last executing test programs: 2.88081272s ago: executing program 4 (id=665): r0 = socket$inet_tcp(0x2, 0x1, 0x0) close(r0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x800, 0x0, @rand_addr=' \x01\x00', 0x2}, 0x1c) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) 2.408256254s ago: executing program 3 (id=677): socket(0x2, 0xa, 0x300) socket(0x11, 0x3, 0x0) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001400b78727b57000fbdbdf2511"], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) 2.144282063s ago: executing program 3 (id=683): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3f", 0x5) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000100240248ff05000500", 0x2c}, {&(0x7f00000019c0)="06bb", 0x2}], 0x2}, 0x0) 2.062307904s ago: executing program 2 (id=684): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000440)={0x0, @in={{0x2, 0x4e24, @multicast2}}, 0xd, 0x6}, &(0x7f00000001c0)=0x90) 1.937045445s ago: executing program 2 (id=686): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000000c0)={0x48, r1, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_MAX_SP={0x5}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x78e}]}, 0x48}}, 0x4000004) 1.922055946s ago: executing program 4 (id=687): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, 0x0, &(0x7f00000001c0)) 1.874533539s ago: executing program 2 (id=689): r0 = socket$igmp(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000001ec0)={&(0x7f0000000c00)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000001d40)=[{&(0x7f0000000c40)="174f0309acc581c27c0835a541d5ace14751a6fb5991e1eabe613766930c5209d76188595688370a8db8878df98ad326d683f46b7b423a4583c043d396d52fafd67bbd19f7e86b03f0890da3e3e1ac30139e27351572c4c42e96f4dec4c0c9d710f16af63cc306aa379bad5c6e7ef0f71776f0abdddb9ba606e921bcb3ac6bbea2ab3a0823b23088bc5e39310f040dacfd595b4675421c0046d89f2840d233d1034173a0fe91900d926e8d3a481c32b4f6079741d13e2ebb782090c8f38a9daebb1dea84e78c216cd7f9f10bf4b35158e3b36df0c4e9e74b585fc66f7b1fe5305f073f6de409973543e731424ab0605f2f4dfd7efe495ea426a69b13b27b7497895984a1502bac0855ad2bb86e88efdd6c976bbd1cc04dc6b4e8d579f1aecdf38461db91d3661703dec17b9a22d66299cacd23fb463dbb3fd7d59674fa4c5ec8b36422965f55ae455ef5051d029fe657b3f6c79a2bbfe60b0d64870d4ca793ebf5054a40157f0c78c3337cb131700670bc7dfa1cfddb8eb2d85b97c56339f45c4ee490d259121cdccf7be5bbc0ab7a375d931c0365c9809756d4491c866161833663e49a310df546ed841572ca40e40faea56bb05216b3390d807f756db218749a1c9a1ee817b9e5e6a00ca98e185cd6f690cc9e9d1567788e572378f11f688d8133c58b727ae51f95787f7f9952b32ed1494ea7e55f21baea3c9edb8b4523bbef158c8c239d4a54faa5996eb1f3f1c06acf8cd273e298e44b5642b8a50369b152a67932f48bed55c1c01d9a0ad6b2a3540e753c16e3054d483baad028fe42b4e5ebe562b6350c3a093f7456dde046258b8bfe19494d19a66809b612ba8deefea6b7007460ad826313420ac8e3f889da3c9b01a3d1f76acbdafb990fbe8479ded245d750a534e61b6b5fe9914f3760cbe0434f0b1593579f9d124e7c90ef5a50b21aad14ecd0cd712164782cfd329175225d99f90df6d123dde263d9329317f501199ba87458c0ead4baddeef35da92fea8ac878fa84bebfce075cbf56fad7fe823198ef50ce9e24d6c888337cfecb65e6dc7a3bce8f7b2cf734a1bf52cc24b77045e94c39756cb4287777e6f7bdfa19c387565dcb5258c3758a6d8cf94fa2adde5454735f944f6fde3c61376bf65c4c65bf973e1bdcd646b5883098b9f00712ab947b5a45ae1949357a7ef580895e7201e36ae4ab14da32e0a55327d25278d07e102c4e45f6566f5394c2259baa6b5b9511751c35ad74364be8bcfb77b0eb0d3c182dd50ae9fa498d5595bce5201d43acf6411e8e6074bdf001d4e4ddae00133002d9af61c3d9b594a230511c77460e477ab5d9d3d2dbdad6a971c4d4911d877a6d9eae79196e95565994954a3904d473fb369983020b99466c804127e8baf8147b5d228a17608d3ab4c31c6ad03135929e35feb8d166f5f820e40f94dd8102c9ca76ac48c3d668b00ca76cff37dcd35ddbf63b62ecaf7934a8ede4980f3294365ea63f7584373f638134fba55526983dabf2f189c70ddec701b55256d383dd802b4b09b801fb6cbe3408c9eb6d1fd85bf93b60b966680485d4550a3aa3454d888d6f8e81f669d4d87914041ac313e39f0ae29f31dedba1c5964c6729045cbd010e4469a7220335f76983c7d22a53401cb25444b9103643843726bdbb28d4032f9258f8539b9a7dfd6558b2c524d38c9e2e1c23fd7a6a42bf4bb5ebdf0b75ecc547ef15865536ee1de07155bc5e6b5a227c1170a6e4e44991f0685219c417d7194a4cdbce6a1e76f830fdd07887b49a3b648772b6e1b6fda0", 0x4f9}], 0x1, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x12}, @loopback}}}, @ip_retopts={{0x18, 0x0, 0x7, {[@end, @timestamp_prespec={0x44, 0x4, 0x67, 0x3, 0x7}]}}}], 0x38}, 0x4) 1.666770312s ago: executing program 3 (id=690): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @broadcast}, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x6) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x201, 0x0, 0x0) 1.666489705s ago: executing program 2 (id=691): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1, 0x100001, 0x6, 0x5, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340), &(0x7f0000000240), 0x20000402, r0}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r0, &(0x7f0000000340), &(0x7f0000000000)=""/27}, 0x20) 1.666413941s ago: executing program 4 (id=692): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{r0}, &(0x7f0000000080)=0x12000000, &(0x7f00000000c0)='%-010d \x00'}, 0x20) 1.630543507s ago: executing program 3 (id=693): unshare(0x68040200) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x840000000002, 0x3, 0xff) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x1c, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x4}}, 0x1c}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) 1.533029779s ago: executing program 4 (id=695): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r0, &(0x7f00000021c0)='%R>6q', 0x0}, 0x20) 1.487003259s ago: executing program 4 (id=696): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) 1.244606294s ago: executing program 2 (id=699): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'wlan0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x11, 0x8, 0x7, 0x3, 0x4, 0x7, 0x10000, 0x591c, 0x3}}) 1.152592425s ago: executing program 1 (id=701): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x97f, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, &(0x7f00000001c0)) 1.034133455s ago: executing program 2 (id=702): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010029bd7000fbdbdf25ff010000060000800000000000000001fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000fdffffffffffffff000000000000000000000000000000000500000000000000000000000020000000000000000000000000000000000000010002000000000044000500fe800000000000000000000000000044000004d42b0000000a000000e00000010000000000000000000000000000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x24008040}, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r0, &(0x7f0000004d00), 0x7fffffffffffd33, 0x20000890) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) 1.004127292s ago: executing program 1 (id=703): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'dummy0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000091}, 0x0) 664.400522ms ago: executing program 0 (id=704): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r0, &(0x7f0000001040)={0x24, @short={0x2, 0xffff}}, 0x14) 664.190192ms ago: executing program 4 (id=705): r0 = socket(0x200000000000011, 0x2, 0xd) bind$packet(r0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xa2732}], 0x1}, 0x0) 655.709241ms ago: executing program 1 (id=706): bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="60000000020601020000000000000000000000000900020073797a31000000000500010007000000050005000a00000014000780080013400000040008001240fffffffa11000300686173683a6e65742c6e657400000000050004"], 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 546.79763ms ago: executing program 0 (id=707): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x48}}, 0x20008000) 397.436498ms ago: executing program 3 (id=708): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)={0x60, r1, 0x1, 0x70bd2a, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0xc22, @mcast1, 0x3bc9}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x60}}, 0x8000) 332.526709ms ago: executing program 1 (id=709): unshare(0x400) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0700000004000000800000000100000028000000e7c492598c", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x50) 229.429799ms ago: executing program 1 (id=710): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xb, 0x5, 0xc, 0x80000000, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0xacf0}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000280)={r2, r0}, 0x4) 213.406037ms ago: executing program 0 (id=711): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r0, &(0x7f00000021c0), &(0x7f00000022c0)=""/136}, 0x20) 48.210889ms ago: executing program 0 (id=712): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000006040)={0x58, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x2c, 0xc, 0x0, 0x1, [{0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x464d}]}, {0x4}]}]}, 0x58}}, 0x0) 47.941441ms ago: executing program 3 (id=713): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x600, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000004001a80180002"], 0x44}}, 0x0) 47.742648ms ago: executing program 1 (id=714): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 46.273927ms ago: executing program 0 (id=715): r0 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000340)={r0}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000240)={r1}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000040)={r0}) 0s ago: executing program 0 (id=716): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [], {0x14}}, 0x28}}, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000ffdbff253b00000008000300", @ANYRES32=r1, @ANYBLOB="2e003300d0000009ffffffffffff08021100000050505050505020000004"], 0x4c}, 0x1, 0x0, 0x0, 0x68804}, 0x24000846) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.12' (ED25519) to the list of known hosts. [ 65.662540][ T5822] cgroup: Unknown subsys name 'net' [ 65.797861][ T5822] cgroup: Unknown subsys name 'cpuset' [ 65.807437][ T5822] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 67.202216][ T5822] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.381620][ T5841] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 71.407699][ T5845] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 71.408238][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.416911][ T5845] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 71.421701][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.441944][ T5849] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 71.450951][ T5849] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 71.451709][ T5845] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 71.459338][ T5849] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 71.474176][ T5845] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 