last executing test programs: 17.074115657s ago: executing program 1 (id=5921): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) close(0x4) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000006c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) setsockopt$inet_udp_int(r3, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r5, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) close(r6) 16.081619279s ago: executing program 1 (id=5932): socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(0x4) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, r2, 0x215eb000) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r1, 0xc0096616, 0x0) listen(r0, 0x0) 14.790523238s ago: executing program 1 (id=5943): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$l2tp6(0xa, 0x2, 0x73) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x800) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r3, 0x6, 0xc, 0x0, &(0x7f0000000080)) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r4, &(0x7f0000001bc0)=[{{&(0x7f0000000240)={0xa, 0x4f21, 0x400, @private0, 0x3}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000440)="14", 0x1}], 0x1}}], 0x1, 0x931766f6319eed40) shutdown(r4, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x40) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000000400)=@assoc_value={r6, 0x3d}, 0x8) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0xd4, 0x2c, 0xf35, 0x70bd23, 0x5, {0x0, 0x0, 0x0, r7, {0x0, 0x2400}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_basic={{0xa}, {0x9c, 0x2, [@TCA_BASIC_ACT={0x98, 0x3, [@m_simple={0x94, 0x14, 0x0, 0x0, {{0xb}, {0x68, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x100, 0xd, 0xa, 0xffff, 0x7ff}}, @TCA_DEF_DATA={0x49, 0x3, '\xff\xffftUA\xb6M\x10\xc8\xcd\xb9\f\xa2$\a\xa4\xa9\xab%\xa0\x89\r\x00\x00\x00\xebk\x19\x01\xfeP\x1e\xcf6P:%\x90\xf1\xa0\xccu\xde\x8e\x16\xdd\n$\xe2:\x05r\xbd\x97\'\x19\x85*\x9e\x9b\xe9\xd7\n\xcc\xe6\r.\v'}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x8, 0x42}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x440}, 0x0) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), r2) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000600)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xac, r8, 0x400, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x34, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x17}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x400}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}]}, 0xac}}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x9, &(0x7f0000000180)=ANY=[@ANYRESOCT=r0], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', r7, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r10, 0x10e, 0xb, &(0x7f0000000040)=0x15, 0x4) sendmsg$netlink(r10, &(0x7f0000002b40)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000007a00)={0x44, 0x26, 0x723, 0x0, 0x0, "", [@nested={0x32, 0xa9, 0x0, 0x1, [@generic="57d753865bc026738a23", @nested={0x21, 0xeb, 0x0, 0x1, [@typed={0x8, 0x20, 0x0, 0x0, @fd=r10}, @generic="2db88f6f88ebb2fd1bd786312d0c165c579777e85d"]}]}]}, 0x44}], 0x1, 0x0, 0x0, 0x24008015}, 0x0) socket(0x400000000010, 0x3, 0xdc) openat$nci(0xffffffffffffff9c, &(0x7f0000001440), 0x2, 0x0) getpeername$inet(r9, &(0x7f0000000280)={0x2, 0x0, @dev}, &(0x7f00000002c0)=0x10) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r11) 14.265399808s ago: executing program 1 (id=5949): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000240)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'vlan0\x00', 0x0}) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000240)=0x4000, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x6, r5, 0x0, r0}, 0x10) r6 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r6, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) recvmsg$unix(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) setsockopt$sock_attach_bpf(r6, 0x6, 0xd, &(0x7f0000000000), 0x4) setsockopt$sock_attach_bpf(r6, 0x1, 0x24, &(0x7f0000000000), 0x4) r8 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000040000000800000014100000", @ANYRES32, @ANYBLOB="00000000c71bfb230000000000", @ANYRES32=0x0, @ANYRES32], 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r8, 0x8933, &(0x7f0000000000)={'wg1\x00'}) sendmsg$inet(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x3e}, 0x408d3) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) sendmsg$nl_route(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001800010029bd7000fedbdf251d01050008000e0081f8631e6f5fb76339a8b8ce847e3f3432d8c100328c314fbf269467bb461c635a2b780880713fe7fed025ffff883b89ebfc1c4cc03bbf70d082d127da6b2c99986900b7585228d33969e652290d039914d07adf0c46bac0c888dbe399fcd29a2752b1a52b7200"/138, @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="150004000400000003030000918a76e1efa19e910500000008000900", @ANYRES32=r1, @ANYBLOB], 0x44}}, 0x0) 13.239926801s ago: executing program 1 (id=5957): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), r2) sendmsg$IEEE802154_LLSEC_GETPARAMS(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)={0x20, r3, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8041}, 0x40000) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_SETPARAMS(r2, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r4, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000801}, 0x8004) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_VIF(r6, 0x0, 0xcb, &(0x7f00000003c0)={0x1, 0x6, 0x78, 0x10000, @vifc_lcl_addr=@private=0xa010100, @loopback}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{r0}, &(0x7f0000000780), &(0x7f00000007c0)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r7, 0x8919, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x208c00, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0) close(0x3) recvmsg(r7, &(0x7f0000001e40)={0x0, 0x0, &(0x7f0000001c80)=[{&(0x7f0000000700)=""/99, 0x63}, {&(0x7f0000000840)=""/119, 0x77}, {&(0x7f0000000a00)=""/4096, 0x1000}, {&(0x7f0000001a00)=""/227, 0xe3}, {&(0x7f0000001b00)=""/18, 0x12}, {&(0x7f0000001b40)=""/135, 0x87}, {&(0x7f0000001c00)=""/102, 0x66}], 0x7, &(0x7f0000001d80)=""/156, 0x9c}, 0x40002000) r9 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r9, 0x65, 0x4, &(0x7f0000000040), 0x4) r10 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f00000001c0)={0x28, 0x1d, 0xfffffffb, 0xffffffff}, 0x10) write(r10, 0x0, 0x0) setsockopt$inet6_mtu(r10, 0x29, 0x17, &(0x7f0000000140)=0x3, 0x4) getsockopt$X25_QBITINCL(r10, 0x106, 0x1, &(0x7f0000000080), &(0x7f00000001c0)=0x4) 11.134654631s ago: executing program 1 (id=5961): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x24, r0, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x841}, 0x20040000) 10.294176573s ago: executing program 2 (id=5973): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), r2) sendmsg$IEEE802154_LLSEC_GETPARAMS(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)={0x20, r3, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8041}, 0x40000) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_SETPARAMS(r2, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r4, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000801}, 0x8004) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_VIF(r6, 0x0, 0xcb, &(0x7f00000003c0)={0x1, 0x6, 0x78, 0x10000, @vifc_lcl_addr=@private=0xa010100, @loopback}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{r0}, &(0x7f0000000780), &(0x7f00000007c0)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r7, 0x8919, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x208c00, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0) close(0x3) recvmsg(r7, &(0x7f0000001e40)={0x0, 0x0, &(0x7f0000001c80)=[{&(0x7f0000000700)=""/99, 0x63}, {&(0x7f0000000840)=""/119, 0x77}, {&(0x7f0000000a00)=""/4096, 0x1000}, {&(0x7f0000001a00)=""/227, 0xe3}, {&(0x7f0000001b00)=""/18, 0x12}, {&(0x7f0000001b40)=""/135, 0x87}, {&(0x7f0000001c00)=""/102, 0x66}], 0x7, &(0x7f0000001d80)=""/156, 0x9c}, 0x40002000) sendmsg$nl_generic(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x14, 0x3a, 0x301, 0x70bd29, 0xfffffffc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f0000000040), 0x4) r10 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f00000001c0)={0x28, 0x1d, 0xfffffffb, 0xffffffff}, 0x10) write(r10, 0x0, 0x0) setsockopt$inet6_mtu(r10, 0x29, 0x17, &(0x7f0000000140)=0x3, 0x4) getsockopt$X25_QBITINCL(r10, 0x106, 0x1, &(0x7f0000000080), &(0x7f00000001c0)=0x4) 7.189128046s ago: executing program 2 (id=5988): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000840), 0x0, 0x0, 0x0, 0x1}, 0x0) 6.978457723s ago: executing program 2 (id=5993): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@gettaction={0x28, 0x5a, 0x1, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x21}]}, 0x28}}, 0x0) 6.690531993s ago: executing program 2 (id=5995): socket(0x1000000010, 0x80002, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000580)=ANY=[@ANYBLOB="700000000009010400000000000000000a00000008000540000000160900010073797a30000000003c0002000c00028005000100000000002c000180140003000000000000000000000000000000000014000400200100000000000000000000000000020c00048008"], 0x70}}, 0x4008000) close(0x4) unshare(0x6a040000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c000010000000000000000000000000000000040900020073797a3100000000050004000000000011000300c87a18f5156caa122c657400008204db6aa94954d876000b050100000000000000000100060000002de2e8756e6b12f52f"], 0x4c}}, 0x0) r2 = socket(0x29, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)={0xb0, 0x9, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x88, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x1c7}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x7ff}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x2}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'bond0\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x4}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xcf2a}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @link_local}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010100}}}]}]}, 0xb0}, 0x1, 0x1000000, 0x0, 0x24004800}, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) socket(0xa, 0x3, 0xff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wpan0\x00'}) r6 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x398, 0x0, 0x1170, 0x1398, 0x160, 0x1170, 0x2c8, 0x1398, 0x1398, 0x2c8, 0x1398, 0x3, 0x0, {[{{@ipv6={@empty, @mcast1, [], [0x0, 0x0, 0xffffffff], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x2f}, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@inet=@socket3={{0x28}}, @common=@inet=@socket3={{0x28}, 0x5}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x100, 0x168, 0x0, {}, [@common=@srh={{0x30}, {0x73, 0x5, 0x1, 0xe, 0x81, 0x420, 0x1004}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0xc, 0xf, 0x0, 0x8, 'snmp_trap\x00', 'syz1\x00', {0x71}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f8) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xc0041, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETHDRSZ(r7, 0x400454d8, &(0x7f0000000140)=0x8001) write$tun(r7, &(0x7f0000000040)=ANY=[@ANYRES16=r7, @ANYBLOB="e1ed7b240904fabe4afd320000c8e7a7a412232e84e348930eeb"], 0xfdef) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r5, 0x0, 0x8000) socket(0x2b, 0x1, 0x0) 3.670046795s ago: executing program 0 (id=6008): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r1 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={r1, 0x58, &(0x7f0000000600)}, 0x10) 3.666552346s ago: executing program 3 (id=6009): socket$alg(0x26, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, &(0x7f0000000080)={{0x80000000, 0x7}, 0x100, './file0\x00'}) r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGL2TPSTATS(r0, 0x8901, &(0x7f0000000080)) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_udp(0x2, 0x2, 0x0) close(0x3) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) listen(r2, 0x80) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x5, &(0x7f0000000040)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r3, &(0x7f0000000000)={&(0x7f00000000c0)={0x1d, r4}, 0x10, &(0x7f00000003c0)={&(0x7f0000000200)=@canfd={{0x3, 0x1, 0x1}, 0x19, 0x3, 0x0, 0x0, "240a86003584b924cac358fd4e04000000000000003a4c67d606757d568df3780318ac673263b835cf2ba3a79fc2bf9b84364474135f7c9d64abb3c843d4d8be"}, 0x48}, 0x2, 0x0, 0x0, 0x24004884}, 0x34048009) accept$netrom(r2, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) socket$xdp(0x2c, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet6_icmp(0xa, 0x2, 0x3a) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) shutdown(r1, 0x0) 3.494343901s ago: executing program 0 (id=6011): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) getpeername(r0, &(0x7f00000002c0)=@qipcrtr, &(0x7f0000000340)=0x80) listen(0xffffffffffffffff, 0x3) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x40810}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="58000000100003042dbd70003d00000000000000", @ANYRES32=0x0, @ANYBLOB="a5fdad8800000000380012800b00"], 0x58}, 0x1, 0x0, 0x0, 0xc004}, 0x4804) setsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000080)=0x1, 0x4) 3.29169078s ago: executing program 0 (id=6014): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'macvlan0\x00', 0x0}) socket$inet(0x2, 0x1, 0x100) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0xf0) ioctl$SIOCAX25GETINFOOLD(r2, 0x89e9, &(0x7f00000000c0)) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000180)=[{0x34}]}, 0x10) r4 = gettid() r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = socket(0x10, 0x803, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYRES32=r5, @ANYRES32=r1, @ANYBLOB="0898050004500300080013009de2dbe5fbc0c154e7512071a85e737c9023d2a47b8d66efaacd8b83fd279bf727e92442687fed1168c09a1df0790ce74859ab0768730832d772dafbd61363e4dece1de7b65936d1bb477077968bf3a320605a2cbe0393402816336c64afa6bd14f106e3636731aec8abcf08d3dcd034ce6f0e90d68e0f6188567ba80a4fd9f98288c2e9e5b5bb877fc35dd4f3bafdc45792fd98cd089ea6", @ANYRES32=r4, @ANYBLOB="1400030076657468315f6d61637674617000000024000e000200000000000000050000000000000006000000000000000700020000000000"], 0x60}, 0x1, 0x0, 0x0, 0x4802}, 0x4000050) 3.010704039s ago: executing program 2 (id=6016): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x60880, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x28, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd0a, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newtfilter={0xa4, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x70, 0x2, [@TCA_MATCHALL_ACT={0x6c, 0x2, [@m_skbedit={0x68, 0x1, 0x0, 0x0, {{0xc}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0x2}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xe, 0x4}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x1}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x8, 0xffffffffffffffff, 0x6, 0x77}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x400}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x810}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000002300)="81", 0x1}], 0x1}, 0x4) 2.961461813s ago: executing program 0 (id=6017): r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000080)={@remote}, 0x14) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r2, &(0x7f00000000c0)={0x1d, r3}, 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0100"/16, @ANYRES64, @ANYRES64, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="ecff000001"], 0x48}}, 0x0) r4 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_SECURITY_KEYRING(r4, 0x110, 0x2, &(0x7f0000000500)='\x00\xe7(\xe0\xd5c\xd0a\x16\xca\x03$\x18i\x15\xc6\xf3Sf\x8dS8\xb4\"\xc5\xaecF\xa4!\t\x1fxd\xae\xb4\x90\xd3\xe6\xa2\xfbli\xd0\xa6H\xd6\x1dO\"\xbc\xda\x80\xbd\xa2\xdb\xff\x00\x00{\\\xd7\xbc*M\xd6\xe1\xdb\xe4\x00\x1a\xa2\x8a\x01\b\xc5\xe2+\xe2\x1e\xe9$d\xac[Z\x17\xb2\xab\x81\a\xbe\x17\x84\xfd\xadL7\xca\xe5\x8f\xb2\x9fv=L', 0xff09) sendmsg$can_bcm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="01000000220900"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64, @ANYBLOB="0000000001"], 0x80}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r5, 0x0, 0x8000000000025a5, 0x0) close(0x4) recvfrom$l2tp6(r0, 0x0, 0x0, 0x61, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x8000000004) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) r7 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r7, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000000), 0xffffff6a) sendfile(r7, r8, 0x0, 0xffffffff000) sendmmsg$inet(r7, &(0x7f0000003400)=[{{&(0x7f0000000080)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000002e00)=[{&(0x7f00000000c0)="2d68877bb760cad0e0326adb8db17720e5f4d61bc05d1c8c4db0ebc442c816f0c95d1e3dafd4e0e4a51428d14ab7af21a2f537656761d3c2e6ef25ce846361d49b2e1d0e65ebe187ef346308616d370dcacb8ecee4ece1ee2831213d9404ab920a5b51dec5852611ec6e962a8484f6dca0ab3cf6aa23122cecb37d98df1142f50615f30c8029421feae453c501efe9a087131d632dbad541215e8154fabc6aee148901a760873b016804a5bdc14cd28ced4ded1019731738fced1f9ace10d8f7d59425ef480ff9341525a866b498b2a71286f7e2db960e97744bf9ac6a64", 0xde}, {&(0x7f00000001c0)="566aa6cb14015acd8cacf3e336f996970fb5bb878382a0c813467b8726132ea0e4aaa9e61648c652d4b3711dab170f59be7e1eb7cb922f35a3a26ac8e1aa8b70e724f20f30bc2649206d003353bd5032d70a29b5b5ba9d79dfe759d1978e52475e9a13185618a77b707ba19fa502b375f2009af864e504ff1a6e2d413d2f79ba3c95a69dab61e542a71ff58e903a4e9e3bfd950496761e", 0x97}, {&(0x7f0000000c00)="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", 0x43f}], 0x3}}], 0x1, 0x4) close(r6) socket$netlink(0x10, 0x3, 0x10) pipe(&(0x7f00000002c0)) socket$nl_route(0x10, 0x3, 0x0) 2.680689297s ago: executing program 4 (id=6019): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001900)={0x0, 0xfffffffffffffff0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x30004004) sendmsg$key(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="02"], 0x70}, 0x19}, 0x20040814) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000280)={{0xffffffffffffffff, &(0x7f0000000080)='\xa2*\x00', 0x200000, &(0x7f00000000c0)={@align=0x4, {0x9, 0xfbff, 0x9, 0xc7}}, 0x100, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000140)=0x7}, {[0x7, 0x7fff, 0x4f11, 0x2]}, 0xaa6, 0xf3, &(0x7f0000000180)=""/243}) read(r1, &(0x7f0000000380)=""/95, 0x5f) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[], 0x98}, 0x1, 0x7}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000800)=ANY=[@ANYBLOB="84010000", @ANYRES16=r4, @ANYBLOB="0100d8000000000000000100000004000480080002000100000008000100000000000400088058010c8054000b800800090000000000080009000000000008000a000000000008000a000000000008000a000000000008000900000000000800097c86b722735035dc0067f6b13308000a000000000008000a000000000008000900975b9b5e04000b801c000b80080009"], 0x184}}, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) accept(r0, &(0x7f0000000600)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000680)=0x80) recvmsg$can_j1939(r1, &(0x7f00000005c0)={0x0, 0x44, 0x0, 0x54}, 0x10000) setsockopt$sock_int(r2, 