last executing test programs: 1.903596421s ago: executing program 0 (id=4105): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000003c0)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1}, 0x10, &(0x7f00000000c0)={&(0x7f0000000580)={0x1, 0x7ab0715dca68fed7, 0x0, {}, {}, {}, 0x4, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "b8ee0816756b62187804752330b2b55830d7228ef1593c0639bd084bba0bfd8db72f70e5b2e7f90e11cbc6ec61a03fc316d5d47970907af5fc4a27f6cf718909"}}, 0x20000600}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000540)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x1d, r2, 0x0, 0x4000}, 0x10, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[], 0x80}, 0x1, 0x0, 0x20f5800, 0x4000}, 0x4044001) 1.755595121s ago: executing program 0 (id=4109): close(0x3) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'ipvlan1\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$kcm(0x29, 0x5, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002200), r2) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f00000003c0)=ANY=[@ANYRES8=r4, @ANYRES16=r4, @ANYRES16=r1, @ANYRES32=r5, @ANYBLOB="0a00060008021100000100000500130100000000"], 0x5c}, 0x1, 0x0, 0x0, 0x2404c8d7}, 0x20008804) bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00'}) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019000100000000000000000000000000000000000000000000000000fe8000000000000000833449155bf3c2640000000000000002000010"], 0xb8}}, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_int(r8, 0x0, 0x16, 0x0, 0x0) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=ANY=[@ANYRES8=r7], 0x188}, 0x1, 0x0, 0x0, 0x20004044}, 0x0) r9 = socket$inet6(0xa, 0x1, 0x8010000000000084) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r12 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r12, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) setsockopt$inet6_int(r12, 0x29, 0x42, &(0x7f00000005c0)=0x7fff, 0x4) connect$inet6(r12, &(0x7f0000000300)={0xa, 0x4e20, 0x380000, @loopback}, 0x1c) sendmsg$NL80211_CMD_SET_REG(r10, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r11, @ANYBLOB="04002de015325ddbdf251a000000060000c12754a221aecb2b530a1c7a7ef2f0afbbf9d2d6c9199d66833d35db46d64131252df43f0d5cbcd6d78d96db87b2905cd0e50132b506a159fa3feb0aeac567aefca9e705d386de6e97a0b96a1abc1346e7b2be2f5bacf4d33a802ce0a4a92af8beb1a42c1c7554dfd743c38cbeae9416f6ad285300dfcc0b4becdc96771fa163966de73bd697c2a5393e0b329d23e7e9fbbffbaf9ce68db0c446f1d117fbe8432e638e86354f8140966c5d96231f993e497f887e4a4d3eb08a9838391d02b65e989f01c16cd9615a396623212bb4b0ae2b637c32c63def712dab050a0fa1b72b"], 0x20}, 0x1, 0x0, 0x0, 0x200c0011}, 0x19) connect$inet6(r9, &(0x7f0000000140)={0xa, 0x0, 0x3, @loopback, 0x6}, 0x1c) shutdown(r9, 0x1) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r9, 0x84, 0x1a, &(0x7f00000000c0), &(0x7f0000000000)=0x8) r13 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r13, 0x84, 0x6b, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) 1.752126805s ago: executing program 4 (id=4110): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000040)={0x0, 0xfff9}, 0x8) 1.594638111s ago: executing program 4 (id=4113): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)={0x44, r1, 0x101, 0x70bd2a, 0x80000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0x7, 0x34, @random="7677ae"}, @NL80211_ATTR_KEYS={0x1c, 0x51, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "40fd2cad9ee68885bce3d1518e"}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x4804) 1.505194523s ago: executing program 4 (id=4115): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r0}, 0xc) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'wg1\x00'}) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000440)={0x0, 0xff6d, 0x7ff, 0xfffffffc, 0x9, 0x7}, &(0x7f0000000480)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000009c0)={r4, @in={{0x2, 0x4e24, @private=0xa010101}}, [0x2, 0xa, 0x7, 0xe, 0x979c, 0x4, 0x3, 0x7fffffff, 0x3b72, 0x9, 0x401, 0x1, 0x3, 0x893, 0xffff]}, &(0x7f00000004c0)=0x100) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xfff3}}}, 0x24}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x20, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) 1.325488169s ago: executing program 1 (id=4118): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x308, 0xffffffff, 0x0, 0x0, 0x168, 0xffffffff, 0xffffffff, 0x270, 0x330, 0x330, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x6, 0x4, 0x0, 0x1, 0x1, 0x4], 0x1, 0x5}, {0x4, [0x5, 0x4, 0x2, 0x2, 0x1, 0x3], 0x4, 0x2}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x2, 0x0, 0x2, 0x4, 0x5, 0x1], 0x1, 0x2}, {0x2, [0x0, 0x7, 0x0, 0x0, 0x2, 0x1]}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @multicast, 0xd, 0xf, [0x33, 0x3e, 0x25, 0x23, 0x25, 0x2b, 0xb, 0x21, 0x12, 0x15, 0x1c, 0x8, 0x16, 0x37, 0x3b, 0x3a], 0x1, 0x9044, 0xff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x368) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x18) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x120000, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r4, 0x401054d5, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$sock_ifreq(r5, 0x89f1, &(0x7f0000000000)={'bond0\x00', @ifru_names='wlan1\x00'}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4761823a711fad0d030000005637aefe6685207df0d9370bebbc8f25b06be36d93e6", @ANYRES16=r3, @ANYBLOB="4d7e00000000000000002a00000008002f000000000005003600000000000c0005000202aaaaaaaaaaaa05003700010000000a0001007770616e3100000006000400a3aa00000600060001000000"], 0x54}, 0x4, 0x700000000000000}, 0x40) 1.161554653s ago: executing program 3 (id=4121): socket$inet_udp(0x2, 0x2, 0x0) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x2f, @multicast2, 0x0, 0x1, 'lblc\x00', 0x0, 0x102, 0xf}, 0x2c) 1.116933304s ago: executing program 4 (id=4122): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c0000001000010027bd7004ffdbdf2500000000", @ANYRES32, @ANYBLOB="104e0600"], 0x4c}, 0x1, 0x0, 0x0, 0x400c880}, 0x4008002) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400eaef", @ANYRES16, @ANYRES8=r0, @ANYBLOB='\f'], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000046000701fcffffff0200000001"], 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x4c001}, 0x90) 1.083993463s ago: executing program 3 (id=4123): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) (async) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) (async) ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000)) (async) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x3, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) (async) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r4, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c) (async) connect$rose(r4, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @default, @bcast, @default]}, 0x40) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000096c0)={0x0, 0x0, 0x0}, 0x0) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) bind$alg(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000740)=[{{&(0x7f00000002c0)=@l2tp={0x2, 0x0, @multicast1, 0x4}, 0x80, &(0x7f0000000340)=[{0x0}], 0x1}}], 0x1, 0x11) (async) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x4, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="850000008a0000006a0a00ff00000000350000000000000095000000000000001810"], &(0x7f0000000140)='GPL\x00', 0xa, 0x95, &(0x7f0000000180)=""/149}, 0x94) (async) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000240)={&(0x7f0000000280)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x35}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x4044040) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, 0x0, 0x0) (async) setsockopt$sock_attach_bpf(r5, 0x1, 0xd, &(0x7f0000000080), 0x24) 1.004205975s ago: executing program 4 (id=4124): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@newtaction={0x8c, 0x30, 0xb, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x74, 0x1, 0x0, 0x0, {{0x7}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_LABELS={0x14, 0x7, "4614c334e344ae53204373dc0ddeb17f"}, @TCA_CT_LABELS_MASK={0x14, 0x8, "eb6404074c369780d3df843c4e5e039f"}, @TCA_CT_ZONE={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x0) r2 = socket$inet6(0xa, 0x5, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0xffc5) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000000)={r4, 0x10001}, 0x8) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000040)={r4, 0x36, "c8550fe3ea12b56855cba718194785f93ae802b6ce37205bfb0457a19aa291fd773bd56990a6001da5d7cb5cd2a30b88bd8d974796e5"}, &(0x7f0000000180)=0x3e) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004260000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1.002883156s ago: executing program 1 (id=4125): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) recvmmsg(r1, &(0x7f00000037c0)=[{{0x0, 0x0, 0x0}, 0x500}, {{0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1}}], 0x2, 0x40010101, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3400000012000100000000000000000000000000000000000000ffffe000000200000000000032000c00150000000000000000004b872982bc913238214476c83739ce48c548082da9f480b11e20565cc91a1f2f185559a92c849231015bdf63e5d93d98d6d4a58bfa00deed754edacc3c472aa8c5cdd83de6d6b00cca6c73bb50bd3f33df3ce5c8857a679990"], 0x34}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r3, &(0x7f0000004380)=[{{&(0x7f0000004440)={0xa, 0x4e22, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000800)='P', 0x1}], 0x1}}, {{&(0x7f0000000180)={0xa, 0x4e20, 0x401, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x1c, &(0x7f0000000780)=[{&(0x7f00000001c0)='K', 0x1}], 0x1}}], 0x2, 0x0) r4 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r4, &(0x7f0000000180)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(r4, 0x0, &(0x7f0000000200)) shutdown(r3, 0x1) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000080), 0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002100010000000000000000000a000020"], 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) r6 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r6, &(0x7f0000000000)='.', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES8=r7, @ANYRES16=r9], 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=@deltclass={0x88, 0x29, 0x400, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0x5}, {0x0, 0x2}, {0xfff2, 0x10}}, [@TCA_RATE={0x6, 0x5, {0x93, 0xfe}}, @tclass_kind_options=@c_mqprio={0xb}, @TCA_RATE={0x6, 0x5, {0x7, 0x14}}, @TCA_RATE={0x6, 0x5, {0xb0}}, @tclass_kind_options=@c_hfsc={{0x9}, {0x14, 0x2, [@TCA_HFSC_RSC={0x10, 0x1, {0xfffffffc, 0x5, 0x3}}]}}, @tclass_kind_options=@c_mq={0x7}, @TCA_RATE={0x6, 0x5, {0xce, 0x1b}}, @TCA_RATE={0x6, 0x5, {0x1, 0x5}}, @TCA_RATE={0x6, 0x5, {0x4, 0x4}}]}, 0x88}, 0x1, 0x0, 0x0, 0x4004}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r9, {}, {0x0, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) 944.690968ms ago: executing program 3 (id=4127): r0 = socket$isdn_base(0x22, 0x3, 0x0) r1 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r2}, 0x94) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000200)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) unshare(0x22020600) (async) unshare(0x22020600) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r3, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) (async) openat$cgroup_ro(r3, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0xfffffffffffffd5f) socket(0x10, 0x803, 0x0) (async) r4 = socket(0x10, 0x803, 0x0) r5 = socket$inet6(0xa, 0x80002, 0x88) r6 = epoll_create1(0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r7, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8) bind$vsock_stream(r7, &(0x7f0000000940), 0x10) (async) bind$vsock_stream(r7, &(0x7f0000000940), 0x10) close(0x3) (async) close(0x3) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)={0x4c, r9, 0x1, 0x70bd2a, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0xffffffffffffff23, 0xb, 0x9}, {0x6, 0x11, 0xffff}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x40800) (async) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)={0x4c, r9, 0x1, 0x70bd2a, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0xffffffffffffff23, 0xb, 0x9}, {0x6, 0x11, 0xffff}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x40800) listen(r7, 0x0) r10 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r10, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r10, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000200)={0xa0000004}) (async) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000200)={0xa0000004}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000500)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x40, 0x4, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty, {[@ssrr={0x89, 0x1b, 0x8a, [@rand_addr=0x64010100, @loopback, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x21}, @private=0xa0100fd, @multicast1]}, @timestamp_prespec={0x44, 0x4c, 0xfb, 0x3, 0x6, [{@dev={0xac, 0x14, 0x14, 0x13}, 0x9}, {@local, 0x6}, {@local, 0x3b}, {@rand_addr=0x64010100, 0xffffffff}, {@dev={0xac, 0x14, 0x14, 0x27}, 0x1}, {@multicast1, 0x80}, {@private=0xa010100, 0x69}, {@empty, 0xd}, {@loopback, 0x1}]}, @ra={0x94, 0x4, 0x1}, @generic={0x89, 0xa, "60af26448ac94847"}, @cipso={0x86, 0x1e, 0x0, [{0x2, 0x11, "ff4bcf0592de646d8b08a0d73ad9dc"}, {0x6, 0x7, "50bd219eee"}]}, @rr={0x7, 0xf, 0x48, [@loopback, @private=0xa010102, @private=0xa010102]}, @timestamp_prespec={0x44, 0x14, 0x49, 0x3, 0x2, [{@loopback, 0x44}, {@rand_addr=0x64010101, 0x82}]}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0xc, 0x58, 0x3, 0xd, [{@loopback, 0xea18}]}, @timestamp_addr={0x44, 0x24, 0x4c, 0x1, 0xf, [{@local, 0x7}, {@dev={0xac, 0x14, 0x14, 0x43}, 0x7da}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfff}, {@empty}]}]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x42}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x42}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) 883.987134ms ago: executing program 1 (id=4128): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x8, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41100, 0x5f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) sendmsg(r0, &(0x7f0000000a80)={&(0x7f0000000500)=@vsock={0x28, 0x0, 0x2710, @local}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000580)="3486360355408bf08bd9fd9052f70c9f467b328a1599f7560bc8bd0ee76a87f729df68b3dfe06de24946310277a50c783c05cf6a608848aa52076590a6b5dfb6a590c6a1de5767e914fd0175904979ff1feff331958a558813c3384f67f3efffc0860f359fb579d6914509dcafeb7f8ce4cca3055a7efb9e86bfaccf822532d3ee02e65a0823cb6840f1151562549ddf6ee44799407a199f1adea8f6a2118530152136cc32da3f00657bf8ccb68aa7fc248b6687d31b61281afc3d6f4044fc1b20b58659052df9332d45aba1a2fbe7e9a16c51ae05398190d7225be76064c596d3bfda41c42665c9613b6fdeac73bbb3e49a055e", 0xf4}, {&(0x7f0000000800)="3b2ee068d3e54d353e84e238d7e7ec73f8caf7b569fe459a14359127e0661105d07fdd6038ac101b895ef285681526aceae232ec05a3f9b3907f1437aa6487cde36989358b8855affb71d87087eb27eb7de98b1ef9f85dd0d5357d66a22025d39c1aed11041a4cb3bd617924b684996e4b68d639439f8ee543d1a67a06d841bee4a063f469ae8d5a9bb0410c018e91033e50cca14bcef1392f4285a6152a076867ed0afaf066f49e149f23e176c69c931db79e58b4c3a5b1e34b0bf5c1d2a7e42d7f64a9d0a55d752e0c", 0xca}, {&(0x7f0000000900)}], 0x3, &(0x7f0000000980)=[{0x18, 0x84, 0x10, "98b74273"}, {0x20, 0x10d, 0x1, "4115f208820808702c175de4"}, {0xb8, 0x103, 0xee24, "0942f7bdf45285347daaf3f4085689c06b3a68297471e4194ab6b659d3a26be8b3a6b0595ec0200a164f40712aed05fe9605d4aae0fe79798f8b049382fa8345cfde0108fdc28f8c36a0db192a5810a208accf86a58d25f98b96a8baaaae5bccf051045b6c80bce3ac165e76187d63fb26ecfa3994033a507bf07a1426e420ad27850f233a595ae74524072bd1666c0eba0597a07fac6c8ad63c5545b65d4700ada8df"}], 0xf0}, 0x40088c0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="a5930e132ccd2939bb2ef77868a1dc1429bd217150e5c338e983cabdd7bfae1fc1fa1cf20535a16a67174ca92c49cd22bf675c842558fa4731b77a1c5ddef65b8a90d9e7aa9e76c2e8f4452876303898c06497c4b6063c6160b22932029257a0a3e13d65ea859e1836e61113c0039ba499052c18b78c1ce25db42f484e8683f5c4f2d8286f7d91", @ANYRESDEC=r1, @ANYRESHEX=r0], &(0x7f0000000780)='GPL\x00', 0x100001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10) close(r0) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.stat\x00', 0x275a, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="740000001000210400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000061000000380012800e000100697036677265746170000000240002800800040004000000060010000000000005001700", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="0a0001"], 0x74}}, 0x0) write$cgroup_subtree(r5, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) r7 = openat$cgroup_ro(r5, &(0x7f0000000900)='blkio.bfq.time_recursive\x00', 0x0, 0x0) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000b00), r5) sendmsg$BATADV_CMD_GET_MESH(r7, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x24, r8, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xb4e}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x40084) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r5, 0x89f8, &(0x7f0000000280)={'gretap0\x00', &(0x7f00000003c0)={'gretap0\x00', 0x0, 0x8, 0x8, 0x7fff, 0x1, {{0x39, 0x4, 0x3, 0x3d, 0xe4, 0x64, 0x0, 0x9, 0x4, 0x0, @local, @multicast2, {[@noop, @timestamp_addr={0x44, 0x24, 0x83, 0x1, 0x9, [{@local, 0xdaa}, {@remote, 0xb7b}, {@private=0xa010100, 0x9}, {@multicast1, 0xe8}]}, @lsrr={0x83, 0x13, 0x84, [@private=0xa010102, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @ssrr={0x89, 0x23, 0x13, [@local, @multicast2, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @multicast1, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_prespec={0x44, 0x4c, 0x71, 0x3, 0x0, [{@rand_addr=0x64010101, 0x9}, {@loopback, 0x8000}, {@local, 0x328e4c32}, {@private=0xa010102, 0x7f}, {@empty, 0x5}, {@empty, 0x1}, {@multicast2, 0x1}, {@multicast2, 0xfffffff9}, {@remote, 0x2}]}, @end, @generic={0x7, 0x9, "33eaf08eab4162"}, @ssrr={0x89, 0x1f, 0x94, [@empty, @multicast1, @dev={0xac, 0x14, 0x14, 0x3f}, @empty, @dev={0xac, 0x14, 0x14, 0x27}, @dev={0xac, 0x14, 0x14, 0x33}, @private=0xa010101]}]}}}}}) sendmsg$inet(r4, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x34004000) write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1) sendmsg$AUDIT_GET_FEATURE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x30008004}, 0x20000000) 836.290261ms ago: executing program 0 (id=4129): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x8008f513, &(0x7f0000000080)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a09040000000000000000020000000900010073797a30000000000900020073797a32000000002c00048028000180080001006e6174001c0002800800024000000002080003400000000a08000140000001"], 0x80}}, 0x0) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x24, r2, 0x1, 0x70bd2d, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) writev(r0, &(0x7f0000000180), 0x100000000000003c) 817.920539ms ago: executing program 2 (id=4130): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000080)={0x0, @multicast2, @loopback}, &(0x7f0000000100)=0xc) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'gretap0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x7, 0x20, 0x0, 0x6afa3ee5, {{0xc, 0x4, 0x2, 0x0, 0x30, 0x65, 0x0, 0x7, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @empty, {[@timestamp={0x44, 0x18, 0x78, 0x0, 0xc, [0x80, 0x3, 0x1, 0x2, 0x7]}, @end]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000300)={'gre0\x00', 0x0, 0x1, 0x7800, 0x6, 0xfff, {{0x20, 0x4, 0x3, 0x7, 0x80, 0x68, 0x0, 0x4, 0x29, 0x0, @remote, @broadcast, {[@timestamp={0x44, 0x18, 0x6a, 0x0, 0x7, [0x4, 0x0, 0x0, 0x4c9, 0x7ff]}, @timestamp={0x44, 0x24, 0xea, 0x0, 0x0, [0x58f4, 0x3, 0xc, 0x8, 0x3, 0x10, 0x4, 0x0]}, @generic={0x94, 0x5, "9b77b9"}, @cipso={0x86, 0x1d, 0x1, [{0x2, 0x7, "1a5a955d58"}, {0x6, 0x10, "0e028eafd64cf67373dbce255a88"}]}, @ssrr={0x89, 0xb, 0xc3, [@private=0xa010101, @private=0xa010101]}]}}}}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0x58, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x41}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7}, 0x48) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000010c0)={'veth1_to_batadv\x00', 0x0}) sendto$packet(r5, &(0x7f00000002c0)="14042bfdd3fc03fc01004788031c09100628", 0xfd35, 0x4, &(0x7f0000000140)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r7, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @link_local}, 0x14) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'hsr0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'batadv0\x00', 0x0}) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000070000000000000001000010"], 0x0, 0x47}, 0x20) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'team0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r0) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000005c0)={'ip6_vti0\x00', &(0x7f0000000540)={'ip6gre0\x00', 0x0, 0x2f, 0x87, 0x6, 0x7, 0x30, @local, @mcast2, 0x1, 0x7800, 0x9, 0x7fff}}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f00000008c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000900)={0x258, 0x0, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}]}, 0x258}, 0x1, 0x0, 0x0, 0x40}, 0x4040) (async) r14 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) 712.285923ms ago: executing program 1 (id=4131): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="03000000000000002000128008000100677265001400028008000600ac14142e08000700e000030a08000a00", @ANYBLOB="4fd6465f9c25c16cd06e6c2777dd645acb2f9392dca6f4eb8fc8ada4e3a5dd1d367a82c6dda1082754dac00e7dca83c960296f80f1e041f0bcb96fd017aa1c029f614674e1ee09c671a5dfd7517309257746ac492dbe71eb3d547e8781eb2fa805b3fbb732439d0057f27c35468aa0e1baa6e3e88c2e4c621240309e47c29d0015f455a0f062e06234176c1aff8f70b3c32eecc0641eef34c78e5eef5da4e4df8d9e7c00"], 0x48}, 0x1, 0x0, 0x0, 0x24040000}, 0x2000800) 711.889851ms ago: executing program 3 (id=4132): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000003c0)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1}, 