last executing test programs: 5.591414232s ago: executing program 3 (id=919): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xb, &(0x7f0000000340)=@framed={{}, [@printk={@i, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x42000400) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f0000002040)) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10) r2 = socket(0x2b, 0x80801, 0x1) getsockopt$IP6T_SO_GET_REVISION_MATCH(r2, 0x29, 0x44, &(0x7f0000000040)={'IDLETIMER\x00'}, &(0x7f0000000080)=0x1e) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000000c0)=[{{0x0, 0x0, 0x1}, {0x3, 0x0, 0x0, 0x1}}, {{0x4, 0x1, 0x1}, {0x2, 0x1, 0x1}}], 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) pipe(0x0) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000000)="2400000011005f0414f9f4070009041f810000000e0000000000000008000f0001000000", 0x24) 4.440015738s ago: executing program 1 (id=929): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[], 0x0, 0x4d, 0x0, 0x0, 0x0, 0x4d}, 0x28) 4.347377933s ago: executing program 1 (id=931): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x240}, 0xe) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) socket$l2tp(0x2, 0x2, 0x73) write$cgroup_subtree(r1, &(0x7f0000000200)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000003040)={0x11, 0x3, &(0x7f0000002ec0)=ANY=[@ANYBLOB="1800f6000700000000000800040000009500000000000073"], &(0x7f0000002f00)='GPL\x00', 0x3, 0x35, &(0x7f0000002f40)=""/53, 0x41100, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000002fc0)={0x4, 0x4, 0xfffffff7, 0x4}, 0x10}, 0x94) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000000)={0x2, 0x8}, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020200600000000000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b0000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000180)='GPL\x00', 0x6816, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) setsockopt$SO_J1939_PROMISC(r2, 0x6b, 0x2, &(0x7f00000000c0)=0x1, 0x4) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0xa, 0x0, 0x0, 0x5}, 0x22) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x800) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYRES32, @ANYRES32=r6, @ANYBLOB="08004d01"], 0x24}, 0x1, 0x0, 0x0, 0x20040091}, 0x4) sendmsg$NL80211_CMD_NOTIFY_RADAR(r4, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x50, r7, 0x4, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7, 0x53}}}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xa}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="2400efbc0000400000000000fcdddf258423000004f3ffff0b00018006001500e0000001"], 0x24}, 0x1, 0x0, 0x0, 0x48800}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x20040054) 3.799672933s ago: executing program 1 (id=934): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x2, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) (async, rerun: 32) socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) r3 = socket$unix(0x1, 0x1, 0x0) (async) unshare(0x22020600) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000002c0000000000000018000000000000000000000000000000950000000000000095000000000000b8"], &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r4, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x8, 0x0, 0x0}}, 0x10) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (rerun: 32) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xfff1}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x1e}}, 0x24000084) (async) r6 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) r7 = socket$unix(0x1, 0x1, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r9 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b0000000000000000000000000080000000000092a43f848f7f460da6cb5326f41906c4be3f14b71c7851c30d713af7224c02ae83662abaaa8a8329dcad5709e883bb26b4bfc0e95a0034ec034421f41684481fe9925d6517577d4c6d74dd7fe075ad35321bb501a94bc12a858f1cf8f9023a1fbb0e59b799ddbd831314588b0ea873f68a5b0055703c2319c61268d3c84c390ff588", @ANYRES32, @ANYBLOB='\a\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="010000000400"/28], 0x50) (async, rerun: 32) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r11, {0x4}, {0x6, 0xffff}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0x6}, @TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x1f}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0x7fff}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4005c}, 0x8800) (async) sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newqdisc={0x3c, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r8, {0x4}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x2, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xcebc}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) (async, rerun: 32) r12 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (rerun: 32) bind$bt_hci(r12, 0x0, 0x0) (async) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000001c0)=0x3) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000080)={0x2, &(0x7f0000000100)=[{0x50, 0xff, 0x0, 0x8}, {0x6, 0x60, 0x6}]}) r13 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) write$ppp(r13, &(0x7f00000008c0), 0x0) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) 2.711633457s ago: executing program 1 (id=941): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0x4, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000008000000000000000100000091115a00000000009500000000000000fcc46e778e544fd87908df5f397b6fcde71bee464be3618578b1b9f12f759c87d6414d6e43e5647c23c8cc83663ad4b790afdef1f74ca96d086cad5c78a36e06899d3993351101d8775efe62284d058d556e3a1a684b88c0ad4aa3db5977a3d8f4d9916921a21444a339afa3b60c010411aea2860bca52cf8edf5b3aa30a7782eac79fea23fd0afd89129c34620769fc95473fef3fc4287a51e0c2c0f0c598b1b39d9fcec021a2c2612cf300d2b2ee1e42f7d7a161315345ce"], &(0x7f0000000c40)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f00000069c0), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000006ac0)={0x0, 0x0, &(0x7f0000006a80)={&(0x7f0000000080)={0x2c, r3, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PEER_V4={0x8, 0x8, @empty}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4044840}, 0x48804) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001140)=ANY=[@ANYRES32=r4, @ANYBLOB="0c0002"], 0x24}, 0x1, 0x0, 0x0, 0x2000c04c}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)=ANY=[@ANYBLOB="020100030e000000000000000000000005000600000000000a0000000000000000000000000000000000000000000000000000000000000005000500000000000a00000000000000000000000000000000000000000000000000000000000000020013"], 0x70}}, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r7, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8}]}, &(0x7f0000000640)=0x10) setsockopt$inet6_IPV6_PKTINFO(r7, 0x29, 0x32, &(0x7f0000000140)={@empty}, 0x14) sendmsg$kcm(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000300)="d8000000180081064e81f782db4cb904021d0800fe067c05e8fe55a10a0005000140020003600e41b0000900ac0006fc1100000016000500014002000000035c3b61c1d67f6f94007174cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001b14d6d930dfe1d9d322fe7c4650b5b9bd6ee6f63f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b4ff010000000000000dd6e4edef3d93452a09004b43370e9703920723f97e46bb5c07540d3b", 0xf0}], 0x1}, 0x24004000) 2.584735321s ago: executing program 4 (id=943): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000000000ffffff900000000000850000001100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000680)='syzkaller\x00'}, 0x6b) 2.447469459s ago: executing program 3 (id=945): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vxcan0\x00', 0x0}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@loopback, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x2, 0x4, 0x3}]}]}, 0xfc}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xec, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x20}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xa0, 0x2e}}, [@migrate={0x9c, 0x11, [{@in=@loopback=0xac1414aa, @in=@broadcast, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@rand_addr=' \x01\x00', 0x3c, 0x4, 0x0, 0x0, 0x8, 0xa}, {@in=@remote, @in6=@rand_addr=' \x01\x00', @in=@dev={0xac, 0x14, 0x14, 0x39}, @in6=@private2, 0x3c, 0x4, 0x0, 0x0, 0x8, 0x2}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r1, 0x1, {0x0, 0x0, 0x1}, 0xfd}, 0x18) writev(r0, &(0x7f00000000c0)=[{0x0}], 0x1) r4 = socket(0x15, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x5, 0x8, 0xffffffff, 0x42, 0x1}, 0x50) getsockopt(r4, 0x1, 0x2716, 0x0, &(0x7f0000000040)) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r5, &(0x7f0000000840)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f0000000640)={0x1b4, r6, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_DEVKEY={0x170, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x18, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1ff}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xfffffffd}, @NL802154_DEVKEY_ATTR_ID={0x60}, @NL802154_DEVKEY_ATTR_ID={0x78, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x10, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x403}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x0, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_ID={0x28, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5}]}, @NL802154_DEVKEY_ATTR_ID={0x2c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x9}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x2}]}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) socket$kcm(0x29, 0x2, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002740)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0xd}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x74}}, 0x40000d4) 2.37550974s ago: executing program 4 (id=946): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x18, &(0x7f0000000380)=ANY=[@ANYBLOB="180100008f080000000000000006000a18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000fcff00008500000086000000bf0900000000000055090100000000809500000000000000180100002020752500000000002020207baff8ff00000000bfa100000000000064010000f8ffffffb702000008000000b70300007b0d0000850000007f0000004500f4fffcffffffbf91000000000000b702000001000000850000008500008d480000000000000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0xffe, &(0x7f0000000cc0)=""/4094, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffb}, 0x94) r1 = socket$alg(0x26, 0x5, 0x0) accept$alg(r1, 0x0, 0x0) 2.294462106s ago: executing program 4 (id=948): r0 = socket(0x23, 0x5, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f00000001c0)={r0, &(0x7f0000000000)='\x00', 0x111000, &(0x7f00000000c0)={@_ha_fsid={[0x2, 0x1]}, {0x2, 0x81, 0x8, 0xd41}}, 0x24, &(0x7f0000000080), &(0x7f0000000180)=0x1}) (async) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f00000001c0)={r0, &(0x7f0000000000)='\x00', 0x111000, &(0x7f00000000c0)={@_ha_fsid={[0x2, 0x1]}, {0x2, 0x81, 0x8, 0xd41}}, 0x24, &(0x7f0000000080), &(0x7f0000000180)=0x1}) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000000)=@setlink={0x50, 0x13, 0x5, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40601}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_vlan\x00'}, @IFLA_VFINFO_LIST={0x1c, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0xffff94eb, 0x6}}]}]}]}, 0x50}}, 0x48000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb0100be058b8b5c501b4c3e90b2ae5d273118000000000000004000000040000000020000000000000000000009040000000000000000000001050000000800000000000000000000030000000002000000020000001200000000000000000000098508d9b9c67bf63edcfd070b1a43b84873ea20954586133a7fbdcc25f628629e8510d133e60c6a5e8f990a85fa9b31b7602acbe523d287caa7b05a251771a9918c29f598f75f54e28029fcbfba86635b", @ANYRESHEX=r1], 0x0, 0x5a}, 0x28) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000541ec4090000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000401, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000004}, 0x890) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000004}, 0x890) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r4}, &(0x7f0000000000), &(0x7f0000000340)=r5}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r4}, &(0x7f0000000000), &(0x7f0000000340)=r5}, 0x20) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, &(0x7f0000000040)) 2.284511906s ago: executing program 3 (id=949): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000240), &(0x7f0000000140)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000008c00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000180)="50558c", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000a80)="fb24ba96", 0xc3fd}, {0x0, 0x11}], 0x2}}], 0x2, 0x20004810) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r3, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) recvmmsg(r3, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x91}], 0x1, 0x12, 0x0) setsockopt$inet6_int(r3, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4) sendto$inet6(r3, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) 2.134560157s ago: executing program 4 (id=951): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000050000000000000001000004080000000000000003000000100000000000000000000002000000000300000000000004040000000000002e"], 0x0, 0x4d}, 0x28) (fail_nth: 15) 1.820552126s ago: executing program 4 (id=952): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[], 0x0, 0x4d}, 0x28) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), &(0x7f0000000240)=0xe, 0x400) r0 = accept(0xffffffffffffffff, &(0x7f0000000500)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f0000000080)=0x80) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000010880)=@base={0x5, 0x4, 0x8, 0xc}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000010400)={0x11, 0xd, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000500000018110000", @ANYRES32=r4, @ANYBLOB="0600000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000fe1acc6dfc1a1d7d47b81ff58aa4b0abf34e5c873579e8aceb5885960d913417b809"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r5, r4}, 0xc) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x6, @private0, 0xb65c}}, 0x0, 0x0, 0x3c, 0x0, "bb02a3c364ca41d6357e544508474004000b42a201ecffffffffffffff8a0e2f964e0000c534a632ab6193fcf19b2df3ee0500faa4ff1f56c54dc46d8b6d2ccd00a0cf0a007bbe00"}, 0xfffffffffffffc8e) r6 = socket$kcm(0x23, 0x5, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x460, 0x2f8, 0x2f8, 0xffffffff, 0x0, 0x1a0, 0x3c8, 0x3c8, 0xffffffff, 0x3c8, 0x3c8, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010100, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x16}, 0x0, 0x168, 0x1a0, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x7, 0xc, 'kmp\x00', "4801d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x76, 0x2, {0x1}}}, @common=@unspec=@devgroup={{0x38}, {0x3, 0x0, 0x3, 0x3, 0x81}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0xae, {0xf, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x65, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xfffc, 0xd, 0x1}, {0x2, 0x4, 0x3}, 0x1000, 0x100}}}, {{@ip={@multicast2, @broadcast, 0xff, 0x0, 'virt_wifi0\x00', 'veth1_to_bridge\x00', {}, {}, 0x0, 0x0, 0x4e}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x8, @ipv4=@rand_addr=0x64010102, @ipv4=@private=0xa010101, @icmp_id=0x68, @icmp_id=0x64}}}, {{@ip={@loopback, @remote, 0xff, 0x0, 'batadv_slave_1\x00', 'ip_vti0\x00', {}, {0xff}, 0x6, 0x1, 0x5}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x4, '|z', 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @local, @dev={0xac, 0x14, 0x14, 0x2a}, @port=0x4e22, @gre_key=0x5}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4c0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r3, 0x100, 0x70bd2c, 0x25dfdbfe, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x8001) setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000240)=0x6, 0x4) listen(r6, 0x8) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000040)={'wg1\x00'}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff000000"], 0x78) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xc, 0x4, 0x4, 0x7, 0x0, r9}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r10, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)=r9}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000040)={r11, &(0x7f0000000980), 0x0}, 0x20) accept4(r6, 0x0, 0x0, 0x800) sendmsg$TIPC_CMD_SET_LINK_TOL(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x68, r3, 0x1, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x8d, @media='udp\x00'}}}, ["", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x8088) 1.650842058s ago: executing program 1 (id=954): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d) socketpair$unix(0x1, 0xb289cf825bb32fe2, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_udp(0xa, 0x2, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r6 = socket$nl_audit(0x10, 0x3, 0x9) splice(r4, 0x0, r6, 0x0, 0x25a5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x9}, 0x20) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a00), r2) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000002e0000000c00050000000000000000000800020007"], 0x28}}, 0x4050) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r1, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe84, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001", @ANYRES8=r8, @ANYRESHEX=r9], 0x88}}, 0x8044) sendmsg$IPCTNL_MSG_CT_GET_STATS(r11, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000040)={0x14, 0x5, 0x1, 0x3, 0x0, 0x0, {0x0, 0x0, 0x5}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x2204c110}, 0x40000) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000000e00010000000000000000000500000a38000000030a01080000000000000000020000000900010073797a300000e61efe385cee7103325cb58ac1dc9aa700000c000240001d00000000000104000480080007006e617400140000003a39adbb05ec2082128ef46a8d83cb71ed99505e1ab3db37468319a34d6f5ef5"], 0x60}}, 0x0) r13 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r15, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000005c0)=""/151, 0x97}], 0x1, &(0x7f0000002f40)=""/229, 0xe5}, 0x0) sendmsg$tipc(r15, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="b8d3d8e48974aae56e0000000000000061b9459b68100dbf05177b2490a5408bdf271fd6b9aa6701365ffc723899ad120c5a54b1c64080f64f103ee1de769e5e9dd847dc85fea662eaad499c52a16f40cb3a1f6f3d5f8df14c53b2e6b5397f7806b6ff846de37a34c8342b9ac5a51eacf8a09cede8676044eafd3d7935f90698aa2d9c57276322b82e8976f5a4d980eaeb3b636630b810f2e2", 0x99}], 0x1, 0x0, 0x0, 0x84}, 0x20000000) close(r16) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x7, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a4000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b400000095"], &(0x7f0000000880)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41100, 0x5e, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) sendmsg$nl_route_sched(r10, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=@newqdisc={0xb0, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r14, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x84, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x8}, @TCA_HTB_INIT={0x8, 0x2, {0x3, 0x80000001}}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0xf}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x6}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffffb, 0x7fffffff}}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x3}}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x80000001}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x9, 0xfff}}]}}]}, 0xb0}}, 0x20000000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x1, 0xfa) 1.600399896s ago: executing program 2 (id=955): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xb, &(0x7f0000000340)=@framed={{}, [@printk={@i, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x42000400) r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f0000002040)) bind$can_raw(r0, &(0x7f00000001c0), 0x10) r2 = socket(0x2b, 0x80801, 0x1) getsockopt$IP6T_SO_GET_REVISION_MATCH(r2, 0x29, 0x44, &(0x7f0000000040)={'IDLETIMER\x00'}, &(0x7f0000000080)=0x1e) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000000c0)=[{{0x0, 0x0, 0x1}, {0x3, 0x0, 0x0, 0x1}}, {{0x4, 0x1, 0x1}, {0x2, 0x1, 0x1}}], 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) pipe(0x0) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000000)="2400000011005f0414f9f4070009041f810000000e0000000000000008000f0001000000", 0x24) 1.516801727s ago: executing program 0 (id=956): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000000000ffffffb00000000000850000001100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000680)='syzkaller\x00'}, 0x6b) 1.504721957s ago: executing program 0 (id=957): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x134}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000070a20000000000a01020000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff0008000340000000384c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000200003801c0000800800034000000002100002800c000280080001800000000014000000020a01"], 0xf4}}, 0x0) 1.447183732s ago: executing program 0 (id=958): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r1) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={0x44, r2, 0x1, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_LINKMODES_OURS={0x24, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x1c, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004c454}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x16, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}, [@printk={@s, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000240)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="0cff0900a244984f2595f43dfb1e", 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x161101, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0xa, 0x2) r8 = socket$packet(0x11, 0x3, 0x300) bind$packet(r8, &(0x7f0000000240)={0x11, 0xd, 0x0, 0x1, 0x10, 0x6, @local}, 0x14) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r6, &(0x7f0000000240)=ANY=[], 0xfdef) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001c40)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000005000000030000000100000f07000000030000000100000005530000004f0030"], &(0x7f00000006c0)=""/262, 0x35, 0x106, 0x9}, 0x28) write(r0, &(0x7f0000000280)="e43572c64f9b96cf5993f2113fd9d03161e38f01bf9f90fe7193ce6afe186f271683c809368e97464199d38d3d9df4717d9ede0e8144d3fb00e2010f4550c84f91f105ba3ad4cf04b302a4d09e6b518dc348a7aeb21786c5cb01d5a71266fc1a47645fc983b584a0c6d22a4a39713f12cc2af30ebcb0360df69503730a8e4e7b5ac15503542f3c4ffee50887d2a270e3f29d2f47bbacbcfd87e54ed4debd4b5ca5c8a43ff2d8277e61d6f82dbc863275d754a60b5f8720418fec08daf5946f74ebb9fdd24c3de431850c65b1b712fc1bf0fda0bc97b788474b3776d9f07d3659", 0xe0) ioctl$XFS_IOC_FREE_EOFBLOCKS(r0, 0x8080583a, &(0x7f0000000080)={0x0, 0x0, 0xe, 0x8, 0x1, 0x0, 0x2}) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="280004002c00070100000000ffdbdf25bb75f7987f0407ab340b60a93b9bad68037c000008000180040006220c0002800800028004008e80"], 0x28}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) 1.280599306s ago: executing program 3 (id=959): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vxcan0\x00', 0x0}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@loopback, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x2, 0x4, 0x3}]}]}, 0xfc}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xec, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x20}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xa0, 0x2e}}, [@migrate={0x9c, 0x11, [{@in=@loopback=0xac1414aa, @in=@broadcast, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@rand_addr=' \x01\x00', 0x3c, 0x4, 0x0, 0x0, 0x8, 0xa}, {@in=@remote, @in6=@rand_addr=' \x01\x00', @in=@dev={0xac, 0x14, 0x14, 0x39}, @in6=@private2, 0x3c, 0x4, 0x0, 0x0, 0x8, 0x2}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r1, 0x1, {0x0, 0x0, 0x1}, 0xfd}, 0x18) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)}], 0x1) r4 = socket(0x15, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x5, 0x8, 0xffffffff, 0x42, 0x1}, 0x50) getsockopt(r4, 0x1, 0x2716, 0x0, &(0x7f0000000040)) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r5, &(0x7f0000000840)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f0000000640)={0x1b4, r6, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_DEVKEY={0x170, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x18, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1ff}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xfffffffd}, @NL802154_DEVKEY_ATTR_ID={0x60}, @NL802154_DEVKEY_ATTR_ID={0x78, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x10, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x403}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x0, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_ID={0x28, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5}]}, @NL802154_DEVKEY_ATTR_ID={0x2c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x9}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x2}]}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) socket$kcm(0x29, 0x2, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002740)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0xd}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x74}}, 0x40000d4) 1.243017931s ago: executing program 1 (id=960): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000080)=ANY=[@ANYBLOB="050000000000000004000000000000000400000000000000", @ANYRES32=r0, @ANYBLOB="000000001000"/28, @ANYRES32=r0, @ANYBLOB="00000000f90500"/28, @ANYRES32=r0, @ANYBLOB="00000000dd0600"/28, @ANYRES32=r0, @ANYBLOB="dfff00003838070200000000000000"]) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1, 0x4, 0x0, &(0x7f00000002c0)='GPL\x00', 0xf}, 0x94) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/uts\x00') unshare(0x6a040000) socket(0x22, 0x2, 0x9) getuid() ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_int(r1, 0x29, 0x46, &(0x7f00000011c0)=0xffffffff, 0x4) r2 = socket$vsock_stream(0x28, 0x1, 0x0) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$SOCK_DIAG_BY_FAMILY(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000006580)={&(0x7f0000004d00)=ANY=[@ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) bind$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8) listen(r2, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r5 = accept4(r2, 0x0, 0x0, 0x0) sendto(r5, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) recvfrom(r4, &(0x7f00000001c0)=""/62, 0xfeb5, 0x10120, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) syz_emit_ethernet(0x36, 0x0, 0x0) socket(0x10, 0x3, 0x0) 1.169925483s ago: executing program 3 (id=961): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89ff, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000400)=@ethtool_ringparam={0x6, 0x0, 0x20040001, 0xfffffffd}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, 0x0, 0x0) sendmsg$key(r1, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x0, 0x0, 0x2, 0x7}, {0x0, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x40}, 0x8, 0x32}, 0x0, @in=@private=0xa0100fe, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, 0x0, 0x0) r4 = accept$alg(r3, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f00000009c0)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="3f5e97", 0xffc8}], 0x1, 0x0, 0x0, 0x20000000}], 0x1, 0x24000040) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000440)=@nat={'nat\x00', 0x1b, 0x5, 0x488, 0x310, 0x148, 0xffffffff, 0x310, 0x238, 0x3f0, 0x3f0, 0xffffffff, 0x3f0, 0x3f0, 0x5, &(0x7f0000000000), {[{{@uncond, 0x0, 0x100, 0x148, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x0, 0x2, 0x1}}, @common=@set={{0x40}, {{0x3, [0x0, 0x1, 0x2, 0x1, 0x1, 0x6], 0x1, 0x2}}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x10, @ipv4=@dev={0xac, 0x14, 0x14, 0x36}, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @icmp_id=0x64, @port=0x4e22}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x23}, @rand_addr=0x64010100, 0xffffff00, 0x0, 'macvlan0\x00', 'team0\x00', {0xff}, {0xff}, 0x1, 0x1, 0x1}, 0x0, 0xb8, 0xf0, 0x0, {}, [@common=@unspec=@ipvs={{0x48}, {@ipv6=@remote, [0x0, 0xff000000, 0xffffff00, 0xffffff00], 0x4e24, 0x1, 0x6, 0x4e20, 0x20, 0x2}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x19, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @icmp_id=0x64, @icmp_id=0x67}}}}, {{@uncond, 0x0, 0xa0, 0xd8, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x8, 0x3, 0x2a20, 0x1}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x5f4540c1b9519711, @private=0xa010100, @loopback, @gre_key=0x7e9, @icmp_id=0x66}}}}, {{@ip={@broadcast, @private=0xa010100, 0xff, 0xff000000, 'veth0_to_team\x00', 'gre0\x00', {0xff}}, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@inet=@set2={{0x28}, {{0xc0da, 0x2, 0x1}}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x0, @ipv4=@multicast1, @ipv4=@empty, @icmp_id=0x68, @icmp_id=0x67}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4e8) 1.064250395s ago: executing program 0 (id=962): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r2, 0xc0385868, &(0x7f0000000200)={r2, &(0x7f0000000040)='^.$*,\x00', 0x20000, &(0x7f0000000080)={@align=0x9, {0x5, 0x7, 0x40, 0xfff}}, 0xa, &(0x7f0000000180)={@_ha_fsid}, &(0x7f00000001c0)=0x10}) setsockopt$inet6_icmp_ICMP_FILTER(r3, 0x1, 0x1, &(0x7f0000000240), 0x4) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB], 0x50) socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000240), &(0x7f0000000140)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000002440), 0x400, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, 0x0, 0x0) 1.031565669s ago: executing program 2 (id=963): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r0, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, 0x0, 0x4, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 980.610447ms ago: executing program 2 (id=964): socket$inet(0x2, 0x2, 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) socket(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2f}, [@alu={0x4, 0x0, 0x3, 0x0, 0x0, 0x1}]}, 0x0, 0xf}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES16=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) (fail_nth: 7) 939.673966ms ago: executing program 0 (id=965): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000280)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x4048840}, 0x800) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x6b, 0x78, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, &(0x7f0000000880)={0x0, @in6={{0x2, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x66}}, 0x1}}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="0815000000051104000000000000000001000005540201"], 0x1508}}, 0x10) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x80000000, 0x0, 0x20, 0x80, 0xffffffff}, 0x0, 0x0, 0x4, 0x6, 0x2e, 0x14, 0x0, 0x0, 0x4, 0x0, {0x0, 0x3, 0x4000008, 0x0, 0x3}}}}]}, 0x78}}, 0x0) sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r2, 0x400, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=']A\x00\x00', @ANYRES16=r2, @ANYBLOB="000227bd7000ffdbdf254300000008000300", @ANYRES32, @ANYBLOB="0c009900050000001e0000000c0058005f000000000000000c00580014000000000000000c0058007000"], 0x4c}, 0x1, 0x0, 0x0, 0x4040010}, 0x8050) socket$inet6(0xa, 0x2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000001300)="77fcb020b2830feb3a21a2", 0xb) socket$inet(0x2, 0x3, 0x6) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x4e, &(0x7f0000000180)={&(0x7f0000000240)=@dellink={0x34, 0x11, 0x1, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x1020, 0x40000}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_vlan\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) 476.441768ms ago: executing program 2 (id=966): socket$inet(0x2, 0x2, 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) socket(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000002680), r1) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000002840)={0x0, 0x0, &(0x7f0000002800)={&(0x7f00000026c0)={0x3c, r2, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040010}, 0x20000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES16=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 438.04441ms ago: executing program 4 (id=967): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x25) (async) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x25) recvfrom$inet(r4, &(0x7f0000000040)=""/18, 0xfffffffffffffdfa, 0x2, 0x0, 0x0) r5 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) (async) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[], 0x6c}}, 0x0) (async) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[], 0x6c}}, 0x0) sendfile(r1, r1, 0x0, 0xc) (async) sendfile(r1, r1, 0x0, 0xc) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)=@generic={&(0x7f0000000100)='./file0\x00', 0x0, 0x18}, 0x18) socket(0x400000000010, 0x3, 0x0) (async) r7 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) (async) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0x5fc168c9d6b4368d}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x10) (async) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0x5fc168c9d6b4368d}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x10) r10 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f0000000300), 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x17, 0x6, 0x200, 0x101, 0x500, r6, 0x7, '\x00', 0x0, r10, 0x0, 0x2, 0x3}, 0x50) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r11}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r12, r11}, 0xc) openat$cgroup(r0, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) (async) r13 = openat$cgroup(r0, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) r14 = openat$cgroup_procs(r13, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) sendfile(r14, r14, 0x0, 0xfff) (async) sendfile(r14, r14, 0x0, 0xfff) 250.863977ms ago: executing program 3 (id=968): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x4}, 0x50) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x7}, {0xffff, 0xffff}, {0x6, 0x10}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0x20001}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=@can_newroute={0x6c, 0x18, 0x8, 0x70bd2c, 0x25dfdbff, {0x1d, 0x1, 0x2}, [@CGW_MOD_OR={0x15, 0x2, {{{0x0, 0x1}, 0x5, 0x2, 0x0, 0x0, "5062e558fa057674"}, 0x4}}, @CGW_DST_IF={0x8, 0xa, r2}, @CGW_MOD_SET={0x15, 0x4, {{{0x0, 0x0, 0x0, 0x1}, 0x5, 0x1, 0x0, 0x0, "2eefb137ffd49c74"}, 0x6}}, @CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffffb, 0x3, 0xfffffffffffffffd, 0xf6}}, @CGW_MOD_SET={0x15, 0x4, {{{0x1, 0x1, 0x1}, 0x7, 0x1, 0x0, 0x0, "056ccc38b5541c56"}, 0x4}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040801) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f00000002c0), r3) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r3) sendmsg$NL802154_CMD_NEW_INTERFACE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x1c, r4, 0x829, 0x4070bd2d, 0x25dfdbfe, {0x1e}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c000}, 0x40240c4) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000300)={r0, &(0x7f00000001c0)="a4b3132670ad1638cd84c5a4139f765297780e3068690dc7b7f3134902d3431e2398395e756e3c7be7d6", &(0x7f0000000200)=""/243, 0x4}, 0x20) 148.356265ms ago: executing program 2 (id=969): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x107a655, 0x0, 0x0, 0x0, 0x10}, {{0x18, 0x1, 0x1, 0x0, r0}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0xa000000}}, [@call={0x85, 0x0, 0x0, 0x11}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 146.482136ms ago: executing program 0 (id=970): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000003b00000003"], 0x48) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000001740)={r0, 0x0, 0x0}, 0x20) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000001440), 0x2, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000200)={@multicast, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "0300", 0x18, 0x2c, 0x0, @remote, @local, {[@routing={0x2, 0x2, 0x0, 0x1, 0x0, [@private1]}]}}}}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000b80)={@ifindex, 0xffffffffffffffff, 0x6, 0x14}, 0x20) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x4c, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x4c}}, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000000)="c5d64ea9bd21", 0x6}, {0x0}], 0x2) 0s ago: executing program 2 (id=971): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vxcan0\x00', 0x0}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@loopback, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x2, 0x4, 0x3}]}]}, 0xfc}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xec, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x20}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xa0, 0x2e}}, [@migrate={0x9c, 0x11, [{@in=@loopback=0xac1414aa, @in=@broadcast, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@rand_addr=' \x01\x00', 0x3c, 0x4, 0x0, 0x0, 0x8, 0xa}, {@in=@remote, @in6=@rand_addr=' \x01\x00', @in=@dev={0xac, 0x14, 0x14, 0x39}, @in6=@private2, 0x3c, 0x4, 0x0, 0x0, 0x8, 0x2}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r1, 0x1, {0x0, 0x0, 0x1}, 0xfd}, 0x18) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)}], 0x1) r4 = socket(0x15, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x5, 0x8, 0xffffffff, 0x42, 0x1}, 0x50) getsockopt(r4, 0x1, 0x2716, 0x0, &(0x7f0000000040)) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r5, &(0x7f0000000840)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f0000000640)={0x1b4, r6, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_DEVKEY={0x170, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x18, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1ff}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xfffffffd}, @NL802154_DEVKEY_ATTR_ID={0x60}, @NL802154_DEVKEY_ATTR_ID={0x78, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x10, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x403}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x0, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_ID={0x28, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5}]}, @NL802154_DEVKEY_ATTR_ID={0x2c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x9}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x2}]}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) socket$kcm(0x29, 0x2, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002740)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0xd}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x74}}, 0x40000d4) kernel console output (not intermixed with test programs): promiscuous mode [ 69.288456][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.296002][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.304384][ T5839] bridge_slave_1: entered allmulticast mode [ 69.311482][ T5839] bridge_slave_1: entered promiscuous mode [ 69.335980][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.343221][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.350614][ T5828] bridge_slave_0: entered allmulticast mode [ 69.358034][ T5828] bridge_slave_0: entered promiscuous mode [ 69.365313][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.373733][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.381288][ T5824] bridge_slave_1: entered allmulticast mode [ 69.388495][ T5824] bridge_slave_1: entered promiscuous mode [ 69.422642][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.430296][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.437604][ T5828] bridge_slave_1: entered allmulticast mode [ 69.444912][ T5828] bridge_slave_1: entered promiscuous mode [ 69.483557][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.490789][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.517829][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.531320][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.539429][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.547518][ T5825] bridge_slave_0: entered allmulticast mode [ 69.555014][ T5825] bridge_slave_0: entered promiscuous mode [ 69.577972][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.590238][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.600687][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.607890][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.634285][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.645531][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.652884][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.660057][ T5825] bridge_slave_1: entered allmulticast mode [ 69.667341][ T5825] bridge_slave_1: entered promiscuous mode [ 69.685453][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.696799][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.736862][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.768579][ T5824] team0: Port device team_slave_0 