last executing test programs: 5m40.406419599s ago: executing program 1 (id=12634): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r1, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e23, 0x80000, @dev={0xfe, 0x80, '\x00', 0x3a}, 0xfffe}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000029"], 0x18}, 0x40) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, 0x0, 0x845) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) socket$netlink(0x10, 0x3, 0x14) sendmsg$can_bcm(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) r6 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) r7 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r7, &(0x7f0000000380)={0x1d, r8, 0x1, {0x0, 0x0, 0x1}, 0xfd}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x1, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x8}, {0x7, 0xf}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x44060}, 0x98) 5m39.124052067s ago: executing program 1 (id=12638): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, 0x0, 0x0, 0x6, 0x0, 0x0, 0x41100, 0x8}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f00000002c0)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x10, r0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x148, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_PARMS={0x14, 0x1, {0x3f26, 0x5, 0x3, 0x1f, 0xb, 0x14, 0x5}}]}}]}, 0x148}}, 0x4000010) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r0, 0x58, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vxcan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r5) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r7, 0x48212b8952c3aff5, 0x70bd25, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x700) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000000300)={'ip6_vti0\x00', 0x0, 0x4, 0x4, 0xfa, 0xc13, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2, 0x7800, 0x8, 0x3, 0x3}}) r9 = socket$packet(0x11, 0x3, 0x300) r10 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r10) getsockname$packet(r10, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r11, 0x49801, 0x49a41}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x3c}}, 0x0) sendto$packet(r9, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3", 0x11, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r11, 0x1, 0x4, 0x6, @local}, 0x14) sendmsg$nl_route_sched_retired(r0, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000002b00)=@newtfilter={0x18ec, 0x2c, 0x200, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0x3}, {0xc, 0x4}, {0x10, 0xffe0}}, [@f_rsvp6={{0xa}, {0x54, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, @TCA_RSVP_POLICE={0x3c, 0x5, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xfff}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8}, @TCA_POLICE_RATE64={0xc, 0x8, 0x40000000000000}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1c}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x4fe7f2a7}, @TCA_POLICE_RESULT={0x8, 0x5, 0x6}]}]}}, @f_rsvp={{0x9}, {0xe68, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @empty}, @TCA_RSVP_ACT={0x9fc, 0x6, [@m_connmark={0xe0, 0x19, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0xd, 0x5, 0xbfd4, 0x9}, 0x1}}]}, {0x94, 0x6, "efe85b1fb207535e2a65eda765411d8b114fd8b8b2b7ee1a15b22853aff0eebe67283fe81efb24eec6733462ba966c0b6452f0ac6fe5c76f12b14167b3a9036a126f53a7ba607028e7a8226da61e26ad0c8c0b7303c7ba7edada7e0423e8d4742c8c6b732cf27abb1e0d1adc0697c959ca2cfbc1badd69f4f53c6e549232382500ef56172eedfff1e8c94a6fe8eb565e"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_mpls={0x6c, 0xa, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0xd2cfe}, @TCA_MPLS_TC={0x5}, @TCA_MPLS_TTL={0x5, 0x7, 0x3}]}, {0x25, 0x6, "5697d4f671949b02fc695a6d91a258172b6b6a09c1cd003e6b331c81ade71005b0"}, {0xc}, {0xc, 0x8, {0x1, 0x5}}}}, @m_csum={0x190, 0x0, 0x0, 0x0, {{0x9}, {0x11c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x401, 0x2, 0xf73, 0xf}, 0x40}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0xc111, 0x1, 0x2, 0x9}, 0x74}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8000, 0x1, 0x4, 0xcd, 0x2}, 0x56}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xfffffffb, 0xffff, 0x0, 0x7, 0x4}, 0x5d}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x69, 0x4, 0x10000007, 0x2d, 0x8}, 0x9}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0xef, 0x1, 0x8, 0x7ff}, 0x18}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x1, 0xffffffffffffffff, 0x10000, 0x4}, 0x24}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xffffff98, 0x80000000, 0x4, 0xa310, 0x521}, 0x6}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x9, 0x8, 0xfffffffb, 0x328}, 0x3d}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xd9, 0x3, 0x3, 0xfffffffb, 0x6}, 0x7e}}]}, {0x4a, 0x6, "09de757927352c865f9ea5309a77f1e32b2c9a2cb704375d261664063496ae4c02012391e4f185d45a623a2c8e677a6a364ece79acf79cf5f404b15e437f0f14183d66bbc870"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_sample={0xd8, 0x8, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x1000, 0xfffffffd, 0x7, 0x7, 0xfffffff7}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x75d}]}, {0x89, 0x6, "3e80e5db5af35c0ec2e0a1eb815be2d7b56419de83989affa30fc147cead8adb370711121ccb2ff0e53fa0c9aa4304d6c1bbff7993fbfa2f99224d1d1149a57726bc420974a5d71f405dd17c7032a18c5374e2ed7b03c2e3b297b9858c896e550c0b853abb6b66e99a696655562b55c53af183c76c13cb4931051690e17324d83bd4c6c57e"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ct={0xd8, 0x0, 0x0, 0x0, {{0x7}, {0x5c, 0x2, 0x0, 0x1, [@TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @remote}, @TCA_CT_ACTION={0x6, 0x3, 0x21b263ca58d7ba8}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @remote}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @loopback}, @TCA_CT_PARMS={0x18, 0x1, {0x600, 0x1, 0x8, 0x0, 0x6}}, @TCA_CT_MARK_MASK={0x8}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x7}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x7}]}, {0x58, 0x6, "1e2a5b35692bb7188042ae0ce8637bf484464a8a7199cb18f8dadb065353f1964696430fae97ccd470b538b792d0e24bf9be8de1ef4a3f8bec1f02d7fb8cc6595bc4ab024801bad0b1272f7bf8c9ea638beda26c"}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_tunnel_key={0x58, 0x18, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private0}]}, {0x9, 0x6, "448cb2f796"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_xt={0x40c, 0x4, 0x0, 0x0, {{0x7}, {0x340, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xaa, 0x6, {0x1, 'mangle\x00', 0x9, 0xffff, "172dfeca321d3d7972d1f5202dab707c57bd3d997642db4d33bf0233ab66f56287debdee3428391ad82bd85c5972e43fe11074664ab6b0b4add4b5b35434918eb01050379296e6a787662febf226b7bd5b2dbf6f15bf01bd0dcd441104d940a005f5a50f7cb15212b0d6dba19fc7a4cc250547e3b3dc81890deb49acc8892f43"}}, @TCA_IPT_TARG={0xec, 0x6, {0xf, 'security\x00', 0x5, 0x8000, "8007fca8defc2bd3907202ca35554658d97a75ea10758c00add09988a40dab88fce95a90489e046310452e521d32b1e3319a51ece9199878263a52a39e21a5373dbf2906c2db3f147ee009c512b3fc7d985519a68532aaa12b7f82cfddb93943b609919ebfef4a2474d9e796c3e69afb6a02b0fc95648559ef4f17fc5dbb3d9e85bad33c9cf578b1be318a9ab39686636672ec999f9ccea242ff3503b89ac37ac6771adb42099f371fd0241d1a598a3f974de876b7e087fab8150894588ec5dc0d45"}}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x400}, @TCA_IPT_TARG={0x8a, 0x6, {0x4, 'security\x00', 0xf5, 0x31b7, "dc8eb787dd61dcdff25fcd3ef1a584d138ee8d046ab76fa38d0e2f1a093a057d53a83fc6cb4e4660576d89fe74d54b43b3f164d13f22c3dd01d8b3e13ae5bd9e58c9e34b6a588d6b78c23a8ad239645adb615b7b05a1bf818b8d46e38fb01656"}}, @TCA_IPT_TARG={0x59, 0x6, {0x300, 'mangle\x00', 0x3, 0x800, "f2ab450adbb957018cd5f6d92cb4483a47aa67669529692c8db2f351ebdf881df947cda078f46260e92212b485d8ee"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_TARG={0x85, 0x6, {0x9, 'raw\x00', 0x41, 0x5, "1b5460baf84f20a60c8e9f0fe4e80339ca864936d83237f8b5f8834725d1d10097d22d72bb6062d7289d1825143436e182f08df70b2592bd54c61ee1e6c9d8388ad371ab420a25f340b2251b168d42655b9215311383ed7d4e42dd"}}]}, {0xa7, 0x6, "61ca44cc8b47c9a91a3c55654d940f5f4b39980d8ef419e4c7f5060415a81ac363a4a5a4d8e782c8717bd953f136b30456f5a7054842ce019dae283843085d350f24c4a736a981189e93e32411d70eb968c0df53f5574df9d1ede3d5523550dc190220d20b8889f08930e3a162299ea3cb8f486ccaa66e987faae5a5351c79da0ae26065199e2fb5048844b8ecc29818566ac4f546d4c4f71f4d3ae46f84aa24249d8d"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_csum={0x108, 0x9, 0x0, 0x0, {{0x9}, {0xc8, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x401, 0x8, 0x3, 0x9, 0x3}, 0x6f}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x81, 0x4ed54aa9, 0x5, 0x2, 0xfff}, 0x49}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x8, 0x3, 0x4, 0x8}, 0x7b}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x696, 0xffffffffffffffff, 0x7}, 0x39}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x9, 0x2, 0x3d7fe147, 0x81}, 0x19}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xa7, 0x7, 0x1000000e, 0x7, 0x100}, 0x67}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8001, 0x9, 0x10000000, 0x5, 0x3}, 0x2c}}]}, {0x18, 0x6, "6cb5adf348ef32925a66e85ed6f98e1f3f07bc02"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xffe0, 0xffff}}, @TCA_RSVP_DST={0x8, 0x2, @empty}, @TCA_RSVP_ACT={0x450, 0x6, [@m_mirred={0x188, 0x5, 0x0, 0x0, {{0xb}, {0xe4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xfffffff9, 0x10000, 0x4, 0x3, 0x7f}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x9, 0x3, 0x6, 0x5}, 0x3, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x10, 0xffff2cb5, 0x20000000, 0x1, 0x2}, 0x1, r3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x4, 0x6, 0x9, 0x2}, 0x3, r4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x9, 0x1, 0x0, 0x7}, 0x3, r6}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x2, 0xffff, 0x0, 0x4, 0x4}, 0x2, r8}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7f, 0x7fff, 0x20000000, 0x0, 0x4}, 0x3, r11}}]}, {0x7b, 0x6, "17e61c4dc93e892cd895f4d785bf5401ccfb7d4b2fc59d636c186a9ecef0ada4aa900dd0a7f8ba72db915967fd7f93829d595a26f170799d95031ecd6c8132e83918f6899eddf6a795cb1e2346bf1e8e529449187f8a246a2bee9392548811db2b0c1256f1e2d315c06c6f93ab59acef5c07752553726a"}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_gact={0xbc, 0x7, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0xefb, 0x3}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0xb5c, 0xe4dea969bc4f72a8}}]}, {0x75, 0x6, "10a2fb90b57ba3f8d979ad2a685138ce12868784a498dda79a4a406c5e9057fafa5fe65591fae2830552fff229f9474ac632f6b840fd5fd9a59a0462df309d1eac4d4814e093153f4322fbb12e70240a7a25f0c6e3fb768447a201b3b7cac6f7e009e5a65a24bc1c7f69e913be0599169a"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_skbedit={0xec, 0xb, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0xf}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0xed7}, @TCA_SKBEDIT_PTYPE={0x6}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xb, 0xe}}]}, {0xa0, 0x6, "d0096be22933fed6a3ad83dd6844b53e2f8baa8a91d474de356a700a27ca532090c0fb54b84395e93f13f1700e99941e39ff3df16291ad799c1f424bdf8f4d8fe55d1ea2aefa37501bdb77d06e82a814c5055fd45c54812b05d25575e2b92463776665039c5541350bb931e06d3b0d0bd32551ec430e525dd7226bd33ba1100ed843d16bbe82565194a246c7a7908865f32c6a9bf277b95435bac43a"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_xt={0x11c, 0x17, 0x0, 0x0, {{0x7}, {0xb0, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xa4, 0x6, {0x101, 'mangle\x00', 0x3, 0x7, "09d635806aaf75bdd6e04aef61167521fee0ff540ff1055ae5e2334afa91e784e9e630b7655ad06d1006c1af024584924c6a78d27706fbf8ff747dbb0fb2cfba96335a278854f0f81a1e3c2d21ce9272e6307b3cbe033532c981d238dc4fb4e9401c9e1c7f7277070c73f6f2bbe69b06dc74a6ebb4fbde0dcfc0"}}, @TCA_IPT_HOOK={0x8}]}, {0x46, 0x6, "63ffb5a559085420454cb6cef815a44aac8a1456d2a9cea8d72ad10837c5506551806300d3b2214fdf99ea88856e3abcf75169d81b27eb5f843722af3498c82b4a71"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}, @f_rsvp={{0x9}, {0x44, 0x2, [@TCA_RSVP_PINFO={0x20, 0x4, {{0xd4e, 0x4bb, 0x800}, {0x80000000, 0x0, 0xfffff030}, 0xc, 0xc, 0xfe}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x3, 0x4, 0x7}, {0x7f, 0x7, 0xdd}, 0x29, 0x81, 0x7}}]}}, @f_rsvp={{0x9}, {0x858, 0x2, [@TCA_RSVP_SRC={0x8, 0x3, @remote}, @TCA_RSVP_POLICE={0x844, 0x5, [@TCA_POLICE_RATE64={0xc, 0x8, 0xd}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x3ee, 0x3, 0x9, 0x3, 0x8, 0x0, 0xb, 0x2, 0x1000, 0x1635d8ec, 0x6, 0x0, 0x8, 0xdb9, 0x0, 0x6, 0x5, 0x7fff, 0x0, 0x3ff, 0x4, 0x5, 0x8001, 0x8, 0x8000, 0x27, 0x7, 0x3ff, 0x6, 0x5, 0x101, 0x5, 0x6, 0x0, 0x5, 0x4, 0x3, 0xb, 0x7, 0x0, 0xcd00, 0x24f1, 0x9, 0xffffffff, 0x7c1a, 0x401, 0x0, 0x79, 0x1, 0xd, 0x8, 0x6, 0x2, 0x6, 0x7ff, 0x1, 0x2, 0x3ff, 0x7, 0x101, 0x7, 0x3, 0x9, 0x1, 0xb7, 0xf2ba, 0x9, 0x101, 0x7, 0x9, 0x1, 0x1, 0x8, 0x8, 0x9, 0x7, 0x2, 0xd, 0x24, 0x7, 0x3, 0x5, 0xe, 0x0, 0x40, 0xfae1, 0x7, 0x8000, 0x7, 0x1, 0x2, 0x10, 0x8, 0x3, 0x9, 0xa802, 0x3, 0x4, 0xffffffff, 0x4, 0x6, 0x9, 0x9, 0xfffffff7, 0x1, 0x7f, 0x0, 0xc7c, 0x800, 0xa, 0x1, 0x3, 0x7d01, 0x2, 0x7fff, 0x3, 0x100, 0xbd, 0x2, 0x8, 0x1000, 0xe256, 0x798, 0x2, 0x6, 0x9, 0x1, 0x6c8e485a, 0x5, 0x1, 0x0, 0x5, 0x5, 0xfffffff8, 0x1ff, 0x2, 0x10001, 0x6, 0x80, 0x2, 0x0, 0x81, 0x3, 0x81, 0x3, 0x7f, 0x6, 0x7, 0x80, 0x8, 0x5, 0xffff, 0x0, 0x5, 0x3, 0xb, 0x91e2, 0xc558, 0x2, 0x40, 0xff, 0x6, 0x2, 0x3894db1c, 0x7, 0x4, 0x4, 0x10100000, 0xc2, 0x4, 0x8001, 0x7fffffff, 0x4, 0x8, 0x81, 0x7, 0xfffff000, 0x6, 0x1000, 0x3, 0x3, 0x6, 0x81, 0xa3, 0x1, 0x1, 0xb68, 0x6, 0x8, 0x1, 0x1, 0x4, 0x2, 0x0, 0x2, 0x5, 0x80, 0x63b, 0x10001, 0x1, 0x1000000, 0xc19, 0x9, 0x0, 0x8, 0x3, 0x5, 0x9, 0x6, 0x8, 0x8, 0x6, 0x1, 0x9, 0x2, 0x1ff, 0x5, 0x2, 0x0, 0x5f40, 0x3, 0x0, 0x0, 0x0, 0x3, 0x6, 0x1, 0xffffffff, 0xff, 0x4, 0x8001, 0x2, 0x0, 0x6, 0x2, 0x401, 0x0, 0x5, 0x17, 0x8, 0x2, 0xe, 0x7ff, 0x9, 0x800, 0x3, 0x8332ea7, 0x0, 0x80000001, 0x6338, 0xffff, 0x1f2b8000, 0x200, 0x7, 0xe17]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x5}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x40, 0x5, 0x5, 0x80, 0x7, 0x0, 0x2, 0xff8, 0x1ff, 0x9, 0x1, 0x5, 0x9, 0x0, 0xffffff80, 0x5, 0x5, 0x7, 0x9, 0xa, 0x1, 0x4, 0x7fffffff, 0x26e, 0xff, 0x1, 0x9, 0x6, 0x5, 0x8, 0x89, 0xb29, 0x5, 0x9, 0x7, 0x1, 0x2, 0xcf, 0x9, 0x69af, 0x6309, 0x9, 0xffffffff, 0x7, 0x800, 0x7, 0xfffffffb, 0x1, 0x6e, 0x2, 0x77, 0x5, 0x6, 0x0, 0x3, 0x0, 0x7ff, 0x3, 0x5, 0x1ff, 0x7f, 0x0, 0x1, 0x9, 0x2, 0xff, 0x5c2c, 0x7, 0x6, 0x9, 0x7, 0x5, 0x1ff, 0x5, 0x2, 0x4, 0x5, 0xfffffffb, 0x2, 0xc, 0xffffff80, 0x6, 0x2, 0x7, 0x200, 0x7ff, 0xe146, 0x0, 0xa2a, 0x1000, 0x1, 0x1, 0x1, 0x80000001, 0x7fff, 0x4, 0x4, 0x4, 0x7f, 0xff, 0x8001, 0x3ff, 0x8, 0x2, 0x4000000, 0xffffffd0, 0x9, 0xffff, 0x8, 0xa5, 0x1bb9, 0x1, 0x4, 0x8, 0x4, 0x700000, 0x7, 0xc, 0x9, 0x0, 0x1000, 0x7024, 0x5, 0x4, 0xa, 0x3c, 0x3, 0x4, 0x0, 0x5, 0x2, 0x10000, 0xffff2530, 0x8, 0x5, 0x6, 0x4, 0x8000, 0x2, 0x4, 0xe, 0x7fffffff, 0xbc9, 0x7f, 0x2, 0x1, 0x8, 0x8, 0x9, 0xfffffffe, 0x8, 0x6, 0xffff7fff, 0x5, 0x8, 0x3, 0x3, 0xe5e, 0x2512, 0x244, 0xff, 0x9, 0x6, 0x7, 0x10001, 0x2, 0x2, 0xfffffff9, 0x10, 0x6, 0x3, 0x7fff, 0x1, 0xffffffff, 0xc44d, 0x6, 0x5, 0x3, 0x535, 0x57, 0x9, 0x1, 0xfffffffa, 0x800, 0x0, 0x48000000, 0xffffffd2, 0x8, 0x10001, 0x80000000, 0x3, 0xfff, 0x0, 0x5, 0x10000, 0x2, 0xca1, 0x41f, 0x8, 0x7, 0x8, 0x21, 0x7c58, 0x0, 0xe, 0x9c, 0x9, 0x6, 0x582, 0x6, 0x4, 0x9, 0x1, 0x2, 0xd, 0x5, 0xca4, 0x1, 0xb2d, 0xffffffff, 0x4, 0x7, 0x0, 0xc, 0x8, 0x4, 0x7ff, 0x1, 0xe04, 0x800, 0x7, 0xfdda, 0x8000, 0xe58f, 0x0, 0x5, 0x3, 0x10001, 0x7, 0x2, 0xf, 0x1, 0x5cb, 0x7fffffff, 0x0, 0x4, 0x0, 0x5, 0x9, 0x4, 0x7f, 0x6, 0x3, 0x9]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8}]}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x8, 0xffff}}]}}, @f_tcindex={{0xc}, {0x24, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x3cd1}, @TCA_TCINDEX_HASH={0x8, 0x1, 0x1133}, @TCA_TCINDEX_SHIFT={0x8, 0x3, 0x18000}, @TCA_TCINDEX_HASH={0x8, 0x1, 0x2f3}]}}, @f_rsvp6={{0xa}, {0x28, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @loopback}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x9, 0x8}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xfff7, 0x4}}]}}, @f_rsvp={{0x9}, {0x34, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x2, 0xd}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x7, 0x24a9, 0xd37}, {0x1ff, 0x0, 0x2}, 0xde, 0x6, 0x6}}]}}, @f_rsvp={{0x9}, {0x90, 0x2, [@TCA_RSVP_POLICE={0x18, 0x5, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_RATE64={0xc, 0x8, 0x401}]}, @TCA_RSVP_ACT={0x74, 0x6, [@m_ctinfo={0x70, 0x0, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0xa, 0x3, 0x2, 0x6, 0x1}}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x3}]}, {0x23, 0x6, "8e68b3c18284fc9604c1d7ae66475aebd10fe1050eda2c7094f96fd76cf61d"}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x18ec}, 0x1, 0x0, 0x0, 0x8804}, 0x4044000) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r12 = accept4(r1, 0x0, 0x0, 0x80000) sendmsg$kcm(r12, &(0x7f0000001880)={0x0, 0xf5, &(0x7f0000001600)=[{&(0x7f0000001a00)="e8a472", 0x3}, {&(0x7f00000000c0)="bcc9b1557de1fad1f955144629ed4dcf3c33679ea22502e3cff8923bf5d43921bc111a262f295a8eb540", 0x7fffeffd}, {&(0x7f0000001680)="094fb143daa9baa36aaa2cca06886c533118e056", 0x14}], 0x3}, 0x0) r13 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r13, 0x6, 0x1, &(0x7f0000000080)={0x4, 0x0, 0xb, 0xa, 0x1c, 0x4, 0x7}, 0xc) r14 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_encap(r14, 0x11, 0x64, &(0x7f0000000180)=0x3, 0x4) r15 = socket$key(0xf, 0x3, 0x2) ioctl(r15, 0xfffffffa, &(0x7f0000001a40)="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"/4275) 5m38.143307971s ago: executing program 1 (id=12646): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x96) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$vsock_stream(0x28, 0x1, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc", 0xae}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x16}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 5m37.201326844s ago: executing program 1 (id=12656): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000002c0)=0x1, 0x4) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'ipvlan1\x00', &(0x7f00000000c0)=@ethtool_rxnfc={0x32, 0x11, 0xf, {0x12, @esp_ip6_spec={@mcast1, @remote, 0x6, 0xf}, {0x0, @remote, 0x5, 0x26a, [0x0, 0x7fffffff]}, @ah_ip4_spec={@dev={0xac, 0x14, 0x14, 0x22}, @empty, 0x800, 0x2}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 0x5, 0xfffb, [0x7, 0x8001]}, 0x7, 0x2b9}, 0x4, [0x200, 0x0, 0x5, 0x5]}}) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000002000)=[{{&(0x7f0000000300)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000080)="6f0883", 0xfe92}], 0x1}}], 0x1, 0x2400c040) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="20000000400007012bbd7000fedbdf25027c00000400c29900604117800600098044ef000054eda396a1d5e23d8b0afeba52828123f573ee9cbb12114bd36c9f80ee1bdee88ac0f6d708ce3231a027d45df7cd57349e839af4c45732028654b9c00da8758e9c55"], 0x20}, 0x1, 0x0, 0x0, 0x2004c090}, 0xc000) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_GET(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f0000000a80)={0x18c, r4, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}]}, @TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "806f08897be48ea8d9a4d97059d17514ba67dcfd"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xbc0}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfe04}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xbc59}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x48ff9f81}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x687}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x48a}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}]}, @TIPC_NLA_BEARER={0x6c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8e9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4d09}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xb}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4f}]}, @TIPC_NLA_SOCK={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8000}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4000a}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x227}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x82}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xf}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}]}, 0x18c}, 0x1, 0x0, 0x0, 0x8841}, 0x840) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2f}}}, 0x1c) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r5, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)="08e0ac8fb1d99df61d7b518d0a62", 0xe}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f00000005c0)="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", 0xfe}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce90bfdb", 0x4}, {&(0x7f00000007c0)="f2e659", 0x3}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2964dd1", 0x4}, {&(0x7f0000000580)="b8a2f6", 0x3}, {&(0x7f00000002c0)="7940e900e0377757a9edc0d9376c21328ad2f7584fe4c8b712b3e5e08ecff5258151bd9eea7b4ce21f67ab51922ce035987127fda5812df903188e321419610f4beb6cdf6fa073876157c4f1d2054439d8db3f4d937872de928b62741fd60e6b56979ad883f89a02e24a577275bfb498b7a127abd0eb099e704d18d63dad611b45acfc3b8dc5457c8383d7d8621942e8e2ce6e4017dd6e5ed9732e739be6593c3b033524669ce17c3b822a6953eb11a20921220000000000000000", 0xbb}, {&(0x7f0000000280)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000880)="87", 0x1}, {&(0x7f0000000900)="11e09017", 0xfffffec4}], 0x2}}], 0x4, 0x4000000) setsockopt$sock_int(r5, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6(0xa, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 5m34.347607616s ago: executing program 1 (id=12667): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000002c0)=0x1, 0x4) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'ipvlan1\x00', &(0x7f00000000c0)=@ethtool_rxnfc={0x32, 0x11, 0xf, {0x12, @esp_ip6_spec={@mcast1, @remote, 0x6, 0xf}, {0x0, @remote, 0x5, 0x26a, [0x0, 0x7fffffff]}, @ah_ip4_spec={@dev={0xac, 0x14, 0x14, 0x22}, @empty, 0x800, 0x2}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 0x5, 0xfffb, [0x7, 0x8001]}, 0x7, 0x2b9}, 0x4, [0x200, 0x0, 0x5, 0x5]}}) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000002000)=[{{&(0x7f0000000300)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000080)="6f0883", 0xfe92}], 0x1}}], 0x1, 0x2400c040) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="20000000400007012bbd7000fedbdf25027c00000400c29900604117800600098044ef000054eda396a1d5e23d8b0afeba52828123f573ee9cbb12114bd36c9f80ee1bdee88ac0f6d708ce3231a027d45df7cd57349e839af4c45732028654b9c00da8758e9c55"], 0x20}, 0x1, 0x0, 0x0, 0x2004c090}, 0xc000) syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), 0xffffffffffffffff) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2f}}}, 0x1c) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r3, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)="08e0ac8fb1d99df61d7b518d0a62", 0xe}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f00000005c0)="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", 0xfe}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce90bfdb", 0x4}, {&(0x7f00000007c0)="f2e659", 0x3}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2964dd1", 0x4}, {&(0x7f0000000580)="b8a2f6", 0x3}, {&(0x7f00000002c0)="7940e900e0377757a9edc0d9376c21328ad2f7584fe4c8b712b3e5e08ecff5258151bd9eea7b4ce21f67ab51922ce035987127fda5812df903188e321419610f4beb6cdf6fa073876157c4f1d2054439d8db3f4d937872de928b62741fd60e6b56979ad883f89a02e24a577275bfb498b7a127abd0eb099e704d18d63dad611b45acfc3b8dc5457c8383d7d8621942e8e2ce6e4017dd6e5ed9732e739be6593c3b033524669ce17c3b822a6953eb11a20921220000000000000000", 0xbb}, {&(0x7f0000000280)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000880)="87", 0x1}, {&(0x7f0000000900)="11e09017", 0xfffffec4}], 0x2}}], 0x4, 0x4000000) setsockopt$sock_int(r3, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6(0xa, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000680)=@acquire={0x16c, 0x17, 0x90d, 0x0, 0x0, {{@in=@broadcast}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {@in6=@remote, @in6=@mcast2, 0x0, 0x0, 0x4e21}, {{@in6=@empty, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x11}, {0x0, 0x0, 0x0, 0x0, 0xaf, 0x2}}}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x4d4, 0xff}, 0xa, @in=@broadcast, 0x0, 0x3, 0x3, 0x7f, 0xc1, 0x9, 0x43}]}]}, 0x16c}}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) 5m33.456910185s ago: executing program 1 (id=12671): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = epoll_create1(0x0) r1 = socket$unix(0x1, 0x1, 0x0) close(r1) socket(0x1e, 0x4, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0x10009, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000002c0)={0xa002a014}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x80001, 0x81, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x404c005}, 0x4000040) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r4 = socket$packet(0x11, 0x3, 0x300) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000200)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @exit], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000040)=r5, 0x4) socket$phonet_pipe(0x23, 0x5, 0x2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a140000001100010000000000000000000100000a"], 