0x10, &(0x7f00000000c0)={&(0x7f0000000580)={0x1, 0x7ab0715dca68fed7, 0x0, {}, {}, {}, 0x4, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "b8ee0816756b62187804752330b2b55830d7228ef1593c0639bd084bba0bfd8db72f70e5b2e7f90e11cbc6ec61a03fc316d5d47970907af5fc4a27f6cf718909"}}, 0x20000600}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000540)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x1d, r2, 0x0, 0x4000}, 0x10, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[], 0x80}, 0x1, 0x0, 0x40000000, 0x4000}, 0x4044001) 701.168671ms ago: executing program 0 (id=4133): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r0}, 0xc) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'wg1\x00'}) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000440)={0x0, 0xff6d, 0x7ff, 0xfffffffc, 0x9, 0x7}, &(0x7f0000000480)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000009c0)={r4, @in={{0x2, 0x4e24, @private=0xa010101}}, [0x2, 0xa, 0x7, 0xe, 0x979c, 0x4, 0x3, 0x7fffffff, 0x3b72, 0x9, 0x401, 0x1, 0x3, 0x893, 0xffff]}, &(0x7f00000004c0)=0x100) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xfff3}}}, 0x24}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x21, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) 700.149614ms ago: executing program 2 (id=4134): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x2c}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r2, &(0x7f0000000840), &(0x7f0000004880)=@udp=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) getsockname$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000340)=0x14) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x4}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000500)={{0x1, 0xffffffffffffffff}, &(0x7f0000000480), &(0x7f00000004c0)='%-5lx \x00'}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_ext={0x1c, 0xf, &(0x7f0000000100)=@raw=[@map_val={0x18, 0xb, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x7bc}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @ldst={0x0, 0x2, 0x1, 0x0, 0xe, 0xffffffffffffffc0, 0xffffffffffffffff}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x3}, @generic={0x5, 0x4, 0x3, 0x2, 0x7fffffff}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x2}], &(0x7f0000000180)='syzkaller\x00', 0x200, 0x43, &(0x7f0000000280)=""/67, 0x40f00, 0x3, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x4, 0x2}, 0x8, 0x10, &(0x7f00000003c0)={0x2, 0x3, 0x9, 0x7}, 0x10, 0x2046a, r0, 0x0, &(0x7f0000000540)=[0xffffffffffffffff, r5, r6], 0x0, 0x10, 0x3}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x2c}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) listen(r1, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r2, &(0x7f0000000840), &(0x7f0000004880)=@udp=r1}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000340)=0x14) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x4}, 0x50) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000500)={{0x1}, &(0x7f0000000480), &(0x7f00000004c0)='%-5lx \x00'}, 0x20) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_ext={0x1c, 0xf, &(0x7f0000000100)=@raw=[@map_val={0x18, 0xb, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x7bc}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @ldst={0x0, 0x2, 0x1, 0x0, 0xe, 0xffffffffffffffc0, 0xffffffffffffffff}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x3}, @generic={0x5, 0x4, 0x3, 0x2, 0x7fffffff}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x2}], &(0x7f0000000180)='syzkaller\x00', 0x200, 0x43, &(0x7f0000000280)=""/67, 0x40f00, 0x3, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x4, 0x2}, 0x8, 0x10, &(0x7f00000003c0)={0x2, 0x3, 0x9, 0x7}, 0x10, 0x2046a, r0, 0x0, &(0x7f0000000540)=[0xffffffffffffffff, r5, r6], 0x0, 0x10, 0x3}, 0x94) (async) 597.041291ms ago: executing program 3 (id=4135): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4, 0x0, 0x3}}, 0x2e) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x62001, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000001440)={'\x00', 0x4212}) ioctl$TUNSETOFFLOAD(r2, 0x400454c9, 0x9) ioctl$TUNSETLINK(r2, 0x400454cd, 0xfffe) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'vlan1\x00', 0x1420}) ioctl$PPPIOCGCHAN(r1, 0x80047437, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) connect$rds(r3, &(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xa) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4040011}, 0x4000) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @private}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f0000000380)={'syztnl0\x00', &(0x7f0000000280)={'syztnl1\x00', r8, 0x1, 0x7800, 0x8, 0x9, {{0x5, 0x4, 0x1, 0x6, 0x14, 0x66, 0x0, 0x1, 0x4, 0x0, @multicast2, @remote}}}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000007d2700000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0}, 0x90) r9 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) r10 = socket$inet(0x2, 0x3, 0xd) getsockopt$inet_mreqsrc(r10, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) bind$rose(r9, &(0x7f0000000340)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, 0x8, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @bcast]}, 0x1c) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r11, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) recvmsg(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/60, 0x3c}], 0x1}, 0x40fd) 488.326283ms ago: executing program 2 (id=4136): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xec}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='vegas', 0x5) sendmmsg$inet(r0, &(0x7f0000000f00)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="f8", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000140)="050843cb10087b3d2217", 0xa}, {&(0x7f0000000900)="f742c97e8353ef9d8afd344747fb058fea97deff79dbb8e7b56b20a2d430240bf6d32e802d80bb22b247cbad7cbbc4ec0293eb6e0c35c044ad426db18e9403dc1b6b93bfb0ea8f4cb3f3f9cf3a2379cbb191560885ad9a829313c85064a06bc36da8d9a89b20656f349ba2f202c322bd93c50ad4a2d407383bfb6bef053dbb620324f60dfce9383279f82f5e7148e317cfa432eb7d7d38db6d1c70af445a17b02ad505e48c", 0xa5}, {&(0x7f0000000b80)="924a47d58460977aa3ca02e00a7f5a29c19a836ac747ed79c3fa", 0x1a}, {&(0x7f00000009c0)="c04b4225d25462ad89d2c7da85d1d6d41381d7d8ed43fa8e10a285f3aa02a57271c837f1cbabf983bf6e851b5d1f8b053e6344ce52ec8dad22733cb4e11961ed7a9b82dbf3e2461ea51692409b4e23b8632994d4066b6857e1b2ff942ba0bc1813aca4a4cec33bbdac534050122dd74cf2276ed65c56c95903ceea7a0c209e9649ceb95927b4332db3cd0df8d358184f3f3a124d4e6089b272540e8b", 0x9c}, {&(0x7f0000000400)="38414448ddada31ba40700f2690f4440b2754e0e330875e61c4498e23b98604b6d4d8ee8221d0da5da4bf4e37ba7ba42501126b12705f27fb2d8b90cedb7af2b773b04b759b8eb60f5ab55b8a4b518ca38730fc22b2fe9fe", 0x58}], 0x5}}], 0x2, 0x40408e0) 488.142584ms ago: executing program 1 (id=4137): r0 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) (async) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000480)={0x2, 0x3, 0x0, 0x3, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x20, 0x0, @in6={0xa, 0x0, 0x0, @private0}}]}, 0x70}, 0x1, 0x7}, 0x0) (async) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000480)={0x2, 0x3, 0x0, 0x3, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x20, 0x0, @in6={0xa, 0x0, 0x0, @private0}}]}, 0x70}, 0x1, 0x7}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8481f0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 433.302381ms ago: executing program 0 (id=4138): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0}, 0x0) sendmsg$rds(r0, &(0x7f0000000480)={&(0x7f0000000200)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x5}, {0xfff1, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001300)=@deltfilter={0x24, 0x2d, 0x1, 0x78bd2f, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x10, 0x3}, {0xfff2, 0xffff}, {0x4, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x4c014}, 0x20044000) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000021c0)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {}, {0xffff, 0x8}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x800) r8 = socket(0x27, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=@newtfilter={0x2c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r10, {0x0, 0x7}, {}, {0xffff, 0x8}}, [@TCA_RATE={0x6, 0x5, {0x1, 0x85}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x404c800}, 0x804) 362.511868ms ago: executing program 3 (id=4139): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x4001, 0x3, 0x438, 0x0, 0x700001b, 0x148, 0x0, 0x148, 0x3a0, 0x206, 0x240, 0x3a0, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x1ea, 0x2c8, 0x2f0, 0x0, {0x390, 0x8f00}, [@inet=@rpfilter={{0x28}, {0x3}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00', {0x1000}}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x5, 0xff, {0x9184}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x498) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0x0) (async) r2 = socket$l2tp6(0xa, 0x2, 0x73) (async) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'veth1_to_team\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000006800010025bd7000feffffff0a0000000000000018000880140001000200000000000000870004001048a2ff060007000700000008000500", @ANYRES32=r4], 0x40}, 0x1, 0x0, 0x0, 0x20000}, 0x40040d0) (async) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23, 0x9, @loopback, 0x1}, 0x1c) close(r3) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) connect$can_bcm(r5, &(0x7f0000000300)={0x1d, r6}, 0x10) sendmsg$can_bcm(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x8040}, 0x0) recvmsg$can_bcm(r5, &(0x7f0000000480)={&(0x7f0000000200)=@x25, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)=""/133, 0x85}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000980)=""/188, 0xbc}, {&(0x7f00000000c0)=""/46, 0x2e}], 0x4, &(0x7f0000000a40)=""/190, 0xbe}, 0x42) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000004c40)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r6, {0x1}, {0x0, 0xfff3}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) (async) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r8, 0x1, 0x35, &(0x7f0000000140)=0x8, 0x4) (async) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYRESOCT=r0], 0x14}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x4000) (async) syz_genetlink_get_family_id$SEG6(&(0x7f0000000000), 0xffffffffffffffff) 304.226336ms ago: executing program 2 (id=4140): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000840)='notify_on_release\x00', 0x2, 0x0) pread64(r4, &(0x7f0000000880)=""/4096, 0x1000, 0xf826) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="1d0010bd7000fcdbdf255100000008000300", @ANYRES32=r5, @ANYBLOB="05008a0002000000"], 0x24}, 0x1, 0x0, 0x0, 0x8080}, 0x40880) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454da, &(0x7f0000000080)={'batadv0\x00'}) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x103442, 0x0) ioctl$TUNSETIFF(r7, 0x400454da, &(0x7f0000000140)={'batadv0\x00'}) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000100)={'pimreg0\x00', 0x1}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000003200)={'ip6tnl0\x00', &(0x7f0000003180)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) 304.050387ms ago: executing program 1 (id=4141): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x80000000, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000080)=0x49e1, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x800, 0x0, 0x0) (async) sendto$inet6(r0, 0x0, 0x0, 0x800, 0x0, 0x0) 179.300313ms ago: executing program 0 (id=4142): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={r0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000003f00), r4) sendmsg$NLBL_CALIPSO_C_LIST(r4, &(0x7f0000003fc0)={0x0, 0x0, &(0x7f0000003f80)={&(0x7f0000003f40)={0x1c, r5, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x28861}, 0xc800) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r6, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r6, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x2, @mcast1, 0x5, 0x3}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000a40)="f4000900062b2c25fe80000000000000dc8b66cc00000000000000000000000000000000e4986919", 0x28}], 0x1}, 0x0) connect$can_bcm(r2, &(0x7f0000000140)={0x1d, r3}, 0x10) sendmsg$can_bcm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x5, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "6a53198af9b87849"}}, 0x48}}, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="06"], 0x48}}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x8, 0x20010, r8, 0x4930a000) r9 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_RECVERR(r9, 0x114, 0x5, &(0x7f0000000000), 0x4) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRESOCT=r9, @ANYBLOB="000400200000020000000200000008004000010f00000400d100"], 0x20}, 0x1, 0x0, 0x0, 0x4000084}, 0x2000c000) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r7, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r10}, @void}}}, 0x28}, 0x1, 0x6c00}, 0x0) 134.100882ms ago: executing program 4 (id=4143): r0 = epoll_create1(0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x4}, 0xe) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={r2, 0xb6}, &(0x7f0000000180)=0x8) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x9000001a}) r3 = socket$kcm(0x29, 0x5, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a) r5 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000005580)=""/4084, 0xff4}, {&(0x7f00000016c0)=""/4098, 0x1002}, {&(0x7f00000002c0)=""/147, 0x93}, {&(0x7f0000000200)=""/157, 0x9d}], 0x4}, 0x0) sendfile(r3, r4, 0x0, 0xffffffff000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYRESHEX=0x0], 0x118}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) 88.25894ms ago: executing program 2 (id=4144): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYRESHEX, @ANYRES32=0x0, @ANYBLOB="662700000000000024001280090001007866726d000000000800008004000353e38ac2c7d93791ea280a251dccebc96fd2e82168fe489aebe6d8353c218b38"], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[], 0xe8}}, 0x0) 0s ago: executing program 2 (id=4145): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r2 = socket(0x400000000010, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0xfffffffc, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x3f}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_SNOOPING={0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8004}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) (async) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=@newtfilter={0x8b0, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x87c, 0x2, [@TCA_MATCHALL_ACT={0x878, 0x2, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x3, 0x10000, 0x81, 0x7f, 0xfffffffd, 0x4, 0x2, 0xffffffc0, 0x5, 0x2234, 0x7f, 0x81b, 0x800, 0x8, 0x0, 0x3, 0x7ed53619, 0x1, 0x2, 0x9644, 0x800004, 0x58b, 0x85a, 0x3ff, 0x46, 0x2, 0x1, 0x0, 0x80000000, 0x10001, 0x790, 0x5, 0xab2, 0xfffffff9, 0x1a77, 0x9, 0x3, 0x400, 0x63c, 0x4, 0xffffffff, 0x1, 0x3, 0x1, 0x5b1f, 0x7b0, 0x7, 0x100, 0x6, 0xd, 0xff, 0x3, 0x10000, 0x6, 0x6b7, 0x1ff, 0x80, 0x4, 0x7, 0x3, 0xa14, 0x3, 0x2, 0x80000000, 0x81, 0x7, 0x8, 0x5, 0x10001, 0xf7, 0x3, 0xfffffff9, 0x9, 0x4, 0x8, 0xfff, 0x3, 0xfffffffd, 0x6, 0x7, 0x8, 0x100, 0xc0000000, 0x6, 0x6, 0x6, 0x8, 0x80000001, 0x8, 0x1d24, 0x2, 0x9, 0x0, 0x7f, 0x7, 0x9, 0xff, 0x24, 0x5, 0x7, 0x6, 0x10007a, 0x8, 0x0, 0x7, 0x470, 0x7f, 0x6, 0x0, 0x1, 0x0, 0x4, 0x9, 0x61, 0x200, 0x6, 0x2, 0x2, 0x6, 0x10001, 0x8, 0x7, 0xf, 0xda56, 0x7ffffffe, 0x80, 0x2f0cb955, 0x7, 0xfed, 0xf, 0x6ae, 0x2, 0x1, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x1, 0x2, 0xfffffffb, 0x7, 0x8, 0x4, 0x1, 0xffffcf1b, 0x282, 0x5517bc7b, 0x3, 0x4, 0xb6b, 0x5, 0x0, 0xac, 0x9, 0x6, 0x10, 0x9, 0x8, 0x80000001, 0x0, 0x74, 0x2, 0x7fffffff, 0x0, 0xa, 0x6, 0xffffffff, 0x8, 0x2, 0x7, 0x7f, 0x5, 0x3, 0xa, 0x1, 0x0, 0x9, 0x300, 0x5, 0x3, 0x6, 0xffffffff, 0xffb, 0xff, 0x5, 0x8, 0x3, 0x2, 0x5, 0xfca, 0x399d, 0x6, 0x8ab6, 0x18000, 0x2, 0xfffffff9, 0x2, 0x2, 0x528c, 0x5, 0x200, 0xac, 0xf, 0xd05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x8, 0xde16, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x400, 0x80001, 0x5, 0x354d, 0x5, 0x2, 0x1, 0x7, 0x1, 0x177, 0x7, 0x0, 0x80, 0x5, 0x8, 0xfffffffb, 0x9, 0xe7b, 0x0, 0x7, 0x42bf, 0x10000, 0x9, 0x9, 0x6, 0x4b75, 0x80000001, 0x1000, 0x5915, 0x10001, 0x1]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x107e, 0x4, 0xec2, 0x6, 0x8, 0x400, 0x5, 0x1, 0x7, 0x470, 0x487, 0x100, 0xa99, 0xfffffeff, 0x5, 0x37f, 0x8, 0x6, 0x3, 0x3, 0x800, 0xd2f5, 0x40, 0x3, 0x4, 0x5, 0x7, 0x12, 0x2, 0x8, 0x101, 0xffffffff, 0x2, 0x10000, 0xa6, 0x3, 0x10000, 0x1000, 0x4, 0x0, 0x3, 0x0, 0xd, 0x6, 0x98, 0x8, 0x6, 0x9, 0x1000, 0xb3000, 0xf, 0x3, 0x9, 0xb4, 0x94d, 0x9, 0x8, 0x6, 0x100, 0xec0, 0xffff, 0x4, 0x2, 0x3ff, 0x3e, 0xb828, 0x0, 0x0, 0x365, 0x8, 0x8, 0xf, 0x1, 0xfffffffe, 0xfffffff6, 0x93, 0x7fff, 0x92, 0x0, 0x7, 0xfffffffc, 0x7ff, 0x9, 0x2, 0x0, 0x2, 0x8, 0xffffff37, 0x3, 0x9, 0xc, 0x0, 0x3, 0x3, 0x400, 0x100000, 0x7f, 0x2, 0x8, 0x4, 0x7, 0x4, 0x7, 0xfffffffa, 0x101, 0xadd9, 0x1, 0x0, 0x7, 0x7fffffff, 0x40, 0x4, 0x0, 0x5, 0x4, 0x1, 0x8, 0x9, 0x6, 0x6, 0x2, 0xb, 0x3, 0x7f, 0xffff, 0x9, 0x1685, 0xa252, 0x2, 0x200, 0x3, 0x1, 0x400, 0xfffffffc, 0xfffffffc, 0x1000, 0x7ff, 0x1, 0x1f6, 0x751, 0x7, 0x40000000, 0x4, 0xffffdbb7, 0x50, 0xf, 0xf, 0xe, 0x3, 0x0, 0x81, 0xfff80000, 0x7a9, 0x1, 0x6, 0x3, 0x7ef8, 0x7, 0x5, 0x2, 0x0, 0x4e8, 0x80, 0x3, 0x8, 0x5, 0x0, 0x5, 0x7fff, 0x7, 0x8, 0x6a4941c5, 0x2ea567b4, 0x8, 0x80000000, 0x6, 0x40, 0x2, 0xfff, 0x8, 0x7, 0x1, 0x1, 0x0, 0x0, 0xd3bed341, 0x691f, 0x0, 0x2, 0x9, 0x6, 0x0, 0x1ff, 0x400003, 0x3, 0x6, 0x5fc8462f, 0x0, 0x7, 0xffff, 0xfffffffc, 0x5, 0x0, 0xb9a6, 0x522, 0x2, 0x2, 0x900, 0x8, 0xbb99, 0xb8000000, 0x8, 0xffffff01, 0xc0a1, 0x8, 0x8, 0x7, 0x59, 0x9, 0x2, 0x101, 0x5f502dc7, 0x7, 0x0, 0x4, 0x6, 0x80000001, 0x3, 0xffffff97, 0x2, 0x40, 0x1, 0x40, 0x8, 0x3, 0x710, 0x8, 0x1, 0xfffff339, 0x3, 0x8001, 0x1, 0x8001, 0x9, 0x8, 0xfffffffa, 0x8, 0x9, 0x3, 0xe, 0x10000, 0x9, 0xa, 0x7, 0xfffffff8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffe00, 0x5, 0x5, 0x1, 0xdbec, {0x8, 0x0, 0xb55, 0x5, 0x7, 0x5}, {0x6, 0x2, 0xd, 0x5, 0x1, 0x5d17}, 0x2, 0x0, 0x6}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x8b0}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@newtaction={0xe80, 0x30, 0x25, 0x0, 0x0, {}, [{0xe6c, 0x1, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x18, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe80}}, 0x0) (async) socket(0x2, 0x5, 0x0) (async) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) (async) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) pwritev(r12, &(0x7f0000000100)=[{&(0x7f0000000000)="8e", 0x1}], 0x1, 0x8001, 0x80) (async) recvmsg$can_raw(r2, &(0x7f00000003c0)={&(0x7f0000001300)=@generic, 0x80, &(0x7f0000000280)=[{&(0x7f0000003080)=""/4096, 0x1000}, {&(0x7f0000001380)=""/176, 0xb0}, {&(0x7f0000000200)=""/4, 0x4}], 0x3, &(0x7f0000001440)=""/105, 0x69}, 0x40010041) sendfile(r12, r11, 0x0, 0xf03a0005) (async) r13 = socket$unix(0x1, 0x1, 0x0) ioctl$TUNATTACHFILTER(r9, 0x401054d5, &(0x7f00000001c0)={0x2, &(0x7f0000000180)=[{0x5, 0x8, 0x0, 0x5}, {0x9, 0x1c, 0xfe, 0xffffad30}]}) (async) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r14, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x27, 0x0) kernel console output (not intermixed with test programs): 0x2f4/0x370 [ 463.510995][T16824] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 463.511018][T16824] __sock_sendmsg+0x19c/0x270 [ 463.511049][T16824] ____sys_sendmsg+0x505/0x830 [ 463.511075][T16824] ? __pfx_____sys_sendmsg+0x10/0x10 [ 463.511106][T16824] ? import_iovec+0x74/0xa0 [ 463.511134][T16824] ___sys_sendmsg+0x21f/0x2a0 [ 463.511158][T16824] ? __pfx____sys_sendmsg+0x10/0x10 [ 463.511218][T16824] ? __fget_files+0x2a/0x420 [ 463.511236][T16824] ? __fget_files+0x3a0/0x420 [ 463.511266][T16824] __x64_sys_sendmsg+0x19b/0x260 [ 463.511290][T16824] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 463.511323][T16824] ? __pfx_ksys_write+0x10/0x10 [ 463.511355][T16824] ? do_syscall_64+0xbe/0xfa0 [ 463.511388][T16824] do_syscall_64+0xfa/0xfa0 [ 463.511415][T16824] ? lockdep_hardirqs_on+0x9c/0x150 [ 463.511450][T16824] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.511471][T16824] ? clear_bhb_loop+0x60/0xb0 [ 463.511496][T16824] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.511516][T16824] RIP: 0033:0x7fb3d7d8f6c9 [ 463.511534][T16824] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 463.511551][T16824] RSP: 002b:00007fb3d8c05038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 463.511572][T16824] RAX: ffffffffffffffda RBX: 00007fb3d7fe5fa0 RCX: 00007fb3d7d8f6c9 [ 463.511586][T16824] RDX: 0000000020000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 463.511599][T16824] RBP: 00007fb3d8c05090 R08: 0000000000000000 R09: 0000000000000000 [ 463.511612][T16824] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 463.511624][T16824] R13: 00007fb3d7fe6038 R14: 00007fb3d7fe5fa0 R15: 00007ffcbcbd89c8 [ 463.511659][T16824] [ 464.075385][T16838] syzkaller0: entered promiscuous mode [ 464.081245][T16838] syzkaller0: entered allmulticast mode [ 464.509113][T16866] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 464.529008][T16870] FAULT_INJECTION: forcing a failure. [ 464.529008][T16870] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 464.565809][T16870] CPU: 1 UID: 0 PID: 16870 Comm: syz.3.3641 Not tainted syzkaller #0 PREEMPT(full) [ 464.565840][T16870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 464.565853][T16870] Call Trace: [ 464.565861][T16870] [ 464.565870][T16870] dump_stack_lvl+0x189/0x250 [ 464.565902][T16870] ? __pfx____ratelimit+0x10/0x10 [ 464.565930][T16870] ? __pfx_dump_stack_lvl+0x10/0x10 [ 464.565957][T16870] ? __pfx__printk+0x10/0x10 [ 464.565979][T16870] ? __might_fault+0xb0/0x130 [ 464.566028][T16870] should_fail_ex+0x414/0x560 [ 464.566064][T16870] _copy_from_iter+0x1de/0x1790 [ 