last executing test programs: 7.968668672s ago: executing program 1 (id=5486): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) syz_emit_ethernet(0x6a, &(0x7f0000000040)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x4, 0x0, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x1, 0xe000, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x11, 0x0, @local, @rand_addr, {[@generic={0x88, 0x10, "20e3629c506148f500ec207962c0"}, @generic={0x89, 0x2}, @rr={0x7, 0x17, 0x60, [@multicast1, @remote, @private=0xa010100, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r4, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(0xffffffffffffffff, 0x0, 0x880) socket(0x10, 0x803, 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x4, 0x5}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r6}, 0x10) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x0, 0x4}, 0x94) r9 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$int_in(r9, 0x5421, &(0x7f0000000080)=0x2) connect$vsock_stream(r9, &(0x7f0000000440)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(r9, 0x2) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r7, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x87c, 0x2c, 0xd3f, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r10, {0xf000, 0xffff}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x84c, 0x2, [@TCA_ROUTE4_POLICE={0x848, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0x3ff, 0x800, 0x28, 0x0, 0xb, 0x3e, 0xeef6, 0x2, 0x6, 0x9, 0x5, 0x401, 0x4fa0, 0x0, 0x7ff, 0x7, 0x2, 0x1ff, 0x2, 0x92e4, 0x6, 0x561, 0x0, 0x5, 0x8, 0x8, 0xa00, 0x2, 0x8, 0xfffffff8, 0x9, 0x3, 0x8000, 0x80c6, 0x3, 0x6, 0x2, 0x6, 0x9, 0x2, 0x2, 0x8a0b, 0x100, 0x10001, 0x3, 0x4, 0xf3a, 0x6, 0xf, 0x5c72, 0x9, 0x4, 0x7fff, 0x6, 0x2, 0xec89, 0x2, 0xa, 0x3, 0x80000000, 0x7fffffff, 0x5, 0x1, 0x9, 0x6, 0x293, 0x16214, 0x9, 0x1, 0x1, 0x5, 0x8, 0x5, 0x7, 0x4, 0xfffffffe, 0x437, 0x10000, 0x8001, 0x3, 0x54, 0x2, 0x2, 0x9, 0x2, 0x7, 0xe, 0x5, 0x0, 0x1, 0x0, 0x5, 0x7615154, 0xfe000000, 0x0, 0x5, 0x7, 0x7, 0xa0, 0x7, 0x3, 0x8000, 0x3, 0x3, 0x6, 0xcc8, 0x6, 0x1400000, 0x9, 0xffffffff, 0x3, 0x7, 0x0, 0x8, 0x6, 0x7ff, 0x101, 0x8001, 0x1, 0x1, 0x405, 0x7, 0x0, 0xfffffbff, 0xffff0000, 0x9, 0x7fff, 0x1, 0x0, 0x9, 0x7, 0x7ff, 0x1000, 0x6, 0x3, 0xf42e, 0xba, 0x3, 0xd24, 0x40, 0x6, 0xfffffffe, 0x9, 0x9, 0x8, 0x4, 0x1, 0xffffaa35, 0x5, 0x6104df6a, 0x6, 0x5, 0x0, 0x6, 0x8, 0x1, 0x9, 0x8001, 0x8bb, 0x6, 0x4, 0x4, 0x2, 0x7, 0x0, 0x5, 0x4, 0x2, 0x7, 0x101, 0xc7, 0x7, 0x1, 0x6, 0x3, 0x4, 0x13d1, 0x2, 0x9d0, 0x3ff, 0x2, 0x6, 0x5, 0x726, 0x9522, 0x9, 0x9, 0x0, 0x401, 0x5, 0x7f, 0x2, 0xe2, 0xff, 0x19, 0x1, 0x189, 0x34, 0xc, 0xff, 0xdef, 0x3, 0x401, 0x6, 0x185e, 0xb, 0x8, 0xfff, 0x0, 0x5, 0x4, 0x4, 0x10, 0x2, 0x2, 0x7, 0x1, 0x4cbc, 0x7, 0x80000000, 0x40, 0xeb5, 0x7f, 0xdfb, 0x7ff, 0x8, 0x5, 0x4, 0x9, 0xffffffff, 0x7, 0x2, 0xc1d, 0x6, 0x96cc0000, 0x4, 0x3, 0x0, 0x1, 0x5, 0x0, 0x7f, 0x6, 0xd, 0x0, 0x9fd2, 0x6, 0xa0, 0x2ad, 0x8, 0x3ff, 0xbb, 0x2, 0xf9, 0x400, 0x2]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x6e, 0x1, 0x1, 0x7, 0x0, {0x6, 0x1, 0x1, 0xeaeb, 0x5, 0x7}, {0x9, 0x3, 0x1, 0xf2, 0x1, 0x1}, 0x9, 0x4, 0xa}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1000, 0xc2d, 0x4, 0x80000001, 0x8, 0x0, 0x1, 0x0, 0x93, 0x3, 0x8, 0x9, 0x615d37e8, 0xe, 0x6, 0x7, 0x8, 0x0, 0x5, 0x9, 0x2, 0x568000, 0x9, 0x8, 0x5, 0x6, 0x5a, 0xc, 0x9, 0x84fe, 0xb7, 0x10001, 0x6, 0x3, 0x2000000, 0x83, 0x3, 0x4, 0xbd1, 0xffffffff, 0x9, 0x4, 0x401, 0x414b, 0x4ac5, 0xc, 0x5, 0x37, 0x2, 0x7, 0x9ee4, 0x0, 0x2, 0x81, 0x403, 0x2, 0x9, 0x9, 0x8, 0x9531, 0x1, 0x29, 0xffff0001, 0x3, 0x8000, 0xadc3, 0x10000, 0x3cf, 0x1, 0x3, 0xe, 0x7, 0x3, 0x400, 0xaa7, 0x6950, 0xfff, 0x3, 0x7, 0x6, 0x7, 0x1, 0xc0a, 0x1, 0x3, 0x70a482f2, 0xe00, 0x6, 0x1, 0x6, 0x5, 0x8, 0x7, 0x1, 0xe, 0x45, 0x10, 0x93d1, 0x10001, 0x3, 0x6, 0x3, 0x57, 0x7fff, 0x3, 0xfffffe01, 0x7b56, 0xe542, 0x7, 0x9, 0x10000, 0x4, 0x8, 0x7, 0x3, 0x685, 0x5160, 0x7, 0x3, 0xfbb, 0x8, 0xfffffff7, 0x1, 0xffffffff, 0x9, 0x80000001, 0x31, 0xc7, 0x4c, 0x400, 0x4, 0x5, 0x9, 0x1ff, 0x291, 0x4, 0xfffffff9, 0x1ff, 0x50, 0x1, 0x0, 0xfffffffb, 0x100, 0x6, 0x205, 0x7fff, 0x8, 0x9, 0xc, 0x8d3, 0x6, 0xfffffff7, 0x2, 0x9, 0x10000, 0x7a, 0x4, 0x400, 0x1, 0x6, 0x1ff, 0x200, 0xa2680000, 0xa0, 0xe6, 0x8, 0x5, 0xfffffffa, 0x2, 0x10001, 0x9, 0x66, 0x5, 0x80000001, 0xac4, 0x6, 0x6, 0x8, 0x4, 0x7f, 0x2, 0x5, 0x4, 0x9, 0x7f, 0x9, 0x3, 0x4, 0x3, 0x8, 0xf, 0x8, 0x5, 0x5, 0x6, 0x5, 0x3, 0x8, 0x8, 0x1, 0x10000, 0x800, 0x2, 0x9, 0x7, 0x2, 0x1, 0x9, 0x4, 0x9, 0x4, 0x3, 0x4, 0xd3, 0x3, 0x80, 0x8, 0x9, 0xa, 0x2, 0xab, 0x5, 0x7, 0x0, 0x9, 0x2, 0x9, 0x4, 0xb, 0x7, 0x0, 0x2, 0x3ff, 0x5, 0x5, 0x2, 0x5f8, 0x3, 0xff, 0x4bf, 0x1, 0xff, 0x4, 0x4f4, 0x6, 0x2, 0x4, 0x81, 0x9, 0x9, 0x0, 0x7fffffff, 0x8001, 0x6, 0x3, 0xfffffff8]}]}]}}]}, 0x87c}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) 7.264201777s ago: executing program 1 (id=5496): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x1, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x10424}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_to_bond\x00'}, @IFLA_VFINFO_LIST={0x8, 0x16, 0x0, 0x1, [{0x4, 0x14}]}, @IFLA_LINKMODE={0x5, 0x11, 0x9}]}, 0x44}, 0x1, 0x0, 0x0, 0x801}, 0x60000090) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_udp_encap(r4, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x21}}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in=@private=0xa010100, @in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0}, {@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x28}}, 0x0, 0x33}, @in6=@empty, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffff1, 0x3}, {0x0, 0x0, 0x2, 0xfffffffffffffffe}, {0x0, 0x0, 0x796}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe55286f1921f74be}, 0x0, 0x1a0b1}}, 0xf8}}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc000000000000fffffff000"/64, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7"], 0x120}}, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) pipe(&(0x7f0000000c00)={0xffffffffffffffff}) r11 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r10, &(0x7f0000000040)={0x10000004}) epoll_ctl$EPOLL_CTL_MOD(r11, 0x3, r10, &(0x7f00000004c0)={0xe0000012}) pwrite64(r7, &(0x7f0000000240)="34cae745095fe9930bf8e82827ab20595169f5afccca76983062d6d293c70b18acbf5a82def30384d198986e94c0a30a12538cbe4baced8b9db662954854da4db6c85e7bc3e962306e75b6cf89439464709bc9ab778045f55323eb3f51cd4f3cd920b160e667ba4ade7ac24a8634ea2c3156531be7833a4ec7373aed2ffcdc28831cd1f03702c32b031c89f89c55e3ab2f848c98cff0de7d661be1e07f8736d882fe075a23f81ea8d7", 0xa9, 0x693) setsockopt$inet6_mreq(r9, 0x29, 0x6, 0x0, 0x0) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000080)={'ip6gre0\x00', 0x7}) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c000000bef2594e2e81f968a27bb5a937531e9f7422a359cd08040795105898739139be8e350a02", @ANYRES16=r8, @ANYBLOB="01002cbd7010fddbdf2505000000080009000200000008000c00a80a0000060001000500000008000b00020000000500050000000000"], 0x3c}}, 0x20000034) recvmmsg(r0, &(0x7f00000040c0)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x1, 0x0) 6.918360851s ago: executing program 1 (id=5501): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r2, 0x0, 0x0) r3 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r3, 0x400442c8, 0x0) bind$x25(r1, &(0x7f0000000040)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) socket$xdp(0x2c, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240), 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='cubic', 0x9) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000540)={0x0, 0xcf, 0x2}, 0x8) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000340)={'wlan1\x00'}) 5.576240664s ago: executing program 1 (id=5515): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8affff00000000b7080000deffffff7b8ef0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000fffdffffb702000008000000182300004a05c7c769ece39d75bcf6699a607eb2fb2be81219030ac6bca8048beb08757897a7f9d6de2d81e706eb9eefe84e1015c7d70a85ada602af0ad1a8ba2454fe03fa000000000000000000000000000000000000003276716de4f3b59c9af4c7a48efaa99437", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000c50000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8affff00000000b7080000deffffff7b8ef0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000fffdffffb702000008000000182300004a05c7c769ece39d75bcf6699a607eb2fb2be81219030ac6bca8048beb08757897a7f9d6de2d81e706eb9eefe84e1015c7d70a85ada602af0ad1a8ba2454fe03fa000000000000000000000000000000000000003276716de4f3b59c9af4c7a48efaa99437", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000c50000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) 5.490842419s ago: executing program 1 (id=5519): socket$nl_rdma(0x10, 0x3, 0x14) (async) socket(0x1, 0x803, 0x0) (async) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0xd}}, &(0x7f00000000c0)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) (async) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRESDEC=r3, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r4], 0x1c}}, 0x0) write$nci(r1, &(0x7f0000001800)=ANY=[@ANYBLOB="7240082b0102020681055a03997713fa06070202267a"], 0x16) (async) write$nci(r1, &(0x7f0000000680)=ANY=[@ANYBLOB="400204ffdc3507"], 0x7) 4.771464859s ago: executing program 1 (id=5524): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ctinfo={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0x0, 0x20000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="180100003500010000000000fcdbdf250701f2800c0004000bac0f0000000000140001"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) sendfile(r0, r0, &(0x7f0000000040)=0x688f, 0x0) 3.316316005s ago: executing program 3 (id=5538): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3d, &(0x7f00000000c0), 0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000002080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x805}, 0x884) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0x1, 0x100, 0x100, 0xe, 0x0, 0x3}, 0x1c) setsockopt$packet_int(r0, 0x107, 0xc, &(0x7f0000000000), 0x4) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r8, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r7, 0x84, 0x83, &(0x7f0000000140)={r9}, 0x8) setsockopt$packet_tx_ring(r7, 0x107, 0xd, &(0x7f0000000040)=@req={0x6, 0x1, 0x0, 0x7f}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="30040100", @ANYRES16=r6, @ANYBLOB="010027bd7000fcdbdf2544000000080003", @ANYRES32=r10, @ANYBLOB="0a001800030303030303000004005a800400cc00"], 0x30}}, 0x4040810) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r11, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r11, 0x84, 0x85, &(0x7f0000000000)={r12, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r11, 0x84, 0x9, &(0x7f0000000340)={r12, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x9c) ioctl$sock_rose_SIOCDELRT(r4, 0x890c, &(0x7f00000000c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6, @null, @bpq0, 0x1, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]}) 2.843940881s ago: executing program 2 (id=5544): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000200000000000000000000000850000006d0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000e00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000400000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f5ffffffb703000008000000b704000080000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.72353837s ago: executing program 2 (id=5545): unshare(0x2c020400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x73) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0xfffffffffffffd05, &(0x7f0000000080)={&(0x7f0000000200)={0xe4, 0x43, 0x107, 0xfffffffe, 0x25dfdbfc, {0x1, 0x7c}, [@nested={0x4, 0x145}, @nested={0xca, 0x1, 0x0, 0x1, [@typed={0x0, 0x5a, 0x0, 0x0, @str='%+\'\')\x00'}]}, @typed={0xfd73, 0x88, 0x0, 0x0, @pid}]}, 0xe4}, 0x1, 0x0, 0x0, 0xc004}, 0xc000) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2c, 0x40, 0x107, 0x70bd2d, 0x25dfdbff, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x3}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 2.30842203s ago: executing program 2 (id=5548): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r2, 0x0, 0x0) r3 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r3, 0x400442c8, 0x0) bind$x25(r1, &(0x7f0000000040)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) socket$xdp(0x2c, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@mss, @window={0x3, 0x0, 0x1}, @mss={0x2, 0x1}, @mss={0x2, 0x1}, @window, @timestamp, @window={0x3, 0xfff5, 0x8}], 0x7) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='cubic', 0x9) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000540)={0x0, 0xcf, 0x2}, 0x8) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000340)={'wlan1\x00'}) 2.147337813s ago: executing program 3 (id=5551): unshare(0x20000400) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r4, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) sendmsg$inet(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000900)}, 0x3) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r5, &(0x7f0000000180)=ANY=[@ANYBLOB="0e0001000200", @ANYBLOB=','], 0x8) getpid() sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, 0x0, 0x0) sendmsg$IPSET_CMD_FLUSH(r6, &(0x7f0000000800)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000680)={&(0x7f0000000280)=ANY=[@ANYBLOB="44000000040601040000000000bc1ecef88403000000070000050500010007000000050001800700000005000124d82c155944bf790073797a32000000000900020073797a2d00000000"], 0x44}, 0x1, 0x0, 0x0, 0xc080}, 0xe821651e0a1b45fc) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$tun(r9, &(0x7f00000002c0)=ANY=[], 0x33) sendfile(r9, r8, 0x0, 0x10000) getsockopt$bt_l2cap_L2CAP_CONNINFO(r8, 0x6, 0x2, 0x0, &(0x7f0000000300)) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000140)=0x0) write$cgroup_pid(r8, &(0x7f00000001c0)=r10, 0x12) 1.793283887s ago: executing program 3 (id=5555): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b402000000000000611848000000000085e3ffff260000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, 0x0, 0x0, 0x40400c0) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x1}}, 0x10) bind$tipc(0xffffffffffffffff, 0x0, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) bind$tipc(r2, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r3, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x19c}, 0x1, 0x0, 0x0, 0x4048010}, 0x1) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) r5 = socket$rxrpc(0x21, 0x2, 0x2) getsockopt(r5, 0x110, 0x6, 0x0, &(0x7f0000000280)=0x51) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) r6 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$alg(0x26, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001b40)={0x1c, 0x20000000000000bb, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$tipc(0x1e, 0x2, 0x0) r8 = socket(0x1, 0x803, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c0000001500010300000000000000000c00000008000100", @ANYRES32=r8], 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICADD(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x6b7e369c4a37b0ea) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000062102000100000008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00]'], 0x54}, 0x1, 0x0, 0x0, 0x280608c0}, 0x0) socket(0x15, 0xa, 0x2) 1.563493055s ago: executing program 4 (id=5557): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@private1, 0x0}, &(0x7f0000000040)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newtaction={0x70, 0x30, 0xffff, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_ife={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x8d, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x4}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x1, 0x9, 0x4, 0x5, 0x1}, 0x1}}, @TCA_IFE_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0xc) setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000200)={{{@in6=@private0, @in6=@private0, 0x4e23, 0x7, 0x4e20, 0xeadb, 0xa, 0x80, 0x20, 0x62, r2, r4}, {0x2, 0x6, 0x9, 0x8, 0x5, 0x6, 0x0, 0x7}, {0x9, 0x9, 0x80000001, 0x1}, 0x7fff, 0x6e6bb6, 0x3, 0x1, 0x1, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}, 0x4d3, 0x6c}, 0xa, @in=@broadcast, 0x3501, 0x3, 0x0, 0x2, 0x6, 0x2}}, 0xe8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r7}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r6}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0xffff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r8 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET(r8, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x101020858}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x10, 0x3e8, 0x200, 0x70bd28, 0x25dfdbfe, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x8001}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c0000005e000100000000000000000002000000", @ANYRES32=r13, @ANYRES32=r12], 0x1c}}, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c0000005e000100000000000000000002000000", @ANYRES32=r11, @ANYRES32=r10], 0x1c}}, 0x0) ioctl$NS_GET_OWNER_UID(r9, 0xb704, &(0x7f0000000480)) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="70000000000901010000000000000000000000003c0002000c00028005000100000000002c000180140003000000000000000000000000000000000014000400ff02000000000000000000000000000108000540000000000c000480080101400000000009000100"], 0x70}}, 0x0) 1.393577379s ago: executing program 3 (id=5558): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x5, 0xfffff010}, {0x6, 0x0, 0x2}]}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbcc552ee875d90800450000b0000000000011"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) (fail_nth: 2) 1.380390981s ago: executing program 2 (id=5559): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000380), &(0x7f00000000c0), 0x2, r0}, 0x38) 983.21083ms ago: executing program 4 (id=5561): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=@newlink={0x44, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10681, 0x22000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_USE_IFADDR={0x5, 0x18, 0x1}, @IFLA_BR_MCAST_SNOOPING={0x5}]}}}]}, 0x44}}, 0x20044002) 981.372062ms ago: executing program 2 (id=5562): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000300018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b7040000dd010000070000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r4, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x3a, &(0x7f0000000600)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e25, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x7407, 0xfffffffffffffffa}}}}}}, 0x0) 884.305486ms ago: executing program 3 (id=5563): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="ac00000010000104fcfffffffcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="03150000000000007c0012800b00010062617461647600006c0002800c0001004241544d414e5f560d0001004241544d414e5f49560000000c0001004241544d414e5f560c0001004241544d414e5f560c0001004241544d414e5f560c0001004241544d414e5f560c0001004241544d414e5f560d0001004241544d414e5f495600000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r0, @ANYBLOB="bab9fa81fed31e64e4e5574ac34b4e021203d7c99479cd546fa1e99eca24b13ce454d35ea20c936c00ae1e2f1615b28d4463cda3b719f3f8d90058ea0d4311e728046d675a530c2d0c71d5e7dd84a0c973615ef5d1c80f4ff7013b3aebbeb942f31a6fbac8353bbd01aaa701ddaaf1971ac95af765ee8d5a31732253a9401faba22db876ca4b4ab050d9d2a91804f4d7052cde1692685aa050428deb802e8f3a829d217eac"], 0xac}, 0x1, 0x0, 0x0, 0x24000891}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="ac00000010000104fcfffffffcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="03150000000000007c0012800b00010062617461647600006c0002800c0001004241544d414e5f560d0001004241544d414e5f49560000000c0001004241544d414e5f560c0001004241544d414e5f560c0001004241544d414e5f560c0001004241544d414e5f560c0001004241544d414e5f560d0001004241544d414e5f495600000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r0, @ANYBLOB="bab9fa81fed31e64e4e5574ac34b4e021203d7c99479cd546fa1e99eca24b13ce454d35ea20c936c00ae1e2f1615b28d4463cda3b719f3f8d90058ea0d4311e728046d675a530c2d0c71d5e7dd84a0c973615ef5d1c80f4ff7013b3aebbeb942f31a6fbac8353bbd01aaa701ddaaf1971ac95af765ee8d5a31732253a9401faba22db876ca4b4ab050d9d2a91804f4d7052cde1692685aa050428deb802e8f3a829d217eac"], 0xac}, 0x1, 0x0, 0x0, 0x24000891}, 0x0) (async) 884.106678ms ago: executing program 0 (id=5564): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @empty}, 0x10) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000080)={0x2, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0x1, 0x4) shutdown(r0, 0x1) 859.050652ms ago: executing program 4 (id=5565): unshare(0x20000400) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r4, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) sendmsg$inet(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000900)}, 0x3) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r5, &(0x7f0000000180)=ANY=[@ANYBLOB="0e0001000200", @ANYBLOB=','], 0x8) getpid() sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, 0x0, 