273.258933][T10273] should_fail_ex+0x414/0x560 [ 273.258965][T10273] should_failslab+0xa8/0x100 [ 273.258987][T10273] kmem_cache_alloc_noprof+0x74/0x6e0 [ 273.259017][T10273] ? __kernfs_new_node+0xd7/0x7e0 [ 273.259051][T10273] __kernfs_new_node+0xd7/0x7e0 [ 273.259078][T10273] ? __lock_acquire+0xab9/0xd20 [ 273.259109][T10273] ? __pfx___kernfs_new_node+0x10/0x10 [ 273.259137][T10273] ? kernfs_root+0x1c/0x230 [ 273.259171][T10273] ? kernfs_root+0x1c/0x230 [ 273.259197][T10273] ? kernfs_root+0x1c/0x230 [ 273.259220][T10273] ? kernfs_root+0x1c/0x230 [ 273.259252][T10273] kernfs_new_node+0x102/0x210 [ 273.259286][T10273] __kernfs_create_file+0x4b/0x2e0 [ 273.259325][T10273] sysfs_add_file_mode_ns+0x238/0x300 [ 273.259357][T10273] internal_create_group+0x66d/0x1110 [ 273.259404][T10273] ? __pfx_internal_create_group+0x10/0x10 [ 273.259433][T10273] ? kernfs_add_one+0xf0/0x520 [ 273.259470][T10273] sysfs_create_groups+0x59/0x120 [ 273.259500][T10273] device_add_attrs+0xe0/0x5a0 [ 273.259541][T10273] ? __pfx_device_add_attrs+0x10/0x10 [ 273.259580][T10273] ? device_add_class_symlinks+0x21f/0x240 [ 273.259623][T10273] device_add+0x496/0xb50 [ 273.259654][T10273] ? device_initialize+0x24b/0x440 [ 273.259689][T10273] netdev_register_kobject+0x178/0x310 [ 273.259726][T10273] register_netdevice+0x126c/0x1ae0 [ 273.259774][T10273] ? __pfx_register_netdevice+0x10/0x10 [ 273.259808][T10273] ? tun_net_initialize+0x13f/0x450 [ 273.259831][T10273] ? __pfx_tun_net_initialize+0x10/0x10 [ 273.259854][T10273] ? alloc_netdev_mqs+0xd9b/0x11b0 [ 273.259892][T10273] tun_set_iff+0x844/0xf00 [ 273.259923][T10273] __tun_chr_ioctl+0x788/0x1df0 [ 273.259951][T10273] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 273.259981][T10273] ? __fget_files+0x3a0/0x420 [ 273.260000][T10273] ? __fget_files+0x2a/0x420 [ 273.260023][T10273] ? bpf_lsm_file_ioctl+0x9/0x20 [ 273.260048][T10273] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 273.260081][T10273] __se_sys_ioctl+0xfc/0x170 [ 273.260111][T10273] do_syscall_64+0xfa/0xfa0 [ 273.260137][T10273] ? lockdep_hardirqs_on+0x9c/0x150 [ 273.260164][T10273] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.260186][T10273] ? clear_bhb_loop+0x60/0xb0 [ 273.260214][T10273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.260236][T10273] RIP: 0033:0x7f6de798eec9 [ 273.260255][T10273] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 273.260274][T10273] RSP: 002b:00007f6de8800038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 273.260298][T10273] RAX: ffffffffffffffda RBX: 00007f6de7be5fa0 RCX: 00007f6de798eec9 [ 273.260314][T10273] RDX: 0000200000000200 RSI: 00000000400454ca RDI: 0000000000000006 [ 273.260328][T10273] RBP: 00007f6de8800090 R08: 0000000000000000 R09: 0000000000000000 [ 273.260341][T10273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 273.260354][T10273] R13: 00007f6de7be6038 R14: 00007f6de7be5fa0 R15: 00007ffcc01ff7d8 [ 273.260392][T10273] [ 273.631500][T10274] wg1: entered promiscuous mode [ 273.636476][T10274] wg1: entered allmulticast mode [ 273.809618][T10278] netlink: 'syz.0.1272': attribute type 1 has an invalid length. [ 273.817575][T10278] netlink: 'syz.0.1272': attribute type 4 has an invalid length. [ 273.825988][T10278] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.1272'. [ 273.837979][T10278] netlink: 'syz.0.1272': attribute type 1 has an invalid length. [ 273.846139][T10278] netlink: 'syz.0.1272': attribute type 4 has an invalid length. [ 273.854454][T10278] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.1272'. [ 274.187950][T10291] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1276'. [ 274.353688][T10293] 8021q: VLANs not supported on nlmon0 [ 274.887337][T10300] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1280'. [ 275.162461][T10306] IPVS: set_ctl: invalid protocol: 92 100.1.1.2:20004 [ 275.253767][T10298] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1279'. [ 275.293031][T10298] macvtap1: entered promiscuous mode [ 275.309137][T10298] macvtap1: entered allmulticast mode [ 275.368572][T10298] batadv0: entered allmulticast mode [ 275.375438][T10298] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 275.943127][T10304] macvtap1: left promiscuous mode [ 275.978857][T10304] macvtap1: left allmulticast mode [ 275.993577][T10304] batadv0: left allmulticast mode [ 276.091034][T10313] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1282'. [ 276.125006][T10313] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1282'. [ 276.138602][T10313] netlink: 'syz.2.1282': attribute type 6 has an invalid length. [ 276.278037][T10316] veth11: entered promiscuous mode [ 276.319079][T10323] FAULT_INJECTION: forcing a failure. [ 276.319079][T10323] name failslab, interval 1, probability 0, space 0, times 0 [ 276.333549][T10323] CPU: 1 UID: 0 PID: 10323 Comm: syz.1.1287 Not tainted syzkaller #0 PREEMPT(full) [ 276.333578][T10323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 276.333590][T10323] Call Trace: [ 276.333599][T10323] [ 276.333609][T10323] dump_stack_lvl+0x189/0x250 [ 276.333636][T10323] ? __pfx____ratelimit+0x10/0x10 [ 276.333662][T10323] ? __pfx_dump_stack_lvl+0x10/0x10 [ 276.333685][T10323] ? __pfx__printk+0x10/0x10 [ 276.333711][T10323] ? __pfx___might_resched+0x10/0x10 [ 276.333733][T10323] ? fs_reclaim_acquire+0x7d/0x100 [ 276.333771][T10323] should_fail_ex+0x414/0x560 [ 276.333803][T10323] should_failslab+0xa8/0x100 [ 276.333827][T10323] kmem_cache_alloc_node_noprof+0x77/0x710 [ 276.333856][T10323] ? __lock_acquire+0xab9/0xd20 [ 276.333876][T10323] ? __alloc_skb+0x112/0x2d0 [ 276.333905][T10323] __alloc_skb+0x112/0x2d0 [ 276.333960][T10323] alloc_skb_with_frags+0xca/0x890 [ 276.333988][T10323] ? __lock_acquire+0xab9/0xd20 [ 276.334018][T10323] sock_alloc_send_pskb+0x84d/0x980 [ 276.334076][T10323] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 276.334107][T10323] ? is_bpf_text_address+0x26/0x2b0 [ 276.334136][T10323] ? is_bpf_text_address+0x292/0x2b0 [ 276.334159][T10323] ? is_bpf_text_address+0x26/0x2b0 [ 276.334187][T10323] __ip6_append_data+0x2b43/0x3f30 [ 276.334243][T10323] ? __pfx_udplite_getfrag+0x10/0x10 [ 276.334293][T10323] ? __pfx___ip6_append_data+0x10/0x10 [ 276.334324][T10323] ? ip6_setup_cork+0xa1c/0x10e0 [ 276.334361][T10323] ip6_make_skb+0x2ce/0x410 [ 276.334394][T10323] ? __pfx_udplite_getfrag+0x10/0x10 [ 276.334427][T10323] ? __pfx_ip6_make_skb+0x10/0x10 [ 276.334472][T10323] ? ip6_dst_hoplimit+0x65/0x3e0 [ 276.334494][T10323] ? ip6_dst_hoplimit+0x65/0x3e0 [ 276.334522][T10323] udpv6_sendmsg+0x1d1a/0x2510 [ 276.334563][T10323] ? __pfx_udplite_getfrag+0x10/0x10 [ 276.334599][T10323] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 276.334635][T10323] ? __pfx___might_resched+0x10/0x10 [ 276.334677][T10323] ? aa_sk_perm+0x81e/0x950 [ 276.334705][T10323] ? __lock_acquire+0xab9/0xd20 [ 276.334738][T10323] ? inet_send_prepare+0x5c/0x270 [ 276.334764][T10323] ? inet6_sendmsg+0xe4/0x120 [ 276.334790][T10323] __sock_sendmsg+0xe5/0x270 [ 276.334826][T10323] ____sys_sendmsg+0x52d/0x830 [ 276.334859][T10323] ? __pfx_____sys_sendmsg+0x10/0x10 [ 276.334895][T10323] ? import_iovec+0x74/0xa0 [ 276.334921][T10323] ___sys_sendmsg+0x21f/0x2a0 [ 276.334949][T10323] ? __pfx____sys_sendmsg+0x10/0x10 [ 276.335015][T10323] ? __fget_files+0x2a/0x420 [ 276.335034][T10323] ? __fget_files+0x3a0/0x420 [ 276.335070][T10323] __sys_sendmmsg+0x227/0x430 [ 276.335104][T10323] ? __pfx___sys_sendmmsg+0x10/0x10 [ 276.335141][T10323] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 276.335189][T10323] ? ksys_write+0x22a/0x250 [ 276.335222][T10323] ? __pfx_ksys_write+0x10/0x10 [ 276.335259][T10323] __x64_sys_sendmmsg+0xa0/0xc0 [ 276.335288][T10323] do_syscall_64+0xfa/0xfa0 [ 276.335312][T10323] ? lockdep_hardirqs_on+0x9c/0x150 [ 276.335337][T10323] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.335359][T10323] ? clear_bhb_loop+0x60/0xb0 [ 276.335386][T10323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.335408][T10323] RIP: 0033:0x7fc0ac38eec9 [ 276.335427][T10323] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 276.335446][T10323] RSP: 002b:00007fc0ad1cf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 276.335470][T10323] RAX: ffffffffffffffda RBX: 00007fc0ac5e5fa0 RCX: 00007fc0ac38eec9 [ 276.335487][T10323] RDX: 00000000000004ff RSI: 00002000000092c0 RDI: 000000000000000c [ 276.335501][T10323] RBP: 00007fc0ad1cf090 R08: 0000000000000000 R09: 0000000000000000 [ 276.335515][T10323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 276.335528][T10323] R13: 00007fc0ac5e6038 R14: 00007fc0ac5e5fa0 R15: 00007ffd69257b58 [ 276.335564][T10323] [ 277.042009][T10321] tipc: Enabled bearer , priority 0 [ 277.050450][T10321] syzkaller0: entered promiscuous mode [ 277.055967][T10321] syzkaller0: entered allmulticast mode [ 277.074376][T10320] tipc: Resetting bearer [ 277.203657][T10320] tipc: Disabling bearer [ 277.437612][T10339] tipc: Enabled bearer , priority 0 [ 277.499925][T10339] syzkaller0: entered promiscuous mode [ 277.508037][T10339] syzkaller0: entered allmulticast mode [ 277.515726][T10344] __nla_validate_parse: 1 callbacks suppressed [ 277.515744][T10344] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1294'. [ 277.533456][T10344] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1294'. [ 277.549279][T10339] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 277.602985][T10339] net_ratelimit: 1 callbacks suppressed [ 277.603004][T10339] syzkaller0: mtu greater than device maximum [ 277.617667][T10338] tipc: Resetting bearer [ 277.653563][T10351] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1295'. [ 277.675818][T10338] tipc: Disabling bearer [ 277.721741][T10351] netlink: 'syz.1.1295': attribute type 1 has an invalid length. [ 277.741444][T10351] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1295'. [ 277.966800][T10359] sock: sock_timestamping_bind_phc: sock not bind to device [ 278.333453][T10368] FAULT_INJECTION: forcing a failure. [ 278.333453][T10368] name failslab, interval 1, probability 0, space 0, times 0 [ 278.382172][T10368] CPU: 0 UID: 0 PID: 10368 Comm: syz.3.1302 Not tainted syzkaller #0 PREEMPT(full) [ 278.382203][T10368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 278.382217][T10368] Call Trace: [ 278.382225][T10368] [ 278.382234][T10368] dump_stack_lvl+0x189/0x250 [ 278.382263][T10368] ? __pfx____ratelimit+0x10/0x10 [ 278.382288][T10368] ? __pfx_dump_stack_lvl+0x10/0x10 [ 278.382311][T10368] ? __pfx__printk+0x10/0x10 [ 278.382340][T10368] ? __pfx___might_resched+0x10/0x10 [ 278.382363][T10368] ? fs_reclaim_acquire+0x7d/0x100 [ 278.382401][T10368] should_fail_ex+0x414/0x560 [ 278.382434][T10368] should_failslab+0xa8/0x100 [ 278.382457][T10368] __kmalloc_node_track_caller_noprof+0xcd/0x800 [ 278.382497][T10368] ? __request_module+0x2d1/0x5e0 [ 278.382519][T10368] ? __kmalloc_cache_noprof+0x3d5/0x6f0 [ 278.382554][T10368] kstrdup+0x42/0x100 [ 278.382579][T10368] __request_module+0x2d1/0x5e0 [ 278.382607][T10368] ? __pfx___request_module+0x10/0x10 [ 278.382633][T10368] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 278.382681][T10368] nfnetlink_rcv+0x6d8/0x2590 [ 278.382724][T10368] ? __dev_queue_xmit+0x27b/0x3b50 [ 278.382754][T10368] ? __dev_queue_xmit+0x1d79/0x3b50 [ 278.382780][T10368] ? kasan_save_track+0x3e/0x80 [ 278.382838][T10368] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 278.382896][T10368] ? ref_tracker_free+0x63a/0x7d0 [ 278.382932][T10368] ? __asan_memcpy+0x40/0x70 [ 278.382959][T10368] ? __pfx_ref_tracker_free+0x10/0x10 [ 278.383005][T10368] ? skb_clone+0x246/0x3a0 [ 278.383036][T10368] ? __netlink_deliver_tap+0x807/0x850 [ 278.383059][T10368] ? netlink_deliver_tap+0x2e/0x1b0 [ 278.383101][T10368] netlink_unicast+0x82f/0x9e0 [ 278.383144][T10368] ? __pfx_netlink_unicast+0x10/0x10 [ 278.383179][T10368] ? netlink_sendmsg+0x642/0xb30 [ 278.383201][T10368] ? skb_put+0x11b/0x210 [ 278.383228][T10368] netlink_sendmsg+0x805/0xb30 [ 278.383261][T10368] ? __pfx_netlink_sendmsg+0x10/0x10 [ 278.383289][T10368] ? aa_sock_msg_perm+0xf1/0x1d0 [ 278.383321][T10368] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 278.383342][T10368] ? __pfx_netlink_sendmsg+0x10/0x10 [ 278.383367][T10368] __sock_sendmsg+0x21c/0x270 [ 278.383402][T10368] __sys_sendto+0x3bd/0x520 [ 278.383428][T10368] ? __pfx___sys_sendto+0x10/0x10 [ 278.383487][T10368] ? rcu_is_watching+0x15/0xb0 [ 278.383515][T10368] __x64_sys_sendto+0xde/0x100 [ 278.383543][T10368] do_syscall_64+0xfa/0xfa0 [ 278.383568][T10368] ? lockdep_hardirqs_on+0x9c/0x150 [ 278.383594][T10368] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.383616][T10368] ? clear_bhb_loop+0x60/0xb0 [ 278.383643][T10368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.383663][T10368] RIP: 0033:0x7f815f390d5c [ 278.383683][T10368] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 278.383702][T10368] RSP: 002b:00007f81601a0ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 278.383725][T10368] RAX: ffffffffffffffda RBX: 00007f81601a0fc0 RCX: 00007f815f390d5c [ 278.383742][T10368] RDX: 0000000000000020 RSI: 00007f81601a1010 RDI: 0000000000000003 [ 278.383756][T10368] RBP: 0000000000000000 R08: 00007f81601a0f14 R09: 000000000000000c [ 278.383769][T10368] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 278.383782][T10368] R13: 00007f81601a0f68 R14: 00007f81601a1010 R15: 0000000000000000 [ 278.383817][T10368] [ 278.415981][T10371] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.725279][T10371] bridge0: port 2(bridge_slave_1) entered forwarding state [ 278.733078][T10371] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.740347][T10371] bridge0: port 1(bridge_slave_0) entered forwarding state [ 278.787405][T10371] 0ªX¹¦À: left allmulticast mode [ 278.795090][T10371] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 279.030848][T10387] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1307'. [ 279.039933][T10387] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1307'. [ 279.090537][ T12] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 279.109191][ T12] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 279.157133][T10388] lo speed is unknown, defaulting to 1000 [ 279.163258][ T12] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 279.173345][ T12] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 279.191684][T10389] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1306'. [ 279.208854][T10387] tipc: Enabled bearer , priority 0 [ 279.216714][T10391] syzkaller0: entered promiscuous mode [ 279.224131][T10391] syzkaller0: entered allmulticast mode [ 279.253888][T10387] sch_tbf: burst 127 is lower than device gre0 mtu (1560) ! [ 279.301986][T10387] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1307'. [ 279.389076][T10385] tipc: Resetting bearer [ 279.475767][T10385] tipc: Disabling bearer [ 279.513466][T10401] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1310'. [ 279.886017][T10409] FAULT_INJECTION: forcing a failure. [ 279.886017][T10409] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 279.968756][T10409] CPU: 0 UID: 0 PID: 10409 Comm: syz.3.1313 Not tainted syzkaller #0 PREEMPT(full) [ 279.968788][T10409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 279.968801][T10409] Call Trace: [ 279.968810][T10409] [ 279.968820][T10409] dump_stack_lvl+0x189/0x250 [ 279.968849][T10409] ? __pfx____ratelimit+0x10/0x10 [ 279.968876][T10409] ? __pfx_dump_stack_lvl+0x10/0x10 [ 279.968900][T10409] ? __pfx__printk+0x10/0x10 [ 279.968923][T10409] ? __might_fault+0xb0/0x130 [ 279.968967][T10409] should_fail_ex+0x414/0x560 [ 279.969000][T10409] _copy_from_user+0x2d/0xb0 [ 279.969022][T10409] kstrtouint_from_user+0xc4/0x170 [ 279.969063][T10409] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 279.969113][T10409] proc_fail_nth_write+0x88/0x200 [ 279.969141][T10409] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 279.969175][T10409] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 279.969204][T10409] vfs_write+0x27b/0xb30 [ 279.969245][T10409] ? __pfx_vfs_write+0x10/0x10 [ 279.969278][T10409] ? __fget_files+0x2a/0x420 [ 279.969303][T10409] ? __fget_files+0x3a0/0x420 [ 279.969321][T10409] ? __fget_files+0x2a/0x420 [ 279.969350][T10409] ksys_write+0x145/0x250 [ 279.969383][T10409] ? __pfx_ksys_write+0x10/0x10 [ 279.969416][T10409] ? do_syscall_64+0xbe/0xfa0 [ 279.969446][T10409] do_syscall_64+0xfa/0xfa0 [ 279.969469][T10409] ? lockdep_hardirqs_on+0x9c/0x150 [ 279.969495][T10409] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.969517][T10409] ? clear_bhb_loop+0x60/0xb0 [ 279.969543][T10409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.969563][T10409] RIP: 0033:0x7f815f38d97f [ 279.969583][T10409] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 279.969603][T10409] RSP: 002b:00007f8160181030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 279.969625][T10409] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f815f38d97f [ 279.969641][T10409] RDX: 0000000000000001 RSI: 00007f81601810a0 