0x1, 0x1e, &(0x7f0000000000)=0xfffffffa, 0x4) ioctl$FS_IOC_GETFSLABEL(r5, 0x81009431, &(0x7f0000000400)) 2.652278144s ago: executing program 3 (id=6020): socket(0x840000000002, 0x3, 0x100) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000400)={r0, r0, 0x6, 0x0, 0x0, 0x9, 0xfd, 0xc48, 0x1012, 0xc3, 0x1, 0x7, 'syz0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) 2.371008095s ago: executing program 4 (id=6021): r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, &(0x7f00000002c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x4, 0x0, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) getsockopt$bt_hci(r0, 0x84, 0x81, &(0x7f0000000080)=""/4060, &(0x7f00000010c0)=0xfdc) r1 = socket$inet6(0xa, 0x3, 0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="07000000040000001800000042a0000000000000", @ANYRES32, @ANYBLOB="010400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000080000000000000000400"/28], 0x50) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8890}, 0x20004450) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="38000000070a010100000006000000000a0040010900010073797a3100000000090002"], 0x38}, 0x1, 0x0, 0x0, 0x20040850}, 0x44054) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4ea3, 0x10, @loopback, 0x3}, 0x1c) socket$l2tp6(0xa, 0x2, 0x73) socket$l2tp6(0xa, 0x2, 0x73) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@local, 0x3, 0x1, 0x0, 0x8}, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r3, 0x400452c8, &(0x7f0000000100)) 2.229396828s ago: executing program 3 (id=6022): socket(0x840000000002, 0x3, 0x100) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000400)={r0, r0, 0x6, 0x0, 0x0, 0x9, 0xfd, 0xc48, 0x1012, 0xc3, 0x1, 0x7, 'syz0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) 2.147980499s ago: executing program 4 (id=6023): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004800)=[{{&(0x7f0000000580)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000028c0)=[{&(0x7f0000000b00)="cdbc", 0x2}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x3, 0x8060) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x3}, 0x8) 1.954973225s ago: executing program 4 (id=6024): socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(0x4) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r1, 0xc0096616, 0x0) socket(0x14, 0x2, 0x4) listen(r0, 0x0) 1.953283221s ago: executing program 3 (id=6025): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) getpeername(r0, &(0x7f00000002c0)=@qipcrtr, &(0x7f0000000340)=0x80) listen(0xffffffffffffffff, 0x3) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x40810}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="58000000100003042dbd70003d00000000000000", @ANYRES32=0x0, @ANYBLOB="a5fdad8800000000380012800b00010067656e6576650000280002"], 0x58}, 0x1, 0x0, 0x0, 0xc004}, 0x4804) setsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, 0x0, 0x0) 1.67912897s ago: executing program 4 (id=6026): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0x0, 0x6}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180), 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@bloom_filter={0x1e, 0x2, 0x46a5, 0x9, 0x8801, 0xffffffffffffffff, 0x2, '\x00', r1, r2, 0x1, 0x5, 0x3}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000000c0)={0x0, &(0x7f0000000980)=""/103, &(0x7f00000025c0), &(0x7f0000000600), 0x80, r3, 0x0, 0x7}, 0x38) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), r4) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000e00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r4, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010029bd7000fedbdf253f00000008000300", @ANYRES32=r7, @ANYBLOB="20005e8008000600c7f20000040001000800050022000020080007"], 0x3c}, 0x1, 0x0, 0x0, 0x80c0}, 0x4) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x64, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x5, 0x50}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x64}, 0x1, 0x0, 0x0, 0x8001}, 0x5) 1.605232852s ago: executing program 0 (id=6027): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0xfffd, @loopback}, 0x10, &(0x7f000000c540)=[{&(0x7f0000000280)='\b\x00', 0x2}, {&(0x7f000000b540)="920ca227df65", 0x6}], 0x2, &(0x7f000000b440)=ANY=[@ANYBLOB="1c00"], 0x20}, 0x20000890) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r2, 0x114, 0xa, &(0x7f0000000840)=ANY=[@ANYBLOB="0300f1f3"], 0x4) ioctl$FS_IOC_RESVSP(r1, 0x4030582b, &(0x7f00000001c0)={0x1100, 0x3, 0x7, 0x40000000000009}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r3, 0x29, 0xcb, 0x0, 0x57) bpf$PROG_LOAD(0x5, 0xfffffffffffffffd, 0xec) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x2, 0x1, 0x0, 0x9, 0x7, 0x0, 0x4070bd2c, 0x25dfdbfc, [@sadb_address={0x5, 0x6, 0x0, 0xa0, 0x0, @in6={0xa, 0x4e21, 0x2, @mcast1, 0x80000001}}]}, 0x38}, 0x1, 0x7}, 0x0) r5 = socket$phonet(0x23, 0x2, 0x1) sendto$phonet(r5, &(0x7f00000000c0)="355eabc213179bacccd12131c482aabccdf8bdefbce5f1dc0146c0c93c47a383251b0e799bef524cb4cb769aad1cc74dac4787ea709fd09ec5fde6dbca89792eb2d1ece080498fbf810e929558b35bd85deaddaa51299f9b0600caf617480f4e391df250760c9a1d023e1c9e4dd6af0d45a260f59125742f9237db5018e0ac0a6e98b3cca02d", 0x86, 0x0, &(0x7f00000001c0)={0x23, 0x95, 0x81, 0x2}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r6, &(0x7f0000007d00)={0x0, 0x0, &(0x7f0000007cc0)={&(0x7f0000007c80)={0x28, r7, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {}, {0xc, 0x14, 'syz1\x00'}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0xd, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_TTL={0x5, 0x4, 0x80}, @IFLA_IPTUN_ENCAP_LIMIT={0x5, 0x6, 0x4}]}}}]}, 0x44}}, 0x40) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="030000000400000004"], 0x48) 86.166359ms ago: executing program 3 (id=6028): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(0x0, r1) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000002a00)={0x0, 0x0, &(0x7f00000029c0)={&(0x7f0000002980)={0x2c, r2, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c000}, 0x800) 15.467061ms ago: executing program 0 (id=6029): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYRES32], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x10, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000d7220000000000000900000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000006900850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000006d00000095"], &(0x7f0000000600)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = socket$inet6(0xa, 0x2, 0x3a) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, &(0x7f0000000240), &(0x7f0000000380)=r5}, 0x20) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r4, &(0x7f0000000680)='@', &(0x7f0000000400)=@tcp6=r6, 0x2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000540)='\x00'/14, 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmmsg$inet6(r3, &(0x7f0000000200)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x7ffe, @mcast2}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000080)="8000102e7577d401", 0x8}], 0x1}}], 0x1, 0x4000084) r7 = socket(0x10, 0x2, 0xf) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x2f, 0x8, 0xff, 0x2, 0x28, @dev={0xfe, 0x80, '\x00', 0x16}, @loopback, 0x7, 0x8, 0xf, 0x8}}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="640000000206010100000000000000000000000005000100070000000900020073797a30000000001400078008001240fffffffe080013400000080015000300686173683a69702c706f72742c6e6574000000000500050002000000050004"], 0x64}, 0x1, 0x0, 0x0, 0x4001}, 0x0) getsockname$packet(r7, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) accept4$unix(r7, 0x0, &(0x7f00000003c0), 0x800) poll(0x0, 0x0, 0x2) r9 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r9, 0x104, 0x4, 0x0, &(0x7f0000000040)) ioctl$sock_SIOCBRDELBR(r9, 0x89a1, &(0x7f00000005c0)='xfrm0\x00') r10 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x10, &(0x7f0000000340)=ANY=[@ANYRESDEC=r0, @ANYRESOCT=r9, @ANYBLOB="0000000000000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x2, &(0x7f0000001440)=@gcm_128={{0x7}, "24bf8901121d6412", "7233d31e32c20dfcbc7bc3e32c4ea4a7", "64e05ed4", '\x00\x00\x00\x00\x00\x00 \b'}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r10, 0x0, 0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x12}, 0x50) 13.132165ms ago: executing program 4 (id=6030): socket(0x840000000002, 0x3, 0x100) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000400)={r0, r0, 0x6, 0x0, 0x0, 0x9, 0xfd, 0xc48, 0x1012, 0xc3, 0x1, 0x7, 'syz0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}, {0x0, 0xd}}}, 0x24}}, 0x0) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNDEL(r3, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) 12.67977ms ago: executing program 3 (id=6031): socket(0x840000000002, 0x3, 0x100) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000400)={r0, r0, 0x6, 0x0, 0x0, 0x9, 0xfd, 0xc48, 0x1012, 0xc3, 0x1, 0x7, 'syz0\x00'}) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) 0s ago: executing program 2 (id=6032): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x240600, 0x0) unshare(0x22020600) r3 = socket$xdp(0x2c, 0x3, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r4, 0x114, 0xa, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x4) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd010000000000140000006000000000082f00fe88a43de1a400000000000000027d01ff0200000000000000000000000000010000883e"], 0xfdef) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@newlink={0x80, 0x10, 0x44b, 0x70bd29, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x1a009, 0x8106}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @bond={{0x9}, {0x44, 0x2, 0x0, 0x1, [@IFLA_BOND_PRIMARY_RESELECT={0x5, 0xc, 0xff}, @IFLA_BOND_PRIMARY_RESELECT={0x5}, @IFLA_BOND_UPDELAY={0x8, 0x4, 0xfff}, @IFLA_BOND_MIN_LINKS={0x8, 0x12, 0xfba}, @IFLA_BOND_PRIMARY_RESELECT={0x5, 0xc, 0x2}, @IFLA_BOND_ARP_ALL_TARGETS={0x8, 0xa, 0x1}, @IFLA_BOND_TLB_DYNAMIC_LB={0x5, 0x1b, 0x3}, @IFLA_BOND_AD_ACTOR_SYS_PRIO={0x6, 0x18, 0x800}]}}}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}]}, 0x80}}, 0x148c0) sendmsg$nl_xfrm(r0, 0x0, 0x8008010) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="b800000019000100000000b3ca0c58dee46fff0000000000e0000002000000000000000000000000d8dc4417cec6981c0000000000000000030000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000007c20665ba0621e00000000000007000000000000000000000000400000000000000200000b0200000000000000ffffffffffffffff0000000000000000000000000000000000000000000000000000000000000000ffffffffffffff000000100000000000000000000000000029225d09a0407a1e07ec"], 0xb8}}, 0xd5) socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000480)={0x0, 0xa, 0x200}, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r8, 0x2000012, 0xffffffffffffffca, 0x0, &(0x7f0000000c40), 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000b80)=ANY=[@ANYBLOB="300000004a00030000200000000000000a008000", @ANYRES32=0x0, @ANYBLOB="0000000014000100fe8800000000000000000000000001012dcdb4f55f1b94b366fc43b09d343ea8a36981bb8f38a12db3ebee4022dad3f709648cde8a129f26caf62a7e8fa640c275a0616ba24054832217e681825c3a1bcf815bebad0852018a500cecc7319a97b09846e5a7b0fc2f805362d03c27f9eaecc25a8ab3a6afd67e643c2840fe19fba45e243b693bb4916a79ff55a1674a5cc36dc39c67aa25e221a26049b0ea23ab2ecaf9b0aaa1b1e48d50a6a8f8d14cc516bb7a8e65169a0b56ecb87a8cd765840ddd71bebae5d148e0fa831f55991e4ef81425"], 0x30}, 0x1, 0x0, 0x0, 0x44090}, 0x900) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WOWLAN(r9, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="01000d40ba77fbdbdf25490000000800010032000000"], 0x1c}, 0x1, 0x0, 0x0, 0x844}, 0x0) r11 = socket$inet(0xa, 0x801, 0x84) connect$inet(r11, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r11, 0xfffffffd) r12 = accept4(r11, 0x0, 0x0, 0x0) recvmmsg(r12, &(0x7f0000001000), 0x581, 0x40000000, 0x0) socket$rds(0x15, 0x5, 0x0) kernel console output (not intermixed with test programs): ear_bhb_loop+0x40/0x90 [ 631.534832][T23742] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 631.534891][T23742] RIP: 0033:0x7fc08539c819 [ 631.534946][T23742] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 631.534990][T23742] RSP: 002b:00007fc0862b8028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 631.535055][T23742] RAX: ffffffffffffffda RBX: 00007fc085615fa0 RCX: 00007fc08539c819 [ 631.535097][T23742] RDX: 00000000040000f0 RSI: 00002000000019c0 RDI: 0000000000000005 [ 631.535137][T23742] RBP: 00007fc0862b8090 R08: 0000000000000000 R09: 0000000000000000 [ 631.535170][T23742] R10: 0000000000000142 R11: 0000000000000246 R12: 0000000000000002 [ 631.535203][T23742] R13: 00007fc085616038 R14: 00007fc085615fa0 R15: 00007ffc533c1a38 [ 631.535307][T23742] [ 631.739075][T23748] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5266'. [ 631.758535][T23743] netlink: 'syz.4.5263': attribute type 23 has an invalid length. [ 631.786141][T23743] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5263'. [ 632.107945][T23769] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5273'. [ 632.127441][T23768] syzkaller0: entered promiscuous mode [ 632.133126][T23768] syzkaller0: entered allmulticast mode [ 632.226778][T23776] openvswitch: netlink: IPv4 tun info is not correct [ 632.398876][T23784] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5277'. [ 632.459703][T23789] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5273'. [ 632.742434][T23771] bridge7: port 1(veth3) entered blocking state [ 632.758582][T23771] bridge7: port 1(veth3) entered disabled state [ 632.770915][T23771] veth3: entered allmulticast mode [ 632.778703][T23771] veth3: entered promiscuous mode [ 632.789689][T23769] bridge7: port 2(veth0_to_bond) entered blocking state [ 632.799967][T23769] bridge7: port 2(veth0_to_bond) entered disabled state [ 632.810071][T23769] veth0_to_bond: entered allmulticast mode [ 632.821391][T23769] veth0_to_bond: entered promiscuous mode [ 632.854508][T23800] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5281'. [ 632.921087][T23802] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5281'. [ 633.196743][T23815] syzkaller0: entered promiscuous mode [ 633.215384][T23815] syzkaller0: entered allmulticast mode [ 633.246036][T23821] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5283'. [ 633.271483][T23821] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5283'. [ 633.942911][T23838] syzkaller0: entered promiscuous mode [ 633.953883][T23838] syzkaller0: entered allmulticast mode [ 635.720641][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 635.728753][ C1] lec:lec_tx_timeout: lec0 [ 635.733392][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 636.363888][T23914] pim6reg: entered allmulticast mode [ 636.387416][T23918] pim6reg: left allmulticast mode [ 636.509501][T23923] __nla_validate_parse: 7 callbacks suppressed [ 636.509520][T23923] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5310'. [ 636.526273][T23923] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5310'. [ 636.555778][T23923] syzkaller1: entered promiscuous mode [ 636.566047][T23923] syzkaller1: entered allmulticast mode [ 636.678489][T23931] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5311'. [ 636.692779][T23932] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5311'. [ 636.707232][T23933] syzkaller0: entered promiscuous mode [ 636.714926][T23933] syzkaller0: entered allmulticast mode [ 636.900967][T23942] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5314'. [ 636.944767][T23937] bond8: left promiscuous mode [ 636.949636][T23937] erspan1: left promiscuous mode [ 636.955665][T23937] bond8: left allmulticast mode [ 636.977261][T23937] erspan1: left allmulticast mode [ 637.171187][T23954] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5319'. [ 637.311846][T23957] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5320'. [ 637.324750][T23960] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5322'. [ 637.334554][T23960] netlink: 'syz.1.5322': attribute type 30 has an invalid length. [ 637.420536][T23960] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5322'. [ 637.438085][T23960] netlink: 'syz.1.5322': attribute type 30 has an invalid length. [ 637.504712][T23966] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5323'. [ 637.519548][T23966] netlink: 'syz.0.5323': attribute type 30 has an invalid length. [ 637.560147][ T7579] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 637.562025][T23966] netlink: 'syz.0.5323': attribute type 30 has an invalid length. [ 637.586691][ T7579] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 637.618520][ T7579] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 637.628138][ T7579] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 638.163611][T23984] syzkaller1: entered promiscuous mode [ 638.219900][T23984] syzkaller1: entered allmulticast mode [ 638.248944][T17392] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 638.281965][T17392] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 638.374566][T17392] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 638.397260][T17392] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 638.426262][T24001] netlink: 'syz.1.5330': attribute type 4 has an invalid length. [ 638.462015][T17392] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 638.492823][T23995] syzkaller0: entered promiscuous mode [ 638.502932][T23995] syzkaller0: entered allmulticast mode [ 638.517984][T17392] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 638.967808][T17392] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 638.981060][T24010] team0: left promiscuous mode [ 638.997300][T24010] team0: left allmulticast mode [ 639.012538][T24010] team1: left promiscuous mode [ 639.025303][T24010] team1: left allmulticast mode [ 639.093142][T17392] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 639.141940][T17392] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 639.172989][T17392] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 639.194433][T17392] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 639.229538][T17392] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 639.306141][T24036] bond0: (slave vlan0): Opening slave failed [ 639.477792][T24050] FAULT_INJECTION: forcing a failure. [ 639.477792][T24050] name failslab, interval 1, probability 0, space 0, times 0 [ 639.515411][T24050] CPU: 0 UID: 0 PID: 24050 Comm: syz.2.5346 Not tainted syzkaller #0 PREEMPT(full) [ 639.515436][T24050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 639.515448][T24050] Call Trace: [ 639.515455][T24050] [ 639.515463][T24050] dump_stack_lvl+0xe8/0x150 [ 639.515499][T24050] should_fail_ex+0x412/0x560 [ 639.515529][T24050] should_failslab+0xa8/0x100 [ 639.515550][T24050] __kmalloc_node_track_caller_noprof+0xeb/0x7b0 [ 639.515580][T24050] ? kobject_set_name_vargs+0x61/0x110 [ 639.515610][T24050] kvasprintf+0xeb/0x1a0 [ 639.515631][T24050] ? __pfx_kvasprintf+0x10/0x10 [ 639.515648][T24050] ? lruvec_stat_mod_folio+0x70/0x4b0 [ 639.515681][T24050] ? lruvec_stat_mod_folio+0x70/0x4b0 [ 639.515705][T24050] ? kvasprintf_const+0xe1/0x240 [ 639.515743][T24050] kobject_set_name_vargs+0x61/0x110 [ 639.515770][T24050] dev_set_name+0xe2/0x140 [ 639.515785][T24050] ? rcu_is_watching+0x15/0xb0 [ 639.515816][T24050] ? __pfx_dev_set_name+0x10/0x10 [ 639.515846][T24050] ? __pfx_ieee80211_emulate_remove_chanctx+0x10/0x10 [ 639.515868][T24050] ? __kmalloc_noprof+0x37d/0x760 [ 639.515894][T24050] ? wiphy_new_nm+0x625/0x19e0 [ 639.515918][T24050] wiphy_new_nm+0x7a1/0x19e0 [ 639.515938][T24050] ? ieee80211_alloc_hw_nm+0x935/0x1fa0 [ 639.515963][T24050] ? __pfx_ieee80211_emulate_remove_chanctx+0x10/0x10 [ 639.515991][T24050] ieee80211_alloc_hw_nm+0x3f3/0x1fa0 [ 639.516014][T24050] ? __pfx_ieee80211_emulate_add_chanctx+0x10/0x10 [ 639.516042][T24050] mac80211_hwsim_new_radio+0x1e8/0x5ba0 [ 639.516070][T24050] ? __pfx___nla_validate_parse+0x10/0x10 [ 639.516110][T24050] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 639.516138][T24050] ? __nla_parse+0x40/0x60 [ 639.516159][T24050] hwsim_new_radio_nl+0xf6a/0x1c00 [ 639.516203][T24050] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 639.516237][T24050] ? rcu_is_watching+0x15/0xb0 [ 639.516263][T24050] ? trace_kmalloc+0x2a/0xf0 [ 639.516300][T24050] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 639.516332][T24050] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 639.516358][T24050] genl_family_rcv_msg_doit+0x22a/0x330 [ 639.516383][T24050] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 639.516411][T24050] ? bpf_lsm_capable+0x9/0x20 [ 639.516435][T24050] ? security_capable+0x7e/0x2c0 [ 639.516481][T24050] genl_rcv_msg+0x61c/0x7a0 [ 639.516507][T24050] ? __pfx_genl_rcv_msg+0x10/0x10 [ 639.516526][T24050] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 639.516566][T24050] netlink_rcv_skb+0x232/0x4b0 [ 639.516594][T24050] ? __pfx_genl_rcv_msg+0x10/0x10 [ 639.516619][T24050] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 639.516660][T24050] ? down_read+0x270/0x2e0 [ 639.516683][T24050] ? genl_rcv+0xd/0x40 [ 639.516703][T24050] genl_rcv+0x28/0x40 [ 639.516721][T24050] netlink_unicast+0x75c/0x8e0 [ 639.516755][T24050] netlink_sendmsg+0x813/0xb40 [ 639.516790][T24050] ? __pfx_netlink_sendmsg+0x10/0x10 [ 639.516820][T24050] ? aa_sock_msg_perm+0xf1/0x1b0 [ 639.516851][T24050] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 639.516883][T24050] ____sys_sendmsg+0x972/0x9f0 [ 639.516911][T24050] ? __might_fault+0xaf/0x130 [ 639.516943][T24050] ? __pfx_____sys_sendmsg+0x10/0x10 [ 639.516984][T24050] ? import_iovec+0x73/0xa0 [ 639.517006][T24050] ___sys_sendmsg+0x2a5/0x360 [ 639.517034][T24050] ? __lock_acquire+0x6b5/0x2cf0 [ 639.517063][T24050] ? __pfx____sys_sendmsg+0x10/0x10 [ 639.517123][T24050] ? __fget_files+0x2a/0x420 [ 639.517146][T24050] ? __fget_files+0x3a0/0x420 [ 639.517178][T24050] __x64_sys_sendmsg+0x1bd/0x2a0 [ 639.517211][T24050] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 639.517250][T24050] ? __pfx_ksys_write+0x10/0x10 [ 639.517284][T24050] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 639.517305][T24050] do_syscall_64+0x15f/0xf80 [ 639.517327][T24050] ? trace_irq_disable+0x3b/0x140 [ 639.517346][T24050] ? clear_bhb_loop+0x40/0x90 [ 639.517369][T24050] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 639.517387][T24050] RIP: 0033:0x7fc08539c819 [ 639.517405][T24050] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 639.517421][T24050] RSP: 002b:00007fc0862b8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 639.517441][T24050] RAX: ffffffffffffffda RBX: 00007fc085615fa0 RCX: 00007fc08539c819 [ 639.517455][T24050] RDX: 0000000000000084 RSI: 0000200000000080 RDI: 0000000000000003 [ 639.517466][T24050] RBP: 00007fc0862b8090 R08: 0000000000000000 R09: 0000000000000000 [ 639.517478][T24050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 639.517489][T24050] R13: 00007fc085616038 R14: 00007fc085615fa0 R15: 00007ffc533c1a38 [ 639.517519][T24050] [ 640.063330][T24053] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 640.401290][T24072] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 640.745225][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 640.753318][ C1] lec:lec_tx_timeout: lec0 [ 640.757946][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 640.846739][T24096] netlink: 'syz.3.5358': attribute type 1 has an invalid length. [ 640.990261][T24101] bond7: (slave vxcan1): The slave device specified does not support setting the MAC address [ 641.010242][T24101] bond7: (slave vxcan1): Error -95 calling set_mac_address [ 641.089645][T24096] bond7: (slave bridge8): Enslaving as an active interface with a down link [ 641.106680][T24108] bond7: (slave gretap1): making interface the new active one [ 641.117765][T24108] bond7: (slave gretap1): Enslaving as an active interface with an up link [ 641.137268][T24110] tipc: Enabling of bearer rejected, failed to enable media [ 641.452596][T24124] netlink: 'syz.3.5371': attribute type 11 has an invalid length. [ 641.514030][T24130] FAULT_INJECTION: forcing a failure. [ 641.514030][T24130] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 641.585317][T24130] CPU: 0 UID: 0 PID: 24130 Comm: syz.0.5374 Not tainted syzkaller #0 PREEMPT(full) [ 641.585345][T24130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 641.585369][T24130] Call Trace: [ 641.585378][T24130] [ 641.585386][T24130] dump_stack_lvl+0xe8/0x150 [ 641.585418][T24130] should_fail_ex+0x412/0x560 [ 641.585449][T24130] _copy_from_user+0x2d/0xb0 [ 641.585469][T24130] ___sys_recvmsg+0x175/0x590 [ 641.585494][T24130] ? __pfx____sys_recvmsg+0x10/0x10 [ 641.585516][T24130] ? __fget_files+0x2a/0x420 [ 641.585566][T24130] do_recvmmsg+0x334/0x800 [ 641.585593][T24130] ? __pfx_do_recvmmsg+0x10/0x10 [ 641.585622][T24130] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 641.585662][T24130] __x64_sys_recvmmsg+0x198/0x250 [ 641.585685][T24130] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 641.585713][T24130] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.585733][T24130] do_syscall_64+0x15f/0xf80 [ 641.585755][T24130] ? trace_irq_disable+0x3b/0x140 [ 641.585776][T24130] ? clear_bhb_loop+0x40/0x90 [ 641.585799][T24130] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.585818][T24130] RIP: 0033:0x7fab3979c819 [ 641.585836][T24130] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 641.585853][T24130] RSP: 002b:00007fab3a6f8028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 641.585872][T24130] RAX: ffffffffffffffda RBX: 00007fab39a15fa0 RCX: 00007fab3979c819 [ 641.585886][T24130] RDX: 03ffffffffffff67 RSI: 0000200000002440 RDI: 0000000000000004 [ 641.585900][T24130] RBP: 00007fab3a6f8090 R08: 0000000000000000 R09: 0000000000000000 [ 641.585913][T24130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 641.585924][T24130] R13: 00007fab39a16038 R14: 00007fab39a15fa0 R15: 00007ffd3d17c2f8 [ 641.585954][T24130] [ 641.655455][T24139] __nla_validate_parse: 223 callbacks suppressed [ 641.655511][T24139] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5376'. [ 641.919598][T24150] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5381'. [ 642.275643][T24170] pim6reg: entered allmulticast mode [ 642.294381][T24170] pim6reg: left allmulticast mode [ 642.342770][T24174] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5387'. [ 642.363587][T24174] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5387'. [ 642.482158][T24177] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5390'. [ 642.527437][T24183] tipc: Enabling of bearer rejected, failed to enable media [ 642.591354][T24182] netlink: 240 bytes leftover after parsing attributes in process `syz.3.5393'. [ 642.621091][T24182] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5393'. [ 642.658625][T24184] syzkaller0: entered promiscuous mode [ 642.682630][T24184] syzkaller0: entered allmulticast mode [ 643.054750][T24215] netlink: 'syz.2.5396': attribute type 16 has an invalid length. [ 643.062854][T24215] netlink: 156 bytes leftover after parsing attributes in process `syz.2.5396'. [ 643.283449][T24226] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5396'. [ 644.662136][T24192] syzkaller0: entered promiscuous mode [ 644.668065][T24192] syzkaller0: entered allmulticast mode [ 645.223759][T24255] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5404'. [ 645.401251][T24269] FAULT_INJECTION: forcing a failure. [ 645.401251][T24269] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 645.440221][T24269] CPU: 0 UID: 0 PID: 24269 Comm: syz.0.5411 Not tainted syzkaller #0 PREEMPT(full) [ 645.440247][T24269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 645.440259][T24269] Call Trace: [ 645.440267][T24269] [ 645.440275][T24269] dump_stack_lvl+0xe8/0x150 [ 645.440307][T24269] should_fail_ex+0x412/0x560 [ 645.440339][T24269] _copy_from_user+0x2d/0xb0 [ 645.440359][T24269] ___sys_sendmsg+0x1c6/0x360 [ 645.440388][T24269] ? __lock_acquire+0x6b5/0x2cf0 [ 645.440418][T24269] ? __pfx____sys_sendmsg+0x10/0x10 [ 645.440480][T24269] ? __fget_files+0x2a/0x420 [ 645.440503][T24269] ? __fget_files+0x3a0/0x420 [ 645.440537][T24269] __x64_sys_sendmsg+0x1bd/0x2a0 [ 645.440569][T24269] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 645.440625][T24269] ? __pfx_ksys_write+0x10/0x10 [ 645.440663][T24269] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 645.440686][T24269] do_syscall_64+0x15f/0xf80 [ 645.440709][T24269] ? trace_irq_disable+0x3b/0x140 [ 645.440732][T24269] ? clear_bhb_loop+0x40/0x90 [ 645.440757][T24269] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 645.440777][T24269] RIP: 0033:0x7fab3979c819 [ 645.440807][T24269] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 645.440831][T24269] RSP: 002b:00007fab3a6f8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 645.440870][T24269] RAX: ffffffffffffffda RBX: 00007fab39a15fa0 RCX: 00007fab3979c819 [ 645.440885][T24269] RDX: 000000003000c81c RSI: 0000200000000340 RDI: 0000000000000003 [ 645.440899][T24269] RBP: 00007fab3a6f8090 R08: 0000000000000000 R09: 0000000000000000 [ 645.440912][T24269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 645.440924][T24269] R13: 00007fab39a16038 R14: 00007fab39a15fa0 R15: 00007ffd3d17c2f8 [ 645.440957][T24269] [ 645.669750][T24268] syzkaller0: entered promiscuous mode [ 645.675319][T24268] syzkaller0: entered allmulticast mode [ 645.765244][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 645.773343][ C1] lec:lec_tx_timeout: lec0 [ 645.778265][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 647.487283][T24276] __nla_validate_parse: 3 callbacks suppressed [ 647.487301][T24276] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5415'. [ 647.503756][T24283] syzkaller0: entered promiscuous mode [ 647.520773][T24283] syzkaller0: entered allmulticast mode [ 647.536108][T24290] syzkaller0: entered promiscuous mode [ 647.551664][T24290] syzkaller0: entered allmulticast mode [ 647.993919][T24315] FAULT_INJECTION: forcing a failure. [ 647.993919][T24315] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 648.012838][T24315] CPU: 0 UID: 0 PID: 24315 Comm: syz.3.5425 Not tainted syzkaller #0 PREEMPT(full) [ 648.012868][T24315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 648.012883][T24315] Call Trace: [ 648.012892][T24315] [ 648.012902][T24315] dump_stack_lvl+0xe8/0x150 [ 648.012940][T24315] should_fail_ex+0x412/0x560 [ 648.012977][T24315] _copy_from_user+0x2d/0xb0 [ 648.013001][T24315] ___sys_recvmsg+0x175/0x590 [ 648.013030][T24315] ? __pfx____sys_recvmsg+0x10/0x10 [ 648.013058][T24315] ? __fget_files+0x2a/0x420 [ 648.013120][T24315] do_recvmmsg+0x334/0x800 [ 648.013152][T24315] ? __pfx_do_recvmmsg+0x10/0x10 [ 648.013188][T24315] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 648.013243][T24315] __x64_sys_recvmmsg+0x198/0x250 [ 648.013268][T24315] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 648.013301][T24315] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 648.013326][T24315] do_syscall_64+0x15f/0xf80 [ 648.013355][T24315] ? trace_irq_disable+0x3b/0x140 [ 648.013379][T24315] ? clear_bhb_loop+0x40/0x90 [ 648.013407][T24315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 648.013496][T24315] RIP: 0033:0x7faf81f9c819 [ 648.013521][T24315] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 648.013541][T24315] RSP: 002b:00007faf82f04028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 648.013567][T24315] RAX: ffffffffffffffda RBX: 00007faf82215fa0 RCX: 00007faf81f9c819 [ 648.013584][T24315] RDX: 03ffffffffffff67 RSI: 0000200000002440 RDI: 0000000000000004 [ 648.013615][T24315] RBP: 00007faf82f04090 R08: 0000000000000000 R09: 0000000000000000 [ 648.013628][T24315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 648.013639][T24315] R13: 00007faf82216038 R14: 00007faf82215fa0 R15: 00007fff67c6ef68 [ 648.013670][T24315] [ 648.404708][T24322] syzkaller0: entered promiscuous mode [ 648.410600][T24322] syzkaller0: entered allmulticast mode [ 650.419028][T24346] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5436'. [ 650.572996][T24354] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5440'. [ 650.598634][T24361] openvswitch: netlink: Message has 4 unknown bytes. [ 650.605513][T24361] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 650.662433][T24355] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5441'. [ 650.686951][T24355] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5441'. [ 650.714375][T24355] netlink: 58 bytes leftover after parsing attributes in process `syz.3.5441'. [ 650.785231][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 650.793348][ C1] lec:lec_tx_timeout: lec0 [ 650.797974][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 651.013014][T24381] syzkaller0: entered promiscuous mode [ 651.019566][T24381] syzkaller0: entered allmulticast mode [ 651.323435][T24399] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5452'. [ 651.705427][T24415] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5457'. [ 651.739664][T24415] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5457'. [ 651.764148][T24415] netlink: 58 bytes leftover after parsing attributes in process `syz.2.5457'. [ 651.870486][T24431] netlink: 'syz.4.5463': attribute type 22 has an invalid length. [ 652.510186][T24470] __nla_validate_parse: 3 callbacks suppressed [ 652.510209][T24470] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5473'. [ 652.556013][T24472] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5474'. [ 652.566929][T24470] netlink: 616 bytes leftover after parsing attributes in process `syz.4.5473'. [ 652.604018][T24472] 8021q: adding VLAN 0 to HW filter on device bond9 [ 652.762407][T24479] netlink: 'syz.1.5475': attribute type 61 has an invalid length. [ 652.773587][T24484] siw: device registration error -23 [ 653.067566][T24493] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5479'. [ 653.208167][T24498] netlink: 'syz.3.5481': attribute type 14 has an invalid length. [ 653.245749][T24498] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5481'. [ 653.260787][T24502] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5481'. [ 653.289042][T24498] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5481'. [ 653.317979][ T7579] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 653.336583][ T7579] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 653.344829][ T7579] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 653.419620][ T7579] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 653.609051][T24514] FAULT_INJECTION: forcing a failure. [ 653.609051][T24514] name failslab, interval 1, probability 0, space 0, times 0 [ 653.648307][T24514] CPU: 1 UID: 0 PID: 24514 Comm: syz.1.5487 Not tainted syzkaller #0 PREEMPT(full) [ 653.648345][T24514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 653.648360][T24514] Call Trace: [ 653.648370][T24514] [ 653.648379][T24514] dump_stack_lvl+0xe8/0x150 [ 653.648416][T24514] should_fail_ex+0x412/0x560 [ 653.648454][T24514] should_failslab+0xa8/0x100 [ 653.648480][T24514] __kmalloc_cache_noprof+0x88/0x660 [ 653.648513][T24514] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 653.648538][T24514] ? sctp_add_bind_addr+0x8c/0x370 [ 653.648569][T24514] sctp_add_bind_addr+0x8c/0x370 [ 653.648600][T24514] sctp_copy_local_addr_list+0x314/0x4f0 [ 653.648629][T24514] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 653.648655][T24514] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 653.648682][T24514] ? sctp_v6_is_any+0x64/0x80 [ 653.648711][T24514] ? sctp_copy_one_addr+0x93/0x360 [ 653.648740][T24514] sctp_bind_addr_copy+0x189/0x3c0 [ 653.648773][T24514] sctp_connect_new_asoc+0x2ff/0x6b0 [ 653.648808][T24514] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 653.648847][T24514] ? __local_bh_enable_ip+0xd0/0x130 [ 653.648876][T24514] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 653.648898][T24514] ? security_sctp_bind_connect+0x7e/0x2c0 [ 653.648926][T24514] sctp_sendmsg+0x1528/0x2c10 [ 653.648972][T24514] ? __pfx_sctp_sendmsg+0x10/0x10 [ 653.649006][T24514] ? aa_sk_perm+0x6d5/0x900 [ 653.649043][T24514] ? __pfx_aa_sk_perm+0x10/0x10 [ 653.649086][T24514] ? sock_rps_record_flow+0x19/0x350 [ 653.649110][T24514] ? inet_sendmsg+0x2f4/0x370 [ 653.649134][T24514] ____sys_sendmsg+0x80a/0x9f0 [ 653.649194][T24514] ? __pfx_____sys_sendmsg+0x10/0x10 [ 653.649237][T24514] ? import_iovec+0x73/0xa0 [ 653.649264][T24514] ___sys_sendmsg+0x2a5/0x360 [ 653.649302][T24514] ? __lock_acquire+0x6b5/0x2cf0 [ 653.649360][T24514] ? __pfx____sys_sendmsg+0x10/0x10 [ 653.649401][T24514] ? kstrtouint+0x6e/0xe0 [ 653.649457][T24514] ? __fget_files+0x2a/0x420 [ 653.649484][T24514] ? __fget_files+0x3a0/0x420 [ 653.649521][T24514] __sys_sendmmsg+0x27c/0x4e0 [ 653.649562][T24514] ? __pfx___sys_sendmmsg+0x10/0x10 [ 653.649592][T24514] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 653.649659][T24514] ? ksys_write+0x242/0x270 [ 653.649695][T24514] ? __pfx_ksys_write+0x10/0x10 [ 653.649732][T24514] __x64_sys_sendmmsg+0xa0/0xc0 [ 653.649767][T24514] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 653.649789][T24514] do_syscall_64+0x15f/0xf80 [ 653.649815][T24514] ? trace_irq_disable+0x3b/0x140 [ 653.649842][T24514] ? clear_bhb_loop+0x40/0x90 [ 653.649869][T24514] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 653.649891][T24514] RIP: 0033:0x7fba8d79c819 [ 653.649912][T24514] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 653.649931][T24514] RSP: 002b:00007fba8e62a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 653.649954][T24514] RAX: ffffffffffffffda RBX: 00007fba8da15fa0 RCX: 00007fba8d79c819 [ 653.649969][T24514] RDX: 0000000000000002 RSI: 0000200000000bc0 RDI: 0000000000000005 [ 653.649984][T24514] RBP: 00007fba8e62a090 R08: 0000000000000000 R09: 0000000000000000 [ 653.649998][T24514] R10: 0000000020000004 R11: 0000000000000246 R12: 0000000000000002 [ 653.650013][T24514] R13: 00007fba8da16038 R14: 00007fba8da15fa0 R15: 00007ffcac6e0338 [ 653.650051][T24514] [ 