last executing test programs: 4.902681797s ago: executing program 0 (id=8949): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000018) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x150, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x131}, @NFTA_SET_DESC={0x110, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x10c, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5bda36b3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3d2}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x42a}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x200}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4e1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfff}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfff}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1000}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x178}, 0x1, 0x0, 0x0, 0x4044050}, 0x4000000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x3c, r2, 0x1, 0xfffffffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000000) r4 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), 0xffffffffffffffff) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r5, &(0x7f00000000c0)={0x27, r7, 0xfffffffe, 0x4, 0x0, 0x1, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3d}, 0x60) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)=0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r9, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) r10 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r11) ioctl$IOCTL_GET_NCIDEV_IDX(r10, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r12, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r13], 0x1c}}, 0x840) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c582", 0x5) write$nci(r10, &(0x7f0000000280)=ANY=[@ANYBLOB="400004"], 0x7) sendto$inet6(r9, &(0x7f0000000580)="81", 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback, 0x81}, 0x1c) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r9, 0x84, 0x1b, 0x0, &(0x7f0000000000)) sendmsg$NFC_CMD_LLC_SDREQ(r1, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000140)={0xe8, r4, 0x20, 0x70bd27, 0x25dfdbff, {}, [@NFC_ATTR_LLC_SDP={0xa8, 0x13, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [{0x4}, {0x9, 0x1, 'syz1\x00'}, {0x9, 0x1, 'syz1\x00'}, {0x9, 0x1, 'syz1\x00'}, {0x9, 0x1, 'syz1\x00'}, {0x5, 0x1, ','}, {0x9, 0x1, 'syz1\x00'}]}, {0xc, 0x0, 0x0, 0x1, [{0x8, 0x1, '(}],'}]}, {0x10, 0x0, 0x0, 0x1, [{0x4}, {0x8, 0x1, '[^:/'}]}, {0x3c, 0x0, 0x0, 0x1, [{0x4}, {0x7, 0x1, '{+#'}, {0x6, 0x1, '}\\'}, {0x6, 0x1, ']@'}, {0x9, 0x1, 'syz1\x00'}, {0x5, 0x1, '['}, {0x6, 0x1, '\xf2,'}]}]}, @NFC_ATTR_LLC_SDP={0x1c, 0x13, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [{0x5, 0x1, '*'}, {0x9, 0x1, 'syz1\x00'}]}]}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}]}, 0xe8}, 0x1, 0x0, 0x0, 0x40}, 0x10) 3.330178966s ago: executing program 0 (id=8966): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x14, r1, 0x303, 0x4000, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4c0c0}, 0x4000) 3.309033871s ago: executing program 1 (id=8967): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r2 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 3.075517857s ago: executing program 0 (id=8972): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001180)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000380)="c4f6567b42428c351d0eb7e00adfac40f6f3c6ddfeee4f9b47f2ae534b00a80cf8bfe9952dadad722784be00d5e05f8aa568711892567737d85ade9858ea72a66a3a417d6fbdfe0c98a369e4e8de7139ea726aa8fd9e2b80cf70a64914c3cc12d10db3f785dcc90135afb89c4f917aba8da3dafa45a3ce5c98ad8d4e6528e2210d206b85f15e5eb55355d2acc609a1cc4df8ff5011ac509e40cc0ebded6b2781a05df6b38f458fe8a98d5ec9117cf4d25825b441b2e49dd32aca0852c7d7387a5452972ebde3fa90be5547e19b635d3b468d8cb58dd8d5e5aa5a917104c39f", 0xdf}, {&(0x7f0000000640)="18f2539a86f4267acf60e40dadcc211bb186706861b663e404ae5430d948a3deeb5982fbb1551c83edaad587e700949a9d32f5e7ab7cf7f52b86771efac9c04f3e30497f94e49127658062a15683e89b0aceb57d125d3b4ea3d1ad05f4e14c85034917bea1f128a1f6f3f33e7fd479c0c7124b558f472800bd87b2b9bb1221098d2ed2f09ae6829354166d4aaa99ece4c00d202c", 0x94}, {&(0x7f0000000800)="1c98baccf3c4dda10bf3823360bf673a13af18c90ee53a5b0ab6833eee1edc56059d6fdcb3227e7e06079dc9725423d66f47694787ec855a7fa2310330b220642ee8afcbd20fd692957d850174c2a1e64e225bad95c1c5ca477757bb1d8b4785dd0cba2804aaeecb9bcd3802d2fde502b8", 0x71}, {&(0x7f0000000880)="6697624319e115b3b12c54b477244af3979b03fafbcbe555a59252423d41131d33d81eefbc306e247aeb9a5e6891b7ff731babe242dbc2169c193466b12dedc0033f9aa0f0ef92167fd87d9d0e39669c9cdf116741eb2d83dd92fd9696a45c6f238e12", 0x63}, {&(0x7f0000000900)="eae7055cd3680f63593e03e39229a8c97f71a35140cfb7ff5557af9a", 0x1c}, {&(0x7f0000000940)="5d661b3f30a1248619c1c7ac10ba2a7b5ccc52b2eaee28135066628fec7fb3b5bf3a1903cede641321638c2bbbe2f22d2f7f69599542714e5334bc306e8ce6ea5031c87e646e334622abbf4211630b138515a989b3c8253b036eb8493ad774282c01144ff1b85ade7a5a1b4a35356de3e9687b8965cf09c9bc79b07b9693b95013c6f1", 0x83}], 0x6}}, {{0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000ac0)="a19168e24152c670ecff4e0ee89533187a9206e8b223bed2e89af6709b054a05bafbd8bdb01fe87a3b63a17eff007ee93b40c121e355801159a45e36111175f8d8453960c864bdcf3826be3ffadaa7dba08508123324e0a45a93818ebf5c0fbac285cd0f39", 0x65}, {0x0}], 0x2}}], 0x2, 0x4000000) sendmmsg$inet(r0, &(0x7f0000000c00)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000002c0)="91f8a9849519def2f8eb48d9173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000000000f38a6a4cb6b275ee91bd0196db0af38f2665cbbb4e66534143d02eac997657cf0a3df3cc8df5281ca813b255039632532f021a46b78fb7892513e4d3307f2dc6eca9986be03dfdd7dea5a59b3af0f59c39d0edaaf273933db78b8653e664f28ca6a3f8803662958348e8bef4a1370e5fc0c803eeb3e1154bab13b3", 0xbc}, {&(0x7f0000001000)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d0bb25fff9d3b1ce90b597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c73d97ce54164c1942b2568635bec8e0", 0xb9}, {&(0x7f00000001c0)="985e44efeaab001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a04", 0x4a}], 0x3}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4000900) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 3.002153681s ago: executing program 1 (id=8973): r0 = socket$inet_tcp(0x2, 0x1, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) writev(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000140)="1a9e0000000000000000ffff02000fe5", 0x10}], 0x2) sendmsg$can_raw(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x1d, r3}, 0x10, &(0x7f0000000100)={0x0}, 0x2, 0x0, 0x0, 0x44984}, 0x8005) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r4, 0x0, 0x6, 0x0) ioctl$PPPIOCGUNIT(r4, 0x80047456, &(0x7f0000000400)) (async) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x3a0, 0x208, 0x700001b, 0x148, 0x208, 0x148, 0x308, 0x206, 0x240, 0x308, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x1ea, 0x1e8, 0x208, 0x0, {0x390, 0x8f00}, [@common=@inet=@hashlimit2={{0x150}, {'pim6reg1\x00', {0x100000000005, 0x1ff, 0x47, 0x1, 0x151c8f99, 0x100, 0x1}, {0x4}}}, @common=@inet=@ecn={{0x28}, {0x30, 0x0, 0x5, 0xa3}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0xfffffff6, 0x8]}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @broadcast, 0xf800, 0x0, [0x30, 0x19, 0x29, 0x18, 0x1, 0x13, 0x4, 0x1c, 0x3f, 0xc, 0x2b, 0x12, 0x10, 0x14, 0x37, 0x30], 0x0, 0x7ff, 0x7}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x400) (async) setsockopt$EBT_SO_SET_COUNTERS(r4, 0x0, 0x81, &(0x7f00000004c0)={'nat\x00', 0x0, 0x0, 0x0, [0x8, 0x6, 0x2000000000000000, 0x80000001, 0xf40, 0x9], 0x3, &(0x7f0000000440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x0, [{}, {}, {}]}, 0xa8) 2.923004918s ago: executing program 3 (id=8974): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{0x0}, {&(0x7f0000000780)="8ff2f15bd0017ce4b3", 0x9}], 0x2}}], 0x1, 0x20000044) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000000180)=[{0x3, 0x0, {0x0, 0x1, 0x6}, {0x0, 0xf0, 0x1}, 0x0, 0x1}], 0x20) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 2.780579838s ago: executing program 1 (id=8978): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0xc080) pipe(&(0x7f00000001c0)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r5, &(0x7f0000000400), 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000003880)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000038c0)=@newlink={0x3c, 0x10, 0x801, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x0, 0x1}]}}]}]}, 0x3c}}, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) write$cgroup_pid(r6, &(0x7f0000000000), 0xffffff98) splice(r4, 0x0, r6, 0x0, 0x80, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b000000050000000004000009"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r8, 0x2000000, 0xd, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b9", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) socket(0x400000000010, 0x3, 0x0) unshare(0x8000400) r9 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r9, 0x29, 0x50, 0x0, &(0x7f0000000100)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 2.733949991s ago: executing program 3 (id=8979): socket(0x10, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002640)=@delchain={0x684, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff2}, {0x0, 0x1}, {0xb, 0x10}}, [@filter_kind_options=@f_bpf={{0x8}, {0x658, 0x2, [@TCA_BPF_ACT={0x64c, 0x1, [@m_xt={0xdc, 0x5, 0x0, 0x0, {{0x7}, {0x4}, {0xb1, 0x6, "a5fd64840366fd7ad44f3f053221ded9ced495590e2bc8690a2765e56ded8425cb3eb0e04bbcfec50e639bf373167e617b24eccd260f28bb850873b1e2154b158987d6e585e10ffeaba32641bae47de041e1169d8e4a65b8ce3633a4469c93c5228320c572237d92a9ae6bbcad2b22629cd3a2d1e27de283017ecf9fca6b2cd8a119dee59702830717b694625f60f5c81f688775c5e292f76a0ffa39e1d2cabd639d1c111c01e0d2f9faa22015"}, {0xc, 0x7, {0x1, 0xeb0757422c733451}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_skbmod={0x1f4, 0x12, 0x0, 0x0, {{0xb}, {0xd0, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @broadcast}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x4004, 0xe27, 0x10000000, 0x4bc5, 0x1}, 0xe}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x5, 0x2, 0x5, 0x5, 0xfff}, 0xa}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @random="e347931a95ab"}, @TCA_SKBMOD_DMAC={0xa, 0x3, @local}, @TCA_SKBMOD_DMAC={0xa, 0x3, @local}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x6, 0x3, 0x20000000, 0x3, 0x9}, 0xf}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x3, 0x0, 0x3, 0x40, 0xc12c}, 0x9}}]}, {0xf9, 0x6, "a1b660f5208936232cda86dbc72ce07ea965ef6ba1d1d09844721c7c4a99215f65588f37144130a0cfe892f40c7bd13792998ae07d055bb7d54c8481900754b36455377c7ddafad62bd905b87e203cd85441766254f1fb76d106fc2ab3b535bd37b963914a3937078f08fe2b215c53ac1637586d19d3179be2480bd4560f5f3df8af92646dcc1fbd383420085b4c07db2f0413025ad48ce3b346d0decc2020a76819621adf129187c02cc25e2c07331a44b29b6bee81ecbc147aa5d146be79432192fc1574145998b7d3b55d80dd7464335395b4f37be9047482b255b6f0dec2c748724aa49cbfa5ba9725d35fc7540b4a32031dc5"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ife={0x108, 0xe, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x6, 0x8, 0x4, 0x9, 0x7}}}, @TCA_IFE_SMAC={0xa, 0x4, @local}]}, {0xb5, 0x6, "5fb30546b7f724bbd0a03a2ce67cc3f75455f6dad8f7910df14f457f0b939aa1f7843f8d23ac707b39fbf4f38ff98effeff9b08050eb3e0e7e3e0b71672db4998037b547ee365f59092089a7e3e54e904ebe868f339d0f6a5ad79a6287cdbb16e3238dc8077ad21fd0fe097a227ba67efad74f0a441dfcd88e59a523aa041d602fab87928dc5ebc4c007fb8856019ad4252708b18bb036e4b855a38630c6aec103073dae680d15fbf65de3031bdd2ca073"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_nat={0x1cc, 0x4, 0x0, 0x0, {{0x8}, {0x194, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xab7, 0x4c1adacc, 0x5, 0x99, 0x6}, @empty, @local, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x401, 0x5, 0x6, 0x5}, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x5, 0x5, 0x7, 0xd}, @loopback, @empty, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4ef0, 0x1, 0x2, 0x10001, 0xc0e}, @multicast1, @rand_addr=0x64010100, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x80000000, 0x1, 0x2, 0xfd30, 0x1}, @dev={0xac, 0x14, 0x14, 0x41}, @local, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x11d, 0x5, 0x3, 0x1}, @multicast1, @empty, 0x1000000fe}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0xffffff7f, 0x5, 0x7b, 0x74e69dde}, @remote, @rand_addr=0x64010100, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xffff000, 0x2cf, 0xffffffffffffffff, 0x1, 0x3be6f802}, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x10, 0x8, 0x10000000, 0x1ff, 0x2}, @private=0xa010102, @broadcast, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x1, 0xffffffffffffffff, 0x6, 0xd}, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, {0x11, 0x6, "72c2816ab98a21c44007847797"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_connmark={0xa4, 0x9, 0x0, 0x0, {{0xd}, {0x74, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1df, 0x5, 0x7, 0x1, 0x1e1c}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xd784, 0x468, 0x20000000, 0x9, 0x4}, 0xff19}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x8, 0x5, 0x8, 0x4}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x2, 0x3, 0x6, 0x6a}, 0x80}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_BPF_CLASSID={0x8, 0x3, {0xfff3, 0xf}}]}}]}, 0x684}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) (fail_nth: 6) 2.650200358s ago: executing program 2 (id=8980): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="5c000000190001090000000000000000021800000000fd010000000008000100ac14140010001680", @ANYRES32=0x0, @ANYBLOB="08000b000c00000008000700ac141413"], 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) (fail_nth: 7) 2.297116497s ago: executing program 2 (id=8982): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x66, &(0x7f00000007c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa86dd611cc82500303c01fe80000000000000000000000000000bfe8000000000000000000000000000aa2c04000000000000c910fec000000000000000000000000000aa"], 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4048587b, &(0x7f0000000b00)={{r2, &(0x7f0000000180)='\x00', 0x200000, &(0x7f00000001c0)={@_ha_fsid={[0x2]}, {0x8, 0x4, 0x2b74, 0x3}}, 0x44, &(0x7f0000000280)={@_ha_fsid}, &(0x7f0000000340)}, 0x5, &(0x7f0000000a40)=[{0x2, 0x8000, &(0x7f0000000380)='GPL\x00', &(0x7f00000004c0)="389386cef59d207160cf8363deefef5309608d4ed8b3561c6c8a3780116313377879eac4363049cdfd81115755a11f1a12511e5b5eda5af02a5e6f888d878ba9c654c279d354c6f64d454c8c58a82b7e0a8c89af348df7fe271c32cbfff9f071f21f802ed371868cb88ffcee1ed8f67a7a7ba2923b3d1b6650f25ba9dea9fba4bfd0edfa445236e248e571c00249c8bba3878b4c16898f94ad0e097483c3f6173a3593382bfbfd0b5718974d5bd41547ee890bb8c63200", 0xb7, 0x2}, {0x1, 0x4, &(0x7f0000000580)='&\x00', &(0x7f0000000680)="8bc11e93b0dc8e5cd9c94f3e4e08f59b56f59c2b5d5c9d47d1db418ffd41de17333c07fa7ad628793b74696970fc6790f7402437bcfe355745ab72ec9ded7f709d0560d24c4d322987329eff3d8d413b3f7ce48d94ad5708988a5355a209a6b048e9018ea8a28e91558a428a05867ca21c702739a60ad260174690c2c80168c2c31c19f14ab6ed60c0372b193b2715ff5b147d", 0x93, 0x20}, {0x2, 0x7, &(0x7f0000000740)='^!-#:\x00', &(0x7f0000000780)="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", 0xfa, 0x8}, {0x2, 0x7, &(0x7f0000000940)='\xaa\xaa\xaa\xaa\xaa', &(0x7f0000000980)="cbad952655686e922d449580ab2c11115b3be19d90c36cc9e0e964374f666f71d4fc62465be7f6d2b691c8596854415a0fda090a0cd9", 0x36, 0x2}, {0x2, 0x401, &(0x7f00000009c0)='\xaa\xaa\xaa\xaa\xaa', &(0x7f0000000a00)="2555dfe7432e8109c47cf4", 0xb}]}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x14, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x2000002, 0x3a, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendmmsg$inet(r0, &(0x7f0000006540)=[{{0x0, 0x0, &(0x7f0000005b00)=[{&(0x7f000000a500)="a190d4f71aef576788d2afc3ea800004511b0e04167299eb94e74ae10cf2f33b14d715ac7c801f70485fb3b5f6e1fc4d5f1644ac8f85a041f8167e40b25d11d55a88169d2d2a4a3cab85c95dd1d97599bf8e57fac43e8bb65a847e08d3e7d3d44f7cee8adb833ba5afe8768438377dedfda28f67fb44f8997aad98471e494cd9fc084f4216e68ed7ebdc2029529bd459e9b71f7b743fe4c4dcb0815dd8939c66d8e11d7b47e5c72f0869f164cfc0b501053e38be65dac1fc8d0b81d9c1ad8335e365c8e703cff2b73f411366b1fc5ebd0c4421def7c9ed647264817cfa3269690545f023a730e379fa1e3ba53cf191b6185afc6491cce505d4ff14485cf235608b229d6d6e82ecc83ea7622dfc2ece8150ecb5e76839855f13653b43cf99b7d566876e828c154673aa02334a12f9e72c4a6cdd8a423c2feb9ff1acdb486308241c774c7ce021cfd132c599e47c269ddce89de284c280424650edc84d2c00de38ed1b4a3505f115029a399a6b71c434dc1c16098c447c86955507452020c8a6ac48ac075089e524f86946509d965dc94108cc128a1f99c13205a93ac6575a8e67d40bcd88609a658821d7870a8a8c86a5b2766cf0ffed1da3b52373aeeecca070d173554e5285d533f335fa9bfa18d9452e840dbb9b1e77dbeef09cd2df689121cfe4ccf8e21e0055c43ddfa36388d349f54dad4006db07bbc39e5ede4cabddca257ad42dfe7ced5ac8fa217795e32070cbe65b31eaf15eb3f0acae487c884ccd2eb4fa439f374c45448c51a48cac5893bb3ce534836e29d61229ae8f3bff3b533f5d568e330d12d9a96ebdf9d878f2f4507c76511d9dac164d75aa00e94a413e6cbd95fc7419e8ca1800b0b2cd2d053054fb1f61a79edda9eae41ba75e650049b431c3860c63edcff409bd3b011d1506c38d5996d629261d0fe88702faa83223c91e6a40b56ad56cb7cf060c9fccf44df52c0691c7ec50bf0c9fdf5bf15d61d522a10147733a93cd8b2ba8abe56bba9e1360da50924a1f4fe18b7d19e546f2d54e7ec723a22af662b80e1aee6db4c17ad9ef604137c7e3dd06459bb83700eeac2a13c8f526ce0b0f25b4022e9f01ace2085d393908c0797a664ad3e225191904d694cd5f00dda99ef403125f45da4659115093f20d8c9cbfaac6084bd6f6165ed9ac5f8d6466e724f54ecfeb81cdb654ad3bc2e85b1813e7d8beb61aec0dd97d16edeae5d40965ebbdafa3a62fb7cb922a22a4fe35f979fc3054437f4c85036cb8c27eac76ee1288ac1e2e2ea045914bb592bb05c23c4f8cc0a0e4069f0941327e0f0939b7a5fb58e3a9cc032998841ac0aca32cc1f7b026597f1c330d7e04e16940610b82dceeebf9a70b501f263a7dec2c2d45c4f9d0e8d4d04cc9738c18024b1ab06335b743889631291376ae88fba26108e7bd635cfc", 0x3f8}, {&(0x7f0000004a80)='?', 0x1}], 0x2}}], 0x1, 0x2000000) accept4$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed}, &(0x7f0000000040)=0xe, 0x0) connect$bt_l2cap(r3, &(0x7f00000000c0)={0x1f, 0x807, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xd}, 0xe) 2.194326361s ago: executing program 3 (id=8983): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000280), 0x0, 0x0, 0x0, 0x20004000}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 2.179007955s ago: executing program 3 (id=8984): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @mcast1, 0x102}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c, 0x0, 0x0, &(0x7f00000004c0)=[@dstopts_2292={{0x18, 0x29, 0x4, {0x2}}}, @rthdrdstopts={{0x18, 0x29, 0x37, {0xf04a70bee95f8f64}}}, @rthdr_2292={{0x28, 0x29, 0x5, {0x0, 0x2, 0x2, 0x1, 0x0, [@remote]}}}, @pktinfo={{0x24, 0x29, 0x32, {@dev={0xfe, 0x80, '\x00', 0x40}}}}], 0x80}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r1, 0x215eb000) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @multicast1}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f4, &(0x7f00000001c0)={'syztnl0\x00', 0x0}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x4}, 0x1c) listen(r4, 0x9) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) accept(r4, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x8000) r6 = socket$nl_generic(0x10, 0x3, 0x10) connect$inet(0xffffffffffffffff, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025", 0x1d}], 0x1) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r6) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r8, @ANYBLOB="010000ff1f00fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600010002000000080006000a000000080003"], 0x84}, 0x1, 0x0, 0x0, 0x41}, 0x4000000) 2.057805416s ago: executing program 0 (id=8985): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000080)=0x8, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0xe22}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000280)='cgsoup@\xc8`>\x82E\b-\xc81\xbcO\x93YT\xb4\x87\xfd\xec\xf6\xf8m\x03\x14\x1d\xfb\xb6\x9f\xc5\xb2um\xf5\xd6r\x85\x8eB\xb6\xd4\xe1k\x92\x03x\xf8\xc2\x14\xee\x9c\xbc\xa1i\x87\x93\"\x1bF\'VkH\xf2N@\xff\x12\r\xedr\xaf\x92,!\x9c\x98\xf5\xdc-\xc3\t>\xbb\xfa\xb6\xbe\xc0\xbc\xadv\x8e0\xae\xa3\xd2\xa6\xd3\x12\x97\xe9\xe7\xe8\xa8\xecB}\x1a\xd7\xb5&\xa7\xe2Y\xc5\xee\xf0I\x8e\xc4\xb9\x92s\xec6\x92\x9e\x9c\x8cp6\xbc\x88RIF\xfcW\xaa\xd1I\xff\xdf\xb5\r\x0e\x1e\f]\xb8y\xf2\x92CO;4<\xc2\xdd%s\xb7>\xeb}SG\x17\x85QT#\xfa\xc1\xf1\x85\xdd\x82[\x86\xc6\x95\tT\xe4\xffN\rg\xc0E\xfax\xc9\x06j\x98\xc3}\xe7\x1f\xeaGY\xe0\x98\x9b\xe7E\x93\x0eE\x96\x8c\xc6\xf0\xb2\x82\xfdB*\x85\xa2\xe0V}\xfc\xbb\xf6\x89?