0x0) sendmsg$IPSET_CMD_FLUSH(r6, &(0x7f0000000800)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000680)={&(0x7f0000000280)=ANY=[@ANYBLOB="44000000040601040000000000bc1ecef88403000000070000050500010007000000050001800700000005000124d82c155944bf790073797a32000000000900020073797a2d00000000"], 0x44}, 0x1, 0x0, 0x0, 0xc080}, 0xe821651e0a1b45fc) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$tun(r9, &(0x7f00000002c0)=ANY=[], 0x33) sendfile(r9, r8, 0x0, 0x10000) getsockopt$bt_l2cap_L2CAP_CONNINFO(r8, 0x6, 0x2, 0x0, &(0x7f0000000300)) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000140)=0x0) write$cgroup_pid(r8, &(0x7f00000001c0)=r10, 0x12) 733.807979ms ago: executing program 3 (id=5567): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, 0x0, 0x0, 0x40400c0) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(0xffffffffffffffff, 0x0, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) bind$tipc(r2, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000003500093300000000fcdbdf2503"], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000062102000100000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00]'], 0x54}, 0x1, 0x0, 0x0, 0x280608c0}, 0x0) 672.526331ms ago: executing program 0 (id=5568): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e0000001801000020786c2500000002382020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000100b000085000000a000000095"], &(0x7f0000002dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0xd, '\x00', 0x0, @sched_cls=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 658.825468ms ago: executing program 2 (id=5569): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r2, 0x0, 0x0) r3 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r3, 0x400442c8, 0x0) bind$x25(r1, &(0x7f0000000040)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) socket$xdp(0x2c, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@mss, @window={0x3, 0x0, 0x1}, @mss={0x2, 0x1}, @mss={0x2, 0x1}, @window, @timestamp, @window={0x3, 0xfff5, 0x8}], 0x7) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='cubic', 0x9) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000540)={0x0, 0xcf, 0x2}, 0x8) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000340)={'wlan1\x00'}) 569.311264ms ago: executing program 0 (id=5570): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x8, 0x0, &(0x7f0000000180)=0xfffffffffffffc18) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f0000000000), 0x4) bind$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x0, @none, 0xfffa}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x802}, 0xe) sendmmsg$inet(r0, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000180)="e8", 0x1}], 0x1}}], 0x1, 0x408c0) 490.451631ms ago: executing program 4 (id=5571): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000000), 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0xf3a, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000240)=0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x5, 0x14, 0x0, &(0x7f0000000100)="259a53f271a76d2608fff74588a80a3888ca2f15", 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000040)={'virt_wifi0\x00', {0x2, 0x4e24, @multicast2}}) ioctl(r3, 0x8b2a, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="61158f000000000061136c0000000000bfa000000000000007000000ee0016055e03010000000000160500000000000069163e0000000000bf07000000000000260507000fff07206706000020000000140600000ee61860bf500000000000002f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05002000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ace0600006e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc0da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d00c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932fb3bba54b3a6aa57f1ad2e99e0e67ab9ff16d20000009f0f53acbb40b4f8e2738270001562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000815266b2c9e1bfadc7498e9dda5d000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631822a11dc3c693962895496d4f6e9cc54db6c7205a6b26f92121ef53e553acdf42068fff496d2da7d6327f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710eec53f1b11cced7bc3c8da0c44d2fbf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db80300c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f8709d87b27f8a5d9121fdc058447b728f134f72062fc4b1ca0780b1a7af137ff7b4ff139604faf0453b65586f65c7943d56b52f06c870edf0c5d744b5272b44c23480b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca871073f6bd61940aabc86b94f8cbde4d47060400e722a6a2af483ad0d3415ed0f9db009acaba9eaea93f811d434e00000000000000000000d154672fea96aedf346279ec00000000000000000000d535d41b0067f01e2e54b9154d876020b669640ead4ca44631fadf7c4ac39a1b331dbdcd52b36df021b731ef1f92330d347f88ced5c1aaadbcdd8d2257e3a9a7c7494fadf9be36f7a2334ee6e9446fa1fd486f85d672a77dc5bd21463994d49f12016305a1e394d292b66840fe32b40ad665d241a8b8a32b3100450c32832789aa8a096f41201b585cd76631c88cf958e9e9047f5af1730c5e83db12460a0768fd4b62be6c41eed307048bac8d1f7f164574241e06027654b248dcc38749eee0c1ee7c61b3f6411a559c3d45637b11e440ed5a99109b8e71d28c3d677af5f0499c6d3fc6a129775056958c9df824ebe5fa9fb306b24a8a8334910627d03efe69d4b61c4345f048c5da8aca16cea848fa77d2507c920a6bd654b00e07789382ed902c80deeff2fd5c78f42e4353e5360c3e55962efd1331e6736eaf4ee27736fa54803ee8ec1a15266ffcd8b30368740b584c2559e691e542cab3d49db327db62328f159d1e0900b3e23e84dedcd1377aa15dbeab7db181bd66980c3557c7d9f7377fcb6023accb5c368a121acf70e5f4c3f2a0ea07011c7149ea979cab2ee65cf7ffa29152b7a8fed89575e6e6fd77d4d9463d21775abac886ee6a1f2d7d8523840438a73d6307a87e2f525867fc3af7ab74520a773ae26bae74cdd405a211e8833e1ba523cde51d04a7ca6732"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0x10001) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001240)=@newqdisc={0x88c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x860, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x3, 0x0, 0xffff, 0x5027, 0x3, 0x2}, {0x7, 0x2, 0x5, 0x5, 0xc, 0x7}, 0x9, 0x770, 0x94}}, @TCA_TBF_PRATE64={0xc, 0x5, 0x6cc1c33c4502b6e3}, @TCA_TBF_RATE64={0xc, 0x4, 0xd7a9652af506456b}, @TCA_TBF_RTAB={0x404, 0x2, [0xd, 0x81, 0x101, 0x6, 0x7, 0x8, 0xa, 0x3, 0x6a49, 0x101, 0x200, 0x8, 0x3, 0x2, 0xfffffffd, 0x9, 0xe, 0x5, 0x3, 0x2, 0x6, 0x80000000, 0x3e4a, 0x80, 0x100, 0x7, 0x79d, 0x9, 0x8, 0xfffffffa, 0x8, 0x9, 0x10, 0x100, 0x10000, 0x1, 0xa, 0x8, 0xffffffff, 0x8, 0x10, 0x1, 0x4, 0x400, 0x2, 0x4, 0x7ff, 0x5, 0x96, 0x100, 0xe, 0x0, 0x9, 0x5ab0, 0xc, 0x3, 0xffffffff, 0x2, 0xc, 0x2, 0x9, 0x40, 0xc, 0x6, 0xfffffff8, 0x4, 0x1, 0x40, 0x2, 0x4, 0x101, 0x8, 0x6, 0x2, 0x0, 0xc0, 0x2, 0x311, 0x9, 0x9, 0x3, 0xd70, 0x8, 0x3, 0x3ff, 0x2, 0x3, 0xfffffffa, 0x3, 0x7, 0x2, 0x0, 0x2, 0x3, 0x71, 0x6, 0x200, 0x4, 0xc, 0xe0e, 0x0, 0xa, 0x3, 0xacb7, 0xe, 0x3, 0x800, 0x80, 0x6, 0xffffffff, 0x323, 0x8, 0x8, 0xfffffff8, 0x8a52c200, 0x101, 0xc5, 0x1, 0x9, 0x0, 0xd92, 0x0, 0x8, 0x5, 0x200, 0x7, 0x6, 0xae4d, 0x40, 0x9, 0x9b, 0x5, 0xf, 0xcd0, 0x8, 0x1, 0x5, 0x400, 0xb3, 0xfffffffc, 0x2, 0xff, 0x3, 0x4, 0x7, 0x4c63e723, 0x2, 0x80, 0x6, 0xffff8000, 0x0, 0x0, 0x8, 0x6, 0x71fe, 0x4b3f, 0xfffffffc, 0x6, 0x1e, 0x3, 0x9, 0x2, 0x8, 0x8, 0x6, 0x9, 0x80, 0x2, 0x32f9, 0xad8, 0xfffffffe, 0x7fffffff, 0x10000, 0x69f9, 0xba4594a8, 0x1000, 0x4, 0x2, 0x14a1, 0x7e0, 0x74, 0x2, 0x100, 0x4, 0x5, 0x9237, 0x40, 0x9, 0x4, 0x0, 0x7, 0x0, 0xf93d, 0x80000000, 0x0, 0x10, 0x5, 0x7, 0x6, 0xfffffffb, 0x1, 0x3, 0x2, 0x1, 0x7, 0x88, 0x5, 0x9, 0x7, 0x0, 0x1, 0x2, 0x7fff, 0x7, 0xfffff000, 0x33a, 0x7, 0x9, 0x0, 0x2, 0x7, 0x4, 0x8c3, 0x1, 0xb76, 0x7, 0x6, 0x1, 0x2, 0x8, 0x6, 0x800, 0x49, 0x3, 0x6, 0xe8, 0x8, 0xfffffff9, 0x7993, 0x0, 0x6a, 0x1583, 0x2, 0x1e08fcac, 0xe4, 0x5, 0x6, 0x1, 0x1000, 0x16e, 0x0, 0x6, 0x2, 0x7, 0x8, 0x9]}, @TCA_TBF_RATE64={0xc, 0x4, 0x29ef3c48c808fe36}, @TCA_TBF_BURST={0x4, 0x6, 0x200000}, @TCA_TBF_PTAB={0x404, 0x3, [0x80000001, 0xffffffc0, 0x3, 0x1000, 0x5, 0x0, 0x8b, 0x7, 0x9, 0xfffffffb, 0x9, 0xc, 0x80000000, 0x1, 0x1, 0x2, 0x99, 0xffffffff, 0x3, 0xb, 0x81, 0x5, 0x5, 0x1, 0xd08, 0x3, 0x7, 0x76, 0x0, 0x10, 0xd49, 0x6, 0x6, 0x5, 0x8, 0x5, 0x78d, 0xd4, 0x72000000, 0x1fe, 0x0, 0x6, 0x7, 0x4000000, 0x3d, 0xffffff80, 0x36b, 0x5c, 0x2, 0x7fffffff, 0x7, 0x3, 0xc, 0xf, 0x9, 0xd, 0x8, 0x6, 0x1, 0x0, 0x8, 0x0, 0x6, 0x2, 0x6e, 0x5, 0x0, 0x5, 0x6, 0x4, 0x101, 0x9, 0x7, 0x3, 0x9, 0x8, 0xfffffff9, 0xfffffffe, 0x8b7, 0x8, 0x800, 0x5, 0x6, 0x25, 0x1, 0x9, 0x6, 0x5, 0x5, 0x6, 0x9, 0x6, 0x9, 0x10001, 0x80, 0x9, 0x2, 0x8, 0x1, 0xfffff4d0, 0x1, 0x8, 0xfffffffa, 0x69, 0x1, 0x8, 0x3, 0x6, 0x6, 0x2, 0xcf5, 0xa0000, 0x1, 0x2, 0x6, 0x0, 0x0, 0x8, 0x0, 0x80, 0x401, 0xfffffffe, 0x9, 0x800, 0x4, 0xf, 0x0, 0x6, 0x5, 0x10000, 0x4, 0x9, 0x1, 0x2, 0x5, 0x7f, 0x9, 0x9, 0x100, 0x9, 0xffffff81, 0x1, 0x7fff, 0xf, 0x72, 0x1, 0x8001, 0x6, 0x9, 0x2, 0x10000, 0x2, 0x1, 0xd, 0x0, 0xc2, 0x8, 0xa, 0x10, 0x2, 0x38dc, 0xef, 0x9, 0x3bc6, 0x0, 0x8ea, 0x51bb056c, 0x47ae, 0x7599bb00, 0x0, 0x7f, 0x8, 0x8, 0xca, 0xffffff0e, 0xe8, 0x8000, 0x5, 0xffffff8a, 0x5, 0x8, 0x8, 0x3ff, 0x9, 0x1, 0x3ff, 0x16, 0x6, 0x5, 0x7, 0x101, 0x9, 0x3ff, 0x30, 0xaaa9, 0x7, 0x0, 0x400, 0x1ea3, 0xffffffff, 0x1, 0xfe00000, 0x202, 0x7, 0xc0, 0xfffffcc5, 0x1d, 0x8, 0xbe6, 0x5, 0x8, 0x6, 0xfffffffe, 0x3, 0x8, 0x8, 0x81e, 0x28c, 0x203, 0x6, 0xd, 0x5, 0x0, 0x6, 0x3, 0x1, 0x1, 0x6, 0x7fff, 0x4, 0x8, 0xffff8001, 0x3, 0x7, 0x9, 0x7, 0x3, 0x3, 0x6, 0x6, 0x1, 0x3, 0x3, 0x2, 0xfffffffb, 0x11e0, 0x6, 0xa12, 0x6, 0x90a7, 0xc927, 0x7, 0x2a5c, 0x8, 0xffffffff, 0x1]}]}}]}, 0x88c}}, 0x40) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x5}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f00000000c0)={r8, 0x9}, 0x8) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000000), 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)) (async) pipe(&(0x7f0000000440)) (async) splice(r1, 0x0, r2, 0x0, 0xf3a, 0x0) (async) ioctl$int_in(r2, 0x5452, &(0x7f0000000240)=0x1) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$kcm(0x11, 0x200000000000002, 0x300) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x5, 0x14, 0x0, &(0x7f0000000100)="259a53f271a76d2608fff74588a80a3888ca2f15", 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000040)={'virt_wifi0\x00', {0x2, 0x4e24, @multicast2}}) (async) ioctl(r3, 0x8b2a, &(0x7f0000000040)) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) (async) ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0x10001) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00'}) (async) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001240)=@newqdisc={0x88c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x860, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x3, 0x0, 0xffff, 0x5027, 0x3, 0x2}, {0x7, 0x2, 0x5, 0x5, 0xc, 0x7}, 0x9, 0x770, 0x94}}, @TCA_TBF_PRATE64={0xc, 0x5, 0x6cc1c33c4502b6e3}, @TCA_TBF_RATE64={0xc, 0x4, 0xd7a9652af506456b}, @TCA_TBF_RTAB={0x404, 0x2, [0xd, 0x81, 0x101, 0x6, 0x7, 0x8, 0xa, 0x3, 0x6a49, 0x101, 0x200, 0x8, 0x3, 0x2, 0xfffffffd, 0x9, 0xe, 0x5, 0x3, 0x2, 0x6, 0x80000000, 0x3e4a, 0x80, 0x100, 0x7, 0x79d, 0x9, 0x8, 0xfffffffa, 0x8, 0x9, 0x10, 0x100, 0x10000, 0x1, 0xa, 0x8, 0xffffffff, 0x8, 0x10, 0x1, 0x4, 0x400, 0x2, 0x4, 0x7ff, 0x5, 0x96, 0x100, 0xe, 0x0, 0x9, 0x5ab0, 0xc, 0x3, 0xffffffff, 0x2, 0xc, 0x2, 0x9, 0x40, 0xc, 0x6, 0xfffffff8, 0x4, 0x1, 0x40, 0x2, 0x4, 0x101, 0x8, 0x6, 0x2, 0x0, 0xc0, 0x2, 0x311, 0x9, 0x9, 0x3, 0xd70, 0x8, 0x3, 0x3ff, 0x2, 0x3, 0xfffffffa, 0x3, 0x7, 0x2, 0x0, 0x2, 0x3, 0x71, 0x6, 0x200, 0x4, 0xc, 0xe0e, 0x0, 0xa, 0x3, 0xacb7, 0xe, 0x3, 0x800, 0x80, 0x6, 0xffffffff, 0x323, 0x8, 0x8, 0xfffffff8, 0x8a52c200, 0x101, 0xc5, 0x1, 0x9, 0x0, 0xd92, 0x0, 0x8, 0x5, 0x200, 0x7, 0x6, 0xae4d, 0x40, 0x9, 0x9b, 0x5, 0xf, 0xcd0, 0x8, 0x1, 0x5, 0x400, 0xb3, 0xfffffffc, 0x2, 0xff, 0x3, 0x4, 0x7, 0x4c63e723, 0x2, 0x80, 0x6, 0xffff8000, 0x0, 0x0, 0x8, 0x6, 0x71fe, 0x4b3f, 0xfffffffc, 0x6, 0x1e, 0x3, 0x9, 0x2, 0x8, 0x8, 0x6, 0x9, 0x80, 0x2, 0x32f9, 0xad8, 0xfffffffe, 0x7fffffff, 0x10000, 0x69f9, 0xba4594a8, 0x1000, 0x4, 0x2, 0x14a1, 0x7e0, 0x74, 0x2, 0x100, 0x4, 0x5, 0x9237, 0x40, 0x9, 0x4, 0x0, 0x7, 0x0, 0xf93d, 0x80000000, 0x0, 0x10, 0x5, 0x7, 0x6, 0xfffffffb, 0x1, 0x3, 0x2, 0x1, 0x7, 0x88, 0x5, 0x9, 0x7, 0x0, 0x1, 0x2, 0x7fff, 0x7, 0xfffff000, 0x33a, 0x7, 0x9, 0x0, 0x2, 0x7, 0x4, 0x8c3, 0x1, 0xb76, 0x7, 0x6, 0x1, 0x2, 0x8, 0x6, 0x800, 0x49, 0x3, 0x6, 0xe8, 0x8, 0xfffffff9, 0x7993, 0x0, 0x6a, 0x1583, 0x2, 0x1e08fcac, 0xe4, 0x5, 0x6, 0x1, 0x1000, 0x16e, 0x0, 0x6, 0x2, 0x7, 0x8, 0x9]}, @TCA_TBF_RATE64={0xc, 0x4, 0x29ef3c48c808fe36}, @TCA_TBF_BURST={0x4, 0x6, 0x200000}, @TCA_TBF_PTAB={0x404, 0x3, [0x80000001, 0xffffffc0, 0x3, 0x1000, 0x5, 0x0, 0x8b, 0x7, 0x9, 0xfffffffb, 0x9, 0xc, 0x80000000, 0x1, 0x1, 0x2, 0x99, 0xffffffff, 0x3, 0xb, 0x81, 0x5, 0x5, 0x1, 0xd08, 0x3, 0x7, 0x76, 0x0, 0x10, 0xd49, 0x6, 0x6, 0x5, 0x8, 0x5, 0x78d, 0xd4, 0x72000000, 0x1fe, 0x0, 0x6, 0x7, 0x4000000, 0x3d, 0xffffff80, 0x36b, 0x5c, 0x2, 0x7fffffff, 0x7, 0x3, 0xc, 0xf, 0x9, 0xd, 0x8, 0x6, 0x1, 0x0, 0x8, 0x0, 0x6, 0x2, 0x6e, 0x5, 0x0, 0x5, 0x6, 0x4, 0x101, 0x9, 0x7, 0x3, 0x9, 0x8, 0xfffffff9, 0xfffffffe, 0x8b7, 0x8, 0x800, 0x5, 0x6, 0x25, 0x1, 0x9, 0x6, 0x5, 0x5, 0x6, 0x9, 0x6, 0x9, 0x10001, 0x80, 0x9, 0x2, 0x8, 0x1, 0xfffff4d0, 0x1, 0x8, 0xfffffffa, 0x69, 0x1, 0x8, 0x3, 0x6, 0x6, 0x2, 0xcf5, 0xa0000, 0x1, 0x2, 0x6, 0x0, 0x0, 0x8, 0x0, 0x80, 0x401, 0xfffffffe, 0x9, 0x800, 0x4, 0xf, 0x0, 0x6, 0x5, 0x10000, 0x4, 0x9, 0x1, 0x2, 0x5, 0x7f, 0x9, 0x9, 0x100, 0x9, 0xffffff81, 0x1, 0x7fff, 0xf, 0x72, 0x1, 0x8001, 0x6, 0x9, 0x2, 0x10000, 0x2, 0x1, 0xd, 0x0, 0xc2, 0x8, 0xa, 0x10, 0x2, 0x38dc, 0xef, 0x9, 0x3bc6, 0x0, 0x8ea, 0x51bb056c, 0x47ae, 0x7599bb00, 0x0, 0x7f, 0x8, 0x8, 0xca, 0xffffff0e, 0xe8, 0x8000, 0x5, 0xffffff8a, 0x5, 0x8, 0x8, 0x3ff, 0x9, 0x1, 0x3ff, 0x16, 0x6, 0x5, 0x7, 0x101, 0x9, 0x3ff, 0x30, 0xaaa9, 0x7, 0x0, 0x400, 0x1ea3, 0xffffffff, 0x1, 0xfe00000, 0x202, 0x7, 0xc0, 0xfffffcc5, 0x1d, 0x8, 0xbe6, 0x5, 0x8, 0x6, 0xfffffffe, 0x3, 0x8, 0x8, 0x81e, 0x28c, 0x203, 0x6, 0xd, 0x5, 0x0, 0x6, 0x3, 0x1, 0x1, 0x6, 0x7fff, 0x4, 0x8, 0xffff8001, 0x3, 0x7, 0x9, 0x7, 0x3, 0x3, 0x6, 0x6, 0x1, 0x3, 0x3, 0x2, 0xfffffffb, 0x11e0, 0x6, 0xa12, 0x6, 0x90a7, 0xc927, 0x7, 0x2a5c, 0x8, 0xffffffff, 0x1]}]}}]}, 0x88c}}, 0x40) (async) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x5}, &(0x7f0000000080)=0x8) (async) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f00000000c0)={r8, 0x9}, 0x8) (async) 404.056344ms ago: executing program 0 (id=5572): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r1, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="38000000101401002cbd7000fddbdf250800150000000000080001000000000408004acf52a3660000000000080003000192b78956004b0013000000"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x24001850) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f00000043c0)={'vxcan1\x00', {0x2, 0x4e23, @empty}}) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0xfffd, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0xfffffdb6, 0x3, [@default, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001dc0)=ANY=[@ANYRES16=r4, @ANYBLOB='H\x00\x00\x00', @ANYBLOB="010027bd7000fbdbdf250100000008000100030000002400048005000300050000000500030002000000150003000100000000000000000000000000000000701ee436ce9c7bdabe000000", @ANYBLOB="54022c974307a3dd7a5041efa1911a76083a649626b0099d025ff3d498a30b8f10cd3c6ceb597fcd1af6c44baae6769b21cc27b7aaa05fe221575900a901f09dd358f9b13bd0bd8ed114e51005d19cbea1927452eeb9ae139cef6b2c3f1f47b15ee1696aa366dbb178b49264f70b09cbd394d458a4f035eaa456963f3c47ed31207a482141ddc2c0a60fcabde994a23a40913b0a3c8897bb6444b48d2217697eae37e291c91fc2efd6472d399db5445ad256ff1d45c92ae58b815b00cac4ac9c72fb6c9976526255cc525b40674602e17cc7da855768b0ae6c6da7c9ec70d365d24e14d98df27b281bbe104b1b329def10", @ANYRES32=r3], 0x48}}, 0x40080) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000000b80)={0x7ffffffd, 0x1, 0x3, 0x85}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{}, &(0x7f0000000100), &(0x7f0000000300)}, 0x20) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000580)={'tunl0\x00', &(0x7f0000000540)={'sit0\x00', 0x0, 0x7, 0x7, 0x80, 0x368232bb, {{0x6, 0x4, 0x1, 0x3c, 0x18, 0x67, 0x0, 0x9, 0x4, 0x0, @empty, @empty, {[@end]}}}}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000980)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000600)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYRESHEX], 0x1c}, 0x1, 0x0, 0x0, 0x8005}, 0x4000) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000a00)=ANY=[@ANYBLOB="3b3195049c22caf07851514f18d4ab7a3c6cc48058f71b6252cd5951f13b9c74c7c685db7abfa84c4f", @ANYRES16=r6, @ANYBLOB="d3852dbd7000fedbdf25030000002000018014000400fe8000000000000000000000000000aa060001000a000000"], 0x34}}, 0xc084) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f00000005c0)={0xffffffffffffffff, 0x2bb99ecc, 0x82, 0xb}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9ec214627c11430c1", 0x20) r8 = accept$alg(r7, 0x0, 0x0) sendmmsg$alg(r8, &(0x7f00000009c0)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="3f5e978e345482212cf7cd37be", 0xd}, {&(0x7f0000001d40)="ece600a6f13b73bee010fa5ea59d4e0cde1f4a1fac088234321696707141f2e7fb042db146241146f81622c98ac8a36e81b8d9a650038a79d8092ec6c57fa9429ec2ea53c311edadb50fa84c4f77010a98fb0bc140d700dc89cfaadd122b2f3d4c9b9dd6e992ceee7928be899227d9404027d612dd02b3c10ecd22", 0x7b}], 0x2, &(0x7f0000002900)=[@op={0x18}], 0x18, 0x20000000}], 0x1, 0x24000040) recvmmsg(r8, &(0x7f0000005cc0)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000004c0)=""/102, 0x66}, {&(0x7f0000000680)=""/201, 0xc9}], 0x2}, 0xb}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/138, 0x8a}], 0x1}, 0x3}], 0x2, 0x2120, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={r2, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000640)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f0000000680)=[0x0], &(0x7f00000006c0)=[0x0, 0x0], 0x0, 0x40, &(0x7f0000000700)=[{}, {}], 0x10, 0x10, &(0x7f0000000740), &(0x7f0000000780), 0x8, 0x7e, 0x8, 0x8, &(0x7f00000007c0)}}, 0x10) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000b40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r9}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRESHEX, @ANYBLOB='\x00'/20, @ANYRES8=0x0, @ANYRES32, @ANYRESOCT=r5], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000c40)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="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", @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000940)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$netrom(0x6, 0x5, 0x0) 241.484234ms ago: executing program 0 (id=5573): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000380), &(0x7f00000000c0), 0x2, r0}, 0x38) 175.621026ms ago: executing program 4 (id=5574): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{0x0, 0x2c}], 0x1, 0x0, 0x0, 0x2000000}, 0x0) sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x10}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0xe301642777e6b44a}, 0x80) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x114}], 0x1}, 0x0) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 466.648µs ago: executing program 0 (id=5575): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (fail_nth: 8) 0s ago: executing program 4 (id=5576): socket$packet(0x11, 0x2, 0x300) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) write$cgroup_devices(r1, 0x0, 0x9) (async) write$cgroup_devices(r1, 0x0, 0x9) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="7800000002010300000000000000000000000003140005800f0001006e657462696f732d6e73000008000c4000000004480001801400018008000100e0000001080002000a0101000600034000010000140001800800010000000000080002007f000001140001"], 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000071000100000000000000000007000000", @ANYRES32=r5, @ANYBLOB="0c000180080001000300010020"], 0x44}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000071000100000000000000000007000000", @ANYRES32=r5, @ANYBLOB="0c000180080001000300010020"], 0x44}}, 0x0) socket(0x10, 0x3, 0x0) (async) r6 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c0000001000010400"], 0x7c}}, 0x800) sendmmsg(r6, &(0x7f0000000000), 0x400000000000235, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv6_deladdr={0x18, 0x15, 0x1, 0x70bd2a, 0x25dfdbff, {0xa, 0x0, 0x10, 0xfe}}, 0x18}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) socket(0x2a, 0x2, 0x0) (async) r7 = socket(0x2a, 0x2, 0x0) getsockname$packet(r7, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r2, 0x8917, &(0x7f0000000100)={'nicvf0\x00', {0x2, 0x0, @remote}}) r8 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000007640)=ANY=[], 0x3aa0}, 0x1, 0x0, 0x0, 0x40}, 0x20040010) (async) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000007640)=ANY=[], 0x3aa0}, 0x1, 0x0, 0x0, 0x40}, 0x20040010) readv(r8, &(0x7f0000000580)=[{&(0x7f0000000280)=""/198, 0xc6}, {&(0x7f0000002000)=""/21, 0x15}, {&(0x7f0000000480)=""/166, 0xa6}, {&(0x7f00000000c0)=""/54, 0x36}], 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000005c0)={0x3c, r10, 0x1, 0x0, 0x0, {0x49}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x10000002}}}]}, 0x3c}}, 0x0) kernel console output (not intermixed with test programs): 624.846440][T22058] syzkaller0: entered allmulticast mode [ 625.234915][T22074] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4720'. [ 625.252095][T22074] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4720'. [ 625.803938][T22095] netlink: 176 bytes leftover after parsing attributes in process `syz.3.4725'. [ 625.806576][T22092] ip6_vti0 speed is unknown, defaulting to 1000 [ 625.989640][T22100] netlink: 'syz.2.4728': attribute type 1 has an invalid length. [ 626.193425][T22096] ip6_vti0 speed is unknown, defaulting to 1000 [ 626.633183][T22124] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input10 [ 626.769529][T22121] ip6_vti0 speed is unknown, defaulting to 1000 [ 626.801701][T22130] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4736'. [ 627.183942][T22134] xt_TCPMSS: Only works on TCP SYN packets [ 627.474830][T22133] wg1 speed is unknown, defaulting to 1000 [ 627.481106][T22133] wg1 speed is unknown, defaulting to 1000 [ 627.563608][T22133] wg1 speed is unknown, defaulting to 1000 [ 627.602585][T22133] infiniband syz: RDMA CMA: cma_listen_on_dev, error -98 [ 627.724022][T22133] wg1 speed is unknown, defaulting to 1000 [ 627.787254][T22133] wg1 speed is unknown, defaulting to 1000 [ 627.839547][T22147] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4741'. [ 627.844183][T22133] wg1 speed is unknown, defaulting to 1000 [ 627.916056][T22133] wg1 speed is unknown, defaulting to 1000 [ 627.970144][T22153] tipc: Failed to remove unknown binding: 66,1,1/2886997007:2887480951/2887480953 [ 627.979843][T22133] wg1 speed is unknown, defaulting to 1000 [ 627.985215][T22153] tipc: Failed to remove unknown binding: 66,1,1/2886997007:2887480951/2887480953 [ 627.996919][T22153] tipc: Failed to remove unknown binding: 66,1,1/2886997007:2887480951/2887480953 [ 628.036799][T22133] wg1 speed is unknown, defaulting to 1000 [ 628.055762][T22133] wg1 speed is unknown, defaulting to 1000 [ 628.074656][T22133] wg1 speed is unknown, defaulting to 1000 [ 628.223954][T22155] Cannot find set identified by id 3 to match [ 628.527370][T22170] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4749'. [ 629.162914][T22185] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 629.214383][T22185] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4754'. [ 629.694838][ T1303] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 629.706961][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 629.770469][T22210] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4765'. [ 629.801367][T22209] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4765'. [ 629.813353][T22216] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4767'. [ 630.408291][T22238] netlink: 'syz.3.4774': attribute type 1 has an invalid length. [ 630.432353][T22243] netlink: 'syz.3.4774': attribute type 1 has an invalid length. [ 630.938059][T22267] ip6_vti0 speed is unknown, defaulting to 1000 [ 631.466240][T22299] syzkaller0: entered promiscuous mode [ 631.472010][T22299] syzkaller0: entered allmulticast mode [ 631.493695][T22267] wg1 speed is unknown, defaulting to 1000 [ 632.290629][T22319] __nla_validate_parse: 1 callbacks suppressed [ 632.290653][T22319] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4797'. [ 632.335053][T22325] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32) [ 632.522292][T22328] ip6_vti0 speed is unknown, defaulting to 1000 [ 632.734840][T22351] Cannot find set identified by id 3 to match [ 633.223526][T22328] wg1 speed is unknown, defaulting to 1000 [ 633.322677][T22378] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4812'. [ 633.601048][T22396] syzkaller0: entered promiscuous mode [ 633.606591][T22396] syzkaller0: entered allmulticast mode [ 633.738524][T22405] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4820'. [ 634.203122][T22415] siw: device registration error -23 [ 634.300062][T22418] xt_TCPMSS: Only works on TCP SYN packets [ 634.367219][T22421] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4827'. [ 634.673328][T22432] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4830'. [ 634.806116][T22439] sctp: [Deprecated]: syz.0.4830 (pid 22439) Use of int in maxseg socket option. [ 634.806116][T22439] Use struct sctp_assoc_value instead [ 634.944829][T22444] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4833'. [ 635.274461][T22455] bond0: Caught tx_queue_len zero misconfig [ 635.482577][T22465] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4841'. [ 635.521489][T22465] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4841'. [ 635.534836][T22471] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4842'. [ 635.735975][T22481] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4843'. [ 635.794372][T22486] Cannot find set identified by id 3 to match [ 636.046133][T22490] syzkaller0: entered promiscuous mode [ 636.070073][T22490] syzkaller0: entered allmulticast mode [ 638.625169][T22549] Cannot find set identified by id 3 to match [ 638.659667][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 638.667779][T22552] __nla_validate_parse: 1 callbacks suppressed [ 638.667802][T22552] netlink: 260 bytes leftover after parsing attributes in process `syz.1.4868'. [ 638.743033][T22556] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4870'. [ 638.891657][T22559] netlink: 'syz.1.4872': attribute type 2 has an invalid length. [ 639.065014][T22574] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4877'. [ 639.414669][T22588] netlink: 260 bytes leftover after parsing attributes in process `syz.4.4882'. [ 639.455919][T22589] Cannot find set identified by id 3 to match [ 639.558085][T22593] openvswitch: netlink: Actions may not be safe on all matching packets [ 640.443154][T22627] netlink: 'syz.3.4896': attribute type 4 has an invalid length. [ 640.461047][T22627] netlink: 248 bytes leftover after parsing attributes in process `syz.3.4896'. [ 640.649646][T22629] SET target dimension over the limit! [ 640.768674][T22640] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4901'. [ 640.840694][T22642] syzkaller0: entered promiscuous mode [ 640.858702][T22642] syzkaller0: entered allmulticast mode [ 641.230949][T22659] netlink: 'syz.0.4910': attribute type 4 has an invalid length. [ 641.250720][T22661] FAULT_INJECTION: forcing a failure. [ 641.250720][T22661] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 641.250793][T22659] netlink: 248 bytes leftover after parsing attributes in process `syz.0.4910'. [ 641.275956][T22661] CPU: 1 UID: 0 PID: 22661 Comm: syz.1.4911 Not tainted syzkaller #0 PREEMPT(full) [ 641.275989][T22661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 641.276003][T22661] Call Trace: [ 641.276013][T22661] [ 641.276023][T22661] dump_stack_lvl+0x189/0x250 [ 641.276062][T22661] ? __pfx____ratelimit+0x10/0x10 [ 641.276099][T22661] ? __pfx_dump_stack_lvl+0x10/0x10 [ 641.276131][T22661] ? __pfx__printk+0x10/0x10 [ 641.276156][T22661] ? __might_fault+0xb0/0x130 [ 641.276210][T22661] should_fail_ex+0x414/0x560 [ 641.276252][T22661] _copy_from_user+0x2d/0xb0 [ 641.276283][T22661] ___sys_sendmsg+0x158/0x2a0 [ 641.276314][T22661] ? __pfx____sys_sendmsg+0x10/0x10 [ 641.276384][T22661] ? __fget_files+0x2a/0x420 [ 641.276406][T22661] ? __fget_files+0x3a0/0x420 [ 641.276441][T22661] __x64_sys_sendmsg+0x19b/0x260 [ 641.276473][T22661] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 641.276516][T22661] ? __pfx_ksys_write+0x10/0x10 [ 641.276555][T22661] ? do_syscall_64+0xbe/0xfa0 [ 641.276582][T22661] do_syscall_64+0xfa/0xfa0 [ 641.276603][T22661] ? lockdep_hardirqs_on+0x9c/0x150 [ 641.276625][T22661] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.276648][T22661] ? clear_bhb_loop+0x60/0xb0 [ 641.276676][T22661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.276699][T22661] RIP: 0033:0x7fc464b8f6c9 [ 641.276720][T22661] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 641.276741][T22661] RSP: 002b:00007fc465948038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 641.276765][T22661] RAX: ffffffffffffffda RBX: 00007fc464de5fa0 RCX: 00007fc464b8f6c9 [ 641.276783][T22661] RDX: 0000000020044002 RSI: 0000200000000080 RDI: 0000000000000003 [ 641.276798][T22661] RBP: 00007fc465948090 R08: 0000000000000000 R09: 0000000000000000 [ 641.276813][T22661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 641.276827][T22661] R13: 00007fc464de6038 R14: 00007fc464de5fa0 R15: 00007ffd82ead758 [ 641.276865][T22661] [ 641.593290][T22669] Cannot find set identified by id 3 to match [ 641.726646][T22677] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4915'. [ 641.884138][T22686] netlink: 'syz.4.4922': attribute type 10 has an invalid length. [ 641.906846][T22686] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4922'. [ 641.940614][T22686] dummy0: entered promiscuous mode [ 641.950989][T22686] batman_adv: batadv0: Interface deactivated: dummy0 [ 641.970324][T22686] batman_adv: batadv0: Removing interface: dummy0 [ 642.008562][T22686] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 642.198444][T22705] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4928'. [ 642.657415][T22722] bond1: entered promiscuous mode [ 642.662642][T22722] bond1: entered allmulticast mode [ 642.669221][T22722] 8021q: adding VLAN 0 to HW filter on device bond1 [ 642.730947][T22724] bond2: entered promiscuous mode [ 642.754434][T22724] bond2: entered allmulticast mode [ 642.782996][T22724] 8021q: adding VLAN 0 to HW filter on device bond2 [ 643.821342][T22781] tipc: Enabling of bearer rejected, failed to enable media [ 644.054056][T22792] tipc: MTU too low for tipc bearer [ 644.242991][T22801] __nla_validate_parse: 5 callbacks suppressed [ 644.243013][T22801] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4960'. [ 644.571938][T22813] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4965'. [ 644.582939][T22813] netlink: 4356 bytes leftover after parsing attributes in process `syz.2.4965'. [ 644.592684][T22813] netlink: 4356 bytes leftover after parsing attributes in process `syz.2.4965'. [ 644.607448][T22813] Bluetooth: MGMT ver 1.23 [ 644.623646][T22813] wlan0 speed is unknown, defaulting to 1000 [ 644.638451][T22813] wlan0 speed is unknown, defaulting to 1000 [ 644.655356][T22813] wlan0 speed is unknown, defaulting to 1000 [ 644.705569][T22813] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 644.825850][T22813] wlan0 speed is unknown, defaulting to 1000 [ 644.858475][T22813] wlan0 speed is unknown, defaulting to 1000 [ 644.911486][T22813] wlan0 speed is unknown, defaulting to 1000 [ 644.930088][T22813] wlan0 speed is unknown, defaulting to 1000 [ 644.944711][T22813] wlan0 speed is unknown, defaulting to 1000 [ 645.021783][T22813] wlan0 speed is unknown, defaulting to 1000 [ 645.105844][T22839] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4974'. [ 645.120495][T22838] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4975'. [ 645.129882][T22838] netlink: 'syz.4.4975': attribute type 1 has an invalid length. [ 645.203378][T22844] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4975'. [ 645.346927][T22853] netlink: 'syz.1.4979': attribute type 4 has an invalid length. [ 645.371601][T22857] FAULT_INJECTION: forcing a failure. [ 645.371601][T22857] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 645.377408][T22853] netlink: 248 bytes leftover after parsing attributes in process `syz.1.4979'. [ 645.386400][T22857] CPU: 1 UID: 0 PID: 22857 Comm: syz.0.4977 Not tainted syzkaller #0 PREEMPT(full) [ 645.386435][T22857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 645.386451][T22857] Call Trace: [ 645.386461][T22857] [ 645.386471][T22857] dump_stack_lvl+0x189/0x250 [ 645.386511][T22857] ? __pfx____ratelimit+0x10/0x10 [ 645.386549][T22857] ? __pfx_dump_stack_lvl+0x10/0x10 [ 645.386583][T22857] ? __pfx__printk+0x10/0x10 [ 645.386607][T22857] ? __might_fault+0xb0/0x130 [ 645.386656][T22857] should_fail_ex+0x414/0x560 [ 645.386698][T22857] _copy_from_user+0x2d/0xb0 [ 645.386731][T22857] ___sys_sendmsg+0x158/0x2a0 [ 645.386763][T22857] ? __pfx____sys_sendmsg+0x10/0x10 [ 645.386835][T22857] ? __fget_files+0x2a/0x420 [ 645.386856][T22857] ? __fget_files+0x3a0/0x420 [ 645.386892][T22857] __x64_sys_sendmsg+0x19b/0x260 [ 645.386923][T22857] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 645.386964][T22857] ? __pfx_ksys_write+0x10/0x10 [ 645.387002][T22857] ? do_syscall_64+0xbe/0xfa0 [ 645.387031][T22857] do_syscall_64+0xfa/0xfa0 [ 645.387060][T22857] ? lockdep_hardirqs_on+0x9c/0x150 [ 645.387085][T22857] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 645.387109][T22857] ? clear_bhb_loop+0x60/0xb0 [ 645.387144][T22857] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 645.387167][T22857] RIP: 0033:0x7f741ff8f6c9 [ 645.387190][T22857] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 645.387211][T22857] RSP: 002b:00007f7420ed8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 645.387238][T22857] RAX: ffffffffffffffda RBX: 00007f74201e6090 RCX: 00007f741ff8f6c9 [ 645.387256][T22857] RDX: 0000000004000084 RSI: 0000200000000000 RDI: 0000000000000008 [ 645.387272][T22857] RBP: 00007f7420ed8090 R08: 0000000000000000 R09: 0000000000000000 [ 645.387286][T22857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 645.387301][T22857] R13: 00007f74201e6128 R14: 00007f74201e6090 R15: 00007ffc39a34d98 [ 645.387340][T22857] [ 645.408651][T22859] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4981'. [ 645.611420][T22859] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4981'. [ 645.738043][T22866] FAULT_INJECTION: forcing a failure. [ 645.738043][T22866] name failslab, interval 1, probability 0, space 0, times 0 [ 645.792042][T22866] CPU: 0 UID: 0 PID: 22866 Comm: syz.1.4982 Not tainted syzkaller #0 PREEMPT(full) [ 645.792080][T22866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 645.792094][T22866] Call Trace: [ 645.792102][T22866] [ 645.792112][T22866] dump_stack_lvl+0x189/0x250 [ 645.792148][T22866] ? __pfx____ratelimit+0x10/0x10 [ 645.792181][T22866] ? __pfx_dump_stack_lvl+0x10/0x10 [ 645.792211][T22866] ? __pfx__printk+0x10/0x10 [ 645.792238][T22866] ? __lock_acquire+0xab9/0xd20 [ 645.792268][T22866] should_fail_ex+0x414/0x560 [ 645.792306][T22866] should_failslab+0xa8/0x100 [ 645.792330][T22866] kmem_cache_alloc_noprof+0x74/0x6e0 [ 645.792361][T22866] ? skb_clone+0x212/0x3a0 [ 645.792393][T22866] skb_clone+0x212/0x3a0 [ 645.792423][T22866] __netlink_deliver_tap+0x404/0x850 [ 645.792461][T22866] ? netlink_deliver_tap+0x2e/0x1b0 [ 645.792486][T22866] netlink_deliver_tap+0x19c/0x1b0 [ 645.792511][T22866] netlink_unicast+0x7fa/0x9e0 [ 645.792553][T22866] ? __pfx_netlink_unicast+0x10/0x10 [ 645.792587][T22866] ? netlink_sendmsg+0x642/0xb30 [ 645.792607][T22866] ? skb_put+0x11b/0x210 [ 645.792634][T22866] netlink_sendmsg+0x805/0xb30 [ 645.792666][T22866] ? __pfx_netlink_sendmsg+0x10/0x10 [ 645.792692][T22866] ? aa_sock_msg_perm+0xf1/0x1d0 [ 645.792724][T22866] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 645.792745][T22866] ? __pfx_netlink_sendmsg+0x10/0x10 [ 645.792767][T22866] __sock_sendmsg+0x21c/0x270 [ 645.792800][T22866] ____sys_sendmsg+0x505/0x830 [ 645.792831][T22866] ? __pfx_____sys_sendmsg+0x10/0x10 [ 645.792870][T22866] ? import_iovec+0x74/0xa0 [ 645.792902][T22866] ___sys_sendmsg+0x21f/0x2a0 [ 645.792930][T22866] ? __pfx____sys_sendmsg+0x10/0x10 [ 645.792995][T22866] ? __fget_files+0x2a/0x420 [ 645.793015][T22866] ? __fget_files+0x3a0/0x420 [ 645.793053][T22866] __x64_sys_sendmsg+0x19b/0x260 [ 645.793081][T22866] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 645.793116][T22866] ? __pfx_ksys_write+0x10/0x10 [ 645.793150][T22866] ? do_syscall_64+0xbe/0xfa0 [ 645.793175][T22866] do_syscall_64+0xfa/0xfa0 [ 645.793195][T22866] ? lockdep_hardirqs_on+0x9c/0x150 [ 645.793216][T22866] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 645.793238][T22866] ? clear_bhb_loop+0x60/0xb0 [ 645.793263][T22866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 645.793284][T22866] RIP: 0033:0x7fc464b8f6c9 [ 645.793304][T22866] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 645.793322][T22866] RSP: 002b:00007fc465948038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 645.793346][T22866] RAX: ffffffffffffffda RBX: 00007fc464de5fa0 RCX: 00007fc464b8f6c9 [ 645.793361][T22866] RDX: 0000000020044002 RSI: 0000200000000080 RDI: 0000000000000003 [ 645.793376][T22866] RBP: 00007fc465948090 R08: 0000000000000000 R09: 0000000000000000 [ 645.793390][T22866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 645.793402][T22866] R13: 00007fc464de6038 R14: 00007fc464de5fa0 R15: 00007ffd82ead758 [ 645.793438][T22866] [ 646.378828][T22876] syzkaller0: entered promiscuous mode [ 646.387145][T22876] syzkaller0: entered allmulticast mode [ 646.646690][T22885] tipc: Enabling of bearer rejected, already enabled [ 646.820747][T22893] netlink: 'syz.4.4993': attribute type 4 has an invalid length. [ 648.377633][T22971] netlink: 'syz.4.5018': attribute type 4 has an invalid length. [ 648.807983][T22982] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 649.158041][T22997] veth0_to_hsr: entered promiscuous mode [ 649.180824][T22997] veth0_to_hsr: entered allmulticast mode [ 649.194942][T22997] A link change request failed with some changes committed already. Interface veth0_to_hsr may have been left with an inconsistent configuration, please check. [ 649.294743][T22995] IPv6: sit1: Disabled Multicast RS [ 649.319776][T23005] netlink: 'syz.1.5030': attribute type 4 has an invalid length. [ 649.332007][T23005] __nla_validate_parse: 144 callbacks suppressed [ 649.332031][T23005] netlink: 228 bytes leftover after parsing attributes in process `syz.1.5030'. [ 649.435801][T23010] xt_TCPMSS: Only works on TCP SYN packets [ 649.530153][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 650.045718][T23043] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5042'. [ 650.150855][T23046] netlink: 'syz.3.5043': attribute type 4 has an invalid length. [ 650.187580][T23046] netlink: 228 bytes leftover after parsing attributes in process `syz.3.5043'. [ 650.221746][T23052] FAULT_INJECTION: forcing a failure. [ 650.221746][T23052] name failslab, interval 1, probability 0, space 0, times 0 [ 650.306110][T23052] CPU: 0 UID: 0 PID: 23052 Comm: syz.1.5045 Not tainted syzkaller #0 PREEMPT(full) [ 650.306141][T23052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 650.306155][T23052] Call Trace: [ 650.306164][T23052] [ 650.306174][T23052] dump_stack_lvl+0x189/0x250 [ 650.306210][T23052] ? __pfx____ratelimit+0x10/0x10 [ 650.306244][T23052] ? __pfx_dump_stack_lvl+0x10/0x10 [ 650.306274][T23052] ? __pfx__printk+0x10/0x10 [ 650.306304][T23052] ? __pfx___might_resched+0x10/0x10 [ 650.306334][T23052] should_fail_ex+0x414/0x560 [ 650.306372][T23052] should_failslab+0xa8/0x100 [ 650.306397][T23052] kmem_cache_alloc_lru_noprof+0x79/0x6d0 [ 650.306437][T23052] ? __d_alloc+0x36/0x7a0 [ 650.306469][T23052] __d_alloc+0x36/0x7a0 [ 650.306499][T23052] d_alloc_parallel+0xe1/0x1610 [ 650.306527][T23052] ? __lock_acquire+0xab9/0xd20 [ 650.306559][T23052] ? __lock_acquire+0xab9/0xd20 [ 650.306586][T23052] ? __pfx_d_alloc_parallel+0x10/0x10 [ 650.306618][T23052] ? __raw_spin_lock_init+0x45/0x100 [ 650.306649][T23052] ? __init_waitqueue_head+0xa9/0x150 [ 650.306682][T23052] __lookup_slow+0x116/0x3d0 [ 650.306712][T23052] ? __pfx___lookup_slow+0x10/0x10 [ 650.306747][T23052] ? d_lookup+0x8a/0xa0 [ 650.306772][T23052] ? lookup_noperm+0x112/0x220 [ 650.306801][T23052] simple_start_creating+0xfd/0x1e0 [ 650.306824][T23052] ? __pfx_simple_start_creating+0x10/0x10 [ 650.306859][T23052] debugfs_start_creating+0x10f/0x180 [ 650.306893][T23052] __debugfs_create_file+0x79/0x4f0 [ 650.306930][T23052] debugfs_create_file_full+0x3f/0x60 [ 650.306965][T23052] ref_tracker_dir_debugfs+0x14e/0x270 [ 650.306988][T23052] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 650.307040][T23052] ? trace_kmalloc+0x1f/0xd0 [ 650.307066][T23052] ? __kvmalloc_node_noprof+0x5ed/0x910 [ 650.307104][T23052] ? __raw_spin_lock_init+0x45/0x100 [ 650.307136][T23052] alloc_netdev_mqs+0x272/0x11b0 [ 650.307164][T23052] ? __pfx_br_dev_setup+0x10/0x10 [ 650.307193][T23052] rtnl_create_link+0x31f/0xd10 [ 650.307230][T23052] rtnl_newlink_create+0x25c/0xb00 [ 650.307260][T23052] ? __lock_acquire+0xab9/0xd20 [ 650.307288][T23052] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 650.307316][T23052] ? __pfx___mutex_lock+0x10/0x10 [ 650.307351][T23052] ? ns_capable+0x8a/0xf0 [ 650.307379][T23052] rtnl_newlink+0x16e4/0x1c80 [ 650.307402][T23052] ? ____sys_sendmsg+0x505/0x830 [ 650.307448][T23052] ? __pfx_rtnl_newlink+0x10/0x10 [ 650.307495][T23052] ? kasan_quarantine_put+0xdd/0x220 [ 650.307525][T23052] ? lockdep_hardirqs_on+0x9c/0x150 [ 650.307554][T23052] ? nlmon_xmit+0xb0/0x100 [ 650.307579][T23052] ? kmem_cache_free+0x19b/0x690 [ 650.307620][T23052] ? __local_bh_enable_ip+0x12d/0x1c0 [ 650.307645][T23052] ? lockdep_hardirqs_on+0x9c/0x150 [ 650.307667][T23052] ? __local_bh_enable_ip+0x12d/0x1c0 [ 