654.060661][T24525] netlink: 'syz.1.5492': attribute type 2 has an invalid length. [ 654.071972][T24525] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5492'. [ 654.165856][T24523] syzkaller0: entered promiscuous mode [ 654.183696][T24523] syzkaller0: entered allmulticast mode [ 654.300705][T24536] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5493'. [ 654.312300][T24537] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5494'. [ 654.660120][T24552] netlink: 'syz.3.5498': attribute type 30 has an invalid length. [ 654.744213][T24550] hsr_slave_0: left promiscuous mode [ 654.764350][T24550] hsr_slave_1: left promiscuous mode [ 654.779762][T24552] netlink: 'syz.3.5498': attribute type 30 has an invalid length. [ 654.863429][T24561] vlan5: entered allmulticast mode [ 654.877618][T24561] bond0: entered allmulticast mode [ 654.888130][T24561] bridge3: entered allmulticast mode [ 655.022534][T24573] netlink: 'syz.1.5503': attribute type 13 has an invalid length. [ 655.127337][T24577] FAULT_INJECTION: forcing a failure. [ 655.127337][T24577] name failslab, interval 1, probability 0, space 0, times 0 [ 655.198856][T24577] CPU: 0 UID: 0 PID: 24577 Comm: syz.4.5505 Not tainted syzkaller #0 PREEMPT(full) [ 655.198881][T24577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 655.198893][T24577] Call Trace: [ 655.198900][T24577] [ 655.198908][T24577] dump_stack_lvl+0xe8/0x150 [ 655.198942][T24577] should_fail_ex+0x412/0x560 [ 655.198984][T24577] should_failslab+0xa8/0x100 [ 655.199000][T24577] ? security_file_alloc+0x34/0x310 [ 655.199016][T24577] kmem_cache_alloc_noprof+0x87/0x650 [ 655.199058][T24577] ? rcu_is_watching+0x15/0xb0 [ 655.199087][T24577] ? trace_kmem_cache_alloc+0x29/0xe0 [ 655.199119][T24577] security_file_alloc+0x34/0x310 [ 655.199153][T24577] init_file+0x90/0x2b0 [ 655.199178][T24577] alloc_empty_file+0x74/0x1d0 [ 655.199226][T24577] alloc_file_pseudo+0x155/0x240 [ 655.199254][T24577] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 655.199320][T24577] anon_inode_getfd+0xc8/0x1f0 [ 655.199346][T24577] btf_new_fd+0xa41/0xd40 [ 655.199385][T24577] ? __pfx_btf_new_fd+0x10/0x10 [ 655.199415][T24577] ? bpf_token_put+0x143/0x160 [ 655.199451][T24577] ? bpf_btf_load+0x126/0x190 [ 655.199476][T24577] __sys_bpf+0x4e5/0x950 [ 655.199499][T24577] ? __pfx___sys_bpf+0x10/0x10 [ 655.199531][T24577] ? ksys_write+0x242/0x270 [ 655.199559][T24577] ? __pfx_ksys_write+0x10/0x10 [ 655.199607][T24577] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 655.199629][T24577] __x64_sys_bpf+0x7c/0x90 [ 655.199649][T24577] do_syscall_64+0x15f/0xf80 [ 655.199673][T24577] ? trace_irq_disable+0x3b/0x140 [ 655.199696][T24577] ? clear_bhb_loop+0x40/0x90 [ 655.199719][T24579] syzkaller0: entered promiscuous mode [ 655.199720][T24577] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 655.199741][T24577] RIP: 0033:0x7fb9f0d9c819 [ 655.199759][T24577] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 655.199847][T24577] RSP: 002b:00007fb9eeff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 655.199935][T24577] RAX: ffffffffffffffda RBX: 00007fb9f1015fa0 RCX: 00007fb9f0d9c819 [ 655.199979][T24577] RDX: 0000000000000028 RSI: 00002000000000c0 RDI: 0000000000000012 [ 655.200017][T24577] RBP: 00007fb9eeff6090 R08: 0000000000000000 R09: 0000000000000000 [ 655.200054][T24577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 655.200086][T24577] R13: 00007fb9f1016038 R14: 00007fb9f1015fa0 R15: 00007ffc4c53ad98 [ 655.200181][T24577] [ 655.451473][T24579] syzkaller0: entered allmulticast mode [ 655.805260][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 655.813367][ C1] lec:lec_tx_timeout: lec0 [ 655.818267][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 656.011654][T24615] syzkaller0: entered promiscuous mode [ 656.024930][T24615] syzkaller0: entered allmulticast mode [ 656.051661][T24615] FAULT_INJECTION: forcing a failure. [ 656.051661][T24615] name failslab, interval 1, probability 0, space 0, times 0 [ 656.097078][T24615] CPU: 0 UID: 0 PID: 24615 Comm: syz.4.5515 Not tainted syzkaller #0 PREEMPT(full) [ 656.097109][T24615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 656.097124][T24615] Call Trace: [ 656.097134][T24615] [ 656.097144][T24615] dump_stack_lvl+0xe8/0x150 [ 656.097184][T24615] should_fail_ex+0x412/0x560 [ 656.097222][T24615] should_failslab+0xa8/0x100 [ 656.097248][T24615] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 656.097281][T24615] ? __alloc_skb+0x186/0x7d0 [ 656.097310][T24615] ? __alloc_skb+0x1d0/0x7d0 [ 656.097338][T24615] ? __local_bh_enable_ip+0xd0/0x130 [ 656.097384][T24615] __alloc_skb+0x1d0/0x7d0 [ 656.097422][T24615] ? tomoyo_check_open_permission+0x38e/0x470 [ 656.097470][T24615] alloc_skb_with_frags+0xca/0x890 [ 656.097504][T24615] ? __lock_acquire+0x6b5/0x2cf0 [ 656.097541][T24615] sock_alloc_send_pskb+0x878/0x990 [ 656.097571][T24615] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 656.097614][T24615] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 656.097641][T24615] ? dev_getfirstbyhwtype+0x24/0x280 [ 656.097666][T24615] ? dev_getfirstbyhwtype+0x24/0x280 [ 656.097689][T24615] ? dev_getfirstbyhwtype+0x24/0x280 [ 656.097716][T24615] ? dev_getfirstbyhwtype+0x240/0x280 [ 656.097745][T24615] dgram_sendmsg+0x40a/0xe80 [ 656.097783][T24615] ? __pfx_dgram_sendmsg+0x10/0x10 [ 656.097819][T24615] ? aa_sock_msg_perm+0xf1/0x1b0 [ 656.097849][T24615] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 656.097885][T24615] ____sys_sendmsg+0x972/0x9f0 [ 656.097934][T24615] ? __pfx_____sys_sendmsg+0x10/0x10 [ 656.097977][T24615] ? import_iovec+0x73/0xa0 [ 656.098004][T24615] ___sys_sendmsg+0x2a5/0x360 [ 656.098039][T24615] ? __lock_acquire+0x6b5/0x2cf0 [ 656.098072][T24615] ? __pfx____sys_sendmsg+0x10/0x10 [ 656.098172][T24615] ? __fget_files+0x2a/0x420 [ 656.098200][T24615] ? __fget_files+0x3a0/0x420 [ 656.098239][T24615] __x64_sys_sendmsg+0x1bd/0x2a0 [ 656.098276][T24615] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 656.098321][T24615] ? __pfx_ksys_write+0x10/0x10 [ 656.098363][T24615] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 656.098388][T24615] do_syscall_64+0x15f/0xf80 [ 656.098417][T24615] ? clear_bhb_loop+0x40/0x90 [ 656.098445][T24615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 656.098468][T24615] RIP: 0033:0x7fb9f0d9c819 [ 656.098489][T24615] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 656.098508][T24615] RSP: 002b:00007fb9eeff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 656.098533][T24615] RAX: ffffffffffffffda RBX: 00007fb9f1015fa0 RCX: 00007fb9f0d9c819 [ 656.098550][T24615] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 000000000000000b [ 656.098564][T24615] RBP: 00007fb9eeff6090 R08: 0000000000000000 R09: 0000000000000000 [ 656.098579][T24615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 656.098592][T24615] R13: 00007fb9f1016038 R14: 00007fb9f1015fa0 R15: 00007ffc4c53ad98 [ 656.098629][T24615] [ 656.401527][T24623] netlink: 'syz.0.5517': attribute type 4 has an invalid length. [ 656.832364][T24628] IPVS: Scheduler module ip_vs_ not found [ 656.983009][T24645] netlink: 'syz.1.5523': attribute type 1 has an invalid length. [ 657.538318][T24674] __nla_validate_parse: 21 callbacks suppressed [ 657.538332][T24674] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5531'. [ 657.559121][T24674] FAULT_INJECTION: forcing a failure. [ 657.559121][T24674] name failslab, interval 1, probability 0, space 0, times 0 [ 657.572313][T24674] CPU: 1 UID: 0 PID: 24674 Comm: syz.2.5531 Not tainted syzkaller #0 PREEMPT(full) [ 657.572341][T24674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 657.572356][T24674] Call Trace: [ 657.572366][T24674] [ 657.572375][T24674] dump_stack_lvl+0xe8/0x150 [ 657.572414][T24674] should_fail_ex+0x412/0x560 [ 657.572451][T24674] should_failslab+0xa8/0x100 [ 657.572477][T24674] __kmalloc_cache_noprof+0x88/0x660 [ 657.572513][T24674] ? nf_tables_newtable+0x435/0x1910 [ 657.572538][T24674] ? nla_strcmp+0x106/0x140 [ 657.572564][T24674] nf_tables_newtable+0x435/0x1910 [ 657.572611][T24674] nfnetlink_rcv+0x123e/0x27b0 [ 657.572682][T24674] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 657.572767][T24674] ? netlink_deliver_tap+0x2e/0x1b0 [ 657.572812][T24674] ? netlink_deliver_tap+0x2e/0x1b0 [ 657.572844][T24674] ? netlink_deliver_tap+0x2e/0x1b0 [ 657.572883][T24674] netlink_unicast+0x75c/0x8e0 [ 657.572926][T24674] netlink_sendmsg+0x813/0xb40 [ 657.572970][T24674] ? __pfx_netlink_sendmsg+0x10/0x10 [ 657.573045][T24674] ? aa_sock_msg_perm+0xf1/0x1b0 [ 657.573081][T24674] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 657.573115][T24674] ____sys_sendmsg+0x972/0x9f0 [ 657.573146][T24674] ? __might_fault+0xaf/0x130 [ 657.573180][T24674] ? __pfx_____sys_sendmsg+0x10/0x10 [ 657.573219][T24674] ? import_iovec+0x73/0xa0 [ 657.573244][T24674] ___sys_sendmsg+0x2a5/0x360 [ 657.573278][T24674] ? __lock_acquire+0x6b5/0x2cf0 [ 657.573308][T24674] ? __pfx____sys_sendmsg+0x10/0x10 [ 657.573376][T24674] ? __fget_files+0x2a/0x420 [ 657.573402][T24674] ? __fget_files+0x3a0/0x420 [ 657.573438][T24674] __x64_sys_sendmsg+0x1bd/0x2a0 [ 657.573473][T24674] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 657.573515][T24674] ? __pfx_ksys_write+0x10/0x10 [ 657.573554][T24674] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 657.573577][T24674] do_syscall_64+0x15f/0xf80 [ 657.573601][T24674] ? trace_irq_disable+0x3b/0x140 [ 657.573623][T24674] ? clear_bhb_loop+0x40/0x90 [ 657.573649][T24674] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 657.573670][T24674] RIP: 0033:0x7fc08539c819 [ 657.573689][T24674] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 657.573707][T24674] RSP: 002b:00007fc0862b8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 657.573730][T24674] RAX: ffffffffffffffda RBX: 00007fc085615fa0 RCX: 00007fc08539c819 [ 657.573746][T24674] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 657.573759][T24674] RBP: 00007fc0862b8090 R08: 0000000000000000 R09: 0000000000000000 [ 657.573771][T24674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 657.573784][T24674] R13: 00007fc085616038 R14: 00007fc085615fa0 R15: 00007ffc533c1a38 [ 657.573817][T24674] [ 657.930010][T24679] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5534'. [ 658.032529][T24685] FAULT_INJECTION: forcing a failure. [ 658.032529][T24685] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 658.079874][T24685] CPU: 1 UID: 0 PID: 24685 Comm: syz.4.5536 Not tainted syzkaller #0 PREEMPT(full) [ 658.079903][T24685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 658.079918][T24685] Call Trace: [ 658.079927][T24685] [ 658.079937][T24685] dump_stack_lvl+0xe8/0x150 [ 658.079975][T24685] should_fail_ex+0x412/0x560 [ 658.080011][T24685] _copy_to_user+0x31/0xb0 [ 658.080038][T24685] bpf_test_finish+0x53c/0x6b0 [ 658.080081][T24685] ? trace_kmem_cache_alloc+0x29/0xe0 [ 658.080111][T24685] ? slab_build_skb+0x52/0x410 [ 658.080144][T24685] ? __pfx_bpf_test_finish+0x10/0x10 [ 658.080189][T24685] bpf_prog_test_run_skb+0x1250/0x2350 [ 658.080225][T24685] ? bpf_prog_test_run_skb+0x1d1/0x2350 [ 658.080266][T24685] ? __fget_files+0x2a/0x420 [ 658.080292][T24685] ? __fget_files+0x3a0/0x420 [ 658.080318][T24685] ? __fget_files+0x2a/0x420 [ 658.080349][T24685] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 658.080379][T24685] bpf_prog_test_run+0x2c7/0x340 [ 658.080408][T24685] __sys_bpf+0x643/0x950 [ 658.080434][T24685] ? __pfx___sys_bpf+0x10/0x10 [ 658.080473][T24685] ? ksys_write+0x242/0x270 [ 658.080509][T24685] ? __pfx_ksys_write+0x10/0x10 [ 658.080545][T24685] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 658.080568][T24685] __x64_sys_bpf+0x7c/0x90 [ 658.080590][T24685] do_syscall_64+0x15f/0xf80 [ 658.080616][T24685] ? trace_irq_disable+0x3b/0x140 [ 658.080639][T24685] ? clear_bhb_loop+0x40/0x90 [ 658.080666][T24685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 658.080688][T24685] RIP: 0033:0x7fb9f0d9c819 [ 658.080708][T24685] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 658.080727][T24685] RSP: 002b:00007fb9eeff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 658.080751][T24685] RAX: ffffffffffffffda RBX: 00007fb9f1015fa0 RCX: 00007fb9f0d9c819 [ 658.080768][T24685] RDX: 0000000000000050 RSI: 0000200000000380 RDI: 000000000000000a [ 658.080782][T24685] RBP: 00007fb9eeff6090 R08: 0000000000000000 R09: 0000000000000000 [ 658.080796][T24685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 658.080810][T24685] R13: 00007fb9f1016038 R14: 00007fb9f1015fa0 R15: 00007ffc4c53ad98 [ 658.080849][T24685] [ 658.391844][T24693] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5539'. [ 658.776459][T24717] netlink: 'syz.1.5545': attribute type 39 has an invalid length. [ 658.798480][T24716] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5547'. [ 659.027102][T24728] No such timeout policy "syz0" [ 659.047820][T24733] FAULT_INJECTION: forcing a failure. [ 659.047820][T24733] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 659.086128][T24733] CPU: 1 UID: 0 PID: 24733 Comm: syz.3.5553 Not tainted syzkaller #0 PREEMPT(full) [ 659.086156][T24733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 659.086168][T24733] Call Trace: [ 659.086176][T24733] [ 659.086185][T24733] dump_stack_lvl+0xe8/0x150 [ 659.086219][T24733] should_fail_ex+0x412/0x560 [ 659.086251][T24733] _copy_to_user+0x31/0xb0 [ 659.086274][T24733] simple_read_from_buffer+0xe1/0x170 [ 659.086304][T24733] proc_fail_nth_read+0x1bb/0x230 [ 659.086334][T24733] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 659.086363][T24733] ? rw_verify_area+0x2a6/0x4d0 [ 659.086390][T24733] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 659.086417][T24733] vfs_read+0x20c/0xa70 [ 659.086450][T24733] ? __pfx___mutex_lock+0x10/0x10 [ 659.086475][T24733] ? __pfx_vfs_read+0x10/0x10 [ 659.086504][T24733] ? __fget_files+0x2a/0x420 [ 659.086532][T24733] ? __fget_files+0x3a0/0x420 [ 659.086554][T24733] ? __fget_files+0x2a/0x420 [ 659.086587][T24733] ksys_read+0x150/0x270 [ 659.086617][T24733] ? __pfx_ksys_read+0x10/0x10 [ 659.086653][T24733] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 659.086674][T24733] do_syscall_64+0x15f/0xf80 [ 659.086697][T24733] ? trace_irq_disable+0x3b/0x140 [ 659.086718][T24733] ? clear_bhb_loop+0x40/0x90 [ 659.086746][T24733] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 659.086765][T24733] RIP: 0033:0x7faf81f5d04e [ 659.086782][T24733] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 659.086799][T24733] RSP: 002b:00007faf82f03fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 659.086820][T24733] RAX: ffffffffffffffda RBX: 00007faf82f046c0 RCX: 00007faf81f5d04e [ 659.086834][T24733] RDX: 000000000000000f RSI: 00007faf82f040a0 RDI: 000000000000000a [ 659.086847][T24733] RBP: 00007faf82f04090 R08: 0000000000000000 R09: 0000000000000000 [ 659.086859][T24733] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 659.086871][T24733] R13: 00007faf82216038 R14: 00007faf82215fa0 R15: 00007fff67c6ef68 [ 659.086902][T24733] [ 659.306428][T24737] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5555'. [ 659.362127][T24740] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5556'. [ 659.371109][T24740] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5556'. [ 659.479315][T24746] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5557'. [ 659.519576][T24746] netlink: 'syz.3.5557': attribute type 30 has an invalid length. [ 659.627154][T24746] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5557'. [ 659.637579][T24746] netlink: 'syz.3.5557': attribute type 30 has an invalid length. [ 659.958804][T24770] tipc: Enabling of bearer rejected, failed to enable media [ 660.042957][T24772] xt_hashlimit: size too large, truncated to 1048576 [ 660.057182][T24774] FAULT_INJECTION: forcing a failure. [ 660.057182][T24774] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 660.093766][T24774] CPU: 1 UID: 0 PID: 24774 Comm: syz.2.5567 Not tainted syzkaller #0 PREEMPT(full) [ 660.093795][T24774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 660.093808][T24774] Call Trace: [ 660.093817][T24774] [ 660.093826][T24774] dump_stack_lvl+0xe8/0x150 [ 660.093863][T24774] should_fail_ex+0x412/0x560 [ 660.093898][T24774] _copy_from_user+0x2d/0xb0 [ 660.093930][T24774] ___sys_recvmsg+0x175/0x590 [ 660.093957][T24774] ? __pfx____sys_recvmsg+0x10/0x10 [ 660.093983][T24774] ? __fget_files+0x2a/0x420 [ 660.094042][T24774] do_recvmmsg+0x334/0x800 [ 660.094072][T24774] ? __pfx_do_recvmmsg+0x10/0x10 [ 660.094106][T24774] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 660.094152][T24774] __x64_sys_recvmmsg+0x198/0x250 [ 660.094177][T24774] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 660.094207][T24774] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 660.094231][T24774] do_syscall_64+0x15f/0xf80 [ 660.094256][T24774] ? trace_irq_disable+0x3b/0x140 [ 660.094278][T24774] ? clear_bhb_loop+0x40/0x90 [ 660.094304][T24774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 660.094325][T24774] RIP: 0033:0x7fc08539c819 [ 660.094345][T24774] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 660.094364][T24774] RSP: 002b:00007fc0862b8028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 660.094388][T24774] RAX: ffffffffffffffda RBX: 00007fc085615fa0 RCX: 00007fc08539c819 [ 660.094404][T24774] RDX: 00000000040000f0 RSI: 00002000000019c0 RDI: 0000000000000004 [ 660.094420][T24774] RBP: 00007fc0862b8090 R08: 0000000000000000 R09: 0000000000000000 [ 660.094433][T24774] R10: 0000000000000142 R11: 0000000000000246 R12: 0000000000000002 [ 660.094446][T24774] R13: 00007fc085616038 R14: 00007fc085615fa0 R15: 00007ffc533c1a38 [ 660.094481][T24774] [ 660.307695][T24778] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5568'. [ 660.825269][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 660.833362][ C1] lec:lec_tx_timeout: lec0 [ 660.838047][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 661.044973][T24813] syzkaller0: entered promiscuous mode [ 661.065497][T24813] syzkaller0: entered allmulticast mode [ 661.088448][T24813] TC_ACT_REPEAT abuse ? [ 661.108677][T24821] FAULT_INJECTION: forcing a failure. [ 661.108677][T24821] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 661.130313][T24816] IPVS: Unknown mcast interface: hsr0 [ 661.138408][T24821] CPU: 1 UID: 0 PID: 24821 Comm: syz.3.5581 Not tainted syzkaller #0 PREEMPT(full) [ 661.138435][T24821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 661.138449][T24821] Call Trace: [ 661.138458][T24821] [ 661.138468][T24821] dump_stack_lvl+0xe8/0x150 [ 661.138505][T24821] should_fail_ex+0x412/0x560 [ 661.138543][T24821] _copy_to_user+0x31/0xb0 [ 661.138569][T24821] simple_read_from_buffer+0xe1/0x170 [ 661.138603][T24821] proc_fail_nth_read+0x1bb/0x230 [ 661.138649][T24821] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 661.138680][T24821] ? rw_verify_area+0x2a6/0x4d0 [ 661.138715][T24821] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 