last executing test programs: 4.225821195s ago: executing program 3 (id=4759): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@ieee802154={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0002}}}, 0x80, 0x0}, 0x20000001) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x60, @empty=0xf5ff}, 0x1b, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f00000011c0)="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", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x3e}}, @ip_tos_u8={{0x38, 0x29, 0x2}}, @ip_tos_u8={{0x100000000000000}}], 0x50}, 0xff00) 3.758229307s ago: executing program 3 (id=4763): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000080), 0x4) 3.369320153s ago: executing program 3 (id=4768): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write(r0, &(0x7f0000001f00)="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", 0x2e6) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000140)="4a2a55b38b1bd0e10f421c55c595de03a2e1eb5b4bde024863e2c2401a81caa7143ff3fccb2918d5bbd9de54afdded946def5ad284048b03557fc9fe9c0c21f0935578410511bc617e68c2a55a5f14d533dae3d3ac0eb71a835fc08573d0bac4d1797fd2b7702732baf91d796fd2c0be505fdabeef568a3d1b54ab870aa2e42100b0cdbe28891dcf3f2bcc450790c340f3b90c6cf74d2e3b", 0xfe2b, 0x10000485, 0x0, 0xfffffffffffffe91) 2.798287273s ago: executing program 0 (id=4774): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000140)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000006a40)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000034c0)=""/4101, 0x1010}, {&(0x7f0000000080)=""/90, 0x5a}, {&(0x7f0000000480)=""/42, 0x2a}, {&(0x7f0000000340)=""/88, 0x58}, {&(0x7f0000000180)=""/98, 0x62}, {&(0x7f0000002480)=""/4102, 0x1006}, {&(0x7f0000000280)=""/24, 0x18}], 0x7, 0x0, 0xff03}, 0x3}, {{0x0, 0x0, 0x0}, 0x7ffffff}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x100}], 0x4, 0x0, 0x0) 2.621122921s ago: executing program 1 (id=4776): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="5c00000015006b04000000d86e6c1d000a887ea6ea65670000000000000090f9c3dc90f8f41f8ecff32c6e020075e300250045586c8da718ad4b4460bc24eab55600000000000000bf9367b4fa51f60a64c9f4d4938037e786a6d0bd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 2.466154588s ago: executing program 0 (id=4778): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000600)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000080)='notify_on_release\x00', 0x2, 0x0) mkdirat$cgroup(r0, &(0x7f00000005c0)='syz1\x00', 0x1ff) 2.31311711s ago: executing program 1 (id=4779): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1341, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x75, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xd0}, [@initr0]}, 0x0}, 0x94) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd6372ce22667f2b00dbf6e97158cf474fec87891f6d76745b686158bbcfe8875afdef00010000000006"], 0x66) 2.29632263s ago: executing program 3 (id=4780): recvmsg$unix(0xffffffffffffffff, 0x0, 0x40000000) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000dbee000000000000d300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000007b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) 2.263216913s ago: executing program 2 (id=4781): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xb, 0x5, 0x9fd, 0x84, 0x1}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000030000000400000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000087b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000400008500000001000000850000000e00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r1}, 0xc) 2.201911687s ago: executing program 4 (id=4782): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x18000000000002a0, 0xf, 0x0, &(0x7f00000011c0)="b9ffddc1ddcccdf175537d53888edf", 0x0, 0x600, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.076867557s ago: executing program 0 (id=4783): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0xc045d6e08e8aad4e, 0x27, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 1.936649504s ago: executing program 1 (id=4784): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000a37a"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000a80)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd6372ce22667f2b00dbf6e97158cf474fec87891f6d76745b686158bbcfe8875afdef00010000000029"], 0x66) 1.73717108s ago: executing program 0 (id=4785): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000280)={'ipvlan1\x00', 0x400}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000001c0)={'ip6gretap0\x00', 0x400}) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(0x3) 1.659177437s ago: executing program 1 (id=4786): syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r0, &(0x7f00000000c0)=ANY=[@ANYRES8=r0, @ANYRES16=r0, @ANYRES32], 0xffdd) 1.649202683s ago: executing program 2 (id=4787): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000000008500000017000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000002000000850000001700000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xdfc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.399546672s ago: executing program 4 (id=4788): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x122}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="01000000040000000400000004"], 0x50) 1.34916563s ago: executing program 2 (id=4789): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x19, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000060000000bf09000000000000550901000074f6967d00000000000000180100002020702500000000002020207baaf8ff00000000bda100000000000027010000f8ffffffb702000008000000b7030000000000002500000006000000be91000000000000b502ecffffff00008500000005000000b70000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.196938607s ago: executing program 2 (id=4790): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x15, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x4000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x800700}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x0, 0xffffff1f}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {0x4, 0x0, 0x6}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.100062154s ago: executing program 4 (id=4791): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000e00)=ANY=[@ANYBLOB="bf16000000000000b7070000010000004070000000000000500000000000e1ff95000000000000002ba76bb33123751c4e345c652fbc1626cca2a2ad75806150ae0209e62751ee04000000670d25010000020000040000009fc404000000c788b277beee11bf9b0a4def23d410f6accd3641110bec4e90a6341965dac03d04683712a0b09edc9e9ef8f6e396ad200e011ea665c45a3449abe802f5ab3e89cf40b8580218ce740068720000074e3e8eea3fd8cf49827ca311f5b87e1ca8433a8acd715f5888b2007f0000000000000000010000000000fb00010000000000414027efc84293af6a22000000005335001db43a5c000000000000000024000000000000000000e75a89faff01210cce39bf405f1e846c1242000000000000cad326ad7add65873d9f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d617da7fb5e2a431ab9142f3a06d55740a43088696daaed74b9c5c29647d2f950a959cf9938d6df8600a62e96b7cb8e52cbdc2ba9d580609e31c30891f7e5ff7fd6fce424c2200af6c3784a1975fa657de38a3a32a4fd67ce446ac5431d07db79240acaf091231b986e77d05d988d6edc71df48dca02113a38300c2bf2b5543ffc1669557b3819d8c396d2c2361629d1022f722ec23812770d72cd0010000007889b8c7044f563a1f68d4eff895fdbc463f747c08f40105869035000000000000000000000000000000000000000000000000080000003ddf4aa4b1c8baa0ae6feb6737c275dc2740f742b5425f1d581961471cdb0500000000000000d4123f955267fe4a75c114f874e086287547d4099aeec9f1538ee25a365ccf4a9b604e88e12ff25184d4e3c6f7f623559435b26b50fb7113000000f0bc440550ee91302f5a000000000000000000000000006d0000e67ccc00148ac4c43021cce9f24f4b2f9492c32e7af05c648978d9980ba49789906d923e4916f390ab7edcd3f5b9fe14446dd446a52131c464f2c08efb46d934615c8631b7c42efd0294bea179b0433f5c899119ec2c3f4523110c0acef5383b5a2720caeb68f1e9c05b05d89467ded84da093dea262e51811e2d7fa515722516bd5ef6c8c4966e5937562a5648a696ad3a042a7097ddefe0671f977fb145890f5bf41ba92b8c4c8b14f0d4a880ef4518bb32881dfd15dc84e79d326337e21e041654f06bd7f000000000000000000000000000000282ffe0000000009350cfa3ab109ab4a7d95938c5334a0dd177f1a7389ee570d95e543a27546d3770740f354df6dd6b1bfe4104d2262f33f596d606ccce75a3c3d5f9ad94a7316b0c6ad14f1398a6b39b07121f636da418b34d48677cf8d2d99ee8ac50142bcdcc73dd73cc6ec46896ffb35ac82ac7a9309ea07396d2814dc630ad1a9913934849be25f7b81b59aaa9fa2e9d6ecafcfa1de81b2d3581ab1138537f98d2240b6c2bf40569da4e2bb77532ab9220347d78319617d17e14f7331486e86b2145980b95c88ae11b1c6b6ea6c2b2311d6ce6315cc451dd50ac746acd59d075b41f9a747894956b10453ccf6527d8f579256e9849bbaf6c7c84362209d3d2320101d57"], &(0x7f0000000140)='GPL\x00'}, 0x48) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000003c0)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe80003f000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5", 0xd2}, {&(0x7f00000004c0)="f80ec2e2badd", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0x0) 961.074445ms ago: executing program 3 (id=4792): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0a000000020000003f00000040"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000a80), 0x1007, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000080)={r0, &(0x7f0000001b80), &(0x7f0000001c40)=""/245}, 0x20) 807.149093ms ago: executing program 4 (id=4793): socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000340)="f4001100032b2c25fe8007000000007a2c08000000090000ff110000000000000000fffffff50000", 0x5dc}], 0x1}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{}, &(0x7f0000001d80), &(0x7f0000001d40)}, 0x20) 656.473095ms ago: executing program 4 (id=4794): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000003540)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) 509.041905ms ago: executing program 1 (id=4795): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="120000000b0000000400000002"], 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xc, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071125d000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000500)=""/64}, 0x20) 468.06608ms ago: executing program 0 (id=4796): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r0, 0x0, 0x0}, 0x10) 315.198016ms ago: executing program 2 (id=4797): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xf, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000ff0f00000000000000000000711106000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 253.96684ms ago: executing program 4 (id=4798): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000980)=0xc833) 126.977419ms ago: executing program 1 (id=4799): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x4, 0x4, 0x4, 0x3, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x8, &(0x7f0000000300)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r0}, @generic={0xb7, 0x3, 0x0, 0x0, 0x8}, @generic={0xbf, 0x4, 0xa}, @generic={0x7, 0x4, 0x0, 0x0, 0xfffffff8}, @generic={0xb7, 0x5}, @generic={0x85, 0x0, 0x0, 0x0, 0x19}, @generic={0x95}], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 104.107017ms ago: executing program 3 (id=4800): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000404000000002e"], 0x0, 0x37}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0900000004000000040000000a00000004000000", @ANYRES32, @ANYBLOB="0000000000000000003820b178c184c522000000", @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="0200000001"], 0x48) 37.441489ms ago: executing program 0 (id=4801): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 0s ago: executing program 2 (id=4802): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="89a6806f1bc81a000000000000000001851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000101180000000000000000000000000000009500000000000000360a000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) kernel console output (not intermixed with test programs): 2) [ 459.253187][T15891] bond1: option min_links: allowed values 0 - 2147483647 [ 459.282344][T15891] bond1 (unregistering): Released all slaves [ 459.580075][T15667] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 460.364943][T15897] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3186'. [ 460.450284][T15932] FAULT_INJECTION: forcing a failure. [ 460.450284][T15932] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 460.450357][T15932] CPU: 1 UID: 0 PID: 15932 Comm: syz.0.3192 Not tainted syzkaller #0 PREEMPT(full) [ 460.450385][T15932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 460.450399][T15932] Call Trace: [ 460.450408][T15932] [ 460.450418][T15932] dump_stack_lvl+0xe8/0x150 [ 460.450456][T15932] should_fail_ex+0x410/0x560 [ 460.450496][T15932] _copy_from_user+0x2d/0xb0 [ 460.450522][T15932] __se_sys_select+0xe7/0x2d0 [ 460.450549][T15932] ? fput+0xa0/0xd0 [ 460.450577][T15932] ? __pfx___se_sys_select+0x10/0x10 [ 460.450603][T15932] ? __pfx_ksys_write+0x10/0x10 [ 460.450642][T15932] ? __x64_sys_select+0x20/0xc0 [ 460.450671][T15932] do_syscall_64+0x166/0x520 [ 460.450702][T15932] ? trace_irq_disable+0x3b/0x140 [ 460.450725][T15932] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.450747][T15932] ? clear_bhb_loop+0x70/0xc0 [ 460.450776][T15932] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.450798][T15932] RIP: 0033:0x7f785799e159 [ 460.450819][T15932] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 460.450838][T15932] RSP: 002b:00007f785889e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 460.450862][T15932] RAX: ffffffffffffffda RBX: 00007f7857c26180 RCX: 00007f785799e159 [ 460.450879][T15932] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000002a [ 460.450893][T15932] RBP: 00007f785889e090 R08: 0000200000000440 R09: 0000000000000000 [ 460.450908][T15932] R10: 0000200000000400 R11: 0000000000000246 R12: 0000000000000001 [ 460.450923][T15932] R13: 00007f7857c26218 R14: 00007f7857c26180 R15: 00007ffe59ae7568 [ 460.450959][T15932] [ 460.827645][T15937] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3193'. [ 460.846145][T15937] netlink: 'syz.2.3193': attribute type 10 has an invalid length. [ 460.846190][T15937] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3193'. [ 460.847033][T15937] dummy0: entered promiscuous mode [ 461.022049][T15667] veth0_vlan: entered promiscuous mode [ 461.044723][T15667] veth1_vlan: entered promiscuous mode [ 461.095528][T15667] veth0_macvtap: entered promiscuous mode [ 461.108357][T15667] veth1_macvtap: entered promiscuous mode [ 461.132666][T15667] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 461.149907][T15667] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 461.206696][ T7645] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.226313][ T7654] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.228224][ T7654] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.228367][ T7654] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.578740][T15950] syzkaller0: entered promiscuous mode [ 461.586163][T15950] syzkaller0: entered allmulticast mode [ 461.597845][T15951] netlink: 'syz.0.3197': attribute type 5 has an invalid length. [ 461.701940][T15949] netlink: 216 bytes leftover after parsing attributes in process `syz.1.3195'. [ 461.702020][T15949] tc_dump_action: action bad kind [ 461.909586][T15959] Cannot find set identified by id 65534 to match [ 462.077464][ T1113] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 462.077559][ T1113] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 462.183320][T15969] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 462.198265][T15969] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 462.580831][T15977] xt_SECMARK: invalid mode: 9 [ 462.610069][T15982] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3116'. [ 463.309601][ T4931] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 463.330646][ T4931] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 463.347031][ T4931] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 463.359274][ T4931] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 463.367152][ T4931] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 463.375987][T15992] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3206'. [ 463.863851][T16004] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3210'. [ 464.024645][ T7657] IPVS: starting estimator thread 0... [ 464.053601][T16004] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3210'. [ 464.075163][T15984] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3203'. [ 464.128545][T16009] IPVS: using max 24 ests per chain, 57600 per kthread [ 464.214676][T16015] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3212'. [ 465.098306][T15989] lo speed