last executing test programs: 2m12.647446884s ago: executing program 0 (id=2149): socket$alg(0x26, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000000)) socket$xdp(0x2c, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 2m12.31716145s ago: executing program 0 (id=2152): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000000540)={0xbe4, 0x0, 0x200, 0x70bd2a, 0xdb, {}, [@ETHTOOL_A_WOL_HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}]}, @ETHTOOL_A_WOL_MODES={0xb60, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xe1, 0x4, "d59a7ce14ea9067bafc869f7175b48b861a797895d022655c38d89cb5b52e82b5f31d39492b8c0759a9cbe00ebca3a9548a53b6bf0e97de4d5b2e262c7dd6e3de60de1bab7a6ba4e9c09c0f59e3ea74977717bdd72ad1be521da97e7861cd0550307f23d92f3810be7fa078a93f11c901e8b77a32d71f1ad5b36615e4b3bf0272c746b7c3bf826615ca7206a231db673c04575993a530c667e633b73b6843b4fa89beec27a356b951302de983cdab6a81cce4a9a44996ab0dd7bcb5a8d790447f3e6e3b80eaa4b2d29babed4dd64fa9ab8be94db75ab9f177cfcdc5857"}, @ETHTOOL_A_BITSET_BITS={0x8c, 0x3, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x4}, {0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '^&\'C*\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '/\'\'$@.{\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'syz2\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x14}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_VALUE={0xa1, 0x4, "c5ef8f7b00fb9ce6aab74eb29e6c4009b34ee2824426443e32a3a7cdb5565cbd10bfc285a439a027c6e0eb993e7cb410aa7da0f2a2b6b0446db7205f08e2c078eb2934e43055208bca8d26552f487c1201e95adf9f89f780cfd76bd23a1ec2db5d400eaae1262e24a725e86f2218a372c20a66a7ba32316b87f98f2bb4fac4eebd11a9ce35af64e5e4073c46ae7b6ee48fed15d692d05367836cf0b3d9"}, @ETHTOOL_A_BITSET_VALUE={0x942, 0x4, "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"}]}]}, 0xbe4}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 2m12.049723212s ago: executing program 0 (id=2157): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000280)=@base={0xa, 0x5, 0x4, 0x7b}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000140)=@framed={{0x18, 0x8, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0xfff8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x69}, @initr0={0x18, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0, 0x0, 0xffffffd0}, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0xa0ffffff, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) 2m11.550553614s ago: executing program 4 (id=2158): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x5, 0x0, 0x0, &(0x7f0000000380)='syzkaller\x00', 0x8001000d, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf91}, 0x94) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_icmp(0x2, 0x2, 0x1) sendmmsg$inet(r2, &(0x7f0000000340)=[{{&(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000400)='\b\x00\x00\x00(\x00\x00\x00', 0x8}], 0x1}}, {{&(0x7f0000000480)={0x11, 0x4e21, @loopback}, 0x10, &(0x7f0000000780)=[{&(0x7f0000000440)="08000000001f009e", 0x8}], 0x1}}], 0x2, 0x40444c4) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x1000}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000012c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xd}}, [@filter_kind_options=@f_flow={{0x9}, {0x8, 0x2, [@TCA_FLOW_POLICE={0x4}]}}]}, 0x38}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x6c, r8, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x34}}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x6c}}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x9c, r8, 0x8, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x38, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x96}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x800}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xc207}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7ff}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffffa}]}, @TIPC_NLA_SOCK={0x4}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x69}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xdb}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x200448c0}, 0x20004005) ioctl(r5, 0x8b2a, &(0x7f0000000040)) 2m11.485428652s ago: executing program 0 (id=2159): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0xaf}]}, &(0x7f00000004c0)='GPL\x00', 0x4, 0x5, &(0x7f0000000500)=""/5, 0x40f00, 0x2f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x1800, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7429}, 0x94) 2m11.485180397s ago: executing program 1 (id=2160): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5", 0x0, 0x0, 0x0, 0x3}, 0x3c) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000000), 0x4) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, &(0x7f0000000100)={@multicast2, @multicast1, 0x0, "c6c0e6ec8755b5dc4e305886d95f086707764f8d0e5a0358ea21274f844a69e9", 0x9, 0x201, 0x489c, 0x6}, 0x3c) 2m10.9378495s ago: executing program 1 (id=2163): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x34}}, 0x0) syz_emit_ethernet(0x16e, &(0x7f0000000540)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x138, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @param_prob={0x4, 0x1, 0x0, 0x2, {0x9, 0x6, "c76b72", 0x5, 0x11, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @private2, [@hopopts={0x6c, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x7}, @enc_lim={0x4, 0x1, 0x7}]}, @hopopts={0x33}, @routing={0x32, 0x6, 0x2, 0x2f, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}]}, @hopopts={0x20}, @routing={0x21, 0x14, 0x1, 0x6, 0x0, [@private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @dev={0xfe, 0x80, '\x00', 0x2c}, @ipv4={'\x00', '\xff\xff', @broadcast}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}], "96b24e2389907a94"}}}}}}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000e80)=ANY=[@ANYBLOB="1465acd700000001080103000000000000000000"], 0x14}}, 0x0) recvmmsg(r0, &(0x7f00000020c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) unshare(0x400) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r2, 0x6, 0x23, &(0x7f0000000040)=""/40, &(0x7f0000000080)=0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x20, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x7}}}}]}]}, 0x70}}, 0x20040000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r4], 0x90}}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001040)=[{{0x0, 0x0, &(0x7f0000002280)=[{&(0x7f0000001680)="1a", 0x1}], 0x1}}], 0x1, 0x931766f6159e6d55) sendmmsg(r1, &(0x7f0000001c00), 0x400000000000159, 0x40840) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="09000000170000000a00000040"], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={&(0x7f0000000040), 0x0, 0x0, 0x0, 0x2000, r5}, 0x38) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000000200)=0x237a, 0x4) setsockopt$SO_TIMESTAMP(r6, 0x1, 0x3f, &(0x7f0000000700)=0xebb4, 0x4) setsockopt$inet6_int(r6, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r6, &(0x7f0000003fc0), 0x0, 0x0) recvmmsg(r6, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/104, 0x5f}}], 0x4000008, 0x40012041, 0x0) 2m4.969576105s ago: executing program 0 (id=2164): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="2e00ef001000818803b62aa73772cc9f1ba1f848430000005e1446ca000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x8004) 2m3.150496447s ago: executing program 4 (id=2165): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)=ANY=[@ANYBLOB="140000001000010000000000000000140000000a20000000000a01020000000000000000010000000900010073797a30000000e46b000000160a01000000000000000000010000010900010073797a30000000000900020073797a30000000004000038008000140000000002c0003801400010069703665727370616e300000000000001400010067726530000000000000000000000000080002400000000648000000180a0101000b000000000000010000000900010073797a30000000001c000380180003801400010069703665727370616e30000000000000090002007379"], 0xfc}}, 0x0) 2m2.183920484s ago: executing program 1 (id=2166): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xf, 0x4010, r0, 0x83053000) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x7, 0x40010, r0, 0xf241e000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r1) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'gre0\x00', &(0x7f00000000c0)={'ip_vti0\x00', 0x0, 0x1, 0x20, 0x205a6fd4, 0x60000000, {{0x11, 0x4, 0x2, 0x0, 0x44, 0x64, 0x0, 0x0, 0x4, 0x0, @loopback, @broadcast, {[@rr={0x7, 0x2b, 0x56, [@multicast2, @empty, @rand_addr=0x64010100, @local, @multicast2, @multicast1, @remote, @broadcast, @rand_addr=0x64010102, @broadcast]}, @ra={0x94, 0x4}]}}}}}) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, r2, 0x300, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}, @BATADV_ATTR_VLANID={0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x800) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x1ff) r4 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev}, &(0x7f00000002c0)=0x1c, 0x81800) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x9, 0x3, 0x320, 0x0, 0xffffffff, 0xffffffff, 0x118, 0xffffffff, 0x250, 0xffffffff, 0xffffffff, 0x250, 0xffffffff, 0x3, &(0x7f0000000300), {[{{@ipv6={@loopback, @private0, [0xffffff00, 0xffffff00, 0xffffffff], [0xffffff00, 0xffffff, 0xff, 0xffffff00], 'ip6_vti0\x00', 'nr0\x00', {0xff}, {}, 0x32, 0x40, 0x6, 0x50}, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x9, 0x7, 0x1, 0x1, 0x0, "47bc90e34c761b477d2b0f7d9a6ece9728f45aee5a16f65f0a8e0a3c2e1962309cfb6c0f80ee1c7cdf198ec48e5d556f43c28fb9e68783870f71b0f8cd3a10ec"}}}, {{@ipv6={@mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x101000000, 0xffffffff, 0xffffffff, 0xff], [0xff000000, 0xffffff00, 0xff000000, 0xffffff00], 'sit0\x00', 'pimreg\x00', {0xff}, {}, 0x33, 0x5, 0x2, 0x4}, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x20, 0x7, 0x3, 0x85, 'pptp\x00', 'syz0\x00', {0x7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) splice(r1, &(0x7f00000006c0)=0xfffffffffffff800, 0xffffffffffffffff, &(0x7f0000000700), 0x40000000000000, 0x2) ioctl$XFS_IOC_FSGEOMETRY_V4(r0, 0x8070587c, &(0x7f0000000740)) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket(0x11, 0x5, 0x4abaee4b) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000800), r1) sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x1c, r6, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5, 0xb, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x58890) r7 = socket$xdp(0x2c, 0x3, 0x0) r8 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000900)='syz0\x00', 0x200002, 0x0) r9 = openat$cgroup_procs(r8, &(0x7f0000000940)='tasks\x00', 0x2, 0x0) sendmsg$nl_route(r5, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)=@bridge_delvlan={0x7c, 0x71, 0x10, 0x70bd25, 0x25dfdbfb, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_CMD={0x8, 0x2, 0x13}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x1}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x4}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x7}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0x6}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x9}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0x1}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4040815}, 0x85) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000bc0)={0x0, 0xdc, &(0x7f0000000ac0)=[@in6={0xa, 0x4e21, 0x2, @local}, @in={0x2, 0x4e21, @empty}, @in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x4e22, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2}, @in6={0xa, 0x4e24, 0x7fffffff, @mcast2, 0x7}, @in={0x2, 0x4e23, @rand_addr=0x64010100}, @in={0x2, 0x4e21, @rand_addr=0x64010102}, @in6={0xa, 0x4e22, 0x100, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, @in6={0xa, 0x4e24, 0x9, @rand_addr=' \x01\x00', 0x1}, @in={0x2, 0x4e24, @local}]}, &(0x7f0000000c00)=0x10) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000c40)={r10}, 0x8) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000c80)=0x624, 0x4) ioctl$XFS_IOC_PATH_TO_HANDLE(r7, 0xc0385869, &(0x7f0000000dc0)={r9, &(0x7f0000000cc0)='nr0\x00', 0x2000, &(0x7f0000000d00)={@align=0xdf63, {0x4, 0xfff4, 0xf, 0xa0}}, 0x13, &(0x7f0000000d40), &(0x7f0000000d80)=0x9}) ioctl$EXT4_IOC_GETFSUUID(r1, 0x8008662c, &(0x7f0000000e00)) unshare(0x0) ioctl$OCFS2_IOC_GROUP_ADD(r11, 0x40186f02, &(0x7f0000000e40)={0x3, 0x1, 0xc35, 0x2}) r12 = socket$rds(0x15, 0x5, 0x0) getsockopt$sock_linger(r12, 0x1, 0xd, &(0x7f0000000e80), &(0x7f0000000ec0)=0x8) getsockopt$bt_hci(r11, 0x0, 0x3, &(0x7f0000000f00)=""/53, &(0x7f0000000f40)=0x35) 1m58.242605467s ago: executing program 0 (id=2169): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r1) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x437, 0x800000, 0x0, {0x0, 0x0, 0x0, r4, 0x504c3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp6}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)={0x24, r2, 0x1, 0x70bd28, 0xe, {}, [@GTPA_LINK={0x8, 0x1, r4}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x44800}, 0x20000000) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20, 0x29, 0x1}, 0x20}}, 0x0) 1m54.057412027s ago: executing program 4 (id=2170): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x7, 0x0, 0x0, 0x0, 0x63, 0x11, 0x7e}, [@ldst={0x7}], {0x95, 0x0, 0x0, 0x197a12}}, &(0x7f0000003ff6)='GPL\x00', 0x8, 0xb579, &(0x7f000000cf3d)=""/195}, 0x23) 1m53.012910949s ago: executing program 1 (id=2171): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_REMOVE(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x268}, 0x1, 0x0, 0x0, 0x8040}, 0x8800) 1m49.909249753s ago: executing program 1 (id=2173): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5", 0x0, 0x0, 0x0, 0x3}, 0x3c) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, &(0x7f0000000100)={@multicast2, @multicast1, 0x0, "c6c0e6ec8755b5dc4e305886d95f086707764f8d0e5a0358ea21274f844a69e9", 0x9, 0x201, 0x489c, 0x6}, 0x3c) 1m49.659195296s ago: executing program 4 (id=2175): r0 = socket(0x1d, 0x80802, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r1, 0x1, {0x0, 0xf0, 0x4}, 0xfe}, 0x18) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) write(r0, 0x0, 0x0) 1m44.91979333s ago: executing program 1 (id=2177): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r6, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r7, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r9) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x403, 0x78bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r11}]}, 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0) r12 = socket(0x10, 0x3, 0x0) sendmmsg(r12, &(0x7f0000000000), 0x400000000000235, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r7], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r13, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x4044000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x400, 0x0, {0x0, 0x0, 0x0, r13, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x0, 0x1}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x4}}}}]}, 0x78}}, 0x48080) r14 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000001000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r1}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r14, r1, 0x25, 0x2, @void}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) socket$can_j1939(0x1d, 0x2, 0x7) 1m43.285431381s ago: executing program 3 (id=2178): socket$alg(0x26, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000000)) socket$xdp(0x2c, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="6400000010000304000000000000000000000021", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 1m40.963935392s ago: executing program 32 (id=2169): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r1) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x437, 0x800000, 0x0, {0x0, 0x0, 0x0, r4, 0x504c3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp6}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)={0x24, r2, 0x1, 0x70bd28, 0xe, {}, [@GTPA_LINK={0x8, 0x1, r4}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x44800}, 0x20000000) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20, 0x29, 0x1}, 0x20}}, 0x0) 1m39.971307729s ago: executing program 4 (id=2181): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000005e40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c000280080001400000000d050003000100000008000240000000010900010073797a30000000000900020073797a32"], 0x56f8}}, 0x0) r1 = socket(0x10, 0x3, 0x0) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000000080), &(0x7f00000000c0)=0x4) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) write(r1, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r1) 1m31.652171133s ago: executing program 3 (id=2182): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000000540)={0xbe4, 0x0, 0x200, 0x70bd2a, 0xdb, {}, [@ETHTOOL_A_WOL_HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}]}, @ETHTOOL_A_WOL_MODES={0xb60, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xe1, 0x4, "d59a7ce14ea9067bafc869f7175b48b861a797895d022655c38d89cb5b52e82b5f31d39492b8c0759a9cbe00ebca3a9548a53b6bf0e97de4d5b2e262c7dd6e3de60de1bab7a6ba4e9c09c0f59e3ea74977717bdd72ad1be521da97e7861cd0550307f23d92f3810be7fa078a93f11c901e8b77a32d71f1ad5b36615e4b3bf0272c746b7c3bf826615ca7206a231db673c04575993a530c667e633b73b6843b4fa89beec27a356b951302de983cdab6a81cce4a9a44996ab0dd7bcb5a8d790447f3e6e3b80eaa4b2d29babed4dd64fa9ab8be94db75ab9f177cfcdc5857"}, @ETHTOOL_A_BITSET_BITS={0x8c, 0x3, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x4}, {0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '^&\'C*\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '/\'\'$@.{\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'syz2\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x14}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_VALUE={0xa1, 0x4, "c5ef8f7b00fb9ce6aab74eb29e6c4009b34ee2824426443e32a3a7cdb5565cbd10bfc285a439a027c6e0eb993e7cb410aa7da0f2a2b6b0446db7205f08e2c078eb2934e43055208bca8d26552f487c1201e95adf9f89f780cfd76bd23a1ec2db5d400eaae1262e24a725e86f2218a372c20a66a7ba32316b87f98f2bb4fac4eebd11a9ce35af64e5e4073c46ae7b6ee48fed15d692d05367836cf0b3d9"}, @ETHTOOL_A_BITSET_VALUE={0x942, 0x4, "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"}]}]}, 0xbe4}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1m27.838862161s ago: executing program 33 (id=2177): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r6, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r7, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r9) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x403, 0x78bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r11}]}, 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0) r12 = socket(0x10, 0x3, 0x0) sendmmsg(r12, &(0x7f0000000000), 0x400000000000235, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r7], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r13, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x4044000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x400, 0x0, {0x0, 0x0, 0x0, r13, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x0, 0x1}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x4}}}}]}, 0x78}}, 0x48080) r14 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000001000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r1}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r14, r1, 0x25, 0x2, @void}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) socket$can_j1939(0x1d, 0x2, 0x7) 1m27.212056668s ago: executing program 4 (id=2185): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000370400000000ffdbdf2500000000161b563b0ed71b71b03f592395f1cda7e210209dce88c283cac58056f541461ad746150134957933f660e0442c029bd9c80a543913e82cd4df6137b4b287ba4965c53683f8fddf1dc372f13e2a3953decaa7a4fd38cedc1fb62aa2bbe87d0be13876c49d624596e00734add30ee0f85f3c4480e668ca61ac", @ANYRES32=0x0, @ANYBLOB="83650700010000002400128009000100697069700000000014000280050009000000000008000300ac1414aa"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x44) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r1) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x14, r2, 0x10, 0x34000000, 0xfffffffc, {0x6, 0x0, 0x900}, [@NLBL_UNLABEL_A_ACPTFLG={0xfffffe03, 0x1, 0x1}]}, 0x4e}, 0x2, 0x34005, 0x0, 0x7f08bf1ae1b3e3a5}, 0x46) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000300)={'syztnl0\x00', 0x0, 0x2f, 0x0, 0xc, 0x1200, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, @private0, 0x40, 0x8000, 0x80000001, 0x8001}}) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000400)={0xffffffffffffffff, 0x1, 0xad, r3, 0xe}, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000240), r1) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f00000005c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYBLOB='D\x00 \x00', @ANYRES16=r4, @ANYBLOB="00082dbd7000fedbdf250400000014000300fe88000000000000000000000000010108000400ac1414aa1400060070696d36726567000000000000000000"], 0x44}, 0x1, 0x0, 0x0, 0x200080d1}, 0x4000080) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r5, &(0x7f0000000780)}, 0x20) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) getsockname$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000080)={0x84, @private=0xa010101, 0x15, 0x3, 'sh\x00', 0x28, 0x5, 0x72}, 0x2c) gettid() r7 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r7, 0x0, 0x200008c0) sendmsg$kcm(r7, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e20, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@loopback, 0x4e20, 0x10000, 0x2, 0x2}}, 0x44) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r8, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x4000040) 1m26.245100161s ago: executing program 3 (id=2186): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000002c0)=@framed={{0x18, 0x8}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x301}, @alu={0x7, 0x1, 0xb, 0x0, 0x0, 0x8}]}, &(0x7f0000000000)='GPL\x00', 0x8}, 0x94) 1m21.876581849s ago: executing program 3 (id=2187): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f00000004c0)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@assoc={0x18, 0x117, 0x4, 0x6}], 0x18, 0x80}], 0x1, 0x48800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000600)=""/89, 0x7ffff061}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f000009f580), r2) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000041fffff900000000080000009111ab000000000095"], &(0x7f0000000140)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x1}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x9}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x4) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYRES16=r5, @ANYRES32=r4], 0x1c}}, 0x0) 1m15.476380689s ago: executing program 3 (id=2189): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc0}}, 0x0) 1m10.625423934s ago: executing program 34 (id=2185): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000370400000000ffdbdf2500000000161b563b0ed71b71b03f592395f1cda7e210209dce88c283cac58056f541461ad746150134957933f660e0442c029bd9c80a543913e82cd4df6137b4b287ba4965c53683f8fddf1dc372f13e2a3953decaa7a4fd38cedc1fb62aa2bbe87d0be13876c49d624596e00734add30ee0f85f3c4480e668ca61ac", @ANYRES32=0x0, @ANYBLOB="83650700010000002400128009000100697069700000000014000280050009000000000008000300ac1414aa"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x44) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r1) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x14, r2, 0x10, 0x34000000, 0xfffffffc, {0x6, 0x0, 0x900}, [@NLBL_UNLABEL_A_ACPTFLG={0xfffffe03, 0x1, 0x1}]}, 0x4e}, 0x2, 0x34005, 0x0, 0x7f08bf1ae1b3e3a5}, 0x46) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000300)={'syztnl0\x00', 0x0, 0x2f, 0x0, 0xc, 0x1200, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, @private0, 0x40, 0x8000, 0x80000001, 0x8001}}) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000400)={0xffffffffffffffff, 0x1, 0xad, r3, 0xe}, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000240), r1) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f00000005c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYBLOB='D\x00 \x00', @ANYRES16=r4, @ANYBLOB="00082dbd7000fedbdf250400000014000300fe88000000000000000000000000010108000400ac1414aa1400060070696d36726567000000000000000000"], 0x44}, 0x1, 0x0, 0x0, 0x200080d1}, 0x4000080) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r5, &(0x7f0000000780)}, 0x20) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) getsockname$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000080)={0x84, @private=0xa010101, 0x15, 0x3, 'sh\x00', 0x28, 0x5, 0x72}, 0x2c) gettid() r7 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r7, 0x0, 0x200008c0) sendmsg$kcm(r7, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e20, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@loopback, 0x4e20, 0x10000, 0x2, 0x2}}, 0x44) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r8, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x4000040) 1m9.583947374s ago: executing program 3 (id=2191): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x1, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000080)={'wg0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x4, 0x8a, 0x1, 0x800, 0x40, @loopback, @ipv4={'\x00', '\xff\xff', @empty}, 0x8, 0x20, 0xe07, 0x7f}}) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000280)={r6, 0x2, 0x6, @local}, 0x6b) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000080)={r6, 0x1, 0x6, @local}, 0x10) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r8, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r8, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0x7000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) close(0x3) r9 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r9, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000300)=0x0, &(0x7f0000000340)=0x4) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="d8000000540000022bbd7000ffdbdf2507000000", @ANYRES32=r2, @ANYBLOB="20f200", @ANYRES32=r10, @ANYBLOB="00010000fe8000000000000000000000000000bb86dd000020000100", @ANYRES32=r3, @ANYBLOB="00020500e00000020000000000000000000000008edd000020000100", @ANYRES32=0x0, @ANYBLOB="01d2c7374b8000000000000000000000040000aa000000002000010028e15b97fa16779e3c1787f6df03ec2cf05bf4e1eb3b8fbed436863a5751049073650d230700000000000000e6f3ddb21be14f089e42dfb9d229f1522fdc57be1c68561693798c429e6e5aafca304a484bfa90382500100fcddf9c68247aefccecddf79df296cd172edfdd146490ca116633999637b3", @ANYRESOCT=r4, @ANYBLOB="00000400640101000000000000000000000000008edd000020000100", @ANYRES32=r6, @ANYBLOB="01010000fc0100000000000000000000000000008edd000020000100", @ANYRES32=r10, @ANYBLOB="01020400e00000020000000000000000000000008edd0000"], 0xd8}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) 1m6.71647236s ago: executing program 2 (id=2192): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f0000004d40)=[{&(0x7f00000000c0)=""/60, 0x3c}, {0x0}], 0x2}, 0x2}], 0x1, 0x10000, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa23aaaaaaaaaabb0800450000b00000000000119078000000000000000000004e20009c907801000000000000007b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bc4e66d4fbe40a23424dbcfd56f1374061caaa2f19935e6996c7096ffeeb03000000000000649a3bfbc1d19cb307b3472ab9cdb042d2643fcbb2c5a57df67d074af6e8da"], 0x0) ioctl$sock_netdev_private(0xffffffffffffffff, 0x89fb, &(0x7f00000003c0)="e5fec97e5ed3b0b1c59e0865bcf581f868f589ed7724b7307c918f88ed2c764d10f366e42686b6b78e355c52c96250dfd1b974fd5d8a2eecab678535bcec66c16c18345453cabf4f262b79d54e54d579ba7f743499c76f5319d9baba62670fc19b5b6ed0634d0fbbba9922a923a44159ac06a75199237609678aa422e3afa55badca5da32fd138f09c7c3692eb66a6e3cba184cc89b526c32a7393b1beab7cfac92c97e9ac5cd2ab54ac67834614aa499a3c19ea38515959249337f0") bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000007300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000006200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtaction={0xc8, 0x30, 0x51b, 0x0, 0x0, {}, [{0xb4, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x5}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}, @m_skbmod={0x54, 0x2, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x1, 0x4, 0x10000000, 0x0, 0x6}, 0x6}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0xe4}, 0x0) 52.619479559s ago: executing program 35 (id=2191): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x1, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000080)={'wg0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x4, 0x8a, 0x1, 0x800, 0x40, @loopback, @ipv4={'\x00', '\xff\xff', @empty}, 0x8, 0x20, 0xe07, 0x7f}}) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000280)={r6, 0x2, 0x6, @local}, 0x6b) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000080)={r6, 0x1, 0x6, @local}, 0x10) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r8, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r8, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0x7000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) close(0x3) r9 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r9, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000300)=0x0, &(0x7f0000000340)=0x4) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="d8000000540000022bbd7000ffdbdf2507000000", @ANYRES32=r2, @ANYBLOB="20f200", @ANYRES32=r10, @ANYBLOB="00010000fe8000000000000000000000000000bb86dd000020000100", @ANYRES32=r3, @ANYBLOB="00020500e00000020000000000000000000000008edd000020000100", @ANYRES32=0x0, @ANYBLOB="01d2c7374b8000000000000000000000040000aa000000002000010028e15b97fa16779e3c1787f6df03ec2cf05bf4e1eb3b8fbed436863a5751049073650d230700000000000000e6f3ddb21be14f089e42dfb9d229f1522fdc57be1c68561693798c429e6e5aafca304a484bfa90382500100fcddf9c68247aefccecddf79df296cd172edfdd146490ca116633999637b3", @ANYRESOCT=r4, @ANYBLOB="00000400640101000000000000000000000000008edd000020000100", @ANYRES32=r6, @ANYBLOB="01010000fc0100000000000000000000000000008edd000020000100", @ANYRES32=r10, @ANYBLOB="01020400e00000020000000000000000000000008edd0000"], 0xd8}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) 52.4008741s ago: executing program 2 (id=2194): socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0xe0}}, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) write$tun(0xffffffffffffffff, 0x0, 0xda) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x0, 0x0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e6574000000000c00078008000640"], 0x5c}}, 0x20084884) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe80000000000000000000000000f4aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x300, 0x0, 0x10040003}, 0x0) 46.476877975s ago: executing program 2 (id=2195): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000100001000000001b000000000300000a28000000000a050000000000000000000100000208000240000000040900010073797a300000000028000000000a01040000000000000000010000040900010073797a30000000000800024000000006"], 0x78}, 0x1, 0x0, 0x0, 0x24040010}, 0x20000080) 35.966477362s ago: executing program 2 (id=2196): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000ec0)=@raw={'raw\x00', 0x8, 0x3, 0x6e8, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x618, 0xffffffff, 0xffffffff, 0x618, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x330, 0x358, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', {0x6}}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0xc4, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0xffffffffffffffff, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x8000, 0x16a, 0x1, 'syz1\x00', 'syz0\x00', {0x80000001}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x748) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f00000004c0)=[@in={0x2, 0x4e22, @rand_addr=0x64010101}], 0x10) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x73, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0x10}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}, 0x0, 0x0, 0x0, 0x0, 0x5}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x3504, 0x0, 0x3, 0x73, 0x0, 0x0, 0x10000000}]}]}, 0xfc}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYRES16=r0, @ANYRES32=r3], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=ANY=[@ANYBLOB="ec000000210001000000000000000000fc02000000000000000000000000dfffffff000000000000000a0000000000000000000000f700"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100ac14140c000000000000000000000000fc000000000000000000000000000001fc020000000000000000000000000000fe8000000000000000000000000000aa33000000ffffffff0200020000000000000000000000ffff7f000001fc020000000000000000000000000000fc020000000000000000000000000001fc0200000000000000000000000000003c000000000000000a000200"], 0xec}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x24, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000ffffffff00000000fdffffff18110000", @ANYRES32=r2, @ANYBLOB="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", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a5000000184800000700000000000000000000008510000008000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e20}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x40800) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) close(r7) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r8, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) shutdown(r7, 0x0) socket$inet(0x2, 0x2, 0x1) r9 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt(0xffffffffffffffff, 0xff, 0xffffffc0, 0x0, 0x0) bind$inet(r9, &(0x7f0000000080)={0x2, 0x4e22, @local}, 0x10) sendmmsg$inet_sctp(r9, &(0x7f0000004900)=[{&(0x7f00000000c0)=@in={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000100)="f4", 0x1a000}], 0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000008400000007000000ac1414bb000000008ce579477c3f656124cacbfb851947e33c8a736ea2760104b3552504fb5558e9678b5478c89b7eacb4e434b2169e901e29bbf77a1811dae0f10bf12aeb4a2bdd39bfb01826c51a379c4f683fb3e19fb15bde42d21e0d13f901cf8b7d914199a287eb61e0320000000000000000"], 0x18}], 0x1, 0x0) socket$isdn_base(0x22, 0x3, 0x0) 23.423054506s ago: executing program 2 (id=2197): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000001030000000000840600000000000095"], &(0x7f0000000200)='GPL\x00', 0xa, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 17.925755856s ago: executing program 2 (id=2198): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x8, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7}}, 0x0, 0x1, 0x0, 0x0, 0x40e00, 0x3}, 0x94) socket(0x400000000010, 0x3, 0x0) (async) r0 = socket(0x400000000010, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipmr_delroute={0x24, 0x19, 0x1, 0x0, 0x0, {0x80, 0x20, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5}, [@RTA_TABLE={0x8, 0xf, 0xb5f}]}, 0x24}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipmr_delroute={0x24, 0x19, 0x1, 0x0, 0x0, {0x80, 0x20, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5}, [@RTA_TABLE={0x8, 0xf, 0xb5f}]}, 0x24}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) sendmsg$NL80211_CMD_SET_REG(r3, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x20, r4, 0x100, 0x70bd29, 0x25dfdbff, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000800}, 0x40081) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000026c0)=@flushpolicy={0x18, 0x12, 0x105, 0x0, 0x0, "", [@proto={0x5, 0x19, 0xff}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x20040810) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="d8000000180081054e81f783db4cb9040a1d080006007c03e8fc55a10a0015000600142603600e120800060000000401a8000800a400000001000000035c0461c1d67f6f94007134cf6efb8000a007a290457f010400000700000000ceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bf9ad809d5e1cace0d81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x2c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xb, 0xfff3}, {0x0, 0x5}, {0xa, 0xffff}}, [@TCA_CHAIN={0x8, 0xb, 0x6}]}, 0x89}, 0x1, 0x0, 0x0, 0x20041090}, 0x88ef4e302a4d70b8) socket(0x1a, 0x4, 0x2) (async) socket(0x1a, 0x4, 0x2) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r7, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xfe8e, 0xfffc, 0x100}, 0x8) (async) setsockopt$inet_sctp6_SCTP_INITMSG(r7, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xfe8e, 0xfffc, 0x100}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x22}}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r7, 0x84, 0x7d, 0x0, &(0x7f00000005c0)) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x20, 0x2e, 0x1, 0xf0bd26, 0x25dfdbfc, {0x4}, [@nested={0x4, 0xd}, @typed={0x8, 0xc, 0x0, 0x0, @uid}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) (async) sendmsg$nl_generic(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x20, 0x2e, 0x1, 0xf0bd26, 0x25dfdbfc, {0x4}, [@nested={0x4, 0xd}, @typed={0x8, 0xc, 0x0, 0x0, @uid}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 0s ago: executing program 36 (id=2198): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x8, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7}}, 0x0, 0x1, 0x0, 0x0, 0x40e00, 0x3}, 0x94) socket(0x400000000010, 0x3, 0x0) (async) r0 = socket(0x400000000010, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipmr_delroute={0x24, 0x19, 0x1, 0x0, 0x0, {0x80, 0x20, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5}, [@RTA_TABLE={0x8, 0xf, 0xb5f}]}, 0x24}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipmr_delroute={0x24, 0x19, 0x1, 0x0, 0x0, {0x80, 0x20, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5}, [@RTA_TABLE={0x8, 0xf, 0xb5f}]}, 0x24}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) sendmsg$NL80211_CMD_SET_REG(r3, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x20, r4, 0x100, 0x70bd29, 0x25dfdbff, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000800}, 0x40081) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000026c0)=@flushpolicy={0x18, 0x12, 0x105, 0x0, 0x0, "", [@proto={0x5, 0x19, 0xff}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x20040810) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="d8000000180081054e81f783db4cb9040a1d080006007c03e8fc55a10a0015000600142603600e120800060000000401a8000800a400000001000000035c0461c1d67f6f94007134cf6efb8000a007a290457f010400000700000000ceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bf9ad809d5e1cace0d81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x2c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xb, 0xfff3}, {0x0, 0x5}, {0xa, 0xffff}}, [@TCA_CHAIN={0x8, 0xb, 0x6}]}, 0x89}, 0x1, 0x0, 0x0, 0x20041090}, 0x88ef4e302a4d70b8) socket(0x1a, 0x4, 0x2) (async) socket(0x1a, 0x4, 0x2) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r7, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xfe8e, 0xfffc, 0x100}, 0x8) (async) setsockopt$inet_sctp6_SCTP_INITMSG(r7, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xfe8e, 0xfffc, 0x100}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x22}}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r7, 0x84, 0x7d, 0x0, &(0x7f00000005c0)) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x20, 0x2e, 0x1, 0xf0bd26, 0x25dfdbfc, {0x4}, [@nested={0x4, 0xd}, @typed={0x8, 0xc, 0x0, 0x0, @uid}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) (async) sendmsg$nl_generic(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x20, 0x2e, 0x1, 0xf0bd26, 0x25dfdbfc, {0x4}, [@nested={0x4, 0xd}, @typed={0x8, 0xc, 0x0, 0x0, @uid}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) kernel console output (not intermixed with test programs): 722][T10091] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1296'. [ 179.400809][T10091] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1296'. [ 179.484924][T10091] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1296'. [ 179.804143][T10110] tipc: Enabled bearer , priority 0 [ 179.834537][T10110] syzkaller0: entered promiscuous mode [ 179.841877][T10110] syzkaller0: entered allmulticast mode [ 179.956133][T10110] tipc: Resetting bearer [ 180.044157][T10110] tipc: Disabling bearer [ 180.387074][T10146] netlink: 'syz.0.1315': attribute type 10 has an invalid length. [ 180.884937][T10165] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1323'. [ 181.049203][T10171] netlink: 'syz.4.1325': attribute type 1 has an invalid length. [ 181.075307][T10172] xt_TPROXY: Can be used only with -p tcp or -p udp [ 181.082031][T10171] netlink: 260 bytes leftover after parsing attributes in process `syz.4.1325'. [ 181.105158][T10176] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1328'. [ 181.179588][T10176] 8021q: adding VLAN 0 to HW filter on device bond11 [ 181.212355][T10182] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1331'. [ 181.226735][T10182] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 181.437788][T10193] netlink: 'syz.3.1333': attribute type 7 has an invalid length. [ 181.455651][T10195] macvtap1: entered promiscuous mode [ 181.471941][T10193] netlink: 'syz.3.1333': attribute type 8 has an invalid length. [ 181.481378][T10195] bond0: entered promiscuous mode [ 181.490881][T10195] macvtap1: entered allmulticast mode [ 181.497108][T10195] bond0: entered allmulticast mode [ 181.503577][T10195] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 181.536052][T10195] bond0: left allmulticast mode [ 181.553779][T10195] bond0: left promiscuous mode [ 181.756080][T10206] netlink: 'syz.0.1338': attribute type 11 has an invalid length. [ 182.056234][T10223] netlink: 'syz.4.1342': attribute