650.307690][T23052] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 650.307718][T23052] ? __dev_queue_xmit+0x284/0x3740 [ 650.307749][T23052] ? __dev_queue_xmit+0x284/0x3740 [ 650.307775][T23052] ? __dev_queue_xmit+0x1bfb/0x3740 [ 650.307811][T23052] ? __lock_acquire+0xab9/0xd20 [ 650.307861][T23052] ? __pfx_rtnl_newlink+0x10/0x10 [ 650.307882][T23052] rtnetlink_rcv_msg+0x7cf/0xb70 [ 650.307908][T23052] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 650.307928][T23052] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 650.307947][T23052] ? ref_tracker_free+0x63a/0x7d0 [ 650.307968][T23052] ? __asan_memcpy+0x40/0x70 [ 650.307996][T23052] ? __pfx_ref_tracker_free+0x10/0x10 [ 650.308030][T23052] netlink_rcv_skb+0x208/0x470 [ 650.308054][T23052] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 650.308078][T23052] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 650.308114][T23052] ? netlink_deliver_tap+0x2e/0x1b0 [ 650.308147][T23052] netlink_unicast+0x82f/0x9e0 [ 650.308191][T23052] ? __pfx_netlink_unicast+0x10/0x10 [ 650.308228][T23052] ? netlink_sendmsg+0x642/0xb30 [ 650.308248][T23052] ? skb_put+0x11b/0x210 [ 650.308275][T23052] netlink_sendmsg+0x805/0xb30 [ 650.308310][T23052] ? __pfx_netlink_sendmsg+0x10/0x10 [ 650.308338][T23052] ? aa_sock_msg_perm+0xf1/0x1d0 [ 650.308373][T23052] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 650.308394][T23052] ? __pfx_netlink_sendmsg+0x10/0x10 [ 650.308428][T23052] __sock_sendmsg+0x21c/0x270 [ 650.308463][T23052] ____sys_sendmsg+0x505/0x830 [ 650.308495][T23052] ? __pfx_____sys_sendmsg+0x10/0x10 [ 650.308531][T23052] ? import_iovec+0x74/0xa0 [ 650.308564][T23052] ___sys_sendmsg+0x21f/0x2a0 [ 650.308592][T23052] ? __pfx____sys_sendmsg+0x10/0x10 [ 650.308660][T23052] ? __fget_files+0x2a/0x420 [ 650.308681][T23052] ? __fget_files+0x3a0/0x420 [ 650.308714][T23052] __x64_sys_sendmsg+0x19b/0x260 [ 650.308742][T23052] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 650.308779][T23052] ? __pfx_ksys_write+0x10/0x10 [ 650.308815][T23052] ? do_syscall_64+0xbe/0xfa0 [ 650.308858][T23052] do_syscall_64+0xfa/0xfa0 [ 650.308877][T23052] ? lockdep_hardirqs_on+0x9c/0x150 [ 650.308897][T23052] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 650.308918][T23052] ? clear_bhb_loop+0x60/0xb0 [ 650.308945][T23052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 650.308965][T23052] RIP: 0033:0x7fc464b8f6c9 [ 650.308985][T23052] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 650.309003][T23052] RSP: 002b:00007fc465948038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 650.309028][T23052] RAX: ffffffffffffffda RBX: 00007fc464de5fa0 RCX: 00007fc464b8f6c9 [ 650.309044][T23052] RDX: 0000000020044002 RSI: 0000200000000080 RDI: 0000000000000003 [ 650.309058][T23052] RBP: 00007fc465948090 R08: 0000000000000000 R09: 0000000000000000 [ 650.309072][T23052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 650.309085][T23052] R13: 00007fc464de6038 R14: 00007fc464de5fa0 R15: 00007ffd82ead758 [ 650.309122][T23052] [ 651.211729][T23074] netlink: 'syz.2.5053': attribute type 1 has an invalid length. [ 651.433630][ T5890] wlan0 speed is unknown, defaulting to 1000 [ 651.440321][ T5890] syz0: Port: 1 Link DOWN [ 651.538112][T23082] ip6_vti0 speed is unknown, defaulting to 1000 [ 652.057796][T23082] wg1 speed is unknown, defaulting to 1000 [ 652.077846][T23101] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5062'. [ 652.096780][T23082] wlan0 speed is unknown, defaulting to 1000 [ 652.195799][T23106] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5063'. [ 652.206519][T23106] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5063'. [ 652.241112][T23106] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5063'. [ 652.315383][T23111] syzkaller0: entered promiscuous mode [ 652.322299][T23111] syzkaller0: entered allmulticast mode [ 652.585723][T23119] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5070'. [ 652.643861][T23122] tipc: Enabling of bearer rejected, failed to enable media [ 652.857896][T23135] FAULT_INJECTION: forcing a failure. [ 652.857896][T23135] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 652.882568][T23135] CPU: 0 UID: 0 PID: 23135 Comm: syz.1.5075 Not tainted syzkaller #0 PREEMPT(full) [ 652.882600][T23135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 652.882614][T23135] Call Trace: [ 652.882623][T23135] [ 652.882634][T23135] dump_stack_lvl+0x189/0x250 [ 652.882667][T23135] ? __pfx____ratelimit+0x10/0x10 [ 652.882701][T23135] ? __pfx_dump_stack_lvl+0x10/0x10 [ 652.882731][T23135] ? __pfx__printk+0x10/0x10 [ 652.882754][T23135] ? __might_fault+0xb0/0x130 [ 652.882797][T23135] should_fail_ex+0x414/0x560 [ 652.882836][T23135] _copy_from_user+0x2d/0xb0 [ 652.882865][T23135] ___sys_sendmsg+0x158/0x2a0 [ 652.882892][T23135] ? __pfx____sys_sendmsg+0x10/0x10 [ 652.882954][T23135] ? __fget_files+0x2a/0x420 [ 652.882973][T23135] ? __fget_files+0x3a0/0x420 [ 652.883003][T23135] __x64_sys_sendmsg+0x19b/0x260 [ 652.883031][T23135] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 652.883072][T23135] ? do_syscall_64+0xbe/0xfa0 [ 652.883098][T23135] do_syscall_64+0xfa/0xfa0 [ 652.883120][T23135] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 652.883139][T23135] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 652.883160][T23135] ? clear_bhb_loop+0x60/0xb0 [ 652.883185][T23135] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 652.883214][T23135] RIP: 0033:0x7fc464b8f6c9 [ 652.883233][T23135] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 652.883264][T23135] RSP: 002b:00007fc465948038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 652.883285][T23135] RAX: ffffffffffffffda RBX: 00007fc464de5fa0 RCX: 00007fc464b8f6c9 [ 652.883301][T23135] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 652.883315][T23135] RBP: 00007fc465948090 R08: 0000000000000000 R09: 0000000000000000 [ 652.883327][T23135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 652.883340][T23135] R13: 00007fc464de6038 R14: 00007fc464de5fa0 R15: 00007ffd82ead758 [ 652.883373][T23135] [ 653.125359][T23139] netlink: 404 bytes leftover after parsing attributes in process `syz.0.5077'. [ 653.153828][T23139] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5077'. [ 653.203337][T23139] netlink: 'syz.0.5077': attribute type 4 has an invalid length. [ 653.212238][T23139] netlink: 'syz.0.5077': attribute type 1 has an invalid length. [ 653.358405][T23151] FAULT_INJECTION: forcing a failure. [ 653.358405][T23151] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 653.373640][T23151] CPU: 0 UID: 0 PID: 23151 Comm: syz.2.5083 Not tainted syzkaller #0 PREEMPT(full) [ 653.373669][T23151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 653.373683][T23151] Call Trace: [ 653.373692][T23151] [ 653.373702][T23151] dump_stack_lvl+0x189/0x250 [ 653.373737][T23151] ? __pfx____ratelimit+0x10/0x10 [ 653.373770][T23151] ? __pfx_dump_stack_lvl+0x10/0x10 [ 653.373800][T23151] ? __pfx__printk+0x10/0x10 [ 653.373822][T23151] ? __might_fault+0xb0/0x130 [ 653.373865][T23151] should_fail_ex+0x414/0x560 [ 653.373904][T23151] _copy_from_user+0x2d/0xb0 [ 653.373932][T23151] ___sys_sendmsg+0x158/0x2a0 [ 653.373961][T23151] ? __pfx____sys_sendmsg+0x10/0x10 [ 653.374026][T23151] ? __fget_files+0x2a/0x420 [ 653.374045][T23151] ? __fget_files+0x3a0/0x420 [ 653.374077][T23151] __x64_sys_sendmsg+0x19b/0x260 [ 653.374105][T23151] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 653.374141][T23151] ? __pfx_ksys_write+0x10/0x10 [ 653.374183][T23151] ? do_syscall_64+0xbe/0xfa0 [ 653.374209][T23151] do_syscall_64+0xfa/0xfa0 [ 653.374228][T23151] ? lockdep_hardirqs_on+0x9c/0x150 [ 653.374249][T23151] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 653.374269][T23151] ? clear_bhb_loop+0x60/0xb0 [ 653.374295][T23151] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 653.374315][T23151] RIP: 0033:0x7f375358f6c9 [ 653.374334][T23151] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 653.374352][T23151] RSP: 002b:00007f37517f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 653.374374][T23151] RAX: ffffffffffffffda RBX: 00007f37537e5fa0 RCX: 00007f375358f6c9 [ 653.374390][T23151] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000009 [ 653.374404][T23151] RBP: 00007f37517f6090 R08: 0000000000000000 R09: 0000000000000000 [ 653.374418][T23151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 653.374431][T23151] R13: 00007f37537e6038 R14: 00007f37537e5fa0 R15: 00007ffec5c65b88 [ 653.374467][T23151] [ 653.609060][T23157] sctp: [Deprecated]: syz.3.5079 (pid 23157) Use of int in maxseg socket option. [ 653.609060][T23157] Use struct sctp_assoc_value instead [ 654.517319][T23188] ip6_vti0 speed is unknown, defaulting to 1000 [ 654.647504][T23199] netlink: 'syz.1.5098': attribute type 4 has an invalid length. [ 654.660148][T23199] netlink: 'syz.1.5098': attribute type 1 has an invalid length. [ 654.673837][T23199] __nla_validate_parse: 3 callbacks suppressed [ 654.673857][T23199] netlink: 228 bytes leftover after parsing attributes in process `syz.1.5098'. [ 654.878102][T23188] wg1 speed is unknown, defaulting to 1000 [ 654.933852][T23188] wlan0 speed is unknown, defaulting to 1000 [ 655.160781][T23212] netlink: 65051 bytes leftover after parsing attributes in process `syz.1.5101'. [ 655.393938][T23215] tunl0: Caught tx_queue_len zero misconfig [ 655.454564][T23218] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5103'. [ 655.493063][T23221] Cannot find set identified by id 3 to match [ 655.531959][T23222] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 655.546081][T22343] bond0: (slave bond_slave_0): interface is now down [ 655.559462][T22343] bond0: (slave bond_slave_1): interface is now down [ 655.579414][ T4574] bond0: (slave bond_slave_0): interface is now down [ 655.586159][ T4574] bond0: (slave bond_slave_1): interface is now down [ 655.619646][T22343] bond0: (slave bond_slave_0): interface is now down [ 655.626398][T22343] bond0: (slave bond_slave_1): interface is now down [ 655.664503][T22343] bond0: (slave bond_slave_0): interface is now down [ 655.693563][T23224] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5105'. [ 655.700300][T22343] bond0: (slave bond_slave_1): interface is now down [ 655.725693][T23225] netlink: 'syz.2.5103': attribute type 3 has an invalid length. [ 655.753855][T23225] netlink: 'syz.2.5103': attribute type 1 has an invalid length. [ 655.793487][T23225] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.5103'. [ 655.819956][T22343] bond0: (slave bond_slave_0): interface is now down [ 655.827593][T22343] bond0: (slave bond_slave_1): interface is now down [ 655.856975][T23230] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.5106'. [ 655.866639][T22343] bond0: (slave bond_slave_0): interface is now down [ 655.889489][T22343] bond0: (slave bond_slave_1): interface is now down [ 655.923285][T22343] bond0: now running without any active interface! [ 656.127553][T23237] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5109'. [ 656.203559][T23238] FAULT_INJECTION: forcing a failure. [ 656.203559][T23238] name failslab, interval 1, probability 0, space 0, times 0 [ 656.217107][T23238] CPU: 1 UID: 0 PID: 23238 Comm: syz.3.5108 Not tainted syzkaller #0 PREEMPT(full) [ 656.217138][T23238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 656.217151][T23238] Call Trace: [ 656.217160][T23238] [ 656.217170][T23238] dump_stack_lvl+0x189/0x250 [ 656.217204][T23238] ? __pfx____ratelimit+0x10/0x10 [ 656.217238][T23238] ? __pfx_dump_stack_lvl+0x10/0x10 [ 656.217266][T23238] ? __pfx__printk+0x10/0x10 [ 656.217295][T23238] ? __pfx___might_resched+0x10/0x10 [ 656.217324][T23238] should_fail_ex+0x414/0x560 [ 656.217362][T23238] should_failslab+0xa8/0x100 [ 656.217386][T23238] kmem_cache_alloc_node_noprof+0x77/0x710 [ 656.217416][T23238] ? __alloc_skb+0x112/0x2d0 [ 656.217444][T23238] __alloc_skb+0x112/0x2d0 [ 656.217468][T23238] netlink_ack+0x146/0xa50 [ 656.217508][T23238] netlink_rcv_skb+0x28c/0x470 [ 656.217532][T23238] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 656.217569][T23238] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 656.217604][T23238] ? bpf_lsm_capable+0x9/0x20 [ 656.217630][T23238] ? security_capable+0x7e/0x2e0 [ 656.217669][T23238] nfnetlink_rcv+0x282/0x2590 [ 656.217702][T23238] ? __dev_queue_xmit+0x284/0x3740 [ 656.217728][T23238] ? __dev_queue_xmit+0x1bfb/0x3740 [ 656.217770][T23238] ? __dev_queue_xmit+0x284/0x3740 [ 656.217809][T23238] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 656.217870][T23238] ? ref_tracker_free+0x63a/0x7d0 [ 656.217892][T23238] ? __asan_memcpy+0x40/0x70 [ 656.217919][T23238] ? __pfx_ref_tracker_free+0x10/0x10 [ 656.217957][T23238] ? skb_clone+0x246/0x3a0 [ 656.217987][T23238] ? __netlink_deliver_tap+0x807/0x850 [ 656.218009][T23238] ? netlink_deliver_tap+0x2e/0x1b0 [ 656.218039][T23238] ? netlink_deliver_tap+0x2e/0x1b0 [ 656.218070][T23238] netlink_unicast+0x82f/0x9e0 [ 656.218113][T23238] ? __pfx_netlink_unicast+0x10/0x10 [ 656.218148][T23238] ? netlink_sendmsg+0x642/0xb30 [ 656.218168][T23238] ? skb_put+0x11b/0x210 [ 656.218193][T23238] netlink_sendmsg+0x805/0xb30 [ 656.218225][T23238] ? __pfx_netlink_sendmsg+0x10/0x10 [ 656.218252][T23238] ? aa_sock_msg_perm+0xf1/0x1d0 [ 656.218285][T23238] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 656.218306][T23238] ? __pfx_netlink_sendmsg+0x10/0x10 [ 656.218329][T23238] __sock_sendmsg+0x21c/0x270 [ 656.218362][T23238] ____sys_sendmsg+0x505/0x830 [ 656.218394][T23238] ? __pfx_____sys_sendmsg+0x10/0x10 [ 656.218428][T23238] ? import_iovec+0x74/0xa0 [ 656.218460][T23238] ___sys_sendmsg+0x21f/0x2a0 [ 656.218487][T23238] ? __pfx____sys_sendmsg+0x10/0x10 [ 656.218550][T23238] ? __fget_files+0x2a/0x420 [ 656.218571][T23238] ? __fget_files+0x3a0/0x420 [ 656.218603][T23238] __x64_sys_sendmsg+0x19b/0x260 [ 656.218630][T23238] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 656.218666][T23238] ? __pfx_ksys_write+0x10/0x10 [ 656.218700][T23238] ? do_syscall_64+0xbe/0xfa0 [ 656.218725][T23238] do_syscall_64+0xfa/0xfa0 [ 656.218744][T23238] ? lockdep_hardirqs_on+0x9c/0x150 [ 656.218765][T23238] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 656.218786][T23238] ? clear_bhb_loop+0x60/0xb0 [ 656.218813][T23238] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 656.218834][T23238] RIP: 0033:0x7f1b1798f6c9 [ 656.218863][T23238] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 656.218882][T23238] RSP: 002b:00007f1b18795038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 656.218905][T23238] RAX: ffffffffffffffda RBX: 00007f1b17be6090 RCX: 00007f1b1798f6c9 [ 656.218921][T23238] RDX: 0000000004000084 RSI: 0000200000000000 RDI: 0000000000000008 [ 656.218935][T23238] RBP: 00007f1b18795090 R08: 0000000000000000 R09: 0000000000000000 [ 656.218949][T23238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 656.218961][T23238] R13: 00007f1b17be6128 R14: 00007f1b17be6090 R15: 00007fffc13d01f8 [ 656.218996][T23238] [ 656.758538][T23248] netlink: 14 bytes leftover after parsing attributes in process `syz.4.5113'. [ 657.082413][T23265] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5120'. [ 657.427695][T23273] bond1: option arp_all_targets: invalid value (3) [ 657.455221][T23273] bond1 (unregistering): Released all slaves [ 657.600819][T23287] FAULT_INJECTION: forcing a failure. [ 657.600819][T23287] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 657.653118][T23289] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5126'. [ 657.658406][T23287] CPU: 0 UID: 0 PID: 23287 Comm: syz.4.5125 Not tainted syzkaller #0 PREEMPT(full) [ 657.658441][T23287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 657.658457][T23287] Call Trace: [ 657.658467][T23287] [ 657.658477][T23287] dump_stack_lvl+0x189/0x250 [ 657.658518][T23287] ? __pfx____ratelimit+0x10/0x10 [ 657.658555][T23287] ? __pfx_dump_stack_lvl+0x10/0x10 [ 657.658587][T23287] ? __pfx__printk+0x10/0x10 [ 657.658614][T23287] ? __might_fault+0xb0/0x130 [ 657.658660][T23287] should_fail_ex+0x414/0x560 [ 657.658703][T23287] _copy_from_iter+0x1de/0x1790 [ 657.658739][T23287] ? rcu_is_watching+0x15/0xb0 [ 657.658771][T23287] ? kmalloc_reserve+0xbd/0x290 [ 657.658795][T23287] ? __pfx__copy_from_iter+0x10/0x10 [ 657.658826][T23287] ? __build_skb_around+0x262/0x3f0 [ 657.658855][T23287] ? netlink_sendmsg+0x642/0xb30 [ 657.658880][T23287] ? skb_put+0x11b/0x210 [ 657.658909][T23287] netlink_sendmsg+0x6b2/0xb30 [ 657.658947][T23287] ? __pfx_netlink_sendmsg+0x10/0x10 [ 657.658977][T23287] ? aa_sock_msg_perm+0xf1/0x1d0 [ 657.659015][T23287] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 657.659048][T23287] ? __pfx_netlink_sendmsg+0x10/0x10 [ 657.659080][T23287] __sock_sendmsg+0x21c/0x270 [ 657.659117][T23287] ____sys_sendmsg+0x505/0x830 [ 657.659152][T23287] ? __pfx_____sys_sendmsg+0x10/0x10 [ 657.659190][T23287] ? import_iovec+0x74/0xa0 [ 657.659226][T23287] ___sys_sendmsg+0x21f/0x2a0 [ 657.659255][T23287] ? __pfx____sys_sendmsg+0x10/0x10 [ 657.659331][T23287] ? __fget_files+0x2a/0x420 [ 657.659353][T23287] ? __fget_files+0x3a0/0x420 [ 657.659388][T23287] __x64_sys_sendmsg+0x19b/0x260 [ 657.659419][T23287] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 657.659460][T23287] ? __pfx_ksys_write+0x10/0x10 [ 657.659498][T23287] ? do_syscall_64+0xbe/0xfa0 [ 657.659526][T23287] do_syscall_64+0xfa/0xfa0 [ 657.659550][T23287] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 657.659573][T23287] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 657.659597][T23287] ? clear_bhb_loop+0x60/0xb0 [ 657.659626][T23287] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 657.659649][T23287] RIP: 0033:0x7f9c2538f6c9 [ 657.659671][T23287] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 657.659693][T23287] RSP: 002b:00007f9c26267038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 657.659719][T23287] RAX: ffffffffffffffda RBX: 00007f9c255e5fa0 RCX: 00007f9c2538f6c9 [ 657.659738][T23287] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 657.659753][T23287] RBP: 00007f9c26267090 R08: 0000000000000000 R09: 0000000000000000 [ 657.659768][T23287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 657.659782][T23287] R13: 00007f9c255e6038 R14: 00007f9c255e5fa0 R15: 00007ffc736741c8 [ 657.659821][T23287] [ 657.884033][T23291] syzkaller0: entered promiscuous mode [ 657.967748][T23291] syzkaller0: entered allmulticast mode [ 658.379552][T23321] hsr0: Caught tx_queue_len zero misconfig [ 658.448812][T23323] netlink: 'syz.1.5137': attribute type 1 has an invalid length. [ 658.634419][T23323] bond7: entered promiscuous mode [ 658.640093][T23323] 8021q: adding VLAN 0 to HW filter on device bond7 [ 658.681033][T23325] 8021q: adding VLAN 0 to HW filter on device bond7 [ 658.689886][T23325] bond7: (slave wireguard0): The slave device specified does not support setting the MAC address [ 658.701047][T23325] bond7: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 658.721949][T23325] bond7: (slave wireguard0): making interface the new active one [ 658.729990][T23325] wireguard0: entered promiscuous mode [ 658.737468][T23325] bond7: (slave wireguard0): Enslaving as an active interface with an up link [ 659.816896][T23373] __nla_validate_parse: 4 callbacks suppressed [ 659.816918][T23373] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5152'. [ 660.138834][T23385] FAULT_INJECTION: forcing a failure. [ 660.138834][T23385] name failslab, interval 1, probability 0, space 0, times 0 [ 660.152005][T23385] CPU: 0 UID: 0 PID: 23385 Comm: syz.2.5154 Not tainted syzkaller #0 PREEMPT(full) [ 660.152034][T23385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 660.152049][T23385] Call Trace: [ 660.152057][T23385] [ 660.152067][T23385] dump_stack_lvl+0x189/0x250 [ 660.152102][T23385] ? __pfx____ratelimit+0x10/0x10 [ 660.152134][T23385] ? __pfx_dump_stack_lvl+0x10/0x10 [ 660.152160][T23385] ? __pfx__printk+0x10/0x10 [ 660.152177][T23385] ? netlink_sendmsg+0x805/0xb30 [ 660.152200][T23385] ? __x64_sys_sendmsg+0x19b/0x260 [ 660.152234][T23385] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 660.152262][T23385] should_fail_ex+0x414/0x560 [ 660.152296][T23385] should_failslab+0xa8/0x100 [ 660.152317][T23385] kmem_cache_alloc_noprof+0x74/0x6e0 [ 660.152346][T23385] ? skb_clone+0x212/0x3a0 [ 660.152378][T23385] skb_clone+0x212/0x3a0 [ 660.152407][T23385] __netlink_deliver_tap+0x404/0x850 [ 660.152441][T23385] ? netlink_deliver_tap+0x2e/0x1b0 [ 660.152463][T23385] netlink_deliver_tap+0x19c/0x1b0 [ 660.152487][T23385] netlink_sendskb+0x68/0x140 [ 660.152523][T23385] netlink_unicast+0x397/0x9e0 [ 660.152551][T23385] ? __asan_memcpy+0x40/0x70 [ 660.152595][T23385] ? __pfx_netlink_unicast+0x10/0x10 [ 660.152634][T23385] netlink_rcv_skb+0x28c/0x470 [ 660.152658][T23385] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 660.152695][T23385] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 660.152730][T23385] ? bpf_lsm_capable+0x9/0x20 [ 660.152756][T23385] ? security_capable+0x7e/0x2e0 [ 