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r7 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r8 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) close(r7) r9 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r9, 0x29, 0x2e, &(0x7f00000001c0)={0x7, {{0xa, 0x4e24, 0x2, @mcast1, 0x8}}, {{0xa, 0x4e08, 0xffff8001, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4f1}}}, 0x108) setsockopt$inet6_group_source_req(r9, 0x29, 0x2e, &(0x7f0000000380)={0x2, {{0xa, 0x4e20, 0x1, @mcast1, 0x1000}}, {{0xa, 0x4e22, 0x7, @empty, 0x3ff}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r9, 0x29, 0x30, &(0x7f0000000640)=ANY=[@ANYBLOB="03000000000000000a004e220000000cff010000000000000000000000000001080400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000016000000000000000000000000000000000000000000000000000001000000010000000a004e2200000003fc0200000000000000000000000000007f00"/272], 0x110) socket$nl_rdma(0x10, 0x3, 0x14) 5m18.271921011s ago: executing program 32 (id=12671): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = epoll_create1(0x0) r1 = socket$unix(0x1, 0x1, 0x0) close(r1) socket(0x1e, 0x4, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0x10009, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000002c0)={0xa002a014}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x80001, 0x81, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x404c005}, 0x4000040) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r4 = socket$packet(0x11, 0x3, 0x300) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000200)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @exit], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000040)=r5, 0x4) socket$phonet_pipe(0x23, 0x5, 0x2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a140000001100010000000000000000000100000a"], 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r7 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r8 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) close(r7) r9 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r9, 0x29, 0x2e, &(0x7f00000001c0)={0x7, {{0xa, 0x4e24, 0x2, @mcast1, 0x8}}, {{0xa, 0x4e08, 0xffff8001, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4f1}}}, 0x108) setsockopt$inet6_group_source_req(r9, 0x29, 0x2e, &(0x7f0000000380)={0x2, {{0xa, 0x4e20, 0x1, @mcast1, 0x1000}}, {{0xa, 0x4e22, 0x7, @empty, 0x3ff}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r9, 0x29, 0x30, &(0x7f0000000640)=ANY=[@ANYBLOB="03000000000000000a004e220000000cff010000000000000000000000000001080400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000016000000000000000000000000000000000000000000000000000001000000010000000a004e2200000003fc0200000000000000000000000000007f00"/272], 0x110) socket$nl_rdma(0x10, 0x3, 0x14) 2m32.806178307s ago: executing program 5 (id=14006): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={@private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x7f, 0x0, 0x100, 0x1, 0x500002}) r1 = socket(0xa, 0x3, 0xff) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000900)}, {&(0x7f00000015c0)="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", 0xfc}], 0x2}}], 0x1, 0x2090) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x10000002, @ipv4={'\x00', '\xff\xff', @empty}, 0x800100}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x39, &(0x7f0000000340)=ANY=[@ANYRESDEC=r1, @ANYBLOB="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"], 0xa8) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000000040)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x24000090}, 0x4000000) bpf$MAP_CREATE(0x0, &(0x7f0000001c80)=@base={0xa, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x7}, 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, 0x40, 0x107, 0xfffffefe, 0x0, {0x4, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x6, 0xc, 0x0, 0x0, @str='\x80\n'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000000000800000000000002f480f427c5fdf992ee47044cc1ba17902f5dc0eb9b68f7b78f4b1f86f709cff2302c75a6e3120e57fe91ea2fbeeed815c9777152164e6bb4e99267bbe8aee0878a832a711c91cf0ce435cad611b7043d41f93364b306a76672ea9c03fc6930b00f613d591a3e9087eeeaac6a6dc3218b9caad0107d158f48a196d2d0a18a062ac9ccb455e95fc1f909e7b", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x1, 0x3, [0xfb8, 0xff, 0x9]}, 0xe) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) setsockopt$sock_int(r5, 0x1, 0x2d, &(0x7f0000000000)=0x6, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0xfffffe2f, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000020000000000000008000400", @ANYRES32, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r4], 0x38}}, 0x10) 2m31.773541017s ago: executing program 5 (id=14017): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000140)="1400000010003507d25a806fd2f90324fc60942fbc49b9866864c7039cfe3f5735217e0000", 0x25}], 0x1}, 0x200a4800) getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x53, &(0x7f00000001c0), &(0x7f0000000200)=0x8) r1 = socket$netlink(0x10, 0x3, 0xc) socket$key(0xf, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) socket$nl_crypto(0x10, 0x3, 0x15) socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket(0xf, 0x3, 0xfffffff5) sendmmsg$inet(r2, &(0x7f0000000880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x44040) r3 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 2m31.656070968s ago: executing program 5 (id=14019): unshare(0x22020600) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0a00000005000000020000000700000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r1}, &(0x7f00000002c0), &(0x7f0000000580)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x19, &(0x7f0000002280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x466}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r2, r1}, 0xc) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000000)={@local, @empty, 0xffffffffffffffff, "28bd1c042d7deb301456fad43a19f3191ae06d163ae20604b42c2f6b56f4054e", 0x1, 0x6, 0x6ba, 0x8000}, 0x3c) 2m31.566166069s ago: executing program 5 (id=14020): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x0, 0xca, 0x3, 0x0, 0x1}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r2, 0xe0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000b80)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000b80), &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x7e, &(0x7f0000000740)=[{}], 0x8, 0x10, &(0x7f0000000780), &(0x7f00000007c0), 0x8, 0x80001f, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x1d, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0x2}, {}, {0x85, 0x0, 0x0, 0x9c}}}, &(0x7f0000000200)='GPL\x00'}, 0x90) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000140)={0x100, 0x6}, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=@newlink={0x4c, 0x10, 0x401, 0x70bd28, 0x5, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1c05}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x3}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x12) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x50, 0x1}, {0x6, 0x80, 0xfd}]}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), 0xffffffffffffffff) 2m31.406989922s ago: executing program 5 (id=14022): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={@private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x7f, 0x0, 0x100, 0x1, 0x500002}) r1 = socket(0xa, 0x3, 0xff) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000900)}, {&(0x7f00000015c0)="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", 0xfc}], 0x2}}], 0x1, 0x2090) setsockopt$inet6_opts(r1, 0x29, 0x39, &(0x7f0000000340)=ANY=[@ANYRESDEC=r1, @ANYBLOB="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"], 0xa8) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000000040)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x24000090}, 0x4000000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f0000001c80)=@base={0xa, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x7}, 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, 0x40, 0x107, 0xfffffefe, 0x0, {0x4, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x6, 0xc, 0x0, 0x0, @str='\x80\n'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000000000800000000000002f480f427c5fdf992ee47044cc1ba17902f5dc0eb9b68f7b78f4b1f86f709cff2302c75a6e3120e57fe91ea2fbeeed815c9777152164e6bb4e99267bbe8aee0878a832a711c91cf0ce435cad611b7043d41f93364b306a76672ea9c03fc6930b00f613d591a3e9087eeeaac6a6dc3218b9caad0107d158f48a196d2d0a18a062ac9ccb455e95fc1f909e7b", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x1, 0x3, [0xfb8, 0xff, 0x9]}, 0xe) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) setsockopt$sock_int(r5, 0x1, 0x2d, &(0x7f0000000000)=0x6, 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000680)={0x0, 0xfffffe2f, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000020000000000000008000400", @ANYRES32=r6, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r4], 0x38}}, 0x10) 2m30.169343294s ago: executing program 5 (id=14038): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x80001, 0x81, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x404c005}, 0x4000040) (fail_nth: 7) 2m15.060806787s ago: executing program 33 (id=14038): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x80001, 0x81, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x404c005}, 0x4000040) (fail_nth: 7) 4.306799797s ago: executing program 6 (id=15481): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) r1 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x11000000, @void}, 0x10) 4.078166151s ago: executing program 6 (id=15483): r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) (rerun: 64) setsockopt$sock_int(r1, 0x1, 0x31, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x1, &(0x7f0000000780)={&(0x7f0000000040)=ANY=[@ANYRES64, @ANYRES8=r0, @ANYRESDEC=r0, @ANYRESOCT=r0, @ANYRES64=r0, @ANYRESHEX=r0], 0x30}}, 0xc040) 3.842418757s ago: executing program 6 (id=15485): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000100, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r1}, &(0x7f00000007c0), &(0x7f0000000640)=r0}, 0x20) r2 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r6], 0x1c}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) connect$nfc_raw(r2, &(0x7f0000000080)={0x27, r6, 0xffffffffffffffff, 0x2}, 0x10) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r1, 0x0, 0x0}, 0x20) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r7, 0x10f, 0x80, 0x0, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = socket(0x15, 0x5, 0x0) bind$inet6(r9, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffffd, @mcast2={0xff, 0x5}, 0x1ff}, 0x1c) sendmsg$NLBL_MGMT_C_ADDDEF(r8, 0x0, 0x4040000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r9) sendmsg$NL80211_CMD_JOIN_MESH(r9, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="94030000", @ANYRES16=r10, @ANYBLOB="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"], 0x394}}, 0x20040041) sendmsg$nl_route_sched(r9, 0x0, 0x6080) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000100)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300010004000500eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d00010003e1eb23b978532b5c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20004080) 3.634582081s ago: executing program 2 (id=15488): r0 = socket$kcm(0x2a, 0x2, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000e80)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x8044) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0xa00, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8000) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f00000000c0)={r1}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x0, &(0x7f0000000040)}, 0x10) bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r4 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) recvmmsg(r4, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_JOIN_FILTERS(r5, 0x65, 0x2, 0x0, &(0x7f0000000000)=0x45) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002840)=[{{0x0, 0x0, &(0x7f0000002200)=[{&(0x7f0000000200)="1268a3db5ba40fe82ecf3465af3b9884890941251ee0", 0x16}, {&(0x7f00000004c0)="6059337673465062eacefc40e1b438cebc348d134fc35955cd0faaf679", 0x1d}, {&(0x7f0000001840)="571d6d5a94db8ec757a858b2340264bcbb0f3b238f776a7919eb79ad2908006e2de3d078e1208f769a82944fa5f024483379f0abc9c82e3c1a3f085719f730eb821593d78fe60a8032d37c57ed16c931d67fb383204bd2551af8f6ab7173dbf3135c1488c697d5564a85365f9681ab872008aa714934b2606ca460", 0x7b}, {&(0x7f0000001e80)="764ed94d526fcf4f632778c60aa50a21e7fdb60791cb5cc1599eecd2e141278b6cd46986faad9f9d7884a1ee48d1f54d1fd0ea68eb", 0x35}, {&(0x7f0000002140)="2a6a98c76e119c6145b5003076e2820c70f80924e1610f46a8c232a0f421f8dfb88d01318446c33a8e908d54cfdc039a0a4c7456dfb64a66c1a8546d6e499287bfc31aaf2726f80b63c70e9fc8e96886f41a262e3486ac77b9eabcfa6f49ed07e8ac31f05f8657a48045086e7c88f97af83dddac4dc7dc02cf8d544fee6f3f1a0061510a6eb6f7644550e1028685668a67fa9c57d82efdd087223f02d274a6e6bab5ad64c0065a7eb067620f3c89", 0xae}], 0x5}}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000580)="56a8c6ad830a8f74a318", 0xa}, {&(0x7f0000000840)="18c01ab5a41c262306d7d5661e70c1f60d254a68318c81aad7e16dd36ba3358d2385a2616333ebb179d83c74ce920187e2d2a1a5c6507cfefcd91f2900bdfb8a75f58a01a375754dd9756703ca8e7387d78db3c315da549d3a18dece16b7951c6983eeb2c377114769295d6498e328acb507395066e37e087d26f4f4389f", 0x7e}, {&(0x7f0000000600)="9c46f2b6aec7ddf8fe83fd452bb6ed0d3949234d4bf8f7f5ae31889f08042779c2a20d1ebee3a5b435b9632debfc43d90571315da865ef", 0x37}], 0x3}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000001400)="4e9c6ea4d55899dde1e3a575597ce06ac118933a2ba40800da", 0x19}, {&(0x7f00000000c0)="2ae409763e24f92667208f95b620d415abe1a8d13ae7d8e08c33df08129757861044d615b8219fcd9bbda79f0b000000000000c420113264a8fb4b6ab17f732fb18b78", 0x43}, {&(0x7f0000000d00)="f05a43f1c3a0f11db08405c5f817983bb055efac00", 0x15}], 0x3}}, {{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000700)="ab5aea0bd151f2b012853e83b3d630b72f62d53374645d5bce", 0x19}], 0x1}}], 0x4, 0x44008090) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x4011}, 0x40004) ioctl$HCIINQUIRY(r6, 0x400448ca, 0x0) 3.082768436s ago: executing program 4 (id=15489): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) sendmmsg(r0, &(0x7f0000004380)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1008}}], 0x34000, 0x0) 2.850985335s ago: executing program 0 (id=15490): r0 = socket$kcm(0xa, 0x1, 0x106) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0xf3a, 0x0) write$tun(r4, 0x0, 0x8b) read$alg(r3, &(0x7f00000003c0)=""/85, 0x55) ioctl$int_in(r4, 0x5452, &(0x7f0000000000)=0x10001) write(r1, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x9c, 0x0, 0x9}, {0x6}]}, 0x10) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0xfffffffd, @empty}, 0x80, 0x0}, 0x20000001) 2.784806974s ago: executing program 3 (id=15491): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x1}, 0xe) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000101000010000000000000000000200000a30000000050a050000000000000000000200000a09000100ff797a3000000000040004800c0002400000000000000000010000000000000000000704000a0000000000004c2ca8e64d70970d243cb7b441ef3174c0569326b19fb7dad5f4aa2b2b89fd1cb101da76e11830b98d4a48356810d41604cdcc1ee0cef867eb1e53cda06136566d722cd3e841c996719525bcc9f97fdd1d85e7c4459bb41c324b40154bbc7c7a412b58e17659e5ad286e632b445b70e3ec5372aba286"], 0x58}}, 0x20000800) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x301000, 0x0) ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f00000001c0)) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000400000040b9000014"], 0x50) 2.665473515s ago: executing program 2 (id=15492): socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6(0xa, 0x3, 0x5) socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x2a020400) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x14) 2.665121468s ago: executing program 4 (id=15493): socket$packet(0x11, 0x2, 0x300) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x60, r1, 0x1, 0x4, 0x1, {}, [@IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xf9}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x48c1}, 0x0) r2 = socket(0x2a, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000104480a000000040000000c000080a0e1", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r4, &(0x7f0000000180)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f00000000c0)=ANY=[@ANYBLOB="180800002d98afeb000000000000000018280000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000bf9700000000000007080000fffdffffbfa400000000000007040000f0ffffff740200000800000018220000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000007d9800000000000056080000000000008500000005000000b70000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001000)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=@newtfilter={0x84, 0x2c, 0x605, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffe0}, {}, {0x5, 0x2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4c, 0x2, [@TCA_CGROUP_ACT={0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x10, 0x7ff, 0x6, 0x1, 0xff}}]}, {0xffffff37}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x8}}]}, 0x84}}, 0x20004084) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="a80000000201010400000000141a000002000000240001801400018008000100e0000001080002"], 0xa8}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[], 0x50) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r8, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r8, 0x0) bind$rds(r8, &(0x7f0000000080)={0x2, 0x4e24, @empty}, 0x10) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYRES8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000ad2e00000000000007020000f8ffffffb703000000e93ecd16a800005b945b3a000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)='\\', 0x1}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 2.664975278s ago: executing program 3 (id=15494): r0 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r2, r1, 0x25, 0x8, @void}, 0x10) 2.654777652s ago: executing program 2 (id=15495): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x100, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x50, 0x1}, {0x6, 0x80, 0xfd}]}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), 0xffffffffffffffff) 2.625107065s ago: executing program 3 (id=15496): socket$inet6(0xa, 0x2, 0x3a) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f0000000380)='memory.stat\x00', 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000100)={0x0, 0x9, 0xd, 0x9, 0x2, 0x80000001}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r1, &(0x7f0000000a80)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @mcast2, 0x40000200, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="080100000000000029"], 0x108}}], 0x1, 0xc040) 2.582724841s ago: executing program 3 (id=15497): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480b0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x10) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073797a3100000000080041007369770014003300626f6e6430"], 0x38}, 0x1, 0x0, 0x0, 0x8801}, 0x20000000) (fail_nth: 8) 2.489972547s ago: executing program 3 (id=15498): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={@private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x7f, 0x0, 0x100, 0x1, 0x500002}) r1 = socket(0xa, 0x3, 0xff) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000900)}, {&(0x7f00000015c0)="47a5f60027fa04897d3c5efcd613e9511eb58a367c934e2f04ba3ed35d950b9f2899811dcd80842350646267a4f4db1eaeed81d0ab8af0eea839e773e30644b73abada9c108192125a7886c5d2faf40a64bb18c010dc6bca18cdfb94d657dc919c230cb8e91a340b1956a3e6b67a3d8ba619fa43ff21ccfb273bbb5ef82e5284b1768a1fafcb53fff6f6494fdc49e364ee081203f880f35304918bf5ce1ea9a0515b72e1d32fe54c0b967d1534e772c74555e95f193cf402223ecb04811df5f042b8fefaf104ae0e8d151236aae97a4afa3bd839cf977b57e8f4086411fe11ac216a6a26cd385cebd7f77357c80e6b551354419e2508d7eaa2000000", 0xfc}], 0x2}}], 0x1, 0x2090) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x10000002, @ipv4={'\x00', '\xff\xff', @empty}, 0x800100}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x39, &(0x7f0000000340)=ANY=[@ANYRESDEC=r1, @ANYBLOB], 0xa8) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000000040)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x24000090}, 0x4000000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f0000001c80)=@base={0xa, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x7}, 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, 0x40, 0x107, 0xfffffefe, 0x0, {0x4, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x6, 0xc, 0x0, 0x0, @str='\x80\n'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000000000800000000000002f480f427c5fdf992ee47044cc1ba17902f5dc0eb9b68f7b78f4b1f86f709cff2302c75a6e3120e57fe91ea2fbeeed815c9777152164e6bb4e99267bbe8aee0878a832a711c91cf0ce435cad611b7043d41f93364b306a76672ea9c03fc6930b00f613d591a3e9087eeeaac6a6dc3218b9caad0107d158f48a196d2d0a18a062ac9ccb455e95fc1f909e7b", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x1, 0x3, [0xfb8, 0xff, 0x9]}, 0xe) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) setsockopt$sock_int(r5, 0x1, 0x2d, &(0x7f0000000000)=0x6, 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000680)={0x0, 0xfffffe2f, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000020000000000000008000400", @ANYRES32=r6, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r4], 0x38}}, 0x10) 1.955917378s ago: executing program 3 (id=15499): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r1, @ANYRES32=r3], 0x44}}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073717a30000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) 1.874925032s ago: executing program 0 (id=15500): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xf, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000020000000000000060b4000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014001000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r1, 0x25, 0x0, @void}, 0xf) syz_emit_ethernet(0xfdef, &(0x7f0000000b40)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x84, 0x0, @loopback, @broadcast}}}}}, 0x0) (fail_nth: 8) 1.422281383s ago: executing program 0 (id=15501): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="020300091b0000000000000000000000040003000000000000000000000000000000000000000000000000000000000005000600000000000a00000000000000fe8000000000000000000000000000bb00000000000000000400040000000000000000000000000000000000000000000000000000000000020001000000000000000000000000ff05000500000000000a00000000000000fe8896380000000000000001000000010000000000000000030007000000000002004e24ac14141f0000000000000000020013"], 0xd8}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000003280)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x30, 0x280}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}, @IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) 1.3869625s ago: executing program 0 (id=15502): unshare(0x20000400) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r0, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_buf(r1, 0x1, 0x3d, 0x0, 0x0) 1.328499468s ago: executing program 0 (id=15503): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_pressure(r0, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r1, &(0x7f0000000080)={'some', 0x20, 0x2000000008, 0x20, 0x10000000fffff}, 0x2f) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x312) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000740)={0x0}, 0x1, 0x0, 0x0, 0x81}, 0x4048800) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000600)=ANY=[@ANYBLOB="1c0000f5"], 0xfdef) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_pressure(r4, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r5, &(0x7f0000000080)={'some', 0x20, 0x2000000008, 0x20, 0x10000000fffff}, 0x2f) 713.284803ms ago: executing program 2 (id=15504): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000f80)={0x28, r1, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@SEG6_ATTR_DST={0x14, 0x1, @rand_addr=' \x01\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x11}, 0x4) (fail_nth: 5) 668.012724ms ago: executing program 6 (id=15505): socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6(0xa, 0x3, 0x5) unshare(0x2a020400) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x14) 666.183694ms ago: executing program 4 (id=15506): r0 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r2, r1, 0x25, 0x8, @void}, 0x10) 564.996514ms ago: executing program 6 (id=15507): socket$inet6(0xa, 0x2, 