last executing test programs: 8.455401724s ago: executing program 3 (id=8937): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="3800000055002f03020000000000000007000000", @ANYRES32=r2, @ANYBLOB="200001"], 0x38}}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="15020000fe0f00001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="080004"], 0x54}, 0x1, 0xba01, 0x0, 0x11}, 0x4000000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r4) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf670000000000001507"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0xf0f, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313b, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000003c0), 0x10, 0x1ff}, 0x94) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r6) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r7, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r6, 0x4010744d, &(0x7f0000000180)) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000300)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r4, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x3c, r5, 0x200, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x7}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x880}, 0x4049) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r4, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x44, r9, 0x100, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x44}, 0x1, 0x0, 0x0, 0x845}, 0x40000) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="3800000055002f03020000000000000007000000", @ANYRES32=r2, @ANYBLOB="200001"], 0x38}}, 0x800) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="15020000fe0f00001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="080004"], 0x54}, 0x1, 0xba01, 0x0, 0x11}, 0x4000000) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r4) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf670000000000001507"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0xf0f, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313b, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000003c0), 0x10, 0x1ff}, 0x94) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) close(r6) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TUNSETOFFLOAD(r7, 0xc004743e, 0x110e22fff6) (async) ioctl$TUNGETVNETLE(r6, 0x4010744d, &(0x7f0000000180)) (async) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000300)={'wpan3\x00'}) (async) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r4, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x3c, r5, 0x200, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x7}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x880}, 0x4049) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan0\x00'}) (async) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r4, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x44, r9, 0x100, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x44}, 0x1, 0x0, 0x0, 0x845}, 0x40000) (async) 8.123679948s ago: executing program 3 (id=8939): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000007000000950000000000000008ebb0d38f9f1dc24c31d1ba860d56d40c92d643e1006f9a1dfcaf0f7675e5d3215ba7953d331e719554a1b37264114bbcfeca4322002e18b8f2ff996bf59a6f86e326f7f4ce5e99b201f2f03f01b7"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x18) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) 7.877426919s ago: executing program 3 (id=8941): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ppoll(&(0x7f0000000000)=[{r0, 0x1030}], 0x1, &(0x7f0000000140), 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0207e80702"], 0x10}}, 0x40044) r4 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@remote, 0x400, 0x56, 0x2, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x8, 0xdffffffffffffffb, 0x2000000, 0xfffffffffffffffe}, {0x7, 0x0, 0x4}, 0x1, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x2b}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x13}, 0x3507, 