added [ 69.787103][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.818112][ T5824] team0: Port device team_slave_1 added [ 69.835616][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.865582][ T5839] team0: Port device team_slave_0 added [ 69.882024][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.893478][ T5828] team0: Port device team_slave_0 added [ 69.910053][ T5839] team0: Port device team_slave_1 added [ 69.916649][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.924128][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.950686][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.973360][ T5828] team0: Port device team_slave_1 added [ 69.993470][ T5827] hsr_slave_0: entered promiscuous mode [ 69.999847][ T5827] hsr_slave_1: entered promiscuous mode [ 70.017378][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.024538][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.050954][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.071347][ T5825] team0: Port device team_slave_0 added [ 70.079853][ T5825] team0: Port device team_slave_1 added [ 70.113397][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.120482][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.146669][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.167737][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.174989][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.183399][ T5146] Bluetooth: hci2: command tx timeout [ 70.201504][ T5836] Bluetooth: hci1: command tx timeout [ 70.207262][ T5146] Bluetooth: hci0: command tx timeout [ 70.212994][ T51] Bluetooth: hci3: command tx timeout [ 70.218723][ T5832] Bluetooth: hci4: command tx timeout [ 70.231068][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.243439][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.250490][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.277080][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.306018][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.313501][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.340014][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.360608][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.367874][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.394423][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.407429][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.414538][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.441004][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.536435][ T5824] hsr_slave_0: entered promiscuous mode [ 70.543805][ T5824] hsr_slave_1: entered promiscuous mode [ 70.549970][ T5824] debugfs: 'hsr0' already exists in 'hsr' [ 70.556536][ T5824] Cannot create hsr debugfs directory [ 70.615609][ T5825] hsr_slave_0: entered promiscuous mode [ 70.621872][ T5825] hsr_slave_1: entered promiscuous mode [ 70.628224][ T5825] debugfs: 'hsr0' already exists in 'hsr' [ 70.634043][ T5825] Cannot create hsr debugfs directory [ 70.657733][ T5839] hsr_slave_0: entered promiscuous mode [ 70.665065][ T5839] hsr_slave_1: entered promiscuous mode [ 70.671364][ T5839] debugfs: 'hsr0' already exists in 'hsr' [ 70.677283][ T5839] Cannot create hsr debugfs directory [ 70.698900][ T5828] hsr_slave_0: entered promiscuous mode [ 70.705691][ T5828] hsr_slave_1: entered promiscuous mode [ 70.711870][ T5828] debugfs: 'hsr0' already exists in 'hsr' [ 70.717690][ T5828] Cannot create hsr debugfs directory [ 71.159486][ T5827] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 71.171317][ T5827] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 71.179467][ T5827] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 71.188941][ T5827] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 71.197849][ T5827] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 71.207425][ T5827] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 71.225290][ T5827] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 71.235155][ T5827] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 71.284158][ T5824] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 71.295610][ T5824] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 71.304178][ T5824] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 71.314585][ T5824] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 71.323115][ T5824] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 71.334422][ T5824] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 71.343081][ T5824] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 71.354206][ T5824] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 71.439322][ T5825] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 71.449552][ T5825] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 71.459429][ T5825] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 71.473379][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.479836][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.491217][ T5825] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 71.513709][ T5825] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 71.523738][ T5825] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 71.542614][ T5825] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 71.554557][ T5825] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 71.625115][ T5828] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 71.638123][ T5828] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 71.645785][ T5828] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 71.655885][ T5828] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 71.675043][ T5828] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 71.684604][ T5828] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 71.698476][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.709735][ T5828] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 71.720810][ T5828] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 71.792155][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.822147][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.835788][ T5839] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 71.847085][ T5839] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 71.856350][ T5839] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 71.867150][ T5839] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 71.883193][ T1166] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.890574][ T1166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.909151][ T5839] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 71.919214][ T5839] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 71.933250][ T1166] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.940548][ T1166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.953476][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.974595][ T5839] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 71.985501][ T5839] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 72.005212][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.012443][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.024223][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.031625][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.131655][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.204790][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.266598][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.274061][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.285073][ T5146] Bluetooth: hci0: command tx timeout [ 72.285090][ T5836] Bluetooth: hci4: command tx timeout [ 72.285115][ T5836] Bluetooth: hci2: command tx timeout [ 72.290687][ T5146] Bluetooth: hci1: command tx timeout [ 72.297716][ T51] Bluetooth: hci3: command tx timeout [ 72.315560][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.322764][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.448729][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.500869][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.537327][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.564346][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.576430][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.583961][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.618194][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.625560][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.674693][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.689356][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.729403][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.736766][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.790897][ T1166] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.798211][ T1166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.830584][ T5824] veth0_vlan: entered promiscuous mode [ 72.855056][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.884139][ T5824] veth1_vlan: entered promiscuous mode [ 73.005371][ T5824] veth0_macvtap: entered promiscuous mode [ 73.047582][ T5824] veth1_macvtap: entered promiscuous mode [ 73.088689][ T5825] veth0_vlan: entered promiscuous mode [ 73.126910][ T5825] veth1_vlan: entered promiscuous mode [ 73.166146][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.219186][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.283761][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.304494][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.311817][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.326067][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.335886][ T5825] veth0_macvtap: entered promiscuous mode [ 73.354240][ T5825] veth1_macvtap: entered promiscuous mode [ 73.360937][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.409348][ T5827] veth0_vlan: entered promiscuous mode [ 73.429892][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.457644][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.467777][ T5827] veth1_vlan: entered promiscuous mode [ 73.501569][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.531820][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.568461][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.578129][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.604438][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.615954][ T5828] veth0_vlan: entered promiscuous mode [ 73.640044][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.653517][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.666272][ T5828] veth1_vlan: entered promiscuous mode [ 73.728755][ T5827] veth0_macvtap: entered promiscuous mode [ 73.735358][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.745967][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.789732][ T5839] veth0_vlan: entered promiscuous mode [ 73.796250][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.813485][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.824245][ T5827] veth1_macvtap: entered promiscuous mode [ 73.844025][ T5824] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 73.846270][ T5839] veth1_vlan: entered promiscuous mode [ 73.907484][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.918946][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.931141][ T5828] veth0_macvtap: entered promiscuous mode [ 73.981045][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.997028][ T5828] veth1_macvtap: entered promiscuous mode [ 74.030526][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.062133][ T5839] veth0_macvtap: entered promiscuous mode [ 74.086184][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.140293][ T1166] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.163570][ T1166] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.164876][ T5944] netlink: 'syz.0.6': attribute type 1 has an invalid length. [ 74.188132][ T1166] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.202211][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.210651][ T5839] veth1_macvtap: entered promiscuous mode [ 74.228517][ T1166] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.342982][ T5836] Bluetooth: hci0: command tx timeout [ 74.347217][ T5832] Bluetooth: hci4: command tx timeout [ 74.348582][ T51] Bluetooth: hci1: command tx timeout [ 74.354074][ T5832] Bluetooth: hci3: command tx timeout [ 74.354097][ T5832] Bluetooth: hci2: command tx timeout [ 74.394055][ T5953] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.403138][ T5953] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.456652][ T5953] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 74.469219][ T5953] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 74.579058][ T58] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.588257][ T58] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.603148][ T58] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.612490][ T58] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.635762][ T58] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.645604][ T58] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.657992][ T58] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.668448][ T58] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.681280][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.710739][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.787186][ T58] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.811352][ T58] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.833950][ T58] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.843085][ T58] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.748017][ T5963] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8'. [ 75.764874][ T5963] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8'. [ 76.422546][ T5836] Bluetooth: hci3: command tx timeout [ 76.422921][ T5832] Bluetooth: hci4: command tx timeout [ 76.428474][ T51] Bluetooth: hci2: command tx timeout [ 76.436848][ T5832] Bluetooth: hci1: command tx timeout [ 76.439612][ T5836] Bluetooth: hci0: command tx timeout [ 77.163534][ T5948] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 77.252403][ T1166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.260262][ T1166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.321016][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.348520][ T6017] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.11'. [ 77.351050][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.364124][ T6008] Zero length message leads to an empty skb [ 77.533548][ T1166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.547729][ T1166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.610261][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.646454][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.715349][ T1166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.734612][ T1166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.742069][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.778899][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.928191][ T6028] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.5'. [ 77.979635][ T6028] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.5'. [ 78.881421][ T6061] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16'. [ 78.931619][ T6065] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.19'. [ 79.083425][ T6076] netlink: 'syz.1.20': attribute type 1 has an invalid length. [ 79.184483][ T6081] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17'. [ 80.067709][ T6116] netlink: 'syz.1.24': attribute type 13 has an invalid length. [ 80.112796][ T6116] netlink: 'syz.1.24': attribute type 17 has an invalid length. [ 80.216440][ T6124] netlink: 56 bytes leftover after parsing attributes in process `syz.2.26'. [ 80.561773][ T6113] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.569574][ T6113] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.966311][ T6113] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 80.996852][ T6113] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 81.312806][ T6116] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.322074][ T6116] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.351713][ T6116] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 81.427915][ T6146] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.465340][ T6146] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.566053][ T6172] netlink: 204 bytes leftover after parsing attributes in process `syz.2.30'. [ 81.616179][ T6146] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.634808][ T6176] syz.3.32 uses obsolete (PF_INET,SOCK_PACKET) [ 81.664223][ T6146] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.753250][ T6183] netlink: 4 bytes leftover after parsing attributes in process `syz.3.32'. [ 81.938599][ T6183] veth1_macvtap: left promiscuous mode [ 82.571615][ T6214] netlink: 'syz.2.36': attribute type 2 has an invalid length. [ 82.701201][ T6214] !: entered promiscuous mode [ 82.928158][ T6212] netlink: 'syz.2.36': attribute type 2 has an invalid length. [ 82.955733][ T6212] !: left promiscuous mode [ 83.004981][ T6220] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.38'. [ 83.415458][ T6223] warning: `syz.3.39' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 83.873416][ T6261] netlink: 204 bytes leftover after parsing attributes in process `syz.1.47'. [ 84.202609][ T6274] netlink: 16 bytes leftover after parsing attributes in process `syz.2.51'. [ 84.518598][ T6287] FAULT_INJECTION: forcing a failure. [ 84.518598][ T6287] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 84.551663][ T6287] CPU: 1 UID: 0 PID: 6287 Comm: syz.2.53 Not tainted syzkaller #0 PREEMPT(full) [ 84.551689][ T6287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 84.551706][ T6287] Call Trace: [ 84.551714][ T6287] [ 84.551722][ T6287] dump_stack_lvl+0xe8/0x150 [ 84.551757][ T6287] should_fail_ex+0x412/0x560 [ 84.551788][ T6287] _copy_to_user+0x31/0xb0 [ 84.551810][ T6287] simple_read_from_buffer+0xe1/0x170 [ 84.551839][ T6287] proc_fail_nth_read+0x1bb/0x230 [ 84.551867][ T6287] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 84.551895][ T6287] ? rw_verify_area+0x2a6/0x4d0 [ 84.551914][ T6287] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 84.551940][ T6287] vfs_read+0x20c/0xa70 [ 84.551961][ T6287] ? bpf_lsm_bpf+0x9/0x20 [ 84.551987][ T6287] ? __pfx_vfs_read+0x10/0x10 [ 84.552003][ T6287] ? __sys_bpf+0x66e/0x950 [ 84.552022][ T6287] ? __pfx___sys_bpf+0x10/0x10 [ 84.552036][ T6287] ? kmem_cache_free+0x187/0x630 [ 84.552072][ T6287] ksys_read+0x150/0x270 [ 84.552093][ T6287] ? __pfx_ksys_read+0x10/0x10 [ 84.552122][ T6287] do_syscall_64+0x14d/0xf80 [ 84.552141][ T6287] ? trace_irq_disable+0x3b/0x150 [ 84.552155][ T6287] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.552172][ T6287] ? clear_bhb_loop+0x40/0x90 [ 84.552192][ T6287] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.552207][ T6287] RIP: 0033:0x7f3faf95d04e [ 84.552231][ T6287] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 84.552243][ T6287] RSP: 002b:00007f3fb08a1fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 84.552261][ T6287] RAX: ffffffffffffffda RBX: 00007f3fb08a26c0 RCX: 00007f3faf95d04e [ 84.552272][ T6287] RDX: 000000000000000f RSI: 00007f3fb08a20a0 RDI: 0000000000000005 [ 84.552281][ T6287] RBP: 00007f3fb08a2090 R08: 0000000000000000 R09: 0000000000000000 [ 84.552291][ T6287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 84.552300][ T6287] R13: 00007f3fafc16038 R14: 00007f3fafc15fa0 R15: 00007ffd9131cd18 [ 84.552326][ T6287] [ 85.022134][ T6310] veth0_macvtap: entered allmulticast mode [ 85.034432][ T6310] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 85.109940][ T6314] netlink: 56 bytes leftover after parsing attributes in process `syz.1.59'. [ 85.187615][ T6318] netlink: 'syz.0.57': attribute type 2 has an invalid length. [ 85.196637][ T6318] netlink: 'syz.0.57': attribute type 2 has an invalid length. [ 85.302036][ T6318] macsec1: entered promiscuous mode [ 85.498688][ T6333] netlink: 96 bytes leftover after parsing attributes in process `syz.2.64'. [ 85.864913][ T51] Bluetooth: hci4: command tx timeout [ 85.913629][ T6347] netlink: 60 bytes leftover after parsing attributes in process `syz.4.69'. [ 85.965564][ T6349] netlink: 60 bytes leftover after parsing attributes in process `syz.4.69'. [ 86.017442][ T796] IPVS: starting estimator thread 0... [ 86.092783][ T6349] netlink: 12 bytes leftover after