\x9c\xaa\t\xf7a\x9c\xebk\xb8\xd8\xdaq\xc9\xf7q\xda', 0x101, 0x0, 0xf, 0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000feffff0000000005000000c4000005ffff00ff95"], &(0x7f0000000040)='GPL\x00'}, 0x94) syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), r2) socket$inet6(0xa, 0x2, 0x3a) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_NL_NET_GET(r3, &(0x7f0000000700)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={0xd0, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7f}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x100000000000000}]}, @TIPC_NLA_BEARER={0x8c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @empty}}, {0x14, 0x2, @in={0x2, 0x4e20, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0x12, 0x1, @l2={'ib', 0x3a, 'ip6gretap0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x1, @mcast2, 0x3}}, {0x14, 0x2, @in={0x2, 0x4e24, @broadcast}}}}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x24000090}, 0x8000) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000980)={0x6}, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="18000000520001dd000000000400000002"], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001940)=ANY=[@ANYBLOB="40010000", @ANYRES16=r6, @ANYBLOB="01000000000004000000010000002400030000000000000000000000000000000000000000000000000000000000000000001400020077673100000000000000000000000000f4000880"], 0x140}, 0x1, 0x0, 0x0, 0x8000}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x7, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3ff}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}]}, 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x32, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1400}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r8, 0x68, &(0x7f0000000200)}, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newlink={0x40, 0x10, 0xd07, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x40345, 0x6c101}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0xf}, @IFLA_GRE_LINK={0x8}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x48010}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x4c, r6, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40090}, 0x44000) 1.978146925s ago: executing program 2 (id=8986): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYRES32=0x0, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000000180)=[{0x3, 0x0, {0x0, 0x1, 0x6}, {0x0, 0xf0, 0x1}, 0x0, 0x1}], 0x20) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b", 0x44}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1.787662329s ago: executing program 0 (id=8988): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000000)=0x9) connect$unix(r0, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e) 1.767995808s ago: executing program 1 (id=8989): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{0x0}, {&(0x7f0000000780)="8ff2f15bd0017ce4b3", 0x9}], 0x2}}], 0x1, 0x20000044) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000000180)=[{0x3, 0x0, {0x0, 0x1, 0x6}, {0x0, 0xf0, 0x1}, 0x0, 0x1}], 0x20) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1.70014459s ago: executing program 2 (id=8991): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x6, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0xb, &(0x7f0000000040)=0x15, 0x4) sendmsg$netlink(r4, &(0x7f0000002b40)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000007a00)={0x44, 0x26, 0x723, 0x0, 0x0, "", [@nested={0x32, 0xa9, 0x0, 0x1, [@generic="57d753865bc026738a23", @nested={0x21, 0xeb, 0x0, 0x1, [@typed={0x8, 0x20, 0x0, 0x0, @fd=r4}, @generic="2db88f6f88ebb2fd1bd786312d0c165c579777e85d"]}]}]}, 0x44}], 0x1, 0x0, 0x0, 0x24008015}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000280)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x11fe726f7e78fcf0}, 0x28) unshare(0x2c020400) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r5, 0x29, 0xcb, 0x0, 0x0) write(r0, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x1000001, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, r2, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_buf(r6, 0x6, 0xd, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) pipe(&(0x7f0000000000)) (async) splice(r1, 0x0, r2, 0x0, 0x6, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0xb, &(0x7f0000000040)=0x15, 0x4) (async) sendmsg$netlink(r4, &(0x7f0000002b40)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000007a00)={0x44, 0x26, 0x723, 0x0, 0x0, "", [@nested={0x32, 0xa9, 0x0, 0x1, [@generic="57d753865bc026738a23", @nested={0x21, 0xeb, 0x0, 0x1, [@typed={0x8, 0x20, 0x0, 0x0, @fd=r4}, @generic="2db88f6f88ebb2fd1bd786312d0c165c579777e85d"]}]}]}, 0x44}], 0x1, 0x0, 0x0, 0x24008015}, 0x0) (async) write$cgroup_subtree(r3, &(0x7f0000000280)=ANY=[], 0x10448) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x11fe726f7e78fcf0}, 0x28) (async) unshare(0x2c020400) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) getsockopt$inet6_int(r5, 0x29, 0xcb, 0x0, 0x0) (async) write(r0, 0x0, 0x0) (async) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x1000001, 0x6031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, r2, 0x0) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) getsockopt$inet_tcp_buf(r6, 0x6, 0xd, 0x0, &(0x7f0000000080)) (async) 1.150320889s ago: executing program 3 (id=8992): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000000)=0x9) connect$unix(r0, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e) (fail_nth: 2) 1.150158035s ago: executing program 4 (id=8993): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x54}, 0x42) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff9ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00010000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca711fcd0cdfa146ec56175037958e271f60d25b7937f02c8695e5a1b24df41dc10d1e8bf076d83923dd29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b318e2ec0e1a00897a74a0091ff110026e6d2ef831ab7ea0c34f17efd36ef3bb622003b538dfd8e012e79578e51bc53099e90fbdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e060e3670ef0e789f93781965f1328d6704902cbe7bc0cb82d2789cb132b8667c21476619f28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fbce841f8a97be6148ba532e6ea09c346dfebd31a08b32808b80200000000009dd27080e71113610e1019c12a73748b049604fa72c64ed858e8327ef01fb6c86adac12233f9a1fb9c2aec61ce63a3462fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2ed8576a3f7f3deadd7130856f756436303767d2e24f29e5dad9796edb697a6e97180aabc18cae2ed4b4390af9a9ceafd07ed00b0000002cab154ad029a119ca3c972780870014601c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f4b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a2a71bc85018e5ff2c910496f19afc91b47683db01a469398685211bbae0e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bde792c88c5b8dcdcc22ee17476d738992533ac2a9f5a699593f084419cae0b4183fb01c73f99857399537f5dc2acb72c7eae993fc9eb22d130665b6341da114f08cd0509d380578673fffffffd7917f23837a6b24db0e067345560942fa629fbef2461c96a08707671315c302fae29187d4f5c06a960fd37c10223fdae7ed04935c3c90d3add8eebc8619d73415e6adcda2130f5011e48455b588b90dfae158b94f50adab988dd8e12baf5cc9398c88607a08009c2977aab37d9a44cfc1c7b4000000000000fa47742f6c5b9c4b11e7d7262a1457c39495c826b956ba859ac8e3c177b91bd7d5ca1664fe2f3ced8468911806e8916dc15e21644db60c2498d5d16d7d915836ab26c169482008ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d4a3e1a9e90d76c1993e0799d4894ee7f8249dc1e342892129369ee1b85afa1a5be5f6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1038debd64cbe359454a3f2239cfe35f81b7aded448859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b20428d6474a0a91ee90b8de802c6b538622e6bbcb80f87b415263c401e64ed69a2f75409000000000000001d695c4559b82cabac3cccadc1e1c19af4e03020abf5ff0433d660f20898d2a045d009a0ffb20a77c9af2b80c05184a66d30bbea2ca45a4d6d6d1e6e79aef42355b17402a500587b603306a5af8d867d80a07f10b854b1c8c768c001496fa99ce5b5040be9194123e918914a71ad5a8521fb956dbc60f7d9719b55b3abb6bba3d113a680a8d46fe074c83fbe378a3889e8145b2eaceab05ef932c6e4f8ef0ed0d818a7b76d839cf3c6775e19f0b7e70803000000b168c38fa32e49563cfee3a7f0fc18bfa32c418cef875fb49e2989172a1bcd1e30280bc586e79a5dd8076c248e7d6e97b3ce267dd4e27b6ef206660090bb2164474cef378f97ca33fccf363361dcdba10c1547053453d0c9aec91a24079b21d52fb5516bf0c28ef37aa76442f6083dc99cd61afaf6be45d7b00d3639f2f10ac2d5c759c3e5468f5874c24411d415b6b085fb73a2d7c3852e0e658ffeb4e863428a792bee94f6cd895424360e0464f9d7ea425f2fa6aa0000000000000000532ff181c985f54b7ae20aa5e63055b4d6a36fa98a44e379d2bccf977c3e88538f406b598307c9912fb097601f3f88a2ea6fd1f9320cfe7f09aed4d1e72d26e5c7a93854c8e9f7f15f02e177ce23f43a154b42e26f037e8a01377cbd3f509e6e540c9ba9c2a589ac5d8ad67a65e9a44c576dc24452eaa9d819e2b04bdd1c000000070000000000000000000000005333c6199c12dcd92689192727a7267c47cf897853d160100b39b613faefe16bd91fc105dddd77ab929b95032d3717fa9fbdc2bdc0e98ae2c3f23a6131e2879f0484ee3bfe30b92dd493be66c2242f8184733b80ba28e824910844df31f3d4bb2f89049c5f6d63956995747639964217aacfe548fc869098aa8e07e51dbc9e2d4db3c5f79fd355222ec2a00cf7f2ccd6dd6d2dc2a815d8314221a5472f1318a9dfbec5a759579caf3262129b14e99040b5d91398e17df85c25ccae973eecc7d187168d5c9cd848d566cc1758763f0000009c927da38d83314480b15e23138c5b877a72bd4cf74a299df4fbfc8e6ea96939f15d254d9033c5a45706bda78ab602000000000000000000113a3065a478d1de98be3a66f6fbf68f2f5693050fa56db62e2f99cf916059ee364dad078fc88d17cbde37a2270f90a60afe8548f4c579b09c333382c6e7a316ac03aa23d379836b96173a5541fa96c27e7fb6d2585d828aa330f3438d8487912bb7742be1502e706644f7a937451beb7a5f6ca3ef21e8cb8f841af6d54334d82a8b816b6daccf0c66162f897623ee325d714f9f10636a7573582ff31c7f9c6f767c806ef4af486cc19a5355bdc814cb5557c6fa6404179c865980b0815b907a7f268e97828c196f5ac033d395a217b4e1e45663023a0292003c36a3b7461fc2c8566e0f3f693bfacae26aa2b7d17962989ccb943633c080aacc9b7d311c251686fc66aa80bf41a5bf6cd72d5aa995820fb318fad61a79a61d0a969fd6018ac9f131fe02fe31d565723cbf9b63841e21417fc29a3e7a03886d80566ae001861799a4aad91c72139e681ced8625b675dfbd6d458d4b2d9e6d565430248172ad942cdb41639f4113896827c8806e049218cd1eef89d6b9b14dd707da40705c07f878263ff9b71ccf28ec50178c7aac83bef7bd1045a5e4bcb6cfe05e2ac3e17c1f8f12ddf5b6770ce0da8cb3aba3a935a6b737b6d3ebf2c715dcc11c5759bd0acdecf333f2b77c52fb2251336bbd92f73ad1a30bb9162bd9d699c49d824b827f3e7c1096354946e09922db25904c83262c6dcb87457e4abefa0e9dcb17d79c173895b74aae2ed4419662690a16494e7b27d0d2688c69b4be3d21b783195f6a5e5dc5c07c73f0d0f0670db10ac9ef5b8295ff88df734e3c6ab8555c0390f962cbf559bce9c42e1034dba78997b2877b485d9d4ae2fcd3e757b84319879d0337785773c940af6e57d162f4606d101def01199325c8676a32e26303560271b720216d95e0013265a45b02bd2414bebda89b7b5e71e70e0000000000000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 1.123542874s ago: executing program 0 (id=8994): r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x2711, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) epoll_create(0xfffffffc) r2 = socket(0x2c, 0x4, 0x621) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in6=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@local}}, &(0x7f00000005c0)=0xe8) sendmsg$nl_generic(r2, &(0x7f0000000c00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000800)={0x2bc, 0x19, 0x300, 0x70bd2c, 0x25dfdbfd, {0x8}, [@typed={0xd1, 0xc8, 0x0, 0x0, @binary="c28777106c989ce392e32409fd8586f0e3f015f1a1a874820c33d15e6fd342096d3f1070124db0fd68b8f5e13dd8c12049b93bea78b5e99713ffe295effdea882b27d299b6dbea9382f59959361b71902a614ab4235c7c3db0e23cb820a3996505ffec0cb93d4166f7e200efe9dc1c056921e2067145bc4ef9a0aa1e3816edfa9e0d1dfe6ade3e79e7ef321fde32d7aec98ff09fb4f2396e2e284742191e6f4b9595735ac9c1da56067d9354e1798db4c7f8827589a105173a34cf3bae2231eac6d825e79ac8f44add2bc74742"}, @typed={0xb9, 0x10c, 0x0, 0x0, @binary="cae45504459fba7493f5594f1f0e9de1bb8d5eefbaca3e10aa0cf4d4b4bddae78f344c49c2b0fca4e14c1410b193fffbcfde1ceefe30ffd766c4f50f0fbb827af7c5421f41820d4b0e09485adeb029ef892d5658c4276dce14afb4eedff7bffe2ea3d84c1bb58dd357681c999150a7da624f1af1c1ccf15e64509e0fbe351c896a266fec2f041c5216d963ae4d1412b762f0da2fc20bcfc6ac5d3d56eb18fc2ee96da86648bad3e1aa7026e52dc43dc34c5a8ab7df"}, @typed={0x8, 0x89, 0x0, 0x0, @uid=r3}, @typed={0xa, 0x4, 0x0, 0x0, @str='\xff\xff\xff\xff\xff\xff'}, @nested={0x104, 0x1d, 0x0, 0x1, [@typed={0x8, 0xc, 0x0, 0x0, @fd=r1}, @generic, @typed={0x97, 0xb6, 0x0, 0x0, @binary="1232eb604a26d3ef8a22faebee98c13c919956f4bababe2763bea437a3fde855827b0b2d664909cdb25690a10ad82eaebc05253fc487f8ce70d25833aa96e154a48a2688fb93ad6dbcd05f8b1f21a67f355af766c235e0f8c590ff6335d72fce8b9db339217e6724e9c058de7176604c3b47e0c890a7cf1a651b4c0ed02b0ebfea1079df106092298a51c1f8b4c9b1d91b2647"}, @generic="ba2d64e1f8f776cc0f06d586ee78ea5e033b8c1261885a49d1106c2a8844a7fd5f8eebad8ae41352ff95e872611f1465cb76e9bcb860251b266f742d194130694de229b31eeb4d2a6c304a2ccb26d2340c31d8c6d6831e32a364928c", @nested={0x4, 0xbb}]}]}, 0x2bc}, 0x1, 0x0, 0x0, 0x20}, 0x24000800) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) syz_emit_ethernet(0x36, &(0x7f0000000100)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "0200", 0x0, 0x0, 0x0, @local, @local}}}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r6 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x10, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xb}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x41}}, [@jmp={0x5, 0x1, 0x2, 0x0, 0xdad1124f55525059, 0xffffffffffffffff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000040)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x94}, 0x94) sendmsg$NFT_BATCH(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d1a3a700080003400000000114000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001c40)={r7, 0x0, 0x70, 0x6d, &(0x7f0000000340)="6f803fa98dfa612e02cdc6429ec3b1917b87dd4345076920ccbe5f604c10b3693cdfb9d375c30cb64be2da752008aefd4842c3dd5c3163979fe48df65a9b4b5ac10956b719b5d21d9891da0c97201efd0f24dcd8ea9bc9a9c4e9dba2b7443da17ba9ee5556d345893e1f597d154ff90a", &(0x7f0000000600)=""/109, 0x0, 0x0, 0x4b, 0x1000, &(0x7f0000000680)="a54de42492dec1ba13adb372fd7106dcb6e7185b053d928d6558e5c634c99f47908a496e8e0796d7b78ee94fd75fec9d9599d71ecb64a66f048fbcd3dc4009de1c0477c4b3b0f730cb0248", &(0x7f0000000c40)="e068c9bbb09ae4ea5634cf246b1c077cbaaea83d99dbb429cf5443225b6f730612ea9b940d1b07bef242569f20e5e72f1708ff939d3271854ae1214c5bf8831fa1d81a9c0b2c0885343b9ad56328ce5294b155a50c3f9c9434486b6ca27fe6c0c5b1b4dea2cd4ad7ff274ea1ea62142ee6c772d843d75561056691f15643cf72ba3e4054cf4ce46f5024000d0107c90ffbd609a081a4e18e5e0d148a09b4134416545966f8e84fbd05154c65a5c295083f0ef55a8d7b02a5402042d234262c304b517875d2c4d7945cc8d2e14b422358b970f2ddd5d4683c7baafa4fc73cffc45b1c3c1396925acab9f33d1f4003d7153852799c12b49faff46d075d53da1e54be34f9d9f3a08748a131e3b760dbe8ea600584ef2b25c7fe2b879d1d0695cf266808d8156de4077f50a1884f5334354989301d3ef89fa8e170d7f908bd0cb23a3982b1ed34b5c75efe250729584a5aab253c2f78298044326cc61c127d29b2dbf8c770f0be13590ee2ff30c3563a85551be50773cdbaab9c27dd98bd22290ca22947f675a50a19f425b6f70c783486147a245e0d122fad317f038d3dedbbdb3ed2088c54825b1a02970c0b5ccccc916f7679ebf94b85dfa95950700e6ffb7aafbe122c8eec68889ac55f1e51f710ff16cc15fb3c5ead668fd8996a4d8b3997792cfefa30fc2e527d8c75b54a2d352285922561eb41d5304b2e5f402144d2e299cf4cff2c0f1025a68cab541fb95817b0e1238cdfa0286a269031bb2d26efe27fc218936e3f0284b39cc121743bd2f976966c9894e94a25105e6ca6001406e42d7a553265b3204f6eeb6e9ce87a86e6d2e213e069011b37e4dcea0ff9548b4a3b14eef8e0120d6b9b663ceb882e84a66d89a0040acb733d286326218b32ca40973fb679148ed5799ede7e7cb9a30a5923aa28db94a7178f63d646035205fb5327ed94c0693a1bb4e16c19d9f165bb0e6ff028ae98931fef4e4b0378aedcb28d57212a578dc6965cded1a7f25a71842a607630ea6f6542ca8d0056507594c783ba540d69cb88431cb6b3d9a76c555549934f359e7bd5debcb08ba1ffbfff407a38d9ec8b59d3909336607ac5e6e4dada22a8c5a78da812b666c6ce7d8846e589630259985ea378bcc7ef6213077049489befb5f56942a83f005e9611e9b03b965592d2802e274315df049b8ce604ec1b1d7ff3f2451a53cf44dbf2ccefc398dba407dcecd40a8863d815c0a270d43d76ab4098de2306da0c96220359f21dfdaa0e7561b572eed3f38dc9eb7674c06814cac75df471b436b6ea75d8873ac5554592a65c150f496f758e89dd705c9d60a778641d0deaea7e4d21a8882c561a1897063760186dacec2ed24d7bc6cfe86108a83c289d2548713284bc696515847d2653a86da5907a7f36ef44f863c9a91adcfedeb31a7cfa35749cb94016952730931c9bdc8920d7efe154bc96fecb8b90b0f0b2c4e5d7dfb239ec87d18935e15e899934d55393f531ac7cc5e51f759946fc5578fd96f70c0907956059b09e4107c37599eae6f2979525cb7514e13e1ed3c0297af4bdc104578e433e45bdd0b9e685eb697f2001553ff95cef30128548db48bcc893bb8cfc75aff409d1eec960b6bc38c3d4071e258a8ea858447895c51773407a0df69fbc14e351fa70eb8b7ba4968e1ff9c2a89103a4a25811c001c1ac2827a587c5172b8154527998d6c5e7e89bbb675cfe1ff75519b45e93115adac08520a63b6be4e0e91491f96e07f99928f8475fb53c2bfac10f10023922081fdea1d17b83014da809e20c36484b69c5fc42c9929f1d5497ae17e0b592317c5136a083444a741d40c63d2c573544da7e18e7d11a0952ab6d3b910a937a2cfab90cbf00c91f44b9d6c0beadd2165ab43c1d005162e2c91e3a29c0ba6e08c505f38a9b13aa3865bbd05445b06c74d3e07f990c9a15064e9151978eefbe042ba1aa94092eb1100dc9130ca6c02a6db9596bd23e4b1661f25e04b93c9e561cd85e12a852abedb93d49c7648bec3f692e29d15b6d0612fa3c1de2d1f3e8ed8657ef7796c11682113fdcfb61488094240184999c502f03925bd0a08f596a131b09ab025e94dc54468004fa04ec3cb8b7852e5885cefb815cad5ab7d477de7c6fe2c762adf3c0a55427f062b0ab85e88974e85e6471472d91934bbc1e986ce9a7a4e9c96c75a7e79f8907d3e5d0bf69e2e84c94e83cd7e45db721096e998aa81d042d3b86c124f9b82e9a1d9fbf4e74f98fb078e05f676d6fb0bf380caf02a536df04cf191bdf047d5ec354afc579fb859eed3687a636ef34593caab2a802476a3f5e712f89be5ffadd2d438a8415c047390d00332d3d0305a402fac0886ca54ae3529f6727b749ac58fe680c4f9df706bb1966d61dec95d4abd5deed30000020a84cfd9185e7fbd0bc40757015322eaa5610d6fd822b95a313951cf5bd38b0a7aa4a5fe25918c2bf1f58464f83633b01e46962be9658b05b65a68e88ad4581314d4a46cbc5490978fb6a6e9b26714f68fa5d6bf83c12ba67fcb9f407530497a98a3594868c17cff3a9becc11701105c06c8cd16427dc04e5bf815ded992e537a3cc30d1a08e3134f41980a1eff93f9af179e5534ce21da36e4285c2cb0c2889602ae8f1ab1daea6fbc58c81b19e64bf09fa40112e3ae7f21d2f5726b907b0c2d01ef23d60bea8164519903e8deff378c45be775901a4c8b1a64b69d595188fec42f219bf34f65d48be7ac3b96d5b8200ff20709fb98a9912cb932728c6bea6bd0cafa401eac824fb8f7c2a249d9c74d30127e50a2c9aee4a610dd80460d336594c01a4df2b333ba26c26a1c2b5e8a56900151c9d2d707ab41d241283eed9801460f712b46a8411eea52c0a1a74ecaeaf5b1ea6b3d2d8444595de3c628413f7a65872f42d0ebe24f944f81a3c87e829982d24d2e5b590a92ac4494d267b842d0e6c6fea66407c2384e9b9864a2951e6d9a99448dc158a40c1a9f96d81fd7c02dc76794c48f57375012646d907b1994bfc7f60130162df6c7eba79766187028defd9691176b9ca4d0929a5db422bf95df57a96d860aef04739855b079d73861d3cb98144397dfa5cf64cc3ea292409111f9dbbd37926a1660e07f78773bc12916204ce398c7fbd08f7d52042eda2c24344ab42374a38d9fc7d383a2ed326e507b43272576fc88b95cc78a5985c19211b6f674c35d21d2e39e0a567e6292e5b3389bca07d4454771dd2b386306121e6e03c2dc6ce30a10058bdc484193b1a750d56fc58b02c9bcda800860b4f5194b2be4eb62e6f7758a461378e60eed875388fd3e38c072bfe784fc9830a99d089b6851277ce2d81bef1d7882a7841338faa823323f0600e251f023c2c189493f34ce4fd3ae272885bafdb72ba1b4e2d0b4942d63214e69f1831d3153c878ae7728cc3fa7babcd3953bdaf0d8b879274717e7499b887b0e043c14089d1907906306c3635db0fb5135a5731411fa8f09aebaca014cd2dd5855411102266d012a0590703310705e11c3afedfdaed478cd268afef4534cf184235b93e4e163c220dd35e714c72aacc5813913d3c17e17a2d74a90e5e62810b69c87b77f75b68205484b15b32a92d3f36cfed89e865dbaff71fc7a3ecebd1c8b8f9c5fce83aefa8b7d78f490e7ee162dcc78a170a0d5f0faf25ca0c0a4f5b0e9bab9447ce5e3023a3c11ba290e9ff2a349b782d6ded958e88aa0acae60a8a839806d0e07cb43592b61f3e5add52caa332e76964981a687a18a6eaf23c702f1081477fa91f6ad558d51534e170fa04f99c30c25c975f8aad056b9f9b2f6966110eb5764298c611d1bcc657571e2e0164c66b8383ea823e1277833349adae2757ab86d0595887f9b0a23337a91f74e12e3764c08fcb9bdd319aa3e7f6dd9a187b9ae688080880c88ab7ccc6a469db0c2fc7327df2c3a91eda9594f19a2acdb7e44953708889ff020b9f3686c8ac1a36fa310a2e897eefe2dcdc6716136001e3b9bff4d7e55f09a8c951b9630c4f2e221c0092f543352269c2ce9cdf437c81d5512b685d568fafa5bb29d1413a7356842d2ccae474ec36455952fff4a45f3067447facb84ae1f31df6af6e8a46f8acd8ba24985f8ea500ce70ad2c2d94563603f73f00906aeba369ba0ecb6438a96bdfa66825a9b7388058aecd0ea408c5fd012ff7147f8bdfa2f95a37bcf1b213fe97e7d0008cff6c1108446167488b7b0f8e0f89e56dbfaf0216d105c36731838f21b0b35a61421373d626bbeb760ddb335b81476837d6cb5225c5a32767e172896852cf589695938f133dfb36415f5df18ced72897206c45423250b01ca26753983ca3fa184b1a732f09df64bd69a96d9efbb4f431b51f04e028335e36a481a65e2fff3bed3b2d3a7957a3101a9a8411e476552bad0445a714477962c0e2cb6274d2e65bca5996e712ad330d3dfa09df562edf6a741dccf555699de035b274d8c709d136d35a1b0bca3141677127732ca7491b3ea9447c895a986483c753c123899dfbec9189a774ab319e0d9d76e88047a7b51fc6d781568a3fc70e8b135f1c42736cb6f42ed78743081054286d7bc9d822feea0e109b4a1a4be649fc126dd46b3c0f7f34a05d9187c2f78efb6a4a1b29fa2f8330481ade9cbac3cf0cde608e02cf8b10ac4cf3655002b3143c2974ad89a7707469a2f5ba461cf03538d608d5e555358f60c5c8903669aa83e4b78d59d912f510ffadd39a1e292d12df5f60f7708261f10d2e6edce7f9c271cda48e233e17de67bc6dc329b314c47f7a512844d4d0e98cfac94ed794cd90c87c739fa6e0b9781d5442e98707cc909b79c8bbad3f093f82531c0cbb2313300f517bb2930462f92ea5294ab5885f5cd7a8461a654e67523a92ec96a315777222780f2bde889c4471b20a7491d06ddea22144bc50c31a646357159ae5ac2f6fc648c10655809a7e284ba23e0966be0f08f887f849458a7c74d2e8709821251ea9134175de03df2c1875d36a943d28bfadd285f0f815808c8a1ea3c01069899bae0f892e30a0f240d3096a37130b038e722f6d596e1c06b779445064064e9c2364cde096f1c6edf38c5b5bc5fa0d56b5e1070ce07f64e458ab3520e500fc89e7d473bd1296af8508f57e69e39129323c48efe4cd14a85b0d57c105a6b45d92d8288570304103bc0980bd671e8119e57dbd7ad3d727e394a380687ec60890d7315e0513265aa8f3fd61376220ecd3667166b3d31200c303aed659d253b40d3b7f67622c57fedba382ff4ee893baea9eea4315337190b16ee81ecb48e1973f037b0cac2b24027fa284e871141af04f4a0f9578cda9dd5f61c1418266bdf84aa82570206ba49f9260b915b95f71cb3085a8d60cd4750f6c0fcbcd921d5805c5db365d24cb06489fdaa04351900a5a50208816b15ea570b41db944f1d0e18a2b1b57a6efab2731810ae0c599ef9a8e4234d62f873bb5022dc65d383cb8fd4dbcf4d5b15b41181a79846788e34fff81cbb048e4b2e44b15662aa5a54261df43a3ec467862548256cc28df670ab6cffcc15dc8010e9e562596393b6a4685f744fac4695264f82db04ad8b5a33e3c18e421bdea10ad660aa6ed0af50a9fa63f08e695d84f1b31f64028a16b5b441cfc16d8c1baf9c89a613cdfc5208db89db028788b5756c6a4ea524a298c4c61b4dfe953dfaee4c567d8631bbf34d8048ddf3e137f5951013b60be305880767add1c4657978fcdb63ac0f306e4ab5c025ff29742b2b820d528b2fd9bb0817dc816af3873a47d5791d11bd963043e0768f", 0x5, 0x0, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000027c0)={0x4, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x144, 0x0, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x74b1}]}, @TIPC_NLA_LINK={0x94, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xb}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6a93}]}]}, @TIPC_NLA_BEARER={0x24, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'tunl0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x144}}, 0x40) syz_emit_ethernet(0x3a, &(0x7f0000000180)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @multicast1}, {0x0, 0xe23, 0x18, 0x0, @wg=@data={0x4, 0x0, 0x6}}}}}}, 0x0) 1.073099828s ago: executing program 1 (id=8995): syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="0380c2000000bbbbbbabbbbb0800380000000000019078ac1e0000ac1414aa030490781200183f0d6fc75cf320250000000000000000010000e0000001ffffffff00186371ae"], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, r1, 0x2, 0x2000, 0x100002, {}, [@NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0xffff}, @NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0x7f}]}, 0x24}, 0x1, 0x0, 0x0, 0x20085}, 0x2000c000) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) shutdown(r4, 0x1) connect$bt_l2cap(r4, 0x0, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}}, 0x28}, 0x1, 0x6c00}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0xffffffffffffff62, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 835.035384ms ago: executing program 4 (id=8996): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) close(0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x80) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000f00)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000c80)=@allocspi={0x23c, 0x16, 0x109, 0x70bd27, 0x25dfdbfc, {{{@in6=@local, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4e20, 0xf000, 0x4e21, 0x9, 0x2, 0x100, 0x76065271305f2270, 0x33}, {@in=@dev={0xac, 0x14, 0x14, 0x36}, 0x4d5, 0x3c}, @in=@private=0xa010100, {0x6, 0x99, 0x10000, 0x0, 0xf5ac, 0x2, 0x7, 0xb}, {0x7, 0x9, 0xffffffff}, {0x8}, 0x70bd2c, 0x0, 0xa, 0x1, 0x80, 0xc4}, 0x3, 0x3}, [@coaddr={0x14, 0xe, @in=@loopback}, @algo_aead={0x4c, 0x12, {{'aegis256-aesni\x00'}}}, @policy={0xac, 0x7, {{@in6=@mcast1, @in=@dev={0xac, 0x14, 0x14, 0x19}, 0x4e21, 0x5, 0x4e23, 0x1000, 0x2, 0x40, 0x80, 0x73}, {0x8000000000000000, 0x5, 0x480c, 0x704d4cd3, 0x7fff, 0xe, 0x6, 0x6}, {0x6, 0x6, 0x0, 0xfa8}, 0x80000000, 0x6e6bbb, 0x0, 0x0, 0x3, 0x1}}, @sec_ctx={0x37, 0x8, {0x33, 0x8, 0x1, 0xc, 0x2b, "6aa7fbc685013270209e6f2260ab80dd9fc9485c2db5eea11492ec7cf68e0454c10cb03b5b93ca53af9f5c"}}]}, 0x23c}, 0x1, 0x0, 0x0, 0x40800}, 0x20044010) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 539.482819ms ago: executing program 3 (id=8997): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000000)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000740)={0x0, 0x3f1, &(0x7f0000001480)=[{&(0x7f0000000040)="05", 0x1}], 0x4a, &(0x7f0000000340)=[@sndrcv={0x30, 0x84, 0x1, {0x2, 0x0, 0x41, 0x8, 0x2, 0xffffffff, 0x3, 0x7fffffff}}], 0x30}, 0x0) 532.016914ms ago: executing program 4 (id=8998): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000080)=0x8, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0xe22}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000280)='cgsoup@\xc8`>\x82E\b-\xc81\xbcO\x93YT\xb4\x87\xfd\xec\xf6\xf8m\x03\x14\x1d\xfb\xb6\x9f\xc5\xb2um\xf5\xd6r\x85\x8eB\xb6\xd4\xe1k\x92\x03x\xf8\xc2\x14\xee\x9c\xbc\xa1i\x87\x93\"\x1bF\'VkH\xf2N@\xff\x12\r\xedr\xaf\x92,!