0x4, 0x0, 0x0, 0xffffffff, 0x0, 0x4}}, 0xe8) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYRES64=r4, @ANYRESDEC=r2, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r5, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x9, 0x32, 0xffffffffffffffff, 0x34d4b000) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x100000, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000010040b7080000000000007b8ad6ff00000000b7080000000000107b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r9, @ANYBLOB="0000000002000000b705000008000000850000005e00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0xfec, &(0x7f0000002e00)=""/4076, 0x41000, 0x1a}, 0x94) sendmsg$nl_route_sched_retired(r7, &(0x7f0000000580)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f0000000180)=@newtfilter={0x24, 0x2c, 0x0, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0xfff1, 0xf}, {0x9, 0x2}, {0xffff, 0x6}}}, 0x24}}, 0x50) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="400000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0005000000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32=r8, @ANYBLOB="3ce81aa5b24c6827e1421a8c1b85195da65bb137e7a471f1e3c33c543dc598c76d0b6314b24832b8ad6c6fce4361571c4ff332ec6a832a1d4867b50c7d4cdfa7a585fdaaa65819840d6ee02ccc9a2a4b2649e34cee0958624b7534c8ce1bad840e07b8567f241cace3bbde0a162352b7b0b1942cfb909a3d899d7ba3bd07e55da9913ab450e81a9ca08dcaf2a6a536af0900efe75421a6a31593842a9bb3bcd21cc5261aa72ab760520b7dff781c298a1a5aa92a37ba0400b96eea9a227ab26d5c6023cbe02a8647f7ab2de4711fd2127838a06071be6a872d45602177fbf749a769d8d6c6bdcbd70ac30fec5bbcfb"], 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x44, 0x3, 0x0) r12 = socket$l2tp6(0xa, 0x2, 0x73) connect(r12, &(0x7f0000004040)=@pppoe={0x18, 0x0, {0x2, @random="ae2bc6f65398", 'veth1\x00'}}, 0x80) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x1c}]}}}, @IFLA_LINK={0x8, 0x5, r13}, @IFLA_MASTER={0x8, 0xa, r13}]}, 0x4c}}, 0x0) 6.665199602s ago: executing program 3 (id=8952): bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1d, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005100000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000c100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lsm, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34, 0x0, 0x0, 0x4}, 0x28) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000008095"], &(0x7f00000008c0)='syzkaller\x00', 0x2, 0xff8, &(0x7f0000001e00)=""/4088}, 0x94) sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x1c, r5, 0x305, 0x0, 0x0, {0x7}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x24044080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x2, &(0x7f0000000100)=@raw=[@call={0x85, 0x0, 0x0, 0x92}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6, 0x0, r3, 0x8, &(0x7f00000000c0)={0x0, 0x7ffffffe}, 0x8}, 0x94) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, 0x2, 0x3, 0x201, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x7}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x1f}}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1f}]}, 0x2c}}, 0x60) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r0) sendmsg$TIPC_NL_KEY_FLUSH(r0, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000300)={0x1c4, r7, 0x300, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x120, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xfff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0xf7, 0x3, "fabf7d41593a4313f73eb03b0c436820e382131abf4b6d524a0716c2d83a39069ad0453af11e1ebe38945d41f235c0d928e6a6fb1eaf93b77e67d07325a917ca6732d6b093964771853ffb73675c4e7ea40a01ef11bf3a5d4ba039f121bc1e75e7b9bbd644f52839b195108dfff75c7a921c6f78b2c372e10afa823e5890c5c24d4ed53e71e88c986509c6982c2da8abc8c72790d8caf759865d6a7ea86c9eebb923bd711a9bc9468e3a0710e721b0bec342e7d8fb2156dbc3bce1c41c707ebb5a41c4ea9f0ac8b88a527e83ac7cf3f9d897c9ec8e9568a50556a2ca2115344cbd6758eafa59f24ff7ceae9d1d42d586c3e1a0"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xf15}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x100}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xc7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x95}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8001}]}, @TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3e}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xacb5}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x80000}]}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x4000}, 