last executing test programs: 19.041410861s ago: executing program 2 (id=10820): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x26020480) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x3e, 0x0, 0x0, &(0x7f0000000080), 0x122}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) socketpair(0x1, 0x2, 0x2f4, &(0x7f0000000000)) r7 = socket(0x10, 0x3, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x448, 0x0, 0x2b8, 0xb0000010, 0x0, 0x5c8f0200, 0x378, 0x3a8, 0x3a8, 0x378, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'vlan1\x00', 'veth0_to_team\x00'}, 0x0, 0x248, 0x280, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve1\x00', {0xf1, 0x0, 0x33, 0x0, 0x0, 0x1, 0x7fffffff}}}, @common=@unspec=@limit={{0x48}, {0x10000000, 0x3}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x2, 0x1}, {0xffffffffffffffff, 0x1, 0x2}, {0x1, 0x2, 0x2}, 0x4f6, 0x5}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a8) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000000500)={'gre0\x00', &(0x7f0000000400)={'syztnl1\x00', 0x0, 0x10, 0x10, 0x4, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x7d, 0x2f, 0x0, @empty, @private}}}}) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x40) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000800)=@newlinkprop={0x38, 0x6c, 0x509d48233e3c307, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x100, 0x4}, [@IFLA_PROP_LIST={0x0, 0x34, 0x0, 0x1, [{0x0, 0x35, 'bridge_slave_1\x00'}, {0x0, 0x35, 'veth0_to_bond\x00'}, {0x0, 0x35, 'nr0\x00'}, {0x0, 0x35, 'veth1_to_bond\x00'}, {0x0, 0x35, 'veth1\x00'}, {0x0, 0x35, 'veth1_virt_wifi\x00'}, {0x2a, 0x35, 'team_slave_0\x00'}]}, @IFLA_MAP={0x0, 0xe, {0xd880, 0x0, 0x4, 0x400, 0x6, 0x4}}, @IFLA_LINKMODE={0x5, 0x11, 0x81}]}, 0x38}, 0x1, 0x0, 0x0, 0xc084}, 0x0) socket(0x400000000010, 0x3, 0x0) socket(0x1e, 0x4, 0x0) 18.724870327s ago: executing program 2 (id=10825): socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e}, 0x94) r0 = socket$inet(0x10, 0x3, 0x2006) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@TCA_RATE={0x6, 0x5, {0x4, 0x5}}]}, 0x2c}}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000001d00010021bdf000fedbdf2507000000", @ANYRES32, @ANYBLOB="80007e0a0a000200aaaaaaaaaa0c"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040000) close(0x4) unshare(0x20000400) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r4}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="000000008000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d5000/0x3000)=nil, 0x3000, 0x0, 0x13, r8, 0x3000) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)={@map=r6, r8, 0x5}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r7}, &(0x7f00000006c0), &(0x7f0000000700)=r6}, 0x20) sendmsg$inet(r5, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000900)}, 0x3) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) getpid() sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) 18.501382695s ago: executing program 2 (id=10830): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) writev(r0, &(0x7f0000019880)=[{&(0x7f0000000400)="fb", 0x1}, {&(0x7f00000197c0)="1902eb02d5e5f29e59e1a7caec33eb76d2430da474d87e367f6598d026438b65eda8341073b6752abdcee080c8e1e876b25227c37d7dd79886ce33f13e857c8eda1cecf6ac36c03dbf54e3cb5136da5a33fee76fb3113f8b6700e9e5fc006b8e", 0x60}], 0x2) unshare(0x8040480) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) unshare(0x2040400) syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa000030fffd00000000010000000000ac1414aa82020706bb8e129700004e22a973af1db41a250fdfd8812b64380838b7356828b99c7f363e2ea174", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c02ffff90780000"], 0x0) ioctl$BTRFS_IOC_BALANCE(0xffffffffffffffff, 0x5000940c, 0x200000000000000) bind$alg(r2, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(des3_ede-generic)\x00'}, 0x58) mmap(&(0x7f0000ff5000/0x4000)=nil, 0x4000, 0x0, 0x2010, r0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ad56000081000008000d00"/24, 0x18) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32], 0x48) socket(0x1e, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="6400000010000304fe0f00"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0018001c0000001f000000060001000000000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x148, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xfffffffe, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_PARMS={0x14, 0x1, {0x3f26, 0x7, 0x81, 0x9, 0xc, 0x14, 0x5}}]}}]}, 0x148}}, 0x4018810) 18.416147351s ago: executing program 1 (id=10832): bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x4, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802553a1718cd1ca140eb002500000800000000000000000000008500000028"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="180038aeff3def03c5020000beffffff0000000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x6c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x3c, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8}, @TCA_CAKE_FWMARK={0x8}, @TCA_CAKE_TARGET={0x8, 0x8, 0x5}, @TCA_CAKE_ACK_FILTER={0x8}, @TCA_CAKE_WASH={0x8}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x40}, @TCA_CAKE_INGRESS={0x8}]}}]}, 0x6c}}, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000000)=0x3) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000180)={0x700, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="020d000014000000000000000000000005000600000000000a0080ff00000000fc010000000000000000000000000000000000000000000005000500000000000a000000000000000000000000000000000000000000000000000000000000000800120002000200000000000000000030002b00e6"], 0xa0}}, 0x0) accept4(r4, &(0x7f0000000300)=@in={0x2, 0x0, @dev}, &(0x7f0000000180)=0x80, 0x100000) ioctl$PPPIOCGFLAGS1(r3, 0x8004745a, &(0x7f0000000200)) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100001"], 0xc0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=r8, @ANYBLOB="00000000000000002800128009000100766574680000000018000280140001000000", @ANYRES32=r8], 0x48}, 0x1, 0x0, 0x0, 0x48800}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x9, &(0x7f00000000c0)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit, @cb_func={0x18, 0x4, 0x4, 0x0, 0xfffffffffffffff9}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001180)=@newtaction={0x14, 0x30, 0x12f}, 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x0) connect$inet(r5, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r5, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) openat$pidfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x40000, 0x0) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r10, 0x84, 0x85, &(0x7f0000000880)={0x0, @in6={{0xa, 0x4e22, 0x1, @empty, 0x1f8}}, 0x1, 0xfe15}, 0x90) setsockopt$sock_int(r5, 0x1, 0xb, &(0x7f00000001c0)=0x4, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000001440)={0x1e, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="850000008c000000040000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1}, 0x94) 18.057842361s ago: executing program 1 (id=10836): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0900000008000000dd00000040"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000800000000000000000000000850000007b00000095"], 0x0}, 0x94) syz_open_procfs$namespace(0x0, 0x0) unshare(0x6a040000) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000001340)=ANY=[@ANYBLOB="0b00000008000000020000000900000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x10, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) 18.048240903s ago: executing program 2 (id=10837): socket$inet6(0xa, 0x2, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) poll(&(0x7f0000000300)=[{r0, 0x80}], 0x1, 0x101) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) socket$kcm(0x2, 0xa, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050000000900010073797a30000000002c000000030a01010000000000000000050000000900010073797a30000000000900030069087a300000"], 0xd4}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[], 0xcc}, 0x1, 0x0, 0x0, 0x880}, 0x0) 17.852541054s ago: executing program 0 (id=10840): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000080)="a2", 0x1}], 0x1}, 0x4006041) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=@base={0xf, 0x4, 0x4, 0x16, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip_vti0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=@can_newroute={0x14c, 0x18, 0x1, 0x0, 0x0, {0x1d, 0x1, 0x7}, [@CGW_MOD_AND={0x15, 0x1, {{{0x1, 0x0, 0x1, 0x1}, 0x3, 0x3, 0x0, 0x0, "6b994ea2e3dafa6f"}, 0x2}}, @CGW_CS_CRC8={0x11e, 0x6, {0x46, 0x1, 0x65, 0x0, 0x0, "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", 0x3, "5c8d586b2a88d81866930fca15c8a95d29e5b2ea"}}]}, 0x14c}}, 0x0) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000007040)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_int(r9, 0x29, 0x31, 0x0, &(0x7f00000004c0)) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0xd, &(0x7f0000000940)=ANY=[@ANYBLOB="18000000fcffffff0000000009000000850000002a00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="4400000010000d042abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002400128009000100626f6e640000000014000280050001000500000008000b00", @ANYRES32=r5, @ANYBLOB="3754a8e9c93820abdafee38f92a44da421e19cf37504b5110d7456c4262379782f071df91f867a023279350047faa994a392813cc4d412b3df4b8f5bc3b684519631d02743071c55d943b2df5d8c45ce28738b8860e8c1428d13aaeb911c3ab8b2a67c1459a558ba886361de24418d9937a6c9d5ecc9bec1e6fad287a8f831a980804d8fa765096bff5ac1c1fa35445157feefcb7b5f5030bd7004"], 0x44}}, 0x0) 17.680829596s ago: executing program 4 (id=10842): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000016001000071b48013d030100000000001f02000000000000bc26100000000000bf67200000000000160200000fff0700670200000a000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r2, 0x0) vmsplice(r1, &(0x7f00000007c0)=[{&(0x7f0000001a00)="ce", 0x1}], 0x1, 0x1) ioctl$PPPIOCGIDLE64(r1, 0x8010743f, &(0x7f0000000300)) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x0) splice(r0, 0x0, r4, 0x0, 0x66, 0xc) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r4) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$kcm(0x2a, 0x2, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x60, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x4}, @CTA_ZONE={0x6}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x100e}, @CTA_SEQ_ADJ_REPLY={0x14, 0x4, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xc}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}]}]}, 0x60}}, 0x0) sendmsg$kcm(r6, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0) setsockopt$inet6_tcp_TLS_RX(r5, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_256={{0x304}, "6bcceaece770b154", "143273066dc0ea0025b11cbe0785409204b66aa57ff4f0fa434b9b44597b282e", "b8b6bc15", "8b47fd3f36e5c9a0"}, 0x38) recvmsg(r6, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x20023) ioctl$sock_inet_SIOCGIFNETMASK(r6, 0x891b, 0x0) r8 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000001540)={&(0x7f0000000040)=@qipcrtr={0x2a, 0x1, 0x4000}, 0x80, 0x0}, 0x0) listen(r5, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r9, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r5}, 0x20) recvfrom(r5, 0x0, 0x0, 0x2041, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x31a39, 0x59629}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}, @IFLA_BOND_MIIMON={0x8}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x48014}, 0x240400c0) 17.390903574s ago: executing program 1 (id=10844): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x4, 0x4}, 0x48) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4020000000000006111df1800000000850000003b000000950a030000000000b88166989a2144c4935cd0a0ac5b95d50e314f5291c01024194fa3573d7c84920d37af3d720892ebc02aa51b"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x68001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) socket$inet(0x10, 0x3, 0x0) socket$kcm(0x2d, 0x2, 0x0) socket(0x2b, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0xfd6c) 17.224021573s ago: executing program 0 (id=10846): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000004a"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x10, 0x3, &(0x7f00000009c0)=@framed={{0x18, 0x2, 0x0, 0x4a}}, &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x103}, 0x94) 17.005186671s ago: executing program 0 (id=10848): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x200, 0x70bd28, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r2}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0xba01}, 0x0) 16.88786584s ago: executing program 1 (id=10849): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1, 0x18, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r0, 0x0, 0x0, 0x201}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 16.859376319s ago: executing program 3 (id=10850): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000002880)=@raw={'raw\x00', 0x3c1, 0x3, 0x13c0, 0x11e0, 0xc8, 0x8, 0x4000000, 0x5803, 0x12f0, 0x2e8, 0x2e8, 0x12f0, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1198, 0x11e0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5df11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f35a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x2, 0x3}}, @common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.cpu/syz1\x00', 0x0, {0xfffffffffffffffc}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x81, 0x8, 0xe, 'syz0\x00', {0x1}}}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x2000}, {0x28}}}}, 0x1420) 16.777365836s ago: executing program 2 (id=10851): sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="02"], 0x10}}, 0x40044) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r0, &(0x7f0000000200), 0x0) openat$cgroup_ro(r0, &(0x7f0000000100)='pids.current\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$rds(0x15, 0x5, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x8000000004) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r4, 0x7d4165c9) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100060c100000000000000fff00", 0x58}], 0x1) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) close(0x4) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0xa, 0x2, 0x73) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="16000000000000000100000006"], 0x48) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000040)={r5, 0x0, 0x20000000}, 0x20) 16.681082606s ago: executing program 1 (id=10852): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) getsockopt$IP_SET_OP_GET_FNAME(0xffffffffffffffff, 0x1, 0x53, &(0x7f00000020c0)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f0000002100)=0x2c) r2 = socket$kcm(0xa, 0x2, 0x73) setsockopt$sock_attach_bpf(r2, 0x29, 0x19, 0x0, 0xfcd8) sendto$inet6(r1, &(0x7f0000000900)="a45405bac2f418480ed970", 0xb, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000eda482"], 0x24}}, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000f40)={r3, &(0x7f0000000200), 0x0}, 0x20) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) r6 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r6, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x1}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f00000001c0)={0x8000042, 0x4}, 0x10) r7 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r7, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0xf) shutdown(r1, 0x1) 16.671097014s ago: executing program 0 (id=10853): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000180)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f00000013c0)=[{&(0x7f0000001240)="27050200340f3c000600002fb96dbcf706067a3e170012005f45f491bdd54ec5ff1144ee162fd4b8bf7256da82f601102c21880b00000000010040570000000600000000000000805db18fc083", 0x4d}, {&(0x7f0000001400)="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", 0xf36}], 0x2}, 0x9cdc2384056f48b8) 16.579850169s ago: executing program 4 (id=10854): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) socket$tipc(0x1e, 0x5, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) accept(r1, &(0x7f0000000200)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000280)=0x80) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) unshare(0x600) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000340)={@cgroup=r2, r2, 0x2f, 0x4, 0x4, @void, @value=r2}, 0x20) r3 = socket$tipc(0x1e, 0x2, 0x0) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000000300)) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000400)={'dummy0\x00'}) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x1024800, 0x4) 16.532915002s ago: executing program 1 (id=10855): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x24}, @NFTA_RANGE_OP={0x8}, @NFTA_RANGE_FROM_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, 'C'}]}, @NFTA_RANGE_TO_DATA={0x8, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x90}}, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000180)=0x3c9a, 0x4) sendmsg$can_raw(r1, &(0x7f0000000240)={&(0x7f0000000780)={0x1d, r2}, 0x10, &(0x7f0000000480)={&(0x7f0000000040)=@can={{0x3, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "11e97f5d0c1f526b"}, 0x10}, 0x1, 0x0, 0x0, 0x2}, 0x20044850) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r3}, 0x8) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x19, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xd}, 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r4}, 0x10) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) unshare(0x62040200) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$unix(0x1, 0x5, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r3) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r5, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)={0xcc, 0xd, 0x5, 0x101, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x1}, [@generic="0e0b196b6e8e64c279d67f53c5092f1cebe8c8e17802b80289ecafa709c8fb19980ad94e4f557988825e2425cd51649adfb53bb7f0bc3c7713c24c91d7c9a190da7e27c290ea6016341a5d26df3401dd4fc36cc1905fee64a58346ba6685c81b45154c5975f74eb1609d7b8f9820f23743db8b13cd5e515abcc54fe8baa318072d639b7a0bca6a713d7590092bb18c9206300f471c32b41555751393a8fee2a8d1db9c1b8a9f109d97d4ae762c3f", @typed={0x8, 0x2c, 0x0, 0x0, @fd=r5}]}, 0xcc}, 0x1, 0x0, 0x0, 0x404c001}, 0x4020018) socket$inet6(0xa, 0x5, 0x71) socketpair(0x28, 0x5, 0x2e8113f0, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@dellink={0x34, 0x11, 0x1, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x80000, 0x2008}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'ipvlan0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4048001}, 0x80) 16.532412917s ago: executing program 3 (id=10856): close(0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket(0x2, 0x80805, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4000041) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="3449a5fd5f7935910879aabb657409542a31f3682a6c0cf15c53e8f1c520226c494407c644976891e3af0d79aa2a40a32a8b541f01e70683b91332faec58db3ec0bb315b33202220136a70c8e19ffd54c557fdf6d7e427004edbd337f8c7be2ffb215675b44abe034c71", 0x6a}, {&(0x7f00000000c0)="7ecc9ef1d8b2c9298ff37df1e5a4f741d7b443f849f7f3722854fc7cbf6c74d2cb59a5ba5523be551c94cec61a286c06070480ad049a4acf2a84544728e56e49fbbe0de80469d96a7b431655b0d739e9ae89ceb08c5fd16e34e86e7b919977919b1f347ec1d5b7a0ae7aedfc53275dbd48a4ab2e33eaf6c7331cf2a234537e052d2bcc29dffb167ee972a5696cbea3cbbb5be36d585a4ad25441768dc24046bad857e525344754afe4dc76c7b7b74e45fdb97c99e48f5b8d2d", 0xb9}, {&(0x7f00000005c0)="2171d3f4d0127b0f70277a6549445ba17031b11d16329da6927fd9ba956e0aa9ef8a9d89a138da6b1f2bf35fd5467545e150bc47214652170f369b240e63fd728ab3e184fb651da6dface02d68e3f87e15f453eec5fb019cd2968e90e766afe89aa6026ba8f5785c5701b1d3642751671e1f69b7764bd904f88487e448c361f2842877225ee4ca0413e1e0be341b58723e2a126f8cfaa87a0c58f24edebebd386407c49efb3cd4d4903adf7a3bb77cb66e84360dada41612a91b2c44b5afce9bf8a20e", 0xc3}, {&(0x7f00000006c0)="ad3a0d6ecafb7dc2ef01ad880f0da6d5878f53046ba91b660d94d9ca95280f43d532787db61b98483dd159a9d89e87645ed05e88f8da6f3195c89ebdd1fe10eb76853c6b9a4ee9d4b6b0e44491e75f40db", 0x51}], 0x4, &(0x7f00000007c0)}}], 0x2, 0x8800) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='htcp', 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) ioctl$sock_inet_SIOCRTMSG(r1, 0x890d, &(0x7f0000000e80)={0x0, {0x2, 0x4e22, @private=0xa010100}, {0x2, 0x4e22, @empty}, {0x2, 0x4e20, @loopback}, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x10001, 0x5, 0x4}) sendmmsg$inet(r1, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="15b26f226e2966667482d50703b0a8d92ccd9e69d5cc4cb3d467a670b237a9225fb56c0f7ea725dee27c4bb43bb50c6748c83b71d59f0537405dfab648c096607340fac939a2efd31cbe2f8ca29c409e87ea0974b7bceff9afef5dffd691575f5115f2f961ad488e3386036913e98181a6034febaab853a3e928b9035b0e3a8e1cb393c70f6d0448970e0af2476f8b923ee09c19deca55d58f70e8eeff55dda6381cb96afe97196c0af0a8fd450a1447a1a521e2c211fb84cbcf4aebd31298972ec6be", 0xc3}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="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", 0x9fd}], 0x3}, 0x70060000}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="c9", 0x1}], 0x300}}], 0x3, 0x240080e4) 16.532094538s ago: executing program 0 (id=10857): socket$nl_rdma(0x10, 0x3, 0x14) (async) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000900)={&(0x7f0000000840), 0xc, &(0x7f00000008c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x38}, 0x1, 0x0, 0x0, 0x4042004}, 0x4040041) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="120000000300000000fcff040000000b00000000b45efe61eb3375819676577b38ba28e8de9a7baf10902c8545dc19478a2cd8514950", @ANYRES32, @ANYBLOB="0600008000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$nl_route(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000800)=[{&(0x7f0000000000)="8724866f", 0xfffffd8c}, {&(0x7f00000005c0)="d4a592321f13b69ef480a3be9b8838602315a4ede58e553cfb78a0d1bf042d7d4d233e5d9b39e8b1ab02138773e6ad7e0cb338a93bc62e0ab39e40dccdb697df763b0a78d463f26e4c6b7ec7f70b6a321f70aadabba27cc48e138f0e85aa04c21556dc25f349337b7a8669905263228ec44b6492816251e6fff79ba8058a13a743d5671a7d58cf1ea31f2dd55cdbba8fedd2277898af95aa8d40be2f65fdd2f4298ca876bd5c41c3d07c5b1947f26a5a477686c14507aad0947b976c03a6284c6c463aaed91ce006c25d845cdfcfab9efb175cd0bdb28772"}, {&(0x7f00000006c0)="6ef4946ec6254ad79f189249a095b78ad34152287ad0a886242f663ee4734ab962cc6331cd806573608e36291c0e029fd8f5475c735a8fb616c47d7a40c41633e455c3afece8b9ab17724ce4"}, {&(0x7f0000000740)="590dc38849df4c3aba26a5c95ac618c332c90498a366f0a1cc1935b1077be4016630a29fde3bf032a3fd58c8a1d09696b667985c9da2c1555182af6847d6911f4923db21222ca7fc1b0a11b30e7a20dc10c4dcf562d5a2266da629daa410ad988e69340e0593770bdb8542af7cdc7a8cdfcc73a101944eae973e5487ec1efc26e95f54dccaa760538681a3adf9"}], 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x20, &(0x7f0000000100)={&(0x7f00000001c0)=""/97, 0x61, 0x0, &(0x7f00000002c0)=""/200, 0xc8}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x14, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="1a04"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0xf, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x14, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="1a04"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0xf, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) accept$netrom(0xffffffffffffffff, &(0x7f0000000440)={{0x3, @rose}, [@default, @default, @null, @netrom, @bcast, @netrom, @rose, @default]}, &(0x7f00000004c0)=0x48) (async) r7 = accept$netrom(0xffffffffffffffff, &(0x7f0000000440)={{0x3, @rose}, [@default, @default, @null, @netrom, @bcast, @netrom, @rose, @default]}, &(0x7f00000004c0)=0x48) getsockopt$sock_buf(r7, 0x1, 0x1a, &(0x7f0000000500)=""/80, &(0x7f0000000580)=0x50) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r9, 0x0) unshare(0x20000400) pipe(&(0x7f0000000080)) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r10, &(0x7f0000000380)=[{&(0x7f0000002040)="162dd3cad75f87", 0x7}], 0x1, 0x6) (async) vmsplice(r10, &(0x7f0000000380)=[{&(0x7f0000002040)="162dd3cad75f87", 0x7}], 0x1, 0x6) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)=ANY=[@ANYBLOB="1400000010007c0000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000010900020073797a310000000008000a40fffffffc400000000e0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c000180050001"], 0xa4}}, 0x40) ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x110e22fff6) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x5, 0x0) (async) r11 = socket$kcm(0x29, 0x5, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) write$cgroup_pressure(r11, &(0x7f0000000140)={'full'}, 