parsing attributes in process `syz.4.69'. [ 86.123629][ T6350] IPVS: using max 31 ests per chain, 74400 per kthread [ 86.685180][ T6382] netlink: 4 bytes leftover after parsing attributes in process `syz.4.83'. [ 86.722628][ T6354] netlink: 'syz.3.73': attribute type 4 has an invalid length. [ 86.779105][ T6378] netlink: 36 bytes leftover after parsing attributes in process `syz.3.73'. [ 86.814558][ T6387] FAULT_INJECTION: forcing a failure. [ 86.814558][ T6387] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 86.840115][ T24] cfg80211: failed to load regulatory.db [ 86.841201][ T6385] veth0_macvtap: entered allmulticast mode [ 86.874147][ T6387] CPU: 0 UID: 0 PID: 6387 Comm: syz.4.87 Not tainted syzkaller #0 PREEMPT(full) [ 86.874172][ T6387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 86.874182][ T6387] Call Trace: [ 86.874189][ T6387] [ 86.874196][ T6387] dump_stack_lvl+0xe8/0x150 [ 86.874224][ T6387] should_fail_ex+0x412/0x560 [ 86.874254][ T6387] _copy_from_user+0x2d/0xb0 [ 86.874276][ T6387] do_sock_getsockopt+0x200/0x7e0 [ 86.874307][ T6387] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 86.874353][ T6387] ? __fget_files+0x3a0/0x420 [ 86.874369][ T6387] ? __fget_files+0x2a/0x420 [ 86.874391][ T6387] __x64_sys_getsockopt+0x1a4/0x240 [ 86.874423][ T6387] do_syscall_64+0x14d/0xf80 [ 86.874443][ T6387] ? trace_irq_disable+0x3b/0x150 [ 86.874458][ T6387] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.874476][ T6387] ? clear_bhb_loop+0x40/0x90 [ 86.874496][ T6387] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.874512][ T6387] RIP: 0033:0x7fbd65b9c819 [ 86.874529][ T6387] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 86.874542][ T6387] RSP: 002b:00007fbd66ab2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 86.874560][ T6387] RAX: ffffffffffffffda RBX: 00007fbd65e15fa0 RCX: 00007fbd65b9c819 [ 86.874572][ T6387] RDX: 000000000000007b RSI: 0000000000000084 RDI: 0000000000000004 [ 86.874582][ T6387] RBP: 00007fbd66ab2090 R08: 0000200000000080 R09: 0000000000000000 [ 86.874593][ T6387] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 86.874604][ T6387] R13: 00007fbd65e16038 R14: 00007fbd65e15fa0 R15: 00007ffd09a7dea8 [ 86.874631][ T6387] [ 86.874973][ T6385] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 86.968565][ T6391] netlink: 4 bytes leftover after parsing attributes in process `syz.1.86'. [ 87.283389][ T6401] netlink: 'syz.3.90': attribute type 1 has an invalid length. [ 87.378396][ T6406] netlink: 28 bytes leftover after parsing attributes in process `syz.3.90'. [ 87.599508][ T6412] netlink: 8 bytes leftover after parsing attributes in process `syz.1.95'. [ 87.676509][ T6412] : entered promiscuous mode [ 87.693178][ T6417] IPVS: set_ctl: invalid protocol: 44 10.1.1.0:20001 [ 87.702072][ T6421] FAULT_INJECTION: forcing a failure. [ 87.702072][ T6421] name failslab, interval 1, probability 0, space 0, times 1 [ 87.715375][ T6421] CPU: 0 UID: 0 PID: 6421 Comm: syz.3.97 Not tainted syzkaller #0 PREEMPT(full) [ 87.715397][ T6421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 87.715406][ T6421] Call Trace: [ 87.715413][ T6421] [ 87.715420][ T6421] dump_stack_lvl+0xe8/0x150 [ 87.715448][ T6421] should_fail_ex+0x412/0x560 [ 87.715474][ T6421] should_failslab+0xa8/0x100 [ 87.715493][ T6421] ? sctp_chunkify+0x5a/0x260 [ 87.715513][ T6421] kmem_cache_alloc_noprof+0x87/0x650 [ 87.715532][ T6421] ? __pfx_sctp_rcv_ootb+0x10/0x10 [ 87.715556][ T6421] sctp_chunkify+0x5a/0x260 [ 87.715578][ T6421] sctp_rcv+0xeaf/0x17d0 [ 87.715616][ T6421] ? __pfx_sctp_rcv+0x10/0x10 [ 87.715638][ T6421] ? raw6_local_deliver+0x8f1/0x960 [ 87.715667][ T6421] ? __pfx_nf_nat_ipv6_fn+0x10/0x10 [ 87.715687][ T6421] ? raw6_local_deliver+0x116/0x960 [ 87.715710][ T6421] ? __pfx_sctp6_rcv+0x10/0x10 [ 87.715730][ T6421] sctp6_rcv+0x39/0x70 [ 87.715749][ T6421] ip6_protocol_deliver_rcu+0xe37/0x1610 [ 87.715794][ T6421] ip6_input_finish+0x191/0x370 [ 87.715821][ T6421] NF_HOOK+0x336/0x3c0 [ 87.715847][ T6421] ? __pfx_ip6_input_finish+0x10/0x10 [ 87.715871][ T6421] ? NF_HOOK+0x9e/0x3c0 [ 87.715892][ T6421] ? __pfx_NF_HOOK+0x10/0x10 [ 87.715917][ T6421] ? __pfx_ip6_input_finish+0x10/0x10 [ 87.715951][ T6421] ip6_input+0x16a/0x270 [ 87.715972][ T6421] ? ip6_input+0x23/0x270 [ 87.716009][ T6421] NF_HOOK+0x336/0x3c0 [ 87.716032][ T6421] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 87.716053][ T6421] ? NF_HOOK+0x9e/0x3c0 [ 87.716073][ T6421] ? __pfx_NF_HOOK+0x10/0x10 [ 87.716098][ T6421] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 87.716125][ T6421] ? netif_receive_skb+0x102/0xc50 [ 87.716147][ T6421] netif_receive_skb+0x278/0xc50 [ 87.716172][ T6421] ? __pfx_netif_receive_skb+0x10/0x10 [ 87.716190][ T6421] ? __lock_acquire+0x6b5/0x2cf0 [ 87.716217][ T6421] ? tun_rx_batched+0x185/0x790 [ 87.716240][ T6421] tun_rx_batched+0x1de/0x790 [ 87.716259][ T6421] ? __build_skb+0x62/0x440 [ 87.716286][ T6421] ? __pfx_tun_rx_batched+0x10/0x10 [ 87.716317][ T6421] ? tun_get_user+0x23c7/0x3ed0 [ 87.716337][ T6421] ? __local_bh_enable_ip+0xd0/0x130 [ 87.716362][ T6421] ? tun_get_user+0x26dc/0x3ed0 [ 87.716382][ T6421] tun_get_user+0x2aeb/0x3ed0 [ 87.716422][ T6421] ? aa_file_perm+0x50e/0x15e0 [ 87.716438][ T6421] ? __pfx_tun_get_user+0x10/0x10 [ 87.716457][ T6421] ? aa_file_perm+0x192/0x15e0 [ 87.716492][ T6421] ? ref_tracker_alloc+0x35c/0x4c0 [ 87.716511][ T6421] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 87.716531][ T6421] ? tun_get+0x1c/0x2f0 [ 87.716556][ T6421] ? tun_get+0x1c/0x2f0 [ 87.716575][ T6421] ? tun_get+0x1c/0x2f0 [ 87.716600][ T6421] tun_chr_write_iter+0x113/0x200 [ 87.716624][ T6421] vfs_write+0x61d/0xb90 [ 87.716648][ T6421] ? __pfx_vfs_write+0x10/0x10 [ 87.716676][ T6421] ? __fget_files+0x2a/0x420 [ 87.716709][ T6421] ksys_write+0x150/0x270 [ 87.716736][ T6421] ? __pfx_ksys_write+0x10/0x10 [ 87.716765][ T6421] do_syscall_64+0x14d/0xf80 [ 87.716785][ T6421] ? trace_irq_disable+0x3b/0x150 [ 87.716799][ T6421] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.716817][ T6421] ? clear_bhb_loop+0x40/0x90 [ 87.716839][ T6421] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.716855][ T6421] RIP: 0033:0x7fed6755d04e [ 87.716873][ T6421] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 87.716887][ T6421] RSP: 002b:00007fed68540fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 87.716905][ T6421] RAX: ffffffffffffffda RBX: 00007fed685416c0 RCX: 00007fed6755d04e [ 87.716918][ T6421] RDX: 000000000000004f RSI: 0000200000000100 RDI: 00000000000000c8 [ 87.716929][ T6421] RBP: 00007fed68541090 R08: 0000000000000000 R09: 0000000000000000 [ 87.716939][ T6421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 87.716949][ T6421] R13: 00007fed67816038 R14: 00007fed67815fa0 R15: 00007fffcb81e328 [ 87.716979][ T6421] [ 87.745616][ T6416] netlink: 116 bytes leftover after parsing attributes in process `syz.1.95'. [ 88.495415][ T6446] netlink: 8 bytes leftover after parsing attributes in process `syz.3.108'. [ 88.675921][ T6448] syz.3.108 (6448) used greatest stack depth: 15880 bytes left [ 88.779681][ T6460] FAULT_INJECTION: forcing a failure. [ 88.779681][ T6460] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 88.822010][ T6460] CPU: 1 UID: 0 PID: 6460 Comm: syz.2.114 Not tainted syzkaller #0 PREEMPT(full) [ 88.822031][ T6460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 88.822039][ T6460] Call Trace: [ 88.822045][ T6460] [ 88.822052][ T6460] dump_stack_lvl+0xe8/0x150 [ 88.822078][ T6460] should_fail_ex+0x412/0x560 [ 88.822107][ T6460] _copy_from_user+0x2d/0xb0 [ 88.822144][ T6460] sctp_getsockopt_scheduler+0xbe/0x520 [ 88.822166][ T6460] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 88.822190][ T6460] ? __pfx_sctp_getsockopt_scheduler+0x10/0x10 [ 88.822206][ T6460] ? sctp_getsockopt+0x12f/0xb90 [ 88.822229][ T6460] ? __local_bh_enable_ip+0xd0/0x130 [ 88.822253][ T6460] sctp_getsockopt+0xa7b/0xb90 [ 88.822271][ T6460] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 88.822289][ T6460] do_sock_getsockopt+0x51d/0x7e0 [ 88.822316][ T6460] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 88.822352][ T6460] ? __fget_files+0x3a0/0x420 [ 88.822367][ T6460] ? __fget_files+0x2a/0x420 [ 88.822385][ T6460] __x64_sys_getsockopt+0x1a4/0x240 [ 88.822412][ T6460] do_syscall_64+0x14d/0xf80 [ 88.822429][ T6460] ? trace_irq_disable+0x3b/0x150 [ 88.822443][ T6460] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.822461][ T6460] ? clear_bhb_loop+0x40/0x90 [ 88.822480][ T6460] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.822496][ T6460] RIP: 0033:0x7f3faf99c819 [ 88.822513][ T6460] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 88.822525][ T6460] RSP: 002b:00007f3fb08a2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 88.822541][ T6460] RAX: ffffffffffffffda RBX: 00007f3fafc15fa0 RCX: 00007f3faf99c819 [ 88.822552][ T6460] RDX: 000000000000007b RSI: 0000000000000084 RDI: 0000000000000004 [ 88.822561][ T6460] RBP: 00007f3fb08a2090 R08: 0000200000000080 R09: 0000000000000000 [ 88.822571][ T6460] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 88.822580][ T6460] R13: 00007f3fafc16038 R14: 00007f3fafc15fa0 R15: 00007ffd9131cd18 [ 88.822606][ T6460] [ 89.040487][ T6467] veth0_macvtap: entered allmulticast mode [ 89.070254][ T6462] Cannot find set identified by id 65534 to match [ 89.425532][ T6478] netlink: 4 bytes leftover after parsing attributes in process `syz.2.121'. [ 89.483362][ T6478] veth1_macvtap: left promiscuous mode [ 89.746968][ T6491] netlink: 8 bytes leftover after parsing attributes in process `syz.4.125'. [ 89.783287][ T6491] netlink: 4 bytes leftover after parsing attributes in process `syz.4.125'. [ 89.820727][ T6498] FAULT_INJECTION: forcing a failure. [ 89.820727][ T6498] name failslab, interval 1, probability 0, space 0, times 0 [ 89.852525][ T6498] CPU: 0 UID: 0 PID: 6498 Comm: syz.2.129 Not tainted syzkaller #0 PREEMPT(full) [ 89.852557][ T6498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 89.852568][ T6498] Call Trace: [ 89.852575][ T6498] [ 89.852583][ T6498] dump_stack_lvl+0xe8/0x150 [ 89.852612][ T6498] should_fail_ex+0x412/0x560 [ 89.852641][ T6498] should_failslab+0xa8/0x100 [ 89.852665][ T6498] __kmalloc_cache_noprof+0x88/0x660 [ 89.852685][ T6498] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 89.852705][ T6498] ? sctp_transport_new+0x7e/0x620 [ 89.852728][ T6498] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 89.852751][ T6498] sctp_transport_new+0x7e/0x620 [ 89.852903][ T6498] sctp_assoc_add_peer+0x259/0x13b0 [ 89.852928][ T6498] ? sctp_bind_addr_copy+0x380/0x3c0 [ 89.852953][ T6498] sctp_connect_new_asoc+0x329/0x6b0 [ 89.852980][ T6498] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 89.853009][ T6498] ? __local_bh_enable_ip+0xd0/0x130 [ 89.853028][ T6498] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 89.853049][ T6498] ? security_sctp_bind_connect+0x7e/0x2c0 [ 89.853075][ T6498] sctp_sendmsg+0x1528/0x2c10 [ 89.853111][ T6498] ? __pfx_sctp_sendmsg+0x10/0x10 [ 89.853135][ T6498] ? aa_sk_perm+0x6d5/0x900 [ 89.853167][ T6498] ? __pfx_aa_sk_perm+0x10/0x10 [ 89.853191][ T6498] ? sock_rps_record_flow+0x19/0x350 [ 89.853217][ T6498] ? inet_sendmsg+0x2f4/0x370 [ 89.853235][ T6498] ____sys_sendmsg+0x80a/0x9f0 [ 89.853267][ T6498] ? __pfx_____sys_sendmsg+0x10/0x10 [ 89.853298][ T6498] ? import_iovec+0x73/0xa0 [ 89.853320][ T6498] ___sys_sendmsg+0x2a5/0x360 [ 89.853347][ T6498] ? __pfx____sys_sendmsg+0x10/0x10 [ 89.853377][ T6498] ? kstrtouint+0x6e/0xe0 [ 89.853424][ T6498] ? __fget_files+0x2a/0x420 [ 89.853439][ T6498] ? __fget_files+0x3a0/0x420 [ 89.853464][ T6498] __sys_sendmmsg+0x27c/0x4e0 [ 89.853485][ T6498] ? __pfx___sys_sendmmsg+0x10/0x10 [ 89.853500][ T6498] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 89.853545][ T6498] ? ksys_write+0x242/0x270 [ 89.853567][ T6498] ? __pfx_ksys_write+0x10/0x10 [ 89.853593][ T6498] __x64_sys_sendmmsg+0xa0/0xc0 [ 89.853612][ T6498] do_syscall_64+0x14d/0xf80 [ 89.853631][ T6498] ? trace_irq_disable+0x3b/0x150 [ 89.853647][ T6498] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.853664][ T6498] ? clear_bhb_loop+0x40/0x90 [ 89.853685][ T6498] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.853702][ T6498] RIP: 0033:0x7f3faf99c819 [ 89.853720][ T6498] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 89.853733][ T6498] RSP: 002b:00007f3fb08a2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 89.853752][ T6498] RAX: ffffffffffffffda RBX: 00007f3fafc15fa0 RCX: 00007f3faf99c819 [ 89.853765][ T6498] RDX: 0000000000000001 RSI: 0000200000000780 RDI: 0000000000000003 [ 89.853854][ T6498] RBP: 00007f3fb08a2090 R08: 0000000000000000 R09: 0000000000000000 [ 89.853864][ T6498] R10: 0000000020048040 R11: 0000000000000246 R12: 0000000000000002 [ 89.853874][ T6498] R13: 00007f3fafc16038 R14: 00007f3fafc15fa0 R15: 00007ffd9131cd18 [ 89.853903][ T6498] [ 90.933779][ T6525] FAULT_INJECTION: forcing a failure. [ 90.933779][ T6525] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 90.968821][ T6525] CPU: 0 UID: 0 PID: 6525 Comm: syz.0.140 Not tainted syzkaller #0 PREEMPT(full) [ 90.968851][ T6525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 90.968861][ T6525] Call Trace: [ 90.968868][ T6525] [ 90.968875][ T6525] dump_stack_lvl+0xe8/0x150 [ 90.968905][ T6525] should_fail_ex+0x412/0x560 [ 90.968936][ T6525] _copy_to_user+0x31/0xb0 [ 90.968960][ T6525] simple_read_from_buffer+0xe1/0x170 [ 90.968989][ T6525] proc_fail_nth_read+0x1bb/0x230 [ 90.969017][ T6525] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 90.969045][ T6525] ? rw_verify_area+0x2a6/0x4d0 [ 90.969064][ T6525] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 90.969089][ T6525] vfs_read+0x20c/0xa70 [ 90.969106][ T6525] ? fdget_pos+0x246/0x320 [ 90.969127][ T6525] ? __pfx___mutex_lock+0x10/0x10 [ 90.969149][ T6525] ? __pfx_vfs_read+0x10/0x10 [ 90.969170][ T6525] ? __fget_files+0x2a/0x420 [ 90.969191][ T6525] ? __fget_files+0x3a0/0x420 [ 90.969206][ T6525] ? __fget_files+0x2a/0x420 [ 90.969230][ T6525] ksys_read+0x150/0x270 [ 90.969253][ T6525] ? __pfx_ksys_read+0x10/0x10 [ 90.969270][ T6525] ? fput+0xa0/0xd0 [ 90.969304][ T6525] do_syscall_64+0x14d/0xf80 [ 90.969323][ T6525] ? trace_irq_disable+0x3b/0x150 [ 90.969339][ T6525] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.969357][ T6525] ? clear_bhb_loop+0x40/0x90 [ 90.969379][ T6525] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.969396][ T6525] RIP: 0033:0x7f19ec15d04e [ 90.969413][ T6525] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 90.969427][ T6525] RSP: 002b:00007f19ed0c7fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 90.969446][ T6525] RAX: ffffffffffffffda RBX: 00007f19ed0c86c0 RCX: 00007f19ec15d04e [ 90.969458][ T6525] RDX: 000000000000000f RSI: 00007f19ed0c80a0 RDI: 0000000000000005 [ 90.969469][ T6525] RBP: 00007f19ed0c8090 R08: 0000000000000000 R09: 0000000000000000 [ 90.969480][ T6525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 90.969490][ T6525] R13: 00007f19ec416038 R14: 00007f19ec415fa0 R15: 00007ffe587e5fb8 [ 90.969524][ T6525] [ 91.393467][ T6534] FAULT_INJECTION: forcing a failure. [ 91.393467][ T6534] name failslab, interval 1, probability 0, space 0, times 0 [ 91.406548][ T6534] CPU: 0 UID: 0 PID: 6534 Comm: syz.4.145 Not tainted syzkaller #0 PREEMPT(full) [ 91.406572][ T6534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 91.406582][ T6534] Call Trace: [ 91.406590][ T6534] [ 91.406597][ T6534] dump_stack_lvl+0xe8/0x150 [ 91.406628][ T6534] should_fail_ex+0x412/0x560 [ 91.406659][ T6534] should_failslab+0xa8/0x100 [ 91.406684][ T6534] __kmalloc_noprof+0xe8/0x760 [ 91.406706][ T6534] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 91.406733][ T6534] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 91.406755][ T6534] ? kernel_text_address+0xa5/0xe0 [ 91.406780][ T6534] genl_family_rcv_msg_doit+0xd9/0x330 [ 91.406800][ T6534] ? __asan_memcpy+0x40/0x70 [ 91.406822][ T6534] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 91.406850][ T6534] ? apparmor_capable+0x126/0x170 [ 91.406873][ T6534] ? bpf_lsm_capable+0x9/0x20 [ 91.406903][ T6534] ? security_capable+0x7e/0x2c0 [ 91.406935][ T6534] genl_rcv_msg+0x61c/0x7a0 [ 91.406961][ T6534] ? __pfx_genl_rcv_msg+0x10/0x10 [ 91.406979][ T6534] ? __pfx_nl802154_pre_doit+0x10/0x10 [ 91.406996][ T6534] ? __pfx_nl802154_add_llsec_key+0x10/0x10 [ 91.407014][ T6534] ? __pfx_nl802154_post_doit+0x10/0x10 [ 91.407047][ T6534] netlink_rcv_skb+0x232/0x4b0 [ 91.407072][ T6534] ? __pfx_genl_rcv_msg+0x10/0x10 [ 91.407093][ T6534] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 91.407133][ T6534] ? down_read+0x272/0x2e0 [ 91.407153][ T6534] ? genl_rcv+0xd/0x40 [ 91.407174][ T6534] genl_rcv+0x28/0x40 [ 91.407191][ T6534] netlink_unicast+0x75c/0x8e0 [ 91.407225][ T6534] netlink_sendmsg+0x813/0xb40 [ 91.407259][ T6534] ? __pfx_netlink_sendmsg+0x10/0x10 [ 91.407286][ T6534] ? aa_sock_msg_perm+0xf1/0x1b0 [ 91.407305][ T6534] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 91.407329][ T6534] ____sys_sendmsg+0x972/0x9f0 [ 91.407365][ T6534] ? __pfx_____sys_sendmsg+0x10/0x10 [ 91.407399][ T6534] ? import_iovec+0x73/0xa0 [ 91.407424][ T6534] ___sys_sendmsg+0x2a5/0x360 [ 91.407455][ T6534] ? __pfx____sys_sendmsg+0x10/0x10 [ 91.407517][ T6534] ? __fget_files+0x2a/0x420 [ 91.407532][ T6534] ? __fget_files+0x3a0/0x420 [ 91.407564][ T6534] __x64_sys_sendmsg+0x1bd/0x2a0 [ 91.407592][ T6534] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 91.407627][ T6534] ? __pfx_ksys_write+0x10/0x10 [ 91.407659][ T6534] do_syscall_64+0x14d/0xf80 [ 91.407679][ T6534] ? trace_irq_disable+0x3b/0x150 [ 91.407694][ T6534] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.407712][ T6534] ? clear_bhb_loop+0x40/0x90 [ 91.407734][ T6534] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.407751][ T6534] RIP: 0033:0x7fbd65b9c819 [ 91.407768][ T6534] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 91.407782][ T6534] RSP: 002b:00007fbd66ab2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 91.407801][ T6534] RAX: ffffffffffffffda RBX: 00007fbd65e15fa0 RCX: 00007fbd65b9c819 [ 91.407814][ T6534] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000004 [ 91.407824][ T6534] RBP: 00007fbd66ab2090 R08: 0000000000000000 R09: 0000000000000000 [ 91.407835][ T6534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 91.407845][ T6534] R13: 00007fbd65e16038 R14: 00007fbd65e15fa0 R15: 00007ffd09a7dea8 [ 91.407875][ T6534] [ 91.747203][ T6540] netlink: 'syz.1.146': attribute type 1 has an invalid length. [ 91.839077][ T6547] __nla_validate_parse: 1 callbacks suppressed [ 91.839095][ T6547] netlink: 8 bytes leftover after parsing attributes in process `syz.2.147'. [ 91.901053][ T6542] team0 (unregistering): Port device team_slave_0 removed [ 91.963882][ T6542] team0 (unregistering): Port device team_slave_1 removed [ 92.031142][ T6555] netlink: 16 bytes leftover after parsing attributes in process `syz.0.151'. [ 92.055030][ T6546] veth0_macvtap: entered allmulticast mode [ 92.061090][ T6546] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 92.734034][ T6577] bond1: option mode: invalid value (254) [ 92.751696][ T6577] bond1 (unregistering): Released all slaves [ 93.056661][ T6599] netlink: 24 bytes leftover after parsing attributes in process `syz.2.167'. [ 93.079067][ T6592] lo speed is unknown, defaulting to 1000 [ 93.088053][ T6592] lo speed is unknown, defaulting to 1000 [ 93.185355][ T6592] lo speed is unknown, defaulting to 1000 [ 93.195597][ T6599] netlink: 4 bytes leftover after parsing attributes in process `syz.2.167'. [ 93.230928][ T6605] netlink: 12 bytes leftover after parsing attributes in process `syz.3.169'. [ 93.246541][ T6592] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 93.296565][ T6592] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 93.410448][ T6592] lo speed is unknown, defaulting to 1000 [ 93.452933][ T6610] FAULT_INJECTION: forcing a failure. [ 93.452933][ T6610] name failslab, interval 1, probability 0, space 0, times 0 [ 93.456407][ T6592] lo speed is unknown, defaulting to 1000 [ 93.467155][ T6610] CPU: 0 UID: 0 PID: 6610 Comm: syz.3.170 Not tainted syzkaller #0 PREEMPT(full) [ 93.467179][ T6610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 93.467188][ T6610] Call Trace: [ 93.467195][ T6610] [ 93.467208][ T6610] dump_stack_lvl+0xe8/0x150 [ 93.467237][ T6610] should_fail_ex+0x412/0x560 [ 93.467267][ T6610] should_failslab+0xa8/0x100 [ 93.467292][ T6610] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 93.467313][ T6610] ? __alloc_skb+0x1d0/0x7d0 [ 93.467334][ T6610] ? __local_bh_enable_ip+0xd0/0x130 [ 93.467359][ T6610] __alloc_skb+0x1d0/0x7d0 [ 93.467381][ T6610] ? netlink_ack_tlv_len+0x6c/0x210 [ 93.467406][ T6610] netlink_ack+0x146/0xa50 [ 93.467426][ T6610] ? __pfx_genl_rcv_msg+0x10/0x10 [ 93.467443][ T6610] ? __pfx_nl802154_pre_doit+0x10/0x10 [ 93.467467][ T6610] ? __pfx_nl802154_post_doit+0x10/0x10 [ 93.467497][ T6610] netlink_rcv_skb+0x2b6/0x4b0 [ 93.467520][ T6610] ? __pfx_genl_rcv_msg+0x10/0x10 [ 93.467539][ T6610] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 93.467574][ T6610] ? down_read+0x272/0x2e0 [ 93.467594][ T6610] ? genl_rcv+0xd/0x40 [ 93.467613][ T6610] genl_rcv+0x28/0x40 [ 93.467629][ T6610] netlink_unicast+0x75c/0x8e0 [ 93.467660][ T6610] netlink_sendmsg+0x813/0xb40 [ 93.467691][ T6610] ? __pfx_netlink_sendmsg+0x10/0x10 [ 93.467716][ T6610] ? aa_sock_msg_perm+0xf1/0x1b0 [ 93.467734][ T6610] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 93.467756][ T6610] ____sys_sendmsg+0x972/0x9f0 [ 93.467789][ T6610] ? __pfx_____sys_sendmsg+0x10/0x10 [ 93.467821][ T6610] ? import_iovec+0x73/0xa0 [ 93.467844][ T6610] ___sys_sendmsg+0x2a5/0x360 [ 93.467873][ T6610] ? __pfx____sys_sendmsg+0x10/0x10 [ 93.467927][ T6610] ? __fget_files+0x2a/0x420 [ 93.467942][ T6610] ? __fget_files+0x3a0/0x420 [ 93.467967][ T6610] __x64_sys_sendmsg+0x1bd/0x2a0 [ 93.467993][ T6610] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 93.468026][ T6610] ? __pfx_ksys_write+0x10/0x10 [ 93.468056][ T6610] do_syscall_64+0x14d/0xf80 [ 93.468076][ T6610] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.468092][ T6610] ? clear_bhb_loop+0x40/0x90 [ 93.468113][ T6610] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.468129][ T6610] RIP: 0033:0x7fed6759c819 [ 93.468145][ T6610] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.468158][ T6610] RSP: 002b:00007fed68541028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 93.468176][ T6610] RAX: ffffffffffffffda RBX: 00007fed67815fa0 RCX: 00007fed6759c819 [ 93.468188][ T6610] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000004 [ 93.468198][ T6610] RBP: 00007fed68541090 R08: 0000000000000000 R09: 0000000000000000 [ 93.468208][ T6610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 93.468217][ T6610] R13: 00007fed67816038 R14: 00007fed67815fa0 R15: 00007fffcb81e328 [ 93.468244][ T6610] [ 93.843807][ T6592] lo speed is unknown, defaulting to 1000 [ 93.851581][ T6592] lo speed is unknown, defaulting to 1000 [ 93.878436][ T6616] netlink: 4 bytes leftover after parsing attributes in process `syz.4.172'. [ 93.889414][ T6592] lo speed is unknown, defaulting to 1000 [ 93.920812][ T6616] veth1_macvtap: left promiscuous mode [ 94.001986][ T24] IPVS: starting estimator thread 0... [ 94.010037][ T6620] netlink: 28 bytes leftover after parsing attributes in process `syz.3.174'. [ 94.052583][ T6626] netlink: 'syz.0.176': attribute type 1 has an invalid length. [ 94.104276][ T6623] IPVS: using max 29 ests per chain, 69600 per kthread [ 94.221822][ T6633] bond1: (slave geneve2): making interface the new active one [ 94.231809][ T6633] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 94.241605][ T6145] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 94.272589][ T6145] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 94.320360][ T6639] netlink: 'syz.2.181': attribute type 10 has an invalid length. [ 94.349232][ T6145] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 94.376617][ T6639] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 94.432727][ T6145] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 94.715232][ T6660] netlink: 8 bytes leftover after parsing attributes in process `syz.0.187'. [ 95.063505][ T6678] netdevsim netdevsim4: Direct firmware load for . failed with error -2 [ 95.114082][ T6678] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 95.225089][ T6683] netlink: 4 bytes leftover after parsing attributes in process `syz.0.193'. [ 95.503992][ T6694] netlink: zone id is out of range [ 95.509419][ T6694] netlink: del zone limit has 8 unknown bytes [ 95.616918][ T6697] netlink: 'syz.0.199': attribute type 7 has an invalid length. [ 95.632569][ T6697] netlink: 148 bytes leftover after parsing attributes in process `syz.0.199'. [ 95.665847][ T6702] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 95.758718][ T6706] netlink: 'syz.0.203': attribute type 1 has an invalid length. [ 95.919329][ T6714] netlink: 'syz.2.204': attribute type 10 has an invalid length. [ 96.233504][ T6731] Cannot find set identified by id 65534 to match [ 96.381560][ T6740] FAULT_INJECTION: forcing a failure. [ 96.381560][ T6740] name failslab, interval 1, probability 0, space 0, times 0 [ 96.456941][ T6740] CPU: 1 UID: 0 PID: 6740 Comm: syz.1.216 Not tainted syzkaller #0 PREEMPT(full) [ 96.456986][ T6740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 96.456996][ T6740] Call Trace: [ 96.457003][ T6740] [ 96.457010][ T6740] dump_stack_lvl+0xe8/0x150 [ 96.457038][ T6740] should_fail_ex+0x412/0x560 [ 96.457069][ T6740] should_failslab+0xa8/0x100 [ 96.457094][ T6740] __kmalloc_cache_noprof+0x88/0x660 [ 96.457114][ T6740] ? __sctp_v6_cmp_addr+0x1e6/0x510 [ 96.457134][ T6740] ? sctp_add_bind_addr+0x8c/0x370 [ 96.457159][ T6740] sctp_add_bind_addr+0x8c/0x370 [ 96.457190][ T6740] sctp_copy_local_addr_list+0x314/0x4f0 [ 96.457218][ T6740] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 96.457237][ T6740] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 96.457259][ T6740] ? sctp_v6_is_any+0x64/0x80 [ 96.457280][ T6740] ? sctp_copy_one_addr+0x93/0x360 [ 96.457302][ T6740] sctp_bind_addr_copy+0xb3/0x3c0 [ 96.457322][ T6740] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 96.457351][ T6740] sctp_connect_new_asoc+0x2ff/0x6b0 [ 96.457378][ T6740] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 96.457407][ T6740] ? __local_bh_enable_ip+0xd0/0x130 [ 96.457428][ T6740] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 96.457448][ T6740] ? security_sctp_bind_connect+0x7e/0x2c0 [ 96.457474][ T6740] sctp_sendmsg+0x1528/0x2c10 [ 96.457510][ T6740] ? __pfx_sctp_sendmsg+0x10/0x10 [ 96.457536][ T6740] ? aa_sk_perm+0x6d5/0x900 [ 96.457568][ T6740] ? __pfx_aa_sk_perm+0x10/0x10 [ 96.457595][ T6740] ? sock_rps_record_flow+0x19/0x350 [ 96.457621][ T6740] ? inet_sendmsg+0x2f4/0x370 [ 96.457642][ T6740] ____sys_sendmsg+0x80a/0x9f0 [ 96.457675][ T6740] ? __pfx_____sys_sendmsg+0x10/0x10 [ 96.457706][ T6740] ? import_iovec+0x73/0xa0 [ 96.457728][ T6740] ___sys_sendmsg+0x2a5/0x360 [ 96.457755][ T6740] ? __pfx____sys_sendmsg+0x10/0x10 [ 96.457785][ T6740] ? kstrtouint+0x6e/0xe0 [ 96.457831][ T6740] ? __fget_files+0x2a/0x420 [ 96.457845][ T6740] ? __fget_files+0x3a0/0x420 [ 96.457870][ T6740] __sys_sendmmsg+0x27c/0x4e0 [ 96.457889][ T6740] ? __pfx___sys_sendmmsg+0x10/0x10 [ 96.457903][ T6740] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 96.457948][ T6740] ? ksys_write+0x242/0x270 [ 96.457969][ T6740] ? __pfx_ksys_write+0x10/0x10 [ 96.457994][ T6740] __x64_sys_sendmmsg+0xa0/0xc0 [ 96.458014][ T6740] do_syscall_64+0x14d/0xf80 [ 96.458033][ T6740] ? trace_irq_disable+0x3b/0x150 [ 96.458048][ T6740] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.458066][ T6740] ? clear_bhb_loop+0x40/0x90 [ 96.458087][ T6740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.458104][ T6740] RIP: 0033:0x7f506559c819 [ 96.458120][ T6740] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.458134][ T6740] RSP: 002b:00007f5066515028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 96.458152][ T6740] RAX: ffffffffffffffda RBX: 00007f5065815fa0 RCX: 00007f506559c819 [ 96.458165][ T6740] RDX: 0000000000000001 RSI: 0000200000000780 RDI: 0000000000000003 [ 96.458175][ T6740] RBP: 00007f5066515090 R08: 0000000000000000 R09: 0000000000000000 [ 96.458193][ T6740] R10: 0000000020048040 R11: 0000000000000246 R12: 0000000000000002 [ 96.458203][ T6740] R13: 00007f5065816038 R14: 00007f5065815fa0 R15: 00007ffe3f638898 [ 96.458233][ T6740] [ 96.800794][ T6742] xt_CT: You must specify a L4 protocol and not use inversions on it [ 97.280573][ T6766] __nla_validate_parse: 6 callbacks suppressed [ 97.280590][ T6766] netlink: 8 bytes leftover after parsing attributes in process `syz.1.222'. [ 97.331735][ T6764] syzkaller0: entered promiscuous mode [ 97.347999][ T6764] syzkaller0: entered allmulticast mode [ 97.369492][ T6766] ip6gretap1: entered allmulticast mode [ 97.501188][ T6769] netlink: 124 bytes leftover after parsing attributes in process `syz.1.223'. [ 97.514697][ T6769] netlink: 12 bytes leftover after parsing attributes in process `syz.1.223'. [ 98.580652][ T6771] bond1: (slave veth3): Enslaving as an active interface with an up link [ 98.762118][ T6776] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 98.819097][ T6781] netlink: 276 bytes leftover after parsing attributes in process `syz.3.226'. [ 99.301244][ T6796] lo speed is unknown, defaulting to 1000 [ 99.714950][ T6806] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.234'. [ 100.466010][ T6840] netlink: 'syz.2.248': attribute type 5 has an invalid length. [ 100.476401][ T6843] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 101.187756][ T6888] Cannot find set identified by id 65534 to match [ 101.340668][ T6892] netlink: 4 bytes leftover after parsing attributes in process `syz.0.270'. [ 102.083425][ T6925] FAULT_INJECTION: forcing a failure. [ 102.083425][ T6925] name failslab, interval 1, probability 0, space 0, times 0 [ 102.125316][ T6925] CPU: 0 UID: 0 PID: 6925 Comm: syz.1.278 Not tainted syzkaller #0 PREEMPT(full) [ 102.125340][ T6925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 102.125351][ T6925] Call Trace: [ 102.125358][ T6925] [ 102.125365][ T6925] dump_stack_lvl+0xe8/0x150 [ 102.125395][ T6925] should_fail_ex+0x412/0x560 [ 102.125426][ T6925] should_failslab+0xa8/0x100 [ 102.125451][ T6925] __kmalloc_cache_noprof+0x88/0x660 [ 102.125471][ T6925] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 102.125491][ T6925] ? sctp_transport_new+0x7e/0x620 [ 102.125514][ T6925] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 102.125537][ T6925] sctp_transport_new+0x7e/0x620 [ 102.125565][ T6925] sctp_assoc_add_peer+0x259/0x13b0 [ 102.125590][ T6925] ? sctp_bind_addr_copy+0x380/0x3c0 [ 102.125629][ T6925] sctp_connect_new_asoc+0x329/0x6b0 [ 102.125655][ T6925] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 102.125684][ T6925] ? __local_bh_enable_ip+0xd0/0x130 [ 102.125705][ T6925] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 102.125727][ T6925] ? security_sctp_bind_connect+0x7e/0x2c0 [ 102.125753][ T6925] sctp_sendmsg+0x1528/0x2c10 [ 102.125789][ T6925] ? __pfx_sctp_sendmsg+0x10/0x10 [ 102.125815][ T6925] ? aa_sk_perm+0x6d5/0x900 [ 102.125847][ T6925] ? __pfx_aa_sk_perm+0x10/0x10 [ 102.125873][ T6925] ? sock_rps_record_flow+0x19/0x350 [ 102.125901][ T6925] ? inet_sendmsg+0x2f4/0x370 [ 102.125921][ T6925] ____sys_sendmsg+0x80a/0x9f0 [ 102.125955][ T6925] ? __pfx_____sys_sendmsg+0x10/0x10 [ 102.125989][ T6925] ? import_iovec+0x73/0xa0 [ 102.126013][ T6925] ___sys_sendmsg+0x2a5/0x360 [ 102.126044][ T6925] ? __pfx____sys_sendmsg+0x10/0x10 [ 102.126074][ T6925] ? kstrtouint+0x6e/0xe0 [ 102.126124][ T6925] ? __fget_files+0x2a/0x420 [ 102.126139][ T6925] ? __fget_files+0x3a0/0x420 [ 102.126165][ T6925] __sys_sendmmsg+0x27c/0x4e0 [ 102.126188][ T6925] ? __pfx___sys_sendmmsg+0x10/0x10 [ 102.126203][ T6925] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 102.126250][ T6925] ? ksys_write+0x242/0x270 [ 102.126272][ T6925] ? __pfx_ksys_write+0x10/0x10 [ 102.126297][ T6925] __x64_sys_sendmmsg+0xa0/0xc0 [ 102.126316][ T6925] do_syscall_64+0x14d/0xf80 [ 102.126335][ T6925] ? trace_irq_disable+0x3b/0x150 [ 102.126349][ T6925] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.126365][ T6925] ? clear_bhb_loop+0x40/0x90 [ 102.126385][ T6925] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.126402][ T6925] RIP: 0033:0x7f506559c819 [ 102.126419][ T6925] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.126431][ T6925] RSP: 002b:00007f5066515028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 102.126448][ T6925] RAX: ffffffffffffffda RBX: 00007f5065815fa0 RCX: 00007f506559c819 [ 102.126459][ T6925] RDX: 0000000000000001 RSI: 0000200000000780 RDI: 0000000000000003 [ 102.126468][ T6925] RBP: 00007f5066515090 R08: 0000000000000000 R09: 0000000000000000 [ 102.126477][ T6925] R10: 0000000020048040 R11: 0000000000000246 R12: 0000000000000002 [ 102.126487][ T6925] R13: 00007f5065816038 R14: 00007f5065815fa0 R15: 00007ffe3f638898 [ 102.126514][ T6925] [ 102.235874][ T6927] lo speed is unknown, defaulting to 1000 [ 102.467384][ T6933] netlink: 4 bytes leftover after parsing attributes in process `syz.4.279'. [ 102.682054][ T6942] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.282'. [ 102.825612][ T6950] netlink: 'syz.1.281': attribute type 5 has an invalid length. [ 103.145678][ T6955] lo speed is unknown, defaulting to 1000 [ 103.266819][ T6962] lo speed is unknown, defaulting to 1000 [ 103.285716][ T6965] netlink: 16 bytes leftover after parsing attributes in process `syz.3.287'. [ 104.301929][ T6997] netlink: 8 bytes leftover after parsing attributes in process `syz.1.299'. [ 104.372116][ T6997] netlink: 4 bytes leftover after parsing attributes in process `syz.1.299'. [ 104.445857][ T7004] netlink: 'syz.3.300': attribute type 5 has an invalid length. [ 104.526571][ T7010] netlink: 'syz.4.303': attribute type 22 has an invalid length. [ 104.535446][ T7010] netlink: 'syz.4.303': attribute type 1 has an invalid length. [ 104.543203][ T7010] netlink: 224 bytes leftover after parsing attributes in process `syz.4.303'. [ 104.841817][ T7020] netlink: 12 bytes leftover after parsing attributes in process `syz.2.305'. [ 104.936751][ T7014] syz.2.305: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 104.970429][ T7014] CPU: 0 UID: 0 PID: 7014 Comm: syz.2.305 Not tainted syzkaller #0 PREEMPT(full) [ 104.970457][ T7014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 104.970469][ T7014] Call Trace: [ 104.970478][ T7014] [ 104.970486][ T7014] dump_stack_lvl+0xe8/0x150 [ 104.970532][ T7014] warn_alloc+0x249/0x340 [ 104.970559][ T7014] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 104.970587][ T7014] ? __pfx_warn_alloc+0x10/0x10 [ 104.970617][ T7014] ? kasan_save_track+0x4f/0x80 [ 104.970638][ T7014] ? kasan_save_track+0x3e/0x80 [ 104.970659][ T7014] ? __kasan_kmalloc+0x93/0xb0 [ 104.970681][ T7014] ? __kmalloc_cache_noprof+0x31c/0x660 [ 104.970703][ T7014] ? xskq_create+0x56/0x170 [ 104.970722][ T7014] ? xsk_setsockopt+0x54c/0x990 [ 104.970737][ T7014] ? do_sock_setsockopt+0x17c/0x1b0 [ 104.970763][ T7014] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 104.970789][ T7014] ? do_syscall_64+0x14d/0xf80 [ 104.970813][ T7014] __vmalloc_node_range_noprof+0x132/0x1730 [ 104.970863][ T7014] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 104.970890][ T7014] ? __kasan_kmalloc+0x93/0xb0 [ 104.970919][ T7014] vmalloc_user_noprof+0xad/0xe0 [ 104.970942][ T7014] ? xskq_create+0xbf/0x170 [ 104.970963][ T7014] xskq_create+0xbf/0x170 [ 104.970987][ T7014] xsk_init_queue+0x8a/0xe0 [ 104.971010][ T7014] xsk_setsockopt+0x54c/0x990 [ 104.971032][ T7014] ? __pfx_xsk_setsockopt+0x10/0x10 [ 104.971049][ T7014] ? __pfx_aa_sk_perm+0x10/0x10 [ 104.971081][ T7014] ? aa_sock_opt_perm+0xff/0x1a0 [ 104.971104][ T7014] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 104.971128][ T7014] ? __pfx_xsk_setsockopt+0x10/0x10 [ 104.971147][ T7014] do_sock_setsockopt+0x17c/0x1b0 [ 104.971179][ T7014] __x64_sys_setsockopt+0x13d/0x1b0 [ 104.971211][ T7014] do_syscall_64+0x14d/0xf80 [ 104.971232][ T7014] ? trace_irq_disable+0x3b/0x150 [ 104.971248][ T7014] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.971268][ T7014] ? clear_bhb_loop+0x40/0x90 [ 104.971292][ T7014] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.971312][ T7014] RIP: 0033:0x7f3faf99c819 [ 104.971331][ T7014] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.971347][ T7014] RSP: 002b:00007f3fb08a2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 104.971367][ T7014] RAX: ffffffffffffffda RBX: 00007f3fafc15fa0 RCX: 00007f3faf99c819 [ 104.971382][ T7014] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000c [ 104.971395][ T7014] RBP: 00007f3fafa32c91 R08: 0000000000000004 R09: 0000000000000000 [ 104.971408][ T7014] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 104.971420][ T7014] R13: 00007f3fafc16038 R14: 00007f3fafc15fa0 R15: 00007ffd9131cd18 [ 104.971452][ T7014] [ 104.971527][ T7014] Mem-Info: [ 105.163360][ T7030] netlink: zone id is out of range [ 105.166487][ T7014] active_anon:6240 inactive_anon:0 isolated_anon:0 [ 105.166487][ T7014] active_file:3414 inactive_file:39948 isolated_file:0 [ 105.166487][ T7014] unevictable:768 dirty:107 writeback:0 [ 105.166487][ T7014] slab_reclaimable:10665 slab_unreclaimable:111814 [ 105.166487][ T7014] mapped:29506 shmem:1838 pagetables:1245 [ 105.166487][ T7014] sec_pagetables:0 bounce:0 [ 105.166487][ T7014] kernel_misc_reclaimable:0 [ 105.166487][ T7014] free:1310889 free_pcp:10545 free_cma:0 [ 105.171665][ T7030] netlink: zone id is out of range [ 105.178547][ T7014] Node 0 active_anon:24960kB inactive_anon:0kB active_file:13656kB inactive_file:159592kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118024kB dirty:428kB writeback:0kB shmem:5816kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12504kB pagetables:4808kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 105.223861][ T7030] netlink: zone id is out of range [ 105.231117][ T7014] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:172kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 105.263352][ T7030] netlink: zone id is out of range [ 105.305938][ T7014] Node 0 [ 105.332995][ T7030] netlink: zone id is out of range [ 105.346106][ T7014] DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 105.433967][ T7030] netlink: zone id is out of range [ 105.439131][ T7030] netlink: zone id is out of range [ 105.444530][ T7030] netlink: zone id is out of range [ 105.449685][ T7014] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 105.455939][ T7030] netlink: zone id is out of range [ 105.461276][ T7030] netlink: zone id is out of range [ 105.467332][ T7014] Node 0 DMA32 free:1293600kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24960kB inactive_anon:0kB active_file:13656kB inactive_file:159592kB unevictable:1536kB writepending:428kB zspages:0kB present:3129332kB managed:2552060kB mlocked:0kB bounce:0kB free_pcp:43440kB local_pcp:20568kB free_cma:0kB [ 105.524263][ T7014] lowmem_reserve[]: 0 0 0 0 0 [ 105.529227][ T7014] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:868kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 105.576499][ T7014] lowmem_reserve[]: 0 0 0 0 0 [ 105.581498][ T7014] Node 1 Normal free:3933496kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 105.619776][ T7014] lowmem_reserve[]: 0 0 0 0 0 [ 105.632954][ T7014] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 105.647331][ T7014] Node 0 DMA32: 2453*4kB (UME) 1174*8kB (UME) 112*16kB (UME) 522*32kB (UME) 126*64kB (UME) 32*128kB (UME) 26*256kB (UM) 61*512kB (UM) 33*1024kB (UME) 9*2048kB (U) 282*4096kB (UM) = 1295044kB [ 105.667142][ T7014] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 105.682353][ T7014] Node 1 Normal: 0*4kB 5*8kB (UM) 9*16kB (UM) 10*32kB (UM) 5*64kB (UM) 6*128kB (UM) 5*256kB (UM) 3*512kB (UM) 1*1024kB (M) 2*2048kB (U) 958*4096kB (M) = 3933496kB [ 105.701024][ T7014] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 105.714731][ T7014] Node 0 hugepages_total=6 hugepages_free=0 hugepages_surp=4 hugepages_size=2048kB [ 105.728898][ T7014] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 105.739755][ T7014] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 105.749762][ T7014] 45196 total pagecache pages [ 105.779909][ T7014] 0 pages in swap cache [ 105.786177][ T7014] Free swap = 124996kB [ 105.800722][ T7014] Total swap = 124996kB [ 105.810858][ T7014] 2097051 pages RAM [ 105.820740][ T7014] 0 pages HighMem/MovableOnly [ 105.830151][ T7014] 427204 pages reserved [ 105.840541][ T7014] 0 pages cma reserved [ 108.824116][ T7044] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 109.022989][ T7101] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.328'. [ 110.009600][ T7150] lo speed is unknown, defaulting to 1000 [ 110.048715][ T7152] FAULT_INJECTION: forcing a failure. [ 110.048715][ T7152] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 110.098809][ T7152] CPU: 1 UID: 0 PID: 7152 Comm: syz.2.345 Not tainted syzkaller #0 PREEMPT(full) [ 110.098836][ T7152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 110.098846][ T7152] Call Trace: [ 110.098853][ T7152] [ 110.098859][ T7152] dump_stack_lvl+0xe8/0x150 [ 110.098889][ T7152] should_fail_ex+0x412/0x560 [ 110.098920][ T7152] _copy_from_user+0x2d/0xb0 [ 110.098941][ T7152] __sys_bpf+0x229/0x950 [ 110.098959][ T7152] ? __pfx___sys_bpf+0x10/0x10 [ 110.098997][ T7152] ? ksys_write+0x242/0x270 [ 110.099018][ T7152] ? __pfx_ksys_write+0x10/0x10 [ 110.099043][ T7152] __x64_sys_bpf+0x7c/0x90 [ 110.099067][ T7152] do_syscall_64+0x14d/0xf80 [ 110.099084][ T7152] ? trace_irq_disable+0x3b/0x150 [ 110.099099][ T7152] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.099115][ T7152] ? clear_bhb_loop+0x40/0x90 [ 110.099134][ T7152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.099150][ T7152] RIP: 0033:0x7f3faf99c819 [ 110.099167][ T7152] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 110.099180][ T7152] RSP: 002b:00007f3fb08a2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 110.099198][ T7152] RAX: ffffffffffffffda RBX: 00007f3fafc15fa0 RCX: 00007f3faf99c819 [ 110.099210][ T7152] RDX: 0000000000000050 RSI: 0000200000000440 RDI: 000000000000000a [ 110.099220][ T7152] RBP: 00007f3fb08a2090 R08: 0000000000000000 R09: 0000000000000000 [ 110.099229][ T7152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 110.099239][ T7152] R13: 00007f3fafc16038 R14: 00007f3fafc15fa0 R15: 00007ffd9131cd18 [ 110.099266][ T7152] [ 110.293234][ T7156] netlink: 12 bytes leftover after parsing attributes in process `syz.3.347'. [ 110.433202][ T7164] netlink: 592 bytes leftover after parsing attributes in process `syz.2.350'. [ 110.443932][ T7164] netlink: 'syz.2.350': attribute type 1 has an invalid length. [ 110.517945][ T7156] netlink: 'syz.3.347': attribute type 5 has an invalid length. [ 110.534138][ T7164] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 111.265834][ T7204] gretap1: entered promiscuous mode [ 111.423530][ T5905] IPVS: starting estimator thread 0... [ 111.513077][ T7220] IPVS: using max 34 ests per chain, 81600 per kthread [ 111.553135][ T7225] FAULT_INJECTION: forcing a failure. [ 111.553135][ T7225] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 111.568526][ T7225] CPU: 1 UID: 0 PID: 7225 Comm: syz.4.366 Not tainted syzkaller #0 PREEMPT(full) [ 111.568551][ T7225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 111.568562][ T7225] Call Trace: [ 111.568568][ T7225] [ 111.568576][ T7225] dump_stack_lvl+0xe8/0x150 [ 111.568615][ T7225] should_fail_ex+0x412/0x560 [ 111.568646][ T7225] _copy_to_user+0x31/0xb0 [ 111.568670][ T7225] simple_read_from_buffer+0xe1/0x170 [ 111.568700][ T7225] proc_fail_nth_read+0x1bb/0x230 [ 111.568728][ T7225] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 111.568756][ T7225] ? rw_verify_area+0x2a6/0x4d0 [ 111.568775][ T7225] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 111.568801][ T7225] vfs_read+0x20c/0xa70 [ 111.568817][ T7225] ? __local_bh_enable_ip+0xd0/0x130 [ 111.568838][ T7225] ? fdget_pos+0x246/0x320 [ 111.568859][ T7225] ? __pfx___mutex_lock+0x10/0x10 [ 111.568881][ T7225] ? __pfx_vfs_read+0x10/0x10 [ 111.568902][ T7225] ? __fget_files+0x2a/0x420 [ 111.568922][ T7225] ? __fget_files+0x3a0/0x420 [ 111.568937][ T7225] ? __fget_files+0x2a/0x420 [ 111.568962][ T7225] ksys_read+0x150/0x270 [ 111.568983][ T7225] ? __pfx_ksys_read+0x10/0x10 [ 111.569014][ T7225] do_syscall_64+0x14d/0xf80 [ 111.569033][ T7225] ? trace_irq_disable+0x3b/0x150 [ 111.569049][ T7225] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.569067][ T7225] ? clear_bhb_loop+0x40/0x90 [ 111.569095][ T7225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.569113][ T7225] RIP: 0033:0x7fbd65b5d04e [ 111.569130][ T7225] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 111.569144][ T7225] RSP: 002b:00007fbd66ab1fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 111.569162][ T7225] RAX: ffffffffffffffda RBX: 00007fbd66ab26c0 RCX: 00007fbd65b5d04e [ 111.569174][ T7225] RDX: 000000000000000f RSI: 00007fbd66ab20a0 RDI: 0000000000000003 [ 111.569185][ T7225] RBP: 00007fbd66ab2090 R08: 0000000000000000 R09: 0000000000000000 [ 111.569196][ T7225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 111.569206][ T7225] R13: 00007fbd65e16038 R14: 00007fbd65e15fa0 R15: 00007ffd09a7dea8 [ 111.569235][ T7225] [ 112.149454][ T7241] netlink: 'syz.2.371': attribute type 2 has an invalid length. [ 112.170524][ T7241] netlink: 'syz.2.371': attribute type 1 has an invalid length. [ 112.288374][ T7248] netlink: 4 bytes leftover after parsing attributes in process `syz.4.373'. [ 114.178988][ T7204] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 114.373754][ T7272] FAULT_INJECTION: forcing a failure. [ 114.373754][ T7272] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 114.420127][ T7272] CPU: 0 UID: 0 PID: 7272 Comm: syz.3.376 Not tainted syzkaller #0 PREEMPT(full) [ 114.420151][ T7272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 114.420161][ T7272] Call Trace: [ 114.420168][ T7272] [ 114.420176][ T7272] dump_stack_lvl+0xe8/0x150 [ 114.420206][ T7272] should_fail_ex+0x412/0x560 [ 114.420237][ T7272] _copy_from_user+0x2d/0xb0 [ 114.420259][ T7272] ___sys_recvmsg+0x175/0x590 [ 114.420280][ T7272] ? __pfx____sys_recvmsg+0x10/0x10 [ 114.420319][ T7272] ? __fget_files+0x3a0/0x420 [ 114.420346][ T7272] do_recvmmsg+0x334/0x800 [ 114.420371][ T7272] ? __pfx_do_recvmmsg+0x10/0x10 [ 114.420400][ T7272] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 114.420437][ T7272] __x64_sys_recvmmsg+0x198/0x250 [ 114.420458][ T7272] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 114.420487][ T7272] do_syscall_64+0x14d/0xf80 [ 114.420506][ T7272] ? trace_irq_disable+0x3b/0x150 [ 114.420521][ T7272] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.420547][ T7272] ? clear_bhb_loop+0x40/0x90 [ 114.420569][ T7272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.420586][ T7272] RIP: 0033:0x7fed6759c819 [ 114.420603][ T7272] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 114.420617][ T7272] RSP: 002b:00007fed68541028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 114.420636][ T7272] RAX: ffffffffffffffda RBX: 00007fed67815fa0 RCX: 00007fed6759c819 [ 114.420649][ T7272] RDX: 0000000000000001 RSI: 00002000000086c0 RDI: 0000000000000003 [ 114.420659][ T7272] RBP: 00007fed68541090 R08: 0000000000000000 R09: 0000000000000000 [ 114.420669][ T7272] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000001 [ 114.420679][ T7272] R13: 00007fed67816038 R14: 00007fed67815fa0 R15: 00007fffcb81e328 [ 114.420708][ T7272] [ 114.665692][ T7286] netlink: 12 bytes leftover after parsing attributes in process `syz.0.377'. [ 114.732403][ T7275] netlink: 104 bytes leftover after parsing attributes in process `syz.0.377'. [ 114.770764][ T7275] bond3: option packets_per_slave: invalid value (1986356271) [ 114.778496][ T7275] bond3: option packets_per_slave: allowed values 0 - 65535 [ 114.795312][ T7275] bond3 (unregistering): Released all slaves [ 114.818476][ T7293] netlink: 'syz.3.382': attribute type 12 has an invalid length. [ 114.829533][ T7292] netlink: 'syz.3.382': attribute type 12 has an invalid length. [ 114.996968][ T7301] dvmrp0: entered allmulticast mode [ 117.395393][ T7286] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 117.797391][ T7331] netlink: 'syz.0.392': attribute type 5 has an invalid length. [ 117.971170][ T7339] sctp: [Deprecated]: syz.3.397 (pid 7339) Use of struct sctp_assoc_value in delayed_ack socket option. [ 117.971170][ T7339] Use struct sctp_sack_info instead [ 118.021219][ T7333] Driver unsupported XDP return value 0 on prog (id 90) dev N/A, expect packet loss! [ 118.353457][ T7353] Cannot find set identified by id 65534 to match [ 118.874918][ T7375] netlink: 'syz.4.413': attribute type 1 has an invalid length. [ 118.969349][ T7384] netlink: 'syz.2.416': attribute type 1 has an invalid length. [ 119.051812][ T7381] bond1: (slave geneve2): making interface the new active one [ 119.067876][ T7381] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 119.127184][ T6111] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 119.187818][ T6111] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 119.266094][ T7388] bond1: (slave geneve2): making interface the new active one [ 119.299339][ T7388] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 119.343303][ T6111] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 119.352174][ T6111] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 119.386476][ T6111] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 119.413958][ T7404] FAULT_INJECTION: forcing a failure. [ 119.413958][ T7404] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 119.417480][ T6111] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 119.468285][ T7404] CPU: 0 UID: 0 PID: 7404 Comm: syz.3.422 Not tainted syzkaller #0 PREEMPT(full) [ 119.468310][ T7404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 119.468320][ T7404] Call Trace: [ 119.468328][ T7404] [ 119.468335][ T7404] dump_stack_lvl+0xe8/0x150 [ 119.468375][ T7404] should_fail_ex+0x412/0x560 [ 119.468404][ T7404] _copy_to_user+0x31/0xb0 [ 119.468426][ T7404] bpf_test_finish+0x1db/0x6b0 [ 119.468456][ T7404] ? __pfx_bpf_test_finish+0x10/0x10 [ 119.468483][ T7404] ? _copy_from_user+0x94/0xb0 [ 119.468503][ T7404] ? bpf_test_init+0x113/0x150 [ 119.468528][ T7404] bpf_prog_test_run_xdp+0x8fa/0x1160 [ 119.468566][ T7404] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 119.468595][ T7404] ? __fget_files+0x2a/0x420 [ 119.468616][ T7404] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 119.468641][ T7404] bpf_prog_test_run+0x2c7/0x340 [ 119.468665][ T7404] __sys_bpf+0x643/0x950 [ 119.468685][ T7404] ? __pfx___sys_bpf+0x10/0x10 [ 119.468716][ T7404] ? ksys_write+0x242/0x270 [ 119.468738][ T7404] ? __pfx_ksys_write+0x10/0x10 [ 119.468764][ T7404] __x64_sys_bpf+0x7c/0x90 [ 119.468790][ T7404] do_syscall_64+0x14d/0xf80 [ 119.468809][ T7404] ? trace_irq_disable+0x3b/0x150 [ 119.468825][ T7404] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.468843][ T7404] ? clear_bhb_loop+0x40/0x90 [ 119.468864][ T7404] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.468882][ T7404] RIP: 0033:0x7fed6759c819 [ 119.468904][ T7404] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 119.468918][ T7404] RSP: 002b:00007fed68541028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 119.468943][ T7404] RAX: ffffffffffffffda RBX: 00007fed67815fa0 RCX: 00007fed6759c819 [ 119.468955][ T7404] RDX: 0000000000000050 RSI: 0000200000000440 RDI: 000000000000000a [ 119.468965][ T7404] RBP: 00007fed68541090 R08: 0000000000000000 R09: 0000000000000000 [ 119.468976][ T7404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 119.468985][ T7404] R13: 00007fed67816038 R14: 00007fed67815fa0 R15: 00007fffcb81e328 [ 119.469014][ T7404] [ 119.471207][ T6111] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 119.724784][ T6111] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 119.732273][ T7414] netlink: 36 bytes leftover after parsing attributes in process `syz.2.426'. [ 120.128461][ T7436] FAULT_INJECTION: forcing a failure. [ 120.128461][ T7436] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 120.146439][ T7437] netlink: 16 bytes leftover after parsing attributes in process `syz.0.434'. [ 120.175824][ T7437] xt_addrtype: ipv6 does not support BROADCAST matching [ 120.185157][ T7436] CPU: 0 UID: 0 PID: 7436 Comm: syz.3.435 Not tainted syzkaller #0 PREEMPT(full) [ 120.185183][ T7436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 120.185193][ T7436] Call Trace: [ 120.185199][ T7436] [ 120.185206][ T7436] dump_stack_lvl+0xe8/0x150 [ 120.185236][ T7436] should_fail_ex+0x412/0x560 [ 120.185265][ T7436] _copy_to_user+0x31/0xb0 [ 120.185287][ T7436] simple_read_from_buffer+0xe1/0x170 [ 120.185316][ T7436] proc_fail_nth_read+0x1bb/0x230 [ 120.185342][ T7436] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 120.185369][ T7436] ? rw_verify_area+0x2a6/0x4d0 [ 120.185387][ T7436] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 120.185411][ T7436] vfs_read+0x20c/0xa70 [ 120.185428][ T7436] ? fdget_pos+0x246/0x320 [ 120.185446][ T7436] ? __pfx___mutex_lock+0x10/0x10 [ 120.185467][ T7436] ? __pfx_vfs_read+0x10/0x10 [ 120.185486][ T7436] ? __fget_files+0x2a/0x420 [ 120.185505][ T7436] ? __fget_files+0x3a0/0x420 [ 120.185519][ T7436] ? __fget_files+0x2a/0x420 [ 120.185540][ T7436] ksys_read+0x150/0x270 [ 120.185558][ T7436] ? __pfx_ksys_read+0x10/0x10 [ 120.185588][ T7436] do_syscall_64+0x14d/0xf80 [ 120.185607][ T7436] ? trace_irq_disable+0x3b/0x150 [ 120.185621][ T7436] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.185638][ T7436] ? clear_bhb_loop+0x40/0x90 [ 120.185658][ T7436] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.185674][ T7436] RIP: 0033:0x7fed6755d04e [ 120.185691][ T7436] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 120.185715][ T7436] RSP: 002b:00007fed68540fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 120.185733][ T7436] RAX: ffffffffffffffda RBX: 00007fed685416c0 RCX: 00007fed6755d04e [ 120.185745][ T7436] RDX: 000000000000000f RSI: 00007fed685410a0 RDI: 0000000000000006 [ 120.185756][ T7436] RBP: 00007fed68541090 R08: 0000000000000000 R09: 0000000000000000 [ 120.185766][ T7436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 120.185776][ T7436] R13: 00007fed67816038 R14: 00007fed67815fa0 R15: 00007fffcb81e328 [ 120.185804][ T7436] [ 120.511511][ T7433] lo speed is unknown, defaulting to 1000 [ 120.912894][ T7458] netlink: 40 bytes leftover after parsing attributes in process `syz.2.441'. [ 121.228127][ T7473] netlink: 'syz.2.445': attribute type 1 has an invalid length. [ 121.676103][ T7489] netlink: 'syz.2.447': attribute type 1 has an invalid length. [ 121.979167][ T7499] raw_sendmsg: syz.1.450 forgot to set AF_INET. Fix it! [ 122.488500][ T7526] netlink: 40 bytes leftover after parsing attributes in process `syz.1.455'. [ 122.790746][ T7497] FAULT_INJECTION: forcing a failure. [ 122.790746][ T7497] name fail_futex, interval 1, probability 0, space 0, times 1 [ 122.835109][ T7497] CPU: 1 UID: 0 PID: 7497 Comm: syz.4.449 Not tainted syzkaller #0 PREEMPT(full) [ 122.835133][ T7497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 122.835144][ T7497] Call Trace: [ 122.835151][ T7497] [ 122.835159][ T7497] dump_stack_lvl+0xe8/0x150 [ 122.835188][ T7497] should_fail_ex+0x412/0x560 [ 122.835220][ T7497] get_futex_key+0x1ac/0x1690 [ 122.835253][ T7497] ? __pfx_get_futex_key+0x10/0x10 [ 122.835272][ T7497] ? __lock_acquire+0x6b5/0x2cf0 [ 122.835302][ T7497] futex_wake+0x114/0x580 [ 122.835324][ T7497] ? __lock_acquire+0x6b5/0x2cf0 [ 122.835346][ T7497] ? __pfx_futex_wake+0x10/0x10 [ 122.835373][ T7497] ? exit_mm_release+0x1a/0x30 [ 122.835400][ T7497] do_futex+0x395/0x420 [ 122.835425][ T7497] ? __pfx_do_futex+0x10/0x10 [ 122.835447][ T7497] ? __might_fault+0xaf/0x130 [ 122.835467][ T7497] mm_release+0x103/0x290 [ 122.835491][ T7497] exit_mm+0x51/0x220 [ 122.835507][ T7497] ? unwind_deferred_task_exit+0x67/0xa0 [ 122.835533][ T7497] do_exit+0x6a2/0x23c0 [ 122.835556][ T7497] ? __pfx_do_exit+0x10/0x10 [ 122.835577][ T7497] ? do_raw_spin_lock+0x12b/0x2f0 [ 122.835601][ T7497] do_group_exit+0x21b/0x2d0 [ 122.835618][ T7497] ? _raw_spin_unlock_irq+0x23/0x50 [ 122.835639][ T7497] get_signal+0x1284/0x1330 [ 122.835677][ T7497] arch_do_signal_or_restart+0xbc/0x830 [ 122.835708][ T7497] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 122.835747][ T7497] exit_to_user_mode_loop+0x86/0x480 [ 122.835766][ T7497] ? rcu_is_watching+0x15/0xb0 [ 122.835793][ T7497] do_syscall_64+0x32d/0xf80 [ 122.835816][ T7497] ? trace_irq_disable+0x3b/0x150 [ 122.835831][ T7497] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.835849][ T7497] ? clear_bhb_loop+0x40/0x90 [ 122.835870][ T7497] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.835887][ T7497] RIP: 0033:0x7fbd65b9c819 [ 122.835904][ T7497] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 122.835918][ T7497] RSP: 002b:00007fbd66ab2028 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 122.835937][ T7497] RAX: fffffffffffffdfe RBX: 00007fbd65e15fa0 RCX: 00007fbd65b9c819 [ 122.835949][ T7497] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000000 [ 122.835959][ T7497] RBP: 00007fbd66ab2090 R08: 0000000000000000 R09: 0000000000000000 [ 122.835970][ T7497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 122.835980][ T7497] R13: 00007fbd65e16038 R14: 00007fbd65e15fa0 R15: 00007ffd09a7dea8 [ 122.836008][ T7497] [ 123.531553][ T7566] FAULT_INJECTION: forcing a failure. [ 123.531553][ T7566] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 123.550043][ T7565] net_ratelimit: 3 callbacks suppressed [ 123.550062][ T7565] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 123.565280][ T7566] CPU: 0 UID: 0 PID: 7566 Comm: syz.1.468 Not tainted syzkaller #0 PREEMPT(full) [ 123.565300][ T7566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 123.565310][ T7566] Call Trace: [ 123.565317][ T7566] [ 123.565324][ T7566] dump_stack_lvl+0xe8/0x150 [ 123.565352][ T7566] should_fail_ex+0x412/0x560 [ 123.565379][ T7566] _copy_from_user+0x2d/0xb0 [ 123.565400][ T7566] __sys_bpf+0x229/0x950 [ 123.565418][ T7566] ? __pfx___sys_bpf+0x10/0x10 [ 123.565447][ T7566] ? ksys_write+0x242/0x270 [ 123.565468][ T7566] ? __pfx_ksys_write+0x10/0x10 [ 123.565492][ T7566] __x64_sys_bpf+0x7c/0x90 [ 123.565515][ T7566] do_syscall_64+0x14d/0xf80 [ 123.565533][ T7566] ? trace_irq_disable+0x3b/0x150 [ 123.565546][ T7566] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.565562][ T7566] ? clear_bhb_loop+0x40/0x90 [ 123.565583][ T7566] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.565598][ T7566] RIP: 0033:0x7f506559c819 [ 123.565624][ T7566] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 123.565638][ T7566] RSP: 002b:00007f5066515028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 123.565656][ T7566] RAX: ffffffffffffffda RBX: 00007f5065815fa0 RCX: 00007f506559c819 [ 123.565667][ T7566] RDX: 0000000000000028 RSI: 0000200000000340 RDI: 0000000000000012 [ 123.565676][ T7566] RBP: 00007f5066515090 R08: 0000000000000000 R09: 0000000000000000 [ 123.565686][ T7566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 123.565695][ T7566] R13: 00007f5065816038 R14: 00007f5065815fa0 R15: 00007ffe3f638898 [ 123.565720][ T7566] [ 123.833966][ T7565] netlink: 136 bytes leftover after parsing attributes in process `syz.4.467'. [ 123.873664][ T7565] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 124.056367][ T7580] netlink: 104 bytes leftover after parsing attributes in process `syz.3.470'. [ 124.233869][ T7599] netlink: 56 bytes leftover after parsing attributes in process `syz.2.473'. [ 124.286340][ T51] Bluetooth: hci4: link tx timeout [ 124.292709][ T51] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 125.383140][ T7655] netlink: 'syz.2.488': attribute type 1 has an invalid length. [ 125.416737][ T7655] netlink: 'syz.2.488': attribute type 2 has an invalid length. [ 125.444762][ T7660] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.489'. [ 125.507780][ T7664] netlink: 4 bytes leftover after parsing attributes in process `syz.3.490'. [ 125.549495][ T7667] sctp: [Deprecated]: syz.2.491 (pid 7667) Use of int in maxseg socket option. [ 125.549495][ T7667] Use struct sctp_assoc_value instead [ 126.182669][ T7696] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.502'. [ 126.351066][ T5836] Bluetooth: hci4: command 0x0406 tx timeout [ 126.583584][ T7717] netlink: 12 bytes leftover after parsing attributes in process `syz.2.501'. [ 126.598511][ T7716] Cannot find set identified by id 65534 to match [ 126.778492][ T7705] vlan0: entered allmulticast mode [ 126.796292][ T7705] bridge0: port 3(vlan0) entered blocking state [ 126.816019][ T7705] bridge0: port 3(vlan0) entered disabled state [ 126.825296][ T7705] vlan0: entered promiscuous mode [ 127.061418][ T7717] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 127.908659][ T7766] tipc: Started in network mode [ 127.958850][ T7766] tipc: Node identity ac14140f, cluster identity 4711 [ 127.994014][ T7766] tipc: New replicast peer: 255.255.255.255 [ 128.000786][ T7766] tipc: Enabled bearer , priority 10 [ 128.047069][ T7773] netlink: 20 bytes leftover after parsing attributes in process `syz.4.516'. [ 128.098636][ T7777] Bluetooth: MGMT ver 1.23 [ 128.394419][ T7793] netlink: 'syz.4.522': attribute type 10 has an invalid length. [ 128.490552][ T7793] netlink: 2 bytes leftover after parsing attributes in process `syz.4.522'. [ 128.533545][ T7793] hsr0: entered promiscuous mode [ 128.547962][ T7793] bridge0: port 3(hsr0) entered blocking state [ 128.561295][ T7793] bridge0: port 3(hsr0) entered disabled state [ 128.592621][ T7793] hsr0: entered allmulticast mode [ 128.597923][ T7793] hsr_slave_0: entered allmulticast mode [ 128.631978][ T7793] hsr_slave_1: entered allmulticast mode [ 128.660159][ T7793] bridge0: port 3(hsr0) entered blocking state [ 128.666535][ T7793] bridge0: port 3(hsr0) entered forwarding state [ 129.040456][ T7809] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 129.108252][ T7816] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 129.122866][ T24] tipc: Node number set to 2886997007 [ 129.157416][ T7823] netlink: 156 bytes leftover after parsing attributes in process `syz.4.529'. [ 129.521884][ T7839] netlink: 'syz.4.532': attribute type 1 has an invalid length. [ 129.601598][ T7843] netlink: 4 bytes leftover after parsing attributes in process `syz.3.533'. [ 130.033650][ T7860] workqueue: name exceeds WQ_NAME_LEN. Truncating to: . ΁ *] [ 130.115487][ T7872] netlink: 8 bytes leftover after parsing attributes in process `syz.3.539'. [ 130.415917][ T7887] netlink: 64 bytes leftover after parsing attributes in process `syz.4.543'. [ 130.627302][ T7895] netlink: 12 bytes leftover after parsing attributes in process `syz.1.545'. [ 131.411701][ T7899] syzkaller1: entered promiscuous mode [ 131.421477][ T7899] syzkaller1: entered allmulticast mode [ 131.907541][ T7941] netlink: 8 bytes leftover after parsing attributes in process `syz.1.556'. [ 132.333989][ T7949] team_slave_0: entered promiscuous mode [ 132.339843][ T7949] team_slave_1: entered promiscuous mode [ 132.366212][ T7949] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 132.382829][ T7962] C: renamed from team_slave_0 [ 132.409493][ T7962] netlink: 164 bytes leftover after parsing attributes in process `syz.0.561'. [ 132.620149][ T7968] sctp: [Deprecated]: syz.2.565 (pid 7968) Use of int in max_burst socket option. [ 132.620149][ T7968] Use struct sctp_assoc_value instead [ 132.697454][ T7975] netlink: 384 bytes leftover after parsing attributes in process `syz.4.567'. [ 132.709417][ T7975] netlink: 24 bytes leftover after parsing attributes in process `syz.4.567'. [ 132.746762][ T7978] netlink: 71 bytes leftover after parsing attributes in process `syz.1.568'. [ 132.908287][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.916023][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.483083][ T8006] netlink: 4 bytes leftover after parsing attributes in process `syz.2.576'. [ 133.505941][ T7993] netlink: 1 bytes leftover after parsing attributes in process `syz.3.572'. [ 133.515143][ T8006] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 133.693644][ T8004] netlink: 12 bytes leftover after parsing attributes in process `syz.0.573'. [ 133.741271][ T8004] netlink: 12 bytes leftover after parsing attributes in process `syz.0.573'. [ 134.011989][ T8026] netlink: 'syz.2.582': attribute type 1 has an invalid length. [ 134.051993][ T8026] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 134.074584][ T8026] trusted_key: syz.2.582 sent an empty control message without MSG_MORE. [ 134.190946][ T8025] mac80211_hwsim hwsim7 ;: renamed from wlan0 [ 134.596656][ T8043] syzkaller0: entered promiscuous mode [ 134.603304][ T8043] syzkaller0: entered allmulticast mode [ 135.843337][ T8078] __nla_validate_parse: 6 callbacks suppressed [ 135.843358][ T8078] netlink: 56 bytes leftover after parsing attributes in process `syz.3.599'. [ 135.918845][ T8078] xt_CT: No such helper "syz1" [ 136.167813][ T8049] vlan0: entered promiscuous mode [ 136.173127][ T8049] bridge0: entered promiscuous mode [ 136.292986][ T8085] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.600'. [ 136.313730][ T8085] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.600'. [ 136.380497][ T8089] netlink: 4 bytes leftover after parsing attributes in process `syz.0.601'. [ 137.484880][ T8100] netlink: 'syz.2.603': attribute type 4 has an invalid length. [ 138.034554][ T8132] netlink: 248 bytes leftover after parsing attributes in process `syz.0.611'. [ 138.043962][ T8132] netlink: 248 bytes leftover after parsing attributes in process `syz.0.611'. [ 138.087839][ T8136] netlink: 4 bytes leftover after parsing attributes in process `syz.2.612'. [ 138.215240][ T8142] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.615'. [ 138.225942][ T8142] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.615'. [ 138.776777][ T8167] netlink: 'syz.4.623': attribute type 1 has an invalid length. [ 138.996143][ T8162] lo speed is unknown, defaulting to 1000 [ 139.156276][ T8182] netlink: 'syz.0.625': attribute type 1 has an invalid length. [ 139.184744][ T8182] netlink: 244 bytes leftover after parsing attributes in process `syz.0.625'. [ 139.224536][ T8182] NCSI netlink: No device for ifindex 0 [ 140.629600][ T8252] netlink: 'syz.2.649': attribute type 298 has an invalid length. [ 140.945669][ T8269] __nla_validate_parse: 3 callbacks suppressed [ 140.945689][ T8269] netlink: 8 bytes leftover after parsing attributes in process `syz.4.656'. [ 140.993247][ T8270] netlink: 4 bytes leftover after parsing attributes in process `syz.1.655'. [ 140.998851][ T8269] netlink: 'syz.4.656': attribute type 3 has an invalid length. [ 141.105120][ T8277] netlink: 20 bytes leftover after parsing attributes in process `syz.2.657'. [ 141.127029][ T8277] netlink: 32 bytes leftover after parsing attributes in process `syz.2.657'. [ 141.190665][ T8277] netlink: 240 bytes leftover after parsing attributes in process `syz.2.657'. [ 141.261400][ T8280] delete_channel: no stack [ 141.633582][ T8302] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 141.981999][ T8321] Cannot find set identified by id 65534 to match [ 142.312786][ T8336] lo speed is unknown, defaulting to 1000 [ 143.344802][ T8396] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 143.416569][ T8398] Cannot find set identified by id 65534 to match [ 143.527517][ T8378] macsec0: entered promiscuous mode [ 143.552420][ T8378] virt_wifi0: entered promiscuous mode [ 144.210956][ T8431] netlink: 'syz.2.700': attribute type 28 has an invalid length. [ 144.244347][ T8431] netlink: 'syz.2.700': attribute type 3 has an invalid length. [ 144.268654][ T8431] netlink: 132 bytes leftover after parsing attributes in process `syz.2.700'. [ 144.473451][ T8443] netlink: 12 bytes leftover after parsing attributes in process `syz.3.702'. [ 144.665853][ T8454] netlink: 'syz.2.704': attribute type 8 has an invalid length. [ 144.732880][ T8443] veth7: entered allmulticast mode [ 144.948489][ T8443] bond2: (slave veth7): Enslaving as an active interface with an up link [ 145.083829][ T8467] bond2 (unregistering): (slave veth7): Releasing backup interface [ 145.125809][ T8467] bond2 (unregistering): Released all slaves [ 145.221755][ T8483] Cannot find set identified by id 65534 to match [ 145.525401][ T8499] openvswitch: netlink: Flow key attribute not present in set flow. [ 145.576707][ T8498] netlink: 884 bytes leftover after parsing attributes in process `syz.2.712'. [ 145.602649][ T8502] netlink: 4 bytes leftover after parsing attributes in process `syz.1.711'. [ 145.612594][ T8503] netlink: 4 bytes leftover after parsing attributes in process `syz.0.710'. [ 146.033440][ T8523] lo speed is unknown, defaulting to 1000 [ 146.087035][ T8531] netlink: 4 bytes leftover after parsing attributes in process `syz.1.718'. [ 146.120530][ T8534] netlink: 'syz.4.720': attribute type 1 has an invalid length. [ 147.082346][ T8575] delete_channel: no stack [ 147.250682][ T8581] netlink: 'syz.4.731': attribute type 4 has an invalid length. [ 148.510121][ T8499] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 148.815634][ T8585] netlink: 'syz.4.733': attribute type 5 has an invalid length. [ 149.262354][ T8620] Cannot find set identified by id 65534 to match [ 149.505927][ T8632] netlink: 'syz.2.748': attribute type 1 has an invalid length. [ 149.652326][ T8640] netlink: 'syz.0.749': attribute type 9 has an invalid length. [ 149.679208][ T8640] netlink: 'syz.0.749': attribute type 6 has an invalid length. [ 149.679706][ T8632] bond3: entered promiscuous mode [ 149.688861][ T8640] netlink: 'syz.0.749': attribute type 7 has an invalid length. [ 149.710805][ T8632] 8021q: adding VLAN 0 to HW filter on device bond3 [ 149.718172][ T8640] netlink: 'syz.0.749': attribute type 8 has an invalid length. [ 149.849964][ T8640] netlink: 100 bytes leftover after parsing attributes in process `syz.0.749'. [ 150.198316][ T8665] netlink: 4 bytes leftover after parsing attributes in process `syz.0.754'. [ 150.439916][ T8671] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 150.471965][ T8671] pim6reg1: entered promiscuous mode [ 150.503003][ T8671] pim6reg1: entered allmulticast mode [ 150.647894][ T8683] Cannot find set identified by id 65534 to match [ 151.581113][ T8722] netlink: 'syz.3.774': attribute type 1 has an invalid length. [ 151.673423][ T8728] bond2: (slave geneve2): making interface the new active one [ 151.681517][ T8728] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 151.691416][ T1090] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 151.711131][ T1090] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 151.720395][ T1090] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 151.729567][ T1090] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 151.793049][ T8730] Cannot find set identified by id 65534 to match [ 151.816461][ T8734] netlink: 'syz.0.775': attribute type 5 has an invalid length. [ 152.944986][ T8787] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.794'. [ 152.956372][ T8787] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.794'. [ 153.188053][ T8799] netlink: 104 bytes leftover after parsing attributes in process `syz.2.796'. [ 153.303877][ T8801] Cannot find set identified by id 65534 to match [ 153.785074][ T8831] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.809'. [ 153.811446][ T8831] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.809'. [ 153.908491][ T8832] syzkaller0: entered promiscuous mode [ 153.917868][ T8832] syzkaller0: entered allmulticast mode [ 154.238264][ T8854] netlink: 'syz.1.816': attribute type 9 has an invalid length. [ 154.247072][ T8854] netlink: 'syz.1.816': attribute type 6 has an invalid length. [ 154.313089][ T8856] Cannot find set identified by id 65534 to match [ 154.336611][ T8858] netlink: 36 bytes leftover after parsing attributes in process `syz.1.817'. [ 155.619225][ T8879] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.824'. [ 155.629399][ T8879] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.824'. [ 155.670963][ T8880] lo speed is unknown, defaulting to 1000 [ 155.741572][ T8886] netlink: 240 bytes leftover after parsing attributes in process `syz.0.826'. [ 155.803155][ T8886] netlink: 56 bytes leftover after parsing attributes in process `syz.0.826'. [ 156.093531][ T8906] Cannot find set identified by id 65534 to match [ 156.344900][ T8918] netlink: 'syz.0.834': attribute type 10 has an invalid length. [ 156.618941][ T8932] team0: Port device team_slave_0 removed [ 156.800936][ T8937] batman_adv: batadv0: Adding interface: ipvlan0 [ 156.807551][ T8937] batman_adv: batadv0: The MTU of interface ipvlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 156.859634][ T8937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.902941][ T8937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.922295][ T8937] batman_adv: batadv0: Not using interface ipvlan0 (retrying later): interface not active [ 157.129170][ T8946] syzkaller1: entered promiscuous mode [ 157.155765][ T8946] syzkaller1: entered allmulticast mode [ 157.221426][ T8954] Cannot find set identified by id 65534 to match [ 157.533934][ T8975] netlink: 'syz.0.853': attribute type 1 has an invalid length. [ 157.640157][ T8975] bond3: entered promiscuous mode [ 157.658366][ T8975] 8021q: adding VLAN 0 to HW filter on device bond3 [ 157.852521][ T8987] virt_wifi0: left promiscuous mode [ 158.105257][ T9009] __nla_validate_parse: 10 callbacks suppressed [ 158.105276][ T9009] netlink: 666 bytes leftover after parsing attributes in process `syz.0.864'. [ 158.214882][ T9011] xt_CT: You must specify a L4 protocol and not use inversions on it [ 158.430553][ T9024] netlink: 4 bytes leftover after parsing attributes in process `syz.4.867'. [ 158.458292][ T9028] netlink: 'syz.0.871': attribute type 1 has an invalid length. [ 158.677799][ T9040] netlink: 24 bytes leftover after parsing attributes in process `syz.0.875'. [ 158.700792][ T9042] netlink: 12 bytes leftover after parsing attributes in process `syz.3.876'. [ 158.710558][ T9042] netlink: 12 bytes leftover after parsing attributes in process `syz.3.876'. [ 158.725395][ T9040] netlink: 12 bytes leftover after parsing attributes in process `syz.0.875'. [ 158.856535][ T9050] lo speed is unknown, defaulting to 1000 [ 158.868246][ T9052] netlink: 'syz.3.879': attribute type 1 has an invalid length. [ 158.876273][ T9052] netlink: 224 bytes leftover after parsing attributes in process `syz.3.879'. [ 159.263220][ T9066] netlink: 36 bytes leftover after parsing attributes in process `syz.1.883'. [ 159.394204][ T9070] netlink: 320 bytes leftover after parsing attributes in process `syz.1.885'. [ 159.634154][ T9087] netlink: 12 bytes leftover after parsing attributes in process `syz.3.890'. [ 159.725361][ T9092] bond3 (unregistering): Released all slaves [ 159.800623][ T9088] lo speed is unknown, defaulting to 1000 [ 159.889356][ T9102] 8021q: adding VLAN 0 to HW filter on device bond4 [ 159.899104][ T9102] netlink: 'syz.3.893': attribute type 1 has an invalid length. [ 159.914527][ T9099] Cannot find set identified by id 65534 to match [ 159.917136][ T9102] vxlan0: entered promiscuous mode [ 159.930491][ T9102] bond4: (slave vxlan0): Enslaving as an active interface with an up link [ 159.940025][ T1101] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.951107][ T1101] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.961408][ T9102] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 159.978069][ T1101] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.987421][ T1101] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 160.665387][ T9118] lo speed is unknown, defaulting to 1000 [ 161.107772][ T9139] netlink: 'syz.0.905': attribute type 1 has an invalid length. [ 161.157710][ T9142] 8021q: adding VLAN 0 to HW filter on device bond2 [ 161.238485][ T9146] lo speed is unknown, defaulting to 1000 [ 161.599261][ T9167] syzkaller0: entered promiscuous mode [ 161.608633][ T9167] syzkaller0: entered allmulticast mode [ 161.690021][ T9168] Cannot find set identified by id 65534 to match [ 162.145390][ T9185] lo speed is unknown, defaulting to 1000 [ 162.449176][ T9212] FAULT_INJECTION: forcing a failure. [ 162.449176][ T9212] name failslab, interval 1, probability 0, space 0, times 0 [ 162.487599][ T9212] CPU: 0 UID: 0 PID: 9212 Comm: syz.1.924 Not tainted syzkaller #0 PREEMPT(full) [ 162.487631][ T9212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 162.487641][ T9212] Call Trace: [ 162.487648][ T9212] [ 162.487656][ T9212] dump_stack_lvl+0xe8/0x150 [ 162.487685][ T9212] should_fail_ex+0x412/0x560 [ 162.487719][ T9212] ? __d_alloc+0x37/0x6f0 [ 162.487738][ T9212] should_failslab+0xa8/0x100 [ 162.487763][ T9212] kmem_cache_alloc_lru_noprof+0x87/0x640 [ 162.487791][ T9212] __d_alloc+0x37/0x6f0 [ 162.487807][ T9212] ? do_raw_spin_lock+0x12b/0x2f0 [ 162.487831][ T9212] d_alloc_pseudo+0x21/0xc0 [ 162.487851][ T9212] alloc_file_pseudo+0xdd/0x240 [ 162.487879][ T9212] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 162.487915][ T9212] anon_inode_getfd+0xc8/0x1f0 [ 162.487940][ T9212] btf_new_fd+0xa11/0xd10 [ 162.487968][ T9212] ? __pfx_btf_new_fd+0x10/0x10 [ 162.487994][ T9212] ? bpf_token_put+0x143/0x160 [ 162.488016][ T9212] ? bpf_btf_load+0x126/0x190 [ 162.488036][ T9212] __sys_bpf+0x4e5/0x950 [ 162.488055][ T9212] ? __pfx___sys_bpf+0x10/0x10 [ 162.488087][ T9212] ? ksys_write+0x242/0x270 [ 162.488108][ T9212] ? __pfx_ksys_write+0x10/0x10 [ 162.488135][ T9212] __x64_sys_bpf+0x7c/0x90 [ 162.488159][ T9212] do_syscall_64+0x14d/0xf80 [ 162.488179][ T9212] ? trace_irq_disable+0x3b/0x150 [ 162.488195][ T9212] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.488212][ T9212] ? clear_bhb_loop+0x40/0x90 [ 162.488234][ T9212] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.488251][ T9212] RIP: 0033:0x7f506559c819 [ 162.488268][ T9212] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 162.488282][ T9212] RSP: 002b:00007f5066515028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 162.488301][ T9212] RAX: ffffffffffffffda RBX: 00007f5065815fa0 RCX: 00007f506559c819 [ 162.488313][ T9212] RDX: 0000000000000028 RSI: 0000200000000340 RDI: 0000000000000012 [ 162.488324][ T9212] RBP: 00007f5066515090 R08: 0000000000000000 R09: 0000000000000000 [ 162.488335][ T9212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 162.488345][ T9212] R13: 00007f5065816038 R14: 00007f5065815fa0 R15: 00007ffe3f638898 [ 162.488373][ T9212] [ 162.840755][ T9218] openvswitch: netlink: Missing key (keys=40, expected=80) [ 163.116968][ T9231] FAULT_INJECTION: forcing a failure. [ 163.116968][ T9231] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 163.131493][ T9231] CPU: 1 UID: 0 PID: 9231 Comm: syz.2.930 Not tainted syzkaller #0 PREEMPT(full) [ 163.131516][ T9231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 163.131525][ T9231] Call Trace: [ 163.131531][ T9231] [ 163.131538][ T9231] dump_stack_lvl+0xe8/0x150 [ 163.131565][ T9231] should_fail_ex+0x412/0x560 [ 163.131592][ T9231] _copy_from_iter+0x1d3/0x1670 [ 163.131615][ T9231] ? rcu_is_watching+0x15/0xb0 [ 163.131643][ T9231] ? __pfx__copy_from_iter+0x10/0x10 [ 163.131667][ T9231] ? netlink_sendmsg+0x650/0xb40 [ 163.131688][ T9231] ? skb_put+0x11b/0x210 [ 163.131713][ T9231] netlink_sendmsg+0x6c0/0xb40 [ 163.131744][ T9231] ? __pfx_netlink_sendmsg+0x10/0x10 [ 163.131769][ T9231] ? aa_sock_msg_perm+0xf1/0x1b0 [ 163.131787][ T9231] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 163.131808][ T9231] ____sys_sendmsg+0x972/0x9f0 [ 163.131838][ T9231] ? __pfx_____sys_sendmsg+0x10/0x10 [ 163.131867][ T9231] ? import_iovec+0x73/0xa0 [ 163.131887][ T9231] ___sys_sendmsg+0x2a5/0x360 [ 163.131913][ T9231] ? __pfx____sys_sendmsg+0x10/0x10 [ 163.131969][ T9231] ? __fget_files+0x2a/0x420 [ 163.131984][ T9231] ? __fget_files+0x3a0/0x420 [ 163.132006][ T9231] __x64_sys_sendmsg+0x1bd/0x2a0 [ 163.132032][ T9231] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 163.132065][ T9231] ? __pfx_ksys_write+0x10/0x10 [ 163.132096][ T9231] do_syscall_64+0x14d/0xf80 [ 163.132116][ T9231] ? trace_irq_disable+0x3b/0x150 [ 163.132131][ T9231] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.132149][ T9231] ? clear_bhb_loop+0x40/0x90 [ 163.132170][ T9231] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.132187][ T9231] RIP: 0033:0x7f3faf99c819 [ 163.132204][ T9231] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 163.132221][ T9231] RSP: 002b:00007f3fb08a2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 163.132238][ T9231] RAX: ffffffffffffffda RBX: 00007f3fafc15fa0 RCX: 00007f3faf99c819 [ 163.132249][ T9231] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000009 [ 163.132258][ T9231] RBP: 00007f3fb08a2090 R08: 0000000000000000 R09: 0000000000000000 [ 163.132267][ T9231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 163.132276][ T9231] R13: 00007f3fafc16038 R14: 00007f3fafc15fa0 R15: 00007ffd9131cd18 [ 163.132301][ T9231] [ 163.491863][ T9241] Cannot find set identified by id 65534 to match [ 163.524038][ T9237] syzkaller1: entered promiscuous mode [ 163.600638][ T9237] syzkaller1: entered allmulticast mode [ 163.754917][ T9250] netlink: 