RDI: 0000000000000005 [ 279.969654][T10409] RBP: 00007f8160181090 R08: 0000000000000000 R09: 0000000000000000 [ 279.969667][T10409] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 279.969679][T10409] R13: 00007f815f5e6128 R14: 00007f815f5e6090 R15: 00007fffacdc4eb8 [ 279.969716][T10409] [ 280.493755][T10420] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1317'. [ 282.039865][T10469] netlink: 'syz.4.1331': attribute type 1 has an invalid length. [ 282.122742][T10474] FAULT_INJECTION: forcing a failure. [ 282.122742][T10474] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 282.136144][T10474] CPU: 1 UID: 0 PID: 10474 Comm: syz.0.1333 Not tainted syzkaller #0 PREEMPT(full) [ 282.136175][T10474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 282.136188][T10474] Call Trace: [ 282.136197][T10474] [ 282.136206][T10474] dump_stack_lvl+0x189/0x250 [ 282.136234][T10474] ? __pfx____ratelimit+0x10/0x10 [ 282.136260][T10474] ? __pfx_dump_stack_lvl+0x10/0x10 [ 282.136283][T10474] ? __pfx__printk+0x10/0x10 [ 282.136307][T10474] ? __might_fault+0xb0/0x130 [ 282.136350][T10474] should_fail_ex+0x414/0x560 [ 282.136382][T10474] _copy_from_user+0x2d/0xb0 [ 282.136405][T10474] sctp_setsockopt+0x19f/0x1200 [ 282.136437][T10474] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 282.136474][T10474] do_sock_setsockopt+0x179/0x1b0 [ 282.136505][T10474] __x64_sys_setsockopt+0x13f/0x1b0 [ 282.136536][T10474] do_syscall_64+0xfa/0xfa0 [ 282.136571][T10474] ? lockdep_hardirqs_on+0x9c/0x150 [ 282.136597][T10474] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.136619][T10474] ? clear_bhb_loop+0x60/0xb0 [ 282.136646][T10474] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.136667][T10474] RIP: 0033:0x7f6de798eec9 [ 282.136686][T10474] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 282.136706][T10474] RSP: 002b:00007f6de8800038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 282.136730][T10474] RAX: ffffffffffffffda RBX: 00007f6de7be5fa0 RCX: 00007f6de798eec9 [ 282.136746][T10474] RDX: 0000000000000025 RSI: 0000000000000084 RDI: 0000000000000003 [ 282.136759][T10474] RBP: 00007f6de8800090 R08: 0000000000000090 R09: 0000000000000000 [ 282.136773][T10474] R10: 0000200000001500 R11: 0000000000000246 R12: 0000000000000001 [ 282.136787][T10474] R13: 00007f6de7be6038 R14: 00007f6de7be5fa0 R15: 00007ffcc01ff7d8 [ 282.136823][T10474] [ 282.340097][T10478] FAULT_INJECTION: forcing a failure. [ 282.340097][T10478] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 282.353405][T10478] CPU: 0 UID: 0 PID: 10478 Comm: syz.3.1334 Not tainted syzkaller #0 PREEMPT(full) [ 282.353435][T10478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 282.353448][T10478] Call Trace: [ 282.353457][T10478] [ 282.353467][T10478] dump_stack_lvl+0x189/0x250 [ 282.353495][T10478] ? __pfx____ratelimit+0x10/0x10 [ 282.353543][T10478] ? __pfx_dump_stack_lvl+0x10/0x10 [ 282.353563][T10478] ? __pfx__printk+0x10/0x10 [ 282.353582][T10478] ? __might_fault+0xb0/0x130 [ 282.353619][T10478] should_fail_ex+0x414/0x560 [ 282.353647][T10478] _copy_from_iter+0x1de/0x1790 [ 282.353681][T10478] ? rcu_is_watching+0x15/0xb0 [ 282.353708][T10478] ? kmalloc_reserve+0xbd/0x290 [ 282.353728][T10478] ? __pfx__copy_from_iter+0x10/0x10 [ 282.353757][T10478] ? __build_skb_around+0x262/0x3f0 [ 282.353781][T10478] ? netlink_sendmsg+0x642/0xb30 [ 282.353800][T10478] ? skb_put+0x11b/0x210 [ 282.353826][T10478] netlink_sendmsg+0x6b2/0xb30 [ 282.353859][T10478] ? __pfx_netlink_sendmsg+0x10/0x10 [ 282.353886][T10478] ? aa_sock_msg_perm+0xf1/0x1d0 [ 282.353916][T10478] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 282.353936][T10478] ? __pfx_netlink_sendmsg+0x10/0x10 [ 282.353960][T10478] __sock_sendmsg+0x21c/0x270 [ 282.353994][T10478] ____sys_sendmsg+0x505/0x830 [ 282.354025][T10478] ? __pfx_____sys_sendmsg+0x10/0x10 [ 282.354060][T10478] ? import_iovec+0x74/0xa0 [ 282.354085][T10478] ___sys_sendmsg+0x21f/0x2a0 [ 282.354113][T10478] ? __pfx____sys_sendmsg+0x10/0x10 [ 282.354179][T10478] ? __fget_files+0x2a/0x420 [ 282.354197][T10478] ? __fget_files+0x3a0/0x420 [ 282.354227][T10478] __x64_sys_sendmsg+0x19b/0x260 [ 282.354256][T10478] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 282.354293][T10478] ? __pfx_ksys_write+0x10/0x10 [ 282.354327][T10478] ? do_syscall_64+0xbe/0xfa0 [ 282.354358][T10478] do_syscall_64+0xfa/0xfa0 [ 282.354383][T10478] ? lockdep_hardirqs_on+0x9c/0x150 [ 282.354408][T10478] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.354428][T10478] ? clear_bhb_loop+0x60/0xb0 [ 282.354454][T10478] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.354475][T10478] RIP: 0033:0x7f815f38eec9 [ 282.354494][T10478] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 282.354520][T10478] RSP: 002b:00007f81601a2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 282.354543][T10478] RAX: ffffffffffffffda RBX: 00007f815f5e5fa0 RCX: 00007f815f38eec9 [ 282.354559][T10478] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 282.354573][T10478] RBP: 00007f81601a2090 R08: 0000000000000000 R09: 0000000000000000 [ 282.354586][T10478] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 282.354599][T10478] R13: 00007f815f5e6038 R14: 00007f815f5e5fa0 R15: 00007fffacdc4eb8 [ 282.354635][T10478] [ 282.376047][T10469] macvlan2: entered promiscuous mode [ 282.404348][T10479] netlink: 'syz.2.1332': attribute type 10 has an invalid length. [ 282.409345][T10469] macvlan2: entered allmulticast mode [ 282.665649][T10469] bond1: entered promiscuous mode [ 282.673396][T10469] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 282.701964][T10469] bond1: left promiscuous mode [ 282.746543][T10480] 8021q: adding VLAN 0 to HW filter on device bond2 [ 282.765514][T10483] bond_slave_0: entered promiscuous mode [ 282.771526][T10483] bond_slave_1: entered promiscuous mode [ 282.777291][T10483] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 282.790905][T10483] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 282.803887][T10483] bond2: (slave macvlan2): Enslaving as a backup interface with an up link [ 282.937362][T10492] FAULT_INJECTION: forcing a failure. [ 282.937362][T10492] name failslab, interval 1, probability 0, space 0, times 0 [ 282.951097][T10492] CPU: 1 UID: 0 PID: 10492 Comm: syz.4.1337 Not tainted syzkaller #0 PREEMPT(full) [ 282.951129][T10492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 282.951143][T10492] Call Trace: [ 282.951153][T10492] [ 282.951162][T10492] dump_stack_lvl+0x189/0x250 [ 282.951191][T10492] ? __pfx____ratelimit+0x10/0x10 [ 282.951217][T10492] ? __pfx_dump_stack_lvl+0x10/0x10 [ 282.951248][T10492] ? __pfx__printk+0x10/0x10 [ 282.951276][T10492] ? __lock_acquire+0xab9/0xd20 [ 282.951306][T10492] should_fail_ex+0x414/0x560 [ 282.951338][T10492] should_failslab+0xa8/0x100 [ 282.951360][T10492] kmem_cache_alloc_noprof+0x74/0x6e0 [ 282.951391][T10492] ? skb_clone+0x212/0x3a0 [ 282.951424][T10492] skb_clone+0x212/0x3a0 [ 282.951455][T10492] __netlink_deliver_tap+0x404/0x850 [ 282.951493][T10492] ? netlink_deliver_tap+0x2e/0x1b0 [ 282.951519][T10492] netlink_deliver_tap+0x19c/0x1b0 [ 282.951543][T10492] netlink_unicast+0x7fa/0x9e0 [ 282.951586][T10492] ? __pfx_netlink_unicast+0x10/0x10 [ 282.951627][T10492] ? netlink_sendmsg+0x642/0xb30 [ 282.951647][T10492] ? skb_put+0x11b/0x210 [ 282.951676][T10492] netlink_sendmsg+0x805/0xb30 [ 282.951710][T10492] ? __pfx_netlink_sendmsg+0x10/0x10 [ 282.951738][T10492] ? aa_sock_msg_perm+0xf1/0x1d0 [ 282.951771][T10492] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 282.951803][T10492] ? __pfx_netlink_sendmsg+0x10/0x10 [ 282.951833][T10492] __sock_sendmsg+0x21c/0x270 [ 282.951869][T10492] ____sys_sendmsg+0x505/0x830 [ 282.951902][T10492] ? __pfx_____sys_sendmsg+0x10/0x10 [ 282.951939][T10492] ? import_iovec+0x74/0xa0 [ 282.951964][T10492] ___sys_sendmsg+0x21f/0x2a0 [ 282.951992][T10492] ? __pfx____sys_sendmsg+0x10/0x10 [ 282.952062][T10492] ? __fget_files+0x2a/0x420 [ 282.952080][T10492] ? __fget_files+0x3a0/0x420 [ 282.952110][T10492] __x64_sys_sendmsg+0x19b/0x260 [ 282.952139][T10492] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 282.952174][T10492] ? __pfx_ksys_write+0x10/0x10 [ 282.952208][T10492] ? do_syscall_64+0xbe/0xfa0 [ 282.952240][T10492] do_syscall_64+0xfa/0xfa0 [ 282.952264][T10492] ? lockdep_hardirqs_on+0x9c/0x150 [ 282.952290][T10492] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.952312][T10492] ? clear_bhb_loop+0x60/0xb0 [ 282.952339][T10492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.952360][T10492] RIP: 0033:0x7fe3c878eec9 [ 282.952380][T10492] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 282.952398][T10492] RSP: 002b:00007fe3c95b5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 282.952421][T10492] RAX: ffffffffffffffda RBX: 00007fe3c89e5fa0 RCX: 00007fe3c878eec9 [ 282.952437][T10492] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 282.952450][T10492] RBP: 00007fe3c95b5090 R08: 0000000000000000 R09: 0000000000000000 [ 282.952464][T10492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 282.952476][T10492] R13: 00007fe3c89e6038 R14: 00007fe3c89e5fa0 R15: 00007ffc5cbd27b8 [ 282.952511][T10492] [ 283.477391][T10498] lo speed is unknown, defaulting to 1000 [ 283.486251][T10498] lo speed is unknown, defaulting to 1000 [ 283.507359][T10498] lo speed is unknown, defaulting to 1000 [ 283.548268][T10499] __nla_validate_parse: 6 callbacks suppressed [ 283.548289][T10499] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1338'. [ 283.587484][T10498] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 283.614305][T10498] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 283.659852][T10508] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1342'. [ 283.691250][T10508] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1342'. [ 283.901248][T10499] syz.0.1338 (10499) used greatest stack depth: 16056 bytes left [ 283.940978][T10498] lo speed is unknown, defaulting to 1000 [ 283.973958][T10498] lo speed is unknown, defaulting to 1000 [ 284.038191][T10498] lo speed is unknown, defaulting to 1000 [ 284.090407][T10498] lo speed is unknown, defaulting to 1000 [ 284.167622][T10514] xt_hashlimit: size too large, truncated to 1048576 [ 284.178141][T10498] lo speed is unknown, defaulting to 1000 [ 284.215972][T10514] tun0: tun_chr_ioctl cmd 1074025672 [ 284.228179][T10514] tun0: ignored: set checksum disabled [ 284.259905][T10514] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1344'. [ 284.346155][T10517] netlink: 'syz.1.1344': attribute type 12 has an invalid length. [ 285.281957][T10556] FAULT_INJECTION: forcing a failure. [ 285.281957][T10556] name failslab, interval 1, probability 0, space 0, times 0 [ 285.325539][T10556] CPU: 1 UID: 0 PID: 10556 Comm: syz.3.1354 Not tainted syzkaller #0 PREEMPT(full) [ 285.325578][T10556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 285.325592][T10556] Call Trace: [ 285.325601][T10556] [ 285.325610][T10556] dump_stack_lvl+0x189/0x250 [ 285.325640][T10556] ? __pfx____ratelimit+0x10/0x10 [ 285.325666][T10556] ? __pfx_dump_stack_lvl+0x10/0x10 [ 285.325690][T10556] ? __pfx__printk+0x10/0x10 [ 285.325719][T10556] ? __pfx___might_resched+0x10/0x10 [ 285.325743][T10556] ? fs_reclaim_acquire+0x7d/0x100 [ 285.325781][T10556] should_fail_ex+0x414/0x560 [ 285.325813][T10556] should_failslab+0xa8/0x100 [ 285.325836][T10556] __kmalloc_noprof+0xcb/0x7f0 [ 285.325865][T10556] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 285.325897][T10556] ? rcu_is_watching+0x15/0xb0 [ 285.325928][T10556] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 285.325973][T10556] genl_family_rcv_msg_doit+0xb8/0x300 [ 285.326011][T10556] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 285.326052][T10556] ? apparmor_capable+0x137/0x1b0 [ 285.326077][T10556] ? bpf_lsm_capable+0x9/0x20 [ 285.326114][T10556] ? security_capable+0x7e/0x2e0 [ 285.326149][T10556] genl_rcv_msg+0x60e/0x790 [ 285.326185][T10556] ? __pfx_genl_rcv_msg+0x10/0x10 [ 285.326214][T10556] ? __pfx_wg_set_device+0x10/0x10 [ 285.326240][T10556] ? __asan_memcpy+0x40/0x70 [ 285.326268][T10556] ? __pfx_ref_tracker_free+0x10/0x10 [ 285.326311][T10556] netlink_rcv_skb+0x205/0x470 [ 285.326332][T10556] ? __lock_acquire+0xab9/0xd20 [ 285.326354][T10556] ? __pfx_genl_rcv_msg+0x10/0x10 [ 285.326385][T10556] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 285.326431][T10556] ? down_read+0x1ad/0x2e0 [ 285.326465][T10556] genl_rcv+0x28/0x40 [ 285.326491][T10556] netlink_unicast+0x82f/0x9e0 [ 285.326534][T10556] ? __pfx_netlink_unicast+0x10/0x10 [ 285.326576][T10556] ? netlink_sendmsg+0x642/0xb30 [ 285.326598][T10556] ? skb_put+0x11b/0x210 [ 285.326626][T10556] netlink_sendmsg+0x805/0xb30 [ 285.326658][T10556] ? __pfx_netlink_sendmsg+0x10/0x10 [ 285.326685][T10556] ? aa_sock_msg_perm+0xf1/0x1d0 [ 285.326716][T10556] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 285.326736][T10556] ? __pfx_netlink_sendmsg+0x10/0x10 [ 285.326760][T10556] __sock_sendmsg+0x21c/0x270 [ 285.326797][T10556] ____sys_sendmsg+0x505/0x830 [ 285.326828][T10556] ? __pfx_____sys_sendmsg+0x10/0x10 [ 285.326867][T10556] ? import_iovec+0x74/0xa0 [ 285.326892][T10556] ___sys_sendmsg+0x21f/0x2a0 [ 285.326922][T10556] ? __pfx____sys_sendmsg+0x10/0x10 [ 285.326992][T10556] ? __fget_files+0x2a/0x420 [ 285.327012][T10556] ? __fget_files+0x3a0/0x420 [ 285.327043][T10556] __x64_sys_sendmsg+0x19b/0x260 [ 285.327073][T10556] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 285.327112][T10556] ? rcu_is_watching+0x15/0xb0 [ 285.327148][T10556] do_syscall_64+0xfa/0xfa0 [ 285.327181][T10556] ? lockdep_hardirqs_on+0x9c/0x150 [ 285.327208][T10556] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.327229][T10556] ? clear_bhb_loop+0x60/0xb0 [ 285.327257][T10556] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.327278][T10556] RIP: 0033:0x7f815f38eec9 [ 285.327298][T10556] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 285.327317][T10556] RSP: 002b:00007f81601a2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 285.327340][T10556] RAX: ffffffffffffffda RBX: 00007f815f5e5fa0 RCX: 00007f815f38eec9 [ 285.327356][T10556] RDX: 0000000020008040 RSI: 0000200000001000 RDI: 0000000000000003 [ 285.327371][T10556] RBP: 00007f81601a2090 R08: 0000000000000000 R09: 0000000000000000 [ 285.327384][T10556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 285.327396][T10556] R13: 00007f815f5e6038 R14: 00007f815f5e5fa0 R15: 00007fffacdc4eb8 [ 285.327435][T10556] [ 285.935751][T10568] netlink: 'syz.4.1358': attribute type 1 has an invalid length. [ 285.952206][T10568] netlink: 228 bytes leftover after parsing attributes in process `syz.4.1358'. [ 286.195082][T10570] wg1: entered promiscuous mode [ 286.206855][T10570] wg1: entered allmulticast mode [ 286.215002][T10571] netlink: 536 bytes leftover after parsing attributes in process `syz.4.1358'. [ 286.479506][T10586] FAULT_INJECTION: forcing a failure. [ 286.479506][T10586] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 286.503480][T10586] CPU: 1 UID: 0 PID: 10586 Comm: syz.3.1363 Not tainted syzkaller #0 PREEMPT(full) [ 286.503510][T10586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 286.503528][T10586] Call Trace: [ 286.503537][T10586] [ 286.503547][T10586] dump_stack_lvl+0x189/0x250 [ 286.503575][T10586] ? __pfx____ratelimit+0x10/0x10 [ 286.503602][T10586] ? __pfx_dump_stack_lvl+0x10/0x10 [ 286.503625][T10586] ? __pfx__printk+0x10/0x10 [ 286.503649][T10586] ? fs_reclaim_acquire+0x7d/0x100 [ 286.503694][T10586] should_fail_ex+0x414/0x560 [ 286.503727][T10586] prepare_alloc_pages+0x213/0x610 [ 286.503770][T10586] __alloc_frozen_pages_noprof+0x123/0x370 [ 286.503798][T10586] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 286.503832][T10586] ? policy_nodemask+0x27c/0x720 [ 286.503873][T10586] alloc_pages_mpol+0x232/0x4a0 [ 286.503915][T10586] vma_alloc_folio_noprof+0xe4/0x200 [ 286.503954][T10586] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 286.504005][T10586] folio_prealloc+0x30/0x180 [ 286.504039][T10586] do_wp_page+0x1231/0x5800 [ 286.504093][T10586] ? __pfx_do_wp_page+0x10/0x10 [ 286.504118][T10586] ? do_raw_spin_lock+0x121/0x290 [ 286.504166][T10586] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 286.504208][T10586] __handle_mm_fault+0x1033/0x5400 [ 286.504256][T10586] ? __pfx___handle_mm_fault+0x10/0x10 [ 286.504302][T10586] ? follow_page_pte+0xd03/0x13e0 [ 286.504341][T10586] handle_mm_fault+0x40a/0x8e0 [ 286.504384][T10586] __get_user_pages+0x165c/0x2a00 [ 286.504449][T10586] __gup_longterm_locked+0xde4/0x1660 [ 286.504494][T10586] ? sanity_check_pinned_pages+0x1241/0x1300 [ 286.504524][T10586] ? gup_fast_fallback+0x1b86/0x22d0 [ 286.504557][T10586] gup_fast_fallback+0x1d65/0x22d0 [ 286.504585][T10586] ? __kernel_text_address+0xd/0x40 [ 286.504619][T10586] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 286.504686][T10586] ? __pfx_gup_fast_fallback+0x10/0x10 [ 286.504712][T10586] ? kasan_save_track+0x4f/0x80 [ 286.504743][T10586] ? __kasan_kmalloc+0x93/0xb0 [ 286.504773][T10586] ? __kmalloc_noprof+0x411/0x7f0 [ 286.504801][T10586] ? sock_kmalloc+0xd6/0x160 [ 286.504828][T10586] ? skcipher_recvmsg+0x3d1/0x11d0 [ 286.504854][T10586] ? sock_recvmsg+0x22c/0x270 [ 286.504883][T10586] ? ____sys_recvmsg+0x1c9/0x460 [ 286.504909][T10586] ? __x64_sys_recvmsg+0x198/0x260 [ 286.504933][T10586] ? do_syscall_64+0xfa/0xfa0 [ 286.504958][T10586] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.504987][T10586] ? pin_user_pages_fast+0x4d/0xb0 [ 286.505019][T10586] iov_iter_extract_pages+0x35f/0x5e0 [ 286.505051][T10586] extract_iter_to_sg+0xe46/0x24e0 [ 286.505102][T10586] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 286.505138][T10586] ? rcu_is_watching+0x15/0xb0 [ 286.505173][T10586] ? trace_kmalloc+0x1f/0xd0 [ 286.505202][T10586] ? sock_kmalloc+0xd6/0x160 [ 286.505237][T10586] ? __asan_memset+0x22/0x50 [ 286.505268][T10586] af_alg_get_rsgl+0x436/0x810 [ 286.505316][T10586] skcipher_recvmsg+0x3d1/0x11d0 [ 286.505350][T10586] ? aa_sk_perm+0x81e/0x950 [ 286.505393][T10586] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 286.505426][T10586] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 286.505446][T10586] ? security_socket_recvmsg+0x7e/0x2e0 [ 286.505482][T10586] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 286.505510][T10586] sock_recvmsg+0x22c/0x270 [ 286.505548][T10586] ____sys_recvmsg+0x1c9/0x460 [ 286.505586][T10586] ? __pfx_____sys_recvmsg+0x10/0x10 [ 286.505633][T10586] ? import_iovec+0x74/0xa0 [ 286.505659][T10586] ___sys_recvmsg+0x1b5/0x510 [ 286.505694][T10586] ? __pfx____sys_recvmsg+0x10/0x10 [ 286.505749][T10586] ? __fget_files+0x3a0/0x420 [ 286.505782][T10586] __x64_sys_recvmsg+0x198/0x260 [ 286.505819][T10586] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 286.505858][T10586] ? __pfx_ksys_write+0x10/0x10 [ 286.505894][T10586] ? do_syscall_64+0xbe/0xfa0 [ 286.505926][T10586] do_syscall_64+0xfa/0xfa0 [ 286.505951][T10586] ? lockdep_hardirqs_on+0x9c/0x150 [ 286.505978][T10586] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.505999][T10586] ? clear_bhb_loop+0x60/0xb0 [ 286.506026][T10586] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.506048][T10586] RIP: 0033:0x7f815f38eec9 [ 286.506067][T10586] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 286.506087][T10586] RSP: 002b:00007f81601a2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 286.506110][T10586] RAX: ffffffffffffffda RBX: 00007f815f5e5fa0 RCX: 00007f815f38eec9 [ 286.506126][T10586] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000008 [ 286.506140][T10586] RBP: 00007f81601a2090 R08: 0000000000000000 R09: 0000000000000000 [ 286.506177][T10586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 286.506191][T10586] R13: 00007f815f5e6038 R14: 00007f815f5e5fa0 R15: 00007fffacdc4eb8 [ 286.506230][T10586] [ 287.432277][T10599] 8021q: VLANs not supported on nlmon0 [ 287.453584][T10602] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1365'. [ 287.716514][T10613] netlink: 348 bytes leftover after parsing attributes in process `syz.2.1369'. [ 287.761377][T10613] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1369'. [ 287.862984][T10613] lo speed is unknown, defaulting to 1000 [ 287.904488][T10617] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1369'. [ 287.926471][T10619] FAULT_INJECTION: forcing a failure. [ 287.926471][T10619] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 287.961060][T10619] CPU: 1 UID: 0 PID: 10619 Comm: syz.1.1372 Not tainted syzkaller #0 PREEMPT(full) [ 287.961092][T10619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 287.961105][T10619] Call Trace: [ 287.961115][T10619] [ 287.961125][T10619] dump_stack_lvl+0x189/0x250 [ 287.961154][T10619] ? __pfx____ratelimit+0x10/0x10 [ 287.961180][T10619] ? __pfx_dump_stack_lvl+0x10/0x10 [ 287.961204][T10619] ? __pfx__printk+0x10/0x10 [ 287.961227][T10619] ? __might_fault+0xb0/0x130 [ 287.961270][T10619] should_fail_ex+0x414/0x560 [ 287.961309][T10619] _copy_from_user+0x2d/0xb0 [ 287.961331][T10619] ___sys_recvmsg+0x12e/0x510 [ 287.961367][T10619] ? __pfx____sys_recvmsg+0x10/0x10 [ 287.961429][T10619] ? __might_fault+0xb0/0x130 [ 287.961464][T10619] do_recvmmsg+0x307/0x770 [ 287.961502][T10619] ? __pfx_do_recvmmsg+0x10/0x10 [ 287.961544][T10619] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 287.961593][T10619] __x64_sys_recvmmsg+0x190/0x240 [ 287.961625][T10619] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 287.961658][T10619] ? do_syscall_64+0xbe/0xfa0 [ 287.961690][T10619] do_syscall_64+0xfa/0xfa0 [ 287.961715][T10619] ? lockdep_hardirqs_on+0x9c/0x150 [ 287.961742][T10619] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.961763][T10619] ? clear_bhb_loop+0x60/0xb0 [ 287.961790][T10619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.961812][T10619] RIP: 0033:0x7fc0ac38eec9 [ 287.961831][T10619] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 287.961850][T10619] RSP: 002b:00007fc0ad1cf038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 287.961873][T10619] RAX: ffffffffffffffda RBX: 00007fc0ac5e5fa0 RCX: 00007fc0ac38eec9 [ 287.961890][T10619] RDX: 040000000000038f RSI: 0000200000000d40 RDI: 0000000000000005 [ 287.961905][T10619] RBP: 00007fc0ad1cf090 R08: 0000000000000000 R09: 0000000000000000 [ 287.961918][T10619] R10: 0000000000010020 R11: 0000000000000246 R12: 0000000000000001 [ 287.961932][T10619] R13: 00007fc0ac5e6038 R14: 00007fc0ac5e5fa0 R15: 00007ffd69257b58 [ 287.961972][T10619] [ 288.339219][T10621] syzkaller1: entered promiscuous mode [ 288.378977][T10621] syzkaller1: entered allmulticast mode [ 288.508665][T10624] macsec0: entered promiscuous mode [ 288.538434][T10624] macsec0: left promiscuous mode [ 288.666308][T10629] netlink: 'syz.3.1375': attribute type 5 has an invalid length. [ 288.700020][T10629] batman_adv: batadv0: Adding interface: vxlan1 [ 288.706496][T10629] batman_adv: batadv0: The MTU of interface vxlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1568 would solve the problem. [ 288.734729][T10629] batman_adv: batadv0: Interface activated: vxlan1 [ 288.821714][T10633] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1377'. [ 288.831636][T10625] lo speed is unknown, defaulting to 1000 [ 288.848745][T10613] lo speed is unknown, defaulting to 1000 [ 289.283192][T10625] lo speed is unknown, defaulting to 1000 [ 289.830273][T10656] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 290.384617][T10669] FAULT_INJECTION: forcing a failure. [ 290.384617][T10669] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 290.408235][T10670] FAULT_INJECTION: forcing a failure. [ 290.408235][T10670] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 290.438945][T10669] CPU: 1 UID: 0 PID: 10669 Comm: syz.1.1386 Not tainted syzkaller #0 PREEMPT(full) [ 290.438976][T10669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 290.438990][T10669] Call Trace: [ 290.438998][T10669] [ 290.439008][T10669] dump_stack_lvl+0x189/0x250 [ 290.439037][T10669] ? __pfx____ratelimit+0x10/0x10 [ 290.439063][T10669] ? __pfx_dump_stack_lvl+0x10/0x10 [ 290.439086][T10669] ? __pfx__printk+0x10/0x10 [ 290.439108][T10669] ? __might_fault+0xb0/0x130 [ 290.439151][T10669] should_fail_ex+0x414/0x560 [ 290.439183][T10669] _copy_from_iter+0x1de/0x1790 [ 290.439212][T10669] ? __lruvec_stat_mod_folio+0x6f/0x2e0 [ 290.439243][T10669] ? __phys_addr+0xd3/0x180 [ 290.439279][T10669] ? __pfx__copy_from_iter+0x10/0x10 [ 290.439312][T10669] ? rcu_is_watching+0x15/0xb0 [ 290.439337][T10669] ? trace_kmalloc+0x1f/0xd0 [ 290.439363][T10669] ? __kmalloc_noprof+0x432/0x7f0 [ 290.439390][T10669] ? bcm_tx_setup+0x598/0x1bd0 [ 290.439419][T10669] bcm_tx_setup+0x6d9/0x1bd0 [ 290.439459][T10669] bcm_sendmsg+0x45c/0x6a0 [ 290.439487][T10669] ? __pfx_bcm_sendmsg+0x10/0x10 [ 290.439515][T10669] ? aa_sock_msg_perm+0xf1/0x1d0 [ 290.439551][T10669] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 290.439572][T10669] ? __pfx_bcm_sendmsg+0x10/0x10 [ 290.439593][T10669] __sock_sendmsg+0x21c/0x270 [ 290.439630][T10669] ____sys_sendmsg+0x505/0x830 [ 290.439663][T10669] ? __pfx_____sys_sendmsg+0x10/0x10 [ 290.439700][T10669] ? import_iovec+0x74/0xa0 [ 290.439725][T10669] ___sys_sendmsg+0x21f/0x2a0 [ 290.439754][T10669] ? __pfx____sys_sendmsg+0x10/0x10 [ 290.439818][T10669] ? __fget_files+0x2a/0x420 [ 290.439843][T10669] ? __fget_files+0x3a0/0x420 [ 290.439872][T10669] __x64_sys_sendmsg+0x19b/0x260 [ 290.439901][T10669] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 290.439936][T10669] ? __pfx_ksys_write+0x10/0x10 [ 290.439971][T10669] ? do_syscall_64+0xbe/0xfa0 [ 290.440001][T10669] do_syscall_64+0xfa/0xfa0 [ 290.440026][T10669] ? lockdep_hardirqs_on+0x9c/0x150 [ 290.440051][T10669] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.440074][T10669] ? clear_bhb_loop+0x60/0xb0 [ 290.440101][T10669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.440122][T10669] RIP: 0033:0x7fc0ac38eec9 [ 290.440142][T10669] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 290.440161][T10669] RSP: 002b:00007fc0ad1cf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 290.440183][T10669] RAX: ffffffffffffffda RBX: 00007fc0ac5e5fa0 RCX: 00007fc0ac38eec9 [ 290.440199][T10669] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000006 [ 290.440212][T10669] RBP: 00007fc0ad1cf090 R08: 0000000000000000 R09: 0000000000000000 [ 290.440226][T10669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 290.440239][T10669] R13: 00007fc0ac5e6038 R14: 00007fc0ac5e5fa0 R15: 00007ffd69257b58 [ 290.440275][T10669] [ 290.731572][T10670] CPU: 0 UID: 0 PID: 10670 Comm: syz.0.1388 Not tainted syzkaller #0 PREEMPT(full) [ 290.731602][T10670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 290.731615][T10670] Call Trace: [ 290.731625][T10670] [ 290.731634][T10670] dump_stack_lvl+0x189/0x250 [ 290.731662][T10670] ? __pfx____ratelimit+0x10/0x10 [ 290.731688][T10670] ? __pfx_dump_stack_lvl+0x10/0x10 [ 290.731711][T10670] ? __pfx__printk+0x10/0x10 [ 290.731734][T10670] ? __might_fault+0xb0/0x130 [ 290.731784][T10670] should_fail_ex+0x414/0x560 [ 290.731816][T10670] _copy_from_user+0x2d/0xb0 [ 290.731839][T10670] kstrtouint_from_user+0xc4/0x170 [ 290.731872][T10670] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 290.731931][T10670] proc_fail_nth_write+0x88/0x200 [ 290.731959][T10670] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 290.731993][T10670] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 290.732022][T10670] vfs_write+0x27b/0xb30 [ 290.732063][T10670] ? __pfx_vfs_write+0x10/0x10 [ 290.732095][T10670] ? __fget_files+0x2a/0x420 [ 290.732119][T10670] ? __fget_files+0x3a0/0x420 [ 290.732137][T10670] ? __fget_files+0x2a/0x420 [ 290.732166][T10670] ksys_write+0x145/0x250 [ 290.732199][T10670] ? __pfx_ksys_write+0x10/0x10 [ 290.732233][T10670] ? do_syscall_64+0xbe/0xfa0 [ 290.732264][T10670] do_syscall_64+0xfa/0xfa0 [ 290.732289][T10670] ? lockdep_hardirqs_on+0x9c/0x150 [ 290.732315][T10670] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.732336][T10670] ? clear_bhb_loop+0x60/0xb0 [ 290.732362][T10670] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.732383][T10670] RIP: 0033:0x7f6de798d97f [ 290.732402][T10670] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 290.732421][T10670] RSP: 002b:00007f6de87df030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 290.732444][T10670] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f6de798d97f [ 290.732459][T10670] RDX: 0000000000000001 RSI: 00007f6de87df0a0 RDI: 0000000000000004 [ 290.732473][T10670] RBP: 00007f6de87df090 R08: 0000000000000000 R09: 0000000000000000 [ 290.732486][T10670] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 290.732498][T10670] R13: 00007f6de7be6128 R14: 00007f6de7be6090 R15: 00007ffcc01ff7d8 [ 290.732534][T10670] [ 291.134134][T10679] ieee802154 phy0 wpan0: encryption failed: -22 [ 291.856287][T10707] FAULT_INJECTION: forcing a failure. [ 291.856287][T10707] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 291.875053][T10703] lo speed is unknown, defaulting to 1000 [ 291.890624][T10707] CPU: 0 UID: 0 PID: 10707 Comm: syz.4.1402 Not tainted syzkaller #0 PREEMPT(full) [ 291.890653][T10707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 291.890667][T10707] Call Trace: [ 291.890675][T10707] [ 291.890684][T10707] dump_stack_lvl+0x189/0x250 [ 291.890713][T10707] ? __pfx____ratelimit+0x10/0x10 [ 291.890739][T10707] ? __pfx_dump_stack_lvl+0x10/0x10 [ 291.890762][T10707] ? __pfx__printk+0x10/0x10 [ 291.890786][T10707] ? __might_fault+0xb0/0x130 [ 291.890828][T10707] should_fail_ex+0x414/0x560 [ 291.890860][T10707] _copy_from_user+0x2d/0xb0 [ 291.890882][T10707] csum_and_copy_from_iter_full+0x694/0x1ed0 [ 291.890911][T10707] ? alloc_skb_with_frags+0x7df/0x890 [ 291.890960][T10707] ? sock_alloc_send_pskb+0x86b/0x980 [ 291.890988][T10707] ? __pfx_csum_and_copy_from_iter_full+0x10/0x10 [ 291.891035][T10707] ip_generic_getfrag+0x12f/0x2b0 [ 291.891066][T10707] ? udpv6_sendmsg+0x1d1a/0x2510 [ 291.891097][T10707] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 291.891127][T10707] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.891153][T10707] ? skb_put+0x11b/0x210 [ 291.891181][T10707] __ip6_append_data+0x30e7/0x3f30 [ 291.891239][T10707] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 291.891291][T10707] ? __pfx___ip6_append_data+0x10/0x10 [ 291.891323][T10707] ? ip6_setup_cork+0xa1c/0x10e0 [ 291.891361][T10707] ip6_make_skb+0x2ce/0x410 [ 291.891392][T10707] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 291.891429][T10707] ? __pfx_ip6_make_skb+0x10/0x10 [ 291.891471][T10707] ? ip6_sk_dst_lookup_flow+0x7f3/0x9b0 [ 291.891504][T10707] ? udpv6_sendmsg+0x175d/0x2510 [ 291.891535][T10707] udpv6_sendmsg+0x1d1a/0x2510 [ 291.891577][T10707] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 291.891617][T10707] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 291.891653][T10707] ? __pfx___might_resched+0x10/0x10 [ 291.891697][T10707] ? aa_sk_perm+0x81e/0x950 [ 291.891740][T10707] ? inet_send_prepare+0x5c/0x270 [ 291.891766][T10707] ? inet6_sendmsg+0xe4/0x120 [ 291.891791][T10707] __sock_sendmsg+0xe5/0x270 [ 291.891827][T10707] ____sys_sendmsg+0x52d/0x830 [ 291.891860][T10707] ? __pfx_____sys_sendmsg+0x10/0x10 [ 291.891897][T10707] ? import_iovec+0x74/0xa0 [ 291.891929][T10707] ___sys_sendmsg+0x21f/0x2a0 [ 291.891959][T10707] ? __pfx____sys_sendmsg+0x10/0x10 [ 291.892027][T10707] ? __fget_files+0x2a/0x420 [ 291.892046][T10707] ? __fget_files+0x3a0/0x420 [ 291.892078][T10707] __sys_sendmmsg+0x227/0x430 [ 291.892111][T10707] ? __pfx___sys_sendmmsg+0x10/0x10 [ 291.892149][T10707] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 291.892198][T10707] ? ksys_write+0x22a/0x250 [ 291.892230][T10707] ? __pfx_ksys_write+0x10/0x10 [ 291.892265][T10707] __x64_sys_sendmmsg+0xa0/0xc0 [ 291.892292][T10707] do_syscall_64+0xfa/0xfa0 [ 291.892318][T10707] ? lockdep_hardirqs_on+0x9c/0x150 [ 291.892344][T10707] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.892373][T10707] ? clear_bhb_loop+0x60/0xb0 [ 291.892399][T10707] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.892420][T10707] RIP: 0033:0x7fe3c878eec9 [ 291.892440][T10707] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 291.892459][T10707] RSP: 002b:00007fe3c95b5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 291.892481][T10707] RAX: ffffffffffffffda RBX: 00007fe3c89e5fa0 RCX: 00007fe3c878eec9 [ 291.892497][T10707] RDX: 0000000000000001 RSI: 00002000000003c0 RDI: 0000000000000004 [ 291.892534][T10707] RBP: 00007fe3c95b5090 R08: 0000000000000000 R09: 0000000000000000 [ 291.892547][T10707] R10: 0000000000000080 R11: 0000000000000246 R12: 0000000000000002 [ 291.892560][T10707] R13: 00007fe3c89e6038 R14: 00007fe3c89e5fa0 R15: 00007ffc5cbd27b8 [ 291.892594][T10707] [ 292.705819][T10718] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1406'. [ 293.079279][T10730] netlink: 296 bytes leftover after parsing attributes in process `syz.4.1411'. [ 293.181882][T10703] lo speed is unknown, defaulting to 1000 [ 293.314432][T10734] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1414'. [ 293.352664][T10734] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1414'. [ 293.586581][T10739] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1415'. [ 294.025687][T10742] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1416'. [ 294.046736][T10742] netlink: 35 bytes leftover after parsing attributes in process `syz.4.1416'. [ 294.082476][T10742] netlink: 'syz.4.1416': attribute type 6 has an invalid length. [ 294.114257][T10742] netlink: 35 bytes leftover after parsing attributes in process `syz.4.1416'. [ 294.147424][T10747] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1416'. [ 294.320944][T10751] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 294.381248][T10751] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.389038][T10751] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.304990][T10768] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1424'. [ 