last executing test programs: 8.887015426s ago: executing program 2 (id=3034): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x20}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000540)={0x0, 0x2d00, &(0x7f0000000500)={&(0x7f0000000180)={0x68, r1, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x14, 0x3, '2\x00_\x00\x00\x00\x00D\x00\x00\x00\x00\x00\x00\x00\x00'}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "9ea2d328893918792a5ca222a6ad614b6f3aa3a6"}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 8.666114345s ago: executing program 2 (id=3037): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000007c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000780)={&(0x7f0000000580)={0x178, 0x2e, 0x300, 0x70bd2a, 0x25dfdbfe, {0x9}, [@typed={0xc, 0x8, 0x0, 0x0, @u64=0x100}, @generic="ca015f45bad80c01163af43d65f3b4c8de53e278fabda7fe158a79039d79b06a5baac9e4cc735e3ba9058661302988d402e521486bc46d4186e509a45a9e3a8ee1cad618a4ed49e2d906e287a675d0d082009940ab1b2316bdbe41c0ef0b3256ed296149bc9bec", @generic="119acc9d0ac5ea21fd9468fb0605986f16f94e58ac2778f4719aa69046a788cd17782887c7073a3f4929768c5345c2ef0b65809bbe36512213867f17a88bf11668d680c6e4f9c7bdcdddee6b47329b3a4f2e164cda4724281dfda1680041828e16264249c769506f9550d96198117d85543fe66e5b098bf31785ec5512a7315a5bb1766509492583d9c227e944c9f6cb7fd49dd359269a8aa60df8c3b6640e52c852d2cfa355c4c965b7ba9d6862df0cd2e9c706a9aed2bc0ab53e2392184f3a5cd0bbee0b90920f2e62aa4a", @generic, @typed={0x8, 0x35, 0x0, 0x0, @str='GPL\x00'}, @typed={0x14, 0x6a, 0x0, 0x0, @ipv6=@remote}, @generic="7ff47e4132088369"]}, 0x178}}, 0x4) unshare(0x2020600) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x2000800) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r5) r7 = socket$inet6(0xa, 0xa, 0x76) accept$inet6(r7, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0x1c) sendmsg$DEVLINK_CMD_RATE_GET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x24000040) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0xc) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r9, 0x6, 0xd, &(0x7f0000000040), 0x4) sendmsg$kcm(r9, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x20000000) listen(r9, 0x0) r10 = getpid() bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r8, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000340)='./cgroup/cgroup.procs\x00', &(0x7f00000008c0)=[0x45c, 0x9], 0x0, 0x0, 0x2, 0x1, r10}}, 0x40) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r12 = openat$cgroup_procs(r11, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) r13 = getpid() write$cgroup_pid(r12, &(0x7f0000000180)=r13, 0x12) sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)={0xac, r6, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r13}}]}, 0xac}}, 0x44000000) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000002600000002000000ffff000005"], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000540)={&(0x7f0000000080), 0x0, 0x0, 0x0, 0x9, r14}, 0x38) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c00000010003b15000000009100000004000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000006aff028008001c00", @ANYRES32=r2], 0x3c}}, 0x0) 8.215440802s ago: executing program 2 (id=3040): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280), r0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000000340)={&(0x7f0000000240), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r1, 0x8, 0x70bd29, 0x25dfdbff, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048010}, 0x4) (async) syz_emit_ethernet(0x76, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000001aaaaaaaaaabb86dd60f53a0400403a"], 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00', 0x1}) ioctl(r2, 0x8b22, &(0x7f0000000040)) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x22, 0x0) (async) ioctl$TUNSETLINK(r4, 0x400454cd, 0x6) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r4, &(0x7f00000012c0)=ANY=[@ANYBLOB="00200000ffffffffffffb10faaaaaabb080600200800060400"], 0x2e) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x18, r3, 0x1, 0x70bd2d, 0x0, {0x1b}, [@HEADER={0x4}]}, 0x18}}, 0x0) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000040)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000200)=0x1, 0x12) (async) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x5c}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x4, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x36}, @val={0x8, 0x3, r9}, @void}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x20000054) 7.900973679s ago: executing program 2 (id=3042): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000140)="266e581843bdea502b6021ef45b0eb78abac575cad2d88", 0x17}], 0x1}}], 0x1, 0x40008c0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1200000078000000040000000300000000000000", @ANYRES32, @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000096004eea3b70dcea696800"/28], 0x50) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x2e, &(0x7f0000000180)=0x79, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x18, 0x3f, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x2fc}]}, 0x18}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_GET(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002cbd70f0e37ef45f048c3100180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x20000805}, 0x8000) listen(r1, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r6) sendmsg$IEEE802154_ASSOCIATE_REQ(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001380)={0x24, r7, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x1a}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0xffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0xc40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={r0, &(0x7f0000000480), &(0x7f0000000540)=@tcp=r1}, 0x20) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000001800090000000000000000001c140000fe"], 0x24}}, 0x0) 7.56325069s ago: executing program 2 (id=3044): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000480)=0x3, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x29d6, 0x4) socket$igmp6(0xa, 0x3, 0x2) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="f00000001000130725bd700000000000fe8000000000000000000000000000bb00000000000000000000ffffac1414aa4e2200018000000402000060", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe80000000000000000034b51ed500bb0000000032000000fe8000000000000000000000000000aa0000000000000000fcffffffff9179b996fe11760ecaac48aeffffff08000000000000000a0000008b7100002a00000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000600000000000000f8ffffffffffffff0c000000000000000200000029bd70000000000002000000ac00000000000000"], 0x35}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'xfrm0\x00'}) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, &(0x7f0000000540)="43210098") r4 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_SIOCADDRT(r4, 0x890b, &(0x7f0000000280)={0x0, @l2tp={0x2, 0x0, @rand_addr=0x64010101, 0x3}, @nl=@unspec, @isdn={0x22, 0x2, 0x7, 0x2, 0x9}, 0xa55c, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000240)='ip6_vti0\x00', 0x7, 0x4, 0x3}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r7, 0x800448d4, &(0x7f0000000400)) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000140affffffff00000000000002000009080003400000000a0900010073797a30000000000c000640000000000000000214000000020a010100000000000000000000000a14000000110001"], 0x70}}, 0x0) sendmmsg$inet(r0, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e24, @empty}, 0x10, 0x0}}], 0x1, 0x24004800) recvmmsg(r0, &(0x7f0000000f00)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x40012000, 0x0) 6.929167045s ago: executing program 2 (id=3047): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@can_delroute={0x44, 0x19, 0x1, 0x70bd2c, 0x25dfdbfc, {0x1d, 0x1, 0x2}, [@CGW_MOD_AND={0x15, 0x1, {{{}, 0x1, 0x2, 0x0, 0x0, "dc14914d874787b0"}, 0x1}}, @CGW_MOD_OR={0x15, 0x2, {{{0x2}, 0x2, 0x2, 0x0, 0x0, "19187ad7a60ac0d5"}, 0x4}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008810}, 0x30004016) 5.219249443s ago: executing program 4 (id=3054): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000006c0)=[@in6={0xa, 0x4e23, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}], 0x1c) getsockopt$sock_buf(r1, 0x1, 0x1c, &(0x7f00000001c0)=""/169, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x5f, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000014000780080008400000000008001240ffffffe80500010006000000050005000200000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x5c}}, 0x0) r2 = socket(0x1, 0x803, 0x0) getpeername$packet(r2, 0x0, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x50, r3, 0x30c, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x811}, 0x4000000) 4.303001813s ago: executing program 4 (id=3059): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="180000000000000000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet(0x2, 0x3, 0x9) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000040)={0x18, 0x0, {0x4001, @multicast, 'batadv0\x00'}}, 0x1e) sendmmsg(r3, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) ioctl$XFS_IOC_FSGROWFSRT(r3, 0x80047437, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000140)=0x804, 0x4) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000000)={{0x2, 0x4, @private=0xa010102}, {0x1, @broadcast}, 0x4a, {0x2, 0x80fe, @local}, 'veth1_to_bridge\x00'}) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000080)="290000001e00190f00003fffffffda060200000000e80001dd0008040d0008000c0000000005000000", 0x29}], 0x1) r5 = gettid() r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x18, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000100)='syzkaller\x00'}, 0x94) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000280)=@generic={&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r6}, 0x18) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c0000001000030425bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0022000018430000140012800900010076657468000000000500000008001300", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\n'], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) 3.888610514s ago: executing program 0 (id=3061): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000041000501010000000000000003010000000000001c000100060006008100000010"], 0x48}, 0x1, 0x0, 0x0, 0x4044850}, 0xc040) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x80c0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x13, r1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x1d8, 0x120, 0x1000000, 0xffffffff, 0x1c0, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, 0x0, {[{{@ip={@rand_addr=0x64010101, @rand_addr=0x640100ff, 0xffffffff, 0x0, 'bond_slave_1\x00', 'geneve1\x00', {}, {}, 0x4, 0x0, 0x28}, 0x0, 0x70, 0xa0, 0x0, {0x0, 0x1c8}}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x9, 0x4, 0x3ff, 0xc15ac56b9c76af00}}}, {{@ip={@loopback, @rand_addr=0x64010101, 0xff, 0xffffff00, 'veth0_to_team\x00', 'vcan0\x00', {}, {0xff}, 0x32, 0x3}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x9, 0x3, 0x3, 0x55367656ae40811c}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x64}}}}, 0x238) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000140)='veth1_to_bridge\x00', 0x10) getsockopt$sock_buf(r2, 0x1, 0x19, &(0x7f0000006080)=""/241, &(0x7f0000000280)=0xf1) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b7000000ff00001fbfa300000000000007030000f0ffffff620af0fff8ffffff79a4f0ff000000002d040200000000001d400200000000004704000001ed000062030000000000001d440000000000007a0a00fe00ffffffc3030000f1000000b5040000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710e4d58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00c37dfca3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebaa2c598b4fc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d300000080e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d156ae8383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15f279b513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aa0000000000000000832371fe5bc621426d1ed0a4a99702cc1b692c3f0b15629eaf4c12a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c3bfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbad937f778af083e055f6138a757ebd0ed93517a6b244f9acf41ac5d73a008364e0606a594807031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac42738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c25000000000000000005a7b57f03ca91a01ba2e30ca9be8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998802008f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91ed92cac7c2ccd17d338bbda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922928e000000ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abb8a9982ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130b51d6c9b94c5513df2d85e8c01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139566fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef670000000000000000ba470bfe6290421338ef8f6d27117cd1471bf3c0b64416fbbe955da0281e7ef7f7d5176150e86cda98d07f7de2088cb2ffd1d4c71097635c2bb3d9a0b01e757256ee427f0a244d48682bf89e2279b383b616b40f116172bc1b995eb2c1220597af8df52646f1f0cb65cfa7e038e8bb5d4d52b86a61d82dc14a4f5cc7e6061c65ccdbc2afc3f363ecf34ad0b227687c3ea8d63683ddd5914116edd9e075da9e3638647188bc8f95107c9250995eb6cadcd0f65b8504ff10304f2ceba275f9d485ed5554d64005db877f0fbb3beba59666ff66f132d5077835823592d6d392f5ff62f6f876eb10d8cbf0a73f8421b74c8916e4077b8866c95ad88bc7130244183ed216210f10f69b3e0ee13d06e4eb240cce5ec1c3b1defe4c0f8b83a34ef4f5f8f9ceefb678ad29d3683e3c44a01549e55ffca41c0b06e013f054257646c58b667ec0701004c239589b3e64ef5e1d5ed22b5fd5a90fe3453327c3652d5c9762428f0bd0178d1b80a60f64343ab77d8baa0a388711c8d2d6d3e9049814b15b6ea21387040989d69c3aa27256c55780f33d20823d8e2eb6e56850162969bf4c6c9632a55cf5be00"/2944], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64}, 0x48) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3) pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4) connect$inet(r6, &(0x7f00000006c0)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4) sendmmsg$inet(r6, &(0x7f0000000f00)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000080)="b5", 0x1}, {&(0x7f0000000200)="c9", 0x1}, {&(0x7f0000000340)="01", 0x1}, {&(0x7f0000000400)='Q', 0x1}, {&(0x7f0000000500)="d7", 0x1}, {&(0x7f0000000600)='J', 0x1}, {&(0x7f0000000700)=')', 0x1}, {&(0x7f0000000180)='<', 0x1}], 0x8}}, {{0x0, 0x0, &(0x7f0000002dc0)=[{&(0x7f0000000a40)="db", 0x1}, {&(0x7f0000001a40)="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", 0x5c1}, {&(0x7f0000000840)="e3", 0x1}, {&(0x7f0000000680)="a7", 0x1}, {&(0x7f0000000540)='k', 0x1}, {&(0x7f00000002c0)="c8", 0x1}, {&(0x7f0000002bc0)='>', 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000940)="b2", 0x1}], 0x1}}], 0x3, 0x4008440) syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), r5) sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x88, r4, 0x2, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1000, 0x20}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x2}, @NL80211_ATTR_FRAME_MATCH={0x56, 0x5b, "2e6bdac351c7e9eced07643ef4bbc7ad44736b2c3fa35a8fc9e7798a31c83e9923a078c9f234733b9998296669d9b77337792c518d5991d8174439caeb22651185de8edd0df3b5c2d286aaa78f4d0f351a40"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x4}]}, 0x88}, 0x1, 0x0, 0x0, 0x40882}, 0x200c4000) unshare(0x10380) r7 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r3) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r7, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x40090}, 0x48000) r8 = socket(0x1, 0x3, 0x0) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x90, r4, 0x100, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x7}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xdef5}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x61b}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x2}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x154}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x2400}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x10}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xa19}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xf}, @NL80211_ATTR_CQM_TXE_PKTS={0x8}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x5}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1a}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x8040001}, 0x800) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r8, 0x84, 0x1e, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) 3.803007526s ago: executing program 1 (id=3062): r0 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000a40)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000001b80)="08001efbb07d586e", 0x8}], 0x1, 0x0, 0x0, 0x60000000}, 0x800) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x24, 0x43, 0x107, 0xfffffffe, 0x25dfdbfc, {0x4, 0x7c}, [@nested={0x4, 0x147}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0xda, 0x0, 0x0, @uid}]}]}, 0x24}}, 0xc000) socket(0x10, 0x3, 0x0) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x3d) write(r4, &(0x7f0000000000)="41000200010007", 0x7) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0x0, 0x3}, 0x6) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000000)={@remote, r7}, 0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newtfilter={0x24, 0x11, 0xd27, 0x2000, 0x0, {0x0, 0x0, 0x74, r7, {}, {0xafabc05531515610, 0x415034f1892c1116}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x1c005}, 0x24048004) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r8, &(0x7f00000032c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r10, @ANYBLOB="010000000000000000004c0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000f00a9007365636f6e646e616d650000"], 0x44}, 0x1, 0x0, 0x0, 0x16}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) bind$inet(r9, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 3.723009004s ago: executing program 3 (id=3063): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, 0x0) socket$igmp6(0xa, 0x3, 0x2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="f00000001000130725bd700000000000fe8000000000000000000000000000bb00000000000000000000ffffac1414aa4e2200018000000402000060", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe80000000000000000034b51ed500bb0000000032000000fe8000000000000000000000000000aa0000000000000000fcffffffff9179b996fe11760ecaac48aeffffff08000000000000000a0000008b7100002a00000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000600000000000000f8ffffffffffffff0c000000000000000200000029bd70000000000002000000ac00000000000000"], 0x35}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'xfrm0\x00'}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80487436, &(0x7f0000000540)="43210098") sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) 3.651479604s ago: executing program 4 (id=3064): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000400)=@getspdinfo={0x14, 0x25, 0x1, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x90}, 0x4000000) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x100, 0x1000}, 0x4) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0xa2f01, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r5) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0c0009800800014000000002080008400000000114000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a01010000000000f9ff000a0000090900020073797a31000000200900010073797a310000000014000380100000800c0001800600010058"], 0x68}, 0x1, 0x0, 0x0, 0x4004850}, 0x40) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r7) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x5}}, 0x1c) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x4e20, 0x1, @mcast2, 0xffffffff}, 0x1c) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaa2986dd6d002008006411ff20010000000000000000000000000002ff0500000000000000000000000000014f194e20"], 0x9e) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000040)={'vlan1\x00', {0x2, 0x0, @empty}}) getpeername(r2, 0x0, &(0x7f0000004b40)) socket$inet(0x2, 0x8000c, 0x5) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) close(0xffffffffffffffff) 3.447845942s ago: executing program 3 (id=3065): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x10) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r1) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xfffffffffffffcaf) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x9) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r5 = accept(r3, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYRES32, @ANYRES8=r5, @ANYRESHEX=r2, @ANYRESDEC=r3, @ANYRESHEX=r2, @ANYRES16=0x0], 0xfffffdef}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) recvfrom(r4, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x500, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000280)={0x28, 0x0, 0x0, @host}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200001004000b"], 0x24}}, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) socket$kcm(0x2, 0xa, 0x73) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYRES8=r0], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TLS_TX(r9, 0x6, 0x1, &(0x7f0000000080)=@ccm_128={{0x304}, "1770e235285db2cb", "278aa3520f3a0ff8cef6713fa6b703a6", "610cde48", "dbb0e9ddc00c20ee"}, 0x28) 3.339620782s ago: executing program 0 (id=3066): r0 = socket$inet(0x2, 0x1, 0x10000) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$BTRFS_IOC_ADD_DEV(r1, 0x5000940a, &(0x7f0000000300)={{r0}, "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"}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) write(r0, &(0x7f0000000000)="47b0865644273fbe74f0187a35926acef21b4afc8a7c019b88d87b07ca2aa45692314cb1f55d2cb351956d60e977253f60126d2acd9b941699d8bdc31e2f7d5b55c9015a5c00e853e42e62efe029791e796c4639af26a53dc0a016c99b8af630142b6bf5041c172a0070db9920a5c201e0ea", 