'syz.1.934': attribute type 13 has an invalid length. [ 164.401558][ T9266] FAULT_INJECTION: forcing a failure. [ 164.401558][ T9266] name failslab, interval 1, probability 0, space 0, times 0 [ 164.414544][ T9266] CPU: 1 UID: 0 PID: 9266 Comm: syz.4.938 Not tainted syzkaller #0 PREEMPT(full) [ 164.414568][ T9266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 164.414578][ T9266] Call Trace: [ 164.414585][ T9266] [ 164.414593][ T9266] dump_stack_lvl+0xe8/0x150 [ 164.414623][ T9266] should_fail_ex+0x412/0x560 [ 164.414654][ T9266] should_failslab+0xa8/0x100 [ 164.414677][ T9266] ? alloc_empty_file+0x55/0x1d0 [ 164.414701][ T9266] kmem_cache_alloc_noprof+0x87/0x650 [ 164.414729][ T9266] alloc_empty_file+0x55/0x1d0 [ 164.414754][ T9266] alloc_file_pseudo+0x155/0x240 [ 164.414781][ T9266] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 164.414818][ T9266] anon_inode_getfd+0xc8/0x1f0 [ 164.414842][ T9266] btf_new_fd+0xa11/0xd10 [ 164.414870][ T9266] ? __pfx_btf_new_fd+0x10/0x10 [ 164.414891][ T9266] ? bpf_token_put+0x143/0x160 [ 164.414912][ T9266] ? bpf_btf_load+0x126/0x190 [ 164.414933][ T9266] __sys_bpf+0x4e5/0x950 [ 164.414953][ T9266] ? __pfx___sys_bpf+0x10/0x10 [ 164.414985][ T9266] ? ksys_write+0x242/0x270 [ 164.415007][ T9266] ? __pfx_ksys_write+0x10/0x10 [ 164.415033][ T9266] __x64_sys_bpf+0x7c/0x90 [ 164.415058][ T9266] do_syscall_64+0x14d/0xf80 [ 164.415079][ T9266] ? trace_irq_disable+0x3b/0x150 [ 164.415094][ T9266] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.415112][ T9266] ? clear_bhb_loop+0x40/0x90 [ 164.415133][ T9266] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.415151][ T9266] RIP: 0033:0x7fbd65b9c819 [ 164.415168][ T9266] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 164.415181][ T9266] RSP: 002b:00007fbd66ab2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 164.415200][ T9266] RAX: ffffffffffffffda RBX: 00007fbd65e15fa0 RCX: 00007fbd65b9c819 [ 164.415213][ T9266] RDX: 0000000000000028 RSI: 0000200000000340 RDI: 0000000000000012 [ 164.415224][ T9266] RBP: 00007fbd66ab2090 R08: 0000000000000000 R09: 0000000000000000 [ 164.415235][ T9266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 164.415245][ T9266] R13: 00007fbd65e16038 R14: 00007fbd65e15fa0 R15: 00007ffd09a7dea8 [ 164.415272][ T9266] [ 164.701483][ T9268] netlink: 'syz.4.939': attribute type 1 has an invalid length. [ 164.709411][ T9260] macsec0: entered promiscuous mode [ 164.715026][ T9260] macsec0: entered allmulticast mode [ 165.042840][ T9285] netlink: 'syz.1.941': attribute type 5 has an invalid length. [ 165.155956][ T9283] lo speed is unknown, defaulting to 1000 [ 165.247435][ T9294] __nla_validate_parse: 10 callbacks suppressed [ 165.247454][ T9294] netlink: 28 bytes leftover after parsing attributes in process `syz.0.944'. [ 165.305966][ T9300] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.950'. [ 165.317018][ T9300] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.950'. [ 165.390366][ T9305] FAULT_INJECTION: forcing a failure. [ 165.390366][ T9305] name failslab, interval 1, probability 0, space 0, times 0 [ 165.403654][ T9305] CPU: 1 UID: 0 PID: 9305 Comm: syz.4.951 Not tainted syzkaller #0 PREEMPT(full) [ 165.403677][ T9305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 165.403687][ T9305] Call Trace: [ 165.403693][ T9305] [ 165.403701][ T9305] dump_stack_lvl+0xe8/0x150 [ 165.403731][ T9305] should_fail_ex+0x412/0x560 [ 165.403761][ T9305] should_failslab+0xa8/0x100 [ 165.403784][ T9305] ? security_file_alloc+0x34/0x310 [ 165.403805][ T9305] kmem_cache_alloc_noprof+0x87/0x650 [ 165.403823][ T9305] ? rcu_is_watching+0x15/0xb0 [ 165.403847][ T9305] ? trace_kmem_cache_alloc+0x29/0xf0 [ 165.403867][ T9305] security_file_alloc+0x34/0x310 [ 165.403891][ T9305] init_file+0x90/0x2b0 [ 165.403917][ T9305] alloc_empty_file+0x6e/0x1d0 [ 165.403941][ T9305] alloc_file_pseudo+0x155/0x240 [ 165.403968][ T9305] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 165.404008][ T9305] anon_inode_getfd+0xc8/0x1f0 [ 165.404032][ T9305] btf_new_fd+0xa11/0xd10 [ 165.404060][ T9305] ? __pfx_btf_new_fd+0x10/0x10 [ 165.404079][ T9305] ? bpf_token_put+0x143/0x160 [ 165.404101][ T9305] ? bpf_btf_load+0x126/0x190 [ 165.404121][ T9305] __sys_bpf+0x4e5/0x950 [ 165.404140][ T9305] ? __pfx___sys_bpf+0x10/0x10 [ 165.404170][ T9305] ? ksys_write+0x242/0x270 [ 165.404190][ T9305] ? __pfx_ksys_write+0x10/0x10 [ 165.404311][ T9305] __x64_sys_bpf+0x7c/0x90 [ 165.404339][ T9305] do_syscall_64+0x14d/0xf80 [ 165.404360][ T9305] ? trace_irq_disable+0x3b/0x150 [ 165.404374][ T9305] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.404391][ T9305] ? clear_bhb_loop+0x40/0x90 [ 165.404412][ T9305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.404429][ T9305] RIP: 0033:0x7fbd65b9c819 [ 165.404444][ T9305] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 165.404457][ T9305] RSP: 002b:00007fbd66ab2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 165.404475][ T9305] RAX: ffffffffffffffda RBX: 00007fbd65e15fa0 RCX: 00007fbd65b9c819 [ 165.404485][ T9305] RDX: 0000000000000028 RSI: 0000200000000340 RDI: 0000000000000012 [ 165.404495][ T9305] RBP: 00007fbd66ab2090 R08: 0000000000000000 R09: 0000000000000000 [ 165.404504][ T9305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 165.404514][ T9305] R13: 00007fbd65e16038 R14: 00007fbd65e15fa0 R15: 00007ffd09a7dea8 [ 165.404539][ T9305] [ 165.686416][ T9309] tipc: Enabling of bearer rejected, failed to enable media [ 165.699228][ T9309] xt_nat: multiple ranges no longer supported [ 165.795383][ T9313] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.953'. [ 165.971682][ T9319] netlink: 24 bytes leftover after parsing attributes in process `syz.1.954'. [ 166.039879][ T9319] lo: Caught tx_queue_len zero misconfig [ 166.142709][ T9318] lo speed is unknown, defaulting to 1000 [ 166.158785][ T9326] netlink: 4 bytes leftover after parsing attributes in process `syz.2.955'. [ 166.173478][ T9330] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 64993 [ 166.403946][ T9335] lo speed is unknown, defaulting to 1000 [ 166.561158][ T9349] FAULT_INJECTION: forcing a failure. [ 166.561158][ T9349] name failslab, interval 1, probability 0, space 0, times 0 [ 166.589088][ T9349] CPU: 0 UID: 0 PID: 9349 Comm: syz.2.964 Not tainted syzkaller #0 PREEMPT(full) [ 166.589113][ T9349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 166.589124][ T9349] Call Trace: [ 166.589130][ T9349] [ 166.589137][ T9349] dump_stack_lvl+0xe8/0x150 [ 166.589163][ T9349] should_fail_ex+0x412/0x560 [ 166.589189][ T9349] should_failslab+0xa8/0x100 [ 166.589213][ T9349] __kmalloc_noprof+0xe8/0x760 [ 166.589235][ T9349] ? ethnl_default_set_doit+0x16a/0xad0 [ 166.589260][ T9349] ethnl_default_set_doit+0x16a/0xad0 [ 166.589279][ T9349] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 166.589299][ T9349] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 166.589327][ T9349] genl_family_rcv_msg_doit+0x22a/0x330 [ 166.589347][ T9349] ? __asan_memcpy+0x40/0x70 [ 166.589376][ T9349] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 166.589408][ T9349] ? bpf_lsm_capable+0x9/0x20 [ 166.589432][ T9349] ? security_capable+0x7e/0x2c0 [ 166.589464][ T9349] genl_rcv_msg+0x61c/0x7a0 [ 166.589490][ T9349] ? __pfx_genl_rcv_msg+0x10/0x10 [ 166.589509][ T9349] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 166.589541][ T9349] netlink_rcv_skb+0x232/0x4b0 [ 166.589567][ T9349] ? __pfx_genl_rcv_msg+0x10/0x10 [ 166.589588][ T9349] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 166.589627][ T9349] ? down_read+0x272/0x2e0 [ 166.589649][ T9349] ? genl_rcv+0xd/0x40 [ 166.589669][ T9349] genl_rcv+0x28/0x40 [ 166.589686][ T9349] netlink_unicast+0x75c/0x8e0 [ 166.589719][ T9349] netlink_sendmsg+0x813/0xb40 [ 166.589753][ T9349] ? __pfx_netlink_sendmsg+0x10/0x10 [ 166.589780][ T9349] ? aa_sock_msg_perm+0xf1/0x1b0 [ 166.589800][ T9349] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 166.589824][ T9349] ____sys_sendmsg+0x972/0x9f0 [ 166.589859][ T9349] ? __pfx_____sys_sendmsg+0x10/0x10 [ 166.589910][ T9349] ? import_iovec+0x73/0xa0 [ 166.589935][ T9349] ___sys_sendmsg+0x2a5/0x360 [ 166.589966][ T9349] ? __pfx____sys_sendmsg+0x10/0x10 [ 166.590024][ T9349] ? __fget_files+0x2a/0x420 [ 166.590039][ T9349] ? __fget_files+0x3a0/0x420 [ 166.590067][ T9349] __x64_sys_sendmsg+0x1bd/0x2a0 [ 166.590095][ T9349] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 166.590127][ T9349] ? __pfx_ksys_write+0x10/0x10 [ 166.590154][ T9349] do_syscall_64+0x14d/0xf80 [ 166.590172][ T9349] ? trace_irq_disable+0x3b/0x150 [ 166.590187][ T9349] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.590205][ T9349] ? clear_bhb_loop+0x40/0x90 [ 166.590226][ T9349] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.590244][ T9349] RIP: 0033:0x7f3faf99c819 [ 166.590262][ T9349] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 166.590278][ T9349] RSP: 002b:00007f3fb08a2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 166.590297][ T9349] RAX: ffffffffffffffda RBX: 00007f3fafc15fa0 RCX: 00007f3faf99c819 [ 166.590310][ T9349] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000009 [ 166.590321][ T9349] RBP: 00007f3fb08a2090 R08: 0000000000000000 R09: 0000000000000000 [ 166.590333][ T9349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 166.590343][ T9349] R13: 00007f3fafc16038 R14: 00007f3fafc15fa0 R15: 00007ffd9131cd18 [ 166.590381][ T9349] [ 166.918651][ T9351] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.965'. [ 167.275076][ T9355] netlink: 20 bytes leftover after parsing attributes in process `syz.4.967'. [ 167.448527][ T9355] ------------[ cut here ]------------ [ 167.454617][ T9355] !rwb [ 167.454643][ T9355] WARNING: block/blk-wbt.c:785 at wbt_init_enable_default+0x18a/0x220, CPU#0: syz.4.967/9355 [ 167.467872][ T9355] Modules linked in: [ 167.472086][ T9355] CPU: 0 UID: 0 PID: 9355 Comm: syz.4.967 Not tainted syzkaller #0 PREEMPT(full) [ 167.481515][ T9355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 167.491839][ T9355] RIP: 0010:wbt_init_enable_default+0x18a/0x220 [ 167.498433][ T9355] Code: 1c 84 c0 0f 85 8d 00 00 00 41 21 2e eb 1f e8 fd c5 24 fd eb 18 e8 f6 c5 24 fd eb 0d e8 ef c5 24 fd 4c 89 ff e8 17 fd 82 fd 90 <0f> 0b 90 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d e9 80 1e 16 07 [ 167.519452][ T9355] RSP: 0018:ffffc90002ee6eb0 EFLAGS: 00010286 [ 167.526245][ T9355] RAX: dff019109a762f00 RBX: 1ffff1100d132004 RCX: 0000000000000046 [ 167.534936][ T9355] RDX: 0000000000000006 RSI: ffffffff8df30d2f RDI: ffffffff8c27d480 [ 167.544174][ T9355] RBP: dffffc0000000000 R08: ffffffff9011deb7 R09: 1ffffffff2023bd6 [ 167.553194][ T9355] R10: dffffc0000000000 R11: fffffbfff2023bd7 R12: ffff888068990020 [ 167.561465][ T9355] R13: 0000000000000000 R14: ffff8880295a5000 R15: ffff888068990000 [ 167.569648][ T9355] FS: 00007fbd66ab26c0(0000) GS:ffff888125447000(0000) knlGS:0000000000000000 [ 167.578830][ T9355] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 167.585479][ T9355] CR2: 00007fed67817dac CR3: 0000000048b92000 CR4: 00000000003526f0 [ 167.593591][ T9355] Call Trace: [ 167.596985][ T9355] [ 167.600090][ T9355] blk_register_queue+0x382/0x430 [ 167.605276][ T9355] __add_disk+0x677/0xd50 [ 167.609750][ T9355] ? down_read+0x272/0x2e0 [ 167.614274][ T9355] add_disk_fwnode+0xfb/0x480 [ 167.619102][ T9355] nbd_dev_add+0x72c/0xb50 [ 167.623621][ T9355] ? __pfx_nbd_dev_add+0x10/0x10 [ 167.628705][ T9355] ? bpf_lsm_capable+0x9/0x20 [ 167.633488][ T9355] ? security_capable+0x7e/0x2c0 [ 167.638562][ T9355] ? radix_tree_lookup+0x25c/0x290 [ 167.643766][ T9355] nbd_genl_connect+0x962/0x1cf0 [ 167.648913][ T9355] ? __pfx___nla_validate_parse+0x10/0x10 [ 167.654782][ T9355] ? __pfx_nbd_genl_connect+0x10/0x10 [ 167.660198][ T9355] ? rcu_is_watching+0x15/0xb0 [ 167.665055][ T9355] ? trace_kmalloc+0x2a/0x110 [ 167.669771][ T9355] ? __nla_parse+0x40/0x60 [ 167.674320][ T9355] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 167.681022][ T9355] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 167.684319][ T9375] netlink: 4 bytes leftover after parsing attributes in process `syz.0.972'. [ 167.688071][ T9355] genl_family_rcv_msg_doit+0x22a/0x330 [ 167.703578][ T9355] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 167.709930][ T9355] ? __lock_acquire+0x6b5/0x2cf0 [ 167.715004][ T9355] genl_rcv_msg+0x61c/0x7a0 [ 167.719553][ T9355] ? __pfx_genl_rcv_msg+0x10/0x10 [ 167.724659][ T9355] ? __pfx_nbd_genl_connect+0x10/0x10 [ 167.730249][ T9355] netlink_rcv_skb+0x232/0x4b0 [ 167.735130][ T9355] ? __pfx_genl_rcv_msg+0x10/0x10 [ 167.740362][ T9355] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 167.745748][ T9355] ? down_read+0x272/0x2e0 [ 167.750281][ T9355] ? genl_rcv+0xd/0x40 [ 167.754469][ T9355] genl_rcv+0x28/0x40 [ 167.758607][ T9355] netlink_unicast+0x75c/0x8e0 [ 167.763543][ T9355] netlink_sendmsg+0x813/0xb40 [ 167.768634][ T9355] ? __pfx_netlink_sendmsg+0x10/0x10 [ 167.774002][ T9355] ? aa_sock_msg_perm+0xf1/0x1b0 [ 167.779010][ T9355] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 167.784729][ T9355] ____sys_sendmsg+0x972/0x9f0 [ 167.789754][ T9355] ? futex_unqueue+0x211/0x240 [ 167.794787][ T9355] ? __pfx_____sys_sendmsg+0x10/0x10 [ 167.800249][ T9355] ? import_iovec+0x73/0xa0 [ 167.804937][ T9355] ___sys_sendmsg+0x2a5/0x360 [ 167.809730][ T9355] ? __pfx____sys_sendmsg+0x10/0x10 [ 167.815123][ T9355] ? futex_wait+0x29a/0x380 [ 167.819674][ T9355] ? __fget_files+0x2a/0x420 [ 167.824341][ T9355] ? __fget_files+0x3a0/0x420 [ 167.829161][ T9355] __x64_sys_sendmsg+0x1bd/0x2a0 [ 167.834206][ T9355] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 167.839792][ T9355] ? rcu_is_watching+0x15/0xb0 [ 167.844652][ T9355] do_syscall_64+0x14d/0xf80 [ 167.849370][ T9355] ? trace_irq_disable+0x3b/0x150 [ 167.854709][ T9355] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.861024][ T9355] ? clear_bhb_loop+0x40/0x90 [ 167.865832][ T9355] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.872008][ T9355] RIP: 0033:0x7fbd65b9c819 [ 167.876472][ T9355] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 167.896414][ T9355] RSP: 002b:00007fbd66ab2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 167.905079][ T9355] RAX: ffffffffffffffda RBX: 00007fbd65e15fa0 RCX: 00007fbd65b9c819 [ 167.913110][ T9355] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000007 [ 167.921084][ T9355] RBP: 00007fbd65c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 167.929219][ T9355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 167.937287][ T9355] R13: 00007fbd65e16038 R14: 00007fbd65e15fa0 R15: 00007ffd09a7dea8 [ 167.945551][ T9355] [ 167.948687][ T9355] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 167.956019][ T9355] CPU: 0 UID: 0 PID: 9355 Comm: syz.4.967 Not tainted syzkaller #0 PREEMPT(full) [ 167.965382][ T9355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 167.975617][ T9355] Call Trace: [ 167.978899][ T9355] [ 167.981830][ T9355] vpanic+0x56c/0xa60 [ 167.986026][ T9355] ? __pfx__printk+0x10/0x10 [ 167.990629][ T9355] ? __pfx_vpanic+0x10/0x10 [ 167.995193][ T9355] ? is_bpf_text_address+0x292/0x2b0 [ 168.000671][ T9355] ? is_bpf_text_address+0x26/0x2b0 [ 168.006063][ T9355] panic+0xc5/0xd0 [ 168.009976][ T9355] ? __pfx_panic+0x10/0x10 [ 168.014456][ T9355] __warn+0x315/0x4f0 [ 168.018462][ T9355] ? wbt_init_enable_default+0x18a/0x220 [ 168.024090][ T9355] ? wbt_init_enable_default+0x18a/0x220 [ 168.029710][ T9355] __report_bug+0x29a/0x540 [ 168.034221][ T9355] ? netlink_rcv_skb+0x232/0x4b0 [ 168.039158][ T9355] ? genl_rcv+0x28/0x40 [ 168.043309][ T9355] ? netlink_unicast+0x75c/0x8e0 [ 168.048421][ T9355] ? wbt_init_enable_default+0x18a/0x220 [ 168.054140][ T9355] ? __pfx___report_bug+0x10/0x10 [ 168.059264][ T9355] ? wbt_init_enable_default+0x18a/0x220 [ 168.064977][ T9355] report_bug+0x16a/0x220 [ 168.069306][ T9355] ? wbt_init_enable_default+0x18a/0x220 [ 168.074948][ T9355] ? wbt_init_enable_default+0x18c/0x220 [ 168.080659][ T9355] handle_bug+0x9c/0x200 [ 168.085023][ T9355] exc_invalid_op+0x1a/0x50 [ 168.089545][ T9355] asm_exc_invalid_op+0x1a/0x20 [ 168.094498][ T9355] RIP: 0010:wbt_init_enable_default+0x18a/0x220 [ 168.100746][ T9355] Code: 1c 84 c0 0f 85 8d 00 00 00 41 21 2e eb 1f e8 fd c5 24 fd eb 18 e8 f6 c5 24 fd eb 0d e8 ef c5 24 fd 4c 89 ff e8 17 fd 82 fd 90 <0f> 0b 90 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d e9 80 1e 16 07 [ 168.120439][ T9355] RSP: 0018:ffffc90002ee6eb0 EFLAGS: 00010286 [ 168.126686][ T9355] RAX: dff019109a762f00 RBX: 1ffff1100d132004 RCX: 0000000000000046 [ 168.134753][ T9355] RDX: 0000000000000006 RSI: ffffffff8df30d2f RDI: ffffffff8c27d480 [ 168.142740][ T9355] RBP: dffffc0000000000 R08: ffffffff9011deb7 R09: 1ffffffff2023bd6 [ 168.150746][ T9355] R10: dffffc0000000000 R11: fffffbfff2023bd7 R12: ffff888068990020 [ 168.158866][ T9355] R13: 0000000000000000 R14: ffff8880295a5000 R15: ffff888068990000 [ 168.167095][ T9355] blk_register_queue+0x382/0x430 [ 168.172144][ T9355] __add_disk+0x677/0xd50 [ 168.176502][ T9355] ? down_read+0x272/0x2e0 [ 168.180999][ T9355] add_disk_fwnode+0xfb/0x480 [ 168.185884][ T9355] nbd_dev_add+0x72c/0xb50 [ 168.190434][ T9355] ? __pfx_nbd_dev_add+0x10/0x10 [ 168.195596][ T9355] ? bpf_lsm_capable+0x9/0x20 [ 168.200294][ T9355] ? security_capable+0x7e/0x2c0 [ 168.205319][ T9355] ? radix_tree_lookup+0x25c/0x290 [ 168.210601][ T9355] nbd_genl_connect+0x962/0x1cf0 [ 168.215535][ T9355] ? __pfx___nla_validate_parse+0x10/0x10 [ 168.221260][ T9355] ? __pfx_nbd_genl_connect+0x10/0x10 [ 168.226649][ T9355] ? rcu_is_watching+0x15/0xb0 [ 168.231503][ T9355] ? trace_kmalloc+0x2a/0x110 [ 168.236264][ T9355] ? __nla_parse+0x40/0x60 [ 168.240672][ T9355] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 168.247027][ T9355] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 168.253469][ T9355] genl_family_rcv_msg_doit+0x22a/0x330 [ 168.259023][ T9355] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 168.265181][ T9355] ? __lock_acquire+0x6b5/0x2cf0 [ 168.270120][ T9355] genl_rcv_msg+0x61c/0x7a0 [ 168.274621][ T9355] ? __pfx_genl_rcv_msg+0x10/0x10 [ 168.279758][ T9355] ? __pfx_nbd_genl_connect+0x10/0x10 [ 168.285492][ T9355] netlink_rcv_skb+0x232/0x4b0 [ 168.290449][ T9355] ? __pfx_genl_rcv_msg+0x10/0x10 [ 168.295573][ T9355] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 168.300975][ T9355] ? down_read+0x272/0x2e0 [ 168.305521][ T9355] ? genl_rcv+0xd/0x40 [ 168.309625][ T9355] genl_rcv+0x28/0x40 [ 168.314056][ T9355] netlink_unicast+0x75c/0x8e0 [ 168.318863][ T9355] netlink_sendmsg+0x813/0xb40 [ 168.323731][ T9355] ? __pfx_netlink_sendmsg+0x10/0x10 [ 168.329122][ T9355] ? aa_sock_msg_perm+0xf1/0x1b0 [ 168.334059][ T9355] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 168.339709][ T9355] ____sys_sendmsg+0x972/0x9f0 [ 168.344473][ T9355] ? futex_unqueue+0x211/0x240 [ 168.349238][ T9355] ? __pfx_____sys_sendmsg+0x10/0x10 [ 168.354619][ T9355] ? import_iovec+0x73/0xa0 [ 168.359134][ T9355] ___sys_sendmsg+0x2a5/0x360 [ 168.363900][ T9355] ? __pfx____sys_sendmsg+0x10/0x10 [ 168.369170][ T9355] ? futex_wait+0x29a/0x380 [ 168.373690][ T9355] ? __fget_files+0x2a/0x420 [ 168.378372][ T9355] ? __fget_files+0x3a0/0x420 [ 168.383248][ T9355] __x64_sys_sendmsg+0x1bd/0x2a0 [ 168.388197][ T9355] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 168.393663][ T9355] ? rcu_is_watching+0x15/0xb0 [ 168.398439][ T9355] do_syscall_64+0x14d/0xf80 [ 168.403026][ T9355] ? trace_irq_disable+0x3b/0x150 [ 168.408042][ T9355] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.414103][ T9355] ? clear_bhb_loop+0x40/0x90 [ 168.418788][ T9355] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.424683][ T9355] RIP: 0033:0x7fbd65b9c819 [ 168.429364][ T9355] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 168.449869][ T9355] RSP: 002b:00007fbd66ab2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 168.458289][ T9355] RAX: ffffffffffffffda RBX: 00007fbd65e15fa0 RCX: 00007fbd65b9c819 [ 168.466426][ T9355] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000007 [ 168.474406][ T9355] RBP: 00007fbd65c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 168.482371][ T9355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 168.490431][ T9355] R13: 00007fbd65e16038 R14: 00007fbd65e15fa0 R15: 00007ffd09a7dea8 [ 168.498817][ T9355] [ 168.502516][ T9355] Kernel Offset: disabled [ 168.507019][ T9355] Rebooting in 86400 seconds..