last executing test programs: 2.721896574s ago: executing program 1 (id=611): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1b, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000040)="f6eb094549002060009b8538a4ba07", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x1, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000180)={'vxcan0\x00'}) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x800}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000440)={r6, @in6={{0xa, 0x8, 0x3faf, @private2, 0xe}}}, &(0x7f0000000300)=0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000001080)={r7, 0xd}, 0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r3, 0x84, 0x79, &(0x7f0000000100)={r7, 0x8001, 0x7f}, 0x8) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010100000000000000002b00000008000300", @ANYRES32=0x0, @ANYBLOB="0400460005003400fe000000080026008a09000030005180280000800800030005ac0f00110001ff030000b9c5e13fcd62bc000005000200020000000400008000000000"], 0x60}}, 0x40080) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r8, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r9, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000000900008808c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c640009801c000080060001000200000008000200ffffffff05000300030000001c000080060001000200000008000200ac141427050003"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) 2.455731635s ago: executing program 4 (id=617): r0 = socket(0x28, 0x1, 0x0) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x52, 0x0, &(0x7f00000002c0)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000300)={'wpan0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), r0) sendmsg$FOU_CMD_DEL(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r5, 0x2, 0x70bd27, 0x25dfdbfb, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x3}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}]}, 0x2c}, 0x1, 0x0, 0x0, 0x12}, 0x0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x24, r2, 0x403, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x21}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}]}, 0x24}, 0x1, 0x0, 0x0, 0x2400c880}, 0x20000040) 2.311424277s ago: executing program 4 (id=619): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) write(r0, &(0x7f0000000000)="38000000010003", 0x7) 2.223849378s ago: executing program 0 (id=621): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000200), 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={0x60, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2, 0x0, 0x2000}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x20, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xffff639c}]}, 0x60}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000002011d04000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x38}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r3, &(0x7f0000000340)={0xa, 0x4e23, 0xc4, @initdev={0xfe, 0x88, '\x00', 0x41, 0x0}, 0x2}, 0x1c) r4 = socket$inet6(0xa, 0x4, 0x1) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r4, 0x29, 0x41, &(0x7f0000000280)={'raw\x00', 0x2, [{}, {}]}, 0x48) getsockopt$MRT(r5, 0x0, 0xcf, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x800, 0xe14a, 0x9, 0x1, 0x7fef}, &(0x7f0000000080)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000171102a00000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r7, &(0x7f0000000080), 0x12) listen(r5, 0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f00000000c0)={0x3, 0x7, 0x10, 0x8, r6}, 0x10) sendto$inet6(r0, &(0x7f0000000180)="1a", 0xffffffffffffff88, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c) close(0x3) 2.19248756s ago: executing program 4 (id=622): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2000000}, 0x90) accept4$ax25(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @null}, [@default, @bcast, @null, @null, @default, @null, @remote, @default]}, &(0x7f0000000100)=0x48, 0x80000) (async) r0 = accept4$ax25(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @null}, [@default, @bcast, @null, @null, @default, @null, @remote, @default]}, &(0x7f0000000100)=0x48, 0x80000) r1 = socket$phonet(0x23, 0x2, 0x1) socket$netlink(0x10, 0x3, 0xc) (async) r2 = socket$netlink(0x10, 0x3, 0xc) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000002840)={0x0, 0x0}, &(0x7f0000002880)=0xc) sendmsg$netlink(r2, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000000980)={0x10, 0x32, 0x4, 0x70bd25, 0x25dfdbff}, 0x10}], 0x1, &(0x7f0000002900)=[@cred={{0x1c, 0x1, 0x2, {0x0, r3}}}], 0x20, 0x50}, 0x40880) ioctl$SIOCAX25ADDUID(r0, 0x89e1, &(0x7f0000000140)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, r3}) r4 = socket(0x848000000015, 0x805, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x401, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x54}, 0x1, 0x0, 0x0, 0x4000850}, 0x24004810) (async) sendmsg$NFT_BATCH(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x401, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x54}, 0x1, 0x0, 0x0, 0x4000850}, 0x24004810) 2.01975106s ago: executing program 4 (id=624): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000200)={0x10, 0x0, 0x25dfdbfe, 0x2}, 0xc) socket$netlink(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000800)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="30000000710001000000", @ANYRES32=r5, @ANYBLOB], 0x30}}, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x14, 0x34, 0x9, 0x0, 0x4000, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4841}, 0x4000010) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0xa4, 0x2c, 0x2, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0x9}, {}, {0xc, 0x13}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_PORT_SRC_MAX={0x6, 0x58, 0x4e20}, @TCA_FLOWER_KEY_TCP_FLAGS_MASK={0x6, 0x48, 0x2}, @TCA_FLOWER_KEY_TCP_FLAGS_MASK={0x6, 0x48, 0xff00}, @TCA_FLOWER_KEY_UDP_DST={0x6}]}}, @TCA_RATE={0x6, 0x5, {0x5, 0x5}}, @TCA_CHAIN={0x8, 0xb, 0x723}, @filter_kind_options=@f_route={{0xa}, {0x34, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0xc}, @TCA_ROUTE4_TO={0x8, 0x2, 0x4a}, @TCA_ROUTE4_TO={0x8, 0x2, 0x62}, @TCA_ROUTE4_IIF={0x8, 0x4, r5}, @TCA_ROUTE4_TO={0x8, 0x2, 0x1e}, @TCA_ROUTE4_FROM={0x8, 0x3, 0xa2}]}}]}, 0xa4}}, 0x40084) socket$phonet_pipe(0x23, 0x5, 0x2) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) syz_emit_ethernet(0x32, &(0x7f0000000380)={@broadcast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x68, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty=0xe0000001}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x1, 0x3, 0x100, @val=0x80}}}}}}}, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0xf4e) writev(0xffffffffffffffff, &(0x7f0000019880)=[{&(0x7f0000000400)="fb", 0xffffff5c}, {&(0x7f00000197c0)="1902eb02d5e5f29e59e1a7caec33eb76d2430da474d87e367f6598d026438b65eda8341073b6752abdcee080c8e1e876b25227c37d7dd79886ce33f13e857c8eda1cecf6ac36c03dbf54e3cb5136da5a33fee76fb3113f8b6700e9e5fc006b8eed665fed48738d59395ad07438c3610ae3976aac75caf2facafa21c25be3c2", 0x7f}], 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(r6, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000007000000070000000020000000400000000000002050000000300000005000093010000000a000000ffff00000600000002000000ff0f0000050000000400000040000000030000000a0000000300000081000000dde61b3b7304000001000000060000000000000e"], 0x0, 0x8a, 0x0, 0x1, 0x6, 0x10000}, 0x28) r8 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000001780)={&(0x7f00000003c0)=@caif=@rfm={0x25, 0x15, "fb95785b587f23ba61bfb990191a2af1"}, 0x80, 0x0}, 0x0) bind$tipc(r6, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x1, {0x2, 0x4, 0x4}}, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv6_newrule={0x44, 0x20, 0x1, 0x0, 0x0, {0xa, 0x80, 0x14, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1d}, [@FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x44}}, 0x40000) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0) 1.886299793s ago: executing program 3 (id=627): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001240)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001280)=@newtfilter={0x38, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x2}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0x8001}]}}]}, 0x38}}, 0x0) r6 = socket(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0xfffffffffffffff5, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2}, @TCA_FQ_FLOW_MAX_RATE={0x0, 0x7, 0xfffffffd}]}}]}, 0x48}}, 0x0) sendmmsg$alg(r6, &(0x7f0000000140), 0x4924b68, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000400)="e6a1f66485fdb65165e9d78c4904284887ead2e15a969c9998f463aa7915cccd5c6f99f26c7d6a32854802713b74a4413ef4b8591c68609cf488c9b156f4f04a090f8e44e7b8302c6619a7ea856b1d5f814e6c6bf9f3d3e00d9f998f8ea92659fd32b1f7a68e29a027471b4282bc", 0x6e, 0x54015, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) r10 = socket$pppl2tp(0x18, 0x1, 0x1) r11 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r10, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r11, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) close(r11) r12 = socket(0x10, 0x80002, 0x0) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r13) sendmsg$NLBL_MGMT_C_LISTDEF(r13, &(0x7f0000002200)={0x0, 0x0, &(0x7f00000021c0)={&(0x7f0000002180)={0x14, r14, 0x1, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4020040}, 0x80) sendmmsg$alg(r12, &(0x7f00000000c0), 0x492492492492627, 0x0) recvmmsg(r0, &(0x7f0000001f40)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x41, 0x0) 1.835895831s ago: executing program 0 (id=628): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={0x0, 0x100}, 0x1, 0x7}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b30, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$sock(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000380)="eba2f0760646e88f94c13fc9ecdd90bc92950e7b3a15f3eb22c22760970932c30dd319da2a6c7a1e6aecac23db902d70ecc3f01b658f316c24e8eca658ee3a92a46da0db1e572ad65fb1c9a4dae9480277c0566154c8f46fffd6d618944acb6f132698ebd9f991acb67d978364529a487fa35092be900a2d03de21deeb07c5a80a16492763ee7d7cb46a42d9fc66b3728f2fd9e9b0c69fd45c9d35225bda177669d50c46f320c8d392090cf3598d909d824164a33e3f20e7b1f4810e483b85846cd224050b672be91a9a85", 0xcb}, {&(0x7f0000000580)="4805d8e2a4a354cd02fa2e882c82fed396482a84825706e27d3e6710c55897fa663913f6e1f815461f5bf54f1be87bdf6c14fe8890e7aa60fd009b5fb2eb60256c099e5786790aa037a8dfaa67791dc62ec060ba2b836cf08513103caabd2abd1dd160bde565d1d517d5ba55c768a3ccea66514e5c5d6035e1294d3bb53831b79179c52010e2bc2ff4e6239085e3d0809645408c8cb114a7cb13782d0ba8b043cf37a3e0430bc09ef3e49dc462a6649927d44da157de8e9644f996fe6ff3bc685194ec16c6d665a5df3bb6d77611f81ec5118fb896", 0xd5}, {&(0x7f0000000680)="7cb077f41bc3cca84eb2b6c964d85a5e61c8c715f7b137dc5e36bdc9487ea29fa51710d53144fd4f0244159f0cf4765bc7ce4680d23258f18669bc9cb0ee85edc1fe2a19180a954284bdddcf02cab5ac826a3e83cc8f94c74bc7c05a74c4e604e01b93a0f049bc9ae977c18d1a08dc6c3659946e983f82946d6d8a0105a4bcb2accf092fbc0ec3c09bb1456427643f160f831de40825e9399445d7547a4b6d70c45c9de0b0c0d7077707b21c96a7f1acf97f74599af60d40827d1bb6961728a4be89a7635a72c1613d28db4f07c7c60793edd5a08ea2b1e206dc0bbdba6e783abd5dd14ae83e37910a13973d", 0xec}, {&(0x7f0000000780)="c00268e182a5c8e2f6fbf5028df2e52d907b3eec7f7b51fa41203dd1e61aea3f275c7b864e0daf0d971761d84fb43dd2eb0b17465f985b03d125deda0e5c060eadcca8f531b31c4cc2f80d5b5fc770e2f3d77b39885ace990b631598968561b524c21d9b5f3b74e5adb9ee92ea15f5ea7d7f15744a77251c2465cd0824fdb30406eb921014ae3884411f554ae593256f075550f41acd8815ca99464f2ea55972bfacdb5736b1bbe15908c536c7bc2d46bc547693e33c9f204f73a83cb94c8f918cccb9acb9c92ba0441b769043044008eead95df2745fa1b7a4a21d5a22fa0b8604d9e340fdd7838ef219ee307d274b74b1aa32a805db960cfb46799f0228b43901078b298b28c0a22f75b62f39a1df24ee950a397bbd77f746fc015136fae1422769fcf72634bd2918761c95e972e920a3ad4a992f6bdf3dccebb421c5b74dcc5d0a8dca806fdf52aa5727f32edeb9d52a662a7652470859d57e52422352d15c12f8e52af9952ed5e1df3ce2f0db94d31d43912b622071c335f6fb7f6c370534b46472a6bfbae027a5b229751a2a052a91efb674159ab88878534f557d9098036d69cd1c64c25799b3455e2001d2a4733bdd6f4704047fe6616e694389171d9c92792f96072d1676b173302b17e339472a85f5a9c0286c58abbdc04aa4be0ac3f4842047767c78f88e7d423da46ec52642f57cdf11ea038d4a167020a6b128bc6cf388832a546f3f5158cbc143c90fc07edad5863588a93822aaa78f99b8ccaecce5ea93d8dc81702f18b77ac2a9853d3ac1e0329e425ac0fb962b0d1255e3625f810743734a8a0fab9da78fd8bd3af9a23a1f2c5e73e8eff3e3db03cef5aab9fbb88e44c2d066780925972160763bd91001c0ece0194940e9beedae81a4ce0aaad5b871f66309f349538be6c34955b5f638ca7c3c6ff8027583531f358b14d1e52132c1b5ea56e8195e194bcc7bcfd58b20f242b95e630ddb0cdeb6861d34f095158362fe525f4b754a9d0aa2e7cef59de9bdd71868ef5cc391f580064833a8004b87309d587c7e4df06c297d0bbe802903c5cd1ff7c9228ce3703c934b9abff3f878d7facfffa4099d72fbe38b2cedf3c621bc5d2c596669d514609a4ce1cc8c19966228ef9ceaff9bbee7c39a47b7782ad86ee38a8426224c72da64ce3f8a072e02de0a11d14cead9d6a8345dda950c92390d2f19577556253ca9b89ce64bf12d639a551f260865aa1314a5ae1a995ef5e20a023ad7ad741a86ce2c41c853431cf8e721ad3251b6f644d7117ac571b7f56ed7edd590d6eefd85519e0105b2b074035adc0bc2a2599d8681edff504f480fa79518ce342c666b903c9eadd7e2ce705bfbe7e82454dd07efcf821af042442630f5937025954260c9f931a81c835a10807d91f880850efd071fba0b72d587b6cf9cdb55d0f4d19d55d9ba151f2be9f6102a9f77917c67db13720f47bed68d633f8cec6ab6611262e10c130117bf67236c28d963931ad9aa003c53c3840c4271c3569a853838a8bfd66395ce6e3c3ba8624edb6c7312a3647a274929f4727f73fd24c81d9f1b636b0a7d595d0a3798951563619e48a8ce11e67062b85d6526d6b39922fe4758b30d29accd724cd77f4999cad693bb06c62b854977a17f0315234f97397c7e3df7d1f3573d04dd2502cf48d22277d53c64867d5e0ed90aa7ecdfa051dec4fbb6963491557788b94bf7c6546a757f363d51fd8cf0b2ca76f7e49f5d3c1521290e03cab671745025ab17fca827589d636ef8ce578d32976e02cc249cccdd8a0af618620c4c9adeed5806ca887577224dea42ead9225589eaaa4cec38d988f2756c894691a99f343853ec10c63ddf3bb62bbbaf7d83e3e1f6b59924fa7491b8b066bcdf3a0684876b9457d9b250af16f3863904e9436f544e973001658246948ef00613911d62e3e9e87af85bf7f4b7c1a8b8e656fe08864b0e0dba41628fcb04b28de28270cd4484d98ebd48dc78bfe936e461e4fd470529b4f257a87d556ab9dd533905ea17a72b7621280159a91ac95917ce7a27b50799e9b73bdc77fb89ed2b51912025fae524fbd5406a0570f4cd5160a94946f382220841e9d066a54d2caa47e8bba9327b2dca04dd767ee94772dff458a1d7fc49d1ed9076d495fce964426c7e2ff59e484a1e86cf8f68d8903c5483aee3ea4beb1e3567ae5fa143bb5ea455d32777c03d6cb91aa8d810b1ad475274791623b48f867c7a1d0659adf4d0f89c7598bf2c006550d629929c7d124dcf53c3fee411f76cf35b17668db6800bd5238eeea3588e70389d502c04f9d810f6db1995a05521ba775bba753852ab28d41b99e279ff1045a22179e32ac612e5ee6c8e2ed6445150d75b4213d351b0e891f6bac58abbb541655d64a673e9d88d6d31dd505f140c29aafa2e4cc96748362cc4124bd384cf4f227edcaf3e063432bb4d481192ee485a4bc288d99cf3c84d806e9a4616b93069a151dbb4a6fa6053e2d5dd22334ab18e32fd5474affb57857ab1f7bfdedcc96ee4bce958f70dd225c8c8e9dc2ede98f036fe37215e3dc456c29924f46b72f537160bcc18c52079e8b091e2c3da424725414877e4fd41dabb5b2d2aea8a83ea2aae7922446ef71163c9c6f402db468a13318562f6701678086631600089b2ff5f63bdd39cedbff47a4ec00cb1342d4328cd14c629b5077f44aa3d7cb324e49d75a68811f8447418d6d483992dd65bf5d5eec72bfe74e3868992cd9684a36dbfe5a8a10da2c2ea55472196e00e34df0a4c7166c2e6ed1878c88380d2eac332fdf4a4934616418128f0ef032b004469cfcd5cecc03f2ef91af6b0adcfc8ded76321d8f90b55525ced0f21e243878d2be2f55bf8fa591a11b43da72bdbc739da7637af6b0eae1dcab4a09d393c2f74e666b3262089514480fb0d7769f91fc713f384c587683c92430b25b76bd26bf7eda50d790fdc22ce124d1430995d8c064560013a2ecef6ce34c4babfb3cef2d6c455d7cb254dc841485b53c047e6e9911390a899f104dbcf1052dc9c15155a5c64d134b7121d84d0991e98c011e78471618a0c4365fce6db525ec1b913539077b46b09ffc39e7b96394511735a2c4849d6c156ac0869b86b973145dd56bc8a96aacaa330c0179b5952e62a6aa0858366b35f32e9d192d7e0c5396fa39d16733ff4fd65405f187e78ecba0d0c88f5950f64af71fec6dffb0541eef9534ecc960d20383a7d2b1ceea703457ef5ecb7de43326d5852b09f6e32e29f117f747c2adb46042121ddb7c81565f0e164bf751fa434259921f2cfb76788b3a64abf7b8bfe1f6e3f574e60f5306a908b8451a1f9252847465f54c4831d2e763ffa0dcb80d6c7d3a30e8e937ee215ca3f7ca7639dcfa0333a84a47e44c6137e242cba2415b83a13d796d122530993671565c11980dd41abf730832ae2a55a81cf3aa2e5c1c6c896db54bb5aea28b61da9eed40dde1461ef19832217fd72b7ad1ed8675cf78ed3e9f2dc1f0ed9dee3afa7874d67364d960a3e61146d054b4ddd34fa7761b9a0a9ec2c47affb47df6009d3ad20504b57cd7a93fd62475cf281c38e9095a6cbf1053a8e492ab554de8bcb71b6f9c37003cd05e0db7acdefd90c5a6715e5eaecad4d8eeecf25a78c86abbb2292426f4f6dd93aa8b477e3f9593e56dfe48fbfb97973f17285f231eeb0728f64440a785a635131472862a3b3521d69b26dd7d93f15082da34f49bdde94c15c2d5bd5c4f56b5cff830e0d2cb139a6c65768b8d6d8843653695b0df5c2c5b110e59e15c9eb29abced95f0f0dc4a604c92e81482d016e725f14f70ca5e904e27eb258983efc1726d9c0fa13a2192eed70cd6dbdc6e4a27a39aa3ed0ea5945de0b6d66cf50fe1b2f8c83f3e0eaddea21c03bbc9c97b3ab1edab1407e994d9e59e69d46e1fbe32b3ab62f924496d6aa2e21b2f6f0c0c7ffc2d76a679bdded96479336e8bcddf092b25be696a2d320ec1fd1a8d873746a2ade6046b0e3161732cf36b5179b6941a00c7068b051fd9851b01b5ebfb8c5af345b4e8b07dcf65ce6134b6358ea24cf1e28e5f04955fd37309f7bd2a310a0858a9b8bae6245515ac6978c6faf25a61c6182607063eeb7e0b133e2dba1d800a04b6f7e2150c5d542272a883b06edc87b1ca9df856c1ac56d4b79676ba51991c80a97db1627bff43e2f36805d7023415239b5b8ae79bb8fc3077b2268c0142915b3eac9d85f9d82942ee92ced74d15b9694e5a4ce5ebd15b07cb3f228178ad519283ef723551633e461413735fcc62d650547160b447b513e98202911403ca3b2abb2060adaed2ebf8cb7d8109704ded539eeec6a9c7f89409533567bae35b46cc47cb537f5957cb2148bb758f63fa9c200250cc15b1de851650ff4213c795519eb8c28c818bba9ccf85b93c88f1ff42d6caeff3bed4f29e8eeb991dbf8ffa615c458a72f1afebadbc2fc1122dc7690a442907c672930252a5710fe92458a025369f0712f960b6b3e9c6c56752e01276e798618329944cf3e707e0a7cbac69741ef0e2c55879e0975dfdaedbb762d63f5193bef0388cb73464b88f8fe255962566a576907f8278a249463a87e3e85198472b36dd7d58c5ecc3ae54085964ba9dfcce85f0fcc547feb719da9904de1760ec4e708462252dae9f93a7fc88e29c78be7546c0d07ea64662106d271b98f38bae97583002e8cf65dacfd8545ce6df9715f73891b3b86c8df2ea0a0cd4b0f33df8c5100a918e06366e3d4c763f58df344e0dae65d4fe46b86bb4bad4b13285c7044a1abbb0caf8253fb2a1e9ab94fe7f3f0441956c7cb3cc02081f07a98d6e038d8204f4dd1fe1f96eba4a4e9a650e0bb82b2d72d4a3f4767e98dd6063daecba25fda5931818393bcfeb7cb163de3a05bb9b801100f8f91a541cbd15356ef95b56ad50e65bb74d53a154bad90cc16b2fe90a4da4158da2649edd7e89813db65d3e8cac7cce6b0183b58774f4a563f2554f3e0d4be9daace75f6c31057636eb6b6799c7dbb2a91b1cb64e8f95ea9dfa97096900d300626910a108987efebcf8bf141a002d5c897bd6be1437fa295d2a4ec95a35dd29da1112536c9eafa1729f48e670431e7c85147359310d8c84820186c0e838455cf5cd4d4b82b0ac43a12f2f89bf6e62ac8a122f3a6e46cfd77b6eaf8324aac86a83b6f1f1bd33ab59f982511d2dcaeb5c6511bd20386fd9eb04d43b4b59d5844d35ea03422a30d9b294012f0d08f74224b3290bc67ddbf028f82b8b73e88a261ed3b509c1882704a2622111d0ab8f3ee5f3968805ed3a7da530d056a1e120419646640a836367e8a075ccaf58f1d1bf3818e048d6adc7a2e12262ecfc469ea6dc851eeb497befc6d5b7d9daedb0c236e035cd94ee3f14fdb1e0aa0a5c4a5f1f5593417819652946f8c1dd4c2ac75a3960b897cec831987bd495e15e648aaa80b0d52bc41df89c1ae27bf571790038b335eec7d5c1a875f8135c0f9c176b6040e3c383cb8d33cb116a9ce3edd5316d9a6b8aa36ce1f27e388edf1aeda5cf803fe152d07540a8966267ca071c47db54acb13ae891c0c91190913891974856be7ea3c8f303a72a444489df42cd015b636712546b58408ea0703291c94f3cbb6dcc416a6c94c081518c23adc02fd58da43af117f8f4bb6371d398a0e160161240fcba99bf999025f5e30b14335ed8a5d5fe617840d2c5ceb2014daf8184da8564a6632c8e5fe1b30e2a7dcedd88eaa2d9b6bf16c1eed6c52d52a50fbd95756ec1c32fda5021b0ac55496cab3c01b8ad30bad6", 0x1000}, {&(0x7f0000001780)="cdd43e360863f0c656786c70c7021c35ab47ba1ab88af220ea110678ebb258e14b91ec417ed5d145b0874c228de1d62642f3adec2ffec87736de4713e9fee03a1a1cc9b6ae6433ec57d6046dfdd49a457579717cf4879f2f07a6fddcc85c298e8977a2bfbf9119d1777db97e87c34c3cfe5f78b203318177088b743a03b73c4c35b4b6c9c68b6602b539a1c05de0a2b7daf13ae41262c1520fab1e1956549aa60307502908915d445480560ebea708e9b2ef0ecbcc1bf2ff8de1fd9c62cc56e0d100fee1e8e0507fb7ae2923334c7b82fcf5a864964fde8e8dd2c888598c3855dcbc", 