0x72) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000240)={r3, &(0x7f0000000140)='/dev/net/tun\x00', 0x2, &(0x7f0000000180)={@align=0xf38, {0x7, 0xfffe, 0x9, 0x7}}, 0x0, &(0x7f00000001c0), &(0x7f0000000200)=0x3}) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f00000002c0)=0x200, 0x4) r5 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r6, 0x6, 0x1, &(0x7f00000000c0)={0x0, 0x747, 0x3, 0x4, 0xfb, 0x8, 0x101}, 0xc) ioctl$FS_IOC_GETFSLABEL(r3, 0x81009431, &(0x7f0000001580)) getsockopt$bt_l2cap_L2CAP_OPTIONS(r6, 0x6, 0x1, 0x0, &(0x7f0000000100)) bind$inet(r5, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r5, &(0x7f0000005400)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/220, 0xdc}, 0x5}], 0x1, 0x60010000, 0x0) sendto$inet(r5, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f00000013c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001400)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001440)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r8, &(0x7f0000001540)={&(0x7f0000001380), 0xc, &(0x7f0000001500)={&(0x7f0000001480)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010003000000fcdbdf25170000000c000600030000000300000008000300", @ANYRES32=r10, @ANYBLOB="08000300", @ANYRES32=r11, @ANYBLOB="0c000600000000000000000020003080050003000a000000140004007ef35ff2fbb329b933cfafa7457ca532"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc000) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000001680)=@newlink={0x4c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0x1}, @IFLA_ADDRESS={0xa}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x4}, @IFLA_PROMISCUITY={0x8, 0x1e, 0x400000}, @IFLA_LINKMODE={0x5, 0x11, 0x38}]}, 0x4c}, 0x1, 0x0, 0x0, 0x45844}, 0x0) socket$packet(0x11, 0x3, 0x300) sendto$packet(r3, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x11, 0x9, r2, 0x1, 0x0, 0x6, @random="080211000001"}, 0x14) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$OCFS2_IOC_GROUP_EXTEND(r12, 0x40046f01, &(0x7f0000001340)=0xc6f) r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x20080, 0x0) ioctl$TUNSETIFF(r13, 0x400454ca, &(0x7f00000000c0)={'bond_slave_1\x00'}) 3.314354767s ago: executing program 1 (id=3067): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x80, 0x51}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xb}, {}, {0xfff2, 0xa}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}, @TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r6, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r7, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@gettclass={0x24, 0x2a, 0x10, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0xffff, 0x10}, {0x2, 0xf}, {0xfff3, 0xf}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40845}, 0x20000800) ioctl$NILFS_IOCTL_RESIZE(r5, 0x40086e8b, &(0x7f0000000000)=0x6) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) 2.238728065s ago: executing program 0 (id=3068): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newrule={0x44, 0x1a, 0x1, 0x0, 0xfffffffc, {0x81, 0x80, 0x80, 0x4}, [@FRA_DST={0x13, 0x1, @empty}, @FRA_DST={0x14, 0x1, @private2={0xfc, 0x2, '\x00', 0xff}}]}, 0x44}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd0600ffdbdb25210000001f000300", @ANYRES32=r2, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}}, 0x28000) (fail_nth: 4) 2.15484928s ago: executing program 1 (id=3069): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x6, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x500}, [@cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffffd}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) listen(r3, 0x372) getsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f0000000080)=0x1, &(0x7f00000000c0)=0x4) sendmsg$nl_generic(r2, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000001300)=ANY=[@ANYBLOB="140004000000000000bd7000fbdbdf"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20008040) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x18}}}, 0x4, 0x9, 0x1, 0x4984, 0xa066}, &(0x7f0000000340)=0x98) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, &(0x7f0000000380)={r5, 0xca, "0a009b1400b412c6cfc82d2501b9ca2882a1552e147963249655e10339e59e355640a0cfefc7fbea70aabce6bed0631ac86a7d434a9eba09338c7a1c1be3b91707da7be058f7853185cf044bc1a1163a108af2a25687455cbef23cf60f0773f2395f52241f44bbb83eb7beb9ecba01a71d67c8d0530c4fcf66c0ec33318453073468e3d37f9282be71f85d016b910963a8061ed23b1eda3ad1274babfbc96f32e02f1ca9ee4b0f84451ed5f2afce8c8480955e143152fd821381b59e1275b6e460463f59f9325fc51b1c"}, &(0x7f0000000480)=0xd2) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r2) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@loopback, @local, 0x0}, &(0x7f0000000040)=0xc) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="b4000000", @ANYRES16=r6, @ANYBLOB="04002abd7000fbdbdf251200000070000180080003000300000008000300020000001400020076657468305f6d616376746170000000080003000000000008000100", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="080003000200000014000200766c616e3000000000000000000000001400020073797a6b616c6c6572310000000000002800018008000100", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="1400020070696d367265677000000000005b7164b400060001000000"], 0xb4}, 0x1, 0x0, 0x0, 0x24000090}, 0x0) r8 = socket(0x840000000002, 0x3, 0x100) connect$inet(r8, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r8, &(0x7f0000005240), 0x4000095, 0x0) bind$rds(r8, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000000c0)={'syztnl2\x00', r7, 0x29, 0x3, 0x5, 0x80000000, 0x20, @rand_addr=' \x01\x00', @local, 0x20, 0x20}}) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x2}, 0x6) r9 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) close(r9) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000040)=0x1, &(0x7f0000000080)=0x2) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='rdma.current\x00', 0x26e1, 0x0) close(r10) socket(0x10, 0x80002, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) 1.915411981s ago: executing program 3 (id=3070): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000140)={0x0, 0x2, 0x3, 0x7}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x16, 0x5, &(0x7f0000000040)=ANY=[@ANYRES8=r0], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0xe, 0x0, &(0x7f00000000c0)="00000000000000ce94327fc1a80c", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={0x0, 0x40}, 0x1, 0x0, 0x0, 0xc0}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYRESDEC=r2], 0x44}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x0, 0x4002, 0x0, 0x0, 0x0, 0x44}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r5}, &(0x7f00000007c0), &(0x7f0000000640)=r4}, 0x20) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000800)={&(0x7f0000000880)=ANY=[@ANYBLOB="dc000000", @ANYRES16=0x0, @ANYBLOB="00000008000500050000002c00038014000600fc00000000000004e7c102000000000014000600fe8000000000000000000000000000bb140001800800069f56edb56679430800050000000600020000000000080004000400000028000380060007004e2200001400060000000000000000000000000000000001080003000100000008000400ff7d001030000180060004004e22000008000800ab0000000801000000000000000000000000080005000800000008000500f3080000080004000100"/214], 0xdc}}, 0x0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000480)={&(0x7f0000000000), 0xc, &(0x7f0000000440)={&(0x7f0000000c80)=ANY=[@ANYBLOB="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"], 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x240000c0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001380)={r5, &(0x7f00000004c0)}, 0x20) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00', 0x0}) socket$packet(0x11, 0x2, 0x300) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000a40)=ANY=[@ANYRES32=r7, @ANYRES32=r8, @ANYBLOB='.\x00\x00\x00\x00\x00', @ANYBLOB], 0x20) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x2000, {0x0, 0x0, 0x74, r6, {0xd, 0x10}, {0xfff8, 0xb}, {0xfff2, 0x10}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840) bind$802154_dgram(0xffffffffffffffff, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) 1.785279878s ago: executing program 4 (id=3071): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) r1 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$sock_int(r1, 0x1, 0x3d, &(0x7f0000000580)=0xda, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000200000000000000000850000007a0000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000180)=r4, 0x4) r5 = socket$kcm(0x2, 0x3, 0x2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x1c, 0x1, 0x4, 0x5, 0x0, 0x0, {0xa}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc010}, 0x22000004) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r2, &(0x7f0000000440)=ANY=[], 0xfdef) socket$vsock_stream(0x28, 0x1, 0x0) sendto$inet6(r0, &(0x7f00000003c0)="a6", 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='illinois', 0x8) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg', 0x3) shutdown(r0, 0x1) 1.694310479s ago: executing program 0 (id=3072): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001c40)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@struct={0x3, 0x1, 0x0, 0xf, 0x0, 0x7, [{0x3, 0x801, 0x5}]}]}, {0x0, [0x4f, 0x0, 0x30]}}, &(0x7f00000006c0)=""/262, 0x35, 0x106, 0x9}, 0x28) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="030f000000000000000034000000080003000800000075c8f44fb6b891afab8b8ce21f1ca1daf50036ff29d24e1a9b37973cf31f346e31255b75498e76d3b2c0a17c6aeffab315f2e94de236d8b9bf6642d66ef8391b607912a655af8ad5fce64f463849fc01dbbfbb579037085ce6b3093944d46d231385"], 0x1c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_DELCHAIN={0xc8, 0x5, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_CHAIN_COUNTERS={0x28, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xffffffffffffc3eb}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8}]}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_CHAIN_HOOK={0x40, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7f7e3413}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x64427e4d}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4d211609}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth0_macvtap\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x612198c}]}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_CHAIN_COUNTERS={0x28, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8}, @NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7}]}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}]}, @NFT_MSG_DELTABLE={0x4c, 0x2, 0xa, 0x5, 0x0, 0x0, {}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x13c}, 0x1, 0x0, 0x0, 0x4000000}, 0x48004) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r3, 0x8948, &(0x7f00000000c0)={'bond0\x00', 0x10001}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r5, 0x84, 0x12, &(0x7f0000000500)=0x9809, 0x4) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x24, r6, 0x602, 0x470bd2b, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0x6}, @NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40488c0}, 0x20040000) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0x24, r6, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0xc00}, 0x24008041) 1.335679254s ago: executing program 0 (id=3073): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="180000000000000000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet(0x2, 0x3, 0x9) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000040)={0x18, 0x0, {0x4001, @multicast, 'batadv0\x00'}}, 0x1e) sendmmsg(r3, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) ioctl$XFS_IOC_FSGROWFSRT(r3, 0x80047437, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000140)=0x804, 0x4) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000000)={{0x2, 0x4, @private=0xa010102}, {0x1, @broadcast}, 0x4a, {0x2, 0x80fe, @local}, 'veth1_to_bridge\x00'}) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000080)="290000001e00190f00003fffffffda060200000000e80001dd0008040d0008000c0000000005000000", 0x29}], 0x1) r5 = gettid() r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x18, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000100)='syzkaller\x00'}, 0x94) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000280)=@generic={&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r6}, 0x18) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c0000001000030425bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0022000018430000140012800900010076657468000000000500000008001300", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\n'], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) 1.267887147s ago: executing program 3 (id=3074): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, 0x0) socket$igmp6(0xa, 0x3, 0x2) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4000) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'xfrm0\x00'}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80487436, &(0x7f0000000540)="43210098") sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) 934.027273ms ago: executing program 4 (id=3075): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x2c000010) bind$tipc(0xffffffffffffffff, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x2, 0x3}}, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff}) vmsplice(r2, 0x0, 0x0, 0xa) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[], 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_FIOSETOWN(r5, 0x8901, &(0x7f0000000080)) ioctl$int_in(r5, 0x5452, &(0x7f0000000040)=0xffff) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r6, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x0, 0x1}}, 0x20) getsockopt$sock_buf(r4, 0x1, 0x1f, &(0x7f0000001680)=""/179, &(0x7f0000000180)=0xb3) r7 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_DELCHAIN={0x3c, 0x5, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x4}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}]}], {0x14}}, 0xc4}}, 0xc000) r9 = socket$inet_sctp(0x2, 0x5, 0x84) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r10, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r9, 0x84, 0x19, &(0x7f0000000040)={r11, 0x1000}, 0x8) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000000900)={{r3, &(0x7f0000000080)='GPL\x00', 0xb0400, &(0x7f00000000c0)={@align=0x5, {0x6, 0x7, 0xe2b, 0xdc50}}, 0x200, &(0x7f0000000100), &(0x7f0000000140)}, 0x6, &(0x7f0000000840)=[{0x3, 0xffff0222, &(0x7f00000001c0)='/-\x00', &(0x7f0000000240)="80b9279ec513fe75671a35932d2c72e46cd4cb77156ad1f01b56da9ed58790dadeb661a28abb187db143f501e8e8e44a4e2940cc232ece3804b35f93783daaf2d1c5623265bda7e11fe4b1be3e8e061a63f298d73826839ac445a2f2487ed8a1ed526e7bdfc8f0d593bc48811993f293ad4c0eed60de020a6c1d962247d1e0bea36d9f1b699637c0854c2cf6b05ccd5f35b813abae686ee6f0429c7a4dfd6fabf20ba960cfe06e49efbb9758db749ccb33c88dce9e884ee7d56b38daf3c4e7223bb42feab050b670ba4f2de3873a92ed97e1ad33ba577e9da2d713ab363264f1ae0846a4977ec0390415c01987c6b4df6b", 0xf1}, {0x2, 0x4, &(0x7f0000000500)='\x00', &(0x7f0000000540)="494931011247a17f4489e98e4f43d42af112b6d21b2bf6f3be7cdeacfbf81680d8867776b0f46fb09cf80e1603540e8e222594cf8479ef603617c1b6189b900d310f9d8307518b62e1cda0", 0x4b, 0x7a}, {0x1, 0x200, &(0x7f00000005c0)='\x00', &(0x7f0000000600)="dd3d297cbf25d2b66594615b66034a7125591afe7a2cc01812cc96b9917490c103f3b6e285b41ab77a08db5c44841861546c1a20b46cde402764a2651db2f19998af2b04d5f14af9c6816cef6f4fefd7c089029c", 0x54, 0x20}, {0x1, 0x3, &(0x7f0000000680)=':S&.\x00', &(0x7f00000006c0)="80fd23433bb59cb82a00720b2bb01892e3862b5a87e37879a26dc4dbedd8b61f741f20982647b1e4e72e63ac63", 0x2d, 0x28}, {0x1, 0x6, &(0x7f0000000700)='\x00', &(0x7f0000000740)="37b2bf3f1d3b55af39f89207cf23a86ac6ad12e4b20b03d076cf3529aad45d84fdc34c128a0381aed229404c5cbd479034f3e3743c0751bc2972272f4ba86ba4f045191f635949db168562ce87c908c6b5d96ce5b71be0de62b08dcfe246a55167ec33556fa7433e4750eee74bd0491924edce6cf6c47b", 0x77, 0x2}, {0x3, 0x8, &(0x7f00000007c0)='}){\xfb-(\x12!\xf0!{-[\\}\\#]\\[,-@$\x00', &(0x7f0000000800), 0x0, 0x8}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x1c, &(0x7f0000000980)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES16=r12, @ANYRES8=r4, @ANYRES64=r4, @ANYBLOB="0000000001000000b7050000080000001c00000000000000bf980000000000000d08000000000000850000"], &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0xc, r12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 860.143569ms ago: executing program 3 (id=3076): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000740)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x54}, 0x1, 0x0, 0x0, 0x24048014}, 0x20040040) socket$kcm(0x11, 0x3, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x298, 0x270, 0x2b8, 0xb0000010, 0x270, 0x5c8f0200, 0x368, 0x3a8, 0x3a8, 0x368, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [0x0, 0x0, 0xff000000], 'vlan1\x00', 'veth0_to_team\x00'}, 0x0, 0xa8, 0xd0, 0x700}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x6, 0x5}, {0x4, 0x5, 0x1}}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x48) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xa) r2 = socket$nl_generic(0x10, 0x3, 0x10) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-ce)\x00'}, 0x58) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x27}, 0x62) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) syz_genetlink_get_family_id$nl80211(&(0x7f00000011c0), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r2, 0x0, 0x0) socket(0x10, 0x803, 0x0) 748.937268ms ago: executing program 1 (id=3077): socket$inet(0x2, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c3000000000300003e851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608fffffff30500180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) socket$nl_route(0x10, 0x3, 0x0) pipe(0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r1, 0x0, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000180)=ANY=[], 0x8) connect$inet6(r2, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r2, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)="82", 0x1}, {&(0x7f0000000540)="bd", 0x1}], 0x2}}], 0x1, 0x4400c800) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x10001) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000880)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) sendto$inet6(r2, &(0x7f0000000400)="ad19a03c8e5df843905ceb43d1570142cca9addea2e3888e3d4a", 0x1a, 0x3b00, 0x0, 0x0) 595.374515ms ago: executing program 0 (id=3078): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="680000000b060102000000000000000006000002050001"], 0x68}, 0x1, 0x0, 0x0, 0x48}, 0x4800) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0e00000004000000080000000700000000000000", @ANYRES32, @ANYBLOB="34fdffff00030000000000000000000000000000c13146db8f82929eb45ffb86c2d89c7e75a4881f362c2787db7c2256ab5842ca6f694bf315d225133496f71a766acf6e25ab1fd931878b86e2b877b3b7145a1d60b31f8f75190ff8f9a19a736ececdcc4ba7b91b0fd289d5b90c51a27af4fec9936809fc2c863dc65b7aaa083dfa61b8a870d28ddd2debf7897a1ffaf0d622b98d9ea9459bd3d62b631ddbf9582c0101", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000000000000300"/28], 0x50) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x881) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x800448d2, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x4eea, 0x6, 0x71, 0xe, 0xfffffff7}, &(0x7f0000000180)=0x98) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000a40)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xfffffff7, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x5}, 0x50) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f00000001c0)={r4, 0x3ff}, &(0x7f0000000200)=0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) nanosleep(&(0x7f0000000280)={r5, r6+10000000}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r8, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r9, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 594.770018ms ago: executing program 3 (id=3079): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x10) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r1) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xfffffffffffffcaf) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x9) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r5 = accept(r3, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYRES32, @ANYRES8=r5, @ANYRESHEX=r2, @ANYRESDEC=r3, @ANYRESHEX=r2, @ANYRES16=0x0], 0xfffffdef}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) recvfrom(r4, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x500, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000280)={0x28, 0x0, 0x0, @host}, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) socket$kcm(0x2, 0xa, 0x73) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYRES8=r0], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TLS_TX(r8, 0x6, 0x1, &(0x7f0000000080)=@ccm_128={{0x304}, "1770e235285db2cb", "278aa3520f3a0ff8cef6713fa6b703a6", "610cde48", "dbb0e9ddc00c20ee"}, 0x28) 590.562791ms ago: executing program 1 (id=3080): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000400)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000000)="3b970300010001", 0x7) 454.813484ms ago: executing program 1 (id=3081): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x2c000010) bind$tipc(0xffffffffffffffff, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x2, 0x3}}, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff}) vmsplice(r2, 0x0, 0x0, 0xa) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[], 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x34, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}}, 0x0) ioctl$sock_FIOSETOWN(r5, 0x8901, &(0x7f0000000080)) ioctl$int_in(r5, 0x5452, &(0x7f0000000040)=0xffff) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r6, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x0, 0x1}}, 0x20) getsockopt$sock_buf(r4, 0x1, 0x1f, &(0x7f0000001680)=""/179, &(0x7f0000000180)=0xb3) r7 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$inet_sctp(0x2, 0x5, 0x84) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r9, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r8, 0x84, 0x19, &(0x7f0000000040)={r10, 0x1000}, 0x8) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000000900)={{r3, &(0x7f0000000080)='GPL\x00', 0xb0400, &(0x7f00000000c0)={@align=0x5, {0x6, 0x7, 0xe2b, 0xdc50}}, 0x200, &(0x7f0000000100), &(0x7f0000000140)}, 0x6, &(0x7f0000000840)=[{0x3, 0xffff0222, &(0x7f00000001c0)='/-\x00', &(0x7f0000000240)="80b9279ec513fe75671a35932d2c72e46cd4cb77156ad1f01b56da9ed58790dadeb661a28abb187db143f501e8e8e44a4e2940cc232ece3804b35f93783daaf2d1c5623265bda7e11fe4b1be3e8e061a63f298d73826839ac445a2f2487ed8a1ed526e7bdfc8f0d593bc48811993f293ad4c0eed60de020a6c1d962247d1e0bea36d9f1b699637c0854c2cf6b05ccd5f35b813abae686ee6f0429c7a4dfd6fabf20ba960cfe06e49efbb9758db749ccb33c88dce9e884ee7d56b38daf3c4e7223bb42feab050b670ba4f2de3873a92ed97e1ad33ba577e9da2d713ab363264f1ae0846a4977ec0390415c01987c6b4df6b", 0xf1}, {0x2, 0x4, &(0x7f0000000500)='\x00', &(0x7f0000000540)="494931011247a17f4489e98e4f43d42af112b6d21b2bf6f3be7cdeacfbf81680d8867776b0f46fb09cf80e1603540e8e222594cf8479ef603617c1b6189b900d310f9d8307518b62e1cda0", 0x4b, 0x7a}, {0x1, 0x200, &(0x7f00000005c0)='\x00', &(0x7f0000000600)="dd3d297cbf25d2b66594615b66034a7125591afe7a2cc01812cc96b9917490c103f3b6e285b41ab77a08db5c44841861546c1a20b46cde402764a2651db2f19998af2b04d5f14af9c6816cef6f4fefd7c089029c", 0x54, 0x20}, {0x1, 0x3, &(0x7f0000000680)=':S&.