last executing test programs: 2.72924545s ago: executing program 0 (id=1118): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{&(0x7f0000002e40)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0xdd02}], 0xc, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc}}], 0x30}], 0x1, 0x0) getsockopt$inet_int(r2, 0x0, 0x1a, 0x0, &(0x7f0000002540)) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth0_virt_wifi\x00', 0x0}) bind$packet(r1, &(0x7f0000000180)={0x11, 0x17, r4, 0x1, 0x40, 0x6, @broadcast}, 0x14) recvfrom$inet(r2, &(0x7f0000000300)=""/186, 0xba, 0x10000, &(0x7f00000001c0)={0x2, 0x4e24, @local}, 0x10) r5 = accept4$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000003c0)=0x14, 0x80800) getsockname$packet(r5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001880)={&(0x7f0000000100)=ANY=[@ANYBLOB="38000000540001000000000000c4000007008209", @ANYRES32=r6, @ANYBLOB="20000100", @ANYRES32=r1, @ANYBLOB="00000001e000030000000000000000000000000008"], 0x38}, 0x1, 0x0, 0x0, 0x881}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000016000107030000000000000007"], 0x14}, 0x1, 0x0, 0x0, 0xc4}, 0x44015) bind$packet(r1, &(0x7f0000000040)={0x11, 0x8, r4, 0x1, 0x23, 0x6, @multicast}, 0x14) 2.253598939s ago: executing program 3 (id=1128): r0 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000020000000000800040001000000", 0x24) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7}, 0xe) sendmmsg(r1, &(0x7f0000003400)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000000) shutdown(0xffffffffffffffff, 0x0) 2.121557449s ago: executing program 4 (id=1131): r0 = socket$netlink(0x10, 0x3, 0x9) r1 = socket(0x10, 0x803, 0x0) ioctl$AUTOFS_IOC_FAIL(r0, 0x9361, 0x7ff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r2) sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)={0x108, r3, 0xe701ac47a3d23ecd, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0xce, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x00\x00\x00od\xe6,\xd3@I\x17\xf3\xbees0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93U6\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4\x8fK=E0\xe8R\x83'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}]}, 0x108}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_OCB(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010028bd7000ffdbdf255f"], 0x24}, 0x1, 0x0, 0x0, 0x24004015}, 0x448d0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010027bd7000fbdbdf253400000008000300", @ANYRES32=r10, @ANYBLOB="0a000600505050505050000000cdb5850bf681a8f418735a75d8b8105e"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r5, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x58, r7, 0x200, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x3}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x10000081}, 0x24000041) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x4001, 0x3, 0x260, 0x0, 0x700001b, 0x148, 0x0, 0x148, 0x1c8, 0x206, 0x240, 0x1c8, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x1ea, 0xc8, 0xf0, 0x0, {0x390, 0x8f00}, [@inet=@rpfilter={{0x28}, {0x3}}, @common=@addrtype={{0x30}, {0x1ba, 0x410}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x4, 0x8d, 0x7fff, 0x1, 'snmp_trap\x00', 'syz1\x00', {0xfff}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000ac0)={0x0}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) mmap(&(0x7f0000000000/0x11000)=nil, 0x11000, 0xb635773f04ebbeec, 0x11171, 0xffffffffffffffff, 0xa1679000) sendmsg$NL80211_CMD_GET_WOWLAN(r6, &(0x7f0000000800)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x28, r9, 0x200, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x35}, @void, @val={0xc, 0x99, {0x0, 0x3a}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r11, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r11, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2.096620321s ago: executing program 3 (id=1132): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000711239000000000095e80000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000cc0)=@newtaction={0x84, 0x30, 0x12f, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x2}}}}]}]}, 0x84}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r2, 0x80089419, &(0x7f0000000100)) ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000200)={'veth0_vlan\x00', {0x2, 0x4e23, @remote}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r4) sendmsg$DEVLINK_CMD_RATE_SET(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x44, r5, 0x1, 0x0, 0x0, {0x2a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x58}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0xffffffff}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x78, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xcad, 0x0, 0x0, 0x9, 0xf407}, 0x0, 0x0, 0xfff, 0xfffffffd, 0x0, 0x4, 0x0, 0x11, 0x8, 0x203, {0x0, 0x0, 0x4, 0x3}}}}]}, 0x78}}, 0x0) 1.90830428s ago: executing program 3 (id=1136): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@updpolicy={0xc0, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x2}}, [@XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0xc0}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newspdinfo={0x14, 0x24, 0x21}, 0x14}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000300fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a"], 0xb8}}, 0x20040014) 1.864761058s ago: executing program 4 (id=1137): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x8c}, [@call={0x85, 0x0, 0x0, 0xcc}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x90) 1.829945537s ago: executing program 0 (id=1138): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x750, 0x360, 0x1b0, 0x1b0, 0x1b0, 0x450, 0x680, 0x680, 0x680, 0x680, 0x680, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, [], [0x10000000], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x21}, 0x0, 0x188, 0x1b0, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @local, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, @common=@inet=@multiport={{0x50}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @dev, [], [], 'macsec0\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x1}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {}, 0x300}}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], '\x00', 'bond_slave_0\x00', {0xff}}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv4=@loopback}}}, {{@uncond, 0x0, 0x208, 0x230, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, @ipv4={'\x00', '\xff\xff', @broadcast}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, @mcast2, @mcast2, @private1, @ipv4={'\x00', '\xff\xff', @multicast1}, @loopback, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @remote, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0={0xfc, 0x0, '\x00', 0x1}]}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x7b0) 1.722340251s ago: executing program 3 (id=1141): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x128, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000, 0xad}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x74}, [@coaddr={0x14, 0xe, @in6=@remote}, @lifetime_val={0x24, 0x9, {0x100000000, 0x8000000000000001, 0xb4, 0x5}}]}, 0x128}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="02030003120000002cbd7000fcdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af05000600000000000a0000000000000000000000000000000000000000000001020000000000000002000100000000000007000c0000000005000500000000000a00000000000000000000000000000000000000000000010700000000000000010014"], 0x90}, 0x1, 0x7}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0xb400, 0x2, 0xfeffff7f00000000}, {0x100, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0x19, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x4cc00) socket(0x10, 0x3, 0x0) 1.528739044s ago: executing program 4 (id=1142): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000100)={0x18, 0x0, {0xfffd, @random="c0c13c2baeb6", 'macvlan1\x00'}}, 0x1e) sendmmsg$sock(r0, &(0x7f00000009c0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000c00)='!\n', 0x2}], 0x1}}], 0x1, 0xe803000000000000) 1.528386349s ago: executing program 0 (id=1143): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r1, &(0x7f0000000180)={0x11, 0x17, r2, 0x1, 0x40, 0x6, @broadcast}, 0x14) getsockname$packet(r1, &(0x7f00000018c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001880)={&(0x7f0000000100)=ANY=[@ANYBLOB="38000000540001000000000000c4000007008209", @ANYRES32=r3, @ANYBLOB="20000100", @ANYRES32=r1, @ANYBLOB="00000001e000030000000000000000020000000008"], 0x38}, 0x1, 0x0, 0x0, 0x881}, 0x0) 1.293499799s ago: executing program 4 (id=1146): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x8, 0x1, 'udp\x00'}, @NFTA_MATCH_INFO={0xe, 0x3, "7acc6338a90000b03bd9"}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x88}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}]}], {0x14}}, 0xa0}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x8, 0x1, 'udp\x00'}, @NFTA_MATCH_INFO={0xe, 0x3, "7acc6338a90000b03bd9"}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x88}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}]}], {0x14}}, 0xa0}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x170, 0x18, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFTA_FLOWTABLE_HOOK={0x15c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pimreg0\x00'}, {0x14, 0x1, 'veth0_to_hsr\x00'}, {0x14, 0x1, 'veth0_to_bond\x00'}, {0x14, 0x1, 'veth0_virt_wifi\x00'}, {0x14, 0x1, 'veth1_to_bond\x00'}, {0x14, 0x1, 'syzkaller0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_hsr\x00'}, {0x14, 0x1, 'wlan1\x00'}, {0x14, 0x1, 'hsr0\x00'}, {0x14, 0x1, 'ip6gretap0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'veth0_to_bond\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syzkaller0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pim6reg\x00'}, {0x14, 0x1, 'vlan1\x00'}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x198}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x170, 0x18, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFTA_FLOWTABLE_HOOK={0x15c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pimreg0\x00'}, {0x14, 0x1, 'veth0_to_hsr\x00'}, {0x14, 0x1, 'veth0_to_bond\x00'}, {0x14, 0x1, 'veth0_virt_wifi\x00'}, {0x14, 0x1, 'veth1_to_bond\x00'}, {0x14, 0x1, 'syzkaller0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_hsr\x00'}, {0x14, 0x1, 'wlan1\x00'}, {0x14, 0x1, 'hsr0\x00'}, {0x14, 0x1, 'ip6gretap0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'veth0_to_bond\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syzkaller0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pim6reg\x00'}, {0x14, 0x1, 'vlan1\x00'}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x198}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x7, 0x4, 0x2, 0x9, 0x30, 0x67, 0x0, 0x2, 0x1, 0x0, @remote, @remote, {[@lsrr={0x83, 0x3, 0xe2}, @ssrr={0x89, 0x3, 0x2e}]}}, @timestamp_reply={0xe, 0x0, 0x0, 0x81, 0x8, 0x99f, 0x10000, 0x2}}}}}, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x31, &(0x7f0000000140)={0x0, 'bridge_slave_0\x00'}, 0x3) 1.293171333s ago: executing program 0 (id=1147): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x25dfdbfc, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x2, 0x0, 0x0, {0x0, 0x0, 0x300}}}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xf0}}, 0x0) 1.141769606s ago: executing program 1 (id=1148): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x4d}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x7b000000, 0x0, '\x00', 0x0, 0x1e}, 0x90) 1.084683554s ago: executing program 2 (id=1149): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[], 0x2c}}, 0x8810) socket$nl_route(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) (async) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[], 0x2c}}, 0x8810) (async) 1.084419547s ago: executing program 4 (id=1150): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xa00000000000000, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 1.02973106s ago: executing program 0 (id=1151): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f00000009c0)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000ac0)="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", 0x145}, {&(0x7f0000000e80)="31cef842d9c50636f60fc0cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171ad6227e1173ab6efa2fcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbe385ea3822948825e11e7557f9c9c810bd8a1420e33eb1be6f10cfb24eb7cccdf1528ef33b34ab07cdb0909a9ba9547e1e343b451d9025c4e153612d4674b9411fb4de295599abbcb388d291aa839ab0954e6a8dfc19c3c1533a11d81e03a4879bd736f1caacc2bbf1194598a652677efb930a5b6ee292c57402e0cc07a9a26ee794e46e604a9aec550d12af09f782e1f6a996f075660484", 0xe1}], 0x2}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="e5ce896be4e1733345b8630526634d71839f90472c23a7be7075df52387f1d264d1dc51716797dba7f8c58072413534df1a8611683fa0e4e2e348134fcee8fdca57c46dfd87c50d8d467b3f18b9a3ead4e653f29e59881ea765f0bd3e33e1850087be1001dcbbc68f7e2bc9cbe0d9ed33d02a834582c1c5952866268311dadaca2a81ec9f31cc0ba126358eb549a3e705d190db66b33a55d5d9b7069b0f882faa0f1cfe6e429d0a936afc609f388d5e4af4ac1e319e5e072e31d27df4fa781ce92fff01f2a1563539f55b71ded360543d7005c6dda4c7c267d6c6fa770c23848f722160aaf4e21", 0xe7}], 0x1, &(0x7f00000002c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xe}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x34}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x48}}, {{&(0x7f0000000240)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000000800)=[{&(0x7f0000000340)}, {&(0x7f0000000380)="860b3dd2105487cbc5892507e59360345a41b07ed3f6a3e85892201a4178f4c21ce77ac929e825be0339822b4f824542181e2fd38dadb3ceeb3fc017ea36a5fc62effcd147734460036e2b20760a89cd670367d039c76b61d069d1598bc6096e96c8e7bf72b0ed198b101f7b2e79f6694b26e98fe529f1f6616a6655388bab251f474d55f9389843d1525530e147f405fe0fa2df488153b69edce0bbd04b602032613989b28e2aa3a4ce58fd6d0e874610a8a2be76f3444f5f5b20847c93622ed01a64e5a645dca01584d1faf0b71f58f29a5be3e2b4ff21347c0396fd28f9ea881554818202", 0xe6}, {&(0x7f0000000500)="d60c5d88a27112559b93df0337d2d20ba8a3e96a7104b5e73fc0f2beaff2c6147787a1989447eef27e402e1eb79a252d6a6571d138e63a526141f032ea3f68edef15ebe8ec53a517a449a65111db", 0x4e}, {&(0x7f0000000640)="c4f3d2f326437562b145105bb96d5b9de8eeffcf052f6846d06f048d2ba76629d27992f9aa191593270f8fa93d4ab409e8ef80d8e3cf86ac42647af23d4620af2372c82022577fcf21f7de145e732b5e59f632de07f104f8c39d2ecea04c355dec94de", 0x63}, {&(0x7f0000000480)="2ee4a824c9bee05e89811bf90cd8c74220502cf5f2a971e64063dbf6d0aa11307b69d5be17c97aa6b89078cd311e", 0x2e}, {&(0x7f0000000780)="6c4da0b0417fa3db72f50d623a76aea3aea591e249b2ec75442c", 0x1a}], 0x6, &(0x7f00000008c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x22}, @private=0xa010100}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7ff}}, @ip_ttl={{0x14, 0x0, 0x2, 0x10}}, @ip_ttl={{0x14, 0x0, 0x2, 0xfb}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9a9}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast1, @multicast1}}}], 0xe8}}], 0x3, 0x50) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000001380)="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", 0x45c}], 0x1) 948.282583ms ago: executing program 1 (id=1152): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r3, 0x0, &(0x7f0000000400)) sendmsg$nl_route_sched(r2, &(0x7f0000006280)={0x0, 0x0, 0x0}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) getpeername$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000240)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, 0x0, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x49, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x10) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300, 0x21000000}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x8044) 895.708768ms ago: executing program 2 (id=1153): openat$ppp(0xffffffffffffff9c, 0x0, 0x80180, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0}, &(0x7f0000000280)=0xc) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000002c0)=0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x9}, 0x48) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@map=r6, r7, 0x4}, 0x10) close(r6) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r0) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x205020}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x34, r8, 0x20, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x20044081) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fcdbdf2531000000080001004b0000000c009900020000002300000008000300", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="080001007a00000008000300", @ANYRES32=r3, @ANYBLOB='\b\x00R\x00', @ANYRES32=r4, @ANYBLOB='\b\x00R\x00', @ANYRES32=r5, @ANYBLOB="080001000a000000"], 0x60}, 0x1, 0x0, 0x0, 0x8080}, 0xc4) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, 0x0, 0xfffffd65) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r9, 0x0, 0xc8, &(0x7f0000000100), 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r11 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r11, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) setsockopt$inet_mreq(r10, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000240)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x4, 0x0, 0x0, 0x3, 0xc58, {0x5, 0x4, 0x0, 0x7, 0x0, 0x65, 0xe, 0x4e, 0x24, 0xc, @empty, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r11, 0x0, 0xd2, &(0x7f0000000200)={@multicast2, @multicast2=0xe0000300, 0x0, "028a1df06e9264f7d866b1970548fc3c7b00", 0xb2, 0xffffeff7, 0x40, 0x5}, 0x3c) 710.077107ms ago: executing program 3 (id=1154): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4400000010000100000000000000000088a80000", @ANYRES32=0x0, @ANYBLOB="00000000000100001c0016801800018014000a00ff03acb172310000000008e7ffffffff08001b"], 0x44}}, 0x0) 682.498223ms ago: executing program 2 (id=1155): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=@newtaction={0x48, 0x30, 0x51b, 0x0, 0x0, {}, [{0x34, 0x1, [@m_skbmod={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}]}]}, 0x48}}, 0x0) r2 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(r2) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_ALL_TARGETS={0x8, 0xa, 0xfffffffd}]}}}]}, 0x3c}}, 0x0) 655.246085ms ago: executing program 1 (id=1156): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f00000007c0)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, &(0x7f0000000280)=[{&(0x7f0000001f00)="27031c00160014000000002f1eafacf706e10540070086dd20000000ee0b80558ddbba650596000000004000"/53, 0x35}], 0x1}, 0x4) 529.107223ms ago: executing program 3 (id=1157): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1, 0x0, 0x6}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x0, 0x3c}, 0x2, @in=@local, 0x6, 0x4, 0x3}]}]}, 0xfc}}, 0x0) r1 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0xfe, &(0x7f0000000000)=[{&(0x7f0000000040)="0207000902000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4, 0x2000000}, 0x80, 0x0}, 0xcc6684230f858bdc) 526.155477ms ago: executing program 1 (id=1158): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f00000008c0)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_DEV_INFO(r2, 0xd000941e, &(0x7f0000001900)={r3, "dadcb971afa3ece324ddc81d76bc0532"}) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) socket$packet(0x11, 0x3, 0x300) socket$can_raw(0x1d, 0x3, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000880)={'bridge_slave_0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001e000100000000001000000007000000", @ANYRES32=r6, @ANYBLOB="000004000a000200aaaaaaaaaa0c"], 0x28}}, 0x200080c2) socket$nl_route(0x10, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuset.effective_mems\x00', 0x275a, 0x0) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bind$netlink(r8, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfe, 0x4000000}, 0xc) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r9, 0x8010661b, &(0x7f0000000000)) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r10, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08001400fc000000080011000700000008000e00800000000800", @ANYRES64=r10, @ANYRESHEX=r4, @ANYBLOB, @ANYBLOB="76b99d28e17b1a8792c323da9b7904aaafc9", @ANYRES32=r1], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 432.314087ms ago: executing program 2 (id=1159): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000240)={&(0x7f0000000180)="484a1e9f0a296a1edda568735b175adba4a3682cabf4e8373bb7e7daf0dce87850ec769df0796230b08ed89fce6abe202dec401a3a8e7b87d7eaa3fda0984550f74589859ef7a5f516a584fa15cfcb2e45c1bb2c33905d9b03fec894fdb285c03c99a80e1e8f4a0401b76c6328d378f237ee3370dd0d60ffabbca116eb882e12", &(0x7f0000000300)=""/137, &(0x7f00000003c0), 0x0, 0x1, r0}, 0x38) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000007c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a80016002000014004000000035c1f61c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cee0090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc5", 0xb2}], 