660.152794][T23385] nfnetlink_rcv+0x282/0x2590 [ 660.152829][T23385] ? __dev_queue_xmit+0x284/0x3740 [ 660.152857][T23385] ? __dev_queue_xmit+0x1bfb/0x3740 [ 660.152899][T23385] ? __dev_queue_xmit+0x284/0x3740 [ 660.152938][T23385] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 660.152989][T23385] ? ref_tracker_free+0x63a/0x7d0 [ 660.153011][T23385] ? __asan_memcpy+0x40/0x70 [ 660.153038][T23385] ? __pfx_ref_tracker_free+0x10/0x10 [ 660.153075][T23385] ? skb_clone+0x246/0x3a0 [ 660.153105][T23385] ? __netlink_deliver_tap+0x807/0x850 [ 660.153126][T23385] ? netlink_deliver_tap+0x2e/0x1b0 [ 660.153156][T23385] ? netlink_deliver_tap+0x2e/0x1b0 [ 660.153186][T23385] netlink_unicast+0x82f/0x9e0 [ 660.153227][T23385] ? __pfx_netlink_unicast+0x10/0x10 [ 660.153261][T23385] ? netlink_sendmsg+0x642/0xb30 [ 660.153282][T23385] ? skb_put+0x11b/0x210 [ 660.153307][T23385] netlink_sendmsg+0x805/0xb30 [ 660.153340][T23385] ? __pfx_netlink_sendmsg+0x10/0x10 [ 660.153368][T23385] ? aa_sock_msg_perm+0xf1/0x1d0 [ 660.153402][T23385] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 660.153423][T23385] ? __pfx_netlink_sendmsg+0x10/0x10 [ 660.153448][T23385] __sock_sendmsg+0x21c/0x270 [ 660.153481][T23385] ____sys_sendmsg+0x505/0x830 [ 660.153513][T23385] ? __pfx_____sys_sendmsg+0x10/0x10 [ 660.153547][T23385] ? import_iovec+0x74/0xa0 [ 660.153594][T23385] ___sys_sendmsg+0x21f/0x2a0 [ 660.153623][T23385] ? __pfx____sys_sendmsg+0x10/0x10 [ 660.153686][T23385] ? __fget_files+0x2a/0x420 [ 660.153704][T23385] ? __fget_files+0x3a0/0x420 [ 660.153737][T23385] __x64_sys_sendmsg+0x19b/0x260 [ 660.153765][T23385] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 660.153801][T23385] ? __pfx_ksys_write+0x10/0x10 [ 660.153836][T23385] ? do_syscall_64+0xbe/0xfa0 [ 660.153862][T23385] do_syscall_64+0xfa/0xfa0 [ 660.153881][T23385] ? lockdep_hardirqs_on+0x9c/0x150 [ 660.153902][T23385] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 660.153924][T23385] ? clear_bhb_loop+0x60/0xb0 [ 660.153951][T23385] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 660.153972][T23385] RIP: 0033:0x7f375358f6c9 [ 660.153992][T23385] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 660.154012][T23385] RSP: 002b:00007f37517d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 660.154036][T23385] RAX: ffffffffffffffda RBX: 00007f37537e6090 RCX: 00007f375358f6c9 [ 660.154051][T23385] RDX: 0000000004000084 RSI: 0000200000000000 RDI: 0000000000000008 [ 660.154065][T23385] RBP: 00007f37517d5090 R08: 0000000000000000 R09: 0000000000000000 [ 660.154079][T23385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 660.154092][T23385] R13: 00007f37537e6128 R14: 00007f37537e6090 R15: 00007ffec5c65b88 [ 660.154127][T23385] [ 660.154266][T23383] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5156'. [ 660.232180][T23388] syzkaller0: entered promiscuous mode [ 660.615029][T23388] syzkaller0: entered allmulticast mode [ 660.825979][T23402] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5162'. [ 660.874559][T23402] ip6gretap0: entered promiscuous mode [ 660.883535][T23402] ip6gretap0: left promiscuous mode [ 661.302723][T23404] Cannot find del_set index 4 as target [ 661.476614][T23427] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5168'. [ 662.099061][T23441] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5174'. [ 662.198092][T23441] tipc: Started in network mode [ 662.234595][T23441] tipc: Node identity , cluster identity 4711 [ 662.244666][T23441] tipc: Failed to set node id, please configure manually [ 662.255222][T23442] netlink: 'syz.2.5174': attribute type 1 has an invalid length. [ 662.270827][T23441] tipc: Enabling of bearer rejected, failed to enable media [ 662.323379][T23448] Cannot find set identified by id 3 to match [ 662.630124][T23461] bond0: entered promiscuous mode [ 662.637578][T23461] batadv0: entered promiscuous mode [ 662.644825][T23461] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 662.657549][T23461] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 662.669913][T23461] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 662.678949][T23461] bond0: left promiscuous mode [ 662.688834][T23461] batadv0: left promiscuous mode [ 662.751001][T23466] syzkaller0: entered promiscuous mode [ 662.756838][T23466] syzkaller0: entered allmulticast mode [ 662.905924][T23470] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5184'. [ 662.929988][T23472] FAULT_INJECTION: forcing a failure. [ 662.929988][T23472] name failslab, interval 1, probability 0, space 0, times 0 [ 662.943574][T23472] CPU: 1 UID: 0 PID: 23472 Comm: syz.2.5185 Not tainted syzkaller #0 PREEMPT(full) [ 662.943602][T23472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 662.943614][T23472] Call Trace: [ 662.943622][T23472] [ 662.943631][T23472] dump_stack_lvl+0x189/0x250 [ 662.943662][T23472] ? __pfx____ratelimit+0x10/0x10 [ 662.943692][T23472] ? __pfx_dump_stack_lvl+0x10/0x10 [ 662.943717][T23472] ? __pfx__printk+0x10/0x10 [ 662.943742][T23472] ? __pfx___might_resched+0x10/0x10 [ 662.943761][T23472] ? fs_reclaim_acquire+0x7d/0x100 [ 662.943782][T23472] should_fail_ex+0x414/0x560 [ 662.943814][T23472] should_failslab+0xa8/0x100 [ 662.943834][T23472] kmem_cache_alloc_node_noprof+0x77/0x710 [ 662.943863][T23472] ? __alloc_skb+0x112/0x2d0 [ 662.943886][T23472] __alloc_skb+0x112/0x2d0 [ 662.943911][T23472] alloc_skb_with_frags+0xca/0x890 [ 662.943933][T23472] ? __might_fault+0xb0/0x130 [ 662.943977][T23472] sock_alloc_send_pskb+0x84d/0x980 [ 662.944024][T23472] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 662.944046][T23472] ? __pfx__copy_from_iter+0x10/0x10 [ 662.944067][T23472] ? __lock_acquire+0xab9/0xd20 [ 662.944090][T23472] l2cap_sock_alloc_skb_cb+0xd7/0x460 [ 662.944117][T23472] ? __pfx_l2cap_sock_alloc_skb_cb+0x10/0x10 [ 662.944148][T23472] ? skb_put+0x11b/0x210 [ 662.944173][T23472] l2cap_chan_send+0xa3d/0x2790 [ 662.944220][T23472] ? __pfx_l2cap_chan_send+0x10/0x10 [ 662.944245][T23472] ? __local_bh_enable_ip+0x12d/0x1c0 [ 662.944297][T23472] l2cap_sock_sendmsg+0x32e/0x4a0 [ 662.944325][T23472] ? __pfx_l2cap_sock_sendmsg+0x10/0x10 [ 662.944352][T23472] ? aa_sock_msg_perm+0xf1/0x1d0 [ 662.944386][T23472] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 662.944407][T23472] ? __pfx_l2cap_sock_sendmsg+0x10/0x10 [ 662.944432][T23472] __sock_sendmsg+0x21c/0x270 [ 662.944464][T23472] ____sys_sendmsg+0x52d/0x830 [ 662.944494][T23472] ? __pfx_____sys_sendmsg+0x10/0x10 [ 662.944531][T23472] ? import_iovec+0x74/0xa0 [ 662.944562][T23472] ___sys_sendmsg+0x21f/0x2a0 [ 662.944589][T23472] ? __pfx____sys_sendmsg+0x10/0x10 [ 662.944651][T23472] ? __fget_files+0x2a/0x420 [ 662.944671][T23472] ? __fget_files+0x3a0/0x420 [ 662.944703][T23472] __sys_sendmmsg+0x227/0x430 [ 662.944735][T23472] ? __pfx___sys_sendmmsg+0x10/0x10 [ 662.944776][T23472] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 662.944819][T23472] ? ksys_write+0x22a/0x250 [ 662.944852][T23472] ? __pfx_ksys_write+0x10/0x10 [ 662.944887][T23472] __x64_sys_sendmmsg+0xa0/0xc0 [ 662.944913][T23472] do_syscall_64+0xfa/0xfa0 [ 662.944932][T23472] ? lockdep_hardirqs_on+0x9c/0x150 [ 662.944952][T23472] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 662.944974][T23472] ? clear_bhb_loop+0x60/0xb0 [ 662.944999][T23472] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 662.945020][T23472] RIP: 0033:0x7f375358f6c9 [ 662.945041][T23472] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 662.945060][T23472] RSP: 002b:00007f37517f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 662.945083][T23472] RAX: ffffffffffffffda RBX: 00007f37537e5fa0 RCX: 00007f375358f6c9 [ 662.945100][T23472] RDX: 0000000000000001 RSI: 0000200000000b00 RDI: 0000000000000004 [ 662.945113][T23472] RBP: 00007f37517f6090 R08: 0000000000000000 R09: 0000000000000000 [ 662.945126][T23472] R10: 00000000000408c0 R11: 0000000000000246 R12: 0000000000000001 [ 662.945139][T23472] R13: 00007f37537e6038 R14: 00007f37537e5fa0 R15: 00007ffec5c65b88 [ 662.945175][T23472] [ 663.463081][T23480] Cannot find set identified by id 3 to match [ 663.602002][T23488] tipc: Started in network mode [ 663.618209][T23488] tipc: Node identity e0000001, cluster identity 4711 [ 663.646254][T23488] tipc: Enabling of bearer rejected, failed to enable media [ 664.394749][T23509] ip6_vti0 speed is unknown, defaulting to 1000 [ 664.443920][T23513] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5196'. [ 664.519857][T23513] bridge0: entered promiscuous mode [ 664.550667][T23513] bridge0: left promiscuous mode [ 664.710633][T23521] openvswitch: netlink: IP tunnel dst address not specified [ 664.856772][T23525] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5201'. [ 664.882960][T23527] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5202'. [ 665.273183][T23535] ip6_vti0 speed is unknown, defaulting to 1000 [ 665.279074][T23509] wg1 speed is unknown, defaulting to 1000 [ 665.281700][T23538] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5206'. [ 665.309554][T23509] wlan0 speed is unknown, defaulting to 1000 [ 665.525204][T23535] wg1 speed is unknown, defaulting to 1000 [ 665.534602][T23535] wlan0 speed is unknown, defaulting to 1000 [ 665.540776][T23533] ip6_vti0 speed is unknown, defaulting to 1000 [ 665.716856][T23550] Cannot find set identified by id 3 to match [ 665.726117][T23549] FAULT_INJECTION: forcing a failure. [ 665.726117][T23549] name failslab, interval 1, probability 0, space 0, times 0 [ 665.811853][T23549] CPU: 0 UID: 0 PID: 23549 Comm: syz.0.5209 Not tainted syzkaller #0 PREEMPT(full) [ 665.811885][T23549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 665.811899][T23549] Call Trace: [ 665.811908][T23549] [ 665.811917][T23549] dump_stack_lvl+0x189/0x250 [ 665.811952][T23549] ? __pfx____ratelimit+0x10/0x10 [ 665.811984][T23549] ? __pfx_dump_stack_lvl+0x10/0x10 [ 665.812012][T23549] ? __pfx__printk+0x10/0x10 [ 665.812038][T23549] ? __pfx___might_resched+0x10/0x10 [ 665.812060][T23549] ? fs_reclaim_acquire+0x7d/0x100 [ 665.812094][T23549] should_fail_ex+0x414/0x560 [ 665.812133][T23549] should_failslab+0xa8/0x100 [ 665.812157][T23549] kmem_cache_alloc_node_noprof+0x77/0x710 [ 665.812188][T23549] ? __alloc_skb+0x112/0x2d0 [ 665.812216][T23549] __alloc_skb+0x112/0x2d0 [ 665.812241][T23549] alloc_skb_with_frags+0xca/0x890 [ 665.812264][T23549] ? __might_fault+0xb0/0x130 [ 665.812307][T23549] sock_alloc_send_pskb+0x84d/0x980 [ 665.812361][T23549] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 665.812389][T23549] ? __pfx__copy_from_iter+0x10/0x10 [ 665.812415][T23549] ? __lock_acquire+0xab9/0xd20 [ 665.812445][T23549] l2cap_sock_alloc_skb_cb+0xd7/0x460 [ 665.812477][T23549] ? __pfx_l2cap_sock_alloc_skb_cb+0x10/0x10 [ 665.812507][T23549] ? skb_put+0x11b/0x210 [ 665.812532][T23549] l2cap_chan_send+0xa3d/0x2790 [ 665.812579][T23549] ? __pfx_l2cap_chan_send+0x10/0x10 [ 665.812603][T23549] ? __local_bh_enable_ip+0x12d/0x1c0 [ 665.812647][T23549] l2cap_sock_sendmsg+0x32e/0x4a0 [ 665.812673][T23549] ? __pfx_l2cap_sock_sendmsg+0x10/0x10 [ 665.812700][T23549] ? aa_sock_msg_perm+0xf1/0x1d0 [ 665.812735][T23549] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 665.812754][T23549] ? __pfx_l2cap_sock_sendmsg+0x10/0x10 [ 665.812779][T23549] __sock_sendmsg+0x21c/0x270 [ 665.812812][T23549] ____sys_sendmsg+0x52d/0x830 [ 665.812842][T23549] ? __pfx_____sys_sendmsg+0x10/0x10 [ 665.812876][T23549] ? import_iovec+0x74/0xa0 [ 665.812907][T23549] ___sys_sendmsg+0x21f/0x2a0 [ 665.812933][T23549] ? __pfx____sys_sendmsg+0x10/0x10 [ 665.812995][T23549] ? __fget_files+0x2a/0x420 [ 665.813015][T23549] ? __fget_files+0x3a0/0x420 [ 665.813045][T23549] __sys_sendmmsg+0x227/0x430 [ 665.813083][T23549] ? __pfx___sys_sendmmsg+0x10/0x10 [ 665.813117][T23549] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 665.813160][T23549] ? ksys_write+0x22a/0x250 [ 665.813192][T23549] ? __pfx_ksys_write+0x10/0x10 [ 665.813228][T23549] __x64_sys_sendmmsg+0xa0/0xc0 [ 665.813254][T23549] do_syscall_64+0xfa/0xfa0 [ 665.813274][T23549] ? lockdep_hardirqs_on+0x9c/0x150 [ 665.813293][T23549] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 665.813315][T23549] ? clear_bhb_loop+0x60/0xb0 [ 665.813340][T23549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 665.813359][T23549] RIP: 0033:0x7f741ff8f6c9 [ 665.813378][T23549] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 665.813396][T23549] RSP: 002b:00007f7420ef9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 665.813419][T23549] RAX: ffffffffffffffda RBX: 00007f74201e5fa0 RCX: 00007f741ff8f6c9 [ 665.813434][T23549] RDX: 0000000000000001 RSI: 0000200000000b00 RDI: 0000000000000004 [ 665.813447][T23549] RBP: 00007f7420ef9090 R08: 0000000000000000 R09: 0000000000000000 [ 665.813460][T23549] R10: 00000000000408c0 R11: 0000000000000246 R12: 0000000000000001 [ 665.813473][T23549] R13: 00007f74201e6038 R14: 00007f74201e5fa0 R15: 00007ffc39a34d98 [ 665.813508][T23549] [ 666.332189][T23558] bridge2: entered promiscuous mode [ 666.337468][T23558] bridge2: entered allmulticast mode [ 666.506073][T23558] team0: Port device bridge2 added [ 666.571655][T23533] wg1 speed is unknown, defaulting to 1000 [ 666.580517][T23533] wlan0 speed is unknown, defaulting to 1000 [ 666.696657][T23557] 8021q: VLANs not supported on ip6gre0 [ 666.703194][T23564] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5213'. [ 667.343632][T23589] Cannot find set identified by id 3 to match [ 667.351233][T23589] netlink: 'syz.3.5220': attribute type 33 has an invalid length. [ 667.361022][T23589] netlink: 152 bytes leftover after parsing attributes in process `syz.3.5220'. [ 667.424021][T23593] netlink: 'syz.1.5222': attribute type 4 has an invalid length. [ 667.432903][T23593] netlink: 'syz.1.5222': attribute type 1 has an invalid length. [ 667.455718][T23593] netlink: 228 bytes leftover after parsing attributes in process `syz.1.5222'. [ 667.478010][T23583] mac80211_hwsim hwsim58 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 668.082541][T23612] netlink: 'syz.3.5228': attribute type 5 has an invalid length. [ 668.153112][T23612] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5228'. [ 668.512800][T23631] tipc: Enabled bearer , priority 0 [ 668.561960][T23631] syzkaller0: left promiscuous mode [ 668.587721][T23631] syzkaller0: left allmulticast mode [ 668.602447][T23631] tipc: Resetting bearer [ 668.673949][T23631] netlink: 'syz.2.5236': attribute type 12 has an invalid length. [ 668.709091][T23644] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5239'. [ 668.804633][T23648] syzkaller0: entered promiscuous mode [ 668.818985][T23648] syzkaller0: entered allmulticast mode [ 668.850026][T23648] tipc: Resetting bearer [ 668.922475][T23652] Bluetooth: MGMT ver 1.23 [ 668.960217][T23656] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5244'. [ 669.087884][T23662] FAULT_INJECTION: forcing a failure. [ 669.087884][T23662] name failslab, interval 1, probability 0, space 0, times 0 [ 669.169526][T23662] CPU: 0 UID: 0 PID: 23662 Comm: syz.0.5246 Not tainted syzkaller #0 PREEMPT(full) [ 669.169558][T23662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 669.169572][T23662] Call Trace: [ 669.169589][T23662] [ 669.169599][T23662] dump_stack_lvl+0x189/0x250 [ 669.169634][T23662] ? __pfx____ratelimit+0x10/0x10 [ 669.169669][T23662] ? __pfx_dump_stack_lvl+0x10/0x10 [ 669.169698][T23662] ? __pfx__printk+0x10/0x10 [ 669.169725][T23662] ? __pfx___might_resched+0x10/0x10 [ 669.169747][T23662] ? fs_reclaim_acquire+0x7d/0x100 [ 669.169772][T23662] should_fail_ex+0x414/0x560 [ 669.169818][T23662] should_failslab+0xa8/0x100 [ 669.169842][T23662] kmem_cache_alloc_node_noprof+0x77/0x710 [ 669.169872][T23662] ? __alloc_skb+0x112/0x2d0 [ 669.169899][T23662] __alloc_skb+0x112/0x2d0 [ 669.169925][T23662] alloc_skb_with_frags+0xca/0x890 [ 669.169947][T23662] ? __might_fault+0xb0/0x130 [ 669.169990][T23662] sock_alloc_send_pskb+0x84d/0x980 [ 669.170038][T23662] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 669.170066][T23662] ? __pfx__copy_from_iter+0x10/0x10 [ 669.170093][T23662] ? __lock_acquire+0xab9/0xd20 [ 669.170123][T23662] l2cap_sock_alloc_skb_cb+0xd7/0x460 [ 669.170156][T23662] ? __pfx_l2cap_sock_alloc_skb_cb+0x10/0x10 [ 669.170193][T23662] ? skb_put+0x11b/0x210 [ 669.170219][T23662] l2cap_chan_send+0xa3d/0x2790 [ 669.170269][T23662] ? __pfx_l2cap_chan_send+0x10/0x10 [ 669.170295][T23662] ? __local_bh_enable_ip+0x12d/0x1c0 [ 669.170339][T23662] l2cap_sock_sendmsg+0x32e/0x4a0 [ 669.170367][T23662] ? __pfx_l2cap_sock_sendmsg+0x10/0x10 [ 669.170395][T23662] ? aa_sock_msg_perm+0xf1/0x1d0 [ 669.170429][T23662] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 669.170450][T23662] ? __pfx_l2cap_sock_sendmsg+0x10/0x10 [ 669.170476][T23662] __sock_sendmsg+0x21c/0x270 [ 669.170526][T23662] ____sys_sendmsg+0x52d/0x830 [ 669.170557][T23662] ? __pfx_____sys_sendmsg+0x10/0x10 [ 669.170591][T23662] ? import_iovec+0x74/0xa0 [ 669.170622][T23662] ___sys_sendmsg+0x21f/0x2a0 [ 669.170649][T23662] ? __pfx____sys_sendmsg+0x10/0x10 [ 669.170717][T23662] ? __fget_files+0x2a/0x420 [ 669.170737][T23662] ? __fget_files+0x3a0/0x420 [ 669.170769][T23662] __sys_sendmmsg+0x227/0x430 [ 669.170809][T23662] ? __pfx___sys_sendmmsg+0x10/0x10 [ 669.170843][T23662] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 669.170886][T23662] ? ksys_write+0x22a/0x250 [ 669.170918][T23662] ? __pfx_ksys_write+0x10/0x10 [ 669.170954][T23662] __x64_sys_sendmmsg+0xa0/0xc0 [ 669.170981][T23662] do_syscall_64+0xfa/0xfa0 [ 669.171001][T23662] ? lockdep_hardirqs_on+0x9c/0x150 [ 669.171021][T23662] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 669.171042][T23662] ? clear_bhb_loop+0x60/0xb0 [ 669.171068][T23662] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 669.171088][T23662] RIP: 0033:0x7f741ff8f6c9 [ 669.171108][T23662] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 669.171128][T23662] RSP: 002b:00007f7420ef9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 669.171151][T23662] RAX: ffffffffffffffda RBX: 00007f74201e5fa0 RCX: 00007f741ff8f6c9 [ 669.171167][T23662] RDX: 0000000000000001 RSI: 0000200000000b00 RDI: 0000000000000004 [ 669.171181][T23662] RBP: 00007f7420ef9090 R08: 0000000000000000 R09: 0000000000000000 [ 669.171195][T23662] R10: 00000000000408c0 R11: 0000000000000246 R12: 0000000000000002 [ 669.171209][T23662] R13: 00007f74201e6038 R14: 00007f74201e5fa0 R15: 00007ffc39a34d98 [ 669.171244][T23662] [ 669.552711][ T5890] tipc: Node number set to 3758096385 [ 669.606319][T23671] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5251'. [ 669.615624][T23671] tipc: Enabling of bearer rejected, failed to enable media [ 669.822107][T23686] FAULT_INJECTION: forcing a failure. [ 669.822107][T23686] name failslab, interval 1, probability 0, space 0, times 0 [ 669.837003][T23686] CPU: 0 UID: 0 PID: 23686 Comm: syz.1.5258 Not tainted syzkaller #0 PREEMPT(full) [ 669.837035][T23686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 669.837047][T23686] Call Trace: [ 669.837056][T23686] [ 669.837065][T23686] dump_stack_lvl+0x189/0x250 [ 669.837100][T23686] ? __pfx____ratelimit+0x10/0x10 [ 669.837132][T23686] ? __pfx_dump_stack_lvl+0x10/0x10 [ 669.837161][T23686] ? __pfx__printk+0x10/0x10 [ 669.837189][T23686] ? __pfx___might_resched+0x10/0x10 [ 669.837219][T23686] should_fail_ex+0x414/0x560 [ 669.837256][T23686] should_failslab+0xa8/0x100 [ 669.837280][T23686] __kmalloc_cache_noprof+0x6f/0x6f0 [ 669.837310][T23686] ? __asan_memset+0x22/0x50 [ 669.837335][T23686] ? alloc_netdev_mqs+0xbf8/0x11b0 [ 669.837370][T23686] alloc_netdev_mqs+0xbf8/0x11b0 [ 669.837406][T23686] rtnl_create_link+0x31f/0xd10 [ 669.837441][T23686] rtnl_newlink_create+0x25c/0xb00 [ 669.837471][T23686] ? __lock_acquire+0xab9/0xd20 [ 669.837498][T23686] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 669.837526][T23686] ? __pfx___mutex_lock+0x10/0x10 [ 669.837559][T23686] ? ns_capable+0x8a/0xf0 [ 669.837586][T23686] rtnl_newlink+0x16e4/0x1c80 [ 669.837609][T23686] ? ____sys_sendmsg+0x505/0x830 [ 669.837645][T23686] ? __pfx_rtnl_newlink+0x10/0x10 [ 669.837690][T23686] ? kasan_quarantine_put+0xdd/0x220 [ 669.837719][T23686] ? lockdep_hardirqs_on+0x9c/0x150 [ 669.837747][T23686] ? nlmon_xmit+0xb0/0x100 [ 669.837771][T23686] ? kmem_cache_free+0x19b/0x690 [ 669.837810][T23686] ? __local_bh_enable_ip+0x12d/0x1c0 [ 669.837833][T23686] ? lockdep_hardirqs_on+0x9c/0x150 [ 669.837854][T23686] ? __local_bh_enable_ip+0x12d/0x1c0 [ 669.837877][T23686] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 669.837905][T23686] ? __dev_queue_xmit+0x284/0x3740 [ 669.837934][T23686] ? __dev_queue_xmit+0x284/0x3740 [ 669.837960][T23686] ? __dev_queue_xmit+0x1bfb/0x3740 [ 669.838002][T23686] ? __lock_acquire+0xab9/0xd20 [ 669.838050][T23686] ? __pfx_rtnl_newlink+0x10/0x10 [ 669.838069][T23686] rtnetlink_rcv_msg+0x7cf/0xb70 [ 669.838094][T23686] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 669.838114][T23686] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 