last executing test programs: 1.843312127s ago: executing program 0 (id=856): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_ENCODED_READ(0xffffffffffffffff, 0x80809440, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x54, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}, @IFLA_BR_NF_CALL_IP6TABLES={0x5, 0x25, 0x1}, @IFLA_BR_VLAN_STATS_ENABLED={0x5}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x8044) socket$nl_generic(0x10, 0x3, 0x10) 1.774103918s ago: executing program 0 (id=857): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff01c}, {0x16}]}, 0x10) syz_emit_ethernet(0xfc8, &(0x7f00000011c0)={@local, @dev, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0xfba, 0x0, 0x0, 0x0, 0x84, 0x0, @remote, @broadcast}, "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"}}}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0x2, 0x4e23, 0x0, @mcast1, 0x4}, 0x1c) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e63, 0xe7, @mcast2, 0x7daa}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac710aa7d0000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x54, r5, 0x1, 0x0, 0x3, {0x22}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)=@newtaction={0xe6c, 0x30, 0x25, 0x0, 0x0, {}, [{0xe58, 0x1, [@m_pedit={0xe54, 0x1, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0xd}, [{0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x8001}, {0x0, 0x0, 0x0, 0x1000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x6}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x80000001}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5efd3e9c}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0xfffffffa}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfffffffe}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe6c}}, 0x0) socket$packet(0x11, 0x3, 0x300) (async) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff01c}, {0x16}]}, 0x10) (async) syz_emit_ethernet(0xfc8, &(0x7f00000011c0)={@local, @dev, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0xfba, 0x0, 0x0, 0x0, 0x84, 0x0, @remote, @broadcast}, "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"}}}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet6(0xa, 0x2, 0x0) (async) bind$inet6(r3, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) (async) connect$inet6(r3, &(0x7f0000000000)={0x2, 0x4e23, 0x0, @mcast1, 0x4}, 0x1c) (async) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e63, 0xe7, @mcast2, 0x7daa}, 0x1c) (async) socket$netlink(0x10, 0x3, 0x8000000004) (async) writev(r4, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac710aa7d0000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000700), 0xffffffffffffffff) (async) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x54, r5, 0x1, 0x0, 0x3, {0x22}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}, 0x1, 0x0, 0x0, 0xc0}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)=@newtaction={0xe6c, 0x30, 0x25, 0x0, 0x0, {}, [{0xe58, 0x1, [@m_pedit={0xe54, 0x1, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0xd}, [{0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x8001}, {0x0, 0x0, 0x0, 0x1000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x6}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x80000001}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5efd3e9c}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0xfffffffa}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfffffffe}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe6c}}, 0x0) (async) 1.560115284s ago: executing program 0 (id=861): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r4 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x24, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0x1}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40001}, 0x10) socket$tipc(0x1e, 0x2, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000500)={'wlan1\x00'}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r7 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000001200), 0x2, 0x0) write$6lowpan_control(r7, &(0x7f00000012c0)='connect aa:aa:aa:aa:aa:11 2', 0x1b) 1.559602961s ago: executing program 1 (id=862): mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x500000000000000) 1.559028742s ago: executing program 3 (id=863): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x140, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e22, 0x2, 0xa, 0x0, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @remote}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x5, 0x546}, {0x7, 0x7fffffffffffffff}, {}, 0x70bd2d, 0x3500, 0xa, 0x1, 0x0, 0x50}, [@algo_aead={0x50, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x20, 0x60, "210466d3"}}]}, 0x140}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6, 0xe8c}, 0x10) r2 = socket(0xa, 0x1, 0x0) close(r2) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x12, 0x0, &(0x7f0000003c00)) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000012002102000000001000000000000000", @ANYRESOCT=r0], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x4) 1.344105364s ago: executing program 1 (id=866): r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x0, 0xa5, 0x4, 0x30, 0x46, @ipv4={'\x00', '\xff\xff', @loopback}, @empty, 0x1, 0x80, 0xfffffffc, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000040)={'syztnl1\x00', 0x0}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000001c0)={0x0, @remote, @broadcast}, &(0x7f0000000200)=0xc) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0x20, &(0x7f0000000400)={&(0x7f0000000280)=""/207, 0xcf, 0x0, &(0x7f0000000380)=""/126, 0x7e}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b07, &(0x7f0000000240)={'wlan1\x00', @random="8dffffffebff"}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)={0x1b, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x4}, 0x50) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010026bd7000fbdbdf251000000008003a000100000008000300", @ANYRES32=r3], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x40) r6 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched_retired(r3, &(0x7f0000000a00)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000840)=@delqdisc={0x16c, 0x25, 0x200, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0x1, 0xe}, {0xfff1, 0xffe0}, {0xffe0, 0x7}}, [@q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x20}]}}, @q_dsmark={{0xb}, {0x44, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x24}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0xe}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x3f}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x1d7a}, @TCA_DSMARK_INDICES={0x6}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xaa0}]}}, @q_dsmark={{0xb}, {0x10, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x8}]}}, @q_dsmark={{0xb}, {0x8, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x1c, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x37b2}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x1}]}}, @q_dsmark={{0xb}, {0x18, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xb}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x448}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x28, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x3}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x1d}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x4}]}}, @q_dsmark={{0xb}, {0x24, 0x2, [@TCA_DSMARK_INDICES={0x6}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x9}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x21}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x4000}, 0x1) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x2c, r8, 0x1, 0x0, 0x0, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}]}, 0x2c}}, 0x0) sendto$inet6(r6, &(0x7f00000007c0)="7800000018002507b9199b02ffff48000203be04020406050a02040c5c000900580006050a0000000d0085a168d0bf46d32345653600648d27000b000a00070849935ade4a460c89b6ec0cff3959547f509058ad86c902007a00004a32000407160012000a0000000000e000e21800003b6ed538f6523250", 0x78, 0x2251197285d76a80, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000540)=@generic={&(0x7f0000000500)='./file0\x00', 0x0, 0x10}, 0x18) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.numa_stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r9, 0x401c5820, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x5}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000100000000000000", @ANYRES32=0x1, @ANYBLOB="7a0100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0400000005000000020000006f970300"/31], 0x50) r10 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r10, &(0x7f00000003c0)='V', 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) shutdown(r10, 0x1) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x1, 0x2, 0x2008, 0x6}, 0x50) r12 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r12, &(0x7f0000000080)={&(0x7f0000000380)=@hci={0x1f, 0x5965, 0x31}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000040)="c2e512c476edbffe2d1000008100", 0x5e8}], 0x1}, 0x4000080) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x5, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000fbffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r10, 0x84, 0x73, &(0x7f0000000000)={0x0, 0x80, 0x20, 0x3, 0x3}, &(0x7f0000000040)=0x18) 1.245977952s ago: executing program 3 (id=868): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000380)='htcp', 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) bind$packet(r1, &(0x7f0000001100)={0x11, 0x3, r3, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x14) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000ac0)={0x3, 0x7}, 0x4) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r4, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d0000", 0x2b}], 0x1) 1.079262457s ago: executing program 3 (id=871): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={0x0, 0xe8}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000002000010000000000000000000a00000000000000000000000c001400", @ANYRES16], 0x28}}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000f9fddbdf25210000000c000600010000000109000000002d80050000000000000008000200020000000500260001000000"], 0x3c}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/29, 0x1002000, 0x1000, 0x101}, 0x20) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000080)=""/110, 0x6e}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000300)=""/77, 0x4d}, {&(0x7f00000007c0)=""/141, 0x8d}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}, 0x5}], 0x1, 0x2000, &(0x7f0000003700)={0x0, 0x3938700}) 951.493357ms ago: executing program 2 (id=872): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)={0x14, 0x17, 0x1, 0x70bd28, 0x0, "", [@typed={0x4}]}, 0x14}], 0x1}, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf090000000000004e090100000000009500000000000000b7020000000000007baaf8ff00000000b5090800000000107baaf0ff00000000bf8700000000000007070000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r0, @ANYRESHEX=r2], &(0x7f00000000c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)={0x14, 0x17, 0x1, 0x70bd28, 0x0, "", [@typed={0x4}]}, 0x14}], 0x1}, 0x0) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf090000000000004e090100000000009500000000000000b7020000000000007baaf8ff00000000b5090800000000107baaf0ff00000000bf8700000000000007070000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r0, @ANYRESHEX=r2], &(0x7f00000000c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) 894.317449ms ago: executing program 2 (id=873): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x20040004}, 0x4) 838.448403ms ago: executing program 4 (id=874): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, 0x0, 0x4000) sendmsg$NFT_MSG_GETRULE(r0, 0x0, 0x0) 760.295088ms ago: executing program 2 (id=875): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x89d6ce011211c692, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x74}}, 0x0) 748.373464ms ago: executing program 4 (id=876): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000380)='htcp', 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$packet(r1, &(0x7f0000001100)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x14) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000ac0)={0x3, 0x7}, 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r2, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000", 0x36}], 0x1) 730.011377ms ago: executing program 2 (id=877): socket$netlink(0x10, 0x3, 0x9) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101100, 0x0) socket$kcm(0x2, 0xa, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x1b, 0x0, &(0x7f0000000200)="083972bdb3a605c4c1188e9986dd02ff4284860186ddba71f16b7d", 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x30000000}, 0x50) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x1f, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 641.917794ms ago: executing program 1 (id=878): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$SIOCSIFHWADDR(r0, 0x8b28, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) (async) close(r0) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) ioctl$SIOCSIFHWADDR(r0, 0x8b28, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) (async) 613.983624ms ago: executing program 3 (id=879): r0 = socket$caif_seqpacket(0x25, 0x5, 0x1) setsockopt$CAIFSO_REQ_PARAM(r0, 0x116, 0x80, 0x0, 0x0) r1 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000080)={0x8}, 0x10) write(r1, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r1, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) r2 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000040)=0x1c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="1400000010000a0000000000000000000000000a54000000060a0b040000000000000000020000002800048024000180090001006d6574610000000014000280080002400000001e08000140000000000900010073797a30000000000900020073797a3203000000140000001100010000000000000000000000000a"], 0x7c}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000040)="b90103606989068c3c270040f0832f", 0x0, 0x104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$inet6(r2, &(0x7f0000000780)={&(0x7f0000000080)={0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, '\x00', 0x32}, 0x6}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000000c0)}, {&(0x7f0000000100)="8bee9d7deba4846f945dfdab1c3c75dac7df5c18616d377dd864abbc2b60c30d51", 0x21}], 0x2, &(0x7f0000000200)=[@hopopts_2292={{0x2b8, 0x29, 0x36, {0x2c, 0x53, '\x00', [@generic={0xa, 0xe1, "cb9a5571fe9ea5c9d094c0354517df2a198a42e4a24df5881ec061800f5b7884c511a1a60415edc8c273dd5c472cbb59e5e0b6c61cd480d8740899d5643f73a9cf76d4226fb1ac7b6aeef32aab6e9c47a14f5bbc9491308d1ad07f716a03c5c4e26b3aedcbf58850d82c770a83c0a28accc12a098541500800e62d690ce7f4860cc5e7d683af561ea64d161434ae46b32f53bbef04682669d015c4fcc6cc3d2bf0870fe8e17c9e504a1d875a5088e9c4791e9991f54ad4826fd26a9ed686b97a085eff5f94d1b88b106a43da74760eab02ce3d577c12b49f454453463cb34fae7c"}, @jumbo={0xc2, 0x4, 0x1}, @jumbo={0xc2, 0x4, 0x2}, @generic={0x1, 0xd0, "6ba2c76e259419aecf0c0410b8e72547d49c63c734e2b8dc45c72137d8c9ce9e62b7766babcc97e938b0f64e37f5640fb2f6f5cb585c4bb9040c4edab5784d5eeaf0f9443605fd985a04d737bf17b3ecf1f10d787efd3428fed5c7ef13abd19d8d4fa5130101b48b71bcb180399ff8e55cea618c627de4764081d3eab8f4cfb60324c0b93c3d16391051fd40043fdeb9465c38db07be6f4efb17267de0d1c98ad017a055128301297f98d4e120eb90ffbe66a36fa4172bc487d058c9d49c7eeeb9760c6f93ad05fdff33f71e0e71e7c7"}, @generic={0x5, 0x8e, "c506fd72484ca8b517c24cb3e8df0b7fb7fe25329a40db7a2cd7a335b8146c9159e356e652dc878edddb74c05ac85fcb201539bb285d2e0898754b5ca5cd873d550b8badc5e7d455f0da9eca5809d41781806d705713b45a44531b964e2eab06a90bc49f94cb229ae97e4754f2777498c093cbebaaf216e684dcc254a4006166c0a5ab69073ddc691ef662a3a458"}, @calipso={0x7, 0x48, {0x2, 0x10, 0x8, 0x5, [0x8, 0x1, 0x9, 0x9, 0xcc, 0x100000001, 0x5, 0xfffffffffffffffb]}}]}}}, @dstopts_2292={{0xd0, 0x29, 0x4, {0xa, 0x16, '\x00', [@hao={0xc9, 0x10, @remote}, @calipso={0x7, 0x20, {0x1, 0x6, 0x48, 0x2, [0x3, 0x8, 0x1]}}, @calipso={0x7, 0x28, {0x3, 0x8, 0x10, 0x8, [0x10000, 0x4, 0x2, 0x8c]}}, @calipso={0x7, 0x50, {0x0, 0x12, 0x7, 0x6, [0x722, 0x1, 0x2, 0x8, 0x7f, 0x5, 0x6, 0xdc8c, 0x9d5]}}, @pad1]}}}, @rthdrdstopts={{0x148, 0x29, 0x37, {0x0, 0x26, '\x00', [@calipso={0x7, 0x18, {0x3, 0x4, 0x4, 0x9, [0x5, 0x7]}}, @generic={0x80, 0xde, "af6ce65126a43079381a1035cdaabc21ef63233eba5929d88711c9a6f7223eb4059f7da8de85f6981874bcce26b8050b871062dc32beca90b3613a4252462992c4bdddf162564c70b37e970bf86d8f3cd04ed611868ddbb0b6e8a4c5deeb506a46f84dd4ec5254cb4e8508e4b005ab401021a796d61de05a51e135282d08dd8c125d6d0bdd9c3ea9d2d5a5ebce06c3f8d88794786e095251a2f0e270d35690c53898e33fb48e9b0f8d08afd82da015f463de6fed9cbf4ab1744ea90926ae73f7bffdbbc815d22c840cb0117c867284d116d49e3dabbde328bfb6025fa566"}, @ra={0x5, 0x2, 0x8}, @calipso={0x7, 0x30, {0x0, 0xa, 0x9, 0x23e, [0x3, 0x4, 0x80, 0x7, 0x7fffffffffffffff]}}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0xc}}, @tclass={{0x14, 0x29, 0x43, 0x401}}, @flowinfo={{0x14, 0x29, 0xb, 0xffff}}, @flowinfo={{0x14, 0x29, 0xb, 0x3}}, @hoplimit={{0x14, 0x29, 0x34, 0x7}}, @hoplimit={{0x14, 0x29, 0x34, 0x7}}, @tclass={{0x14, 0x29, 0x43, 0xe}}], 0x578}, 0x4005812) 613.496133ms ago: executing program 4 (id=880): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = accept(r0, &(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, &(0x7f00000001c0)=0x80) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', &(0x7f0000000280)=@default_ibss_ssid, 0x6, 0x2) ioctl$PPPIOCGFLAGS1(0xffffffffffffffff, 0x8004745a, &(0x7f0000000100)) recvmsg$can_bcm(r2, &(0x7f00000025c0)={&(0x7f0000000200)=@phonet, 0x80, &(0x7f00000024c0)=[{&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000002600)=""/150, 0x96}, {&(0x7f00000013c0)=""/223, 0xdf}, {&(0x7f00000014c0)=""/4096, 0x1000}], 0x4, &(0x7f0000002500)=""/134, 0x86}, 0x40000001) setsockopt$inet_opts(r1, 0x0, 0xd, &(0x7f0000000280), 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003580)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x503}}, 0x20}}, 0x0) 600.231644ms ago: executing program 0 (id=881): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x2c, 0x140f, 0x1, 0x70bd27, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x9, 0x45, 'umad\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc040}, 0x44000) syz_emit_ethernet(0x41, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x33, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, @parameter_prob={0xc, 0x0, 0x0, 0x3, 0x1, 0x0, {0x5, 0x4, 0x0, 0x5, 0x5, 0x65, 0xfffd, 0xb, 0x11, 0x7, @dev={0xac, 0x14, 0x14, 0x1f}, @local}, "b1564c"}}}}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_DELSETELEM={0x20, 0xe, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x48}}, 0x0) 533.007489ms ago: executing program 2 (id=882): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2cffffff", @ANYRES16=r1, @ANYBLOB="010000000000000000000a002430180004"], 0x2c}}, 0x0) 391.836079ms ago: executing program 1 (id=883): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="30dce3ff4b92200000001e000100fdff0d800000000002ab0081010000000008ffffe8ee7d9c037821fcd489ffff0000000000000020128b0800010064010102"], 0x30}, 0x1, 0x0, 0x0, 0x42812}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="30dce3ff4b92200000001e000100fdff0d800000000002ab0081010000000008ffffe8ee7d9c037821fcd489ffff0000000000000020128b0800010064010102"], 0x30}, 0x1, 0x0, 0x0, 0x42812}, 0x0) (async) 380.591667ms ago: executing program 4 (id=884): syz_open_procfs$namespace(0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200e19}, 0x94) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa0806"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 329.387933ms ago: executing program 2 (id=885): r0 = socket$kcm(0x10, 0x8, 0x10) (async, rerun: 32) r1 = socket$packet(0x11, 0x3, 0x300) (async, rerun: 32) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r2) (async) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000472f6e1d9d44499900000000", @ANYRES32=r3, @ANYBLOB="11980400419804001c001280090001007866726d000000000c0002800800020004000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20000884}, 0x0) (async, rerun: 32) r4 = socket$packet(0x11, 0x3, 0x300) (rerun: 32) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8982, &(0x7f0000000180)={0x2, 'bridge_slave_0\x00', {0xffffffff}, 0x3}) (async) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x59) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB="400000001000390400f8b17d9ea92d2e55bafeb3", @ANYRES32=r6, @ANYBLOB="11980400419804002000128008000100736974001400028008000300ac1414aa06000f0001"], 0x40}}, 0x0) sendto$packet(r4, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r6, 0x1, 0x4, 0x6, @local}, 0x14) r7 = socket(0x10, 0x3, 0x0) (async) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000002a80)={0x114, 0x23, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x102, 0xf2, 0x0, 0x1, [@typed={0xf, 0x18, 0x0, 0x0, @str='}:.