is unknown, defaulting to 1000 [ 465.230010][T16041] FAULT_INJECTION: forcing a failure. [ 465.230010][T16041] name failslab, interval 1, probability 0, space 0, times 0 [ 465.244559][T16041] CPU: 0 UID: 0 PID: 16041 Comm: syz.2.3217 Not tainted syzkaller #0 PREEMPT(full) [ 465.244590][T16041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 465.244603][T16041] Call Trace: [ 465.244612][T16041] [ 465.244621][T16041] dump_stack_lvl+0xe8/0x150 [ 465.244659][T16041] should_fail_ex+0x410/0x560 [ 465.244699][T16041] should_failslab+0xa8/0x100 [ 465.244729][T16041] __kmalloc_cache_noprof+0xa3/0x600 [ 465.244765][T16041] ? __pollwait+0x27f/0x430 [ 465.244787][T16041] ? __pollwait+0x27f/0x430 [ 465.244817][T16041] __pollwait+0x27f/0x430 [ 465.244843][T16041] ? __pfx___pollwait+0x10/0x10 [ 465.244867][T16041] pipe_poll+0x20f/0x570 [ 465.244889][T16041] ? __pfx_pipe_poll+0x10/0x10 [ 465.244915][T16041] do_select+0x1067/0x17f0 [ 465.244971][T16041] ? __pfx_do_select+0x10/0x10 [ 465.244997][T16041] ? lock_acquire+0x115/0x350 [ 465.245030][T16041] ? __lock_acquire+0x6df/0x2e50 [ 465.245051][T16041] ? __pfx___pollwait+0x10/0x10 [ 465.245081][T16041] ? __pfx_pollwake+0x10/0x10 [ 465.245110][T16041] ? __pfx_pollwake+0x10/0x10 [ 465.245140][T16041] ? __pfx_pollwake+0x10/0x10 [ 465.245170][T16041] ? __pfx_pollwake+0x10/0x10 [ 465.245200][T16041] ? __pfx_pollwake+0x10/0x10 [ 465.245229][T16041] ? __pfx_pollwake+0x10/0x10 [ 465.245259][T16041] ? __pfx_pollwake+0x10/0x10 [ 465.245289][T16041] ? __pfx_pollwake+0x10/0x10 [ 465.245323][T16041] ? __pfx_pollwake+0x10/0x10 [ 465.245373][T16041] core_sys_select+0x86d/0xb40 [ 465.245414][T16041] ? __pfx_core_sys_select+0x10/0x10 [ 465.245465][T16041] ? __pfx_timespec64_add_safe+0x10/0x10 [ 465.245531][T16041] __se_sys_select+0x12c/0x2d0 [ 465.245556][T16041] ? fput+0xa0/0xd0 [ 465.245585][T16041] ? __pfx___se_sys_select+0x10/0x10 [ 465.245611][T16041] ? __pfx_ksys_write+0x10/0x10 [ 465.245648][T16041] ? __x64_sys_select+0x20/0xc0 [ 465.245677][T16041] do_syscall_64+0x166/0x520 [ 465.245709][T16041] ? trace_irq_disable+0x3b/0x140 [ 465.245730][T16041] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.245753][T16041] ? clear_bhb_loop+0x70/0xc0 [ 465.245781][T16041] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.245803][T16041] RIP: 0033:0x7fed9519e159 [ 465.245824][T16041] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 465.245843][T16041] RSP: 002b:00007fed95fe1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 465.245868][T16041] RAX: ffffffffffffffda RBX: 00007fed95426090 RCX: 00007fed9519e159 [ 465.245885][T16041] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000002a [ 465.245899][T16041] RBP: 00007fed95fe1090 R08: 0000200000000440 R09: 0000000000000000 [ 465.245914][T16041] R10: 0000200000000400 R11: 0000000000000246 R12: 0000000000000001 [ 465.245928][T16041] R13: 00007fed95426128 R14: 00007fed95426090 R15: 00007ffc2784d7f8 [ 465.245963][T16041] [ 465.496742][ T4931] Bluetooth: hci1: command tx timeout [ 465.791822][ T5615] block nbd11: Receive control failed (result -110) [ 465.815237][T16047] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 465.838735][T16052] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3221'. [ 465.908853][T16054] xt_bpf: check failed: parse error [ 466.659491][T16056] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3225'. [ 466.959752][T16061] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 467.289803][T16089] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3230'. [ 467.401404][T15989] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.412409][T15989] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.419913][T15989] bridge_slave_0: entered allmulticast mode [ 467.428990][T15989] bridge_slave_0: entered promiscuous mode [ 467.445247][T15989] bridge0: port 2(bridge_slave_1) entered blocking state [ 467.445378][T15989] bridge0: port 2(bridge_slave_1) entered disabled state [ 467.445556][T15989] bridge_slave_1: entered allmulticast mode [ 467.470997][T15989] bridge_slave_1: entered promiscuous mode [ 467.520046][T15989] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 467.533082][T15989] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 467.555337][ T5615] Bluetooth: hci1: command tx timeout [ 467.581650][T15989] team0: Port device team_slave_0 added [ 467.590902][T15989] team0: Port device team_slave_1 added [ 467.627697][T15989] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 467.634880][T15989] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 467.634916][T15989] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 467.685392][T15989] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 467.685440][T15989] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 467.685472][T15989] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 467.987955][T16101] xt_bpf: check failed: parse error [ 468.127561][T15989] hsr_slave_0: entered promiscuous mode [ 468.139146][T15989] hsr_slave_1: entered promiscuous mode [ 468.151029][T15989] debugfs: 'hsr0' already exists in 'hsr' [ 468.161374][T15989] Cannot create hsr debugfs directory [ 468.283022][T16109] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 468.478021][T16112] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3238'. [ 469.628379][ T5615] Bluetooth: hci1: command tx timeout [ 469.863308][T15989] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 470.205903][T15989] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 470.271856][T16143] netlink: 'syz.0.3245': attribute type 2 has an invalid length. [ 470.271909][T16143] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3245'. [ 470.351122][T16143] netlink: 'syz.0.3245': attribute type 10 has an invalid length. [ 470.393458][T15989] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 470.454169][T16150] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 470.517878][T16143] team0: Port device dummy0 added [ 470.864641][T16158] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 471.142863][T16137] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3242'. [ 471.541377][T16174] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3252'. [ 471.568875][T16174] unsupported nlmsg_type 40 [ 471.581039][T16176] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3252'. [ 471.595843][T15989] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 471.625726][T15989] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 471.637250][T15989] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 471.662714][T15989] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 471.675110][T15989] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 471.706883][ T5615] Bluetooth: hci1: command tx timeout [ 471.724238][T15989] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 471.742607][T15989] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 471.782876][T15989] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 471.951859][T16189] netlink: 'syz.3.3255': attribute type 9 has an invalid length. [ 472.295835][T15989] 8021q: adding VLAN 0 to HW filter on device bond0 [ 472.399029][T15989] 8021q: adding VLAN 0 to HW filter on device team0 [ 472.457374][T15961] bridge0: port 1(bridge_slave_0) entered blocking state [ 472.457589][T15961] bridge0: port 1(bridge_slave_0) entered forwarding state [ 472.489667][T15961] bridge0: port 2(bridge_slave_1) entered blocking state [ 472.489907][T15961] bridge0: port 2(bridge_slave_1) entered forwarding state [ 472.750321][T16205] netlink: 'syz.0.3259': attribute type 10 has an invalid length. [ 472.771983][T16206] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3260'. [ 472.888131][T16205] bond0: (slave team0): Releasing backup interface [ 473.315421][T16216] netlink: 'syz.4.3262': attribute type 1 has an invalid length. [ 473.330325][T16204] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 473.432289][T16216] bond1 (unregistering): Released all slaves [ 473.613408][T16226] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 473.893794][T16216] netlink: 'syz.4.3262': attribute type 10 has an invalid length. [ 473.893846][T16216] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3262'. [ 473.920083][T16216] dummy0: entered promiscuous mode [ 474.720193][T16255] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3269'. [ 475.529534][T16273] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 475.541399][T15989] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 475.619578][T16265] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3274'. [ 475.631469][T16266] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 475.752544][T15989] veth0_vlan: entered promiscuous mode [ 475.855347][T15989] veth1_vlan: entered promiscuous mode [ 475.961662][T16282] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3280'. [ 475.982787][T15989] veth0_macvtap: entered promiscuous mode [ 476.010804][T15989] veth1_macvtap: entered promiscuous mode [ 476.120958][T15989] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 476.179213][T15989] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 476.295810][ T7672] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.295897][ T7672] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.295956][ T7672] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.308055][ T7672] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.379556][T16290] netlink: 'syz.4.3283': attribute type 4 has an invalid length. [ 476.649464][T15961] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 476.649541][T15961] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 476.892871][T15961] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 476.892919][T15961] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 477.332666][T16311] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3290'. [ 477.989881][T16313] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 478.350027][T16317] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3293'. [ 478.574351][T16340] syzkaller0: renamed from bond0 (while UP) [ 478.858273][T16353] netlink: 'syz.0.3307': attribute type 3 has an invalid length. [ 478.858319][T16353] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3307'. [ 479.519213][T16369] netlink: 'syz.3.3312': attribute type 11 has an invalid length. [ 479.707597][T16360] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 479.853757][T16380] tipc: Enabling not permitted [ 479.864529][T16380] tipc: Enabling of bearer rejected, failed to enable media [ 479.879382][T16383] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3316'. [ 479.981305][T16385] netlink: 'syz.2.3316': attribute type 1 has an invalid length. [ 480.032351][T16389] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3317'. [ 480.091169][T16386] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3317'. [ 480.196964][T16391] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3320'. [ 480.615233][T16407] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 481.034080][T16422] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3331'. [ 481.041731][T16422] netlink: 'syz.3.3331': attribute type 1 has an invalid length. [ 481.092759][T16425] netlink: 'syz.0.3329': attribute type 10 has an invalid length. [ 481.190530][T16427] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3333'. [ 481.581474][T16414] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 482.133802][T16445] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 482.347180][T16449] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3343'. [ 482.362985][T16449] netlink: 'syz.0.3343': attribute type 1 has an invalid length. [ 482.708330][T16458] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3344'. [ 482.732872][T16462] FAULT_INJECTION: forcing a failure. [ 482.732872][T16462] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 482.732933][T16462] CPU: 0 UID: 0 PID: 16462 Comm: syz.3.3347 Not tainted syzkaller #0 PREEMPT(full) [ 482.732964][T16462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 482.732978][T16462] Call Trace: [ 482.732987][T16462] [ 482.733017][T16462] dump_stack_lvl+0xe8/0x150 [ 482.733158][T16462] should_fail_ex+0x410/0x560 [ 482.733268][T16462] _copy_from_user+0x2d/0xb0 [ 482.733333][T16462] sock_ioctl_inout+0x53/0x170 [ 482.733419][T16462] ipmr_sk_ioctl+0x14f/0x1c0 [ 482.733598][T16462] ? __pfx_ipmr_sk_ioctl+0x10/0x10 [ 482.733651][T16462] ? kasan_save_track+0x4f/0x80 [ 482.733721][T16462] ? stack_depot_save_flags+0x33/0x7f0 [ 482.733805][T16462] ? __lock_acquire+0x6df/0x2e50 [ 482.733872][T16462] ? kasan_save_track+0x4f/0x80 [ 482.733924][T16462] ? kasan_save_track+0x3e/0x80 [ 482.733977][T16462] ? kasan_save_free_info+0x40/0x50 [ 482.734051][T16462] ? kfree+0x1c5/0x650 [ 482.734139][T16462] ? tomoyo_path_number_perm+0x4ba/0x5f0 [ 482.734257][T16462] ? security_file_ioctl+0xc3/0x2a0 [ 482.734356][T16462] ? __se_sys_ioctl+0x47/0x170 [ 482.734454][T16462] sk_ioctl+0x138/0x6d0 [ 482.734559][T16462] ? __pfx_sk_ioctl+0x10/0x10 [ 482.734726][T16462] inet_ioctl+0x484/0x560 [ 482.734813][T16462] ? __pfx_inet_ioctl+0x10/0x10 [ 482.734940][T16462] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 482.735015][T16462] sock_do_ioctl+0x101/0x320 [ 482.735107][T16462] ? __pfx_sock_do_ioctl+0x10/0x10 [ 482.735172][T16462] ? hook_file_ioctl+0x1f2/0x600 [ 482.735273][T16462] sock_ioctl+0x57a/0x7e0 [ 482.735349][T16462] ? __pfx_sock_ioctl+0x10/0x10 [ 482.735423][T16462] ? __fget_files+0x2a/0x420 [ 482.735495][T16462] ? __fget_files+0x3a2/0x420 [ 482.735572][T16462] ? __fget_files+0x2a/0x420 [ 482.735655][T16462] ? bpf_lsm_file_ioctl+0x9/0x20 [ 482.735729][T16462] ? __pfx_sock_ioctl+0x10/0x10 [ 482.735802][T16462] __se_sys_ioctl+0xfc/0x170 [ 482.735874][T16462] do_syscall_64+0x166/0x520 [ 482.735981][T16462] ? trace_irq_disable+0x3b/0x140 [ 482.736049][T16462] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.736113][T16462] ? clear_bhb_loop+0x70/0xc0 [ 482.736178][T16462] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.736238][T16462] RIP: 0033:0x7f3f8d99e159 [ 482.736292][T16462] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 482.736343][T16462] RSP: 002b:00007f3f8e83a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 482.736406][T16462] RAX: ffffffffffffffda RBX: 00007f3f8dc25fa0 RCX: 00007f3f8d99e159 [ 482.736447][T16462] RDX: 0000200000000000 RSI: 00000000000089e0 RDI: 0000000000000004 [ 482.736488][T16462] RBP: 00007f3f8e83a090 R08: 0000000000000000 R09: 0000000000000000 [ 482.736521][T16462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 482.736553][T16462] R13: 00007f3f8dc26038 R14: 00007f3f8dc25fa0 R15: 00007ffc38d05b68 [ 482.736630][T16462] [ 483.230980][T16474] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3349'. [ 483.284148][T16474] netlink: 'syz.3.3349': attribute type 1 has an invalid length. [ 483.668613][T16491] netlink: 'syz.4.3351': attribute type 10 has an invalid length. [ 483.685948][T16491] 8021q: adding VLAN 0 to HW filter on device team0 [ 483.703613][T16491] bond0: (slave team0): Enslaving as an active interface with an up link [ 483.753719][T16493] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3355'. [ 483.760768][T16493] netlink: 'syz.2.3355': attribute type 1 has an invalid length. [ 483.833481][T16495] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3356'. [ 484.372169][T16512] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3361'. [ 485.470227][T16537] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 485.471637][T16538] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 485.515545][T16530] Cannot find set identified by id 65534 to match [ 485.523506][T16536] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3368'. [ 485.540212][T16536] netlink: 'syz.3.3368': attribute type 1 has an invalid length. [ 485.602242][T16538] IPv6: Can't replace route, no match found [ 486.041618][T16551] netlink: 'syz.1.3375': attribute type 1 has an invalid length. [ 486.275488][T16551] bridge1: entered promiscuous mode [ 486.295796][T16551] bridge1: entered allmulticast mode [ 486.793403][T16552] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 487.123912][T16587] netlink: 'syz.2.3383': attribute type 1 has an invalid length. [ 487.463886][T16582] veth3: entered allmulticast mode [ 487.797368][T16587] bond1: (slave veth0_to_bond): making interface the new active one [ 487.840309][T16587] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 487.908476][T16598] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3386'. [ 487.943237][T16590] macvlan2: entered promiscuous mode [ 487.965130][T16590] macvlan2: entered allmulticast mode [ 487.973684][T16590] bond1: entered promiscuous mode [ 487.979712][T16590] veth0_to_bond: entered promiscuous mode [ 487.987352][T16590] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 487.995805][T16590] bond1: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 488.035266][T16590] bond1: left promiscuous mode [ 488.035385][T16590] veth0_to_bond: left promiscuous mode [ 488.799544][T16628] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3392'. [ 489.123050][T16642] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3396'. [ 489.194593][T16644] netlink: 'syz.3.3396': attribute type 1 has an invalid length. [ 489.649107][T16627] Cannot find set identified by id 65534 to match [ 489.660147][T16640] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 489.974037][T16667] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3404'. [ 490.038458][T16670] tunl0: entered promiscuous mode [ 490.061793][T16670] netlink: 'syz.3.3402': attribute type 4 has an invalid length. [ 490.071228][T16670] netlink: 9 bytes leftover after parsing attributes in process `syz.3.3402'. [ 490.808401][T16682] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3407'. [ 491.304112][T16698] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3415'. [ 491.320705][T16698] netlink: 'syz.3.3415': attribute type 1 has an invalid length. [ 491.481830][T16711] netlink: 'syz.2.3417': attribute type 1 has an invalid length. [ 491.541531][T16713] v: renamed from vlan0 (while UP) [ 491.624514][T16716] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 491.937419][T16721] xt_SECMARK: invalid mode: 9 [ 492.123393][T16697] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 492.354688][T16731] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3423'. [ 492.530206][T16735] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3425'. [ 493.065266][T16747] FAULT_INJECTION: forcing a failure. [ 493.065266][T16747] name failslab, interval 1, probability 0, space 0, times 0 [ 493.065323][T16747] CPU: 0 UID: 0 PID: 16747 Comm: syz.2.3429 Not tainted syzkaller #0 PREEMPT(full) [ 493.065351][T16747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 493.065365][T16747] Call Trace: [ 493.065374][T16747] [ 493.065384][T16747] dump_stack_lvl+0xe8/0x150 [ 493.065422][T16747] should_fail_ex+0x410/0x560 [ 493.065464][T16747] should_failslab+0xa8/0x100 [ 493.065494][T16747] __kvmalloc_node_noprof+0x176/0x820 [ 493.065519][T16747] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 493.065543][T16747] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.065569][T16747] ? translate_table+0x1a2/0x2010 [ 493.065675][T16747] ? translate_table+0x1a2/0x2010 [ 493.065717][T16747] translate_table+0x1a2/0x2010 [ 493.065770][T16747] ? __pfx_translate_table+0x10/0x10 [ 493.065815][T16747] ? _copy_from_user+0x94/0xb0 [ 493.065846][T16747] do_arpt_set_ctl+0xaf1/0x10b0 [ 493.065881][T16747] ? __mutex_trylock_common+0x15f/0x270 [ 493.065914][T16747] ? __pfx_do_arpt_set_ctl+0x10/0x10 [ 493.065944][T16747] ? rcu_is_watching+0x16/0xb0 [ 493.065984][T16747] ? trace_contention_end+0x3d/0x140 [ 493.066031][T16747] ? __mutex_unlock_slowpath+0x731/0x900 [ 493.066076][T16747] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 493.066111][T16747] ? __pfx___mutex_lock+0x10/0x10 [ 493.066156][T16747] nf_setsockopt+0x26f/0x290 [ 493.066259][T16747] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 493.066293][T16747] smc_setsockopt+0x232/0xb00 [ 493.066406][T16747] ? __pfx_smc_setsockopt+0x10/0x10 [ 493.066442][T16747] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 493.066470][T16747] ? __pfx_smc_setsockopt+0x10/0x10 [ 493.066503][T16747] do_sock_setsockopt+0x17c/0x1b0 [ 493.066531][T16747] __x64_sys_setsockopt+0x13d/0x1b0 [ 493.066560][T16747] do_syscall_64+0x166/0x520 [ 493.066593][T16747] ? trace_irq_disable+0x3b/0x140 [ 493.066615][T16747] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.066639][T16747] ? clear_bhb_loop+0x70/0xc0 [ 493.066667][T16747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.066690][T16747] RIP: 0033:0x7fed9519e159 [ 493.066720][T16747] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 493.066740][T16747] RSP: 002b:00007fed96002028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 493.066766][T16747] RAX: ffffffffffffffda RBX: 00007fed95425fa0 RCX: 00007fed9519e159 [ 493.066783][T16747] RDX: 0000000000000060 RSI: 0a02000000000000 RDI: 0000000000000008 [ 493.066799][T16747] RBP: 00007fed96002090 R08: 0000000000000440 R09: 0000000000000000 [ 493.066814][T16747] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 493.066829][T16747] R13: 00007fed95426038 R14: 00007fed95425fa0 R15: 00007ffc2784d7f8 [ 493.066865][T16747] [ 493.223208][T16748] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3429'. [ 493.265051][T16747] netlink: 'syz.2.3429': attribute type 1 has an invalid length. [ 493.595229][T16754] lo speed is unknown, defaulting to 1000 [ 493.938058][T16765] xt_LOG: level 125 >= 8 [ 493.948712][T16740] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3426'. [ 494.213128][T16771] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3436'. [ 494.284554][T16771] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3436'. [ 494.296010][T15961] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 494.306319][T15969] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 494.306387][T15969] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 494.306452][T15969] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 494.811299][T16779] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3439'. [ 494.840916][T16779] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3439'. [ 496.155713][T16803] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3447'. [ 496.274061][T16807] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3448'. [ 496.283887][T16799] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3446'. [ 497.592748][T16826] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3452'. [ 497.592806][T16826] netlink: 'syz.0.3452': attribute type 1 has an invalid length. [ 498.487767][T16823] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 499.337144][T16872] __nla_validate_parse: 3 callbacks suppressed [ 499.345005][T16872] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3465'. [ 499.364470][T16872] netlink: 'syz.3.3465': attribute type 1 has an invalid length. [ 500.395046][T16895] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3470'. [ 500.499004][T16899] netlink: 'syz.1.3472': attribute type 1 has an invalid length. [ 500.641126][T16899] bridge2: entered promiscuous mode [ 500.714118][T16903] bridge2: entered promiscuous mode [ 501.981665][T16862] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 502.251431][T16922] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3479'. [ 502.314046][T16922] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3479'. [ 502.325484][T16922] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3479'. [ 502.334543][T16922] netlink: 'syz.1.3479': attribute type 13 has an invalid length. [ 502.340355][T16929] netlink: 'syz.0.3477': attribute type 21 has an invalid length. [ 502.344706][T16922] netlink: 'syz.1.3479': attribute type 12 has an invalid length. [ 502.363131][T16929] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3477'. [ 502.365023][T16923] x_tables: duplicate underflow at hook 1 [ 502.565803][T16933] xt_SECMARK: invalid mode: 9 [ 503.041616][T16940] bond1: option primary_reselect: invalid value (6) [ 503.058458][T16940] bond1 (unregistering): Released all slaves [ 503.093738][T16946] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 503.657373][T16954] pim6reg: entered allmulticast mode [ 503.696381][T16957] pim6reg: left allmulticast mode [ 503.937430][T16964] pim6reg: entered allmulticast mode [ 504.335290][T16984] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3496'. [ 504.567578][T16996] FAULT_INJECTION: forcing a failure. [ 504.567578][T16996] name failslab, interval 1, probability 0, space 0, times 0 [ 504.567643][T16996] CPU: 0 UID: 0 PID: 16996 Comm: syz.1.3500 Not tainted syzkaller #0 PREEMPT(full) [ 504.567671][T16996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 504.567686][T16996] Call Trace: [ 504.567695][T16996] [ 504.567704][T16996] dump_stack_lvl+0xe8/0x150 [ 504.567747][T16996] should_fail_ex+0x410/0x560 [ 504.567790][T16996] should_failslab+0xa8/0x100 [ 504.567821][T16996] __kmalloc_noprof+0xfe/0x720 [ 504.567854][T16996] ? rcu_is_watching+0x16/0xb0 [ 504.567882][T16996] ? tomoyo_realpath_from_path+0xef/0x640 [ 504.567910][T16996] ? tomoyo_realpath_from_path+0xef/0x640 [ 504.567944][T16996] tomoyo_realpath_from_path+0xef/0x640 [ 504.567983][T16996] ? tomoyo_path_number_perm+0x219/0x5f0 [ 504.568018][T16996] tomoyo_path_number_perm+0x246/0x5f0 [ 504.568057][T16996] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 504.568095][T16996] ? __lock_acquire+0x6df/0x2e50 [ 504.568136][T16996] ? hook_file_ioctl+0x1f2/0x600 [ 504.568182][T16996] ? __fget_files+0x2a/0x420 [ 504.568215][T16996] ? __fget_files+0x2a/0x420 [ 504.568244][T16996] ? __fget_files+0x3a2/0x420 [ 504.568272][T16996] ? __fget_files+0x2a/0x420 [ 504.568307][T16996] security_file_ioctl+0xc3/0x2a0 [ 504.568343][T16996] __se_sys_ioctl+0x47/0x170 [ 504.568370][T16996] do_syscall_64+0x166/0x520 [ 504.568429][T16996] ? trace_irq_disable+0x3b/0x140 [ 504.568452][T16996] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.568477][T16996] ? clear_bhb_loop+0x70/0xc0 [ 504.568506][T16996] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.568529][T16996] RIP: 0033:0x7f184539e159 [ 504.568551][T16996] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 504.568571][T16996] RSP: 002b:00007f184634b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 504.568596][T16996] RAX: ffffffffffffffda RBX: 00007f1845625fa0 RCX: 00007f184539e159 [ 504.568613][T16996] RDX: 0000200000000000 RSI: 0000000000008931 RDI: 0000000000000004 [ 504.568628][T16996] RBP: 00007f184634b090 R08: 0000000000000000 R09: 0000000000000000 [ 504.568643][T16996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 504.568657][T16996] R13: 00007f1845626038 R14: 00007f1845625fa0 R15: 00007ffff7f07ae8 [ 504.568694][T16996] [ 504.571173][T16996] ERROR: Out of memory at tomoyo_realpath_from_path. [ 505.863233][T17010] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3506'. [ 506.141491][T17012] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 506.278240][T17020] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 506.312446][T17012] bridge1: entered allmulticast mode [ 506.746769][ C0] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 507.428492][T17061] erspan1: entered allmulticast mode [ 507.644119][T17069] xt_bpf: check failed: parse error [ 507.752302][T17071] xt_SECMARK: invalid mode: 9 [ 508.458758][T17082] lo speed is unknown, defaulting to 1000 [ 508.498691][ T7672] IPVS: starting estimator thread 0... [ 508.596676][T17091] IPVS: using max 25 ests per chain, 60000 per kthread [ 508.729680][T17096] Bluetooth: hci0: unsupported parameter 5161 [ 508.736337][T17096] Bluetooth: hci0: unsupported parameter 8192 [ 508.742614][T17096] Bluetooth: hci0: unsupported parameter 5161 [ 508.749385][T17096] Bluetooth: hci0: unsupported parameter 8192 [ 509.014077][T17108] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3536'. [ 509.349871][T17116] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3538'. [ 510.078893][T17125] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3541'. [ 510.105636][T17125] netlink: 'syz.3.3541': attribute type 1 has an invalid length. [ 510.381173][T17133] xt_SECMARK: invalid mode: 9 [ 511.035209][T17150] xt_bpf: check failed: parse error [ 511.513673][T17156] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3550'. [ 511.676739][T17159] netlink: 'syz.4.3550': attribute type 55 has an invalid length. [ 511.740745][T17161] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3553'. [ 512.192962][T17173] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3556'. [ 512.373880][T17177] bridge2: entered promiscuous mode [ 512.388170][T17177] bridge2: entered allmulticast mode [ 512.403689][T17177] team0: Port device bridge2 added [ 512.817382][T17189] netlink: 'syz.4.3560': attribute type 12 has an invalid length. [ 512.976419][T17193] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3560'. [ 513.663430][T17198] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3563'. [ 513.920412][T17207] lo speed is unknown, defaulting to 1000 [ 513.955810][T17208] lo speed is unknown, defaulting to 1000 [ 514.268901][T17220] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3569'. [ 514.325402][T17216] FAULT_INJECTION: forcing a failure. [ 514.325402][T17216] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 514.341143][T17216] CPU: 0 UID: 0 PID: 17216 Comm: syz.4.3568 Not tainted syzkaller #0 PREEMPT(full) [ 514.341174][T17216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 514.341188][T17216] Call Trace: [ 514.341197][T17216] [ 514.341207][T17216] dump_stack_lvl+0xe8/0x150 [ 514.341247][T17216] should_fail_ex+0x410/0x560 [ 514.341287][T17216] _copy_from_user+0x2d/0xb0 [ 514.341323][T17216] ___sys_sendmsg+0x1c6/0x360 [ 514.341350][T17216] ? __lock_acquire+0x6df/0x2e50 [ 514.341378][T17216] ? __pfx____sys_sendmsg+0x10/0x10 [ 514.341439][T17216] ? __fget_files+0x2a/0x420 [ 514.341468][T17216] ? __fget_files+0x3a2/0x420 [ 514.341508][T17216] __x64_sys_sendmsg+0x1b1/0x290 [ 514.341536][T17216] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 514.341583][T17216] do_syscall_64+0x166/0x520 [ 514.341621][T17216] ? trace_irq_disable+0x3b/0x140 [ 514.341643][T17216] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.341667][T17216] ? clear_bhb_loop+0x70/0xc0 [ 514.341696][T17216] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.341719][T17216] RIP: 0033:0x7f539d59e159 [ 514.341742][T17216] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 514.341762][T17216] RSP: 002b:00007f539b7f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 514.341788][T17216] RAX: ffffffffffffffda RBX: 00007f539d825fa0 RCX: 00007f539d59e159 [ 514.341806][T17216] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000006 [ 514.341821][T17216] RBP: 00007f539b7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 514.341857][T17216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 514.341871][T17216] R13: 00007f539d826038 R14: 00007f539d825fa0 R15: 00007fffb71c1108 [ 514.341907][T17216] [ 514.951984][T17231] Bluetooth: hci0: unsupported parameter 5161 [ 514.958213][T17229] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 514.971678][T17231] Bluetooth: hci0: unsupported parameter 8192 [ 514.978382][T17231] Bluetooth: hci0: unsupported parameter 5161 [ 514.985212][T17231] Bluetooth: hci0: unsupported parameter 8192 [ 515.145524][T17237] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3575'. [ 516.153216][T17263] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3585'. [ 516.166900][T17263] netlink: 'syz.4.3585': attribute type 1 has an invalid length. [ 516.423314][T17268] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 516.511136][T17279] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3589'. [ 517.471859][T17297] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3594'. [ 517.492735][T17297] netlink: 'syz.0.3594': attribute type 1 has an invalid length. [ 517.583703][T17299] syzkaller0: entered promiscuous mode [ 517.589797][T17299] syzkaller0: entered allmulticast mode [ 517.757191][T17299] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3595'. [ 518.834007][T17313] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 522.249177][T17306] lo speed is unknown, defaulting to 1000 [ 522.320429][T17315] lo speed is unknown, defaulting to 1000 [ 523.501823][T17362] netlink: 'syz.4.3613': attribute type 10 has an invalid length. [ 523.510465][T17362] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3613'. [ 523.539375][T17359] Bluetooth: hci0: unsupported parameter 5161 [ 523.539433][T17359] Bluetooth: hci0: unsupported parameter 8192 [ 523.539451][T17359] Bluetooth: hci0: unsupported parameter 5161 [ 523.539488][T17359] Bluetooth: hci0: unsupported parameter 8192 [ 523.655705][T17362] team0: Device wg2 is of different type [ 523.928202][T17367] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 525.263897][T17398] FAULT_INJECTION: forcing a failure. [ 525.263897][T17398] name failslab, interval 