71.481838][ T5845] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 71.490239][ T5852] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 71.490435][ T5849] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 71.498045][ T5852] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 71.513778][ T5845] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 71.573420][ T5851] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 71.582578][ T5849] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 71.591643][ T5849] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 71.605369][ T5849] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 71.614851][ T5851] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 71.615191][ T5849] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 71.629714][ T5850] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 71.631053][ T5849] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 71.638725][ T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 71.646593][ T5849] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 71.652006][ T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 71.664904][ T5850] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 72.188153][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 72.290527][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 72.336780][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 72.507070][ T5847] chnl_net:caif_netlink_parms(): no params data found [ 72.557868][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.565840][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.573139][ T5832] bridge_slave_0: entered allmulticast mode [ 72.580631][ T5832] bridge_slave_0: entered promiscuous mode [ 72.595176][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 72.609879][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.617054][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.624213][ T5834] bridge_slave_0: entered allmulticast mode [ 72.631381][ T5834] bridge_slave_0: entered promiscuous mode [ 72.639437][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.646658][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.654060][ T5834] bridge_slave_1: entered allmulticast mode [ 72.661204][ T5834] bridge_slave_1: entered promiscuous mode [ 72.668473][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.675776][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.682904][ T5832] bridge_slave_1: entered allmulticast mode [ 72.690442][ T5832] bridge_slave_1: entered promiscuous mode [ 72.821962][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.833836][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.853691][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.861373][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.868683][ T5842] bridge_slave_0: entered allmulticast mode [ 72.875760][ T5842] bridge_slave_0: entered promiscuous mode [ 72.885904][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.897000][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.917887][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.925815][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.932999][ T5842] bridge_slave_1: entered allmulticast mode [ 72.940332][ T5842] bridge_slave_1: entered promiscuous mode [ 73.044142][ T5834] team0: Port device team_slave_0 added [ 73.052196][ T5832] team0: Port device team_slave_0 added [ 73.058257][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.065616][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.072875][ T5847] bridge_slave_0: entered allmulticast mode [ 73.080376][ T5847] bridge_slave_0: entered promiscuous mode [ 73.100480][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.111444][ T5834] team0: Port device team_slave_1 added [ 73.120119][ T5832] team0: Port device team_slave_1 added [ 73.131259][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.138644][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.146076][ T5847] bridge_slave_1: entered allmulticast mode [ 73.153086][ T5847] bridge_slave_1: entered promiscuous mode [ 73.160186][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.167519][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.174831][ T5835] bridge_slave_0: entered allmulticast mode [ 73.181726][ T5835] bridge_slave_0: entered promiscuous mode [ 73.191471][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.246688][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.253825][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.261612][ T5835] bridge_slave_1: entered allmulticast mode [ 73.268598][ T5835] bridge_slave_1: entered promiscuous mode [ 73.298039][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.306001][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.331947][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.373644][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.381094][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.411442][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.423084][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.430197][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.456244][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.469313][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.491907][ T5842] team0: Port device team_slave_0 added [ 73.498338][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.505422][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.531743][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.551488][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.562972][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.572577][ T52] Bluetooth: hci0: command tx timeout [ 73.576227][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.588846][ T5842] team0: Port device team_slave_1 added [ 73.680620][ T5847] team0: Port device team_slave_0 added [ 73.698768][ T5835] team0: Port device team_slave_0 added [ 73.705810][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.712755][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.739669][ T5156] Bluetooth: hci2: command tx timeout [ 73.739726][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.745462][ T5156] Bluetooth: hci1: command tx timeout [ 73.755988][ T5840] Bluetooth: hci4: command tx timeout [ 73.761557][ T52] Bluetooth: hci3: command tx timeout [ 73.781864][ T5847] team0: Port device team_slave_1 added [ 73.800172][ T5835] team0: Port device team_slave_1 added [ 73.806920][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.813861][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.840330][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.856734][ T5832] hsr_slave_0: entered promiscuous mode [ 73.863094][ T5832] hsr_slave_1: entered promiscuous mode [ 73.885518][ T5834] hsr_slave_0: entered promiscuous mode [ 73.891767][ T5834] hsr_slave_1: entered promiscuous mode [ 73.898241][ T5834] debugfs: 'hsr0' already exists in 'hsr' [ 73.904030][ T5834] Cannot create hsr debugfs directory [ 73.940196][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.947378][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.973705][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.997366][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.004739][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.031524][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.044059][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.051638][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.077712][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.102317][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.109312][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.135309][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.246155][ T5842] hsr_slave_0: entered promiscuous mode [ 74.252399][ T5842] hsr_slave_1: entered promiscuous mode [ 74.259127][ T5842] debugfs: 'hsr0' already exists in 'hsr' [ 74.265267][ T5842] Cannot create hsr debugfs directory [ 74.358953][ T5847] hsr_slave_0: entered promiscuous mode [ 74.366683][ T5847] hsr_slave_1: entered promiscuous mode [ 74.372749][ T5847] debugfs: 'hsr0' already exists in 'hsr' [ 74.378521][ T5847] Cannot create hsr debugfs directory [ 74.389670][ T5835] hsr_slave_0: entered promiscuous mode [ 74.396316][ T5835] hsr_slave_1: entered promiscuous mode [ 74.402328][ T5835] debugfs: 'hsr0' already exists in 'hsr' [ 74.408356][ T5835] Cannot create hsr debugfs directory [ 74.816796][ T5834] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 74.835245][ T5834] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 74.856542][ T5834] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 74.867556][ T5834] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 74.909447][ T5842] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 74.929811][ T5842] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 74.955157][ T5842] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 74.979469][ T5842] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 75.026627][ T5832] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 75.038207][ T5832] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 75.058351][ T5832] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 75.082447][ T5832] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 75.186096][ T5847] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 75.201044][ T5847] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 75.221802][ T5847] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 75.245864][ T5847] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 75.284706][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.358969][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.366834][ T5835] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 75.378841][ T5835] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 75.388754][ T5835] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 75.401644][ T5835] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 75.427759][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.435091][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.463423][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.470543][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.503876][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.550828][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.570717][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.577863][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.591003][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.624186][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.631314][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.646374][ T52] Bluetooth: hci0: command tx timeout [ 75.692215][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.737103][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.751328][ T3436] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.758486][ T3436] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.797215][ T3436] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.804397][ T3436] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.820476][ T52] Bluetooth: hci4: command tx timeout [ 75.820537][ T5840] Bluetooth: hci2: command tx timeout [ 75.826434][ T5156] Bluetooth: hci3: command tx timeout [ 75.826462][ T5156] Bluetooth: hci1: command tx timeout [ 75.890577][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.955471][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.969667][ T1333] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.976867][ T1333] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.027456][ T1333] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.034658][ T1333] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.128321][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.180479][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.187668][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.201677][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.228355][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.235555][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.270854][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.456865][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.475232][ T5834] veth0_vlan: entered promiscuous mode [ 76.516723][ T5834] veth1_vlan: entered promiscuous mode [ 76.651693][ T5834] veth0_macvtap: entered promiscuous mode [ 76.708628][ T5834] veth1_macvtap: entered promiscuous mode [ 76.727875][ T5832] veth0_vlan: entered promiscuous mode [ 76.742677][ T5832] veth1_vlan: entered promiscuous mode [ 76.816028][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.848737][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.873589][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.892331][ T3436] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.902247][ T3436] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.920441][ T3436] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.930845][ T3436] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.958915][ T5832] veth0_macvtap: entered promiscuous mode [ 76.995882][ T5832] veth1_macvtap: entered promiscuous mode [ 77.031926][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.076173][ T2977] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.077755][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.084298][ T2977] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.132846][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.142787][ T5842] veth0_vlan: entered promiscuous mode [ 77.182663][ T5847] veth0_vlan: entered promiscuous mode [ 77.189150][ T50] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.202862][ T5842] veth1_vlan: entered promiscuous mode [ 77.210990][ T1333] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.212365][ T50] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.220943][ T1333] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.241744][ T50] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.255526][ T50] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.305134][ T5847] veth1_vlan: entered promiscuous mode [ 77.319072][ T5834] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 77.373740][ T5835] veth0_vlan: entered promiscuous mode [ 77.453023][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.467387][ T5835] veth1_vlan: entered promiscuous mode [ 77.469991][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.509454][ T5842] veth0_macvtap: entered promiscuous mode [ 77.550859][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.563893][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.583133][ T5842] veth1_macvtap: entered promiscuous mode [ 77.596686][ T5847] veth0_macvtap: entered promiscuous mode [ 77.684098][ T5960] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1'. [ 77.709221][ T5847] veth1_macvtap: entered promiscuous mode [ 77.716363][ T5961] netlink: 'syz.1.2': attribute type 15 has an invalid length. [ 77.724044][ T5961] netlink: 666 bytes leftover after parsing attributes in process `syz.1.2'. [ 77.733466][ T5840] Bluetooth: hci0: command tx timeout [ 77.763007][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.771071][ T5835] veth0_macvtap: entered promiscuous mode [ 77.836343][ T5835] veth1_macvtap: entered promiscuous mode [ 77.853422][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.868371][ T5965] Zero length message leads to an empty skb [ 77.884552][ T5840] Bluetooth: hci2: command tx timeout [ 77.907728][ T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.923012][ T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.941219][ T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.956907][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.975473][ T36] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.999998][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.013469][ T5840] Bluetooth: hci4: command tx timeout [ 78.016126][ T52] Bluetooth: hci3: command tx timeout [ 78.024363][ T5841] Bluetooth: hci1: command tx timeout [ 78.051018][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.101132][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.121164][ T3436] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.146044][ T3436] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.177076][ T3436] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.207399][ T3436] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.251979][ T3436] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.270047][ T3436] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.313264][ T3436] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.322841][ T3436] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.432845][ T5972] netlink: 200 bytes leftover after parsing attributes in process `syz.0.7'. [ 78.499959][ T1333] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.519413][ T1333] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.680524][ T3436] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.709460][ T5974] netlink: 76 bytes leftover after parsing attributes in process `syz.0.8'. [ 78.734127][ T3436] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.918285][ T5979] 0: reclassify loop, rule prio 0, protocol 800 [ 78.947068][ T2131] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.965674][ T2131] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.216004][ T3436] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.250000][ T3436] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.366120][ T3904] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.417174][ T3904] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.422529][ T2977] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.444177][ T2977] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.546579][ T5977] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9'. [ 79.760563][ T5989] tipc: Started in network mode [ 79.796167][ T5989] tipc: Node identity 361fcd571d91, cluster identity 4711 [ 79.803557][ T5989] tipc: Enabled bearer , priority 0 [ 79.822933][ T52] Bluetooth: hci0: command tx timeout [ 79.919019][ T5988] tipc: Disabling bearer [ 79.964441][ T52] Bluetooth: hci2: command tx timeout [ 80.044652][ T5841] Bluetooth: hci1: command tx timeout [ 80.048298][ T5840] Bluetooth: hci4: command tx timeout [ 80.055558][ T52] Bluetooth: hci3: command tx timeout [ 80.168905][ T6009] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 80.210085][ T5997] pim6reg1: entered promiscuous mode [ 80.275701][ T5997] pim6reg1: entered allmulticast mode [ 80.600272][ T6019] syz.1.16 uses obsolete (PF_INET,SOCK_PACKET) [ 80.724990][ T5995] delete_channel: no stack [ 80.739182][ T1210] cfg80211: failed to load regulatory.db [ 80.862933][ T6028] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 80.944473][ T6028] netlink: 'syz.3.19': attribute type 29 has an invalid length. [ 80.953790][ T6031] netlink: 12 bytes leftover after parsing attributes in process `syz.0.21'. [ 80.982446][ T6034] Bluetooth: MGMT ver 1.23 [ 81.230408][ T6045] netlink: 20 bytes leftover after parsing attributes in process `syz.2.26'. [ 81.232578][ T6044] ieee802154 phy0 wpan0: encryption failed: -90 [ 81.268624][ T6045] --map-set only usable from mangle table [ 81.291745][ T6048] Driver unsupported XDP return value 0 on prog (id 12) dev N/A, expect packet loss! [ 81.462758][ T6057] netlink: 132 bytes leftover after parsing attributes in process `syz.4.29'. [ 81.723016][ T6063] batadv1: entered promiscuous mode [ 82.033949][ T6078] syz.4.36 (6078) used greatest stack depth: 18240 bytes left [ 82.128181][ T6086] netlink: 'syz.2.40': attribute type 6 has an invalid length. [ 82.155683][ T6086] netlink: 176 bytes leftover after parsing attributes in process `syz.2.40'. [ 82.277838][ T6092] sctp: [Deprecated]: syz.4.39 (pid 6092) Use of int in max_burst socket option deprecated. [ 82.277838][ T6092] Use struct sctp_assoc_value instead [ 82.300700][ T6086] team0: Device ip6tnl2 is of different type [ 82.344331][ T6093] sctp: [Deprecated]: syz.4.39 (pid 6093) Use of int in max_burst socket option deprecated. [ 82.344331][ T6093] Use struct sctp_assoc_value instead [ 82.412233][ T6099] netlink: 12 bytes leftover after parsing attributes in process `syz.2.40'. [ 82.479648][ T6100] syzkaller0: entered promiscuous mode [ 82.488315][ T6100] syzkaller0: entered allmulticast mode [ 82.663828][ T2131] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.703226][ T2131] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.740016][ T2131] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.759770][ T2131] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.001285][ T6120] __nla_validate_parse: 1 callbacks suppressed [ 83.001304][ T6120] netlink: 4 bytes leftover after parsing attributes in process `syz.1.50'. [ 83.069662][ T6123] netlink: 32 bytes leftover after parsing attributes in process `syz.0.51'. [ 83.092302][ T6121] tipc: Started in network mode [ 83.093972][ T6123] netlink: 28 bytes leftover after parsing attributes in process `syz.0.51'. [ 83.098202][ T6121] tipc: Node identity c28112979122, cluster identity 4711 [ 83.129261][ T6121] tipc: Enabled bearer , priority 0 [ 83.189589][ T6131] xt_TCPMSS: Only works on TCP SYN packets [ 83.254233][ T6129] syzkaller0: entered promiscuous mode [ 83.260346][ T6129] syzkaller0: entered allmulticast mode [ 83.267029][ T6129] tipc: Resetting