\x9c\x98\xf5\xdc-\xc3\t>\xbb\xfa\xb6\xbe\xc0\xbc\xadv\x8e0\xae\xa3\xd2\xa6\xd3\x12\x97\xe9\xe7\xe8\xa8\xecB}\x1a\xd7\xb5&\xa7\xe2Y\xc5\xee\xf0I\x8e\xc4\xb9\x92s\xec6\x92\x9e\x9c\x8cp6\xbc\x88RIF\xfcW\xaa\xd1I\xff\xdf\xb5\r\x0e\x1e\f]\xb8y\xf2\x92CO;4<\xc2\xdd%s\xb7>\xeb}SG\x17\x85QT#\xfa\xc1\xf1\x85\xdd\x82[\x86\xc6\x95\tT\xe4\xffN\rg\xc0E\xfax\xc9\x06j\x98\xc3}\xe7\x1f\xeaGY\xe0\x98\x9b\xe7E\x93\x0eE\x96\x8c\xc6\xf0\xb2\x82\xfdB*\x85\xa2\xe0V}\xfc\xbb\xf6\x89?\x9c\xaa\t\xf7a\x9c\xebk\xb8\xd8\xdaq\xc9\xf7q\xda', 0x101, 0x0, 0xf, 0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000feffff0000000005000000c4000005ffff00ff95"], &(0x7f0000000040)='GPL\x00'}, 0x94) syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), r2) socket$inet6(0xa, 0x2, 0x3a) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_NL_NET_GET(r3, &(0x7f0000000700)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={0xd0, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7f}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x100000000000000}]}, @TIPC_NLA_BEARER={0x8c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @empty}}, {0x14, 0x2, @in={0x2, 0x4e20, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0x12, 0x1, @l2={'ib', 0x3a, 'ip6gretap0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x1, @mcast2, 0x3}}, {0x14, 0x2, @in={0x2, 0x4e24, @broadcast}}}}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x24000090}, 0x8000) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000980)={0x6}, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="18000000520001dd000000000400000002"], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001940)=ANY=[@ANYBLOB="40010000", @ANYRES16=r6, @ANYBLOB="01000000000004000000010000002400030000000000000000000000000000000000000000000000000000000000000000001400020077673100000000000000000000000000f4000880"], 0x140}, 0x1, 0x0, 0x0, 0x8000}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x7, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3ff}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}]}, 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x32, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1400}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r8, 0x68, &(0x7f0000000200)}, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newlink={0x40, 0x10, 0xd07, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x40345, 0x6c101}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0xf}, @IFLA_GRE_LINK={0x8}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x48010}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x4c, r6, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40090}, 0x44000) 470.185336ms ago: executing program 1 (id=8999): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0xc080) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x28, r1, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_USE_MFP={0x8, 0x42, 0x2}, @NL80211_ATTR_SSID={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0xc00) pipe(&(0x7f00000001c0)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r4, &(0x7f0000000400), 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000003880)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000038c0)=@newlink={0x3c, 0x10, 0x801, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x0, 0x1}]}}]}]}, 0x3c}}, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) write$cgroup_pid(r5, &(0x7f0000000000), 0xffffff98) splice(r3, 0x0, r5, 0x0, 0x80, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b000000050000000004000009"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x2000000, 0xd, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b9", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) socket(0x400000000010, 0x3, 0x0) unshare(0x8000400) r8 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r8, 0x29, 0x50, 0x0, &(0x7f0000000100)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 338.359029ms ago: executing program 4 (id=9000): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f00000000c0)=0xa, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000280)={0x5, 0x2, 0xff, 0x0, 0x4, 0x9, 0x8, 0x8, 0x1, 0x0, 0xff, 0x5, 0x6, 0x7}, 0xe) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x1}}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000300)=[{0x20, 0x20, 0x4, 0xfffff000}, {0x6, 0x4, 0x0, 0x8000}]}, 0x10) bind$tipc(r3, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x6}}, 0x10) bind$tipc(r2, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) close(0x3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="10031200e0ff020002004788aa96a13bb100001100007fca1a00", 0x1000a, 0x0, &(0x7f0000000140)={0x11, 0x0, r5}, 0x14) 229.418606ms ago: executing program 2 (id=9001): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYRES32=0x0, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000000180)=[{0x3, 0x0, {0x0, 0x1, 0x6}, {0x0, 0xf0, 0x1}, 0x0, 0x1}], 0x20) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b", 0x44}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 130.489336ms ago: executing program 4 (id=9002): r0 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r0, 0x29, 0x5, &(0x7f0000000040)=0xfffffff9, 0x4) syz_emit_ethernet(0x4e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fe800000000000000000000000000025fe8000000000000000000000000000aaff"], 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000140)=0x6568, 0x4) recvmmsg(r0, &(0x7f0000001c80)=[{{0x0, 0x0, 0x0, 0x1200, &(0x7f0000000700)}, 0x6}], 0x1, 0x40010002, 0x0) 99.312792ms ago: executing program 2 (id=9003): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'netdevsim0\x00', 0xc1fa}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f0000000100)) r2 = socket$kcm(0x2, 0xa, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r4 = openat$cgroup_devices(r3, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r4, &(0x7f0000000140)=ANY=[@ANYBLOB='b 7:', @ANYRESDEC], 0xd) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000005400)=ANY=[@ANYBLOB="000086dd0000110000000000000060fd97000f982c00fe8000000000000000000000000000aaff02000000000000000000000000000129"], 0xfce) 0s ago: executing program 4 (id=9004): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$NILFS_IOCTL_GET_BDESCS(r0, 0xc0186e87, &(0x7f0000000140)={&(0x7f00000000c0)=[{0x9, 0x80, 0xfa3, 0x3ff, 0x5}, {0x40, 0x88ec, 0xf, 0x0, 0xffffffff}], 0x2, 0x28, 0x1, 0x7}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000fbdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="050033"], 0x60}, 0x1, 0x0, 0x0, 0x4000001}, 0x20040000) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r2, 0x0, 0x70bd25, 0x69a7, {{}, {@void, @val={0xc, 0x99, {0x9, 0x4}}}}, [@NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x9e}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000041}, 0x4004) kernel console output (not intermixed with test programs): c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 821.941442][T29843] RSP: 002b:00007fce7bfce028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 821.941465][T29843] RAX: ffffffffffffffda RBX: 00007fce7b426090 RCX: 00007fce7b19de99 [ 821.941480][T29843] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000004 [ 821.941494][T29843] RBP: 00007fce7bfce090 R08: 0000000000000000 R09: 0000000000000000 [ 821.941507][T29843] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 821.941519][T29843] R13: 00007fce7b426128 R14: 00007fce7b426090 R15: 00007ffe1a840cd8 [ 821.941552][T29843] [ 821.968503][T29847] FAULT_INJECTION: forcing a failure. [ 821.968503][T29847] name failslab, interval 1, probability 0, space 0, times 0 [ 822.152741][T29847] CPU: 1 UID: 0 PID: 29847 Comm: syz.1.8418 Not tainted syzkaller #0 PREEMPT(full) [ 822.152772][T29847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 822.152785][T29847] Call Trace: [ 822.152794][T29847] [ 822.152803][T29847] dump_stack_lvl+0xe8/0x150 [ 822.152843][T29847] should_fail_ex+0x40c/0x560 [ 822.152873][T29847] should_failslab+0xa8/0x100 [ 822.152905][T29847] __kmalloc_noprof+0xfe/0x720 [ 822.152931][T29847] ? is_bpf_text_address+0x26/0x2b0 [ 822.152961][T29847] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 822.152990][T29847] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 822.153027][T29847] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 822.153065][T29847] genl_family_rcv_msg_doit+0xda/0x340 [ 822.153102][T29847] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 822.153138][T29847] ? apparmor_capable+0x126/0x170 [ 822.153167][T29847] ? bpf_lsm_capable+0x9/0x20 [ 822.153192][T29847] ? security_capable+0x7e/0x2c0 [ 822.153230][T29847] genl_rcv_msg+0x614/0x7a0 [ 822.153266][T29847] ? __pfx_genl_rcv_msg+0x10/0x10 [ 822.153291][T29847] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 822.153320][T29847] ? __pfx_nl80211_connect+0x10/0x10 [ 822.153341][T29847] ? __pfx_nl80211_post_doit+0x10/0x10 [ 822.153385][T29847] netlink_rcv_skb+0x226/0x4a0 [ 822.153410][T29847] ? __pfx_genl_rcv_msg+0x10/0x10 [ 822.153440][T29847] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 822.153480][T29847] ? down_read+0x2be/0x330 [ 822.153511][T29847] genl_rcv+0x28/0x40 [ 822.153536][T29847] netlink_unicast+0x7bb/0x940 [ 822.153581][T29847] netlink_sendmsg+0x813/0xb40 [ 822.153616][T29847] ? __pfx_netlink_sendmsg+0x10/0x10 [ 822.153654][T29847] ? aa_sock_msg_perm+0xf1/0x1b0 [ 822.153682][T29847] ? __pfx_netlink_sendmsg+0x10/0x10 [ 822.153704][T29847] sock_sendmsg_nosec+0x13a/0x180 [ 822.153736][T29847] ____sys_sendmsg+0x54e/0x850 [ 822.153769][T29847] ? __pfx_____sys_sendmsg+0x10/0x10 [ 822.153802][T29847] ? import_iovec+0x73/0xa0 [ 822.153837][T29847] ___sys_sendmsg+0x2a5/0x360 [ 822.153859][T29847] ? __lock_acquire+0x683/0x2cf0 [ 822.153893][T29847] ? __pfx____sys_sendmsg+0x10/0x10 [ 822.153955][T29847] ? __fget_files+0x2a/0x420 [ 822.153981][T29847] ? __fget_files+0x3a2/0x420 [ 822.154020][T29847] __x64_sys_sendmsg+0x1b1/0x290 [ 822.154046][T29847] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 822.154089][T29847] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 822.154112][T29847] do_syscall_64+0x174/0x580 [ 822.154133][T29847] ? trace_irq_disable+0x3b/0x140 [ 822.154159][T29847] ? clear_bhb_loop+0x40/0x90 [ 822.154183][T29847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 822.154204][T29847] RIP: 0033:0x7f920859de99 [ 822.154225][T29847] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 822.154244][T29847] RSP: 002b:00007f920946a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 822.154267][T29847] RAX: ffffffffffffffda RBX: 00007f9208826090 RCX: 00007f920859de99 [ 822.154282][T29847] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 822.154295][T29847] RBP: 00007f920946a090 R08: 0000000000000000 R09: 0000000000000000 [ 822.154308][T29847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 822.154320][T29847] R13: 00007f9208826128 R14: 00007f9208826090 R15: 00007ffc9cbf6178 [ 822.154355][T29847] [ 822.779961][T29852] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8419'. [ 823.179352][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 823.222160][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 823.272914][T29852] netlink: 56 bytes leftover after parsing attributes in process `syz.2.8419'. [ 823.497651][T29874] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8426'. [ 823.500206][T29870] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8425'. [ 823.510921][T25709] Bluetooth: hci0: command tx timeout [ 823.548307][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 823.564259][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 823.568809][T29876] netlink: 'syz.4.8425': attribute type 13 has an invalid length. [ 823.586237][T29877] netlink: 'syz.1.8426': attribute type 13 has an invalid length. [ 823.601695][T29876] netlink: 'syz.4.8425': attribute type 17 has an invalid length. [ 823.609723][T29877] netlink: 'syz.1.8426': attribute type 17 has an invalid length. [ 823.967704][T29877] 8021q: adding VLAN 0 to HW filter on device bond0 [ 823.998266][T29889] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8429'. [ 824.003391][T29877] 8021q: adding VLAN 0 to HW filter on device team0 [ 824.024910][T29877] 8021q: adding VLAN 0 to HW filter on device 60ªX¹¦À [ 824.102399][T29877] batman_adv: 60ªX¹¦À: Interface activated: batadv_slave_0 [ 824.128254][T29877] batman_adv: 60ªX¹¦À: Interface activated: batadv_slave_1 [ 824.220776][T29877] veth1_vlan: left promiscuous mode [ 824.270059][T29877] veth0_vlan: left promiscuous mode [ 824.291783][T29877] veth0_vlan: entered promiscuous mode [ 824.319807][T29877] veth1_vlan: entered promiscuous mode [ 824.403870][T29877] veth1_macvtap: left promiscuous mode [ 824.460710][T29877] veth0_macvtap: left promiscuous mode [ 824.472555][T29877] veth0_macvtap: entered promiscuous mode [ 824.517378][T29877] veth1_macvtap: entered promiscuous mode [ 824.540595][T29877] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 824.552382][T29896] netlink: 'syz.2.8424': attribute type 4 has an invalid length. [ 824.564756][T29877] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 824.591464][T29877] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 824.615636][T29877] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 824.635402][T29897] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8424'. [ 824.658131][T29897] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8424'. [ 824.669803][T29877] 8021q: adding VLAN 0 to HW filter on device bond1 [ 824.679918][T29897] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8424'. [ 824.734384][T29877] 8021q: adding VLAN 0 to HW filter on device bond2 [ 824.748789][T29877] 8021q: adding VLAN 0 to HW filter on device bond3 [ 824.796498][T29877] 8021q: adding VLAN 0 to HW filter on device bond4 [ 824.806795][T29877] 8021q: adding VLAN 0 to HW filter on device bond5 [ 824.816649][T29877] 8021q: adding VLAN 0 to HW filter on device bond6 [ 824.838633][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 824.845842][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 824.861562][T29805] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 824.893960][T29870] bridge0: port 2(bridge_slave_1) entered disabled state [ 824.914704][T23553] lo speed is unknown, defaulting to 1000 [ 824.925220][T23553] syz2: Port: 1 Link ACTIVE [ 824.954346][T18346] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 824.981234][T18346] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 825.023437][T29899] FAULT_INJECTION: forcing a failure. [ 825.023437][T29899] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 825.057574][T29899] CPU: 1 UID: 0 PID: 29899 Comm: syz.1.8430 Not tainted syzkaller #0 PREEMPT(full) [ 825.057605][T29899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 825.057617][T29899] Call Trace: [ 825.057626][T29899] [ 825.057636][T29899] dump_stack_lvl+0xe8/0x150 [ 825.057674][T29899] should_fail_ex+0x40c/0x560 [ 825.057704][T29899] _copy_from_user+0x2d/0xb0 [ 825.057736][T29899] __sys_bpf+0x2e7/0xd90 [ 825.057769][T29899] ? __pfx___sys_bpf+0x10/0x10 [ 825.057806][T29899] ? __fget_files+0x2a/0x420 [ 825.057852][T29899] ? ksys_write+0x242/0x270 [ 825.057886][T29899] ? __pfx_ksys_write+0x10/0x10 [ 825.057922][T29899] __x64_sys_bpf+0xba/0xd0 [ 825.057947][T29899] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 825.057970][T29899] do_syscall_64+0x174/0x580 [ 825.057993][T29899] ? trace_irq_disable+0x3b/0x140 [ 825.058019][T29899] ? clear_bhb_loop+0x40/0x90 [ 825.058052][T29899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 825.058073][T29899] RIP: 0033:0x7f920859de99 [ 825.058095][T29899] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 825.058113][T29899] RSP: 002b:00007f920948b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 825.058137][T29899] RAX: ffffffffffffffda RBX: 00007f9208825fa0 RCX: 00007f920859de99 [ 825.058152][T29899] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 825.058165][T29899] RBP: 00007f920948b090 R08: 0000000000000000 R09: 0000000000000000 [ 825.058178][T29899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 825.058191][T29899] R13: 00007f9208826038 R14: 00007f9208825fa0 R15: 00007ffc9cbf6178 [ 825.058225][T29899] [ 825.248043][T29901] FAULT_INJECTION: forcing a failure. [ 825.248043][T29901] name failslab, interval 1, probability 0, space 0, times 0 [ 825.261719][T29901] CPU: 0 UID: 0 PID: 29901 Comm: syz.0.8432 Not tainted syzkaller #0 PREEMPT(full) [ 825.261748][T29901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 825.261760][T29901] Call Trace: [ 825.261768][T29901] [ 825.261778][T29901] dump_stack_lvl+0xe8/0x150 [ 825.261814][T29901] should_fail_ex+0x40c/0x560 [ 825.261845][T29901] should_failslab+0xa8/0x100 [ 825.261876][T29901] __kmalloc_noprof+0xfe/0x720 [ 825.261903][T29901] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 825.261932][T29901] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 825.261969][T29901] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 825.262007][T29901] genl_family_rcv_msg_doit+0xda/0x340 [ 825.262042][T29901] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 825.262079][T29901] ? apparmor_capable+0x126/0x170 [ 825.262108][T29901] ? bpf_lsm_capable+0x9/0x20 [ 825.262133][T29901] ? security_capable+0x7e/0x2c0 [ 825.262175][T29901] genl_rcv_msg+0x614/0x7a0 [ 825.262210][T29901] ? __pfx_genl_rcv_msg+0x10/0x10 [ 825.262236][T29901] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 825.262263][T29901] ? __pfx_nl80211_join_mesh+0x10/0x10 [ 825.262283][T29901] ? __pfx_nl80211_post_doit+0x10/0x10 [ 825.262312][T29901] ? __pfx_ref_tracker_free+0x10/0x10 [ 825.262351][T29901] netlink_rcv_skb+0x226/0x4a0 [ 825.262375][T29901] ? __pfx_genl_rcv_msg+0x10/0x10 [ 825.262404][T29901] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 825.262445][T29901] ? down_read+0x2be/0x330 [ 825.262475][T29901] genl_rcv+0x28/0x40 [ 825.262501][T29901] netlink_unicast+0x7bb/0x940 [ 825.262554][T29901] netlink_sendmsg+0x813/0xb40 [ 825.262587][T29901] ? __pfx_netlink_sendmsg+0x10/0x10 [ 825.262615][T29901] ? aa_sock_msg_perm+0xf1/0x1b0 [ 825.262643][T29901] ? __pfx_netlink_sendmsg+0x10/0x10 [ 825.262664][T29901] sock_sendmsg_nosec+0x13a/0x180 [ 825.262695][T29901] ____sys_sendmsg+0x54e/0x850 [ 825.262724][T29901] ? __pfx_____sys_sendmsg+0x10/0x10 [ 825.262756][T29901] ? import_iovec+0x73/0xa0 [ 825.262790][T29901] ___sys_sendmsg+0x2a5/0x360 [ 825.262811][T29901] ? __lock_acquire+0x683/0x2cf0 [ 825.262844][T29901] ? __pfx____sys_sendmsg+0x10/0x10 [ 825.262903][T29901] ? __fget_files+0x2a/0x420 [ 825.262927][T29901] ? __fget_files+0x3a2/0x420 [ 825.262965][T29901] __x64_sys_sendmsg+0x1b1/0x290 [ 825.262991][T29901] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 825.263034][T29901] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 825.263056][T29901] do_syscall_64+0x174/0x580 [ 825.263077][T29901] ? trace_irq_disable+0x3b/0x140 [ 825.263102][T29901] ? clear_bhb_loop+0x40/0x90 [ 825.263129][T29901] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 825.263150][T29901] RIP: 0033:0x7f846339de99 [ 825.263171][T29901] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 825.263189][T29901] RSP: 002b:00007f8464208028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 825.263212][T29901] RAX: ffffffffffffffda RBX: 00007f8463625fa0 RCX: 00007f846339de99 [ 825.263227][T29901] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000003 [ 825.263241][T29901] RBP: 00007f8464208090 R08: 0000000000000000 R09: 0000000000000000 [ 825.263255][T29901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 825.263268][T29901] R13: 00007f8463626038 R14: 00007f8463625fa0 R15: 00007ffe0878e4d8 [ 825.263303][T29901] [ 825.597129][T29805] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 825.639547][T29904] netlink: 120 bytes leftover after parsing attributes in process `syz.2.8433'. [ 825.640229][T25709] Bluetooth: hci0: command tx timeout [ 825.697753][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 825.716345][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 825.883858][T18346] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 826.023963][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 826.046359][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 826.077764][T18346] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 826.107855][T29830] lo speed is unknown, defaulting to 1000 [ 826.129898][ T79] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 826.142174][ T79] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 826.641249][T29814] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 826.649971][T29938] IPVS: Scheduler module ip_vs_sip not found [ 826.914171][ T12] vlan3: left allmulticast mode [ 826.932893][ T12] geneve0: left allmulticast mode [ 826.939754][ T12] vlan3: left promiscuous mode [ 826.961476][ T12] geneve0: left promiscuous mode [ 826.978753][ T12] bridge0: port 1(vlan3) entered disabled state [ 827.020590][ T12] pim6reg: left allmulticast mode [ 827.661767][T25709] Bluetooth: hci0: command tx timeout [ 828.026138][ T12] bond0 (unregistering): Released all slaves [ 828.054946][T29950] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8444'. [ 828.078902][ T5283] 8021q: adding VLAN 0 to HW filter on device eth1 [ 828.185794][T29977] netlink: 120 bytes leftover after parsing attributes in process `syz.4.8448'. [ 828.300302][ T12] tipc: Left network mode [ 828.677499][T29988] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8451'. [ 828.992872][T30004] netlink: 156 bytes leftover after parsing attributes in process `syz.0.8455'. [ 829.046804][T30007] netlink: 3 bytes leftover after parsing attributes in process `syz.0.8455'. [ 829.068921][T23546] IPVS: starting estimator thread 0... [ 829.092478][ T12] hsr_slave_0: left promiscuous mode [ 829.107697][ T12] hsr_slave_1: left promiscuous mode [ 829.155598][ T12] dummy0: left allmulticast mode [ 829.163283][ T12] veth1_macvtap: left promiscuous mode [ 829.169047][ T12] veth0_macvtap: left promiscuous mode [ 829.178228][T30008] IPVS: using max 23 ests per chain, 55200 per kthread [ 829.200086][ T12] veth1_vlan: left promiscuous mode [ 829.206022][ T12] veth0_vlan: left promiscuous mode [ 829.741867][T25709] Bluetooth: hci0: command tx timeout [ 829.777799][T30022] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8457'. [ 829.948425][T29830] bridge0: port 1(bridge_slave_0) entered blocking state [ 829.960584][T29830] bridge0: port 1(bridge_slave_0) entered disabled state [ 829.970195][T29830] bridge_slave_0: entered allmulticast mode [ 829.978824][T29830] bridge_slave_0: entered promiscuous mode [ 829.992544][T30007] 0ªX¹¦À: renamed from batadv0 (while UP) [ 830.016357][T30007] 0ªX¹¦À: entered allmulticast mode [ 830.037091][T30007] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 830.056881][ T5283] 8021q: adding VLAN 0 to HW filter on device eth2 [ 830.074622][T29830] bridge0: port 2(bridge_slave_1) entered blocking state [ 830.083064][T29830] bridge0: port 2(bridge_slave_1) entered disabled state [ 830.090683][T29830] bridge_slave_1: entered allmulticast mode [ 830.105022][T29830] bridge_slave_1: entered