\x9c[\xc8\\#\'}\x00'}, @typed={0x14, 0x2, 0x0, 0x0, @ipv6=@private2}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x48000}, 0x0) (async) r9 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) ioctl$SIOCSIFMTU(r7, 0x8922, &(0x7f0000000100)={'team_slave_1\x00', 0x9}) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000002c0)=@newqdisc={0x70, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x3c, 0x2, [@TCA_FQ_CODEL_TARGET={0x8, 0x1, 0x6}, @TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0x2}, @TCA_FQ_CODEL_MEMORY_LIMIT={0x8}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x7}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5}, @TCA_FQ_CODEL_ECN={0x8}, @TCA_FQ_CODEL_LIMIT={0x8}]}}]}, 0x70}}, 0x0) (async) sendto$packet(r1, &(0x7f0000000400)="05d936277c6f542200", 0x9, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r3, 0x1, 0x4, 0x6, @local}, 0x14) (async) r11 = socket(0x18, 0x5, 0x1) getsockname$packet(r11, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="14010002000094016d3df0b821cf2124fc600000", 0x14}], 0x1}, 0x10088c0) 276.152886ms ago: executing program 0 (id=886): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, 0x0, 0x4000) sendmsg$NFT_MSG_GETRULE(r0, 0x0, 0x0) 275.929214ms ago: executing program 1 (id=887): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x89d6ce011211c692, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x74}}, 0x0) 255.479491ms ago: executing program 3 (id=888): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x89d6ce011211c692, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x74}}, 0x0) 183.104585ms ago: executing program 4 (id=889): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32ef", 0x45}], 0x1}, 0x0) 96.031759ms ago: executing program 0 (id=890): socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x34, r1, 0x1, 0x0, 0x0, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5}]}, 0x34}}, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r4 = accept4(r3, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000003b00)=@delchain={0xfe8, 0x65, 0x4, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x3}, {0x9}, {0x6, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x3, 0x1}}, @filter_kind_options=@f_flow={{0x9}, {0x394, 0x2, [@TCA_FLOW_EMATCHES={0x390, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4}}, @TCA_EMATCH_TREE_LIST={0x98, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x18, 0x3, 0x0, 0x0, {{0x1, 0x0, 0xb}, "1c0312edcb30a44dd2"}}, @TCF_EM_NBYTE={0x18, 0x1, 0x0, 0x0, {{0x5e, 0x2, 0x100}, {0x1, 0x5, 0x1, "24a6c1e2b8"}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x2, 0x1, 0x6}, {0xfff, 0x8, 0x4, 0x4, 0xf, 0x2}}}, @TCF_EM_IPSET={0x10, 0x7, 0x0, 0x0, {{0x100, 0x8, 0x5d}, {0x0, 0x6}}}, @TCF_EM_CONTAINER={0x3c, 0x2, 0x0, 0x0, {{0x9, 0x0, 0x4}, "1874c91328db744531121160cb6cfdf1c08b8dc969d6042f67b8b7ed2b727b7a67b06970cac416fee2d267f97c"}}]}, @TCA_EMATCH_TREE_LIST={0x2ac, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xf0, 0x1, 0x0, 0x0, {{0x9, 0x9, 0xfff8}, [@TCA_EM_IPT_MATCH_DATA={0xc5, 0x5, "e8cf364a1749071a28ca0785eee0c302cbb471cdc077dcb2f894a5e775e526f9e760735534cc2db2f63efaa19e78a4df2156dfec8803958ea589a625c7c29ec4fcadd39f222c9a953635de670f6d28b006d003be09e945b39d76f3fdbe2bc49f148181ca0471354bfd7443cf6ebad4d7354ae6e93883e6e711b15eaa604172fa01367f6e0f80698c6bbb1212b4ce20906a611a7e95d9f3cf4a8eae2cd9c02b4029d10309e523cc6745581d00d3efc4075082a901533ac675a88df99a8a72f3d88b"}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x3}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}, @TCF_EM_IPT={0x1b8, 0x2, 0x0, 0x0, {{0x5}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_DATA={0x85, 0x5, "d1c29811c8071633b253c065850aabc5cf24c121fe99a69426335e89e9bc42ed8e04a152bfeb4f06435fb3e63d579312f9bc947673b910ca3d52a581c00fa126fa1d3501260866bdc7be0863edf28be3e5f1c6c17035cc0ae2f18a398d92864bcdaaf3e8acc7038bc8ddb7d9c482795d6f14e1915de1cb16ace4fd908d65e98b82"}, @TCA_EM_IPT_MATCH_DATA={0xf1, 0x5, "6226848700e9fa41e4ed4959189e695dd3dafb61113b2264a9fc8fa00fdc7d47a7040d035024bedec8bd0ea2fdaeaeebe7abf7d2dc94af5c43b5d651448cf68642afbb86dccecbc1117d34dddf6a02c87e1a37e472244940c503967c3cba2205f91885dbe159c5e99b70d3929ae9978bff59a40d34d4126a200e97c36234a270d881b6083b0b6c96e323647ec6f9d7bf3f1d293b8a3a137e8611ed9479130d4490a4294effbb24c0f6fe1dd8253a0095ccd03fce9de2fc3a3a829ec4de86896d06a321cfd45d0af26e8171c50ed89c08df070f7e16bd9269d3d189c43bea3dd8a36967eb86272b33439019e193"}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x6}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1ff}}, @TCA_EMATCH_TREE_LIST={0x38, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0xae, 0x1, 0x7}, {0xfffffffc, 0x1, 0xdc, 0x5, 0x4, 0x0, 0x1}}}, @TCF_EM_IPT={0x1c, 0x1, 0x0, 0x0, {{0x2, 0x9, 0x66}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x9}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}]}}]}]}]}}, @filter_kind_options=@f_bpf={{0x8}, {0xc14, 0x2, [@TCA_BPF_POLICE={0xc10, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xffffffff, 0x3, 0x4, 0xfaba, 0x2, 0x7, 0x9, 0xffffffff, 0x9, 0x6, 0xf, 0x2, 0xff, 0x7, 0x5, 0x9, 0x9, 0x8, 0x1, 0x14, 0xd, 0x2b, 0x1, 0x7, 0x5, 0xddf, 0x1, 0x2, 0xb, 0x4, 0xa, 0x9, 0xd, 0xfffff651, 0x81, 0x1, 0x5c, 0xfeaa, 0x6, 0x0, 0x1, 0x2, 0x1, 0x5, 0x1, 0x5, 0x4, 0x6e20, 0x400, 0x7, 0x5, 0x8, 0x6, 0x7, 0x10, 0x1000, 0x6, 0xfffffffc, 0x54, 0xc2, 0x5, 0xffff, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3, 0x100, 0x7, 0x4, 0x3, 0x2, 0x7, 0x7, 0x1, 0x4, 0x6, 0x10000, 0x1, 0x5, 0x7, 0x5, 0x6, 0x10000, 0x3, 0x80000000, 0xa84e, 0x0, 0x5, 0x6c9e, 0x4, 0x80, 0xd, 0x8, 0xe, 0x4, 0x0, 0x7, 0x0, 0x5, 0x3, 0xeb17, 0xfffffff1, 0x3, 0xffff, 0xa020, 0xbb, 0xf, 0x3, 0x10, 0x2, 0x7ee5, 0x3, 0x5fe4, 0x401, 0x2, 0x98b, 0x1, 0x7fffffff, 0x4, 0x6, 0xfffffffa, 0x7, 0x7fffffff, 0x3, 0x1, 0x198b400, 0xe7, 0x2, 0xe31, 0x8, 0x2f, 0x7, 0x3e3, 0x3, 0xc, 0x3, 0xffffffff, 0x0, 0x5, 0x8, 0xfffffffc, 0x2d1000, 0xa, 0xfffffffd, 0x8, 0x7, 0x4, 0x0, 0x80000000, 0x8, 0x7, 0x6, 0x6, 0x8, 0x5, 0x6, 0x1, 0x8d76, 0x80000000, 0xe, 0x5, 0x6, 0x7, 0x0, 0x8, 0x8000, 0x0, 0x7fffffff, 0x0, 0x2, 0x6, 0x81, 0x2, 0x0, 0xc0000, 0x3, 0x2d, 0xfffffff2, 0x5, 0x8, 0x7, 0xdb23, 0x27, 0x6, 0x0, 0x7, 0x0, 0x3, 0x3e, 0xa8b7, 0x6f0f2833, 0x80000000, 0x0, 0x10001, 0x244d, 0x227b, 0x56497fb0, 0x400, 0x5, 0x3, 0x1000, 0x6, 0x2, 0x40000, 0x0, 0x7, 0x3ff, 0x3, 0x6, 0x3, 0x60b, 0x100, 0xffff, 0x1, 0x4, 0x8, 0x8000, 0x8, 0x0, 0x80, 0x1, 0xff, 0xa, 0xf5d0, 0x3, 0x8000, 0x2, 0x406, 0x401, 0x8, 0xda79, 0x7fffffff, 0x1, 0x7, 0x4, 0x4c3, 0x4, 0x10000, 0x9, 0x1, 0x6, 0x4, 0xd708a80, 0xff, 0x4, 0x37d, 0x400, 0x9, 0x7, 0x23894440, 0x9, 0xd75, 0x9, 0x2]}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0xffffffb6, 0x1, 0x1, 0x5, 0x0, 0x2, 0x1000, 0x1000, 0x8, 0x9, 0x7, 0x8, 0xe, 0x698, 0x4, 0x22, 0x200, 0xfffffff3, 0x8, 0x9, 0x876, 0xbb97, 0x8000000, 0x81c, 0x64127ccb, 0x9, 0x3, 0x4, 0xd, 0x8, 0x8, 0xa, 0xfffffffa, 0x0, 0x2, 0x7, 0xce0, 0xceb1, 0x80, 0x1, 0xe, 0x10, 0x100, 0x9, 0x1, 0x3, 0x3ff, 0x80, 0x1, 0x1, 0x3, 0x7, 0xda96, 0x7, 0x9, 0x4, 0x5, 0x8, 0xfffffffb, 0x3, 0x1, 0xa, 0x6, 0x8246, 0xd2, 0xf9, 0x3, 0x3, 0x401, 0x2, 0x3, 0x8, 0x8c3, 0x9, 0x55d, 0x8, 0x8001, 0x9, 0x5, 0x7, 0x5b4a, 0xfffffff2, 0x2, 0x6, 0xfffffffb, 0x8, 0x7, 0x1, 0x2, 0xf, 0x0, 0x0, 0x484c, 0x9, 0x800, 0x9, 0x157, 0x4, 0x4a05, 0x1000, 0xd93d, 0xc3, 0x3, 0x6, 0x3, 0x6, 0x80000001, 0x81, 0x2, 0xc, 0xff, 0x1, 0x7, 0x8, 0x8, 0xc, 0xaaed, 0x795, 0xc5, 0x10001, 0x4, 0x5, 0x1000, 0x9, 0x3, 0x3, 0x1, 0x10000, 0x6, 0x3b910aad, 0x200, 0x3a3, 0x91, 0x7, 0xfffffffd, 0x854, 0x4, 0x4, 0x7, 0x3, 0x5, 0x9, 0x2, 0x5, 0x8, 0x7, 0x8001, 0x100, 0x0, 0x5, 0x4, 0x7, 0x7fff, 0x8, 0x3, 0x4, 0x1, 0x1, 0xfff, 0xd8a, 0x6, 0x5, 0xc72f, 0x8a46, 0xcb, 0x7, 0xff6e, 0x8000, 0xce, 0x7fff, 0x5, 0x9, 0x1, 0x821a, 0x6, 0x7, 0x9, 0xf, 0x1, 0xfff, 0xe7, 0x887, 0x0, 0x3, 0x5, 0x9, 0x56e6, 0x49, 0x8ca, 0x0, 0x4, 0x3, 0x4, 0x9, 0x4, 0x8, 0x0, 0xffff4247, 0x0, 0x1, 0x422, 0x2, 0x2, 0x28, 0x8, 0x8, 0x4fb, 0x8, 0x0, 0x6, 0x4, 0xc1, 0x7, 0x80000001, 0x9, 0x3, 0xf3, 0x2, 0x1, 0x3, 0x1, 0x8, 0x3, 0xf87, 0x3, 0x5, 0xfffffffd, 0x401, 0x4, 0x3, 0xfff, 0xffff8001, 0x2, 0xb0, 0x4, 0x4, 0x2, 0xb, 0x0, 0x0, 0x4, 0xe, 0x6, 0x4, 0x8, 0x1, 0x100, 0x8001, 0xd, 0x4, 0x0, 0xda, 0xb, 0x5, 0x1]}, @TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x8, 0xff, 0x81, 0x1, 0x1, 0x5, 0x8, 0xff, 0x0, 0x5, 0x9, 0x30, 0x6, 0x0, 0x7227, 0x4, 0x2020, 0xa39, 0x3, 0x3, 0x8, 0x5, 0x5, 0x7, 0x9, 0x2, 0x35, 0x81, 0x800, 0x4, 0x2, 0x16701ef0, 0x3, 0x5, 0x3, 0x3, 0x3, 0x8, 0x4, 0xffffff8b, 0x5, 0x7, 0x5, 0x40, 0xfe, 0x46, 0x2706, 0x9, 0x1, 0x10001, 0x2, 0x481, 0x4cdb, 0x4e7, 0x3, 0x101, 0x6, 0x3ff, 0x3, 0x8, 0x0, 0x6, 0x2, 0x1, 0xb, 0x10000, 0x8, 0x0, 0x3, 0x4, 0x86, 0x5, 0x9, 0x4c8, 0x1ff, 0x2e, 0x3, 0x8, 0x59a, 0x980, 0xb16, 0x3, 0x9, 0x9, 0x4, 0x8002, 0x5, 0x1, 0xfa, 0x3, 0x5, 0x0, 0x7, 0x6, 0x7, 0xf8, 0xffffffff, 0x8, 0x10001, 0x100, 0x1000, 0x2, 0x1000, 0x4, 0x3, 0x8001, 0x4, 0x2, 0x7, 0xf, 0x5, 0x3ff, 0x0, 0x910e, 0x965d, 0x86e1, 0x8, 0x9, 0xff, 0x7, 0x8, 0x0, 0xfffffffa, 0x9, 0x8, 0x1e, 0x0, 0x2, 0x3, 0x3, 0x5, 0x252b, 0x80, 0x8, 0x8000, 0x3, 0x7, 0x1, 0xffff3736, 0xffffffff, 0x7fff, 0x8, 0x8, 0x10001, 0x80000000, 0x2, 0x8dc, 0x2, 0x80000000, 0x6, 0x763, 0x410, 0x6, 0x4000, 0x80000000, 0x3, 0x2, 0xad02, 0x1, 0x628aab26, 0x7, 0x8, 0x8, 0x9, 0x9, 0x3, 0x80000000, 0x929e, 0xc, 0xbf7, 0xffff1d13, 0x3, 0x9, 0x7, 0x4, 0x9, 0x80, 0xd584, 0x2f72, 0x5, 0x1, 0x7fffffff, 0x2, 0x2, 0x6e42fd, 0x2, 0x3, 0x10001, 0x7fffffff, 0x4, 0x5, 0x3, 0x2, 0x1ff, 0x7, 0x1ef60d56, 0xf, 0x3, 0x3, 0x4, 0x4, 0x2, 0x5, 0x7, 0x0, 0x400, 0xb, 0x80000001, 0x7, 0x4a9, 0x9, 0xe, 0xf, 0x10000, 0xc528, 0xffff, 0x5, 0x8, 0x3, 0xc, 0xe8bb, 0x6, 0x3, 0x101, 0x9, 0x0, 0x0, 0x5a, 0x9, 0x6, 0xd, 0x2, 0xf2, 0x0, 0x9, 0x0, 0x1, 0x8, 0x1, 0x0, 0x28, 0x4, 0x4, 0x1, 0x10001, 0x4, 0x5, 0x5, 0x4, 0x1, 0x6, 0x80000001, 0x8, 0x7b4, 0x7]}]}]}}]}, 0xfe8}, 0x1, 0x0, 0x0, 0x40004}, 0x400c004) syz_genetlink_get_family_id$fou(&(0x7f0000000180), r4) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f00000005c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB="7c000000030605000000fcffffff00000a0000090900020073797a32000000000900020073797a30000000000900020073797a31000000000900020073797a31000000000900020073797a32000000000900020073797a300000000005000100070080d90900020073797a3200000000090002797a0d2a22da38110074d154291694828545b8b2e86554409e7971d3b344c1c873f3514523b6cf1c2b3152de7edd9bbea38ec66848de45493f6b2093862ebc4dfee6465d72adce6005a3afd38fc7b2057445ecd0fd1ddae02f59176a04740cf11ec57e9daa46655dbb1447a293b7195e0fcfdab97152b23a5d5128fc147abe32600233cfa87f69cc8f317b6b486feb577fdd6788272fe23290bb57ec9759952fa6a49572554f6257a4"], 0x7c}, 0x1, 0x0, 0x0, 0x48000}, 0x8000) (async, rerun: 64) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) (rerun: 64) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r5, &(0x7f0000000080), 0x0}, 0x20) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) (async, rerun: 32) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) (rerun: 32) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r8, &(0x7f0000001a00)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000200)=ANY=[@ANYBLOB="20000b48a538bd92623f4712e0b6c0f09198c030e930dae76c658a0800000007010100000000000000000000f4ffff0007800600014000000000e124421bcbf5d6752561e7a57ebc540e6a5e1309fe8d945bca1c7dd22eae593647b2de85e8ee274e0000"], 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x4044014) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) (async, rerun: 64) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) (async, rerun: 64) r10 = accept4$alg(r9, 0x0, 0x0, 0x0) sendmmsg$sock(r10, &(0x7f0000003380)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002380)="fb904d54fe74bf8e9f31558a1c60c12f", 0x10}], 0x1}}], 0x1, 0x20000000) (async) read$alg(r10, &(0x7f00000012c0)=""/4109, 0x100d) (async, rerun: 64) sendmmsg$alg(r10, &(0x7f0000007e40)=[{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f00000002c0)='J', 0x1}], 0x1, 0x0, 0x0, 0x20000000}], 0x1, 0x4000080) (rerun: 64) 85.506234ms ago: executing program 3 (id=891): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r4 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x24, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0x1}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40001}, 0x10) socket$tipc(0x1e, 0x2, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000500)={'wlan1\x00'}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r7 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000001200), 0x2, 0x0) write$6lowpan_control(r7, &(0x7f00000012c0)='connect aa:aa:aa:aa:aa:11 2', 0x1b) 54.959631ms ago: executing program 1 (id=892): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000380)='htcp', 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$packet(r1, &(0x7f0000001100)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x14) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000ac0)={0x3, 0x7}, 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r2, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000", 0x36}], 0x1) 0s ago: executing program 4 (id=893): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$PROG_LOAD(0xffca, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000f7ffffff000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000000000b70200001fffffff7b9af8ff00000000d60900001fffffff7baaf0ff00000000bf2700000000000007080000fffdffffbf9400000000000007040000f0ffffff640200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf980000000000004d080000000000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.49' (ED25519) to the list of known hosts. [ 75.004198][ T5811] cgroup: Unknown subsys name 'net' [ 75.073085][ T5811] cgroup: Unknown subsys name 'cpuset' [ 75.083873][ T5811] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 76.661484][ T5811] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 78.846732][ T5838] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 78.856040][ T5838] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 78.856106][ T5842] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 78.865378][ T5838] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 78.878490][ T5838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 78.882109][ T5842] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 78.887779][ T5838] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 78.893965][ T5842] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 78.902543][ T5838] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 78.908099][ T5842] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 78.917774][ T5838] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 78.930562][ T5838] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 78.938774][ T5838] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 78.939966][ T5842] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 78.954900][ T5838] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 78.963350][ T5838] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 78.965711][ T5842] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 78.979139][ T5845] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 78.979915][ T5830] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 78.995853][ T5845] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 79.003436][ T5830] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 79.011851][ T5837] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 79.019535][ T5837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 79.036951][ T5842] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 79.045142][ T5842] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 79.627157][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 79.728529][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 79.798257][ T5823] chnl_net:caif_netlink_parms(): no params data found [ 79.853854][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 79.893367][ T5824] chnl_net:caif_netlink_parms(): no params data found [ 79.960433][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.967723][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.975214][ T5834] bridge_slave_0: entered allmulticast mode [ 79.982578][ T5834] bridge_slave_0: entered promiscuous mode [ 80.048365][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.055636][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.063302][ T5834] bridge_slave_1: entered allmulticast mode [ 80.070872][ T5834] bridge_slave_1: entered promiscuous mode [ 80.096059][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.103386][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.110702][ T5827] bridge_slave_0: entered allmulticast mode [ 80.117952][ T5827] bridge_slave_0: entered promiscuous mode [ 80.163917][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.171269][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.178451][ T5827] bridge_slave_1: entered allmulticast mode [ 80.185894][ T5827] bridge_slave_1: entered promiscuous mode [ 80.240964][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.250360][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.257506][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.264829][ T5823] bridge_slave_0: entered allmulticast mode [ 80.272522][ T5823] bridge_slave_0: entered promiscuous mode [ 80.313740][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.323512][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.330839][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.338007][ T5823] bridge_slave_1: entered allmulticast mode [ 80.345436][ T5823] bridge_slave_1: entered