last executing test programs: 15.099681311s ago: executing program 0 (id=880): sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008004}, 0x20000080) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16, @ANYRES32, @ANYBLOB="0c009985f2330f"], 0x40}}, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x8044) 14.86969175s ago: executing program 0 (id=882): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x6c, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x40, 0x3, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x30, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LIMIT_RATE={0xc}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xf0}}, 0x0) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, &(0x7f0000000180)) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={0x1c, 0x42, 0xa01, 0x0, 0x25dfdbfb, {0xa}, [@typed={0x8, 0xf4, 0x0, 0x0, @uid}]}, 0x1c}}, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000001080)={0x0, @in6={{0xa, 0x4e22, 0x80000001, @loopback, 0x7}}}, &(0x7f0000001140)=0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @broadcast, 0x4e20, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x1, 0xce, 0x40000000}}, 0x44) getsockopt$bt_hci(r1, 0x84, 0x11, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) 14.767836078s ago: executing program 0 (id=884): r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv4_newaddr={0x48, 0x14, 0x509, 0x70bd27, 0x25dfdbfd, {0x2, 0x1f, 0x0, 0xcb, r2}, [@IFA_BROADCAST={0x8, 0x4, @empty}, @IFA_RT_PRIORITY={0x8, 0x9, 0x7}, @IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_RT_PRIORITY={0x8, 0x9, 0x6}, @IFA_RT_PRIORITY={0x8, 0x9, 0x4004}, @IFA_RT_PRIORITY={0x8, 0x9, 0x108}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 14.623419524s ago: executing program 0 (id=887): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000300)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) sendmsg$tipc(r1, &(0x7f0000000540)={&(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x3, 0x3, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x24010800}, 0xc000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f00000005c0)={0x0, @in={{0x2, 0x4e20, @remote}}, [0x6, 0xd86, 0x3ff, 0x4, 0x0, 0x0, 0x6, 0x4, 0x66d05a03, 0x3, 0x0, 0x7d, 0x10000, 0x4, 0x4]}, &(0x7f0000000040)=0x100) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000040)) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r3, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x110, 0xd, {0x0, @empty, @empty}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xdd}}], 0x38}, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x4) sendmsg$kcm(r6, &(0x7f0000000a40)={&(0x7f0000000240)=@xdp={0x2c, 0x0, r7, 0x6}, 0x80, &(0x7f0000000480)=[{&(0x7f00000002c0)}, {&(0x7f0000000340)="5ca4ac4219a3a21f4a6bfce7501fac5e1fbad82271c49df23d66c6a7662dbc3dc009ca28b25be76386216de38f00a5cfb95148904bd3ff444ee8886eaf4971f3d8f1077e5a92f7be169092205604d0e72f70dcfdde85cd45b9731a91f5458794691a5becf29034f93865a1932940b07a5991a37c10c15b42f5843861dc0dc6430ca69da64b2b256c8b057e5d69b7d1a9e0bc13731e95e0e7636cb881db8cf515875fd29a818d9ce8f94359cc658d884b0b9a8d03", 0xb4}, {&(0x7f0000000440)="32fffcff382e8cd47139e6c474c8876b5d261c50", 0x14}], 0x3, &(0x7f0000000700)=[{0xf8, 0x107, 0xc, "77f5777be2ad392416418590943a69efccb90d77b3a7df390eec5761a4feb9ad9249ff7fced85308e61ce52f9b590c5b7f0ab308b249c9fdc457dd60459c3b60d2c08251623ff3443ea8404a470b6a6a72cf67985f9229d9aef2c1c0823e17c3788e73650cf2a135f07832726e885d4e4571749dbea94747bf907bdfd7732bd4e1af848ab96dfc149a7ac94003d289accb24c3c5d53126b11553088e3b74885c7b5bb4f758473fe6535372e215a643a6e858406e928a8af173a3435681007553ef48da3a8aa5d3b0e7566f8eaf65578dd0b5ec496539c2df77e596f1302eec89bab7e45be7b614d5"}, {0xe0, 0x116, 0x9, "51e9da1e1f5a1408366ad9439fefaff1622fb93ec3d3c92a0c79f634f39d7bc86457321fc67651881b627dcb1e0996ac5b801650605d66ffb5196f06f20c34203f2953c9ea6371becf868bf686531a158933ba6e461f4a2327b41eb5c1a0e51756b3e6b34a84bc93969a2b139c519b7c3eb9356b21742be76385a327e50120f7d5eeb2e3ebb2a3b3f80cd5d4149d21511a4df48ad9341dfe21df28bb32ce31e9d927d4360c3e663340384f5431527f03963af1d9c8aff0f2c196f6400a5b59c7129988769e267226648fcb1497a1b262"}, {0x58, 0x116, 0x3bc, "4cab22b916b0aec6db3cd369d9711fc5fb73decf541dcb6975caeb69948e1ce3f794d64148b75242679caa8a42c95da1d97c35dcf88680694a8080943be836ad56c159d11e"}, {0x88, 0x101, 0x5, "0f80929150c42acca1541239825fbb4931ac91e2b7f60e1a8fa77199feb119a7347ee1a55a26edc89172cecee4ebd61c6f2ed142734c34bbc69fea8b4f0f2b142c3c8292517bca2739db19f7fd8666e4211404425b77c821c382192aa01017ed2664cff84aded5cfc81a4efcc0538be0871d4f6a1b1812"}, {0x50, 0x112, 0x7, "843070dc1e657c765786729eabab1fbccab1122d70e9e39b89312f09850e85b470674b68478a00a91195fa84b3d43d88355f5ba9b33c22ebad0dae406c"}, {0x18, 0x110, 0xffff, "de0f5c15a495e2"}], 0x320}, 0x20000) setsockopt$inet6_tcp_int(r3, 0x6, 0x4, &(0x7f0000000400)=0xc, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) writev(r4, &(0x7f0000000580)=[{&(0x7f00000006c0)="581a17919cc7749e9438c65fb6", 0xd}], 0x1) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) syz_emit_ethernet(0xe4b, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], 0x0) 13.616088139s ago: executing program 0 (id=897): sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008051}, 0x10) r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000002011d0400000000000000000a000000240001801400018008000100e000000108000200e00000010c0002"], 0x38}}, 0x0) 13.421140293s ago: executing program 0 (id=901): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, 0x0, 0x2, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$netlink(r2, 0x0, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b400000000000000611138000000000054000000000000009500000000000000bf4ab41f57177a09badf2d609444dce0a96da39d4a798136691a3acad1a53ca6ce540a262ed4d483bc474439e647a1fe8030f2b3decef1295ff730339c3b5ca0adc5f22a7b86087fcde36b3b7cb28db72bad9afec5d35b5e41055d58aa2e7cc3a7b823d0e6b013fb8d78d2bb25a3487045b6cc75954d55d645146a97a9b3467e370ad955419fe2164b973301d9ddc38b6281c82a230dc1f9e00e95f5874e6964663a4b40c9c46b665868aa5b296c1e5f80a8059d"], &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76, 0x0, 0xffffffffffffffff, 0xffffff33}, 0x48) connect$can_bcm(r4, &(0x7f0000000140)={0x1d, r5}, 0x10) sendmsg$can_bcm(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) r7 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000380)={0x1d, 0x0, 0x1, {0x0, 0x0, 0x1}, 0xfd}, 0x18) bind$can_j1939(r7, &(0x7f0000000100)={0x1d, r8, 0x2, {0x3}}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x1, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x8}, {0x7, 0xf}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x44060}, 0x98) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000080)={@private0, 0x3a}) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r10, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) setsockopt(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)="00008634", 0x4) socket$inet6_udp(0xa, 0x2, 0x0) r11 = openat$cgroup_procs(r0, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r11, &(0x7f0000000180), 0x12) write$cgroup_freezer_state(r1, &(0x7f0000000200)='THAWED\x00', 0x7) 3.517010927s ago: executing program 4 (id=1033): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe89}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) 3.397481083s ago: executing program 4 (id=1034): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="ffffff8d00"}) 3.323074076s ago: executing program 4 (id=1035): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYRESOCT=r1], 0x24}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a38000000060a01eeffffff0000000000020000000900020073797a32000000000900010073797a30000000000c0006400000000000000002"], 0x60}, 0x1, 0x0, 0x0, 0x20040804}, 0x0) 3.141064999s ago: executing program 4 (id=1037): sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008004}, 0x20000080) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {0x0}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x8044) 2.654879241s ago: executing program 4 (id=1041): accept4$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000100)=0x1c, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000c3a0f8ff4100000095"], &(0x7f0000000040)='GPL\x00', 0x4, 0x96, &(0x7f00000015c0)=""/150}, 0x94) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r3, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x0, 0x7, 0x6, 0xd, 0xe547, 0xffffffff, 0xfffffffa, 0x9, 0xfffffffb, 0xc00, 0x16, 0x1c, 0x5, 0x5, 0x6, 0x40}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000480)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r6, 0x7}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200080314000e00072f01000000000000113cfdcb00000080ed00827600000000000100", 0x26}, {&(0x7f0000000780)="9942d6af00007f8f", 0xdd86}], 0x2}, 0x5) 2.47335532s ago: executing program 1 (id=1045): r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000002580)={'vcan0\x00', 0x0}) connect$can_bcm(r2, &(0x7f00000000c0)={0x1d, r3}, 0x10) sendmsg$can_bcm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="010000006b0100000100000000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="000000000100000002000040050104"], 0x48}}, 0x20000000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4, 0x8000}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x40}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x3, {{@in=@rand_addr=0x64010102, @in6=@mcast2, 0xfffd, 0x0, 0x4e22, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x200000, 0x0, 0xefffffffffffffff, 0xcb}, {0x0, 0xa00, 0x407ffffffffffe, 0x2}, 0xfae, 0x0, 0x1, 0x0, 0x4, 0x3}, [@tmpl={0x44, 0x5, [{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x3c}, 0xa, @in6=@loopback, 0x6, 0x1, 0x1, 0x0, 0x5}]}]}, 0xfc}}, 0x0) sendmsg$inet6(r0, &(0x7f0000000440)={&(0x7f0000000300)={0xa, 0x4e24, 0xffffffff, @mcast1, 0x10000}, 0x1c, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="140000000000000029000000340000000400"], 0x18}, 0x48814) 2.329890814s ago: executing program 1 (id=1046): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000040000701feffffff00000000017c0000040042801c00018006000600050a0000100004002524298d275c232f262d2b00040002"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) (fail_nth: 9) 2.140618152s ago: executing program 1 (id=1047): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r0, &(0x7f0000001040)={0x27, 0x0, 0xfffffffe, 0x4, 0x0, 0x1, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3f}, 0x60) sendmmsg$sock(r0, &(0x7f0000003e00)=[{{&(0x7f00000001c0)=@generic={0x751772a89104bc87, "8a4ac46a7523d11d706aea641732e48716ee0c8a6a0069ecf701f8045d7fbc341c85b89f0c88abbdd55f2d2c2299ca2a884627dccba17b19cb60dd78ab16960960de37714657a7823835cb8c9b5529f5c43a2b66272e80f668a98a1256c13cf3b09745eefe1e9c80c90093bccfc3e4c1a42294e032aae46372177259252d"}, 0x80, &(0x7f0000002540)=[{&(0x7f0000000240)="1ff8da6912", 0x5}], 0x1}}], 0x1, 0x4000810) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYRESOCT=0x0], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000700180a050000000000000000000a0000000900010073797a30000000000900020073797a31000000001400000011"], 0x54}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) 2.100316345s ago: executing program 3 (id=1049): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8000}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f0000000940), 0x0, 0x0, 0x0) 1.945833398s ago: executing program 2 (id=1050): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES8=r1], 0x54}, 0x1, 0x0, 0x0, 0x4000085}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x20) (fail_nth: 8) 1.477868004s ago: executing program 3 (id=1051): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x38, 0x1413, 0x1, 0x4, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x202}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x38}}, 0x80) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@enum64={0x5, 0x0, 0x0, 0x13, 0x1, 0x9}]}, {0x0, [0x0, 0x5f, 0x30, 0x0]}}, 0x0, 0x2a, 0x0, 0x1, 0x5}, 0x28) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r2, 0x8982, &(0x7f0000000000)) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0xe) 1.266400305s ago: executing program 1 (id=1052): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[], 0x40}}, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x8044) 1.197090411s ago: executing program 4 (id=1053): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000000c0)='veth0_vlan\x00', 0x10) sendmmsg$inet6(r1, &(0x7f0000000040)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x983b}, 0x1c, 0x0}}], 0x1, 0x24084008) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000600000004000000000000010400000001040000000000000000000d040000000000000000000010040000000400000000000008030000000000000061"], 0x0, 0x52}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x2, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r3, 0x1, 0x1}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r6 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r4, &(0x7f0000000140)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x2b}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0x2d, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x16}}, {0x4e20, 0x4e20, 0x19, 0x0, @gue={{0x2, 0x0, 0x0, 0xff, 0x100}, "c1963bf57e73e3279f"}}}}, 0x3b) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x60, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MCAST_TO_UCAST={0x5, 0x1c, 0x1}, @IFLA_BRPORT_BCAST_FLOOD={0x5}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x20044010}, 0x4050) 1.067696467s ago: executing program 2 (id=1054): syz_emit_ethernet(0x7a, &(0x7f0000001dc0)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x6c, 0x300, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0xe0, {0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x3, 0x89, 0x0, @private, @local, {[@lsrr={0x83, 0x7, 0x0, [@initdev={0xac, 0x1e, 0x1, 0x0}]}, @cipso={0x86, 0x2e, 0x0, [{0x0, 0x5, "df6116"}, {0x5, 0xe, "ffd11634eea26b0faffa0dea"}, {0x6, 0x8, "02a20948fd74"}, {0x7, 0xd, "ccf0294e2a3bdb4aa40b24"}]}, @timestamp_addr={0x44, 0x4, 0x73, 0x1, 0x4}]}}}}}}}, 0x0) 1.03567958s ago: executing program 1 (id=1055): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@mpls_delroute={0x164, 0x19, 0x100, 0x70bd2a, 0x25dfdbfd, {0x1c, 0x14, 0x20, 0x9, 0xfe, 0x4, 0x0, 0x3, 0x1000}, [@RTA_NEWDST={0x84, 0x13, [{0xd, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0x9}, {0x8}, {0xa7912}, {0x1, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x8}, {0x401, 0x0, 0x1}, {0x4}, {0x6}, {0x21d7c}, {0x6, 0x0, 0x1}, {0x1}, {0xc141}, {0x4f}, {0x57ec, 0x0, 0x1}, {0x2}, {0x4, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x7ff}, {0x65}, {0x8, 0x0, 0x1}, {0xc09}, {0x0, 0x0, 0x1}, {0xb10}, {}, {}, {0x8001, 0x0, 0x1}, {0x5}]}, @RTA_OIF={0x8, 0x4, r1}, @RTA_OIF={0x8, 0x4, r1}, @RTA_NEWDST={0x84, 0x13, [{0x8, 0x0, 0x1}, {0x8000}, {0x7fff, 0x0, 0x1}, {0xffffa}, {0x8, 0x0, 0x1}, {0xf}, {0x5}, {0x3}, {0x3, 0x0, 0x1}, {0xa, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8}, {0x3, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0x3}, {0xbe31}, {0xf3a}, {}, {0x8, 0x0, 0x1}, {0x6}, {0x6}, {0xd9c6, 0x0, 0x1}, {0x1ce, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0xffa15, 0x0, 0x1}, {0xffff9, 0x0, 0x1}, {0x6}, {0xfff, 0x0, 0x1}, {0x1}, {0x4}, {0x8000, 0x0, 0x1}]}, @RTA_VIA={0x14, 0x12, {0x2, "b419276ce59cebc69790a7df1926"}}, @RTA_VIA={0x14, 0x12, {0x18, "6c351e82ef56c34e6750174e6b88"}}, @RTA_DST={0x8, 0x1, {0x400, 0x0, 0x1}}]}, 0x164}, 0x1, 0x0, 0x0, 0x20000810}, 0x4000000) r2 = socket(0x40000000015, 0x805, 0x0) getsockopt(r2, 0x114, 0x271b, 0x0, 0x0) 1.016126174s ago: executing program 3 (id=1056): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="80000000", @ANYRES16=r1, @ANYBLOB="01012abd7000000008", @ANYRES32=r2, @ANYBLOB="040046000a0034000202020202020000080026006c0900004c0051802c"], 0x80}, 0x1, 0x0, 0x0, 0x80}, 0x4804) 909.423487ms ago: executing program 2 (id=1057): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x6000003, 0x12, r0, 0x1c581000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r1) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r1, 0x80489439, &(0x7f00000002c0)) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, r2, 0x701, 0x0, 0x25dfdbfc, {0x41}}, 0x14}}, 0x24000040) sendmsg$DEVLINK_CMD_SB_POOL_SET(r0, &(0x7f0000000280)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xd4, r2, 0x400, 0x70bd28, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x400}, {0x8, 0x13, 0xef8a}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x1}, {0x8, 0x13, 0xfc0}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xf}, {0x6, 0x11, 0x2}, {0x8, 0x13, 0x9}, {0x5}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x9e1e4b257335db59}, 0x4000000) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="180000000000000000000000000000007110c7000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) 857.852999ms ago: executing program 1 (id=1058): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) socket$qrtr(0x2a, 0x2, 0x0) socket$l2tp(0x2, 0x2, 0x73) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r2, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000300)=r3}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r4, &(0x7f0000000380)="0099", &(0x7f0000000480)=@tcp6=r1, 0x2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r3, 0x5, 0xe, 0x0, &(0x7f00000003c0)="000000000000000000000001e370", 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000600)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa408000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="00000000000000005704000008000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000000c0)="76147583ddd0569ba56a88a85993", 0x0, 0xfffffc00, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x50) 840.996703ms ago: executing program 3 (id=1059): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x41071, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x5, 0x20000000ec071, 0xffffffffffffffff, 0x0) (fail_nth: 16) 751.216227ms