type 298 has an invalid length. [ 182.260908][T10231] 8021q: adding VLAN 0 to HW filter on device bond12 [ 182.352488][T10237] netlink: 'syz.0.1348': attribute type 21 has an invalid length. [ 182.369728][T10237] IPv6: NLM_F_CREATE should be specified when creating new route [ 182.531876][T10243] netlink: 'syz.0.1350': attribute type 3 has an invalid length. [ 182.562328][T10243] netlink: 'syz.0.1350': attribute type 2 has an invalid length. [ 182.614993][T10243] netlink: 'syz.0.1350': attribute type 2 has an invalid length. [ 183.060730][T10267] 8021q: adding VLAN 0 to HW filter on device bond13 [ 183.260920][T10284] vlan3: entered promiscuous mode [ 183.835446][T10304] FAULT_INJECTION: forcing a failure. [ 183.835446][T10304] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 183.849558][T10304] CPU: 0 UID: 0 PID: 10304 Comm: syz.1.1373 Not tainted syzkaller #0 PREEMPT(full) [ 183.849583][T10304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 183.849594][T10304] Call Trace: [ 183.849602][T10304] [ 183.849609][T10304] dump_stack_lvl+0xe8/0x150 [ 183.849641][T10304] should_fail_ex+0x412/0x560 [ 183.849671][T10304] _copy_from_user+0x2d/0xb0 [ 183.849691][T10304] ___sys_recvmsg+0x175/0x590 [ 183.849715][T10304] ? __pfx____sys_recvmsg+0x10/0x10 [ 183.849737][T10304] ? __fget_files+0x2a/0x420 [ 183.849789][T10304] do_recvmmsg+0x334/0x800 [ 183.849815][T10304] ? __pfx_do_recvmmsg+0x10/0x10 [ 183.849845][T10304] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 183.849886][T10304] __x64_sys_recvmmsg+0x198/0x250 [ 183.849907][T10304] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 183.849932][T10304] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.849951][T10304] do_syscall_64+0x15f/0xf80 [ 183.849971][T10304] ? trace_irq_disable+0x3b/0x140 [ 183.849990][T10304] ? clear_bhb_loop+0x40/0x90 [ 183.850015][T10304] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.850033][T10304] RIP: 0033:0x7f2abbb9c819 [ 183.850050][T10304] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 183.850064][T10304] RSP: 002b:00007f2abca40028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 183.850085][T10304] RAX: ffffffffffffffda RBX: 00007f2abbe15fa0 RCX: 00007f2abbb9c819 [ 183.850098][T10304] RDX: 0000000000000f02 RSI: 00002000000004c0 RDI: 0000000000000004 [ 183.850110][T10304] RBP: 00007f2abca40090 R08: 0000000000000000 R09: 0000000000000000 [ 183.850120][T10304] R10: 00000000000000f0 R11: 0000000000000246 R12: 0000000000000002 [ 183.850131][T10304] R13: 00007f2abbe16038 R14: 00007f2abbe15fa0 R15: 00007ffd902a6bc8 [ 183.850160][T10304] [ 183.858374][T10306] __nla_validate_parse: 18 callbacks suppressed [ 183.858392][T10306] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1374'. [ 184.134910][T10313] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.1376'. [ 184.183253][T10306] 8021q: adding VLAN 0 to HW filter on device bond8 [ 184.456125][T10321] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 184.515771][T10334] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 184.661376][T10340] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1385'. [ 184.697587][T10340] 8021q: adding VLAN 0 to HW filter on device bond0 [ 184.936836][T10353] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1389'. [ 185.076335][T10363] xt_bpf: check failed: parse error [ 185.082596][T10353] 8021q: adding VLAN 0 to HW filter on device bond14 [ 185.914887][T10389] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1402'. [ 185.942892][T10383] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1400'. [ 186.724496][T10408] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1408'. [ 186.758162][T10408] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 186.792375][T10408] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1408'. [ 186.853302][T10413] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1410'. [ 186.868171][T10408] FAULT_INJECTION: forcing a failure. [ 186.868171][T10408] name failslab, interval 1, probability 0, space 0, times 0 [ 186.894817][T10408] CPU: 0 UID: 0 PID: 10408 Comm: syz.0.1408 Not tainted syzkaller #0 PREEMPT(full) [ 186.894843][T10408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 186.894854][T10408] Call Trace: [ 186.894861][T10408] [ 186.894869][T10408] dump_stack_lvl+0xe8/0x150 [ 186.894899][T10408] should_fail_ex+0x412/0x560 [ 186.894929][T10408] should_failslab+0xa8/0x100 [ 186.894952][T10408] __kmalloc_cache_noprof+0x88/0x660 [ 186.894976][T10408] ? flow_offload_netdev_event+0x51/0x70 [ 186.894996][T10408] ? nf_nat_masq_schedule+0x31f/0x6e0 [ 186.895025][T10408] nf_nat_masq_schedule+0x31f/0x6e0 [ 186.895055][T10408] ? __pfx_device_cmp+0x10/0x10 [ 186.895078][T10408] ? __pfx_nf_nat_masq_schedule+0x10/0x10 [ 186.895115][T10408] masq_device_event+0xa2/0xe0 [ 186.895139][T10408] notifier_call_chain+0x1ad/0x3d0 [ 186.895166][T10408] __dev_notify_flags+0x16d/0x310 [ 186.895195][T10408] ? __pfx___dev_notify_flags+0x10/0x10 [ 186.895219][T10408] ? __dev_change_flags+0x4c6/0x690 [ 186.895247][T10408] ? __pfx___dev_change_flags+0x10/0x10 [ 186.895277][T10408] ? __irq_work_queue_local+0x1f2/0x560 [ 186.895300][T10408] ? __pfx___irq_work_queue_local+0x10/0x10 [ 186.895318][T10408] ? console_unlock+0x150/0x1c0 [ 186.895344][T10408] ? preempt_schedule_thunk+0x16/0x30 [ 186.895367][T10408] netif_change_flags+0xe8/0x1a0 [ 186.895395][T10408] do_setlink+0xf82/0x4590 [ 186.895418][T10408] ? __wake_up_klogd+0xe6/0x120 [ 186.895441][T10408] ? __pfx_vprintk_emit+0x10/0x10 [ 186.895473][T10408] ? __pfx_do_setlink+0x10/0x10 [ 186.895510][T10408] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 186.895532][T10408] ? rcu_is_watching+0x15/0xb0 [ 186.895563][T10408] ? __mutex_trylock_common+0x158/0x260 [ 186.895590][T10408] ? __pfx___mutex_trylock_common+0x10/0x10 [ 186.895617][T10408] ? rcu_is_watching+0x15/0xb0 [ 186.895640][T10408] ? trace_contention_end+0x3d/0x140 [ 186.895659][T10408] ? __mutex_lock+0x319/0x1550 [ 186.895681][T10408] ? __pfx___nla_validate_parse+0x10/0x10 [ 186.895712][T10408] ? rtnl_newlink+0x883/0x1bb0 [ 186.895736][T10408] ? __pfx___mutex_lock+0x10/0x10 [ 186.895769][T10408] ? ns_capable+0x89/0xe0 [ 186.895800][T10408] rtnl_newlink+0x15ad/0x1bb0 [ 186.895835][T10408] ? __pfx_rtnl_newlink+0x10/0x10 [ 186.895864][T10408] ? __lock_acquire+0x6b5/0x2cf0 [ 186.895889][T10408] ? __lock_acquire+0x6b5/0x2cf0 [ 186.895922][T10408] ? unwind_next_frame+0xa6/0x2550 [ 186.895947][T10408] ? unwind_next_frame+0xa6/0x2550 [ 186.895967][T10408] ? is_bpf_text_address+0x26/0x2b0 [ 186.896000][T10408] ? is_bpf_text_address+0x26/0x2b0 [ 186.896025][T10408] ? __lock_acquire+0x6b5/0x2cf0 [ 186.896052][T10408] ? kernel_text_address+0xa5/0xe0 [ 186.896074][T10408] ? __kernel_text_address+0xd/0x30 [ 186.896092][T10408] ? unwind_get_return_address+0x4d/0x90 [ 186.896110][T10408] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 186.896131][T10408] ? arch_stack_walk+0xfb/0x150 [ 186.896159][T10408] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 186.896198][T10408] ? __pfx_rtnl_newlink+0x10/0x10 [ 186.896221][T10408] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 186.896242][T10408] ? kmem_cache_alloc_node_noprof+0x384/0x690 [ 186.896267][T10408] ? netlink_sendmsg+0x5d4/0xb40 [ 186.896300][T10408] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 186.896322][T10408] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 186.896347][T10408] ? __lock_acquire+0x6b5/0x2cf0 [ 186.896382][T10408] netlink_rcv_skb+0x232/0x4b0 [ 186.896408][T10408] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 186.896433][T10408] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 186.896470][T10408] ? netlink_deliver_tap+0x2e/0x1b0 [ 186.896494][T10408] ? netlink_deliver_tap+0x2e/0x1b0 [ 186.896524][T10408] netlink_unicast+0x75c/0x8e0 [ 186.896557][T10408] netlink_sendmsg+0x813/0xb40 [ 186.896592][T10408] ? __pfx_netlink_sendmsg+0x10/0x10 [ 186.896620][T10408] ? aa_sock_msg_perm+0xf1/0x1b0 [ 186.896645][T10408] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 186.896674][T10408] ____sys_sendmsg+0x972/0x9f0 [ 186.896701][T10408] ? __might_fault+0xaf/0x130 [ 186.896730][T10408] ? __pfx_____sys_sendmsg+0x10/0x10 [ 186.896765][T10408] ? import_iovec+0x73/0xa0 [ 186.896788][T10408] ___sys_sendmsg+0x2a5/0x360 [ 186.896814][T10408] ? __lock_acquire+0x6b5/0x2cf0 [ 186.896841][T10408] ? __pfx____sys_sendmsg+0x10/0x10 [ 186.896904][T10408] ? __fget_files+0x2a/0x420 [ 186.896925][T10408] ? __fget_files+0x3a0/0x420 [ 186.896958][T10408] __x64_sys_sendmsg+0x1bd/0x2a0 [ 186.896987][T10408] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 186.897022][T10408] ? __pfx_ksys_write+0x10/0x10 [ 186.897055][T10408] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.897074][T10408] do_syscall_64+0x15f/0xf80 [ 186.897093][T10408] ? trace_irq_disable+0x3b/0x140 [ 186.897111][T10408] ? clear_bhb_loop+0x40/0x90 [ 186.897132][T10408] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.897150][T10408] RIP: 0033:0x7f092f19c819 [ 186.897167][T10408] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 186.897182][T10408] RSP: 002b:00007f092ff9c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 186.897202][T10408] RAX: ffffffffffffffda RBX: 00007f092f415fa0 RCX: 00007f092f19c819 [ 186.897215][T10408] RDX: 000000000000c8c4 RSI: 0000200000000000 RDI: 000000000000000a [ 186.897228][T10408] RBP: 00007f092ff9c090 R08: 0000000000000000 R09: 0000000000000000 [ 186.897239][T10408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 186.897250][T10408] R13: 00007f092f416038 R14: 00007f092f415fa0 R15: 00007ffca00a0d98 [ 186.897287][T10408] [ 186.910336][T10416] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1410'. [ 186.923907][T10413] macvtap2: entered promiscuous mode [ 187.456789][T10413] bond0: entered promiscuous mode [ 187.461878][T10413] bond_slave_0: entered promiscuous mode [ 187.485532][T10413] bond_slave_1: entered promiscuous mode [ 187.506666][T10413] macvtap2: entered allmulticast mode [ 187.529438][T10413] bond0: entered allmulticast mode [ 187.546876][T10413] bond_slave_0: entered allmulticast mode [ 187.571231][T10413] bond_slave_1: entered allmulticast mode [ 187.592193][T10413] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 187.611101][T10430] IPv6: addrconf: prefix option has invalid lifetime [ 187.640331][T10416] bond0: left allmulticast mode [ 187.676049][T10416] bond_slave_0: left allmulticast mode [ 187.689833][T10416] bond_slave_1: left allmulticast mode [ 187.708702][T10416] bond0: left promiscuous mode [ 187.719154][T10416] bond_slave_0: left promiscuous mode [ 187.725806][T10416] bond_slave_1: left promiscuous mode [ 187.942128][T10441] validate_nla: 1 callbacks suppressed [ 187.942146][T10441] netlink: 'syz.0.1421': attribute type 10 has an invalid length. [ 188.166006][T10448] syzkaller0: entered promiscuous mode [ 188.183904][T10448] syzkaller0: entered allmulticast mode [ 189.246726][T10506] __nla_validate_parse: 2 callbacks suppressed [ 189.246748][T10506] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1436'. [ 189.325594][T10505] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 189.455266][T10506] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 189.575917][T10514] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1444'. [ 189.661004][T10506] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 189.747088][T10522] FAULT_INJECTION: forcing a failure. [ 189.747088][T10522] name failslab, interval 1, probability 0, space 0, times 0 [ 189.777348][T10522] CPU: 0 UID: 0 PID: 10522 Comm: syz.2.1448 Not tainted syzkaller #0 PREEMPT(full) [ 189.777374][T10522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 189.777385][T10522] Call Trace: [ 189.777392][T10522] [ 189.777400][T10522] dump_stack_lvl+0xe8/0x150 [ 189.777431][T10522] should_fail_ex+0x412/0x560 [ 189.777462][T10522] should_failslab+0xa8/0x100 [ 189.777482][T10522] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 189.777510][T10522] ? __alloc_skb+0x1d0/0x7d0 [ 189.777531][T10522] ? __local_bh_enable_ip+0xd0/0x130 [ 189.777560][T10522] __alloc_skb+0x1d0/0x7d0 [ 189.777582][T10522] ? atomic_notifier_call_chain+0x26/0x180 [ 189.777605][T10522] mroute_netlink_event+0x8f/0x150 [ 189.777636][T10522] ipmr_mfc_add+0x6ee/0x24c0 [ 189.777668][T10522] ? ipmr_mfc_add+0x105/0x24c0 [ 189.777689][T10522] ? __might_fault+0xaf/0x130 [ 189.777717][T10522] ? __pfx_ipmr_mfc_add+0x10/0x10 [ 189.777750][T10522] ? __pfx___mutex_lock+0x10/0x10 [ 189.777790][T10522] ip_mroute_setsockopt+0xe19/0x1090 [ 189.777820][T10522] ? __pfx_ip_mroute_setsockopt+0x10/0x10 [ 189.777845][T10522] ? get_pid_task+0x20/0x1f0 [ 189.777877][T10522] ? __lock_acquire+0x6b5/0x2cf0 [ 189.777903][T10522] do_ip_setsockopt+0xf1e/0x2ea0 [ 189.777934][T10522] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 189.777955][T10522] ? aa_sk_perm+0x6d5/0x900 [ 189.777978][T10522] ? __fget_files+0x2a/0x420 [ 189.778005][T10522] ? __pfx_aa_sk_perm+0x10/0x10 [ 189.778029][T10522] ? __fget_files+0x2a/0x420 [ 189.778048][T10522] ? aa_sock_opt_perm+0xff/0x1a0 [ 189.778075][T10522] ip_setsockopt+0x66/0x110 [ 189.778094][T10522] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 189.778118][T10522] do_sock_setsockopt+0x17c/0x1b0 [ 189.778148][T10522] __x64_sys_setsockopt+0x13d/0x1b0 [ 189.778176][T10522] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.778196][T10522] do_syscall_64+0x15f/0xf80 [ 189.778217][T10522] ? clear_bhb_loop+0x40/0x90 [ 189.778239][T10522] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.778256][T10522] RIP: 0033:0x7fefae79c819 [ 189.778273][T10522] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 189.778286][T10522] RSP: 002b:00007fefaf5d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 189.778306][T10522] RAX: ffffffffffffffda RBX: 00007fefaea15fa0 RCX: 00007fefae79c819 [ 189.778319][T10522] RDX: 00000000000000d2 RSI: 0000000000000000 RDI: 000000000000000b [ 189.778329][T10522] RBP: 00007fefaf5d6090 R08: 000000000000003c R09: 0000000000000000 [ 189.778340][T10522] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001 [ 189.778351][T10522] R13: 00007fefaea16038 R14: 00007fefaea15fa0 R15: 00007ffe633f9c38 [ 189.778379][T10522] [ 190.111960][T10506] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 190.258371][T10506] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 190.447592][T10535] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1451'. [ 190.463537][T10535] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1451'. [ 190.519043][ T13] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 190.571853][ T57] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 190.696497][ T12] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 190.763594][ T12] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.033911][T10551] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1457'. [ 191.084007][T10501] Bluetooth: hci1: command 0x0406 tx timeout [ 191.097278][T10501] Bluetooth: hci0: command 0x0406 tx timeout [ 191.103470][T10501] Bluetooth: hci2: command 0x0406 tx timeout [ 191.105843][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 191.193542][T10551] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1457'. [ 191.481349][T10551] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1457'. [ 191.616096][T10564] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1461'. [ 191.665143][T10571] netlink: 'syz.1.1464': attribute type 3 has an invalid length. [ 191.777752][T10569] RDS: rds_bind could not find a transport for 2001::1, load rds_tcp or rds_rdma? [ 191.894978][T10582] netlink: 364 bytes leftover after parsing attributes in process `syz.0.1466'. [ 191.930130][T10574] bond10: entered allmulticast mode [ 191.946188][T10574] 8021q: adding VLAN 0 to HW filter on device bond10 [ 191.992745][T10587] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1467'. [ 192.040812][T10585] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 192.288817][T10599] netlink: 'syz.4.1473': attribute type 298 has an invalid length. [ 192.369414][T10601] xt_TPROXY: Can be used only with -p tcp or -p udp [ 192.794505][T10615] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 192.840578][T10617] netlink: 'syz.4.1482': attribute type 1 has an invalid length. [ 193.094962][T10630] xt_TPROXY: Can be used only with -p tcp or -p udp [ 193.453450][T10643] netlink: 'syz.4.1492': attribute type 10 has an invalid length. [ 193.547450][T10649] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 193.556217][T10649] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 193.714971][T10654] vlan2: entered promiscuous mode [ 194.135474][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.148601][T10671] vxcan2: entered allmulticast mode [ 194.982208][T10706] __nla_validate_parse: 6 callbacks suppressed [ 194.982227][T10706] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1517'. [ 195.338427][T10722] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1523'. [ 195.634760][T10734] x_tables: duplicate underflow at hook 1 [ 195.741707][T10737] bond13: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 195.793525][T10737] bond13 (unregistering): Released all slaves [ 196.091934][T10754] netlink: 472 bytes leftover after parsing attributes in process `syz.1.1536'. [ 196.199349][T10758] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1537'. [ 196.214776][T10759] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1538'. [ 196.240010][T10759] nbd: must specify at least one socket [ 196.280401][T10763] netlink: 'syz.1.1540': attribute type 10 has an invalid length. [ 196.668320][T10781] FAULT_INJECTION: forcing a failure. [ 196.668320][T10781] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 196.726031][T10781] CPU: 0 UID: 0 PID: 10781 Comm: syz.1.1547 Not tainted syzkaller #0 PREEMPT(full) [ 196.726072][T10781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 196.726083][T10781] Call Trace: [ 196.726090][T10781] [ 196.726098][T10781] dump_stack_lvl+0xe8/0x150 [ 196.726129][T10781] should_fail_ex+0x412/0x560 [ 196.726158][T10781] _copy_from_user+0x2d/0xb0 [ 196.726178][T10781] __sys_bpf+0x229/0x950 [ 196.726200][T10781] ? __pfx___sys_bpf+0x10/0x10 [ 196.726234][T10781] ? ksys_write+0x242/0x270 [ 196.726262][T10781] ? __pfx_ksys_write+0x10/0x10 [ 196.726291][T10781] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.726311][T10781] __x64_sys_bpf+0x7c/0x90 [ 196.726329][T10781] do_syscall_64+0x15f/0xf80 [ 196.726350][T10781] ? trace_irq_disable+0x3b/0x140 [ 196.726369][T10781] ? clear_bhb_loop+0x40/0x90 [ 196.726391][T10781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.726409][T10781] RIP: 0033:0x7f2abbb9c819 [ 196.726426][T10781] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 196.726442][T10781] RSP: 002b:00007f2abca40028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 196.726462][T10781] RAX: ffffffffffffffda RBX: 00007f2abbe15fa0 RCX: 00007f2abbb9c819 [ 196.726475][T10781] RDX: 0000000000000038 RSI: 00002000000004c0 RDI: 000000000000001a [ 196.726487][T10781] RBP: 00007f2abca40090 R08: 0000000000000000 R09: 0000000000000000 [ 196.726498][T10781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 196.726509][T10781] R13: 00007f2abbe16038 R14: 00007f2abbe15fa0 R15: 00007ffd902a6bc8 [ 196.726538][T10781] [ 196.931844][T10790] FAULT_INJECTION: forcing a failure. [ 196.931844][T10790] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 196.946157][T10790] CPU: 1 UID: 0 PID: 10790 Comm: syz.0.1550 Not tainted syzkaller #0 PREEMPT(full) [ 196.946184][T10790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 196.946196][T10790] Call Trace: [ 196.946204][T10790] [ 196.946211][T10790] dump_stack_lvl+0xe8/0x150 [ 196.946243][T10790] should_fail_ex+0x412/0x560 [ 196.946282][T10790] prepare_alloc_pages+0x22a/0x650 [ 196.946310][T10790] __alloc_frozen_pages_noprof+0x12f/0x380 [ 196.946334][T10790] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 196.946358][T10790] ? __pfx_policy_nodemask+0x10/0x10 [ 196.946382][T10790] ? pfn_valid+0xba/0x480 [ 196.946411][T10790] alloc_pages_mpol+0x232/0x4a0 [ 196.946436][T10790] vma_alloc_folio_noprof+0xea/0x210 [ 196.946459][T10790] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 196.946490][T10790] do_wp_page+0x1204/0x5a00 [ 196.946522][T10790] ? __pte_offset_map+0x29/0x240 [ 196.946556][T10790] ? __pfx_do_wp_page+0x10/0x10 [ 196.946574][T10790] ? do_raw_spin_lock+0x12b/0x2f0 [ 196.946597][T10790] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 196.946627][T10790] handle_mm_fault+0x1520/0x3310 [ 196.946665][T10790] ? handle_mm_fault+0xee/0x3310 [ 196.946695][T10790] ? __pfx_handle_mm_fault+0x10/0x10 [ 196.946738][T10790] ? lock_mm_and_find_vma+0xa7/0x340 [ 196.946767][T10790] do_user_addr_fault+0x75b/0x1340 [ 196.946812][T10790] exc_page_fault+0x6a/0xc0 [ 196.946836][T10790] asm_exc_page_fault+0x26/0x30 [ 196.946853][T10790] RIP: 0010:__put_user_nocheck_4+0x3/0x10 [ 196.946875][T10790] Code: d9 0f 01 cb 89 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 01 cb <89> 01 31 c9 0f 01 ca e9 91 80 03 00 90 90 90 90 90 90 90 90 90 90 [ 196.946891][T10790] RSP: 0018:ffffc9000d0af8b8 EFLAGS: 00050206 [ 196.946908][T10790] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000200000001030 [ 196.946920][T10790] RDX: ffff888031530000 RSI: 00000000000000f0 RDI: 00000000ffffffff [ 196.946933][T10790] RBP: ffffc9000d0afa30 R08: ffffffff903215b7 R09: 1ffffffff20642b6 [ 196.946946][T10790] R10: dffffc0000000000 R11: fffffbfff20642b7 R12: 1ffff92001a15f24 [ 196.946959][T10790] R13: 00000000000000f0 R14: 0000200000001000 R15: dffffc0000000000 [ 196.946990][T10790] ____sys_recvmsg+0x2be/0x4a0 [ 196.947026][T10790] ? __pfx_____sys_recvmsg+0x10/0x10 [ 196.947069][T10790] ? import_iovec+0x73/0xa0 [ 196.947092][T10790] ___sys_recvmsg+0x215/0x590 [ 196.947116][T10790] ? __pfx____sys_recvmsg+0x10/0x10 [ 196.947138][T10790] ? __fget_files+0x2a/0x420 [ 196.947193][T10790] do_recvmmsg+0x334/0x800 [ 196.947221][T10790] ? __pfx_do_recvmmsg+0x10/0x10 [ 196.947256][T10790] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 196.947297][T10790] __x64_sys_recvmmsg+0x198/0x250 [ 196.947315][T10790] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 196.947339][T10790] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.947356][T10790] do_syscall_64+0x15f/0xf80 [ 196.947374][T10790] ? trace_irq_disable+0x3b/0x140 [ 196.947391][T10790] ? clear_bhb_loop+0x40/0x90 [ 196.947410][T10790] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.947426][T10790] RIP: 0033:0x7f092f19c819 [ 196.947441][T10790] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 196.947454][T10790] RSP: 002b:00007f092ff9c028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 196.947470][T10790] RAX: ffffffffffffffda RBX: 00007f092f415fa0 RCX: 00007f092f19c819 [ 196.947482][T10790] RDX: 0000000000000f02 RSI: 00002000000004c0 RDI: 0000000000000004 [ 196.947492][T10790] RBP: 00007f092ff9c090 R08: 0000000000000000 R09: 0000000000000000 [ 196.947503][T10790] R10: 00000000000000f0 R11: 0000000000000246 R12: 0000000000000002 [ 196.947513][T10790] R13: 00007f092f416038 R14: 00007f092f415fa0 R15: 00007ffca00a0d98 [ 196.947542][T10790] [ 197.389609][T10793] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1549'. [ 197.472503][T10806] vlan3: entered allmulticast mode [ 197.491421][T10806] bridge_slave_0: entered allmulticast mode [ 198.415880][T10847] syzkaller1: entered promiscuous mode [ 198.440742][T10847] syzkaller1: entered allmulticast mode [ 198.464196][T10846] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1567'. [ 198.511241][T10846] hsr_slave_0: left promiscuous mode [ 198.532503][T10846] hsr_slave_1: left promiscuous mode [ 198.599505][T10847] vlan3: entered allmulticast mode [ 198.599845][T10860] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1567'. [ 198.628999][T10847] bond0: entered allmulticast mode [ 198.636997][T10847] bond_slave_0: entered allmulticast mode [ 198.642809][T10847] bond_slave_1: entered allmulticast mode [ 198.772159][T10869] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1571'. [ 198.838721][T10873] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1571'. [ 198.897355][T10860] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 198.909185][T10860] bond_slave_0: left allmulticast mode [ 198.919829][T10860] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 198.929393][T10860] bond_slave_1: left allmulticast mode [ 198.936335][T10860] bond0 (unregistering): Released all slaves [ 198.956491][T10878] tipc: Cannot configure node identity twice [ 199.113201][T10885] vlan3: entered promiscuous mode [ 199.345277][T10898] FAULT_INJECTION: forcing a failure. [ 199.345277][T10898] name failslab, interval 1, probability 0, space 0, times 0 [ 199.379793][T10896] xt_hashlimit: size too large, truncated to 1048576 [ 199.386761][T10898] CPU: 0 UID: 0 PID: 10898 Comm: syz.1.1581 Not tainted syzkaller #0 PREEMPT(full) [ 199.386785][T10898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 199.386796][T10898] Call Trace: [ 199.386802][T10898] [ 199.386809][T10898] dump_stack_lvl+0xe8/0x150 [ 199.386840][T10898] should_fail_ex+0x412/0x560 [ 199.386869][T10898] should_failslab+0xa8/0x100 [ 199.386890][T10898] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 199.386916][T10898] ? __alloc_skb+0x186/0x7d0 [ 199.386937][T10898] ? __alloc_skb+0x1d0/0x7d0 [ 199.386957][T10898] ? __local_bh_enable_ip+0xd0/0x130 [ 199.386984][T10898] __alloc_skb+0x1d0/0x7d0 [ 199.387006][T10898] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 199.387037][T10898] netlink_sendmsg+0x5d4/0xb40 [ 199.387077][T10898] ? __pfx_netlink_sendmsg+0x10/0x10 [ 199.387104][T10898] ? aa_sock_msg_perm+0xf1/0x1b0 [ 199.387129][T10898] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 199.387157][T10898] ____sys_sendmsg+0x972/0x9f0 [ 199.387182][T10898] ? __might_fault+0xaf/0x130 [ 199.387210][T10898] ? __pfx_____sys_sendmsg+0x10/0x10 [ 199.387244][T10898] ? import_iovec+0x73/0xa0 [ 199.387265][T10898] ___sys_sendmsg+0x2a5/0x360 [ 199.387289][T10898] ? __lock_acquire+0x6b5/0x2cf0 [ 199.387315][T10898] ? __pfx____sys_sendmsg+0x10/0x10 [ 199.387372][T10898] ? __fget_files+0x2a/0x420 [ 199.387394][T10898] ? __fget_files+0x3a0/0x420 [ 199.387425][T10898] __x64_sys_sendmsg+0x1bd/0x2a0 [ 199.387452][T10898] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 199.387484][T10898] ? __pfx_ksys_write+0x10/0x10 [ 199.387516][T10898] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.387537][T10898] do_syscall_64+0x15f/0xf80 [ 199.387557][T10898] ? trace_irq_disable+0x3b/0x140 [ 199.387577][T10898] ? clear_bhb_loop+0x40/0x90 [ 199.387598][T10898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.387614][T10898] RIP: 0033:0x7f2abbb9c819 [ 199.387632][T10898] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 199.387646][T10898] RSP: 002b:00007f2abca40028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 199.387667][T10898] RAX: ffffffffffffffda RBX: 00007f2abbe15fa0 RCX: 00007f2abbb9c819 [ 199.387680][T10898] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 199.387691][T10898] RBP: 00007f2abca40090 R08: 0000000000000000 R09: 0000000000000000 [ 199.387703][T10898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 199.387713][T10898] R13: 00007f2abbe16038 R14: 00007f2abbe15fa0 R15: 00007ffd902a6bc8 [ 199.387743][T10898] [ 199.969190][T10918] netlink: 'syz.2.1589': attribute type 13 has an invalid length. [ 199.977267][T10918] netlink: 'syz.2.1589': attribute type 17 has an invalid length. [ 200.212302][T10918] 8021q: adding VLAN 0 to HW filter on device team0 [ 200.237894][T10918] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 200.265603][T10919] netdevsim netdevsim3: Direct firmware load for . failed with error -2 [ 200.268157][T10926] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 200.303113][T10919] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 200.629476][T10948] xt_bpf: check failed: parse error [ 200.646600][T10947] netlink: 'syz.1.1598': attribute type 9 has an invalid length. [ 200.916285][T10958] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 201.039053][T10963] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1601'. [ 201.210474][T10972] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1607'. [ 201.567538][T10987] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1612'. [ 201.668856][T10991] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1613'. [ 201.669442][T10990] vlan2: entered promiscuous mode [ 201.683422][T10990] bridge0: entered promiscuous mode [ 201.699366][T10991] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1613'. [ 201.943562][T11002] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 202.124433][ T5839] Bluetooth: hci4: command 0x0406 tx timeout [ 202.337635][T11024] netlink: 'syz.0.1625': attribute type 298 has an invalid length. [ 202.354241][T11022] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1624'. [ 202.416273][T11030] SET target dimension over the limit! [ 203.013063][T11064] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1638'. [ 203.059543][T11069] netlink: 'syz.3.1637': attribute type 2 has an invalid length. [ 203.104556][T11069] tipc: Cannot configure node identity twice [ 203.147269][T11069] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1637'. [ 203.600484][T11079] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1642'. [ 203.629263][T11079] FAULT_INJECTION: forcing a failure. [ 203.629263][T11079] name failslab, interval 1, probability 0, space 0, times 0 [ 203.643456][T11079] CPU: 1 UID: 0 PID: 11079 Comm: syz.1.1642 Not tainted syzkaller #0 PREEMPT(full) [ 203.643481][T11079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 203.643492][T11079] Call Trace: [ 203.643499][T11079] [ 203.643506][T11079] dump_stack_lvl+0xe8/0x150 [ 203.643537][T11079] should_fail_ex+0x412/0x560 [ 203.643567][T11079] should_failslab+0xa8/0x100 [ 203.643588][T11079] __kmalloc_cache_noprof+0x88/0x660 [ 203.643613][T11079] ? ip_set_pernet+0x23/0x240 [ 203.643631][T11079] ? ip_set_create+0x391/0x1a40 [ 203.643657][T11079] ip_set_create+0x391/0x1a40 [ 203.643682][T11079] ? trace_contention_end+0x3d/0x140 [ 203.643701][T11079] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 203.643723][T11079] ? __pfx_ip_set_create+0x10/0x10 [ 203.643776][T11079] nfnetlink_rcv_msg+0xc03/0x12c0 [ 203.643799][T11079] ? __lock_acquire+0x6b5/0x2cf0 [ 203.643821][T11079] ? nfnetlink_rcv_msg+0x22a/0x12c0 [ 203.643862][T11079] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 203.643911][T11079] ? __lock_acquire+0x6b5/0x2cf0 [ 203.643950][T11079] netlink_rcv_skb+0x232/0x4b0 [ 203.643975][T11079] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 203.643998][T11079] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 203.644033][T11079] ? bpf_lsm_capable+0x9/0x20 [ 203.644052][T11079] ? security_capable+0x7e/0x2c0 [ 203.644082][T11079] nfnetlink_rcv+0x2c0/0x27b0 [ 203.644106][T11079] ? kernel_text_address+0xa5/0xe0 [ 203.644128][T11079] ? __kernel_text_address+0xd/0x30 [ 203.644147][T11079] ? unwind_get_return_address+0x4d/0x90 [ 203.644164][T11079] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 203.644184][T11079] ? arch_stack_walk+0xfb/0x150 [ 203.644212][T11079] ? stack_trace_save+0xa9/0x100 [ 203.644234][T11079] ? __lock_acquire+0x6b5/0x2cf0 [ 203.644257][T11079] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 203.644285][T11079] ? kasan_save_track+0x4f/0x80 [ 203.644307][T11079] ? kasan_save_track+0x3e/0x80 [ 203.644337][T11079] ? __kasan_slab_alloc+0x6c/0x80 [ 203.644352][T11079] ? kmem_cache_alloc_node_noprof+0x384/0x690 [ 203.644375][T11079] ? __alloc_skb+0x27d/0x7d0 [ 203.644395][T11079] ? netlink_sendmsg+0x5d4/0xb40 [ 203.644427][T11079] ? __lock_acquire+0x6b5/0x2cf0 [ 203.644460][T11079] ? __netlink_lookup+0xc6/0x8b0 [ 203.644494][T11079] ? netlink_deliver_tap+0x2e/0x1b0 [ 203.644519][T11079] ? netlink_deliver_tap+0x2e/0x1b0 [ 203.644548][T11079] ? netlink_deliver_tap+0x2e/0x1b0 [ 203.644570][T11079] ? netlink_deliver_tap+0x2e/0x1b0 [ 203.644598][T11079] netlink_unicast+0x75c/0x8e0 [ 203.644629][T11079] netlink_sendmsg+0x813/0xb40 [ 203.644661][T11079] ? __pfx_netlink_sendmsg+0x10/0x10 [ 203.644688][T11079] ? aa_sock_msg_perm+0xf1/0x1b0 [ 203.644711][T11079] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 203.644740][T11079] ____sys_sendmsg+0x972/0x9f0 [ 203.644763][T11079] ? __might_fault+0xaf/0x130 [ 203.644790][T11079] ? __pfx_____sys_sendmsg+0x10/0x10 [ 203.644817][T11079] ? import_iovec+0x73/0xa0 [ 203.644834][T11079] ___sys_sendmsg+0x2a5/0x360 [ 203.644852][T11079] ? __lock_acquire+0x6b5/0x2cf0 [ 203.644872][T11079] ? __pfx____sys_sendmsg+0x10/0x10 [ 203.644918][T11079] ? __fget_files+0x2a/0x420 [ 203.644934][T11079] ? __fget_files+0x3a0/0x420 [ 203.644958][T11079] __x64_sys_sendmsg+0x1bd/0x2a0 [ 203.644980][T11079] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 203.645012][T11079] ? __pfx_ksys_write+0x10/0x10 [ 203.645038][T11079] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.645054][T11079] do_syscall_64+0x15f/0xf80 [ 203.645070][T11079] ? trace_irq_disable+0x3b/0x140 [ 203.645085][T11079] ? clear_bhb_loop+0x40/0x90 [ 203.645102][T11079] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.645115][T11079] RIP: 0033:0x7f2abbb9c819 [ 203.645129][T11079] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 203.645141][T11079] RSP: 002b:00007f2abca40028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 203.645158][T11079] RAX: ffffffffffffffda RBX: 00007f2abbe15fa0 RCX: 00007f2abbb9c819 [ 203.645168][T11079] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 203.645176][T11079] RBP: 00007f2abca40090 R08: 0000000000000000 R09: 0000000000000000 [ 203.645184][T11079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 203.645192][T11079] R13: 00007f2abbe16038 R14: 00007f2abbe15fa0 R15: 00007ffd902a6bc8 [ 203.645220][T11079] [ 204.418414][T11090] netlink: 'syz.1.1647': attribute type 1 has an invalid length. [ 204.466070][T11090] netlink: 116 bytes leftover after parsing attributes in process `syz.1.1647'. [ 204.747747][T11103] netlink: 'syz.2.1649': attribute type 16 has an invalid length. [ 204.784887][T11103] netlink: 'syz.2.1649': attribute type 17 has an invalid length. [ 204.913907][T11103] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 205.046380][T11116] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 205.239004][T11122] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 205.277511][T11120] syzkaller0: entered promiscuous mode [ 206.068953][T11154] __nla_validate_parse: 8 callbacks suppressed [ 206.068969][T11154] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1675'. [ 206.134837][T11154] FAULT_INJECTION: forcing a failure. [ 206.134837][T11154] name failslab, interval 1, probability 0, space 0, times 0 [ 206.153416][T11154] CPU: 0 UID: 0 PID: 11154 Comm: syz.1.1675 Not tainted syzkaller #0 PREEMPT(full) [ 206.153441][T11154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 206.153452][T11154] Call Trace: [ 206.153459][T11154] [ 206.153467][T11154] dump_stack_lvl+0xe8/0x150 [ 206.153498][T11154] should_fail_ex+0x412/0x560 [ 206.153528][T11154] should_failslab+0xa8/0x100 [ 206.153553][T11154] __kmalloc_cache_noprof+0x88/0x660 [ 206.153578][T11154] ? ip_set_pernet+0x23/0x240 [ 206.153596][T11154] ? ip_set_create+0x391/0x1a40 [ 206.153621][T11154] ip_set_create+0x391/0x1a40 [ 206.153645][T11154] ? trace_contention_end+0x3d/0x140 [ 206.153665][T11154] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 206.153688][T11154] ? __pfx_ip_set_create+0x10/0x10 [ 206.153742][T11154] nfnetlink_rcv_msg+0xc03/0x12c0 [ 206.153765][T11154] ? __lock_acquire+0x6b5/0x2cf0 [ 206.153787][T11154] ? nfnetlink_rcv_msg+0x22a/0x12c0 [ 206.153824][T11154] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 206.153872][T11154] ? __lock_acquire+0x6b5/0x2cf0 [ 206.153911][T11154] netlink_rcv_skb+0x232/0x4b0 [ 206.153936][T11154] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 206.153960][T11154] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 206.153996][T11154] ? bpf_lsm_capable+0x9/0x20 [ 206.154015][T11154] ? security_capable+0x7e/0x2c0 [ 206.154043][T11154] nfnetlink_rcv+0x2c0/0x27b0 [ 206.154076][T11154] ? kernel_text_address+0xa5/0xe0 [ 206.154097][T11154] ? __kernel_text_address+0xd/0x30 [ 206.154116][T11154] ? unwind_get_return_address+0x4d/0x90 [ 206.154133][T11154] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 206.154152][T11154] ? arch_stack_walk+0xfb/0x150 [ 206.154179][T11154] ? stack_trace_save+0xa9/0x100 [ 206.154200][T11154] ? __lock_acquire+0x6b5/0x2cf0 [ 206.154221][T11154] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 206.154248][T11154] ? kasan_save_track+0x4f/0x80 [ 206.154270][T11154] ? kasan_save_track+0x3e/0x80 [ 206.154291][T11154] ? __kasan_slab_alloc+0x6c/0x80 [ 206.154306][T11154] ? kmem_cache_alloc_node_noprof+0x384/0x690 [ 206.154327][T11154] ? __alloc_skb+0x27d/0x7d0 [ 206.154348][T11154] ? netlink_sendmsg+0x5d4/0xb40 [ 206.154380][T11154] ? __lock_acquire+0x6b5/0x2cf0 [ 206.154414][T11154] ? __netlink_lookup+0xc6/0x8b0 [ 206.154449][T11154] ? netlink_deliver_tap+0x2e/0x1b0 [ 206.154474][T11154] ? netlink_deliver_tap+0x2e/0x1b0 [ 206.154503][T11154] ? netlink_deliver_tap+0x2e/0x1b0 [ 206.154526][T11154] ? netlink_deliver_tap+0x2e/0x1b0 [ 206.154555][T11154] netlink_unicast+0x75c/0x8e0 [ 206.154588][T11154] netlink_sendmsg+0x813/0xb40 [ 206.154622][T11154] ? __pfx_netlink_sendmsg+0x10/0x10 [ 206.154649][T11154] ? aa_sock_msg_perm+0xf1/0x1b0 [ 206.154673][T11154] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 206.154702][T11154] ____sys_sendmsg+0x972/0x9f0 [ 206.154727][T11154] ? __might_fault+0xaf/0x130 [ 206.154756][T11154] ? __pfx_____sys_sendmsg+0x10/0x10 [ 206.154790][T11154] ? import_iovec+0x73/0xa0 [ 206.154811][T11154] ___sys_sendmsg+0x2a5/0x360 [ 206.154835][T11154] ? __lock_acquire+0x6b5/0x2cf0 [ 206.154861][T11154] ? __pfx____sys_sendmsg+0x10/0x10 [ 206.154920][T11154] ? __fget_files+0x2a/0x420 [ 206.154941][T11154] ? __fget_files+0x3a0/0x420 [ 206.154972][T11154] __x64_sys_sendmsg+0x1bd/0x2a0 [ 206.154999][T11154] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 206.155035][T11154] ? __pfx_ksys_write+0x10/0x10 [ 206.155074][T11154] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.155093][T11154] do_syscall_64+0x15f/0xf80 [ 206.155114][T11154] ? trace_irq_disable+0x3b/0x140 [ 206.155133][T11154] ? clear_bhb_loop+0x40/0x90 [ 206.155155][T11154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.155174][T11154] RIP: 0033:0x7f2abbb9c819 [ 206.155191][T11154] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 206.155207][T11154] RSP: 002b:00007f2abca40028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 206.155228][T11154] RAX: ffffffffffffffda RBX: 00007f2abbe15fa0 RCX: 00007f2abbb9c819 [ 206.155241][T11154] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 206.155253][T11154] RBP: 00007f2abca40090 R08: 0000000000000000 R09: 0000000000000000 [ 206.155264][T11154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 206.155275][T11154] R13: 00007f2abbe16038 R14: 00007f2abbe15fa0 R15: 00007ffd902a6bc8 [ 206.155305][T11154] [ 206.863593][T11174] netlink: 'syz.2.1683': attribute type 4 has an invalid length. [ 206.931846][T11178] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1685'. [ 207.164116][T11187] tipc: Enabled bearer , priority 0 [ 207.190731][T11187] syzkaller0: entered promiscuous mode [ 207.218779][T11187] syzkaller0: entered allmulticast mode [ 207.459070][T11187] tipc: Resetting bearer [ 207.471739][T11196] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1694'. [ 207.473218][T11201] FAULT_INJECTION: forcing a failure. [ 207.473218][T11201] name failslab, interval 1, probability 0, space 0, times 0 [ 207.496156][T11201] CPU: 1 UID: 0 PID: 11201 Comm: syz.3.1696 Not tainted syzkaller #0 PREEMPT(full) [ 207.496178][T11201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 207.496189][T11201] Call Trace: [ 207.496196][T11201] [ 207.496204][T11201] dump_stack_lvl+0xe8/0x150 [ 207.496234][T11201] should_fail_ex+0x412/0x560 [ 207.496264][T11201] should_failslab+0xa8/0x100 [ 207.496285][T11201] __kmalloc_cache_noprof+0x88/0x660 [ 207.496309][T11201] ? netlink_lookup+0x30/0x200 [ 207.496331][T11201] ? genl_family_rcv_msg_attrs_parse+0xe9/0x2f0 [ 207.496351][T11201] ? genl_start+0x1c9/0x6c0 [ 207.496375][T11201] genl_start+0x1c9/0x6c0 [ 207.496393][T11201] ? netlink_lookup+0x30/0x200 [ 207.496422][T11201] __netlink_dump_start+0x469/0x7e0 [ 207.496453][T11201] genl_family_rcv_msg_dumpit+0x213/0x310 [ 207.496484][T11201] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 207.496512][T11201] ? __pfx_genl_start+0x10/0x10 [ 207.496529][T11201] ? __pfx_genl_dumpit+0x10/0x10 [ 207.496545][T11201] ? __pfx_genl_done+0x10/0x10 [ 207.496568][T11201] ? bpf_lsm_capable+0x9/0x20 [ 207.496587][T11201] ? security_capable+0x7e/0x2c0 [ 207.496617][T11201] genl_rcv_msg+0x5e8/0x7a0 [ 207.496643][T11201] ? __pfx_genl_rcv_msg+0x10/0x10 [ 207.496661][T11201] ? __pfx_batadv_tt_local_dump+0x10/0x10 [ 207.496688][T11201] ? __pfx_ref_tracker_free+0x10/0x10 [ 207.496724][T11201] netlink_rcv_skb+0x232/0x4b0 [ 207.496748][T11201] ? __pfx_genl_rcv_msg+0x10/0x10 [ 