promiscuous mode [ 80.375832][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.405953][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.413331][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.420875][ T5826] bridge_slave_0: entered allmulticast mode [ 80.428109][ T5826] bridge_slave_0: entered promiscuous mode [ 80.435587][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.442883][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.450201][ T5824] bridge_slave_0: entered allmulticast mode [ 80.457814][ T5824] bridge_slave_0: entered promiscuous mode [ 80.467840][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.498688][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.506025][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.513471][ T5826] bridge_slave_1: entered allmulticast mode [ 80.520686][ T5826] bridge_slave_1: entered promiscuous mode [ 80.527544][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.535580][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.542995][ T5824] bridge_slave_1: entered allmulticast mode [ 80.550437][ T5824] bridge_slave_1: entered promiscuous mode [ 80.569527][ T5834] team0: Port device team_slave_0 added [ 80.577789][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.589995][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.634416][ T5834] team0: Port device team_slave_1 added [ 80.674117][ T5827] team0: Port device team_slave_0 added [ 80.703376][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.715529][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.726927][ T5827] team0: Port device team_slave_1 added [ 80.745455][ T5823] team0: Port device team_slave_0 added [ 80.753472][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.764911][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.797641][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.805165][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.831497][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.845039][ T5823] team0: Port device team_slave_1 added [ 80.884358][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.891484][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.917783][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.950580][ T5824] team0: Port device team_slave_0 added [ 80.958342][ T5826] team0: Port device team_slave_0 added [ 80.965448][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.972474][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.998679][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.010206][ T5841] Bluetooth: hci2: command tx timeout [ 81.016260][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.023528][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.050607][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.083122][ T5824] team0: Port device team_slave_1 added [ 81.089416][ T5841] Bluetooth: hci3: command tx timeout [ 81.091033][ T5830] Bluetooth: hci1: command tx timeout [ 81.095485][ T5841] Bluetooth: hci4: command tx timeout [ 81.102190][ T5830] Bluetooth: hci0: command tx timeout [ 81.112570][ T5826] team0: Port device team_slave_1 added [ 81.136893][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.144091][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.170475][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.225528][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.232645][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.258899][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.292204][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.299211][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.325468][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.342928][ T5834] hsr_slave_0: entered promiscuous mode [ 81.349590][ T5834] hsr_slave_1: entered promiscuous mode [ 81.363817][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.370938][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.397287][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.421103][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.428098][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.454682][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.479416][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.486401][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.512993][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.530961][ T5827] hsr_slave_0: entered promiscuous mode [ 81.537384][ T5827] hsr_slave_1: entered promiscuous mode [ 81.543837][ T5827] debugfs: 'hsr0' already exists in 'hsr' [ 81.549789][ T5827] Cannot create hsr debugfs directory [ 81.623648][ T5823] hsr_slave_0: entered promiscuous mode [ 81.630938][ T5823] hsr_slave_1: entered promiscuous mode [ 81.637037][ T5823] debugfs: 'hsr0' already exists in 'hsr' [ 81.642932][ T5823] Cannot create hsr debugfs directory [ 81.772153][ T5826] hsr_slave_0: entered promiscuous mode [ 81.778514][ T5826] hsr_slave_1: entered promiscuous mode [ 81.785029][ T5826] debugfs: 'hsr0' already exists in 'hsr' [ 81.790800][ T5826] Cannot create hsr debugfs directory [ 81.810190][ T5824] hsr_slave_0: entered promiscuous mode [ 81.816571][ T5824] hsr_slave_1: entered promiscuous mode [ 81.823123][ T5824] debugfs: 'hsr0' already exists in 'hsr' [ 81.828860][ T5824] Cannot create hsr debugfs directory [ 82.286567][ T5834] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 82.300727][ T5834] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 82.308615][ T5834] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 82.319774][ T5834] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 82.328038][ T5834] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 82.338653][ T5834] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 82.355405][ T5834] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 82.365680][ T5834] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 82.431405][ T5827] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 82.441892][ T5827] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 82.460660][ T5827] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 82.471437][ T5827] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 82.491146][ T5827] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 82.502469][ T5827] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 82.511542][ T5827] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 82.522403][ T5827] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 82.580194][ T5823] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 82.591682][ T5823] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 82.610330][ T5823] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 82.620075][ T5823] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 82.627817][ T5823] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 82.638418][ T5823] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 82.673408][ T5823] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 82.683310][ T5823] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 82.740835][ T5824] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 82.752944][ T5824] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 82.761813][ T5824] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 82.772392][ T5824] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 82.781551][ T5824] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 82.792041][ T5824] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 82.829081][ T5824] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 82.838852][ T5824] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 82.878458][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.931697][ T5826] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 82.944322][ T5826] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 82.952508][ T5826] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 82.962357][ T5826] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 82.973425][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.984516][ T5826] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 82.994648][ T5826] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 83.005099][ T5826] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 83.016137][ T5826] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 83.041461][ T1349] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.048728][ T1349] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.086979][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.094193][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.101925][ T5830] Bluetooth: hci2: command tx timeout [ 83.124550][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.170925][ T5830] Bluetooth: hci4: command tx timeout [ 83.176388][ T5830] Bluetooth: hci1: command tx timeout [ 83.182413][ T5143] Bluetooth: hci3: command tx timeout [ 83.183079][ T5841] Bluetooth: hci0: command tx timeout [ 83.205893][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.235299][ T1349] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.242447][ T1349] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.277373][ T5834] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 83.315436][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.322677][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.370323][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.454746][ T5823] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.487554][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.530041][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.537244][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.592452][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.599656][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.636419][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.657022][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.707827][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.718374][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.754594][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.761779][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.802120][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.809360][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.825550][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.832732][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.874582][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.881850][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.901581][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.061716][ T5834] veth0_vlan: entered promiscuous mode [ 84.082402][ T5834] veth1_vlan: entered promiscuous mode [ 84.145054][ T5827] veth0_vlan: entered promiscuous mode [ 84.207693][ T5827] veth1_vlan: entered promiscuous mode [ 84.244867][ T5834] veth0_macvtap: entered promiscuous mode [ 84.290143][ T5834] veth1_macvtap: entered promiscuous mode [ 84.377581][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.406748][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.414804][ T5827] veth0_macvtap: entered promiscuous mode [ 84.441462][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.483662][ T5827] veth1_macvtap: entered promiscuous mode [ 84.498429][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.523557][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.564117][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.573369][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.608102][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.635351][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.665636][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.683324][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.733049][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.764901][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.777088][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.822735][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.849223][ T5823] veth0_vlan: entered promiscuous mode [ 84.902377][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.920112][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.968204][ T5823] veth1_vlan: entered promiscuous mode [ 84.997726][ T126] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.026878][ T5826] veth0_vlan: entered promiscuous mode [ 85.033054][ T126] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.071011][ T5826] veth1_vlan: entered promiscuous mode [ 85.092136][ T126] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.112213][ T126] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.128655][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.165741][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.174510][ T5841] Bluetooth: hci2: command tx timeout [ 85.192023][ T5823] veth0_macvtap: entered promiscuous mode [ 85.239756][ T5834] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 85.254981][ T5841] Bluetooth: hci1: command tx timeout [ 85.255495][ T5830] Bluetooth: hci3: command tx timeout [ 85.260957][ T5841] Bluetooth: hci0: command tx timeout [ 85.267039][ T5143] Bluetooth: hci4: command tx timeout [ 85.278892][ T5823] veth1_macvtap: entered promiscuous mode [ 85.329123][ T5826] veth0_macvtap: entered promiscuous mode [ 85.413304][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.437194][ T5826] veth1_macvtap: entered promiscuous mode [ 85.456786][ T5824] veth0_vlan: entered promiscuous mode [ 85.473248][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.506356][ T5824] veth1_vlan: entered promiscuous mode [ 85.521037][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.572564][ T1349] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.593182][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.611080][ T1349] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.621211][ T1349] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.635602][ T1349] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.648603][ T5951] Zero length message leads to an empty skb [ 86.008424][ T5824] veth0_macvtap: entered promiscuous mode [ 86.047455][ T58] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.218157][ T58] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.236838][ T58] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.276633][ T1349] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.287569][ T5824] veth1_macvtap: entered promiscuous mode [ 86.315663][ T5955] skbuff: bad partial csum: csum=65535/0 headroom=64 headlen=65537 [ 86.416745][ T1349] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.436975][ T1349] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.457433][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.486258][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.502340][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.512266][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.572263][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.584310][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.609073][ T48] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.626180][ T48] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.653197][ T48] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.705540][ T48] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.731135][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.740822][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.984599][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.023236][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.072659][ T5964] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4'. [ 87.087622][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.110902][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.253186][ T5143] Bluetooth: hci2: command tx timeout [ 87.328269][ T5970] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10'. [ 87.337233][ T5143] Bluetooth: hci4: command tx timeout [ 87.337266][ T5143] Bluetooth: hci3: command tx timeout [ 87.345472][ T5143] Bluetooth: hci0: command tx timeout [ 87.353405][ T5830] Bluetooth: hci1: command tx timeout [ 87.433318][ T5973] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5'. [ 87.601208][ T5977] syz.3.12 uses obsolete (PF_INET,SOCK_PACKET) [ 87.838277][ T5983] syzkaller0: entered promiscuous mode [ 87.854863][ T5983] syzkaller0: entered allmulticast mode [ 88.265558][ T5998] netlink: 24 bytes leftover after parsing attributes in process `syz.1.21'. [ 88.777940][ T6010] syzkaller0: entered promiscuous mode [ 88.805505][ T6010] syzkaller0: entered allmulticast mode [ 89.011988][ T6019] syzkaller0: entered promiscuous mode [ 89.021461][ T6019] syzkaller0: entered allmulticast mode [ 89.078890][ T6029] syzkaller0: entered promiscuous mode [ 89.089342][ T6029] syzkaller0: entered allmulticast mode [ 89.532346][ T6041] bridge_slave_0: left allmulticast mode [ 89.589764][ T6041] bridge_slave_0: left promiscuous mode [ 89.596500][ T6041] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.662695][ T6041] bridge_slave_1: left allmulticast mode [ 89.702144][ T6041] bridge_slave_1: left promiscuous mode [ 89.729517][ T6041] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.783725][ T6041] bond0: (slave bond_slave_0): Releasing backup interface [ 89.833632][ T6041] bond0: (slave bond_slave_1): Releasing backup interface [ 89.974416][ T6041] team0: Port device team_slave_0 removed [ 90.056667][ T6041] team0: Port device team_slave_1 removed [ 90.098458][ T6041] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 90.129367][ T6041] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 90.151622][ T6041] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 90.169439][ T6041] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 90.204721][ T6041] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 90.331102][ T6057] netlink: 'syz.1.37': attribute type 1 has an invalid length. [ 90.738911][ T6071] bridge1: entered promiscuous mode [ 90.744582][ T6071] bridge1: entered allmulticast mode [ 90.783570][ T6071] team0: Port device bridge1 added [ 90.811986][ T6074] bridge0: port 3(team0) entered blocking state [ 90.838820][ T6074] bridge0: port 3(team0) entered disabled state [ 90.847739][ T6074] team0: entered allmulticast mode [ 90.863009][ T6074] team_slave_0: entered allmulticast mode [ 90.868948][ T6074] team_slave_1: entered allmulticast mode [ 90.878300][ T6074] team0: entered promiscuous mode [ 90.883830][ T6074] team_slave_0: entered promiscuous mode [ 90.894985][ T6074] team_slave_1: entered promiscuous mode [ 90.905836][ T6074] bridge0: port 3(team0) entered blocking state [ 90.912461][ T6074] bridge0: port 3(team0) entered forwarding state [ 90.956544][ T6068] syzkaller0: entered promiscuous mode [ 90.962937][ T6068] syzkaller0: entered allmulticast mode [ 90.976620][ T6073] netlink: 64 bytes leftover after parsing attributes in process `syz.2.42'. [ 91.099968][ T6077] syzkaller0: entered promiscuous mode [ 91.105578][ T6077] syzkaller0: entered allmulticast mode [ 91.306497][ T6094] netlink: 8 bytes leftover after parsing attributes in process `syz.3.45'. [ 91.446977][ T6098] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 91.717115][ T6106] netlink: 4 bytes leftover after parsing