last executing test programs: 45.625612569s ago: executing program 3 (id=594): unshare(0x6a040000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x2000c000) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/net\x00') sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010c25bd7000ffdbdf251400000008001d00", @ANYRES32=r4, @ANYBLOB="08000300", @ANYRES32=r3], 0x24}, 0x1, 0x0, 0x0, 0x20040801}, 0x20000004) (fail_nth: 2) 45.31780057s ago: executing program 3 (id=600): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180200000400000000000000fcffff0185000000bc0000001801000020646c2400000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000f000000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$packet(0x11, 0x2, 0x300) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000200)=0x67ce, 0x4) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x2, 0x3, 0x0, 0x3, 0x2, 0x0, 0x70bd2c, 0x25dfdbfb}, 0x10}, 0x1, 0x7}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000001c0)='\b~', 0x2}], 0x1000000000000196, 0x0) close(0x3) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) close(0x4) sendmsg$nl_route(r6, 0x0, 0x0) 44.481870642s ago: executing program 3 (id=613): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adbaa402}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="0a000000ffffffffffffaaaaaaaaaabb86dd6d00200000fb11ff20010000000000000000000000000002ff0200000000000000000000000000014f194e2000fb90"], 0x135) recvmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}, 0x7dcf}], 0x1, 0x120, 0x0) 1.021949354s ago: executing program 2 (id=618): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) bind$alg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000000040000000000000aaff02000000000000000000000000000106"], 0xffe) 1.020877937s ago: executing program 2 (id=621): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x34, 0x3e, 0x107, 0x70bd27, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @pid}]}, @nested={0x8, 0x2, 0x0, 0x1, [@generic="725eb862"]}, @typed={0x8, 0x7, 0x0, 0x0, @pid}]}, 0x34}, 0x1, 0x0, 0xf403, 0xc020}, 0x4040) 1.020737079s ago: executing program 2 (id=622): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x70bd26, 0x25dfdbfd, {{}, {0x0, 0x3, 0xa6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x440c4) 1.017662672s ago: executing program 2 (id=627): ioctl$NILFS_IOCTL_DELETE_CHECKPOINT(0xffffffffffffffff, 0x40086e81, &(0x7f00000000c0)=0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x64, 0x2, 0x6, 0x5, 0x0, 0x3000000, {0x0, 0x0, 0xfffd}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x64}}, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) (async) r3 = socket$unix(0x1, 0x5, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[@ANYBLOB="78020000", @ANYRES16=r5, @ANYBLOB="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"], 0x278}, 0x1, 0x0, 0x0, 0x4008084}, 0x800) (async) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0500000004000000040000000104000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000018000000000000000000000000000000000000e0ffffff00"], 0x50) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000ebff00000000000000008500000027000000850000000500000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x0, 0x14, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000780)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r6, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x3e}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 1.008905008s ago: executing program 3 (id=628): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000000)='\a', 0x1}], 0x1) 1.007536989s ago: executing program 4 (id=629): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x948, 0x160, 0x378, 0x378, 0x460, 0x630, 0x878, 0x878, 0x878, 0x878, 0x630, 0x6, 0x0, {[{{@ipv6={@empty, @private1, [], [0x0, 0x0, 0x0, 0xff000000], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x21, 0x0, 0x5}, 0x0, 0x138, 0x160, 0x0, {0x7a00000010000000}, [@common=@hl={{0x28}, {0x3, 0x4}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv6=@ipv4={'\x00', '\xff\xff', @broadcast}, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}, @ipv6=@rand_addr=' \x01\x00', 0x22}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x1e0, 0x218, 0x0, {}, [@common=@rt={{0x138}, {0x3, [0x8, 0x2400], 0x80000000, 0x8, 0x94b06560c6564e1f, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @loopback}, @mcast1, @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, @local, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x2c}, @dev={0xfe, 0x80, '\x00', 0x22}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, @local, @remote], 0xf}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff}, {0x0, 0x20}, {0x0, 0x0, 0x4}}}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x4, 0x0}, [0x0, 0x0, 0x0, 0xff], [0x0, 0x0, 0xff000000], '\x00', 'bond_slave_0\x00', {}, {}, 0x0, 0x0, 0x2}, 0x0, 0xa8, 0xe8, 0x48000000}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x0, 0xffffffff, 0x3, 0x5, 0x2, 0x8000, 0xc, 0xffffffff]}}}, {{@uncond, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xcb, 'system_u:object_r:kmsg_device_t:s0\x00'}}}, {{@uncond, 0x0, 0x208, 0x248, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@dev={0xfe, 0x80, '\x00', 0x36}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, @empty, @loopback, @ipv4={'\x00', '\xff\xff', @remote}, @mcast2, @private1={0xfc, 0x1, '\x00', 0x8}, @private1, @local, @private2={0xfc, 0x2, '\x00', 0x2}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @private0, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0]}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x1, 0x8, @ipv6=@remote, 0x4e22}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x9a8) 903.696827ms ago: executing program 3 (id=630): r0 = socket$netlink(0x10, 0x3, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03adcac4b74ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="911013000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) socket$netlink(0x10, 0x3, 0x4) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) listen(r1, 0x0) (async) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) (async) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03adcac4b74ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="911013000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) (async) 858.160212ms ago: executing program 4 (id=631): socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000a00)=[{{&(0x7f0000000040)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000300)='>', 0x1}], 0x1}}, {{&(0x7f0000000480)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000180)="91", 0x1}], 0x1}}, {{&(0x7f00000002c0)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000440)}}], 0x3, 0x4004081) socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000500)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000580)={r1, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000300)=@assoc_value={r1, 0xdd8}, 0x8) r2 = socket(0x15, 0x5, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(r6, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1700c56c4a7a23c4530d3727e2e866f60d52f3bd83f782d22ebfcb6d058b73bd78efc2de832f6681", @ANYRES16=r7, @ANYBLOB="01002bbd7000fddbdf2504000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x20004000) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000400)=ANY=[@ANYRES16=r4, @ANYRES16=r4, @ANYRES16], 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f0000000140), 0x0) sendto$packet(r2, 0x0, 0x0, 0x400c084, 0x0, 0x0) r9 = openat$nci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r9, 0x0, &(0x7f0000000240)) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x2c, r11, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8800}, 0x4000808) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[@ANYBLOB="34000059b41356c43a9eefc8f384c0e3fff3001e", @ANYRES32=0x0, @ANYBLOB="000000000a00020014001680100001800c0005000000000000020000"], 0x34}, 0x1, 0x0, 0x0, 0x4008451}, 0x20000800) 858.050012ms ago: executing program 2 (id=632): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000a40)=@newsa={0x138, 0x10, 0x1, 0x7fffffc, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@empty, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in=@multicast2, 0x10000004, 0x6c}, @in6=@remote, {0x200000000, 0x8000, 0x0, 0x0, 0x0, 0x7d48, 0x1000000080ffffff}, {0x5, 0x4, 0xd, 0xa}, {0x0, 0x400}, 0xfffffffc, 0x0, 0xa, 0x1, 0x6}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x20000000) 734.94971ms ago: executing program 2 (id=634): r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000000000000850000000400000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, 0x0, 0x18) r3 = socket$igmp(0x2, 0x3, 0x2) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) recvmmsg(r4, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}, 0x88b1}], 0x1, 0x40000120, 0x0) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x40, &(0x7f0000000200)=0x4, 0x4) write$bt_hci(r4, &(0x7f0000000200)=ANY=[], 0x6) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000000)={@broadcast, @multicast1, 0x4, "d317388c52647692d91de4350700000000000000c6000200", 0x0, 0x20000, 0x4000000, 0x8}, 0x3c) setsockopt$MRT_ADD_MFC(r3, 0x0, 0xcc, 0x0, 0x0) setsockopt$MRT_FLUSH(r3, 0x0, 0xd4, &(0x7f00000003c0)=0xa, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000a40)=ANY=[@ANYBLOB="050000000000000061"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r5 = socket(0x2a, 0x2, 0x0) getpeername$packet(r5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='&'], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000a000000000200000700000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000140)={r6, &(0x7f0000000000), &(0x7f0000000040)=""/89}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) unshare(0x400) ioctl$F2FS_IOC_GET_FEATURES(0xffffffffffffffff, 0x8004b706, 0x0) 674.419525ms ago: executing program 3 (id=635): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adbaa402}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="0a000000ffffffffffffaaaaaaaaaabb86dd6d00200000fb11ff20010000000000000000000000000002ff0200000000000000000000000000014f194e2000fb90"], 0x135) recvmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}, 0x7dcf}], 0x1, 0x120, 0x0) 655.327665ms ago: executing program 1 (id=637): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xb, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000700000000000085000000a4000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b400000095"], &(0x7f0000000880)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) 620.106771ms ago: executing program 4 (id=638): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x28, 0x140c, 0x1, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x3}]}, 0x28}, 0x1, 0x0, 0x800000000000000, 0x24044041}, 0x4080) 509.61974ms ago: executing program 1 (id=639): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x4379a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5, 0x9, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2004d049}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x4379a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5, 0x9, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2004d049}, 0x0) socket(0x10, 0x803, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x1, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xa, 0x4, 0x208, 0xb}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc) sendmsg$nl_route(r3, 0x0, 0x141) (async) sendmsg$nl_route(r3, 0x0, 0x141) poll(0x0, 0x0, 0x3ff) socket(0x10, 0x3, 0x0) (async) r6 = socket(0x10, 0x3, 0x0) bind$netlink(r6, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) (async) bind$netlink(r6, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r6, &(0x7f0000000000)='\"', 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x6912223a, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239fd7, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r8, 0x2000000, 0xe, 0xffdb, &(0x7f00000004c0)='\x00'/14, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r8, 0x2000000, 0xe, 0xffdb, &(0x7f00000004c0)='\x00'/14, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_mptcp_buf(0xffffffffffffffff, 0x11c, 0x4, &(0x7f00000000c0)=""/206, &(0x7f0000000080)=0xce) (async) getsockopt$inet_mptcp_buf(0xffffffffffffffff, 0x11c, 0x4, &(0x7f00000000c0)=""/206, &(0x7f0000000080)=0xce) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x178}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$nl_route(0x10, 0x3, 0x0) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@ipv6_newaddr={0x9c, 0x14, 0x8, 0x0, 0x0, {0xa, 0x40, 0x0, 0xff, r9}, [@IFA_ADDRESS={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IFA_FLAGS={0x8, 0x8, 0xe455bf55121aafcb}, @IFA_RT_PRIORITY={0x8, 0x9, 0x8}, @IFA_RT_PRIORITY={0x8, 0x9, 0xf}, @IFA_CACHEINFO={0x14, 0x6, {0x1, 0x2, 0xc3e, 0x2}}, @IFA_LOCAL={0x14, 0x2, @remote}, @IFA_FLAGS={0x8, 0x8, 0x448}, @IFA_LOCAL={0x14, 0x2, @mcast2}, @IFA_ADDRESS={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0xf}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x1}, 0x44) (async) sendmsg$nl_route(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@ipv6_newaddr={0x9c, 0x14, 0x8, 0x0, 0x0, {0xa, 0x40, 0x0, 0xff, r9}, [@IFA_ADDRESS={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IFA_FLAGS={0x8, 0x8, 0xe455bf55121aafcb}, @IFA_RT_PRIORITY={0x8, 0x9, 0x8}, @IFA_RT_PRIORITY={0x8, 0x9, 0xf}, @IFA_CACHEINFO={0x14, 0x6, {0x1, 0x2, 0xc3e, 0x2}}, @IFA_LOCAL={0x14, 0x2, @remote}, @IFA_FLAGS={0x8, 0x8, 0x448}, @IFA_LOCAL={0x14, 0x2, @mcast2}, @IFA_ADDRESS={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0xf}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x1}, 0x44) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000000)={0x0, 0x8d, "89c5b77ad8e1cdb6c61d350dd9533e22a59b16a3c99bc212a64ca824d9df6f658b01bb1c6b9d87b415c676f734119cb4cd808aa343dac8bca7571b47632a4bc3cd42c0241f996c4852c37fee7e53a39c100eedc3a1b05dfa1ddd80b5fada9c9b7314df1c52b44fc029e0101a238590181725a786c13575779c9f2a7d8fe053cce30da11b80fa013d4f791732d6"}, &(0x7f0000000140)=0x95) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000180)={r11, @in6={{0xa, 0x4e21, 0xff, @local, 0x8001}}, 0x9d, 0x0, 0x3, 0x0, 0x8, 0x3, 0x4}, 0x9c) 509.404097ms ago: executing program 0 (id=640): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x4d808}, 0x0) 507.795974ms ago: executing program 4 (id=641): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f00000001c0)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r0, 0x18000000000002a0, 0xe, 0x2000, &(0x7f0000000040)="b9a98b2b8df5b6898c3fe0927cdf", 0x0, 0xe00, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 462.423608ms ago: executing program 0 (id=642): bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001bc0)={0x34, r2, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x6b}, @val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x8000}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x58844}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@gettaction={0x14, 0x32, 0x1}, 0x14}}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r6, 0x800452d2, &(0x7f0000000100)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x2, 0x0, 0xffffffff}]}]}, {0x0, [0x2e, 0x61, 0x15f68a878522e060]}}, 0x0, 0x35}, 0x28) syz_init_net_socket$rose(0xb, 0x5, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r5, 0x2000300, 0xe, 0x0, &(0x7f0000000600)="63e4ed8e46080000003389f7f986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000}, [@call={0x85, 0x0, 0x0, 0x8bf}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) 406.199428ms ago: executing program 0 (id=643): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000060000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000074c0000000c0a01020000000000000000010000000900020073797a3200000000200003801c0000800400018008000340000000010c00044000000000000000000900010073797a300000000038000000020a01"], 0x110}}, 0x0) 345.255952ms ago: executing program 4 (id=644): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x3804, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x69, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb, 0x0, 0x0, 0x1000000}}], 0x2, 0x0) 344.780244ms ago: executing program 1 (id=645): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="1c0100002e00010000cea14eb300000005001980080111800101cf80e32cc4fbd478b585fc62a92925eb81095df4821c3344fb4ccca51f942f"], 0x11c}], 0x1, 0x0, 0x0, 0x84}, 0x300) 265.284107ms ago: executing program 0 (id=646): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xb}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_CT_DIRECTION={0x5}]}}}, {0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xa0}}, 0x0) close(r0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="250a0000000000006111900000000000580000000000000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x80) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x3, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002e000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r2, 0x0, 0xe, 0x0, &(0x7f00000000c0)="e0b9545dd30a3731677b2d0bfa91", 0x0, 0x27cb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000140)={0x4, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000100)={@cgroup, r1, 0x14, 0x28, 0x0, @void, @void, @void, @value=r3}, 0x20) r4 = gettid() r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_FIOSETOWN(r5, 0x8901, &(0x7f0000001700)=r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000013c0)=0xc) sendmmsg$unix(r6, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000440)}], 0x1, &(0x7f0000000180)=[@cred={{0x1c, 0x1, 0x2, {r7, r8, r9}}}], 0x20, 0x40044}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)="114a", 0x2}], 0x1, 0x0, 0x0, 0x400e815}}], 0x2, 0x4) r10 = gettid() getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000540)={0x0, 0x0, 0x0}, &(0x7f00000008c0)=0xc) sendmsg$unix(0xffffffffffffffff, &(0x7f0000002340)={&(0x7f0000000180)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f00000003c0)=[{&(0x7f0000000240)="59a7df97166f76937bf797896145e2e3453084d1ad058fd8c8f9b0623277dbcba52232b2b9c09d3828198d053a81632cbedc66625d3a86bc12826f7ec6e3a496840a7c448b72dbbdf17040f7ddb8fad6857f9cee70182555df2c4ee09f40a79145b675465d53bf9ba1f158d2d2c31795ab32784e4d5ad849485a8f53a3b81fdfdb1b9d5da2c5a24c2a8eb336a545827be5bcd11255892bbc224c33ea543dec732161962a7b98d92e2bc0ec2b", 0xac}, {&(0x7f0000000640)="a352d3593720926bce76f27937d91b3405a8ef602475b00b6adeb7127fdf5834300fd916d178586ffa54b0f497f7ff7fbe6cc21897c9952287f32dd6ca7a2d1a3df6be7b6dbb3238361c2621852c79c37a30fbe4f62608e801dc6616baec97b511fe7be50b55f9e1ce4cd8a872ab41f975036bc57a0cc6caa12a426f6fb457548951cead8f362be24f06aa14fa9adc1f4822b614b60b0eb748dd9a16dc9c1102be0b043df150271cf2b745ef8243914523", 0xb1}, {&(0x7f00000021c0)="8dd7ec5af611952f5d95d04743fc4c1e0a74d937aedcb8bec6f8c5a56dcf14c479975a956ae179728dda08629e2edc8d216396b72a61728eb942ce6c299f27cb6daa01affaabff86a2f7ce9cd49fbab36b79a7efc74508fa5283521d6728c19b837adb4d491f84b500404629c2a24f3167ce0c48b1a2c7ef89c8b8d26292d3d4157901267dba3e6586c2d99583fe65c8d7402df30a9c17e11ee9282acf0c84cd14434f679b5fff838d024da86315b2e7d1286a5fa8776e5061aa9348a81f5ac24245cec57cf6dab35ce4c9f97b71f599ae144072b0cd7028c0ea4857f5a09308894926eb7c5476ff131e02e0a9345d", 0xef}], 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r0, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=0xee00, @ANYRES32=r9, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r10, @ANYRES32=0x0, @ANYRES32=r11, @ANYBLOB="000000004ad5606fa68ca5f745e751baf130f271f7a10c8ca2f5ffa71260afe1da4bdcaf7e9b8401d870c5fb8640e90524b6630401cb325032a5b4e137e37e3b6f7de229786cd3c7d83f23385c249862ffffffffffffffff1a290938a42fcf9608db0bc6ab7470bf934a99d61f9924d16e0d42482a902d81bef2467724e2eb324861d0cd65cd4b36b09e6a47b5199d684ada29dc4bf2416ef102cc967f0265995571d909ccfad8c408015511c8b08503c0c0b029f6f2309da8fd77a258458ad9e93c354cdf8b0b8784cb80f94cbba551c661bc5fe7"], 0x58, 0x20008000}, 0x80) r12 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r12, 0x660c) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r13 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r13, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r14, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r14, 0x0) r15 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x430881, 0x0) ioctl$FS_IOC_SETFLAGS(r15, 0x40086602, &(0x7f0000000040)=0x1000) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x2f}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xb4}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x70) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000001104000000002e"], 0x0, 0x37}, 0x20) 265.165087ms ago: executing program 1 (id=647): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = epoll_create1(0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, 0x0) socket(0x400000000010, 0x3, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20000004) (async) r2 = socket(0x40000000015, 0x805, 0x0) getsockopt(r2, 0x114, 0x271b, &(0x7f0000000440)=""/102400, &(0x7f00000000c0)=0x41) (async, rerun: 32) r3 = socket(0xa, 0x1, 0x84) (rerun: 32) setsockopt$inet_group_source_req(r3, 0x0, 0x2e, &(0x7f00000002c0)={0x1, {{0x2, 0x4e24, @multicast1}}, {{0x2, 0x4e23, @broadcast}}}, 0x108) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001000010025bd7000fddbdf25eeff7700", @ANYRES32=0x0, @ANYBLOB="390902000360000008001b0000000000080004"], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) 264.005457ms ago: executing program 4 (id=648): socket(0x1d, 0x2, 0x4000006) socket$can_bcm(0x1d, 0x2, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x44) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000400100004112200a4e2000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000580), 0x2000cc0, r4}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, &(0x7f0000000040)=""/30, &(0x7f0000000240), &(0x7f0000000280), 0x1, r4}, 0x38) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48) syz_80211_join_ibss(0x0, &(0x7f0000000340)=@default_ap_ssid, 0x6, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYRES64=r0, @ANYRESOCT=r1, @ANYRES16=0x0], 0x30}, 0x1, 0x0, 0x0, 0x240000c5}, 0x20044880) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_80211_join_ibss(&(0x7f0000000240)='wlan1\x00', &(0x7f0000000440)=@default_ap_ssid, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="01002bbd7000fbdbdf252100000008000300", @ANYRES32=r6, @ANYBLOB="a29e73ad41643e104c916fc966749fbe53227e574a2747cd768dd00ea0f4bf493714345f419df62988"], 0x1c}, 0x1, 0x0, 0x0, 0x24004084}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={0x28, r3, 0x103, 0x0, 0xffffffff, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x8000007, 0x6b}}}}}, 0x28}}, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20\x00'}, 0x58) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3000000040000701feffffff00000000017c0000040042801400018006001700800a000008001800", @ANYRES32=0x0, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="b7f2288d3aaea2bc0000def1260a00"/32, 0x20) accept(r0, 0x0, 0x0) 149.621757ms ago: executing program 0 (id=649): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x4682}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, 0x0) write$tun(r1, &(0x7f0000000340)={@val={0xa}, @void, @eth={@multicast, @remote, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \x00', 0x10, 0x11, 0xff, @empty, @mcast2, {[], {0x4f19, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x3, 0x5, 0x100}}}}}}}}}, 0x4a) 144.852528ms ago: executing program 1 (id=650): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 70.149638ms ago: executing program 1 (id=651): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x20, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) 0s ago: executing program 0 (id=652): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=@bridge_newvlan={0x18, 0x70, 0x1, 0x70bd26, 0x25dfdbff}, 0x18}, 0x1, 0x0, 0x0, 0x4d808}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.128' (ED25519) to the list of known hosts. [ 65.123377][ T5808] cgroup: Unknown subsys name 'net' [ 65.252125][ T5808] cgroup: Unknown subsys name 'cpuset' [ 65.261469][ T5808] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 66.596933][ T5808] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 68.574081][ T5826] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 68.594906][ T5833] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 68.602717][ T5833] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 68.611395][ T5833] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 68.618284][ T5837] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 68.619317][ T5833] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 68.628390][ T5837] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 68.634573][ T5833] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 68.647613][ T5833] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 68.648901][ T5836] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 68.655401][ T5833] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 68.662600][ T5837] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 68.670290][ T5833] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 68.679904][ T5837] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 68.692000][ T5833] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 68.692580][ T5837] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 68.699900][ T5839] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 68.708194][ T5837] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 68.720290][ T5142] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 68.721694][ T5837] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 68.728476][ T5142] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 68.735868][ T5837] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 68.750773][ T5142] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 68.750912][ T5837] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 68.758484][ T5142] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 69.293894][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 69.405059][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 69.421503][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 69.501433][ T5820] chnl_net:caif_netlink_parms(): no params data found [ 69.579735][ T5821] chnl_net:caif_netlink_parms(): no params data found [ 69.632936][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.640960][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.648240][ T5827] bridge_slave_0: entered allmulticast mode [ 69.655489][ T5827] bridge_slave_0: entered promiscuous mode [ 69.691754][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.699202][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.706325][ T5827] bridge_slave_1: entered allmulticast mode [ 69.713764][ T5827] bridge_slave_1: entered promiscuous mode [ 69.750839][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.757964][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.765357][ T5829] bridge_slave_0: entered allmulticast mode [ 69.772920][ T5829] bridge_slave_0: entered promiscuous mode [ 69.811590][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.819599][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.826792][ T5829] bridge_slave_1: entered allmulticast mode [ 69.834488][ T5829] bridge_slave_1: entered promiscuous mode [ 69.850362][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.857490][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.864907][ T5830] bridge_slave_0: entered allmulticast mode [ 69.872103][ T5830] bridge_slave_0: entered promiscuous mode [ 69.905317][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.914726][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.922475][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.930016][ T5830] bridge_slave_1: entered allmulticast mode [ 69.936919][ T5830] bridge_slave_1: entered promiscuous mode [ 69.948586][ T5820] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.956316][ T5820] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.963671][ T5820] bridge_slave_0: entered allmulticast mode [ 69.970644][ T5820] bridge_slave_0: entered promiscuous mode [ 69.987760][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.024928][ T5820] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.032305][ T5820] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.039791][ T5820] bridge_slave_1: entered allmulticast mode [ 70.046854][ T5820] bridge_slave_1: entered promiscuous mode [ 70.056293][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.068901][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.123624][ T5827] team0: Port device team_slave_0 added [ 70.131708][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.141138][ T5821] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.148276][ T5821] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.155661][ T5821] bridge_slave_0: entered allmulticast mode [ 70.162852][ T5821] bridge_slave_0: entered promiscuous mode [ 70.190196][ T5827] team0: Port device team_slave_1 added [ 70.197471][ T5829] team0: Port device team_slave_0 added [ 70.205115][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.224063][ T5821] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.231398][ T5821] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.238514][ T5821] bridge_slave_1: entered allmulticast mode [ 70.245525][ T5821] bridge_slave_1: entered promiscuous mode [ 70.254716][ T5820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.266665][ T5829] team0: Port device team_slave_1 added [ 70.312542][ T5820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.331896][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.339028][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.366363][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.379765][ T5830] team0: Port device team_slave_0 added [ 70.398423][ T5830] team0: Port device team_slave_1 added [ 70.423440][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.430603][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.456764][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.481725][ T5821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.500606][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.507586][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.534392][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.547221][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.554533][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.580857][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.611598][ T5821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.622390][ T5820] team0: Port device team_slave_0 added [ 70.654312][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.661426][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.687832][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.701062][ T5820] team0: Port device team_slave_1 added [ 70.707195][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.714303][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.740232][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.796337][ T5821] team0: Port device team_slave_0 added [ 70.808185][ T5827] hsr_slave_0: entered promiscuous mode [ 70.814701][ T5827] hsr_slave_1: entered promiscuous mode [ 70.829607][ T5837] Bluetooth: hci2: command tx timeout [ 70.829610][ T5826] Bluetooth: hci0: command tx timeout [ 70.829863][ T5837] Bluetooth: hci1: command tx timeout [ 70.835303][ T5826] Bluetooth: hci4: command tx timeout [ 70.841113][ T5837] Bluetooth: hci3: command tx timeout [ 70.850860][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.864325][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.890499][ T5820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.903570][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.910740][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.936677][ T5820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.957468][ T5821] team0: Port device team_slave_1 added [ 70.997365][ T5829] hsr_slave_0: entered promiscuous mode [ 71.003647][ T5829] hsr_slave_1: entered promiscuous mode [ 71.010122][ T5829] debugfs: 'hsr0' already exists in 'hsr' [ 71.015935][ T5829] Cannot create hsr debugfs directory [ 71.032644][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.039681][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.065986][ T5821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.078324][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.085339][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.111370][ T5821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.189469][ T5830] hsr_slave_0: entered promiscuous mode [ 71.195680][ T5830] hsr_slave_1: entered promiscuous mode [ 71.201939][ T5830] debugfs: 'hsr0' already exists in 'hsr' [ 71.207665][ T5830] Cannot create hsr debugfs directory [ 71.229884][ T5820] hsr_slave_0: entered promiscuous mode [ 71.235074][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.237132][ T5820] hsr_slave_1: entered promiscuous mode [ 71.247642][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.248231][ T5820] debugfs: 'hsr0' already exists in 'hsr' [ 71.260211][ T5820] Cannot create hsr debugfs directory [ 71.337419][ T5821] hsr_slave_0: entered promiscuous mode [ 71.344036][ T5821] hsr_slave_1: entered promiscuous mode [ 71.350626][ T5821] debugfs: 'hsr0' already exists in 'hsr' [ 71.356360][ T5821] Cannot create hsr debugfs directory [ 71.784213][ T5827] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 71.795581][ T5827] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 71.814508][ T5827] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 71.825334][ T5827] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 71.870383][ T5829] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 71.882550][ T5829] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 71.893153][ T5829] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 71.911829][ T5829] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 71.995024][ T5830] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 72.007249][ T5830] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 72.022322][ T5830] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 72.032927][ T5830] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 72.152290][ T5821] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 72.161783][ T5821] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 72.182484][ T5821] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 72.197351][ T5821] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 72.209660][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.289231][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.302388][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.311887][ T5820] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 72.324455][ T5820] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 72.334417][ T5820] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 72.354931][ T5820] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 72.367661][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.374900][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.404407][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.411536][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.430413][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.451650][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.481903][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.489104][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.510642][ T1038] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.517777][ T1038] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.565948][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.594842][ T1038] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.602004][ T1038] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.612254][ T1038] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.619415][ T1038] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.786879][ T5830] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.854357][ T5821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.908892][ T5837] Bluetooth: hci3: command tx timeout [ 72.914332][ T5837] Bluetooth: hci4: command tx timeout [ 72.920985][ T5828] Bluetooth: hci1: command tx timeout [ 72.926408][ T5828] Bluetooth: hci0: command tx timeout [ 72.928805][ T5826] Bluetooth: hci2: command tx timeout [ 72.944712][ T5820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.961097][ T5821] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.996029][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.015403][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.022585][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.037217][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.044440][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.103939][ T5820] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.150702][ T146] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.157872][ T146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.167623][ T146] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.174738][ T146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.199742][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.246951][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.263544][ T5821] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.312068][ T5827] veth0_vlan: entered promiscuous mode [ 73.381762][ T5827] veth1_vlan: entered promiscuous mode [ 73.438223][ T5829] veth0_vlan: entered promiscuous mode [ 73.484368][ T5829] veth1_vlan: entered promiscuous mode [ 73.560722][ T5827] veth0_macvtap: entered promiscuous mode [ 73.599370][ T5827] veth1_macvtap: entered promiscuous mode [ 73.664638][ T5821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.678373][ T5829] veth0_macvtap: entered promiscuous mode [ 73.706172][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.753204][ T5829] veth1_macvtap: entered promiscuous mode [ 73.766530][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.821999][ T64] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.833092][ T64] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.842686][ T64] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.857593][ T64] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.873084][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.888660][ T5820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.911950][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.923918][ T5821] veth0_vlan: entered promiscuous mode [ 73.952474][ T64] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.963931][ T5821] veth1_vlan: entered promiscuous mode [ 73.983917][ T5830] veth0_vlan: entered promiscuous mode [ 73.990150][ T64] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.001134][ T64] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.022270][ T64] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.057443][ T5830] veth1_vlan: entered promiscuous mode [ 74.107726][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.122324][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.162725][ T5821] veth0_macvtap: entered promiscuous mode [ 74.204260][ T5821] veth1_macvtap: entered promiscuous mode [ 74.218334][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.229308][ T5820] veth0_vlan: entered promiscuous mode [ 74.236410][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.287276][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.304422][ T5820] veth1_vlan: entered promiscuous mode [ 74.314405][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.324155][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.325450][ T5830] veth0_macvtap: entered promiscuous mode [ 74.351101][ T5827] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 74.371671][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.391879][ T5830] veth1_macvtap: entered promiscuous mode [ 74.484119][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.490913][ T146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.504243][ T5820] veth0_macvtap: entered promiscuous mode [ 74.513146][ T5938] Zero length message leads to an empty skb [ 74.522058][ T146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.532256][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.543211][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.576265][ T5820] veth1_macvtap: entered promiscuous mode [ 74.586719][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.634553][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.649979][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.714576][ T146] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.738522][ T146] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.763651][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.790442][ T146] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.811143][ T146] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.840126][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.885765][ T146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.897250][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.907689][ T146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.915913][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.936066][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.945247][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.990154][ T5142] Bluetooth: hci0: command tx timeout [ 74.991004][ T5828] Bluetooth: hci3: command tx timeout [ 74.995586][ T5142] Bluetooth: hci2: command tx timeout [ 74.995695][ T5826] Bluetooth: hci4: command tx timeout [ 75.001023][ T5837] Bluetooth: hci1: command tx timeout [ 75.029133][ T83] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.042333][ T83] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.129118][ T1038] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.136971][ T1038] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.143233][ T146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.160919][ T146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.225775][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.237002][ T5951] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3'. [ 75.248052][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.264945][ T5951] gre0: entered promiscuous mode [ 75.270035][ T5951] gre0: entered allmulticast mode [ 75.291478][ T1038] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.312380][ T1038] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.461733][ T5957] warning: `syz.2.8' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 75.746036][ T5969] FAULT_INJECTION: forcing a failure. [ 75.746036][ T5969] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 75.827317][ T5969] CPU: 0 UID: 0 PID: 5969 Comm: syz.4.10 Not tainted syzkaller #0 PREEMPT(full) [ 75.827351][ T5969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 75.827368][ T5969] Call Trace: [ 75.827376][ T5969] [ 75.827383][ T5969] dump_stack_lvl+0xe8/0x150 [ 75.827420][ T5969] should_fail_ex+0x412/0x560 [ 75.827447][ T5969] _copy_from_user+0x2d/0xb0 [ 75.827473][ T5969] sctp_getsockopt_maxseg+0x17e/0x6c0 [ 75.827498][ T5969] ? __pfx_sctp_getsockopt_maxseg+0x10/0x10 [ 75.827518][ T5969] ? sctp_getsockopt+0x12f/0xb90 [ 75.827543][ T5969] ? __local_bh_enable_ip+0xd0/0x130 [ 75.827568][ T5969] sctp_getsockopt+0x92d/0xb90 [ 75.827589][ T5969] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 75.827614][ T5969] do_sock_getsockopt+0x2d3/0x3f0 [ 75.827641][ T5969] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 75.827667][ T5969] ? __fget_files+0x3a0/0x420 [ 75.827690][ T5969] ? __fget_files+0x2a/0x420 [ 75.827718][ T5969] __x64_sys_getsockopt+0x1a4/0x240 [ 75.827750][ T5969] do_syscall_64+0x14d/0xf80 [ 75.827767][ T5969] ? trace_irq_disable+0x3b/0x150 [ 75.827791][ T5969] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.827809][ T5969] ? clear_bhb_loop+0x40/0x90 [ 75.827828][ T5969] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.827845][ T5969] RIP: 0033:0x7f945b59c799 [ 75.827869][ T5969] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 75.827883][ T5969] RSP: 002b:00007f945c3be028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 