207.496770][T11201] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 207.496810][T11201] ? down_read+0x270/0x2e0 [ 207.496831][T11201] ? genl_rcv+0xd/0x40 [ 207.496851][T11201] genl_rcv+0x28/0x40 [ 207.496868][T11201] netlink_unicast+0x75c/0x8e0 [ 207.496901][T11201] netlink_sendmsg+0x813/0xb40 [ 207.496935][T11201] ? __pfx_netlink_sendmsg+0x10/0x10 [ 207.496967][T11201] ? aa_sock_msg_perm+0xf1/0x1b0 [ 207.496995][T11201] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 207.497023][T11201] ____sys_sendmsg+0x972/0x9f0 [ 207.497049][T11201] ? __might_fault+0xaf/0x130 [ 207.497078][T11201] ? __pfx_____sys_sendmsg+0x10/0x10 [ 207.497114][T11201] ? import_iovec+0x73/0xa0 [ 207.497137][T11201] ___sys_sendmsg+0x2a5/0x360 [ 207.497161][T11201] ? __lock_acquire+0x6b5/0x2cf0 [ 207.497188][T11201] ? __pfx____sys_sendmsg+0x10/0x10 [ 207.497250][T11201] ? __fget_files+0x2a/0x420 [ 207.497272][T11201] ? __fget_files+0x3a0/0x420 [ 207.497304][T11201] __x64_sys_sendmsg+0x1bd/0x2a0 [ 207.497332][T11201] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 207.497369][T11201] ? __pfx_ksys_write+0x10/0x10 [ 207.497403][T11201] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.497422][T11201] do_syscall_64+0x15f/0xf80 [ 207.497443][T11201] ? trace_irq_disable+0x3b/0x140 [ 207.497462][T11201] ? clear_bhb_loop+0x40/0x90 [ 207.497484][T11201] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.497502][T11201] RIP: 0033:0x7f6753f9c819 [ 207.497518][T11201] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 207.497534][T11201] RSP: 002b:00007f6754eb6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 207.497553][T11201] RAX: ffffffffffffffda RBX: 00007f6754215fa0 RCX: 00007f6753f9c819 [ 207.497566][T11201] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 207.497578][T11201] RBP: 00007f6754eb6090 R08: 0000000000000000 R09: 0000000000000000 [ 207.497589][T11201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 207.497599][T11201] R13: 00007f6754216038 R14: 00007f6754215fa0 R15: 00007ffdf4378c68 [ 207.497629][T11201] [ 207.858963][T11199] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1694'. [ 207.941780][T11187] tipc: Disabling bearer [ 207.982215][T11203] netlink: 364 bytes leftover after parsing attributes in process `syz.3.1697'. [ 208.317979][T11214] netlink: 'syz.2.1703': attribute type 21 has an invalid length. [ 208.328386][T11214] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1703'. [ 208.371064][T11214] netlink: 'syz.2.1703': attribute type 5 has an invalid length. [ 208.411542][T11214] netlink: 'syz.2.1703': attribute type 6 has an invalid length. [ 208.438874][T11214] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1703'. [ 208.565735][T11229] netlink: 'syz.0.1706': attribute type 1 has an invalid length. [ 208.618949][T11229] erspan1: entered allmulticast mode [ 208.629565][T11233] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1708'. [ 208.878675][T11242] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1711'. [ 208.938979][T11242] ip6erspan0: entered allmulticast mode [ 209.146225][T11252] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1714'. [ 209.152997][T11256] FAULT_INJECTION: forcing a failure. [ 209.152997][T11256] name failslab, interval 1, probability 0, space 0, times 0 [ 209.188408][T11256] CPU: 1 UID: 0 PID: 11256 Comm: syz.3.1715 Not tainted syzkaller #0 PREEMPT(full) [ 209.188435][T11256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 209.188446][T11256] Call Trace: [ 209.188453][T11256] [ 209.188461][T11256] dump_stack_lvl+0xe8/0x150 [ 209.188490][T11256] should_fail_ex+0x412/0x560 [ 209.188519][T11256] should_failslab+0xa8/0x100 [ 209.188539][T11256] __kmalloc_cache_noprof+0x88/0x660 [ 209.188562][T11256] ? ip_set_pernet+0x23/0x240 [ 209.188581][T11256] ? ip_set_create+0x391/0x1a40 [ 209.188606][T11256] ip_set_create+0x391/0x1a40 [ 209.188631][T11256] ? trace_contention_end+0x3d/0x140 [ 209.188656][T11256] ? __pfx_ip_set_create+0x10/0x10 [ 209.188710][T11256] nfnetlink_rcv_msg+0xc03/0x12c0 [ 209.188732][T11256] ? unwind_get_return_address+0x4d/0x90 [ 209.188751][T11256] ? nfnetlink_rcv_msg+0x22a/0x12c0 [ 209.188791][T11256] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 209.188863][T11256] netlink_rcv_skb+0x232/0x4b0 [ 209.188889][T11256] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 209.188911][T11256] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 209.188945][T11256] ? bpf_lsm_capable+0x9/0x20 [ 209.188964][T11256] ? security_capable+0x7e/0x2c0 [ 209.188990][T11256] nfnetlink_rcv+0x2c0/0x27b0 [ 209.189020][T11256] ? __local_bh_enable_ip+0xd0/0x130 [ 209.189040][T11256] ? lockdep_hardirqs_on+0x7a/0x110 [ 209.189058][T11256] ? __dev_queue_xmit+0x2b6/0x3950 [ 209.189075][T11256] ? __local_bh_enable_ip+0xd0/0x130 [ 209.189095][T11256] ? __dev_queue_xmit+0x2b6/0x3950 [ 209.189111][T11256] ? __dev_queue_xmit+0x1fe5/0x3950 [ 209.189125][T11256] ? __x64_sys_sendmsg+0x1bd/0x2a0 [ 209.189157][T11256] ? __dev_queue_xmit+0x2b6/0x3950 [ 209.189179][T11256] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 209.189208][T11256] ? __pfx___dev_queue_xmit+0x10/0x10 [ 209.189233][T11256] ? ref_tracker_free+0x693/0x840 [ 209.189261][T11256] ? __pfx_ref_tracker_free+0x10/0x10 [ 209.189302][T11256] ? skb_clone+0x246/0x3a0 [ 209.189323][T11256] ? __netlink_deliver_tap+0x807/0x850 [ 209.189347][T11256] ? netlink_deliver_tap+0x2e/0x1b0 [ 209.189377][T11256] ? netlink_deliver_tap+0x2e/0x1b0 [ 209.189401][T11256] ? netlink_deliver_tap+0x2e/0x1b0 [ 209.189430][T11256] netlink_unicast+0x75c/0x8e0 [ 209.189463][T11256] netlink_sendmsg+0x813/0xb40 [ 209.189495][T11256] ? __pfx_netlink_sendmsg+0x10/0x10 [ 209.189523][T11256] ? aa_sock_msg_perm+0xf1/0x1b0 [ 209.189548][T11256] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 209.189576][T11256] ____sys_sendmsg+0x972/0x9f0 [ 209.189601][T11256] ? __might_fault+0xaf/0x130 [ 209.189631][T11256] ? __pfx_____sys_sendmsg+0x10/0x10 [ 209.189665][T11256] ? import_iovec+0x73/0xa0 [ 209.189687][T11256] ___sys_sendmsg+0x2a5/0x360 [ 209.189712][T11256] ? __lock_acquire+0x6b5/0x2cf0 [ 209.189738][T11256] ? __pfx____sys_sendmsg+0x10/0x10 [ 209.189819][T11256] ? __fget_files+0x2a/0x420 [ 209.189843][T11256] ? __fget_files+0x3a0/0x420 [ 209.189875][T11256] __x64_sys_sendmsg+0x1bd/0x2a0 [ 209.189903][T11256] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 209.189938][T11256] ? __pfx_ksys_write+0x10/0x10 [ 209.189972][T11256] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.189992][T11256] do_syscall_64+0x15f/0xf80 [ 209.190012][T11256] ? trace_irq_disable+0x3b/0x140 [ 209.190031][T11256] ? clear_bhb_loop+0x40/0x90 [ 209.190052][T11256] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.190069][T11256] RIP: 0033:0x7f6753f9c819 [ 209.190087][T11256] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 209.190102][T11256] RSP: 002b:00007f6754eb6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 209.190123][T11256] RAX: ffffffffffffffda RBX: 00007f6754215fa0 RCX: 00007f6753f9c819 [ 209.190136][T11256] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 209.190147][T11256] RBP: 00007f6754eb6090 R08: 0000000000000000 R09: 0000000000000000 [ 209.190158][T11256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 209.190168][T11256] R13: 00007f6754216038 R14: 00007f6754215fa0 R15: 00007ffdf4378c68 [ 209.190198][T11256] [ 210.245995][T11295] xt_TPROXY: Can be used only with -p tcp or -p udp [ 210.330428][T11298] vlan3: entered promiscuous mode [ 210.489575][T11307] xt_TPROXY: Can be used only with -p tcp or -p udp [ 211.068388][T11340] netlink: 'syz.3.1747': attribute type 32 has an invalid length. [ 211.132241][T11343] __nla_validate_parse: 6 callbacks suppressed [ 211.132260][T11343] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1745'. [ 211.225103][T11348] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1749'. [ 211.234522][T11348] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1749'. [ 211.245740][T11348] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1749'. [ 211.277443][ T12] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 211.277548][T11348] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1749'. [ 211.294860][T11348] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1749'. [ 211.296041][ T12] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 211.305186][T11348] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1749'. [ 211.320654][ T12] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 211.331902][ T12] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 211.350348][T11354] syzkaller0: entered promiscuous mode [ 211.605042][T11363] Bluetooth: MGMT ver 1.23 [ 212.037145][T11375] FAULT_INJECTION: forcing a failure. [ 212.037145][T11375] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 212.074125][T11375] CPU: 0 UID: 0 PID: 11375 Comm: syz.0.1760 Not tainted syzkaller #0 PREEMPT(full) [ 212.074150][T11375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 212.074161][T11375] Call Trace: [ 212.074168][T11375] [ 212.074176][T11375] dump_stack_lvl+0xe8/0x150 [ 212.074208][T11375] should_fail_ex+0x412/0x560 [ 212.074237][T11375] _copy_from_user+0x2d/0xb0 [ 212.074257][T11375] ___sys_recvmsg+0x175/0x590 [ 212.074280][T11375] ? __pfx____sys_recvmsg+0x10/0x10 [ 212.074301][T11375] ? __fget_files+0x2a/0x420 [ 212.074351][T11375] do_recvmmsg+0x334/0x800 [ 212.074376][T11375] ? __pfx_do_recvmmsg+0x10/0x10 [ 212.074405][T11375] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 212.074444][T11375] __x64_sys_recvmmsg+0x198/0x250 [ 212.074465][T11375] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 212.074490][T11375] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.074510][T11375] do_syscall_64+0x15f/0xf80 [ 212.074530][T11375] ? trace_irq_disable+0x3b/0x140 [ 212.074547][T11375] ? clear_bhb_loop+0x40/0x90 [ 212.074568][T11375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.074586][T11375] RIP: 0033:0x7f092f19c819 [ 212.074603][T11375] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 212.074618][T11375] RSP: 002b:00007f092ff9c028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 212.074638][T11375] RAX: ffffffffffffffda RBX: 00007f092f415fa0 RCX: 00007f092f19c819 [ 212.074651][T11375] RDX: 0000000000000f02 RSI: 00002000000004c0 RDI: 0000000000000004 [ 212.074664][T11375] RBP: 00007f092ff9c090 R08: 0000000000000000 R09: 0000000000000000 [ 212.074675][T11375] R10: 00000000000000f0 R11: 0000000000000246 R12: 0000000000000002 [ 212.074686][T11375] R13: 00007f092f416038 R14: 00007f092f415fa0 R15: 00007ffca00a0d98 [ 212.074727][T11375] [ 212.847061][T11404] netlink: 120 bytes leftover after parsing attributes in process `syz.4.1771'. [ 212.974986][T11406] syzkaller0: entered promiscuous mode [ 212.984465][T11406] syzkaller0: entered allmulticast mode [ 213.053803][T11412] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1774'. [ 213.086817][T11414] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1776'. [ 213.158699][T11414] macvtap1: entered promiscuous mode [ 213.184760][T11414] macvtap1: entered allmulticast mode [ 213.231985][T11414] bond0: entered allmulticast mode [ 213.252973][T11414] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 213.296381][T11423] lo: Caught tx_queue_len zero misconfig [ 213.457899][T11434] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 214.010479][T11464] netdevsim netdevsim3: Direct firmware load for . failed with error -2 [ 214.084181][T11464] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 214.188502][T11467] FAULT_INJECTION: forcing a failure. [ 214.188502][T11467] name failslab, interval 1, probability 0, space 0, times 0 [ 214.234293][T11467] CPU: 0 UID: 0 PID: 11467 Comm: syz.1.1793 Not tainted syzkaller #0 PREEMPT(full) [ 214.234319][T11467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 214.234330][T11467] Call Trace: [ 214.234337][T11467] [ 214.234345][T11467] dump_stack_lvl+0xe8/0x150 [ 214.234375][T11467] should_fail_ex+0x412/0x560 [ 214.234402][T11467] ? __d_alloc+0x37/0x6f0 [ 214.234426][T11467] should_failslab+0xa8/0x100 [ 214.234446][T11467] kmem_cache_alloc_lru_noprof+0x87/0x640 [ 214.234479][T11467] __d_alloc+0x37/0x6f0 [ 214.234514][T11467] d_alloc_pseudo+0x21/0xc0 [ 214.234540][T11467] alloc_file_pseudo+0xdd/0x240 [ 214.234565][T11467] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 214.234584][T11467] ? do_raw_spin_unlock+0xf5/0x210 [ 214.234606][T11467] ? _raw_spin_unlock+0x28/0x50 [ 214.234632][T11467] sock_alloc_file+0xb8/0x2e0 [ 214.234651][T11467] ? __sys_socket+0x12b/0x1b0 [ 214.234674][T11467] __sys_socket+0x13c/0x1b0 [ 214.234697][T11467] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.234716][T11467] __x64_sys_socket+0x7a/0x90 [ 214.234739][T11467] do_syscall_64+0x15f/0xf80 [ 214.234759][T11467] ? trace_irq_disable+0x3b/0x140 [ 214.234779][T11467] ? clear_bhb_loop+0x40/0x90 [ 214.234801][T11467] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.234820][T11467] RIP: 0033:0x7f2abbb9c819 [ 214.234837][T11467] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 214.234852][T11467] RSP: 002b:00007f2abca40028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 214.234873][T11467] RAX: ffffffffffffffda RBX: 00007f2abbe15fa0 RCX: 00007f2abbb9c819 [ 214.234887][T11467] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000022 [ 214.234897][T11467] RBP: 00007f2abca40090 R08: 0000000000000000 R09: 0000000000000000 [ 214.234909][T11467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 214.234919][T11467] R13: 00007f2abbe16038 R14: 00007f2abbe15fa0 R15: 00007ffd902a6bc8 [ 214.234948][T11467] [ 214.720058][T11476] syzkaller0: entered promiscuous mode [ 215.532868][T11502] bond11: Removing last ns target with arp_interval on [ 215.858064][T11513] 8021q: adding VLAN 0 to HW filter on device bond0 [ 216.067580][T11514] netdevsim netdevsim0: Direct firmware load for . failed with error -2 [ 216.121193][T11514] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 216.320276][T11537] __nla_validate_parse: 9 callbacks suppressed [ 216.320300][T11537] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1817'. [ 216.741880][T11552] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1822'. [ 216.791148][T11554] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1823'. [ 216.878919][T11560] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1825'. [ 216.891560][T11552] 8021q: adding VLAN 0 to HW filter on device bond15 [ 216.919552][T11557] netlink: 'syz.0.1824': attribute type 5 has an invalid length. [ 217.195718][T11579] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1828'. [ 217.845844][T11600] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1838'. [ 217.889333][T11602] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1839'. [ 218.059387][T11610] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1841'. [ 218.092493][T11602] 8021q: adding VLAN 0 to HW filter on device bond9 [ 218.126413][T11610] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1841'. [ 218.538467][T11623] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1846'. [ 218.760687][T11635] netlink: 'syz.0.1849': attribute type 1 has an invalid length. [ 219.032594][T11621] netlink: zone id is out of range [ 219.035176][T11635] 8021q: adding VLAN 0 to HW filter on device bond13 [ 219.038887][T11621] netlink: zone id is out of range [ 219.050122][T11621] netlink: zone id is out of range [ 219.055573][T11621] netlink: zone id is out of range [ 219.061168][T11621] netlink: zone id is out of range [ 219.067108][T11621] netlink: zone id is out of range [ 219.072404][T11621] netlink: zone id is out of range [ 219.078326][T11621] netlink: zone id is out of range [ 219.084374][T11621] netlink: zone id is out of range [ 219.094012][T11621] netlink: zone id is out of range [ 219.107835][T11636] bond10: (slave veth0_to_bond): Releasing active interface [ 219.130121][T11636] bond13: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 219.154833][T11645] netlink: 'syz.4.1852': attribute type 298 has an invalid length. [ 220.338172][T11682] 8021q: adding VLAN 0 to HW filter on device bond12 [ 220.522725][T11690] 8021q: adding VLAN 0 to HW filter on device bond13 [ 220.546674][T11690] bond12: (slave bond13): Enslaving as an active interface with an up link [ 220.584412][T11692] bond12 (unregistering): (slave bond13): Releasing backup interface [ 220.618790][T11692] bond12 (unregistering): Released all slaves [ 221.483094][T11737] __nla_validate_parse: 4 callbacks suppressed [ 221.483112][T11737] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1885'. [ 221.762413][T11753] xt_TPROXY: Can be used only with -p tcp or -p udp [ 221.895534][ T8637] IPVS: starting estimator thread 0... [ 222.044192][T11758] IPVS: using max 31 ests per chain, 74400 per kthread [ 222.222829][T11766] netlink: 'syz.4.1895': attribute type 4 has an invalid length. [ 222.725731][T11791] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.1903'. [ 222.891011][T11802] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1907'. [ 223.117294][T11812] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1911'. [ 223.129766][T11812] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1911'. [ 223.321928][T11815] bond10: option lacp_active: invalid value (8) [ 223.337828][T11815] bond10 (unregistering): Released all slaves [ 223.435443][T11828] netlink: 'syz.2.1916': attribute type 13 has an invalid length. [ 223.458836][T11828] netlink: 'syz.2.1916': attribute type 17 has an invalid length. [ 223.507394][T11826] hsr0: entered promiscuous mode [ 223.590888][T11833] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.1917'. [ 224.299992][T11865] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.1929'. [ 224.461787][T11871] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1932'. [ 224.471906][T11871] nbd: must specify a size in bytes for the device [ 224.495742][T11872] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1932'. [ 224.519771][T11872] nbd: must specify a size in bytes for the device [ 225.211659][T11897] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.1942'. [ 225.607965][T11918] netlink: 'syz.0.1948': attribute type 4 has an invalid length. [ 225.663525][T11917] netlink: 'syz.0.1948': attribute type 4 has an invalid length. [ 226.146763][T11943] netlink: 'syz.0.1957': attribute type 13 has an invalid length. [ 226.157403][T11943] netlink: 'syz.0.1957': attribute type 17 has an invalid length. [ 226.237792][T11943] erspan0: entered promiscuous mode [ 226.298043][T11949] FAULT_INJECTION: forcing a failure. [ 226.298043][T11949] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 226.312002][T11949] CPU: 0 UID: 0 PID: 11949 Comm: syz.1.1959 Not tainted syzkaller #0 PREEMPT(full) [ 226.312036][T11949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 226.312046][T11949] Call Trace: [ 226.312053][T11949] [ 226.312060][T11949] dump_stack_lvl+0xe8/0x150 [ 226.312090][T11949] should_fail_ex+0x412/0x560 [ 226.312118][T11949] _copy_from_iter+0x1d3/0x1670 [ 226.312153][T11949] ? __pfx__copy_from_iter+0x10/0x10 [ 226.312178][T11949] ? alloc_pages_noprof+0xbd/0x1a0 [ 226.312199][T11949] ? skb_page_frag_refill+0x199/0x310 [ 226.312227][T11949] tcp_sendmsg_locked+0x2121/0x5450 [ 226.312299][T11949] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 226.312327][T11949] ? tcp_sendmsg+0x21/0x50 [ 226.312349][T11949] ? __local_bh_enable_ip+0xd0/0x130 [ 226.312374][T11949] ? __pfx_inet_sendmsg+0x10/0x10 [ 226.312393][T11949] tcp_sendmsg+0x2f/0x50 [ 226.312414][T11949] __sys_sendto+0x5de/0x710 [ 226.312442][T11949] ? __pfx___sys_sendto+0x10/0x10 [ 226.312463][T11949] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 226.312499][T11949] ? __fget_files+0x3a0/0x420 [ 226.312532][T11949] ? ksys_write+0x242/0x270 [ 226.312559][T11949] ? __pfx_ksys_write+0x10/0x10 [ 226.312589][T11949] __x64_sys_sendto+0xde/0x100 [ 226.312613][T11949] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.312633][T11949] do_syscall_64+0x15f/0xf80 [ 226.312654][T11949] ? trace_irq_disable+0x3b/0x140 [ 226.312673][T11949] ? clear_bhb_loop+0x40/0x90 [ 226.312696][T11949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.312713][T11949] RIP: 0033:0x7f2abbb9c819 [ 226.312732][T11949] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 226.312748][T11949] RSP: 002b:00007f2abca1f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 226.312772][T11949] RAX: ffffffffffffffda RBX: 00007f2abbe16090 RCX: 00007f2abbb9c819 [ 226.312785][T11949] RDX: 0000000000000381 RSI: 00002000000004c0 RDI: 0000000000000003 [ 226.312797][T11949] RBP: 00007f2abca1f090 R08: 0000000000000000 R09: 0000000000000000 [ 226.312808][T11949] R10: 