0x20000080) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x30, r1, 0x701, 0xfffffffc, 0x0, {0x45}, [@handle=@pci={{0x8}, {0x11}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000021}, 0x0) 6.561469703s ago: executing program 3 (id=8954): socket$inet_mptcp(0x2, 0x1, 0x106) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$inet(0x2b, 0x801, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="6000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x5f8, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) socket(0x10, 0x803, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r4) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$SIOCSIFHWADDR(r4, 0x8b26, &(0x7f0000000200)={'wlan1\x00', @random="ffffff8dffff"}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt(r6, 0x6, 0x0, 0x0, &(0x7f0000000000)) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000140)='cdg\x00', 0x4) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 5.652122834s ago: executing program 3 (id=8968): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@setlink={0x128, 0x13, 0x538, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, 0x2100, 0x6a3}, [@IFLA_VF_PORTS={0xa4, 0x18, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "15f478f888a8d955cec4948998a0d114"}]}, {0x14, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x5}, @IFLA_PORT_VF={0x8, 0x1, 0x2}]}, {0x20, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "6a8918ab62876f4b7714b39c75fb2476"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0xe4}]}, {0x28, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "7bf884acb682d9ccac92d04b65a09d2c"}, @IFLA_PORT_PROFILE={0xf, 0x2, '&+{(^--]{$\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0xc}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "bcb0e8c81922226894885948658dff1a"}]}, {0xc, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x6, 0x2, '\x1a\x00'}]}]}, @IFLA_CARRIER_CHANGES={0x8, 0x23, 0x5}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x1}, @IFLA_PROP_LIST={0x54, 0x34, 0x0, 0x1, [{0x14, 0x35, 'macvtap0\x00'}, {0x14, 0x35, 'bond_slave_0\x00'}, {0x14, 0x35, 'ipvlan1\x00'}, {0x14, 0x35, 'geneve1\x00'}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x2004d808}, 0x1) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00'}) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@setlink={0x128, 0x13, 0x538, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, 0x2100, 0x6a3}, [@IFLA_VF_PORTS={0xa4, 0x18, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "15f478f888a8d955cec4948998a0d114"}]}, {0x14, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x5}, @IFLA_PORT_VF={0x8, 0x1, 0x2}]}, {0x20, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "6a8918ab62876f4b7714b39c75fb2476"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0xe4}]}, {0x28, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "7bf884acb682d9ccac92d04b65a09d2c"}, @IFLA_PORT_PROFILE={0xf, 0x2, '&+{(^--]{$\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0xc}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "bcb0e8c81922226894885948658dff1a"}]}, {0xc, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x6, 0x2, '\x1a\x00'}]}]}, @IFLA_CARRIER_CHANGES={0x8, 0x23, 0x5}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x1}, @IFLA_PROP_LIST={0x54, 0x34, 0x0, 0x1, [{0x14, 0x35, 'macvtap0\x00'}, {0x14, 0x35, 'bond_slave_0\x00'}, {0x14, 0x35, 'ipvlan1\x00'}, {0x14, 0x35, 