669.838133][T23686] ? ref_tracker_free+0x63a/0x7d0 [ 669.838154][T23686] ? __asan_memcpy+0x40/0x70 [ 669.838180][T23686] ? __pfx_ref_tracker_free+0x10/0x10 [ 669.838213][T23686] netlink_rcv_skb+0x208/0x470 [ 669.838238][T23686] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 669.838262][T23686] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 669.838298][T23686] ? netlink_deliver_tap+0x2e/0x1b0 [ 669.838331][T23686] netlink_unicast+0x82f/0x9e0 [ 669.838373][T23686] ? __pfx_netlink_unicast+0x10/0x10 [ 669.838409][T23686] ? netlink_sendmsg+0x642/0xb30 [ 669.838430][T23686] ? skb_put+0x11b/0x210 [ 669.838457][T23686] netlink_sendmsg+0x805/0xb30 [ 669.838491][T23686] ? __pfx_netlink_sendmsg+0x10/0x10 [ 669.838519][T23686] ? aa_sock_msg_perm+0xf1/0x1d0 [ 669.838554][T23686] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 669.838575][T23686] ? __pfx_netlink_sendmsg+0x10/0x10 [ 669.838600][T23686] __sock_sendmsg+0x21c/0x270 [ 669.838634][T23686] ____sys_sendmsg+0x505/0x830 [ 669.838665][T23686] ? __pfx_____sys_sendmsg+0x10/0x10 [ 669.838701][T23686] ? import_iovec+0x74/0xa0 [ 669.838733][T23686] ___sys_sendmsg+0x21f/0x2a0 [ 669.838761][T23686] ? __pfx____sys_sendmsg+0x10/0x10 [ 669.838826][T23686] ? __fget_files+0x2a/0x420 [ 669.838846][T23686] ? __fget_files+0x3a0/0x420 [ 669.838875][T23686] __x64_sys_sendmsg+0x19b/0x260 [ 669.838904][T23686] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 669.838940][T23686] ? __pfx_ksys_write+0x10/0x10 [ 669.838984][T23686] ? do_syscall_64+0xbe/0xfa0 [ 669.839010][T23686] do_syscall_64+0xfa/0xfa0 [ 669.839030][T23686] ? lockdep_hardirqs_on+0x9c/0x150 [ 669.839050][T23686] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 669.839072][T23686] ? clear_bhb_loop+0x60/0xb0 [ 669.839099][T23686] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 669.839119][T23686] RIP: 0033:0x7fc464b8f6c9 [ 669.839140][T23686] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 669.839160][T23686] RSP: 002b:00007fc465948038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 669.839182][T23686] RAX: ffffffffffffffda RBX: 00007fc464de5fa0 RCX: 00007fc464b8f6c9 [ 669.839198][T23686] RDX: 0000000020044002 RSI: 0000200000000080 RDI: 0000000000000003 [ 669.839213][T23686] RBP: 00007fc465948090 R08: 0000000000000000 R09: 0000000000000000 [ 669.839226][T23686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 669.839238][T23686] R13: 00007fc464de6038 R14: 00007fc464de5fa0 R15: 00007ffd82ead758 [ 669.839275][T23686] [ 670.292122][ T3520] wlan1: Trigger new scan to find an IBSS to join [ 670.531579][T23703] netlink: 100 bytes leftover after parsing attributes in process `syz.2.5256'. [ 670.541760][T23702] pimreg1: tun_chr_ioctl cmd 1074025677 [ 670.548156][T23702] pimreg1: linktype set to 804 [ 670.836860][T23703] veth3: entered promiscuous mode [ 670.846573][T23713] netlink: 'syz.3.5264': attribute type 6 has an invalid length. [ 670.854866][T23713] netlink: 'syz.3.5264': attribute type 7 has an invalid length. [ 670.872692][T23713] netlink: 'syz.3.5264': attribute type 8 has an invalid length. [ 671.418477][T21853] wg1 speed is unknown, defaulting to 1000 [ 671.454489][ T3520] bond4: (slave bridge2): link status up again after 0 ms [ 671.489474][ T3520] bond4: (slave bridge2): link status up again after 0 ms [ 671.519708][T19385] bond4: (slave bridge2): link status up again after 0 ms [ 671.528193][T19385] bond4: (slave bridge2): failed to get link speed/duplex [ 671.670150][T19385] bond4: (slave bridge2): failed to get link speed/duplex [ 671.783027][ T4574] bond4: (slave bridge2): failed to get link speed/duplex [ 671.905686][ T3520] bond4: (slave bridge2): failed to get link speed/duplex [ 671.967235][T23756] rdma_rxe: rxe_newlink: failed to add lo [ 672.030508][T23758] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5278'. [ 672.040297][T22343] bond4: (slave bridge2): failed to get link speed/duplex [ 672.058030][T23758] team0: entered promiscuous mode [ 672.077607][T23758] team_slave_0: entered promiscuous mode [ 672.101390][T23758] team_slave_1: entered promiscuous mode [ 672.111715][T23758] geneve0: entered promiscuous mode [ 672.129544][T23758] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 672.181002][T23758] team0: left promiscuous mode [ 672.186011][T23758] team_slave_0: left promiscuous mode [ 672.192987][T23758] team_slave_1: left promiscuous mode [ 672.198656][T23758] geneve0: left promiscuous mode [ 672.263746][T23777] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5284'. [ 672.287506][T23775] pim6reg: entered allmulticast mode [ 672.315788][T23777] FAULT_INJECTION: forcing a failure. [ 672.315788][T23777] name failslab, interval 1, probability 0, space 0, times 0 [ 672.330999][T23777] CPU: 0 UID: 0 PID: 23777 Comm: syz.4.5284 Not tainted syzkaller #0 PREEMPT(full) [ 672.331032][T23777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 672.331045][T23777] Call Trace: [ 672.331054][T23777] [ 672.331063][T23777] dump_stack_lvl+0x189/0x250 [ 672.331098][T23777] ? __pfx____ratelimit+0x10/0x10 [ 672.331130][T23777] ? __pfx_dump_stack_lvl+0x10/0x10 [ 672.331158][T23777] ? __pfx__printk+0x10/0x10 [ 672.331187][T23777] ? __pfx___might_resched+0x10/0x10 [ 672.331211][T23777] ? fs_reclaim_acquire+0x7d/0x100 [ 672.331238][T23777] should_fail_ex+0x414/0x560 [ 672.331274][T23777] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 672.331307][T23777] should_failslab+0xa8/0x100 [ 672.331330][T23777] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 672.331359][T23777] kmem_cache_alloc_lru_noprof+0x79/0x6d0 [ 672.331390][T23777] ? alloc_inode+0x6a/0x1b0 [ 672.331421][T23777] ? __pfx_simple_start_creating+0x10/0x10 [ 672.331446][T23777] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 672.331475][T23777] alloc_inode+0x6a/0x1b0 [ 672.331509][T23777] new_inode+0x22/0x170 [ 672.331534][T23777] __debugfs_create_file+0x14d/0x4f0 [ 672.331570][T23777] debugfs_create_file_full+0x3f/0x60 [ 672.331606][T23777] ref_tracker_dir_debugfs+0x14e/0x270 [ 672.331629][T23777] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 672.331683][T23777] ? trace_kmalloc+0x1f/0xd0 [ 672.331709][T23777] ? __kvmalloc_node_noprof+0x5ed/0x910 [ 672.331745][T23777] ? __raw_spin_lock_init+0x45/0x100 [ 672.331785][T23777] alloc_netdev_mqs+0x272/0x11b0 [ 672.331811][T23777] ? __pfx_macvlan_setup+0x10/0x10 [ 672.331850][T23777] rtnl_create_link+0x31f/0xd10 [ 672.331886][T23777] rtnl_newlink_create+0x25c/0xb00 [ 672.331916][T23777] ? __mutex_lock+0x5bb/0x1350 [ 672.331944][T23777] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 672.331972][T23777] ? __pfx___mutex_lock+0x10/0x10 [ 672.332006][T23777] ? ns_capable+0x8a/0xf0 [ 672.332033][T23777] rtnl_newlink+0x16e4/0x1c80 [ 672.332056][T23777] ? ____sys_sendmsg+0x505/0x830 [ 672.332094][T23777] ? __pfx_rtnl_newlink+0x10/0x10 [ 672.332138][T23777] ? kasan_quarantine_put+0xdd/0x220 [ 672.332168][T23777] ? lockdep_hardirqs_on+0x9c/0x150 [ 672.332195][T23777] ? nlmon_xmit+0xb0/0x100 [ 672.332219][T23777] ? kmem_cache_free+0x19b/0x690 [ 672.332260][T23777] ? __local_bh_enable_ip+0x12d/0x1c0 [ 672.332284][T23777] ? lockdep_hardirqs_on+0x9c/0x150 [ 672.332306][T23777] ? __local_bh_enable_ip+0x12d/0x1c0 [ 672.332328][T23777] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 672.332356][T23777] ? __dev_queue_xmit+0x284/0x3740 [ 672.332386][T23777] ? __dev_queue_xmit+0x284/0x3740 [ 672.332413][T23777] ? __dev_queue_xmit+0x1bfb/0x3740 [ 672.332451][T23777] ? __lock_acquire+0xab9/0xd20 [ 672.332502][T23777] ? __pfx_rtnl_newlink+0x10/0x10 [ 672.332523][T23777] rtnetlink_rcv_msg+0x7cf/0xb70 [ 672.332549][T23777] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 672.332569][T23777] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 672.332588][T23777] ? ref_tracker_free+0x63a/0x7d0 [ 672.332610][T23777] ? __asan_memcpy+0x40/0x70 [ 672.332637][T23777] ? __pfx_ref_tracker_free+0x10/0x10 [ 672.332670][T23777] netlink_rcv_skb+0x208/0x470 [ 672.332696][T23777] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 672.332719][T23777] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 672.332756][T23777] ? netlink_deliver_tap+0x2e/0x1b0 [ 672.332798][T23777] netlink_unicast+0x82f/0x9e0 [ 672.332842][T23777] ? __pfx_netlink_unicast+0x10/0x10 [ 672.332877][T23777] ? netlink_sendmsg+0x642/0xb30 [ 672.332897][T23777] ? skb_put+0x11b/0x210 [ 672.332924][T23777] netlink_sendmsg+0x805/0xb30 [ 672.332959][T23777] ? __pfx_netlink_sendmsg+0x10/0x10 [ 672.332986][T23777] ? aa_sock_msg_perm+0xf1/0x1d0 [ 672.333020][T23777] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 672.333040][T23777] ? __pfx_netlink_sendmsg+0x10/0x10 [ 672.333064][T23777] __sock_sendmsg+0x21c/0x270 [ 672.333098][T23777] ____sys_sendmsg+0x505/0x830 [ 672.333129][T23777] ? __pfx_____sys_sendmsg+0x10/0x10 [ 672.333165][T23777] ? import_iovec+0x74/0xa0 [ 672.333196][T23777] ___sys_sendmsg+0x21f/0x2a0 [ 672.333224][T23777] ? __pfx____sys_sendmsg+0x10/0x10 [ 672.333291][T23777] ? __fget_files+0x2a/0x420 [ 672.333310][T23777] ? __fget_files+0x3a0/0x420 [ 672.333343][T23777] __x64_sys_sendmsg+0x19b/0x260 [ 672.333371][T23777] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 672.333407][T23777] ? __pfx_ksys_write+0x10/0x10 [ 672.333442][T23777] ? do_syscall_64+0xbe/0xfa0 [ 672.333468][T23777] do_syscall_64+0xfa/0xfa0 [ 672.333486][T23777] ? lockdep_hardirqs_on+0x9c/0x150 [ 672.333505][T23777] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 672.333527][T23777] ? clear_bhb_loop+0x60/0xb0 [ 672.333553][T23777] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 672.333574][T23777] RIP: 0033:0x7f9c2538f6c9 [ 672.333593][T23777] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 672.333612][T23777] RSP: 002b:00007f9c26267038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 672.333636][T23777] RAX: ffffffffffffffda RBX: 00007f9c255e5fa0 RCX: 00007f9c2538f6c9 [ 672.333652][T23777] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000009 [ 672.333665][T23777] RBP: 00007f9c26267090 R08: 0000000000000000 R09: 0000000000000000 [ 672.333679][T23777] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 672.333692][T23777] R13: 00007f9c255e6038 R14: 00007f9c255e5fa0 R15: 00007ffc736741c8 [ 672.333730][T23777] [ 672.867652][T23777] debugfs: out of free dentries, can not create file 'netdev@ffff88807b334618' [ 672.898767][T19385] bond4: (slave bridge2): failed to get link speed/duplex [ 672.915633][T23778] pim6reg: left allmulticast mode [ 673.020014][ T3520] bond4: (slave bridge2): failed to get link speed/duplex [ 673.031742][T23786] tipc: Enabling of bearer rejected, failed to enable media [ 673.151532][T23791] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5290'. [ 673.314790][T23798] Cannot find set identified by id 3 to match [ 673.423313][T23807] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5297'. [ 673.462528][T23807] FAULT_INJECTION: forcing a failure. [ 673.462528][T23807] name failslab, interval 1, probability 0, space 0, times 0 [ 673.475547][T23807] CPU: 0 UID: 0 PID: 23807 Comm: syz.2.5297 Not tainted syzkaller #0 PREEMPT(full) [ 673.475575][T23807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 673.475589][T23807] Call Trace: [ 673.475597][T23807] [ 673.475607][T23807] dump_stack_lvl+0x189/0x250 [ 673.475639][T23807] ? __pfx____ratelimit+0x10/0x10 [ 673.475680][T23807] ? __pfx_dump_stack_lvl+0x10/0x10 [ 673.475708][T23807] ? __pfx__printk+0x10/0x10 [ 673.475733][T23807] ? __pfx___might_resched+0x10/0x10 [ 673.475755][T23807] ? fs_reclaim_acquire+0x7d/0x100 [ 673.475782][T23807] should_fail_ex+0x414/0x560 [ 673.475819][T23807] should_failslab+0xa8/0x100 [ 673.475842][T23807] kmem_cache_alloc_noprof+0x74/0x6e0 [ 673.475871][T23807] ? security_inode_alloc+0x39/0x330 [ 673.475909][T23807] security_inode_alloc+0x39/0x330 [ 673.475942][T23807] inode_init_always_gfp+0x9ed/0xdc0 [ 673.475980][T23807] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 673.476014][T23807] alloc_inode+0x82/0x1b0 [ 673.476048][T23807] new_inode+0x22/0x170 [ 673.476079][T23807] __debugfs_create_file+0x14d/0x4f0 [ 673.476117][T23807] debugfs_create_file_full+0x3f/0x60 [ 673.476153][T23807] ref_tracker_dir_debugfs+0x14e/0x270 [ 673.476175][T23807] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 673.476228][T23807] ? trace_kmalloc+0x1f/0xd0 [ 673.476253][T23807] ? __kvmalloc_node_noprof+0x5ed/0x910 [ 673.476291][T23807] ? __raw_spin_lock_init+0x45/0x100 [ 673.476323][T23807] alloc_netdev_mqs+0x272/0x11b0 [ 673.476350][T23807] ? __pfx_macvlan_setup+0x10/0x10 [ 673.476388][T23807] rtnl_create_link+0x31f/0xd10 [ 673.476425][T23807] rtnl_newlink_create+0x25c/0xb00 [ 673.476454][T23807] ? __mutex_lock+0x5bb/0x1350 [ 673.476482][T23807] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 673.476510][T23807] ? __pfx___mutex_lock+0x10/0x10 [ 673.476543][T23807] ? ns_capable+0x8a/0xf0 [ 673.476571][T23807] rtnl_newlink+0x16e4/0x1c80 [ 673.476593][T23807] ? ____sys_sendmsg+0x505/0x830 [ 673.476631][T23807] ? __pfx_rtnl_newlink+0x10/0x10 [ 673.476685][T23807] ? kasan_quarantine_put+0xdd/0x220 [ 673.476715][T23807] ? lockdep_hardirqs_on+0x9c/0x150 [ 673.476741][T23807] ? nlmon_xmit+0xb0/0x100 [ 673.476765][T23807] ? kmem_cache_free+0x19b/0x690 [ 673.476805][T23807] ? __local_bh_enable_ip+0x12d/0x1c0 [ 673.476828][T23807] ? lockdep_hardirqs_on+0x9c/0x150 [ 673.476849][T23807] ? __local_bh_enable_ip+0x12d/0x1c0 [ 673.476871][T23807] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 673.476897][T23807] ? __dev_queue_xmit+0x284/0x3740 [ 673.476926][T23807] ? __dev_queue_xmit+0x284/0x3740 [ 673.476952][T23807] ? __dev_queue_xmit+0x1bfb/0x3740 [ 673.476988][T23807] ? __lock_acquire+0xab9/0xd20 [ 673.477036][T23807] ? __pfx_rtnl_newlink+0x10/0x10 [ 673.477056][T23807] rtnetlink_rcv_msg+0x7cf/0xb70 [ 673.477081][T23807] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 673.477100][T23807] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 673.477117][T23807] ? ref_tracker_free+0x63a/0x7d0 [ 673.477137][T23807] ? __asan_memcpy+0x40/0x70 [ 673.477162][T23807] ? __pfx_ref_tracker_free+0x10/0x10 [ 673.477195][T23807] netlink_rcv_skb+0x208/0x470 [ 673.477219][T23807] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 673.477241][T23807] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 673.477275][T23807] ? netlink_deliver_tap+0x2e/0x1b0 [ 673.477306][T23807] netlink_unicast+0x82f/0x9e0 [ 673.477348][T23807] ? __pfx_netlink_unicast+0x10/0x10 [ 673.477382][T23807] ? netlink_sendmsg+0x642/0xb30 [ 673.477403][T23807] ? skb_put+0x11b/0x210 [ 673.477429][T23807] netlink_sendmsg+0x805/0xb30 [ 673.477464][T23807] ? __pfx_netlink_sendmsg+0x10/0x10 [ 673.477491][T23807] ? aa_sock_msg_perm+0xf1/0x1d0 [ 673.477525][T23807] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 673.477546][T23807] ? __pfx_netlink_sendmsg+0x10/0x10 [ 673.477570][T23807] __sock_sendmsg+0x21c/0x270 [ 673.477604][T23807] ____sys_sendmsg+0x505/0x830 [ 673.477635][T23807] ? __pfx_____sys_sendmsg+0x10/0x10 [ 673.477678][T23807] ? import_iovec+0x74/0xa0 [ 673.477709][T23807] ___sys_sendmsg+0x21f/0x2a0 [ 673.477737][T23807] ? __pfx____sys_sendmsg+0x10/0x10 [ 673.477803][T23807] ? __fget_files+0x2a/0x420 [ 673.477823][T23807] ? __fget_files+0x3a0/0x420 [ 673.477855][T23807] __x64_sys_sendmsg+0x19b/0x260 [ 673.477901][T23807] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 673.477937][T23807] ? __pfx_ksys_write+0x10/0x10 [ 673.477972][T23807] ? do_syscall_64+0xbe/0xfa0 [ 673.477997][T23807] do_syscall_64+0xfa/0xfa0 [ 673.478016][T23807] ? lockdep_hardirqs_on+0x9c/0x150 [ 673.478036][T23807] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 673.478058][T23807] ? clear_bhb_loop+0x60/0xb0 [ 673.478083][T23807] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 673.478104][T23807] RIP: 0033:0x7f375358f6c9 [ 673.478124][T23807] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 673.478143][T23807] RSP: 002b:00007f37517f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 673.478166][T23807] RAX: ffffffffffffffda RBX: 00007f37537e5fa0 RCX: 00007f375358f6c9 [ 673.478181][T23807] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000009 [ 673.478194][T23807] RBP: 00007f37517f6090 R08: 0000000000000000 R09: 0000000000000000 [ 673.478207][T23807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 673.478219][T23807] R13: 00007f37537e6038 R14: 00007f37537e5fa0 R15: 00007ffec5c65b88 [ 673.478255][T23807] [ 673.478363][T23807] debugfs: out of free dentries, can not create file 'netdev@ffff88807bd5c618' [ 674.025246][T23807] syz_tun: entered promiscuous mode [ 674.038705][T23807] syz_tun: left promiscuous mode [ 674.100624][T22343] wlan1: Trigger new scan to find an IBSS to join [ 674.175009][T23814] netlink: 96 bytes leftover after parsing attributes in process `syz.3.5298'. [ 674.363628][T23826] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5304'. [ 674.393145][T23831] netlink: 'syz.2.5306': attribute type 4 has an invalid length. [ 674.441333][T23831] netlink: 'syz.2.5306': attribute type 1 has an invalid length. [ 674.452841][T23831] netlink: 228 bytes leftover after parsing attributes in process `syz.2.5306'. [ 674.476480][T23835] netlink: 340 bytes leftover after parsing attributes in process `syz.0.5308'. [ 674.486312][T23835] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5308'. [ 674.533587][T23842] Cannot find set identified by id 3 to match [ 674.550206][T23835] bridge0: port 1(macsec2) entered blocking state [ 674.567109][T23835] bridge0: port 1(macsec2) entered disabled state [ 674.585037][T23835] macsec2: entered allmulticast mode [ 674.601097][T23835] bridge0: entered allmulticast mode [ 674.653703][T23835] macsec2: left allmulticast mode [ 674.661412][T23835] bridge0: left allmulticast mode [ 675.050738][T23867] sit0: entered promiscuous mode [ 675.060463][T22343] wlan1: Creating new IBSS network, BSSID fe:d4:39:58:0c:34 [ 675.267568][T23872] syzkaller0: entered promiscuous mode [ 675.279662][T23872] syzkaller0: entered allmulticast mode [ 675.594436][T23889] __nla_validate_parse: 4 callbacks suppressed [ 675.594460][T23889] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5328'. [ 675.702122][T23896] netlink: 68 bytes leftover after parsing attributes in process `syz.4.5330'. [ 675.726919][T23896] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5330'. [ 675.746111][T23896] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5330'. [ 675.809894][T23902] tipc: Resetting bearer [ 675.824612][T23896] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5330'. [ 675.839698][T23900] tipc: Resetting bearer [ 676.124815][T23912] syzkaller0: entered promiscuous mode [ 676.140490][T23912] syzkaller0: entered allmulticast mode [ 676.363729][T23927] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5343'. [ 676.403580][T19385] tipc: Resetting bearer [ 676.795434][T19385] net_ratelimit: 20 callbacks suppressed [ 676.795458][T19385] bond4: (slave bridge2): failed to get link speed/duplex [ 676.940739][ T50] bond4: (slave bridge2): failed to get link speed/duplex [ 677.057361][ T1162] bond4: (slave bridge2): failed to get link speed/duplex [ 677.181913][ T3520] bond4: (slave bridge2): failed to get link speed/duplex [ 677.196772][T23972] Cannot find set identified by id 3 to match [ 677.280717][T23975] syzkaller0: entered promiscuous mode [ 677.287981][T23975] syzkaller0: entered allmulticast mode [ 677.309768][ T4574] bond4: (slave bridge2): failed to get link speed/duplex [ 677.450779][ T1162] bond4: (slave bridge2): failed to get link speed/duplex [ 677.620219][T23993] FAULT_INJECTION: forcing a failure. [ 677.620219][T23993] name failslab, interval 1, probability 0, space 0, times 0 [ 677.633779][T23993] CPU: 0 UID: 0 PID: 23993 Comm: syz.4.5363 Not tainted syzkaller #0 PREEMPT(full) [ 677.633808][T23993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 677.633822][T23993] Call Trace: [ 677.633830][T23993] [ 677.633838][T23993] dump_stack_lvl+0x189/0x250 [ 677.633872][T23993] ? __pfx____ratelimit+0x10/0x10 [ 677.633905][T23993] ? __pfx_dump_stack_lvl+0x10/0x10 [ 677.633935][T23993] ? __pfx__printk+0x10/0x10 [ 677.633961][T23993] ? __pfx___might_resched+0x10/0x10 [ 677.633985][T23993] ? fs_reclaim_acquire+0x7d/0x100 [ 677.634009][T23993] should_fail_ex+0x414/0x560 [ 677.634045][T23993] should_failslab+0xa8/0x100 [ 677.634068][T23993] __kvmalloc_node_noprof+0x158/0x910 [ 677.634107][T23993] ? rhashtable_init_noprof+0x4f3/0xbc0 [ 677.634131][T23993] ? rhashtable_init_noprof+0x145/0xbc0 [ 677.634161][T23993] rhashtable_init_noprof+0x4f3/0xbc0 [ 677.634192][T23993] br_mdb_hash_init+0x26/0x90 [ 677.634224][T23993] br_dev_init+0x47/0x490 [ 677.634251][T23993] register_netdevice+0x6bf/0x1ae0 [ 677.634289][T23993] ? rcu_is_watching+0x15/0xb0 [ 677.634312][T23993] ? trace_kmalloc+0x1f/0xd0 [ 677.634335][T23993] ? __kvmalloc_node_noprof+0x5ed/0x910 [ 677.634365][T23993] ? __pfx_register_netdevice+0x10/0x10 [ 677.634397][T23993] ? validate_linkmsg+0x765/0x950 [ 677.634431][T23993] br_dev_newlink+0x6a/0x140 [ 