\x00', &(0x7f00000006c0)="80fd23433bb59cb82a00720b2bb01892e3862b5a87e37879a26dc4dbedd8b61f741f20982647b1e4e72e63ac63", 0x2d, 0x28}, {0x1, 0x6, &(0x7f0000000700)='\x00', &(0x7f0000000740)="37b2bf3f1d3b55af39f89207cf23a86ac6ad12e4b20b03d076cf3529aad45d84fdc34c128a0381aed229404c5cbd479034f3e3743c0751bc2972272f4ba86ba4f045191f635949db168562ce87c908c6b5d96ce5b71be0de62b08dcfe246a55167ec33556fa7433e4750eee74bd0491924edce6cf6c47b", 0x77, 0x2}, {0x3, 0x8, &(0x7f00000007c0)='}){\xfb-(\x12!\xf0!{-[\\}\\#]\\[,-@$\x00', &(0x7f0000000800), 0x0, 0x8}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x1c, &(0x7f0000000980)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES16=r11, @ANYRES8=r4, @ANYRES64=r4, @ANYBLOB="0000000001000000b7050000080000001c00000000000000bf980000000000000d08000000000000850000"], &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0xc, r11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) socket$inet6_sctp(0xa, 0x1, 0x84) 0s ago: executing program 4 (id=3082): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001c40)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@struct={0x3, 0x1, 0x0, 0xf, 0x0, 0x7, [{0x3, 0x801, 0x5}]}]}, {0x0, [0x4f, 0x0, 0x30]}}, &(0x7f00000006c0)=""/262, 0x35, 0x106, 0x9}, 0x28) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="030f000000000000000034000000080003000800000075c8f44fb6b891afab8b8ce21f1ca1daf50036ff29d24e1a9b37973cf31f346e31255b75498e76d3b2c0a17c6aeffab315f2e94de236d8b9bf6642d66ef8391b607912a655af8ad5fce64f463849fc01dbbfbb579037085ce6b3093944d46d231385"], 0x1c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_DELCHAIN={0xc8, 0x5, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_CHAIN_COUNTERS={0x28, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xffffffffffffc3eb}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8}]}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_CHAIN_HOOK={0x40, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7f7e3413}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x64427e4d}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4d211609}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth0_macvtap\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x612198c}]}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_CHAIN_COUNTERS={0x28, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8}, @NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7}]}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}]}, @NFT_MSG_DELTABLE={0x4c, 0x2, 0xa, 0x5, 0x0, 0x0, {}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x13c}, 0x1, 0x0, 0x0, 0x4000000}, 0x48004) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r3, 0x8948, &(0x7f00000000c0)={'bond0\x00', 0x10001}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r5, 0x84, 0x12, &(0x7f0000000500)=0x9809, 0x4) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x24, r6, 0x602, 0x470bd2b, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0x6}, @NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40488c0}, 0x20040000) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0x24, r6, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0xc00}, 0x24008041) kernel console output (not intermixed with test programs): 401][T14298] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.540419][T14298] ? clear_bhb_loop+0x70/0xc0 [ 319.540444][T14298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.540462][T14298] RIP: 0033:0x7f318379e159 [ 319.540479][T14298] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 319.540495][T14298] RSP: 002b:00007f3184718028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 319.540517][T14298] RAX: ffffffffffffffda RBX: 00007f3183a25fa0 RCX: 00007f318379e159 [ 319.540532][T14298] RDX: 000000000004c040 RSI: 0000200000000040 RDI: 0000000000000004 [ 319.540545][T14298] RBP: 00007f3184718090 R08: 0000000000000000 R09: 0000000000000000 [ 319.540557][T14298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 319.540568][T14298] R13: 00007f3183a26038 R14: 00007f3183a25fa0 R15: 00007ffcf8165868 [ 319.540600][T14298] [ 319.592740][T14298] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2467'. [ 320.295970][T14325] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2468'. [ 320.655552][T14333] netlink: 'syz.4.2474': attribute type 4 has an invalid length. [ 321.126769][T14350] netlink: 7 bytes leftover after parsing attributes in process `syz.1.2480'. [ 321.126809][T14350] netlink: 7 bytes leftover after parsing attributes in process `syz.1.2480'. [ 321.130294][T14350] netlink: 'syz.1.2480': attribute type 2 has an invalid length. [ 321.130314][T14350] netlink: 'syz.1.2480': attribute type 2 has an invalid length. [ 321.130958][T14341] bond4 (unregistering): Released all slaves [ 321.307027][T14350] bond2: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 321.493889][T14350] bond2 (unregistering): Released all slaves [ 321.960984][T14374] netlink: 'syz.3.2486': attribute type 4 has an invalid length. [ 322.170275][T14386] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2489'. [ 322.659802][T14412] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2496'. [ 322.760412][T14411] bond4 (unregistering): Released all slaves [ 323.132120][T14431] sctp: [Deprecated]: syz.4.2503 (pid 14431) Use of int in max_burst socket option. [ 323.132120][T14431] Use struct sctp_assoc_value instead [ 323.232918][T14435] veth9: entered promiscuous mode [ 323.232942][T14435] veth9: entered allmulticast mode [ 323.233855][T14435] bridge2: port 1(veth9) entered blocking state [ 323.234500][T14435] bridge2: port 1(veth9) entered disabled state [ 323.243954][T14435] bridge2: port 1(veth9) entered blocking state [ 323.244063][T14435] bridge2: port 1(veth9) entered forwarding state [ 323.548811][T14450] netlink: Conntrack attr type has unexpected length (type=0, length=8, expected=0) [ 323.548855][T14450] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 323.694773][T14456] 8021q: adding VLAN 0 to HW filter on device bond4 [ 323.851475][T14469] __nla_validate_parse: 2 callbacks suppressed [ 323.851495][T14469] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2516'. [ 323.883466][T14469] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2516'. [ 323.994191][ T31] audit: type=1804 audit(1789690263.850:30): pid=14475 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2518" name="/newroot/505/cgroup.controllers" dev="tmpfs" ino=2606 res=1 errno=0 [ 323.994427][ T31] audit: type=1800 audit(1789690263.850:31): pid=14475 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2518" name="cgroup.controllers" dev="tmpfs" ino=2606 res=0 errno=0 [ 324.020292][T12093] bridge2: port 1(veth9) entered disabled state [ 324.052555][T14476] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2517'. [ 324.325938][T14488] ip6gretap0: entered promiscuous mode [ 324.409211][ T5618] Bluetooth: hci4: unexpected event 0x0f length: 5 > 4 [ 324.409271][ T5618] Bluetooth: hci4: unexpected event for opcode 0x0005 [ 324.462291][T14492] bond5 (unregistering): Released all slaves [ 324.780003][T14507] netlink: 'syz.4.2526': attribute type 4 has an invalid length. [ 325.066441][T14513] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2530'. [ 325.418712][T14532] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2535'. [ 325.497433][T14539] ip_tables: iptables: counters copy to user failed while replacing table [ 325.615441][T14537] macsec0: entered promiscuous mode [ 325.828190][T14556] FAULT_INJECTION: forcing a failure. [ 325.828190][T14556] name failslab, interval 1, probability 0, space 0, times 0 [ 325.828223][T14556] CPU: 0 UID: 0 PID: 14556 Comm: syz.0.2544 Not tainted syzkaller #0 PREEMPT(full) [ 325.828245][T14556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 325.828256][T14556] Call Trace: [ 325.828263][T14556] [ 325.828272][T14556] dump_stack_lvl+0xe8/0x150 [ 325.828303][T14556] should_fail_ex+0x410/0x560 [ 325.828329][T14556] should_failslab+0xa8/0x100 [ 325.828354][T14556] __kmalloc_cache_node_noprof+0xaa/0x620 [ 325.828372][T14556] ? unwind_get_return_address+0x4d/0x90 [ 325.828395][T14556] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 325.828412][T14556] ? __get_vm_area_node+0x155/0x2f0 [ 325.828437][T14556] ? __get_vm_area_node+0x155/0x2f0 [ 325.828469][T14556] __get_vm_area_node+0x155/0x2f0 [ 325.828502][T14556] __vmalloc_node_range_noprof+0x343/0x1540 [ 325.828530][T14556] ? bpf_prog_calc_tag+0x51/0x370 [ 325.828553][T14556] ? __sys_bpf+0xcd1/0xd90 [ 325.828572][T14556] ? __x64_sys_bpf+0xba/0xd0 [ 325.828589][T14556] ? do_syscall_64+0x166/0x520 [ 325.828615][T14556] ? __kasan_kmalloc+0x93/0xb0 [ 325.828636][T14556] ? bpf_prog_load+0x14d6/0x1c20 [ 325.828657][T14556] ? __sys_bpf+0xd0d/0xd90 [ 325.828676][T14556] ? __x64_sys_bpf+0xba/0xd0 [ 325.828714][T14556] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 325.828753][T14556] ? bpf_prog_calc_tag+0x51/0x370 [ 325.828775][T14556] __vmalloc_noprof+0xd2/0x120 [ 325.828802][T14556] ? bpf_prog_calc_tag+0x51/0x370 [ 325.828827][T14556] bpf_prog_calc_tag+0x51/0x370 [ 325.828849][T14556] ? __pfx_cmp_subprogs+0x10/0x10 [ 325.828875][T14556] check_and_resolve_insns+0xbb/0x21d0 [ 325.828900][T14556] ? __pfx_bpf_check_btf_info+0x10/0x10 [ 325.828920][T14556] ? add_subprog+0x2e2/0x3f0 [ 325.828944][T14556] ? __pfx_check_and_resolve_insns+0x10/0x10 [ 325.828976][T14556] bpf_check+0x180a/0x2e10 [ 325.829006][T14556] ? ktime_get_with_offset+0x93/0x2d0 [ 325.829030][T14556] ? __pfx_bpf_check+0x10/0x10 [ 325.829053][T14556] ? bpf_obj_name_cpy+0x194/0x1e0 [ 325.829082][T14556] bpf_prog_load+0x14d6/0x1c20 [ 325.829115][T14556] ? __pfx_bpf_prog_load+0x10/0x10 [ 325.829162][T14556] __sys_bpf+0xd0d/0xd90 [ 325.829191][T14556] ? __pfx___sys_bpf+0x10/0x10 [ 325.829241][T14556] ? rcu_is_watching+0x16/0xb0 [ 325.829268][T14556] __x64_sys_bpf+0xba/0xd0 [ 325.829289][T14556] do_syscall_64+0x166/0x520 [ 325.829308][T14556] ? trace_irq_disable+0x3b/0x140 [ 325.829338][T14556] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.829363][T14556] ? clear_bhb_loop+0x70/0xc0 [ 325.829397][T14556] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.829422][T14556] RIP: 0033:0x7fb0c659e159 [ 325.829440][T14556] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 325.829458][T14556] RSP: 002b:00007fb0c74a9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 325.829477][T14556] RAX: ffffffffffffffda RBX: 00007fb0c6825fa0 RCX: 00007fb0c659e159 [ 325.829490][T14556] RDX: 0000000000000094 RSI: 00002000000002c0 RDI: 0000000000000005 [ 325.829504][T14556] RBP: 00007fb0c74a9090 R08: 0000000000000000 R09: 0000000000000000 [ 325.829516][T14556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 325.829528][T14556] R13: 00007fb0c6826038 R14: 00007fb0c6825fa0 R15: 00007ffed68fbaf8 [ 325.829558][T14556] [ 325.831770][T14556] syz.0.2544: vmalloc error: size 96, align 0x1, vm_struct allocation failed, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 325.831860][T14556] CPU: 0 UID: 0 PID: 14556 Comm: syz.0.2544 Not tainted syzkaller #0 PREEMPT(full) [ 325.831882][T14556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 325.831893][T14556] Call Trace: [ 325.831901][T14556] [ 325.831909][T14556] dump_stack_lvl+0xe8/0x150 [ 325.831940][T14556] warn_alloc+0x24d/0x270 [ 325.831959][T14556] ? __kasan_kmalloc+0x22/0xb0 [ 325.831985][T14556] ? __pfx_warn_alloc+0x10/0x10 [ 325.832003][T14556] ? __get_vm_area_node+0x155/0x2f0 [ 325.832037][T14556] ? __get_vm_area_node+0x2a9/0x2f0 [ 325.832069][T14556] __vmalloc_node_range_noprof+0x36b/0x1540 [ 325.832099][T14556] ? __sys_bpf+0xcd1/0xd90 [ 325.832117][T14556] ? __x64_sys_bpf+0xba/0xd0 [ 325.832133][T14556] ? do_syscall_64+0x166/0x520 [ 325.832158][T14556] ? __kasan_kmalloc+0x93/0xb0 [ 325.832178][T14556] ? bpf_prog_load+0x14d6/0x1c20 [ 325.832197][T14556] ? __sys_bpf+0xd0d/0xd90 [ 325.832214][T14556] ? __x64_sys_bpf+0xba/0xd0 [ 325.832243][T14556] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 325.832282][T14556] ? bpf_prog_calc_tag+0x51/0x370 [ 325.832301][T14556] __vmalloc_noprof+0xd2/0x120 [ 325.832327][T14556] ? bpf_prog_calc_tag+0x51/0x370 [ 325.832350][T14556] bpf_prog_calc_tag+0x51/0x370 [ 325.832370][T14556] ? __pfx_cmp_subprogs+0x10/0x10 [ 325.832394][T14556] check_and_resolve_insns+0xbb/0x21d0 [ 325.832418][T14556] ? __pfx_bpf_check_btf_info+0x10/0x10 [ 325.832439][T14556] ? add_subprog+0x2e2/0x3f0 [ 325.832463][T14556] ? __pfx_check_and_resolve_insns+0x10/0x10 [ 325.832495][T14556] bpf_check+0x180a/0x2e10 [ 325.832527][T14556] ? ktime_get_with_offset+0x93/0x2d0 [ 325.832551][T14556] ? __pfx_bpf_check+0x10/0x10 [ 325.832574][T14556] ? bpf_obj_name_cpy+0x194/0x1e0 [ 325.832603][T14556] bpf_prog_load+0x14d6/0x1c20 [ 325.832637][T14556] ? __pfx_bpf_prog_load+0x10/0x10 [ 325.832683][T14556] __sys_bpf+0xd0d/0xd90 [ 325.832719][T14556] ? __pfx___sys_bpf+0x10/0x10 [ 325.832771][T14556] ? rcu_is_watching+0x16/0xb0 [ 325.832798][T14556] __x64_sys_bpf+0xba/0xd0 [ 325.832818][T14556] do_syscall_64+0x166/0x520 [ 325.832835][T14556] ? trace_irq_disable+0x3b/0x140 [ 325.832852][T14556] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.832871][T14556] ? clear_bhb_loop+0x70/0xc0 [ 325.832893][T14556] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.832912][T14556] RIP: 0033:0x7fb0c659e159 [ 325.832929][T14556] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 325.832945][T14556] RSP: 002b:00007fb0c74a9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 325.832965][T14556] RAX: ffffffffffffffda RBX: 00007fb0c6825fa0 RCX: 00007fb0c659e159 [ 325.832979][T14556] RDX: 0000000000000094 RSI: 00002000000002c0 RDI: 0000000000000005 [ 325.832992][T14556] RBP: 00007fb0c74a9090 R08: 0000000000000000 R09: 0000000000000000 [ 325.833002][T14556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 325.833013][T14556] R13: 00007fb0c6826038 R14: 00007fb0c6825fa0 R15: 00007ffed68fbaf8 [ 325.833040][T14556] [ 325.834019][T14556] Mem-Info: [ 325.834030][T14556] active_anon:5851 inactive_anon:0 isolated_anon:0 [ 325.834030][T14556] active_file:0 inactive_file:43626 isolated_file:0 [ 325.834030][T14556] unevictable:0 dirty:380 writeback:0 [ 325.834030][T14556] slab_reclaimable:11279 slab_unreclaimable:106317 [ 325.834030][T14556] mapped:30039 shmem:509 pagetables:1160 [ 325.834030][T14556] sec_pagetables:0 bounce:0 [ 325.834030][T14556] kernel_misc_reclaimable:0 [ 325.834030][T14556] free:1318526 free_pcp:10455 free_cma:0 [ 325.834082][T14556] Node 0 active_anon:23404kB inactive_anon:0kB active_file:0kB inactive_file:174300kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:120156kB dirty:1520kB writeback:0kB shmem:2036kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14152kB pagetables:4488kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 325.834635][T14556] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 325.834687][T14556] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 325.834756][T14556] lowmem_reserve[]: 0 2486 2486 2486 2486 [ 325.834791][T14556] Node 0 DMA32 free:1316884kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:23404kB inactive_anon:0kB active_file:0kB inactive_file:174300kB unevictable:0kB writepending:1520kB zspages:0kB present:3129332kB managed:2546612kB mlocked:0kB bounce:0kB free_pcp:41816kB local_pcp:17740kB free_cma:0kB [ 325.834858][T14556] lowmem_reserve[]: 0 0 0 0 0 [ 325.834898][T14556] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 325.834961][T14556] lowmem_reserve[]: 0 0 0 0 0 [ 325.834993][T14556] Node 1 Normal free:3941860kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 325.835050][T14556] lowmem_reserve[]: 0 0 0 0 0 [ 325.835082][T14556] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 325.836340][T14556] Node 0 DMA32: 511*4kB (UME) 312*8kB (UME) 1062*16kB (UME) 458*32kB (UM) 215*64kB (UME) 100*128kB (UME) 43*256kB (UME) 6*512kB (UM) 9*1024kB (UM) 9*2048kB (UME) 296*4096kB (UM) = 1316892kB [ 325.836504][T14556] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 325.836605][T14556] Node 1 Normal: 3*4kB (UM) 3*8kB (UM) 6*16kB (UM) 3*32kB (UM) 6*64kB (UM) 3*128kB (UM) 2*256kB (M) 2*512kB (M) 1*1024kB (M) 1*2048kB (U) 961*4096kB (UM) = 3941860kB [ 325.836769][T14556] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 325.836786][T14556] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 325.895302][T14556] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 325.895324][T14556] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 325.895343][T14556] 44142 total pagecache pages [ 325.895357][T14556] 0 pages in swap cache [ 325.895363][T14556] Free swap = 124996kB [ 325.895373][T14556] Total swap = 124996kB [ 325.895381][T14556] 2097051 pages RAM [ 325.895390][T14556] 0 pages HighMem/MovableOnly [ 325.895397][T14556] 428782 pages reserved [ 325.895403][T14556] 0 pages cma reserved [ 326.217432][T14565] netlink: 'syz.2.2545': attribute type 8 has an invalid length. [ 326.264823][T14565] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2545'. [ 326.484007][T14565] veth11: entered allmulticast mode [ 327.102966][T14581] syzkaller0: entered promiscuous mode [ 327.102989][T14581] syzkaller0: entered allmulticast mode [ 327.242294][T14586] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2554'. [ 327.667254][T14600] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2559'. [ 327.706271][T14601] bond5: entered allmulticast mode [ 327.736255][T14600] ip6gre1: entered promiscuous mode [ 327.736278][T14600] ip6gre1: entered allmulticast mode [ 327.791961][T14605] bond5: (slave wireguard0): The slave device specified does not support setting the MAC address [ 327.795034][T14605] bond5: (slave wireguard0): Error -95 calling set_mac_address [ 328.284613][T14608] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.284966][T14608] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.619856][T14608] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 328.641563][T14608] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 328.754309][T14608] tipc: Resetting bearer [ 328.910157][T14608] vlan0: left allmulticast mode [ 328.910177][T14608] veth0_vlan: left allmulticast mode [ 329.037213][T14615] vlan2: entered allmulticast mode [ 329.037228][T14615] bond0: entered allmulticast mode [ 329.068078][ T91] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.068137][ T91] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.068165][ T91] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.068190][ T91] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.331575][T14637] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2568'. [ 329.331600][T14637] openvswitch: netlink: Flow key attr not present in new flow. [ 329.354642][T14631] FAULT_INJECTION: forcing a failure. [ 329.354642][T14631] name failslab, interval 1, probability 0, space 0, times 0 [ 329.354674][T14631] CPU: 1 UID: 0 PID: 14631 Comm: syz.0.2566 Not tainted syzkaller #0 PREEMPT(full) [ 329.354696][T14631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 329.354708][T14631] Call Trace: [ 329.354716][T14631] [ 329.354724][T14631] dump_stack_lvl+0xe8/0x150 [ 329.354758][T14631] should_fail_ex+0x410/0x560 [ 329.354784][T14631] should_failslab+0xa8/0x100 [ 329.354807][T14631] ? skb_clone+0x212/0x3a0 [ 329.354832][T14631] kmem_cache_alloc_noprof+0xa1/0x600 [ 329.354868][T14631] ? skb_clone+0x212/0x3a0 [ 329.354900][T14631] skb_clone+0x212/0x3a0 [ 329.354929][T14631] __netlink_deliver_tap+0x413/0x860 [ 329.354979][T14631] ? netlink_deliver_tap+0x2e/0x1b0 [ 329.355008][T14631] netlink_deliver_tap+0x19c/0x1b0 [ 329.355038][T14631] netlink_unicast+0x781/0x940 [ 329.355075][T14631] netlink_sendmsg+0x813/0xb40 [ 329.355111][T14631] ? __pfx_netlink_sendmsg+0x10/0x10 [ 329.355147][T14631] ? apparmor_socket_sendmsg+0x98/0x360 [ 329.355179][T14631] ? __pfx_netlink_sendmsg+0x10/0x10 [ 329.355206][T14631] sock_sendmsg_nosec+0x13a/0x180 [ 329.355238][T14631] ____sys_sendmsg+0x54e/0x850 [ 329.355269][T14631] ? __pfx_____sys_sendmsg+0x10/0x10 [ 329.355303][T14631] ? import_iovec+0x73/0xa0 [ 329.355331][T14631] ___sys_sendmsg+0x2a5/0x360 [ 329.355355][T14631] ? __lock_acquire+0x747/0x2de0 [ 329.355380][T14631] ? __pfx____sys_sendmsg+0x10/0x10 [ 329.355441][T14631] ? __fget_files+0x2a/0x420 [ 329.355469][T14631] ? __fget_files+0x3a2/0x420 [ 329.355505][T14631] __x64_sys_sendmsg+0x1b1/0x290 [ 329.355532][T14631] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 329.355575][T14631] do_syscall_64+0x166/0x520 [ 329.355595][T14631] ? trace_irq_disable+0x3b/0x140 [ 329.355614][T14631] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.355633][T14631] ? clear_bhb_loop+0x70/0xc0 [ 329.355657][T14631] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.355676][T14631] RIP: 0033:0x7fb0c659e159 [ 329.355692][T14631] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 329.355708][T14631] RSP: 002b:00007fb0c74a9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 329.355728][T14631] RAX: ffffffffffffffda RBX: 00007fb0c6825fa0 RCX: 00007fb0c659e159 [ 329.355742][T14631] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000004 [ 329.355754][T14631] RBP: 00007fb0c74a9090 R08: 0000000000000000 R09: 0000000000000000 [ 329.355765][T14631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 329.355776][T14631] R13: 00007fb0c6826038 R14: 00007fb0c6825fa0 R15: 00007ffed68fbaf8 [ 329.355807][T14631] [ 330.162619][T14673] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2581'. [ 330.162645][T14673] openvswitch: netlink: Flow key attr not present in new flow. [ 330.241049][T14677] netlink: 'syz.2.2582': attribute type 21 has an invalid length. [ 330.241071][T14677] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2582'. [ 330.271579][T14677] netlink: 'syz.2.2582': attribute type 5 has an invalid length. [ 330.271600][T14677] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2582'. [ 330.445685][T14682] FAULT_INJECTION: forcing a failure. [ 330.445685][T14682] name failslab, interval 1, probability 0, space 0, times 0 [ 330.445717][T14682] CPU: 1 UID: 0 PID: 14682 Comm: syz.4.2584 Not tainted syzkaller #0 PREEMPT(full) [ 330.445739][T14682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 330.445751][T14682] Call Trace: [ 330.445759][T14682] [ 330.445767][T14682] dump_stack_lvl+0xe8/0x150 [ 330.445801][T14682] should_fail_ex+0x410/0x560 [ 330.445826][T14682] ? __alloc_skb+0x1db/0x7a0 [ 330.445848][T14682] should_failslab+0xa8/0x100 [ 330.445873][T14682] ? __alloc_skb+0x1db/0x7a0 [ 330.445892][T14682] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 330.445922][T14682] ? __alloc_skb+0x18d/0x7a0 [ 330.445944][T14682] ? __alloc_skb+0x1db/0x7a0 [ 330.445972][T14682] __alloc_skb+0x1db/0x7a0 [ 330.445997][T14682] alloc_skb_with_frags+0xc6/0x760 [ 330.446033][T14682] sock_alloc_send_pskb+0x878/0x990 [ 330.446067][T14682] ? kernel_text_address+0xa5/0xe0 [ 330.446099][T14682] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 330.446126][T14682] ? do_raw_spin_lock+0x12b/0x2f0 [ 330.446158][T14682] ? __lock_acquire+0x747/0x2de0 [ 330.446183][T14682] __ip_append_data+0x29ea/0x3cf0 [ 330.446233][T14682] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 330.446278][T14682] ? ipv4_mtu+0x23/0x670 [ 330.446305][T14682] ? __pfx___ip_append_data+0x10/0x10 [ 330.446331][T14682] ? ipv4_mtu+0x561/0x670 [ 330.446368][T14682] ? ip_setup_cork+0x512/0x920 [ 330.446400][T14682] ip_make_skb+0x22e/0x440 [ 330.446425][T14682] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 330.446455][T14682] ? __pfx_ip_make_skb+0x10/0x10 [ 330.446493][T14682] udp_sendmsg+0x1937/0x2140 [ 330.446516][T14682] ? __pfx_ip6_addr_string+0x10/0x10 [ 330.446553][T14682] ? __pfx_udp_sendmsg+0x10/0x10 [ 330.446583][T14682] ? tomoyo_supervisor+0x4d2/0x1560 [ 330.446640][T14682] ? lockdep_hardirqs_on+0x7b/0x110 [ 330.446659][T14682] ? get_random_u32+0x13a/0x8b0 [ 330.446682][T14682] ? get_random_u32+0x4ce/0x8b0 [ 330.446712][T14682] udpv6_sendmsg+0x915/0x2610 [ 330.446750][T14682] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 330.446771][T14682] ? udp_lib_get_port+0x177b/0x1c60 [ 330.446825][T14682] ? inet_send_prepare+0x1b4/0x260 [ 330.446858][T14682] ? lockdep_hardirqs_on+0x7b/0x110 [ 330.446877][T14682] ? inet_send_prepare+0x1b4/0x260 [ 330.446900][T14682] ? __local_bh_enable_ip+0xd6/0x140 [ 330.446925][T14682] ? inet_send_prepare+0x1b4/0x260 [ 330.446954][T14682] ? inet6_sendmsg+0xe4/0x120 [ 330.446981][T14682] ? __pfx_inet6_sendmsg+0x10/0x10 [ 330.447006][T14682] sock_sendmsg_nosec+0x90/0x180 [ 330.447036][T14682] ____sys_sendmsg+0x54e/0x850 [ 330.447065][T14682] ? __pfx_____sys_sendmsg+0x10/0x10 [ 330.447096][T14682] ? import_iovec+0x73/0xa0 [ 330.447123][T14682] ___sys_sendmsg+0x2a5/0x360 [ 330.447145][T14682] ? __lock_acquire+0x747/0x2de0 [ 330.447169][T14682] ? __pfx____sys_sendmsg+0x10/0x10 [ 330.447200][T14682] ? kstrtouint+0x6e/0xe0 [ 330.447251][T14682] ? __fget_files+0x2a/0x420 [ 330.447277][T14682] ? __fget_files+0x3a2/0x420 [ 330.447309][T14682] __sys_sendmmsg+0x273/0x4d0 [ 330.447338][T14682] ? __pfx___sys_sendmmsg+0x10/0x10 [ 330.447380][T14682] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 330.447417][T14682] ? ksys_write+0x242/0x270 [ 330.447448][T14682] ? __pfx_ksys_write+0x10/0x10 [ 330.447484][T14682] __x64_sys_sendmmsg+0xa0/0xc0 [ 330.447511][T14682] do_syscall_64+0x166/0x520 [ 330.447532][T14682] ? trace_irq_disable+0x3b/0x140 [ 330.447551][T14682] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.447571][T14682] ? clear_bhb_loop+0x70/0xc0 [ 330.447595][T14682] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.447615][T14682] RIP: 0033:0x7fdce9f9e159 [ 330.447633][T14682] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 330.447650][T14682] RSP: 002b:00007fdce81f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 330.447672][T14682] RAX: ffffffffffffffda RBX: 00007fdcea225fa0 RCX: 00007fdce9f9e159 [ 330.447686][T14682] RDX: 0000000000000002 RSI: 00002000000033c0 RDI: 0000000000000003 [ 330.447699][T14682] RBP: 00007fdce81f6090 R08: 0000000000000000 R09: 0000000000000000 [ 330.447712][T14682] R10: 0000000004000000 R11: 0000000000000246 R12: 0000000000000001 [ 330.447725][T14682] R13: 00007fdcea226038 R14: 00007fdcea225fa0 R15: 00007ffe25a816a8 [ 330.447757][T14682] [ 330.632116][T14688] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2586'. [ 330.929827][T14701] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2586'. [ 331.035283][T14707] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2589'. [ 331.146518][T14714] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2589'. [ 331.289829][T14721] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2594'. [ 331.289857][T14721] openvswitch: netlink: Flow key attr not present in new flow. [ 331.437751][ T5618] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 331.638464][T14735] x_tables: duplicate underflow at hook 3 [ 331.825056][T14738] bond4 (unregistering): Released all slaves [ 332.056349][T14747] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2599'. [ 332.056924][T14747] netlink: 'syz.1.2599': attribute type 1 has an invalid length. [ 332.372028][T14759] openvswitch: netlink: Missing key (keys=c0, expected=880) [ 332.636199][T14774] openvswitch: netlink: Flow actions attr not present in new flow. [ 332.732693][ T91] tipc: Subscription rejected, illegal request [ 332.902119][T14782] netlink: 'syz.3.2610': attribute type 10 has an invalid length. [ 332.902614][T14782] FAULT_INJECTION: forcing a failure. [ 332.902614][T14782] name failslab, interval 1, probability 0, space 0, times 0 [ 332.902651][T14782] CPU: 1 UID: 0 PID: 14782 Comm: syz.3.2610 Not tainted syzkaller #0 PREEMPT(full) [ 332.902671][T14782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 332.902686][T14782] Call Trace: [ 332.902693][T14782] [ 332.902701][T14782] dump_stack_lvl+0xe8/0x150 [ 332.902732][T14782] should_fail_ex+0x410/0x560 [ 332.902756][T14782] ? __alloc_skb+0x1db/0x7a0 [ 332.902775][T14782] should_failslab+0xa8/0x100 [ 332.902819][T14782] ? __alloc_skb+0x1db/0x7a0 [ 332.902836][T14782] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 332.902861][T14782] ? __alloc_skb+0x18d/0x7a0 [ 332.902880][T14782] ? __alloc_skb+0x1db/0x7a0 [ 332.902904][T14782] __alloc_skb+0x1db/0x7a0 [ 332.902927][T14782] inet_ifmcaddr_notify+0x7e/0x150 [ 332.902952][T14782] __ip_mc_dec_group+0x202/0x3e0 [ 332.902974][T14782] inetdev_event+0x23d/0x1610 [ 332.902997][T14782] ? __pfx_ib_device_get_by_netdev+0x10/0x10 [ 332.903019][T14782] ? __pfx_inetdev_event+0x10/0x10 [ 332.903055][T14782] notifier_call_chain+0x1a5/0x3d0 [ 332.903096][T14782] __dev_notify_flags+0x2d9/0x510 [ 332.903126][T14782] ? __pfx___dev_notify_flags+0x10/0x10 [ 332.903147][T14782] ? __dev_change_flags+0x5f1/0x820 [ 332.903182][T14782] ? __pfx___dev_change_flags+0x10/0x10 [ 332.903205][T14782] ? __pfx___irq_work_queue_local+0x10/0x10 [ 332.903235][T14782] netif_change_flags+0xde/0x1b0 [ 332.903260][T14782] do_setlink+0xdd6/0x47a0 [ 332.903281][T14782] ? __wake_up_klogd+0xf0/0x130 [ 332.903312][T14782] ? __pfx_vprintk_emit+0x10/0x10 [ 332.903343][T14782] ? __pfx_do_setlink+0x10/0x10 [ 332.903366][T14782] ? __lock_acquire+0x747/0x2de0 [ 332.903398][T14782] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 332.903428][T14782] ? ___ratelimit+0x584/0x8e0 [ 332.903456][T14782] ? __mutex_trylock_common+0x15f/0x270 [ 332.903484][T14782] ? __pfx___mutex_trylock_common+0x10/0x10 [ 332.903511][T14782] ? rcu_is_watching+0x16/0xb0 [ 332.903534][T14782] ? trace_contention_end+0x3d/0x140 [ 332.903560][T14782] ? __mutex_lock+0x30b/0x1550 [ 332.903592][T14782] ? rtnl_newlink+0xc1d/0x1c30 [ 332.903614][T14782] ? __pfx___mutex_lock+0x10/0x10 [ 332.903645][T14782] ? ns_capable+0x89/0xe0 [ 332.903670][T14782] ? rtnl_nets_add+0x16c/0x300 [ 332.903691][T14782] ? refcount_inc+0x46/0x70 [ 332.903713][T14782] rtnl_newlink+0x15b0/0x1c30 [ 332.903748][T14782] ? __pfx_rtnl_newlink+0x10/0x10 [ 332.903768][T14782] ? sock_sendmsg_nosec+0x13a/0x180 [ 332.903796][T14782] ? ____sys_sendmsg+0x54e/0x850 [ 332.903817][T14782] ? ___sys_sendmsg+0x2a5/0x360 [ 332.903839][T14782] ? __x64_sys_sendmsg+0x1b1/0x290 [ 332.903862][T14782] ? do_syscall_64+0x166/0x520 [ 332.903882][T14782] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.903940][T14782] ? kasan_quarantine_put+0xbb/0x1f0 [ 332.903961][T14782] ? lockdep_hardirqs_on+0x7b/0x110 [ 332.903985][T14782] ? nlmon_xmit+0xb0/0x100 [ 332.904005][T14782] ? kmem_cache_free+0x182/0x650 [ 332.904036][T14782] ? __lock_acquire+0x747/0x2de0 [ 332.904067][T14782] ? __local_bh_enable_ip+0xd6/0x140 [ 332.904092][T14782] ? lockdep_hardirqs_on+0x7b/0x110 [ 332.904111][T14782] ? __dev_queue_xmit+0x29b/0x3820 [ 332.904136][T14782] ? __local_bh_enable_ip+0xd6/0x140 [ 332.904158][T14782] ? __dev_queue_xmit+0x29b/0x3820 [ 332.904198][T14782] ? lock_acquire+0x115/0x350 [ 332.904216][T14782] ? __pfx_rtnl_newlink+0x10/0x10 [ 332.904248][T14782] ? __pfx_rtnl_newlink+0x10/0x10 [ 332.904269][T14782] rtnetlink_rcv_msg+0x802/0xc00 [ 332.904296][T14782] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 332.904318][T14782] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 332.904339][T14782] ? ref_tracker_free+0x689/0x830 [ 332.904365][T14782] ? __pfx_ref_tracker_free+0x10/0x10 [ 332.904398][T14782] netlink_rcv_skb+0x226/0x4a0 [ 332.904428][T14782] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 332.904452][T14782] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 332.904493][T14782] ? netlink_deliver_tap+0x2e/0x1b0 [ 332.904520][T14782] ? netlink_deliver_tap+0x2e/0x1b0 [ 332.904552][T14782] netlink_unicast+0x7bd/0x940 [ 332.904590][T14782] netlink_sendmsg+0x813/0xb40 [ 332.904628][T14782] ? __pfx_netlink_sendmsg+0x10/0x10 [ 332.904664][T14782] ? apparmor_socket_sendmsg+0x98/0x360 [ 332.904687][T14782] ? __pfx_netlink_sendmsg+0x10/0x10 [ 332.904713][T14782] sock_sendmsg_nosec+0x13a/0x180 [ 332.904745][T14782] ____sys_sendmsg+0x54e/0x850 [ 332.904775][T14782] ? __pfx_____sys_sendmsg+0x10/0x10 [ 332.904810][T14782] ? import_iovec+0x73/0xa0 [ 332.904838][T14782] ___sys_sendmsg+0x2a5/0x360 [ 332.904862][T14782] ? __lock_acquire+0x747/0x2de0 [ 332.904886][T14782] ? __pfx____sys_sendmsg+0x10/0x10 [ 332.904947][T14782] ? __fget_files+0x2a/0x420 [ 332.904973][T14782] ? __fget_files+0x3a2/0x420 [ 332.905008][T14782] __x64_sys_sendmsg+0x1b1/0x290 [ 332.905035][T14782] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 332.905079][T14782] do_syscall_64+0x166/0x520 [ 332.905100][T14782] ? trace_irq_disable+0x3b/0x140 [ 332.905119][T14782] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.905139][T14782] ? clear_bhb_loop+0x70/0xc0 [ 332.905163][T14782] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.905190][T14782] RIP: 0033:0x7f3751f9e159 [ 332.905208][T14782] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 332.905225][T14782] RSP: 002b:00007f37501f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 332.905246][T14782] RAX: ffffffffffffffda RBX: 00007f3752225fa0 RCX: 00007f3751f9e159 [ 332.905260][T14782] RDX: 0000000000080054 RSI: 00002000000000c0 RDI: 0000000000000003 [ 332.905272][T14782] RBP: 00007f37501f6090 R08: 0000000000000000 R09: 0000000000000000 [ 332.905284][T14782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 332.905296][T14782] R13: 00007f3752226038 R14: 00007f3752225fa0 R15: 00007ffe9f484568 [ 332.905329][T14782] [ 332.918603][T14782] team0: Device vxcan1 is of different type [ 333.189468][T14787] ip_tables: iptables: counters copy to user failed while replacing table [ 333.949049][T12093] tipc: Subscription rejected, illegal request [ 334.222097][T14815] FAULT_INJECTION: forcing a failure. [ 334.222097][T14815] name failslab, interval 1, probability 0, space 0, times 0 [ 334.238382][T14815] CPU: 1 UID: 0 PID: 14815 Comm: syz.4.2620 Not tainted syzkaller #0 PREEMPT(full) [ 334.238411][T14815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 334.238422][T14815] Call Trace: [ 334.238430][T14815] [ 334.238438][T14815] dump_stack_lvl+0xe8/0x150 [ 334.238471][T14815] should_fail_ex+0x410/0x560 [ 334.238496][T14815] ? __alloc_skb+0x1db/0x7a0 [ 334.238517][T14815] should_failslab+0xa8/0x100 [ 334.238541][T14815] ? __alloc_skb+0x1db/0x7a0 [ 334.238559][T14815] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 334.238588][T14815] ? __alloc_skb+0x18d/0x7a0 [ 334.238609][T14815] ? __alloc_skb+0x1db/0x7a0 [ 334.238636][T14815] __alloc_skb+0x1db/0x7a0 [ 334.238661][T14815] netlink_ack+0x136/0xb30 [ 334.238685][T14815] ? __pfx_genl_rcv_msg+0x10/0x10 [ 334.238723][T14815] netlink_rcv_skb+0x2a4/0x4a0 [ 334.238750][T14815] ? __pfx_genl_rcv_msg+0x10/0x10 [ 334.238772][T14815] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 334.238814][T14815] ? down_read+0x2be/0x330 [ 334.238841][T14815] genl_rcv+0x28/0x40 [ 334.238860][T14815] netlink_unicast+0x7bd/0x940 [ 334.238896][T14815] netlink_sendmsg+0x813/0xb40 [ 334.238932][T14815] ? __pfx_netlink_sendmsg+0x10/0x10 [ 334.238967][T14815] ? apparmor_socket_sendmsg+0x98/0x360 [ 334.238990][T14815] ? __pfx_netlink_sendmsg+0x10/0x10 [ 334.239016][T14815] sock_sendmsg_nosec+0x13a/0x180 [ 334.239049][T14815] ____sys_sendmsg+0x54e/0x850 [ 334.239079][T14815] ? __pfx_____sys_sendmsg+0x10/0x10 [ 334.239122][T14815] ? import_iovec+0x73/0xa0 [ 334.239149][T14815] ___sys_sendmsg+0x2a5/0x360 [ 334.239172][T14815] ? __lock_acquire+0x747/0x2de0 [ 334.239196][T14815] ? __pfx____sys_sendmsg+0x10/0x10 [ 334.239256][T14815] ? __fget_files+0x2a/0x420 [ 334.239282][T14815] ? __fget_files+0x3a2/0x420 [ 334.239317][T14815] __x64_sys_sendmsg+0x1b1/0x290 [ 334.239345][T14815] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 334.239391][T14815] do_syscall_64+0x166/0x520 [ 334.239411][T14815] ? trace_irq_disable+0x3b/0x140 [ 334.239430][T14815] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.239450][T14815] ? clear_bhb_loop+0x70/0xc0 [ 334.239474][T14815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.239493][T14815] RIP: 0033:0x7fdce9f9e159 [ 334.239511][T14815] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 334.239528][T14815] RSP: 002b:00007fdce81f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 334.239549][T14815] RAX: ffffffffffffffda RBX: 00007fdcea225fa0 RCX: 00007fdce9f9e159 [ 334.239564][T14815] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000003 [ 334.239577][T14815] RBP: 00007fdce81f6090 R08: 0000000000000000 R09: 0000000000000000 [ 334.239589][T14815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 334.239598][T14815] R13: 00007fdcea226038 R14: 00007fdcea225fa0 R15: 00007ffe25a816a8 [ 334.239624][T14815] [ 334.413373][T14820] __nla_validate_parse: 4 callbacks suppressed [ 334.413391][T14820] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2621'. [ 334.413409][T14820] openvswitch: netlink: Flow actions attr not present in new flow. [ 334.551803][T14827] netlink: 'syz.4.2623': attribute type 4 has an invalid length. [ 334.823489][T14836] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2626'. [ 334.823556][T14836] openvswitch: netlink: Missing key (keys=c0, expected=880) [ 335.809800][T14859] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2629'. [ 336.202153][T14867] netlink: 'syz.4.2634': attribute type 70 has an invalid length. [ 336.204819][T14865] syzkaller1: entered promiscuous mode [ 336.204840][T14865] syzkaller1: entered allmulticast mode [ 336.468246][T14876] netlink: 'syz.4.2636': attribute type 4 has an invalid length. [ 336.559062][T14881] netlink: 'syz.3.2637': attribute type 8 has an invalid length. [ 336.570397][T14881] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2637'. [ 338.341458][T14887] netlink: 108 bytes leftover after parsing attributes in process `syz.4.2639'. [ 338.342877][T14887] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2639'. [ 338.561815][T14893] netlink: 'syz.4.2642': attribute type 1 has an invalid length. [ 338.565799][T14893] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2642'. [ 338.709114][T14898] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 338.899173][T14902] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2648'. [ 339.010871][T14917] netlink: 'syz.2.2651': attribute type 8 has an invalid length. [ 339.012066][T14905] bond8 (unregistering): Released all slaves [ 339.016750][T14917] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2651'. [ 339.082953][T14917] veth13: entered allmulticast mode [ 339.085630][T14920] netlink: 'syz.1.2649': attribute type 4 has an invalid length. [ 339.305854][T14929] syzkaller0: entered promiscuous mode [ 339.305878][T14929] syzkaller0: entered allmulticast mode [ 339.306135][T14930] FAULT_INJECTION: forcing a failure. [ 339.306135][T14930] name failslab, interval 1, probability 0, space 0, times 0 [ 339.306165][T14930] CPU: 0 UID: 0 PID: 14930 Comm: syz.2.2652 Not tainted syzkaller #0 PREEMPT(full) [ 339.306203][T14930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 339.306225][T14930] Call Trace: [ 339.306323][T14930] [ 339.306392][T14930] dump_stack_lvl+0xe8/0x150 [ 339.306577][T14930] should_fail_ex+0x410/0x560 [ 339.306678][T14930] should_failslab+0xa8/0x100 [ 339.306727][T14930] ? dst_alloc+0x105/0x170 [ 339.306876][T14930] kmem_cache_alloc_noprof+0xa1/0x600 [ 339.306911][T14930] ? lock_acquire+0x115/0x350 [ 339.306951][T14930] ? dst_alloc+0x105/0x170 [ 339.306985][T14930] dst_alloc+0x105/0x170 [ 339.307019][T14930] ip_route_output_key_hash_rcu+0x14ac/0x2720 [ 339.307124][T14930] ? ip_route_output_key_hash_rcu+0x1d51/0x2720 [ 339.307159][T14930] ? ip_route_output_key_hash+0xd8/0x2a0 [ 339.307190][T14930] ip_route_output_key_hash+0x18d/0x2a0 [ 339.307224][T14930] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 339.307259][T14930] ? __asan_memset+0x22/0x50 [ 339.307320][T14930] ip_route_output_flow+0x2a/0x150 [ 339.307349][T14930] ? security_sk_classify_flow+0x6d/0x150 [ 339.307467][T14930] tcp_v4_connect+0x7b4/0x1950 [ 339.307537][T14930] ? __pfx_tcp_v4_connect+0x10/0x10 [ 339.307566][T14930] mptcp_connect+0x527/0x7f0 [ 339.307682][T14930] __inet_stream_connect+0x258/0xe00 [ 339.307747][T14930] ? rcu_is_watching+0x16/0xb0 [ 339.307782][T14930] ? __pfx___inet_stream_connect+0x10/0x10 [ 339.307811][T14930] ? __kasan_kmalloc+0x93/0xb0 [ 339.307834][T14930] ? __kmalloc_cache_noprof+0x321/0x600 [ 339.307854][T14930] ? __kmalloc_cache_noprof+0x14d/0x600 [ 339.307872][T14930] ? tcp_sendmsg_fastopen+0x1e7/0x5f0 [ 339.307918][T14930] ? tcp_sendmsg_fastopen+0x1e7/0x5f0 [ 339.307946][T14930] tcp_sendmsg_fastopen+0x3af/0x5f0 [ 339.307975][T14930] mptcp_sendmsg_fastopen+0x17b/0x540 [ 339.308005][T14930] mptcp_sendmsg+0x1a69/0x1d10 [ 339.308045][T14930] ? __lock_acquire+0x747/0x2de0 [ 339.308072][T14930] ? __lock_acquire+0x747/0x2de0 [ 339.308095][T14930] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 339.308118][T14930] ? aa_sock_msg_perm+0xfc/0x210 [ 339.308182][T14930] ? inet_sendmsg+0x298/0x320 [ 339.308214][T14930] ? __pfx_inet_sendmsg+0x10/0x10 [ 339.308241][T14930] sock_sendmsg_nosec+0x10e/0x180 [ 339.308339][T14930] ____sys_sendmsg+0x54e/0x850 [ 339.308369][T14930] ? __pfx_____sys_sendmsg+0x10/0x10 [ 339.308404][T14930] ? import_iovec+0x73/0xa0 [ 339.308466][T14930] ___sys_sendmsg+0x2a5/0x360 [ 339.308490][T14930] ? __lock_acquire+0x747/0x2de0 [ 339.308515][T14930] ? __pfx____sys_sendmsg+0x10/0x10 [ 339.308546][T14930] ? kstrtouint+0x6e/0xe0 [ 339.308630][T14930] ? __fget_files+0x2a/0x420 [ 339.308674][T14930] ? __fget_files+0x3a2/0x420 [ 339.308711][T14930] __sys_sendmmsg+0x273/0x4d0 [ 339.308743][T14930] ? __pfx___sys_sendmmsg+0x10/0x10 [ 339.308779][T14930] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 339.308868][T14930] ? ksys_write+0x242/0x270 [ 339.308905][T14930] ? __pfx_ksys_write+0x10/0x10 [ 339.308941][T14930] __x64_sys_sendmmsg+0xa0/0xc0 [ 339.308969][T14930] do_syscall_64+0x166/0x520 [ 339.309018][T14930] ? trace_irq_disable+0x3b/0x140 [ 339.309052][T14930] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.309087][T14930] ? clear_bhb_loop+0x70/0xc0 [ 339.309131][T14930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.309151][T14930] RIP: 0033:0x7f318379e159 [ 339.309203][T14930] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 339.309221][T14930] RSP: 002b:00007f31846f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 339.309273][T14930] RAX: ffffffffffffffda RBX: 00007f3183a26090 RCX: 00007f318379e159 [ 339.309289][T14930] RDX: 0000000000000001 RSI: 0000200000004980 RDI: 0000000000000005 [ 339.309303][T14930] RBP: 00007f31846f7090 R08: 0000000000000000 R09: 0000000000000000 [ 339.309317][T14930] R10: 0000000020008000 R11: 0000000000000246 R12: 0000000000000001 [ 339.309330][T14930] R13: 00007f3183a26128 R14: 00007f3183a26090 R15: 00007ffcf8165868 [ 339.309365][T14930] [ 339.804021][T14943] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 339.839214][T14940] netlink: 'syz.4.2656': attribute type 8 has an invalid length. [ 339.866406][T14940] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2656'. [ 339.941503][T14940] veth7: entered allmulticast mode [ 339.962513][T12096] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0xe2 [ 340.043466][T14958] netlink: 'syz.4.2662': attribute type 8 has an invalid length. [ 340.046327][T14958] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2662'. [ 340.072885][T14958] veth9: entered allmulticast mode [ 340.199299][T14962] FAULT_INJECTION: forcing a failure. [ 340.199299][T14962] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 340.199333][T14962] CPU: 0 UID: 0 PID: 14962 Comm: syz.4.2663 Not tainted syzkaller #0 PREEMPT(full) [ 340.199354][T14962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 340.199366][T14962] Call Trace: [ 340.199374][T14962] [ 340.199383][T14962] dump_stack_lvl+0xe8/0x150 [ 340.199417][T14962] should_fail_ex+0x410/0x560 [ 340.199444][T14962] _copy_from_user+0x2d/0xb0 [ 340.199471][T14962] kstrtouint_from_user+0xd6/0x180 [ 340.199494][T14962] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 340.199527][T14962] ? lock_acquire+0x115/0x350 [ 340.199552][T14962] proc_fail_nth_write+0x8e/0x210 [ 340.199591][T14962] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 340.199630][T14962] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 340.199659][T14962] vfs_write+0x296/0xba0 [ 340.199697][T14962] ? __pfx_vfs_write+0x10/0x10 [ 340.199728][T14962] ? __fget_files+0x2a/0x420 [ 340.199759][T14962] ? __fget_files+0x3a2/0x420 [ 340.199784][T14962] ? __fget_files+0x2a/0x420 [ 340.199819][T14962] ksys_write+0x150/0x270 [ 340.199851][T14962] ? __pfx_ksys_write+0x10/0x10 [ 340.199892][T14962] do_syscall_64+0x166/0x520 [ 340.199913][T14962] ? trace_irq_disable+0x3b/0x140 [ 340.199933][T14962] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.199953][T14962] ? clear_bhb_loop+0x70/0xc0 [ 340.199977][T14962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.199996][T14962] RIP: 0033:0x7fdce9f5e98e [ 340.200014][T14962] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 340.200032][T14962] RSP: 002b:00007fdce81f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 340.200054][T14962] RAX: ffffffffffffffda RBX: 00007fdce81f66c0 RCX: 00007fdce9f5e98e [ 340.200069][T14962] RDX: 0000000000000001 RSI: 00007fdce81f60a0 RDI: 0000000000000004 [ 340.200082][T14962] RBP: 00007fdce81f6090 R08: 0000000000000000 R09: 0000000000000000 [ 340.200096][T14962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 340.200109][T14962] R13: 00007fdcea226038 R14: 00007fdcea225fa0 R15: 00007ffe25a816a8 [ 340.200144][T14962] [ 340.601960][T14970] netlink: 'syz.4.2666': attribute type 8 has an invalid length. [ 340.611816][T14970] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2666'. [ 340.680649][T14970] veth11: entered allmulticast mode [ 340.848324][T14941] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 341.149197][T14979] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2669'. [ 341.227507][T14982] netlink: 'syz.1.2670': attribute type 8 has an invalid length. [ 341.245219][T14982] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2670'. [ 341.392301][T14982] veth11: entered allmulticast mode [ 341.396608][T14985] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 341.625108][T14989] FAULT_INJECTION: forcing a failure. [ 341.625108][T14989] name failslab, interval 1, probability 0, space 0, times 0 [ 341.625141][T14989] CPU: 1 UID: 0 PID: 14989 Comm: syz.3.2672 Not tainted syzkaller #0 PREEMPT(full) [ 341.625163][T14989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 341.625175][T14989] Call Trace: [ 341.625183][T14989] [ 341.625192][T14989] dump_stack_lvl+0xe8/0x150 [ 341.625227][T14989] should_fail_ex+0x410/0x560 [ 341.625255][T14989] should_failslab+0xa8/0x100 [ 341.625282][T14989] __kmalloc_noprof+0xfe/0x720 [ 341.625302][T14989] ? tomoyo_encode+0x2ad/0x570 [ 341.625424][T14989] ? tomoyo_encode+0x2ad/0x570 [ 341.625455][T14989] tomoyo_encode+0x2ad/0x570 [ 341.625486][T14989] tomoyo_realpath_from_path+0x5fa/0x640 [ 341.625522][T14989] ? tomoyo_path_number_perm+0x219/0x5f0 [ 341.625544][T14989] tomoyo_path_number_perm+0x246/0x5f0 [ 341.625568][T14989] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 341.625589][T14989] ? __lock_acquire+0x747/0x2de0 [ 341.625623][T14989] ? hook_file_ioctl+0x1f2/0x600 [ 341.625721][T14989] ? __fget_files+0x2a/0x420 [ 341.625751][T14989] ? __fget_files+0x2a/0x420 [ 341.625776][T14989] ? __fget_files+0x3a2/0x420 [ 341.625801][T14989] ? __fget_files+0x2a/0x420 [ 341.625831][T14989] security_file_ioctl+0xc3/0x2a0 [ 341.625855][T14989] __se_sys_ioctl+0x47/0x170 [ 341.625880][T14989] do_syscall_64+0x166/0x520 [ 341.625902][T14989] ? trace_irq_disable+0x3b/0x140 [ 341.625922][T14989] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.625943][T14989] ? clear_bhb_loop+0x70/0xc0 [ 341.625967][T14989] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.625987][T14989] RIP: 0033:0x7f3751f9e159 [ 341.626006][T14989] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 341.626024][T14989] RSP: 002b:00007f37501d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 341.626047][T14989] RAX: ffffffffffffffda RBX: 00007f3752226090 RCX: 00007f3751f9e159 [ 341.626062][T14989] RDX: 0000200000000100 RSI: 00000000400452c8 RDI: 0000000000000009 [ 341.626076][T14989] RBP: 00007f37501d5090 R08: 0000000000000000 R09: 0000000000000000 [ 341.626096][T14989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 341.626108][T14989] R13: 00007f3752226128 R14: 00007f3752226090 R15: 00007ffe9f484568 [ 341.626140][T14989] [ 341.626160][T14989] ERROR: Out of memory at tomoyo_realpath_from_path. [ 342.025661][T14999] bond4 (unregistering): Released all slaves [ 342.311582][T15010] FAULT_INJECTION: forcing a failure. [ 342.311582][T15010] name failslab, interval 1, probability 0, space 0, times 0 [ 342.311615][T15010] CPU: 0 UID: 0 PID: 15010 Comm: syz.3.2679 Not tainted syzkaller #0 PREEMPT(full) [ 342.311638][T15010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 342.311651][T15010] Call Trace: [ 342.311660][T15010] [ 342.311669][T15010] dump_stack_lvl+0xe8/0x150 [ 342.311702][T15010] should_fail_ex+0x410/0x560 [ 342.311730][T15010] should_failslab+0xa8/0x100 [ 342.311756][T15010] __kmalloc_cache_noprof+0xa3/0x600 [ 342.311777][T15010] ? tcf_chain_create+0xaf/0x310 [ 342.311930][T15010] ? tcf_chain_create+0xaf/0x310 [ 342.311963][T15010] tcf_chain_create+0xaf/0x310 [ 342.311990][T15010] ? __tcf_chain_get+0xfb/0x3c0 [ 342.312017][T15010] __tcf_chain_get+0x111/0x3c0 [ 342.312045][T15010] tc_new_tfilter+0x804/0x1810 [ 342.312102][T15010] ? __pfx_tc_new_tfilter+0x10/0x10 [ 342.312148][T15010] ? lock_acquire+0x115/0x350 [ 342.312186][T15010] ? __pfx_tc_new_tfilter+0x10/0x10 [ 342.312212][T15010] rtnetlink_rcv_msg+0x802/0xc00 [ 342.312275][T15010] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 342.312297][T15010] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 342.312318][T15010] ? ref_tracker_free+0x689/0x830 [ 342.312378][T15010] ? __pfx_ref_tracker_free+0x10/0x10 [ 342.312412][T15010] netlink_rcv_skb+0x226/0x4a0 [ 342.312481][T15010] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 342.312506][T15010] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 342.312547][T15010] ? netlink_deliver_tap+0x2e/0x1b0 [ 342.312574][T15010] ? netlink_deliver_tap+0x2e/0x1b0 [ 342.312608][T15010] netlink_unicast+0x7bd/0x940 [ 342.312646][T15010] netlink_sendmsg+0x813/0xb40 [ 342.312685][T15010] ? __pfx_netlink_sendmsg+0x10/0x10 [ 342.312717][T15010] ? apparmor_socket_sendmsg+0x18b/0x360 [ 342.312741][T15010] ? __pfx_netlink_sendmsg+0x10/0x10 [ 342.312766][T15010] sock_sendmsg_nosec+0x13a/0x180 [ 342.312800][T15010] ____sys_sendmsg+0x54e/0x850 [ 342.312829][T15010] ? __pfx_____sys_sendmsg+0x10/0x10 [ 342.312861][T15010] ? import_iovec+0x73/0xa0 [ 342.312888][T15010] ___sys_sendmsg+0x2a5/0x360 [ 342.312924][T15010] ? __lock_acquire+0x747/0x2de0 [ 342.312948][T15010] ? __pfx____sys_sendmsg+0x10/0x10 [ 342.313008][T15010] ? __fget_files+0x2a/0x420 [ 342.313035][T15010] ? __fget_files+0x3a2/0x420 [ 342.313071][T15010] __x64_sys_sendmsg+0x1b1/0x290 [ 342.313098][T15010] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 342.313145][T15010] do_syscall_64+0x166/0x520 [ 342.313167][T15010] ? trace_irq_disable+0x3b/0x140 [ 342.313188][T15010] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.313209][T15010] ? clear_bhb_loop+0x70/0xc0 [ 342.313234][T15010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.313254][T15010] RIP: 0033:0x7f3751f9e159 [ 342.313273][T15010] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 342.313291][T15010] RSP: 002b:00007f37501f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 342.313312][T15010] RAX: ffffffffffffffda RBX: 00007f3752225fa0 RCX: 00007f3751f9e159 [ 342.313327][T15010] RDX: 0000000020000000 RSI: 0000200000000480 RDI: 0000000000000004 [ 342.313340][T15010] RBP: 00007f37501f6090 R08: 0000000000000000 R09: 0000000000000000 [ 342.313353][T15010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 342.313366][T15010] R13: 00007f3752226038 R14: 00007f3752225fa0 R15: 00007ffe9f484568 [ 342.313400][T15010] [ 342.831221][T15018] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 342.865801][T15024] netlink: 'syz.4.2683': attribute type 8 has an invalid length. [ 342.880011][T15024] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2683'. [ 342.953595][T15024] veth13: entered allmulticast mode [ 343.031151][T15030] FAULT_INJECTION: forcing a failure. [ 343.031151][T15030] name failslab, interval 1, probability 0, space 0, times 0 [ 343.031187][T15030] CPU: 0 UID: 0 PID: 15030 Comm: syz.3.2685 Not tainted syzkaller #0 PREEMPT(full) [ 343.031210][T15030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 343.031223][T15030] Call Trace: [ 343.031231][T15030] [ 343.031240][T15030] dump_stack_lvl+0xe8/0x150 [ 343.031275][T15030] should_fail_ex+0x410/0x560 [ 343.031304][T15030] should_failslab+0xa8/0x100 [ 343.031331][T15030] __kmalloc_cache_noprof+0xa3/0x600 [ 343.031351][T15030] ? __kmalloc_cache_noprof+0x14d/0x600 [ 343.031377][T15030] ? sctp_add_bind_addr+0x8c/0x370 [ 343.031524][T15030] ? sctp_add_bind_addr+0x8c/0x370 [ 343.031561][T15030] sctp_add_bind_addr+0x8c/0x370 [ 343.031594][T15030] sctp_copy_local_addr_list+0x31a/0x4e0 [ 343.031691][T15030] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 343.031721][T15030] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 343.031751][T15030] ? sctp_v6_is_any+0x64/0x80 [ 343.031883][T15030] ? sctp_copy_one_addr+0x93/0x360 [ 343.031913][T15030] sctp_bind_addr_copy+0xb3/0x3c0 [ 343.031942][T15030] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 343.031971][T15030] sctp_connect_new_asoc+0x2ff/0x6b0 [ 343.031996][T15030] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 343.032024][T15030] ? __local_bh_enable_ip+0xd6/0x140 [ 343.032064][T15030] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 343.032106][T15030] ? security_sctp_bind_connect+0x7e/0x2c0 [ 343.032131][T15030] sctp_sendmsg+0x159b/0x2d00 [ 343.032167][T15030] ? __pfx_sctp_sendmsg+0x10/0x10 [ 343.032212][T15030] ? aa_sock_msg_perm+0xf5/0x210 [ 343.032235][T15030] ? sock_rps_record_flow+0x19/0x350 [ 343.032268][T15030] ? inet_sendmsg+0x298/0x320 [ 343.032299][T15030] ? __pfx_inet_sendmsg+0x10/0x10 [ 343.032327][T15030] sock_sendmsg_nosec+0x10e/0x180 [ 343.032361][T15030] ____sys_sendmsg+0x54e/0x850 [ 343.032398][T15030] ? __pfx_____sys_sendmsg+0x10/0x10 [ 343.032432][T15030] ? import_iovec+0x73/0xa0 [ 343.032459][T15030] ___sys_sendmsg+0x2a5/0x360 [ 343.032483][T15030] ? __lock_acquire+0x747/0x2de0 [ 343.032508][T15030] ? __pfx____sys_sendmsg+0x10/0x10 [ 343.032570][T15030] ? __fget_files+0x2a/0x420 [ 343.032595][T15030] ? __fget_files+0x3a2/0x420 [ 343.032630][T15030] __x64_sys_sendmsg+0x1b1/0x290 [ 343.032657][T15030] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 343.032707][T15030] do_syscall_64+0x166/0x520 [ 343.032729][T15030] ? trace_irq_disable+0x3b/0x140 [ 343.032748][T15030] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.032769][T15030] ? clear_bhb_loop+0x70/0xc0 [ 343.032792][T15030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.032812][T15030] RIP: 0033:0x7f3751f9e159 [ 343.032831][T15030] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 343.032849][T15030] RSP: 002b:00007f37501f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 343.032872][T15030] RAX: ffffffffffffffda RBX: 00007f3752225fa0 RCX: 00007f3751f9e159 [ 343.032886][T15030] RDX: 0000000028008841 RSI: 0000200000001640 RDI: 0000000000000003 [ 343.032900][T15030] RBP: 00007f37501f6090 R08: 0000000000000000 R09: 0000000000000000 [ 343.032913][T15030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 343.032925][T15030] R13: 00007f3752226038 R14: 00007f3752225fa0 R15: 00007ffe9f484568 [ 343.032958][T15030] [ 343.621614][T15042] syzkaller0: entered promiscuous mode [ 343.621637][T15042] syzkaller0: entered allmulticast mode [ 343.729753][T12093] tipc: Subscription rejected, illegal request [ 343.829564][T15052] bond5 (unregistering): Released all slaves [ 343.866146][T15057] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 343.961975][T15051] gretap2: entered promiscuous mode [ 344.123825][T15068] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2697'. [ 344.163396][T15068] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2697'. [ 344.190778][T15072] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2700'. [ 344.190808][T15073] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2700'. [ 344.545355][T12096] tipc: Subscription rejected, illegal request [ 344.696621][T15092] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 344.814483][T15089] bond8 (unregistering): Released all slaves [ 345.053118][T15105] __nla_validate_parse: 2 callbacks suppressed [ 345.053205][T15105] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2712'. [ 345.210356][T15107] tc_dump_action: action bad kind [ 345.230730][T15097] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 345.342439][T15119] tipc: Enabling of bearer rejected, failed to enable media [ 345.655632][T15122] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2715'. [ 345.919954][T15125] bond2 (unregistering): Released all slaves [ 346.058496][ T9173] tipc: Subscription rejected, illegal request [ 346.099070][T15126] bond5 (unregistering): Released all slaves [ 346.298532][T15139] bond8 (unregistering): Released all slaves [ 346.322890][T15145] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2722'. [ 346.444963][T15151] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2724'. [ 346.807452][ T5618] Bluetooth: hci4: command 0x0406 tx timeout [ 346.832564][T15162] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2727'. [ 347.255890][T15165] netlink: NAT attribute has 8 unknown bytes [ 347.255928][T15165] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 347.611460][T15191] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2735'. [ 348.222472][T15213] can: request_module (can-proto-0) failed. [ 348.419825][T15226] FAULT_INJECTION: forcing a failure. [ 348.419825][T15226] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 348.419857][T15226] CPU: 0 UID: 0 PID: 15226 Comm: syz.1.2744 Not tainted syzkaller #0 PREEMPT(full) [ 348.419878][T15226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 348.419889][T15226] Call Trace: [ 348.419896][T15226] [ 348.419904][T15226] dump_stack_lvl+0xe8/0x150 [ 348.419933][T15226] should_fail_ex+0x410/0x560 [ 348.419959][T15226] _copy_to_user+0x31/0xb0 [ 348.419986][T15226] simple_read_from_buffer+0xe1/0x170 [ 348.420017][T15226] proc_fail_nth_read+0x1bb/0x230 [ 348.420045][T15226] ? common_file_perm+0x20e/0x2b0 [ 348.420071][T15226] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 348.420106][T15226] ? rw_verify_area+0x24a/0x4c0 [ 348.420129][T15226] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 348.420151][T15226] vfs_read+0x213/0xa80 [ 348.420176][T15226] ? __pfx___mutex_lock+0x10/0x10 [ 348.420195][T15226] ? __pfx_vfs_read+0x10/0x10 [ 348.420217][T15226] ? __fget_files+0x2a/0x420 [ 348.420241][T15226] ? __fget_files+0x3a2/0x420 [ 348.420259][T15226] ? __fget_files+0x2a/0x420 [ 348.420286][T15226] ksys_read+0x150/0x270 [ 348.420310][T15226] ? __pfx_ksys_read+0x10/0x10 [ 348.420340][T15226] do_syscall_64+0x166/0x520 [ 348.420358][T15226] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.420373][T15226] ? clear_bhb_loop+0x70/0xc0 [ 348.420392][T15226] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.420407][T15226] RIP: 0033:0x7faa4275e98e [ 348.420421][T15226] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 348.420435][T15226] RSP: 002b:00007faa436aafe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 348.420452][T15226] RAX: ffffffffffffffda RBX: 00007faa436ab6c0 RCX: 00007faa4275e98e [ 348.420463][T15226] RDX: 000000000000000f RSI: 00007faa436ab0a0 RDI: 000000000000000a [ 348.420480][T15226] RBP: 00007faa436ab090 R08: 0000000000000000 R09: 0000000000000000 [ 348.420489][T15226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 348.420498][T15226] R13: 00007faa42a26038 R14: 00007faa42a25fa0 R15: 00007ffec6a6e888 [ 348.420522][T15226] [ 348.618397][T15238] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2747'. [ 348.773536][T15242] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2749'. [ 348.822797][T15242] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2749'. [ 349.082631][T15252] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 349.147207][T15264] netlink: 432 bytes leftover after parsing attributes in process `syz.1.2753'. [ 349.425582][T15274] can: request_module (can-proto-0) failed. [ 349.555267][T15279] openvswitch: netlink: Missing key (keys=c0, expected=880) [ 349.734256][T15292] FAULT_INJECTION: forcing a failure. [ 349.734256][T15292] name failslab, interval 1, probability 0, space 0, times 0 [ 349.734290][T15292] CPU: 0 UID: 0 PID: 15292 Comm: syz.4.2763 Not tainted syzkaller #0 PREEMPT(full) [ 349.734313][T15292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 349.734326][T15292] Call Trace: [ 349.734334][T15292] [ 349.734344][T15292] dump_stack_lvl+0xe8/0x150 [ 349.734385][T15292] should_fail_ex+0x410/0x560 [ 349.734413][T15292] should_failslab+0xa8/0x100 [ 349.734439][T15292] __kmalloc_noprof+0xfe/0x720 [ 349.734460][T15292] ? sock_kmalloc+0xd6/0x160 [ 349.734566][T15292] ? sock_kmalloc+0xd6/0x160 [ 349.734599][T15292] sock_kmalloc+0xd6/0x160 [ 349.734628][T15292] ____sys_sendmsg+0x1be/0x850 [ 349.734660][T15292] ? __pfx_____sys_sendmsg+0x10/0x10 [ 349.734695][T15292] ? import_iovec+0x73/0xa0 [ 349.734724][T15292] ___sys_sendmsg+0x2a5/0x360 [ 349.734748][T15292] ? __lock_acquire+0x747/0x2de0 [ 349.734774][T15292] ? __pfx____sys_sendmsg+0x10/0x10 [ 349.734805][T15292] ? kstrtouint+0x6e/0xe0 [ 349.734859][T15292] ? __fget_files+0x2a/0x420 [ 349.734884][T15292] ? __fget_files+0x3a2/0x420 [ 349.734918][T15292] __sys_sendmmsg+0x273/0x4d0 [ 349.734945][T15292] ? __pfx___sys_sendmmsg+0x10/0x10 [ 349.734978][T15292] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 349.735016][T15292] ? ksys_write+0x242/0x270 [ 349.735047][T15292] ? __pfx_ksys_write+0x10/0x10 [ 349.735083][T15292] __x64_sys_sendmmsg+0xa0/0xc0 [ 349.735114][T15292] do_syscall_64+0x166/0x520 [ 349.735135][T15292] ? trace_irq_disable+0x3b/0x140 [ 349.735156][T15292] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.735177][T15292] ? clear_bhb_loop+0x70/0xc0 [ 349.735203][T15292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.735223][T15292] RIP: 0033:0x7fdce9f9e159 [ 349.735242][T15292] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 349.735259][T15292] RSP: 002b:00007fdce81f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 349.735281][T15292] RAX: ffffffffffffffda RBX: 00007fdcea225fa0 RCX: 00007fdce9f9e159 [ 349.735297][T15292] RDX: 0000000000000001 RSI: 000020000000c240 RDI: 0000000000000003 [ 349.735310][T15292] RBP: 00007fdce81f6090 R08: 0000000000000000 R09: 0000000000000000 [ 349.735323][T15292] R10: 0000000004000080 R11: 0000000000000246 R12: 0000000000000001 [ 349.735336][T15292] R13: 00007fdcea226038 R14: 00007fdcea225fa0 R15: 00007ffe25a816a8 [ 349.735368][T15292] [ 350.183252][T15306] nft_compat: unsupported protocol 0 [ 350.387164][T15315] __nla_validate_parse: 3 callbacks suppressed [ 350.387183][T15315] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2770'. [ 350.588116][T15319] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2772'. [ 350.588185][T15319] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2772'. [ 