464.566087][T16870] ? rcu_is_watching+0x15/0xb0 [ 464.566111][T16870] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 464.566136][T16870] ? kmem_cache_alloc_node_noprof+0x483/0x710 [ 464.566163][T16870] ? kmalloc_reserve+0xbd/0x290 [ 464.566189][T16870] ? __pfx__copy_from_iter+0x10/0x10 [ 464.566216][T16870] ? skb_set_owner_w+0x25b/0x3a0 [ 464.566240][T16870] ? skb_put+0x11b/0x210 [ 464.566264][T16870] pppoe_sendmsg+0x46a/0x790 [ 464.566295][T16870] ? __pfx_pppoe_sendmsg+0x10/0x10 [ 464.566319][T16870] ? aa_sock_msg_perm+0xf1/0x1d0 [ 464.566351][T16870] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 464.566370][T16870] ? __pfx_pppoe_sendmsg+0x10/0x10 [ 464.566394][T16870] __sock_sendmsg+0x21c/0x270 [ 464.566425][T16870] ____sys_sendmsg+0x52d/0x830 [ 464.566452][T16870] ? __pfx_____sys_sendmsg+0x10/0x10 [ 464.566485][T16870] ? import_iovec+0x74/0xa0 [ 464.566514][T16870] ___sys_sendmsg+0x21f/0x2a0 [ 464.566543][T16870] ? __pfx____sys_sendmsg+0x10/0x10 [ 464.566605][T16870] ? __fget_files+0x2a/0x420 [ 464.566623][T16870] ? __fget_files+0x3a0/0x420 [ 464.566654][T16870] __sys_sendmmsg+0x227/0x430 [ 464.566682][T16870] ? __pfx___sys_sendmmsg+0x10/0x10 [ 464.566714][T16870] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 464.566763][T16870] ? ksys_write+0x22a/0x250 [ 464.566794][T16870] ? __pfx_ksys_write+0x10/0x10 [ 464.566828][T16870] __x64_sys_sendmmsg+0xa0/0xc0 [ 464.566852][T16870] do_syscall_64+0xfa/0xfa0 [ 464.566879][T16870] ? lockdep_hardirqs_on+0x9c/0x150 [ 464.566906][T16870] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.566925][T16870] ? clear_bhb_loop+0x60/0xb0 [ 464.566950][T16870] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.566969][T16870] RIP: 0033:0x7f051b38f6c9 [ 464.566986][T16870] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 464.567009][T16870] RSP: 002b:00007f051c27b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 464.567031][T16870] RAX: ffffffffffffffda RBX: 00007f051b5e5fa0 RCX: 00007f051b38f6c9 [ 464.567046][T16870] RDX: 0000000000000001 RSI: 0000200000007180 RDI: 0000000000000003 [ 464.567058][T16870] RBP: 00007f051c27b090 R08: 0000000000000000 R09: 0000000000000000 [ 464.567070][T16870] R10: 0000000000010014 R11: 0000000000000246 R12: 0000000000000001 [ 464.567082][T16870] R13: 00007f051b5e6038 R14: 00007f051b5e5fa0 R15: 00007ffe80dc9528 [ 464.567117][T16870] [ 464.954628][T16875] openvswitch: netlink: EtherType 50a is less than min 600 [ 464.990246][T16879] FAULT_INJECTION: forcing a failure. [ 464.990246][T16879] name failslab, interval 1, probability 0, space 0, times 0 [ 465.003530][T16879] CPU: 1 UID: 0 PID: 16879 Comm: syz.4.3645 Not tainted syzkaller #0 PREEMPT(full) [ 465.003560][T16879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 465.003572][T16879] Call Trace: [ 465.003581][T16879] [ 465.003589][T16879] dump_stack_lvl+0x189/0x250 [ 465.003624][T16879] ? __pfx____ratelimit+0x10/0x10 [ 465.003652][T16879] ? __pfx_dump_stack_lvl+0x10/0x10 [ 465.003680][T16879] ? __pfx__printk+0x10/0x10 [ 465.003720][T16879] should_fail_ex+0x414/0x560 [ 465.003759][T16879] should_failslab+0xa8/0x100 [ 465.003783][T16879] __kmalloc_cache_noprof+0x6f/0x6f0 [ 465.003812][T16879] ? __sctp_v6_cmp_addr+0x1e6/0x510 [ 465.003840][T16879] ? sctp_add_bind_addr+0x8c/0x370 [ 465.003875][T16879] sctp_add_bind_addr+0x8c/0x370 [ 465.003908][T16879] sctp_copy_local_addr_list+0x30b/0x4e0 [ 465.003941][T16879] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 465.003981][T16879] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 465.004012][T16879] ? sctp_v6_is_any+0x64/0x80 [ 465.004043][T16879] ? sctp_copy_one_addr+0x93/0x360 [ 465.004076][T16879] sctp_bind_addr_copy+0xb3/0x3c0 [ 465.004106][T16879] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 465.004136][T16879] sctp_connect_new_asoc+0x2e0/0x690 [ 465.004161][T16879] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 465.004180][T16879] ? __local_bh_enable_ip+0x12d/0x1c0 [ 465.004212][T16879] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 465.004235][T16879] ? security_sctp_bind_connect+0x7e/0x2e0 [ 465.004271][T16879] sctp_sendmsg+0x155c/0x2810 [ 465.004305][T16879] ? __pfx_sctp_sendmsg+0x10/0x10 [ 465.004330][T16879] ? aa_sk_perm+0x81e/0x950 [ 465.004364][T16879] ? __pfx_aa_sk_perm+0x10/0x10 [ 465.004397][T16879] ? sock_rps_record_flow+0x19/0x410 [ 465.004434][T16879] ? inet_sendmsg+0x2f4/0x370 [ 465.004458][T16879] __sock_sendmsg+0x19c/0x270 [ 465.004491][T16879] __sys_sendto+0x3bd/0x520 [ 465.004514][T16879] ? __pfx___sys_sendto+0x10/0x10 [ 465.004531][T16879] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 465.004578][T16879] ? __fget_files+0x3a0/0x420 [ 465.004611][T16879] ? ksys_write+0x22a/0x250 [ 465.004644][T16879] ? __pfx_ksys_write+0x10/0x10 [ 465.004677][T16879] __x64_sys_sendto+0xde/0x100 [ 465.004702][T16879] do_syscall_64+0xfa/0xfa0 [ 465.004730][T16879] ? lockdep_hardirqs_on+0x9c/0x150 [ 465.004759][T16879] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.004779][T16879] ? clear_bhb_loop+0x60/0xb0 [ 465.004804][T16879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.004823][T16879] RIP: 0033:0x7f78c818f6c9 [ 465.004841][T16879] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 465.004857][T16879] RSP: 002b:00007f78c9002038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 465.004879][T16879] RAX: ffffffffffffffda RBX: 00007f78c83e5fa0 RCX: 00007f78c818f6c9 [ 465.004894][T16879] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 000000000000000b [ 465.004907][T16879] RBP: 00007f78c9002090 R08: 000020000005ffe4 R09: 000000000000001c [ 465.004921][T16879] R10: 00000000000000e0 R11: 0000000000000246 R12: 0000000000000002 [ 465.004933][T16879] R13: 00007f78c83e6038 R14: 00007f78c83e5fa0 R15: 00007fff4be53e58 [ 465.004977][T16879] [ 465.374316][T16884] FAULT_INJECTION: forcing a failure. [ 465.374316][T16884] name failslab, interval 1, probability 0, space 0, times 0 [ 465.379517][T16875] tipc: Started in network mode [ 465.392104][T16884] CPU: 1 UID: 0 PID: 16884 Comm: syz.4.3647 Not tainted syzkaller #0 PREEMPT(full) [ 465.392130][T16884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 465.392142][T16884] Call Trace: [ 465.392150][T16884] [ 465.392159][T16884] dump_stack_lvl+0x189/0x250 [ 465.392191][T16884] ? __pfx____ratelimit+0x10/0x10 [ 465.392225][T16884] ? __pfx_dump_stack_lvl+0x10/0x10 [ 465.392251][T16884] ? __pfx__printk+0x10/0x10 [ 465.392277][T16884] ? __lock_acquire+0xab9/0xd20 [ 465.392305][T16884] should_fail_ex+0x414/0x560 [ 465.392341][T16884] should_failslab+0xa8/0x100 [ 465.392364][T16884] kmem_cache_alloc_noprof+0x74/0x6e0 [ 465.392392][T16884] ? skb_clone+0x212/0x3a0 [ 465.392431][T16884] skb_clone+0x212/0x3a0 [ 465.392455][T16884] __netlink_deliver_tap+0x404/0x850 [ 465.392487][T16884] ? netlink_deliver_tap+0x2e/0x1b0 [ 465.392506][T16884] netlink_deliver_tap+0x19c/0x1b0 [ 465.392526][T16884] netlink_unicast+0x7fa/0x9e0 [ 465.392561][T16884] ? __pfx_netlink_unicast+0x10/0x10 [ 465.392591][T16884] ? netlink_sendmsg+0x642/0xb30 [ 465.392607][T16884] ? skb_put+0x11b/0x210 [ 465.392628][T16884] netlink_sendmsg+0x805/0xb30 [ 465.392656][T16884] ? __pfx_netlink_sendmsg+0x10/0x10 [ 465.392678][T16884] ? aa_sock_msg_perm+0xf1/0x1d0 [ 465.392709][T16884] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 465.392728][T16884] ? __pfx_netlink_sendmsg+0x10/0x10 [ 465.392747][T16884] __sock_sendmsg+0x21c/0x270 [ 465.392775][T16884] ____sys_sendmsg+0x505/0x830 [ 465.392800][T16884] ? __pfx_____sys_sendmsg+0x10/0x10 [ 465.392828][T16884] ? import_iovec+0x74/0xa0 [ 465.392856][T16884] ___sys_sendmsg+0x21f/0x2a0 [ 465.392879][T16884] ? __pfx____sys_sendmsg+0x10/0x10 [ 465.392937][T16884] ? __fget_files+0x2a/0x420 [ 465.392955][T16884] ? __fget_files+0x3a0/0x420 [ 465.392982][T16884] __x64_sys_sendmsg+0x19b/0x260 [ 465.393005][T16884] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 465.393034][T16884] ? __pfx_ksys_write+0x10/0x10 [ 465.393064][T16884] ? do_syscall_64+0xbe/0xfa0 [ 465.393092][T16884] do_syscall_64+0xfa/0xfa0 [ 465.393115][T16884] ? lockdep_hardirqs_on+0x9c/0x150 [ 465.393140][T16884] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.393158][T16884] ? clear_bhb_loop+0x60/0xb0 [ 465.393172][T16875] tipc: Node identity 6ea200bf769, cluster identity 4711 [ 465.393181][T16884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.393199][T16884] RIP: 0033:0x7f78c818f6c9 [ 465.393225][T16884] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 465.393243][T16884] RSP: 002b:00007f78c9002038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 465.393266][T16884] RAX: ffffffffffffffda RBX: 00007f78c83e5fa0 RCX: 00007f78c818f6c9 [ 465.393281][T16884] RDX: 0000000004000000 RSI: 00002000000007c0 RDI: 0000000000000004 [ 465.393295][T16884] RBP: 00007f78c9002090 R08: 0000000000000000 R09: 0000000000000000 [ 465.393307][T16884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 465.393321][T16884] R13: 00007f78c83e6038 R14: 00007f78c83e5fa0 R15: 00007fff4be53e58 [ 465.393357][T16884] [ 465.710890][T16875] tipc: Enabled bearer , priority 0 [ 465.839113][T16882] syzkaller0: entered promiscuous mode [ 465.876815][T16882] syzkaller0: entered allmulticast mode [ 465.942949][T16875] tipc: Resetting bearer [ 465.976007][T16897] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3643'. [ 466.016640][T16900] syzkaller0: entered promiscuous mode [ 466.024873][T16900] syzkaller0: entered allmulticast mode [ 466.057756][T16872] tipc: Resetting bearer [ 466.066484][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 466.142200][T16872] tipc: Disabling bearer [ 466.225986][T14501] Bluetooth: hci3: command 0x0405 tx timeout [ 466.337986][T16915] FAULT_INJECTION: forcing a failure. [ 466.337986][T16915] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 466.380488][T16915] CPU: 1 UID: 0 PID: 16915 Comm: syz.2.3657 Not tainted syzkaller #0 PREEMPT(full) [ 466.380520][T16915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 466.380532][T16915] Call Trace: [ 466.380540][T16915] [ 466.380549][T16915] dump_stack_lvl+0x189/0x250 [ 466.380581][T16915] ? __pfx____ratelimit+0x10/0x10 [ 466.380609][T16915] ? __pfx_dump_stack_lvl+0x10/0x10 [ 466.380637][T16915] ? __pfx__printk+0x10/0x10 [ 466.380658][T16915] ? __might_fault+0xb0/0x130 [ 466.380701][T16915] should_fail_ex+0x414/0x560 [ 466.380736][T16915] _copy_from_iter+0x1de/0x1790 [ 466.380761][T16915] ? skb_set_owner_w+0x25b/0x3a0 [ 466.380786][T16915] ? sock_alloc_send_pskb+0x86b/0x980 [ 466.380816][T16915] ? __pfx__copy_from_iter+0x10/0x10 [ 466.380848][T16915] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 466.380875][T16915] skb_copy_datagram_from_iter+0xf5/0x720 [ 466.380902][T16915] ? dev_get_by_index+0x22/0x2e0 [ 466.380928][T16915] ? skb_put+0x11b/0x210 [ 466.380951][T16915] packet_sendmsg+0x3797/0x5080 [ 466.380993][T16915] ? aa_new_mount+0x330/0x810 [ 466.381039][T16915] ? __pfx___might_resched+0x10/0x10 [ 466.381086][T16915] ? __pfx_packet_sendmsg+0x10/0x10 [ 466.381115][T16915] ? aa_sk_perm+0x81e/0x950 [ 466.381149][T16915] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 466.381186][T16915] ? __lock_acquire+0xab9/0xd20 [ 466.381204][T16915] ? aa_sock_msg_perm+0xf1/0x1d0 [ 466.381236][T16915] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 466.381255][T16915] ? __pfx_packet_sendmsg+0x10/0x10 [ 466.381287][T16915] __sock_sendmsg+0x21c/0x270 [ 466.381319][T16915] ____sys_sendmsg+0x505/0x830 [ 466.381346][T16915] ? __pfx_____sys_sendmsg+0x10/0x10 [ 466.381379][T16915] ? import_iovec+0x74/0xa0 [ 466.381407][T16915] ___sys_sendmsg+0x21f/0x2a0 [ 466.381432][T16915] ? __pfx____sys_sendmsg+0x10/0x10 [ 466.381499][T16915] ? __fget_files+0x2a/0x420 [ 466.381516][T16915] ? __fget_files+0x3a0/0x420 [ 466.381546][T16915] __x64_sys_sendmsg+0x19b/0x260 [ 466.381571][T16915] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 466.381604][T16915] ? __pfx_ksys_write+0x10/0x10 [ 466.381637][T16915] ? do_syscall_64+0xbe/0xfa0 [ 466.381668][T16915] do_syscall_64+0xfa/0xfa0 [ 466.381711][T16915] ? lockdep_hardirqs_on+0x9c/0x150 [ 466.381738][T16915] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.381775][T16915] ? clear_bhb_loop+0x60/0xb0 [ 466.381801][T16915] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.381820][T16915] RIP: 0033:0x7fb3d7d8f6c9 [ 466.381839][T16915] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 466.381856][T16915] RSP: 002b:00007fb3d8c05038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 466.381878][T16915] RAX: ffffffffffffffda RBX: 00007fb3d7fe5fa0 RCX: 00007fb3d7d8f6c9 [ 466.381892][T16915] RDX: 0000000000000040 RSI: 0000200000000640 RDI: 0000000000000003 [ 466.381905][T16915] RBP: 00007fb3d8c05090 R08: 0000000000000000 R09: 0000000000000000 [ 466.381917][T16915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 466.381929][T16915] R13: 00007fb3d7fe6038 R14: 00007fb3d7fe5fa0 R15: 00007ffcbcbd89c8 [ 466.381964][T16915] [ 466.718316][T16918] FAULT_INJECTION: forcing a failure. [ 466.718316][T16918] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 466.721938][T16920] FAULT_INJECTION: forcing a failure. [ 466.721938][T16920] name failslab, interval 1, probability 0, space 0, times 0 [ 466.731473][T16918] CPU: 1 UID: 0 PID: 16918 Comm: syz.4.3658 Not tainted syzkaller #0 PREEMPT(full) [ 466.731498][T16918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 466.731510][T16918] Call Trace: [ 466.731518][T16918] [ 466.731527][T16918] dump_stack_lvl+0x189/0x250 [ 466.731558][T16918] ? __pfx____ratelimit+0x10/0x10 [ 466.731585][T16918] ? __pfx_dump_stack_lvl+0x10/0x10 [ 466.731613][T16918] ? __pfx__printk+0x10/0x10 [ 466.731634][T16918] ? __might_fault+0xb0/0x130 [ 466.731675][T16918] should_fail_ex+0x414/0x560 [ 466.731710][T16918] _copy_from_iter+0x1de/0x1790 [ 466.731735][T16918] ? skb_set_owner_w+0x25b/0x3a0 [ 466.731760][T16918] ? sock_alloc_send_pskb+0x86b/0x980 [ 466.731791][T16918] ? __pfx__copy_from_iter+0x10/0x10 [ 466.731831][T16918] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 466.731859][T16918] skb_copy_datagram_from_iter+0xf5/0x720 [ 466.731889][T16918] ? skb_put+0x11b/0x210 [ 466.731912][T16918] tun_get_user+0x1691/0x3e90 [ 466.731955][T16918] ? aa_file_perm+0x44d/0x1550 [ 466.731975][T16918] ? __pfx_tun_get_user+0x10/0x10 [ 466.732001][T16918] ? _parse_integer_limit+0x1ae/0x1f0 [ 466.732034][T16918] ? __lock_acquire+0xab9/0xd20 [ 466.732065][T16918] ? ref_tracker_alloc+0x318/0x460 [ 466.732082][T16918] ? __lock_acquire+0xab9/0xd20 [ 466.732107][T16918] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 466.732135][T16918] ? tun_get+0x1c/0x2f0 [ 466.732169][T16918] ? tun_get+0x1c/0x2f0 [ 466.732194][T16918] ? tun_get+0x1c/0x2f0 [ 466.732224][T16918] tun_chr_write_iter+0x113/0x200 [ 466.732255][T16918] vfs_write+0x5c9/0xb30 [ 466.732294][T16918] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 466.732321][T16918] ? __pfx_vfs_write+0x10/0x10 [ 466.732364][T16918] ? __fget_files+0x2a/0x420 [ 466.732398][T16918] ksys_write+0x145/0x250 [ 466.732433][T16918] ? __pfx_ksys_write+0x10/0x10 [ 466.732468][T16918] ? do_syscall_64+0xbe/0xfa0 [ 466.732504][T16918] do_syscall_64+0xfa/0xfa0 [ 466.732535][T16918] ? lockdep_hardirqs_on+0x9c/0x150 [ 466.732566][T16918] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.732589][T16918] ? clear_bhb_loop+0x60/0xb0 [ 466.732616][T16918] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.732638][T16918] RIP: 0033:0x7f78c818f6c9 [ 466.732658][T16918] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 466.732678][T16918] RSP: 002b:00007f78c9002038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 466.732700][T16918] RAX: ffffffffffffffda RBX: 00007f78c83e5fa0 RCX: 00007f78c818f6c9 [ 466.732717][T16918] RDX: 000000000000009e RSI: 0000200000000340 RDI: 0000000000000003 [ 466.732732][T16918] RBP: 00007f78c9002090 R08: 0000000000000000 R09: 0000000000000000 [ 466.732745][T16918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 466.732759][T16918] R13: 00007f78c83e6038 R14: 00007f78c83e5fa0 R15: 00007fff4be53e58 [ 466.732831][T16918] [ 467.127732][T16920] CPU: 1 UID: 0 PID: 16920 Comm: syz.3.3659 Not tainted syzkaller #0 PREEMPT(full) [ 467.127762][T16920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 467.127775][T16920] Call Trace: [ 467.127790][T16920] [ 467.127800][T16920] dump_stack_lvl+0x189/0x250 [ 467.127833][T16920] ? __pfx____ratelimit+0x10/0x10 [ 467.127860][T16920] ? __pfx_dump_stack_lvl+0x10/0x10 [ 467.127888][T16920] ? __pfx__printk+0x10/0x10 [ 467.127915][T16920] ? __pfx___schedule+0x10/0x10 [ 467.127947][T16920] should_fail_ex+0x414/0x560 [ 467.127983][T16920] should_failslab+0xa8/0x100 [ 467.128006][T16920] kmem_cache_alloc_noprof+0x74/0x6e0 [ 467.128034][T16920] ? skb_clone+0x212/0x3a0 [ 467.128064][T16920] skb_clone+0x212/0x3a0 [ 467.128091][T16920] __netlink_deliver_tap+0x404/0x850 [ 467.128124][T16920] ? netlink_deliver_tap+0x2e/0x1b0 [ 467.128145][T16920] netlink_deliver_tap+0x19c/0x1b0 [ 467.128166][T16920] netlink_unicast+0x7fa/0x9e0 [ 467.128204][T16920] ? __pfx_netlink_unicast+0x10/0x10 [ 467.128235][T16920] ? netlink_sendmsg+0x642/0xb30 [ 467.128252][T16920] ? skb_put+0x11b/0x210 [ 467.128275][T16920] netlink_sendmsg+0x805/0xb30 [ 467.128305][T16920] ? __pfx_netlink_sendmsg+0x10/0x10 [ 467.128329][T16920] ? aa_sock_msg_perm+0xf1/0x1d0 [ 467.128360][T16920] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 467.128380][T16920] ? __pfx_netlink_sendmsg+0x10/0x10 [ 467.128401][T16920] __sock_sendmsg+0x21c/0x270 [ 467.128431][T16920] ____sys_sendmsg+0x505/0x830 [ 467.128459][T16920] ? __pfx_____sys_sendmsg+0x10/0x10 [ 467.128511][T16920] ? import_iovec+0x74/0xa0 [ 467.128541][T16920] ___sys_sendmsg+0x21f/0x2a0 [ 467.128566][T16920] ? __pfx____sys_sendmsg+0x10/0x10 [ 467.128631][T16920] ? __fget_files+0x2a/0x420 [ 467.128649][T16920] ? __fget_files+0x3a0/0x420 [ 467.128694][T16920] __x64_sys_sendmsg+0x19b/0x260 [ 467.128719][T16920] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 467.128752][T16920] ? __pfx_ksys_write+0x10/0x10 [ 467.128791][T16920] ? do_syscall_64+0xbe/0xfa0 [ 467.128824][T16920] do_syscall_64+0xfa/0xfa0 [ 467.128850][T16920] ? lockdep_hardirqs_on+0x9c/0x150 [ 467.128878][T16920] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.128897][T16920] ? clear_bhb_loop+0x60/0xb0 [ 467.128922][T16920] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.128941][T16920] RIP: 0033:0x7f051b38f6c9 [ 467.128960][T16920] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 467.128977][T16920] RSP: 002b:00007f051c27b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 467.128999][T16920] RAX: ffffffffffffffda RBX: 00007f051b5e5fa0 RCX: 00007f051b38f6c9 [ 467.129013][T16920] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 467.129025][T16920] RBP: 00007f051c27b090 R08: 0000000000000000 R09: 0000000000000000 [ 467.129037][T16920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 467.129048][T16920] R13: 00007f051b5e6038 R14: 00007f051b5e5fa0 R15: 00007ffe80dc9528 [ 467.129083][T16920] [ 467.831377][T16948] FAULT_INJECTION: forcing a failure. [ 467.831377][T16948] name failslab, interval 1, probability 0, space 0, times 0 [ 467.831444][T16947] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 467.855182][T16948] CPU: 1 UID: 0 PID: 16948 Comm: syz.4.3665 Not tainted syzkaller #0 PREEMPT(full) [ 467.855220][T16948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 467.855233][T16948] Call Trace: [ 467.855240][T16948] [ 467.855249][T16948] dump_stack_lvl+0x189/0x250 [ 467.855291][T16948] ? __pfx____ratelimit+0x10/0x10 [ 467.855316][T16948] ? __pfx_dump_stack_lvl+0x10/0x10 [ 467.855342][T16948] ? __pfx__printk+0x10/0x10 [ 467.855396][T16948] should_fail_ex+0x414/0x560 [ 467.855433][T16948] should_failslab+0xa8/0x100 [ 467.855455][T16948] __kmalloc_cache_noprof+0x6f/0x6f0 [ 467.855483][T16948] ? __sctp_v6_cmp_addr+0x1dc/0x510 [ 467.855510][T16948] ? sctp_v6_cmp_addr+0x15/0xd0 [ 467.855535][T16948] ? sctp_add_bind_addr+0x8c/0x370 [ 467.855573][T16948] sctp_add_bind_addr+0x8c/0x370 [ 467.855605][T16948] sctp_copy_local_addr_list+0x30b/0x4e0 [ 467.855637][T16948] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 467.855673][T16948] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 467.855702][T16948] ? sctp_v6_is_any+0x64/0x80 [ 467.855732][T16948] ? sctp_copy_one_addr+0x93/0x360 [ 467.855763][T16948] sctp_bind_addr_copy+0xb3/0x3c0 [ 467.855792][T16948] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 467.855820][T16948] sctp_connect_new_asoc+0x2e0/0x690 [ 467.855844][T16948] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 467.855874][T16948] ? __local_bh_enable_ip+0x12d/0x1c0 [ 467.855902][T16948] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 467.855923][T16948] ? security_sctp_bind_connect+0x7e/0x2e0 [ 467.855949][T16948] sctp_sendmsg+0x155c/0x2810 [ 467.855980][T16948] ? __pfx_sctp_sendmsg+0x10/0x10 [ 467.856003][T16948] ? aa_sk_perm+0x81e/0x950 [ 467.856033][T16948] ? __pfx_aa_sk_perm+0x10/0x10 [ 467.856062][T16948] ? sock_rps_record_flow+0x19/0x410 [ 467.856095][T16948] ? inet_sendmsg+0x2f4/0x370 [ 467.856116][T16948] __sock_sendmsg+0x19c/0x270 [ 467.856146][T16948] __sys_sendto+0x3bd/0x520 [ 467.856167][T16948] ? __pfx___sys_sendto+0x10/0x10 [ 467.856182][T16948] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 467.856224][T16948] ? __fget_files+0x3a0/0x420 [ 467.856252][T16948] ? ksys_write+0x22a/0x250 [ 467.856280][T16948] ? __pfx_ksys_write+0x10/0x10 [ 467.856311][T16948] __x64_sys_sendto+0xde/0x100 [ 467.856333][T16948] do_syscall_64+0xfa/0xfa0 [ 467.856358][T16948] ? lockdep_hardirqs_on+0x9c/0x150 [ 467.856384][T16948] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.856403][T16948] ? clear_bhb_loop+0x60/0xb0 [ 467.856426][T16948] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.856444][T16948] RIP: 0033:0x7f78c818f6c9 [ 467.856460][T16948] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 467.856475][T16948] RSP: 002b:00007f78c9002038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 