295.530283][T10774] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1427'. [ 295.558169][T10774] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1427'. [ 296.064138][T10784] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1431'. [ 296.173570][T10784] nbd: socks must be embedded in a SOCK_ITEM attr [ 296.209870][ T7457] block nbd64: NBD_DISCONNECT [ 296.242642][T10785] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1431'. [ 296.264762][T10785] nbd: device at index 64 is going down [ 296.313967][T10789] lo speed is unknown, defaulting to 1000 [ 296.507901][ T5883] udevd[5883]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 296.669458][T10798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 296.707876][T10798] 8021q: adding VLAN 0 to HW filter on device team0 [ 296.772638][T10798] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 297.186668][T10789] lo speed is unknown, defaulting to 1000 [ 297.302426][T10810] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1437'. [ 297.378097][T10810] netlink: 'syz.1.1437': attribute type 4 has an invalid length. [ 297.395476][T10813] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 297.407517][T10813] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 298.160941][T10827] vlan2: entered promiscuous mode [ 298.166034][T10827] team0: entered promiscuous mode [ 298.212700][T10827] team_slave_0: entered promiscuous mode [ 298.222643][T10827] team_slave_1: entered promiscuous mode [ 298.786591][T10845] lo speed is unknown, defaulting to 1000 [ 299.029224][T10848] __nla_validate_parse: 27 callbacks suppressed [ 299.029246][T10848] netlink: 676 bytes leftover after parsing attributes in process `syz.4.1447'. [ 299.068780][T10848] netlink: 676 bytes leftover after parsing attributes in process `syz.4.1447'. [ 299.120249][T10848] netlink: 676 bytes leftover after parsing attributes in process `syz.4.1447'. [ 299.148799][T10848] netlink: 676 bytes leftover after parsing attributes in process `syz.4.1447'. [ 299.159820][T10852] sctp: [Deprecated]: syz.1.1448 (pid 10852) Use of struct sctp_assoc_value in delayed_ack socket option. [ 299.159820][T10852] Use struct sctp_sack_info instead [ 299.239539][T10848] netlink: 676 bytes leftover after parsing attributes in process `syz.4.1447'. [ 299.257053][T10848] netlink: 676 bytes leftover after parsing attributes in process `syz.4.1447'. [ 299.301154][ T5838] Bluetooth: hci4: command 0x0405 tx timeout [ 299.346990][T10848] netlink: 676 bytes leftover after parsing attributes in process `syz.4.1447'. [ 299.358658][T10848] netlink: 676 bytes leftover after parsing attributes in process `syz.4.1447'. [ 299.412816][T10848] netlink: 676 bytes leftover after parsing attributes in process `syz.4.1447'. [ 299.428674][T10848] netlink: 676 bytes leftover after parsing attributes in process `syz.4.1447'. [ 299.827886][T10863] netlink: 'syz.2.1451': attribute type 10 has an invalid length. [ 299.844621][T10845] lo speed is unknown, defaulting to 1000 [ 301.032039][T10900] FAULT_INJECTION: forcing a failure. [ 301.032039][T10900] name failslab, interval 1, probability 0, space 0, times 0 [ 301.045816][T10900] CPU: 1 UID: 0 PID: 10900 Comm: syz.2.1464 Not tainted syzkaller #0 PREEMPT(full) [ 301.045844][T10900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 301.045866][T10900] Call Trace: [ 301.045875][T10900] [ 301.045884][T10900] dump_stack_lvl+0x189/0x250 [ 301.045912][T10900] ? __pfx____ratelimit+0x10/0x10 [ 301.045937][T10900] ? __pfx_dump_stack_lvl+0x10/0x10 [ 301.045959][T10900] ? __pfx__printk+0x10/0x10 [ 301.045987][T10900] ? __pfx___might_resched+0x10/0x10 [ 301.046008][T10900] ? fs_reclaim_acquire+0x7d/0x100 [ 301.046047][T10900] should_fail_ex+0x414/0x560 [ 301.046079][T10900] should_failslab+0xa8/0x100 [ 301.046103][T10900] __kmalloc_noprof+0xcb/0x7f0 [ 301.046132][T10900] ? iovec_from_user+0x87/0x250 [ 301.046158][T10900] iovec_from_user+0x87/0x250 [ 301.046184][T10900] __import_iovec+0x163/0x7f0 [ 301.046216][T10900] import_iovec+0x74/0xa0 [ 301.046241][T10900] ___sys_sendmsg+0x1e7/0x2a0 [ 301.046270][T10900] ? __pfx____sys_sendmsg+0x10/0x10 [ 301.046337][T10900] ? __fget_files+0x2a/0x420 [ 301.046357][T10900] ? __fget_files+0x3a0/0x420 [ 301.046386][T10900] __sys_sendmmsg+0x227/0x430 [ 301.046419][T10900] ? __pfx___sys_sendmmsg+0x10/0x10 [ 301.046455][T10900] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 301.046503][T10900] ? ksys_write+0x22a/0x250 [ 301.046537][T10900] ? __pfx_ksys_write+0x10/0x10 [ 301.046573][T10900] __x64_sys_sendmmsg+0xa0/0xc0 [ 301.046603][T10900] do_syscall_64+0xfa/0xfa0 [ 301.046627][T10900] ? lockdep_hardirqs_on+0x9c/0x150 [ 301.046653][T10900] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.046675][T10900] ? clear_bhb_loop+0x60/0xb0 [ 301.046701][T10900] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.046722][T10900] RIP: 0033:0x7f18b4d8eec9 [ 301.046742][T10900] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 301.046761][T10900] RSP: 002b:00007f18b5c55038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 301.046784][T10900] RAX: ffffffffffffffda RBX: 00007f18b4fe5fa0 RCX: 00007f18b4d8eec9 [ 301.046800][T10900] RDX: 0400000000000172 RSI: 0000200000003cc0 RDI: 0000000000000003 [ 301.046815][T10900] RBP: 00007f18b5c55090 R08: 0000000000000000 R09: 0000000000000000 [ 301.046828][T10900] R10: 0000000004001c00 R11: 0000000000000246 R12: 0000000000000001 [ 301.046841][T10900] R13: 00007f18b4fe6038 R14: 00007f18b4fe5fa0 R15: 00007ffe8c6bc8e8 [ 301.046884][T10900] [ 301.511957][T10911] FAULT_INJECTION: forcing a failure. [ 301.511957][T10911] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 301.556232][T10911] CPU: 0 UID: 0 PID: 10911 Comm: syz.0.1468 Not tainted syzkaller #0 PREEMPT(full) [ 301.556264][T10911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 301.556278][T10911] Call Trace: [ 301.556287][T10911] [ 301.556296][T10911] dump_stack_lvl+0x189/0x250 [ 301.556325][T10911] ? __pfx____ratelimit+0x10/0x10 [ 301.556351][T10911] ? __pfx_dump_stack_lvl+0x10/0x10 [ 301.556374][T10911] ? __pfx__printk+0x10/0x10 [ 301.556398][T10911] ? __might_fault+0xb0/0x130 [ 301.556440][T10911] should_fail_ex+0x414/0x560 [ 301.556472][T10911] _copy_from_iter+0x1de/0x1790 [ 301.556517][T10911] ? rcu_is_watching+0x15/0xb0 [ 301.556547][T10911] ? kmalloc_reserve+0xbd/0x290 [ 301.556571][T10911] ? __pfx__copy_from_iter+0x10/0x10 [ 301.556604][T10911] ? __build_skb_around+0x262/0x3f0 [ 301.556631][T10911] ? netlink_sendmsg+0x642/0xb30 [ 301.556652][T10911] ? skb_put+0x11b/0x210 [ 301.556679][T10911] netlink_sendmsg+0x6b2/0xb30 [ 301.556714][T10911] ? __pfx_netlink_sendmsg+0x10/0x10 [ 301.556741][T10911] ? aa_sock_msg_perm+0xf1/0x1d0 [ 301.556782][T10911] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 301.556803][T10911] ? __pfx_netlink_sendmsg+0x10/0x10 [ 301.556828][T10911] __sock_sendmsg+0x21c/0x270 [ 301.556864][T10911] ____sys_sendmsg+0x52d/0x830 [ 301.556896][T10911] ? __pfx_____sys_sendmsg+0x10/0x10 [ 301.556933][T10911] ? import_iovec+0x74/0xa0 [ 301.556958][T10911] ___sys_sendmsg+0x21f/0x2a0 [ 301.556987][T10911] ? __pfx____sys_sendmsg+0x10/0x10 [ 301.557053][T10911] ? __fget_files+0x2a/0x420 [ 301.557072][T10911] ? __fget_files+0x3a0/0x420 [ 301.557104][T10911] __sys_sendmmsg+0x227/0x430 [ 301.557136][T10911] ? __pfx___sys_sendmmsg+0x10/0x10 [ 301.557173][T10911] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 301.557222][T10911] ? ksys_write+0x22a/0x250 [ 301.557255][T10911] ? __pfx_ksys_write+0x10/0x10 [ 301.557291][T10911] __x64_sys_sendmmsg+0xa0/0xc0 [ 301.557320][T10911] do_syscall_64+0xfa/0xfa0 [ 301.557346][T10911] ? lockdep_hardirqs_on+0x9c/0x150 [ 301.557372][T10911] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.557393][T10911] ? clear_bhb_loop+0x60/0xb0 [ 301.557420][T10911] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.557441][T10911] RIP: 0033:0x7f6de798eec9 [ 301.557461][T10911] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 301.557480][T10911] RSP: 002b:00007f6de8800038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 301.557504][T10911] RAX: ffffffffffffffda RBX: 00007f6de7be5fa0 RCX: 00007f6de798eec9 [ 301.557520][T10911] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000009 [ 301.557535][T10911] RBP: 00007f6de8800090 R08: 0000000000000000 R09: 0000000000000000 [ 301.557549][T10911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 301.557562][T10911] R13: 00007f6de7be6038 R14: 00007f6de7be5fa0 R15: 00007ffcc01ff7d8 [ 301.557599][T10911] [ 301.562909][T10905] lo speed is unknown, defaulting to 1000 [ 301.794087][T10918] openvswitch: netlink: Duplicate or invalid key (type 0). [ 301.889185][T10918] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 302.607352][T10905] lo speed is unknown, defaulting to 1000 [ 302.781135][T10938] netlink: 'syz.3.1476': attribute type 13 has an invalid length. [ 303.180340][T10959] netlink: 'syz.0.1482': attribute type 6 has an invalid length. [ 304.305794][T10999] __nla_validate_parse: 38 callbacks suppressed [ 304.305824][T10999] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1497'. [ 304.547635][T11003] lo speed is unknown, defaulting to 1000 [ 304.715656][T11014] netlink: 348 bytes leftover after parsing attributes in process `syz.2.1501'. [ 304.751192][T11014] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1501'. [ 304.800080][T11015] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1502'. [ 304.815994][T11015] bridge_slave_1: left allmulticast mode [ 304.822284][T11015] bridge_slave_1: left promiscuous mode [ 304.853207][T11020] netlink: 'syz.1.1502': attribute type 1 has an invalid length. [ 304.862030][T11020] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1502'. [ 304.870516][T11015] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.890766][T11019] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1501'. [ 304.941332][T11015] bridge_slave_0: left allmulticast mode [ 304.947163][T11015] bridge_slave_0: left promiscuous mode [ 304.972947][T11015] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.142250][T11026] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1505'. [ 305.363469][T11006] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1498'. [ 305.513782][T11014] lo speed is unknown, defaulting to 1000 [ 305.527731][T11003] lo speed is unknown, defaulting to 1000 [ 305.704123][ T1167] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x6 [ 306.422628][T11038] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1508'. [ 306.434974][T11038] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1508'. [ 307.793598][T11053] FAULT_INJECTION: forcing a failure. [ 307.793598][T11053] name failslab, interval 1, probability 0, space 0, times 0 [ 307.798032][T11014] lo speed is unknown, defaulting to 1000 [ 307.808635][T11053] CPU: 0 UID: 0 PID: 11053 Comm: syz.4.1512 Not tainted syzkaller #0 PREEMPT(full) [ 307.808670][T11053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 307.808684][T11053] Call Trace: [ 307.808694][T11053] [ 307.808706][T11053] dump_stack_lvl+0x189/0x250 [ 307.808738][T11053] ? __pfx____ratelimit+0x10/0x10 [ 307.808767][T11053] ? __pfx_dump_stack_lvl+0x10/0x10 [ 307.808793][T11053] ? __pfx__printk+0x10/0x10 [ 307.808827][T11053] ? __pfx___might_resched+0x10/0x10 [ 307.808853][T11053] ? fs_reclaim_acquire+0x7d/0x100 [ 307.808896][T11053] should_fail_ex+0x414/0x560 [ 307.808934][T11053] should_failslab+0xa8/0x100 [ 307.808960][T11053] __kmalloc_cache_node_noprof+0x74/0x6f0 [ 307.808997][T11053] ? page_pool_create_percpu+0x76/0xbc0 [ 307.809042][T11053] page_pool_create_percpu+0x76/0xbc0 [ 307.809088][T11053] __veth_napi_enable_range+0x16c/0x700 [ 307.809137][T11053] ? __pfx___veth_napi_enable_range+0x10/0x10 [ 307.809194][T11053] ? netif_napi_set_irq_locked+0x20b/0x720 [ 307.809237][T11053] veth_napi_enable_range+0xff/0x200 [ 307.809292][T11053] veth_set_features+0x1c8/0x2a0 [ 307.809342][T11053] __netdev_update_features+0xa43/0x1be0 [ 307.809393][T11053] ? __pfx___netdev_update_features+0x10/0x10 [ 307.809426][T11053] ? __lock_acquire+0xab9/0xd20 [ 307.809465][T11053] ? __might_fault+0xb0/0x130 [ 307.809528][T11053] ethtool_set_one_feature+0x2b4/0x300 [ 307.809567][T11053] ? __pfx_ethtool_set_one_feature+0x10/0x10 [ 307.809603][T11053] ? bpf_lsm_capable+0x9/0x20 [ 307.809633][T11053] ? security_capable+0x7e/0x2e0 [ 307.809674][T11053] dev_ethtool+0x1098/0x19c0 [ 307.809721][T11053] ? __pfx_dev_ethtool+0x10/0x10 [ 307.809775][T11053] ? dev_load+0x21/0x1f0 [ 307.809800][T11053] dev_ioctl+0x392/0x1150 [ 307.809830][T11053] sock_do_ioctl+0x22c/0x300 [ 307.809868][T11053] ? __pfx_sock_do_ioctl+0x10/0x10 [ 307.809924][T11053] sock_ioctl+0x576/0x790 [ 307.809961][T11053] ? __pfx_sock_ioctl+0x10/0x10 [ 307.810001][T11053] ? __fget_files+0x3a0/0x420 [ 307.810021][T11053] ? __fget_files+0x2a/0x420 [ 307.810048][T11053] ? bpf_lsm_file_ioctl+0x9/0x20 [ 307.810075][T11053] ? __pfx_sock_ioctl+0x10/0x10 [ 307.810109][T11053] __se_sys_ioctl+0xfc/0x170 [ 307.810141][T11053] do_syscall_64+0xfa/0xfa0 [ 307.810170][T11053] ? lockdep_hardirqs_on+0x9c/0x150 [ 307.810200][T11053] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.810224][T11053] ? clear_bhb_loop+0x60/0xb0 [ 307.810256][T11053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.810285][T11053] RIP: 0033:0x7fe3c878eec9 [ 307.810307][T11053] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 307.810330][T11053] RSP: 002b:00007fe3c9594038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 307.810357][T11053] RAX: ffffffffffffffda RBX: 00007fe3c89e6090 RCX: 00007fe3c878eec9 [ 307.810376][T11053] RDX: 00002000000002c0 RSI: 0000000000008946 RDI: 0000000000000003 [ 307.810393][T11053] RBP: 00007fe3c9594090 R08: 0000000000000000 R09: 0000000000000000 [ 307.810409][T11053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 307.810423][T11053] R13: 00007fe3c89e6128 R14: 00007fe3c89e6090 R15: 00007ffc5cbd27b8 [ 307.810465][T11053] [ 308.141169][T11053] veth0_to_team: set_features() failed (-12); wanted 0x0000612e4fdd49e9, left 0x0000612e4fdd09e9 [ 308.651324][T11070] FAULT_INJECTION: forcing a failure. [ 308.651324][T11070] name failslab, interval 1, probability 0, space 0, times 0 [ 308.665698][T11070] CPU: 0 UID: 0 PID: 11070 Comm: syz.1.1517 Not tainted syzkaller #0 PREEMPT(full) [ 308.665729][T11070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 308.665743][T11070] Call Trace: [ 308.665752][T11070] [ 308.665761][T11070] dump_stack_lvl+0x189/0x250 [ 308.665789][T11070] ? __pfx____ratelimit+0x10/0x10 [ 308.665815][T11070] ? __pfx_dump_stack_lvl+0x10/0x10 [ 308.665839][T11070] ? __pfx__printk+0x10/0x10 [ 308.665868][T11070] ? __pfx___might_resched+0x10/0x10 [ 308.665891][T11070] ? fs_reclaim_acquire+0x7d/0x100 [ 308.665931][T11070] should_fail_ex+0x414/0x560 [ 308.665963][T11070] should_failslab+0xa8/0x100 [ 308.665986][T11070] kmem_cache_alloc_node_noprof+0x77/0x710 [ 308.666017][T11070] ? __alloc_skb+0x112/0x2d0 [ 308.666038][T11070] ? netlink_autobind+0xdb/0x300 [ 308.666068][T11070] __alloc_skb+0x112/0x2d0 [ 308.666095][T11070] netlink_sendmsg+0x5c6/0xb30 [ 308.666129][T11070] ? __pfx_netlink_sendmsg+0x10/0x10 [ 308.666158][T11070] ? aa_sock_msg_perm+0xf1/0x1d0 [ 308.666191][T11070] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 308.666211][T11070] ? __pfx_netlink_sendmsg+0x10/0x10 [ 308.666236][T11070] __sock_sendmsg+0x21c/0x270 [ 308.666272][T11070] ____sys_sendmsg+0x505/0x830 [ 308.666304][T11070] ? __pfx_____sys_sendmsg+0x10/0x10 [ 308.666340][T11070] ? import_iovec+0x74/0xa0 [ 308.666366][T11070] ___sys_sendmsg+0x21f/0x2a0 [ 308.666403][T11070] ? __pfx____sys_sendmsg+0x10/0x10 [ 308.666470][T11070] ? __fget_files+0x2a/0x420 [ 308.666489][T11070] ? __fget_files+0x3a0/0x420 [ 308.666521][T11070] __x64_sys_sendmsg+0x19b/0x260 [ 308.666550][T11070] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 308.666596][T11070] ? do_syscall_64+0xbe/0xfa0 [ 308.666628][T11070] do_syscall_64+0xfa/0xfa0 [ 308.666656][T11070] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.666677][T11070] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 308.666699][T11070] ? clear_bhb_loop+0x60/0xb0 [ 308.666726][T11070] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.666748][T11070] RIP: 0033:0x7fc0ac38eec9 [ 308.666767][T11070] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 308.666786][T11070] RSP: 002b:00007fc0ad1ae038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 308.666810][T11070] RAX: ffffffffffffffda RBX: 00007fc0ac5e6090 RCX: 00007fc0ac38eec9 [ 308.666826][T11070] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 308.666840][T11070] RBP: 00007fc0ad1ae090 R08: 0000000000000000 R09: 0000000000000000 [ 308.666854][T11070] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 308.666867][T11070] R13: 00007fc0ac5e6128 R14: 00007fc0ac5e6090 R15: 00007ffd69257b58 [ 308.666904][T11070] [ 309.027896][T11072] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 309.107527][ T5946] lo