'geneve1\x00'}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x2004d808}, 0x1) (async) 4.531781401s ago: executing program 4 (id=8979): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg(r0, &(0x7f0000000540)=[{{&(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x1000, @dev={0xfe, 0x80, '\x00', 0x24}, 0xa, 0x1}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000300)='>', 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0xfe61}}], 0x2, 0xc88c4) 4.357230394s ago: executing program 4 (id=8983): r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1e, 0x803, 0xff) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f00000007c0)={0x1f, 0x0, @any, 0x4}, 0xe) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd, 0x10000000, 0xffffffffffffffff}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x9, 0x1000000200000009, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) listen(r1, 0x44) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in=@multicast1, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4e22, 0x7ff, 0x4e22, 0x47f5, 0x2, 0x20, 0x20, 0x87, 0x0, r5}, {0x0, 0xffffffffffffff7f, 0xb4c4, 0x8, 0x5fffffffffffff, 0x720, 0x3, 0x17be}, {0x7, 0x401, 0x80, 0x1}, 0x1, 0x6e6bb2, 0x1, 0x1, 0x3, 0x1}, {{@in6=@mcast1, 0x4d2, 0xff}, 0xa, @in=@remote, 0x3504, 0x1, 0x0, 0x0, 0x7fc5b554, 0xc71, 0x7}}, 0xe8) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000400)=0xc) sendmsg$netlink(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000540)=ANY=[@ANYBLOB="2c0000002d000100f1ff00000000000008000c00", @ANYRES32=r8, @ANYBLOB="0b000080976b640868603000080001800400f680"], 0x2c}], 0x1, 0x0, 0x0, 0x2000000}, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000540)={{{@in6=@ipv4={""/10, ""/2, @dev}, @in=@multicast2}}, {{@in=@broadcast}, 0x0, @in6=@private2}}, &(0x7f0000000300)=0xe8) sendmsg$inet(0xffffffffffffffff, 0x0, 0x8004) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x48, 0x83, 0x0, 0x80000001}, {0x6, 0x5, 0x0, 0xfffffc}]}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYRES32, @ANYBLOB="54000000100039042bbd5a002500000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x880}, 0x8000) syz_emit_ethernet(0x46, &(0x7f00000009c0)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x10, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x1f}}}}}}, 0x0) 3.480582555s ago: executing program 1 (id=8991): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000080)=""/115, 0x73}, {&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000003740)=""/4083, 0xff3}], 0x3}, 0x8}], 0x2, 0x2, 0x0) 3.355230041s ago: executing program 4 (id=8993): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha12\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="b7f2288d3aaea2bc0000def1260a00"/32, 0x20) r2 = accept(r1, 0x0, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f00000013c0), r2) write(r0, &(0x7f00000002c0), 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="640000001800010027bd7000fcdbdf251d01020015000100040000e002000000213e92146611cf5b0400000008000900", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0800050001f8fd81", @ANYBLOB="3896e62a"], 0x64}, 0x1, 0x0, 0x0, 0x88}, 0x80) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000018c0)={0x1018, r6, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@DEVLINK_ATTR_RATE_NODE_NAME={0x1004, 0xa8, @random="0855b7526d4173e2cfd92f9f5c30017a0f1bc528b0e65c3ef9077029a4348fe27e003ae201f113d49f38c9ddcd63384bb5806eac5cdd0979e4d2db4c346249106a457e7ee0eba07383e7795068bc8eb46a8c853399c85143bddbf555740a107ce09c292d76ad0968453c13038088c5f8aba4929d443cd08dd0f3099f82e0e8d048521ddae8808ddda070f14323ed95df5753b424c6250344663f8bb8a17aaf8c7a07fe892c4efbf4d6970c86ac6a023efb37ec7762d32b3b88e8fba5355ad4532973975312585946632d9840ab0f52df058dd674640e859e23e674ece65ca92c59f6f2e60555a92a912c30d6d781d98dfb6b0c61b520e653dbf70011d19995c4401a4475c5d6e21ba027b62488cb6cbe734e000d6d4370f7ba3f3b18c3c134691f9c70f062eed06ceaa1ddfa7e4cf0cd56e0