last executing test programs: 6.214753618s ago: executing program 1 (id=22586): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) socket$unix(0x1, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xf4b6}, @TCA_FQ_PIE_ALPHA={0x8, 0x5, 0x1d}]}}]}, 0x44}}, 0x20004055) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000780)=ANY=[], 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xe}, {0x0, 0x9}}}, 0x24}}, 0x20004015) syz_open_procfs$namespace(0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) 3.889237916s ago: executing program 2 (id=22587): socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x2, 0x80805, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x1e, 0x4, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) socket$kcm(0x2, 0xa, 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="90000000100003050000", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) 3.886442487s ago: executing program 0 (id=22588): syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000002e40)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [{0x0, 0x2, "122b472e41e24b11f34b608816e5"}]}}}}}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) (fail_nth: 8) 3.885450248s ago: executing program 4 (id=22589): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101401, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) listen(r1, 0x7) (async, rerun: 64) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) (async, rerun: 64) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) (async, rerun: 64) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async, rerun: 64) listen(r2, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x114}], 0x1}, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x0) (async) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000600)=@gcm_128={{0x303}, "2f4228c785b2621d", "6e41d1b82aadb635f96ab5a2036ac392", "b19b6c70", "11a1a310fcdefdc3"}, 0x28) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0xb, 0xd}, {}, {0x8}}}, 0x24}}, 0x40004) r7 = socket$inet_udp(0x2, 0x2, 0x0) (async) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni-avx2\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r9 = accept4(r8, 0x0, 0x0, 0x800) sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0xff40}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) setsockopt$inet_group_source_req(r7, 0x0, 0x2f, &(0x7f0000000480)={0x2, {{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x13}}}, {{0x2, 0x4e22, @local}}}, 0x108) (async) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) (async, rerun: 32) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r4) (rerun: 32) sendmsg$L2TP_CMD_SESSION_MODIFY(r4, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0x14, r10, 0x400, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) (async) syz_emit_ethernet(0xbe, &(0x7f0000000100)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x65, 0x0, 0x0, 0x11, 0x0, @empty=0x4c0, @empty=0xe0000001}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x2, "948d51906258e93124c367b0f593ac48fb72fc1f2ecef9e8ccad6885fc65047e", "dac98a87a71e346c99f672998fabbd0c61b1458613c8cc852d42a512b047859f0f5b3a907e1012391f6ceafdda4915d6", "ba07e531bff725d75471cb26b0a84c9ce05fef333612feb3339c7c21", {"3d3ca46947a775fb7dc0d6ec3778d006", "8314a5f91ced637c95f1b26e43705639"}}}}}}}, 0x0) 1.356090872s ago: executing program 4 (id=22590): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000006a00000f0007000000", @ANYRES32=r1, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0) (async, rerun: 64) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x62, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01080000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000070000000060a010400000000000000000100000008000b40000000000900010073797a30000000004800048020000180070001007274000014000280080001400000000d080002400000000124000180090001006d6574610000000014000280080001400000001008000240000000051400"], 0xf8}}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300), 0x0, 0x200000000000, 0x40}}, 0x40) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x9, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000400001300fff10007000000850000004f0000000000000002000000"], &(0x7f0000000100)='syzkaller\x00', 0x5, 0xf3, &(0x7f0000000140)=""/243, 0x41000, 0x41, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x6, 0x1}, 0x8, 0x10, &(0x7f00000002c0)={0x0, 0x8, 0xb, 0x100}, 0x10, 0x0, 0xffffffffffffffff, 0x3, &(0x7f0000000300)=[0x1, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000340)=[{0x5, 0x1, 0x4, 0x2}, {0x4, 0x4, 0x6}, {0x2, 0x4, 0x7, 0x3}], 0x10, 0xfffffff7}, 0x94) (async) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000700)=@mangle={'mangle\x00', 0x1f, 0x6, 0x418, 0xa0, 0xa0, 0x1d8, 0xa0, 0x138, 0x270, 0x380, 0x380, 0x380, 0x380, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x70}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x3, 0x7, @multicast1, 0x4e22}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0xe, 0x4, 0x2}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x36}, @loopback, 0x1fffffffe, 0xff, 'pimreg1\x00', 'dummy0\x00', {0xff}, {}, 0x2, 0x1, 0x40}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x4, @remote, 0x4e21}}}, {{@ip={@remote, @multicast1, 0xff, 0x0, 'virt_wifi0\x00', 'team_slave_0\x00', {0xff}, {0xff}, 0x6c, 0x2, 0x59}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x1, 0x3, 0x2}, {0x3, 0x0, 0x4}}}}, {{@ip={@local, @remote, 0xffffff00, 0xff, 'gretap0\x00', 'batadv0\x00', {}, {}, 0x84, 0x1, 0x5}, 0x0, 0xa0, 0x110, 0x0, {}, [@common=@ah={{0x30}, {[0x3, 0x5112], 0x1}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x1, 0x0, 0x46c5, 0x0, 0x0, "2b4e84400af0c61fe4b77d62d90d10d33fce7dc71425d4209d84f086ee827a4b064c417320a5f57e2dcc64d51dd574bd8c47cabfe9f21364d0c1a47f3240e300"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x478) (async) r6 = socket(0x1000000010, 0x80002, 0x0) (async) r7 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r7, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@deltfilter={0x34, 0x2d, 0x1, 0x800000, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0x10}, {0x0, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000840}, 0x80) (async) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r9, 0x0) (async) r10 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r10, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f000000010000000058000b480400945f64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) (async) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, &(0x7f0000001580)={0x0, 0x0, "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", "5a5ebeb6e34a85219f5b6d6d462d8a6bea24708430e2c197ebd10ee03c5915f64769bdd88187a5dc24d83de3dc5db44d79f72cc520b2149e1cb296d80a8835b40e0e4ffe141dc28d07acf596e29be91db5ff1c695124b20a795dba620234513304df7f5effdc1e226bf7192f789d3a14d6dcc5c16ff4f1a6b20aecd66635229031420b4746eccc6c684a9567f2147f69b40be8bfba1e68129a339a5dccc34f67dce560744fea19ac530aa0d0fbbcbb62cb906bde51cd2d2ae33134fa41c0362802783ebcd0c3c212b3c5b0fb8243bc0a87840e22e15a68a3b0df2bd0fe17398b29382c329d58f45061b1516c6e25ac3c6c10c88c03f10b9d08ceb0f0990f0900fdd4fac2243a2ff6b9726a74bc29531132571dc82b02b389bd4b60343be4f44829dfa4a07480136aa243448cf8c8e489a0619475da28e83292276c9297e99bc887e3032d198c1f0e7aed9843c92ff8622f82486e53cce117396baf6ee7f03ce1997f939714c814b56f48770f65974c4dc68591333944c183c0b303d5b175814d0fc084ebf8a577bc97b49f39b6a42c0e84eda3de2269d2854913852cb290d4ec86fe22f5e4d18e90fcd89fbadd1fac652426b1a342e8b8ad01afc77f0c618a71638bdce36518cfaddbad5b7d3179a138999f2ae462d48f9e610284c6d7c3162c4c7e03169908ad8036773754542896f30b1552a5e98b6d428d51f70c2afd6863cc9029ad50493f57158410ffa096665c6329307e355e2e250ca4bdef7dc63cf45b499aa76781bff43e1c45b9e4474ccd2b8048a10f1f5a05c6da8eb045bb04685b742b7cbc2c179a046b7dbe3d9db6a558fbe8fc3122ff947067cc70a1adb952c1ed382bb8d9ee8072a6d9f59c725b26060a03c379d66000877d29b4697a8e93b6845d13bbdf20e55cfd96e03266c3fa453b85a49d0d43936e2e8ca9c1ec583a1dd3ecb8fbe5f6da313eaa68c79bae89eba268741a96dc08edb63ba2ef2f52b044a485b17f600a24a41bdf401d4676604e284d4bd857bf81b7c884c1b35309d37ba4e770d12e40f7e9f66a77db572cca38343ebe34011a47b3d0d40417a39072d96c8aa1900237c14c2e21f2c9e65f34f3386f7b7b7e7423894a7e51c0d6be68d5a2e60042f771e2ebbc9f40333ad1c4786a6b7b01cf256fd369ed44d11ed2760658b2e5f90470bbb71846fcd6f2f8717823012f6dc8c91f69b45c17cd479db37a52be0c376118b806dadb8899f4bfebaadeb5632e6c63accbd2db14d990bb8506aaaa78448d400343cb0a217c4d032ef54af9383ba412b30dc88f2ecacd2e4bdd48699f31bd1cbe81077156d9ba4e87bc65423f84dcfc2f45e0ad9158047d47097e397c3d2f4c4b5065c5a0393b7c1935d6d8bff641e3cad7a8f190b69e948621d21446f14f14563556013a65df628dc01f8209daa3b4890b6e231d07af43b2c95a2a2290c2911620538bb223c409b5998b10cc8a49b0397014ad2e545358c2c0cf1bd4934a2c4fd0e4c8b0ca610e5708008648d4d196d2e46f83770349661d437c800583ae505be70bbe416d6711de8c58fe9b706746fd0cae2471f93e55c502a2d05278ad1fdfa379b3fcad33a401ddabd1f36a6686255cc4c9594fd6e81a3544861de5ed60a1c8118cbf5b265ee6054e4cba989f9207ddd17b4fdd80b65ea321c7b664523e161f8a87cdcb80738646c5459ac130518c254e781204930c1075f591fa19735c6fd61ed54904b32a83510d42b3529d2fd3c97a192f1bc8cf339d92e9939f172740c86d8923f77998d9c1a777b25335e38384c200c226be1a7f61add77eefd07de5c8b5d6eab9b5392f5531cf45b96ccb7fcd5bf57ae276744d5a1e3c8f2d946d54555054ca74cbb4a7eb0d1bf32c53cce41755a57b04d4358afcef70577715c97fc94fe65ecf30149f52813bb5069ef5032cbc0fd6e5fedaeb4a16fa8f9ea828932c2ea1ed58597348fd711d4cd1ecd0a82a22cb73d36c9c79a4c4ac13ebdb4872e1fc04fd93219b6184a1bf87ec0a5d330ab6565ddd2e9c643fb83446be085a4a2024ce5142d5f12e82a450357e2e72a8cb7ca155146934eed905d17cfbdae9586601d71206c37eb6ef2b59bf667c1f2842b133aedabf39302efc85864093a0729ed49b957d1ff7c57e97ca2437b1cb3409589b53f125c476222b46a96f6ff4658bf619da7c7546d6e5a3ec5b5beb00c3c576472fee36fd42ae8eae0c7406b81be492fb2fb65e90aa2332de33d1115f44fd46e00a690851d57aff540c4340aa023b19900b5b6661f6a97ff94bfb2b9fd4eeec6cee0e13e3ddfa7ca3cb7898b51657b86e339aeeb473765ae384d84ee199a8d95cf540b11b33181946b197fd3ca18cf3d296d5e2c3a4792b0c81e581ae2de165730847fa3ededd05a643363c66453ec8f8c4c4ef0c28bd3d53a4ad050667f84496c890979af4d152f6c9e39e0e16227f794f88b86a119aaaf93ce382ff451d2f5a27e9efdeb4fb75483eadc61de83ace708ed439a53f7f7bb61d26d39b7e441a247915337e9ae6464d2f7776c8eabf902567d465ac0b3c68c508d9c1fb19b403091d6d8985bbcc769d05ceb75ad6e29ac04be319ba4e4ff04200a9a3d98295fdc217f786922e3d0dc67d4af85128b2876ad78402e2137df1b2a84126c32ec53bdcb6c975e6c3a380fde81b79116889c5d725a44742380ec9c15d38431782714c3250a90e3c0e92b3ea111945a336e9fda4d1c1f4580741330c720463e153f6326ed66a0b6cc093ea838497ae01777cc8c343385b99905f18bbade22c4093014e9eddc29eda573fb8ccf24dd69932969932ee2104df9865ee9fc7b5b3463838edf34cbb24320ed646bde4182bf4e142212dee4884506355bafc34490bfa289e912b4ebd719ee5f7b3c17526801dbba2126c664e0762003e367bcb5ee91e936761e539d0085485110ee5c1e2c31a621b8b1610e1ec4074e625350482eee09c8715499a0a1c4ae84bd57782944a16785631933f36ee4b11c50831fd2f152d5a804dda5cfd4978053ec39b2118358c4e25de16592c0f4ccc6690dc58d31b3cd6ded0f4c65ca189f0c7bcd53563f15ffc156d7be9af3ab9604170e6bb22798aa07dc9080dda12cad207963f50b3ae651c6c863eca3dcc01153f8c367eb03682ef64e8b7d1561c38940c03e433459842984b708139cc761250b2233da5402e6f410cf38f729f3d38f7b1aca036c4f155d32b0b83c92e7fc9ac39e2c8a265c658d646b62a74e986622e68fbfe3271af5038f19655f03dca9a5b224b586e7b2ce816ff39dbfdfde9fc335334005e696cff4013e0b06ef23b1aee2f0a4ac843e109379176b2ffffbfa03be92e64e3ca9fd61b6bf8a41ed3b05bca6301f39d552fc95a927aaaa973b48832571237a974f700eceba6b5afc1aa54b56d03cb75e3144f40522efc83e2b1cb18420496ab102ef11e719f1cd7e016f0d9e009bd7fd93d73f5fad884736f4268f66d07ed31b474a13c27e7a18c0fbc2547c4b93e817776dd2b58483d083f248fa4963d7551f7c19f0cb43c0e5b199854475dce611c765d1ab3e47ec12a480885a4039d3456eae465583eb1c45067f8447a2bbe1fa599a6454c069ae1eed49a3f5c97bc675f50663ed49e0af962cf8217c24723a8e05eb24352869074178f1722da14ef3da544155f7eb03227fd01dd826122f2fcb512b0a5382e062d6c93244af035edee63f338c34b59bf64fa835023f5f6e662adeec4c775ac974661907296527d2477191e73eb6c6dffe1f9b1d5b4c769d3de9692938b674ed0df85b7162f66c352c5ae38fd766bcb683fdd702326b13d78081899f1cb7933bb3927f42aff3bae588b52caefb5ca278d17ba61bb532dff9f051d47e1cf228a02439fd688c1630a5fda56b703c503096ea169178bf0f6347296496d33987edda9026afda2891c043304c40dd6593020606771640168c614ea5857d07484e22246be9e6331ca4b106b0fd253ffc2b1d344641fbbd5b07fe9cd3b1895d356a3bd56db4f7f081724c52b57ed78a04a8ec207c9408ea168d4fd51947ed4b3566c713fa5c73a39d5330ec328c0a76884d143b2cf5beb5cd084d3fd9054294b0e090183334d81e67e8bf1f418d45d3efdb80b0187832c2aceb89ed693f3460789eaa549fcdee2ad0908fb6932480292d49e48fe3ed2c1d2045f700e1a088f413507e17e673e9d105e0fdfa15bd3b76f0c3671d7d90dd850f4623da1f6e181944a4845d2368b6feaeeab403748791447cebac83fb105492a3d2e67d6d4be6a0743173206f2841be3a333fbca1da7775f51091df981e280ed7c6925c1b2dd0280cb5308a5d3d7b4cdf8d6ce021b0dcb72b1acc9c4d3ce5a88798e044eec8649312a1afa114ca4444b7946bc5e1e32da35df0bdfcbb1f5e8d34f74f22648ce4b93542e0c8432114913456b7132a87f62390c951d36900cbf7fb300f22d68c267edb48a6b25a0a4f62ab867413b5ce1bb6820ad13fbe602d099a8c6af99d57786a09084498018179b4e05e2a8db7cd808a685391dcd46fdbc650f2cfaf81f45f9a8ca02a5756ad1f60bc2394c5f710e40538d8ec74579eb8ec00654f5424f49987fe4b9cdb739697f6ea37287b4bb14546d00b74826cbe76124b1577f1ecddb0da0af1c8ba8c5691b799000812c840cbbe0720f7f71e362a74194e1ab04e2b69843d885c55620750d7f292ac2b1137dcdb84bf2e12060359308faf775d31f62ef9b953baf0d63a9571cec84eedfa4a4890e3434899c7b642f3541aeb852a88c6672b3bcb4e235ae9871ef53a8f7eb55a4a4c4758f73f59712b2da5a56ca8979f4e71c2edcdcd4f33e8acac36b01ffbcc2299e88cfd0445b79a6a9a2347c53f2b4120bde03ef4a650ae7bd6df206874d18d02e538c12c1a7b8032203333d59508b5f12f779c295803691991def22b9c7ad7d790db475d1562ec6909636ddb39a5a4f5d8e11fa93fbd10d4cf7490e16ac889638f0ba553b65944d2641481ba7011bde57a6004405ae956b2cadc1b167cf6de13ff71bca7a873b1fd8010e9b35144ef0e8538ee7af81730551738307d89a26a5794a5d9e64f8c501e266ccb8939511170090c418abcf2081b33a2ebe4d34aabd565d7b6112add4944b545ac29e0eabcd26663a7c209647d3683d78d6fa20ebb87cd0b635c5b69c14db15155bd5edd66ff8cc1a624ba9640a89a85c71d855eba594e5f2afab2f7cb719cf11588849eded4499991c7489a6f3ed660153af2d27941deba9b5e433385a5cb0943ad4d2e16dff3bd7bf230abafe6e9435dcbdbc8a98f42f2e0ace54ffea928b4a58e520b46208e4325519c780e62ed1d192be6f037afc708af7fd64947ad4fc911e869d4d191b8170d36cd6b39a2fcf1cc5f3b0a7a11875734642c113a49726"}) ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f0000002580)={{r11, 0x7, 0x80000000, 0x26, 0xfff, 0x1, 0x80000000, 0x48a, 0xa, 0xb, 0x400003, 0x200, 0x4010, 0xfffffffffffffff9, 0x5}}) (async) r12 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r12, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) (async) r13 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r14 = socket(0x10, 0x803, 0x0) (rerun: 32) sendmsg$nl_route_sched(r14, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r14, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r15, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@newqdisc={0x40, 0x24, 0xe0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r15, {}, {0xffff, 0xffff}, {0xffe0, 0xd064db0e491fa98f}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x10, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x81}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x4000080) (async) ioctl$sock_rose_SIOCADDRT(r14, 0x890b, &(0x7f0000001240)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x73, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={'rose', 0x0}, 0x4, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) 1.354947864s ago: executing program 1 (id=22591): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='cdg', 0x3) sendmmsg$inet(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000940)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c42200fd9232f5aa6a361816bf21afb8473a064f1988536d4b5888807b3aaafaf59f53121782a0a9370dc0feae13c8c2a1dcc8a3122aaa3dcd5b9247a915378e6492e5b94073dcdc87e7c794fb262a7e9ee0b943", 0xc5}], 0x1, 0x0, 0x6d00}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000800)="cc5a4dbac0affd0a979c63ea8352d608a51fc8625318716ddf62b7752be4540c4ac7d344c53a3ad28313abc2437b60b03c0e587cafcf9a435bf90c618351f70a828238fdf90bc5d36c7d614b82552649954e0185662defd28f78449f073bad544f586136c5076a6f0f1b6fc9ad", 0x6d}], 0x1}}], 0x2, 0x2090) 1.343357956s ago: executing program 2 (id=22592): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r0, &(0x7f0000000080), 0x12) bind$x25(r0, &(0x7f00000002c0), 0x12) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'bond0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="adc734370000000008000a00", @ANYRES32=r5, @ANYBLOB="2000128008000100687372001400028008000100", @ANYRES32=r4, @ANYBLOB="08000200", @ANYRES32=r5], 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x24, r6, 0x11, 0xfffffffd, 0x3, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x845}, 0x4040010) 1.267049817s ago: executing program 0 (id=22593): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) recvmmsg(r0, &(0x7f00000021c0)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x4000000000000, 0x0) 1.180593683s ago: executing program 1 (id=22595): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x4, 0x0, 0x3, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1}}]}, 0x70}, 0x1, 0x7}, 0x0) connect$unix(r0, &(0x7f0000000800)=@file={0x0, './file0\x00'}, 0x6e) (async) listen(r0, 0x7fffffff) 1.180328633s ago: executing program 4 (id=22596): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000000)={@private, @initdev}, &(0x7f0000000040)=0xc) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000900)='.', 0x1, 0x8012, 0x0, 0x0) 1.059409699s ago: executing program 0 (id=22597): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0902000000000000000001000000050002000a00000014000700ff00000000000000000000000000000108000b00", @ANYBLOB="ec69f197fb21"], 0x38}}, 0x0) 1.054048199s ago: executing program 2 (id=22598): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newsa={0x13c, 0x10, 0x413, 0x70bd26, 0x40, {{@in6=@ipv4={'\x00', '\xff\xff', @local}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e20, 0x7, 0x4e1f, 0x0, 0xa, 0x80, 0x20}, {@in=@dev={0xac, 0x14, 0x14, 0x30}, 0x4d4, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, {0x800, 0x17d, 0x0, 0x40000000000004, 0xffffffffffffffff, 0x6, 0x7f, 0x2}, {0x0, 0x21fd, 0x4, 0x4}, {0x4000f6, 0x4, 0x8}, 0x0, 0x34ff, 0x2, 0x1, 0xbe, 0x33}, [@algo_aead={0x4c, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0x0, 0x40}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000804) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x2, 0x1000, @empty}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0xfffff25c, @remote, 0x1009}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @random="33e2ea9332b8", @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, "fbddf0", 0x8, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @mcast2, {[], @echo_reply={0x81, 0x0, 0x0, 0x2, 0x4}}}}}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) sendmmsg$inet6(r1, &(0x7f0000000ac0)=[{{&(0x7f0000000080)={0xa, 0x4e21, 0x7ff, @mcast1, 0xffff0d70}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000140)="486cc086cbae9b359e8f63ab72d8239d9271b0dc34ea3a3b5119b3e75248958dc84231aa6bf9eaf5d43b9b2e6de64fef2d56973c13ea79a2b00fa209f89d05e229d513489f881eaabf7632171bf3c3507b81889248b963e5e0c71709243663a868ec7f3702752835a104dcf5bc7118b3abd041be749b821973abf5bed80298d9202946645fcf5324c61d2f3e24c22ed4d7597730fe9cd25d1556ae0cb1f1", 0x9e}], 0x1}}, {{&(0x7f0000000280)={0xa, 0x4e23, 0xd74, @empty, 0x100}, 0x1c, &(0x7f00000003c0)=[{&(0x7f00000002c0)="2252cebc8c0e", 0x6}, {&(0x7f0000000300)="f585d16af97a8489784db4e4e22059ec0bb918b1a34dc503e7a38944f28de84602f8c7ecd073e5189116063f734f3e857d496dc1b9c1df37508448cd3ec58f69416cd738c94a2c6cad1224c95de4acce1562d2d3dcb6a73c8200e6f11b2e1e847114fb37996dbd4802c11b10cbf6f8474f093c1bc099e5faba9a1d863ac5711e60b8304c34bbb591a4404763e0741576715a743568fb68b2", 0x98}], 0x2, &(0x7f00000005c0)=[@hopopts={{0x88, 0x29, 0x36, {0x8, 0xd, '\x00', [@calipso={0x7, 0x20, {0x2, 0x6, 0x7, 0x7, [0x4, 0xc, 0x3]}}, @ra={0x5, 0x2, 0x1}, @ra={0x5, 0x2, 0x1}, @jumbo={0xc2, 0x4, 0x5}, @calipso={0x7, 0x38, {0x2, 0xc, 0x3, 0x4, [0x882a, 0x5, 0xffffffffffffffff, 0xbba9, 0x2, 0x8]}}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x200}}, @hopopts_2292={{0x58, 0x29, 0x36, {0x49, 0x7, '\x00', [@calipso={0x7, 0x20, {0x3, 0x6, 0x0, 0x8, [0x8, 0xffffffff, 0x7]}}, @jumbo={0xc2, 0x4, 0x4}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x32}}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, r2}}}, @hoplimit={{0x14, 0x29, 0x34, 0x8}}, @dstopts={{0xa8, 0x29, 0x37, {0x2c, 0x11, '\x00', [@calipso={0x7, 0x40, {0x2, 0xe, 0x9, 0x5, [0x6, 0xa, 0x4, 0x40, 0x101, 0xb, 0xfffffffffffffffd]}}, @enc_lim={0x4, 0x1, 0xf6}, @jumbo={0xc2, 0x4, 0x3}, @ra={0x5, 0x2, 0x8}, @calipso={0x7, 0x38, {0x1, 0xc, 0x7, 0x0, [0xfffffffffffff800, 0x6, 0x4, 0xffffffffffff3272, 0x0, 0x66]}}]}}}, @dstopts_2292={{0xa8, 0x29, 0x4, {0x62, 0x11, '\x00', [@generic={0x4, 0x64, "d31226e14d5427a4a38a8b74e78dcd4011449981c93a51a3a3430b501addf3a01c0f8224cdc7a105c694400835afe138a64f60ff74f705365b0f77771bc2e259007470df9a151f004d5d9b0b90affc8e8ee712ad2e6f45eb11ca8ae005dbeb1fdd5a37d2"}, @pad1, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x1, 0x10, "961db440b471b4d1bf799c10af75266b"}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0xfffffffc}}], 0x2a0}}, {{0xffffffffffffffff, 0x0, &(0x7f0000000440)=[{&(0x7f0000000880)="9ee53751557e3acd4060596744325e695c213ec07d6a31fe585dc813a6d3af1f6d4772c0aefbb3e97833a154b609ec967a38127ee2c58e8717568c36c6b8bc7fc19152d9f11195a4e0ec3e86cf46bb8159a62e8dd1c0b452a8795dfbea6da01c52b6dd46488e755b070498db2c161c1c9c952d9ccfaa40c212f55a86ec408159ab05c248126b8133321edc366831d122e8af049083d95a3c2787", 0x9a}, {&(0x7f0000000940)="2cbbc5513eeb34ab00e51f7841655a52c7a3eb2dbc03b992a5bfdf50f1ed1fd137591db015b8cab7a0d0db10419f410d2664a78b9f2233bb908eb95fdc261f26f33723de87f60c6a2571bd4812a79e8c9ace58931f61847687b4bc58f7979cfa73bcad0e99ae1fa80d1e4c1a3617db263c219ad65996468e4476f7aa16f0adfa75471cc5d6384fd3d1e6700c571b76ba64d0d84edc91e9fafa31b438d3fe355bc85875cb7c315fe3e85a2e36486f001178", 0xb1}], 0x2, &(0x7f0000000a00)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x10001}}, @hoplimit={{0x14, 0x29, 