0x1}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000001"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x20, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x4, 0x1}, @nested={0x4, 0x2}]}, 0x20}}, 0xc000) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000600)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x10805}, 0x44049) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 265.416209ms ago: executing program 1 (id=1160): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x4}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x50}}, 0x4200000000000000) 260.219402ms ago: executing program 2 (id=1161): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@multicast1, @in=@multicast2, 0x4e20, 0x0, 0x800, 0x0, 0x2}, {0x7, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {0xffffffffffffffff}, 0x3, 0x0, 0x1, 0x0, 0x3, 0x3}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x2b}, 0x0, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x200000}}, 0xe8) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r0, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000005}, 0x8840) 79.729894ms ago: executing program 1 (id=1162): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4408}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r4) sendmsg$IEEE802154_START_REQ(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000d40)={0x34, r5, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_CHANNEL={0x5}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_BCN_ORD={0x5}, @IEEE802154_ATTR_COORD_PAN_ID={0x6}]}, 0x34}}, 0x0) sendmmsg(r0, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0, 0xfffffffffffffe5f, &(0x7f0000000480)=ANY=[], 0x248, 0xe000}, 0x5}, {{&(0x7f00000000c0)=@can={0x1d, r3}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000140)="42f05d75d27aaffd9c6be7e20662057d72cfac4e4bdf194297e47ebdcff3a99e9eb45fe69b12f184027962add5cb41ab82c22a556ae2730ea8aca948defbd6d0dfabac88ceac9b9d6334a3546a9acfddb48ac4f94e11a43395fa9644e7e1d9a59a453bee202210c56c7e4a35ed3f05ee796f8331dae17decd8", 0x79}], 0x1, &(0x7f0000000d80)=[{0xd8, 0x101, 0x39fb, "0ae82e6e1206339798a5ad8c5dd2d65ce1802ae075a32483c3118152f98030b9e5ff87ad58e0164296951e98a1f9ba3ce76d464e05a2dd81e15eebbcab0665380866d2ce1a3785cbe6e518fdd902da89bc101a54913722f35b6adc76a45117e94aeff26e9f62254493931ee780c992873ad57f5b6d39025513b39122d11f2eda22f19c022411985712e871791e35c526fc7df5f21984017217d941b0d7e8f5bceb30f656678f799c330ade713fb90e341a654496cbfc8b97b27acccd30a1411bdc"}, {0xc8, 0x0, 0x0, "833b411cf3e80c3bddf18fcd0ad996c569ed16dbb86d38f01ed7f6d8170a1aa6f62cefdfb2293da9a536d829e1fccc04d9f523890ffd1cca78596fd9862812c53e77db4e3bebdbb5b14b5f94e1b23f6a6ce8f97b466abf9199289aea05d75bce051c6cfa64bde873c4c13b883d1787141d2ed7c2efd18968681868620ffcfa9d5f8f5a121286dd86515311d3b39ce72e685125d782e175d6b5bdfabf64d25dd80d926a94d91887107142aba537fd3ea9f1"}, {0x0, 0x3a, 0x86b, "58f103817a47c20ef90dbcccf1847822c0f8f2d2884b6571b738f6f5fb041d6fdba7e982b6a9cf05dcc701d0372bb70c520ba46b8c7f8e2e2e5f06fd1da6c873c1386baf5608be71c74588e9d84e0f5905b5f963be66c92e66360a2079ffb928dd107bc3aa72a10af43c8e0b2a2967bdf9ae7b8e2c90f6984e08b840dba9c6af29b6638cae5f896987df1c1dfab54c985887a96b5949748b3a2781b9030b554c58e27d827653b0d18dc3237ad99f35695159ee3ccd1bd64aeb63496a64492b684b50ad41f8a85b0d645622a7c84eae9090b5733344821529815338e73898b877e53d7ef6f463b8471b581edb503ba63bc39e45a521eef232562dc1e7420f79c4c91964ebd5000cab5b20f98f88db9e2873f1481569ebc0e144be34b84ae67791a7c16a09abc9fc3d5aadf5e126f15a85fe54431c8c941a0ebfeafc1c357cc18209dea357e5584dbfd06f7be3c41113763a62397082088bfab3e33970f6142c01e8d2c0d2f984cfb74542ef78586a1e911eb62786dd5168cdf9d3eeb748d4cf9d96238f785b306aebbcd817b65ca521201f033c8b9e739d0045d51a07f8b06697f7ec685babc4b65c85b56dec7995a47ee643e755de4559cc3d8827e0624c64f7a4da9605c3e2380422ad531af3ccb143d1ae60a93c9607eb687768a9854ea002a264690f1a72eb664f58d51a5c0e4e7672a4a25054cc704bb2af32366260ade9e769d642e4cadf9b3fda24c4c5a6b7ecf029b32089375efd95fa82756fff35ced0bf51b22dba6a39906fe6b21c3194911c414bf24c4f933d72eb0d3e1ac253d48611e213273e22b5496d588c3a8d0cd891e1001141be943fdf3d07bb7fc7736c673ee3b3b7441685086fb02bf46e37ecf9daa5481e5ff587f03b37ea7d76daf9380838de2fac564595fba326e3ffe022a93b8e1bf7ea5f994bc2d6355d2519e2588ab293945de46446cdbff35607096c4cf14f26c275f21d9390d5e7ec32bd828e620692c77f504d09cc93520ac9095da51f68c396ba7a870ddbed2ec4ba7bdbf9343a0e08c5008fcb8494635ed2e6f8894bcfc3598efd258ed112d926b25ba758ef2618a4049dfe0ed5290bd698cafe42d5a5a35eba15caff8844880ef00e033d9e6aacc9e545c354b8a24ac31e90c58443f2953542e4ec8cc9571e4bd5a879cf9a373f550497ae9690c65d7ac0fd1672cbb70301197079e20a549b9bb351d6f1f5ccd6114e6af05fd8cd90971ef0e75daf544d9f78265b443d28fb126bffdead64e451121a9c5035e51d5edcd7fbd84e7c25c47249bb162f9217d9a2a582ea004d92737445a92f09c7a59a47709b544492fa349b20579848803db5088208f23f0cc449aa912c375f82082e520ac4dc38b5e8e4e3304d4920f884dc26d967a0813498c3f301a6366025924ad4e6db9ade36bfd881a6c64565e68c8c14c569dee5f1a77b8710eb83dbfbbd8b6ecb3042ea4045045efed1db8636b68b573a8f6ed9d9db698697bf387852a33855c034dfb19d48a643d1d0ad3abd61289963203329ed530d0820a9334562e3b32d994b1a1d71eb8b0bc650495dc8c729be27a9e47f480e9bcee0b5af5306cf1a4153a042ffa516560d6f4bffebe14e3c8fccedc0a7af62810709b1b6ca2aef452da6fd1c20f85630a0a5570f3b432437202fac81ea308f4c0295ff0483881e5166af7d13cb015fd3320884896d10822562bbdc02922845b279b2a56008f9ac31243f6e01cce455e2a9a0191d73976d85a42c04fde4719317913a75e245c41e67db07fb11db0f5090ae529af2f9365aef6feec9332591c95436660b0d1224d9e2931d31b5d0341869f0792d7e13b1e3a9be2c4dbea4f1d20c84ae4bdaa71a89c0556198358e419c7124001fcc13658168f3d19b2e13ebac506c43609b32ce20c0fa805ca97ef9b1ac9c06463704573c09658941a30a448a9090a9c55e1f86d39dc18925ecba25ec6d56e3abb438988ede0a4f56dde06a52df3b5332a0b88d2c125b209171049a4497c4ebf53e7f21493b1bd51fccb65738ac353853eea001a19ef81e461e4da1349166730ee10fd823b905b8856f0998d771229cf8e3623aa1194352a23ab1e675e52aa00de99d31f5be9d231e1c65b13667fd46f14f0390f54a5d9f05527a093506614d51a5745d9ec00c5df1fb5e6d82c4d55782a4b99ed0a25f0b420ec61fc565748eff538e4fdae1659b0f70c2947ec3fb1db18d001be036b3820986748cd5b63dd1f86cd22bf6af99bc01196a26059072ca377ff1a6b0564ece6c7a64d3c42df73388c581be5a3485635e419b267438bd87892133c2e2aad495cb2be34f49e88e62844c95d5122bd851f7ffc6958f7205151b2306dcd1e49e3f2f087a281195b10b006d5d19b6c5767b53bb5f58a84db86e1f3ba063d577d466f03d3da1e344738581b0b6672a5fc5a203c6675c3d02721b2261e7dff2640da5fa85151feee5e16e9ce4c5b07731e530134ae914687cefdc56d8148d7722649a3f3e15bce2d70c54552c9227c816790921ef830a56389c6051d42d92ae046f8a71bdfcbe41b4cd59e1efb53cc3325d3c0ed4360cd23f1719ee074d3a81fe21d39ddc5517772764153a25246ea18562b880edf708a466f1b2b33d31f193d2b795cedd28bab6b3e20dbc30b64c9520441802910b2e27fa9402409bea5ba1ee52b6192f76b48f65b2ea069cd2176ba0d72254701cb65ccd97da3d2c661e96678d718686406207b37324e22f898844c4b5396d43f426797ed911a7333b7ddab146d225d2b410054453fea52492dc6c3b00150afb82c73274ed38e4a0378a05ece8eb8ebdeb53c993e61dcf5bfa76bdfdb36482dbef68ff2938130e5471f2c2d25177a217e42eab2c68e51ad6fa5ec892f88466f6964d68170f6042f52d33c5c034bf286e91b89bbcabaa4161ad504cb4bdf5fa7a55d42f6351c63d432a565507850076bfbbabf1fcdf25038b3942f81f223fef038e8c7e746d55643eb61ab8ff25680afaf72d0f06b34258289bcfb29f30a9902c4aab7f8c0b65b176ce86eff52b8726c8b1d1939c889356cfebc43c06896227dbc3f4788b82637807b8b34d1f23e0a8c8fdf26d999f8f4610585dce2f248f8bf0ad46f27a7eaba4d4d539de939321b3d216b85471b162d728f196b25f15a414c1f82949c2ccdd1fd9e6748741d1cb41ee4bcbb0c0d772847a764ab6de3de0ea54527ac6cfa90241d638cb5a5b3ce36dfd0401fdb03539806b6e28b7384ea533026f8c7b639a8720ba39cfd59df8e9c1a4987991db9d9011f95d58938b6237858fcbcebb0dd7ce0c2940a0b45a59b77a0f9a43b910d1eeaa02f3a2873b38984a60d32328e0d836fe1719b0645db9617e05bf70638bc9c382f6657e30320946588e044e65ab66051685bb4ad4212aa2668dea8b604ce5ec5567b292b94c31395c5cd58310abb5779ba3096cc25ed9273e7df33b1cdda0bd899c755a38b0d7a3cea0d1a1585e4c53cd7801eb2f85c5f26cb4ab64f9d5873adb5a216b5923ab95b2bf003eb3e973f2fdc183928404162ed38a75888efbadd27af2f052155f63253c5ea4a799479a149fea990cb2434fc4672bb7592e3af48b32ca5e7c900f95aa2661247e7fd7c2dc6cbce948dafe0b7378e71274d1cf6240abb297a60bd5b303e4436ccaee7e148231488463447c76f1f471e39562a12ba72a06a0fe9d68bedc936a789a6df124e0421cf4b675d9b3dab02e8e7f5090c5f20cf976e1425de120581452288872eb0cb9af2a2b3f64f131b5e9469f0a1055a867c4d608fe9117241cbc611aefb212232f7fbd07993e4ca8f91708c680f0d1b903d4e5028be59ec92acc0971af8a3204fb3fb62d595d18e29dc6cde0a80ca0a47b6847b38b602e561fb65f2af0053b39b0aae1106085aad15e639094da3c7dcac1e886c0980d663d0a977fee13115f25d933a63d72383f0cee3950114138d7e125f748673cd6d2dab51571aad4ace5986007043d102331497d3d1a79ef313999055d529ba8efa21f3470115b379dad821991271ee7dca1f4f1300f1d8ac5f198fda7933a41825d614647ecaa640ba36c7d62d1fb59da4b2cd9986b754ba22aa54bb144aceec37ee6dc20ba0ae3eb17e5ad46c94b7f3b46a2c4f08ee3042602fd061608bdb6a29b77c180b801ade2df61d2a8648b6258499134b7001a2ac1a0bd2523224443d1d79708cd3b30a75826cfd11c844a5f45471cceea3d6cfd794eb5fb60bde66062a37070a214338c0e12b72a37b21cd5b50295e30a42c077d6f290a0623d9b5d92be062e33e7a13f90b4196dcb55491f7235a5bbfdd29ccbb4cee8c14f8ddeee49dc0eadc0dba9708e8ca45926e277ed01c93e8f61796b805be7c1f381735e60bbb9e3087d7ccd626323375b88f0d6a0be1e76aaaaf9a057e470277509e33c7e4b01dd5396d7a86525d9908396b3457d9147c48cfea11ae55897d537dcdf620bee85728dfe16eb4d0d7f976135fa1faafa37f6ceef958bda462cc29845edd420323e2be631ba7c6218a934458a794c3a2d9390e8a4151aa2d889096872a602f42134dcfcac526d0c4ea1e3d91ad9971ef6ac87c5964c8bc16c4b33c947fec7a840669f302112c5dee9850764268bfc4b5194595ab7421e43e1b7797b013fb1adedda1f51452432728af922105e6ad6daa93ab71d36fa67921149b7ed53cee12ebd3c5f72c46f8227feb9c927787de73b062c7ad47aa083b51033080da1da6ed71c57e9f5ee8c6a71bb95976bd491d3e30a8d18479912560adf2ee520e14989e407fb280e29990db1b609495a1b475574be58f016a3a819e13c06fe88cbfeef1c506cfcdafea875c7caf1f7dd3b19ef853c3702afa777061c86a784f4b4d0a20e4d196c67df4bcc2987c84554bf64d5b0c227305bf54e454154b1a6dbd8c4bbcf978edad7d54f7a264644076b3a6e00dc404d0e7567229d1037f3ed941ec6c85b9cdc88a780a13077d852f97a92927d02eee22b90be0517ece1e68b1d6de3429fe6c955da12b8ef0023438921e08ca209f67e0fd652604ef312471f4532a3ada8b14042855867a1bfb9e11ad3729e2d2775d90b49b0316dfc75b3b42ae55fdd49df779d1ce8ae2d92c7c75d3fc0bdb024d9b23af438ae0340634b35faa86fef65a210bc4c2e3a52e7bef89bb0752a68fc19acb626e1c664c1809ecb98e7f9359f50cc05b0f24c18a76ee160256b43ecf1e68ffb5e546929d1ae8ce479509a79ab3f2040802b75d96a40bd030de58a71602cc4c3166080a2b099ae3d4f37fbe220b19f7ac6339db36a1be5343d8f1e424d175c1ad878ef34d3bd1c7be34a9c79ef61b2db0c8b536fab90ce55228f3d71c29293ab783c0c7b76a39bea3e6866b3af401ac95c4a3b673095152c1697ba1d6f3376b2f9f02c5bc78a2cacfcc8e280c43ed37bbc29bf6c9d95f520391fc9c1a4553906d9d1e4290e0bedaa61d139466e8d140a2c5c761056827c18dab6e1aa2edd38d1545e07f10f4941435f7f716a9dfef80480186a218e3a855c93647f4a98a0592ef24795cd633175e6ef7f57582538791f7b9564ed637a49c64415ce353ccccaa18050750228db76ee0100d91b0948cf84eaeabedae56645f7b80b247e83385767d992827fb99825dde4576e6f785c55d2edb06e3258bae30859978d70a079a1b61d6e4d7ff0711a6dff3c7f3a93ba13361881eeb6ffc4b5fab7fc3a22b526646182839270f65314c309f3314bbfdcfefb8bc30935023ee9efaaa23d1675d67176beab907dbce13cf105da5389b5fe0d4e8749"}, {0x0, 0x114, 0x8000, "dfc7d0a390838a3e00e8245e81dee1867b025c016004673cf44e3b3551b8a4c8327462f13c0d9a85bef88191f83212e30d4e081552d36323eb217a601c0ecf56e0675e34d559cb8e371228fbd9e3df875ae85586454c49598dac7fcdff44c3cfac026062172f73aba3f21814b469e78a2e7e07caf038b6afbeb1fdf5bb83c3bd99edff3e319c40a028fa8a2094f4a49614e4693eb234d6530ec06a8925137bb4b3142fb2f7857cf052cd2dc16d7e51a86a87f5edd1d140d84329702022b5728a82abbf648ba82e4b5275e561d567e48df75cfdb0b45622a89364927883a0155c0b65b9"}], 0x1a0}}], 0x2, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000440)=0xfffff000, 0x4) r6 = syz_init_net_socket$ax25(0x3, 0x2, 0x1) getsockopt$sock_buf(r6, 0x1, 0x1a, 0x0, &(0x7f0000000040)) 60.878081ms ago: executing program 0 (id=1163): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xcd) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000001c0), 0x12) r3 = openat$cgroup_freezer_state(r1, &(0x7f0000000080), 0x2, 0x0) write$cgroup_freezer_state(r3, &(0x7f00000000c0)='THAWED\x00', 0x7) ioctl$SIOCAX25DELUID(r0, 0x89e2, &(0x7f0000000600)={0x3, @default}) 60.193628ms ago: executing program 2 (id=1164): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x78, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_REPLY={0x14, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}]}]}, 0x78}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r3, 0x10c, 0x2, &(0x7f0000000000)=0xffffffe1, 0x4) write$tun(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x8a) 0s ago: executing program 4 (id=1165): r0 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) (async) r1 = socket$unix(0x1, 0x5, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x2c, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}]}, 0x2c}}, 0x0) (async) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000a80)=ANY=[@ANYBLOB="3c0000001800dd8d00000000fdffffff020000000000000600000000060015000100000018001680140001"], 0x3c}}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x58, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xe0, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000003c0), &(0x7f00000004c0)=[0x0, 0x0, 0x0], 0x0, 0x9d, &(0x7f0000000680)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0xbb, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r8, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) (async) r9 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r9, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000, 0x5, 0x2}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r9, 0x11b, 0x6, &(0x7f0000000200)=0x1, 0x4) (async) r10 = socket$inet6_udplite(0xa, 0x2, 0x88) (async) setsockopt$XDP_RX_RING(r9, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r9, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r9, &(0x7f0000000100)={0x2c, 0x0, r11, 0x0, r9}, 0x10) (async) bind$xdp(r8, &(0x7f0000000180)={0x2c, 0x1, r11, 0x0, r9}, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f00000009c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000980)={&(0x7f00000007c0)={0x1b0, r4, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x4}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x40040}, 0x0) (async) r12 = socket$netlink(0x10, 0x3, 0x0) (async) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r13, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="4400000010000104fcfffffffbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0315000004000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r14, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=r13, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) socket(0x10, 0x803, 0x2) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.49' (ED25519) to the list of known hosts. [ 81.254173][ T5810] cgroup: Unknown subsys name 'net' [ 81.368125][ T5810] cgroup: Unknown subsys name 'cpuset' [ 81.377422][ T5810] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.006467][ T5810] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 85.182860][ T5827] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.201416][ T5831] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 85.202690][ T5836] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 85.210354][ T5831] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 85.217813][ T5836] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 85.225191][ T5831] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.231945][ T5836] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 85.238708][ T5831] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 85.246533][ T5836] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.252872][ T5831] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.268286][ T5836] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.276998][ T5831] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 85.284543][ T5831] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.292687][ T5836] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.292892][ T5831] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 85.349911][ T5829] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.363348][ T5829] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.371828][ T5829] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 85.383272][ T5144] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.390952][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 85.400973][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.408661][ T5144] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 85.422273][ T5831] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 85.436902][ T5831] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 85.444830][ T5831] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 85.994982][ T5823] chnl_net:caif_netlink_parms(): no params data found [ 86.085317][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 86.132873][ T5824] chnl_net:caif_netlink_parms(): no params data found [ 86.257863][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 86.385997][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.393913][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.401302][ T5823] bridge_slave_0: entered allmulticast mode [ 86.409499][ T5823] bridge_slave_0: entered promiscuous mode [ 86.428906][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 86.457444][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.465163][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.472902][ T5825] bridge_slave_0: entered allmulticast mode [ 86.480550][ T5825] bridge_slave_0: entered promiscuous mode [ 86.488424][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.496279][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.503824][ T5825] bridge_slave_1: entered allmulticast mode [ 86.511297][ T5825] bridge_slave_1: entered promiscuous mode [ 86.519612][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.527427][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.535127][ T5823] bridge_slave_1: entered allmulticast mode [ 86.542304][ T5823] bridge_slave_1: entered promiscuous mode [ 86.616028][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.624057][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.631424][ T5824] bridge_slave_0: entered allmulticast mode [ 86.641048][ T5824] bridge_slave_0: entered promiscuous mode [ 86.697924][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.705536][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.713031][ T5824] bridge_slave_1: entered allmulticast mode [ 86.720562][ T5824] bridge_slave_1: entered promiscuous mode [ 86.745609][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.759759][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.771651][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.788802][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.796316][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.804060][ T5835] bridge_slave_0: entered allmulticast mode [ 86.811367][ T5835] bridge_slave_0: entered promiscuous mode [ 86.840198][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.856155][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.864521][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.872373][ T5835] bridge_slave_1: entered allmulticast mode [ 86.880120][ T5835] bridge_slave_1: entered promiscuous mode [ 86.889804][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.925140][ T5825] team0: Port device team_slave_0 added [ 86.968675][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.983435][ T5825] team0: Port device team_slave_1 added [ 87.060770][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.078053][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.122557][ T5823] team0: Port device team_slave_0 added [ 87.132515][ T5823] team0: Port device team_slave_1 added [ 87.139007][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.147292][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.155168][ T5833] bridge_slave_0: entered allmulticast mode [ 87.163354][ T5833] bridge_slave_0: entered promiscuous mode [ 87.249418][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.257183][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.265028][ T5833] bridge_slave_1: entered allmulticast mode [ 87.273329][ T5833] bridge_slave_1: entered promiscuous mode [ 87.308533][ T5835] team0: Port device team_slave_0 added [ 87.317006][ T5824] team0: Port device team_slave_0 added [ 87.324933][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.333107][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.360674][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.384386][ T5829] Bluetooth: hci0: command tx timeout [ 87.384470][ T5144] Bluetooth: hci2: command tx timeout [ 87.390296][ T5831] Bluetooth: hci1: command tx timeout [ 87.412081][ T5824] team0: Port device team_slave_1 added [ 87.420011][ T5835] team0: Port device team_slave_1 added [ 