661.138745][T24821] vfs_read+0x20c/0xa70 [ 661.138780][T24821] ? __pfx___mutex_lock+0x10/0x10 [ 661.138808][T24821] ? __pfx_vfs_read+0x10/0x10 [ 661.138838][T24821] ? __fget_files+0x2a/0x420 [ 661.138869][T24821] ? __fget_files+0x3a0/0x420 [ 661.138894][T24821] ? __fget_files+0x2a/0x420 [ 661.138930][T24821] ksys_read+0x150/0x270 [ 661.138962][T24821] ? __pfx_ksys_read+0x10/0x10 [ 661.139001][T24821] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.139024][T24821] do_syscall_64+0x15f/0xf80 [ 661.139048][T24821] ? trace_irq_disable+0x3b/0x140 [ 661.139071][T24821] ? clear_bhb_loop+0x40/0x90 [ 661.139097][T24821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.139118][T24821] RIP: 0033:0x7faf81f5d04e [ 661.139137][T24821] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 661.139155][T24821] RSP: 002b:00007faf82f03fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 661.139178][T24821] RAX: ffffffffffffffda RBX: 00007faf82f046c0 RCX: 00007faf81f5d04e [ 661.139192][T24821] RDX: 000000000000000f RSI: 00007faf82f040a0 RDI: 0000000000000004 [ 661.139205][T24821] RBP: 00007faf82f04090 R08: 0000000000000000 R09: 0000000000000000 [ 661.139218][T24821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 661.139231][T24821] R13: 00007faf82216038 R14: 00007faf82215fa0 R15: 00007fff67c6ef68 [ 661.139276][T24821] [ 661.669461][T24832] tÑam_slave_1: entered promiscuous mode [ 661.698382][T24832] tÑam_slave_1: entered allmulticast mode [ 661.758235][T24841] syzkaller0: entered promiscuous mode [ 661.763938][T24841] syzkaller0: entered allmulticast mode [ 662.260659][T24860] netlink: 'syz.4.5595': attribute type 3 has an invalid length. [ 662.362081][T24867] wg1 speed is unknown, defaulting to 1000 [ 662.684506][T24885] __nla_validate_parse: 6 callbacks suppressed [ 662.684523][T24885] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5602'. [ 662.770142][T24884] tÑam_slave_1: left promiscuous mode [ 662.810032][T24884] tÑam_slave_1: left allmulticast mode [ 662.830540][ T7585] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 662.855303][ T7585] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 662.863807][ T7585] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 662.878077][ T7585] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 663.009389][T24895] syzkaller0: entered promiscuous mode [ 663.027427][T24895] syzkaller0: entered allmulticast mode [ 663.300587][T24904] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5609'. [ 663.325744][T24904] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5609'. [ 663.335081][T24904] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5609'. [ 663.344567][T24904] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5609'. [ 663.575711][T24924] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5613'. [ 663.587444][T24923] FAULT_INJECTION: forcing a failure. [ 663.587444][T24923] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 663.611348][T24925] netlink: 63 bytes leftover after parsing attributes in process `syz.2.5616'. [ 663.629388][T24923] CPU: 1 UID: 0 PID: 24923 Comm: syz.0.5615 Not tainted syzkaller #0 PREEMPT(full) [ 663.629414][T24923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 663.629428][T24923] Call Trace: [ 663.629443][T24923] [ 663.629452][T24923] dump_stack_lvl+0xe8/0x150 [ 663.629487][T24923] should_fail_ex+0x412/0x560 [ 663.629522][T24923] _copy_from_user+0x2d/0xb0 [ 663.629544][T24923] do_sock_getsockopt+0x200/0x7e0 [ 663.629581][T24923] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 663.629628][T24923] ? __fget_files+0x3a0/0x420 [ 663.629653][T24923] ? __fget_files+0x2a/0x420 [ 663.629685][T24923] __x64_sys_getsockopt+0x1a4/0x240 [ 663.629733][T24923] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 663.629754][T24923] do_syscall_64+0x15f/0xf80 [ 663.629776][T24923] ? trace_irq_disable+0x3b/0x140 [ 663.629797][T24923] ? clear_bhb_loop+0x40/0x90 [ 663.629820][T24923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 663.629839][T24923] RIP: 0033:0x7fab3979c819 [ 663.629857][T24923] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 663.629874][T24923] RSP: 002b:00007fab3a6d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 663.629894][T24923] RAX: ffffffffffffffda RBX: 00007fab39a16090 RCX: 00007fab3979c819 [ 663.629908][T24923] RDX: 000000000000006d RSI: 0000000000000084 RDI: 0000000000000003 [ 663.629920][T24923] RBP: 00007fab3a6d7090 R08: 0000200000000180 R09: 0000000000000000 [ 663.629933][T24923] R10: 0000200000000a80 R11: 0000000000000246 R12: 0000000000000001 [ 663.629945][T24923] R13: 00007fab39a16128 R14: 00007fab39a16090 R15: 00007ffd3d17c2f8 [ 663.629976][T24923] [ 663.918046][T24913] tipc: Enabled bearer , priority 0 [ 663.939314][T24913] syzkaller0: entered promiscuous mode [ 663.980791][T24928] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5617'. [ 663.986196][T24913] syzkaller0: entered allmulticast mode [ 664.049604][T24913] tipc: Resetting bearer [ 664.077835][T24912] tipc: Resetting bearer [ 664.134890][T24912] tipc: Disabling bearer [ 664.154843][T24946] netlink: 7060 bytes leftover after parsing attributes in process `syz.1.5621'. [ 664.366854][T24955] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.5624'. [ 664.399443][T24955] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 664.576249][T24965] syzkaller0: entered promiscuous mode [ 664.582861][T24965] syzkaller0: entered allmulticast mode [ 665.222523][T24986] netlink: 'syz.1.5632': attribute type 1 has an invalid length. [ 665.453529][T24992] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 666.527599][T24984] vlan5: left allmulticast mode [ 666.532563][T24984] bond0: left allmulticast mode [ 666.537902][T24984] bridge3: left allmulticast mode [ 666.543733][T24988] netlink: 'syz.1.5632': attribute type 1 has an invalid length. [ 666.615249][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5780 ms [ 666.623362][ C1] lec:lec_tx_timeout: lec0 [ 667.064913][ T5844] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 667.079605][ T5844] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 667.087993][ T5844] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 667.097405][ T5844] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 667.105051][ T5844] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 667.225883][ T5834] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 667.243041][ T5834] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 667.251792][ T5834] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 667.272670][ T5834] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 667.282646][ T5834] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 667.526353][T25011] wg1 speed is unknown, defaulting to 1000 [ 667.657915][T25011] chnl_net:caif_netlink_parms(): no params data found [ 667.732945][T25011] bridge0: port 1(bridge_slave_0) entered blocking state [ 667.740407][T25011] bridge0: port 1(bridge_slave_0) entered disabled state [ 667.747744][T25011] bridge_slave_0: entered allmulticast mode [ 667.754856][T25011] bridge_slave_0: entered promiscuous mode [ 667.763470][T25011] bridge0: port 2(bridge_slave_1) entered blocking state [ 667.770766][T25011] bridge0: port 2(bridge_slave_1) entered disabled state [ 667.778416][T25011] bridge_slave_1: entered allmulticast mode [ 667.785814][T25011] bridge_slave_1: entered promiscuous mode [ 667.817649][T25011] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 667.830090][T25011] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 667.861553][T25011] team0: Port device team_slave_0 added [ 667.869604][T25011] team0: Port device team_slave_1 added [ 667.894936][T25011] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 667.902053][T25011] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 667.928352][T25011] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 667.940810][T25011] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 667.947970][T25011] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 667.973909][T25011] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 668.018693][T25011] hsr_slave_0: entered promiscuous mode [ 668.024959][T25011] hsr_slave_1: entered promiscuous mode [ 668.031305][T25011] debugfs: 'hsr0' already exists in 'hsr' [ 668.037157][T25011] Cannot create hsr debugfs directory [ 668.431312][T25011] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 668.440769][T25011] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 668.456445][T25011] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 668.468651][T25011] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 668.476360][T25011] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 668.485506][T25011] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 668.493584][T25011] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 668.503342][T25011] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 668.528556][T25011] bridge0: port 2(bridge_slave_1) entered blocking state [ 668.535692][T25011] bridge0: port 2(bridge_slave_1) entered forwarding state [ 668.543214][T25011] bridge0: port 1(bridge_slave_0) entered blocking state [ 668.550437][T25011] bridge0: port 1(bridge_slave_0) entered forwarding state [ 668.603861][T25011] 8021q: adding VLAN 0 to HW filter on device bond0 [ 668.618803][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 668.626616][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 668.646298][T25011] 8021q: adding VLAN 0 to HW filter on device team0 [ 668.658750][T17391] bridge0: port 1(bridge_slave_0) entered blocking state [ 668.665875][T17391] bridge0: port 1(bridge_slave_0) entered forwarding state [ 668.679272][T17391] bridge0: port 2(bridge_slave_1) entered blocking state [ 668.686401][T17391] bridge0: port 2(bridge_slave_1) entered forwarding state [ 668.853783][T25011] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 668.893496][T25011] veth0_vlan: entered promiscuous mode [ 668.904120][T25011] veth1_vlan: entered promiscuous mode [ 668.933009][T25011] veth0_macvtap: entered promiscuous mode [ 668.943610][T25011] veth1_macvtap: entered promiscuous mode [ 668.963286][T25011] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 668.976279][T25011] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 668.989866][ T57] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 668.999665][ T57] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 669.010847][ T57] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 669.021195][ T57] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 669.120151][T17391] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 669.128473][T17391] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 669.158587][ T7576] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 669.169357][ T7576] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 669.335346][ T5834] Bluetooth: hci5: command tx timeout [ 671.415397][ T5834] Bluetooth: hci5: command tx timeout [ 672.423095][T25052] syzkaller0: entered promiscuous mode [ 672.446796][T25052] syzkaller0: entered allmulticast mode [ 672.529098][T25061] __nla_validate_parse: 5 callbacks suppressed [ 672.529129][T25061] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5645'. [ 672.634707][ T5844] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 672.648476][ T5844] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 672.660684][ T5844] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 672.674306][ T5844] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 672.685476][ T5844] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 672.790966][T25064] syzkaller0: entered promiscuous mode [ 672.796640][T25064] syzkaller0: entered allmulticast mode [ 673.147723][T25086] FAULT_INJECTION: forcing a failure. [ 673.147723][T25086] name failslab, interval 1, probability 0, space 0, times 0 [ 673.160818][T25086] CPU: 1 UID: 0 PID: 25086 Comm: syz.4.5655 Not tainted syzkaller #0 PREEMPT(full) [ 673.160867][T25086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 673.160880][T25086] Call Trace: [ 673.160888][T25086] [ 673.160898][T25086] dump_stack_lvl+0xe8/0x150 [ 673.160932][T25086] should_fail_ex+0x412/0x560 [ 673.160967][T25086] should_failslab+0xa8/0x100 [ 673.160991][T25086] __kmalloc_cache_noprof+0x88/0x660 [ 673.161020][T25086] ? lockdep_hardirqs_on+0x7a/0x110 [ 673.161046][T25086] ? __request_module+0x2d0/0x630 [ 673.161081][T25086] __request_module+0x2d0/0x630 [ 673.161115][T25086] ? __pfx___request_module+0x10/0x10 [ 673.161148][T25086] ? __pfx___up_read+0x10/0x10 [ 673.161186][T25086] crypto_alg_mod_lookup+0xa5/0x5f0 [ 673.161216][T25086] crypto_alloc_tfm_node+0x13e/0x3f0 [ 673.161251][T25086] esp6_init_state+0x63c/0x1240 [ 673.161294][T25086] ? __pfx_esp6_init_state+0x10/0x10 [ 673.161339][T25086] ? xfrm_state_get_afinfo+0x2e/0x1b0 [ 673.161368][T25086] ? xfrm_state_get_afinfo+0x2e/0x1b0 [ 673.161405][T25086] ? __xfrm_init_state+0x842/0x1460 [ 673.161433][T25086] __xfrm_init_state+0xac9/0x1460 [ 673.161455][T25086] ? __xfrm_init_state+0x842/0x1460 [ 673.161487][T25086] xfrm_init_state+0x18/0xa0 [ 673.161506][T25086] pfkey_add+0x1d34/0x2df0 [ 673.161567][T25086] ? __pfx_pfkey_add+0x10/0x10 [ 673.161604][T25086] pfkey_sendmsg+0xc56/0x1120 [ 673.161637][T25086] ? unwind_next_frame+0xa6/0x2550 [ 673.161677][T25086] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 673.161741][T25086] ? aa_sock_msg_perm+0xf1/0x1b0 [ 673.161778][T25086] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 673.161816][T25086] ____sys_sendmsg+0x972/0x9f0 [ 673.161856][T25086] ? __might_fault+0xaf/0x130 [ 673.161894][T25086] ? __pfx_____sys_sendmsg+0x10/0x10 [ 673.161939][T25086] ? import_iovec+0x73/0xa0 [ 673.161967][T25086] ___sys_sendmsg+0x2a5/0x360 [ 673.161999][T25086] ? __lock_acquire+0x6b5/0x2cf0 [ 673.162034][T25086] ? __pfx____sys_sendmsg+0x10/0x10 [ 673.162110][T25086] ? __fget_files+0x2a/0x420 [ 673.162138][T25086] ? __fget_files+0x3a0/0x420 [ 673.162179][T25086] __x64_sys_sendmsg+0x1bd/0x2a0 [ 673.162217][T25086] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 673.162263][T25086] ? __pfx_ksys_write+0x10/0x10 [ 673.162306][T25086] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 673.162332][T25086] do_syscall_64+0x15f/0xf80 [ 673.162358][T25086] ? trace_irq_disable+0x3b/0x140 [ 673.162383][T25086] ? clear_bhb_loop+0x40/0x90 [ 673.162411][T25086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 673.162434][T25086] RIP: 0033:0x7fb9f0d9c819 [ 673.162455][T25086] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 673.162474][T25086] RSP: 002b:00007fb9eeff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 673.162500][T25086] RAX: ffffffffffffffda RBX: 00007fb9f1015fa0 RCX: 00007fb9f0d9c819 [ 673.162516][T25086] RDX: 0000000000048004 RSI: 0000200000000040 RDI: 0000000000000003 [ 673.162531][T25086] RBP: 00007fb9eeff6090 R08: 0000000000000000 R09: 0000000000000000 [ 673.162546][T25086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 673.162560][T25086] R13: 00007fb9f1016038 R14: 00007fb9f1015fa0 R15: 00007ffc4c53ad98 [ 673.162598][T25086] [ 673.496486][ T5844] Bluetooth: hci5: command tx timeout [ 674.787298][ T5844] Bluetooth: hci2: command tx timeout [ 675.208582][T25068] wg1 speed is unknown, defaulting to 1000 [ 675.500112][T25117] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5664'. [ 675.509683][T25107] syzkaller0: entered promiscuous mode [ 675.535877][T25107] syzkaller0: entered allmulticast mode [ 675.575522][ T5844] Bluetooth: hci5: command tx timeout [ 675.618502][T25117] bond0: (slave vlan0): Opening slave failed [ 675.629395][T25122] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5665'. [ 675.850335][T25126] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5667'. [ 675.912504][T25136] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5666'. [ 675.964273][T25068] chnl_net:caif_netlink_parms(): no params data found [ 676.237780][T25150] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5673'. [ 676.324060][T25068] bridge0: port 1(bridge_slave_0) entered blocking state [ 676.332485][T25068] bridge0: port 1(bridge_slave_0) entered disabled state [ 676.340520][T25068] bridge_slave_0: entered allmulticast mode [ 676.349119][T25068] bridge_slave_0: entered promiscuous mode [ 676.359898][T25068] bridge0: port 2(bridge_slave_1) entered blocking state [ 676.367261][T25068] bridge0: port 2(bridge_slave_1) entered disabled state [ 676.374854][T25068] bridge_slave_1: entered allmulticast mode [ 676.390312][T25068] bridge_slave_1: entered promiscuous mode [ 676.459399][T25155] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5675'. [ 676.472576][T25155] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5675'. [ 676.482752][T25155] netlink: 'syz.1.5675': attribute type 12 has an invalid length. [ 676.490954][T25155] netlink: 'syz.1.5675': attribute type 13 has an invalid length. [ 676.646833][ T13] batman_adv: batadv0: Removing interface: gretap1 [ 676.829863][ T13] bond0 (unregistering): Released all slaves [ 676.844923][ T13] bond1 (unregistering): (slave wireguard0): Releasing backup interface [ 676.854072][ T13] bond1 (unregistering): Released all slaves [ 676.865509][ T5844] Bluetooth: hci2: command tx timeout [ 676.878960][ T13] bond2 (unregistering): Released all slaves [ 676.896334][T25068] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 676.912213][T25068] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 676.991611][T25068] team0: Port device team_slave_0 added [ 677.003044][T25068] team0: Port device team_slave_1 added [ 677.031194][ T13] tipc: Disabling bearer [ 677.040868][ T13] tipc: Left network mode [ 677.045797][T25068] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 677.052974][T25068] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 677.080831][T25068] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 677.100658][T25068] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 677.116903][T25068] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 677.148787][T25068] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 677.174860][ T13] IPVS: stopping master sync thread 7803 ... [ 677.261418][T25068] hsr_slave_0: entered promiscuous mode [ 677.268113][T25068] hsr_slave_1: entered promiscuous mode [ 677.274537][T25068] debugfs: 'hsr0' already exists in 'hsr' [ 677.284182][T25068] Cannot create hsr debugfs directory [ 677.371979][ T13] batman_adv: batadv0: Removing interface: macvtap1 [ 678.003418][ T5490] 8021q: adding VLAN 0 to HW filter on device eth1 [ 678.358087][T25186] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5678'. [ 678.401960][T25182] syzkaller0: entered promiscuous mode [ 678.420128][T25182] syzkaller0: entered allmulticast mode [ 678.470365][T25182] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5677'. [ 678.820379][T25201] syzkaller0: entered promiscuous mode [ 678.832440][T25201] syzkaller0: entered allmulticast mode [ 678.849126][T25068] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 