ago: executing program 2 (id=1060): r0 = socket(0x2, 0x80805, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001140)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x1b8, 0x1b8, 0x278, 0x1b8, 0x360, 0x3f8, 0x3f8, 0x3f8, 0x3f8, 0x3f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98, 0x0, {0x6003000000000000}}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x4, 0x2, 0x0, 0x4, 0x4, 0x2], 0x1, 0x3}, {0x3, [0x2, 0x2, 0x0, 0x0, 0x8ac6c1154ed07496, 0x5], 0x4, 0x1}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffd}}, {{@ip={@multicast2, @rand_addr=0x64010102, 0x0, 0xffffffff, 'wlan0\x00', 'veth1_macvtap\x00', {}, {}, 0x11, 0x0, 0x64}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x11, 0x8, 0x2}}}, {{@ip={@multicast2, @rand_addr=0x64010100, 0x0, 0xffffff00, 'lo\x00', 'vlan0\x00', {0xff}, {0xff}, 0x62, 0x2, 0x4}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x10, 0x6, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) 613.334072ms ago: executing program 2 (id=1061): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) r2 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r2, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r4}, &(0x7f0000000000), &(0x7f00000000c0)=r1}, 0x20) recvmsg$unix(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000940)=""/199, 0xc7}], 0x1}, 0x10000) 545.569065ms ago: executing program 2 (id=1062): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000002080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c001700090a010400000000000000000a0000040900010073000540000000020900020073797a310000000008000a40fffffffc440000000c0a0101000000000000005e1e504d070900020073797a31000000000900010073797a3100000000180003801400008008000340000000020500064006000000140000001100010000000000000000000100000a0000000000000000"], 0xa8}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x20, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a010400000000000000000200000044000480400001800e000100627974656f726465720000002c000280080001400000000708000240000000000800044000000003080003400000000008000540000000080900010073797a30000000000900020073797a32"], 0x98}}, 0x0) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r7, 0x84, 0x18, &(0x7f0000000000)={0x0, 0x4f}, 0x8) sendmsg$TCPDIAG_GETSOCK(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001200010000000000000000000a0300004e234e2200000100ffff0000000000000100"/56, @ANYRES32, @ANYBLOB="05000000030000000800000000000000080003001161"], 0x54}, 0x1, 0x0, 0x0, 0xc000}, 0x20004010) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x1c, 0x1, 0x1, 0x3, 0x0, 0x0, {0x5, 0x0, 0x7}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x801}, 0x4810) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xd, 0x4, 0x4, 0x9}, 0x48) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@deltaction={0x3c, 0x18, 0x1, 0x70bd25, 0x25dfdbfe, {0xa}, [@TCA_ACT_TAB={0x28, 0x1, [{0x10, 0x80, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 330.306502ms ago: executing program 3 (id=1063): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@deltaction={0x3c, 0x18, 0x1, 0x70bd25, 0x25dfdbfe, {0xa}, [@TCA_ACT_TAB={0x28, 0x1, [{0x10, 0x80, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (fail_nth: 1) 0s ago: executing program 3 (id=1064): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x20000000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10) r1 = socket$igmp6(0xa, 0x3, 0x2) listen(r1, 0x6) socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000003540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f0000000a40)={0x54, r3, 0x1, 0x470bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x2a, 0x33, @assoc_req={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x6}, @device_a, @device_a, @initial, {0x2, 0xfff}}, 0x600, 0x8b1, {0x0, 0x6, @default_ibss_ssid}, @val, @void}}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}]]}, 0x54}, 0x1, 0x0, 0x0, 0x20040040}, 0x8800) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r6, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x24, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.21' (ED25519) to the list of known hosts. [ 65.378125][ T5616] cgroup: Unknown subsys name 'net' [ 65.510409][ T5616] cgroup: Unknown subsys name 'cpuset' [ 65.520050][ T5616] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 66.921567][ T5616] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 70.661681][ T5639] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 70.671722][ T5639] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 70.680945][ T5639] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 70.690292][ T5639] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 70.709248][ T5639] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 70.717943][ T5645] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 70.719413][ T5647] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 70.725928][ T5639] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 70.740504][ T5645] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 70.741241][ T5647] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 70.748890][ T5645] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 70.764376][ T5649] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 70.764489][ T5639] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 70.778099][ T5649] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 70.782594][ T5639] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 70.793323][ T5647] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 70.793917][ T5645] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 70.808739][ T5639] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 70.811867][ T5647] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 70.817834][ T5639] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 70.828126][ T5651] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 70.831037][ T5645] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 70.839831][ T5651] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 70.857223][ T5636] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 70.894503][ T4951] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 71.400410][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.409802][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.506451][ T5632] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.514542][ T5632] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.522214][ T5632] bridge_slave_0: entered allmulticast mode [ 72.529232][ T5632] bridge_slave_0: entered promiscuous mode [ 72.602539][ T5632] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.609871][ T5632] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.618887][ T5632] bridge_slave_1: entered allmulticast mode [ 72.627970][ T5632] bridge_slave_1: entered promiscuous mode [ 72.690290][ T5633] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.697788][ T5633] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.705130][ T5633] bridge_slave_0: entered allmulticast mode [ 72.712825][ T5633] bridge_slave_0: entered promiscuous mode [ 72.722390][ T5633] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.729613][ T5633] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.736886][ T5633] bridge_slave_1: entered allmulticast mode [ 72.744461][ T5633] bridge_slave_1: entered promiscuous mode [ 72.811424][ T5632] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.823997][ T5632] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.901909][ T5630] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.909174][ T5630] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.916645][ T5630] bridge_slave_0: entered allmulticast mode [ 72.923509][ T4951] Bluetooth: hci2: command tx timeout [ 72.926949][ T4951] Bluetooth: hci1: command tx timeout [ 72.929642][ T5641] Bluetooth: hci0: command tx timeout [ 72.935680][ T5639] Bluetooth: hci3: command tx timeout [ 72.943382][ T5630] bridge_slave_0: entered promiscuous mode [ 72.956001][ T5633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.965584][ T5643] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.973049][ T5643] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.980623][ T5643] bridge_slave_0: entered allmulticast mode [ 72.987856][ T5643] bridge_slave_0: entered promiscuous mode [ 72.996982][ T5639] Bluetooth: hci4: command tx timeout [ 72.997641][ T5632] team0: Port device team_slave_0 added [ 73.023119][ T5630] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.030331][ T5630] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.037679][ T5630] bridge_slave_1: entered allmulticast mode [ 73.044809][ T5630] bridge_slave_1: entered promiscuous mode [ 73.053722][ T5633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.074690][ T5643] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.082777][ T5643] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.090104][ T5643] bridge_slave_1: entered allmulticast mode [ 73.097749][ T5643] bridge_slave_1: entered promiscuous mode [ 73.107072][ T5632] team0: Port device team_slave_1 added [ 73.180595][ T5633] team0: Port device team_slave_0 added [ 73.189227][ T5643] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.220544][ T5630] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.231884][ T5633] team0: Port device team_slave_1 added [ 73.254004][ T5643] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.264199][ T5632] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.271484][ T5632] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.297560][ T5632] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.321851][ T5630] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.349513][ T5632] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.356573][ T5632] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.382977][ T5632] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.394284][ T5631] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.402643][ T5631] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.410076][ T5631] bridge_slave_0: entered allmulticast mode [ 73.417671][ T5631] bridge_slave_0: entered promiscuous mode [ 73.434216][ T5633] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.441335][ T5633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.467814][ T5633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.496048][ T5631] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.503314][ T5631] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.510949][ T5631] bridge_slave_1: entered allmulticast mode [ 73.518059][ T5631] bridge_slave_1: entered promiscuous mode [ 73.534057][ T5633] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.541362][ T5633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.568082][ T5633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.581010][ T5643] team0: Port device team_slave_0 added [ 73.600163][ T5630] team0: Port device team_slave_0 added [ 73.613515][ T5643] team0: Port device team_slave_1 added [ 73.630930][ T5630] team0: Port device team_slave_1 added [ 73.665293][ T5631] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.678672][ T5631] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.732819][ T5630] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.740450][ T5630] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.766689][ T5630] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.778251][ T5643] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.785294][ T5643] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.811439][ T5643] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.828335][ T5632] hsr_slave_0: entered promiscuous mode [ 73.834843][ T5632] hsr_slave_1: entered promiscuous mode [ 73.861380][ T5630] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.868613][ T5630] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.895246][ T5630] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.906990][ T5643] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.913944][ T5643] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.940220][ T5643] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.961240][ T5633] hsr_slave_0: entered promiscuous mode [ 73.967789][ T5633] hsr_slave_1: entered promiscuous mode [ 73.974064][ T5633] debugfs: 'hsr0' already exists in 'hsr' [ 73.980206][ T5633] Cannot create hsr debugfs directory [ 73.988422][ T5631] team0: Port device team_slave_0 added [ 74.024039][ T5631] team0: Port device team_slave_1 added [ 74.056235][ T5630] hsr_slave_0: entered promiscuous mode [ 74.062644][ T5630] hsr_slave_1: entered promiscuous mode [ 74.069464][ T5630] debugfs: 'hsr0' already exists in 'hsr' [ 74.075211][ T5630] Cannot create hsr debugfs directory [ 74.157592][ T5643] hsr_slave_0: entered promiscuous mode [ 74.163896][ T5643] hsr_slave_1: entered promiscuous mode [ 74.170429][ T5643] debugfs: 'hsr0' already exists in 'hsr' [ 74.176215][ T5643] Cannot create hsr debugfs directory [ 74.182471][ T5631] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.189909][ T5631] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.216061][ T5631] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.257726][ T5631] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.264787][ T5631] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.295305][ T5631] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.480602][ T5631] hsr_slave_0: entered promiscuous mode [ 74.487395][ T5631] hsr_slave_1: entered promiscuous mode [ 74.493477][ T5631] debugfs: 'hsr0' already exists in 'hsr' [ 74.499288][ T5631] Cannot create hsr debugfs directory [ 74.830836][ T5633] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 74.844408][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 74.853050][ T5633] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 74.864836][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 74.873196][ T5633] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 74.882158][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 74.895036][ T5633] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 74.905034][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 74.989717][ T5630] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 74.999432][ T4951] Bluetooth: hci1: command tx timeout [ 74.999465][ T5641] Bluetooth: hci2: command tx timeout [ 75.004974][ T5636] Bluetooth: hci0: command tx timeout [ 75.005070][ T5639] Bluetooth: hci3: command tx timeout [ 75.029377][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 75.042061][ T5630] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 75.052216][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 75.064258][ T5630] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 75.075054][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 75.082479][ T5641] Bluetooth: hci4: command tx timeout [ 75.101634][ T5630] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 75.110976][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 75.172070][ T5643] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 75.186101][ T5643] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 75.198231][ T5643] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 75.209234][ T5643] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 75.226056][ T5643] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 75.238712][ T5643] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 75.246642][ T5643] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 75.256439][ T5643] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 75.348289][ T5633] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.369534][ T5632] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 75.379663][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 75.401595][ T5632] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 75.412328][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 75.420511][ T5632] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 75.430978][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 75.439166][ T5632] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 75.449590][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 75.525993][ T5631] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 75.535940][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 75.549662][ T5633] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.561065][ T5631] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 75.572310][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 75.582925][ T5631] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 75.592601][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 75.600847][ T5631] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 75.610364][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 75.630502][ T134] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.638332][ T134] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.664814][ T134] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.672001][ T134] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.810989][ T5630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.874634][ T5643] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.909478][ T5630] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.950916][ T5643] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.967219][ T1184] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.974518][ T1184] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.000319][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.007565][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.029547][ T5632] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.050965][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.058229][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.084739][ T134] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.092030][ T134] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.122334][ T5631] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.149226][ T5632] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.196050][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.203374][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.245885][ T1184] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.253795][ T1184] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.279686][ T5631] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.333867][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.341071][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.383598][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.391317][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.420681][ T5633] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.630942][ T5633] veth0_vlan: entered promiscuous mode [ 76.670048][ T5633] veth1_vlan: entered promiscuous mode [ 76.780693][ T5633] veth0_macvtap: entered promiscuous mode [ 76.815376][ T5633] veth1_macvtap: entered promiscuous mode [ 76.910238][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.941662][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.004288][ T1083] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.024283][ T1083] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.046593][ T1083] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.078009][ T5641] Bluetooth: hci2: command tx timeout [ 77.085872][ T5641] Bluetooth: hci1: command tx timeout [ 77.088492][ T4951] Bluetooth: hci3: command tx timeout [ 77.093678][ T5641] Bluetooth: hci0: command tx timeout [ 77.120615][ T1184] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.156880][ T5641] Bluetooth: hci4: command tx timeout [ 77.530862][ T134] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.568000][ T134] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.641131][ T5630] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.711607][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.744619][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.764369][ T5631] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.884434][ T5643] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.923530][ T5633] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 77.925428][ T5632] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.951243][ T5630] veth0_vlan: entered promiscuous mode [ 77.999583][ T5630] veth1_vlan: entered promiscuous mode [ 78.124881][ T5631] veth0_vlan: entered promiscuous mode [ 78.157749][ T5824] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1'. [ 78.188709][ T5643] veth0_vlan: entered promiscuous mode [ 78.221639][ T5631] veth1_vlan: entered promiscuous mode [ 78.260138][ T5643] veth1_vlan: entered promiscuous mode [ 78.329518][ T5630] veth0_macvtap: entered promiscuous mode [ 78.360634][ T5630] veth1_macvtap: entered promiscuous mode [ 78.400258][ T5631] veth0_macvtap: entered promiscuous mode [ 78.409482][ T5828] IPv6: NLM_F_CREATE should be specified when creating new route [ 78.412663][ T5631] veth1_macvtap: entered promiscuous mode [ 78.489799][ T5630] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.516524][ T5630] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.529657][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.561433][ T5643] veth0_macvtap: entered promiscuous mode [ 78.602488][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.625174][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.646020][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.661606][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.685879][ T5643] veth1_macvtap: entered promiscuous mode [ 78.723735][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.742787][ T5632] veth0_vlan: entered promiscuous mode [ 78.781289][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.792409][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.808233][ T5643] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.821255][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.830263][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.868747][ T5632] veth1_vlan: entered promiscuous mode [ 78.892233][ T5643] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.909511][ T5838] syzkaller1: entered promiscuous mode [ 78.915461][ T5838] syzkaller1: entered allmulticast mode [ 78.993289][ T1014] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.020539][ T1014] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.030922][ T1014] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.046456][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.070726][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.091645][ T1014] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.140290][ T5841] netlink: 32 bytes leftover after parsing attributes in process `syz.0.11'. [ 79.157657][ T5641] Bluetooth: hci0: command tx timeout [ 79.157921][ T5636] Bluetooth: hci3: command tx timeout [ 79.163155][ T5641] Bluetooth: hci1: command tx timeout [ 79.168744][ T4951] Bluetooth: hci2: command tx timeout [ 79.196140][ T5841] netlink: 200 bytes leftover after parsing attributes in process `syz.0.11'. [ 79.237322][ T5636] Bluetooth: hci4: command tx timeout [ 79.239040][ T1083] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.256902][ T1083] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.262699][ T5632] veth0_macvtap: entered promiscuous mode [ 79.295442][ T1083] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.304114][ T1083] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.329296][ T5632] veth1_macvtap: entered promiscuous mode [ 79.368217][ T1083] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.374346][ T5632] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.396596][ T1083] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.439851][ T5632] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.502036][ T1083] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.512044][ T1083] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.524533][ T5844] netlink: 'syz.0.12': attribute type 5 has an invalid length. [ 79.545411][ T1083] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.555422][ T1083] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.579696][ T1014] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.595877][ T5845] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12'. [ 79.605203][ T1014] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.681595][ T1184] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.701225][ T1184] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.871173][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.901714][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.021628][ T1184] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.054973][ T1184] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.509373][ T5871] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18'. [ 80.783926][ T5880] Bluetooth: MGMT ver 1.23 [ 81.368871][ T5899] netlink: 7 bytes leftover after parsing attributes in process `syz.4.26'. [ 83.034606][ T5927] netlink: 28 bytes leftover after parsing attributes in process `syz.0.38'. [ 83.150941][ T5935] netlink: 4 bytes leftover after parsing attributes in process `syz.1.41'. [ 83.319484][ T5935] bond1: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 83.335662][ T5935] bond1 (unregistering): Released all slaves [ 84.063162][ T5965] netlink: 20 bytes leftover after parsing attributes in process `syz.0.49'. [ 84.145785][ T5962] bond1: option ad_user_port_key: invalid value (65535) [ 84.170521][ T5962] bond1: option ad_user_port_key: allowed values 0 - 1023 [ 84.185143][ T5962] bond1 (unregistering): Released all slaves [ 84.276261][ T5962] netlink: 40 bytes leftover after parsing attributes in process `syz.0.49'. [ 84.319081][ T5968] netlink: 96 bytes leftover after parsing attributes in process `syz.1.51'. [ 84.390708][ T42] IPVS: starting estimator thread 0... [ 84.496976][ T5971] IPVS: using max 39 ests per chain, 93600 per kthread [ 84.802002][ T5983] netlink: 32 bytes leftover after parsing attributes in process `syz.1.55'. [ 84.844569][ T5987] netlink: 12 bytes leftover after parsing attributes in process `syz.2.57'. [ 84.880432][ T5985] netlink: 12 bytes leftover after parsing attributes in process `syz.0.56'. [ 84.970067][ T5983] netlink: 200 bytes leftover after parsing attributes in process `syz.1.55'. [ 85.068102][ T5988] Zero length message leads to an empty skb [ 85.106636][ T5985] ip6tnl1: entered allmulticast mode [ 85.153644][ T1014] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 85.179064][ T5757] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 85.189827][ T1014] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 85.369714][ T6003] netlink: 28 bytes leftover after parsing attributes in process `syz.2.60'. [ 85.507797][ T6008] netlink: 32 bytes leftover after parsing attributes in process `syz.4.61'. [ 85.677092][ T5742] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 85.689714][ T24] cfg80211: failed to load regulatory.db [ 85.703631][ T6014] netlink: 200 bytes leftover after parsing attributes in process `syz.4.61'. [ 86.123845][ T5757] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 86.186421][ T6028] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 87.244700][ T6058] netlink: 'syz.4.81': attribute type 3 has an invalid length. [ 87.623156][ T6072] netlink: 'syz.1.87': attribute type 2 has an invalid length. [ 88.556324][ T6104] netlink: 'syz.2.101': attribute type 2 has an invalid length. [ 89.487405][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 89.792687][ T6126] __nla_validate_parse: 11 callbacks suppressed [ 89.792706][ T6126] netlink: 8 bytes leftover after parsing attributes in process `syz.0.109'. [ 89.871159][ T6126] netlink: 16 bytes leftover after parsing attributes in process `syz.0.109'. [ 90.203465][ T6138] tipc: Enabling of bearer rejected, failed to enable media [ 90.217344][ T6138] netlink: 'syz.2.114': attribute type 1 has an invalid length. [ 90.346141][ T6141] netlink: 'syz.2.114': attribute type 10 has an invalid length. [ 90.356530][ T6141] netlink: 40 bytes leftover after parsing attributes in process `syz.2.114'. [ 90.407613][ T6141] dummy0: entered promiscuous mode [ 90.714654][ T6145] syzkaller0: entered promiscuous mode [ 90.746851][ T6145] syzkaller0: entered allmulticast mode [ 90.835200][ T6053] Set syz1 is full, maxelem 65536 reached [ 92.946839][ T6194] netlink: 'syz.0.136': attribute type 11 has an invalid length. [ 93.102063][ T6194] syzkaller0: entered promiscuous mode [ 93.121249][ T6211] netlink: 4 bytes leftover after parsing attributes in process `syz.2.138'. [ 93.124651][ T6194] syzkaller0: entered allmulticast mode [ 93.338998][ T6223] netlink: 28 bytes leftover after parsing attributes in process `syz.4.143'. [ 93.749516][ T6232] netlink: 60 bytes leftover after parsing attributes in process `syz.3.147'. [ 93.889050][ T6234] netlink: 8 bytes leftover after parsing attributes in process `syz.3.147'. [ 94.632708][ T6250] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 94.639985][ T5757] IPVS: starting estimator thread 0... [ 94.730602][ T6251] IPVS: using max 40 ests per chain, 96000 per kthread [ 95.524314][ T6212] syzkaller1: entered promiscuous mode [ 95.531367][ T6212] syzkaller1: entered allmulticast mode [ 95.637228][ T6256] syzkaller1: entered promiscuous mode [ 95.659120][ T6256] syzkaller1: entered allmulticast mode [ 96.074359][ T6280] netlink: 76 bytes leftover after parsing attributes in process `syz.4.166'. [ 96.421018][ T6294] netlink: 76 bytes leftover after parsing attributes in process `syz.1.173'. [ 96.815232][ T6316] IPv6: sit1: Disabled Multicast RS [ 97.058676][ T6329] netlink: 76 bytes leftover after parsing attributes in process `syz.4.182'. [ 97.341456][ T6341] syzkaller1: entered promiscuous mode [ 97.359548][ T6341] syzkaller1: entered allmulticast mode [ 97.372318][ T6346] netlink: 27 bytes leftover after parsing attributes in process `syz.2.191'. [ 97.684512][ T6352] netlink: 'syz.1.192': attribute type 2 has an invalid length. [ 97.693659][ T6347] warning: `syz.3.190' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 97.880905][ T6363] netlink: 27 bytes leftover after parsing attributes in process `syz.4.195'. [ 98.029072][ T6368] netlink: 280 bytes leftover after parsing attributes in process `syz.2.198'. [ 98.058949][ T6366] netlink: 28 bytes leftover after parsing attributes in process `syz.3.196'. [ 98.276913][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 98.290949][ T6379] netlink: 27 bytes leftover after parsing attributes in process `syz.1.203'. [ 98.590492][ T6391] netlink: 16 bytes leftover after parsing attributes in process `syz.2.206'. [ 99.198565][ T6412] netlink: 27 bytes leftover after parsing attributes in process `syz.4.218'. [ 99.366386][ T6420] netlink: 'syz.0.223': attribute type 2 has an invalid length. [ 99.537632][ T6427] batman_adv: batadv0: Adding interface: dummy0 [ 99.559735][ T6427] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.623640][ T6427] batman_adv: batadv0: Interface activated: dummy0 [ 99.643655][ T6432] netlink: 'syz.1.222': attribute type 3 has an invalid length. [ 100.408902][ T996] IPVS: starting estimator thread 0... [ 100.519694][ T6465] IPVS: using max 37 ests per chain, 88800 per kthread [ 100.689831][ T6475] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 100.967335][ T6483] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 101.611861][ T6499] netlink: 'syz.3.255': attribute type 2 has an invalid length. [ 101.876699][ T6503] __nla_validate_parse: 3 callbacks suppressed [ 101.910491][ T6503] netlink: 28 bytes leftover after parsing attributes in process `syz.3.257'. [ 102.585996][ T6522] netlink: 32 bytes leftover after parsing attributes in process `syz.2.264'. [ 102.672575][ T6522] netlink: 200 bytes leftover after parsing attributes in process `syz.2.264'. [ 103.164439][ T6537] netlink: 27 bytes leftover after parsing attributes in process `syz.4.271'. [ 103.744856][ T6554] netlink: 'syz.4.279': attribute type 2 has an invalid length. [ 103.842689][ T6556] netlink: 'syz.3.280': attribute type 3 has an invalid length. [ 104.022027][ T6562] IPv6: sit1: Disabled Multicast RS [ 104.147162][ T6568] IPv6: sit1: Disabled Multicast RS [ 104.175511][ T6570] netlink: 27 bytes leftover after parsing attributes in process `syz.3.286'. [ 104.451426][ T6577] batadv0: mtu less than device minimum [ 104.479286][ T6577] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 104.492531][ T6577] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 104.504646][ T6577] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 104.517442][ T6577] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 104.529568][ T6577] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 104.541468][ T6577] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 104.553462][ T6577] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 104.565779][ T6577] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 104.795916][ T6588] netlink: 'syz.2.294': attribute type 2 has an invalid length. [ 104.927008][ T6592] syz.4.296 uses obsolete (PF_INET,SOCK_PACKET) [ 105.034370][ T6597] netlink: 32 bytes leftover after parsing attributes in process `syz.2.298'. [ 105.095401][ T6597] netlink: 200 bytes leftover after parsing attributes in process `syz.2.298'. [ 105.231718][ T6599] syzkaller0: entered promiscuous mode [ 105.251604][ T6599] syzkaller0: entered allmulticast mode [ 105.455125][ T6614] netlink: 76 bytes leftover after parsing attributes in process `syz.0.305'. [ 107.465939][ T6620] dummy0: left promiscuous mode [ 107.472842][ T6620] batman_adv: batadv0: Adding interface: dummy0 [ 107.483232][ T6620] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 107.509866][ T6620] batman_adv: batadv0: Interface activated: dummy0 [ 107.523912][ T6623] net_ratelimit: 12 callbacks suppressed [ 107.523934][ T6623] batadv0: mtu less than device minimum [ 107.536290][ T6623] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 107.547757][ T6623] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 107.559500][ T6623] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 107.570976][ T6623] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 107.582508][ T6623] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 107.593830][ T6623] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 107.604911][ T6623] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 107.616205][ T6623] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 107.627796][ T6623] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 107.648144][ T6622] netlink: 'syz.0.308': attribute type 2 has an invalid length. [ 108.253592][ T6656] netlink: 8 bytes leftover after parsing attributes in process `syz.3.320'. [ 108.360080][ T6663] netlink: 'syz.1.322': attribute type 13 has an invalid length. [ 108.368173][ T6663] netlink: 'syz.1.322': attribute type 17 has an invalid length. [ 108.385864][ T6664] netlink: 27 bytes leftover after parsing attributes in process `syz.0.323'. [ 108.442551][ T6659] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.451352][ T6659] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.630153][ T6659] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.673249][ T6659] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.154706][ T6663] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.165331][ T6663] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.176542][ T6690] netlink: 27 bytes leftover after parsing attributes in process `syz.2.326'. [ 109.182147][ T6663] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.214909][ T6663] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.222177][ T6663] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.233921][ T6663] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.241128][ T6663] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.265776][ T6663] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.276480][ T6663] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.305521][ T6663] veth1_vlan: left promiscuous mode [ 109.312157][ T6663] veth0_vlan: left promiscuous mode [ 109.319741][ T6663] veth0_vlan: entered promiscuous mode [ 109.329818][ T6663] veth1_vlan: entered promiscuous mode [ 109.341669][ T6663] veth1_macvtap: left promiscuous mode [ 109.349282][ T6663] veth0_macvtap: left promiscuous mode [ 109.356590][ T6663] veth0_macvtap: entered promiscuous mode [ 109.372139][ T6663] veth1_macvtap: entered promiscuous mode [ 109.385433][ T6663] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 109.399549][ T6663] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 109.412384][ T6663] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 109.424766][ T6663] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 109.967942][ T6712] netlink: 27 bytes leftover after parsing attributes in process `syz.2.337'. [ 110.329205][ T6725] netlink: 100 bytes leftover after parsing attributes in process `syz.0.341'. [ 110.452878][ T6730] netlink: 27 bytes leftover after parsing attributes in process `syz.4.343'. [ 110.820525][ T6747] netlink: 'syz.0.347': attribute type 2 has an invalid length. [ 110.927557][ T6749] netlink: 132 bytes leftover after parsing attributes in process `syz.1.348'. [ 111.543304][ T6779] netlink: 'syz.4.360': attribute type 2 has an invalid length. [ 111.760925][ T6787] netlink: 'syz.0.361': attribute type 2 has an invalid length. [ 111.763486][ T6785] netlink: 32 bytes leftover after parsing attributes in process `syz.2.362'. [ 111.816323][ T6791] netlink: 100 bytes leftover after parsing attributes in process `syz.3.366'. [ 112.016496][ T6800] netlink: 27 bytes leftover after parsing attributes in process `syz.0.367'. [ 112.052381][ T6803] IPv6: sit1: Disabled Multicast RS [ 112.262354][ T6817] FAULT_INJECTION: forcing a failure. [ 112.262354][ T6817] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 112.296911][ T6817] CPU: 1 UID: 0 PID: 6817 Comm: syz.4.376 Not tainted syzkaller #0 PREEMPT(full) [ 112.296937][ T6817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 112.296955][ T6817] Call Trace: [ 112.296965][ T6817] [ 112.296973][ T6817] dump_stack_lvl+0xe8/0x150 [ 112.297005][ T6817] should_fail_ex+0x412/0x560 [ 112.297029][ T6817] _copy_to_user+0x31/0xb0 [ 112.297053][ T6817] simple_read_from_buffer+0xe1/0x170 [ 112.297079][ T6817] proc_fail_nth_read+0x1bb/0x230 [ 112.297113][ T6817] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 112.297138][ T6817] ? rw_verify_area+0x2a6/0x4d0 [ 112.297160][ T6817] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 112.297184][ T6817] vfs_read+0x20c/0xa70 [ 112.297210][ T6817] ? do_sock_getsockopt+0x51d/0x7e0 [ 112.297232][ T6817] ? __pfx_vfs_read+0x10/0x10 [ 112.297255][ T6817] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 112.297274][ T6817] ? do_sys_openat2+0x14c/0x200 [ 112.297293][ T6817] ? kmem_cache_free+0x182/0x650 [ 112.297316][ T6817] ? fd_install+0x94/0x3d0 [ 112.297347][ T6817] ksys_read+0x150/0x270 [ 112.297373][ T6817] ? __pfx_ksys_read+0x10/0x10 [ 112.297396][ T6817] ? __x64_sys_getsockopt+0x1a4/0x240 [ 112.297423][ T6817] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.297442][ T6817] do_syscall_64+0x174/0x580 [ 112.297460][ T6817] ? trace_irq_disable+0x3b/0x140 [ 112.297484][ T6817] ? clear_bhb_loop+0x40/0x90 [ 112.297502][ T6817] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.297518][ T6817] RIP: 0033:0x7f3c7d35d68e [ 112.297545][ T6817] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 112.297559][ T6817] RSP: 002b:00007f3c7e22bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 112.297578][ T6817] RAX: ffffffffffffffda RBX: 00007f3c7e22c6c0 RCX: 00007f3c7d35d68e [ 112.297590][ T6817] RDX: 000000000000000f RSI: 00007f3c7e22c0a0 RDI: 0000000000000004 [ 112.297600][ T6817] RBP: 00007f3c7e22c090 R08: 0000000000000000 R09: 0000000000000000 [ 112.297610][ T6817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 112.297620][ T6817] R13: 00007f3c7d616038 R14: 00007f3c7d615fa0 R15: 00007ffcb1bb97b8 [ 112.297647][ T6817] [ 113.247246][ T5728] net_ratelimit: 12 callbacks suppressed [ 113.247264][ T5728] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.284174][ T6853] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.317643][ T996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.336428][ T6853] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.377149][ T6853] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.379890][ T6861] __nla_validate_parse: 2 callbacks suppressed [ 113.379908][ T6861] netlink: 4 bytes leftover after parsing attributes in process `syz.1.388'. [ 113.433140][ T6853] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.450280][ T6864] netlink: 'syz.4.392': attribute type 2 has an invalid length. [ 113.477301][ T6853] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.520300][ T6853] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.564157][ T6853] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.593951][ T6853] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.734510][ T6874] FAULT_INJECTION: forcing a failure. [ 113.734510][ T6874] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 113.757424][ T6874] CPU: 1 UID: 0 PID: 6874 Comm: syz.3.396 Not tainted syzkaller #0 PREEMPT(full) [ 113.757450][ T6874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 113.757461][ T6874] Call Trace: [ 113.757468][ T6874] [ 113.757476][ T6874] dump_stack_lvl+0xe8/0x150 [ 113.757503][ T6874] should_fail_ex+0x412/0x560 [ 113.757536][ T6874] prepare_alloc_pages+0x22a/0x650 [ 113.757571][ T6874] __alloc_frozen_pages_noprof+0x12f/0x380 [ 113.757592][ T6874] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 113.757622][ T6874] ? __pfx_policy_nodemask+0x10/0x10 [ 113.757638][ T6874] ? is_bpf_text_address+0x26/0x2b0 [ 113.757660][ T6874] ? kernel_text_address+0xa5/0xe0 [ 113.757685][ T6874] ? __kernel_text_address+0xd/0x30 [ 113.757711][ T6874] alloc_pages_mpol+0x235/0x490 [ 113.757734][ T6874] alloc_pages_noprof+0xac/0x2a0 [ 113.757754][ T6874] __pud_alloc+0x3a/0x460 [ 113.757781][ T6874] handle_mm_fault+0x2b2c/0x3170 [ 113.757819][ T6874] ? mt_find+0x186/0x630 [ 113.757837][ T6874] ? __pfx_mt_find+0x10/0x10 [ 113.757857][ T6874] ? handle_mm_fault+0xf1/0x3170 [ 113.757886][ T6874] ? __pfx_handle_mm_fault+0x10/0x10 [ 113.757925][ T6874] ? lock_mm_and_find_vma+0xa7/0x340 [ 113.757952][ T6874] do_user_addr_fault+0x75b/0x1340 [ 113.757987][ T6874] exc_page_fault+0x6a/0xc0 [ 113.758008][ T6874] asm_exc_page_fault+0x26/0x30 [ 113.758023][ T6874] RIP: 0010:__get_user_1+0x14/0x30 [ 113.758047][ T6874] Code: ff ff ff cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 ba 00 f0 ff ff ff 7f 00 00 48 39 d0 48 0f 47 c2 0f 01 cb <0f> b6 10 31 c0 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 113.758062][ T6874] RSP: 0018:ffffc90005647c80 EFLAGS: 00050287 [ 113.758078][ T6874] RAX: 00002000000010c0 RBX: ffff888025b54a40 RCX: 0000000000000046 [ 113.758091][ T6874] RDX: 00007ffffffff000 RSI: ffffffff8e223f01 RDI: ffffffff8c28b9e0 [ 113.758103][ T6874] RBP: 00000000000089e0 R08: ffffffff8218909f R09: ffff88807bdc0338 [ 113.758115][ T6874] R10: 00000000000089e1 R11: 0000000000000000 R12: dffffc0000000000 [ 113.758126][ T6874] R13: 00000000000089e0 R14: 00002000000010c0 R15: 00002000000010c0 [ 113.758145][ T6874] ? __might_fault+0xaf/0x130 [ 113.758174][ T6874] rds_ioctl+0xfe/0x2b0 [ 113.758197][ T6874] sock_do_ioctl+0x101/0x320 [ 113.758224][ T6874] ? __pfx_sock_do_ioctl+0x10/0x10 [ 113.758244][ T6874] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 113.758285][ T6874] sock_ioctl+0x5c6/0x7f0 [ 113.758309][ T6874] ? __pfx_sock_ioctl+0x10/0x10 [ 113.758332][ T6874] ? __fget_files+0x2a/0x420 [ 113.758352][ T6874] ? __fget_files+0x3a0/0x420 [ 113.758375][ T6874] ? __fget_files+0x2a/0x420 [ 113.758399][ T6874] ? bpf_lsm_file_ioctl+0x9/0x20 [ 113.758424][ T6874] ? __pfx_sock_ioctl+0x10/0x10 [ 113.758445][ T6874] __se_sys_ioctl+0xfc/0x170 [ 113.758471][ T6874] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.758490][ T6874] do_syscall_64+0x174/0x580 [ 113.758508][ T6874] ? trace_irq_disable+0x3b/0x140 [ 113.758538][ T6874] ? clear_bhb_loop+0x40/0x90 [ 113.758565][ T6874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.758587][ T6874] RIP: 0033:0x7f8f7fb9ce59 [ 113.758604][ T6874] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 113.758617][ T6874] RSP: 002b:00007f8f80a05028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 113.758634][ T6874] RAX: ffffffffffffffda RBX: 00007f8f7fe15fa0 RCX: 00007f8f7fb9ce59 [ 113.758646][ T6874] RDX: 00002000000010c0 RSI: 00000000000089e0 RDI: 0000000000000003 [ 113.758657][ T6874] RBP: 00007f8f80a05090 R08: 0000000000000000 R09: 0000000000000000 [ 113.758667][ T6874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 113.758677][ T6874] R13: 00007f8f7fe16038 R14: 00007f8f7fe15fa0 R15: 00007fffdfb0c6f8 [ 113.758706][ T6874] [ 114.413916][ T6882] netlink: 32 bytes leftover after parsing attributes in process `syz.1.400'. [ 114.435796][ T6891] netlink: 'syz.2.403': attribute type 3 has an invalid length. [ 114.482922][ T6894] netlink: 'syz.3.404': attribute type 2 has an invalid length. [ 114.714723][ T6908] FAULT_INJECTION: forcing a failure. [ 114.714723][ T6908] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 114.732541][ T6909] netlink: 4108 bytes leftover after parsing attributes in process `syz.3.411'. [ 114.743561][ T6908] CPU: 0 UID: 0 PID: 6908 Comm: syz.4.410 Not tainted syzkaller #0 PREEMPT(full) [ 114.743587][ T6908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 114.743597][ T6908] Call Trace: [ 114.743604][ T6908] [ 114.743614][ T6908] dump_stack_lvl+0xe8/0x150 [ 114.743641][ T6908] should_fail_ex+0x412/0x560 [ 114.743665][ T6908] prepare_alloc_pages+0x22a/0x650 [ 114.743697][ T6908] __alloc_frozen_pages_noprof+0x12f/0x380 [ 114.743717][ T6908] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 114.743748][ T6908] ? __pfx_policy_nodemask+0x10/0x10 [ 114.743768][ T6908] ? __lock_acquire+0x6b5/0x2cf0 [ 114.743789][ T6908] alloc_pages_mpol+0x235/0x490 [ 114.743808][ T6908] folio_alloc_mpol_noprof+0x39/0x160 [ 114.743828][ T6908] vma_alloc_folio_noprof+0xe1/0x1e0 [ 114.743844][ T6908] ? __lock_acquire+0x6b5/0x2cf0 [ 114.743862][ T6908] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 114.743880][ T6908] ? __pte_offset_map+0x29/0x240 [ 114.743902][ T6908] ? __pte_offset_map+0x29/0x240 [ 114.743924][ T6908] do_pte_missing+0x159d/0x33f0 [ 114.743958][ T6908] ? handle_mm_fault+0xf1/0x3170 [ 114.743981][ T6908] handle_mm_fault+0x1bf2/0x3170 [ 114.744014][ T6908] ? handle_mm_fault+0xf1/0x3170 [ 114.744040][ T6908] ? __pfx_handle_mm_fault+0x10/0x10 [ 114.744070][ T6908] ? __lock_acquire+0x6b5/0x2cf0 [ 114.744091][ T6908] ? lock_mm_and_find_vma+0xa7/0x340 [ 114.744117][ T6908] do_user_addr_fault+0x75b/0x1340 [ 114.744148][ T6908] exc_page_fault+0x6a/0xc0 [ 114.744165][ T6908] asm_exc_page_fault+0x26/0x30 [ 114.744182][ T6908] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 114.744205][ T6908] Code: cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 114.744218][ T6908] RSP: 0018:ffffc900056474d8 EFLAGS: 00050202 [ 114.744233][ T6908] RAX: ffffffff84af4a01 RBX: ffff88802bfe6000 RCX: 00000000000006ac [ 114.744244][ T6908] RDX: 0000000000000000 RSI: ffff88802bfe67c0 RDI: 0000200000002000 [ 114.744254][ T6908] RBP: ffffc90005647650 R08: ffff88802bfe6e6b R09: 1ffff110057fcdcd [ 114.744264][ T6908] R10: dffffc0000000000 R11: ffffed10057fcdce R12: 1ffff92000ac8f9f [ 114.744274][ T6908] R13: 0000200000001840 R14: ffffc90005647d08 R15: 0000000000000e6c [ 114.744300][ T6908] ? _copy_to_iter+0x1c1/0x17d0 [ 114.744322][ T6908] _copy_to_iter+0x255/0x17d0 [ 114.744342][ T6908] ? do_raw_spin_lock+0x12b/0x2f0 [ 114.744372][ T6908] ? __pfx__copy_to_iter+0x10/0x10 [ 114.744389][ T6908] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 114.744414][ T6908] ? lockdep_hardirqs_on+0x7a/0x110 [ 114.744430][ T6908] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 114.744452][ T6908] ? __skb_try_recv_datagram+0x3d4/0x4d0 [ 114.744481][ T6908] __skb_datagram_iter+0xf8/0x980 [ 114.744504][ T6908] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 114.744542][ T6908] skb_copy_datagram_iter+0xb5/0x240 [ 114.744568][ T6908] netlink_recvmsg+0x2c3/0xa50 [ 114.744596][ T6908] ? __pfx_netlink_recvmsg+0x10/0x10 [ 114.744619][ T6908] ? __lock_acquire+0x6b5/0x2cf0 [ 114.744636][ T6908] ? aa_sock_msg_perm+0xf1/0x1b0 [ 114.744659][ T6908] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 114.744680][ T6908] ? security_socket_recvmsg+0x7e/0x2c0 [ 114.744697][ T6908] ? __pfx_netlink_recvmsg+0x10/0x10 [ 114.744716][ T6908] sock_recvmsg+0x172/0x1b0 [ 114.744740][ T6908] ____sys_recvmsg+0x1e6/0x4a0 [ 114.744766][ T6908] ? __pfx_____sys_recvmsg+0x10/0x10 [ 114.744799][ T6908] ? import_iovec+0x73/0xa0 [ 114.744822][ T6908] ___sys_recvmsg+0x215/0x590 [ 114.744847][ T6908] ? __pfx____sys_recvmsg+0x10/0x10 [ 114.744867][ T6908] ? __fget_files+0x2a/0x420 [ 114.744905][ T6908] ? __fget_files+0x3a0/0x420 [ 114.744935][ T6908] do_recvmmsg+0x334/0x800 [ 114.744962][ T6908] ? __pfx_do_recvmmsg+0x10/0x10 [ 114.744993][ T6908] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 114.745026][ T6908] __x64_sys_recvmmsg+0x198/0x250 [ 114.745050][ T6908] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 114.745079][ T6908] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.745095][ T6908] do_syscall_64+0x174/0x580 [ 114.745112][ T6908] ? trace_irq_disable+0x3b/0x140 [ 114.745136][ T6908] ? clear_bhb_loop+0x40/0x90 [ 114.745156][ T6908] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.745173][ T6908] RIP: 0033:0x7f3c7d39ce59 [ 114.745189][ T6908] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 114.745202][ T6908] RSP: 002b:00007f3c7e22c028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 114.745220][ T6908] RAX: ffffffffffffffda RBX: 00007f3c7d615fa0 RCX: 00007f3c7d39ce59 [ 114.745232][ T6908] RDX: 0000000000000004 RSI: 0000200000001000 RDI: 0000000000000003 [ 114.745243][ T6908] RBP: 00007f3c7e22c090 R08: 0000000000000000 R09: 0000000000000000 [ 114.745254][ T6908] R10: 0000000000000102 R11: 0000000000000246 R12: 0000000000000001 [ 114.745264][ T6908] R13: 00007f3c7d616038 R14: 00007f3c7d615fa0 R15: 00007ffcb1bb97b8 [ 114.745302][ T6908] [ 115.348130][ T6915] netlink: 4108 bytes leftover after parsing attributes in process `syz.0.413'. [ 115.888499][ T6947] netlink: 'syz.0.424': attribute type 1 has an invalid length. [ 116.047576][ T6946] netlink: 28 bytes leftover after parsing attributes in process `syz.1.425'. [ 116.152177][ T6959] netlink: 64 bytes leftover after parsing attributes in process `syz.3.432'. [ 116.197061][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 116.400563][ T6967] syzkaller0: entered promiscuous mode [ 116.418523][ T6967] syzkaller0: entered allmulticast mode [ 116.868348][ T6988] netlink: 4108 bytes leftover after parsing attributes in process `syz.0.443'. [ 116.951490][ T6990] netlink: 20 bytes leftover after parsing attributes in process `syz.3.445'. [ 117.222410][ T7000] netlink: 76 bytes leftover after parsing attributes in process `syz.0.449'. [ 117.746185][ T7016] netlink: 4100 bytes leftover after parsing attributes in process `syz.4.456'. [ 118.437756][ T5728] net_ratelimit: 10 callbacks suppressed [ 118.437773][ T5728] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.475906][ T7041] __nla_validate_parse: 3 callbacks suppressed [ 118.475931][ T7041] netlink: 27 bytes leftover after parsing attributes in process `syz.4.467'. [ 118.763401][ T5742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.819097][ T7054] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 118.996473][ T7060] netlink: 28 bytes leftover after parsing attributes in process `syz.1.472'. [ 119.199144][ T7067] netlink: 'syz.3.474': attribute type 1 has an invalid length. [ 119.409723][ T7067] bond1: entered promiscuous mode [ 119.427769][ T7067] 8021q: adding VLAN 0 to HW filter on device bond1 [ 119.462703][ T7073] FAULT_INJECTION: forcing a failure. [ 119.462703][ T7073] name failslab, interval 1, probability 0, space 0, times 0 [ 119.480619][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.502427][ T7073] CPU: 0 UID: 0 PID: 7073 Comm: syz.0.476 Not tainted syzkaller #0 PREEMPT(full) [ 119.502450][ T7073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 119.502459][ T7073] Call Trace: [ 119.502467][ T7073] [ 119.502474][ T7073] dump_stack_lvl+0xe8/0x150 [ 119.502500][ T7073] should_fail_ex+0x412/0x560 [ 119.502525][ T7073] should_failslab+0xa8/0x100 [ 119.502544][ T7073] __kmalloc_cache_noprof+0x88/0x660 [ 119.502566][ T7073] ? __sctp_v6_cmp_addr+0x1e6/0x510 [ 119.502590][ T7073] ? sctp_add_bind_addr+0x8c/0x370 [ 119.502619][ T7073] sctp_add_bind_addr+0x8c/0x370 [ 119.502646][ T7073] sctp_copy_local_addr_list+0x314/0x4f0 [ 119.502671][ T7073] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 119.502695][ T7073] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 119.502720][ T7073] ? sctp_v6_is_any+0x64/0x80 [ 119.502737][ T7073] ? sctp_copy_one_addr+0x93/0x360 [ 119.502759][ T7073] sctp_bind_addr_copy+0xb3/0x3c0 [ 119.502780][ T7073] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 119.502801][ T7073] sctp_connect_new_asoc+0x2ff/0x6b0 [ 119.502821][ T7073] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 119.502841][ T7073] ? __local_bh_enable_ip+0xd0/0x130 [ 119.502855][ T7073] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 119.502875][ T7073] ? security_sctp_bind_connect+0x7e/0x2c0 [ 119.502961][ T7073] sctp_sendmsg+0x1576/0x2c50 [ 119.502992][ T7073] ? __pfx_sctp_sendmsg+0x10/0x10 [ 119.503010][ T7073] ? aa_sk_perm+0x6d5/0x900 [ 119.503029][ T7073] ? __might_fault+0xaf/0x130 [ 119.503055][ T7073] ? __pfx_aa_sk_perm+0x10/0x10 [ 119.503077][ T7073] ? sock_rps_record_flow+0x19/0x350 [ 119.503100][ T7073] ? __pfx_inet_sendmsg+0x10/0x10 [ 119.503122][ T7073] ? inet_sendmsg+0x2f4/0x370 [ 119.503144][ T7073] ? __pfx_inet_sendmsg+0x10/0x10 [ 119.503165][ T7073] __sys_sendto+0x5de/0x710 [ 119.503184][ T7073] ? __pfx___sys_sendto+0x10/0x10 [ 119.503198][ T7073] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 119.503227][ T7073] ? __fget_files+0x3a0/0x420 [ 119.503254][ T7073] ? ksys_write+0x242/0x270 [ 119.503278][ T7073] ? __pfx_ksys_write+0x10/0x10 [ 119.503302][ T7073] __x64_sys_sendto+0xde/0x100 [ 119.503317][ T7073] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.503333][ T7073] do_syscall_64+0x174/0x580 [ 119.503347][ T7073] ? trace_irq_disable+0x3b/0x140 [ 119.503368][ T7073] ? clear_bhb_loop+0x40/0x90 [ 119.503386][ T7073] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.503405][ T7073] RIP: 0033:0x7f1f4bb9ce59 [ 119.503420][ T7073] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 119.503431][ T7073] RSP: 002b:00007f1f4ca1a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 119.503447][ T7073] RAX: ffffffffffffffda RBX: 00007f1f4be15fa0 RCX: 00007f1f4bb9ce59 [ 119.503458][ T7073] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000005 [ 119.503466][ T7073] RBP: 00007f1f4ca1a090 R08: 0000200000000280 R09: 000000000000001c [ 119.503475][ T7073] R10: 0000000000008910 R11: 0000000000000246 R12: 0000000000000002 [ 119.503483][ T7073] R13: 00007f1f4be16038 R14: 00007f1f4be15fa0 R15: 00007ffd537dd238 [ 119.503506][ T7073] [ 119.946429][ T7079] netlink: 4100 bytes leftover after parsing attributes in process `syz.0.479'. [ 119.975170][ T7075] netlink: 76 bytes leftover after parsing attributes in process `syz.2.477'. [ 120.517919][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.526283][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.670141][ T7108] netlink: 80 bytes leftover after parsing attributes in process `syz.0.491'. [ 120.746014][ T7110] ieee802154 phy0 wpan0: encryption failed: -22 [ 120.792383][ T7112] netlink: 76 bytes leftover after parsing attributes in process `syz.3.493'. [ 121.092943][ T7126] netlink: 12 bytes leftover after parsing attributes in process `syz.3.499'. [ 121.147774][ T7126] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 121.191154][ T7126] netlink: 4 bytes leftover after parsing attributes in process `syz.3.499'. [ 121.242819][ T7131] netlink: 16 bytes leftover after parsing attributes in process `syz.3.499'. [ 121.557174][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.741202][ T7146] netlink: 76 bytes leftover after parsing attributes in process `syz.4.507'. [ 122.391030][ T7179] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 122.607245][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.802891][ T7193] netlink: 'syz.4.525': attribute type 1 has an invalid length. [ 123.582802][ T5742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.638630][ T5728] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.714154][ T7226] __nla_validate_parse: 2 callbacks suppressed [ 123.714173][ T7226] netlink: 108 bytes leftover after parsing attributes in process `syz.4.541'. [ 123.860146][ T7232] netlink: 28 bytes leftover after parsing attributes in process `syz.1.544'. [ 123.876439][ T7232] netlink: 28 bytes leftover after parsing attributes in process `syz.1.544'. [ 123.937509][ T7232] erspan0: entered promiscuous mode [ 123.964081][ T7232] gretap0: entered promiscuous mode [ 124.045403][ T7238] netlink: 108 bytes leftover after parsing attributes in process `syz.2.547'. [ 124.665363][ T7271] netlink: 'syz.4.561': attribute type 5 has an invalid length. [ 124.684253][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 124.826422][ T7277] netlink: 76 bytes leftover after parsing attributes in process `syz.3.564'. [ 125.040756][ T7287] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.085375][ T7287] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.168091][ T7287] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.246613][ T7300] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.298698][ T7300] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.315381][ T7302] netlink: 8 bytes leftover after parsing attributes in process `syz.4.573'. [ 125.329282][ T7304] syzkaller1: entered promiscuous mode [ 125.336077][ T7300] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.343719][ T7304] syzkaller1: entered allmulticast mode [ 125.418647][ T7300] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.634949][ T7313] team0 (unregistering): Port device team_slave_0 removed [ 125.690383][ T7313] team0 (unregistering): Port device team_slave_1 removed [ 126.110884][ T7333] netlink: 4 bytes leftover after parsing attributes in process `syz.3.586'. [ 126.209830][ T7336] netlink: 76 bytes leftover after parsing attributes in process `syz.0.588'. [ 126.292456][ T7341] FAULT_INJECTION: forcing a failure. [ 126.292456][ T7341] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 126.326581][ T7341] CPU: 0 UID: 0 PID: 7341 Comm: syz.1.590 Not tainted syzkaller #0 PREEMPT(full) [ 126.326608][ T7341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 126.326619][ T7341] Call Trace: [ 126.326626][ T7341] [ 126.326634][ T7341] dump_stack_lvl+0xe8/0x150 [ 126.326668][ T7341] should_fail_ex+0x412/0x560 [ 126.326693][ T7341] _copy_to_user+0x31/0xb0 [ 126.326719][ T7341] bpf_verifier_vlog+0x520/0x8f0 [ 126.326746][ T7341] __btf_verifier_log+0xe2/0x140 [ 126.326777][ T7341] ? __pfx___btf_verifier_log+0x10/0x10 [ 126.326800][ T7341] ? __might_fault+0xaf/0x130 [ 126.326828][ T7341] ? btf_parse_hdr+0x1e1/0x850 [ 126.326852][ T7341] btf_parse_hdr+0x2e4/0x850 [ 126.326877][ T7341] btf_new_fd+0x385/0xd40 [ 126.326906][ T7341] ? __pfx_btf_new_fd+0x10/0x10 [ 126.326926][ T7341] ? bpf_token_put+0x143/0x160 [ 126.326944][ T7341] ? bpf_btf_load+0x126/0x190 [ 126.326964][ T7341] __sys_bpf+0x4e5/0x950 [ 126.326988][ T7341] ? __pfx___sys_bpf+0x10/0x10 [ 126.327025][ T7341] ? ksys_write+0x242/0x270 [ 126.327050][ T7341] ? __pfx_ksys_write+0x10/0x10 [ 126.327077][ T7341] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.327096][ T7341] __x64_sys_bpf+0x7c/0x90 [ 126.327118][ T7341] do_syscall_64+0x174/0x580 [ 126.327133][ T7341] ? trace_irq_disable+0x3b/0x140 [ 126.327155][ T7341] ? clear_bhb_loop+0x40/0x90 [ 126.327174][ T7341] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.327189][ T7341] RIP: 0033:0x7f7f22d9ce59 [ 126.327216][ T7341] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 126.327228][ T7341] RSP: 002b:00007f7f23bb1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 126.327248][ T7341] RAX: ffffffffffffffda RBX: 00007f7f23015fa0 RCX: 00007f7f22d9ce59 [ 126.327259][ T7341] RDX: 0000000000000028 RSI: 00002000000000c0 RDI: 0000000000000012 [ 126.327269][ T7341] RBP: 00007f7f23bb1090 R08: 0000000000000000 R09: 0000000000000000 [ 126.327279][ T7341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 126.327287][ T7341] R13: 00007f7f23016038 R14: 00007f7f23015fa0 R15: 00007ffd366b92c8 [ 126.327313][ T7341] [ 126.549117][ T7343] netlink: 28 bytes leftover after parsing attributes in process `syz.2.589'. [ 126.581221][ T7343] gretap0: entered promiscuous mode [ 126.641240][ T7343] vlan2: entered promiscuous mode [ 126.821634][ T7358] netlink: 91 bytes leftover after parsing attributes in process `syz.0.595'. [ 127.470047][ T7388] Bluetooth: MGMT ver 1.23 [ 127.959415][ T7416] netlink: 'syz.1.616': attribute type 1 has an invalid length. [ 128.041967][ T7394] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.049397][ T7394] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.100449][ T7394] batman_adv: batadv0: Interface deactivated: dummy0 [ 128.451583][ T7394] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 128.488286][ T7394] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 128.994043][ T7416] 8021q: adding VLAN 0 to HW filter on device bond1 [ 129.125019][ T7417] bond1: (slave veth3): Enslaving as an active interface with a down link [ 129.175590][ T7418] bond1: (slave dummy0): making interface the new active one [ 129.188469][ T7418] dummy0: entered promiscuous mode [ 129.194972][ T7418] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 129.209582][ T13] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.248032][ T7438] team0: No ports can be present during mode change [ 129.274516][ T7438] FAULT_INJECTION: forcing a failure. [ 129.274516][ T7438] name failslab, interval 1, probability 0, space 0, times 0 [ 129.291458][ T13] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.299855][ T7438] CPU: 1 UID: 0 PID: 7438 Comm: syz.0.623 Not tainted syzkaller #0 PREEMPT(full) [ 129.299881][ T7438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 129.299892][ T7438] Call Trace: [ 129.299898][ T7438] [ 129.299905][ T7438] dump_stack_lvl+0xe8/0x150 [ 129.299932][ T7438] should_fail_ex+0x412/0x560 [ 129.299960][ T7438] should_failslab+0xa8/0x100 [ 129.299979][ T7438] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 129.300005][ T7438] ? __alloc_skb+0x1d0/0x7d0 [ 129.300021][ T7438] ? __local_bh_enable_ip+0xd0/0x130 [ 129.300044][ T7438] __alloc_skb+0x1d0/0x7d0 [ 129.300061][ T7438] ? netlink_ack_tlv_len+0x6c/0x210 [ 129.300083][ T7438] netlink_ack+0x146/0xa50 [ 129.300108][ T7438] ? __pfx_genl_rcv_msg+0x10/0x10 [ 129.300135][ T7438] ? __pfx_ref_tracker_free+0x10/0x10 [ 129.300152][ T7438] ? __asan_memcpy+0x40/0x70 [ 129.300172][ T7438] ? __skb_clone+0x63/0x7a0 [ 129.300198][ T7438] netlink_rcv_skb+0x2b6/0x4b0 [ 129.300219][ T7438] ? __pfx_genl_rcv_msg+0x10/0x10 [ 129.300244][ T7438] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 129.300278][ T7438] ? down_read+0x270/0x2e0 [ 129.300296][ T7438] ? genl_rcv+0xd/0x40 [ 129.300320][ T7438] genl_rcv+0x28/0x40 [ 129.300341][ T7438] netlink_unicast+0x75c/0x8e0 [ 129.300366][ T7438] netlink_sendmsg+0x813/0xb40 [ 129.300392][ T7438] ? __pfx_netlink_sendmsg+0x10/0x10 [ 129.300414][ T7438] ? aa_sock_msg_perm+0xf1/0x1b0 [ 129.300439][ T7438] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 129.300464][ T7438] ____sys_sendmsg+0x972/0x9f0 [ 129.300481][ T7438] ? __might_fault+0xaf/0x130 [ 129.300508][ T7438] ? __pfx_____sys_sendmsg+0x10/0x10 [ 129.300536][ T7438] ? import_iovec+0x73/0xa0 [ 129.300560][ T7438] ___sys_sendmsg+0x2a5/0x360 [ 129.300579][ T7438] ? __lock_acquire+0x6b5/0x2cf0 [ 129.300601][ T7438] ? __pfx____sys_sendmsg+0x10/0x10 [ 129.300655][ T7438] ? __fget_files+0x2a/0x420 [ 129.300675][ T7438] ? __fget_files+0x3a0/0x420 [ 129.300706][ T7438] __x64_sys_sendmsg+0x1bd/0x2a0 [ 129.300728][ T7438] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 129.300755][ T7438] ? __pfx_ksys_write+0x10/0x10 [ 129.300787][ T7438] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.300806][ T7438] do_syscall_64+0x174/0x580 [ 129.300824][ T7438] ? trace_irq_disable+0x3b/0x140 [ 129.300848][ T7438] ? clear_bhb_loop+0x40/0x90 [ 129.300869][ T7438] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.300886][ T7438] RIP: 0033:0x7f1f4bb9ce59 [ 129.300903][ T7438] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 129.300916][ T7438] RSP: 002b:00007f1f4ca1a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 129.300934][ T7438] RAX: ffffffffffffffda RBX: 00007f1f4be15fa0 RCX: 00007f1f4bb9ce59 [ 129.300947][ T7438] RDX: 0000000004040084 RSI: 0000200000004bc0 RDI: 0000000000000045 [ 129.300957][ T7438] RBP: 00007f1f4ca1a090 R08: 0000000000000000 R09: 0000000000000000 [ 129.300968][ T7438] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 129.300978][ T7438] R13: 00007f1f4be16038 R14: 00007f1f4be15fa0 R15: 00007ffd537dd238 [ 129.301006][ T7438] [ 129.655102][ T7434] syzkaller1: entered promiscuous mode [ 129.676223][ T7434] syzkaller1: entered allmulticast mode [ 129.682607][ T7449] __nla_validate_parse: 4 callbacks suppressed [ 129.682625][ T7449] netlink: 76 bytes leftover after parsing attributes in process `syz.1.626'. [ 129.702144][ T13] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.730723][ T7447] netlink: 8 bytes leftover after parsing attributes in process `syz.2.624'. [ 129.878100][ T13] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.942761][ T7459] netlink: 27 bytes leftover after parsing attributes in process `syz.2.630'. [ 130.080093][ T7468] netlink: 27 bytes leftover after parsing attributes in process `syz.4.632'. [ 130.244479][ T7476] netlink: 4 bytes leftover after parsing attributes in process `syz.4.637'. [ 130.686454][ T7492] syzkaller1: entered promiscuous mode [ 130.697395][ T7492] syzkaller1: entered allmulticast mode [ 130.902144][ T7499] netlink: 27 bytes leftover after parsing attributes in process `syz.1.645'. [ 131.300428][ T7507] netlink: 8 bytes leftover after parsing attributes in process `syz.1.650'. [ 131.354681][ T7507] netlink: 4 bytes leftover after parsing attributes in process `syz.1.650'. [ 131.410733][ T7507] netlink: 'syz.1.650': attribute type 18 has an invalid length. [ 131.424468][ T7523] netlink: 'syz.4.656': attribute type 1 has an invalid length. [ 131.975214][ T7548] netlink: 'syz.4.666': attribute type 2 has an invalid length. [ 132.334977][ T7562] FAULT_INJECTION: forcing a failure. [ 132.334977][ T7562] name failslab, interval 1, probability 0, space 0, times 0 [ 132.388546][ T7562] CPU: 0 UID: 0 PID: 7562 Comm: syz.1.671 Not tainted syzkaller #0 PREEMPT(full) [ 132.388571][ T7562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 132.388580][ T7562] Call Trace: [ 132.388587][ T7562] [ 132.388594][ T7562] dump_stack_lvl+0xe8/0x150 [ 132.388620][ T7562] should_fail_ex+0x412/0x560 [ 132.388644][ T7562] should_failslab+0xa8/0x100 [ 132.388664][ T7562] __kmalloc_noprof+0xe8/0x760 [ 132.388690][ T7562] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 132.388722][ T7562] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 132.388753][ T7562] genl_family_rcv_msg_doit+0xd9/0x330 [ 132.388783][ T7562] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 132.388822][ T7562] ? apparmor_capable+0x126/0x170 [ 132.388844][ T7562] ? bpf_lsm_capable+0x9/0x20 [ 132.388869][ T7562] ? security_capable+0x7e/0x2c0 [ 132.388897][ T7562] genl_rcv_msg+0x61c/0x7a0 [ 132.388926][ T7562] ? __pfx_genl_rcv_msg+0x10/0x10 [ 132.388947][ T7562] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 132.388968][ T7562] ? __pfx_nl80211_new_key+0x10/0x10 [ 132.388990][ T7562] ? __pfx_nl80211_post_doit+0x10/0x10 [ 132.389012][ T7562] ? __pfx_ref_tracker_free+0x10/0x10 [ 132.389030][ T7562] ? __asan_memcpy+0x40/0x70 [ 132.389051][ T7562] ? __skb_clone+0x63/0x7a0 [ 132.389078][ T7562] netlink_rcv_skb+0x232/0x4b0 [ 132.389098][ T7562] ? __pfx_genl_rcv_msg+0x10/0x10 [ 132.389123][ T7562] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 132.389155][ T7562] ? down_read+0x270/0x2e0 [ 132.389174][ T7562] ? genl_rcv+0xd/0x40 [ 132.389198][ T7562] genl_rcv+0x28/0x40 [ 132.389220][ T7562] netlink_unicast+0x75c/0x8e0 [ 132.389250][ T7562] netlink_sendmsg+0x813/0xb40 [ 132.389278][ T7562] ? __pfx_netlink_sendmsg+0x10/0x10 [ 132.389300][ T7562] ? aa_sock_msg_perm+0xf1/0x1b0 [ 132.389323][ T7562] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 132.389346][ T7562] ____sys_sendmsg+0x972/0x9f0 [ 132.389364][ T7562] ? __might_fault+0xaf/0x130 [ 132.389389][ T7562] ? __pfx_____sys_sendmsg+0x10/0x10 [ 132.389417][ T7562] ? import_iovec+0x73/0xa0 [ 132.389440][ T7562] ___sys_sendmsg+0x2a5/0x360 [ 132.389459][ T7562] ? __lock_acquire+0x6b5/0x2cf0 [ 132.389482][ T7562] ? __pfx____sys_sendmsg+0x10/0x10 [ 132.389532][ T7562] ? __fget_files+0x2a/0x420 [ 132.389551][ T7562] ? __fget_files+0x3a0/0x420 [ 132.389577][ T7562] __x64_sys_sendmsg+0x1bd/0x2a0 [ 132.389598][ T7562] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 132.389626][ T7562] ? __pfx_ksys_write+0x10/0x10 [ 132.389657][ T7562] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.389676][ T7562] do_syscall_64+0x174/0x580 [ 132.389693][ T7562] ? trace_irq_disable+0x3b/0x140 [ 132.389716][ T7562] ? clear_bhb_loop+0x40/0x90 [ 132.389737][ T7562] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.389754][ T7562] RIP: 0033:0x7f7f22d9ce59 [ 132.389770][ T7562] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 132.389783][ T7562] RSP: 002b:00007f7f23bb1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 132.389801][ T7562] RAX: ffffffffffffffda RBX: 00007f7f23015fa0 RCX: 00007f7f22d9ce59 [ 132.389813][ T7562] RDX: 0000000000000000 RSI: 00002000000006c0 RDI: 0000000000000003 [ 132.389823][ T7562] RBP: 00007f7f23bb1090 R08: 0000000000000000 R09: 0000000000000000 [ 132.389832][ T7562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 132.389841][ T7562] R13: 00007f7f23016038 R14: 00007f7f23015fa0 R15: 00007ffd366b92c8 [ 132.389880][ T7562] [ 132.864405][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.883878][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.022872][ T7579] netlink: 'syz.4.679': attribute type 2 has an invalid length. [ 133.143639][ T7564] syz.0.670 (7564) used greatest stack depth: 17944 bytes left [ 133.471859][ T7599] netlink: 8 bytes leftover after parsing attributes in process `syz.2.685'. [ 133.588679][ T7606] xt_l2tp: invalid flags combination: 8 [ 133.634209][ T7604] netlink: 'syz.2.685': attribute type 1 has an invalid length. [ 133.692945][ T7604] gre0: entered promiscuous mode [ 133.708575][ T7604] gre0: entered allmulticast mode [ 133.965686][ T7625] netlink: 'syz.0.693': attribute type 1 has an invalid length. [ 134.193011][ T7625] bond1: entered promiscuous mode [ 134.198806][ T7625] 8021q: adding VLAN 0 to HW filter on device bond1 [ 134.208527][ T7625] netlink: 'syz.0.693': attribute type 1 has an invalid length. [ 134.218555][ T7625] netlink: 'syz.0.693': attribute type 1 has an invalid length. [ 134.226890][ T7625] netlink: 'syz.0.693': attribute type 1 has an invalid length. [ 134.234937][ T7625] netlink: 'syz.0.693': attribute type 1 has an invalid length. [ 134.243402][ T7625] netlink: 'syz.0.693': attribute type 1 has an invalid length. [ 134.256107][ T7625] netlink: 'syz.0.693': attribute type 