87.426896][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.434464][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.461758][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.472670][ T5831] Bluetooth: hci3: command tx timeout [ 87.482883][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.490581][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.517984][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.544185][ T5831] Bluetooth: hci4: command tx timeout [ 87.573236][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.580568][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.607533][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.623310][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.636935][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.658856][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.666456][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.693956][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.706238][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.713337][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.744848][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.787227][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.794697][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.821400][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.833494][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.841198][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.868560][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.921326][ T5825] hsr_slave_0: entered promiscuous mode [ 87.928141][ T5825] hsr_slave_1: entered promiscuous mode [ 87.960942][ T5833] team0: Port device team_slave_0 added [ 87.969430][ T5833] team0: Port device team_slave_1 added [ 87.983455][ T5823] hsr_slave_0: entered promiscuous mode [ 87.990570][ T5823] hsr_slave_1: entered promiscuous mode [ 87.997614][ T5823] debugfs: 'hsr0' already exists in 'hsr' [ 88.003863][ T5823] Cannot create hsr debugfs directory [ 88.090630][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.098569][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.125684][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.152831][ T5835] hsr_slave_0: entered promiscuous mode [ 88.159460][ T5835] hsr_slave_1: entered promiscuous mode [ 88.166228][ T5835] debugfs: 'hsr0' already exists in 'hsr' [ 88.172517][ T5835] Cannot create hsr debugfs directory [ 88.185703][ T5824] hsr_slave_0: entered promiscuous mode [ 88.192291][ T5824] hsr_slave_1: entered promiscuous mode [ 88.198802][ T5824] debugfs: 'hsr0' already exists in 'hsr' [ 88.204852][ T5824] Cannot create hsr debugfs directory [ 88.218713][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.226013][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.252953][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.466832][ T5833] hsr_slave_0: entered promiscuous mode [ 88.474004][ T5833] hsr_slave_1: entered promiscuous mode [ 88.480173][ T5833] debugfs: 'hsr0' already exists in 'hsr' [ 88.486202][ T5833] Cannot create hsr debugfs directory [ 88.890308][ T5825] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 88.906055][ T5825] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 88.926777][ T5825] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 88.938499][ T5825] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 89.000871][ T5823] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 89.015128][ T5823] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 89.028898][ T5823] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 89.052187][ T5823] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 89.149537][ T5835] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 89.176859][ T5835] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 89.208986][ T5835] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 89.220209][ T5835] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 89.288881][ T5824] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.309746][ T5824] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.321757][ T5824] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 89.347904][ T5824] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 89.379271][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.448681][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.463915][ T5144] Bluetooth: hci1: command tx timeout [ 89.464220][ T5829] Bluetooth: hci0: command tx timeout [ 89.469496][ T5831] Bluetooth: hci2: command tx timeout [ 89.527571][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.543898][ T5831] Bluetooth: hci3: command tx timeout [ 89.557529][ T5833] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 89.574604][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.582483][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.598417][ T4389] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.605984][ T4389] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.626310][ T5831] Bluetooth: hci4: command tx timeout [ 89.632043][ T5833] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 89.643254][ T5833] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 89.660167][ T5823] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.684581][ T5833] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 89.720715][ T4389] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.727945][ T4389] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.755566][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.788425][ T4389] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.795810][ T4389] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.838724][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.856910][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.881372][ T4389] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.889005][ T4389] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.931514][ T4389] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.939747][ T4389] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.961009][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.025396][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.032572][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.082137][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.089615][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.289356][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.323170][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.469983][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.523632][ T150] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.531161][ T150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.542398][ T150] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.549555][ T150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.579975][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.639950][ T5825] veth0_vlan: entered promiscuous mode [ 90.669018][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.693120][ T5825] veth1_vlan: entered promiscuous mode [ 90.817706][ T5824] veth0_vlan: entered promiscuous mode [ 90.845724][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.865946][ T5823] veth0_vlan: entered promiscuous mode [ 90.895670][ T5824] veth1_vlan: entered promiscuous mode [ 90.906209][ T5825] veth0_macvtap: entered promiscuous mode [ 90.930594][ T5823] veth1_vlan: entered promiscuous mode [ 90.939902][ T5825] veth1_macvtap: entered promiscuous mode [ 91.032039][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.068593][ T5824] veth0_macvtap: entered promiscuous mode [ 91.092202][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.112435][ T5824] veth1_macvtap: entered promiscuous mode [ 91.143316][ T150] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.155215][ T150] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.168560][ T150] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.191037][ T5823] veth0_macvtap: entered promiscuous mode [ 91.198749][ T150] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.209408][ T5835] veth0_vlan: entered promiscuous mode [ 91.235177][ T5823] veth1_macvtap: entered promiscuous mode [ 91.260560][ T5835] veth1_vlan: entered promiscuous mode [ 91.276380][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.297358][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.319283][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.350673][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.388642][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.403358][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.432868][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.471228][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.495600][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.550934][ T5831] Bluetooth: hci2: command tx timeout [ 91.550958][ T5829] Bluetooth: hci1: command tx timeout [ 91.550970][ T5144] Bluetooth: hci0: command tx timeout [ 91.569492][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.590182][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.602584][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.613736][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.622327][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.631784][ T5831] Bluetooth: hci3: command tx timeout [ 91.674399][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.708156][ T5831] Bluetooth: hci4: command tx timeout [ 91.754551][ T5835] veth0_macvtap: entered promiscuous mode [ 91.771675][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.785274][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.788831][ T5835] veth1_macvtap: entered promiscuous mode [ 91.882747][ T5825] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 91.926072][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.941370][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.980374][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.044893][ T4389] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.053274][ T4389] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.079301][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.090002][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.098972][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.111261][ T5943] IPVS: persistence engine module ip_vs_pe_À not found [ 92.122488][ T5945] xt_l2tp: v2 tid > 0xffff: 1114244 [ 92.126131][ T29] cfg80211: failed to load regulatory.db [ 92.140047][ T5833] veth0_vlan: entered promiscuous mode [ 92.225907][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.244628][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.278553][ T5833] veth1_vlan: entered promiscuous mode [ 92.309532][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.318728][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.329626][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.338392][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.442283][ T5950] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 92.630823][ T5955] Cannot find add_set index 0 as target [ 92.636752][ T4389] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.638653][ T5833] veth0_macvtap: entered promiscuous mode [ 92.679041][ T4389] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.704726][ T5833] veth1_macvtap: entered promiscuous mode [ 92.803276][ T4389] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.842072][ T4389] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.858001][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.881024][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.947912][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.012588][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.045597][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.204194][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.249763][ T5967] syzkaller0: entered promiscuous mode [ 93.260451][ T5967] syzkaller0: entered allmulticast mode [ 93.353532][ T5979] netlink: 28 bytes leftover after parsing attributes in process `syz.0.14'. [ 93.368928][ T5981] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 93.598057][ T5991] FAULT_INJECTION: forcing a failure. [ 93.598057][ T5991] name failslab, interval 1, probability 0, space 0, times 1 [ 93.611163][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.624039][ T5831] Bluetooth: hci0: command tx timeout [ 93.629662][ T5831] Bluetooth: hci2: command tx timeout [ 93.636699][ T5831] Bluetooth: hci1: command tx timeout [ 93.648811][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.672352][ T5991] CPU: 1 UID: 0 PID: 5991 Comm: syz.2.17 Not tainted syzkaller #0 PREEMPT(full) [ 93.672381][ T5991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 93.672392][ T5991] Call Trace: [ 93.672463][ T5991] [ 93.672472][ T5991] dump_stack_lvl+0xe8/0x150 [ 93.672506][ T5991] should_fail_ex+0x412/0x560 [ 93.672533][ T5991] should_failslab+0xa8/0x100 [ 93.672556][ T5991] ? skb_clone+0x212/0x3a0 [ 93.672587][ T5991] kmem_cache_alloc_noprof+0x87/0x650 [ 93.672617][ T5991] ? __netlink_lookup+0xc6/0x8b0 [ 93.672649][ T5991] skb_clone+0x212/0x3a0 [ 93.672681][ T5991] __netlink_deliver_tap+0x404/0x850 [ 93.672717][ T5991] ? netlink_deliver_tap+0x2e/0x1b0 [ 93.672740][ T5991] netlink_deliver_tap+0x19c/0x1b0 [ 93.672763][ T5991] netlink_unicast+0x7e3/0x9b0 [ 93.672793][ T5991] ? __pfx_netlink_unicast+0x10/0x10 [ 93.672815][ T5991] ? netlink_sendmsg+0x650/0xb40 [ 93.672836][ T5991] ? skb_put+0x11b/0x210 [ 93.672865][ T5991] netlink_sendmsg+0x813/0xb40 [ 93.672899][ T5991] ? __pfx_netlink_sendmsg+0x10/0x10 [ 93.672927][ T5991] ? aa_sock_msg_perm+0xf1/0x1b0 [ 93.672952][ T5991] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 93.672975][ T5991] ? __pfx_netlink_sendmsg+0x10/0x10 [ 93.672998][ T5991] ____sys_sendmsg+0xa68/0xad0 [ 93.673036][ T5991] ? __pfx_____sys_sendmsg+0x10/0x10 [ 93.673075][ T5991] ? import_iovec+0x73/0xa0 [ 93.673106][ T5991] ___sys_sendmsg+0x2a5/0x360 [ 93.673141][ T5991] ? __pfx____sys_sendmsg+0x10/0x10 [ 93.673205][ T5991] ? __fget_files+0x2a/0x420 [ 93.673231][ T5991] ? __fget_files+0x3a0/0x420 [ 93.673268][ T5991] __x64_sys_sendmsg+0x1bd/0x2a0 [ 93.673299][ T5991] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 93.673337][ T5991] ? __pfx_ksys_write+0x10/0x10 [ 93.673377][ T5991] do_syscall_64+0x14d/0xf80 [ 93.673415][ T5991] ? trace_irq_disable+0x3b/0x150 [ 93.673442][ T5991] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.673462][ T5991] ? clear_bhb_loop+0x40/0x90 [ 93.673486][ T5991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.673506][ T5991] RIP: 0033:0x7fa7e039c799 [ 93.673525][ T5991] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.673540][ T5991] RSP: 002b:00007fa7e1254028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 93.673562][ T5991] RAX: ffffffffffffffda RBX: 00007fa7e0615fa0 RCX: 00007fa7e039c799 [ 93.673574][ T5991] RDX: 0000000000000004 RSI: 0000200000000180 RDI: 0000000000000003 [ 93.673586][ T5991] RBP: 00007fa7e1254090 R08: 0000000000000000 R09: 0000000000000000 [ 93.673597][ T5991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 93.673607][ T5991] R13: 00007fa7e0616038 R14: 00007fa7e0615fa0 R15: 00007ffd754db018 [ 93.673636][ T5991] [ 93.951705][ T5831] Bluetooth: hci3: command tx timeout [ 93.958424][ T5144] Bluetooth: hci4: command tx timeout [ 94.217429][ T6001] netlink: 4 bytes leftover after parsing attributes in process `syz.0.20'. [ 94.230663][ T141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.241108][ T5999] warning: `syz.3.21' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 94.261885][ T6003] netlink: 8 bytes leftover after parsing attributes in process `syz.2.22'. [ 94.264775][ T141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.391096][ T6010] syz.2.24 uses obsolete (PF_INET,SOCK_PACKET) [ 94.549981][ T6001] netlink: 4 bytes leftover after parsing attributes in process `syz.0.20'. [ 94.611338][ T6012] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 94.632846][ T6015] Zero length message leads to an empty skb [ 94.650143][ T6015] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 94.705469][ T6017] netlink: 28 bytes leftover after parsing attributes in process `syz.2.27'. [ 94.930535][ T6026] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 94.991499][ T6027] FAULT_INJECTION: forcing a failure. [ 94.991499][ T6027] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 95.061891][ T6027] CPU: 0 UID: 0 PID: 6027 Comm: syz.2.30 Not tainted syzkaller #0 PREEMPT(full) [ 95.061920][ T6027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 95.061932][ T6027] Call Trace: [ 95.061940][ T6027] [ 95.061949][ T6027] dump_stack_lvl+0xe8/0x150 [ 95.062000][ T6027] should_fail_ex+0x412/0x560 [ 95.062035][ T6027] _copy_from_iter+0x1d3/0x1670 [ 95.062075][ T6027] ? __pfx__copy_from_iter+0x10/0x10 [ 95.062106][ T6027] ? alloc_pages_noprof+0xbd/0x190 [ 95.062133][ T6027] ? skb_page_frag_refill+0x199/0x310 [ 95.062174][ T6027] kcm_sendmsg+0xe0c/0x2b60 [ 95.062239][ T6027] ? __pfx_kcm_sendmsg+0x10/0x10 [ 95.062264][ T6027] ? aa_sock_msg_perm+0xf1/0x1b0 [ 95.062290][ T6027] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 95.062314][ T6027] ? __pfx_kcm_sendmsg+0x10/0x10 [ 95.062332][ T6027] ____sys_sendmsg+0xa68/0xad0 [ 95.062384][ T6027] ? __pfx_____sys_sendmsg+0x10/0x10 [ 95.062424][ T6027] ? import_iovec+0x73/0xa0 [ 95.062457][ T6027] ___sys_sendmsg+0x2a5/0x360 [ 95.062492][ T6027] ? __pfx____sys_sendmsg+0x10/0x10 [ 95.062563][ T6027] ? __fget_files+0x2a/0x420 [ 95.062590][ T6027] ? __fget_files+0x3a0/0x420 [ 95.062631][ T6027] __x64_sys_sendmsg+0x1bd/0x2a0 [ 95.062662][ T6027] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 95.062701][ T6027] ? __pfx_ksys_write+0x10/0x10 [ 95.062733][ T6027] do_syscall_64+0x14d/0xf80 [ 95.062763][ T6027] ? trace_irq_disable+0x3b/0x150 [ 95.062790][ T6027] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.062811][ T6027] ? clear_bhb_loop+0x40/0x90 [ 95.062838][ T6027] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.062858][ T6027] RIP: 0033:0x7fa7e039c799 [ 95.062878][ T6027] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.062896][ T6027] RSP: 002b:00007fa7e1254028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 95.062919][ T6027] RAX: ffffffffffffffda RBX: 00007fa7e0615fa0 RCX: 00007fa7e039c799 [ 95.062934][ T6027] RDX: 0000000000000000 RSI: 0000200000002080 RDI: 0000000000000003 [ 95.062947][ T6027] RBP: 00007fa7e1254090 R08: 0000000000000000 R09: 0000000000000000 [ 95.062960][ T6027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 95.062972][ T6027] R13: 00007fa7e0616038 R14: 00007fa7e0615fa0 R15: 00007ffd754db018 [ 95.063006][ T6027] [ 95.596645][ T6035] netlink: 1688 bytes leftover after parsing attributes in process `syz.4.35'. [ 95.890558][ T6051] netlink: 28 bytes leftover after parsing attributes in process `syz.2.40'. [ 96.200934][ T6069] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.49'. [ 96.242043][ T6069] netlink: Conntrack attr has 4 unknown bytes [ 96.461324][ T6076] netlink: 'syz.0.51': attribute type 72 has an invalid length. [ 96.470577][ T6081] netlink: 'syz.3.52': attribute type 6 has an invalid length. [ 96.491782][ T6081] netlink: 'syz.3.52': attribute type 6 has an invalid length. [ 96.520937][ T6081] netlink: 'syz.3.52': attribute type 6 has an invalid length. [ 96.631012][ T6087] netlink: 'syz.2.54': attribute type 1 has an invalid length. [ 96.803243][ T6100] netlink: 28 bytes leftover after parsing attributes in process `syz.4.57'. [ 96.974956][ T6105] IPv6: sit1: Disabled Multicast RS [ 96.983361][ T6105] sit1: entered allmulticast mode [ 97.012605][ T6108] syz_tun: entered allmulticast mode [ 97.602323][ T6143] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 98.000935][ T6155] netlink: 'syz.4.65': attribute type 72 has an invalid length. [ 98.036099][ T6162] FAULT_INJECTION: forcing a failure. [ 98.036099][ T6162] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 98.074325][ T6162] CPU: 0 UID: 0 PID: 6162 Comm: syz.0.67 Not tainted syzkaller #0 PREEMPT(full) [ 98.074354][ T6162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 98.074366][ T6162] Call Trace: [ 98.074375][ T6162] [ 98.074383][ T6162] dump_stack_lvl+0xe8/0x150 [ 98.074418][ T6162] should_fail_ex+0x412/0x560 [ 98.074447][ T6162] _copy_from_user+0x2d/0xb0 [ 98.074476][ T6162] generic_map_update_batch+0x69a/0x990 [ 98.074512][ T6162] ? __pfx_generic_map_update_batch+0x10/0x10 [ 98.074536][ T6162] ? __fget_files+0x2a/0x420 [ 98.074575][ T6162] ? __pfx_generic_map_update_batch+0x10/0x10 [ 98.074598][ T6162] bpf_map_do_batch+0x39b/0x630 [ 98.074620][ T6162] __sys_bpf+0x7c1/0x950 [ 98.074649][ T6162] ? __pfx___sys_bpf+0x10/0x10 [ 98.074691][ T6162] ? ksys_write+0x242/0x270 [ 98.074712][ T6162] ? __pfx_ksys_write+0x10/0x10 [ 98.074739][ T6162] __x64_sys_bpf+0x7c/0x90 [ 98.074765][ T6162] do_syscall_64+0x14d/0xf80 [ 