350.589486][T15323] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2773'. [ 350.590071][T15319] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2772'. [ 351.432812][T15343] FAULT_INJECTION: forcing a failure. [ 351.432812][T15343] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 351.432834][T15343] CPU: 1 UID: 0 PID: 15343 Comm: syz.2.2778 Not tainted syzkaller #0 PREEMPT(full) [ 351.432846][T15343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 351.432853][T15343] Call Trace: [ 351.432858][T15343] [ 351.432864][T15343] dump_stack_lvl+0xe8/0x150 [ 351.432885][T15343] should_fail_ex+0x410/0x560 [ 351.432901][T15343] _copy_to_user+0x31/0xb0 [ 351.432924][T15343] simple_read_from_buffer+0xe1/0x170 [ 351.432942][T15343] proc_fail_nth_read+0x1bb/0x230 [ 351.432958][T15343] ? common_file_perm+0x20e/0x2b0 [ 351.432973][T15343] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 351.432991][T15343] ? rw_verify_area+0x24a/0x4c0 [ 351.433008][T15343] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 351.433023][T15343] vfs_read+0x213/0xa80 [ 351.433042][T15343] ? __pfx___mutex_lock+0x10/0x10 [ 351.433055][T15343] ? __pfx_vfs_read+0x10/0x10 [ 351.433071][T15343] ? __fget_files+0x2a/0x420 [ 351.433087][T15343] ? __fget_files+0x3a2/0x420 [ 351.433106][T15343] ? __fget_files+0x2a/0x420 [ 351.433142][T15343] ksys_read+0x150/0x270 [ 351.433166][T15343] ? __pfx_ksys_read+0x10/0x10 [ 351.433188][T15343] do_syscall_64+0x166/0x520 [ 351.433199][T15343] ? trace_irq_disable+0x3b/0x140 [ 351.433210][T15343] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.433221][T15343] ? clear_bhb_loop+0x70/0xc0 [ 351.433235][T15343] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.433245][T15343] RIP: 0033:0x7f318375e98e [ 351.433256][T15343] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 351.433266][T15343] RSP: 002b:00007f3184717fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 351.433279][T15343] RAX: ffffffffffffffda RBX: 00007f31847186c0 RCX: 00007f318375e98e [ 351.433287][T15343] RDX: 000000000000000f RSI: 00007f31847180a0 RDI: 0000000000000004 [ 351.433294][T15343] RBP: 00007f3184718090 R08: 0000000000000000 R09: 0000000000000000 [ 351.433306][T15343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 351.433313][T15343] R13: 00007f3183a26038 R14: 00007f3183a25fa0 R15: 00007ffcf8165868 [ 351.433330][T15343] [ 353.731325][T15345] netlink: 'syz.2.2779': attribute type 1 has an invalid length. [ 353.839257][T15351] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2781'. [ 353.886591][T15327] bridge0: port 3(bond0) entered disabled state [ 353.886989][T15327] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.887254][T15327] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.379672][T15345] 8021q: adding VLAN 0 to HW filter on device bond4 [ 354.470394][T15357] nft_compat: unsupported protocol 0 [ 354.621684][T15361] FAULT_INJECTION: forcing a failure. [ 354.621684][T15361] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 354.621718][T15361] CPU: 0 UID: 0 PID: 15361 Comm: syz.0.2783 Not tainted syzkaller #0 PREEMPT(full) [ 354.621741][T15361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 354.621753][T15361] Call Trace: [ 354.621761][T15361] [ 354.621770][T15361] dump_stack_lvl+0xe8/0x150 [ 354.621803][T15361] should_fail_ex+0x410/0x560 [ 354.621831][T15361] _copy_from_user+0x2d/0xb0 [ 354.621858][T15361] ___sys_sendmsg+0x1c6/0x360 [ 354.621884][T15361] ? __lock_acquire+0x747/0x2de0 [ 354.621910][T15361] ? __pfx____sys_sendmsg+0x10/0x10 [ 354.621977][T15361] ? __fget_files+0x2a/0x420 [ 354.622003][T15361] ? __fget_files+0x3a2/0x420 [ 354.622039][T15361] __x64_sys_sendmsg+0x1b1/0x290 [ 354.622068][T15361] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 354.622117][T15361] do_syscall_64+0x166/0x520 [ 354.622138][T15361] ? trace_irq_disable+0x3b/0x140 [ 354.622158][T15361] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.622179][T15361] ? clear_bhb_loop+0x70/0xc0 [ 354.622203][T15361] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.622223][T15361] RIP: 0033:0x7fb0c659e159 [ 354.622242][T15361] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 354.622259][T15361] RSP: 002b:00007fb0c74a9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 354.622282][T15361] RAX: ffffffffffffffda RBX: 00007fb0c6825fa0 RCX: 00007fb0c659e159 [ 354.622297][T15361] RDX: 0000000000000090 RSI: 00002000000002c0 RDI: 0000000000000003 [ 354.622310][T15361] RBP: 00007fb0c74a9090 R08: 0000000000000000 R09: 0000000000000000 [ 354.622323][T15361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 354.622336][T15361] R13: 00007fb0c6826038 R14: 00007fb0c6825fa0 R15: 00007ffed68fbaf8 [ 354.622368][T15361] [ 354.857975][T15364] netlink: 'syz.2.2785': attribute type 2 has an invalid length. [ 354.993063][T15368] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2787'. [ 355.075736][T15366] xt_CT: No such helper "netbios-ns" [ 355.131942][T15375] bond8 (unregistering): Released all slaves [ 355.267903][T15385] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2793'. [ 355.310010][T15389] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2794'. [ 355.531174][T15397] nft_compat: unsupported protocol 0 [ 355.651246][T15404] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2801'. [ 355.816722][T15409] openvswitch: netlink: VLAN attribute unexpected. [ 356.080145][T15427] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2808'. [ 356.123342][T15430] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2810'. [ 356.195236][T15428] 8021q: adding VLAN 0 to HW filter on device bond0 [ 356.229757][T15428] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 356.249194][T15428] veth1: left promiscuous mode [ 356.299482][T15428] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 356.303206][T15428] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 356.329195][T15428] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 356.329220][T15428] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 356.334203][T15428] veth1_vlan: left promiscuous mode [ 356.335530][T15428] veth0_vlan: left promiscuous mode [ 356.369656][T15428] veth0_vlan: entered promiscuous mode [ 356.370638][T15428] tipc: Resetting bearer [ 356.372063][T15428] veth1_vlan: entered promiscuous mode [ 356.376358][T15428] veth1_macvtap: left promiscuous mode [ 356.399826][T15428] veth0_macvtap: left promiscuous mode [ 356.400857][T15428] veth0_macvtap: entered promiscuous mode [ 356.402014][T15428] veth1_macvtap: entered promiscuous mode [ 356.425888][T15428] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 356.427113][T15428] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 356.444961][T15428] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 356.446111][T15428] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 356.462682][T15428] vlan0: entered allmulticast mode [ 356.462703][T15428] veth0_vlan: entered allmulticast mode [ 356.466980][T15428] 8021q: adding VLAN 0 to HW filter on device bond1 [ 356.492376][T15428] 8021q: adding VLAN 0 to HW filter on device bond2 [ 356.493491][T15428] 8021q: adding VLAN 0 to HW filter on device bond3 [ 356.496280][T15428] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 356.541421][T15432] macsec0: entered promiscuous mode [ 356.555535][T15421] macsec0: left promiscuous mode [ 356.575284][ T9173] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.575396][ T9173] bridge0: port 1(bridge_slave_0) entered forwarding state [ 356.593593][T15442] netlink: 'syz.4.2813': attribute type 4 has an invalid length. [ 356.593615][T15442] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2813'. [ 356.614754][ T9173] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.614850][ T9173] bridge0: port 2(bridge_slave_1) entered forwarding state [ 356.635204][T15442] netlink: Conntrack attr type has unexpected length (type=0, length=8, expected=0) [ 356.635245][T15442] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 356.662986][T15442] IPVS: set_ctl: invalid protocol: 8 0.0.0.0:20003 [ 356.712679][T15434] macsec0: entered promiscuous mode [ 356.726055][T15438] macsec0: left promiscuous mode [ 356.891920][T12106] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.896231][ T9183] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.896274][ T9183] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.896306][ T9183] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.930240][T15447] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2815'. [ 357.180284][T15457] bond5 (unregistering): Released all slaves [ 357.226692][T15466] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2821'. [ 357.284068][T15467] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2821'. [ 358.025828][T15487] x_tables: duplicate underflow at hook 3 [ 358.068632][T15493] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2827'. [ 358.123538][T15503] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2827'. [ 358.171412][T15493] 8021q: adding VLAN 0 to HW filter on device bond4 [ 358.258654][ T31] audit: type=1804 audit(1789690298.110:32): pid=15509 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2833" name="/newroot/581/cgroup.controllers" dev="tmpfs" ino=2994 res=1 errno=0 [ 358.258690][ T31] audit: type=1800 audit(1789690298.110:33): pid=15509 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2833" name="cgroup.controllers" dev="tmpfs" ino=2994 res=0 errno=0 [ 358.266268][T15494] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 358.347794][T15506] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2831'. [ 358.436302][T15514] netlink: 'syz.0.2834': attribute type 8 has an invalid length. [ 358.776379][T15528] bond5 (unregistering): Released all slaves [ 359.201799][T15547] netlink: 'syz.1.2844': attribute type 10 has an invalid length. [ 359.203532][T15547] team0: Device vxcan1 is of different type [ 359.269637][T15549] netlink: 'syz.2.2842': attribute type 5 has an invalid length. [ 359.269658][T15549] netlink: 'syz.2.2842': attribute type 6 has an invalid length. [ 359.303493][T15549] netlink: 'syz.2.2842': attribute type 5 has an invalid length. [ 359.303512][T15549] netlink: 'syz.2.2842': attribute type 6 has an invalid length. [ 359.902444][ T52] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 359.916186][ T52] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 359.926936][ T52] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 359.939299][ T52] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 359.941492][ T52] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 360.284449][T15568] bond5 (unregistering): Released all slaves [ 361.005931][T15599] netlink: 'syz.2.2856': attribute type 32 has an invalid length. [ 361.051304][T15592] can: request_module (can-proto-0) failed. [ 361.134219][T15599] bond5: option coupled_control: invalid value (116) [ 361.245218][T15599] bond5 (unregistering): Released all slaves [ 361.271734][T15609] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 361.759847][T15620] syzkaller0: entered promiscuous mode [ 361.759874][T15620] syzkaller0: entered allmulticast mode [ 361.944152][ T9183] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 361.944188][ T9183] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.998067][ T5618] Bluetooth: hci5: command tx timeout [ 364.082030][ T5618] Bluetooth: hci5: command tx timeout [ 364.624360][ T9183] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 364.624397][ T9183] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.799845][T15649] FAULT_INJECTION: forcing a failure. [ 364.799845][T15649] name failslab, interval 1, probability 0, space 0, times 0 [ 364.799877][T15649] CPU: 0 UID: 0 PID: 15649 Comm: syz.1.2867 Not tainted syzkaller #0 PREEMPT(full) [ 364.799900][T15649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 364.799912][T15649] Call Trace: [ 364.799920][T15649] [ 364.799928][T15649] dump_stack_lvl+0xe8/0x150 [ 364.799964][T15649] should_fail_ex+0x410/0x560 [ 364.799994][T15649] should_failslab+0xa8/0x100 [ 364.800020][T15649] __kvmalloc_node_noprof+0x176/0x820 [ 364.800045][T15649] ? __kvmalloc_node_noprof+0x345/0x820 [ 364.800065][T15649] ? bpf_compute_scc+0xd2/0xb10 [ 364.800084][T15649] ? bpf_compute_scc+0xd2/0xb10 [ 364.800112][T15649] bpf_compute_scc+0xd2/0xb10 [ 364.800150][T15649] bpf_check+0x25c9/0x2e10 [ 364.800217][T15649] ? ktime_get_with_offset+0x93/0x2d0 [ 364.800244][T15649] ? __pfx_bpf_check+0x10/0x10 [ 364.800267][T15649] ? bpf_obj_name_cpy+0x194/0x1e0 [ 364.800299][T15649] bpf_prog_load+0x14d6/0x1c20 [ 364.800333][T15649] ? __pfx_bpf_prog_load+0x10/0x10 [ 364.800380][T15649] __sys_bpf+0xd0d/0xd90 [ 364.800410][T15649] ? __pfx___sys_bpf+0x10/0x10 [ 364.800443][T15649] ? __fget_files+0x2a/0x420 [ 364.800484][T15649] ? ksys_write+0x242/0x270 [ 364.800514][T15649] ? __pfx_ksys_write+0x10/0x10 [ 364.800545][T15649] __x64_sys_bpf+0xba/0xd0 [ 364.800568][T15649] do_syscall_64+0x166/0x520 [ 364.800591][T15649] ? trace_irq_disable+0x3b/0x140 [ 364.800609][T15649] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.800629][T15649] ? clear_bhb_loop+0x70/0xc0 [ 364.800654][T15649] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.800673][T15649] RIP: 0033:0x7faa4279e159 [ 364.800691][T15649] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 364.800708][T15649] RSP: 002b:00007faa43669028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 364.800730][T15649] RAX: ffffffffffffffda RBX: 00007faa42a26180 RCX: 00007faa4279e159 [ 364.800745][T15649] RDX: 0000000000000094 RSI: 0000200000000440 RDI: 0000000000000005 [ 364.800758][T15649] RBP: 00007faa43669090 R08: 0000000000000000 R09: 0000000000000000 [ 364.800770][T15649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 364.800783][T15649] R13: 00007faa42a26218 R14: 00007faa42a26180 R15: 00007ffec6a6e888 [ 364.800815][T15649] [ 364.959653][ T9183] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 364.959694][ T9183] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.139168][T15657] __nla_validate_parse: 7 callbacks suppressed [ 365.139188][T15657] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2873'. [ 365.236521][T15670] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2874'. [ 365.237126][T15670] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2874'. [ 365.256925][ T9183] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 365.256947][ T9183] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.876874][T15563] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.877039][T15563] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.885577][T15563] bridge_slave_0: entered allmulticast mode [ 365.894648][T15563] bridge_slave_0: entered promiscuous mode [ 365.911352][T15563] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.911410][T15563] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.911497][T15563] bridge_slave_1: entered allmulticast mode [ 365.918609][T15563] bridge_slave_1: entered promiscuous mode [ 366.085041][T15563] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 366.106316][T15563] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 366.157509][ T5618] Bluetooth: hci5: command tx timeout [ 366.272805][T15563] team0: Port device team_slave_0 added [ 366.274847][T15710] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2882'. [ 366.282761][T15563] team0: Port device team_slave_1 added [ 366.320439][T15708] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2881'. [ 366.396263][T15563] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 366.396282][T15563] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 366.396309][T15563] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 366.399675][T15563] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 366.399689][T15563] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 366.399715][T15563] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 366.532090][ T9183] veth3: left allmulticast mode [ 366.532153][ T9183] veth3: left promiscuous mode [ 366.535825][ T9183] bridge0: port 3(veth3) entered disabled state [ 366.790954][T15725] FAULT_INJECTION: forcing a failure. [ 366.790954][T15725] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 366.790988][T15725] CPU: 1 UID: 0 PID: 15725 Comm: syz.3.2886 Not tainted syzkaller #0 PREEMPT(full) [ 366.791012][T15725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 366.791024][T15725] Call Trace: [ 366.791032][T15725] [ 366.791042][T15725] dump_stack_lvl+0xe8/0x150 [ 366.791076][T15725] should_fail_ex+0x410/0x560 [ 366.791103][T15725] _copy_from_user+0x2d/0xb0 [ 366.791129][T15725] xt_copy_counters+0x199/0x4c0 [ 366.791253][T15725] ? __pfx_xt_copy_counters+0x10/0x10 [ 366.791280][T15725] ? apparmor_capable+0x126/0x170 [ 366.791348][T15725] ? bpf_lsm_capable+0x9/0x20 [ 366.791366][T15725] ? security_capable+0x7e/0x2c0 [ 366.791423][T15725] do_ip6t_set_ctl+0x29f/0xe30 [ 366.791526][T15725] ? rcu_is_watching+0x16/0xb0 [ 366.791550][T15725] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 366.791581][T15725] ? nf_setsockopt+0x221/0x290 [ 366.791641][T15725] ? __mutex_unlock_slowpath+0x731/0x900 [ 366.791671][T15725] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 366.791709][T15725] nf_setsockopt+0x26f/0x290 [ 366.791733][T15725] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 366.791757][T15725] do_sock_setsockopt+0x17c/0x1b0 [ 366.791784][T15725] __x64_sys_setsockopt+0x13d/0x1b0 [ 366.791812][T15725] do_syscall_64+0x166/0x520 [ 366.791832][T15725] ? trace_irq_disable+0x3b/0x140 [ 366.791847][T15725] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.791863][T15725] ? clear_bhb_loop+0x70/0xc0 [ 366.791887][T15725] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.791906][T15725] RIP: 0033:0x7f3751f9e159 [ 366.791924][T15725] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 366.791941][T15725] RSP: 002b:00007f37501f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 366.791961][T15725] RAX: ffffffffffffffda RBX: 00007f3752225fa0 RCX: 00007f3751f9e159 [ 366.791973][T15725] RDX: 0000000000000041 RSI: 0000000000000029 RDI: 0000000000000003 [ 366.791983][T15725] RBP: 00007f37501f6090 R08: 0000000000000048 R09: 0000000000000000 [ 366.791993][T15725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 366.792003][T15725] R13: 00007f3752226038 R14: 00007f3752225fa0 R15: 00007ffe9f484568 [ 366.792028][T15725] [ 367.265263][T15740] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2889'. [ 367.289914][ T9183] bond2 (unregistering): (slave gretap1): Releasing backup interface [ 367.296242][ T9183] bond1 (unregistering): (slave gre1): Releasing backup interface [ 367.296365][ T9183] gre1 (unregistering): left promiscuous mode [ 367.318085][T15742] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2889'. [ 367.400012][ T9183] bond0 (unregistering): Released all slaves [ 367.404525][ T9183] bond1 (unregistering): Released all slaves [ 367.423335][ T9183] bond2 (unregistering): (slave bond3): Releasing backup interface [ 367.424868][ T9183] bond2 (unregistering): Released all slaves [ 367.444082][ T9183] bond3 (unregistering): Released all slaves [ 367.455641][ T9183] bond4 (unregistering): Released all slaves [ 367.490948][ T5275] 8021q: adding VLAN 0 to HW filter on device eth1 [ 367.548139][T15720] bond5 (unregistering): Released all slaves [ 367.628157][T15734] syzkaller1: entered promiscuous mode [ 367.628182][T15734] syzkaller1: entered allmulticast mode [ 367.749383][ T9183] ovs-s!: left promiscuous mode [ 368.088467][T15752] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2893'. [ 368.247408][ T5618] Bluetooth: hci5: command tx timeout [ 368.784686][T15563] hsr_slave_0: entered promiscuous mode [ 368.786696][T15563] hsr_slave_1: entered promiscuous mode [ 368.788610][T15563] debugfs: 'hsr0' already exists in 'hsr' [ 368.788630][T15563] Cannot create hsr debugfs directory [ 368.799707][ T9183] tipc: Disabling bearer [ 368.823343][ T9183] tipc: Disabling bearer [ 368.833410][ T9183] tipc: Left network mode [ 369.181288][T15769] FAULT_INJECTION: forcing a failure. [ 369.181288][T15769] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 369.181321][T15769] CPU: 0 UID: 0 PID: 15769 Comm: syz.1.2898 Not tainted syzkaller #0 PREEMPT(full) [ 369.181344][T15769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 369.181355][T15769] Call Trace: [ 369.181363][T15769] [ 369.181373][T15769] dump_stack_lvl+0xe8/0x150 [ 369.181405][T15769] should_fail_ex+0x410/0x560 [ 369.181433][T15769] _copy_from_user+0x2d/0xb0 [ 369.181458][T15769] ___sys_sendmsg+0x1c6/0x360 [ 369.181483][T15769] ? __lock_acquire+0x747/0x2de0 [ 369.181509][T15769] ? __pfx____sys_sendmsg+0x10/0x10 [ 369.181539][T15769] ? kstrtouint+0x6e/0xe0 [ 369.181593][T15769] ? __fget_files+0x2a/0x420 [ 369.181618][T15769] ? __fget_files+0x3a2/0x420 [ 369.181653][T15769] __sys_sendmmsg+0x273/0x4d0 [ 369.181684][T15769] ? __pfx___sys_sendmmsg+0x10/0x10 [ 369.181718][T15769] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 369.181754][T15769] ? ksys_write+0x242/0x270 [ 369.181783][T15769] ? __pfx_ksys_write+0x10/0x10 [ 369.181814][T15769] __x64_sys_sendmmsg+0xa0/0xc0 [ 369.181840][T15769] do_syscall_64+0x166/0x520 [ 369.181860][T15769] ? trace_irq_disable+0x3b/0x140 [ 369.181879][T15769] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.181899][T15769] ? clear_bhb_loop+0x70/0xc0 [ 369.181923][T15769] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.181952][T15769] RIP: 0033:0x7faa4279e159 [ 369.181971][T15769] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 369.181989][T15769] RSP: 002b:00007faa436ab028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 