467.856495][T16948] RAX: ffffffffffffffda RBX: 00007f78c83e5fa0 RCX: 00007f78c818f6c9 [ 467.856509][T16948] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 000000000000000b [ 467.856521][T16948] RBP: 00007f78c9002090 R08: 000020000005ffe4 R09: 000000000000001c [ 467.856533][T16948] R10: 00000000000000e0 R11: 0000000000000246 R12: 0000000000000002 [ 467.856544][T16948] R13: 00007f78c83e6038 R14: 00007f78c83e5fa0 R15: 00007fff4be53e58 [ 467.856571][T16948] [ 468.207881][T16950] netlink: 300 bytes leftover after parsing attributes in process `syz.3.3666'. [ 468.221307][T16950] netlink: 300 bytes leftover after parsing attributes in process `syz.3.3666'. [ 468.265064][T16957] syzkaller0: entered promiscuous mode [ 468.270895][T16957] syzkaller0: entered allmulticast mode [ 468.359338][T16961] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3671'. [ 468.393246][T16963] Bluetooth: MGMT ver 1.23 [ 468.716690][T16982] FAULT_INJECTION: forcing a failure. [ 468.716690][T16982] name failslab, interval 1, probability 0, space 0, times 0 [ 468.730492][T16982] CPU: 1 UID: 0 PID: 16982 Comm: syz.2.3682 Not tainted syzkaller #0 PREEMPT(full) [ 468.730520][T16982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 468.730532][T16982] Call Trace: [ 468.730540][T16982] [ 468.730549][T16982] dump_stack_lvl+0x189/0x250 [ 468.730581][T16982] ? __pfx____ratelimit+0x10/0x10 [ 468.730609][T16982] ? __pfx_dump_stack_lvl+0x10/0x10 [ 468.730636][T16982] ? __pfx__printk+0x10/0x10 [ 468.730663][T16982] ? __pfx___might_resched+0x10/0x10 [ 468.730683][T16982] ? fs_reclaim_acquire+0x7d/0x100 [ 468.730708][T16982] should_fail_ex+0x414/0x560 [ 468.730743][T16982] should_failslab+0xa8/0x100 [ 468.730765][T16982] __kmalloc_noprof+0xcb/0x7f0 [ 468.730792][T16982] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 468.730819][T16982] ? __local_bh_enable_ip+0x12d/0x1c0 [ 468.730853][T16982] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 468.730887][T16982] genl_family_rcv_msg_doit+0xb8/0x300 [ 468.730921][T16982] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 468.730955][T16982] ? apparmor_capable+0x137/0x1b0 [ 468.730980][T16982] ? bpf_lsm_capable+0x9/0x20 [ 468.731004][T16982] ? security_capable+0x7e/0x2e0 [ 468.731038][T16982] genl_rcv_msg+0x60e/0x790 [ 468.731095][T16982] ? __pfx_genl_rcv_msg+0x10/0x10 [ 468.731119][T16982] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 468.731141][T16982] ? __pfx_nl80211_start_ap+0x10/0x10 [ 468.731164][T16982] ? __pfx_nl80211_post_doit+0x10/0x10 [ 468.731189][T16982] ? __asan_memcpy+0x40/0x70 [ 468.731216][T16982] ? __pfx_ref_tracker_free+0x10/0x10 [ 468.731245][T16982] netlink_rcv_skb+0x208/0x470 [ 468.731262][T16982] ? __lock_acquire+0xab9/0xd20 [ 468.731283][T16982] ? __pfx_genl_rcv_msg+0x10/0x10 [ 468.731311][T16982] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 468.731352][T16982] ? down_read+0x1ad/0x2e0 [ 468.731377][T16982] genl_rcv+0x28/0x40 [ 468.731399][T16982] netlink_unicast+0x82f/0x9e0 [ 468.731440][T16982] ? __pfx_netlink_unicast+0x10/0x10 [ 468.731472][T16982] ? netlink_sendmsg+0x642/0xb30 [ 468.731490][T16982] ? skb_put+0x11b/0x210 [ 468.731514][T16982] netlink_sendmsg+0x805/0xb30 [ 468.731545][T16982] ? __pfx_netlink_sendmsg+0x10/0x10 [ 468.731570][T16982] ? aa_sock_msg_perm+0xf1/0x1d0 [ 468.731603][T16982] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 468.731623][T16982] ? __pfx_netlink_sendmsg+0x10/0x10 [ 468.731646][T16982] __sock_sendmsg+0x21c/0x270 [ 468.731678][T16982] ____sys_sendmsg+0x505/0x830 [ 468.731707][T16982] ? __pfx_____sys_sendmsg+0x10/0x10 [ 468.731740][T16982] ? import_iovec+0x74/0xa0 [ 468.731771][T16982] ___sys_sendmsg+0x21f/0x2a0 [ 468.731798][T16982] ? __pfx____sys_sendmsg+0x10/0x10 [ 468.731868][T16982] ? __fget_files+0x2a/0x420 [ 468.731888][T16982] ? __fget_files+0x3a0/0x420 [ 468.731921][T16982] __x64_sys_sendmsg+0x19b/0x260 [ 468.731947][T16982] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 468.731981][T16982] ? __pfx_ksys_write+0x10/0x10 [ 468.732016][T16982] ? do_syscall_64+0xbe/0xfa0 [ 468.732051][T16982] do_syscall_64+0xfa/0xfa0 [ 468.732079][T16982] ? lockdep_hardirqs_on+0x9c/0x150 [ 468.732108][T16982] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.732129][T16982] ? clear_bhb_loop+0x60/0xb0 [ 468.732154][T16982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.732174][T16982] RIP: 0033:0x7fb3d7d8f6c9 [ 468.732192][T16982] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 468.732210][T16982] RSP: 002b:00007fb3d8c05038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 468.732232][T16982] RAX: ffffffffffffffda RBX: 00007fb3d7fe5fa0 RCX: 00007fb3d7d8f6c9 [ 468.732246][T16982] RDX: 000000000000c094 RSI: 00002000000001c0 RDI: 0000000000000003 [ 468.732257][T16982] RBP: 00007fb3d8c05090 R08: 0000000000000000 R09: 0000000000000000 [ 468.732268][T16982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 468.732280][T16982] R13: 00007fb3d7fe6038 R14: 00007fb3d7fe5fa0 R15: 00007ffcbcbd89c8 [ 468.732328][T16982] [ 469.329412][T16992] syzkaller0: entered promiscuous mode [ 469.350279][T16992] syzkaller0: entered allmulticast mode [ 469.502382][T17004] lo: entered allmulticast mode [ 469.582929][T17012] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3689'. [ 469.642391][T17000] lo: left allmulticast mode [ 469.787675][T17021] netlink: 288 bytes leftover after parsing attributes in process `syz.1.3695'. [ 470.330716][T17057] lo: entered allmulticast mode [ 470.393766][T17065] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3706'. [ 470.425421][T17056] lo: left allmulticast mode [ 470.629320][T17077] FAULT_INJECTION: forcing a failure. [ 470.629320][T17077] name failslab, interval 1, probability 0, space 0, times 0 [ 470.642161][T17077] CPU: 1 UID: 0 PID: 17077 Comm: syz.1.3710 Not tainted syzkaller #0 PREEMPT(full) [ 470.642191][T17077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 470.642204][T17077] Call Trace: [ 470.642212][T17077] [ 470.642221][T17077] dump_stack_lvl+0x189/0x250 [ 470.642255][T17077] ? __pfx____ratelimit+0x10/0x10 [ 470.642283][T17077] ? __pfx_dump_stack_lvl+0x10/0x10 [ 470.642312][T17077] ? __pfx__printk+0x10/0x10 [ 470.642342][T17077] ? is_bpf_text_address+0x292/0x2b0 [ 470.642370][T17077] should_fail_ex+0x414/0x560 [ 470.642416][T17077] should_failslab+0xa8/0x100 [ 470.642440][T17077] kmem_cache_alloc_noprof+0x74/0x6e0 [ 470.642470][T17077] ? skb_clone+0x212/0x3a0 [ 470.642501][T17077] skb_clone+0x212/0x3a0 [ 470.642521][T17077] ? __skb_tstamp_tx+0x519/0xee0 [ 470.642555][T17077] __skb_tstamp_tx+0x526/0xee0 [ 470.642596][T17077] __dev_queue_xmit+0x1fed/0x3b50 [ 470.642622][T17077] ? kasan_save_track+0x4f/0x80 [ 470.642648][T17077] ? kasan_save_track+0x3e/0x80 [ 470.642675][T17077] ? __kasan_slab_alloc+0x6c/0x80 [ 470.642705][T17077] ? kmem_cache_alloc_noprof+0x367/0x6e0 [ 470.642730][T17077] ? skb_clone+0x212/0x3a0 [ 470.642755][T17077] ? ___sys_sendmsg+0x21f/0x2a0 [ 470.642777][T17077] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.642818][T17077] ? __pfx___dev_queue_xmit+0x10/0x10 [ 470.642858][T17077] ? __copy_skb_header+0xa7/0x550 [ 470.642882][T17077] ? __asan_memcpy+0x40/0x70 [ 470.642910][T17077] ? __skb_clone+0x63/0x7a0 [ 470.642938][T17077] ? __skb_clone+0x483/0x7a0 [ 470.642968][T17077] ? skb_clone+0x246/0x3a0 [ 470.642988][T17077] ? can_send+0x655/0xd00 [ 470.643020][T17077] can_send+0x905/0xd00 [ 470.643060][T17077] ? __pfx_can_send+0x10/0x10 [ 470.643092][T17077] ? dev_get_by_index+0x22/0x2e0 [ 470.643118][T17077] ? skb_put+0x11b/0x210 [ 470.643142][T17077] raw_sendmsg+0xbc3/0x1150 [ 470.643174][T17077] ? __pfx_raw_sendmsg+0x10/0x10 [ 470.643201][T17077] ? __lock_acquire+0xab9/0xd20 [ 470.643220][T17077] ? aa_sock_msg_perm+0xf1/0x1d0 [ 470.643254][T17077] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 470.643274][T17077] ? __pfx_raw_sendmsg+0x10/0x10 [ 470.643296][T17077] __sock_sendmsg+0x21c/0x270 [ 470.643327][T17077] ____sys_sendmsg+0x505/0x830 [ 470.643356][T17077] ? __pfx_____sys_sendmsg+0x10/0x10 [ 470.643390][T17077] ? import_iovec+0x74/0xa0 [ 470.643427][T17077] ___sys_sendmsg+0x21f/0x2a0 [ 470.643452][T17077] ? __pfx____sys_sendmsg+0x10/0x10 [ 470.643515][T17077] ? __fget_files+0x2a/0x420 [ 470.643534][T17077] ? __fget_files+0x3a0/0x420 [ 470.643565][T17077] __x64_sys_sendmsg+0x19b/0x260 [ 470.643591][T17077] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 470.643624][T17077] ? __pfx_ksys_write+0x10/0x10 [ 470.643659][T17077] ? do_syscall_64+0xbe/0xfa0 [ 470.643693][T17077] do_syscall_64+0xfa/0xfa0 [ 470.643720][T17077] ? lockdep_hardirqs_on+0x9c/0x150 [ 470.643748][T17077] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.643768][T17077] ? clear_bhb_loop+0x60/0xb0 [ 470.643794][T17077] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.643813][T17077] RIP: 0033:0x7fae2df8f6c9 [ 470.643832][T17077] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 470.643850][T17077] RSP: 002b:00007fae2eee0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 470.643872][T17077] RAX: ffffffffffffffda RBX: 00007fae2e1e5fa0 RCX: 00007fae2df8f6c9 [ 470.643887][T17077] RDX: 0000000000000811 RSI: 0000200000000340 RDI: 0000000000000003 [ 470.643899][T17077] RBP: 00007fae2eee0090 R08: 0000000000000000 R09: 0000000000000000 [ 470.643912][T17077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 470.643923][T17077] R13: 00007fae2e1e6038 R14: 00007fae2e1e5fa0 R15: 00007ffc28b4a098 [ 470.643958][T17077] [ 471.164886][T17081] FAULT_INJECTION: forcing a failure. [ 471.164886][T17081] name failslab, interval 1, probability 0, space 0, times 0 [ 471.221927][T17081] CPU: 1 UID: 0 PID: 17081 Comm: syz.1.3712 Not tainted syzkaller #0 PREEMPT(full) [ 471.221957][T17081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 471.221970][T17081] Call Trace: [ 471.221978][T17081] [ 471.221987][T17081] dump_stack_lvl+0x189/0x250 [ 471.222020][T17081] ? __pfx____ratelimit+0x10/0x10 [ 471.222048][T17081] ? __pfx_dump_stack_lvl+0x10/0x10 [ 471.222075][T17081] ? __pfx__printk+0x10/0x10 [ 471.222093][T17081] ? netlink_sendmsg+0x805/0xb30 [ 471.222115][T17081] ? __x64_sys_sendmsg+0x19b/0x260 [ 471.222136][T17081] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.222167][T17081] should_fail_ex+0x414/0x560 [ 471.222205][T17081] should_failslab+0xa8/0x100 [ 471.222229][T17081] kmem_cache_alloc_noprof+0x74/0x6e0 [ 471.222259][T17081] ? skb_clone+0x212/0x3a0 [ 471.222288][T17081] skb_clone+0x212/0x3a0 [ 471.222316][T17081] __netlink_deliver_tap+0x404/0x850 [ 471.222350][T17081] ? netlink_deliver_tap+0x2e/0x1b0 [ 471.222372][T17081] netlink_deliver_tap+0x19c/0x1b0 [ 471.222395][T17081] netlink_sendskb+0x68/0x140 [ 471.222428][T17081] netlink_unicast+0x397/0x9e0 [ 471.222454][T17081] ? __asan_memcpy+0x40/0x70 [ 471.222503][T17081] ? __pfx_netlink_unicast+0x10/0x10 [ 471.222562][T17081] netlink_rcv_skb+0x28c/0x470 [ 471.222579][T17081] ? lockdep_hardirqs_on+0x9c/0x150 [ 471.222624][T17081] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 471.222674][T17081] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 471.222707][T17081] ? bpf_lsm_capable+0x9/0x20 [ 471.222732][T17081] ? security_capable+0x7e/0x2e0 [ 471.222768][T17081] nfnetlink_rcv+0x282/0x2590 [ 471.222800][T17081] ? __dev_queue_xmit+0x27b/0x3b50 [ 471.222826][T17081] ? __dev_queue_xmit+0x1d79/0x3b50 [ 471.222847][T17081] ? kasan_save_track+0x3e/0x80 [ 471.222874][T17081] ? __kasan_slab_alloc+0x6c/0x80 [ 471.222913][T17081] ? __dev_queue_xmit+0x27b/0x3b50 [ 471.222954][T17081] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 471.222982][T17081] ? __pfx___dev_queue_xmit+0x10/0x10 [ 471.223022][T17081] ? ref_tracker_free+0x63a/0x7d0 [ 471.223042][T17081] ? __asan_memcpy+0x40/0x70 [ 471.223068][T17081] ? __pfx_ref_tracker_free+0x10/0x10 [ 471.223106][T17081] ? skb_clone+0x246/0x3a0 [ 471.223133][T17081] ? __netlink_deliver_tap+0x807/0x850 [ 471.223151][T17081] ? netlink_deliver_tap+0x2e/0x1b0 [ 471.223179][T17081] ? netlink_deliver_tap+0x2e/0x1b0 [ 471.223207][T17081] netlink_unicast+0x82f/0x9e0 [ 471.223246][T17081] ? __pfx_netlink_unicast+0x10/0x10 [ 471.223278][T17081] ? netlink_sendmsg+0x642/0xb30 [ 471.223294][T17081] ? skb_put+0x11b/0x210 [ 471.223318][T17081] netlink_sendmsg+0x805/0xb30 [ 471.223348][T17081] ? __pfx_netlink_sendmsg+0x10/0x10 [ 471.223372][T17081] ? aa_sock_msg_perm+0xf1/0x1d0 [ 471.223403][T17081] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 471.223423][T17081] ? __pfx_netlink_sendmsg+0x10/0x10 [ 471.223462][T17081] __sock_sendmsg+0x21c/0x270 [ 471.223494][T17081] ____sys_sendmsg+0x505/0x830 [ 471.223524][T17081] ? __pfx_____sys_sendmsg+0x10/0x10 [ 471.223557][T17081] ? import_iovec+0x74/0xa0 [ 471.223588][T17081] ___sys_sendmsg+0x21f/0x2a0 [ 471.223621][T17081] ? __pfx____sys_sendmsg+0x10/0x10 [ 471.223686][T17081] ? __fget_files+0x2a/0x420 [ 471.223706][T17081] ? __fget_files+0x3a0/0x420 [ 471.223738][T17081] __x64_sys_sendmsg+0x19b/0x260 [ 471.223765][T17081] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 471.223800][T17081] ? __pfx_ksys_write+0x10/0x10 [ 471.223834][T17081] ? do_syscall_64+0xbe/0xfa0 [ 471.223868][T17081] do_syscall_64+0xfa/0xfa0 [ 471.223896][T17081] ? lockdep_hardirqs_on+0x9c/0x150 [ 471.223924][T17081] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.223945][T17081] ? clear_bhb_loop+0x60/0xb0 [ 471.223970][T17081] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.223996][T17081] RIP: 0033:0x7fae2df8f6c9 [ 471.224014][T17081] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 471.224032][T17081] RSP: 002b:00007fae2eee0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 471.224054][T17081] RAX: ffffffffffffffda RBX: 00007fae2e1e5fa0 RCX: 00007fae2df8f6c9 [ 471.224069][T17081] RDX: 0000000000044000 RSI: 0000200000000540 RDI: 0000000000000003 [ 471.224082][T17081] RBP: 00007fae2eee0090 R08: 0000000000000000 R09: 0000000000000000 [ 471.224094][T17081] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 471.224106][T17081] R13: 00007fae2e1e6038 R14: 00007fae2e1e5fa0 R15: 00007ffc28b4a098 [ 471.224143][T17081] [ 471.794042][T17093] lo: entered allmulticast mode [ 471.892751][T17102] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3718'. [ 471.946973][T17092] lo: left allmulticast mode [ 472.061710][T17109] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3723'. [ 472.343726][T17124] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 472.371525][T17130] FAULT_INJECTION: forcing a failure. [ 472.371525][T17130] name failslab, interval 1, probability 0, space 0, times 0 [ 472.384631][T17130] CPU: 0 UID: 0 PID: 17130 Comm: syz.3.3731 Not tainted syzkaller #0 PREEMPT(full) [ 472.384660][T17130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 472.384674][T17130] Call Trace: [ 472.384682][T17130] [ 472.384690][T17130] dump_stack_lvl+0x189/0x250 [ 472.384723][T17130] ? __pfx____ratelimit+0x10/0x10 [ 472.384752][T17130] ? __pfx_dump_stack_lvl+0x10/0x10 [ 472.384781][T17130] ? __pfx__printk+0x10/0x10 [ 472.384810][T17130] ? kasan_save_track+0x4f/0x80 [ 472.384838][T17130] ? kasan_save_track+0x3e/0x80 [ 472.384865][T17130] ? __kasan_slab_alloc+0x6c/0x80 [ 472.384899][T17130] should_fail_ex+0x414/0x560 [ 472.384937][T17130] should_failslab+0xa8/0x100 [ 472.384960][T17130] kmem_cache_alloc_noprof+0x74/0x6e0 [ 472.384989][T17130] ? __pfx_skb_network_protocol+0x10/0x10 [ 472.385010][T17130] ? skb_clone+0x212/0x3a0 [ 472.385040][T17130] skb_clone+0x212/0x3a0 [ 472.385061][T17130] ? __skb_tstamp_tx+0x519/0xee0 [ 472.385095][T17130] __skb_tstamp_tx+0x526/0xee0 [ 472.385137][T17130] vcan_tx+0x364/0xae0 [ 472.385159][T17130] ? rcu_lockdep_current_cpu_online+0x37/0x120 [ 472.385201][T17130] ? rcu_read_lock_bh_held+0x79/0xe0 [ 472.385266][T17130] ? __pfx_vcan_tx+0x10/0x10 [ 472.385283][T17130] ? __lock_acquire+0xab9/0xd20 [ 472.385314][T17130] dev_hard_start_xmit+0x2d7/0x830 [ 472.385362][T17130] __dev_queue_xmit+0x1b8d/0x3b50 [ 472.385385][T17130] ? kasan_save_track+0x4f/0x80 [ 472.385411][T17130] ? kasan_save_track+0x3e/0x80 [ 472.385447][T17130] ? __dev_queue_xmit+0x27b/0x3b50 [ 472.385487][T17130] ? __pfx___dev_queue_xmit+0x10/0x10 [ 472.385529][T17130] ? __copy_skb_header+0xa7/0x550 [ 472.385553][T17130] ? __asan_memcpy+0x40/0x70 [ 472.385599][T17130] ? skb_clone+0x246/0x3a0 [ 472.385618][T17130] ? can_send+0x655/0xd00 [ 472.385648][T17130] can_send+0x905/0xd00 [ 472.385685][T17130] ? __pfx_can_send+0x10/0x10 [ 472.385714][T17130] ? dev_get_by_index+0x22/0x2e0 [ 472.385739][T17130] ? skb_put+0x11b/0x210 [ 472.385762][T17130] raw_sendmsg+0xbc3/0x1150 [ 472.385792][T17130] ? __pfx_raw_sendmsg+0x10/0x10 [ 472.385818][T17130] ? __lock_acquire+0xab9/0xd20 [ 472.385835][T17130] ? aa_sock_msg_perm+0xf1/0x1d0 [ 472.385867][T17130] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 472.385886][T17130] ? __pfx_raw_sendmsg+0x10/0x10 [ 472.385906][T17130] __sock_sendmsg+0x21c/0x270 [ 472.385936][T17130] ____sys_sendmsg+0x505/0x830 [ 472.385965][T17130] ? __pfx_____sys_sendmsg+0x10/0x10 [ 472.385997][T17130] ? import_iovec+0x74/0xa0 [ 472.386026][T17130] ___sys_sendmsg+0x21f/0x2a0 [ 472.386050][T17130] ? __pfx____sys_sendmsg+0x10/0x10 [ 472.386113][T17130] ? __fget_files+0x2a/0x420 [ 472.386131][T17130] ? __fget_files+0x3a0/0x420 [ 472.386161][T17130] __x64_sys_sendmsg+0x19b/0x260 [ 472.386186][T17130] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 472.386232][T17130] ? __pfx_ksys_write+0x10/0x10 [ 472.386265][T17130] ? do_syscall_64+0xbe/0xfa0 [ 472.386297][T17130] do_syscall_64+0xfa/0xfa0 [ 472.386324][T17130] ? lockdep_hardirqs_on+0x9c/0x150 [ 472.386352][T17130] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.386372][T17130] ? clear_bhb_loop+0x60/0xb0 [ 472.386397][T17130] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.386417][T17130] RIP: 0033:0x7f051b38f6c9 [ 472.386436][T17130] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 472.386454][T17130] RSP: 002b:00007f051c27b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 472.386477][T17130] RAX: ffffffffffffffda RBX: 00007f051b5e5fa0 RCX: 00007f051b38f6c9 [ 472.386491][T17130] RDX: 0000000000000811 RSI: 0000200000000340 RDI: 0000000000000003 [ 472.386504][T17130] RBP: 00007f051c27b090 R08: 0000000000000000 R09: 0000000000000000 [ 472.386516][T17130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 472.386528][T17130] R13: 00007f051b5e6038 R14: 00007f051b5e5fa0 R15: 00007ffe80dc9528 [ 472.386563][T17130] [ 472.937308][T17139] lo: entered allmulticast mode [ 473.016016][T17147] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3737'. [ 473.036548][T17148] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3738'. [ 473.050768][T17138] lo: left allmulticast mode [ 473.050964][T17151] IPVS: set_ctl: invalid protocol: 51 172.20.20.187:20001 [ 473.329722][ T36] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 473.349949][ T36] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 473.384250][ T36] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 473.397315][ T36] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 473.486333][T17168] netlink: 232 bytes leftover after parsing attributes in process `syz.1.3745'. [ 473.507449][T17169] validate_nla: 87 callbacks suppressed [ 473.507469][T17169] netlink: 'syz.0.3744': attribute type 1 has an invalid length. [ 473.509531][T17168] ieee802154 phy1 wpan1: encryption failed: -126 [ 473.723283][T17186] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3751'. [ 473.753686][T17188] lo: entered allmulticast mode [ 473.815064][T17190] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3752'. [ 473.920539][T17187] lo: left allmulticast mode [ 473.994639][T17201] FAULT_INJECTION: forcing a failure. [ 473.994639][T17201] name failslab, interval 1, probability 0, space 0, times 0 [ 474.047369][T17201] CPU: 0 UID: 0 PID: 17201 Comm: syz.4.3755 Not tainted syzkaller #0 PREEMPT(full) [ 474.047398][T17201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 474.047411][T17201] Call Trace: [ 474.047419][T17201] [ 474.047428][T17201] dump_stack_lvl+0x189/0x250 [ 474.047461][T17201] ? __pfx____ratelimit+0x10/0x10 [ 474.047489][T17201] ? __pfx_dump_stack_lvl+0x10/0x10 [ 474.047517][T17201] ? __pfx__printk+0x10/0x10 [ 474.047554][T17201] should_fail_ex+0x414/0x560 [ 474.047591][T17201] should_failslab+0xa8/0x100 [ 474.047632][T17201] __kmalloc_cache_noprof+0x6f/0x6f0 [ 474.047662][T17201] ? __sctp_v6_cmp_addr+0x1dc/0x510 [ 474.047690][T17201] ? sctp_v6_cmp_addr+0x15/0xd0 [ 474.047717][T17201] ? sctp_add_bind_addr+0x8c/0x370 [ 474.047752][T17201] sctp_add_bind_addr+0x8c/0x370 [ 474.047786][T17201] sctp_copy_local_addr_list+0x30b/0x4e0 [ 474.047819][T17201] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 474.047848][T17201] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 474.047879][T17201] ? sctp_v6_is_any+0x64/0x80 [ 474.047911][T17201] ? sctp_copy_one_addr+0x93/0x360 [ 474.047944][T17201] sctp_bind_addr_copy+0xb3/0x3c0 [ 474.047974][T17201] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 474.048004][T17201] sctp_connect_new_asoc+0x2e0/0x690 [ 474.048029][T17201] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 474.048048][T17201] ? __local_bh_enable_ip+0x12d/0x1c0 [ 474.048080][T17201] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 474.048104][T17201] ? security_sctp_bind_connect+0x7e/0x2e0 [ 474.048133][T17201] sctp_sendmsg+0x155c/0x2810 [ 474.048168][T17201] ? __pfx_sctp_sendmsg+0x10/0x10 [ 474.048197][T17201] ? aa_sk_perm+0x81e/0x950 [ 474.048231][T17201] ? __pfx_aa_sk_perm+0x10/0x10 [ 474.048264][T17201] ? sock_rps_record_flow+0x19/0x410 [ 474.048300][T17201] ? inet_sendmsg+0x2f4/0x370 [ 474.048323][T17201] __sock_sendmsg+0x19c/0x270 [ 474.048365][T17201] __sys_sendto+0x3bd/0x520 [ 474.048388][T17201] ? __pfx___sys_sendto+0x10/0x10 [ 474.048405][T17201] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 474.048453][T17201] ? __fget_files+0x3a0/0x420 [ 474.048486][T17201] ? ksys_write+0x22a/0x250 [ 