98.074791][ T6162] ? trace_irq_disable+0x3b/0x150 [ 98.074817][ T6162] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.074836][ T6162] ? clear_bhb_loop+0x40/0x90 [ 98.074859][ T6162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.074877][ T6162] RIP: 0033:0x7f9d7ad9c799 [ 98.074896][ T6162] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 98.074912][ T6162] RSP: 002b:00007f9d78ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 98.074934][ T6162] RAX: ffffffffffffffda RBX: 00007f9d7b015fa0 RCX: 00007f9d7ad9c799 [ 98.074948][ T6162] RDX: 0000000000000038 RSI: 0000200000000300 RDI: 000000000000001a [ 98.074960][ T6162] RBP: 00007f9d78ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 98.074972][ T6162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 98.074983][ T6162] R13: 00007f9d7b016038 R14: 00007f9d7b015fa0 R15: 00007ffcd86cc3c8 [ 98.075015][ T6162] [ 98.316235][ T6167] syz_tun: entered allmulticast mode [ 98.479831][ T6173] netlink: 28 bytes leftover after parsing attributes in process `syz.4.70'. [ 98.872208][ T6171] syz.2.73 (6171) used greatest stack depth: 15176 bytes left [ 99.459623][ T6193] netlink: 20 bytes leftover after parsing attributes in process `syz.1.79'. [ 99.523862][ T6217] netlink: 220 bytes leftover after parsing attributes in process `syz.4.85'. [ 99.559649][ T6217] netlink: 'syz.4.85': attribute type 2 has an invalid length. [ 99.922851][ T6231] netlink: 24 bytes leftover after parsing attributes in process `syz.0.91'. [ 99.990068][ T6236] FAULT_INJECTION: forcing a failure. [ 99.990068][ T6236] name failslab, interval 1, probability 0, space 0, times 0 [ 100.026410][ T6236] CPU: 0 UID: 0 PID: 6236 Comm: syz.2.94 Not tainted syzkaller #0 PREEMPT(full) [ 100.026440][ T6236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 100.026451][ T6236] Call Trace: [ 100.026458][ T6236] [ 100.026466][ T6236] dump_stack_lvl+0xe8/0x150 [ 100.026498][ T6236] should_fail_ex+0x412/0x560 [ 100.026527][ T6236] should_failslab+0xa8/0x100 [ 100.026552][ T6236] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 100.026584][ T6236] ? __alloc_skb+0x186/0x7d0 [ 100.026609][ T6236] ? __alloc_skb+0x1d0/0x7d0 [ 100.026631][ T6236] ? __local_bh_enable_ip+0xd0/0x130 [ 100.026661][ T6236] __alloc_skb+0x1d0/0x7d0 [ 100.026685][ T6236] ? __mutex_trylock_common+0x158/0x260 [ 100.026718][ T6236] alloc_skb_with_frags+0xca/0x890 [ 100.026759][ T6236] sock_alloc_send_pskb+0x878/0x990 [ 100.026805][ T6236] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 100.026837][ T6236] ? __pfx__copy_from_iter+0x10/0x10 [ 100.026871][ T6236] l2cap_sock_alloc_skb_cb+0xef/0x490 [ 100.026907][ T6236] ? __pfx_l2cap_sock_alloc_skb_cb+0x10/0x10 [ 100.026938][ T6236] ? skb_put+0x11b/0x210 [ 100.026967][ T6236] l2cap_chan_send+0xe87/0x25a0 [ 100.026991][ T6236] ? lockdep_hardirqs_on+0x7a/0x110 [ 100.027023][ T6236] ? l2cap_sock_sendmsg+0x2d0/0x4e0 [ 100.027054][ T6236] ? __pfx_l2cap_chan_send+0x10/0x10 [ 100.027091][ T6236] ? l2cap_sock_sendmsg+0x2d1/0x4e0 [ 100.027116][ T6236] ? l2cap_sock_sendmsg+0x2d1/0x4e0 [ 100.027140][ T6236] ? __local_bh_enable_ip+0xd0/0x130 [ 100.027168][ T6236] l2cap_sock_sendmsg+0x33d/0x4e0 [ 100.027196][ T6236] ? __pfx_l2cap_sock_sendmsg+0x10/0x10 [ 100.027226][ T6236] ? aa_sock_msg_perm+0xf1/0x1b0 [ 100.027252][ T6236] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 100.027275][ T6236] ? __pfx_l2cap_sock_sendmsg+0x10/0x10 [ 100.027300][ T6236] ____sys_sendmsg+0xa68/0xad0 [ 100.027325][ T6236] ? __lock_acquire+0x6b5/0x2cf0 [ 100.027357][ T6236] ? __pfx_____sys_sendmsg+0x10/0x10 [ 100.027392][ T6236] ? import_iovec+0x73/0xa0 [ 100.027422][ T6236] ___sys_sendmsg+0x2a5/0x360 [ 100.027456][ T6236] ? __pfx____sys_sendmsg+0x10/0x10 [ 100.027490][ T6236] ? kstrtouint+0x6e/0xe0 [ 100.027537][ T6236] ? __fget_files+0x2a/0x420 [ 100.027563][ T6236] ? __fget_files+0x3a0/0x420 [ 100.027600][ T6236] __sys_sendmmsg+0x27c/0x4e0 [ 100.027634][ T6236] ? __pfx___sys_sendmmsg+0x10/0x10 [ 100.027660][ T6236] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 100.027707][ T6236] ? ksys_write+0x242/0x270 [ 100.027729][ T6236] ? __pfx_ksys_write+0x10/0x10 [ 100.027756][ T6236] __x64_sys_sendmmsg+0xa0/0xc0 [ 100.027787][ T6236] do_syscall_64+0x14d/0xf80 [ 100.027816][ T6236] ? trace_irq_disable+0x3b/0x150 [ 100.027853][ T6236] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.027874][ T6236] ? clear_bhb_loop+0x40/0x90 [ 100.027898][ T6236] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.027917][ T6236] RIP: 0033:0x7fa7e039c799 [ 100.027936][ T6236] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 100.027953][ T6236] RSP: 002b:00007fa7e1254028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 100.027988][ T6236] RAX: ffffffffffffffda RBX: 00007fa7e0615fa0 RCX: 00007fa7e039c799 [ 100.028003][ T6236] RDX: 0000000000000001 RSI: 0000200000003400 RDI: 0000000000000004 [ 100.028015][ T6236] RBP: 00007fa7e1254090 R08: 0000000000000000 R09: 0000000000000000 [ 100.028027][ T6236] R10: 0000000004000000 R11: 0000000000000246 R12: 0000000000000001 [ 100.028039][ T6236] R13: 00007fa7e0616038 R14: 00007fa7e0615fa0 R15: 00007ffd754db018 [ 100.028079][ T6236] [ 100.502007][ T6243] netlink: 128 bytes leftover after parsing attributes in process `syz.0.96'. [ 100.511873][ T6243] netlink: 128 bytes leftover after parsing attributes in process `syz.0.96'. [ 100.607345][ T6244] syz_tun: entered allmulticast mode [ 100.679655][ T6246] syzkaller0: entered promiscuous mode [ 100.717201][ T6246] syzkaller0: entered allmulticast mode [ 100.731944][ T6253] netlink: 27 bytes leftover after parsing attributes in process `syz.2.97'. [ 100.809424][ T6257] FAULT_INJECTION: forcing a failure. [ 100.809424][ T6257] name failslab, interval 1, probability 0, space 0, times 0 [ 100.823530][ T6257] CPU: 1 UID: 0 PID: 6257 Comm: syz.3.102 Not tainted syzkaller #0 PREEMPT(full) [ 100.823564][ T6257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 100.823576][ T6257] Call Trace: [ 100.823584][ T6257] [ 100.823592][ T6257] dump_stack_lvl+0xe8/0x150 [ 100.823626][ T6257] should_fail_ex+0x412/0x560 [ 100.823655][ T6257] should_failslab+0xa8/0x100 [ 100.823680][ T6257] __kmalloc_noprof+0xe8/0x760 [ 100.823702][ T6257] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 100.823741][ T6257] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 100.823778][ T6257] genl_family_rcv_msg_doit+0xd9/0x330 [ 100.823814][ T6257] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 100.823853][ T6257] ? apparmor_capable+0x126/0x170 [ 100.823884][ T6257] ? bpf_lsm_capable+0x9/0x20 [ 100.823908][ T6257] ? security_capable+0x7e/0x2c0 [ 100.823939][ T6257] genl_rcv_msg+0x61c/0x7a0 [ 100.823975][ T6257] ? __pfx_genl_rcv_msg+0x10/0x10 [ 100.824002][ T6257] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 100.824021][ T6257] ? __pfx_nl80211_set_interface+0x10/0x10 [ 100.824042][ T6257] ? __pfx_nl80211_post_doit+0x10/0x10 [ 100.824062][ T6257] ? __lock_acquire+0x6b5/0x2cf0 [ 100.824111][ T6257] netlink_rcv_skb+0x232/0x4b0 [ 100.824136][ T6257] ? __pfx_genl_rcv_msg+0x10/0x10 [ 100.824167][ T6257] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 100.824210][ T6257] ? down_read+0x272/0x2e0 [ 100.824230][ T6257] ? genl_rcv+0xd/0x40 [ 100.824260][ T6257] genl_rcv+0x28/0x40 [ 100.824285][ T6257] netlink_unicast+0x80f/0x9b0 [ 100.824317][ T6257] ? __pfx_netlink_unicast+0x10/0x10 [ 100.824349][ T6257] ? netlink_sendmsg+0x650/0xb40 [ 100.824369][ T6257] ? skb_put+0x11b/0x210 [ 100.824395][ T6257] netlink_sendmsg+0x813/0xb40 [ 100.824429][ T6257] ? __pfx_netlink_sendmsg+0x10/0x10 [ 100.824457][ T6257] ? aa_sock_msg_perm+0xf1/0x1b0 [ 100.824483][ T6257] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 100.824505][ T6257] ? __pfx_netlink_sendmsg+0x10/0x10 [ 100.824528][ T6257] ____sys_sendmsg+0xa68/0xad0 [ 100.824573][ T6257] ? __pfx_____sys_sendmsg+0x10/0x10 [ 100.824612][ T6257] ? import_iovec+0x73/0xa0 [ 100.824643][ T6257] ___sys_sendmsg+0x2a5/0x360 [ 100.824677][ T6257] ? __pfx____sys_sendmsg+0x10/0x10 [ 100.824741][ T6257] ? __fget_files+0x2a/0x420 [ 100.824768][ T6257] ? __fget_files+0x3a0/0x420 [ 100.824805][ T6257] __x64_sys_sendmsg+0x1bd/0x2a0 [ 100.824838][ T6257] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 100.824875][ T6257] ? __pfx_ksys_write+0x10/0x10 [ 100.824903][ T6257] do_syscall_64+0x14d/0xf80 [ 100.824928][ T6257] ? trace_irq_disable+0x3b/0x150 [ 100.824952][ T6257] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.824969][ T6257] ? clear_bhb_loop+0x40/0x90 [ 100.824991][ T6257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.825008][ T6257] RIP: 0033:0x7f4dc019c799 [ 100.825026][ T6257] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 100.825038][ T6257] RSP: 002b:00007f4dc10e8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 100.825057][ T6257] RAX: ffffffffffffffda RBX: 00007f4dc0415fa0 RCX: 00007f4dc019c799 [ 100.825072][ T6257] RDX: 0000000000000004 RSI: 0000200000000180 RDI: 0000000000000003 [ 100.825083][ T6257] RBP: 00007f4dc10e8090 R08: 0000000000000000 R09: 0000000000000000 [ 100.825095][ T6257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 100.825106][ T6257] R13: 00007f4dc0416038 R14: 00007f4dc0415fa0 R15: 00007ffd561844b8 [ 100.825139][ T6257] [ 101.171626][ T6258] netlink: 12 bytes leftover after parsing attributes in process `syz.0.100'. [ 101.182040][ T6258] netlink: 8 bytes leftover after parsing attributes in process `syz.0.100'. [ 101.191012][ T6258] netlink: 4 bytes leftover after parsing attributes in process `syz.0.100'. [ 101.699737][ T6275] veth0: entered promiscuous mode [ 101.710243][ T6279] veth0: left promiscuous mode [ 101.820540][ T6274] gretap1: entered promiscuous mode [ 101.854869][ T6274] gretap1: entered allmulticast mode [ 102.032621][ T5831] Bluetooth: hci4: command tx timeout [ 102.235911][ T6305] netlink: Conntrack attr has 4 unknown bytes [ 102.679694][ T6324] Cannot find del_set index 0 as target [ 102.767664][ T6326] syz_tun: entered allmulticast mode [ 102.887023][ T6329] FAULT_INJECTION: forcing a failure. [ 102.887023][ T6329] name failslab, interval 1, probability 0, space 0, times 0 [ 102.954489][ T6329] CPU: 0 UID: 0 PID: 6329 Comm: syz.2.126 Not tainted syzkaller #0 PREEMPT(full) [ 102.954520][ T6329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 102.954532][ T6329] Call Trace: [ 102.954540][ T6329] [ 102.954549][ T6329] dump_stack_lvl+0xe8/0x150 [ 102.954592][ T6329] should_fail_ex+0x412/0x560 [ 102.954619][ T6329] should_failslab+0xa8/0x100 [ 102.954644][ T6329] __kmalloc_noprof+0xe8/0x760 [ 102.954667][ T6329] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 102.954701][ T6329] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 102.954736][ T6329] genl_family_rcv_msg_doit+0xd9/0x330 [ 102.954769][ T6329] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 102.954804][ T6329] ? apparmor_capable+0x126/0x170 [ 102.954832][ T6329] ? bpf_lsm_capable+0x9/0x20 [ 102.954854][ T6329] ? security_capable+0x7e/0x2c0 [ 102.954879][ T6329] genl_rcv_msg+0x61c/0x7a0 [ 102.954913][ T6329] ? __pfx_genl_rcv_msg+0x10/0x10 [ 102.954938][ T6329] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 102.954957][ T6329] ? __pfx_nl80211_connect+0x10/0x10 [ 102.954978][ T6329] ? __pfx_nl80211_post_doit+0x10/0x10 [ 102.954997][ T6329] ? __lock_acquire+0x6b5/0x2cf0 [ 102.955034][ T6329] netlink_rcv_skb+0x232/0x4b0 [ 102.955066][ T6329] ? __pfx_genl_rcv_msg+0x10/0x10 [ 102.955096][ T6329] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 102.955138][ T6329] ? down_read+0x272/0x2e0 [ 102.955157][ T6329] ? genl_rcv+0xd/0x40 [ 102.955186][ T6329] genl_rcv+0x28/0x40 [ 102.955211][ T6329] netlink_unicast+0x80f/0x9b0 [ 102.955241][ T6329] ? __pfx_netlink_unicast+0x10/0x10 [ 102.955264][ T6329] ? netlink_sendmsg+0x650/0xb40 [ 102.955286][ T6329] ? skb_put+0x11b/0x210 [ 102.955313][ T6329] netlink_sendmsg+0x813/0xb40 [ 102.955347][ T6329] ? __pfx_netlink_sendmsg+0x10/0x10 [ 102.955374][ T6329] ? aa_sock_msg_perm+0xf1/0x1b0 [ 102.955399][ T6329] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 102.955423][ T6329] ? __pfx_netlink_sendmsg+0x10/0x10 [ 102.955445][ T6329] ____sys_sendmsg+0xa68/0xad0 [ 102.955482][ T6329] ? __pfx_____sys_sendmsg+0x10/0x10 [ 102.955521][ T6329] ? import_iovec+0x73/0xa0 [ 102.955552][ T6329] ___sys_sendmsg+0x2a5/0x360 [ 102.955585][ T6329] ? __pfx____sys_sendmsg+0x10/0x10 [ 102.955650][ T6329] ? __fget_files+0x2a/0x420 [ 102.955677][ T6329] ? __fget_files+0x3a0/0x420 [ 102.955715][ T6329] __x64_sys_sendmsg+0x1bd/0x2a0 [ 102.955747][ T6329] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 102.955785][ T6329] ? __pfx_ksys_write+0x10/0x10 [ 102.955818][ T6329] do_syscall_64+0x14d/0xf80 [ 102.955847][ T6329] ? trace_irq_disable+0x3b/0x150 [ 102.955873][ T6329] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.955893][ T6329] ? clear_bhb_loop+0x40/0x90 [ 102.955918][ T6329] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.955936][ T6329] RIP: 0033:0x7fa7e039c799 [ 102.955955][ T6329] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.955971][ T6329] RSP: 002b:00007fa7e1254028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 102.955993][ T6329] RAX: ffffffffffffffda RBX: 00007fa7e0615fa0 RCX: 00007fa7e039c799 [ 102.956006][ T6329] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 102.956018][ T6329] RBP: 00007fa7e1254090 R08: 0000000000000000 R09: 0000000000000000 [ 102.956030][ T6329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 102.956051][ T6329] R13: 00007fa7e0616038 R14: 00007fa7e0615fa0 R15: 00007ffd754db018 [ 102.956082][ T6329] [ 103.563345][ T6346] netlink: 'syz.3.130': attribute type 4 has an invalid length. [ 103.573455][ T6348] __nla_validate_parse: 8 callbacks suppressed [ 103.573476][ T6348] netlink: 12 bytes leftover after parsing attributes in process `syz.0.129'. [ 103.603525][ T6348] IPVS: set_ctl: invalid protocol: 92 172.20.20.187:0 [ 104.108711][ T6366] netlink: 'syz.1.139': attribute type 4 has an invalid length. [ 104.114825][ T6365] syz_tun: entered allmulticast mode [ 104.205228][ T6369] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 104.642326][ T6390] netlink: 'syz.0.144': attribute type 21 has an invalid length. [ 104.696658][ T6390] netlink: 156 bytes leftover after parsing attributes in process `syz.0.144'. [ 104.987882][ T6403] netlink: 'syz.4.154': attribute type 1 has an invalid length. [ 105.158973][ T1314] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 105.198985][ T1314] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 105.230452][ T1314] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 105.267719][ T337] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 105.344611][ T6422] bridge0: port 3(gretap0) entered blocking state [ 105.364656][ T6422] bridge0: port 3(gretap0) entered disabled state [ 105.371922][ T6422] gretap0: entered allmulticast mode [ 105.383138][ T6423] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 105.391002][ T6422] gretap0: entered promiscuous mode [ 105.409008][ T6422] bridge0: port 3(gretap0) entered blocking state [ 105.416311][ T6422] bridge0: port 3(gretap0) entered forwarding state [ 105.498779][ T6430] syzkaller0: entered promiscuous mode [ 105.507724][ T6430] syzkaller0: entered allmulticast mode [ 105.638902][ T6438] netlink: 'syz.2.163': attribute type 7 has an invalid length. [ 105.654909][ T6438] netlink: 'syz.2.163': attribute type 8 has an invalid length. [ 105.756689][ T6442] sctp: [Deprecated]: syz.4.166 (pid 6442) Use of int in maxseg socket option. [ 105.756689][ T6442] Use struct sctp_assoc_value instead [ 105.939013][ T6451] netlink: 8 bytes leftover after parsing attributes in process `syz.4.170'. [ 105.939994][ T6452] openvswitch: netlink: IPv4 tun info is not correct [ 105.968871][ T6451] netlink: 20 bytes leftover after parsing attributes in process `syz.4.170'. [ 105.991250][ T6454] netlink: 28 bytes leftover after parsing attributes in process `syz.0.171'. [ 106.157488][ T6457] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 106.192355][ T6461] netlink: 12 bytes leftover after parsing attributes in process `syz.4.173'. [ 106.756318][ T6481] netlink: 44 bytes leftover after parsing attributes in process `syz.0.184'. [ 107.069455][ T6494] netlink: 28 bytes leftover after parsing attributes in process `syz.4.188'. [ 108.544603][ T6511] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 109.176323][ T6544] netlink: 24 bytes leftover after parsing attributes in process `syz.3.206'. [ 109.989478][ T6584] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 110.302714][ T6597] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 110.668438][ T6608] netlink: 8 bytes leftover after parsing attributes in process `syz.4.231'. [ 111.218819][ T6630] x_tables: duplicate underflow at hook 1 [ 111.780524][ T6663] bridge2: entered promiscuous mode [ 111.786550][ T6663] bridge2: entered allmulticast mode [ 112.269338][ T6681] FAULT_INJECTION: forcing a failure. [ 112.269338][ T6681] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 112.280203][ T6682] trusted_key: syz.1.253 sent an empty control message without MSG_MORE. [ 112.286071][ T6681] CPU: 0 UID: 0 PID: 6681 Comm: syz.3.256 Not tainted syzkaller #0 PREEMPT(full) [ 112.286097][ T6681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 112.286107][ T6681] Call Trace: [ 112.286114][ T6681] [ 112.286122][ T6681] dump_stack_lvl+0xe8/0x150 [ 112.286152][ T6681] should_fail_ex+0x412/0x560 [ 112.286178][ T6681] _copy_from_user+0x2d/0xb0 [ 112.286204][ T6681] generic_map_update_batch+0x648/0x990 [ 112.286244][ T6681] ? __pfx_generic_map_update_batch+0x10/0x10 [ 112.286267][ T6681] ? __fget_files+0x2a/0x420 [ 112.286297][ T6681] ? __pfx_generic_map_update_batch+0x10/0x10 [ 112.286318][ T6681] bpf_map_do_batch+0x39b/0x630 [ 112.286342][ T6681] __sys_bpf+0x7c1/0x950 [ 112.286369][ T6681] ? __pfx___sys_bpf+0x10/0x10 [ 112.286409][ T6681] ? ksys_write+0x242/0x270 [ 112.286430][ T6681] ? __pfx_ksys_write+0x10/0x10 [ 112.286456][ T6681] __x64_sys_bpf+0x7c/0x90 [ 112.286480][ T6681] do_syscall_64+0x14d/0xf80 [ 112.286507][ T6681] ? trace_irq_disable+0x3b/0x150 [ 112.286531][ T6681] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.286548][ T6681] ? clear_bhb_loop+0x40/0x90 [ 112.286570][ T6681] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.286588][ T6681] RIP: 0033:0x7f4dc019c799 [ 112.286606][ T6681] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.286620][ T6681] RSP: 002b:00007f4dc10e8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 112.286640][ T6681] RAX: ffffffffffffffda RBX: 00007f4dc0415fa0 RCX: 00007f4dc019c799 [ 112.286653][ T6681] RDX: 0000000000000038 RSI: 0000200000000300 RDI: 000000000000001a [ 112.286664][ T6681] RBP: 00007f4dc10e8090 R08: 0000000000000000 R09: 0000000000000000 [ 112.286675][ T6681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 112.286685][ T6681] R13: 00007f4dc0416038 R14: 00007f4dc0415fa0 R15: 00007ffd561844b8 [ 112.286714][ T6681] [ 112.533203][ T6688] netlink: 8 bytes leftover after parsing attributes in process `syz.3.257'. [ 112.551434][ T6688] netlink: 4 bytes leftover after parsing attributes in process `syz.3.257'. [ 112.585732][ T337] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.591872][ T6688] netlink: 8 bytes leftover after parsing attributes in process `syz.3.257'. [ 112.595011][ T337] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.604053][ T6688] netlink: 4 bytes leftover after parsing attributes in process `syz.3.257'. [ 112.622975][ T337] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.633848][ T337] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.639056][ T6652] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 115.050238][ T6720] netlink: 'syz.0.267': attribute type 8 has an invalid length. [ 115.132532][ T6724] FAULT_INJECTION: forcing a failure. [ 115.132532][ T6724] name failslab, interval 1, probability 0, space 0, times 0 [ 115.165261][ T6724] CPU: 0 UID: 0 PID: 6724 Comm: syz.4.269 Not tainted syzkaller #0 PREEMPT(full) [ 115.165291][ T6724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 115.165302][ T6724] Call Trace: [ 115.165310][ T6724] [ 115.165318][ T6724] dump_stack_lvl+0xe8/0x150 [ 115.165352][ T6724] should_fail_ex+0x412/0x560 [ 115.165381][ T6724] should_failslab+0xa8/0x100 [ 115.165407][ T6724] __kmalloc_cache_noprof+0x88/0x660 [ 115.165427][ T6724] ? __sctp_v6_cmp_addr+0x1e6/0x510 [ 115.165454][ T6724] ? sctp_add_bind_addr+0x8c/0x370 [ 115.165483][ T6724] sctp_add_bind_addr+0x8c/0x370 [ 115.165513][ T6724] sctp_copy_local_addr_list+0x314/0x4f0 [ 115.165541][ T6724] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 115.165564][ T6724] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 115.165587][ T6724] ? sctp_association_new+0x1894/0x25e0 [ 115.165621][ T6724] ? sctp_v4_is_any+0x35/0x60 [ 115.165645][ T6724] ? sctp_copy_one_addr+0x93/0x360 [ 115.165674][ T6724] sctp_bind_addr_copy+0xb3/0x3c0 [ 115.165699][ T6724] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 115.165724][ T6724] sctp_connect_new_asoc+0x2ff/0x6b0 [ 115.165758][ T6724] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 115.165789][ T6724] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 115.165817][ T6724] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 115.165842][ T6724] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 115.165872][ T6724] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 115.165894][ T6724] ? security_sctp_bind_connect+0x7e/0x2c0 [ 115.165928][ T6724] sctp_sendmsg+0x1528/0x2c10 [ 115.165974][ T6724] ? __pfx_sctp_sendmsg+0x10/0x10 [ 115.166007][ T6724] ? aa_sk_perm+0x6d5/0x900 [ 115.166039][ T6724] ? __pfx_aa_sk_perm+0x10/0x10 [ 115.166066][ T6724] ? sock_rps_record_flow+0x19/0x400 [ 115.166100][ T6724] ? inet_sendmsg+0x2f4/0x370 [ 115.166126][ T6724] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 115.166151][ T6724] __sys_sendto+0x627/0x7a0 [ 115.166191][ T6724] ? __pfx___sys_sendto+0x10/0x10 [ 115.166215][ T6724] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 115.166250][ T6724] ? __fget_files+0x3a0/0x420 [ 115.166289][ T6724] ? ksys_write+0x242/0x270 [ 115.166313][ T6724] ? __pfx_ksys_write+0x10/0x10 [ 115.166339][ T6724] __x64_sys_sendto+0xde/0x100 [ 115.166376][ T6724] do_syscall_64+0x14d/0xf80 [ 115.166406][ T6724] ? trace_irq_disable+0x3b/0x150 [ 115.166433][ T6724] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.166454][ T6724] ? clear_bhb_loop+0x40/0x90 [ 115.166479][ T6724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.166499][ T6724] RIP: 0033:0x7efc2a99c799 [ 115.166519][ T6724] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.166535][ T6724] RSP: 002b:00007efc2b803028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 115.166559][ T6724] RAX: ffffffffffffffda RBX: 00007efc2ac15fa0 RCX: 00007efc2a99c799 [ 115.166573][ T6724] RDX: 0000000000000001 RSI: 0000200000000080 RDI: 0000000000000003 [ 115.166585][ T6724] RBP: 00007efc2b803090 R08: 0000200000000240 R09: 000000000000001c [ 115.166598][ T6724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 115.166610][ T6724] R13: 00007efc2ac16038 R14: 00007efc2ac15fa0 R15: 00007ffca659d468 [ 115.166644][ T6724] [ 115.555366][ T6730] netlink: 'syz.4.271': attribute type 1 has an invalid length. [ 115.567377][ T6730] netlink: 96 bytes leftover after parsing attributes in process `syz.4.271'. [ 115.577601][ T6730] netlink: 1 bytes leftover after parsing attributes in process `syz.4.271'. [ 115.589388][ T6730] netlink: 'syz.4.271': attribute type 1 has an invalid length. [ 115.597553][ T6730] netlink: 'syz.4.271': attribute type 8 has an invalid length. [ 115.606497][ T6730] netlink: 582 bytes leftover after parsing attributes in process `syz.4.271'. [ 115.855470][ T6738] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 115.862405][ T6738] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 115.931612][ T6746] netlink: 4 bytes leftover after parsing attributes in process `syz.2.277'. [ 115.979862][ T6746] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 116.047824][ T6746] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 116.095203][ T6746] bond0 (unregistering): Released all slaves [ 116.175758][ T6753] netlink: 'syz.3.279': attribute type 33 has an invalid length. [ 118.828065][ T6740] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 119.089029][ T6796] netlink: 8 bytes leftover after parsing attributes in process `syz.3.290'. [ 119.434045][ T6812] syzkaller0: entered promiscuous mode [ 119.460308][ T6812] syzkaller0: entered allmulticast mode [ 119.689996][ T6824] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 119.735823][ T6826] netlink: 'syz.0.300': attribute type 12 has an invalid length. [ 119.777262][ T6826] netlink: 'syz.0.300': attribute type 29 has an invalid length. [ 119.800822][ T6826] netlink: 148 bytes leftover after parsing attributes in process `syz.0.300'. [ 119.853489][ T6826] netlink: 59 bytes leftover after parsing attributes in process `syz.0.300'. [ 121.547413][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 122.698439][ T6831] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 122.968467][ T6881] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 123.344764][ T6889] syzkaller1: entered promiscuous mode [ 123.356955][ T6889] syzkaller1: entered allmulticast mode [ 124.302088][ T6938] netlink: 'syz.1.340': attribute type 29 has an invalid length. [ 124.323366][ T6938] netlink: 'syz.1.340': attribute type 29 has an invalid length. [ 124.334886][ T6938] netlink: 'syz.1.340': attribute type 29 has an invalid length. [ 124.958843][ T6956] netlink: 8 bytes leftover after parsing attributes in process `syz.4.346'. [ 124.969353][ T6956] netlink: 12 bytes leftover after parsing attributes in process `syz.4.346'. [ 124.989626][ T6956] netlink: 8 bytes leftover after parsing attributes in process `syz.4.346'. [ 124.999521][ T6956] netlink: 12 bytes leftover after parsing attributes in process `syz.4.346'. [ 125.001071][ T337] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.018588][ T337] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.030080][ T337] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.039019][ T337] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.702589][ T6908] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 126.896575][ T6977] FAULT_INJECTION: forcing a failure. [ 126.896575][ T6977] name failslab, interval 1, probability 0, space 0, times 0 [ 126.960567][ T6977] CPU: 0 UID: 0 PID: 6977 Comm: syz.1.355 Not tainted syzkaller #0 PREEMPT(full) [ 126.960615][ T6977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 126.960626][ T6977] Call Trace: [ 126.960634][ T6977] [ 126.960642][ T6977] dump_stack_lvl+0xe8/0x150 [ 126.960674][ T6977] should_fail_ex+0x412/0x560 [ 126.960704][ T6977] should_failslab+0xa8/0x100 [ 126.960726][ T6977] ? skb_clone+0x212/0x3a0 [ 126.960753][ T6977] kmem_cache_alloc_noprof+0x87/0x650 [ 126.960781][ T6977] ? __netlink_lookup+0xc6/0x8b0 [ 126.960814][ T6977] skb_clone+0x212/0x3a0 [ 126.960846][ T6977] __netlink_deliver_tap+0x404/0x850 [ 126.960884][ T6977] ? netlink_deliver_tap+0x2e/0x1b0 [ 126.960910][ T6977] netlink_deliver_tap+0x19c/0x1b0 [ 126.960935][ T6977] netlink_unicast+0x7e3/0x9b0 [ 126.960966][ T6977] ? __pfx_netlink_unicast+0x10/0x10 [ 126.960998][ T6977] ? netlink_sendmsg+0x650/0xb40 [ 126.961019][ T6977] ? skb_put+0x11b/0x210 [ 126.961049][ T6977] netlink_sendmsg+0x813/0xb40 [ 126.961083][ T6977] ? __pfx_netlink_sendmsg+0x10/0x10 [ 126.961110][ T6977] ? aa_sock_msg_perm+0xf1/0x1b0 [ 126.961134][ T6977] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 126.961157][ T6977] ? __pfx_netlink_sendmsg+0x10/0x10 [ 126.961178][ T6977] ____sys_sendmsg+0xa68/0xad0 [ 126.961215][ T6977] ? __pfx_____sys_sendmsg+0x10/0x10 [ 126.961252][ T6977] ? import_iovec+0x73/0xa0 [ 126.961293][ T6977] ___sys_sendmsg+0x2a5/0x360 [ 126.961328][ T6977] ? __pfx____sys_sendmsg+0x10/0x10 [ 126.961395][ T6977] ? __fget_files+0x2a/0x420 [ 126.961428][ T6977] ? __fget_files+0x3a0/0x420 [ 126.961465][ T6977] __x64_sys_sendmsg+0x1bd/0x2a0 [ 126.961497][ T6977] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 126.961535][ T6977] ? __pfx_ksys_write+0x10/0x10 [ 126.961567][ T6977] do_syscall_64+0x14d/0xf80 [ 126.961596][ T6977] ? trace_irq_disable+0x3b/0x150 [ 126.961623][ T6977] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.961642][ T6977] ? clear_bhb_loop+0x40/0x90 [ 126.961667][ T6977] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.961686][ T6977] RIP: 0033:0x7f575219c799 [ 126.961705][ T6977] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 126.961720][ T6977] RSP: 002b:00007f57503f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 126.961741][ T6977] RAX: ffffffffffffffda RBX: 00007f5752415fa0 RCX: 00007f575219c799 [ 126.961755][ T6977] RDX: 0000000000000000 RSI: 00002000000006c0 RDI: 0000000000000003 [ 126.961767][ T6977] RBP: 00007f57503f6090 R08: 0000000000000000 R09: 0000000000000000 [ 126.961945][ T6977] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 126.961964][ T6977] R13: 00007f5752416038 R14: 00007f5752415fa0 R15: 00007ffd5b0a2fb8 [ 126.961997][ T6977] [ 127.280205][ T6990] openvswitch: netlink: Key 19 has unexpected len 2 expected 4 [ 127.431176][ T6993] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.448206][ T6996] netlink: 8 bytes leftover after parsing attributes in process `syz.1.359'. [ 127.579893][ T6993] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.748485][ T6993] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.945277][ T6993] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.395028][ T7031] netlink: 'syz.3.372': attribute type 1 has an invalid length. [ 128.634884][ T337] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.742153][ T6146] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.809854][ T6146] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.828820][ T7045] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.837366][ T7045] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.862805][ T7045] bridge0: entered allmulticast mode [ 128.915677][ T6144] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.175815][ T7051] syzkaller0: entered promiscuous mode [ 129.190861][ T7059] netlink: 120 bytes leftover after parsing attributes in process `syz.2.381'. [ 129.194061][ T7051] syzkaller0: entered allmulticast mode [ 129.239917][ T7059] netlink: 'syz.2.381': attribute type 1 has an invalid length. [ 129.289429][ T7059] netlink: 64 bytes leftover after parsing attributes in process `syz.2.381'. [ 129.326624][ T7050] netlink: 'syz.4.378': attribute type 8 has an invalid length. [ 130.995200][ T5489] 8021q: adding VLAN 0 to HW filter on device bond1 [ 131.532123][ T7117] netlink: 20 bytes leftover after parsing attributes in process `syz.1.396'. [ 131.574973][ T7118] netlink: 12 bytes leftover after parsing attributes in process `syz.0.395'. [ 131.645962][ T7120] FAULT_INJECTION: forcing a failure. [ 131.645962][ T7120] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 131.742032][ T7120] CPU: 1 UID: 0 PID: 7120 Comm: syz.4.397 Not tainted syzkaller #0 PREEMPT(full) [ 131.742062][ T7120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 131.742073][ T7120] Call Trace: [ 131.742081][ T7120] [ 131.742090][ T7120] dump_stack_lvl+0xe8/0x150 [ 131.742124][ T7120] should_fail_ex+0x412/0x560 [ 131.742152][ T7120] _copy_from_user+0x2d/0xb0 [ 131.742181][ T7120] sctp_setsockopt+0x1c4/0x12c0 [ 131.742208][ T7120] ? sock_common_setsockopt+0x36/0xc0 [ 131.742232][ T7120] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 131.742255][ T7120] do_sock_setsockopt+0x17c/0x1b0 [ 131.742286][ T7120] __x64_sys_setsockopt+0x13d/0x1b0 [ 131.742319][ T7120] do_syscall_64+0x14d/0xf80 [ 131.742347][ T7120] ? trace_irq_disable+0x3b/0x150 [ 131.742373][ T7120] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.742393][ T7120] ? clear_bhb_loop+0x40/0x90 [ 131.742418][ T7120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.742437][ T7120] RIP: 0033:0x7efc2a99c799 [ 131.742456][ T7120] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 131.742472][ T7120] RSP: 002b:00007efc2b803028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 131.742494][ T7120] RAX: ffffffffffffffda RBX: 00007efc2ac15fa0 RCX: 00007efc2a99c799 [ 131.742508][ T7120] RDX: 0000000000000072 RSI: 0000000000000084 RDI: 0000000000000004 [ 131.742520][ T7120] RBP: 00007efc2b803090 R08: 000000000000000c R09: 0000000000000000 [ 131.742532][ T7120] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 131.742544][ T7120] R13: 00007efc2ac16038 R14: 00007efc2ac15fa0 R15: 00007ffca659d468 [ 131.742576][ T7120] [ 132.002741][ T7130] bridge2: entered promiscuous mode [ 132.008194][ T7130] bridge2: entered allmulticast mode [ 132.045192][ T7124] af_packet: tpacket_rcv: packet too big, clamped from 485 to 4294967286. macoff=82 [ 132.872408][ T7172] netlink: 8 bytes leftover after parsing attributes in process `syz.2.410'. [ 132.986887][ T7172] netlink: 'syz.2.410': attribute type 1 has an invalid length. [ 133.007618][ T7172] netlink: 'syz.2.410': attribute type 2 has an invalid length. [ 133.019210][ T7181] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 133.027734][ T7180] FAULT_INJECTION: forcing a failure. [ 133.027734][ T7180] name failslab, interval 1, probability 0, space 0, times 0 [ 133.089382][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.111466][ T7180] CPU: 1 UID: 0 PID: 7180 Comm: syz.1.412 Not tainted syzkaller #0 PREEMPT(full) [ 133.111494][ T7180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 133.111506][ T7180] Call Trace: [ 133.111515][ T7180] [ 133.111523][ T7180] dump_stack_lvl+0xe8/0x150 [ 133.111557][ T7180] should_fail_ex+0x412/0x560 [ 133.111585][ T7180] should_failslab+0xa8/0x100 [ 133.111610][ T7180] __kmalloc_cache_noprof+0x88/0x660 [ 133.111629][ T7180] ? __sctp_v6_cmp_addr+0x1dc/0x510 [ 133.111651][ T7180] ? sctp_v6_cmp_addr+0x15/0xd0 [ 133.111674][ T7180] ? sctp_add_bind_addr+0x8c/0x370 [ 133.111704][ T7180] sctp_add_bind_addr+0x8c/0x370 [ 133.111733][ T7180] sctp_copy_local_addr_list+0x314/0x4f0 [ 133.111763][ T7180] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 133.111787][ T7180] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 133.111810][ T7180] ? sctp_association_new+0x1894/0x25e0 [ 133.111844][ T7180] ? sctp_v4_is_any+0x35/0x60 [ 133.111868][ T7180] ? sctp_copy_one_addr+0x93/0x360 [ 133.111897][ T7180] sctp_bind_addr_copy+0xb3/0x3c0 [ 133.111932][ T7180] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 133.111958][ T7180] sctp_connect_new_asoc+0x2ff/0x6b0 [ 133.111991][ T7180] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 133.112022][ T7180] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 133.112051][ T7180] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 133.112078][ T7180] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 133.112108][ T7180] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 133.112131][ T7180] ? security_sctp_bind_connect+0x7e/0x2c0 [ 133.112165][ T7180] sctp_sendmsg+0x1528/0x2c10 [ 133.112211][ T7180] ? __pfx_sctp_sendmsg+0x10/0x10 [ 133.112244][ T7180] ? aa_sk_perm+0x6d5/0x900 [ 133.112276][ T7180] ? __pfx_aa_sk_perm+0x10/0x10 [ 133.112302][ T7180] ? sock_rps_record_flow+0x19/0x400 [ 133.112335][ T7180] ? inet_sendmsg+0x2f4/0x370 [ 133.112362][ T7180] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 133.112387][ T7180] __sys_sendto+0x627/0x7a0 [ 133.112418][ T7180] ? __pfx___sys_sendto+0x10/0x10 [ 133.112441][ T7180] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 133.112473][ T7180] ? __fget_files+0x3a0/0x420 [ 133.112516][ T7180] ? ksys_write+0x242/0x270 [ 133.112537][ T7180] ? __pfx_ksys_write+0x10/0x10 [ 133.112561][ T7180] __x64_sys_sendto+0xde/0x100 [ 133.112590][ T7180] do_syscall_64+0x14d/0xf80 [ 133.112617][ T7180] ? trace_irq_disable+0x3b/0x150 [ 133.112642][ T7180] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.112663][ T7180] ? clear_bhb_loop+0x40/0x90 [ 133.112686][ T7180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.112704][ T7180] RIP: 0033:0x7f575219c799 [ 133.112721][ T7180] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 133.112738][ T7180] RSP: 002b:00007f57503f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 133.112761][ T7180] RAX: ffffffffffffffda RBX: 00007f5752415fa0 RCX: 00007f575219c799 [ 133.112774][ T7180] RDX: 0000000000000001 RSI: 0000200000000080 RDI: 0000000000000003 [ 133.112787][ T7180] RBP: 00007f57503f6090 R08: 0000200000000240 R09: 000000000000001c [ 133.112799][ T7180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 133.112810][ T7180] R13: 00007f5752416038 R14: 00007f5752415fa0 R15: 00007ffd5b0a2fb8 [ 133.112844][ T7180] [ 133.617182][ T7185] syzkaller1: entered promiscuous mode [ 133.664259][ T7185] syzkaller1: entered allmulticast mode [ 134.034299][ T7203] netlink: 212 bytes leftover after parsing attributes in process `syz.1.424'. [ 134.408510][ T7221] netlink: 8 bytes leftover after parsing attributes in process `syz.2.430'. [ 134.734396][ T7236] FAULT_INJECTION: forcing a failure. [ 134.734396][ T7236] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 134.794243][ T7236] CPU: 1 UID: 0 PID: 7236 Comm: syz.4.436 Not tainted syzkaller #0 PREEMPT(full) [ 134.794273][ T7236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 134.794284][ T7236] Call Trace: [ 134.794292][ T7236] [ 134.794301][ T7236] dump_stack_lvl+0xe8/0x150 [ 134.794335][ T7236] should_fail_ex+0x412/0x560 [ 134.794365][ T7236] _copy_from_iter+0x1d3/0x1670 [ 134.794395][ T7236] ? rcu_is_watching+0x15/0xb0 [ 134.794429][ T7236] ? __pfx__copy_from_iter+0x10/0x10 [ 134.794460][ T7236] ? skb_page_frag_refill+0x8f/0x310 [ 134.794501][ T7236] kcm_sendmsg+0xe0c/0x2b60 [ 134.794570][ T7236] ? __pfx_kcm_sendmsg+0x10/0x10 [ 134.794593][ T7236] ? aa_sock_msg_perm+0xf1/0x1b0 [ 134.794619][ T7236] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 134.794642][ T7236] ? __pfx_kcm_sendmsg+0x10/0x10 [ 134.794660][ T7236] ____sys_sendmsg+0xa68/0xad0 [ 134.794700][ T7236] ? __pfx_____sys_sendmsg+0x10/0x10 [ 134.794739][ T7236] ? import_iovec+0x73/0xa0 [ 134.794771][ T7236] ___sys_sendmsg+0x2a5/0x360 [ 134.794807][ T7236] ? __pfx____sys_sendmsg+0x10/0x10 [ 134.794877][ T7236] ? __fget_files+0x2a/0x420 [ 134.794910][ T7236] ? __fget_files+0x3a0/0x420 [ 134.794950][ T7236] __x64_sys_sendmsg+0x1bd/0x2a0 [ 134.794982][ T7236] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 134.795023][ T7236] ? __pfx_ksys_write+0x10/0x10 [ 134.795057][ T7236] do_syscall_64+0x14d/0xf80 [ 134.795086][ T7236] ? trace_irq_disable+0x3b/0x150 [ 134.795112][ T7236] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.795131][ T7236] ? clear_bhb_loop+0x40/0x90 [ 134.795154][ T7236] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.795172][ T7236] RIP: 0033:0x7efc2a99c799 [ 134.795192][ T7236] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 134.795207][ T7236] RSP: 002b:00007efc2b803028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 134.795229][ T7236] RAX: ffffffffffffffda RBX: 00007efc2ac15fa0 RCX: 00007efc2a99c799 [ 134.795244][ T7236] RDX: 0000000000000000 RSI: 0000200000002080 RDI: 0000000000000003 [ 134.795256][ T7236] RBP: 00007efc2b803090 R08: 0000000000000000 R09: 0000000000000000 [ 134.795274][ T7236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 134.795285][ T7236] R13: 00007efc2ac16038 R14: 00007efc2ac15fa0 R15: 00007ffca659d468 [ 134.795317][ T7236] [ 134.826597][ T7232] netlink: 4 bytes leftover after parsing attributes in process `syz.0.437'. [ 135.141488][ T7247] netlink: 'syz.1.444': attribute type 29 has an invalid length. [ 135.150098][ T7248] netlink: 'syz.1.444': attribute type 29 has an invalid length. [ 135.285750][ T5831] Bluetooth: hci4: link tx timeout [ 135.292268][ T5831] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 135.443454][ T7263] netlink: 16 bytes leftover after parsing attributes in process `syz.0.446'. [ 135.455597][ T7263] xt_TPROXY: Can be used only with -p tcp or -p udp [ 136.187329][ T7303] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 136.290028][ T7307] netlink: 'syz.3.455': attribute type 4 has an invalid length. [ 136.476639][ T7314] .: renamed from bridge_slave_1 (while UP) [ 137.041986][ T7346] netlink: 8 bytes leftover after parsing attributes in process `syz.0.466'. [ 137.216186][ T7351] bridge0: port 3(gretap0) entered blocking state [ 137.223121][ T7351] bridge0: port 3(gretap0) entered disabled state [ 137.230442][ T7351] gretap0: entered allmulticast mode [ 137.238327][ T7351] gretap0: entered promiscuous mode [ 137.385205][ T5831] Bluetooth: hci4: command 0x0406 tx timeout [ 138.907273][ T7297] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 139.187036][ T7372] openvswitch: netlink: IPv6 tunnel dst address is zero [ 139.565530][ T7386] netlink: 8 bytes leftover after parsing attributes in process `syz.4.478'. [ 139.681718][ T7390] netlink: 'syz.4.478': attribute type 27 has an invalid length. [ 140.339870][ T7418] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 140.678449][ T7434] netlink: 12 bytes leftover after parsing attributes in process `syz.0.490'. [ 140.723695][ T7434] IPv6: NLM_F_CREATE should be specified when creating new route [ 141.127972][ T7451] tipc: Started in network mode [ 141.133304][ T7451] tipc: Node identity a221e4e3c8d3, cluster identity 4711 [ 141.163949][ T7451] tipc: Enabled bearer , priority 0 [ 141.196969][ T7451] tipc: Resetting bearer [ 141.294662][ T7449] tipc: Disabling bearer [ 141.489355][ T7423] lec:lec_atm_close: lec0: Shut down! [ 141.744096][ T7482] netlink: 8 bytes leftover after parsing attributes in process `syz.4.501'. [ 141.784796][ T7481] netlink: 80 bytes leftover after parsing attributes in process `syz.1.503'. [ 