a6536b4dd9d327116373d46e9142dc51eb2bd2ddcead5f6c92c515dd5fb209ffc45fa4ddead0cbc70816218087ca4243a888482b6354e5407573a7b788f8326ebcb07bfb882e0720fdbf5d509613df6c3604298e66773d0b31ea9efe790132142218ba0a4e8b45b3a1fd7c9d70a8894e0a374a1e7b14de4ce83b5d37cf60b4ccaf0bdab1393d84cf3a47513dd66d021cb02d27b5cacea348a907abd17689ffbb34c0ae8355f21f2163c5badde00e419d926b7c96cf0149d07e8dd4ef6608518cd8db5dcfab411317fb1aac6bbd23bed893ad6366374dc711e343848f17d9c8d4cc682e15df261fe74fe931992d91a5e4a5ecee9ddf4ba1bcdf222200ba38dd39bdc2019ed0bf3e6ba7c5b830b2526759a4bdd9b411f0d1d3ffeed990f73c45ba3505c80bc3134572a63dbd94f36708c05131a118bfbaaafa66654723fb97e6076b596fa56a5d5c556a19a7369907f96d50bda28ecf2867d1fecb23969c4c944e1993e232074b491958654de80ee447b19303035b7ed173bf040ab90b51da340e82a4009c6139efd4a25d466eb3affcdef926b9e3197f7a98d2bbcf1736821195b9f569f7429ac1ace82be893a2bfdc1c961c413b60f562106586b24fbd3761f5c1599180db3541d4881f08837be1104f16042958c481d91f9da785afaab95aab4ff5808ea2bf35c2b7199e58e2404d5f27dfc0885b4253b728faf88479331e7b5909fb743c023115a9c67fcc2c132ed01fc218aac861eb6e417f4692bdadbe74ba59debf08ece7d1e4d1886e5438568a2ffbdcaa26643bfc972e092a5367b509cdbe74110f7af9e6122a267b8c1a3356f8ce473f1154ff394fe8669704efe79fc1bc0a7b62f739ca45d339b5d8799d7f79eb71b0e067b7dcde6e42ac9b17e30b1137e0ed2b49987bd5258a41d6941edd96cbcf63f0467a64474a14ce67e61eb98e74224111219f7858300c662b16ef489ae283d06f80a5f297872a6195d4d3ff3451278fc7a6a9030de22422f847856c2d0c770d94ba822a10e656d7e430adc05bf0b6639549501467efe55c1cadd50bd877ab4a5d4507dfc962eb15e2e2fc8120d562157a7a64b77de2d8d992bad0b1e7d6a0ca7685d3afa27db6e5d47ea007ab7c91c3ecdc78e689eeea04b57c8652211ec0150ccffecb1569619f471c0c23f25e10bbd1464c8ae6c8c737bcf84b5bf5bc5c545cb037d908352be1b36a53f019f96c17ff50bfa7fe081818e96c498c5d9a711c6c33ca39b91f6331f21d33d38541f634c426d95e1a9c023613a3d8343db2509fa7d643ffe01d4885d8bd9c8936057039c14d9be57dee80add560536f763103f26978f39d437bc6a8b2bf6408db7c158b1cb89afd58e46f3845dd86670237aca6613a65ad0dc7ed76fd2d5508112da8d847838e258757540986e00ea7e614d3d0e210e223cf37071cde2d428e00426feee51ff2f00bb2f68dd4bffe939e6110c30bdc8bc93e2f329610f4b0920a78567b00b85a5bcfaa0131c7e5ceb70cd4d45645c5fc168e0e9e94bd0f28d648a1ac63d44291b5e5b4c243e0957c3303b3e66cfe25fe7485df4d416adb73a564f03098578ec5e0a0870158f5e23a72b231a43578eabe0126449ad6c6a8e003e53b5979095405af0b428eb86948a863ce61ec1d990022708c23c7559ec9ada5f3b1c45f19a1bc56290798d59f0b1495587d45828ec086ebcee485859dbd00142b81ac66e9a34338707d319f21503eddf34c2df5f2d395786c9b900a5029e9979fe225d8effab63bd39808c40b1b0aecd3e191991fc1e8d56f9c26bbf0a59a9d1c0856e5f181883a54db9d3232ce76dc708413df6f8a128a7735138b62a8be32e4c5f1d86ab4e099ac62522add9661dd9e8286eb3582e36a412581e56174a52aa7c2376a9f95d96306746bba41921b004ef4ec0aa9dc225b17d0c9a525dd169c0966c961e662dc7b575db8dffb3a8c5b7b04bba61d2a3e685e566dd6d696e9e5ee44f59011f1d148ef104950534cfa0122a6506648071f1a186ce1d6d4766c9bc1de1cbd63e58a0839545a834ee924a2614f062110517bc48b54e94c3ff3fb2d8ec59444d24d6885f3e6fd6ff1e6495dae9c9e1999b3dcfc57d4af23bc5523c31eea81f11ccc31af156fd2a4ae285e264aef82cdae33f997581b1de181a8a540f2431b52e6bba665c3ef4afc1c431410ce20fabf5ee51fccb61a8450f197d65158860f2f9809886b6ee76e5968e80fc06a906b5212cf61ed609ad94f58329f720b475bcd6ec4a76bc2962f08c6701c8c3f7b931a7a81b9a99a0d914ae883201c43bde2d1299ccd2d0d0d5d9d642470b4fe1a29d43d722c1aaa89f4c9d4abcd97d4d280bb5f77860d135f8834bba54df6b9c39a3a560e0760578da506607b2243a3ce0925a8d9bd04cfdab0c26b51aa6f4ea84a1ae261590fe88695c55ec18f889391e85dafd6311c4b8cacde2f7966ae5f33fa0d2f914e8eca8ebdc318d1ea2f990816a86d9e62e83fe58c196b65b9f2250b081bf13e3cbed3dcc5706d5bcd51d80e4f9c6f6a89239ef1f1bdec953dfdbd37c6a9136da6744a4975e7b91c5740927b86e463a11d9049e7b9a6a13074ca9e857c02032d82f406fff1be83517fafa390695b4cc90b3486695ee56a621f72539ce17a8e56991607e8511fad600d38949560859b03bc0d84383fc4185e6091a0569d525c3b2644622099c0462357557aeff293881d0bd87dfcb4d16035896b1a5abdb53e42e2c8339445eaa961cff4b9f12e3ad030710dd5c248e7987b7c703