678.871892][T25068] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 678.896151][T25068] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 678.927472][T25068] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 678.936555][ T5844] Bluetooth: hci2: command tx timeout [ 679.008454][T25068] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 679.031681][T25068] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 679.102199][T25068] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 679.112008][ T13] IPVS: stop unused estimator thread 0... [ 679.122614][T25217] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5686'. [ 679.151329][T25068] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 679.223748][T25217] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5686'. [ 679.336507][T25230] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5688'. [ 679.380901][T25232] netlink: 'syz.4.5689': attribute type 21 has an invalid length. [ 679.408879][T25232] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5689'. [ 679.446784][T25232] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5689'. [ 679.475731][T25068] 8021q: adding VLAN 0 to HW filter on device bond0 [ 679.504278][T25232] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5689'. [ 679.538667][T25068] 8021q: adding VLAN 0 to HW filter on device team0 [ 679.567924][ T7579] bridge0: port 1(bridge_slave_0) entered blocking state [ 679.575087][ T7579] bridge0: port 1(bridge_slave_0) entered forwarding state [ 679.668456][ T7579] bridge0: port 2(bridge_slave_1) entered blocking state [ 679.675697][ T7579] bridge0: port 2(bridge_slave_1) entered forwarding state [ 680.094290][T25261] syzkaller0: entered promiscuous mode [ 680.112079][T25261] syzkaller0: entered allmulticast mode [ 680.543935][T25275] veth4: entered allmulticast mode [ 680.612193][T25068] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 680.750321][T25068] veth0_vlan: entered promiscuous mode [ 680.824085][T25068] veth1_vlan: entered promiscuous mode [ 680.839675][T25288] wg1 speed is unknown, defaulting to 1000 [ 680.891370][T25295] netlink: 144 bytes leftover after parsing attributes in process `syz.2.5704'. [ 680.940092][T25295] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5704'. [ 680.965462][T25295] netlink: 'syz.2.5704': attribute type 9 has an invalid length. [ 681.016728][ T5844] Bluetooth: hci2: command tx timeout [ 681.066337][T25299] pim6reg: entered allmulticast mode [ 681.074653][ T13] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 681.087177][ T13] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 681.129422][ T13] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 681.170879][ T13] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 681.192816][T25299] pim6reg: left allmulticast mode [ 681.301005][T25068] veth0_macvtap: entered promiscuous mode [ 681.349419][T25314] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 681.382512][T11277] hid (null): global environment stack underflow [ 681.398211][T11277] hid (null): report_id 62064 is invalid [ 681.451271][T11277] hid-generic 0005:04F4:FD21.0004: global environment stack underflow [ 681.460645][T11277] hid-generic 0005:04F4:FD21.0004: item 0 0 1 11 parsing failed [ 681.473875][T11277] hid-generic 0005:04F4:FD21.0004: probe with driver hid-generic failed with error -22 [ 681.566890][T25068] veth1_macvtap: entered promiscuous mode [ 681.639072][T25068] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 681.668291][T25068] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 681.752347][ T7585] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 681.771437][ T7585] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 681.792672][ T7585] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 681.823542][ T7585] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 682.054173][T25346] FAULT_INJECTION: forcing a failure. [ 682.054173][T25346] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 682.070888][T25346] CPU: 0 UID: 0 PID: 25346 Comm: syz.4.5717 Not tainted syzkaller #0 PREEMPT(full) [ 682.070921][T25346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 682.070937][T25346] Call Trace: [ 682.070947][T25346] [ 682.070957][T25346] dump_stack_lvl+0xe8/0x150 [ 682.070998][T25346] should_fail_ex+0x412/0x560 [ 682.071039][T25346] _copy_to_user+0x31/0xb0 [ 682.071067][T25346] simple_read_from_buffer+0xe1/0x170 [ 682.071103][T25346] proc_fail_nth_read+0x1bb/0x230 [ 682.071143][T25346] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 682.071178][T25346] ? rw_verify_area+0x2a6/0x4d0 [ 682.071210][T25346] ? __fget_files+0x2a/0x420 [ 682.071237][T25346] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 682.071270][T25346] vfs_read+0x20c/0xa70 [ 682.071309][T25346] ? __pfx___mutex_lock+0x10/0x10 [ 682.071340][T25346] ? __pfx_vfs_read+0x10/0x10 [ 682.071382][T25346] ? __fget_files+0x2a/0x420 [ 682.071416][T25346] ? __fget_files+0x3a0/0x420 [ 682.071443][T25346] ? __fget_files+0x2a/0x420 [ 682.071481][T25346] ksys_read+0x150/0x270 [ 682.071517][T25346] ? __pfx_ksys_read+0x10/0x10 [ 682.071560][T25346] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 682.071585][T25346] do_syscall_64+0x15f/0xf80 [ 682.071612][T25346] ? trace_irq_disable+0x3b/0x140 [ 682.071637][T25346] ? clear_bhb_loop+0x40/0x90 [ 682.071666][T25346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 682.071688][T25346] RIP: 0033:0x7fb9f0d5d04e [ 682.071709][T25346] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 682.071730][T25346] RSP: 002b:00007fb9eeff5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 682.071755][T25346] RAX: ffffffffffffffda RBX: 00007fb9eeff66c0 RCX: 00007fb9f0d5d04e [ 682.071772][T25346] RDX: 000000000000000f RSI: 00007fb9eeff60a0 RDI: 0000000000000004 [ 682.071788][T25346] RBP: 00007fb9eeff6090 R08: 0000000000000000 R09: 0000000000000000 [ 682.071802][T25346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 682.071816][T25346] R13: 00007fb9f1016038 R14: 00007fb9f1015fa0 R15: 00007ffc4c53ad98 [ 682.071854][T25346] [ 682.367635][ T7585] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 682.379618][ T7585] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 682.516373][ T7585] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 682.533726][ T7585] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 682.625051][T25353] x_tables: duplicate underflow at hook 4 [ 682.661163][T25354] syzkaller1: entered promiscuous mode [ 682.696004][T25354] syzkaller1: entered allmulticast mode [ 682.909847][T25373] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 683.095779][ T5844] Bluetooth: hci2: command tx timeout [ 683.429842][ T5834] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 683.444308][ T5834] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 683.454676][ T5834] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 683.464045][ T5834] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 683.473304][ T5834] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 683.617208][T25398] wg1 speed is unknown, defaulting to 1000 [ 683.726409][T25407] sctp: [Deprecated]: syz.1.5731 (pid 25407) Use of struct sctp_assoc_value in delayed_ack socket option. [ 683.726409][T25407] Use struct sctp_sack_info instead [ 683.821133][T25410] __nla_validate_parse: 11 callbacks suppressed [ 683.821151][T25410] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5730'. [ 684.133533][T25429] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5735'. [ 684.155634][T25429] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5735'. [ 685.008367][T25398] chnl_net:caif_netlink_parms(): no params data found [ 685.075282][T25439] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5736'. [ 685.259181][T25441] tipc: Started in network mode [ 685.274115][T25441] tipc: Node identity b6c693c95ac5, cluster identity 4711 [ 685.301653][T25441] tipc: Enabled bearer , priority 0 [ 685.338749][T25444] syzkaller0: entered promiscuous mode [ 685.349148][T25444] syzkaller0: entered allmulticast mode [ 685.358310][T25451] netlink: zone id is out of range [ 685.366226][T25451] netlink: zone id is out of range [ 685.374253][T25451] netlink: zone id is out of range [ 685.380437][T25451] netlink: zone id is out of range [ 685.387163][T25451] netlink: zone id is out of range [ 685.393082][T25451] netlink: zone id is out of range [ 685.399059][T25451] netlink: zone id is out of range [ 685.404268][T25451] netlink: zone id is out of range [ 685.476801][T25444] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5737'. [ 685.486049][T25444] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5737'. [ 685.529018][T25441] tipc: Resetting bearer [ 685.577840][ T5834] Bluetooth: hci4: command tx timeout [ 685.595218][ T1303] lec:lec_start_xmit: lec0:No lecd attached [ 685.619526][T25440] tipc: Resetting bearer [ 685.674633][T25440] tipc: Disabling bearer [ 685.692767][T25398] bridge0: port 1(bridge_slave_0) entered blocking state [ 685.712505][T25398] bridge0: port 1(bridge_slave_0) entered disabled state [ 685.727146][T25398] bridge_slave_0: entered allmulticast mode [ 685.742996][T25398] bridge_slave_0: entered promiscuous mode [ 685.760739][T25471] vlan6: entered promiscuous mode [ 685.775343][T25471] bond_slave_1: entered promiscuous mode [ 685.885139][T25398] bridge0: port 2(bridge_slave_1) entered blocking state [ 685.893506][T25398] bridge0: port 2(bridge_slave_1) entered disabled state [ 685.902101][T25398] bridge_slave_1: entered allmulticast mode [ 685.912242][T25398] bridge_slave_1: entered promiscuous mode [ 686.000236][T25398] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 686.022095][T25398] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 686.142371][T25489] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5751'. [ 686.516786][T25398] team0: Port device team_slave_0 added [ 686.642700][T25398] team0: Port device team_slave_1 added [ 686.859164][T25398] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 686.874748][T25398] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 686.901216][T25398] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 686.924856][T25398] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 686.943291][T25398] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 687.024405][T25398] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 687.191734][T25398] hsr_slave_0: entered promiscuous mode [ 687.200691][T25398] hsr_slave_1: entered promiscuous mode [ 687.275937][T25511] syzkaller0: entered promiscuous mode [ 687.295041][T25511] syzkaller0: entered allmulticast mode [ 687.557717][T25529] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5762'. [ 687.586408][T25529] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5762'. [ 687.653085][ T7579] veth0_to_bond: left allmulticast mode [ 687.655962][ T5834] Bluetooth: hci4: command tx timeout [ 687.664991][ T7579] veth0_to_bond: left promiscuous mode [ 687.680189][ T7579] bridge7: port 2(veth0_to_bond) entered disabled state [ 687.691850][ T7579] veth3: left allmulticast mode [ 687.704770][ T7579] veth3: left promiscuous mode [ 687.710671][ T7579] bridge7: port 1(veth3) entered disabled state [ 688.070371][ T7579] bond7 (unregistering): (slave gretap1): Releasing active interface [ 688.479622][ T7579] bond7 (unregistering): (slave bridge8): Releasing active interface [ 688.579577][ T7579] bond1 (unregistering): Released all slaves [ 688.595069][ T7579] bond2 (unregistering): Released all slaves [ 688.610047][ T7579] bond3 (unregistering): Released all slaves [ 688.632295][ T7579] bond0 (unregistering): Released all slaves [ 688.651916][ T7579] bond4 (unregistering): Released all slaves [ 688.679767][ T7579] bond5 (unregistering): Released all slaves [ 688.716828][ T7579] bond6 (unregistering): Released all slaves [ 688.737556][ T7579] bond7 (unregistering): Released all slaves [ 689.735531][ T5834] Bluetooth: hci4: command tx timeout [ 690.491218][T25529] vlan2: entered allmulticast mode [ 690.496768][T25529] macvtap0: entered allmulticast mode [ 690.502207][T25529] veth0_macvtap: entered allmulticast mode [ 690.513142][T25531] debugfs: 'netdev@ffff8880567ac620' already exists in 'ref_tracker' [ 690.563685][ T5490] 8021q: adding VLAN 0 to HW filter on device eth1 [ 690.571914][T25545] lo speed is unknown, defaulting to 1000 [ 690.608540][ T7579] : left promiscuous mode [ 690.615356][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 690.623439][ C1] lec:lec_tx_timeout: lec0 [ 690.692837][T25545] lo speed is unknown, defaulting to 1000 [ 690.711637][T25545] lo speed is unknown, defaulting to 1000 [ 690.738382][T25545] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 690.798509][ T7579] tipc: Left network mode [ 690.804912][T25545] lo speed is unknown, defaulting to 1000 [ 690.863117][T25545] lo speed is unknown, defaulting to 1000 [ 690.874889][ T7579] IPVS: stopping master sync thread 6692 ... [ 690.930209][T25545] lo speed is unknown, defaulting to 1000 [ 691.039167][T25545] lo speed is unknown, defaulting to 1000 [ 691.066707][T25565] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5768'. [ 691.084129][T25563] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5769'. [ 691.110012][T25545] lo speed is unknown, defaulting to 1000 [ 691.219057][T25545] lo speed is unknown, defaulting to 1000 [ 691.230667][T25562] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5769'. [ 691.266569][T25560] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5767'. [ 691.287234][T25545] lo speed is unknown, defaulting to 1000 [ 691.520141][T25580] FAULT_INJECTION: forcing a failure. [ 691.520141][T25580] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 691.554529][T25577] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5771'. [ 691.597083][T25580] CPU: 0 UID: 0 PID: 25580 Comm: syz.2.5773 Not tainted syzkaller #0 PREEMPT(full) [ 691.597110][T25580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 691.597123][T25580] Call Trace: [ 691.597132][T25580] [ 691.597141][T25580] dump_stack_lvl+0xe8/0x150 [ 691.597177][T25580] should_fail_ex+0x412/0x560 [ 691.597211][T25580] prepare_alloc_pages+0x22a/0x650 [ 691.597245][T25580] __alloc_frozen_pages_noprof+0x12f/0x380 [ 691.597271][T25580] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 691.597297][T25580] ? __pfx_policy_nodemask+0x10/0x10 [ 691.597318][T25580] ? lock_acquire+0x106/0x350 [ 691.597352][T25580] alloc_pages_mpol+0x232/0x4a0 [ 691.597380][T25580] ___kmalloc_large_node+0x4e/0x150 [ 691.597423][T25580] __kmalloc_large_node_noprof+0x18/0x90 [ 691.597453][T25580] ? __pfx_ieee80211_emulate_remove_chanctx+0x10/0x10 [ 691.597477][T25580] __kmalloc_noprof+0x3e8/0x760 [ 691.597505][T25580] ? wiphy_new_nm+0x625/0x19e0 [ 691.597530][T25580] ? __pfx_ieee80211_emulate_remove_chanctx+0x10/0x10 [ 691.597553][T25580] wiphy_new_nm+0x625/0x19e0 [ 691.597573][T25580] ? ieee80211_alloc_hw_nm+0x935/0x1fa0 [ 691.597598][T25580] ? __pfx_ieee80211_emulate_remove_chanctx+0x10/0x10 [ 691.597620][T25580] ieee80211_alloc_hw_nm+0x3f3/0x1fa0 [ 691.597644][T25580] ? __pfx_ieee80211_emulate_add_chanctx+0x10/0x10 [ 691.597682][T25580] mac80211_hwsim_new_radio+0x1e8/0x5ba0 [ 691.597722][T25580] ? stack_trace_save+0xa9/0x100 [ 691.597744][T25580] ? __pfx_stack_trace_save+0x10/0x10 [ 691.597768][T25580] ? stack_depot_save_flags+0x33/0x810 [ 691.597795][T25580] ? kasan_save_track+0x3e/0x80 [ 691.597821][T25580] ? kasan_record_aux_stack+0xb1/0xd0 [ 691.597843][T25580] ? __kasan_slab_free+0x5c/0x80 [ 691.597875][T25580] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 691.597913][T25580] hwsim_new_radio_nl+0xf6a/0x1c00 [ 691.597962][T25580] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 691.597998][T25580] ? rcu_is_watching+0x15/0xb0 [ 691.598024][T25580] ? trace_kmalloc+0x2a/0xf0 [ 691.598057][T25580] ? __nla_parse+0x40/0x60 [ 691.598079][T25580] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 691.598101][T25580] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 691.598131][T25580] genl_family_rcv_msg_doit+0x22a/0x330 [ 691.598159][T25580] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 691.598194][T25580] ? bpf_lsm_capable+0x9/0x20 [ 691.598215][T25580] ? security_capable+0x7e/0x2c0 [ 691.598246][T25580] genl_rcv_msg+0x61c/0x7a0 [ 691.598273][T25580] ? __pfx_genl_rcv_msg+0x10/0x10 [ 691.598293][T25580] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 691.598321][T25580] ? __pfx_ref_tracker_free+0x10/0x10 [ 691.598359][T25580] netlink_rcv_skb+0x232/0x4b0 [ 691.598387][T25580] ? __pfx_genl_rcv_msg+0x10/0x10 [ 691.598410][T25580] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 691.598453][T25580] ? down_read+0x270/0x2e0 [ 691.598477][T25580] ? genl_rcv+0xd/0x40 [ 691.598498][T25580] genl_rcv+0x28/0x40 [ 691.598517][T25580] netlink_unicast+0x75c/0x8e0 [ 691.598552][T25580] netlink_sendmsg+0x813/0xb40 [ 691.598589][T25580] ? __pfx_netlink_sendmsg+0x10/0x10 [ 691.598619][T25580] ? aa_sock_msg_perm+0xf1/0x1b0 [ 691.598647][T25580] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 691.598685][T25580] ____sys_sendmsg+0x972/0x9f0 [ 691.598713][T25580] ? __might_fault+0xaf/0x130 [ 691.598745][T25580] ? __pfx_____sys_sendmsg+0x10/0x10 [ 691.598783][T25580] ? import_iovec+0x73/0xa0 [ 691.598806][T25580] ___sys_sendmsg+0x2a5/0x360 [ 691.598833][T25580] ? __lock_acquire+0x6b5/0x2cf0 [ 691.598862][T25580] ? __pfx____sys_sendmsg+0x10/0x10 [ 691.598926][T25580] ? __fget_files+0x2a/0x420 [ 691.598950][T25580] ? __fget_files+0x3a0/0x420 [ 691.598984][T25580] __x64_sys_sendmsg+0x1bd/0x2a0 [ 691.599016][T25580] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 691.599055][T25580] ? __pfx_ksys_write+0x10/0x10 [ 691.599092][T25580] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 691.599114][T25580] do_syscall_64+0x15f/0xf80 [ 691.599137][T25580] ? trace_irq_disable+0x3b/0x140 [ 691.599157][T25580] ? clear_bhb_loop+0x40/0x90 [ 691.599180][T25580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 691.599200][T25580] RIP: 0033:0x7fb17659c819 [ 691.599218][T25580] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 691.599235][T25580] RSP: 002b:00007fb17745e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 691.599255][T25580] RAX: ffffffffffffffda RBX: 00007fb176815fa0 RCX: 00007fb17659c819 [ 691.599269][T25580] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 691.599281][T25580] RBP: 00007fb17745e090 R08: 0000000000000000 R09: 0000000000000000 [ 691.599293][T25580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 691.599304][T25580] R13: 00007fb176816038 R14: 00007fb176815fa0 R15: 00007ffc1f7ee938 [ 691.599336][T25580] [ 692.077157][ T5834] Bluetooth: hci4: command tx timeout [ 692.388292][T25598] netlink: 108 bytes leftover after parsing attributes in process `syz.2.5778'. [ 692.510725][T25597] tipc: Started in network mode [ 692.547737][T25597] tipc: Node identity ac1414aa, cluster identity 4711 [ 692.588218][T25597] tipc: Enabled bearer , priority 5 [ 