0x34, 0x8bf}}, @flowinfo={{0x14, 0x29, 0xb, 0x8}}, @rthdrdstopts={{0x48, 0x29, 0x37, {0x2, 0x5, '\x00', [@calipso={0x7, 0x20, {0x2, 0x6, 0x10, 0xc, [0x4, 0x2, 0x9]}}, @ra={0x5, 0x2, 0xd}, @jumbo={0xc2, 0x4, 0x5}]}}}], 0x90}}], 0x3, 0x4000) 1.039984782s ago: executing program 3 (id=22599): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r6, {0xffff}, {}, {0x2, 0xc}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2a, 0xfffff000, {0x0, 0x0, 0x0, r9, {0xf000, 0xffff}, {}, {0x7, 0x1}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) (fail_nth: 9) 955.353691ms ago: executing program 0 (id=22600): r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r1 = socket(0x5, 0xa, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x29, 0x43, 0x0, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r1, 0x0) r3 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r3, &(0x7f0000000080), 0x10) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f00000000c0)={0x1, 0x20}, 0x8) close(r3) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r0, 0x800442d3, &(0x7f0000000000)={0x800, 0x6, 0x55, @broadcast, 'veth0_macvtap\x00'}) getsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) 954.797295ms ago: executing program 2 (id=22601): r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r2, &(0x7f0000000980)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000f40)=""/239, 0xef}, {&(0x7f0000003bc0)=""/4082, 0xff2}, {&(0x7f00000005c0)=""/40, 0x28}, {&(0x7f0000001140)=""/242, 0xf2}, {&(0x7f0000000680)=""/166, 0xa6}], 0x5}, 0x9}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x7}], 0x4, 0x40002120, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4004088}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(0x3) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r4, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r5, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) listen(r5, 0x80) r6 = accept$netrom(r5, 0x0, 0x0) writev(r6, &(0x7f0000002880)=[{&(0x7f0000000100)="47c0158249e04233fea96a0a359f5eef0a7bf4", 0x13}, {&(0x7f0000000600)="89e0302a5646f566f2419a23ca43c85718ef81083553e2ebf2959ec1382e3587e2b459989785289bc7e50de715c72953f937ddffccf532897c73c532a17a3706f4e90e766ccd20e1af1b533d25616eac6ee0b9ca146b2d8dd1f1e10656a1c0531caf434630105eae197bce94d8e1d456bdef89ec35fa1fea011e7991e9068e063b93da744075224d7e5904067779b980", 0x90}, {&(0x7f00000007c0)="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", 0x222}], 0x3) writev(r3, &(0x7f00000005c0)=[{&(0x7f0000000080)='/', 0x1}], 0x1) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSFLAGS1(r7, 0x40047459, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000300)="80fd0fa67941", 0x6}], 0x1, 0x0, 0x0) openat$cgroup_freezer_state(r1, &(0x7f00000000c0), 0x2, 0x0) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) close(r8) 770.058467ms ago: executing program 0 (id=22602): socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x2, 0x80805, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x1e, 0x4, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) socket$kcm(0x2, 0xa, 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="900000001000030500000000000000", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) 561.656799ms ago: executing program 0 (id=22603): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket(0xa, 0x3, 0x9) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r2, 0x6, 0x7, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)={0x34, r4, 0x1, 0x2, 0x25dfdbfb, {0x36}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000003380)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48) r6 = socket$kcm(0x29, 0x5, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r8, &(0x7f0000000100)={&(0x7f0000000040)={0xa, 0x4e24, 0x1, @dev}, 0x1c, 0x0}, 0xfdff) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f00000001c0)={r6, r5}) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000200)={0x0, 0x7, 0x6, 0x4, 0x0, 0xb6, 0x200, 0x0, {0x0, @in={{0x2, 0x4e24, @private=0xa010102}}, 0x40, 0x5, 0x347a, 0x23c, 0x6}}, &(0x7f0000000300)=0xb0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000340)={r9, 0x7, 0x66, "0e9f666163f3c3138d134347c1f534a74962debcf21df27131cf0c761f14a3ec190429349ba6758c21046cba6f720cb81a9b9737c368ac2b5425660116972b0c0ad0d099a341078df6b7ac139584e99462a20d1d6569d46e4be840d82bb7b8c51605ec85b0f8"}, 0x6e) getsockopt$nfc_llcp(r1, 0x29, 0x24, 0x0, 0x2000005d) accept4$nfc_llcp(r1, &(0x7f00000000c0), &(0x7f0000000040)=0x60, 0x80800) sendmmsg$inet(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000940)="985e44efeabe001cabcf3d", 0xb}], 0x1}}], 0x1, 0x2090) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000000)=0x6, 0x4) 468.795583ms ago: executing program 3 (id=22604): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@bridge_setlink={0x20, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x300, r1, 0x50}}, 0x20}}, 0x8000) 416.886127ms ago: executing program 3 (id=22605): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@newlink={0x48, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x504c3}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gre={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x8, 0x6, @loopback}, @IFLA_GRE_PMTUDISC={0x5}, @IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40010}, 0x4c040) sendmmsg$inet(r0, &(0x7f0000000700)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000d00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @remote}}}], 0x20}}], 0x1, 0x40000) (fail_nth: 8) 393.131373ms ago: executing program 2 (id=22606): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f00000000c0)=0xfffffff7, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94) sendmmsg$inet6(r0, &(0x7f0000001700)=[{{&(0x7f0000000100)={0xa, 0x4e21, 0x1000000, @local, 0x1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28, 0x7ffffff7}}], 0x1, 0x4040) 322.720972ms ago: executing program 3 (id=22607): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) write(r1, &(0x7f0000000000)="e8e2b6b42661504680db76da666ec5aae004539e928276b978e329bbe8c6a4ce83bf8055ad0a7512940f6d2e2c81731b43bef7df76c740194fc65124889a11d46bdf973655fa6792396803e94ec96df9d7b3b416f57f9bdebd622ca397a7338b5e43671475d86dcd7c57b409d5865054a26f2d05a88ff3e7afdad6f19e943bcdab656159970004059431f6e6b0cfadd393e93359a252d51241588f2b29859a1fef62579e4d3494ab07d90779", 0xac) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @rand_addr=' \x01\x00'}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @mcast2}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x5, 0x4, 0x7}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000091}, 0x8000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)={0x2c, 0x7, 0xa, 0x303, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x0) 322.276308ms ago: executing program 2 (id=22608): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x9f, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200), 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000014007910480000000000690036000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xa3}, 0x21) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002280)={{0x14, 0x10, 0x1, 0x0, 0x2000000}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x301, 0x0, 0x0, {0xa}}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8}]}], {0x14}}, 0x8c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000280)=ANY=[@ANYRES32=r1], 0x0, 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, r1}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x7}, 0x94) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x68, &(0x7f0000000040)=0x2, 0x4) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000140)={'filter\x00', 0x0, [0xfff, 0x31, 0xfffff109]}, &(0x7f00000001c0)=0x44) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454da, &(0x7f0000000080)={'batadv0\x00'}) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x103442, 0x0) ioctl$TUNSETIFF(r5, 0x400454da, &(0x7f0000000140)={'batadv0\x00'}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'pimreg0\x00', 0x1}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000180)={'\x00', 0x52d35ce30131f272}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f0000001180)=[{{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000003cc0)=""/4096, 0x94}], 0x1}, 0x3}], 0x1, 0x40000000, 0x0) 310.882507ms ago: executing program 3 (id=22609): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$netlink(0x10, 0x3, 0x14) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x800, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, 0xfffffffffffffffd, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000001c0)={0x10, 0x1403, 0x1}, 0x10}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x1e, 0xfa0a, 0x7ff, 0x8, 0x6180, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x5, 0xe}, 0x50) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r10 = socket$kcm(0x11, 0x3, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r11) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001200)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r13, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_LIMIT={0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r10, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x8, r14, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000840)='\'', 0x14}], 0x1}, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0xfffffcd5, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c0000001023684b232cf3f88a171f3137bb2900", @ANYRES32=r5, @ANYBLOB="38030600400202002c0012801100010056726964672c0b79ba617665000000001400058008002a"], 0x4c}, 0x1, 0x0, 0x0, 0x80c5}, 0x6044084) r16 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_mems\x00', 0x275a, 0x0) write$cgroup_subtree(r16, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x13, r16, 0x0) r17 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x401, 0x3000000, 0x7, 0x40110, r5, 0x80000000, '\x00', r15, r16, 0x4, 0x2, 0x0, 0x2}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x18, &(0x7f00000000c0)=@ringbuf={{0x18, 0x6}, {{0x18, 0x1, 0x1, 0x0, r17}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r17}, {}, {0x3, 0x3, 0x3, 0x9}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x24}}]}, &(0x7f0000000240)='GPL\x00'}, 0x90) sendmsg$nl_xfrm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000a40)=@allocspi={0x158, 0x16, 0x221, 0x0, 0x0, {{{@in=@loopback, @in6=@mcast2, 0x0, 0x0, 0x4e23}, {@in6=@remote, 0x0, 0x33}, @in=@local, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, 0x400, 0x3502}, 0x0, 0x5dfd}, [@replay_thresh={0x8}, @tmpl={0x44, 0x5, [{{@in=@private, 0x0, 0x32}, 0x0, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x1}]}, @srcaddr={0x14, 0xd, @in=@multicast1}]}, 0x158}, 0x1, 0x0, 0x0, 0x4}, 0x0) 237.683543ms ago: executing program 1 (id=22610): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r2], 0x44}}, 0x2000800) 165.82002ms ago: executing program 4 (id=22611): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f00000000c0)={@dev={0xac, 0x14, 0x14, 0x2c}, @empty}, 0x8) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000001080)="3a53e6ff19acc27dfcd05fbc5da0cca1", 0x10) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r0, 0x4002f516, &(0x7f0000000000)={0x4, 0x5}) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019001931a0e69ee517d34460bc06000000a701251e6182949a3651f60a84c9f4d4938037e70e4509c51c268811000000000000000000002571cd53b9851b30599980bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000700)=""/171, 0xab}, {&(0x7f00000028c0)=""/4035, 0xfc3}, {&(0x7f00000038c0)=""/4111, 0x100f}, {&(0x7f0000000800)=""/202, 0xca}, {&(0x7f0000000940)=""/154, 0x9a}, {&(0x7f0000000240)=""/123, 0x7b}], 0x6}, 0x120) 132.706762ms ago: executing program 1 (id=22612): bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, 0x0, 0x0) r1 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', 0x0}) bind$packet(r1, &(0x7f0000000180)={0x11, 0x3, r2, 0x1, 0x1, 0x6, @broadcast}, 0x14) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) sendmsg$netlink(r1, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000080)=ANY=[@ANYRES8=r2, @ANYRES8=r1], 0xdd12}], 0x1, 0x0, 0x0, 0x4008000}, 0x20040051) 111.802341ms ago: executing program 4 (id=22613): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@can_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_DST_IF={0x8}, @CGW_SRC_IF={0x8}, @CGW_MOD_UID={0x8, 0xe, r3}, @CGW_MOD_SET={0x15, 0x4, {{{0x3, 0x1, 0x1, 0x1}, 0xa, 0x1, 0x0, 0x0, "0325175362eb4cf2"}, 0x4}}]}, 0x44}}, 0x0) sendmsg$nl_generic(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xa0000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x24, 0x14, 0x8, 0x70bd2c, 0x25dfdbfb, {0x1}, [@typed={0x8, 0xf4, 0x0, 0x0, @uid=r3}, @generic="0a693ffdff"]}, 0x24}, 0x1, 0x0, 0x0, 0x4004800}, 0x20000011) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100), 0xd) close(0x3) 39.2048ms ago: executing program 3 (id=22614): sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x2c, 0x0, 0x1, 0x70bd2b, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff0000000002000000000000000400010008000a000008000005001e"], 0x50}}, 0x4000850) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x24}, 0x1, 0x5502000000000000, 0x0, 0x10}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0xffffffff, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7fffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@empty, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3, 0x0, 0x49}]}]}, 0xfc}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000007c0)=@bpf_lsm={0x1d, 0x2, &(0x7f0000000500)=ANY=[@ANYRESHEX], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x41, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x401}, 0x94) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, 0x0, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x2) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 14.020115ms ago: executing program 1 (id=22615): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x59}, @exit], &(0x7f0000000200)='GPL\x00'}, 0x90) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ALL_SLAVES_ACTIVE={0x5, 0x11, 0xde}]}}}]}, 0x3c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x59}, @exit], &(0x7f0000000200)='GPL\x00'}, 0x90) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ALL_SLAVES_ACTIVE={0x5, 0x11, 0xde}]}}}]}, 0x3c}}, 0x0) (async) 0s ago: executing program 4 (id=22616): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x94, 0x2, 0x6, 0x3, 0x0, 0xa00, {0x0, 0x0, 0x9}, [@IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xde}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x8763}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x3}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0xb}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x1}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x9}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x10000}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x94}}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=ANY=[@ANYBLOB="340000001800dd8d00000000000000000200000000000006000000000600150002000000100016800c00088008000180040003005811f34d3975d8c6ce11d62beb7998b466efd1fa4a9070312d4409f299e97cb8a4d8a7b8d3a4c6ac3d6b1f66770675a31dcfce111797a1ea504cd65b0b2f1800556ba4fed8039b98f33f06a1c49479562d744a40ee23222b1b5dd675d14295efd24a2cbb86a1810185f41b1865aa903e20dd520099000000"], 0x34}}, 0x0) ioctl$sock_SIOCBRDELBR(r2, 0x89a1, &(0x7f0000000100)='ip6erspan0\x00') setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000280)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x6, 0xb8, 0x2, 0xffff}]}, 0x10) syz_emit_ethernet(0x115, &(0x7f00000003c0)={@multicast, @local, @void, {@ipv4={0x800, @generic={{0x35, 0x4, 0x3, 0x2b, 0x107, 0x68, 0x0, 0x0, 0x5c, 0x0, @broadcast, @empty, {[@end, @end, @lsrr={0x83, 0x23, 0x8d, [@rand_addr=0x64010102, @multicast1, @rand_addr=0x64010102, @empty, @broadcast, @dev={0xac, 0x14, 0x14, 0x34}, @rand_addr=0x64010100, @private=0xa010101]}, @timestamp_addr={0x44, 0x2c, 0x6e, 0x1, 0xf, [{@remote, 0xffff}, {@loopback, 0x40}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}, {@broadcast, 0x800}, {@empty, 0xffffffff}]}, @end, @timestamp={0x44, 0x2c, 0x7c, 0x0, 0x9, [0x3, 0x3, 0x84b, 0x6, 0x1, 0x6, 0x3, 0x7ff, 0x2, 0xd]}, @lsrr={0x83, 0xb, 0x73, [@multicast1, @remote]}, @timestamp_prespec={0x44, 0x24, 0x8d, 0x3, 0xf, [{@rand_addr=0x64010103, 0x1}, {@multicast2}, {@local, 0x5}, {@multicast2, 0x101}]}, @end, @generic={0x44, 0x10, "18bf390e4d812a7c6a9a721a32d5"}]}}, "c43c2bbd0b3c9b026143aa23a7e08f9a58a27a3d068d1904c4b80123eb242e943e2ab292a0cd7fa3ab7b5e69ea36c92d8218ce"}}}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0x7, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f72740005000400000000000900020073797a32000000000500050000006c00050001000600000024000780080008400000137906000440fffff000060005401c16000008000640"], 0x6c}}, 0x0) kernel console output (not intermixed with test programs): miscuous mode [ 1283.453260][T29156] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1283.468702][T29156] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1283.485979][T11614] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1283.496985][T11614] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1283.510325][T11614] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1283.521463][ T506] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1283.679765][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1283.700615][T19767] block nbd4: Receive control failed (result -32) [ 1283.743384][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1283.757728][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1283.828233][T11314] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1283.856215][T11314] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1283.887974][T29274] FAULT_INJECTION: forcing a failure. [ 1283.887974][T29274] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1283.904425][T29274] CPU: 0 UID: 0 PID: 29274 Comm: syz.4.21961 Not tainted syzkaller #0 PREEMPT(full) [ 1283.904453][T29274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1283.904464][T29274] Call Trace: [ 1283.904472][T29274] [ 1283.904480][T29274] dump_stack_lvl+0xe8/0x150 [ 1283.904514][T29274] should_fail_ex+0x412/0x560 [ 1283.904543][T29274] _copy_from_iter+0x1d3/0x1670 [ 1283.904573][T29274] ? rcu_is_watching+0x15/0xb0 [ 1283.904608][T29274] ? __pfx__copy_from_iter+0x10/0x10 [ 1283.904642][T29274] ? netlink_sendmsg+0x650/0xb40 [ 1283.904666][T29274] ? skb_put+0x11b/0x210 [ 1283.904707][T29274] netlink_sendmsg+0x6c0/0xb40 [ 1283.904742][T29274] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1283.904771][T29274] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1283.904797][T29274] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1283.904820][T29274] ____sys_sendmsg+0x972/0x9f0 [ 1283.904859][T29274] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1283.904900][T29274] ? import_iovec+0x73/0xa0 [ 1283.904932][T29274] ___sys_sendmsg+0x2a5/0x360 [ 1283.904968][T29274] ? __pfx____sys_sendmsg+0x10/0x10 [ 1283.905035][T29274] ? __fget_files+0x2a/0x420 [ 1283.905064][T29274] ? __fget_files+0x3a0/0x420 [ 1283.905103][T29274] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1283.905136][T29274] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1283.905176][T29274] ? __pfx_ksys_write+0x10/0x10 [ 1283.905204][T29274] do_syscall_64+0x14d/0xf80 [ 1283.905232][T29274] ? trace_irq_disable+0x3b/0x150 [ 1283.905259][T29274] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1283.905278][T29274] ? clear_bhb_loop+0x40/0x90 [ 1283.905300][T29274] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1283.905316][T29274] RIP: 0033:0x7fcc7a99c799 [ 1283.905334][T29274] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1283.905348][T29274] RSP: 002b:00007fcc7b8da028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1283.905367][T29274] RAX: ffffffffffffffda RBX: 00007fcc7ac15fa0 RCX: 00007fcc7a99c799 [ 1283.905379][T29274] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000004 [ 1283.905390][T29274] RBP: 00007fcc7b8da090 R08: 0000000000000000 R09: 0000000000000000 [ 1283.905402][T29274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1283.905411][T29274] R13: 00007fcc7ac16038 R14: 00007fcc7ac15fa0 R15: 00007ffec84d2618 [ 1283.905439][T29274] [ 1284.150434][T29273] netlink: 8 bytes leftover after parsing attributes in process `syz.2.21962'. [ 1284.160260][T29273] netlink: 4 bytes leftover after parsing attributes in process `syz.2.21962'. [ 1284.430879][T29294] netlink: 'syz.2.21967': attribute type 11 has an invalid length. [ 1284.476179][T29294] netlink: 224 bytes leftover after parsing attributes in process `syz.2.21967'. [ 1284.719427][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1284.986687][T29324] openvswitch: netlink: IP tunnel dst address not specified [ 1284.997761][T29324] netlink: 16 bytes leftover after parsing attributes in process `syz.3.21979'. [ 1285.054374][ T2104] block nbd7: Possible stuck request ffff888026a30000: control (read@0,1024B). Runtime 45 seconds [ 1285.065306][ T2104] block nbd7: Possible stuck request ffff888026a30200: control (read@1024,1024B). Runtime 45 seconds [ 1285.076404][T29327] mac80211_hwsim hwsim60 ÿ: renamed from wlan1 [ 1285.085107][ T2104] block nbd7: Possible stuck request ffff888026a30400: control (read@2048,1024B). Runtime 45 seconds [ 1285.097169][ T2104] block nbd7: Possible stuck request ffff888026a30600: control (read@3072,1024B). Runtime 45 seconds [ 1285.119913][T19767] Bluetooth: hci5: command tx timeout [ 1285.247581][T29327] netlink: 80 bytes leftover after parsing attributes in process `syz.3.21980'. [ 1285.265319][T29327] netlink: 80 bytes leftover after parsing attributes in process `syz.3.21980'. [ 1285.296257][T29333] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1285.431093][T29340] netlink: 60 bytes leftover after parsing attributes in process `syz.3.21984'. [ 1285.470711][T29340] netlink: 60 bytes leftover after parsing attributes in process `syz.3.21984'. [ 1285.510518][T29340] netlink: 8 bytes leftover after parsing attributes in process `syz.3.21984'. [ 1285.583508][T29354] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1285.759835][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1285.915618][T29373] x_tables: duplicate underflow at hook 1 [ 1285.928757][T29374] syzkaller1: entered promiscuous mode [ 1285.937338][T29374] syzkaller1: entered allmulticast mode [ 1286.783162][T29400] 8021q: adding VLAN 0 to HW filter on device .