790d9b301ca34d5d59980d6a081eeb3d51809317dbfdcb06da06691ffeb1d0a8d4e380688ed3e8f72b9638374195e54f354c30cfe01d93e9f13de111012d30cd6ea6e5eb08cb97b5421bb618fd8007bd041c96b007c4776132d5f135a91fe2fa1de2f5fedea2e1578883e30b1e8c2ccc2527c98f67bf29a5b47b966ce037a06dc31941f973f9e7564f90a76fbc5f493b5207798ce35dc9763d9a39fe6e178c99e265d178f46606450a44adf8d10a211b66eefc83535bc5d0651e46d62c271dc588f55bf6abbcf72280989305befb0b818b085355ce5a7952cd07a02a855e4c1e6e6410463ea0b6c72574c0c04ffa894b375272b7ae5ada55e629d0c5ac5ed0e704c0ba9bc89d90c1a660c306bb997bf2e1a62024fcef841e33237e4fa1135eccdffec47a3aad9873a616a3a3dcd83f2dd0d0a977e0efb51effbed1e29c20f18188e8e1a1a056131cb44193e8c335676dbdf0f16386d91895605e326b239484f231b5cabcd5a8c2ffca9f2bed5e91991c18a3cdf351f067aa225676ea9179722ffbd60ac29450abc29190ad138b832140ef2d901befa27dd5af01276dcb4b7199fbd3b69d70bf3af74284a10fbb43350d8edc2cc81186aff5541623775cb0d60497c180235dcaa06a77c399d8aba020457de73b860874b1959e2af2a61d0b94f3e94b28862dfdaad951d8ffd54270587514f418ecd6e1e92d5d13cb66e2371fc3194f0b68213fcb58db0824b6d68fd81a4d1d1a7ac78965e44592a248fcb4a3815cb6dbe3e75135a627cf37d075166b0dbbf927564af825784ee33ca70c6389d4c9ac348da61d72ee635e5967ff8b7c80946c85e4a8c1336f3132cb2ba09a38d06b49311e16d436622d6db83a8a0ed1d672c4dda6baa0bf9d0623af2aaf2f4a7e0fa90c4cd74ae793305a9dc87076c8a76c3c95ead0383aacf072a1be40bc508fe7c51898e78767cfe1651a24edd2f885b68293ce51e8107ddd43ba4a2f9e4d52f074db0b7b02ee287947113203898d0b3c6140e7e2777064e60e207a105c0df35ebfe0bf8fefcaf126359abef55646f6fb62c81bd3f773e8738bd76dfccf1a3adaf66d0d52ed26e3620b1cac61135286b205c25ec3f710306711de50ede445611f9903b627ceabf67ce8a86143f8462e89b01c9a4e50a3f2bdd7f9bd3ec134c961dc4f65f701bf5aed0fb37c9185bec1374c63d2d880636908441405c6d07271515f084e824982d9d0044976b51c8d2a768b7e2e0d9af269959bbd694de8dba1c5474f1844531455b3b9d78bf2de4d1b4ea910ed3c8c69e742124d29e971f841905dde4640e344fefe946b74e3a82a0e80e9289f72001cc81e23d04dc962c53a3b714f796714e7eb0d092118ebb8aa55f6be783cfbd2bd008ee031a2bb75a978d13723e5489e4a02058311bc0d319ced20fedbd061fdc579f25d9355fa76f032dab1f038db1efeb67d149b82b121dc991707ce8e93f2d28b098572695d4727ea4832392029746187f3f0fa89f10e39c3584b1f0c3ae9644a116f8ec56ce8fc2f79b2464a97e93a05dbadbd3c3d873659cd8ac92647d02f0c7eb866a5a3b158c81032b48512a3d93e613d0aea859eeabf8e6bd9cfd7e82dd87c825d462b689de9e1427f657f43411a38cd7c327fb8e6879afc9d8a0079cb5348e050d3ef8ca316b78326c6fabf6add45ab7a3cb556029cbe1642870784528631b9b00c0f1c889557b2074f63a8724a35d65e6a4c9b49480f1917fa1a16b1fe1eac33c0382626b9fef30b4f87e375fd5b1ca8a229742d15b57721f41d833b3a74a73162685dc184a23997c357c9cda6ef1c728128f2fca6b56e705220fb8cdc0a376ecb10fe74cd1df2033981722b4bd21ac775f2da52545b992a1ba799d94796247b0ad60ef19883390a9efc05da8a7fac1e842bb3dfe78241de2a320bd1bd81b30ba9fb57c211502a881c037ec391078b54d7b8f6380acdd291888c22e430504f8de8dedb000a488222019e73deaab124e3913e619717a9fdeccdb62335fef2228aaaf3b4824863da62949bbfc4b852fc6cf2699e5dea632b560f475e18732159b1310d27c753fbb664c4c09a5e328a7b2065189c46ff20c5d004da561207e5e33fac43283d1e8f4e216c4d2e7c75a7e62836ae854175531fe047cbe1cac80f9836822421c5bd6383bd62e7627229dee02c250a926c526ddad919c37491ebcacf5a3be3fe3d3827f4d7d77718d689d52b404a73cb447b8b863eff1c3e82aa2c03cd72eb9c53239b7f7e62b9e19beedaa7d0884c62fc12875f196c9cc17fcce81302190b1be6aaa9828aa93920c24ec22d35bcdbc7e0e9291ea92c0ed609cd1689f4b22ed0e0804cf702bafcedbae8314ac98ee7089e5855679e5ceaf2bdf01a4fea507a3a9100d9e03874b6f029119cbf5eb8323a1e4fc32cf0aa64cacc3360c99200b3c2666e1d17a068b3109c79a02c4446dff7e755cfc5863cbcfe62dab4d7c15bddb6863841902b5f481b704ad55215bf5539bfd80b2cd831d60881b56608ca17c3519c08f889d6daf736cf006389d4fbe836be83d3a60ac4e749e8a3d38eec3b418"}]}, 0x1018}, 0x1, 0x0, 0x0, 0x41}, 0x0) socket$alg(0x26, 0x5, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x4044004) recvmmsg(r7, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x10003}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000240)=""/180, 0xb4}, {&(0x7f0000000780)=""/260, 