1, probability 0, space 0, times 0 [ 525.263963][T17398] CPU: 1 UID: 0 PID: 17398 Comm: syz.0.3624 Not tainted syzkaller #0 PREEMPT(full) [ 525.263991][T17398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 525.264066][T17398] Call Trace: [ 525.264098][T17398] [ 525.264132][T17398] dump_stack_lvl+0xe8/0x150 [ 525.264281][T17398] should_fail_ex+0x410/0x560 [ 525.264391][T17398] should_failslab+0xa8/0x100 [ 525.264471][T17398] ? skb_clone+0x212/0x3a0 [ 525.264544][T17398] kmem_cache_alloc_noprof+0xa1/0x600 [ 525.264658][T17398] ? skb_clone+0x212/0x3a0 [ 525.264758][T17398] skb_clone+0x212/0x3a0 [ 525.264842][T17398] __netlink_deliver_tap+0x413/0x860 [ 525.264958][T17398] ? netlink_deliver_tap+0x2e/0x1b0 [ 525.265033][T17398] netlink_deliver_tap+0x19c/0x1b0 [ 525.265124][T17398] netlink_unicast+0x781/0x940 [ 525.265241][T17398] netlink_sendmsg+0x813/0xb40 [ 525.265363][T17398] ? __pfx_netlink_sendmsg+0x10/0x10 [ 525.265478][T17398] ? apparmor_socket_sendmsg+0x98/0x360 [ 525.265605][T17398] ? __pfx_netlink_sendmsg+0x10/0x10 [ 525.265690][T17398] sock_sendmsg_nosec+0x13a/0x180 [ 525.265791][T17398] ____sys_sendmsg+0x54e/0x850 [ 525.265884][T17398] ? __pfx_____sys_sendmsg+0x10/0x10 [ 525.265991][T17398] ? import_iovec+0x73/0xa0 [ 525.266082][T17398] ___sys_sendmsg+0x2a5/0x360 [ 525.266151][T17398] ? __lock_acquire+0x6df/0x2e50 [ 525.266238][T17398] ? __pfx____sys_sendmsg+0x10/0x10 [ 525.266420][T17398] ? __fget_files+0x2a/0x420 [ 525.266503][T17398] ? __fget_files+0x3a2/0x420 [ 525.266613][T17398] __x64_sys_sendmsg+0x1b1/0x290 [ 525.266698][T17398] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 525.266836][T17398] do_syscall_64+0x166/0x520 [ 525.266954][T17398] ? trace_irq_disable+0x3b/0x140 [ 525.267031][T17398] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.267101][T17398] ? clear_bhb_loop+0x70/0xc0 [ 525.267195][T17398] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.267266][T17398] RIP: 0033:0x7f785799e159 [ 525.267327][T17398] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 525.267386][T17398] RSP: 002b:00007f78588e0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 525.267466][T17398] RAX: ffffffffffffffda RBX: 00007f7857c25fa0 RCX: 00007f785799e159 [ 525.267515][T17398] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 525.267561][T17398] RBP: 00007f78588e0090 R08: 0000000000000000 R09: 0000000000000000 [ 525.267608][T17398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 525.267654][T17398] R13: 00007f7857c26038 R14: 00007f7857c25fa0 R15: 00007ffe59ae7568 [ 525.267743][T17398] [ 526.296358][T17413] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3628'. [ 526.312019][T17414] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3628'. [ 526.387456][T17414] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3628'. [ 526.398353][T17413] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3628'. [ 526.484348][T17412] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 527.509318][T17402] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3625'. [ 527.519131][T17418] netlink: 'syz.3.3631': attribute type 1 has an invalid length. [ 527.723838][T17418] 8021q: adding VLAN 0 to HW filter on device bond1 [ 527.851869][T17422] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 528.750518][T17443] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 529.112124][T17455] Bluetooth: hci0: unsupported parameter 5161 [ 529.118735][T17455] Bluetooth: hci0: unsupported parameter 8192 [ 529.118798][T17455] Bluetooth: hci0: unsupported parameter 5161 [ 529.118819][T17455] Bluetooth: hci0: unsupported parameter 8192 [ 529.314975][ T5615] Bluetooth: hci5: command 0x0406 tx timeout [ 529.506497][T17472] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3647'. [ 529.548490][T17471] syzkaller1: entered promiscuous mode [ 529.554287][T17471] syzkaller1: entered allmulticast mode [ 530.421265][T17491] tipc: Started in network mode [ 530.421337][T17491] tipc: Node identity ea009bf0a26c, cluster identity 4711 [ 530.466440][T17491] tipc: Enabled bearer , priority 0 [ 530.571818][T17491] netlink: 112 bytes leftover after parsing attributes in process `syz.3.3650'. [ 530.571875][T17491] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3650'. [ 530.709440][T17488] tipc: Resetting bearer [ 530.858839][T17483] tipc: Disabling bearer [ 531.302036][T17524] netlink: 'syz.1.3655': attribute type 2 has an invalid length. [ 531.567375][T17518] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 531.730023][T17514] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3653'. [ 531.744943][T17530] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3657'. [ 532.244280][T17546] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3661'. [ 532.328124][T17548] netlink: 'syz.1.3661': attribute type 1 has an invalid length. [ 533.527706][T17568] tc_dump_action: action bad kind [ 533.679892][T17570] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 534.491043][T17571] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3668'. [ 534.508029][T17571] openvswitch: netlink: Flow key attr not present in new flow. [ 534.822232][T17598] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3676'. [ 535.170173][T17613] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3681'. [ 535.281167][T17611] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 535.923889][T17624] Bluetooth: hci0: unsupported parameter 5161 [ 535.923944][T17624] Bluetooth: hci0: unsupported parameter 8192 [ 535.923978][T17624] Bluetooth: hci0: unsupported parameter 5161 [ 535.923992][T17624] Bluetooth: hci0: unsupported parameter 8192 [ 536.031318][T17628] netlink: 'syz.2.3686': attribute type 10 has an invalid length. [ 536.165081][T17628] 8021q: adding VLAN 0 to HW filter on device bond0 [ 536.195673][T17628] team0: Port device bond0 added [ 536.904885][T17640] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 537.878603][T17657] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3694'. [ 537.943081][T17663] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3694'. [ 538.005891][T17657] 8021q: adding VLAN 0 to HW filter on device bond4 [ 538.088215][T17657] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3694'. [ 538.536951][T17676] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3699'. [ 538.565973][T17676] veth1_macvtap: left promiscuous mode [ 539.122373][T17683] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 539.138919][T17684] xt_SECMARK: invalid mode: 9 [ 539.269668][T17686] netlink: 'syz.0.3703': attribute type 12 has an invalid length. [ 539.739224][T17697] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3708'. [ 540.210394][T17706] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3711'. [ 540.212931][T17706] 8021q: VLANs not supported on ip6tnl0 [ 540.904124][T15969] IPVS: starting estimator thread 0... [ 540.997209][T17717] IPVS: using max 24 ests per chain, 57600 per kthread [ 541.107444][T17719] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 541.185412][T17722] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3715'. [ 541.202458][T17722] netlink: 'syz.2.3715': attribute type 1 has an invalid length. [ 541.461115][T17728] team_slave_0: entered allmulticast mode [ 542.064371][T17755] syzkaller0: entered promiscuous mode [ 542.064413][T17755] bond_slave_0: entered promiscuous mode [ 542.064632][T17755] bond_slave_1: entered promiscuous mode [ 542.064820][T17755] syzkaller0: entered allmulticast mode [ 542.064840][T17755] bond_slave_0: entered allmulticast mode [ 542.064876][T17755] bond_slave_1: entered allmulticast mode [ 542.181976][ T31] audit: type=1800 audit(1789008698.635:8): pid=17748 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3727" name=3A202E31323334352E2E2E2E2028313829207238203D2030783363333130303030300A202020202020323A202E31323334352E2E382E20283835292063616C6C2070632B360A202020202020333A202E2E2E2E2E2E2E2E382E2028313829207230203D203078313130303030303066666666666666660A202020202020353A20 dev="tmpfs" ino=850 res=0 errno=0 [ 542.387720][T17761] xt_SECMARK: invalid mode: 9 [ 542.721580][T17769] xt_bpf: check failed: parse error [ 543.362893][ T7651] IPVS: starting estimator thread 0... [ 543.456441][T17791] IPVS: using max 25 ests per chain, 60000 per kthread [ 543.732700][T17801] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.3743'. [ 543.847166][T17806] syzkaller0: left promiscuous mode [ 543.853308][T17806] bond_slave_0: left promiscuous mode [ 543.853558][T17806] bond_slave_1: left promiscuous mode [ 543.853788][T17806] syzkaller0: left allmulticast mode [ 543.853809][T17806] bond_slave_0: left allmulticast mode [ 543.853829][T17806] bond_slave_1: left allmulticast mode [ 544.228293][T17813] FAULT_INJECTION: forcing a failure. [ 544.228293][T17813] name failslab, interval 1, probability 0, space 0, times 0 [ 544.243315][T17813] CPU: 0 UID: 0 PID: 17813 Comm: syz.3.3751 Not tainted syzkaller #0 PREEMPT(full) [ 544.243347][T17813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 544.243362][T17813] Call Trace: [ 544.243371][T17813] [ 544.243380][T17813] dump_stack_lvl+0xe8/0x150 [ 544.243420][T17813] should_fail_ex+0x410/0x560 [ 544.243460][T17813] should_failslab+0xa8/0x100 [ 544.243488][T17813] ? skb_clone+0x212/0x3a0 [ 544.243514][T17813] kmem_cache_alloc_noprof+0xa1/0x600 [ 544.243551][T17813] ? skb_clone+0x212/0x3a0 [ 544.243583][T17813] skb_clone+0x212/0x3a0 [ 544.243612][T17813] __netlink_deliver_tap+0x413/0x860 [ 544.243653][T17813] ? netlink_deliver_tap+0x2e/0x1b0 [ 544.243682][T17813] netlink_deliver_tap+0x19c/0x1b0 [ 544.243710][T17813] netlink_unicast+0x781/0x940 [ 544.243746][T17813] netlink_sendmsg+0x813/0xb40 [ 544.243784][T17813] ? __pfx_netlink_sendmsg+0x10/0x10 [ 544.243821][T17813] ? apparmor_socket_sendmsg+0x98/0x360 [ 544.243860][T17813] ? __pfx_netlink_sendmsg+0x10/0x10 [ 544.243888][T17813] sock_sendmsg_nosec+0x13a/0x180 [ 544.243922][T17813] ____sys_sendmsg+0x54e/0x850 [ 544.243952][T17813] ? __pfx_____sys_sendmsg+0x10/0x10 [ 544.243987][T17813] ? import_iovec+0x73/0xa0 [ 544.244016][T17813] ___sys_sendmsg+0x2a5/0x360 [ 544.244039][T17813] ? __lock_acquire+0x6df/0x2e50 [ 544.244068][T17813] ? __pfx____sys_sendmsg+0x10/0x10 [ 544.244131][T17813] ? __fget_files+0x2a/0x420 [ 544.244159][T17813] ? __fget_files+0x3a2/0x420 [ 544.244201][T17813] __x64_sys_sendmsg+0x1b1/0x290 [ 544.244237][T17813] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 544.244285][T17813] do_syscall_64+0x166/0x520 [ 544.244319][T17813] ? trace_irq_disable+0x3b/0x140 [ 544.244341][T17813] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.244365][T17813] ? clear_bhb_loop+0x70/0xc0 [ 544.244393][T17813] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.244421][T17813] RIP: 0033:0x7f3f8d99e159 [ 544.244444][T17813] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 544.244464][T17813] RSP: 002b:00007f3f8e83a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 544.244489][T17813] RAX: ffffffffffffffda RBX: 00007f3f8dc25fa0 RCX: 00007f3f8d99e159 [ 544.244507][T17813] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 544.244520][T17813] RBP: 00007f3f8e83a090 R08: 0000000000000000 R09: 0000000000000000 [ 544.244535][T17813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 544.244549][T17813] R13: 00007f3f8dc26038 R14: 00007f3f8dc25fa0 R15: 00007ffc38d05b68 [ 544.244585][T17813] [ 544.371044][T17811] netlink: 'syz.4.3750': attribute type 12 has an invalid length. [ 545.155725][T17820] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 545.888341][T17847] xt_bpf: check failed: parse error [ 545.939987][T17846] netlink: 'syz.2.3764': attribute type 1 has an invalid length. [ 546.071622][T17849] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3765'. [ 546.095392][T17849] netlink: 'syz.4.3765': attribute type 1 has an invalid length. [ 547.137525][T17860] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 547.286959][T17870] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3772'. [ 547.373624][T17870] bridge0: port 2(bridge_slave_1) entered disabled state [ 547.774809][T17883] FAULT_INJECTION: forcing a failure. [ 547.774809][T17883] name failslab, interval 1, probability 0, space 0, times 0 [ 547.788110][T17883] CPU: 0 UID: 0 PID: 17883 Comm: syz.3.3775 Not tainted syzkaller #0 PREEMPT(full) [ 547.788140][T17883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 547.788154][T17883] Call Trace: [ 547.788163][T17883] [ 547.788172][T17883] dump_stack_lvl+0xe8/0x150 [ 547.788209][T17883] should_fail_ex+0x410/0x560 [ 547.788247][T17883] ? __alloc_skb+0x1db/0x7a0 [ 547.788278][T17883] should_failslab+0xa8/0x100 [ 547.788305][T17883] ? __alloc_skb+0x1db/0x7a0 [ 547.788334][T17883] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 547.788368][T17883] ? __alloc_skb+0x18d/0x7a0 [ 547.788400][T17883] ? __alloc_skb+0x1db/0x7a0 [ 547.788439][T17883] __alloc_skb+0x1db/0x7a0 [ 547.788476][T17883] netlink_ack+0x136/0xb30 [ 547.788531][T17883] ? __pfx___mutex_trylock_common+0x10/0x10 [ 547.788563][T17883] ? rcu_is_watching+0x16/0xb0 [ 547.788590][T17883] ? trace_contention_end+0x3d/0x140 [ 547.788625][T17883] netlink_rcv_skb+0x2a4/0x4a0 [ 547.788652][T17883] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 547.788788][T17883] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 547.788833][T17883] ? netlink_deliver_tap+0x2e/0x1b0 [ 547.788859][T17883] ? netlink_deliver_tap+0x2e/0x1b0 [ 547.788887][T17883] xfrm_netlink_rcv+0x79/0x90 [ 547.788918][T17883] netlink_unicast+0x7bd/0x940 [ 547.788952][T17883] netlink_sendmsg+0x813/0xb40 [ 547.788989][T17883] ? __pfx_netlink_sendmsg+0x10/0x10 [ 547.789024][T17883] ? apparmor_socket_sendmsg+0x98/0x360 [ 547.789060][T17883] ? __pfx_netlink_sendmsg+0x10/0x10 [ 547.789086][T17883] sock_sendmsg_nosec+0x13a/0x180 [ 547.789118][T17883] ____sys_sendmsg+0x54e/0x850 [ 547.789148][T17883] ? __pfx_____sys_sendmsg+0x10/0x10 [ 547.789181][T17883] ? import_iovec+0x73/0xa0 [ 547.789208][T17883] ___sys_sendmsg+0x2a5/0x360 [ 547.789230][T17883] ? __lock_acquire+0x6df/0x2e50 [ 547.789256][T17883] ? __pfx____sys_sendmsg+0x10/0x10 [ 547.789316][T17883] ? __fget_files+0x2a/0x420 [ 547.789343][T17883] ? __fget_files+0x3a2/0x420 [ 547.789382][T17883] __x64_sys_sendmsg+0x1b1/0x290 [ 547.789408][T17883] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 547.789454][T17883] do_syscall_64+0x166/0x520 [ 547.789486][T17883] ? trace_irq_disable+0x3b/0x140 [ 547.789513][T17883] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.789535][T17883] ? clear_bhb_loop+0x70/0xc0 [ 547.789563][T17883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.789585][T17883] RIP: 0033:0x7f3f8d99e159 [ 547.789606][T17883] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 547.789623][T17883] RSP: 002b:00007f3f8e83a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 547.789647][T17883] RAX: ffffffffffffffda RBX: 00007f3f8dc25fa0 RCX: 00007f3f8d99e159 [ 547.789664][T17883] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 547.789677][T17883] RBP: 00007f3f8e83a090 R08: 0000000000000000 R09: 0000000000000000 [ 547.789691][T17883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 547.789703][T17883] R13: 00007f3f8dc26038 R14: 00007f3f8dc25fa0 R15: 00007ffc38d05b68 [ 547.789737][T17883] [ 548.109237][T17886] xt_SECMARK: invalid mode: 9 [ 548.115784][ T4931] Bluetooth: hci1: command tx timeout [ 548.194617][T17890] FAULT_INJECTION: forcing a failure. [ 548.194617][T17890] name failslab, interval 1, probability 0, space 0, times 0 [ 548.209355][T17890] CPU: 0 UID: 0 PID: 17890 Comm: syz.4.3780 Not tainted syzkaller #0 PREEMPT(full) [ 548.209385][T17890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 548.209399][T17890] Call Trace: [ 548.209408][T17890] [ 548.209417][T17890] dump_stack_lvl+0xe8/0x150 [ 548.209456][T17890] should_fail_ex+0x410/0x560 [ 548.209509][T17890] should_failslab+0xa8/0x100 [ 548.209539][T17890] __kmalloc_noprof+0xfe/0x720 [ 548.209571][T17890] ? kernel_fpu_begin_mask+0x2bb/0x380 [ 548.209642][T17890] ? skcipher_next_slow+0xee/0x230 [ 548.209735][T17890] ? skcipher_next_slow+0xee/0x230 [ 548.209767][T17890] skcipher_next_slow+0xee/0x230 [ 548.209795][T17890] gcm_encrypt_aesni_avx+0x617/0x660 [ 548.209828][T17890] ? __pfx_gcm_encrypt_aesni_avx+0x10/0x10 [ 548.209893][T17890] bpf_exec_tx_verdict+0x12b0/0x2680 [ 548.209983][T17890] tls_sw_sendmsg+0x1dd0/0x2b50 [ 548.210055][T17890] ? __pfx_tls_sw_sendmsg+0x10/0x10 [ 548.210094][T17890] ? aa_sock_msg_perm+0xfc/0x210 [ 548.210117][T17890] ? __inet_accept+0x267/0x2d0 [ 548.210149][T17890] ? inet_sendmsg+0x298/0x320 [ 548.210175][T17890] ? apparmor_socket_sendmsg+0x98/0x360 [ 548.210211][T17890] ? __pfx_inet_sendmsg+0x10/0x10 [ 548.210239][T17890] sock_sendmsg_nosec+0x10e/0x180 [ 548.210273][T17890] sock_write_iter+0x2de/0x3e0 [ 548.210302][T17890] ? __pfx_sock_write_iter+0x10/0x10 [ 548.210352][T17890] do_iter_readv_writev+0x612/0x8c0 [ 548.210389][T17890] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 548.210430][T17890] ? bpf_lsm_file_permission+0x9/0x20 [ 548.210469][T17890] ? security_file_permission+0x75/0x260 [ 548.210503][T17890] ? rw_verify_area+0x203/0x4c0 [ 548.210539][T17890] vfs_writev+0x343/0x990 [ 548.210573][T17890] ? __pfx_vfs_writev+0x10/0x10 [ 548.210616][T17890] ? __fget_files+0x2a/0x420 [ 548.210649][T17890] ? __fget_files+0x3a2/0x420 [ 548.210676][T17890] ? __fget_files+0x2a/0x420 [ 548.210715][T17890] do_writev+0x154/0x2e0 [ 548.210741][T17890] ? __pfx_do_writev+0x10/0x10 [ 548.210777][T17890] do_syscall_64+0x166/0x520 [ 548.210808][T17890] ? trace_irq_disable+0x3b/0x140 [ 548.210829][T17890] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 548.210852][T17890] ? clear_bhb_loop+0x70/0xc0 [ 548.210880][T17890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 548.210903][T17890] RIP: 0033:0x7f539d59e159 [ 548.210924][T17890] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 548.210943][T17890] RSP: 002b:00007f539b7f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 548.210969][T17890] RAX: ffffffffffffffda RBX: 00007f539d825fa0 RCX: 00007f539d59e159 [ 548.210985][T17890] RDX: 0000000000000003 RSI: 0000200000000300 RDI: 0000000000000004 [ 548.211000][T17890] RBP: 00007f539b7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 548.211014][T17890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 548.211027][T17890] R13: 00007f539d826038 R14: 00007f539d825fa0 R15: 00007fffb71c1108 [ 548.211059][T17890] [ 548.702934][T17896] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3781'. [ 549.128369][T17914] ip6t_rpfilter: unknown options [ 549.563090][T17922] netlink: 'syz.1.3790': attribute type 11 has an invalid length. [ 549.950022][T17923] bridge0: port 1(bridge_slave_0) entered disabled state [ 549.967494][T17923] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 550.339107][T17934] block nbd0: reconnected socket [ 550.526464][ T4931] block nbd0: Receive control failed (result -32) [ 551.050896][T17959] xt_cluster: node mask cannot exceed total number of nodes [ 551.383383][T17969] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 551.596992][T17973] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3803'. [ 551.909771][T17981] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3807'. [ 551.945232][T17983] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3807'. [ 552.482002][T18006] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3809'. [ 552.773502][T17983] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 552.931453][T17997] 8021q: adding VLAN 0 to HW filter on device team0 [ 552.939457][T17997] dummy0: left promiscuous mode [ 552.962215][T17997] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 553.554217][T18018] netlink: 'syz.1.3813': attribute type 12 has an invalid length. [ 554.128731][T18039] netlink: 'syz.4.3820': attribute type 1 has an invalid length. [ 554.147564][T18039] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3820'. [ 554.158651][T18039] dummy0: left promiscuous mode [ 554.613116][T18057] netlink: 'syz.0.3827': attribute type 7 has an invalid length. [ 554.846700][T18065] Bluetooth: hci0: unsupported parameter 5161 [ 554.846745][T18065] Bluetooth: hci0: unsupported parameter 8192 [ 554.846778][T18065] Bluetooth: hci0: unsupported parameter 5161 [ 554.846814][T18065] Bluetooth: hci0: unsupported parameter 8192 [ 555.473045][T18068] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3830'. [ 555.761868][T18073] netlink: zone id is out of range [ 555.773305][T18077] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3831'. [ 555.791343][T18072] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3831'. [ 555.791392][T18072] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3831'. [ 556.624443][T18096] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3836'. [ 556.714003][T18097] netlink: 'syz.3.3838': attribute type 4 has an invalid length. [ 556.722217][T18097] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3838'. [ 556.752301][T18097] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 557.722018][T18110] block nbd19: Unsupported socket: should be TCP or UNIX. [ 558.382536][T18117] syzkaller1: entered promiscuous mode [ 558.382582][T18117] syzkaller1: entered allmulticast mode [ 558.997809][T18121] bond2 (unregistering): Released all slaves [ 560.047901][T18152] Bluetooth: hci0: unsupported parameter 5135 [ 560.047944][T18152] Bluetooth: hci0: unsupported parameter 8192 [ 560.047984][T18152] Bluetooth: hci0: unsupported parameter 5135 [ 560.048004][T18152] Bluetooth: hci0: unsupported parameter 8192 [ 560.410184][T18167] netlink: 'syz.2.3858': attribute type 11 has an invalid length. [ 560.610953][T18170] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3859'. [ 561.019349][T18189] Bluetooth: hci0: unsupported parameter 5161 [ 561.019394][T18189] Bluetooth: hci0: unsupported parameter 8192 [ 561.019428][T18189] Bluetooth: hci0: unsupported parameter 5161 [ 561.019447][T18189] Bluetooth: hci0: unsupported parameter 8192 [ 561.464755][T18182] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 561.543832][T18203] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3866'. [ 562.129899][T18203] mac80211_hwsim hwsim68 wlan0: entered promiscuous mode [ 562.130031][T18203] mac80211_hwsim hwsim68 wlan0: entered allmulticast mode [ 562.140104][T18203] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3866'. [ 562.272749][ T1113] nci: nci_rsp_packet: unknown rsp opcode 0x33f [ 562.822690][T18214] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 563.190030][T18239] netlink: 'syz.0.3872': attribute type 21 has an invalid length. [ 563.190073][T18239] netlink: 'syz.0.3872': attribute type 20 has an invalid length. [ 565.148855][ T5615] Bluetooth: hci3: command 0x0406 tx timeout [ 565.199566][T18266] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3876'. [ 565.485589][ T7654] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 565.485661][ T7654] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 565.485720][ T7654] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 565.485773][ T7654] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 565.719519][ T4931] Bluetooth: hci1: link tx timeout [ 565.728637][ T4931] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 565.795292][T18287] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 565.961452][T18292] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3883'. [ 566.420673][ T5615] Bluetooth: hci1: link tx timeout [ 566.420798][ T5615] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 566.931303][T18316] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3891'. [ 567.003971][T18319] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3892'. [ 567.032222][T18319] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 567.722019][T18344] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3894'. [ 567.786709][ T5615] Bluetooth: hci1: command 0x0406 tx timeout [ 568.013520][T18352] Bluetooth: hci0: unsupported parameter 5161 [ 568.013593][T18352] Bluetooth: hci0: unsupported parameter 8192 [ 568.013628][T18352] Bluetooth: hci0: unsupported parameter 5161 [ 568.013648][T18352] Bluetooth: hci0: unsupported parameter 8192 [ 568.187825][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 568.242121][T18361] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3898'. [ 569.997193][T18319] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 570.444273][T18402] netlink: 27 bytes leftover after parsing attributes in process `syz.2.3908'. [ 570.564345][T18407] vlan0: entered promiscuous mode [ 570.590799][T18407] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 570.743127][T18410] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3910'. [ 571.080681][T18419] sctp: [Deprecated]: syz.4.3911 (pid 18419) Use of int in maxseg socket option. [ 571.080681][T18419] Use struct sctp_assoc_value instead [ 571.581500][T18437] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3917'. [ 571.946914][T18448] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3920'. [ 572.353425][T18429] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3915'. [ 572.451409][T18458] lo speed is unknown, defaulting to 1000 [ 573.111299][T18476] netlink: 'syz.1.3926': attribute type 10 has an invalid length. [ 573.943971][T18491] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3932'. [ 574.071674][T18495] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3933'. [ 574.372538][T18499] team0: Port device syz_tun added [ 574.539288][T18510] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 574.748256][T18508] 8021q: adding VLAN 0 to HW filter on device macsec0 [ 574.789290][ T5611] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 575.397311][ T5615] Bluetooth: hci2: command 0x0406 tx timeout [ 575.639608][T18539] netlink: 'syz.4.3948': attribute type 4 has an invalid length. [ 575.639730][T18539] netlink: 'syz.4.3948': attribute type 8 has an invalid length. [ 575.640140][T18539] netlink: 212 bytes leftover after parsing attributes in process `syz.4.3948'. [ 575.697700][T18540] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3949'. [ 575.707279][T18540] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3949'. [ 576.179181][T18554] erspan1: entered allmulticast mode [ 576.227288][T18555] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 576.536862][T18562] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3955'. [ 576.536912][T18562] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3955'. [ 576.536982][T18562] netlink: 'syz.1.3955': attribute type 12 has an invalid length. [ 576.537004][T18562] netlink: 'syz.1.3955': attribute type 14 has an invalid length. [ 576.537834][T18562] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3955'. [ 576.537861][T18562] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3955'. [ 576.537888][T18562] netlink: 'syz.1.3955': attribute type 12 has an invalid length. [ 576.537908][T18562] netlink: 'syz.1.3955': attribute type 14 has an invalid length. [ 577.335399][T18577] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3961'. [ 577.358038][ C1] vcan0: j1939_tp_rxtimer: 0xffff888054112800: rx timeout, send abort [ 577.858448][ C1] vcan0: j1939_tp_rxtimer: 0xffff888054113c00: rx timeout, send abort [ 577.875946][ C1] vcan0: j1939_tp_rxtimer: 0xffff888054112800: abort rx timeout. Force session deactivation [ 578.358603][ C1] vcan0: j1939_tp_rxtimer: 0xffff888054113c00: abort rx timeout. Force session deactivation [ 579.204366][T18638] __nla_validate_parse: 2 callbacks suppressed [ 579.212420][T18638] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3980'. [ 579.254541][T18639] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3979'. [ 579.286824][T18639] 8021q: adding VLAN 0 to HW filter on device bond0 [ 579.397622][T18644] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3982'. [ 579.408103][T18644] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3982'. [ 579.703832][T18653] syzkaller0: entered promiscuous mode [ 579.703929][T18653] bond_slave_0: entered promiscuous mode [ 579.710738][T18653] bond_slave_1: entered promiscuous mode [ 579.710898][T18653] syzkaller0: entered allmulticast mode [ 579.710912][T18653] bond_slave_0: entered allmulticast mode [ 579.710928][T18653] bond_slave_1: entered allmulticast mode [ 580.935807][T18694] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3999'. [ 581.074438][T18695] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4000'. [ 581.089840][T18695] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4000'. [ 581.415847][T18706] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4005'. [ 581.449681][T18707] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 581.535365][T18708] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4005'. [ 582.673206][T18736] erspan1: entered allmulticast mode [ 583.523692][T18760] netlink: 'syz.4.4021': attribute type 10 has an invalid length. [ 583.543629][T18760] bond0: (slave team0): Releasing backup interface [ 583.668064][T18742] Cannot find set identified by id 65534 to match [ 585.560759][T18794] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4034'. [ 585.801556][T18800] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4033'. [ 585.819044][T18799] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4033'. [ 587.541129][T18868] netlink: 'syz.3.4046': attribute type 10 has an invalid length. [ 587.633726][T18874] netlink: 'syz.2.4050': attribute type 2 has an invalid length. [ 587.641805][T18874] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4050'. [ 587.670279][T18874] netlink: 'syz.2.4050': attribute type 10 has an invalid length. [ 587.704623][T18874] team0: Port device dummy0 added [ 587.772921][T18878] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4052'. [ 588.616638][T18902] netlink: 'syz.4.4060': attribute type 10 has an invalid length. [ 588.659254][T18902] team0 (unregistering): Port device team_slave_0 removed [ 588.717898][T18902] team0 (unregistering): Port device team_slave_1 removed [ 588.743309][T18903] erspan1: entered allmulticast mode [ 588.861367][T18902] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4060'. [ 589.043431][T18902] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4060'. [ 589.188473][T18909] Cannot find set identified by id 65534 to match [ 589.641080][T18936] netlink: 'syz.1.4071': attribute type 1 has an invalid length. [ 589.743606][T18943] netlink: 'syz.2.4069': attribute type 10 has an invalid length. [ 589.823506][T18944] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4070'. [ 590.383686][T18965] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4075'. [ 590.694923][T18970] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 592.308444][T19008] syzkaller1: entered allmulticast mode [ 592.872358][T19040] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 593.149921][T19046] netlink: 'syz.0.4098': attribute type 1 has an invalid length. [ 593.168687][ T7657] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 593.260455][T19047] syzkaller0: entered promiscuous mode [ 593.267321][T19047] syzkaller0: entered allmulticast mode [ 593.306381][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 593.651052][T19065] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 594.112063][T18953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 594.350908][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 595.002231][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 595.147550][ T5804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 595.388612][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 596.193160][ T5804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 596.426225][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 596.792415][T19048] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 597.391128][T19085] netlink: 'syz.0.4103': attribute type 10 has an invalid length. [ 597.428742][T19081] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4107'. [ 597.567834][T19097] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 597.659674][T19094] xt_CT: No such helper "snmp_trap" [ 597.786286][T19099] lo speed is unknown, defaulting to 1000 [ 598.321171][T19105] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 598.934642][T19125] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4117'. [ 598.945731][T19125] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4117'. [ 598.981944][T19108] Cannot find set identified by id 65534 to match [ 599.043104][T19125] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4117'. [ 599.057209][T19125] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4117'. [ 599.231485][T19135] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4118'. [ 600.387429][T19160] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4127'. [ 600.443103][T19160] netlink: 'syz.4.4127': attribute type 1 has an invalid length. [ 600.465643][T19161] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 600.791843][T19170] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 601.439180][T19181] block nbd19: server does not support