` [ 1286.795614][T29400] 8021q: adding VLAN 0 to HW filter on device team0 [ 1286.803384][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1286.827063][T29400] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1287.201590][T19767] Bluetooth: hci5: command tx timeout [ 1287.690599][T29441] FAULT_INJECTION: forcing a failure. [ 1287.690599][T29441] name failslab, interval 1, probability 0, space 0, times 0 [ 1287.703668][T29441] CPU: 1 UID: 0 PID: 29441 Comm: syz.4.22016 Not tainted syzkaller #0 PREEMPT(full) [ 1287.703691][T29441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1287.703702][T29441] Call Trace: [ 1287.703712][T29441] [ 1287.703719][T29441] dump_stack_lvl+0xe8/0x150 [ 1287.703754][T29441] should_fail_ex+0x412/0x560 [ 1287.703783][T29441] should_failslab+0xa8/0x100 [ 1287.703807][T29441] ? fdb_create+0x1a2/0x13d0 [ 1287.703840][T29441] kmem_cache_alloc_noprof+0x87/0x650 [ 1287.703883][T29441] fdb_create+0x1a2/0x13d0 [ 1287.703921][T29441] ? fdb_find_rcu+0x6e7/0x770 [ 1287.703953][T29441] ? do_raw_spin_lock+0x12b/0x2f0 [ 1287.703977][T29441] ? __pfx_fdb_create+0x10/0x10 [ 1287.704009][T29441] ? kasan_save_track+0x4f/0x80 [ 1287.704035][T29441] br_fdb_update+0x3bf/0x690 [ 1287.704070][T29441] ? lock_acquire+0xf0/0x2e0 [ 1287.704095][T29441] ? __pfx_br_fdb_update+0x10/0x10 [ 1287.704131][T29441] ? __br_fdb_add+0x17a/0xec0 [ 1287.704162][T29441] ? __br_fdb_add+0x17a/0xec0 [ 1287.704192][T29441] __br_fdb_add+0x592/0xec0 [ 1287.704224][T29441] ? __pfx___nla_validate_parse+0x10/0x10 [ 1287.704250][T29441] ? __lock_acquire+0x6b5/0x2cf0 [ 1287.704292][T29441] br_fdb_add+0x735/0xc50 [ 1287.704333][T29441] ? __pfx_br_fdb_add+0x10/0x10 [ 1287.704365][T29441] ? __mutex_trylock_common+0x158/0x260 [ 1287.704411][T29441] rtnl_fdb_add+0x83a/0xba0 [ 1287.704453][T29441] ? __pfx_rtnl_fdb_add+0x10/0x10 [ 1287.704515][T29441] ? __pfx_rtnl_fdb_add+0x10/0x10 [ 1287.704542][T29441] rtnetlink_rcv_msg+0x77e/0xbe0 [ 1287.704573][T29441] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1287.704599][T29441] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1287.704623][T29441] ? ref_tracker_free+0x693/0x840 [ 1287.704646][T29441] ? __copy_skb_header+0xa3/0x4a0 [ 1287.704678][T29441] ? __pfx_ref_tracker_free+0x10/0x10 [ 1287.704713][T29441] netlink_rcv_skb+0x232/0x4b0 [ 1287.704740][T29441] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1287.704766][T29441] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1287.704801][T29441] ? netlink_deliver_tap+0x2e/0x1b0 [ 1287.704835][T29441] netlink_unicast+0x80f/0x9b0 [ 1287.704867][T29441] ? __pfx_netlink_unicast+0x10/0x10 [ 1287.704891][T29441] ? netlink_sendmsg+0x650/0xb40 [ 1287.704914][T29441] ? skb_put+0x11b/0x210 [ 1287.704947][T29441] netlink_sendmsg+0x813/0xb40 [ 1287.704983][T29441] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1287.705013][T29441] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1287.705039][T29441] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1287.705064][T29441] ____sys_sendmsg+0x972/0x9f0 [ 1287.705105][T29441] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1287.705147][T29441] ? import_iovec+0x73/0xa0 [ 1287.705181][T29441] ___sys_sendmsg+0x2a5/0x360 [ 1287.705220][T29441] ? __pfx____sys_sendmsg+0x10/0x10 [ 1287.705298][T29441] ? __fget_files+0x2a/0x420 [ 1287.705327][T29441] ? __fget_files+0x3a0/0x420 [ 1287.705369][T29441] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1287.705404][T29441] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1287.705446][T29441] ? __pfx_ksys_write+0x10/0x10 [ 1287.705476][T29441] do_syscall_64+0x14d/0xf80 [ 1287.705505][T29441] ? trace_irq_disable+0x3b/0x150 [ 1287.705535][T29441] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1287.705553][T29441] ? clear_bhb_loop+0x40/0x90 [ 1287.705667][T29441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1287.705686][T29441] RIP: 0033:0x7fcc7a99c799 [ 1287.705704][T29441] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1287.705720][T29441] RSP: 002b:00007fcc7b8da028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1287.705739][T29441] RAX: ffffffffffffffda RBX: 00007fcc7ac15fa0 RCX: 00007fcc7a99c799 [ 1287.705753][T29441] RDX: 0000000004040000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1287.705764][T29441] RBP: 00007fcc7b8da090 R08: 0000000000000000 R09: 0000000000000000 [ 1287.705774][T29441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1287.705784][T29441] R13: 00007fcc7ac16038 R14: 00007fcc7ac15fa0 R15: 00007ffec84d2618 [ 1287.705814][T29441] [ 1287.839922][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1288.865766][T29476] __nla_validate_parse: 1 callbacks suppressed [ 1288.865787][T29476] netlink: 16 bytes leftover after parsing attributes in process `syz.2.22028'. [ 1288.882079][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1289.604660][T29511] FAULT_INJECTION: forcing a failure. [ 1289.604660][T29511] name failslab, interval 1, probability 0, space 0, times 0 [ 1289.620017][T29511] CPU: 0 UID: 0 PID: 29511 Comm: syz.1.22037 Not tainted syzkaller #0 PREEMPT(full) [ 1289.620041][T29511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1289.620053][T29511] Call Trace: [ 1289.620060][T29511] [ 1289.620069][T29511] dump_stack_lvl+0xe8/0x150 [ 1289.620105][T29511] should_fail_ex+0x412/0x560 [ 1289.620131][T29511] ? __d_alloc+0x37/0x6f0 [ 1289.620164][T29511] should_failslab+0xa8/0x100 [ 1289.620189][T29511] kmem_cache_alloc_lru_noprof+0x87/0x640 [ 1289.620233][T29511] __d_alloc+0x37/0x6f0 [ 1289.620272][T29511] d_alloc+0x4b/0x190 [ 1289.620310][T29511] ? lookup_one_qstr_excl+0xc8/0x360 [ 1289.620342][T29511] lookup_one_qstr_excl+0xdc/0x360 [ 1289.620371][T29511] ? lookup_noperm_common+0x245/0x430 [ 1289.620405][T29511] start_dirop+0x5c/0x90 [ 1289.620435][T29511] simple_start_creating+0xcc/0x110 [ 1289.620468][T29511] ? __pfx_simple_start_creating+0x10/0x10 [ 1289.620500][T29511] ? do_raw_spin_unlock+0xf5/0x210 [ 1289.620519][T29511] ? mntput+0x65/0xc0 [ 1289.620547][T29511] debugfs_start_creating+0xdb/0x1a0 [ 1289.620622][T29511] __debugfs_create_file+0x6f/0x400 [ 1289.620656][T29511] debugfs_create_file_full+0x3f/0x60 [ 1289.620689][T29511] ref_tracker_dir_debugfs+0x197/0x360 [ 1289.620716][T29511] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 1289.620769][T29511] ? __kvmalloc_node_noprof+0x545/0x8a0 [ 1289.620791][T29511] ? alloc_netdev_mqs+0xa6/0x11b0 [ 1289.620814][T29511] ? __raw_spin_lock_init+0x45/0x100 [ 1289.620837][T29511] alloc_netdev_mqs+0x272/0x11b0 [ 1289.620855][T29511] ? __pfx_bnep_net_setup+0x10/0x10 [ 1289.620973][T29511] bnep_add_connection+0x214/0xca0 [ 1289.621016][T29511] ? __pfx_bnep_add_connection+0x10/0x10 [ 1289.621049][T29511] ? __fget_files+0x3a0/0x420 [ 1289.621091][T29511] do_bnep_sock_ioctl+0x40b/0x650 [ 1289.621128][T29511] ? __pfx_do_bnep_sock_ioctl+0x10/0x10 [ 1289.621170][T29511] ? tomoyo_path_number_perm+0x219/0x630 [ 1289.621211][T29511] sock_do_ioctl+0x101/0x320 [ 1289.621236][T29511] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1289.621254][T29511] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1289.621313][T29511] sock_ioctl+0x5c6/0x7f0 [ 1289.621336][T29511] ? __pfx_sock_ioctl+0x10/0x10 [ 1289.621356][T29511] ? __fget_files+0x2a/0x420 [ 1289.621384][T29511] ? __fget_files+0x3a0/0x420 [ 1289.621411][T29511] ? __fget_files+0x2a/0x420 [ 1289.621444][T29511] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1289.621469][T29511] ? __pfx_sock_ioctl+0x10/0x10 [ 1289.621489][T29511] __se_sys_ioctl+0xfc/0x170 [ 1289.621513][T29511] do_syscall_64+0x14d/0xf80 [ 1289.621544][T29511] ? trace_irq_disable+0x3b/0x150 [ 1289.621574][T29511] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1289.621593][T29511] ? clear_bhb_loop+0x40/0x90 [ 1289.621618][T29511] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1289.621636][T29511] RIP: 0033:0x7fefeb99c799 [ 1289.621654][T29511] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1289.621669][T29511] RSP: 002b:00007fefec8a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1289.621690][T29511] RAX: ffffffffffffffda RBX: 00007fefebc15fa0 RCX: 00007fefeb99c799 [ 1289.621703][T29511] RDX: 0000200000000040 RSI: 00000000400442c8 RDI: 0000000000000005 [ 1289.621715][T29511] RBP: 00007fefec8a7090 R08: 0000000000000000 R09: 0000000000000000 [ 1289.621726][T29511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1289.621737][T29511] R13: 00007fefebc16038 R14: 00007fefebc15fa0 R15: 00007ffe3e6e2ae8 [ 1289.621769][T29511] [ 1289.969426][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1291.039491][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1291.280437][ T2088] block nbd6: Possible stuck request ffff8880269d8000: control (read@0,4096B). Runtime 270 seconds [ 1291.292403][ T2104] block nbd5: Possible stuck request ffff8880269a8000: control (read@0,4096B). Runtime 270 seconds [ 1291.355491][T29580] netlink: 'syz.2.22055': attribute type 12 has an invalid length. [ 1291.398235][T29580] netlink: 'syz.2.22055': attribute type 29 has an invalid length. [ 1291.398577][T29581] netlink: 4 bytes leftover after parsing attributes in process `syz.4.22054'. [ 1291.415461][T29580] netlink: 148 bytes leftover after parsing attributes in process `syz.2.22055'. [ 1291.425339][T29580] netlink: 59 bytes leftover after parsing attributes in process `syz.2.22055'. [ 1291.726825][T29597] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1291.764093][T29597] bridge0: entered allmulticast mode [ 1291.854152][T29608] netlink: 'syz.2.22064': attribute type 11 has an invalid length. [ 1291.880069][T29608] netlink: 64 bytes leftover after parsing attributes in process `syz.2.22064'. [ 1291.923275][T29617] netlink: 36 bytes leftover after parsing attributes in process `syz.4.22063'. [ 1292.079948][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1292.086377][T29627] netlink: 'syz.3.22068': attribute type 12 has an invalid length. [ 1292.100709][T29627] netlink: 'syz.3.22068': attribute type 29 has an invalid length. [ 1292.108809][T29627] netlink: 148 bytes leftover after parsing attributes in process `syz.3.22068'. [ 1292.187847][T29633] netlink: 'syz.3.22069': attribute type 12 has an invalid length. [ 1292.226324][T29633] netlink: 'syz.3.22069': attribute type 29 has an invalid length. [ 1292.235413][T29633] netlink: 148 bytes leftover after parsing attributes in process `syz.3.22069'. [ 1292.276694][T29633] netlink: 59 bytes leftover after parsing attributes in process `syz.3.22069'. [ 1292.587542][T29654] netlink: 16 bytes leftover after parsing attributes in process `syz.2.22077'. [ 1292.651808][T29654] FAULT_INJECTION: forcing a failure. [ 1292.651808][T29654] name failslab, interval 1, probability 0, space 0, times 0 [ 1292.667143][T29654] CPU: 0 UID: 0 PID: 29654 Comm: syz.2.22077 Not tainted syzkaller #0 PREEMPT(full) [ 1292.667165][T29654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1292.667174][T29654] Call Trace: [ 1292.667180][T29654] [ 1292.667187][T29654] dump_stack_lvl+0xe8/0x150 [ 1292.667217][T29654] should_fail_ex+0x412/0x560 [ 1292.667241][T29654] should_failslab+0xa8/0x100 [ 1292.667260][T29654] ? skb_clone+0x212/0x3a0 [ 1292.667287][T29654] kmem_cache_alloc_noprof+0x87/0x650 [ 1292.667313][T29654] ? __netlink_lookup+0xc6/0x8b0 [ 1292.667342][T29654] skb_clone+0x212/0x3a0 [ 1292.667371][T29654] __netlink_deliver_tap+0x404/0x850 [ 1292.667402][T29654] ? netlink_deliver_tap+0x2e/0x1b0 [ 1292.667423][T29654] netlink_deliver_tap+0x19c/0x1b0 [ 1292.667443][T29654] netlink_unicast+0x7e3/0x9b0 [ 1292.667474][T29654] ? __pfx_netlink_unicast+0x10/0x10 [ 1292.667496][T29654] ? netlink_sendmsg+0x650/0xb40 [ 1292.667514][T29654] ? skb_put+0x11b/0x210 [ 1292.667540][T29654] netlink_sendmsg+0x813/0xb40 [ 1292.667568][T29654] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1292.667592][T29654] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1292.667613][T29654] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1292.667632][T29654] ____sys_sendmsg+0x972/0x9f0 [ 1292.667665][T29654] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1292.667697][T29654] ? import_iovec+0x73/0xa0 [ 1292.667724][T29654] ___sys_sendmsg+0x2a5/0x360 [ 1292.667754][T29654] ? __pfx____sys_sendmsg+0x10/0x10 [ 1292.667810][T29654] ? __fget_files+0x2a/0x420 [ 1292.667833][T29654] ? __fget_files+0x3a0/0x420 [ 1292.667865][T29654] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1292.667893][T29654] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1292.667926][T29654] ? __pfx_ksys_write+0x10/0x10 [ 1292.667952][T29654] do_syscall_64+0x14d/0xf80 [ 1292.667979][T29654] ? trace_irq_disable+0x3b/0x150 [ 1292.668003][T29654] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1292.668018][T29654] ? clear_bhb_loop+0x40/0x90 [ 1292.668038][T29654] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1292.668052][T29654] RIP: 0033:0x7fb35359c799 [ 1292.668066][T29654] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1292.668079][T29654] RSP: 002b:00007fb3517f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1292.668096][T29654] RAX: ffffffffffffffda RBX: 00007fb353815fa0 RCX: 00007fb35359c799 [ 1292.668106][T29654] RDX: 00000000240008c4 RSI: 0000200000000000 RDI: 0000000000000004 [ 1292.668116][T29654] RBP: 00007fb3517f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1292.668125][T29654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1292.668134][T29654] R13: 00007fb353816038 R14: 00007fb353815fa0 R15: 00007ffdaba70938 [ 1292.668160][T29654] [ 1293.119316][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1293.178457][T29665] netlink: 'syz.2.22079': attribute type 12 has an invalid length. [ 1293.222226][T29665] netlink: 'syz.2.22079': attribute type 29 has an invalid length. [ 1293.246504][T29668] netlink: 'syz.4.22080': attribute type 4 has an invalid length. [ 1293.653144][T29694] FAULT_INJECTION: forcing a failure. [ 1293.653144][T29694] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1293.670788][T29694] CPU: 0 UID: 0 PID: 29694 Comm: syz.2.22089 Not tainted syzkaller #0 PREEMPT(full) [ 1293.670816][T29694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1293.670827][T29694] Call Trace: [ 1293.670835][T29694] [ 1293.670843][T29694] dump_stack_lvl+0xe8/0x150 [ 1293.670878][T29694] should_fail_ex+0x412/0x560 [ 1293.670906][T29694] _copy_from_iter+0x1d3/0x1670 [ 1293.670936][T29694] ? rcu_is_watching+0x15/0xb0 [ 1293.670972][T29694] ? __pfx__copy_from_iter+0x10/0x10 [ 1293.671006][T29694] ? netlink_sendmsg+0x650/0xb40 [ 1293.671030][T29694] ? skb_put+0x11b/0x210 [ 1293.671063][T29694] netlink_sendmsg+0x6c0/0xb40 [ 1293.671098][T29694] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1293.671127][T29694] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1293.671153][T29694] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1293.671175][T29694] ____sys_sendmsg+0x972/0x9f0 [ 1293.671213][T29694] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1293.671253][T29694] ? import_iovec+0x73/0xa0 [ 1293.671295][T29694] ___sys_sendmsg+0x2a5/0x360 [ 1293.671331][T29694] ? __pfx____sys_sendmsg+0x10/0x10 [ 1293.671399][T29694] ? __fget_files+0x2a/0x420 [ 1293.671427][T29694] ? __fget_files+0x3a0/0x420 [ 1293.671466][T29694] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1293.671499][T29694] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1293.671540][T29694] ? __pfx_ksys_write+0x10/0x10 [ 1293.671571][T29694] do_syscall_64+0x14d/0xf80 [ 1293.671602][T29694] ? trace_irq_disable+0x3b/0x150 [ 1293.671631][T29694] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1293.671653][T29694] ? clear_bhb_loop+0x40/0x90 [ 1293.671678][T29694] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1293.671696][T29694] RIP: 0033:0x7fb35359c799 [ 1293.671714][T29694] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1293.671730][T29694] RSP: 002b:00007fb3517d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1293.671749][T29694] RAX: ffffffffffffffda RBX: 00007fb353816090 RCX: 00007fb35359c799 [ 1293.671761][T29694] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000005 [ 1293.671772][T29694] RBP: 00007fb3517d5090 R08: 0000000000000000 R09: 0000000000000000 [ 1293.671783][T29694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1293.671794][T29694] R13: 00007fb353816128 R14: 00007fb353816090 R15: 00007ffdaba70938 [ 1293.671825][T29694] [ 1294.095957][ T2104] block nbd7: Possible stuck request ffff888026a30000: control (read@0,1024B). Runtime 54 seconds [ 1294.107037][ T2104] block nbd7: Possible stuck request ffff888026a30200: control (read@1024,1024B). Runtime 54 seconds [ 1294.119507][ T2104] block nbd7: Possible stuck request ffff888026a30400: control (read@2048,1024B). Runtime 54 seconds [ 1294.137384][ T5828] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1294.148549][ T5828] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1294.159836][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1294.162256][ T2104] block nbd7: Possible stuck request ffff888026a30600: control (read@3072,1024B). Runtime 54 seconds [ 1294.170477][ T5828] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1294.235238][ T5828] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1294.252005][ T5828] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1294.305596][T29709] __nla_validate_parse: 6 callbacks suppressed [ 1294.305614][T29709] netlink: 4 bytes leftover after parsing attributes in process `syz.1.22095'. [ 1294.617578][T30130] lec:lec_start_xmit: lec0:No lecd attached [ 1294.767050][T29703] lo speed is unknown, defaulting to 1000 [ 1295.199288][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1295.384732][T29703] chnl_net:caif_netlink_parms(): no params data found [ 1295.437039][T29737] sctp: [Deprecated]: syz.4.22103 (pid 29737) Use of int in max_burst socket option. [ 1295.437039][T29737] Use struct sctp_assoc_value instead [ 1295.539952][T29703] bridge0: port 1(bridge_slave_0) entered blocking state [ 1295.547432][T29703] bridge0: port 1(bridge_slave_0) entered disabled state [ 1295.556498][T29703] bridge_slave_0: entered allmulticast mode [ 1295.565626][T29703] bridge_slave_0: entered promiscuous mode [ 1295.593238][T29703] bridge0: port 2(bridge_slave_1) entered blocking state [ 1295.609063][T29703] bridge0: port 2(bridge_slave_1) entered disabled state [ 1295.617308][T29703] bridge_slave_1: entered allmulticast mode [ 1295.626067][T29703] bridge_slave_1: entered promiscuous mode [ 1295.676474][T29703] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1295.690841][T29703] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1295.745107][T29703] team0: Port device team_slave_0 added [ 1295.757708][T29703] team0: Port device team_slave_1 added [ 1295.806789][T29703] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1295.815172][T29703] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1295.856666][T29703] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1295.870805][T29703] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1295.877852][T29703] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1295.904410][T29703] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1296.041046][T29703] hsr_slave_0: entered promiscuous mode [ 1296.048095][T29703] hsr_slave_1: entered promiscuous mode [ 1296.055818][T29703] debugfs: 'hsr0' already exists in 'hsr' [ 1296.061847][T29703] Cannot create hsr debugfs directory [ 1296.239929][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1296.316441][T29703] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1296.330873][ T5828] Bluetooth: hci1: command tx timeout [ 1296.353794][T29760] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 1296.444152][T29703] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1296.524466][T29703] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1296.595357][T29703] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1296.798457][T29703] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1296.811955][T29703] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1296.825864][T29703] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1296.840018][T29703] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1296.941554][T29766] lo speed is unknown, defaulting to 1000 [ 1297.115602][T29703] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1297.141500][T29703] 8021q: adding VLAN 0 to HW filter on device team0 [ 1297.168366][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1297.175818][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1297.237477][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1297.244729][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1297.279243][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1297.698161][T29803] netlink: 4 bytes leftover after parsing attributes in process `syz.4.22119'. [ 1297.857197][T29818] FAULT_INJECTION: forcing a failure. [ 1297.857197][T29818] name failslab, interval 1, probability 0, space 0, times 0 [ 1297.894849][T29818] CPU: 0 UID: 0 PID: 29818 Comm: syz.4.22123 Not tainted syzkaller #0 PREEMPT(full) [ 1297.894876][T29818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1297.894888][T29818] Call Trace: [ 1297.894896][T29818] [ 1297.894904][T29818] dump_stack_lvl+0xe8/0x150 [ 1297.894940][T29818] should_fail_ex+0x412/0x560 [ 1297.894970][T29818] should_failslab+0xa8/0x100 [ 1297.894997][T29818] __kmalloc_cache_noprof+0x88/0x660 [ 1297.895018][T29818] ? sctp_add_bind_addr+0x8c/0x370 [ 1297.895041][T29818] ? __ipv6_addr_type+0x247/0x2f0 [ 1297.895078][T29818] sctp_add_bind_addr+0x8c/0x370 [ 1297.895107][T29818] sctp_bind_addr_copy+0xb3/0x3c0 [ 1297.895131][T29818] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1297.895171][T29818] sctp_connect_new_asoc+0x2ff/0x6b0 [ 