0x104}, {&(0x7f0000000000)=""/32, 0x20}, {&(0x7f0000002900)=""/4114, 0x1012}, {&(0x7f00000017c0)=""/220, 0xdc}, {0x0}, {&(0x7f00000005c0)=""/146, 0x92}, {&(0x7f00000008c0)=""/234, 0xea}], 0x8}, 0x80000002}], 0x4, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="07ad0000000004000000010000000000000002410000081000137564703a73797a3000000005"], 0x2c}, 0x1, 0x0, 0x0, 0x40024}, 0x0) r10 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r11 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)="1b0000001a007f029e", 0x9}, {&(0x7f0000000240)="6848b2796acd812dce3d01d190a3cab1e8ce", 0x12}], 0x2}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x50, r10, 0x100, 0x0, 0x0, {}, [@TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xb}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x851}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) 3.259135591s ago: executing program 1 (id=8994): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000001700)={@in6={{0xa, 0x4e24, 0xb, @mcast1, 0x81}}, 0x0, 0x0, 0x3f, 0x0, "f1990e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae3d393dd38ea6c02965c6776267517308a3d40aa1c788df600"}, 0xd8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'veth1_to_bridge\x00', 0x200}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f00000002c0)={0x2, 'veth1_virt_wifi\x00'}, 0x18) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[], 0x6c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r5}]}, 0x20}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200000004000b"], 0x24}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x2, 0x0, {}, [{0x8, 0x1, 0x2}]}, 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000006800e97800000000000000000a000000000000000400040030db918bc8ccf0be2dd96793159ba6a59ac3d6"], 0x1c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x2, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) ioctl$int_in(r0, 0x5452, &(0x7f0000000740)=0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000880)=0x3, 0x4) writev(r0, &(0x7f0000001400)=[{&(0x7f00000004c0)="e41cdbf161be3e2ef03b5091e7c02394c1b045ecf6e191834738f71ecff73aaf2a6ca218674d52892bca1c76c3374978bee4ee976f24220eb138a0157f14f31183f233142c9188df", 0x48}, {&(0x7f0000000640)="3d56086e2648463ba46b682391850fd76edf9300a5b8bccf8e1e90e81c79a5cda75f40112b950e3325675abe32396907673bfab35f1b000186c48c18f2719972b561c5660d02472124c5422d7f18d380713988ddf9aceae218d79bc54c56e934af10202f5f28b559d5a8c113d9cfd52a6940eb609370a4c6080d538b4a00a549a5e2b1050dd6c6312cefed57bdc5199cf19716fdcced4d9adb7b423643f83fdce763245bfe358ee62712802225bc9d93d16711a5293d19fd5070fe76f0320caf57fdf1b0c8b7018146b9bbcd", 0xcc}, {&(0x7f0000000780)="4b97f8be3e319c7692ceeeeb0fc665c1bfe72483a1b330edbc0efcea1c0f1fdfc555dd99a72a684c6546bd31536d0f6be4e7671f93f6bfa53fe2908876465e572a62493f9a96460d373db0f18308ff9781e5cdb4e65fd84a4846d7499ac57fb6394d7c3b315b7f2ec29412d0fb30fb60ea649db212700f223662bd9c7dfbd5b78d5ecc34a99c728072ada8b688a83f38ae4a34a40d360d5bf9dbae42d07595bdaf0f89247e1062d30ddebc047d5bd16d8287a5e10069c380160210", 0xbb}, {&(0x7f0000001800)="c6c4dd44da9f6061a68271a90443b0b65b9f254228815e0b4899f22065ab2bebf294b4125f55016f159843ab9e1d480108553e785f260abb37ffd12f03e1bf36792ac35df1355b93b821d4a29cdf851569ebb691346c0324d2dbb8ea4a57c3b54ad2b3cde6bf4253a58bc7506a680056dca9a240b3200f9ac27e0cc1536423f98382e868a8de6878129b96a0a1cfb76681afe912226cd35c468bf92d1f4175ca40f7b550dd076410cb7a63af942ad2c6909b2cfd85c5b4ef3f6dc632b835dfad689c76697890c49562433763f4457c2fbaa2f5e4673a5bf1e2ad24dd15cb480d", 0xe0}, {&(0x7f0000001600)="8ede3549c5f3dde9186b965f491b62640f4f9a50131e96f875387b36b6c5d8d5bd8259401b69c507db8f29d6a07938793e0941ad63a8c8a736ec31c3c989dc105ecb057b0af62ab2cabb2bf781d42744c4328eb429256f6eec6db2f717d632bf7f63c0ba7b5ffd07de828f2bc0dbc2d0a50ff743315aea4dc390f39c4b2f05dd4ea73238f0726db6342c819bbcf526ba16f141bd78e18bb2d9d08c8dbcf46f7a0a5259494cb3bf", 