474.048518][T17201] ? __pfx_ksys_write+0x10/0x10 [ 474.048552][T17201] __x64_sys_sendto+0xde/0x100 [ 474.048576][T17201] do_syscall_64+0xfa/0xfa0 [ 474.048604][T17201] ? lockdep_hardirqs_on+0x9c/0x150 [ 474.048632][T17201] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.048652][T17201] ? clear_bhb_loop+0x60/0xb0 [ 474.048677][T17201] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.048698][T17201] RIP: 0033:0x7f78c818f6c9 [ 474.048716][T17201] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 474.048734][T17201] RSP: 002b:00007f78c9002038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 474.048757][T17201] RAX: ffffffffffffffda RBX: 00007f78c83e5fa0 RCX: 00007f78c818f6c9 [ 474.048771][T17201] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 000000000000000b [ 474.048784][T17201] RBP: 00007f78c9002090 R08: 000020000005ffe4 R09: 000000000000001c [ 474.048797][T17201] R10: 00000000000000e0 R11: 0000000000000246 R12: 0000000000000002 [ 474.048808][T17201] R13: 00007f78c83e6038 R14: 00007f78c83e5fa0 R15: 00007fff4be53e58 [ 474.048840][T17201] [ 474.685795][T17222] netlink: 'syz.2.3761': attribute type 1 has an invalid length. [ 474.693613][T17222] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3761'. [ 474.695983][T17221] FAULT_INJECTION: forcing a failure. [ 474.695983][T17221] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 474.728175][T17221] CPU: 1 UID: 0 PID: 17221 Comm: syz.4.3763 Not tainted syzkaller #0 PREEMPT(full) [ 474.728203][T17221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 474.728215][T17221] Call Trace: [ 474.728223][T17221] [ 474.728230][T17221] dump_stack_lvl+0x189/0x250 [ 474.728260][T17221] ? __pfx____ratelimit+0x10/0x10 [ 474.728286][T17221] ? __pfx_dump_stack_lvl+0x10/0x10 [ 474.728321][T17221] ? __pfx__printk+0x10/0x10 [ 474.728341][T17221] ? __might_fault+0xb0/0x130 [ 474.728381][T17221] should_fail_ex+0x414/0x560 [ 474.728415][T17221] _copy_from_user+0x2d/0xb0 [ 474.728440][T17221] csum_and_copy_from_iter_full+0x1e1/0x1ed0 [ 474.728460][T17221] ? rcu_is_watching+0x15/0xb0 [ 474.728488][T17221] ? __alloc_frozen_pages_noprof+0x1d6/0x370 [ 474.728512][T17221] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 474.728536][T17221] ? __pfx_csum_and_copy_from_iter_full+0x10/0x10 [ 474.728557][T17221] ? ip6_pol_route+0x162/0x1180 [ 474.728584][T17221] ? policy_nodemask+0x27c/0x720 [ 474.728617][T17221] ip_generic_getfrag+0x12f/0x2b0 [ 474.728649][T17221] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 474.728697][T17221] __ip6_append_data+0x2230/0x3f30 [ 474.728740][T17221] ? __lock_acquire+0xab9/0xd20 [ 474.728784][T17221] ? __pfx_raw6_getfrag+0x10/0x10 [ 474.728826][T17221] ? __pfx___ip6_append_data+0x10/0x10 [ 474.728861][T17221] ? __local_bh_enable_ip+0x12d/0x1c0 [ 474.728888][T17221] ip6_append_data+0x1c1/0x380 [ 474.728920][T17221] ? __pfx_raw6_getfrag+0x10/0x10 [ 474.728945][T17221] rawv6_sendmsg+0x1286/0x1830 [ 474.728986][T17221] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 474.729034][T17221] ? __pfx_aa_sk_perm+0x10/0x10 [ 474.729066][T17221] ? sock_rps_record_flow+0x19/0x410 [ 474.729100][T17221] ? inet_sendmsg+0x2f4/0x370 [ 474.729116][T17221] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 474.729140][T17221] __sock_sendmsg+0x19c/0x270 [ 474.729171][T17221] __sys_sendto+0x3bd/0x520 [ 474.729192][T17221] ? __pfx___sys_sendto+0x10/0x10 [ 474.729208][T17221] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 474.729253][T17221] ? __fget_files+0x3a0/0x420 [ 474.729285][T17221] ? ksys_write+0x22a/0x250 [ 474.729322][T17221] ? __pfx_ksys_write+0x10/0x10 [ 474.729355][T17221] __x64_sys_sendto+0xde/0x100 [ 474.729378][T17221] do_syscall_64+0xfa/0xfa0 [ 474.729405][T17221] ? lockdep_hardirqs_on+0x9c/0x150 [ 474.729433][T17221] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.729453][T17221] ? clear_bhb_loop+0x60/0xb0 [ 474.729477][T17221] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.729496][T17221] RIP: 0033:0x7f78c818f6c9 [ 474.729514][T17221] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 474.729531][T17221] RSP: 002b:00007f78c9002038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 474.729553][T17221] RAX: ffffffffffffffda RBX: 00007f78c83e5fa0 RCX: 00007f78c818f6c9 [ 474.729567][T17221] RDX: 0000000000000016 RSI: 0000200000000380 RDI: 0000000000000003 [ 474.729580][T17221] RBP: 00007f78c9002090 R08: 0000000000000000 R09: 0000000000000000 [ 474.729592][T17221] R10: 0000000000003b00 R11: 0000000000000246 R12: 0000000000000001 [ 474.729604][T17221] R13: 00007f78c83e6038 R14: 00007f78c83e5fa0 R15: 00007fff4be53e58 [ 474.729639][T17221] [ 475.122791][T17232] lo: entered allmulticast mode [ 475.125487][T17222] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3761'. [ 475.186371][T17236] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3766'. [ 475.300394][T17231] lo: left allmulticast mode [ 475.476873][T17254] FAULT_INJECTION: forcing a failure. [ 475.476873][T17254] name failslab, interval 1, probability 0, space 0, times 0 [ 475.489876][T17254] CPU: 0 UID: 0 PID: 17254 Comm: syz.4.3773 Not tainted syzkaller #0 PREEMPT(full) [ 475.489902][T17254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 475.489926][T17254] Call Trace: [ 475.489933][T17254] [ 475.489941][T17254] dump_stack_lvl+0x189/0x250 [ 475.489971][T17254] ? __pfx____ratelimit+0x10/0x10 [ 475.489996][T17254] ? __pfx_dump_stack_lvl+0x10/0x10 [ 475.490022][T17254] ? __pfx__printk+0x10/0x10 [ 475.490044][T17254] ? skb_network_protocol+0x4fe/0x760 [ 475.490075][T17254] should_fail_ex+0x414/0x560 [ 475.490108][T17254] should_failslab+0xa8/0x100 [ 475.490130][T17254] kmem_cache_alloc_noprof+0x74/0x6e0 [ 475.490154][T17254] ? dev_queue_xmit_nit+0x2d/0xcc0 [ 475.490171][T17254] ? skb_clone+0x212/0x3a0 [ 475.490205][T17254] skb_clone+0x212/0x3a0 [ 475.490223][T17254] ? dev_queue_xmit_nit+0x25a/0xcc0 [ 475.490244][T17254] dev_queue_xmit_nit+0x416/0xcc0 [ 475.490262][T17254] ? dev_queue_xmit_nit+0x2d/0xcc0 [ 475.490291][T17254] dev_hard_start_xmit+0x1be/0x830 [ 475.490329][T17254] __dev_queue_xmit+0x1b8d/0x3b50 [ 475.490350][T17254] ? kasan_save_track+0x3e/0x80 [ 475.490375][T17254] ? __kasan_slab_alloc+0x6c/0x80 [ 475.490400][T17254] ? kmem_cache_alloc_noprof+0x367/0x6e0 [ 475.490434][T17254] ? __dev_queue_xmit+0x27b/0x3b50 [ 475.490473][T17254] ? __pfx___dev_queue_xmit+0x10/0x10 [ 475.490510][T17254] ? __copy_skb_header+0xa7/0x550 [ 475.490532][T17254] ? __asan_memcpy+0x40/0x70 [ 475.490575][T17254] ? skb_clone+0x246/0x3a0 [ 475.490600][T17254] __netlink_deliver_tap+0x5ad/0x850 [ 475.490633][T17254] ? netlink_deliver_tap+0x2e/0x1b0 [ 475.490652][T17254] netlink_deliver_tap+0x19c/0x1b0 [ 475.490672][T17254] netlink_unicast+0x7fa/0x9e0 [ 475.490708][T17254] ? __pfx_netlink_unicast+0x10/0x10 [ 475.490738][T17254] ? netlink_sendmsg+0x642/0xb30 [ 475.490754][T17254] ? skb_put+0x11b/0x210 [ 475.490776][T17254] netlink_sendmsg+0x805/0xb30 [ 475.490804][T17254] ? __pfx_netlink_sendmsg+0x10/0x10 [ 475.490827][T17254] ? aa_sock_msg_perm+0xf1/0x1d0 [ 475.490857][T17254] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 475.490876][T17254] ? __pfx_netlink_sendmsg+0x10/0x10 [ 475.490896][T17254] __sock_sendmsg+0x21c/0x270 [ 475.490925][T17254] ____sys_sendmsg+0x505/0x830 [ 475.490952][T17254] ? __pfx_____sys_sendmsg+0x10/0x10 [ 475.490983][T17254] ? import_iovec+0x74/0xa0 [ 475.491010][T17254] ___sys_sendmsg+0x21f/0x2a0 [ 475.491033][T17254] ? __pfx____sys_sendmsg+0x10/0x10 [ 475.491093][T17254] ? __fget_files+0x2a/0x420 [ 475.491110][T17254] ? __fget_files+0x3a0/0x420 [ 475.491139][T17254] __x64_sys_sendmsg+0x19b/0x260 [ 475.491179][T17254] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 475.491220][T17254] ? __pfx_ksys_write+0x10/0x10 [ 475.491252][T17254] ? do_syscall_64+0xbe/0xfa0 [ 475.491286][T17254] do_syscall_64+0xfa/0xfa0 [ 475.491312][T17254] ? lockdep_hardirqs_on+0x9c/0x150 [ 475.491340][T17254] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 475.491360][T17254] ? clear_bhb_loop+0x60/0xb0 [ 475.491384][T17254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 475.491403][T17254] RIP: 0033:0x7f78c818f6c9 [ 475.491421][T17254] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 475.491438][T17254] RSP: 002b:00007f78c9002038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 475.491458][T17254] RAX: ffffffffffffffda RBX: 00007f78c83e5fa0 RCX: 00007f78c818f6c9 [ 475.491473][T17254] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 475.491485][T17254] RBP: 00007f78c9002090 R08: 0000000000000000 R09: 0000000000000000 [ 475.491497][T17254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 475.491508][T17254] R13: 00007f78c83e6038 R14: 00007f78c83e5fa0 R15: 00007fff4be53e58 [ 475.491544][T17254] [ 476.112823][T17274] FAULT_INJECTION: forcing a failure. [ 476.112823][T17274] name failslab, interval 1, probability 0, space 0, times 0 [ 476.157425][T17274] CPU: 1 UID: 0 PID: 17274 Comm: syz.2.3780 Not tainted syzkaller #0 PREEMPT(full) [ 476.157453][T17274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 476.157464][T17274] Call Trace: [ 476.157472][T17274] [ 476.157481][T17274] dump_stack_lvl+0x189/0x250 [ 476.157531][T17274] ? __pfx____ratelimit+0x10/0x10 [ 476.157558][T17274] ? __pfx_dump_stack_lvl+0x10/0x10 [ 476.157585][T17274] ? __pfx__printk+0x10/0x10 [ 476.157613][T17274] ? __pfx___might_resched+0x10/0x10 [ 476.157633][T17274] ? fs_reclaim_acquire+0x7d/0x100 [ 476.157658][T17274] should_fail_ex+0x414/0x560 [ 476.157695][T17274] should_failslab+0xa8/0x100 [ 476.157718][T17274] __kmalloc_node_noprof+0xd2/0x800 [ 476.157745][T17274] ? qdisc_alloc+0x97/0xaa0 [ 476.157783][T17274] qdisc_alloc+0x97/0xaa0 [ 476.157824][T17274] qdisc_create_dflt+0x8e/0x4e0 [ 476.157877][T17274] taprio_init+0x3e5/0xbd0 [ 476.157910][T17274] ? __pfx_taprio_init+0x10/0x10 [ 476.157925][T17274] ? qdisc_alloc+0x7a1/0xaa0 [ 476.157959][T17274] ? __pfx_taprio_init+0x10/0x10 [ 476.157976][T17274] qdisc_create+0x7ac/0xea0 [ 476.158012][T17274] tc_modify_qdisc+0x1547/0x2020 [ 476.158051][T17274] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 476.158107][T17274] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 476.158131][T17274] rtnetlink_rcv_msg+0x77c/0xb70 [ 476.158164][T17274] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 476.158191][T17274] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 476.158217][T17274] ? ref_tracker_free+0x63a/0x7d0 [ 476.158236][T17274] ? __asan_memcpy+0x40/0x70 [ 476.158260][T17274] ? __pfx_ref_tracker_free+0x10/0x10 [ 476.158290][T17274] netlink_rcv_skb+0x208/0x470 [ 476.158309][T17274] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 476.158340][T17274] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 476.158370][T17274] ? netlink_deliver_tap+0x2e/0x1b0 [ 476.158397][T17274] netlink_unicast+0x82f/0x9e0 [ 476.158437][T17274] ? __pfx_netlink_unicast+0x10/0x10 [ 476.158466][T17274] ? netlink_sendmsg+0x642/0xb30 [ 476.158483][T17274] ? skb_put+0x11b/0x210 [ 476.158504][T17274] netlink_sendmsg+0x805/0xb30 [ 476.158533][T17274] ? __pfx_netlink_sendmsg+0x10/0x10 [ 476.158555][T17274] ? aa_sock_msg_perm+0xf1/0x1d0 [ 476.158586][T17274] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 476.158604][T17274] ? __pfx_netlink_sendmsg+0x10/0x10 [ 476.158624][T17274] __sock_sendmsg+0x21c/0x270 [ 476.158653][T17274] ____sys_sendmsg+0x505/0x830 [ 476.158679][T17274] ? __pfx_____sys_sendmsg+0x10/0x10 [ 476.158710][T17274] ? import_iovec+0x74/0xa0 [ 476.158737][T17274] ___sys_sendmsg+0x21f/0x2a0 [ 476.158761][T17274] ? __pfx____sys_sendmsg+0x10/0x10 [ 476.158819][T17274] ? __fget_files+0x2a/0x420 [ 476.158837][T17274] ? __fget_files+0x3a0/0x420 [ 476.158865][T17274] __x64_sys_sendmsg+0x19b/0x260 [ 476.158894][T17274] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 476.158925][T17274] ? __pfx_ksys_write+0x10/0x10 [ 476.158956][T17274] ? do_syscall_64+0xbe/0xfa0 [ 476.158987][T17274] do_syscall_64+0xfa/0xfa0 [ 476.159012][T17274] ? lockdep_hardirqs_on+0x9c/0x150 [ 476.159043][T17274] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.159062][T17274] ? clear_bhb_loop+0x60/0xb0 [ 476.159086][T17274] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.159104][T17274] RIP: 0033:0x7fb3d7d8f6c9 [ 476.159121][T17274] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 476.159155][T17274] RSP: 002b:00007fb3d8c05038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 476.159176][T17274] RAX: ffffffffffffffda RBX: 00007fb3d7fe5fa0 RCX: 00007fb3d7d8f6c9 [ 476.159191][T17274] RDX: 0000000004000000 RSI: 00002000000007c0 RDI: 0000000000000004 [ 476.159203][T17274] RBP: 00007fb3d8c05090 R08: 0000000000000000 R09: 0000000000000000 [ 476.159216][T17274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 476.159227][T17274] R13: 00007fb3d7fe6038 R14: 00007fb3d7fe5fa0 R15: 00007ffcbcbd89c8 [ 476.159262][T17274] [ 476.647531][T17282] lo: entered allmulticast mode [ 476.655493][T17279] lo: left allmulticast mode [ 476.998666][T17315] __nla_validate_parse: 3 callbacks suppressed [ 476.998686][T17315] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3793'. [ 477.263479][T17333] FAULT_INJECTION: forcing a failure. [ 477.263479][T17333] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 477.292161][T17333] CPU: 1 UID: 0 PID: 17333 Comm: syz.2.3797 Not tainted syzkaller #0 PREEMPT(full) [ 477.292191][T17333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 477.292204][T17333] Call Trace: [ 477.292211][T17333] [ 477.292221][T17333] dump_stack_lvl+0x189/0x250 [ 477.292254][T17333] ? __pfx____ratelimit+0x10/0x10 [ 477.292299][T17333] ? __pfx_dump_stack_lvl+0x10/0x10 [ 477.292328][T17333] ? __pfx__printk+0x10/0x10 [ 477.292349][T17333] ? __might_fault+0xb0/0x130 [ 477.292391][T17333] should_fail_ex+0x414/0x560 [ 477.292429][T17333] _copy_from_iter+0x1de/0x1790 [ 477.292460][T17333] ? rcu_is_watching+0x15/0xb0 [ 477.292489][T17333] ? kmalloc_reserve+0xbd/0x290 [ 477.292509][T17333] ? __pfx__copy_from_iter+0x10/0x10 [ 477.292535][T17333] ? __build_skb_around+0x262/0x3f0 [ 477.292571][T17333] ? netlink_sendmsg+0x642/0xb30 [ 477.292590][T17333] ? skb_put+0x11b/0x210 [ 477.292614][T17333] netlink_sendmsg+0x6b2/0xb30 [ 477.292644][T17333] ? __pfx_netlink_sendmsg+0x10/0x10 [ 477.292668][T17333] ? aa_sock_msg_perm+0xf1/0x1d0 [ 477.292701][T17333] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 477.292722][T17333] ? __pfx_netlink_sendmsg+0x10/0x10 [ 477.292747][T17333] __sock_sendmsg+0x21c/0x270 [ 477.292780][T17333] ____sys_sendmsg+0x505/0x830 [ 477.292808][T17333] ? __pfx_____sys_sendmsg+0x10/0x10 [ 477.292848][T17333] ? import_iovec+0x74/0xa0 [ 477.292878][T17333] ___sys_sendmsg+0x21f/0x2a0 [ 477.292903][T17333] ? __pfx____sys_sendmsg+0x10/0x10 [ 477.292962][T17333] ? __fget_files+0x2a/0x420 [ 477.292981][T17333] ? __fget_files+0x3a0/0x420 [ 477.293011][T17333] __x64_sys_sendmsg+0x19b/0x260 [ 477.293036][T17333] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 477.293068][T17333] ? __pfx_ksys_write+0x10/0x10 [ 477.293101][T17333] ? do_syscall_64+0xbe/0xfa0 [ 477.293135][T17333] do_syscall_64+0xfa/0xfa0 [ 477.293163][T17333] ? lockdep_hardirqs_on+0x9c/0x150 [ 477.293192][T17333] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.293212][T17333] ? clear_bhb_loop+0x60/0xb0 [ 477.293236][T17333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.293255][T17333] RIP: 0033:0x7fb3d7d8f6c9 [ 477.293274][T17333] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 477.293292][T17333] RSP: 002b:00007fb3d8c05038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 477.293314][T17333] RAX: ffffffffffffffda RBX: 00007fb3d7fe5fa0 RCX: 00007fb3d7d8f6c9 [ 477.293329][T17333] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 477.293341][T17333] RBP: 00007fb3d8c05090 R08: 0000000000000000 R09: 0000000000000000 [ 477.293353][T17333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 477.293365][T17333] R13: 00007fb3d7fe6038 R14: 00007fb3d7fe5fa0 R15: 00007ffcbcbd89c8 [ 477.293400][T17333] [ 477.649786][T17337] delete_channel: no stack [ 477.686853][T17340] FAULT_INJECTION: forcing a failure. [ 477.686853][T17340] name failslab, interval 1, probability 0, space 0, times 0 [ 477.699835][T17340] CPU: 1 UID: 0 PID: 17340 Comm: syz.2.3799 Not tainted syzkaller #0 PREEMPT(full) [ 477.699862][T17340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 477.699876][T17340] Call Trace: [ 477.699884][T17340] [ 477.699892][T17340] dump_stack_lvl+0x189/0x250 [ 477.699924][T17340] ? __pfx____ratelimit+0x10/0x10 [ 477.699953][T17340] ? __pfx_dump_stack_lvl+0x10/0x10 [ 477.699981][T17340] ? __pfx__printk+0x10/0x10 [ 477.700020][T17340] should_fail_ex+0x414/0x560 [ 477.700057][T17340] should_failslab+0xa8/0x100 [ 477.700080][T17340] __kmalloc_cache_noprof+0x6f/0x6f0 [ 477.700108][T17340] ? __sctp_v6_cmp_addr+0x1dc/0x510 [ 477.700136][T17340] ? sctp_v6_cmp_addr+0x15/0xd0 [ 477.700163][T17340] ? sctp_add_bind_addr+0x8c/0x370 [ 477.700197][T17340] sctp_add_bind_addr+0x8c/0x370 [ 477.700230][T17340] sctp_copy_local_addr_list+0x30b/0x4e0 [ 477.700262][T17340] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 477.700290][T17340] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 477.700320][T17340] ? sctp_v6_is_any+0x64/0x80 [ 477.700351][T17340] ? sctp_copy_one_addr+0x93/0x360 [ 477.700383][T17340] sctp_bind_addr_copy+0xb3/0x3c0 [ 477.700412][T17340] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 477.700440][T17340] sctp_connect_new_asoc+0x2e0/0x690 [ 477.700464][T17340] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 477.700482][T17340] ? __local_bh_enable_ip+0x12d/0x1c0 [ 477.700513][T17340] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 477.700536][T17340] ? security_sctp_bind_connect+0x7e/0x2e0 [ 477.700585][T17340] sctp_sendmsg+0x155c/0x2810 [ 477.700619][T17340] ? __pfx_sctp_sendmsg+0x10/0x10 [ 477.700644][T17340] ? aa_sk_perm+0x81e/0x950 [ 477.700678][T17340] ? __pfx_aa_sk_perm+0x10/0x10 [ 477.700710][T17340] ? sock_rps_record_flow+0x19/0x410 [ 477.700751][T17340] ? inet_sendmsg+0x2f4/0x370 [ 477.700775][T17340] __sock_sendmsg+0x19c/0x270 [ 477.700807][T17340] __sys_sendto+0x3bd/0x520 [ 477.700830][T17340] ? __pfx___sys_sendto+0x10/0x10 [ 477.700846][T17340] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 477.700892][T17340] ? __fget_files+0x3a0/0x420 [ 477.700924][T17340] ? ksys_write+0x22a/0x250 [ 477.700956][T17340] ? __pfx_ksys_write+0x10/0x10 [ 477.700990][T17340] __x64_sys_sendto+0xde/0x100 [ 477.701015][T17340] do_syscall_64+0xfa/0xfa0 [ 477.701043][T17340] ? lockdep_hardirqs_on+0x9c/0x150 [ 477.701072][T17340] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.701092][T17340] ? clear_bhb_loop+0x60/0xb0 [ 477.701117][T17340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.701137][T17340] RIP: 0033:0x7fb3d7d8f6c9 [ 477.701156][T17340] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 477.701174][T17340] RSP: 002b:00007fb3d8c05038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 477.701195][T17340] RAX: ffffffffffffffda RBX: 00007fb3d7fe5fa0 RCX: 00007fb3d7d8f6c9 [ 477.701210][T17340] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 000000000000000b [ 477.701223][T17340] RBP: 00007fb3d8c05090 R08: 000020000005ffe4 R09: 000000000000001c [ 477.701236][T17340] R10: 00000000000000e0 R11: 0000000000000246 R12: 0000000000000002 [ 477.701248][T17340] R13: 00007fb3d7fe6038 R14: 00007fb3d7fe5fa0 R15: 00007ffcbcbd89c8 [ 477.701286][T17340] [ 478.173368][T17350] FAULT_INJECTION: forcing a failure. [ 478.173368][T17350] name failslab, interval 1, probability 0, space 0, times 0 [ 478.191023][T17350] CPU: 0 UID: 0 PID: 17350 Comm: syz.1.3805 Not tainted syzkaller #0 PREEMPT(full) [ 478.191051][T17350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 478.191064][T17350] Call Trace: [ 478.191071][T17350] [ 478.191080][T17350] dump_stack_lvl+0x189/0x250 [ 478.191113][T17350] ? __pfx____ratelimit+0x10/0x10 [ 478.191143][T17350] ? __pfx_dump_stack_lvl+0x10/0x10 [ 478.191170][T17350] ? __pfx__printk+0x10/0x10 [ 478.191199][T17350] ? __pfx___might_resched+0x10/0x10 [ 478.191220][T17350] ? fs_reclaim_acquire+0x7d/0x100 [ 478.191245][T17350] should_fail_ex+0x414/0x560 [ 478.191282][T17350] should_failslab+0xa8/0x100 [ 478.191305][T17350] __kmalloc_node_noprof+0xd2/0x800 [ 478.191335][T17350] ? qdisc_alloc+0x97/0xaa0 [ 478.191373][T17350] qdisc_alloc+0x97/0xaa0 [ 478.191414][T17350] qdisc_create_dflt+0x8e/0x4e0 [ 478.191451][T17350] taprio_init+0x3e5/0xbd0 [ 478.191485][T17350] ? __pfx_taprio_init+0x10/0x10 [ 478.191502][T17350] ? qdisc_alloc+0x7a1/0xaa0 [ 478.191539][T17350] ? __pfx_taprio_init+0x10/0x10 [ 478.191558][T17350] qdisc_create+0x7ac/0xea0 [ 478.191597][T17350] tc_modify_qdisc+0x1547/0x2020 [ 478.191639][T17350] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 478.191701][T17350] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 478.191728][T17350] rtnetlink_rcv_msg+0x77c/0xb70 [ 478.191762][T17350] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 478.191792][T17350] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 478.191821][T17350] ? ref_tracker_free+0x63a/0x7d0 [ 478.191841][T17350] ? __asan_memcpy+0x40/0x70 [ 478.191868][T17350] ? __pfx_ref_tracker_free+0x10/0x10 [ 478.191901][T17350] netlink_rcv_skb+0x208/0x470 [ 478.191931][T17350] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 478.191965][T17350] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 478.191999][T17350] ? netlink_deliver_tap+0x2e/0x1b0 [ 478.192029][T17350] netlink_unicast+0x82f/0x9e0 [ 478.192069][T17350] ? __pfx_netlink_unicast+0x10/0x10 [ 478.192100][T17350] ? netlink_sendmsg+0x642/0xb30 [ 478.192117][T17350] ? skb_put+0x11b/0x210 [ 478.192141][T17350] netlink_sendmsg+0x805/0xb30 [ 478.192171][T17350] ? __pfx_netlink_sendmsg+0x10/0x10 [ 478.192196][T17350] ? aa_sock_msg_perm+0xf1/0x1d0 [ 478.192230][T17350] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 478.192250][T17350] ? __pfx_netlink_sendmsg+0x10/0x10 [ 478.192271][T17350] __sock_sendmsg+0x21c/0x270 [ 478.192303][T17350] ____sys_sendmsg+0x505/0x830 [ 478.192332][T17350] ? __pfx_____sys_sendmsg+0x10/0x10 [ 478.192365][T17350] ? import_iovec+0x74/0xa0 [ 478.192397][T17350] ___sys_sendmsg+0x21f/0x2a0 [ 478.192423][T17350] ? __pfx____sys_sendmsg+0x10/0x10 [ 478.192489][T17350] ? __fget_files+0x2a/0x420 [ 478.192507][T17350] ? __fget_files+0x3a0/0x420 [ 478.192540][T17350] __x64_sys_sendmsg+0x19b/0x260 [ 478.192567][T17350] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 478.192602][T17350] ? __pfx_ksys_write+0x10/0x10 [ 478.192636][T17350] ? do_syscall_64+0xbe/0xfa0 [ 478.192670][T17350] do_syscall_64+0xfa/0xfa0 [ 478.192697][T17350] ? lockdep_hardirqs_on+0x9c/0x150 [ 478.192727][T17350] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.192747][T17350] ? clear_bhb_loop+0x60/0xb0 [ 478.192781][T17350] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.192801][T17350] RIP: 0033:0x7fae2df8f6c9 [ 478.192819][T17350] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 478.192836][T17350] RSP: 002b:00007fae2eee0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 478.192858][T17350] RAX: ffffffffffffffda RBX: 00007fae2e1e5fa0 RCX: 00007fae2df8f6c9 [ 478.192873][T17350] RDX: 0000000004000000 RSI: 00002000000007c0 RDI: 0000000000000004 [ 478.192886][T17350] RBP: 00007fae2eee0090 R08: 0000000000000000 R09: 0000000000000000 [ 478.192899][T17350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 478.192927][T17350] R13: 00007fae2e1e6038 R14: 00007fae2e1e5fa0 R15: 00007ffc28b4a098 [ 478.192963][T17350] [ 478.688904][T17358] openvswitch: netlink: IP tunnel dst address not specified [ 478.714062][T17361] x_tables: duplicate underflow at hook 4 [ 478.723152][T17361] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3808'. [ 478.733127][T17361] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3808'. [ 478.797028][T17362] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 478.804431][T17362] IPv6: NLM_F_CREATE should be set when creating new route [ 479.061704][T17379] pim6reg1: entered promiscuous mode [ 479.067201][T17379] pim6reg1: entered allmulticast mode [ 479.089807][T17384] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3817'. [ 479.268987][T17392] !