0000000000000805 R11: 0000000000000246 R12: 0000000000000001 [ 226.312819][T11949] R13: 00007f2abbe16128 R14: 00007f2abbe16090 R15: 00007ffd902a6bc8 [ 226.312850][T11949] [ 226.543384][T11943] 8021q: adding VLAN 0 to HW filter on device bond0 [ 226.551788][T11943] 8021q: adding VLAN 0 to HW filter on device team0 [ 226.563720][T11943] net_ratelimit: 11 callbacks suppressed [ 226.563732][T11943] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 226.778234][T11956] __nla_validate_parse: 2 callbacks suppressed [ 226.778253][T11956] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1961'. [ 226.839001][T11959] xt_TPROXY: Can be used only with -p tcp or -p udp [ 227.557363][T11986] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 227.581983][T11986] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 227.653481][T11993] FAULT_INJECTION: forcing a failure. [ 227.653481][T11993] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 227.669562][T11993] CPU: 0 UID: 0 PID: 11993 Comm: syz.2.1977 Not tainted syzkaller #0 PREEMPT(full) [ 227.669587][T11993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 227.669598][T11993] Call Trace: [ 227.669605][T11993] [ 227.669613][T11993] dump_stack_lvl+0xe8/0x150 [ 227.669643][T11993] should_fail_ex+0x412/0x560 [ 227.669675][T11993] _copy_from_user+0x2d/0xb0 [ 227.669694][T11993] ___sys_recvmsg+0x175/0x590 [ 227.669718][T11993] ? __pfx____sys_recvmsg+0x10/0x10 [ 227.669739][T11993] ? __fget_files+0x2a/0x420 [ 227.669789][T11993] do_recvmmsg+0x334/0x800 [ 227.669815][T11993] ? __pfx_do_recvmmsg+0x10/0x10 [ 227.669844][T11993] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 227.669883][T11993] __x64_sys_recvmmsg+0x198/0x250 [ 227.669904][T11993] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 227.669937][T11993] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.669957][T11993] do_syscall_64+0x15f/0xf80 [ 227.669976][T11993] ? trace_irq_disable+0x3b/0x140 [ 227.669995][T11993] ? clear_bhb_loop+0x40/0x90 [ 227.670017][T11993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.670035][T11993] RIP: 0033:0x7fefae79c819 [ 227.670051][T11993] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 227.670067][T11993] RSP: 002b:00007fefaf5d6028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 227.670087][T11993] RAX: ffffffffffffffda RBX: 00007fefaea15fa0 RCX: 00007fefae79c819 [ 227.670099][T11993] RDX: 0000000000000f02 RSI: 00002000000004c0 RDI: 0000000000000004 [ 227.670111][T11993] RBP: 00007fefaf5d6090 R08: 0000000000000000 R09: 0000000000000000 [ 227.670122][T11993] R10: 00000000000000f0 R11: 0000000000000246 R12: 0000000000000002 [ 227.670133][T11993] R13: 00007fefaea16038 R14: 00007fefaea15fa0 R15: 00007ffe633f9c38 [ 227.670162][T11993] [ 227.985435][T11997] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 228.058607][T11994] netdevsim netdevsim4: Direct firmware load for . failed with error -2 [ 228.089465][T11994] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 228.650295][T12007] FAULT_INJECTION: forcing a failure. [ 228.650295][T12007] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 228.666964][T12007] CPU: 1 UID: 0 PID: 12007 Comm: syz.2.1980 Not tainted syzkaller #0 PREEMPT(full) [ 228.666981][T12007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 228.666987][T12007] Call Trace: [ 228.666992][T12007] [ 228.667000][T12007] dump_stack_lvl+0xe8/0x150 [ 228.667020][T12007] should_fail_ex+0x412/0x560 [ 228.667037][T12007] _copy_from_iter+0x1d3/0x1670 [ 228.667055][T12007] ? rcu_is_watching+0x15/0xb0 [ 228.667072][T12007] ? __pfx__copy_from_iter+0x10/0x10 [ 228.667089][T12007] ? netlink_sendmsg+0x650/0xb40 [ 228.667108][T12007] ? skb_put+0x11b/0x210 [ 228.667124][T12007] netlink_sendmsg+0x6c0/0xb40 [ 228.667143][T12007] ? __pfx_netlink_sendmsg+0x10/0x10 [ 228.667158][T12007] ? aa_sock_msg_perm+0xf1/0x1b0 [ 228.667172][T12007] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 228.667189][T12007] ____sys_sendmsg+0x972/0x9f0 [ 228.667204][T12007] ? __might_fault+0xaf/0x130 [ 228.667222][T12007] ? __pfx_____sys_sendmsg+0x10/0x10 [ 228.667240][T12007] ? import_iovec+0x73/0xa0 [ 228.667251][T12007] ___sys_sendmsg+0x2a5/0x360 [ 228.667265][T12007] ? __lock_acquire+0x6b5/0x2cf0 [ 228.667280][T12007] ? __pfx____sys_sendmsg+0x10/0x10 [ 228.667311][T12007] ? __fget_files+0x2a/0x420 [ 228.667323][T12007] ? __fget_files+0x3a0/0x420 [ 228.667339][T12007] __x64_sys_sendmsg+0x1bd/0x2a0 [ 228.667355][T12007] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 228.667374][T12007] ? __pfx_ksys_write+0x10/0x10 [ 228.667393][T12007] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.667404][T12007] do_syscall_64+0x15f/0xf80 [ 228.667416][T12007] ? trace_irq_disable+0x3b/0x140 [ 228.667427][T12007] ? clear_bhb_loop+0x40/0x90 [ 228.667439][T12007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.667449][T12007] RIP: 0033:0x7fefae79c819 [ 228.667460][T12007] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 228.667468][T12007] RSP: 002b:00007fefaf5d6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 228.667480][T12007] RAX: ffffffffffffffda RBX: 00007fefaea15fa0 RCX: 00007fefae79c819 [ 228.667488][T12007] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000004 [ 228.667494][T12007] RBP: 00007fefaf5d6090 R08: 0000000000000000 R09: 0000000000000000 [ 228.667500][T12007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 228.667506][T12007] R13: 00007fefaea16038 R14: 00007fefaea15fa0 R15: 00007ffe633f9c38 [ 228.667521][T12007] [ 228.970748][T11931] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 229.434754][T12027] netlink: 'syz.1.1988': attribute type 11 has an invalid length. [ 229.540065][T12031] FAULT_INJECTION: forcing a failure. [ 229.540065][T12031] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 229.582842][T12031] CPU: 0 UID: 0 PID: 12031 Comm: syz.0.1990 Not tainted syzkaller #0 PREEMPT(full) [ 229.582867][T12031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 229.582878][T12031] Call Trace: [ 229.582885][T12031] [ 229.582892][T12031] dump_stack_lvl+0xe8/0x150 [ 229.582922][T12031] should_fail_ex+0x412/0x560 [ 229.582953][T12031] _copy_from_user+0x2d/0xb0 [ 229.582973][T12031] generic_map_update_batch+0x648/0x990 [ 229.583006][T12031] ? __pfx_generic_map_update_batch+0x10/0x10 [ 229.583029][T12031] ? __fget_files+0x2a/0x420 [ 229.583056][T12031] ? __pfx_generic_map_update_batch+0x10/0x10 [ 229.583079][T12031] bpf_map_do_batch+0x39b/0x630 [ 229.583103][T12031] __sys_bpf+0x7c1/0x950 [ 229.583123][T12031] ? __pfx___sys_bpf+0x10/0x10 [ 229.583157][T12031] ? ksys_write+0x242/0x270 [ 229.583184][T12031] ? __pfx_ksys_write+0x10/0x10 [ 229.583211][T12031] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.583230][T12031] __x64_sys_bpf+0x7c/0x90 [ 229.583247][T12031] do_syscall_64+0x15f/0xf80 [ 229.583267][T12031] ? trace_irq_disable+0x3b/0x140 [ 229.583284][T12031] ? clear_bhb_loop+0x40/0x90 [ 229.583305][T12031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.583321][T12031] RIP: 0033:0x7f092f19c819 [ 229.583338][T12031] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 229.583352][T12031] RSP: 002b:00007f092ff9c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 229.583372][T12031] RAX: ffffffffffffffda RBX: 00007f092f415fa0 RCX: 00007f092f19c819 [ 229.583384][T12031] RDX: 0000000000000038 RSI: 00002000000004c0 RDI: 000000000000001a [ 229.583395][T12031] RBP: 00007f092ff9c090 R08: 0000000000000000 R09: 0000000000000000 [ 229.583406][T12031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 229.583416][T12031] R13: 00007f092f416038 R14: 00007f092f415fa0 R15: 00007ffca00a0d98 [ 229.583442][T12031] [ 229.785347][T12043] netdevsim netdevsim3: Direct firmware load for . failed with error -2 [ 229.793900][T12043] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 229.825180][T12038] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1992'. [ 229.833074][T12045] trusted_key: syz.4.1993 sent an empty control message without MSG_MORE. [ 229.875918][T12047] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.1994'. [ 229.929752][T12051] FAULT_INJECTION: forcing a failure. [ 229.929752][T12051] name failslab, interval 1, probability 0, space 0, times 0 [ 229.944271][T12051] CPU: 1 UID: 0 PID: 12051 Comm: syz.0.1995 Not tainted syzkaller #0 PREEMPT(full) [ 229.944297][T12051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 229.944307][T12051] Call Trace: [ 229.944315][T12051] [ 229.944327][T12051] dump_stack_lvl+0xe8/0x150 [ 229.944359][T12051] should_fail_ex+0x412/0x560 [ 229.944389][T12051] should_failslab+0xa8/0x100 [ 229.944411][T12051] __kmalloc_cache_noprof+0x88/0x660 [ 229.944435][T12051] ? __pfx_stack_trace_save+0x10/0x10 [ 229.944455][T12051] ? rtnl_newlink+0x136/0x1bb0 [ 229.944483][T12051] rtnl_newlink+0x136/0x1bb0 [ 229.944507][T12051] ? kasan_save_track+0x3e/0x80 [ 229.944530][T12051] ? kasan_save_free_info+0x46/0x50 [ 229.944550][T12051] ? __kasan_slab_free+0x5c/0x80 [ 229.944575][T12051] ? dev_hard_start_xmit+0x2cd/0x830 [ 229.944591][T12051] ? __dev_queue_xmit+0x14d9/0x3950 [ 229.944608][T12051] ? __netlink_deliver_tap+0x5ad/0x850 [ 229.944631][T12051] ? netlink_deliver_tap+0x19c/0x1b0 [ 229.944652][T12051] ? netlink_unicast+0x730/0x8e0 [ 229.944672][T12051] ? netlink_sendmsg+0x813/0xb40 [ 229.944696][T12051] ? __pfx_rtnl_newlink+0x10/0x10 [ 229.944716][T12051] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.944768][T12051] ? kasan_quarantine_put+0xbb/0x1f0 [ 229.944792][T12051] ? lockdep_hardirqs_on+0x7a/0x110 [ 229.944818][T12051] ? nlmon_xmit+0xb0/0x100 [ 229.944837][T12051] ? kmem_cache_free+0x180/0x630 [ 229.944870][T12051] ? __lock_acquire+0x6b5/0x2cf0 [ 229.944905][T12051] ? __dev_queue_xmit+0x2b6/0x3950 [ 229.944918][T12051] ? __local_bh_enable_ip+0xd0/0x130 [ 229.944932][T12051] ? lockdep_hardirqs_on+0x7a/0x110 [ 229.944943][T12051] ? __dev_queue_xmit+0x2b6/0x3950 [ 229.944953][T12051] ? __local_bh_enable_ip+0xd0/0x130 [ 229.944965][T12051] ? __dev_queue_xmit+0x2b6/0x3950 [ 229.944979][T12051] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 229.944998][T12051] ? __pfx_rtnl_newlink+0x10/0x10 [ 229.945010][T12051] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 229.945024][T12051] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 229.945036][T12051] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 229.945048][T12051] ? ref_tracker_free+0x693/0x840 [ 229.945063][T12051] ? __pfx_ref_tracker_free+0x10/0x10 [ 229.945082][T12051] netlink_rcv_skb+0x232/0x4b0 [ 229.945096][T12051] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 229.945109][T12051] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 229.945128][T12051] ? netlink_deliver_tap+0x2e/0x1b0 [ 229.945141][T12051] ? netlink_deliver_tap+0x2e/0x1b0 [ 229.945157][T12051] netlink_unicast+0x75c/0x8e0 [ 229.945175][T12051] netlink_sendmsg+0x813/0xb40 [ 229.945192][T12051] ? __pfx_netlink_sendmsg+0x10/0x10 [ 229.945207][T12051] ? aa_sock_msg_perm+0xf1/0x1b0 [ 229.945222][T12051] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 229.945238][T12051] ____sys_sendmsg+0x972/0x9f0 [ 229.945253][T12051] ? __might_fault+0xaf/0x130 [ 229.945269][T12051] ? __pfx_____sys_sendmsg+0x10/0x10 [ 229.945287][T12051] ? import_iovec+0x73/0xa0 [ 229.945299][T12051] ___sys_sendmsg+0x2a5/0x360 [ 229.945313][T12051] ? __lock_acquire+0x6b5/0x2cf0 [ 229.945327][T12051] ? __pfx____sys_sendmsg+0x10/0x10 [ 229.945358][T12051] ? __fget_files+0x2a/0x420 [ 229.945370][T12051] ? __fget_files+0x3a0/0x420 [ 229.945386][T12051] __x64_sys_sendmsg+0x1bd/0x2a0 [ 229.945402][T12051] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 229.945421][T12051] ? __pfx_ksys_write+0x10/0x10 [ 229.945439][T12051] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.945449][T12051] do_syscall_64+0x15f/0xf80 [ 229.945461][T12051] ? trace_irq_disable+0x3b/0x140 [ 229.945471][T12051] ? clear_bhb_loop+0x40/0x90 [ 229.945484][T12051] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.945493][T12051] RIP: 0033:0x7f092f19c819 [ 229.945504][T12051] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 229.945513][T12051] RSP: 002b:00007f092ff9c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 229.945525][T12051] RAX: ffffffffffffffda RBX: 00007f092f415fa0 RCX: 00007f092f19c819 [ 229.945533][T12051] RDX: 0000000020040040 RSI: 0000200000000200 RDI: 0000000000000004 [ 229.945539][T12051] RBP: 00007f092ff9c090 R08: 0000000000000000 R09: 0000000000000000 [ 229.945545][T12051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 229.945551][T12051] R13: 00007f092f416038 R14: 00007f092f415fa0 R15: 00007ffca00a0d98 [ 229.945566][T12051] [ 230.527458][T12055] FAULT_INJECTION: forcing a failure. [ 230.527458][T12055] name failslab, interval 1, probability 0, space 0, times 0 [ 230.553797][T12055] CPU: 1 UID: 0 PID: 12055 Comm: syz.1.1996 Not tainted syzkaller #0 PREEMPT(full) [ 230.553820][T12055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 230.553829][T12055] Call Trace: [ 230.553837][T12055] [ 230.553844][T12055] dump_stack_lvl+0xe8/0x150 [ 230.553882][T12055] should_fail_ex+0x412/0x560 [ 230.553911][T12055] should_failslab+0xa8/0x100 [ 230.553929][T12055] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 230.553953][T12055] ? __alloc_skb+0x1d0/0x7d0 [ 230.553970][T12055] ? __local_bh_enable_ip+0xd0/0x130 [ 230.553992][T12055] __alloc_skb+0x1d0/0x7d0 [ 230.554008][T12055] ? netlink_ack_tlv_len+0x6c/0x210 [ 230.554029][T12055] netlink_ack+0x146/0xa50 [ 230.554045][T12055] ? __pfx_genl_rcv_msg+0x10/0x10 [ 230.554074][T12055] netlink_rcv_skb+0x2b6/0x4b0 [ 230.554096][T12055] ? __pfx_genl_rcv_msg+0x10/0x10 [ 230.554112][T12055] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 230.554143][T12055] ? down_read+0x270/0x2e0 [ 230.554161][T12055] ? genl_rcv+0xd/0x40 [ 230.554177][T12055] genl_rcv+0x28/0x40 [ 230.554191][T12055] netlink_unicast+0x75c/0x8e0 [ 230.554219][T12055] netlink_sendmsg+0x813/0xb40 [ 230.554251][T12055] ? __pfx_netlink_sendmsg+0x10/0x10 [ 230.554275][T12055] ? aa_sock_msg_perm+0xf1/0x1b0 [ 230.554294][T12055] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 230.554314][T12055] ? __pfx_netlink_sendmsg+0x10/0x10 [ 230.554333][T12055] __sys_sendto+0x672/0x710 [ 230.554355][T12055] ? __pfx___sys_sendto+0x10/0x10 [ 230.554374][T12055] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 230.554401][T12055] ? __fget_files+0x3a0/0x420 [ 230.554428][T12055] ? ksys_write+0x242/0x270 [ 230.554452][T12055] ? __pfx_ksys_write+0x10/0x10 [ 230.554479][T12055] __x64_sys_sendto+0xde/0x100 [ 230.554499][T12055] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.554516][T12055] do_syscall_64+0x15f/0xf80 [ 230.554534][T12055] ? trace_irq_disable+0x3b/0x140 [ 230.554552][T12055] ? clear_bhb_loop+0x40/0x90 [ 230.554572][T12055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.554588][T12055] RIP: 0033:0x7f2abbb5d04e [ 230.554604][T12055] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 230.554618][T12055] RSP: 002b:00007f2abca3ee88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 230.554637][T12055] RAX: ffffffffffffffda RBX: 00007f2abca406c0 RCX: 00007f2abbb5d04e [ 230.554649][T12055] RDX: 0000000000000020 RSI: 00007f2abca3f000 RDI: 0000000000000003 [ 230.554659][T12055] RBP: 0000000000000000 R08: 00007f2abca3ef04 R09: 000000000000000c [ 230.554669][T12055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 230.554680][T12055] R13: 00007f2abca3ef58 R14: 00007f2abca3f000 R15: 0000000000000000 [ 230.554706][T12055] [ 231.273308][T12076] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.2005'. [ 231.358727][T12081] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2007'. [ 231.401114][T12082] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2008'. [ 231.428881][T12082] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2008'. [ 231.454950][T12084] tipc: Enabled bearer , priority 0 [ 231.466330][T12082] netlink: 'syz.2.2008': attribute type 18 has an invalid length. [ 231.480517][T12084] syzkaller0: entered promiscuous mode [ 231.498918][T12084] syzkaller0: entered allmulticast mode [ 231.507736][T12090] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2008'. [ 231.523851][T12090] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2008'. [ 231.597349][T12084] tipc: Resetting bearer [ 231.667778][T12084] tipc: Disabling bearer [ 232.029486][T12110] netdevsim netdevsim4: Direct firmware load for . failed with error -2 [ 232.039715][T12104] netlink: 16158 bytes leftover after parsing attributes in process `syz.1.2016'. [ 232.115711][T12110] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 232.590554][T12117] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2018'. [ 232.856434][T12127] netlink: 'syz.4.2024': attribute type 3 has an invalid length. [ 232.961929][T12135] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2028'. [ 232.974297][T12136] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2025'. [ 233.003546][T12136] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2025'. [ 233.035649][T12136] bond0: left allmulticast mode [ 233.040592][T12136] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 233.104813][T12144] FAULT_INJECTION: forcing a failure. [ 233.104813][T12144] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 233.137010][T12144] CPU: 1 UID: 0 PID: 12144 Comm: syz.4.2030 Not tainted syzkaller #0 PREEMPT(full) [ 233.137055][T12144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 233.137076][T12144] Call Trace: [ 233.137084][T12144] [ 233.137091][T12144] dump_stack_lvl+0xe8/0x150 [ 233.137123][T12144] should_fail_ex+0x412/0x560 [ 233.137152][T12144] _copy_from_user+0x2d/0xb0 [ 233.137171][T12144] ___sys_recvmsg+0x175/0x590 [ 233.137195][T12144] ? __pfx____sys_recvmsg+0x10/0x10 [ 233.137217][T12144] ? __fget_files+0x2a/0x420 [ 233.137267][T12144] do_recvmmsg+0x334/0x800 [ 233.137293][T12144] ? __pfx_do_recvmmsg+0x10/0x10 [ 233.137322][T12144] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 233.137361][T12144] __x64_sys_recvmmsg+0x198/0x250 [ 233.137382][T12144] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 233.137408][T12144] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.137426][T12144] do_syscall_64+0x15f/0xf80 [ 233.137447][T12144] ? trace_irq_disable+0x3b/0x140 [ 233.137465][T12144] ? clear_bhb_loop+0x40/0x90 [ 233.137486][T12144] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.137504][T12144] RIP: 0033:0x7f226219c819 [ 233.137521][T12144] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 233.137536][T12144] RSP: 002b:00007f2262ff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 233.137556][T12144] RAX: ffffffffffffffda RBX: 00007f2262415fa0 RCX: 00007f226219c819 [ 233.137568][T12144] RDX: 0000000000000f02 RSI: 00002000000004c0 RDI: 0000000000000004 [ 233.137579][T12144] RBP: 00007f2262ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 233.137589][T12144] R10: 00000000000000f0 R11: 0000000000000246 R12: 0000000000000002 [ 233.137600][T12144] R13: 00007f2262416038 R14: 00007f2262415fa0 R15: 00007ffeb3e21448 [ 233.137628][T12144] [ 233.138365][T12146] netlink: 63 bytes leftover after parsing attributes in process `syz.1.2031'. [ 233.587683][T12167] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 233.593950][T12167] syzkaller1: linktype set to 0 [ 234.053439][T12184] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2043'. [ 234.285726][T12189] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2046'. [ 234.557707][T12200] netlink: 'syz.1.2048': attribute type 1 has an invalid length. [ 234.562792][T12197] syzkaller0: entered promiscuous mode [ 234.568697][T12198] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2047'. [ 234.580600][T12200] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 234.627298][T12200] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2048'. [ 234.661508][T12205] netlink: 'syz.4.2051': attribute type 1 has an invalid length. [ 235.133310][T12228] FAULT_INJECTION: forcing a failure. [ 235.133310][T12228] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 235.169887][T12228] CPU: 0 UID: 0 PID: 12228 Comm: syz.1.2063 Not tainted syzkaller #0 PREEMPT(full) [ 235.169912][T12228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 235.169923][T12228] Call Trace: [ 235.169930][T12228] [ 235.169938][T12228] dump_stack_lvl+0xe8/0x150 [ 235.169968][T12228] should_fail_ex+0x412/0x560 [ 235.169997][T12228] _copy_from_user+0x2d/0xb0 [ 235.170018][T12228] ___sys_recvmsg+0x175/0x590 [ 235.170041][T12228] ? __pfx____sys_recvmsg+0x10/0x10 [ 235.170063][T12228] ? __fget_files+0x2a/0x420 [ 235.170122][T12228] do_recvmmsg+0x334/0x800 [ 235.170148][T12228] ? __pfx_do_recvmmsg+0x10/0x10 [ 235.170177][T12228] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 235.170216][T12228] __x64_sys_recvmmsg+0x198/0x250 [ 235.170238][T12228] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 235.170263][T12228] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.170284][T12228] do_syscall_64+0x15f/0xf80 [ 235.170304][T12228] ? trace_irq_disable+0x3b/0x140 [ 235.170323][T12228] ? clear_bhb_loop+0x40/0x90 [ 235.170344][T12228] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.170362][T12228] RIP: 0033:0x7f2abbb9c819 [ 235.170379][T12228] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 235.170394][T12228] RSP: 002b:00007f2abca40028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 235.170413][T12228] RAX: ffffffffffffffda RBX: 00007f2abbe15fa0 RCX: 00007f2abbb9c819 [ 235.170425][T12228] RDX: 0000000000000f02 RSI: 00002000000004c0 RDI: 0000000000000004 [ 235.170436][T12228] RBP: 00007f2abca40090 R08: 0000000000000000 R09: 0000000000000000 [ 235.170446][T12228] R10: 00000000000000f0 R11: 0000000000000246 R12: 0000000000000002 [ 235.170456][T12228] R13: 00007f2abbe16038 R14: 00007f2abbe15fa0 R15: 00007ffd902a6bc8 [ 235.170483][T12228] [ 235.608582][T12246] FAULT_INJECTION: forcing a failure. [ 235.608582][T12246] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 235.800553][T12246] CPU: 1 UID: 0 PID: 12246 Comm: syz.3.2065 Not tainted syzkaller #0 PREEMPT(full) [ 235.800579][T12246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 235.800590][T12246] Call Trace: [ 235.800598][T12246] [ 235.800606][T12246] dump_stack_lvl+0xe8/0x150 [ 235.800635][T12246] should_fail_ex+0x412/0x560 [ 235.800664][T12246] _copy_from_user+0x2d/0xb0 [ 235.800684][T12246] __sys_bpf+0x229/0x950 [ 235.800707][T12246] ? __pfx___sys_bpf+0x10/0x10 [ 235.800741][T12246] ? ksys_write+0x242/0x270 [ 235.800769][T12246] ? __pfx_ksys_write+0x10/0x10 [ 235.800798][T12246] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.800818][T12246] __x64_sys_bpf+0x7c/0x90 [ 235.800835][T12246] do_syscall_64+0x15f/0xf80 [ 235.800856][T12246] ? trace_irq_disable+0x3b/0x140 [ 235.800874][T12246] ? clear_bhb_loop+0x40/0x90 [ 235.800895][T12246] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.800915][T12246] RIP: 0033:0x7f6753f9c819 [ 235.800933][T12246] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 235.800948][T12246] RSP: 002b:00007f6754e74028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 235.800968][T12246] RAX: ffffffffffffffda RBX: 00007f6754216180 RCX: 00007f6753f9c819 [ 235.800981][T12246] RDX: 0000000000000050 RSI: 0000200000000300 RDI: 000000000000000a [ 235.800993][T12246] RBP: 00007f6754e74090 R08: 0000000000000000 R09: 0000000000000000 [ 235.801004][T12246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 235.801014][T12246] R13: 00007f6754216218 R14: 00007f6754216180 R15: 00007ffdf4378c68 [ 235.801044][T12246] [ 236.498892][T12272] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 236.738331][T12291] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 237.130362][T12306] __nla_validate_parse: 5 callbacks suppressed [ 237.130381][T12306] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2089'. [ 237.159797][T12310] netlink: 264 bytes leftover after parsing attributes in process `syz.1.2091'. [ 237.309650][T12308] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 237.522957][T12325] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2095'. [ 237.668465][T12327] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2096'. [ 237.690672][T12338] FAULT_INJECTION: forcing a failure. [ 237.690672][T12338] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 237.694274][T12327] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2096'. [ 237.738149][T12327] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2096'. [ 237.759150][T12338] CPU: 1 UID: 0 PID: 12338 Comm: syz.0.2099 Not tainted syzkaller #0 PREEMPT(full) [ 237.759175][T12338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 237.759186][T12338] Call Trace: [ 237.759193][T12338] [ 237.759201][T12338] dump_stack_lvl+0xe8/0x150 [ 237.759231][T12338] should_fail_ex+0x412/0x560 [ 237.759261][T12338] _copy_from_user+0x2d/0xb0 [ 237.759281][T12338] ___sys_recvmsg+0x175/0x590 [ 237.759306][T12338] ? __pfx____sys_recvmsg+0x10/0x10 [ 237.759328][T12338] ? __fget_files+0x2a/0x420 [ 237.759379][T12338] do_recvmmsg+0x334/0x800 [ 237.759406][T12338] ? __pfx_do_recvmmsg+0x10/0x10 [ 237.759435][T12338] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 237.759475][T12338] __x64_sys_recvmmsg+0x198/0x250 [ 237.759495][T12338] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 237.759521][T12338] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.759541][T12338] do_syscall_64+0x15f/0xf80 [ 237.759562][T12338] ? trace_irq_disable+0x3b/0x140 [ 237.759582][T12338] ? clear_bhb_loop+0x40/0x90 [ 237.759604][T12338] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.759622][T12338] RIP: 0033:0x7f092f19c819 [ 237.759639][T12338] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 237.759654][T12338] RSP: 002b:00007f092ff9c028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 237.759674][T12338] RAX: ffffffffffffffda RBX: 00007f092f415fa0 RCX: 00007f092f19c819 [ 237.759687][T12338] RDX: 0000000000000f02 RSI: 00002000000004c0 RDI: 0000000000000004 [ 237.759699][T12338] RBP: 00007f092ff9c090 R08: 0000000000000000 R09: 0000000000000000 [ 237.759710][T12338] R10: 00000000000000f0 R11: 0000000000000246 R12: 0000000000000002 [ 237.759721][T12338] R13: 00007f092f416038 R14: 00007f092f415fa0 R15: 00007ffca00a0d98 [ 237.759751][T12338] [ 237.781145][T12327] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2096'. [ 237.834377][ T48] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 237.858035][T12327] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2096'. [ 237.935586][ T108] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 237.982514][T12341] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2101'. [ 238.011105][T12327] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2096'. [ 238.085859][T12341] ip6gre1: entered promiscuous mode [ 238.101511][T12341] ip6gre1: entered allmulticast mode [ 238.130882][ T108] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 238.161436][ T134] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 238.191027][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 238.202998][ T134] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 238.215177][ T108] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 238.593264][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 238.653292][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 238.802586][T12368] xt_CT: No such helper "syz1" [ 239.918198][T12399] vlan3: entered promiscuous mode [ 240.089886][T12401] FAULT_INJECTION: forcing a failure. [ 240.089886][T12401] name failslab, interval 1, probability 0, space 0, times 0 [ 240.166230][T12401] CPU: 1 UID: 0 PID: 12401 Comm: syz.1.2120 Not tainted syzkaller #0 PREEMPT(full) [ 240.166257][T12401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 240.166268][T12401] Call Trace: [ 240.166275][T12401] [ 240.166283][T12401] dump_stack_lvl+0xe8/0x150 [ 240.166314][T12401] should_fail_ex+0x412/0x560 [ 240.166345][T12401] should_failslab+0xa8/0x100 [ 240.166366][T12401] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 240.166394][T12401] ? __alloc_skb+0x1d0/0x7d0 [ 240.166421][T12401] ? __local_bh_enable_ip+0xd0/0x130 [ 240.166449][T12401] __alloc_skb+0x1d0/0x7d0 [ 240.166477][T12401] wireless_send_event+0x2c2/0xbd0 [ 240.166509][T12401] ? __pfx_wireless_send_event+0x10/0x10 [ 240.166538][T12401] ioctl_standard_iw_point+0x9ce/0xd90 [ 240.166571][T12401] ? __pfx_cfg80211_wext_siwencode+0x10/0x10 [ 240.166598][T12401] ? __pfx_ioctl_standard_iw_point+0x10/0x10 [ 240.166632][T12401] ? __pfx___mutex_lock+0x10/0x10 [ 240.166665][T12401] ? __pfx_cfg80211_wext_siwencode+0x10/0x10 [ 240.166692][T12401] ioctl_standard_call+0xaf/0x1b0 [ 240.166713][T12401] ? __pfx_cfg80211_wext_siwencode+0x10/0x10 [ 240.166737][T12401] wext_ioctl_dispatch+0xee/0x410 [ 240.166754][T12401] ? __pfx_ioctl_standard_call+0x10/0x10 [ 240.166776][T12401] wext_handle_ioctl+0x10f/0x1d0 [ 240.166797][T12401] ? __pfx_wext_handle_ioctl+0x10/0x10 [ 240.166812][T12401] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 240.166850][T12401] sock_ioctl+0x159/0x7f0 [ 240.166880][T12401] ? __pfx_sock_ioctl+0x10/0x10 [ 240.166900][T12401] ? __fget_files+0x2a/0x420 [ 240.166920][T12401] ? __fget_files+0x3a0/0x420 [ 240.166941][T12401] ? __fget_files+0x2a/0x420 [ 240.166965][T12401] ? bpf_lsm_file_ioctl+0x9/0x20 [ 240.166983][T12401] ? __pfx_sock_ioctl+0x10/0x10 [ 240.167001][T12401] __se_sys_ioctl+0xfc/0x170 [ 240.167018][T12401] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.167041][T12401] do_syscall_64+0x15f/0xf80 [ 240.167061][T12401] ? trace_irq_disable+0x3b/0x140 [ 240.167080][T12401] ? clear_bhb_loop+0x40/0x90 [ 240.167102][T12401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.167120][T12401] RIP: 0033:0x7f2abbb9c819 [ 240.167137][T12401] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 240.167152][T12401] RSP: 002b:00007f2abca40028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 240.167172][T12401] RAX: ffffffffffffffda RBX: 00007f2abbe15fa0 RCX: 00007f2abbb9c819 [ 240.167185][T12401] RDX: 0000200000000040 RSI: 0000000000008b2a RDI: 0000000000000003 [ 240.167197][T12401] RBP: 00007f2abca40090 R08: 0000000000000000 R09: 0000000000000000 [ 240.167208][T12401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 240.167218][T12401] R13: 00007f2abbe16038 R14: 00007f2abbe15fa0 R15: 00007ffd902a6bc8 [ 240.167249][T12401] [ 240.797554][T12409] netlink: 'syz.1.2126': attribute type 298 has an invalid length. [ 240.908086][T12415] netlink: 'syz.1.2127': attribute type 1 has an invalid length. [ 241.458233][ T5887] IPVS: starting estimator thread 0... [ 241.563801][T12439] IPVS: using max 41 ests per chain, 98400 per kthread [ 241.590325][T12443] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 242.045658][T12465] netlink: 'syz.1.2148': attribute type 1 has an invalid length. [ 242.130070][T12471] xt_TPROXY: Can be used only with -p tcp or -p udp [ 242.153073][T12467] vlan3: entered promiscuous mode [ 242.203878][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 242.242051][T12465] 8021q: adding VLAN 0 to HW filter on device bond12 [ 242.290878][T12468] bond9: (slave veth0_to_bond): Releasing active interface [ 242.338155][T12468] bond12: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 242.383853][T12469] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 242.408833][T12472] bond12: entered promiscuous mode [ 242.420655][T12475] wg2: Caught tx_queue_len zero misconfig [ 242.445454][T12481] __nla_validate_parse: 9 callbacks suppressed [ 242.445474][T12481] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2153'. [ 242.753152][T12489] FAULT_INJECTION: forcing a failure. [ 242.753152][T12489] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 242.794206][T12489] CPU: 0 UID: 0 PID: 12489 Comm: syz.3.2154 Not tainted syzkaller #0 PREEMPT(full) [ 242.794233][T12489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 242.794257][T12489] Call Trace: [ 242.794265][T12489] [ 242.794273][T12489] dump_stack_lvl+0xe8/0x150 [ 242.794304][T12489] should_fail_ex+0x412/0x560 [ 242.794335][T12489] _copy_from_user+0x2d/0xb0 [ 242.794358][T12489] ___sys_recvmsg+0x175/0x590 [ 242.794382][T12489] ? __pfx____sys_recvmsg+0x10/0x10 [ 242.794404][T12489] ? __fget_files+0x2a/0x420 [ 242.794456][T12489] do_recvmmsg+0x334/0x800 [ 242.794482][T12489] ? __pfx_do_recvmmsg+0x10/0x10 [ 242.794511][T12489] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 242.794551][T12489] __x64_sys_recvmmsg+0x198/0x250 [ 242.794572][T12489] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 242.794599][T12489] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.794619][T12489] do_syscall_64+0x15f/0xf80 [ 242.794639][T12489] ? trace_irq_disable+0x3b/0x140 [ 242.794659][T12489] ? clear_bhb_loop+0x40/0x90 [ 242.794686][T12489] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.794703][T12489] RIP: 0033:0x7f6753f9c819 [ 242.794720][T12489] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 242.794735][T12489] RSP: 002b:00007f6754eb6028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 242.794755][T12489] RAX: ffffffffffffffda RBX: 00007f6754215fa0 RCX: 00007f6753f9c819 [ 242.794767][T12489] RDX: 0000000000000f02 RSI: 00002000000004c0 RDI: 0000000000000004 [ 242.794778][T12489] RBP: 00007f6754eb6090 R08: 0000000000000000 R09: 0000000000000000 [ 242.794789][T12489] R10: 00000000000000f0 R11: 0000000000000246 R12: 0000000000000002 [ 242.794800][T12489] R13: 00007f6754216038 R14: 00007f6754215fa0 R15: 00007ffdf4378c68 [ 242.794830][T12489] [ 243.124447][T12491] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2158'. [ 243.217096][T12491] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2158'. [ 249.804020][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 255.591308][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.287291][T12512] netlink: 63 bytes leftover after parsing attributes in process `syz.4.2165'. [ 262.153652][ C0] sched: DL replenish lagged too much [ 264.523813][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 269.833818][T12544] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2176'. [ 273.490009][T12550] netlink: 'syz.1.2177': attribute type 1 has an invalid length. [ 275.799801][T12564] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2177'. [ 275.972826][T12565] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.2180'. [ 276.374900][T12550] bond14: entered promiscuous mode [ 276.527617][T12550] 8021q: adding VLAN 0 to HW filter on device bond14 [ 276.923704][T12551] ipvlan2: entered allmulticast mode [ 277.099083][T12551] bond14: entered allmulticast mode [ 277.665501][T12556] vlan3: entered promiscuous mode [ 279.470027][ T5145] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 280.016653][ T5145] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 280.051097][ T5145] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 280.141591][ T5145] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 280.159268][ T5145] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 281.936682][T12552] ipvlan3: entered allmulticast mode [ 283.324325][ T5839] Bluetooth: hci5: command tx timeout [ 283.674569][T12557] bond14: (slave bridge1): making interface the new active one [ 283.904249][T12557] bridge1: entered promiscuous mode [ 283.946257][T12557] bridge1: entered allmulticast mode [ 284.159789][T12557] bond14: (slave bridge1): Enslaving as an active interface with an up link [ 285.427450][ T5839] Bluetooth: hci5: command tx timeout [ 287.531224][ T5839] Bluetooth: hci5: command tx timeout [ 289.564146][ T5839] Bluetooth: hci5: command tx timeout [ 290.302602][T12580] netlink: 364 bytes leftover after parsing attributes in process `syz.2.2184'. [ 290.701914][T12582] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2185'. [ 292.683849][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 292.916416][ T5887] IPVS: starting estimator thread 0... [ 293.972644][T12589] IPVS: using max 28 ests per chain, 67200 per kthread [ 300.348345][ T5145] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 300.367196][ T5145] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 300.432638][ T5145] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 300.460014][ T5145] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 300.480410][ T5145] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 303.190495][ T5839] Bluetooth: hci6: command tx timeout [ 305.283802][ T5839] Bluetooth: hci6: command tx timeout [ 307.324302][ T5839] Bluetooth: hci6: command tx timeout [ 309.438575][ T5839] Bluetooth: hci6: command tx timeout [ 313.154237][ T5145] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 313.221026][ T5145] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 313.239010][ T5145] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 313.292205][ T5145] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 313.413774][ T5145] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 314.993460][ T5825] syz_tun (unregistering): left allmulticast mode [ 315.576419][ T5839] Bluetooth: hci2: command tx timeout [ 317.191207][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.758550][ T5839] Bluetooth: hci2: command tx timeout [ 319.818475][ T5839] Bluetooth: hci2: command tx timeout [ 321.884170][ T5839] Bluetooth: hci2: command tx timeout [ 324.214621][ T5145] Bluetooth: hci4: command 0x0406 tx timeout [ 340.324513][ T5145] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 340.356053][ T5145] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 340.839691][ T5145] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 340.932071][ T5145] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 341.022430][ T5145] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 343.341022][ T5839] Bluetooth: hci7: command tx timeout [ 345.408611][ T5839] Bluetooth: hci7: command tx timeout [ 347.491985][ T5839] Bluetooth: hci7: command tx timeout [ 349.566171][ T5839] Bluetooth: hci7: command tx timeout [ 352.843882][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 355.528467][ T5145] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 355.548908][ T5145] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 355.616099][ T5145] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 355.984308][ T5145] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 356.066417][ T5145] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 358.364104][ T5839] Bluetooth: hci8: command tx timeout [ 360.444039][ T5839] Bluetooth: hci8: command tx timeout [ 362.524055][ T5839] Bluetooth: hci8: command tx timeout [ 364.056201][T12651] netlink: 'syz.2.2198': attribute type 21 has an invalid length. [ 364.473145][ T5145] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 364.486416][ T5145] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 364.571578][ T5145] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 364.616329][ T5145] Bluetooth: hci8: command tx timeout [ 364.933761][ T5145] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 364.951517][ T5145] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 367.111290][ T5839] Bluetooth: hci9: command tx timeout [ 369.164019][ T5839] Bluetooth: hci9: command tx timeout [ 371.250474][ T5839] Bluetooth: hci9: command tx timeout [ 373.354712][ T5145] Bluetooth: hci9: command tx timeout [ 378.683352][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.507424][ T5839] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 379.530876][ T5839] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 379.544399][ T5839] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 380.642381][ T5839] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 380.659075][ T5839] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 383.484103][ T5145] Bluetooth: hci5: command tx timeout [ 385.564041][ T5145] Bluetooth: hci5: command tx timeout [ 388.034188][ T5145] Bluetooth: hci5: command tx timeout [ 390.263944][ T5145] Bluetooth: hci5: command tx timeout [ 398.284392][ T5839] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 398.373971][ T5839] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 398.389339][ T5839] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 398.463925][ T5839] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 398.483708][ T5839] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 401.573917][ T5839] Bluetooth: hci10: command tx timeout [ 403.539776][ T5145] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 404.248193][ T5145] Bluetooth: hci10: command tx timeout [ 404.511682][ T5145] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 404.530710][ T5145] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 404.862750][ T5145] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 404.878796][ T5145] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 406.324173][ T5145] Bluetooth: hci10: command tx timeout [ 407.220251][ T5145] Bluetooth: hci11: command tx timeout [ 408.076757][ T5839] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 408.312083][ T5839] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 408.381036][ T5832] Bluetooth: hci10: command tx timeout [ 408.392774][ T5839] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 408.418956][ T5839] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 408.503829][ T5839] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 409.401121][ T5145] Bluetooth: hci11: command tx timeout [ 410.634038][T12651] syz_tun (unregistering): left allmulticast mode [ 410.768080][ T5145] Bluetooth: hci4: command tx timeout [ 411.484115][ T5145] Bluetooth: hci11: command tx timeout [ 412.856482][ T5145] Bluetooth: hci4: command tx timeout [ 413.564020][ T5145] Bluetooth: hci11: command tx timeout [ 414.703517][T12611] syz_tun (unregistering): left allmulticast mode [ 414.924220][ T5145] Bluetooth: hci4: command tx timeout [ 415.274600][ T5839] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 415.506651][ T5839] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 415.544724][ T5839] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 415.673449][ T5839] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 415.766359][ T5839] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 417.004036][ T5839] Bluetooth: hci4: command tx timeout [ 417.993431][ T5839] Bluetooth: hci1: command tx timeout [ 420.044111][ T5839] Bluetooth: hci1: command tx timeout [ 422.123697][ T5839] Bluetooth: hci1: command tx timeout [ 424.204078][ T5839] Bluetooth: hci1: command tx timeout [ 426.604015][ T5145] Bluetooth: hci6: command 0x0406 tx timeout [ 436.871879][ T5145] Bluetooth: hci2: command 0x0406 tx timeout [ 438.360010][ T5832] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 438.377363][ T5832] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 438.393839][ T5832] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 438.416117][ T5832] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 438.433687][ T5832] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 439.918350][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.923869][ T5832] Bluetooth: hci12: command tx timeout [ 442.921698][ T5839] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 443.014846][ T5145] Bluetooth: hci12: command tx timeout [ 443.369952][ T5839] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 443.433089][ T5839] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 443.603759][ T5839] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 443.699271][ T5839] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 445.083919][ T5839] Bluetooth: hci12: command tx timeout [ 445.963835][ T5839] Bluetooth: hci13: command tx timeout [ 447.164408][ T5839] Bluetooth: hci12: command tx timeout [ 448.043801][ T5839] Bluetooth: hci13: command tx timeout [ 450.126656][ T5839] Bluetooth: hci13: command tx timeout [ 451.959183][ T5832] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 451.980190][ T5832] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 451.991571][ T5832] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 452.103725][ T5832] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 452.123713][ T5832] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 452.204055][ T5839] Bluetooth: hci13: command tx timeout [ 454.766624][ T5839] Bluetooth: hci14: command tx timeout [ 456.844114][ T5839] Bluetooth: hci14: command tx timeout [ 458.964139][ T5839] Bluetooth: hci14: command tx timeout [ 461.044654][ T5839] Bluetooth: hci14: command tx timeout [ 463.334746][ T5832] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 463.364659][ T5832] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 463.379244][ T5832] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 463.407363][ T5832] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 463.448704][ T5832] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 465.657617][ T5832] Bluetooth: hci0: command tx timeout [ 466.757335][T12524] syz_tun (unregistering): left allmulticast mode [ 467.569824][ T5832] Bluetooth: hci7: command 0x0406 tx timeout [ 467.793909][ T5832] Bluetooth: hci0: command tx timeout [ 469.804117][ T5839] Bluetooth: hci0: command tx timeout [ 470.603754][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 472.164022][ T5839] Bluetooth: hci0: command tx timeout [ 477.626342][ T5832] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 478.011033][ T5832] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 478.101319][ T5832] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 478.156423][ T5832] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 478.226393][ T5832] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 480.694199][ T5832] Bluetooth: hci15: command tx timeout [ 482.780063][ T5839] Bluetooth: hci15: command tx timeout [ 483.036572][ T5839] Bluetooth: hci8: command 0x0406 tx timeout [ 484.844036][ T5832] Bluetooth: hci15: command tx timeout [ 487.041248][ T5832] Bluetooth: hci15: command tx timeout [ 487.847728][ T3488] bond0: (slave netdevsim0): Releasing backup interface [ 488.124099][ T5832] Bluetooth: hci9: command 0x0406 tx timeout [ 497.062935][ T5832] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 497.063172][ T3488] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 497.096564][ T5832] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 497.112846][ T5832] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 497.141510][ T5832] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 497.161431][ T5832] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 499.323978][ T5832] Bluetooth: hci16: command tx timeout [ 499.607542][ T3488] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 501.348268][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.404297][ T5832] Bluetooth: hci16: command tx timeout [ 502.403769][ T3488] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 503.553945][ T5832] Bluetooth: hci16: command tx timeout [ 503.626335][ T5839] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 503.650725][ T5839] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 503.669647][ T5839] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 503.703772][ T5839] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 503.723700][ T5839] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 505.563887][ T5832] Bluetooth: hci16: command tx timeout [ 505.805011][ T5832] Bluetooth: hci17: command tx timeout [ 506.566418][ T3488] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 507.925858][ T5839] Bluetooth: hci17: command tx timeout [ 508.539358][ T5839] Bluetooth: hci5: command 0x0406 tx timeout [ 509.982513][ T5832] Bluetooth: hci17: command tx timeout [ 512.043845][ T5832] Bluetooth: hci17: command tx timeout [ 515.945561][ T3488] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 516.129284][ T3488] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.319347][ T5839] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 516.416001][ T5839] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 516.429410][ T5839] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 516.452002][ T5839] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 516.491504][ T5839] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 518.768690][ T5839] Bluetooth: hci18: command tx timeout [ 520.844319][ T5839] Bluetooth: hci18: command tx timeout [ 521.556084][ T5489] 8021q: adding VLAN 0 to HW filter on device eth1 [ 522.941118][ T5832] Bluetooth: hci18: command tx timeout [ 523.924039][ T5832] Bluetooth: hci10: command 0x0406 tx timeout [ 525.020980][ T5832] Bluetooth: hci18: command tx timeout [ 525.122871][T12758] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 525.139520][T12758] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 525.345875][T12758] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 525.500358][T12758] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 525.521308][T12758] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 526.983672][ T3488] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 527.005080][ T3488] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.284072][ T5839] Bluetooth: hci19: command tx timeout [ 529.004007][ T5839] Bluetooth: hci11: command 0x0406 tx timeout [ 529.954484][ T3488] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 530.363857][ T5832] Bluetooth: hci19: command tx timeout [ 530.542054][ T3488] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.493280][ T5839] Bluetooth: hci19: command tx timeout [ 532.524940][ T3488] bond0: (slave netdevsim0): Releasing backup interface [ 533.029472][ T3488] netdevsim netdevsim3 netdevsim0 (unregistering): left promiscuous mode [ 534.143992][ T5839] Bluetooth: hci4: command 0x0406 tx timeout [ 534.360794][ T3488] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 534.437079][ T3488] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.523669][ T5839] Bluetooth: hci19: command tx timeout [ 536.702523][ T5839] Bluetooth: hci20: unexpected cc 0x0c03 length: 249 > 1 [ 536.722075][ T5839] Bluetooth: hci20: unexpected cc 0x1003 length: 249 > 9 [ 536.733642][ T5839] Bluetooth: hci20: unexpected cc 0x1001 length: 249 > 9 [ 536.790402][ T5839] Bluetooth: hci20: unexpected cc 0x0c23 length: 249 > 4 [ 536.978783][ T5839] Bluetooth: hci20: unexpected cc 0x0c38 length: 249 > 2 [ 539.170298][ T5832] Bluetooth: hci20: command tx timeout [ 539.251608][ T5832] Bluetooth: hci1: command 0x0406 tx timeout [ 541.795712][ T5832] Bluetooth: hci20: command tx timeout [ 543.839688][ T5832] Bluetooth: hci20: command tx timeout [ 545.884052][ T5832] Bluetooth: hci20: command tx timeout [ 551.468334][ T5489] 8021q: adding VLAN 0 to HW filter on device eth2 [ 556.257181][ T5839] Bluetooth: hci21: unexpected cc 0x0c03 length: 249 > 1 [ 556.287119][ T5839] Bluetooth: hci21: unexpected cc 0x1003 length: 249 > 9 [ 556.846139][ T5839] Bluetooth: hci21: unexpected cc 0x1001 length: 249 > 9 [ 556.868636][ T5839] Bluetooth: hci21: unexpected cc 0x0c23 length: 249 > 4 [ 556.911637][ T5839] Bluetooth: hci21: unexpected cc 0x0c38 length: 249 > 2 [ 559.899984][ T5832] Bluetooth: hci21: command tx timeout [ 561.963956][ T5832] Bluetooth: hci21: command tx timeout [ 562.790875][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.050187][ T5839] Bluetooth: hci21: command tx timeout [ 564.994381][T12758] Bluetooth: hci12: command 0x0406 tx timeout [ 566.068946][ T5145] Bluetooth: hci22: unexpected cc 0x0c03 length: 249 > 1 [ 566.091920][ T5145] Bluetooth: hci22: unexpected cc 0x1003 length: 249 > 9 [ 566.107366][ T5145] Bluetooth: hci22: unexpected cc 0x1001 length: 249 > 9 [ 566.128001][ T5145] Bluetooth: hci21: command tx timeout [ 566.143958][ T5145] Bluetooth: hci22: unexpected cc 0x0c23 length: 249 > 4 [ 566.159049][ T5145] Bluetooth: hci22: unexpected cc 0x0c38 length: 249 > 2 [ 568.764010][ T5832] Bluetooth: hci22: command tx timeout [ 569.969875][ T5832] Bluetooth: hci13: command 0x0406 tx timeout [ 570.844001][T12789] Bluetooth: hci22: command tx timeout [ 572.926126][T12789] Bluetooth: hci22: command tx timeout [ 575.004118][ T5832] Bluetooth: hci22: command tx timeout [ 575.150557][ T5832] Bluetooth: hci14: command 0x0406 tx timeout [ 576.056576][ T5839] Bluetooth: hci23: unexpected cc 0x0c03 length: 249 > 1 [ 576.094708][ T5839] Bluetooth: hci23: unexpected cc 0x1003 length: 249 > 9 [ 576.188475][ T5839] Bluetooth: hci23: unexpected cc 0x1001 length: 249 > 9 [ 576.515939][ T5839] Bluetooth: hci23: unexpected cc 0x0c23 length: 249 > 4 [ 576.548920][ T5839] Bluetooth: hci23: unexpected cc 0x0c38 length: 249 > 2 [ 578.966136][T12789] Bluetooth: hci23: command tx timeout [ 581.013950][T12789] Bluetooth: hci23: command tx timeout [ 583.084635][T12789] Bluetooth: hci23: command tx timeout [ 583.816510][ T5839] Bluetooth: hci24: unexpected cc 0x0c03 length: 249 > 1 [ 584.175911][ T5839] Bluetooth: hci24: unexpected cc 0x1003 length: 249 > 9 [ 584.188713][ T5839] Bluetooth: hci24: unexpected cc 0x1001 length: 249 > 9 [ 584.436241][ T5839] Bluetooth: hci24: unexpected cc 0x0c23 length: 249 > 4 [ 584.524310][ T5839] Bluetooth: hci24: unexpected cc 0x0c38 length: 249 > 2 [ 585.448405][ T5839] Bluetooth: hci23: command tx timeout [ 586.845003][T12789] Bluetooth: hci24: command tx timeout [ 588.925208][T12789] Bluetooth: hci24: command tx timeout [ 590.449150][T12789] Bluetooth: hci0: command 0x0406 tx timeout [ 591.193755][T12789] Bluetooth: hci24: command tx timeout [ 593.245778][ T5839] Bluetooth: hci24: command tx timeout [ 603.077166][T12789] Bluetooth: hci25: unexpected cc 0x0c03 length: 249 > 1 [ 603.362249][T12789] Bluetooth: hci25: unexpected cc 0x1003 length: 249 > 9 [ 603.445911][T12789] Bluetooth: hci25: unexpected cc 0x1001 length: 249 > 9 [ 603.466232][T12789] Bluetooth: hci25: unexpected cc 0x0c23 length: 249 > 4 [ 603.483627][T12789] Bluetooth: hci25: unexpected cc 0x0c38 length: 249 > 2 [ 605.668578][ T5839] Bluetooth: hci25: command tx timeout [ 605.809804][ T5832] Bluetooth: hci15: command 0x0406 tx timeout [ 607.724090][T12789] Bluetooth: hci25: command tx timeout [ 609.823904][T12789] Bluetooth: hci25: command tx timeout [ 611.913776][T12789] Bluetooth: hci25: command tx timeout [ 613.979896][ T5832] Bluetooth: hci26: unexpected cc 0x0c03 length: 249 > 1 [ 613.993684][ T5832] Bluetooth: hci26: unexpected cc 0x1003 length: 249 > 9 [ 614.006258][ T5832] Bluetooth: hci26: unexpected cc 0x1001 length: 249 > 9 [ 614.036524][ T5832] Bluetooth: hci26: unexpected cc 0x0c23 length: 249 > 4 [ 614.078592][ T5832] Bluetooth: hci26: unexpected cc 0x0c38 length: 249 > 2 [ 616.363955][ T5832] Bluetooth: hci26: command tx timeout [ 618.443846][ T5832] Bluetooth: hci26: command tx timeout [ 620.576202][T12789] Bluetooth: hci26: command tx timeout [ 621.163853][T12789] Bluetooth: hci16: command 0x0406 tx timeout [ 622.603687][ T5832] Bluetooth: hci26: command tx timeout [ 624.234846][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.381329][T12789] Bluetooth: hci27: unexpected cc 0x0c03 length: 249 > 1 [ 625.400054][T12789] Bluetooth: hci27: unexpected cc 0x1003 length: 249 > 9 [ 625.551108][T12789] Bluetooth: hci27: unexpected cc 0x1001 length: 249 > 9 [ 625.587246][T12789] Bluetooth: hci27: unexpected cc 0x0c23 length: 249 > 4 [ 625.699180][T12789] Bluetooth: hci27: unexpected cc 0x0c38 length: 249 > 2 [ 626.283982][T12789] Bluetooth: hci17: command 0x0406 tx timeout [ 627.803990][ T5832] Bluetooth: hci27: command tx timeout [ 629.995300][ T5832] Bluetooth: hci27: command tx timeout [ 632.050072][ T5832] Bluetooth: hci27: command tx timeout [ 634.253774][ T5832] Bluetooth: hci27: command tx timeout [ 637.008532][ T31] INFO: task syz-executor:12622 blocked for more than 143 seconds. [ 637.043587][ T31] Not tainted syzkaller #0 [ 637.049188][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 637.073551][ T31] task:syz-executor state:D stack:23832 pid:12622 tgid:12622 ppid:1 task_flags:0x400140 flags:0x00080002 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 637.590725][ T31] Call Trace: [ 637.641120][ T31] [ 637.663709][ T31] __schedule+0x17b4/0x5680 [ 637.993723][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 638.149409][ T31] ? __pfx___schedule+0x10/0x10 [ 638.267327][ T31] ? schedule+0x90/0x360 [ 638.500893][ T31] schedule+0x164/0x360 [ 638.588643][ T31] schedule_preempt_disabled+0x13/0x30 [ 638.707747][ T31] rwsem_down_write_slowpath+0x883/0x1080 [ 638.893956][ T31] ? rwsem_down_write_slowpath+0x4a3/0x1080 [ 638.902230][ T31] ? __pfx_rwsem_down_write_slowpath+0x10/0x10 [ 639.323735][ T31] ? wake_up_q+0x99/0xd0 [ 639.328062][ T31] ? rdma_dev_exit_net+0x92/0x350 [ 639.383581][ T31] down_write+0x1bc/0x200 [ 639.387969][ T31] ? __pfx_down_write+0x10/0x10 [ 639.433749][ T31] ? rdma_net_to_dev_net+0x23/0x240 [ 639.472270][ T31] ? rdma_net_to_dev_net+0x23/0x240 [ 639.493632][ T31] ? rdma_net_to_dev_net+0x1ed/0x240 [ 639.510856][ T31] rdma_dev_exit_net+0x92/0x350 [ 639.526363][ T31] ? __pfx_netdev_run_todo+0x10/0x10 [ 639.538858][ T31] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 639.813696][ T31] ? rtnl_is_locked+0x15/0x20 [ 639.822868][ T31] ops_undo_list+0x49f/0x940 [ 639.883549][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 639.889334][ T31] ? ops_init+0x469/0x5c0 [ 639.909116][ T31] setup_net+0x2f0/0x340 [ 639.917165][ T31] ? __pfx_setup_net+0x10/0x10 [ 639.929999][ T31] ? preinit_net+0x492/0x7b0 [ 640.023071][ T31] copy_net_ns+0x50e/0x730 [ 640.028105][ T31] create_new_namespaces+0x3e7/0x6a0 [ 640.042117][ T31] ? security_capable+0x7e/0x2c0 [ 640.082793][ T31] unshare_nsproxy_namespaces+0x149/0x190 [ 640.096490][ T31] ksys_unshare+0x54e/0x970 [ 640.111254][ T31] ? __pfx_ksys_unshare+0x10/0x10 [ 640.199206][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 640.213511][ T31] __x64_sys_unshare+0x38/0x50 [ 640.224590][ T31] do_syscall_64+0x15f/0xf80 [ 640.683901][ T31] ? trace_irq_disable+0x3b/0x140 [ 640.688994][ T31] ? clear_bhb_loop+0x40/0x90 [ 641.523612][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.529574][ T31] RIP: 0033:0x7fb63e99dae7 [ 641.636403][ T31] RSP: 002b:00007fffa9369bd8 EFLAGS: 00000202 ORIG_RAX: 0000000000000110 [ 641.657806][ T31] RAX: ffffffffffffffda RBX: 00007fb63ec15f40 RCX: 00007fb63e99dae7 [ 641.683678][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 641.790544][ T31] RBP: 00007fb63ec167b8 R08: 0000000000000000 R09: 0000000000000000 [ 641.821066][T12789] Bluetooth: hci18: command 0x0406 tx timeout [ 641.963604][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 641.971626][ T31] R13: 0000000000000003 R14: 00007fffa9369e18 R15: 0000000000000000 [ 642.060150][ T31] [ 642.063275][ T31] INFO: task syz-executor:12642 blocked for more than 148 seconds. [ 642.473772][ T31] Not tainted syzkaller #0 [ 642.478754][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 642.583539][ T31] task:syz-executor state:D stack:25880 pid:12642 tgid:12642 ppid:1 task_flags:0x400140 flags:0x00080002 [ 642.633613][ T31] Call Trace: [ 642.669643][ T31] [ 642.672622][ T31] __schedule+0x17b4/0x5680 [ 642.703733][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 642.743873][ T31] ? trace_sched_exit_tp+0x3a/0x130 [ 642.756047][ T31] ? __pfx___schedule+0x10/0x10 [ 643.003647][ T31] ? schedule+0x90/0x360 [ 643.007955][ T31] schedule+0x164/0x360 [ 643.012128][ T31] schedule_preempt_disabled+0x13/0x30 [ 643.119709][ T31] rwsem_down_write_slowpath+0x883/0x1080 [ 643.163637][ T31] ? rwsem_down_write_slowpath+0x4a3/0x1080 [ 643.179853][ T31] ? __pfx_rwsem_down_write_slowpath+0x10/0x10 [ 643.194853][ T31] ? rdma_dev_exit_net+0x92/0x350 [ 643.273547][ T31] down_write+0x1bc/0x200 [ 643.277935][ T31] ? __pfx_down_write+0x10/0x10 [ 643.297254][ T31] ? rdma_net_to_dev_net+0x23/0x240 [ 643.310385][ T31] ? rdma_net_to_dev_net+0x23/0x240 [ 643.323487][ T31] ? rdma_net_to_dev_net+0x1ed/0x240 [ 643.410799][ T31] rdma_dev_exit_net+0x92/0x350 [ 643.423170][ T31] ? __pfx_netdev_run_todo+0x10/0x10 [ 643.460595][ T31] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 643.475378][ T31] ? rtnl_is_locked+0x15/0x20 [ 643.482876][ T31] ops_undo_list+0x49f/0x940 [ 643.508512][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 643.576251][ T31] ? ops_init+0x469/0x5c0 [ 643.580647][ T31] setup_net+0x2f0/0x340 [ 643.596774][ T31] ? __pfx_setup_net+0x10/0x10 [ 643.621023][ T31] ? preinit_net+0x492/0x7b0 [ 643.633566][ T31] copy_net_ns+0x50e/0x730 [ 643.665886][ T31] create_new_namespaces+0x3e7/0x6a0 [ 643.713332][ T31] ? security_capable+0x7e/0x2c0 [ 643.726665][ T31] unshare_nsproxy_namespaces+0x149/0x190 [ 643.776115][ T31] ksys_unshare+0x54e/0x970 [ 643.780944][ T31] ? __pfx_ksys_unshare+0x10/0x10 [ 643.803619][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 643.810105][ T31] __x64_sys_unshare+0x38/0x50 [ 643.893568][ T31] do_syscall_64+0x15f/0xf80 [ 643.911235][ T31] ? trace_irq_disable+0x3b/0x140 [ 643.922366][ T31] ? clear_bhb_loop+0x40/0x90 [ 643.935559][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 644.333574][ T31] RIP: 0033:0x7f752bb9dae7 [ 644.338382][ T31] RSP: 002b:00007fff054da188 EFLAGS: 00000202 ORIG_RAX: 0000000000000110 [ 644.413295][ T31] RAX: ffffffffffffffda RBX: 00007f752be15f40 RCX: 00007f752bb9dae7 [ 644.433626][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 644.508619][ T31] RBP: 00007f752be167b8 R08: 0000000000000000 R09: 0000000000000000 [ 644.545429][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 644.590865][ T31] R13: 0000000000000003 R14: 00007fff054da3c8 R15: 0000000000000000 [ 644.642459][ T31] [ 644.688253][ T31] INFO: task syz-executor:12654 blocked for more than 151 seconds. [ 645.724658][ T31] Not tainted syzkaller #0 [ 645.729639][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 646.253577][ T31] task:syz-executor state:D stack:25880 pid:12654 tgid:12654 ppid:1 task_flags:0x400140 flags:0x00080002 [ 646.793853][ T31] Call Trace: [ 646.797185][ T31] [ 646.800124][ T31] __schedule+0x17b4/0x5680