0x3a) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5adf3e13fdb05b57b748bd14eda042a97fdd84498304a504a0a159b972e8200c2d0f536a3465ec498ed12b924bd134057df36129d3ebe3dd3ce9f0671e5278143e4afa3d43f444681de1b5f9725fca34fa357fe2154981666fb9dc202fc17a0199eb1c25bdd1005e590e84783ee9894c888998dc25a83c14aeee31d114acfa0bcd235d571cd765f4b9259ba43e6fc30291d8a642146c4771898030b736aeee6b247abb0784b154e104e7dcda401f9b1736fea30a41a4153fe6a9a525bd0a3487571f914f05b590e242341ade289d8f5b842c6be4a93c2755dfd47174def782a2f8f61c068b5a012f02c0801601e860def788121e8808c01fed4c920a3698d0d684920918c95b17f76bbcb4f265c931d8f79560ff8114b70f4dd6791e2ed70cfeb89905791b88be26efe1c5c66b7b50b3d2be0dbc066dfc31618f9507f6f340b85a2f76a6dcac9d6ccc289ace5e5fecd25afe22ffa451f5e365ab33cc985f2e9d7f7fb1be4794740a94215d7db14b0ffcec19e5e3c5ae0d8578ef3b65d2a7a77a11e390a6c3a6b391061c886b961e3c2f42d62047bfe1356a44b840d3d956105f4c0fa95db08c4933f00de77cdc057c28b41fecfc8398c442be1ad065954f6c9dfeb2fd7207e8548a00a1d50bdf522d2abfdafd71723616a34830fbfa8fc81e0c2639cc12f363a4919b7a00ac8189dad3e7e54122a2ef430f623658d5e281c9a19442995bb9b0e3f7d13e3016b6f9523be196bf23bbcc5ec802f43ef8b651d688d9d5a44f35c9847e4c32bce3e9ebed2326adadc76f06a195db32c80b3090d7cd65c9d8518ba4e528c5eb5c7a1c5695b21595fa8a8621734bfda8afddd65e1f37a1990220a00fa9bd2c22b0117ceb08ae6af3c944c2eca924abfddad065d1472d0c3f742a49b1e78c669471873706ad157d831d7482b773f07b0673a6ce1e227a7a4d13744bf459434c0ab1c323a38b1a84cbf1ce9741f2b8fdcc2e073e56171603d035aacd83e71d5132831f4f1e8bf517979f132a33fd03783272e9b8c96dfa4e1d320a58d82acfc8d3d53a5a52daafe4dc8be08f4ad53e11cc21374b6ff4ff5ea2ecc5d3f7c057f74f0098e57d990090475cdaffdef0da917653ed10fb70b94b72e5b4d95cbea0fc1dd2579635ad6ab545ba4d7b6d2f5442bdb78beb6c8ed62942a439117025b4566b48d9f3a17fdf4577e8606a4bc4c26557e58312fd2d1a541ebec3e5ae28eef8b2ab0597083716dd12889335570ee7839530eee879d9b137606cd4dd7103991671b4464bb68529eb19fb7a8845e3491bfbac688a87cf0744f429ea112014402915c4c1f6bae08d689d3cb7d641d7befe8fc74a2242310a9a367a39531b4c86da5b39df524e52f33ff9c40b48cb196ffc9ca855b6e698ade8a83e52b9ddc5031ff09e1907e4f8b0d07e64e1fb8e427f8819a7be907aa216bf8e2a4c7cc87ed53bf9490d4cc788b91f3b9f705e984a7e62c7a495e8421b97c39dc954b35468f17c6682334f4e16308448f457faeffff6d1f818522fa441d3a48168bdb12ffebace436a3915b63076cb6a655718647f87eaaf313b5bbd430421eed3a2215e439600a56eac8c65291eb103326a8034662bd337ab51577d9110ec7151be5cc9c54b2a30891acac5ad006ed537dbeb8f16eecbde7cf4e71373faf3c36b772f6d7ea9346875c8cf1049d49d4f8eb01b946c11e8c8e3ab2015f282167acddcc77fff03e1be9134252af0abfe538b4d25fc4ff874b52b9fb0996b5f32b4141dbd30578ff46e13ef6c63fc1620f62cb11a3dce401993976c272a5f62fde3f2a0e654d19e7a39dcdb622b9526d2a15cc18e6f817c916a00775353dd9c8954e66d0445b59bb0f5e6e3b46447232f52a0e398b057d123ef503afcbd48544db6434d2025bfc8dab72262a4fa5426a03061e7f8966e0086ff8ab5a91ab59f19b830394ee8bc76d6fb4816b8f4cde35b7eb9d3811228d51c54828f97fd1e648196c81bc73ed56249a59f318704e84656a6cedd2b8c1e1808d1cc648749abc643131e494c01336d4a14b8609656f2c972dc23c5c2e43fe40119fb88b5ec2aade35c03646e347354c493de8ab3672ccf94af0df333c6678299129d79be0eec281c5b3858ce3995566a390b674635b356692e3e9c53a089638ba0d69e772b7b410a5ae03de12e7de755ee559e1707b7b8003aabc8e2ce03c01e3183ff2d93262f6d5ceaafecdae66bc7cb3952c5a6571d864d502f281db5a228695badca5d022fdb6da56ab15dc377d1c1f8581ff56e28c2b2a84edb629547d28275c2ed571103b4ca7cdeb0776ba9f9dffcd78d21c3d4caa9289ed199672f4e7b912068c49c817114c37d37ea03954bae87d1ddae3da2ad85feb2fbb735b75a51f7bee5c8d88cc7bf64700d1a46ec6b631ae22ac7b06730a86a26bdcb992e1c7b50142de96b14a8468e4514068a30896fc677fddefaebb125c693a8d460469c7fe535f844781940f66d6abd091191c3122d584f5b0f5b0d443713d7d5186124d73de28aca30b719d4a55e09d259bddbf16995aeb1000880890afbd24d4066b0398985a40999de22ce176348e1c1f57eaf75b92a1e4f1482e89a00ac2cc36b20e36af9ec310599c19a5b1d6f8fadba104c58c801c6633315f82ebfa88faddd0b693e2f827f586c1cc5538e93bcf10f81af6dd7ee727df3b5018c0b4e31e40d040a47503b6ace4d29a1162ce487351825255f5584aff7cbd421f85c3d9fbb3784abd9848f16028b68f0d32ed8bb80106e8cc4acb939ff88bd39976d166b2addebf628b3fcd056da2f60e1b90f7a32702954921908ebccb683622a1f574ceba6951bef5e751c338c8279318dc28e36b9fc2bb17c3ad08aceb00fc388e6db112a738f86a4a1eb11526e1b9d73250b326285ed47c4398d93a3933d9a784249b65ad7d78a1f81d96ef36493ed693045a2150a8eb43cecc0c93e7d20b15b39a0646b081c2923b816365b7fbb41683a41732d942c5aa12faf876ec7f036becde8f3295af6dacff38d076d8e06260fee167703bb610745374a2758a6b88e465ca77d1f3105ae8b6b04a1eb509fb178d6249dbbc84d5d1d069278449a89d03e4a9a395d8170c329a296cfc329798cb9b9f1078d098cf3f989fd4ec53e013fbe917df35292d44fb1f3da4da4432a1847d4721514ade8cda5e5c0b51183580fc35266a970ebba74faeda56d4dcb56df51f96ad237452cedbd0cb2bee112713c3d450835811bf3da9745136d428e148fd0932dc77c8d8e61a16c625241fad8425b4ece394eedd5f165bd94923bfa1172be8edc8a4fcaae5f77ee8cc510192b27964da09c3e84efb4bc7154da1a24da8b7e544b42278d2574687ec76143afa6cf193d52a2a7f4c20ee57b6056a1337d5e408117a6cf1ab49c8980f39597f69902085d3e8d374d44e6ab4ed1185a26be2bc7281e9cfbbeb6bed899aa1924d3faa06d95999fbeaf2337494e0c2c39eef5a73fcde84459a9ea48d4e015d9e5bb5839354967ce02f637bc8678d2595b9a918fc36b927d7501f0ac2e3471ce02b5df355689c87f191ef5390900a41deec29984e45a878ece964b0009aad561316fc3b30ce1b49266d32eb17cd30f3e17e1f59014e8c518940dd0a093d1349c1a7c2581963bbe0ba372b6426e81c33c71b2ec8141c5713e52a37fff0a417a5b259e1420d9fb6a731f5baa0cc494221947895aa8fa14745a986a366bff9d0c239a19f85372497565b5b703da16439019df5f3d29f4247fb528854c9648630f03e9dedde5a08a47728ea6a4d42e62eff6fa3bd402325e0f4387b60171c37c180f958ad80955779c899517e7ea76eed00598e01552eaaf08b723daf9d466e8c57af43a15a46528b1119f5074aa3c51f77357ebe158275bc06b89640d7ce3c0a03af01418d7dc6ae8a1be8ab08c1722d66d1e9277480b8b178447667c024f9b78f8a878a2d7cf8e83e5104f6964b2907a989abafc7d7d0df941abf3d7283b6a11d46c2911a42182ec27ab785d92946e1ee8ef44846d561850d2a98c305c382f36d4cfc9b2bfd3b86ef21a0d187adcafbec8268c7d662a34dda1c83c4967097743133bc8c587edf249f5668c34ddb112fa4eb1bea9c8f6a000f1f34428b54688a5e214a7919868b25dbe930e86a243ecf54afe0b518c647d04873d2cf62cb2ab27f00015537a4fd2ea3dc8777abdf3284622347016566da0b9c406ca8c40694e4013a53fbf2e803d51b0bbe5e9df5fc74f66be618856357ccf803c53ed0e3b3fe79f69f0ede9b565d8f7a8ce5aa8cbb4e8fa61be3fd00ffb07e45065498925c14c0b311942d4ed951ad6237aadb5405bc7b2d79e1fd295b7c2ed8efa883e44c86a5053e2f421c6d4dc0c47d3a05d911db37d6efdb8e50fb3f06139ac147bc7162c21aece79eaf72e9779f19eb5395cec3d15a7594ea70a6b373d98651d2215b210f037ea3f8a57ded74474f6fdb64a08b56af52168da70b30aee03472cd8bee5af04cad7303004a4aba464b99", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000100)={0x0, 0x9, 0xd, 0x9, 0x2, 0x80000001}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r0, &(0x7f0000000a80)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @mcast2, 0x40000200, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="080100000000000029"], 0x108}}], 0x1, 0xc040) 349.579229ms ago: executing program 4 (id=15508): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) accept$nfc_llcp(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000000)=0x60) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f00000002c0)=0x4, 0x4) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r5}, &(0x7f0000000280), &(0x7f0000000240)=r2}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) getsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f0000000140)=""/23, &(0x7f0000000300)=0x13) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002b40), r7) sendmsg$NLBL_MGMT_C_ADD(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000002c00)={&(0x7f0000000100)={0x3c, r8, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_DOMAIN={0xe, 0x1, 'net/l2cap\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}]}, 0x3c}, 0x1, 0x2000a00, 0x0, 0x20000000}, 0x4000080) 348.919042ms ago: executing program 0 (id=15509): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={@private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x7f, 0x0, 0x100, 0x1, 0x500002}) r1 = socket(0xa, 0x3, 0xff) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000900)}, {&(0x7f00000015c0)="47a5f60027fa04897d3c5efcd613e9511eb58a367c934e2f04ba3ed35d950b9f2899811dcd80842350646267a4f4db1eaeed81d0ab8af0eea839e773e30644b73abada9c108192125a7886c5d2faf40a64bb18c010dc6bca18cdfb94d657dc919c230cb8e91a340b1956a3e6b67a3d8ba619fa43ff21ccfb273bbb5ef82e5284b1768a1fafcb53fff6f6494fdc49e364ee081203f880f35304918bf5ce1ea9a0515b72e1d32fe54c0b967d1534e772c74555e95f193cf402223ecb04811df5f042b8fefaf104ae0e8d151236aae97a4afa3bd839cf977b57e8f4086411fe11ac216a6a26cd385cebd7f77357c80e6b551354419e2508d7eaa2000000", 0xfc}], 0x2}}], 0x1, 0x2090) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x10000002, @ipv4={'\x00', '\xff\xff', @empty}, 0x800100}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x39, &(0x7f0000000340)=ANY=[@ANYRESDEC=r1, @ANYBLOB], 0xa8) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000000040)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x24000090}, 0x4000000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f0000001c80)=@base={0xa, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x7}, 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, 0x40, 0x107, 0xfffffefe, 0x0, {0x4, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x6, 0xc, 0x0, 0x0, @str='\x80\n'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000000000800000000000002f480f427c5fdf992ee47044cc1ba17902f5dc0eb9b68f7b78f4b1f86f709cff2302c75a6e3120e57fe91ea2fbeeed815c9777152164e6bb4e99267bbe8aee0878a832a711c91cf0ce435cad611b7043d41f93364b306a76672ea9c03fc6930b00f613d591a3e9087eeeaac6a6dc3218b9caad0107d158f48a196d2d0a18a062ac9ccb455e95fc1f909e7b", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x1, 0x3, [0xfb8, 0xff, 0x9]}, 0xe) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) setsockopt$sock_int(r5, 0x1, 0x2d, &(0x7f0000000000)=0x6, 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000680)={0x0, 0xfffffe2f, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000020000000000000008000400", @ANYRES32=r6, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r4], 0x38}}, 0x10) 247.40908ms ago: executing program 4 (id=15510): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000), r0) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1d0b27bd7000fedbdf2501"], 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x48850) 208.90956ms ago: executing program 2 (id=15511): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r2, &(0x7f00000000c0)={0x1d, r3}, 0x10) sendmsg$can_bcm(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0400000001"], 0x48}}, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="01000000220900"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000001"], 0x80}}, 0x0) close(r2) setsockopt$sock_int(r1, 0x1, 0x4a, &(0x7f0000000080)=0x10004, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4affeeaf541d002007000000", @ANYRES32=r4, @ANYBLOB], 0x44}}, 0x0) 113.820544ms ago: executing program 6 (id=15512): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000001900)=[{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)='[', 0x1}, {&(0x7f0000000040)="56b90e53fab64bf15307ada687d249a6e7c49631c9a9b9bcfc7c46412be23d42097039fb19ded17d03d8593d96673dfb04bc7085d57e52da4da871b693423b3eafc4c0a9ddfe", 0x46}, {&(0x7f0000000180)="bf02f215a906d3209840ac252d6e8772ffd9bea40bc8f56fa9615d6e218896ddff9f221f413e3d6edae4ce8c0127", 0x2e}, {&(0x7f0000003f80)="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", 0xfb}], 0x4, 0x0, 0x0, 0x20040003}], 0x1, 0x0) recvmmsg(r1, &(0x7f00000019c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000940)=""/97, 0x61}, {&(0x7f00000009c0)=""/49, 0x31}], 0x2}, 0x7e1a}, {{0x0, 0x0, &(0x7f00000011c0)=[{0x0}], 0x1}, 0x7fffffff}], 0x2, 0x142, 0x0) 41.748214ms ago: executing program 4 (id=15513): socket$netlink(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f0000000780)="c1858aec1d0a06756f6608f23687ff5d8095255b3da6afe6d02e4e586dcf", 0x1e, 0x40000, &(0x7f0000000240)={0x11, 0xf8, r6, 0x1, 0x5, 0x6, @local}, 0x14) 0s ago: executing program 2 (id=15514): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002cc0)=@newchain={0x24, 0x64, 0x20, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfffb, 0x10}, {0xb, 0xffff}, {0xb, 0xffe8}}}, 0x24}}, 0x4000) (fail_nth: 1) kernel console output (not intermixed with test programs): 000000000 [ 1218.356097][T14399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1218.356108][T14399] R13: 00007f5ea6e16038 R14: 00007f5ea6e15fa0 R15: 00007ffcd9c33fd8 [ 1218.356137][T14399] [ 1218.773677][T24166] net_ratelimit: 68 callbacks suppressed [ 1218.773700][T24166] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1218.825250][T24166] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1218.842952][T24166] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1218.932082][T14410] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.14912'. [ 1218.956592][T14410] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14912'. [ 1218.993709][T14410] ipvlan2: entered promiscuous mode [ 1219.023743][T24160] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1219.053402][T24160] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1219.090028][T24160] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1219.123771][T24160] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1219.143980][T24166] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1219.173230][T24160] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1219.193209][ T9343] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1220.237781][T14466] FAULT_INJECTION: forcing a failure. [ 1220.237781][T14466] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1220.252673][T14466] CPU: 1 UID: 0 PID: 14466 Comm: syz.6.14933 Not tainted syzkaller #0 PREEMPT(full) [ 1220.252699][T14466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1220.252710][T14466] Call Trace: [ 1220.252718][T14466] [ 1220.252726][T14466] dump_stack_lvl+0xe8/0x150 [ 1220.252751][T14466] should_fail_ex+0x412/0x560 [ 1220.252776][T14466] _copy_to_user+0x31/0xb0 [ 1220.252815][T14466] bpf_test_finish+0x22c/0x6b0 [ 1220.252843][T14466] ? __pfx_bpf_test_finish+0x10/0x10 [ 1220.252861][T14466] ? eth_type_trans+0x35e/0x6d0 [ 1220.252893][T14466] bpf_prog_test_run_skb+0x10c6/0x1c90 [ 1220.252924][T14466] ? __fget_files+0x2a/0x420 [ 1220.252942][T14466] ? __fget_files+0x3a0/0x420 [ 1220.252958][T14466] ? __fget_files+0x2a/0x420 [ 1220.252984][T14466] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1220.253000][T14466] bpf_prog_test_run+0x2c7/0x340 [ 1220.253019][T14466] __sys_bpf+0x5cb/0x920 [ 1220.253037][T14466] ? __pfx___sys_bpf+0x10/0x10 [ 1220.253066][T14466] ? ksys_write+0x242/0x270 [ 1220.253091][T14466] ? __pfx_ksys_write+0x10/0x10 [ 1220.253119][T14466] __x64_sys_bpf+0x7c/0x90 [ 1220.253141][T14466] do_syscall_64+0xe2/0xf80 [ 1220.253162][T14466] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1220.253178][T14466] ? trace_irq_disable+0x37/0x100 [ 1220.253194][T14466] ? clear_bhb_loop+0x60/0xb0 [ 1220.253215][T14466] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1220.253237][T14466] RIP: 0033:0x7f5ea6b9aeb9 [ 1220.253253][T14466] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1220.253266][T14466] RSP: 002b:00007f5ea7a3a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1220.253285][T14466] RAX: ffffffffffffffda RBX: 00007f5ea6e15fa0 RCX: 00007f5ea6b9aeb9 [ 1220.253298][T14466] RDX: 0000000000000048 RSI: 00002000000002c0 RDI: 000000000000000a [ 1220.253309][T14466] RBP: 00007f5ea7a3a090 R08: 0000000000000000 R09: 0000000000000000 [ 1220.253320][T14466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1220.253330][T14466] R13: 00007f5ea6e16038 R14: 00007f5ea6e15fa0 R15: 00007ffcd9c33fd8 [ 1220.253364][T14466] [ 1220.498255][T14468] xt_hashlimit: max too large, truncated to 1048576 [ 1220.513935][T14468] tipc: Enabling of bearer rejected, already enabled [ 1220.556159][T14468] tipc: Resetting bearer [ 1220.563973][T14468] netlink: 'syz.0.14934': attribute type 4 has an invalid length. [ 1220.615771][T14472] netlink: 'syz.0.14934': attribute type 4 has an invalid length. [ 1220.645546][T14474] netlink: 1216 bytes leftover after parsing attributes in process `syz.4.14936'. [ 1220.657233][ T129] IPVS: starting estimator thread 0... [ 1220.664295][T14474] netlink: 4436 bytes leftover after parsing attributes in process `syz.4.14936'. [ 1220.669140][T14477] FAULT_INJECTION: forcing a failure. [ 1220.669140][T14477] name failslab, interval 1, probability 0, space 0, times 0 [ 1220.699847][T14477] CPU: 1 UID: 0 PID: 14477 Comm: syz.6.14937 Not tainted syzkaller #0 PREEMPT(full) [ 1220.699872][T14477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1220.699882][T14477] Call Trace: [ 1220.699889][T14477] [ 1220.699897][T14477] dump_stack_lvl+0xe8/0x150 [ 1220.699922][T14477] should_fail_ex+0x412/0x560 [ 1220.699948][T14477] should_failslab+0xa8/0x100 [ 1220.699967][T14477] __kvmalloc_node_noprof+0x166/0x8d0 [ 1220.699987][T14477] ? rhashtable_init_noprof+0x52e/0xa70 [ 1220.700006][T14477] ? rhashtable_init_noprof+0x12d/0xa70 [ 1220.700038][T14477] rhashtable_init_noprof+0x52e/0xa70 [ 1220.700062][T14477] rhltable_init_noprof+0x1e/0x60 [ 1220.700083][T14477] nf_tables_newtable+0x68f/0x1910 [ 1220.700121][T14477] nfnetlink_rcv+0x1240/0x27b0 [ 1220.700169][T14477] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1220.700223][T14477] ? netlink_deliver_tap+0x2e/0x1b0 [ 1220.700243][T14477] ? netlink_deliver_tap+0x2e/0x1b0 [ 1220.700274][T14477] netlink_unicast+0x80f/0x9b0 [ 1220.700295][T14477] ? __pfx_netlink_unicast+0x10/0x10 [ 1220.700312][T14477] ? netlink_sendmsg+0x650/0xb40 [ 1220.700327][T14477] ? skb_put+0x11b/0x210 [ 1220.700349][T14477] netlink_sendmsg+0x813/0xb40 [ 1220.700376][T14477] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1220.700398][T14477] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1220.700419][T14477] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1220.700439][T14477] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1220.700457][T14477] ____sys_sendmsg+0xa68/0xad0 [ 1220.700478][T14477] ? __might_fault+0xaf/0x130 [ 1220.700507][T14477] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1220.700537][T14477] ? import_iovec+0x73/0xa0 [ 1220.700561][T14477] ___sys_sendmsg+0x2a5/0x360 [ 1220.700581][T14477] ? __lock_acquire+0x6b5/0x2cf0 [ 1220.700612][T14477] ? __pfx____sys_sendmsg+0x10/0x10 [ 1220.700673][T14477] ? __fget_files+0x2a/0x420 [ 1220.700691][T14477] ? __fget_files+0x3a0/0x420 [ 1220.700715][T14477] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1220.700738][T14477] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1220.700765][T14477] ? __pfx_ksys_write+0x10/0x10 [ 1220.700803][T14477] do_syscall_64+0xe2/0xf80 [ 1220.700825][T14477] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1220.700842][T14477] ? trace_irq_disable+0x37/0x100 [ 1220.700859][T14477] ? clear_bhb_loop+0x60/0xb0 [ 1220.700879][T14477] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1220.700896][T14477] RIP: 0033:0x7f5ea6b9aeb9 [ 1220.700912][T14477] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1220.700927][T14477] RSP: 002b:00007f5ea7a3a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1220.700946][T14477] RAX: ffffffffffffffda RBX: 00007f5ea6e15fa0 RCX: 00007f5ea6b9aeb9 [ 1220.700958][T14477] RDX: 0000000000000000 RSI: 000020000000c2c0 RDI: 0000000000000003 [ 1220.700969][T14477] RBP: 00007f5ea7a3a090 R08: 0000000000000000 R09: 0000000000000000 [ 1220.700979][T14477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1220.700989][T14477] R13: 00007f5ea6e16038 R14: 00007f5ea6e15fa0 R15: 00007ffcd9c33fd8 [ 1220.701018][T14477] [ 1221.043536][T14475] IPVS: using max 34 ests per chain, 81600 per kthread [ 1221.106296][T14487] netlink: 36 bytes leftover after parsing attributes in process `syz.2.14938'. [ 1223.240613][T14494] netlink: 'syz.6.14940': attribute type 12 has an invalid length. [ 1223.610490][ T5830] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1223.708473][ T5830] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1223.717258][ T5830] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1223.725643][ T5830] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1223.735963][ T5830] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1223.789959][ T9343] net_ratelimit: 170 callbacks suppressed [ 1223.789980][ T9343] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1223.829093][T14510] lo speed is unknown, defaulting to 1000 [ 1223.843164][ T9343] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1223.949398][T14525] FAULT_INJECTION: forcing a failure. [ 1223.949398][T14525] name failslab, interval 1, probability 0, space 0, times 0 [ 1223.963858][T24160] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1223.980629][T14525] CPU: 1 UID: 0 PID: 14525 Comm: syz.4.14952 Not tainted syzkaller #0 PREEMPT(full) [ 1223.980653][T14525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1223.980664][T14525] Call Trace: [ 1223.980671][T14525] [ 1223.980679][T14525] dump_stack_lvl+0xe8/0x150 [ 1223.980707][T14525] should_fail_ex+0x412/0x560 [ 1223.980731][T14525] should_failslab+0xa8/0x100 [ 1223.980750][T14525] __kmalloc_cache_noprof+0x83/0x6e0 [ 1223.980777][T14525] ? tcf_block_get_ext+0x68c/0x17d0 [ 1223.980802][T14525] tcf_block_get_ext+0x68c/0x17d0 [ 1223.980821][T14525] ? is_dynamic_key+0xd6/0x1c0 [ 1223.980838][T14525] ? is_dynamic_key+0xd6/0x1c0 [ 1223.980871][T14525] ? __pfx_sfb_init+0x10/0x10 [ 1223.980888][T14525] tcf_block_get+0x67/0xa0 [ 1223.980905][T14525] ? __pfx_tcf_chain_head_change_dflt+0x10/0x10 [ 1223.980928][T14525] sfb_init+0x31/0xa0 [ 1223.980947][T14525] qdisc_create+0x7c4/0xf20 [ 1223.980971][T14525] tc_modify_qdisc+0x16f0/0x2290 [ 1223.980988][T14525] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1223.981020][T14525] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 1223.981071][T14525] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 1223.981093][T14525] rtnetlink_rcv_msg+0x77e/0xbe0 [ 1223.981115][T14525] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1223.981132][T14525] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1223.981148][T14525] ? ref_tracker_free+0x693/0x840 [ 1223.981165][T14525] ? __copy_skb_header+0xa3/0x4a0 [ 1223.981187][T14525] ? __pfx_ref_tracker_free+0x10/0x10 [ 1223.981215][T14525] netlink_rcv_skb+0x232/0x4b0 [ 1223.981235][T14525] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1223.981254][T14525] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1223.981283][T14525] ? netlink_deliver_tap+0x2e/0x1b0 [ 1223.981307][T14525] netlink_unicast+0x80f/0x9b0 [ 1223.981330][T14525] ? __pfx_netlink_unicast+0x10/0x10 [ 1223.981345][T14525] ? netlink_sendmsg+0x650/0xb40 [ 1223.981358][T14525] ? skb_put+0x11b/0x210 [ 1223.981383][T14525] netlink_sendmsg+0x813/0xb40 [ 1223.981410][T14525] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1223.981429][T14525] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1223.981451][T14525] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1223.981470][T14525] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1223.981488][T14525] ____sys_sendmsg+0xa68/0xad0 [ 1223.981511][T14525] ? __might_fault+0xaf/0x130 [ 1223.981538][T14525] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1223.981567][T14525] ? import_iovec+0x73/0xa0 [ 1223.981592][T14525] ___sys_sendmsg+0x2a5/0x360 [ 1223.981612][T14525] ? __lock_acquire+0x6b5/0x2cf0 [ 1223.981637][T14525] ? __pfx____sys_sendmsg+0x10/0x10 [ 1223.981664][T14525] ? kstrtouint+0x6e/0xe0 [ 1223.981708][T14525] ? __fget_files+0x2a/0x420 [ 1223.981725][T14525] ? __fget_files+0x3a0/0x420 [ 1223.981752][T14525] __sys_sendmmsg+0x27c/0x4e0 [ 1223.981786][T14525] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1223.981805][T14525] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1223.981850][T14525] ? ksys_write+0x242/0x270 [ 1223.981875][T14525] ? __pfx_ksys_write+0x10/0x10 [ 1223.981904][T14525] __x64_sys_sendmmsg+0xa0/0xc0 [ 1223.981927][T14525] do_syscall_64+0xe2/0xf80 [ 1223.981948][T14525] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1223.981964][T14525] ? clear_bhb_loop+0x60/0xb0 [ 1223.981983][T14525] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1223.981999][T14525] RIP: 0033:0x7f4f8159aeb9 [ 1223.982016][T14525] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1223.982031][T14525] RSP: 002b:00007f4f823be028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1223.982050][T14525] RAX: ffffffffffffffda RBX: 00007f4f81815fa0 RCX: 00007f4f8159aeb9 [ 1223.982062][T14525] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004 [ 1223.982073][T14525] RBP: 00007f4f823be090 R08: 0000000000000000 R09: 0000000000000000 [ 1223.982084][T14525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1223.982094][T14525] R13: 00007f4f81816038 R14: 00007f4f81815fa0 R15: 00007ffe5df18e28 [ 1223.982123][T14525] [ 1224.017633][T24160] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1224.419531][T24160] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1224.443129][T24160] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1224.483525][T24160] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1224.523628][T24160] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1224.553883][T24160] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1224.576470][T24160] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1224.603782][ T4592] team0: Port device syz_tun removed [ 1224.646219][T14532] FAULT_INJECTION: forcing a failure. [ 1224.646219][T14532] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1224.677190][T14532] CPU: 1 UID: 0 PID: 14532 Comm: syz.6.14954 Not tainted syzkaller #0 PREEMPT(full) [ 1224.677215][T14532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1224.677226][T14532] Call Trace: [ 1224.677234][T14532] [ 