0xe2}, {&(0x7f00000001c0)="a959507174c9f889741f8276fecad0b4c6218d4005aca7b6c662560feb2afb793c01dd", 0x23}, {&(0x7f0000001880)="c6013aad6a4634bcdfacd51349b72738a488a74af2e273ea9c3c1b77ef6689b7e3fe0a9da25d3b58c1f858afbef672bd2c575b75c46556f15fccd90925c195fd9ca62a77f99f4363c1778cb05eb4b20f652694a262760df44512d6e504bab226adb2f42147872692853ab50393d1af30ee6c4f980ee473588b0e12ce98e368cb57fe8783c98000c62165a9783b3422d40c4a004c83a95829c9c32d4f67228feaff6c27c9da4f9969b8f40faea520a82d0748a639c9b2c380a0045db23a554b5fa16555cffe0a154488c02aad52db1b163c779fa5bb109d66daf6609f1b4afa9f09f3c521f8d62e49c7e3e4d82ede15", 0xef}, {&(0x7f0000000300)="8269dae5e8d262709626379f810167", 0xf}], 0x8}, 0x8014) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2, 0xffffffffffffffff}, &(0x7f0000000000), 0x0}, 0x20) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r5, 0x660c) syz_emit_ethernet(0xaf, &(0x7f0000001a00)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @void, {@x25={0x805, {0x0, 0x6, 0xfd, "7e6395b4189d1e6333975631f27ae6b716602d5188acdb0a9dbac30a69e15ccc596dbce7c197a527270a6be3e84a27c110c46a15d75a38c9eb1a416e73325a42c3f3432e2ad960ecb368ff8d119cb6199a0ce6bd9ac1b9520eedf853798abd274137b10a2f0ec6ab7eb236acc094ce63c948f45e58cda4281cfdad34a8313560680acaf025d84a291a4508db31f2f22d6194fb4b9a73c622dfcdd860e149"}}}}, 0x0) syz_emit_ethernet(0x32, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb080045000800000000000000907800000000000000000000000700109078220600010000e9c6d579b8ad648adef3660c4f5adde27386cec1994c466d52e65eb76e70c1612801ef56b89098832f06293c616842eb2f7037acc1439536f080c54a3eb1ad99b57e058b6db1d769fd20b1b979df89795dd6c18cb39e8e583cb0a565a8f714e9811cc1fa2240d706db2aa0afdb3ed605bcfdd9e1ac304cb97a9c776a593c82bd0123e09d2019c5bdd6011e4b164bf9b389f694b2"], 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r4, @ANYBLOB="0a0001"], 0x48}}, 0x0) 1.720503505s ago: executing program 1 (id=630): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x38, r1, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x3}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}]}, 0x38}, 0x4, 0x700000000000038}, 0x0) 1.540261021s ago: executing program 4 (id=632): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) write(r0, &(0x7f0000000000)="38000000010003", 0x7) 1.45973724s ago: executing program 1 (id=633): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000ac0)="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", 0x3d8}], 0x1}}], 0x1, 0x40) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000480)=0x1df9, 0x4) sendto$inet(r0, &(0x7f0000000580), 0x0, 0x10048095, 0x0, 0x0) 1.413040759s ago: executing program 0 (id=635): r0 = socket(0x1d, 0x2, 0x6) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) (async) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001240)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0x8}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newtfilter={0x38, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x1, 0x5}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000010}, 0x10000840) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r5, 0x2, {0x1, 0xf0, 0x4}, 0xfe}, 0x18) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000040)={&(0x7f00000005c0)={0x1c, 0x3c, 0x100, 0x70bd2b, 0x25dfdbfb, {0xe}, [@nested={0x4, 0x2d, 0x0, 0x1, [@generic]}, @nested={0x4, 0x4a}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4000) 1.405830677s ago: executing program 4 (id=636): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x80005, 0x33}, 0x2c) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(des3_ede)\x00'}, 0x58) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100001d, 0x4008031, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000080)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000580)={{0x84, @loopback, 0x4e23, 0x3, 'ovf\x00', 0x12, 0x3, 0x1821}, {@loopback, 0x4e20, 0x10000, 0x800008, 0x104522a0, 0x12d5c}}, 0x44) r5 = openat$cgroup_type(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r5, &(0x7f0000000280), 0x9) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r6, &(0x7f0000000040)={0xfd, 0x3, 0x0, @loopback}, 0x1c) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRESDEC=r1], 0x14}}, 0x0) sendfile(r5, r5, 0x0, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18000076531dec790000000000000000000000000063012f032d3400009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r8) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r7) sendmsg$NL80211_CMD_SET_COALESCE(r7, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="0c030000", @ANYRES16=r10, @ANYBLOB="00042bbd7000fedbdf2565000000e0000380d0000080ca0002009843de6e69d073919b7abaa3e600074227e164b871ecb2b7950111fb1ad941d2ac2a13cf6b185e6e8ba9007386d74053342b83aab3f57e97baa3ce4eb494ea4e958d735b88264b0057b71504e2838b8f16b407e05e195ab7afa6c0f323aecd930449fbabd267b3be19a74278a452068ef3d7d6a694817f3ccdd0ee91dbca884df2fcd6b4fce589f5010c8c68250b1d8ac3b01831a768fbd7fcf6273da476f7aafda5ec18c30d7ab609bbc91d4079b537354854e25210cb625da3e56e51c2fe561c6c7b06ceb900000c000080080003000700000004000380080001000700000008000100a5260000f0000380ac000080a60002009b874c3ee9220728b8f82a72c9fa788a8e1a2678d2df13ebf382d35d8a256e9f62ad97b88c7f40ab900d49cf779fea3406a26caef0612ba8daf5a2c135a3967486bfd49cc77c2dc74d968ec300e5be2a68867e948af3e0a963d02e9122f7a518296dc24436ed46b85f581727b238f51c7a9864cc314d27622dc589882c15905a01763079016a83d4458e4ea83f2a0f1168389dab35de490fad1fc9ec7f55b8b198f70000400000803a0001006bef5760607ef06e34e53ee4c7662a36231deffded0a26f2409196d82c6334bb95cd293462f7ba75551089061e4042017fb1ebd8f5200000080001000600000008000100f1ffffff0401038000010080fa0001003a3623291bb6406d20b188c6139b10a4047f5d29299be2864f85963c899db0ed7fa927912868a23e2c83f40e4f91b4cd0b0bbf5e473d552ef43300fca13e8be15d76720ed5d57c6c17ef8a75f14f2a8f007264cbcddb9dfd2782faf50ef0fe1d778512c0ba79ec423f976296894192e410a9443e306d99c311881365f08a1e8c947ea5721fd48d4195f5a08a841c0402eab65142bdb700c838029ebdc2cab537865140202cdf9c217b5212ca550f69adfb54f2350c33fb66139485490e10073fe392e2b2d1e81162d5088bd0ad16954c9f97939825cc0339db50164d660132e64c502098d7f91a16f77860062b9fb64210893697b7d200009b41b6eac510d40424591fbf955ff015496bbdfc6584d2188dd776cde9946cf485d3c76ff17c72809d0a2496496526acadfbc09fc9bdd035ebef299c9c2884e9c17ae2938827fe9af72c8a3a84dfd01bf9c92f03ca9936ff0bdcd8"], 0x30c}, 0x1, 0x0, 0x0, 0x24044005}, 0x30) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="000000008faf74c99c99c5fb0ca04239ed6b8c128dc5cd7a6689a8090015", @ANYRES16=r9, @ANYBLOB="01002abd7000fedbdf252d000000"], 0x14}, 0x1, 0x0, 0x0, 0x200408c5}, 0x4004800) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$key(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="020c07064cfb00002dbd7000fddbdf25"], 0x10}}, 0x20004810) socket$netlink(0x10, 0x3, 0x0) 1.224126641s ago: executing program 0 (id=638): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000300)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)={0x4c, r2, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_KEY={0x30, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x2c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x4c}, 0x1, 0x200000000000000, 0x0, 0x804}, 0x40084) 1.127900278s ago: executing program 0 (id=640): r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000412ff8), 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x28, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x7, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x7}, 0x50) bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000440)=[@in6={0xa, 0x4e21, 0x0, @loopback}]}, &(0x7f0000000280)=0x10) 1.009452188s ago: executing program 2 (id=641): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_ENABLE_SE(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010028bd7000ffdbdf25110000000800150002000000080001"], 0x24}, 0x1, 0x0, 0x0, 0x71eff8d2059dfe60}, 0xc004) 883.965869ms ago: executing program 3 (id=642): socket$inet6(0xa, 0x1, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000380)={'wlan1\x00', 0x8000}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x28, r1, 0x5, 0x3, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f00000002", 0x29}], 0x1}, 0x0) 874.207906ms ago: executing program 2 (id=643): r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10, 0x0, 0x0, 0x0, 0x34, 0x300}, 0x240048cc) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14) 723.643064ms ago: executing program 3 (id=644): r0 = socket$inet(0x2, 0x3, 0x7) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10) r1 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r1, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x24) connect$rxrpc(r1, &(0x7f0000000000)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @private}}, 0x24) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000200)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0xd, 0x200, 0xfd, 0x6, r2}, &(0x7f00000001c0)=0xfffffffffffffd98) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000100)={r3, 0xd}, &(0x7f0000000180)=0x8) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000200)='GPL\x00', 0xe}, 0x94) syz_emit_ethernet(0x7e, &(0x7f0000000300)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x48, 0x11, 0x0, @remote, @local, {[], {0x4e20, 0xe22, 0x48, 0x0, @wg=@cookie={0x3, 0x2, "88c73b21f267636d01dbe5712c1c941e1cdafbbb43f09c28", "e13808ca72381f41e5fff9620915b6f78670dfaf9a2038083179cf6b7931c9b4"}}}}}}}, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r4, @ANYRES32=r4, @ANYRES64=r4], 0x20) setsockopt$WPAN_SECURITY(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000240)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000ac0)="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", 0x16b}], 0x1}}], 0x1, 0xa83526c9b59840c3) sendto$inet(r0, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000440)=[{{&(0x7f00000002c0)=@phonet={0x23, 0x4, 0x9, 0x94}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000340)="4bf626d5efe2e4422d1257bc14b223568e5ab865002f2d9182", 0x19}, {&(0x7f0000000380)="7a022f36848d031aee83533f85e7631d9c32b0a2595b99842158e545d82ed1c0c2449c2d8f2f9c632ae154ae503a54935c108ebd6839f11d67e572b109c9cbc2587ea2a750b49f6745dd9512e6ab6f03b73a0bc26b389569793479d721ce8412dd0ce6ead0d1a136f0f45b36eb30327f3eb1cc855608b464200d2600", 0x7c}, {&(0x7f0000000c40)="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", 0x1000}], 0x3, &(0x7f00000005c0)=[{0x60, 0x2cf406cbc5c8585e, 0x6, "9470f7f435cc7b32b7d05cbac6f7b89a4cd90a0a9428708aa356cfc1b37a00c3a82f6dfaf1933b1c34008599f1b470371210122f4866b7cce56a0e282f8218f58fa0e296cdc8605a82e593f816320d8f"}, {0xb8, 0x117, 0xe, "3c484275e0e97d501bc3755f6801cd0cc1953efbeb7d01979015d3d1ac880ffcd6f4449ef5978d1af1034e477c0a3189a228db186eda27e60662ded63462f4343c4918fe7fcf5772cffee29cfd463c614b92b3b2d8b045e3f092c6b965cbe35ab3e2e54c87d1d572d59613790710b11772cb11c9f39a566e15cb37542d817c888b3de1c3b1cc99943d030a543d6ce8f3e98bd92373d7102d0d8cb873c9cedcdb9a26"}, {0x88, 0x10d, 0x4, "5c63b7c6b752975fada405b51b159897c2e6e78be0a316463cb4956fb697e7ef1a337876c707e5b015faf3e9a571004e43d6d21c46c0af5846da552984c32b4f0cd1cd8e87831f98703997f00a1b92ee089e3130d94279728bdc1760f6958b3c6615601b43ef1395f3b50bf732ee3fef14ce52a685eec290"}], 0x1a0}}], 0x1, 0x4) 668.033157ms ago: executing program 2 (id=645): ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000003c0)={"eabb11ff2b9976618466e6256698a350", 0x0, 0x0, {0x5}}) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff000000007110bd000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000005600010000000000000000000700c6c9", @ANYRES32=0x0, @ANYBLOB="200001"], 0x38}}, 0x0) 612.669112ms ago: executing program 2 (id=646): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000180)={0x1f, 0xffff, 0x3}, 0x6) write(r0, 0x0, 0x0) 569.769998ms ago: executing program 3 (id=647): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='h\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="08002600ad160000400033"], 0x68}}, 0x0) 508.063555ms ago: executing program 1 (id=648): r0 = socket$kcm(0x10, 0x400000002, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd26, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x8, 0xd}, {}, {0x3, 0xffe0}}}, 0x24}, 0x1, 0x2000000, 0x0, 0x10}, 0x84) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2, 0x0, 0x4000}, 0x0) 416.37639ms ago: executing program 2 (id=649): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c6572"], 0x38}}, 0x4004884) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xb86}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x2, 0xffff, 0x7, 0xcc, 0x3}, {0x0, 0x1, 0x7, 0x8, 0x7f, 0x9}, 0xa6, 0x7, 0x1bb6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0xd, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x9, 0x1}}]}}]}, 0x48}}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 302.988251ms ago: executing program 1 (id=650): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[@dstopts_2292={{0x28, 0x29, 0x4, {0x4, 0x1, '\x00', [@pad1, @generic={0x4, 0x9, "de4057248269679b38"}]}}}, @rthdrdstopts={{0x38, 0x29, 0x37, {0x1, 0x3, '\x00', [@padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x7}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}}}], 0x60}}], 0x1, 0xc0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f406", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 182.736208ms ago: executing program 3 (id=651): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xf0) ioctl$SIOCAX25CTLCON(r0, 0x89e8, 0x0) 124.398201ms ago: executing program 1 (id=652): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, 0x0) mmap$xdp(&(0x7f0000016000/0x4000)=nil, 0x4000, 0x700000d, 0x811, 0xffffffffffffffff, 0x180000000) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e20, 0xffffffff, @empty, 0x5}, 0x1c) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x24, 0x29, 0xa19702d202eff97b, 0x4001, 0xfff7fdfc, {0x0, 0x0, 0x0, r2, {0xb}, {0xffff}, {0x4, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) (fail_nth: 6) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 123.3533ms ago: executing program 0 (id=653): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPATH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010027bd70000000000067db000008000334", @ANYRES32=0x0, @ANYBLOB="0c00990001"], 0x34}}, 0x8080) ioctl$SIOCAX25ADDUID(r0, 0x890c, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x18, 0x3d, 0x107, 0x0, 0x0, {0x3, 0x7c}, [@nested={0x4, 0x37}]}, 0x18}}, 0xc000) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r3) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) 79.91717ms ago: executing program 2 (id=654): socket$inet6(0xa, 0x1, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000380)={'wlan1\x00', 0x8000}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x28, r1, 0x5, 0x3, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f00000002", 0x29}], 0x1}, 0x0) 0s ago: executing program 3 (id=655): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x0) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r8, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r8, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r5) vmsplice(r7, &(0x7f00000019c0)=[{&(0x7f0000001a00)="ce", 0x1}], 0x1, 0x8) splice(r6, 0x0, r5, 0x0, 0x8000, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x2c, r2, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_SETUP={0x4}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4010}, 0x8000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.103' (ED25519) to the list of known hosts. [ 69.310710][ T5853] cgroup: Unknown subsys name 'net' [ 69.482061][ T5853] cgroup: Unknown subsys name 'cpuset' [ 69.490541][ T5853] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 70.853889][ T5853] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.462577][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.472109][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 75.102304][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 75.110580][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 75.118518][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 75.128681][ T5864] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 75.137862][ T5869] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 75.146566][ T5869] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 75.178909][ T5869] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 75.187482][ T5869] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 75.199404][ T5869] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 75.225500][ T5864] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 75.238088][ T5875] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 75.259235][ T5875] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 75.269394][ T5864] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 75.280134][ T5864] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 75.289618][ T5864] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 75.330840][ T5185] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 75.345149][ T5185] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 75.349919][ T5875] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 75.361180][ T5185] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 75.361567][ T5875] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 75.377555][ T5185] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 75.378921][ T5875] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 75.392510][ T5875] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 75.410897][ T5872] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 75.419162][ T5872] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 75.930663][ T5873] chnl_net:caif_netlink_parms(): no params data found [ 76.052683][ T5867] chnl_net:caif_netlink_parms(): no params data found [ 76.161947][ T5879] chnl_net:caif_netlink_parms(): no params data found [ 76.218104][ T5873] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.225952][ T5873] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.233498][ T5873] bridge_slave_0: entered allmulticast mode [ 76.241358][ T5873] bridge_slave_0: entered promiscuous mode [ 76.282841][ T5863] chnl_net:caif_netlink_parms(): no params data found [ 76.296722][ T5873] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.304862][ T5873] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.312320][ T5873] bridge_slave_1: entered allmulticast mode [ 76.320882][ T5873] bridge_slave_1: entered promiscuous mode [ 76.424447][ T5878] chnl_net:caif_netlink_parms(): no params data found [ 76.448323][ T5873] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.503590][ T5873] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.525091][ T5867] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.532333][ T5867] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.539894][ T5867] bridge_slave_0: entered allmulticast mode [ 76.546814][ T5867] bridge_slave_0: entered promiscuous mode [ 76.617770][ T5867] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.625877][ T5867] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.633459][ T5867] bridge_slave_1: entered allmulticast mode [ 76.641360][ T5867] bridge_slave_1: entered promiscuous mode [ 76.648199][ T5863] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.655852][ T5863] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.663278][ T5863] bridge_slave_0: entered allmulticast mode [ 76.670886][ T5863] bridge_slave_0: entered promiscuous mode [ 76.722359][ T5863] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.729616][ T5863] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.736761][ T5863] bridge_slave_1: entered allmulticast mode [ 76.745309][ T5863] bridge_slave_1: entered promiscuous mode [ 76.763836][ T5873] team0: Port device team_slave_0 added [ 76.770261][ T5879] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.777382][ T5879] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.785227][ T5879] bridge_slave_0: entered allmulticast mode [ 76.792209][ T5879] bridge_slave_0: entered promiscuous mode [ 76.831731][ T5873] team0: Port device team_slave_1 added [ 76.841081][ T5863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.850497][ T5879] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.857622][ T5879] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.865783][ T5879] bridge_slave_1: entered allmulticast mode [ 76.872897][ T5879] bridge_slave_1: entered promiscuous mode [ 76.898858][ T5867] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.925731][ T5863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.971563][ T5867] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.021307][ T5879] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.055275][ T5873] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.063062][ T5873] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.089030][ T5873] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.102095][ T5863] team0: Port device team_slave_0 added [ 77.111517][ T5879] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.121507][ T5878] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.129185][ T5878] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.136395][ T5878] bridge_slave_0: entered allmulticast mode [ 77.143456][ T5878] bridge_slave_0: entered promiscuous mode [ 77.153197][ T5867] team0: Port device team_slave_0 added [ 77.162323][ T5867] team0: Port device team_slave_1 added [ 77.169006][ T5873] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.175942][ T5873] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.201922][ T5873] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.214214][ T5863] team0: Port device team_slave_1 added [ 77.232704][ T5878] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.239896][ T5878] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.247018][ T5878] bridge_slave_1: entered allmulticast mode [ 77.255306][ T5878] bridge_slave_1: entered promiscuous mode [ 77.299391][ T5185] Bluetooth: hci1: command tx timeout [ 77.299391][ T5864] Bluetooth: hci0: command tx timeout [ 77.366471][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.374170][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.382203][ T5185] Bluetooth: hci2: command tx timeout [ 77.400885][ T5867] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.417435][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.424685][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.450914][ T5863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.463907][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.471095][ T5864] Bluetooth: hci4: command tx timeout [ 77.473379][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.476876][ T5185] Bluetooth: hci3: command tx timeout [ 77.508271][ T5863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.520969][ T5879] team0: Port device team_slave_0 added [ 77.529722][ T5879] team0: Port device team_slave_1 added [ 77.537669][ T5878] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.547789][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.555030][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.581733][ T5867] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.637176][ T5878] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.697585][ T5873] hsr_slave_0: entered promiscuous mode [ 77.704350][ T5873] hsr_slave_1: entered promiscuous mode [ 77.737805][ T5878] team0: Port device team_slave_0 added [ 77.750409][ T5863] hsr_slave_0: entered promiscuous mode [ 77.756624][ T5863] hsr_slave_1: entered promiscuous mode [ 77.763220][ T5863] debugfs: 'hsr0' already exists in 'hsr' [ 77.769094][ T5863] Cannot create hsr debugfs directory [ 77.792927][ T5879] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.800038][ T5879] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.826179][ T5879] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.840239][ T5878] team0: Port device team_slave_1 added [ 77.883482][ T5879] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.890969][ T5879] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.917285][ T5879] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.011325][ T5867] hsr_slave_0: entered promiscuous mode [ 78.017501][ T5867] hsr_slave_1: entered promiscuous mode [ 78.024076][ T5867] debugfs: 'hsr0' already exists in 'hsr' [ 78.029853][ T5867] Cannot create hsr debugfs directory [ 78.072451][ T5878] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.079649][ T5878] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.106722][ T5878] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.120826][ T5878] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.127771][ T5878] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.153742][ T5878] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.206628][ T5879] hsr_slave_0: entered promiscuous mode [ 78.213415][ T5879] hsr_slave_1: entered promiscuous mode [ 78.220466][ T5879] debugfs: 'hsr0' already exists in 'hsr' [ 78.226198][ T5879] Cannot create hsr debugfs directory [ 78.432691][ T5878] hsr_slave_0: entered promiscuous mode [ 78.439693][ T5878] hsr_slave_1: entered promiscuous mode [ 78.445705][ T5878] debugfs: 'hsr0' already exists in 'hsr' [ 78.451510][ T5878] Cannot create hsr debugfs directory [ 78.796474][ T5863] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 78.808324][ T5863] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 78.834568][ T5863] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 78.860463][ T5863] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 78.920259][ T5873] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 78.944455][ T5873] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 78.960151][ T5873] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 78.973768][ T5873] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 79.056420][ T5867] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 79.085365][ T5867] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 79.098998][ T5867] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 79.120334][ T5867] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 79.247723][ T5879] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 79.270769][ T5863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.280760][ T5879] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 79.331236][ T5879] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 79.342475][ T5879] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 79.379855][ T5864] Bluetooth: hci0: command tx timeout [ 79.381020][ T5863] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.385468][ T5185] Bluetooth: hci1: command tx timeout [ 79.416777][ T5878] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 79.429618][ T5878] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 79.445185][ T5878] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 79.458516][ T4801] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.465766][ T4801] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.474711][ T5185] Bluetooth: hci2: command tx timeout [ 79.501292][ T5878] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 79.529976][ T4801] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.537152][ T4801] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.544807][ T5185] Bluetooth: hci3: command tx timeout [ 79.545722][ T5864] Bluetooth: hci4: command tx timeout [ 79.586410][ T5873] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.631689][ T5873] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.676287][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.683413][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.715340][ T4801] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.722530][ T4801] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.742747][ T5867] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.835101][ T5867] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.876201][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.883455][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.906213][ T5873] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 79.943338][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.950566][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.063289][ T5879] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.096405][ T5878] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.195725][ T5878] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.228154][ T5879] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.255668][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.262884][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.282150][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.289363][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.311455][ T5863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.350530][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.357657][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.370550][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.377668][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.456239][ T5873] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.526457][ T5878] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.603932][ T5863] veth0_vlan: entered promiscuous mode [ 80.656397][ T5863] veth1_vlan: entered promiscuous mode [ 80.775826][ T5873] veth0_vlan: entered promiscuous mode [ 80.827977][ T5863] veth0_macvtap: entered promiscuous mode [ 80.862664][ T5863] veth1_macvtap: entered promiscuous mode [ 80.886045][ T5867] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.897884][ T5873] veth1_vlan: entered promiscuous mode [ 80.996535][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.055229][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.092274][ T5873] veth0_macvtap: entered promiscuous mode [ 81.111305][ T5873] veth1_macvtap: entered promiscuous mode [ 81.156809][ T5878] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.173051][ T5879] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.181570][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.211941][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.227958][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.256129][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.305089][ T5873] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.329020][ T5873] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.384847][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.415271][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.425073][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.429873][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.442498][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.458766][ T5864] Bluetooth: hci1: command tx timeout [ 81.459505][ T5185] Bluetooth: hci0: command tx timeout [ 81.473982][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.535995][ T5879] veth0_vlan: entered promiscuous mode [ 81.543630][ T5185] Bluetooth: hci2: command tx timeout [ 81.562070][ T5867] veth0_vlan: entered promiscuous mode [ 81.570906][ T5879] veth1_vlan: entered promiscuous mode [ 81.618770][ T5185] Bluetooth: hci4: command tx timeout [ 81.618788][ T5864] Bluetooth: hci3: command tx timeout [ 81.642688][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.646746][ T5878] veth0_vlan: entered promiscuous mode [ 81.657806][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.693762][ T5867] veth1_vlan: entered promiscuous mode [ 81.754875][ T5878] veth1_vlan: entered promiscuous mode [ 81.797640][ T4551] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.805674][ T5863] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 81.824911][ T5879] veth0_macvtap: entered promiscuous mode [ 81.835638][ T4551] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.847969][ T5879] veth1_macvtap: entered promiscuous mode [ 81.925500][ T5878] veth0_macvtap: entered promiscuous mode [ 81.957256][ T5867] veth0_macvtap: entered promiscuous mode [ 81.975599][ T5879] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.988894][ T5984] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 81.995765][ T5878] veth1_macvtap: entered promiscuous mode [ 82.024121][ T175] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.028103][ T5879] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.053095][ T175] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.081986][ T5867] veth1_macvtap: entered promiscuous mode [ 82.112694][ T5878] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.143982][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.164285][ T5878] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.188293][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.205912][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.231097][ T5986] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6'. [ 82.245837][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.295930][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.313688][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.363905][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.383997][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.446234][ T5994] FAULT_INJECTION: forcing a failure. [ 82.446234][ T5994] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 82.451051][ T5991] tipc: Started in network mode [ 82.460345][ T5994] CPU: 1 UID: 0 PID: 5994 Comm: syz.0.7 Not tainted syzkaller #0 PREEMPT(full) [ 82.460369][ T5994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 82.460387][ T5994] Call Trace: [ 82.460395][ T5994] [ 82.460403][ T5994] dump_stack_lvl+0x189/0x250 [ 82.460434][ T5994] ? __pfx____ratelimit+0x10/0x10 [ 82.460453][ T5994] ? __pfx_dump_stack_lvl+0x10/0x10 [ 82.460475][ T5994] ? __pfx__printk+0x10/0x10 [ 82.460512][ T5994] should_fail_ex+0x414/0x560 [ 82.460544][ T5994] _copy_to_user+0x31/0xb0 [ 82.460570][ T5994] simple_read_from_buffer+0xe1/0x170 [ 82.460602][ T5994] proc_fail_nth_read+0x1b3/0x220 [ 82.460627][ T5994] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 82.460650][ T5994] ? rw_verify_area+0x2a6/0x4d0 [ 82.460673][ T5994] ? __lock_acquire+0xab9/0xd20 [ 82.460697][ T5994] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 82.460719][ T5994] vfs_read+0x200/0xa30 [ 82.460742][ T5994] ? fdget_pos+0x247/0x320 [ 82.460762][ T5994] ? __pfx___mutex_lock+0x10/0x10 [ 82.460783][ T5994] ? __pfx_vfs_read+0x10/0x10 [ 82.460807][ T5994] ? __fget_files+0x2a/0x420 [ 82.460828][ T5994] ? __fget_files+0x3a0/0x420 [ 82.460843][ T5994] ? __fget_files+0x2a/0x420 [ 82.460867][ T5994] ksys_read+0x145/0x250 [ 82.460894][ T5994] ? __pfx_ksys_read+0x10/0x10 [ 82.460915][ T5994] ? rcu_is_watching+0x15/0xb0 [ 82.460939][ T5994] ? do_syscall_64+0xbe/0x3b0 [ 82.460962][ T5994] do_syscall_64+0xfa/0x3b0 [ 82.460981][ T5994] ? lockdep_hardirqs_on+0x9c/0x150 [ 82.461000][ T5994] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.461018][ T5994] ? clear_bhb_loop+0x60/0xb0 [ 82.461040][ T5994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.461057][ T5994] RIP: 0033:0x7f37d818d5bc [ 82.461077][ T5994] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 82.461092][ T5994] RSP: 002b:00007f37d63f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 82.461112][ T5994] RAX: ffffffffffffffda RBX: 00007f37d83d5fa0 RCX: 00007f37d818d5bc [ 82.461126][ T5994] RDX: 000000000000000f RSI: 00007f37d63f60a0 RDI: 0000000000000005 [ 82.461137][ T5994] RBP: 00007f37d63f6090 R08: 0000000000000000 R09: 0000000000000000 [ 82.461148][ T5994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 82.461159][ T5994] R13: 00007f37d83d6038 R14: 00007f37d83d5fa0 R15: 00007ffcfaf249a8 [ 82.461189][ T5994] [ 82.514161][ T5996] netlink: 348 bytes leftover after parsing attributes in process `syz.0.8'. [ 82.633197][ T5991] tipc: Node identity 8a0a7989364e, cluster identity 4711 [ 82.728127][ T5991] tipc: Enabled bearer , priority 0 [ 82.739674][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.752880][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.780405][ T5998] IPVS: length: 4096 != 8 [ 82.820323][ T5991] tipc: Disabling bearer [ 82.853620][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.888648][ T4801] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.897404][ T4801] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.953053][ T4801] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.976090][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.001097][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.030956][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.040093][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.109767][ T6004] netlink: 36 bytes leftover after parsing attributes in process `syz.1.10'. [ 83.119051][ T6004] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10'. [ 83.155350][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.181093][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.185119][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.205990][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.347899][ T6010] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13'. [ 83.349661][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.381307][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.389321][ T6010] netlink: 24 bytes leftover after parsing attributes in process `syz.1.13'. [ 83.426268][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.463744][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.538815][ T5185] Bluetooth: hci0: command tx timeout [ 83.539389][ T5864] Bluetooth: hci1: command tx timeout [ 83.619176][ T5864] Bluetooth: hci2: command tx timeout [ 83.699561][ T5864] Bluetooth: hci4: command tx timeout [ 83.699593][ T5185] Bluetooth: hci3: command tx timeout [ 84.123071][ T6037] FAULT_INJECTION: forcing a failure. [ 84.123071][ T6037] name failslab, interval 1, probability 0, space 0, times 1 [ 84.160544][ T6037] CPU: 0 UID: 0 PID: 6037 Comm: syz.1.16 Not tainted syzkaller #0 PREEMPT(full) [ 84.160571][ T6037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 84.160583][ T6037] Call Trace: [ 84.160591][ T6037] [ 84.160599][ T6037] dump_stack_lvl+0x189/0x250 [ 84.160626][ T6037] ? __pfx____ratelimit+0x10/0x10 [ 84.160647][ T6037] ? __pfx_dump_stack_lvl+0x10/0x10 [ 84.160669][ T6037] ? __pfx__printk+0x10/0x10 [ 84.160701][ T6037] ? __pfx___might_resched+0x10/0x10 [ 84.160718][ T6037] ? fs_reclaim_acquire+0x7d/0x100 [ 84.160741][ T6037] should_fail_ex+0x414/0x560 [ 84.160774][ T6037] should_failslab+0xa8/0x100 [ 84.160804][ T6037] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 84.160830][ T6037] ? __alloc_skb+0x112/0x2d0 [ 84.160855][ T6037] __alloc_skb+0x112/0x2d0 [ 84.160880][ T6037] netlink_ack+0x146/0xa50 [ 84.160898][ T6037] ? __pfx_genl_rcv_msg+0x10/0x10 [ 84.160922][ T6037] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 84.160947][ T6037] ? __pfx_nl80211_post_doit+0x10/0x10 [ 84.160973][ T6037] ? __asan_memcpy+0x40/0x70 [ 84.160994][ T6037] ? __pfx_ref_tracker_free+0x10/0x10 [ 84.161021][ T6037] netlink_rcv_skb+0x28c/0x470 [ 84.161039][ T6037] ? __lock_acquire+0xab9/0xd20 [ 84.161067][ T6037] ? __pfx_genl_rcv_msg+0x10/0x10 [ 84.161103][ T6037] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 84.161143][ T6037] ? down_read+0x1ad/0x2e0 [ 84.161169][ T6037] genl_rcv+0x28/0x40 [ 84.161192][ T6037] netlink_unicast+0x82f/0x9e0 [ 84.161229][ T6037] ? __pfx_netlink_unicast+0x10/0x10 [ 84.161259][ T6037] ? netlink_sendmsg+0x642/0xb30 [ 84.161277][ T6037] ? skb_put+0x11b/0x210 [ 84.161301][ T6037] netlink_sendmsg+0x805/0xb30 [ 84.161331][ T6037] ? __pfx_netlink_sendmsg+0x10/0x10 [ 84.161354][ T6037] ? aa_sock_msg_perm+0xf1/0x1d0 [ 84.161374][ T6037] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 84.161394][ T6037] ? __pfx_netlink_sendmsg+0x10/0x10 [ 84.161416][ T6037] __sock_sendmsg+0x21c/0x270 [ 84.161447][ T6037] ____sys_sendmsg+0x505/0x830 [ 84.161477][ T6037] ? __pfx_____sys_sendmsg+0x10/0x10 [ 84.161510][ T6037] ? import_iovec+0x74/0xa0 [ 84.161538][ T6037] ___sys_sendmsg+0x21f/0x2a0 [ 84.161565][ T6037] ? __pfx____sys_sendmsg+0x10/0x10 [ 84.161629][ T6037] ? __fget_files+0x2a/0x420 [ 84.161645][ T6037] ? __fget_files+0x3a0/0x420 [ 84.161672][ T6037] __x64_sys_sendmsg+0x19b/0x260 [ 84.161699][ T6037] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 84.161733][ T6037] ? __pfx_ksys_write+0x10/0x10 [ 84.161756][ T6037] ? rcu_is_watching+0x15/0xb0 [ 84.161780][ T6037] ? do_syscall_64+0xbe/0x3b0 [ 84.161805][ T6037] do_syscall_64+0xfa/0x3b0 [ 84.161824][ T6037] ? lockdep_hardirqs_on+0x9c/0x150 [ 84.161843][ T6037] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.161861][ T6037] ? clear_bhb_loop+0x60/0xb0 [ 84.161882][ T6037] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.161900][ T6037] RIP: 0033:0x7f763b98eba9 [ 84.161915][ T6037] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 84.161931][ T6037] RSP: 002b:00007f763c7c4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 84.161950][ T6037] RAX: ffffffffffffffda RBX: 00007f763bbd5fa0 RCX: 00007f763b98eba9 [ 84.161964][ T6037] RDX: 0000000000048000 RSI: 0000200000000080 RDI: 0000000000000003 [ 84.161977][ T6037] RBP: 00007f763c7c4090 R08: 0000000000000000 R09: 0000000000000000 [ 84.161988][ T6037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 84.161999][ T6037] R13: 00007f763bbd6038 R14: 00007f763bbd5fa0 R15: 00007fffdb8691f8 [ 84.162030][ T6037] [ 85.290156][ T6069] syz.0.29 uses obsolete (PF_INET,SOCK_PACKET) [ 85.296524][ T6060] IPVS: Scheduler module ip_vs_sip not found [ 85.307199][ T6069] FAULT_INJECTION: forcing a failure. [ 85.307199][ T6069] name failslab, interval 1, probability 0, space 0, times 0 [ 85.321685][ T6069] CPU: 0 UID: 0 PID: 6069 Comm: syz.0.29 Not tainted syzkaller #0 PREEMPT(full) [ 85.321706][ T6069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 85.321714][ T6069] Call Trace: [ 85.321720][ T6069] [ 85.321726][ T6069] dump_stack_lvl+0x189/0x250 [ 85.321748][ T6069] ? __pfx____ratelimit+0x10/0x10 [ 85.321764][ T6069] ? __pfx_dump_stack_lvl+0x10/0x10 [ 85.321781][ T6069] ? __pfx__printk+0x10/0x10 [ 85.321804][ T6069] ? __pfx___might_resched+0x10/0x10 [ 85.321819][ T6069] ? fs_reclaim_acquire+0x7d/0x100 [ 85.321837][ T6069] should_fail_ex+0x414/0x560 [ 85.321863][ T6069] should_failslab+0xa8/0x100 [ 85.321885][ T6069] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 85.321906][ T6069] ? __alloc_skb+0x112/0x2d0 [ 85.321926][ T6069] __alloc_skb+0x112/0x2d0 [ 85.321946][ T6069] alloc_skb_with_frags+0xca/0x890 [ 85.321985][ T6069] sock_alloc_send_pskb+0x857/0x990 [ 85.322025][ T6069] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 85.322063][ T6069] ? iov_iter_advance+0x8b/0x1c0 [ 85.322088][ T6069] tun_get_user+0xa43/0x3e20 [ 85.322129][ T6069] ? aa_file_perm+0x44d/0x1550 [ 85.322150][ T6069] ? __pfx_tun_get_user+0x10/0x10 [ 85.322169][ T6069] ? _parse_integer_limit+0x1ae/0x1f0 [ 85.322195][ T6069] ? __lock_acquire+0xab9/0xd20 [ 85.322227][ T6069] ? ref_tracker_alloc+0x318/0x460 [ 85.322243][ T6069] ? __lock_acquire+0xab9/0xd20 [ 85.322270][ T6069] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 85.322288][ T6069] ? tun_get+0x1c/0x2f0 [ 85.322307][ T6069] ? tun_get+0x1c/0x2f0 [ 85.322322][ T6069] ? tun_get+0x1c/0x2f0 [ 85.322340][ T6069] tun_chr_write_iter+0x113/0x200 [ 85.322364][ T6069] vfs_write+0x5c6/0xb30 [ 85.322391][ T6069] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 85.322410][ T6069] ? __pfx_vfs_write+0x10/0x10 [ 85.322443][ T6069] ? __fget_files+0x2a/0x420 [ 85.322469][ T6069] ksys_write+0x145/0x250 [ 85.322496][ T6069] ? __pfx_ksys_write+0x10/0x10 [ 85.322514][ T6069] ? rcu_is_watching+0x15/0xb0 [ 85.322533][ T6069] ? do_syscall_64+0xbe/0x3b0 [ 85.322557][ T6069] do_syscall_64+0xfa/0x3b0 [ 85.322576][ T6069] ? lockdep_hardirqs_on+0x9c/0x150 [ 85.322594][ T6069] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.322613][ T6069] ? clear_bhb_loop+0x60/0xb0 [ 85.322636][ T6069] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.322654][ T6069] RIP: 0033:0x7f37d818eba9 [ 85.322671][ T6069] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.322686][ T6069] RSP: 002b:00007f37d63f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 85.322706][ T6069] RAX: ffffffffffffffda RBX: 00007f37d83d5fa0 RCX: 00007f37d818eba9 [ 85.322720][ T6069] RDX: 000000000000fdef RSI: 0000200000000040 RDI: 0000000000000005 [ 85.322732][ T6069] RBP: 00007f37d63f6090 R08: 0000000000000000 R09: 0000000000000000 [ 85.322742][ T6069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 85.322753][ T6069] R13: 00007f37d83d6038 R14: 00007f37d83d5fa0 R15: 00007ffcfaf249a8 [ 85.322784][ T6069] [ 85.777553][ T6076] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 86.041359][ T6088] netlink: 'syz.0.35': attribute type 33 has an invalid length. [ 86.405498][ T6096] netlink: 'syz.4.37': attribute type 1 has an invalid length. [ 86.561614][ T6104] ieee802154 phy0 wpan0: encryption failed: -22 [ 86.692948][ T6109] netlink: 40 bytes leftover after parsing attributes in process `syz.3.41'. [ 86.795587][ T6114] netlink: 'syz.2.45': attribute type 1 has an invalid length. [ 86.845379][ T1210] cfg80211: failed to load regulatory.db [ 87.056945][ T6127] netlink: 4 bytes leftover after parsing attributes in process `syz.1.49'. [ 87.103291][ T6127] Bluetooth: MGMT ver 1.23 [ 87.126288][ T6133] netlink: 36 bytes leftover after parsing attributes in process `syz.0.52'. [ 87.152062][ T6136] netlink: 4 bytes leftover after parsing attributes in process `syz.2.53'. [ 87.281957][ T6141] __nla_validate_parse: 2 callbacks suppressed [ 87.281972][ T6141] netlink: 44 bytes leftover after parsing attributes in process `syz.3.55'. [ 87.387889][ T6145] netlink: 64 bytes leftover after parsing attributes in process `syz.0.57'. [ 87.456151][ T6145] netlink: 40 bytes leftover after parsing attributes in process `syz.0.57'. [ 87.488096][ T6150] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 87.501584][ T6151] Zero length message leads to an empty skb [ 87.552523][ T6150] netlink: 'syz.2.59': attribute type 16 has an invalid length. [ 87.576250][ T6150] netlink: 20 bytes leftover after parsing attributes in process `syz.2.59'. [ 88.234585][ T6176] netlink: 'syz.0.71': attribute type 1 has an invalid length. [ 88.383388][ T6178] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.391628][ T6178] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.678394][ T6178] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 88.696126][ T6178] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 88.836915][ T6176] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 88.842575][ T59] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.908628][ T59] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.917553][ T59] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.966596][ T59] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.004520][ T6209] FAULT_INJECTION: forcing a failure. [ 89.004520][ T6209] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 89.021654][ T6209] CPU: 0 UID: 0 PID: 6209 Comm: syz.4.80 Not tainted syzkaller #0 PREEMPT(full) [ 89.021679][ T6209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 89.021691][ T6209] Call Trace: [ 89.021699][ T6209] [ 89.021707][ T6209] dump_stack_lvl+0x189/0x250 [ 89.021735][ T6209] ? __pfx____ratelimit+0x10/0x10 [ 89.021756][ T6209] ? __pfx_dump_stack_lvl+0x10/0x10 [ 89.021779][ T6209] ? __pfx__printk+0x10/0x10 [ 89.021812][ T6209] ? __might_fault+0xb0/0x130 [ 89.021850][ T6209] should_fail_ex+0x414/0x560 [ 89.021884][ T6209] _copy_from_user+0x2d/0xb0 [ 89.021911][ T6209] csum_and_copy_from_iter_full+0x1e1/0x1ed0 [ 89.021958][ T6209] ? __pfx_csum_and_copy_from_iter_full+0x10/0x10 [ 89.021997][ T6209] ? trace_kmalloc+0x1f/0xd0 [ 89.022024][ T6209] ip_generic_getfrag+0x12f/0x2b0 [ 89.022055][ T6209] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 89.022085][ T6209] ? skb_put+0x11b/0x210 [ 89.022111][ T6209] __ip_append_data+0x3260/0x40c0 [ 89.022159][ T6209] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 89.022208][ T6209] ? __pfx___ip_append_data+0x10/0x10 [ 89.022240][ T6209] ? __local_bh_enable_ip+0x12d/0x1c0 [ 89.022259][ T6209] ? lockdep_hardirqs_on+0x9c/0x150 [ 89.022281][ T6209] ip_append_data+0x10e/0x190 [ 89.022311][ T6209] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 89.022340][ T6209] udp_sendmsg+0x541/0x2170 [ 89.022373][ T6209] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 89.022410][ T6209] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 89.022439][ T6209] ? __pfx_udp_sendmsg+0x10/0x10 [ 89.022472][ T6209] ? __lock_acquire+0xab9/0xd20 [ 89.022525][ T6209] ? __pfx_aa_sk_perm+0x10/0x10 [ 89.022547][ T6209] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 89.022569][ T6209] ? __fget_files+0x2a/0x420 [ 89.022584][ T6209] ? sock_rps_record_flow+0x19/0x410 [ 89.022615][ T6209] ? inet_sendmsg+0x29c/0x370 [ 89.022640][ T6209] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 89.022666][ T6209] __sock_sendmsg+0x19c/0x270 [ 89.022699][ T6209] __sys_sendto+0x3bd/0x520 [ 89.022724][ T6209] ? __pfx___sys_sendto+0x10/0x10 [ 89.022743][ T6209] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 89.022779][ T6209] ? __fget_files+0x3a0/0x420 [ 89.022813][ T6209] ? ksys_write+0x22a/0x250 [ 89.022841][ T6209] ? __pfx_ksys_write+0x10/0x10 [ 89.022863][ T6209] ? rcu_is_watching+0x15/0xb0 [ 89.022889][ T6209] __x64_sys_sendto+0xde/0x100 [ 89.022915][ T6209] do_syscall_64+0xfa/0x3b0 [ 89.022936][ T6209] ? lockdep_hardirqs_on+0x9c/0x150 [ 89.022955][ T6209] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.022975][ T6209] ? clear_bhb_loop+0x60/0xb0 [ 89.022999][ T6209] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.023018][ T6209] RIP: 0033:0x7f847d58eba9 [ 89.023035][ T6209] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 89.023051][ T6209] RSP: 002b:00007f847e432038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 89.023072][ T6209] RAX: ffffffffffffffda RBX: 00007f847d7d5fa0 RCX: 00007f847d58eba9 [ 89.023086][ T6209] RDX: 0000000000006200 RSI: 0000200000000c80 RDI: 0000000000000004 [ 89.023098][ T6209] RBP: 00007f847e432090 R08: 0000000000000000 R09: 0000000000000000 [ 89.023110][ T6209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 89.023122][ T6209] R13: 00007f847d7d6038 R14: 00007f847d7d5fa0 R15: 00007fff9c8444a8 [ 89.023153][ T6209] [ 89.522132][ T6211] netlink: 60 bytes leftover after parsing attributes in process `syz.3.81'. [ 89.552562][ T6218] netlink: 36 bytes leftover after parsing attributes in process `syz.2.84'. [ 89.954823][ T6241] FAULT_INJECTION: forcing a failure. [ 89.954823][ T6241] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 89.984366][ T6241] CPU: 1 UID: 0 PID: 6241 Comm: syz.2.89 Not tainted syzkaller #0 PREEMPT(full) [ 89.984393][ T6241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 89.984404][ T6241] Call Trace: [ 89.984412][ T6241] [ 89.984420][ T6241] dump_stack_lvl+0x189/0x250 [ 89.984447][ T6241] ? __pfx____ratelimit+0x10/0x10 [ 89.984468][ T6241] ? __pfx_dump_stack_lvl+0x10/0x10 [ 89.984491][ T6241] ? __pfx__printk+0x10/0x10 [ 89.984529][ T6241] should_fail_ex+0x414/0x560 [ 89.984570][ T6241] _copy_to_user+0x31/0xb0 [ 89.984599][ T6241] simple_read_from_buffer+0xe1/0x170 [ 89.984631][ T6241] proc_fail_nth_read+0x1b3/0x220 [ 89.984657][ T6241] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 89.984683][ T6241] ? rw_verify_area+0x2a6/0x4d0 [ 89.984705][ T6241] ? __lock_acquire+0xab9/0xd20 [ 89.984731][ T6241] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 89.984753][ T6241] vfs_read+0x200/0xa30 [ 89.984777][ T6241] ? fdget_pos+0x247/0x320 [ 89.984798][ T6241] ? __pfx___mutex_lock+0x10/0x10 [ 89.984820][ T6241] ? __pfx_vfs_read+0x10/0x10 [ 89.984845][ T6241] ? __fget_files+0x2a/0x420 [ 89.984866][ T6241] ? __fget_files+0x3a0/0x420 [ 89.984881][ T6241] ? __fget_files+0x2a/0x420 [ 89.984907][ T6241] ksys_read+0x145/0x250 [ 89.984935][ T6241] ? __pfx_ksys_read+0x10/0x10 [ 89.984957][ T6241] ? rcu_is_watching+0x15/0xb0 [ 89.984982][ T6241] ? do_syscall_64+0xbe/0x3b0 [ 89.985008][ T6241] do_syscall_64+0xfa/0x3b0 [ 89.985028][ T6241] ? lockdep_hardirqs_on+0x9c/0x150 [ 89.985046][ T6241] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.985065][ T6241] ? clear_bhb_loop+0x60/0xb0 [ 89.985088][ T6241] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.985105][ T6241] RIP: 0033:0x7fcd08b8d5bc [ 89.985122][ T6241] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 89.985138][ T6241] RSP: 002b:00007fcd099cf030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 89.985159][ T6241] RAX: ffffffffffffffda RBX: 00007fcd08dd5fa0 RCX: 00007fcd08b8d5bc [ 89.985173][ T6241] RDX: 000000000000000f RSI: 00007fcd099cf0a0 RDI: 0000000000000004 [ 89.985185][ T6241] RBP: 00007fcd099cf090 R08: 0000000000000000 R09: 0000000000000000 [ 89.985197][ T6241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 89.985208][ T6241] R13: 00007fcd08dd6038 R14: 00007fcd08dd5fa0 R15: 00007ffedc7f4868 [ 89.985238][ T6241] [ 90.373038][ T6253] netlink: 36 bytes leftover after parsing attributes in process `syz.2.93'. [ 90.388189][ T6253] netlink: 24 bytes leftover after parsing attributes in process `syz.2.93'. [ 90.489794][ T6256] netlink: 224 bytes leftover after parsing attributes in process `syz.1.94'. [ 90.535010][ T6259] netlink: 312 bytes leftover after parsing attributes in process `syz.2.97'. [ 90.708089][ T6266] ve: renamed from ipvlan1 [ 90.770686][ T6270] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input5 [ 90.974583][ T6280] FAULT_INJECTION: forcing a failure. [ 90.974583][ T6280] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 91.019476][ T6285] FAULT_INJECTION: forcing a failure. [ 91.019476][ T6285] name failslab, interval 1, probability 0, space 0, times 0 [ 91.049074][ T6280] CPU: 0 UID: 0 PID: 6280 Comm: syz.3.101 Not tainted syzkaller #0 PREEMPT(full) [ 91.049101][ T6280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 91.049112][ T6280] Call Trace: [ 91.049119][ T6280] [ 91.049127][ T6280] dump_stack_lvl+0x189/0x250 [ 91.049155][ T6280] ? __pfx____ratelimit+0x10/0x10 [ 91.049175][ T6280] ? __pfx_dump_stack_lvl+0x10/0x10 [ 91.049196][ T6280] ? __pfx__printk+0x10/0x10 [ 91.049233][ T6280] should_fail_ex+0x414/0x560 [ 91.049266][ T6280] _copy_to_user+0x31/0xb0 [ 91.049292][ T6280] simple_read_from_buffer+0xe1/0x170 [ 91.049324][ T6280] proc_fail_nth_read+0x1b3/0x220 [ 91.049357][ T6280] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 91.049382][ T6280] ? rw_verify_area+0x2a6/0x4d0 [ 91.049404][ T6280] ? __lock_acquire+0xab9/0xd20 [ 91.049428][ T6280] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 91.049450][ T6280] vfs_read+0x200/0xa30 [ 91.049472][ T6280] ? fdget_pos+0x247/0x320 [ 91.049493][ T6280] ? __pfx___mutex_lock+0x10/0x10 [ 91.049515][ T6280] ? __pfx_vfs_read+0x10/0x10 [ 91.049539][ T6280] ? __fget_files+0x2a/0x420 [ 91.049558][ T6280] ? __fget_files+0x3a0/0x420 [ 91.049572][ T6280] ? __fget_files+0x2a/0x420 [ 91.049597][ T6280] ksys_read+0x145/0x250 [ 91.049621][ T6280] ? __pfx_ksys_read+0x10/0x10 [ 91.049641][ T6280] ? rcu_is_watching+0x15/0xb0 [ 91.049664][ T6280] ? do_syscall_64+0xbe/0x3b0 [ 91.049688][ T6280] do_syscall_64+0xfa/0x3b0 [ 91.049707][ T6280] ? lockdep_hardirqs_on+0x9c/0x150 [ 91.049725][ T6280] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.049743][ T6280] ? clear_bhb_loop+0x60/0xb0 [ 91.049766][ T6280] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.049784][ T6280] RIP: 0033:0x7fe28a78d5bc [ 91.049801][ T6280] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 91.049816][ T6280] RSP: 002b:00007fe28b63d030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 91.049836][ T6280] RAX: ffffffffffffffda RBX: 00007fe28a9d5fa0 RCX: 00007fe28a78d5bc [ 91.049850][ T6280] RDX: 000000000000000f RSI: 00007fe28b63d0a0 RDI: 0000000000000005 [ 91.049862][ T6280] RBP: 00007fe28b63d090 R08: 0000000000000000 R09: 0000000000000000 [ 91.049874][ T6280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 91.049885][ T6280] R13: 00007fe28a9d6038 R14: 00007fe28a9d5fa0 R15: 00007ffd79f32638 [ 91.049915][ T6280] [ 91.329302][ T6285] CPU: 1 UID: 0 PID: 6285 Comm: syz.2.103 Not tainted syzkaller #0 PREEMPT(full) [ 91.329327][ T6285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 91.329339][ T6285] Call Trace: [ 91.329346][ T6285] [ 91.329354][ T6285] dump_stack_lvl+0x189/0x250 [ 91.329383][ T6285] ? __pfx____ratelimit+0x10/0x10 [ 91.329404][ T6285] ? __pfx_dump_stack_lvl+0x10/0x10 [ 91.329427][ T6285] ? __pfx__printk+0x10/0x10 [ 91.329459][ T6285] ? __pfx___might_resched+0x10/0x10 [ 91.329477][ T6285] ? fs_reclaim_acquire+0x7d/0x100 [ 91.329500][ T6285] should_fail_ex+0x414/0x560 [ 91.329534][ T6285] should_failslab+0xa8/0x100 [ 91.329570][ T6285] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 91.329596][ T6285] ? __alloc_skb+0x112/0x2d0 [ 91.329622][ T6285] __alloc_skb+0x112/0x2d0 [ 91.329647][ T6285] netlink_ack+0x146/0xa50 [ 91.329665][ T6285] ? __pfx_genl_rcv_msg+0x10/0x10 [ 91.329690][ T6285] ? __pfx_nl802154_pre_doit+0x10/0x10 [ 91.329708][ T6285] ? __pfx_nl802154_post_doit+0x10/0x10 [ 91.329741][ T6285] netlink_rcv_skb+0x28c/0x470 [ 91.329759][ T6285] ? __lock_acquire+0xab9/0xd20 [ 91.329787][ T6285] ? __pfx_genl_rcv_msg+0x10/0x10 [ 91.329814][ T6285] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 91.329857][ T6285] ? down_read+0x1ad/0x2e0 [ 91.329883][ T6285] genl_rcv+0x28/0x40 [ 91.329906][ T6285] netlink_unicast+0x82f/0x9e0 [ 91.329945][ T6285] ? __pfx_netlink_unicast+0x10/0x10 [ 91.329976][ T6285] ? netlink_sendmsg+0x642/0xb30 [ 91.329995][ T6285] ? skb_put+0x11b/0x210 [ 91.330020][ T6285] netlink_sendmsg+0x805/0xb30 [ 91.330051][ T6285] ? __pfx_netlink_sendmsg+0x10/0x10 [ 91.330076][ T6285] ? aa_sock_msg_perm+0xf1/0x1d0 [ 91.330098][ T6285] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 91.330129][ T6285] ? __pfx_netlink_sendmsg+0x10/0x10 [ 91.330151][ T6285] __sock_sendmsg+0x21c/0x270 [ 91.330183][ T6285] ____sys_sendmsg+0x505/0x830 [ 91.330214][ T6285] ? __pfx_____sys_sendmsg+0x10/0x10 [ 91.330248][ T6285] ? import_iovec+0x74/0xa0 [ 91.330277][ T6285] ___sys_sendmsg+0x21f/0x2a0 [ 91.330305][ T6285] ? __pfx____sys_sendmsg+0x10/0x10 [ 91.330367][ T6285] ? __fget_files+0x2a/0x420 [ 91.330384][ T6285] ? __fget_files+0x3a0/0x420 [ 91.330412][ T6285] __x64_sys_sendmsg+0x19b/0x260 [ 91.330440][ T6285] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 91.330475][ T6285] ? __pfx_ksys_write+0x10/0x10 [ 91.330497][ T6285] ? rcu_is_watching+0x15/0xb0 [ 91.330522][ T6285] ? do_syscall_64+0xbe/0x3b0 [ 91.330548][ T6285] do_syscall_64+0xfa/0x3b0 [ 91.330573][ T6285] ? lockdep_hardirqs_on+0x9c/0x150 [ 91.330592][ T6285] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.330611][ T6285] ? clear_bhb_loop+0x60/0xb0 [ 91.330634][ T6285] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.330653][ T6285] RIP: 0033:0x7fcd08b8eba9 [ 91.330669][ T6285] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 91.330685][ T6285] RSP: 002b:00007fcd099cf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 91.330705][ T6285] RAX: ffffffffffffffda RBX: 00007fcd08dd5fa0 RCX: 00007fcd08b8eba9 [ 91.330720][ T6285] RDX: 0000000000040084 RSI: 0000200000000480 RDI: 0000000000000004 [ 91.330732][ T6285] RBP: 00007fcd099cf090 R08: 0000000000000000 R09: 0000000000000000 [ 91.330744][ T6285] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 91.330755][ T6285] R13: 00007fcd08dd6038 R14: 00007fcd08dd5fa0 R15: 00007ffedc7f4868 [ 91.330787][ T6285] [ 91.786162][ T6292] FAULT_INJECTION: forcing a failure. [ 91.786162][ T6292] name failslab, interval 1, probability 0, space 