1297.895205][T29818] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1297.895236][T29818] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1297.895266][T29818] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1297.895295][T29818] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1297.895325][T29818] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1297.895358][T29818] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1297.895395][T29818] sctp_sendmsg+0x1528/0x2c10 [ 1297.895437][T29818] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1297.895487][T29818] ? aa_sk_perm+0x6d5/0x900 [ 1297.895514][T29818] ? __pfx_aa_sk_perm+0x10/0x10 [ 1297.895539][T29818] ? sock_rps_record_flow+0x19/0x400 [ 1297.895572][T29818] ? __pfx_inet_sendmsg+0x10/0x10 [ 1297.895604][T29818] ? inet_sendmsg+0x2f4/0x370 [ 1297.895633][T29818] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1297.895653][T29818] ? __pfx_inet_sendmsg+0x10/0x10 [ 1297.895685][T29818] __sys_sendto+0x5de/0x710 [ 1297.895717][T29818] ? __pfx___sys_sendto+0x10/0x10 [ 1297.895741][T29818] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1297.895786][T29818] ? __fget_files+0x3a0/0x420 [ 1297.895826][T29818] ? ksys_write+0x242/0x270 [ 1297.895851][T29818] ? __pfx_ksys_write+0x10/0x10 [ 1297.895876][T29818] __x64_sys_sendto+0xde/0x100 [ 1297.895907][T29818] do_syscall_64+0x14d/0xf80 [ 1297.895936][T29818] ? trace_irq_disable+0x3b/0x150 [ 1297.895966][T29818] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1297.895985][T29818] ? clear_bhb_loop+0x40/0x90 [ 1297.896010][T29818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1297.896028][T29818] RIP: 0033:0x7fcc7a99c799 [ 1297.896047][T29818] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1297.896063][T29818] RSP: 002b:00007fcc7b8da028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1297.896084][T29818] RAX: ffffffffffffffda RBX: 00007fcc7ac15fa0 RCX: 00007fcc7a99c799 [ 1297.896097][T29818] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000003 [ 1297.896110][T29818] RBP: 00007fcc7b8da090 R08: 0000200000000100 R09: 000000000000001c [ 1297.896122][T29818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1297.896132][T29818] R13: 00007fcc7ac16038 R14: 00007fcc7ac15fa0 R15: 00007ffec84d2618 [ 1297.896164][T29818] [ 1298.320822][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1298.420530][ T5828] Bluetooth: hci1: command tx timeout [ 1298.491773][T29703] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1298.539823][T29703] veth0_vlan: entered promiscuous mode [ 1298.594454][T29703] veth1_vlan: entered promiscuous mode [ 1298.613247][T29833] FAULT_INJECTION: forcing a failure. [ 1298.613247][T29833] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1298.640364][T29833] CPU: 0 UID: 0 PID: 29833 Comm: syz.3.22127 Not tainted syzkaller #0 PREEMPT(full) [ 1298.640390][T29833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1298.640402][T29833] Call Trace: [ 1298.640410][T29833] [ 1298.640418][T29833] dump_stack_lvl+0xe8/0x150 [ 1298.640452][T29833] should_fail_ex+0x412/0x560 [ 1298.640480][T29833] _copy_from_user+0x2d/0xb0 [ 1298.640512][T29833] ___sys_sendmsg+0x1c6/0x360 [ 1298.640550][T29833] ? __pfx____sys_sendmsg+0x10/0x10 [ 1298.640617][T29833] ? __fget_files+0x2a/0x420 [ 1298.640653][T29833] ? __fget_files+0x3a0/0x420 [ 1298.640692][T29833] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1298.640726][T29833] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1298.640766][T29833] ? __pfx_ksys_write+0x10/0x10 [ 1298.640797][T29833] do_syscall_64+0x14d/0xf80 [ 1298.640827][T29833] ? trace_irq_disable+0x3b/0x150 [ 1298.640857][T29833] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1298.640875][T29833] ? clear_bhb_loop+0x40/0x90 [ 1298.640900][T29833] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1298.640917][T29833] RIP: 0033:0x7fc2f899c799 [ 1298.640936][T29833] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1298.640951][T29833] RSP: 002b:00007fc2f9860028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1298.640970][T29833] RAX: ffffffffffffffda RBX: 00007fc2f8c15fa0 RCX: 00007fc2f899c799 [ 1298.640984][T29833] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 1298.640996][T29833] RBP: 00007fc2f9860090 R08: 0000000000000000 R09: 0000000000000000 [ 1298.641006][T29833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1298.641018][T29833] R13: 00007fc2f8c16038 R14: 00007fc2f8c15fa0 R15: 00007fff233d24f8 [ 1298.641048][T29833] [ 1298.651486][T29703] veth0_macvtap: entered promiscuous mode [ 1298.850252][T29703] veth1_macvtap: entered promiscuous mode [ 1298.875752][T29703] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1298.904641][T29703] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1298.926404][ T506] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1298.953930][ T506] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1298.966017][ T506] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1298.985659][ T506] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1299.121160][T11316] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1299.144726][T11316] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1299.215628][ T1145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1299.242114][T29844] validate_nla: 2 callbacks suppressed [ 1299.242135][T29844] netlink: 'syz.0.22133': attribute type 12 has an invalid length. [ 1299.242640][ T1145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1299.248926][T29844] netlink: 'syz.0.22133': attribute type 29 has an invalid length. [ 1299.280250][T29844] netlink: 148 bytes leftover after parsing attributes in process `syz.0.22133'. [ 1299.290634][T29844] netlink: 59 bytes leftover after parsing attributes in process `syz.0.22133'. [ 1299.359246][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1299.407224][T29854] netlink: 'syz.2.22092': attribute type 12 has an invalid length. [ 1299.425650][T29854] netlink: 'syz.2.22092': attribute type 29 has an invalid length. [ 1299.434499][T29854] netlink: 148 bytes leftover after parsing attributes in process `syz.2.22092'. [ 1299.893181][T29876] netlink: 48 bytes leftover after parsing attributes in process `syz.3.22144'. [ 1299.915919][T29876] netlink: 48 bytes leftover after parsing attributes in process `syz.3.22144'. [ 1299.919291][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5300 ms [ 1299.933096][ C0] lec:lec_tx_timeout: lec0 [ 1300.233666][T29882] ip6_vti0: entered promiscuous mode [ 1300.248066][T29882] netlink: 8 bytes leftover after parsing attributes in process `syz.3.22146'. [ 1300.280885][ T1301] lec:lec_start_xmit: lec0:No lecd attached [ 1300.375738][T29880] xt_hashlimit: size too large, truncated to 1048576 [ 1300.399919][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1300.492191][ T5828] Bluetooth: hci1: command tx timeout [ 1300.519065][T29870] lo speed is unknown, defaulting to 1000 [ 1300.522439][T29887] netlink: 'syz.0.22148': attribute type 12 has an invalid length. [ 1300.606526][T29887] netlink: 'syz.0.22148': attribute type 29 has an invalid length. [ 1300.637170][T29887] netlink: 148 bytes leftover after parsing attributes in process `syz.0.22148'. [ 1300.929933][T29904] bridge0: port 2(bridge_slave_1) entered disabled state [ 1300.939409][T29904] bridge0: port 1(bridge_slave_0) entered disabled state [ 1301.218145][T29912] netlink: 48 bytes leftover after parsing attributes in process `syz.3.22155'. [ 1301.221722][T29911] netlink: 'syz.2.22154': attribute type 3 has an invalid length. [ 1301.328655][T29912] netlink: 4 bytes leftover after parsing attributes in process `syz.3.22155'. [ 1301.439438][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1301.754758][T29929] netlink: 'syz.0.22161': attribute type 12 has an invalid length. [ 1301.769476][T29929] netlink: 'syz.0.22161': attribute type 29 has an invalid length. [ 1301.788183][T29929] netlink: 148 bytes leftover after parsing attributes in process `syz.0.22161'. [ 1301.881582][T29935] netlink: 16 bytes leftover after parsing attributes in process `syz.3.22164'. [ 1301.957920][T29937] netlink: 48 bytes leftover after parsing attributes in process `syz.2.22166'. [ 1302.073321][T29942] syzkaller0: entered promiscuous mode [ 1302.078910][T29942] syzkaller0: entered allmulticast mode [ 1302.274133][T29957] netlink: 'syz.0.22175': attribute type 12 has an invalid length. [ 1302.479841][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1302.560433][ T5828] Bluetooth: hci1: command tx timeout [ 1302.672155][T29962] lo speed is unknown, defaulting to 1000 [ 1302.995972][T29967] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1303.003297][T29967] IPv6: NLM_F_CREATE should be set when creating new route [ 1303.176179][T29971] dvmrp0: entered allmulticast mode [ 1303.441166][ T2104] block nbd7: Possible stuck request ffff888026a30000: control (read@0,1024B). Runtime 63 seconds [ 1303.452179][ T2104] block nbd7: Possible stuck request ffff888026a30200: control (read@1024,1024B). Runtime 63 seconds [ 1303.463538][ T2104] block nbd7: Possible stuck request ffff888026a30400: control (read@2048,1024B). Runtime 63 seconds [ 1303.474986][ T2104] block nbd7: Possible stuck request ffff888026a30600: control (read@3072,1024B). Runtime 63 seconds [ 1303.521345][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1304.257698][T30011] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1304.265007][T30011] IPv6: NLM_F_CREATE should be set when creating new route [ 1304.497833][T30023] FAULT_INJECTION: forcing a failure. [ 1304.497833][T30023] name failslab, interval 1, probability 0, space 0, times 0 [ 1304.550482][T30023] CPU: 0 UID: 0 PID: 30023 Comm: syz.3.22194 Not tainted syzkaller #0 PREEMPT(full) [ 1304.550509][T30023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1304.550521][T30023] Call Trace: [ 1304.550529][T30023] [ 1304.550538][T30023] dump_stack_lvl+0xe8/0x150 [ 1304.550573][T30023] should_fail_ex+0x412/0x560 [ 1304.550603][T30023] should_failslab+0xa8/0x100 [ 1304.550630][T30023] __kmalloc_cache_noprof+0x88/0x660 [ 1304.550651][T30023] ? sctp_add_bind_addr+0x8c/0x370 [ 1304.550673][T30023] ? __ipv6_addr_type+0x247/0x2f0 [ 1304.550711][T30023] sctp_add_bind_addr+0x8c/0x370 [ 1304.550748][T30023] sctp_bind_addr_copy+0xb3/0x3c0 [ 1304.550772][T30023] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1304.550811][T30023] sctp_connect_new_asoc+0x2ff/0x6b0 [ 1304.550845][T30023] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1304.550877][T30023] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1304.550906][T30023] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1304.550934][T30023] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1304.550965][T30023] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1304.550988][T30023] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1304.551024][T30023] sctp_sendmsg+0x1528/0x2c10 [ 1304.551070][T30023] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1304.551102][T30023] ? aa_sk_perm+0x6d5/0x900 [ 1304.551133][T30023] ? __pfx_aa_sk_perm+0x10/0x10 [ 1304.551159][T30023] ? sock_rps_record_flow+0x19/0x400 [ 1304.551190][T30023] ? __pfx_inet_sendmsg+0x10/0x10 [ 1304.551222][T30023] ? inet_sendmsg+0x2f4/0x370 [ 1304.551252][T30023] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1304.551271][T30023] ? __pfx_inet_sendmsg+0x10/0x10 [ 1304.551304][T30023] __sys_sendto+0x5de/0x710 [ 1304.551336][T30023] ? __pfx___sys_sendto+0x10/0x10 [ 1304.551361][T30023] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1304.551408][T30023] ? __fget_files+0x3a0/0x420 [ 1304.551449][T30023] ? ksys_write+0x242/0x270 [ 1304.551471][T30023] ? __pfx_ksys_write+0x10/0x10 [ 1304.551496][T30023] __x64_sys_sendto+0xde/0x100 [ 1304.551528][T30023] do_syscall_64+0x14d/0xf80 [ 1304.551558][T30023] ? trace_irq_disable+0x3b/0x150 [ 1304.551588][T30023] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1304.551606][T30023] ? clear_bhb_loop+0x40/0x90 [ 1304.551631][T30023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1304.551650][T30023] RIP: 0033:0x7fc2f899c799 [ 1304.551668][T30023] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1304.551684][T30023] RSP: 002b:00007fc2f9860028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1304.551704][T30023] RAX: ffffffffffffffda RBX: 00007fc2f8c15fa0 RCX: 00007fc2f899c799 [ 1304.551718][T30023] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000003 [ 1304.551730][T30023] RBP: 00007fc2f9860090 R08: 0000200000000100 R09: 000000000000001c [ 1304.551749][T30023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1304.551760][T30023] R13: 00007fc2f8c16038 R14: 00007fc2f8c15fa0 R15: 00007fff233d24f8 [ 1304.551793][T30023] [ 1304.852668][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1304.891373][T29998] lo speed is unknown, defaulting to 1000 [ 1305.373844][T30048] validate_nla: 3 callbacks suppressed [ 1305.373861][T30048] netlink: 'syz.4.22200': attribute type 29 has an invalid length. [ 1305.414086][T30048] netlink: 'syz.4.22200': attribute type 29 has an invalid length. [ 1305.427207][T30048] __nla_validate_parse: 10 callbacks suppressed [ 1305.427226][T30048] netlink: 500 bytes leftover after parsing attributes in process `syz.4.22200'. [ 1305.457325][T30055] netlink: 'syz.3.22202': attribute type 11 has an invalid length. [ 1305.496629][T30055] netlink: 199828 bytes leftover after parsing attributes in process `syz.3.22202'. [ 1305.847104][T30069] netlink: 16 bytes leftover after parsing attributes in process `syz.3.22206'. [ 1305.919191][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5640 ms [ 1305.927232][ C0] lec:lec_tx_timeout: lec0 [ 1305.932086][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1305.984930][T30071] netlink: zone id is out of range [ 1306.016462][T30071] netlink: zone id is out of range [ 1306.028453][T30071] netlink: zone id is out of range [ 1306.035062][T30071] netlink: zone id is out of range [ 1306.041278][T30071] netlink: zone id is out of range [ 1306.046576][T30071] netlink: zone id is out of range [ 1306.052763][T30071] netlink: zone id is out of range [ 1306.058014][T30071] netlink: zone id is out of range [ 1306.064250][T30071] netlink: zone id is out of range [ 1306.486943][T30095] netlink: 36 bytes leftover after parsing attributes in process `syz.3.22217'. [ 1306.597154][T30101] FAULT_INJECTION: forcing a failure. [ 1306.597154][T30101] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1306.652386][T30101] CPU: 0 UID: 0 PID: 30101 Comm: syz.2.22218 Not tainted syzkaller #0 PREEMPT(full) [ 1306.652413][T30101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1306.652425][T30101] Call Trace: [ 1306.652433][T30101] [ 1306.652442][T30101] dump_stack_lvl+0xe8/0x150 [ 1306.652476][T30101] should_fail_ex+0x412/0x560 [ 1306.652505][T30101] _copy_from_iter+0x1d3/0x1670 [ 1306.652542][T30101] ? rcu_is_watching+0x15/0xb0 [ 1306.652578][T30101] ? __pfx__copy_from_iter+0x10/0x10 [ 1306.652612][T30101] ? netlink_sendmsg+0x650/0xb40 [ 1306.652636][T30101] ? skb_put+0x11b/0x210 [ 1306.652668][T30101] netlink_sendmsg+0x6c0/0xb40 [ 1306.652703][T30101] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1306.652732][T30101] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1306.652758][T30101] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1306.652781][T30101] ____sys_sendmsg+0x972/0x9f0 [ 1306.652821][T30101] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1306.652862][T30101] ? import_iovec+0x73/0xa0 [ 1306.652894][T30101] ___sys_sendmsg+0x2a5/0x360 [ 1306.652932][T30101] ? __pfx____sys_sendmsg+0x10/0x10 [ 1306.652999][T30101] ? __fget_files+0x2a/0x420 [ 1306.653027][T30101] ? __fget_files+0x3a0/0x420 [ 1306.653067][T30101] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1306.653101][T30101] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1306.653142][T30101] ? __pfx_ksys_write+0x10/0x10 [ 1306.653174][T30101] do_syscall_64+0x14d/0xf80 [ 1306.653204][T30101] ? trace_irq_disable+0x3b/0x150 [ 1306.653234][T30101] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1306.653253][T30101] ? clear_bhb_loop+0x40/0x90 [ 1306.653278][T30101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1306.653296][T30101] RIP: 0033:0x7fcd14f9c799 [ 1306.653314][T30101] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1306.653330][T30101] RSP: 002b:00007fcd15dbe028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1306.653351][T30101] RAX: ffffffffffffffda RBX: 00007fcd15215fa0 RCX: 00007fcd14f9c799 [ 1306.653364][T30101] RDX: 0000000000000000 RSI: 000020000000c2c0 RDI: 0000000000000003 [ 1306.653376][T30101] RBP: 00007fcd15dbe090 R08: 0000000000000000 R09: 0000000000000000 [ 1306.653387][T30101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1306.653399][T30101] R13: 00007fcd15216038 R14: 00007fcd15215fa0 R15: 00007ffeceea84a8 [ 1306.653433][T30101] [ 1306.939946][T30110] netlink: 'syz.3.22222': attribute type 12 has an invalid length. [ 1306.969531][T30110] netlink: 'syz.3.22222': attribute type 29 has an invalid length. [ 1307.003176][T30110] netlink: 148 bytes leftover after parsing attributes in process `syz.3.22222'. [ 1307.020103][T30110] netlink: 59 bytes leftover after parsing attributes in process `syz.3.22222'. [ 1307.300750][T30135] netlink: 24 bytes leftover after parsing attributes in process `syz.3.22231'. [ 1307.327394][T30137] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1307.334864][T30137] IPv6: NLM_F_CREATE should be set when creating new route [ 1307.432677][T30141] netlink: 12 bytes leftover after parsing attributes in process `syz.2.22235'. [ 1307.792022][T30125] lo speed is unknown, defaulting to 1000 [ 1307.876504][T30156] syzkaller0: entered promiscuous mode [ 1307.883205][T30156] syzkaller0: entered allmulticast mode [ 1307.962260][T30168] netlink: 212324 bytes leftover after parsing attributes in process `syz.3.22244'. [ 1308.452942][T30183] netlink: 27 bytes leftover after parsing attributes in process `syz.3.22246'. [ 1310.156293][ T5191] udevd[5191]: worker [20209] /devices/virtual/block/nbd7 is taking a long time [ 1310.683561][T30195] netlink: 28 bytes leftover after parsing attributes in process `syz.4.22251'. [ 1310.800014][T30198] netlink: 'syz.2.22252': attribute type 12 has an invalid length. [ 1310.810624][T30198] netlink: 'syz.2.22252': attribute type 29 has an invalid length. [ 1310.822685][T30198] netlink: 148 bytes leftover after parsing attributes in process `syz.2.22252'. [ 1310.866294][T30195] bridge0: port 2(bridge_slave_1) entered disabled state [ 1310.873987][T30195] bridge0: port 1(bridge_slave_0) entered disabled state [ 1310.950975][T30208] FAULT_INJECTION: forcing a failure. [ 1310.950975][T30208] name failslab, interval 1, probability 0, space 0, times 0 [ 1310.993537][T30208] CPU: 0 UID: 0 PID: 30208 Comm: syz.3.22255 Not tainted syzkaller #0 PREEMPT(full) [ 1310.993566][T30208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1310.993577][T30208] Call Trace: [ 1310.993585][T30208] [ 1310.993593][T30208] dump_stack_lvl+0xe8/0x150 [ 1310.993628][T30208] should_fail_ex+0x412/0x560 [ 1310.993657][T30208] should_failslab+0xa8/0x100 [ 1310.993684][T30208] __kmalloc_noprof+0xe8/0x760 [ 1310.993704][T30208] ? fib6_info_alloc+0x30/0xf0 [ 1310.993733][T30208] fib6_info_alloc+0x30/0xf0 [ 1310.993756][T30208] ip6_route_info_create+0x142/0x860 [ 1310.993791][T30208] ip6_route_add+0x49/0x1b0 [ 1310.993820][T30208] inet6_rtm_newroute+0x268/0x19e0 [ 1310.993850][T30208] ? kasan_quarantine_put+0xbb/0x1f0 [ 1310.993868][T30208] ? lockdep_hardirqs_on+0x7a/0x110 [ 1310.993909][T30208] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 1310.993929][T30208] ? kmem_cache_free+0x187/0x630 [ 1310.993949][T30208] ? nlmon_xmit+0xb0/0x100 [ 1310.993991][T30208] ? __lock_acquire+0x6b5/0x2cf0 [ 1310.994023][T30208] ? __local_bh_enable_ip+0xd0/0x130 [ 1310.994049][T30208] ? lockdep_hardirqs_on+0x7a/0x110 [ 1310.994128][T30208] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 1310.994149][T30208] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 1310.994179][T30208] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1310.994204][T30208] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1310.994228][T30208] ? ref_tracker_free+0x693/0x840 [ 1310.994251][T30208] ? __copy_skb_header+0xa3/0x4a0 [ 1310.994284][T30208] ? __pfx_ref_tracker_free+0x10/0x10 [ 1310.994319][T30208] netlink_rcv_skb+0x232/0x4b0 [ 1310.994345][T30208] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1310.994370][T30208] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1310.994402][T30208] ? netlink_deliver_tap+0x2e/0x1b0 [ 1310.994429][T30208] netlink_unicast+0x80f/0x9b0 [ 1310.994454][T30208] ? __pfx_netlink_unicast+0x10/0x10 [ 1310.994475][T30208] ? netlink_sendmsg+0x650/0xb40 [ 1310.994496][T30208] ? skb_put+0x11b/0x210 [ 1310.994525][T30208] netlink_sendmsg+0x813/0xb40 [ 1310.994559][T30208] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1310.994588][T30208] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1310.994614][T30208] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1310.994637][T30208] ____sys_sendmsg+0x972/0x9f0 [ 1310.994677][T30208] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1310.994718][T30208] ? import_iovec+0x73/0xa0 [ 1310.994751][T30208] ___sys_sendmsg+0x2a5/0x360 [ 1310.994788][T30208] ? __pfx____sys_sendmsg+0x10/0x10 [ 1310.994854][T30208] ? __fget_files+0x2a/0x420 [ 1310.994882][T30208] ? __fget_files+0x3a0/0x420 [ 1310.994930][T30208] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1310.994964][T30208] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1310.995005][T30208] ? __pfx_ksys_write+0x10/0x10 [ 1310.995036][T30208] do_syscall_64+0x14d/0xf80 [ 1310.995066][T30208] ? trace_irq_disable+0x3b/0x150 [ 1310.995095][T30208] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1310.995114][T30208] ? clear_bhb_loop+0x40/0x90 [ 1310.995138][T30208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1310.995157][T30208] RIP: 0033:0x7fc2f899c799 [ 1310.995175][T30208] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1310.995189][T30208] RSP: 002b:00007fc2f9860028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1310.995210][T30208] RAX: ffffffffffffffda RBX: 00007fc2f8c15fa0 RCX: 00007fc2f899c799 [ 1310.995224][T30208] RDX: 0000000000000010 RSI: 0000200000000680 RDI: 0000000000000004 [ 1310.995235][T30208] RBP: 00007fc2f9860090 R08: 0000000000000000 R09: 0000000000000000 [ 1310.995246][T30208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1310.995258][T30208] R13: 00007fc2f8c16038 R14: 00007fc2f8c15fa0 R15: 00007fff233d24f8 [ 1310.995288][T30208] [ 1311.358783][ C0] net_ratelimit: 8 callbacks suppressed [ 1311.358805][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1311.886550][T30224] syzkaller0: entered promiscuous mode [ 1311.893107][T30224] syzkaller0: entered allmulticast mode [ 1312.400773][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1312.491322][ T2104] block nbd7: Possible stuck request ffff888026a30000: control (read@0,1024B). Runtime 72 seconds [ 1312.502450][ T2104] block nbd7: Possible stuck request ffff888026a30200: control (read@1024,1024B). Runtime 72 seconds [ 1312.513689][ T2104] block nbd7: Possible stuck request ffff888026a30400: control (read@2048,1024B). Runtime 72 seconds [ 1312.525924][ T2104] block nbd7: Possible stuck request ffff888026a30600: control (read@3072,1024B). Runtime 72 seconds [ 1313.444768][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1314.480600][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1314.676501][T30263] netlink: 48 bytes leftover after parsing attributes in process `syz.1.22277'. [ 1314.700319][T30263] netlink: 48 bytes leftover after parsing attributes in process `syz.1.22277'. [ 1314.797613][T30267] netlink: 8 bytes leftover after parsing attributes in process `syz.3.22279'. [ 1314.840522][T30267] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 1314.872051][T30267] netlink: 148 bytes leftover after parsing attributes in process `syz.3.22279'. [ 1314.909804][T30284] netlink: 24 bytes leftover after parsing attributes in process `syz.4.22284'. [ 1314.919353][T30284] netlink: 24 bytes leftover after parsing attributes in process `syz.4.22284'. [ 1315.174554][T30300] xt_hashlimit: size too large, truncated to 1048576 [ 1315.519598][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1315.567212][T30267] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1315.761799][T30310] netlink: 48 bytes leftover after parsing attributes in process `syz.3.22292'. [ 1315.798027][T30307] syzkaller0: entered promiscuous mode [ 1315.805476][T30307] syzkaller0: entered allmulticast mode [ 1315.825668][T30310] netlink: 4 bytes leftover after parsing attributes in process `syz.3.22292'. [ 1315.937396][T30318] netlink: 24 bytes leftover after parsing attributes in process `syz.3.22295'. [ 1315.948090][T30318] netlink: 24 bytes leftover after parsing attributes in process `syz.3.22295'. [ 1316.193462][T30329] netlink: 'syz.0.22298': attribute type 12 has an invalid length. [ 1316.245925][T30329] netlink: 'syz.0.22298': attribute type 29 has an invalid length. [ 1316.282252][T30329] netlink: 148 bytes leftover after parsing attributes in process `syz.0.22298'. [ 1316.293166][T30329] netlink: 7 bytes leftover after parsing attributes in process `syz.0.22298'. [ 1316.565052][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1317.604232][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1318.640407][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1319.014160][T30371] FAULT_INJECTION: forcing a failure. [ 1319.014160][T30371] name failslab, interval 1, probability 0, space 0, times 0 [ 1319.027788][T30371] CPU: 1 UID: 0 PID: 30371 Comm: syz.3.22307 Not tainted syzkaller #0 PREEMPT(full) [ 1319.027813][T30371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1319.027824][T30371] Call Trace: [ 1319.027831][T30371] [ 1319.027838][T30371] dump_stack_lvl+0xe8/0x150 [ 1319.027872][T30371] should_fail_ex+0x412/0x560 [ 1319.027898][T30371] should_failslab+0xa8/0x100 [ 1319.027922][T30371] __kmalloc_cache_noprof+0x88/0x660 [ 1319.027941][T30371] ? sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 1319.027962][T30371] ? __genradix_ptr+0x1e1/0x220 [ 1319.027995][T30371] sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 1319.028028][T30371] sctp_association_new+0x15d3/0x25e0 [ 1319.028072][T30371] sctp_connect_new_asoc+0x2e4/0x6b0 [ 1319.028105][T30371] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1319.028135][T30371] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1319.028174][T30371] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1319.028202][T30371] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1319.028231][T30371] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1319.028254][T30371] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1319.028289][T30371] sctp_sendmsg+0x1528/0x2c10 [ 1319.028329][T30371] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1319.028361][T30371] ? aa_sk_perm+0x6d5/0x900 [ 1319.028390][T30371] ? __pfx_aa_sk_perm+0x10/0x10 [ 1319.028414][T30371] ? sock_rps_record_flow+0x19/0x400 [ 1319.028450][T30371] ? inet_sendmsg+0x2f4/0x370 [ 1319.028481][T30371] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1319.028504][T30371] ____sys_sendmsg+0x80a/0x9f0 [ 1319.028544][T30371] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1319.028585][T30371] ? import_iovec+0x73/0xa0 [ 1319.028617][T30371] ___sys_sendmsg+0x2a5/0x360 [ 1319.028655][T30371] ? __pfx____sys_sendmsg+0x10/0x10 [ 1319.028720][T30371] ? __fget_files+0x2a/0x420 [ 1319.028749][T30371] ? __fget_files+0x3a0/0x420 [ 1319.028789][T30371] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1319.028823][T30371] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1319.028865][T30371] ? __pfx_ksys_write+0x10/0x10 [ 1319.028897][T30371] do_syscall_64+0x14d/0xf80 [ 1319.028927][T30371] ? trace_irq_disable+0x3b/0x150 [ 1319.028957][T30371] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1319.028976][T30371] ? clear_bhb_loop+0x40/0x90 [ 1319.029001][T30371] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1319.029019][T30371] RIP: 0033:0x7fc2f899c799 [ 1319.029038][T30371] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1319.029055][T30371] RSP: 002b:00007fc2f9860028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1319.029076][T30371] RAX: ffffffffffffffda RBX: 00007fc2f8c15fa0 RCX: 00007fc2f899c799 [ 1319.029089][T30371] RDX: 0000000000000001 RSI: 0000200000000700 RDI: 0000000000000003 [ 1319.029101][T30371] RBP: 00007fc2f9860090 R08: 0000000000000000 R09: 0000000000000000 [ 1319.029113][T30371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1319.029124][T30371] R13: 00007fc2f8c16038 R14: 00007fc2f8c15fa0 R15: 00007fff233d24f8 [ 1319.029155][T30371] [ 1319.443434][T30380] netlink: 'syz.0.22311': attribute type 12 has an invalid length. [ 1319.455591][T30380] netlink: 'syz.0.22311': attribute type 29 has an invalid length. [ 1319.466217][T30380] netlink: 148 bytes leftover after parsing attributes in process `syz.0.22311'. [ 1319.473908][T30383] netlink: 'syz.2.22312': attribute type 13 has an invalid length. [ 1319.475926][T30380] netlink: 7 bytes leftover after parsing attributes in process `syz.0.22311'. [ 1319.495290][T30382] netlink: 20 bytes leftover after parsing attributes in process `syz.3.22310'. [ 1319.517139][T30383] veth0_macvtap: left promiscuous mode [ 1319.541443][T30383] macvtap0: entered allmulticast mode [ 1319.576247][T30383] macvtap0: refused to change device tx_queue_len [ 1319.642093][T30391] netlink: 28 bytes leftover after parsing attributes in process `syz.4.22314'. [ 1319.679918][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1319.908341][T30400] syzkaller0: entered promiscuous mode [ 1319.915300][T30400] syzkaller0: entered allmulticast mode [ 1320.134165][T30417] netlink: 'syz.2.22325': attribute type 12 has an invalid length. [ 1320.142641][T30417] netlink: 'syz.2.22325': attribute type 29 has an invalid length. [ 1320.373624][T30430] netlink: 'syz.3.22327': attribute type 165 has an invalid length. [ 1320.720330][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1321.362752][ T2088] block nbd6: Possible stuck request ffff8880269d8000: control (read@0,4096B). Runtime 300 seconds [ 1321.374375][ T2104] block nbd5: Possible stuck request ffff8880269a8000: control (read@0,4096B). Runtime 300 seconds [ 1321.534911][ T2104] block nbd7: Possible stuck request ffff888026a30000: control (read@0,1024B). Runtime 81 seconds [ 1321.546237][ T2104] block nbd7: Possible stuck request ffff888026a30200: control (read@1024,1024B). Runtime 81 seconds [ 1321.558022][ T2104] block nbd7: Possible stuck request ffff888026a30400: control (read@2048,1024B). Runtime 81 seconds [ 1321.569734][ T2104] block nbd7: Possible stuck request ffff888026a30600: control (read@3072,1024B). Runtime 81 seconds [ 1321.759808][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1322.800415][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1323.043372][T30448] sctp: [Deprecated]: syz.1.22333 (pid 30448) Use of int in max_burst socket option. [ 1323.043372][T30448] Use struct sctp_assoc_value instead [ 1323.065637][T30452] Bluetooth: MGMT ver 1.23 [ 1323.181540][T30461] netlink: 'syz.2.22339': attribute type 12 has an invalid length. [ 1323.204098][T30461] netlink: 'syz.2.22339': attribute type 29 has an invalid length. [ 1323.215671][T30461] __nla_validate_parse: 7 callbacks suppressed [ 1323.215688][T30461] netlink: 148 bytes leftover after parsing attributes in process `syz.2.22339'. [ 1323.233111][T30461] netlink: 7 bytes leftover after parsing attributes in process `syz.2.22339'. [ 1323.283811][T30462] syzkaller0: entered promiscuous mode [ 1323.303057][T30462] syzkaller0: entered allmulticast mode [ 1323.327380][T30462] FAULT_INJECTION: forcing a failure. [ 1323.327380][T30462] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1323.347028][T30462] CPU: 1 UID: 0 PID: 30462 Comm: syz.3.22338 Not tainted syzkaller #0 PREEMPT(full) [ 1323.347058][T30462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1323.347069][T30462] Call Trace: [ 1323.347076][T30462] [ 1323.347084][T30462] dump_stack_lvl+0xe8/0x150 [ 1323.347117][T30462] should_fail_ex+0x412/0x560 [ 1323.347144][T30462] _copy_to_user+0x31/0xb0 [ 1323.347175][T30462] simple_read_from_buffer+0xe1/0x170 [ 1323.347205][T30462] proc_fail_nth_read+0x1bb/0x230 [ 1323.347236][T30462] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1323.347275][T30462] ? rw_verify_area+0x2a6/0x4d0 [ 1323.347292][T30462] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1323.347321][T30462] vfs_read+0x20c/0xa70 [ 1323.347337][T30462] ? fdget_pos+0x246/0x320 [ 1323.347370][T30462] ? __pfx___mutex_lock+0x10/0x10 [ 1323.347401][T30462] ? __pfx_vfs_read+0x10/0x10 [ 1323.347420][T30462] ? __fget_files+0x2a/0x420 [ 1323.347451][T30462] ? __fget_files+0x3a0/0x420 [ 1323.347476][T30462] ? __fget_files+0x2a/0x420 [ 1323.347514][T30462] ksys_read+0x150/0x270 [ 1323.347534][T30462] ? __pfx_ksys_read+0x10/0x10 [ 1323.347564][T30462] do_syscall_64+0x14d/0xf80 [ 1323.347594][T30462] ? trace_irq_disable+0x3b/0x150 [ 1323.347624][T30462] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1323.347641][T30462] ? clear_bhb_loop+0x40/0x90 [ 1323.347664][T30462] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1323.347682][T30462] RIP: 0033:0x7fc2f895cfce [ 1323.347699][T30462] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1323.347714][T30462] RSP: 002b:00007fc2f985ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1323.347733][T30462] RAX: ffffffffffffffda RBX: 00007fc2f98606c0 RCX: 00007fc2f895cfce [ 1323.347747][T30462] RDX: 000000000000000f RSI: 00007fc2f98600a0 RDI: 0000000000000008 [ 1323.347758][T30462] RBP: 00007fc2f9860090 R08: 0000000000000000 R09: 0000000000000000 [ 1323.347768][T30462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1323.347778][T30462] R13: 00007fc2f8c16038 R14: 00007fc2f8c15fa0 R15: 00007fff233d24f8 [ 1323.347808][T30462] [ 1323.372286][T30469] syzkaller0: entered promiscuous mode [ 1323.582322][T30469] syzkaller0: entered allmulticast mode [ 1323.651258][T30467] syzkaller1: entered promiscuous mode [ 1323.656778][T30467] syzkaller1: entered allmulticast mode [ 1323.701912][T30477] netlink: 28 bytes leftover after parsing attributes in process `syz.2.22344'. [ 1323.711888][T30477] netlink: 52 bytes leftover after parsing attributes in process `syz.2.22344'. [ 1323.839724][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1323.961578][T30494] netlink: 128 bytes leftover after parsing attributes in process `syz.3.22348'. [ 1323.981200][T30494] netlink: 128 bytes leftover after parsing attributes in process `syz.3.22348'. [ 1324.108634][T30500] netlink: 8 bytes leftover after parsing attributes in process `syz.1.22350'. [ 1324.143218][T30504] netlink: 256 bytes leftover after parsing attributes in process `syz.3.22352'. [ 1324.211330][T30504] netlink: 20 bytes leftover after parsing attributes in process `syz.3.22352'. [ 1324.230735][T30504] netlink: 120 bytes leftover after parsing attributes in process `syz.3.22352'. [ 1324.357232][T30475] lo speed is unknown, defaulting to 1000 [ 1324.439662][T30516] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1324.742913][T30532] FAULT_INJECTION: forcing a failure. [ 1324.742913][T30532] name failslab, interval 1, probability 0, space 0, times 0 [ 1324.756685][T30532] CPU: 0 UID: 0 PID: 30532 Comm: syz.2.22362 Not tainted syzkaller #0 PREEMPT(full) [ 1324.756711][T30532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1324.756722][T30532] Call Trace: [ 1324.756730][T30532] [ 1324.756738][T30532] dump_stack_lvl+0xe8/0x150 [ 1324.756773][T30532] should_fail_ex+0x412/0x560 [ 1324.756802][T30532] should_failslab+0xa8/0x100 [ 1324.756911][T30532] ? skb_clone+0x212/0x3a0 [ 1324.756946][T30532] kmem_cache_alloc_noprof+0x87/0x650 [ 1324.756979][T30532] ? __netlink_lookup+0xc6/0x8b0 [ 1324.757014][T30532] skb_clone+0x212/0x3a0 [ 1324.757047][T30532] __netlink_deliver_tap+0x404/0x850 [ 1324.757081][T30532] ? netlink_deliver_tap+0x2e/0x1b0 [ 1324.757106][T30532] netlink_deliver_tap+0x19c/0x1b0 [ 1324.757129][T30532] netlink_unicast+0x7e3/0x9b0 [ 1324.757152][T30532] ? __pfx_netlink_unicast+0x10/0x10 [ 1324.757170][T30532] ? netlink_sendmsg+0x650/0xb40 [ 1324.757189][T30532] ? skb_put+0x11b/0x210 [ 1324.757215][T30532] netlink_sendmsg+0x813/0xb40 [ 1324.757248][T30532] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1324.757276][T30532] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1324.757302][T30532] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1324.757327][T30532] ____sys_sendmsg+0x972/0x9f0 [ 1324.757370][T30532] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1324.757414][T30532] ? import_iovec+0x73/0xa0 [ 1324.757448][T30532] ___sys_sendmsg+0x2a5/0x360 [ 1324.757487][T30532] ? __pfx____sys_sendmsg+0x10/0x10 [ 1324.757554][T30532] ? __fget_files+0x2a/0x420 [ 1324.757601][T30532] ? __fget_files+0x3a0/0x420 [ 1324.757641][T30532] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1324.757676][T30532] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1324.757717][T30532] ? __pfx_ksys_write+0x10/0x10 [ 1324.757751][T30532] do_syscall_64+0x14d/0xf80 [ 1324.757785][T30532] ? trace_irq_disable+0x3b/0x150 [ 1324.757815][T30532] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1324.757834][T30532] ? clear_bhb_loop+0x40/0x90 [ 1324.757857][T30532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1324.757875][T30532] RIP: 0033:0x7fcd14f9c799 [ 1324.757894][T30532] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1324.757909][T30532] RSP: 002b:00007fcd15dbe028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1324.757929][T30532] RAX: ffffffffffffffda RBX: 00007fcd15215fa0 RCX: 00007fcd14f9c799 [ 1324.757943][T30532] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 1324.757955][T30532] RBP: 00007fcd15dbe090 R08: 0000000000000000 R09: 0000000000000000 [ 1324.757967][T30532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1324.757978][T30532] R13: 00007fcd15216038 R14: 00007fcd15215fa0 R15: 00007ffeceea84a8 [ 1324.758010][T30532] [ 1325.027713][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1325.162135][T30539] FAULT_INJECTION: forcing a failure. [ 1325.162135][T30539] name failslab, interval 1, probability 0, space 0, times 0 [ 1325.176309][T30539] CPU: 0 UID: 0 PID: 30539 Comm: syz.1.22364 Not tainted syzkaller #0 PREEMPT(full) [ 1325.176335][T30539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1325.176347][T30539] Call Trace: [ 1325.176354][T30539] [ 1325.176362][T30539] dump_stack_lvl+0xe8/0x150 [ 1325.176397][T30539] should_fail_ex+0x412/0x560 [ 1325.176425][T30539] should_failslab+0xa8/0x100 [ 1325.176450][T30539] __kmalloc_cache_noprof+0x88/0x660 [ 1325.176472][T30539] ? tcf_proto_create+0x65/0x330 [ 1325.176614][T30539] tcf_proto_create+0x65/0x330 [ 1325.176651][T30539] tc_new_tfilter+0x12ff/0x1780 [ 1325.176707][T30539] ? __pfx_tc_new_tfilter+0x10/0x10 [ 1325.176771][T30539] ? __pfx_tc_new_tfilter+0x10/0x10 [ 1325.176800][T30539] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 1325.176830][T30539] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1325.176855][T30539] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1325.176878][T30539] ? ref_tracker_free+0x693/0x840 [ 1325.176901][T30539] ? __copy_skb_header+0xa3/0x4a0 [ 1325.176942][T30539] ? __pfx_ref_tracker_free+0x10/0x10 [ 1325.176978][T30539] netlink_rcv_skb+0x232/0x4b0 [ 1325.177004][T30539] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1325.177031][T30539] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1325.177067][T30539] ? netlink_deliver_tap+0x2e/0x1b0 [ 1325.177099][T30539] netlink_unicast+0x80f/0x9b0 [ 1325.177130][T30539] ? __pfx_netlink_unicast+0x10/0x10 [ 1325.177153][T30539] ? netlink_sendmsg+0x650/0xb40 [ 1325.177180][T30539] ? skb_put+0x11b/0x210 [ 1325.177212][T30539] netlink_sendmsg+0x813/0xb40 [ 1325.177247][T30539] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1325.177277][T30539] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1325.177303][T30539] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1325.177327][T30539] ____sys_sendmsg+0x972/0x9f0 [ 1325.177368][T30539] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1325.177408][T30539] ? import_iovec+0x73/0xa0 [ 1325.177441][T30539] ___sys_sendmsg+0x2a5/0x360 [ 1325.177478][T30539] ? __pfx____sys_sendmsg+0x10/0x10 [ 1325.177547][T30539] ? __fget_files+0x2a/0x420 [ 1325.177576][T30539] ? __fget_files+0x3a0/0x420 [ 1325.177617][T30539] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1325.177650][T30539] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1325.177691][T30539] ? __pfx_ksys_write+0x10/0x10 [ 1325.177722][T30539] do_syscall_64+0x14d/0xf80 [ 1325.177754][T30539] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1325.177772][T30539] ? clear_bhb_loop+0x40/0x90 [ 1325.177797][T30539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1325.177815][T30539] RIP: 0033:0x7fefeb99c799 [ 1325.177834][T30539] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1325.177849][T30539] RSP: 002b:00007fefec8a7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1325.177870][T30539] RAX: ffffffffffffffda RBX: 00007fefebc15fa0 RCX: 00007fefeb99c799 [ 1325.177883][T30539] RDX: 0000000020000800 RSI: 0000200000000900 RDI: 0000000000000008 [ 1325.177896][T30539] RBP: 00007fefec8a7090 R08: 0000000000000000 R09: 0000000000000000 [ 1325.177907][T30539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1325.177918][T30539] R13: 00007fefebc16038 R14: 00007fefebc15fa0 R15: 00007ffe3e6e2ae8 [ 1325.177957][T30539] [ 1325.706029][T30545] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1326.044383][T30558] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1326.083568][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1326.378784][T30576] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1326.419921][T30575] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1326.567986][T30575] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1326.652486][T30582] ip6tnl0: entered promiscuous mode [ 1326.947889][T30598] ip6tnl1: entered allmulticast mode [ 1327.121136][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1327.298502][T30619] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1327.352927][T30623] FAULT_INJECTION: forcing a failure. [ 1327.352927][T30623] name failslab, interval 1, probability 0, space 0, times 0 [ 1327.389855][T30623] CPU: 0 UID: 0 PID: 30623 Comm: syz.3.22396 Not tainted syzkaller #0 PREEMPT(full) [ 1327.389881][T30623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1327.389893][T30623] Call Trace: [ 1327.389900][T30623] [ 1327.389909][T30623] dump_stack_lvl+0xe8/0x150 [ 1327.389942][T30623] should_fail_ex+0x412/0x560 [ 1327.389970][T30623] should_failslab+0xa8/0x100 [ 1327.389996][T30623] __kmalloc_cache_noprof+0x88/0x660 [ 1327.390014][T30623] ? __pfx_stack_trace_save+0x10/0x10 [ 1327.390034][T30623] ? rtnl_newlink+0x136/0x1be0 [ 1327.390065][T30623] rtnl_newlink+0x136/0x1be0 [ 1327.390091][T30623] ? kasan_save_track+0x4f/0x80 [ 1327.390109][T30623] ? kasan_save_track+0x3e/0x80 [ 1327.390125][T30623] ? kasan_save_free_info+0x46/0x50 [ 1327.390152][T30623] ? __kasan_slab_free+0x5c/0x80 [ 1327.390169][T30623] ? kmem_cache_free+0x187/0x630 [ 1327.390189][T30623] ? __dev_queue_xmit+0x16d1/0x3890 [ 1327.390206][T30623] ? __netlink_deliver_tap+0x5ad/0x850 [ 1327.390229][T30623] ? netlink_deliver_tap+0x19c/0x1b0 [ 1327.390251][T30623] ? netlink_unicast+0x7e3/0x9b0 [ 1327.390268][T30623] ? netlink_sendmsg+0x813/0xb40 [ 1327.390294][T30623] ? __pfx_rtnl_newlink+0x10/0x10 [ 1327.390316][T30623] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1327.390370][T30623] ? kasan_quarantine_put+0xbb/0x1f0 [ 1327.390387][T30623] ? lockdep_hardirqs_on+0x7a/0x110 [ 1327.390422][T30623] ? kmem_cache_free+0x187/0x630 [ 1327.390440][T30623] ? nlmon_xmit+0xb0/0x100 [ 1327.390483][T30623] ? __lock_acquire+0x6b5/0x2cf0 [ 1327.390514][T30623] ? __local_bh_enable_ip+0xd0/0x130 [ 1327.390541][T30623] ? lockdep_hardirqs_on+0x7a/0x110 [ 1327.390569][T30623] ? __dev_queue_xmit+0x277/0x3890 [ 1327.390585][T30623] ? __local_bh_enable_ip+0xd0/0x130 [ 1327.390609][T30623] ? __dev_queue_xmit+0x277/0x3890 [ 1327.390651][T30623] ? __pfx_rtnl_newlink+0x10/0x10 [ 