369.182012][T15769] RAX: ffffffffffffffda RBX: 00007faa42a25fa0 RCX: 00007faa4279e159 [ 369.182027][T15769] RDX: 0000000000000001 RSI: 0000200000004bc0 RDI: 0000000000000004 [ 369.182040][T15769] RBP: 00007faa436ab090 R08: 0000000000000000 R09: 0000000000000000 [ 369.182052][T15769] R10: 0000000000000014 R11: 0000000000000246 R12: 0000000000000001 [ 369.182065][T15769] R13: 00007faa42a26038 R14: 00007faa42a25fa0 R15: 00007ffec6a6e888 [ 369.182100][T15769] [ 370.003714][T15793] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2904'. [ 370.219442][T15799] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2906'. [ 370.219504][T15799] openvswitch: netlink: Missing key (keys=c0, expected=880) [ 370.530284][T15814] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2909'. [ 370.530314][T15814] block nbd2: Unsupported socket: should be TCP or UNIX. [ 370.955220][T15820] netlink: 'syz.0.2910': attribute type 3 has an invalid length. [ 370.955245][T15820] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2910'. [ 371.000165][T15822] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2911'. [ 371.000218][T15822] openvswitch: netlink: Missing key (keys=c0, expected=880) [ 371.006220][ T5275] 8021q: adding VLAN 0 to HW filter on device eth2 [ 371.049059][T15825] FAULT_INJECTION: forcing a failure. [ 371.049059][T15825] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 371.049092][T15825] CPU: 1 UID: 0 PID: 15825 Comm: syz.1.2912 Not tainted syzkaller #0 PREEMPT(full) [ 371.049114][T15825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 371.049126][T15825] Call Trace: [ 371.049135][T15825] [ 371.049144][T15825] dump_stack_lvl+0xe8/0x150 [ 371.049188][T15825] should_fail_ex+0x410/0x560 [ 371.049217][T15825] _copy_from_iter+0x1d3/0x1660 [ 371.049251][T15825] ? alloc_pages_noprof+0x140/0x2b0 [ 371.049277][T15825] ? __pfx__copy_from_iter+0x10/0x10 [ 371.049302][T15825] ? __sk_mem_schedule+0x7b/0xf0 [ 371.049335][T15825] ? sk_msg_alloc+0xa53/0xb00 [ 371.049481][T15825] sk_msg_memcopy_from_iter+0x35e/0x700 [ 371.049520][T15825] espintcp_sendmsg+0x46b/0x730 [ 371.049607][T15825] ? __pfx_espintcp_sendmsg+0x10/0x10 [ 371.049642][T15825] ? sock_rps_record_flow+0x19/0x350 [ 371.049675][T15825] ? inet_sendmsg+0x298/0x320 [ 371.049700][T15825] ? apparmor_socket_sendmsg+0x98/0x360 [ 371.049724][T15825] ? __pfx_inet_sendmsg+0x10/0x10 [ 371.049748][T15825] sock_sendmsg_nosec+0x10e/0x180 [ 371.049781][T15825] sock_write_iter+0x2de/0x3e0 [ 371.049813][T15825] ? __pfx_sock_write_iter+0x10/0x10 [ 371.049849][T15825] ? bpf_lsm_file_permission+0x9/0x20 [ 371.049879][T15825] ? security_file_permission+0x75/0x260 [ 371.049918][T15825] vfs_write+0x612/0xba0 [ 371.049958][T15825] ? __pfx_vfs_write+0x10/0x10 [ 371.049998][T15825] ? __fget_files+0x2a/0x420 [ 371.050035][T15825] ksys_write+0x150/0x270 [ 371.050066][T15825] ? __pfx_ksys_write+0x10/0x10 [ 371.050107][T15825] do_syscall_64+0x166/0x520 [ 371.050129][T15825] ? trace_irq_disable+0x3b/0x140 [ 371.050149][T15825] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.050177][T15825] ? clear_bhb_loop+0x70/0xc0 [ 371.050203][T15825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.050223][T15825] RIP: 0033:0x7faa4279e159 [ 371.050243][T15825] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 371.050261][T15825] RSP: 002b:00007faa4368a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 371.050283][T15825] RAX: ffffffffffffffda RBX: 00007faa42a26090 RCX: 00007faa4279e159 [ 371.050299][T15825] RDX: 000000000000fffd RSI: 0000200000000dc0 RDI: 0000000000000003 [ 371.050312][T15825] RBP: 00007faa4368a090 R08: 0000000000000000 R09: 0000000000000000 [ 371.050325][T15825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 371.050338][T15825] R13: 00007faa42a26128 R14: 00007faa42a26090 R15: 00007ffec6a6e888 [ 371.050371][T15825] [ 372.226819][T15858] can: request_module (can-proto-0) failed. [ 372.722705][T15882] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2920'. [ 372.722761][T15882] openvswitch: netlink: Missing key (keys=c0, expected=880) [ 373.493660][ T9183] hsr_slave_0: left promiscuous mode [ 373.508379][ T9183] hsr_slave_1: left promiscuous mode [ 373.509430][ T9183] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 373.509464][ T9183] batman_adv: batadv0: Removing interface: ipvlan2 [ 373.547719][T15889] netlink: Conntrack attr type has unexpected length (type=0, length=8, expected=0) [ 373.547756][T15889] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 373.651979][T15893] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2923'. [ 373.652032][T15893] openvswitch: netlink: Missing key (keys=c0, expected=880) [ 373.653369][ T9183] veth1_macvtap: left promiscuous mode [ 373.653414][ T9183] veth0_macvtap: left promiscuous mode [ 373.653515][ T9183] veth1_vlan: left allmulticast mode [ 373.653532][ T9183] veth1_vlan: left promiscuous mode [ 374.471761][T15563] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 374.555093][T15563] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 374.564620][T15563] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 374.593422][T15563] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 374.597102][T15563] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 374.663432][T15563] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 374.664265][T15563] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 374.701575][T15563] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 374.730145][T15909] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2925'. [ 374.730199][T15909] openvswitch: netlink: Missing key (keys=c0, expected=880) [ 374.851285][T15909] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2925'. [ 374.851311][T15909] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2925'. [ 374.851328][T15909] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2925'. [ 375.016381][T15931] openvswitch: netlink: nsh attr 251 is out of range max 3 [ 375.150958][T12096] tipc: Subscription rejected, illegal request [ 375.176471][T15563] 8021q: adding VLAN 0 to HW filter on device bond0 [ 375.206027][T15563] 8021q: adding VLAN 0 to HW filter on device team0 [ 375.259856][T12093] bridge0: port 1(bridge_slave_0) entered blocking state [ 375.259964][T12093] bridge0: port 1(bridge_slave_0) entered forwarding state [ 375.289134][ T91] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.289226][ T91] bridge0: port 2(bridge_slave_1) entered forwarding state [ 375.397066][ T9183] IPVS: stop unused estimator thread 0... [ 375.487258][T15948] netlink: 'syz.3.2931': attribute type 4 has an invalid length. [ 375.782922][T15958] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 375.941195][T15965] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 376.094931][T15973] netlink: 'syz.3.2936': attribute type 3 has an invalid length. [ 376.094954][T15973] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2936'. [ 376.235863][T15960] syzkaller1: entered promiscuous mode [ 376.235887][T15960] syzkaller1: entered allmulticast mode [ 376.467615][T15980] 8021q: VLANs not supported on gre0 [ 376.562707][T15986] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2940'. [ 376.660588][T15991] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2941'. [ 377.035788][T16003] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2943'. [ 377.035813][T16003] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 377.035832][T16003] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 377.067584][T16003] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 377.067609][T16003] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 377.306736][T15563] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 377.463211][T16023] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2946'. [ 377.551976][T16029] netlink: 'syz.0.2948': attribute type 3 has an invalid length. [ 377.551996][T16029] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2948'. [ 377.821738][T16040] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2950'. [ 377.944972][ T9176] tipc: Subscription rejected, illegal request [ 378.259031][T16061] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2956'. [ 378.646760][T15563] veth0_vlan: entered promiscuous mode [ 378.676821][T16072] netlink: 'syz.3.2959': attribute type 3 has an invalid length. [ 379.631572][ T9173] tipc: Subscription rejected, illegal request [ 381.694083][T16100] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2964'. [ 381.694143][T16100] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2964'. [ 381.753243][T16101] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2964'. [ 381.753280][T16101] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2964'. [ 381.769510][T15563] veth1_vlan: entered promiscuous mode [ 381.825702][T16100] hsr1: Slave A (erspan0) is not up; please bring it up to get a fully working HSR network [ 381.825728][T16100] hsr1: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network [ 381.943695][T16111] FAULT_INJECTION: forcing a failure. [ 381.943695][T16111] name failslab, interval 1, probability 0, space 0, times 0 [ 381.943728][T16111] CPU: 1 UID: 0 PID: 16111 Comm: syz.2.2968 Not tainted syzkaller #0 PREEMPT(full) [ 381.943750][T16111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 381.943762][T16111] Call Trace: [ 381.943770][T16111] [ 381.943780][T16111] dump_stack_lvl+0xe8/0x150 [ 381.943813][T16111] should_fail_ex+0x410/0x560 [ 381.943838][T16111] should_failslab+0xa8/0x100 [ 381.943863][T16111] __kvmalloc_node_noprof+0x176/0x820 [ 381.943884][T16111] ? security_capable+0x7e/0x2c0 [ 381.943908][T16111] ? bpf_check+0x15a9/0x2e10 [ 381.943926][T16111] ? bpf_check+0x15a9/0x2e10 [ 381.943953][T16111] bpf_check+0x15a9/0x2e10 [ 381.943985][T16111] ? ktime_get_with_offset+0x93/0x2d0 [ 381.944010][T16111] ? __pfx_bpf_check+0x10/0x10 [ 381.944035][T16111] ? bpf_obj_name_cpy+0x194/0x1e0 [ 381.944066][T16111] bpf_prog_load+0x14d6/0x1c20 [ 381.944100][T16111] ? __pfx_bpf_prog_load+0x10/0x10 [ 381.944144][T16111] __sys_bpf+0xd0d/0xd90 [ 381.944175][T16111] ? __pfx___sys_bpf+0x10/0x10 [ 381.944206][T16111] ? __fget_files+0x2a/0x420 [ 381.944247][T16111] ? ksys_write+0x242/0x270 [ 381.944277][T16111] ? __pfx_ksys_write+0x10/0x10 [ 381.944308][T16111] __x64_sys_bpf+0xba/0xd0 [ 381.944339][T16111] do_syscall_64+0x166/0x520 [ 381.944361][T16111] ? trace_irq_disable+0x3b/0x140 [ 381.944379][T16111] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.944404][T16111] ? clear_bhb_loop+0x70/0xc0 [ 381.944428][T16111] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.944448][T16111] RIP: 0033:0x7f318379e159 [ 381.944467][T16111] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 381.944484][T16111] RSP: 002b:00007f3184718028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 381.944506][T16111] RAX: ffffffffffffffda RBX: 00007f3183a25fa0 RCX: 00007f318379e159 [ 381.944521][T16111] RDX: 0000000000000094 RSI: 00002000000002c0 RDI: 0000000000000005 [ 381.944535][T16111] RBP: 00007f3184718090 R08: 0000000000000000 R09: 0000000000000000 [ 381.944548][T16111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 381.944561][T16111] R13: 00007f3183a26038 R14: 00007f3183a25fa0 R15: 00007ffcf8165868 [ 381.944589][T16111] [ 381.976418][T16108] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2966'. [ 381.976444][T16108] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2966'. [ 382.186261][T16112] bridge0: left promiscuous mode [ 382.186284][T16112] bridge0: left allmulticast mode [ 382.193407][T16112] vlan0: left promiscuous mode [ 382.196274][T16112] macsec0: left promiscuous mode [ 382.207037][T16112] veth5: left allmulticast mode [ 382.216937][T16112] bond3: left promiscuous mode [ 382.216959][T16112] bridge2: left promiscuous mode [ 382.219026][T16112] ip6tnl1: left allmulticast mode [ 382.219652][T16112] gre2: left promiscuous mode [ 382.220519][T16112] veth7: left allmulticast mode [ 382.220754][T16112] bridge3: left promiscuous mode [ 382.220769][T16112] bridge3: left allmulticast mode [ 382.339285][T15563] veth0_macvtap: entered promiscuous mode [ 382.344921][T15563] veth1_macvtap: entered promiscuous mode [ 382.398983][T15563] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 382.433061][T15563] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 382.488452][ T9176] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.490995][T12106] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.491042][T12106] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.491075][T12106] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.623714][T16133] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2971'. [ 382.858676][ T91] tipc: Subscription rejected, illegal request [ 382.881677][ T9183] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 382.881699][ T9183] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 382.970860][ T9183] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 382.970880][ T9183] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 382.990534][T16136] netlink: 'syz.2.2975': attribute type 3 has an invalid length. [ 383.176523][T16145] tipc: Started in network mode [ 383.176545][T16145] tipc: Node identity 1001001, cluster identity 4711 [ 383.176558][T16145] tipc: Node number set to 16781313 [ 383.266577][T16145] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2847'. [ 383.736668][T16172] bridge3: entered promiscuous mode [ 383.736690][T16172] bridge3: entered allmulticast mode [ 383.802832][ T52] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 383.819144][T16175] netlink: 'syz.3.2990': attribute type 3 has an invalid length. [ 383.820261][ T52] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 383.821029][ T52] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 383.822506][ T52] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 383.824068][ T52] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 384.505839][T16197] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2994'. [ 384.588503][T16205] netlink: 'syz.0.2997': attribute type 8 has an invalid length. [ 384.769169][T16213] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2998'. [ 384.797658][T16211] netlink: 'syz.0.3000': attribute type 3 has an invalid length. [ 385.308513][T16228] FAULT_INJECTION: forcing a failure. [ 385.308513][T16228] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 385.308554][T16228] CPU: 1 UID: 0 PID: 16228 Comm: syz.4.3007 Not tainted syzkaller #0 PREEMPT(full) [ 385.308576][T16228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 385.308588][T16228] Call Trace: [ 385.308596][T16228] [ 385.308604][T16228] dump_stack_lvl+0xe8/0x150 [ 385.308636][T16228] should_fail_ex+0x410/0x560 [ 385.308661][T16228] _copy_to_user+0x31/0xb0 [ 385.308685][T16228] br_dev_siocdevprivate+0x676/0x16b0 [ 385.308806][T16228] ? __pfx_br_dev_siocdevprivate+0x10/0x10 [ 385.308831][T16228] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 385.308862][T16228] ? __mutex_lock+0x1096/0x1550 [ 385.308885][T16228] ? __mutex_lock+0x5d4/0x1550 [ 385.308906][T16228] ? dev_ioctl+0x83c/0x1150 [ 385.308977][T16228] ? __pfx___mutex_lock+0x10/0x10 [ 385.308995][T16228] ? full_name_hash+0x92/0xe0 [ 385.309025][T16228] dev_ifsioc+0xb56/0x1360 [ 385.309051][T16228] dev_ioctl+0x84c/0x1150 [ 385.309073][T16228] sock_ioctl+0x753/0x7e0 [ 385.309102][T16228] ? __pfx_sock_ioctl+0x10/0x10 [ 385.309130][T16228] ? __fget_files+0x3a2/0x420 [ 385.309151][T16228] ? __fget_files+0x2a/0x420 [ 385.309179][T16228] ? bpf_lsm_file_ioctl+0x9/0x20 [ 385.309203][T16228] ? __pfx_sock_ioctl+0x10/0x10 [ 385.309227][T16228] __se_sys_ioctl+0xfc/0x170 [ 385.309247][T16228] do_syscall_64+0x166/0x520 [ 385.309265][T16228] ? trace_irq_disable+0x3b/0x140 [ 385.309287][T16228] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.309308][T16228] ? clear_bhb_loop+0x70/0xc0 [ 385.309329][T16228] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.309347][T16228] RIP: 0033:0x7f88e539e159 [ 385.309364][T16228] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 385.309379][T16228] RSP: 002b:00007f88e6203028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 385.309399][T16228] RAX: ffffffffffffffda RBX: 00007f88e5625fa0 RCX: 00007f88e539e159 [ 385.309412][T16228] RDX: 0000200000000080 RSI: 00000000000089f6 RDI: 0000000000000004 [ 385.309424][T16228] RBP: 00007f88e6203090 R08: 0000000000000000 R09: 0000000000000000 [ 385.309434][T16228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 385.309445][T16228] R13: 00007f88e5626038 R14: 00007f88e5625fa0 R15: 00007fff36f7af88 [ 385.309474][T16228] [ 385.838004][ T5618] Bluetooth: hci4: command tx timeout [ 385.846345][T16171] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.850305][T16171] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.850469][T16171] bridge_slave_0: entered allmulticast mode [ 385.860037][T16171] bridge_slave_0: entered promiscuous mode [ 385.871718][T16171] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.872651][T16171] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.872793][T16171] bridge_slave_1: entered allmulticast mode [ 385.887646][T16171] bridge_slave_1: entered promiscuous mode [ 385.942902][T16171] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 385.946671][T16171] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 386.002260][T16258] netlink: 'syz.2.3011': attribute type 3 has an invalid length. [ 386.005285][T16171] team0: Port device team_slave_0 added [ 386.023744][T16171] team0: Port device team_slave_1 added [ 386.069712][T16171] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 386.069730][T16171] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 386.069754][T16171] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 386.073616][T16171] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 386.073633][T16171] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 386.073657][T16171] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 386.363236][T16171] hsr_slave_0: entered promiscuous mode [ 386.368265][T16171] hsr_slave_1: entered promiscuous mode [ 386.373736][T16171] debugfs: 'hsr0' already exists in 'hsr' [ 386.373759][T16171] Cannot create hsr debugfs directory [ 386.806597][ T31] audit: type=1804 audit(1789690326.660:34): pid=16273 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.3015" name="/newroot/581/cgroup.controllers" dev="tmpfs" ino=3006 res=1 errno=0 [ 386.806788][ T31] audit: type=1800 audit(1789690326.660:35): pid=16273 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3015" name="cgroup.controllers" dev="tmpfs" ino=3006 res=0 errno=0 [ 387.263255][T16289] FAULT_INJECTION: forcing a failure. [ 387.263255][T16289] name failslab, interval 1, probability 0, space 0, times 0 [ 387.263287][T16289] CPU: 0 UID: 0 PID: 16289 Comm: syz.2.3020 Not tainted syzkaller #0 PREEMPT(full) [ 387.263308][T16289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 387.263318][T16289] Call Trace: [ 387.263326][T16289] [ 387.263334][T16289] dump_stack_lvl+0xe8/0x150 [ 387.263366][T16289] should_fail_ex+0x410/0x560 [ 387.263389][T16289] should_failslab+0xa8/0x100 [ 387.263412][T16289] __kmalloc_noprof+0xfe/0x720 [ 387.263428][T16289] ? rcu_is_watching+0x16/0xb0 [ 387.263449][T16289] ? tomoyo_realpath_from_path+0xef/0x640 [ 387.263471][T16289] ? tomoyo_realpath_from_path+0xef/0x640 [ 387.263514][T16289] tomoyo_realpath_from_path+0xef/0x640 [ 387.263544][T16289] ? tomoyo_path_number_perm+0x219/0x5f0 [ 387.263564][T16289] tomoyo_path_number_perm+0x246/0x5f0 [ 387.263583][T16289] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 387.263599][T16289] ? __lock_acquire+0x747/0x2de0 [ 387.263637][T16289] ? hook_file_ioctl+0x1f2/0x600 [ 387.263676][T16289] ? __fget_files+0x2a/0x420 [ 387.263704][T16289] ? __fget_files+0x2a/0x420 [ 387.263724][T16289] ? __fget_files+0x3a2/0x420 [ 387.263744][T16289] ? __fget_files+0x2a/0x420 [ 387.263770][T16289] security_file_ioctl+0xc3/0x2a0 [ 387.263791][T16289] __se_sys_ioctl+0x47/0x170 [ 387.263812][T16289] do_syscall_64+0x166/0x520 [ 387.263828][T16289] ? trace_irq_disable+0x3b/0x140 [ 387.263844][T16289] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.263865][T16289] ? clear_bhb_loop+0x70/0xc0 [ 387.263889][T16289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.263903][T16289] RIP: 0033:0x7f318379e159 [ 387.263920][T16289] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 387.263935][T16289] RSP: 002b:00007f3184718028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 387.263955][T16289] RAX: ffffffffffffffda RBX: 00007f3183a25fa0 RCX: 00007f318379e159 [ 387.263969][T16289] RDX: 0000200000000000 RSI: 0000000000008983 RDI: 0000000000000003 [ 387.263981][T16289] RBP: 00007f3184718090 R08: 0000000000000000 R09: 0000000000000000 [ 387.263992][T16289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 387.264003][T16289] R13: 00007f3183a26038 R14: 00007f3183a25fa0 R15: 00007ffcf8165868 [ 387.264033][T16289] [ 387.264075][T16289] ERROR: Out of memory at tomoyo_realpath_from_path. [ 387.282386][T16290] __nla_validate_parse: 2 callbacks suppressed [ 387.282406][T16290] netlink: 404 bytes leftover after parsing attributes in process `syz.4.3021'. [ 387.286257][T16286] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3018'. [ 387.481155][T16290] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3021'. [ 387.504381][T16290] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 387.605184][T16293] netlink: 'syz.2.3022': attribute type 10 has an invalid length. [ 387.628735][T16293] team0: Port device dummy0 added [ 387.633177][T16293] netlink: 'syz.2.3022': attribute type 10 has an invalid length. [ 387.653960][T16293] team0: Port device dummy0 removed [ 