141.820212][ T7482] netlink: 20 bytes leftover after parsing attributes in process `syz.4.501'. [ 141.960878][ T7473] syzkaller0: entered promiscuous mode [ 141.983057][ T7473] syzkaller0: entered allmulticast mode [ 142.573167][ T7515] netlink: 36 bytes leftover after parsing attributes in process `syz.3.509'. [ 143.641013][ T7492] syzkaller0: entered promiscuous mode [ 143.649889][ T7492] syzkaller0: entered allmulticast mode [ 143.672267][ T7515] bridge0: port 2(.) entered disabled state [ 143.679542][ T7515] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.005460][ T29] lec:lec_start_xmit: lec0:No lecd attached [ 144.277252][ T7535] netlink: 'syz.1.516': attribute type 4 has an invalid length. [ 145.136265][ T7564] FAULT_INJECTION: forcing a failure. [ 145.136265][ T7564] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 145.219787][ T7564] CPU: 0 UID: 0 PID: 7564 Comm: syz.2.526 Not tainted syzkaller #0 PREEMPT(full) [ 145.219816][ T7564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 145.219827][ T7564] Call Trace: [ 145.219836][ T7564] [ 145.219844][ T7564] dump_stack_lvl+0xe8/0x150 [ 145.219892][ T7564] should_fail_ex+0x412/0x560 [ 145.219921][ T7564] _copy_to_user+0x31/0xb0 [ 145.219952][ T7564] simple_read_from_buffer+0xe1/0x170 [ 145.219985][ T7564] proc_fail_nth_read+0x1bb/0x230 [ 145.220016][ T7564] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 145.220046][ T7564] ? rw_verify_area+0x2a6/0x4d0 [ 145.220065][ T7564] ? tun_chr_write_iter+0x18a/0x200 [ 145.220089][ T7564] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 145.220118][ T7564] vfs_read+0x20c/0xa70 [ 145.220137][ T7564] ? fdget_pos+0x246/0x320 [ 145.220170][ T7564] ? __pfx___mutex_lock+0x10/0x10 [ 145.220191][ T7564] ? __pfx_vfs_read+0x10/0x10 [ 145.220213][ T7564] ? __fget_files+0x2a/0x420 [ 145.220245][ T7564] ? __fget_files+0x3a0/0x420 [ 145.220270][ T7564] ? __fget_files+0x2a/0x420 [ 145.220307][ T7564] ksys_read+0x150/0x270 [ 145.220331][ T7564] ? __pfx_ksys_read+0x10/0x10 [ 145.220364][ T7564] do_syscall_64+0x14d/0xf80 [ 145.220407][ T7564] ? trace_irq_disable+0x3b/0x150 [ 145.220434][ T7564] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.220454][ T7564] ? clear_bhb_loop+0x40/0x90 [ 145.220479][ T7564] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.220499][ T7564] RIP: 0033:0x7fa7e035cfce [ 145.220519][ T7564] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 145.220537][ T7564] RSP: 002b:00007fa7e1253fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 145.220559][ T7564] RAX: ffffffffffffffda RBX: 00007fa7e12546c0 RCX: 00007fa7e035cfce [ 145.220573][ T7564] RDX: 000000000000000f RSI: 00007fa7e12540a0 RDI: 0000000000000005 [ 145.220585][ T7564] RBP: 00007fa7e1254090 R08: 0000000000000000 R09: 0000000000000000 [ 145.220596][ T7564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 145.220608][ T7564] R13: 00007fa7e0616038 R14: 00007fa7e0615fa0 R15: 00007ffd754db018 [ 145.220639][ T7564] [ 145.452261][ T7573] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 145.986207][ T7588] bond1: (slave ip6gretap1): making interface the new active one [ 146.017715][ T7588] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 146.176709][ T7582] syzkaller0: entered promiscuous mode [ 146.182654][ T7582] syzkaller0: entered allmulticast mode [ 148.707006][ T7586] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 149.703601][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5700 ms [ 149.712468][ C0] lec:lec_tx_timeout: lec0 [ 149.719264][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 149.988261][ T7665] netlink: 212 bytes leftover after parsing attributes in process `syz.0.549'. [ 150.787425][ T7691] Cannot find del_set index 0 as target [ 150.946310][ T7693] netlink: 8 bytes leftover after parsing attributes in process `syz.4.560'. [ 151.372984][ T7712] netlink: 24 bytes leftover after parsing attributes in process `syz.2.563'. [ 151.462151][ T7716] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.564'. [ 151.475409][ T7716] netlink: Conntrack attr has 4 unknown bytes [ 151.651984][ T7724] netlink: 36 bytes leftover after parsing attributes in process `syz.2.566'. [ 151.663459][ T7724] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.671635][ T7724] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.230574][ T7746] netlink: 8 bytes leftover after parsing attributes in process `syz.4.571'. [ 153.449567][ T7672] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 153.474762][ T7749] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 153.684644][ T7754] syzkaller0: entered promiscuous mode [ 153.690446][ T7754] syzkaller0: entered allmulticast mode [ 153.997706][ T7774] netlink: 'syz.1.581': attribute type 2 has an invalid length. [ 154.148800][ T7780] netlink: 'syz.3.583': attribute type 3 has an invalid length. [ 154.157436][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807ab04400: rx timeout, send abort [ 154.171577][ T7780] netlink: 4 bytes leftover after parsing attributes in process `syz.3.583'. [ 154.508348][ T7794] netlink: 56 bytes leftover after parsing attributes in process `syz.1.588'. [ 154.576985][ T7794] bond2 (unregistering): Released all slaves [ 154.621195][ T7802] netlink: 'syz.3.590': attribute type 2 has an invalid length. [ 154.655426][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807ab07c00: rx timeout, send abort [ 154.664490][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807ab04400: abort rx timeout. Force session deactivation [ 155.164532][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807ab07c00: abort rx timeout. Force session deactivation [ 155.463597][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5740 ms [ 155.471887][ C0] lec:lec_tx_timeout: lec0 [ 155.480133][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 155.624692][ T7847] netlink: 'syz.1.602': attribute type 13 has an invalid length. [ 155.671391][ T7846] FAULT_INJECTION: forcing a failure. [ 155.671391][ T7846] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 155.692751][ T7847] veth0_macvtap: left promiscuous mode [ 155.703751][ T7846] CPU: 0 UID: 0 PID: 7846 Comm: syz.2.603 Not tainted syzkaller #0 PREEMPT(full) [ 155.703791][ T7846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 155.703802][ T7846] Call Trace: [ 155.703810][ T7846] [ 155.703818][ T7846] dump_stack_lvl+0xe8/0x150 [ 155.703851][ T7846] should_fail_ex+0x412/0x560 [ 155.703880][ T7846] _copy_to_user+0x31/0xb0 [ 155.703910][ T7846] simple_read_from_buffer+0xe1/0x170 [ 155.703942][ T7846] proc_fail_nth_read+0x1bb/0x230 [ 155.703973][ T7846] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 155.704002][ T7846] ? rw_verify_area+0x2a6/0x4d0 [ 155.704021][ T7846] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 155.704049][ T7846] vfs_read+0x20c/0xa70 [ 155.704067][ T7846] ? fdget_pos+0x246/0x320 [ 155.704100][ T7846] ? __pfx___mutex_lock+0x10/0x10 [ 155.704121][ T7846] ? __pfx_vfs_read+0x10/0x10 [ 155.704141][ T7846] ? __fget_files+0x2a/0x420 [ 155.704170][ T7846] ? __fget_files+0x3a0/0x420 [ 155.704194][ T7846] ? __fget_files+0x2a/0x420 [ 155.704228][ T7846] ksys_read+0x150/0x270 [ 155.704248][ T7846] ? __pfx_ksys_read+0x10/0x10 [ 155.704280][ T7846] do_syscall_64+0x14d/0xf80 [ 155.704308][ T7846] ? trace_irq_disable+0x3b/0x150 [ 155.704334][ T7846] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.704353][ T7846] ? clear_bhb_loop+0x40/0x90 [ 155.704377][ T7846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.704395][ T7846] RIP: 0033:0x7fa7e035cfce [ 155.704414][ T7846] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 155.704430][ T7846] RSP: 002b:00007fa7e1253fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 155.704449][ T7846] RAX: ffffffffffffffda RBX: 00007fa7e12546c0 RCX: 00007fa7e035cfce [ 155.704461][ T7846] RDX: 000000000000000f RSI: 00007fa7e12540a0 RDI: 0000000000000005 [ 155.704471][ T7846] RBP: 00007fa7e1254090 R08: 0000000000000000 R09: 0000000000000000 [ 155.704480][ T7846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 155.704489][ T7846] R13: 00007fa7e0616038 R14: 00007fa7e0615fa0 R15: 00007ffd754db018 [ 155.704516][ T7846] [ 155.951613][ T7847] macvtap0: entered allmulticast mode [ 155.961495][ T7847] macvtap0: refused to change device tx_queue_len [ 156.353090][ T7861] bridge0: port 3(wlan0) entered blocking state [ 156.403335][ T7861] bridge0: port 3(wlan0) entered disabled state [ 156.412662][ T7861] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 156.446643][ T7861] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 156.484855][ T7865] netlink: 8 bytes leftover after parsing attributes in process `syz.3.608'. [ 156.561281][ T5833] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 156.633638][ T5833] CPU: 1 UID: 0 PID: 5833 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 156.633668][ T5833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 156.633680][ T5833] Call Trace: [ 156.633689][ T5833] [ 156.633698][ T5833] dump_stack_lvl+0xe8/0x150 [ 156.633733][ T5833] dump_header+0xd3/0x4c0 [ 156.633760][ T5833] oom_kill_process+0x3ab/0x970 [ 156.633786][ T5833] out_of_memory+0x106c/0x1410 [ 156.633810][ T5833] ? __pfx___mutex_lock+0x10/0x10 [ 156.633839][ T5833] ? __pfx_out_of_memory+0x10/0x10 [ 156.633857][ T5833] ? do_raw_spin_unlock+0xf5/0x210 [ 156.633889][ T5833] try_charge_memcg+0xc53/0x1560 [ 156.633917][ T5833] ? __lock_acquire+0x6b5/0x2cf0 [ 156.633956][ T5833] ? __pfx_try_charge_memcg+0x10/0x10 [ 156.633975][ T5833] ? xa_load+0x60/0x210 [ 156.634004][ T5833] ? mem_cgroup_swapin_charge_folio+0x36/0x4d0 [ 156.634031][ T5833] ? mem_cgroup_swapin_charge_folio+0x36/0x4d0 [ 156.634058][ T5833] mem_cgroup_swapin_charge_folio+0x2e3/0x4d0 [ 156.634085][ T5833] __swap_cache_prepare_and_add+0x52a/0x700 [ 156.634135][ T5833] swap_cache_alloc_folio+0xf1/0x240 [ 156.634168][ T5833] swap_cluster_readahead+0x53a/0x690 [ 156.634204][ T5833] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 156.634248][ T5833] ? get_vma_policy+0x27b/0x3c0 [ 156.634276][ T5833] swapin_readahead+0x196/0xc50 [ 156.634319][ T5833] ? __pfx_swapin_readahead+0x10/0x10 [ 156.634349][ T5833] ? swap_table_get+0x1e/0x260 [ 156.634374][ T5833] ? swap_table_get+0x1e/0x260 [ 156.634398][ T5833] ? swap_table_get+0x1e/0x260 [ 156.634424][ T5833] ? swap_table_get+0x216/0x260 [ 156.634452][ T5833] ? swap_cache_get_folio+0x513/0x520 [ 156.634487][ T5833] do_swap_page+0x54f/0x58d0 [ 156.634522][ T5833] ? __lock_acquire+0x6b5/0x2cf0 [ 156.634571][ T5833] ? do_swap_page+0x12c/0x58d0 [ 156.634601][ T5833] ? __pfx_do_swap_page+0x10/0x10 [ 156.634625][ T5833] ? __pte_offset_map+0x1ae/0x240 [ 156.634664][ T5833] ? pte_offset_map_rw_nolock+0xea/0x160 [ 156.634696][ T5833] handle_mm_fault+0x12d2/0x3310 [ 156.634741][ T5833] ? handle_mm_fault+0xee/0x3310 [ 156.634778][ T5833] ? __pfx_handle_mm_fault+0x10/0x10 [ 156.634803][ T5833] ? lock_vma_under_rcu+0x45a/0x500 [ 156.634855][ T5833] do_user_addr_fault+0xa73/0x1340 [ 156.634890][ T5833] ? rcu_is_watching+0x15/0xb0 [ 156.634917][ T5833] ? trace_page_fault_user+0x84/0x210 [ 156.634946][ T5833] exc_page_fault+0x6a/0xc0 [ 156.634977][ T5833] asm_exc_page_fault+0x26/0x30 [ 156.634996][ T5833] RIP: 0033:0x7efc2a95cfce [ 156.635017][ T5833] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 156.635033][ T5833] RSP: 002b:00007ffca659d748 EFLAGS: 00010246 [ 156.635051][ T5833] RAX: 0000000000000000 RBX: 0000555574b7e500 RCX: 00007efc2a95cfce [ 156.635065][ T5833] RDX: 00007ffca659d7a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 156.635077][ T5833] RBP: 00007ffca659d80c R08: 0000000000000000 R09: 0000000000000000 [ 156.635089][ T5833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000001388 [ 156.635101][ T5833] R13: 00000000000927c0 R14: 0000000000025d3e R15: 00007ffca659d860 [ 156.635136][ T5833] [ 156.642925][ T5833] memory: usage 307200kB, limit 307200kB, failcnt 512 [ 157.042969][ T5833] memory+swap: usage 307408kB, limit 9007199254740988kB, failcnt 0 [ 157.052674][ T5833] kmem: usage 307180kB, limit 9007199254740988kB, failcnt 0 [ 157.060401][ T5833] Memory cgroup stats for /syz4: [ 157.060776][ T5833] cache 0 [ 157.069056][ T5833] rss 0 [ 157.072013][ T5833] rss_huge 0 [ 157.075396][ T5833] shmem 0 [ 157.078627][ T5833] mapped_file 0 [ 157.082193][ T5833] dirty 0 [ 157.085326][ T5833] writeback 0 [ 157.088984][ T5833] workingset_refault_anon 5 [ 157.099095][ T5833] workingset_refault_file 0 [ 157.103831][ T5833] swap 217088 [ 157.107229][ T5833] swapcached 229376 [ 157.111246][ T5833] pgpgin 6367 [ 157.115338][ T5833] pgpgout 6364 [ 157.118731][ T5833] pgfault 15609 [ 157.123006][ T5833] pgmajfault 5 [ 157.126667][ T5833] inactive_anon 12288 [ 157.130759][ T5833] active_anon 0 [ 157.138072][ T5833] inactive_file 0 [ 157.141739][ T5833] active_file 0 [ 157.154237][ T7880] netlink: 'syz.0.613': attribute type 1 has an invalid length. [ 157.162923][ T5833] unevictable 0 [ 157.184290][ T5833] hierarchical_memory_limit 314572800 [ 157.227272][ T7883] netlink: 12 bytes leftover after parsing attributes in process `syz.0.613'. [ 157.233388][ T7880] bond1: entered promiscuous mode [ 157.324459][ T7883] netlink: 12 bytes leftover after parsing attributes in process `syz.0.613'. [ 157.335000][ T7880] 8021q: adding VLAN 0 to HW filter on device bond1 [ 157.372753][ T5833] hierarchical_memsw_limit 9223372036854771712 [ 157.405860][ T5833] total_cache 0 [ 157.428271][ T5833] total_rss 0 [ 157.436026][ T7890] bond1: (slave bridge3): making interface the new active one [ 157.444457][ T5833] total_rss_huge 0 [ 157.448304][ T5833] total_shmem 0 [ 157.451869][ T5833] total_mapped_file 0 [ 157.499496][ T7890] bridge3: entered promiscuous mode [ 157.513752][ T5833] total_dirty 0 [ 157.546065][ T5833] total_writeback 0 [ 157.554468][ T7890] bond1: (slave bridge3): Enslaving as an active interface with an up link [ 157.588760][ T29] IPVS: starting estimator thread 0... [ 157.605758][ T5833] total_workingset_refault_anon 5 [ 157.620288][ T5833] total_workingset_refault_file 0 [ 157.659548][ T5833] total_swap 217088 [ 157.663423][ T5833] total_swapcached 229376 [ 157.683739][ T7896] IPVS: using max 26 ests per chain, 62400 per kthread [ 157.723724][ T5833] total_pgpgin 6367 [ 157.727919][ T5833] total_pgpgout 6364 [ 157.769595][ T5833] total_pgfault 15609 [ 157.780072][ T5833] total_pgmajfault 5 [ 157.803665][ T5833] total_inactive_anon 12288 [ 157.808511][ T5833] total_active_anon 0 [ 157.812773][ T5833] total_inactive_file 0 [ 157.866710][ T7903] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 157.873655][ T5833] total_active_file 0 [ 157.916687][ T7906] netlink: 12 bytes leftover after parsing attributes in process `syz.3.620'. [ 157.926333][ T5833] total_unevictable 0 [ 157.930540][ T5833] anon_cost 0 [ 157.937598][ T7903] bridge0: port 3(gretap0) entered disabled state [ 157.945112][ T7903] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.953370][ T7903] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.961330][ T5833] file_cost 0 [ 157.966547][ T5833] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.584,pid=7778,uid=0 [ 157.985607][ T7903] bridge0: entered allmulticast mode [ 158.008313][ T7906] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 158.021140][ T7906] team0: Port device batadv1 added [ 158.080270][ T5833] Memory cgroup out of memory: OOM victim 7778 (syz.4.584) is already exiting. Skip killing the task [ 159.002595][ T7946] netlink: 8 bytes leftover after parsing attributes in process `syz.2.632'. [ 159.606263][ T7973] netlink: 8 bytes leftover after parsing attributes in process `syz.4.638'. [ 159.670018][ T7965] syzkaller0: entered promiscuous mode [ 159.687715][ T7965] syzkaller0: entered allmulticast mode [ 159.792289][ T7976] netlink: 4 bytes leftover after parsing attributes in process `syz.3.639'. [ 160.199472][ T7984] Cannot find del_set index 0 as target [ 161.223583][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5740 ms [ 161.232108][ C0] lec:lec_tx_timeout: lec0 [ 161.237526][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 161.492615][ T7998] netlink: 16 bytes leftover after parsing attributes in process `syz.0.647'. [ 162.780216][ T7982] bridge_slave_0: left allmulticast mode [ 162.786479][ T7982] bridge_slave_0: left promiscuous mode [ 162.792558][ T7982] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.824687][ T7982] .: left allmulticast mode [ 162.832748][ T7982] .: left promiscuous mode [ 162.845254][ T7982] bridge0: port 2(.) entered disabled state [ 162.868953][ T7982] bond0: (slave bond_slave_0): Releasing backup interface [ 162.891738][ T7982] bond0: (slave bond_slave_1): Releasing backup interface [ 162.929772][ T7982] team0: Port device team_slave_0 removed [ 162.961095][ T7982] team0: Port device team_slave_1 removed [ 162.974982][ T7982] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 162.989580][ T8005] netlink: 8 bytes leftover after parsing attributes in process `syz.1.649'. [ 162.990103][ T7982] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 163.010694][ T7982] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 163.019118][ T7982] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 163.031478][ T7982] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 163.479499][ T8020] Illegal XDP return value 1093331577 on prog (id 112) dev N/A, expect packet loss! [ 164.368095][ T8042] netlink: 28 bytes leftover after parsing attributes in process `syz.4.658'. [ 164.383954][ T8042] netlink: 28 bytes leftover after parsing attributes in process `syz.4.658'. [ 164.426071][ T8042] netlink: 8 bytes leftover after parsing attributes in process `syz.4.658'. [ 164.518754][ T8046] syzkaller0: entered promiscuous mode [ 164.555407][ T8046] syzkaller0: entered allmulticast mode [ 164.654930][ T8065] netlink: 4 bytes leftover after parsing attributes in process `syz.1.659'. [ 164.717782][ T8061] netlink: 8 bytes leftover after parsing attributes in process `syz.1.659'. [ 164.875486][ T8072] veth1_macvtap: left promiscuous mode [ 164.881793][ T8072] macsec0: entered promiscuous mode [ 164.955756][ T8072] macsec0: entered allmulticast mode [ 165.005064][ T8072] veth1_macvtap: entered promiscuous mode [ 165.011538][ T8072] veth1_macvtap: entered allmulticast mode [ 165.045339][ T8072] macsec0: left promiscuous mode [ 165.050610][ T8072] macsec0: left allmulticast mode [ 165.073648][ T8072] veth1_macvtap: left allmulticast mode [ 165.090561][ T8078] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 165.751902][ T8101] syzkaller0: entered promiscuous mode [ 165.772103][ T8101] syzkaller0: entered allmulticast mode [ 166.209981][ T8109] syzkaller1: entered promiscuous mode [ 166.253599][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 166.261975][ C0] lec:lec_tx_timeout: lec0 [ 166.266799][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 166.291352][ T8109] syzkaller1: entered allmulticast mode [ 166.399433][ T8119] syzkaller0: entered promiscuous mode [ 166.426102][ T8119] syzkaller0: entered allmulticast mode [ 168.328654][ T8187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 168.367742][ T8187] bond0: (slave rose0): Enslaving as an active interface with an up link [ 169.220028][ T8202] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.227980][ T8202] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.589225][ T8202] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 169.626051][ T8202] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 169.892238][ T8234] Cannot find set identified by id 0 to match [ 170.243908][ T8245] netlink: 'syz.2.719': attribute type 10 has an invalid length. [ 170.450744][ T62] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 170.473938][ T62] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.492056][ T62] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 170.524230][ T62] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.871147][ T62] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 170.915304][ T62] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.940507][ T8266] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.725'. [ 170.953450][ T62] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 170.968931][ T62] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.992431][ T8266] netlink: Conntrack attr has 4 unknown bytes [ 171.084861][ T8273] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 171.151061][ T8273] Cannot find add_set index 0 as target [ 171.273624][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 171.281891][ C0] lec:lec_tx_timeout: lec0 [ 171.286779][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 171.319128][ T8280] Bluetooth: MGMT ver 1.23 [ 171.474117][ T8285] netlink: 8 bytes leftover after parsing attributes in process `syz.4.730'. [ 171.762086][ T8297] syzkaller0: entered promiscuous mode [ 171.770487][ T8297] syzkaller0: entered allmulticast mode [ 172.029673][ T8310] netlink: 'syz.3.739': attribute type 39 has an invalid length. [ 172.162725][ T8310] syz_tun (unregistering): left allmulticast mode [ 172.230347][ T8320] Cannot find del_set index 0 as target [ 172.684113][ T8335] netlink: 20 bytes leftover after parsing attributes in process `syz.3.747'. [ 172.786721][ T8345] netlink: 8 bytes leftover after parsing attributes in process `syz.2.751'. [ 172.954070][ T8358] syzkaller0: entered promiscuous mode [ 172.959853][ T8358] syzkaller0: entered allmulticast mode [ 173.473398][ T8381] syzkaller0: entered promiscuous mode [ 173.505260][ T8381] syzkaller0: entered allmulticast mode [ 173.822248][ T8401] openvswitch: netlink: Unexpected mask (mask=200840, allowed=10048) [ 174.001727][ T8404] syzkaller1: entered promiscuous mode [ 174.011474][ T8404] syzkaller1: entered allmulticast mode [ 174.091951][ T8407] syzkaller0: entered promiscuous mode [ 174.098292][ T8407] syzkaller0: entered allmulticast mode [ 174.106388][ T8409] netlink: 56 bytes leftover after parsing attributes in process `syz.0.764'. [ 174.122785][ T8407] tipc: Started in network mode [ 174.128898][ T8407] tipc: Node identity 5ae9ac7da65f, cluster identity 4711 [ 174.152792][ T8407] tipc: Enabled bearer , priority 0 [ 174.176505][ T8406] tipc: Resetting bearer [ 174.220575][ T8406] tipc: Disabling bearer [ 174.244217][ T8412] netlink: 'syz.0.765': attribute type 39 has an invalid length. [ 174.284150][ T8412] syz_tun (unregistering): left allmulticast mode [ 174.357473][ T8415] netlink: 'syz.1.766': attribute type 1 has an invalid length. [ 174.366292][ T8415] netlink: 224 bytes leftover after parsing attributes in process `syz.1.766'. [ 174.614182][ T8425] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.770'. [ 174.642689][ T8425] netlink: Conntrack attr has 4 unknown bytes [ 174.784844][ T8437] netlink: 24 bytes leftover after parsing attributes in process `syz.3.772'. [ 174.801224][ T8438] FAULT_INJECTION: forcing a failure. [ 174.801224][ T8438] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 174.825355][ T8437] netlink: 8 bytes leftover after parsing attributes in process `syz.3.772'. [ 174.871184][ T8438] CPU: 1 UID: 0 PID: 8438 Comm: syz.1.773 Not tainted syzkaller #0 PREEMPT(full) [ 174.871213][ T8438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 174.871224][ T8438] Call Trace: [ 174.871232][ T8438] [ 174.871241][ T8438] dump_stack_lvl+0xe8/0x150 [ 174.871276][ T8438] should_fail_ex+0x412/0x560 [ 174.871304][ T8438] _copy_from_iter+0x1d3/0x1670 [ 174.871345][ T8438] ? __pfx__copy_from_iter+0x10/0x10 [ 174.871371][ T8438] ? alloc_pages_noprof+0xbd/0x190 [ 174.871399][ T8438] ? skb_page_frag_refill+0x199/0x310 [ 174.871439][ T8438] kcm_sendmsg+0xe0c/0x2b60 [ 174.871514][ T8438] ? __pfx_kcm_sendmsg+0x10/0x10 [ 174.871538][ T8438] ? aa_sock_msg_perm+0xf1/0x1b0 [ 174.871565][ T8438] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 174.871590][ T8438] ? __pfx_kcm_sendmsg+0x10/0x10 [ 174.871608][ T8438] ____sys_sendmsg+0xa68/0xad0 [ 174.871647][ T8438] ? __pfx_____sys_sendmsg+0x10/0x10 [ 174.871685][ T8438] ? import_iovec+0x73/0xa0 [ 174.871714][ T8438] ___sys_sendmsg+0x2a5/0x360 [ 174.871749][ T8438] ? __pfx____sys_sendmsg+0x10/0x10 [ 174.871815][ T8438] ? __fget_files+0x2a/0x420 [ 174.871842][ T8438] ? __fget_files+0x3a0/0x420 [ 174.871879][ T8438] __x64_sys_sendmsg+0x1bd/0x2a0 [ 174.871910][ T8438] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 174.871950][ T8438] ? __pfx_ksys_write+0x10/0x10 [ 174.871985][ T8438] do_syscall_64+0x14d/0xf80 [ 174.872015][ T8438] ? trace_irq_disable+0x3b/0x150 [ 174.872041][ T8438] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.872062][ T8438] ? clear_bhb_loop+0x40/0x90 [ 174.872087][ T8438] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.872105][ T8438] RIP: 0033:0x7f575219c799 [ 174.872124][ T8438] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 174.872140][ T8438] RSP: 002b:00007f57503d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 174.872163][ T8438] RAX: ffffffffffffffda RBX: 00007f5752416090 RCX: 00007f575219c799 [ 174.872177][ T8438] RDX: 0000000000000000 RSI: 0000200000002080 RDI: 0000000000000003 [ 174.872190][ T8438] RBP: 00007f57503d5090 R08: 0000000000000000 R09: 0000000000000000 [ 174.872202][ T8438] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 174.872213][ T8438] R13: 00007f5752416128 R14: 00007f5752416090 R15: 00007ffd5b0a2fb8 [ 174.872246][ T8438] [ 175.131080][ T8442] netlink: 56 bytes leftover after parsing attributes in process `syz.0.775'. [ 175.328671][ T8450] sctp: [Deprecated]: syz.2.776 (pid 8450) Use of struct sctp_assoc_value in delayed_ack socket option. [ 175.328671][ T8450] Use struct sctp_sack_info instead [ 175.545717][ T8454] netlink: 'syz.2.781': attribute type 39 has an invalid length. [ 175.674478][ T8462] netlink: 'syz.1.784': attribute type 1 has an invalid length. [ 175.683486][ T8462] netlink: 'syz.1.784': attribute type 1 has an invalid length. [ 175.693423][ T8454] syz_tun (unregistering): left allmulticast mode [ 175.717950][ T8462] netlink: 'syz.1.784': attribute type 8 has an invalid length. [ 175.762342][ T8468] Cannot find del_set index 0 as target [ 175.932790][ T8472] Cannot find add_set index 0 as target [ 176.003698][ T797] IPVS: starting estimator thread 0... [ 176.093708][ T8480] IPVS: using max 32 ests per chain, 76800 per kthread [ 176.293606][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 176.302109][ C0] lec:lec_tx_timeout: lec0 [ 176.306882][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 176.514853][ T8503] team0: Device wireguard0 is of different type [ 176.847587][ T8525] Cannot find set identified by id 0 to match [ 177.625002][ T8557] netlink: 'syz.0.814': attribute type 4 has an invalid length. [ 177.946880][ T8571] __nla_validate_parse: 4 callbacks suppressed [ 177.946900][ T8571] netlink: 12 bytes leftover after parsing attributes in process `syz.0.818'. [ 178.049333][ T8571] 8021q: adding VLAN 0 to HW filter on device bond2 [ 178.150790][ T8584] sctp: [Deprecated]: syz.4.821 (pid 8584) Use of int in max_burst socket option. [ 178.150790][ T8584] Use struct sctp_assoc_value instead [ 178.993810][ T8603] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 179.041868][ T8603] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 179.864891][ T6146] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.900466][ T6146] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.951065][ T6146] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.149493][ T6146] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.254268][ T8646] syzkaller0: entered promiscuous mode [ 180.299462][ T8646] syzkaller0: entered allmulticast mode [ 180.486684][ T8675] netlink: 8 bytes leftover after parsing attributes in process `syz.2.834'. [ 181.020236][ T8695] syzkaller0: entered promiscuous mode [ 181.043615][ T8695] syzkaller0: entered allmulticast mode [ 181.126836][ T8702] netlink: 28 bytes leftover after parsing attributes in process `syz.1.843'. [ 181.153674][ T8702] netlink: 'syz.1.843': attribute type 7 has an invalid length. [ 181.173296][ T8702] netlink: 16 bytes leftover after parsing attributes in process `syz.1.843'. [ 181.313617][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 181.319887][ T8706] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 181.321725][ C0] lec:lec_tx_timeout: lec0 [ 181.338034][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 181.638354][ T8724] netlink: 4 bytes leftover after parsing attributes in process `syz.1.848'. [ 182.396202][ T9] IPVS: starting estimator thread 0... [ 182.513810][ T8758] IPVS: using max 25 ests per chain, 60000 per kthread [ 182.697215][ T8754] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 183.347334][ T8792] nft_compat: unsupported protocol 0 [ 183.557851][ T8788] bond2: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 183.641338][ T8788] bond2 (unregistering): Released all slaves [ 183.792614][ T8810] lo: entered allmulticast mode [ 184.208899][ T8824] tipc: Started in network mode [ 184.218938][ T8828] netlink: 16 bytes leftover after parsing attributes in process `syz.4.878'. [ 184.233679][ T8824] tipc: Node identity a6091d148838, cluster identity 4711 [ 184.241238][ T8824] tipc: Enabled bearer , priority 0 [ 184.474706][ T8824] syzkaller0: entered promiscuous mode [ 184.480341][ T8824] syzkaller0: entered allmulticast mode [ 184.488813][ T8824] tipc: Resetting bearer [ 184.600783][ T8820] tipc: Resetting bearer [ 186.775573][ T8820] tipc: Disabling bearer [ 186.785155][ T8851] netlink: 12 bytes leftover after parsing attributes in process `syz.4.886'. [ 186.897705][ T8881] FAULT_INJECTION: forcing a failure. [ 186.897705][ T8881] name failslab, interval 1, probability 0, space 0, times 0 [ 186.911247][ T8881] CPU: 0 UID: 0 PID: 8881 Comm: syz.3.890 Not tainted syzkaller #0 PREEMPT(full) [ 186.911273][ T8881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 186.911284][ T8881] Call Trace: [ 186.911292][ T8881] [ 186.911298][ T8881] dump_stack_lvl+0xe8/0x150 [ 186.911332][ T8881] should_fail_ex+0x412/0x560 [ 186.911360][ T8881] should_failslab+0xa8/0x100 [ 186.911385][ T8881] __kmalloc_noprof+0xe8/0x760 [ 186.911413][ T8881] ? tomoyo_encode+0x28b/0x550 [ 186.911443][ T8881] tomoyo_encode+0x28b/0x550 [ 186.911473][ T8881] tomoyo_realpath_from_path+0x58d/0x5d0 [ 186.911507][ T8881] ? tomoyo_path_number_perm+0x219/0x630 [ 186.911526][ T8881] tomoyo_path_number_perm+0x246/0x630 [ 186.911550][ T8881] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 186.911574][ T8881] ? __lock_acquire+0x6b5/0x2cf0 [ 186.911611][ T8881] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 186.911655][ T8881] ? __fget_files+0x2a/0x420 [ 186.911686][ T8881] ? __fget_files+0x2a/0x420 [ 186.911711][ T8881] ? __fget_files+0x3a0/0x420 [ 186.911735][ T8881] ? __fget_files+0x2a/0x420 [ 186.911766][ T8881] security_file_ioctl+0xc3/0x2a0 [ 186.911800][ T8881] __se_sys_ioctl+0x47/0x170 [ 186.911824][ T8881] do_syscall_64+0x14d/0xf80 [ 186.911852][ T8881] ? trace_irq_disable+0x3b/0x150 [ 186.911879][ T8881] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.911900][ T8881] ? clear_bhb_loop+0x40/0x90 [ 186.911923][ T8881] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.911943][ T8881] RIP: 0033:0x7f4dc019c799 [ 186.911962][ T8881] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 186.911978][ T8881] RSP: 002b:00007f4dc10e8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 186.912000][ T8881] RAX: ffffffffffffffda RBX: 00007f4dc0415fa0 RCX: 00007f4dc019c799 [ 186.912014][ T8881] RDX: 0000200000000600 RSI: 00000000000089e2 RDI: 0000000000000004 [ 186.912026][ T8881] RBP: 00007f4dc10e8090 R08: 0000000000000000 R09: 0000000000000000 [ 186.912037][ T8881] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 186.912049][ T8881] R13: 00007f4dc0416038 R14: 00007f4dc0415fa0 R15: 00007ffd561844b8 [ 186.912081][ T8881] [ 186.912102][ T8881] ERROR: Out of memory at tomoyo_realpath_from_path. [ 187.329040][ T8858] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 187.360548][ T8858] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 187.463570][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 6120 ms [ 187.471797][ C0] lec:lec_tx_timeout: lec0 [ 187.476505][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 187.566618][ T5949] tipc: Node number set to 774970644 [ 187.586371][ T8888] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 187.613668][ T8888] bridge0: entered allmulticast mode [ 187.807493][ T8910] FAULT_INJECTION: forcing a failure. [ 187.807493][ T8910] name failslab, interval 1, probability 0, space 0, times 0 [ 187.840746][ T8910] CPU: 1 UID: 0 PID: 8910 Comm: syz.1.902 Not tainted syzkaller #0 PREEMPT(full) [ 187.840775][ T8910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 187.840785][ T8910] Call Trace: [ 187.840794][ T8910] [ 187.840802][ T8910] dump_stack_lvl+0xe8/0x150 [ 187.840835][ T8910] should_fail_ex+0x412/0x560 [ 187.840864][ T8910] should_failslab+0xa8/0x100 [ 187.840888][ T8910] __kmalloc_noprof+0xe8/0x760 [ 187.840909][ T8910] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 187.840941][ T8910] tomoyo_realpath_from_path+0xe3/0x5d0 [ 187.840978][ T8910] ? tomoyo_path_number_perm+0x219/0x630 [ 187.840999][ T8910] tomoyo_path_number_perm+0x246/0x630 [ 187.841021][ T8910] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 187.841044][ T8910] ? __lock_acquire+0x6b5/0x2cf0 [ 187.841080][ T8910] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 187.841122][ T8910] ? __fget_files+0x2a/0x420 [ 187.841151][ T8910] ? __fget_files+0x2a/0x420 [ 187.841172][ T8910] ? __fget_files+0x3a0/0x420 [ 187.841196][ T8910] ? __fget_files+0x2a/0x420 [ 187.841226][ T8910] security_file_ioctl+0xc3/0x2a0 [ 187.841256][ T8910] __se_sys_ioctl+0x47/0x170 [ 187.841280][ T8910] do_syscall_64+0x14d/0xf80 [ 187.841308][ T8910] ? trace_irq_disable+0x3b/0x150 [ 187.841345][ T8910] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.841364][ T8910] ? clear_bhb_loop+0x40/0x90 [ 187.841388][ T8910] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.841409][ T8910] RIP: 0033:0x7f575219c799 [ 187.841428][ T8910] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 187.841444][ T8910] RSP: 002b:00007f57503f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 187.841466][ T8910] RAX: ffffffffffffffda RBX: 00007f5752415fa0 RCX: 00007f575219c799 [ 187.841480][ T8910] RDX: 0000200000000440 RSI: 000000000000890b RDI: 0000000000000004 [ 187.841492][ T8910] RBP: 00007f57503f6090 R08: 0000000000000000 R09: 0000000000000000 [ 187.841504][ T8910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 187.841515][ T8910] R13: 00007f5752416038 R14: 00007f5752415fa0 R15: 00007ffd5b0a2fb8 [ 187.841553][ T8910] [ 187.841682][ T8910] ERROR: Out of memory at tomoyo_realpath_from_path. [ 187.879052][ T8913] syz.4.903: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 187.927922][ T8916] netlink: 'syz.1.904': attribute type 17 has an invalid length. [ 187.939024][ T8913] ,cpuset= [ 187.970963][ T8916] netlink: 4 bytes leftover after parsing attributes in process `syz.1.904'. [ 187.979405][ T8913] / [ 188.106675][ T8916] netlink: 28 bytes leftover after parsing attributes in process `syz.1.904'. [ 188.108739][ T8913] ,mems_allowed=0-1 [ 188.128650][ T8913] CPU: 1 UID: 0 PID: 8913 Comm: syz.4.903 Not tainted syzkaller #0 PREEMPT(full) [ 188.128683][ T8913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 188.128696][ T8913] Call Trace: [ 188.128704][ T8913] [ 188.128713][ T8913] dump_stack_lvl+0xe8/0x150 [ 188.128748][ T8913] warn_alloc+0x249/0x340 [ 188.128773][ T8913] ? stack_trace_save+0xa9/0x100 [ 188.128798][ T8913] ? __pfx_warn_alloc+0x10/0x10 [ 188.128829][ T8913] ? kasan_save_track+0x4f/0x80 [ 188.128848][ T8913] ? kasan_save_track+0x3e/0x80 [ 188.128864][ T8913] ? __kasan_kmalloc+0x93/0xb0 [ 188.128880][ T8913] ? __kmalloc_cache_noprof+0x31c/0x660 [ 188.128898][ T8913] ? xskq_create+0x56/0x170 [ 188.128922][ T8913] ? xsk_setsockopt+0x54c/0x990 [ 188.128944][ T8913] ? do_sock_setsockopt+0x17c/0x1b0 [ 188.128968][ T8913] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 188.128992][ T8913] ? do_syscall_64+0x14d/0xf80 [ 188.129024][ T8913] __vmalloc_node_range_noprof+0x132/0x1730 [ 188.129080][ T8913] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 188.129121][ T8913] ? __kasan_kmalloc+0x93/0xb0 [ 188.129160][ T8913] vmalloc_user_noprof+0xad/0xe0 [ 188.129187][ T8913] ? xskq_create+0xbf/0x170 [ 188.129216][ T8913] xskq_create+0xbf/0x170 [ 188.129247][ T8913] xsk_init_queue+0x8a/0xe0 [ 188.129278][ T8913] xsk_setsockopt+0x54c/0x990 [ 188.129307][ T8913] ? __pfx_xsk_setsockopt+0x10/0x10 [ 188.129333][ T8913] ? __pfx_aa_sk_perm+0x10/0x10 [ 188.129360][ T8913] ? aa_sock_opt_perm+0xff/0x1a0 [ 188.129387][ T8913] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 188.129410][ T8913] ? __pfx_xsk_setsockopt+0x10/0x10 [ 188.129439][ T8913] do_sock_setsockopt+0x17c/0x1b0 [ 188.129473][ T8913] __x64_sys_setsockopt+0x13d/0x1b0 [ 188.129508][ T8913] do_syscall_64+0x14d/0xf80 [ 188.129537][ T8913] ? trace_irq_disable+0x3b/0x150 [ 188.129567][ T8913] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.129588][ T8913] ? clear_bhb_loop+0x40/0x90 [ 188.129613][ T8913] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.129632][ T8913] RIP: 0033:0x7efc2a99c799 [ 188.129654][ T8913] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 188.129671][ T8913] RSP: 002b:00007efc2b803028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 188.129694][ T8913] RAX: ffffffffffffffda RBX: 00007efc2ac15fa0 RCX: 00007efc2a99c799 [ 188.129708][ T8913] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 188.129720][ T8913] RBP: 00007efc2aa32bd9 R08: 0000000000000004 R09: 0000000000000000 [ 188.129732][ T8913] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 188.129744][ T8913] R13: 00007efc2ac16038 R14: 00007efc2ac15fa0 R15: 00007ffca659d468 [ 188.129778][ T8913] [ 188.130403][ T8913] Mem-Info: [ 188.142624][ T8894] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 188.151470][ T8913] active_anon:6077 inactive_anon:7 isolated_anon:0 [ 188.151470][ T8913] active_file:3208 inactive_file:40183 isolated_file:0 [ 188.151470][ T8913] unevictable:768 dirty:79 writeback:0 [ 188.151470][ T8913] slab_reclaimable:10576 slab_unreclaimable:96075 [ 188.151470][ T8913] mapped:29470 shmem:1364 pagetables:1282 [ 188.151470][ T8913] sec_pagetables:0 bounce:0 [ 188.151470][ T8913] kernel_misc_reclaimable:0 [ 188.151470][ T8913] free:1334115 free_pcp:10572 free_cma:0 [ 188.166886][ T8894] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 188.168828][ T8913] Node 0 active_anon:24308kB inactive_anon:28kB active_file:12832kB inactive_file:160532kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117880kB dirty:316kB writeback:0kB shmem:3920kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12960kB pagetables:4976kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 188.511892][ T8913] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 188.544256][ T8913] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 188.577490][ T8913] lowmem_reserve[]: 0 2493 2493 2493 2493 [ 188.583941][ T8913] Node 0 DMA32 free:1371972kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24308kB inactive_anon:28kB active_file:12832kB inactive_file:160532kB unevictable:1536kB writepending:316kB zspages:0kB present:3129332kB managed:2552832kB mlocked:0kB bounce:0kB free_pcp:42060kB local_pcp:20912kB free_cma:0kB [ 188.627993][ T8913] lowmem_reserve[]: 0 0 0 0 0 [ 188.632912][ T8913] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:884kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 188.663732][ T8913] lowmem_reserve[]: 0 0 0 0 0 [ 188.668701][ T8913] Node 1 Normal free:3949884kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 188.702933][ T8913] lowmem_reserve[]: 0 0 0 0 0 [ 188.707943][ T8913] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 188.721456][ T8913] Node 0 DMA32: 4855*4kB (UM) 2455*8kB (UME) 1031*16kB (UM) 977*32kB (UME) 617*64kB (UME) 538*128kB (UME) 403*256kB (UME) 301*512kB (UME) 208*1024kB (UME) 111*2048kB (UM) 117*4096kB (UM) = 1372004kB [ 188.742131][ T8913] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 188.754247][ T8913] Node 1 Normal: 1*4kB (M) 9*8kB (UM) 9*16kB (UME) 15*32kB (UME) 10*64kB (UME) 2*128kB (UM) 3*256kB (UM) 4*512kB (UM) 3*1024kB (UME) 1*2048kB (E) 962*4096kB (UM) = 3949884kB [ 188.772643][ T8913] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 188.782835][ T8913] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 188.792413][ T8913] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 188.802881][ T8913] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 188.812775][ T8913] 44751 total pagecache pages [ 188.817922][ T36] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.828346][ T36] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.856277][ T8913] 0 pages in swap cache [ 188.867614][ T36] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.877558][ T8913] Free swap = 124996kB [ 188.882090][ T8913] Total swap = 124996kB [ 188.894238][ T6153] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.894990][ T8913] 2097051 pages RAM [ 188.915708][ T6153] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 188.935754][ T8913] 0 pages HighMem/MovableOnly [ 188.944141][ T8913] 427007 pages reserved [ 188.949465][ T6153] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.956169][ T8913] 0 pages cma reserved [ 189.000328][ T6153] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 189.041356][ T6153] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.094724][ T8923] netlink: 'syz.2.907': attribute type 1 has an invalid length. [ 189.111067][ T6153] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 189.116710][ T8924] netlink: 808 bytes leftover after parsing attributes in