0, times 0 [ 91.855886][ T6292] CPU: 1 UID: 0 PID: 6292 Comm: syz.3.106 Not tainted syzkaller #0 PREEMPT(full) [ 91.855910][ T6292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 91.855919][ T6292] Call Trace: [ 91.855927][ T6292] [ 91.855935][ T6292] dump_stack_lvl+0x189/0x250 [ 91.855963][ T6292] ? __pfx____ratelimit+0x10/0x10 [ 91.855983][ T6292] ? __pfx_dump_stack_lvl+0x10/0x10 [ 91.856004][ T6292] ? __pfx__printk+0x10/0x10 [ 91.856026][ T6292] ? netlink_unicast+0x82f/0x9e0 [ 91.856054][ T6292] ? ___sys_sendmsg+0x21f/0x2a0 [ 91.856076][ T6292] ? do_syscall_64+0xfa/0x3b0 [ 91.856104][ T6292] should_fail_ex+0x414/0x560 [ 91.856136][ T6292] should_failslab+0xa8/0x100 [ 91.856166][ T6292] kmem_cache_alloc_noprof+0x73/0x3c0 [ 91.856189][ T6292] ? skb_clone+0x212/0x3a0 [ 91.856217][ T6292] skb_clone+0x212/0x3a0 [ 91.856244][ T6292] __netlink_deliver_tap+0x404/0x850 [ 91.856274][ T6292] ? netlink_deliver_tap+0x2e/0x1b0 [ 91.856295][ T6292] netlink_deliver_tap+0x19c/0x1b0 [ 91.856315][ T6292] netlink_sendskb+0x68/0x140 [ 91.856343][ T6292] netlink_unicast+0x397/0x9e0 [ 91.856366][ T6292] ? __asan_memcpy+0x40/0x70 [ 91.856391][ T6292] ? __pfx_netlink_unicast+0x10/0x10 [ 91.856427][ T6292] netlink_rcv_skb+0x28c/0x470 [ 91.856449][ T6292] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 91.856472][ T6292] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 91.856502][ T6292] ? netlink_deliver_tap+0x2e/0x1b0 [ 91.856537][ T6292] netlink_unicast+0x82f/0x9e0 [ 91.856571][ T6292] ? __pfx_netlink_unicast+0x10/0x10 [ 91.856601][ T6292] ? netlink_sendmsg+0x642/0xb30 [ 91.856619][ T6292] ? skb_put+0x11b/0x210 [ 91.856645][ T6292] netlink_sendmsg+0x805/0xb30 [ 91.856677][ T6292] ? __pfx_netlink_sendmsg+0x10/0x10 [ 91.856701][ T6292] ? aa_sock_msg_perm+0xf1/0x1d0 [ 91.856723][ T6292] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 91.856744][ T6292] ? __pfx_netlink_sendmsg+0x10/0x10 [ 91.856766][ T6292] __sock_sendmsg+0x21c/0x270 [ 91.856798][ T6292] ____sys_sendmsg+0x505/0x830 [ 91.856828][ T6292] ? __pfx_____sys_sendmsg+0x10/0x10 [ 91.856862][ T6292] ? import_iovec+0x74/0xa0 [ 91.856892][ T6292] ___sys_sendmsg+0x21f/0x2a0 [ 91.856919][ T6292] ? __pfx____sys_sendmsg+0x10/0x10 [ 91.856981][ T6292] ? __fget_files+0x2a/0x420 [ 91.856998][ T6292] ? __fget_files+0x3a0/0x420 [ 91.857026][ T6292] __x64_sys_sendmsg+0x19b/0x260 [ 91.857054][ T6292] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 91.857089][ T6292] ? __pfx_ksys_write+0x10/0x10 [ 91.857112][ T6292] ? rcu_is_watching+0x15/0xb0 [ 91.857137][ T6292] ? do_syscall_64+0xbe/0x3b0 [ 91.857163][ T6292] do_syscall_64+0xfa/0x3b0 [ 91.857182][ T6292] ? lockdep_hardirqs_on+0x9c/0x150 [ 91.857202][ T6292] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.857221][ T6292] ? clear_bhb_loop+0x60/0xb0 [ 91.857244][ T6292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.857262][ T6292] RIP: 0033:0x7fe28a78eba9 [ 91.857279][ T6292] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 91.857296][ T6292] RSP: 002b:00007fe28b63d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 91.857315][ T6292] RAX: ffffffffffffffda RBX: 00007fe28a9d5fa0 RCX: 00007fe28a78eba9 [ 91.857330][ T6292] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 91.857342][ T6292] RBP: 00007fe28b63d090 R08: 0000000000000000 R09: 0000000000000000 [ 91.857355][ T6292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 91.857366][ T6292] R13: 00007fe28a9d6038 R14: 00007fe28a9d5fa0 R15: 00007ffd79f32638 [ 91.857398][ T6292] [ 92.417079][ T6302] syzkaller1: entered promiscuous mode [ 92.485649][ T6302] syzkaller1: entered allmulticast mode [ 92.650838][ T6319] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 92.799544][ T6325] FAULT_INJECTION: forcing a failure. [ 92.799544][ T6325] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 92.888567][ T6325] CPU: 1 UID: 0 PID: 6325 Comm: syz.4.116 Not tainted syzkaller #0 PREEMPT(full) [ 92.888592][ T6325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 92.888602][ T6325] Call Trace: [ 92.888609][ T6325] [ 92.888617][ T6325] dump_stack_lvl+0x189/0x250 [ 92.888643][ T6325] ? __pfx____ratelimit+0x10/0x10 [ 92.888660][ T6325] ? __pfx_dump_stack_lvl+0x10/0x10 [ 92.888680][ T6325] ? __pfx__printk+0x10/0x10 [ 92.888716][ T6325] should_fail_ex+0x414/0x560 [ 92.888743][ T6325] _copy_to_user+0x31/0xb0 [ 92.888770][ T6325] simple_read_from_buffer+0xe1/0x170 [ 92.888798][ T6325] proc_fail_nth_read+0x1b3/0x220 [ 92.888821][ T6325] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 92.888844][ T6325] ? rw_verify_area+0x2a6/0x4d0 [ 92.888865][ T6325] ? __lock_acquire+0xab9/0xd20 [ 92.888892][ T6325] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 92.888912][ T6325] vfs_read+0x200/0xa30 [ 92.888934][ T6325] ? fdget_pos+0x247/0x320 [ 92.888954][ T6325] ? __pfx___mutex_lock+0x10/0x10 [ 92.888973][ T6325] ? __pfx_vfs_read+0x10/0x10 [ 92.888998][ T6325] ? __fget_files+0x2a/0x420 [ 92.889017][ T6325] ? __fget_files+0x3a0/0x420 [ 92.889031][ T6325] ? __fget_files+0x2a/0x420 [ 92.889054][ T6325] ksys_read+0x145/0x250 [ 92.889082][ T6325] ? __pfx_ksys_read+0x10/0x10 [ 92.889104][ T6325] ? rcu_is_watching+0x15/0xb0 [ 92.889129][ T6325] ? do_syscall_64+0xbe/0x3b0 [ 92.889182][ T6325] do_syscall_64+0xfa/0x3b0 [ 92.889200][ T6325] ? lockdep_hardirqs_on+0x9c/0x150 [ 92.889219][ T6325] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.889235][ T6325] ? clear_bhb_loop+0x60/0xb0 [ 92.889255][ T6325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.889271][ T6325] RIP: 0033:0x7f847d58d5bc [ 92.889287][ T6325] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 92.889302][ T6325] RSP: 002b:00007f847e432030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 92.889322][ T6325] RAX: ffffffffffffffda RBX: 00007f847d7d5fa0 RCX: 00007f847d58d5bc [ 92.889335][ T6325] RDX: 000000000000000f RSI: 00007f847e4320a0 RDI: 0000000000000004 [ 92.889347][ T6325] RBP: 00007f847e432090 R08: 0000000000000000 R09: 0000000000000000 [ 92.889358][ T6325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 92.889370][ T6325] R13: 00007f847d7d6038 R14: 00007f847d7d5fa0 R15: 00007fff9c8444a8 [ 92.889398][ T6325] [ 93.427287][ T6344] __nla_validate_parse: 1 callbacks suppressed [ 93.427304][ T6344] netlink: 4 bytes leftover after parsing attributes in process `syz.4.123'. [ 93.471145][ T6342] netlink: 36 bytes leftover after parsing attributes in process `syz.3.124'. [ 93.492219][ T6344] bridge_slave_1: left allmulticast mode [ 93.498073][ T6344] bridge_slave_1: left promiscuous mode [ 93.514914][ T6344] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.548266][ T6344] bridge_slave_0: left allmulticast mode [ 93.582561][ T6344] bridge_slave_0: left promiscuous mode [ 93.588378][ T6344] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.718001][ T6347] netlink: 12 bytes leftover after parsing attributes in process `syz.4.123'. [ 93.953896][ T6356] syzkaller1: entered promiscuous mode [ 93.973294][ T6356] syzkaller1: entered allmulticast mode [ 94.420094][ T6384] netlink: 28 bytes leftover after parsing attributes in process `syz.0.134'. [ 94.723864][ T6404] netlink: 44 bytes leftover after parsing attributes in process `syz.1.138'. [ 94.805830][ T6406] tipc: Enabling of bearer rejected, media not registered [ 94.870695][ T6406] netlink: 12 bytes leftover after parsing attributes in process `syz.3.139'. [ 94.961765][ T6406] batadv1: entered allmulticast mode [ 94.986726][ T6406] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 95.050071][ T6411] tipc: Enabled bearer , priority 0 [ 95.066201][ T6411] syzkaller0: entered promiscuous mode [ 95.087914][ T6411] syzkaller0: entered allmulticast mode [ 95.193264][ T6423] netlink: 'syz.4.144': attribute type 13 has an invalid length. [ 95.201188][ T6423] netlink: 'syz.4.144': attribute type 58 has an invalid length. [ 95.202416][ T6411] netlink: 8 bytes leftover after parsing attributes in process `syz.1.140'. [ 95.228607][ T6423] netlink: 152 bytes leftover after parsing attributes in process `syz.4.144'. [ 95.271666][ T6411] tipc: Resetting bearer [ 95.288250][ T6410] tipc: Resetting bearer [ 95.413269][ T6410] tipc: Disabling bearer [ 95.556532][ T6434] warning: `syz.2.148' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 95.956131][ T6455] FAULT_INJECTION: forcing a failure. [ 95.956131][ T6455] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 95.976132][ T6455] CPU: 0 UID: 0 PID: 6455 Comm: syz.3.156 Not tainted syzkaller #0 PREEMPT(full) [ 95.976160][ T6455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 95.976170][ T6455] Call Trace: [ 95.976178][ T6455] [ 95.976185][ T6455] dump_stack_lvl+0x189/0x250 [ 95.976213][ T6455] ? __pfx____ratelimit+0x10/0x10 [ 95.976233][ T6455] ? __pfx_dump_stack_lvl+0x10/0x10 [ 95.976255][ T6455] ? __pfx__printk+0x10/0x10 [ 95.976297][ T6455] should_fail_ex+0x414/0x560 [ 95.976331][ T6455] _copy_from_user+0x2d/0xb0 [ 95.976357][ T6455] __copy_msghdr+0x3c5/0x5b0 [ 95.976385][ T6455] ___sys_sendmsg+0x1a5/0x2a0 [ 95.976412][ T6455] ? __pfx____sys_sendmsg+0x10/0x10 [ 95.976473][ T6455] ? __fget_files+0x2a/0x420 [ 95.976489][ T6455] ? __fget_files+0x3a0/0x420 [ 95.976516][ T6455] __sys_sendmmsg+0x227/0x430 [ 95.976545][ T6455] ? __pfx___sys_sendmmsg+0x10/0x10 [ 95.976567][ T6455] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 95.976617][ T6455] ? ksys_write+0x22a/0x250 [ 95.976645][ T6455] ? __pfx_ksys_write+0x10/0x10 [ 95.976666][ T6455] ? rcu_is_watching+0x15/0xb0 [ 95.976692][ T6455] __x64_sys_sendmmsg+0xa0/0xc0 [ 95.976719][ T6455] do_syscall_64+0xfa/0x3b0 [ 95.976739][ T6455] ? lockdep_hardirqs_on+0x9c/0x150 [ 95.976758][ T6455] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.976776][ T6455] ? clear_bhb_loop+0x60/0xb0 [ 95.976799][ T6455] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.976824][ T6455] RIP: 0033:0x7fe28a78eba9 [ 95.976840][ T6455] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 95.976855][ T6455] RSP: 002b:00007fe28b63d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 95.976875][ T6455] RAX: ffffffffffffffda RBX: 00007fe28a9d5fa0 RCX: 00007fe28a78eba9 [ 95.976889][ T6455] RDX: 0000000000000001 RSI: 00002000000055c0 RDI: 0000000000000003 [ 95.976901][ T6455] RBP: 00007fe28b63d090 R08: 0000000000000000 R09: 0000000000000000 [ 95.976912][ T6455] R10: 0000000004001c00 R11: 0000000000000246 R12: 0000000000000001 [ 95.976923][ T6455] R13: 00007fe28a9d6038 R14: 00007fe28a9d5fa0 R15: 00007ffd79f32638 [ 95.976953][ T6455] [ 96.208532][ T6459] netlink: 16 bytes leftover after parsing attributes in process `syz.4.159'. [ 96.455038][ T6468] FAULT_INJECTION: forcing a failure. [ 96.455038][ T6468] name failslab, interval 1, probability 0, space 0, times 0 [ 96.530646][ T6468] CPU: 1 UID: 0 PID: 6468 Comm: syz.2.162 Not tainted syzkaller #0 PREEMPT(full) [ 96.530674][ T6468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 96.530685][ T6468] Call Trace: [ 96.530693][ T6468] [ 96.530701][ T6468] dump_stack_lvl+0x189/0x250 [ 96.530729][ T6468] ? __pfx____ratelimit+0x10/0x10 [ 96.530749][ T6468] ? __pfx_dump_stack_lvl+0x10/0x10 [ 96.530772][ T6468] ? __pfx__printk+0x10/0x10 [ 96.530814][ T6468] ? __pfx___might_resched+0x10/0x10 [ 96.530838][ T6468] should_fail_ex+0x414/0x560 [ 96.530872][ T6468] should_failslab+0xa8/0x100 [ 96.530902][ T6468] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 96.530929][ T6468] ? __alloc_skb+0x112/0x2d0 [ 96.530948][ T6468] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 96.530978][ T6468] __alloc_skb+0x112/0x2d0 [ 96.531004][ T6468] __ip_append_data+0x2dae/0x40c0 [ 96.531049][ T6468] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 96.531099][ T6468] ? __pfx___ip_append_data+0x10/0x10 [ 96.531129][ T6468] ? __local_bh_enable_ip+0x12d/0x1c0 [ 96.531148][ T6468] ? lockdep_hardirqs_on+0x9c/0x150 [ 96.531171][ T6468] ip_append_data+0x10e/0x190 [ 96.531200][ T6468] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 96.531229][ T6468] udp_sendmsg+0x541/0x2170 [ 96.531262][ T6468] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 96.531299][ T6468] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 96.531328][ T6468] ? __pfx_udp_sendmsg+0x10/0x10 [ 96.531360][ T6468] ? __lock_acquire+0xab9/0xd20 [ 96.531413][ T6468] ? __pfx_aa_sk_perm+0x10/0x10 [ 96.531439][ T6468] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 96.531463][ T6468] ? __fget_files+0x2a/0x420 [ 96.531478][ T6468] ? sock_rps_record_flow+0x19/0x410 [ 96.531509][ T6468] ? inet_sendmsg+0x29c/0x370 [ 96.531534][ T6468] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 96.531559][ T6468] __sock_sendmsg+0x19c/0x270 [ 96.531594][ T6468] __sys_sendto+0x3bd/0x520 [ 96.531618][ T6468] ? __pfx___sys_sendto+0x10/0x10 [ 96.531637][ T6468] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 96.531672][ T6468] ? __fget_files+0x3a0/0x420 [ 96.531700][ T6468] ? ksys_write+0x22a/0x250 [ 96.531728][ T6468] ? __pfx_ksys_write+0x10/0x10 [ 96.531750][ T6468] ? rcu_is_watching+0x15/0xb0 [ 96.531775][ T6468] __x64_sys_sendto+0xde/0x100 [ 96.531809][ T6468] do_syscall_64+0xfa/0x3b0 [ 96.531829][ T6468] ? lockdep_hardirqs_on+0x9c/0x150 [ 96.531848][ T6468] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.531867][ T6468] ? clear_bhb_loop+0x60/0xb0 [ 96.531890][ T6468] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.531908][ T6468] RIP: 0033:0x7fcd08b8eba9 [ 96.531924][ T6468] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 96.531940][ T6468] RSP: 002b:00007fcd099cf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 96.531960][ T6468] RAX: ffffffffffffffda RBX: 00007fcd08dd5fa0 RCX: 00007fcd08b8eba9 [ 96.531974][ T6468] RDX: 0000000000006200 RSI: 0000200000000c80 RDI: 0000000000000004 [ 96.531986][ T6468] RBP: 00007fcd099cf090 R08: 0000000000000000 R09: 0000000000000000 [ 96.531998][ T6468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 96.532009][ T6468] R13: 00007fcd08dd6038 R14: 00007fcd08dd5fa0 R15: 00007ffedc7f4868 [ 96.532040][ T6468] [ 97.155561][ T6481] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input6 [ 97.193114][ T6486] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.168'. [ 97.713376][ T6508] FAULT_INJECTION: forcing a failure. [ 97.713376][ T6508] name failslab, interval 1, probability 0, space 0, times 0 [ 97.732313][ T6508] CPU: 1 UID: 0 PID: 6508 Comm: syz.2.174 Not tainted syzkaller #0 PREEMPT(full) [ 97.732337][ T6508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 97.732350][ T6508] Call Trace: [ 97.732357][ T6508] [ 97.732365][ T6508] dump_stack_lvl+0x189/0x250 [ 97.732392][ T6508] ? __pfx____ratelimit+0x10/0x10 [ 97.732411][ T6508] ? __pfx_dump_stack_lvl+0x10/0x10 [ 97.732432][ T6508] ? __pfx__printk+0x10/0x10 [ 97.732459][ T6508] ? __pfx___might_resched+0x10/0x10 [ 97.732477][ T6508] ? fs_reclaim_acquire+0x7d/0x100 [ 97.732497][ T6508] should_fail_ex+0x414/0x560 [ 97.732528][ T6508] should_failslab+0xa8/0x100 [ 97.732555][ T6508] __kmalloc_node_track_caller_noprof+0xcc/0x4e0 [ 97.732580][ T6508] ? __request_module+0x2d1/0x5e0 [ 97.732610][ T6508] kstrdup+0x42/0x100 [ 97.732631][ T6508] __request_module+0x2d1/0x5e0 [ 97.732670][ T6508] ? __pfx___request_module+0x10/0x10 [ 97.732701][ T6508] ? apparmor_capable+0x137/0x1b0 [ 97.732729][ T6508] ? capable+0x89/0xe0 [ 97.732746][ T6508] ? dev_load+0x21/0x1f0 [ 97.732768][ T6508] devinet_ioctl+0x130/0x1b50 [ 97.732802][ T6508] ? __pfx_devinet_ioctl+0x10/0x10 [ 97.732825][ T6508] ? get_user_ifreq+0x12c/0x180 [ 97.732852][ T6508] inet_ioctl+0x3c0/0x4c0 [ 97.732882][ T6508] ? __pfx_inet_ioctl+0x10/0x10 [ 97.732927][ T6508] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 97.732958][ T6508] sock_do_ioctl+0xdc/0x300 [ 97.732988][ T6508] ? __pfx_sock_do_ioctl+0x10/0x10 [ 97.733012][ T6508] ? __lock_acquire+0xab9/0xd20 [ 97.733054][ T6508] sock_ioctl+0x576/0x790 [ 97.733081][ T6508] ? __pfx_sock_ioctl+0x10/0x10 [ 97.733108][ T6508] ? __fget_files+0x2a/0x420 [ 97.733122][ T6508] ? __fget_files+0x3a0/0x420 [ 97.733137][ T6508] ? __fget_files+0x2a/0x420 [ 97.733156][ T6508] ? bpf_lsm_file_ioctl+0x9/0x20 [ 97.733180][ T6508] ? __pfx_sock_ioctl+0x10/0x10 [ 97.733206][ T6508] __se_sys_ioctl+0xfc/0x170 [ 97.733231][ T6508] do_syscall_64+0xfa/0x3b0 [ 97.733250][ T6508] ? lockdep_hardirqs_on+0x9c/0x150 [ 97.733268][ T6508] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.733285][ T6508] ? clear_bhb_loop+0x60/0xb0 [ 97.733307][ T6508] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.733329][ T6508] RIP: 0033:0x7fcd08b8eba9 [ 97.733345][ T6508] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 97.733361][ T6508] RSP: 002b:00007fcd0998d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 97.733381][ T6508] RAX: ffffffffffffffda RBX: 00007fcd08dd6180 RCX: 00007fcd08b8eba9 [ 97.733396][ T6508] RDX: 0000200000002280 RSI: 0000000000008914 RDI: 0000000000000005 [ 97.733407][ T6508] RBP: 00007fcd0998d090 R08: 0000000000000000 R09: 0000000000000000 [ 97.733418][ T6508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 97.733429][ T6508] R13: 00007fcd08dd6218 R14: 00007fcd08dd6180 R15: 00007ffedc7f4868 [ 97.733463][ T6508] [ 98.407758][ T6532] FAULT_INJECTION: forcing a failure. [ 98.407758][ T6532] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 98.521296][ T6532] CPU: 1 UID: 0 PID: 6532 Comm: syz.4.187 Not tainted syzkaller #0 PREEMPT(full) [ 98.521322][ T6532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 98.521333][ T6532] Call Trace: [ 98.521341][ T6532] [ 98.521349][ T6532] dump_stack_lvl+0x189/0x250 [ 98.521377][ T6532] ? __pfx____ratelimit+0x10/0x10 [ 98.521398][ T6532] ? __pfx_dump_stack_lvl+0x10/0x10 [ 98.521421][ T6532] ? __pfx__printk+0x10/0x10 [ 98.521447][ T6532] ? __might_fault+0xb0/0x130 [ 98.521485][ T6532] should_fail_ex+0x414/0x560 [ 98.521519][ T6532] _copy_from_user+0x2d/0xb0 [ 98.521546][ T6532] do_sock_getsockopt+0x17d/0x450 [ 98.521573][ T6532] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 98.521596][ T6532] ? write_ibpb+0x30/0x40 [ 98.521621][ T6532] ? __fget_files+0x3a0/0x420 [ 98.521638][ T6532] ? __fget_files+0x2a/0x420 [ 98.521662][ T6532] __x64_sys_getsockopt+0x1a5/0x250 [ 98.521685][ T6532] ? write_ibpb+0x30/0x40 [ 98.521707][ T6532] ? write_ibpb+0x30/0x40 [ 98.521730][ T6532] do_syscall_64+0xfa/0x3b0 [ 98.521750][ T6532] ? lockdep_hardirqs_on+0x9c/0x150 [ 98.521769][ T6532] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.521788][ T6532] ? clear_bhb_loop+0x60/0xb0 [ 98.521811][ T6532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.521829][ T6532] RIP: 0033:0x7f847d58eba9 [ 98.521844][ T6532] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 98.521859][ T6532] RSP: 002b:00007f847e432038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 98.521878][ T6532] RAX: ffffffffffffffda RBX: 00007f847d7d5fa0 RCX: 00007f847d58eba9 [ 98.521891][ T6532] RDX: 000000000000000e RSI: 0000000000000084 RDI: 0000000000000003 [ 98.521902][ T6532] RBP: 00007f847e432090 R08: 0000200000000000 R09: 0000000000000000 [ 98.521914][ T6532] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001 [ 98.521926][ T6532] R13: 00007f847d7d6038 R14: 00007f847d7d5fa0 R15: 00007fff9c8444a8 [ 98.521954][ T6532] [ 98.792496][ T6542] netlink: 'syz.0.189': attribute type 10 has an invalid length. [ 98.818027][ T6542] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 99.052836][ T6554] macvlan2: entered allmulticast mode [ 99.089298][ T6554] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 99.175836][ T6564] FAULT_INJECTION: forcing a failure. [ 99.175836][ T6564] name failslab, interval 1, probability 0, space 0, times 0 [ 99.251275][ T6564] CPU: 0 UID: 0 PID: 6564 Comm: syz.3.194 Not tainted syzkaller #0 PREEMPT(full) [ 99.251302][ T6564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 99.251313][ T6564] Call Trace: [ 99.251321][ T6564] [ 99.251329][ T6564] dump_stack_lvl+0x189/0x250 [ 99.251358][ T6564] ? __pfx____ratelimit+0x10/0x10 [ 99.251378][ T6564] ? __pfx_dump_stack_lvl+0x10/0x10 [ 99.251401][ T6564] ? __pfx__printk+0x10/0x10 [ 99.251427][ T6564] ? rcu_is_watching+0x15/0xb0 [ 99.251448][ T6564] ? trace_fib_table_lookup+0x85/0x200 [ 99.251479][ T6564] should_fail_ex+0x414/0x560 [ 99.251519][ T6564] should_failslab+0xa8/0x100 [ 99.251549][ T6564] kmem_cache_alloc_noprof+0x73/0x3c0 [ 99.251573][ T6564] ? dst_alloc+0x105/0x170 [ 99.251596][ T6564] ? fib_lookup+0x76/0x440 [ 99.251623][ T6564] dst_alloc+0x105/0x170 [ 99.251653][ T6564] ip_route_output_key_hash_rcu+0x1560/0x23e0 [ 99.251685][ T6564] ? ip_route_output_key_hash_rcu+0x1351/0x23e0 [ 99.251716][ T6564] ? ip_route_output_key_hash+0xde/0x2e0 [ 99.251743][ T6564] ip_route_output_key_hash+0x1b9/0x2e0 [ 99.251767][ T6564] ? __lock_acquire+0xab9/0xd20 [ 99.251797][ T6564] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 99.251840][ T6564] ip_route_output_flow+0x2a/0x150 [ 99.251863][ T6564] ? security_sk_classify_flow+0x70/0x180 [ 99.251891][ T6564] udp_sendmsg+0x142e/0x2170 [ 99.251932][ T6564] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 99.251961][ T6564] ? __pfx_udp_sendmsg+0x10/0x10 [ 99.251986][ T6564] ? tomoyo_write_log2+0x250/0x910 [ 99.252014][ T6564] ? tomoyo_supervisor+0x4b2/0x1480 [ 99.252062][ T6564] ? snprintf+0xda/0x120 [ 99.252101][ T6564] udpv6_sendmsg+0xbf0/0x24b0 [ 99.252149][ T6564] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 99.252179][ T6564] ? __pfx___might_resched+0x10/0x10 [ 99.252212][ T6564] ? aa_sk_perm+0x81e/0x950 [ 99.252251][ T6564] ? inet_send_prepare+0x5c/0x270 [ 99.252281][ T6564] ? inet6_sendmsg+0xe4/0x120 [ 99.252307][ T6564] __sock_sendmsg+0xe5/0x270 [ 99.252338][ T6564] ____sys_sendmsg+0x52d/0x830 [ 99.252368][ T6564] ? __pfx_____sys_sendmsg+0x10/0x10 [ 99.252399][ T6564] ? import_iovec+0x74/0xa0 [ 99.252426][ T6564] ___sys_sendmsg+0x21f/0x2a0 [ 99.252449][ T6564] ? __pfx____sys_sendmsg+0x10/0x10 [ 99.252504][ T6564] ? __fget_files+0x2a/0x420 [ 99.252526][ T6564] ? __fget_files+0x3a0/0x420 [ 99.252552][ T6564] __sys_sendmmsg+0x227/0x430 [ 99.252582][ T6564] ? __pfx___sys_sendmmsg+0x10/0x10 [ 99.252602][ T6564] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 99.252649][ T6564] ? ksys_write+0x22a/0x250 [ 99.252674][ T6564] ? __pfx_ksys_write+0x10/0x10 [ 99.252694][ T6564] ? rcu_is_watching+0x15/0xb0 [ 99.252721][ T6564] __x64_sys_sendmmsg+0xa0/0xc0 [ 99.252747][ T6564] do_syscall_64+0xfa/0x3b0 [ 99.252765][ T6564] ? lockdep_hardirqs_on+0x9c/0x150 [ 99.252781][ T6564] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.252797][ T6564] ? clear_bhb_loop+0x60/0xb0 [ 99.252820][ T6564] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.252837][ T6564] RIP: 0033:0x7fe28a78eba9 [ 99.252854][ T6564] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 99.252867][ T6564] RSP: 002b:00007fe28b63d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 99.252887][ T6564] RAX: ffffffffffffffda RBX: 00007fe28a9d5fa0 RCX: 00007fe28a78eba9 [ 99.252901][ T6564] RDX: 0000000000000001 RSI: 00002000000055c0 RDI: 0000000000000003 [ 99.252913][ T6564] RBP: 00007fe28b63d090 R08: 0000000000000000 R09: 0000000000000000 [ 99.252924][ T6564] R10: 0000000004001c00 R11: 0000000000000246 R12: 0000000000000001 [ 99.252934][ T6564] R13: 00007fe28a9d6038 R14: 00007fe28a9d5fa0 R15: 00007ffd79f32638 [ 99.252965][ T6564] [ 99.799291][ T6573] team0: Device vti0 is of different type [ 99.972260][ T6589] netlink: 12 bytes leftover after parsing attributes in process `syz.3.202'. [ 100.198272][ T6597] netlink: 68 bytes leftover after parsing attributes in process `syz.1.204'. [ 100.297669][ T6598] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 100.351484][ T6598] ieee802154 phy0 wpan0: encryption failed: -22 [ 100.359053][ T6605] netlink: 1688 bytes leftover after parsing attributes in process `syz.4.207'. [ 100.390187][ T6598] netlink: 4 bytes leftover after parsing attributes in process `syz.2.205'. [ 100.536674][ T6612] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 100.914908][ T6621] netlink: 'syz.0.212': attribute type 21 has an invalid length. [ 100.960704][ T6617] netlink: 'syz.2.211': attribute type 10 has an invalid length. [ 100.995640][ T6617] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 101.320525][ T6632] netlink: 36 bytes leftover after parsing attributes in process `syz.1.216'. [ 101.516251][ T6636] netlink: 16 bytes leftover after parsing attributes in process `syz.2.217'. [ 101.630669][ T6640] netlink: 'syz.1.220': attribute type 72 has an invalid length. [ 101.653372][ T6640] netlink: 1700 bytes leftover after parsing attributes in process `syz.1.220'. [ 101.899071][ T6657] netlink: 64 bytes leftover after parsing attributes in process `syz.2.224'. [ 101.983728][ T6661] netlink: 16 bytes leftover after parsing attributes in process `syz.4.227'. [ 102.216159][ T6678] netlink: 60 bytes leftover after parsing attributes in process `syz.3.234'. [ 102.362864][ T6684] tipc: Started in network mode [ 102.373549][ T6684] tipc: Node identity 080211000001, cluster identity 4711 [ 102.385610][ T6684] tipc: Enabled bearer , priority 0 [ 102.394791][ T6684] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode [ 102.406641][ T6684] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode [ 102.435416][ T6684] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 102.456475][ T6684] tipc: Resetting bearer [ 102.697302][ T6699] nbd: must specify at least one socket [ 103.133692][ T6712] FAULT_INJECTION: forcing a failure. [ 103.133692][ T6712] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 103.221101][ T6712] CPU: 1 UID: 0 PID: 6712 Comm: syz.1.244 Not tainted syzkaller #0 PREEMPT(full) [ 103.221127][ T6712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 103.221137][ T6712] Call Trace: [ 103.221144][ T6712] [ 103.221151][ T6712] dump_stack_lvl+0x189/0x250 [ 103.221179][ T6712] ? __pfx____ratelimit+0x10/0x10 [ 103.221199][ T6712] ? __pfx_dump_stack_lvl+0x10/0x10 [ 103.221221][ T6712] ? __pfx__printk+0x10/0x10 [ 103.221261][ T6712] should_fail_ex+0x414/0x560 [ 103.221295][ T6712] _copy_to_user+0x31/0xb0 [ 103.221323][ T6712] simple_read_from_buffer+0xe1/0x170 [ 103.221353][ T6712] proc_fail_nth_read+0x1b3/0x220 [ 103.221378][ T6712] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 103.221408][ T6712] ? rw_verify_area+0x2a6/0x4d0 [ 103.221431][ T6712] ? __lock_acquire+0xab9/0xd20 [ 103.221457][ T6712] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 103.221481][ T6712] vfs_read+0x200/0xa30 [ 103.221504][ T6712] ? fdget_pos+0x247/0x320 [ 103.221526][ T6712] ? __pfx___mutex_lock+0x10/0x10 [ 103.221548][ T6712] ? __pfx_vfs_read+0x10/0x10 [ 103.221574][ T6712] ? __fget_files+0x2a/0x420 [ 103.221596][ T6712] ? __fget_files+0x3a0/0x420 [ 103.221611][ T6712] ? __fget_files+0x2a/0x420 [ 103.221638][ T6712] ksys_read+0x145/0x250 [ 103.221665][ T6712] ? __pfx_ksys_read+0x10/0x10 [ 103.221695][ T6712] ? do_syscall_64+0xbe/0x3b0 [ 103.221720][ T6712] do_syscall_64+0xfa/0x3b0 [ 103.221738][ T6712] ? lockdep_hardirqs_on+0x9c/0x150 [ 103.221758][ T6712] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.221776][ T6712] ? clear_bhb_loop+0x60/0xb0 [ 103.221800][ T6712] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.221818][ T6712] RIP: 0033:0x7f763b98d5bc [ 103.221835][ T6712] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 103.221851][ T6712] RSP: 002b:00007f763c7a3030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 103.221871][ T6712] RAX: ffffffffffffffda RBX: 00007f763bbd6090 RCX: 00007f763b98d5bc [ 103.221885][ T6712] RDX: 000000000000000f RSI: 00007f763c7a30a0 RDI: 0000000000000004 [ 103.221897][ T6712] RBP: 00007f763c7a3090 R08: 0000000000000000 R09: 0000000000000000 [ 103.221909][ T6712] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 103.221920][ T6712] R13: 00007f763bbd6128 R14: 00007f763bbd6090 R15: 00007fffdb8691f8 [ 103.221952][ T6712] [ 103.255045][ T6717] lo speed is unknown, defaulting to 1000 [ 103.469716][ T48] tipc: Node number set to 134418688 [ 103.507719][ T6724] netlink: 'syz.4.249': attribute type 5 has an invalid length. [ 103.528377][ T6724] netlink: 'syz.4.249': attribute type 6 has an invalid length. [ 103.552913][ T6717] lo speed is unknown, defaulting to 1000 [ 103.580665][ T6717] lo speed is unknown, defaulting to 1000 [ 103.880776][ T6733] netlink: 'syz.4.252': attribute type 72 has an invalid length. [ 104.019595][ T6739] netlink: 'syz.0.255': attribute type 24 has an invalid length. [ 104.421462][ T6717] infiniband syz0: set active [ 104.427616][ T5982] lo speed is unknown, defaulting to 1000 [ 104.450203][ T6717] infiniband syz0: added lo [ 104.457915][ T6717] syz0: rxe_create_cq: returned err = -12 [ 104.478290][ T6717] infiniband syz0: Couldn't create ib_mad CQ [ 104.516905][ T6717] infiniband syz0: Couldn't open port 1 [ 104.615359][ T6765] openvswitch: netlink: nsh attribute has 13 unknown bytes. [ 104.634800][ T6765] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 104.667157][ T6717] RDS/IB: syz0: added [ 104.690268][ T6717] smc: adding ib device syz0 with port count 1 [ 104.696661][ T6717] smc: ib device syz0 port 1 has pnetid [ 104.733059][ T48] lo speed is unknown, defaulting to 1000 [ 104.745227][ T6717] lo speed is unknown, defaulting to 1000 [ 105.608651][ T6796] __nla_validate_parse: 12 callbacks suppressed [ 105.608669][ T6796] netlink: 8 bytes leftover after parsing attributes in process `syz.1.272'. [ 105.772161][ T6796] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 105.836930][ T6796] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 105.872745][ T6796] gretap1: entered promiscuous mode [ 105.878001][ T6796] gretap1: entered allmulticast mode [ 106.106418][ T6815] netlink: 8 bytes leftover after parsing attributes in process `syz.4.277'. [ 106.142046][ T6816] netlink: 'syz.1.278': attribute type 72 has an invalid length. [ 106.196503][ T6717] lo speed is unknown, defaulting to 1000 [ 106.252857][ T6820] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.279'. [ 106.932480][ T6844] tipc: Enabled bearer , priority 0 [ 106.959426][ T6844] syzkaller0: entered promiscuous mode [ 106.998252][ T6844] syzkaller0: entered allmulticast mode [ 107.056033][ T6844] tipc: Resetting bearer [ 107.080305][ T6843] tipc: Resetting bearer [ 107.099743][ T6843] tipc: Disabling bearer [ 107.340653][ T6856] netlink: 4 bytes leftover after parsing attributes in process `syz.1.289'. [ 107.492576][ T6861] Bluetooth: MGMT ver 1.23 [ 107.492756][ T6717] lo speed is unknown, defaulting to 1000 [ 107.683155][ T6864] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.291'. [ 107.828953][ T6870] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.292'. [ 108.304964][ T6890] FAULT_INJECTION: forcing a failure. [ 108.304964][ T6890] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 108.378720][ T6890] CPU: 0 UID: 0 PID: 6890 Comm: syz.0.297 Not tainted syzkaller #0 PREEMPT(full) [ 108.378747][ T6890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 108.378758][ T6890] Call Trace: [ 108.378766][ T6890] [ 108.378774][ T6890] dump_stack_lvl+0x189/0x250 [ 108.378802][ T6890] ? __pfx____ratelimit+0x10/0x10 [ 108.378823][ T6890] ? __pfx_dump_stack_lvl+0x10/0x10 [ 108.378846][ T6890] ? __pfx__printk+0x10/0x10 [ 108.378885][ T6890] should_fail_ex+0x414/0x560 [ 108.378919][ T6890] _copy_to_user+0x31/0xb0 [ 108.378947][ T6890] simple_read_from_buffer+0xe1/0x170 [ 108.378979][ T6890] proc_fail_nth_read+0x1b3/0x220 [ 108.379005][ T6890] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 108.379029][ T6890] ? rw_verify_area+0x2a6/0x4d0 [ 108.379052][ T6890] ? __lock_acquire+0xab9/0xd20 [ 108.379078][ T6890] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 108.379102][ T6890] vfs_read+0x200/0xa30 [ 108.379125][ T6890] ? fdget_pos+0x247/0x320 [ 108.379146][ T6890] ? __pfx___mutex_lock+0x10/0x10 [ 108.379168][ T6890] ? __pfx_vfs_read+0x10/0x10 [ 108.379194][ T6890] ? __fget_files+0x2a/0x420 [ 108.379216][ T6890] ? __fget_files+0x3a0/0x420 [ 108.379231][ T6890] ? __fget_files+0x2a/0x420 [ 108.379257][ T6890] ksys_read+0x145/0x250 [ 108.379285][ T6890] ? __pfx_ksys_read+0x10/0x10 [ 108.379315][ T6890] ? do_syscall_64+0xbe/0x3b0 [ 108.379341][ T6890] do_syscall_64+0xfa/0x3b0 [ 108.379360][ T6890] ? lockdep_hardirqs_on+0x9c/0x150 [ 108.379379][ T6890] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.379398][ T6890] ? clear_bhb_loop+0x60/0xb0 [ 108.379421][ T6890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.379439][ T6890] RIP: 0033:0x7f37d818d5bc [ 108.379456][ T6890] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 108.379472][ T6890] RSP: 002b:00007f37d63f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 108.379492][ T6890] RAX: ffffffffffffffda RBX: 00007f37d83d5fa0 RCX: 00007f37d818d5bc [ 108.379506][ T6890] RDX: 000000000000000f RSI: 00007f37d63f60a0 RDI: 0000000000000003 [ 108.379524][ T6890] RBP: 00007f37d63f6090 R08: 0000000000000000 R09: 0000000000000000 [ 108.379536][ T6890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 108.379547][ T6890] R13: 00007f37d83d6038 R14: 00007f37d83d5fa0 R15: 00007ffcfaf249a8 [ 108.379579][ T6890] [ 108.769728][ T6717] lo speed is unknown, defaulting to 1000 [ 109.210613][ T6914] FAULT_INJECTION: forcing a failure. [ 109.210613][ T6914] name failslab, interval 1, probability 0, space 0, times 0 [ 109.266528][ T6914] CPU: 1 UID: 0 PID: 6914 Comm: syz.2.304 Not tainted syzkaller #0 PREEMPT(full) [ 109.266554][ T6914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 109.266566][ T6914] Call Trace: [ 109.266574][ T6914] [ 109.266582][ T6914] dump_stack_lvl+0x189/0x250 [ 109.266610][ T6914] ? __pfx____ratelimit+0x10/0x10 [ 109.266630][ T6914] ? __pfx_dump_stack_lvl+0x10/0x10 [ 109.266652][ T6914] ? __pfx__printk+0x10/0x10 [ 109.266679][ T6914] ? __pfx___might_resched+0x10/0x10 [ 109.266705][ T6914] ? fs_reclaim_acquire+0x7d/0x100 [ 109.266728][ T6914] should_fail_ex+0x414/0x560 [ 109.266763][ T6914] should_failslab+0xa8/0x100 [ 109.266792][ T6914] __kmalloc_node_noprof+0xd1/0x4e0 [ 109.266817][ T6914] ? __pfx___up_read+0x10/0x10 [ 109.266836][ T6914] ? crypto_create_tfm_node+0x83/0x3f0 [ 109.266870][ T6914] crypto_create_tfm_node+0x83/0x3f0 [ 109.266904][ T6914] crypto_spawn_tfm2+0x5c/0x90 [ 109.266926][ T6914] aead_init_geniv+0x169/0x240 [ 109.266957][ T6914] crypto_create_tfm_node+0x18c/0x3f0 [ 109.266991][ T6914] crypto_alloc_tfm_node+0x172/0x3f0 [ 109.267029][ T6914] esp_init_state+0x36b/0x1140 [ 109.267052][ T6914] ? __sock_sendmsg+0x21c/0x270 [ 109.267079][ T6914] ? ____sys_sendmsg+0x505/0x830 [ 109.267100][ T6914] ? ___sys_sendmsg+0x21f/0x2a0 [ 109.267123][ T6914] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.267151][ T6914] ? __pfx_esp_init_state+0x10/0x10 [ 109.267184][ T6914] ? __lock_acquire+0xab9/0xd20 [ 109.267236][ T6914] ? __xfrm_init_state+0x7ef/0x13f0 [ 109.267268][ T6914] __xfrm_init_state+0xa73/0x13f0 [ 109.267294][ T6914] ? __xfrm_init_state+0x7ef/0x13f0 [ 109.267326][ T6914] xfrm_add_sa+0x2f5b/0x4070 [ 109.267363][ T6914] ? __pfx_xfrm_add_sa+0x10/0x10 [ 109.267386][ T6914] ? apparmor_capable+0x137/0x1b0 [ 109.267416][ T6914] ? __nla_parse+0x40/0x60 [ 109.267441][ T6914] xfrm_user_rcv_msg+0x7a0/0xab0 [ 109.267473][ T6914] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 109.267538][ T6914] ? __pfx___mutex_trylock_common+0x10/0x10 [ 109.267565][ T6914] ? rcu_is_watching+0x15/0xb0 [ 109.267585][ T6914] ? trace_contention_end+0x39/0x120 [ 109.267606][ T6914] ? __mutex_lock+0x335/0x1350 [ 109.267634][ T6914] netlink_rcv_skb+0x208/0x470 [ 109.267657][ T6914] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 109.267685][ T6914] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 109.267727][ T6914] ? netlink_deliver_tap+0x2e/0x1b0 [ 109.267745][ T6914] ? netlink_deliver_tap+0x2e/0x1b0 [ 109.267767][ T6914] xfrm_netlink_rcv+0x79/0x90 [ 109.267792][ T6914] netlink_unicast+0x82f/0x9e0 [ 109.267828][ T6914] ? __pfx_netlink_unicast+0x10/0x10 [ 109.267859][ T6914] ? netlink_sendmsg+0x642/0xb30 [ 109.267877][ T6914] ? skb_put+0x11b/0x210 [ 109.267902][ T6914] netlink_sendmsg+0x805/0xb30 [ 109.267933][ T6914] ? __pfx_netlink_sendmsg+0x10/0x10 [ 109.267957][ T6914] ? aa_sock_msg_perm+0xf1/0x1d0 [ 109.267979][ T6914] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 109.267999][ T6914] ? __pfx_netlink_sendmsg+0x10/0x10 [ 109.268021][ T6914] __sock_sendmsg+0x21c/0x270 [ 109.268052][ T6914] ____sys_sendmsg+0x505/0x830 [ 109.268082][ T6914] ? __pfx_____sys_sendmsg+0x10/0x10 [ 109.268116][ T6914] ? import_iovec+0x74/0xa0 [ 109.268145][ T6914] ___sys_sendmsg+0x21f/0x2a0 [ 109.268171][ T6914] ? __pfx____sys_sendmsg+0x10/0x10 [ 109.268234][ T6914] ? __fget_files+0x2a/0x420 [ 109.268250][ T6914] ? __fget_files+0x3a0/0x420 [ 109.268278][ T6914] __x64_sys_sendmsg+0x19b/0x260 [ 109.268305][ T6914] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 109.268340][ T6914] ? __pfx_ksys_write+0x10/0x10 [ 109.268362][ T6914] ? rcu_is_watching+0x15/0xb0 [ 109.268386][ T6914] ? do_syscall_64+0xbe/0x3b0 [ 109.268415][ T6914] do_syscall_64+0xfa/0x3b0 [ 109.268432][ T6914] ? lockdep_hardirqs_on+0x9c/0x150 [ 109.268448][ T6914] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.268464][ T6914] ? clear_bhb_loop+0x60/0xb0 [ 109.268486][ T6914] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.268503][ T6914] RIP: 0033:0x7fcd08b8eba9 [ 109.268521][ T6914] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 109.268535][ T6914] RSP: 002b:00007fcd099cf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 109.268553][ T6914] RAX: ffffffffffffffda RBX: 00007fcd08dd5fa0 RCX: 00007fcd08b8eba9 [ 109.268567][ T6914] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 109.268579][ T6914] RBP: 00007fcd099cf090 R08: 0000000000000000 R09: 0000000000000000 [ 109.268590][ T6914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 109.268601][ T6914] R13: 00007fcd08dd6038 R14: 00007fcd08dd5fa0 R15: 00007ffedc7f4868 [ 109.268632][ T6914] [ 109.896174][ T6717] lo speed is unknown, defaulting to 1000 [ 110.136259][ T6932] tipc: Started in network mode [ 110.141757][ T6932] tipc: Node identity 080211000001, cluster identity 4711 [ 110.155088][ T6932] tipc: Enabled bearer , priority 0 [ 110.163649][ T6932] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 110.171325][ T6932] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 110.184527][ T6932] netlink: 24 bytes leftover after parsing attributes in process `syz.2.312'. [ 110.194921][ T6932] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 110.264571][ T6932] tipc: Resetting bearer [ 110.514805][ T6941] macvlan2: entered allmulticast mode [ 110.526442][ T6941] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 110.998147][ T6962] netlink: 60 bytes leftover after parsing attributes in process `syz.3.322'. [ 111.118162][ T6966] netlink: 36 bytes leftover after parsing attributes in process `syz.1.325'. [ 111.273629][ T1210] tipc: Node number set to 134418688 [ 111.333241][ T6974] pimreg: entered allmulticast mode [ 111.365089][ T6973] pimreg: left allmulticast mode [ 111.541618][ T6985] FAULT_INJECTION: forcing a failure. [ 111.541618][ T6985] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 111.568320][ T6985] CPU: 1 UID: 0 PID: 6985 Comm: syz.2.333 Not tainted syzkaller #0 PREEMPT(full) [ 111.568345][ T6985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 111.568356][ T6985] Call Trace: [ 111.568363][ T6985] [ 111.568372][ T6985] dump_stack_lvl+0x189/0x250 [ 111.568398][ T6985] ? __pfx____ratelimit+0x10/0x10 [ 111.568421][ T6985] ? __pfx_dump_stack_lvl+0x10/0x10 [ 111.568440][ T6985] ? __pfx__printk+0x10/0x10 [ 111.568463][ T6985] ? __might_fault+0xb0/0x130 [ 111.568505][ T6985] should_fail_ex+0x414/0x560 [ 111.568536][ T6985] _copy_from_iter+0x1de/0x1790 [ 111.568566][ T6985] ? _copy_from_iter+0x24f/0x1790 [ 111.568591][ T6985] ? __pfx__copy_from_iter+0x10/0x10 [ 111.568611][ T6985] ? sock_alloc_send_pskb+0x875/0x990 [ 111.568643][ T6985] ? __pfx__copy_from_iter+0x10/0x10 [ 111.568685][ T6985] ? page_copy_sane+0x16a/0x280 [ 111.568709][ T6985] copy_page_from_iter+0xdd/0x170 [ 111.568736][ T6985] skb_copy_datagram_from_iter+0x306/0x720 [ 111.568775][ T6985] tun_get_user+0x1691/0x3e20 [ 111.568816][ T6985] ? aa_file_perm+0x44d/0x1550 [ 111.568838][ T6985] ? __pfx_tun_get_user+0x10/0x10 [ 111.568859][ T6985] ? _parse_integer_limit+0x1ae/0x1f0 [ 111.568893][ T6985] ? __lock_acquire+0xab9/0xd20 [ 111.568935][ T6985] ? ref_tracker_alloc+0x318/0x460 [ 111.568952][ T6985] ? __lock_acquire+0xab9/0xd20 [ 111.568988][ T6985] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 111.569021][ T6985] ? tun_get+0x1c/0x2f0 [ 111.569048][ T6985] ? tun_get+0x1c/0x2f0 [ 111.569068][ T6985] ? tun_get+0x1c/0x2f0 [ 111.569094][ T6985] tun_chr_write_iter+0x113/0x200 [ 111.569119][ T6985] vfs_write+0x5c6/0xb30 [ 111.569149][ T6985] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 111.569171][ T6985] ? __pfx_vfs_write+0x10/0x10 [ 111.569203][ T6985] ? __fget_files+0x2a/0x420 [ 111.569227][ T6985] ksys_write+0x145/0x250 [ 111.569253][ T6985] ? __pfx_ksys_write+0x10/0x10 [ 111.569275][ T6985] ? rcu_is_watching+0x15/0xb0 [ 111.569298][ T6985] ? do_syscall_64+0xbe/0x3b0 [ 111.569322][ T6985] do_syscall_64+0xfa/0x3b0 [ 111.569341][ T6985] ? lockdep_hardirqs_on+0x9c/0x150 [ 111.569360][ T6985] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.569378][ T6985] ? clear_bhb_loop+0x60/0xb0 [ 111.569412][ T6985] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.569430][ T6985] RIP: 0033:0x7fcd08b8eba9 [ 111.569447][ T6985] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 111.569463][ T6985] RSP: 002b:00007fcd099cf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 111.569488][ T6985] RAX: ffffffffffffffda RBX: 00007fcd08dd5fa0 RCX: 00007fcd08b8eba9 [ 111.569502][ T6985] RDX: 000000000000fdef RSI: 0000200000000040 RDI: 0000000000000005 [ 111.569515][ T6985] RBP: 00007fcd099cf090 R08: 0000000000000000 R09: 0000000000000000 [ 111.569526][ T6985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 111.569537][ T6985] R13: 00007fcd08dd6038 R14: 00007fcd08dd5fa0 R15: 00007ffedc7f4868 [ 111.569567][ T6985] [ 111.922590][ T6995] netlink: 60 bytes leftover after parsing attributes in process `syz.3.336'. [ 112.127338][ T7003] trusted_key: syz.4.339 sent an empty control message without MSG_MORE. [ 112.296972][ T7014] netlink: 40 bytes leftover after parsing attributes in process `syz.4.339'. [ 113.047297][ T7035] FAULT_INJECTION: forcing a failure. [ 113.047297][ T7035] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 113.071444][ T7035] CPU: 0 UID: 0 PID: 7035 Comm: syz.2.351 Not tainted syzkaller #0 PREEMPT(full) [ 113.071471][ T7035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 113.071482][ T7035] Call Trace: [ 113.071490][ T7035] [ 113.071498][ T7035] dump_stack_lvl+0x189/0x250 [ 113.071526][ T7035] ? __pfx____ratelimit+0x10/0x10 [ 113.071547][ T7035] ? __pfx_dump_stack_lvl+0x10/0x10 [ 113.071570][ T7035] ? __pfx__printk+0x10/0x10 [ 113.071595][ T7035] ? __might_fault+0xb0/0x130 [ 113.071634][ T7035] should_fail_ex+0x414/0x560 [ 113.071668][ T7035] _copy_from_user+0x2d/0xb0 [ 113.071694][ T7035] csum_and_copy_from_iter_full+0x1e1/0x1ed0 [ 113.071741][ T7035] ? __pfx_csum_and_copy_from_iter_full+0x10/0x10 [ 113.071779][ T7035] ? trace_kmalloc+0x1f/0xd0 [ 113.071807][ T7035] ip_generic_getfrag+0x12f/0x2b0 [ 113.071837][ T7035] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 113.071866][ T7035] ? skb_put+0x11b/0x210 [ 113.071891][ T7035] __ip_append_data+0x3260/0x40c0 [ 113.071935][ T7035] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 113.071984][ T7035] ? __pfx___ip_append_data+0x10/0x10 [ 113.072014][ T7035] ? __local_bh_enable_ip+0x12d/0x1c0 [ 113.072034][ T7035] ? lockdep_hardirqs_on+0x9c/0x150 [ 113.072056][ T7035] ip_append_data+0x10e/0x190 [ 113.072084][ T7035] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 113.072112][ T7035] udp_sendmsg+0x541/0x2170 [ 113.072145][ T7035] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 113.072183][ T7035] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 113.072210][ T7035] ? __pfx_udp_sendmsg+0x10/0x10 [ 113.072243][ T7035] ? __lock_acquire+0xab9/0xd20 [ 113.072303][ T7035] ? __pfx_aa_sk_perm+0x10/0x10 [ 113.072329][ T7035] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 113.072358][ T7035] ? __fget_files+0x2a/0x420 [ 113.072373][ T7035] ? sock_rps_record_flow+0x19/0x410 [ 113.072400][ T7035] ? inet_sendmsg+0x29c/0x370 [ 113.072422][ T7035] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 113.072446][ T7035] __sock_sendmsg+0x19c/0x270 [ 113.072476][ T7035] __sys_sendto+0x3bd/0x520 [ 113.072500][ T7035] ? __pfx___sys_sendto+0x10/0x10 [ 113.072516][ T7035] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 113.072548][ T7035] ? __fget_files+0x3a0/0x420 [ 113.072574][ T7035] ? ksys_write+0x22a/0x250 [ 113.072601][ T7035] ? __pfx_ksys_write+0x10/0x10 [ 113.072620][ T7035] ? rcu_is_watching+0x15/0xb0 [ 113.072642][ T7035] __x64_sys_sendto+0xde/0x100 [ 113.072665][ T7035] do_syscall_64+0xfa/0x3b0 [ 113.072685][ T7035] ? lockdep_hardirqs_on+0x9c/0x150 [ 113.072704][ T7035] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.072723][ T7035] ? clear_bhb_loop+0x60/0xb0 [ 113.072746][ T7035] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.072764][ T7035] RIP: 0033:0x7fcd08b8eba9 [ 113.072781][ T7035] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 113.072797][ T7035] RSP: 002b:00007fcd099cf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 113.072815][ T7035] RAX: ffffffffffffffda RBX: 00007fcd08dd5fa0 RCX: 00007fcd08b8eba9 [ 113.072827][ T7035] RDX: 0000000000006200 RSI: 0000200000000c80 RDI: 0000000000000004 [ 113.072838][ T7035] RBP: 00007fcd099cf090 R08: 0000000000000000 R09: 0000000000000000 [ 113.072848][ T7035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 113.072859][ T7035] R13: 00007fcd08dd6038 R14: 00007fcd08dd5fa0 R15: 00007ffedc7f4868 [ 113.072890][ T7035] [ 113.582075][ T7047] netlink: 44 bytes leftover after parsing attributes in process `syz.2.354'. [ 113.639707][ T7047] netlink: 43 bytes leftover after parsing attributes in process `syz.2.354'. [ 113.649083][ T7047] netlink: 'syz.2.354': attribute type 6 has an invalid length. [ 113.657576][ T7047] netlink: 'syz.2.354': attribute type 5 has an invalid length. [ 113.669248][ T7047] netlink: 43 bytes leftover after parsing attributes in process `syz.2.354'. [ 114.271523][ T7078] netlink: 244 bytes leftover after parsing attributes in process `syz.0.365'. [ 114.577122][ T7089] netlink: 4 bytes leftover after parsing attributes in process `syz.0.369'. [ 114.598834][ T7089] bridge_slave_1: left allmulticast mode [ 114.604527][ T7089] bridge_slave_1: left promiscuous mode [ 114.639878][ T7089] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.678550][ T7089] bridge_slave_0: left allmulticast mode [ 114.699630][ T7095] netlink: 52 bytes leftover after parsing attributes in process `syz.4.370'. [ 114.714187][ T7089] bridge_slave_0: left promiscuous mode [ 114.733678][ T7089] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.473818][ T7176] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 116.706580][ T7185] __nla_validate_parse: 3 callbacks suppressed [ 116.706597][ T7185] netlink: 120 bytes leftover after parsing attributes in process `syz.0.398'. [ 116.768670][ T7185] netlink: 36 bytes leftover after parsing attributes in process `syz.0.398'. [ 116.844289][ T7195] netlink: 48 bytes leftover after parsing attributes in process `syz.3.401'. [ 117.012490][ T7202] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 117.105092][ T7205] netlink: 'syz.3.404': attribute type 13 has an invalid length. [ 117.444382][ T7216] syzkaller1: entered promiscuous mode [ 117.489184][ T7216] syzkaller1: entered allmulticast mode [ 117.598156][ T7224] netlink: 44 bytes leftover after parsing attributes in process `syz.3.409'. [ 117.782197][ T7234] FAULT_INJECTION: forcing a failure. [ 117.782197][ T7234] name failslab, interval 1, probability 0, space 0, times 0 [ 117.801477][ T7229] pimreg: entered allmulticast mode [ 117.814775][ T7234] CPU: 0 UID: 0 PID: 7234 Comm: syz.1.415 Not tainted syzkaller #0 PREEMPT(full) [ 117.814803][ T7234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 117.814818][ T7234] Call Trace: [ 117.814825][ T7234] [ 117.814834][ T7234] dump_stack_lvl+0x189/0x250 [ 117.814867][ T7234] ? __pfx____ratelimit+0x10/0x10 [ 117.814888][ T7234] ? __pfx_dump_stack_lvl+0x10/0x10 [ 117.814911][ T7234] ? __pfx__printk+0x10/0x10 [ 117.814943][ T7234] ? __pfx___might_resched+0x10/0x10 [ 117.814966][ T7234] should_fail_ex+0x414/0x560 [ 117.814997][ T7234] should_failslab+0xa8/0x100 [ 117.815024][ T7234] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 117.815049][ T7234] ? __alloc_skb+0x112/0x2d0 [ 117.815068][ T7234] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 117.815094][ T7234] __alloc_skb+0x112/0x2d0 [ 117.815119][ T7234] __ip_append_data+0x2dae/0x40c0 [ 117.815162][ T7234] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 117.815206][ T7234] ? __pfx___ip_append_data+0x10/0x10 [ 117.815230][ T7234] ? ipv4_mtu+0x4b2/0x5c0 [ 117.815257][ T7234] ? ip_setup_cork+0x577/0x9a0 [ 117.815285][ T7234] ip_make_skb+0x1de/0x3f0 [ 117.815317][ T7234] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 117.815343][ T7234] ? __pfx_ip_make_skb+0x10/0x10 [ 117.815389][ T7234] udp_sendmsg+0x1925/0x2170 [ 117.815419][ T7234] ? process_measurement+0x72d/0x1a40 [ 117.815453][ T7234] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 117.815479][ T7234] ? __pfx_udp_sendmsg+0x10/0x10 [ 117.815545][ T7234] ? bpf_bprintf_prepare+0x1282/0x13d0 [ 117.815585][ T7234] udpv6_sendmsg+0xbf0/0x24b0 [ 117.815630][ T7234] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 117.815663][ T7234] ? __pfx___might_resched+0x10/0x10 [ 117.815698][ T7234] ? aa_sk_perm+0x81e/0x950 [ 117.815739][ T7234] ? inet_send_prepare+0x5c/0x270 [ 117.815769][ T7234] ? inet6_sendmsg+0xe4/0x120 [ 117.815794][ T7234] __sock_sendmsg+0xe5/0x270 [ 117.815823][ T7234] sock_write_iter+0x258/0x330 [ 117.815852][ T7234] ? __pfx_sock_write_iter+0x10/0x10 [ 117.815889][ T7234] ? bpf_lsm_file_permission+0x9/0x20 [ 117.815910][ T7234] ? security_file_permission+0x75/0x290 [ 117.815943][ T7234] vfs_write+0x5c6/0xb30 [ 117.815972][ T7234] ? __pfx_sock_write_iter+0x10/0x10 [ 117.815999][ T7234] ? __pfx_vfs_write+0x10/0x10 [ 117.816033][ T7234] ? __fget_files+0x2a/0x420 [ 117.816058][ T7234] ksys_write+0x145/0x250 [ 117.816085][ T7234] ? __pfx_ksys_write+0x10/0x10 [ 117.816106][ T7234] ? rcu_is_watching+0x15/0xb0 [ 117.816130][ T7234] ? do_syscall_64+0xbe/0x3b0 [ 117.816155][ T7234] do_syscall_64+0xfa/0x3b0 [ 117.816173][ T7234] ? lockdep_hardirqs_on+0x9c/0x150 [ 117.816192][ T7234] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.816210][ T7234] ? clear_bhb_loop+0x60/0xb0 [ 117.816232][ T7234] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.816250][ T7234] RIP: 0033:0x7f763b98eba9 [ 117.816276][ T7234] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 117.816292][ T7234] RSP: 002b:00007f763c7c4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 117.816315][ T7234] RAX: ffffffffffffffda RBX: 00007f763bbd5fa0 RCX: 00007f763b98eba9 [ 117.816329][ T7234] RDX: 0000000000003f80 RSI: 0000200000000300 RDI: 0000000000000003 [ 117.816341][ T7234] RBP: 00007f763c7c4090 R08: 0000000000000000 R09: 0000000000000000 [ 117.816352][ T7234] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 117.816363][ T7234] R13: 00007f763bbd6038 R14: 00007f763bbd5fa0 R15: 00007fffdb8691f8 [ 117.816393][ T7234] [ 118.167507][ T7232] netlink: 36 bytes leftover after parsing attributes in process `syz.0.414'. [ 118.190934][ T7228] pimreg: left allmulticast mode [ 118.231486][ T7236] netlink: 'syz.4.416': attribute type 72 has an invalid length. [ 118.444738][ T7250] sctp: [Deprecated]: syz.2.420 (pid 7250) Use of struct sctp_assoc_value in delayed_ack socket option. [ 118.444738][ T7250] Use struct sctp_sack_info instead [ 118.450263][ T7244] netlink: 8 bytes leftover after parsing attributes in process `syz.4.419'. [ 119.023101][ T7278] netlink: 96 bytes leftover after parsing attributes in process `syz.3.429'. [ 119.345193][ T7288] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 119.476788][ T7302] netlink: 72 bytes leftover after parsing attributes in process `syz.3.436'. [ 119.504976][ T7294] FAULT_INJECTION: forcing a failure. [ 119.504976][ T7294] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 119.543676][ T7294] CPU: 1 UID: 0 PID: 7294 Comm: syz.4.435 Not tainted syzkaller #0 PREEMPT(full) [ 119.543702][ T7294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 119.543713][ T7294] Call Trace: [ 119.543720][ T7294] [ 119.543728][ T7294] dump_stack_lvl+0x189/0x250 [ 119.543755][ T7294] ? __pfx____ratelimit+0x10/0x10 [ 119.543775][ T7294] ? __pfx_dump_stack_lvl+0x10/0x10 [ 119.543797][ T7294] ? __pfx__printk+0x10/0x10 [ 119.543822][ T7294] ? __might_fault+0xb0/0x130 [ 119.543859][ T7294] should_fail_ex+0x414/0x560 [ 119.543892][ T7294] _copy_from_user+0x2d/0xb0 [ 119.543918][ T7294] ___sys_sendmsg+0x158/0x2a0 [ 119.543945][ T7294] ? __pfx____sys_sendmsg+0x10/0x10 [ 119.544002][ T7294] ? __fget_files+0x2a/0x420 [ 119.544018][ T7294] ? __fget_files+0x3a0/0x420 [ 119.544043][ T7294] __x64_sys_sendmsg+0x19b/0x260 [ 119.544068][ T7294] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 119.544102][ T7294] ? __pfx_ksys_write+0x10/0x10 [ 119.544125][ T7294] ? rcu_is_watching+0x15/0xb0 [ 119.544148][ T7294] ? do_syscall_64+0xbe/0x3b0 [ 119.544172][ T7294] do_syscall_64+0xfa/0x3b0 [ 119.544191][ T7294] ? lockdep_hardirqs_on+0x9c/0x150 [ 119.544208][ T7294] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.544226][ T7294] ? clear_bhb_loop+0x60/0xb0 [ 119.544244][ T7294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.544257][ T7294] RIP: 0033:0x7f847d58eba9 [ 119.544270][ T7294] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 119.544282][ T7294] RSP: 002b:00007f847e432038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 119.544297][ T7294] RAX: ffffffffffffffda RBX: 00007f847d7d5fa0 RCX: 00007f847d58eba9 [ 119.544307][ T7294] RDX: 0000000020004804 RSI: 0000200000000000 RDI: 0000000000000003 [ 119.544316][ T7294] RBP: 00007f847e432090 R08: 0000000000000000 R09: 0000000000000000 [ 119.544325][ T7294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 119.544333][ T7294] R13: 00007f847d7d6038 R14: 00007f847d7d5fa0 R15: 00007fff9c8444a8 [ 119.544363][ T7294] [ 120.056164][ T7319] netlink: 32 bytes leftover after parsing attributes in process `syz.4.441'. [ 120.310517][ T7333] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) ! [ 120.568580][ T7344] netlink: 4 bytes leftover after parsing attributes in process `syz.1.450'. [ 121.005925][ T7360] : renamed from bridge_slave_0 [ 121.224148][ T7368] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 121.322192][ T7371] team0: No ports can be present during mode change [ 121.590811][ T7388] openvswitch: netlink: EtherType 0 is less than min 600 [ 122.015880][ T7406] __nla_validate_parse: 3 callbacks suppressed [ 122.015900][ T7406] netlink: 8 bytes leftover after parsing attributes in process `syz.4.475'. [ 122.284702][ T7418] tipc: Enabling of bearer rejected, failed to enable media [ 122.302211][ T7418] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 122.460376][ T7426] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xb [ 122.755206][ T7443] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 122.762723][ T7443] IPv6: NLM_F_CREATE should be set when creating new route [ 122.771761][ T7446] netlink: 16 bytes leftover after parsing attributes in process `syz.1.489'. [ 122.782077][ T7448] delete_channel: no stack [ 122.799708][ T7445] netlink: 24 bytes leftover after parsing attributes in process `syz.4.490'. [ 122.817793][ T7443] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 122.833618][ T7448] netlink: 56 bytes leftover after parsing attributes in process `syz.0.492'. [ 123.337720][ T7470] unsupported nlmsg_type 40 [ 123.798798][ T7499] netlink: 8 bytes leftover after parsing attributes in process `syz.4.509'. [ 123.829863][ T7501] netlink: 16 bytes leftover after parsing attributes in process `syz.2.511'. [ 124.391523][ T7532] netlink: 'syz.3.525': attribute type 1 has an invalid length. [ 124.677466][ T7532] netlink: 28 bytes leftover after parsing attributes in process `syz.3.525'. [ 124.728011][ T7537] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 124.751424][ T7537] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 124.833176][ T7544] vlan2: entered allmulticast mode [ 124.880048][ T7544] bridge0: entered allmulticast mode [ 124.903910][ T7544] bridge0: entered promiscuous mode [ 124.934998][ T7544] bridge0: left promiscuous mode [ 124.951395][ T7544] bond1: (slave vlan2): making interface the new active one [ 124.961921][ T7544] bridge0: entered promiscuous mode [ 124.970164][ T7544] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 125.640613][ T7586] tipc: Enabling of bearer rejected, failed to enable media [ 125.670457][ T7589] dvmrp1: entered allmulticast mode [ 125.682413][ T7586] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 125.697276][ T7589] dvmrp1: left allmulticast mode [ 125.728341][ T7592] syzkaller1: entered promiscuous mode [ 125.734135][ T7592] syzkaller1: entered allmulticast mode [ 126.429880][ T7623] netlink: 1044 bytes leftover after parsing attributes in process `syz.2.557'. [ 126.450718][ T7621] tipc: Enabling of bearer rejected, failed to enable media [ 126.461174][ T7621] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 126.693104][ T7634] netlink: 8 bytes leftover after parsing attributes in process `syz.0.561'. [ 126.707091][ T7634] netlink: 20 bytes leftover after parsing attributes in process `syz.0.561'. [ 127.168909][ T7658] netlink: 'syz.2.570': attribute type 10 has an invalid length. [ 127.231979][ T7657] __nla_validate_parse: 1 callbacks suppressed [ 127.231999][ T7657] netlink: 104 bytes leftover after parsing attributes in process `syz.4.572'. [ 127.268220][ T7658] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 127.306493][ T7658] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 127.355224][ T7658] netlink: 'syz.2.570': attribute type 10 has an invalid length. [ 127.394894][ T7658] netlink: 40 bytes leftover after parsing attributes in process `syz.2.570'. [ 127.432339][ T7658] batadv0: entered promiscuous mode [ 127.437586][ T7658] batadv0: entered allmulticast mode [ 127.468043][ T7687] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.576'. [ 127.488226][ T7658] bond0: (slave batadv0): Releasing backup interface [ 127.526303][ T7658] bridge0: port 3(batadv0) entered blocking state [ 127.540646][ T7658] bridge0: port 3(batadv0) entered disabled state [ 127.596287][ T7687] netlink: 48 bytes leftover after parsing attributes in process `syz.0.576'. [ 127.642894][ T7687] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-tlb(5) [ 127.658282][ T36] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 127.668061][ T36] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 127.797796][ T1210] IPVS: starting estimator thread 0... [ 127.839092][ T7710] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.584'. [ 127.878818][ T7708] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.584'. [ 127.925442][ T7705] IPVS: using max 32 ests per chain, 76800 per kthread [ 128.076912][ T7717] netlink: 8 bytes leftover after parsing attributes in process `syz.3.586'. [ 128.170637][ T7723] sch_tbf: burst 4 is lower than device ip6tnl0 mtu (1452) ! [ 128.246389][ T7723] netlink: 'syz.4.588': attribute type 1 has an invalid length. [ 128.586380][ T7750] FAULT_INJECTION: forcing a failure. [ 128.586380][ T7750] name failslab, interval 1, probability 0, space 0, times 0 [ 128.597259][ T7754] netlink: 'syz.4.598': attribute type 1 has an invalid length. [ 128.667023][ T7750] CPU: 0 UID: 0 PID: 7750 Comm: syz.2.597 Not tainted syzkaller #0 PREEMPT(full) [ 128.667049][ T7750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 128.667060][ T7750] Call Trace: [ 128.667068][ T7750] [ 128.667076][ T7750] dump_stack_lvl+0x189/0x250 [ 128.667105][ T7750] ? __pfx____ratelimit+0x10/0x10 [ 128.667125][ T7750] ? __pfx_dump_stack_lvl+0x10/0x10 [ 128.667147][ T7750] ? __pfx__printk+0x10/0x10 [ 128.667176][ T7750] ? __pfx___might_resched+0x10/0x10 [ 128.667195][ T7750] ? fs_reclaim_acquire+0x7d/0x100 [ 128.667218][ T7750] should_fail_ex+0x414/0x560 [ 128.667251][ T7750] should_failslab+0xa8/0x100 [ 128.667280][ T7750] __kmalloc_node_noprof+0xd1/0x4e0 [ 128.667304][ T7750] ? __pfx___up_read+0x10/0x10 [ 128.667324][ T7750] ? crypto_create_tfm_node+0x83/0x3f0 [ 128.667358][ T7750] crypto_create_tfm_node+0x83/0x3f0 [ 128.667389][ T7750] crypto_spawn_tfm2+0x5c/0x90 [ 128.667410][ T7750] aead_init_geniv+0x169/0x240 [ 128.667441][ T7750] crypto_create_tfm_node+0x18c/0x3f0 [ 128.667474][ T7750] crypto_alloc_tfm_node+0x172/0x3f0 [ 128.667509][ T7750] esp6_init_state+0x36b/0x1140 [ 128.667532][ T7750] ? __sock_sendmsg+0x21c/0x270 [ 128.667557][ T7750] ? ____sys_sendmsg+0x505/0x830 [ 128.667578][ T7750] ? ___sys_sendmsg+0x21f/0x2a0 [ 128.667600][ T7750] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.667636][ T7750] ? __pfx_esp6_init_state+0x10/0x10 [ 128.667666][ T7750] ? __lock_acquire+0xab9/0xd20 [ 128.667718][ T7750] ? __xfrm_init_state+0x7ef/0x13f0 [ 128.667751][ T7750] __xfrm_init_state+0xa73/0x13f0 [ 128.667776][ T7750] ? __xfrm_init_state+0x7ef/0x13f0 [ 128.667807][ T7750] xfrm_add_sa+0x2f5b/0x4070 [ 128.667842][ T7750] ? __pfx_xfrm_add_sa+0x10/0x10 [ 128.667864][ T7750] ? apparmor_capable+0x137/0x1b0 [ 128.667892][ T7750] ? __nla_parse+0x40/0x60 [ 128.667917][ T7750] xfrm_user_rcv_msg+0x7a0/0xab0 [ 128.667949][ T7750] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 128.668010][ T7750] ? __pfx___mutex_trylock_common+0x10/0x10 [ 128.668033][ T7750] ? rcu_is_watching+0x15/0xb0 [ 128.668051][ T7750] ? trace_contention_end+0x39/0x120 [ 128.668071][ T7750] ? __mutex_lock+0x335/0x1350 [ 128.668098][ T7750] netlink_rcv_skb+0x208/0x470 [ 128.668119][ T7750] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 128.668146][ T7750] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 128.668177][ T7750] ? netlink_deliver_tap+0x2e/0x1b0 [ 128.668194][ T7750] ? netlink_deliver_tap+0x2e/0x1b0 [ 128.668213][ T7750] xfrm_netlink_rcv+0x79/0x90 [ 128.668237][ T7750] netlink_unicast+0x82f/0x9e0 [ 128.668272][ T7750] ? __pfx_netlink_unicast+0x10/0x10 [ 128.668298][ T7750] ? netlink_sendmsg+0x642/0xb30 [ 128.668314][ T7750] ? skb_put+0x11b/0x210 [ 128.668339][ T7750] netlink_sendmsg+0x805/0xb30 [ 128.668368][ T7750] ? __pfx_netlink_sendmsg+0x10/0x10 [ 128.668390][ T7750] ? aa_sock_msg_perm+0xf1/0x1d0 [ 128.668409][ T7750] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 128.668427][ T7750] ? __pfx_netlink_sendmsg+0x10/0x10 [ 128.668446][ T7750] __sock_sendmsg+0x21c/0x270 [ 128.668475][ T7750] ____sys_sendmsg+0x505/0x830 [ 128.668503][ T7750] ? __pfx_____sys_sendmsg+0x10/0x10 [ 128.668533][ T7750] ? import_iovec+0x74/0xa0 [ 128.668561][ T7750] ___sys_sendmsg+0x21f/0x2a0 [ 128.668587][ T7750] ? __pfx____sys_sendmsg+0x10/0x10 [ 128.668657][ T7750] ? __fget_files+0x2a/0x420 [ 128.668673][ T7750] ? __fget_files+0x3a0/0x420 [ 128.668700][ T7750] __x64_sys_sendmsg+0x19b/0x260 [ 128.668727][ T7750] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 128.668760][ T7750] ? __pfx_ksys_write+0x10/0x10 [ 128.668779][ T7750] ? rcu_is_watching+0x15/0xb0 [ 128.668803][ T7750] ? do_syscall_64+0xbe/0x3b0 [ 128.668825][ T7750] do_syscall_64+0xfa/0x3b0 [ 128.668843][ T7750] ? lockdep_hardirqs_on+0x9c/0x150 [ 128.668861][ T7750] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.668879][ T7750] ? clear_bhb_loop+0x60/0xb0 [ 128.668902][ T7750] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.668920][ T7750] RIP: 0033:0x7fcd08b8eba9 [ 128.668937][ T7750] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.668952][ T7750] RSP: 002b:00007fcd099cf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 128.668972][ T7750] RAX: ffffffffffffffda RBX: 00007fcd08dd5fa0 RCX: 00007fcd08b8eba9 [ 128.668986][ T7750] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000003 [ 128.668998][ T7750] RBP: 00007fcd099cf090 R08: 0000000000000000 R09: 0000000000000000 [ 128.669010][ T7750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 128.669020][ T7750] R13: 00007fcd08dd6038 R14: 00007fcd08dd5fa0 R15: 00007ffedc7f4868 [ 128.669051][ T7750] [ 129.162936][ T7762] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 129.164985][ T7754] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 129.585152][ T7780] netlink: 'syz.4.604': attribute type 1 has an invalid length. [ 129.876359][ T7786] 8021q: adding VLAN 0 to HW filter on device bond2 [ 129.902865][ T7786] bond1: (slave bond2): making interface the new active one [ 129.943077][ T7786] bond1: (slave bond2): Enslaving as an active interface with an up link [ 129.954787][ T7799] veth0_to_bond: entered allmulticast mode [ 130.137979][ T7780] netlink: 24 bytes leftover after parsing attributes in process `syz.4.604'. [ 130.715178][ T7834] netlink: 8 bytes leftover after parsing attributes in process `syz.2.616'. [ 131.162869][ T7860] netlink: 16 bytes leftover after parsing attributes in process `syz.2.625'. [ 131.886694][ T7890] lo speed is unknown, defaulting to 1000 [ 132.473593][ T5982] IPVS: starting estimator thread 0... [ 132.588539][ T7912] IPVS: using max 29 ests per chain, 69600 per kthread [ 132.781988][ T7924] tipc: Enabling of bearer rejected, failed to enable media [ 132.816366][ T7924] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) ! [ 132.908939][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.918671][ T1302] aoe: packet could not be sent on ve. consider increasing tx_queue_len [ 133.063905][ T7934] FAULT_INJECTION: forcing a failure. [ 133.063905][ T7934] name failslab, interval 1, probability 0, space 0, times 0 [ 133.085513][ T7933] __nla_validate_parse: 4 callbacks suppressed [ 133.085532][ T7933] netlink: 12 bytes leftover after parsing attributes in process `syz.0.653'. [ 133.118292][ T7934] CPU: 0 UID: 0 PID: 7934 Comm: syz.1.652 Not tainted syzkaller #0 PREEMPT(full) [ 133.118317][ T7934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 133.118327][ T7934] Call Trace: [ 133.118333][ T7934] [ 133.118341][ T7934] dump_stack_lvl+0x189/0x250 [ 133.118368][ T7934] ? __pfx____ratelimit+0x10/0x10 [ 133.118389][ T7934] ? __pfx_dump_stack_lvl+0x10/0x10 [ 133.118413][ T7934] ? __pfx__printk+0x10/0x10 [ 133.118441][ T7934] ? __pfx___might_resched+0x10/0x10 [ 133.118459][ T7934] ? fs_reclaim_acquire+0x7d/0x100 [ 133.118481][ T7934] should_fail_ex+0x414/0x560 [ 133.118515][ T7934] should_failslab+0xa8/0x100 [ 133.118545][ T7934] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 133.118570][ T7934] ? __alloc_skb+0x112/0x2d0 [ 133.118596][ T7934] __alloc_skb+0x112/0x2d0 [ 133.118621][ T7934] netlink_ack+0x146/0xa50 [ 133.118639][ T7934] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 133.118658][ T7934] ? ref_tracker_free+0x63a/0x7d0 [ 133.118677][ T7934] ? __asan_memcpy+0x40/0x70 [ 133.118699][ T7934] ? __pfx_ref_tracker_free+0x10/0x10 [ 133.118728][ T7934] netlink_rcv_skb+0x28c/0x470 [ 133.118750][ T7934] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 133.118772][ T7934] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 133.118804][ T7934] ? netlink_deliver_tap+0x2e/0x1b0 [ 133.118832][ T7934] netlink_unicast+0x82f/0x9e0 [ 133.118870][ T7934] ? __pfx_netlink_unicast+0x10/0x10 [ 133.118901][ T7934] ? netlink_sendmsg+0x642/0xb30 [ 133.118920][ T7934] ? skb_put+0x11b/0x210 [ 133.118945][ T7934] netlink_sendmsg+0x805/0xb30 [ 133.118976][ T7934] ? __pfx_netlink_sendmsg+0x10/0x10 [ 133.118999][ T7934] ? aa_sock_msg_perm+0xf1/0x1d0 [ 133.119021][ T7934] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 133.119042][ T7934] ? __pfx_netlink_sendmsg+0x10/0x10 [ 133.119063][ T7934] __sock_sendmsg+0x21c/0x270 [ 133.119095][ T7934] ____sys_sendmsg+0x505/0x830 [ 133.119125][ T7934] ? __pfx_____sys_sendmsg+0x10/0x10 [ 133.119158][ T7934] ? import_iovec+0x74/0xa0 [ 133.119187][ T7934] ___sys_sendmsg+0x21f/0x2a0 [ 133.119220][ T7934] ? __pfx____sys_sendmsg+0x10/0x10 [ 133.119281][ T7934] ? __fget_files+0x2a/0x420 [ 133.119297][ T7934] ? __fget_files+0x3a0/0x420 [ 133.119325][ T7934] __x64_sys_sendmsg+0x19b/0x260 [ 133.119352][ T7934] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 133.119387][ T7934] ? __pfx_ksys_write+0x10/0x10 [ 133.119410][ T7934] ? rcu_is_watching+0x15/0xb0 [ 133.119436][ T7934] ? do_syscall_64+0xbe/0x3b0 [ 133.119461][ T7934] do_syscall_64+0xfa/0x3b0 [ 133.119481][ T7934] ? lockdep_hardirqs_on+0x9c/0x150 [ 133.119500][ T7934] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.119519][ T7934] ? clear_bhb_loop+0x60/0xb0 [ 133.119537][ T7934] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.119553][ T7934] RIP: 0033:0x7f763b98eba9 [ 133.119570][ T7934] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 133.119584][ T7934] RSP: 002b:00007f763c7c4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 133.119601][ T7934] RAX: ffffffffffffffda RBX: 00007f763bbd5fa0 RCX: 00007f763b98eba9 [ 133.119613][ T7934] RDX: 0000000004000080 RSI: 0000200000001200 RDI: 0000000000000003 [ 133.119624][ T7934] RBP: 00007f763c7c4090 R08: 0000000000000000 R09: 0000000000000000 [ 133.119634][ T7934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 133.119645][ T7934] R13: 00007f763bbd6038 R14: 00007f763bbd5fa0 R15: 00007fffdb8691f8 [ 133.119673][ T7934] [ 133.486488][ T7937] ------------[ cut here ]------------ [ 133.492276][ T7937] WARNING: CPU: 0 PID: 7937 at net/mac80211/tx.c:6202 ieee80211_tx_skb_tid+0x380/0x420 [ 133.502018][ T7937] Modules linked in: [ 133.506072][ T7937] CPU: 0 UID: 0 PID: 7937 Comm: syz.2.654 Not tainted syzkaller #0 PREEMPT(full) [ 133.515328][ T7937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 133.525533][ T7937] RIP: 0010:ieee80211_tx_skb_tid+0x380/0x420 [ 133.531564][ T7937] Code: cd a3 f6 e9 b1 fe ff ff e8 cd f3 c5 f6 90 0f 0b 90 e9 1f fe ff ff e8 bf f3 c5 f6 90 0f 0b 90 e9 2a fe ff ff e8 b1 f3 c5 f6 90 <0f> 0b 90 e8 58 e2 fd ff 31 ff 48 8b 34 24 ba 02 00 00 00 48 83 c4 [ 133.551246][ T7937] RSP: 0018:ffffc9001b6bf478 EFLAGS: 00010283 [ 133.557329][ T7937] RAX: ffffffff8af9cb4f RBX: ffffffff8af9c7ff RCX: 0000000000080000 [ 133.565337][ T7937] RDX: ffffc9000c35a000 RSI: 00000000000029b8 RDI: 00000000000029b9 [ 133.573340][ T7937] RBP: 00000000ffffffff R08: 0000000000000000 R09: ffffffff8af9c7ff [ 133.581353][ T7937] R10: dffffc0000000000 R11: ffffed100c449876 R12: ffff8880557d8d80 [ 133.589370][ T7937] R13: 0000000000000000 R14: 0000000000000001 R15: dffffc0000000000 [ 133.597355][ T7937] FS: 00007fcd099cf6c0(0000) GS:ffff888125c15000(0000) knlGS:0000000000000000 [ 133.606336][ T7937] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 133.612966][ T7937] CR2: 000000110c25b1da CR3: 0000000062572000 CR4: 00000000003526f0 [ 133.621002][ T7937] Call Trace: [ 133.624293][ T7937] [ 133.627251][ T7937] mesh_plink_frame_tx+0x734/0xc10 [ 133.632435][ T7937] ? __pfx_mesh_plink_frame_tx+0x10/0x10 [ 133.638082][ T7937] ? ieee80211_mps_set_sta_local_pm+0xb1/0x310 [ 133.644314][ T7937] mesh_plink_deactivate+0x18e/0x2f0 [ 133.649655][ T7937] mesh_sta_cleanup+0x42/0x150 [ 133.654450][ T7937] cleanup_single_sta+0x40f/0x660 [ 133.659552][ T7937] __sta_info_flush+0x5e4/0x710 [ 133.664435][ T7937] ? __pfx___sta_info_flush+0x10/0x10 [ 133.669887][ T7937] ieee80211_do_stop+0x399/0x1fb0 [ 133.674934][ T7937] ? __lock_acquire+0xab9/0xd20 [ 133.679876][ T7937] ? do_raw_spin_lock+0x121/0x290 [ 133.684934][ T7937] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 133.690388][ T7937] ? __pfx_ieee80211_do_stop+0x10/0x10 [ 133.695877][ T7937] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 133.701873][ T7937] ? lockdep_hardirqs_on+0x9c/0x150 [ 133.707095][ T7937] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 133.713524][ T7937] ? wiphy_work_cancel+0x1eb/0x3c0 [ 133.718693][ T7937] ieee80211_stop+0x1b1/0x240 [ 133.723391][ T7937] ? __pfx_ieee80211_stop+0x10/0x10 [ 133.728667][ T7937] __dev_close_many+0x364/0x6f0 [ 133.733537][ T7937] ? __pfx___dev_close_many+0x10/0x10 [ 133.738970][ T7937] __dev_change_flags+0x2c7/0x6d0 [ 133.744016][ T7937] ? __pfx___dev_change_flags+0x10/0x10 [ 133.746408][ T7890] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 133.749623][ T7937] ? full_name_hash+0x92/0xe0 [ 133.749678][ T7937] netif_change_flags+0x88/0x1a0 [ 133.749709][ T7937] dev_change_flags+0x130/0x260 [ 133.770474][ T7937] dev_ioctl+0x7b4/0x1150 [ 133.774824][ T7937] sock_do_ioctl+0x22c/0x300 [ 133.779486][ T7937] ? __pfx_sock_do_ioctl+0x10/0x10 [ 133.784621][ T7937] ? __lock_acquire+0xab9/0xd20 [ 133.789567][ T7937] sock_ioctl+0x576/0x790 [ 133.793921][ T7937] ? __pfx_sock_ioctl+0x10/0x10 [ 133.798832][ T7937] ? __fget_files+0x2a/0x420 [ 133.803441][ T7937] ? __fget_files+0x3a0/0x420 [ 133.808139][ T7937] ? __fget_files+0x2a/0x420 [ 133.812800][ T7937] ? bpf_lsm_file_ioctl+0x9/0x20 [ 133.817763][ T7937] ? __pfx_sock_ioctl+0x10/0x10 [ 133.822698][ T7937] __se_sys_ioctl+0xfc/0x170 [ 133.827319][ T7937] do_syscall_64+0xfa/0x3b0 [ 133.831894][ T7937] ? lockdep_hardirqs_on+0x9c/0x150 [ 133.837121][ T7937] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.843271][ T7937] ? clear_bhb_loop+0x60/0xb0 [ 133.847969][ T7937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.853946][ T7937] RIP: 0033:0x7fcd08b8eba9 [ 133.858454][ T7937] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 133.878126][ T7937] RSP: 002b:00007fcd099cf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 133.886624][ T7937] RAX: ffffffffffffffda RBX: 00007fcd08dd5fa0 RCX: 00007fcd08b8eba9 [ 133.894659][ T7937] RDX: 0000200000000380 RSI: 0000000000008914 RDI: 0000000000000005 [ 133.902689][ T7937] RBP: 00007fcd08c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 133.910714][ T7937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 133.918750][ T7937] R13: 00007fcd08dd6038 R14: 00007fcd08dd5fa0 R15: 00007ffedc7f4868 [ 133.926753][ T7937] [ 133.929852][ T7937] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 133.937138][ T7937] CPU: 0 UID: 0 PID: 7937 Comm: syz.2.654 Not tainted syzkaller #0 PREEMPT(full) [ 133.946332][ T7937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 133.956380][ T7937] Call Trace: [ 133.959650][ T7937] [ 133.962573][ T7937] dump_stack_lvl+0x99/0x250 [ 133.967162][ T7937] ? __asan_memcpy+0x40/0x70 [ 133.971744][ T7937] ? __pfx_dump_stack_lvl+0x10/0x10 [ 133.976935][ T7937] ? __pfx__printk+0x10/0x10 [ 133.981536][ T7937] vpanic+0x281/0x750 [ 133.985510][ T7937] ? __pfx__printk+0x10/0x10 [ 133.990100][ T7937] ? __pfx_vpanic+0x10/0x10 [ 133.994600][ T7937] ? is_bpf_text_address+0x292/0x2b0 [ 133.999894][ T7937] panic+0xb9/0xc0 [ 134.003611][ T7937] ? __pfx_panic+0x10/0x10 [ 134.008037][ T7937] __warn+0x31b/0x4b0 [ 134.012010][ T7937] ? ieee80211_tx_skb_tid+0x380/0x420 [ 134.017393][ T7937] ? ieee80211_tx_skb_tid+0x380/0x420 [ 134.022759][ T7937] report_bug+0x2be/0x4f0 [ 134.027083][ T7937] ? ieee80211_tx_skb_tid+0x380/0x420 [ 134.032457][ T7937] ? ieee80211_tx_skb_tid+0x380/0x420 [ 134.037827][ T7937] ? ieee80211_tx_skb_tid+0x382/0x420 [ 134.043211][ T7937] handle_bug+0x84/0x160 [ 134.047451][ T7937] exc_invalid_op+0x1a/0x50 [ 134.051951][ T7937] asm_exc_invalid_op+0x1a/0x20 [ 134.056791][ T7937] RIP: 0010:ieee80211_tx_skb_tid+0x380/0x420 [ 134.062769][ T7937] Code: cd a3 f6 e9 b1 fe ff ff e8 cd f3 c5 f6 90 0f 0b 90 e9 1f fe ff ff e8 bf f3 c5 f6 90 0f 0b 90 e9 2a fe ff ff e8 b1 f3 c5 f6 90 <0f> 0b 90 e8 58 e2 fd ff 31 ff 48 8b 34 24 ba 02 00 00 00 48 83 c4 [ 134.082364][ T7937] RSP: 0018:ffffc9001b6bf478 EFLAGS: 00010283 [ 134.088426][ T7937] RAX: ffffffff8af9cb4f RBX: ffffffff8af9c7ff RCX: 0000000000080000 [ 134.096399][ T7937] RDX: ffffc9000c35a000 RSI: 00000000000029b8 RDI: 00000000000029b9 [ 134.104366][ T7937] RBP: 00000000ffffffff R08: 0000000000000000 R09: ffffffff8af9c7ff [ 134.112332][ T7937] R10: dffffc0000000000 R11: ffffed100c449876 R12: ffff8880557d8d80 [ 134.120296][ T7937] R13: 0000000000000000 R14: 0000000000000001 R15: dffffc0000000000 [ 134.128263][ T7937] ? ieee80211_tx_skb_tid+0x2f/0x420 [ 134.133573][ T7937] ? ieee80211_tx_skb_tid+0x2f/0x420 [ 134.138856][ T7937] ? ieee80211_tx_skb_tid+0x37f/0x420 [ 134.144233][ T7937] ? ieee80211_tx_skb_tid+0x37f/0x420 [ 134.149610][ T7937] mesh_plink_frame_tx+0x734/0xc10 [ 134.154725][ T7937] ? __pfx_mesh_plink_frame_tx+0x10/0x10 [ 134.160348][ T7937] ? ieee80211_mps_set_sta_local_pm+0xb1/0x310 [ 134.166513][ T7937] mesh_plink_deactivate+0x18e/0x2f0 [ 134.171801][ T7937] mesh_sta_cleanup+0x42/0x150 [ 134.176563][ T7937] cleanup_single_sta+0x40f/0x660 [ 134.181590][ T7937] __sta_info_flush+0x5e4/0x710 [ 134.186464][ T7937] ? __pfx___sta_info_flush+0x10/0x10 [ 134.191839][ T7937] ieee80211_do_stop+0x399/0x1fb0 [ 134.196856][ T7937] ? __lock_acquire+0xab9/0xd20 [ 134.201716][ T7937] ? do_raw_spin_lock+0x121/0x290 [ 134.206746][ T7937] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 134.212115][ T7937] ? __pfx_ieee80211_do_stop+0x10/0x10 [ 134.217570][ T7937] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 134.223465][ T7937] ? lockdep_hardirqs_on+0x9c/0x150 [ 134.228656][ T7937] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 134.234985][ T7937] ? wiphy_work_cancel+0x1eb/0x3c0 [ 134.240093][ T7937] ieee80211_stop+0x1b1/0x240 [ 134.244762][ T7937] ? __pfx_ieee80211_stop+0x10/0x10 [ 134.249956][ T7937] __dev_close_many+0x364/0x6f0 [ 134.254810][ T7937] ? __pfx___dev_close_many+0x10/0x10 [ 134.260191][ T7937] __dev_change_flags+0x2c7/0x6d0 [ 134.265215][ T7937] ? __pfx___dev_change_flags+0x10/0x10 [ 134.270755][ T7937] ? full_name_hash+0x92/0xe0 [ 134.275429][ T7937] netif_change_flags+0x88/0x1a0 [ 134.280375][ T7937] dev_change_flags+0x130/0x260 [ 134.285223][ T7937] dev_ioctl+0x7b4/0x1150 [ 134.289551][ T7937] sock_do_ioctl+0x22c/0x300 [ 134.294142][ T7937] ? __pfx_sock_do_ioctl+0x10/0x10 [ 134.299249][ T7937] ? __lock_acquire+0xab9/0xd20 [ 134.304117][ T7937] sock_ioctl+0x576/0x790 [ 134.308452][ T7937] ? __pfx_sock_ioctl+0x10/0x10 [ 134.313307][ T7937] ? __fget_files+0x2a/0x420 [ 134.317887][ T7937] ? __fget_files+0x3a0/0x420 [ 134.322553][ T7937] ? __fget_files+0x2a/0x420 [ 134.327139][ T7937] ? bpf_lsm_file_ioctl+0x9/0x20 [ 134.332077][ T7937] ? __pfx_sock_ioctl+0x10/0x10 [ 134.336933][ T7937] __se_sys_ioctl+0xfc/0x170 [ 134.341523][ T7937] do_syscall_64+0xfa/0x3b0 [ 134.346023][ T7937] ? lockdep_hardirqs_on+0x9c/0x150 [ 134.351238][ T7937] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.357295][ T7937] ? clear_bhb_loop+0x60/0xb0 [ 134.361966][ T7937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.367851][ T7937] RIP: 0033:0x7fcd08b8eba9 [ 134.372256][ T7937] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 134.391848][ T7937] RSP: 002b:00007fcd099cf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 134.400257][ T7937] RAX: ffffffffffffffda RBX: 00007fcd08dd5fa0 RCX: 00007fcd08b8eba9 [ 134.408218][ T7937] RDX: 0000200000000380 RSI: 0000000000008914 RDI: 0000000000000005 [ 134.416181][ T7937] RBP: 00007fcd08c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 134.424148][ T7937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 134.432106][ T7937] R13: 00007fcd08dd6038 R14: 00007fcd08dd5fa0 R15: 00007ffedc7f4868 [ 134.440083][ T7937] [ 134.443337][ T7937] Kernel Offset: disabled [ 134.447646][ T7937] Rebooting in 86400 seconds..