1 has an invalid length. [ 134.264487][ T7625] netlink: 'syz.0.693': attribute type 1 has an invalid length. [ 134.294143][ T7639] netlink: 132 bytes leftover after parsing attributes in process `syz.2.697'. [ 134.316076][ T7642] net_ratelimit: 392 callbacks suppressed [ 134.316094][ T7642] openvswitch: netlink: IPv6 tunnel dst address is zero [ 134.521196][ T7652] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 135.342935][ T7685] netlink: 64 bytes leftover after parsing attributes in process `syz.1.712'. [ 135.534857][ T7695] netlink: 9 bytes leftover after parsing attributes in process `syz.2.718'. [ 135.575435][ T7698] netlink: 9 bytes leftover after parsing attributes in process `syz.2.718'. [ 135.975871][ T7720] syzkaller0: entered promiscuous mode [ 135.981676][ T7720] syzkaller0: entered allmulticast mode [ 135.989971][ T7720] FAULT_INJECTION: forcing a failure. [ 135.989971][ T7720] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 136.005343][ T7720] CPU: 0 UID: 0 PID: 7720 Comm: syz.1.726 Not tainted syzkaller #0 PREEMPT(full) [ 136.005361][ T7720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 136.005369][ T7720] Call Trace: [ 136.005375][ T7720] [ 136.005384][ T7720] dump_stack_lvl+0xe8/0x150 [ 136.005405][ T7720] should_fail_ex+0x412/0x560 [ 136.005424][ T7720] _copy_from_iter+0x1d3/0x1670 [ 136.005448][ T7720] ? __pfx__copy_from_iter+0x10/0x10 [ 136.005460][ T7720] ? sock_alloc_send_pskb+0x896/0x990 [ 136.005482][ T7720] ? __pfx__copy_from_iter+0x10/0x10 [ 136.005501][ T7720] copy_page_from_iter+0x220/0x2d0 [ 136.005519][ T7720] skb_copy_datagram_from_iter+0x306/0x710 [ 136.005545][ T7720] packet_sendmsg+0x35b1/0x4fb0 [ 136.005580][ T7720] ? unwind_next_frame+0xa6/0x2550 [ 136.005611][ T7720] ? __pfx_packet_sendmsg+0x10/0x10 [ 136.005624][ T7720] ? aa_sk_perm+0x6d5/0x900 [ 136.005648][ T7720] ? __pfx_aa_sk_perm+0x10/0x10 [ 136.005664][ T7720] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 136.005690][ T7720] ? aa_sock_msg_perm+0xf1/0x1b0 [ 136.005712][ T7720] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 136.005735][ T7720] ____sys_sendmsg+0x972/0x9f0 [ 136.005757][ T7720] ? __pfx_____sys_sendmsg+0x10/0x10 [ 136.005778][ T7720] ? import_iovec+0x73/0xa0 [ 136.005796][ T7720] ___sys_sendmsg+0x2a5/0x360 [ 136.005811][ T7720] ? __lock_acquire+0x6b5/0x2cf0 [ 136.005828][ T7720] ? __pfx____sys_sendmsg+0x10/0x10 [ 136.005870][ T7720] ? __fget_files+0x2a/0x420 [ 136.005886][ T7720] ? __fget_files+0x3a0/0x420 [ 136.005913][ T7720] __x64_sys_sendmsg+0x1bd/0x2a0 [ 136.005933][ T7720] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 136.005959][ T7720] ? __pfx_ksys_write+0x10/0x10 [ 136.005987][ T7720] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.006004][ T7720] do_syscall_64+0x174/0x580 [ 136.006021][ T7720] ? trace_irq_disable+0x3b/0x140 [ 136.006044][ T7720] ? clear_bhb_loop+0x40/0x90 [ 136.006065][ T7720] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.006081][ T7720] RIP: 0033:0x7f7f22d9ce59 [ 136.006098][ T7720] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 136.006112][ T7720] RSP: 002b:00007f7f23bb1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 136.006129][ T7720] RAX: ffffffffffffffda RBX: 00007f7f23015fa0 RCX: 00007f7f22d9ce59 [ 136.006142][ T7720] RDX: 0000000000004005 RSI: 0000200000000200 RDI: 0000000000000008 [ 136.006153][ T7720] RBP: 00007f7f23bb1090 R08: 0000000000000000 R09: 0000000000000000 [ 136.006164][ T7720] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 136.006174][ T7720] R13: 00007f7f23016038 R14: 00007f7f23015fa0 R15: 00007ffd366b92c8 [ 136.006201][ T7720] [ 136.497576][ T7726] netlink: set zone limit has 4 unknown bytes [ 136.623273][ T7729] netlink: 8 bytes leftover after parsing attributes in process `syz.0.729'. [ 136.881558][ T7749] netlink: 76 bytes leftover after parsing attributes in process `syz.3.738'. [ 137.004361][ T32] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 4352 - 0 [ 137.022367][ T32] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 4352 - 0 [ 137.063172][ T32] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 4352 - 0 [ 137.091159][ T32] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 4352 - 0 [ 137.148335][ T32] bond1: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 137.213052][ T7758] netlink: 8 bytes leftover after parsing attributes in process `syz.1.739'. [ 138.169570][ T7791] netlink: 12 bytes leftover after parsing attributes in process `syz.1.751'. [ 138.200182][ T7791] validate_nla: 25 callbacks suppressed [ 138.200202][ T7791] netlink: 'syz.1.751': attribute type 7 has an invalid length. [ 138.459024][ T7796] netlink: 2584 bytes leftover after parsing attributes in process `syz.2.754'. [ 138.858831][ T7803] netlink: 28 bytes leftover after parsing attributes in process `syz.4.757'. [ 138.952381][ T7810] FAULT_INJECTION: forcing a failure. [ 138.952381][ T7810] name failslab, interval 1, probability 0, space 0, times 0 [ 138.968076][ T7810] CPU: 1 UID: 0 PID: 7810 Comm: syz.0.760 Not tainted syzkaller #0 PREEMPT(full) [ 138.968119][ T7810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 138.968130][ T7810] Call Trace: [ 138.968138][ T7810] [ 138.968149][ T7810] dump_stack_lvl+0xe8/0x150 [ 138.968181][ T7810] should_fail_ex+0x412/0x560 [ 138.968207][ T7810] should_failslab+0xa8/0x100 [ 138.968232][ T7810] ? skb_clone+0x212/0x3a0 [ 138.968255][ T7810] kmem_cache_alloc_noprof+0x87/0x650 [ 138.968277][ T7810] ? dev_queue_xmit_nit+0x2d/0xad0 [ 138.968305][ T7810] skb_clone+0x212/0x3a0 [ 138.968324][ T7810] ? dev_queue_xmit_nit+0x268/0xad0 [ 138.968345][ T7810] dev_queue_xmit_nit+0x29a/0xad0 [ 138.968365][ T7810] ? dev_queue_xmit_nit+0x2d/0xad0 [ 138.968398][ T7810] dev_hard_start_xmit+0x1c1/0x830 [ 138.968437][ T7810] __dev_queue_xmit+0x14d9/0x3950 [ 138.968458][ T7810] ? __x64_sys_sendmsg+0x1bd/0x2a0 [ 138.968486][ T7810] ? __dev_queue_xmit+0x2b6/0x3950 [ 138.968583][ T7810] ? __pfx___dev_queue_xmit+0x10/0x10 [ 138.968616][ T7810] ? __copy_skb_header+0xa3/0x4a0 [ 138.968637][ T7810] ? __asan_memcpy+0x40/0x70 [ 138.968659][ T7810] ? __skb_clone+0x63/0x7a0 [ 138.968684][ T7810] ? __skb_clone+0x483/0x7a0 [ 138.968711][ T7810] ? skb_clone+0x246/0x3a0 [ 138.968735][ T7810] __netlink_deliver_tap+0x5ad/0x850 [ 138.968769][ T7810] ? netlink_deliver_tap+0x2e/0x1b0 [ 138.968787][ T7810] netlink_deliver_tap+0x19c/0x1b0 [ 138.968804][ T7810] netlink_unicast+0x730/0x8e0 [ 138.968829][ T7810] netlink_sendmsg+0x813/0xb40 [ 138.968854][ T7810] ? __pfx_netlink_sendmsg+0x10/0x10 [ 138.968874][ T7810] ? aa_sock_msg_perm+0xf1/0x1b0 [ 138.968898][ T7810] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 138.968922][ T7810] ____sys_sendmsg+0x972/0x9f0 [ 138.968941][ T7810] ? __might_fault+0xaf/0x130 [ 138.968969][ T7810] ? __pfx_____sys_sendmsg+0x10/0x10 [ 138.968999][ T7810] ? import_iovec+0x73/0xa0 [ 138.969025][ T7810] ___sys_sendmsg+0x2a5/0x360 [ 138.969044][ T7810] ? __lock_acquire+0x6b5/0x2cf0 [ 138.969069][ T7810] ? __pfx____sys_sendmsg+0x10/0x10 [ 138.969145][ T7810] ? __fget_files+0x2a/0x420 [ 138.969167][ T7810] ? __fget_files+0x3a0/0x420 [ 138.969198][ T7810] __x64_sys_sendmsg+0x1bd/0x2a0 [ 138.969222][ T7810] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 138.969251][ T7810] ? __pfx_ksys_write+0x10/0x10 [ 138.969286][ T7810] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.969310][ T7810] do_syscall_64+0x174/0x580 [ 138.969332][ T7810] ? trace_irq_disable+0x3b/0x140 [ 138.969357][ T7810] ? clear_bhb_loop+0x40/0x90 [ 138.969379][ T7810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.969397][ T7810] RIP: 0033:0x7f1f4bb9ce59 [ 138.969417][ T7810] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 138.969431][ T7810] RSP: 002b:00007f1f4ca1a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 138.969458][ T7810] RAX: ffffffffffffffda RBX: 00007f1f4be15fa0 RCX: 00007f1f4bb9ce59 [ 138.969470][ T7810] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 138.969481][ T7810] RBP: 00007f1f4ca1a090 R08: 0000000000000000 R09: 0000000000000000 [ 138.969492][ T7810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 138.969501][ T7810] R13: 00007f1f4be16038 R14: 00007f1f4be15fa0 R15: 00007ffd537dd238 [ 138.969600][ T7810] [ 139.408236][ T29] audit: type=1800 audit(1781056089.782:2): pid=7815 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.763" name="blkio.bfq.time_recursive" dev="tmpfs" ino=899 res=0 errno=0 [ 139.561995][ T7821] netlink: 207952 bytes leftover after parsing attributes in process `syz.0.765'. [ 139.816584][ T7826] FAULT_INJECTION: forcing a failure. [ 139.816584][ T7826] name failslab, interval 1, probability 0, space 0, times 0 [ 139.833264][ T7826] CPU: 1 UID: 0 PID: 7826 Comm: syz.3.766 Not tainted syzkaller #0 PREEMPT(full) [ 139.833288][ T7826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 139.833296][ T7826] Call Trace: [ 139.833302][ T7826] [ 139.833309][ T7826] dump_stack_lvl+0xe8/0x150 [ 139.833339][ T7826] should_fail_ex+0x412/0x560 [ 139.833365][ T7826] should_failslab+0xa8/0x100 [ 139.833385][ T7826] ? skb_clone+0x212/0x3a0 [ 139.833408][ T7826] kmem_cache_alloc_noprof+0x87/0x650 [ 139.833441][ T7826] skb_clone+0x212/0x3a0 [ 139.833463][ T7826] __netlink_deliver_tap+0x404/0x850 [ 139.833495][ T7826] ? netlink_deliver_tap+0x2e/0x1b0 [ 139.833517][ T7826] netlink_deliver_tap+0x19c/0x1b0 [ 139.833538][ T7826] netlink_sendskb+0x68/0x140 [ 139.833557][ T7826] netlink_rcv_skb+0x2b6/0x4b0 [ 139.833577][ T7826] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 139.833598][ T7826] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 139.833630][ T7826] ? netlink_deliver_tap+0x2e/0x1b0 [ 139.833650][ T7826] ? netlink_deliver_tap+0x2e/0x1b0 [ 139.833675][ T7826] netlink_unicast+0x75c/0x8e0 [ 139.833705][ T7826] netlink_sendmsg+0x813/0xb40 [ 139.833738][ T7826] ? __pfx_netlink_sendmsg+0x10/0x10 [ 139.833761][ T7826] ? aa_sock_msg_perm+0xf1/0x1b0 [ 139.833799][ T7826] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 139.833827][ T7826] ____sys_sendmsg+0x972/0x9f0 [ 139.833849][ T7826] ? __might_fault+0xaf/0x130 [ 139.833878][ T7826] ? __pfx_____sys_sendmsg+0x10/0x10 [ 139.833908][ T7826] ? import_iovec+0x73/0xa0 [ 139.833933][ T7826] ___sys_sendmsg+0x2a5/0x360 [ 139.833952][ T7826] ? __lock_acquire+0x6b5/0x2cf0 [ 139.833977][ T7826] ? __pfx____sys_sendmsg+0x10/0x10 [ 139.834031][ T7826] ? __fget_files+0x2a/0x420 [ 139.834053][ T7826] ? __fget_files+0x3a0/0x420 [ 139.834083][ T7826] __x64_sys_sendmsg+0x1bd/0x2a0 [ 139.834106][ T7826] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 139.834141][ T7826] ? __pfx_ksys_write+0x10/0x10 [ 139.834176][ T7826] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.834196][ T7826] do_syscall_64+0x174/0x580 [ 139.834216][ T7826] ? trace_irq_disable+0x3b/0x140 [ 139.834241][ T7826] ? clear_bhb_loop+0x40/0x90 [ 139.834264][ T7826] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.834281][ T7826] RIP: 0033:0x7f8f7fb9ce59 [ 139.834298][ T7826] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 139.834312][ T7826] RSP: 002b:00007f8f80a05028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 139.834331][ T7826] RAX: ffffffffffffffda RBX: 00007f8f7fe15fa0 RCX: 00007f8f7fb9ce59 [ 139.834343][ T7826] RDX: 0000000000000098 RSI: 0000200000000040 RDI: 0000000000000003 [ 139.834354][ T7826] RBP: 00007f8f80a05090 R08: 0000000000000000 R09: 0000000000000000 [ 139.834364][ T7826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 139.834374][ T7826] R13: 00007f8f7fe16038 R14: 00007f8f7fe15fa0 R15: 00007fffdfb0c6f8 [ 139.834404][ T7826] [ 140.543037][ T7841] dummy0: mtu less than device minimum [ 140.780252][ T7844] syzkaller1: entered allmulticast mode [ 140.874031][ T7852] __nla_validate_parse: 1 callbacks suppressed [ 140.874093][ T7852] netlink: 4 bytes leftover after parsing attributes in process `syz.1.773'. [ 141.008893][ T7858] netlink: 24 bytes leftover after parsing attributes in process `syz.0.775'. [ 141.056575][ T7862] netlink: 76 bytes leftover after parsing attributes in process `syz.1.778'. [ 141.361924][ T63] dummy0: left promiscuous mode [ 141.660382][ T7893] netlink: 8 bytes leftover after parsing attributes in process `syz.3.788'. [ 141.689277][ T7893] netlink: 'syz.3.788': attribute type 12 has an invalid length. [ 141.713049][ T7893] netlink: 8 bytes leftover after parsing attributes in process `syz.3.788'. [ 141.760844][ T7893] Driver unsupported XDP return value 0 on prog (id 135) dev N/A, expect packet loss! [ 141.804070][ T7899] netlink: 'syz.2.790': attribute type 1 has an invalid length. [ 141.832910][ T7899] tipc: Started in network mode [ 141.845467][ T7899] tipc: Node identity 00000000000003000000000000000001, cluster identity 4711 [ 141.861969][ T7899] tipc: Enabling of bearer rejected, failed to enable media [ 141.935083][ T7903] netlink: 76 bytes leftover after parsing attributes in process `syz.3.791'. [ 142.044151][ T7906] netlink: 4120 bytes leftover after parsing attributes in process `syz.3.792'. [ 142.179356][ T7908] netlink: 28 bytes leftover after parsing attributes in process `syz.3.793'. [ 142.378118][ T7915] netlink: 204 bytes leftover after parsing attributes in process `syz.0.796'. [ 142.534403][ T7923] netlink: 'syz.0.798': attribute type 1 has an invalid length. [ 142.542476][ T7923] netlink: 9188 bytes leftover after parsing attributes in process `syz.0.798'. [ 143.560521][ T7942] syzkaller0: entered promiscuous mode [ 143.566055][ T7942] syzkaller0: entered allmulticast mode [ 145.611286][ T7957] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 145.640477][ T7968] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6erspan0 [ 145.936323][ T7982] veth1_macvtap: left promiscuous mode [ 146.812561][ T8016] __nla_validate_parse: 7 callbacks suppressed [ 146.812582][ T8016] netlink: 32 bytes leftover after parsing attributes in process `syz.1.830'. [ 147.119567][ T8023] netlink: 8 bytes leftover after parsing attributes in process `syz.4.831'. [ 147.231423][ T8028] netlink: 4120 bytes leftover after parsing attributes in process `syz.0.832'. [ 147.338132][ T8023] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.345877][ T8029] netlink: 20 bytes leftover after parsing attributes in process `syz.4.831'. [ 147.347503][ T8023] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.623661][ T8047] netlink: 4 bytes leftover after parsing attributes in process `syz.3.833'. [ 148.381635][ T8093] netlink: 4 bytes leftover after parsing attributes in process `syz.4.837'. [ 148.426542][ T8093] netlink: 40 bytes leftover after parsing attributes in process `syz.4.837'. [ 148.506132][ T5295] veth1_macvtap: entered promiscuous mode [ 148.634250][ T8109] netlink: 4120 bytes leftover after parsing attributes in process `syz.0.844'. [ 148.748238][ T8112] netlink: 4 bytes leftover after parsing attributes in process `syz.4.843'. [ 148.795560][ T8112] hsr_slave_0: left promiscuous mode [ 148.834416][ T5636] Bluetooth: hci4: link tx timeout [ 148.842805][ T8112] hsr_slave_1: left promiscuous mode [ 148.844836][ T5636] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 149.148957][ T8131] netlink: 76 bytes leftover after parsing attributes in process `syz.2.849'. [ 149.502600][ T8148] netlink: 'syz.3.853': attribute type 2 has an invalid length. [ 150.100736][ T8180] FAULT_INJECTION: forcing a failure. [ 150.100736][ T8180] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 150.174979][ T8180] CPU: 1 UID: 0 PID: 8180 Comm: syz.1.864 Not tainted syzkaller #0 PREEMPT(full) [ 150.175005][ T8180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 150.175015][ T8180] Call Trace: [ 150.175021][ T8180] [ 150.175029][ T8180] dump_stack_lvl+0xe8/0x150 [ 150.175054][ T8180] should_fail_ex+0x412/0x560 [ 150.175077][ T8180] _copy_to_user+0x31/0xb0 [ 150.175099][ T8180] simple_read_from_buffer+0xe1/0x170 [ 150.175124][ T8180] proc_fail_nth_read+0x1bb/0x230 [ 150.175148][ T8180] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 150.175173][ T8180] ? rw_verify_area+0x2a6/0x4d0 [ 150.175196][ T8180] ? dev_ioctl+0x83c/0x1150 [ 150.175210][ T8180] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 150.175232][ T8180] vfs_read+0x20c/0xa70 [ 150.175260][ T8180] ? __pfx___mutex_lock+0x10/0x10 [ 150.175281][ T8180] ? __pfx_vfs_read+0x10/0x10 [ 150.175311][ T8180] ? __fget_files+0x2a/0x420 [ 150.175336][ T8180] ? __fget_files+0x3a0/0x420 [ 150.175563][ T8180] ? __fget_files+0x2a/0x420 [ 150.175600][ T8180] ksys_read+0x150/0x270 [ 150.175732][ T8180] ? __pfx_ksys_read+0x10/0x10 [ 150.175755][ T8180] ? __pfx_sock_ioctl+0x10/0x10 [ 150.175783][ T8180] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.175801][ T8180] do_syscall_64+0x174/0x580 [ 150.175818][ T8180] ? trace_irq_disable+0x3b/0x140 [ 150.175842][ T8180] ? clear_bhb_loop+0x40/0x90 [ 150.175863][ T8180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.175879][ T8180] RIP: 0033:0x7f7f22d5d68e [ 150.175896][ T8180] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 150.175920][ T8180] RSP: 002b:00007f7f23bb0fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 150.175935][ T8180] RAX: ffffffffffffffda RBX: 00007f7f23bb16c0 RCX: 00007f7f22d5d68e [ 150.175948][ T8180] RDX: 000000000000000f RSI: 00007f7f23bb10a0 RDI: 0000000000000005 [ 150.175958][ T8180] RBP: 00007f7f23bb1090 R08: 0000000000000000 R09: 0000000000000000 [ 150.175969][ T8180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 150.175979][ T8180] R13: 00007f7f23016038 R14: 00007f7f23015fa0 R15: 00007ffd366b92c8 [ 150.176005][ T8180] [ 150.725668][ T8203] netlink: 'syz.2.871': attribute type 10 has an invalid length. [ 150.773074][ T8203] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.809454][ T8203] bond0: (slave team0): Enslaving as an active interface with an up link [ 150.920730][ T5636] Bluetooth: hci4: command 0x0406 tx timeout [ 151.959099][ T8253] __nla_validate_parse: 10 callbacks suppressed [ 151.959120][ T8253] netlink: 43 bytes leftover after parsing attributes in process `syz.1.886'. [ 