387.739659][T16171] bond0: (slave netdevsim1): Releasing backup interface [ 387.740628][T16171] netdevsim netdevsim1 netdevsim1 (unregistering): left promiscuous mode [ 387.740655][T16171] netdevsim netdevsim1 netdevsim1 (unregistering): left allmulticast mode [ 387.917658][ T5618] Bluetooth: hci4: command tx timeout [ 387.966793][ T31] audit: type=1804 audit(1789690327.820:36): pid=16305 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.3025" name="/newroot/604/cgroup.controllers" dev="tmpfs" ino=3131 res=1 errno=0 [ 387.968909][ T31] audit: type=1800 audit(1789690327.820:37): pid=16305 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3025" name="cgroup.controllers" dev="tmpfs" ino=3131 res=0 errno=0 [ 388.043422][T16171] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 388.057248][T16171] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 388.058262][T16171] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 388.061709][T16171] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 388.062625][T16171] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 388.066669][T16171] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 388.096855][T16171] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 388.115648][T16171] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 388.150247][T16313] erspan0: entered promiscuous mode [ 388.151314][T16309] erspan0: left promiscuous mode [ 388.261366][T16171] 8021q: adding VLAN 0 to HW filter on device bond0 [ 388.289748][T16171] 8021q: adding VLAN 0 to HW filter on device team0 [ 388.296555][ T91] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.296615][ T91] bridge0: port 1(bridge_slave_0) entered forwarding state [ 388.326117][T12096] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.326178][T12096] bridge0: port 2(bridge_slave_1) entered forwarding state [ 388.352352][T16317] macsec1: entered promiscuous mode [ 388.352368][T16317] macsec1: entered allmulticast mode [ 388.356983][T16317] openvswitch: netlink: IP tunnel attribute has 5393 unknown bytes. [ 389.013362][T16332] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3031'. [ 389.083625][T16337] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3032'. [ 389.294625][T16342] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3035'. [ 389.728523][T16350] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3037'. [ 389.950205][T16171] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 389.997889][ T5618] Bluetooth: hci4: command tx timeout [ 390.099887][ T31] audit: type=1804 audit(1789690329.960:38): pid=16376 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.3041" name="/newroot/14/cgroup.controllers" dev="tmpfs" ino=89 res=1 errno=0 [ 390.100095][ T31] audit: type=1800 audit(1789690329.960:39): pid=16376 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3041" name="cgroup.controllers" dev="tmpfs" ino=89 res=0 errno=0 [ 390.162825][T16171] veth0_vlan: entered promiscuous mode [ 390.204601][T16171] veth1_vlan: entered promiscuous mode [ 390.310177][T16379] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3042'. [ 390.313541][T16171] veth0_macvtap: entered promiscuous mode [ 390.344057][T16171] veth1_macvtap: entered promiscuous mode [ 390.415370][T16171] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 390.459193][T16171] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 390.571384][T12093] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.576120][T12106] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.576725][T12106] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.608034][T12093] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.733950][ T9183] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 390.733971][ T9183] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 390.845780][T12093] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 390.845802][T12093] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 390.875650][T16384] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3044'. [ 391.066643][T16387] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3045'. [ 391.066707][T16387] openvswitch: netlink: Missing key (keys=c0, expected=880) [ 391.434603][T16399] netlink: 'syz.1.2984': attribute type 8 has an invalid length. [ 391.662408][T16399] veth3: entered allmulticast mode [ 391.825231][ T52] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 391.838145][ T52] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 391.840506][ T52] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 391.847880][ T52] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 391.865169][ T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 392.081361][ T5618] Bluetooth: hci4: command tx timeout [ 392.801405][ T31] audit: type=1804 audit(1789690332.660:40): pid=16428 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.3052" name="/newroot/609/cgroup.controllers" dev="tmpfs" ino=3161 res=1 errno=0 [ 392.801539][ T31] audit: type=1800 audit(1789690332.660:41): pid=16428 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3052" name="cgroup.controllers" dev="tmpfs" ino=3161 res=0 errno=0 [ 393.004076][ T9183] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.235813][ T9183] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.372764][T16442] A link change request failed with some changes committed already. Interface vxcan1 may have been left with an inconsistent configuration, please check. [ 393.469668][ T9183] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.652544][ T9183] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.919530][ T5618] Bluetooth: hci1: command tx timeout [ 394.056394][T16455] netlink: 'syz.4.3059': attribute type 8 has an invalid length. [ 394.076779][T16455] __nla_validate_parse: 2 callbacks suppressed [ 394.076802][T16455] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3059'. [ 394.276203][T16455] veth3: entered allmulticast mode [ 394.294089][T16470] netlink: 'syz.1.3062': attribute type 1 has an invalid length. [ 394.376513][T16470] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3062'. [ 394.496242][T16479] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3063'. [ 394.828505][ T9183] bridge_slave_1: left allmulticast mode [ 394.828535][ T9183] bridge_slave_1: left promiscuous mode [ 394.828748][ T9183] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.835557][ T9183] bridge_slave_0: left allmulticast mode [ 394.835582][ T9183] bridge_slave_0: left promiscuous mode [ 394.835772][ T9183] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.588026][ T9183] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 395.591314][ T9183] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 395.593387][ T9183] bond0 (unregistering): Released all slaves [ 395.622853][ T9183] bond1 (unregistering): Released all slaves [ 395.641269][ T9183] bond2 (unregistering): Released all slaves [ 395.655021][ T9183] bond3 (unregistering): Released all slaves [ 395.665429][ T9183] bond4 (unregistering): Released all slaves [ 395.691430][T16405] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.691492][T16405] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.691581][T16405] bridge_slave_0: entered allmulticast mode [ 395.692634][T16405] bridge_slave_0: entered promiscuous mode [ 395.705401][T16405] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.705614][T16405] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.705768][T16405] bridge_slave_1: entered allmulticast mode [ 395.716016][T16405] bridge_slave_1: entered promiscuous mode [ 395.926065][T16517] FAULT_INJECTION: forcing a failure. [ 395.926065][T16517] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 395.926098][T16517] CPU: 1 UID: 0 PID: 16517 Comm: syz.0.3068 Not tainted syzkaller #0 PREEMPT(full) [ 395.926120][T16517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 395.926133][T16517] Call Trace: [ 395.926141][T16517] [ 395.926153][T16517] dump_stack_lvl+0xe8/0x150 [ 395.926187][T16517] should_fail_ex+0x410/0x560 [ 395.926215][T16517] _copy_from_iter+0x1d3/0x1660 [ 395.926238][T16517] ? __alloc_skb+0x27a/0x7a0 [ 395.926260][T16517] ? __alloc_skb+0x27a/0x7a0 [ 395.926277][T16517] ? __alloc_skb+0x27a/0x7a0 [ 395.926298][T16517] ? __pfx__copy_from_iter+0x10/0x10 [ 395.926318][T16517] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 395.926348][T16517] ? __alloc_skb+0x27a/0x7a0 [ 395.926368][T16517] ? __alloc_skb+0x27a/0x7a0 [ 395.926395][T16517] ? netlink_sendmsg+0x650/0xb40 [ 395.926423][T16517] ? skb_put+0x112/0x210 [ 395.926449][T16517] netlink_sendmsg+0x6c0/0xb40 [ 395.926486][T16517] ? __pfx_netlink_sendmsg+0x10/0x10 [ 395.926523][T16517] ? apparmor_socket_sendmsg+0x98/0x360 [ 395.926548][T16517] ? __pfx_netlink_sendmsg+0x10/0x10 [ 395.926575][T16517] sock_sendmsg_nosec+0x13a/0x180 [ 395.926607][T16517] ____sys_sendmsg+0x54e/0x850 [ 395.926638][T16517] ? __pfx_____sys_sendmsg+0x10/0x10 [ 395.926671][T16517] ? import_iovec+0x73/0xa0 [ 395.926695][T16517] ___sys_sendmsg+0x2a5/0x360 [ 395.926718][T16517] ? __lock_acquire+0x747/0x2de0 [ 395.926743][T16517] ? __pfx____sys_sendmsg+0x10/0x10 [ 395.926852][T16517] ? __fget_files+0x2a/0x420 [ 395.926877][T16517] ? __fget_files+0x3a2/0x420 [ 395.926913][T16517] __x64_sys_sendmsg+0x1b1/0x290 [ 395.926941][T16517] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 395.926987][T16517] do_syscall_64+0x166/0x520 [ 395.927009][T16517] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.927029][T16517] ? clear_bhb_loop+0x70/0xc0 [ 395.927054][T16517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.927074][T16517] RIP: 0033:0x7fb0c659e159 [ 395.927093][T16517] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 395.927110][T16517] RSP: 002b:00007fb0c74a9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 395.927131][T16517] RAX: ffffffffffffffda RBX: 00007fb0c6825fa0 RCX: 00007fb0c659e159 [ 395.927146][T16517] RDX: 0000000000028000 RSI: 0000200000006000 RDI: 0000000000000003 [ 395.927160][T16517] RBP: 00007fb0c74a9090 R08: 0000000000000000 R09: 0000000000000000 [ 395.927173][T16517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 395.927185][T16517] R13: 00007fb0c6826038 R14: 00007fb0c6825fa0 R15: 00007ffed68fbaf8 [ 395.927217][T16517] [ 395.999861][ T5618] Bluetooth: hci1: command tx timeout [ 396.222217][ T9183] ovs-s!: left promiscuous mode [ 396.432831][T16405] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 396.440537][T16531] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3070'. [ 396.441943][T16405] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 396.512915][ T9183] tipc: Disabling bearer [ 396.514995][ T9183] tipc: Left network mode [ 396.547940][T16405] team0: Port device team_slave_0 added [ 396.557001][T16405] team0: Port device team_slave_1 added [ 396.668095][T16526] syzkaller1: entered promiscuous mode [ 396.668144][T16526] syzkaller1: entered allmulticast mode [ 396.898335][T16405] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 396.898353][T16405] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 396.898376][T16405] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 396.900153][T16405] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 396.900168][T16405] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 396.900192][T16405] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 397.023877][T16550] netlink: 'syz.0.3073': attribute type 8 has an invalid length. [ 397.031963][T16547] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3074'. [ 397.058644][T16550] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3073'. [ 397.271827][T16550] veth9: entered allmulticast mode [ 397.362590][ T5275] 8021q: adding VLAN 0 to HW filter on device eth1 [ 397.529025][T16567] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3078'. [ 397.567588][T16405] hsr_slave_0: entered promiscuous mode [ 397.568614][T16405] hsr_slave_1: entered promiscuous mode [ 397.569324][T16405] debugfs: 'hsr0' already exists in 'hsr' [ 397.569343][T16405] Cannot create hsr debugfs directory [ 397.679992][T16571] 8021q: adding VLAN 0 to HW filter on device bond1 [ 398.045440][ T9183] ------------[ cut here ]------------ [ 398.045456][ T9183] wlan0: Failed check-sdata-in-driver check, flags: 0x0 [ 398.045472][ T9183] WARNING: net/mac80211/driver-ops.c:366 at drv_unassign_vif_chanctx+0x498/0x7d0, CPU#0: kworker/u8:14/9183 [ 398.072357][ T9183] Modules linked in: [ 398.076324][ T9183] CPU: 0 UID: 0 PID: 9183 Comm: kworker/u8:14 Not tainted syzkaller #0 PREEMPT(full) SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 398.086618][ T9183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 398.096889][ T9183] Workqueue: netns cleanup_net [ 398.102018][ T9183] RIP: 0010:drv_unassign_vif_chanctx+0x4e5/0x7d0 [ 398.109588][ T9183] Code: 8d 78 0a 00 00 48 8b 02 48 8d b0 20 01 00 00 48 85 c0 48 0f 44 f1 42 0f b6 44 3d 00 84 c0 0f 85 95 01 00 00 41 8b 16 48 89 df <67> 48 0f b9 3a e9 04 fd ff ff e8 ec 89 79 f6 90 0f 0b 90 e9 3d fe [ 398.129357][ T9183] RSP: 0018:ffffc90006457070 EFLAGS: 00010246 [ 398.135503][ T9183] RAX: 0000000000000000 RBX: ffffffff908c0f90 RCX: ffff888066cf1938 [ 398.138905][ T5618] Bluetooth: hci1: command tx timeout [ 398.149649][ T9183] RDX: 0000000000000000 RSI: ffff888066cf0120 RDI: ffffffff908c0f90 [ 398.157977][ T9183] RBP: 1ffff1100cd9e325 R08: ffffffff907a327f R09: 1ffffffff20f464f [ 398.167023][ T9183] R10: dffffc0000000000 R11: fffffbfff20f4650 R12: ffff888066cf2c70 [ 398.177185][ T9183] R13: ffff888066cf0ec0 R14: ffff888066cf1928 R15: dffffc0000000000 [ 398.185279][ T9183] FS: 0000000000000000(0000) GS:ffff888124cd1000(0000) knlGS:0000000000000000 [ 398.194391][ T9183] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 398.201188][ T9183] CR2: 00007f88e61556c8 CR3: 0000000022310000 CR4: 00000000003526f0 [ 398.209304][ T9183] Call Trace: [ 398.212637][ T9183] [ 398.215636][ T9183] ieee80211_assign_link_chanctx+0x234/0xcd0 [ 398.221872][ T9183] ? __pfx_ieee80211_assign_link_chanctx+0x10/0x10 [ 398.228467][ T9183] ? __pfx_clockevents_program_event+0x10/0x10 [ 398.234703][ T9183] __ieee80211_link_release_channel+0x3c6/0x610 [ 398.241144][ T9183] ? __pfx___ieee80211_link_release_channel+0x10/0x10 [ 398.248612][ T9183] ieee80211_teardown_sdata+0xc1/0x240 [ 398.254222][ T9183] ? __pfx_ieee80211_uninit+0x10/0x10 [ 398.259721][ T9183] unregister_netdevice_many_notify+0x1acd/0x2140 [ 398.267190][ T9183] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 398.274637][ T9183] ? call_rcu+0x64d/0x8b0 [ 398.279066][ T9183] ? rcu_is_watching+0x16/0xb0 [ 398.283986][ T9183] ? __up_read+0x29c/0x930 [ 398.288503][ T9183] unregister_netdevice_queue+0x2f5/0x340 [ 398.294381][ T9183] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 398.300727][ T9183] ? kernfs_remove_by_name_ns+0x101/0x140 [ 398.306556][ T9183] _cfg80211_unregister_wdev+0x156/0x5a0 [ 398.312475][ T9183] ieee80211_remove_interfaces+0x49c/0x6a0 [ 398.318552][ T9183] ? __pfx_autoremove_wake_function+0x10/0x10 [ 398.324716][ T9183] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 398.331221][ T9183] ieee80211_unregister_hw+0x5d/0x2c0 [ 398.336658][ T9183] mac80211_hwsim_del_radio+0x28a/0x4a0 [ 398.342514][ T9183] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 398.349127][ T9183] ? hwsim_exit_net+0xcc0/0xf50 [ 398.354052][ T9183] ? __local_bh_enable_ip+0xd6/0x140 [ 398.359483][ T9183] hwsim_exit_net+0xe91/0xf50 [ 398.365203][ T9183] ? hwsim_exit_net+0x326/0xf50 [ 398.370784][ T9183] ? __pfx_hwsim_exit_net+0x10/0x10 [ 398.376054][ T9183] ? __ip_vs_dev_cleanup_batch+0x238/0x260 [ 398.382083][ T9183] ops_undo_list+0x43d/0x8d0 [ 398.386762][ T9183] ? __pfx_ops_undo_list+0x10/0x10 [ 398.392015][ T9183] ? idr_destroy+0x227/0x290 [ 398.396761][ T9183] cleanup_net+0x572/0x810 [ 398.401402][ T9183] ? __pfx_cleanup_net+0x10/0x10 [ 398.406427][ T9183] ? rcu_is_watching+0x16/0xb0 [ 398.411300][ T9183] ? process_scheduled_works+0x97a/0x1630 [ 398.417114][ T9183] process_scheduled_works+0xc3d/0x1630 [ 398.422828][ T9183] ? __pfx_process_scheduled_works+0x10/0x10 [ 398.428944][ T9183] ? assign_work+0x3cf/0x5d0 [ 398.433613][ T9183] worker_thread+0xa47/0xfb0 [ 398.438328][ T9183] kthread+0x38b/0x480 [ 398.442451][ T9183] ? __pfx_worker_thread+0x10/0x10 [ 398.447710][ T9183] ? __pfx_kthread+0x10/0x10 [ 398.452388][ T9183] ret_from_fork+0x514/0xb70 [ 398.457126][ T9183] ? __pfx_ret_from_fork+0x10/0x10 [ 398.462354][ T9183] ? __switch_to+0xc89/0x1420 [ 398.467984][ T9183] ? __pfx_kthread+0x10/0x10 [ 398.473251][ T9183] ret_from_fork_asm+0x1a/0x30 [ 398.478219][ T9183] [ 398.481279][ T9183] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 398.488560][ T9183] CPU: 0 UID: 0 PID: 9183 Comm: kworker/u8:14 Not tainted syzkaller #0 PREEMPT(full) [ 398.498107][ T9183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 398.508179][ T9183] Workqueue: netns cleanup_net [ 398.512973][ T9183] Call Trace: [ 398.516269][ T9183] [ 398.519209][ T9183] vpanic+0x56d/0xa60 [ 398.523244][ T9183] ? __pfx__printk+0x10/0x10 [ 398.527851][ T9183] ? __pfx_vpanic+0x10/0x10 [ 398.532377][ T9183] ? is_bpf_text_address+0x292/0x2b0 [ 398.537681][ T9183] ? is_bpf_text_address+0x26/0x2b0 [ 398.542903][ T9183] panic+0xc5/0xd0 [ 398.546646][ T9183] ? __pfx_panic+0x10/0x10 [ 398.551083][ T9183] ? ret_from_fork_asm+0x1a/0x30 [ 398.556027][ T9183] __warn+0x315/0x4c0 [ 398.560010][ T9183] ? drv_unassign_vif_chanctx+0x498/0x7d0 [ 398.565746][ T9183] ? drv_unassign_vif_chanctx+0x498/0x7d0 [ 398.571469][ T9183] __report_bug+0x276/0x570 [ 398.576066][ T9183] ? drv_unassign_vif_chanctx+0x498/0x7d0 [ 398.581792][ T9183] ? __pfx___report_bug+0x10/0x10 [ 398.586820][ T9183] ? irqentry_exit+0x218/0x910 [ 398.591658][ T9183] ? drv_unassign_vif_chanctx+0x4ea/0x7d0 [ 398.597379][ T9183] ? drv_unassign_vif_chanctx+0x4e5/0x7d0 [ 398.603106][ T9183] report_bug_entry+0x19b/0x290 [ 398.607960][ T9183] ? drv_unassign_vif_chanctx+0x4e5/0x7d0 [ 398.613700][ T9183] ? drv_unassign_vif_chanctx+0x4ea/0x7d0 [ 398.619427][ T9183] handle_bug+0xce/0x200 [ 398.623676][ T9183] exc_invalid_op+0x1a/0x50 [ 398.628179][ T9183] asm_exc_invalid_op+0x1a/0x20 [ 398.633024][ T9183] RIP: 0010:drv_unassign_vif_chanctx+0x4e5/0x7d0 [ 398.639441][ T9183] Code: 8d 78 0a 00 00 48 8b 02 48 8d b0 20 01 00 00 48 85 c0 48 0f 44 f1 42 0f b6 44 3d 00 84 c0 0f 85 95 01 00 00 41 8b 16 48 89 df <67> 48 0f b9 3a e9 04 fd ff ff e8 ec 89 79 f6 90 0f 0b 90 e9 3d fe [ 398.659054][ T9183] RSP: 0018:ffffc90006457070 EFLAGS: 00010246 [ 398.665140][ T9183] RAX: 0000000000000000 RBX: ffffffff908c0f90 RCX: ffff888066cf1938 [ 398.673118][ T9183] RDX: 0000000000000000 RSI: ffff888066cf0120 RDI: ffffffff908c0f90 [ 398.681091][ T9183] RBP: 1ffff1100cd9e325 R08: ffffffff907a327f R09: 1ffffffff20f464f [ 398.689064][ T9183] R10: dffffc0000000000 R11: fffffbfff20f4650 R12: ffff888066cf2c70 [ 398.697032][ T9183] R13: ffff888066cf0ec0 R14: ffff888066cf1928 R15: dffffc0000000000 [ 398.705041][ T9183] ieee80211_assign_link_chanctx+0x234/0xcd0 [ 398.711055][ T9183] ? __pfx_ieee80211_assign_link_chanctx+0x10/0x10 [ 398.717576][ T9183] ? __pfx_clockevents_program_event+0x10/0x10 [ 398.723762][ T9183] __ieee80211_link_release_channel+0x3c6/0x610 [ 398.730031][ T9183] ? __pfx___ieee80211_link_release_channel+0x10/0x10 [ 398.736835][ T9183] ieee80211_teardown_sdata+0xc1/0x240 [ 398.742317][ T9183] ? __pfx_ieee80211_uninit+0x10/0x10 [ 398.747705][ T9183] unregister_netdevice_many_notify+0x1acd/0x2140 [ 398.754141][ T9183] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 398.760927][ T9183] ? call_rcu+0x64d/0x8b0 [ 398.765274][ T9183] ? rcu_is_watching+0x16/0xb0 [ 398.770044][ T9183] ? __up_read+0x29c/0x930 [ 398.774468][ T9183] unregister_netdevice_queue+0x2f5/0x340 [ 398.780218][ T9183] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 398.786466][ T9183] ? kernfs_remove_by_name_ns+0x101/0x140 [ 398.792194][ T9183] _cfg80211_unregister_wdev+0x156/0x5a0 [ 398.797852][ T9183] ieee80211_remove_interfaces+0x49c/0x6a0 [ 398.803682][ T9183] ? __pfx_autoremove_wake_function+0x10/0x10 [ 398.809774][ T9183] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 398.816133][ T9183] ieee80211_unregister_hw+0x5d/0x2c0 [ 398.821531][ T9183] mac80211_hwsim_del_radio+0x28a/0x4a0 [ 398.827090][ T9183] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 398.833161][ T9183] ? hwsim_exit_net+0xcc0/0xf50 [ 398.838018][ T9183] ? __local_bh_enable_ip+0xd6/0x140 [ 398.843308][ T9183] hwsim_exit_net+0xe91/0xf50 [ 398.847980][ T9183] ? hwsim_exit_net+0x326/0xf50 [ 398.852910][ T9183] ? __pfx_hwsim_exit_net+0x10/0x10 [ 398.858118][ T9183] ? __ip_vs_dev_cleanup_batch+0x238/0x260 [ 398.863922][ T9183] ops_undo_list+0x43d/0x8d0 [ 398.868515][ T9183] ? __pfx_ops_undo_list+0x10/0x10 [ 398.873625][ T9183] ? idr_destroy+0x227/0x290 [ 398.878219][ T9183] cleanup_net+0x572/0x810 [ 398.882656][ T9183] ? __pfx_cleanup_net+0x10/0x10 [ 398.887598][ T9183] ? rcu_is_watching+0x16/0xb0 [ 398.892361][ T9183] ? process_scheduled_works+0x97a/0x1630 [ 398.898078][ T9183] process_scheduled_works+0xc3d/0x1630 [ 398.903647][ T9183] ? __pfx_process_scheduled_works+0x10/0x10 [ 398.909641][ T9183] ? assign_work+0x3cf/0x5d0 [ 398.914236][ T9183] worker_thread+0xa47/0xfb0 [ 398.918847][ T9183] kthread+0x38b/0x480 [ 398.922906][ T9183] ? __pfx_worker_thread+0x10/0x10 [ 398.928011][ T9183] ? __pfx_kthread+0x10/0x10 [ 398.932593][ T9183] ret_from_fork+0x514/0xb70 [ 398.937174][ T9183] ? __pfx_ret_from_fork+0x10/0x10 [ 398.942284][ T9183] ? __switch_to+0xc89/0x1420 [ 398.946961][ T9183] ? __pfx_kthread+0x10/0x10 [ 398.951544][ T9183] ret_from_fork_asm+0x1a/0x30 [ 398.956320][ T9183] [ 398.959606][ T9183] Kernel Offset: disabled [ 398.963964][ T9183] Rebooting in 86400 seconds..