677.634452][T23993] ? rtnl_newlink_create+0x2fd/0xb00 [ 677.634471][T23993] ? __pfx_br_dev_newlink+0x10/0x10 [ 677.634499][T23993] rtnl_newlink_create+0x310/0xb00 [ 677.634524][T23993] ? __mutex_lock+0x5bb/0x1350 [ 677.634549][T23993] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 677.634573][T23993] ? __pfx___mutex_lock+0x10/0x10 [ 677.634602][T23993] ? ns_capable+0x8a/0xf0 [ 677.634626][T23993] rtnl_newlink+0x16e4/0x1c80 [ 677.634645][T23993] ? ____sys_sendmsg+0x505/0x830 [ 677.634678][T23993] ? __pfx_rtnl_newlink+0x10/0x10 [ 677.634717][T23993] ? kasan_quarantine_put+0xdd/0x220 [ 677.634743][T23993] ? lockdep_hardirqs_on+0x9c/0x150 [ 677.634767][T23993] ? nlmon_xmit+0xb0/0x100 [ 677.634789][T23993] ? kmem_cache_free+0x19b/0x690 [ 677.634824][T23993] ? __local_bh_enable_ip+0x12d/0x1c0 [ 677.634845][T23993] ? lockdep_hardirqs_on+0x9c/0x150 [ 677.634864][T23993] ? __local_bh_enable_ip+0x12d/0x1c0 [ 677.634883][T23993] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 677.634907][T23993] ? __dev_queue_xmit+0x284/0x3740 [ 677.634933][T23993] ? __dev_queue_xmit+0x284/0x3740 [ 677.634956][T23993] ? __dev_queue_xmit+0x1bfb/0x3740 [ 677.634988][T23993] ? __lock_acquire+0xab9/0xd20 [ 677.635031][T23993] ? __pfx_rtnl_newlink+0x10/0x10 [ 677.635047][T23993] rtnetlink_rcv_msg+0x7cf/0xb70 [ 677.635070][T23993] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 677.635087][T23993] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 677.635103][T23993] ? ref_tracker_free+0x63a/0x7d0 [ 677.635122][T23993] ? __asan_memcpy+0x40/0x70 [ 677.635146][T23993] ? __pfx_ref_tracker_free+0x10/0x10 [ 677.635174][T23993] netlink_rcv_skb+0x208/0x470 [ 677.635195][T23993] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 677.635214][T23993] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 677.635244][T23993] ? netlink_deliver_tap+0x2e/0x1b0 [ 677.635278][T23993] netlink_unicast+0x82f/0x9e0 [ 677.635315][T23993] ? __pfx_netlink_unicast+0x10/0x10 [ 677.635345][T23993] ? netlink_sendmsg+0x642/0xb30 [ 677.635363][T23993] ? skb_put+0x11b/0x210 [ 677.635386][T23993] netlink_sendmsg+0x805/0xb30 [ 677.635414][T23993] ? __pfx_netlink_sendmsg+0x10/0x10 [ 677.635438][T23993] ? aa_sock_msg_perm+0xf1/0x1d0 [ 677.635468][T23993] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 677.635486][T23993] ? __pfx_netlink_sendmsg+0x10/0x10 [ 677.635506][T23993] __sock_sendmsg+0x21c/0x270 [ 677.635536][T23993] ____sys_sendmsg+0x505/0x830 [ 677.635562][T23993] ? __pfx_____sys_sendmsg+0x10/0x10 [ 677.635592][T23993] ? import_iovec+0x74/0xa0 [ 677.635619][T23993] ___sys_sendmsg+0x21f/0x2a0 [ 677.635643][T23993] ? __pfx____sys_sendmsg+0x10/0x10 [ 677.635700][T23993] ? __fget_files+0x2a/0x420 [ 677.635716][T23993] ? __fget_files+0x3a0/0x420 [ 677.635744][T23993] __x64_sys_sendmsg+0x19b/0x260 [ 677.635768][T23993] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 677.635799][T23993] ? __pfx_ksys_write+0x10/0x10 [ 677.635829][T23993] ? do_syscall_64+0xbe/0xfa0 [ 677.635851][T23993] do_syscall_64+0xfa/0xfa0 [ 677.635867][T23993] ? lockdep_hardirqs_on+0x9c/0x150 [ 677.635884][T23993] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 677.635902][T23993] ? clear_bhb_loop+0x60/0xb0 [ 677.635924][T23993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 677.635942][T23993] RIP: 0033:0x7f9c2538f6c9 [ 677.635958][T23993] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 677.635974][T23993] RSP: 002b:00007f9c26267038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 677.635994][T23993] RAX: ffffffffffffffda RBX: 00007f9c255e5fa0 RCX: 00007f9c2538f6c9 [ 677.636008][T23993] RDX: 0000000020044002 RSI: 0000200000000080 RDI: 0000000000000003 [ 677.636021][T23993] RBP: 00007f9c26267090 R08: 0000000000000000 R09: 0000000000000000 [ 677.636033][T23993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 677.636044][T23993] R13: 00007f9c255e6038 R14: 00007f9c255e5fa0 R15: 00007ffc736741c8 [ 677.636079][T23993] [ 678.192215][ T50] bond4: (slave bridge2): failed to get link speed/duplex [ 678.221988][T23997] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5364'. [ 678.338538][T24005] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5367'. [ 678.440828][ T50] bond4: (slave bridge2): failed to get link speed/duplex [ 678.591078][ T50] bond4: (slave bridge2): failed to get link speed/duplex [ 678.627370][T24022] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5373'. [ 678.719713][ T1162] bond4: (slave bridge2): failed to get link speed/duplex [ 678.732918][T24028] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5374'. [ 678.803425][T24028] ip6gretap0: entered promiscuous mode [ 678.832041][T24028] ip6gretap0: left promiscuous mode [ 678.886889][T24034] x_tables: duplicate underflow at hook 2 [ 679.787449][ T5149] Bluetooth: hci0: link tx timeout [ 679.795065][ T5149] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 680.369638][T24108] FAULT_INJECTION: forcing a failure. [ 680.369638][T24108] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 680.410291][T24108] CPU: 1 UID: 0 PID: 24108 Comm: syz.1.5405 Not tainted syzkaller #0 PREEMPT(full) [ 680.410323][T24108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 680.410337][T24108] Call Trace: [ 680.410347][T24108] [ 680.410356][T24108] dump_stack_lvl+0x189/0x250 [ 680.410391][T24108] ? __pfx____ratelimit+0x10/0x10 [ 680.410424][T24108] ? __pfx_dump_stack_lvl+0x10/0x10 [ 680.410453][T24108] ? __pfx__printk+0x10/0x10 [ 680.410489][T24108] should_fail_ex+0x414/0x560 [ 680.410528][T24108] _copy_to_user+0x31/0xb0 [ 680.410559][T24108] simple_read_from_buffer+0xe1/0x170 [ 680.410597][T24108] proc_fail_nth_read+0x1b3/0x220 [ 680.410628][T24108] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 680.410658][T24108] ? rw_verify_area+0x2a6/0x4d0 [ 680.410686][T24108] ? __lock_acquire+0xab9/0xd20 [ 680.410706][T24108] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 680.410735][T24108] vfs_read+0x200/0xa30 [ 680.410763][T24108] ? fdget_pos+0x247/0x320 [ 680.410789][T24108] ? __pfx___mutex_lock+0x10/0x10 [ 680.410812][T24108] ? __pfx_vfs_read+0x10/0x10 [ 680.410843][T24108] ? __fget_files+0x2a/0x420 [ 680.410876][T24108] ? __fget_files+0x3a0/0x420 [ 680.410895][T24108] ? __fget_files+0x2a/0x420 [ 680.410926][T24108] ksys_read+0x145/0x250 [ 680.410958][T24108] ? __pfx_ksys_read+0x10/0x10 [ 680.410991][T24108] ? do_syscall_64+0xbe/0xfa0 [ 680.411017][T24108] do_syscall_64+0xfa/0xfa0 [ 680.411035][T24108] ? lockdep_hardirqs_on+0x9c/0x150 [ 680.411056][T24108] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 680.411077][T24108] ? clear_bhb_loop+0x60/0xb0 [ 680.411103][T24108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 680.411124][T24108] RIP: 0033:0x7fc464b8e0dc [ 680.411143][T24108] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 680.411162][T24108] RSP: 002b:00007fc465948030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 680.411185][T24108] RAX: ffffffffffffffda RBX: 00007fc464de5fa0 RCX: 00007fc464b8e0dc [ 680.411201][T24108] RDX: 000000000000000f RSI: 00007fc4659480a0 RDI: 0000000000000003 [ 680.411214][T24108] RBP: 00007fc465948090 R08: 0000000000000000 R09: 0000000000000000 [ 680.411228][T24108] R10: 00000000000408c0 R11: 0000000000000246 R12: 0000000000000001 [ 680.411241][T24108] R13: 00007fc464de6038 R14: 00007fc464de5fa0 R15: 00007ffd82ead758 [ 680.411278][T24108] [ 680.720653][T24116] __nla_validate_parse: 5 callbacks suppressed [ 680.720673][T24116] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5406'. [ 680.921941][T24125] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5409'. [ 681.258926][T24143] Cannot find set identified by id 3 to match [ 681.307535][T24145] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 681.473733][T24156] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5424'. [ 681.563201][T24156] FAULT_INJECTION: forcing a failure. [ 681.563201][T24156] name failslab, interval 1, probability 0, space 0, times 0 [ 681.596917][T24156] CPU: 0 UID: 0 PID: 24156 Comm: syz.2.5424 Not tainted syzkaller #0 PREEMPT(full) [ 681.596949][T24156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 681.596976][T24156] Call Trace: [ 681.596986][T24156] [ 681.596996][T24156] dump_stack_lvl+0x189/0x250 [ 681.597033][T24156] ? __pfx____ratelimit+0x10/0x10 [ 681.597067][T24156] ? __pfx_dump_stack_lvl+0x10/0x10 [ 681.597097][T24156] ? __pfx__printk+0x10/0x10 [ 681.597127][T24156] ? __pfx___might_resched+0x10/0x10 [ 681.597151][T24156] ? fs_reclaim_acquire+0x7d/0x100 [ 681.597177][T24156] should_fail_ex+0x414/0x560 [ 681.597217][T24156] should_failslab+0xa8/0x100 [ 681.597241][T24156] kmem_cache_alloc_node_noprof+0x77/0x710 [ 681.597273][T24156] ? __alloc_skb+0x112/0x2d0 [ 681.597294][T24156] ? netlink_autobind+0xdb/0x300 [ 681.597325][T24156] __alloc_skb+0x112/0x2d0 [ 681.597351][T24156] netlink_sendmsg+0x5c6/0xb30 [ 681.597386][T24156] ? __pfx_netlink_sendmsg+0x10/0x10 [ 681.597414][T24156] ? aa_sock_msg_perm+0xf1/0x1d0 [ 681.597449][T24156] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 681.597471][T24156] ? __pfx_netlink_sendmsg+0x10/0x10 [ 681.597497][T24156] __sock_sendmsg+0x21c/0x270 [ 681.597531][T24156] ____sys_sendmsg+0x505/0x830 [ 681.597563][T24156] ? __pfx_____sys_sendmsg+0x10/0x10 [ 681.597599][T24156] ? import_iovec+0x74/0xa0 [ 681.597632][T24156] ___sys_sendmsg+0x21f/0x2a0 [ 681.597660][T24156] ? __pfx____sys_sendmsg+0x10/0x10 [ 681.597770][T24156] ? __fget_files+0x2a/0x420 [ 681.597791][T24156] ? __fget_files+0x3a0/0x420 [ 681.597824][T24156] __x64_sys_sendmsg+0x19b/0x260 [ 681.597853][T24156] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 681.597890][T24156] ? __pfx_ksys_write+0x10/0x10 [ 681.597925][T24156] ? do_syscall_64+0xbe/0xfa0 [ 681.597950][T24156] do_syscall_64+0xfa/0xfa0 [ 681.597970][T24156] ? lockdep_hardirqs_on+0x9c/0x150 [ 681.597992][T24156] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 681.598014][T24156] ? clear_bhb_loop+0x60/0xb0 [ 681.598040][T24156] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 681.598061][T24156] RIP: 0033:0x7f375358f6c9 [ 681.598081][T24156] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 681.598100][T24156] RSP: 002b:00007f37517f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 681.598123][T24156] RAX: ffffffffffffffda RBX: 00007f37537e5fa0 RCX: 00007f375358f6c9 [ 681.598140][T24156] RDX: 0000000000004010 RSI: 0000200000000280 RDI: 0000000000000005 [ 681.598154][T24156] RBP: 00007f37517f6090 R08: 0000000000000000 R09: 0000000000000000 [ 681.598168][T24156] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 681.598181][T24156] R13: 00007f37537e6038 R14: 00007f37537e5fa0 R15: 00007ffec5c65b88 [ 681.598218][T24156] [ 681.871292][ T4574] net_ratelimit: 22 callbacks suppressed [ 681.871315][ T4574] bond4: (slave bridge2): failed to get link speed/duplex [ 681.889646][ T52] Bluetooth: hci0: command 0x0406 tx timeout [ 681.919565][T24163] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5427'. [ 681.990857][T24168] pimreg: left allmulticast mode [ 682.045476][T24169] syzkaller0: entered promiscuous mode [ 682.057093][T24169] syzkaller0: entered allmulticast mode [ 682.071489][ T4574] bond4: (slave bridge2): failed to get link speed/duplex [ 682.259520][ T50] bond4: (slave bridge2): failed to get link speed/duplex [ 682.430735][ T4574] bond4: (slave bridge2): failed to get link speed/duplex [ 682.541962][ T4574] bond4: (slave bridge2): failed to get link speed/duplex [ 682.640118][T24191] Cannot find set identified by id 3 to match [ 682.660770][ T50] bond4: (slave bridge2): failed to get link speed/duplex [ 682.789896][ T50] bond4: (slave bridge2): failed to get link speed/duplex [ 682.837146][T24201] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5440'. [ 682.870967][T24200] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5439'. [ 682.909569][ T50] bond4: (slave bridge2): failed to get link speed/duplex [ 683.030565][ T4574] bond4: (slave bridge2): failed to get link speed/duplex [ 683.117854][T24211] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5445'. [ 683.175435][ T4574] bond4: (slave bridge2): failed to get link speed/duplex [ 683.494255][T24221] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5446'. [ 683.504573][T24220] ip6_vti0 speed is unknown, defaulting to 1000 [ 683.622570][T24223] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5447'. [ 683.757916][T24228] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5449'. [ 683.812143][T24220] wg1 speed is unknown, defaulting to 1000 [ 683.820295][T24220] wlan0 speed is unknown, defaulting to 1000 [ 685.093973][T24290] tipc: Resetting bearer [ 685.269274][T24289] tipc: Resetting bearer [ 685.440090][T24297] ip6_vti0 speed is unknown, defaulting to 1000 [ 685.958166][T24316] __nla_validate_parse: 5 callbacks suppressed [ 685.958187][T24316] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5477'. [ 686.027114][T24319] netlink: 'syz.3.5477': attribute type 4 has an invalid length. [ 686.054284][T24319] netlink: 'syz.3.5477': attribute type 1 has an invalid length. [ 686.064681][ T36] tipc: Resetting bearer [ 686.072929][T24319] netlink: 228 bytes leftover after parsing attributes in process `syz.3.5477'. [ 686.189453][T24297] wg1 speed is unknown, defaulting to 1000 [ 686.197560][T24297] wlan0 speed is unknown, defaulting to 1000 [ 686.204969][T24318] ip6_vti0 speed is unknown, defaulting to 1000 [ 686.577686][T24337] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5485'. [ 686.609897][T24318] wg1 speed is unknown, defaulting to 1000 [ 686.675906][T24318] wlan0 speed is unknown, defaulting to 1000 [ 686.755350][T24342] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5486'. [ 686.773071][T24345] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5489'. [ 686.901137][ T36] net_ratelimit: 20 callbacks suppressed [ 686.901160][ T36] bond4: (slave bridge2): failed to get link speed/duplex [ 687.059493][ T50] bond4: (slave bridge2): failed to get link speed/duplex [ 687.176997][ T4574] bond4: (slave bridge2): failed to get link speed/duplex [ 687.457043][T24376] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5496'. [ 687.512613][T24363] bond0: option mode: unable to set because the bond device is up [ 687.522038][T24371] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 687.677218][ T3520] bond4: (slave bridge2): failed to get link speed/duplex [ 687.792674][T24382] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5500'. [ 687.810550][ T3520] bond4: (slave bridge2): failed to get link speed/duplex [ 687.840892][T24386] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.5503'. [ 687.919919][ T1162] bond4: (slave bridge2): failed to get link speed/duplex [ 688.030998][ T3520] bond4: (slave bridge2): failed to get link speed/duplex [ 688.106104][T24398] netlink: 76 bytes leftover after parsing attributes in process `syz.0.5506'. [ 688.117896][T24398] netlink: 76 bytes leftover after parsing attributes in process `syz.0.5506'. [ 688.162497][ T36] bond4: (slave bridge2): failed to get link speed/duplex [ 688.182602][T24398] netlink: 'syz.0.5506': attribute type 2 has an invalid length. [ 688.209879][T24398] netlink: 'syz.0.5506': attribute type 1 has an invalid length. [ 688.290130][ T50] bond4: (slave bridge2): failed to get link speed/duplex [ 688.356856][T24415] Cannot find set identified by id 3 to match [ 688.530762][T24430] FAULT_INJECTION: forcing a failure. [ 688.530762][T24430] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 688.545021][T24430] CPU: 0 UID: 0 PID: 24430 Comm: syz.2.5513 Not tainted syzkaller #0 PREEMPT(full) [ 688.545052][T24430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 688.545065][T24430] Call Trace: [ 688.545074][T24430] [ 688.545084][T24430] dump_stack_lvl+0x189/0x250 [ 688.545119][T24430] ? __pfx____ratelimit+0x10/0x10 [ 688.545153][T24430] ? __pfx_dump_stack_lvl+0x10/0x10 [ 688.545183][T24430] ? __pfx__printk+0x10/0x10 [ 688.545207][T24430] ? fs_reclaim_acquire+0x7d/0x100 [ 688.545239][T24430] should_fail_ex+0x414/0x560 [ 688.545275][T24430] prepare_alloc_pages+0x213/0x610 [ 688.545305][T24430] __alloc_frozen_pages_noprof+0x123/0x370 [ 688.545333][T24430] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 688.545374][T24430] ? policy_nodemask+0x27c/0x720 [ 688.545400][T24430] alloc_pages_mpol+0x232/0x4a0 [ 688.545425][T24430] vma_alloc_folio_noprof+0xe4/0x200 [ 688.545449][T24430] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 688.545486][T24430] folio_prealloc+0x30/0x180 [ 688.545520][T24430] do_wp_page+0x1231/0x5800 [ 688.545575][T24430] ? __pfx_do_wp_page+0x10/0x10 [ 688.545599][T24430] ? do_raw_spin_lock+0x121/0x290 [ 688.545634][T24430] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 688.545675][T24430] __handle_mm_fault+0x1033/0x5400 [ 688.545724][T24430] ? __pfx___handle_mm_fault+0x10/0x10 [ 688.545770][T24430] ? follow_page_pte+0xd03/0x13e0 [ 688.545810][T24430] handle_mm_fault+0x40a/0x8e0 [ 688.545852][T24430] __get_user_pages+0x165c/0x2a00 [ 688.545920][T24430] __gup_longterm_locked+0xde4/0x1660 [ 688.545964][T24430] ? sanity_check_pinned_pages+0x123a/0x1300 [ 688.546002][T24430] gup_fast_fallback+0x1d65/0x22d0 [ 688.546028][T24430] ? is_bpf_text_address+0x26/0x2b0 [ 688.546098][T24430] ? __pfx_gup_fast_fallback+0x10/0x10 [ 688.546125][T24430] ? stack_trace_save+0x9c/0xe0 [ 688.546157][T24430] ? stack_depot_save_flags+0x40/0x860 [ 688.546197][T24430] ? pin_user_pages_fast+0x4d/0xb0 [ 688.546228][T24430] iov_iter_extract_pages+0x35f/0x5e0 [ 688.546264][T24430] extract_iter_to_sg+0xe46/0x24e0 [ 688.546303][T24430] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 688.546347][T24430] ? __asan_memset+0x22/0x50 [ 688.546386][T24430] af_alg_get_rsgl+0x436/0x810 [ 688.546434][T24430] skcipher_recvmsg+0x3d1/0x11d0 [ 688.546469][T24430] ? aa_sk_perm+0x81e/0x950 [ 688.546512][T24430] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 688.546545][T24430] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 688.546566][T24430] ? security_socket_recvmsg+0x7e/0x2e0 [ 688.546584][T24430] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 688.546609][T24430] sock_recvmsg+0x22c/0x270 [ 688.546638][T24430] ____sys_recvmsg+0x1c9/0x460 [ 688.546666][T24430] ? __pfx_____sys_recvmsg+0x10/0x10 [ 688.546701][T24430] ? import_iovec+0x74/0xa0 [ 688.546726][T24430] ___sys_recvmsg+0x1b5/0x510 [ 688.546751][T24430] ? __pfx____sys_recvmsg+0x10/0x10 [ 688.546794][T24430] ? __fget_files+0x3a0/0x420 [ 688.546820][T24430] __x64_sys_recvmsg+0x198/0x260 [ 688.546843][T24430] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 688.546872][T24430] ? __pfx_ksys_write+0x10/0x10 [ 688.546900][T24430] ? do_syscall_64+0xbe/0xfa0 [ 688.546921][T24430] do_syscall_64+0xfa/0xfa0 [ 688.546936][T24430] ? lockdep_hardirqs_on+0x9c/0x150 [ 688.546952][T24430] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 688.546969][T24430] ? clear_bhb_loop+0x60/0xb0 [ 688.546990][T24430] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 688.547007][T24430] RIP: 0033:0x7f375358f6c9 [ 688.547023][T24430] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 688.547038][T24430] RSP: 002b:00007f37517f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 688.547057][T24430] RAX: ffffffffffffffda RBX: 00007f37537e5fa0 RCX: 00007f375358f6c9 [ 688.547070][T24430] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000004 [ 688.547081][T24430] RBP: 00007f37517f6090 R08: 0000000000000000 R09: 0000000000000000 [ 688.547093][T24430] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 688.547103][T24430] R13: 00007f37537e6038 R14: 00007f37537e5fa0 R15: 00007ffec5c65b88 [ 688.547133][T24430] [ 689.119283][T24440] FAULT_INJECTION: forcing a failure. [ 689.119283][T24440] name failslab, interval 1, probability 0, space 0, times 0 [ 689.133688][T24440] CPU: 0 UID: 0 PID: 24440 Comm: syz.2.5518 Not tainted syzkaller #0 PREEMPT(full) [ 689.133719][T24440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 689.133732][T24440] Call Trace: [ 689.133741][T24440] [ 689.133751][T24440] dump_stack_lvl+0x189/0x250 [ 689.133786][T24440] ? __pfx____ratelimit+0x10/0x10 [ 689.133818][T24440] ? __pfx_dump_stack_lvl+0x10/0x10 [ 689.133846][T24440] ? __pfx__printk+0x10/0x10 [ 689.133875][T24440] ? __pfx___might_resched+0x10/0x10 [ 689.133904][T24440] should_fail_ex+0x414/0x560 [ 689.133942][T24440] should_failslab+0xa8/0x100 [ 689.133966][T24440] __kmalloc_cache_noprof+0x6f/0x6f0 [ 689.133998][T24440] ? device_add+0xbe/0xb50 [ 689.134029][T24440] device_add+0xbe/0xb50 [ 689.134053][T24440] ? device_initialize+0x24b/0x440 [ 689.134095][T24440] netdev_register_kobject+0x178/0x310 [ 689.134130][T24440] register_netdevice+0x126c/0x1ae0 [ 689.134169][T24440] ? __pfx_register_netdevice+0x10/0x10 [ 689.134208][T24440] br_dev_newlink+0x6a/0x140 [ 689.134228][T24440] ? rtnl_newlink_create+0x2fd/0xb00 [ 689.134246][T24440] ? __pfx_br_dev_newlink+0x10/0x10 [ 689.134269][T24440] rtnl_newlink_create+0x310/0xb00 [ 689.134293][T24440] ? __lock_acquire+0xab9/0xd20 [ 689.134316][T24440] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 