multiple connections per device. [ 601.472102][T19181] block nbd19: shutting down sockets [ 602.228489][T19206] 8021q: VLANs not supported on ip6_vti0 [ 602.239094][T19206] 8021q: VLANs not supported on ip6_vti0 [ 602.246802][T19206] 8021q: VLANs not supported on ip6_vti0 [ 602.255230][T19206] 8021q: VLANs not supported on ip6_vti0 [ 602.274538][T19206] 8021q: VLANs not supported on ip6_vti0 [ 602.284456][T19206] 8021q: VLANs not supported on ip6_vti0 [ 602.284477][T19202] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4139'. [ 602.285069][T19206] 8021q: VLANs not supported on ip6_vti0 [ 602.328036][T19202] netlink: 'syz.3.4139': attribute type 1 has an invalid length. [ 602.587978][T19212] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 602.851764][T19219] xt_hashlimit: size too large, truncated to 1048576 [ 603.008024][T19224] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 603.184478][T19234] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 603.194451][T19231] netlink: 'syz.4.4146': attribute type 1 has an invalid length. [ 603.601038][T19224] netdevsim netdevsim3 netdevsim0: refused to change device tx_queue_len [ 603.885090][T19237] bridge2: entered promiscuous mode [ 603.885134][T19237] bridge2: entered allmulticast mode [ 603.939188][T19246] netlink: zone id is out of range [ 603.939285][T19246] netlink: zone id is out of range [ 603.940608][T19246] netlink: zone id is out of range [ 603.944435][T19246] netlink: zone id is out of range [ 603.944468][T19246] netlink: zone id is out of range [ 603.944498][T19246] netlink: zone id is out of range [ 603.944531][T19246] netlink: zone id is out of range [ 603.944561][T19246] netlink: zone id is out of range [ 603.944591][T19246] netlink: zone id is out of range [ 603.944601][T19246] netlink: zone id is out of range [ 604.658465][T19270] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 604.934952][T19291] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 604.991253][T19293] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 605.916200][T19303] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4162'. [ 605.928473][T19303] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4162'. [ 605.945240][T19303] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4162'. [ 605.958612][T19303] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4162'. [ 605.958892][T19303] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4162'. [ 606.005351][T19302] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4164'. [ 606.131593][T19303] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4162'. [ 606.203042][T19310] xt_SECMARK: invalid mode: 9 [ 606.291135][T19299] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4163'. [ 606.898868][T19328] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 607.239728][T19332] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 608.131528][T19348] syzkaller0: left promiscuous mode [ 608.131577][T19348] bond_slave_0: left promiscuous mode [ 608.131820][T19348] bond_slave_1: left promiscuous mode [ 608.132011][T19348] syzkaller0: left allmulticast mode [ 608.132034][T19348] bond_slave_0: left allmulticast mode [ 608.132058][T19348] bond_slave_1: left allmulticast mode [ 608.878035][T19365] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4184'. [ 609.917857][T19376] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 610.343491][T19369] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4186'. [ 610.389230][T19391] netlink: 'syz.1.4191': attribute type 10 has an invalid length. [ 610.409660][T19391] team0: Port device dummy0 added [ 610.430097][T19396] netlink: 'syz.1.4191': attribute type 10 has an invalid length. [ 610.604149][T19396] team0: Port device dummy0 removed [ 611.400674][T19417] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4197'. [ 611.836422][T19432] tap0: tun_chr_ioctl cmd 1074025676 [ 611.836517][T19432] tap0: owner set to 0 [ 612.185646][T19441] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4203'. [ 612.492073][T19453] FAULT_INJECTION: forcing a failure. [ 612.492073][T19453] name failslab, interval 1, probability 0, space 0, times 0 [ 612.505439][T19453] CPU: 0 UID: 0 PID: 19453 Comm: syz.3.4208 Not tainted syzkaller #0 PREEMPT(full) [ 612.505471][T19453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 612.505486][T19453] Call Trace: [ 612.505495][T19453] [ 612.505505][T19453] dump_stack_lvl+0xe8/0x150 [ 612.505543][T19453] should_fail_ex+0x410/0x560 [ 612.505586][T19453] should_failslab+0xa8/0x100 [ 612.505616][T19453] __kmalloc_noprof+0xfe/0x720 [ 612.505652][T19453] ? iovec_from_user+0x87/0x250 [ 612.505674][T19453] ? iovec_from_user+0x87/0x250 [ 612.505704][T19453] iovec_from_user+0x87/0x250 [ 612.505732][T19453] __import_iovec+0x15e/0x7e0 [ 612.505759][T19453] ? kstrtoull+0x137/0x1d0 [ 612.505795][T19453] import_iovec+0x73/0xa0 [ 612.505824][T19453] __se_sys_vmsplice+0x278/0x1660 [ 612.505857][T19453] ? get_pid_task+0x20/0x1f0 [ 612.505887][T19453] ? get_pid_task+0x20/0x1f0 [ 612.505909][T19453] ? get_pid_task+0x20/0x1f0 [ 612.505935][T19453] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 612.505978][T19453] ? sb_end_write+0xe8/0x190 [ 612.506008][T19453] ? vfs_write+0x9ce/0xba0 [ 612.506049][T19453] ? __pfx_vfs_write+0x10/0x10 [ 612.506084][T19453] ? do_sys_openat2+0x14e/0x200 [ 612.506109][T19453] ? kmem_cache_free+0x182/0x650 [ 612.506148][T19453] ? ksys_write+0x1fc/0x270 [ 612.506206][T19453] do_syscall_64+0x166/0x520 [ 612.506240][T19453] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 612.506264][T19453] ? clear_bhb_loop+0x70/0xc0 [ 612.506292][T19453] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 612.506315][T19453] RIP: 0033:0x7f3f8d99e159 [ 612.506336][T19453] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 612.506356][T19453] RSP: 002b:00007f3f8e83a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 612.506380][T19453] RAX: ffffffffffffffda RBX: 00007f3f8dc25fa0 RCX: 00007f3f8d99e159 [ 612.506397][T19453] RDX: 0000000000000009 RSI: 0000200000000c00 RDI: 0000000000000007 [ 612.506411][T19453] RBP: 00007f3f8e83a090 R08: 0000000000000000 R09: 0000000000000000 [ 612.506425][T19453] R10: 0000000000000009 R11: 0000000000000246 R12: 0000000000000001 [ 612.506439][T19453] R13: 00007f3f8dc26038 R14: 00007f3f8dc25fa0 R15: 00007ffc38d05b68 [ 612.506475][T19453] [ 612.964661][T19458] netlink: 27 bytes leftover after parsing attributes in process `syz.0.4211'. [ 613.123121][T19458] bond1 (unregistering): Released all slaves [ 613.199991][T19451] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4207'. [ 614.507812][T19486] netlink: 'syz.3.4217': attribute type 4 has an invalid length. [ 615.058593][T19502] syzkaller0: entered promiscuous mode [ 615.058638][T19502] syzkaller0: entered allmulticast mode [ 615.148019][T19502] netlink: 'syz.0.4219': attribute type 1 has an invalid length. [ 615.187911][T19496] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 615.500223][T19507] bond1: (slave gretap1): making interface the new active one [ 615.509502][T19507] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 615.850485][T19516] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4223'. [ 616.121171][T19518] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4224'. [ 616.131470][T19518] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4224'. [ 616.355632][T19521] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4224'. [ 617.210139][T19535] netlink: 'syz.0.4230': attribute type 1 has an invalid length. [ 617.235904][T19529] nbd: must specify a device to reconfigure [ 617.262245][ T4931] block nbd19: Receive control failed (result -32) [ 617.271202][ T5615] block nbd19: Receive control failed (result -32) [ 617.344392][T19535] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4230'. [ 617.377030][T19535] 8021q: adding VLAN 0 to HW filter on device bond2 [ 617.720165][T19556] netlink: 'syz.1.4235': attribute type 10 has an invalid length. [ 617.853016][T19564] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 618.300224][T19569] can: request_module (can-proto-0) failed. [ 619.151978][T19587] bond5: Unable to set peer notification delay as MII monitoring is disabled [ 619.187745][T19587] bond5 (unregistering): Released all slaves [ 619.931112][T19611] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4249'. [ 620.281522][T19615] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 620.571479][T19631] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 620.777688][T19641] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4258'. [ 621.398212][T19652] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 621.516708][T19648] syzkaller0: entered promiscuous mode [ 621.516752][T19648] syzkaller0: entered allmulticast mode [ 621.887031][T19665] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 622.476341][T19680] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4267'. [ 623.297138][T19702] netlink: 'syz.2.4273': attribute type 5 has an invalid length. [ 623.341310][T19702] netlink: 'syz.2.4273': attribute type 11 has an invalid length. [ 623.674647][T19712] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 624.524020][T19726] net_ratelimit: 148 callbacks suppressed [ 624.532783][T19726] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 624.631566][T19724] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4281'. [ 625.348027][T19744] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4287'. [ 625.603940][T19748] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 626.028456][T19761] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4292'. [ 626.099450][T19768] netlink: 'syz.2.4294': attribute type 13 has an invalid length. [ 626.099583][T19768] netlink: 'syz.2.4294': attribute type 58 has an invalid length. [ 626.099672][T19768] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4294'. [ 626.328242][T19775] IPVS: set_ctl: invalid protocol: 137 0.0.0.0:65534 [ 626.352365][T19775] 8021q: adding VLAN 0 to HW filter on device team0 [ 626.382240][T19775] vlan0: left promiscuous mode [ 626.411285][T19775] 8021q: adding VLAN 0 to HW filter on device bond1 [ 626.481046][T19779] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 626.555634][T19778] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4296'. [ 627.463603][T19804] xt_SECMARK: invalid mode: 9 [ 627.489938][T19799] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 627.490063][T19799] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 627.593213][T19807] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4307'. [ 627.939163][T19811] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 629.240512][T19866] x_tables: unsorted underflow at hook 1 [ 629.298305][T19869] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4316'. [ 629.323175][T19857] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4316'. [ 629.343053][T19867] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4318'. [ 629.671687][T19877] netlink: 810 bytes leftover after parsing attributes in process `syz.0.4320'. [ 629.713688][T15961] IPVS: starting estimator thread 0... [ 629.730925][T19877] IPVS: set_ctl: invalid protocol: 137 100.1.1.0:20004 [ 629.809004][T19885] IPVS: using max 26 ests per chain, 62400 per kthread [ 629.865656][ T5276] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 630.109027][T19888] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 631.160702][T19935] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 632.209662][T19941] netlink: 'syz.1.4338': attribute type 21 has an invalid length. [ 632.209755][T19941] netlink: 'syz.1.4338': attribute type 6 has an invalid length. [ 632.209795][T19941] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4338'. [ 632.450687][T19939] Cannot find set identified by id 65534 to match [ 633.520844][T19986] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 633.539289][T19986] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4352'. [ 633.539450][T19986] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 633.720542][T19986] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 633.861280][T19993] bridge0: port 3(veth1_virt_wifi) entered blocking state [ 633.871957][T19993] bridge0: port 3(veth1_virt_wifi) entered disabled state [ 633.879928][T19993] veth1_virt_wifi: entered allmulticast mode [ 633.926979][T19993] veth1_virt_wifi: left allmulticast mode [ 633.972759][T19997] bridge0: port 3(veth1_virt_wifi) entered blocking state [ 633.981255][T19997] bridge0: port 3(veth1_virt_wifi) entered disabled state [ 633.981434][T19997] veth1_virt_wifi: entered allmulticast mode [ 633.985720][T19997] veth1_virt_wifi: left allmulticast mode [ 634.254664][T20002] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4361'. [ 634.746504][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 634.831214][T20026] netlink: 'syz.0.4364': attribute type 10 has an invalid length. [ 634.877809][T20028] xt_SECMARK: invalid mode: 9 [ 636.542908][T20061] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4378'. [ 636.565681][T20061] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4378'. [ 636.720617][T20067] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4379'. [ 636.745137][T20067] netlink: 'syz.1.4379': attribute type 1 has an invalid length. [ 636.874830][T20069] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4381'. [ 637.164564][T20079] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4385'. [ 639.562724][T20133] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4401'. [ 639.632144][T20134] netlink: 'syz.2.4402': attribute type 10 has an invalid length. [ 640.183936][T20155] Cannot find set identified by id 65534 to match [ 640.849302][T20165] xt_addrtype: ipv6 does not support BROADCAST matching [ 641.238392][T20173] veth0: entered promiscuous mode [ 641.297515][T20178] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 641.343136][T20171] veth0: left promiscuous mode [ 641.628503][T20182] FAULT_INJECTION: forcing a failure. [ 641.628503][T20182] name failslab, interval 1, probability 0, space 0, times 0 [ 641.628563][T20182] CPU: 0 UID: 0 PID: 20182 Comm: syz.0.4416 Not tainted syzkaller #0 PREEMPT(full) [ 641.628590][T20182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 641.628605][T20182] Call Trace: [ 641.628615][T20182] [ 641.628625][T20182] dump_stack_lvl+0xe8/0x150 [ 641.628666][T20182] should_fail_ex+0x410/0x560 [ 641.628710][T20182] should_failslab+0xa8/0x100 [ 641.628739][T20182] ? dst_alloc+0x105/0x170 [ 641.628771][T20182] kmem_cache_alloc_noprof+0xa1/0x600 [ 641.628804][T20182] ? lock_acquire+0x115/0x350 [ 641.628830][T20182] ? dst_alloc+0x105/0x170 [ 641.628860][T20182] ? __pfx_ip6_dst_gc+0x10/0x10 [ 641.629000][T20182] dst_alloc+0x105/0x170 [ 641.629034][T20182] ip6_pol_route+0xba1/0x14d0 [ 641.629094][T20182] ? ip6_pol_route+0x163/0x14d0 [ 641.629130][T20182] ? __pfx_ip6_pol_route+0x10/0x10 [ 641.629158][T20182] ? __lock_acquire+0x6df/0x2e50 [ 641.629189][T20182] ? __lock_acquire+0x6df/0x2e50 [ 641.629229][T20182] fib6_rule_action+0x265/0xc00 [ 641.629291][T20182] ? lock_acquire+0x115/0x350 [ 641.629314][T20182] ? __pfx_fib6_rule_action+0x10/0x10 [ 641.629349][T20182] ? __lock_acquire+0x6df/0x2e50 [ 641.629373][T20182] ? fib6_rule_match+0x799/0xa80 [ 641.629401][T20182] ? __pfx_fib6_rule_action+0x10/0x10 [ 641.629433][T20182] fib_rules_lookup+0x770/0xeb0 [ 641.629497][T20182] ? fib_rules_lookup+0x99/0xeb0 [ 641.629532][T20182] ? __pfx_fib_rules_lookup+0x10/0x10 [ 641.629561][T20182] ? l3mdev_update_flow+0x26/0x610 [ 641.629641][T20182] ? l3mdev_update_flow+0x4ad/0x610 [ 641.629675][T20182] ? l3mdev_update_flow+0x26/0x610 [ 641.629714][T20182] fib6_rule_lookup+0x1a0/0x730 [ 641.629745][T20182] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 641.629777][T20182] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 641.629810][T20182] ? lock_acquire+0x115/0x350 [ 641.629832][T20182] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 641.629870][T20182] ? dev_get_by_index_rcu+0xee/0x110 [ 641.629938][T20182] ip6_route_output_flags+0x364/0x5d0 [ 641.629971][T20182] ? ip6_route_output_flags+0x2e/0x5d0 [ 641.630007][T20182] ip6_dst_lookup_tail+0x273/0x1610 [ 641.630139][T20182] ? look_up_lock_class+0x57/0x110 [ 641.630174][T20182] ? register_lock_class+0x31/0x2e0 [ 641.630204][T20182] ? __pfx_ip6_dst_lookup_tail+0x10/0x10 [ 641.630246][T20182] ? sk_dst_check+0x25/0x480 [ 641.630284][T20182] ? sk_dst_check+0x25/0x480 [ 641.630319][T20182] ? sk_dst_check+0x25/0x480 [ 641.630348][T20182] ? sk_dst_check+0x30e/0x480 [ 641.630383][T20182] ip6_sk_dst_lookup_flow+0x79a/0xa50 [ 641.630419][T20182] ? lock_acquire+0x115/0x350 [ 641.630441][T20182] ? udpv6_sendmsg+0x194d/0x2610 [ 641.630512][T20182] udpv6_sendmsg+0x1a98/0x2610 [ 641.630563][T20182] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 641.630630][T20182] ? __asan_memset+0x22/0x50 [ 641.630673][T20182] ? inet_send_prepare+0x5b/0x260 [ 641.630707][T20182] ? inet6_sendmsg+0xe4/0x120 [ 641.630737][T20182] ? __pfx_inet6_sendmsg+0x10/0x10 [ 641.630763][T20182] sock_sendmsg_nosec+0x90/0x180 [ 641.630796][T20182] ____sys_sendmsg+0x54e/0x850 [ 641.630824][T20182] ? __pfx_____sys_sendmsg+0x10/0x10 [ 641.630854][T20182] ? import_iovec+0x73/0xa0 [ 641.630878][T20182] ___sys_sendmsg+0x2a5/0x360 [ 641.630898][T20182] ? __lock_acquire+0x6df/0x2e50 [ 641.630922][T20182] ? __pfx____sys_sendmsg+0x10/0x10 [ 641.630948][T20182] ? kstrtouint+0x6e/0xe0 [ 641.630999][T20182] ? __fget_files+0x2a/0x420 [ 641.631024][T20182] ? __fget_files+0x3a2/0x420 [ 641.631064][T20182] __sys_sendmmsg+0x273/0x4d0 [ 641.631090][T20182] ? __pfx___sys_sendmmsg+0x10/0x10 [ 641.631117][T20182] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 641.631166][T20182] ? ksys_write+0x242/0x270 [ 641.631200][T20182] ? __pfx_ksys_write+0x10/0x10 [ 641.631248][T20182] __x64_sys_sendmmsg+0xa0/0xc0 [ 641.631272][T20182] do_syscall_64+0x166/0x520 [ 641.631304][T20182] ? trace_irq_disable+0x3b/0x140 [ 641.631327][T20182] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.631347][T20182] ? clear_bhb_loop+0x70/0xc0 [ 641.631368][T20182] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.631386][T20182] RIP: 0033:0x7f785799e159 [ 641.631404][T20182] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 641.631420][T20182] RSP: 002b:00007f78588e0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 641.631441][T20182] RAX: ffffffffffffffda RBX: 00007f7857c25fa0 RCX: 00007f785799e159 [ 641.631453][T20182] RDX: 0000000000000001 RSI: 0000200000003cc0 RDI: 0000000000000003 [ 641.631465][T20182] RBP: 00007f78588e0090 R08: 0000000000000000 R09: 0000000000000000 [ 641.631476][T20182] R10: 0000000004001c00 R11: 0000000000000246 R12: 0000000000000001 [ 641.631488][T20182] R13: 00007f7857c26038 R14: 00007f7857c25fa0 R15: 00007ffe59ae7568 [ 641.631519][T20182] [ 641.794775][T20183] netlink: 'syz.2.4415': attribute type 22 has an invalid length. [ 641.794799][T20183] netlink: 'syz.2.4415': attribute type 9 has an invalid length. [ 642.320025][T20161] netlink: 'syz.1.4407': attribute type 10 has an invalid length. [ 642.591648][T20192] netlink: 'syz.3.4419': attribute type 10 has an invalid length. [ 642.837376][T20198] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4421'. [ 643.021055][T20203] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4423'. [ 643.131584][T20203] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 643.196937][T20203] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 643.304648][T20205] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 643.312970][T18953] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 643.322911][T20208] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4425'. [ 643.470711][T20211] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4427'. [ 643.511247][T20208] FAULT_INJECTION: forcing a failure. [ 643.511247][T20208] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 643.511351][T20208] CPU: 1 UID: 0 PID: 20208 Comm: syz.2.4425 Not tainted syzkaller #0 PREEMPT(full) [ 643.511380][T20208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 643.511394][T20208] Call Trace: [ 643.511403][T20208] [ 643.511412][T20208] dump_stack_lvl+0xe8/0x150 [ 643.511456][T20208] should_fail_ex+0x410/0x560 [ 643.511495][T20208] _copy_from_user+0x2d/0xb0 [ 643.511519][T20208] ___sys_sendmsg+0x1c6/0x360 [ 643.511543][T20208] ? __lock_acquire+0x6df/0x2e50 [ 643.511571][T20208] ? __pfx____sys_sendmsg+0x10/0x10 [ 643.511630][T20208] ? __fget_files+0x2a/0x420 [ 643.511658][T20208] ? __fget_files+0x3a2/0x420 [ 643.511697][T20208] __x64_sys_sendmsg+0x1b1/0x290 [ 643.511724][T20208] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 643.511770][T20208] do_syscall_64+0x166/0x520 [ 643.511803][T20208] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 643.511826][T20208] ? clear_bhb_loop+0x70/0xc0 [ 643.511854][T20208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 643.511876][T20208] RIP: 0033:0x7fed9519e159 [ 643.511898][T20208] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 643.511917][T20208] RSP: 002b:00007fed96002028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 643.511941][T20208] RAX: ffffffffffffffda RBX: 00007fed95425fa0 RCX: 00007fed9519e159 [ 643.511958][T20208] RDX: 0000000000004010 RSI: 0000200000000280 RDI: 0000000000000008 [ 643.511973][T20208] RBP: 00007fed96002090 R08: 0000000000000000 R09: 0000000000000000 [ 643.511988][T20208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 643.512001][T20208] R13: 00007fed95426038 R14: 00007fed95425fa0 R15: 00007ffc2784d7f8 [ 643.512046][T20208] [ 643.717882][T20213] netlink: 'syz.1.4426': attribute type 1 has an invalid length. [ 643.883987][T20213] bond5: option mode: invalid value (8) [ 643.922429][T20213] bond5 (unregistering): Released all slaves [ 643.960698][T20222] netlink: 92 bytes leftover after parsing attributes in process `syz.1.4426'. [ 645.099083][T20254] xt_SECMARK: invalid mode: 9 [ 645.208339][T20258] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4437'. [ 645.254486][T20257] bridge0: port 3(wlan1) entered blocking state [ 645.254586][T20257] bridge0: port 3(wlan1) entered disabled state [ 645.254779][T20257] mac80211_hwsim hwsim56 wlan1: entered allmulticast mode [ 645.382563][T20257] mac80211_hwsim hwsim56 wlan1: entered promiscuous mode [ 645.641028][T20269] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4440'. [ 645.833485][T20260] bridge0: port 3(wlan1) entered disabled state [ 645.870912][T20260] mac80211_hwsim hwsim56 wlan1 (unregistering): left allmulticast mode [ 645.889190][T20260] mac80211_hwsim hwsim56 wlan1 (unregistering): left promiscuous mode [ 645.900856][T20260] bridge0: port 3(wlan1) entered disabled state [ 646.309084][T20281] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 646.328232][ T5804] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 646.733680][T20295] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4447'. [ 646.746882][T20296] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4447'. [ 647.493548][T20319] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4454'. [ 647.720595][T20329] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4456'. [ 647.975187][T20340] netlink: 'syz.2.4460': attribute type 28 has an invalid length. [ 647.988007][T20340] netlink: 'syz.2.4460': attribute type 3 has an invalid length. [ 647.988062][T20340] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4460'. [ 649.185846][T20363] Cannot find set identified by id 65534 to match [ 649.662080][T20379] netlink: 19 bytes leftover after parsing attributes in process `syz.3.4471'. [ 649.958847][T20390] netlink: 1776 bytes leftover after parsing attributes in process `syz.4.4475'. [ 649.959846][T20390] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4475'. [ 650.540945][T20386] lo speed is unknown, defaulting to 1000 [ 650.891256][T20397] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4476'. [ 651.017025][T20403] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4478'. [ 651.065565][T20401] 8021q: adding VLAN 0 to HW filter on device macsec0 [ 651.229077][T18953] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 651.342772][T20417] netlink: 'syz.2.4481': attribute type 10 has an invalid length. [ 651.355759][T20417] netlink: 2 bytes leftover after parsing attributes in process `syz.2.4481'. [ 651.499691][T20417] team0: Device wg2 is of different type [ 651.744041][T20404] ip6gretap0: entered promiscuous mode [ 651.750545][T20404] macsec2: entered allmulticast mode [ 651.757906][T20404] ip6gretap0: entered allmulticast mode [ 651.835318][T20404] ip6gretap0: left allmulticast mode [ 651.835368][T20404] ip6gretap0: left promiscuous mode [ 652.009495][T20431] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4483'. [ 652.104741][T20438] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4486'. [ 652.162413][T20439] netlink: 'syz.0.4486': attribute type 1 has an invalid length. [ 652.177347][T20444] netlink: 'syz.1.4485': attribute type 1 has an invalid length. [ 652.269729][T20446] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 652.330787][T20438] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4486'. [ 652.366856][T20440] openvswitch: netlink: IPv6 tunnel dst address is zero [ 652.597978][T20439] bond3: entered promiscuous mode [ 652.606821][T20439] 8021q: adding VLAN 0 to HW filter on device bond3 [ 652.991362][T20464] xt_SECMARK: invalid mode: 9 [ 653.094179][T20466] x_tables: ip_tables: RATEEST.0 target: invalid size 32 (kernel) != (user) 0 [ 653.535785][T20481] xt_esp: unknown flags DD [ 653.595374][T20479] 8021q: VLANs not supported on ip6_vti0 [ 653.790608][T20487] netlink: 'syz.1.4503': attribute type 2 has an invalid length. [ 653.790650][T20487] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4503'. [ 653.901386][T20494] xt_SECMARK: invalid mode: 9 [ 653.923496][T20487] : entered promiscuous mode [ 654.383004][T20508] syzkaller0: entered promiscuous mode [ 654.383051][T20508] syzkaller0: entered allmulticast mode [ 654.513636][T20511] FAULT_INJECTION: forcing a failure. [ 654.513636][T20511] name failslab, interval 1, probability 0, space 0, times 0 [ 654.513735][T20511] CPU: 1 UID: 0 PID: 20511 Comm: syz.1.4513 Not tainted syzkaller #0 PREEMPT(full) [ 654.513809][T20511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 654.513860][T20511] Call Trace: [ 654.513899][T20511] [ 654.513944][T20511] dump_stack_lvl+0xe8/0x150 [ 654.514046][T20511] should_fail_ex+0x410/0x560 [ 654.514143][T20511] should_failslab+0xa8/0x100 [ 654.514225][T20511] __kvmalloc_node_noprof+0x176/0x820 [ 654.514292][T20511] ? bpf_test_run_xdp_live+0x1ef/0x1c20 [ 654.514451][T20511] ? bpf_test_run_xdp_live+0x1ef/0x1c20 [ 654.514545][T20511] bpf_test_run_xdp_live+0x1ef/0x1c20 [ 654.514621][T20511] ? bpf_dispatcher_change_prog+0xc4c/0xf20 [ 654.514724][T20511] ? __mutex_unlock_slowpath+0x731/0x900 [ 654.514829][T20511] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 654.514944][T20511] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 654.515057][T20511] ? 0xffffffffa0404180 [ 654.515259][T20511] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 654.515379][T20511] ? _copy_from_user+0x94/0xb0 [ 654.515444][T20511] ? bpf_test_init+0x113/0x150 [ 654.515506][T20511] ? xdp_convert_md_to_buff+0x5b/0x330 [ 654.515587][T20511] bpf_prog_test_run_xdp+0x7d8/0x11d0 [ 654.515702][T20511] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 654.515786][T20511] ? __fget_files+0x2a/0x420 [ 654.515881][T20511] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 654.515955][T20511] bpf_prog_test_run+0x2c5/0x340 [ 654.516054][T20511] __sys_bpf+0xa22/0xd90 [ 654.516129][T20511] ? __pfx___sys_bpf+0x10/0x10 [ 654.516223][T20511] ? __fget_files+0x2a/0x420 [ 654.516339][T20511] ? ksys_write+0x242/0x270 [ 654.516502][T20511] ? __pfx_ksys_write+0x10/0x10 [ 654.516611][T20511] __x64_sys_bpf+0xba/0xd0 [ 654.516696][T20511] do_syscall_64+0x166/0x520 [ 654.516786][T20511] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 654.516847][T20511] ? clear_bhb_loop+0x70/0xc0 [ 654.516929][T20511] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 654.516984][T20511] RIP: 0033:0x7f184539e159 [ 654.517038][T20511] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 654.517089][T20511] RSP: 002b:00007f184634b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 654.517152][T20511] RAX: ffffffffffffffda RBX: 00007f1845625fa0 RCX: 00007f184539e159 [ 654.517195][T20511] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 654.517236][T20511] RBP: 00007f184634b090 R08: 0000000000000000 R09: 0000000000000000 [ 654.517269][T20511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 654.517309][T20511] R13: 00007f1845626038 R14: 00007f1845625fa0 R15: 00007ffff7f07ae8 [ 654.517399][T20511] [ 654.727638][T20518] TCP: TCP_TX_DELAY enabled [ 654.896607][T20521] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4515'. [ 655.298653][T20535] ip6erspan0: entered allmulticast mode [ 655.899337][T20556] netlink: 'syz.3.4528': attribute type 6 has an invalid length. [ 655.943703][T20557] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4527'. [ 656.064819][T20561] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4530'. [ 656.163572][T20570] syzkaller0: entered promiscuous mode [ 656.169881][T20570] syzkaller0: entered allmulticast mode [ 656.341565][T20572] xt_SECMARK: invalid mode: 9 [ 656.622812][T20579] batman_adv: batadv0: Adding interface: macvtap1 [ 656.630632][T20579] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 656.683374][T20589] netlink: 'syz.3.4540': attribute type 30 has an invalid length. [ 656.806731][T20594] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4542'. [ 656.936329][T20595] netlink: 'syz.0.4541': attribute type 10 has an invalid length. [ 657.091949][T20603] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4545'. [ 657.162744][T20608] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4546'. [ 657.174326][T20608] netlink: 'syz.1.4546': attribute type 1 has an invalid length. [ 657.934977][T20637] Bluetooth: hci0: invalid length 0, exp 4 for type 32 [ 658.380826][T20649] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4559'. [ 658.817514][T20662] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4566'. [ 660.362113][T20702] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4578'. [ 660.362211][T20702] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4578'. [ 660.420908][T20703] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4578'. [ 660.594986][T20702] bond4: entered promiscuous mode [ 660.595522][T20702] 8021q: adding VLAN 0 to HW filter on device bond4 [ 660.624259][T20707] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 660.624455][T20707] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 660.715412][T20703] bond5: entered promiscuous mode [ 660.728433][T20703] 8021q: adding VLAN 0 to HW filter on device bond5 [ 660.740586][T20718] sctp: [Deprecated]: syz.0.4581 (pid 20718) Use of struct sctp_assoc_value in delayed_ack socket option. [ 660.740586][T20718] Use struct sctp_sack_info instead [ 661.877793][T20751] FAULT_INJECTION: forcing a failure. [ 661.877793][T20751] name failslab, interval 1, probability 0, space 0, times 0 [ 661.892394][T20751] CPU: 0 UID: 0 PID: 20751 Comm: syz.1.4596 Not tainted syzkaller #0 PREEMPT(full) [ 661.892440][T20751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 661.892463][T20751] Call Trace: [ 661.892478][T20751] [ 661.892493][T20751] dump_stack_lvl+0xe8/0x150 [ 661.892549][T20751] should_fail_ex+0x410/0x560 [ 661.892652][T20751] should_failslab+0xa8/0x100 [ 661.892684][T20751] __kmalloc_noprof+0xfe/0x720 [ 661.892719][T20751] ? tomoyo_encode+0x2ad/0x570 [ 661.892745][T20751] ? tomoyo_encode+0x2ad/0x570 [ 661.892778][T20751] tomoyo_encode+0x2ad/0x570 [ 661.892810][T20751] tomoyo_realpath_from_path+0x5fa/0x640 [ 661.892850][T20751] ? tomoyo_path_number_perm+0x219/0x5f0 [ 661.892886][T20751] tomoyo_path_number_perm+0x246/0x5f0 [ 661.892923][T20751] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 661.892957][T20751] ? __lock_acquire+0x6df/0x2e50 [ 661.892997][T20751] ? hook_file_ioctl+0x1f2/0x600 [ 661.893042][T20751] ? __fget_files+0x2a/0x420 [ 661.893075][T20751] ? __fget_files+0x2a/0x420 [ 661.893103][T20751] ? __fget_files+0x3a2/0x420 [ 661.893131][T20751] ? __fget_files+0x2a/0x420 [ 661.893164][T20751] security_file_ioctl+0xc3/0x2a0 [ 661.893200][T20751] __se_sys_ioctl+0x47/0x170 [ 661.893226][T20751] do_syscall_64+0x166/0x520 [ 661.893258][T20751] ? trace_irq_disable+0x3b/0x140 [ 661.893280][T20751] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.893305][T20751] ? clear_bhb_loop+0x70/0xc0 [ 661.893333][T20751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.893356][T20751] RIP: 0033:0x7f184539e159 [ 661.893377][T20751] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 661.893398][T20751] RSP: 002b:00007f184634b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 661.893422][T20751] RAX: ffffffffffffffda RBX: 00007f1845625fa0 RCX: 00007f184539e159 [ 661.893439][T20751] RDX: 