speed is unknown, defaulting to 1000 [ 309.108325][T11069] lo speed is unknown, defaulting to 1000 [ 309.210820][T11075] netlink: 'syz.4.1519': attribute type 2 has an invalid length. [ 309.491046][T11080] netlink: 'syz.3.1520': attribute type 4 has an invalid length. [ 309.503709][T11080] __nla_validate_parse: 1 callbacks suppressed [ 309.503728][T11080] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1520'. [ 309.749950][T11069] lo speed is unknown, defaulting to 1000 [ 309.750654][T11088] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1523'. [ 309.769015][T11088] 8021q: VLANs not supported on 60ªX¹¦À [ 310.004904][T11100] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1527'. [ 310.144367][T11105] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1529'. [ 310.676405][T11126] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1533'. [ 310.745578][T11121] lo speed is unknown, defaulting to 1000 [ 311.109011][T11141] netlink: 372 bytes leftover after parsing attributes in process `syz.1.1542'. [ 311.261708][T11147] vlan2: entered promiscuous mode [ 311.287527][T11147] vlan2: entered allmulticast mode [ 311.323091][T11147] hsr_slave_1: entered allmulticast mode [ 311.348844][T11152] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1542'. [ 311.658680][T11121] lo speed is unknown, defaulting to 1000 [ 312.270212][T11164] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1547'. [ 313.747902][T11212] lo speed is unknown, defaulting to 1000 [ 314.512582][T11212] lo speed is unknown, defaulting to 1000 [ 314.512745][T11222] lo speed is unknown, defaulting to 1000 [ 315.273132][T11222] lo speed is unknown, defaulting to 1000 [ 315.794952][T11255] lo speed is unknown, defaulting to 1000 [ 315.961596][T11260] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.975531][T11260] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 316.106204][T11260] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.119335][T11260] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 316.314013][T11260] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.336713][T11260] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 316.523604][T11260] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.555551][T11260] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 316.811239][ T3022] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 316.836258][ T3022] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 316.849331][T11255] lo speed is unknown, defaulting to 1000 [ 316.887442][ T3022] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 316.906178][ T3022] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 316.942277][T11267] lo speed is unknown, defaulting to 1000 [ 317.013031][ T3022] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 317.022417][ T3022] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 317.117741][ T74] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 317.147574][ T74] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 317.838971][T11267] lo speed is unknown, defaulting to 1000 [ 317.899607][T11303] --map-set only usable from mangle table [ 319.656189][T11336] lo speed is unknown, defaulting to 1000 [ 319.883255][T11348] syzkaller0: entered promiscuous mode [ 319.890161][T11348] syzkaller0: entered allmulticast mode [ 319.910977][T11348] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 320.320255][T11359] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 65534, id = 0 [ 320.348336][T11336] lo speed is unknown, defaulting to 1000 [ 320.613554][T11365] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1602'. [ 320.857877][T11371] sctp: [Deprecated]: syz.3.1605 (pid 11371) Use of struct sctp_assoc_value in delayed_ack socket option. [ 320.857877][T11371] Use struct sctp_sack_info instead [ 320.884780][T11361] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 320.896894][T11361] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 321.106274][T11361] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 321.127867][T11380] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1608'. [ 321.136780][T11361] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 321.262501][T11361] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 321.265935][T11388] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1610'. [ 321.278723][T11361] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 321.575384][T11361] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 321.601438][T11361] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 321.915386][ T3022] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 321.933232][ T3022] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 321.988234][T11403] netlink: 14679 bytes leftover after parsing attributes in process `syz.3.1613'. [ 322.011317][ T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 322.031792][ T13] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 322.055419][T11400] netlink: 'syz.0.1612': attribute type 4 has an invalid length. [ 322.128767][ T3022] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 322.157574][ T3022] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 322.256748][ T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 322.265397][ T13] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 322.425349][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.461243][T11415] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1616'. [ 322.492319][T11418] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1618'. [ 322.577216][T11415] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 322.725711][T11423] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 322.874699][T11423] tipc: Enabled bearer , priority 0 [ 322.915557][T11415] syzkaller0: entered promiscuous mode [ 322.942967][T11415] syzkaller0: entered allmulticast mode [ 322.962713][T11438] FAULT_INJECTION: forcing a failure. [ 322.962713][T11438] name failslab, interval 1, probability 0, space 0, times 0 [ 322.999671][T11438] CPU: 0 UID: 0 PID: 11438 Comm: syz.1.1624 Not tainted syzkaller #0 PREEMPT(full) [ 322.999701][T11438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 322.999714][T11438] Call Trace: [ 322.999723][T11438] [ 322.999733][T11438] dump_stack_lvl+0x189/0x250 [ 322.999762][T11438] ? __pfx____ratelimit+0x10/0x10 [ 322.999789][T11438] ? __pfx_dump_stack_lvl+0x10/0x10 [ 322.999813][T11438] ? __pfx__printk+0x10/0x10 [ 322.999839][T11438] ? __pfx___might_resched+0x10/0x10 [ 322.999864][T11438] ? fs_reclaim_acquire+0x7d/0x100 [ 322.999904][T11438] should_fail_ex+0x414/0x560 [ 322.999936][T11438] should_failslab+0xa8/0x100 [ 322.999967][T11438] __kmalloc_cache_noprof+0x6f/0x6f0 [ 322.999999][T11438] ? nfnetlink_rcv+0xf97/0x2590 [ 323.000030][T11438] ? __nla_parse+0x40/0x60 [ 323.000066][T11438] nfnetlink_rcv+0xf97/0x2590 [ 323.000140][T11438] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 323.000193][T11438] ? ref_tracker_free+0x63a/0x7d0 [ 323.000255][T11438] ? __netlink_deliver_tap+0x807/0x850 [ 323.000279][T11438] ? netlink_deliver_tap+0x2e/0x1b0 [ 323.000323][T11438] netlink_unicast+0x82f/0x9e0 [ 323.000367][T11438] ? __pfx_netlink_unicast+0x10/0x10 [ 323.000404][T11438] ? netlink_sendmsg+0x642/0xb30 [ 323.000425][T11438] ? skb_put+0x11b/0x210 [ 323.000453][T11438] netlink_sendmsg+0x805/0xb30 [ 323.000488][T11438] ? __pfx_netlink_sendmsg+0x10/0x10 [ 323.000515][T11438] ? aa_sock_msg_perm+0xf1/0x1d0 [ 323.000548][T11438] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 323.000569][T11438] ? __pfx_netlink_sendmsg+0x10/0x10 [ 323.000594][T11438] __sock_sendmsg+0x21c/0x270 [ 323.000630][T11438] ____sys_sendmsg+0x505/0x830 [ 323.000668][T11438] ? __pfx_____sys_sendmsg+0x10/0x10 [ 323.000706][T11438] ? import_iovec+0x74/0xa0 [ 323.000732][T11438] ___sys_sendmsg+0x21f/0x2a0 [ 323.000761][T11438] ? __pfx____sys_sendmsg+0x10/0x10 [ 323.000831][T11438] ? __fget_files+0x2a/0x420 [ 323.000849][T11438] ? __fget_files+0x3a0/0x420 [ 323.000882][T11438] __x64_sys_sendmsg+0x19b/0x260 [ 323.000912][T11438] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 323.000956][T11438] ? __pfx_ksys_write+0x10/0x10 [ 323.000992][T11438] ? do_syscall_64+0xbe/0xfa0 [ 323.001023][T11438] do_syscall_64+0xfa/0xfa0 [ 323.001049][T11438] ? lockdep_hardirqs_on+0x9c/0x150 [ 323.001075][T11438] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.001096][T11438] ? clear_bhb_loop+0x60/0xb0 [ 323.001124][T11438] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.001144][T11438] RIP: 0033:0x7fc0ac38eec9 [ 323.001163][T11438] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 323.001181][T11438] RSP: 002b:00007fc0ad1cf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 323.001204][T11438] RAX: ffffffffffffffda RBX: 00007fc0ac5e5fa0 RCX: 00007fc0ac38eec9 [ 323.001221][T11438] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000005 [ 323.001234][T11438] RBP: 00007fc0ad1cf090 R08: 0000000000000000 R09: 0000000000000000 [ 323.001247][T11438] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 323.001260][T11438] R13: 00007fc0ac5e6038 R14: 00007fc0ac5e5fa0 R15: 00007ffd69257b58 [ 323.001297][T11438] [ 323.002658][T11423] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 323.365762][T11414] tipc: Resetting bearer [ 323.421074][T11414] tipc: Disabling bearer [ 323.710760][T11460] netlink: 'syz.0.1629': attribute type 5 has an invalid length. [ 324.155229][T11474] lo speed is unknown, defaulting to 1000 [ 324.222274][T11478] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1635'. [ 324.457059][T11484] netlink: 'syz.1.1637': attribute type 1 has an invalid length. [ 324.499481][T11484] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1637'. [ 325.030314][T11474] lo speed is unknown, defaulting to 1000 [ 325.064866][T11501] netlink: 348 bytes leftover after parsing attributes in process `syz.1.1643'. [ 325.121713][T11506] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1643'. [ 325.191533][T11506] lo speed is unknown, defaulting to 1000 [ 325.660039][T11506] lo speed is unknown, defaulting to 1000 [ 325.706887][T11517] FAULT_INJECTION: forcing a failure. [ 325.706887][T11517] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 325.746087][T11517] CPU: 0 UID: 0 PID: 11517 Comm: syz.3.1647 Not tainted syzkaller #0 PREEMPT(full) [ 325.746119][T11517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 325.746132][T11517] Call Trace: [ 325.746141][T11517] [ 325.746150][T11517] dump_stack_lvl+0x189/0x250 [ 325.746180][T11517] ? __pfx____ratelimit+0x10/0x10 [ 325.746205][T11517] ? __pfx_dump_stack_lvl+0x10/0x10 [ 325.746227][T11517] ? __pfx__printk+0x10/0x10 [ 325.746251][T11517] ? fs_reclaim_acquire+0x7d/0x100 [ 325.746292][T11517] should_fail_ex+0x414/0x560 [ 325.746324][T11517] prepare_alloc_pages+0x213/0x610 [ 325.746366][T11517] __alloc_frozen_pages_noprof+0x123/0x370 [ 325.746393][T11517] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 325.746435][T11517] alloc_pages_bulk_noprof+0x560/0x710 [ 325.746474][T11517] ? trace_kmalloc+0x1f/0xd0 [ 325.746502][T11517] ? copy_splice_read+0x143/0xa50 [ 325.746542][T11517] copy_splice_read+0x173/0xa50 [ 325.746584][T11517] ? __pfx_iter_file_splice_write+0x10/0x10 [ 325.746617][T11517] ? __pfx_copy_splice_read+0x10/0x10 [ 325.746645][T11517] ? rcu_read_lock_any_held+0xb3/0x120 [ 325.746673][T11517] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 325.746701][T11517] ? direct_splice_actor+0x10c/0x160 [ 325.746734][T11517] ? __pfx_iter_file_splice_write+0x10/0x10 [ 325.746767][T11517] ? file_end_write+0x156/0x250 [ 325.746799][T11517] ? direct_splice_actor+0x10c/0x160 [ 325.746833][T11517] ? __pfx_shmem_file_splice_read+0x10/0x10 [ 325.746862][T11517] splice_direct_to_actor+0x4d0/0xcc0 [ 325.746929][T11517] ? __pfx_direct_splice_actor+0x10/0x10 [ 325.746961][T11517] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 325.747006][T11517] do_splice_direct+0x181/0x270 [ 325.747039][T11517] ? __pfx_do_splice_direct+0x10/0x10 [ 325.747072][T11517] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 325.747101][T11517] ? rw_verify_area+0x255/0x4d0 [ 325.747135][T11517] do_sendfile+0x4da/0x7e0 [ 325.747158][T11517] ? __pfx_vfs_write+0x10/0x10 [ 325.747194][T11517] ? __pfx_do_sendfile+0x10/0x10 [ 325.747217][T11517] ? __fget_files+0x3a0/0x420 [ 325.747249][T11517] __se_sys_sendfile64+0x13e/0x190 [ 325.747273][T11517] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 325.747298][T11517] ? do_syscall_64+0xbe/0xfa0 [ 325.747329][T11517] do_syscall_64+0xfa/0xfa0 [ 325.747354][T11517] ? lockdep_hardirqs_on+0x9c/0x150 [ 325.747380][T11517] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.747400][T11517] ? clear_bhb_loop+0x60/0xb0 [ 325.747427][T11517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.747447][T11517] RIP: 0033:0x7f815f38eec9 [ 325.747466][T11517] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 325.747485][T11517] RSP: 002b:00007f81601a2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 325.747508][T11517] RAX: ffffffffffffffda RBX: 00007f815f5e5fa0 RCX: 00007f815f38eec9 [ 325.747524][T11517] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000008 [ 325.747537][T11517] RBP: 00007f81601a2090 R08: 0000000000000000 R09: 0000000000000000 [ 325.747551][T11517] R10: 0000000000010000 R11: 0000000000000246 R12: 0000000000000002 [ 325.747563][T11517] R13: 00007f815f5e6038 R14: 00007f815f5e5fa0 R15: 00007fffacdc4eb8 [ 325.747599][T11517] [ 326.132797][T11509] FAULT_INJECTION: forcing a failure. [ 326.132797][T11509] name failslab, interval 1, probability 0, space 0, times 0 [ 326.146476][T11509] CPU: 0 UID: 0 PID: 11509 Comm: syz.4.1645 Not tainted syzkaller #0 PREEMPT(full) [ 326.146506][T11509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 326.146520][T11509] Call Trace: [ 326.146528][T11509] [ 326.146537][T11509] dump_stack_lvl+0x189/0x250 [ 326.146566][T11509] ? __pfx____ratelimit+0x10/0x10 [ 326.146592][T11509] ? __pfx_dump_stack_lvl+0x10/0x10 [ 326.146615][T11509] ? __pfx__printk+0x10/0x10 [ 326.146643][T11509] ? __lock_acquire+0xab9/0xd20 [ 326.146673][T11509] should_fail_ex+0x414/0x560 [ 326.146705][T11509] should_failslab+0xa8/0x100 [ 326.146729][T11509] kmem_cache_alloc_noprof+0x74/0x6e0 [ 326.146759][T11509] ? skb_clone+0x212/0x3a0 [ 326.146793][T11509] skb_clone+0x212/0x3a0 [ 326.146823][T11509] __netlink_deliver_tap+0x404/0x850 [ 326.146860][T11509] ? netlink_deliver_tap+0x2e/0x1b0 [ 326.146885][T11509] netlink_deliver_tap+0x19c/0x1b0 [ 326.146916][T11509] netlink_unicast+0x7fa/0x9e0 [ 326.146959][T11509] ? __pfx_netlink_unicast+0x10/0x10 [ 326.146995][T11509] ? netlink_sendmsg+0x642/0xb30 [ 326.147016][T11509] ? skb_put+0x11b/0x210 [ 326.147049][T11509] netlink_sendmsg+0x805/0xb30 [ 326.147084][T11509] ? __pfx_netlink_sendmsg+0x10/0x10 [ 326.147111][T11509] ? aa_sock_msg_perm+0xf1/0x1d0 [ 326.147143][T11509] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 326.147164][T11509] ? __pfx_netlink_sendmsg+0x10/0x10 [ 326.147188][T11509] __sock_sendmsg+0x21c/0x270 [ 326.147224][T11509] ____sys_sendmsg+0x505/0x830 [ 326.147256][T11509] ? __pfx_____sys_sendmsg+0x10/0x10 [ 326.147294][T11509] ? import_iovec+0x74/0xa0 [ 326.147319][T11509] ___sys_sendmsg+0x21f/0x2a0 [ 326.147349][T11509] ? __pfx____sys_sendmsg+0x10/0x10 [ 326.147416][T11509] ? __fget_files+0x2a/0x420 [ 326.147435][T11509] ? __fget_files+0x3a0/0x420 [ 326.147466][T11509] __x64_sys_sendmsg+0x19b/0x260 [ 326.147496][T11509] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 326.147533][T11509] ? __pfx_ksys_write+0x10/0x10 [ 326.147568][T11509] ? do_syscall_64+0xbe/0xfa0 [ 326.147598][T11509] do_syscall_64+0xfa/0xfa0 [ 326.147623][T11509] ? lockdep_hardirqs_on+0x9c/0x150 [ 326.147649][T11509] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.147670][T11509] ? clear_bhb_loop+0x60/0xb0 [ 326.147697][T11509] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.147718][T11509] RIP: 0033:0x7fe3c878eec9 [ 326.147737][T11509] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 326.147756][T11509] RSP: 002b:00007fe3c95b5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 326.147779][T11509] RAX: ffffffffffffffda RBX: 00007fe3c89e5fa0 RCX: 00007fe3c878eec9 [ 326.147795][T11509] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000005 [ 326.147808][T11509] RBP: 00007fe3c95b5090 R08: 0000000000000000 R09: 0000000000000000 [ 326.147821][T11509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 326.147834][T11509] R13: 00007fe3c89e6038 R14: 00007fe3c89e5fa0 R15: 00007ffc5cbd27b8 [ 326.147870][T11509] [ 327.198039][T11536] __nla_validate_parse: 2 callbacks suppressed [ 327.198061][T11536] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1652'. [ 327.619525][T11542] lo speed is unknown, defaulting to 1000 [ 327.704752][T11547] tipc: Failed to remove unknown binding: 66,1,1/2460565834:3417969291/3417969293 [ 327.714329][T11547] tipc: Failed to remove unknown binding: 66,1,1/2460565834:3417969291/3417969293 [ 328.255329][T11568] netlink: 'syz.2.1657': attribute