attributes in process `syz.1.48'. [ 91.894183][ T1210] cfg80211: failed to load regulatory.db [ 92.692796][ T6111] Driver unsupported XDP return value 0 on prog (id 8) dev N/A, expect packet loss! [ 92.925820][ T6122] netlink: 4 bytes leftover after parsing attributes in process `syz.0.54'. [ 93.053357][ T6124] bridge1: entered promiscuous mode [ 93.065908][ T6124] bridge1: entered allmulticast mode [ 93.116704][ T6124] team0: Port device bridge1 added [ 93.149848][ T6125] bridge0: port 3(team0) entered blocking state [ 93.158715][ T6125] bridge0: port 3(team0) entered disabled state [ 93.186684][ T6125] team0: entered allmulticast mode [ 93.199413][ T6125] team_slave_0: entered allmulticast mode [ 93.209345][ T6125] team_slave_1: entered allmulticast mode [ 93.236582][ T6125] team0: entered promiscuous mode [ 93.254432][ T6125] team_slave_0: entered promiscuous mode [ 93.260931][ T6125] team_slave_1: entered promiscuous mode [ 93.268218][ T6125] bridge0: port 3(team0) entered blocking state [ 93.274666][ T6125] bridge0: port 3(team0) entered forwarding state [ 93.572735][ T6134] syzkaller0: entered promiscuous mode [ 93.592238][ T6137] skbuff: bad partial csum: csum=65535/0 headroom=64 headlen=65537 [ 93.600454][ T6134] syzkaller0: entered allmulticast mode [ 93.655875][ T6138] syzkaller0: entered promiscuous mode [ 93.672556][ T6138] syzkaller0: entered allmulticast mode [ 93.915349][ T6150] syzkaller0: entered promiscuous mode [ 93.929458][ T6150] syzkaller0: entered allmulticast mode [ 94.090937][ T6153] bridge1: entered promiscuous mode [ 94.096304][ T6153] bridge1: entered allmulticast mode [ 94.127221][ T6153] team0: Port device bridge1 added [ 94.145253][ T6158] bridge0: port 3(team0) entered blocking state [ 94.152218][ T6158] bridge0: port 3(team0) entered disabled state [ 94.158668][ T6158] team0: entered allmulticast mode [ 94.167050][ T6158] team_slave_0: entered allmulticast mode [ 94.174103][ T6158] team_slave_1: entered allmulticast mode [ 94.183029][ T6158] team0: entered promiscuous mode [ 94.188361][ T6158] team_slave_0: entered promiscuous mode [ 94.196355][ T6158] team_slave_1: entered promiscuous mode [ 94.204155][ T6158] bridge0: port 3(team0) entered blocking state [ 94.210596][ T6158] bridge0: port 3(team0) entered forwarding state [ 94.340853][ T6161] syzkaller0: entered promiscuous mode [ 94.346514][ T6161] syzkaller0: entered allmulticast mode [ 94.354096][ T6155] syzkaller0: entered promiscuous mode [ 94.362147][ T6155] syzkaller0: entered allmulticast mode [ 95.658939][ T6170] syzkaller0: entered promiscuous mode [ 95.675007][ T6170] syzkaller0: entered allmulticast mode [ 95.816159][ T6204] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 97.040744][ T6226] netlink: 132 bytes leftover after parsing attributes in process `syz.0.79'. [ 97.118437][ T6224] syzkaller0: entered promiscuous mode [ 97.134141][ T6224] syzkaller0: entered allmulticast mode [ 97.209283][ T6233] netlink: 24 bytes leftover after parsing attributes in process `syz.0.84'. [ 97.526606][ T6236] syzkaller0: entered promiscuous mode [ 97.532203][ T6236] syzkaller0: entered allmulticast mode [ 97.836164][ T6249] syzkaller0: entered promiscuous mode [ 97.842628][ T6249] syzkaller0: entered allmulticast mode [ 97.979193][ T6252] veth1_macvtap: renamed from veth0_vlan [ 98.505462][ T6278] openvswitch: netlink: IP tunnel dst address not specified [ 99.598042][ T6291] syzkaller0: entered promiscuous mode [ 99.622932][ T6291] syzkaller0: entered allmulticast mode [ 99.706892][ T6298] netlink: 'syz.1.102': attribute type 1 has an invalid length. [ 99.722403][ T6300] syzkaller0: entered promiscuous mode [ 99.748391][ T6300] syzkaller0: entered allmulticast mode [ 99.750943][ T6302] netlink: 64 bytes leftover after parsing attributes in process `syz.4.103'. [ 99.774200][ T6302] block nbd0: not configured, cannot reconfigure [ 100.136834][ T6305] syzkaller0: entered promiscuous mode [ 100.157568][ T6305] syzkaller0: entered allmulticast mode [ 100.181117][ T6313] warning: `syz.1.105' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 100.269772][ T6322] skbuff: bad partial csum: csum=65535/0 headroom=64 headlen=65537 [ 100.320045][ T6327] IPv6: NLM_F_REPLACE set, but no existing node found! [ 101.661715][ T5488] veth1_macvtap: left promiscuous mode [ 101.693934][ T5488] veth1_macvtap: entered promiscuous mode [ 101.772051][ T6347] tipc: Failed to obtain node identity [ 101.779388][ T6347] tipc: Enabling of bearer rejected, failed to enable media [ 101.874841][ T6352] syzkaller0: entered promiscuous mode [ 101.884641][ T6352] syzkaller0: entered allmulticast mode [ 101.975788][ T6356] openvswitch: netlink: Tunnel attr 307 out of range max 16 [ 102.035232][ T6358] netlink: 4 bytes leftover after parsing attributes in process `syz.4.120'. [ 102.080215][ T6358] netlink: 4 bytes leftover after parsing attributes in process `syz.4.120'. [ 102.349921][ T6370] netlink: 11 bytes leftover after parsing attributes in process `syz.1.125'. [ 102.568611][ T6378] syzkaller0: entered promiscuous mode [ 102.597685][ T6378] syzkaller0: entered allmulticast mode [ 103.200903][ T6414] netlink: 'syz.2.138': attribute type 4 has an invalid length. [ 103.229523][ T6414] netlink: 'syz.2.138': attribute type 4 has an invalid length. [ 103.242447][ T6417] netlink: 4 bytes leftover after parsing attributes in process `syz.0.141'. [ 103.342088][ T6423] netlink: 4 bytes leftover after parsing attributes in process `syz.0.141'. [ 103.508760][ T6425] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.926715][ T6446] netlink: 8 bytes leftover after parsing attributes in process `syz.3.150'. [ 104.233314][ T6456] netlink: 'syz.2.152': attribute type 1 has an invalid length. [ 104.326805][ T6462] netlink: 8 bytes leftover after parsing attributes in process `syz.2.152'. [ 104.339315][ T6462] netlink: 12 bytes leftover after parsing attributes in process `syz.2.152'. [ 104.375810][ T6466] netlink: 4 bytes leftover after parsing attributes in process `syz.4.156'. [ 104.404757][ T6456] 8021q: adding VLAN 0 to HW filter on device bond1 [ 104.485055][ T6469] bond1: (slave gretap1): making interface the new active one [ 104.510354][ T6469] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 104.616549][ T6465] syzkaller0: entered promiscuous mode [ 104.622770][ T6465] syzkaller0: entered allmulticast mode [ 104.844365][ T6485] xt_hashlimit: size too large, truncated to 1048576 [ 106.516279][ T6524] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 106.523622][ T6524] IPv6: NLM_F_CREATE should be set when creating new route [ 106.616562][ T6529] __nla_validate_parse: 1 callbacks suppressed [ 106.616582][ T6529] netlink: 4 bytes leftover after parsing attributes in process `syz.3.171'. [ 106.767206][ T6529] netlink: 4 bytes leftover after parsing attributes in process `syz.3.171'. [ 106.950501][ T6544] netlink: 8 bytes leftover after parsing attributes in process `syz.2.177'. [ 107.028584][ T6543] syzkaller0: entered promiscuous mode [ 107.035498][ T6543] syzkaller0: entered allmulticast mode [ 107.151641][ T6550] netlink: 4 bytes leftover after parsing attributes in process `syz.1.180'. [ 107.389508][ T6557] netlink: 27 bytes leftover after parsing attributes in process `syz.2.183'. [ 107.940004][ T6581] netlink: 'syz.4.193': attribute type 1 has an invalid length. [ 108.084973][ T6581] 8021q: adding VLAN 0 to HW filter on device bond1 [ 108.209171][ T6588] bond1: (slave geneve2): making interface the new active one [ 108.241677][ T6588] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 108.475326][ T6597] netlink: 4 bytes leftover after parsing attributes in process `syz.3.197'. [ 108.513750][ T6573] lec:lec_atm_close: lec0: Shut down! [ 108.878598][ T6605] lo: entered allmulticast mode [ 110.176727][ T6660] syzkaller0: entered promiscuous mode [ 111.540043][ T6669] syzkaller0: entered promiscuous mode [ 111.546746][ T6669] syzkaller0: entered allmulticast mode [ 112.073635][ T29] lec:lec_start_xmit: lec0:No lecd attached [ 112.094941][ T6707] ip6gre1: entered promiscuous mode [ 112.108177][ T6707] ip6gre1: entered allmulticast mode [ 112.147187][ T48] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 112.162334][ T48] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 112.170332][ T29] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 113.011200][ T5828] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 113.092162][ T5828] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 113.728292][ T6727] syzkaller0: entered promiscuous mode [ 113.736301][ T6727] syzkaller0: entered allmulticast mode [ 113.997370][ T6762] netlink: 'syz.0.232': attribute type 4 has an invalid length. [ 114.164115][ T6764] IPVS: Scheduler module ip_vs_sip not found [ 114.232112][ T6771] syzkaller0: entered promiscuous mode [ 114.245417][ T6771] syzkaller0: entered allmulticast mode [ 114.494109][ T6785] lo: entered allmulticast mode [ 114.523334][ T6785] tunl0: entered allmulticast mode [ 114.553286][ T6785] gre0: entered allmulticast mode [ 114.641942][ T6785] gretap0: entered allmulticast mode [ 114.671949][ T6785] erspan0: entered allmulticast mode [ 114.685727][ T6785] ip_vti0: entered allmulticast mode [ 114.693555][ T6785] ip6_vti0: entered allmulticast mode [ 114.702846][ T6785] sit0: entered allmulticast mode [ 114.718519][ T6785] ip6tnl0: entered allmulticast mode [ 114.727772][ T6785] ip6gre0: entered allmulticast mode [ 114.749603][ T6785] syz_tun: entered allmulticast mode [ 114.787071][ T6785] ip6gretap0: entered allmulticast mode [ 114.835759][ T6785] bridge0: entered allmulticast mode [ 114.870161][ T6785] vcan0: entered allmulticast mode [ 114.904729][ T6785] bond0: entered allmulticast mode [ 114.923757][ T6785] team0: entered allmulticast mode [ 114.966206][ T6785] dummy0: entered allmulticast mode [ 114.991079][ T6785] nlmon0: entered allmulticast mode [ 114.998720][ T6785] caif0: entered allmulticast mode [ 115.018245][ T6785] batadv0: entered allmulticast mode [ 115.048937][ T6785] vxcan0: entered allmulticast mode [ 115.078338][ T6785] vxcan1: entered allmulticast mode [ 115.090916][ T6785] veth0: entered allmulticast mode [ 115.102843][ T6785] veth1: entered allmulticast mode [ 115.116874][ T6785] wg0: entered allmulticast mode [ 115.134137][ T6785] wg1: entered allmulticast mode [ 115.141685][ T6785] wg2: entered allmulticast mode [ 115.148132][ T6785] veth0_to_bridge: entered allmulticast mode [ 115.163529][ T6785] bridge_slave_0: entered allmulticast mode [ 115.176228][ T6785] veth1_to_bridge: entered allmulticast mode [ 115.185379][ T6785] bridge_slave_1: entered allmulticast mode [ 115.193105][ T6785] veth0_to_bond: entered allmulticast mode [ 115.203077][ T6785] bond_slave_0: entered allmulticast mode [ 115.209200][ T6785] veth1_to_bond: entered allmulticast mode [ 115.218116][ T6785] bond_slave_1: entered allmulticast mode [ 115.225472][ T6785] veth0_to_team: entered allmulticast mode [ 115.234177][ T6785] team_slave_0: entered allmulticast mode [ 115.240514][ T6785] veth1_to_team: entered allmulticast mode [ 115.248529][ T6785] team_slave_1: entered allmulticast mode [ 115.255204][ T6785] veth0_to_batadv: entered allmulticast mode [ 115.265368][ T6785] batadv_slave_0: entered allmulticast mode [ 115.275064][ T6785] veth1_to_batadv: entered allmulticast mode [ 115.283712][ T6785] batadv_slave_1: entered allmulticast mode [ 115.293295][ T6785] xfrm0: entered allmulticast mode [ 115.301086][ T6785] veth0_to_hsr: entered allmulticast mode [ 115.311099][ T6785] hsr_slave_0: entered allmulticast mode [ 115.318674][ T6785] veth1_to_hsr: entered allmulticast mode [ 115.328225][ T6785] hsr_slave_1: entered allmulticast mode [ 115.338332][ T6785] hsr0: entered allmulticast mode [ 115.346575][ T6785] veth1_virt_wifi: entered allmulticast mode [ 115.356573][ T6785] veth0_virt_wifi: entered allmulticast mode [ 115.367716][ T6785] virt_wifi0: entered allmulticast mode [ 115.374834][ T6785] veth1_vlan: entered allmulticast mode [ 115.383575][ T6785] veth0_vlan: entered allmulticast mode [ 115.397702][ T6785] vlan0: entered allmulticast mode [ 115.403726][ T6785] vlan1: entered allmulticast mode [ 115.409405][ T6785] macvlan0: entered allmulticast mode [ 115.417200][ T6785] macvlan1: entered allmulticast mode [ 115.426615][ T6785] ipvlan0: entered allmulticast mode [ 115.432151][ T6785] ipvlan1: entered allmulticast mode [ 115.438852][ T6785] geneve0: entered allmulticast mode [ 115.446912][ T6785] geneve1: entered allmulticast mode [ 115.456496][ T6785] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 115.469109][ T6785] netdevsim netdevsim4 netdevsim1: entered allmulticast mode [ 115.480246][ T6785] netdevsim netdevsim4 netdevsim2: entered allmulticast mode [ 115.491572][ T6785] netdevsim netdevsim4 netdevsim3: entered allmulticast mode [ 115.509884][ T6785] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 115.524357][ T6785] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 115.533545][ T6785] bridge1: entered allmulticast mode [ 115.540790][ T6785] bond1: entered allmulticast mode [ 115.545926][ T6785] geneve2: entered allmulticast mode [ 115.633431][ T6813] bridge3: entered promiscuous mode [ 115.644422][ T6813] bridge3: entered allmulticast mode [ 115.649141][ T6820] FAULT_INJECTION: forcing a failure. [ 115.649141][ T6820] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 115.671421][ T6813] team0: Port device bridge3 added [ 115.677609][ T6820] CPU: 1 UID: 0 PID: 6820 Comm: syz.4.244 Not tainted syzkaller #0 PREEMPT(full) [ 115.677636][ T6820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 115.677657][ T6820] Call Trace: [ 115.677666][ T6820] [ 115.677675][ T6820] dump_stack_lvl+0xe8/0x150 [ 115.677716][ T6820] should_fail_ex+0x412/0x560 [ 115.677755][ T6820] _copy_from_user+0x2d/0xb0 [ 115.677783][ T6820] __sys_bpf+0x229/0x950 [ 115.677807][ T6820] ? __pfx___sys_bpf+0x10/0x10 [ 115.677841][ T6820] ? ksys_write+0x242/0x270 [ 115.677867][ T6820] ? __pfx_ksys_write+0x10/0x10 [ 115.677900][ T6820] __x64_sys_bpf+0x7c/0x90 [ 115.677932][ T6820] do_syscall_64+0x14d/0xf80 [ 115.677963][ T6820] ? trace_irq_disable+0x3b/0x150 [ 115.677981][ T6820] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.678010][ T6820] ? clear_bhb_loop+0x40/0x90 [ 115.678037][ T6820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.678059][ T6820] RIP: 0033:0x7f001119c819 [ 115.678084][ T6820] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.678102][ T6820] RSP: 002b:00007f0012028028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 115.678124][ T6820] RAX: ffffffffffffffda RBX: 00007f0011415fa0 RCX: 00007f001119c819 [ 115.678139][ T6820] RDX: 0000000000000080 RSI: 0000200000000140 RDI: 0000000000000005 [ 115.678152][ T6820] RBP: 00007f0012028090 R08: 0000000000000000 R09: 0000000000000000 [ 115.678164][ T6820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 115.678176][ T6820] R13: 00007f0011416038 R14: 00007f0011415fa0 R15: 00007ffc79c58318 [ 115.678207][ T6820] [ 115.929293][ T58] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.023942][ T6825] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 116.029406][ T58] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.031333][ T6825] IPv6: NLM_F_CREATE should be set when creating new route [ 116.087691][ T6827] netlink: 'syz.0.246': attribute type 4 has an invalid length. [ 116.099708][ T1349] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.116066][ T1349] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.146996][ T6825] lo: entered allmulticast mode [ 116.171621][ T6825] tunl0: entered allmulticast mode [ 116.182876][ T6825] gre0: entered allmulticast mode [ 116.199140][ T6825] gretap0: entered allmulticast mode [ 116.207268][ T6825] erspan0: entered allmulticast mode [ 116.215633][ T6836] netlink: 'syz.4.248': attribute type 4 has an invalid length. [ 116.225800][ T6837] netlink: 'syz.0.246': attribute type 4 has an invalid length. [ 116.236168][ T6825] ip_vti0: entered allmulticast mode [ 116.240721][ T6825] ip6_vti0: entered allmulticast mode [ 116.253413][ T6825] sit0: entered allmulticast mode [ 116.264155][ T6825] ip6tnl0: entered allmulticast mode [ 116.270374][ T6840] netlink: 'syz.4.248': attribute type 4 has an invalid length. [ 116.285091][ T6825] ip6gre0: entered allmulticast mode [ 116.291009][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 116.304351][ T6825] ip6gretap0: entered allmulticast mode [ 116.314686][ T6825] bridge0: port 3(team0) entered disabled state [ 116.321725][ T6825] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.330223][ T6825] bridge0: entered allmulticast mode [ 116.338863][ T6825] vcan0: entered allmulticast mode [ 116.348605][ T6825] bond0: entered allmulticast mode [ 116.361464][ T6825] bond_slave_0: entered allmulticast mode [ 116.367373][ T6825] bond_slave_1: entered allmulticast mode [ 116.384445][ T6825] dummy0: entered allmulticast mode [ 116.398160][ T6825] nlmon0: entered allmulticast mode [ 116.407365][ T6825] caif0: entered allmulticast mode [ 116.413715][ T6825] batadv0: entered allmulticast mode [ 116.424587][ T6825] vxcan0: entered allmulticast mode [ 116.432250][ T6825] vxcan1: entered allmulticast mode [ 116.438573][ T6825] veth0: entered allmulticast mode [ 116.447884][ T6825] veth1: entered allmulticast mode [ 116.457422][ T6825] wg0: entered allmulticast mode [ 116.466811][ T6825] wg1: entered allmulticast mode [ 116.516181][ T6825] wg2: entered allmulticast mode [ 116.534223][ T6825] veth0_to_bridge: entered allmulticast mode [ 116.567765][ T6825] veth1_to_bridge: entered allmulticast mode [ 116.600707][ T6825] veth0_to_bond: entered allmulticast mode [ 116.625772][ T6825] veth1_to_bond: entered allmulticast mode [ 116.634638][ T6825] veth0_to_team: entered allmulticast mode [ 116.645414][ T6825] veth1_to_team: entered allmulticast mode [ 116.658320][ T6825] veth0_to_batadv: entered allmulticast mode [ 116.667107][ T6825] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.675017][ T6825] batadv_slave_0: entered allmulticast mode [ 116.683871][ T6825] veth1_to_batadv: entered allmulticast mode [ 116.695766][ T6825] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.703836][ T6825] batadv_slave_1: entered allmulticast mode [ 116.712420][ T6825] xfrm0: entered allmulticast mode [ 116.720022][ T6825] veth0_to_hsr: entered allmulticast mode [ 116.727990][ T6825] hsr_slave_0: entered allmulticast mode [ 116.737199][ T6825] veth1_to_hsr: entered allmulticast mode [ 116.751945][ T6825] hsr_slave_1: entered allmulticast mode [ 116.761546][ T6825] hsr0: entered allmulticast mode [ 116.770387][ T6825] veth1_virt_wifi: entered allmulticast mode [ 116.778936][ T6825] veth0_virt_wifi: entered allmulticast mode [ 116.787580][ T6825] virt_wifi0: entered allmulticast mode [ 116.794466][ T6825] veth1_vlan: entered allmulticast mode [ 116.803350][ T6825] veth0_vlan: entered allmulticast mode [ 116.817327][ T6825] vlan0: entered allmulticast mode [ 116.823910][ T6825] vlan1: entered allmulticast mode [ 116.830757][ T6825] macvlan0: entered allmulticast mode [ 116.838736][ T6825] macvlan1: entered allmulticast mode [ 116.848194][ T6825] ipvlan0: entered allmulticast mode [ 116.858363][ T6825] ipvlan1: entered allmulticast mode [ 116.865243][ T6825] veth1_macvtap: entered allmulticast mode [ 116.874811][ T6825] veth0_macvtap: entered allmulticast mode [ 116.884881][ T6825] macvtap0: entered allmulticast mode [ 116.895769][ T6825] macsec0: entered allmulticast mode [ 116.905414][ T6825] geneve0: entered allmulticast mode [ 116.915501][ T6825] geneve1: entered allmulticast mode [ 116.924556][ T6825] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 116.935306][ T6825] netdevsim netdevsim3 netdevsim1: entered allmulticast mode [ 116.945692][ T6825] netdevsim netdevsim3 netdevsim2: entered allmulticast mode [ 116.956625][ T6825] netdevsim netdevsim3 netdevsim3: entered allmulticast mode [ 116.972767][ T6825] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 116.986285][ T6825] mac80211_hwsim hwsim8 wlan1: entered allmulticast mode [ 116.995766][ T6825] ieee802154 phy0 wpan0: entered allmulticast mode [ 117.008431][ T6825] bridge2: entered allmulticast mode [ 117.016089][ T6825] sit1: entered allmulticast mode [ 117.091379][ T6835] bridge1: entered promiscuous mode [ 117.096660][ T6835] bridge1: entered allmulticast mode [ 117.122105][ T6835] team0: Port device bridge1 added [ 117.139946][ T6841] bridge0: port 3(team0) entered blocking state [ 117.146697][ T6841] bridge0: port 3(team0) entered disabled state [ 117.160270][ T6841] team0: entered allmulticast mode [ 117.165448][ T6841] team_slave_0: entered allmulticast mode [ 117.190489][ T6841] team_slave_1: entered allmulticast mode [ 117.207985][ T6841] team0: entered promiscuous mode [ 117.213577][ T6841] team_slave_0: entered promiscuous mode [ 117.220601][ T6841] team_slave_1: entered promiscuous mode [ 117.227858][ T6841] bridge0: port 3(team0) entered blocking state [ 117.234306][ T6841] bridge0: port 3(team0) entered forwarding state [ 117.331284][ T36] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.356174][ T36] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.410311][ T6861] lo: entered allmulticast mode [ 117.420383][ T6861] tunl0: entered allmulticast mode [ 117.441264][ T6861] gre0: entered allmulticast mode [ 117.481611][ T6861] gretap0: entered allmulticast mode [ 117.489247][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5410 ms [ 117.497575][ C0] lec:lec_tx_timeout: lec0 [ 117.503329][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 117.519033][ T6861] erspan0: entered allmulticast mode [ 117.540491][ T6861] ip_vti0: entered allmulticast mode [ 117.564328][ T6861] ip6_vti0: entered allmulticast mode [ 117.590392][ T6861] sit0: entered allmulticast mode [ 117.608263][ T6861] ip6tnl0: entered allmulticast mode [ 117.615829][ T6878] netlink: 'syz.1.256': attribute type 4 has an invalid length. [ 117.627410][ T6861] ip6gre0: entered allmulticast mode [ 117.656362][ T6861] syz_tun: entered allmulticast mode [ 117.672116][ T6861] ip6gretap0: entered allmulticast mode [ 117.680979][ T6861] bridge0: port 3(team0) entered disabled state [ 117.687748][ T6861] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.695722][ T6861] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.713735][ T6883] netlink: 'syz.1.256': attribute type 4 has an invalid length. [ 117.722797][ T6861] bridge0: entered allmulticast mode [ 117.745622][ T6861] bond0: entered allmulticast mode [ 117.755504][ T6861] bond_slave_0: entered allmulticast mode [ 117.763133][ T6861] bond_slave_1: entered allmulticast mode [ 117.776618][ T6861] dummy0: entered allmulticast mode [ 117.790843][ T6861] nlmon0: entered allmulticast mode [ 117.798243][ T6861] caif0: entered allmulticast mode [ 117.808125][ T6861] batadv0: entered allmulticast mode [ 117.817715][ T6861] vxcan0: entered allmulticast mode [ 117.837061][ T6861] vxcan1: entered allmulticast mode [ 117.846079][ T6861] veth0: entered allmulticast mode [ 117.866593][ T6861] veth1: entered allmulticast mode [ 117.896966][ T6861] wg0: entered allmulticast mode [ 117.915063][ T6861] wg1: entered allmulticast mode [ 117.925552][ T6861] wg2: entered allmulticast mode [ 117.942626][ T6861] veth0_to_bridge: entered allmulticast mode [ 117.965513][ T6861] veth1_to_bridge: entered allmulticast mode [ 117.988882][ T6861] veth0_to_bond: entered allmulticast mode [ 117.999171][ T6861] veth1_to_bond: entered allmulticast mode [ 118.009200][ T6861] veth0_to_team: entered allmulticast mode [ 118.026307][ T6861] veth1_to_team: entered allmulticast mode [ 118.036928][ T6861] veth0_to_batadv: entered allmulticast mode [ 118.045535][ T6861] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 118.053908][ T6861] batadv_slave_0: entered allmulticast mode [ 118.064664][ T6861] veth1_to_batadv: entered allmulticast mode [ 118.074193][ T6861] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 118.081898][ T6861] batadv_slave_1: entered allmulticast mode [ 118.091673][ T6861] xfrm0: entered allmulticast mode [ 118.098814][ T6861] veth0_to_hsr: entered allmulticast mode [ 118.106970][ T6861] hsr_slave_0: entered allmulticast mode [ 118.114636][ T6861] veth1_to_hsr: entered allmulticast mode [ 118.122908][ T6861] hsr_slave_1: entered allmulticast mode [ 118.133478][ T6861] hsr0: entered allmulticast mode [ 118.142674][ T6861] veth1_virt_wifi: entered allmulticast mode [ 118.151356][ T6861] veth0_virt_wifi: entered allmulticast mode [ 118.162165][ T6861] virt_wifi0: entered allmulticast mode [ 118.168080][ T6861] veth1_vlan: entered allmulticast mode [ 118.176952][ T6861] veth0_vlan: entered allmulticast mode [ 118.191665][ T6861] vlan0: entered allmulticast mode [ 118.197068][ T6861] vlan1: entered allmulticast mode [ 118.203437][ T6861] macvlan0: entered allmulticast mode [ 118.214194][ T6861] macvlan1: entered allmulticast mode [ 118.222251][ T6861] ipvlan0: entered allmulticast mode [ 118.227818][ T6861] ipvlan1: entered allmulticast mode [ 118.236930][ T6861] veth1_macvtap: entered allmulticast mode [ 118.246548][ T6861] veth0_macvtap: entered allmulticast mode [ 118.255633][ T6861] macvtap0: entered allmulticast mode [ 118.263476][ T6861] macsec0: entered allmulticast mode [ 118.271587][ T6861] geneve0: entered allmulticast mode [ 118.281161][ T6861] geneve1: entered allmulticast mode [ 118.289553][ T6861] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 118.301937][ T6861] netdevsim netdevsim0 netdevsim1: entered allmulticast mode [ 118.313023][ T6861] netdevsim netdevsim0 netdevsim2: entered allmulticast mode [ 118.323006][ T6861] netdevsim netdevsim0 netdevsim3: entered allmulticast mode [ 118.338090][ T6861] mac80211_hwsim hwsim3 wlan0: entered allmulticast mode [ 118.352849][ T6861] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 118.365340][ T6861] ip6tnl1: entered allmulticast mode [ 118.371344][ T6861] bridge2: entered allmulticast mode [ 118.381300][ T48] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.615853][ T6899] FAULT_INJECTION: forcing a failure. [ 118.615853][ T6899] name failslab, interval 1, probability 0, space 0, times 1 [ 118.630575][ T6899] CPU: 1 UID: 0 PID: 6899 Comm: syz.0.260 Not tainted syzkaller #0 PREEMPT(full) [ 118.630603][ T6899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 118.630615][ T6899] Call Trace: [ 118.630623][ T6899] [ 118.630632][ T6899] dump_stack_lvl+0xe8/0x150 [ 118.630668][ T6899] should_fail_ex+0x412/0x560 [ 118.630707][ T6899] should_failslab+0xa8/0x100 [ 118.630736][ T6899] __kmalloc_noprof+0xe8/0x760 [ 118.630761][ T6899] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 118.630791][ T6899] tomoyo_realpath_from_path+0xe3/0x5d0 [ 118.630824][ T6899] ? tomoyo_path_number_perm+0x219/0x630 [ 118.630854][ T6899] tomoyo_path_number_perm+0x246/0x630 [ 118.630886][ T6899] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 118.630919][ T6899] ? __lock_acquire+0x6b5/0x2cf0 [ 118.630959][ T6899] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 118.631012][ T6899] ? __fget_files+0x2a/0x420 [ 118.631034][ T6899] ? __fget_files+0x2a/0x420 [ 118.631051][ T6899] ? __fget_files+0x3a0/0x420 [ 118.631069][ T6899] ? __fget_files+0x2a/0x420 [ 118.631092][ T6899] security_file_ioctl+0xc3/0x2a0 [ 118.631123][ T6899] __se_sys_ioctl+0x47/0x170 [ 118.631152][ T6899] do_syscall_64+0x14d/0xf80 [ 118.631180][ T6899] ? trace_irq_disable+0x3b/0x150 [ 118.631198][ T6899] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.631219][ T6899] ? clear_bhb_loop+0x40/0x90 [ 118.631245][ T6899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.631266][ T6899] RIP: 0033:0x7f55de59c819 [ 118.631285][ T6899] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 118.631302][ T6899] RSP: 002b:00007f55df4dc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 118.631323][ T6899] RAX: ffffffffffffffda RBX: 00007f55de815fa0 RCX: 00007f55de59c819 [ 118.631338][ T6899] RDX: 00002000000000c0 RSI: 00000000000089e2 RDI: 0000000000000003 [ 118.631351][ T6899] RBP: 00007f55df4dc090 R08: 0000000000000000 R09: 0000000000000000 [ 118.631364][ T6899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 118.631376][ T6899] R13: 00007f55de816038 R14: 00007f55de815fa0 R15: 00007ffe269100a8 [ 118.631409][ T6899] [ 118.631418][ T6899] ERROR: Out of memory at tomoyo_realpath_from_path. [ 118.649384][ T48] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.872161][ T48] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.941088][ T6907] netlink: 20 bytes leftover after parsing attributes in process `syz.4.261'. [ 119.119915][ T6912] netlink: 'syz.4.263': attribute type 4 has an invalid length. [ 119.171314][ T6913] netlink: 'syz.4.263': attribute type 4 has an invalid length. [ 119.623569][ T6921] FAULT_INJECTION: forcing a failure. [ 119.623569][ T6921] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 119.637537][ T6921] CPU: 0 UID: 0 PID: 6921 Comm: syz.1.267 Not tainted syzkaller #0 PREEMPT(full) [ 119.637565][ T6921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 119.637578][ T6921] Call Trace: [ 119.637586][ T6921] [ 119.637595][ T6921] dump_stack_lvl+0xe8/0x150 [ 119.637643][ T6921] should_fail_ex+0x412/0x560 [ 119.637680][ T6921] _copy_from_user+0x2d/0xb0 [ 119.637706][ T6921] ___sys_sendmsg+0x1c6/0x360 [ 119.637741][ T6921] ? __pfx____sys_sendmsg+0x10/0x10 [ 119.637774][ T6921] ? kstrtouint+0x6e/0xe0 [ 119.637823][ T6921] ? __fget_files+0x2a/0x420 [ 119.637857][ T6921] ? __fget_files+0x3a0/0x420 [ 119.637885][ T6921] __sys_sendmmsg+0x27c/0x4e0 [ 119.637919][ T6921] ? __pfx___sys_sendmmsg+0x10/0x10 [ 119.637945][ T6921] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 119.638000][ T6921] ? ksys_write+0x242/0x270 [ 119.638036][ T6921] ? __pfx_ksys_write+0x10/0x10 [ 119.638064][ T6921] __x64_sys_sendmmsg+0xa0/0xc0 [ 119.638093][ T6921] do_syscall_64+0x14d/0xf80 [ 119.638120][ T6921] ? trace_irq_disable+0x3b/0x150 [ 119.638137][ T6921] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.638157][ T6921] ? clear_bhb_loop+0x40/0x90 [ 119.638181][ T6921] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.638200][ T6921] RIP: 0033:0x7fee6299c819 [ 119.638218][ T6921] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 119.638234][ T6921] RSP: 002b:00007fee63776028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 119.638255][ T6921] RAX: ffffffffffffffda RBX: 00007fee62c15fa0 RCX: 00007fee6299c819 [ 119.638268][ T6921] RDX: 0000000000000001 RSI: 0000200000004780 RDI: 0000000000000004 [ 119.638280][ T6921] RBP: 00007fee63776090 R08: 0000000000000000 R09: 0000000000000000 [ 119.638292][ T6921] R10: 0000000000000080 R11: 0000000000000246 R12: 0000000000000001 [ 119.638303][ T6921] R13: 00007fee62c16038 R14: 00007fee62c15fa0 R15: 00007fffc466a898 [ 119.638333][ T6921] [ 120.443210][ T48] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.452738][ T48] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.493683][ T48] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.590779][ T6934] netlink: 'syz.0.270': attribute type 23 has an invalid length. [ 120.670341][ T6934] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 120.685139][ T6936] syzkaller0: entered promiscuous mode [ 120.701267][ T6936] syzkaller0: entered allmulticast mode [ 120.745323][ T6934] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 121.607941][ T6985] FAULT_INJECTION: forcing a failure. [ 121.607941][ T6985] name failslab, interval 1, probability 0, space 0, times 0 [ 121.640373][ T6985] CPU: 0 UID: 0 PID: 6985 Comm: syz.0.285 Not tainted syzkaller #0 PREEMPT(full) [ 121.640401][ T6985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 121.640414][ T6985] Call Trace: [ 121.640422][ T6985] [ 121.640431][ T6985] dump_stack_lvl+0xe8/0x150 [ 121.640477][ T6985] should_fail_ex+0x412/0x560 [ 121.640513][ T6985] ? __d_alloc+0x37/0x6f0 [ 121.640536][ T6985] should_failslab+0xa8/0x100 [ 121.640566][ T6985] kmem_cache_alloc_lru_noprof+0x87/0x640 [ 121.640598][ T6985] __d_alloc+0x37/0x6f0 [ 121.640619][ T6985] ? rcu_is_watching+0x15/0xb0 [ 121.640653][ T6985] d_alloc_pseudo+0x21/0xc0 [ 121.640695][ T6985] alloc_file_pseudo+0xdd/0x240 [ 121.640725][ T6985] ? kmem_cache_alloc_noprof+0x15a/0x650 [ 121.640750][ T6985] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 121.640781][ T6985] ? evm_inode_alloc_security+0x40/0xb0 [ 121.640814][ T6985] ? security_inode_alloc+0xd5/0x310 [ 121.640844][ T6985] sock_alloc_file+0xb8/0x2e0 [ 121.640870][ T6985] do_accept+0x3a0/0x760 [ 121.640899][ T6985] ? __pfx_do_accept+0x10/0x10 [ 121.640941][ T6985] __sys_accept4+0x139/0x230 [ 121.640967][ T6985] ? __pfx___sys_accept4+0x10/0x10 [ 121.640992][ T6985] ? __pfx_ksys_write+0x10/0x10 [ 121.641022][ T6985] __x64_sys_accept4+0x9a/0xb0 [ 121.641049][ T6985] do_syscall_64+0x14d/0xf80 [ 121.641080][ T6985] ? trace_irq_disable+0x3b/0x150 [ 121.641100][ T6985] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.641123][ T6985] ? clear_bhb_loop+0x40/0x90 [ 121.641149][ T6985] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.641169][ T6985] RIP: 0033:0x7f55de59c819 [ 121.641192][ T6985] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 121.641209][ T6985] RSP: 002b:00007f55df4dc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 121.641238][ T6985] RAX: ffffffffffffffda RBX: 00007f55de815fa0 RCX: 00007f55de59c819 [ 121.641253][ T6985] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 121.641269][ T6985] RBP: 00007f55df4dc090 R08: 0000000000000000 R09: 0000000000000000 [ 121.641279][ T6985] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000001 [ 121.641289][ T6985] R13: 00007f55de816038 R14: 00007f55de815fa0 R15: 00007ffe269100a8 [ 121.641315][ T6985] [ 121.648542][ T6987] FAULT_INJECTION: forcing a failure. [ 121.648542][ T6987] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 121.927932][ T6987] CPU: 1 UID: 0 PID: 6987 Comm: syz.2.286 Not tainted syzkaller #0 PREEMPT(full) [ 121.927961][ T6987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 121.927974][ T6987] Call Trace: [ 121.927982][ T6987] [ 121.927991][ T6987] dump_stack_lvl+0xe8/0x150 [ 121.928028][ T6987] should_fail_ex+0x412/0x560 [ 121.928068][ T6987] _copy_to_user+0x31/0xb0 [ 121.928098][ T6987] simple_read_from_buffer+0xe1/0x170 [ 121.928137][ T6987] proc_fail_nth_read+0x1bb/0x230 [ 121.928174][ T6987] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 121.928210][ T6987] ? rw_verify_area+0x2a6/0x4d0 [ 121.928246][ T6987] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 121.928280][ T6987] vfs_read+0x20c/0xa70 [ 121.928301][ T6987] ? fdget_pos+0x246/0x320 [ 121.928325][ T6987] ? __pfx___mutex_lock+0x10/0x10 [ 121.928358][ T6987] ? __pfx_vfs_read+0x10/0x10 [ 121.928383][ T6987] ? __fget_files+0x2a/0x420 [ 121.928407][ T6987] ? __fget_files+0x3a0/0x420 [ 121.928425][ T6987] ? __fget_files+0x2a/0x420 [ 121.928453][ T6987] ksys_read+0x150/0x270 [ 121.928479][ T6987] ? __pfx_ksys_read+0x10/0x10 [ 121.928521][ T6987] do_syscall_64+0x14d/0xf80 [ 121.928551][ T6987] ? trace_irq_disable+0x3b/0x150 [ 121.928569][ T6987] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.928590][ T6987] ? clear_bhb_loop+0x40/0x90 [ 121.928616][ T6987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.928637][ T6987] RIP: 0033:0x7f67b6f5d04e [ 121.928657][ T6987] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 121.928674][ T6987] RSP: 002b:00007f67b7ef7fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 121.928697][ T6987] RAX: ffffffffffffffda RBX: 00007f67b7ef86c0 RCX: 00007f67b6f5d04e [ 121.928712][ T6987] RDX: 000000000000000f RSI: 00007f67b7ef80a0 RDI: 0000000000000003 [ 121.928725][ T6987] RBP: 00007f67b7ef8090 R08: 0000000000000000 R09: 0000000000000000 [ 121.928738][ T6987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 121.928749][ T6987] R13: 00007f67b7216038 R14: 00007f67b7215fa0 R15: 00007ffc21c25088 [ 121.928782][ T6987] [ 122.423695][ T6999] bridge3: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 122.478384][ T6998] bridge4: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 122.494076][ T7001] FAULT_INJECTION: forcing a failure. [ 122.494076][ T7001] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 122.516759][ T7001] CPU: 0 UID: 0 PID: 7001 Comm: syz.0.291 Not tainted syzkaller #0 PREEMPT(full) [ 122.516783][ T7001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 122.516793][ T7001] Call Trace: [ 122.516801][ T7001] [ 122.516809][ T7001] dump_stack_lvl+0xe8/0x150 [ 122.516841][ T7001] should_fail_ex+0x412/0x560 [ 122.516879][ T7001] _copy_from_user+0x2d/0xb0 [ 122.516906][ T7001] map_update_elem+0x4d7/0x9d0 [ 122.516936][ T7001] __sys_bpf+0x6fa/0x950 [ 122.516958][ T7001] ? __pfx___sys_bpf+0x10/0x10 [ 122.516993][ T7001] ? ksys_write+0x242/0x270 [ 122.517020][ T7001] ? __pfx_ksys_write+0x10/0x10 [ 122.517040][ T7004] IPv6: addrconf: prefix option has invalid lifetime [ 122.517050][ T7001] __x64_sys_bpf+0x7c/0x90 [ 122.517081][ T7001] do_syscall_64+0x14d/0xf80 [ 122.517109][ T7001] ? trace_irq_disable+0x3b/0x150 [ 122.517169][ T7001] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.517262][ T7001] ? clear_bhb_loop+0x40/0x90 [ 122.517339][ T7001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.517399][ T7001] RIP: 0033:0x7f55de59c819 [ 122.517453][ T7001] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 122.517513][ T7001] RSP: 002b:00007f55df4dc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 122.517578][ T7001] RAX: ffffffffffffffda RBX: 00007f55de815fa0 RCX: 00007f55de59c819 [ 122.517621][ T7001] RDX: 0000000000000020 RSI: 0000200000000000 RDI: 0000000000000002 [ 122.517654][ T7001] RBP: 00007f55df4dc090 R08: 0000000000000000 R09: 0000000000000000 [ 122.517695][ T7001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 122.517727][ T7001] R13: 00007f55de816038 R14: 00007f55de815fa0 R15: 00007ffe269100a8 [ 122.517812][ T7001] [ 122.704939][ T7006] netlink: 44 bytes leftover after parsing attributes in process `syz.1.292'. [ 122.853051][ T7010] netlink: 'syz.0.294': attribute type 4 has an invalid length. [ 122.895146][ T7012] netlink: 48 bytes leftover after parsing attributes in process `syz.3.296'. [ 122.923100][ T7014] syzkaller1: entered promiscuous mode [ 122.956662][ T7014] syzkaller1: entered allmulticast mode [ 122.999928][ T7021] netlink: 28 bytes leftover after parsing attributes in process `syz.1.295'. [ 123.037778][ T7021] netlink: 8 bytes