692.607306][T25607] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5779'. [ 692.636165][T25607] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5779'. [ 693.054993][T25609] syzkaller0: entered promiscuous mode [ 693.070391][T25609] syzkaller0: entered allmulticast mode [ 693.220828][T25621] syzkaller0: entered promiscuous mode [ 693.232455][T25621] syzkaller0: entered allmulticast mode [ 696.707912][T25642] netem: incorrect gi model size [ 696.712896][T25642] netem: change failed [ 696.719079][T11279] tipc: Node number set to 2886997162 [ 696.956377][T25663] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5792'. [ 696.971774][T25663] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5792'. [ 697.320526][T25398] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 697.348914][T25398] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 697.372200][T25398] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 697.394212][T25398] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 697.422502][T25398] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 697.441864][T25398] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 697.495898][T25398] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 697.533925][T25398] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 697.719825][T25688] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5798'. [ 697.812882][ T7579] IPVS: stop unused estimator thread 0... [ 697.861496][T25687] syzkaller0: entered promiscuous mode [ 697.876545][T25687] syzkaller0: entered allmulticast mode [ 698.110239][T25704] x_tables: duplicate underflow at hook 3 [ 698.335523][T25398] 8021q: adding VLAN 0 to HW filter on device bond0 [ 698.440228][T25398] 8021q: adding VLAN 0 to HW filter on device team0 [ 698.452465][T25719] FAULT_INJECTION: forcing a failure. [ 698.452465][T25719] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 698.490219][ T7579] bridge0: port 1(bridge_slave_0) entered blocking state [ 698.497159][T25719] CPU: 1 UID: 0 PID: 25719 Comm: syz.1.5807 Not tainted syzkaller #0 PREEMPT(full) [ 698.497233][T25719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 698.497269][T25719] Call Trace: [ 698.497292][T25719] [ 698.497355][T25719] dump_stack_lvl+0xe8/0x150 [ 698.497393][T25719] should_fail_ex+0x412/0x560 [ 698.497448][T25719] _copy_from_iter+0x1d3/0x1670 [ 698.497576][T25719] ? rcu_is_watching+0x15/0xb0 [ 698.497690][T25719] ? __pfx__copy_from_iter+0x10/0x10 [ 698.497798][T25719] ? netlink_sendmsg+0x650/0xb40 [ 698.497889][T25719] ? skb_put+0x11b/0x210 [ 698.497983][T25719] netlink_sendmsg+0x6c0/0xb40 [ 698.498091][T25719] ? __pfx_netlink_sendmsg+0x10/0x10 [ 698.498194][T25719] ? aa_sock_msg_perm+0xf1/0x1b0 [ 698.498283][T25719] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 698.498391][T25719] ____sys_sendmsg+0x972/0x9f0 [ 698.498483][T25719] ? __might_fault+0xaf/0x130 [ 698.498596][T25719] ? __pfx_____sys_sendmsg+0x10/0x10 [ 698.498707][T25719] ? import_iovec+0x73/0xa0 [ 698.498785][T25719] ___sys_sendmsg+0x2a5/0x360 [ 698.498866][T25719] ? __lock_acquire+0x6b5/0x2cf0 [ 698.498980][T25719] ? __pfx____sys_sendmsg+0x10/0x10 [ 698.499166][T25719] ? __fget_files+0x2a/0x420 [ 698.499238][T25719] ? __fget_files+0x3a0/0x420 [ 698.499325][T25719] __x64_sys_sendmsg+0x1bd/0x2a0 [ 698.499425][T25719] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 698.499548][T25719] ? __pfx_ksys_write+0x10/0x10 [ 698.499653][T25719] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 698.499715][T25719] do_syscall_64+0x15f/0xf80 [ 698.499779][T25719] ? trace_irq_disable+0x3b/0x140 [ 698.499843][T25719] ? clear_bhb_loop+0x40/0x90 [ 698.499914][T25719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 698.499974][T25719] RIP: 0033:0x7fba8d79c819 [ 698.500026][T25719] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 698.500071][T25719] RSP: 002b:00007fba8e62a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 698.500135][T25719] RAX: ffffffffffffffda RBX: 00007fba8da15fa0 RCX: 00007fba8d79c819 [ 698.500183][T25719] RDX: 0000000004008010 RSI: 0000200000000380 RDI: 0000000000000004 [ 698.500217][T25719] RBP: 00007fba8e62a090 R08: 0000000000000000 R09: 0000000000000000 [ 698.500260][T25719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 698.500306][T25719] R13: 00007fba8da16038 R14: 00007fba8da15fa0 R15: 00007ffcac6e0338 [ 698.500415][T25719] [ 698.738436][ T7579] bridge0: port 1(bridge_slave_0) entered forwarding state [ 698.788834][ T7576] bridge0: port 2(bridge_slave_1) entered blocking state [ 698.796040][ T7576] bridge0: port 2(bridge_slave_1) entered forwarding state [ 698.914491][T25723] syzkaller0: entered promiscuous mode [ 698.922856][T25723] syzkaller0: entered allmulticast mode [ 699.172852][T25745] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5812'. [ 702.118397][T25815] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5831'. [ 702.132185][T25813] syzkaller0: entered promiscuous mode [ 702.148566][T25813] syzkaller0: entered allmulticast mode [ 702.306141][T25822] lo: MTU too low for tipc bearer [ 702.315826][T25822] tipc: Enabling of bearer rejected, failed to enable media [ 702.430367][T25398] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 702.501484][T25829] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input38 [ 702.572813][T25398] veth0_vlan: entered promiscuous mode [ 702.672810][T25836] veth3: entered allmulticast mode [ 702.734202][T25843] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5843'. [ 702.784369][T25846] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5844'. [ 703.056720][T25398] veth1_vlan: entered promiscuous mode [ 703.198341][T25857] syzkaller0: entered promiscuous mode [ 703.210258][T25857] syzkaller0: entered allmulticast mode [ 703.230307][T25398] veth0_macvtap: entered promiscuous mode [ 704.995482][T25398] veth1_macvtap: entered promiscuous mode [ 705.019645][T25398] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 705.034212][T25398] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 705.058354][T17391] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 705.071251][T17391] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 705.100283][ T7585] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 705.115619][ T7585] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 705.589563][T25899] netlink: 112 bytes leftover after parsing attributes in process `syz.2.5859'. [ 706.205830][T25861] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 706.293039][T17391] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 706.336367][T17391] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 706.417298][ T7585] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 706.444919][ T7585] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 706.767852][T25917] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5724'. [ 708.839850][T25918] bridge0: port 2(bridge_slave_1) entered disabled state [ 708.848096][T25918] bridge0: port 1(bridge_slave_0) entered disabled state [ 709.014662][ T5844] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 709.030574][ T5844] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 709.039311][ T5844] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 709.052801][ T5844] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 709.060946][ T5844] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 709.086435][T25918] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 709.105110][T25918] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 709.260692][ T13] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 709.279798][ T13] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 709.326652][T25932] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5870'. [ 709.354349][ T13] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 709.374237][ T13] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 709.396966][T25934] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5870'. [ 709.547610][T25941] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5872'. [ 709.581050][T25929] lo speed is unknown, defaulting to 1000 [ 709.590016][T25939] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5872'. [ 709.841143][T25950] bridge_slave_0: left allmulticast mode [ 709.847399][T25950] bridge_slave_0: left promiscuous mode [ 709.853195][T25950] bridge0: port 1(bridge_slave_0) entered disabled state [ 709.863598][T25950] bridge_slave_1: left allmulticast mode [ 709.875046][T25950] bridge_slave_1: left promiscuous mode [ 709.880898][T25950] bridge0: port 2(bridge_slave_1) entered disabled state [ 709.894373][T25950] bond0: (slave bond_slave_0): Releasing backup interface [ 709.918465][T25950] bond0: (slave bond_slave_1): Releasing backup interface [ 709.934218][T25950] team0: Port device team_slave_0 removed [ 709.948614][T25950] team0: Port device team_slave_1 removed [ 709.956506][T25950] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 709.963975][T25950] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 709.974366][T25950] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 709.983509][T25950] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 709.998834][T25950] net_ratelimit: 7 callbacks suppressed [ 709.998851][T25950] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 710.039085][ T5902] lo speed is unknown, defaulting to 1000 [ 710.076576][T25950] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5875'. [ 710.300671][T25929] chnl_net:caif_netlink_parms(): no params data found [ 710.430718][T25961] syzkaller0: entered promiscuous mode [ 710.436445][T25961] syzkaller0: entered allmulticast mode [ 710.450987][T25969] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5880'. [ 710.639389][ T7585] bond3 (unregistering): (slave gretap1): Releasing active interface [ 710.732948][ T7585] bond1 (unregistering): (slave bridge1): Removing an active aggregator [ 710.742951][ T7585] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 710.842416][ T7585] bond0 (unregistering): (slave bridge3): Releasing backup interface [ 710.919817][ T7585] bond1 (unregistering): Released all slaves [ 710.937252][ T7585] bond2 (unregistering): Released all slaves [ 710.955954][ T7585] bond3 (unregistering): Released all slaves [ 710.982165][ T7585] bond0 (unregistering): Released all slaves [ 711.002277][ T7585] bond4 (unregistering): (slave veth3): Releasing active interface [ 711.012661][ T7585] bond4 (unregistering): Released all slaves [ 711.032218][ T7585] bond5 (unregistering): Released all slaves [ 711.049368][ T7585] bond6 (unregistering): Released all slaves [ 711.064622][ T7585] bond7 (unregistering): Released all slaves [ 711.096353][ T5834] Bluetooth: hci3: command tx timeout [ 711.433807][T25983] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5884'. [ 712.066447][T25998] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5886'. [ 713.040853][ T7585] tipc: Disabling bearer [ 713.065278][ T7585] tipc: Left network mode [ 713.067690][T25990] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 713.152080][T25929] bridge0: port 1(bridge_slave_0) entered blocking state [ 713.167369][T25929] bridge0: port 1(bridge_slave_0) entered disabled state [ 713.175365][ T5844] Bluetooth: hci3: command tx timeout [ 713.197873][T25929] bridge_slave_0: entered allmulticast mode [ 713.213828][T25929] bridge_slave_0: entered promiscuous mode [ 713.250909][T25929] bridge0: port 2(bridge_slave_1) entered blocking state [ 713.270540][T25929] bridge0: port 2(bridge_slave_1) entered disabled state [ 713.277970][T25929] bridge_slave_1: entered allmulticast mode [ 713.285994][T25929] bridge_slave_1: entered promiscuous mode [ 713.359135][ T7585] IPVS: stopping master sync thread 10884 ... [ 713.399180][T25929] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 713.469483][T25929] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 713.638732][T25929] team0: Port device team_slave_0 added [ 713.681808][T25929] team0: Port device team_slave_1 added [ 713.824504][T25929] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 713.853609][T25929] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 713.918987][T25929] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 713.968805][T25929] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 713.988056][T25929] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 714.055438][T25929] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 714.224996][T11280] IPVS: starting estimator thread 0... [ 714.234821][T25929] hsr_slave_0: entered promiscuous mode [ 714.250055][T25929] hsr_slave_1: entered promiscuous mode [ 714.267360][T25929] debugfs: 'hsr0' already exists in 'hsr' [ 714.274269][T25929] Cannot create hsr debugfs directory [ 714.329646][T26037] IPVS: using max 38 ests per chain, 91200 per kthread [ 714.516745][T26047] bridge_slave_0: left allmulticast mode [ 714.525299][T26047] bridge_slave_0: left promiscuous mode [ 714.534592][T26047] bridge0: port 1(bridge_slave_0) entered disabled state [ 714.569970][T26047] bridge_slave_1: left allmulticast mode [ 714.611081][T26047] bridge_slave_1: left promiscuous mode [ 714.641377][T26047] bridge0: port 2(bridge_slave_1) entered disabled state [ 714.725979][T26047] bond0: (slave bond_slave_0): Releasing backup interface [ 714.748786][T26047] bond0: (slave bond_slave_1): Releasing backup interface [ 714.782592][T26047] team0: Port device team_slave_0 removed [ 714.820108][T26047] team0: Port device team_slave_1 removed [ 714.843769][T26063] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5899'. [ 714.851043][T26047] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 714.897188][T26047] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 714.917579][T26047] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 714.941308][T26047] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 714.951249][T26047] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 714.988248][T26070] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5904'. [ 715.000099][T26070] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5904'. [ 715.006931][T26054] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5900'. [ 715.024753][T26066] pim6reg: entered allmulticast mode [ 715.043323][ T5490] 8021q: adding VLAN 0 to HW filter on device eth1 [ 715.134005][T26054] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5900'. [ 715.194032][T26068] syzkaller0: entered promiscuous mode [ 715.200320][T26068] syzkaller0: entered allmulticast mode [ 715.218629][ T7579] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 715.241938][ T7579] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 715.255819][ T5844] Bluetooth: hci3: command 0x040f tx timeout [ 715.313174][ T7579] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 715.342290][ T7579] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 715.365597][T26080] netlink: 'syz.3.5907': attribute type 4 has an invalid length. [ 715.389290][T26082] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5908'. [ 715.408095][T26082] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5908'. [ 715.423674][T26082] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5908'. [ 715.499649][T26076] lo speed is unknown, defaulting to 1000 [ 717.244527][T26089] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5908'. [ 717.345730][ T5834] Bluetooth: hci3: command 0x040f tx timeout [ 717.450480][T26104] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5914'. [ 718.024286][T11280] lo speed is unknown, defaulting to 1000 [ 718.032417][T11280] syz2: Port: 1 Link DOWN [ 718.077708][ T13] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 718.091675][ T13] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 718.105711][ T13] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 718.127093][ T13] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 718.253713][ T13] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 718.270767][ T13] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 718.284159][T26120] netlink: 'syz.0.5917': attribute type 1 has an invalid length. [ 718.309857][ T13] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 718.328626][ T13] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 718.488962][T26124] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input39 [ 718.846342][ T7585] IPVS: stop unused estimator thread 0... [ 719.249638][T26159] 8021q: adding VLAN 0 to HW filter on device bond1 [ 719.273334][T25929] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 719.305428][T25929] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 719.337762][T25929] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 719.401881][T25929] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 719.415598][ T5834] Bluetooth: hci3: command 0x040f tx timeout [ 719.423731][T25929] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 719.461182][T25929] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 719.481923][T25929] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 719.510885][T25929] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 719.563242][ T7585] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 719.596813][ T7585] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 719.637074][ T7585] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 719.653741][T26182] netlink: 'syz.3.5934': attribute type 13 has an invalid length. [ 719.664711][ T7585] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 719.700317][T26182] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 719.878803][T25929] 8021q: adding VLAN 0 to HW filter on device bond0 [ 719.956407][T25929] 8021q: adding VLAN 0 to HW filter on device team0 [ 719.970458][T26187] __nla_validate_parse: 12 callbacks suppressed [ 719.970474][T26187] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5936'. [ 720.008074][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 720.015318][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 720.050133][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 720.057419][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 720.194245][T26201] xt_hashlimit: size too large, truncated to 1048576 [ 720.263637][T26204] –: renamed from dummy0 [ 720.369894][T26209] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5940'. [ 720.592634][T26216] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input40 [ 720.736366][T26206] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 720.786857][T26206] bond2: (slave lo): Enslaving as an active interface with an up link [ 720.827075][T26206] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 720.891622][T11281] lo speed is unknown, defaulting to 1000 [ 720.899331][T11292] lo speed is unknown, defaulting to 1000 [ 720.905779][T26227] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5943'. [ 720.929536][T11292] syz2: Port: 1 Link ACTIVE [ 720.958392][T26227] netlink: 'syz.1.5943': attribute type 11 has an invalid length. [ 