1327.390676][T30623] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 1327.390703][T30623] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1327.390728][T30623] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1327.390750][T30623] ? ref_tracker_free+0x693/0x840 [ 1327.390773][T30623] ? __copy_skb_header+0xa3/0x4a0 [ 1327.390807][T30623] ? __pfx_ref_tracker_free+0x10/0x10 [ 1327.390847][T30623] netlink_rcv_skb+0x232/0x4b0 [ 1327.390872][T30623] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1327.390899][T30623] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1327.390934][T30623] ? netlink_deliver_tap+0x2e/0x1b0 [ 1327.390966][T30623] netlink_unicast+0x80f/0x9b0 [ 1327.390995][T30623] ? __pfx_netlink_unicast+0x10/0x10 [ 1327.391018][T30623] ? netlink_sendmsg+0x650/0xb40 [ 1327.391041][T30623] ? skb_put+0x11b/0x210 [ 1327.391072][T30623] netlink_sendmsg+0x813/0xb40 [ 1327.391104][T30623] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1327.391129][T30623] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1327.391153][T30623] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1327.391177][T30623] ____sys_sendmsg+0x972/0x9f0 [ 1327.391217][T30623] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1327.391256][T30623] ? import_iovec+0x73/0xa0 [ 1327.391290][T30623] ___sys_sendmsg+0x2a5/0x360 [ 1327.391327][T30623] ? __pfx____sys_sendmsg+0x10/0x10 [ 1327.391393][T30623] ? __fget_files+0x2a/0x420 [ 1327.391421][T30623] ? __fget_files+0x3a0/0x420 [ 1327.391460][T30623] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1327.391494][T30623] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1327.391534][T30623] ? __pfx_ksys_write+0x10/0x10 [ 1327.391566][T30623] do_syscall_64+0x14d/0xf80 [ 1327.391596][T30623] ? trace_irq_disable+0x3b/0x150 [ 1327.391625][T30623] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1327.391643][T30623] ? clear_bhb_loop+0x40/0x90 [ 1327.391668][T30623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1327.391686][T30623] RIP: 0033:0x7fc2f899c799 [ 1327.391704][T30623] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1327.391720][T30623] RSP: 002b:00007fc2f983f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1327.391741][T30623] RAX: ffffffffffffffda RBX: 00007fc2f8c16090 RCX: 00007fc2f899c799 [ 1327.391754][T30623] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000003 [ 1327.391766][T30623] RBP: 00007fc2f983f090 R08: 0000000000000000 R09: 0000000000000000 [ 1327.391778][T30623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1327.391789][T30623] R13: 00007fc2f8c16128 R14: 00007fc2f8c16090 R15: 00007fff233d24f8 [ 1327.391819][T30623] [ 1327.833661][T30629] ip6_vti0: entered promiscuous mode [ 1327.882895][T30629] xt_hashlimit: size too large, truncated to 1048576 [ 1328.160411][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1328.457744][T30665] __nla_validate_parse: 16 callbacks suppressed [ 1328.457766][T30665] netlink: 16 bytes leftover after parsing attributes in process `syz.1.22408'. [ 1328.477404][T30665] netlink: 13 bytes leftover after parsing attributes in process `syz.1.22408'. [ 1328.681018][T30665] veth5: entered promiscuous mode [ 1328.997841][T30683] netlink: 28 bytes leftover after parsing attributes in process `syz.1.22410'. [ 1329.008013][T30683] netlink: 44 bytes leftover after parsing attributes in process `syz.1.22410'. [ 1329.010750][T30678] netlink: 28 bytes leftover after parsing attributes in process `syz.4.22412'. [ 1329.028858][T30684] netlink: 20 bytes leftover after parsing attributes in process `syz.3.22413'. [ 1329.200457][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1329.255000][T30702] ip6_vti0: entered promiscuous mode [ 1329.271675][T30702] netlink: 8 bytes leftover after parsing attributes in process `syz.1.22417'. [ 1329.282949][T30695] netlink: 28 bytes leftover after parsing attributes in process `syz.4.22416'. [ 1329.300000][T30695] netlink: 12 bytes leftover after parsing attributes in process `syz.4.22416'. [ 1329.407885][T30702] xt_hashlimit: size too large, truncated to 1048576 [ 1329.847779][T30735] netlink: 28 bytes leftover after parsing attributes in process `syz.0.22425'. [ 1329.940124][T30742] FAULT_INJECTION: forcing a failure. [ 1329.940124][T30742] name failslab, interval 1, probability 0, space 0, times 0 [ 1329.954645][T30742] CPU: 1 UID: 0 PID: 30742 Comm: syz.0.22428 Not tainted syzkaller #0 PREEMPT(full) [ 1329.954671][T30742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1329.954681][T30742] Call Trace: [ 1329.954688][T30742] [ 1329.954696][T30742] dump_stack_lvl+0xe8/0x150 [ 1329.954730][T30742] should_fail_ex+0x412/0x560 [ 1329.954758][T30742] should_failslab+0xa8/0x100 [ 1329.954781][T30742] ? skb_clone+0x212/0x3a0 [ 1329.954810][T30742] kmem_cache_alloc_noprof+0x87/0x650 [ 1329.954841][T30742] ? __netlink_lookup+0xc6/0x8b0 [ 1329.954873][T30742] skb_clone+0x212/0x3a0 [ 1329.954904][T30742] __netlink_deliver_tap+0x404/0x850 [ 1329.954938][T30742] ? netlink_deliver_tap+0x2e/0x1b0 [ 1329.954963][T30742] netlink_deliver_tap+0x19c/0x1b0 [ 1329.954987][T30742] netlink_unicast+0x7e3/0x9b0 [ 1329.955015][T30742] ? __pfx_netlink_unicast+0x10/0x10 [ 1329.955036][T30742] ? netlink_sendmsg+0x650/0xb40 [ 1329.955057][T30742] ? skb_put+0x11b/0x210 [ 1329.955097][T30742] netlink_sendmsg+0x813/0xb40 [ 1329.955127][T30742] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1329.955154][T30742] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1329.955178][T30742] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1329.955201][T30742] ____sys_sendmsg+0x972/0x9f0 [ 1329.955229][T30742] ? __lock_acquire+0x6b5/0x2cf0 [ 1329.955263][T30742] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1329.955301][T30742] ? import_iovec+0x73/0xa0 [ 1329.955334][T30742] ___sys_sendmsg+0x2a5/0x360 [ 1329.955369][T30742] ? __pfx____sys_sendmsg+0x10/0x10 [ 1329.955403][T30742] ? kstrtouint+0x6e/0xe0 [ 1329.955452][T30742] ? __fget_files+0x2a/0x420 [ 1329.955480][T30742] ? __fget_files+0x3a0/0x420 [ 1329.955519][T30742] __sys_sendmmsg+0x27c/0x4e0 [ 1329.955556][T30742] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1329.955584][T30742] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1329.955643][T30742] ? ksys_write+0x242/0x270 [ 1329.955666][T30742] ? __pfx_ksys_write+0x10/0x10 [ 1329.955692][T30742] __x64_sys_sendmmsg+0xa0/0xc0 [ 1329.955726][T30742] do_syscall_64+0x14d/0xf80 [ 1329.955755][T30742] ? trace_irq_disable+0x3b/0x150 [ 1329.955785][T30742] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1329.955803][T30742] ? clear_bhb_loop+0x40/0x90 [ 1329.955827][T30742] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1329.955843][T30742] RIP: 0033:0x7f632699c799 [ 1329.955862][T30742] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1329.955878][T30742] RSP: 002b:00007f632777d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1329.955897][T30742] RAX: ffffffffffffffda RBX: 00007f6326c15fa0 RCX: 00007f632699c799 [ 1329.955911][T30742] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004 [ 1329.955921][T30742] RBP: 00007f632777d090 R08: 0000000000000000 R09: 0000000000000000 [ 1329.955932][T30742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1329.955942][T30742] R13: 00007f6326c16038 R14: 00007f6326c15fa0 R15: 00007ffe6f48b048 [ 1329.955975][T30742] [ 1329.956703][T30742] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1329.996644][T30747] nft_compat: unsupported protocol 0 [ 1330.001041][T30742] IPv6: NLM_F_CREATE should be set when creating new route [ 1330.246251][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1330.559844][ T2104] block nbd7: Possible stuck request ffff888026a30000: control (read@0,1024B). Runtime 90 seconds [ 1330.570791][ T2104] block nbd7: Possible stuck request ffff888026a30200: control (read@1024,1024B). Runtime 90 seconds [ 1330.591407][ T2104] block nbd7: Possible stuck request ffff888026a30400: control (read@2048,1024B). Runtime 90 seconds [ 1330.602495][ T2104] block nbd7: Possible stuck request ffff888026a30600: control (read@3072,1024B). Runtime 90 seconds [ 1331.056623][ T1094] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1331.067814][ T1094] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1331.085788][ T1094] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1331.095754][ T1094] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1331.188773][T30767] gretap0: entered promiscuous mode [ 1331.280104][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1332.241213][T30779] openvswitch: netlink: Geneve opt len 3 is not a multiple of 4. [ 1332.320036][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1332.619803][T30725] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1333.360574][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1333.785201][T30806] FAULT_INJECTION: forcing a failure. [ 1333.785201][T30806] name failslab, interval 1, probability 0, space 0, times 0 [ 1333.824154][T30806] CPU: 1 UID: 0 PID: 30806 Comm: syz.4.22450 Not tainted syzkaller #0 PREEMPT(full) [ 1333.824182][T30806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1333.824194][T30806] Call Trace: [ 1333.824202][T30806] [ 1333.824211][T30806] dump_stack_lvl+0xe8/0x150 [ 1333.824247][T30806] should_fail_ex+0x412/0x560 [ 1333.824277][T30806] should_failslab+0xa8/0x100 [ 1333.824304][T30806] __kmalloc_cache_noprof+0x88/0x660 [ 1333.824325][T30806] ? sctp_transport_new+0x7e/0x620 [ 1333.824351][T30806] sctp_transport_new+0x7e/0x620 [ 1333.824374][T30806] sctp_assoc_add_peer+0x259/0x13b0 [ 1333.824408][T30806] ? sctp_bind_addr_copy+0x380/0x3c0 [ 1333.824439][T30806] sctp_connect_new_asoc+0x329/0x6b0 [ 1333.824472][T30806] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1333.824504][T30806] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1333.824535][T30806] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1333.824563][T30806] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1333.824593][T30806] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1333.824616][T30806] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1333.824655][T30806] sctp_sendmsg+0x1528/0x2c10 [ 1333.824699][T30806] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1333.824732][T30806] ? aa_sk_perm+0x6d5/0x900 [ 1333.824763][T30806] ? __pfx_aa_sk_perm+0x10/0x10 [ 1333.824788][T30806] ? sock_rps_record_flow+0x19/0x400 [ 1333.824825][T30806] ? inet_sendmsg+0x2f4/0x370 [ 1333.824854][T30806] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1333.824877][T30806] ____sys_sendmsg+0x80a/0x9f0 [ 1333.824916][T30806] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1333.824953][T30806] ? import_iovec+0x73/0xa0 [ 1333.824986][T30806] ___sys_sendmsg+0x2a5/0x360 [ 1333.825031][T30806] ? __pfx____sys_sendmsg+0x10/0x10 [ 1333.825094][T30806] ? __fget_files+0x2a/0x420 [ 1333.825121][T30806] ? __fget_files+0x3a0/0x420 [ 1333.825161][T30806] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1333.825192][T30806] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1333.825229][T30806] ? __pfx_ksys_write+0x10/0x10 [ 1333.825257][T30806] do_syscall_64+0x14d/0xf80 [ 1333.825286][T30806] ? trace_irq_disable+0x3b/0x150 [ 1333.825316][T30806] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1333.825333][T30806] ? clear_bhb_loop+0x40/0x90 [ 1333.825355][T30806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1333.825372][T30806] RIP: 0033:0x7fcc7a99c799 [ 1333.825390][T30806] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1333.825405][T30806] RSP: 002b:00007fcc7b8da028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1333.825424][T30806] RAX: ffffffffffffffda RBX: 00007fcc7ac15fa0 RCX: 00007fcc7a99c799 [ 1333.825437][T30806] RDX: 0000000000000001 RSI: 0000200000000700 RDI: 0000000000000003 [ 1333.825449][T30806] RBP: 00007fcc7b8da090 R08: 0000000000000000 R09: 0000000000000000 [ 1333.825459][T30806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1333.825469][T30806] R13: 00007fcc7ac16038 R14: 00007fcc7ac15fa0 R15: 00007ffec84d2618 [ 1333.825500][T30806] [ 1334.399902][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1334.410918][T30828] __nla_validate_parse: 3 callbacks suppressed [ 1334.410938][T30828] netlink: 4 bytes leftover after parsing attributes in process `syz.1.22454'. [ 1334.468697][T30831] FAULT_INJECTION: forcing a failure. [ 1334.468697][T30831] name failslab, interval 1, probability 0, space 0, times 0 [ 1334.539300][T30831] CPU: 1 UID: 0 PID: 30831 Comm: syz.2.22457 Not tainted syzkaller #0 PREEMPT(full) [ 1334.539327][T30831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1334.539338][T30831] Call Trace: [ 1334.539346][T30831] [ 1334.539356][T30831] dump_stack_lvl+0xe8/0x150 [ 1334.539390][T30831] should_fail_ex+0x412/0x560 [ 1334.539419][T30831] should_failslab+0xa8/0x100 [ 1334.539443][T30831] ? skb_clone+0x212/0x3a0 [ 1334.539478][T30831] kmem_cache_alloc_noprof+0x87/0x650 [ 1334.539520][T30831] skb_clone+0x212/0x3a0 [ 1334.539555][T30831] __netlink_deliver_tap+0x404/0x850 [ 1334.539594][T30831] ? netlink_deliver_tap+0x2e/0x1b0 [ 1334.539620][T30831] netlink_deliver_tap+0x19c/0x1b0 [ 1334.539646][T30831] netlink_sendskb+0x68/0x140 [ 1334.539669][T30831] netlink_unicast+0x3a3/0x9b0 [ 1334.539698][T30831] ? __pfx_netlink_unicast+0x10/0x10 [ 1334.539729][T30831] netlink_rcv_skb+0x2b6/0x4b0 [ 1334.539754][T30831] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 1334.539780][T30831] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1334.539817][T30831] ? netlink_deliver_tap+0x2e/0x1b0 [ 1334.539849][T30831] netlink_unicast+0x80f/0x9b0 [ 1334.539879][T30831] ? __pfx_netlink_unicast+0x10/0x10 [ 1334.539902][T30831] ? netlink_sendmsg+0x650/0xb40 [ 1334.539925][T30831] ? skb_put+0x11b/0x210 [ 1334.539963][T30831] netlink_sendmsg+0x813/0xb40 [ 1334.539998][T30831] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1334.540027][T30831] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1334.540053][T30831] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1334.540078][T30831] ____sys_sendmsg+0x972/0x9f0 [ 1334.540118][T30831] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1334.540158][T30831] ? import_iovec+0x73/0xa0 [ 1334.540191][T30831] ___sys_sendmsg+0x2a5/0x360 [ 1334.540229][T30831] ? __pfx____sys_sendmsg+0x10/0x10 [ 1334.540290][T30831] ? __fget_files+0x2a/0x420 [ 1334.540318][T30831] ? __fget_files+0x3a0/0x420 [ 1334.540355][T30831] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1334.540390][T30831] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1334.540431][T30831] ? __pfx_ksys_write+0x10/0x10 [ 1334.540463][T30831] do_syscall_64+0x14d/0xf80 [ 1334.540494][T30831] ? trace_irq_disable+0x3b/0x150 [ 1334.540522][T30831] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1334.540539][T30831] ? clear_bhb_loop+0x40/0x90 [ 1334.540560][T30831] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1334.540579][T30831] RIP: 0033:0x7fcd14f9c799 [ 1334.540596][T30831] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1334.540611][T30831] RSP: 002b:00007fcd15dbe028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1334.540632][T30831] RAX: ffffffffffffffda RBX: 00007fcd15215fa0 RCX: 00007fcd14f9c799 [ 1334.540645][T30831] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 1334.540656][T30831] RBP: 00007fcd15dbe090 R08: 0000000000000000 R09: 0000000000000000 [ 1334.540667][T30831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1334.540678][T30831] R13: 00007fcd15216038 R14: 00007fcd15215fa0 R15: 00007ffeceea84a8 [ 1334.540709][T30831] [ 1334.573043][T30833] netlink: 512 bytes leftover after parsing attributes in process `syz.3.22458'. [ 1335.223538][T30869] netlink: 20 bytes leftover after parsing attributes in process `syz.1.22466'. [ 1335.236415][T30869] netlink: 20 bytes leftover after parsing attributes in process `syz.1.22466'. [ 1335.332285][T30875] FAULT_INJECTION: forcing a failure. [ 1335.332285][T30875] name failslab, interval 1, probability 0, space 0, times 0 [ 1335.354291][T30875] CPU: 0 UID: 0 PID: 30875 Comm: syz.3.22468 Not tainted syzkaller #0 PREEMPT(full) [ 1335.354318][T30875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1335.354329][T30875] Call Trace: [ 1335.354354][T30875] [ 1335.354362][T30875] dump_stack_lvl+0xe8/0x150 [ 1335.354398][T30875] should_fail_ex+0x412/0x560 [ 1335.354427][T30875] should_failslab+0xa8/0x100 [ 1335.354454][T30875] __kvmalloc_node_noprof+0x178/0x8a0 [ 1335.354478][T30875] ? rhashtable_init_noprof+0x52e/0xa70 [ 1335.354506][T30875] ? rhashtable_init_noprof+0x12d/0xa70 [ 1335.354538][T30875] rhashtable_init_noprof+0x52e/0xa70 [ 1335.354571][T30875] rhltable_init_noprof+0x1e/0x60 [ 1335.354598][T30875] nf_tables_newtable+0x68f/0x1910 [ 1335.354729][T30875] nfnetlink_rcv+0x1240/0x27b0 [ 1335.354788][T30875] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1335.354826][T30875] ? ref_tracker_free+0x693/0x840 [ 1335.354882][T30875] ? __netlink_deliver_tap+0x807/0x850 [ 1335.354907][T30875] ? netlink_deliver_tap+0x2e/0x1b0 [ 1335.354950][T30875] netlink_unicast+0x80f/0x9b0 [ 1335.354981][T30875] ? __pfx_netlink_unicast+0x10/0x10 [ 1335.355004][T30875] ? netlink_sendmsg+0x650/0xb40 [ 1335.355027][T30875] ? skb_put+0x11b/0x210 [ 1335.355060][T30875] netlink_sendmsg+0x813/0xb40 [ 1335.355095][T30875] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1335.355125][T30875] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1335.355151][T30875] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1335.355174][T30875] ____sys_sendmsg+0x972/0x9f0 [ 1335.355213][T30875] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1335.355254][T30875] ? import_iovec+0x73/0xa0 [ 1335.355286][T30875] ___sys_sendmsg+0x2a5/0x360 [ 1335.355324][T30875] ? __pfx____sys_sendmsg+0x10/0x10 [ 1335.355402][T30875] ? __fget_files+0x2a/0x420 [ 1335.355429][T30875] ? __fget_files+0x3a0/0x420 [ 1335.355468][T30875] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1335.355501][T30875] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1335.355541][T30875] ? __pfx_ksys_write+0x10/0x10 [ 1335.355574][T30875] do_syscall_64+0x14d/0xf80 [ 1335.355603][T30875] ? trace_irq_disable+0x3b/0x150 [ 1335.355632][T30875] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1335.355651][T30875] ? clear_bhb_loop+0x40/0x90 [ 1335.355675][T30875] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1335.355694][T30875] RIP: 0033:0x7fc2f899c799 [ 1335.355712][T30875] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1335.355727][T30875] RSP: 002b:00007fc2f9860028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1335.355748][T30875] RAX: ffffffffffffffda RBX: 00007fc2f8c15fa0 RCX: 00007fc2f899c799 [ 1335.355762][T30875] RDX: 0000000000000000 RSI: 000020000000c2c0 RDI: 0000000000000003 [ 1335.355774][T30875] RBP: 00007fc2f9860090 R08: 0000000000000000 R09: 0000000000000000 [ 1335.355786][T30875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1335.355797][T30875] R13: 00007fc2f8c16038 R14: 00007fc2f8c15fa0 R15: 00007fff233d24f8 [ 1335.355830][T30875] [ 1335.389335][T30875] netlink: 36 bytes leftover after parsing attributes in process `syz.3.22468'. [ 1335.440482][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1335.734617][T30886] ip6tnl0: left promiscuous mode [ 1335.911678][T30886] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1336.021471][T30886] macvtap0: left allmulticast mode [ 1336.131667][ T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1336.149571][ T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1336.179978][ T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1336.206719][ T12] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1336.472847][T30897] lo speed is unknown, defaulting to 1000 [ 1336.479238][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1336.759259][T30933] FAULT_INJECTION: forcing a failure. [ 1336.759259][T30933] name failslab, interval 1, probability 0, space 0, times 0 [ 1336.786671][T30933] CPU: 1 UID: 0 PID: 30933 Comm: syz.1.22490 Not tainted syzkaller #0 PREEMPT(full) [ 1336.786698][T30933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1336.786710][T30933] Call Trace: [ 1336.786718][T30933] [ 1336.786727][T30933] dump_stack_lvl+0xe8/0x150 [ 1336.786761][T30933] should_fail_ex+0x412/0x560 [ 1336.786799][T30933] should_failslab+0xa8/0x100 [ 1336.786827][T30933] __kmalloc_noprof+0xe8/0x760 [ 1336.786847][T30933] ? tomoyo_encode+0x28b/0x550 [ 1336.786879][T30933] tomoyo_encode+0x28b/0x550 [ 1336.786911][T30933] tomoyo_realpath_from_path+0x58d/0x5d0 [ 1336.786947][T30933] ? tomoyo_path_number_perm+0x219/0x630 [ 1336.786967][T30933] tomoyo_path_number_perm+0x246/0x630 [ 1336.786988][T30933] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1336.787010][T30933] ? __lock_acquire+0x6b5/0x2cf0 [ 1336.787048][T30933] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1336.787103][T30933] ? __fget_files+0x2a/0x420 [ 1336.787135][T30933] ? __fget_files+0x2a/0x420 [ 1336.787162][T30933] ? __fget_files+0x3a0/0x420 [ 1336.787190][T30933] ? __fget_files+0x2a/0x420 [ 1336.787223][T30933] security_file_ioctl+0xc3/0x2a0 [ 1336.787260][T30933] __se_sys_ioctl+0x47/0x170 [ 1336.787284][T30933] do_syscall_64+0x14d/0xf80 [ 1336.787314][T30933] ? trace_irq_disable+0x3b/0x150 [ 1336.787343][T30933] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1336.787362][T30933] ? clear_bhb_loop+0x40/0x90 [ 1336.787388][T30933] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1336.787405][T30933] RIP: 0033:0x7fefeb99c799 [ 1336.787424][T30933] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1336.787440][T30933] RSP: 002b:00007fefec8a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1336.787459][T30933] RAX: ffffffffffffffda RBX: 00007fefebc15fa0 RCX: 00007fefeb99c799 [ 1336.787472][T30933] RDX: 0000200000000140 RSI: 000000000000894b RDI: 0000000000000003 [ 1336.787484][T30933] RBP: 00007fefec8a7090 R08: 0000000000000000 R09: 0000000000000000 [ 1336.787495][T30933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1336.787506][T30933] R13: 00007fefebc16038 R14: 00007fefebc15fa0 R15: 00007ffe3e6e2ae8 [ 1336.787538][T30933] [ 1336.787560][T30933] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1337.243894][T30951] FAULT_INJECTION: forcing a failure. [ 1337.243894][T30951] name failslab, interval 1, probability 0, space 0, times 0 [ 1337.273470][T30951] CPU: 0 UID: 0 PID: 30951 Comm: syz.4.22493 Not tainted syzkaller #0 PREEMPT(full) [ 1337.273496][T30951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1337.273507][T30951] Call Trace: [ 1337.273514][T30951] [ 1337.273522][T30951] dump_stack_lvl+0xe8/0x150 [ 1337.273557][T30951] should_fail_ex+0x412/0x560 [ 1337.273585][T30951] should_failslab+0xa8/0x100 [ 1337.273611][T30951] __kmalloc_cache_noprof+0x88/0x660 [ 1337.273630][T30951] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1337.273662][T30951] ? __xdp_reg_mem_model+0x1e3/0x5d0 [ 1337.273787][T30951] __xdp_reg_mem_model+0x1e3/0x5d0 [ 1337.273823][T30951] ? __pfx___xdp_reg_mem_model+0x10/0x10 [ 1337.273856][T30951] ? page_pool_create_percpu+0x7f9/0xb80 [ 1337.273927][T30951] xdp_reg_mem_model+0x22/0x40 [ 1337.273958][T30951] bpf_test_run_xdp_live+0x295/0x1cf0 [ 1337.273991][T30951] ? bpf_dispatcher_change_prog+0xae0/0xd70 [ 1337.274031][T30951] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 1337.274063][T30951] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1337.274085][T30951] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 1337.274130][T30951] ? 