75.827906][ T5969] RAX: ffffffffffffffda RBX: 00007f945b815fa0 RCX: 00007f945b59c799 [ 75.827918][ T5969] RDX: 000000000000000d RSI: 0000000000000084 RDI: 0000000000000003 [ 75.827928][ T5969] RBP: 00007f945c3be090 R08: 0000200000000040 R09: 0000000000000000 [ 75.827939][ T5969] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 75.827950][ T5969] R13: 00007f945b816038 R14: 00007f945b815fa0 R15: 00007fff58fff078 [ 75.827977][ T5969] [ 76.112398][ T5974] netlink: 'syz.1.13': attribute type 5 has an invalid length. [ 76.152405][ T5974] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.13'. [ 76.305211][ T5992] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 76.318156][ T5990] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18'. [ 76.502843][ T6000] netlink: 8 bytes leftover after parsing attributes in process `syz.2.20'. [ 76.512113][ T6000] netlink: 8 bytes leftover after parsing attributes in process `syz.2.20'. [ 76.559773][ T6004] netlink: 'syz.3.21': attribute type 27 has an invalid length. [ 76.649741][ T6001] netlink: 12 bytes leftover after parsing attributes in process `syz.1.19'. [ 76.685126][ T6004] netlink: 48 bytes leftover after parsing attributes in process `syz.3.21'. [ 76.713798][ T6004] netlink: 5 bytes leftover after parsing attributes in process `syz.3.21'. [ 76.764085][ T6004] 0{X: renamed from gretap0 (while UP) [ 76.787301][ T6004] 0{X: entered allmulticast mode [ 76.793466][ T6010] netlink: 4 bytes leftover after parsing attributes in process `syz.0.22'. [ 76.811628][ T6004] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 76.906064][ T6010] gretap0: entered promiscuous mode [ 76.924101][ T6010] macvtap1: entered allmulticast mode [ 76.931379][ T6010] gretap0: entered allmulticast mode [ 76.942586][ T6010] gretap0: left allmulticast mode [ 76.947704][ T6010] gretap0: left promiscuous mode [ 77.068972][ T5828] Bluetooth: hci1: command tx timeout [ 77.072234][ T5826] Bluetooth: hci3: command tx timeout [ 77.074479][ T51] Bluetooth: hci4: command tx timeout [ 77.082339][ T5142] Bluetooth: hci2: command tx timeout [ 77.085319][ T5835] Bluetooth: hci0: command tx timeout [ 77.245482][ T5837] block nbd0: Receive control failed (result -32) [ 77.526235][ T6021] syz.4.27 uses obsolete (PF_INET,SOCK_PACKET) [ 77.603100][ T6026] Bluetooth: MGMT ver 1.23 [ 77.654143][ T6029] netlink: 8 bytes leftover after parsing attributes in process `syz.2.30'. [ 77.824511][ T6035] FAULT_INJECTION: forcing a failure. [ 77.824511][ T6035] name failslab, interval 1, probability 0, space 0, times 1 [ 77.880240][ T6035] CPU: 0 UID: 0 PID: 6035 Comm: syz.2.32 Not tainted syzkaller #0 PREEMPT(full) [ 77.880266][ T6035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 77.880277][ T6035] Call Trace: [ 77.880287][ T6035] [ 77.880295][ T6035] dump_stack_lvl+0xe8/0x150 [ 77.880324][ T6035] should_fail_ex+0x412/0x560 [ 77.880351][ T6035] should_failslab+0xa8/0x100 [ 77.880374][ T6035] __kmalloc_noprof+0xe8/0x760 [ 77.880394][ T6035] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 77.880419][ T6035] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 77.880443][ T6035] genl_family_rcv_msg_doit+0xd9/0x330 [ 77.880463][ T6035] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 77.880487][ T6035] ? apparmor_capable+0x126/0x170 [ 77.880512][ T6035] ? bpf_lsm_capable+0x9/0x20 [ 77.880531][ T6035] ? security_capable+0x7e/0x2c0 [ 77.880556][ T6035] genl_rcv_msg+0x61c/0x7a0 [ 77.880580][ T6035] ? __pfx_genl_rcv_msg+0x10/0x10 [ 77.880595][ T6035] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 77.880616][ T6035] ? __pfx_nl80211_set_tx_bitrate_mask+0x10/0x10 [ 77.880634][ T6035] ? __pfx_nl80211_post_doit+0x10/0x10 [ 77.880649][ T6035] ? __lock_acquire+0x6b5/0x2cf0 [ 77.880679][ T6035] netlink_rcv_skb+0x232/0x4b0 [ 77.880701][ T6035] ? __pfx_genl_rcv_msg+0x10/0x10 [ 77.880719][ T6035] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 77.880756][ T6035] ? down_read+0x272/0x2e0 [ 77.880772][ T6035] ? genl_rcv+0xd/0x40 [ 77.880789][ T6035] genl_rcv+0x28/0x40 [ 77.880804][ T6035] netlink_unicast+0x80f/0x9b0 [ 77.880831][ T6035] ? __pfx_netlink_unicast+0x10/0x10 [ 77.880850][ T6035] ? netlink_sendmsg+0x650/0xb40 [ 77.880869][ T6035] ? skb_put+0x11b/0x210 [ 77.880893][ T6035] netlink_sendmsg+0x813/0xb40 [ 77.880921][ T6035] ? __pfx_netlink_sendmsg+0x10/0x10 [ 77.880944][ T6035] ? aa_sock_msg_perm+0xf1/0x1b0 [ 77.880964][ T6035] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 77.880986][ T6035] ____sys_sendmsg+0x972/0x9f0 [ 77.881010][ T6035] ? __pfx_____sys_sendmsg+0x10/0x10 [ 77.881032][ T6035] ? import_iovec+0x73/0xa0 [ 77.881059][ T6035] ___sys_sendmsg+0x2a5/0x360 [ 77.881080][ T6035] ? __pfx____sys_sendmsg+0x10/0x10 [ 77.881127][ T6035] ? __fget_files+0x2a/0x420 [ 77.881149][ T6035] ? __fget_files+0x3a0/0x420 [ 77.881178][ T6035] __x64_sys_sendmsg+0x1bd/0x2a0 [ 77.881197][ T6035] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 77.881233][ T6035] ? __pfx_ksys_write+0x10/0x10 [ 77.881261][ T6035] do_syscall_64+0x14d/0xf80 [ 77.881278][ T6035] ? trace_irq_disable+0x3b/0x150 [ 77.881301][ T6035] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.881318][ T6035] ? clear_bhb_loop+0x40/0x90 [ 77.881339][ T6035] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.881356][ T6035] RIP: 0033:0x7faebc19c799 [ 77.881373][ T6035] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 77.881386][ T6035] RSP: 002b:00007faebd0c1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 77.881404][ T6035] RAX: ffffffffffffffda RBX: 00007faebc415fa0 RCX: 00007faebc19c799 [ 77.881415][ T6035] RDX: 0000000000000010 RSI: 00002000000022c0 RDI: 0000000000000004 [ 77.881425][ T6035] RBP: 00007faebd0c1090 R08: 0000000000000000 R09: 0000000000000000 [ 77.881435][ T6035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 77.881444][ T6035] R13: 00007faebc416038 R14: 00007faebc415fa0 R15: 00007ffc21c0b4d8 [ 77.881467][ T6035] [ 78.459402][ T6052] FAULT_INJECTION: forcing a failure. [ 78.459402][ T6052] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 78.568793][ T6052] CPU: 1 UID: 0 PID: 6052 Comm: syz.0.36 Not tainted syzkaller #0 PREEMPT(full) [ 78.568819][ T6052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 78.568829][ T6052] Call Trace: [ 78.568835][ T6052] [ 78.568843][ T6052] dump_stack_lvl+0xe8/0x150 [ 78.568872][ T6052] should_fail_ex+0x412/0x560 [ 78.568898][ T6052] _copy_from_user+0x2d/0xb0 [ 78.568925][ T6052] do_sys_poll+0x2a9/0x1120 [ 78.568959][ T6052] ? __lock_acquire+0x6b5/0x2cf0 [ 78.568982][ T6052] ? __pfx_do_sys_poll+0x10/0x10 [ 78.569003][ T6052] ? is_bpf_text_address+0x26/0x2b0 [ 78.569117][ T6052] ? __pfx_timespec64_add_safe+0x10/0x10 [ 78.569152][ T6052] __x64_sys_poll+0x190/0x350 [ 78.569178][ T6052] ? __pfx___x64_sys_poll+0x10/0x10 [ 78.569211][ T6052] do_syscall_64+0x14d/0xf80 [ 78.569226][ T6052] ? trace_irq_disable+0x3b/0x150 [ 78.569250][ T6052] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.569267][ T6052] ? clear_bhb_loop+0x40/0x90 [ 78.569288][ T6052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.569304][ T6052] RIP: 0033:0x7efe6579c799 [ 78.569319][ T6052] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 78.569333][ T6052] RSP: 002b:00007efe6664a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000007 [ 78.569351][ T6052] RAX: ffffffffffffffda RBX: 00007efe65a16090 RCX: 00007efe6579c799 [ 78.569363][ T6052] RDX: 0000000000000009 RSI: 20000000000000b5 RDI: 0000200000000000 [ 78.569372][ T6052] RBP: 00007efe6664a090 R08: 0000000000000000 R09: 0000000000000000 [ 78.569382][ T6052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 78.569393][ T6052] R13: 00007efe65a16128 R14: 00007efe65a16090 R15: 00007fffe0163808 [ 78.569421][ T6052] [ 78.814336][ T6059] xt_TPROXY: Can be used only with -p tcp or -p udp [ 79.136457][ T5187] IPVS: starting estimator thread 0... [ 79.250865][ T6074] IPVS: using max 34 ests per chain, 81600 per kthread [ 79.763238][ T6093] netlink: 'syz.2.51': attribute type 4 has an invalid length. [ 79.823275][ T5837] block nbd1: Receive control failed (result -32) [ 80.250539][ T6101] __nla_validate_parse: 8 callbacks suppressed [ 80.250558][ T6101] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.54'. [ 80.482008][ T6107] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 80.634506][ T6116] xt_TPROXY: Can be used only with -p tcp or -p udp [ 80.664762][ T6113] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 80.678406][ T6117] netlink: 12 bytes leftover after parsing attributes in process `syz.1.61'. [ 80.718627][ T6123] netlink: 12 bytes leftover after parsing attributes in process `syz.2.62'. [ 80.733537][ T6113] bond1 (unregistering): Released all slaves [ 80.770391][ T6124] 8021q: VLANs not supported on ipvlan0 [ 80.889083][ T6121] netlink: 12 bytes leftover after parsing attributes in process `syz.3.64'. [ 80.980781][ T6132] netlink: 4 bytes leftover after parsing attributes in process `syz.2.67'. [ 81.022212][ T6132] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 81.029709][ T6132] IPv6: NLM_F_CREATE should be set when creating new route [ 81.039157][ T6132] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 81.046396][ T6132] IPv6: NLM_F_CREATE should be set when creating new route [ 81.108225][ T6136] netlink: 'syz.1.68': attribute type 1 has an invalid length. [ 81.524330][ T47] cfg80211: failed to load regulatory.db [ 81.624382][ T5837] block nbd2: Receive control failed (result -32) [ 81.799001][ T6146] Illegal XDP return value 4294967282 on prog (id 16) dev N/A, expect packet loss! [ 81.831065][ T6149] netlink: 24 bytes leftover after parsing attributes in process `syz.0.73'. [ 81.843922][ T6150] netlink: 4 bytes leftover after parsing attributes in process `syz.2.72'. [ 81.946721][ T6152] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 82.161401][ T6159] xt_TPROXY: Can be used only with -p tcp or -p udp [ 82.211336][ T6159] netlink: 12 bytes leftover after parsing attributes in process `syz.3.77'. [ 82.636314][ T6181] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.662685][ T6181] bond0: (slave sit0): The slave device specified does not support setting the MAC address [ 82.702650][ T6181] bond0: (slave sit0): Error -95 calling set_mac_address [ 82.728837][ T6192] netlink: 8 bytes leftover after parsing attributes in process `syz.3.88'. [ 82.921440][ T6181] netlink: 8 bytes leftover after parsing attributes in process `syz.2.85'. [ 82.983913][ T6181] netlink: zone id is out of range [ 83.662741][ T6223] FAULT_INJECTION: forcing a failure. [ 83.662741][ T6223] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 83.710396][ T6233] FAULT_INJECTION: forcing a failure. [ 83.710396][ T6233] name failslab, interval 1, probability 0, space 0, times 0 [ 83.728806][ T6223] CPU: 1 UID: 0 PID: 6223 Comm: syz.3.95 Not tainted syzkaller #0 PREEMPT(full) [ 83.728832][ T6223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 83.728841][ T6223] Call Trace: [ 83.728848][ T6223] [ 83.728855][ T6223] dump_stack_lvl+0xe8/0x150 [ 83.728884][ T6223] should_fail_ex+0x412/0x560 [ 83.728909][ T6223] _copy_to_user+0x31/0xb0 [ 83.728934][ T6223] wext_handle_ioctl+0x145/0x1d0 [ 83.728962][ T6223] ? __pfx_wext_handle_ioctl+0x10/0x10 [ 83.729002][ T6223] sock_ioctl+0x159/0x7f0 [ 83.729024][ T6223] ? __pfx_sock_ioctl+0x10/0x10 [ 83.729044][ T6223] ? ksys_write+0x1fc/0x270 [ 83.729069][ T6223] ? bpf_lsm_file_ioctl+0x9/0x20 [ 83.729091][ T6223] ? __pfx_sock_ioctl+0x10/0x10 [ 83.729110][ T6223] __se_sys_ioctl+0xfc/0x170 [ 83.729132][ T6223] do_syscall_64+0x14d/0xf80 [ 83.729148][ T6223] ? trace_irq_disable+0x3b/0x150 [ 83.729170][ T6223] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.729186][ T6223] ? clear_bhb_loop+0x40/0x90 [ 83.729208][ T6223] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.729226][ T6223] RIP: 0033:0x7fe224b9c799 [ 83.729243][ T6223] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 83.729256][ T6223] RSP: 002b:00007fe225aca028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 83.729275][ T6223] RAX: ffffffffffffffda RBX: 00007fe224e15fa0 RCX: 00007fe224b9c799 [ 83.729287][ T6223] RDX: 0000200000000440 RSI: 0000000000008b07 RDI: 0000000000000004 [ 83.729298][ T6223] RBP: 00007fe225aca090 R08: 0000000000000000 R09: 0000000000000000 [ 83.729309][ T6223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 83.729319][ T6223] R13: 00007fe224e16038 R14: 00007fe224e15fa0 R15: 00007ffe0117ca58 [ 83.729348][ T6223] [ 83.799531][ T6233] CPU: 0 UID: 0 PID: 6233 Comm: syz.1.96 Not tainted syzkaller #0 PREEMPT(full) [ 83.799555][ T6233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 83.799565][ T6233] Call Trace: [ 83.799573][ T6233] [ 83.799579][ T6233] dump_stack_lvl+0xe8/0x150 [ 83.799609][ T6233] should_fail_ex+0x412/0x560 [ 83.799636][ T6233] should_failslab+0xa8/0x100 [ 83.799660][ T6233] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 83.799680][ T6233] ? __alloc_skb+0x1d0/0x7d0 [ 83.799709][ T6233] __alloc_skb+0x1d0/0x7d0 [ 83.799736][ T6233] tipc_msg_create+0x51/0x4d0 [ 83.799766][ T6233] tipc_group_proto_xmit+0xce/0x790 [ 83.799790][ T6233] tipc_group_delete+0x15e/0x4c0 [ 83.799816][ T6233] ? __pfx_tipc_group_delete+0x10/0x10 [ 83.799840][ T6233] ? tipc_release+0xc4/0x25b0 [ 83.799865][ T6233] ? tipc_group_self+0x26/0x1c0 [ 83.799883][ T6233] tipc_release+0x3f7/0x25b0 [ 83.799915][ T6233] ? __pfx_tipc_release+0x10/0x10 [ 83.799937][ T6233] ? down_write+0x16d/0x200 [ 83.799968][ T6233] ? __pfx_down_write+0x10/0x10 [ 83.799984][ T6233] ? locks_remove_posix+0x14f/0x6d0 [ 83.800015][ T6233] sock_close+0xc3/0x240 [ 83.800036][ T6233] ? __pfx_sock_close+0x10/0x10 [ 83.800055][ T6233] __fput+0x44f/0xa70 [ 83.800089][ T6233] fput_close_sync+0x11f/0x240 [ 83.800112][ T6233] ? __pfx_fput_close_sync+0x10/0x10 [ 83.800152][ T6233] __x64_sys_close+0x7e/0x110 [ 83.800177][ T6233] do_syscall_64+0x14d/0xf80 [ 83.800192][ T6233] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.800210][ T6233] ? clear_bhb_loop+0x40/0x90 [ 83.800231][ T6233] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.800248][ T6233] RIP: 0033:0x7fa3ab79c799 [ 83.800264][ T6233] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 83.800277][ T6233] RSP: 002b:00007fa3ac6a1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 83.800295][ T6233] RAX: ffffffffffffffda RBX: 00007fa3aba16090 RCX: 00007fa3ab79c799 [ 83.800307][ T6233] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 [ 83.800317][ T6233] RBP: 00007fa3ac6a1090 R08: 0000000000000000 R09: 0000000000000000 [ 83.800327][ T6233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 83.800336][ T6233] R13: 00007fa3aba16128 R14: 00007fa3aba16090 R15: 00007fff7c42b488 [ 83.800365][ T6233] [ 84.316022][ T6236] team0 (unregistering): Port device team_slave_0 removed [ 84.450443][ T6236] team0 (unregistering): Port device team_slave_1 removed [ 85.238456][ T6282] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.535188][ T6282] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.559221][ T6310] __nla_validate_parse: 4 callbacks suppressed [ 85.559238][ T6310] netlink: 6 bytes leftover after parsing attributes in process `syz.2.117'. [ 85.649221][ T6313] netlink: 28 bytes leftover after parsing attributes in process `syz.4.120'. [ 85.790270][ T6318] netlink: 'syz.0.121': attribute type 2 has an invalid length. [ 85.932607][ T6310] gretap1: entered promiscuous mode [ 86.258134][ T6282] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.500677][ T6282] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.556680][ T6337] netlink: 12 bytes leftover after parsing attributes in process `syz.3.127'. [ 86.582247][ T5837] block nbd3: Receive control failed (result -32) [ 86.608114][ T6345] IPVS: length: 8 != 2504 [ 86.614257][ T6344] IPVS: Scheduler module ip_vs_sip not found [ 86.627539][ T6341] lo speed is unknown, defaulting to 1000 [ 86.635420][ T6341] lo speed is unknown, defaulting to 1000 [ 86.644160][ T6341] lo speed is unknown, defaulting to 1000 [ 86.705442][ T6341] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 86.747568][ T1038] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.768076][ T6341] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 86.789319][ T1038] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.809818][ T64] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.849818][ T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.858103][ T6341] lo speed is unknown, defaulting to 1000 [ 86.867608][ T6341] lo speed is unknown, defaulting to 1000 [ 86.886722][ T6341] lo speed is unknown, defaulting to 1000 [ 86.907538][ T6341] lo speed is unknown, defaulting to 1000 [ 86.920623][ T6341] lo speed is unknown, defaulting to 1000 [ 86.962476][ T6354] netlink: 16 bytes leftover after parsing attributes in process `syz.1.131'. [ 86.978948][ T6354] netlink: 40 bytes leftover after parsing attributes in process `syz.1.131'. [ 87.026807][ T6356] veth0: entered promiscuous mode [ 87.116671][ T6354] netlink: 8 bytes leftover after parsing attributes in process `syz.1.131'. [ 87.222044][ T6355] veth0: left promiscuous mode [ 87.304822][ T6363] xt_TPROXY: Can be used only with -p tcp or -p udp [ 87.323711][ T6363] netlink: 12 bytes leftover after parsing attributes in process `syz.4.133'. [ 87.419878][ T6365] netlink: 28 bytes leftover after parsing attributes in process `syz.4.134'. [ 87.715798][ T6378] netlink: 8 bytes leftover after parsing attributes in process `syz.3.138'. [ 87.737583][ T6378] netlink: 'syz.3.138': attribute type 30 has an invalid length. [ 87.810516][ T6378] netlink: 8 bytes leftover after parsing attributes in process `syz.3.138'. [ 87.810561][ T64] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 87.821408][ T6378] netlink: 'syz.3.138': attribute type 30 has an invalid length. [ 87.858819][ T64] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 87.934235][ T64] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 87.972978][ T64] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 87.985506][ T6381] netlink: 'syz.0.139': attribute type 1 has an invalid length. [ 88.234833][ T6390] netlink: 'syz.3.142': attribute type 1 has an invalid length. [ 88.246178][ T6392] veth1_to_team: entered promiscuous mode [ 88.251281][ T6390] netlink: 'syz.3.142': attribute type 2 has an invalid length. [ 88.298910][ T6390] netlink: 'syz.3.142': attribute type 2 has an invalid length. [ 88.322751][ T6390] netlink: 'syz.3.142': attribute type 2 has an invalid length. [ 88.341006][ T6392] veth1_to_team: left promiscuous mode [ 88.394985][ T6394] xt_TPROXY: Can be used only with -p tcp or -p udp [ 88.873212][ T5837] block nbd4: Receive control failed (result -32) [ 89.287729][ T5837] block nbd5: Receive control failed (result -32) [ 89.337301][ T6423] lo speed is unknown, defaulting to 1000 [ 89.890295][ T6445] workqueue: name exceeds WQ_NAME_LEN. Truncating to: π,xb)% ]3DL̥ [ 89.978593][ T6455] xt_TPROXY: Can be used only with -p tcp or -p udp [ 90.762275][ T6491] __nla_validate_parse: 9 callbacks suppressed [ 90.762295][ T6491] netlink: 28 bytes leftover after parsing attributes in process `syz.1.175'. [ 90.870616][ T6495] netlink: 24 bytes leftover after parsing attributes in process `syz.3.176'. [ 91.010830][ T6499] netlink: 'syz.3.178': attribute type 4 has an invalid length. [ 91.190986][ T6508] xt_TPROXY: Can be used only with -p tcp or -p udp [ 91.195581][ T6506] openvswitch: netlink: Key type 91 is out of range max 32 [ 91.270580][ T6508] netlink: 12 bytes leftover after parsing attributes in process `syz.1.180'. [ 91.400867][ T6520] FAULT_INJECTION: forcing a failure. [ 91.400867][ T6520] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 91.499234][ T6520] CPU: 1 UID: 0 PID: 6520 Comm: syz.4.184 Not tainted syzkaller #0 PREEMPT(full) [ 91.499259][ T6520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 91.499270][ T6520] Call Trace: [ 91.499277][ T6520] [ 91.499284][ T6520] dump_stack_lvl+0xe8/0x150 [ 91.499313][ T6520] should_fail_ex+0x412/0x560 [ 91.499341][ T6520] _copy_from_user+0x2d/0xb0 [ 91.499367][ T6520] do_tcp_getsockopt+0x227/0x2940 [ 91.499399][ T6520] ? __pfx_do_tcp_getsockopt+0x10/0x10 [ 91.499420][ T6520] ? sock_recv_errqueue+0x520/0x590 [ 91.499447][ T6520] ? __lock_acquire+0x6b5/0x2cf0 [ 91.499475][ T6520] ? aa_file_perm+0x192/0x15e0 [ 91.499505][ T6520] ? __lock_acquire+0x6b5/0x2cf0 [ 91.499530][ T6520] ? __mutex_trylock_common+0x158/0x260 [ 91.499558][ T6520] ? __pfx___mutex_trylock_common+0x10/0x10 [ 91.499586][ T6520] ? rcu_is_watching+0x15/0xb0 [ 91.499610][ T6520] ? trace_contention_end+0x3d/0x150 [ 91.499637][ T6520] ? __mutex_lock+0x319/0x1300 [ 91.499662][ T6520] ? __lock_acquire+0x6b5/0x2cf0 [ 91.499685][ T6520] ? smc_getsockopt+0x14d/0x3c0 [ 91.499712][ T6520] ? __pfx___mutex_lock+0x10/0x10 [ 91.499739][ T6520] tcp_getsockopt+0x83/0x130 [ 91.499760][ T6520] ? sock_recv_errqueue+0x520/0x590 [ 91.499781][ T6520] ? sock_recv_errqueue+0x520/0x590 [ 91.499803][ T6520] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 91.499824][ T6520] smc_getsockopt+0x1e4/0x3c0 [ 91.499857][ T6520] ? __pfx_smc_getsockopt+0x10/0x10 [ 91.499886][ T6520] ? __pfx_smc_getsockopt+0x10/0x10 [ 91.499911][ T6520] do_sock_getsockopt+0x2d3/0x3f0 [ 91.499939][ T6520] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 91.499966][ T6520] ? __fget_files+0x3a0/0x420 [ 91.499990][ T6520] ? __fget_files+0x2a/0x420 [ 91.500021][ T6520] __x64_sys_getsockopt+0x1a4/0x240 [ 91.500055][ T6520] do_syscall_64+0x14d/0xf80 [ 91.500071][ T6520] ? trace_irq_disable+0x3b/0x150 [ 91.500095][ T6520] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.500113][ T6520] ? clear_bhb_loop+0x40/0x90 [ 91.500134][ T6520] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.500152][ T6520] RIP: 0033:0x7f945b59c799 [ 91.500168][ T6520] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 91.500182][ T6520] RSP: 002b:00007f945c3be028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 91.500202][ T6520] RAX: ffffffffffffffda RBX: 00007f945b815fa0 RCX: 00007f945b59c799 [ 91.500214][ T6520] RDX: 0000000000000002 RSI: 0000000000000006 RDI: 0000000000000003 [ 91.500224][ T6520] RBP: 00007f945c3be090 R08: 0000200000000040 R09: 0000000000000000 [ 91.500235][ T6520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 91.500245][ T6520] R13: 00007f945b816038 R14: 00007f945b815fa0 R15: 00007fff58fff078 [ 91.500274][ T6520] [ 92.130242][ T6540] netlink: 'syz.4.188': attribute type 29 has an invalid length. [ 92.138330][ T6540] netlink: 8 bytes leftover after parsing attributes in process `syz.4.188'. [ 92.201617][ T6546] netlink: 28 bytes leftover after parsing attributes in process `syz.0.189'. [ 92.220006][ T6553] netlink: 'syz.4.188': attribute type 29 has an invalid length. [ 92.227774][ T6553] netlink: 8 bytes leftover after parsing attributes in process `syz.4.188'. [ 92.324009][ T6540] block nbd0: NBD_DISCONNECT [ 92.358669][ T6540] block nbd0: Send disconnect failed -32 [ 92.373502][ T6551] bond1: option miimon: invalid value (18446744073709551607) [ 92.389281][ T6540] block nbd0: shutting down sockets [ 92.403307][ T6551] bond1: option miimon: allowed values 0 - 2147483647 [ 92.485514][ T6551] bond1 (unregistering): Released all slaves [ 92.558209][ T6549] lo speed is unknown, defaulting to 1000 [ 92.933850][ T6578] : entered promiscuous mode [ 92.950654][ T6580] netlink: 36 bytes leftover after parsing attributes in process `syz.0.200'. [ 93.512294][ T6614] FAULT_INJECTION: forcing a failure. [ 93.512294][ T6614] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 93.559140][ T6617] netlink: 24 bytes leftover after parsing attributes in process `syz.2.214'. [ 93.576894][ T6614] CPU: 1 UID: 0 PID: 6614 Comm: syz.3.212 Not tainted syzkaller #0 PREEMPT(full) [ 93.576920][ T6614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 93.576930][ T6614] Call Trace: [ 93.576937][ T6614] [ 93.576944][ T6614] dump_stack_lvl+0xe8/0x150 [ 93.576973][ T6614] should_fail_ex+0x412/0x560 [ 93.576999][ T6614] _copy_from_iter+0x1d3/0x1670 [ 93.577023][ T6614] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 93.577048][ T6614] ? __pfx_policy_nodemask+0x10/0x10 [ 93.577106][ T6614] ? __pfx__copy_from_iter+0x10/0x10 [ 93.577133][ T6614] ? set_page_refcounted+0xa0/0x1e0 [ 93.577154][ T6614] ? page_copy_sane+0x4e/0x270 [ 93.577178][ T6614] copy_page_from_iter+0xdd/0x170 [ 93.577205][ T6614] tun_get_user+0x1d4b/0x3dd0 [ 93.577229][ T6614] ? tun_get_user+0x6ff/0x3dd0 [ 93.577267][ T6614] ? aa_file_perm+0x50e/0x15e0 [ 93.577291][ T6614] ? __pfx_tun_get_user+0x10/0x10 [ 93.577312][ T6614] ? aa_file_perm+0x192/0x15e0 [ 93.577350][ T6614] ? ref_tracker_alloc+0x35c/0x4c0 [ 93.577375][ T6614] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 93.577403][ T6614] ? tun_get+0x1c/0x2f0 [ 93.577431][ T6614] ? tun_get+0x1c/0x2f0 [ 93.577453][ T6614] ? tun_get+0x1c/0x2f0 [ 93.577480][ T6614] tun_chr_write_iter+0x113/0x200 [ 93.577506][ T6614] vfs_write+0x61d/0xb90 [ 93.577533][ T6614] ? __pfx_vfs_write+0x10/0x10 [ 93.577559][ T6614] ? __fget_files+0x2a/0x420 [ 93.577592][ T6614] ksys_write+0x150/0x270 [ 93.577613][ T6614] ? __pfx_ksys_write+0x10/0x10 [ 93.577642][ T6614] do_syscall_64+0x14d/0xf80 [ 93.577659][ T6614] ? trace_irq_disable+0x3b/0x150 [ 93.577683][ T6614] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.577701][ T6614] ? clear_bhb_loop+0x40/0x90 [ 93.577723][ T6614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.577741][ T6614] RIP: 0033:0x7fe224b5cfce [ 93.577757][ T6614] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 93.577771][ T6614] RSP: 002b:00007fe225ac9fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 93.577790][ T6614] RAX: ffffffffffffffda RBX: 00007fe225aca6c0 RCX: 00007fe224b5cfce [ 93.577802][ T6614] RDX: 0000000000000046 RSI: 00002000000000c0 RDI: 00000000000000c8 [ 93.577813][ T6614] RBP: 00007fe225aca090 R08: 0000000000000000 R09: 0000000000000000 [ 93.577824][ T6614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 93.577834][ T6614] R13: 00007fe224e16038 R14: 00007fe224e15fa0 R15: 00007ffe0117ca58 [ 93.577862][ T6614] [ 93.579034][ T6617] netlink: 12 bytes leftover after parsing attributes in process `syz.2.214'. [ 93.665720][ T6621] netlink: 'syz.0.216': attribute type 1 has an invalid length. [ 93.756134][ T6617] netlink: 8 bytes leftover after parsing attributes in process `syz.2.214'. [ 93.888484][ T6621] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 93.899007][ T6629] FAULT_INJECTION: forcing a failure. [ 93.899007][ T6629] name failslab, interval 1, probability 0, space 0, times 0 [ 93.942546][ T6629] CPU: 0 UID: 0 PID: 6629 Comm: syz.3.217 Not tainted syzkaller #0 PREEMPT(full) [ 93.942571][ T6629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 93.942582][ T6629] Call Trace: [ 93.942589][ T6629] [ 93.942597][ T6629] dump_stack_lvl+0xe8/0x150 [ 93.942627][ T6629] should_fail_ex+0x412/0x560 [ 93.942653][ T6629] should_failslab+0xa8/0x100 [ 93.942678][ T6629] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 93.942698][ T6629] ? __alloc_skb+0x1d0/0x7d0 [ 93.942720][ T6629] ? __local_bh_enable_ip+0xd0/0x130 [ 93.942748][ T6629] __alloc_skb+0x1d0/0x7d0 [ 93.942775][ T6629] inet_netconf_notify_devconf+0x173/0x240 [ 93.942804][ T6629] ip_mroute_setsockopt+0x95b/0x1090 [ 93.942835][ T6629] ? __pfx_ip_mroute_setsockopt+0x10/0x10 [ 93.942858][ T6629] ? get_pid_task+0x20/0x1f0 [ 93.942893][ T6629] do_ip_setsockopt+0xf1e/0x2ea0 [ 93.942921][ T6629] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 93.942940][ T6629] ? aa_sk_perm+0x6d5/0x900 [ 93.942969][ T6629] ? __pfx_aa_sk_perm+0x10/0x10 [ 93.943001][ T6629] ? __fget_files+0x2a/0x420 [ 93.943023][ T6629] ? aa_sock_opt_perm+0xff/0x1a0 [ 93.943048][ T6629] ip_setsockopt+0x66/0x110 [ 93.943065][ T6629] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 93.943089][ T6629] do_sock_setsockopt+0x17c/0x1b0 [ 93.943120][ T6629] __x64_sys_setsockopt+0x13d/0x1b0 [ 93.943150][ T6629] do_syscall_64+0x14d/0xf80 [ 93.943167][ T6629] ? trace_irq_disable+0x3b/0x150 [ 93.943194][ T6629] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.943212][ T6629] ? clear_bhb_loop+0x40/0x90 [ 93.943232][ T6629] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.943250][ T6629] RIP: 0033:0x7fe224b9c799 [ 93.943266][ T6629] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.943280][ T6629] RSP: 002b:00007fe225aa9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 93.943298][ T6629] RAX: ffffffffffffffda RBX: 00007fe224e16090 RCX: 00007fe224b9c799 [ 93.943311][ T6629] RDX: 00000000000000c8 RSI: 0000000000000000 RDI: 0000000000000003 [ 93.943321][ T6629] RBP: 00007fe225aa9090 R08: 0000000000000004 R09: 0000000000000000 [ 93.943331][ T6629] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 93.943342][ T6629] R13: 00007fe224e16128 R14: 00007fe224e16090 R15: 00007ffe0117ca58 [ 93.943371][ T6629] [ 94.679251][ T6660] FAULT_INJECTION: forcing a failure. [ 94.679251][ T6660] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 94.712797][ T6660] CPU: 0 UID: 0 PID: 6660 Comm: syz.1.228 Not tainted syzkaller #0 PREEMPT(full) [ 94.712823][ T6660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 94.712833][ T6660] Call Trace: [ 94.712841][ T6660] [ 94.712848][ T6660] dump_stack_lvl+0xe8/0x150 [ 94.712879][ T6660] should_fail_ex+0x412/0x560 [ 94.712907][ T6660] _copy_to_user+0x31/0xb0 [ 94.712936][ T6660] do_tcp_getsockopt+0x19c5/0x2940 [ 94.712968][ T6660] ? __pfx_do_tcp_getsockopt+0x10/0x10 [ 94.712989][ T6660] ? sock_recv_errqueue+0x520/0x590 [ 94.713010][ T6660] ? is_bpf_text_address+0x26/0x2b0 [ 94.713033][ T6660] ? __lock_acquire+0x6b5/0x2cf0 [ 94.713060][ T6660] ? aa_file_perm+0x192/0x15e0 [ 94.713091][ T6660] ? __lock_acquire+0x6b5/0x2cf0 [ 94.713116][ T6660] ? __mutex_trylock_common+0x158/0x260 [ 94.713145][ T6660] ? __pfx___mutex_trylock_common+0x10/0x10 [ 94.713173][ T6660] ? rcu_is_watching+0x15/0xb0 [ 94.713197][ T6660] ? trace_contention_end+0x3d/0x150 [ 94.713224][ T6660] ? __mutex_lock+0x319/0x1300 [ 94.713248][ T6660] ? __lock_acquire+0x6b5/0x2cf0 [ 94.713271][ T6660] ? smc_getsockopt+0x14d/0x3c0 [ 94.713299][ T6660] ? __pfx___mutex_lock+0x10/0x10 [ 94.713325][ T6660] tcp_getsockopt+0x83/0x130 [ 94.713347][ T6660] ? sock_recv_errqueue+0x520/0x590 [ 94.713368][ T6660] ? sock_recv_errqueue+0x520/0x590 [ 94.713399][ T6660] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 94.713420][ T6660] smc_getsockopt+0x1e4/0x3c0 [ 94.713446][ T6660] ? __pfx_smc_getsockopt+0x10/0x10 [ 94.713476][ T6660] ? __pfx_smc_getsockopt+0x10/0x10 [ 94.713500][ T6660] do_sock_getsockopt+0x2d3/0x3f0 [ 94.713530][ T6660] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 94.713556][ T6660] ? __fget_files+0x3a0/0x420 [ 94.713580][ T6660] ? __fget_files+0x2a/0x420 [ 94.713610][ T6660] __x64_sys_getsockopt+0x1a4/0x240 [ 94.713645][ T6660] do_syscall_64+0x14d/0xf80 [ 94.713660][ T6660] ? trace_irq_disable+0x3b/0x150 [ 94.713683][ T6660] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.713701][ T6660] ? clear_bhb_loop+0x40/0x90 [ 94.713721][ T6660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.713739][ T6660] RIP: 0033:0x7fa3ab79c799 [ 94.713756][ T6660] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.713769][ T6660] RSP: 002b:00007fa3ac6c2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 94.713788][ T6660] RAX: ffffffffffffffda RBX: 00007fa3aba15fa0 RCX: 00007fa3ab79c799 [ 94.713801][ T6660] RDX: 0000000000000002 RSI: 0000000000000006 RDI: 0000000000000003 [ 94.713811][ T6660] RBP: 00007fa3ac6c2090 R08: 0000200000000040 R09: 0000000000000000 [ 94.713822][ T6660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 94.713832][ T6660] R13: 00007fa3aba16038 R14: 00007fa3aba15fa0 R15: 00007fff7c42b488 [ 94.713861][ T6660] [ 95.015570][ T6663] Cannot find add_set index 3 as target [ 95.163736][ T6669] netlink: 'syz.0.232': attribute type 13 has an invalid length. [ 95.173758][ T6673] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 95.896355][ T6705] netlink: 'syz.3.247': attribute type 9 has an invalid length. [ 95.953389][ T6711] netlink: 'syz.0.249': attribute type 1 has an invalid length. [ 96.078090][ T5899] IPVS: starting estimator thread 0... [ 96.101082][ T6714] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 96.182708][ T6711] __nla_validate_parse: 2 callbacks suppressed [ 96.182726][ T6711] netlink: 28 bytes leftover after parsing attributes in process `syz.0.249'. [ 96.189116][ T6722] IPVS: using max 32 ests per chain, 76800 per kthread [ 96.302528][ T6711] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 96.327460][ T6711] bond1 (unregistering): Released all slaves [ 96.484314][ T5906] IPVS: starting estimator thread 0... [ 96.600727][ T6743] IPVS: using max 34 ests per chain, 81600 per kthread [ 96.786880][ T6762] siw: device registration error -23 [ 97.183561][ T6786] FAULT_INJECTION: forcing a failure. [ 97.183561][ T6786] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 97.227848][ T6786] CPU: 0 UID: 0 PID: 6786 Comm: syz.2.276 Not tainted syzkaller #0 PREEMPT(full) [ 97.227874][ T6786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 97.227884][ T6786] Call Trace: [ 97.227891][ T6786] [ 97.227897][ T6786] dump_stack_lvl+0xe8/0x150 [ 97.227926][ T6786] should_fail_ex+0x412/0x560 [ 97.227953][ T6786] _copy_from_user+0x2d/0xb0 [ 97.227979][ T6786] ___sys_sendmsg+0x1c6/0x360 [ 97.228001][ T6786] ? __pfx____sys_sendmsg+0x10/0x10 [ 97.228049][ T6786] ? __fget_files+0x2a/0x420 [ 97.228071][ T6786] ? __fget_files+0x3a0/0x420 [ 97.228102][ T6786] __x64_sys_sendmsg+0x1bd/0x2a0 [ 97.228119][ T6786] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 97.228143][ T6786] ? __pfx_ksys_write+0x10/0x10 [ 97.228178][ T6786] do_syscall_64+0x14d/0xf80 [ 97.228194][ T6786] ? trace_irq_disable+0x3b/0x150 [ 97.228219][ T6786] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.228236][ T6786] ? clear_bhb_loop+0x40/0x90 [ 97.228258][ T6786] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.228275][ T6786] RIP: 0033:0x7faebc19c799 [ 97.228292][ T6786] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.228306][ T6786] RSP: 002b:00007faebd0c1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 97.228324][ T6786] RAX: ffffffffffffffda RBX: 00007faebc415fa0 RCX: 00007faebc19c799 [ 97.228337][ T6786] RDX: 0000000000000080 RSI: 0000200000000240 RDI: 0000000000000003 [ 97.228348][ T6786] RBP: 00007faebd0c1090 R08: 0000000000000000 R09: 0000000000000000 [ 97.228358][ T6786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 97.228368][ T6786] R13: 00007faebc416038 R14: 00007faebc415fa0 R15: 00007ffc21c0b4d8 [ 97.228397][ T6786] [ 97.618122][ T6807] netlink: 'syz.1.281': attribute type 1 has an invalid length. [ 97.854098][ T6811] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 97.871540][ T6811] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 97.981540][ T6815] bond1: (slave gretap1): making interface the new active one [ 97.990189][ T6815] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 98.020169][ T6824] netlink: 'syz.2.287': attribute type 13 has an invalid length. [ 98.157832][ T6833] netlink: 8 bytes leftover after parsing attributes in process `syz.1.288'. [ 98.352393][ T6841] netlink: 'syz.1.292': attribute type 1 has an invalid length. [ 98.369123][ T6841] nbd: couldn't find device at index -427251215 [ 98.586288][ T6854] netlink: 40 bytes leftover after parsing attributes in process `syz.1.296'. [ 98.820031][ T6861] tipc: Started in network mode [ 98.833187][ T6861] tipc: Node identity 72d68c792d36, cluster identity 4711 [ 98.844328][ T6861] tipc: Enabled bearer , priority 0 [ 98.911123][ T6859] netlink: 12 bytes leftover after parsing attributes in process `syz.3.298'. [ 98.932261][ T5837] block nbd0: Receive control failed (result -32) [ 99.084920][ T6868] dvmrp0: entered allmulticast mode [ 99.130209][ T6873] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 99.179182][ T6872] xt_CT: You must specify a L4 protocol and not use inversions on it [ 99.293499][ T5906] IPVS: starting estimator thread 0... [ 99.390473][ T6877] IPVS: using max 29 ests per chain, 69600 per kthread [ 99.439416][ T6881] FAULT_INJECTION: forcing a failure. [ 99.439416][ T6881] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 99.454434][ T6881] CPU: 1 UID: 0 PID: 6881 Comm: syz.1.304 Not tainted syzkaller #0 PREEMPT(full) [ 99.454458][ T6881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 99.454468][ T6881] Call Trace: [ 99.454475][ T6881] [ 99.454481][ T6881] dump_stack_lvl+0xe8/0x150 [ 99.454519][ T6881] should_fail_ex+0x412/0x560 [ 99.454547][ T6881] _copy_from_user+0x2d/0xb0 [ 99.454574][ T6881] ___sys_sendmsg+0x1c6/0x360 [ 99.454596][ T6881] ? __pfx____sys_sendmsg+0x10/0x10 [ 99.454639][ T6881] ? __fget_files+0x2a/0x420 [ 99.454662][ T6881] ? __fget_files+0x3a0/0x420 [ 99.454692][ T6881] __x64_sys_sendmsg+0x1bd/0x2a0 [ 99.454711][ T6881] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 99.454734][ T6881] ? __pfx_ksys_write+0x10/0x10 [ 99.454763][ T6881] do_syscall_64+0x14d/0xf80 [ 99.454779][ T6881] ? trace_irq_disable+0x3b/0x150 [ 99.454803][ T6881] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.454821][ T6881] ? clear_bhb_loop+0x40/0x90 [ 99.454842][ T6881] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.454859][ T6881] RIP: 0033:0x7fa3ab79c799 [ 99.454876][ T6881] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 99.454890][ T6881] RSP: 002b:00007fa3ac6c2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 99.454909][ T6881] RAX: ffffffffffffffda RBX: 00007fa3aba15fa0 RCX: 00007fa3ab79c799 [ 99.454921][ T6881] RDX: 0000000000000010 RSI: 00002000000022c0 RDI: 0000000000000004 [ 99.454932][ T6881] RBP: 00007fa3ac6c2090 R08: 0000000000000000 R09: 0000000000000000 [ 99.454942][ T6881] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 99.454952][ T6881] R13: 00007fa3aba16038 R14: 00007fa3aba15fa0 R15: 00007fff7c42b488 [ 99.454980][ T6881] [ 99.948416][ T6890] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.308'. [ 100.049029][ T5941] tipc: Node number set to 1608551545 [ 101.010340][ T6926] netlink: 'syz.1.318': attribute type 1 has an invalid length. [ 101.081679][ T6931] FAULT_INJECTION: forcing a failure. [ 101.081679][ T6931] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 101.110144][ T6931] CPU: 0 UID: 0 PID: 6931 Comm: syz.4.320 Not tainted syzkaller #0 PREEMPT(full) [ 101.110169][ T6931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 101.110179][ T6931] Call Trace: [ 101.110186][ T6931] [ 101.110193][ T6931] dump_stack_lvl+0xe8/0x150 [ 101.110222][ T6931] should_fail_ex+0x412/0x560 [ 101.110249][ T6931] _copy_to_user+0x31/0xb0 [ 101.110277][ T6931] simple_read_from_buffer+0xe1/0x170 [ 101.110306][ T6931] proc_fail_nth_read+0x1bb/0x230 [ 101.110334][ T6931] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 101.110360][ T6931] ? rw_verify_area+0x2a6/0x4d0 [ 101.110378][ T6931] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 101.110401][ T6931] vfs_read+0x20c/0xa70 [ 101.110418][ T6931] ? fdget_pos+0x246/0x320 [ 101.110446][ T6931] ? __pfx___mutex_lock+0x10/0x10 [ 101.110465][ T6931] ? __pfx_vfs_read+0x10/0x10 [ 101.110483][ T6931] ? __fget_files+0x2a/0x420 [ 101.110509][ T6931] ? __fget_files+0x3a0/0x420 [ 101.110532][ T6931] ? __fget_files+0x2a/0x420 [ 101.110563][ T6931] ksys_read+0x150/0x270 [ 101.110583][ T6931] ? __pfx_ksys_read+0x10/0x10 [ 101.110597][ T6931] ? fput+0xa0/0xd0 [ 101.110629][ T6931] do_syscall_64+0x14d/0xf80 [ 101.110645][ T6931] ? trace_irq_disable+0x3b/0x150 [ 101.110668][ T6931] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.110686][ T6931] ? clear_bhb_loop+0x40/0x90 [ 101.110707][ T6931] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.110724][ T6931] RIP: 0033:0x7f945b55cfce [ 101.110740][ T6931] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 101.110754][ T6931] RSP: 002b:00007f945c3bdfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 101.110773][ T6931] RAX: ffffffffffffffda RBX: 00007f945c3be6c0 RCX: 00007f945b55cfce [ 101.110785][ T6931] RDX: 000000000000000f RSI: 00007f945c3be0a0 RDI: 0000000000000004 [ 101.110796][ T6931] RBP: 00007f945c3be090 R08: 0000000000000000 R09: 0000000000000000 [ 101.110806][ T6931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 101.110816][ T6931] R13: 00007f945b816038 R14: 00007f945b815fa0 R15: 00007fff58fff078 [ 101.110851][ T6931] [ 101.427651][ T6943] netlink: 8 bytes leftover after parsing attributes in process `syz.2.324'. [ 101.448223][ T6935] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 101.457549][ T6943] netlink: 8 bytes leftover after parsing attributes in process `syz.2.324'. [ 101.459978][ T6935] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 101.496108][ T6928] team0 (unregistering): Port device team_slave_0 removed [ 101.512696][ T6928] team0 (unregistering): Port device team_slave_1 removed [ 101.535102][ T6941] sch_tbf: burst 240 is lower than device lo mtu (65550) ! [ 101.825458][ T6964] netlink: 'syz.2.326': attribute type 21 has an invalid length. [ 101.879155][ T6964] netlink: 128 bytes leftover after parsing attributes in process `syz.2.326'. [ 101.902743][ T6964] netlink: 'syz.2.326': attribute type 4 has an invalid length. [ 101.924712][ T6964] netlink: 'syz.2.326': attribute type 5 has an invalid length. [ 101.934201][ T6964] netlink: 3 bytes leftover after parsing attributes in process `syz.2.326'. [ 101.997746][ T6973] netlink: 6 bytes leftover after parsing attributes in process `syz.4.329'. [ 102.020286][ T6973] gretap1: entered promiscuous mode [ 102.110928][ T6977] netlink: 'syz.0.333': attribute type 1 has an invalid length. [ 102.356982][ T6977] bond1: entered promiscuous mode [ 102.374532][ T6977] 8021q: adding VLAN 0 to HW filter on device bond1 [ 102.800065][ T6996] netlink: 4 bytes leftover after parsing attributes in process `syz.0.338'. [ 102.939411][ T7006] netlink: 'syz.3.335': attribute type 23 has an invalid length. [ 102.974647][ T7005] netlink: 'syz.2.339': attribute type 1 has an invalid length. [ 103.143894][ T7005] bond1: entered promiscuous mode [ 103.185191][ T7019] netlink: 8 bytes leftover after parsing attributes in process `syz.0.341'. [ 103.194342][ T7005] bond1: entered allmulticast mode [ 103.239637][ T7005] 8021q: adding VLAN 0 to HW filter on device bond1 [ 103.343470][ T7009] erspan1: entered allmulticast mode [ 103.384469][ T7009] bond1: (slave erspan1): making interface the new active one [ 103.426194][ T7009] erspan1: entered promiscuous mode [ 103.440949][ T7027] netlink: 'syz.3.342': attribute type 22 has an invalid length. [ 103.451673][ T7027] netlink: 4 bytes leftover after parsing attributes in process `syz.3.342'. [ 103.460640][ T7009] bond1: (slave erspan1): Enslaving as an active interface with an up link [ 103.521080][ T7027] netlink: 'syz.3.342': attribute type 22 has an invalid length. [ 103.529144][ T7027] netlink: 4 bytes leftover after parsing attributes in process `syz.3.342'. [ 103.626655][ T7038] netlink: 'syz.2.344': attribute type 1 has an invalid length. [ 103.679564][ T7036] netlink: 28 bytes leftover after parsing attributes in process `syz.0.345'. [ 103.689461][ T7036] netlink: 'syz.0.345': attribute type 4 has an invalid length. [ 103.900485][ T7044] dvmrp1: entered allmulticast mode [ 103.939043][ T7044] netlink: 'syz.2.347': attribute type 30 has an invalid length. [ 104.105964][ T7054] netlink: 'syz.2.351': attribute type 1 has an invalid length. [ 104.264561][ T7061] netlink: 'syz.0.353': attribute type 6 has an invalid length. [ 104.285903][ T7062] bond2: (slave gretap2): making interface the new active one [ 104.295101][ T7062] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 104.663346][ T7072] tipc: Enabling of bearer rejected, media not registered [ 104.898087][ T5837] block nbd6: Receive control failed (result -32) [ 105.466164][ T7109] netlink: 'syz.2.373': attribute type 3 has an invalid length. [ 105.773924][ T5837] block nbd7: Receive control failed (result -32) [ 106.991938][ T7124] veth3: entered promiscuous mode [ 107.089920][ T7144] __nla_validate_parse: 14 callbacks suppressed [ 107.089939][ T7144] netlink: 8 bytes leftover after parsing attributes in process `syz.1.384'. [ 107.165317][ T7144] netlink: 8 bytes leftover after parsing attributes in process `syz.1.384'. [ 107.165369][ T64] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.196628][ T7156] trusted_key: syz.4.385 sent an empty control message