721.013828][T26232] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5945'. [ 721.167076][T25929] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 721.297681][T26250] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5948'. [ 721.496112][ T5834] Bluetooth: hci3: command 0x040f tx timeout [ 721.557627][T26253] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5949'. [ 721.581993][T26261] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5951'. [ 721.768338][T26275] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input41 [ 721.870613][T25929] veth0_vlan: entered promiscuous mode [ 721.907673][T25929] veth1_vlan: entered promiscuous mode [ 721.966964][T25929] veth0_macvtap: entered promiscuous mode [ 721.989668][T25929] veth1_macvtap: entered promiscuous mode [ 722.034997][T25929] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 722.064654][T25929] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 722.081357][T17392] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 722.111306][T17392] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 722.132754][T17392] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 722.153756][T17392] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.211849][T26244] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 724.310497][ T7585] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 724.330387][ T7585] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 724.348526][T26316] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5960'. [ 724.430013][ T152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 724.454019][ T152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 724.540659][T26325] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input42 [ 724.972234][T26342] netlink: 128 bytes leftover after parsing attributes in process `syz.4.5969'. [ 725.101465][ T5844] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 725.111377][ T5844] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 725.122146][ T5844] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 725.132904][T26350] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5971'. [ 725.143977][ T5844] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 725.153228][ T5844] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 725.243153][T26347] lo speed is unknown, defaulting to 1000 [ 725.357574][T26362] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5975'. [ 725.380684][T26362] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5975'. [ 725.560233][T26367] syzkaller0: entered promiscuous mode [ 725.566235][T26367] syzkaller0: entered allmulticast mode [ 725.592970][T11292] IPVS: starting estimator thread 0... [ 725.689936][T26347] chnl_net:caif_netlink_parms(): no params data found [ 725.696896][T26370] IPVS: using max 30 ests per chain, 72000 per kthread [ 725.773099][T26374] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input43 [ 725.941817][T26347] bridge0: port 1(bridge_slave_0) entered blocking state [ 725.966184][T26347] bridge0: port 1(bridge_slave_0) entered disabled state [ 725.978921][T26347] bridge_slave_0: entered allmulticast mode [ 725.992084][T26347] bridge_slave_0: entered promiscuous mode [ 726.017058][T26383] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5979'. [ 726.040405][T26347] bridge0: port 2(bridge_slave_1) entered blocking state [ 726.065501][T26347] bridge0: port 2(bridge_slave_1) entered disabled state [ 726.079809][T26347] bridge_slave_1: entered allmulticast mode [ 726.088107][T26347] bridge_slave_1: entered promiscuous mode [ 726.156070][T26388] FAULT_INJECTION: forcing a failure. [ 726.156070][T26388] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 726.171506][T26388] CPU: 1 UID: 0 PID: 26388 Comm: syz.0.5982 Not tainted syzkaller #0 PREEMPT(full) [ 726.171534][T26388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 726.171546][T26388] Call Trace: [ 726.171572][T26388] [ 726.171581][T26388] dump_stack_lvl+0xe8/0x150 [ 726.171616][T26388] should_fail_ex+0x412/0x560 [ 726.171647][T26388] _copy_from_user+0x2d/0xb0 [ 726.171669][T26388] __sys_bpf+0x229/0x950 [ 726.171694][T26388] ? __pfx___sys_bpf+0x10/0x10 [ 726.171732][T26388] ? ksys_write+0x242/0x270 [ 726.171764][T26388] ? __pfx_ksys_write+0x10/0x10 [ 726.171798][T26388] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 726.171820][T26388] __x64_sys_bpf+0x7c/0x90 [ 726.171841][T26388] do_syscall_64+0x15f/0xf80 [ 726.171865][T26388] ? trace_irq_disable+0x3b/0x140 [ 726.171886][T26388] ? clear_bhb_loop+0x40/0x90 [ 726.171910][T26388] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 726.171929][T26388] RIP: 0033:0x7f3882d9c819 [ 726.171948][T26388] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 726.171966][T26388] RSP: 002b:00007f3883bf3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 726.171988][T26388] RAX: ffffffffffffffda RBX: 00007f3883015fa0 RCX: 00007f3882d9c819 [ 726.172002][T26388] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 726.172015][T26388] RBP: 00007f3883bf3090 R08: 0000000000000000 R09: 0000000000000000 [ 726.172027][T26388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 726.172039][T26388] R13: 00007f3883016038 R14: 00007f3883015fa0 R15: 00007fffd668af18 [ 726.172071][T26388] [ 726.353414][T26347] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 726.368792][T26347] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 726.442922][T26347] team0: Port device team_slave_0 added [ 726.467962][T26347] team0: Port device team_slave_1 added [ 726.515100][T26397] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5983'. [ 726.516513][T26396] FAULT_INJECTION: forcing a failure. [ 726.516513][T26396] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 726.538301][T26396] CPU: 1 UID: 0 PID: 26396 Comm: syz.0.5985 Not tainted syzkaller #0 PREEMPT(full) [ 726.538325][T26396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 726.538337][T26396] Call Trace: [ 726.538344][T26396] [ 726.538352][T26396] dump_stack_lvl+0xe8/0x150 [ 726.538386][T26396] should_fail_ex+0x412/0x560 [ 726.538415][T26396] _copy_from_iter+0x1d3/0x1670 [ 726.538445][T26396] ? rcu_is_watching+0x15/0xb0 [ 726.538476][T26396] ? __pfx__copy_from_iter+0x10/0x10 [ 726.538519][T26396] ? netlink_sendmsg+0x650/0xb40 [ 726.538564][T26396] ? skb_put+0x11b/0x210 [ 726.538595][T26396] netlink_sendmsg+0x6c0/0xb40 [ 726.538633][T26396] ? __pfx_netlink_sendmsg+0x10/0x10 [ 726.538668][T26396] ? aa_sock_msg_perm+0xf1/0x1b0 [ 726.538701][T26396] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 726.538737][T26396] ____sys_sendmsg+0x972/0x9f0 [ 726.538771][T26396] ? __might_fault+0xaf/0x130 [ 726.538808][T26396] ? __pfx_____sys_sendmsg+0x10/0x10 [ 726.538851][T26396] ? import_iovec+0x73/0xa0 [ 726.538877][T26396] ___sys_sendmsg+0x2a5/0x360 [ 726.538909][T26396] ? __lock_acquire+0x6b5/0x2cf0 [ 726.538943][T26396] ? __pfx____sys_sendmsg+0x10/0x10 [ 726.539013][T26396] ? __fget_files+0x2a/0x420 [ 726.539041][T26396] ? __fget_files+0x3a0/0x420 [ 726.539079][T26396] __x64_sys_sendmsg+0x1bd/0x2a0 [ 726.539115][T26396] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 726.539158][T26396] ? __pfx_ksys_write+0x10/0x10 [ 726.539200][T26396] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 726.539226][T26396] do_syscall_64+0x15f/0xf80 [ 726.539252][T26396] ? trace_irq_disable+0x3b/0x140 [ 726.539275][T26396] ? clear_bhb_loop+0x40/0x90 [ 726.539302][T26396] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 726.539324][T26396] RIP: 0033:0x7f3882d9c819 [ 726.539345][T26396] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 726.539366][T26396] RSP: 002b:00007f3883bf3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 726.539390][T26396] RAX: ffffffffffffffda RBX: 00007f3883015fa0 RCX: 00007f3882d9c819 [ 726.539407][T26396] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 726.539422][T26396] RBP: 00007f3883bf3090 R08: 0000000000000000 R09: 0000000000000000 [ 726.539437][T26396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 726.539450][T26396] R13: 00007f3883016038 R14: 00007f3883015fa0 R15: 00007fffd668af18 [ 726.539486][T26396] [ 726.786048][T26397] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5983'. [ 727.041777][ T13] bond3 (unregistering): (slave geneve2): Releasing active interface [ 727.174658][ T13] bond0 (unregistering): Released all slaves [ 727.189008][ T13] bond1 (unregistering): Released all slaves [ 727.205668][ T13] bond2 (unregistering): Released all slaves [ 727.224895][ T13] bond3 (unregistering): Released all slaves [ 727.247392][ T13] bond4 (unregistering): (slave veth5): Releasing active interface [ 727.255449][ T5844] Bluetooth: hci1: command tx timeout [ 727.261919][ T13] bond4 (unregistering): Released all slaves [ 727.282107][ T13] bond5 (unregistering): Released all slaves [ 727.297374][ T13] bond6 (unregistering): Released all slaves [ 727.312725][ T13] bond7 (unregistering): Released all slaves [ 727.329284][ T13] bond8 (unregistering): Released all slaves [ 727.345457][ T13] bond9 (unregistering): Released all slaves [ 727.423503][T26347] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 727.430888][T26347] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 727.464376][T26347] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 727.487359][T26347] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 727.494466][T26347] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 727.520823][T26347] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 727.539835][ T13] tipc: Left network mode [ 727.566563][ T13] IPVS: stopping master sync thread 7418 ... [ 727.643418][T26347] hsr_slave_0: entered promiscuous mode [ 727.658266][T26347] hsr_slave_1: entered promiscuous mode [ 727.667003][T26347] debugfs: 'hsr0' already exists in 'hsr' [ 727.673005][T26347] Cannot create hsr debugfs directory [ 727.950525][ T13] hsr_slave_0: left promiscuous mode [ 727.959463][ T13] hsr_slave_1: left promiscuous mode [ 728.214349][T26353] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 728.617990][T26418] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5991'. [ 728.651948][T26423] netlink: 'syz.2.5993': attribute type 2 has an invalid length. [ 728.934608][T26436] netlink: 'syz.2.5995': attribute type 2 has an invalid length. [ 728.963351][T26436] netlink: 'syz.2.5995': attribute type 1 has an invalid length. [ 729.038221][T26427] syzkaller0: entered promiscuous mode [ 729.043869][T26427] syzkaller0: entered allmulticast mode [ 729.100089][ T13] IPVS: stop unused estimator thread 0... [ 729.140953][T26445] netlink: 'syz.4.5999': attribute type 43 has an invalid length. [ 729.213626][T26436] xt_CT: No such helper "syz1" [ 729.345519][ T5844] Bluetooth: hci1: command tx timeout [ 729.427597][T26457] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6000'. [ 731.420743][ T5844] Bluetooth: hci1: command tx timeout [ 731.594296][T26457] bridge0: port 2(bridge_slave_1) entered disabled state [ 731.602496][T26457] bridge0: port 1(bridge_slave_0) entered disabled state [ 731.610381][T26430] lo speed is unknown, defaulting to 1000 [ 731.788737][T26480] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6006'. [ 731.825967][T26347] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 731.845125][T26347] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 731.868488][T26347] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 731.884640][T26347] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 732.005560][T26490] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6010'. [ 732.058134][T26347] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 732.071373][T26347] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 732.083500][T26491] 8021q: VLANs not supported on caif0 [ 732.107820][T26494] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6011'. [ 732.124385][T26347] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 732.137070][T26347] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 732.288267][T26507] syz.0.6014 uses old SIOCAX25GETINFO [ 732.364975][T26347] 8021q: adding VLAN 0 to HW filter on device bond0 [ 732.421364][T26347] 8021q: adding VLAN 0 to HW filter on device team0 [ 732.464075][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 732.471361][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 732.500109][T26513] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6015'. [ 732.533882][ T152] bridge0: port 2(bridge_slave_1) entered blocking state [ 732.541157][ T152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 732.705277][T26517] syzkaller0: entered promiscuous mode [ 732.710987][T26517] syzkaller0: entered allmulticast mode [ 732.988753][T26534] netlink: 216 bytes leftover after parsing attributes in process `syz.4.6019'. [ 732.998662][T26534] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6019'. [ 733.008848][T26534] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6019'. [ 733.020795][T26535] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input44 [ 733.207670][T26541] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6021'. [ 733.349955][T26545] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input45 [ 733.506385][ T5844] Bluetooth: hci1: command tx timeout [ 733.752692][T26556] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6025'. [ 735.368754][T26556] geneve2: entered promiscuous mode [ 735.385389][ T57] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 735.421903][ T57] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 735.458395][ T57] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 735.499683][ T57] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 735.545815][ T57] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 735.571305][T26572] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input46 [ 735.573901][ T57] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 735.609538][ T57] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 735.618776][ T57] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 735.641510][T26578] Oops: general protection fault, probably for non-canonical address 0xdffffc000000005e: 0000 [#1] SMP KASAN PTI [ 735.653458][T26578] KASAN: null-ptr-deref in range [0x00000000000002f0-0x00000000000002f7] [ 735.661920][T26578] CPU: 0 UID: 0 PID: 26578 Comm: syz.3.6031 Not tainted syzkaller #0 PREEMPT(full) [ 735.671325][T26578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 735.681404][T26578] RIP: 0010:__mutex_lock+0x14e/0x1550 [ 735.686800][T26578] Code: 20 15 49 9a 48 c1 e8 03 42 0f b6 04 30 84 c0 0f 85 3e 12 00 00 83 3d 70 88 94 0e 00 75 23 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 30 00 74 05 e8 56 9e 7c f6 4d 39 64 24 58 0f 85 6a 11 00 [ 735.706419][T26578] RSP: 0018:ffffc90003edf7c0 EFLAGS: 00010202 [ 735.712517][T26578] RAX: 000000000000005e RBX: 0000000000000000 RCX: ffffffff9a491503 [ 735.720510][T26578] RDX: 0000000000000000 RSI: ffffffff8e22a119 RDI: 00000000000002f0 [ 735.728579][T26578] RBP: ffffc90003edf980 R08: ffffc90003edf8e7 R09: 0000000000000000 [ 735.736578][T26578] R10: ffffc90003edf8c0 R11: fffff520007dbf1d R12: 0000000000000298 [ 735.744587][T26578] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff920007dbf10 [ 735.752578][T26578] FS: 00007f5f1190c6c0(0000) GS:ffff888125245000(0000) knlGS:0000000000000000 [ 735.761556][T26578] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 735.768191][T26578] CR2: 0000001b3171aff8 CR3: 0000000036400000 CR4: 00000000003526f0 [ 735.776192][T26578] Call Trace: [ 735.779493][T26578] [ 735.782445][T26578] ? wake_up_q+0x99/0xd0 [ 735.786721][T26578] ? preempt_schedule_thunk+0x16/0x30 [ 735.792126][T26578] ? preempt_schedule_common+0x82/0xd0 [ 735.797629][T26578] ? l2cap_unregister_user+0x36/0x170 [ 735.803020][T26578] ? __pfx___mutex_lock+0x10/0x10 [ 735.808066][T26578] ? __up_read+0x2fe/0x6b0 [ 735.812518][T26578] ? __pfx___up_read+0x10/0x10 [ 735.817394][T26578] ? hidp_session_find+0xce/0x100 [ 735.822457][T26578] l2cap_unregister_user+0x36/0x170 [ 735.827683][T26578] hidp_connection_del+0xb0/0x170 [ 735.832820][T26578] hidp_sock_ioctl+0x3ab/0x650 [ 735.837602][T26578] ? __pfx_hidp_sock_ioctl+0x10/0x10 [ 735.842927][T26578] ? do_vfs_ioctl+0x1166/0x1530 [ 735.847792][T26578] sock_do_ioctl+0x101/0x320 [ 735.852410][T26578] ? __pfx_sock_do_ioctl+0x10/0x10 [ 735.857538][T26578] ? do_futex+0x333/0x420 [ 735.861894][T26578] sock_ioctl+0x5c6/0x7f0 [ 735.866255][T26578] ? __pfx_sock_ioctl+0x10/0x10 [ 735.871143][T26578] ? __fget_files+0x2a/0x420 [ 735.875789][T26578] ? __fget_files+0x3a0/0x420 [ 735.880480][T26578] ? __fget_files+0x2a/0x420 [ 735.885104][T26578] ? bpf_lsm_file_ioctl+0x9/0x20 [ 735.890065][T26578] ? __pfx_sock_ioctl+0x10/0x10 [ 735.894933][T26578] __se_sys_ioctl+0xfc/0x170 [ 735.899526][T26578] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 735.905598][T26578] do_syscall_64+0x15f/0xf80 [ 735.910220][T26578] ? trace_irq_disable+0x3b/0x140 [ 735.915285][T26578] ? clear_bhb_loop+0x40/0x90 [ 735.919996][T26578] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 735.925897][T26578] RIP: 0033:0x7f5f1099c819 [ 735.930329][T26578] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 735.949962][T26578] RSP: 002b:00007f5f1190c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 735.958398][T26578] RAX: ffffffffffffffda RBX: 00007f5f10c16090 RCX: 00007f5f1099c819 [ 735.966393][T26578] RDX: 0000200000000000 RSI: 00000000400448c9 RDI: 0000000000000007 [ 735.974383][T26578] RBP: 00007f5f10a32c91 R08: 0000000000000000 R09: 0000000000000000 [ 735.982392][T26578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 735.990383][T26578] R13: 00007f5f10c16128 R14: 00007f5f10c16090 R15: 00007ffec14a2c28 [ 735.998394][T26578] [ 736.001436][T26578] Modules linked in: [ 736.006328][T26578] ---[ end trace 0000000000000000 ]--- [ 736.019481][T26578] RIP: 0010:__mutex_lock+0x14e/0x1550 [ 736.024978][T26578] Code: 20 15 49 9a 48 c1 e8 03 42 0f b6 04 30 84 c0 0f 85 3e 12 00 00 83 3d 70 88 94 0e 00 75 23 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 30 00 74 05 e8 56 9e 7c f6 4d 39 64 24 58 0f 85 6a 11 00 [ 736.044963][T26578] RSP: 0018:ffffc90003edf7c0 EFLAGS: 00010202 [ 736.081252][T26578] RAX: 000000000000005e RBX: 0000000000000000 RCX: ffffffff9a491503 [ 736.089816][T26578] RDX: 0000000000000000 RSI: ffffffff8e22a119 RDI: 00000000000002f0 [ 736.098216][T26578] RBP: ffffc90003edf980 R08: ffffc90003edf8e7 R09: 0000000000000000 [ 736.131880][T26578] R10: ffffc90003edf8c0 R11: fffff520007dbf1d R12: 0000000000000298 [ 736.153453][T26578] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff920007dbf10 [ 736.165892][T26578] FS: 00007f5f1190c6c0(0000) GS:ffff888125245000(0000) knlGS:0000000000000000 [ 736.175596][T26578] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 736.182348][T26578] CR2: 00007f0d50dea6b0 CR3: 0000000036400000 CR4: 00000000003526f0 [ 736.191414][T26578] Kernel panic - not syncing: Fatal exception [ 736.198123][T26578] Kernel Offset: disabled [ 736.202471][T26578] Rebooting in 86400 seconds..