promiscuous mode [ 830.221142][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 830.265249][T29830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 830.307493][T29830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 830.365693][T30031] netlink: 120 bytes leftover after parsing attributes in process `syz.4.8460'. [ 830.563796][T29830] team0: Port device team_slave_0 added [ 830.613857][T29830] team0: Port device team_slave_1 added [ 830.667042][T30041] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8463'. [ 830.813966][T29830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 830.855095][T29830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 830.993024][T29830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 831.018740][T29830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 831.030913][T29830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 831.112613][T29830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 831.208940][T30062] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8467'. [ 831.267650][T30062] netlink: 'syz.2.8467': attribute type 13 has an invalid length. [ 831.286297][T30066] bond7: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 831.313102][T30062] netlink: 'syz.2.8467': attribute type 17 has an invalid length. [ 831.329532][T30066] bond7: (slave lo): Enslaving as an active interface with an up link [ 831.366446][T30066] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 831.383262][T23546] lo speed is unknown, defaulting to 1000 [ 831.698389][T30086] FAULT_INJECTION: forcing a failure. [ 831.698389][T30086] name failslab, interval 1, probability 0, space 0, times 0 [ 831.741894][T30086] CPU: 0 UID: 0 PID: 30086 Comm: syz.1.8469 Not tainted syzkaller #0 PREEMPT(full) [ 831.741924][T30086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 831.741936][T30086] Call Trace: [ 831.741945][T30086] [ 831.741955][T30086] dump_stack_lvl+0xe8/0x150 [ 831.741991][T30086] should_fail_ex+0x40c/0x560 [ 831.742021][T30086] should_failslab+0xa8/0x100 [ 831.742054][T30086] __kmalloc_noprof+0xfe/0x720 [ 831.742080][T30086] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 831.742110][T30086] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 831.742146][T30086] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 831.742184][T30086] genl_family_rcv_msg_doit+0xda/0x340 [ 831.742221][T30086] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 831.742259][T30086] ? apparmor_capable+0x126/0x170 [ 831.742288][T30086] ? bpf_lsm_capable+0x9/0x20 [ 831.742313][T30086] ? security_capable+0x7e/0x2c0 [ 831.742352][T30086] genl_rcv_msg+0x614/0x7a0 [ 831.742387][T30086] ? __pfx_genl_rcv_msg+0x10/0x10 [ 831.742412][T30086] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 831.742439][T30086] ? __pfx_nl80211_set_wiphy+0x10/0x10 [ 831.742466][T30086] ? __pfx_nl80211_post_doit+0x10/0x10 [ 831.742503][T30086] ? __pfx_ref_tracker_free+0x10/0x10 [ 831.742542][T30086] netlink_rcv_skb+0x226/0x4a0 [ 831.742565][T30086] ? __pfx_genl_rcv_msg+0x10/0x10 [ 831.742594][T30086] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 831.742634][T30086] ? down_read+0x2be/0x330 [ 831.742664][T30086] genl_rcv+0x28/0x40 [ 831.742689][T30086] netlink_unicast+0x7bb/0x940 [ 831.742734][T30086] netlink_sendmsg+0x813/0xb40 [ 831.742768][T30086] ? __pfx_netlink_sendmsg+0x10/0x10 [ 831.742801][T30086] ? aa_sock_msg_perm+0xf1/0x1b0 [ 831.742829][T30086] ? __pfx_netlink_sendmsg+0x10/0x10 [ 831.742850][T30086] sock_sendmsg_nosec+0x13a/0x180 [ 831.742881][T30086] ____sys_sendmsg+0x54e/0x850 [ 831.742909][T30086] ? __pfx_____sys_sendmsg+0x10/0x10 [ 831.742943][T30086] ? import_iovec+0x73/0xa0 [ 831.742975][T30086] ___sys_sendmsg+0x2a5/0x360 [ 831.742996][T30086] ? __lock_acquire+0x683/0x2cf0 [ 831.743029][T30086] ? __pfx____sys_sendmsg+0x10/0x10 [ 831.743090][T30086] ? __fget_files+0x2a/0x420 [ 831.743116][T30086] ? __fget_files+0x3a2/0x420 [ 831.743154][T30086] __x64_sys_sendmsg+0x1b1/0x290 [ 831.743179][T30086] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 831.743222][T30086] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 831.743246][T30086] do_syscall_64+0x174/0x580 [ 831.743267][T30086] ? trace_irq_disable+0x3b/0x140 [ 831.743293][T30086] ? clear_bhb_loop+0x40/0x90 [ 831.743318][T30086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 831.743339][T30086] RIP: 0033:0x7f920859de99 [ 831.743359][T30086] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 831.743377][T30086] RSP: 002b:00007f920946a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 831.743400][T30086] RAX: ffffffffffffffda RBX: 00007f9208826090 RCX: 00007f920859de99 [ 831.743414][T30086] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 831.743427][T30086] RBP: 00007f920946a090 R08: 0000000000000000 R09: 0000000000000000 [ 831.743439][T30086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 831.743451][T30086] R13: 00007f9208826128 R14: 00007f9208826090 R15: 00007ffc9cbf6178 [ 831.743497][T30086] [ 832.176328][T29812] lo speed is unknown, defaulting to 1000 [ 832.186564][T29814] lo speed is unknown, defaulting to 1000 [ 832.203965][T30092] FAULT_INJECTION: forcing a failure. [ 832.203965][T30092] name failslab, interval 1, probability 0, space 0, times 0 [ 832.224890][T29830] hsr_slave_0: entered promiscuous mode [ 832.231921][T29830] hsr_slave_1: entered promiscuous mode [ 832.237341][T30092] CPU: 1 UID: 0 PID: 30092 Comm: syz.0.8471 Not tainted syzkaller #0 PREEMPT(full) [ 832.237367][T30092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 832.237379][T30092] Call Trace: [ 832.237387][T30092] [ 832.237396][T30092] dump_stack_lvl+0xe8/0x150 [ 832.237429][T30092] should_fail_ex+0x40c/0x560 [ 832.237457][T30092] should_failslab+0xa8/0x100 [ 832.237485][T30092] __kmalloc_noprof+0xfe/0x720 [ 832.237510][T30092] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 832.237538][T30092] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 832.237570][T30092] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 832.237602][T30092] genl_family_rcv_msg_doit+0xda/0x340 [ 832.237633][T30092] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 832.237665][T30092] ? apparmor_capable+0x126/0x170 [ 832.237690][T30092] ? bpf_lsm_capable+0x9/0x20 [ 832.237712][T30092] ? security_capable+0x7e/0x2c0 [ 832.237745][T30092] genl_rcv_msg+0x614/0x7a0 [ 832.237776][T30092] ? __pfx_genl_rcv_msg+0x10/0x10 [ 832.237798][T30092] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 832.237826][T30092] ? __pfx_nl80211_tx_control_port+0x10/0x10 [ 832.237848][T30092] ? __pfx_nl80211_post_doit+0x10/0x10 [ 832.237873][T30092] ? __pfx_ref_tracker_free+0x10/0x10 [ 832.237907][T30092] netlink_rcv_skb+0x226/0x4a0 [ 832.237928][T30092] ? __pfx_genl_rcv_msg+0x10/0x10 [ 832.237953][T30092] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 832.237998][T30092] ? down_read+0x2be/0x330 [ 832.238024][T30092] genl_rcv+0x28/0x40 [ 832.238046][T30092] netlink_unicast+0x7bb/0x940 [ 832.238084][T30092] netlink_sendmsg+0x813/0xb40 [ 832.238114][T30092] ? __pfx_netlink_sendmsg+0x10/0x10 [ 832.238138][T30092] ? aa_sock_msg_perm+0xf1/0x1b0 [ 832.238162][T30092] ? __pfx_netlink_sendmsg+0x10/0x10 [ 832.238181][T30092] sock_sendmsg_nosec+0x13a/0x180 [ 832.238209][T30092] ____sys_sendmsg+0x54e/0x850 [ 832.238234][T30092] ? __pfx_____sys_sendmsg+0x10/0x10 [ 832.238263][T30092] ? import_iovec+0x73/0xa0 [ 832.238293][T30092] ___sys_sendmsg+0x2a5/0x360 [ 832.238311][T30092] ? __lock_acquire+0x683/0x2cf0 [ 832.238340][T30092] ? __pfx____sys_sendmsg+0x10/0x10 [ 832.238393][T30092] ? __fget_files+0x2a/0x420 [ 832.238416][T30092] ? __fget_files+0x3a2/0x420 [ 832.238449][T30092] __x64_sys_sendmsg+0x1b1/0x290 [ 832.238471][T30092] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 832.238508][T30092] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 832.238529][T30092] do_syscall_64+0x174/0x580 [ 832.238547][T30092] ? trace_irq_disable+0x3b/0x140 [ 832.238569][T30092] ? clear_bhb_loop+0x40/0x90 [ 832.238592][T30092] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 832.238611][T30092] RIP: 0033:0x7f846339de99 [ 832.238629][T30092] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 832.238644][T30092] RSP: 002b:00007f8464208028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 832.238665][T30092] RAX: ffffffffffffffda RBX: 00007f8463625fa0 RCX: 00007f846339de99 [ 832.238679][T30092] RDX: 0000000000000800 RSI: 0000200000003700 RDI: 0000000000000003 [ 832.238690][T30092] RBP: 00007f8464208090 R08: 0000000000000000 R09: 0000000000000000 [ 832.238702][T30092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 832.238713][T30092] R13: 00007f8463626038 R14: 00007f8463625fa0 R15: 00007ffe0878e4d8 [ 832.238744][T30092] [ 832.352191][T30094] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8472'. [ 832.355055][T29830] debugfs: 'hsr0' already exists in 'hsr' [ 832.427814][T30095] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8472'. [ 832.430810][T29830] Cannot create hsr debugfs directory [ 832.610547][T30095] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8472'. [ 832.612529][T30072] bridge0: port 2(bridge_slave_1) entered disabled state [ 832.663884][ T5283] 8021q: adding VLAN 0 to HW filter on device eth3 [ 832.824749][T30103] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 832.992584][T30097] lo speed is unknown, defaulting to 1000 [ 833.724327][T30123] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 833.752975][T30123] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 833.989843][T30136] FAULT_INJECTION: forcing a failure. [ 833.989843][T30136] name failslab, interval 1, probability 0, space 0, times 0 [ 834.035855][T30136] CPU: 0 UID: 0 PID: 30136 Comm: syz.2.8480 Not tainted syzkaller #0 PREEMPT(full) [ 834.035885][T30136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 834.035898][T30136] Call Trace: [ 834.035907][T30136] [ 834.035916][T30136] dump_stack_lvl+0xe8/0x150 [ 834.035955][T30136] should_fail_ex+0x40c/0x560 [ 834.035986][T30136] should_failslab+0xa8/0x100 [ 834.036017][T30136] __kmalloc_noprof+0xfe/0x720 [ 834.036045][T30136] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 834.036073][T30136] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 834.036109][T30136] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 834.036144][T30136] genl_family_rcv_msg_doit+0xda/0x340 [ 834.036177][T30136] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 834.036210][T30136] ? apparmor_capable+0x126/0x170 [ 834.036237][T30136] ? bpf_lsm_capable+0x9/0x20 [ 834.036261][T30136] ? security_capable+0x7e/0x2c0 [ 834.036296][T30136] genl_rcv_msg+0x614/0x7a0 [ 834.036330][T30136] ? __pfx_genl_rcv_msg+0x10/0x10 [ 834.036354][T30136] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 834.036380][T30136] ? __pfx_nl80211_set_station+0x10/0x10 [ 834.036407][T30136] ? __pfx_nl80211_post_doit+0x10/0x10 [ 834.036444][T30136] ? __pfx_ref_tracker_free+0x10/0x10 [ 834.036478][T30136] netlink_rcv_skb+0x226/0x4a0 [ 834.036501][T30136] ? __pfx_genl_rcv_msg+0x10/0x10 [ 834.036529][T30136] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 834.036567][T30136] ? down_read+0x2be/0x330 [ 834.036595][T30136] genl_rcv+0x28/0x40 [ 834.036618][T30136] netlink_unicast+0x7bb/0x940 [ 834.036659][T30136] netlink_sendmsg+0x813/0xb40 [ 834.036693][T30136] ? __pfx_netlink_sendmsg+0x10/0x10 [ 834.036719][T30136] ? aa_sock_msg_perm+0xf1/0x1b0 [ 834.036745][T30136] ? __pfx_netlink_sendmsg+0x10/0x10 [ 834.036766][T30136] sock_sendmsg_nosec+0x13a/0x180 [ 834.036797][T30136] ____sys_sendmsg+0x54e/0x850 [ 834.036823][T30136] ? __pfx_____sys_sendmsg+0x10/0x10 [ 834.036855][T30136] ? import_iovec+0x73/0xa0 [ 834.036887][T30136] ___sys_sendmsg+0x2a5/0x360 [ 834.036908][T30136] ? __lock_acquire+0x683/0x2cf0 [ 834.036941][T30136] ? __pfx____sys_sendmsg+0x10/0x10 [ 834.037001][T30136] ? __fget_files+0x2a/0x420 [ 834.037027][T30136] ? __fget_files+0x3a2/0x420 [ 834.037064][T30136] __x64_sys_sendmsg+0x1b1/0x290 [ 834.037090][T30136] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 834.037131][T30136] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 834.037155][T30136] do_syscall_64+0x174/0x580 [ 834.037176][T30136] ? trace_irq_disable+0x3b/0x140 [ 834.037201][T30136] ? clear_bhb_loop+0x40/0x90 [ 834.037228][T30136] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 834.037249][T30136] RIP: 0033:0x7fce7b19de99 [ 834.037269][T30136] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 834.037286][T30136] RSP: 002b:00007fce7bfef028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 834.037314][T30136] RAX: ffffffffffffffda RBX: 00007fce7b425fa0 RCX: 00007fce7b19de99 [ 834.037329][T30136] RDX: 0000000004000010 RSI: 0000200000001080 RDI: 0000000000000003 [ 834.037343][T30136] RBP: 00007fce7bfef090 R08: 0000000000000000 R09: 0000000000000000 [ 834.037355][T30136] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 834.037368][T30136] R13: 00007fce7b426038 R14: 00007fce7b425fa0 R15: 00007ffe1a840cd8 [ 834.037402][T30136] [ 834.864249][T30161] FAULT_INJECTION: forcing a failure. [ 834.864249][T30161] name failslab, interval 1, probability 0, space 0, times 0 [ 834.885562][T30161] CPU: 0 UID: 0 PID: 30161 Comm: syz.2.8483 Not tainted syzkaller #0 PREEMPT(full) [ 834.885594][T30161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 834.885606][T30161] Call Trace: [ 834.885615][T30161] [ 834.885624][T30161] dump_stack_lvl+0xe8/0x150 [ 834.885663][T30161] should_fail_ex+0x40c/0x560 [ 834.885693][T30161] should_failslab+0xa8/0x100 [ 834.885725][T30161] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 834.885751][T30161] ? skb_clone+0x212/0x3a0 [ 834.885771][T30161] ? skb_clone+0x212/0x3a0 [ 834.885801][T30161] skb_clone+0x212/0x3a0 [ 834.885826][T30161] __netlink_deliver_tap+0x413/0x860 [ 834.885861][T30161] ? netlink_deliver_tap+0x2e/0x1b0 [ 834.885885][T30161] netlink_deliver_tap+0x19c/0x1b0 [ 834.885909][T30161] netlink_unicast+0x77f/0x940 [ 834.885957][T30161] netlink_sendmsg+0x813/0xb40 [ 834.885992][T30161] ? __pfx_netlink_sendmsg+0x10/0x10 [ 834.886020][T30161] ? aa_sock_msg_perm+0xf1/0x1b0 [ 834.886048][T30161] ? __pfx_netlink_sendmsg+0x10/0x10 [ 834.886069][T30161] sock_sendmsg_nosec+0x13a/0x180 [ 834.886100][T30161] ____sys_sendmsg+0x54e/0x850 [ 834.886128][T30161] ? __pfx_____sys_sendmsg+0x10/0x10 [ 834.886160][T30161] ? import_iovec+0x73/0xa0 [ 834.886194][T30161] ___sys_sendmsg+0x2a5/0x360 [ 834.886214][T30161] ? __lock_acquire+0x683/0x2cf0 [ 834.886247][T30161] ? __pfx____sys_sendmsg+0x10/0x10 [ 834.886309][T30161] ? __fget_files+0x2a/0x420 [ 834.886334][T30161] ? __fget_files+0x3a2/0x420 [ 834.886373][T30161] __x64_sys_sendmsg+0x1b1/0x290 [ 834.886398][T30161] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 834.886450][T30161] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 834.886474][T30161] do_syscall_64+0x174/0x580 [ 834.886497][T30161] ? trace_irq_disable+0x3b/0x140 [ 834.886524][T30161] ? clear_bhb_loop+0x40/0x90 [ 834.886550][T30161] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 834.886572][T30161] RIP: 0033:0x7fce7b19de99 [ 834.886592][T30161] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 834.886610][T30161] RSP: 002b:00007fce7bfef028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 834.886634][T30161] RAX: ffffffffffffffda RBX: 00007fce7b425fa0 RCX: 00007fce7b19de99 [ 834.886649][T30161] RDX: 0000000020009084 RSI: 0000200000000280 RDI: 0000000000000003 [ 834.886664][T30161] RBP: 00007fce7bfef090 R08: 0000000000000000 R09: 0000000000000000 [ 834.886677][T30161] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 834.886690][T30161] R13: 00007fce7b426038 R14: 00007fce7b425fa0 R15: 00007ffe1a840cd8 [ 834.886725][T30161] [ 835.272307][T30160] __nla_validate_parse: 1 callbacks suppressed [ 835.272347][T30160] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8482'. [ 835.605666][T30163] bond8: entered promiscuous mode [ 835.629618][T30163] bond8: entered allmulticast mode [ 835.654332][T30163] 8021q: adding VLAN 0 to HW filter on device bond8 [ 836.119705][T30196] syzkaller0: entered promiscuous mode [ 836.148092][T30196] syzkaller0: entered allmulticast mode [ 836.860025][T30223] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8492'. [ 836.954280][T30218] bridge1: entered promiscuous mode [ 837.001693][T30218] bridge1: entered allmulticast mode [ 837.076116][T30232] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8494'. [ 837.132992][T30233] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8494'. [ 837.172556][T30233] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8494'. [ 837.199814][T29830] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 837.249304][T29830] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 837.294765][T29830] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 837.343550][T29830] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 837.374849][T29830] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 837.409354][T29830] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 837.520116][T30232] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8494'. [ 837.522543][T30233] lo speed is unknown, defaulting to 1000 [ 837.541293][T29830] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 837.611914][T29830] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 837.791681][T30240] lo speed is unknown, defaulting to 1000 [ 837.962178][T30250] lo speed is unknown, defaulting to 1000 [ 838.307617][T30268] netlink: 92 bytes leftover after parsing attributes in process `syz.1.8498'. [ 838.806534][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 840.568583][T29830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 840.637991][T29830] 8021q: adding VLAN 0 to HW filter on device team0 [ 840.678972][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 840.686208][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 840.773715][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 840.780977][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 840.796854][T25709] block nbd1: Receive control failed (result -32) [ 840.803816][ T5632] block nbd1: Receive control failed (result -32) [ 841.111216][T30332] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8507'. [ 841.147234][T30332] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8507'. [ 841.159560][T30337] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 841.192335][T30332] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8507'. [ 841.298458][T30332] lo speed is unknown, defaulting to 1000 [ 841.368331][T30350] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8507'. [ 841.615751][T30358] FAULT_INJECTION: forcing a failure. [ 841.615751][T30358] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 841.634048][T30358] CPU: 0 UID: 0 PID: 30358 Comm: syz.2.8513 Not tainted syzkaller #0 PREEMPT(full) [ 841.634080][T30358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 841.634093][T30358] Call Trace: [ 841.634101][T30358] [ 841.634110][T30358] dump_stack_lvl+0xe8/0x150 [ 841.634147][T30358] should_fail_ex+0x40c/0x560 [ 841.634177][T30358] _copy_from_user+0x2d/0xb0 [ 841.634208][T30358] wext_handle_ioctl+0xc7/0x1d0 [ 841.634343][T30358] ? __pfx_wext_handle_ioctl+0x10/0x10 [ 841.634370][T30358] ? hook_file_ioctl+0x1f0/0x5f0 [ 841.634417][T30358] sock_ioctl+0x159/0x7e0 [ 841.634445][T30358] ? __pfx_sock_ioctl+0x10/0x10 [ 841.634469][T30358] ? __fget_files+0x2a/0x420 [ 841.634495][T30358] ? __fget_files+0x3a2/0x420 [ 841.634523][T30358] ? __fget_files+0x2a/0x420 [ 841.634550][T30358] ? bpf_lsm_file_ioctl+0x9/0x20 [ 841.634573][T30358] ? __pfx_sock_ioctl+0x10/0x10 [ 841.634597][T30358] __se_sys_ioctl+0xfc/0x170 [ 841.634617][T30358] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 841.634641][T30358] do_syscall_64+0x174/0x580 [ 841.634662][T30358] ? trace_irq_disable+0x3b/0x140 [ 841.634686][T30358] ? clear_bhb_loop+0x40/0x90 [ 841.634711][T30358] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 841.634732][T30358] RIP: 0033:0x7fce7b19de99 [ 841.634752][T30358] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 841.634769][T30358] RSP: 002b:00007fce7bfef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 841.634815][T30358] RAX: ffffffffffffffda RBX: 00007fce7b425fa0 RCX: 00007fce7b19de99 [ 841.634831][T30358] RDX: 0000200000000040 RSI: 0000000000008b1b RDI: 0000000000000004 [ 841.634846][T30358] RBP: 00007fce7bfef090 R08: 0000000000000000 R09: 0000000000000000 [ 841.634858][T30358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 841.634870][T30358] R13: 00007fce7b426038 R14: 00007fce7b425fa0 R15: 00007ffe1a840cd8 [ 841.634903][T30358] [ 842.155915][T30368] netlink: 766 bytes leftover after parsing attributes in process `syz.2.8517'. [ 842.367893][T29830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 842.586883][T29830] veth0_vlan: entered promiscuous mode [ 842.621871][T29830] veth1_vlan: entered promiscuous mode [ 842.770249][T29830] veth0_macvtap: entered promiscuous mode [ 842.778731][T30396] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8522'. [ 842.795142][T29830] veth1_macvtap: entered promiscuous mode [ 842.811555][T30396] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8522'. [ 842.823490][T30396] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8522'. [ 842.841747][T30394] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8523'. [ 842.874691][T29830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 842.886710][T30398] netlink: 'syz.4.8524': attribute type 1 has an invalid length. [ 842.949411][T30398] 8021q: adding VLAN 0 to HW filter on device bond1 [ 842.965407][T29830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 843.003043][T30398] netlink: 220 bytes leftover after parsing attributes in process `syz.4.8524'. [ 843.054543][T30396] lo speed is unknown, defaulting to 1000 [ 843.082473][ T158] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 843.107763][ T158] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 843.140277][ T158] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 843.229835][ T158] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 843.535353][ T79] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 843.576640][ T79] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 843.722747][T18347] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 843.748683][T18347] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 843.868262][T30430] sock: sock_timestamping_bind_phc: sock not bind to device [ 844.825911][T30460] syzkaller0: entered promiscuous mode [ 844.832235][T30460] syzkaller0: entered allmulticast mode [ 845.066767][T30468] FAULT_INJECTION: forcing a failure. [ 845.066767][T30468] name failslab, interval 1, probability 0, space 0, times 0 [ 845.112966][T30468] CPU: 1 UID: 0 PID: 30468 Comm: syz.2.8541 Not tainted syzkaller #0 PREEMPT(full) [ 845.112995][T30468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 845.113007][T30468] Call Trace: [ 845.113016][T30468] [ 845.113025][T30468] dump_stack_lvl+0xe8/0x150 [ 845.113063][T30468] should_fail_ex+0x40c/0x560 [ 845.113093][T30468] should_failslab+0xa8/0x100 [ 845.113124][T30468] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 845.113149][T30468] ? skb_clone+0x212/0x3a0 [ 845.113171][T30468] ? skb_clone+0x212/0x3a0 [ 845.113200][T30468] skb_clone+0x212/0x3a0 [ 845.113226][T30468] __netlink_deliver_tap+0x413/0x860 [ 845.113263][T30468] ? netlink_deliver_tap+0x2e/0x1b0 [ 845.113286][T30468] netlink_deliver_tap+0x19c/0x1b0 [ 845.113319][T30468] netlink_unicast+0x77f/0x940 [ 845.113361][T30468] netlink_sendmsg+0x813/0xb40 [ 845.113394][T30468] ? __pfx_netlink_sendmsg+0x10/0x10 [ 845.113422][T30468] ? aa_sock_msg_perm+0xf1/0x1b0 [ 845.113451][T30468] ? __pfx_netlink_sendmsg+0x10/0x10 [ 845.113471][T30468] sock_sendmsg_nosec+0x13a/0x180 [ 845.113503][T30468] ____sys_sendmsg+0x54e/0x850 [ 845.113532][T30468] ? __pfx_____sys_sendmsg+0x10/0x10 [ 845.113565][T30468] ? import_iovec+0x73/0xa0 [ 845.113598][T30468] ___sys_sendmsg+0x2a5/0x360 [ 845.113618][T30468] ? __lock_acquire+0x683/0x2cf0 [ 845.113651][T30468] ? __pfx____sys_sendmsg+0x10/0x10 [ 845.113710][T30468] ? __fget_files+0x2a/0x420 [ 845.113734][T30468] ? __fget_files+0x3a2/0x420 [ 845.113769][T30468] __x64_sys_sendmsg+0x1b1/0x290 [ 845.113792][T30468] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 845.113834][T30468] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 845.113857][T30468] do_syscall_64+0x174/0x580 [ 845.113879][T30468] ? trace_irq_disable+0x3b/0x140 [ 845.113905][T30468] ? clear_bhb_loop+0x40/0x90 [ 845.113931][T30468] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 845.113951][T30468] RIP: 0033:0x7fce7b19de99 [ 845.113971][T30468] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 845.113990][T30468] RSP: 002b:00007fce7bfef028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 845.114012][T30468] RAX: ffffffffffffffda RBX: 00007fce7b425fa0 RCX: 00007fce7b19de99 [ 845.114028][T30468] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 845.114039][T30468] RBP: 00007fce7bfef090 R08: 0000000000000000 R09: 0000000000000000 [ 845.114051][T30468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 845.114064][T30468] R13: 00007fce7b426038 R14: 00007fce7b425fa0 R15: 00007ffe1a840cd8 [ 845.114096][T30468] [ 845.435635][T30471] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 845.811371][T29812] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 845.818701][T30485] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 845.924263][T29812] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 845.982485][T30493] tipc: Started in network mode [ 845.987576][T30493] tipc: Node identity ac14140f, cluster identity 4711 [ 845.999466][T30493] tipc: Enabled bearer , priority 10 [ 846.234117][T30506] __nla_validate_parse: 10 callbacks suppressed [ 846.234142][T30506] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8554'. [ 846.254465][T30506] netlink: 'syz.4.8554': attribute type 13 has an invalid length. [ 846.272848][T30506] netlink: 'syz.4.8554': attribute type 17 has an invalid length. [ 846.334985][T30506] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 846.359071][ T79] bridge0: port 2(bridge_slave_1) entered blocking state [ 846.366389][ T79] bridge0: port 2(bridge_slave_1) entered forwarding state [ 846.418699][T30509] bridge0: port 2(bridge_slave_1) entered disabled state [ 846.941529][T25709] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 846.965990][T25709] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 846.977452][T25709] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 846.990497][T25709] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 846.998620][T25709] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 847.112372][T29812] tipc: Node number set to 2886997007 [ 847.707830][T30544] dvmrp8: entered allmulticast mode [ 847.743225][T30549] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8566'. [ 847.766620][T30549] netlink: 'syz.0.8566': attribute type 10 has an invalid length. [ 847.779973][T30549] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8566'. [ 847.927434][T30525] lo speed is unknown, defaulting to 1000 [ 848.049858][T30557] netlink: 76 bytes leftover after parsing attributes in process `syz.4.8568'. [ 848.905491][T30525] bridge0: port 1(bridge_slave_0) entered blocking state [ 848.935731][T30525] bridge0: port 1(bridge_slave_0) entered disabled state [ 848.972648][T30525] bridge_slave_0: entered allmulticast mode [ 848.996481][T30525] bridge_slave_0: entered promiscuous mode [ 849.020129][T30525] bridge0: port 2(bridge_slave_1) entered blocking state [ 849.021139][T25709] Bluetooth: hci2: command tx timeout [ 849.063158][T30525] bridge0: port 2(bridge_slave_1) entered disabled state [ 849.080061][T30525] bridge_slave_1: entered allmulticast mode [ 849.119197][T30525] bridge_slave_1: entered promiscuous mode [ 849.235228][T30525] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 849.263178][T30525] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 849.526791][T30525] team0: Port device team_slave_0 added [ 849.549965][T30525] team0: Port device team_slave_1 added [ 849.607331][T30590] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.8577'. [ 849.710689][T30525] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 849.718391][T30525] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 849.724375][T30592] netlink: 76 bytes leftover after parsing attributes in process `syz.4.8578'. [ 849.746160][T30525] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 849.803456][T30525] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 849.810488][T30525] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 849.870971][T30525] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 850.050066][T30525] hsr_slave_0: entered promiscuous mode [ 850.052495][T30603] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8583'. [ 850.075621][T30525] hsr_slave_1: entered promiscuous mode [ 850.094261][T30525] debugfs: 'hsr0' already exists in 'hsr' [ 850.110837][T30525] Cannot create hsr debugfs directory [ 850.472536][T30616] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 850.748890][T30622] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.8590'. [ 850.801547][T30624] netlink: 76 bytes leftover after parsing attributes in process `syz.3.8591'. [ 850.937109][T30525] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 851.096963][T30635] FAULT_INJECTION: forcing a failure. [ 851.096963][T30635] name failslab, interval 1, probability 0, space 0, times 0 [ 851.102025][T25709] Bluetooth: hci2: command tx timeout [ 851.130006][T30635] CPU: 0 UID: 0 PID: 30635 Comm: syz.4.8596 Not tainted syzkaller #0 PREEMPT(full) [ 851.130034][T30635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 851.130046][T30635] Call Trace: [ 851.130054][T30635] [ 851.130063][T30635] dump_stack_lvl+0xe8/0x150 [ 851.130101][T30635] should_fail_ex+0x40c/0x560 [ 851.130131][T30635] should_failslab+0xa8/0x100 [ 851.130162][T30635] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 851.130187][T30635] ? tcp_current_mss+0x27e/0x4c0 [ 851.130299][T30635] ? __alloc_skb+0x1d7/0x7a0 [ 851.130326][T30635] ? __alloc_skb+0x1d7/0x7a0 [ 851.130363][T30635] __alloc_skb+0x1d7/0x7a0 [ 851.130396][T30635] tcp_stream_alloc_skb+0x3f/0x580 [ 851.130423][T30635] tcp_sendmsg_locked+0x1437/0x55c0 [ 851.130461][T30635] ? __lock_acquire+0x683/0x2cf0 [ 851.130527][T30635] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 851.130558][T30635] ? tcp_sendmsg+0x21/0x50 [ 851.130580][T30635] ? __local_bh_enable_ip+0xd0/0x130 [ 851.130609][T30635] tcp_sendmsg+0x2f/0x50 [ 851.130646][T30635] ? __pfx_inet_sendmsg+0x10/0x10 [ 851.130674][T30635] sock_sendmsg_nosec+0x10e/0x180 [ 851.130704][T30635] __sys_sendto+0x408/0x5a0 [ 851.130736][T30635] ? ksys_write+0x1e6/0x270 [ 851.130768][T30635] ? __pfx___sys_sendto+0x10/0x10 [ 851.130795][T30635] ? __mutex_unlock_slowpath+0x731/0x900 [ 851.130848][T30635] ? __pfx_ksys_write+0x10/0x10 [ 851.130883][T30635] __x64_sys_sendto+0xde/0x100 [ 851.130914][T30635] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 851.130938][T30635] do_syscall_64+0x174/0x580 [ 851.130959][T30635] ? trace_irq_disable+0x3b/0x140 [ 851.130985][T30635] ? clear_bhb_loop+0x40/0x90 [ 851.131010][T30635] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 851.131031][T30635] RIP: 0033:0x7ffb4239de99 [ 851.131051][T30635] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 851.131068][T30635] RSP: 002b:00007ffb43262028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 851.131092][T30635] RAX: ffffffffffffffda RBX: 00007ffb42625fa0 RCX: 00007ffb4239de99 [ 851.131106][T30635] RDX: 000000000000059a RSI: 0000200000000580 RDI: 0000000000000003 [ 851.131119][T30635] RBP: 00007ffb43262090 R08: 0000000000000000 R09: 0000000000000000 [ 851.131131][T30635] R10: 0000000010008095 R11: 0000000000000246 R12: 0000000000000001 [ 851.131143][T30635] R13: 00007ffb42626038 R14: 00007ffb42625fa0 R15: 00007ffcfb0d76c8 [ 851.131176][T30635] [ 851.466989][T30525] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 851.519894][T30641] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 851.642903][T30641] xt_hashlimit: max too large, truncated to 1048576 [ 851.653278][T30641] xt_hashlimit: overflow, try lower: 137438953472/8 [ 851.877947][T30525] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 851.944643][T30659] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8605'. [ 851.969584][T30659] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8605'. [ 852.026991][T30659] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8605'. [ 852.048104][T30664] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8607'. [ 852.062456][T30525] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 852.204765][T30659] lo speed is unknown, defaulting to 1000 [ 852.332783][T30678] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8605'. [ 852.713862][T30686] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 852.872335][T30668] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 852.883097][T30668] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8608'. [ 853.139973][T30694] syzkaller0: entered promiscuous mode [ 853.160846][T30694] syzkaller0: entered allmulticast mode [ 853.180966][T25709] Bluetooth: hci2: command tx timeout [ 853.682470][T30714] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8619'. [ 853.845818][T30721] netlink: 68 bytes leftover after parsing attributes in process `syz.4.8620'. [ 855.260946][T25709] Bluetooth: hci2: command tx timeout [ 855.422947][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 856.381808][T30525] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 856.391678][T30525] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 856.417068][T30727] geneve2: entered promiscuous mode [ 856.444722][T30525] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 856.489982][T30525] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 856.509824][T30525] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 856.532053][T30525] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 856.549445][T30731] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8624'. [ 856.568458][T30525] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 856.603151][T30525] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 856.654837][T30731] 8021q: adding VLAN 0 to HW filter on device bond6 [ 856.666824][ T48] bridge_slave_1: left promiscuous mode [ 856.680233][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 856.727872][ T48] bridge_slave_0: left allmulticast mode [ 856.738836][ T48] bridge_slave_0: left promiscuous mode [ 856.753621][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 857.110350][ T48] bond2 (unregistering): (slave gretap1): Releasing backup interface [ 857.232979][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 857.244959][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 857.255385][ T48] bond0 (unregistering): Released all slaves [ 857.273010][ T48] bond1 (unregistering): Released all slaves [ 857.293457][ T48] bond2 (unregistering): (slave bond3): Releasing backup interface [ 857.302213][ T48] bond2 (unregistering): Released all slaves [ 857.327919][ T48] bond3 (unregistering): Released all slaves [ 857.346983][ T48] bond4 (unregistering): (slave team0): Releasing active interface [ 857.356656][ T48] bond4 (unregistering): Released all slaves [ 857.373513][ T48] bond5 (unregistering): Released all slaves [ 857.397496][ T48] bond6 (unregistering): Released all slaves [ 857.413135][ T48] bond7 (unregistering): Released all slaves [ 857.438742][T30739] bond6: option mode: unable to set because the bond device is up [ 857.712215][ T48] tipc: Left network mode [ 857.832432][T30525] 8021q: adding VLAN 0 to HW filter on device bond0 [ 857.929756][T30525] 8021q: adding VLAN 0 to HW filter on device team0 [ 857.938268][ T48] IPVS: stopping backup sync thread 22783 ... [ 857.994260][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 858.001536][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 858.056197][T18348] bridge0: port 2(bridge_slave_1) entered blocking state [ 858.063476][T18348] bridge0: port 2(bridge_slave_1) entered forwarding state [ 858.162762][T30772] xt_hashlimit: size too large, truncated to 1048576 [ 858.699409][ T48] hsr_slave_0: left promiscuous mode [ 858.734747][ T48] hsr_slave_1: left promiscuous mode [ 858.751628][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 858.780293][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 858.814303][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 858.836693][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 858.879221][ T48] veth1_macvtap: left promiscuous mode [ 858.900288][ T48] veth0_macvtap: left promiscuous mode [ 858.919585][T30800] netlink: 'syz.2.8642': attribute type 1 has an invalid length. [ 858.929309][ T48] veth1_vlan: left promiscuous mode [ 858.934936][ T48] veth0_vlan: left promiscuous mode [ 858.997577][T30804] FAULT_INJECTION: forcing a failure. [ 858.997577][T30804] name failslab, interval 1, probability 0, space 0, times 0 [ 859.017779][T30804] CPU: 1 UID: 0 PID: 30804 Comm: syz.4.8643 Not tainted syzkaller #0 PREEMPT(full) [ 859.017809][T30804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 859.017822][T30804] Call Trace: [ 859.017830][T30804] [ 859.017840][T30804] dump_stack_lvl+0xe8/0x150 [ 859.017878][T30804] should_fail_ex+0x40c/0x560 [ 859.017909][T30804] should_failslab+0xa8/0x100 [ 859.017941][T30804] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 859.017967][T30804] ? skb_clone+0x212/0x3a0 [ 859.017993][T30804] ? skb_clone+0x212/0x3a0 [ 859.018023][T30804] skb_clone+0x212/0x3a0 [ 859.018048][T30804] __netlink_deliver_tap+0x413/0x860 [ 859.018084][T30804] ? netlink_deliver_tap+0x2e/0x1b0 [ 859.018109][T30804] netlink_deliver_tap+0x19c/0x1b0 [ 859.018133][T30804] netlink_unicast+0x77f/0x940 [ 859.018175][T30804] netlink_sendmsg+0x813/0xb40 [ 859.018210][T30804] ? __pfx_netlink_sendmsg+0x10/0x10 [ 859.018238][T30804] ? aa_sock_msg_perm+0xf1/0x1b0 [ 859.018267][T30804] ? __pfx_netlink_sendmsg+0x10/0x10 [ 859.018289][T30804] sock_sendmsg_nosec+0x13a/0x180 [ 859.018320][T30804] ____sys_sendmsg+0x54e/0x850 [ 859.018350][T30804] ? __pfx_____sys_sendmsg+0x10/0x10 [ 859.018382][T30804] ? import_iovec+0x73/0xa0 [ 859.018418][T30804] ___sys_sendmsg+0x2a5/0x360 [ 859.018439][T30804] ? __lock_acquire+0x683/0x2cf0 [ 859.018473][T30804] ? __pfx____sys_sendmsg+0x10/0x10 [ 859.018535][T30804] ? __fget_files+0x2a/0x420 [ 859.018560][T30804] ? __fget_files+0x3a2/0x420 [ 859.018598][T30804] __x64_sys_sendmsg+0x1b1/0x290 [ 859.018633][T30804] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 859.018675][T30804] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 859.018698][T30804] do_syscall_64+0x174/0x580 [ 859.018720][T30804] ? trace_irq_disable+0x3b/0x140 [ 859.018745][T30804] ? clear_bhb_loop+0x40/0x90 [ 859.018769][T30804] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 859.018789][T30804] RIP: 0033:0x7ffb4239de99 [ 859.018809][T30804] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 859.018825][T30804] RSP: 002b:00007ffb43241028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 859.018845][T30804] RAX: ffffffffffffffda RBX: 00007ffb42626090 RCX: 00007ffb4239de99 [ 859.018857][T30804] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000004 [ 859.018868][T30804] RBP: 00007ffb43241090 R08: 0000000000000000 R09: 0000000000000000 [ 859.018879][T30804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 859.018889][T30804] R13: 00007ffb42626128 R14: 00007ffb42626090 R15: 00007ffcfb0d76c8 [ 859.018918][T30804] [ 859.461914][ T48] team0 (unregistering): Port device team_slave_1 removed [ 859.484141][ T48] team0 (unregistering): Port device team_slave_0 removed [ 859.749132][T30808] FAULT_INJECTION: forcing a failure. [ 859.749132][T30808] name failslab, interval 1, probability 0, space 0, times 0 [ 859.751297][T30800] 8021q: adding VLAN 0 to HW filter on device bond1 [ 859.768091][T30808] CPU: 0 UID: 0 PID: 30808 Comm: syz.0.8644 Not tainted syzkaller #0 PREEMPT(full) [ 859.768128][T30808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 859.768140][T30808] Call Trace: [ 859.768149][T30808] [ 859.768158][T30808] dump_stack_lvl+0xe8/0x150 [ 859.768192][T30808] should_fail_ex+0x40c/0x560 [ 859.768216][T30808] ? page_pool_create_percpu+0x2ef/0xc70 [ 859.768243][T30808] should_failslab+0xa8/0x100 [ 859.768271][T30808] __kvmalloc_node_noprof+0x176/0x860 [ 859.768299][T30808] ? __kmalloc_cache_node_noprof+0x1f2/0x630 [ 859.768322][T30808] ? page_pool_create_percpu+0x2ef/0xc70 [ 859.768354][T30808] page_pool_create_percpu+0x2ef/0xc70 [ 859.768381][T30808] bpf_test_run_xdp_live+0x23a/0x1c20 [ 859.768406][T30808] ? __pfx_stack_trace_save+0x10/0x10 [ 859.768431][T30808] ? stack_depot_save_flags+0x33/0x800 [ 859.768456][T30808] ? __kmalloc_noprof+0x1ad/0x720 [ 859.768478][T30808] ? kasan_save_track+0x4f/0x80 [ 859.768499][T30808] ? kasan_save_track+0x3e/0x80 [ 859.768519][T30808] ? __kasan_kmalloc+0x93/0xb0 [ 859.768541][T30808] ? __kmalloc_noprof+0x375/0x720 [ 859.768560][T30808] ? bpf_test_init+0x9f/0x150 [ 859.768576][T30808] ? bpf_prog_test_run_xdp+0x4cc/0x11d0 [ 859.768599][T30808] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 859.768652][T30808] ? __might_fault+0xaf/0x130 [ 859.768677][T30808] ? __might_fault+0xaf/0x130 [ 859.768706][T30808] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 859.768735][T30808] ? _copy_from_user+0x94/0xb0 [ 859.768766][T30808] ? bpf_test_init+0x113/0x150 [ 859.768783][T30808] ? xdp_convert_md_to_buff+0x5b/0x330 [ 859.768806][T30808] bpf_prog_test_run_xdp+0x7d8/0x11d0 [ 859.768841][T30808] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 859.768867][T30808] ? __fget_files+0x2a/0x420 [ 859.768895][T30808] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 859.768916][T30808] bpf_prog_test_run+0x2c5/0x340 [ 859.768946][T30808] __sys_bpf+0xa22/0xd90 [ 859.768984][T30808] ? __pfx___sys_bpf+0x10/0x10 [ 859.769023][T30808] ? __fget_files+0x2a/0x420 [ 859.769062][T30808] ? ksys_write+0x242/0x270 [ 859.769091][T30808] ? __pfx_ksys_write+0x10/0x10 [ 859.769128][T30808] __x64_sys_bpf+0xba/0xd0 [ 859.769150][T30808] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 859.769171][T30808] do_syscall_64+0x174/0x580 [ 859.769191][T30808] ? trace_irq_disable+0x3b/0x140 [ 859.769213][T30808] ? clear_bhb_loop+0x40/0x90 [ 859.769236][T30808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 859.769255][T30808] RIP: 0033:0x7f846339de99 [ 859.769275][T30808] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 859.769290][T30808] RSP: 002b:00007f8464208028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 859.769310][T30808] RAX: ffffffffffffffda RBX: 00007f8463625fa0 RCX: 00007f846339de99 [ 859.769323][T30808] RDX: 0000000000000050 RSI: 0000200000000280 RDI: 000000000000000a [ 859.769335][T30808] RBP: 00007f8464208090 R08: 0000000000000000 R09: 0000000000000000 [ 859.769347][T30808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 859.769358][T30808] R13: 00007f8463626038 R14: 00007f8463625fa0 R15: 00007ffe0878e4d8 [ 859.769388][T30808] [ 859.769480][T30808] page_pool_create_percpu() gave up with errno -12 [ 859.950363][T30803] bond1: (slave gretap1): making interface the new active one [ 860.105019][T30803] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 860.388313][T30822] FAULT_INJECTION: forcing a failure. [ 860.388313][T30822] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 860.423076][T30822] CPU: 0 UID: 0 PID: 30822 Comm: syz.3.8649 Not tainted syzkaller #0 PREEMPT(full) [ 860.423107][T30822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 860.423120][T30822] Call Trace: [ 860.423129][T30822] [ 860.423137][T30822] dump_stack_lvl+0xe8/0x150 [ 860.423175][T30822] should_fail_ex+0x40c/0x560 [ 860.423204][T30822] _copy_to_user+0x31/0xb0 [ 860.423233][T30822] bpf_prog_test_run_raw_tp+0x5f0/0x7e0 [ 860.423266][T30822] ? __pfx_bpf_prog_test_run_raw_tp+0x10/0x10 [ 860.423290][T30822] ? __fget_files+0x2a/0x420 [ 860.423320][T30822] ? __pfx_bpf_prog_test_run_raw_tp+0x10/0x10 [ 860.423342][T30822] bpf_prog_test_run+0x2c5/0x340 [ 860.423374][T30822] __sys_bpf+0xa22/0xd90 [ 860.423409][T30822] ? __pfx___sys_bpf+0x10/0x10 [ 860.423444][T30822] ? __fget_files+0x2a/0x420 [ 860.423485][T30822] ? ksys_write+0x242/0x270 [ 860.423515][T30822] ? __pfx_ksys_write+0x10/0x10 [ 860.423550][T30822] __x64_sys_bpf+0xba/0xd0 [ 860.423573][T30822] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 860.423597][T30822] do_syscall_64+0x174/0x580 [ 860.423618][T30822] ? trace_irq_disable+0x3b/0x140 [ 860.423642][T30822] ? clear_bhb_loop+0x40/0x90 [ 860.423667][T30822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 860.423684][T30822] RIP: 0033:0x7f9a3199de99 [ 860.423704][T30822] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 860.423722][T30822] RSP: 002b:00007f9a3294d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 860.423753][T30822] RAX: ffffffffffffffda RBX: 00007f9a31c25fa0 RCX: 00007f9a3199de99 [ 860.423769][T30822] RDX: 000000000000000c RSI: 00002000000004c0 RDI: 000000000000000a [ 860.423781][T30822] RBP: 00007f9a3294d090 R08: 0000000000000000 R09: 0000000000000000 [ 860.423794][T30822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 860.423805][T30822] R13: 00007f9a31c26038 R14: 00007f9a31c25fa0 R15: 00007ffeffdbd7b8 [ 860.423838][T30822] [ 860.439712][T30825] netlink: 'syz.0.8648': attribute type 4 has an invalid length. [ 860.635493][T30828] xt_TCPMSS: Only works on TCP SYN packets [ 860.718697][T30823] lo speed is unknown, defaulting to 1000 [ 860.754267][T30825] netlink: 17 bytes leftover after parsing attributes in process `syz.0.8648'. [ 861.214166][T30525] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 861.592436][T30826] netlink: 84 bytes leftover after parsing attributes in process `syz.2.8646'. [ 861.828766][T30525] veth0_vlan: entered promiscuous mode [ 861.937718][T30867] netlink: 116 bytes leftover after parsing attributes in process `syz.0.8664'. [ 862.189488][T30525] veth1_vlan: entered promiscuous mode [ 865.407682][T30525] veth0_macvtap: entered promiscuous mode [ 865.423622][T30525] veth1_macvtap: entered promiscuous mode [ 865.468828][T30525] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 865.525255][T30525] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 865.548305][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 865.571609][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 865.607014][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 865.634658][T30901] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 865.655455][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 865.673554][T30899] netlink: 48 bytes leftover after parsing attributes in process `syz.0.8674'. [ 865.967653][T30914] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8678'. [ 865.991525][T30914] netlink: 'syz.2.8678': attribute type 21 has an invalid length. [ 865.999621][T30914] netlink: 'syz.2.8678': attribute type 5 has an invalid length. [ 866.006045][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 866.033088][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 866.133369][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 866.158371][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 866.525135][T30931] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3) [ 866.569402][T30931] bond1 (unregistering): Released all slaves [ 866.689266][T30944] tipc: Enabling of bearer rejected, already enabled [ 866.771676][T30946] FAULT_INJECTION: forcing a failure. [ 866.771676][T30946] name failslab, interval 1, probability 0, space 0, times 0 [ 866.813302][T30946] CPU: 0 UID: 0 PID: 30946 Comm: syz.0.8689 Not tainted syzkaller #0 PREEMPT(full) [ 866.813332][T30946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 866.813344][T30946] Call Trace: [ 866.813353][T30946] [ 866.813363][T30946] dump_stack_lvl+0xe8/0x150 [ 866.813399][T30946] should_fail_ex+0x40c/0x560 [ 866.813429][T30946] should_failslab+0xa8/0x100 [ 866.813460][T30946] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 866.813485][T30946] ? skb_clone+0x212/0x3a0 [ 866.813505][T30946] ? skb_clone+0x212/0x3a0 [ 866.813542][T30946] skb_clone+0x212/0x3a0 [ 866.813561][T30946] ? ip6_finish_output2+0xedd/0x13c0 [ 866.813595][T30946] ip6_finish_output2+0xeeb/0x13c0 [ 866.813624][T30946] ? ip6_mtu+0x38c/0x490 [ 866.813713][T30946] ? ip6_output+0x11e/0x540 [ 866.813741][T30946] ip6_output+0x337/0x540 [ 866.813771][T30946] ip6_mr_output+0x53e/0x1170 [ 866.813806][T30946] ? ip6_mr_output+0x1f3/0x1170 [ 866.813835][T30946] ? __pfx_ip6_mr_output+0x10/0x10 [ 866.813864][T30946] ? __ip6_local_out+0x15c/0x940 [ 866.813926][T30946] ? __ip6_local_out+0x8f8/0x940 [ 866.813955][T30946] ? __ip6_local_out+0x15c/0x940 [ 866.813987][T30946] ? __pfx___ip6_local_out+0x10/0x10 [ 866.814031][T30946] ? __asan_memcpy+0x40/0x70 [ 866.814059][T30946] ? ip6_local_out+0x16e/0x190 [ 866.814087][T30946] ? ip6_send_skb+0x10a/0x380 [ 866.814116][T30946] ip6_send_skb+0x1cd/0x380 [ 866.814147][T30946] rawv6_push_pending_frames+0x69f/0x860 [ 866.814188][T30946] ? __pfx_rawv6_push_pending_frames+0x10/0x10 [ 866.814232][T30946] rawv6_sendmsg+0x134f/0x18c0 [ 866.814277][T30946] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 866.814345][T30946] ? sock_rps_record_flow+0x19/0x350 [ 866.814379][T30946] ? inet_sendmsg+0x298/0x320 [ 866.814410][T30946] ? __pfx_inet_sendmsg+0x10/0x10 [ 866.814457][T30946] sock_sendmsg_nosec+0x10e/0x180 [ 866.814487][T30946] __sys_sendto+0x408/0x5a0 [ 866.814526][T30946] ? ksys_write+0x1e6/0x270 [ 866.814560][T30946] ? __pfx___sys_sendto+0x10/0x10 [ 866.814588][T30946] ? __mutex_unlock_slowpath+0x731/0x900 [ 866.814644][T30946] ? __pfx_ksys_write+0x10/0x10 [ 866.814682][T30946] __x64_sys_sendto+0xde/0x100 [ 866.814713][T30946] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 866.814736][T30946] do_syscall_64+0x174/0x580 [ 866.814757][T30946] ? trace_irq_disable+0x3b/0x140 [ 866.814787][T30946] ? clear_bhb_loop+0x40/0x90 [ 866.814813][T30946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 866.814834][T30946] RIP: 0033:0x7f846339de99 [ 866.814855][T30946] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 866.814873][T30946] RSP: 002b:00007f8464208028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 866.814896][T30946] RAX: ffffffffffffffda RBX: 00007f8463625fa0 RCX: 00007f846339de99 [ 866.814911][T30946] RDX: 0000000000000034 RSI: 0000200000000200 RDI: 0000000000000003 [ 866.814925][T30946] RBP: 00007f8464208090 R08: 0000000000000000 R09: 0000000000000000 [ 866.814937][T30946] R10: 0000000000003b00 R11: 0000000000000246 R12: 0000000000000001 [ 866.814951][T30946] R13: 00007f8463626038 R14: 00007f8463625fa0 R15: 00007ffe0878e4d8 [ 866.814986][T30946] [ 867.997764][T30992] syzkaller0: entered promiscuous mode [ 868.014819][T30992] syzkaller0: entered allmulticast mode [ 868.271826][T31003] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8713'. [ 868.317153][T31013] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8715'. [ 868.327226][T31013] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8715'. [ 868.393591][T31016] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8713'. [ 868.654565][T31033] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8715'. [ 870.161863][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 871.618381][T31021] bridge0: port 1(bridge_slave_0) entered disabled state [ 871.629041][T31021] bridge0: entered allmulticast mode [ 871.754156][T31024] syzkaller0: entered promiscuous mode [ 871.775532][T31024] syzkaller0: entered allmulticast mode [ 871.811865][T31013] lo speed is unknown, defaulting to 1000 [ 875.293438][T31075] IPVS: set_ctl: invalid protocol: 0 172.20.20.21:20001 [ 875.533028][T31077] can: request_module (can-proto-0) failed. [ 875.543839][T31077] syz.2.8725 (31077) used obsolete PPPIOCDETACH ioctl [ 875.574791][T31084] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8726'. [ 875.637257][T31093] batadv0: entered promiscuous mode [ 875.649437][T31095] netlink: 1624 bytes leftover after parsing attributes in process `syz.1.8729'. [ 875.687852][T31093] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 876.012034][T31102] bond7: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 876.984358][T31102] bond7 (unregistering): Released all slaves [ 878.573321][T31119] netlink: 56 bytes leftover after parsing attributes in process `syz.1.8735'. [ 878.975866][T31156] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8739'. [ 879.136222][T31155] FAULT_INJECTION: forcing a failure. [ 879.136222][T31155] name failslab, interval 1, probability 0, space 0, times 0 [ 879.198035][T31159] syzkaller0: entered promiscuous mode [ 879.233441][T31159] syzkaller0: entered allmulticast mode [ 879.250213][T31168] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8743'. [ 879.269472][T31155] CPU: 1 UID: 0 PID: 31155 Comm: syz.2.8739 Not tainted syzkaller #0 PREEMPT(full) [ 879.269502][T31155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 879.269514][T31155] Call Trace: [ 879.269523][T31155] [ 879.269533][T31155] dump_stack_lvl+0xe8/0x150 [ 879.269568][T31155] should_fail_ex+0x40c/0x560 [ 879.269599][T31155] should_failslab+0xa8/0x100 [ 879.269631][T31155] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 879.269657][T31155] ? __kernfs_new_node+0xe6/0x980 [ 879.269724][T31155] ? __kernfs_new_node+0xe6/0x980 [ 879.269760][T31155] __kernfs_new_node+0xe6/0x980 [ 879.269800][T31155] ? __pfx___kernfs_new_node+0x10/0x10 [ 879.269830][T31155] ? kernfs_root+0x1c/0x230 [ 879.269863][T31155] ? kernfs_root+0x1c/0x230 [ 879.269889][T31155] ? kernfs_root+0x1c/0x230 [ 879.269913][T31155] ? kernfs_root+0x1c/0x230 [ 879.269944][T31155] kernfs_new_node+0xea/0x140 [ 879.269979][T31155] __kernfs_create_file+0x4b/0x2e0 [ 879.270005][T31155] sysfs_add_file_mode_ns+0x237/0x300 [ 879.270039][T31155] internal_create_group+0x679/0x1180 [ 879.270086][T31155] ? __pfx_internal_create_group+0x10/0x10 [ 879.270119][T31155] ? up_write+0x19f/0x4a0 [ 879.270147][T31155] sysfs_create_groups+0x59/0x120 [ 879.270177][T31155] device_add_attrs+0x1b1/0x600 [ 879.270333][T31155] ? __pfx_device_add_attrs+0x10/0x10 [ 879.270361][T31155] ? kobject_put+0x50f/0x550 [ 879.270422][T31155] ? device_add_class_symlinks+0x21f/0x240 [ 879.270446][T31155] device_add+0x488/0xb80 [ 879.270470][T31155] wakeup_source_sysfs_add+0x1d3/0x2c0 [ 879.270529][T31155] wakeup_source_register+0x17f/0x380 [ 879.270555][T31155] ep_insert+0xf89/0x1ac0 [ 879.270603][T31155] ? __pfx_ep_insert+0x10/0x10 [ 879.270645][T31155] ? bpf_lsm_capable+0x9/0x20 [ 879.270671][T31155] ? security_capable+0x7e/0x2c0 [ 879.270712][T31155] do_epoll_ctl_file+0x8c2/0xee0 [ 879.270752][T31155] ? __pfx_do_epoll_ctl_file+0x10/0x10 [ 879.270785][T31155] ? __fget_files+0x3a2/0x420 [ 879.270810][T31155] ? __fget_files+0x2a/0x420 [ 879.270845][T31155] __se_sys_epoll_ctl+0x162/0x230 [ 879.270879][T31155] ? __pfx___se_sys_epoll_ctl+0x10/0x10 [ 879.270920][T31155] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 879.270944][T31155] do_syscall_64+0x174/0x580 [ 879.270966][T31155] ? trace_irq_disable+0x3b/0x140 [ 879.270992][T31155] ? clear_bhb_loop+0x40/0x90 [ 879.271018][T31155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 879.271039][T31155] RIP: 0033:0x7fce7b19de99 [ 879.271060][T31155] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 879.271078][T31155] RSP: 002b:00007fce7bfef028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 879.271102][T31155] RAX: ffffffffffffffda RBX: 00007fce7b425fa0 RCX: 00007fce7b19de99 [ 879.271118][T31155] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000003 [ 879.271130][T31155] RBP: 00007fce7bfef090 R08: 0000000000000000 R09: 0000000000000000 [ 879.271143][T31155] R10: 0000200000000800 R11: 0000000000000246 R12: 0000000000000002 [ 879.271156][T31155] R13: 00007fce7b426038 R14: 00007fce7b425fa0 R15: 00007ffe1a840cd8 [ 879.271191][T31155] [ 879.619107][T31168] netlink: 'syz.0.8743': attribute type 13 has an invalid length. [ 879.627150][T31168] netlink: 'syz.0.8743': attribute type 17 has an invalid length. [ 879.646519][T31168] 0ªX¹¦À: left allmulticast mode [ 879.653264][T31173] FAULT_INJECTION: forcing a failure. [ 879.653264][T31173] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 879.686694][T31168] bridge1: left promiscuous mode [ 879.692132][T31168] bridge1: left allmulticast mode [ 879.699384][T31168] 8021q: adding VLAN 0 to HW filter on device bond5 [ 879.754719][T31173] CPU: 0 UID: 0 PID: 31173 Comm: syz.4.8744 Not tainted syzkaller #0 PREEMPT(full) [ 879.754759][T31173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 879.754773][T31173] Call Trace: [ 879.754782][T31173] [ 879.754792][T31173] dump_stack_lvl+0xe8/0x150 [ 879.754831][T31173] should_fail_ex+0x40c/0x560 [ 879.754861][T31173] _copy_from_iter+0x1d3/0x1660 [ 879.754886][T31173] ? kmem_cache_alloc_node_noprof+0x1d1/0x610 [ 879.754913][T31173] ? rcu_is_watching+0x15/0xb0 [ 879.754944][T31173] ? trace_kmem_cache_alloc+0x29/0xe0 [ 879.754970][T31173] ? kmem_cache_alloc_node_noprof+0x3b8/0x610 [ 879.754995][T31173] ? __pfx__copy_from_iter+0x10/0x10 [ 879.755020][T31173] ? __alloc_skb+0x276/0x7a0 [ 879.755048][T31173] ? __alloc_skb+0x276/0x7a0 [ 879.755083][T31173] ? netlink_sendmsg+0x650/0xb40 [ 879.755106][T31173] ? skb_put+0x112/0x210 [ 879.755139][T31173] netlink_sendmsg+0x6c0/0xb40 [ 879.755172][T31173] ? __pfx_netlink_sendmsg+0x10/0x10 [ 879.755200][T31173] ? aa_sock_msg_perm+0xf1/0x1b0 [ 879.755227][T31173] ? __pfx_netlink_sendmsg+0x10/0x10 [ 879.755247][T31173] sock_sendmsg_nosec+0x13a/0x180 [ 879.755277][T31173] ____sys_sendmsg+0x54e/0x850 [ 879.755305][T31173] ? __pfx_____sys_sendmsg+0x10/0x10 [ 879.755337][T31173] ? import_iovec+0x73/0xa0 [ 879.755370][T31173] ___sys_sendmsg+0x2a5/0x360 [ 879.755391][T31173] ? __lock_acquire+0x683/0x2cf0 [ 879.755423][T31173] ? __pfx____sys_sendmsg+0x10/0x10 [ 879.755482][T31173] ? __fget_files+0x2a/0x420 [ 879.755506][T31173] ? __fget_files+0x3a2/0x420 [ 879.755543][T31173] __x64_sys_sendmsg+0x1b1/0x290 [ 879.755568][T31173] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 879.755608][T31173] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 879.755632][T31173] do_syscall_64+0x174/0x580 [ 879.755653][T31173] ? trace_irq_disable+0x3b/0x140 [ 879.755678][T31173] ? clear_bhb_loop+0x40/0x90 [ 879.755704][T31173] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 879.755724][T31173] RIP: 0033:0x7ffb4239de99 [ 879.755756][T31173] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 879.755774][T31173] RSP: 002b:00007ffb43262028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 879.755796][T31173] RAX: ffffffffffffffda RBX: 00007ffb42625fa0 RCX: 00007ffb4239de99 [ 879.755811][T31173] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 879.755824][T31173] RBP: 00007ffb43262090 R08: 0000000000000000 R09: 0000000000000000 [ 879.755837][T31173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 879.755850][T31173] R13: 00007ffb42626038 R14: 00007ffb42625fa0 R15: 00007ffcfb0d76c8 [ 879.755882][T31173] [ 880.317431][T31184] netlink: 1680 bytes leftover after parsing attributes in process `syz.4.8748'. [ 880.557775][T31190] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 880.637172][T31200] tipc: Started in network mode [ 880.645353][T31200] tipc: Node identity 7ad917a07ef5, cluster identity 4711 [ 880.652990][T31200] tipc: Enabled bearer , priority 0 [ 880.726684][T31200] syzkaller0: entered promiscuous mode [ 880.742973][T31200] syzkaller0: entered allmulticast mode [ 880.773290][T31198] tipc: Resetting bearer [ 880.838907][T31198] tipc: Disabling bearer [ 880.924838][T31209] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8755'. [ 880.952559][T31209] netlink: 'syz.3.8755': attribute type 13 has an invalid length. [ 880.982224][T31209] netlink: 'syz.3.8755': attribute type 17 has an invalid length. [ 881.495235][T31226] TCP: TCP_TX_DELAY enabled [ 881.496899][T31209] geneve2: left promiscuous mode [ 881.531264][T31212] bridge0: port 2(bridge_slave_1) entered disabled state [ 882.225122][T31136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 882.260653][T31136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 882.451500][T31255] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8768'. [ 882.472623][T31255] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 882.605187][T31267] xfrm1: entered allmulticast mode [ 882.636934][T29816] bridge0: entered promiscuous mode [ 882.655724][T31267] bond0: Error: CAN devices cannot be enslaved [ 882.851817][T31279] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8777'. [ 882.875068][T31279] netlink: 'syz.3.8777': attribute type 13 has an invalid length. [ 882.883682][T31279] netlink: 'syz.3.8777': attribute type 17 has an invalid length. [ 882.957045][T31281] xt_hashlimit: size too large, truncated to 1048576 [ 882.978788][T31279] xfrm1: left allmulticast mode [ 883.009353][T31141] bridge0: port 2(bridge_slave_1) entered blocking state [ 883.016609][T31141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 883.051930][T31282] bridge0: port 2(bridge_slave_1) entered disabled state [ 883.585662][T31290] sctp: [Deprecated]: syz.0.8779 (pid 31290) Use of struct sctp_assoc_value in delayed_ack socket option. [ 883.585662][T31290] Use struct sctp_sack_info instead [ 884.177222][T31308] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.8786'. [ 884.560048][T31325] netlink: 'syz.2.8793': attribute type 1 has an invalid length. [ 884.578185][T31327] netlink: 96 bytes leftover after parsing attributes in process `syz.4.8795'. [ 884.596170][T31325] 8021q: adding VLAN 0 to HW filter on device bond2 [ 884.636916][T31325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 884.647670][T31325] bond2: (slave bond0): making interface the new active one [ 884.657994][T31325] bond2: (slave bond0): Enslaving as an active interface with an up link [ 884.718663][T31331] bond2: entered promiscuous mode [ 884.777917][T31331] bond0: entered promiscuous mode [ 884.809717][T31331] bond_slave_0: entered promiscuous mode [ 884.834272][T31331] bond_slave_1: entered promiscuous mode [ 884.840303][T31337] FAULT_INJECTION: forcing a failure. [ 884.840303][T31337] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 884.872806][T31331] bond2: entered allmulticast mode [ 884.879860][T31337] CPU: 1 UID: 0 PID: 31337 Comm: syz.3.8796 Not tainted syzkaller #0 PREEMPT(full) [ 884.879889][T31337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 884.879901][T31337] Call Trace: [ 884.879909][T31337] [ 884.879918][T31337] dump_stack_lvl+0xe8/0x150 [ 884.879954][T31337] should_fail_ex+0x40c/0x560 [ 884.879982][T31337] prepare_alloc_pages+0x230/0x650 [ 884.880017][T31337] __alloc_frozen_pages_noprof+0x12f/0x380 [ 884.880050][T31337] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 884.880081][T31337] ? __pfx_policy_nodemask+0x10/0x10 [ 884.880106][T31337] ? __folio_batch_add_and_move+0x11a/0xc50 [ 884.880127][T31337] ? lock_acquire+0x106/0x350 [ 884.880162][T31337] alloc_pages_mpol+0x212/0x380 [ 884.880199][T31337] folio_alloc_mpol_noprof+0x39/0x160 [ 884.880231][T31337] vma_alloc_folio_noprof+0xe1/0x1e0 [ 884.880260][T31337] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 884.880301][T31337] do_wp_page+0x1163/0x4c70 [ 884.880342][T31337] ? __pfx_do_wp_page+0x10/0x10 [ 884.880360][T31337] ? do_raw_spin_lock+0x12b/0x2f0 [ 884.880384][T31337] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 884.880416][T31337] handle_mm_fault+0x1490/0x3080 [ 884.880450][T31337] ? handle_mm_fault+0xec/0x3080 [ 884.880479][T31337] ? __pfx_handle_mm_fault+0x10/0x10 [ 884.880501][T31337] ? follow_page_pte+0xbd0/0xe70 [ 884.880534][T31337] ? __pfx_follow_page_pte+0x10/0x10 [ 884.880566][T31337] __get_user_pages+0x1678/0x2720 [ 884.880633][T31337] __gup_longterm_locked+0xd52/0x15c0 [ 884.880663][T31337] ? lock_acquire+0x106/0x350 [ 884.880695][T31337] ? sanity_check_pinned_pages+0x810/0x8d0 [ 884.880732][T31337] gup_fast_fallback+0x1d8c/0x20e0 [ 884.880800][T31337] ? __pfx_gup_fast_fallback+0x10/0x10 [ 884.880819][T31337] ? do_raw_spin_lock+0x12b/0x2f0 [ 884.880842][T31337] ? __kmalloc_noprof+0x1ad/0x720 [ 884.880868][T31337] ? is_valid_gup_args+0x11f/0x200 [ 884.880892][T31337] ? pin_user_pages_fast+0x4d/0xb0 [ 884.880916][T31337] iov_iter_extract_pages+0x3a1/0x690 [ 884.880958][T31337] extract_iter_to_sg+0xeda/0x2610 [ 884.881003][T31337] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 884.881037][T31337] ? rcu_is_watching+0x15/0xb0 [ 884.881068][T31337] ? trace_kmalloc+0x2a/0xf0 [ 884.881097][T31337] ? __asan_memset+0x22/0x50 [ 884.881124][T31337] af_alg_get_rsgl+0x493/0x8d0 [ 884.881164][T31337] ? af_alg_alloc_areq+0xac/0x200 [ 884.881192][T31337] skcipher_recvmsg+0x39d/0xe10 [ 884.881242][T31337] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 884.881266][T31337] ? __lock_acquire+0x683/0x2cf0 [ 884.881291][T31337] ? aa_sock_msg_perm+0xf1/0x1b0 [ 884.881316][T31337] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 884.881336][T31337] ? security_socket_recvmsg+0x7e/0x2c0 [ 884.881363][T31337] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 884.881391][T31337] sock_recvmsg+0x196/0x1e0 [ 884.881422][T31337] ____sys_recvmsg+0x1e6/0x4a0 [ 884.881456][T31337] ? __pfx_____sys_recvmsg+0x10/0x10 [ 884.881497][T31337] ? import_iovec+0x73/0xa0 [ 884.881530][T31337] ___sys_recvmsg+0x213/0x5a0 [ 884.881560][T31337] ? __pfx____sys_recvmsg+0x10/0x10 [ 884.881588][T31337] ? __fget_files+0x2a/0x420 [ 884.881634][T31337] ? __fget_files+0x3a2/0x420 [ 884.881672][T31337] __x64_sys_recvmsg+0x1ae/0x290 [ 884.881698][T31337] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 884.881742][T31337] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 884.881773][T31337] do_syscall_64+0x174/0x580 [ 884.881796][T31337] ? trace_irq_disable+0x3b/0x140 [ 884.881822][T31337] ? clear_bhb_loop+0x40/0x90 [ 884.881847][T31337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 884.881869][T31337] RIP: 0033:0x7f9a3199de99 [ 884.881890][T31337] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 884.881907][T31337] RSP: 002b:00007f9a3294d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 884.881932][T31337] RAX: ffffffffffffffda RBX: 00007f9a31c25fa0 RCX: 00007f9a3199de99 [ 884.881947][T31337] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000004 [ 884.881960][T31337] RBP: 00007f9a3294d090 R08: 0000000000000000 R09: 0000000000000000 [ 884.881973][T31337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 884.881986][T31337] R13: 00007f9a31c26038 R14: 00007f9a31c25fa0 R15: 00007ffeffdbd7b8 [ 884.882021][T31337] [ 884.942398][T31331] bond0: entered allmulticast mode [ 885.306958][T31331] bond_slave_0: entered allmulticast mode [ 885.313593][T31331] bond_slave_1: entered allmulticast mode [ 885.368276][T31352] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.8799'. [ 885.820356][T31370] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8807'. [ 885.895096][T31374] netlink: 16170 bytes leftover after parsing attributes in process `syz.1.8809'. [ 885.929146][T31370] 8021q: adding VLAN 0 to HW filter on device bond1 [ 886.063567][T31370] macvlan2: entered promiscuous mode [ 886.085844][T31370] macvlan2: entered allmulticast mode [ 886.106464][T31370] bond1: entered promiscuous mode [ 886.122223][T31370] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 886.154959][T31370] bond1: left promiscuous mode [ 886.172358][T31384] netlink: 1688 bytes leftover after parsing attributes in process `syz.0.8811'. [ 886.235431][T31379] bridge_slave_0: left allmulticast mode [ 886.254273][T31379] bridge_slave_0: left promiscuous mode [ 886.265102][T31379] bridge0: port 1(bridge_slave_0) entered disabled state [ 886.276305][T31390] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8809'. [ 886.289936][T31379] bridge_slave_1: left promiscuous mode [ 886.302528][T31379] bridge0: port 2(bridge_slave_1) entered disabled state [ 886.333168][T31379] bond0: (slave bond_slave_0): Releasing backup interface [ 886.354524][T31379] bond0: (slave bond_slave_1): Releasing backup interface [ 886.381845][T31379] team0: Port device team_slave_0 removed [ 886.417707][T31379] team0: Port device team_slave_1 removed [ 886.425031][T31379] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 886.439917][T31379] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 886.463524][T31379] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 886.481368][T31379] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 886.503077][T31379] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 886.587127][T31381] team0: Port device xfrm0 added [ 886.602686][T31385] tipc: Enabled bearer , priority 10 [ 886.878999][T31401] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.8815'. [ 886.990559][T31404] FAULT_INJECTION: forcing a failure. [ 886.990559][T31404] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 887.024186][T31404] CPU: 0 UID: 0 PID: 31404 Comm: syz.3.8818 Not tainted syzkaller #0 PREEMPT(full) [ 887.024217][T31404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 887.024230][T31404] Call Trace: [ 887.024239][T31404] [ 887.024248][T31404] dump_stack_lvl+0xe8/0x150 [ 887.024287][T31404] should_fail_ex+0x40c/0x560 [ 887.024318][T31404] _copy_from_iter+0x1d3/0x1660 [ 887.024348][T31404] ? rcu_is_watching+0x15/0xb0 [ 887.024381][T31404] ? trace_kmalloc+0x2a/0xf0 [ 887.024410][T31404] ? __pfx__copy_from_iter+0x10/0x10 [ 887.024434][T31404] ? __kmalloc_node_track_caller_noprof+0x2fd/0x730 [ 887.024459][T31404] ? netlink_sendmsg+0x5d4/0xb40 [ 887.024479][T31404] ? netlink_sendmsg+0x5d4/0xb40 [ 887.024507][T31404] ? netlink_sendmsg+0x650/0xb40 [ 887.024528][T31404] ? skb_put+0x112/0x210 [ 887.024561][T31404] netlink_sendmsg+0x6c0/0xb40 [ 887.024595][T31404] ? __pfx_netlink_sendmsg+0x10/0x10 [ 887.024622][T31404] ? aa_sock_msg_perm+0xf1/0x1b0 [ 887.024651][T31404] ? __pfx_netlink_sendmsg+0x10/0x10 [ 887.024672][T31404] sock_sendmsg_nosec+0x13a/0x180 [ 887.024703][T31404] ____sys_sendmsg+0x54e/0x850 [ 887.024732][T31404] ? __pfx_____sys_sendmsg+0x10/0x10 [ 887.024764][T31404] ? import_iovec+0x73/0xa0 [ 887.024807][T31404] ___sys_sendmsg+0x2a5/0x360 [ 887.024829][T31404] ? __lock_acquire+0x683/0x2cf0 [ 887.024863][T31404] ? __pfx____sys_sendmsg+0x10/0x10 [ 887.024923][T31404] ? __fget_files+0x2a/0x420 [ 887.024948][T31404] ? __fget_files+0x3a2/0x420 [ 887.024985][T31404] __x64_sys_sendmsg+0x1b1/0x290 [ 887.025010][T31404] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 887.025050][T31404] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 887.025073][T31404] do_syscall_64+0x174/0x580 [ 887.025096][T31404] ? trace_irq_disable+0x3b/0x140 [ 887.025121][T31404] ? clear_bhb_loop+0x40/0x90 [ 887.025147][T31404] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 887.025167][T31404] RIP: 0033:0x7f9a3199de99 [ 887.025187][T31404] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 887.025204][T31404] RSP: 002b:00007f9a3294d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 887.025227][T31404] RAX: ffffffffffffffda RBX: 00007f9a31c25fa0 RCX: 00007f9a3199de99 [ 887.025242][T31404] RDX: 0000000000000000 RSI: 0000200000001380 RDI: 0000000000000003 [ 887.025256][T31404] RBP: 00007f9a3294d090 R08: 0000000000000000 R09: 0000000000000000 [ 887.025269][T31404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 887.025281][T31404] R13: 00007f9a31c26038 R14: 00007f9a31c25fa0 R15: 00007ffeffdbd7b8 [ 887.025314][T31404] [ 887.317133][T31405] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8816'. [ 887.527346][T31412] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 887.635393][T31420] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.8821'. [ 887.638554][T31414] netlink: 1688 bytes leftover after parsing attributes in process `syz.2.8823'. [ 887.700881][T23551] tipc: Node number set to 899150584 [ 888.062731][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 888.106074][T31439] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8827'. [ 888.108597][T31447] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8831'. [ 888.130208][T31445] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.8829'. [ 888.134351][T31447] netlink: 'syz.0.8831': attribute type 13 has an invalid length. [ 888.147548][T31447] netlink: 'syz.0.8831': attribute type 17 has an invalid length. [ 888.209999][T31447] ip6gretap0: entered promiscuous mode [ 888.397552][T31453] netlink: 312 bytes leftover after parsing attributes in process `syz.2.8833'. [ 888.495643][T31463] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input7 [ 890.621349][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 890.948446][T31439] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 891.192257][T31481] xt_hashlimit: size too large, truncated to 1048576 [ 891.328823][T31488] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8839'. [ 891.778471][T31499] netlink: 'syz.0.8846': attribute type 1 has an invalid length. [ 891.807021][T31499] netlink: 224 bytes leftover after parsing attributes in process `syz.0.8846'. [ 892.401363][T31534] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8857'. [ 892.416902][T31534] xt_hashlimit: size too large, truncated to 1048576 [ 892.735364][T31547] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8862'. [ 892.754737][T31544] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8860'. [ 893.012230][T31556] syzkaller1: entered promiscuous mode [ 893.029010][T31556] syzkaller1: entered allmulticast mode [ 893.088350][T31556] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8863'. [ 893.147023][T31569] FAULT_INJECTION: forcing a failure. [ 893.147023][T31569] name failslab, interval 1, probability 0, space 0, times 0 [ 893.160984][T23551] IPVS: starting estimator thread 0... [ 893.170116][T31560] netlink: 'syz.0.8864': attribute type 49 has an invalid length. [ 893.201345][T31569] CPU: 0 UID: 0 PID: 31569 Comm: syz.4.8867 Not tainted syzkaller #0 PREEMPT(full) [ 893.201376][T31569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 893.201389][T31569] Call Trace: [ 893.201398][T31569] [ 893.201408][T31569] dump_stack_lvl+0xe8/0x150 [ 893.201447][T31569] should_fail_ex+0x40c/0x560 [ 893.201478][T31569] should_failslab+0xa8/0x100 [ 893.201511][T31569] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 893.201538][T31569] ? skb_clone+0x212/0x3a0 [ 893.201559][T31569] ? skb_clone+0x212/0x3a0 [ 893.201589][T31569] skb_clone+0x212/0x3a0 [ 893.201614][T31569] __netlink_deliver_tap+0x413/0x860 [ 893.201651][T31569] ? netlink_deliver_tap+0x2e/0x1b0 [ 893.201676][T31569] netlink_deliver_tap+0x19c/0x1b0 [ 893.201701][T31569] netlink_unicast+0x77f/0x940 [ 893.201759][T31569] netlink_sendmsg+0x813/0xb40 [ 893.201793][T31569] ? __pfx_netlink_sendmsg+0x10/0x10 [ 893.201822][T31569] ? aa_sock_msg_perm+0xf1/0x1b0 [ 893.201849][T31569] ? __pfx_netlink_sendmsg+0x10/0x10 [ 893.201871][T31569] sock_sendmsg_nosec+0x13a/0x180 [ 893.201901][T31569] ____sys_sendmsg+0x54e/0x850 [ 893.201930][T31569] ? __pfx_____sys_sendmsg+0x10/0x10 [ 893.201963][T31569] ? import_iovec+0x73/0xa0 [ 893.201998][T31569] ___sys_sendmsg+0x2a5/0x360 [ 893.202018][T31569] ? __lock_acquire+0x683/0x2cf0 [ 893.202052][T31569] ? __pfx____sys_sendmsg+0x10/0x10 [ 893.202114][T31569] ? __fget_files+0x2a/0x420 [ 893.202140][T31569] ? __fget_files+0x3a2/0x420 [ 893.202178][T31569] __x64_sys_sendmsg+0x1b1/0x290 [ 893.202204][T31569] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 893.202245][T31569] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 893.202270][T31569] do_syscall_64+0x174/0x580 [ 893.202292][T31569] ? trace_irq_disable+0x3b/0x140 [ 893.202317][T31569] ? clear_bhb_loop+0x40/0x90 [ 893.202344][T31569] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 893.202363][T31569] RIP: 0033:0x7ffb4239de99 [ 893.202384][T31569] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 893.202402][T31569] RSP: 002b:00007ffb43262028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 893.202426][T31569] RAX: ffffffffffffffda RBX: 00007ffb42625fa0 RCX: 00007ffb4239de99 [ 893.202440][T31569] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 893.202453][T31569] RBP: 00007ffb43262090 R08: 0000000000000000 R09: 0000000000000000 [ 893.202465][T31569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 893.202477][T31569] R13: 00007ffb42626038 R14: 00007ffb42625fa0 R15: 00007ffcfb0d76c8 [ 893.202511][T31569] [ 893.520817][T31570] IPVS: using max 27 ests per chain, 64800 per kthread [ 893.588262][T31574] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8868'. [ 893.641541][T31576] netlink: 'syz.1.8868': attribute type 13 has an invalid length. [ 893.649485][T31576] netlink: 'syz.1.8868': attribute type 17 has an invalid length. [ 893.932391][T31593] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8873'. [ 894.183195][T31579] tipc: Resetting bearer [ 894.204523][T31574] bridge0: port 2(bridge_slave_1) entered disabled state [ 894.854534][T31613] FAULT_INJECTION: forcing a failure. [ 894.854534][T31613] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 894.869753][T31613] CPU: 0 UID: 0 PID: 31613 Comm: syz.4.8881 Not tainted syzkaller #0 PREEMPT(full) [ 894.869784][T31613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 894.869797][T31613] Call Trace: [ 894.869805][T31613] [ 894.869814][T31613] dump_stack_lvl+0xe8/0x150 [ 894.869850][T31613] should_fail_ex+0x40c/0x560 [ 894.869879][T31613] _copy_from_user+0x2d/0xb0 [ 894.869911][T31613] ___sys_sendmsg+0x1c6/0x360 [ 894.869933][T31613] ? __lock_acquire+0x683/0x2cf0 [ 894.869967][T31613] ? __pfx____sys_sendmsg+0x10/0x10 [ 894.869987][T31613] ? __lock_acquire+0x683/0x2cf0 [ 894.870017][T31613] ? kstrtouint+0x6e/0xe0 [ 894.870091][T31613] __sys_sendmmsg+0x273/0x4d0 [ 894.870118][T31613] ? __pfx___sys_sendmmsg+0x10/0x10 [ 894.870150][T31613] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 894.870188][T31613] ? ksys_write+0x242/0x270 [ 894.870222][T31613] ? __pfx_ksys_write+0x10/0x10 [ 894.870259][T31613] __x64_sys_sendmmsg+0xa0/0xc0 [ 894.870282][T31613] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 894.870305][T31613] do_syscall_64+0x174/0x580 [ 894.870327][T31613] ? trace_irq_disable+0x3b/0x140 [ 894.870352][T31613] ? clear_bhb_loop+0x40/0x90 [ 894.870376][T31613] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 894.870397][T31613] RIP: 0033:0x7ffb4239de99 [ 894.870417][T31613] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 894.870435][T31613] RSP: 002b:00007ffb43262028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 894.870457][T31613] RAX: ffffffffffffffda RBX: 00007ffb42625fa0 RCX: 00007ffb4239de99 [ 894.870472][T31613] RDX: 0492492492492627 RSI: 00002000000000c0 RDI: 0000000000000006 [ 894.870486][T31613] RBP: 00007ffb43262090 R08: 0000000000000000 R09: 0000000000000000 [ 894.870499][T31613] R10: 000000000000009e R11: 0000000000000246 R12: 0000000000000001 [ 894.870511][T31613] R13: 00007ffb42626038 R14: 00007ffb42625fa0 R15: 00007ffcfb0d76c8 [ 894.870544][T31613] [ 895.086897][T31617] batadv_slave_1: entered promiscuous mode [ 895.095699][T31615] batadv_slave_1: left promiscuous mode [ 895.157567][T31619] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8884'. [ 895.167668][T31619] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8884'. [ 895.329953][T31628] netlink: 'syz.4.8887': attribute type 13 has an invalid length. [ 895.358766][T31630] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 895.364545][T31628] netlink: 'syz.4.8887': attribute type 17 has an invalid length. [ 895.387404][T31628] batadv0: left promiscuous mode [ 895.406945][T31628] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 895.440590][T31628] bridge_slave_1: left allmulticast mode [ 895.783966][T31651] netlink: 'syz.1.8895': attribute type 1 has an invalid length. [ 895.793945][T23546] IPVS: starting estimator thread 0... [ 895.866612][T31657] syzkaller0: entered promiscuous mode [ 895.873004][T31657] syzkaller0: entered allmulticast mode [ 895.891000][T31653] IPVS: using max 28 ests per chain, 67200 per kthread [ 895.928870][T31657] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 896.227339][T31666] IPVS: length: 15 != 412268401592 [ 896.833576][T31697] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 897.130663][T31709] tipc: Enabled bearer , priority 0 [ 897.407485][T31708] tipc: Disabling bearer [ 897.715774][T31729] netlink: 'syz.2.8921': attribute type 3 has an invalid length. [ 897.728308][T31729] __nla_validate_parse: 6 callbacks suppressed [ 897.728327][T31729] netlink: 3 bytes leftover after parsing attributes in process `syz.2.8921'. [ 897.764788][T31738] netlink: 256 bytes leftover after parsing attributes in process `syz.3.8924'. [ 897.937711][T31745] netlink: 56 bytes leftover after parsing attributes in process `syz.1.8927'. [ 898.228910][T31761] FAULT_INJECTION: forcing a failure. [ 898.228910][T31761] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 898.245141][T31761] CPU: 1 UID: 0 PID: 31761 Comm: syz.2.8931 Not tainted syzkaller #0 PREEMPT(full) [ 898.245172][T31761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 898.245184][T31761] Call Trace: [ 898.245193][T31761] [ 898.245202][T31761] dump_stack_lvl+0xe8/0x150 [ 898.245242][T31761] should_fail_ex+0x40c/0x560 [ 898.245274][T31761] _copy_to_user+0x31/0xb0 [ 898.245312][T31761] simple_read_from_buffer+0xe1/0x170 [ 898.245347][T31761] proc_fail_nth_read+0x1bb/0x230 [ 898.245381][T31761] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 898.245413][T31761] ? rw_verify_area+0x24a/0x4c0 [ 898.245447][T31761] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 898.245474][T31761] vfs_read+0x213/0xa80 [ 898.245511][T31761] ? __pfx___mutex_lock+0x10/0x10 [ 898.245536][T31761] ? __pfx_vfs_read+0x10/0x10 [ 898.245567][T31761] ? __fget_files+0x2a/0x420 [ 898.245598][T31761] ? __fget_files+0x3a2/0x420 [ 898.245622][T31761] ? __fget_files+0x2a/0x420 [ 898.245656][T31761] ksys_read+0x150/0x270 [ 898.245690][T31761] ? __pfx_ksys_read+0x10/0x10 [ 898.245731][T31761] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 898.245755][T31761] do_syscall_64+0x174/0x580 [ 898.245780][T31761] ? clear_bhb_loop+0x40/0x90 [ 898.245805][T31761] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 898.245825][T31761] RIP: 0033:0x7fce7b15e6ce [ 898.245846][T31761] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 898.245863][T31761] RSP: 002b:00007fce7bfeefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 898.245884][T31761] RAX: ffffffffffffffda RBX: 00007fce7bfef6c0 RCX: 00007fce7b15e6ce [ 898.245899][T31761] RDX: 000000000000000f RSI: 00007fce7bfef0a0 RDI: 0000000000000005 [ 898.245912][T31761] RBP: 00007fce7bfef090 R08: 0000000000000000 R09: 0000000000000000 [ 898.245925][T31761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 898.245938][T31761] R13: 00007fce7b426038 R14: 00007fce7b425fa0 R15: 00007ffe1a840cd8 [ 898.245973][T31761] [ 898.433754][T31765] netlink: 256 bytes leftover after parsing attributes in process `syz.1.8933'. [ 898.517066][T31767] netlink: 292 bytes leftover after parsing attributes in process `syz.2.8934'. [ 898.624225][T31769] FAULT_INJECTION: forcing a failure. [ 898.624225][T31769] name failslab, interval 1, probability 0, space 0, times 0 [ 898.638612][T31769] CPU: 1 UID: 0 PID: 31769 Comm: syz.2.8936 Not tainted syzkaller #0 PREEMPT(full) [ 898.638641][T31769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 898.638653][T31769] Call Trace: [ 898.638662][T31769] [ 898.638672][T31769] dump_stack_lvl+0xe8/0x150 [ 898.638710][T31769] should_fail_ex+0x40c/0x560 [ 898.638741][T31769] should_failslab+0xa8/0x100 [ 898.638772][T31769] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 898.638797][T31769] ? local_lock_release+0x9c/0x160 [ 898.638828][T31769] ? __alloc_skb+0x1d7/0x7a0 [ 898.638854][T31769] ? __alloc_skb+0x1d7/0x7a0 [ 898.638890][T31769] __alloc_skb+0x1d7/0x7a0 [ 898.638926][T31769] netlink_ack+0x136/0xb30 [ 898.638946][T31769] ? __pfx_genl_rcv_msg+0x10/0x10 [ 898.638974][T31769] ? __pfx_nl80211_post_doit+0x10/0x10 [ 898.639003][T31769] ? __pfx_ref_tracker_free+0x10/0x10 [ 898.639042][T31769] netlink_rcv_skb+0x2a4/0x4a0 [ 898.639065][T31769] ? __pfx_genl_rcv_msg+0x10/0x10 [ 898.639094][T31769] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 898.639134][T31769] ? down_read+0x2be/0x330 [ 898.639164][T31769] genl_rcv+0x28/0x40 [ 898.639189][T31769] netlink_unicast+0x7bb/0x940 [ 898.639231][T31769] netlink_sendmsg+0x813/0xb40 [ 898.639266][T31769] ? __pfx_netlink_sendmsg+0x10/0x10 [ 898.639294][T31769] ? aa_sock_msg_perm+0xf1/0x1b0 [ 898.639329][T31769] ? __pfx_netlink_sendmsg+0x10/0x10 [ 898.639350][T31769] sock_sendmsg_nosec+0x13a/0x180 [ 898.639381][T31769] ____sys_sendmsg+0x54e/0x850 [ 898.639410][T31769] ? __pfx_____sys_sendmsg+0x10/0x10 [ 898.639442][T31769] ? import_iovec+0x73/0xa0 [ 898.639483][T31769] ___sys_sendmsg+0x2a5/0x360 [ 898.639504][T31769] ? __lock_acquire+0x683/0x2cf0 [ 898.639537][T31769] ? __pfx____sys_sendmsg+0x10/0x10 [ 898.639596][T31769] ? __fget_files+0x2a/0x420 [ 898.639622][T31769] ? __fget_files+0x3a2/0x420 [ 898.639658][T31769] __x64_sys_sendmsg+0x1b1/0x290 [ 898.639682][T31769] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 898.639723][T31769] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 898.639746][T31769] do_syscall_64+0x174/0x580 [ 898.639767][T31769] ? trace_irq_disable+0x3b/0x140 [ 898.639792][T31769] ? clear_bhb_loop+0x40/0x90 [ 898.639816][T31769] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 898.639836][T31769] RIP: 0033:0x7fce7b19de99 [ 898.639853][T31769] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 898.639870][T31769] RSP: 002b:00007fce7bfef028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 898.639893][T31769] RAX: ffffffffffffffda RBX: 00007fce7b425fa0 RCX: 00007fce7b19de99 [ 898.639907][T31769] RDX: 0000000000004040 RSI: 0000200000000800 RDI: 0000000000000004 [ 898.639919][T31769] RBP: 00007fce7bfef090 R08: 0000000000000000 R09: 0000000000000000 [ 898.639932][T31769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 898.639943][T31769] R13: 00007fce7b426038 R14: 00007fce7b425fa0 R15: 00007ffe1a840cd8 [ 898.639976][T31769] [ 899.143465][T31780] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8941'. [ 899.441321][T31793] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8946'. [ 899.482326][T31795] --map-set only usable from mangle table [ 899.516297][T31791] syzkaller0: entered promiscuous mode [ 899.530623][T31791] syzkaller0: entered allmulticast mode [ 899.708034][T31799] nbd5: detected capacity change from 0 to 127 [ 900.009182][T31817] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.8952'. [ 900.602800][T25709] block nbd5: Receive control failed (result -104) [ 900.605257][T31837] FAULT_INJECTION: forcing a failure. [ 900.605257][T31837] name failslab, interval 1, probability 0, space 0, times 0 [ 900.657221][T31837] CPU: 1 UID: 0 PID: 31837 Comm: syz.3.8961 Not tainted syzkaller #0 PREEMPT(full) [ 900.657253][T31837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 900.657266][T31837] Call Trace: [ 900.657275][T31837] [ 900.657284][T31837] dump_stack_lvl+0xe8/0x150 [ 900.657321][T31837] should_fail_ex+0x40c/0x560 [ 900.657352][T31837] should_failslab+0xa8/0x100 [ 900.657385][T31837] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 900.657411][T31837] ? skb_clone+0x212/0x3a0 [ 900.657433][T31837] ? skb_clone+0x212/0x3a0 [ 900.657463][T31837] skb_clone+0x212/0x3a0 [ 900.657490][T31837] __netlink_deliver_tap+0x413/0x860 [ 900.657528][T31837] ? netlink_deliver_tap+0x2e/0x1b0 [ 900.657552][T31837] netlink_deliver_tap+0x19c/0x1b0 [ 900.657576][T31837] netlink_sendskb+0x68/0x140 [ 900.657611][T31837] netlink_rcv_skb+0x2a4/0x4a0 [ 900.657634][T31837] ? __pfx_genl_rcv_msg+0x10/0x10 [ 900.657666][T31837] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 900.657710][T31837] ? down_read+0x2be/0x330 [ 900.657742][T31837] genl_rcv+0x28/0x40 [ 900.657767][T31837] netlink_unicast+0x7bb/0x940 [ 900.657813][T31837] netlink_sendmsg+0x813/0xb40 [ 900.657848][T31837] ? __pfx_netlink_sendmsg+0x10/0x10 [ 900.657877][T31837] ? aa_sock_msg_perm+0xf1/0x1b0 [ 900.657904][T31837] ? __pfx_netlink_sendmsg+0x10/0x10 [ 900.657925][T31837] sock_sendmsg_nosec+0x13a/0x180 [ 900.657956][T31837] ____sys_sendmsg+0x54e/0x850 [ 900.657983][T31837] ? __pfx_____sys_sendmsg+0x10/0x10 [ 900.658016][T31837] ? import_iovec+0x73/0xa0 [ 900.658050][T31837] ___sys_sendmsg+0x2a5/0x360 [ 900.658079][T31837] ? __lock_acquire+0x683/0x2cf0 [ 900.658110][T31837] ? __pfx____sys_sendmsg+0x10/0x10 [ 900.658175][T31837] ? __fget_files+0x2a/0x420 [ 900.658200][T31837] ? __fget_files+0x3a2/0x420 [ 900.658240][T31837] __x64_sys_sendmsg+0x1b1/0x290 [ 900.658266][T31837] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 900.658309][T31837] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 900.658333][T31837] do_syscall_64+0x174/0x580 [ 900.658354][T31837] ? trace_irq_disable+0x3b/0x140 [ 900.658380][T31837] ? clear_bhb_loop+0x40/0x90 [ 900.658406][T31837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 900.658427][T31837] RIP: 0033:0x7f9a3199de99 [ 900.658448][T31837] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 900.658464][T31837] RSP: 002b:00007f9a3294d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 900.658488][T31837] RAX: ffffffffffffffda RBX: 00007f9a31c25fa0 RCX: 00007f9a3199de99 [ 900.658503][T31837] RDX: 0000000004000050 RSI: 0000200000000480 RDI: 0000000000000003 [ 900.658516][T31837] RBP: 00007f9a3294d090 R08: 0000000000000000 R09: 0000000000000000 [ 900.658529][T31837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 900.658542][T31837] R13: 00007f9a31c26038 R14: 00007f9a31c25fa0 R15: 00007ffeffdbd7b8 [ 900.658576][T31837] [ 901.177876][T31848] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.8965'. [ 901.190682][T31852] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8964'. [ 901.556766][T31871] xt_hashlimit: max too large, truncated to 1048576 [ 901.597837][T31871] xt_hashlimit: overflow, try lower: 17592186044421/511 [ 901.804373][T31890] FAULT_INJECTION: forcing a failure. [ 901.804373][T31890] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 901.825761][T31890] CPU: 0 UID: 0 PID: 31890 Comm: syz.3.8979 Not tainted syzkaller #0 PREEMPT(full) [ 901.825792][T31890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 901.825803][T31890] Call Trace: [ 901.825812][T31890] [ 901.825822][T31890] dump_stack_lvl+0xe8/0x150 [ 901.825860][T31890] should_fail_ex+0x40c/0x560 [ 901.825891][T31890] _copy_to_iter+0x59c/0x1810 [ 901.825917][T31890] ? arch_stack_walk+0xfb/0x150 [ 901.825954][T31890] ? __pfx__copy_to_iter+0x10/0x10 [ 901.825978][T31890] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 901.826004][T31890] ? lockdep_hardirqs_on+0x7a/0x110 [ 901.826021][T31890] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 901.826046][T31890] ? __skb_try_recv_datagram+0x3de/0x4e0 [ 901.826074][T31890] __skb_datagram_iter+0xf8/0x980 [ 901.826099][T31890] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 901.826130][T31890] skb_copy_datagram_iter+0xb5/0x240 [ 901.826157][T31890] netlink_recvmsg+0x2b9/0xa50 [ 901.826190][T31890] ? __pfx_netlink_recvmsg+0x10/0x10 [ 901.826220][T31890] ? aa_sock_msg_perm+0xf1/0x1b0 [ 901.826244][T31890] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 901.826264][T31890] ? security_socket_recvmsg+0x7e/0x2c0 [ 901.826290][T31890] ? __pfx_netlink_recvmsg+0x10/0x10 [ 901.826314][T31890] sock_recvmsg+0x196/0x1e0 [ 901.826345][T31890] ____sys_recvmsg+0x1e6/0x4a0 [ 901.826366][T31890] ? iovec_from_user+0x87/0x250 [ 901.826404][T31890] ? __pfx_____sys_recvmsg+0x10/0x10 [ 901.826443][T31890] ? import_iovec+0x73/0xa0 [ 901.826492][T31890] ___sys_recvmsg+0x213/0x5a0 [ 901.826514][T31890] ? ktime_get_ts64+0xa9/0x410 [ 901.826546][T31890] ? __pfx____sys_recvmsg+0x10/0x10 [ 901.826575][T31890] ? __fget_files+0x2a/0x420 [ 901.826621][T31890] ? __fget_files+0x3a2/0x420 [ 901.826659][T31890] do_recvmmsg+0x31a/0x7f0 [ 901.826691][T31890] ? __pfx_do_recvmmsg+0x10/0x10 [ 901.826729][T31890] ? get_timespec64+0x119/0x1b0 [ 901.826758][T31890] ? __pfx_get_timespec64+0x10/0x10 [ 901.826799][T31890] __x64_sys_recvmmsg+0x1b7/0x250 [ 901.826826][T31890] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 