process `syz.3.908'. [ 189.129014][ T6153] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.140207][ T6153] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 189.170070][ T8924] netlink: 52 bytes leftover after parsing attributes in process `syz.3.908'. [ 189.193758][ T6153] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.271776][ T8923] 8021q: adding VLAN 0 to HW filter on device bond0 [ 189.336212][ T8928] bond0: (slave veth5): Enslaving as an active interface with a down link [ 189.386416][ T8934] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 189.394225][ T8934] bond0: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 189.642744][ T8945] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 190.834467][ T9007] netlink: 'syz.3.936': attribute type 21 has an invalid length. [ 190.897427][ T9007] bond1: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 190.942515][ T9007] bond1 (unregistering): Released all slaves [ 191.020699][ T9019] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.941'. [ 191.034910][ T9015] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 191.036355][ T9019] netlink: Conntrack attr has 4 unknown bytes [ 191.077478][ T9021] netlink: 20 bytes leftover after parsing attributes in process `syz.1.943'. [ 191.140304][ T9023] netlink: 124 bytes leftover after parsing attributes in process `syz.0.942'. [ 191.426775][ T9040] bond1: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 191.440402][ T9040] bond1 (unregistering): Released all slaves [ 191.571705][ T9049] netlink: 4 bytes leftover after parsing attributes in process `syz.3.953'. [ 191.607127][ T9049] netlink: 176 bytes leftover after parsing attributes in process `syz.3.953'. [ 191.637574][ T9049] netlink: 24 bytes leftover after parsing attributes in process `syz.3.953'. [ 192.429386][ T9082] netlink: 4 bytes leftover after parsing attributes in process `syz.1.964'. [ 192.480765][ T9083] netlink: 28 bytes leftover after parsing attributes in process `syz.1.964'. [ 192.588933][ T9085] bond2: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 192.604113][ T9085] bond2 (unregistering): Released all slaves [ 192.893253][ T9108] netlink: 256 bytes leftover after parsing attributes in process `syz.0.973'. [ 193.189135][ T9120] set match dimension is over the limit! [ 193.223580][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5750 ms [ 193.232070][ C0] lec:lec_tx_timeout: lec0 [ 193.237072][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 193.493027][ T9130] bond1: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 193.509076][ T9130] bond1 (unregistering): Released all slaves [ 193.535043][ T9134] netlink: 80 bytes leftover after parsing attributes in process `syz.4.979'. [ 193.552725][ T9141] netlink: 'syz.3.985': attribute type 4 has an invalid length. [ 193.868911][ T9155] bridge_slave_0: entered promiscuous mode [ 194.234816][ T9178] FAULT_INJECTION: forcing a failure. [ 194.234816][ T9178] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 194.275435][ T9178] CPU: 1 UID: 0 PID: 9178 Comm: syz.2.999 Not tainted syzkaller #0 PREEMPT(full) [ 194.275477][ T9178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 194.275489][ T9178] Call Trace: [ 194.275497][ T9178] [ 194.275519][ T9178] dump_stack_lvl+0xe8/0x150 [ 194.275563][ T9178] should_fail_ex+0x412/0x560 [ 194.275593][ T9178] _copy_from_user+0x2d/0xb0 [ 194.275622][ T9178] ___sys_sendmsg+0x1c6/0x360 [ 194.275659][ T9178] ? __pfx____sys_sendmsg+0x10/0x10 [ 194.275726][ T9178] ? __fget_files+0x2a/0x420 [ 194.275752][ T9178] ? __fget_files+0x3a0/0x420 [ 194.275791][ T9178] __x64_sys_sendmsg+0x1bd/0x2a0 [ 194.275822][ T9178] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 194.275861][ T9178] ? __pfx_ksys_write+0x10/0x10 [ 194.275894][ T9178] do_syscall_64+0x14d/0xf80 [ 194.275923][ T9178] ? trace_irq_disable+0x3b/0x150 [ 194.275951][ T9178] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.275971][ T9178] ? clear_bhb_loop+0x40/0x90 [ 194.276022][ T9178] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.276041][ T9178] RIP: 0033:0x7fa7e039c799 [ 194.276060][ T9178] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 194.276120][ T9178] RSP: 002b:00007fa7e1254028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 194.276143][ T9178] RAX: ffffffffffffffda RBX: 00007fa7e0615fa0 RCX: 00007fa7e039c799 [ 194.276158][ T9178] RDX: 0000000000040010 RSI: 0000200000000240 RDI: 0000000000000004 [ 194.276172][ T9178] RBP: 00007fa7e1254090 R08: 0000000000000000 R09: 0000000000000000 [ 194.276185][ T9178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 194.276198][ T9178] R13: 00007fa7e0616038 R14: 00007fa7e0615fa0 R15: 00007ffd754db018 [ 194.276232][ T9178] [ 194.365988][ T9170] bond3: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 194.521408][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.539981][ T9170] bond3 (unregistering): Released all slaves [ 194.930074][ T9204] Cannot find add_set index 0 as target [ 195.130758][ T9208] xt_hashlimit: size too large, truncated to 1048576 [ 195.502800][ T9220] bond2: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 195.800131][ T9220] bond2 (unregistering): Released all slaves [ 195.857767][ T9221] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 196.006646][ T9228] syzkaller0: entered promiscuous mode [ 196.083761][ T9228] syzkaller0: entered allmulticast mode [ 196.094952][ T9229] tipc: Enabled bearer , priority 0 [ 196.145920][ T9227] tipc: Resetting bearer [ 196.242106][ T9227] tipc: Disabling bearer [ 196.514102][ T9249] __nla_validate_parse: 1 callbacks suppressed [ 196.514125][ T9249] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1025'. [ 196.896141][ T9270] netlink: 201916 bytes leftover after parsing attributes in process `syz.1.1033'. [ 197.072077][ T9274] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1034'. [ 197.141963][ T9285] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1036'. [ 197.435935][ T9294] syzkaller0: entered promiscuous mode [ 197.448315][ T9294] syzkaller0: entered allmulticast mode [ 197.486673][ T9294] tipc: Started in network mode [ 197.504337][ T9294] tipc: Node identity 62f3cdfabb92, cluster identity 4711 Stopping sshd: [ 197.581241][ T9294] tipc: Enabled bearer , priority 0 [ 197.632641][ T9292] tipc: Resetting bearer [ 197.775057][ T9292] tipc: Disabling bearer stopped /usr/sbin/sshd (pid 5577) OK [ 198.016531][ T9311] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1044'. Stopping crond: [ 198.130957][ T9311] bond4: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 198.161126][ T9319] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1046'. [ 198.236102][ T9319] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 198.243603][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 198.256430][ C0] lec:lec_tx_timeout: lec0 [ 198.261284][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 198.261283][ T9311] bond4: (slave lo): Enslaving as an active interface with an up link [ 198.261677][ T9311] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. stopped /usr/sbin/crond (pid 5566) OK [ 198.532767][ T9331] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1050'. [ 198.578437][ T9335] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1051'. [ 198.812397][ T9345] syzkaller0: entered promiscuous mode [ 198.823608][ T9345] syzkaller0: entered allmulticast mode [ 198.837069][ T9345] tipc: Enabled bearer , priority 0 [ 198.872946][ T9342] tipc: Resetting bearer Stopping dhcpcd... [ 198.964938][ T9342] tipc: Disabling bearer stopped /sbin/dhcpcd (pid 5488) [ 199.586391][ T9376] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1065'. Stopping network: [ 199.607877][ T9378] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1066'. [ 199.764290][ T9377] nbd0: detected capacity change from 0 to 127 [ 199.805628][ T5831] block nbd0: Receive control failed (result -104) [ 200.276208][ T9401] FAULT_INJECTION: forcing a failure. [ 200.276208][ T9401] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 200.309969][ T9401] CPU: 1 UID: 0 PID: 9401 Comm: syz.0.1070 Not tainted syzkaller #0 PREEMPT(full) [ 200.310006][ T9401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 200.310017][ T9401] Call Trace: [ 200.310024][ T9401] [ 200.310032][ T9401] dump_stack_lvl+0xe8/0x150 [ 200.310075][ T9401] should_fail_ex+0x412/0x560 [ 200.310101][ T9401] _copy_from_user+0x2d/0xb0 [ 200.310127][ T9401] generic_map_update_batch+0x648/0x990 [ 200.310163][ T9401] ? __pfx_generic_map_update_batch+0x10/0x10 [ 200.310186][ T9401] ? __fget_files+0x2a/0x420 [ 200.310220][ T9401] ? __pfx_generic_map_update_batch+0x10/0x10 [ 200.310242][ T9401] bpf_map_do_batch+0x39b/0x630 [ 200.310266][ T9401] __sys_bpf+0x7c1/0x950 [ 200.310297][ T9401] ? __pfx___sys_bpf+0x10/0x10 [ 200.310342][ T9401] ? ksys_write+0x242/0x270 [ 200.310365][ T9401] ? __pfx_ksys_write+0x10/0x10 [ 200.310392][ T9401] __x64_sys_bpf+0x7c/0x90 [ 200.310420][ T9401] do_syscall_64+0x14d/0xf80 [ 200.310450][ T9401] ? trace_irq_disable+0x3b/0x150 [ 200.310477][ T9401] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.310498][ T9401] ? clear_bhb_loop+0x40/0x90 [ 200.310524][ T9401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.310543][ T9401] RIP: 0033:0x7f9d7ad9c799 [ 200.310563][ T9401] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 200.310581][ T9401] RSP: 002b:00007f9d78ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 200.310604][ T9401] RAX: ffffffffffffffda RBX: 00007f9d7b015fa0 RCX: 00007f9d7ad9c799 [ 200.310619][ T9401] RDX: 0000000000000038 RSI: 0000200000000300 RDI: 000000000000001a [ 200.310632][ T9401] RBP: 00007f9d78ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 200.310645][ T9401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 200.310656][ T9401] R13: 00007f9d7b016038 R14: 00007f9d7b015fa0 R15: 00007ffcd86cc3c8 [ 200.310688][ T9401] [ 200.709675][ T6153] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 200.720434][ T6153] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.732099][ T6153] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 200.742300][ T6153] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.769679][ T6153] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 200.803670][ T6153] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.834350][ T6153] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 200.877834][ T6153] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.056109][ T9417] tipc: Enabled bearer , priority 0 [ 201.129832][ T9416] tipc: Disabling bearer OK [ 201.820718][ T9464] __nla_validate_parse: 1 callbacks suppressed [ 201.820747][ T9464] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1087'. [ 201.873847][ T9466] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 Stopping iptables: [ 201.979887][ T9466] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 OK [ 202.201631][ T9480] No such timeout policy "syz0" [ 202.272697][ T9485] FAULT_INJECTION: forcing a failure. [ 202.272697][ T9485] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 202.296067][ T9485] CPU: 1 UID: 0 PID: 9485 Comm: syz.4.1092 Not tainted syzkaller #0 PREEMPT(full) [ 202.296096][ T9485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 202.296108][ T9485] Call Trace: [ 202.296117][ T9485] [ 202.296125][ T9485] dump_stack_lvl+0xe8/0x150 [ 202.296159][ T9485] should_fail_ex+0x412/0x560 [ 202.296197][ T9485] _copy_from_iter+0x1d3/0x1670 [ 202.296238][ T9485] ? __pfx__copy_from_iter+0x10/0x10 [ 202.296265][ T9485] ? alloc_pages_noprof+0xbd/0x190 Stopping system [ 202.296293][ T9485] ? skb_page_frag_refill+0x199/0x310 [ 202.296334][ T9485] kcm_sendmsg+0xe0c/0x2b60 [ 202.296402][ T9485] ? __pfx_kcm_sendmsg+0x10/0x10 message bus: [ 202.296427][ T9485] ? aa_sock_msg_perm+0xf1/0x1b0 [ 202.296453][ T9485] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 202.296477][ T9485] ? __pfx_kcm_sendmsg+0x10/0x10 [ 202.296501][ T9485] ____sys_sendmsg+0xa68/0xad0 [ 202.296540][ T9485] ? __pfx_____sys_sendmsg+0x10/0x10 [ 202.296580][ T9485] ? import_iovec+0x73/0xa0 [ 202.296611][ T9485] ___sys_sendmsg+0x2a5/0x360 [ 202.296648][ T9485] ? __pfx____sys_sendmsg+0x10/0x10 [ 202.296714][ T9485] ? __fget_files+0x2a/0x420 [ 202.296741][ T9485] ? __fget_files+0x3a0/0x420 [ 202.296778][ T9485] __x64_sys_sendmsg+0x1bd/0x2a0 [ 202.296811][ T9485] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 202.296851][ T9485] ? __pfx_ksys_write+0x10/0x10 [ 202.296885][ T9485] do_syscall_64+0x14d/0xf80 [ 202.296913][ T9485] ? trace_irq_disable+0x3b/0x150 [ 202.296939][ T9485] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.296959][ T9485] ? clear_bhb_loop+0x40/0x90 [ 202.296984][ T9485] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.297004][ T9485] RIP: 0033:0x7efc2a99c799 [ 202.297024][ T9485] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 202.297039][ T9485] RSP: 002b:00007efc2b7e2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 202.297061][ T9485] RAX: ffffffffffffffda RBX: 00007efc2ac16090 RCX: 00007efc2a99c799 [ 202.297073][ T9485] RDX: 0000000000000000 RSI: 0000200000002080 RDI: 0000000000000003 [ 202.297085][ T9485] RBP: 00007efc2b7e2090 R08: 0000000000000000 R09: 0000000000000000 [ 202.297097][ T9485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 202.297107][ T9485] R13: 00007efc2ac16128 R14: 00007efc2ac16090 R15: 00007ffca659d468 [ 202.297142][ T9485] done [ 203.273582][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 203.281938][ C0] lec:lec_tx_timeout: lec0 [ 203.286903][ C0] lec:lec_start_xmit: lec0:No lecd attached Stopping klogd: OK Stopping acpid: [ 204.702131][ T9455] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 204.712241][ T9483] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1091'. OK [ 204.964676][ T9521] netlink: 'syz.1.1099': attribute type 4 has an invalid length. [ 205.002627][ T29] IPVS: starting estimator thread 0... Stopping syslogd: [ 205.025288][ T9527] netlink: 200124 bytes leftover after parsing attributes in process `syz.0.1101'. [ 205.103739][ T9526] IPVS: using max 26 ests per chain, 62400 per kthread [ 205.163058][ T9534] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) stopped /sbin/syslogd (pid 5175) [ 205.203991][ T9534] bridge0: entered allmulticast mode OK [ 205.303968][ T9541] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1105'. [ 205.410759][ T9544] openvswitch: netlink: IPv6 tunnel dst address is zero [ 205.778165][ T9561] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1113'. umount: can't remount debugfs read-only umount: tmpfs busy - remounted read-only [ 206.123773][ T9583] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1122'. [ 206.141741][ T9583] bridge0: left allmulticast mode [ 206.492651][ T5831] Bluetooth: hci4: link tx timeout [ 206.498154][ T5831] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 206.654766][ T9603] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1131'. [ 206.692218][ T9603] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1131'. [ 206.758685][ T9611] xt_TCPMSS: Only works on TCP SYN packets [ 206.927095][ T9616] Cannot find add_set index 0 as target [ 207.850635][ T9663] team0: Device wireguard0 is of different type [ 207.992394][ T9668] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 208.077417][ T9670] bond2: option arp_all_targets: invalid value (18446744073709551613) [ 208.087970][ T9670] bond2 (unregistering): Released all slaves [ 208.303559][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 208.311709][ C0] lec:lec_tx_timeout: lec0 [ 208.317167][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 208.594976][ T5144] Bluetooth: hci4: command 0x0406 tx timeout umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounted read-only umount: can't remount /dev/root read-only The system is going down NOW! Sent SIGTERM to all processes [ 208.831301][ T5193] udevd[5193]: could not touch /run/udev/queue: Read-only file system Connection to 10.128.0.49 closed by remote host. [ 209.935388][ T5823] syz_tun (unregistering): left allmulticast mode [ 210.272505][ T6151] bridge_slave_1: left allmulticast mode [ 210.278639][ T6151] bridge_slave_1: left promiscuous mode [ 210.285600][ T6151] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.295048][ T6151] bridge_slave_0: left allmulticast mode [ 210.300915][ T6151] bridge_slave_0: left promiscuous mode [ 210.308261][ T6151] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.478201][ T6151] bond0 (unregistering): (slave veth5): Releasing active interface [ 210.487535][ T6151] bond0 (unregistering): Released all slaves [ 210.500385][ T6151] bond1 (unregistering): Released all slaves [ 210.613053][ T6151] tipc: Left network mode [ 210.746938][ T6151] hsr_slave_0: left promiscuous mode [ 210.752858][ T6151] hsr_slave_1: left promiscuous mode [ 210.759128][ T6151] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 210.766871][ T6151] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 210.897471][ T6151] team0 (unregistering): Port device team_slave_1 removed [ 210.910909][ T6151] team0 (unregistering): Port device team_slave_0 removed [ 211.013150][ T6151] lo (unregistering): left allmulticast mode [ 211.579029][ T6151] gretap0: left allmulticast mode [ 211.585506][ T6151] gretap0: left promiscuous mode [ 211.590578][ T6151] bridge0: port 3(gretap0) entered disabled state [ 211.598699][ T6151] bridge_slave_1: left allmulticast mode [ 211.604512][ T6151] bridge_slave_1: left promiscuous mode [ 211.610202][ T6151] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.618768][ T6151] bridge_slave_0: left allmulticast mode [ 211.624747][ T6151] bridge_slave_0: left promiscuous mode [ 211.630478][ T6151] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.768172][ T6151] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 211.778265][ T6151] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 211.787661][ T6151] bond0 (unregistering): Released all slaves [ 211.797371][ T6151] bond1 (unregistering): Released all slaves [ 211.812376][ T6151] bond2 (unregistering): Released all slaves [ 211.910251][ T6151] tipc: Left network mode [ 211.927279][ T6151] IPVS: stopping backup sync thread 6026 ... [ 211.946346][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 211.946609][ T5837] Bluetooth: hci3: command 0x0406 tx timeout [ 211.952404][ T5836] Bluetooth: hci1: command 0x0406 tx timeout [ 212.012608][ T9693] syz_tun (unregistering): left allmulticast mode [ 212.119253][ T6151] hsr_slave_0: left promiscuous mode [ 212.125347][ T6151] hsr_slave_1: left promiscuous mode [ 212.131116][ T6151] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 212.138880][ T6151] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 212.260358][ T6151] team0 (unregistering): Port device team_slave_1 removed [ 212.282594][ T6151] team0 (unregistering): Port device team_slave_0 removed [ 212.618237][ T6151] IPVS: stop unused estimator thread 0... [ 213.143455][ T6151] bridge_slave_1: left allmulticast mode [ 213.149742][ T6151] bridge_slave_1: left promiscuous mode [ 213.155703][ T6151] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.165034][ T6151] bridge_slave_0: left allmulticast mode [ 213.170807][ T6151] bridge_slave_0: left promiscuous mode [ 213.176595][ T6151] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.190451][ T6151] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 213.197325][ T6151] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 213.204492][ T6151] bridge0: port 3(wlan0) entered disabled state [ 213.245278][ T6151] bond1 (unregistering): (slave ip6gretap1): Releasing active interface [ 213.498744][ T6151] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 213.508693][ T6151] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 213.518808][ T6151] bond0 (unregistering): Released all slaves [ 213.528942][ T6151] bond1 (unregistering): Released all slaves [ 213.747482][ T6151] bond0 (unregistering): Released all slaves [ 213.836331][ T6151] tipc: Left network mode [ 214.081685][ T6151] hsr_slave_0: left promiscuous mode [ 214.089141][ T6151] hsr_slave_1: left promiscuous mode [ 214.095361][ T6151] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 214.102991][ T6151] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 214.113550][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5800 ms [ 214.121567][ C0] lec:lec_tx_timeout: lec0 [ 214.126480][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 214.134449][ T6151] hsr_slave_0: left promiscuous mode [ 214.140361][ T6151] hsr_slave_1: left promiscuous mode [ 214.255287][ T6151] team0 (unregistering): Port device team_slave_1 removed [ 214.271549][ T6151] team0 (unregistering): Port device team_slave_0 removed [ 214.369809][ T6151] team0 (unregistering): Port device batadv1 removed [ 215.117983][ T6151] IPVS: stop unused estimator thread 0... [ 215.126027][ T6151] IPVS: stop unused estimator thread 0...