bearer [ 83.321731][ T6138] netlink: 'syz.1.55': attribute type 4 has an invalid length. [ 83.448113][ T6146] warning: `syz.2.58' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 83.595463][ T6148] workqueue: name exceeds WQ_NAME_LEN. Truncating to: . ΁ *] [ 83.611418][ T6154] netlink: 12 bytes leftover after parsing attributes in process `syz.4.52'. [ 83.734162][ T6136] tipc: Resetting bearer [ 83.776385][ T6117] tipc: Resetting bearer [ 83.982206][ T6166] netlink: 'syz.2.62': attribute type 10 has an invalid length. [ 84.905699][ T6117] tipc: Disabling bearer [ 84.939841][ T6166] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.949809][ T6166] bond0: (slave team0): Enslaving as an active interface with an up link [ 84.959944][ T5954] tipc: Node number set to 1403196055 [ 85.208591][ T6188] netlink: 20 bytes leftover after parsing attributes in process `syz.2.69'. [ 85.229891][ T6188] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 85.283467][ T6190] netlink: 48 bytes leftover after parsing attributes in process `syz.3.67'. [ 85.578268][ T6206] IPVS: set_ctl: invalid protocol: 60 224.0.0.1:20000 [ 87.471251][ T6267] IPVS: set_ctl: invalid protocol: 44 172.20.20.40:20004 [ 87.558631][ T6269] netlink: 24 bytes leftover after parsing attributes in process `syz.3.85'. [ 87.841453][ T6276] xt_TCPMSS: Only works on TCP SYN packets [ 88.062403][ T6280] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 88.106756][ T6280] bond1: (slave lo): speed changed to 0 on port 1 [ 88.117634][ T6280] bond1: (slave lo): Enslaving as a backup interface with an up link [ 88.130604][ T6280] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 88.634230][ T6299] xt_connbytes: Forcing CT accounting to be enabled [ 88.763965][ T6301] bond0: (slave wg0): Error: Device can not be enslaved while up [ 88.867078][ T6317] RDS: rds_bind could not find a transport for fe88::102, load rds_tcp or rds_rdma? [ 88.908506][ T6317] tipc: Enabling of bearer rejected, failed to enable media [ 88.937561][ T6317] netlink: 12 bytes leftover after parsing attributes in process `syz.1.97'. [ 88.971613][ T6317] netlink: 4 bytes leftover after parsing attributes in process `syz.1.97'. [ 88.981453][ T6319] netlink: 'syz.3.98': attribute type 10 has an invalid length. [ 89.155839][ T6319] team0: Port device netdevsim0 added [ 89.203079][ T6338] netlink: 56 bytes leftover after parsing attributes in process `syz.1.102'. [ 89.437854][ T6348] netlink: 'syz.4.106': attribute type 33 has an invalid length. [ 89.465708][ T6348] netlink: 152 bytes leftover after parsing attributes in process `syz.4.106'. [ 89.641766][ T6358] batadv1: entered promiscuous mode [ 89.753926][ T6366] netlink: 32 bytes leftover after parsing attributes in process `syz.2.110'. [ 89.816278][ T6368] x_tables: duplicate underflow at hook 2 [ 90.390449][ T6377] geneve2: entered promiscuous mode [ 90.515687][ T6381] netlink: 'syz.2.114': attribute type 10 has an invalid length. [ 90.524894][ T6381] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.533171][ T6381] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.627125][ T6381] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.634388][ T6381] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.642787][ T6381] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.650029][ T6381] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.706215][ T6381] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 91.210322][ T6417] team_slave_0: entered promiscuous mode [ 91.216214][ T6417] team_slave_1: entered promiscuous mode [ 91.221936][ T6417] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 91.278407][ T6417] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 91.674995][ T6440] openvswitch: netlink: IP tunnel TTL not specified. [ 92.803397][ T6450] netlink: 'syz.0.136': attribute type 3 has an invalid length. [ 92.811549][ T6450] netlink: 'syz.0.136': attribute type 1 has an invalid length. [ 92.819706][ T6450] netlink: 224 bytes leftover after parsing attributes in process `syz.0.136'. [ 93.844909][ T6467] netlink: 'syz.3.141': attribute type 1 has an invalid length. [ 93.860981][ T6470] netlink: 4 bytes leftover after parsing attributes in process `syz.3.141'. [ 94.002663][ T6470] veth1_macvtap: left promiscuous mode [ 94.114025][ T6481] vet0_virt_wif: renamed from lo (while UP) [ 94.246856][ T6314] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 94.292133][ T6314] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 94.321345][ T6314] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 94.364938][ T6314] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 94.602215][ T6505] netlink: 4 bytes leftover after parsing attributes in process `syz.0.150'. [ 94.760892][ T6507] netlink: 8 bytes leftover after parsing attributes in process `syz.4.151'. [ 95.017547][ T6519] netlink: 'syz.4.157': attribute type 1 has an invalid length. [ 95.045575][ T6519] netlink: 'syz.4.157': attribute type 2 has an invalid length. [ 95.080705][ T6519] sctp: [Deprecated]: syz.4.157 (pid 6519) Use of struct sctp_assoc_value in delayed_ack socket option. [ 95.080705][ T6519] Use struct sctp_sack_info instead [ 95.165560][ T6529] netlink: 'syz.0.160': attribute type 4 has an invalid length. [ 95.179137][ T6529] netlink: 17 bytes leftover after parsing attributes in process `syz.0.160'. [ 95.559708][ T6544] netlink: 28 bytes leftover after parsing attributes in process `syz.1.164'. [ 95.600555][ T6543] delete_channel: no stack [ 95.958457][ T6569] netlink: 4 bytes leftover after parsing attributes in process `syz.2.170'. [ 96.292740][ T6576] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 96.552926][ T6593] netlink: 144 bytes leftover after parsing attributes in process `syz.4.174'. [ 96.916542][ T6604] netlink: 24 bytes leftover after parsing attributes in process `syz.0.179'. [ 97.041315][ T6606] netlink: 36 bytes leftover after parsing attributes in process `syz.0.179'. [ 97.063686][ T6607] netlink: 'syz.4.180': attribute type 1 has an invalid length. [ 97.145562][ T6607] 8021q: adding VLAN 0 to HW filter on device bond1 [ 97.161307][ T6613] ieee802154 phy0 wpan0: encryption failed: -22 [ 97.169077][ T6613] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 97.180834][ T6607] netlink: 12 bytes leftover after parsing attributes in process `syz.4.180'. [ 97.192301][ T6613] openvswitch: netlink: Message has 1 unknown bytes. [ 97.202740][ T6613] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 97.232150][ T6611] bond1: (slave geneve3): making interface the new active one [ 97.267948][ T6611] bond1: (slave geneve3): Enslaving as an active interface with an up link [ 97.580948][ T6629] netlink: 132 bytes leftover after parsing attributes in process `syz.1.184'. [ 97.593005][ T6629] tipc: Can't bind to reserved service type 0 [ 97.803368][ T6638] erspan0: entered promiscuous mode [ 97.830922][ T6638] macvtap1: entered promiscuous mode [ 97.837022][ T6638] macvtap1: entered allmulticast mode [ 97.842498][ T6638] erspan0: entered allmulticast mode [ 97.854140][ T6645] netlink: 'syz.3.190': attribute type 5 has an invalid length. [ 97.874479][ T6645] erspan0: left allmulticast mode [ 97.891163][ T6645] erspan0: left promiscuous mode [ 98.341563][ T6665] lo speed is unknown, defaulting to 1000 [ 98.397093][ T6667] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 98.414457][ T6667] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.444312][ T6665] lo speed is unknown, defaulting to 1000 [ 98.448807][ T6675] sch_tbf: burst 2 is lower than device dummy0 mtu (1514) ! [ 98.464072][ T6665] lo speed is unknown, defaulting to 1000 [ 98.506089][ T6665] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 98.583837][ T6665] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 98.610317][ T6667] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 98.621228][ T6667] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.656695][ T6682] openvswitch: netlink: Key 6 has unexpected len 80 expected 2 [ 98.693190][ T6665] lo speed is unknown, defaulting to 1000 [ 98.762064][ T6667] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 98.783075][ T6667] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.803245][ T6665] lo speed is unknown, defaulting to 1000 [ 98.816437][ T6665] lo speed is unknown, defaulting to 1000 [ 98.828971][ T6665] lo speed is unknown, defaulting to 1000 [ 98.875148][ T6667] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 98.888423][ T6667] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.929048][ T6665] lo speed is unknown, defaulting to 1000 [ 99.122144][ T2977] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.138978][ T2977] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.184328][ T2977] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.208022][ T2977] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.514099][ T13] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.532628][ T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.616110][ T1308] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.643002][ T1308] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.946852][ T6729] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 99.966104][ T6729] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.160737][ T6729] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 100.176311][ T6729] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.236102][ T6738] lo speed is unknown, defaulting to 1000 [ 100.326528][ T6729] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 100.336756][ T6729] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.361444][ T6751] atomic_op ffff8880513cb198 conn xmit_atomic 0000000000000000 [ 100.416162][ T6729] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 100.469536][ T6729] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.690177][ T6759] __nla_validate_parse: 3 callbacks suppressed [ 100.690195][ T6759] netlink: 32 bytes leftover after parsing attributes in process `syz.0.220'. [ 100.823529][ T6768] netlink: 'syz.3.225': attribute type 15 has an invalid length. [ 101.107190][ T6784] netlink: 'syz.0.231': attribute type 10 has an invalid length. [ 101.155935][ T6784] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.207416][ T6784] bond0: (slave team0): Enslaving as an active interface with an up link [ 101.418872][ T6801] netem: incorrect ge model size [ 101.438862][ T6801] netem: change failed [ 101.549730][ T6807] ip6gre1: entered promiscuous mode [ 101.726411][ T6811] geneve2: entered promiscuous mode [ 101.749540][ T6814] xt_hashlimit: size too large, truncated to 1048576 [ 101.765501][ T6814] xt_hashlimit: max too large, truncated to 1048576 [ 101.785502][ T6817] lo