0xfffffdef) socket$packet(0x11, 0x3, 0x300) 16.46018152s ago: executing program 3 (id=10858): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) 16.385259511s ago: executing program 4 (id=10859): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x4, 0x4}, 0x48) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4020000000000006111df1800000000850000003b000000950a030000000000b88166989a2144c4935cd0a0ac5b95d50e314f5291c01024194fa3573d7c84920d37af3d720892ebc02aa51b"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x68001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) socket$inet(0x10, 0x3, 0x0) socket$kcm(0x2d, 0x2, 0x0) socket(0x2b, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0xfd6c) 16.157005389s ago: executing program 3 (id=10860): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x3ff, 0x2, 0x5}, 0x1c) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x28, r5, 0x1, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xffffff1c, 0x20}}}}, [@NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000090600000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="86feae88000000001c00128009000100766c616e000000000c000280060001000100000008000500", @ANYRES32=r8, @ANYBLOB], 0x44}}, 0x0) r9 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xffffffffffffffd5, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003601008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r10], 0x5c}}, 0x40) 16.042371482s ago: executing program 4 (id=10861): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x10000802, 0x80, 0x0, 0x40000}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000005200010004000000000000001c0000001400", @ANYRES16=r0], 0x28}, 0x1, 0xf0ffffff}, 0x0) 15.959434615s ago: executing program 4 (id=10862): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r1, @ANYBLOB="0000000002000000b70500000800000085000000c200000095"], &(0x7f0000000000)='syzkaller\x00', 0x9}, 0x94) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3400000000000000050000000900020073797a3200000000080004400000000009000100"], 0x34}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000000) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r3, &(0x7f0000000380)=@in4={0x21, 0x204b, 0x2, 0x10, {0x2, 0x4e21, @remote}}, 0x24) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000000)='y', 0x1}], 0x1) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000004c0)=ANY=[@ANYBLOB="140100002000010000000000fbdbdf25040117800c0003"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x38, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x14, 0x5, 0x0, 0x1, @meta={{0x9}, @val={0x4}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa0}}, 0x0) 15.829063054s ago: executing program 4 (id=10863): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0xac, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {0x0, 0x11}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff9]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x2}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xb}]}}]}, 0xac}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[], 0xb0}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x6, @private=0xa010100, 0x4e21, 0x2, 'sed\x00', 0x2, 0x0, 0x68}, 0x2c) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) socket$kcm(0x29, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) r10 = socket(0x2a, 0x1, 0x4) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1f}}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r11}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[], 0x2c}}, 0x0) r12 = socket(0x1d, 0x2, 0x6) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r12, 0x6a, 0x3, 0x0, &(0x7f0000000000)=0xfffffffffffffd68) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r12, 0x29, 0x20, &(0x7f0000000000)={@mcast1, 0x4, 0x1, 0xff, 0x1, 0x0, 0xc}, &(0x7f0000000080)=0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xf, 0x3, 0xffffffffffffffff, 0x1, 0x7c2}, 0x40000002}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x240400c0) sendmsg$NFT_MSG_GETSET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x1c, 0xa, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2004c891}, 0x4000814) 15.709152499s ago: executing program 0 (id=10864): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x40, 0x3, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_SYN_SENT2={0x8}, @CTA_TIMEOUT_TCP_CLOSE={0x8}, @CTA_TIMEOUT_TCP_RETRANS={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x40}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f00000022c0)="7800000018002507b9409b14ffff00000204be04020506050e020409430009003f0000000a0000000d0085a168d0bf46d32345653600648d04000b000209000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000402160005000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000300)='westwood', 0x8) socket$nl_sock_diag(0x10, 0x3, 0x4) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@ipv6_getaddrlabel={0x44, 0x1e, 0x492dfc465ae32a8d, 0x0, 0x0, {}, [@IFAL_ADDRESS={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x28}}, @IFAL_ADDRESS={0x14, 0x1, @mcast2}]}, 0x44}}, 0x0) recvmsg$can_bcm(r4, &(0x7f00000002c0)={&(0x7f0000000140)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/31, 0x1f}, {&(0x7f0000000c40)=""/4096, 0x1000}], 0x2, &(0x7f0000000280)=""/16, 0x10}, 0x101) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a32000000002c0003800800014000000000180003801400010076657468315f00005f626f6e64000000080002400000000064000000160a0101000b000000000000010000000900020073797a32000000000900010073797a3000000000300003802c0003801400010067656e657665300000000000000000001400010076657468315f"], 0x104}}, 0x0) 15.620651821s ago: executing program 2 (id=10865): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1400c011}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x24, 0x2, 0x3, 0x101, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x15}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x9}]}, 0x24}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0x4c}}, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$RDS_RECVERR(r2, 0x114, 0x5, &(0x7f00000001c0), 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, 0x0, 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200e19}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1200000009000000040000000200000004000000", @ANYRES32, @ANYBLOB="000000000000100000ff00000000000000000000381f2055f4ba93c755b918652427b47b", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r3, &(0x7f0000000040)}, 0x20) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100}, 0x95) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000850000005000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7020000040000008500000086000000bf91000000000000b7020000010000008500000085000000b70000000000008095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r6}, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) r8 = socket$inet_sctp(0x2, 0x5, 0x84) r9 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r10, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r10, 0x0) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r8, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x6}, 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) 15.615442089s ago: executing program 3 (id=10866): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000018000000000080"], 0x50) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x10000802, 0x80, 0x0, 0x40000}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000005200010004000000000000001c0000001400", @ANYRES16=r0], 0x28}}, 0x0) 15.517316709s ago: executing program 3 (id=10867): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000010c0)={'batadv_slave_1\x00', 0x0}) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r3, 0x0, 0x17, &(0x7f0000000180)=0x6, 0x4) (async) setsockopt$inet_int(r3, 0x0, 0x17, &(0x7f0000000140)=0x30, 0x4) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="180000005600050029bd7000fedbdf2507000010", @ANYRES32=r2], 0x18}, 0x1, 0x0, 0x0, 0x14}, 0x20040044) 1.103701144s ago: executing program 32 (id=10855): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x24}, @NFTA_RANGE_OP={0x8}, @NFTA_RANGE_FROM_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, 'C'}]}, @NFTA_RANGE_TO_DATA={0x8, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x90}}, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000180)=0x3c9a, 0x4) sendmsg$can_raw(r1, &(0x7f0000000240)={&(0x7f0000000780)={0x1d, r2}, 0x10, &(0x7f0000000480)={&(0x7f0000000040)=@can={{0x3, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "11e97f5d0c1f526b"}, 0x10}, 0x1, 0x0, 0x0, 0x2}, 0x20044850) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r3}, 0x8) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x19, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xd}, 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r4}, 0x10) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) unshare(0x62040200) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$unix(0x1, 0x5, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r3) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r5, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)={0xcc, 0xd, 0x5, 0x101, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x1}, [@generic="0e0b196b6e8e64c279d67f53c5092f1cebe8c8e17802b80289ecafa709c8fb19980ad94e4f557988825e2425cd51649adfb53bb7f0bc3c7713c24c91d7c9a190da7e27c290ea6016341a5d26df3401dd4fc36cc1905fee64a58346ba6685c81b45154c5975f74eb1609d7b8f9820f23743db8b13cd5e515abcc54fe8baa318072d639b7a0bca6a713d7590092bb18c9206300f471c32b41555751393a8fee2a8d1db9c1b8a9f109d97d4ae762c3f", @typed={0x8, 0x2c, 0x0, 0x0, @fd=r5}]}, 0xcc}, 0x1, 0x0, 0x0, 0x404c001}, 0x4020018) socket$inet6(0xa, 0x5, 0x71) socketpair(0x28, 0x5, 0x2e8113f0, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@dellink={0x34, 0x11, 0x1, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x80000, 0x2008}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'ipvlan0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4048001}, 0x80) 573.591242ms ago: executing program 33 (id=10864): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x40, 0x3, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_SYN_SENT2={0x8}, @CTA_TIMEOUT_TCP_CLOSE={0x8}, @CTA_TIMEOUT_TCP_RETRANS={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x40}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f00000022c0)="7800000018002507b9409b14ffff00000204be04020506050e020409430009003f0000000a0000000d0085a168d0bf46d32345653600648d04000b000209000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000402160005000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000300)='westwood', 0x8) socket$nl_sock_diag(0x10, 0x3, 0x4) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@ipv6_getaddrlabel={0x44, 0x1e, 0x492dfc465ae32a8d, 0x0, 0x0, {}, [@IFAL_ADDRESS={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x28}}, @IFAL_ADDRESS={0x14, 0x1, @mcast2}]}, 0x44}}, 0x0) recvmsg$can_bcm(r4, &(0x7f00000002c0)={&(0x7f0000000140)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/31, 0x1f}, {&(0x7f0000000c40)=""/4096, 0x1000}], 0x2, &(0x7f0000000280)=""/16, 0x10}, 0x101) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a32000000002c0003800800014000000000180003801400010076657468315f00005f626f6e64000000080002400000000064000000160a0101000b000000000000010000000900020073797a32000000000900010073797a3000000000300003802c0003801400010067656e657665300000000000000000001400010076657468315f"], 0x104}}, 0x0) 353.194716ms ago: executing program 34 (id=10863): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0xac, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {0x0, 0x11}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff9]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x2}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xb}]}}]}, 0xac}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[], 0xb0}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x6, @private=0xa010100, 0x4e21, 0x2, 'sed\x00', 0x2, 0x0, 0x68}, 0x2c) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) socket$kcm(0x29, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) r10 = socket(0x2a, 0x1, 0x4) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1f}}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r11}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[], 0x2c}}, 0x0) r12 = socket(0x1d, 0x2, 0x6) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r12, 0x6a, 0x3, 0x0, &(0x7f0000000000)=0xfffffffffffffd68) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r12, 0x29, 0x20, &(0x7f0000000000)={@mcast1, 0x4, 0x1, 0xff, 0x1, 0x0, 0xc}, &(0x7f0000000080)=0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xf, 0x3, 0xffffffffffffffff, 0x1, 0x7c2}, 0x40000002}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x240400c0) sendmsg$NFT_MSG_GETSET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x1c, 0xa, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2004c891}, 0x4000814) 74.468732ms ago: executing program 35 (id=10865): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1400c011}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x24, 0x2, 0x3, 0x101, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x15}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x9}]}, 0x24}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0x4c}}, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$RDS_RECVERR(r2, 0x114, 0x5, &(0x7f00000001c0), 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, 0x0, 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200e19}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1200000009000000040000000200000004000000", @ANYRES32, @ANYBLOB="000000000000100000ff00000000000000000000381f2055f4ba93c755b918652427b47b", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r3, &(0x7f0000000040)}, 0x20) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100}, 0x95) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000850000005000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7020000040000008500000086000000bf91000000000000b7020000010000008500000085000000b70000000000008095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r6}, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) r8 = socket$inet_sctp(0x2, 0x5, 0x84) r9 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r10, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r10, 0x0) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r8, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x6}, 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) 0s ago: executing program 36 (id=10867): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000010c0)={'batadv_slave_1\x00', 0x0}) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r3, 0x0, 0x17, &(0x7f0000000180)=0x6, 0x4) (async) setsockopt$inet_int(r3, 0x0, 0x17, &(0x7f0000000140)=0x30, 0x4) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="180000005600050029bd7000fedbdf2507000010", @ANYRES32=r2], 0x18}, 0x1, 0x0, 0x0, 0x14}, 0x20040044) kernel console output (not intermixed with test programs): 759][ T5480] ipvlan1: left promiscuous mode [ 1045.013009][ T5480] macvtap0: left promiscuous mode [ 1045.053510][ T5480] macsec0: left promiscuous mode [ 1045.085800][ T5480] geneve0: left promiscuous mode [ 1045.103231][ T5480] geneve1: left promiscuous mode [ 1045.132103][ T5480] mac80211_hwsim hwsim141 wlan0: left promiscuous mode [ 1045.161171][ T5480] mac80211_hwsim hwsim142 wlan1: left promiscuous mode [ 1045.178892][ T5480] bond1: left promiscuous mode [ 1045.194082][ T5480] bond2: left promiscuous mode [ 1045.204181][ T5480] bond3: left promiscuous mode [ 1045.214300][ T5480] bond4: left promiscuous mode [ 1045.234547][ T5480] bond5: left promiscuous mode [ 1045.244615][ T5480] team1: left promiscuous mode [ 1045.265904][ T5480] team2: left promiscuous mode [ 1045.273509][ T5493] netlink: 'syz.2.10085': attribute type 12 has an invalid length. [ 1045.762848][ T5518] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1045.782425][ T5518] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1045.878029][ T5534] bridge0: entered promiscuous mode [ 1045.883497][ T5534] macsec1: entered promiscuous mode [ 1045.891566][ T5534] bridge0: port 3(macsec1) entered blocking state [ 1045.898423][ T5534] bridge0: port 3(macsec1) entered disabled state [ 1045.907471][ T5534] macsec1: entered allmulticast mode [ 1045.913844][ T5534] bridge0: entered allmulticast mode [ 1045.922657][ T5534] macsec1: left allmulticast mode [ 1045.928626][ T5534] bridge0: left allmulticast mode [ 1045.936122][ T5534] bridge0: left promiscuous mode [ 1046.018005][ T5518] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1046.044952][ T5518] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1046.080560][ T5545] lo speed is unknown, defaulting to 1000 [ 1046.210413][ T5518] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1046.225976][ T5518] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1046.356093][ T5518] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1046.377417][ T5518] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1046.387560][ T5557] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1046.409106][ T5558] __nla_validate_parse: 2 callbacks suppressed [ 1046.409124][ T5558] netlink: 34 bytes leftover after parsing attributes in process `syz.4.10104'. [ 1046.426270][ T5558] netlink: 34 bytes leftover after parsing attributes in process `syz.4.10104'. [ 1046.444940][ T5553] batadv_slave_1: entered promiscuous mode [ 1046.629941][ T5191] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 1046.715841][ T5191] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 1046.756559][ T5191] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 1046.765799][ T5566] netlink: 'syz.0.10107': attribute type 1 has an invalid length. [ 1046.774326][ T5191] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 1046.902168][ T5566] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1046.989270][ T5191] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 1047.003624][ T5191] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 1047.075715][ T5572] bond2: (slave geneve2): making interface the new active one [ 1047.084345][ T5572] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 1047.160682][ T5552] batadv_slave_1: left promiscuous mode [ 1047.177306][ T5194] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 1047.193836][ T5194] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 1047.202509][ T5194] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 1047.280532][ T5584] netlink: 'syz.2.10110': attribute type 5 has an invalid length. [ 1047.290245][ T5194] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 1047.335451][ T5194] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 1047.364180][ T5194] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 1047.673652][ T5594] netlink: 76 bytes leftover after parsing attributes in process `syz.0.10111'. [ 1047.753905][ T5605] netlink: 'syz.4.10113': attribute type 4 has an invalid length. [ 1047.838927][ T5606] netlink: 'syz.4.10113': attribute type 4 has an invalid length. [ 1048.006931][ T5595] lo speed is unknown, defaulting to 1000 [ 1048.973963][ T5630] netlink: 176 bytes leftover after parsing attributes in process `syz.2.10120'. [ 1051.293747][ T5598] lo speed is unknown, defaulting to 1000 [ 1051.409340][ T5153] Bluetooth: hci4: command 0x0406 tx timeout [ 1051.466346][ T5641] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1051.468162][ T5637] FAULT_INJECTION: forcing a failure. [ 1051.468162][ T5637] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1051.502020][ T5637] CPU: 0 UID: 0 PID: 5637 Comm: syz.0.10122 Not tainted syzkaller #0 PREEMPT(full) [ 1051.502047][ T5637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1051.502058][ T5637] Call Trace: [ 1051.502066][ T5637] [ 1051.502075][ T5637] dump_stack_lvl+0xe8/0x150 [ 1051.502102][ T5637] should_fail_ex+0x414/0x560 [ 1051.502131][ T5637] _copy_to_user+0x31/0xb0 [ 1051.502159][ T5637] bnep_get_connlist+0x106/0x270 [ 1051.502185][ T5637] ? __pfx_bnep_get_connlist+0x10/0x10 [ 1051.502210][ T5637] ? rep_movs_alternative+0x30/0x90 [ 1051.502238][ T5637] do_bnep_sock_ioctl+0x32d/0x670 [ 1051.502256][ T5637] ? kasan_quarantine_put+0xbb/0x1f0 [ 1051.502274][ T5637] ? __pfx_do_bnep_sock_ioctl+0x10/0x10 [ 1051.502301][ T5637] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1051.502335][ T5637] sock_do_ioctl+0xdc/0x300 [ 1051.502363][ T5637] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1051.502384][ T5637] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 1051.502420][ T5637] sock_ioctl+0x576/0x790 [ 1051.502446][ T5637] ? __pfx_sock_ioctl+0x10/0x10 [ 1051.502469][ T5637] ? __fget_files+0x2a/0x420 [ 1051.502489][ T5637] ? __fget_files+0x3a0/0x420 [ 1051.502509][ T5637] ? __fget_files+0x2a/0x420 [ 1051.502532][ T5637] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1051.502551][ T5637] ? __pfx_sock_ioctl+0x10/0x10 [ 1051.502574][ T5637] __se_sys_ioctl+0xfc/0x170 [ 1051.502601][ T5637] do_syscall_64+0xec/0xf80 [ 1051.502621][ T5637] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1051.502638][ T5637] ? trace_irq_disable+0x37/0x100 [ 1051.502658][ T5637] ? clear_bhb_loop+0x60/0xb0 [ 1051.502680][ T5637] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1051.502696][ T5637] RIP: 0033:0x7f1caa78f749 [ 1051.502713][ T5637] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1051.502728][ T5637] RSP: 002b:00007f1cab576038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1051.502748][ T5637] RAX: ffffffffffffffda RBX: 00007f1caa9e5fa0 RCX: 00007f1caa78f749 [ 1051.502761][ T5637] RDX: 00002000000000c0 RSI: 00000000800442d2 RDI: 0000000000000005 [ 1051.502774][ T5637] RBP: 00007f1cab576090 R08: 0000000000000000 R09: 0000000000000000 [ 1051.502785][ T5637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1051.502796][ T5637] R13: 00007f1caa9e6038 R14: 00007f1caa9e5fa0 R15: 00007ffc833046c8 [ 1051.502827][ T5637] [ 1051.920754][ T5649] Cannot find add_set index 2 as target [ 1052.166173][ T5660] netlink: 'syz.1.10130': attribute type 21 has an invalid length. [ 1052.175434][ T5660] netlink: 36 bytes leftover after parsing attributes in process `syz.1.10130'. [ 1052.218482][ T5661] delete_channel: no stack [ 1052.489215][ T5669] syzkaller0: entered promiscuous mode [ 1052.494735][ T5669] syzkaller0: entered allmulticast mode [ 1052.861087][ T5692] netlink: 72 bytes leftover after parsing attributes in process `syz.2.10142'. [ 1053.206325][ T5703] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1053.363681][ T5709] lo speed is unknown, defaulting to 1000 [ 1053.878023][ T5738] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10153'. [ 1054.079044][ T5745] .30ªî{X¹¦: left allmulticast mode [ 1054.107741][ T5745] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1054.455802][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.463059][ T5754] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.10159'. [ 1054.522813][ T5756] FAULT_INJECTION: forcing a failure. [ 1054.522813][ T5756] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1054.543414][ T5754] netlink: ct family unspecified [ 1054.553757][ T5756] CPU: 1 UID: 0 PID: 5756 Comm: syz.1.10158 Not tainted syzkaller #0 PREEMPT(full) [ 1054.553784][ T5756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1054.553796][ T5756] Call Trace: [ 1054.553804][ T5756] [ 1054.553811][ T5756] dump_stack_lvl+0xe8/0x150 [ 1054.553841][ T5756] should_fail_ex+0x414/0x560 [ 1054.553876][ T5756] _copy_from_iter+0x1cd/0x1630 [ 1054.553909][ T5756] ? __pfx__copy_from_iter+0x10/0x10 [ 1054.553926][ T5756] ? sock_alloc_send_pskb+0x86b/0x980 [ 1054.553956][ T5756] ? __pfx__copy_from_iter+0x10/0x10 [ 1054.553978][ T5756] ? page_copy_sane+0x16a/0x280 [ 1054.554000][ T5756] copy_page_from_iter+0xdd/0x170 [ 1054.554024][ T5756] skb_copy_datagram_from_iter+0x306/0x720 [ 1054.554067][ T5756] tun_get_user+0x1683/0x3dc0 [ 1054.554109][ T5756] ? aa_file_perm+0x44c/0x1530 [ 1054.554133][ T5756] ? __pfx_tun_get_user+0x10/0x10 [ 1054.554157][ T5756] ? __lock_acquire+0x6b6/0x2cf0 [ 1054.554179][ T5756] ? kstrtoull+0x12f/0x1d0 [ 1054.554212][ T5756] ? ref_tracker_alloc+0x318/0x460 [ 1054.554228][ T5756] ? get_pid_task+0x20/0x1f0 [ 1054.554252][ T5756] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1054.554272][ T5756] ? tun_get+0x1c/0x2f0 [ 1054.554295][ T5756] ? tun_get+0x1c/0x2f0 [ 1054.554321][ T5756] ? tun_get+0x1c/0x2f0 [ 1054.554343][ T5756] ? tun_get+0x1c/0x2f0 [ 1054.554368][ T5756] tun_chr_write_iter+0x113/0x200 [ 1054.554393][ T5756] vfs_write+0x5c9/0xb30 [ 1054.554417][ T5756] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 1054.554439][ T5756] ? __pfx_vfs_write+0x10/0x10 [ 1054.554468][ T5756] ? __fget_files+0x2a/0x420 [ 1054.554498][ T5756] ksys_write+0x145/0x250 [ 1054.554518][ T5756] ? __pfx_ksys_write+0x10/0x10 [ 1054.554547][ T5756] do_syscall_64+0xec/0xf80 [ 1054.554569][ T5756] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1054.554586][ T5756] ? trace_irq_disable+0x37/0x100 [ 1054.554607][ T5756] ? clear_bhb_loop+0x60/0xb0 [ 1054.554628][ T5756] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1054.554646][ T5756] RIP: 0033:0x7f96faf8e1ff [ 1054.554664][ T5756] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 1054.554680][ T5756] RSP: 002b:00007f96fbd9e000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1054.554701][ T5756] RAX: ffffffffffffffda RBX: 00007f96fb1e5fa0 RCX: 00007f96faf8e1ff [ 1054.554716][ T5756] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8 [ 1054.554728][ T5756] RBP: 00007f96fbd9e090 R08: 0000000000000000 R09: 0000000000000000 [ 1054.554740][ T5756] R10: 000000000000fdef R11: 0000000000000293 R12: 0000000000000002 [ 1054.554752][ T5756] R13: 00007f96fb1e6038 R14: 00007f96fb1e5fa0 R15: 00007ffe1b098fb8 [ 1054.554783][ T5756] [ 1055.102302][ T5844] Bluetooth: hci3: command 0x0405 tx timeout [ 1055.445014][ T5770] FAULT_INJECTION: forcing a failure. [ 1055.445014][ T5770] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1055.487294][ T5770] CPU: 1 UID: 0 PID: 5770 Comm: syz.4.10163 Not tainted syzkaller #0 PREEMPT(full) [ 1055.487321][ T5770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1055.487333][ T5770] Call Trace: [ 1055.487341][ T5770] [ 1055.487349][ T5770] dump_stack_lvl+0xe8/0x150 [ 1055.487377][ T5770] should_fail_ex+0x414/0x560 [ 1055.487409][ T5770] _copy_to_user+0x31/0xb0 [ 1055.487432][ T5770] simple_read_from_buffer+0xe1/0x170 [ 1055.487459][ T5770] proc_fail_nth_read+0x1b3/0x220 [ 1055.487481][ T5770] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1055.487503][ T5770] ? rw_verify_area+0x2a6/0x4d0 [ 1055.487527][ T5770] ? reacquire_held_locks+0x104/0x190 [ 1055.487546][ T5770] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1055.487566][ T5770] vfs_read+0x200/0xa30 [ 1055.487582][ T5770] ? fdget_pos+0x247/0x320 [ 1055.487606][ T5770] ? __pfx___mutex_lock+0x10/0x10 [ 1055.487633][ T5770] ? __pfx_vfs_read+0x10/0x10 [ 1055.487651][ T5770] ? __fget_files+0x2a/0x420 [ 1055.487675][ T5770] ? __fget_files+0x3a0/0x420 [ 1055.487702][ T5770] ? __fget_files+0x2a/0x420 [ 1055.487731][ T5770] ksys_read+0x145/0x250 [ 1055.487751][ T5770] ? __pfx_ksys_read+0x10/0x10 [ 1055.487781][ T5770] do_syscall_64+0xec/0xf80 [ 1055.487801][ T5770] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1055.487818][ T5770] ? trace_irq_disable+0x37/0x100 [ 1055.487840][ T5770] ? clear_bhb_loop+0x60/0xb0 [ 1055.487862][ T5770] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1055.487880][ T5770] RIP: 0033:0x7fa8cbf8e15c [ 1055.487897][ T5770] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1055.487913][ T5770] RSP: 002b:00007fa8ccd70030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1055.487934][ T5770] RAX: ffffffffffffffda RBX: 00007fa8cc1e6090 RCX: 00007fa8cbf8e15c [ 1055.487947][ T5770] RDX: 000000000000000f RSI: 00007fa8ccd700a0 RDI: 0000000000000004 [ 1055.487959][ T5770] RBP: 00007fa8ccd70090 R08: 0000000000000000 R09: 0000000000000000 [ 1055.487971][ T5770] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1055.487982][ T5770] R13: 00007fa8cc1e6128 R14: 00007fa8cc1e6090 R15: 00007ffc64f24678 [ 1055.488013][ T5770] [ 1055.921117][ T5783] netlink: 108 bytes leftover after parsing attributes in process `syz.2.10169'. [ 1055.977773][ T5783] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10169'. [ 1056.183223][ T5806] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10176'. [ 1056.219499][ T5806] netlink: 11 bytes leftover after parsing attributes in process `syz.2.10176'. [ 1056.239008][ T5806] FAULT_INJECTION: forcing a failure. [ 1056.239008][ T5806] name failslab, interval 1, probability 0, space 0, times 0 [ 1056.275336][ T5806] CPU: 0 UID: 0 PID: 5806 Comm: syz.2.10176 Not tainted syzkaller #0 PREEMPT(full) [ 1056.275363][ T5806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1056.275374][ T5806] Call Trace: [ 1056.275382][ T5806] [ 1056.275391][ T5806] dump_stack_lvl+0xe8/0x150 [ 1056.275420][ T5806] should_fail_ex+0x414/0x560 [ 1056.275451][ T5806] should_failslab+0xa8/0x100 [ 1056.275474][ T5806] __kmalloc_cache_noprof+0x84/0x700 [ 1056.275494][ T5806] ? nfnetlink_rcv+0xf97/0x2590 [ 1056.275522][ T5806] nfnetlink_rcv+0xf97/0x2590 [ 1056.275571][ T5806] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1056.275606][ T5806] ? ref_tracker_free+0x63a/0x7d0 [ 1056.275649][ T5806] ? __netlink_deliver_tap+0x807/0x850 [ 1056.275673][ T5806] ? netlink_deliver_tap+0x2e/0x1b0 [ 1056.275712][ T5806] netlink_unicast+0x82f/0x9e0 [ 1056.275743][ T5806] ? __pfx_netlink_unicast+0x10/0x10 [ 1056.275766][ T5806] ? netlink_sendmsg+0x642/0xb30 [ 1056.275788][ T5806] ? skb_put+0x11b/0x210 [ 1056.275813][ T5806] netlink_sendmsg+0x805/0xb30 [ 1056.275846][ T5806] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1056.275871][ T5806] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1056.275895][ T5806] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1056.275912][ T5806] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1056.275937][ T5806] __sock_sendmsg+0x21c/0x270 [ 1056.275973][ T5806] ____sys_sendmsg+0x505/0x820 [ 1056.276000][ T5806] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1056.276030][ T5806] ? import_iovec+0x74/0xa0 [ 1056.276055][ T5806] ___sys_sendmsg+0x21f/0x2a0 [ 1056.276079][ T5806] ? __pfx____sys_sendmsg+0x10/0x10 [ 1056.276136][ T5806] ? __fget_files+0x2a/0x420 [ 1056.276156][ T5806] ? __fget_files+0x3a0/0x420 [ 1056.276187][ T5806] __x64_sys_sendmsg+0x19b/0x260 [ 1056.276212][ T5806] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1056.276243][ T5806] ? __pfx_ksys_write+0x10/0x10 [ 1056.276273][ T5806] do_syscall_64+0xec/0xf80 [ 1056.276294][ T5806] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1056.276310][ T5806] ? trace_irq_disable+0x37/0x100 [ 1056.276332][ T5806] ? clear_bhb_loop+0x60/0xb0 [ 1056.276353][ T5806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1056.276375][ T5806] RIP: 0033:0x7ffaaa18f749 [ 1056.276391][ T5806] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1056.276408][ T5806] RSP: 002b:00007ffaab015038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1056.276428][ T5806] RAX: ffffffffffffffda RBX: 00007ffaaa3e5fa0 RCX: 00007ffaaa18f749 [ 1056.276442][ T5806] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 1056.276454][ T5806] RBP: 00007ffaab015090 R08: 0000000000000000 R09: 0000000000000000 [ 1056.276466][ T5806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1056.276477][ T5806] R13: 00007ffaaa3e6038 R14: 00007ffaaa3e5fa0 R15: 00007fff69993328 [ 1056.276505][ T5806] [ 1056.277733][ T5807] lo speed is unknown, defaulting to 1000 [ 1057.174746][ T5835] tipc: Enabled bearer , priority 0 [ 1057.335737][ T5828] tipc: Resetting bearer [ 1057.444386][ T5843] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10185'. [ 1057.733301][ T5863] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10188'. [ 1057.744079][ T5863] netlink: 'syz.1.10188': attribute type 1 has an invalid length. [ 1057.755660][ T5863] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10188'. [ 1057.765233][ T5863] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 1060.324776][ T5828] tipc: Disabling bearer [ 1060.333629][ T5843] 8021q: VLANs not supported on nlmon0 [ 1060.389834][ T5969] tipc: Node number set to 3700751072 [ 1060.448109][ T5865] delete_channel: no stack [ 1060.509392][ T5878] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10192'. [ 1060.542550][ T5876] lo speed is unknown, defaulting to 1000 [ 1060.577863][ T5884] netlink: 'syz.2.10194': attribute type 23 has an invalid length. [ 1060.987408][ T5903] ipvlan0: entered promiscuous mode [ 1060.993907][ T5903] bridge0: port 3(ipvlan0) entered blocking state [ 1061.001390][ T5903] bridge0: port 3(ipvlan0) entered disabled state [ 1061.008597][ T5903] ipvlan0: entered allmulticast mode [ 1061.015848][ T5903] bridge0: entered allmulticast mode [ 1061.024759][ T5903] ipvlan0: left allmulticast mode [ 1061.030010][ T5903] bridge0: left allmulticast mode [ 1061.073494][ T5907] netlink: 'syz.3.10198': attribute type 3 has an invalid length. [ 1061.087280][ T5907] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10198'. [ 1061.244302][ T5914] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10201'. [ 1061.256545][ T5909] veth0_to_bridge: entered promiscuous mode [ 1061.267747][ T5908] veth0_to_bridge: left promiscuous mode [ 1061.297554][ T5919] FAULT_INJECTION: forcing a failure. [ 1061.297554][ T5919] name failslab, interval 1, probability 0, space 0, times 0 [ 1061.345179][ T5919] CPU: 1 UID: 0 PID: 5919 Comm: syz.1.10203 Not tainted syzkaller #0 PREEMPT(full) [ 1061.345207][ T5919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1061.345218][ T5919] Call Trace: [ 1061.345227][ T5919] [ 1061.345235][ T5919] dump_stack_lvl+0xe8/0x150 [ 1061.345263][ T5919] should_fail_ex+0x414/0x560 [ 1061.345295][ T5919] should_failslab+0xa8/0x100 [ 1061.345318][ T5919] __kmalloc_cache_noprof+0x84/0x700 [ 1061.345335][ T5919] ? __pfx_stack_trace_save+0x10/0x10 [ 1061.345360][ T5919] ? rtnl_newlink+0xfb/0x1c90 [ 1061.345393][ T5919] rtnl_newlink+0xfb/0x1c90 [ 1061.345414][ T5919] ? kasan_save_track+0x4f/0x80 [ 1061.345429][ T5919] ? kasan_save_track+0x3e/0x80 [ 1061.345445][ T5919] ? kasan_save_free_info+0x46/0x50 [ 1061.345465][ T5919] ? __kasan_slab_free+0x5c/0x80 [ 1061.345482][ T5919] ? kmem_cache_free+0x197/0x620 [ 1061.345498][ T5919] ? nlmon_xmit+0xb0/0x100 [ 1061.345518][ T5919] ? dev_hard_start_xmit+0x2cd/0x800 [ 1061.345540][ T5919] ? __dev_queue_xmit+0x144f/0x3100 [ 1061.345562][ T5919] ? __netlink_deliver_tap+0x5ad/0x850 [ 1061.345585][ T5919] ? netlink_deliver_tap+0x19c/0x1b0 [ 1061.345606][ T5919] ? netlink_unicast+0x7fa/0x9e0 [ 1061.345625][ T5919] ? netlink_sendmsg+0x805/0xb30 [ 1061.345648][ T5919] ? __pfx_rtnl_newlink+0x10/0x10 [ 1061.345665][ T5919] ? __x64_sys_sendmmsg+0xa0/0xc0 [ 1061.345685][ T5919] ? do_syscall_64+0xec/0xf80 [ 1061.345705][ T5919] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1061.345755][ T5919] ? kasan_quarantine_put+0xbb/0x1f0 [ 1061.345773][ T5919] ? lockdep_hardirqs_on+0x7b/0x110 [ 1061.345795][ T5919] ? kmem_cache_free+0x197/0x620 [ 1061.345811][ T5919] ? nlmon_xmit+0xb0/0x100 [ 1061.345841][ T5919] ? __lock_acquire+0x6b6/0x2cf0 [ 1061.345868][ T5919] ? __local_bh_enable_ip+0xd0/0x130 [ 1061.345887][ T5919] ? lockdep_hardirqs_on+0x7b/0x110 [ 1061.345906][ T5919] ? __dev_queue_xmit+0x280/0x3100 [ 1061.345927][ T5919] ? __local_bh_enable_ip+0xd0/0x130 [ 1061.345951][ T5919] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 1061.345985][ T5919] ? __pfx_rtnl_newlink+0x10/0x10 [ 1061.346004][ T5919] rtnetlink_rcv_msg+0x7cf/0xb70 [ 1061.346027][ T5919] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 1061.346046][ T5919] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1061.346063][ T5919] ? ref_tracker_free+0x63a/0x7d0 [ 1061.346081][ T5919] ? __asan_memcpy+0x40/0x70 [ 1061.346096][ T5919] ? __pfx_ref_tracker_free+0x10/0x10 [ 1061.346122][ T5919] netlink_rcv_skb+0x208/0x470 [ 1061.346146][ T5919] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1061.346167][ T5919] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1061.346200][ T5919] ? netlink_deliver_tap+0x2e/0x1b0 [ 1061.346230][ T5919] netlink_unicast+0x82f/0x9e0 [ 1061.346257][ T5919] ? __pfx_netlink_unicast+0x10/0x10 [ 1061.346279][ T5919] ? netlink_sendmsg+0x642/0xb30 [ 1061.346300][ T5919] ? skb_put+0x11b/0x210 [ 1061.346322][ T5919] netlink_sendmsg+0x805/0xb30 [ 1061.346353][ T5919] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1061.346379][ T5919] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1061.346410][ T5919] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1061.346427][ T5919] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1061.346451][ T5919] __sock_sendmsg+0x21c/0x270 [ 1061.346482][ T5919] ____sys_sendmsg+0x52d/0x820 [ 1061.346510][ T5919] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1061.346541][ T5919] ? import_iovec+0x74/0xa0 [ 1061.346564][ T5919] ___sys_sendmsg+0x21f/0x2a0 [ 1061.346588][ T5919] ? __pfx____sys_sendmsg+0x10/0x10 [ 1061.346616][ T5919] ? kstrtouint+0x6e/0xe0 [ 1061.346667][ T5919] ? __fget_files+0x2a/0x420 [ 1061.346687][ T5919] ? __fget_files+0x3a0/0x420 [ 1061.346718][ T5919] __sys_sendmmsg+0x227/0x430 [ 1061.346745][ T5919] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1061.346764][ T5919] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 1061.346811][ T5919] ? ksys_write+0x22a/0x250 [ 1061.346831][ T5919] ? __pfx_ksys_write+0x10/0x10 [ 1061.346855][ T5919] __x64_sys_sendmmsg+0xa0/0xc0 [ 1061.346879][ T5919] do_syscall_64+0xec/0xf80 [ 1061.346898][ T5919] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1061.346914][ T5919] ? trace_irq_disable+0x37/0x100 [ 1061.346933][ T5919] ? clear_bhb_loop+0x60/0xb0 [ 1061.346950][ T5919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1061.346964][ T5919] RIP: 0033:0x7f96faf8f749 [ 1061.346981][ T5919] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1061.346994][ T5919] RSP: 002b:00007f96fbd9e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1061.347012][ T5919] RAX: ffffffffffffffda RBX: 00007f96fb1e5fa0 RCX: 00007f96faf8f749 [ 1061.347024][ T5919] RDX: 0492492492492627 RSI: 00002000000000c0 RDI: 000000000000000e [ 1061.347036][ T5919] RBP: 00007f96fbd9e090 R08: 0000000000000000 R09: 0000000000000000 [ 1061.347046][ T5919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1061.347057][ T5919] R13: 00007f96fb1e6038 R14: 00007f96fb1e5fa0 R15: 00007ffe1b098fb8 [ 1061.347089][ T5919] [ 1061.846576][ T5917] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10202'. [ 1062.030098][ T5928] netlink: 207992 bytes leftover after parsing attributes in process `syz.2.10207'. [ 1062.062483][ T5928] netlink: 'syz.2.10207': attribute type 1 has an invalid length. [ 1062.085001][ T5928] netlink: 224 bytes leftover after parsing attributes in process `syz.2.10207'. [ 1062.356956][ T5934] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1062.641966][ T5951] bond3: up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms [ 1062.652512][ T5951] bond3: down delay (4) is not a multiple of miimon (100), value rounded to 0 ms [ 1062.741481][ T5955] netlink: 76 bytes leftover after parsing attributes in process `syz.2.10217'. [ 1062.764963][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1062.772308][ C1] bridge0: topology change detected, propagating [ 1062.779019][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1062.786292][ C1] bridge0: topology change detected, propagating [ 1062.904703][ T5971] netlink: 207992 bytes leftover after parsing attributes in process `syz.4.10220'. [ 1062.929356][ T5971] netlink: 'syz.4.10220': attribute type 1 has an invalid length. [ 1062.939038][ T5971] netlink: 224 bytes leftover after parsing attributes in process `syz.4.10220'. [ 1063.126177][ T5974] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10222'. [ 1063.143426][ T5974] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10222'. [ 1063.215557][ T5974] netlink: 'syz.1.10222': attribute type 5 has an invalid length. [ 1063.223715][ T5974] netlink: 'syz.1.10222': attribute type 6 has an invalid length. [ 1066.729066][ T5978] syzkaller0: entered promiscuous mode [ 1066.734610][ T5978] syzkaller0: entered allmulticast mode [ 1066.768837][ T5153] Bluetooth: hci5: command 0x0419 tx timeout [ 1067.136142][ T6014] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1067.289657][ T6021] netlink: 72 bytes leftover after parsing attributes in process `syz.0.10234'. [ 1067.589190][ T6039] netlink: 88 bytes leftover after parsing attributes in process `syz.2.10239'. [ 1067.623045][ T6039] netlink: 48 bytes leftover after parsing attributes in process `syz.2.10239'. [ 1067.691944][ T6039] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1067.704808][ T6039] syzkaller1: linktype set to 260 [ 1067.788069][ T6063] lo speed is unknown, defaulting to 1000 [ 1068.326740][ T6099] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1068.401543][ T6102] tap0: tun_chr_ioctl cmd 2148553947 [ 1068.422678][ T6102] tap0: tun_chr_ioctl cmd 2147767521 [ 1068.434251][ T6102] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10247'. [ 1068.452408][ T6102] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1068.461296][ T6102] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1068.610684][ T6102] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1068.635026][ T6102] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1069.141573][ T6142] netlink: 'syz.2.10259': attribute type 3 has an invalid length. [ 1069.142014][ T6143] netlink: 'syz.2.10259': attribute type 11 has an invalid length. [ 1069.149965][ T6142] netlink: 666 bytes leftover after parsing attributes in process `syz.2.10259'. [ 1069.385811][ T6151] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10262'. [ 1069.505375][ T6151] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10262'. [ 1069.658056][ T6155] lo speed is unknown, defaulting to 1000 [ 1069.874212][ T6174] netlink: 104 bytes leftover after parsing attributes in process `syz.1.10264'. [ 1069.906961][ T148] : left allmulticast mode [ 1069.932588][ T148] bond_slave_0: left allmulticast mode [ 1069.955465][ T148] bond_slave_1: left allmulticast mode [ 1069.995314][ T148] : left promiscuous mode [ 1069.999876][ T148] bond_slave_0: left promiscuous mode [ 1070.031559][ T148] bond_slave_1: left promiscuous mode [ 1070.062256][ T148] bridge0: port 3() entered disabled state [ 1070.122259][ T148] bridge_slave_1: left allmulticast mode [ 1070.157055][ T148] bridge_slave_1: left promiscuous mode [ 1070.162880][ T148] bridge0: port 2(bridge_slave_1) entered disabled state [ 1070.202889][ T148] bridge_slave_0: left allmulticast mode [ 1070.212031][ T148] bridge_slave_0: left promiscuous mode [ 1070.218377][ T148] bridge0: port 1(bridge_slave_0) entered disabled state [ 1070.340300][ T148] ip6gretap0 (unregistering): left promiscuous mode [ 1070.711519][ T148] team0: Port device geneve0 removed [ 1070.987485][ T148]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 1070.997532][ T148]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 1071.006958][ T148]  (unregistering): Released all slaves [ 1071.169731][ T148] bond1 (unregistering): Released all slaves [ 1071.329313][ T148] bond2 (unregistering): Released all slaves [ 1071.486554][ T148] bond0 (unregistering): Released all slaves [ 1071.638014][ T148] bond3 (unregistering): Released all slaves [ 1071.800598][ T148] bond4 (unregistering): Released all slaves [ 1071.885453][ T5153] Bluetooth: hci0: command 0x0c1a tx timeout [ 1071.937840][ T6191] lo speed is unknown, defaulting to 1000 [ 1072.069268][ T6201] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10271'. [ 1072.102939][ T6201] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10271'. [ 1072.264811][ T6210] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10275'. [ 1072.326526][ T6208] block nbd0: server does not support multiple connections per device. [ 1072.337028][ T6208] block nbd0: shutting down sockets [ 1072.460523][ T6217] netlink: 72 bytes leftover after parsing attributes in process `syz.3.10278'. [ 1072.847303][ T4595] wlan0: Trigger new scan to find an IBSS to join [ 1073.004281][ T6231] netlink: 'syz.4.10284': attribute type 12 has an invalid length. [ 1073.036784][ T6233] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10285'. [ 1073.138010][ T6233] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1073.195028][ T6233] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1073.393781][ T6239] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1073.413678][ T6239] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1073.442505][ T6233] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1073.465034][ T6233] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1073.569624][ T6239] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1073.583965][ T6239] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1073.693272][ T6233] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1073.704230][ T6233] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1073.731236][ T148] tipc: Left network mode [ 1073.861471][ T6239] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1073.872291][ T6239] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1073.901702][ T6254] lo speed is unknown, defaulting to 1000 [ 1073.907296][ T6260] __nla_validate_parse: 1 callbacks suppressed [ 1073.907314][ T6260] netlink: 92 bytes leftover after parsing attributes in process `syz.0.10295'. [ 1073.924059][ T6260] netlink: 32 bytes leftover after parsing attributes in process `syz.0.10295'. [ 1073.946975][ T6233] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1073.958539][ T6233] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1074.064083][ T6239] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1074.078727][ T5844] Bluetooth: hci3: link tx timeout [ 1074.079316][ T6239] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1074.085643][ T5844] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 1074.111584][ T6262] netlink: 40 bytes leftover after parsing attributes in process `syz.4.10296'. [ 1074.226684][ T6064] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 1074.243838][ T6064] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 1074.310031][ T6064] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1074.318543][ T6064] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1074.333027][ T6064] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 1074.343582][ T6064] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 1074.373947][ T6067] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 1074.382707][ T6067] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 1074.391519][ T6067] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1074.400197][ T6067] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1074.448886][ T6064] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 1074.457843][ T6064] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 1074.480854][T23546] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1074.489697][T23546] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1074.527927][T23546] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1074.550269][T23546] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1074.608141][ T6268] netlink: 'syz.3.10298': attribute type 2 has an invalid length. [ 1074.697534][ T6273] FAULT_INJECTION: forcing a failure. [ 1074.697534][ T6273] name failslab, interval 1, probability 0, space 0, times 0 [ 1074.744956][ T6273] CPU: 1 UID: 0 PID: 6273 Comm: syz.3.10300 Not tainted syzkaller #0 PREEMPT(full) [ 1074.744983][ T6273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1074.744995][ T6273] Call Trace: [ 1074.745003][ T6273] [ 1074.745011][ T6273] dump_stack_lvl+0xe8/0x150 [ 1074.745039][ T6273] should_fail_ex+0x414/0x560 [ 1074.745070][ T6273] should_failslab+0xa8/0x100 [ 1074.745093][ T6273] kmem_cache_alloc_noprof+0x88/0x710 [ 1074.745116][ T6273] ? __netlink_lookup+0xbd/0x8a0 [ 1074.745142][ T6273] ? skb_clone+0x212/0x3a0 [ 1074.745168][ T6273] skb_clone+0x212/0x3a0 [ 1074.745194][ T6273] __netlink_deliver_tap+0x404/0x850 [ 1074.745229][ T6273] ? netlink_deliver_tap+0x2e/0x1b0 [ 1074.745253][ T6273] netlink_deliver_tap+0x19c/0x1b0 [ 1074.745277][ T6273] netlink_unicast+0x7fa/0x9e0 [ 1074.745308][ T6273] ? __pfx_netlink_unicast+0x10/0x10 [ 1074.745336][ T6273] ? netlink_sendmsg+0x642/0xb30 [ 1074.745356][ T6273] ? skb_put+0x11b/0x210 [ 1074.745379][ T6273] netlink_sendmsg+0x805/0xb30 [ 1074.745408][ T6273] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1074.745433][ T6273] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1074.745455][ T6273] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1074.745471][ T6273] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1074.745494][ T6273] __sock_sendmsg+0x21c/0x270 [ 1074.745521][ T6273] ____sys_sendmsg+0x505/0x820 [ 1074.745547][ T6273] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1074.745576][ T6273] ? import_iovec+0x74/0xa0 [ 1074.745599][ T6273] ___sys_sendmsg+0x21f/0x2a0 [ 1074.745621][ T6273] ? __pfx____sys_sendmsg+0x10/0x10 [ 1074.745667][ T6273] ? __fget_files+0x2a/0x420 [ 1074.745685][ T6273] ? __fget_files+0x3a0/0x420 [ 1074.745714][ T6273] __x64_sys_sendmsg+0x19b/0x260 [ 1074.745738][ T6273] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1074.745767][ T6273] ? __pfx_ksys_write+0x10/0x10 [ 1074.745794][ T6273] do_syscall_64+0xec/0xf80 [ 1074.745815][ T6273] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1074.745831][ T6273] ? trace_irq_disable+0x37/0x100 [ 1074.745851][ T6273] ? clear_bhb_loop+0x60/0xb0 [ 1074.745872][ T6273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1074.745889][ T6273] RIP: 0033:0x7f843cd8f749 [ 1074.745908][ T6273] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1074.745924][ T6273] RSP: 002b:00007f843dc5d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1074.745954][ T6273] RAX: ffffffffffffffda RBX: 00007f843cfe5fa0 RCX: 00007f843cd8f749 [ 1074.745968][ T6273] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 1074.745981][ T6273] RBP: 00007f843dc5d090 R08: 0000000000000000 R09: 0000000000000000 [ 1074.745993][ T6273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1074.746004][ T6273] R13: 00007f843cfe6038 R14: 00007f843cfe5fa0 R15: 00007ffe47149898 [ 1074.746036][ T6273] [ 1075.153531][ T6277] syzkaller1: entered promiscuous mode [ 1075.205490][ T6277] syzkaller1: entered allmulticast mode [ 1075.393628][ T6285] @30ªî{X¹¦: left allmulticast mode [ 1075.491861][T23547] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1075.507640][T23547] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1075.522755][T23547] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1075.535879][ T6294] FAULT_INJECTION: forcing a failure. [ 1075.535879][ T6294] name failslab, interval 1, probability 0, space 0, times 0 [ 1075.575295][ T6294] CPU: 0 UID: 0 PID: 6294 Comm: syz.0.10307 Not tainted syzkaller #0 PREEMPT(full) [ 1075.575320][ T6294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1075.575333][ T6294] Call Trace: [ 1075.575340][ T6294] [ 1075.575350][ T6294] dump_stack_lvl+0xe8/0x150 [ 1075.575377][ T6294] should_fail_ex+0x414/0x560 [ 1075.575408][ T6294] should_failslab+0xa8/0x100 [ 1075.575430][ T6294] __kmalloc_cache_noprof+0x84/0x700 [ 1075.575450][ T6294] ? sctp_add_bind_addr+0x8c/0x370 [ 1075.575479][ T6294] sctp_add_bind_addr+0x8c/0x370 [ 1075.575507][ T6294] sctp_copy_local_addr_list+0x30b/0x4e0 [ 1075.575535][ T6294] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 1075.575559][ T6294] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1075.575580][ T6294] ? sctp_association_new+0x1894/0x25e0 [ 1075.575601][ T6294] ? sctp_v6_is_any+0x64/0x80 [ 1075.575630][ T6294] ? sctp_copy_one_addr+0x93/0x360 [ 1075.575657][ T6294] sctp_bind_addr_copy+0xb3/0x3c0 [ 1075.575682][ T6294] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1075.575708][ T6294] sctp_connect_new_asoc+0x2e0/0x690 [ 1075.575731][ T6294] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1075.575755][ T6294] ? __local_bh_enable_ip+0xd0/0x130 [ 1075.575767][ T6294] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1075.575778][ T6294] ? security_sctp_bind_connect+0x7e/0x2e0 [ 1075.575790][ T6294] sctp_sendmsg+0x155c/0x2840 [ 1075.575809][ T6294] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1075.575819][ T6294] ? aa_sk_perm+0x15f/0x920 [ 1075.575832][ T6294] ? aa_sk_perm+0x7ee/0x920 [ 1075.575846][ T6294] ? __pfx_aa_sk_perm+0x10/0x10 [ 1075.575859][ T6294] ? sock_rps_record_flow+0x19/0x410 [ 1075.575878][ T6294] ? inet_sendmsg+0x2f4/0x370 [ 1075.575893][ T6294] __sock_sendmsg+0x19c/0x270 [ 1075.575911][ T6294] __sys_sendto+0x3bd/0x520 [ 1075.575924][ T6294] ? __pfx___sys_sendto+0x10/0x10 [ 1075.575934][ T6294] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 1075.575954][ T6294] ? __fget_files+0x3a0/0x420 [ 1075.575972][ T6294] ? ksys_write+0x22a/0x250 [ 1075.575983][ T6294] ? __pfx_ksys_write+0x10/0x10 [ 1075.575995][ T6294] __x64_sys_sendto+0xde/0x100 [ 1075.576008][ T6294] do_syscall_64+0xec/0xf80 [ 1075.576020][ T6294] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1075.576029][ T6294] ? trace_irq_disable+0x37/0x100 [ 1075.576042][ T6294] ? clear_bhb_loop+0x60/0xb0 [ 1075.576054][ T6294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1075.576063][ T6294] RIP: 0033:0x7f1caa78f749 [ 1075.576075][ T6294] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1075.576084][ T6294] RSP: 002b:00007f1cab576038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1075.576096][ T6294] RAX: ffffffffffffffda RBX: 00007f1caa9e5fa0 RCX: 00007f1caa78f749 [ 1075.576103][ T6294] RDX: 0000000000000001 RSI: 0000200000000080 RDI: 0000000000000003 [ 1075.576110][ T6294] RBP: 00007f1cab576090 R08: 00002000000000c0 R09: 000000000000001c [ 1075.576117][ T6294] R10: 0000000004000050 R11: 0000000000000246 R12: 0000000000000002 [ 1075.576123][ T6294] R13: 00007f1caa9e6038 R14: 00007f1caa9e5fa0 R15: 00007ffc833046c8 [ 1075.576140][ T6294] [ 1075.576307][T23547] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1075.757234][ T6296] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10308'. [ 1075.889942][ T6070] wlan0: Trigger new scan to find an IBSS to join [ 1075.940337][ T148] hsr_slave_0: left promiscuous mode [ 1075.957422][ T148] hsr_slave_1: left promiscuous mode [ 1075.976973][ T148] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1076.127647][ T5153] Bluetooth: hci3: command 0x0405 tx timeout [ 1076.554580][ T6316] FAULT_INJECTION: forcing a failure. [ 1076.554580][ T6316] name failslab, interval 1, probability 0, space 0, times 0 [ 1076.625302][ T6316] CPU: 1 UID: 0 PID: 6316 Comm: syz.3.10315 Not tainted syzkaller #0 PREEMPT(full) [ 1076.625329][ T6316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1076.625341][ T6316] Call Trace: [ 1076.625350][ T6316] [ 1076.625358][ T6316] dump_stack_lvl+0xe8/0x150 [ 1076.625386][ T6316] should_fail_ex+0x414/0x560 [ 1076.625417][ T6316] should_failslab+0xa8/0x100 [ 1076.625440][ T6316] __kmalloc_noprof+0xdf/0x800 [ 1076.625459][ T6316] ? bpf_test_init+0x9f/0x150 [ 1076.625486][ T6316] bpf_test_init+0x9f/0x150 [ 1076.625513][ T6316] bpf_prog_test_run_flow_dissector+0x1e1/0x5c0 [ 1076.625544][ T6316] ? get_pid_task+0x20/0x1f0 [ 1076.625564][ T6316] ? get_pid_task+0x20/0x1f0 [ 1076.625585][ T6316] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 1076.625614][ T6316] ? __might_fault+0xb0/0x130 [ 1076.625650][ T6316] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 1076.625675][ T6316] bpf_prog_test_run+0x2c7/0x340 [ 1076.625702][ T6316] __sys_bpf+0x562/0x860 [ 1076.625726][ T6316] ? __pfx___sys_bpf+0x10/0x10 [ 1076.625744][ T6316] ? kmem_cache_free+0x197/0x620 [ 1076.625783][ T6316] ? ksys_write+0x1e1/0x250 [ 1076.625802][ T6316] ? __pfx_ksys_write+0x10/0x10 [ 1076.625827][ T6316] __x64_sys_bpf+0x7c/0x90 [ 1076.625846][ T6316] do_syscall_64+0xec/0xf80 [ 1076.625864][ T6316] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1076.625880][ T6316] ? trace_irq_disable+0x37/0x100 [ 1076.625898][ T6316] ? clear_bhb_loop+0x60/0xb0 [ 1076.625917][ T6316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1076.625933][ T6316] RIP: 0033:0x7f843cd8f749 [ 1076.625949][ T6316] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1076.625963][ T6316] RSP: 002b:00007f843dc5d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1076.625982][ T6316] RAX: ffffffffffffffda RBX: 00007f843cfe5fa0 RCX: 00007f843cd8f749 [ 1076.625995][ T6316] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 1076.626005][ T6316] RBP: 00007f843dc5d090 R08: 0000000000000000 R09: 0000000000000000 [ 1076.626016][ T6316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1076.626026][ T6316] R13: 00007f843cfe6038 R14: 00007f843cfe5fa0 R15: 00007ffe47149898 [ 1076.626054][ T6316] [ 1077.001745][ T148] team0 (unregistering): Port device team_slave_1 removed [ 1077.029285][ T6076] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1077.076486][ T148] team0 (unregistering): Port device team_slave_0 removed [ 1077.810099][ T6321] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1078.023325][ T6337] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10324'. [ 1078.391884][ T6346] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10327'. [ 1078.418528][ T6356] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10330'. [ 1078.653730][ T6361] xfrm0: entered promiscuous mode [ 1078.982632][ T6379] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1079.000125][ T6380] syzkaller0: entered promiscuous mode [ 1079.006179][ T6380] syzkaller0: entered allmulticast mode [ 1079.021819][ T6380] tipc: Enabled bearer , priority 0 [ 1079.029422][ T6382] netlink: 'syz.1.10339': attribute type 3 has an invalid length. [ 1079.040637][ T6377] tipc: Resetting bearer [ 1079.075557][ T6377] tipc: Disabling bearer [ 1079.212965][ T6392] netlink: 36 bytes leftover after parsing attributes in process `syz.4.10342'. [ 1079.277056][ T6397] netlink: 'syz.1.10346': attribute type 29 has an invalid length. [ 1079.344134][ T6397] geneve2: entered promiscuous mode [ 1079.351437][ T6397] geneve2: entered allmulticast mode [ 1079.362097][T23546] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1079.409842][T23546] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1079.419993][T23546] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1079.428998][T23546] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1079.702103][ T6420] syzkaller0: entered promiscuous mode [ 1079.715101][ T6420] syzkaller0: entered allmulticast mode [ 1079.727388][ T6420] 0: reclassify loop, rule prio 0, protocol 800 [ 1079.786434][ T6428] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input10 [ 1079.826119][ T6423] lo speed is unknown, defaulting to 1000 [ 1079.838189][ T148] IPVS: stop unused estimator thread 0... [ 1080.136994][ T6436] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Query Mapping response ret = -22) [ 1080.444156][ T6442] lo speed is unknown, defaulting to 1000 [ 1081.035521][ T6468] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10370'. [ 1081.054472][ T6468] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10370'. [ 1081.890666][ T6494] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10380'. [ 1081.921166][ T6490] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1082.109509][ T6495] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10380'. [ 1082.511926][ T6516] FAULT_INJECTION: forcing a failure. [ 1082.511926][ T6516] name failslab, interval 1, probability 0, space 0, times 0 [ 1082.533889][ T6516] CPU: 1 UID: 0 PID: 6516 Comm: syz.4.10387 Not tainted syzkaller #0 PREEMPT(full) [ 1082.533918][ T6516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1082.533930][ T6516] Call Trace: [ 1082.533939][ T6516] [ 1082.533948][ T6516] dump_stack_lvl+0xe8/0x150 [ 1082.533978][ T6516] should_fail_ex+0x414/0x560 [ 1082.534016][ T6516] should_failslab+0xa8/0x100 [ 1082.534039][ T6516] __kmalloc_noprof+0xdf/0x800 [ 1082.534059][ T6516] ? ___neigh_create+0x6d5/0x2230 [ 1082.534085][ T6516] ___neigh_create+0x6d5/0x2230 [ 1082.534113][ T6516] ? __ipv6_neigh_lookup_noref+0x531/0x710 [ 1082.534151][ T6516] ip6_finish_output2+0x1038/0x1360 [ 1082.534184][ T6516] ? ip6_output+0x126/0x550 [ 1082.534207][ T6516] ip6_output+0x340/0x550 [ 1082.534237][ T6516] ? ip6_send_skb+0x10f/0x390 [ 1082.534262][ T6516] ip6_send_skb+0x1d5/0x390 [ 1082.534289][ T6516] rawv6_push_pending_frames+0x6e6/0x8d0 [ 1082.534317][ T6516] ? __pfx_rawv6_push_pending_frames+0x10/0x10 [ 1082.534341][ T6516] ? __pfx_raw6_getfrag+0x10/0x10 [ 1082.534365][ T6516] rawv6_sendmsg+0x133d/0x1830 [ 1082.534383][ T6516] ? tomoyo_check_inet_address+0x275/0x8c0 [ 1082.534423][ T6516] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 1082.534469][ T6516] ? __pfx_aa_sk_perm+0x10/0x10 [ 1082.534495][ T6516] ? sock_rps_record_flow+0x19/0x410 [ 1082.534523][ T6516] ? inet_sendmsg+0x2f4/0x370 [ 1082.534546][ T6516] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1082.534568][ T6516] __sock_sendmsg+0x19c/0x270 [ 1082.534598][ T6516] __sys_sendto+0x3bd/0x520 [ 1082.534621][ T6516] ? __pfx___sys_sendto+0x10/0x10 [ 1082.534639][ T6516] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 1082.534676][ T6516] ? __fget_files+0x3a0/0x420 [ 1082.534709][ T6516] ? ksys_write+0x22a/0x250 [ 1082.534730][ T6516] ? __pfx_ksys_write+0x10/0x10 [ 1082.534753][ T6516] __x64_sys_sendto+0xde/0x100 [ 1082.534779][ T6516] do_syscall_64+0xec/0xf80 [ 1082.534799][ T6516] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1082.534816][ T6516] ? trace_irq_disable+0x37/0x100 [ 1082.534838][ T6516] ? clear_bhb_loop+0x60/0xb0 [ 1082.534861][ T6516] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1082.534876][ T6516] RIP: 0033:0x7fa8cbf8f749 [ 1082.534893][ T6516] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1082.534908][ T6516] RSP: 002b:00007fa8ccd91038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1082.534925][ T6516] RAX: ffffffffffffffda RBX: 00007fa8cc1e5fa0 RCX: 00007fa8cbf8f749 [ 1082.534937][ T6516] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1082.534948][ T6516] RBP: 00007fa8ccd91090 R08: 0000200000000180 R09: 0000000000000020 [ 1082.534960][ T6516] R10: 0000000004000000 R11: 0000000000000246 R12: 0000000000000001 [ 1082.534970][ T6516] R13: 00007fa8cc1e6038 R14: 00007fa8cc1e5fa0 R15: 00007ffc64f24678 [ 1082.535000][ T6516] [ 1082.875315][ T6504] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10383'. [ 1083.625392][ T6532] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10392'. [ 1083.634561][ T6532] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10392'. [ 1083.653751][ T6546] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10399'. [ 1083.831521][ T6550] syzkaller0: entered promiscuous mode [ 1083.846269][ T6550] syzkaller0: entered allmulticast mode [ 1083.986027][ T6558] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10402'. [ 1084.363846][ T6564] tipc: Enabled bearer , priority 0 [ 1084.389425][ T6570] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10405'. [ 1084.400413][ T6564] syzkaller0: entered promiscuous mode [ 1084.417450][ T6564] syzkaller0: entered allmulticast mode [ 1084.423198][ T6570] netlink: 11 bytes leftover after parsing attributes in process `syz.0.10405'. [ 1084.439307][ T6570] FAULT_INJECTION: forcing a failure. [ 1084.439307][ T6570] name failslab, interval 1, probability 0, space 0, times 0 [ 1084.472004][ T6563] tipc: Resetting bearer [ 1084.478237][ T6570] CPU: 1 UID: 0 PID: 6570 Comm: syz.0.10405 Not tainted syzkaller #0 PREEMPT(full) [ 1084.478262][ T6570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1084.478273][ T6570] Call Trace: [ 1084.478280][ T6570] [ 1084.478288][ T6570] dump_stack_lvl+0xe8/0x150 [ 1084.478312][ T6570] should_fail_ex+0x414/0x560 [ 1084.478339][ T6570] should_failslab+0xa8/0x100 [ 1084.478358][ T6570] kmem_cache_alloc_node_noprof+0x8c/0x720 [ 1084.478380][ T6570] ? __alloc_skb+0x190/0x720 [ 1084.478396][ T6570] ? __alloc_skb+0x1d5/0x720 [ 1084.478410][ T6570] ? __local_bh_enable_ip+0xd0/0x130 [ 1084.478426][ T6570] ? __alloc_skb+0x190/0x720 [ 1084.478442][ T6570] __alloc_skb+0x1d5/0x720 [ 1084.478463][ T6570] netlink_ack+0x146/0xa50 [ 1084.478482][ T6570] ? kasan_quarantine_put+0xbb/0x1f0 [ 1084.478495][ T6570] ? lockdep_hardirqs_on+0x7b/0x110 [ 1084.478515][ T6570] ? nfnetlink_rcv+0x23eb/0x2590 [ 1084.478538][ T6570] nfnetlink_rcv+0x2309/0x2590 [ 1084.478580][ T6570] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1084.478631][ T6570] ? netlink_deliver_tap+0x2e/0x1b0 [ 1084.478651][ T6570] ? netlink_deliver_tap+0x2e/0x1b0 [ 1084.478683][ T6570] netlink_unicast+0x82f/0x9e0 [ 1084.478710][ T6570] ? __pfx_netlink_unicast+0x10/0x10 [ 1084.478731][ T6570] ? netlink_sendmsg+0x642/0xb30 [ 1084.478761][ T6570] ? skb_put+0x11b/0x210 [ 1084.478783][ T6570] netlink_sendmsg+0x805/0xb30 [ 1084.478807][ T6570] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1084.478827][ T6570] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1084.478847][ T6570] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1084.478859][ T6570] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1084.478879][ T6570] __sock_sendmsg+0x21c/0x270 [ 1084.478905][ T6570] ____sys_sendmsg+0x505/0x820 [ 1084.478931][ T6570] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1084.478958][ T6570] ? import_iovec+0x74/0xa0 [ 1084.478981][ T6570] ___sys_sendmsg+0x21f/0x2a0 [ 1084.479003][ T6570] ? __pfx____sys_sendmsg+0x10/0x10 [ 1084.479053][ T6570] ? __fget_files+0x2a/0x420 [ 1084.479072][ T6570] ? __fget_files+0x3a0/0x420 [ 1084.479100][ T6570] __x64_sys_sendmsg+0x19b/0x260 [ 1084.479122][ T6570] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1084.479151][ T6570] ? __pfx_ksys_write+0x10/0x10 [ 1084.479179][ T6570] do_syscall_64+0xec/0xf80 [ 1084.479199][ T6570] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1084.479216][ T6570] ? trace_irq_disable+0x37/0x100 [ 1084.479236][ T6570] ? clear_bhb_loop+0x60/0xb0 [ 1084.479256][ T6570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1084.479270][ T6570] RIP: 0033:0x7f1caa78f749 [ 1084.479286][ T6570] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1084.479301][ T6570] RSP: 002b:00007f1cab576038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1084.479320][ T6570] RAX: ffffffffffffffda RBX: 00007f1caa9e5fa0 RCX: 00007f1caa78f749 [ 1084.479333][ T6570] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 1084.479343][ T6570] RBP: 00007f1cab576090 R08: 0000000000000000 R09: 0000000000000000 [ 1084.479354][ T6570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1084.479364][ T6570] R13: 00007f1caa9e6038 R14: 00007f1caa9e5fa0 R15: 00007ffc833046c8 [ 1084.479393][ T6570] [ 1084.866723][ T6563] tipc: Disabling bearer [ 1085.514066][ T6615] netlink: 'syz.2.10417': attribute type 2 has an invalid length. [ 1085.878018][ T6630] netlink: 72 bytes leftover after parsing attributes in process `syz.1.10421'. [ 1086.777620][ T6664] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10432'. [ 1086.803699][ T6667] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10432'. [ 1087.225314][ T6686] netlink: 'syz.0.10436': attribute type 3 has an invalid length. [ 1087.448469][ T6698] netlink: 64 bytes leftover after parsing attributes in process `syz.0.10440'. [ 1087.493484][ T6698] netlink: 64 bytes leftover after parsing attributes in process `syz.0.10440'. [ 1087.501117][ T6700] netlink: 'syz.0.10440': attribute type 21 has an invalid length. [ 1087.511636][ T6700] IPv6: NLM_F_CREATE should be specified when creating new route [ 1087.734569][ T6709] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10445'. [ 1087.764799][ T6709] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1087.775623][ T6709] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1087.848641][ T6709] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1087.873404][ T6709] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1087.943941][ T6714] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10445'. [ 1088.012649][ T6709] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1088.038614][ T6709] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1088.075623][ T6727] syzkaller0: entered promiscuous mode [ 1088.085839][ T6726] netlink: 'syz.1.10450': attribute type 2 has an invalid length. [ 1088.095212][ T6727] syzkaller0: entered allmulticast mode [ 1088.131786][ T6726] : entered promiscuous mode [ 1088.164223][ T6709] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1088.175717][ T6709] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1088.187479][ T6726] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10450'. [ 1088.204697][ T6722] tipc: Enabled bearer , priority 0 [ 1088.223292][ T6720] tipc: Resetting bearer [ 1088.261177][ T6720] tipc: Disabling bearer [ 1088.358423][ T6069] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1088.385267][ T6069] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1088.440781][ T6069] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1088.450435][ T6069] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1088.712510][ T6057] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1088.730110][ T6057] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1088.768997][ T6057] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1088.795769][ T6057] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1088.873424][ T6748] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1089.348359][ T6769] netlink: 'syz.1.10464': attribute type 8 has an invalid length. [ 1089.850096][ T6776] netlink: 'syz.0.10467': attribute type 1 has an invalid length. [ 1089.882782][ T6776] netlink: 224 bytes leftover after parsing attributes in process `syz.0.10467'. [ 1090.142448][ T6787] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10470'. [ 1090.155694][ T6787] bridge_slave_1: left allmulticast mode [ 1090.161833][ T6787] bridge_slave_1: left promiscuous mode [ 1090.175218][ T6787] bridge0: port 2(bridge_slave_1) entered disabled state [ 1090.198863][ T6787] bridge_slave_0: left allmulticast mode [ 1090.204552][ T6787] bridge_slave_0: left promiscuous mode [ 1090.278370][ T6787] bridge0: port 1(bridge_slave_0) entered disabled state [ 1090.305712][ T6795] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10470'. [ 1090.408295][ T6787] bridge0 (unregistering): left promiscuous mode [ 1090.430657][ T6802] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input11 [ 1090.533768][ T6798] lo speed is unknown, defaulting to 1000 [ 1090.813280][ T6810] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10476'. [ 1090.966627][ T6791] netlink: 44 bytes leftover after parsing attributes in process `syz.3.10471'. [ 1091.036977][ T6791] netlink: 44 bytes leftover after parsing attributes in process `syz.3.10471'. [ 1091.511356][ T6834] netlink: 156 bytes leftover after parsing attributes in process `syz.2.10482'. [ 1091.681458][ T6838] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1091.705698][ T6839] netlink: 'syz.3.10483': attribute type 1 has an invalid length. [ 1091.876006][ T6839] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1091.960903][ T6841] bond3: (slave geneve3): making interface the new active one [ 1091.987627][ T6841] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 1092.051239][ T6850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1092.067010][ T6850] 8021q: adding VLAN 0 to HW filter on device team0 [ 1092.080972][ T6850] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1092.157093][ T6852] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.10487'. [ 1092.409954][ T6866] netlink: 48 bytes leftover after parsing attributes in process `syz.3.10491'. [ 1092.422384][ T6866] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10491'. [ 1092.630627][ T6875] netlink: 'syz.1.10496': attribute type 10 has an invalid length. [ 1092.658995][ T6875] team0: Port device dummy0 added [ 1092.670228][ T6875] netlink: 'syz.1.10496': attribute type 10 has an invalid length. [ 1092.723540][ T6875] team0: Port device dummy0 removed [ 1092.739949][ T6875] : (slave dummy0): Enslaving as an active interface with an up link [ 1092.879104][ T6882] xfrm0: entered promiscuous mode [ 1092.884453][ T6882] xfrm0: entered allmulticast mode [ 1092.908089][ T6884] FAULT_INJECTION: forcing a failure. [ 1092.908089][ T6884] name failslab, interval 1, probability 0, space 0, times 0 [ 1092.946373][ T6884] CPU: 0 UID: 0 PID: 6884 Comm: syz.0.10500 Not tainted syzkaller #0 PREEMPT(full) [ 1092.946420][ T6884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1092.946442][ T6884] Call Trace: [ 1092.946458][ T6884] [ 1092.946476][ T6884] dump_stack_lvl+0xe8/0x150 [ 1092.946514][ T6884] should_fail_ex+0x414/0x560 [ 1092.946545][ T6884] should_failslab+0xa8/0x100 [ 1092.946569][ T6884] __kmalloc_cache_noprof+0x84/0x700 [ 1092.946589][ T6884] ? copy_ipcs+0x116/0x4f0 [ 1092.946613][ T6884] copy_ipcs+0x116/0x4f0 [ 1092.946631][ T6884] ? copy_utsname+0x4d/0x440 [ 1092.946655][ T6884] create_new_namespaces+0x210/0x6a0 [ 1092.946677][ T6884] ? bpf_lsm_capable+0x9/0x20 [ 1092.946697][ T6884] ? security_capable+0x7e/0x2e0 [ 1092.946723][ T6884] unshare_nsproxy_namespaces+0x11c/0x170 [ 1092.946744][ T6884] ksys_unshare+0x4c8/0x8c0 [ 