€ÿ: renamed from bond_slave_0 (while UP) [ 479.374828][T17400] FAULT_INJECTION: forcing a failure. [ 479.374828][T17400] name failslab, interval 1, probability 0, space 0, times 0 [ 479.391391][T17400] CPU: 0 UID: 0 PID: 17400 Comm: syz.1.3825 Not tainted syzkaller #0 PREEMPT(full) [ 479.391420][T17400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 479.391433][T17400] Call Trace: [ 479.391441][T17400] [ 479.391450][T17400] dump_stack_lvl+0x189/0x250 [ 479.391494][T17400] ? __pfx____ratelimit+0x10/0x10 [ 479.391521][T17400] ? __pfx_dump_stack_lvl+0x10/0x10 [ 479.391555][T17400] ? __pfx__printk+0x10/0x10 [ 479.391582][T17400] ? __pfx___might_resched+0x10/0x10 [ 479.391614][T17400] ? fs_reclaim_acquire+0x7d/0x100 [ 479.391636][T17400] should_fail_ex+0x414/0x560 [ 479.391670][T17400] should_failslab+0xa8/0x100 [ 479.391691][T17400] kmem_cache_alloc_node_noprof+0x77/0x710 [ 479.391717][T17400] ? __alloc_skb+0x112/0x2d0 [ 479.391733][T17400] ? netlink_autobind+0xdb/0x300 [ 479.391757][T17400] __alloc_skb+0x112/0x2d0 [ 479.391778][T17400] netlink_sendmsg+0x5c6/0xb30 [ 479.391806][T17400] ? __pfx_netlink_sendmsg+0x10/0x10 [ 479.391828][T17400] ? aa_sock_msg_perm+0xf1/0x1d0 [ 479.391856][T17400] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 479.391875][T17400] ? __pfx_netlink_sendmsg+0x10/0x10 [ 479.391894][T17400] __sock_sendmsg+0x21c/0x270 [ 479.391922][T17400] ____sys_sendmsg+0x505/0x830 [ 479.391947][T17400] ? __pfx_____sys_sendmsg+0x10/0x10 [ 479.391977][T17400] ? import_iovec+0x74/0xa0 [ 479.392004][T17400] ___sys_sendmsg+0x21f/0x2a0 [ 479.392026][T17400] ? __pfx____sys_sendmsg+0x10/0x10 [ 479.392082][T17400] ? __fget_files+0x2a/0x420 [ 479.392099][T17400] ? __fget_files+0x3a0/0x420 [ 479.392126][T17400] __x64_sys_sendmsg+0x19b/0x260 [ 479.392149][T17400] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 479.392179][T17400] ? __pfx_ksys_write+0x10/0x10 [ 479.392209][T17400] ? do_syscall_64+0xbe/0xfa0 [ 479.392239][T17400] do_syscall_64+0xfa/0xfa0 [ 479.392263][T17400] ? lockdep_hardirqs_on+0x9c/0x150 [ 479.392290][T17400] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.392308][T17400] ? clear_bhb_loop+0x60/0xb0 [ 479.392330][T17400] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.392365][T17400] RIP: 0033:0x7fae2df8f6c9 [ 479.392383][T17400] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 479.392399][T17400] RSP: 002b:00007fae2eee0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 479.392419][T17400] RAX: ffffffffffffffda RBX: 00007fae2e1e5fa0 RCX: 00007fae2df8f6c9 [ 479.392434][T17400] RDX: 0000000000004804 RSI: 0000200000000300 RDI: 0000000000000003 [ 479.392446][T17400] RBP: 00007fae2eee0090 R08: 0000000000000000 R09: 0000000000000000 [ 479.392458][T17400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 479.392470][T17400] R13: 00007fae2e1e6038 R14: 00007fae2e1e5fa0 R15: 00007ffc28b4a098 [ 479.392504][T17400] [ 479.693725][T17405] FAULT_INJECTION: forcing a failure. [ 479.693725][T17405] name failslab, interval 1, probability 0, space 0, times 0 [ 479.706769][T17405] CPU: 1 UID: 0 PID: 17405 Comm: syz.0.3826 Not tainted syzkaller #0 PREEMPT(full) [ 479.706794][T17405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 479.706806][T17405] Call Trace: [ 479.706814][T17405] [ 479.706821][T17405] dump_stack_lvl+0x189/0x250 [ 479.706852][T17405] ? __pfx____ratelimit+0x10/0x10 [ 479.706878][T17405] ? __pfx_dump_stack_lvl+0x10/0x10 [ 479.706904][T17405] ? __pfx__printk+0x10/0x10 [ 479.706929][T17405] ? __pfx___might_resched+0x10/0x10 [ 479.706948][T17405] ? fs_reclaim_acquire+0x7d/0x100 [ 479.706971][T17405] should_fail_ex+0x414/0x560 [ 479.707004][T17405] should_failslab+0xa8/0x100 [ 479.707024][T17405] __kmalloc_node_noprof+0xd2/0x800 [ 479.707050][T17405] ? qdisc_alloc+0x97/0xaa0 [ 479.707084][T17405] qdisc_alloc+0x97/0xaa0 [ 479.707120][T17405] qdisc_create_dflt+0x8e/0x4e0 [ 479.707152][T17405] taprio_init+0x3e5/0xbd0 [ 479.707201][T17405] ? __pfx_taprio_init+0x10/0x10 [ 479.707218][T17405] ? qdisc_alloc+0x7a1/0xaa0 [ 479.707254][T17405] ? __pfx_taprio_init+0x10/0x10 [ 479.707272][T17405] qdisc_create+0x7ac/0xea0 [ 479.707309][T17405] tc_modify_qdisc+0x1547/0x2020 [ 479.707349][T17405] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 479.707407][T17405] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 479.707432][T17405] rtnetlink_rcv_msg+0x77c/0xb70 [ 479.707466][T17405] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 479.707495][T17405] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 479.707524][T17405] ? ref_tracker_free+0x63a/0x7d0 [ 479.707543][T17405] ? __asan_memcpy+0x40/0x70 [ 479.707569][T17405] ? __pfx_ref_tracker_free+0x10/0x10 [ 479.707601][T17405] netlink_rcv_skb+0x208/0x470 [ 479.707622][T17405] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 479.707654][T17405] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 479.707686][T17405] ? netlink_deliver_tap+0x2e/0x1b0 [ 479.707715][T17405] netlink_unicast+0x82f/0x9e0 [ 479.707760][T17405] ? __pfx_netlink_unicast+0x10/0x10 [ 479.707792][T17405] ? netlink_sendmsg+0x642/0xb30 [ 479.707810][T17405] ? skb_put+0x11b/0x210 [ 479.707834][T17405] netlink_sendmsg+0x805/0xb30 [ 479.707864][T17405] ? __pfx_netlink_sendmsg+0x10/0x10 [ 479.707888][T17405] ? aa_sock_msg_perm+0xf1/0x1d0 [ 479.707920][T17405] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 479.707939][T17405] ? __pfx_netlink_sendmsg+0x10/0x10 [ 479.707960][T17405] __sock_sendmsg+0x21c/0x270 [ 479.707991][T17405] ____sys_sendmsg+0x505/0x830 [ 479.708019][T17405] ? __pfx_____sys_sendmsg+0x10/0x10 [ 479.708051][T17405] ? import_iovec+0x74/0xa0 [ 479.708081][T17405] ___sys_sendmsg+0x21f/0x2a0 [ 479.708106][T17405] ? __pfx____sys_sendmsg+0x10/0x10 [ 479.708167][T17405] ? __fget_files+0x2a/0x420 [ 479.708185][T17405] ? __fget_files+0x3a0/0x420 [ 479.708216][T17405] __x64_sys_sendmsg+0x19b/0x260 [ 479.708241][T17405] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 479.708273][T17405] ? __pfx_ksys_write+0x10/0x10 [ 479.708305][T17405] ? do_syscall_64+0xbe/0xfa0 [ 479.708338][T17405] do_syscall_64+0xfa/0xfa0 [ 479.708364][T17405] ? lockdep_hardirqs_on+0x9c/0x150 [ 479.708390][T17405] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.708422][T17405] ? clear_bhb_loop+0x60/0xb0 [ 479.708444][T17405] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.708461][T17405] RIP: 0033:0x7f95d4d8f6c9 [ 479.708478][T17405] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 479.708494][T17405] RSP: 002b:00007f95d5cb2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 479.708514][T17405] RAX: ffffffffffffffda RBX: 00007f95d4fe5fa0 RCX: 00007f95d4d8f6c9 [ 479.708528][T17405] RDX: 0000000004000000 RSI: 00002000000007c0 RDI: 0000000000000004 [ 479.708540][T17405] RBP: 00007f95d5cb2090 R08: 0000000000000000 R09: 0000000000000000 [ 479.708551][T17405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 479.708561][T17405] R13: 00007f95d4fe6038 R14: 00007f95d4fe5fa0 R15: 00007fff7f0c6e28 [ 479.708593][T17405] [ 480.220216][T17412] : entered promiscuous mode [ 480.236557][T17415] netlink: 232 bytes leftover after parsing attributes in process `syz.1.3830'. [ 480.247031][T17416] netlink: 'syz.3.3828': attribute type 3 has an invalid length. [ 480.289737][T17417] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3831'. [ 480.335364][T17420] netlink: 'syz.2.3833': attribute type 1 has an invalid length. [ 480.370269][T17426] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3834'. [ 480.380749][T17426] x_tables: duplicate underflow at hook 2 [ 480.563093][T17437] netlink: 'syz.2.3838': attribute type 63 has an invalid length. [ 480.583300][T17437] lo: entered allmulticast mode [ 480.634726][T17444] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3840'. [ 480.810729][T17436] lo: left allmulticast mode [ 480.990781][T17461] FAULT_INJECTION: forcing a failure. [ 480.990781][T17461] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 481.055972][T17461] CPU: 0 UID: 0 PID: 17461 Comm: syz.0.3845 Not tainted syzkaller #0 PREEMPT(full) [ 481.056003][T17461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 481.056015][T17461] Call Trace: [ 481.056025][T17461] [ 481.056035][T17461] dump_stack_lvl+0x189/0x250 [ 481.056067][T17461] ? __pfx____ratelimit+0x10/0x10 [ 481.056094][T17461] ? __pfx_dump_stack_lvl+0x10/0x10 [ 481.056121][T17461] ? __pfx__printk+0x10/0x10 [ 481.056141][T17461] ? __might_fault+0xb0/0x130 [ 481.056182][T17461] should_fail_ex+0x414/0x560 [ 481.056217][T17461] _copy_from_user+0x2d/0xb0 [ 481.056243][T17461] ___sys_sendmsg+0x158/0x2a0 [ 481.056269][T17461] ? __pfx____sys_sendmsg+0x10/0x10 [ 481.056330][T17461] ? __fget_files+0x2a/0x420 [ 481.056348][T17461] ? __fget_files+0x3a0/0x420 [ 481.056424][T17461] __x64_sys_sendmsg+0x19b/0x260 [ 481.056447][T17461] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 481.056479][T17461] ? __pfx_ksys_write+0x10/0x10 [ 481.056520][T17461] ? do_syscall_64+0xbe/0xfa0 [ 481.056553][T17461] do_syscall_64+0xfa/0xfa0 [ 481.056579][T17461] ? lockdep_hardirqs_on+0x9c/0x150 [ 481.056606][T17461] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.056634][T17461] ? clear_bhb_loop+0x60/0xb0 [ 481.056659][T17461] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.056678][T17461] RIP: 0033:0x7f95d4d8f6c9 [ 481.056696][T17461] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 481.056713][T17461] RSP: 002b:00007f95d5cb2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 481.056734][T17461] RAX: ffffffffffffffda RBX: 00007f95d4fe5fa0 RCX: 00007f95d4d8f6c9 [ 481.056748][T17461] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000004 [ 481.056760][T17461] RBP: 00007f95d5cb2090 R08: 0000000000000000 R09: 0000000000000000 [ 481.056773][T17461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 481.056784][T17461] R13: 00007f95d4fe6038 R14: 00007f95d4fe5fa0 R15: 00007fff7f0c6e28 [ 481.056818][T17461] [ 481.517131][T17467] netlink: 'syz.0.3848': attribute type 1 has an invalid length. [ 481.668466][T14501] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 481.695773][T14501] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 481.704049][T14501] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 481.719919][T14501] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 481.732445][T14501] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 481.803411][T17483] FAULT_INJECTION: forcing a failure. [ 481.803411][T17483] name failslab, interval 1, probability 0, space 0, times 0 [ 481.817446][T17483] CPU: 0 UID: 0 PID: 17483 Comm: syz.1.3854 Not tainted syzkaller #0 PREEMPT(full) [ 481.817471][T17483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 481.817482][T17483] Call Trace: [ 481.817489][T17483] [ 481.817497][T17483] dump_stack_lvl+0x189/0x250 [ 481.817527][T17483] ? __pfx____ratelimit+0x10/0x10 [ 481.817551][T17483] ? __pfx_dump_stack_lvl+0x10/0x10 [ 481.817575][T17483] ? __pfx__printk+0x10/0x10 [ 481.817610][T17483] should_fail_ex+0x414/0x560 [ 481.817650][T17483] should_failslab+0xa8/0x100 [ 481.817671][T17483] __kmalloc_cache_noprof+0x6f/0x6f0 [ 481.817696][T17483] ? __sctp_v6_cmp_addr+0x1e6/0x510 [ 481.817721][T17483] ? sctp_add_bind_addr+0x8c/0x370 [ 481.817751][T17483] sctp_add_bind_addr+0x8c/0x370 [ 481.817778][T17483] sctp_copy_local_addr_list+0x30b/0x4e0 [ 481.817806][T17483] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 481.817829][T17483] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 481.817856][T17483] ? sctp_v6_is_any+0x64/0x80 [ 481.817884][T17483] ? sctp_copy_one_addr+0x93/0x360 [ 481.817912][T17483] sctp_bind_addr_copy+0xb3/0x3c0 [ 481.817938][T17483] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 481.817962][T17483] sctp_connect_new_asoc+0x2e0/0x690 [ 481.817984][T17483] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 481.818000][T17483] ? __local_bh_enable_ip+0x12d/0x1c0 [ 481.818027][T17483] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 481.818046][T17483] ? security_sctp_bind_connect+0x7e/0x2e0 [ 481.818071][T17483] sctp_sendmsg+0x155c/0x2810 [ 481.818100][T17483] ? __pfx_sctp_sendmsg+0x10/0x10 [ 481.818121][T17483] ? aa_sk_perm+0x81e/0x950 [ 481.818153][T17483] ? __pfx_aa_sk_perm+0x10/0x10 [ 481.818182][T17483] ? sock_rps_record_flow+0x19/0x410 [ 481.818214][T17483] ? inet_sendmsg+0x2f4/0x370 [ 481.818236][T17483] __sock_sendmsg+0x19c/0x270 [ 481.818265][T17483] __sys_sendto+0x3bd/0x520 [ 481.818286][T17483] ? __pfx___sys_sendto+0x10/0x10 [ 481.818300][T17483] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 481.818342][T17483] ? __fget_files+0x3a0/0x420 [ 481.818373][T17483] ? ksys_write+0x22a/0x250 [ 481.818403][T17483] ? __pfx_ksys_write+0x10/0x10 [ 481.818433][T17483] __x64_sys_sendto+0xde/0x100 [ 481.818455][T17483] do_syscall_64+0xfa/0xfa0 [ 481.818480][T17483] ? lockdep_hardirqs_on+0x9c/0x150 [ 481.818506][T17483] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.818526][T17483] ? clear_bhb_loop+0x60/0xb0 [ 481.818548][T17483] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.818566][T17483] RIP: 0033:0x7fae2df8f6c9 [ 481.818583][T17483] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 481.818598][T17483] RSP: 002b:00007fae2eee0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 481.818618][T17483] RAX: ffffffffffffffda RBX: 00007fae2e1e5fa0 RCX: 00007fae2df8f6c9 [ 481.818656][T17483] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 000000000000000b [ 481.818669][T17483] RBP: 00007fae2eee0090 R08: 000020000005ffe4 R09: 000000000000001c [ 481.818695][T17483] R10: 00000000000000e0 R11: 0000000000000246 R12: 0000000000000002 [ 481.818706][T17483] R13: 00007fae2e1e6038 R14: 00007fae2e1e5fa0 R15: 00007ffc28b4a098 [ 481.818757][T17483] [ 482.185292][T17476] lo speed is unknown, defaulting to 1000 [ 482.497646][T17495] FAULT_INJECTION: forcing a failure. [ 482.497646][T17495] name failslab, interval 1, probability 0, space 0, times 0 [ 482.539365][T17495] CPU: 1 UID: 0 PID: 17495 Comm: syz.4.3859 Not tainted syzkaller #0 PREEMPT(full) [ 482.539395][T17495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 482.539409][T17495] Call Trace: [ 482.539417][T17495] [ 482.539425][T17495] dump_stack_lvl+0x189/0x250 [ 482.539459][T17495] ? __pfx____ratelimit+0x10/0x10 [ 482.539487][T17495] ? __pfx_dump_stack_lvl+0x10/0x10 [ 482.539524][T17495] ? __pfx__printk+0x10/0x10 [ 482.539548][T17495] ? __pfx___might_resched+0x10/0x10 [ 482.539572][T17495] ? fs_reclaim_acquire+0x7d/0x100 [ 482.539598][T17495] should_fail_ex+0x414/0x560 [ 482.539636][T17495] should_failslab+0xa8/0x100 [ 482.539659][T17495] __kmalloc_cache_noprof+0x6f/0x6f0 [ 482.539690][T17495] ? nfnetlink_rcv+0xf97/0x2590 [ 482.539717][T17495] ? __nla_parse+0x40/0x60 [ 482.539744][T17495] nfnetlink_rcv+0xf97/0x2590 [ 482.539814][T17495] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 482.539862][T17495] ? ref_tracker_free+0x63a/0x7d0 [ 482.539916][T17495] ? __netlink_deliver_tap+0x807/0x850 [ 482.539936][T17495] ? netlink_deliver_tap+0x2e/0x1b0 [ 482.539978][T17495] netlink_unicast+0x82f/0x9e0 [ 482.540018][T17495] ? __pfx_netlink_unicast+0x10/0x10 [ 482.540050][T17495] ? netlink_sendmsg+0x642/0xb30 [ 482.540068][T17495] ? skb_put+0x11b/0x210 [ 482.540113][T17495] netlink_sendmsg+0x805/0xb30 [ 482.540146][T17495] ? __pfx_netlink_sendmsg+0x10/0x10 [ 482.540170][T17495] ? aa_sock_msg_perm+0xf1/0x1d0 [ 482.540204][T17495] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 482.540224][T17495] ? __pfx_netlink_sendmsg+0x10/0x10 [ 482.540246][T17495] __sock_sendmsg+0x21c/0x270 [ 482.540278][T17495] ____sys_sendmsg+0x505/0x830 [ 482.540307][T17495] ? __pfx_____sys_sendmsg+0x10/0x10 [ 482.540339][T17495] ? import_iovec+0x74/0xa0 [ 482.540369][T17495] ___sys_sendmsg+0x21f/0x2a0 [ 482.540394][T17495] ? __pfx____sys_sendmsg+0x10/0x10 [ 482.540484][T17495] ? __fget_files+0x2a/0x420 [ 482.540514][T17495] ? __fget_files+0x3a0/0x420 [ 482.540545][T17495] __x64_sys_sendmsg+0x19b/0x260 [ 482.540572][T17495] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 482.540606][T17495] ? __pfx_ksys_write+0x10/0x10 [ 482.540640][T17495] ? do_syscall_64+0xbe/0xfa0 [ 482.540674][T17495] do_syscall_64+0xfa/0xfa0 [ 482.540701][T17495] ? lockdep_hardirqs_on+0x9c/0x150 [ 482.540730][T17495] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.540751][T17495] ? clear_bhb_loop+0x60/0xb0 [ 482.540776][T17495] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.540796][T17495] RIP: 0033:0x7f78c818f6c9 [ 482.540815][T17495] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 482.540832][T17495] RSP: 002b:00007f78c9002038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 482.540855][T17495] RAX: ffffffffffffffda RBX: 00007f78c83e5fa0 RCX: 00007f78c818f6c9 [ 482.540869][T17495] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 482.540882][T17495] RBP: 00007f78c9002090 R08: 0000000000000000 R09: 0000000000000000 [ 482.540895][T17495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 482.540907][T17495] R13: 00007f78c83e6038 R14: 00007f78c83e5fa0 R15: 00007fff4be53e58 [ 482.540944][T17495] [ 482.603176][T17499] lo: entered allmulticast mode [ 482.948943][T17506] tipc: MTU too low for tipc bearer [ 483.023413][T17476] chnl_net:caif_netlink_parms(): no params data found [ 483.131119][T17520] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3867'. [ 483.270512][T17528] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3869'. [ 483.353629][T17476] bridge0: port 1(bridge_slave_0) entered blocking state [ 483.360949][T17476] bridge0: port 1(bridge_slave_0) entered disabled state [ 483.368719][T17476] bridge_slave_0: entered allmulticast mode [ 483.376783][T17476] bridge_slave_0: entered promiscuous mode [ 483.386837][T17528] blkio.reset_stats is deprecated [ 483.404311][T17528] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3869'. [ 483.413705][T17476] bridge0: port 2(bridge_slave_1) entered blocking state [ 483.439192][T17476] bridge0: port 2(bridge_slave_1) entered disabled state [ 483.446607][T17476] bridge_slave_1: entered allmulticast mode [ 483.465870][T17476] bridge_slave_1: entered promiscuous mode [ 483.552926][T17476] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 483.563425][T17538] FAULT_INJECTION: forcing a failure. [ 483.563425][T17538] name failslab, interval 1, probability 0, space 0, times 0 [ 483.567858][T17476] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 483.585707][T17538] CPU: 1 UID: 0 PID: 17538 Comm: syz.2.3873 Not tainted syzkaller #0 PREEMPT(full) [ 483.585736][T17538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 483.585750][T17538] Call Trace: [ 483.585758][T17538] [ 483.585767][T17538] dump_stack_lvl+0x189/0x250 [ 483.585800][T17538] ? __pfx____ratelimit+0x10/0x10 [ 483.585828][T17538] ? __pfx_dump_stack_lvl+0x10/0x10 [ 483.585857][T17538] ? __pfx__printk+0x10/0x10 [ 483.585884][T17538] ? __pfx___might_resched+0x10/0x10 [ 483.585912][T17538] should_fail_ex+0x414/0x560 [ 483.585950][T17538] should_failslab+0xa8/0x100 [ 483.585973][T17538] kmem_cache_alloc_node_noprof+0x77/0x710 [ 483.586003][T17538] ? __alloc_skb+0x112/0x2d0 [ 483.586019][T17538] ? __pfx_nf_tables_abort+0x10/0x10 [ 483.586049][T17538] __alloc_skb+0x112/0x2d0 [ 483.586072][T17538] netlink_ack+0x146/0xa50 [ 483.586111][T17538] ? __kmalloc_cache_noprof+0x3d5/0x6f0 [ 483.586150][T17538] nfnetlink_rcv+0x2309/0x2590 [ 483.586224][T17538] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 483.586273][T17538] ? ref_tracker_free+0x63a/0x7d0 [ 483.586323][T17538] ? __netlink_deliver_tap+0x807/0x850 [ 483.586342][T17538] ? netlink_deliver_tap+0x2e/0x1b0 [ 483.586380][T17538] netlink_unicast+0x82f/0x9e0 [ 483.586420][T17538] ? __pfx_netlink_unicast+0x10/0x10 [ 483.586452][T17538] ? netlink_sendmsg+0x642/0xb30 [ 483.586470][T17538] ? skb_put+0x11b/0x210 [ 