1224.677242][T14532] dump_stack_lvl+0xe8/0x150 [ 1224.677267][T14532] should_fail_ex+0x412/0x560 [ 1224.677290][T14532] _copy_to_user+0x31/0xb0 [ 1224.677315][T14532] simple_read_from_buffer+0xe1/0x170 [ 1224.677339][T14532] proc_fail_nth_read+0x1bb/0x230 [ 1224.677365][T14532] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1224.677389][T14532] ? rw_verify_area+0x2a6/0x4d0 [ 1224.677409][T14532] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1224.677432][T14532] vfs_read+0x20c/0xa70 [ 1224.677452][T14532] ? fdget_pos+0x246/0x320 [ 1224.677473][T14532] ? __pfx___mutex_lock+0x10/0x10 [ 1224.677495][T14532] ? __pfx_vfs_read+0x10/0x10 [ 1224.677518][T14532] ? __fget_files+0x2a/0x420 [ 1224.677541][T14532] ? __fget_files+0x3a0/0x420 [ 1224.677557][T14532] ? __fget_files+0x2a/0x420 [ 1224.677583][T14532] ksys_read+0x150/0x270 [ 1224.677607][T14532] ? __pfx_ksys_read+0x10/0x10 [ 1224.677638][T14532] do_syscall_64+0xe2/0xf80 [ 1224.677657][T14532] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1224.677672][T14532] ? trace_irq_disable+0x37/0x100 [ 1224.677688][T14532] ? clear_bhb_loop+0x60/0xb0 [ 1224.677706][T14532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1224.677722][T14532] RIP: 0033:0x7f5ea6b5b78e [ 1224.677735][T14532] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1224.677749][T14532] RSP: 002b:00007f5ea7a39fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1224.677768][T14532] RAX: ffffffffffffffda RBX: 00007f5ea7a3a6c0 RCX: 00007f5ea6b5b78e [ 1224.677779][T14532] RDX: 000000000000000f RSI: 00007f5ea7a3a0a0 RDI: 0000000000000005 [ 1224.677787][T14532] RBP: 00007f5ea7a3a090 R08: 0000000000000000 R09: 0000000000000000 [ 1224.677795][T14532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1224.677808][T14532] R13: 00007f5ea6e16038 R14: 00007f5ea6e15fa0 R15: 00007ffcd9c33fd8 [ 1224.677829][T14532] [ 1224.711558][T14526] lo speed is unknown, defaulting to 1000 [ 1225.200074][T14510] chnl_net:caif_netlink_parms(): no params data found [ 1225.225616][T14571] netlink: 12 bytes leftover after parsing attributes in process `syz.6.14962'. [ 1225.489425][T14510] bridge0: port 1(bridge_slave_0) entered blocking state [ 1225.514417][T14510] bridge0: port 1(bridge_slave_0) entered disabled state [ 1225.522012][T14510] bridge_slave_0: entered allmulticast mode [ 1225.531590][T14510] bridge_slave_0: entered promiscuous mode [ 1225.545514][T14584] netlink: 20 bytes leftover after parsing attributes in process `syz.6.14966'. [ 1225.562108][T14582] lo speed is unknown, defaulting to 1000 [ 1225.574304][T14510] bridge0: port 2(bridge_slave_1) entered blocking state [ 1225.581715][T14510] bridge0: port 2(bridge_slave_1) entered disabled state [ 1225.590019][T14510] bridge_slave_1: entered allmulticast mode [ 1225.603245][T14510] bridge_slave_1: entered promiscuous mode [ 1225.731776][T14510] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1225.765506][T14510] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1225.776336][T14518] Bluetooth: hci7: command tx timeout [ 1225.833926][T14510] team0: Port device team_slave_0 added [ 1225.845884][T14510] team0: Port device team_slave_1 added [ 1225.882495][T14510] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1225.890226][T14510] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1225.917190][T14510] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1225.931665][T14510] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1225.939859][T14510] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1225.967460][T14510] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1226.151389][T14510] hsr_slave_0: entered promiscuous mode [ 1226.182145][T14603] netlink: 'syz.4.14972': attribute type 3 has an invalid length. [ 1226.191112][T14603] netlink: 'syz.4.14972': attribute type 1 has an invalid length. [ 1226.201243][T14510] hsr_slave_1: entered promiscuous mode [ 1226.214431][T14510] debugfs: 'hsr0' already exists in 'hsr' [ 1226.222637][T14603] netlink: 232 bytes leftover after parsing attributes in process `syz.4.14972'. [ 1226.231573][T14510] Cannot create hsr debugfs directory [ 1226.371411][T14609] nftables ruleset with unbound set [ 1226.513765][T14615] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14975'. [ 1226.762923][T14624] netlink: 16 bytes leftover after parsing attributes in process `syz.6.14976'. [ 1226.805498][T14510] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1226.832183][T14510] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1226.872700][T14624] bond0: entered promiscuous mode [ 1226.879180][T14624] : entered promiscuous mode [ 1226.885649][T14624] bond_slave_1: entered promiscuous mode [ 1226.897695][T14624] gretap0: entered promiscuous mode [ 1226.910038][T14624] debugfs: 'hsr1' already exists in 'hsr' [ 1226.917448][T14624] Cannot create hsr debugfs directory [ 1226.924527][T14624] hsr1: entered promiscuous mode [ 1227.007232][T14510] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1227.027664][T14510] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1227.169361][T14510] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1227.182280][T14510] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1227.262406][T14639] team_slave_0: entered promiscuous mode [ 1227.269334][T14639] team_slave_1: entered promiscuous mode [ 1227.291377][T14639] vlan4: entered promiscuous mode [ 1227.297057][T14639] team0: entered promiscuous mode [ 1227.364646][T14510] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1227.379385][T14510] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1227.436589][T14644] FAULT_INJECTION: forcing a failure. [ 1227.436589][T14644] name failslab, interval 1, probability 0, space 0, times 0 [ 1227.452699][T14644] CPU: 0 UID: 0 PID: 14644 Comm: syz.2.14985 Not tainted syzkaller #0 PREEMPT(full) [ 1227.452718][T14644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1227.452725][T14644] Call Trace: [ 1227.452730][T14644] [ 1227.452735][T14644] dump_stack_lvl+0xe8/0x150 [ 1227.452753][T14644] should_fail_ex+0x412/0x560 [ 1227.452768][T14644] should_failslab+0xa8/0x100 [ 1227.452781][T14644] __kmalloc_cache_noprof+0x83/0x6e0 [ 1227.452792][T14644] ? nsim_nexthop_event_nb+0xa8/0x4450 [ 1227.452806][T14644] nsim_nexthop_event_nb+0xa8/0x4450 [ 1227.452817][T14644] ? blocking_notifier_call_chain+0x54/0x90 [ 1227.452829][T14644] ? blocking_notifier_call_chain+0x54/0x90 [ 1227.452846][T14644] notifier_call_chain+0x19d/0x3a0 [ 1227.452863][T14644] blocking_notifier_call_chain+0x6a/0x90 [ 1227.452875][T14644] call_nexthop_notifiers+0x17e/0x240 [ 1227.452890][T14644] ? __pfx_call_nexthop_notifiers+0x10/0x10 [ 1227.452904][T14644] ? l3mdev_fib_table+0x18/0x160 [ 1227.452921][T14644] rtm_new_nexthop+0x5506/0x8620 [ 1227.452932][T14644] ? kasan_save_track+0x3e/0x80 [ 1227.452941][T14644] ? kasan_save_free_info+0x46/0x50 [ 1227.452953][T14644] ? __kasan_slab_free+0x5c/0x80 [ 1227.452965][T14644] ? ___sys_sendmsg+0x2a5/0x360 [ 1227.452987][T14644] ? __x64_sys_sendmmsg+0xa0/0xc0 [ 1227.453004][T14644] ? do_syscall_64+0xe2/0xf80 [ 1227.453021][T14644] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1227.453045][T14644] ? __pfx_rtm_new_nexthop+0x10/0x10 [ 1227.453089][T14644] ? kasan_quarantine_put+0xbb/0x1f0 [ 1227.453112][T14644] ? lockdep_hardirqs_on+0x7a/0x110 [ 1227.453139][T14644] ? kmem_cache_free+0x195/0x610 [ 1227.453156][T14644] ? nlmon_xmit+0xb0/0x100 [ 1227.453185][T14644] ? __lock_acquire+0x6b5/0x2cf0 [ 1227.453221][T14644] ? lockdep_hardirqs_on+0x7a/0x110 [ 1227.453261][T14644] ? __dev_queue_xmit+0x274/0x3850 [ 1227.453283][T14644] ? __local_bh_enable_ip+0xd0/0x130 [ 1227.453298][T14644] ? __dev_queue_xmit+0x274/0x3850 [ 1227.453347][T14644] ? __pfx_rtm_new_nexthop+0x10/0x10 [ 1227.453366][T14644] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 1227.453391][T14644] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1227.453411][T14644] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1227.453428][T14644] ? ref_tracker_free+0x693/0x840 [ 1227.453447][T14644] ? __copy_skb_header+0xa3/0x4a0 [ 1227.453471][T14644] ? __pfx_ref_tracker_free+0x10/0x10 [ 1227.453502][T14644] netlink_rcv_skb+0x232/0x4b0 [ 1227.453524][T14644] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1227.453546][T14644] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1227.453573][T14644] ? netlink_deliver_tap+0x2e/0x1b0 [ 1227.453596][T14644] netlink_unicast+0x80f/0x9b0 [ 1227.453625][T14644] ? __pfx_netlink_unicast+0x10/0x10 [ 1227.453645][T14644] ? netlink_sendmsg+0x650/0xb40 [ 1227.453662][T14644] ? skb_put+0x11b/0x210 [ 1227.453685][T14644] netlink_sendmsg+0x813/0xb40 [ 1227.453715][T14644] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1227.453738][T14644] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1227.453760][T14644] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1227.453781][T14644] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1227.453798][T14644] ____sys_sendmsg+0xa68/0xad0 [ 1227.453819][T14644] ? __might_fault+0xaf/0x130 [ 1227.453848][T14644] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1227.453875][T14644] ? import_iovec+0x73/0xa0 [ 1227.453901][T14644] ___sys_sendmsg+0x2a5/0x360 [ 1227.453921][T14644] ? __lock_acquire+0x6b5/0x2cf0 [ 1227.453946][T14644] ? __pfx____sys_sendmsg+0x10/0x10 [ 1227.453972][T14644] ? kstrtouint+0x6e/0xe0 [ 1227.454017][T14644] ? __fget_files+0x2a/0x420 [ 1227.454034][T14644] ? __fget_files+0x3a0/0x420 [ 1227.454062][T14644] __sys_sendmmsg+0x27c/0x4e0 [ 1227.454089][T14644] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1227.454107][T14644] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1227.454154][T14644] ? ksys_write+0x242/0x270 [ 1227.454179][T14644] ? __pfx_ksys_write+0x10/0x10 [ 1227.454207][T14644] __x64_sys_sendmmsg+0xa0/0xc0 [ 1227.454231][T14644] do_syscall_64+0xe2/0xf80 [ 1227.454250][T14644] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1227.454267][T14644] ? trace_irq_disable+0x37/0x100 [ 1227.454283][T14644] ? clear_bhb_loop+0x60/0xb0 [ 1227.454309][T14644] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1227.454325][T14644] RIP: 0033:0x7fec79d9aeb9 [ 1227.454343][T14644] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1227.454357][T14644] RSP: 002b:00007fec7ad33028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1227.454375][T14644] RAX: ffffffffffffffda RBX: 00007fec7a015fa0 RCX: 00007fec79d9aeb9 [ 1227.454388][T14644] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000003 [ 1227.454400][T14644] RBP: 00007fec7ad33090 R08: 0000000000000000 R09: 0000000000000000 [ 1227.454410][T14644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1227.454420][T14644] R13: 00007fec7a016038 R14: 00007fec7a015fa0 R15: 00007ffc5be1e898 [ 1227.454450][T14644] [ 1227.465578][T14641] netlink: 'syz.3.14984': attribute type 2 has an invalid length. [ 1227.479376][T14618] delete_channel: no stack [ 1227.521624][T14641] netlink: 'syz.3.14984': attribute type 2 has an invalid length. [ 1227.726169][T14646] sctp: [Deprecated]: syz.3.14984 (pid 14646) Use of int in max_burst socket option deprecated. [ 1227.726169][T14646] Use struct sctp_assoc_value instead [ 1227.863938][T14518] Bluetooth: hci7: command tx timeout [ 1227.940345][T14652] netlink: 4 bytes leftover after parsing attributes in process `syz.6.14987'. [ 1228.095522][T14510] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1228.118262][T14510] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1228.129807][T14510] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1228.143796][T14510] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1228.458895][T14510] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1228.485260][T14510] 8021q: adding VLAN 0 to HW filter on device team0 [ 1228.502957][T24160] bridge0: port 1(bridge_slave_0) entered blocking state [ 1228.510247][T24160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1228.537656][T24164] bridge0: port 2(bridge_slave_1) entered blocking state [ 1228.546391][T24164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1228.775474][T14684] netlink: 'syz.6.14994': attribute type 10 has an invalid length. [ 1228.798137][T14684] netlink: 228 bytes leftover after parsing attributes in process `syz.6.14994'. [ 1228.808666][ T9343] net_ratelimit: 135 callbacks suppressed [ 1228.808686][ T9343] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1228.846038][ T9343] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1228.871782][T14687] FAULT_INJECTION: forcing a failure. [ 1228.871782][T14687] name failslab, interval 1, probability 0, space 0, times 0 [ 1228.892465][T14687] CPU: 1 UID: 0 PID: 14687 Comm: syz.3.14997 Not tainted syzkaller #0 PREEMPT(full) [ 1228.892490][T14687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1228.892501][T14687] Call Trace: [ 1228.892508][T14687] [ 1228.892516][T14687] dump_stack_lvl+0xe8/0x150 [ 1228.892541][T14687] should_fail_ex+0x412/0x560 [ 1228.892567][T14687] should_failslab+0xa8/0x100 [ 1228.892587][T14687] __kmalloc_noprof+0xde/0x7e0 [ 1228.892603][T14687] ? nf_tables_newrule+0x152c/0x28b0 [ 1228.892624][T14687] ? nla_strcmp+0x106/0x140 [ 1228.892647][T14687] nf_tables_newrule+0x152c/0x28b0 [ 1228.892681][T14687] ? __pfx_nf_tables_newrule+0x10/0x10 [ 1228.892701][T14687] ? nfnl_pernet+0x23/0x240 [ 1228.892716][T14687] ? nfnl_pernet+0x23/0x240 [ 1228.892736][T14687] ? __nla_parse+0x40/0x60 [ 1228.892759][T14687] nfnetlink_rcv+0x1240/0x27b0 [ 1228.892806][T14687] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1228.892836][T14687] ? ref_tracker_free+0x693/0x840 [ 1228.892880][T14687] ? __netlink_deliver_tap+0x807/0x850 [ 1228.892897][T14687] ? netlink_deliver_tap+0x2e/0x1b0 [ 1228.892929][T14687] netlink_unicast+0x80f/0x9b0 [ 1228.892955][T14687] ? __pfx_netlink_unicast+0x10/0x10 [ 1228.892977][T14687] ? netlink_sendmsg+0x650/0xb40 [ 1228.892991][T14687] ? skb_put+0x11b/0x210 [ 1228.893012][T14687] netlink_sendmsg+0x813/0xb40 [ 1228.893037][T14687] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1228.893058][T14687] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1228.893078][T14687] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1228.893096][T14687] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1228.893135][T14687] ____sys_sendmsg+0xa68/0xad0 [ 1228.893155][T14687] ? __might_fault+0xaf/0x130 [ 1228.893182][T14687] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1228.893211][T14687] ? import_iovec+0x73/0xa0 [ 1228.893237][T14687] ___sys_sendmsg+0x2a5/0x360 [ 1228.893256][T14687] ? __lock_acquire+0x6b5/0x2cf0 [ 1228.893280][T14687] ? __pfx____sys_sendmsg+0x10/0x10 [ 1228.893350][T14687] ? __fget_files+0x2a/0x420 [ 1228.893367][T14687] ? __fget_files+0x3a0/0x420 [ 1228.893395][T14687] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1228.893419][T14687] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1228.893449][T14687] ? __pfx_ksys_write+0x10/0x10 [ 1228.893483][T14687] do_syscall_64+0xe2/0xf80 [ 1228.893504][T14687] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1228.893520][T14687] ? trace_irq_disable+0x37/0x100 [ 1228.893535][T14687] ? clear_bhb_loop+0x60/0xb0 [ 1228.893557][T14687] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1228.893572][T14687] RIP: 0033:0x7f8efc59aeb9 [ 1228.893589][T14687] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1228.893603][T14687] RSP: 002b:00007f8efd3bf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1228.893621][T14687] RAX: ffffffffffffffda RBX: 00007f8efc815fa0 RCX: 00007f8efc59aeb9 [ 1228.893634][T14687] RDX: 0000000024000840 RSI: 0000200000009b40 RDI: 0000000000000003 [ 1228.893646][T14687] RBP: 00007f8efd3bf090 R08: 0000000000000000 R09: 0000000000000000 [ 1228.893656][T14687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1228.893667][T14687] R13: 00007f8efc816038 R14: 00007f8efc815fa0 R15: 00007ffc72897a98 [ 1228.893697][T14687] [ 1228.964066][T14510] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1229.008876][T24166] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1229.037903][T14692] netlink: 4 bytes leftover after parsing attributes in process `syz.6.14999'. [ 1229.064216][T24160] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1229.313755][T14510] veth0_vlan: entered promiscuous mode [ 1229.324353][T24166] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1229.328139][T14510] veth1_vlan: entered promiscuous mode [ 1229.381599][ T60] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1229.423910][ T9343] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1229.431952][T14701] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15003'. [ 1229.445328][T24164] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1229.475781][T24160] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1229.498795][T14701] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1229.515456][T24160] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1229.526407][T14705] bond7: Unable to set up delay as MII monitoring is disabled [ 1229.534385][T14707] netlink: 36 bytes leftover after parsing attributes in process `syz.3.15004'. [ 1229.562105][T14510] veth0_macvtap: entered promiscuous mode [ 1229.574616][T14709] netlink: 'syz.6.15000': attribute type 2 has an invalid length. [ 1229.575474][T14510] veth1_macvtap: entered promiscuous mode [ 1229.607304][T14510] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1229.639520][T14713] netlink: 'syz.6.15000': attribute type 2 has an invalid length. [ 1229.717767][T14709] : entered promiscuous mode [ 1229.734171][T14717] FAULT_INJECTION: forcing a failure. [ 1229.734171][T14717] name failslab, interval 1, probability 0, space 0, times 0 [ 1229.751023][T14717] CPU: 1 UID: 0 PID: 14717 Comm: syz.3.15007 Not tainted syzkaller #0 PREEMPT(full) [ 1229.751048][T14717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1229.751060][T14717] Call Trace: [ 1229.751067][T14717] [ 1229.751075][T14717] dump_stack_lvl+0xe8/0x150 [ 1229.751101][T14717] should_fail_ex+0x412/0x560 [ 1229.751127][T14717] should_failslab+0xa8/0x100 [ 1229.751148][T14717] __kmalloc_node_track_caller_noprof+0xe1/0x7f0 [ 1229.751168][T14717] ? ethnl_default_set_doit+0x595/0xad0 [ 1229.751350][T14717] ? trace_kmalloc+0x1f/0xb0 [ 1229.751364][T14717] ? __kmalloc_noprof+0x42d/0x7e0 [ 1229.751384][T14717] kmemdup_noprof+0x2b/0x70 [ 1229.751406][T14717] ethnl_default_set_doit+0x595/0xad0 [ 1229.751428][T14717] ? genl_family_rcv_msg_attrs_parse+0x212/0x2a0 [ 1229.751456][T14717] genl_family_rcv_msg_doit+0x22a/0x330 [ 1229.751479][T14717] ? __asan_memcpy+0x40/0x70 [ 1229.751505][T14717] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1229.751539][T14717] ? bpf_lsm_capable+0x9/0x20 [ 1229.751559][T14717] ? security_capable+0x7e/0x2c0 [ 1229.751585][T14717] genl_rcv_msg+0x61c/0x7a0 [ 1229.751613][T14717] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1229.751634][T14717] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 1229.751660][T14717] ? __pfx_ref_tracker_free+0x10/0x10 [ 1229.751688][T14717] netlink_rcv_skb+0x232/0x4b0 [ 1229.751708][T14717] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1229.751731][T14717] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1229.751747][T14717] ? genl_rcv+0x19/0x40 [ 1229.751784][T14717] ? down_read+0x272/0x2e0 [ 1229.751800][T14717] ? genl_rcv+0xd/0x40 [ 1229.751821][T14717] genl_rcv+0x28/0x40 [ 1229.751840][T14717] netlink_unicast+0x80f/0x9b0 [ 1229.751864][T14717] ? __pfx_netlink_unicast+0x10/0x10 [ 1229.751883][T14717] ? netlink_sendmsg+0x650/0xb40 [ 1229.751900][T14717] ? skb_put+0x11b/0x210 [ 1229.751924][T14717] netlink_sendmsg+0x813/0xb40 [ 1229.751952][T14717] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1229.751974][T14717] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1229.751996][T14717] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1229.752016][T14717] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1229.752033][T14717] ____sys_sendmsg+0xa68/0xad0 [ 1229.752055][T14717] ? __might_fault+0xaf/0x130 [ 1229.752084][T14717] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1229.752115][T14717] ? import_iovec+0x73/0xa0 [ 1229.752142][T14717] ___sys_sendmsg+0x2a5/0x360 [ 1229.752163][T14717] ? __lock_acquire+0x6b5/0x2cf0 [ 1229.752197][T14717] ? __pfx____sys_sendmsg+0x10/0x10 [ 1229.752254][T14717] ? __fget_files+0x2a/0x420 [ 1229.752272][T14717] ? __fget_files+0x3a0/0x420 [ 1229.752300][T14717] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1229.752326][T14717] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1229.752357][T14717] ? __pfx_ksys_write+0x10/0x10 [ 1229.752397][T14717] do_syscall_64+0xe2/0xf80 [ 1229.752419][T14717] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1229.752435][T14717] ? trace_irq_disable+0x37/0x100 [ 1229.752452][T14717] ? clear_bhb_loop+0x60/0xb0 [ 1229.752472][T14717] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1229.752489][T14717] RIP: 0033:0x7f8efc59aeb9 [ 1229.752506][T14717] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1229.752521][T14717] RSP: 002b:00007f8efd3bf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1229.752540][T14717] RAX: ffffffffffffffda RBX: 00007f8efc815fa0 RCX: 00007f8efc59aeb9 [ 1229.752552][T14717] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 1229.752564][T14717] RBP: 00007f8efd3bf090 R08: 0000000000000000 R09: 0000000000000000 [ 1229.752575][T14717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1229.752585][T14717] R13: 00007f8efc816038 R14: 00007f8efc815fa0 R15: 00007ffc72897a98 [ 1229.752615][T14717] [ 1230.013343][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1230.039845][T14518] Bluetooth: hci7: command tx timeout [ 1230.125127][T14709] sctp: [Deprecated]: syz.6.15000 (pid 14709) Use of int in max_burst socket option deprecated. [ 1230.125127][T14709] Use struct sctp_assoc_value instead [ 1230.170549][T14510] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1230.216522][ T9343] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1230.229768][ T9343] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1230.346240][T14725] __nla_validate_parse: 1 callbacks suppressed [ 1230.346255][T14725] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15010'. [ 1230.385221][ T9343] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1230.386070][T14725] netlink: 60 bytes leftover after parsing attributes in process `syz.4.15010'. [ 1230.419980][ T9343] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1230.735677][T14735] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15013'. [ 1230.741475][T24160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1230.763119][T24160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1230.797005][T14743] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15016'. [ 1230.802605][T24160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1230.818955][T24160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1230.923969][T14749] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15018'. [ 1231.162772][ T30] audit: type=1804 audit(1770347857.705:7): pid=14763 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.15022" name="/newroot/1/memory.events" dev="tmpfs" ino=23 res=1 errno=0 [ 1231.217267][ T30] audit: type=1800 audit(1770347857.735:8): pid=14763 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.15022" name="memory.events" dev="tmpfs" ino=23 res=0 errno=0 [ 1231.269871][ T30] audit: type=1804 audit(1770347857.805:9): pid=14764 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.15022" name="/newroot/1/memory.events" dev="tmpfs" ino=23 res=1 errno=0 [ 1231.968750][T14770] netlink: 'syz.2.15024': attribute type 2 has an invalid length. [ 1232.020260][T14772] netlink: 'syz.2.15024': attribute type 2 has an invalid length. [ 1232.130944][T14772] sctp: [Deprecated]: syz.2.15024 (pid 14772) Use of int in max_burst socket option deprecated. [ 1232.130944][T14772] Use struct sctp_assoc_value instead [ 1232.184124][T14518] Bluetooth: hci7: command tx timeout [ 1232.261627][T14787] netlink: 'syz.4.15032': attribute type 2 has an invalid length. [ 1232.283983][T14787] netlink: 'syz.4.15032': attribute type 2 has an invalid length. [ 1232.331682][T14787] netlink: 'syz.4.15032': attribute type 2 has an invalid length. [ 1232.351968][T14787] netlink: 'syz.4.15032': attribute type 2 has an invalid length. [ 1232.364952][T14787] netlink: 'syz.4.15032': attribute type 2 has an invalid length. [ 1232.383807][T14795] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15034'. [ 1232.520709][T14801] lo speed is unknown, defaulting to 1000 [ 1232.771257][T14808] syzkaller0: entered allmulticast mode [ 1232.863438][T14808] syzkaller0: entered promiscuous mode [ 1232.967654][T14808] syzkaller0 (unregistering): left promiscuous mode [ 1233.004186][T14808] syzkaller0 (unregistering): left allmulticast mode [ 1233.683438][T14834] lo speed is unknown, defaulting to 1000 [ 1233.823622][T24160] net_ratelimit: 120 callbacks suppressed [ 1233.823640][T24160] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1233.849963][T14843] bond8: entered promiscuous mode [ 