1092.946772][ T6884] ? __pfx_ksys_unshare+0x10/0x10 [ 1092.946793][ T6884] ? __pfx_ksys_write+0x10/0x10 [ 1092.946820][ T6884] __x64_sys_unshare+0x38/0x50 [ 1092.946841][ T6884] do_syscall_64+0xec/0xf80 [ 1092.946862][ T6884] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1092.946879][ T6884] ? trace_irq_disable+0x37/0x100 [ 1092.946900][ T6884] ? clear_bhb_loop+0x60/0xb0 [ 1092.946921][ T6884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1092.946938][ T6884] RIP: 0033:0x7f1caa78f749 [ 1092.946955][ T6884] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1092.946969][ T6884] RSP: 002b:00007f1cab576038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1092.946989][ T6884] RAX: ffffffffffffffda RBX: 00007f1caa9e5fa0 RCX: 00007f1caa78f749 [ 1092.947003][ T6884] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 1092.947014][ T6884] RBP: 00007f1cab576090 R08: 0000000000000000 R09: 0000000000000000 [ 1092.947025][ T6884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1092.947037][ T6884] R13: 00007f1caa9e6038 R14: 00007f1caa9e5fa0 R15: 00007ffc833046c8 [ 1092.947068][ T6884] [ 1093.315939][ T6895] FAULT_INJECTION: forcing a failure. [ 1093.315939][ T6895] name failslab, interval 1, probability 0, space 0, times 0 [ 1093.346098][ T6895] CPU: 1 UID: 0 PID: 6895 Comm: syz.2.10505 Not tainted syzkaller #0 PREEMPT(full) [ 1093.346123][ T6895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1093.346135][ T6895] Call Trace: [ 1093.346143][ T6895] [ 1093.346151][ T6895] dump_stack_lvl+0xe8/0x150 [ 1093.346178][ T6895] should_fail_ex+0x414/0x560 [ 1093.346206][ T6895] should_failslab+0xa8/0x100 [ 1093.346229][ T6895] kmem_cache_alloc_noprof+0x88/0x710 [ 1093.346256][ T6895] ? skb_clone+0x212/0x3a0 [ 1093.346283][ T6895] skb_clone+0x212/0x3a0 [ 1093.346307][ T6895] pfkey_sendmsg+0x44b/0x1090 [ 1093.346329][ T6895] ? unwind_next_frame+0xa5/0x23d0 [ 1093.346363][ T6895] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 1093.346407][ T6895] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1093.346429][ T6895] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1093.346444][ T6895] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 1093.346466][ T6895] __sock_sendmsg+0x21c/0x270 [ 1093.346492][ T6895] ____sys_sendmsg+0x505/0x820 [ 1093.346520][ T6895] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1093.346549][ T6895] ? import_iovec+0x74/0xa0 [ 1093.346572][ T6895] ___sys_sendmsg+0x21f/0x2a0 [ 1093.346596][ T6895] ? __pfx____sys_sendmsg+0x10/0x10 [ 1093.346652][ T6895] ? __fget_files+0x2a/0x420 [ 1093.346670][ T6895] ? __fget_files+0x3a0/0x420 [ 1093.346697][ T6895] __x64_sys_sendmsg+0x19b/0x260 [ 1093.346720][ T6895] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1093.346748][ T6895] ? __pfx_ksys_write+0x10/0x10 [ 1093.346774][ T6895] do_syscall_64+0xec/0xf80 [ 1093.346795][ T6895] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1093.346819][ T6895] ? trace_irq_disable+0x37/0x100 [ 1093.346841][ T6895] ? clear_bhb_loop+0x60/0xb0 [ 1093.346861][ T6895] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1093.346876][ T6895] RIP: 0033:0x7ffaaa18f749 [ 1093.346893][ T6895] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1093.346908][ T6895] RSP: 002b:00007ffaab015038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1093.346927][ T6895] RAX: ffffffffffffffda RBX: 00007ffaaa3e5fa0 RCX: 00007ffaaa18f749 [ 1093.346941][ T6895] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 1093.346953][ T6895] RBP: 00007ffaab015090 R08: 0000000000000000 R09: 0000000000000000 [ 1093.346964][ T6895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1093.346974][ T6895] R13: 00007ffaaa3e6038 R14: 00007ffaaa3e5fa0 R15: 00007fff69993328 [ 1093.347002][ T6895] [ 1093.629464][ T6897] lo speed is unknown, defaulting to 1000 [ 1093.820884][ T6910] netlink: 'syz.4.10509': attribute type 3 has an invalid length. [ 1094.402517][ T6906] lec:lec_atm_close: lec0: Shut down! [ 1094.813440][ T6938] netlink: 'syz.4.10515': attribute type 12 has an invalid length. [ 1094.844636][ T6941] tipc: Enabled bearer , priority 0 [ 1094.891476][ T6937] syzkaller0: entered promiscuous mode [ 1094.917746][ T6937] syzkaller0: entered allmulticast mode [ 1095.060968][ T6937] tipc: Resetting bearer [ 1095.088330][ T6936] tipc: Resetting bearer [ 1095.142714][ T6936] tipc: Disabling bearer [ 1095.389172][ T6955] lo speed is unknown, defaulting to 1000 [ 1095.480368][ T6961] __nla_validate_parse: 4 callbacks suppressed [ 1095.480387][ T6961] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10525'. [ 1096.543273][ T6988] lo speed is unknown, defaulting to 1000 [ 1096.709348][ T6999] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10539'. [ 1096.959286][ T7005] netlink: 'syz.2.10538': attribute type 10 has an invalid length. [ 1097.019433][ T7005] team0: Failed to send options change via netlink (err -105) [ 1097.030842][ T7005] team0: Port device dummy0 added [ 1097.037520][ T7001] lo speed is unknown, defaulting to 1000 [ 1097.866198][ T7030] netlink: 60 bytes leftover after parsing attributes in process `syz.2.10548'. [ 1098.141596][ T7034] netlink: 'syz.2.10550': attribute type 6 has an invalid length. [ 1098.451206][ T7046] netlink: 'syz.2.10554': attribute type 10 has an invalid length. [ 1098.476954][ T7046] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 1098.487867][ T7046] team0: Port device dummy0 removed [ 1098.543664][ T7046] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1098.578196][ T7050] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1098.618444][ T7045] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10549'. [ 1098.628758][ T7050] FAULT_INJECTION: forcing a failure. [ 1098.628758][ T7050] name failslab, interval 1, probability 0, space 0, times 0 [ 1098.642138][ T7050] CPU: 0 UID: 0 PID: 7050 Comm: syz.0.10555 Not tainted syzkaller #0 PREEMPT(full) [ 1098.642167][ T7050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1098.642179][ T7050] Call Trace: [ 1098.642187][ T7050] [ 1098.642195][ T7050] dump_stack_lvl+0xe8/0x150 [ 1098.642224][ T7050] should_fail_ex+0x414/0x560 [ 1098.642256][ T7050] should_failslab+0xa8/0x100 [ 1098.642279][ T7050] kmem_cache_alloc_node_noprof+0x8c/0x720 [ 1098.642304][ T7050] ? __alloc_skb+0x1d5/0x720 [ 1098.642322][ T7050] ? __local_bh_enable_ip+0xd0/0x130 [ 1098.642342][ T7050] ? __alloc_skb+0x190/0x720 [ 1098.642362][ T7050] __alloc_skb+0x1d5/0x720 [ 1098.642389][ T7050] netlink_ack+0x146/0xa50 [ 1098.642410][ T7050] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1098.642433][ T7050] ? __asan_memcpy+0x40/0x70 [ 1098.642447][ T7050] ? __pfx_ref_tracker_free+0x10/0x10 [ 1098.642486][ T7050] netlink_rcv_skb+0x28c/0x470 [ 1098.642508][ T7050] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1098.642526][ T7050] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1098.642545][ T7050] ? genl_rcv+0x19/0x40 [ 1098.642580][ T7050] ? down_read+0x274/0x2e0 [ 1098.642601][ T7050] ? genl_rcv+0xd/0x40 [ 1098.642621][ T7050] genl_rcv+0x28/0x40 [ 1098.642637][ T7050] netlink_unicast+0x82f/0x9e0 [ 1098.642665][ T7050] ? __pfx_netlink_unicast+0x10/0x10 [ 1098.642689][ T7050] ? netlink_sendmsg+0x642/0xb30 [ 1098.642710][ T7050] ? skb_put+0x11b/0x210 [ 1098.642734][ T7050] netlink_sendmsg+0x805/0xb30 [ 1098.642765][ T7050] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1098.642793][ T7050] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1098.642815][ T7050] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1098.642831][ T7050] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1098.642855][ T7050] __sock_sendmsg+0x21c/0x270 [ 1098.642884][ T7050] ____sys_sendmsg+0x505/0x820 [ 1098.642911][ T7050] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1098.642938][ T7050] ? import_iovec+0x74/0xa0 [ 1098.642961][ T7050] ___sys_sendmsg+0x21f/0x2a0 [ 1098.642983][ T7050] ? __pfx____sys_sendmsg+0x10/0x10 [ 1098.643036][ T7050] ? __fget_files+0x2a/0x420 [ 1098.643055][ T7050] ? __fget_files+0x3a0/0x420 [ 1098.643083][ T7050] __x64_sys_sendmsg+0x19b/0x260 [ 1098.643106][ T7050] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1098.643134][ T7050] ? __pfx_ksys_write+0x10/0x10 [ 1098.643164][ T7050] do_syscall_64+0xec/0xf80 [ 1098.643184][ T7050] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1098.643198][ T7050] ? trace_irq_disable+0x37/0x100 [ 1098.643217][ T7050] ? clear_bhb_loop+0x60/0xb0 [ 1098.643237][ T7050] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1098.643253][ T7050] RIP: 0033:0x7f1caa78f749 [ 1098.643270][ T7050] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1098.643285][ T7050] RSP: 002b:00007f1cab576038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1098.643305][ T7050] RAX: ffffffffffffffda RBX: 00007f1caa9e5fa0 RCX: 00007f1caa78f749 [ 1098.643319][ T7050] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000005 [ 1098.643331][ T7050] RBP: 00007f1cab576090 R08: 0000000000000000 R09: 0000000000000000 [ 1098.643343][ T7050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1098.643353][ T7050] R13: 00007f1caa9e6038 R14: 00007f1caa9e5fa0 R15: 00007ffc833046c8 [ 1098.643384][ T7050] [ 1099.148811][ T7056] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1099.201069][ T7058] FAULT_INJECTION: forcing a failure. [ 1099.201069][ T7058] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1099.214808][ T7058] CPU: 0 UID: 0 PID: 7058 Comm: syz.3.10557 Not tainted syzkaller #0 PREEMPT(full) [ 1099.214839][ T7058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1099.214849][ T7058] Call Trace: [ 1099.214857][ T7058] [ 1099.214865][ T7058] dump_stack_lvl+0xe8/0x150 [ 1099.214893][ T7058] should_fail_ex+0x414/0x560 [ 1099.214925][ T7058] _copy_from_user+0x2d/0xb0 [ 1099.214947][ T7058] ___sys_recvmsg+0x12e/0x510 [ 1099.214976][ T7058] ? __pfx____sys_recvmsg+0x10/0x10 [ 1099.215003][ T7058] ? __fget_files+0x2a/0x420 [ 1099.215055][ T7058] do_recvmmsg+0x307/0x770 [ 1099.215086][ T7058] ? __pfx_do_recvmmsg+0x10/0x10 [ 1099.215120][ T7058] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1099.215157][ T7058] __x64_sys_recvmmsg+0x190/0x240 [ 1099.215183][ T7058] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1099.215217][ T7058] do_syscall_64+0xec/0xf80 [ 1099.215238][ T7058] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1099.215255][ T7058] ? clear_bhb_loop+0x60/0xb0 [ 1099.215277][ T7058] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1099.215294][ T7058] RIP: 0033:0x7f843cd8f749 [ 1099.215311][ T7058] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1099.215326][ T7058] RSP: 002b:00007f843dc5d038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1099.215347][ T7058] RAX: ffffffffffffffda RBX: 00007f843cfe5fa0 RCX: 00007f843cd8f749 [ 1099.215361][ T7058] RDX: 0000000000000600 RSI: 0000200000003700 RDI: 0000000000000008 [ 1099.215374][ T7058] RBP: 00007f843dc5d090 R08: 0000000000000000 R09: 0000000000000000 [ 1099.215386][ T7058] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1099.215397][ T7058] R13: 00007f843cfe6038 R14: 00007f843cfe5fa0 R15: 00007ffe47149898 [ 1099.215433][ T7058] [ 1099.455231][ T7060] netlink: 40 bytes leftover after parsing attributes in process `syz.3.10559'. [ 1099.471767][ T7062] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10558'. [ 1099.583428][ T7068] netlink: 68 bytes leftover after parsing attributes in process `syz.4.10560'. [ 1099.666563][ T7073] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10560'. [ 1099.876368][ T7084] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10568'. [ 1099.902450][ T7084] netlink: 104 bytes leftover after parsing attributes in process `syz.4.10568'. [ 1100.543958][ T7112] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1100.707808][ T7118] __nla_validate_parse: 2 callbacks suppressed [ 1100.707827][ T7118] netlink: 104 bytes leftover after parsing attributes in process `syz.2.10578'. [ 1100.880516][ T7122] netlink: 'syz.2.10582': attribute type 14 has an invalid length. [ 1100.907463][ T7122] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10582'. [ 1100.937391][ T7122] bond0: option xmit_hash_policy: invalid value (8) [ 1100.959511][ T6076] bond0: (slave bridge_slave_1): link status definitely down, disabling slave [ 1101.308077][ T7152] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10593'. [ 1101.346011][ T7155] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1101.417072][ T7152] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1101.428680][ T7148] x_tables: unsorted entry at hook 2 [ 1101.446037][ T7152] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1101.514561][ T7162] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10593'. [ 1101.555726][ T7167] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10597'. [ 1101.580769][ T7152] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1101.591342][ T7152] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1101.603418][ T7167] netlink: 11 bytes leftover after parsing attributes in process `syz.0.10597'. [ 1101.690806][ T7152] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1101.715558][ T7152] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1101.768170][ T7152] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1101.787736][ T7152] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1101.908071][ T7185] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1102.010738][ T6070] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1102.026979][ T6070] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1102.072674][ T7191] syzkaller0: entered promiscuous mode [ 1102.083252][ T7191] syzkaller0: entered allmulticast mode [ 1102.091872][ T6070] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1102.102363][ T6070] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1102.119218][ T6070] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1102.154407][ T6070] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1102.273387][ T6070] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1102.291993][ T6070] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1102.682080][ T7224] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10613'. [ 1102.985521][ T7233] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1103.130784][ T7244] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10616'. [ 1103.357590][ T7255] netlink: 72 bytes leftover after parsing attributes in process `syz.3.10620'. [ 1103.561099][ T7266] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10624'. [ 1106.679143][ T7270] bridge1: port 1(ip6gretap1) entered blocking state [ 1106.688204][ T7270] bridge1: port 1(ip6gretap1) entered disabled state [ 1106.696618][ T7270] ip6gretap1: entered allmulticast mode [ 1106.703664][ T7270] ip6gretap1: entered promiscuous mode [ 1106.716679][ T7273] __nla_validate_parse: 2 callbacks suppressed [ 1106.716699][ T7273] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10626'. [ 1106.756943][ T7275] bridge1: port 2(veth3) entered blocking state [ 1106.763261][ T7275] bridge1: port 2(veth3) entered disabled state [ 1106.780486][ T7275] veth3: entered allmulticast mode [ 1106.791065][ T7275] veth3: entered promiscuous mode [ 1106.798431][ T7275] bridge1: port 2(veth3) entered blocking state [ 1106.804889][ T7275] bridge1: port 2(veth3) entered forwarding state [ 1106.905798][ T7298] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10631'. [ 1106.916692][ T7298] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10631'. [ 1106.928440][ T7282] batadv_slave_0: entered promiscuous mode [ 1106.929355][ T7300] FAULT_INJECTION: forcing a failure. [ 1106.929355][ T7300] name failslab, interval 1, probability 0, space 0, times 0 [ 1106.948730][ T7300] CPU: 1 UID: 0 PID: 7300 Comm: syz.1.10630 Not tainted syzkaller #0 PREEMPT(full) [ 1106.948753][ T7300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1106.948764][ T7300] Call Trace: [ 1106.948771][ T7300] [ 1106.948779][ T7300] dump_stack_lvl+0xe8/0x150 [ 1106.948803][ T7300] should_fail_ex+0x414/0x560 [ 1106.948829][ T7300] should_failslab+0xa8/0x100 [ 1106.948847][ T7300] __kmalloc_cache_noprof+0x84/0x700 [ 1106.948861][ T7300] ? nft_pernet+0x23/0x240 [ 1106.948876][ T7300] ? nft_delrule+0x57/0xba0 [ 1106.948896][ T7300] nft_delrule+0x57/0xba0 [ 1106.948911][ T7300] ? nft_pernet+0x23/0x240 [ 1106.948925][ T7300] ? nft_pernet+0x23/0x240 [ 1106.948944][ T7300] ? nft_trans_commit_list_add_tail+0x179/0x520 [ 1106.948963][ T7300] nft_flush_table+0x291/0xea0 [ 1106.948985][ T7300] nf_tables_deltable+0x5cc/0xe10 [ 1106.949006][ T7300] ? __pfx_nf_tables_deltable+0x10/0x10 [ 1106.949019][ T7300] ? nfnl_pernet+0x23/0x240 [ 1106.949044][ T7300] ? __nla_parse+0x40/0x60 [ 1106.949063][ T7300] nfnetlink_rcv+0x11d9/0x2590 [ 1106.949105][ T7300] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1106.949134][ T7300] ? ref_tracker_free+0x63a/0x7d0 [ 1106.949169][ T7300] ? __netlink_deliver_tap+0x807/0x850 [ 1106.949188][ T7300] ? netlink_deliver_tap+0x2e/0x1b0 [ 1106.949220][ T7300] netlink_unicast+0x82f/0x9e0 [ 1106.949244][ T7300] ? __pfx_netlink_unicast+0x10/0x10 [ 1106.949264][ T7300] ? netlink_sendmsg+0x642/0xb30 [ 1106.949282][ T7300] ? skb_put+0x11b/0x210 [ 1106.949301][ T7300] netlink_sendmsg+0x805/0xb30 [ 1106.949327][ T7300] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1106.949348][ T7300] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1106.949366][ T7300] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1106.949380][ T7300] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1106.949399][ T7300] __sock_sendmsg+0x21c/0x270 [ 1106.949423][ T7300] ____sys_sendmsg+0x505/0x820 [ 1106.949446][ T7300] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1106.949473][ T7300] ? import_iovec+0x74/0xa0 [ 1106.949493][ T7300] ___sys_sendmsg+0x21f/0x2a0 [ 1106.949512][ T7300] ? __pfx____sys_sendmsg+0x10/0x10 [ 1106.949562][ T7300] ? __fget_files+0x2a/0x420 [ 1106.949582][ T7300] ? __fget_files+0x3a0/0x420 [ 1106.949611][ T7300] __x64_sys_sendmsg+0x19b/0x260 [ 1106.949636][ T7300] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1106.949662][ T7300] ? __pfx_ksys_write+0x10/0x10 [ 1106.949686][ T7300] do_syscall_64+0xec/0xf80 [ 1106.949714][ T7300] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1106.949730][ T7300] ? trace_irq_disable+0x37/0x100 [ 1106.949750][ T7300] ? clear_bhb_loop+0x60/0xb0 [ 1106.949770][ T7300] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1106.949785][ T7300] RIP: 0033:0x7f96faf8f749 [ 1106.949802][ T7300] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1106.949818][ T7300] RSP: 002b:00007f96fbd9e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1106.949838][ T7300] RAX: ffffffffffffffda RBX: 00007f96fb1e5fa0 RCX: 00007f96faf8f749 [ 1106.949851][ T7300] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 1106.949862][ T7300] RBP: 00007f96fbd9e090 R08: 0000000000000000 R09: 0000000000000000 [ 1106.949874][ T7300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1106.949885][ T7300] R13: 00007f96fb1e6038 R14: 00007f96fb1e5fa0 R15: 00007ffe1b098fb8 [ 1106.949916][ T7300] [ 1106.951593][ T7266] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1107.078791][ T7305] IPv6: addrconf: prefix option has invalid lifetime [ 1107.107361][ T7266] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1107.317580][ T4280] bridge1: port 2(veth3) entered disabled state [ 1107.324428][ T7284] batadv_slave_0: left promiscuous mode [ 1107.358077][ T7266] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1107.377637][ T7266] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1107.448094][ T7316] FAULT_INJECTION: forcing a failure. [ 1107.448094][ T7316] name failslab, interval 1, probability 0, space 0, times 0 [ 1107.485105][ T7316] CPU: 0 UID: 0 PID: 7316 Comm: syz.2.10635 Not tainted syzkaller #0 PREEMPT(full) [ 1107.485133][ T7316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1107.485145][ T7316] Call Trace: [ 1107.485153][ T7316] [ 1107.485162][ T7316] dump_stack_lvl+0xe8/0x150 [ 1107.485191][ T7316] should_fail_ex+0x414/0x560 [ 1107.485224][ T7316] should_failslab+0xa8/0x100 [ 1107.485248][ T7316] kmem_cache_alloc_noprof+0x88/0x710 [ 1107.485275][ T7316] ? skb_clone+0x212/0x3a0 [ 1107.485303][ T7316] skb_clone+0x212/0x3a0 [ 1107.485330][ T7316] __netlink_deliver_tap+0x404/0x850 [ 1107.485367][ T7316] ? netlink_deliver_tap+0x2e/0x1b0 [ 1107.485401][ T7316] netlink_deliver_tap+0x19c/0x1b0 [ 1107.485425][ T7316] netlink_sendskb+0x68/0x140 [ 1107.485447][ T7316] netlink_unicast+0x397/0x9e0 [ 1107.485467][ T7316] ? __asan_memcpy+0x40/0x70 [ 1107.485491][ T7316] ? __pfx_netlink_unicast+0x10/0x10 [ 1107.485521][ T7316] netlink_rcv_skb+0x28c/0x470 [ 1107.485544][ T7316] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1107.485564][ T7316] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1107.485584][ T7316] ? genl_rcv+0x19/0x40 [ 1107.485618][ T7316] ? down_read+0x274/0x2e0 [ 1107.485638][ T7316] ? genl_rcv+0xd/0x40 [ 1107.485657][ T7316] genl_rcv+0x28/0x40 [ 1107.485674][ T7316] netlink_unicast+0x82f/0x9e0 [ 1107.485704][ T7316] ? __pfx_netlink_unicast+0x10/0x10 [ 1107.485727][ T7316] ? netlink_sendmsg+0x642/0xb30 [ 1107.485747][ T7316] ? skb_put+0x11b/0x210 [ 1107.485771][ T7316] netlink_sendmsg+0x805/0xb30 [ 1107.485804][ T7316] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1107.485831][ T7316] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1107.485856][ T7316] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1107.485872][ T7316] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1107.485897][ T7316] __sock_sendmsg+0x21c/0x270 [ 1107.485927][ T7316] ____sys_sendmsg+0x505/0x820 [ 1107.485955][ T7316] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1107.485986][ T7316] ? import_iovec+0x74/0xa0 [ 1107.486012][ T7316] ___sys_sendmsg+0x21f/0x2a0 [ 1107.486037][ T7316] ? __pfx____sys_sendmsg+0x10/0x10 [ 1107.486096][ T7316] ? __fget_files+0x2a/0x420 [ 1107.486116][ T7316] ? __fget_files+0x3a0/0x420 [ 1107.486148][ T7316] __x64_sys_sendmsg+0x19b/0x260 [ 1107.486173][ T7316] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1107.486205][ T7316] ? __pfx_ksys_write+0x10/0x10 [ 1107.486235][ T7316] do_syscall_64+0xec/0xf80 [ 1107.486256][ T7316] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1107.486272][ T7316] ? trace_irq_disable+0x37/0x100 [ 1107.486293][ T7316] ? clear_bhb_loop+0x60/0xb0 [ 1107.486315][ T7316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1107.486332][ T7316] RIP: 0033:0x7ffaaa18f749 [ 1107.486349][ T7316] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1107.486365][ T7316] RSP: 002b:00007ffaaaff4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1107.486385][ T7316] RAX: ffffffffffffffda RBX: 00007ffaaa3e6090 RCX: 00007ffaaa18f749 [ 1107.486405][ T7316] RDX: 0000000000008010 RSI: 0000200000000440 RDI: 0000000000000003 [ 1107.486417][ T7316] RBP: 00007ffaaaff4090 R08: 0000000000000000 R09: 0000000000000000 [ 1107.486429][ T7316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1107.486440][ T7316] R13: 00007ffaaa3e6128 R14: 00007ffaaa3e6090 R15: 00007fff69993328 [ 1107.486473][ T7316] [ 1107.488058][ T7319] netlink: 'syz.0.10636': attribute type 2 has an invalid length. [ 1107.489655][ T7266] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1107.668235][ T7325] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10639'. [ 1107.669683][ T7266] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1107.732619][ T7329] netlink: 'syz.0.10636': attribute type 6 has an invalid length. [ 1107.921808][ T7319] : entered promiscuous mode [ 1107.928590][ T7335] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10639'. [ 1107.946766][ T7324] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10638'. [ 1107.974814][ T7338] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10640'. [ 1107.992934][ T7325] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1108.003167][ T7325] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1108.032422][ T7266] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1108.046333][ T7266] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1108.076547][ T7325] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1108.089807][ T7325] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1108.317346][ T7325] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1108.332052][ T7325] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1108.559948][ T7325] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1108.572019][ T7325] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1108.622283][ T5196] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 1108.639885][ T5196] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 1108.664375][ T7362] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10651'. [ 1108.698442][T16175] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 1108.715922][T16175] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 1108.750779][T16175] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 1108.765769][T16175] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 1108.796533][ T4280] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 1108.806487][ T4280] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 1108.906887][ T1546] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1108.918663][ T1546] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1109.001130][ T1546] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1109.017772][ T7373] netlink: 'syz.0.10655': attribute type 10 has an invalid length. [ 1109.024941][ T1546] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1109.067249][ T7373] netlink: 'syz.0.10655': attribute type 10 has an invalid length. [ 1109.086419][T16175] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1109.094646][T16175] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1109.104671][ T7371] netlink: 'syz.1.10653': attribute type 2 has an invalid length. [ 1109.123931][T16175] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1109.133033][T16175] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1109.228590][ T7376] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1109.261057][ T7373] team0: Port device dummy0 removed [ 1109.326777][ T7373] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1109.490021][ T1546] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1109.923257][ T7406] netlink: 'syz.2.10661': attribute type 1 has an invalid length. [ 1112.873197][ T7416] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10666'. [ 1112.888072][ T7414] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10665'. [ 1112.901458][ T7419] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10667'. [ 1112.932167][ T7421] 8021q: VLANs not supported on caif0 [ 1112.940643][ T7422] netlink: 240 bytes leftover after parsing attributes in process `syz.0.10662'. [ 1113.037445][ T7419] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1113.061644][ T7419] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1113.103944][ T7429] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10667'. [ 1113.176813][ T7419] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1113.190945][ T7419] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1113.208072][ T7434] bond0: (slave erspan0): Error: Device type is different from other slaves [ 1113.242929][ T7438] netlink: 'syz.4.10672': attribute type 1 has an invalid length. [ 1113.271948][ T7419] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1113.306821][ T7419] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1113.371347][ T7447] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10672'. [ 1113.400349][ T7443] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1113.412464][ T7443] bond7: (slave vxcan3): Error -95 calling set_mac_address [ 1113.432954][ T7438] netlink: 'syz.4.10672': attribute type 1 has an invalid length. [ 1113.444074][ T7438] netlink: 'syz.4.10672': attribute type 3 has an invalid length. [ 1113.471888][ T7447] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1113.524042][ T7438] bond7: (slave bridge4): Enslaving as an active interface with a down link [ 1113.557031][ T7419] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1113.595301][ T7419] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1113.640252][ T7438] macvlan4: entered promiscuous mode [ 1113.648948][ T7438] macvlan4: entered allmulticast mode [ 1113.657728][ T7438] bond7: entered promiscuous mode [ 1113.664121][ T7438] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 1113.678733][ T7438] bond7: left promiscuous mode [ 1113.818334][ T4595] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1113.826980][ T4595] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1113.879171][ T4595] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1113.892668][ T7459] netlink: 'syz.0.10677': attribute type 11 has an invalid length. [ 1113.901784][ T4595] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1113.933558][ T7458] netlink: 136 bytes leftover after parsing attributes in process `syz.3.10678'. [ 1113.945286][ T7459] netlink: 'syz.0.10677': attribute type 11 has an invalid length. [ 1113.956471][ T7458] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 1113.991645][ T7459] netlink: 224 bytes leftover after parsing attributes in process `syz.0.10677'. [ 1114.087958][ T4595] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1114.104513][ T4595] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1114.133524][ T4595] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1114.159012][ T4595] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1114.204260][ T7471] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10681'. [ 1114.279479][ T7475] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10682'. [ 1114.289136][ T7453] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1114.311157][ T7478] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1115.068281][ T7518] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1115.078409][ T7518] FAULT_INJECTION: forcing a failure. [ 1115.078409][ T7518] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1115.113993][ T7518] CPU: 1 UID: 0 PID: 7518 Comm: syz.1.10697 Not tainted syzkaller #0 PREEMPT(full) [ 1115.114019][ T7518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1115.114030][ T7518] Call Trace: [ 1115.114038][ T7518] [ 1115.114046][ T7518] dump_stack_lvl+0xe8/0x150 [ 1115.114072][ T7518] should_fail_ex+0x414/0x560 [ 1115.114103][ T7518] _copy_to_user+0x31/0xb0 [ 1115.114125][ T7518] simple_read_from_buffer+0xe1/0x170 [ 1115.114152][ T7518] proc_fail_nth_read+0x1b3/0x220 [ 1115.114174][ T7518] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1115.114196][ T7518] ? rw_verify_area+0x2a6/0x4d0 [ 1115.114221][ T7518] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1115.114242][ T7518] vfs_read+0x200/0xa30 [ 1115.114259][ T7518] ? fdget_pos+0x247/0x320 [ 1115.114285][ T7518] ? __pfx___mutex_lock+0x10/0x10 [ 1115.114308][ T7518] ? __pfx_vfs_read+0x10/0x10 [ 1115.114326][ T7518] ? __fget_files+0x2a/0x420 [ 1115.114350][ T7518] ? __fget_files+0x3a0/0x420 [ 1115.114369][ T7518] ? __fget_files+0x2a/0x420 [ 1115.114398][ T7518] ksys_read+0x145/0x250 [ 1115.114419][ T7518] ? __pfx_ksys_read+0x10/0x10 [ 1115.114447][ T7518] do_syscall_64+0xec/0xf80 [ 1115.114468][ T7518] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1115.114485][ T7518] ? trace_irq_disable+0x37/0x100 [ 1115.114506][ T7518] ? clear_bhb_loop+0x60/0xb0 [ 1115.114525][ T7518] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1115.114541][ T7518] RIP: 0033:0x7f96faf8e15c [ 1115.114558][ T7518] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1115.114575][ T7518] RSP: 002b:00007f96fbd9e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1115.114595][ T7518] RAX: ffffffffffffffda RBX: 00007f96fb1e5fa0 RCX: 00007f96faf8e15c [ 1115.114608][ T7518] RDX: 000000000000000f RSI: 00007f96fbd9e0a0 RDI: 0000000000000007 [ 1115.114620][ T7518] RBP: 00007f96fbd9e090 R08: 0000000000000000 R09: 0000000000000000 [ 1115.114631][ T7518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1115.114642][ T7518] R13: 00007f96fb1e6038 R14: 00007f96fb1e5fa0 R15: 00007ffe1b098fb8 [ 1115.114674][ T7518] [ 1115.398255][ T7524] FAULT_INJECTION: forcing a failure. [ 1115.398255][ T7524] name failslab, interval 1, probability 0, space 0, times 0 [ 1115.426125][ T7524] CPU: 0 UID: 0 PID: 7524 Comm: syz.4.10701 Not tainted syzkaller #0 PREEMPT(full) [ 1115.426151][ T7524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1115.426163][ T7524] Call Trace: [ 1115.426172][ T7524] [ 1115.426180][ T7524] dump_stack_lvl+0xe8/0x150 [ 1115.426206][ T7524] should_fail_ex+0x414/0x560 [ 1115.426237][ T7524] should_failslab+0xa8/0x100 [ 1115.426260][ T7524] __kmalloc_noprof+0xdf/0x800 [ 1115.426279][ T7524] ? sock_kmalloc+0xd6/0x160 [ 1115.426307][ T7524] sock_kmalloc+0xd6/0x160 [ 1115.426331][ T7524] hash_recvmsg+0x1d4/0x840 [ 1115.426356][ T7524] ? __pfx_hash_recvmsg+0x10/0x10 [ 1115.426377][ T7524] sock_recvmsg_nosec+0x186/0x1c0 [ 1115.426399][ T7524] ____sys_recvmsg+0x3aa/0x460 [ 1115.426430][ T7524] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1115.426464][ T7524] ? import_iovec+0x74/0xa0 [ 1115.426487][ T7524] ___sys_recvmsg+0x1b5/0x510 [ 1115.426523][ T7524] ? __pfx____sys_recvmsg+0x10/0x10 [ 1115.426549][ T7524] ? __fget_files+0x2a/0x420 [ 1115.426597][ T7524] do_recvmmsg+0x307/0x770 [ 1115.426626][ T7524] ? __pfx_do_recvmmsg+0x10/0x10 [ 1115.426659][ T7524] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1115.426700][ T7524] __x64_sys_recvmmsg+0x190/0x240 [ 1115.426726][ T7524] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1115.426758][ T7524] do_syscall_64+0xec/0xf80 [ 1115.426778][ T7524] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1115.426795][ T7524] ? clear_bhb_loop+0x60/0xb0 [ 1115.426816][ T7524] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1115.426833][ T7524] RIP: 0033:0x7fa8cbf8f749 [ 1115.426849][ T7524] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1115.426863][ T7524] RSP: 002b:00007fa8ccd91038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1115.426881][ T7524] RAX: ffffffffffffffda RBX: 00007fa8cc1e5fa0 RCX: 00007fa8cbf8f749 [ 1115.426894][ T7524] RDX: 0000000000000600 RSI: 0000200000003700 RDI: 0000000000000008 [ 1115.426906][ T7524] RBP: 00007fa8ccd91090 R08: 0000000000000000 R09: 0000000000000000 [ 1115.426917][ T7524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1115.426928][ T7524] R13: 00007fa8cc1e6038 R14: 00007fa8cc1e5fa0 R15: 00007ffc64f24678 [ 1115.426958][ T7524] [ 1115.727090][ T5153] Bluetooth: hci3: command 0x0405 tx timeout [ 1115.840646][ T7539] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1116.150319][ T7555] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1116.180587][ T7555] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1116.273683][ T7564] lo speed is unknown, defaulting to 1000 [ 1116.302524][ T7555] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1116.316409][ T7555] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1116.362130][ T7569] netlink: 'syz.3.10717': attribute type 21 has an invalid length. [ 1116.370853][ T7569] netlink: 'syz.3.10717': attribute type 5 has an invalid length. [ 1116.378954][ T7569] netlink: 'syz.3.10717': attribute type 6 has an invalid length. [ 1116.448510][ T7555] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1116.473569][ T7555] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1116.543780][ T7555] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1116.559682][ T7555] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1116.628632][ T7577] tipc: Enabling of bearer rejected, failed to enable media [ 1116.651029][ T7577] bond0: entered promiscuous mode [ 1116.659395][ T7577] bond_slave_0: entered promiscuous mode [ 1116.668475][ T7577] bond_slave_1: entered promiscuous mode [ 1116.674459][ T7577] dummy0: entered promiscuous mode [ 1116.684433][ T7577] bond0: entered allmulticast mode [ 1116.692246][ T7577] bond_slave_0: entered allmulticast mode [ 1116.701563][ T7577] bond_slave_1: entered allmulticast mode [ 1116.726039][ T7577] dummy0: entered allmulticast mode [ 1116.937371][ T4595] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 1116.955938][ T4595] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 1117.017163][ T4595] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 1117.027351][ T4595] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 1117.055435][ T4595] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 1117.091248][ T4595] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 1117.166195][ T7596] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1117.281093][ T7612] FAULT_INJECTION: forcing a failure. [ 1117.281093][ T7612] name failslab, interval 1, probability 0, space 0, times 0 [ 1117.285772][ T4595] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 1117.295272][ T7612] CPU: 1 UID: 0 PID: 7612 Comm: syz.1.10730 Not tainted syzkaller #0 PREEMPT(full) [ 1117.295298][ T7612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1117.295309][ T7612] Call Trace: [ 1117.295318][ T7612] [ 1117.295326][ T7612] dump_stack_lvl+0xe8/0x150 [ 1117.295354][ T7612] should_fail_ex+0x414/0x560 [ 1117.295386][ T7612] should_failslab+0xa8/0x100 [ 1117.295408][ T7612] kmem_cache_alloc_noprof+0x88/0x710 [ 1117.295434][ T7612] ? skb_clone+0x212/0x3a0 [ 1117.295461][ T7612] skb_clone+0x212/0x3a0 [ 1117.295486][ T7612] __netlink_deliver_tap+0x404/0x850 [ 1117.295521][ T7612] ? netlink_deliver_tap+0x2e/0x1b0 [ 1117.295546][ T7612] netlink_deliver_tap+0x19c/0x1b0 [ 1117.295570][ T7612] netlink_sendskb+0x68/0x140 [ 1117.295600][ T7612] netlink_unicast+0x397/0x9e0 [ 1117.295619][ T7612] ? __asan_memcpy+0x40/0x70 [ 1117.295643][ T7612] ? __pfx_netlink_unicast+0x10/0x10 [ 1117.295673][ T7612] nfnetlink_rcv+0x2309/0x2590 [ 1117.295727][ T7612] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1117.295764][ T7612] ? ref_tracker_free+0x63a/0x7d0 [ 1117.295808][ T7612] ? __netlink_deliver_tap+0x807/0x850 [ 1117.295831][ T7612] ? netlink_deliver_tap+0x2e/0x1b0 [ 1117.295882][ T7612] netlink_unicast+0x82f/0x9e0 [ 1117.295911][ T7612] ? __pfx_netlink_unicast+0x10/0x10 [ 1117.295934][ T7612] ? netlink_sendmsg+0x642/0xb30 [ 1117.295955][ T7612] ? skb_put+0x11b/0x210 [ 1117.295979][ T7612] netlink_sendmsg+0x805/0xb30 [ 1117.296035][ T7612] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1117.296061][ T7612] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1117.296086][ T7612] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1117.296102][ T7612] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1117.296126][ T7612] __sock_sendmsg+0x21c/0x270 [ 1117.296163][ T7612] ____sys_sendmsg+0x505/0x820 [ 1117.296189][ T7612] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1117.296219][ T7612] ? import_iovec+0x74/0xa0 [ 1117.296244][ T7612] ___sys_sendmsg+0x21f/0x2a0 [ 1117.296267][ T7612] ? __pfx____sys_sendmsg+0x10/0x10 [ 1117.296325][ T7612] ? __fget_files+0x2a/0x420 [ 1117.296344][ T7612] ? __fget_files+0x3a0/0x420 [ 1117.296374][ T7612] __x64_sys_sendmsg+0x19b/0x260 [ 1117.296398][ T7612] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1117.296428][ T7612] ? __pfx_ksys_write+0x10/0x10 [ 1117.296456][ T7612] do_syscall_64+0xec/0xf80 [ 1117.296477][ T7612] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1117.296493][ T7612] ? trace_irq_disable+0x37/0x100 [ 1117.296514][ T7612] ? clear_bhb_loop+0x60/0xb0 [ 1117.296533][ T7612] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1117.296551][ T7612] RIP: 0033:0x7f96faf8f749 [ 1117.296568][ T7612] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1117.296591][ T7612] RSP: 002b:00007f96fbd9e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1117.296611][ T7612] RAX: ffffffffffffffda RBX: 00007f96fb1e5fa0 RCX: 00007f96faf8f749 [ 1117.296624][ T7612] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 1117.296636][ T7612] RBP: 00007f96fbd9e090 R08: 0000000000000000 R09: 0000000000000000 [ 1117.296648][ T7612] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1117.296659][ T7612] R13: 00007f96fb1e6038 R14: 00007f96fb1e5fa0 R15: 00007ffe1b098fb8 [ 1117.296689][ T7612] [ 1117.625809][ T4595] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 1117.932253][ T7633] __nla_validate_parse: 12 callbacks suppressed [ 1117.932274][ T7633] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10736'. [ 1118.368210][ T7649] block nbd0: server does not support multiple connections per device. [ 1118.398159][ T7649] block nbd0: shutting down sockets [ 1118.455372][ T7652] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1118.661095][ T7671] netlink: 'syz.3.10750': attribute type 4 has an invalid length. [ 1118.718697][ T7674] netlink: 516 bytes leftover after parsing attributes in process `syz.3.10750'. [ 1118.760853][ T7676] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10747'. [ 1119.118258][ T7667] bridge0: port 2(bridge_slave_1) entered disabled state [ 1119.125645][ T7667] bridge0: port 1(bridge_slave_0) entered disabled state [ 1119.532245][ T7697] netlink: 'syz.2.10753': attribute type 4 has an invalid length. [ 1119.541327][ T7697] netlink: 15538 bytes leftover after parsing attributes in process `syz.2.10753'. [ 1119.711361][ T7667] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1119.756699][ T7667] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1119.791413][ T7667] xfrm0: left promiscuous mode [ 1119.802392][ T7667] xfrm0: left allmulticast mode [ 1120.037213][ T7667] ip6erspan0: left promiscuous mode [ 1120.051603][ T7667] ip6tnl1: left promiscuous mode [ 1120.058507][ T7667] geneve2: left promiscuous mode [ 1120.063490][ T7667] geneve2: left allmulticast mode [ 1120.114527][ T7684] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1120.133460][ T7699] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10754'. [ 1120.165837][ T148] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1120.184722][ T148] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 1120.225333][ T148] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1120.234763][ T148] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 1120.254999][ T148] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1120.282495][ T148] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 1120.312453][ T148] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1120.333443][ T148] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 1120.706031][ T7721] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1120.753162][ T7729] lo speed is unknown, defaulting to 1000 [ 1120.932127][ T7736] netlink: 128 bytes leftover after parsing attributes in process `syz.2.10765'. [ 1120.942393][ T7736] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1120.975206][ T7736] netlink: 'syz.2.10765': attribute type 39 has an invalid length. [ 1121.369227][ T7748] FAULT_INJECTION: forcing a failure. [ 1121.369227][ T7748] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1121.435479][ T7748] CPU: 1 UID: 0 PID: 7748 Comm: syz.1.10768 Not tainted syzkaller #0 PREEMPT(full) [ 1121.435504][ T7748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1121.435513][ T7748] Call Trace: [ 1121.435521][ T7748] [ 1121.435529][ T7748] dump_stack_lvl+0xe8/0x150 [ 1121.435557][ T7748] should_fail_ex+0x414/0x560 [ 1121.435589][ T7748] _copy_from_user+0x2d/0xb0 [ 1121.435611][ T7748] do_sock_getsockopt+0x15c/0x3d0 [ 1121.435641][ T7748] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1121.435662][ T7748] ? __fget_files+0x3a0/0x420 [ 1121.435681][ T7748] ? __fget_files+0x2a/0x420 [ 1121.435707][ T7748] __x64_sys_getsockopt+0x1a5/0x250 [ 1121.435737][ T7748] do_syscall_64+0xec/0xf80 [ 1121.435758][ T7748] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1121.435774][ T7748] ? trace_irq_disable+0x37/0x100 [ 1121.435801][ T7748] ? clear_bhb_loop+0x60/0xb0 [ 1121.435822][ T7748] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1121.435839][ T7748] RIP: 0033:0x7f96faf8f749 [ 1121.435856][ T7748] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1121.435872][ T7748] RSP: 002b:00007f96fbd7d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1121.435892][ T7748] RAX: ffffffffffffffda RBX: 00007f96fb1e6090 RCX: 00007f96faf8f749 [ 1121.435906][ T7748] RDX: 0000000000000486 RSI: 0000000000000000 RDI: 0000000000000003 [ 1121.435917][ T7748] RBP: 00007f96fbd7d090 R08: 00002000000007c0 R09: 0000000000000000 [ 1121.435929][ T7748] R10: 0000200000000780 R11: 0000000000000246 R12: 0000000000000001 [ 1121.435940][ T7748] R13: 00007f96fb1e6128 R14: 00007f96fb1e6090 R15: 00007ffe1b098fb8 [ 1121.435976][ T7748] [ 1121.792797][ T7761] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10773'. [ 1121.842540][ T7761] netlink: 'syz.4.10773': attribute type 5 has an invalid length. [ 1121.857224][ T7770] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10773'. [ 1121.867243][ T7761] netlink: 'syz.4.10773': attribute type 8 has an invalid length. [ 1121.905835][ T7761] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10773'. [ 1121.925097][ T7770] netlink: 'syz.4.10773': attribute type 5 has an invalid length. [ 1121.970609][ T7770] netlink: 'syz.4.10773': attribute type 8 has an invalid length. [ 1122.036610][ T7770] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10773'. [ 1122.070040][ T7761] geneve2: entered promiscuous mode [ 1122.070734][ T7776] FAULT_INJECTION: forcing a failure. [ 1122.070734][ T7776] name failslab, interval 1, probability 0, space 0, times 0 [ 1122.095884][ T7761] geneve2: entered allmulticast mode [ 1122.109395][ T6060] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 1122.150441][ T7776] CPU: 0 UID: 0 PID: 7776 Comm: syz.3.10778 Not tainted syzkaller #0 PREEMPT(full) [ 1122.150468][ T7776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1122.150478][ T7776] Call Trace: [ 1122.150486][ T7776] [ 1122.150494][ T7776] dump_stack_lvl+0xe8/0x150 [ 1122.150521][ T7776] should_fail_ex+0x414/0x560 [ 1122.150549][ T7776] should_failslab+0xa8/0x100 [ 1122.150571][ T7776] kmem_cache_alloc_noprof+0x88/0x710 [ 1122.150596][ T7776] ? skb_clone+0x212/0x3a0 [ 1122.150621][ T7776] skb_clone+0x212/0x3a0 [ 1122.150646][ T7776] __netlink_deliver_tap+0x404/0x850 [ 1122.150679][ T7776] ? netlink_deliver_tap+0x2e/0x1b0 [ 1122.150704][ T7776] netlink_deliver_tap+0x19c/0x1b0 [ 1122.150727][ T7776] netlink_sendskb+0x68/0x140 [ 1122.150749][ T7776] netlink_unicast+0x397/0x9e0 [ 1122.150779][ T7776] ? __pfx_netlink_unicast+0x10/0x10 [ 1122.150813][ T7776] batadv_netlink_get_mesh+0x125/0x1d0 [ 1122.150834][ T7776] genl_family_rcv_msg_doit+0x215/0x300 [ 1122.150860][ T7776] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1122.150899][ T7776] ? __dev_queue_xmit+0x280/0x3100 [ 1122.150929][ T7776] genl_rcv_msg+0x60e/0x790 [ 1122.150954][ T7776] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1122.150972][ T7776] ? __pfx_batadv_pre_doit+0x10/0x10 [ 1122.150987][ T7776] ? __pfx_batadv_netlink_get_mesh+0x10/0x10 [ 1122.151001][ T7776] ? __pfx_batadv_post_doit+0x10/0x10 [ 1122.151018][ T7776] ? __asan_memcpy+0x40/0x70 [ 1122.151034][ T7776] ? __pfx_ref_tracker_free+0x10/0x10 [ 1122.151061][ T7776] netlink_rcv_skb+0x208/0x470 [ 1122.151084][ T7776] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1122.151105][ T7776] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1122.151125][ T7776] ? genl_rcv+0x19/0x40 [ 1122.151162][ T7776] ? down_read+0x274/0x2e0 [ 1122.151180][ T7776] ? genl_rcv+0xd/0x40 [ 1122.151199][ T7776] genl_rcv+0x28/0x40 [ 1122.151215][ T7776] netlink_unicast+0x82f/0x9e0 [ 1122.151245][ T7776] ? __pfx_netlink_unicast+0x10/0x10 [ 1122.151268][ T7776] ? netlink_sendmsg+0x642/0xb30 [ 1122.151291][ T7776] ? skb_put+0x11b/0x210 [ 1122.151314][ T7776] netlink_sendmsg+0x805/0xb30 [ 1122.151346][ T7776] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1122.151372][ T7776] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1122.151396][ T7776] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1122.151413][ T7776] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1122.151438][ T7776] __sock_sendmsg+0x21c/0x270 [ 1122.151467][ T7776] ____sys_sendmsg+0x505/0x820 [ 1122.151495][ T7776] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1122.151527][ T7776] ? import_iovec+0x74/0xa0 [ 1122.151552][ T7776] ___sys_sendmsg+0x21f/0x2a0 [ 1122.151576][ T7776] ? __pfx____sys_sendmsg+0x10/0x10 [ 1122.151634][ T7776] ? __fget_files+0x2a/0x420 [ 1122.151654][ T7776] ? __fget_files+0x3a0/0x420 [ 1122.151685][ T7776] __x64_sys_sendmsg+0x19b/0x260 [ 1122.151710][ T7776] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1122.151742][ T7776] ? __pfx_ksys_write+0x10/0x10 [ 1122.151773][ T7776] do_syscall_64+0xec/0xf80 [ 1122.151794][ T7776] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1122.151811][ T7776] ? trace_irq_disable+0x37/0x100 [ 1122.151831][ T7776] ? clear_bhb_loop+0x60/0xb0 [ 1122.151853][ T7776] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1122.151869][ T7776] RIP: 