without MSG_MORE. [ 107.269520][ T64] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.289559][ T64] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.395519][ T64] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.473497][ T7174] dvmrp1: left allmulticast mode [ 107.489895][ T7177] netlink: 24 bytes leftover after parsing attributes in process `syz.4.394'. [ 107.502625][ T7166] netlink: 12 bytes leftover after parsing attributes in process `syz.3.391'. [ 107.513405][ T5837] block nbd8: Receive control failed (result -32) [ 107.765604][ T7190] xt_TPROXY: Can be used only with -p tcp or -p udp [ 107.805410][ T7184] netlink: 12 bytes leftover after parsing attributes in process `syz.3.396'. [ 107.830738][ T5837] block nbd9: Receive control failed (result -32) [ 108.042456][ T7202] netlink: 28 bytes leftover after parsing attributes in process `syz.4.403'. [ 108.053239][ T7202] netlink: 28 bytes leftover after parsing attributes in process `syz.4.403'. [ 108.062437][ T7202] validate_nla: 2 callbacks suppressed [ 108.062453][ T7202] netlink: 'syz.4.403': attribute type 4 has an invalid length. [ 108.325633][ T7218] netlink: 8 bytes leftover after parsing attributes in process `syz.1.407'. [ 108.335112][ T7218] netlink: 8 bytes leftover after parsing attributes in process `syz.1.407'. [ 108.374493][ T7215] netlink: 12 bytes leftover after parsing attributes in process `syz.4.406'. [ 108.411330][ T5837] block nbd10: Receive control failed (result -32) [ 108.476648][ T7229] xt_TPROXY: Can be used only with -p tcp or -p udp [ 108.854405][ T7248] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 109.173344][ T7267] xt_TPROXY: Can be used only with -p tcp or -p udp [ 109.316896][ T5837] block nbd11: Receive control failed (result -32) [ 109.466076][ T7284] sctp: [Deprecated]: syz.4.428 (pid 7284) Use of int in max_burst socket option deprecated. [ 109.466076][ T7284] Use struct sctp_assoc_value instead [ 109.482657][ T7284] x_tables: unsorted entry at hook 2 [ 109.728042][ T7293] team0 (unregistering): Port device team_slave_0 removed [ 109.754407][ T7293] team0 (unregistering): Port device team_slave_1 removed [ 109.776563][ T7298] syzkaller1: entered promiscuous mode [ 109.782604][ T7298] syzkaller1: entered allmulticast mode [ 109.969025][ T7309] xt_TPROXY: Can be used only with -p tcp or -p udp [ 110.540825][ T7327] syzkaller0: entered promiscuous mode [ 110.547925][ T7327] syzkaller0: entered allmulticast mode [ 110.924339][ T5837] block nbd12: Receive control failed (result -32) [ 110.994771][ T7339] xt_TPROXY: Can be used only with -p tcp or -p udp [ 112.174608][ T7347] __nla_validate_parse: 12 callbacks suppressed [ 112.174627][ T7347] netlink: 8 bytes leftover after parsing attributes in process `syz.0.450'. [ 112.327835][ T7357] FAULT_INJECTION: forcing a failure. [ 112.327835][ T7357] name failslab, interval 1, probability 0, space 0, times 0 [ 112.377400][ T7357] CPU: 1 UID: 0 PID: 7357 Comm: syz.0.453 Not tainted syzkaller #0 PREEMPT(full) [ 112.377430][ T7357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 112.377440][ T7357] Call Trace: [ 112.377448][ T7357] [ 112.377455][ T7357] dump_stack_lvl+0xe8/0x150 [ 112.377486][ T7357] should_fail_ex+0x412/0x560 [ 112.377514][ T7357] should_failslab+0xa8/0x100 [ 112.377539][ T7357] __kmalloc_noprof+0xe8/0x760 [ 112.377558][ T7357] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 112.377584][ T7357] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 112.377610][ T7357] genl_family_rcv_msg_doit+0xd9/0x330 [ 112.377635][ T7357] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 112.377661][ T7357] ? apparmor_capable+0x126/0x170 [ 112.377688][ T7357] ? bpf_lsm_capable+0x9/0x20 [ 112.377711][ T7357] ? security_capable+0x7e/0x2c0 [ 112.377745][ T7357] genl_rcv_msg+0x61c/0x7a0 [ 112.377770][ T7357] ? __pfx_genl_rcv_msg+0x10/0x10 [ 112.377785][ T7357] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 112.377808][ T7357] ? __pfx_nl80211_set_tx_bitrate_mask+0x10/0x10 [ 112.377828][ T7357] ? __pfx_nl80211_post_doit+0x10/0x10 [ 112.377845][ T7357] ? __lock_acquire+0x6b5/0x2cf0 [ 112.377878][ T7357] netlink_rcv_skb+0x232/0x4b0 [ 112.377903][ T7357] ? __pfx_genl_rcv_msg+0x10/0x10 [ 112.377921][ T7357] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 112.377960][ T7357] ? down_read+0x272/0x2e0 [ 112.377978][ T7357] ? genl_rcv+0xd/0x40 [ 112.377996][ T7357] genl_rcv+0x28/0x40 [ 112.378011][ T7357] netlink_unicast+0x80f/0x9b0 [ 112.378041][ T7357] ? __pfx_netlink_unicast+0x10/0x10 [ 112.378062][ T7357] ? netlink_sendmsg+0x650/0xb40 [ 112.378080][ T7357] ? skb_put+0x11b/0x210 [ 112.378105][ T7357] netlink_sendmsg+0x813/0xb40 [ 112.378133][ T7357] ? __pfx_netlink_sendmsg+0x10/0x10 [ 112.378157][ T7357] ? aa_sock_msg_perm+0xf1/0x1b0 [ 112.378183][ T7357] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 112.378204][ T7357] ____sys_sendmsg+0x972/0x9f0 [ 112.378226][ T7357] ? __pfx_____sys_sendmsg+0x10/0x10 [ 112.378248][ T7357] ? import_iovec+0x73/0xa0 [ 112.378274][ T7357] ___sys_sendmsg+0x2a5/0x360 [ 112.378295][ T7357] ? __pfx____sys_sendmsg+0x10/0x10 [ 112.378341][ T7357] ? __fget_files+0x2a/0x420 [ 112.378363][ T7357] ? __fget_files+0x3a0/0x420 [ 112.378394][ T7357] __x64_sys_sendmsg+0x1bd/0x2a0 [ 112.378412][ T7357] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 112.378435][ T7357] ? __pfx_ksys_write+0x10/0x10 [ 112.378462][ T7357] do_syscall_64+0x14d/0xf80 [ 112.378478][ T7357] ? trace_irq_disable+0x3b/0x150 [ 112.378501][ T7357] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.378518][ T7357] ? clear_bhb_loop+0x40/0x90 [ 112.378539][ T7357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.378556][ T7357] RIP: 0033:0x7efe6579c799 [ 112.378571][ T7357] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.378584][ T7357] RSP: 002b:00007efe6666b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 112.378603][ T7357] RAX: ffffffffffffffda RBX: 00007efe65a15fa0 RCX: 00007efe6579c799 [ 112.378615][ T7357] RDX: 0000000000000010 RSI: 00002000000022c0 RDI: 0000000000000004 [ 112.378626][ T7357] RBP: 00007efe6666b090 R08: 0000000000000000 R09: 0000000000000000 [ 112.378637][ T7357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 112.378646][ T7357] R13: 00007efe65a16038 R14: 00007efe65a15fa0 R15: 00007fffe0163808 [ 112.378673][ T7357] [ 112.824889][ T7371] netlink: 16 bytes leftover after parsing attributes in process `syz.4.458'. [ 112.894467][ T7371] batadv_slave_1: entered promiscuous mode [ 112.978999][ T7371] netlink: 16 bytes leftover after parsing attributes in process `syz.4.458'. [ 113.100175][ T7385] netlink: 8 bytes leftover after parsing attributes in process `syz.0.462'. [ 113.197607][ T7387] netlink: 8 bytes leftover after parsing attributes in process `syz.0.463'. [ 113.538439][ T7400] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 113.646749][ T7403] netlink: 68 bytes leftover after parsing attributes in process `syz.0.469'. [ 113.733470][ T7405] netlink: 40 bytes leftover after parsing attributes in process `syz.2.471'. [ 113.982414][ T7413] ip6_tunnel: non-ECT from 0100:0000:0000:0000:0000:ffff:6401:0100 with DS=0xae [ 114.653731][ T7451] netlink: 12 bytes leftover after parsing attributes in process `syz.1.484'. [ 115.216097][ T7475] netlink: 12 bytes leftover after parsing attributes in process `syz.3.488'. [ 115.241479][ T7478] netlink: 'syz.0.489': attribute type 1 has an invalid length. [ 115.258346][ T5837] block nbd13: Receive control failed (result -32) [ 115.292226][ T7480] netlink: 292 bytes leftover after parsing attributes in process `syz.4.490'. [ 115.474223][ T7489] !: entered promiscuous mode [ 115.781417][ T7506] netlink: 'syz.4.501': attribute type 3 has an invalid length. [ 115.796461][ T7507] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.804976][ T7507] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.120553][ T7542] xt_TPROXY: Can be used only with -p tcp or -p udp [ 119.207889][ T7546] netlink: 'syz.1.520': attribute type 1 has an invalid length. [ 119.287104][ T7546] 8021q: adding VLAN 0 to HW filter on device bond3 [ 119.321958][ T7546] veth3: entered promiscuous mode [ 119.333675][ T7546] bond3: (slave veth3): Enslaving as an active interface with an up link [ 119.392166][ T7556] __nla_validate_parse: 5 callbacks suppressed [ 119.392186][ T7556] netlink: 24 bytes leftover after parsing attributes in process `syz.0.522'. [ 119.665009][ T7568] netlink: 240 bytes leftover after parsing attributes in process `syz.1.528'. [ 119.682198][ T7572] netlink: 8 bytes leftover after parsing attributes in process `syz.4.529'. [ 119.709473][ T10] IPVS: starting estimator thread 0... [ 119.715244][ T7568] netlink: 56 bytes leftover after parsing attributes in process `syz.1.528'. [ 119.733426][ T7572] p: entered promiscuous mode [ 119.794481][ T7566] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 119.811711][ T7575] IPVS: using max 29 ests per chain, 69600 per kthread [ 119.829019][ T7566] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.984308][ T7566] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 120.017134][ T7566] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.017667][ T7599] netlink: 24 bytes leftover after parsing attributes in process `syz.1.537'. [ 120.064479][ T7603] netlink: 36 bytes leftover after parsing attributes in process `syz.0.538'. [ 120.074746][ T7603] netlink: 12 bytes leftover after parsing attributes in process `syz.0.538'. [ 120.121324][ T7566] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 120.134042][ T7566] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.212018][ T7599] netlink: 4 bytes leftover after parsing attributes in process `syz.1.537'. [ 120.283009][ T7566] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 120.318584][ T7566] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.579142][ T7629] sysfs: cannot create duplicate filename '/class/ieee80211/π,xb)% ]3DL̥!' [ 120.597190][ T7629] CPU: 0 UID: 0 PID: 7629 Comm: syz.0.543 Not tainted syzkaller #0 PREEMPT(full) [ 120.597221][ T7629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 120.597233][ T7629] Call Trace: [ 120.597242][ T7629] [ 120.597250][ T7629] dump_stack_lvl+0xe8/0x150 [ 120.597297][ T7629] sysfs_warn_dup+0x8e/0xa0 [ 120.597327][ T7629] sysfs_do_create_link_sd+0xc0/0x110 [ 120.597369][ T7629] device_add_class_symlinks+0x1cf/0x240 [ 120.597395][ T7629] device_add+0x475/0xb70 [ 120.597419][ T7629] wiphy_register+0x1d73/0x2d50 [ 120.597462][ T7629] ? __pfx_wiphy_register+0x10/0x10 [ 120.597494][ T7629] ? __pfx_netdev_run_todo+0x10/0x10 [ 120.597516][ T7629] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 120.597544][ T7629] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 120.597577][ T7629] ieee80211_register_hw+0x35f0/0x42c0 [ 120.597612][ T7629] ? ieee80211_register_hw+0x14f1/0x42c0 [ 120.597644][ T7629] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 120.597683][ T7629] ? __hrtimer_setup+0x181/0x200 [ 120.597709][ T7629] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 120.597734][ T7629] mac80211_hwsim_new_radio+0x3334/0x5b60 [ 120.597780][ T7629] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 120.597797][ T7629] ? kstrndup+0xbf/0x160 [ 120.597833][ T7629] hwsim_new_radio_nl+0xf6a/0x1c00 [ 120.597876][ T7629] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 120.597907][ T7629] ? rcu_is_watching+0x15/0xb0 [ 120.597936][ T7629] ? trace_kmalloc+0x2a/0x110 [ 120.597964][ T7629] ? __nla_parse+0x40/0x60 [ 120.597997][ T7629] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 120.598026][ T7629] genl_family_rcv_msg_doit+0x22a/0x330 [ 120.598052][ T7629] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 120.598082][ T7629] ? bpf_lsm_capable+0x9/0x20 [ 120.598107][ T7629] ? security_capable+0x7e/0x2c0 [ 120.598137][ T7629] genl_rcv_msg+0x61c/0x7a0 [ 120.598172][ T7629] ? __pfx_genl_rcv_msg+0x10/0x10 [ 120.598191][ T7629] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 120.598211][ T7629] ? __lock_acquire+0x6b5/0x2cf0 [ 120.598247][ T7629] netlink_rcv_skb+0x232/0x4b0 [ 120.598273][ T7629] ? __pfx_genl_rcv_msg+0x10/0x10 [ 120.598293][ T7629] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 120.598336][ T7629] ? down_read+0x272/0x2e0 [ 120.598978][ T7629] ? genl_rcv+0xd/0x40 [ 120.599003][ T7629] genl_rcv+0x28/0x40 [ 120.599020][ T7629] netlink_unicast+0x80f/0x9b0 [ 120.599050][ T7629] ? __pfx_netlink_unicast+0x10/0x10 [ 120.599074][ T7629] ? netlink_sendmsg+0x650/0xb40 [ 120.599110][ T7629] ? skb_put+0x11b/0x210 [ 120.599143][ T7629] netlink_sendmsg+0x813/0xb40 [ 120.599179][ T7629] ? __pfx_netlink_sendmsg+0x10/0x10 [ 120.599209][ T7629] ? aa_sock_msg_perm+0xf1/0x1b0 [ 120.599237][ T7629] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 120.599263][ T7629] ____sys_sendmsg+0x972/0x9f0 [ 120.599293][ T7629] ? __pfx_____sys_sendmsg+0x10/0x10 [ 120.599322][ T7629] ? import_iovec+0x73/0xa0 [ 120.599365][ T7629] ___sys_sendmsg+0x2a5/0x360 [ 120.599391][ T7629] ? __pfx____sys_sendmsg+0x10/0x10 [ 120.599417][ T7629] ? futex_wake+0x4ac/0x580 [ 120.599475][ T7629] ? __fget_files+0x2a/0x420 [ 120.599504][ T7629] ? __fget_files+0x3a0/0x420 [ 120.599544][ T7629] __x64_sys_sendmsg+0x1bd/0x2a0 [ 120.599567][ T7629] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 120.599596][ T7629] ? rcu_is_watching+0x15/0xb0 [ 120.599638][ T7629] do_syscall_64+0x14d/0xf80 [ 120.599656][ T7629] ? trace_irq_disable+0x3b/0x150 [ 120.599685][ T7629] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.599705][ T7629] ? clear_bhb_loop+0x40/0x90 [ 120.599730][ T7629] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.599749][ T7629] RIP: 0033:0x7efe6579c799 [ 120.599782][ T7629] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 120.599797][ T7629] RSP: 002b:00007efe6666b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 120.599821][ T7629] RAX: ffffffffffffffda RBX: 00007efe65a15fa0 RCX: 00007efe6579c799 [ 120.599835][ T7629] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004 [ 120.599847][ T7629] RBP: 00007efe65832c99 R08: 0000000000000000 R09: 0000000000000000 [ 120.599859][ T7629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 120.599871][ T7629] R13: 00007efe65a16038 R14: 00007efe65a15fa0 R15: 00007fffe0163808 [ 120.599901][ T7629] [ 121.021978][ T7634] netlink: 12 bytes leftover after parsing attributes in process `syz.1.542'. [ 121.040252][ T7625] netlink: 12 bytes leftover after parsing attributes in process `syz.4.541'. [ 121.097235][ T5835] block nbd15: Receive control failed (result -32) [ 121.104666][ T5837] block nbd14: Receive control failed (result -32) [ 121.570954][ T7655] netlink: 'syz.3.553': attribute type 7 has an invalid length. [ 121.586981][ T7655] netlink: 'syz.3.553': attribute type 8 has an invalid length. [ 121.596111][ T7660] netlink: 'syz.0.555': attribute type 3 has an invalid length. [ 121.865617][ T7676] dvmrp0: left allmulticast mode [ 122.018595][ T5837] block nbd16: Receive control failed (result -32) [ 122.344680][ T7702] xt_TPROXY: Can be used only with -p tcp or -p udp [ 122.376558][ T7671] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 122.423923][ T7707] bridge0: port 3(syz_tun) entered blocking state [ 122.432182][ T7707] bridge0: port 3(syz_tun) entered disabled state [ 122.439730][ T7707] syz_tun: entered allmulticast mode [ 122.446765][ T7707] syz_tun: entered promiscuous mode [ 122.453003][ T7707] bridge0: port 3(syz_tun) entered blocking state [ 122.460473][ T7707] bridge0: port 3(syz_tun) entered forwarding state [ 122.659238][ T7712] netlink: 'syz.3.572': attribute type 1 has an invalid length. [ 123.052484][ T7714] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 123.064026][ T7714] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 123.156482][ T7717] bond1: (slave gretap0): making interface the new active one [ 123.165537][ T7717] bond1: (slave gretap0): Enslaving as an active interface with an up link [ 123.470406][ T7750] netlink: 'syz.3.585': attribute type 1 has an invalid length. [ 123.502934][ T7750] bond2: entered promiscuous mode [ 123.508026][ T7750] bond2: entered allmulticast mode [ 123.514058][ T7750] 8021q: adding VLAN 0 to HW filter on device bond2 [ 123.571437][ T7755] erspan1: entered allmulticast mode [ 123.584750][ T7755] bond2: (slave erspan1): making interface the new active one [ 123.592736][ T7755] erspan1: entered promiscuous mode [ 123.600251][ T7755] bond2: (slave erspan1): Enslaving as an active interface with an up link [ 123.609680][ T7754] tipc: Started in network mode [ 123.616001][ T7754] tipc: Node identity eac84606d072, cluster identity 4711 [ 123.624893][ T7754] tipc: Enabled bearer , priority 0 [ 123.657202][ T7754] syzkaller0: MTU too low for tipc bearer [ 123.665797][ T7754] tipc: Disabling bearer [ 124.260512][ T7785] netlink: 'syz.2.598': attribute type 27 has an invalid length. [ 124.375703][ T7788] "syz.3.600" (7788) uses obsolete ecb(arc4) skcipher [ 124.460612][ T7803] __nla_validate_parse: 9 callbacks suppressed [ 124.460631][ T7803] netlink: 4 bytes leftover after parsing attributes in process `syz.0.603'. [ 124.785560][ T7818] netlink: 24 bytes leftover after parsing attributes in process `syz.2.607'. [ 124.808932][ T7820] netlink: 88 bytes leftover after parsing attributes in process `syz.4.608'. [ 125.151482][ T7833] netlink: 'syz.1.612': attribute type 3 has an invalid length. [ 125.289673][ T7835] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 125.365453][ T7848] xt_TPROXY: Can be used only with -p tcp or -p udp [ 125.396323][ T7843] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.526932][ T7843] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.564622][ T7859] netlink: 148 bytes leftover after parsing attributes in process `syz.1.619'. [ 125.578100][ T7859] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 125.663273][ T7843] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.777553][ T7843] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.895969][ T64] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.913914][ T64] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.930322][ T64] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.946293][ T64] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.671963][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 169.056448][ T7914] netlink: 24 bytes leftover after parsing attributes in process `syz.0.636'. [ 169.154885][ T7922] geneve2: entered promiscuous mode [ 169.169045][ T7922] geneve2: entered allmulticast mode [ 169.278588][ T7931] netlink: 36 bytes leftover after parsing attributes in process `syz.0.643'. [ 169.603190][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.621540][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.679091][ T9] ------------[ cut here ]------------ [ 169.682330][ T7943] netlink: 4 bytes leftover after parsing attributes in process `syz.4.648'. [ 169.684890][ T9] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0 [ 169.703609][ T9] WARNING: net/mac80211/rate.c:406 at __rate_control_send_low+0x524/0x800, CPU#0: kworker/0:0/9 [ 169.714121][ T9] Modules linked in: [ 169.718281][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted syzkaller #0 PREEMPT(full) [ 169.726113][ T7943] openvswitch: netlink: Flow actions attr not present in new flow. [ 169.727441][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 169.745562][ T9] Workqueue: mld mld_ifc_work [ 169.750323][ T9] RIP: 0010:__rate_control_send_low+0x5bb/0x800 [ 169.756600][ T9] Code: ff 4c 8b 7c 24 08 48 8b 44 24 38 0f b6 04 28 84 c0 0f 85 d3 01 00 00 41 8b 0f 4c 89 f7 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 <67> 48 0f b9 3a 4c 8b 74 24 30 e9 81 fe ff ff 44 89 f9 80 e1 07 80 [ 169.776280][ T9] RSP: 0018:ffffc900000e6678 EFLAGS: 00010246 [ 169.782431][ T9] RAX: 0000000000000000 RBX: 000000000000000c RCX: 0000000000000000 [ 169.790464][ T9] RDX: 00000000ffffffff RSI: 0000000000000000 RDI: ffffffff90228b90 [ 169.798460][ T9] RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000000 [ 169.806498][ T9] R10: 0000000000000004 R11: 0000000000000000 R12: ffff88807b6397a8 [ 169.814534][ T9] R13: 0000000000000000 R14: ffffffff90228b90 R15: ffff88805ab83138 [ 169.822558][ T9] FS: 0000000000000000(0000) GS:ffff888125465000(0000) knlGS:0000000000000000 [ 169.831566][ T9] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 169.838173][ T9] CR2: 0000001b30722ff8 CR3: 000000000e54c000 CR4: 00000000003526f0 [ 169.846249][ T9] Call Trace: [ 169.849578][ T9] [ 169.852543][ T9] rate_control_send_low+0x1a7/0x7b0 [ 169.857854][ T9] ? unwind_next_frame+0xa5/0x23c0 [ 169.863075][ T9] rate_control_get_rate+0x20b/0x5d0 [ 169.868412][ T9] ieee80211_tx_h_rate_ctrl+0xaf6/0x1760 [ 169.874169][ T9] ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10 [ 169.880342][ T9] invoke_tx_handlers_late+0xba/0x18a0 [ 169.885880][ T9] ? ieee80211_tx_h_select_key+0xd1b/0x1ab0 [ 169.891896][ T9] ieee80211_tx_dequeue+0x3f4c/0x5440 [ 169.897382][ T9] ? __pfx_ieee80211_tx_dequeue+0x10/0x10 [ 169.903207][ T9] ? ieee80211_next_txq+0x82e/0x9a0 [ 169.908484][ T9] ieee80211_handle_wake_tx_queue+0x132/0x2c0 [ 169.914653][ T9] ? __pfx_ieee80211_handle_wake_tx_queue+0x10/0x10 [ 169.921318][ T9] ? ieee80211_queue_skb+0x184f/0x2260 [ 169.926821][ T9] ? __local_bh_enable_ip+0xd0/0x130 [ 169.932190][ T9] ieee80211_queue_skb+0x1a3f/0x2260 [ 169.937549][ T9] ieee80211_tx+0x2c2/0x4b0 [ 169.942135][ T9] ? __pfx_ieee80211_tx+0x10/0x10 [ 169.947212][ T9] ? ieee80211_xmit+0x315/0x400 [ 169.952134][ T9] __ieee80211_subif_start_xmit+0xd12/0x1660 [ 169.958137][ T9] ? __ieee80211_subif_start_xmit+0x2cf/0x1660 [ 169.964350][ T9] ? process_scheduled_works+0xb02/0x1830 [ 169.970149][ T9] ? __pfx___ieee80211_subif_start_xmit+0x10/0x10 [ 169.976605][ T9] ? ieee80211_multicast_to_unicast+0x19c/0x320 [ 169.983103][ T9] ieee80211_subif_start_xmit+0xf3/0x570 [ 169.989691][ T9] ? __pfx_ieee80211_subif_start_xmit+0x10/0x10 [ 169.995969][ T9] ? skb_network_protocol+0x23d/0x3f0 [ 170.001433][ T9] dev_hard_start_xmit+0x2d8/0x870 [ 170.006603][ T9] __dev_queue_xmit+0x17a7/0x38d0 [ 170.011705][ T9] ? __dev_queue_xmit+0x28d/0x38d0 [ 170.016854][ T9] ? ___neigh_create+0x1c5f/0x2280 [ 170.022049][ T9] ? __local_bh_enable_ip+0xd0/0x130 [ 170.027368][ T9] ? lockdep_hardirqs_on+0x7a/0x110 [ 170.032652][ T9] ? __pfx___dev_queue_xmit+0x10/0x10 [ 170.038056][ T9] ? neigh_resolve_output+0x438/0x750 [ 170.043509][ T9] ? eth_header+0x11b/0x200 [ 170.048051][ T9] ? __asan_memcpy+0x40/0x70 [ 170.052733][ T9] ? eth_header+0x11b/0x200 [ 170.057284][ T9] ? __pfx_eth_header+0x10/0x10 [ 170.062213][ T9] ? neigh_resolve_output+0x624/0x750 [ 170.067633][ T9] ? ip6_output+0x126/0x550 [ 170.072221][ T9] ip6_output+0x340/0x550 [ 170.076613][ T9] ? __pfx_ip6_output+0x10/0x10 [ 170.081547][ T9] NF_HOOK+0x177/0x4f0 [ 170.085661][ T9] ? __pfx_NF_HOOK+0x10/0x10 [ 170.090323][ T9] ? __pfx_dst_output+0x10/0x10 [ 170.095233][ T9] ? lockdep_hardirqs_on+0x7a/0x110 [ 170.100505][ T9] ? __local_bh_enable_ip+0xd0/0x130 [ 170.105825][ T9] ? icmp6_dst_alloc+0x3a6/0x440 [ 170.110839][ T9] mld_sendpack+0x8b4/0xe40 [ 170.115376][ T9] ? look_up_lock_class+0x57/0x110 [ 170.120600][ T9] ? mld_sendpack+0x213/0xe40 [ 170.125308][ T9] ? __pfx_mld_sendpack+0x10/0x10 [ 170.130447][ T9] mld_ifc_work+0x835/0xe70 [ 170.134986][ T9] ? process_scheduled_works+0xa25/0x1830 [ 170.140826][ T9] process_scheduled_works+0xb02/0x1830 [ 170.146438][ T9] ? __pfx_process_scheduled_works+0x10/0x10 [ 170.152529][ T9] ? assign_work+0x3d5/0x5e0 [ 170.157161][ T9] worker_thread+0xa50/0xfc0 [ 170.161909][ T9] kthread+0x388/0x470 [ 170.166006][ T9] ? __pfx_worker_thread+0x10/0x10 [ 170.171205][ T9] ? __pfx_kthread+0x10/0x10 [ 170.175823][ T9] ret_from_fork+0x51e/0xb90 [ 170.180507][ T9] ? __pfx_ret_from_fork+0x10/0x10 [ 170.185655][ T9] ? __switch_to+0xc7d/0x1450 [ 170.190406][ T9] ? __pfx_kthread+0x10/0x10 [ 170.195023][ T9] ret_from_fork_asm+0x1a/0x30 [ 170.199870][ T9] [ 170.202932][ T9] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 170.210233][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted syzkaller #0 PREEMPT(full) [ 170.219356][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 170.229425][ T9] Workqueue: mld mld_ifc_work [ 170.234200][ T9] Call Trace: [ 170.237474][ T9] [ 170.240515][ T9] vpanic+0x56c/0xa60 [ 170.244540][ T9] ? __pfx__printk+0x10/0x10 [ 170.249131][ T9] ? __pfx_vpanic+0x10/0x10 [ 170.253632][ T9] ? is_bpf_text_address+0x292/0x2b0 [ 170.258915][ T9] ? is_bpf_text_address+0x26/0x2b0 [ 170.264130][ T9] panic+0xc5/0xd0 [ 170.267850][ T9] ? __pfx_panic+0x10/0x10 [ 170.272272][ T9] ? ret_from_fork_asm+0x1a/0x30 [ 170.277209][ T9] __warn+0x315/0x4f0 [ 170.281184][ T9] ? __rate_control_send_low+0x524/0x800 [ 170.286863][ T9] ? __rate_control_send_low+0x524/0x800 [ 170.292510][ T9] __report_bug+0x29a/0x540 [ 170.297016][ T9] ? __rate_control_send_low+0x524/0x800 [ 170.302661][ T9] ? __pfx___report_bug+0x10/0x10 [ 170.307699][ T9] report_bug_entry+0x19a/0x290 [ 170.312561][ T9] ? __rate_control_send_low+0x5bb/0x800 [ 170.318196][ T9] ? __rate_control_send_low+0x5c0/0x800 [ 170.323844][ T9] handle_bug+0xce/0x200 [ 170.328089][ T9] exc_invalid_op+0x1a/0x50 [ 170.332606][ T9] asm_exc_invalid_op+0x1a/0x20 [ 170.337461][ T9] RIP: 0010:__rate_control_send_low+0x5bb/0x800 [ 170.343786][ T9] Code: ff 4c 8b 7c 24 08 48 8b 44 24 38 0f b6 04 28 84 c0 0f 85 d3 01 00 00 41 8b 0f 4c 89 f7 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 <67> 48 0f b9 3a 4c 8b 74 24 30 e9 81 fe ff ff 44 89 f9 80 e1 07 80 [ 170.363489][ T9] RSP: 0018:ffffc900000e6678 EFLAGS: 00010246 [ 170.369550][ T9] RAX: 0000000000000000 RBX: 000000000000000c RCX: 0000000000000000 [ 170.377517][ T9] RDX: 00000000ffffffff RSI: 0000000000000000 RDI: ffffffff90228b90 [ 170.385495][ T9] RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000000 [ 170.393468][ T9] R10: 0000000000000004 R11: 0000000000000000 R12: ffff88807b6397a8 [ 170.401446][ T9] R13: 0000000000000000 R14: ffffffff90228b90 R15: ffff88805ab83138 [ 170.409426][ T9] ? __rate_control_send_low+0x58d/0x800 [ 170.415160][ T9] rate_control_send_low+0x1a7/0x7b0 [ 170.420564][ T9] ? unwind_next_frame+0xa5/0x23c0 [ 170.425783][ T9] rate_control_get_rate+0x20b/0x5d0 [ 170.431101][ T9] ieee80211_tx_h_rate_ctrl+0xaf6/0x1760 [ 170.436749][ T9] ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10 [ 170.442829][ T9] invoke_tx_handlers_late+0xba/0x18a0 [ 170.448309][ T9] ? ieee80211_tx_h_select_key+0xd1b/0x1ab0 [ 170.454248][ T9] ieee80211_tx_dequeue+0x3f4c/0x5440 [ 170.459662][ T9] ? __pfx_ieee80211_tx_dequeue+0x10/0x10 [ 170.465398][ T9] ? ieee80211_next_txq+0x82e/0x9a0 [ 170.470619][ T9] ieee80211_handle_wake_tx_queue+0x132/0x2c0 [ 170.476696][ T9] ? __pfx_ieee80211_handle_wake_tx_queue+0x10/0x10 [ 170.483307][ T9] ? ieee80211_queue_skb+0x184f/0x2260 [ 170.488779][ T9] ? __local_bh_enable_ip+0xd0/0x130 [ 170.494077][ T9] ieee80211_queue_skb+0x1a3f/0x2260 [ 170.499378][ T9] ieee80211_tx+0x2c2/0x4b0 [ 170.503878][ T9] ? __pfx_ieee80211_tx+0x10/0x10 [ 170.508927][ T9] ? ieee80211_xmit+0x315/0x400 [ 170.513808][ T9] __ieee80211_subif_start_xmit+0xd12/0x1660 [ 170.519789][ T9] ? __ieee80211_subif_start_xmit+0x2cf/0x1660 [ 170.525937][ T9] ? process_scheduled_works+0xb02/0x1830 [ 170.531667][ T9] ? __pfx___ieee80211_subif_start_xmit+0x10/0x10 [ 170.538177][ T9] ? ieee80211_multicast_to_unicast+0x19c/0x320 [ 170.544417][ T9] ieee80211_subif_start_xmit+0xf3/0x570 [ 170.550063][ T9] ? __pfx_ieee80211_subif_start_xmit+0x10/0x10 [ 170.556317][ T9] ? skb_network_protocol+0x23d/0x3f0 [ 170.561711][ T9] dev_hard_start_xmit+0x2d8/0x870 [ 170.566826][ T9] __dev_queue_xmit+0x17a7/0x38d0 [ 170.571847][ T9] ? __dev_queue_xmit+0x28d/0x38d0 [ 170.577212][ T9] ? ___neigh_create+0x1c5f/0x2280 [ 170.582323][ T9] ? __local_bh_enable_ip+0xd0/0x130 [ 170.587619][ T9] ? lockdep_hardirqs_on+0x7a/0x110 [ 170.592811][ T9] ? __pfx___dev_queue_xmit+0x10/0x10 [ 170.598177][ T9] ? neigh_resolve_output+0x438/0x750 [ 170.603632][ T9] ? eth_header+0x11b/0x200 [ 170.608132][ T9] ? __asan_memcpy+0x40/0x70 [ 170.612738][ T9] ? eth_header+0x11b/0x200 [ 170.617538][ T9] ? __pfx_eth_header+0x10/0x10 [ 170.622384][ T9] ? neigh_resolve_output+0x624/0x750 [ 170.627780][ T9] ? ip6_output+0x126/0x550 [ 170.632303][ T9] ip6_output+0x340/0x550 [ 170.636631][ T9] ? __pfx_ip6_output+0x10/0x10 [ 170.641506][ T9] NF_HOOK+0x177/0x4f0 [ 170.645578][ T9] ? __pfx_NF_HOOK+0x10/0x10 [ 170.650160][ T9] ? __pfx_dst_output+0x10/0x10 [ 170.654999][ T9] ? lockdep_hardirqs_on+0x7a/0x110 [ 170.660194][ T9] ? __local_bh_enable_ip+0xd0/0x130 [ 170.665472][ T9] ? icmp6_dst_alloc+0x3a6/0x440 [ 170.670405][ T9] mld_sendpack+0x8b4/0xe40 [ 170.674904][ T9] ? look_up_lock_class+0x57/0x110 [ 170.680025][ T9] ? mld_sendpack+0x213/0xe40 [ 170.684712][ T9] ? __pfx_mld_sendpack+0x10/0x10 [ 170.689749][ T9] mld_ifc_work+0x835/0xe70 [ 170.694264][ T9] ? process_scheduled_works+0xa25/0x1830 [ 170.699986][ T9] process_scheduled_works+0xb02/0x1830 [ 170.705548][ T9] ? __pfx_process_scheduled_works+0x10/0x10 [ 170.711528][ T9] ? assign_work+0x3d5/0x5e0 [ 170.716126][ T9] worker_thread+0xa50/0xfc0 [ 170.720746][ T9] kthread+0x388/0x470 [ 170.724812][ T9] ? __pfx_worker_thread+0x10/0x10 [ 170.729972][ T9] ? __pfx_kthread+0x10/0x10 [ 170.734568][ T9] ret_from_fork+0x51e/0xb90 [ 170.739169][ T9] ? __pfx_ret_from_fork+0x10/0x10 [ 170.744322][ T9] ? __switch_to+0xc7d/0x1450 [ 170.749020][ T9] ? __pfx_kthread+0x10/0x10 [ 170.753603][ T9] ret_from_fork_asm+0x1a/0x30 [ 170.758368][ T9] [ 170.761656][ T9] Kernel Offset: disabled [ 170.765980][ T9] Rebooting in 86400 seconds..