0000200000000140 RSI: 0000000000008946 RDI: 0000000000000003 [ 661.893454][T20751] RBP: 00007f184634b090 R08: 0000000000000000 R09: 0000000000000000 [ 661.893469][T20751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 661.893483][T20751] R13: 00007f1845626038 R14: 00007f1845625fa0 R15: 00007ffff7f07ae8 [ 661.893519][T20751] [ 662.022392][T20751] ERROR: Out of memory at tomoyo_realpath_from_path. [ 662.224816][T20754] __nla_validate_parse: 2 callbacks suppressed [ 662.234288][T20754] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4598'. [ 662.813054][T20776] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4603'. [ 663.324346][T20790] netlink: 'syz.0.4611': attribute type 1 has an invalid length. [ 663.324389][T20790] netlink: 228 bytes leftover after parsing attributes in process `syz.0.4611'. [ 663.371436][T20771] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 663.399643][T20771] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 663.638448][T20798] FAULT_INJECTION: forcing a failure. [ 663.638448][T20798] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 663.638511][T20798] CPU: 0 UID: 0 PID: 20798 Comm: syz.3.4613 Not tainted syzkaller #0 PREEMPT(full) [ 663.638543][T20798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 663.638557][T20798] Call Trace: [ 663.638566][T20798] [ 663.638576][T20798] dump_stack_lvl+0xe8/0x150 [ 663.638614][T20798] should_fail_ex+0x410/0x560 [ 663.638656][T20798] _copy_from_user+0x2d/0xb0 [ 663.638682][T20798] sock_do_ioctl+0x195/0x320 [ 663.638716][T20798] ? __pfx_sock_do_ioctl+0x10/0x10 [ 663.638743][T20798] ? hook_file_ioctl+0x1f2/0x600 [ 663.638783][T20798] sock_ioctl+0x57a/0x7e0 [ 663.638814][T20798] ? __pfx_sock_ioctl+0x10/0x10 [ 663.638843][T20798] ? __fget_files+0x2a/0x420 [ 663.638872][T20798] ? __fget_files+0x3a2/0x420 [ 663.638900][T20798] ? __fget_files+0x2a/0x420 [ 663.638933][T20798] ? bpf_lsm_file_ioctl+0x9/0x20 [ 663.638965][T20798] ? __pfx_sock_ioctl+0x10/0x10 [ 663.639000][T20798] __se_sys_ioctl+0xfc/0x170 [ 663.639025][T20798] do_syscall_64+0x166/0x520 [ 663.639073][T20798] ? trace_irq_disable+0x3b/0x140 [ 663.639095][T20798] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 663.639119][T20798] ? clear_bhb_loop+0x70/0xc0 [ 663.639152][T20798] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 663.639176][T20798] RIP: 0033:0x7f3f8d99e159 [ 663.639197][T20798] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 663.639219][T20798] RSP: 002b:00007f3f8e83a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 663.639244][T20798] RAX: ffffffffffffffda RBX: 00007f3f8dc25fa0 RCX: 00007f3f8d99e159 [ 663.639262][T20798] RDX: 0000200000000140 RSI: 0000000000008946 RDI: 0000000000000003 [ 663.639277][T20798] RBP: 00007f3f8e83a090 R08: 0000000000000000 R09: 0000000000000000 [ 663.639291][T20798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 663.639304][T20798] R13: 00007f3f8dc26038 R14: 00007f3f8dc25fa0 R15: 00007ffc38d05b68 [ 663.639339][T20798] [ 664.191218][T20771] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 664.202919][T20771] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.341077][T20771] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 664.354475][T20771] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.467770][T20812] netlink: 'syz.3.4618': attribute type 10 has an invalid length. [ 664.537202][T20816] netlink: 'syz.3.4618': attribute type 10 has an invalid length. [ 664.651043][T20771] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 664.662833][T20771] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.842000][T20812] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 664.863707][T20812] team0: Port device netdevsim1 added [ 665.011663][T20816] team0: Port device netdevsim1 removed [ 665.028586][T20816] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 665.169203][T20816] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 665.498789][T20837] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4624'. [ 665.516673][ T7651] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 665.516800][ T7651] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 665.596854][ T7645] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 665.597019][ T7645] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 665.605303][ T7645] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 665.605376][ T7645] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 665.613595][ T7645] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 665.613664][ T7645] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 665.910524][T20849] netlink: 'syz.2.4627': attribute type 23 has an invalid length. [ 665.910653][T20849] netlink: 'syz.2.4627': attribute type 11 has an invalid length. [ 666.074467][T20830] Cannot find set identified by id 65534 to match [ 666.216293][T20853] ip6t_srh: unknown srh match flags 4000 [ 666.464036][T20868] FAULT_INJECTION: forcing a failure. [ 666.464036][T20868] name failslab, interval 1, probability 0, space 0, times 0 [ 666.464103][T20868] CPU: 1 UID: 0 PID: 20868 Comm: syz.0.4635 Not tainted syzkaller #0 PREEMPT(full) [ 666.464132][T20868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 666.464148][T20868] Call Trace: [ 666.464158][T20868] [ 666.464169][T20868] dump_stack_lvl+0xe8/0x150 [ 666.464295][T20868] should_fail_ex+0x410/0x560 [ 666.464451][T20868] should_failslab+0xa8/0x100 [ 666.464534][T20868] __kmalloc_cache_noprof+0xa3/0x600 [ 666.464639][T20868] ? dev_ethtool+0x13f/0x29c0 [ 666.464739][T20868] ? dev_ethtool+0x13f/0x29c0 [ 666.464852][T20868] dev_ethtool+0x13f/0x29c0 [ 666.464943][T20868] ? __lock_acquire+0x6df/0x2e50 [ 666.465051][T20868] ? __pfx_dev_ethtool+0x10/0x10 [ 666.465146][T20868] ? kasan_quarantine_put+0xbb/0x1f0 [ 666.465276][T20868] ? lock_acquire+0x115/0x350 [ 666.465367][T20868] ? dev_load+0x21/0x1f0 [ 666.465584][T20868] ? dev_load+0x21/0x1f0 [ 666.465689][T20868] dev_ioctl+0x392/0x1150 [ 666.465802][T20868] sock_do_ioctl+0x23e/0x320 [ 666.465912][T20868] ? __pfx_sock_do_ioctl+0x10/0x10 [ 666.465998][T20868] ? hook_file_ioctl+0x1f2/0x600 [ 666.466167][T20868] sock_ioctl+0x57a/0x7e0 [ 666.466273][T20868] ? __pfx_sock_ioctl+0x10/0x10 [ 666.466356][T20868] ? __fget_files+0x2a/0x420 [ 666.466429][T20868] ? __fget_files+0x3a2/0x420 [ 666.466511][T20868] ? __fget_files+0x2a/0x420 [ 666.466605][T20868] ? bpf_lsm_file_ioctl+0x9/0x20 [ 666.466689][T20868] ? __pfx_sock_ioctl+0x10/0x10 [ 666.466778][T20868] __se_sys_ioctl+0xfc/0x170 [ 666.466860][T20868] do_syscall_64+0x166/0x520 [ 666.466954][T20868] ? trace_irq_disable+0x3b/0x140 [ 666.467015][T20868] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 666.467082][T20868] ? clear_bhb_loop+0x70/0xc0 [ 666.467163][T20868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 666.467239][T20868] RIP: 0033:0x7f785799e159 [ 666.467308][T20868] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 666.467375][T20868] RSP: 002b:00007f78588e0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 666.467463][T20868] RAX: ffffffffffffffda RBX: 00007f7857c25fa0 RCX: 00007f785799e159 [ 666.467511][T20868] RDX: 0000200000000140 RSI: 0000000000008946 RDI: 0000000000000003 [ 666.467557][T20868] RBP: 00007f78588e0090 R08: 0000000000000000 R09: 0000000000000000 [ 666.467594][T20868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 666.467631][T20868] R13: 00007f7857c26038 R14: 00007f7857c25fa0 R15: 00007ffe59ae7568 [ 666.467737][T20868] [ 666.888710][T20870] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4638'. [ 666.939734][T20873] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4636'. [ 667.778154][T20901] netlink: 'syz.0.4645': attribute type 2 has an invalid length. [ 667.778253][T20901] netlink: 'syz.0.4645': attribute type 1 has an invalid length. [ 667.810430][T20901] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4645'. [ 667.978079][T20909] FAULT_INJECTION: forcing a failure. [ 667.978079][T20909] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 667.991560][T20909] CPU: 0 UID: 0 PID: 20909 Comm: syz.4.4648 Not tainted syzkaller #0 PREEMPT(full) [ 667.991592][T20909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 667.991606][T20909] Call Trace: [ 667.991615][T20909] [ 667.991626][T20909] dump_stack_lvl+0xe8/0x150 [ 667.991664][T20909] should_fail_ex+0x410/0x560 [ 667.991707][T20909] _copy_from_user+0x2d/0xb0 [ 667.991732][T20909] ethtool_set_channels+0x166/0x5e0 [ 667.991763][T20909] ? __pfx_ethtool_set_channels+0x10/0x10 [ 667.991802][T20909] ? bpf_lsm_capable+0x9/0x20 [ 667.991833][T20909] ? security_capable+0x7e/0x2c0 [ 667.991865][T20909] dev_ethtool+0x1d94/0x29c0 [ 667.991895][T20909] ? __lock_acquire+0x6df/0x2e50 [ 667.991935][T20909] ? __pfx_dev_ethtool+0x10/0x10 [ 667.991968][T20909] ? kasan_quarantine_put+0xbb/0x1f0 [ 667.992009][T20909] ? lock_acquire+0x115/0x350 [ 667.992042][T20909] ? dev_load+0x21/0x1f0 [ 667.992085][T20909] ? dev_load+0x21/0x1f0 [ 667.992121][T20909] dev_ioctl+0x392/0x1150 [ 667.992160][T20909] sock_do_ioctl+0x23e/0x320 [ 667.992193][T20909] ? __pfx_sock_do_ioctl+0x10/0x10 [ 667.992219][T20909] ? hook_file_ioctl+0x1f2/0x600 [ 667.992260][T20909] sock_ioctl+0x57a/0x7e0 [ 667.992296][T20909] ? __pfx_sock_ioctl+0x10/0x10 [ 667.992325][T20909] ? __fget_files+0x2a/0x420 [ 667.992353][T20909] ? __fget_files+0x3a2/0x420 [ 667.992380][T20909] ? __fget_files+0x2a/0x420 [ 667.992413][T20909] ? bpf_lsm_file_ioctl+0x9/0x20 [ 667.992442][T20909] ? __pfx_sock_ioctl+0x10/0x10 [ 667.992470][T20909] __se_sys_ioctl+0xfc/0x170 [ 667.992496][T20909] do_syscall_64+0x166/0x520 [ 667.992528][T20909] ? trace_irq_disable+0x3b/0x140 [ 667.992550][T20909] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 667.992574][T20909] ? clear_bhb_loop+0x70/0xc0 [ 667.992602][T20909] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 667.992625][T20909] RIP: 0033:0x7f539d59e159 [ 667.992646][T20909] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 667.992666][T20909] RSP: 002b:00007f539b7f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 667.992692][T20909] RAX: ffffffffffffffda RBX: 00007f539d825fa0 RCX: 00007f539d59e159 [ 667.992709][T20909] RDX: 0000200000000140 RSI: 0000000000008946 RDI: 0000000000000003 [ 667.992724][T20909] RBP: 00007f539b7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 667.992739][T20909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 667.992753][T20909] R13: 00007f539d826038 R14: 00007f539d825fa0 R15: 00007fffb71c1108 [ 667.992790][T20909] [ 668.435836][T20916] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4651'. [ 668.473211][T20916] xt_TCPMSS: Only works on TCP SYN packets [ 668.621894][T20916] bridge_slave_1: left allmulticast mode [ 668.621945][T20916] bridge_slave_1: left promiscuous mode [ 668.622239][T20916] bridge0: port 2(bridge_slave_1) entered disabled state [ 668.658471][T20916] bridge_slave_0: left allmulticast mode [ 668.658522][T20916] bridge_slave_0: left promiscuous mode [ 668.662259][T20916] bridge0: port 1(bridge_slave_0) entered disabled state [ 669.290533][T20946] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4662'. [ 669.670156][T20954] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4663'. [ 670.559809][T20965] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4667'. [ 670.647684][T20965] netlink: 400 bytes leftover after parsing attributes in process `syz.1.4667'. [ 671.160694][T20989] xt_bpf: check failed: parse error [ 671.464403][T20999] veth1_macvtap: left promiscuous mode [ 671.464856][T20999] macsec0: entered promiscuous mode [ 672.928993][T21035] netlink: 'syz.3.4693': attribute type 13 has an invalid length. [ 672.950712][T21034] x_tables: duplicate underflow at hook 2 [ 673.051238][T21041] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4695'. [ 674.361991][T21062] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4701'. [ 675.504292][T21087] xt_bpf: check failed: parse error [ 676.072779][T21104] netlink: 'syz.3.4715': attribute type 83 has an invalid length. [ 676.344854][T21113] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4716'. [ 676.866639][T21151] netlink: 116 bytes leftover after parsing attributes in process `syz.4.4719'. [ 677.020465][T21164] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4721'. [ 677.242811][T21170] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4725'. [ 677.908164][ T5615] Bluetooth: unknown link type 231 [ 677.908246][ T5615] Bluetooth: hci5: connection err: -111 [ 678.281274][T21206] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4732'. [ 684.164218][T21254] netlink: 160 bytes leftover after parsing attributes in process `syz.3.4747'. [ 684.434156][T21260] netlink: 'syz.3.4749': attribute type 19 has an invalid length. [ 684.446423][T21260] netlink: 14552 bytes leftover after parsing attributes in process `syz.3.4749'. [ 687.163120][T21317] netlink: 220 bytes leftover after parsing attributes in process `syz.2.4775'. [ 687.221799][T21318] netlink: 160 bytes leftover after parsing attributes in process `syz.4.4777'. [ 688.655823][T21351] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 688.655862][T21351] IPv6: NLM_F_CREATE should be set when creating new route [ 688.655933][T21351] IPv6: NLM_F_CREATE should be set when creating new route [ 688.655964][T21351] IPv6: NLM_F_CREATE should be set when creating new route [ 689.680614][T21373] [ 689.684650][T21373] ============================= [ 689.690105][T21373] WARNING: suspicious RCU usage [ 689.695398][T21373] syzkaller #0 Not tainted [ 689.700432][T21373] ----------------------------- [ 689.705655][T21373] kernel/events/callchain.c:163 suspicious rcu_dereference_check() usage! [ 689.714797][T21373] [ 689.714797][T21373] other info that might help us debug this: [ 689.714797][T21373] [ 689.725615][T21373] [ 689.725615][T21373] rcu_scheduler_active = 2, debug_locks = 1 [ 689.734014][T21373] locks held by syz.0.4801/21373: 1, last CPU#0: [ 689.741436][T21373] #0: ffffffff8ed5c8d8 (rcu_tasks_trace_srcu_struct){....}-{0:0}, at: rcu_read_lock_trace+0x25/0x110 [ 689.752686][T21373] [ 689.752686][T21373] stack backtrace: [ 689.758720][T21373] CPU: 0 UID: 0 PID: 21373 Comm: syz.0.4801 Not tainted syzkaller #0 PREEMPT(full) [ 689.768130][T21373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 689.778225][T21373] Call Trace: [ 689.781539][T21373] [ 689.784494][T21373] dump_stack_lvl+0xe8/0x150 [ 689.789118][T21373] lockdep_rcu_suspicious+0x140/0x1d0 [ 689.794536][T21373] get_callchain_entry+0x2b7/0x3c0 [ 689.799727][T21373] get_perf_callchain+0xd5/0x880 [ 689.804701][T21373] ? __pfx_get_perf_callchain+0x10/0x10 [ 689.810287][T21373] ? __lock_acquire+0x6df/0x2e50 [ 689.815265][T21373] __bpf_get_stack+0x375/0xae0 [ 689.820072][T21373] ? __pfx___bpf_get_stack+0x10/0x10 [ 689.825392][T21373] ? lock_acquire+0x115/0x350 [ 689.830100][T21373] ? bpf_prog_e8e6327ccf46c9a7+0x46/0x4e [ 689.835763][T21373] bpf_get_stack_raw_tp+0x1a4/0x210 [ 689.840998][T21373] bpf_prog_e8e6327ccf46c9a7+0x46/0x4e [ 689.846478][T21373] bpf_prog_run_pin_on_cpu+0x3ef/0x4c0 [ 689.851991][T21373] bpf_prog_test_run_syscall+0x324/0x4c0 [ 689.857651][T21373] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 689.863833][T21373] ? __fget_files+0x2a/0x420 [ 689.868452][T21373] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 689.874720][T21373] bpf_prog_test_run+0x2c5/0x340 [ 689.879692][T21373] __sys_bpf+0xa22/0xd90 [ 689.883976][T21373] ? __pfx___sys_bpf+0x10/0x10 [ 689.888771][T21373] ? do_futex+0x458/0x4e0 [ 689.893160][T21373] ? rcu_is_watching+0x16/0xb0 [ 689.897966][T21373] __x64_sys_bpf+0xba/0xd0 [ 689.902440][T21373] do_syscall_64+0x166/0x520 [ 689.907059][T21373] ? trace_irq_disable+0x3b/0x140 [ 689.912101][T21373] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 689.918229][T21373] ? clear_bhb_loop+0x70/0xc0 [ 689.922931][T21373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 689.928848][T21373] RIP: 0033:0x7f785799e159 [ 689.933295][T21373] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 689.952957][T21373] RSP: 002b:00007f78588e0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 689.961491][T21373] RAX: ffffffffffffffda RBX: 00007f7857c25fa0 RCX: 00007f785799e159 [ 689.969491][T21373] RDX: 000000000000000c RSI: 00002000000004c0 RDI: 000000000000000a [ 689.977480][T21373] RBP: 00007f7857a3503b R08: 0000000000000000 R09: 0000000000000000 [ 689.985470][T21373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 689.993459][T21373] R13: 00007f7857c26038 R14: 00007f7857c25fa0 R15: 00007ffe59ae7568 [ 690.001468][T21373]