leftover after parsing attributes in process `syz.1.295'. [ 123.101487][ T7028] FAULT_INJECTION: forcing a failure. [ 123.101487][ T7028] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 123.152309][ T7028] CPU: 1 UID: 0 PID: 7028 Comm: syz.0.298 Not tainted syzkaller #0 PREEMPT(full) [ 123.152338][ T7028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 123.152351][ T7028] Call Trace: [ 123.152359][ T7028] [ 123.152368][ T7028] dump_stack_lvl+0xe8/0x150 [ 123.152404][ T7028] should_fail_ex+0x412/0x560 [ 123.152445][ T7028] _copy_to_user+0x31/0xb0 [ 123.152474][ T7028] simple_read_from_buffer+0xe1/0x170 [ 123.152512][ T7028] proc_fail_nth_read+0x1bb/0x230 [ 123.152549][ T7028] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 123.152585][ T7028] ? rw_verify_area+0x2a6/0x4d0 [ 123.152607][ T7028] ? tun_chr_write_iter+0x18a/0x200 [ 123.152631][ T7028] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 123.152665][ T7028] vfs_read+0x20c/0xa70 [ 123.152687][ T7028] ? fdget_pos+0x246/0x320 [ 123.152712][ T7028] ? __pfx___mutex_lock+0x10/0x10 [ 123.152745][ T7028] ? __pfx_vfs_read+0x10/0x10 [ 123.152771][ T7028] ? __fget_files+0x2a/0x420 [ 123.152795][ T7028] ? __fget_files+0x3a0/0x420 [ 123.152813][ T7028] ? __fget_files+0x2a/0x420 [ 123.152843][ T7028] ksys_read+0x150/0x270 [ 123.152869][ T7028] ? __pfx_ksys_read+0x10/0x10 [ 123.152906][ T7028] do_syscall_64+0x14d/0xf80 [ 123.152936][ T7028] ? trace_irq_disable+0x3b/0x150 [ 123.152954][ T7028] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.152976][ T7028] ? clear_bhb_loop+0x40/0x90 [ 123.153003][ T7028] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.153025][ T7028] RIP: 0033:0x7f55de55d04e [ 123.153045][ T7028] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 123.153062][ T7028] RSP: 002b:00007f55df4dbfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 123.153084][ T7028] RAX: ffffffffffffffda RBX: 00007f55df4dc6c0 RCX: 00007f55de55d04e [ 123.153099][ T7028] RDX: 000000000000000f RSI: 00007f55df4dc0a0 RDI: 0000000000000003 [ 123.153111][ T7028] RBP: 00007f55df4dc090 R08: 0000000000000000 R09: 0000000000000000 [ 123.153124][ T7028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 123.153144][ T7028] R13: 00007f55de816038 R14: 00007f55de815fa0 R15: 00007ffe269100a8 [ 123.153178][ T7028] [ 123.259469][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5750 ms [ 123.371326][ T7016] netlink: 68 bytes leftover after parsing attributes in process `syz.1.295'. [ 123.373784][ C0] lec:lec_tx_timeout: lec0 [ 123.396241][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 123.510991][ T5830] block nbd0: Receive control failed (result -107) [ 123.559904][ T7025] nbd0: detected capacity change from 0 to 127 [ 123.627183][ T5825] block nbd0: Dead connection, failed to find a fallback [ 123.651181][ T5825] block nbd0: shutting down sockets [ 123.658794][ T7041] syzkaller0: entered promiscuous mode [ 123.669489][ T7041] syzkaller0: entered allmulticast mode [ 123.675622][ T5825] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 123.690173][ T7041] netlink: 32 bytes leftover after parsing attributes in process `syz.3.299'. [ 123.700739][ T5825] Buffer I/O error on dev nbd0, logical block 0, async page read [ 123.708628][ T5825] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 123.740244][ T7044] FAULT_INJECTION: forcing a failure. [ 123.740244][ T7044] name failslab, interval 1, probability 0, space 0, times 0 [ 123.764823][ T5825] Buffer I/O error on dev nbd0, logical block 1, async page read [ 123.781706][ T5825] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 123.791523][ T7044] CPU: 1 UID: 0 PID: 7044 Comm: syz.1.301 Not tainted syzkaller #0 PREEMPT(full) [ 123.791550][ T7044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 123.791563][ T7044] Call Trace: [ 123.791572][ T7044] [ 123.791580][ T7044] dump_stack_lvl+0xe8/0x150 [ 123.791617][ T7044] should_fail_ex+0x412/0x560 [ 123.791653][ T7044] ? __d_alloc+0x37/0x6f0 [ 123.791676][ T7044] should_failslab+0xa8/0x100 [ 123.791706][ T7044] kmem_cache_alloc_lru_noprof+0x87/0x640 [ 123.791729][ T7044] ? ktime_get_coarse_real_ts64_mg+0x1c5/0x1e0 [ 123.791764][ T7044] __d_alloc+0x37/0x6f0 [ 123.791792][ T7044] d_alloc_pseudo+0x21/0xc0 [ 123.791817][ T7044] alloc_file_pseudo+0xdd/0x240 [ 123.791852][ T7044] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 123.791884][ T7044] ? __pfx_hugetlb_reserve_pages+0x10/0x10 [ 123.791914][ T7044] ? rcu_is_watching+0x15/0xb0 [ 123.791945][ T7044] ? hugetlbfs_get_inode+0x448/0x690 [ 123.791992][ T7044] hugetlb_file_setup+0x3ee/0x630 [ 123.792021][ T7044] ksys_mmap_pgoff+0x22e/0x760 [ 123.792067][ T7044] do_syscall_64+0x14d/0xf80 [ 123.792097][ T7044] ? trace_irq_disable+0x3b/0x150 [ 123.792114][ T7044] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.792136][ T7044] ? clear_bhb_loop+0x40/0x90 [ 123.792161][ T7044] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.792182][ T7044] RIP: 0033:0x7fee6299c819 [ 123.792201][ T7044] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 123.792218][ T7044] RSP: 002b:00007fee63776028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 123.792239][ T7044] RAX: ffffffffffffffda RBX: 00007fee62c15fa0 RCX: 00007fee6299c819 [ 123.792254][ T7044] RDX: 000000000000000b RSI: 0000000000800000 RDI: 0000200000000000 [ 123.792267][ T7044] RBP: 00007fee63776090 R08: ffffffffffffffff R09: 0000000000000000 [ 123.792281][ T7044] R10: 00000000000c3072 R11: 0000000000000246 R12: 0000000000000001 [ 123.792293][ T7044] R13: 00007fee62c16038 R14: 00007fee62c15fa0 R15: 00007fffc466a898 [ 123.792326][ T7044] [ 124.008053][ T7041] netlink: 72 bytes leftover after parsing attributes in process `syz.3.299'. [ 124.028890][ T5825] Buffer I/O error on dev nbd0, logical block 2, async page read [ 124.037100][ T5825] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 124.050806][ T5825] Buffer I/O error on dev nbd0, logical block 3, async page read [ 124.058849][ T5825] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 124.069590][ T5825] Buffer I/O error on dev nbd0, logical block 0, async page read [ 124.077698][ T5825] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 124.095520][ T5825] Buffer I/O error on dev nbd0, logical block 1, async page read [ 124.103735][ T5825] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 124.142815][ T5825] Buffer I/O error on dev nbd0, logical block 2, async page read [ 124.151672][ T5825] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 124.162197][ T5825] Buffer I/O error on dev nbd0, logical block 3, async page read [ 124.170900][ T5825] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 124.180747][ T5825] Buffer I/O error on dev nbd0, logical block 0, async page read [ 124.188612][ T5825] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 124.198580][ T5825] Buffer I/O error on dev nbd0, logical block 1, async page read [ 124.232314][ T5825] ldm_validate_partition_table(): Disk read failed. [ 124.262778][ T5825] Dev nbd0: unable to read RDB block 0 [ 124.271553][ T7053] netlink: 'syz.4.302': attribute type 4 has an invalid length. [ 124.281184][ T5825] nbd0: unable to read partition table [ 124.320678][ T5825] ldm_validate_partition_table(): Disk read failed. [ 124.363105][ T5825] Dev nbd0: unable to read RDB block 0 [ 124.400054][ T5825] nbd0: unable to read partition table [ 124.709174][ T7075] netlink: 4 bytes leftover after parsing attributes in process `syz.3.307'. [ 124.761695][ T7075] team0: left promiscuous mode [ 124.766542][ T7075] team_slave_0: left promiscuous mode [ 124.778969][ T7077] netlink: 20 bytes leftover after parsing attributes in process `syz.1.310'. [ 124.807055][ T7075] team_slave_1: left promiscuous mode [ 124.838903][ T7075] bridge1: left promiscuous mode [ 124.869747][ T7075] bridge0: port 3(team0) entered disabled state [ 124.888886][ T7075] bridge_slave_1: left promiscuous mode [ 124.947596][ T7075] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.971583][ T7075] bridge_slave_0: left promiscuous mode [ 124.992652][ T7091] FAULT_INJECTION: forcing a failure. [ 124.992652][ T7091] name failslab, interval 1, probability 0, space 0, times 0 [ 124.998623][ T7075] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.034449][ T7092] netlink: 8 bytes leftover after parsing attributes in process `syz.4.306'. [ 125.050041][ T7091] CPU: 1 UID: 0 PID: 7091 Comm: syz.1.313 Not tainted syzkaller #0 PREEMPT(full) [ 125.050067][ T7091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 125.050079][ T7091] Call Trace: [ 125.050087][ T7091] [ 125.050095][ T7091] dump_stack_lvl+0xe8/0x150 [ 125.050132][ T7091] should_fail_ex+0x412/0x560 [ 125.050184][ T7091] should_failslab+0xa8/0x100 [ 125.050213][ T7091] ? alloc_empty_file+0x55/0x1d0 [ 125.050253][ T7091] kmem_cache_alloc_noprof+0x87/0x650 [ 125.050285][ T7091] alloc_empty_file+0x55/0x1d0 [ 125.050318][ T7091] alloc_file_pseudo+0x155/0x240 [ 125.050354][ T7091] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 125.050387][ T7091] ? __pfx_hugetlb_reserve_pages+0x10/0x10 [ 125.050417][ T7091] ? rcu_is_watching+0x15/0xb0 [ 125.050449][ T7091] ? hugetlbfs_get_inode+0x448/0x690 [ 125.050484][ T7091] hugetlb_file_setup+0x3ee/0x630 [ 125.050515][ T7091] ksys_mmap_pgoff+0x22e/0x760 [ 125.050557][ T7091] do_syscall_64+0x14d/0xf80 [ 125.050587][ T7091] ? trace_irq_disable+0x3b/0x150 [ 125.050606][ T7091] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.050628][ T7091] ? clear_bhb_loop+0x40/0x90 [ 125.050655][ T7091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.050676][ T7091] RIP: 0033:0x7fee6299c819 [ 125.050695][ T7091] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 125.050713][ T7091] RSP: 002b:00007fee63776028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 125.050734][ T7091] RAX: ffffffffffffffda RBX: 00007fee62c15fa0 RCX: 00007fee6299c819 [ 125.050749][ T7091] RDX: 000000000000000b RSI: 0000000000800000 RDI: 0000200000000000 [ 125.050762][ T7091] RBP: 00007fee63776090 R08: ffffffffffffffff R09: 0000000000000000 [ 125.050776][ T7091] R10: 00000000000c3072 R11: 0000000000000246 R12: 0000000000000001 [ 125.050789][ T7091] R13: 00007fee62c16038 R14: 00007fee62c15fa0 R15: 00007fffc466a898 [ 125.050823][ T7091] [ 125.252470][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 125.518173][ T7103] netlink: 'syz.1.316': attribute type 4 has an invalid length. [ 125.583338][ T7111] FAULT_INJECTION: forcing a failure. [ 125.583338][ T7111] name failslab, interval 1, probability 0, space 0, times 0 [ 125.628727][ T7111] CPU: 1 UID: 0 PID: 7111 Comm: syz.2.318 Not tainted syzkaller #0 PREEMPT(full) [ 125.628756][ T7111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 125.628780][ T7111] Call Trace: [ 125.628788][ T7111] [ 125.628796][ T7111] dump_stack_lvl+0xe8/0x150 [ 125.628833][ T7111] should_fail_ex+0x412/0x560 [ 125.628871][ T7111] should_failslab+0xa8/0x100 [ 125.628898][ T7111] ? skb_clone+0x212/0x3a0 [ 125.628937][ T7111] kmem_cache_alloc_noprof+0x87/0x650 [ 125.628959][ T7111] ? __netlink_lookup+0xc6/0x8b0 [ 125.628993][ T7111] skb_clone+0x212/0x3a0 [ 125.629026][ T7111] __netlink_deliver_tap+0x404/0x850 [ 125.629063][ T7111] ? netlink_deliver_tap+0x2e/0x1b0 [ 125.629089][ T7111] netlink_deliver_tap+0x19c/0x1b0 [ 125.629114][ T7111] netlink_unicast+0x7e3/0x9b0 [ 125.629144][ T7111] ? __pfx_netlink_unicast+0x10/0x10 [ 125.629167][ T7111] ? netlink_sendmsg+0x650/0xb40 [ 125.629190][ T7111] ? skb_put+0x11b/0x210 [ 125.629224][ T7111] netlink_sendmsg+0x813/0xb40 [ 125.629257][ T7111] ? __pfx_netlink_sendmsg+0x10/0x10 [ 125.629285][ T7111] ? aa_sock_msg_perm+0xf1/0x1b0 [ 125.629320][ T7111] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 125.629349][ T7111] ____sys_sendmsg+0x972/0x9f0 [ 125.629387][ T7111] ? __pfx_____sys_sendmsg+0x10/0x10 [ 125.629424][ T7111] ? import_iovec+0x73/0xa0 [ 125.629452][ T7111] ___sys_sendmsg+0x2a5/0x360 [ 125.629487][ T7111] ? __pfx____sys_sendmsg+0x10/0x10 [ 125.629552][ T7111] ? __fget_files+0x2a/0x420 [ 125.629571][ T7111] ? __fget_files+0x3a0/0x420 [ 125.629600][ T7111] __x64_sys_sendmsg+0x1bd/0x2a0 [ 125.629632][ T7111] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 125.629671][ T7111] ? __pfx_ksys_write+0x10/0x10 [ 125.629707][ T7111] do_syscall_64+0x14d/0xf80 [ 125.629737][ T7111] ? trace_irq_disable+0x3b/0x150 [ 125.629755][ T7111] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.629776][ T7111] ? clear_bhb_loop+0x40/0x90 [ 125.629801][ T7111] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.629822][ T7111] RIP: 0033:0x7f67b6f9c819 [ 125.629842][ T7111] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 125.629859][ T7111] RSP: 002b:00007f67b7ef8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 125.629881][ T7111] RAX: ffffffffffffffda RBX: 00007f67b7215fa0 RCX: 00007f67b6f9c819 [ 125.629896][ T7111] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003 [ 125.629909][ T7111] RBP: 00007f67b7ef8090 R08: 0000000000000000 R09: 0000000000000000 [ 125.629929][ T7111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 125.629942][ T7111] R13: 00007f67b7216038 R14: 00007f67b7215fa0 R15: 00007ffc21c25088 [ 125.629993][ T7111] [ 125.939528][ T7111] netlink: 20 bytes leftover after parsing attributes in process `syz.2.318'. [ 126.199701][ T7125] netlink: 8 bytes leftover after parsing attributes in process `syz.0.323'. [ 126.219776][ T7125] netlink: 'syz.0.323': attribute type 30 has an invalid length. [ 126.227577][ T7125] netlink: 4 bytes leftover after parsing attributes in process `syz.0.323'. [ 126.338794][ T7128] syzkaller0: entered promiscuous mode [ 126.355094][ T7128] syzkaller0: entered allmulticast mode [ 126.807691][ T7145] syzkaller0: entered promiscuous mode [ 126.819314][ T7145] syzkaller0: entered allmulticast mode [ 126.858198][ T7153] netlink: 20 bytes leftover after parsing attributes in process `syz.4.337'. [ 126.927671][ T7158] netlink: 'syz.1.339': attribute type 1 has an invalid length. [ 127.262324][ T7171] bond2: entered promiscuous mode [ 127.319715][ T7171] bond2: entered allmulticast mode [ 127.345089][ T7171] 8021q: adding VLAN 0 to HW filter on device bond2 [ 127.353450][ T7180] netlink: 16 bytes leftover after parsing attributes in process `syz.2.347'. [ 127.365803][ T7180] netlink: 92 bytes leftover after parsing attributes in process `syz.2.347'. [ 127.614443][ T7196] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 127.877833][ T7209] syzkaller0: entered promiscuous mode [ 127.884062][ T7209] syzkaller0: entered allmulticast mode [ 128.270237][ T7229] syzkaller0: entered promiscuous mode [ 128.276403][ T7229] syzkaller0: entered allmulticast mode [ 128.913237][ T7253] netem: change failed [ 129.009422][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5610 ms [ 129.017560][ C0] lec:lec_tx_timeout: lec0 [ 129.022717][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 129.157483][ T7271] atomic_op ffff88807c214998 conn xmit_atomic 0000000000000000 [ 129.437984][ T7281] bridge2: entered promiscuous mode [ 129.443360][ T7281] bridge2: entered allmulticast mode [ 129.451673][ T7281] team0: Port device bridge2 added [ 130.030258][ T7322] netlink: 'syz.0.395': attribute type 4 has an invalid length. [ 130.439596][ T7340] netlink: 'syz.2.400': attribute type 11 has an invalid length. [ 130.744717][ T7348] __nla_validate_parse: 3 callbacks suppressed [ 130.744738][ T7348] netlink: 252 bytes leftover after parsing attributes in process `syz.2.402'. [ 130.960755][ T7355] netlink: 16 bytes leftover after parsing attributes in process `syz.1.404'. [ 131.007352][ T7355] netlink: 72 bytes leftover after parsing attributes in process `syz.1.404'. [ 131.291505][ T7371] netlink: 'syz.1.410': attribute type 1 has an invalid length. [ 131.500293][ T7384] netlink: 4 bytes leftover after parsing attributes in process `syz.1.412'. [ 131.516481][ T7377] IPVS: Error connecting to the multicast addr [ 131.790889][ T7395] netlink: 'syz.2.416': attribute type 4 has an invalid length. [ 131.866306][ T7398] netlink: 252 bytes leftover after parsing attributes in process `syz.3.417'. [ 132.231571][ T7406] netlink: 16 bytes leftover after parsing attributes in process `syz.0.420'. [ 132.246550][ T7406] netlink: 92 bytes leftover after parsing attributes in process `syz.0.420'. [ 132.644871][ T7419] netlink: 'syz.1.425': attribute type 9 has an invalid length. [ 132.859736][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.892395][ T7428] netlink: 2 bytes leftover after parsing attributes in process `syz.2.429'. [ 133.247764][ T7448] netlink: 'syz.0.437': attribute type 1 has an invalid length. [ 133.481533][ T7448] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 133.782244][ T7461] bond1: option lp_interval: invalid value (0) [ 133.797212][ T7461] bond1: option lp_interval: allowed values 1 - 2147483647 [ 133.806974][ T7461] bond1 (unregistering): Released all slaves [ 133.817111][ T7467] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 133.864254][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.887747][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.896527][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.928072][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.045680][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 134.053801][ C0] lec:lec_tx_timeout: lec0 [ 134.058573][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 134.099352][ T7474] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.446'. [ 134.624093][ T7492] netlink: 10 bytes leftover after parsing attributes in process `syz.3.451'. [ 134.637146][ T7492] openvswitch: netlink: IP tunnel dst address not specified [ 134.727056][ T7494] netlink: 'syz.2.452': attribute type 21 has an invalid length. [ 134.742561][ T7494] netlink: 'syz.2.452': attribute type 1 has an invalid length. [ 134.887738][ T7500] netlink: 'syz.2.455': attribute type 25 has an invalid length. [ 134.934972][ T7504] xt_ecn: cannot match TCP bits for non-tcp packets [ 135.395796][ T7316] Set syz1 is full, maxelem 65536 reached [ 135.510680][ T7530] netlink: 'syz.3.468': attribute type 2 has an invalid length. [ 135.565437][ T7530] vþ: entered promiscuous mode [ 135.710536][ T7536] tipc: Started in network mode [ 135.715488][ T7536] tipc: Node identity 12ac90e40606, cluster identity 4711 [ 135.750708][ T7536] tipc: Enabled bearer , priority 0 [ 135.874945][ T7536] syzkaller0: entered promiscuous mode [ 135.880644][ T7536] syzkaller0: entered allmulticast mode [ 135.887568][ T7536] tipc: Resetting bearer [ 135.896230][ T7544] netlink: 'syz.3.474': attribute type 1 has an invalid length. [ 135.924488][ T7535] tipc: Resetting bearer [ 136.025985][ T7556] netlink: 'syz.1.475': attribute type 16 has an invalid length. [ 136.039814][ T7556] __nla_validate_parse: 3 callbacks suppressed [ 136.039833][ T7556] netlink: 20 bytes leftover after parsing attributes in process `syz.1.475'. [ 136.209039][ T7568] netlink: 28 bytes leftover after parsing attributes in process `syz.4.481'. [ 137.188180][ T7535] tipc: Disabling bearer [ 137.198112][ T7544] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 137.266464][ T7589] SET target dimension over the limit! [ 137.299742][ T5828] tipc: Node number set to 346722532 [ 137.469702][ T7593] netlink: 8 bytes leftover after parsing attributes in process `syz.0.488'. [ 137.549183][ T7599] FAULT_INJECTION: forcing a failure. [ 137.549183][ T7599] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 137.579700][ T7599] CPU: 1 UID: 0 PID: 7599 Comm: syz.3.492 Not tainted syzkaller #0 PREEMPT(full) [ 137.579729][ T7599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 137.579742][ T7599] Call Trace: [ 137.579751][ T7599] [ 137.579760][ T7599] dump_stack_lvl+0xe8/0x150 [ 137.579796][ T7599] should_fail_ex+0x412/0x560 [ 137.579844][ T7599] _copy_from_iter+0x1d3/0x1670 [ 137.579869][ T7599] ? unwind_next_frame+0xa5/0x23c0 [ 137.579909][ T7599] ? __lock_acquire+0x6b5/0x2cf0 [ 137.579937][ T7599] ? __pfx__copy_from_iter+0x10/0x10 [ 137.579977][ T7599] tun_get_user+0x516/0x3dd0 [ 137.580016][ T7599] ? aa_file_perm+0x192/0x15e0 [ 137.580044][ T7599] ? aa_file_perm+0x50e/0x15e0 [ 137.580066][ T7599] ? __pfx_tun_get_user+0x10/0x10 [ 137.580089][ T7599] ? aa_file_perm+0x192/0x15e0 [ 137.580117][ T7599] ? __lock_acquire+0x6b5/0x2cf0 [ 137.580156][ T7599] ? ref_tracker_alloc+0x35c/0x4c0 [ 137.580181][ T7599] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 137.580209][ T7599] ? tun_get+0x1c/0x2f0 [ 137.580241][ T7599] ? tun_get+0x1c/0x2f0 [ 137.580265][ T7599] ? tun_get+0x1c/0x2f0 [ 137.580295][ T7599] tun_chr_write_iter+0x113/0x200 [ 137.580323][ T7599] vfs_write+0x61d/0xb90 [ 137.580356][ T7599] ? __pfx_vfs_write+0x10/0x10 [ 137.580403][ T7599] ? __fget_files+0x2a/0x420 [ 137.580432][ T7599] ksys_write+0x150/0x270 [ 137.580458][ T7599] ? __pfx_ksys_write+0x10/0x10 [ 137.580494][ T7599] do_syscall_64+0x14d/0xf80 [ 137.580534][ T7599] ? trace_irq_disable+0x3b/0x150 [ 137.580552][ T7599] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.580573][ T7599] ? clear_bhb_loop+0x40/0x90 [ 137.580599][ T7599] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.580620][ T7599] RIP: 0033:0x7f1e0599c819 [ 137.580639][ T7599] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 137.580657][ T7599] RSP: 002b:00007f1e06840028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 137.580678][ T7599] RAX: ffffffffffffffda RBX: 00007f1e05c15fa0 RCX: 00007f1e0599c819 [ 137.580693][ T7599] RDX: 000000000001000d RSI: 0000200000000000 RDI: 0000000000000003 [ 137.580706][ T7599] RBP: 00007f1e06840090 R08: 0000000000000000 R09: 0000000000000000 [ 137.580719][ T7599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 137.580731][ T7599] R13: 00007f1e05c16038 R14: 00007f1e05c15fa0 R15: 00007ffeb2515178 [ 137.580764][ T7599] [ 137.952559][ T7616] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input5 [ 138.091495][ T7618] skbuff: bad partial csum: csum=65535/0 headroom=64 headlen=65537 [ 138.603125][ T7650] netlink: 'syz.3.509': attribute type 29 has an invalid length. [ 138.628213][ T7650] netlink: 'syz.3.509': attribute type 29 has an invalid length. [ 138.636564][ T7648] netlink: 8 bytes leftover after parsing attributes in process `syz.1.505'. [ 138.646471][ T7650] netlink: 'syz.3.509': attribute type 32 has an invalid length. [ 138.660400][ T7650] netlink: 500 bytes leftover after parsing attributes in process `syz.3.509'. [ 138.669776][ T7648] openvswitch: netlink: Missing key (keys=40, expected=80) [ 138.833153][ T7658] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 138.948521][ T7667] blkio.reset_stats is deprecated [ 139.070078][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 139.078166][ C0] lec:lec_tx_timeout: lec0 [ 139.088763][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 139.708870][ T7696] skbuff: bad partial csum: csum=65535/0 headroom=64 headlen=65537 [ 140.320781][ T7729] netlink: 'syz.0.535': attribute type 1 has an invalid length. [ 140.415515][ T7733] netlink: 36 bytes leftover after parsing attributes in process `syz.0.535'. [ 140.523539][ T7740] netlink: 12 bytes leftover after parsing attributes in process `syz.1.538'. [ 140.534472][ T7729] 8021q: adding VLAN 0 to HW filter on device bond1 [ 140.558608][ T7739] bond1: (slave gretap1): making interface the new active one [ 140.567224][ T7739] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 140.571509][ T7741] netlink: 12 bytes leftover after parsing attributes in process `syz.2.539'. [ 140.688775][ T7740] bond1: entered promiscuous mode [ 140.722906][ T7755] netlink: 'syz.1.538': attribute type 11 has an invalid length. [ 140.750002][ T7740] 8021q: adding VLAN 0 to HW filter on device bond1 [ 140.754890][ T7755] netlink: 228 bytes leftover after parsing attributes in process `syz.1.538'. [ 140.974046][ T7762] netlink: 7 bytes leftover after parsing attributes in process `syz.0.541'. [ 141.232649][ T7777] __nla_validate_parse: 2 callbacks suppressed [ 141.232669][ T7777] netlink: 44 bytes leftover after parsing attributes in process `syz.3.546'. [ 141.533530][ T7794] netlink: 16 bytes leftover after parsing attributes in process `syz.4.547'. [ 141.834054][ T7814] netlink: 76 bytes leftover after parsing attributes in process `syz.3.557'. [ 141.876005][ T7798] netlink: 'syz.0.555': attribute type 19 has an invalid length. [ 141.901570][ T7798] netlink: 4 bytes leftover after parsing attributes in process `syz.0.555'. [ 142.111040][ T7798] netlink: 'syz.0.555': attribute type 19 has an invalid length. [ 142.118966][ T7798] netlink: 4 bytes leftover after parsing attributes in process `syz.0.555'. [ 143.089423][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 143.449450][ T58] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 143.458466][ T58] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 143.549972][ T58] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 143.558759][ T58] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 143.697820][ T7858] netlink: 60 bytes leftover after parsing attributes in process `syz.1.569'. [ 143.763582][ T7859] syzkaller0: entered promiscuous mode [ 143.812375][ T7859] syzkaller0: entered allmulticast mode [ 144.092076][ T7877] IPVS: Error connecting to the multicast addr [ 144.099262][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 144.107346][ C0] lec:lec_tx_timeout: lec0 [ 144.112261][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 144.711320][ T7908] syzkaller0: entered promiscuous mode [ 144.716876][ T7908] syzkaller0: entered allmulticast mode [ 144.768229][ T7918] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 144.786734][ T7915] netlink: 24 bytes leftover after parsing attributes in process `syz.0.593'. [ 144.799445][ T7918] netlink: 16 bytes leftover after parsing attributes in process `syz.3.594'. [ 145.500588][ T7949] syzkaller0: entered promiscuous mode [ 145.516475][ T7949] syzkaller0: entered allmulticast mode [ 145.642489][ T7959] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 146.188173][ T7994] netlink: 368 bytes leftover after parsing attributes in process `syz.2.622'. [ 146.235372][ T7994] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 146.473284][ T8007] syzkaller0: entered promiscuous mode [ 146.499308][ T8007] syzkaller0: entered allmulticast mode [ 146.907161][ T8035] IPVS: set_ctl: invalid protocol: 58 172.20.20.19:20003 [ 147.064264][ T8043] netlink: 32 bytes leftover after parsing attributes in process `syz.3.639'. [ 147.077566][ T5830] Bluetooth: hci3: link tx timeout [ 147.086985][ T5830] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 147.294186][ T8055] netlink: 'syz.3.643': attribute type 16 has an invalid length. [ 147.333572][ T8055] netlink: 'syz.3.643': attribute type 17 has an invalid length. [ 147.348445][ T8057] syzkaller0: entered promiscuous mode [ 147.362221][ T8057] syzkaller0: entered allmulticast mode [ 147.377641][ T8055] lo: left allmulticast mode [ 147.403080][ T8055] tunl0: left allmulticast mode [ 147.425540][ T8055] gre0: left allmulticast mode [ 147.438650][ T8055] gretap0: left allmulticast mode [ 147.450400][ T8055] erspan0: left allmulticast mode [ 147.458564][ T8055] ip_vti0: left allmulticast mode [ 147.468566][ T8055] ip6_vti0: left allmulticast mode [ 147.477464][ T8055] sit0: left allmulticast mode [ 147.491478][ T8055] ip6tnl0: left allmulticast mode [ 147.500221][ T8055] ip6gre0: left allmulticast mode [ 147.507975][ T8055] ip6gretap0: left allmulticast mode [ 147.518603][ T8055] vcan0: left allmulticast mode [ 147.525762][ T8055] bond0: left allmulticast mode [ 147.533562][ T8055] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.543142][ T8055] team0: left allmulticast mode [ 147.549150][ T8055] 8021q: adding VLAN 0 to HW filter on device team0 [ 147.567180][ T8055] dummy0: left allmulticast mode [ 147.577940][ T8055] nlmon0: left allmulticast mode [ 147.588660][ T8055] caif0: left allmulticast mode [ 147.594358][ T8055] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 147.640955][ T8068] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.646'. [ 148.603480][ T8109] x_tables: duplicate underflow at hook 2 [ 148.721785][ T8112] netlink: 48 bytes leftover after parsing attributes in process `syz.0.663'. [ 148.919475][ T8124] netlink: 8 bytes leftover after parsing attributes in process `syz.0.663'. [ 148.934716][ T8123] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 148.942078][ T8123] IPv6: NLM_F_CREATE should be set when creating new route [ 148.973685][ T8123] netlink: 8 bytes leftover after parsing attributes in process `syz.2.667'. [ 149.169706][ T5143] Bluetooth: hci3: command 0x0406 tx timeout [ 149.484153][ T8147] FAULT_INJECTION: forcing a failure. [ 149.484153][ T8147] name failslab, interval 1, probability 0, space 0, times 0 [ 149.520739][ T8150] netlink: 12 bytes leftover after parsing attributes in process `syz.2.678'. [ 149.571816][ T8147] CPU: 0 UID: 0 PID: 8147 Comm: syz.0.677 Not tainted syzkaller #0 PREEMPT(full) [ 149.571858][ T8147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 149.571871][ T8147] Call Trace: [ 149.571880][ T8147] [ 149.571889][ T8147] dump_stack_lvl+0xe8/0x150 [ 149.571926][ T8147] should_fail_ex+0x412/0x560 [ 149.571966][ T8147] should_failslab+0xa8/0x100 [ 149.572009][ T8147] __kmalloc_noprof+0xe8/0x760 [ 149.572033][ T8147] ? tomoyo_encode+0x28b/0x550 [ 149.572060][ T8147] tomoyo_encode+0x28b/0x550 [ 149.572086][ T8147] tomoyo_realpath_from_path+0x58d/0x5d0 [ 149.572120][ T8147] ? tomoyo_path_number_perm+0x219/0x630 [ 149.572150][ T8147] tomoyo_path_number_perm+0x246/0x630 [ 149.572182][ T8147] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 149.572214][ T8147] ? __lock_acquire+0x6b5/0x2cf0 [ 149.572254][ T8147] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 149.572307][ T8147] ? __fget_files+0x2a/0x420 [ 149.572329][ T8147] ? __fget_files+0x2a/0x420 [ 149.572347][ T8147] ? __fget_files+0x3a0/0x420 [ 149.572364][ T8147] ? __fget_files+0x2a/0x420 [ 149.572387][ T8147] security_file_ioctl+0xc3/0x2a0 [ 149.572418][ T8147] __se_sys_ioctl+0x47/0x170 [ 149.572447][ T8147] do_syscall_64+0x14d/0xf80 [ 149.572475][ T8147] ? trace_irq_disable+0x3b/0x150 [ 149.572493][ T8147] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.572512][ T8147] ? clear_bhb_loop+0x40/0x90 [ 149.572533][ T8147] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.572550][ T8147] RIP: 0033:0x7f55de59c819 [ 149.572565][ T8147] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 149.572580][ T8147] RSP: 002b:00007f55df4dc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 149.572598][ T8147] RAX: ffffffffffffffda RBX: 00007f55de815fa0 RCX: 00007f55de59c819 [ 149.572611][ T8147] RDX: 0000200000000040 RSI: 00000000800442d2 RDI: 0000000000000004 [ 149.572622][ T8147] RBP: 00007f55df4dc090 R08: 0000000000000000 R09: 0000000000000000 [ 149.572632][ T8147] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 149.572642][ T8147] R13: 00007f55de816038 R14: 00007f55de815fa0 R15: 00007ffe269100a8 [ 149.572668][ T8147] [ 149.573190][ T8147] ERROR: Out of memory at tomoyo_realpath_from_path. [ 149.807244][ T8157] netlink: 104 bytes leftover after parsing attributes in process `syz.3.681'. [ 150.098399][ T8172] syz.4.687: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 150.115246][ T8172] CPU: 1 UID: 0 PID: 8172 Comm: syz.4.687 Not tainted syzkaller #0 PREEMPT(full) [ 150.115275][ T8172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 150.115288][ T8172] Call Trace: [ 150.115297][ T8172] [ 150.115308][ T8172] dump_stack_lvl+0xe8/0x150 [ 150.115347][ T8172] warn_alloc+0x249/0x340 [ 150.115378][ T8172] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 150.115413][ T8172] ? __pfx_warn_alloc+0x10/0x10 [ 150.115448][ T8172] ? kasan_save_track+0x4f/0x80 [ 150.115473][ T8172] ? kasan_save_track+0x3e/0x80 [ 150.115495][ T8172] ? __kasan_kmalloc+0x93/0xb0 [ 150.115521][ T8172] ? __kmalloc_cache_noprof+0x31c/0x660 [ 150.115546][ T8172] ? xskq_create+0x56/0x170 [ 150.115573][ T8172] ? xsk_setsockopt+0x54c/0x990 [ 150.115597][ T8172] ? do_sock_setsockopt+0x17c/0x1b0 [ 150.115625][ T8172] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 150.115652][ T8172] ? do_syscall_64+0x14d/0xf80 [ 150.115687][ T8172] __vmalloc_node_range_noprof+0x132/0x1730 [ 150.115759][ T8172] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 150.115793][ T8172] ? __kasan_kmalloc+0x93/0xb0 [ 150.115827][ T8172] vmalloc_user_noprof+0xad/0xe0 [ 150.115853][ T8172] ? xskq_create+0xbf/0x170 [ 150.115882][ T8172] xskq_create+0xbf/0x170 [ 150.115920][ T8172] xsk_init_queue+0x8a/0xe0 [ 150.115951][ T8172] xsk_setsockopt+0x54c/0x990 [ 150.115981][ T8172] ? __pfx_xsk_setsockopt+0x10/0x10 [ 150.116008][ T8172] ? __pfx_aa_sk_perm+0x10/0x10 [ 150.116046][ T8172] ? aa_sock_opt_perm+0xff/0x1a0 [ 150.116071][ T8172] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 150.116098][ T8172] ? __pfx_xsk_setsockopt+0x10/0x10 [ 150.116127][ T8172] do_sock_setsockopt+0x17c/0x1b0 [ 150.116162][ T8172] __x64_sys_setsockopt+0x13d/0x1b0 [ 150.116197][ T8172] do_syscall_64+0x14d/0xf80 [ 150.116228][ T8172] ? trace_irq_disable+0x3b/0x150 [ 150.116248][ T8172] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.116272][ T8172] ? clear_bhb_loop+0x40/0x90 [ 150.116299][ T8172] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.116321][ T8172] RIP: 0033:0x7f001119c819 [ 150.116341][ T8172] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 150.116360][ T8172] RSP: 002b:00007f0012028028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 150.116382][ T8172] RAX: ffffffffffffffda RBX: 00007f0011415fa0 RCX: 00007f001119c819 [ 150.116399][ T8172] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 150.116412][ T8172] RBP: 00007f0011232c91 R08: 0000000000000004 R09: 0000000000000000 [ 150.116426][ T8172] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 150.116440][ T8172] R13: 00007f0011416038 R14: 00007f0011415fa0 R15: 00007ffc79c58318 [ 150.116476][ T8172] [ 150.116583][ T8172] Mem-Info: [ 150.139276][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 6020 ms [ 150.229638][ T8172] active_anon:6157 inactive_anon:0 isolated_anon:0 [ 150.229638][ T8172] active_file:3473 inactive_file:39957 isolated_file:0 [ 150.229638][ T8172] unevictable:768 dirty:134 writeback:0 [ 150.229638][ T8172] slab_reclaimable:10754 slab_unreclaimable:97230 [ 150.229638][ T8172] mapped:29542 shmem:1364 pagetables:1211 [ 150.229638][ T8172] sec_pagetables:0 bounce:0 [ 150.229638][ T8172] kernel_misc_reclaimable:0 [ 150.229638][ T8172] free:1332956 free_pcp:9264 free_cma:0 [ 150.230182][ C0] lec:lec_tx_timeout: lec0 [ 150.249594][ T8172] Node 0 active_anon:24628kB inactive_anon:0kB active_file:13892kB inactive_file:159620kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118168kB dirty:536kB writeback:0kB shmem:3920kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12400kB pagetables:4708kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 150.257726][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 150.377650][ T8172] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 150.643248][ T8172] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 150.711537][ T8185] netlink: 12 bytes leftover after parsing attributes in process `syz.3.689'. [ 150.774601][ T8188] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 150.800324][ T8172] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 150.829308][ T8172] Node 0 DMA32 free:1370796kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:25028kB inactive_anon:0kB active_file:13892kB inactive_file:159620kB unevictable:1536kB writepending:536kB zspages:0kB present:3129332kB managed:2552564kB mlocked:0kB bounce:0kB free_pcp:36244kB local_pcp:16104kB free_cma:0kB [ 150.858206][ T8195] netlink: 8 bytes leftover after parsing attributes in process `syz.3.689'. [ 150.865631][ T8188] netem: change failed [ 150.951256][ T8198] netlink: 8 bytes leftover after parsing attributes in process `syz.2.692'. [ 150.959470][ T8172] lowmem_reserve[]: 0 0 0 0 0 [ 150.971473][ T8198] netlink: 'syz.2.692': attribute type 12 has an invalid length. [ 150.975263][ T8172] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:872kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 151.051210][ T58] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.059766][ T8172] lowmem_reserve[]: 0 0 0 0 0 [ 151.060646][ T58] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.064725][ T8172] Node 1 Normal free:3944984kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 151.075662][ T8198] netlink: 'syz.2.692': attribute type 12 has an invalid length. [ 151.108728][ T8172] lowmem_reserve[]: 0 0 0 0 0 [ 151.167826][ T8172] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 151.186589][ T58] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.195654][ T58] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.245894][ T8172] Node 0 DMA32: 2499*4kB (UME) 1028*8kB (UME) 367*16kB (UME) 50*32kB (UME) 47*64kB (UME) 7*128kB (UM) 17*256kB (UM) 13*512kB (ME) 5*1024kB (UM) 3*2048kB (UM) 322*4096kB (M) = 1370780kB [ 151.294992][ T8172] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 151.325490][ T8172] Node 1 Normal: 2*4kB (UM) 8*8kB (UM) 5*16kB (UM) 8*32kB (UM) 10*64kB (UM) 6*128kB (UM) 5*256kB (UM) 5*512kB (UM) 3*1024kB (UM) 2*2048kB (U) 960*4096kB (M) = 3944984kB [ 151.395767][ T8172] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 151.429655][ T8172] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 151.463603][ T8172] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 151.487937][ T8216] netlink: 'syz.3.700': attribute type 1 has an invalid length. [ 151.494846][ T8172] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 151.513819][ T8172] 44792 total pagecache pages [ 151.518641][ T8172] 0 pages in swap cache [ 151.523799][ T8172] Free swap = 124996kB [ 151.528025][ T8172] Total swap = 124996kB [ 151.532632][ T8172] 2097051 pages RAM [ 151.536773][ T8172] 0 pages HighMem/MovableOnly [ 151.543302][ T8172] 427077 pages reserved [ 151.547570][ T8172] 0 pages cma reserved [ 151.646031][ T8216] 8021q: adding VLAN 0 to HW filter on device bond1 [ 151.748354][ T8219] vlan2: entered promiscuous mode [ 151.799312][ T8219] bond1: entered promiscuous mode [ 151.815806][ T8219] vlan2: entered allmulticast mode [ 151.836606][ T8219] bond1: entered allmulticast mode [ 151.852535][ T8233] netlink: 'syz.2.706': attribute type 3 has an invalid length. [ 