483.586493][T17538] netlink_sendmsg+0x805/0xb30 [ 483.586524][T17538] ? __pfx_netlink_sendmsg+0x10/0x10 [ 483.586548][T17538] ? aa_sock_msg_perm+0xf1/0x1d0 [ 483.586582][T17538] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 483.586601][T17538] ? __pfx_netlink_sendmsg+0x10/0x10 [ 483.586623][T17538] __sock_sendmsg+0x21c/0x270 [ 483.586654][T17538] ____sys_sendmsg+0x505/0x830 [ 483.586683][T17538] ? __pfx_____sys_sendmsg+0x10/0x10 [ 483.586720][T17538] ? import_iovec+0x74/0xa0 [ 483.586750][T17538] ___sys_sendmsg+0x21f/0x2a0 [ 483.586775][T17538] ? __pfx____sys_sendmsg+0x10/0x10 [ 483.586836][T17538] ? __fget_files+0x2a/0x420 [ 483.586854][T17538] ? __fget_files+0x3a0/0x420 [ 483.586884][T17538] __x64_sys_sendmsg+0x19b/0x260 [ 483.586909][T17538] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 483.586941][T17538] ? __pfx_ksys_write+0x10/0x10 [ 483.586975][T17538] ? do_syscall_64+0xbe/0xfa0 [ 483.587018][T17538] do_syscall_64+0xfa/0xfa0 [ 483.587044][T17538] ? lockdep_hardirqs_on+0x9c/0x150 [ 483.587072][T17538] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.587090][T17538] ? clear_bhb_loop+0x60/0xb0 [ 483.587114][T17538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.587132][T17538] RIP: 0033:0x7fb3d7d8f6c9 [ 483.587150][T17538] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 483.587165][T17538] RSP: 002b:00007fb3d8c05038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 483.587194][T17538] RAX: ffffffffffffffda RBX: 00007fb3d7fe5fa0 RCX: 00007fb3d7d8f6c9 [ 483.587209][T17538] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 483.587221][T17538] RBP: 00007fb3d8c05090 R08: 0000000000000000 R09: 0000000000000000 [ 483.587233][T17538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 483.587245][T17538] R13: 00007fb3d7fe6038 R14: 00007fb3d7fe5fa0 R15: 00007ffcbcbd89c8 [ 483.587279][T17538] [ 483.928180][T17540] tipc: Trying to set illegal importance in message [ 483.959594][T14501] Bluetooth: hci4: command tx timeout [ 484.031105][T17476] team0: Port device team_slave_0 added [ 484.062282][T17476] team0: Port device team_slave_1 added [ 484.120982][T17476] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 484.128522][T17476] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 484.155324][T17476] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 484.173166][T17476] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 484.180328][T17476] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 484.206653][T17476] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 484.222823][T17546] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3876'. [ 484.351503][T17548] bridge0: port 2(bridge_slave_1) entered disabled state [ 484.359376][T17548] bridge0: port 1(bridge_slave_0) entered disabled state [ 484.869258][T17548] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 484.905050][T17548] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 485.182100][T17563] FAULT_INJECTION: forcing a failure. [ 485.182100][T17563] name failslab, interval 1, probability 0, space 0, times 0 [ 485.207961][T17563] CPU: 0 UID: 0 PID: 17563 Comm: syz.2.3879 Not tainted syzkaller #0 PREEMPT(full) [ 485.207989][T17563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 485.208007][T17563] Call Trace: [ 485.208015][T17563] [ 485.208023][T17563] dump_stack_lvl+0x189/0x250 [ 485.208055][T17563] ? __pfx____ratelimit+0x10/0x10 [ 485.208084][T17563] ? __pfx_dump_stack_lvl+0x10/0x10 [ 485.208109][T17563] ? __pfx__printk+0x10/0x10 [ 485.208134][T17563] ? __pfx___might_resched+0x10/0x10 [ 485.208154][T17563] ? fs_reclaim_acquire+0x7d/0x100 [ 485.208176][T17563] should_fail_ex+0x414/0x560 [ 485.208210][T17563] should_failslab+0xa8/0x100 [ 485.208230][T17563] __kmalloc_node_noprof+0xd2/0x800 [ 485.208257][T17563] ? qdisc_alloc+0x97/0xaa0 [ 485.208291][T17563] qdisc_alloc+0x97/0xaa0 [ 485.208329][T17563] qdisc_create_dflt+0x8e/0x4e0 [ 485.208362][T17563] taprio_init+0x3e5/0xbd0 [ 485.208393][T17563] ? __pfx_taprio_init+0x10/0x10 [ 485.208408][T17563] ? qdisc_alloc+0x7a1/0xaa0 [ 485.208460][T17563] ? __pfx_taprio_init+0x10/0x10 [ 485.208478][T17563] qdisc_create+0x7ac/0xea0 [ 485.208515][T17563] tc_modify_qdisc+0x1547/0x2020 [ 485.208557][T17563] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 485.208615][T17563] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 485.208640][T17563] rtnetlink_rcv_msg+0x77c/0xb70 [ 485.208675][T17563] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 485.208703][T17563] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 485.208730][T17563] ? ref_tracker_free+0x63a/0x7d0 [ 485.208750][T17563] ? __asan_memcpy+0x40/0x70 [ 485.208776][T17563] ? __pfx_ref_tracker_free+0x10/0x10 [ 485.208807][T17563] netlink_rcv_skb+0x208/0x470 [ 485.208827][T17563] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 485.208859][T17563] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 485.208891][T17563] ? netlink_deliver_tap+0x2e/0x1b0 [ 485.208919][T17563] netlink_unicast+0x82f/0x9e0 [ 485.208958][T17563] ? __pfx_netlink_unicast+0x10/0x10 [ 485.208988][T17563] ? netlink_sendmsg+0x642/0xb30 [ 485.209011][T17563] ? skb_put+0x11b/0x210 [ 485.209034][T17563] netlink_sendmsg+0x805/0xb30 [ 485.209064][T17563] ? __pfx_netlink_sendmsg+0x10/0x10 [ 485.209088][T17563] ? aa_sock_msg_perm+0xf1/0x1d0 [ 485.209120][T17563] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 485.209139][T17563] ? __pfx_netlink_sendmsg+0x10/0x10 [ 485.209160][T17563] __sock_sendmsg+0x21c/0x270 [ 485.209190][T17563] ____sys_sendmsg+0x505/0x830 [ 485.209218][T17563] ? __pfx_____sys_sendmsg+0x10/0x10 [ 485.209250][T17563] ? import_iovec+0x74/0xa0 [ 485.209280][T17563] ___sys_sendmsg+0x21f/0x2a0 [ 485.209304][T17563] ? __pfx____sys_sendmsg+0x10/0x10 [ 485.209366][T17563] ? __fget_files+0x2a/0x420 [ 485.209384][T17563] ? __fget_files+0x3a0/0x420 [ 485.209414][T17563] __x64_sys_sendmsg+0x19b/0x260 [ 485.209440][T17563] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 485.209473][T17563] ? __pfx_ksys_write+0x10/0x10 [ 485.209506][T17563] ? do_syscall_64+0xbe/0xfa0 [ 485.209538][T17563] do_syscall_64+0xfa/0xfa0 [ 485.209564][T17563] ? lockdep_hardirqs_on+0x9c/0x150 [ 485.209592][T17563] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.209612][T17563] ? clear_bhb_loop+0x60/0xb0 [ 485.209636][T17563] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.209655][T17563] RIP: 0033:0x7fb3d7d8f6c9 [ 485.209672][T17563] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 485.209689][T17563] RSP: 002b:00007fb3d8c05038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 485.209709][T17563] RAX: ffffffffffffffda RBX: 00007fb3d7fe5fa0 RCX: 00007fb3d7d8f6c9 [ 485.209724][T17563] RDX: 0000000004000000 RSI: 00002000000007c0 RDI: 0000000000000004 [ 485.209737][T17563] RBP: 00007fb3d8c05090 R08: 0000000000000000 R09: 0000000000000000 [ 485.209750][T17563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 485.209761][T17563] R13: 00007fb3d7fe6038 R14: 00007fb3d7fe5fa0 R15: 00007ffcbcbd89c8 [ 485.209796][T17563] [ 485.639142][ T36] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.678673][ T36] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.730218][T17577] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3883'. [ 485.754583][T17476] hsr_slave_0: entered promiscuous mode [ 485.765468][T17476] hsr_slave_1: entered promiscuous mode [ 485.772828][T17476] debugfs: 'hsr0' already exists in 'hsr' [ 485.778693][T17476] Cannot create hsr debugfs directory [ 485.793893][ T36] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.803491][ T36] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.986309][T14501] Bluetooth: hci4: command tx timeout [ 486.093788][T17596] FAULT_INJECTION: forcing a failure. [ 486.093788][T17596] name failslab, interval 1, probability 0, space 0, times 0 [ 486.124211][T17596] CPU: 0 UID: 0 PID: 17596 Comm: syz.0.3889 Not tainted syzkaller #0 PREEMPT(full) [ 486.124240][T17596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 486.124253][T17596] Call Trace: [ 486.124261][T17596] [ 486.124269][T17596] dump_stack_lvl+0x189/0x250 [ 486.124303][T17596] ? __pfx____ratelimit+0x10/0x10 [ 486.124330][T17596] ? __pfx_dump_stack_lvl+0x10/0x10 [ 486.124359][T17596] ? __pfx__printk+0x10/0x10 [ 486.124386][T17596] ? __lock_acquire+0xab9/0xd20 [ 486.124415][T17596] should_fail_ex+0x414/0x560 [ 486.124453][T17596] should_failslab+0xa8/0x100 [ 486.124475][T17596] kmem_cache_alloc_noprof+0x74/0x6e0 [ 486.124505][T17596] ? skb_clone+0x212/0x3a0 [ 486.124534][T17596] skb_clone+0x212/0x3a0 [ 486.124562][T17596] __netlink_deliver_tap+0x404/0x850 [ 486.124598][T17596] ? netlink_deliver_tap+0x2e/0x1b0 [ 486.124619][T17596] netlink_deliver_tap+0x19c/0x1b0 [ 486.124641][T17596] netlink_unicast+0x7fa/0x9e0 [ 486.124679][T17596] ? __pfx_netlink_unicast+0x10/0x10 [ 486.124711][T17596] ? netlink_sendmsg+0x642/0xb30 [ 486.124729][T17596] ? skb_put+0x11b/0x210 [ 486.124752][T17596] netlink_sendmsg+0x805/0xb30 [ 486.124784][T17596] ? __pfx_netlink_sendmsg+0x10/0x10 [ 486.124808][T17596] ? aa_sock_msg_perm+0xf1/0x1d0 [ 486.124841][T17596] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 486.124860][T17596] ? __pfx_netlink_sendmsg+0x10/0x10 [ 486.124882][T17596] __sock_sendmsg+0x21c/0x270 [ 486.124921][T17596] ____sys_sendmsg+0x505/0x830 [ 486.124951][T17596] ? __pfx_____sys_sendmsg+0x10/0x10 [ 486.124983][T17596] ? import_iovec+0x74/0xa0 [ 486.125015][T17596] ___sys_sendmsg+0x21f/0x2a0 [ 486.125040][T17596] ? __pfx____sys_sendmsg+0x10/0x10 [ 486.125105][T17596] ? __fget_files+0x2a/0x420 [ 486.125124][T17596] ? __fget_files+0x3a0/0x420 [ 486.125156][T17596] __x64_sys_sendmsg+0x19b/0x260 [ 486.125182][T17596] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 486.125217][T17596] ? __pfx_ksys_write+0x10/0x10 [ 486.125263][T17596] ? do_syscall_64+0xbe/0xfa0 [ 486.125296][T17596] do_syscall_64+0xfa/0xfa0 [ 486.125322][T17596] ? lockdep_hardirqs_on+0x9c/0x150 [ 486.125350][T17596] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.125370][T17596] ? clear_bhb_loop+0x60/0xb0 [ 486.125395][T17596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.125414][T17596] RIP: 0033:0x7f95d4d8f6c9 [ 486.125431][T17596] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 486.125448][T17596] RSP: 002b:00007f95d5cb2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 486.125467][T17596] RAX: ffffffffffffffda RBX: 00007f95d4fe5fa0 RCX: 00007f95d4d8f6c9 [ 486.125480][T17596] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000004 [ 486.125491][T17596] RBP: 00007f95d5cb2090 R08: 0000000000000000 R09: 0000000000000000 [ 486.125507][T17596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 486.125519][T17596] R13: 00007f95d4fe6038 R14: 00007f95d4fe5fa0 R15: 00007fff7f0c6e28 [ 486.125552][T17596] [ 486.568835][T17605] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.3893'. [ 486.713366][T17609] syzkaller0: entered promiscuous mode [ 486.718997][T17609] syzkaller0: entered allmulticast mode [ 486.797405][T17612] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3896'. [ 486.863234][T17476] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 486.878954][T17617] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3899'. [ 486.889418][T17476] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 487.009731][T17476] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 487.024100][T17476] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 487.050112][T17626] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3902'. [ 487.090215][T17626] netlink: 'syz.0.3902': attribute type 1 has an invalid length. [ 487.120821][T17626] syzkaller0: entered promiscuous mode [ 487.153939][T17626] syzkaller0: entered allmulticast mode [ 487.166952][T17476] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 487.182034][T17630] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3903'. [ 487.193507][T17476] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 487.236442][T17635] FAULT_INJECTION: forcing a failure. [ 487.236442][T17635] name failslab, interval 1, probability 0, space 0, times 0 [ 487.253258][T17635] CPU: 0 UID: 0 PID: 17635 Comm: syz.1.3906 Not tainted syzkaller #0 PREEMPT(full) [ 487.253289][T17635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 487.253303][T17635] Call Trace: [ 487.253311][T17635] [ 487.253320][T17635] dump_stack_lvl+0x189/0x250 [ 487.253355][T17635] ? __pfx____ratelimit+0x10/0x10 [ 487.253383][T17635] ? __pfx_dump_stack_lvl+0x10/0x10 [ 487.253412][T17635] ? __pfx__printk+0x10/0x10 [ 487.253440][T17635] ? __pfx___might_resched+0x10/0x10 [ 487.253468][T17635] should_fail_ex+0x414/0x560 [ 487.253506][T17635] should_failslab+0xa8/0x100 [ 487.253530][T17635] kmem_cache_alloc_node_noprof+0x77/0x710 [ 487.253560][T17635] ? __alloc_skb+0x112/0x2d0 [ 487.253585][T17635] __alloc_skb+0x112/0x2d0 [ 487.253608][T17635] netlink_ack+0x146/0xa50 [ 487.253659][T17635] netlink_rcv_skb+0x28c/0x470 [ 487.253676][T17635] ? lockdep_hardirqs_on+0x9c/0x150 [ 487.253706][T17635] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 487.253739][T17635] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 487.253772][T17635] ? bpf_lsm_capable+0x9/0x20 [ 487.253797][T17635] ? security_capable+0x7e/0x2e0 [ 487.253833][T17635] nfnetlink_rcv+0x282/0x2590 [ 487.253876][T17635] ? __dev_queue_xmit+0x27b/0x3b50 [ 487.253902][T17635] ? __dev_queue_xmit+0x1d79/0x3b50 [ 487.253924][T17635] ? kasan_save_track+0x3e/0x80 [ 487.253952][T17635] ? __kasan_slab_alloc+0x6c/0x80 [ 487.253997][T17635] ? __dev_queue_xmit+0x27b/0x3b50 [ 487.254035][T17635] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 487.254064][T17635] ? __pfx___dev_queue_xmit+0x10/0x10 [ 487.254104][T17635] ? ref_tracker_free+0x63a/0x7d0 [ 487.254125][T17635] ? __asan_memcpy+0x40/0x70 [ 487.254152][T17635] ? __pfx_ref_tracker_free+0x10/0x10 [ 487.254190][T17635] ? skb_clone+0x246/0x3a0 [ 487.254216][T17635] ? __netlink_deliver_tap+0x807/0x850 [ 487.254236][T17635] ? netlink_deliver_tap+0x2e/0x1b0 [ 487.254263][T17635] ? netlink_deliver_tap+0x2e/0x1b0 [ 487.254292][T17635] netlink_unicast+0x82f/0x9e0 [ 487.254331][T17635] ? __pfx_netlink_unicast+0x10/0x10 [ 487.254364][T17635] ? netlink_sendmsg+0x642/0xb30 [ 487.254381][T17635] ? skb_put+0x11b/0x210 [ 487.254405][T17635] netlink_sendmsg+0x805/0xb30 [ 487.254437][T17635] ? __pfx_netlink_sendmsg+0x10/0x10 [ 487.254461][T17635] ? aa_sock_msg_perm+0xf1/0x1d0 [ 487.254494][T17635] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 487.254514][T17635] ? __pfx_netlink_sendmsg+0x10/0x10 [ 487.254535][T17635] __sock_sendmsg+0x21c/0x270 [ 487.254567][T17635] ____sys_sendmsg+0x505/0x830 [ 487.254596][T17635] ? __pfx_____sys_sendmsg+0x10/0x10 [ 487.254629][T17635] ? import_iovec+0x74/0xa0 [ 487.254659][T17635] ___sys_sendmsg+0x21f/0x2a0 [ 487.254684][T17635] ? __pfx____sys_sendmsg+0x10/0x10 [ 487.254747][T17635] ? __fget_files+0x2a/0x420 [ 487.254765][T17635] ? __fget_files+0x3a0/0x420 [ 487.254797][T17635] __x64_sys_sendmsg+0x19b/0x260 [ 487.254822][T17635] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 487.254855][T17635] ? __pfx_ksys_write+0x10/0x10 [ 487.254895][T17635] ? do_syscall_64+0xbe/0xfa0 [ 487.254929][T17635] do_syscall_64+0xfa/0xfa0 [ 487.254956][T17635] ? lockdep_hardirqs_on+0x9c/0x150 [ 487.254985][T17635] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.255005][T17635] ? clear_bhb_loop+0x60/0xb0 [ 487.255030][T17635] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.255050][T17635] RIP: 0033:0x7fae2df8f6c9 [ 487.255070][T17635] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 487.255088][T17635] RSP: 002b:00007fae2eee0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 487.255111][T17635] RAX: ffffffffffffffda RBX: 00007fae2e1e5fa0 RCX: 00007fae2df8f6c9 [ 487.255127][T17635] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000004 [ 487.255140][T17635] RBP: 00007fae2eee0090 R08: 0000000000000000 R09: 0000000000000000 [ 487.255152][T17635] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 487.255165][T17635] R13: 00007fae2e1e6038 R14: 00007fae2e1e5fa0 R15: 00007ffc28b4a098 [ 487.255199][T17635] [ 487.747342][T17476] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 487.757684][T17476] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 487.872163][T17651] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 487.898191][T17650] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 487.947043][T17651] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 487.954977][T17651] gretap1: entered promiscuous mode [ 487.974143][T17651] gretap1: entered allmulticast mode [ 488.066490][ T5848] Bluetooth: hci4: command tx timeout [ 488.167561][T17661] __nla_validate_parse: 2 callbacks suppressed [ 488.167581][T17661] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3915'. [ 488.186262][T17661] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3915'. [ 488.327881][T17476] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 488.353354][T17476] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 488.391374][T17476] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 488.428345][T17476] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 488.628210][T17690] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 488.637719][T17686] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3922'. [ 488.694414][T17476] 8021q: adding VLAN 0 to HW filter on device bond0 [ 488.742527][T17476] 8021q: adding VLAN 0 to HW filter on device team0 [ 488.794183][ T9424] bridge0: port 1(bridge_slave_0) entered blocking state [ 488.801427][ T9424] bridge0: port 1(bridge_slave_0) entered forwarding state [ 488.839034][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 488.846292][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 488.923029][T17698] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3927'. [ 488.945799][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 488.976396][T17700] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3928'. [ 489.158927][T17708] lo speed is unknown, defaulting to 1000 [ 489.209942][T17717] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 489.383250][T17721] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3932'. [ 489.389435][T17476] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 489.427157][T17721] : entered promiscuous mode [ 489.624910][T17476] veth0_vlan: entered promiscuous mode [ 489.649237][T17476] veth1_vlan: entered promiscuous mode [ 489.744856][T17476] veth0_macvtap: entered promiscuous mode [ 489.773859][T17738] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3936'. [ 489.813652][T17476] veth1_macvtap: entered promiscuous mode [ 489.985719][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.001575][T17476] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 490.033488][T17476] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 490.086930][ T9424] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.097394][ T9424] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.121049][ T9424] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.146185][ T5848] Bluetooth: hci4: command 0x0419 tx timeout [ 490.161356][ T1092] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.253110][T17750] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3940'. [ 490.279023][T17750] nbd: must specify a size in bytes for the device [ 490.478535][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 490.500028][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 490.532104][T17758] lo: entered allmulticast mode [ 490.560382][T17761] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 490.669073][T17757] lo: left allmulticast mode [ 490.696471][ T7791] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 490.711603][ T7791] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 490.721688][T17770] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3946'. [ 490.950937][T17782] netem: unknown loss type 0 [ 490.956721][T17782] netem: change failed [ 490.987282][ C1] vcan0: j1939_tp_rxtimer: 0xffff888025151800: rx timeout, send abort [ 491.023900][T17788] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3953'. [ 491.164569][T17802] netlink: 'syz.1.3956': attribute type 1 has an invalid length. [ 491.265280][T17804] lo speed is unknown, defaulting to 1000 [ 491.487389][ C1] vcan0: j1939_tp_rxtimer: 0xffff888025151c00: rx timeout, send abort [ 491.497030][ C1] vcan0: j1939_tp_rxtimer: 0xffff888025151800: abort rx timeout. Force session deactivation [ 491.986497][ C1] vcan0: j1939_tp_rxtimer: 0xffff888025151400: rx timeout, send abort [ 491.995753][ C1] vcan0: j1939_tp_rxtimer: 0xffff888025151c00: abort rx timeout. Force session deactivation [ 492.170353][T17828] tc_dump_action: action bad kind [ 492.229227][ T5848] Bluetooth: hci4: command 0x0419 tx timeout [ 492.260844][T17832] openvswitch: netlink: nsh attribute has 996 unknown bytes. [ 492.275589][T17832] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 492.494778][ C1] vcan0: j1939_tp_rxtimer: 0xffff888025151400: abort rx timeout. Force session deactivation [ 493.344023][T17878] __nla_validate_parse: 9 callbacks suppressed [ 493.344060][T17878] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3977'. [ 493.413723][T17879] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3977'. [ 493.733553][T17885] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3981'. [ 493.875032][T17879] 8021q: adding VLAN 0 to HW filter on device bond2 [ 493.945337][T17894] netlink: 'syz.1.3980': attribute type 33 has an invalid length. [ 493.953950][T17894] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3980'. [ 494.066374][T17896] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3984'. [ 494.187222][T17901] bond3: option packets_per_slave: invalid value (18446744073707454463) [ 494.213076][T17901] bond3: option packets_per_slave: allowed values 0 - 65535 [ 494.272377][T17901] bond3 (unregistering): Released all slaves [ 494.454616][T17916] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3990'. [ 