type 1 has an invalid length. [ 328.279252][T11568] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1657'. [ 328.328713][T11568] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1657'. [ 328.966502][T11588] netlink: 348 bytes leftover after parsing attributes in process `syz.2.1666'. [ 328.999065][T11574] lo speed is unknown, defaulting to 1000 [ 329.004932][T11588] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1666'. [ 329.023185][T11542] lo speed is unknown, defaulting to 1000 [ 329.090612][T11592] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1666'. [ 329.200491][T11595] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1668'. [ 329.308643][T11595] batadv0: entered promiscuous mode [ 329.321011][T11595] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 329.330093][T11595] batadv0: left promiscuous mode [ 329.489619][T11588] lo speed is unknown, defaulting to 1000 [ 329.505058][T11574] lo speed is unknown, defaulting to 1000 [ 329.959135][T11588] lo speed is unknown, defaulting to 1000 [ 330.272595][T11609] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 330.290433][T11609] macvtap1: entered allmulticast mode [ 330.296129][T11609] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 330.327811][T11609] mac80211_hwsim hwsim10 wlan0: left allmulticast mode [ 330.342713][T11609] mac80211_hwsim hwsim10 wlan0: left promiscuous mode [ 330.401655][T11611] lo speed is unknown, defaulting to 1000 [ 330.416779][T11621] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1675'. [ 330.908268][T11627] netlink: 'syz.3.1676': attribute type 5 has an invalid length. [ 330.960749][T11611] lo speed is unknown, defaulting to 1000 [ 331.237847][T11631] netlink: zone id is out of range [ 331.259398][T11631] netlink: zone id is out of range [ 331.276460][T11631] netlink: zone id is out of range [ 331.286139][T11631] netlink: zone id is out of range [ 331.289700][T11632] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1678'. [ 331.323927][T11632] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1678'. [ 331.661530][T11645] lo speed is unknown, defaulting to 1000 [ 332.261083][T11645] lo speed is unknown, defaulting to 1000 [ 332.595556][T11661] FAULT_INJECTION: forcing a failure. [ 332.595556][T11661] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 332.609231][T11661] CPU: 1 UID: 0 PID: 11661 Comm: syz.1.1687 Not tainted syzkaller #0 PREEMPT(full) [ 332.609259][T11661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 332.609272][T11661] Call Trace: [ 332.609280][T11661] [ 332.609288][T11661] dump_stack_lvl+0x189/0x250 [ 332.609317][T11661] ? __pfx____ratelimit+0x10/0x10 [ 332.609341][T11661] ? __pfx_dump_stack_lvl+0x10/0x10 [ 332.609364][T11661] ? __pfx__printk+0x10/0x10 [ 332.609401][T11661] should_fail_ex+0x414/0x560 [ 332.609433][T11661] _copy_to_user+0x31/0xb0 [ 332.609458][T11661] simple_read_from_buffer+0xe1/0x170 [ 332.609496][T11661] proc_fail_nth_read+0x1b3/0x220 [ 332.609527][T11661] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 332.609558][T11661] ? rw_verify_area+0x2a6/0x4d0 [ 332.609586][T11661] ? __lock_acquire+0xab9/0xd20 [ 332.609605][T11661] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 332.609634][T11661] vfs_read+0x200/0xa30 [ 332.609663][T11661] ? fdget_pos+0x247/0x320 [ 332.609687][T11661] ? __pfx___mutex_lock+0x10/0x10 [ 332.609717][T11661] ? __pfx_vfs_read+0x10/0x10 [ 332.609749][T11661] ? __fget_files+0x2a/0x420 [ 332.609773][T11661] ? __fget_files+0x3a0/0x420 [ 332.609791][T11661] ? __fget_files+0x2a/0x420 [ 332.609821][T11661] ksys_read+0x145/0x250 [ 332.609854][T11661] ? __pfx_ksys_read+0x10/0x10 [ 332.609888][T11661] ? do_syscall_64+0xbe/0xfa0 [ 332.609920][T11661] do_syscall_64+0xfa/0xfa0 [ 332.609945][T11661] ? lockdep_hardirqs_on+0x9c/0x150 [ 332.609971][T11661] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.609993][T11661] ? clear_bhb_loop+0x60/0xb0 [ 332.610020][T11661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.610041][T11661] RIP: 0033:0x7fc0ac38d8dc [ 332.610061][T11661] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 332.610119][T11661] RSP: 002b:00007fc0ad1cf030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 332.610142][T11661] RAX: ffffffffffffffda RBX: 00007fc0ac5e5fa0 RCX: 00007fc0ac38d8dc [ 332.610158][T11661] RDX: 000000000000000f RSI: 00007fc0ad1cf0a0 RDI: 0000000000000006 [ 332.610172][T11661] RBP: 00007fc0ad1cf090 R08: 0000000000000000 R09: 0000000000000000 [ 332.610186][T11661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 332.610198][T11661] R13: 00007fc0ac5e6038 R14: 00007fc0ac5e5fa0 R15: 00007ffd69257b58 [ 332.610236][T11661] [ 333.300149][T11665] lo speed is unknown, defaulting to 1000 [ 333.820922][T11683] __nla_validate_parse: 5 callbacks suppressed [ 333.820945][T11683] netlink: 348 bytes leftover after parsing attributes in process `syz.3.1694'. [ 333.859752][T11683] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1694'. [ 333.977489][T11686] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1694'. [ 334.442494][T11683] lo speed is unknown, defaulting to 1000 [ 334.456899][T11695] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1698'. [ 334.471209][T11665] lo speed is unknown, defaulting to 1000 [ 334.735041][T11702] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1699'. [ 334.907701][T11711] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1701'. [ 334.931155][T11711] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1701'. [ 334.958765][T11712] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1700'. [ 335.056947][T11705] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.261086][T11705] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.312159][T11683] lo speed is unknown, defaulting to 1000 [ 335.375937][T11724] netlink: 352 bytes leftover after parsing attributes in process `syz.0.1705'. [ 335.397167][T11705] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.553942][T11705] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.656925][T11737] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1709'. [ 335.909392][ T12] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.000507][ T3022] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.075127][ T3022] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.129894][ T1148] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.637136][T11768] netlink: 'syz.3.1719': attribute type 10 has an invalid length. [ 336.646998][T11768] dummy0: left allmulticast mode [ 336.652309][T11768] dummy0: left promiscuous mode [ 336.657716][T11768] bridge0: port 3(dummy0) entered disabled state [ 337.106231][T11790] vlan4: entered promiscuous mode [ 337.959545][T11806] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 337.990070][T11806] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.159897][T11806] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 338.206269][T11806] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.270434][T11822] lo speed is unknown, defaulting to 1000 [ 338.347721][T11806] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 338.430825][T11806] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.547734][T11832] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 338.623788][T11806] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 338.634689][T11806] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.936177][ T13] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 338.954188][ T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.004836][ T13] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 339.030589][ T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.072973][T11822] lo speed is unknown, defaulting to 1000 [ 339.079631][ T1155] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 339.087956][ T1155] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.168413][ T13] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 339.192845][ T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.293210][T11852] lo speed is unknown, defaulting to 1000 [ 339.432624][T11865] __nla_validate_parse: 9 callbacks suppressed [ 339.432643][T11865] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1752'. [ 339.468689][T11865] netlink: 35 bytes leftover after parsing attributes in process `syz.0.1752'. [ 339.477709][T11865] netlink: 'syz.0.1752': attribute type 6 has an invalid length. [ 339.488599][T11865] netlink: 35 bytes leftover after parsing attributes in process `syz.0.1752'. [ 339.713872][T11869] netlink: 'syz.0.1753': attribute type 13 has an invalid length. [ 339.883989][T11872] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1754'. [ 340.165325][T11867] Set syz1 is full, maxelem 6117 reached [ 353.640799][ T5826] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 353.651980][ T5826] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 353.661449][ T5826] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 353.672053][ T5826] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 353.680130][ T5826] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 354.751105][ T5826] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 354.760716][ T5826] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 354.770850][ T5826] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 354.779957][ T5826] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 354.788226][ T5826] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 354.819953][ T5826] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 354.829009][ T5826] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 354.837083][ T5826] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 354.846190][ T5826] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 354.855026][ T5826] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 355.294505][ T5826] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 355.305083][ T5826] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 355.314571][ T5826] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 355.315384][ T52] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 355.332088][ T52] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 355.332117][ T5826] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 355.341221][ T52] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 355.357036][ T5826] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 355.357429][ T52] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 355.373516][ T52] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 355.699506][ T52] Bluetooth: hci5: command tx timeout [ 356.818641][ T52] Bluetooth: hci6: command tx timeout [ 356.898701][ T52] Bluetooth: hci7: command tx timeout [ 357.470201][ T52] Bluetooth: hci9: command tx timeout [ 357.470248][ T5845] Bluetooth: hci8: command tx timeout [ 357.779484][ T5845] Bluetooth: hci5: command tx timeout [ 358.898801][ T5845] Bluetooth: hci6: command tx timeout [ 358.988634][ T5845] Bluetooth: hci7: command tx timeout [ 359.538813][ T5845] Bluetooth: hci9: command tx timeout [ 359.544758][ T52] Bluetooth: hci8: command tx timeout [ 359.859589][ T52] Bluetooth: hci5: command tx timeout [ 360.978755][ T52] Bluetooth: hci6: command tx timeout [ 361.058730][ T52] Bluetooth: hci7: command tx timeout [ 361.619371][ T52] Bluetooth: hci8: command tx timeout [ 361.619378][ T5845] Bluetooth: hci9: command tx timeout [ 361.939098][ T5845] Bluetooth: hci5: command tx timeout [ 363.058792][ T5845] Bluetooth: hci6: command tx timeout [ 363.139427][ T5845] Bluetooth: hci7: command tx timeout [ 363.699456][ T5845] Bluetooth: hci9: command tx timeout [ 363.704979][ T5845] Bluetooth: hci8: command tx timeout [ 383.871509][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 413.713680][ T52] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 413.722183][ T52] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 413.730707][ T52] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 413.739695][ T52] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 413.747558][ T52] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 414.715772][ T52] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 414.725342][ T52] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 414.734236][ T52] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 414.744127][ T52] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 414.752103][ T52] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 415.778718][ T52] Bluetooth: hci10: command tx timeout [ 415.939520][ T5845] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 415.951133][ T5845] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 415.959518][ T5845] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 415.967922][ T5845] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 415.977855][ T5845] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 416.048362][ T5845] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 416.060023][ T5845] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 416.069784][ T5845] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 416.080001][ T5845] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 416.089986][ T5845] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 416.117519][ T52] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 416.130283][ T52] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 416.138256][ T52] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 416.149643][ T52] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 416.157877][ T52] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 416.818644][ T5845] Bluetooth: hci11: command tx timeout [ 417.858579][ T5845] Bluetooth: hci10: command tx timeout [ 418.018723][ T5845] Bluetooth: hci12: command tx timeout [ 418.178732][ T5845] Bluetooth: hci14: command tx timeout [ 418.189584][ T5845] Bluetooth: hci13: command tx timeout [ 418.898552][ T5845] Bluetooth: hci11: command tx timeout [ 419.938645][ T5845] Bluetooth: hci10: command tx timeout [ 420.098655][ T5845] Bluetooth: hci12: command tx timeout [ 420.258862][ T52] Bluetooth: hci14: command tx timeout [ 420.261691][ T5845] Bluetooth: hci13: command tx timeout [ 420.989228][ T5845] Bluetooth: hci11: command tx timeout [ 422.018619][ T5845] Bluetooth: hci10: command tx timeout [ 422.179138][ T5845] Bluetooth: hci12: command tx timeout [ 422.339258][ T5845] Bluetooth: hci14: command tx timeout [ 422.339268][ T52] Bluetooth: hci13: command tx timeout [ 423.058616][ T5845] Bluetooth: hci11: command tx timeout [ 424.268529][ T5845] Bluetooth: hci12: command tx timeout [ 424.418741][ T5845] Bluetooth: hci13: command tx timeout [ 424.428606][ T5845] Bluetooth: hci14: command tx timeout [ 437.138662][ T52] Bluetooth: hci4: command 0x0405 tx timeout [ 445.302795][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 473.779906][ T52] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 473.789205][ T52] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 473.798097][ T52] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 473.807864][ T52] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 473.816113][ T52] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 474.786596][ T52] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 474.795006][ T52] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 474.803606][ T52] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 474.813658][ T52] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 474.822931][ T52] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 475.859515][ T52] Bluetooth: hci15: command tx timeout [ 475.867644][ T52] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 475.877602][ T52] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 475.886408][ T52] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 475.895094][ T52] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 475.904477][ T52] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 475.959171][ T5845] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 475.967292][ T5845] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 475.977831][ T5845] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 475.987140][ T5845] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 475.995567][ T5845] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 476.292536][ T5842] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 476.302138][ T5842] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 476.311233][ T5842] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 476.320490][ T5842] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 476.328355][ T5842] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 476.898864][ T52] Bluetooth: hci16: command tx timeout [ 477.938641][ T52] Bluetooth: hci15: command tx timeout [ 477.948718][ T52] Bluetooth: hci17: command tx timeout [ 478.028862][ T52] Bluetooth: hci18: command tx timeout [ 478.104192][ T52] Bluetooth: hci7: command 0x0406 tx timeout [ 478.104520][ T5842] Bluetooth: hci6: command 0x0406 tx timeout [ 478.111373][ T52] Bluetooth: hci8: command 0x0406 tx timeout [ 478.117291][ T5842] Bluetooth: hci5: command 0x0406 tx timeout [ 478.123222][ T52] Bluetooth: hci9: command 0x0406 tx timeout [ 478.428971][ T5826] Bluetooth: hci19: command tx timeout [ 478.979165][ T5826] Bluetooth: hci16: command tx timeout [ 480.019399][ T5843] Bluetooth: hci15: command tx timeout [ 480.025129][ T5826] Bluetooth: hci17: command tx timeout [ 480.099266][ T5826] Bluetooth: hci18: command tx timeout [ 480.498964][ T5826] Bluetooth: hci19: command tx timeout [ 481.068555][ T5826] Bluetooth: hci16: command tx timeout [ 482.098765][ T5826] Bluetooth: hci17: command tx timeout [ 482.098854][ T5843] Bluetooth: hci15: command tx timeout [ 482.178774][ T5843] Bluetooth: hci18: command tx timeout [ 482.579431][ T5843] Bluetooth: hci19: command tx timeout [ 483.138708][ T5843] Bluetooth: hci16: command tx timeout [ 484.179264][ T5843] Bluetooth: hci17: command tx timeout [ 484.258764][ T5843] Bluetooth: hci18: command tx timeout [ 484.659245][ T5843] Bluetooth: hci19: command tx timeout [ 493.299632][ T31] INFO: task kworker/u8:0:12 blocked for more than 143 seconds. [ 493.307469][ T31] Not tainted syzkaller #0 [ 493.312985][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 493.321857][ T31] task:kworker/u8:0 state:D stack:20456 pid:12 tgid:12 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 493.334425][ T31] Workqueue: events_unbound linkwatch_event [ 493.340874][ T31] Call Trace: [ 493.344188][ T31] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 493.347133][ T31] __schedule+0x1798/0x4cc0 [ 493.351986][ T31] ? __lock_acquire+0xab9/0xd20 [ 493.356904][ T31] ? __lock_acquire+0xab9/0xd20 [ 493.361934][ T31] ? __pfx___schedule+0x10/0x10 [ 493.367370][ T31] ? schedule+0x91/0x360 [ 493.371831][ T31] schedule+0x165/0x360 [ 493.376049][ T31] schedule_preempt_disabled+0x13/0x30 [ 493.381727][ T31] __mutex_lock+0x7e6/0x1350 [ 493.386367][ T31] ? look_up_lock_class+0x74/0x170 [ 493.391635][ T31] ? __mutex_lock+0x5bb/0x1350 [ 493.396991][ T31] ? linkwatch_event+0xe/0x60 [ 493.402162][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 493.407252][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 493.413146][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 493.449210][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 493.469432][ T31] linkwatch_event+0xe/0x60 [ 493.479521][ T31] process_scheduled_works+0xae1/0x17b0 [ 493.488646][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 493.494735][ T31] worker_thread+0x8a0/0xda0 [ 493.513734][ T31] kthread+0x711/0x8a0 [ 493.517887][ T31] ? __pfx_worker_thread+0x10/0x10 [ 493.523190][ T31] ? __pfx_kthread+0x10/0x10 [ 493.528005][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 493.533714][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 493.539141][ T31] ? __pfx_kthread+0x10/0x10 [ 493.543783][ T31] ret_from_fork+0x4bc/0x870 [ 493.548532][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 493.553706][ T31] ? __switch_to_asm+0x39/0x70 [ 493.558564][ T31] ? __switch_to_asm+0x33/0x70 [ 493.563457][ T31] ? __pfx_kthread+0x10/0x10 [ 493.568079][ T31] ret_from_fork_asm+0x1a/0x30 [ 493.573420][ T31] [ 493.576524][ T31] INFO: task kworker/u8:5:1148 blocked for more than 143 seconds. [ 493.584676][ T31] Not tainted syzkaller #0 [ 493.589909][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 493.598774][ T31] task:kworker/u8:5 state:D stack:21128 pid:1148 tgid:1148 ppid:2 task_flags:0x4208160 flags:0x00080000 [ 493.611052][ T31] Workqueue: ipv6_addrconf addrconf_verify_work [ 493.617351][ T31] Call Trace: [ 493.621129][ T31] [ 493.624107][ T31] __schedule+0x1798/0x4cc0 [ 493.628738][ T31] ? __kasan_save_free_info+0x46/0x50 [ 493.634165][ T31] ? __lock_acquire+0xab9/0xd20 [ 493.639357][ T31] ? __lock_acquire+0xab9/0xd20 [ 493.644260][ T31] ? __pfx___schedule+0x10/0x10 [ 493.649321][ T31] ? schedule+0x91/0x360 [ 493.653674][ T31] schedule+0x165/0x360 [ 493.657879][ T31] schedule_preempt_disabled+0x13/0x30 [ 493.663466][ T31] __mutex_lock+0x7e6/0x1350 [ 493.668093][ T31] ? __mutex_lock+0x5bb/0x1350 [ 493.673660][ T31] ? addrconf_verify_work+0x19/0x30 [ 493.679005][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 493.684098][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 493.690043][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 493.695291][ T31] addrconf_verify_work+0x19/0x30 [ 493.700698][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 493.706509][ T31] process_scheduled_works+0xae1/0x17b0 [ 493.712201][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 493.718264][ T31] worker_thread+0x8a0/0xda0 [ 493.723029][ T31] kthread+0x711/0x8a0 [ 493.727148][ T31] ? __pfx_worker_thread+0x10/0x10 [ 493.732467][ T31] ? __pfx_kthread+0x10/0x10 [ 493.737111][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 493.742427][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 493.747672][ T31] ? __pfx_kthread+0x10/0x10 [ 493.752578][ T31] ret_from_fork+0x4bc/0x870 [ 493.757227][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 493.762451][ T31] ? __switch_to_asm+0x39/0x70 [ 493.767249][ T31] ? __switch_to_asm+0x33/0x70 [ 493.772183][ T31] ? __pfx_kthread+0x10/0x10 [ 493.777221][ T31] ret_from_fork_asm+0x1a/0x30 [ 493.782168][ T31] [ 493.785330][ T31] INFO: task syz.3.1737:11822 blocked for more than 143 seconds. [ 493.793206][ T31] Not tainted syzkaller #0 [ 493.798345][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 493.807128][ T31] task:syz.3.1737 state:D stack:24480 pid:11822 tgid:11819 ppid:5827 task_flags:0x400140 flags:0x00080003 [ 493.819289][ T31] Call Trace: [ 493.822609][ T31] [ 493.825578][ T31] __schedule+0x1798/0x4cc0 [ 493.830195][ T31] ? __lock_acquire+0xab9/0xd20 [ 493.835099][ T31] ? __lock_acquire+0xab9/0xd20 [ 493.840086][ T31] ? __pfx___schedule+0x10/0x10 [ 493.845000][ T31] ? schedule+0x91/0x360 [ 493.849435][ T31] schedule+0x165/0x360 [ 493.853635][ T31] schedule_preempt_disabled+0x13/0x30 [ 493.859399][ T31] rwsem_down_write_slowpath+0x872/0xfe0 [ 493.865118][ T31] ? rwsem_down_write_slowpath+0x472/0xfe0 [ 493.871057][ T31] ? __pfx_rwsem_down_write_slowpath+0x10/0x10 [ 493.877742][ T31] ? __lock_acquire+0xab9/0xd20 [ 493.882744][ T31] ? rdma_dev_exit_net+0x8c/0x340 [ 493.887964][ T31] down_write+0x1ab/0x1f0 [ 493.892637][ T31] ? __pfx_down_write+0x10/0x10 [ 493.897554][ T31] ? rdma_net_to_dev_net+0x23/0x240 [ 493.902889][ T31] ? rdma_net_to_dev_net+0x23/0x240 [ 493.908134][ T31] ? rdma_net_to_dev_net+0x1ed/0x240 [ 493.913532][ T31] rdma_dev_exit_net+0x8c/0x340 [ 493.918683][ T31] ? __pfx___might_resched+0x10/0x10 [ 493.924018][ T31] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 493.929661][ T31] ? net_generic+0x1e/0x240 [ 493.934212][ T31] ? mutex_is_locked+0x17/0x50 [ 493.939075][ T31] ? rtnl_is_locked+0x15/0x20 [ 493.943799][ T31] ops_undo_list+0x49a/0x990 [ 493.948480][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 493.953632][ T31] ? ops_init+0x469/0x5c0 [ 493.958007][ T31] setup_net+0x2d6/0x320 [ 493.962359][ T31] ? __pfx_setup_net+0x10/0x10 [ 493.967240][ T31] ? copy_net_ns+0x337/0x4e0 [ 493.972252][ T31] ? down_read_killable+0x1d1/0x350 [ 493.977511][ T31] ? preinit_net+0x47d/0x740 [ 493.982656][ T31] copy_net_ns+0x34e/0x4e0 [ 493.987102][ T31] create_new_namespaces+0x3f3/0x720 [ 493.992484][ T31] ? security_capable+0x7e/0x2e0 [ 493.997487][ T31] unshare_nsproxy_namespaces+0x11c/0x170 [ 494.003344][ T31] ksys_unshare+0x4c8/0x8c0 [ 494.007951][ T31] ? __pfx_ksys_unshare+0x10/0x10 [ 494.013206][ T31] __x64_sys_unshare+0x38/0x50 [ 494.018021][ T31] do_syscall_64+0xfa/0xfa0 [ 494.023373][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 494.028688][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.034793][ T31] ? clear_bhb_loop+0x60/0xb0 [ 494.039617][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.045995][ T31] RIP: 0033:0x7f815f38eec9 [ 494.050636][ T31] RSP: 002b:00007f8160181038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 494.059357][ T31] RAX: ffffffffffffffda RBX: 00007f815f5e6090 RCX: 00007f815f38eec9 [ 494.067362][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 494.075601][ T31] RBP: 00007f815f411f91 R08: 0000000000000000 R09: 0000000000000000 [ 494.084192][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 494.092454][ T31] R13: 00007f815f5e6128 R14: 00007f815f5e6090 R15: 00007fffacdc4eb8 [ 494.100974][ T31] [ 494.104065][ T31] INFO: task syz.4.1749:11852 blocked for more than 144 seconds. [ 494.117152][ T31] Not tainted syzkaller #0 [ 494.122402][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 494.131246][ T31] task:syz.4.1749 state:D stack:25064 pid:11852 tgid:11847 ppid:5829 task_flags:0x400140 flags:0x00080003 [ 494.143386][ T31] Call Trace: [ 494.146738][ T31] [ 494.149786][ T31] __schedule+0x1798/0x4cc0 [ 494.154360][ T31] ? __lock_acquire+0xab9/0xd20 [ 494.159312][ T31] ? __lock_acquire+0xab9/0xd20 [ 494.164193][ T31] ? __pfx___schedule+0x10/0x10 [ 494.169232][ T31] ? schedule+0x91/0x360 [ 494.173517][ T31] schedule+0x165/0x360 [ 494.177796][ T31] schedule_preempt_disabled+0x13/0x30 [ 494.184056][ T31] rwsem_down_read_slowpath+0x5fd/0x8f0 [ 494.190135][ T31] ? rwsem_down_read_slowpath+0x4b8/0x8f0 [ 494.195900][ T31] ? __pfx_rwsem_down_read_slowpath+0x10/0x10 [ 494.202094][ T31] ? rdma_dev_init_net+0x1d2/0x270 [ 494.207341][ T31] ? xa_find_after+0xae/0x430 [ 494.212210][ T31] down_read+0x98/0x2e0 [ 494.216414][ T31] rdma_dev_init_net+0x1d2/0x270 [ 494.221451][ T31] ? __pfx_rdma_dev_init_net+0x10/0x10 [ 494.227048][ T31] ops_init+0x359/0x5c0 [ 494.231326][ T31] setup_net+0xfe/0x320 [ 494.235533][ T31] ? __pfx_setup_net+0x10/0x10 [ 494.240399][ T31] ? copy_net_ns+0x337/0x4e0 [ 494.245032][ T31] ? down_read_killable+0x1d1/0x350 [ 494.250411][ T31] ? preinit_net+0x47d/0x740 [ 494.255053][ T31] copy_net_ns+0x34e/0x4e0 [ 494.259709][ T31] create_new_namespaces+0x3f3/0x720 [ 494.265043][ T31] ? security_capable+0x7e/0x2e0 [ 494.270092][ T31] unshare_nsproxy_namespaces+0x11c/0x170 [ 494.275846][ T31] ksys_unshare+0x4c8/0x8c0 [ 494.280442][ T31] ? __pfx_ksys_unshare+0x10/0x10 [ 494.286012][ T31] __x64_sys_unshare+0x38/0x50 [ 494.290970][ T31] do_syscall_64+0xfa/0xfa0 [ 494.295511][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 494.301078][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.307189][ T31] ? clear_bhb_loop+0x60/0xb0 [ 494.311952][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.317880][ T31] RIP: 0033:0x7fe3c878eec9 [ 494.322411][ T31] RSP: 002b:00007fe3c9594038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 494.331008][ T31] RAX: ffffffffffffffda RBX: 00007fe3c89e6090 RCX: 00007fe3c878eec9 [ 494.339168][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 494.347193][ T31] RBP: 00007fe3c8811f91 R08: 0000000000000000 R09: 0000000000000000 [ 494.355273][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 494.363387][ T31] R13: 00007fe3c89e6128 R14: 00007fe3c89e6090 R15: 00007ffc5cbd27b8 [ 494.371593][ T31] [ 494.374674][ T31] INFO: task syz.4.1749:11856 blocked for more than 144 seconds. [ 494.382542][ T31] Not tainted syzkaller #0 [ 494.387913][ T31] Blocked by coredump. [ 494.392584][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 494.401341][ T31] task:syz.4.1749 state:D stack:25512 pid:11856 tgid:11847 ppid:5829 task_flags:0x40054c flags:0x00080001 [ 494.413581][ T31] Call Trace: [ 494.416905][ T31] [ 494.419958][ T31] __schedule+0x1798/0x4cc0 [ 494.424509][ T31] ? stack_trace_save+0x9c/0xe0 [ 494.429493][ T31] ? __lock_acquire+0xab9/0xd20 [ 494.434393][ T31] ? __lock_acquire+0xab9/0xd20 [ 494.439333][ T31] ? __pfx___schedule+0x10/0x10 [ 494.444253][ T31] ? schedule+0x91/0x360 [ 494.448638][ T31] schedule+0x165/0x360 [ 494.452835][ T31] schedule_preempt_disabled+0x13/0x30 [ 494.458336][ T31] __mutex_lock+0x7e6/0x1350 [ 494.463086][ T31] ? __mutex_lock+0x5bb/0x1350 [ 494.467885][ T31] ? tun_chr_close+0x3e/0x1c0 [ 494.472667][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 494.477787][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 494.483496][ T31] tun_chr_close+0x3e/0x1c0 [ 494.488047][ T31] __fput+0x449/0xa70 [ 494.492631][ T31] task_work_run+0x1d4/0x260 [ 494.497276][ T31] ? __pfx_task_work_run+0x10/0x10 [ 494.502551][ T31] ? do_exit+0x6b0/0x2300 [ 494.506937][ T31] ? kmem_cache_free+0x19b/0x690 [ 494.512045][ T31] do_exit+0x6b5/0x2300 [ 494.516265][ T31] ? cgroup_freezing+0x20/0x350 [ 494.521652][ T31] ? __pfx_do_exit+0x10/0x10 [ 494.526298][ T31] ? cgroup_freezing+0x20/0x350 [ 494.531287][ T31] ? cgroup_freezing+0x20/0x350 [ 494.536193][ T31] do_group_exit+0x21c/0x2d0 [ 494.540928][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 494.546170][ T31] get_signal+0x1285/0x1340 [ 494.550766][ T31] arch_do_signal_or_restart+0xa0/0x790 [ 494.556359][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 494.562748][ T31] ? __se_sys_pselect6+0x291/0x300 [ 494.567936][ T31] ? exit_to_user_mode_loop+0x40/0x130 [ 494.573609][ T31] exit_to_user_mode_loop+0x72/0x130 [ 494.579152][ T31] do_syscall_64+0x2bd/0xfa0 [ 494.583881][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 494.589201][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.595737][ T31] ? clear_bhb_loop+0x60/0xb0 [ 494.600559][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.606630][ T31] RIP: 0033:0x7fe3c878eec9 [ 494.611220][ T31] RSP: 002b:00007fe3c9573038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 494.619808][ T31] RAX: fffffffffffffdfe RBX: 00007fe3c89e6180 RCX: 00007fe3c878eec9 [ 494.627827][ T31] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000040 [ 494.636099][ T31] RBP: 00007fe3c8811f91 R08: 0000000000000000 R09: 0000000000000000 [ 494.644268][ T31] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000000 [ 494.652387][ T31] R13: 00007fe3c89e6218 R14: 00007fe3c89e6180 R15: 00007ffc5cbd27b8 [ 494.661150][ T31] [ 494.664231][ T31] INFO: task syz.2.1750:11858 blocked for more than 144 seconds. [ 494.672085][ T31] Not tainted syzkaller #0 [ 494.677063][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 494.685831][ T31] task:syz.2.1750 state:D stack:26568 pid:11858 tgid:11857 ppid:5831 task_flags:0x400140 flags:0x00080003 [ 494.698300][ T31] Call Trace: [ 494.701692][ T31] [ 494.704665][ T31] __schedule+0x1798/0x4cc0 [ 494.709269][ T31] ? __lock_acquire+0xab9/0xd20 [ 494.714160][ T31] ? __lock_acquire+0xab9/0xd20 [ 494.719126][ T31] ? __pfx___schedule+0x10/0x10 [ 494.724076][ T31] ? schedule+0x91/0x360 [ 494.728529][ T31] schedule+0x165/0x360 [ 494.732762][ T31] schedule_preempt_disabled+0x13/0x30 [ 494.738248][ T31] __mutex_lock+0x7e6/0x1350 [ 494.743170][ T31] ? __mutex_lock+0x5bb/0x1350 [ 494.747989][ T31] ? ib_get_eth_speed+0x151/0x7b0 [ 494.753251][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 494.758318][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 494.763743][ T31] ? _raw_spin_unlock+0x28/0x50 [ 494.768807][ T31] ? ib_device_get_netdev+0x220/0x2f0 [ 494.774217][ T31] ib_get_eth_speed+0x151/0x7b0 [ 494.779217][ T31] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 494.784656][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 494.789977][ T31] ? rxe_query_port+0x6b/0x3b0 [ 494.794792][ T31] rxe_query_port+0x93/0x3b0 [ 494.799927][ T31] ib_query_port+0x170/0x830 [ 494.804572][ T31] ib_setup_port_attrs+0x24e/0x2070 [ 494.809938][ T31] ? rcu_is_watching+0x15/0xb0 [ 494.814749][ T31] ? trace_contention_end+0x39/0x120 [ 494.820142][ T31] ? device_add+0x9bb/0xb50 [ 494.824691][ T31] ? __pfx_ib_setup_port_attrs+0x10/0x10 [ 494.830468][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 494.836678][ T31] ? device_add+0x70b/0xb50 [ 494.841346][ T31] add_one_compat_dev+0x3d6/0x5c0 [ 494.846426][ T31] rdma_dev_init_net+0x1dd/0x270 [ 494.851732][ T31] ? __pfx_rdma_dev_init_net+0x10/0x10 [ 494.857261][ T31] ops_init+0x359/0x5c0 [ 494.861572][ T31] setup_net+0xfe/0x320 [ 494.865770][ T31] ? __pfx_setup_net+0x10/0x10 [ 494.870646][ T31] ? copy_net_ns+0x337/0x4e0 [ 494.875268][ T31] ? down_read_killable+0x1d1/0x350 [ 494.880572][ T31] ? preinit_net+0x47d/0x740 [ 494.885191][ T31] copy_net_ns+0x34e/0x4e0 [ 494.889711][ T31] create_new_namespaces+0x3f3/0x720 [ 494.895037][ T31] ? security_capable+0x7e/0x2e0 [ 494.900550][ T31] unshare_nsproxy_namespaces+0x11c/0x170 [ 494.906419][ T31] ksys_unshare+0x4c8/0x8c0 [ 494.911070][ T31] ? __pfx_ksys_unshare+0x10/0x10 [ 494.916168][ T31] ? do_user_addr_fault+0xc85/0x1380 [ 494.921642][ T31] __x64_sys_unshare+0x38/0x50 [ 494.926470][ T31] do_syscall_64+0xfa/0xfa0 [ 494.931395][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 494.936657][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.943068][ T31] ? clear_bhb_loop+0x60/0xb0 [ 494.947789][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.953806][ T31] RIP: 0033:0x7f18b4d8eec9 [ 494.958260][ T31] RSP: 002b:00007f18b5c55038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 