151.866539][ T8233] netlink: 'syz.2.706': attribute type 1 has an invalid length. [ 151.922156][ T8233] bridge2: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 151.937244][ T8240] netlink: 'syz.0.707': attribute type 3 has an invalid length. [ 151.960887][ T8240] netlink: 'syz.0.707': attribute type 2 has an invalid length. [ 152.179377][ T8254] __nla_validate_parse: 9 callbacks suppressed [ 152.179397][ T8254] netlink: 16 bytes leftover after parsing attributes in process `syz.4.709'. [ 152.392092][ T8262] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gretap0, syncid = 3, id = 0 [ 152.405597][ T8260] syzkaller0: entered promiscuous mode [ 152.419021][ T8260] syzkaller0: entered allmulticast mode [ 152.960331][ T8293] netlink: set zone limit has 4 unknown bytes [ 152.967393][ T8293] netlink: zone id is out of range [ 152.972886][ T8293] netlink: zone id is out of range [ 152.979955][ T8293] netlink: zone id is out of range [ 152.985227][ T8293] netlink: zone id is out of range [ 152.996682][ T8296] netlink: zone id is out of range [ 153.002183][ T8296] netlink: zone id is out of range [ 153.196980][ T8306] netlink: 'syz.2.726': attribute type 1 has an invalid length. [ 153.204892][ T8306] netlink: 'syz.2.726': attribute type 2 has an invalid length. [ 153.213976][ T8306] netlink: 'syz.2.726': attribute type 1 has an invalid length. [ 153.221905][ T8306] netlink: 'syz.2.726': attribute type 3 has an invalid length. [ 153.229654][ T8306] netlink: 4 bytes leftover after parsing attributes in process `syz.2.726'. [ 154.800105][ T8231] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 155.320656][ T8347] netlink: 'syz.4.737': attribute type 2 has an invalid length. [ 155.468443][ T8337] syzkaller0: entered promiscuous mode [ 155.837996][ T8372] netlink: 'syz.1.743': attribute type 21 has an invalid length. [ 155.847491][ T8372] netlink: 128 bytes leftover after parsing attributes in process `syz.1.743'. [ 155.889235][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5510 ms [ 155.897341][ C0] lec:lec_tx_timeout: lec0 [ 155.902365][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 156.108863][ T8382] netlink: 'syz.4.746': attribute type 1 has an invalid length. [ 156.938829][ T8372] netlink: 'syz.1.743': attribute type 5 has an invalid length. [ 156.949304][ T8372] netlink: 3 bytes leftover after parsing attributes in process `syz.1.743'. [ 156.959743][ T8382] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 157.164161][ T8399] netlink: 168 bytes leftover after parsing attributes in process `syz.1.748'. [ 157.164938][ T8393] netlink: 'syz.1.748': attribute type 1 has an invalid length. [ 157.210762][ T8393] netlink: 224 bytes leftover after parsing attributes in process `syz.1.748'. [ 157.967002][ T8425] syzkaller0: entered promiscuous mode [ 158.039045][ T8432] netlink: 'syz.1.761': attribute type 4 has an invalid length. [ 158.334962][ T8444] netlink: 8 bytes leftover after parsing attributes in process `syz.0.763'. [ 158.414569][ T8448] netlink: 8 bytes leftover after parsing attributes in process `syz.2.766'. [ 159.590946][ T8456] syzkaller0: entered promiscuous mode [ 159.610126][ T8456] syzkaller0: entered allmulticast mode [ 159.837878][ T8483] netlink: 8 bytes leftover after parsing attributes in process `syz.4.774'. [ 159.894681][ T8484] netlink: 76 bytes leftover after parsing attributes in process `syz.4.774'. [ 159.922775][ T8484] nbd: illegal input index -8454144 [ 160.019682][ T8491] netlink: 'syz.2.778': attribute type 4 has an invalid length. [ 160.929301][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5030 ms [ 160.937470][ C0] lec:lec_tx_timeout: lec0 [ 160.942387][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 161.209097][ T8510] macvlan0: entered promiscuous mode [ 161.219083][ T8510] macvlan0: left allmulticast mode [ 161.311476][ T8509] netlink: 'syz.4.782': attribute type 1 has an invalid length. [ 161.466247][ T8527] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 161.581967][ T8533] netlink: 'syz.2.791': attribute type 4 has an invalid length. [ 161.713359][ T8536] bridge7: entered promiscuous mode [ 161.729456][ T8536] bridge7: entered allmulticast mode [ 161.741854][ T8536] team0: Port device bridge7 added [ 161.990221][ T8540] syzkaller0: entered promiscuous mode [ 161.996668][ T8557] TCP: TCP_TX_DELAY enabled [ 162.004044][ T8547] macvlan0: entered promiscuous mode [ 162.013810][ T8547] macvlan0: left allmulticast mode [ 162.038561][ T126] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 162.221651][ T8566] netlink: 28 bytes leftover after parsing attributes in process `syz.1.805'. [ 162.299464][ T8570] netlink: 'syz.3.804': attribute type 4 has an invalid length. [ 163.320086][ T126] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.329132][ T126] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.338320][ T126] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.595197][ T8577] netlink: 'syz.3.807': attribute type 25 has an invalid length. [ 163.656857][ T8579] netlink: 12 bytes leftover after parsing attributes in process `syz.1.808'. [ 163.670580][ T8580] netlink: 12 bytes leftover after parsing attributes in process `syz.1.808'. [ 163.783290][ T8582] virt_wifi0: left allmulticast mode [ 163.894997][ T8593] netlink: 'syz.4.809': attribute type 4 has an invalid length. [ 164.223720][ T8610] netlink: 'syz.0.817': attribute type 4 has an invalid length. [ 164.243176][ T8609] netlink: 'syz.3.820': attribute type 25 has an invalid length. [ 164.804919][ T8633] FAULT_INJECTION: forcing a failure. [ 164.804919][ T8633] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 164.867810][ T8633] CPU: 0 UID: 0 PID: 8633 Comm: syz.2.829 Not tainted syzkaller #0 PREEMPT(full) [ 164.867840][ T8633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 164.867853][ T8633] Call Trace: [ 164.867862][ T8633] [ 164.867871][ T8633] dump_stack_lvl+0xe8/0x150 [ 164.867908][ T8633] should_fail_ex+0x412/0x560 [ 164.867948][ T8633] _copy_from_user+0x2d/0xb0 [ 164.867976][ T8633] do_ipv6_setsockopt+0x264/0x31c0 [ 164.868017][ T8633] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 164.868047][ T8633] ? get_pid_task+0x20/0x1f0 [ 164.868068][ T8633] ? get_pid_task+0x20/0x1f0 [ 164.868086][ T8633] ? get_pid_task+0x20/0x1f0 [ 164.868121][ T8633] ? __lock_acquire+0x6b5/0x2cf0 [ 164.868166][ T8633] ? aa_sk_perm+0x6d5/0x900 [ 164.868208][ T8633] ? __pfx_aa_sk_perm+0x10/0x10 [ 164.868244][ T8633] ? __fget_files+0x2a/0x420 [ 164.868262][ T8633] ? aa_sock_opt_perm+0xff/0x1a0 [ 164.868286][ T8633] ipv6_setsockopt+0x59/0x170 [ 164.868315][ T8633] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 164.868341][ T8633] do_sock_setsockopt+0x17c/0x1b0 [ 164.868376][ T8633] __x64_sys_setsockopt+0x13d/0x1b0 [ 164.868410][ T8633] do_syscall_64+0x14d/0xf80 [ 164.868442][ T8633] ? trace_irq_disable+0x3b/0x150 [ 164.868461][ T8633] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.868489][ T8633] ? clear_bhb_loop+0x40/0x90 [ 164.868517][ T8633] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.868538][ T8633] RIP: 0033:0x7f67b6f9c819 [ 164.868559][ T8633] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 164.868577][ T8633] RSP: 002b:00007f67b7ef8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 164.868600][ T8633] RAX: ffffffffffffffda RBX: 00007f67b7215fa0 RCX: 00007f67b6f9c819 [ 164.868615][ T8633] RDX: 0000000000000020 RSI: 0000000000000029 RDI: 0000000000000003 [ 164.868628][ T8633] RBP: 00007f67b7ef8090 R08: 0000000000000020 R09: 0000000000000000 [ 164.868642][ T8633] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000001 [ 164.868655][ T8633] R13: 00007f67b7216038 R14: 00007f67b7215fa0 R15: 00007ffc21c25088 [ 164.868689][ T8633] [ 165.106426][ T8635] netlink: 'syz.1.827': attribute type 7 has an invalid length. [ 165.136702][ T8635] netlink: 140 bytes leftover after parsing attributes in process `syz.1.827'. [ 165.259898][ T8642] netlink: 'syz.4.833': attribute type 25 has an invalid length. [ 165.716076][ T8664] netlink: 'syz.3.842': attribute type 4 has an invalid length. [ 165.831495][ T8671] netlink: 4 bytes leftover after parsing attributes in process `syz.4.843'. [ 165.949228][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 165.957348][ C0] lec:lec_tx_timeout: lec0 [ 165.962345][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 166.088445][ T8680] netlink: 4 bytes leftover after parsing attributes in process `syz.2.846'. [ 166.141697][ T8683] netlink: 40 bytes leftover after parsing attributes in process `syz.2.846'. [ 166.227539][ T8686] netlink: 'syz.2.846': attribute type 2 has an invalid length. [ 166.237909][ T8686] netlink: 'syz.2.846': attribute type 2 has an invalid length. [ 166.332758][ T8680] macvtap1: entered promiscuous mode [ 166.338377][ T8680] vlan0: entered promiscuous mode [ 166.344876][ T8680] macvtap1: entered allmulticast mode [ 166.350812][ T8680] vlan0: entered allmulticast mode [ 166.356217][ T8680] veth1_macvtap: entered allmulticast mode [ 166.384745][ T8690] netlink: 'syz.4.850': attribute type 25 has an invalid length. [ 166.418757][ T8692] syzkaller0: entered promiscuous mode [ 166.424479][ T8692] syzkaller0: entered allmulticast mode [ 166.514636][ T8692] netlink: 'syz.0.851': attribute type 64 has an invalid length. [ 166.647422][ T8702] netlink: 'syz.3.855': attribute type 4 has an invalid length. [ 166.735801][ T8707] bridge4: entered promiscuous mode [ 166.741328][ T8707] bridge4: entered allmulticast mode [ 166.751619][ T8707] team0: Port device bridge4 added [ 167.093618][ T8727] netlink: 'syz.2.864': attribute type 25 has an invalid length. [ 167.372851][ T8743] netlink: 'syz.3.868': attribute type 4 has an invalid length. [ 167.398663][ T8738] bridge3: entered promiscuous mode [ 167.404109][ T8738] bridge3: entered allmulticast mode [ 167.423190][ T8735] netlink: 8 bytes leftover after parsing attributes in process `syz.1.866'. [ 167.584706][ T8750] netlink: 28 bytes leftover after parsing attributes in process `syz.3.871'. [ 168.071609][ T1349] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.090655][ T8775] macvlan0: entered promiscuous mode [ 168.096231][ T8775] macvlan0: left allmulticast mode [ 168.102723][ T1349] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.341234][ T8789] netlink: 28 bytes leftover after parsing attributes in process `syz.2.885'. [ 168.417544][ T8789] netlink: 28 bytes leftover after parsing attributes in process `syz.2.885'. [ 168.523616][ T8800] ================================================================== [ 168.531769][ T8800] BUG: KASAN: slab-out-of-bounds in af_alg_pull_tsgl+0x1c6/0x740 [ 168.539547][ T8800] Read of size 8 at addr ffff88807468b660 by task syz.0.890/8800 [ 168.547302][ T8800] [ 168.549660][ T8800] CPU: 1 UID: 0 PID: 8800 Comm: syz.0.890 Not tainted syzkaller #0 PREEMPT(full) [ 168.549685][ T8800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 168.549697][ T8800] Call Trace: [ 168.549705][ T8800] [ 168.549714][ T8800] dump_stack_lvl+0xe8/0x150 [ 168.549747][ T8800] print_report+0xba/0x230 [ 168.549771][ T8800] ? af_alg_pull_tsgl+0x1c6/0x740 [ 168.549802][ T8800] kasan_report+0x117/0x150 [ 168.549830][ T8800] ? af_alg_pull_tsgl+0x1c6/0x740 [ 168.549866][ T8800] af_alg_pull_tsgl+0x1c6/0x740 [ 168.549905][ T8800] skcipher_recvmsg+0x5df/0x1140 [ 168.549937][ T8800] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 168.549959][ T8800] ? skcipher_check_key+0x173/0x1e0 [ 168.549981][ T8800] ? skcipher_check_key+0x173/0x1e0 [ 168.550003][ T8800] ? __pfx_skcipher_recvmsg_nokey+0x10/0x10 [ 168.550027][ T8800] ? __pfx_skcipher_recvmsg_nokey+0x10/0x10 [ 168.550051][ T8800] sock_recvmsg+0x172/0x1b0 [ 168.550074][ T8800] __sys_recvfrom+0x240/0x3c0 [ 168.550102][ T8800] ? __pfx___sys_recvfrom+0x10/0x10 [ 168.550126][ T8800] ? do_futex+0x333/0x420 [ 168.550175][ T8800] ? rcu_is_watching+0x15/0xb0 [ 168.550227][ T8800] __x64_sys_recvfrom+0xde/0x100 [ 168.550256][ T8800] do_syscall_64+0x14d/0xf80 [ 168.550286][ T8800] ? trace_irq_disable+0x3b/0x150 [ 168.550305][ T8800] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.550326][ T8800] ? clear_bhb_loop+0x40/0x90 [ 168.550351][ T8800] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.550371][ T8800] RIP: 0033:0x7f55de55d04e [ 168.550390][ T8800] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 168.550408][ T8800] RSP: 002b:00007f55df4dae88 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 168.550431][ T8800] RAX: ffffffffffffffda RBX: 00007f55df4dc6c0 RCX: 00007f55de55d04e [ 168.550445][ T8800] RDX: 0000000000001000 RSI: 00007f55df4db000 RDI: 0000000000000008 [ 168.550459][ T8800] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 168.550471][ T8800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 168.550484][ T8800] R13: 00007f55df4daf58 R14: 00007f55df4db000 R15: 0000000000000000 [ 168.550509][ T8800] [ 168.550516][ T8800] [ 168.769619][ T8800] Allocated by task 8800: [ 168.773972][ T8800] kasan_save_track+0x3e/0x80 [ 168.778684][ T8800] __kasan_kmalloc+0x93/0xb0 [ 168.783299][ T8800] __kmalloc_noprof+0x35c/0x760 [ 168.788194][ T8800] sock_kmalloc+0xd6/0x160 [ 168.792636][ T8800] skcipher_recvmsg+0x54d/0x1140 [ 168.797595][ T8800] sock_recvmsg+0x172/0x1b0 [ 168.802118][ T8800] __sys_recvfrom+0x240/0x3c0 [ 168.806827][ T8800] __x64_sys_recvfrom+0xde/0x100 [ 168.811793][ T8800] do_syscall_64+0x14d/0xf80 [ 168.816418][ T8800] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.822337][ T8800] [ 168.824683][ T8800] The buggy address belongs to the object at ffff88807468b640 [ 168.824683][ T8800] which belongs to the cache kmalloc-32 of size 32 [ 168.838582][ T8800] The buggy address is located 0 bytes to the right of [ 168.838582][ T8800] allocated 32-byte region [ffff88807468b640, ffff88807468b660) [ 168.853036][ T8800] [ 168.855396][ T8800] The buggy address belongs to the physical page: [ 168.861844][ T8800] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7468b [ 168.870738][ T8800] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 168.877875][ T8800] page_type: f5(slab) [ 168.882051][ T8800] raw: 00fff00000000000 ffff88813fea7780 dead000000000100 dead000000000122 [ 168.890654][ T8800] raw: 0000000000000000 0000000800400040 00000000f5000000 0000000000000000 [ 168.899267][ T8800] page dumped because: kasan: bad access detected [ 168.905711][ T8800] page_owner tracks the page as allocated [ 168.911449][ T8800] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2800(GFP_NOWAIT|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6852, tgid 6852 (modprobe), ts 116616458959, free_ts 116560198291 [ 168.930938][ T8800] post_alloc_hook+0x231/0x280 [ 168.935769][ T8800] get_page_from_freelist+0x24dc/0x2580 [ 168.941347][ T8800] __alloc_frozen_pages_noprof+0x18d/0x380 [ 168.947182][ T8800] allocate_slab+0x77/0x660 [ 168.951708][ T8800] refill_objects+0x331/0x3c0 [ 168.956407][ T8800] __pcs_replace_empty_main+0x2e6/0x730 [ 168.961982][ T8800] __kmalloc_cache_noprof+0x392/0x660 [ 168.967460][ T8800] kmem_cache_free+0x15b/0x630 [ 168.972250][ T8800] __put_anon_vma+0x12b/0x2d0 [ 168.976953][ T8800] unlink_anon_vmas+0x58b/0x730 [ 168.981831][ T8800] free_pgtables+0x836/0xb70 [ 168.986449][ T8800] exit_mmap+0x490/0xa10 [ 168.990708][ T8800] __mmput+0x118/0x430 [ 168.994801][ T8800] exit_mm+0x168/0x220 [ 168.998889][ T8800] do_exit+0x6a2/0x23c0 [ 169.003061][ T8800] do_group_exit+0x21b/0x2d0 [ 169.007677][ T8800] page last free pid 15 tgid 15 stack trace: [ 169.013674][ T8800] __free_frozen_pages+0xc2b/0xdb0 [ 169.018820][ T8800] tlb_remove_table_rcu+0x85/0x100 [ 169.023974][ T8800] rcu_core+0x7cd/0x1070 [ 169.028246][ T8800] handle_softirqs+0x22a/0x870 [ 169.033041][ T8800] run_ksoftirqd+0x36/0x60 [ 169.037487][ T8800] smpboot_thread_fn+0x541/0xa50 [ 169.042489][ T8800] kthread+0x388/0x470 [ 169.046583][ T8800] ret_from_fork+0x51e/0xb90 [ 169.051195][ T8800] ret_from_fork_asm+0x1a/0x30 [ 169.055988][ T8800] [ 169.058331][ T8800] Memory state around the buggy address: [ 169.063981][ T8800] ffff88807468b500: fa fb fb fb fc fc fc fc fa fb fb fb fc fc fc fc [ 169.072069][ T8800] ffff88807468b580: 00 00 00 fc fc fc fc fc fa fb fb fb fc fc fc fc [ 169.080147][ T8800] >ffff88807468b600: 00 00 00 fc fc fc fc fc 00 00 00 00 fc fc fc fc [ 169.088218][ T8800] ^ [ 169.095427][ T8800] ffff88807468b680: fa fb fb fb fc fc fc fc fa fb fb fb fc fc fc fc [ 169.103508][ T8800] ffff88807468b700: 00 00 00 fc fc fc fc fc fa fb fb fb fc fc fc fc [ 169.111592][ T8800] ================================================================== [ 169.201333][ T8800] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 169.208629][ T8800] CPU: 0 UID: 0 PID: 8800 Comm: syz.0.890 Not tainted syzkaller #0 PREEMPT(full) [ 169.217888][ T8800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 169.227990][ T8800] Call Trace: [ 169.231313][ T8800] [ 169.234273][ T8800] vpanic+0x56c/0xa60 [ 169.238315][ T8800] ? __pfx_vpanic+0x10/0x10 [ 169.242862][ T8800] ? __pfx___schedule+0x10/0x10 [ 169.247774][ T8800] panic+0xc5/0xd0 [ 169.251543][ T8800] ? __pfx_panic+0x10/0x10 [ 169.256003][ T8800] ? preempt_schedule_common+0x82/0xd0 [ 169.261538][ T8800] ? af_alg_pull_tsgl+0x1c6/0x740 [ 169.266622][ T8800] check_panic_on_warn+0x89/0xb0 [ 169.271591][ T8800] ? af_alg_pull_tsgl+0x1c6/0x740 [ 169.276662][ T8800] end_report+0x73/0x180 [ 169.280940][ T8800] ? af_alg_pull_tsgl+0x1c6/0x740 [ 169.286013][ T8800] kasan_report+0x128/0x150 [ 169.290559][ T8800] ? af_alg_pull_tsgl+0x1c6/0x740 [ 169.295640][ T8800] af_alg_pull_tsgl+0x1c6/0x740 [ 169.300562][ T8800] skcipher_recvmsg+0x5df/0x1140 [ 169.305561][ T8800] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 169.310977][ T8800] ? skcipher_check_key+0x173/0x1e0 [ 169.316225][ T8800] ? skcipher_check_key+0x173/0x1e0 [ 169.321466][ T8800] ? __pfx_skcipher_recvmsg_nokey+0x10/0x10 [ 169.327406][ T8800] ? __pfx_skcipher_recvmsg_nokey+0x10/0x10 [ 169.333346][ T8800] sock_recvmsg+0x172/0x1b0 [ 169.337893][ T8800] __sys_recvfrom+0x240/0x3c0 [ 169.342626][ T8800] ? __pfx___sys_recvfrom+0x10/0x10 [ 169.347864][ T8800] ? do_futex+0x333/0x420 [ 169.352260][ T8800] ? rcu_is_watching+0x15/0xb0 [ 169.357081][ T8800] __x64_sys_recvfrom+0xde/0x100 [ 169.362075][ T8800] do_syscall_64+0x14d/0xf80 [ 169.366725][ T8800] ? trace_irq_disable+0x3b/0x150 [ 169.371786][ T8800] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.377987][ T8800] ? clear_bhb_loop+0x40/0x90 [ 169.382715][ T8800] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.388650][ T8800] RIP: 0033:0x7f55de55d04e [ 169.393107][ T8800] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 169.412839][ T8800] RSP: 002b:00007f55df4dae88 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 169.421309][ T8800] RAX: ffffffffffffffda RBX: 00007f55df4dc6c0 RCX: 00007f55de55d04e [ 169.429340][ T8800] RDX: 0000000000001000 RSI: 00007f55df4db000 RDI: 0000000000000008 [ 169.437356][ T8800] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 169.445369][ T8800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 169.453380][ T8800] R13: 00007f55df4daf58 R14: 00007f55df4db000 R15: 0000000000000000 [ 169.461412][ T8800] [ 169.465068][ T8800] Kernel Offset: disabled [ 169.469427][ T8800] Rebooting in 86400 seconds..