1233.859267][T24164] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1233.896874][T14843] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1233.907887][ T5505] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1233.934987][ T9343] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1233.973189][ T5505] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1234.003363][ T1032] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1234.044546][ T1032] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1234.067017][T14839] validate_nla: 1 callbacks suppressed [ 1234.067036][T14839] netlink: 'syz.4.15052': attribute type 1 has an invalid length. [ 1234.113149][ T1032] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1234.125113][T14843] bond8: (slave bridge6): making interface the new active one [ 1234.134252][T14839] netlink: 244 bytes leftover after parsing attributes in process `syz.4.15052'. [ 1234.147134][T24160] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1234.156370][T14843] bridge6: entered promiscuous mode [ 1234.169580][T14843] bridge6: left promiscuous mode [ 1234.185414][ T5505] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1234.503303][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1234.672030][T14859] dvmrp12: entered allmulticast mode [ 1234.774172][T14867] dvmrp12: left allmulticast mode [ 1234.880751][T14845] lo speed is unknown, defaulting to 1000 [ 1235.924142][T14945] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15072'. [ 1238.372334][T14945] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1238.383921][T14945] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1238.408605][T14945] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1238.488953][T14911] lo speed is unknown, defaulting to 1000 [ 1238.601971][T14953] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15076'. [ 1238.689321][T14962] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15078'. [ 1238.718082][T14962] netlink: 24 bytes leftover after parsing attributes in process `syz.4.15078'. [ 1238.933580][ T9343] net_ratelimit: 209 callbacks suppressed [ 1238.933600][ T9343] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1238.945508][T14971] geneve2: entered promiscuous mode [ 1239.003383][ T9343] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1239.035937][ T60] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 44417 - 0 [ 1239.062936][T24164] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1239.085441][ T60] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 44417 - 0 [ 1239.103656][T24164] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1239.113877][ T60] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 44417 - 0 [ 1239.135471][ T60] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 44417 - 0 [ 1239.143671][ T9343] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1239.173794][ T60] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1239.185007][T14974] lo speed is unknown, defaulting to 1000 [ 1239.204606][ T60] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1239.309272][T14984] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15085'. [ 1239.345513][ T60] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1239.383270][T24166] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1239.391786][T24166] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1239.442646][T14988] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15086'. [ 1239.573391][T14993] netlink: 108 bytes leftover after parsing attributes in process `syz.2.15088'. [ 1239.796910][T15004] FAULT_INJECTION: forcing a failure. [ 1239.796910][T15004] name failslab, interval 1, probability 0, space 0, times 0 [ 1239.821485][T15004] CPU: 1 UID: 0 PID: 15004 Comm: syz.0.15093 Not tainted syzkaller #0 PREEMPT(full) [ 1239.821508][T15004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1239.821517][T15004] Call Trace: [ 1239.821524][T15004] [ 1239.821532][T15004] dump_stack_lvl+0xe8/0x150 [ 1239.821559][T15004] should_fail_ex+0x412/0x560 [ 1239.821585][T15004] should_failslab+0xa8/0x100 [ 1239.821606][T15004] kmem_cache_alloc_node_noprof+0x8b/0x6f0 [ 1239.821630][T15004] ? __alloc_skb+0x186/0x7d0 [ 1239.821649][T15004] ? __alloc_skb+0x1d0/0x7d0 [ 1239.821666][T15004] ? __local_bh_enable_ip+0xd0/0x130 [ 1239.821687][T15004] __alloc_skb+0x1d0/0x7d0 [ 1239.821706][T15004] ? netlink_ack_tlv_len+0x6c/0x210 [ 1239.821726][T15004] netlink_ack+0x146/0xa50 [ 1239.821748][T15004] ? __kmalloc_cache_noprof+0x3d1/0x6e0 [ 1239.821771][T15004] nfnetlink_rcv+0x2517/0x27b0 [ 1239.821817][T15004] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1239.821844][T15004] ? ref_tracker_free+0x693/0x840 [ 1239.821885][T15004] ? __netlink_deliver_tap+0x807/0x850 [ 1239.821901][T15004] ? netlink_deliver_tap+0x2e/0x1b0 [ 1239.821933][T15004] netlink_unicast+0x80f/0x9b0 [ 1239.821959][T15004] ? __pfx_netlink_unicast+0x10/0x10 [ 1239.821974][T15004] ? netlink_sendmsg+0x650/0xb40 [ 1239.821988][T15004] ? skb_put+0x11b/0x210 [ 1239.822010][T15004] netlink_sendmsg+0x813/0xb40 [ 1239.822035][T15004] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1239.822056][T15004] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1239.822077][T15004] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1239.822097][T15004] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1239.822111][T15004] ____sys_sendmsg+0xa68/0xad0 [ 1239.822131][T15004] ? __might_fault+0xaf/0x130 [ 1239.822167][T15004] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1239.822194][T15004] ? import_iovec+0x73/0xa0 [ 1239.822225][T15004] ___sys_sendmsg+0x2a5/0x360 [ 1239.822243][T15004] ? __lock_acquire+0x6b5/0x2cf0 [ 1239.822269][T15004] ? __pfx____sys_sendmsg+0x10/0x10 [ 1239.822321][T15004] ? __fget_files+0x2a/0x420 [ 1239.822338][T15004] ? __fget_files+0x3a0/0x420 [ 1239.822365][T15004] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1239.822389][T15004] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1239.822424][T15004] ? __pfx_ksys_write+0x10/0x10 [ 1239.822455][T15004] do_syscall_64+0xe2/0xf80 [ 1239.822474][T15004] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1239.822490][T15004] ? clear_bhb_loop+0x60/0xb0 [ 1239.822508][T15004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1239.822522][T15004] RIP: 0033:0x7f3da199aeb9 [ 1239.822538][T15004] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1239.822550][T15004] RSP: 002b:00007f3da2878028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1239.822567][T15004] RAX: ffffffffffffffda RBX: 00007f3da1c15fa0 RCX: 00007f3da199aeb9 [ 1239.822579][T15004] RDX: 0000000004040000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1239.822589][T15004] RBP: 00007f3da2878090 R08: 0000000000000000 R09: 0000000000000000 [ 1239.822600][T15004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1239.822610][T15004] R13: 00007f3da1c16038 R14: 00007f3da1c15fa0 R15: 00007ffd655797f8 [ 1239.822634][T15004] [ 1240.174360][T15000] netlink: 12 bytes leftover after parsing attributes in process `syz.6.15091'. [ 1240.465739][T15015] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15098'. [ 1240.715165][T15020] FAULT_INJECTION: forcing a failure. [ 1240.715165][T15020] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1240.763534][T15020] CPU: 1 UID: 0 PID: 15020 Comm: syz.2.15100 Not tainted syzkaller #0 PREEMPT(full) [ 1240.763559][T15020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1240.763570][T15020] Call Trace: [ 1240.763577][T15020] [ 1240.763585][T15020] dump_stack_lvl+0xe8/0x150 [ 1240.763611][T15020] should_fail_ex+0x412/0x560 [ 1240.763634][T15020] _copy_to_user+0x31/0xb0 [ 1240.763657][T15020] simple_read_from_buffer+0xe1/0x170 [ 1240.763681][T15020] proc_fail_nth_read+0x1bb/0x230 [ 1240.763706][T15020] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1240.763729][T15020] ? rw_verify_area+0x2a6/0x4d0 [ 1240.763749][T15020] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1240.763771][T15020] vfs_read+0x20c/0xa70 [ 1240.763791][T15020] ? fdget_pos+0x246/0x320 [ 1240.763813][T15020] ? __pfx___mutex_lock+0x10/0x10 [ 1240.763833][T15020] ? __pfx_vfs_read+0x10/0x10 [ 1240.763853][T15020] ? __fget_files+0x2a/0x420 [ 1240.763872][T15020] ? __fget_files+0x3a0/0x420 [ 1240.763892][T15020] ? __fget_files+0x2a/0x420 [ 1240.763914][T15020] ksys_read+0x150/0x270 [ 1240.763936][T15020] ? __pfx_ksys_read+0x10/0x10 [ 1240.763967][T15020] do_syscall_64+0xe2/0xf80 [ 1240.763988][T15020] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1240.764003][T15020] ? trace_irq_disable+0x37/0x100 [ 1240.764018][T15020] ? clear_bhb_loop+0x60/0xb0 [ 1240.764038][T15020] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1240.764054][T15020] RIP: 0033:0x7fec79d5b78e [ 1240.764071][T15020] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1240.764085][T15020] RSP: 002b:00007fec7ad32fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1240.764104][T15020] RAX: ffffffffffffffda RBX: 00007fec7ad336c0 RCX: 00007fec79d5b78e [ 1240.764117][T15020] RDX: 000000000000000f RSI: 00007fec7ad330a0 RDI: 0000000000000005 [ 1240.764127][T15020] RBP: 00007fec7ad33090 R08: 0000000000000000 R09: 0000000000000000 [ 1240.764137][T15020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1240.764151][T15020] R13: 00007fec7a016038 R14: 00007fec7a015fa0 R15: 00007ffc5be1e898 [ 1240.764178][T15020] [ 1241.118872][T15032] netlink: 'syz.2.15104': attribute type 1 has an invalid length. [ 1241.228573][T15032] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1241.338503][T15038] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1241.351767][T15038] bond3: (slave batadv0): making interface the new active one [ 1241.361844][T15038] bond3: (slave batadv0): Enslaving as an active interface with an up link [ 1241.426266][T15043] netlink: 'syz.6.15107': attribute type 2 has an invalid length. [ 1241.443939][T15032] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15104'. [ 1241.495218][T15053] netlink: 'syz.6.15107': attribute type 2 has an invalid length. [ 1241.543518][T15032] bond3 (unregistering): (slave batadv0): Releasing active interface [ 1241.567199][T15032] bond3 (unregistering): Released all slaves [ 1241.703946][T15048] sctp: [Deprecated]: syz.6.15107 (pid 15048) Use of int in max_burst socket option deprecated. [ 1241.703946][T15048] Use struct sctp_assoc_value instead [ 1241.730449][T15056] macsec1: entered allmulticast mode [ 1241.738218][T15056] macsec0: entered allmulticast mode [ 1241.761500][T15056] veth1_macvtap: entered allmulticast mode [ 1241.859021][T15064] netlink: 'syz.0.15114': attribute type 10 has an invalid length. [ 1241.883706][T15064] netlink: 228 bytes leftover after parsing attributes in process `syz.0.15114'. [ 1242.092562][T15072] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15117'. [ 1242.119872][T15073] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15118'. [ 1242.222138][T15075] netlink: 'syz.2.15119': attribute type 1 has an invalid length. [ 1242.256465][T15075] netlink: 32 bytes leftover after parsing attributes in process `syz.2.15119'. [ 1242.275913][T15075] FAULT_INJECTION: forcing a failure. [ 1242.275913][T15075] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1242.298509][T15079] netlink: 1760 bytes leftover after parsing attributes in process `syz.6.15120'. [ 1242.300973][T15081] netlink: 60 bytes leftover after parsing attributes in process `syz.0.15121'. [ 1242.320179][T15075] CPU: 1 UID: 0 PID: 15075 Comm: syz.2.15119 Not tainted syzkaller #0 PREEMPT(full) [ 1242.320205][T15075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1242.320216][T15075] Call Trace: [ 1242.320224][T15075] [ 1242.320234][T15075] dump_stack_lvl+0xe8/0x150 [ 1242.320270][T15075] should_fail_ex+0x412/0x560 [ 1242.320296][T15075] _copy_to_user+0x31/0xb0 [ 1242.320322][T15075] simple_read_from_buffer+0xe1/0x170 [ 1242.320354][T15075] proc_fail_nth_read+0x1bb/0x230 [ 1242.320380][T15075] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1242.320405][T15075] ? rw_verify_area+0x2a6/0x4d0 [ 1242.320424][T15075] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1242.320447][T15075] vfs_read+0x20c/0xa70 [ 1242.320466][T15075] ? fdget_pos+0x246/0x320 [ 1242.320488][T15075] ? __pfx___mutex_lock+0x10/0x10 [ 1242.320511][T15075] ? __pfx_vfs_read+0x10/0x10 [ 1242.320534][T15075] ? __fget_files+0x2a/0x420 [ 1242.320557][T15075] ? __fget_files+0x3a0/0x420 [ 1242.320573][T15075] ? __fget_files+0x2a/0x420 [ 1242.320600][T15075] ksys_read+0x150/0x270 [ 1242.320624][T15075] ? __pfx_ksys_read+0x10/0x10 [ 1242.320657][T15075] do_syscall_64+0xe2/0xf80 [ 1242.320678][T15075] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1242.320695][T15075] ? trace_irq_disable+0x37/0x100 [ 1242.320711][T15075] ? clear_bhb_loop+0x60/0xb0 [ 1242.320732][T15075] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1242.320749][T15075] RIP: 0033:0x7fec79d5b78e [ 1242.320765][T15075] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1242.320781][T15075] RSP: 002b:00007fec7ad32fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1242.320800][T15075] RAX: ffffffffffffffda RBX: 00007fec7ad336c0 RCX: 00007fec79d5b78e [ 1242.320812][T15075] RDX: 000000000000000f RSI: 00007fec7ad330a0 RDI: 0000000000000003 [ 1242.320823][T15075] RBP: 00007fec7ad33090 R08: 0000000000000000 R09: 0000000000000000 [ 1242.320835][T15075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1242.320845][T15075] R13: 00007fec7a016038 R14: 00007fec7a015fa0 R15: 00007ffc5be1e898 [ 1242.320876][T15075] [ 1242.820964][ T25] block nbd3: Possible stuck request ffff888025668000: control (read@0,1024B). Runtime 30 seconds [ 1242.833619][ T25] block nbd3: Possible stuck request ffff888025668200: control (read@1024,1024B). Runtime 30 seconds [ 1242.845210][ T25] block nbd3: Possible stuck request ffff888025668400: control (read@2048,1024B). Runtime 30 seconds [ 1242.857018][ T25] block nbd3: Possible stuck request ffff888025668600: control (read@3072,1024B). Runtime 30 seconds [ 1242.926373][T15095] netlink: 32 bytes leftover after parsing attributes in process `syz.2.15127'. [ 1243.083449][T15102] netlink: 'syz.6.15130': attribute type 3 has an invalid length. [ 1243.137611][T15106] netlink: 1760 bytes leftover after parsing attributes in process `syz.0.15132'. [ 1243.207428][T15109] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15134'. [ 1243.515861][T15121] netlink: 'syz.4.15140': attribute type 10 has an invalid length. [ 1243.563616][T15121] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1243.587011][T15121] team0: Port device bond0 added [ 1244.024108][ T60] net_ratelimit: 106 callbacks suppressed [ 1244.024128][ T60] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1244.167475][ T60] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1244.303692][T24164] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1244.311622][T24164] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1244.433642][T24164] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1244.441674][T24164] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1244.573929][ T9343] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1244.594026][ T9343] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1244.613100][ T60] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1244.643495][ T60] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1246.819851][T15144] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1247.075065][T15185] __nla_validate_parse: 6 callbacks suppressed [ 1247.075085][T15185] netlink: 32 bytes leftover after parsing attributes in process `syz.2.15157'. [ 1247.153104][T15187] netlink: 48 bytes leftover after parsing attributes in process `syz.0.15159'. [ 1247.229413][T15189] netlink: 1760 bytes leftover after parsing attributes in process `syz.6.15160'. [ 1247.270517][T15191] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15162'. [ 1247.285262][T15197] FAULT_INJECTION: forcing a failure. [ 1247.285262][T15197] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1247.301929][T15197] CPU: 1 UID: 0 PID: 15197 Comm: syz.3.15161 Not tainted syzkaller #0 PREEMPT(full) [ 1247.301953][T15197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1247.301963][T15197] Call Trace: [ 1247.301971][T15197] [ 1247.301979][T15197] dump_stack_lvl+0xe8/0x150 [ 1247.302004][T15197] should_fail_ex+0x412/0x560 [ 1247.302026][T15197] _copy_from_user+0x2d/0xb0 [ 1247.302048][T15197] ___sys_sendmsg+0x1c6/0x360 [ 1247.302067][T15197] ? __lock_acquire+0x6b5/0x2cf0 [ 1247.302091][T15197] ? __pfx____sys_sendmsg+0x10/0x10 [ 1247.302140][T15197] ? __fget_files+0x2a/0x420 [ 1247.302157][T15197] ? __fget_files+0x3a0/0x420 [ 1247.302184][T15197] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1247.302206][T15197] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1247.302236][T15197] ? __pfx_ksys_write+0x10/0x10 [ 1247.302269][T15197] do_syscall_64+0xe2/0xf80 [ 1247.302291][T15197] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1247.302307][T15197] ? trace_irq_disable+0x37/0x100 [ 1247.302322][T15197] ? clear_bhb_loop+0x60/0xb0 [ 1247.302340][T15197] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1247.302354][T15197] RIP: 0033:0x7f8efc59aeb9 [ 1247.302370][T15197] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1247.302384][T15197] RSP: 002b:00007f8efd3bf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1247.302409][T15197] RAX: ffffffffffffffda RBX: 00007f8efc815fa0 RCX: 00007f8efc59aeb9 [ 1247.302422][T15197] RDX: 0000000020004804 RSI: 0000200000003b80 RDI: 0000000000000003 [ 1247.302432][T15197] RBP: 00007f8efd3bf090 R08: 0000000000000000 R09: 0000000000000000 [ 1247.302442][T15197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1247.302451][T15197] R13: 00007f8efc816038 R14: 00007f8efc815fa0 R15: 00007ffc72897a98 [ 1247.302477][T15197] [ 1247.672322][T15202] netlink: 16 bytes leftover after parsing attributes in process `syz.0.15167'. [ 1247.742126][T15214] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15171'. [ 1247.776833][T15216] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.15168'. [ 1247.830181][T15218] netlink: 32 bytes leftover after parsing attributes in process `syz.6.15172'. [ 1248.216645][T15231] FAULT_INJECTION: forcing a failure. [ 1248.216645][T15231] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1248.255418][T15231] CPU: 1 UID: 0 PID: 15231 Comm: syz.2.15177 Not tainted syzkaller #0 PREEMPT(full) [ 1248.255446][T15231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1248.255457][T15231] Call Trace: [ 1248.255464][T15231] [ 1248.255472][T15231] dump_stack_lvl+0xe8/0x150 [ 1248.255501][T15231] should_fail_ex+0x412/0x560 [ 1248.255526][T15231] _copy_to_user+0x31/0xb0 [ 1248.255552][T15231] simple_read_from_buffer+0xe1/0x170 [ 1248.255575][T15231] proc_fail_nth_read+0x1bb/0x230 [ 1248.255601][T15231] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1248.255625][T15231] ? rw_verify_area+0x2a6/0x4d0 [ 1248.255646][T15231] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1248.255666][T15231] vfs_read+0x20c/0xa70 [ 1248.255685][T15231] ? fdget_pos+0x246/0x320 [ 1248.255716][T15231] ? __pfx___mutex_lock+0x10/0x10 [ 1248.255738][T15231] ? __pfx_vfs_read+0x10/0x10 [ 1248.255760][T15231] ? __fget_files+0x2a/0x420 [ 1248.255782][T15231] ? __fget_files+0x3a0/0x420 [ 1248.255799][T15231] ? __fget_files+0x2a/0x420 [ 1248.255825][T15231] ksys_read+0x150/0x270 [ 1248.255849][T15231] ? __pfx_ksys_read+0x10/0x10 [ 1248.255881][T15231] do_syscall_64+0xe2/0xf80 [ 1248.255902][T15231] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1248.255918][T15231] ? trace_irq_disable+0x37/0x100 [ 1248.255935][T15231] ? clear_bhb_loop+0x60/0xb0 [ 1248.255962][T15231] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1248.255979][T15231] RIP: 0033:0x7fec79d5b78e [ 1248.255996][T15231] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1248.256010][T15231] RSP: 002b:00007fec7ad32fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1248.256029][T15231] RAX: ffffffffffffffda RBX: 00007fec7ad336c0 RCX: 00007fec79d5b78e [ 1248.256041][T15231] RDX: 000000000000000f RSI: 00007fec7ad330a0 RDI: 0000000000000007 [ 1248.256052][T15231] RBP: 00007fec7ad33090 R08: 0000000000000000 R09: 0000000000000000 [ 1248.256063][T15231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1248.256073][T15231] R13: 00007fec7a016038 R14: 00007fec7a015fa0 R15: 00007ffc5be1e898 [ 1248.256102][T15231] [ 1248.673882][T15244] IPv6: NLM_F_CREATE should be specified when creating new route [ 1249.044719][T24164] net_ratelimit: 82 callbacks suppressed [ 1249.044741][T24164] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1249.074874][T24164] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1249.148098][T15257] netlink: 1760 bytes leftover after parsing attributes in process `syz.6.15188'. [ 1249.195509][T24166] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1249.275831][T24166] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1249.395600][T15270] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15192'. [ 1249.444988][T24164] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1249.457315][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880616f0400: rx timeout, send abort [ 1249.466813][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880616f0400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1249.517055][T15272] syzkaller1: entered promiscuous mode [ 1249.523950][ T9343] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1249.542584][T15272] syzkaller1: entered allmulticast mode [ 1249.554747][T24164] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1249.562900][T24164] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1249.683134][T24164] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1249.703767][ T9343] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1249.859763][T15284] FAULT_INJECTION: forcing a failure. [ 1249.859763][T15284] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1249.938739][T15284] CPU: 0 UID: 0 PID: 15284 Comm: syz.2.15197 Not tainted syzkaller #0 PREEMPT(full) [ 1249.938766][T15284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1249.938778][T15284] Call Trace: [ 1249.938786][T15284] [ 1249.938795][T15284] dump_stack_lvl+0xe8/0x150 [ 1249.938821][T15284] should_fail_ex+0x412/0x560 [ 1249.938847][T15284] _copy_from_user+0x2d/0xb0 [ 1249.938872][T15284] __sys_connect+0x156/0x450 [ 1249.938896][T15284] ? __pfx___sys_connect+0x10/0x10 [ 1249.938928][T15284] ? __pfx_ksys_write+0x10/0x10 [ 1249.938958][T15284] __x64_sys_connect+0x7a/0x90 [ 1249.938980][T15284] do_syscall_64+0xe2/0xf80 [ 1249.939001][T15284] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1249.939017][T15284] ? trace_irq_disable+0x37/0x100 [ 1249.939033][T15284] ? clear_bhb_loop+0x60/0xb0 [ 1249.939052][T15284] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1249.939068][T15284] RIP: 0033:0x7fec79d9aeb9 [ 1249.939084][T15284] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1249.939099][T15284] RSP: 002b:00007fec7ad33028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 1249.939119][T15284] RAX: ffffffffffffffda RBX: 00007fec7a015fa0 RCX: 00007fec79d9aeb9 [ 1249.939132][T15284] RDX: 000000000000000e RSI: 0000200000000080 RDI: 0000000000000004 [ 1249.939144][T15284] RBP: 00007fec7ad33090 R08: 0000000000000000 R09: 0000000000000000 [ 1249.939155][T15284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1249.939166][T15284] R13: 00007fec7a016038 R14: 00007fec7a015fa0 R15: 00007ffc5be1e898 [ 1249.939195][T15284] [ 1250.205815][T15290] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1250.213753][T15290] IPv6: NLM_F_CREATE should be set when creating new route [ 1250.221158][T15290] IPv6: NLM_F_CREATE should be set when creating new route [ 1250.232619][T15290] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1250.281163][T15290] can: request_module (can-proto-4) failed. [ 1251.613903][T14518] Bluetooth: hci7: command tx timeout [ 1251.748023][T15354] lo speed is unknown, defaulting to 1000 [ 1251.846700][ C1] vcan0: j1939_tp_rxtimer: 0xffff888067c4f400: rx timeout, send abort [ 1251.856213][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888067c4f400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1252.010093][T15370] FAULT_INJECTION: forcing a failure. [ 1252.010093][T15370] name failslab, interval 1, probability 0, space 0, times 0 [ 1252.033689][T15370] CPU: 0 UID: 0 PID: 15370 Comm: syz.0.15222 Not tainted syzkaller #0 PREEMPT(full) [ 1252.033716][T15370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1252.033728][T15370] Call Trace: [ 1252.033735][T15370] [ 1252.033743][T15370] dump_stack_lvl+0xe8/0x150 [ 1252.033767][T15370] should_fail_ex+0x412/0x560 [ 1252.033791][T15370] should_failslab+0xa8/0x100 [ 1252.033812][T15370] kmem_cache_alloc_node_noprof+0x8b/0x6f0 [ 1252.033834][T15370] ? __alloc_skb+0x186/0x7d0 [ 1252.033852][T15370] ? __alloc_skb+0x1d0/0x7d0 [ 1252.033869][T15370] ? __local_bh_enable_ip+0xd0/0x130 [ 1252.033888][T15370] __alloc_skb+0x1d0/0x7d0 [ 1252.033907][T15370] ? netlink_ack_tlv_len+0x6c/0x210 [ 1252.033928][T15370] netlink_ack+0x146/0xa50 [ 