speed is unknown, defaulting to 1000 [ 102.307974][ T6839] sctp: [Deprecated]: syz.3.253 (pid 6839) Use of struct sctp_assoc_value in delayed_ack socket option. [ 102.307974][ T6839] Use struct sctp_sack_info instead [ 102.484942][ T6849] tipc: Started in network mode [ 102.490138][ T6849] tipc: Node identity a672e27a8d65, cluster identity 4711 [ 102.497938][ T6849] tipc: Enabled bearer , priority 0 [ 102.512435][ T6830] netlink: 32 bytes leftover after parsing attributes in process `syz.2.243'. [ 102.522921][ T6850] syzkaller0: entered promiscuous mode [ 102.537217][ T6850] syzkaller0: entered allmulticast mode [ 102.634639][ T6852] lo speed is unknown, defaulting to 1000 [ 102.645761][ T6855] netlink: 'syz.3.255': attribute type 8 has an invalid length. [ 102.727120][ T6858] tipc: Enabled bearer , priority 0 [ 102.735074][ T6858] syzkaller0: entered promiscuous mode [ 102.740570][ T6858] syzkaller0: entered allmulticast mode [ 102.772790][ T6858] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 102.897628][ T6855] lo speed is unknown, defaulting to 1000 [ 102.909569][ T6858] tipc: Resetting bearer [ 102.968928][ T6858] tipc: Disabling bearer [ 103.126681][ T4389] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.139229][ T4389] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.244136][ T2968] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.277415][ T2968] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.370046][ T2977] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.387369][ T2977] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.556447][ T6881] netlink: 428 bytes leftover after parsing attributes in process `syz.3.261'. [ 103.565704][ T6883] netlink: 428 bytes leftover after parsing attributes in process `syz.3.261'. [ 103.619192][ T2977] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.632637][ T2977] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.642997][ T6883] netlink: 32 bytes leftover after parsing attributes in process `syz.3.261'. [ 103.659598][ T6881] netlink: 32 bytes leftover after parsing attributes in process `syz.3.261'. [ 103.659647][ T6882] vlan0: entered promiscuous mode [ 103.735355][ T5954] tipc: Node number set to 722985594 [ 104.025159][ T6893] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.510199][ T6893] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.533871][ T6923] netlink: 4 bytes leftover after parsing attributes in process `syz.2.274'. [ 104.751057][ T6893] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.947685][ T6893] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.330663][ T6314] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.377432][ T6314] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.420807][ T6314] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.460681][ T6314] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.593001][ T6949] netlink: 8 bytes leftover after parsing attributes in process `syz.0.284'. [ 106.118595][ T6962] lo speed is unknown, defaulting to 1000 [ 107.830881][ T7000] netlink: 'syz.0.299': attribute type 11 has an invalid length. [ 108.023140][ T7010] netlink: 111 bytes leftover after parsing attributes in process `syz.2.301'. [ 108.064410][ T7010] netlink: 44 bytes leftover after parsing attributes in process `syz.2.301'. [ 108.073665][ T7012] netlink: 364 bytes leftover after parsing attributes in process `syz.3.303'. [ 108.108318][ T7007] netlink: 28 bytes leftover after parsing attributes in process `syz.2.301'. [ 108.559785][ T7028] nbd: couldn't find device at index 536870912 [ 108.570112][ T7028] batman_adv: batadv0: Adding interface: dummy0 [ 108.576704][ T7028] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 108.660178][ T7028] batman_adv: batadv0: Interface activated: dummy0 [ 108.725080][ T7032] batadv0: mtu less than device minimum [ 108.732801][ T7032] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 108.744824][ T7032] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 108.756726][ T7032] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 108.768529][ T7032] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 108.780357][ T7032] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 108.792141][ T7032] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 108.804035][ T7032] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 108.815900][ T7032] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 108.827727][ T7032] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 108.901781][ T7031] lo speed is unknown, defaulting to 1000 [ 109.221730][ T7052] netlink: 'syz.0.315': attribute type 21 has an invalid length. [ 109.244798][ T7052] netlink: 128 bytes leftover after parsing attributes in process `syz.0.315'. [ 109.276412][ T7052] netlink: 'syz.0.315': attribute type 5 has an invalid length. [ 109.333019][ T7052] netlink: 'syz.0.315': attribute type 6 has an invalid length. [ 109.351037][ T7052] netlink: 3 bytes leftover after parsing attributes in process `syz.0.315'. [ 110.146345][ T7078] FAULT_INJECTION: forcing a failure. [ 110.146345][ T7078] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 110.146386][ T7076] netlink: 4 bytes leftover after parsing attributes in process `syz.2.324'. [ 110.188411][ T7078] CPU: 0 UID: 0 PID: 7078 Comm: syz.0.323 Not tainted syzkaller #0 PREEMPT(full) [ 110.188436][ T7078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 110.188453][ T7078] Call Trace: [ 110.188463][ T7078] [ 110.188472][ T7078] dump_stack_lvl+0x189/0x250 [ 110.188503][ T7078] ? __pfx____ratelimit+0x10/0x10 [ 110.188525][ T7078] ? __pfx_dump_stack_lvl+0x10/0x10 [ 110.188543][ T7078] ? __pfx__printk+0x10/0x10 [ 110.188576][ T7078] should_fail_ex+0x414/0x560 [ 110.188602][ T7078] _copy_to_user+0x31/0xb0 [ 110.188627][ T7078] simple_read_from_buffer+0xe1/0x170 [ 110.188656][ T7078] proc_fail_nth_read+0x1b3/0x220 [ 110.188681][ T7078] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 110.188704][ T7078] ? rw_verify_area+0x2a6/0x4d0 [ 110.188724][ T7078] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 110.188747][ T7078] vfs_read+0x200/0xa30 [ 110.188767][ T7078] ? fdget_pos+0x247/0x320 [ 110.188787][ T7078] ? __pfx___mutex_lock+0x10/0x10 [ 110.188809][ T7078] ? __pfx_vfs_read+0x10/0x10 [ 110.188829][ T7078] ? __fget_files+0x2a/0x420 [ 110.188849][ T7078] ? __fget_files+0x3a0/0x420 [ 110.188863][ T7078] ? __fget_files+0x2a/0x420 [ 110.188888][ T7078] ksys_read+0x145/0x250 [ 110.188911][ T7078] ? __pfx_ksys_read+0x10/0x10 [ 110.188940][ T7078] ? do_syscall_64+0xbe/0xf80 [ 110.188965][ T7078] do_syscall_64+0xfa/0xf80 [ 110.188987][ T7078] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.189003][ T7078] ? clear_bhb_loop+0x60/0xb0 [ 110.189024][ T7078] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.189056][ T7078] RIP: 0033:0x7f6f1eb8e15c [ 110.189076][ T7078] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 110.189091][ T7078] RSP: 002b:00007f6f1fa5d030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 110.189109][ T7078] RAX: ffffffffffffffda RBX: 00007f6f1ede5fa0 RCX: 00007f6f1eb8e15c [ 110.189121][ T7078] RDX: 000000000000000f RSI: 00007f6f1fa5d0a0 RDI: 0000000000000004 [ 110.189131][ T7078] RBP: 00007f6f1fa5d090 R08: 0000000000000000 R09: 0000000000000000 [ 110.189140][ T7078] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 110.189149][ T7078] R13: 00007f6f1ede6038 R14: 00007f6f1ede5fa0 R15: 00007ffec56ef178 [ 110.189179][ T7078] [ 110.671722][ T7076] bond0: (slave bond_slave_1): Releasing backup interface [ 111.330267][ T7111] netlink: 'syz.1.335': attribute type 23 has an invalid length. [ 111.393159][ T7111] netlink: 8 bytes leftover after parsing attributes in process `syz.1.335'. [ 111.407190][ T7117] netlink: 211792 bytes leftover after parsing attributes in process `syz.2.333'. [ 111.757086][ T7132] netlink: 4 bytes leftover after parsing attributes in process `syz.0.336'. [ 111.787522][ T7131] syz.2.338 (7131) used greatest stack depth: 17656 bytes left [ 111.972676][ T7136] lo speed is unknown, defaulting to 1000 [ 112.582167][ T6850] tipc: Resetting bearer [ 112.812441][ T6850] tipc: Disabling bearer [ 113.538931][ T7175] netlink: 'syz.3.351': attribute type 1 has an invalid length. [ 113.584029][ T7175] netlink: 244 bytes leftover after parsing attributes in process `syz.3.351'. [ 113.812243][ T7192] netlink: 12 bytes leftover after parsing attributes in process `syz.1.356'. [ 113.919300][ T7192] lo speed is unknown, defaulting to 1000 [ 113.933949][ T7195] syzkaller0: entered promiscuous mode [ 113.948639][ T7195] syzkaller0: entered allmulticast mode [ 114.035688][ T7200] netlink: 4 bytes leftover after parsing attributes in process `syz.1.356'. [ 114.167123][ T7196] lo speed is unknown, defaulting to 1000 [ 114.230269][ T7191] syzkaller0: entered promiscuous mode [ 114.236113][ T7191] syzkaller0: entered allmulticast mode [ 114.563836][ T7226] netlink: 4 bytes leftover after parsing attributes in process `syz.3.363'. [ 114.643409][ T7229] can: request_module (can-proto-0) failed. [ 115.075651][ T9] net_ratelimit: 13 callbacks suppressed [ 115.075670][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.282202][ T7268] netlink: 16 bytes leftover after parsing attributes in process `syz.1.376'. [ 115.333419][ T7270] netlink: 8 bytes leftover after parsing attributes in process `syz.2.377'. [ 115.377847][ T7273] netlink: 104 bytes leftover after parsing attributes in process `syz.0.378'. [ 115.430518][ T52] block nbd0: Receive control failed (result -32) [ 115.606738][ T7286] FAULT_INJECTION: forcing a failure. [ 115.606738][ T7286] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 115.657588][ T7284] netlink: 8 bytes leftover after parsing attributes in process `syz.4.381'. [ 115.665636][ T7286] CPU: 0 UID: 0 PID: 7286 Comm: syz.2.379 Not tainted syzkaller #0 PREEMPT(full) [ 115.665660][ T7286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 115.665670][ T7286] Call Trace: [ 115.665678][ T7286] [ 115.665685][ T7286] dump_stack_lvl+0x189/0x250 [ 115.665709][ T7286] ? __pfx____ratelimit+0x10/0x10 [ 115.665728][ T7286] ? __pfx_dump_stack_lvl+0x10/0x10 [ 115.665745][ T7286] ? __pfx__printk+0x10/0x10 [ 115.665767][ T7286] ? __might_fault+0xb0/0x130 [ 115.665797][ T7286] should_fail_ex+0x414/0x560 [ 115.665820][ T7286] _copy_from_user+0x2d/0xb0 [ 115.665843][ T7286] ___sys_sendmsg+0x158/0x2a0 [ 115.665870][ T7286] ? __pfx____sys_sendmsg+0x10/0x10 [ 115.665899][ T7286] ? rcu_read_lock_any_held+0xb3/0x120 [ 115.665945][ T7286] ? __fget_files+0x2a/0x420 [ 115.665959][ T7286] ? __fget_files+0x3a0/0x420 [ 115.665983][ T7286] __x64_sys_sendmsg+0x19b/0x260 [ 115.666009][ T7286] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 