689.134342][T24440] ? __pfx___mutex_lock+0x10/0x10 [ 689.134370][T24440] ? ns_capable+0x8a/0xf0 [ 689.134393][T24440] rtnl_newlink+0x16e4/0x1c80 [ 689.134412][T24440] ? ____sys_sendmsg+0x505/0x830 [ 689.134443][T24440] ? __pfx_rtnl_newlink+0x10/0x10 [ 689.134480][T24440] ? kasan_quarantine_put+0xdd/0x220 [ 689.134505][T24440] ? lockdep_hardirqs_on+0x9c/0x150 [ 689.134528][T24440] ? nlmon_xmit+0xb0/0x100 [ 689.134547][T24440] ? kmem_cache_free+0x19b/0x690 [ 689.134582][T24440] ? __local_bh_enable_ip+0x12d/0x1c0 [ 689.134601][T24440] ? lockdep_hardirqs_on+0x9c/0x150 [ 689.134619][T24440] ? __local_bh_enable_ip+0x12d/0x1c0 [ 689.134637][T24440] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 689.134660][T24440] ? __dev_queue_xmit+0x284/0x3740 [ 689.134685][T24440] ? __dev_queue_xmit+0x284/0x3740 [ 689.134705][T24440] ? __dev_queue_xmit+0x1bfb/0x3740 [ 689.134735][T24440] ? __lock_acquire+0xab9/0xd20 [ 689.134776][T24440] ? __pfx_rtnl_newlink+0x10/0x10 [ 689.134793][T24440] rtnetlink_rcv_msg+0x7cf/0xb70 [ 689.134813][T24440] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 689.134829][T24440] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 689.134844][T24440] ? ref_tracker_free+0x63a/0x7d0 [ 689.134862][T24440] ? __asan_memcpy+0x40/0x70 [ 689.134884][T24440] ? __pfx_ref_tracker_free+0x10/0x10 [ 689.134912][T24440] netlink_rcv_skb+0x208/0x470 [ 689.134932][T24440] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 689.134951][T24440] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 689.134981][T24440] ? netlink_deliver_tap+0x2e/0x1b0 [ 689.135007][T24440] netlink_unicast+0x82f/0x9e0 [ 689.135043][T24440] ? __pfx_netlink_unicast+0x10/0x10 [ 689.135081][T24440] ? netlink_sendmsg+0x642/0xb30 [ 689.135099][T24440] ? skb_put+0x11b/0x210 [ 689.135120][T24440] netlink_sendmsg+0x805/0xb30 [ 689.135149][T24440] ? __pfx_netlink_sendmsg+0x10/0x10 [ 689.135171][T24440] ? aa_sock_msg_perm+0xf1/0x1d0 [ 689.135200][T24440] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 689.135217][T24440] ? __pfx_netlink_sendmsg+0x10/0x10 [ 689.135237][T24440] __sock_sendmsg+0x21c/0x270 [ 689.135265][T24440] ____sys_sendmsg+0x505/0x830 [ 689.135292][T24440] ? __pfx_____sys_sendmsg+0x10/0x10 [ 689.135322][T24440] ? import_iovec+0x74/0xa0 [ 689.135348][T24440] ___sys_sendmsg+0x21f/0x2a0 [ 689.135371][T24440] ? __pfx____sys_sendmsg+0x10/0x10 [ 689.135427][T24440] ? __fget_files+0x2a/0x420 [ 689.135443][T24440] ? __fget_files+0x3a0/0x420 [ 689.135470][T24440] __x64_sys_sendmsg+0x19b/0x260 [ 689.135494][T24440] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 689.135524][T24440] ? __pfx_ksys_write+0x10/0x10 [ 689.135553][T24440] ? do_syscall_64+0xbe/0xfa0 [ 689.135574][T24440] do_syscall_64+0xfa/0xfa0 [ 689.135590][T24440] ? lockdep_hardirqs_on+0x9c/0x150 [ 689.135606][T24440] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 689.135624][T24440] ? clear_bhb_loop+0x60/0xb0 [ 689.135646][T24440] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 689.135663][T24440] RIP: 0033:0x7f375358f6c9 [ 689.135681][T24440] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 689.135697][T24440] RSP: 002b:00007f37517f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 689.135717][T24440] RAX: ffffffffffffffda RBX: 00007f37537e5fa0 RCX: 00007f375358f6c9 [ 689.135729][T24440] RDX: 0000000020044002 RSI: 0000200000000080 RDI: 0000000000000003 [ 689.135741][T24440] RBP: 00007f37517f6090 R08: 0000000000000000 R09: 0000000000000000 [ 689.135752][T24440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 689.135762][T24440] R13: 00007f37537e6038 R14: 00007f37537e5fa0 R15: 00007ffec5c65b88 [ 689.135808][T24440] [ 689.788323][T24454] netlink: 'syz.4.5523': attribute type 1 has an invalid length. [ 689.849094][T24454] bond0: entered promiscuous mode [ 689.854627][T24454] bond0: entered allmulticast mode [ 689.858598][T24457] netlink: 'syz.2.5522': attribute type 6 has an invalid length. [ 689.864400][T24454] 8021q: adding VLAN 0 to HW filter on device bond0 [ 689.878815][T24457] netlink: 'syz.2.5522': attribute type 7 has an invalid length. [ 689.909615][T24457] netlink: 'syz.2.5522': attribute type 8 has an invalid length. [ 689.911648][T24454] 8021q: adding VLAN 0 to HW filter on device bond1 [ 689.925879][T24454] bond1: entered promiscuous mode [ 689.931231][T24454] bond1: entered allmulticast mode [ 689.937268][T24454] bond0: (slave bond1): Enslaving as a backup interface with a down link [ 690.331576][T24473] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 690.479524][ T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 690.490746][ T52] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 690.517400][ T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 690.525738][ T52] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 690.545054][ T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 690.588042][T24478] ip6_vti0 speed is unknown, defaulting to 1000 [ 690.915390][T24487] tipc: Resetting bearer [ 690.967585][T24489] __nla_validate_parse: 4 callbacks suppressed [ 690.967608][T24489] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5533'. [ 690.998506][T24487] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5532'. [ 691.020931][T24486] tipc: Resetting bearer [ 691.043249][T24478] wg1 speed is unknown, defaulting to 1000 [ 691.061925][T24478] wlan0 speed is unknown, defaulting to 1000 [ 691.134361][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 691.529202][T24478] chnl_net:caif_netlink_parms(): no params data found [ 691.885014][T24526] IPVS: set_ctl: invalid protocol: 47 0.0.0.0:20000 [ 692.036885][T24530] net_ratelimit: 18 callbacks suppressed [ 692.036909][T24530] netlink: zone id is out of range [ 692.048284][T24530] netlink: zone id is out of range [ 692.065512][T24530] netlink: set zone limit has 8 unknown bytes [ 692.073969][T24530] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 692.119664][ T3520] tipc: Resetting bearer [ 692.136408][T24478] bridge0: port 1(bridge_slave_0) entered blocking state [ 692.156136][T24478] bridge0: port 1(bridge_slave_0) entered disabled state [ 692.166226][T24478] bridge_slave_0: entered allmulticast mode [ 692.175983][T24478] bridge_slave_0: entered promiscuous mode [ 692.185588][T24478] bridge0: port 2(bridge_slave_1) entered blocking state [ 692.193416][T24478] bridge0: port 2(bridge_slave_1) entered disabled state [ 692.201170][T24478] bridge_slave_1: entered allmulticast mode [ 692.247577][T24478] bridge_slave_1: entered promiscuous mode [ 692.374254][T24478] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 692.398952][T24478] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 692.459735][ T3520] bond4: (slave bridge2): failed to get link speed/duplex [ 692.489731][T24543] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5551'. [ 692.523470][T24478] team0: Port device team_slave_0 added [ 692.585230][T24478] team0: Port device team_slave_1 added [ 692.656603][ T52] Bluetooth: hci2: command tx timeout [ 692.822695][T24478] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 692.838975][T24478] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 692.868073][T24478] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 692.885091][T24478] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 692.892902][T24478] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 692.921387][T24478] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 692.956706][T24555] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5555'. [ 692.988138][T24555] bridge0: entered promiscuous mode [ 692.998752][T24555] bridge0: left promiscuous mode [ 693.087648][T24561] netlink: 76 bytes leftover after parsing attributes in process `syz.4.5557'. [ 693.100613][T24561] netlink: 76 bytes leftover after parsing attributes in process `syz.4.5557'. [ 693.127742][T24478] hsr_slave_0: entered promiscuous mode [ 693.151135][T24478] hsr_slave_1: entered promiscuous mode [ 693.192016][T24478] debugfs: 'hsr0' already exists in 'hsr' [ 693.209801][T24478] Cannot create hsr debugfs directory [ 693.235966][T24561] netlink: 'syz.4.5557': attribute type 2 has an invalid length. [ 693.242194][ T36] bond4: (slave bridge2): failed to get link speed/duplex [ 693.244430][T24561] netlink: 'syz.4.5557': attribute type 1 has an invalid length. [ 693.264551][T24561] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5557'. [ 693.288465][T24565] FAULT_INJECTION: forcing a failure. [ 693.288465][T24565] name failslab, interval 1, probability 0, space 0, times 0 [ 693.302155][T24565] CPU: 1 UID: 0 PID: 24565 Comm: syz.3.5558 Not tainted syzkaller #0 PREEMPT(full) [ 693.302186][T24565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 693.302201][T24565] Call Trace: [ 693.302210][T24565] [ 693.302220][T24565] dump_stack_lvl+0x189/0x250 [ 693.302255][T24565] ? __pfx____ratelimit+0x10/0x10 [ 693.302288][T24565] ? __pfx_dump_stack_lvl+0x10/0x10 [ 693.302318][T24565] ? __pfx__printk+0x10/0x10 [ 693.302343][T24565] ? __pfx___might_resched+0x10/0x10 [ 693.302367][T24565] ? fs_reclaim_acquire+0x7d/0x100 [ 693.302392][T24565] should_fail_ex+0x414/0x560 [ 693.302429][T24565] should_failslab+0xa8/0x100 [ 693.302452][T24565] __kmalloc_noprof+0xcb/0x7f0 [ 693.302480][T24565] ? bpf_test_init+0x9f/0x150 [ 693.302509][T24565] bpf_test_init+0x9f/0x150 [ 693.302533][T24565] bpf_prog_test_run_xdp+0x503/0x10e0 [ 693.302571][T24565] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 693.302599][T24565] ? __fget_files+0x2a/0x420 [ 693.302624][T24565] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 693.302650][T24565] bpf_prog_test_run+0x2c7/0x340 [ 693.302678][T24565] __sys_bpf+0x562/0x860 [ 693.302701][T24565] ? __pfx___sys_bpf+0x10/0x10 [ 693.302734][T24565] ? ksys_write+0x22a/0x250 [ 693.302766][T24565] ? __pfx_ksys_write+0x10/0x10 [ 693.302802][T24565] __x64_sys_bpf+0x7c/0x90 [ 693.302835][T24565] do_syscall_64+0xfa/0xfa0 [ 693.302854][T24565] ? lockdep_hardirqs_on+0x9c/0x150 [ 693.302876][T24565] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 693.302898][T24565] ? clear_bhb_loop+0x60/0xb0 [ 693.302923][T24565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 693.302943][T24565] RIP: 0033:0x7f1b1798f6c9 [ 693.302971][T24565] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 693.302990][T24565] RSP: 002b:00007f1b187b6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 693.303012][T24565] RAX: ffffffffffffffda RBX: 00007f1b17be5fa0 RCX: 00007f1b1798f6c9 [ 693.303028][T24565] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 693.303041][T24565] RBP: 00007f1b187b6090 R08: 0000000000000000 R09: 0000000000000000 [ 693.303054][T24565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 693.303066][T24565] R13: 00007f1b17be6038 R14: 00007f1b17be5fa0 R15: 00007fffc13d01f8 [ 693.303101][T24565] [ 693.612023][T24569] batadv_slave_0: entered promiscuous mode [ 693.619500][ T4574] bond4: (slave bridge2): failed to get link speed/duplex [ 693.627604][T24569] batadv_slave_0: left promiscuous mode [ 693.763110][T24578] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5565'. [ 694.150296][T24478] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 694.161538][T24478] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 694.203462][T24589] ip6_vti0 speed is unknown, defaulting to 1000 [ 694.221051][ T4574] bond4: (slave bridge2): failed to get link speed/duplex [ 694.243699][T24478] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 694.260146][T24478] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 694.339724][ T1162] bond4: (slave bridge2): failed to get link speed/duplex [ 694.361746][T24478] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 694.372730][T24478] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 694.454950][T24478] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 694.479861][T24478] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 694.550296][ T1162] bond4: (slave bridge2): failed to get link speed/duplex [ 694.600415][T24607] FAULT_INJECTION: forcing a failure. [ 694.600415][T24607] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 694.628008][T24607] CPU: 1 UID: 0 PID: 24607 Comm: syz.0.5575 Not tainted syzkaller #0 PREEMPT(full) [ 694.628038][T24607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 694.628051][T24607] Call Trace: [ 694.628060][T24607] [ 694.628070][T24607] dump_stack_lvl+0x189/0x250 [ 694.628104][T24607] ? __pfx____ratelimit+0x10/0x10 [ 694.628137][T24607] ? __pfx_dump_stack_lvl+0x10/0x10 [ 694.628167][T24607] ? __pfx__printk+0x10/0x10 [ 694.628192][T24607] ? fs_reclaim_acquire+0x7d/0x100 [ 694.628223][T24607] should_fail_ex+0x414/0x560 [ 694.628262][T24607] prepare_alloc_pages+0x213/0x610 [ 694.628292][T24607] __alloc_frozen_pages_noprof+0x123/0x370 [ 694.628320][T24607] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 694.628353][T24607] ? policy_nodemask+0x27c/0x720 [ 694.628380][T24607] alloc_pages_mpol+0x232/0x4a0 [ 694.628408][T24607] vma_alloc_folio_noprof+0xe4/0x200 [ 694.628434][T24607] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 694.628470][T24607] folio_prealloc+0x30/0x180 [ 694.628504][T24607] do_wp_page+0x1231/0x5800 [ 694.628558][T24607] ? __pfx_do_wp_page+0x10/0x10 [ 694.628582][T24607] ? do_raw_spin_lock+0x121/0x290 [ 694.628624][T24607] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 694.628665][T24607] __handle_mm_fault+0x1033/0x5400 [ 694.628713][T24607] ? __pfx___handle_mm_fault+0x10/0x10 [ 694.628759][T24607] ? follow_page_pte+0xd03/0x13e0 [ 694.628799][T24607] handle_mm_fault+0x40a/0x8e0 [ 694.628841][T24607] __get_user_pages+0x165c/0x2a00 [ 694.628906][T24607] __gup_longterm_locked+0xde4/0x1660 [ 694.628949][T24607] ? sanity_check_pinned_pages+0x123a/0x1300 [ 694.628987][T24607] gup_fast_fallback+0x1d65/0x22d0 [ 694.629013][T24607] ? is_bpf_text_address+0x26/0x2b0 [ 694.629073][T24607] ? __pfx_gup_fast_fallback+0x10/0x10 [ 694.629099][T24607] ? stack_trace_save+0x9c/0xe0 [ 694.629129][T24607] ? stack_depot_save_flags+0x40/0x860 [ 694.629169][T24607] ? pin_user_pages_fast+0x4d/0xb0 [ 694.629199][T24607] iov_iter_extract_pages+0x35f/0x5e0 [ 694.629238][T24607] extract_iter_to_sg+0xe46/0x24e0 [ 694.629279][T24607] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 694.629328][T24607] ? __asan_memset+0x22/0x50 [ 694.629356][T24607] af_alg_get_rsgl+0x436/0x810 [ 694.629404][T24607] skcipher_recvmsg+0x3d1/0x11d0 [ 694.629437][T24607] ? aa_sk_perm+0x81e/0x950 [ 694.629480][T24607] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 694.629514][T24607] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 694.629534][T24607] ? security_socket_recvmsg+0x7e/0x2e0 [ 694.629557][T24607] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 694.629585][T24607] sock_recvmsg+0x22c/0x270 [ 694.629628][T24607] ____sys_recvmsg+0x1c9/0x460 [ 694.629665][T24607] ? __pfx_____sys_recvmsg+0x10/0x10 [ 694.629708][T24607] ? import_iovec+0x74/0xa0 [ 694.629740][T24607] ___sys_recvmsg+0x1b5/0x510 [ 694.629773][T24607] ? __pfx____sys_recvmsg+0x10/0x10 [ 694.629825][T24607] ? __fget_files+0x3a0/0x420 [ 694.629858][T24607] __x64_sys_recvmsg+0x198/0x260 [ 694.629887][T24607] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 694.629923][T24607] ? __pfx_ksys_write+0x10/0x10 [ 694.629956][T24607] ? do_syscall_64+0xbe/0xfa0 [ 694.629981][T24607] do_syscall_64+0xfa/0xfa0 [ 694.629999][T24607] ? lockdep_hardirqs_on+0x9c/0x150 [ 694.630019][T24607] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 694.630038][T24607] ? clear_bhb_loop+0x60/0xb0 [ 694.630064][T24607] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 694.630084][T24607] RIP: 0033:0x7f741ff8f6c9 [ 694.630103][T24607] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 694.630122][T24607] RSP: 002b:00007f7420ef9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 694.630146][T24607] RAX: ffffffffffffffda RBX: 00007f74201e5fa0 RCX: 00007f741ff8f6c9 [ 694.630162][T24607] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000004 [ 694.630175][T24607] RBP: 00007f7420ef9090 R08: 0000000000000000 R09: 0000000000000000 [ 694.630188][T24607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 694.630200][T24607] R13: 00007f74201e6038 R14: 00007f74201e5fa0 R15: 00007ffc39a34d98 [ 694.630235][T24607] [ 694.669176][T24589] wg1 speed is unknown, defaulting to 1000 [ 694.731585][ T5890] Oops: general protection fault, probably for non-canonical address 0xdffffc000000004c: 0000 [#1] SMP KASAN PTI [ 694.735454][ T52] Bluetooth: hci2: command tx timeout [ 694.740036][ T5890] KASAN: null-ptr-deref in range [0x0000000000000260-0x0000000000000267] [ 694.740057][ T5890] CPU: 1 UID: 0 PID: 5890 Comm: kworker/1:4 Not tainted syzkaller #0 PREEMPT(full) [ 694.740080][ T5890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 694.740096][ T5890] Workqueue: events l2cap_info_timeout [ 695.087234][ T5890] RIP: 0010:kasan_byte_accessible+0x12/0x30 [ 695.093143][ T5890] Code: 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 07 3c 08 0f 92 c0 c3 cc cc cc cc cc 66 66 66 66 66 66 2e [ 695.112757][ T5890] RSP: 0018:ffffc9000440f788 EFLAGS: 00010202 [ 695.118832][ T5890] RAX: dffffc0000000000 RBX: ffffffff891f3508 RCX: a7fb62d001df4800 [ 695.126811][ T5890] RDX: 0000000000000000 RSI: ffffffff891f3508 RDI: 000000000000004c [ 695.134968][ T5890] RBP: ffffffff8a5075f5 R08: 0000000000000001 R09: 0000000000000000 [ 695.142947][ T5890] R10: dffffc0000000000 R11: ffffffff8a5075b0 R12: 0000000000000000 [ 695.150923][ T5890] R13: 0000000000000260 R14: 0000000000000260 R15: 0000000000000001 [ 695.158896][ T5890] FS: 0000000000000000(0000) GS:ffff888126238000(0000) knlGS:0000000000000000 [ 695.167833][ T5890] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 695.174424][ T5890] CR2: 0000555561bdf808 CR3: 000000006786e000 CR4: 00000000003526f0 [ 695.182419][ T5890] Call Trace: [ 695.185716][ T5890] [ 695.188658][ T5890] __kasan_check_byte+0x12/0x40 [ 695.193615][ T5890] lock_acquire+0x8d/0x360 [ 695.198043][ T5890] ? lockdep_hardirqs_on+0x9c/0x150 [ 695.203252][ T5890] ? __cancel_work+0x254/0x2e0 [ 695.208031][ T5890] lock_sock_nested+0x48/0x100 [ 695.212813][ T5890] ? l2cap_sock_ready_cb+0x45/0x140 [ 695.218031][ T5890] l2cap_sock_ready_cb+0x45/0x140 [ 695.223070][ T5890] l2cap_conn_start+0x76d/0xe50 [ 695.227945][ T5890] ? __pfx_l2cap_conn_start+0x10/0x10 [ 695.233357][ T5890] ? __lock_acquire+0xab9/0xd20 [ 695.238235][ T5890] ? __pfx___mutex_lock+0x10/0x10 [ 695.243327][ T5890] ? process_scheduled_works+0x9ef/0x17b0 [ 695.249094][ T5890] l2cap_info_timeout+0x68/0xa0 [ 695.253990][ T5890] ? process_scheduled_works+0x9ef/0x17b0 [ 695.259827][ T5890] process_scheduled_works+0xae1/0x17b0 [ 695.265400][ T5890] ? __pfx_process_scheduled_works+0x10/0x10 [ 695.271491][ T5890] worker_thread+0x8a0/0xda0 [ 695.276108][ T5890] kthread+0x711/0x8a0 [ 695.280197][ T5890] ? __pfx_worker_thread+0x10/0x10 [ 695.285407][ T5890] ? __pfx_kthread+0x10/0x10 [ 695.290096][ T5890] ? _raw_spin_unlock_irq+0x23/0x50 [ 695.295315][ T5890] ? lockdep_hardirqs_on+0x9c/0x150 [ 695.300521][ T5890] ? __pfx_kthread+0x10/0x10 [ 695.305134][ T5890] ret_from_fork+0x4bc/0x870 [ 695.309733][ T5890] ? __pfx_ret_from_fork+0x10/0x10 [ 695.314870][ T5890] ? __switch_to_asm+0x39/0x70 [ 695.319645][ T5890] ? __switch_to_asm+0x33/0x70 [ 695.324418][ T5890] ? __pfx_kthread+0x10/0x10 [ 695.329050][ T5890] ret_from_fork_asm+0x1a/0x30 [ 695.333836][ T5890] [ 695.336964][ T5890] Modules linked in: [ 695.342437][ T5890] ---[ end trace 0000000000000000 ]--- [ 695.356930][T24478] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 695.401960][T24478] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 695.415550][ T5890] RIP: 0010:kasan_byte_accessible+0x12/0x30 [ 695.422592][T24589] wlan0 speed is unknown, defaulting to 1000 [ 695.428458][ T5890] Code: 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 07 3c 08 0f 92 c0 c3 cc cc cc cc cc 66 66 66 66 66 66 2e [ 695.429266][T24478] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 695.456251][ T5890] RSP: 0018:ffffc9000440f788 EFLAGS: 00010202 [ 695.462848][ T5890] RAX: dffffc0000000000 RBX: ffffffff891f3508 RCX: a7fb62d001df4800 [ 695.466182][T24478] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 695.478189][ T5890] RDX: 0000000000000000 RSI: ffffffff891f3508 RDI: 000000000000004c [ 695.488628][ T5890] RBP: ffffffff8a5075f5 R08: 0000000000000001 R09: 0000000000000000 [ 695.497050][ T5890] R10: dffffc0000000000 R11: ffffffff8a5075b0 R12: 0000000000000000 [ 695.506783][ T5890] R13: 0000000000000260 R14: 0000000000000260 R15: 0000000000000001 [ 695.515361][ T5890] FS: 0000000000000000(0000) GS:ffff888126238000(0000) knlGS:0000000000000000 [ 695.526041][ T5890] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 695.534413][ T5890] CR2: 00007f9c255b6358 CR3: 000000004c25a000 CR4: 00000000003526f0 [ 695.542535][ T5890] Kernel panic - not syncing: Fatal exception [ 695.548957][ T5890] Kernel Offset: disabled [ 695.553290][ T5890] Rebooting in 86400 seconds..