1252.033945][T15370] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1252.033963][T15370] ? ref_tracker_free+0x693/0x840 [ 1252.033982][T15370] ? __copy_skb_header+0xa3/0x4a0 [ 1252.034015][T15370] ? __pfx_ref_tracker_free+0x10/0x10 [ 1252.034045][T15370] netlink_rcv_skb+0x2b6/0x4b0 [ 1252.034065][T15370] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1252.034086][T15370] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1252.034116][T15370] ? netlink_deliver_tap+0x2e/0x1b0 [ 1252.034142][T15370] netlink_unicast+0x80f/0x9b0 [ 1252.034168][T15370] ? __pfx_netlink_unicast+0x10/0x10 [ 1252.034187][T15370] ? netlink_sendmsg+0x650/0xb40 [ 1252.034204][T15370] ? skb_put+0x11b/0x210 [ 1252.034227][T15370] netlink_sendmsg+0x813/0xb40 [ 1252.034254][T15370] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1252.034276][T15370] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1252.034299][T15370] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1252.034318][T15370] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1252.034335][T15370] ____sys_sendmsg+0xa68/0xad0 [ 1252.034356][T15370] ? __might_fault+0xaf/0x130 [ 1252.034383][T15370] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1252.034412][T15370] ? import_iovec+0x73/0xa0 [ 1252.034437][T15370] ___sys_sendmsg+0x2a5/0x360 [ 1252.034457][T15370] ? __lock_acquire+0x6b5/0x2cf0 [ 1252.034483][T15370] ? __pfx____sys_sendmsg+0x10/0x10 [ 1252.034537][T15370] ? __fget_files+0x2a/0x420 [ 1252.034554][T15370] ? __fget_files+0x3a0/0x420 [ 1252.034581][T15370] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1252.034605][T15370] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1252.034636][T15370] ? __pfx_ksys_write+0x10/0x10 [ 1252.034669][T15370] do_syscall_64+0xe2/0xf80 [ 1252.034692][T15370] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1252.034708][T15370] ? trace_irq_disable+0x37/0x100 [ 1252.034724][T15370] ? clear_bhb_loop+0x60/0xb0 [ 1252.034744][T15370] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1252.034761][T15370] RIP: 0033:0x7f3da199aeb9 [ 1252.034778][T15370] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1252.034791][T15370] RSP: 002b:00007f3da2878028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1252.034808][T15370] RAX: ffffffffffffffda RBX: 00007f3da1c15fa0 RCX: 00007f3da199aeb9 [ 1252.034820][T15370] RDX: 0000000020044000 RSI: 0000200000000040 RDI: 0000000000000003 [ 1252.034832][T15370] RBP: 00007f3da2878090 R08: 0000000000000000 R09: 0000000000000000 [ 1252.034843][T15370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1252.034854][T15370] R13: 00007f3da1c16038 R14: 00007f3da1c15fa0 R15: 00007ffd655797f8 [ 1252.034882][T15370] [ 1252.644374][T14512] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1252.667766][T14512] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1252.678571][T14512] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1252.696177][T14512] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1252.723953][T14512] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1252.755473][T15375] netlink: 'syz.3.15226': attribute type 2 has an invalid length. [ 1252.781424][T15389] __nla_validate_parse: 5 callbacks suppressed [ 1252.781443][T15389] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15227'. [ 1252.806544][T15378] netlink: 'syz.3.15226': attribute type 2 has an invalid length. [ 1252.991752][T15375] sctp: [Deprecated]: syz.3.15226 (pid 15375) Use of int in max_burst socket option deprecated. [ 1252.991752][T15375] Use struct sctp_assoc_value instead [ 1253.015248][T15380] lo speed is unknown, defaulting to 1000 [ 1253.240717][ T5887] bond0: (slave syz_tun): Releasing backup interface [ 1253.560210][T15380] chnl_net:caif_netlink_parms(): no params data found [ 1253.791265][T15380] bridge0: port 1(bridge_slave_0) entered blocking state [ 1253.799510][T15380] bridge0: port 1(bridge_slave_0) entered disabled state [ 1253.808510][T15380] bridge_slave_0: entered allmulticast mode [ 1253.817359][T15380] bridge_slave_0: entered promiscuous mode [ 1253.871984][T15380] bridge0: port 2(bridge_slave_1) entered blocking state [ 1253.880295][T15380] bridge0: port 2(bridge_slave_1) entered disabled state [ 1253.887786][T15380] bridge_slave_1: entered allmulticast mode [ 1253.896660][T15380] bridge_slave_1: entered promiscuous mode [ 1253.949540][T15380] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1253.968072][T15380] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1254.018021][T15380] team0: Port device team_slave_0 added [ 1254.044448][T15380] team0: Port device team_slave_1 added [ 1254.053643][ T1032] net_ratelimit: 116 callbacks suppressed [ 1254.053660][ T1032] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1254.083222][ T9343] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1254.096691][T15380] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1254.104422][T15380] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1254.132260][T15380] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1254.134270][ T9343] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1254.162892][T15380] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1254.170818][T15380] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1254.183209][ T9343] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1254.199527][T15380] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1254.233241][ T9343] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1254.268873][T15380] hsr_slave_0: entered promiscuous mode [ 1254.269222][ T9343] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1254.311023][T15380] hsr_slave_1: entered promiscuous mode [ 1254.313236][ T1032] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1254.319299][T15380] debugfs: 'hsr0' already exists in 'hsr' [ 1254.373251][ T1032] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1254.393704][T24160] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1254.412498][T15380] Cannot create hsr debugfs directory [ 1254.419715][T24166] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1254.437096][T15444] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15245'. [ 1254.590031][T15449] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15247'. [ 1254.662545][T22820] lo speed is unknown, defaulting to 1000 [ 1254.665077][T15447] mac80211_hwsim hwsim104 syzkaller0: left promiscuous mode [ 1254.682180][T15447] mac80211_hwsim hwsim104 syzkaller0: left allmulticast mode [ 1254.712705][T15447] tipc: Resetting bearer [ 1254.817030][T14512] Bluetooth: hci4: command tx timeout [ 1255.024546][T15462] netlink: 'syz.3.15251': attribute type 2 has an invalid length. [ 1255.155115][T15459] bond3: entered allmulticast mode [ 1255.161312][T15459] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1255.281955][T15380] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1255.470555][T15380] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1255.532930][T15485] netlink: 24 bytes leftover after parsing attributes in process `syz.0.15260'. [ 1255.559193][T15485] netlink: 24 bytes leftover after parsing attributes in process `syz.0.15260'. [ 1255.664712][T15380] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1255.671603][T15489] netlink: 'syz.4.15262': attribute type 10 has an invalid length. [ 1255.685819][T15487] FAULT_INJECTION: forcing a failure. [ 1255.685819][T15487] name failslab, interval 1, probability 0, space 0, times 0 [ 1255.695112][T15489] netlink: 228 bytes leftover after parsing attributes in process `syz.4.15262'. [ 1255.699218][T15487] CPU: 0 UID: 0 PID: 15487 Comm: syz.6.15261 Not tainted syzkaller #0 PREEMPT(full) [ 1255.699242][T15487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1255.699252][T15487] Call Trace: [ 1255.699260][T15487] [ 1255.699267][T15487] dump_stack_lvl+0xe8/0x150 [ 1255.699295][T15487] should_fail_ex+0x412/0x560 [ 1255.699330][T15487] should_failslab+0xa8/0x100 [ 1255.699350][T15487] kmem_cache_alloc_node_noprof+0x8b/0x6f0 [ 1255.699375][T15487] ? __alloc_skb+0x1d0/0x7d0 [ 1255.699393][T15487] ? __local_bh_enable_ip+0xd0/0x130 [ 1255.699414][T15487] __alloc_skb+0x1d0/0x7d0 [ 1255.699433][T15487] ? netlink_ack_tlv_len+0x6c/0x210 [ 1255.699454][T15487] netlink_ack+0x146/0xa50 [ 1255.699468][T15487] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1255.699503][T15487] netlink_rcv_skb+0x2b6/0x4b0 [ 1255.699522][T15487] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1255.699544][T15487] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1255.699557][T15487] ? genl_rcv+0x19/0x40 [ 1255.699588][T15487] ? down_read+0x272/0x2e0 [ 1255.699602][T15487] ? genl_rcv+0xd/0x40 [ 1255.699623][T15487] genl_rcv+0x28/0x40 [ 1255.699641][T15487] netlink_unicast+0x80f/0x9b0 [ 1255.699666][T15487] ? __pfx_netlink_unicast+0x10/0x10 [ 1255.699691][T15487] ? netlink_sendmsg+0x650/0xb40 [ 1255.699708][T15487] ? skb_put+0x11b/0x210 [ 1255.699737][T15487] netlink_sendmsg+0x813/0xb40 [ 1255.699764][T15487] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1255.699785][T15487] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1255.699807][T15487] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1255.699827][T15487] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1255.699844][T15487] ____sys_sendmsg+0xa68/0xad0 [ 1255.699865][T15487] ? __might_fault+0xaf/0x130 [ 1255.699893][T15487] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1255.699922][T15487] ? import_iovec+0x73/0xa0 [ 1255.699947][T15487] ___sys_sendmsg+0x2a5/0x360 [ 1255.699967][T15487] ? __lock_acquire+0x6b5/0x2cf0 [ 1255.699992][T15487] ? __pfx____sys_sendmsg+0x10/0x10 [ 1255.700046][T15487] ? __fget_files+0x2a/0x420 [ 1255.700062][T15487] ? __fget_files+0x3a0/0x420 [ 1255.700089][T15487] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1255.700113][T15487] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1255.700143][T15487] ? __pfx_ksys_write+0x10/0x10 [ 1255.700176][T15487] do_syscall_64+0xe2/0xf80 [ 1255.700196][T15487] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1255.700212][T15487] ? trace_irq_disable+0x37/0x100 [ 1255.700228][T15487] ? clear_bhb_loop+0x60/0xb0 [ 1255.700248][T15487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1255.700263][T15487] RIP: 0033:0x7f5ea6b9aeb9 [ 1255.700279][T15487] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1255.700293][T15487] RSP: 002b:00007f5ea7a3a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1255.700310][T15487] RAX: ffffffffffffffda RBX: 00007f5ea6e15fa0 RCX: 00007f5ea6b9aeb9 [ 1255.700322][T15487] RDX: 000000000404c094 RSI: 0000200000000200 RDI: 0000000000000003 [ 1255.700334][T15487] RBP: 00007f5ea7a3a090 R08: 0000000000000000 R09: 0000000000000000 [ 1255.700344][T15487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1255.700354][T15487] R13: 00007f5ea6e16038 R14: 00007f5ea6e15fa0 R15: 00007ffcd9c33fd8 [ 1255.700382][T15487] [ 1256.135830][T15380] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1256.156856][T15504] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15266'. [ 1256.355629][T15380] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1256.371301][T15380] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1256.385665][T15380] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1256.408442][T15380] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1256.551722][T15517] tipc: Enabling of bearer rejected, failed to enable media [ 1256.661129][T15380] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1256.691814][T15380] 8021q: adding VLAN 0 to HW filter on device team0 [ 1256.705683][T24166] bridge0: port 1(bridge_slave_0) entered blocking state [ 1256.713111][T24166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1256.737627][ T1032] bridge0: port 2(bridge_slave_1) entered blocking state [ 1256.745170][ T1032] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1256.898031][T14512] Bluetooth: hci4: command tx timeout [ 1257.039336][T15380] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1257.101171][T15380] veth0_vlan: entered promiscuous mode [ 1257.132301][T15380] veth1_vlan: entered promiscuous mode [ 1257.210596][T15380] veth0_macvtap: entered promiscuous mode [ 1257.230382][T15546] netlink: 'syz.6.15276': attribute type 10 has an invalid length. [ 1257.230764][T15380] veth1_macvtap: entered promiscuous mode [ 1257.241049][T15546] netlink: 228 bytes leftover after parsing attributes in process `syz.6.15276'. [ 1257.281892][T15380] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1257.323559][T15380] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1257.349208][T10251] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1257.370864][T10251] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1257.405593][T10251] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1257.439338][T10251] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1257.642399][ T9343] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1257.674359][ T9343] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1257.698132][T15558] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1257.705612][T15558] IPv6: NLM_F_CREATE should be set when creating new route [ 1257.712953][T15558] IPv6: NLM_F_CREATE should be set when creating new route [ 1257.766904][T10251] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1257.777251][T10251] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1257.789422][T15567] netlink: 24 bytes leftover after parsing attributes in process `syz.0.15281'. [ 1257.842013][T15562] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15282'. [ 1257.882326][T15570] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15284'. [ 1257.989660][T15575] sctp: [Deprecated]: syz.2.15228 (pid 15575) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1257.989660][T15575] Use struct sctp_sack_info instead [ 1258.252396][T15584] netlink: 28 bytes leftover after parsing attributes in process `syz.0.15288'. [ 1258.425996][T15591] FAULT_INJECTION: forcing a failure. [ 1258.425996][T15591] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1258.455389][T15591] CPU: 1 UID: 0 PID: 15591 Comm: syz.6.15290 Not tainted syzkaller #0 PREEMPT(full) [ 1258.455414][T15591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1258.455424][T15591] Call Trace: [ 1258.455431][T15591] [ 1258.455439][T15591] dump_stack_lvl+0xe8/0x150 [ 1258.455464][T15591] should_fail_ex+0x412/0x560 [ 1258.455489][T15591] _copy_to_user+0x31/0xb0 [ 1258.455522][T15591] simple_read_from_buffer+0xe1/0x170 [ 1258.455544][T15591] proc_fail_nth_read+0x1bb/0x230 [ 1258.455569][T15591] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1258.455592][T15591] ? rw_verify_area+0x2a6/0x4d0 [ 1258.455610][T15591] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1258.455631][T15591] vfs_read+0x20c/0xa70 [ 1258.455727][T15591] ? fdget_pos+0x246/0x320 [ 1258.455748][T15591] ? __pfx___mutex_lock+0x10/0x10 [ 1258.455766][T15591] ? __pfx_vfs_read+0x10/0x10 [ 1258.455785][T15591] ? __fget_files+0x2a/0x420 [ 1258.455803][T15591] ? __fget_files+0x3a0/0x420 [ 1258.455818][T15591] ? __fget_files+0x2a/0x420 [ 1258.455842][T15591] ksys_read+0x150/0x270 [ 1258.455865][T15591] ? __pfx_ksys_read+0x10/0x10 [ 1258.455892][T15591] do_syscall_64+0xe2/0xf80 [ 1258.455912][T15591] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1258.455927][T15591] ? trace_irq_disable+0x37/0x100 [ 1258.455944][T15591] ? clear_bhb_loop+0x60/0xb0 [ 1258.455961][T15591] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1258.455975][T15591] RIP: 0033:0x7f5ea6b5b78e [ 1258.455990][T15591] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1258.456004][T15591] RSP: 002b:00007f5ea7a39fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1258.456030][T15591] RAX: ffffffffffffffda RBX: 00007f5ea7a3a6c0 RCX: 00007f5ea6b5b78e [ 1258.456042][T15591] RDX: 000000000000000f RSI: 00007f5ea7a3a0a0 RDI: 0000000000000004 [ 1258.456052][T15591] RBP: 00007f5ea7a3a090 R08: 0000000000000000 R09: 0000000000000000 [ 1258.456062][T15591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1258.456071][T15591] R13: 00007f5ea6e16038 R14: 00007f5ea6e15fa0 R15: 00007ffcd9c33fd8 [ 1258.456097][T15591] [ 1258.748468][T15597] netlink: 20 bytes leftover after parsing attributes in process `syz.4.15292'. [ 1258.812936][T15601] netlink: 20 bytes leftover after parsing attributes in process `syz.4.15292'. [ 1258.834289][T15601] nbd: device at index 64 is going down [ 1258.964856][T15611] netlink: 156 bytes leftover after parsing attributes in process `syz.3.15295'. [ 1258.979750][T14512] Bluetooth: hci4: command tx timeout [ 1259.064712][T24160] net_ratelimit: 131 callbacks suppressed [ 1259.064732][T24160] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1259.126741][ T9343] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1259.177846][T10251] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1259.213981][T10251] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1259.242710][T10251] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1259.258769][T14736] udevd[14736]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1259.393854][T10251] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1259.413779][T10251] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1259.517031][T15629] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15302'. [ 1259.528031][T24166] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1259.546213][T24166] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1259.565783][T15632] hsr0: entered promiscuous mode [ 1259.582629][T15630] hsr0: left promiscuous mode [ 1259.665157][T24170] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1259.709796][T15634] lo speed is unknown, defaulting to 1000 [ 1259.771491][T15640] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15305'. [ 1259.912169][T15649] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15307'. [ 1259.944330][T15645] team0 (unregistering): Port device team_slave_0 removed [ 1260.009240][T15645] team0 (unregistering): Port device team_slave_1 removed [ 1260.725555][T15679] lo speed is unknown, defaulting to 1000 [ 1260.774469][T15682] lo speed is unknown, defaulting to 1000 [ 1261.053419][T14512] Bluetooth: hci4: command tx timeout [ 1261.492443][T15710] FAULT_INJECTION: forcing a failure. [ 1261.492443][T15710] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1261.508139][T15710] CPU: 1 UID: 0 PID: 15710 Comm: syz.4.15327 Not tainted syzkaller #0 PREEMPT(full) [ 1261.508172][T15710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1261.508182][T15710] Call Trace: [ 1261.508191][T15710] [ 1261.508198][T15710] dump_stack_lvl+0xe8/0x150 [ 1261.508225][T15710] should_fail_ex+0x412/0x560 [ 1261.508249][T15710] _copy_to_iter+0x589/0x17d0 [ 1261.508285][T15710] ? __pfx__copy_to_iter+0x10/0x10 [ 1261.508306][T15710] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1261.508327][T15710] ? lockdep_hardirqs_on+0x7a/0x110 [ 1261.508348][T15710] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1261.508368][T15710] ? __skb_try_recv_datagram+0x3d4/0x4d0 [ 1261.508397][T15710] __skb_datagram_iter+0xf8/0x980 [ 1261.508421][T15710] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 1261.508452][T15710] skb_copy_datagram_iter+0xb5/0x210 [ 1261.508490][T15710] netlink_recvmsg+0x2c3/0xa50 [ 1261.508519][T15710] ? __pfx_netlink_recvmsg+0x10/0x10 [ 1261.508543][T15710] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1261.508565][T15710] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 1261.508582][T15710] ? security_socket_recvmsg+0x7e/0x2c0 [ 1261.508605][T15710] ? __pfx_netlink_recvmsg+0x10/0x10 [ 1261.508625][T15710] sock_recvmsg+0x22c/0x270 [ 1261.508647][T15710] ____sys_recvmsg+0x1e6/0x4a0 [ 1261.508678][T15710] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1261.508715][T15710] ? import_iovec+0x73/0xa0 [ 1261.508741][T15710] ___sys_recvmsg+0x215/0x590 [ 1261.508768][T15710] ? __pfx____sys_recvmsg+0x10/0x10 [ 1261.508794][T15710] ? __fget_files+0x2a/0x420 [ 1261.508830][T15710] ? __fget_files+0x3a0/0x420 [ 1261.508857][T15710] do_recvmmsg+0x334/0x800 [ 1261.508888][T15710] ? __pfx_do_recvmmsg+0x10/0x10 [ 1261.508922][T15710] ? _copy_from_user+0x94/0xb0 [ 1261.508959][T15710] __x64_sys_recvmmsg+0x1b7/0x250 [ 1261.508984][T15710] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1261.509018][T15710] do_syscall_64+0xe2/0xf80 [ 1261.509039][T15710] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1261.509056][T15710] ? trace_irq_disable+0x37/0x100 [ 1261.509076][T15710] ? clear_bhb_loop+0x60/0xb0 [ 1261.509097][T15710] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1261.509114][T15710] RIP: 0033:0x7f4f8159aeb9 [ 1261.509131][T15710] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1261.509146][T15710] RSP: 002b:00007f4f823be028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1261.509171][T15710] RAX: ffffffffffffffda RBX: 00007f4f81815fa0 RCX: 00007f4f8159aeb9 [ 1261.509184][T15710] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 1261.509196][T15710] RBP: 00007f4f823be090 R08: 0000200000003700 R09: 0000000000000000 [ 1261.509208][T15710] R10: 0000000000002000 R11: 0000000000000246 R12: 0000000000000001 [ 1261.509219][T15710] R13: 00007f4f81816038 R14: 00007f4f81815fa0 R15: 00007ffe5df18e28 [ 1261.509247][T15710] [ 1262.050876][T15719] syzkaller0: entered allmulticast mode [ 1262.068762][T15719] syzkaller0 (unregistering): left allmulticast mode [ 1262.162650][T15723] lo speed is unknown, defaulting to 1000 [ 1262.800746][T15762] netlink: 'syz.0.15343': attribute type 10 has an invalid length. [ 1262.808075][T15763] __nla_validate_parse: 39 callbacks suppressed [ 1262.808095][T15763] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15342'. [ 1262.811723][T15762] netlink: 228 bytes leftover after parsing attributes in process `syz.0.15343'. [ 1264.073368][T24170] net_ratelimit: 135 callbacks suppressed [ 1264.073390][T24170] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1264.109006][T24164] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1264.136179][T24170] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1264.170587][T24170] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1264.194791][T24170] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1264.228941][T24164] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1264.257687][T24166] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1264.285334][T24166] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1264.323183][T24166] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1264.354193][T24170] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1265.960061][T15781] lo speed is unknown, defaulting to 1000 [ 1266.101209][T15788] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15349'. [ 1266.112152][T15788] netlink: 16 bytes leftover after parsing attributes in process `syz.3.15349'. [ 1266.246958][T15795] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15353'. [ 1266.363842][T15806] netlink: 'syz.3.15356': attribute type 10 has an invalid length. [ 1266.372341][T15806] netlink: 228 bytes leftover after parsing attributes in process `syz.3.15356'. [ 1266.654992][T15813] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15359'. [ 1267.143447][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1267.149524][T15831] FAULT_INJECTION: forcing a failure. [ 1267.149524][T15831] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1267.181063][T15831] CPU: 0 UID: 0 PID: 15831 Comm: syz.4.15363 Not tainted syzkaller #0 PREEMPT(full) [ 1267.181089][T15831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1267.181101][T15831] Call Trace: [ 1267.181111][T15831] [ 1267.181120][T15831] dump_stack_lvl+0xe8/0x150 [ 1267.181148][T15831] should_fail_ex+0x412/0x560 [ 1267.181175][T15831] _copy_to_user+0x31/0xb0 [ 1267.181201][T15831] simple_read_from_buffer+0xe1/0x170 [ 1267.181224][T15831] proc_fail_nth_read+0x1bb/0x230 [ 1267.181250][T15831] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1267.181273][T15831] ? rw_verify_area+0x2a6/0x4d0 [ 1267.181292][T15831] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1267.181316][T15831] vfs_read+0x20c/0xa70 [ 1267.181336][T15831] ? fdget_pos+0x246/0x320 [ 1267.181360][T15831] ? __pfx___mutex_lock+0x10/0x10 [ 1267.181381][T15831] ? __pfx_vfs_read+0x10/0x10 [ 1267.181405][T15831] ? __fget_files+0x2a/0x420 [ 1267.181427][T15831] ? __fget_files+0x3a0/0x420 [ 1267.181444][T15831] ? __fget_files+0x2a/0x420 [ 1267.181471][T15831] ksys_read+0x150/0x270 [ 1267.181495][T15831] ? __pfx_ksys_read+0x10/0x10 [ 1267.181528][T15831] do_syscall_64+0xe2/0xf80 [ 1267.181549][T15831] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1267.181567][T15831] ? clear_bhb_loop+0x60/0xb0 [ 1267.181588][T15831] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1267.181605][T15831] RIP: 0033:0x7f4f8155b78e [ 1267.181747][T15831] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1267.181762][T15831] RSP: 002b:00007f4f823bdfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1267.181781][T15831] RAX: ffffffffffffffda RBX: 00007f4f823be6c0 RCX: 00007f4f8155b78e [ 1267.181794][T15831] RDX: 000000000000000f RSI: 