152.038384][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 152.403240][ T8276] FAULT_INJECTION: forcing a failure. [ 152.403240][ T8276] name failslab, interval 1, probability 0, space 0, times 0 [ 152.417318][ T8276] CPU: 1 UID: 0 PID: 8276 Comm: syz.1.894 Not tainted syzkaller #0 PREEMPT(full) [ 152.417341][ T8276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 152.417351][ T8276] Call Trace: [ 152.417358][ T8276] [ 152.417366][ T8276] dump_stack_lvl+0xe8/0x150 [ 152.417392][ T8276] should_fail_ex+0x412/0x560 [ 152.417416][ T8276] should_failslab+0xa8/0x100 [ 152.417433][ T8276] ? skb_clone+0x212/0x3a0 [ 152.417453][ T8276] kmem_cache_alloc_noprof+0x87/0x650 [ 152.417474][ T8276] ? dev_queue_xmit_nit+0x2d/0xad0 [ 152.417500][ T8276] skb_clone+0x212/0x3a0 [ 152.417518][ T8276] ? dev_queue_xmit_nit+0x268/0xad0 [ 152.417539][ T8276] dev_queue_xmit_nit+0x29a/0xad0 [ 152.417558][ T8276] ? dev_queue_xmit_nit+0x2d/0xad0 [ 152.417587][ T8276] dev_hard_start_xmit+0x1c1/0x830 [ 152.417628][ T8276] __dev_queue_xmit+0x14d9/0x3950 [ 152.417648][ T8276] ? bpf_test_run+0x354/0x830 [ 152.417670][ T8276] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.417692][ T8276] ? __dev_queue_xmit+0x2b6/0x3950 [ 152.417727][ T8276] ? __pfx___dev_queue_xmit+0x10/0x10 [ 152.417766][ T8276] ? rcu_is_watching+0x15/0xb0 [ 152.417792][ T8276] ? skb_release_data+0x2de/0xa60 [ 152.417825][ T8276] __bpf_redirect+0x9a6/0x12a0 [ 152.417862][ T8276] bpf_clone_redirect+0x313/0x4b0 [ 152.417897][ T8276] ? bpf_test_run+0x1d1/0x830 [ 152.417918][ T8276] bpf_prog_cbaa716d5e7dde70+0x5f/0x68 [ 152.417939][ T8276] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 152.417976][ T8276] ? __pfx___schedule+0x10/0x10 [ 152.417992][ T8276] ? ktime_get+0x45/0x220 [ 152.418029][ T8276] ? preempt_schedule_thunk+0x16/0x30 [ 152.418056][ T8276] ? preempt_schedule_common+0x82/0xd0 [ 152.418073][ T8276] ? bpf_test_run+0x1d1/0x830 [ 152.418097][ T8276] ? bpf_test_timer_continue+0x10c/0x320 [ 152.418121][ T8276] bpf_test_run+0x354/0x830 [ 152.418164][ T8276] ? __pfx_bpf_test_run+0x10/0x10 [ 152.418203][ T8276] ? eth_type_trans+0x348/0x7e0 [ 152.418237][ T8276] ? bpf_prog_test_run_skb+0x8e6/0x2260 [ 152.418255][ T8276] ? convert___skb_to_skb+0x3d/0x5b0 [ 152.418277][ T8276] bpf_prog_test_run_skb+0xe2c/0x2260 [ 152.418320][ T8276] ? __fget_files+0x3a0/0x420 [ 152.418340][ T8276] ? __fget_files+0x2a/0x420 [ 152.418366][ T8276] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 152.418387][ T8276] bpf_prog_test_run+0x2c7/0x340 [ 152.418409][ T8276] __sys_bpf+0x643/0x950 [ 152.418436][ T8276] ? __pfx___sys_bpf+0x10/0x10 [ 152.418477][ T8276] ? ksys_write+0x242/0x270 [ 152.418505][ T8276] ? __pfx_ksys_write+0x10/0x10 [ 152.418534][ T8276] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.418553][ T8276] __x64_sys_bpf+0x7c/0x90 [ 152.418578][ T8276] do_syscall_64+0x174/0x580 [ 152.418596][ T8276] ? trace_irq_disable+0x3b/0x140 [ 152.418620][ T8276] ? clear_bhb_loop+0x40/0x90 [ 152.418642][ T8276] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.418659][ T8276] RIP: 0033:0x7f7f22d9ce59 [ 152.418675][ T8276] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 152.418689][ T8276] RSP: 002b:00007f7f23bb1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 152.418708][ T8276] RAX: ffffffffffffffda RBX: 00007f7f23015fa0 RCX: 00007f7f22d9ce59 [ 152.418720][ T8276] RDX: 0000000000000028 RSI: 0000200000000080 RDI: 000000000000000a [ 152.418730][ T8276] RBP: 00007f7f23bb1090 R08: 0000000000000000 R09: 0000000000000000 [ 152.418741][ T8276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 152.418750][ T8276] R13: 00007f7f23016038 R14: 00007f7f23015fa0 R15: 00007ffd366b92c8 [ 152.418781][ T8276] [ 152.988166][ T8289] netlink: 'syz.1.899': attribute type 1 has an invalid length. [ 152.997299][ T8289] netlink: 4 bytes leftover after parsing attributes in process `syz.1.899'. [ 153.009909][ T8289] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 153.053145][ T8290] FAULT_INJECTION: forcing a failure. [ 153.053145][ T8290] name failslab, interval 1, probability 0, space 0, times 0 [ 153.101572][ T8294] bridge0: port 3(ip6gretap0) entered blocking state [ 153.109662][ T8294] bridge0: port 3(ip6gretap0) entered disabled state [ 153.116635][ T8294] ip6gretap0: entered allmulticast mode [ 153.126227][ T8294] ip6gretap0: entered promiscuous mode [ 153.141570][ T8290] CPU: 0 UID: 0 PID: 8290 Comm: syz.3.898 Not tainted syzkaller #0 PREEMPT(full) [ 153.141593][ T8290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 153.141603][ T8290] Call Trace: [ 153.141609][ T8290] [ 153.141616][ T8290] dump_stack_lvl+0xe8/0x150 [ 153.141643][ T8290] should_fail_ex+0x412/0x560 [ 153.141667][ T8290] should_failslab+0xa8/0x100 [ 153.141686][ T8290] __kmalloc_noprof+0xe8/0x760 [ 153.141712][ T8290] ? ieee80211_assign_beacon+0x6bb/0x1ef0 [ 153.141745][ T8290] ieee80211_assign_beacon+0x6bb/0x1ef0 [ 153.141795][ T8290] ieee80211_start_ap+0x1e52/0x3680 [ 153.141815][ T8290] ? cfg80211_get_end_freq+0x161/0x1e0 [ 153.141851][ T8290] ? cfg80211_chandef_valid+0x915/0xcf0 [ 153.141875][ T8290] ? __pfx_ieee80211_start_ap+0x10/0x10 [ 153.141894][ T8290] ? cfg80211_find_elem_match+0x1bf/0x200 [ 153.141932][ T8290] ? __pfx_nl80211_calculate_ap_capabilities+0x10/0x10 [ 153.141964][ T8290] rdev_start_ap+0xf3/0x270 [ 153.141994][ T8290] nl80211_start_ap+0x1f51/0x2670 [ 153.142019][ T8290] ? __pfx___mutex_lock+0x10/0x10 [ 153.142056][ T8290] ? __pfx_nl80211_start_ap+0x10/0x10 [ 153.142091][ T8290] genl_family_rcv_msg_doit+0x22a/0x330 [ 153.142124][ T8290] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 153.142161][ T8290] ? bpf_lsm_capable+0x9/0x20 [ 153.142186][ T8290] ? security_capable+0x7e/0x2c0 [ 153.142216][ T8290] genl_rcv_msg+0x61c/0x7a0 [ 153.142247][ T8290] ? __pfx_genl_rcv_msg+0x10/0x10 [ 153.142269][ T8290] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 153.142289][ T8290] ? __pfx_nl80211_start_ap+0x10/0x10 [ 153.142311][ T8290] ? __pfx_nl80211_post_doit+0x10/0x10 [ 153.142333][ T8290] ? __pfx_ref_tracker_free+0x10/0x10 [ 153.142351][ T8290] ? __asan_memcpy+0x40/0x70 [ 153.142373][ T8290] ? __skb_clone+0x63/0x7a0 [ 153.142401][ T8290] netlink_rcv_skb+0x232/0x4b0 [ 153.142423][ T8290] ? __pfx_genl_rcv_msg+0x10/0x10 [ 153.142448][ T8290] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 153.142485][ T8290] ? down_read+0x270/0x2e0 [ 153.142503][ T8290] ? genl_rcv+0xd/0x40 [ 153.142527][ T8290] genl_rcv+0x28/0x40 [ 153.142549][ T8290] netlink_unicast+0x75c/0x8e0 [ 153.142578][ T8290] netlink_sendmsg+0x813/0xb40 [ 153.142607][ T8290] ? __pfx_netlink_sendmsg+0x10/0x10 [ 153.142631][ T8290] ? aa_sock_msg_perm+0xf1/0x1b0 [ 153.142658][ T8290] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 153.142682][ T8290] ____sys_sendmsg+0x972/0x9f0 [ 153.142703][ T8290] ? __might_fault+0xaf/0x130 [ 153.142731][ T8290] ? __pfx_____sys_sendmsg+0x10/0x10 [ 153.142761][ T8290] ? import_iovec+0x73/0xa0 [ 153.142786][ T8290] ___sys_sendmsg+0x2a5/0x360 [ 153.142808][ T8290] ? __lock_acquire+0x6b5/0x2cf0 [ 153.142831][ T8290] ? __pfx____sys_sendmsg+0x10/0x10 [ 153.142889][ T8290] ? __fget_files+0x2a/0x420 [ 153.142909][ T8290] ? __fget_files+0x3a0/0x420 [ 153.142941][ T8290] __x64_sys_sendmsg+0x1bd/0x2a0 [ 153.142965][ T8290] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 153.142995][ T8290] ? __pfx_ksys_write+0x10/0x10 [ 153.143029][ T8290] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.143049][ T8290] do_syscall_64+0x174/0x580 [ 153.143066][ T8290] ? trace_irq_disable+0x3b/0x140 [ 153.143091][ T8290] ? clear_bhb_loop+0x40/0x90 [ 153.143113][ T8290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.143130][ T8290] RIP: 0033:0x7f8f7fb9ce59 [ 153.143146][ T8290] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 153.143160][ T8290] RSP: 002b:00007f8f80a05028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 153.143185][ T8290] RAX: ffffffffffffffda RBX: 00007f8f7fe15fa0 RCX: 00007f8f7fb9ce59 [ 153.143197][ T8290] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 153.143208][ T8290] RBP: 00007f8f80a05090 R08: 0000000000000000 R09: 0000000000000000 [ 153.143219][ T8290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 153.143229][ T8290] R13: 00007f8f7fe16038 R14: 00007f8f7fe15fa0 R15: 00007fffdfb0c6f8 [ 153.143260][ T8290] [ 153.198905][ T8297] netlink: 8 bytes leftover after parsing attributes in process `syz.2.903'. [ 153.452554][ T8309] netlink: 4 bytes leftover after parsing attributes in process `syz.0.901'. [ 153.656522][ T8297] netlink: 4 bytes leftover after parsing attributes in process `syz.2.903'. [ 154.089661][ T8324] netlink: 32 bytes leftover after parsing attributes in process `syz.4.907'. [ 154.144948][ T8324] netlink: 32 bytes leftover after parsing attributes in process `syz.4.907'. [ 154.183400][ T8328] netlink: 32 bytes leftover after parsing attributes in process `syz.4.907'. [ 154.290794][ T8332] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 154.353005][ T8332] netlink: 132 bytes leftover after parsing attributes in process `syz.2.911'. [ 154.380520][ T8332] netlink: 136 bytes leftover after parsing attributes in process `syz.2.911'. [ 154.411294][ T8332] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 155.534736][ T8389] FAULT_INJECTION: forcing a failure. [ 155.534736][ T8389] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 155.555722][ T8389] CPU: 1 UID: 0 PID: 8389 Comm: syz.2.931 Not tainted syzkaller #0 PREEMPT(full) [ 155.555745][ T8389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 155.555754][ T8389] Call Trace: [ 155.555760][ T8389] [ 155.555767][ T8389] dump_stack_lvl+0xe8/0x150 [ 155.555793][ T8389] should_fail_ex+0x412/0x560 [ 155.555815][ T8389] _copy_from_user+0x2d/0xb0 [ 155.555837][ T8389] ___sys_recvmsg+0x175/0x590 [ 155.555863][ T8389] ? __pfx____sys_recvmsg+0x10/0x10 [ 155.555887][ T8389] ? __fget_files+0x2a/0x420 [ 155.555933][ T8389] do_recvmmsg+0x334/0x800 [ 155.555957][ T8389] ? __pfx_do_recvmmsg+0x10/0x10 [ 155.555986][ T8389] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 155.556021][ T8389] __x64_sys_recvmmsg+0x198/0x250 [ 155.556044][ T8389] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 155.556070][ T8389] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.556088][ T8389] do_syscall_64+0x174/0x580 [ 155.556105][ T8389] ? trace_irq_disable+0x3b/0x140 [ 155.556130][ T8389] ? clear_bhb_loop+0x40/0x90 [ 155.556151][ T8389] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.556168][ T8389] RIP: 0033:0x7fa91e59ce59 [ 155.556186][ T8389] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 155.556199][ T8389] RSP: 002b:00007fa91f3ac028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 155.556217][ T8389] RAX: ffffffffffffffda RBX: 00007fa91e815fa0 RCX: 00007fa91e59ce59 [ 155.556230][ T8389] RDX: 0000000000000600 RSI: 0000200000003700 RDI: 0000000000000005 [ 155.556241][ T8389] RBP: 00007fa91f3ac090 R08: 0000000000000000 R09: 0000000000000000 [ 155.556251][ T8389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 155.556260][ T8389] R13: 00007fa91e816038 R14: 00007fa91e815fa0 R15: 00007fff06aeb7a8 [ 155.556289][ T8389] [ 156.103480][ T8409] vcan0: tx drop: invalid da for name 0x000000000000feff [ 156.412808][ T8427] netlink: 'syz.3.946': attribute type 1 has an invalid length. [ 156.427878][ T8427] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 157.009474][ T8454] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 157.263324][ T8469] syzkaller0: entered promiscuous mode [ 157.273498][ T8469] syzkaller0: entered allmulticast mode [ 157.444614][ T8480] __nla_validate_parse: 12 callbacks suppressed [ 157.444633][ T8480] netlink: 4 bytes leftover after parsing attributes in process `syz.2.965'. [ 157.497524][ T8475] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.504919][ T8475] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.655003][ T8475] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 157.684164][ T8498] netlink: 4 bytes leftover after parsing attributes in process `syz.2.965'. [ 157.701489][ T8475] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 158.033487][ T8067] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 4352 - 0 [ 158.045243][ T8067] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.068296][ T8505] pim6reg: entered allmulticast mode [ 158.078996][ T8073] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 4352 - 0 [ 158.094773][ T8073] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.130353][ T8073] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 4352 - 0 [ 158.146948][ T8073] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.190637][ T8073] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 4352 - 0 [ 158.211676][ T8073] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.604040][ T8530] syzkaller0: entered promiscuous mode [ 158.613152][ T8530] syzkaller0: entered allmulticast mode [ 158.733340][ T8540] FAULT_INJECTION: forcing a failure. [ 158.733340][ T8540] name failslab, interval 1, probability 0, space 0, times 0 [ 158.783598][ T8540] CPU: 0 UID: 0 PID: 8540 Comm: syz.3.982 Not tainted syzkaller #0 PREEMPT(full) [ 158.783624][ T8540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 158.783634][ T8540] Call Trace: [ 158.783641][ T8540] [ 158.783648][ T8540] dump_stack_lvl+0xe8/0x150 [ 158.783674][ T8540] should_fail_ex+0x412/0x560 [ 158.783696][ T8540] should_failslab+0xa8/0x100 [ 158.783722][ T8540] __kmalloc_noprof+0xe8/0x760 [ 158.783745][ T8540] ? iovec_from_user+0x87/0x250 [ 158.783766][ T8540] iovec_from_user+0x87/0x250 [ 158.783788][ T8540] __import_iovec+0x163/0x7e0 [ 158.783817][ T8540] import_iovec+0x73/0xa0 [ 158.783839][ T8540] ___sys_sendmsg+0x255/0x360 [ 158.783859][ T8540] ? __lock_acquire+0x6b5/0x2cf0 [ 158.783881][ T8540] ? __pfx____sys_sendmsg+0x10/0x10 [ 158.783931][ T8540] ? __fget_files+0x2a/0x420 [ 158.783950][ T8540] ? __fget_files+0x3a0/0x420 [ 158.783978][ T8540] __x64_sys_sendmsg+0x1bd/0x2a0 [ 158.784000][ T8540] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 158.784029][ T8540] ? rcu_is_watching+0x15/0xb0 [ 158.784057][ T8540] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.784074][ T8540] do_syscall_64+0x174/0x580 [ 158.784091][ T8540] ? trace_irq_disable+0x3b/0x140 [ 158.784114][ T8540] ? clear_bhb_loop+0x40/0x90 [ 158.784136][ T8540] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.784152][ T8540] RIP: 0033:0x7f8f7fb9ce59 [ 158.784169][ T8540] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 158.784183][ T8540] RSP: 002b:00007f8f80a05028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 158.784202][ T8540] RAX: ffffffffffffffda RBX: 00007f8f7fe15fa0 RCX: 00007f8f7fb9ce59 [ 158.784213][ T8540] RDX: 0000000020040840 RSI: 0000200000000000 RDI: 0000000000000003 [ 158.784224][ T8540] RBP: 00007f8f80a05090 R08: 0000000000000000 R09: 0000000000000000 [ 158.784235][ T8540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 158.784244][ T8540] R13: 00007f8f7fe16038 R14: 00007f8f7fe15fa0 R15: 00007fffdfb0c6f8 [ 158.784270][ T8540] [ 159.031627][ T8543] netlink: 72 bytes leftover after parsing attributes in process `syz.1.983'. [ 159.052684][ T8549] netlink: 28 bytes leftover after parsing attributes in process `syz.2.984'. [ 159.156085][ T8552] netlink: 'syz.2.984': attribute type 1 has an invalid length. [ 159.984968][ T8590] netlink: 4 bytes leftover after parsing attributes in process `syz.3.996'. [ 160.105867][ T8597] tipc: Started in network mode [ 160.123381][ T8597] tipc: Node identity 5eec6fa1eb22, cluster identity 4711 [ 160.143483][ T8597] tipc: Enabled bearer , priority 0 [ 160.161326][ T8600] syzkaller0: entered promiscuous mode [ 160.173612][ T8600] syzkaller0: entered allmulticast mode [ 160.252068][ T8597] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1001'. [ 160.288697][ T8597] tipc: Resetting bearer [ 160.321546][ T8596] tipc: Resetting bearer [ 160.364451][ T8596] tipc: Disabling bearer [ 160.402927][ T8606] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1004'. [ 160.675734][ T8626] netlink: 'syz.4.1012': attribute type 1 has an invalid length. [ 160.703204][ T8626] nbd: illegal input index 871591272 [ 161.569520][ T8657] netlink: 'syz.2.1023': attribute type 2 has an invalid length. [ 161.785298][ T8662] netlink: 'syz.4.1024': attribute type 13 has an invalid length. [ 162.710986][ T8687] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1027'. [ 162.757592][ T8687] netlink: 'syz.2.1027': attribute type 1 has an invalid length. [ 162.789314][ T8687] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1027'. [ 162.792628][ T8693] xt_hashlimit: size too large, truncated to 1048576 [ 162.805718][ T8689] syzkaller1: entered promiscuous mode [ 162.805741][ T8689] syzkaller1: entered allmulticast mode [ 162.929372][ T8702] netlink: 'syz.4.1032': attribute type 2 has an invalid length. [ 163.246483][ T8719] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1036'. [ 163.256517][ T8719] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1036'. [ 163.275711][ T8719] ip6tnl2: entered allmulticast mode [ 164.083176][ T8744] FAULT_INJECTION: forcing a failure. [ 164.083176][ T8744] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 164.123496][ T8744] CPU: 0 UID: 0 PID: 8744 Comm: syz.3.1043 Not tainted syzkaller #0 PREEMPT(full) [ 164.123521][ T8744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 164.123531][ T8744] Call Trace: [ 164.123538][ T8744] [ 164.123544][ T8744] dump_stack_lvl+0xe8/0x150 [ 164.123571][ T8744] should_fail_ex+0x412/0x560 [ 164.123594][ T8744] _copy_from_user+0x2d/0xb0 [ 164.123616][ T8744] __sys_bpf+0x229/0x950 [ 164.123644][ T8744] ? __pfx___sys_bpf+0x10/0x10 [ 164.123683][ T8744] ? ksys_write+0x242/0x270 [ 164.123709][ T8744] ? __pfx_ksys_write+0x10/0x10 [ 164.123737][ T8744] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.123756][ T8744] __x64_sys_bpf+0x7c/0x90 [ 164.123779][ T8744] do_syscall_64+0x174/0x580 [ 164.123797][ T8744] ? trace_irq_disable+0x3b/0x140 [ 164.123822][ T8744] ? clear_bhb_loop+0x40/0x90 [ 164.123844][ T8744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.123861][ T8744] RIP: 0033:0x7f8f7fb9ce59 [ 164.123878][ T8744] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 164.123891][ T8744] RSP: 002b:00007f8f80a05028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 164.123909][ T8744] RAX: ffffffffffffffda RBX: 00007f8f7fe15fa0 RCX: 00007f8f7fb9ce59 [ 164.123922][ T8744] RDX: 0000000000000018 RSI: 0000200000002400 RDI: 0000000000000007 [ 164.123933][ T8744] RBP: 00007f8f80a05090 R08: 0000000000000000 R09: 0000000000000000 [ 164.123944][ T8744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 164.123953][ T8744] R13: 00007f8f7fe16038 R14: 00007f8f7fe15fa0 R15: 00007fffdfb0c6f8 [ 164.123982][ T8744] [ 164.318148][ T8748] openvswitch: netlink: EtherType 50a is less than min 600 [ 164.852150][ T8765] FAULT_INJECTION: forcing a failure. [ 164.852150][ T8765] name failslab, interval 1, probability 0, space 0, times 0 [ 164.880269][ T8765] CPU: 0 UID: 0 PID: 8765 Comm: syz.2.1050 Not tainted syzkaller #0 PREEMPT(full) [ 164.880297][ T8765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 164.880308][ T8765] Call Trace: [ 164.880316][ T8765] [ 164.880325][ T8765] dump_stack_lvl+0xe8/0x150 [ 164.880353][ T8765] should_fail_ex+0x412/0x560 [ 164.880379][ T8765] ? alloc_inode+0x6a/0x1b0 [ 164.880401][ T8765] should_failslab+0xa8/0x100 [ 164.880422][ T8765] kmem_cache_alloc_lru_noprof+0x87/0x640 [ 164.880445][ T8765] ? simple_start_creating+0xcc/0x110 [ 164.880476][ T8765] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 164.880498][ T8765] alloc_inode+0x6a/0x1b0 [ 164.880521][ T8765] new_inode+0x22/0x170 [ 164.880547][ T8765] __debugfs_create_file+0xb8/0x400 [ 164.880572][ T8765] debugfs_create_file_full+0x3f/0x60 [ 164.880597][ T8765] ref_tracker_dir_debugfs+0x197/0x360 [ 164.880619][ T8765] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 164.880668][ T8765] ? __kvmalloc_node_noprof+0x545/0x8a0 [ 164.880695][ T8765] ? alloc_netdev_mqs+0xa8/0x1210 [ 164.880729][ T8765] ? __raw_spin_lock_init+0x45/0x100 [ 164.880757][ T8765] alloc_netdev_mqs+0x274/0x1210 [ 164.880779][ T8765] ? __pfx_macvlan_setup+0x10/0x10 [ 164.880805][ T8765] rtnl_create_link+0x31f/0xd70 [ 164.880837][ T8765] rtnl_newlink_create+0x277/0xb70 [ 164.880858][ T8765] ? __pfx___nla_validate_parse+0x10/0x10 [ 164.880885][ T8765] ? __mutex_lock+0x608/0x1550 [ 164.880907][ T8765] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 164.880931][ T8765] ? __pfx___mutex_lock+0x10/0x10 [ 164.880961][ T8765] ? ns_capable+0x89/0xe0 [ 164.880984][ T8765] rtnl_newlink+0x166a/0x1bb0 [ 164.881004][ T8765] ? __lock_acquire+0x6b5/0x2cf0 [ 164.881035][ T8765] ? __pfx_rtnl_newlink+0x10/0x10 [ 164.881059][ T8765] ? __lock_acquire+0x6b5/0x2cf0 [ 164.881080][ T8765] ? __lock_acquire+0x6b5/0x2cf0 [ 164.881109][ T8765] ? unwind_next_frame+0xa6/0x2550 [ 164.881137][ T8765] ? unwind_next_frame+0xa6/0x2550 [ 164.881161][ T8765] ? is_bpf_text_address+0x26/0x2b0 [ 164.881192][ T8765] ? is_bpf_text_address+0x26/0x2b0 [ 164.881215][ T8765] ? __lock_acquire+0x6b5/0x2cf0 [ 164.881238][ T8765] ? kernel_text_address+0xa5/0xe0 [ 164.881262][ T8765] ? __kernel_text_address+0xd/0x30 [ 164.881284][ T8765] ? unwind_get_return_address+0x4d/0x90 [ 164.881305][ T8765] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 164.881330][ T8765] ? arch_stack_walk+0xfb/0x150 [ 164.881362][ T8765] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 164.881395][ T8765] ? __pfx_rtnl_newlink+0x10/0x10 [ 164.881413][ T8765] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 164.881429][ T8765] ? kmem_cache_alloc_node_noprof+0x384/0x690 [ 164.881452][ T8765] ? netlink_sendmsg+0x5d4/0xb40 [ 164.881474][ T8765] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 164.881491][ T8765] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 164.881511][ T8765] ? __lock_acquire+0x6b5/0x2cf0 [ 164.881543][ T8765] netlink_rcv_skb+0x232/0x4b0 [ 164.881565][ T8765] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 164.881585][ T8765] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 164.881619][ T8765] ? netlink_deliver_tap+0x2e/0x1b0 [ 164.881638][ T8765] ? netlink_deliver_tap+0x2e/0x1b0 [ 164.881664][ T8765] netlink_unicast+0x75c/0x8e0 [ 164.881695][ T8765] netlink_sendmsg+0x813/0xb40 [ 164.881735][ T8765] ? __pfx_netlink_sendmsg+0x10/0x10 [ 164.881760][ T8765] ? aa_sock_msg_perm+0xf1/0x1b0 [ 164.881787][ T8765] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 164.881813][ T8765] ____sys_sendmsg+0x972/0x9f0 [ 164.881834][ T8765] ? __might_fault+0xaf/0x130 [ 164.881863][ T8765] ? __pfx_____sys_sendmsg+0x10/0x10 [ 164.881893][ T8765] ? import_iovec+0x73/0xa0 [ 164.881918][ T8765] ___sys_sendmsg+0x2a5/0x360 [ 164.881938][ T8765] ? __lock_acquire+0x6b5/0x2cf0 [ 164.881961][ T8765] ? __pfx____sys_sendmsg+0x10/0x10 [ 164.881987][ T8765] ? kstrtouint+0x6e/0xe0 [ 164.882040][ T8765] ? __fget_files+0x2a/0x420 [ 164.882060][ T8765] ? __fget_files+0x3a0/0x420 [ 164.882097][ T8765] __sys_sendmmsg+0x27c/0x4e0 [ 164.882124][ T8765] ? __pfx___sys_sendmmsg+0x10/0x10 [ 164.882142][ T8765] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 164.882189][ T8765] ? ksys_write+0x242/0x270 [ 164.882215][ T8765] ? __pfx_ksys_write+0x10/0x10 [ 164.882240][ T8765] __x64_sys_sendmmsg+0xa0/0xc0 [ 164.882258][ T8765] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.882277][ T8765] do_syscall_64+0x174/0x580 [ 164.882296][ T8765] ? trace_irq_disable+0x3b/0x140 [ 164.882321][ T8765] ? clear_bhb_loop+0x40/0x90 [ 164.882343][ T8765] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.882361][ T8765] RIP: 0033:0x7fa91e59ce59 [ 164.882378][ T8765] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 164.882392][ T8765] RSP: 002b:00007fa91f3ac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 164.882411][ T8765] RAX: ffffffffffffffda RBX: 00007fa91e815fa0 RCX: 00007fa91e59ce59 [ 164.882424][ T8765] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 000000000000000d [ 164.882436][ T8765] RBP: 00007fa91f3ac090 R08: 0000000000000000 R09: 0000000000000000 [ 164.882446][ T8765] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000001 [ 164.882457][ T8765] R13: 00007fa91e816038 R14: 00007fa91e815fa0 R15: 00007fff06aeb7a8 [ 164.882487][ T8765] [ 164.885856][ T8765] debugfs: out of free dentries, can not create file 'netdev@ffff8880794ea658' [ 165.587666][ T8775] syzkaller1: entered promiscuous mode [ 165.604676][ T8775] syzkaller1: entered allmulticast mode [ 165.952504][ T8790] FAULT_INJECTION: forcing a failure. [ 165.952504][ T8790] name failslab, interval 1, probability 0, space 0, times 0 [ 165.983610][ T8790] CPU: 1 UID: 0 PID: 8790 Comm: syz.3.1059 Not tainted syzkaller #0 PREEMPT(full) [ 165.983632][ T8790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 165.983644][ T8790] Call Trace: [ 165.983651][ T8790] [ 165.983659][ T8790] dump_stack_lvl+0xe8/0x150 [ 165.983685][ T8790] should_fail_ex+0x412/0x560 [ 165.983709][ T8790] should_failslab+0xa8/0x100 [ 165.983729][ T8790] __kmalloc_noprof+0xe8/0x760 [ 165.983754][ T8790] ? ima_write_template_field_data+0x47/0x490 [ 165.983786][ T8790] ima_write_template_field_data+0x47/0x490 [ 165.983819][ T8790] ima_eventname_init_common+0x1dd/0x250 [ 165.983845][ T8790] ? __pfx_ima_eventname_init_common+0x10/0x10 [ 165.983878][ T8790] ? __kmalloc_noprof+0x37d/0x760 [ 165.983901][ T8790] ? ima_alloc_init_template+0x183/0x700 [ 165.983920][ T8790] ? __kmalloc_noprof+0x1b8/0x760 [ 165.983944][ T8790] ? __pfx_ima_eventname_ng_init+0x10/0x10 [ 165.983969][ T8790] ima_alloc_init_template+0x323/0x700 [ 165.984000][ T8790] ima_store_measurement+0x1ce/0x670 [ 165.984020][ T8790] ? take_dentry_name_snapshot+0x29/0x500 [ 165.984050][ T8790] ? __pfx_ima_store_measurement+0x10/0x10 [ 165.984068][ T8790] ? ima_d_path+0x1cb/0x230 [ 165.984109][ T8790] process_measurement+0x13e5/0x1c80 [ 165.984148][ T8790] ? security_file_alloc+0x34/0x310 [ 165.984170][ T8790] ? __pfx_process_measurement+0x10/0x10 [ 165.984188][ T8790] ? aa_file_perm+0x192/0x15e0 [ 165.984250][ T8790] ima_file_mmap+0x1b0/0x200 [ 165.984270][ T8790] ? __pfx_ima_file_mmap+0x10/0x10 [ 165.984295][ T8790] ? apparmor_mmap_file+0x2da/0x3e0 [ 165.984319][ T8790] security_mmap_file+0x773/0xa20 [ 165.984342][ T8790] vm_mmap_pgoff+0x134/0x4f0 [ 165.984366][ T8790] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 165.984388][ T8790] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 165.984405][ T8790] ? rcu_is_watching+0x15/0xb0 [ 165.984427][ T8790] ? hugetlbfs_get_inode+0x432/0x650 [ 165.984454][ T8790] ? hugetlb_file_setup+0x42c/0x630 [ 165.984475][ T8790] ksys_mmap_pgoff+0x586/0x760 [ 165.984502][ T8790] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.984521][ T8790] do_syscall_64+0x174/0x580 [ 165.984540][ T8790] ? trace_irq_disable+0x3b/0x140 [ 165.984565][ T8790] ? clear_bhb_loop+0x40/0x90 [ 165.984587][ T8790] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.984604][ T8790] RIP: 0033:0x7f8f7fb9ce59 [ 165.984621][ T8790] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 165.984635][ T8790] RSP: 002b:00007f8f80a05028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 165.984654][ T8790] RAX: ffffffffffffffda RBX: 00007f8f7fe15fa0 RCX: 00007f8f7fb9ce59 [ 165.984666][ T8790] RDX: 0000000000000005 RSI: 0000000000ff5000 RDI: 0000200000000000 [ 165.984677][ T8790] RBP: 00007f8f80a05090 R08: ffffffffffffffff R09: 0000000000000000 [ 165.984687][ T8790] R10: 00020000000ec071 R11: 0000000000000246 R12: 0000000000000002 [ 165.984697][ T8790] R13: 00007f8f7fe16038 R14: 00007f8f7fe15fa0 R15: 00007fffdfb0c6f8 [ 165.984728][ T8790] [ 166.076873][ T29] audit: type=1804 audit(1781056116.352:3): pid=8790 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=add_template_measure cause=ENOMEM comm="syz.3.1059" name="anon_hugepage" dev="hugetlbfs" ino=20275 res=0 errno=0 [ 166.187519][ T8796] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1062'. [ 166.228555][ T8799] FAULT_INJECTION: forcing a failure. [ 166.228555][ T8799] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 166.346283][ T8801] IPv6: NLM_F_CREATE should be specified when creating new route [ 166.346815][ T8799] CPU: 0 UID: 0 PID: 8799 Comm: syz.3.1063 Not tainted syzkaller #0 PREEMPT(full) [ 166.346836][ T8799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 166.346846][ T8799] Call Trace: [ 166.346853][ T8799] [ 166.346861][ T8799] dump_stack_lvl+0xe8/0x150 [ 166.346887][ T8799] should_fail_ex+0x412/0x560 [ 166.346912][ T8799] _copy_from_user+0x2d/0xb0 [ 166.346933][ T8799] ___sys_sendmsg+0x1c6/0x360 [ 166.346953][ T8799] ? __lock_acquire+0x6b5/0x2cf0 [ 166.346976][ T8799] ? __pfx____sys_sendmsg+0x10/0x10 [ 166.347027][ T8799] ? __fget_files+0x2a/0x420 [ 166.347047][ T8799] ? __fget_files+0x3a0/0x420 [ 166.347077][ T8799] __x64_sys_sendmsg+0x1bd/0x2a0 [ 166.347099][ T8799] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 166.347127][ T8799] ? __pfx_ksys_write+0x10/0x10 [ 166.347160][ T8799] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.347178][ T8799] do_syscall_64+0x174/0x580 [ 166.347197][ T8799] ? trace_irq_disable+0x3b/0x140 [ 166.347221][ T8799] ? clear_bhb_loop+0x40/0x90 [ 166.347242][ T8799] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.347259][ T8799] RIP: 0033:0x7f8f7fb9ce59 [ 166.347275][ T8799] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 166.347289][ T8799] RSP: 002b:00007f8f80a05028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 166.347307][ T8799] RAX: ffffffffffffffda RBX: 00007f8f7fe15fa0 RCX: 00007f8f7fb9ce59 [ 166.347319][ T8799] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000003 [ 166.347329][ T8799] RBP: 00007f8f80a05090 R08: 0000000000000000 R09: 0000000000000000 [ 166.347339][ T8799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 166.347349][ T8799] R13: 00007f8f7fe16038 R14: 00007f8f7fe15fa0 R15: 00007fffdfb0c6f8 [ 166.347377][ T8799] [ 166.617274][ T8070] ------------[ cut here ]------------ [ 166.622797][ T8070] changed & (BSS_CHANGED_BEACON | BSS_CHANGED_BEACON_ENABLED) && sdata->vif.type != NL80211_IFTYPE_AP && sdata->vif.type != NL80211_IFTYPE_ADHOC && sdata->vif.type != NL80211_IFTYPE_MESH_POINT && sdata->vif.type != NL80211_IFTYPE_OCB [ 166.622834][ T8070] WARNING: net/mac80211/driver-ops.c:473 at drv_link_info_changed+0x13c/0x880, CPU#0: kworker/u8:12/8070 [ 166.657271][ T8070] Modules linked in: [ 166.662459][ T8070] CPU: 0 UID: 0 PID: 8070 Comm: kworker/u8:12 Not tainted syzkaller #0 PREEMPT(full) [ 166.672217][ T8070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 166.682460][ T8070] Workqueue: events_unbound cfg80211_wiphy_work [ 166.688835][ T8070] RIP: 0010:drv_link_info_changed+0x13c/0x880 [ 166.694926][ T8070] Code: 83 fb 01 75 1f e8 04 5a b2 f6 eb 32 e8 fd 59 b2 f6 eb 2b 83 fb 03 74 21 83 fb 05 75 07 e8 ec 59 b2 f6 eb 1a e8 e5 59 b2 f6 90 <0f> 0b 90 e9 be 01 00 00 e8 d7 59 b2 f6 eb 05 e8 d0 59 b2 f6 49 8d [ 166.714721][ T8070] RSP: 0018:ffffc9000341f980 EFLAGS: 00010293 [ 166.720882][ T8070] RAX: ffffffff8b135ccb RBX: 0000000080000000 RCX: ffff88802e4b5d00 [ 166.728971][ T8070] RDX: 0000000000000000 RSI: ffffffff9006d500 RDI: 0000000080000000 [ 166.737105][ T8070] RBP: ffff8880558b0f40 R08: ffff88802e4b5d00 R09: 0000000000000004 [ 166.745696][ T8070] R10: 0000000000000005 R11: 0000000000000000 R12: ffff888055e5ce40 [ 166.753889][ T8070] R13: ffff888055e5ef60 R14: 0000000000000200 R15: dffffc0000000000 [ 166.762014][ T8070] FS: 0000000000000000(0000) GS:ffff888125287000(0000) knlGS:0000000000000000 [ 166.771047][ T8070] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 166.777675][ T8070] CR2: 00007f8f809c1fa8 CR3: 000000000e74a000 CR4: 00000000003526f0 [ 166.785699][ T8070] Call Trace: [ 166.789068][ T8070] [ 166.792015][ T8070] ieee80211_offchannel_stop_vifs+0x249/0x560 [ 166.798136][ T8070] _ieee80211_start_next_roc+0x5c6/0xa70 [ 166.803790][ T8070] cfg80211_wiphy_work+0x2cf/0x460 [ 166.808986][ T8070] ? process_scheduled_works+0xa70/0x1860 [ 166.814737][ T8070] process_scheduled_works+0xb5d/0x1860 [ 166.820390][ T8070] ? __pfx_process_scheduled_works+0x10/0x10 [ 166.826387][ T8070] ? assign_work+0x3d5/0x5e0 [ 166.831075][ T8070] worker_thread+0xa53/0xfc0 [ 166.835730][ T8070] kthread+0x389/0x470 [ 166.839874][ T8070] ? __pfx_worker_thread+0x10/0x10 [ 166.844997][ T8070] ? __pfx_kthread+0x10/0x10 [ 166.850077][ T8070] ret_from_fork+0x514/0xb70 [ 166.854693][ T8070] ? __pfx_ret_from_fork+0x10/0x10 [ 166.860015][ T8070] ? __switch_to+0xc79/0x1410 [ 166.864721][ T8070] ? __pfx_kthread+0x10/0x10 [ 166.869390][ T8070] ret_from_fork_asm+0x1a/0x30 [ 166.874174][ T8070] [ 166.877267][ T8070] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 166.884584][ T8070] CPU: 0 UID: 0 PID: 8070 Comm: kworker/u8:12 Not tainted syzkaller #0 PREEMPT(full) [ 166.894123][ T8070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 166.904193][ T8070] Workqueue: events_unbound cfg80211_wiphy_work [ 166.910453][ T8070] Call Trace: [ 166.913724][ T8070] [ 166.916655][ T8070] vpanic+0x56c/0xa60 [ 166.920632][ T8070] ? __pfx__printk+0x10/0x10 [ 166.925212][ T8070] ? __pfx_vpanic+0x10/0x10 [ 166.929709][ T8070] ? is_bpf_text_address+0x292/0x2b0 [ 166.934999][ T8070] ? is_bpf_text_address+0x26/0x2b0 [ 166.940238][ T8070] panic+0xc5/0xd0 [ 166.943964][ T8070] ? __pfx_panic+0x10/0x10 [ 166.948404][ T8070] ? ret_from_fork_asm+0x1a/0x30 [ 166.953378][ T8070] __warn+0x315/0x4c0 [ 166.957373][ T8070] ? drv_link_info_changed+0x13c/0x880 [ 166.963005][ T8070] ? drv_link_info_changed+0x13c/0x880 [ 166.968467][ T8070] __report_bug+0x29a/0x540 [ 166.972970][ T8070] ? drv_link_info_changed+0x13c/0x880 [ 166.978431][ T8070] ? __pfx___report_bug+0x10/0x10 [ 166.983453][ T8070] ? do_raw_spin_lock+0x12b/0x2f0 [ 166.988487][ T8070] ? drv_link_info_changed+0x13c/0x880 [ 166.993945][ T8070] report_bug+0x16a/0x220 [ 166.998269][ T8070] ? drv_link_info_changed+0x13c/0x880 [ 167.003727][ T8070] ? drv_link_info_changed+0x13e/0x880 [ 167.009181][ T8070] handle_bug+0x9c/0x200 [ 167.013422][ T8070] exc_invalid_op+0x1a/0x50 [ 167.017921][ T8070] asm_exc_invalid_op+0x1a/0x20 [ 167.022769][ T8070] RIP: 0010:drv_link_info_changed+0x13c/0x880 [ 167.028835][ T8070] Code: 83 fb 01 75 1f e8 04 5a b2 f6 eb 32 e8 fd 59 b2 f6 eb 2b 83 fb 03 74 21 83 fb 05 75 07 e8 ec 59 b2 f6 eb 1a e8 e5 59 b2 f6 90 <0f> 0b 90 e9 be 01 00 00 e8 d7 59 b2 f6 eb 05 e8 d0 59 b2 f6 49 8d [ 167.048435][ T8070] RSP: 0018:ffffc9000341f980 EFLAGS: 00010293 [ 167.054500][ T8070] RAX: ffffffff8b135ccb RBX: 0000000080000000 RCX: ffff88802e4b5d00 [ 167.062483][ T8070] RDX: 0000000000000000 RSI: ffffffff9006d500 RDI: 0000000080000000 [ 167.070461][ T8070] RBP: ffff8880558b0f40 R08: ffff88802e4b5d00 R09: 0000000000000004 [ 167.078531][ T8070] R10: 0000000000000005 R11: 0000000000000000 R12: ffff888055e5ce40 [ 167.086496][ T8070] R13: ffff888055e5ef60 R14: 0000000000000200 R15: dffffc0000000000 [ 167.094486][ T8070] ? drv_link_info_changed+0x13b/0x880 [ 167.100005][ T8070] ieee80211_offchannel_stop_vifs+0x249/0x560 [ 167.106081][ T8070] _ieee80211_start_next_roc+0x5c6/0xa70 [ 167.111843][ T8070] cfg80211_wiphy_work+0x2cf/0x460 [ 167.116969][ T8070] ? process_scheduled_works+0xa70/0x1860 [ 167.122695][ T8070] process_scheduled_works+0xb5d/0x1860 [ 167.128444][ T8070] ? __pfx_process_scheduled_works+0x10/0x10 [ 167.134440][ T8070] ? assign_work+0x3d5/0x5e0 [ 167.139120][ T8070] worker_thread+0xa53/0xfc0 [ 167.143729][ T8070] kthread+0x389/0x470 [ 167.147798][ T8070] ? __pfx_worker_thread+0x10/0x10 [ 167.152908][ T8070] ? __pfx_kthread+0x10/0x10 [ 167.157500][ T8070] ret_from_fork+0x514/0xb70 [ 167.162099][ T8070] ? __pfx_ret_from_fork+0x10/0x10 [ 167.167220][ T8070] ? __switch_to+0xc79/0x1410 [ 167.171898][ T8070] ? __pfx_kthread+0x10/0x10 [ 167.176493][ T8070] ret_from_fork_asm+0x1a/0x30 [ 167.181268][ T8070] [ 167.184571][ T8070] Kernel Offset: disabled [ 167.188892][ T8070] Rebooting in 86400 seconds..