115.666042][ T7286] ? rcu_is_watching+0x15/0xb0 [ 115.666069][ T7286] do_syscall_64+0xfa/0xf80 [ 115.666090][ T7286] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.666105][ T7286] ? clear_bhb_loop+0x60/0xb0 [ 115.666124][ T7286] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.666139][ T7286] RIP: 0033:0x7ff52538f749 [ 115.666153][ T7286] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 115.666170][ T7286] RSP: 002b:00007ff5235f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 115.666187][ T7286] RAX: ffffffffffffffda RBX: 00007ff5255e5fa0 RCX: 00007ff52538f749 [ 115.666199][ T7286] RDX: 0000000000040000 RSI: 00002000000004c0 RDI: 0000000000000003 [ 115.666209][ T7286] RBP: 00007ff5235f6090 R08: 0000000000000000 R09: 0000000000000000 [ 115.666218][ T7286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 115.666227][ T7286] R13: 00007ff5255e6038 R14: 00007ff5255e5fa0 R15: 00007fff2a0021b8 [ 115.666257][ T7286] [ 115.886532][ T52] Bluetooth: hci0: command tx timeout [ 116.026050][ T7301] netlink: 12 bytes leftover after parsing attributes in process `syz.2.386'. [ 116.183830][ T7301] netlink: 72 bytes leftover after parsing attributes in process `syz.2.386'. [ 116.194103][ T7308] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.202639][ T7308] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.224525][ T5954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.484849][ T7319] dvmrp1: entered allmulticast mode [ 116.510685][ T7317] dvmrp1: left allmulticast mode [ 116.604637][ T52] Bluetooth: hci4: command 0x0405 tx timeout [ 116.629335][ T7330] FAULT_INJECTION: forcing a failure. [ 116.629335][ T7330] name failslab, interval 1, probability 0, space 0, times 0 [ 116.685378][ T7330] CPU: 1 UID: 0 PID: 7330 Comm: syz.4.396 Not tainted syzkaller #0 PREEMPT(full) [ 116.685401][ T7330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 116.685410][ T7330] Call Trace: [ 116.685417][ T7330] [ 116.685423][ T7330] dump_stack_lvl+0x189/0x250 [ 116.685445][ T7330] ? __pfx____ratelimit+0x10/0x10 [ 116.685463][ T7330] ? __pfx_dump_stack_lvl+0x10/0x10 [ 116.685478][ T7330] ? __pfx__printk+0x10/0x10 [ 116.685501][ T7330] ? __pfx___might_resched+0x10/0x10 [ 116.685517][ T7330] ? fs_reclaim_acquire+0x7d/0x100 [ 116.685542][ T7330] should_fail_ex+0x414/0x560 [ 116.685564][ T7330] should_failslab+0xa8/0x100 [ 116.685585][ T7330] kmem_cache_alloc_node_noprof+0x77/0x710 [ 116.685604][ T7330] ? __alloc_skb+0x255/0x430 [ 116.685622][ T7330] ? napi_skb_cache_get+0x4a5/0x780 [ 116.685639][ T7330] ? napi_skb_cache_get+0x151/0x780 [ 116.685660][ T7330] __alloc_skb+0x255/0x430 [ 116.685682][ T7330] ? __pfx___alloc_skb+0x10/0x10 [ 116.685705][ T7330] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 116.685728][ T7330] netlink_sendmsg+0x5c6/0xb30 [ 116.685753][ T7330] ? __pfx_netlink_sendmsg+0x10/0x10 [ 116.685773][ T7330] ? aa_sock_msg_perm+0xf1/0x1b0 [ 116.685791][ T7330] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 116.685810][ T7330] ? __pfx_netlink_sendmsg+0x10/0x10 [ 116.685827][ T7330] __sock_sendmsg+0x21c/0x270 [ 116.685848][ T7330] ____sys_sendmsg+0x505/0x820 [ 116.685875][ T7330] ? __pfx_____sys_sendmsg+0x10/0x10 [ 116.685906][ T7330] ? import_iovec+0x74/0xa0 [ 116.685931][ T7330] ___sys_sendmsg+0x21f/0x2a0 [ 116.685955][ T7330] ? __pfx____sys_sendmsg+0x10/0x10 [ 116.685980][ T7330] ? rcu_read_lock_any_held+0xb3/0x120 [ 116.686023][ T7330] ? __fget_files+0x2a/0x420 [ 116.686036][ T7330] ? __fget_files+0x3a0/0x420 [ 116.686059][ T7330] __x64_sys_sendmsg+0x19b/0x260 [ 116.686085][ T7330] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 116.686116][ T7330] ? __pfx_ksys_write+0x10/0x10 [ 116.686140][ T7330] ? do_syscall_64+0xbe/0xf80 [ 116.686163][ T7330] do_syscall_64+0xfa/0xf80 [ 116.686183][ T7330] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.686198][ T7330] ? clear_bhb_loop+0x60/0xb0 [ 116.686218][ T7330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.686232][ T7330] RIP: 0033:0x7f1af518f749 [ 116.686248][ T7330] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 116.686261][ T7330] RSP: 002b:00007f1af5f58038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 116.686279][ T7330] RAX: ffffffffffffffda RBX: 00007f1af53e5fa0 RCX: 00007f1af518f749 [ 116.686297][ T7330] RDX: 0000000000040000 RSI: 00002000000004c0 RDI: 0000000000000003 [ 116.686308][ T7330] RBP: 00007f1af5f58090 R08: 0000000000000000 R09: 0000000000000000 [ 116.686318][ T7330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 116.686326][ T7330] R13: 00007f1af53e6038 R14: 00007f1af53e5fa0 R15: 00007ffcfcfb4898 [ 116.686357][ T7330] [ 117.558819][ T7358] FAULT_INJECTION: forcing a failure. [ 117.558819][ T7358] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 117.581143][ T7351] lo speed is unknown, defaulting to 1000 [ 117.634366][ T7358] CPU: 0 UID: 0 PID: 7358 Comm: syz.4.406 Not tainted syzkaller #0 PREEMPT(full) [ 117.634390][ T7358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 117.634400][ T7358] Call Trace: [ 117.634407][ T7358] [ 117.634414][ T7358] dump_stack_lvl+0x189/0x250 [ 117.634438][ T7358] ? __pfx____ratelimit+0x10/0x10 [ 117.634458][ T7358] ? __pfx_dump_stack_lvl+0x10/0x10 [ 117.634476][ T7358] ? __pfx__printk+0x10/0x10 [ 117.634497][ T7358] ? __might_fault+0xb0/0x130 [ 117.634526][ T7358] should_fail_ex+0x414/0x560 [ 117.634550][ T7358] _copy_from_iter+0x1cd/0x1630 [ 117.634572][ T7358] ? __build_skb_around+0x22d/0x3c0 [ 117.634597][ T7358] ? __pfx__copy_from_iter+0x10/0x10 [ 117.634613][ T7358] ? __alloc_skb+0x2f1/0x430 [ 117.634633][ T7358] ? __pfx___alloc_skb+0x10/0x10 [ 117.634655][ T7358] ? netlink_sendmsg+0x642/0xb30 [ 117.634670][ T7358] ? skb_put+0x11b/0x210 [ 117.634693][ T7358] netlink_sendmsg+0x6b2/0xb30 [ 117.634718][ T7358] ? __pfx_netlink_sendmsg+0x10/0x10 [ 117.634738][ T7358] ? aa_sock_msg_perm+0xf1/0x1b0 [ 117.634756][ T7358] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 117.634777][ T7358] ? __pfx_netlink_sendmsg+0x10/0x10 [ 117.634795][ T7358] __sock_sendmsg+0x21c/0x270 [ 117.634817][ T7358] ____sys_sendmsg+0x505/0x820 [ 117.634845][ T7358] ? __pfx_____sys_sendmsg+0x10/0x10 [ 117.634877][ T7358] ? import_iovec+0x74/0xa0 [ 117.634902][ T7358] ___sys_sendmsg+0x21f/0x2a0 [ 117.634928][ T7358] ? __pfx____sys_sendmsg+0x10/0x10 [ 117.634972][ T7358] ? rcu_read_lock_any_held+0xb3/0x120 [ 117.635023][ T7358] ? __fget_files+0x2a/0x420 [ 117.635038][ T7358] ? __fget_files+0x3a0/0x420 [ 117.635062][ T7358] __x64_sys_sendmsg+0x19b/0x260 [ 117.635087][ T7358] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 117.635119][ T7358] ? __pfx_ksys_write+0x10/0x10 [ 117.635145][ T7358] ? do_syscall_64+0xbe/0xf80 [ 117.635168][ T7358] do_syscall_64+0xfa/0xf80 [ 117.635188][ T7358] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.635201][ T7358] ? clear_bhb_loop+0x60/0xb0 [ 117.635220][ T7358] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.635234][ T7358] RIP: 0033:0x7f1af518f749 [ 117.635248][ T7358] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 117.635268][ T7358] RSP: 002b:00007f1af5f58038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 117.635285][ T7358] RAX: ffffffffffffffda RBX: 00007f1af53e5fa0 RCX: 00007f1af518f749 [ 117.635297][ T7358] RDX: 0000000000040000 RSI: 00002000000004c0 RDI: 0000000000000003 [ 117.635307][ T7358] RBP: 00007f1af5f58090 R08: 0000000000000000 R09: 0000000000000000 [ 117.635317][ T7358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 117.635326][ T7358] R13: 00007f1af53e6038 R14: 00007f1af53e5fa0 R15: 00007ffcfcfb4898 [ 117.635352][ T7358] [ 117.681568][ T7364] pimreg: entered allmulticast mode [ 118.726631][ T7406] xt_policy: output policy not valid in PREROUTING and INPUT [ 118.761747][ T7406] __nla_validate_parse: 2 callbacks suppressed [ 118.761764][ T7406] netlink: 4 bytes leftover after parsing attributes in process `syz.4.417'. [ 118.986401][ T7417] lo speed is unknown, defaulting to 1000 [ 118.992301][ T7422] FAULT_INJECTION: forcing a failure. [ 118.992301][ T7422] name failslab, interval 1, probability 0, space 0, times 0 [ 119.038521][ T7422] CPU: 0 UID: 0 PID: 7422 Comm: syz.3.421 Not tainted syzkaller #0 PREEMPT(full) [ 119.038546][ T7422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 119.038557][ T7422] Call Trace: [ 119.038564][ T7422] [ 119.038571][ T7422] dump_stack_lvl+0x189/0x250 [ 119.038595][ T7422] ? __pfx____ratelimit+0x10/0x10 [ 119.038615][ T7422] ? __pfx_dump_stack_lvl+0x10/0x10 [ 119.038633][ T7422] ? __pfx__printk+0x10/0x10 [ 119.038659][ T7422] ? __pfx___might_resched+0x10/0x10 [ 119.038675][ T7422] ? fs_reclaim_acquire+0x7d/0x100 [ 119.038701][ T7422] should_fail_ex+0x414/0x560 [ 119.038726][ T7422] should_failslab+0xa8/0x100 [ 119.038751][ T7422] __kmalloc_noprof+0xcb/0x800 [ 119.038770][ T7422] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 119.038799][ T7422] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 119.038826][ T7422] genl_family_rcv_msg_doit+0xb8/0x300 [ 119.038851][ T7422] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 119.038879][ T7422] ? apparmor_capable+0x137/0x1a0 [ 119.038908][ T7422] ? bpf_lsm_capable+0x9/0x20 [ 119.038924][ T7422] ? security_capable+0x7e/0x2e0 [ 119.038953][ T7422] genl_rcv_msg+0x60e/0x790 [ 119.038977][ T7422] ? __pfx_genl_rcv_msg+0x10/0x10 [ 119.038994][ T7422] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 119.039015][ T7422] ? __pfx_nl80211_set_station+0x10/0x10 [ 119.039028][ T7422] ? __pfx_nl80211_post_doit+0x10/0x10 [ 119.039064][ T7422] netlink_rcv_skb+0x208/0x470 [ 119.039082][ T7422] ? __pfx_genl_rcv_msg+0x10/0x10 [ 119.039103][ T7422] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 119.039137][ T7422] ? down_read+0x274/0x2e0 [ 119.039157][ T7422] ? genl_rcv+0xd/0x40 [ 119.039178][ T7422] genl_rcv+0x28/0x40 [ 119.039195][ T7422] netlink_unicast+0x82f/0x9e0 [ 119.039224][ T7422] ? __pfx_netlink_unicast+0x10/0x10 [ 119.039247][ T7422] ? netlink_sendmsg+0x642/0xb30 [ 119.039261][ T7422] ? skb_put+0x11b/0x210 [ 119.039286][ T7422] netlink_sendmsg+0x805/0xb30 [ 119.039313][ T7422] ? __pfx_netlink_sendmsg+0x10/0x10 [ 119.039333][ T7422] ? aa_sock_msg_perm+0xf1/0x1b0 [ 119.039351][ T7422] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 119.039372][ T7422] ? __pfx_netlink_sendmsg+0x10/0x10 [ 119.039389][ T7422] __sock_sendmsg+0x21c/0x270 [ 119.039412][ T7422] ____sys_sendmsg+0x505/0x820 [ 119.039441][ T7422] ? __pfx_____sys_sendmsg+0x10/0x10 [ 119.039473][ T7422] ? import_iovec+0x74/0xa0 [ 119.039499][ T7422] ___sys_sendmsg+0x21f/0x2a0 [ 119.039528][ T7422] ? __pfx____sys_sendmsg+0x10/0x10 [ 119.039559][ T7422] ? rcu_read_lock_any_held+0xb3/0x120 [ 119.039607][ T7422] ? __fget_files+0x2a/0x420 [ 119.039622][ T7422] ? __fget_files+0x3a0/0x420 [ 119.039647][ T7422] __x64_sys_sendmsg+0x19b/0x260 [ 119.039673][ T7422] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 119.039706][ T7422] ? __pfx_ksys_write+0x10/0x10 [ 119.039731][ T7422] ? do_syscall_64+0xbe/0xf80 [ 119.039756][ T7422] do_syscall_64+0xfa/0xf80 [ 119.039777][ T7422] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.039792][ T7422] ? clear_bhb_loop+0x60/0xb0 [ 119.039810][ T7422] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.039825][ T7422] RIP: 0033:0x7f7ddcf8f749 [ 119.039840][ T7422] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 119.039851][ T7422] RSP: 002b:00007f7dddef4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 119.039867][ T7422] RAX: ffffffffffffffda RBX: 00007f7ddd1e5fa0 RCX: 00007f7ddcf8f749 [ 119.039876][ T7422] RDX: 0000000000040000 RSI: 00002000000004c0 RDI: 0000000000000003 [ 119.039892][ T7422] RBP: 00007f7dddef4090 R08: 0000000000000000 R09: 0000000000000000 [ 119.039902][ T7422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 119.039911][ T7422] R13: 00007f7ddd1e6038 R14: 00007f7ddd1e5fa0 R15: 00007ffc25a2c258 [ 119.039940][ T7422] [ 119.460364][ T7426] netlink: 'syz.2.423': attribute type 2 has an invalid length. [ 119.505605][ T7426] netlink: 8 bytes leftover after parsing attributes in process `syz.2.423'. [ 119.589322][ T7438] Set syz0 is full, maxelem 0 reached [ 119.662330][ T7442] netlink: 8 bytes leftover after parsing attributes in process `syz.0.425'. [ 119.665351][ T7443] netlink: 8 bytes leftover after parsing attributes in process `syz.0.425'. [ 119.674223][ T7442] netlink: 'syz.0.425': attribute type 30 has an invalid length. [ 119.732904][ T7443] netlink: 'syz.0.425': attribute type 30 has an invalid length. [ 119.857365][ T7450] netlink: 'syz.2.429': attribute type 1 has an invalid length. [ 119.859435][ T7442] netlink: 8 bytes leftover after parsing attributes in process `syz.0.425'. [ 119.881700][ T143] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 119.895140][ T7442] netlink: 'syz.0.425': attribute type 30 has an invalid length. [ 119.916688][ T7443] netlink: 8 bytes leftover after parsing attributes in process `syz.0.425'. [ 119.941425][ T7443] netlink: 'syz.0.425': attribute type 30 has an invalid length. [ 119.960840][ T143] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 119.980000][ T143] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.034760][ T143] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.072450][ T7457] netlink: 16 bytes leftover after parsing attributes in process `syz.1.432'. [ 120.383501][ T7476] netlink: 24 bytes leftover after parsing attributes in process `syz.3.439'. [ 120.475177][ T7479] netlink: 4 bytes leftover after parsing attributes in process `syz.0.440'. [ 120.514197][ T7479] openvswitch: netlink: Invalid VLAN frame [ 120.531135][ T7485] netlink: 8 bytes leftover after parsing attributes in process `syz.2.443'. [ 121.288373][ T7522] lo speed is unknown, defaulting to 1000 [ 121.392442][ T7530] Bluetooth: MGMT ver 1.23 [ 121.600857][ T7534] lo speed is unknown, defaulting to 1000 [ 121.679026][ T7543] tipc: Cannot configure node identity twice [ 122.178490][ T7562] netlink: 'syz.1.464': attribute type 2 has an invalid length. [ 122.274766][ T7562] !: entered promiscuous mode [ 122.291167][ T7564] bond0: (slave wg0): Error: Device can not be enslaved while up [ 122.587362][ T7576] tap0: tun_chr_ioctl cmd 1074025677 [ 122.634671][ T7576] tap0: linktype set to 1 [ 122.662349][ T7568] lo speed is unknown, defaulting to 1000 [ 122.980469][ T7596] tap0: tun_chr_ioctl cmd 1074025676 [ 123.006870][ T7596] tap0: owner set to 0 [ 123.151669][ T1333] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 123.160688][ T1333] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 123.177542][ T5855] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 123.295914][ T7615] ieee802154 phy0 wpan0: encryption failed: -22 [ 123.604574][ T5855] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 123.645253][ T5921] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 123.657084][ T7629] hsr_slave_0: left promiscuous mode [ 123.685846][ T7629] hsr_slave_1: left promiscuous mode [ 123.766298][ T7634] tipc: Enabled bearer , priority 0 [ 123.809643][ T7626] syzkaller0: entered promiscuous mode [ 123.834498][ T7626] syzkaller0: entered allmulticast mode [ 124.016985][ T7626] vlan0: entered promiscuous mode [ 124.041800][ T7626] tipc: Resetting bearer [ 124.136990][ T7648] __nla_validate_parse: 8 callbacks suppressed [ 124.137008][ T7648] netlink: 16 bytes leftover after parsing attributes in process `syz.2.488'. [ 124.170059][ T7625] tipc: Resetting bearer [ 124.275139][ T7625] tipc: Disabling bearer [ 124.328910][ T7659] netlink: 8 bytes leftover after parsing attributes in process `syz.2.492'. [ 124.354545][ T7657] FAULT_INJECTION: forcing a failure. [ 124.354545][ T7657] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 124.415724][ T7657] CPU: 1 UID: 0 PID: 7657 Comm: syz.0.491 Not tainted syzkaller #0 PREEMPT(full) [ 124.415748][ T7657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 124.415758][ T7657] Call Trace: [ 124.415765][ T7657] [ 124.415773][ T7657] dump_stack_lvl+0x189/0x250 [ 124.415795][ T7657] ? __pfx____ratelimit+0x10/0x10 [ 124.415815][ T7657] ? __pfx_dump_stack_lvl+0x10/0x10 [ 124.415833][ T7657] ? __pfx__printk+0x10/0x10 [ 124.415866][ T7657] should_fail_ex+0x414/0x560 [ 124.415891][ T7657] _copy_to_user+0x31/0xb0 [ 124.415915][ T7657] simple_read_from_buffer+0xe1/0x170 [ 124.415948][ T7657] proc_fail_nth_read+0x1b3/0x220 [ 124.415973][ T7657] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 124.415996][ T7657] ? rw_verify_area+0x2a6/0x4d0 [ 124.416015][ T7657] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 124.416037][ T7657] vfs_read+0x200/0xa30 [ 124.416055][ T7657] ? fdget_pos+0x247/0x320 [ 124.416074][ T7657] ? __pfx___mutex_lock+0x10/0x10 [ 124.416095][ T7657] ? __pfx_vfs_read+0x10/0x10 [ 124.416116][ T7657] ? __fget_files+0x2a/0x420 [ 124.416135][ T7657] ? __fget_files+0x3a0/0x420 [ 124.416148][ T7657] ? __fget_files+0x2a/0x420 [ 124.416172][ T7657] ksys_read+0x145/0x250 [ 124.416194][ T7657] ? __pfx_ksys_read+0x10/0x10 [ 124.416217][ T7657] ? do_syscall_64+0xbe/0xf80 [ 124.416241][ T7657] do_syscall_64+0xfa/0xf80 [ 124.416262][ T7657] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.416278][ T7657] ? clear_bhb_loop+0x60/0xb0 [ 124.416298][ T7657] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.416313][ T7657] RIP: 0033:0x7f6f1eb8e15c [ 124.416329][ T7657] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 124.416349][ T7657] RSP: 002b:00007f6f1fa5d030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 124.416366][ T7657] RAX: ffffffffffffffda RBX: 00007f6f1ede5fa0 RCX: 00007f6f1eb8e15c [ 124.416378][ T7657] RDX: 000000000000000f RSI: 00007f6f1fa5d0a0 RDI: 0000000000000004 [ 124.416388][ T7657] RBP: 00007f6f1fa5d090 R08: 0000000000000000 R09: 0000000000000000 [ 124.416398][ T7657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 124.416407][ T7657] R13: 00007f6f1ede6038 R14: 00007f6f1ede5fa0 R15: 00007ffec56ef178 [ 124.416437][ T7657] [ 125.220888][ T7690] lo speed is unknown, defaulting to 1000 [ 125.344502][ T5840] Bluetooth: hci4: link tx timeout [ 125.349992][ T5840] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 125.447661][ T7711] netlink: 12 bytes leftover after parsing attributes in process `syz.4.507'. [ 125.490021][ T7714] lo speed is unknown, defaulting to 1000 [ 125.655034][ T7711] netlink: 72 bytes leftover after parsing attributes in process `syz.4.507'. [ 125.679246][ T5840] Bluetooth: hci4: link tx timeout [ 125.685899][ T5840] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 125.706966][ T5840] Bluetooth: hci4: link tx timeout [ 125.712170][ T5840] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 125.890167][ T5840] Bluetooth: hci4: link tx timeout [ 125.895605][ T5840] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 125.928411][ T5840] Bluetooth: hci4: link tx timeout [ 125.933665][ T5840] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 126.120378][ T7714] bond0: option resend_igmp: invalid value (2878) [ 126.189617][ T7714] bond0: option resend_igmp: allowed values 0 - 255 [ 126.249274][ T7714] bond0 (unregistering): Released all slaves [ 126.580576][ T7754] netlink: 16 bytes leftover after parsing attributes in process `syz.3.514'. [ 127.132611][ T5840] Bluetooth: hci4: link tx timeout [ 127.138630][ T5840] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 127.201320][ T7782] Timeout policy `syz1' can only be used by L3 protocol number 35067 [ 127.243338][ T7780] netlink: 36 bytes leftover after parsing attributes in process `syz.1.521'. [ 127.324645][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 127.407196][ T5840] Bluetooth: hci4: command 0x0405 tx timeout [ 127.639407][ T7802] IPv6: NLM_F_REPLACE set, but no existing node found! [ 127.666232][ T7794] bond2: Unable to set down delay as MII monitoring is disabled [ 127.700900][ T7794] bond2 (unregistering): Released all slaves [ 127.978887][ T7808] netlink: 76 bytes leftover after parsing attributes in process `syz.0.526'. [ 128.772090][ T7846] tipc: Started in network mode [ 128.791063][ T7846] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 128.820836][ T7849] netlink: 8 bytes leftover after parsing attributes in process `syz.4.534'. [ 128.864152][ T7846] tipc: Enabling of bearer rejected, failed to enable media [ 128.964671][ T7843] lo speed is unknown, defaulting to 1000 [ 129.176408][ T7855] lo speed is unknown, defaulting to 1000 [ 129.453990][ T7875] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 129.475340][ T7875] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.523159][ T7884] netlink: 28 bytes leftover after parsing attributes in process `syz.1.543'. [ 129.711844][ T7875] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 129.726288][ T7875] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.753003][ T7889] netlink: 8 bytes leftover after parsing attributes in process `syz.4.547'. [ 129.805693][ T7875] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 129.817066][ T7875] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.868530][ T7888] lo speed is unknown, defaulting to 1000 [ 129.917120][ T7875] team0: Failed to send options change via netlink (err -105) [ 129.930528][ T7875] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 129.941766][ T7875] team0: Port device netdevsim0 removed [ 129.954267][ T7875] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 129.966047][ T7875] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.130216][ T7898] xt_nat: multiple ranges no longer supported [ 130.331197][ T12] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 130.384300][ T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.447742][ T36] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 130.470330][ T36] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.664454][ T2131] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 130.732088][ T2131] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.753084][ T2131] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 130.787066][ T2131] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.085481][ T7930] syzkaller0: entered promiscuous mode [ 131.128001][ T7930] syzkaller0: entered allmulticast mode [ 131.227903][ T7940] netlink: 24 bytes leftover after parsing attributes in process `syz.0.562'. [ 131.538711][ T7954] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:2a [ 131.587580][ T7958] netlink: 4 bytes leftover after parsing attributes in process `syz.0.573'. [ 131.730383][ T7965] netlink: 8 bytes leftover after parsing attributes in process `syz.4.576'. [ 131.913908][ T7971] syzkaller0: entered promiscuous mode [ 131.919838][ T7971] syzkaller0: entered allmulticast mode [ 132.851305][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.858476][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.501424][ T8001] dvmrp8: entered allmulticast mode [ 134.103667][ T8020] netlink: 'syz.1.601': attribute type 10 has an invalid length. [ 134.611268][ T8020] team0 (unregistering): Port device team_slave_0 removed [ 134.651434][ T8020] team0 (unregistering): Port device team_slave_1 removed [ 134.766725][ T8026] lo speed is unknown, defaulting to 1000 [ 135.400409][ T8045] ip6tnl2: entered promiscuous mode [ 135.450894][ T8045] ip6tnl2: entered allmulticast mode [ 135.764482][ T8055] netlink: 4 bytes leftover after parsing attributes in process `syz.3.615'. [ 135.804378][ T5840] Bluetooth: hci4: command 0x0405 tx timeout [ 136.044429][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 136.888795][ T8087] netlink: 'syz.1.627': attribute type 3 has an invalid length. [ 137.137950][ T8101] rdma_rxe: rxe_newlink: failed to add bond0 [ 137.336989][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.470424][ T8117] lo speed is unknown, defaulting to 1000 [ 138.480235][ T8155] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.843650][ T5953] IPVS: starting estimator thread 0... [ 138.936669][ T8173] IPVS: using max 30 ests per chain, 72000 per kthread [ 139.091094][ T8185] netlink: 8 bytes leftover after parsing attributes in process `syz.2.668'. [ 139.550983][ T7088] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.716962][ T8216] netlink: 4 bytes leftover after parsing attributes in process `syz.0.682'. [ 139.739968][ T8217] netlink: 'syz.3.683': attribute type 10 has an invalid length. [ 139.823932][ T8217] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 139.914655][ T8216] netlink: 4 bytes leftover after parsing attributes in process `syz.0.682'. [ 140.355945][ T8242] lo speed is unknown, defaulting to 1000 [ 140.729165][ T8261] netlink: 24 bytes leftover after parsing attributes in process `syz.0.700'. [ 140.939068][ T8271] netlink: 4 bytes leftover after parsing attributes in process `syz.1.703'. [ 140.968725][ T8271] batman_adv: batadv0: Interface deactivated: dummy0 [ 141.020988][ T8271] batman_adv: batadv0: Removing interface: dummy0 [ 141.056591][ T8242] netlink: 12 bytes leftover after parsing attributes in process `syz.3.693'. [ 141.582045][ T8282] tipc: Enabling of bearer rejected, failed to enable media [ 141.841468][ T12] ------------[ cut here ]------------ [ 141.847314][ T12] wlan1: Dropped data frame as no usable bitrate found while scanning and associated. Target station: 08:02:11:00:00:00 on 5 GHz band [ 141.861110][ T12] WARNING: net/mac80211/tx.c:758 at 0x0, CPU#1: kworker/u8:0/12 [ 141.868817][ T12] Modules linked in: [ 141.872966][ T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted syzkaller #0 PREEMPT(full) [ 141.882299][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 141.892416][ T12] Workqueue: events_unbound cfg80211_wiphy_work [ 141.898728][ T12] RIP: 0010:ieee80211_tx_h_rate_ctrl+0xc4a/0x1760 [ 141.905202][ T12] Code: 00 00 48 8b 44 24 50 8b 30 45 31 ff 83 e6 07 41 0f 95 c7 31 ff e8 86 47 f9 f6 43 8d 0c 7f 83 c1 02 48 89 df 4c 89 f6 4c 89 e2 <67> 48 0f b9 3a 41 be 01 00 00 00 49 bf 00 00 00 00 00 fc ff df e9 [ 141.924993][ T12] RSP: 0000:ffffc90000117380 EFLAGS: 00010206 [ 141.931141][ T12] RAX: ffffffff8ac8071a RBX: ffffffff8f911970 RCX: 0000000000000005 [ 141.939175][ T12] RDX: ffff88807d330384 RSI: ffff888053b357c8 RDI: ffffffff8f911970 [ 141.947206][ T12] RBP: ffffc900001174e8 R08: ffff8880297629c7 R09: 1ffff110052ec538 [ 141.955251][ T12] R10: dffffc0000000000 R11: ffffed10052ec539 R12: ffff88807d330384 [ 141.963239][ T12] R13: 1ffff92000022e84 R14: ffff888053b357c8 R15: 0000000000000001 [ 141.971265][ T12] FS: 0000000000000000(0000) GS:ffff8881261b1000(0000) knlGS:0000000000000000 [ 141.980246][ T12] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 141.986879][ T12] CR2: 000000110c2d9819 CR3: 000000000dd3a000 CR4: 00000000003526f0 [ 141.994904][ T12] Call Trace: [ 141.998257][ T12] [ 142.001220][ T12] ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10 [ 142.007358][ T12] ? ieee80211_is_bufferable_mmpdu+0x103/0x200 [ 142.013534][ T12] invoke_tx_handlers_late+0xba/0x18a0 [ 142.019075][ T12] ? invoke_tx_handlers_early+0xa0c/0x1d50 [ 142.024941][ T12] ieee80211_tx+0x2ac/0x460 [ 142.029466][ T12] ? __pfx_ieee80211_tx+0x10/0x10 [ 142.034693][ T12] ? __ieee80211_tx_skb_tid_band+0x4cb/0x680 [ 142.040716][ T12] __ieee80211_tx_skb_tid_band+0x50f/0x680 [ 142.046586][ T12] ? ieee80211_scan_state_send_probe+0x4e8/0xa00 [ 142.052941][ T12] ieee80211_scan_state_send_probe+0x594/0xa00 [ 142.059194][ T12] ieee80211_scan_work+0x65f/0x1c50 [ 142.064478][ T12] cfg80211_wiphy_work+0x2ab/0x450 [ 142.069616][ T12] ? process_scheduled_works+0x9ef/0x1770 [ 142.075408][ T12] process_scheduled_works+0xad1/0x1770 [ 142.081005][ T12] ? __pfx_process_scheduled_works+0x10/0x10 [ 142.087082][ T12] worker_thread+0x8a0/0xda0 [ 142.091720][ T12] kthread+0x711/0x8a0 [ 142.095861][ T12] ? __pfx_worker_thread+0x10/0x10 [ 142.100991][ T12] ? __pfx_kthread+0x10/0x10 [ 142.105642][ T12] ? _raw_spin_unlock_irq+0x23/0x50 [ 142.110860][ T12] ? lockdep_hardirqs_on+0x98/0x140 [ 142.116103][ T12] ? __pfx_kthread+0x10/0x10 [ 142.120703][ T12] ret_from_fork+0x599/0xb30 [ 142.125341][ T12] ? __pfx_ret_from_fork+0x10/0x10 [ 142.130482][ T12] ? __switch_to_asm+0x39/0x70 [ 142.135304][ T12] ? __switch_to_asm+0x33/0x70 [ 142.140260][ T12] ? __pfx_kthread+0x10/0x10 [ 142.144924][ T12] ret_from_fork_asm+0x1a/0x30 [ 142.150072][ T12] [ 142.153100][ T12] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 142.160386][ T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted syzkaller #0 PREEMPT(full) [ 142.169679][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 142.179751][ T12] Workqueue: events_unbound cfg80211_wiphy_work [ 142.186032][ T12] Call Trace: [ 142.189329][ T12] [ 142.192357][ T12] dump_stack_lvl+0x99/0x250 [ 142.196973][ T12] ? __asan_memcpy+0x40/0x70 [ 142.201599][ T12] ? __pfx_dump_stack_lvl+0x10/0x10 [ 142.206817][ T12] ? __pfx__printk+0x10/0x10 [ 142.211440][ T12] vpanic+0x237/0x6d0 [ 142.215442][ T12] ? __pfx_vpanic+0x10/0x10 [ 142.219961][ T12] ? is_bpf_text_address+0x292/0x2b0 [ 142.225275][ T12] ? is_bpf_text_address+0x26/0x2b0 [ 142.230512][ T12] panic+0xb9/0xc0 [ 142.234263][ T12] ? __pfx_panic+0x10/0x10 [ 142.238723][ T12] ? ret_from_fork_asm+0x1a/0x30 [ 142.243697][ T12] __warn+0x317/0x4b0 [ 142.247708][ T12] __report_bug+0x288/0x500 [ 142.252235][ T12] ? kasan_save_track+0x3e/0x80 [ 142.257108][ T12] ? __kasan_slab_alloc+0x6c/0x80 [ 142.262143][ T12] ? kmem_cache_alloc_node_noprof+0x433/0x710 [ 142.268207][ T12] ? __pfx___report_bug+0x10/0x10 [ 142.273218][ T12] ? ret_from_fork_asm+0x1a/0x30 [ 142.278168][ T12] report_bug_entry+0x16a/0x220 [ 142.283010][ T12] ? ieee80211_tx_h_rate_ctrl+0xc4a/0x1760 [ 142.288840][ T12] ? ieee80211_tx_h_rate_ctrl+0xc4f/0x1760 [ 142.294638][ T12] handle_bug+0xca/0x200 [ 142.298878][ T12] exc_invalid_op+0x1a/0x50 [ 142.303370][ T12] asm_exc_invalid_op+0x1a/0x20 [ 142.308205][ T12] RIP: 0010:ieee80211_tx_h_rate_ctrl+0xc4a/0x1760 [ 142.314612][ T12] Code: 00 00 48 8b 44 24 50 8b 30 45 31 ff 83 e6 07 41 0f 95 c7 31 ff e8 86 47 f9 f6 43 8d 0c 7f 83 c1 02 48 89 df 4c 89 f6 4c 89 e2 <67> 48 0f b9 3a 41 be 01 00 00 00 49 bf 00 00 00 00 00 fc ff df e9 [ 142.334204][ T12] RSP: 0000:ffffc90000117380 EFLAGS: 00010206 [ 142.340274][ T12] RAX: ffffffff8ac8071a RBX: ffffffff8f911970 RCX: 0000000000000005 [ 142.348321][ T12] RDX: ffff88807d330384 RSI: ffff888053b357c8 RDI: ffffffff8f911970 [ 142.356283][ T12] RBP: ffffc900001174e8 R08: ffff8880297629c7 R09: 1ffff110052ec538 [ 142.364245][ T12] R10: dffffc0000000000 R11: ffffed10052ec539 R12: ffff88807d330384 [ 142.372211][ T12] R13: 1ffff92000022e84 R14: ffff888053b357c8 R15: 0000000000000001 [ 142.380178][ T12] ? ieee80211_tx_h_rate_ctrl+0xc3a/0x1760 [ 142.386004][ T12] ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10 [ 142.392068][ T12] ? ieee80211_is_bufferable_mmpdu+0x103/0x200 [ 142.398213][ T12] invoke_tx_handlers_late+0xba/0x18a0 [ 142.403669][ T12] ? invoke_tx_handlers_early+0xa0c/0x1d50 [ 142.409478][ T12] ieee80211_tx+0x2ac/0x460 [ 142.413977][ T12] ? __pfx_ieee80211_tx+0x10/0x10 [ 142.419019][ T12] ? __ieee80211_tx_skb_tid_band+0x4cb/0x680 [ 142.424994][ T12] __ieee80211_tx_skb_tid_band+0x50f/0x680 [ 142.430793][ T12] ? ieee80211_scan_state_send_probe+0x4e8/0xa00 [ 142.437118][ T12] ieee80211_scan_state_send_probe+0x594/0xa00 [ 142.443279][ T12] ieee80211_scan_work+0x65f/0x1c50 [ 142.448507][ T12] cfg80211_wiphy_work+0x2ab/0x450 [ 142.453608][ T12] ? process_scheduled_works+0x9ef/0x1770 [ 142.459329][ T12] process_scheduled_works+0xad1/0x1770 [ 142.464913][ T12] ? __pfx_process_scheduled_works+0x10/0x10 [ 142.470917][ T12] worker_thread+0x8a0/0xda0 [ 142.475550][ T12] kthread+0x711/0x8a0 [ 142.479612][ T12] ? __pfx_worker_thread+0x10/0x10 [ 142.484705][ T12] ? __pfx_kthread+0x10/0x10 [ 142.489282][ T12] ? _raw_spin_unlock_irq+0x23/0x50 [ 142.494468][ T12] ? lockdep_hardirqs_on+0x98/0x140 [ 142.499652][ T12] ? __pfx_kthread+0x10/0x10 [ 142.504229][ T12] ret_from_fork+0x599/0xb30 [ 142.508828][ T12] ? __pfx_ret_from_fork+0x10/0x10 [ 142.513934][ T12] ? __switch_to_asm+0x39/0x70 [ 142.518684][ T12] ? __switch_to_asm+0x33/0x70 [ 142.523432][ T12] ? __pfx_kthread+0x10/0x10 [ 142.528009][ T12] ret_from_fork_asm+0x1a/0x30 [ 142.532792][ T12] [ 142.536170][ T12] Kernel Offset: disabled [ 142.540486][ T12] Rebooting in 86400 seconds..