00007f4f823be0a0 RDI: 0000000000000004 [ 1267.181806][T15831] RBP: 00007f4f823be090 R08: 0000000000000000 R09: 0000000000000000 [ 1267.181817][T15831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1267.181828][T15831] R13: 00007f4f81816038 R14: 00007f4f81815fa0 R15: 00007ffe5df18e28 [ 1267.181855][T15831] [ 1269.083248][T24160] net_ratelimit: 202 callbacks suppressed [ 1269.083270][T24160] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1269.113264][ T9343] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1269.140095][ T9343] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1269.168926][ T9343] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1269.196610][T24160] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1269.223256][T24160] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1269.251981][T24160] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1269.281142][T24170] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1269.308680][T24170] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1269.338892][T24170] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1270.446333][T15836] lo speed is unknown, defaulting to 1000 [ 1270.691373][T22820] IPVS: starting estimator thread 0... [ 1270.794928][T15860] IPVS: using max 45 ests per chain, 108000 per kthread [ 1270.817326][T15868] netlink: 80 bytes leftover after parsing attributes in process `syz.2.15372'. [ 1270.850838][T15867] netlink: 8 bytes leftover after parsing attributes in process `syz.6.15373'. [ 1270.876706][T15856] pim6reg: entered allmulticast mode [ 1270.906015][T15874] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15374'. [ 1271.199858][T15879] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15375'. [ 1271.345573][T15887] FAULT_INJECTION: forcing a failure. [ 1271.345573][T15887] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1271.419382][T15887] CPU: 1 UID: 0 PID: 15887 Comm: syz.2.15377 Not tainted syzkaller #0 PREEMPT(full) [ 1271.419416][T15887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1271.419426][T15887] Call Trace: [ 1271.419435][T15887] [ 1271.419443][T15887] dump_stack_lvl+0xe8/0x150 [ 1271.419469][T15887] should_fail_ex+0x412/0x560 [ 1271.419495][T15887] _copy_from_user+0x2d/0xb0 [ 1271.419519][T15887] ___sys_recvmsg+0x175/0x590 [ 1271.419553][T15887] ? __pfx____sys_recvmsg+0x10/0x10 [ 1271.419580][T15887] ? __fget_files+0x2a/0x420 [ 1271.419623][T15887] do_recvmmsg+0x334/0x800 [ 1271.419652][T15887] ? __pfx_do_recvmmsg+0x10/0x10 [ 1271.419686][T15887] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1271.419725][T15887] __x64_sys_recvmmsg+0x198/0x250 [ 1271.419749][T15887] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1271.419783][T15887] do_syscall_64+0xe2/0xf80 [ 1271.419804][T15887] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1271.419820][T15887] ? trace_irq_disable+0x37/0x100 [ 1271.419834][T15887] ? clear_bhb_loop+0x60/0xb0 [ 1271.419854][T15887] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1271.419871][T15887] RIP: 0033:0x7f9be2d9aeb9 [ 1271.419886][T15887] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1271.419900][T15887] RSP: 002b:00007f9be3c72028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1271.419920][T15887] RAX: ffffffffffffffda RBX: 00007f9be3016090 RCX: 00007f9be2d9aeb9 [ 1271.419933][T15887] RDX: 0400000000000207 RSI: 0000200000000080 RDI: 0000000000000003 [ 1271.419944][T15887] RBP: 00007f9be3c72090 R08: 0000000000000000 R09: 0000000000000000 [ 1271.419955][T15887] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 1271.419979][T15887] R13: 00007f9be3016128 R14: 00007f9be3016090 R15: 00007ffedc71afe8 [ 1271.420008][T15887] [ 1272.490388][T15921] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15390'. [ 1272.896483][ T25] block nbd3: Possible stuck request ffff888025668000: control (read@0,1024B). Runtime 60 seconds [ 1272.909131][ T25] block nbd3: Possible stuck request ffff888025668200: control (read@1024,1024B). Runtime 60 seconds [ 1272.921881][ T25] block nbd3: Possible stuck request ffff888025668400: control (read@2048,1024B). Runtime 60 seconds [ 1272.934373][ T25] block nbd3: Possible stuck request ffff888025668600: control (read@3072,1024B). Runtime 60 seconds [ 1273.476955][T15933] syzkaller0: entered promiscuous mode [ 1273.482918][T15933] syzkaller0: entered allmulticast mode [ 1273.652715][T15945] netlink: 'syz.3.15399': attribute type 1 has an invalid length. [ 1273.726556][T15950] FAULT_INJECTION: forcing a failure. [ 1273.726556][T15950] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1273.770521][T15950] CPU: 0 UID: 0 PID: 15950 Comm: syz.4.15402 Not tainted syzkaller #0 PREEMPT(full) [ 1273.770547][T15950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1273.770558][T15950] Call Trace: [ 1273.770566][T15950] [ 1273.770574][T15950] dump_stack_lvl+0xe8/0x150 [ 1273.770600][T15950] should_fail_ex+0x412/0x560 [ 1273.770624][T15950] _copy_from_user+0x2d/0xb0 [ 1273.770644][T15950] ___sys_sendmsg+0x1c6/0x360 [ 1273.770663][T15950] ? __lock_acquire+0x6b5/0x2cf0 [ 1273.770687][T15950] ? __pfx____sys_sendmsg+0x10/0x10 [ 1273.770737][T15950] ? __fget_files+0x2a/0x420 [ 1273.770754][T15950] ? __fget_files+0x3a0/0x420 [ 1273.770782][T15950] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1273.770806][T15950] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1273.770835][T15950] ? __pfx_ksys_write+0x10/0x10 [ 1273.770867][T15950] do_syscall_64+0xe2/0xf80 [ 1273.770889][T15950] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1273.770906][T15950] ? trace_irq_disable+0x37/0x100 [ 1273.770921][T15950] ? clear_bhb_loop+0x60/0xb0 [ 1273.770940][T15950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1273.770954][T15950] RIP: 0033:0x7f4f8159aeb9 [ 1273.770970][T15950] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1273.770982][T15950] RSP: 002b:00007f4f823be028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1273.771000][T15950] RAX: ffffffffffffffda RBX: 00007f4f81815fa0 RCX: 00007f4f8159aeb9 [ 1273.771011][T15950] RDX: 0000000000000840 RSI: 0000200000000240 RDI: 0000000000000005 [ 1273.771022][T15950] RBP: 00007f4f823be090 R08: 0000000000000000 R09: 0000000000000000 [ 1273.771032][T15950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1273.771043][T15950] R13: 00007f4f81816038 R14: 00007f4f81815fa0 R15: 00007ffe5df18e28 [ 1273.771071][T15950] [ 1274.014954][T15950] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 1274.084245][T15960] FAULT_INJECTION: forcing a failure. [ 1274.084245][T15960] name failslab, interval 1, probability 0, space 0, times 0 [ 1274.098551][T24170] net_ratelimit: 139 callbacks suppressed [ 1274.098572][T24170] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1274.115435][T15960] CPU: 0 UID: 0 PID: 15960 Comm: syz.6.15405 Not tainted syzkaller #0 PREEMPT(full) [ 1274.115458][T15960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1274.115468][T15960] Call Trace: [ 1274.115475][T15960] [ 1274.115483][T15960] dump_stack_lvl+0xe8/0x150 [ 1274.115510][T15960] should_fail_ex+0x412/0x560 [ 1274.115535][T15960] should_failslab+0xa8/0x100 [ 1274.115556][T15960] kmem_cache_alloc_node_noprof+0x8b/0x6f0 [ 1274.115579][T15960] ? __alloc_skb+0x186/0x7d0 [ 1274.115598][T15960] ? __alloc_skb+0x1d0/0x7d0 [ 1274.115614][T15960] ? __local_bh_enable_ip+0xd0/0x130 [ 1274.115635][T15960] __alloc_skb+0x1d0/0x7d0 [ 1274.115658][T15960] netlink_sendmsg+0x5d4/0xb40 [ 1274.115685][T15960] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1274.115706][T15960] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1274.115727][T15960] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1274.115747][T15960] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1274.115764][T15960] ____sys_sendmsg+0xa68/0xad0 [ 1274.115785][T15960] ? __might_fault+0xaf/0x130 [ 1274.115812][T15960] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1274.115839][T15960] ? import_iovec+0x73/0xa0 [ 1274.115861][T15960] ___sys_sendmsg+0x2a5/0x360 [ 1274.115880][T15960] ? __lock_acquire+0x6b5/0x2cf0 [ 1274.115906][T15960] ? __pfx____sys_sendmsg+0x10/0x10 [ 1274.115954][T15960] ? __fget_files+0x2a/0x420 [ 1274.115970][T15960] ? __fget_files+0x3a0/0x420 [ 1274.115997][T15960] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1274.116019][T15960] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1274.116048][T15960] ? __pfx_ksys_write+0x10/0x10 [ 1274.116078][T15960] do_syscall_64+0xe2/0xf80 [ 1274.116111][T15960] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1274.116127][T15960] ? trace_irq_disable+0x37/0x100 [ 1274.116143][T15960] ? clear_bhb_loop+0x60/0xb0 [ 1274.116162][T15960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1274.116178][T15960] RIP: 0033:0x7f5ea6b9aeb9 [ 1274.116194][T15960] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1274.116207][T15960] RSP: 002b:00007f5ea7a3a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1274.116226][T15960] RAX: ffffffffffffffda RBX: 00007f5ea6e15fa0 RCX: 00007f5ea6b9aeb9 [ 1274.116237][T15960] RDX: 0000000024000854 RSI: 0000200000000540 RDI: 0000000000000003 [ 1274.116247][T15960] RBP: 00007f5ea7a3a090 R08: 0000000000000000 R09: 0000000000000000 [ 1274.116258][T15960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1274.116269][T15960] R13: 00007f5ea6e16038 R14: 00007f5ea6e15fa0 R15: 00007ffcd9c33fd8 [ 1274.116297][T15960] [ 1274.404916][T24164] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1274.437009][T24164] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1274.517736][T15965] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15406'. [ 1274.595710][ T60] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1274.644338][ T60] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1274.794287][T24170] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1274.807711][T24170] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1274.809414][T15981] FAULT_INJECTION: forcing a failure. [ 1274.809414][T15981] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1274.833513][T15981] CPU: 0 UID: 0 PID: 15981 Comm: syz.2.15415 Not tainted syzkaller #0 PREEMPT(full) [ 1274.833538][T15981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1274.833549][T15981] Call Trace: [ 1274.833556][T15981] [ 1274.833564][T15981] dump_stack_lvl+0xe8/0x150 [ 1274.833590][T15981] should_fail_ex+0x412/0x560 [ 1274.833615][T15981] _copy_from_user+0x2d/0xb0 [ 1274.833638][T15981] ___sys_sendmsg+0x1c6/0x360 [ 1274.833661][T15981] ? __lock_acquire+0x6b5/0x2cf0 [ 1274.833687][T15981] ? __pfx____sys_sendmsg+0x10/0x10 [ 1274.833740][T15981] ? __fget_files+0x2a/0x420 [ 1274.833757][T15981] ? __fget_files+0x3a0/0x420 [ 1274.833783][T15981] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1274.833808][T15981] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1274.833838][T15981] ? __pfx_ksys_write+0x10/0x10 [ 1274.833868][T15981] do_syscall_64+0xe2/0xf80 [ 1274.833888][T15981] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1274.833902][T15981] ? trace_irq_disable+0x37/0x100 [ 1274.833919][T15981] ? clear_bhb_loop+0x60/0xb0 [ 1274.833937][T15981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1274.833952][T15981] RIP: 0033:0x7f9be2d9aeb9 [ 1274.833966][T15981] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1274.833979][T15981] RSP: 002b:00007f9be3c93028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1274.833996][T15981] RAX: ffffffffffffffda RBX: 00007f9be3015fa0 RCX: 00007f9be2d9aeb9 [ 1274.834008][T15981] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 1274.834019][T15981] RBP: 00007f9be3c93090 R08: 0000000000000000 R09: 0000000000000000 [ 1274.834030][T15981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1274.834040][T15981] R13: 00007f9be3016038 R14: 00007f9be3015fa0 R15: 00007ffedc71afe8 [ 1274.834068][T15981] [ 1275.146548][ T9343] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1275.183630][ T9343] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1275.229643][T15989] syzkaller0: entered promiscuous mode [ 1275.236441][T15989] syzkaller0: entered allmulticast mode [ 1275.243569][ T9343] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1275.277941][T15985] mac80211_hwsim hwsim104 syzkaller0: entered promiscuous mode [ 1275.290292][T15985] mac80211_hwsim hwsim104 syzkaller0: entered allmulticast mode [ 1275.332528][T15985] tipc: Resetting bearer [ 1275.469200][T15993] xt_hashlimit: size too large, truncated to 1048576 [ 1275.777361][T16001] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15419'. [ 1275.964765][T16016] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15425'. [ 1276.176616][T16027] syzkaller0: entered promiscuous mode [ 1276.182848][T16027] syzkaller0: entered allmulticast mode [ 1276.190403][T16023] sock: sock_timestamping_bind_phc: sock not bind to device [ 1276.267907][T16030] FAULT_INJECTION: forcing a failure. [ 1276.267907][T16030] name failslab, interval 1, probability 0, space 0, times 0 [ 1276.286312][T16030] CPU: 1 UID: 0 PID: 16030 Comm: syz.0.15432 Not tainted syzkaller #0 PREEMPT(full) [ 1276.286339][T16030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1276.286358][T16030] Call Trace: [ 1276.286365][T16030] [ 1276.286374][T16030] dump_stack_lvl+0xe8/0x150 [ 1276.286401][T16030] should_fail_ex+0x412/0x560 [ 1276.286426][T16030] should_failslab+0xa8/0x100 [ 1276.286448][T16030] kmem_cache_alloc_node_noprof+0x8b/0x6f0 [ 1276.286475][T16030] ? __alloc_skb+0x1d0/0x7d0 [ 1276.286493][T16030] ? __local_bh_enable_ip+0xd0/0x130 [ 1276.286515][T16030] __alloc_skb+0x1d0/0x7d0 [ 1276.286539][T16030] cfg80211_del_sta_sinfo+0x211/0x6b0 [ 1276.286570][T16030] ? __pfx_cfg80211_del_sta_sinfo+0x10/0x10 [ 1276.286626][T16030] ? trace_drv_return_int+0x7e/0x1d0 [ 1276.286647][T16030] ? drv_sta_state+0xdf7/0x1760 [ 1276.286680][T16030] __sta_info_destroy_part2+0x33c/0x440 [ 1276.286712][T16030] __sta_info_flush+0x5f1/0x720 [ 1276.286743][T16030] ? __pfx___sta_info_flush+0x10/0x10 [ 1276.286778][T16030] ieee80211_ibss_disconnect+0x2da/0x7c0 [ 1276.286806][T16030] ieee80211_ibss_leave+0x47/0x150 [ 1276.286827][T16030] cfg80211_leave_ibss+0x1d7/0x3f0 [ 1276.286852][T16030] cfg80211_change_iface+0x46e/0xe30 [ 1276.286885][T16030] nl80211_set_interface+0x773/0xa90 [ 1276.286912][T16030] ? __pfx_nl80211_set_interface+0x10/0x10 [ 1276.286934][T16030] ? nl80211_pre_doit+0x4fb/0x930 [ 1276.286956][T16030] genl_family_rcv_msg_doit+0x22a/0x330 [ 1276.286984][T16030] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1276.287015][T16030] ? bpf_lsm_capable+0x9/0x20 [ 1276.287033][T16030] ? security_capable+0x7e/0x2c0 [ 1276.287058][T16030] genl_rcv_msg+0x61c/0x7a0 [ 1276.287084][T16030] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1276.287103][T16030] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 1276.287117][T16030] ? __pfx_nl80211_set_interface+0x10/0x10 [ 1276.287132][T16030] ? __pfx_nl80211_post_doit+0x10/0x10 [ 1276.287151][T16030] ? __pfx_ref_tracker_free+0x10/0x10 [ 1276.287177][T16030] netlink_rcv_skb+0x232/0x4b0 [ 1276.287195][T16030] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1276.287230][T16030] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1276.287245][T16030] ? genl_rcv+0x19/0x40 [ 1276.287280][T16030] ? down_read+0x272/0x2e0 [ 1276.287294][T16030] ? genl_rcv+0xd/0x40 [ 1276.287316][T16030] genl_rcv+0x28/0x40 [ 1276.287335][T16030] netlink_unicast+0x80f/0x9b0 [ 1276.287360][T16030] ? __pfx_netlink_unicast+0x10/0x10 [ 1276.287379][T16030] ? netlink_sendmsg+0x650/0xb40 [ 1276.287396][T16030] ? skb_put+0x11b/0x210 [ 1276.287425][T16030] netlink_sendmsg+0x813/0xb40 [ 1276.287450][T16030] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1276.287470][T16030] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1276.287490][T16030] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1276.287506][T16030] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1276.287520][T16030] ____sys_sendmsg+0xa68/0xad0 [ 1276.287540][T16030] ? __might_fault+0xaf/0x130 [ 1276.287569][T16030] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1276.287598][T16030] ? import_iovec+0x73/0xa0 [ 1276.287624][T16030] ___sys_sendmsg+0x2a5/0x360 [ 1276.287643][T16030] ? __lock_acquire+0x6b5/0x2cf0 [ 1276.287677][T16030] ? __pfx____sys_sendmsg+0x10/0x10 [ 1276.287731][T16030] ? __fget_files+0x2a/0x420 [ 1276.287748][T16030] ? __fget_files+0x3a0/0x420 [ 1276.287776][T16030] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1276.287801][T16030] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1276.287832][T16030] ? __pfx_ksys_write+0x10/0x10 [ 1276.287867][T16030] do_syscall_64+0xe2/0xf80 [ 1276.287889][T16030] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1276.287902][T16030] ? trace_irq_disable+0x37/0x100 [ 1276.287918][T16030] ? clear_bhb_loop+0x60/0xb0 [ 1276.287939][T16030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1276.287956][T16030] RIP: 0033:0x7f3da199aeb9 [ 1276.287973][T16030] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1276.287988][T16030] RSP: 002b:00007f3da2878028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1276.288007][T16030] RAX: ffffffffffffffda RBX: 00007f3da1c15fa0 RCX: 00007f3da199aeb9 [ 1276.288020][T16030] RDX: 0000000020000800 RSI: 0000200000000100 RDI: 0000000000000003 [ 1276.288032][T16030] RBP: 00007f3da2878090 R08: 0000000000000000 R09: 0000000000000000 [ 1276.288042][T16030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1276.288052][T16030] R13: 00007f3da1c16038 R14: 00007f3da1c15fa0 R15: 00007ffd655797f8 [ 1276.288081][T16030] [ 1277.110415][T16042] netlink: 20 bytes leftover after parsing attributes in process `syz.2.15436'. [ 1277.153194][T16042] netlink: 28 bytes leftover after parsing attributes in process `syz.2.15436'. [ 1277.229351][T16042] netlink: 36 bytes leftover after parsing attributes in process `syz.2.15436'. [ 1277.273996][T16042] netlink: 16 bytes leftover after parsing attributes in process `syz.2.15436'. [ 1277.284578][T16042] netlink: 36 bytes leftover after parsing attributes in process `syz.2.15436'. [ 1277.294938][T16042] netlink: 36 bytes leftover after parsing attributes in process `syz.2.15436'. [ 1278.188167][T16075] syzkaller0: entered promiscuous mode [ 1278.207479][T16075] syzkaller0: entered allmulticast mode [ 1278.225902][T16077] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15449'. [ 1278.579825][T16091] lo speed is unknown, defaulting to 1000 [ 1278.935271][T16106] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15457'. [ 1279.103117][T24164] net_ratelimit: 85 callbacks suppressed [ 1279.103137][T24164] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1279.127242][T24164] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1279.273849][T10251] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1279.282247][T10251] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1279.426521][ T60] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1279.435805][ T60] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1279.553618][ T60] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1279.570570][ T60] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1279.717209][ T60] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1279.773107][ T60] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1279.775124][T16129] syzkaller0: entered promiscuous mode [ 1279.798560][T16129] syzkaller0: entered allmulticast mode [ 1280.031607][T16137] netlink: 28 bytes leftover after parsing attributes in process `syz.2.15468'. [ 1280.242332][T16147] FAULT_INJECTION: forcing a failure. [ 1280.242332][T16147] name failslab, interval 1, probability 0, space 0, times 0 [ 1280.258904][T16147] CPU: 1 UID: 0 PID: 16147 Comm: syz.3.15472 Not tainted syzkaller #0 PREEMPT(full) [ 1280.258929][T16147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1280.258941][T16147] Call Trace: [ 1280.258947][T16147] [ 1280.258955][T16147] dump_stack_lvl+0xe8/0x150 [ 1280.258982][T16147] should_fail_ex+0x412/0x560 [ 1280.259007][T16147] should_failslab+0xa8/0x100 [ 1280.259028][T16147] kmem_cache_alloc_node_noprof+0x8b/0x6f0 [ 1280.259052][T16147] ? __alloc_skb+0x186/0x7d0 [ 1280.259072][T16147] ? __alloc_skb+0x1d0/0x7d0 [ 1280.259089][T16147] ? __local_bh_enable_ip+0xd0/0x130 [ 1280.259110][T16147] __alloc_skb+0x1d0/0x7d0 [ 1280.259129][T16147] ? netlink_ack_tlv_len+0x6c/0x210 [ 1280.259151][T16147] netlink_ack+0x146/0xa50 [ 1280.259167][T16147] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1280.259185][T16147] ? ref_tracker_free+0x693/0x840 [ 1280.259204][T16147] ? __copy_skb_header+0xa3/0x4a0 [ 1280.259227][T16147] ? __pfx_ref_tracker_free+0x10/0x10 [ 1280.259269][T16147] netlink_rcv_skb+0x2b6/0x4b0 [ 1280.259289][T16147] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1280.259311][T16147] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1280.259340][T16147] ? netlink_deliver_tap+0x2e/0x1b0 [ 1280.259367][T16147] netlink_unicast+0x80f/0x9b0 [ 1280.259392][T16147] ? __pfx_netlink_unicast+0x10/0x10 [ 1280.259412][T16147] ? netlink_sendmsg+0x650/0xb40 [ 1280.259428][T16147] ? skb_put+0x11b/0x210 [ 1280.259451][T16147] netlink_sendmsg+0x813/0xb40 [ 1280.259478][T16147] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1280.259498][T16147] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1280.259520][T16147] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1280.259540][T16147] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1280.259559][T16147] ____sys_sendmsg+0xa68/0xad0 [ 1280.259581][T16147] ? __might_fault+0xaf/0x130 [ 1280.259609][T16147] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1280.259648][T16147] ? import_iovec+0x73/0xa0 [ 1280.259674][T16147] ___sys_sendmsg+0x2a5/0x360 [ 1280.259695][T16147] ? __lock_acquire+0x6b5/0x2cf0 [ 1280.259721][T16147] ? __pfx____sys_sendmsg+0x10/0x10 [ 1280.259776][T16147] ? __fget_files+0x2a/0x420 [ 1280.259793][T16147] ? __fget_files+0x3a0/0x420 [ 1280.259821][T16147] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1280.259846][T16147] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1280.259877][T16147] ? __pfx_ksys_write+0x10/0x10 [ 1280.259910][T16147] do_syscall_64+0xe2/0xf80 [ 1280.259932][T16147] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1280.259947][T16147] ? trace_irq_disable+0x37/0x100 [ 1280.259963][T16147] ? clear_bhb_loop+0x60/0xb0 [ 1280.259983][T16147] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1280.260000][T16147] RIP: 0033:0x7f8efc59aeb9 [ 1280.260016][T16147] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1280.260031][T16147] RSP: 002b:00007f8efd3bf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1280.260050][T16147] RAX: ffffffffffffffda RBX: 00007f8efc815fa0 RCX: 00007f8efc59aeb9 [ 1280.260062][T16147] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 1280.260073][T16147] RBP: 00007f8efd3bf090 R08: 0000000000000000 R09: 0000000000000000 [ 1280.260085][T16147] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1280.260096][T16147] R13: 00007f8efc816038 R14: 00007f8efc815fa0 R15: 00007ffc72897a98 [ 1280.260125][T16147] [ 1280.795824][T16155] IPv6: NLM_F_CREATE should be specified when creating new route [ 1281.271002][T16166] netlink: 'syz.6.15479': attribute type 10 has an invalid length. [ 1281.308277][T16166] syz_tun: entered promiscuous mode [ 1281.320357][T16166] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1281.349096][T16166] siw: device registration error -23 [ 1281.364382][T16168] syzkaller0: entered promiscuous mode [ 1281.370438][T16168] syzkaller0: entered allmulticast mode [ 1281.703579][T16176] netlink: 52 bytes leftover after parsing attributes in process `syz.4.15482'. [ 1281.714769][T16176] nbd: must specify at least one socket [ 1281.721398][T16176] netlink: 52 bytes leftover after parsing attributes in process `syz.4.15482'. [ 1281.743281][T16176] nbd: must specify at least one socket [ 1282.194893][T16192] netlink: 'syz.2.15488': attribute type 10 has an invalid length. [ 1282.265152][T16193] netlink: 'syz.2.15488': attribute type 10 has an invalid length. [ 1282.315365][T16180] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1282.357795][T16180] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1282.519477][T16180] veth1_macvtap: left allmulticast mode [ 1282.588571][T16180] tipc: Resetting bearer [ 1282.689074][T16180] macsec0: left allmulticast mode [ 1282.747987][T16192] team0: Port device dummy0 added [ 1282.782566][T16193] team0: Port device dummy0 removed [ 1282.814604][T16193] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1282.837305][T24166] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1282.847179][T24166] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1282.886591][T24166] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1282.910017][T24166] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1283.160345][T16219] netlink: 'syz.3.15497': attribute type 10 has an invalid length. [ 1283.170992][T16219] siw: device registration error -23 [ 1283.274544][T16224] netlink: 28 bytes leftover after parsing attributes in process `syz.4.15493'. [ 1283.293005][T16224] netlink: 28 bytes leftover after parsing attributes in