0xffffffffa0202f10 [ 1337.274146][T30951] ? 0xffffffffa0202f48 [ 1337.274168][T30951] ? 0xffffffffa0203010 [ 1337.274183][T30951] ? 0xffffffffa0204318 [ 1337.274195][T30951] ? 0xffffffffa0207f50 [ 1337.274228][T30951] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 1337.274265][T30951] ? _copy_from_user+0x94/0xb0 [ 1337.274295][T30951] ? bpf_test_init+0x113/0x150 [ 1337.274316][T30951] ? xdp_convert_md_to_buff+0x5b/0x330 [ 1337.274344][T30951] bpf_prog_test_run_xdp+0x81c/0x1160 [ 1337.274385][T30951] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1337.274413][T30951] ? __fget_files+0x2a/0x420 [ 1337.274449][T30951] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1337.274472][T30951] bpf_prog_test_run+0x2c7/0x340 [ 1337.274492][T30951] __sys_bpf+0x643/0x950 [ 1337.274526][T30951] ? __pfx___sys_bpf+0x10/0x10 [ 1337.274573][T30951] ? ksys_write+0x242/0x270 [ 1337.274595][T30951] ? __pfx_ksys_write+0x10/0x10 [ 1337.274622][T30951] __x64_sys_bpf+0x7c/0x90 [ 1337.274651][T30951] do_syscall_64+0x14d/0xf80 [ 1337.274680][T30951] ? trace_irq_disable+0x3b/0x150 [ 1337.274710][T30951] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1337.274729][T30951] ? clear_bhb_loop+0x40/0x90 [ 1337.274754][T30951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1337.274772][T30951] RIP: 0033:0x7fcc7a99c799 [ 1337.274789][T30951] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1337.274805][T30951] RSP: 002b:00007fcc7b8da028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1337.274825][T30951] RAX: ffffffffffffffda RBX: 00007fcc7ac15fa0 RCX: 00007fcc7a99c799 [ 1337.274839][T30951] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 1337.274851][T30951] RBP: 00007fcc7b8da090 R08: 0000000000000000 R09: 0000000000000000 [ 1337.274862][T30951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1337.274873][T30951] R13: 00007fcc7ac16038 R14: 00007fcc7ac15fa0 R15: 00007ffec84d2618 [ 1337.274905][T30951] [ 1337.581912][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1337.808831][T30959] netlink: 8 bytes leftover after parsing attributes in process `syz.4.22495'. [ 1337.967739][T30973] netlink: 16 bytes leftover after parsing attributes in process `syz.2.22497'. [ 1338.162437][T19767] Bluetooth: hci3: command 0x0406 tx timeout [ 1338.639568][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1338.906535][T31004] netlink: 184 bytes leftover after parsing attributes in process `syz.4.22510'. [ 1339.063969][T31008] netlink: 'syz.3.22512': attribute type 12 has an invalid length. [ 1339.072793][T31008] netlink: 'syz.3.22512': attribute type 29 has an invalid length. [ 1339.081439][T31008] netlink: 148 bytes leftover after parsing attributes in process `syz.3.22512'. [ 1339.090934][T31008] netlink: 51 bytes leftover after parsing attributes in process `syz.3.22512'. [ 1339.412376][T31032] FAULT_INJECTION: forcing a failure. [ 1339.412376][T31032] name failslab, interval 1, probability 0, space 0, times 0 [ 1339.426254][T31032] CPU: 1 UID: 0 PID: 31032 Comm: syz.2.22520 Not tainted syzkaller #0 PREEMPT(full) [ 1339.426280][T31032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1339.426291][T31032] Call Trace: [ 1339.426299][T31032] [ 1339.426307][T31032] dump_stack_lvl+0xe8/0x150 [ 1339.426344][T31032] should_fail_ex+0x412/0x560 [ 1339.426372][T31032] should_failslab+0xa8/0x100 [ 1339.426399][T31032] __kmalloc_cache_noprof+0x88/0x660 [ 1339.426421][T31032] ? sctp_add_bind_addr+0x8c/0x370 [ 1339.426461][T31032] sctp_add_bind_addr+0x8c/0x370 [ 1339.426489][T31032] sctp_copy_local_addr_list+0x314/0x4f0 [ 1339.426517][T31032] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 1339.426541][T31032] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1339.426566][T31032] ? sctp_v6_is_any+0x64/0x80 [ 1339.426592][T31032] ? sctp_copy_one_addr+0x93/0x360 [ 1339.426618][T31032] sctp_bind_addr_copy+0xb3/0x3c0 [ 1339.426642][T31032] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1339.426680][T31032] sctp_connect_new_asoc+0x2ff/0x6b0 [ 1339.426713][T31032] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1339.426750][T31032] ? __local_bh_enable_ip+0xd0/0x130 [ 1339.426776][T31032] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1339.426799][T31032] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1339.426837][T31032] sctp_sendmsg+0x1528/0x2c10 [ 1339.426883][T31032] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1339.426919][T31032] ? aa_sk_perm+0x6d5/0x900 [ 1339.426949][T31032] ? __pfx_aa_sk_perm+0x10/0x10 [ 1339.426974][T31032] ? sock_rps_record_flow+0x19/0x400 [ 1339.427006][T31032] ? __pfx_inet_sendmsg+0x10/0x10 [ 1339.427039][T31032] ? inet_sendmsg+0x2f4/0x370 [ 1339.427077][T31032] ? __pfx_inet_sendmsg+0x10/0x10 [ 1339.427110][T31032] __sys_sendto+0x5de/0x710 [ 1339.427141][T31032] ? __pfx___sys_sendto+0x10/0x10 [ 1339.427166][T31032] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1339.427213][T31032] ? __fget_files+0x3a0/0x420 [ 1339.427254][T31032] ? ksys_write+0x242/0x270 [ 1339.427276][T31032] ? __pfx_ksys_write+0x10/0x10 [ 1339.427302][T31032] __x64_sys_sendto+0xde/0x100 [ 1339.427333][T31032] do_syscall_64+0x14d/0xf80 [ 1339.427363][T31032] ? trace_irq_disable+0x3b/0x150 [ 1339.427393][T31032] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1339.427413][T31032] ? clear_bhb_loop+0x40/0x90 [ 1339.427443][T31032] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1339.427462][T31032] RIP: 0033:0x7fcd14f9c799 [ 1339.427480][T31032] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1339.427495][T31032] RSP: 002b:00007fcd15dbe028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1339.427515][T31032] RAX: ffffffffffffffda RBX: 00007fcd15215fa0 RCX: 00007fcd14f9c799 [ 1339.427529][T31032] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000003 [ 1339.427541][T31032] RBP: 00007fcd15dbe090 R08: 000020000005ffe4 R09: 000000000000001c [ 1339.427553][T31032] R10: 00000000000000e0 R11: 0000000000000246 R12: 0000000000000001 [ 1339.427564][T31032] R13: 00007fcd15216038 R14: 00007fcd15215fa0 R15: 00007ffeceea84a8 [ 1339.427596][T31032] [ 1339.680423][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1339.862079][T31039] sctp: [Deprecated]: syz.4.22522 (pid 31039) Use of int in max_burst socket option. [ 1339.862079][T31039] Use struct sctp_assoc_value instead [ 1339.948913][T31044] netlink: 'syz.2.22524': attribute type 12 has an invalid length. [ 1339.959327][T31044] netlink: 'syz.2.22524': attribute type 29 has an invalid length. [ 1339.967546][ T2104] block nbd7: Possible stuck request ffff888026a30000: control (read@0,1024B). Runtime 99 seconds [ 1339.967583][T31044] netlink: 148 bytes leftover after parsing attributes in process `syz.2.22524'. [ 1339.978455][ T2104] block nbd7: Possible stuck request ffff888026a30200: control (read@1024,1024B). Runtime 99 seconds [ 1339.978489][ T2104] block nbd7: Possible stuck request ffff888026a30400: control (read@2048,1024B). Runtime 99 seconds [ 1339.978515][ T2104] block nbd7: Possible stuck request ffff888026a30600: control (read@3072,1024B). Runtime 99 seconds [ 1340.028311][T31044] netlink: 51 bytes leftover after parsing attributes in process `syz.2.22524'. [ 1340.110546][T31049] FAULT_INJECTION: forcing a failure. [ 1340.110546][T31049] name failslab, interval 1, probability 0, space 0, times 0 [ 1340.124672][T31049] CPU: 0 UID: 0 PID: 31049 Comm: syz.4.22527 Not tainted syzkaller #0 PREEMPT(full) [ 1340.124697][T31049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1340.124709][T31049] Call Trace: [ 1340.124716][T31049] [ 1340.124724][T31049] dump_stack_lvl+0xe8/0x150 [ 1340.124759][T31049] should_fail_ex+0x412/0x560 [ 1340.124788][T31049] should_failslab+0xa8/0x100 [ 1340.124814][T31049] __kmalloc_noprof+0xe8/0x760 [ 1340.124833][T31049] ? ___neigh_create+0x6d5/0x2280 [ 1340.124861][T31049] ___neigh_create+0x6d5/0x2280 [ 1340.124891][T31049] ? iptable_mangle_hook+0x189/0x4c0 [ 1340.124928][T31049] ip_neigh_gw4+0x289/0x3b0 [ 1340.124961][T31049] ? __pfx_ip_neigh_gw4+0x10/0x10 [ 1340.125000][T31049] ? ip_finish_output2+0x3c2/0x1070 [ 1340.125026][T31049] ip_finish_output2+0x4e5/0x1070 [ 1340.125054][T31049] ? ip_skb_dst_mtu+0x80b/0xa50 [ 1340.125084][T31049] ? ip_finish_output+0x40e/0x530 [ 1340.125117][T31049] ip_output+0x29f/0x450 [ 1340.125145][T31049] ? ip_output+0x5b/0x450 [ 1340.125174][T31049] ip_send_skb+0x45/0xc0 [ 1340.125204][T31049] udp_send_skb+0xb04/0x1510 [ 1340.125346][T31049] udp_sendmsg+0x1a35/0x22f0 [ 1340.125396][T31049] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 1340.125429][T31049] ? __pfx_udp_sendmsg+0x10/0x10 [ 1340.125469][T31049] ? tomoyo_supervisor+0x4cb/0x1570 [ 1340.125514][T31049] ? register_lock_class+0x31/0x2e0 [ 1340.125545][T31049] ? __lock_acquire+0x6b5/0x2cf0 [ 1340.125582][T31049] ? get_random_u32+0x4ce/0x8b0 [ 1340.125705][T31049] udpv6_sendmsg+0xd1c/0x2560 [ 1340.125744][T31049] ? __lock_acquire+0x6b5/0x2cf0 [ 1340.125774][T31049] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 1340.125837][T31049] ? inet_send_prepare+0x1b9/0x270 [ 1340.125870][T31049] ? inet_send_prepare+0x1b9/0x270 [ 1340.125906][T31049] ? inet_send_prepare+0x1b9/0x270 [ 1340.125935][T31049] ? __local_bh_enable_ip+0xd0/0x130 [ 1340.125968][T31049] ? inet_send_prepare+0x1b9/0x270 [ 1340.126002][T31049] ? inet6_sendmsg+0xe4/0x120 [ 1340.126027][T31049] ____sys_sendmsg+0x5c7/0x9f0 [ 1340.126067][T31049] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1340.126109][T31049] ? import_iovec+0x73/0xa0 [ 1340.126143][T31049] ___sys_sendmsg+0x2a5/0x360 [ 1340.126181][T31049] ? __pfx____sys_sendmsg+0x10/0x10 [ 1340.126219][T31049] ? kstrtouint+0x6e/0xe0 [ 1340.126269][T31049] ? __fget_files+0x2a/0x420 [ 1340.126299][T31049] ? __fget_files+0x3a0/0x420 [ 1340.126338][T31049] __sys_sendmmsg+0x27c/0x4e0 [ 1340.126376][T31049] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1340.126404][T31049] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1340.126465][T31049] ? ksys_write+0x242/0x270 [ 1340.126489][T31049] ? __pfx_ksys_write+0x10/0x10 [ 1340.126524][T31049] __x64_sys_sendmmsg+0xa0/0xc0 [ 1340.126558][T31049] do_syscall_64+0x14d/0xf80 [ 1340.126588][T31049] ? trace_irq_disable+0x3b/0x150 [ 1340.126618][T31049] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1340.126638][T31049] ? clear_bhb_loop+0x40/0x90 [ 1340.126661][T31049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1340.126679][T31049] RIP: 0033:0x7fcc7a99c799 [ 1340.126698][T31049] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1340.126713][T31049] RSP: 002b:00007fcc7b8da028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1340.126732][T31049] RAX: ffffffffffffffda RBX: 00007fcc7ac15fa0 RCX: 00007fcc7a99c799 [ 1340.126744][T31049] RDX: 0000000000000001 RSI: 0000200000000700 RDI: 0000000000000003 [ 1340.126756][T31049] RBP: 00007fcc7b8da090 R08: 0000000000000000 R09: 0000000000000000 [ 1340.126766][T31049] R10: 0000000000040000 R11: 0000000000000246 R12: 0000000000000001 [ 1340.126778][T31049] R13: 00007fcc7ac16038 R14: 00007fcc7ac15fa0 R15: 00007ffec84d2618 [ 1340.126807][T31049] [ 1340.530564][T31050] FAULT_INJECTION: forcing a failure. [ 1340.530564][T31050] name failslab, interval 1, probability 0, space 0, times 0 [ 1340.562531][T31050] CPU: 0 UID: 0 PID: 31050 Comm: syz.2.22526 Not tainted syzkaller #0 PREEMPT(full) [ 1340.562560][T31050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1340.562571][T31050] Call Trace: [ 1340.562579][T31050] [ 1340.562589][T31050] dump_stack_lvl+0xe8/0x150 [ 1340.562625][T31050] should_fail_ex+0x412/0x560 [ 1340.562654][T31050] should_failslab+0xa8/0x100 [ 1340.562679][T31050] ? security_inode_alloc+0x39/0x310 [ 1340.562706][T31050] kmem_cache_alloc_noprof+0x87/0x650 [ 1340.562749][T31050] security_inode_alloc+0x39/0x310 [ 1340.562778][T31050] inode_init_always_gfp+0x9ed/0xdc0 [ 1340.562813][T31050] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 1340.562848][T31050] alloc_inode+0x82/0x1b0 [ 1340.562877][T31050] new_inode+0x22/0x170 [ 1340.562911][T31050] __debugfs_create_file+0xb8/0x400 [ 1340.562945][T31050] debugfs_create_file_full+0x3f/0x60 [ 1340.562978][T31050] ref_tracker_dir_debugfs+0x197/0x360 [ 1340.563005][T31050] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 1340.563061][T31050] ? __kvmalloc_node_noprof+0x545/0x8a0 [ 1340.563082][T31050] ? alloc_netdev_mqs+0xa6/0x11b0 [ 1340.563107][T31050] ? __raw_spin_lock_init+0x45/0x100 [ 1340.563130][T31050] alloc_netdev_mqs+0x272/0x11b0 [ 1340.563148][T31050] ? __pfx_ip6erspan_tap_setup+0x10/0x10 [ 1340.563186][T31050] rtnl_create_link+0x31f/0xd70 [ 1340.563214][T31050] rtnl_newlink_create+0x277/0xb70 [ 1340.563245][T31050] ? __pfx___nla_validate_parse+0x10/0x10 [ 1340.563285][T31050] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 1340.563317][T31050] ? __pfx___mutex_lock+0x10/0x10 [ 1340.563362][T31050] ? ns_capable+0x89/0xe0 [ 1340.563393][T31050] rtnl_newlink+0x1666/0x1be0 [ 1340.563437][T31050] ? __pfx_rtnl_newlink+0x10/0x10 [ 1340.563475][T31050] ? __lock_acquire+0x6b5/0x2cf0 [ 1340.563509][T31050] ? __lock_acquire+0x6b5/0x2cf0 [ 1340.563541][T31050] ? __lock_acquire+0x6b5/0x2cf0 [ 1340.563578][T31050] ? unwind_next_frame+0xa5/0x23c0 [ 1340.563635][T31050] ? __lock_acquire+0x6b5/0x2cf0 [ 1340.563664][T31050] ? is_bpf_text_address+0x26/0x2b0 [ 1340.563688][T31050] ? kernel_text_address+0xa5/0xe0 [ 1340.563742][T31050] ? __pfx_rtnl_newlink+0x10/0x10 [ 1340.563767][T31050] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 1340.563798][T31050] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1340.563829][T31050] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1340.563860][T31050] ? __lock_acquire+0x6b5/0x2cf0 [ 1340.563897][T31050] netlink_rcv_skb+0x232/0x4b0 [ 1340.563924][T31050] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1340.563952][T31050] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1340.563990][T31050] ? netlink_deliver_tap+0x2e/0x1b0 [ 1340.564024][T31050] netlink_unicast+0x80f/0x9b0 [ 1340.564056][T31050] ? __pfx_netlink_unicast+0x10/0x10 [ 1340.564080][T31050] ? netlink_sendmsg+0x650/0xb40 [ 1340.564103][T31050] ? skb_put+0x11b/0x210 [ 1340.564136][T31050] netlink_sendmsg+0x813/0xb40 [ 1340.564172][T31050] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1340.564202][T31050] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1340.564228][T31050] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1340.564253][T31050] ____sys_sendmsg+0x972/0x9f0 [ 1340.564294][T31050] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1340.564335][T31050] ? import_iovec+0x73/0xa0 [ 1340.564369][T31050] ___sys_sendmsg+0x2a5/0x360 [ 1340.564407][T31050] ? __pfx____sys_sendmsg+0x10/0x10 [ 1340.564478][T31050] ? __fget_files+0x2a/0x420 [ 1340.564507][T31050] ? __fget_files+0x3a0/0x420 [ 1340.564546][T31050] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1340.564579][T31050] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1340.564621][T31050] ? __pfx_ksys_write+0x10/0x10 [ 1340.564654][T31050] do_syscall_64+0x14d/0xf80 [ 1340.564683][T31050] ? trace_irq_disable+0x3b/0x150 [ 1340.564711][T31050] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1340.564731][T31050] ? clear_bhb_loop+0x40/0x90 [ 1340.564756][T31050] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1340.564775][T31050] RIP: 0033:0x7fcd14f9c799 [ 1340.564793][T31050] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1340.564809][T31050] RSP: 002b:00007fcd15dbe028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1340.564842][T31050] RAX: ffffffffffffffda RBX: 00007fcd15215fa0 RCX: 00007fcd14f9c799 [ 1340.564856][T31050] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000003 [ 1340.564868][T31050] RBP: 00007fcd15dbe090 R08: 0000000000000000 R09: 0000000000000000 [ 1340.564879][T31050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1340.564890][T31050] R13: 00007fcd15216038 R14: 00007fcd15215fa0 R15: 00007ffeceea84a8 [ 1340.564924][T31050] [ 1340.564993][T31050] debugfs: out of free dentries, can not create file 'netdev@ffff88803ad92620' [ 1340.610729][T31056] netlink: 20 bytes leftover after parsing attributes in process `syz.3.22529'. [ 1340.719330][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1340.733117][T31050] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6erspan0 [ 1340.791267][T31056] netlink: 120 bytes leftover after parsing attributes in process `syz.3.22529'. [ 1341.082123][T31056] netlink: 8 bytes leftover after parsing attributes in process `syz.3.22529'. [ 1341.091727][T31060] ip6_vti0: entered promiscuous mode [ 1341.112060][T31060] netlink: 8 bytes leftover after parsing attributes in process `syz.4.22530'. [ 1341.313578][T31079] FAULT_INJECTION: forcing a failure. [ 1341.313578][T31079] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1341.341121][T31079] CPU: 0 UID: 0 PID: 31079 Comm: syz.4.22534 Not tainted syzkaller #0 PREEMPT(full) [ 1341.341150][T31079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1341.341162][T31079] Call Trace: [ 1341.341170][T31079] [ 1341.341178][T31079] dump_stack_lvl+0xe8/0x150 [ 1341.341214][T31079] should_fail_ex+0x412/0x560 [ 1341.341243][T31079] _copy_from_user+0x2d/0xb0 [ 1341.341275][T31079] ___sys_recvmsg+0x175/0x590 [ 1341.341314][T31079] ? __pfx____sys_recvmsg+0x10/0x10 [ 1341.341372][T31079] ? __fget_files+0x3a0/0x420 [ 1341.341413][T31079] do_recvmmsg+0x334/0x800 [ 1341.341454][T31079] ? __pfx_do_recvmmsg+0x10/0x10 [ 1341.341499][T31079] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1341.341555][T31079] __x64_sys_recvmmsg+0x198/0x250 [ 1341.341592][T31079] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1341.341637][T31079] do_syscall_64+0x14d/0xf80 [ 1341.341667][T31079] ? trace_irq_disable+0x3b/0x150 [ 1341.341698][T31079] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1341.341717][T31079] ? clear_bhb_loop+0x40/0x90 [ 1341.341742][T31079] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1341.341760][T31079] RIP: 0033:0x7fcc7a99c799 [ 1341.341778][T31079] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1341.341793][T31079] RSP: 002b:00007fcc7b8b9028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1341.341813][T31079] RAX: ffffffffffffffda RBX: 00007fcc7ac16090 RCX: 00007fcc7a99c799 [ 1341.341826][T31079] RDX: 0000000000000001 RSI: 0000200000001180 RDI: 0000000000000003 [ 1341.341838][T31079] RBP: 00007fcc7b8b9090 R08: 0000000000000000 R09: 0000000000000000 [ 1341.341849][T31079] R10: 0000000040000000 R11: 0000000000000246 R12: 0000000000000001 [ 1341.341861][T31079] R13: 00007fcc7ac16128 R14: 00007fcc7ac16090 R15: 00007ffec84d2618 [ 1341.341899][T31079] [ 1341.760391][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1341.855054][T31094] netlink: 8 bytes leftover after parsing attributes in process `syz.4.22539'. [ 1341.877597][T31094] netlink: 'syz.4.22539': attribute type 1 has an invalid length. [ 1341.891195][T31094] netlink: 'syz.4.22539': attribute type 2 has an invalid length. [ 1342.003735][T31101] FAULT_INJECTION: forcing a failure. [ 1342.003735][T31101] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1342.018178][T31101] CPU: 1 UID: 0 PID: 31101 Comm: syz.4.22540 Not tainted syzkaller #0 PREEMPT(full) [ 1342.018204][T31101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1342.018216][T31101] Call Trace: [ 1342.018223][T31101] [ 1342.018230][T31101] dump_stack_lvl+0xe8/0x150 [ 1342.018281][T31101] should_fail_ex+0x412/0x560 [ 1342.018325][T31101] _copy_from_iter+0x1d3/0x1670 [ 1342.018346][T31101] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1342.018365][T31101] ? process_measurement+0x195e/0x1c80 [ 1342.018390][T31101] ? process_measurement+0x361/0x1c80 [ 1342.018419][T31101] ? __pfx__copy_from_iter+0x10/0x10 [ 1342.018442][T31101] ? packet_cached_dev_get+0x1c/0x2b0 [ 1342.018469][T31101] ? packet_cached_dev_get+0x1c/0x2b0 [ 1342.018498][T31101] packet_sendmsg+0x30b2/0x50f0 [ 1342.018524][T31101] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 1342.018546][T31101] ? __lock_acquire+0x6b5/0x2cf0 [ 1342.018589][T31101] ? aa_sk_perm+0x6d5/0x900 [ 1342.018604][T31101] ? __pfx_packet_sendmsg+0x10/0x10 [ 1342.018631][T31101] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1342.018657][T31101] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1342.018682][T31101] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1342.018700][T31101] ____sys_sendmsg+0x972/0x9f0 [ 1342.018732][T31101] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1342.018763][T31101] ? import_iovec+0x73/0xa0 [ 1342.018789][T31101] ___sys_sendmsg+0x2a5/0x360 [ 1342.018817][T31101] ? __pfx____sys_sendmsg+0x10/0x10 [ 1342.018868][T31101] ? __fget_files+0x2a/0x420 [ 1342.018891][T31101] ? __fget_files+0x3a0/0x420 [ 1342.018922][T31101] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1342.018948][T31101] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1342.018980][T31101] ? __pfx_ksys_write+0x10/0x10 [ 1342.019003][T31101] do_syscall_64+0x14d/0xf80 [ 1342.019028][T31101] ? trace_irq_disable+0x3b/0x150 [ 1342.019052][T31101] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1342.019066][T31101] ? clear_bhb_loop+0x40/0x90 [ 1342.019085][T31101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1342.019099][T31101] RIP: 0033:0x7fcc7a99c799 [ 1342.019114][T31101] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1342.019130][T31101] RSP: 002b:00007fcc7b8da028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1342.019148][T31101] RAX: ffffffffffffffda RBX: 00007fcc7ac15fa0 RCX: 00007fcc7a99c799 [ 1342.019159][T31101] RDX: 0000000020040051 RSI: 0000200000002ac0 RDI: 0000000000000006 [ 1342.019171][T31101] RBP: 00007fcc7b8da090 R08: 0000000000000000 R09: 0000000000000000 [ 1342.019181][T31101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1342.019192][T31101] R13: 00007fcc7ac16038 R14: 00007fcc7ac15fa0 R15: 00007ffec84d2618 [ 1342.019221][T31101] [ 1342.616274][T31113] netlink: 8 bytes leftover after parsing attributes in process `syz.0.22543'. [ 1342.625892][T31113] netlink: 4 bytes leftover after parsing attributes in process `syz.0.22543'. [ 1342.799247][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1343.840272][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1344.161664][T31068] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1344.444151][T31135] x_tables: unsorted entry at hook 3 [ 1344.522365][T31135] netlink: 80 bytes leftover after parsing attributes in process `syz.0.22552'. [ 1344.552024][T31145] netlink: 'syz.2.22550': attribute type 11 has an invalid length. [ 1344.879240][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1345.009581][T31156] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1345.247186][T31170] __nla_validate_parse: 2 callbacks suppressed [ 1345.247207][T31170] netlink: 80 bytes leftover after parsing attributes in process `syz.3.22561'. [ 1345.707924][T31188] netlink: 4 bytes leftover after parsing attributes in process `syz.2.22568'. [ 1345.738201][T31188] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1345.920328][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1346.362527][T31216] Bluetooth: MGMT ver 1.23 [ 1346.701467][T31226] syzkaller0: entered promiscuous mode [ 1346.707203][T31226] syzkaller0: entered allmulticast mode [ 1346.746042][T31233] netlink: 'syz.4.22581': attribute type 1 has an invalid length. [ 1346.802433][T31233] netlink: 'syz.4.22581': attribute type 21 has an invalid length. [ 1346.960168][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1347.284991][T31258] netlink: 48 bytes leftover after parsing attributes in process `syz.1.22586'. [ 1348.007022][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1349.044308][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1349.052987][ T2104] block nbd7: Possible stuck request ffff888026a30000: control (read@0,1024B). Runtime 108 seconds [ 1349.063961][ T2104] block nbd7: Possible stuck request ffff888026a30200: control (read@1024,1024B). Runtime 108 seconds [ 1349.075400][ T2104] block nbd7: Possible stuck request ffff888026a30400: control (read@2048,1024B). Runtime 108 seconds [ 1349.086797][ T2104] block nbd7: Possible stuck request ffff888026a30600: control (read@3072,1024B). Runtime 108 seconds [ 1349.441756][T31237] team0: Port device team_slave_0 removed [ 1349.455231][T31237] bond2: (slave team_slave_0): Enslaving as a backup interface with an up link [ 1349.480545][T31258] netlink: 4 bytes leftover after parsing attributes in process `syz.1.22586'. [ 1349.511335][T31258] netlink: 'syz.1.22586': attribute type 5 has an invalid length. [ 1349.554525][T31245] syzkaller0: entered promiscuous mode [ 1349.564513][T31245] syzkaller0: entered allmulticast mode [ 1349.588360][T31263] netlink: 112 bytes leftover after parsing attributes in process `syz.2.22587'. [ 1350.084701][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1351.127860][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1351.443986][ T2088] block nbd6: Possible stuck request ffff8880269d8000: control (read@0,4096B). Runtime 330 seconds [ 1351.455245][ T2104] block nbd5: Possible stuck request ffff8880269a8000: control (read@0,4096B). Runtime 330 seconds [ 1352.160198][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1352.441483][T31302] FAULT_INJECTION: forcing a failure. [ 1352.441483][T31302] name failslab, interval 1, probability 0, space 0, times 0 [ 1352.470674][T31302] CPU: 0 UID: 0 PID: 31302 Comm: syz.3.22599 Not tainted syzkaller #0 PREEMPT(full) [ 1352.470701][T31302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1352.470713][T31302] Call Trace: [ 1352.470721][T31302] [ 1352.470729][T31302] dump_stack_lvl+0xe8/0x150 [ 1352.470765][T31302] should_fail_ex+0x412/0x560 [ 1352.470795][T31302] should_failslab+0xa8/0x100 [ 1352.470836][T31302] __kmalloc_cache_noprof+0x88/0x660 [ 1352.470858][T31302] ? route4_change+0x3c7/0x2210 [ 1352.470971][T31302] route4_change+0x3c7/0x2210 [ 1352.471003][T31302] ? __pfx_route4_change+0x10/0x10 [ 1352.471040][T31302] tc_new_tfilter+0xff8/0x1780 [ 1352.471099][T31302] ? __pfx_tc_new_tfilter+0x10/0x10 [ 1352.471163][T31302] ? __pfx_tc_new_tfilter+0x10/0x10 [ 1352.471190][T31302] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 1352.471221][T31302] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1352.471245][T31302] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1352.471268][T31302] ? ref_tracker_free+0x693/0x840 [ 1352.471292][T31302] ? __copy_skb_header+0xa3/0x4a0 [ 1352.471326][T31302] ? __pfx_ref_tracker_free+0x10/0x10 [ 1352.471362][T31302] netlink_rcv_skb+0x232/0x4b0 [ 1352.471388][T31302] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1352.471416][T31302] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1352.471452][T31302] ? netlink_deliver_tap+0x2e/0x1b0 [ 1352.471482][T31302] netlink_unicast+0x80f/0x9b0 [ 1352.471511][T31302] ? __pfx_netlink_unicast+0x10/0x10 [ 1352.471535][T31302] ? netlink_sendmsg+0x650/0xb40 [ 1352.471556][T31302] ? skb_put+0x11b/0x210 [ 1352.471587][T31302] netlink_sendmsg+0x813/0xb40 [ 1352.471629][T31302] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1352.471657][T31302] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1352.471681][T31302] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1352.471703][T31302] ____sys_sendmsg+0x972/0x9f0 [ 1352.471740][T31302] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1352.471776][T31302] ? import_iovec+0x73/0xa0 [ 1352.471807][T31302] ___sys_sendmsg+0x2a5/0x360 [ 1352.471843][T31302] ? __pfx____sys_sendmsg+0x10/0x10 [ 1352.471910][T31302] ? __fget_files+0x2a/0x420 [ 1352.471938][T31302] ? __fget_files+0x3a0/0x420 [ 1352.471978][T31302] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1352.472012][T31302] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1352.472054][T31302] ? __pfx_ksys_write+0x10/0x10 [ 1352.472086][T31302] do_syscall_64+0x14d/0xf80 [ 1352.472116][T31302] ? trace_irq_disable+0x3b/0x150 [ 1352.472145][T31302] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1352.472162][T31302] ? clear_bhb_loop+0x40/0x90 [ 1352.472186][T31302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1352.472205][T31302] RIP: 0033:0x7fc2f899c799 [ 1352.472222][T31302] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1352.472238][T31302] RSP: 002b:00007fc2f9860028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1352.472258][T31302] RAX: ffffffffffffffda RBX: 00007fc2f8c15fa0 RCX: 00007fc2f899c799 [ 1352.472272][T31302] RDX: 0000000020000800 RSI: 0000200000000900 RDI: 0000000000000008 [ 1352.472283][T31302] RBP: 00007fc2f9860090 R08: 0000000000000000 R09: 0000000000000000 [ 1352.472293][T31302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1352.472302][T31302] R13: 00007fc2f8c16038 R14: 00007fc2f8c15fa0 R15: 00007fff233d24f8 [ 1352.472330][T31302] [ 1352.828825][T31314] netlink: 112 bytes leftover after parsing attributes in process `syz.0.22602'. [ 1352.934602][ T5828] Bluetooth: hci5: link tx timeout [ 1352.951848][ T5828] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 1352.962888][ T5828] Bluetooth: hci5: link tx timeout [ 1352.969364][ T5828] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 1353.146187][T31332] syzkaller0: entered promiscuous mode [ 1353.155526][T31332] syzkaller0: entered allmulticast mode [ 1353.199227][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1353.260194][T31336] netlink: 60 bytes leftover after parsing attributes in process `syz.4.22611'. [ 1353.271928][T31336] netlink: 60 bytes leftover after parsing attributes in process `syz.4.22611'. [ 1353.369724][ T31] INFO: task udevd:19756 blocked for more than 143 seconds. [ 1353.389740][ T31] Not tainted syzkaller #0 [ 1353.394740][ T31] Blocked by coredump. [ 1353.404450][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1353.417857][ T31] task:udevd state:D stack:21224 pid:19756 tgid:19756 ppid:5191 task_flags:0x40054c flags:0x00080003 [ 1353.431743][ T31] Call Trace: [ 1353.435137][ T31] [ 1353.438155][ T31] __schedule+0x1585/0x5340 [ 1353.444067][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 1353.452677][ T31] ? __pfx___schedule+0x10/0x10 [ 1353.461784][ T31] ? schedule+0x90/0x360 [ 1353.480190][ T31] schedule+0x164/0x360 [ 1353.490553][ T31] io_schedule+0x7f/0xd0 [ 1353.494833][ T31] folio_wait_bit_common+0x6d8/0xbc0 [ 1353.505150][T31344] bond2: option all_slaves_active: invalid value (222) [ 1353.512149][ T31] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 1353.518004][ T31] ? __pfx_wake_page_function+0x10/0x10 [ 1353.526062][ T31] ? __filemap_get_folio_mpol+0x81/0xb00 [ 1353.532712][ T31] __filemap_get_folio_mpol+0x13e/0xb00 [ 1353.538318][ T31] truncate_inode_pages_range+0x48b/0xe30 [ 1353.544556][ T31] ? finish_task_switch+0x240/0x920 [ 1353.550339][ T31] ? __pfx_truncate_inode_pages_range+0x10/0x10 [ 1353.556657][ T31] ? preempt_schedule_common+0x82/0xd0 [ 1353.562952][ T31] ? __pfx_invalidate_bh_lru+0x10/0x10 [ 1353.568431][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1353.573883][ T31] blkdev_flush_mapping+0x109/0x2f0 [ 1353.580882][ T31] bdev_release+0x417/0x650 [ 1353.585492][ T31] ? __pfx_blkdev_release+0x10/0x10 [ 1353.591126][ T31] blkdev_release+0x15/0x20 [ 1353.595771][ T31] __fput+0x44f/0xa70 [ 1353.600207][ T31] task_work_run+0x1d9/0x270 [ 1353.604867][ T31] ? __pfx_task_work_run+0x10/0x10 [ 1353.610372][ T31] ? do_raw_spin_unlock+0xf5/0x210 [ 1353.615514][ T31] do_exit+0x69b/0x2320 [ 1353.620152][ T31] ? __pfx_do_exit+0x10/0x10 [ 1353.624863][ T31] ? cgroup1_freezing+0x20/0x350 [ 1353.630154][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 1353.635651][ T31] do_group_exit+0x21b/0x2d0 [ 1353.641611][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1353.647031][ T31] get_signal+0x1284/0x1330 [ 1353.651870][ T31] arch_do_signal_or_restart+0xbc/0x830 [ 1353.657507][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1353.663866][ T31] ? ksys_read+0x1fc/0x270 [ 1353.668461][ T31] exit_to_user_mode_loop+0x86/0x480 [ 1353.673943][ T31] ? rcu_is_watching+0x15/0xb0 [ 1353.678735][ T31] do_syscall_64+0x32d/0xf80 [ 1353.683636][ T31] ? trace_irq_disable+0x3b/0x150 [ 1353.688693][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1353.695038][ T31] ? clear_bhb_loop+0x40/0x90 [ 1353.700388][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1353.706315][ T31] RIP: 0033:0x7f84060a7407 [ 1353.710843][ T31] RSP: 002b:00007fff6e597180 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 1353.719452][ T31] RAX: fffffffffffffffc RBX: 00007f8406752880 RCX: 00007f84060a7407 [ 1353.727452][ T31] RDX: 0000000000000200 RSI: 00007f8406751000 RDI: 0000000000000009 [ 1353.735530][ T31] RBP: 000055e9b1f61050 R08: 0000000000000000 R09: 0000000000000000 [ 1353.753363][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 1353.761576][ T31] R13: 0000000000000000 R14: 000055e9b1f6faa8 R15: 00007f840681739c [ 1353.769786][ T31] [ 1353.772838][ T31] INFO: task udevd:19768 blocked for more than 143 seconds. [ 1353.781648][T31344] bond2 (unregistering): Released all slaves [ 1353.799344][ T31] Not tainted syzkaller #0 [ 1353.804348][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1353.813416][ T31] task:udevd state:D stack:22496 pid:19768 tgid:19768 ppid:5191 task_flags:0x400040 flags:0x00080002 [ 1353.825623][ T31] Call Trace: [ 1353.828923][ T31] [ 1353.832177][ T31] __schedule+0x1585/0x5340 [ 1353.836758][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 1353.842206][ T31] ? __pfx___schedule+0x10/0x10 [ 1353.847546][ T31] ? schedule+0x90/0x360 [ 1353.851918][ T31] schedule+0x164/0x360 [ 1353.856187][ T31] io_schedule+0x7f/0xd0 [ 1353.860823][ T31] folio_wait_bit_common+0x6d8/0xbc0 [ 1353.866200][ T31] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 1353.872185][ T31] ? __pfx_wake_page_function+0x10/0x10 [ 1353.877766][ T31] ? __filemap_get_folio_mpol+0x7a9/0xb00 [ 1353.883644][ T31] do_read_cache_folio+0x1ad/0x590 [ 1353.888876][ T31] ? __pfx_blkdev_read_folio+0x10/0x10 [ 1353.894442][ T31] read_part_sector+0xb6/0x2b0 [ 1353.899691][ T31] adfspart_check_POWERTEC+0x92/0xef0 [ 1353.905219][ T31] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 1353.910877][ T31] ? __pfx_adfspart_check_POWERTEC+0x10/0x10 [ 1353.916897][ T31] bdev_disk_changed+0x7ba/0x1550 [ 1353.926692][ T31] ? bdev_open+0xe0/0xd30 [ 1353.931160][ T31] ? __pfx_bdev_disk_changed+0x10/0x10 [ 1353.936664][ T31] blkdev_get_whole+0x380/0x510 [ 1353.941972][ T31] ? disk_block_events+0xab/0x120 [ 1353.947220][ T31] bdev_open+0x31e/0xd30 [ 1353.951643][ T31] blkdev_open+0x470/0x610 [ 1353.956302][ T31] ? __pfx_blkdev_open+0x10/0x10 [ 1353.961527][ T31] do_dentry_open+0x785/0x14e0 [ 1353.966453][ T31] vfs_open+0x3b/0x340 [ 1353.970643][ T31] ? path_openat+0x2df0/0x3860 [ 1353.975430][ T31] path_openat+0x2e08/0x3860 [ 1353.981182][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 1353.986609][ T31] ? stack_depot_save_flags+0x33/0x810 [ 1353.992206][ T31] ? __pfx_path_openat+0x10/0x10 [ 1353.997165][ T31] ? __x64_sys_openat+0x138/0x170 [ 1354.003307][ T31] ? do_syscall_64+0x14d/0xf80 [ 1354.008094][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1354.014290][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 1354.019428][ T31] do_file_open+0x23e/0x4a0 [ 1354.023982][ T31] ? __pfx_do_file_open+0x10/0x10 [ 1354.029018][ T31] ? _raw_spin_unlock+0x28/0x50 [ 1354.034134][ T31] ? alloc_fd+0x64b/0x6c0 [ 1354.038501][ T31] do_sys_openat2+0x113/0x200 [ 1354.043365][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 1354.048612][ T31] ? exc_page_fault+0x6a/0xc0 [ 1354.053396][ T31] ? do_user_addr_fault+0xc6f/0x1340 [ 1354.058715][ T31] __x64_sys_openat+0x138/0x170 [ 1354.063751][ T31] do_syscall_64+0x14d/0xf80 [ 1354.068381][ T31] ? trace_irq_disable+0x3b/0x150 [ 1354.073782][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1354.080366][ T31] ? clear_bhb_loop+0x40/0x90 [ 1354.085088][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1354.091136][ T31] RIP: 0033:0x7f84060a7407 [ 1354.095766][ T31] RSP: 002b:00007fff6e5972e0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1354.104446][ T31] RAX: ffffffffffffffda RBX: 00007f8406752880 RCX: 00007f84060a7407 [ 1354.112536][ T31] RDX: 0000000000080000 RSI: 000055e9b1f68ab0 RDI: ffffffffffffff9c [ 1354.120642][ T31] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 1354.128618][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 000055e98078e95f [ 1354.136679][ T31] R13: 000055e98079f660 R14: 0000000000000000 R15: 00000000ffffffff [ 1354.144849][ T31] [ 1354.147960][ T31] [ 1354.147960][ T31] Showing all locks held in the system: [ 1354.155961][ T31] 1 lock held by khungtaskd/31: [ 1354.161843][ T31] #0: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1354.175315][ T31] 1 lock held by syslogd/5173: [ 1354.180369][ T31] 2 locks held by getty/5577: [ 1354.185143][ T31] #0: ffff8880367280a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1354.195637][ T31] #1: ffffc900033332f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 1354.205999][ T31] 3 locks held by kworker/u8:10/11314: [ 1354.211529][ T31] #0: ffff88813fe4c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 1354.223441][ T31] #1: ffffc90002fefc40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 1354.234699][ T31] #2: ffffffff8fbcc908 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 1354.240487][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1354.244721][ T31] 1 lock held by udevd/19756: [ 1354.255371][ T31] #0: ffff88802623e358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x1a9/0x650 [ 1354.265397][ T31] 3 locks held by kworker/u9:1/19767: [ 1354.270929][ T31] #0: ffff888065196948 ((wq_completion)hci5){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 1354.281962][ T31] #1: ffffc900054d7c40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 1354.294678][ T31] #2: ffff8880368d4ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d3/0x400 [ 1354.304803][ T31] 1 lock held by udevd/19768: [ 1354.309703][ T31] #0: ffff8880268fa358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 1354.319007][ T31] 1 lock held by udevd/20209: [ 1354.324010][ T31] #0: ffff8880268fe358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 1354.333486][ T31] 2 locks held by syz.2.22608/31329: [ 1354.338784][ T31] #0: ffffffff8fbcc908 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 1354.347924][ T31] #1: ffffffff8e766578 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 1354.359046][ T31] 2 locks held by syz.1.22615/31344: [ 1354.364503][ T31] #0: ffffffff9011c080 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 1354.374356][ T31] #1: ffffffff8e766440 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 1354.384474][ T31] 2 locks held by syz.4.22616/31346: [ 1354.389901][ T31] #0: ffff8880589a0d88 (&sb->s_type->i_mutex_key#14){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 1354.400454][ T31] #1: ffffffff8e766578 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 1354.411546][ T31] [ 1354.414109][ T31] ============================================= [ 1354.414109][ T31] [ 1354.425942][ T31] NMI backtrace for cpu 1 [ 1354.425960][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1354.425981][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1354.425991][ T31] Call Trace: [ 1354.426000][ T31] [ 1354.426007][ T31] dump_stack_lvl+0xe8/0x150 [ 1354.426038][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 1354.426142][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1354.426168][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1354.426191][ T31] sys_info+0x135/0x170 [ 1354.426207][ T31] watchdog+0xfd9/0x1030 [ 1354.426253][ T31] ? watchdog+0x21a/0x1030 [ 1354.426289][ T31] kthread+0x388/0x470 [ 1354.426307][ T31] ? __pfx_watchdog+0x10/0x10 [ 1354.426337][ T31] ? __pfx_kthread+0x10/0x10 [ 1354.426355][ T31] ret_from_fork+0x51e/0xb90 [ 1354.426392][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1354.426415][ T31] ? __switch_to+0xc7d/0x1450 [ 1354.426435][ T31] ? __pfx_kthread+0x10/0x10 [ 1354.426448][ T31] ret_from_fork_asm+0x1a/0x30 [ 1354.426486][ T31] [ 1354.426496][ T31] Sending NMI from CPU 1 to CPUs 0: [ 1354.537719][ C0] NMI backtrace for cpu 0 [ 1354.537739][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 1354.537756][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1354.537766][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1354.537797][ C0] Code: 7e 6d 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 1d 1c 00 fb f4 7c ea 02 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 1354.537811][ C0] RSP: 0018:ffffffff8e407dc0 EFLAGS: 00000246 [ 1354.537826][ C0] RAX: 00000000003f8611 RBX: ffffffff819a80dd RCX: 0000000080000001 [ 1354.537838][ C0] RDX: 0000000000000001 RSI: ffffffff8def2c4d RDI: ffffffff8c27aa00 [ 1354.537849][ C0] RBP: ffffffff8e407eb0 R08: ffff8880b863395b R09: 1ffff110170c672b [ 1354.537861][ C0] R10: dffffc0000000000 R11: ffffed10170c672c R12: ffffffff901186b0 [ 1354.537872][ C0] R13: 1ffffffff1c929d8 R14: 0000000000000000 R15: 0000000000000000 [ 1354.537883][ C0] FS: 0000000000000000(0000) GS:ffff888125464000(0000) knlGS:0000000000000000 [ 1354.537896][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1354.537907][ C0] CR2: 00007fefebbe6158 CR3: 0000000075ae0000 CR4: 00000000003526f0 [ 1354.537922][ C0] Call Trace: [ 1354.537930][ C0] [ 1354.537937][ C0] default_idle+0x9/0x20 [ 1354.537953][ C0] default_idle_call+0x72/0xb0 [ 1354.537971][ C0] do_idle+0x1bd/0x500 [ 1354.537995][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 1354.538022][ C0] ? __pfx_do_idle+0x10/0x10 [ 1354.538050][ C0] cpu_startup_entry+0x43/0x60 [ 1354.538073][ C0] rest_init+0x2de/0x300 [ 1354.538091][ C0] start_kernel+0x385/0x3d0 [ 1354.538122][ C0] x86_64_start_reservations+0x24/0x30 [ 1354.538210][ C0] x86_64_start_kernel+0x143/0x1c0 [ 1354.538228][ C0] common_startup_64+0x13e/0x147 [ 1354.538253][ C0] [ 1354.719878][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1354.726749][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1354.735868][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1354.745926][ T31] Call Trace: [ 1354.749210][ T31] [ 1354.752228][ T31] vpanic+0x56c/0xa60 [ 1354.756217][ T31] ? __pfx___schedule+0x10/0x10 [ 1354.761073][ T31] ? __pfx_vpanic+0x10/0x10 [ 1354.765666][ T31] ? __pfx_console_unlock+0x10/0x10 [ 1354.770870][ T31] panic+0xc5/0xd0 [ 1354.774594][ T31] ? __pfx_panic+0x10/0x10 [ 1354.779009][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1354.784419][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1354.790591][ T31] watchdog+0x1023/0x1030 [ 1354.794964][ T31] ? watchdog+0x21a/0x1030 [ 1354.799425][ T31] kthread+0x388/0x470 [ 1354.803513][ T31] ? __pfx_watchdog+0x10/0x10 [ 1354.808203][ T31] ? __pfx_kthread+0x10/0x10 [ 1354.812804][ T31] ret_from_fork+0x51e/0xb90 [ 1354.817416][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1354.822636][ T31] ? __switch_to+0xc7d/0x1450 [ 1354.827350][ T31] ? __pfx_kthread+0x10/0x10 [ 1354.831957][ T31] ret_from_fork_asm+0x1a/0x30 [ 1354.836746][ T31] [ 1354.840072][ T31] Kernel Offset: disabled [ 1354.844398][ T31] Rebooting in 86400 seconds..