0033:0x7f843cd8f749 [ 1122.151896][ T7776] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1122.151911][ T7776] RSP: 002b:00007f843dc5d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1122.151932][ T7776] RAX: ffffffffffffffda RBX: 00007f843cfe5fa0 RCX: 00007f843cd8f749 [ 1122.151946][ T7776] RDX: 0000000000008010 RSI: 0000200000000440 RDI: 0000000000000003 [ 1122.151957][ T7776] RBP: 00007f843dc5d090 R08: 0000000000000000 R09: 0000000000000000 [ 1122.151968][ T7776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1122.151980][ T7776] R13: 00007f843cfe6038 R14: 00007f843cfe5fa0 R15: 00007ffe47149898 [ 1122.152012][ T7776] [ 1122.579840][ T7775] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1122.587457][ T6060] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 1122.644781][ T6060] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 1122.655934][ T6060] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 1122.748852][ T7785] bridge0: Device is already in use. [ 1122.922420][ T7793] block nbd0: not configured, cannot reconfigure [ 1122.950442][ T7793] netlink: 'syz.3.10783': attribute type 1 has an invalid length. [ 1123.097799][ T7794] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1123.108672][ T7794] team0: Port device batadv1 added [ 1123.533858][ T7818] __nla_validate_parse: 4 callbacks suppressed [ 1123.533876][ T7818] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10793'. [ 1123.634461][ T7822] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10794'. [ 1123.670053][ T7819] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1123.890378][ T7830] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10798'. [ 1124.073515][ T7834] lo speed is unknown, defaulting to 1000 [ 1124.101635][ T7830] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10798'. [ 1124.127012][ T7830] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10798'. [ 1124.278147][ T7853] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10808'. [ 1124.346530][ T7857] netlink: 240 bytes leftover after parsing attributes in process `syz.2.10807'. [ 1124.364147][ T7854] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1124.409076][ T7853] vlan2: entered promiscuous mode [ 1124.486542][ T7860] tipc: Enabled bearer , priority 0 [ 1124.503550][ T7860] syzkaller0: entered promiscuous mode [ 1124.509708][ T7860] syzkaller0: entered allmulticast mode [ 1124.627981][ T7860] tipc: Resetting bearer [ 1124.654516][ T7859] tipc: Resetting bearer [ 1124.687565][ T7859] tipc: Disabling bearer [ 1124.940929][ T7885] netlink: 'syz.0.10818': attribute type 11 has an invalid length. [ 1124.971477][ T7885] netlink: 'syz.0.10818': attribute type 11 has an invalid length. [ 1125.042003][ T7882] 8021q: VLANs not supported on ip6tnl0 [ 1125.078740][ T7890] --map-set only usable from mangle table [ 1125.090542][ T7892] netlink: 240 bytes leftover after parsing attributes in process `syz.4.10819'. [ 1125.296448][ T7899] Cannot find add_set index 2 as target [ 1125.543431][ T7910] netlink: 'syz.4.10827': attribute type 1 has an invalid length. [ 1125.543431][ T7911] netlink: 'syz.4.10827': attribute type 1 has an invalid length. [ 1125.597330][ T7910] bond8: entered promiscuous mode [ 1125.604103][ T7910] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1125.678121][ T7911] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1125.685433][ T7911] IPv6: NLM_F_CREATE should be set when creating new route [ 1125.692673][ T7911] IPv6: NLM_F_CREATE should be set when creating new route [ 1125.721486][ T7910] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1125.739087][ T7910] bond8: (slave wireguard0): The slave device specified does not support setting the MAC address [ 1125.750345][ T7910] bond8: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 1125.768190][ T7910] bond8: (slave wireguard0): making interface the new active one [ 1125.778524][ T7910] wireguard0: entered promiscuous mode [ 1125.785262][ T7910] bond8: (slave wireguard0): Enslaving as an active interface with an up link [ 1125.794579][ T7918] 8021q: VLANs not supported on caif0 [ 1125.887112][ T7936] netlink: 240 bytes leftover after parsing attributes in process `syz.3.10834'. [ 1126.099078][ T7938] lo speed is unknown, defaulting to 1000 [ 1126.503034][ T7958] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1126.537953][ T7966] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10843'. [ 1127.302585][ T7986] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1127.585981][ T7998] lo speed is unknown, defaulting to 1000 [ 1127.929710][ T8014] netlink: 'syz.3.10860': attribute type 1 has an invalid length. [ 1128.047567][ T8014] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1128.073897][ T8019] vlan2: entered allmulticast mode [ 1128.080773][ T8019] bond7: entered allmulticast mode [ 1128.099699][ T8021] netlink: 'syz.4.10862': attribute type 3 has an invalid length. [ 1128.108174][ T8021] netlink: 'syz.4.10862': attribute type 1 has an invalid length. [ 1128.151368][ T8014] bond7: (slave gretap1): making interface the new active one [ 1128.164581][ T8014] gretap1: entered allmulticast mode [ 1128.209609][ T8014] bond7: (slave gretap1): Enslaving as an active interface with an up link [ 1128.268472][ T8024] netlink: 'syz.4.10863': attribute type 1 has an invalid length. [ 1128.277479][ T6030] IPVS: starting estimator thread 0... [ 1128.311802][ T8027] netlink: 'syz.0.10864': attribute type 5 has an invalid length. [ 1128.365983][ T8025] IPVS: using max 31 ests per chain, 74400 per kthread [ 1143.097077][ T5153] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1143.099995][ T5153] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1143.100884][ T5153] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1143.101747][ T5153] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1143.102312][ T5153] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1143.668216][ T5844] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1143.671059][ T5844] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1143.671953][ T5844] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1143.672803][ T5844] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1143.673355][ T5844] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1143.866463][ T5153] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1143.869327][ T5153] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1143.870180][ T5153] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1143.871044][ T5153] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1143.871594][ T5153] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1144.297803][ T5844] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1144.300329][ T5844] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1144.301235][ T5844] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1144.302077][ T5844] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1144.302710][ T5844] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1144.376576][ T5153] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1144.380081][ T5153] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1144.381074][ T5153] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1144.381961][ T5153] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1144.382594][ T5153] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1145.165625][ T5153] Bluetooth: hci1: command tx timeout [ 1145.725612][ T5153] Bluetooth: hci6: command tx timeout [ 1145.886118][ T5153] Bluetooth: hci7: command tx timeout [ 1146.365544][ T5153] Bluetooth: hci8: command tx timeout [ 1146.445756][ T5153] Bluetooth: hci9: command tx timeout [ 1147.245754][ T5153] Bluetooth: hci1: command tx timeout [ 1147.805766][ T5153] Bluetooth: hci6: command tx timeout [ 1147.965833][ T5153] Bluetooth: hci7: command tx timeout [ 1148.445796][ T5153] Bluetooth: hci8: command tx timeout [ 1148.525703][ T5153] Bluetooth: hci9: command tx timeout [ 1149.326063][ T5153] Bluetooth: hci1: command tx timeout [ 1149.886602][ T5153] Bluetooth: hci6: command tx timeout [ 1150.045967][ T5153] Bluetooth: hci7: command tx timeout [ 1150.526467][ T5153] Bluetooth: hci8: command tx timeout [ 1150.605918][ T5153] Bluetooth: hci9: command tx timeout [ 1151.405770][ T5153] Bluetooth: hci1: command tx timeout [ 1151.966673][ T5153] Bluetooth: hci6: command tx timeout [ 1152.125170][ T5153] Bluetooth: hci7: command tx timeout [ 1152.605483][ T5153] Bluetooth: hci8: command tx timeout [ 1152.685489][ T5153] Bluetooth: hci9: command tx timeout [ 1203.177211][ T5844] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1203.180148][ T5844] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1203.181049][ T5844] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1203.182043][ T5844] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1203.182608][ T5844] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1203.658075][ T5844] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1203.661914][ T5844] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1203.662744][ T5844] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1203.663731][ T5844] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1203.664313][ T5844] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1204.176406][ T5153] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 1204.179251][ T5153] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 1204.180139][ T5153] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 1204.181007][ T5153] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 1204.181575][ T5153] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 1204.687462][ T5844] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 1204.690379][ T5844] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 1204.691282][ T5844] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 1204.696141][ T5844] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 1204.696789][ T5844] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 1205.006590][ T5153] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 1205.009503][ T5153] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 1205.010452][ T5153] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 1205.011303][ T5153] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 1205.013117][ T5153] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 1205.245837][ T5153] Bluetooth: hci10: command tx timeout [ 1205.725495][ T5153] Bluetooth: hci11: command tx timeout [ 1206.205498][ T5153] Bluetooth: hci12: command tx timeout [ 1206.765862][ T5153] Bluetooth: hci13: command tx timeout [ 1207.085502][ T5153] Bluetooth: hci14: command tx timeout [ 1207.325851][ T5153] Bluetooth: hci10: command tx timeout [ 1207.805566][ T5153] Bluetooth: hci11: command tx timeout [ 1208.287531][ T5153] Bluetooth: hci12: command tx timeout [ 1208.845627][ T5153] Bluetooth: hci13: command tx timeout [ 1209.164878][ T5153] Bluetooth: hci14: command tx timeout [ 1209.405437][ T5153] Bluetooth: hci10: command tx timeout [ 1209.885823][ T5153] Bluetooth: hci11: command tx timeout [ 1210.365455][ T5153] Bluetooth: hci12: command tx timeout [ 1210.925751][ T5153] Bluetooth: hci13: command tx timeout [ 1211.245635][ T5844] Bluetooth: hci14: command tx timeout [ 1211.484902][ T5153] Bluetooth: hci10: command tx timeout [ 1211.968747][ T5153] Bluetooth: hci11: command tx timeout [ 1212.445460][ T5153] Bluetooth: hci12: command tx timeout [ 1213.005636][ T5153] Bluetooth: hci13: command tx timeout [ 1213.325968][ T5153] Bluetooth: hci14: command tx timeout [ 1233.324824][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 1233.324852][ C0] rcu: 0-....: (1 GPs behind) idle=6c7c/1/0x4000000000000000 softirq=225044/225045 fqs=5216 [ 1233.325621][ C0] rcu: hardirqs softirqs csw/system [ 1233.325634][ C0] rcu: number: 8160 0 0 [ 1233.325648][ C0] rcu: cputime: 211 52268 5 ==> 52480(ms) [ 1233.325668][ C0] rcu: (t=10500 jiffies g=207761 q=2616 ncpus=2) [ 1233.325691][ C0] CPU: 0 UID: 0 PID: 8027 Comm: syz.0.10864 Not tainted syzkaller #0 PREEMPT(full) [ 1233.325711][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1233.325722][ C0] RIP: 0010:qdisc_peek_head+0x0/0x40 [ 1233.325750][ C0] Code: 4c 89 ff e8 52 c9 c3 f8 e9 95 fe ff ff 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 53 48 89 fb e8 93 a6 5d f8 48 81 c3 40 01 00 00 48 89 [ 1233.325764][ C0] RSP: 0018:ffffc90000007c68 EFLAGS: 00000246 [ 1233.325780][ C0] RAX: 1ffffffff1f05807 RBX: ffff88807af6e800 RCX: 0000000000000100 [ 1233.325792][ C0] RDX: ffff88802595bd00 RSI: 0000000000000000 RDI: ffff88807af6e800 [ 1233.325805][ C0] RBP: ffff88808d784000 R08: ffffffff89702936 R09: ffffffff8df41aa0 [ 1233.325818][ C0] R10: 0000000000000001 R11: ffffffff89635210 R12: dffffc0000000000 [ 1233.325829][ C0] R13: ffff888045fb8000 R14: ffff88807af6e800 R15: ffffffff8f82c038 [ 1233.325843][ C0] FS: 00007f1cab5766c0(0000) GS:ffff888125e1c000(0000) knlGS:0000000000000000 [ 1233.325857][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1233.325869][ C0] CR2: 00002000000022c0 CR3: 0000000056290000 CR4: 00000000003526f0 [ 1233.325884][ C0] Call Trace: [ 1233.325891][ C0] [ 1233.325898][ C0] taprio_dequeue_from_txq+0x174/0x980 [ 1233.325914][ C0] ? taprio_dequeue+0x26/0x550 [ 1233.325943][ C0] taprio_dequeue_tc_priority+0x1ac/0x750 [ 1233.325969][ C0] ? taprio_dequeue+0x26/0x550 [ 1233.325990][ C0] taprio_dequeue+0x186/0x550 [ 1233.326007][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1233.326028][ C0] __qdisc_run+0x23f/0x1510 [ 1233.326064][ C0] qdisc_run+0xc7/0x300 [ 1233.326081][ C0] ? net_tx_action+0x58c/0x900 [ 1233.326097][ C0] net_tx_action+0x717/0x900 [ 1233.326118][ C0] handle_softirqs+0x22b/0x7c0 [ 1233.326138][ C0] ? __irq_exit_rcu+0x60/0x150 [ 1233.326161][ C0] __irq_exit_rcu+0x60/0x150 [ 1233.326178][ C0] irq_exit_rcu+0x9/0x30 [ 1233.326192][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1233.326211][ C0] [ 1233.326217][ C0] [ 1233.326224][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1233.326242][ C0] RIP: 0010:console_flush_all+0x7fc/0xb00 [ 1233.326263][ C0] Code: ff ff e8 b7 f9 1f 00 90 0f 0b 90 e9 85 fc ff ff e8 a9 f9 1f 00 e8 14 42 b9 09 48 85 db 74 c0 e8 9a f9 1f 00 fb 48 8b 5c 24 10 <48> 8b 44 24 20 42 80 3c 28 00 4c 8b 74 24 18 74 08 4c 89 f7 e8 6b [ 1233.326276][ C0] RSP: 0018:ffffc9000b716fc0 EFLAGS: 00000283 [ 1233.326299][ C0] RAX: ffffffff81a0ff16 RBX: ffffc9000b717120 RCX: 0000000000080000 [ 1233.326311][ C0] RDX: ffffc90013cb5000 RSI: 0000000000002b2b RDI: 0000000000002b2c [ 1233.326322][ C0] RBP: ffffc9000b7170d0 R08: ffffffff8f823877 R09: 1ffffffff1f0470e [ 1233.326334][ C0] R10: dffffc0000000000 R11: fffffbfff1f0470f R12: 0000000000000001 [ 1233.326346][ C0] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffffff8e792280 [ 1233.326364][ C0] ? console_flush_all+0x7f6/0xb00 [ 1233.326395][ C0] ? console_flush_all+0x11a/0xb00 [ 1233.326422][ C0] ? __pfx_console_flush_all+0x10/0x10 [ 1233.326447][ C0] ? is_printk_cpu_sync_owner+0x32/0x40 [ 1233.326473][ C0] console_unlock+0xbb/0x190 [ 1233.326495][ C0] ? __pfx_console_unlock+0x10/0x10 [ 1233.326515][ C0] ? _printk+0xcf/0x120 [ 1233.326542][ C0] vprintk_emit+0x47b/0x550 [ 1233.326560][ C0] ? unwind_get_return_address+0x4d/0x90 [ 1233.326581][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 1233.326608][ C0] _printk+0xcf/0x120 [ 1233.326628][ C0] ? __pfx__printk+0x10/0x10 [ 1233.326641][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1233.326651][ C0] ? ___ratelimit+0x5a0/0x900 [ 1233.326665][ C0] __nla_validate_parse+0x1719/0x2d40 [ 1233.326676][ C0] ? __sys_sendto+0x3bd/0x520 [ 1233.326685][ C0] ? __x64_sys_sendto+0xde/0x100 [ 1233.326703][ C0] ? __pfx___nla_validate_parse+0x10/0x10 [ 1233.326722][ C0] ? kasan_quarantine_put+0xbb/0x1f0 [ 1233.326732][ C0] ? lockdep_hardirqs_on+0x7b/0x110 [ 1233.326746][ C0] __nla_validate+0x40/0x60 [ 1233.326757][ C0] rtm_to_fib_config+0x91/0x13c0 [ 1233.326773][ C0] ? __lock_acquire+0x6b6/0x2cf0 [ 1233.326789][ C0] inet_rtm_newroute+0xf3/0x210 [ 1233.326801][ C0] ? __local_bh_enable_ip+0xd0/0x130 [ 1233.326811][ C0] ? __pfx_inet_rtm_newroute+0x10/0x10 [ 1233.326834][ C0] ? __pfx_inet_rtm_newroute+0x10/0x10 [ 1233.326847][ C0] rtnetlink_rcv_msg+0x7cf/0xb70 [ 1233.326861][ C0] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 1233.326871][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1233.326880][ C0] ? ref_tracker_free+0x63a/0x7d0 [ 1233.326890][ C0] ? __asan_memcpy+0x40/0x70 [ 1233.326898][ C0] ? __pfx_ref_tracker_free+0x10/0x10 [ 1233.326912][ C0] netlink_rcv_skb+0x208/0x470 [ 1233.326925][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1233.326936][ C0] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1233.326953][ C0] ? netlink_deliver_tap+0x2e/0x1b0 [ 1233.326969][ C0] netlink_unicast+0x82f/0x9e0 [ 1233.326984][ C0] ? __pfx_netlink_unicast+0x10/0x10 [ 1233.326996][ C0] ? netlink_sendmsg+0x642/0xb30 [ 1233.327007][ C0] ? skb_put+0x11b/0x210 [ 1233.327020][ C0] netlink_sendmsg+0x805/0xb30 [ 1233.327036][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1233.327050][ C0] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1233.327063][ C0] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1233.327072][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1233.327084][ C0] __sock_sendmsg+0x21c/0x270 [ 1233.327099][ C0] __sys_sendto+0x3bd/0x520 [ 1233.327111][ C0] ? __pfx___sys_sendto+0x10/0x10 [ 1233.327120][ C0] ? do_futex+0x395/0x420 [ 1233.327144][ C0] ? rcu_is_watching+0x15/0xb0 [ 1233.327158][ C0] __x64_sys_sendto+0xde/0x100 [ 1233.327170][ C0] do_syscall_64+0xec/0xf80 [ 1233.327181][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1233.327189][ C0] ? trace_irq_disable+0x37/0x100 [ 1233.327201][ C0] ? clear_bhb_loop+0x60/0xb0 [ 1233.327212][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1233.327220][ C0] RIP: 0033:0x7f1caa78f749 [ 1233.327231][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1233.327239][ C0] RSP: 002b:00007f1cab576038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1233.327248][ C0] RAX: ffffffffffffffda RBX: 00007f1caa9e5fa0 RCX: 00007f1caa78f749 [ 1233.327255][ C0] RDX: 0000000000000078 RSI: 00002000000022c0 RDI: 0000000000000007 [ 1233.327261][ C0] RBP: 00007f1caa813f91 R08: 0000000000000000 R09: 0000000000000000 [ 1233.327267][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1233.327273][ C0] R13: 00007f1caa9e6038 R14: 00007f1caa9e5fa0 R15: 00007ffc833046c8 [ 1233.327293][ C0] [ 1263.256456][ T5844] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 1263.259381][ T5844] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 1263.260714][ T5844] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 1263.261694][ T5844] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 1263.262256][ T5844] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 1263.767284][ T5153] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 1263.770385][ T5153] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 1263.771223][ T5153] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 1263.772160][ T5153] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 1263.772742][ T5153] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 1264.226453][ T5844] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 1264.229275][ T5844] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 1264.230090][ T5844] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 1264.230980][ T5844] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 1264.231557][ T5844] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 1264.366335][ T18] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 0-.... } 13599 jiffies s: 178901 root: 0x1/. [ 1264.366387][ T18] rcu: blocking rcu_node structures (internal RCU debug): [ 1264.366410][ T18] Sending NMI from CPU 1 to CPUs 0: [ 1264.366441][ C0] NMI backtrace for cpu 0 [ 1264.366455][ C0] CPU: 0 UID: 0 PID: 8027 Comm: syz.0.10864 Not tainted syzkaller #0 PREEMPT(full) [ 1264.366473][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1264.366484][ C0] RIP: 0010:taprio_dequeue_tc_priority+0x1bb/0x750 [ 1264.366505][ C0] Code: a6 02 00 00 41 8b 75 00 48 8b 7c 24 48 48 8b 54 24 50 8b 4c 24 1c e8 b4 05 00 00 48 89 44 24 10 48 8b 44 24 58 42 0f b6 04 20 <84> c0 0f 85 96 02 00 00 48 8b 44 24 20 44 0f b7 30 48 8b 44 24 70 [ 1264.366518][ C0] RSP: 0018:ffffc90000007cd8 EFLAGS: 00000286 [ 1264.366532][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffff88802595bd00 [ 1264.366542][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: ffff88807af6e800 [ 1264.366553][ C0] RBP: 1ffff11011af086a R08: ffffffff89702936 R09: ffffffff8df41aa0 [ 1264.366565][ C0] R10: 0000000000000001 R11: ffffffff89635210 R12: dffffc0000000000 [ 1264.366576][ C0] R13: ffff88808d784354 R14: 0000000000000010 R15: 0000000000000002 [ 1264.366587][ C0] FS: 00007f1cab5766c0(0000) GS:ffff888125e1c000(0000) knlGS:0000000000000000 [ 1264.366600][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1264.366611][ C0] CR2: 00002000000022c0 CR3: 0000000056290000 CR4: 00000000003526f0 [ 1264.366626][ C0] Call Trace: [ 1264.366633][ C0] [ 1264.366646][ C0] ? taprio_dequeue+0x26/0x550 [ 1264.366667][ C0] taprio_dequeue+0x186/0x550 [ 1264.366686][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1264.366705][ C0] __qdisc_run+0x23f/0x1510 [ 1264.366732][ C0] qdisc_run+0xc7/0x300 [ 1264.366747][ C0] ? net_tx_action+0x58c/0x900 [ 1264.366763][ C0] net_tx_action+0x717/0x900 [ 1264.366781][ C0] handle_softirqs+0x22b/0x7c0 [ 1264.366799][ C0] ? __irq_exit_rcu+0x60/0x150 [ 1264.366817][ C0] __irq_exit_rcu+0x60/0x150 [ 1264.366831][ C0] irq_exit_rcu+0x9/0x30 [ 1264.366844][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1264.366861][ C0] [ 1264.366867][ C0] [ 1264.366873][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1264.366889][ C0] RIP: 0010:console_flush_all+0x7fc/0xb00 [ 1264.366908][ C0] Code: ff ff e8 b7 f9 1f 00 90 0f 0b 90 e9 85 fc ff ff e8 a9 f9 1f 00 e8 14 42 b9 09 48 85 db 74 c0 e8 9a f9 1f 00 fb 48 8b 5c 24 10 <48> 8b 44 24 20 42 80 3c 28 00 4c 8b 74 24 18 74 08 4c 89 f7 e8 6b [ 1264.366921][ C0] RSP: 0018:ffffc9000b716fc0 EFLAGS: 00000283 [ 1264.366934][ C0] RAX: ffffffff81a0ff16 RBX: ffffc9000b717120 RCX: 0000000000080000 [ 1264.366945][ C0] RDX: ffffc90013cb5000 RSI: 0000000000002b2b RDI: 0000000000002b2c [ 1264.366956][ C0] RBP: ffffc9000b7170d0 R08: ffffffff8f823877 R09: 1ffffffff1f0470e [ 1264.366967][ C0] R10: dffffc0000000000 R11: fffffbfff1f0470f R12: 0000000000000001 [ 1264.366979][ C0] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffffff8e792280 [ 1264.366994][ C0] ? console_flush_all+0x7f6/0xb00 [ 1264.367017][ C0] ? console_flush_all+0x11a/0xb00 [ 1264.367038][ C0] ? __pfx_console_flush_all+0x10/0x10 [ 1264.367064][ C0] ? is_printk_cpu_sync_owner+0x32/0x40 [ 1264.367086][ C0] console_unlock+0xbb/0x190 [ 1264.367104][ C0] ? __pfx_console_unlock+0x10/0x10 [ 1264.367121][ C0] ? _printk+0xcf/0x120 [ 1264.367143][ C0] vprintk_emit+0x47b/0x550 [ 1264.367159][ C0] ? unwind_get_return_address+0x4d/0x90 [ 1264.367178][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 1264.367199][ C0] _printk+0xcf/0x120 [ 1264.367221][ C0] ? __pfx__printk+0x10/0x10 [ 1264.367240][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1264.367256][ C0] ? ___ratelimit+0x5a0/0x900 [ 1264.367275][ C0] __nla_validate_parse+0x1719/0x2d40 [ 1264.367292][ C0] ? __sys_sendto+0x3bd/0x520 [ 1264.367307][ C0] ? __x64_sys_sendto+0xde/0x100 [ 1264.367332][ C0] ? __pfx___nla_validate_parse+0x10/0x10 [ 1264.367357][ C0] ? kasan_quarantine_put+0xbb/0x1f0 [ 1264.367372][ C0] ? lockdep_hardirqs_on+0x7b/0x110 [ 1264.367392][ C0] __nla_validate+0x40/0x60 [ 1264.367410][ C0] rtm_to_fib_config+0x91/0x13c0 [ 1264.367433][ C0] ? __lock_acquire+0x6b6/0x2cf0 [ 1264.367454][ C0] inet_rtm_newroute+0xf3/0x210 [ 1264.367474][ C0] ? __local_bh_enable_ip+0xd0/0x130 [ 1264.367490][ C0] ? __pfx_inet_rtm_newroute+0x10/0x10 [ 1264.367519][ C0] ? __pfx_inet_rtm_newroute+0x10/0x10 [ 1264.367539][ C0] rtnetlink_rcv_msg+0x7cf/0xb70 [ 1264.367558][ C0] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 1264.367574][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1264.367589][ C0] ? ref_tracker_free+0x63a/0x7d0 [ 1264.367605][ C0] ? __asan_memcpy+0x40/0x70 [ 1264.367618][ C0] ? __pfx_ref_tracker_free+0x10/0x10 [ 1264.367638][ C0] netlink_rcv_skb+0x208/0x470 [ 1264.367658][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1264.367675][ C0] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1264.367699][ C0] ? netlink_deliver_tap+0x2e/0x1b0 [ 1264.367721][ C0] netlink_unicast+0x82f/0x9e0 [ 1264.367743][ C0] ? __pfx_netlink_unicast+0x10/0x10 [ 1264.367762][ C0] ? netlink_sendmsg+0x642/0xb30 [ 1264.367779][ C0] ? skb_put+0x11b/0x210 [ 1264.367798][ C0] netlink_sendmsg+0x805/0xb30 [ 1264.367821][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1264.367842][ C0] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1264.367861][ C0] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1264.367875][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1264.367895][ C0] __sock_sendmsg+0x21c/0x270 [ 1264.367917][ C0] __sys_sendto+0x3bd/0x520 [ 1264.367935][ C0] ? __pfx___sys_sendto+0x10/0x10 [ 1264.367949][ C0] ? do_futex+0x395/0x420 [ 1264.367979][ C0] ? rcu_is_watching+0x15/0xb0 [ 1264.367999][ C0] __x64_sys_sendto+0xde/0x100 [ 1264.368036][ C0] do_syscall_64+0xec/0xf80 [ 1264.368052][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1264.368072][ C0] ? trace_irq_disable+0x37/0x100 [ 1264.368089][ C0] ? clear_bhb_loop+0x60/0xb0 [ 1264.368106][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1264.368121][ C0] RIP: 0033:0x7f1caa78f749 [ 1264.368135][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1264.368147][ C0] RSP: 002b:00007f1cab576038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1264.368162][ C0] RAX: ffffffffffffffda RBX: 00007f1caa9e5fa0 RCX: 00007f1caa78f749 [ 1264.368174][ C0] RDX: 0000000000000078 RSI: 00002000000022c0 RDI: 0000000000000007 [ 1264.368184][ C0] RBP: 00007f1caa813f91 R08: 0000000000000000 R09: 0000000000000000 [ 1264.368194][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1264.368203][ C0] R13: 00007f1caa9e6038 R14: 00007f1caa9e5fa0 R15: 00007ffc833046c8 [ 1264.368223][ C0] [ 1264.739007][ T8082] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 1264.741415][ T8082] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 1264.742371][ T8082] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 1264.743218][ T8082] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 1264.743807][ T8082] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 1265.325484][ T8082] Bluetooth: hci15: command tx timeout [ 1265.727206][ T3907] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 1265.729725][ T3907] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 1265.731106][ T3907] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 1265.732186][ T3907] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 1265.732749][ T3907] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 1265.805932][ T3907] Bluetooth: hci16: command tx timeout [ 1266.285665][ T3907] Bluetooth: hci17: command tx timeout [ 1266.451065][ T8082] Bluetooth: hci1: command 0x0406 tx timeout [ 1266.451105][ T8082] Bluetooth: hci6: command 0x0406 tx timeout [ 1266.451130][ T8082] Bluetooth: hci8: command 0x0406 tx timeout [ 1266.451176][ T3907] Bluetooth: hci7: command 0x0406 tx timeout [ 1266.765655][ T8079] Bluetooth: hci18: command tx timeout [ 1267.405302][ T8079] Bluetooth: hci15: command tx timeout [ 1267.806182][ T8079] Bluetooth: hci19: command tx timeout [ 1267.886125][ T8079] Bluetooth: hci16: command tx timeout [ 1268.365806][ T8079] Bluetooth: hci17: command tx timeout [ 1268.845459][ T8087] Bluetooth: hci18: command tx timeout [ 1269.487227][ T8087] Bluetooth: hci15: command tx timeout [ 1269.886262][ T8079] Bluetooth: hci19: command tx timeout [ 1269.965952][ T8079] Bluetooth: hci16: command tx timeout [ 1270.446054][ T8079] Bluetooth: hci17: command tx timeout [ 1270.925690][ T8079] Bluetooth: hci18: command tx timeout [ 1271.570492][ T3907] Bluetooth: hci15: command tx timeout [ 1271.570548][ T8079] Bluetooth: hci9: command 0x0406 tx timeout [ 1271.966219][ T8079] Bluetooth: hci19: command tx timeout [ 1272.045481][ T8079] Bluetooth: hci16: command tx timeout [ 1272.525646][ T8079] Bluetooth: hci17: command tx timeout [ 1273.005447][ T8079] Bluetooth: hci18: command tx timeout [ 1274.045738][ T8079] Bluetooth: hci19: command tx timeout [ 1323.335902][ T3907] Bluetooth: hci20: unexpected cc 0x0c03 length: 249 > 1 [ 1323.338858][ T3907] Bluetooth: hci20: unexpected cc 0x1003 length: 249 > 9 [ 1323.339757][ T3907] Bluetooth: hci20: unexpected cc 0x1001 length: 249 > 9 [ 1323.340625][ T3907] Bluetooth: hci20: unexpected cc 0x0c23 length: 249 > 4 [ 1323.341179][ T3907] Bluetooth: hci20: unexpected cc 0x0c38 length: 249 > 2 [ 1323.819771][ T8093] Bluetooth: hci21: unexpected cc 0x0c03 length: 249 > 1 [ 1323.821680][ T8082] Bluetooth: hci21: unexpected cc 0x1003 length: 249 > 9 [ 1323.823102][ T8082] Bluetooth: hci21: unexpected cc 0x1001 length: 249 > 9 [ 1323.824074][ T8082] Bluetooth: hci21: unexpected cc 0x0c23 length: 249 > 4 [ 1323.824621][ T8082] Bluetooth: hci21: unexpected cc 0x0c38 length: 249 > 2 [ 1325.017485][ T8102] Bluetooth: hci22: unexpected cc 0x0c03 length: 249 > 1 [ 1325.023066][ T8102] Bluetooth: hci22: unexpected cc 0x1003 length: 249 > 9 [ 1325.024028][ T8102] Bluetooth: hci22: unexpected cc 0x1001 length: 249 > 9 [ 1325.026093][ T8102] Bluetooth: hci23: unexpected cc 0x0c03 length: 249 > 1 [ 1325.028800][ T8102] Bluetooth: hci23: unexpected cc 0x1003 length: 249 > 9 [ 1325.030202][ T8102] Bluetooth: hci23: unexpected cc 0x1001 length: 249 > 9 [ 1325.031123][ T8102] Bluetooth: hci23: unexpected cc 0x0c23 length: 249 > 4 [ 1325.031671][ T8102] Bluetooth: hci23: unexpected cc 0x0c38 length: 249 > 2 [ 1325.037765][ T8102] Bluetooth: hci22: unexpected cc 0x0c23 length: 249 > 4 [ 1325.038363][ T8102] Bluetooth: hci22: unexpected cc 0x0c38 length: 249 > 2 [ 1325.799623][ T8103] Bluetooth: hci24: unexpected cc 0x0c03 length: 249 > 1 [ 1325.802912][ T8103] Bluetooth: hci24: unexpected cc 0x1003 length: 249 > 9 [ 1325.803803][ T8103] Bluetooth: hci24: unexpected cc 0x1001 length: 249 > 9 [ 1325.804709][ T8103] Bluetooth: hci24: unexpected cc 0x0c23 length: 249 > 4 [ 1325.805355][ T8103] Bluetooth: hci24: unexpected cc 0x0c38 length: 249 > 2 [ 1327.975624][ T8099] Bluetooth: hci10: command 0x0406 tx timeout [ 1327.975664][ T8099] Bluetooth: hci11: command 0x0406 tx timeout [ 1327.975689][ T8099] Bluetooth: hci12: command 0x0406 tx timeout [ 1327.975718][ T8099] Bluetooth: hci13: command 0x0406 tx timeout [ 1327.975742][ T8099] Bluetooth: hci14: command 0x0406 tx timeout [ 1383.791897][ T8112] Bluetooth: hci25: unexpected cc 0x0c03 length: 249 > 1 [ 1383.795948][ T8112] Bluetooth: hci25: unexpected cc 0x1003 length: 249 > 9 [ 1383.796846][ T8112] Bluetooth: hci25: unexpected cc 0x1001 length: 249 > 9 [ 1383.797705][ T8112] Bluetooth: hci25: unexpected cc 0x0c23 length: 249 > 4 [ 1383.798339][ T8112] Bluetooth: hci25: unexpected cc 0x0c38 length: 249 > 2 [ 1384.278379][ T8118] Bluetooth: hci26: unexpected cc 0x0c03 length: 249 > 1 [ 1384.280747][ T8118] Bluetooth: hci26: unexpected cc 0x1003 length: 249 > 9 [ 1384.281626][ T8118] Bluetooth: hci26: unexpected cc 0x1001 length: 249 > 9 [ 1384.282454][ T8118] Bluetooth: hci26: unexpected cc 0x0c23 length: 249 > 4 [ 1384.283035][ T8118] Bluetooth: hci26: unexpected cc 0x0c38 length: 249 > 2 [ 1385.362137][ T8122] Bluetooth: hci27: unexpected cc 0x0c03 length: 249 > 1 [ 1385.365492][ T8122] Bluetooth: hci27: unexpected cc 0x1003 length: 249 > 9 [ 1385.366408][ T8122] Bluetooth: hci27: unexpected cc 0x1001 length: 249 > 9 [ 1385.367258][ T8122] Bluetooth: hci27: unexpected cc 0x0c23 length: 249 > 4 [ 1385.367836][ T8122] Bluetooth: hci27: unexpected cc 0x0c38 length: 249 > 2 [ 1385.812621][ T8126] Bluetooth: hci28: unexpected cc 0x0c03 length: 249 > 1 [ 1385.816363][ T8126] Bluetooth: hci28: unexpected cc 0x1003 length: 249 > 9 [ 1385.817419][ T8126] Bluetooth: hci28: unexpected cc 0x1001 length: 249 > 9 [ 1385.818305][ T8126] Bluetooth: hci28: unexpected cc 0x0c23 length: 249 > 4 [ 1385.818877][ T8126] Bluetooth: hci28: unexpected cc 0x0c38 length: 249 > 2 [ 1386.353271][ T8099] Bluetooth: hci29: unexpected cc 0x0c03 length: 249 > 1 [ 1386.358377][ T8099] Bluetooth: hci29: unexpected cc 0x1003 length: 249 > 9 [ 1386.359278][ T8099] Bluetooth: hci29: unexpected cc 0x1001 length: 249 > 9 [ 1386.360125][ T8099] Bluetooth: hci29: unexpected cc 0x0c23 length: 249 > 4 [ 1386.360681][ T8099] Bluetooth: hci29: unexpected cc 0x0c38 length: 249 > 2 [ 1389.330749][ T8130] Bluetooth: hci15: command 0x0406 tx timeout [ 1389.330793][ T8130] Bluetooth: hci16: command 0x0406 tx timeout [ 1389.330819][ T8130] Bluetooth: hci17: command 0x0406 tx timeout [ 1389.330842][ T8130] Bluetooth: hci18: command 0x0406 tx timeout [ 1389.330865][ T8130] Bluetooth: hci19: command 0x0406 tx timeout [ 1410.312242][ C0] watchdog: BUG: soft lockup - CPU#0 stuck for 266s! [syz.0.10864:8027] [ 1410.312259][ C0] Modules linked in: [ 1410.312278][ C0] irq event stamp: 88215 [ 1410.312282][ C0] hardirqs last enabled at (88214): [] irqentry_exit+0x5e8/0x670 [ 1410.312302][ C0] hardirqs last disabled at (88215): [] sysvec_apic_timer_interrupt+0xe/0xc0 [ 1410.312315][ C0] softirqs last enabled at (268): [] __dev_queue_xmit+0x280/0x3100 [ 1410.312330][ C0] softirqs last disabled at (281): [] __irq_exit_rcu+0x60/0x150 [ 1410.312352][ C0] CPU: 0 UID: 0 PID: 8027 Comm: syz.0.10864 Not tainted syzkaller #0 PREEMPT(full) [ 1410.312374][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1410.312386][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x20/0x70 [ 1410.312399][ C0] Code: 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 04 24 65 48 8b 0c 25 08 40 80 92 65 8b 15 68 47 bf 10 81 e2 00 01 ff 00 74 11 <81> fa 00 01 00 00 75 35 83 b9 6c 16 00 00 00 74 2c 8b 91 48 16 00 [ 1410.312408][ C0] RSP: 0018:ffffc90000007cd0 EFLAGS: 00000206 [ 1410.312416][ C0] RAX: ffffffff8970d020 RBX: 0000000000000000 RCX: ffff88802595bd00 [ 1410.312423][ C0] RDX: 0000000000000100 RSI: 0000000000000010 RDI: 0000000000000008 [ 1410.312429][ C0] RBP: 1ffff11011af086a R08: ffffffff89702936 R09: ffffffff8df41aa0 [ 1410.312436][ C0] R10: 0000000000000001 R11: ffffffff89635210 R12: dffffc0000000000 [ 1410.312442][ C0] R13: ffff88808d784354 R14: 0000000000000010 R15: 0000000000000002 [ 1410.312449][ C0] FS: 00007f1cab5766c0(0000) GS:ffff888125e1c000(0000) knlGS:0000000000000000 [ 1410.312457][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1410.312463][ C0] CR2: 00002000000022c0 CR3: 0000000056290000 CR4: 00000000003526f0 [ 1410.312472][ C0] Call Trace: [ 1410.312477][ C0] [ 1410.312482][ C0] taprio_dequeue_tc_priority+0x2d0/0x750 [ 1410.312499][ C0] ? taprio_dequeue+0x26/0x550 [ 1410.312512][ C0] taprio_dequeue+0x186/0x550 [ 1410.312523][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1410.312536][ C0] __qdisc_run+0x23f/0x1510 [ 1410.312556][ C0] qdisc_run+0xc7/0x300 [ 1410.312567][ C0] ? net_tx_action+0x58c/0x900 [ 1410.312576][ C0] net_tx_action+0x717/0x900 [ 1410.312589][ C0] handle_softirqs+0x22b/0x7c0 [ 1410.312599][ C0] ? __irq_exit_rcu+0x60/0x150 [ 1410.312612][ C0] __irq_exit_rcu+0x60/0x150 [ 1410.312621][ C0] irq_exit_rcu+0x9/0x30 [ 1410.312629][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1410.312641][ C0] [ 1410.312644][ C0] [ 1410.312648][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1410.312658][ C0] RIP: 0010:console_flush_all+0x7fc/0xb00 [ 1410.312671][ C0] Code: ff ff e8 b7 f9 1f 00 90 0f 0b 90 e9 85 fc ff ff e8 a9 f9 1f 00 e8 14 42 b9 09 48 85 db 74 c0 e8 9a f9 1f 00 fb 48 8b 5c 24 10 <48> 8b 44 24 20 42 80 3c 28 00 4c 8b 74 24 18 74 08 4c 89 f7 e8 6b [ 1410.312679][ C0] RSP: 0018:ffffc9000b716fc0 EFLAGS: 00000283 [ 1410.312686][ C0] RAX: ffffffff81a0ff16 RBX: ffffc9000b717120 RCX: 0000000000080000 [ 1410.312693][ C0] RDX: ffffc90013cb5000 RSI: 0000000000002b2b RDI: 0000000000002b2c [ 1410.312699][ C0] RBP: ffffc9000b7170d0 R08: ffffffff8f823877 R09: 1ffffffff1f0470e [ 1410.312706][ C0] R10: dffffc0000000000 R11: fffffbfff1f0470f R12: 0000000000000001 [ 1410.312712][ C0] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffffff8e792280 [ 1410.312722][ C0] ? console_flush_all+0x7f6/0xb00 [ 1410.312739][ C0] ? console_flush_all+0x11a/0xb00 [ 1410.312753][ C0] ? __pfx_console_flush_all+0x10/0x10 [ 1410.312767][ C0] ? is_printk_cpu_sync_owner+0x32/0x40 [ 1410.312781][ C0] console_unlock+0xbb/0x190 [ 1410.312793][ C0] ? __pfx_console_unlock+0x10/0x10 [ 1410.312804][ C0] ? _printk+0xcf/0x120 [ 1410.312819][ C0] vprintk_emit+0x47b/0x550 [ 1410.312829][ C0] ? unwind_get_return_address+0x4d/0x90 [ 1410.312841][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 1410.312855][ C0] _printk+0xcf/0x120 [ 1410.312896][ C0] ? __pfx__printk+0x10/0x10 [ 1410.312909][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1410.312918][ C0] ? ___ratelimit+0x5a0/0x900 [ 1410.312931][ C0] __nla_validate_parse+0x1719/0x2d40 [ 1410.312943][ C0] ? __sys_sendto+0x3bd/0x520 [ 1410.312952][ C0] ? __x64_sys_sendto+0xde/0x100 [ 1410.312970][ C0] ? __pfx___nla_validate_parse+0x10/0x10 [ 1410.312988][ C0] ? kasan_quarantine_put+0xbb/0x1f0 [ 1410.312998][ C0] ? lockdep_hardirqs_on+0x7b/0x110 [ 1410.313011][ C0] __nla_validate+0x40/0x60 [ 1410.313023][ C0] rtm_to_fib_config+0x91/0x13c0 [ 1410.313038][ C0] ? __lock_acquire+0x6b6/0x2cf0 [ 1410.313054][ C0] inet_rtm_newroute+0xf3/0x210 [ 1410.313066][ C0] ? __local_bh_enable_ip+0xd0/0x130 [ 1410.313075][ C0] ? __pfx_inet_rtm_newroute+0x10/0x10 [ 1410.313097][ C0] ? __pfx_inet_rtm_newroute+0x10/0x10 [ 1410.313109][ C0] rtnetlink_rcv_msg+0x7cf/0xb70 [ 1410.313123][ C0] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 1410.313132][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1410.313141][ C0] ? ref_tracker_free+0x63a/0x7d0 [ 1410.313151][ C0] ? __asan_memcpy+0x40/0x70 [ 1410.313159][ C0] ? __pfx_ref_tracker_free+0x10/0x10 [ 1410.313173][ C0] netlink_rcv_skb+0x208/0x470 [ 1410.313187][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1410.313198][ C0] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1410.313215][ C0] ? netlink_deliver_tap+0x2e/0x1b0 [ 1410.313230][ C0] netlink_unicast+0x82f/0x9e0 [ 1410.313245][ C0] ? __pfx_netlink_unicast+0x10/0x10 [ 1410.313257][ C0] ? netlink_sendmsg+0x642/0xb30 [ 1410.313268][ C0] ? skb_put+0x11b/0x210 [ 1410.313281][ C0] netlink_sendmsg+0x805/0xb30 [ 1410.313298][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1410.313311][ C0] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1410.313324][ C0] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1410.313333][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1410.313345][ C0] __sock_sendmsg+0x21c/0x270 [ 1410.313361][ C0] __sys_sendto+0x3bd/0x520 [ 1410.313372][ C0] ? __pfx___sys_sendto+0x10/0x10 [ 1410.313381][ C0] ? do_futex+0x395/0x420 [ 1410.313404][ C0] ? rcu_is_watching+0x15/0xb0 [ 1410.313418][ C0] __x64_sys_sendto+0xde/0x100 [ 1410.313430][ C0] do_syscall_64+0xec/0xf80 [ 1410.313441][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1410.313449][ C0] ? trace_irq_disable+0x37/0x100 [ 1410.313460][ C0] ? clear_bhb_loop+0x60/0xb0 [ 1410.313471][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1410.313480][ C0] RIP: 0033:0x7f1caa78f749 [ 1410.313490][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1410.313498][ C0] RSP: 002b:00007f1cab576038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1410.313507][ C0] RAX: ffffffffffffffda RBX: 00007f1caa9e5fa0 RCX: 00007f1caa78f749 [ 1410.313514][ C0] RDX: 0000000000000078 RSI: 00002000000022c0 RDI: 0000000000000007 [ 1410.313520][ C0] RBP: 00007f1caa813f91 R08: 0000000000000000 R09: 0000000000000000 [ 1410.313525][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1410.313531][ C0] R13: 00007f1caa9e6038 R14: 00007f1caa9e5fa0 R15: 00007ffc833046c8 [ 1410.313545][ C0] [ 1410.313550][ C0] Sending NMI from CPU 0 to CPUs 1: [ 1410.313591][ C1] NMI backtrace for cpu 1 [ 1410.313603][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 1410.313637][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1410.313656][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 1410.313673][ C1] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 53 11 0e 00 f3 0f 1e fa fb f4 08 e3 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 1410.313686][ C1] RSP: 0018:ffffc90000197e20 EFLAGS: 000002c6 [ 1410.313699][ C1] RAX: 000000000047c991 RBX: ffffffff8197149e RCX: 0000000080000001 [ 1410.313710][ C1] RDX: 0000000000000001 RSI: ffffffff8d794248 RDI: ffffffff8bc086e0 [ 1410.313721][ C1] RBP: ffffc90000197f10 R08: ffff8880b87336db R09: 1ffff110170e66db [ 1410.313733][ C1] R10: dffffc0000000000 R11: ffffed10170e66dc R12: ffffffff8f823870 [ 1410.313744][ C1] R13: 1ffff110038dfb70 R14: 0000000000000001 R15: 0000000000000001 [ 1410.313755][ C1] FS: 0000000000000000(0000) GS:ffff888125f1c000(0000) knlGS:0000000000000000 [ 1410.313768][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1410.313779][ C1] CR2: 00007fc9caae249c CR3: 000000000dd3a000 CR4: 00000000003526f0 [ 1410.313793][ C1] Call Trace: [ 1410.313799][ C1] [ 1410.313805][ C1] default_idle+0x13/0x20 [ 1410.313823][ C1] default_idle_call+0x73/0xb0 [ 1410.313841][ C1] do_idle+0x1be/0x4d0 [ 1410.313856][ C1] ? asm_sysvec_call_function_single+0x1a/0x20 [ 1410.313874][ C1] ? __pfx_do_idle+0x10/0x10 [ 1410.313894][ C1] cpu_startup_entry+0x44/0x60 [ 1410.313910][ C1] start_secondary+0x101/0x110 [ 1410.313930][ C1] common_startup_64+0x13e/0x147 [ 1410.313955][ C1] [ 1410.314573][ C0] Kernel panic - not syncing: softlockup: hung tasks [ 1410.314582][ C0] CPU: 0 UID: 0 PID: 8027 Comm: syz.0.10864 Tainted: G L syzkaller #0 PREEMPT(full) [ 1410.314595][ C0] Tainted: [L]=SOFTLOCKUP [ 1410.314599][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1410.314605][ C0] Call Trace: [ 1410.314610][ C0] [ 1410.314614][ C0] vpanic+0x1e0/0x670 [ 1410.314627][ C0] panic+0xb9/0xc0 [ 1410.314638][ C0] ? __pfx_panic+0x10/0x10 [ 1410.314647][ C0] ? printk_trigger_flush+0x137/0x170 [ 1410.314667][ C0] watchdog_timer_fn+0x75f/0x760 [ 1410.314681][ C0] ? __pfx_watchdog_timer_fn+0x10/0x10 [ 1410.314695][ C0] __hrtimer_run_queues+0x4d0/0xc30 [ 1410.314734][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1410.314751][ C0] ? ktime_get_update_offsets_now+0x3b2/0x3d0 [ 1410.314775][ C0] hrtimer_interrupt+0x45b/0xaa0 [ 1410.314803][ C0] __sysvec_apic_timer_interrupt+0x102/0x3e0 [ 1410.314816][ C0] sysvec_apic_timer_interrupt+0x52/0xc0 [ 1410.314827][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1410.314836][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x20/0x70 [ 1410.314848][ C0] Code: 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 04 24 65 48 8b 0c 25 08 40 80 92 65 8b 15 68 47 bf 10 81 e2 00 01 ff 00 74 11 <81> fa 00 01 00 00 75 35 83 b9 6c 16 00 00 00 74 2c 8b 91 48 16 00 [ 1410.314857][ C0] RSP: 0018:ffffc90000007cd0 EFLAGS: 00000206 [ 1410.314869][ C0] RAX: ffffffff8970d020 RBX: 0000000000000000 RCX: ffff88802595bd00 [ 1410.314878][ C0] RDX: 0000000000000100 RSI: 0000000000000010 RDI: 0000000000000008 [ 1410.314884][ C0] RBP: 1ffff11011af086a R08: ffffffff89702936 R09: ffffffff8df41aa0 [ 1410.314892][ C0] R10: 0000000000000001 R11: ffffffff89635210 R12: dffffc0000000000 [ 1410.314905][ C0] R13: ffff88808d784354 R14: 0000000000000010 R15: 0000000000000002 [ 1410.314914][ C0] ? __pfx_qdisc_peek_head+0x10/0x10 [ 1410.314927][ C0] ? taprio_dequeue+0x26/0x550 [ 1410.314938][ C0] ? taprio_dequeue_tc_priority+0x2d0/0x750 [ 1410.314950][ C0] taprio_dequeue_tc_priority+0x2d0/0x750 [ 1410.314965][ C0] ? taprio_dequeue+0x26/0x550 [ 1410.314978][ C0] taprio_dequeue+0x186/0x550 [ 1410.314989][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1410.315002][ C0] __qdisc_run+0x23f/0x1510 [ 1410.315021][ C0] qdisc_run+0xc7/0x300 [ 1410.315032][ C0] ? net_tx_action+0x58c/0x900 [ 1410.315042][ C0] net_tx_action+0x717/0x900 [ 1410.315054][ C0] handle_softirqs+0x22b/0x7c0 [ 1410.315064][ C0] ? __irq_exit_rcu+0x60/0x150 [ 1410.315077][ C0] __irq_exit_rcu+0x60/0x150 [ 1410.315086][ C0] irq_exit_rcu+0x9/0x30 [ 1410.315095][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1410.315106][ C0] [ 1410.315110][ C0] [ 1410.315114][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1410.315124][ C0] RIP: 0010:console_flush_all+0x7fc/0xb00 [ 1410.315136][ C0] Code: ff ff e8 b7 f9 1f 00 90 0f 0b 90 e9 85 fc ff ff e8 a9 f9 1f 00 e8 14 42 b9 09 48 85 db 74 c0 e8 9a f9 1f 00 fb 48 8b 5c 24 10 <48> 8b 44 24 20 42 80 3c 28 00 4c 8b 74 24 18 74 08 4c 89 f7 e8 6b [ 1410.315144][ C0] RSP: 0018:ffffc9000b716fc0 EFLAGS: 00000283 [ 1410.315152][ C0] RAX: ffffffff81a0ff16 RBX: ffffc9000b717120 RCX: 0000000000080000 [ 1410.315160][ C0] RDX: ffffc90013cb5000 RSI: 0000000000002b2b RDI: 0000000000002b2c [ 1410.315166][ C0] RBP: ffffc9000b7170d0 R08: ffffffff8f823877 R09: 1ffffffff1f0470e [ 1410.315174][ C0] R10: dffffc0000000000 R11: fffffbfff1f0470f R12: 0000000000000001 [ 1410.315180][ C0] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffffff8e792280 [ 1410.315191][ C0] ? console_flush_all+0x7f6/0xb00 [ 1410.315207][ C0] ? console_flush_all+0x11a/0xb00 [ 1410.315222][ C0] ? __pfx_console_flush_all+0x10/0x10 [ 1410.315235][ C0] ? is_printk_cpu_sync_owner+0x32/0x40 [ 1410.315250][ C0] console_unlock+0xbb/0x190 [ 1410.315262][ C0] ? __pfx_console_unlock+0x10/0x10 [ 1410.315274][ C0] ? _printk+0xcf/0x120 [ 1410.315288][ C0] vprintk_emit+0x47b/0x550 [ 1410.315298][ C0] ? unwind_get_return_address+0x4d/0x90 [ 1410.315310][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 1410.315326][ C0] _printk+0xcf/0x120 [ 1410.315341][ C0] ? __pfx__printk+0x10/0x10 [ 1410.315353][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1410.315363][ C0] ? ___ratelimit+0x5a0/0x900 [ 1410.315376][ C0] __nla_validate_parse+0x1719/0x2d40 [ 1410.315387][ C0] ? __sys_sendto+0x3bd/0x520 [ 1410.315396][ C0] ? __x64_sys_sendto+0xde/0x100 [ 1410.315413][ C0] ? __pfx___nla_validate_parse+0x10/0x10 [ 1410.315431][ C0] ? kasan_quarantine_put+0xbb/0x1f0 [ 1410.315440][ C0] ? lockdep_hardirqs_on+0x7b/0x110 [ 1410.315454][ C0] __nla_validate+0x40/0x60 [ 1410.315465][ C0] rtm_to_fib_config+0x91/0x13c0 [ 1410.315481][ C0] ? __lock_acquire+0x6b6/0x2cf0 [ 1410.315496][ C0] inet_rtm_newroute+0xf3/0x210 [ 1410.315508][ C0] ? __local_bh_enable_ip+0xd0/0x130 [ 1410.315518][ C0] ? __pfx_inet_rtm_newroute+0x10/0x10 [ 1410.315540][ C0] ? __pfx_inet_rtm_newroute+0x10/0x10 [ 1410.315553][ C0] rtnetlink_rcv_msg+0x7cf/0xb70 [ 1410.315565][ C0] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 1410.315575][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1410.315585][ C0] ? ref_tracker_free+0x63a/0x7d0 [ 1410.315595][ C0] ? __asan_memcpy+0x40/0x70 [ 1410.315603][ C0] ? __pfx_ref_tracker_free+0x10/0x10 [ 1410.315617][ C0] netlink_rcv_skb+0x208/0x470 [ 1410.315630][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1410.315641][ C0] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1410.315658][ C0] ? netlink_deliver_tap+0x2e/0x1b0 [ 1410.315674][ C0] netlink_unicast+0x82f/0x9e0 [ 1410.315689][ C0] ? __pfx_netlink_unicast+0x10/0x10 [ 1410.315702][ C0] ? netlink_sendmsg+0x642/0xb30 [ 1410.315713][ C0] ? skb_put+0x11b/0x210 [ 1410.315726][ C0] netlink_sendmsg+0x805/0xb30 [ 1410.315742][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1410.315757][ C0] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1410.315769][ C0] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1410.315778][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1410.315791][ C0] __sock_sendmsg+0x21c/0x270 [ 1410.315806][ C0] __sys_sendto+0x3bd/0x520 [ 1410.315818][ C0] ? __pfx___sys_sendto+0x10/0x10 [ 1410.315827][ C0] ? do_futex+0x395/0x420 [ 1410.315850][ C0] ? rcu_is_watching+0x15/0xb0 [ 1410.315864][ C0] __x64_sys_sendto+0xde/0x100 [ 1410.315876][ C0] do_syscall_64+0xec/0xf80 [ 1410.315887][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1410.315901][ C0] ? trace_irq_disable+0x37/0x100 [ 1410.315913][ C0] ? clear_bhb_loop+0x60/0xb0 [ 1410.315924][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1410.315933][ C0] RIP: 0033:0x7f1caa78f749 [ 1410.315941][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1410.315949][ C0] RSP: 002b:00007f1cab576038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1410.315959][ C0] RAX: ffffffffffffffda RBX: 00007f1caa9e5fa0 RCX: 00007f1caa78f749 [ 1410.315966][ C0] RDX: 0000000000000078 RSI: 00002000000022c0 RDI: 0000000000000007 [ 1410.315973][ C0] RBP: 00007f1caa813f91 R08: 0000000000000000 R09: 0000000000000000 [ 1410.315979][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1410.315985][ C0] R13: 00007f1caa9e6038 R14: 00007f1caa9e5fa0 R15: 00007ffc833046c8 [ 1410.315999][ C0] [ 1410.316399][ C0] Kernel Offset: disabled