494.495849][T17916] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3990'. [ 494.657559][T17927] netlink: 19 bytes leftover after parsing attributes in process `syz.0.3995'. [ 494.677407][T17925] bridge4: the hash_elasticity option has been deprecated and is always 16 [ 494.848974][T17939] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3999'. [ 495.102281][T17946] syzkaller0: entered promiscuous mode [ 495.111723][T17946] syzkaller0: entered allmulticast mode [ 495.151535][T17954] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4005'. [ 496.740385][T17966] lo: entered allmulticast mode [ 496.745460][T17966] lo: left allmulticast mode [ 496.781615][T17978] syzkaller1: entered promiscuous mode [ 496.792770][T17978] syzkaller1: entered allmulticast mode [ 497.837557][T18043] netlink: 'syz.4.4038': attribute type 3 has an invalid length. [ 497.924109][T18045] veth0: entered promiscuous mode [ 497.930442][T18045] veth0: left promiscuous mode [ 497.974202][T18051] syzkaller0: entered promiscuous mode [ 497.982419][T18051] syzkaller0: entered allmulticast mode [ 498.072203][T18054] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 498.466483][T18077] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 498.498212][T18079] __nla_validate_parse: 5 callbacks suppressed [ 498.498237][T18079] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4054'. [ 498.612398][T18089] lo: entered allmulticast mode [ 498.613016][T18090] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4056'. [ 498.679574][T18094] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4058'. [ 498.767387][T18098] netlink: 91 bytes leftover after parsing attributes in process `syz.0.4059'. [ 498.792348][T18086] lo: left allmulticast mode [ 498.925440][T18112] netlink: 'syz.4.4064': attribute type 1 has an invalid length. [ 499.078180][T18114] bond3: (slave gretap2): making interface the new active one [ 499.091727][T18114] bond3: (slave gretap2): Enslaving as an active interface with an up link [ 499.161986][T18122] lo: entered allmulticast mode [ 499.167275][T18123] netlink: 'syz.1.4066': attribute type 10 has an invalid length. [ 499.210189][T18123] 8021q: adding VLAN 0 to HW filter on device team0 [ 499.244994][T18124] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4066'. [ 499.258433][T18123] bond0: (slave team0): Enslaving as an active interface with an up link [ 499.275609][T18124] netlink: 'syz.1.4066': attribute type 12 has an invalid length. [ 499.296581][T18134] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4068'. [ 499.685448][T18149] bridge0: port 1(bridge_slave_0) entered disabled state [ 499.797069][T18156] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4078'. [ 499.816475][T18156] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4078'. [ 499.842035][T18156] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4078'. [ 499.868527][T18161] netlink: 'syz.0.4080': attribute type 1 has an invalid length. [ 499.876778][T18161] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 499.895312][T18161] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4080'. [ 499.966794][T18120] lo: left allmulticast mode [ 500.172761][T18175] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 500.511812][T18191] FAULT_INJECTION: forcing a failure. [ 500.511812][T18191] name failslab, interval 1, probability 0, space 0, times 0 [ 500.544835][T18191] CPU: 0 UID: 0 PID: 18191 Comm: syz.3.4088 Not tainted syzkaller #0 PREEMPT(full) [ 500.544865][T18191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 500.544878][T18191] Call Trace: [ 500.544887][T18191] [ 500.544896][T18191] dump_stack_lvl+0x189/0x250 [ 500.544928][T18191] ? __pfx____ratelimit+0x10/0x10 [ 500.544954][T18191] ? __pfx_dump_stack_lvl+0x10/0x10 [ 500.544979][T18191] ? __pfx__printk+0x10/0x10 [ 500.545013][T18191] should_fail_ex+0x414/0x560 [ 500.545053][T18191] should_failslab+0xa8/0x100 [ 500.545075][T18191] __kmalloc_cache_noprof+0x6f/0x6f0 [ 500.545102][T18191] ? __sctp_v6_cmp_addr+0x1e6/0x510 [ 500.545132][T18191] ? sctp_add_bind_addr+0x8c/0x370 [ 500.545166][T18191] sctp_add_bind_addr+0x8c/0x370 [ 500.545201][T18191] sctp_copy_local_addr_list+0x30b/0x4e0 [ 500.545235][T18191] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 500.545263][T18191] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 500.545294][T18191] ? sctp_v6_is_any+0x64/0x80 [ 500.545324][T18191] ? sctp_copy_one_addr+0x93/0x360 [ 500.545357][T18191] sctp_bind_addr_copy+0xb3/0x3c0 [ 500.545387][T18191] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 500.545416][T18191] sctp_connect_new_asoc+0x2e0/0x690 [ 500.545441][T18191] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 500.545459][T18191] ? __local_bh_enable_ip+0x12d/0x1c0 [ 500.545495][T18191] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 500.545517][T18191] ? security_sctp_bind_connect+0x7e/0x2e0 [ 500.545545][T18191] sctp_sendmsg+0x155c/0x2810 [ 500.545579][T18191] ? __pfx_sctp_sendmsg+0x10/0x10 [ 500.545603][T18191] ? aa_sk_perm+0x81e/0x950 [ 500.545637][T18191] ? __pfx_aa_sk_perm+0x10/0x10 [ 500.545676][T18191] ? sock_rps_record_flow+0x19/0x410 [ 500.545712][T18191] ? inet_sendmsg+0x2f4/0x370 [ 500.545736][T18191] __sock_sendmsg+0x19c/0x270 [ 500.545775][T18191] __sys_sendto+0x3bd/0x520 [ 500.545798][T18191] ? __pfx___sys_sendto+0x10/0x10 [ 500.545814][T18191] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 500.545860][T18191] ? __fget_files+0x3a0/0x420 [ 500.545893][T18191] ? ksys_write+0x22a/0x250 [ 500.545925][T18191] ? __pfx_ksys_write+0x10/0x10 [ 500.545958][T18191] __x64_sys_sendto+0xde/0x100 [ 500.545982][T18191] do_syscall_64+0xfa/0xfa0 [ 500.546010][T18191] ? lockdep_hardirqs_on+0x9c/0x150 [ 500.546038][T18191] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.546058][T18191] ? clear_bhb_loop+0x60/0xb0 [ 500.546083][T18191] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.546110][T18191] RIP: 0033:0x7f93f858f6c9 [ 500.546128][T18191] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 500.546146][T18191] RSP: 002b:00007f93f944e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 500.546168][T18191] RAX: ffffffffffffffda RBX: 00007f93f87e5fa0 RCX: 00007f93f858f6c9 [ 500.546182][T18191] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 000000000000000b [ 500.546194][T18191] RBP: 00007f93f944e090 R08: 000020000005ffe4 R09: 000000000000001c [ 500.546208][T18191] R10: 00000000000000e0 R11: 0000000000000246 R12: 0000000000000002 [ 500.546219][T18191] R13: 00007f93f87e6038 R14: 00007f93f87e5fa0 R15: 00007fffc6ac0ca8 [ 500.546255][T18191] [ 500.985799][T18197] netlink: 'syz.4.4091': attribute type 14 has an invalid length. [ 501.004599][T18197] netlink: 'syz.4.4091': attribute type 13 has an invalid length. [ 501.081675][T18197] ksmbd: Unknown IPC event: 3, ignore. [ 501.234807][T18219] siw: device registration error -23 [ 501.243103][T18216] netlink: 'syz.3.4099': attribute type 10 has an invalid length. [ 501.264730][T18216] team0: Port device dummy0 added [ 501.825974][T18244] syz.1.4111 uses old SIOCAX25GETINFO [ 501.957845][T18253] lo: entered allmulticast mode [ 502.190447][T18251] lo: left allmulticast mode [ 502.252572][T18270] IPVS: set_ctl: invalid protocol: 47 224.0.0.2:0 [ 502.473013][T18287] netlink: 'syz.2.4126': attribute type 1 has an invalid length. [ 502.481386][T18287] netlink: 'syz.2.4126': attribute type 3 has an invalid length. [ 502.548382][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 502.863443][T18315] tap0: tun_chr_ioctl cmd 1074025677 [ 502.874181][T18315] tap0: linktype set to 65534 [ 502.929116][T18317] netlink: 'syz.1.4137': attribute type 10 has an invalid length. [ 502.957506][T18317] bridge0: port 2(bridge_slave_1) entered disabled state [ 502.967503][T18317] bridge_slave_1: left allmulticast mode [ 502.973511][T18317] bridge_slave_1: left promiscuous mode [ 502.980586][T18317] bridge0: port 2(bridge_slave_1) entered disabled state [ 503.018810][T18317] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 503.417549][T18332] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 503.428580][T18332] [ 503.430947][T18332] ====================================================== [ 503.437986][T18332] WARNING: possible circular locking dependency detected [ 503.445993][T18332] syzkaller #0 Not tainted [ 503.450426][T18332] ------------------------------------------------------ [ 503.457479][T18332] syz.0.4142/18332 is trying to acquire lock: [ 503.463567][T18332] ffff88802764f218 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#3){+...}-{3:3}, at: __dev_queue_xmit+0x22b7/0x3b50 [ 503.475795][T18332] [ 503.475795][T18332] but task is already holding lock: [ 503.483182][T18332] ffff88802fa12958 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x153/0x4b0 [ 503.493097][T18332] [ 503.493097][T18332] which lock already depends on the new lock. [ 503.493097][T18332] [ 503.503510][T18332] [ 503.503510][T18332] the existing dependency chain (in reverse order) is: [ 503.512552][T18332] [ 503.512552][T18332] -> #1 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}: [ 503.520842][T18332] lock_acquire+0x120/0x360 [ 503.525881][T18332] _raw_spin_lock+0x2e/0x40 [ 503.530929][T18332] sch_direct_xmit+0x153/0x4b0 [ 503.536228][T18332] __dev_queue_xmit+0x1857/0x3b50 [ 503.541887][T18332] ip6_finish_output2+0xfb3/0x1480 [ 503.547551][T18332] ip6_output+0x340/0x550 [ 503.552420][T18332] NF_HOOK+0x9e/0x380 [ 503.556947][T18332] mld_sendpack+0x8d4/0xe60 [ 503.561995][T18332] mld_ifc_work+0x83e/0xd60 [ 503.567042][T18332] process_scheduled_works+0xae1/0x17b0 [ 503.573129][T18332] worker_thread+0x8a0/0xda0 [ 503.578259][T18332] kthread+0x711/0x8a0 [ 503.582880][T18332] ret_from_fork+0x4bc/0x870 [ 503.587996][T18332] ret_from_fork_asm+0x1a/0x30 [ 503.593385][T18332] [ 503.593385][T18332] -> #0 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#3){+...}-{3:3}: [ 503.603759][T18332] validate_chain+0xb9b/0x2140 [ 503.609092][T18332] __lock_acquire+0xab9/0xd20 [ 503.614296][T18332] lock_acquire+0x120/0x360 [ 503.619340][T18332] _raw_spin_lock+0x2e/0x40 [ 503.624378][T18332] __dev_queue_xmit+0x22b7/0x3b50 [ 503.629943][T18332] ip6_finish_output2+0xf70/0x1480 [ 503.635683][T18332] ip6_output+0x340/0x550 [ 503.640544][T18332] ndisc_send_skb+0xbce/0x1510 [ 503.645835][T18332] ndisc_solicit+0x444/0x610 [ 503.650957][T18332] __neigh_event_send+0xf70/0x1560 [ 503.656603][T18332] neigh_resolve_output+0x198/0x750 [ 503.662345][T18332] ip6_finish_output2+0xfb3/0x1480 [ 503.667988][T18332] ip6_output+0x340/0x550 [ 503.672880][T18332] ip6_send_skb+0x1d5/0x390 [ 503.677919][T18332] icmp6_send+0x12c6/0x1940 [ 503.682950][T18332] ip6_link_failure+0x3b/0x4c0 [ 503.688243][T18332] ip_tunnel_xmit+0x175b/0x2390 [ 503.693634][T18332] __gre_xmit+0x19a/0x240 [ 503.698493][T18332] erspan_xmit+0xa04/0x1220 [ 503.703545][T18332] dev_hard_start_xmit+0x2d7/0x830 [ 503.709188][T18332] sch_direct_xmit+0x241/0x4b0 [ 503.714486][T18332] __qdisc_run+0xaa0/0x1540 [ 503.719525][T18332] __dev_queue_xmit+0x1056/0x3b50 [ 503.725076][T18332] ip6_finish_output2+0xfb3/0x1480 [ 503.730733][T18332] ip6_output+0x340/0x550 [ 503.735603][T18332] ip6_mr_output+0x4e9/0x1100 [ 503.740828][T18332] rawv6_send_hdrinc+0xe16/0x17a0 [ 503.746485][T18332] rawv6_sendmsg+0x12ee/0x1830 [ 503.751784][T18332] __sock_sendmsg+0x19c/0x270 [ 503.757002][T18332] ____sys_sendmsg+0x505/0x830 [ 503.762293][T18332] ___sys_sendmsg+0x21f/0x2a0 [ 503.767499][T18332] __x64_sys_sendmsg+0x19b/0x260 [ 503.772965][T18332] do_syscall_64+0xfa/0xfa0 [ 503.778000][T18332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.784431][T18332] [ 503.784431][T18332] other info that might help us debug this: [ 503.784431][T18332] [ 503.794664][T18332] Possible unsafe locking scenario: [ 503.794664][T18332] [ 503.802120][T18332] CPU0 CPU1 [ 503.807485][T18332] ---- ---- [ 503.812845][T18332] lock(&qdisc_xmit_lock_key#4); [ 503.817885][T18332] lock(dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#3); [ 503.827526][T18332] lock(&qdisc_xmit_lock_key#4); [ 503.835085][T18332] lock(dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#3); [ 503.842205][T18332] [ 503.842205][T18332] *** DEADLOCK *** [ 503.842205][T18332] [ 503.850351][T18332] 12 locks held by syz.0.4142/18332: [ 503.855660][T18332] #0: ffffffff8df3d6a0 (rcu_read_lock){....}-{1:3}, at: rawv6_send_hdrinc+0xc9f/0x17a0 [ 503.865444][T18332] #1: ffffffff8df3d6a0 (rcu_read_lock){....}-{1:3}, at: ip6_mr_output+0x1ca/0x1100 [ 503.874877][T18332] #2: ffffffff8df3d6a0 (rcu_read_lock){....}-{1:3}, at: ip6_output+0x126/0x550 [ 503.883944][T18332] #3: ffffffff8df3d700 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x27b/0x3b50 [ 503.893912][T18332] #4: ffff88802fa12958 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x153/0x4b0 [ 503.904209][T18332] #5: ffffffff8df3d6a0 (rcu_read_lock){....}-{1:3}, at: icmp6_send+0x1e9/0x1940 [ 503.913361][T18332] #6: ffff88814c940a20 (k-slock-AF_INET6){+.-.}-{3:3}, at: icmp6_send+0xc5c/0x1940 [ 503.922802][T18332] #7: ffffffff8df3d6a0 (rcu_read_lock){....}-{1:3}, at: ip6_send_skb+0x10f/0x390 [ 503.932048][T18332] #8: ffffffff8df3d6a0 (rcu_read_lock){....}-{1:3}, at: ip6_output+0x126/0x550 [ 503.941114][T18332] #9: ffffffff8df3d6a0 (rcu_read_lock){....}-{1:3}, at: ndisc_send_skb+0x1e4/0x1510 [ 503.950631][T18332] #10: ffffffff8df3d6a0 (rcu_read_lock){....}-{1:3}, at: ip6_output+0x126/0x550 [ 503.959783][T18332] #11: ffffffff8df3d700 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x27b/0x3b50 [ 503.969824][T18332] [ 503.969824][T18332] stack backtrace: [ 503.975716][T18332] CPU: 1 UID: 0 PID: 18332 Comm: syz.0.4142 Not tainted syzkaller #0 PREEMPT(full) [ 503.975738][T18332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 503.975750][T18332] Call Trace: [ 503.975756][T18332] [ 503.975765][T18332] dump_stack_lvl+0x189/0x250 [ 503.975793][T18332] ? __pfx_dump_stack_lvl+0x10/0x10 [ 503.975816][T18332] ? __pfx__printk+0x10/0x10 [ 503.975834][T18332] ? print_lock_name+0xde/0x100 [ 503.975851][T18332] print_circular_bug+0x2ee/0x310 [ 503.975875][T18332] check_noncircular+0x134/0x160 [ 503.975899][T18332] validate_chain+0xb9b/0x2140 [ 503.975929][T18332] __lock_acquire+0xab9/0xd20 [ 503.975948][T18332] ? __dev_queue_xmit+0x22b7/0x3b50 [ 503.975967][T18332] lock_acquire+0x120/0x360 [ 503.975982][T18332] ? __dev_queue_xmit+0x22b7/0x3b50 [ 503.976003][T18332] ? __pfx_rcu_read_lock_bh_held+0x10/0x10 [ 503.976029][T18332] _raw_spin_lock+0x2e/0x40 [ 503.976050][T18332] ? __dev_queue_xmit+0x22b7/0x3b50 [ 503.976069][T18332] __dev_queue_xmit+0x22b7/0x3b50 [ 503.976088][T18332] ? __pfx_hlock_conflict+0x10/0x10 [ 503.976112][T18332] ? __dev_queue_xmit+0x27b/0x3b50 [ 503.976133][T18332] ? lockdep_unlock+0x89/0x120 [ 503.976158][T18332] ? validate_chain+0x897/0x2140 [ 503.976180][T18332] ? __pfx___dev_queue_xmit+0x10/0x10 [ 503.976208][T18332] ? __lock_acquire+0xab9/0xd20 [ 503.976236][T18332] ? ip6_finish_output2+0xd4c/0x1480 [ 503.976265][T18332] ip6_finish_output2+0xf70/0x1480 [ 503.976297][T18332] ? __pfx_ip6_finish_output2+0x10/0x10 [ 503.976323][T18332] ? ip6_mtu+0x7d/0x490 [ 503.976344][T18332] ? ip6_mtu+0x38c/0x490 [ 503.976366][T18332] ? ip6_finish_output+0x2ef/0x4e0 [ 503.976389][T18332] ? ip6_output+0x126/0x550 [ 503.976410][T18332] ip6_output+0x340/0x550 [ 503.976435][T18332] ndisc_send_skb+0xbce/0x1510 [ 503.976459][T18332] ? ndisc_send_skb+0x1e4/0x1510 [ 503.976480][T18332] ? __pfx_ndisc_send_skb+0x10/0x10 [ 503.976498][T18332] ? __pfx_dst_output+0x10/0x10 [ 503.976525][T18332] ndisc_solicit+0x444/0x610 [ 503.976548][T18332] ? __pfx_ndisc_solicit+0x10/0x10 [ 503.976570][T18332] ? __neigh_event_send+0xf08/0x1560 [ 503.976596][T18332] ? __pfx_ndisc_solicit+0x10/0x10 [ 503.976615][T18332] __neigh_event_send+0xf70/0x1560 [ 503.976642][T18332] ? ___neigh_create+0x1c83/0x2260 [ 503.976667][T18332] neigh_resolve_output+0x198/0x750 [ 503.976699][T18332] ip6_finish_output2+0xfb3/0x1480 [ 503.976729][T18332] ? __pfx_ip6_finish_output2+0x10/0x10 [ 503.976755][T18332] ? ip6_mtu+0x7d/0x490 [ 503.976820][T18332] ? ip6_mtu+0x38c/0x490 [ 503.976843][T18332] ? ip6_finish_output+0x2ef/0x4e0 [ 503.976866][T18332] ? ip6_output+0x126/0x550 [ 503.976907][T18332] ip6_output+0x340/0x550 [ 503.976929][T18332] ? ip6_send_skb+0x10f/0x390 [ 503.976954][T18332] ip6_send_skb+0x1d5/0x390 [ 503.976980][T18332] icmp6_send+0x12c6/0x1940 [ 503.976999][T18332] ? icmp6_send+0x1e9/0x1940 [ 503.977023][T18332] ? __pfx_icmp6_send+0x10/0x10 [ 503.977041][T18332] ? __lock_acquire+0xab9/0xd20 [ 503.977064][T18332] ? ip6_neigh_lookup+0x14e/0x470 [ 503.977084][T18332] ? ip6_neigh_lookup+0x14e/0x470 [ 503.977101][T18332] ? ip6_neigh_lookup+0x397/0x470 [ 503.977119][T18332] ? ip6_neigh_lookup+0x14e/0x470 [ 503.977138][T18332] ? __pfx_ip6_neigh_lookup+0x10/0x10 [ 503.977158][T18332] ip6_link_failure+0x3b/0x4c0 [ 503.977179][T18332] ip_tunnel_xmit+0x175b/0x2390 [ 503.977207][T18332] ? desc_read+0x1b8/0x3f0 [ 503.977226][T18332] ? ip_tunnel_xmit+0x110/0x2390 [ 503.977252][T18332] ? _prb_read_valid+0xa07/0xa90 [ 503.977271][T18332] ? console_flush_all+0x13a/0xb10 [ 503.977296][T18332] ? __pfx_ip_tunnel_xmit+0x10/0x10 [ 503.977321][T18332] ? gre_build_header+0x31c/0xa40 [ 503.977348][T18332] ? __pfx_gre_build_header+0x10/0x10 [ 503.977370][T18332] ? __console_unlock+0x14c/0x1a0 [ 503.977391][T18332] ? __pfx___console_unlock+0x10/0x10 [ 503.977413][T18332] ? __pfx_skb_network_protocol+0x10/0x10 [ 503.977434][T18332] __gre_xmit+0x19a/0x240 [ 503.977464][T18332] ? __pfx___gre_xmit+0x10/0x10 [ 503.977486][T18332] ? __asan_memset+0x22/0x50 [ 503.977507][T18332] ? erspan_build_header+0x19c/0x370 [ 503.977535][T18332] erspan_xmit+0xa04/0x1220 [ 503.977564][T18332] ? __pfx_erspan_xmit+0x10/0x10 [ 503.977588][T18332] ? __lock_acquire+0xab9/0xd20 [ 503.977607][T18332] dev_hard_start_xmit+0x2d7/0x830 [ 503.977633][T18332] sch_direct_xmit+0x241/0x4b0 [ 503.977661][T18332] ? __pfx_sch_direct_xmit+0x10/0x10 [ 503.977685][T18332] ? gred_dequeue+0x4a6/0x680 [ 503.977711][T18332] __qdisc_run+0xaa0/0x1540 [ 503.977743][T18332] __dev_queue_xmit+0x1056/0x3b50 [ 503.977763][T18332] ? register_lock_class+0x51/0x320 [ 503.977781][T18332] ? __dev_queue_xmit+0x27b/0x3b50 [ 503.977808][T18332] ? __pfx___dev_queue_xmit+0x10/0x10 [ 503.977828][T18332] ? read_seqbegin+0x122/0x250 [ 503.977850][T18332] ? neigh_resolve_output+0x438/0x750 [ 503.977874][T18332] ? lockdep_hardirqs_on+0x9c/0x150 [ 503.977898][T18332] ? read_seqbegin+0x1ac/0x250 [ 503.977922][T18332] ? __pfx_read_seqbegin+0x10/0x10 [ 503.977945][T18332] ? __local_bh_enable_ip+0x12d/0x1c0 [ 503.977963][T18332] ? eth_header+0x11b/0x200 [ 503.977980][T18332] ? __asan_memcpy+0x40/0x70 [ 503.978030][T18332] ip6_finish_output2+0xfb3/0x1480 [ 503.978061][T18332] ? __pfx_ip6_finish_output2+0x10/0x10 [ 503.978087][T18332] ? ip6_mtu+0x7d/0x490 [ 503.978108][T18332] ? ip6_mtu+0x38c/0x490 [ 503.978131][T18332] ? ip6_finish_output+0x2ef/0x4e0 [ 503.978153][T18332] ? ip6_output+0x126/0x550 [ 503.978175][T18332] ip6_output+0x340/0x550 [ 503.978200][T18332] ip6_mr_output+0x4e9/0x1100 [ 503.978234][T18332] ? ip6_mr_output+0x1ca/0x1100 [ 503.978260][T18332] ? __pfx_ip6_mr_output+0x10/0x10 [ 503.978290][T18332] ? ip6t_do_table+0x1db/0x1560 [ 503.978316][T18332] ? __pfx_ip6t_do_table+0x10/0x10 [ 503.978346][T18332] ? skb_dst+0x4f/0xd0 [ 503.978362][T18332] ? dst_output+0x17b/0x1c0 [ 503.978378][T18332] ? rawv6_send_hdrinc+0xc9f/0x17a0 [ 503.978396][T18332] rawv6_send_hdrinc+0xe16/0x17a0 [ 503.978420][T18332] ? __pfx_rawv6_send_hdrinc+0x10/0x10 [ 503.978436][T18332] ? txopt_get+0x335/0x3f0 [ 503.978460][T18332] ? __pfx_dst_output+0x10/0x10 [ 503.978475][T18332] ? __pfx_txopt_get+0x10/0x10 [ 503.978495][T18332] rawv6_sendmsg+0x12ee/0x1830 [ 503.978519][T18332] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 503.978546][T18332] ? __pfx_aa_sk_perm+0x10/0x10 [ 503.978571][T18332] ? sock_rps_record_flow+0x19/0x410 [ 503.978599][T18332] ? inet_sendmsg+0x2f4/0x370 [ 503.978612][T18332] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 503.978631][T18332] __sock_sendmsg+0x19c/0x270 [ 503.978655][T18332] ____sys_sendmsg+0x505/0x830 [ 503.978675][T18332] ? __pfx_____sys_sendmsg+0x10/0x10 [ 503.978696][T18332] ? import_iovec+0x74/0xa0 [ 503.978719][T18332] ___sys_sendmsg+0x21f/0x2a0 [ 503.978738][T18332] ? __pfx____sys_sendmsg+0x10/0x10 [ 503.978770][T18332] ? __fget_files+0x2a/0x420 [ 503.978786][T18332] ? __fget_files+0x3a0/0x420 [ 503.978805][T18332] __x64_sys_sendmsg+0x19b/0x260 [ 503.978824][T18332] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 503.978849][T18332] ? do_syscall_64+0xbe/0xfa0 [ 503.978874][T18332] do_syscall_64+0xfa/0xfa0 [ 503.978898][T18332] ? lockdep_hardirqs_on+0x9c/0x150 [ 503.978921][T18332] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.978938][T18332] ? clear_bhb_loop+0x60/0xb0 [ 503.978956][T18332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.978973][T18332] RIP: 0033:0x7f95d4d8f6c9 [ 503.978990][T18332] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 503.979005][T18332] RSP: 002b:00007f95d5cb2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 503.979023][T18332] RAX: ffffffffffffffda RBX: 00007f95d4fe5fa0 RCX: 00007f95d4d8f6c9 [ 503.979036][T18332] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 503.979047][T18332] RBP: 00007f95d4e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 503.979057][T18332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 503.979067][T18332] R13: 00007f95d4fe6038 R14: 00007f95d4fe5fa0 R15: 00007fff7f0c6e28 [ 503.979087][T18332] [ 504.034503][T18338] __nla_validate_parse: 17 callbacks suppressed [ 504.034525][T18338] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4142'. [ 504.039153][T18332] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.467203][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.505734][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 507.668357][ T1302] ieee802154 phy1 wpan1: encryption failed: -22