process `syz.4.15493'. [ 1283.318207][T16226] netlink: 112 bytes leftover after parsing attributes in process `syz.4.15493'. [ 1283.333985][T16224] netlink: 28 bytes leftover after parsing attributes in process `syz.4.15493'. [ 1283.344768][T16224] netlink: 28 bytes leftover after parsing attributes in process `syz.4.15493'. [ 1283.351187][T16226] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15493'. [ 1283.801937][T16229] lo speed is unknown, defaulting to 1000 [ 1283.830509][T16229] lo speed is unknown, defaulting to 1000 [ 1283.849769][T16229] lo speed is unknown, defaulting to 1000 [ 1283.907067][T16231] FAULT_INJECTION: forcing a failure. [ 1283.907067][T16231] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1283.935920][T16231] CPU: 1 UID: 0 PID: 16231 Comm: syz.0.15500 Not tainted syzkaller #0 PREEMPT(full) [ 1283.935947][T16231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1283.935958][T16231] Call Trace: [ 1283.935965][T16231] [ 1283.935974][T16231] dump_stack_lvl+0xe8/0x150 [ 1283.936001][T16231] should_fail_ex+0x412/0x560 [ 1283.936027][T16231] _copy_from_iter+0x1d3/0x1670 [ 1283.936051][T16231] ? rep_movs_alternative+0x4a/0x90 [ 1283.936077][T16231] ? __pfx__copy_from_iter+0x10/0x10 [ 1283.936095][T16231] ? sock_alloc_send_pskb+0x896/0x990 [ 1283.936124][T16231] ? __pfx__copy_from_iter+0x10/0x10 [ 1283.936147][T16231] ? page_copy_sane+0x16a/0x270 [ 1283.936169][T16231] copy_page_from_iter+0xdd/0x170 [ 1283.936195][T16231] skb_copy_datagram_from_iter+0x306/0x710 [ 1283.936229][T16231] tun_get_user+0xc38/0x3dd0 [ 1283.936259][T16231] ? aa_file_perm+0x12d/0x1630 [ 1283.936283][T16231] ? aa_file_perm+0x440/0x1630 [ 1283.936303][T16231] ? __pfx_tun_get_user+0x10/0x10 [ 1283.936322][T16231] ? __lock_acquire+0x6b5/0x2cf0 [ 1283.936348][T16231] ? pick_next_task_fair+0x1992/0x19d0 [ 1283.936372][T16231] ? ref_tracker_alloc+0x363/0x4d0 [ 1283.936395][T16231] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1283.936417][T16231] ? tun_get+0x1c/0x2f0 [ 1283.936435][T16231] ? tun_get+0x1c/0x2f0 [ 1283.936457][T16231] ? tun_get+0x1c/0x2f0 [ 1283.936474][T16231] ? tun_get+0x1c/0x2f0 [ 1283.936496][T16231] tun_chr_write_iter+0x113/0x200 [ 1283.936517][T16231] vfs_write+0x61d/0xb90 [ 1283.936547][T16231] ? __pfx_vfs_write+0x10/0x10 [ 1283.936578][T16231] ? __fget_files+0x2a/0x420 [ 1283.936605][T16231] ksys_write+0x150/0x270 [ 1283.936629][T16231] ? __pfx_ksys_write+0x10/0x10 [ 1283.936661][T16231] do_syscall_64+0xe2/0xf80 [ 1283.936682][T16231] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1283.936700][T16231] ? clear_bhb_loop+0x60/0xb0 [ 1283.936720][T16231] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1283.936736][T16231] RIP: 0033:0x7f3da195b78e [ 1283.936753][T16231] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1283.936767][T16231] RSP: 002b:00007f3da2877fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1283.936786][T16231] RAX: ffffffffffffffda RBX: 00007f3da28786c0 RCX: 00007f3da195b78e [ 1283.936799][T16231] RDX: 000000000000fdef RSI: 0000200000000b40 RDI: 00000000000000c8 [ 1283.936810][T16231] RBP: 00007f3da2878090 R08: 0000000000000000 R09: 0000000000000000 [ 1283.936821][T16231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1283.936832][T16231] R13: 00007f3da1c16038 R14: 00007f3da1c15fa0 R15: 00007ffd655797f8 [ 1283.936861][T16231] [ 1284.384742][T16229] infiniband sqz0: set down [ 1284.389389][T14719] lo speed is unknown, defaulting to 1000 [ 1284.396402][T16229] infiniband sqz0: added lo [ 1284.448406][T16229] RDS/IB: sqz0: added [ 1284.452764][T16229] smc: adding ib device sqz0 with port count 1 [ 1284.460262][T16229] smc: ib device sqz0 port 1 has no pnetid [ 1284.468197][T14719] lo speed is unknown, defaulting to 1000 [ 1284.476542][T16229] lo speed is unknown, defaulting to 1000 [ 1284.527810][T16238] lo speed is unknown, defaulting to 1000 [ 1284.643967][T16229] lo speed is unknown, defaulting to 1000 [ 1284.780009][T16238] lo speed is unknown, defaulting to 1000 [ 1284.893838][T16229] lo speed is unknown, defaulting to 1000 [ 1284.946586][T16183] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1285.104405][T16246] FAULT_INJECTION: forcing a failure. [ 1285.104405][T16246] name failslab, interval 1, probability 0, space 0, times 0 [ 1285.154922][T16246] CPU: 0 UID: 0 PID: 16246 Comm: syz.2.15504 Not tainted syzkaller #0 PREEMPT(full) [ 1285.154948][T16246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1285.154959][T16246] Call Trace: [ 1285.154966][T16246] [ 1285.154974][T16246] dump_stack_lvl+0xe8/0x150 [ 1285.155001][T16246] should_fail_ex+0x412/0x560 [ 1285.155027][T16246] should_failslab+0xa8/0x100 [ 1285.155047][T16246] kmem_cache_alloc_noprof+0x87/0x6e0 [ 1285.155069][T16246] ? __netlink_lookup+0xc6/0x8b0 [ 1285.155089][T16246] ? skb_clone+0x212/0x3a0 [ 1285.155115][T16246] skb_clone+0x212/0x3a0 [ 1285.155140][T16246] __netlink_deliver_tap+0x404/0x850 [ 1285.155171][T16246] ? netlink_deliver_tap+0x2e/0x1b0 [ 1285.155191][T16246] netlink_deliver_tap+0x19c/0x1b0 [ 1285.155212][T16246] netlink_unicast+0x7e3/0x9b0 [ 1285.155237][T16246] ? __pfx_netlink_unicast+0x10/0x10 [ 1285.155257][T16246] ? netlink_sendmsg+0x650/0xb40 [ 1285.155274][T16246] ? skb_put+0x11b/0x210 [ 1285.155298][T16246] netlink_sendmsg+0x813/0xb40 [ 1285.155326][T16246] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1285.155348][T16246] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1285.155371][T16246] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1285.155391][T16246] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1285.155409][T16246] ____sys_sendmsg+0xa68/0xad0 [ 1285.155431][T16246] ? __might_fault+0xaf/0x130 [ 1285.155459][T16246] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1285.155490][T16246] ? import_iovec+0x73/0xa0 [ 1285.155515][T16246] ___sys_sendmsg+0x2a5/0x360 [ 1285.155536][T16246] ? __lock_acquire+0x6b5/0x2cf0 [ 1285.155562][T16246] ? __pfx____sys_sendmsg+0x10/0x10 [ 1285.155619][T16246] ? __fget_files+0x2a/0x420 [ 1285.155637][T16246] ? __fget_files+0x3a0/0x420 [ 1285.155665][T16246] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1285.155689][T16246] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1285.155721][T16246] ? __pfx_ksys_write+0x10/0x10 [ 1285.155755][T16246] do_syscall_64+0xe2/0xf80 [ 1285.155777][T16246] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1285.155798][T16246] ? trace_irq_disable+0x37/0x100 [ 1285.155814][T16246] ? clear_bhb_loop+0x60/0xb0 [ 1285.155835][T16246] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1285.155851][T16246] RIP: 0033:0x7f9be2d9aeb9 [ 1285.155866][T16246] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1285.155880][T16246] RSP: 002b:00007f9be3c93028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1285.155899][T16246] RAX: ffffffffffffffda RBX: 00007f9be3015fa0 RCX: 00007f9be2d9aeb9 [ 1285.155912][T16246] RDX: 0000000000000004 RSI: 0000200000001000 RDI: 0000000000000003 [ 1285.155924][T16246] RBP: 00007f9be3c93090 R08: 0000000000000000 R09: 0000000000000000 [ 1285.155935][T16246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1285.155945][T16246] R13: 00007f9be3016038 R14: 00007f9be3015fa0 R15: 00007ffedc71afe8 [ 1285.155975][T16246] [ 1285.281975][T16229] lo speed is unknown, defaulting to 1000 [ 1285.538949][T16254] net_ratelimit: 65 callbacks suppressed [ 1285.538968][T16254] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 1285.558124][T16256] netlink: 20 bytes leftover after parsing attributes in process `syz.4.15510'. [ 1285.706411][ T31] INFO: task syz.5.14038:11754 blocked for more than 143 seconds. [ 1285.731232][ T31] Not tainted syzkaller #0 [ 1285.737766][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1285.750838][ T31] task:syz.5.14038 state:D stack:27080 pid:11754 tgid:11753 ppid:7241 task_flags:0x400140 flags:0x00080002 [ 1285.757770][T16262] syzkaller0: entered promiscuous mode [ 1285.771117][ T31] Call Trace: [ 1285.775744][ T31] [ 1285.779087][ T31] __schedule+0x14ea/0x5050 [ 1285.783638][T16262] syzkaller0: entered allmulticast mode [ 1285.791313][T16266] FAULT_INJECTION: forcing a failure. [ 1285.791313][T16266] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1285.807201][ T31] ? __pfx___schedule+0x10/0x10 [ 1285.812575][ T31] ? schedule+0x90/0x360 [ 1285.818405][ T31] schedule+0x164/0x360 [ 1285.824228][ T31] schedule_preempt_disabled+0x13/0x30 [ 1285.830692][ T31] __mutex_lock+0x7fe/0x1300 [ 1285.836561][T16266] CPU: 0 UID: 0 PID: 16266 Comm: syz.2.15514 Not tainted syzkaller #0 PREEMPT(full) [ 1285.836585][T16266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1285.836596][T16266] Call Trace: [ 1285.836603][T16266] [ 1285.836611][T16266] dump_stack_lvl+0xe8/0x150 [ 1285.836637][T16266] should_fail_ex+0x412/0x560 [ 1285.836662][T16266] _copy_from_user+0x2d/0xb0 [ 1285.836686][T16266] ___sys_sendmsg+0x1c6/0x360 [ 1285.836708][T16266] ? __lock_acquire+0x6b5/0x2cf0 [ 1285.836734][T16266] ? __pfx____sys_sendmsg+0x10/0x10 [ 1285.836785][T16266] ? __fget_files+0x2a/0x420 [ 1285.836803][T16266] ? __fget_files+0x3a0/0x420 [ 1285.836830][T16266] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1285.836854][T16266] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1285.836885][T16266] ? __pfx_ksys_write+0x10/0x10 [ 1285.836918][T16266] do_syscall_64+0xe2/0xf80 [ 1285.836941][T16266] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1285.836957][T16266] ? trace_irq_disable+0x37/0x100 [ 1285.836973][T16266] ? clear_bhb_loop+0x60/0xb0 [ 1285.836992][T16266] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1285.837015][T16266] RIP: 0033:0x7f9be2d9aeb9 [ 1285.837031][T16266] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1285.837046][T16266] RSP: 002b:00007f9be3c93028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1285.837065][T16266] RAX: ffffffffffffffda RBX: 00007f9be3015fa0 RCX: 00007f9be2d9aeb9 [ 1285.837078][T16266] RDX: 0000000000004000 RSI: 0000200000000040 RDI: 0000000000000003 [ 1285.837090][T16266] RBP: 00007f9be3c93090 R08: 0000000000000000 R09: 0000000000000000 [ 1285.837101][T16266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1285.837112][T16266] R13: 00007f9be3016038 R14: 00007f9be3015fa0 R15: 00007ffedc71afe8 [ 1285.837141][T16266] [ 1286.012604][T16229] lo speed is unknown, defaulting to 1000 [ 1286.028399][ T31] ? __mutex_lock+0x5ac/0x1300 [ 1286.048203][ T31] ? nfsd_nl_listener_set_doit+0x141/0x16c0 [ 1286.054364][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1286.059850][ T31] ? __asan_memset+0x22/0x50 [ 1286.064803][ T31] ? do_syscall_64+0xe2/0xf80 [ 1286.069590][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1286.076189][ T31] nfsd_nl_listener_set_doit+0x141/0x16c0 [ 1286.082198][ T31] ? __pfx___nla_validate_parse+0x10/0x10 [ 1286.088547][ T31] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 1286.096346][ T31] ? rcu_is_watching+0x15/0xb0 [ 1286.102070][ T31] ? __nla_parse+0x40/0x60 [ 1286.106761][ T31] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 1286.113633][ T31] genl_family_rcv_msg_doit+0x22a/0x330 [ 1286.119658][ T31] ? __asan_memcpy+0x40/0x70 [ 1286.124454][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1286.131247][ T31] ? bpf_lsm_capable+0x9/0x20 [ 1286.136417][ T31] ? security_capable+0x7e/0x2c0 [ 1286.142612][ T31] genl_rcv_msg+0x61c/0x7a0 [ 1286.147680][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1286.153059][ T31] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 1286.160296][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 1286.166302][ T31] netlink_rcv_skb+0x232/0x4b0 [ 1286.171550][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1286.177968][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1286.183884][ T31] ? genl_rcv+0x19/0x40 [ 1286.188526][ T31] ? down_read+0x272/0x2e0 [ 1286.193301][ T31] ? genl_rcv+0xd/0x40 [ 1286.197579][ T31] genl_rcv+0x28/0x40 [ 1286.202107][ T31] netlink_unicast+0x80f/0x9b0 [ 1286.207281][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 1286.212851][ T31] ? netlink_sendmsg+0x650/0xb40 [ 1286.218493][ T31] ? skb_put+0x11b/0x210 [ 1286.222765][ T31] netlink_sendmsg+0x813/0xb40 [ 1286.233636][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1286.239461][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1286.245604][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1286.252160][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1286.259153][ T31] ____sys_sendmsg+0xa68/0xad0 [ 1286.266556][ T31] ? __might_fault+0xaf/0x130 [ 1286.271798][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1286.278934][ T31] ? import_iovec+0x73/0xa0 [ 1286.285406][ T31] ___sys_sendmsg+0x2a5/0x360 [ 1286.290480][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 1286.296477][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 1286.302170][ T31] ? __fget_files+0x2a/0x420 [ 1286.307938][ T31] ? __fget_files+0x3a0/0x420 [ 1286.315972][ T31] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1286.321662][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1286.328610][ T31] ? __pfx_ksys_write+0x10/0x10 [ 1286.338304][ T31] do_syscall_64+0xe2/0xf80 [ 1286.343971][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1286.350966][ T31] ? trace_irq_disable+0x37/0x100 [ 1286.358599][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1286.364026][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1286.370566][ T31] RIP: 0033:0x7f1391b9aeb9 [ 1286.375952][ T31] RSP: 002b:00007f1392a0f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1286.385161][ T31] RAX: ffffffffffffffda RBX: 00007f1391e15fa0 RCX: 00007f1391b9aeb9 [ 1286.394572][ T31] RDX: 0000000004000040 RSI: 0000200000000100 RDI: 0000000000000003 [ 1286.403315][ T31] RBP: 00007f1392a0f090 R08: 0000000000000000 R09: 0000000000000000 [ 1286.413541][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1286.422155][ T31] R13: 00007f1391e16038 R14: 00007f1391e15fa0 R15: 00007ffedf3a2388 [ 1286.431411][ T31] [ 1286.453547][ T31] [ 1286.453547][ T31] Showing all locks held in the system: [ 1286.462484][ T31] 2 locks held by ksoftirqd/1/23: [ 1286.479766][ T31] #0: ffff8880b873a918 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 1286.490933][ T31] #1: ffff8880b8724588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 1286.501107][ T31] 1 lock held by khungtaskd/31: [ 1286.506877][ T31] #0: ffffffff8e55a360 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1286.517678][ T31] 2 locks held by getty/5579: [ 1286.523502][ T31] #0: ffff8880350c60a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1286.534335][ T31] #1: ffffc900036c32f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 1286.545862][ T31] 4 locks held by kworker/u8:10/24164: [ 1286.551876][ T31] #0: ffff88801b2e7148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 1286.564502][ T31] #1: ffffc90010207bc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 1286.575879][ T31] #2: ffffffff8f99d790 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xfe/0x7b0 [ 1286.586855][ T31] #3: ffffffff8f9ac008 (rtnl_mutex){+.+.}-{4:4}, at: cfg80211_pernet_exit+0x19/0x120 [ 1286.608097][ T31] 2 locks held by syz.1.12671/6931: [ 1286.613778][ T31] #0: ffffffff8fa19c30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1286.622337][ T31] #1: ffffffff8e879428 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x16c0 [ 1286.633846][ T31] 2 locks held by syz.5.14038/11754: [ 1286.639890][ T31] #0: ffffffff8fa19c30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1286.650035][ T31] #1: ffffffff8e879428 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x16c0 [ 1286.662895][ T31] 1 lock held by udevd/13436: [ 1286.669056][ T31] #0: ffff88802554b358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 1286.679033][ T31] 7 locks held by syz.3.15499/16229: [ 1286.685076][ T31] #0: ffffffff9a3ba578 (&rdma_nl_types[idx].sem){.+.+}-{4:4}, at: rdma_nl_rcv+0x32b/0xa10 [ 1286.696185][ T31] #1: ffffffff8f714150 (link_ops_rwsem){++++}-{4:4}, at: nldev_newlink+0x42a/0x650 [ 1286.706473][ T31] #2: ffffffff8f7059d0 (devices_rwsem){++++}-{4:4}, at: enable_device_and_get+0xff/0x3e0 [ 1286.717342][ T31] #3: ffffffff8f705b90 (rdma_nets_rwsem){++++}-{4:4}, at: enable_device_and_get+0x27c/0x3e0 [ 1286.729209][ T31] #4: ffff8880430f4f98 (&device->compat_devs_mutex){+.+.}-{4:4}, at: add_one_compat_dev+0xf0/0x650 [ 1286.741808][ T31] #5: ffff8880430f5290 (&rxe->usdev_lock){+.+.}-{4:4}, at: rxe_query_port+0x7e/0x3d0 [ 1286.752804][ T31] #6: ffffffff8f9ac008 (rtnl_mutex){+.+.}-{4:4}, at: ib_get_eth_speed+0x173/0x7f0 [ 1286.763759][ T31] 3 locks held by syz.0.15509/16259: [ 1286.769256][ T31] 1 lock held by syz.4.15513/16261: [ 1286.778083][ T31] #0: ffff888038d12488 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 1286.789510][ T31] 2 locks held by syz.4.15513/16262: [ 1286.795322][ T31] #0: ffffffff8f9ac008 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x722/0xbe0 [ 1286.805165][ T31] #1: ffffffff8e560c78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 1286.817551][ T31] 1 lock held by syz.4.15513/16267: [ 1286.823389][ T31] #0: ffffffff8f9ac008 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x722/0xbe0 [ 1286.834291][ T31] [ 1286.836808][ T31] ============================================= [ 1286.836808][ T31] [ 1286.845957][ T31] NMI backtrace for cpu 0 [ 1286.845974][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1286.845991][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1286.846001][ T31] Call Trace: [ 1286.846008][ T31] [ 1286.846015][ T31] dump_stack_lvl+0xe8/0x150 [ 1286.846038][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 1286.846055][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1286.846077][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1286.846095][ T31] sys_info+0x135/0x170 [ 1286.846108][ T31] watchdog+0xf90/0xfe0 [ 1286.846127][ T31] ? watchdog+0x209/0xfe0 [ 1286.846147][ T31] kthread+0x726/0x8b0 [ 1286.846165][ T31] ? __pfx_watchdog+0x10/0x10 [ 1286.846179][ T31] ? __pfx_kthread+0x10/0x10 [ 1286.846197][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1286.846213][ T31] ? __pfx_kthread+0x10/0x10 [ 1286.846229][ T31] ret_from_fork+0x51b/0xa40 [ 1286.846245][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1286.846263][ T31] ? __switch_to+0xc82/0x1410 [ 1286.846285][ T31] ? __pfx_kthread+0x10/0x10 [ 1286.846301][ T31] ret_from_fork_asm+0x1a/0x30 [ 1286.846331][ T31] [ 1286.846338][ T31] Sending NMI from CPU 0 to CPUs 1: [ 1286.976713][ C1] NMI backtrace for cpu 1 [ 1286.976733][ C1] CPU: 1 UID: 0 PID: 24166 Comm: kworker/u8:11 Not tainted syzkaller #0 PREEMPT(full) [ 1286.976752][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1286.976763][ C1] Workqueue: events_unbound cfg80211_wiphy_work [ 1286.976787][ C1] RIP: 0010:__kasan_check_byte+0x4/0x40 [ 1286.976808][ C1] Code: 4c 89 f6 5b 41 5c 41 5e 41 5f e9 17 fa ff ff 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 <41> 56 53 48 89 f3 49 89 fe e8 4e 15 00 00 84 c0 75 16 be 01 00 00 [ 1286.976821][ C1] RSP: 0018:ffffc900103468b0 EFLAGS: 00000202 [ 1286.976834][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000080000001 [ 1286.976844][ C1] RDX: 0000000000000000 RSI: ffffffff817571b2 RDI: ffffffff8e55a360 [ 1286.976854][ C1] RBP: ffffffff81757195 R08: 0000000000000000 R09: 0000000000000000 [ 1286.976864][ C1] R10: ffffc90010346a88 R11: fffff52002068d5d R12: 0000000000000002 [ 1286.976881][ C1] R13: ffffffff8e55a360 R14: 0000000000000000 R15: 0000000000000000 [ 1286.976891][ C1] FS: 0000000000000000(0000) GS:ffff8881257ea000(0000) knlGS:0000000000000000 [ 1286.976904][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1286.976914][ C1] CR2: 00007f4f814708c0 CR3: 0000000061d76000 CR4: 00000000003526f0 [ 1286.976928][ C1] Call Trace: [ 1286.976934][ C1] [ 1286.976940][ C1] lock_acquire+0x84/0x330 [ 1286.976960][ C1] ? kmem_cache_alloc_noprof+0x370/0x6e0 [ 1286.976978][ C1] ? mempool_alloc_noprof+0x1ce/0x300 [ 1286.976995][ C1] ? __sg_alloc_table+0x1bc/0x700 [ 1286.977011][ C1] ? sg_alloc_table_chained+0x85/0x1e0 [ 1286.977026][ C1] ? scsi_alloc_sgtables+0x29c/0xc50 [ 1286.977043][ C1] ? sd_init_command+0x558/0x2000 [ 1286.977061][ C1] ? scsi_queue_rq+0x121d/0x32a0 [ 1286.977074][ C1] ? blk_mq_dispatch_rq_list+0xa70/0x1910 [ 1286.977089][ C1] ? __blk_mq_sched_dispatch_requests+0xdce/0x15d0 [ 1286.977104][ C1] ? blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1286.977119][ C1] ? __unwind_start+0xf7/0x760 [ 1286.977134][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 1286.977148][ C1] unwind_next_frame+0xc2/0x23c0 [ 1286.977163][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 1286.977177][ C1] ? sg_phys+0x18d/0x580 [ 1286.977193][ C1] ? sg_phys+0x18d/0x580 [ 1286.977208][ C1] ? get_stack_info_noinstr+0x1b/0x130 [ 1286.977226][ C1] __unwind_start+0x5b8/0x760 [ 1286.977243][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1286.977260][ C1] arch_stack_walk+0xe3/0x150 [ 1286.977278][ C1] ? __unwind_start+0xf7/0x760 [ 1286.977294][ C1] stack_trace_save+0xa9/0x100 [ 1286.977310][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1286.977328][ C1] ? lock_acquire+0x106/0x330 [ 1286.977347][ C1] kasan_save_track+0x3e/0x80 [ 1286.977385][ C1] __kasan_kmalloc+0x93/0xb0 [ 1286.977400][ C1] __kmalloc_noprof+0x40c/0x7e0 [ 1286.977413][ C1] ? cfg80211_inform_single_bss_data+0x934/0x1ab0 [ 1286.977431][ C1] cfg80211_inform_single_bss_data+0x934/0x1ab0 [ 1286.977450][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 1286.977464][ C1] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 1286.977492][ C1] ? cfg80211_inform_bss_data+0x253/0x3c40 [ 1286.977508][ C1] cfg80211_inform_bss_data+0x266/0x3c40 [ 1286.977535][ C1] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 1286.977566][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 1286.977585][ C1] ? __pfx__ieee802_11_parse_elems_full+0x10/0x10 [ 1286.977612][ C1] ? ieee80211_bss_info_update+0x316/0xa40 [ 1286.977629][ C1] cfg80211_inform_bss_frame_data+0x3c7/0x710 [ 1286.977646][ C1] ? ieee80211_bss_info_update+0x316/0xa40 [ 1286.977663][ C1] ieee80211_bss_info_update+0x794/0xa40 [ 1286.977680][ C1] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 1286.977694][ C1] ? sta_info_get+0x4f/0x300 [ 1286.977715][ C1] ? ieee80211_ibss_rx_queued_mgmt+0xf0f/0x2c80 [ 1286.977732][ C1] ieee80211_ibss_rx_queued_mgmt+0x1901/0x2c80 [ 1286.977756][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 1286.977772][ C1] ? ieee80211_ibss_rx_queued_mgmt+0xf0f/0x2c80 [ 1286.977787][ C1] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 1286.977804][ C1] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1286.977822][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 1286.977842][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 1286.977862][ C1] ? kcov_remote_start+0x17f/0x7a0 [ 1286.977887][ C1] ieee80211_iface_work+0x84e/0x1340 [ 1286.977907][ C1] cfg80211_wiphy_work+0x2ab/0x450 [ 1286.977923][ C1] ? process_scheduled_works+0xa0f/0x17a0 [ 1286.977942][ C1] process_scheduled_works+0xaec/0x17a0 [ 1286.977973][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1286.977991][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 1286.978007][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1286.978029][ C1] ? schedule+0x90/0x360 [ 1286.978071][ C1] worker_thread+0xda6/0x1360 [ 1286.978100][ C1] kthread+0x726/0x8b0 [ 1286.978117][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1286.978135][ C1] ? __pfx_kthread+0x10/0x10 [ 1286.978151][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1286.978167][ C1] ? __pfx_kthread+0x10/0x10 [ 1286.978182][ C1] ret_from_fork+0x51b/0xa40 [ 1286.978197][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1286.978215][ C1] ? __switch_to+0xc82/0x1410 [ 1286.978235][ C1] ? __pfx_kthread+0x10/0x10 [ 1286.978250][ C1] ret_from_fork_asm+0x1a/0x30 [ 1286.978276][ C1] [ 1287.571234][T16229] lo speed is unknown, defaulting to 1000 [ 1287.631397][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1287.640292][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1287.650701][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1287.661378][ T31] Call Trace: [ 1287.665030][ T31] [ 1287.668315][ T31] vpanic+0x1e0/0x670 [ 1287.672849][ T31] panic+0xc5/0xd0 [ 1287.677370][ T31] ? __pfx_panic+0x10/0x10 [ 1287.682080][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1287.688297][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1287.695008][ T31] watchdog+0xfda/0xfe0 [ 1287.699459][ T31] ? watchdog+0x209/0xfe0 [ 1287.703984][ T31] kthread+0x726/0x8b0 [ 1287.708075][ T31] ? __pfx_watchdog+0x10/0x10 [ 1287.713301][ T31] ? __pfx_kthread+0x10/0x10 [ 1287.718022][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1287.724126][ T31] ? __pfx_kthread+0x10/0x10 [ 1287.729349][ T31] ret_from_fork+0x51b/0xa40 [ 1287.734132][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1287.740507][ T31] ? __switch_to+0xc82/0x1410 [ 1287.745640][ T31] ? __pfx_kthread+0x10/0x10 [ 1287.750900][ T31] ret_from_fork_asm+0x1a/0x30 [ 1287.756744][ T31] [ 1287.761060][ T31] Kernel Offset: disabled [ 1287.766102][ T31] Rebooting in 86400 seconds..