901.826859][T31890] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 901.826882][T31890] do_syscall_64+0x174/0x580 [ 901.826904][T31890] ? trace_irq_disable+0x3b/0x140 [ 901.826930][T31890] ? clear_bhb_loop+0x40/0x90 [ 901.826955][T31890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 901.826981][T31890] RIP: 0033:0x7f9a3199de99 [ 901.827002][T31890] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 901.827020][T31890] RSP: 002b:00007f9a3294d028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 901.827044][T31890] RAX: ffffffffffffffda RBX: 00007f9a31c25fa0 RCX: 00007f9a3199de99 [ 901.827059][T31890] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000004 [ 901.827074][T31890] RBP: 00007f9a3294d090 R08: 0000200000003700 R09: 0000000000000000 [ 901.827088][T31890] R10: 0000000002040000 R11: 0000000000000246 R12: 0000000000000001 [ 901.827102][T31890] R13: 00007f9a31c26038 R14: 00007f9a31c25fa0 R15: 00007ffeffdbd7b8 [ 901.827135][T31890] [ 902.390439][T25709] Bluetooth: hci2: link tx timeout [ 902.396769][T25709] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 902.818607][T31918] __nla_validate_parse: 1 callbacks suppressed [ 902.818627][T31918] netlink: 56 bytes leftover after parsing attributes in process `syz.4.8990'. [ 902.835491][T31918] FAULT_INJECTION: forcing a failure. [ 902.835491][T31918] name failslab, interval 1, probability 0, space 0, times 0 [ 902.861872][T31918] CPU: 1 UID: 0 PID: 31918 Comm: syz.4.8990 Not tainted syzkaller #0 PREEMPT(full) [ 902.861903][T31918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 902.861915][T31918] Call Trace: [ 902.861923][T31918] [ 902.861933][T31918] dump_stack_lvl+0xe8/0x150 [ 902.861980][T31918] should_fail_ex+0x40c/0x560 [ 902.862009][T31918] should_failslab+0xa8/0x100 [ 902.862040][T31918] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 902.862062][T31918] ? local_lock_release+0x9c/0x160 [ 902.862096][T31918] ? __alloc_skb+0x1d7/0x7a0 [ 902.862122][T31918] ? __alloc_skb+0x1d7/0x7a0 [ 902.862157][T31918] __alloc_skb+0x1d7/0x7a0 [ 902.862185][T31918] netlink_ack+0x136/0xb30 [ 902.862203][T31918] ? __pfx_genl_rcv_msg+0x10/0x10 [ 902.862228][T31918] ? __pfx_nl80211_post_doit+0x10/0x10 [ 902.862258][T31918] ? __pfx_ref_tracker_free+0x10/0x10 [ 902.862295][T31918] netlink_rcv_skb+0x2a4/0x4a0 [ 902.862318][T31918] ? __pfx_genl_rcv_msg+0x10/0x10 [ 902.862347][T31918] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 902.862385][T31918] ? down_read+0x2be/0x330 [ 902.862412][T31918] genl_rcv+0x28/0x40 [ 902.862437][T31918] netlink_unicast+0x7bb/0x940 [ 902.862479][T31918] netlink_sendmsg+0x813/0xb40 [ 902.862512][T31918] ? __pfx_netlink_sendmsg+0x10/0x10 [ 902.862538][T31918] ? aa_sock_msg_perm+0xf1/0x1b0 [ 902.862565][T31918] ? __pfx_netlink_sendmsg+0x10/0x10 [ 902.862585][T31918] sock_sendmsg_nosec+0x13a/0x180 [ 902.862615][T31918] ____sys_sendmsg+0x54e/0x850 [ 902.862642][T31918] ? __pfx_____sys_sendmsg+0x10/0x10 [ 902.862673][T31918] ? import_iovec+0x73/0xa0 [ 902.862706][T31918] ___sys_sendmsg+0x2a5/0x360 [ 902.862725][T31918] ? __lock_acquire+0x683/0x2cf0 [ 902.862758][T31918] ? __pfx____sys_sendmsg+0x10/0x10 [ 902.862816][T31918] ? __fget_files+0x2a/0x420 [ 902.862842][T31918] ? __fget_files+0x3a2/0x420 [ 902.862878][T31918] __x64_sys_sendmsg+0x1b1/0x290 [ 902.862902][T31918] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 902.862943][T31918] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 902.862974][T31918] do_syscall_64+0x174/0x580 [ 902.862994][T31918] ? trace_irq_disable+0x3b/0x140 [ 902.863018][T31918] ? clear_bhb_loop+0x40/0x90 [ 902.863043][T31918] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 902.863064][T31918] RIP: 0033:0x7ffb4239de99 [ 902.863082][T31918] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 902.863100][T31918] RSP: 002b:00007ffb43262028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 902.863124][T31918] RAX: ffffffffffffffda RBX: 00007ffb42625fa0 RCX: 00007ffb4239de99 [ 902.863139][T31918] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000003 [ 902.863186][T31918] RBP: 00007ffb43262090 R08: 0000000000000000 R09: 0000000000000000 [ 902.863199][T31918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 902.863218][T31918] R13: 00007ffb42626038 R14: 00007ffb42625fa0 R15: 00007ffcfb0d76c8 [ 902.863252][T31918] [ 903.246136][ T1698] block nbd5: Connection timed out, retrying (0/1 alive) [ 903.272565][ T1698] block nbd5: Connection timed out, retrying (0/1 alive) [ 903.279702][ T1698] block nbd5: Connection timed out, retrying (0/1 alive) [ 903.296344][ T1698] block nbd5: Dead connection, failed to find a fallback [ 903.312945][ T1698] block nbd5: shutting down sockets [ 903.327914][ T1698] I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x0 phys_seg 2 prio class 2 [ 903.339510][ T1698] Buffer I/O error on dev nbd5, logical block 2, async page read [ 903.349052][ T1698] Buffer I/O error on dev nbd5, logical block 3, async page read [ 903.357293][ T1698] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 903.366535][ T1698] Buffer I/O error on dev nbd5, logical block 1, async page read [ 903.374871][ T1698] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 903.384592][ T1698] Buffer I/O error on dev nbd5, logical block 0, async page read [ 903.394574][ T1698] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 903.406217][ T1698] Buffer I/O error on dev nbd5, logical block 0, async page read [ 903.414872][ T1698] Buffer I/O error on dev nbd5, logical block 1, async page read [ 903.422947][ T1698] Buffer I/O error on dev nbd5, logical block 2, async page read [ 903.431830][ T1698] Buffer I/O error on dev nbd5, logical block 3, async page read [ 903.441918][ T1698] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 903.451861][ T1698] Buffer I/O error on dev nbd5, logical block 0, async page read [ 903.459676][ T1698] Buffer I/O error on dev nbd5, logical block 1, async page read [ 903.467801][ T1698] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 903.479110][ T1698] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 903.491232][ T1698] I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 903.493294][T31928] FAULT_INJECTION: forcing a failure. [ 903.493294][T31928] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 903.503060][ T1698] I/O error, dev nbd5, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 903.523072][ T1698] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 903.536464][T31443] ldm_validate_partition_table(): Disk read failed. [ 903.546711][T31443] Dev nbd5: unable to read RDB block 0 [ 903.555141][T31443] nbd5: unable to read partition table [ 903.576976][T31443] ldm_validate_partition_table(): Disk read failed. [ 903.594291][T31443] Dev nbd5: unable to read RDB block 0 [ 903.606192][T31443] nbd5: unable to read partition table [ 903.627972][T31932] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8995'. [ 903.637967][T31928] CPU: 0 UID: 0 PID: 31928 Comm: syz.3.8992 Not tainted syzkaller #0 PREEMPT(full) [ 903.637997][T31928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 903.638009][T31928] Call Trace: [ 903.638018][T31928] [ 903.638026][T31928] dump_stack_lvl+0xe8/0x150 [ 903.638064][T31928] should_fail_ex+0x40c/0x560 [ 903.638095][T31928] _copy_to_user+0x31/0xb0 [ 903.638128][T31928] simple_read_from_buffer+0xe1/0x170 [ 903.638162][T31928] proc_fail_nth_read+0x1bb/0x230 [ 903.638193][T31928] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 903.638224][T31928] ? rw_verify_area+0x24a/0x4c0 [ 903.638255][T31928] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 903.638286][T31928] vfs_read+0x213/0xa80 [ 903.638320][T31928] ? __pfx___mutex_lock+0x10/0x10 [ 903.638344][T31928] ? __pfx_vfs_read+0x10/0x10 [ 903.638377][T31928] ? __fget_files+0x2a/0x420 [ 903.638407][T31928] ? __fget_files+0x3a2/0x420 [ 903.638431][T31928] ? __fget_files+0x2a/0x420 [ 903.638472][T31928] ksys_read+0x150/0x270 [ 903.638506][T31928] ? __pfx_ksys_read+0x10/0x10 [ 903.638544][T31928] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 903.638567][T31928] do_syscall_64+0x174/0x580 [ 903.638587][T31928] ? trace_irq_disable+0x3b/0x140 [ 903.638613][T31928] ? clear_bhb_loop+0x40/0x90 [ 903.638638][T31928] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 903.638660][T31928] RIP: 0033:0x7f9a3195e6ce [ 903.638680][T31928] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 903.638697][T31928] RSP: 002b:00007f9a3292bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 903.638720][T31928] RAX: ffffffffffffffda RBX: 00007f9a3292c6c0 RCX: 00007f9a3195e6ce [ 903.638734][T31928] RDX: 000000000000000f RSI: 00007f9a3292c0a0 RDI: 0000000000000005 [ 903.638747][T31928] RBP: 00007f9a3292c090 R08: 0000000000000000 R09: 0000000000000000 [ 903.638760][T31928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 903.638772][T31928] R13: 00007f9a31c26128 R14: 00007f9a31c26090 R15: 00007ffeffdbd7b8 [ 903.638806][T31928] [ 904.461399][ T5632] Bluetooth: hci2: command 0x0405 tx timeout [ 904.480406][T25709] [ 904.482776][T25709] ====================================================== [ 904.489829][T25709] WARNING: possible circular locking dependency detected [ 904.496892][T25709] syzkaller #0 Not tainted [ 904.501310][T25709] ------------------------------------------------------ [ 904.508346][T25709] kworker/u9:0/25709 is trying to acquire lock: [ 904.514582][T25709] ffff88801c295180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x4e/0x140 [ 904.525003][T25709] [ 904.525003][T25709] but task is already holding lock: [ 904.532361][T25709] ffff88801c2952a0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3f/0x140 [ 904.543254][T25709] [ 904.543254][T25709] which lock already depends on the new lock. [ 904.543254][T25709] [ 904.553669][T25709] [ 904.553669][T25709] the existing dependency chain (in reverse order) is: [ 904.562687][T25709] [ 904.562687][T25709] -> #12 (&root->kernfs_supers_rwsem){++++}-{4:4}: [ 904.571462][T25709] down_read+0x4a/0x330 [ 904.576148][T25709] kernfs_remove_by_name_ns+0x3f/0x140 [ 904.582141][T25709] internal_create_group+0x58e/0x1180 [ 904.588035][T25709] sysfs_update_groups+0x60/0x130 [ 904.593587][T25709] pmu_dev_alloc+0x29b/0x300 [ 904.598701][T25709] perf_event_sysfs_init+0x76/0x100 [ 904.604508][T25709] do_one_initcall+0x250/0x870 [ 904.609798][T25709] do_initcall_level+0x10a/0x1a0 [ 904.615303][T25709] do_initcalls+0x59/0xa0 [ 904.620182][T25709] kernel_init_freeable+0x29d/0x3e0 [ 904.625902][T25709] kernel_init+0x1d/0x1d0 [ 904.630762][T25709] ret_from_fork+0x514/0xb70 [ 904.635883][T25709] ret_from_fork_asm+0x1a/0x30 [ 904.641187][T25709] [ 904.641187][T25709] -> #11 (pmus_lock){+.+.}-{4:4}: [ 904.648399][T25709] __mutex_lock+0x19d/0x1550 [ 904.653520][T25709] perf_event_init_cpu+0x1d1/0x7a0 [ 904.659158][T25709] cpuhp_invoke_callback+0x434/0x810 [ 904.664967][T25709] cpuhp_thread_fun+0x362/0x780 [ 904.670342][T25709] smpboot_thread_fn+0x57c/0xa80 [ 904.675805][T25709] kthread+0x388/0x470 [ 904.680400][T25709] ret_from_fork+0x514/0xb70 [ 904.685523][T25709] ret_from_fork_asm+0x1a/0x30 [ 904.690810][T25709] [ 904.690810][T25709] -> #10 (cpuhp_state-up){+.+.}-{0:0}: [ 904.698458][T25709] cpuhp_thread_fun+0x127/0x780 [ 904.703833][T25709] smpboot_thread_fn+0x57c/0xa80 [ 904.709296][T25709] kthread+0x388/0x470 [ 904.713900][T25709] ret_from_fork+0x514/0xb70 [ 904.719015][T25709] ret_from_fork_asm+0x1a/0x30 [ 904.724296][T25709] [ 904.724296][T25709] -> #9 (cpu_hotplug_lock){++++}-{0:0}: [ 904.732028][T25709] cpus_read_lock+0x42/0x160 [ 904.737138][T25709] static_key_slow_inc+0x12/0x30 [ 904.742601][T25709] setup_udp_tunnel_sock+0x2df/0x4f0 [ 904.748460][T25709] l2tp_tunnel_register+0xe77/0x1570 [ 904.754320][T25709] pppol2tp_connect+0x8e3/0x18b0 [ 904.759781][T25709] __sys_connect+0x323/0x460 [ 904.764898][T25709] __x64_sys_connect+0x7a/0x90 [ 904.770191][T25709] do_syscall_64+0x174/0x580 [ 904.775299][T25709] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 904.781715][T25709] [ 904.781715][T25709] -> #8 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 904.789447][T25709] lock_sock_nested+0x41/0x100 [ 904.794734][T25709] tls_sw_sendmsg+0x161/0x2860 [ 904.800066][T25709] sock_sendmsg_nosec+0x90/0x180 [ 904.805526][T25709] sock_write_iter+0x2de/0x3e0 [ 904.810815][T25709] do_iter_readv_writev+0x612/0x8c0 [ 904.816532][T25709] vfs_writev+0x343/0x990 [ 904.821381][T25709] do_writev+0x154/0x2e0 [ 904.826147][T25709] do_syscall_64+0x174/0x580 [ 904.831259][T25709] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 904.837670][T25709] [ 904.837670][T25709] -> #7 (&ctx->tx_lock){+.+.}-{4:4}: [ 904.845139][T25709] __mutex_lock+0x19d/0x1550 [ 904.850249][T25709] tls_sw_sendmsg+0x13c/0x2860 [ 904.855536][T25709] sock_sendmsg_nosec+0x90/0x180 [ 904.861000][T25709] sock_sendmsg+0x1ca/0x2d0 [ 904.866028][T25709] __sock_xmit+0x245/0x4f0 [ 904.871021][T25709] nbd_disconnect+0x3ad/0x560 [ 904.876236][T25709] nbd_disconnect_and_put+0x32/0x280 [ 904.882040][T25709] nbd_genl_disconnect+0x4af/0x590 [ 904.887723][T25709] genl_family_rcv_msg_doit+0x233/0x340 [ 904.893793][T25709] genl_rcv_msg+0x614/0x7a0 [ 904.898820][T25709] netlink_rcv_skb+0x226/0x4a0 [ 904.904106][T25709] genl_rcv+0x28/0x40 [ 904.908610][T25709] netlink_unicast+0x7bb/0x940 [ 904.913913][T25709] netlink_sendmsg+0x813/0xb40 [ 904.919198][T25709] sock_sendmsg_nosec+0x13a/0x180 [ 904.924744][T25709] ____sys_sendmsg+0x54e/0x850 [ 904.930028][T25709] ___sys_sendmsg+0x2a5/0x360 [ 904.935222][T25709] __x64_sys_sendmsg+0x1b1/0x290 [ 904.940676][T25709] do_syscall_64+0x174/0x580 [ 904.945793][T25709] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 904.952207][T25709] [ 904.952207][T25709] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 904.959856][T25709] __mutex_lock+0x19d/0x1550 [ 904.964970][T25709] nbd_queue_rq+0x373/0x1150 [ 904.970182][T25709] blk_mq_dispatch_rq_list+0x499/0x1990 [ 904.976316][T25709] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 904.983203][T25709] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 904.989707][T25709] blk_mq_run_work_fn+0x16c/0x300 [ 904.995249][T25709] process_scheduled_works+0xa8e/0x14e0 [ 905.001321][T25709] worker_thread+0xa47/0xfb0 [ 905.006434][T25709] kthread+0x388/0x470 [ 905.011025][T25709] ret_from_fork+0x514/0xb70 [ 905.016143][T25709] ret_from_fork_asm+0x1a/0x30 [ 905.021425][T25709] [ 905.021425][T25709] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 905.028636][T25709] __mutex_lock+0x19d/0x1550 [ 905.033746][T25709] nbd_queue_rq+0xc1/0x1150 [ 905.038781][T25709] blk_mq_dispatch_rq_list+0x499/0x1990 [ 905.044850][T25709] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 905.051704][T25709] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 905.058215][T25709] blk_mq_run_work_fn+0x16c/0x300 [ 905.063758][T25709] process_scheduled_works+0xa8e/0x14e0 [ 905.069825][T25709] worker_thread+0xa47/0xfb0 [ 905.074936][T25709] kthread+0x388/0x470 [ 905.079528][T25709] ret_from_fork+0x514/0xb70 [ 905.084640][T25709] ret_from_fork_asm+0x1a/0x30 [ 905.089927][T25709] [ 905.089927][T25709] -> #4 (set->srcu){.+.+}-{0:0}: [ 905.097049][T25709] __synchronize_srcu+0xc9/0x2f0 [ 905.102513][T25709] elevator_switch+0x1e8/0x7b0 [ 905.107839][T25709] elevator_change+0x2fa/0x480 [ 905.113365][T25709] elevator_set_default+0x375/0x440 [ 905.119106][T25709] blk_register_queue+0x3f3/0x4e0 [ 905.124718][T25709] __add_disk+0x6cb/0xe30 [ 905.129599][T25709] add_disk_fwnode+0x100/0x3a0 [ 905.134897][T25709] nbd_dev_add+0x733/0xb60 [ 905.139846][T25709] nbd_init+0x15f/0x1e0 [ 905.144591][T25709] do_one_initcall+0x250/0x870 [ 905.149973][T25709] do_initcall_level+0x10a/0x1a0 [ 905.155433][T25709] do_initcalls+0x59/0xa0 [ 905.160286][T25709] kernel_init_freeable+0x29d/0x3e0 [ 905.166006][T25709] kernel_init+0x1d/0x1d0 [ 905.170869][T25709] ret_from_fork+0x514/0xb70 [ 905.175993][T25709] ret_from_fork_asm+0x1a/0x30 [ 905.181277][T25709] [ 905.181277][T25709] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 905.189101][T25709] __mutex_lock+0x19d/0x1550 [ 905.194214][T25709] elevator_change+0x1af/0x480 [ 905.199502][T25709] elevator_set_none+0xb5/0x140 [ 905.204873][T25709] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 905.211210][T25709] nbd_start_device+0x189/0xb30 [ 905.216586][T25709] nbd_genl_connect+0x1597/0x1c10 [ 905.222135][T25709] genl_family_rcv_msg_doit+0x233/0x340 [ 905.228207][T25709] genl_rcv_msg+0x614/0x7a0 [ 905.233232][T25709] netlink_rcv_skb+0x226/0x4a0 [ 905.238514][T25709] genl_rcv+0x28/0x40 [ 905.243022][T25709] netlink_unicast+0x7bb/0x940 [ 905.248312][T25709] netlink_sendmsg+0x813/0xb40 [ 905.253594][T25709] sock_sendmsg_nosec+0x13a/0x180 [ 905.259141][T25709] ____sys_sendmsg+0x54e/0x850 [ 905.264424][T25709] ___sys_sendmsg+0x2a5/0x360 [ 905.269623][T25709] __x64_sys_sendmsg+0x1b1/0x290 [ 905.275081][T25709] do_syscall_64+0x174/0x580 [ 905.280193][T25709] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 905.286605][T25709] [ 905.286605][T25709] -> #2 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 905.295219][T25709] blk_alloc_queue+0x544/0x690 [ 905.300505][T25709] __blk_mq_alloc_disk+0x194/0x390 [ 905.306141][T25709] nbd_dev_add+0x494/0xb60 [ 905.311085][T25709] nbd_init+0x15f/0x1e0 [ 905.315765][T25709] do_one_initcall+0x250/0x870 [ 905.321057][T25709] do_initcall_level+0x10a/0x1a0 [ 905.326777][T25709] do_initcalls+0x59/0xa0 [ 905.331628][T25709] kernel_init_freeable+0x29d/0x3e0 [ 905.337347][T25709] kernel_init+0x1d/0x1d0 [ 905.342202][T25709] ret_from_fork+0x514/0xb70 [ 905.347318][T25709] ret_from_fork_asm+0x1a/0x30 [ 905.352622][T25709] [ 905.352622][T25709] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 905.359840][T25709] fs_reclaim_acquire+0x71/0x100 [ 905.365316][T25709] kmem_cache_alloc_lru_noprof+0x65/0x5f0 [ 905.371578][T25709] alloc_inode+0xb8/0x1b0 [ 905.376446][T25709] iget_locked+0x131/0x6a0 [ 905.381399][T25709] kernfs_get_inode+0x4f/0x770 [ 905.386696][T25709] kernfs_get_tree+0x5cd/0x980 [ 905.391992][T25709] vfs_get_tree+0x92/0x2a0 [ 905.396929][T25709] do_new_mount+0x319/0xdc0 [ 905.401955][T25709] __se_sys_mount+0x31d/0x420 [ 905.407158][T25709] do_syscall_64+0x174/0x580 [ 905.412267][T25709] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 905.418679][T25709] [ 905.418679][T25709] -> #0 (&root->kernfs_rwsem){++++}-{4:4}: [ 905.426676][T25709] __lock_acquire+0x1520/0x2cf0 [ 905.432065][T25709] lock_acquire+0x106/0x350 [ 905.437114][T25709] down_write+0x96/0x200 [ 905.441890][T25709] kernfs_remove_by_name_ns+0x4e/0x140 [ 905.447922][T25709] sysfs_unmerge_group+0xd3/0x140 [ 905.453480][T25709] dpm_sysfs_remove+0x5f/0xd0 [ 905.458737][T25709] device_del+0x250/0x8f0 [ 905.463586][T25709] device_unregister+0x21/0xf0 [ 905.468868][T25709] hci_conn_del+0xc3d/0x1200 [ 905.474097][T25709] hci_abort_conn_sync+0xdd0/0x1190 [ 905.479898][T25709] hci_cmd_sync_work+0x20b/0x3f0 [ 905.485356][T25709] process_scheduled_works+0xa8e/0x14e0 [ 905.491425][T25709] worker_thread+0xa47/0xfb0 [ 905.496551][T25709] kthread+0x388/0x470 [ 905.501165][T25709] ret_from_fork+0x514/0xb70 [ 905.506293][T25709] ret_from_fork_asm+0x1a/0x30 [ 905.511597][T25709] [ 905.511597][T25709] other info that might help us debug this: [ 905.511597][T25709] [ 905.521827][T25709] Chain exists of: [ 905.521827][T25709] &root->kernfs_rwsem --> pmus_lock --> &root->kernfs_supers_rwsem [ 905.521827][T25709] [ 905.535651][T25709] Possible unsafe locking scenario: [ 905.535651][T25709] [ 905.543152][T25709] CPU0 CPU1 [ 905.548543][T25709] ---- ---- [ 905.553902][T25709] rlock(&root->kernfs_supers_rwsem); [ 905.559364][T25709] lock(pmus_lock); [ 905.565789][T25709] lock(&root->kernfs_supers_rwsem); [ 905.573709][T25709] lock(&root->kernfs_rwsem); [ 905.578490][T25709] [ 905.578490][T25709] *** DEADLOCK *** [ 905.578490][T25709] [ 905.586634][T25709] 5 locks held by kworker/u9:0/25709: [ 905.592002][T25709] #0: ffff88801b1ea940 ((wq_completion)hci2){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 905.602985][T25709] #1: ffffc9000347fc40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 905.615541][T25709] #2: ffff888029d44ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1cb/0x3f0 [ 905.625398][T25709] #3: ffff888029d440b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0xa6f/0x1190 [ 905.635163][T25709] #4: ffff88801c2952a0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3f/0x140 [ 905.646486][T25709] [ 905.646486][T25709] stack backtrace: [ 905.652377][T25709] CPU: 0 UID: 0 PID: 25709 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT(full) [ 905.652396][T25709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 905.652407][T25709] Workqueue: hci2 hci_cmd_sync_work [ 905.652432][T25709] Call Trace: [ 905.652442][T25709] [ 905.652450][T25709] dump_stack_lvl+0xe8/0x150 [ 905.652473][T25709] print_circular_bug+0x2e1/0x300 [ 905.652490][T25709] check_noncircular+0x12e/0x150 [ 905.652516][T25709] __lock_acquire+0x1520/0x2cf0 [ 905.652538][T25709] ? __lock_acquire+0x13e8/0x2cf0 [ 905.652563][T25709] ? kernfs_remove_by_name_ns+0x4e/0x140 [ 905.652585][T25709] lock_acquire+0x106/0x350 [ 905.652611][T25709] ? kernfs_remove_by_name_ns+0x4e/0x140 [ 905.652638][T25709] down_write+0x96/0x200 [ 905.652656][T25709] ? kernfs_remove_by_name_ns+0x4e/0x140 [ 905.652678][T25709] ? __pfx_down_write+0x10/0x10 [ 905.652698][T25709] kernfs_remove_by_name_ns+0x4e/0x140 [ 905.652723][T25709] sysfs_unmerge_group+0xd3/0x140 [ 905.652744][T25709] dpm_sysfs_remove+0x5f/0xd0 [ 905.652763][T25709] device_del+0x250/0x8f0 [ 905.652777][T25709] ? klist_iter_exit+0xc1/0x100 [ 905.652798][T25709] ? work_grab_pending+0x3d1/0x930 [ 905.652817][T25709] ? __pfx_device_del+0x10/0x10 [ 905.652832][T25709] ? lockdep_hardirqs_on+0x7a/0x110 [ 905.652849][T25709] device_unregister+0x21/0xf0 [ 905.652864][T25709] hci_conn_del+0xc3d/0x1200 [ 905.652886][T25709] ? hci_abort_conn_sync+0xa7b/0x1190 [ 905.652907][T25709] hci_abort_conn_sync+0xdd0/0x1190 [ 905.652931][T25709] ? __pfx_hci_abort_conn_sync+0x10/0x10 [ 905.652954][T25709] ? abort_conn_sync+0x26/0x210 [ 905.653025][T25709] ? abort_conn_sync+0x26/0x210 [ 905.653038][T25709] ? abort_conn_sync+0x19c/0x210 [ 905.653052][T25709] ? __pfx_abort_conn_sync+0x10/0x10 [ 905.653066][T25709] hci_cmd_sync_work+0x20b/0x3f0 [ 905.653084][T25709] ? process_scheduled_works+0xa20/0x14e0 [ 905.653101][T25709] process_scheduled_works+0xa8e/0x14e0 [ 905.653125][T25709] ? __pfx_process_scheduled_works+0x10/0x10 [ 905.653145][T25709] ? assign_work+0x3cf/0x5d0 [ 905.653162][T25709] worker_thread+0xa47/0xfb0 [ 905.653183][T25709] ? __kthread_parkme+0x71/0x1f0 [ 905.653204][T25709] kthread+0x388/0x470 [ 905.653225][T25709] ? __pfx_worker_thread+0x10/0x10 [ 905.653241][T25709] ? __pfx_kthread+0x10/0x10 [ 905.653261][T25709] ret_from_fork+0x514/0xb70 [ 905.653283][T25709] ? __pfx_ret_from_fork+0x10/0x10 [ 905.653304][T25709] ? __switch_to+0xc89/0x1420 [ 905.653322][T25709] ? __pfx_kthread+0x10/0x10 [ 905.653342][T25709] ret_from_fork_asm+0x1a/0x30 [ 905.653361][T25709] [ 905.927043][T31958] netlink: 60 bytes leftover after parsing attributes in process `syz.4.9004'.