494.967091][ T31] RAX: ffffffffffffffda RBX: 00007f18b4fe5fa0 RCX: 00007f18b4d8eec9 [ 494.975179][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 494.983294][ T31] RBP: 00007f18b4e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 494.991385][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 494.999452][ T31] R13: 00007f18b4fe6038 R14: 00007f18b4fe5fa0 R15: 00007ffe8c6bc8e8 [ 495.007913][ T31] [ 495.011162][ T31] INFO: task syz.1.1754:11872 blocked for more than 145 seconds. [ 495.019064][ T31] Not tainted syzkaller #0 [ 495.024042][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 495.033116][ T31] task:syz.1.1754 state:D stack:23592 pid:11872 tgid:11871 ppid:5824 task_flags:0x400140 flags:0x00080002 [ 495.045231][ T31] Call Trace: [ 495.048799][ T31] [ 495.051797][ T31] __schedule+0x1798/0x4cc0 [ 495.056366][ T31] ? __lock_acquire+0xab9/0xd20 [ 495.062042][ T31] ? __lock_acquire+0xab9/0xd20 [ 495.066976][ T31] ? __pfx___schedule+0x10/0x10 [ 495.072357][ T31] ? schedule+0x91/0x360 [ 495.076659][ T31] schedule+0x165/0x360 [ 495.080949][ T31] schedule_preempt_disabled+0x13/0x30 [ 495.086448][ T31] __mutex_lock+0x7e6/0x1350 [ 495.091169][ T31] ? __mutex_lock+0x5bb/0x1350 [ 495.096014][ T31] ? rtnl_newlink+0x8e9/0x1c80 [ 495.100961][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 495.106502][ T31] ? ns_capable+0x8a/0xf0 [ 495.111014][ T31] ? rtnl_link_get_net_capable+0x16a/0x350 [ 495.116878][ T31] rtnl_newlink+0x8e9/0x1c80 [ 495.121787][ T31] ? netlink_deliver_tap+0x19c/0x1b0 [ 495.127118][ T31] ? __pfx_rtnl_newlink+0x10/0x10 [ 495.132281][ T31] ? kasan_quarantine_put+0xdd/0x220 [ 495.137605][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 495.142970][ T31] ? nlmon_xmit+0xb0/0x100 [ 495.147444][ T31] ? kmem_cache_free+0x19b/0x690 [ 495.152513][ T31] ? __local_bh_enable_ip+0x12d/0x1c0 [ 495.157932][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 495.163236][ T31] ? __local_bh_enable_ip+0x12d/0x1c0 [ 495.168721][ T31] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 495.174477][ T31] ? __dev_queue_xmit+0x27b/0x3b50 [ 495.179917][ T31] ? __dev_queue_xmit+0x27b/0x3b50 [ 495.185113][ T31] ? __dev_queue_xmit+0x27b/0x3b50 [ 495.190340][ T31] ? __dev_queue_xmit+0x1d79/0x3b50 [ 495.195577][ T31] ? kasan_save_track+0x3e/0x80 [ 495.200571][ T31] ? __kasan_slab_alloc+0x6c/0x80 [ 495.205642][ T31] ? __lock_acquire+0xab9/0xd20 [ 495.211014][ T31] ? __pfx_rtnl_newlink+0x10/0x10 [ 495.216084][ T31] rtnetlink_rcv_msg+0x7cf/0xb70 [ 495.221181][ T31] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 495.226331][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 495.232200][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 495.237344][ T31] ? __asan_memcpy+0x40/0x70 [ 495.242054][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 495.247491][ T31] netlink_rcv_skb+0x205/0x470 [ 495.252397][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 495.257909][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 495.263353][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 495.268723][ T31] netlink_unicast+0x82f/0x9e0 [ 495.273641][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 495.279048][ T31] ? netlink_sendmsg+0x642/0xb30 [ 495.284021][ T31] ? skb_put+0x11b/0x210 [ 495.288308][ T31] netlink_sendmsg+0x805/0xb30 [ 495.293484][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 495.299022][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 495.304015][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 495.309960][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 495.315394][ T31] __sock_sendmsg+0x21c/0x270 [ 495.320250][ T31] ____sys_sendmsg+0x505/0x830 [ 495.325072][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 495.330505][ T31] ? import_iovec+0x74/0xa0 [ 495.335064][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 495.339954][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 495.345239][ T31] ? __fget_files+0x2a/0x420 [ 495.349902][ T31] ? __fget_files+0x3a0/0x420 [ 495.354707][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 495.359754][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 495.365263][ T31] ? do_syscall_64+0xbe/0xfa0 [ 495.370040][ T31] do_syscall_64+0xfa/0xfa0 [ 495.374597][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.380870][ T31] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 495.387077][ T31] ? clear_bhb_loop+0x60/0xb0 [ 495.391893][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.397819][ T31] RIP: 0033:0x7fc0ac38eec9 [ 495.402549][ T31] RSP: 002b:00007fc0ad1cf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 495.411094][ T31] RAX: ffffffffffffffda RBX: 00007fc0ac5e5fa0 RCX: 00007fc0ac38eec9 [ 495.419664][ T31] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000015 [ 495.427672][ T31] RBP: 00007fc0ac411f91 R08: 0000000000000000 R09: 0000000000000000 [ 495.435779][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 495.443844][ T31] R13: 00007fc0ac5e6038 R14: 00007fc0ac5e5fa0 R15: 00007ffd69257b58 [ 495.452183][ T31] [ 495.455267][ T31] [ 495.455267][ T31] Showing all locks held in the system: [ 495.463111][ T31] 3 locks held by kworker/u8:0/12: [ 495.468247][ T31] #0: ffff88813ff29948 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 495.480254][ T31] #1: ffffc90000117ba0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 495.491356][ T31] #2: ffffffff8f4df888 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 495.500553][ T31] 1 lock held by khungtaskd/31: [ 495.505457][ T31] #0: ffffffff8e13d320 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 495.516060][ T31] 3 locks held by kworker/u8:5/1148: [ 495.521453][ T31] #0: ffff88814cc33948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 495.533170][ T31] #1: ffffc9000408fba0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 495.547108][ T31] #2: ffffffff8f4df888 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 495.557010][ T31] 1 lock held by klogd/5187: [ 495.561735][ T31] #0: ffff8880b873a058 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 495.571800][ T31] 2 locks held by getty/5589: [ 495.576686][ T31] #0: ffff8880334d30a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 495.586595][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 495.596815][ T31] 3 locks held by kworker/0:3/5912: [ 495.602188][ T31] #0: ffff88813ff1a948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 495.614694][ T31] #1: ffffc900045efba0 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 495.626666][ T31] #2: ffffffff8f4df888 (rtnl_mutex){+.+.}-{4:4}, at: reg_check_chans_work+0xa1/0xf40 [ 495.636559][ T31] 2 locks held by syz.3.1737/11822: [ 495.641874][ T31] #0: ffffffff8f4d29f0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 495.652074][ T31] #1: ffffffff8f24c410 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_exit_net+0x8c/0x340 [ 495.662060][ T31] 3 locks held by syz.4.1749/11852: [ 495.667415][ T31] #0: ffffffff8f4d29f0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 495.676955][ T31] #1: ffffffff8f24c250 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x19a/0x270 [ 495.686779][ T31] #2: ffffffff8f24c410 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x1d2/0x270 [ 495.696738][ T31] 1 lock held by syz.4.1749/11856: [ 495.702366][ T31] #0: ffffffff8f4df888 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 495.711504][ T31] 6 locks held by syz.2.1750/11858: [ 495.716746][ T31] #0: ffffffff8f4d29f0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 495.726738][ T31] #1: ffffffff8f24c250 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x19a/0x270 [ 495.736776][ T31] #2: ffffffff8f24c410 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x1d2/0x270 [ 495.746759][ T31] #3: ffff888021704f98 (&device->compat_devs_mutex){+.+.}-{4:4}, at: add_one_compat_dev+0xee/0x5c0 [ 495.757691][ T31] #4: ffff888021705290 (&rxe->usdev_lock){+.+.}-{4:4}, at: rxe_query_port+0x7e/0x3b0 [ 495.767417][ T31] #5: ffffffff8f4df888 (rtnl_mutex){+.+.}-{4:4}, at: ib_get_eth_speed+0x151/0x7b0 [ 495.776955][ T31] 2 locks held by syz.0.1753/11869: [ 495.782230][ T31] #0: ffffffff8f4df888 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8e9/0x1c80 [ 495.791388][ T31] #1: ffff8880333b2d30 (&dev_instance_lock_key#14){+.+.}-{4:4}, at: napi_disable+0x4e/0x80 [ 495.801655][ T31] 2 locks held by syz.1.1754/11872: [ 495.806874][ T31] #0: ffffffff8fa00d90 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 495.816575][ T31] #1: ffffffff8f4df888 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8e9/0x1c80 [ 495.826177][ T31] 3 locks held by kworker/0:11/11876: [ 495.831687][ T31] #0: ffff88813ff19948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 495.842987][ T31] #1: ffffc9001a687ba0 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 495.854116][ T31] #2: ffffffff8f4df888 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 495.864846][ T31] 1 lock held by syz-executor/11880: [ 495.871306][ T31] #0: ffffffff8f4df888 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 495.880886][ T31] 1 lock held by syz-executor/11886: [ 495.886333][ T31] #0: ffffffff8f4df888 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 495.895969][ T31] 1 lock held by syz-executor/11888: [ 495.901376][ T31] #0: ffffffff8f4df888 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 495.911146][ T31] 1 lock held by syz-executor/11892: [ 495.916458][ T31] #0: ffffffff8f4df888 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 495.926641][ T31] 1 lock held by syz-executor/11893: [ 495.932076][ T31] #0: ffffffff8f4df888 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 495.941729][ T31] 1 lock held by syz-executor/11902: [ 495.947072][ T31] #0: ffffffff8f4df888 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 495.956868][ T31] 1 lock held by syz-executor/11907: [ 495.962261][ T31] #0: ffffffff8f4df888 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 495.971859][ T31] 1 lock held by syz-executor/11912: [ 495.977174][ T31] #0: ffffffff8f4df888 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 495.986741][ T31] 1 lock held by syz-executor/11914: [ 495.992203][ T31] #0: ffffffff8f4df888 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 496.001756][ T31] 1 lock held by syz-executor/11916: [ 496.007072][ T31] #0: ffffffff8f4df888 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 496.016691][ T31] 1 lock held by syz-executor/11925: [ 496.022200][ T31] #0: ffffffff8f4df888 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 496.032363][ T31] 1 lock held by syz-executor/11929: [ 496.037671][ T31] #0: ffffffff8f4df888 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 496.047748][ T31] 1 lock held by syz-executor/11933: [ 496.053748][ T31] #0: ffffffff8f4df888 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 496.063634][ T31] 1 lock held by syz-executor/11935: [ 496.069802][ T31] #0: ffffffff8f4df888 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 496.079505][ T31] 1 lock held by syz-executor/11938: [ 496.084835][ T31] #0: ffffffff8f4df888 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 496.094470][ T31] [ 496.096826][ T31] ============================================= [ 496.096826][ T31] [ 496.106288][ T31] NMI backtrace for cpu 0 [ 496.106319][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 496.106343][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 496.106357][ T31] Call Trace: [ 496.106365][ T31] [ 496.106375][ T31] dump_stack_lvl+0x189/0x250 [ 496.106406][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 496.106430][ T31] ? __pfx__printk+0x10/0x10 [ 496.106466][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 496.106505][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 496.106541][ T31] ? __pfx__printk+0x10/0x10 [ 496.106568][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 496.106605][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 496.106643][ T31] watchdog+0xf60/0xfa0 [ 496.106671][ T31] ? watchdog+0x1e2/0xfa0 [ 496.106699][ T31] kthread+0x711/0x8a0 [ 496.106732][ T31] ? __pfx_watchdog+0x10/0x10 [ 496.106753][ T31] ? __pfx_kthread+0x10/0x10 [ 496.106785][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 496.106809][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 496.106833][ T31] ? __pfx_kthread+0x10/0x10 [ 496.106863][ T31] ret_from_fork+0x4bc/0x870 [ 496.106889][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 496.106920][ T31] ? __switch_to_asm+0x39/0x70 [ 496.106944][ T31] ? __switch_to_asm+0x33/0x70 [ 496.106967][ T31] ? __pfx_kthread+0x10/0x10 [ 496.106998][ T31] ret_from_fork_asm+0x1a/0x30 [ 496.107043][ T31] [ 496.107051][ T31] Sending NMI from CPU 0 to CPUs 1: [ 496.255148][ C1] NMI backtrace for cpu 1 [ 496.255168][ C1] CPU: 1 UID: 0 PID: 1155 Comm: kworker/u8:6 Not tainted syzkaller #0 PREEMPT(full) [ 496.255190][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 496.255203][ C1] Workqueue: events_unbound toggle_allocation_gate [ 496.255239][ C1] RIP: 0010:__schedule+0x161d/0x4cc0 [ 496.255262][ C1] Code: b6 04 20 84 c0 0f 85 97 07 00 00 41 c7 07 ff ff ff ff 48 8b 44 24 08 4c 8d b8 d4 15 00 00 4c 89 f8 48 c1 e8 03 42 0f b6 04 20 <84> c0 0f 85 fa 05 00 00 41 83 3f 00 74 6d 48 8b 44 24 58 42 80 3c [ 496.255279][ C1] RSP: 0018:ffffc9000402f720 EFLAGS: 00000803 [ 496.255295][ C1] RAX: 0000000000000000 RBX: ffff8880b873a040 RCX: dffffc0000000000 [ 496.255309][ C1] RDX: 0000000040000000 RSI: 0000000000000002 RDI: 0000000000000000 [ 496.255321][ C1] RBP: ffffc9000402f938 R08: ffff88813ff21373 R09: 1ffff11027fe426e [ 496.255335][ C1] R10: dffffc0000000000 R11: ffffed1027fe426f R12: dffffc0000000000 [ 496.255350][ C1] R13: 1ffff110170e756e R14: ffff888026ef0000 R15: ffff8880274d15d4 [ 496.255365][ C1] FS: 0000000000000000(0000) GS:ffff888125e0f000(0000) knlGS:0000000000000000 [ 496.255381][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 496.255394][ C1] CR2: 0000560fe7b1af40 CR3: 000000003b232000 CR4: 00000000003526f0 [ 496.255411][ C1] Call Trace: [ 496.255420][ C1] [ 496.255437][ C1] ? do_raw_spin_lock+0x121/0x290 [ 496.255468][ C1] ? __lock_acquire+0xab9/0xd20 [ 496.255485][ C1] ? __pfx___schedule+0x10/0x10 [ 496.255515][ C1] ? schedule+0x91/0x360 [ 496.255536][ C1] schedule+0x165/0x360 [ 496.255557][ C1] toggle_allocation_gate+0x159/0x240 [ 496.255586][ C1] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 496.255615][ C1] ? __pfx_autoremove_wake_function+0x10/0x10 [ 496.255653][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 496.255673][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 496.255693][ C1] process_scheduled_works+0xae1/0x17b0 [ 496.255729][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 496.255758][ C1] worker_thread+0x8a0/0xda0 [ 496.255793][ C1] kthread+0x711/0x8a0 [ 496.255819][ C1] ? __pfx_worker_thread+0x10/0x10 [ 496.255838][ C1] ? __pfx_kthread+0x10/0x10 [ 496.255863][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 496.255883][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 496.255903][ C1] ? __pfx_kthread+0x10/0x10 [ 496.255927][ C1] ret_from_fork+0x4bc/0x870 [ 496.255947][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 496.255970][ C1] ? __switch_to_asm+0x39/0x70 [ 496.255991][ C1] ? __switch_to_asm+0x33/0x70 [ 496.256011][ C1] ? __pfx_kthread+0x10/0x10 [ 496.256036][ C1] ret_from_fork_asm+0x1a/0x30 [ 496.256067][ C1] [ 496.256322][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 496.522829][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 496.531949][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 496.542020][ T31] Call Trace: [ 496.545323][ T31] [ 496.548301][ T31] dump_stack_lvl+0x99/0x250 [ 496.552919][ T31] ? __asan_memcpy+0x40/0x70 [ 496.557526][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 496.562743][ T31] ? __pfx__printk+0x10/0x10 [ 496.567358][ T31] vpanic+0x237/0x6d0 [ 496.571358][ T31] ? __pfx_vpanic+0x10/0x10 [ 496.575881][ T31] ? preempt_schedule_common+0x83/0xd0 [ 496.581361][ T31] panic+0xb9/0xc0 [ 496.585103][ T31] ? __pfx_panic+0x10/0x10 [ 496.589545][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 496.594972][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 496.601151][ T31] watchdog+0xf9f/0xfa0 [ 496.605348][ T31] ? watchdog+0x1e2/0xfa0 [ 496.609708][ T31] kthread+0x711/0x8a0 [ 496.613805][ T31] ? __pfx_watchdog+0x10/0x10 [ 496.618500][ T31] ? __pfx_kthread+0x10/0x10 [ 496.623230][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 496.628491][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 496.633770][ T31] ? __pfx_kthread+0x10/0x10 [ 496.638464][ T31] ret_from_fork+0x4bc/0x870 [ 496.643071][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 496.648228][ T31] ? __switch_to_asm+0x39/0x70 [ 496.653542][ T31] ? __switch_to_asm+0x33/0x70 [ 496.658318][ T31] ? __pfx_kthread+0x10/0x10 [ 496.662953][ T31] ret_from_fork_asm+0x1a/0x30 [ 496.667751][ T31] [ 496.671078][ T31] Kernel Offset: disabled [ 496.675416][ T31] Rebooting in 86400 seconds..