0xa7}, {&(0x7f0000001140)="ca55560633d9e55959a61f7a94e1505c6ed53e22cd46e1d0609e70d3d95ae8192f08db8b00dedad47eba95fe87895f9ab139f1a656f009962cef1c3ca5b483630ca2ef184d83de890b86833aa125c7eb6a8cda87e5043e2401d0a1ff1aebd4cf98d347a539fb7442c49421103b23c161065cde0055afe04a80f5cf42e12a0b4634ab3217af3d726f94c9503ea027c4780c24ac5707974573b2dd20e31b754fed74da020238274503d83c8865f006600d8ba08c3e8436cde9b19f16fd324d2bf0", 0xc0}, {&(0x7f0000001200)="8558ba6560642a7efb760017c3b06ff184b806aa456f58eab3cb93510741a9f8ea544805d0053d808a658d1ce0586d8d50a939196bf2b1d311253751f6188e951232e8da305d14814b84eed25e7f00ce81c990cb1bb4ed5f404e377d2fe1833f2ad85e7a4dd485704b8cc3a53fdce552ae3ecdc59a17d26020c5d8f3c89a07169a4896a429a5c6b19b496707e88705257100b52cbcf184991fd142c696a3d10e8a70f726abf85e172df9480b164463", 0xaf}], 0x7) 3.148012777s ago: executing program 0 (id=8996): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b70800003f0000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) 3.055278949s ago: executing program 0 (id=8997): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xc5) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) (fail_nth: 9) 2.491833625s ago: executing program 0 (id=8998): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=@delnexthop={0x30, 0x69, 0x1, 0x70bd27, 0x25dfdbfe, {}, [{0x8, 0x1, 0x1}, {0x8, 0x1, 0x2}, {0x8, 0x1, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x44}, 0x40000) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f00000000c0)={'nat\x00', 0x0, 0x3, 0xc0, [0x3, 0x100, 0x7ff, 0x120000000000000, 0x0, 0x7], 0x4, &(0x7f0000000000)=[{}, {}, {}, {}], &(0x7f00000001c0)=""/192}, &(0x7f0000000040)=0x78) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0xfffffffd}}, 0x10) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) bind$tipc(r3, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x0, 0x4}}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r4, &(0x7f0000000540)={&(0x7f00000001c0)=@name={0x1e, 0x2, 0x2, {{0x42, 0x4}}}, 0x10, 0x0}, 0x10) r5 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) readv(r5, &(0x7f00000007c0)=[{&(0x7f0000000480)=""/223, 0xdf}], 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="15020000fe0f00001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="080004"], 0x54}, 0x1, 0xba01, 0x0, 0x11}, 0x4000000) 2.445500656s ago: executing program 2 (id=8999): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, 0x0, 0x0, {0x0, 0xfe, 0x4}, 0x2}, 0x18) connect$can_j1939(r0, &(0x7f0000000740)={0x1d, 0x0, 0x0, {0x0, 0xf0}}, 0x18) sendmmsg(r0, &(0x7f0000004580), 0x654, 0x0) 2.377579301s ago: executing program 2 (id=9000): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xc5) syz_emit_ethernet(0x36, &(0x7f00000005c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa360800450000280000000000069078ac1414bbac1414aa00044e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="99c2a900907800005e1a72f64fe2c66c0793"], 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) r1 = socket$inet_udp(0x2, 0x2, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000140), 0x6e, &(0x7f0000000400)=[{&(0x7f00000001c0)=""/162, 0xa2}, {&(0x7f0000000280)=""/71, 0x47}, {&(0x7f0000000300)=""/102, 0x66}, {&(0x7f0000000380)=""/117, 0x75}], 0x4, &(0x7f0000000440)=[@rights={{0x10}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x118}, 0x2021) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_int(r1, 0x0, 0x6, &(0x7f0000000080)=0x7, 0x4) r2 = socket(0x2a, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89b0, &(0x7f0000000180)={'veth0_virt_wifi\x00', &(0x7f00000001c0)=@ethtool_cmd={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x100000]}}) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) syz_emit_ethernet(0x2e, &(0x7f0000000100)={@random="c5bb36c76521", @random="fad1e0480100", @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp={0x44, 0x4, 0x2b, 0x0, 0x8}]}}, {0x0, 0x4e20, 0x8}}}}}, 0x0) setsockopt$inet_int(r1, 0x0, 0x17, &(0x7f0000000000)=0x3f7, 0x4) recvmmsg(r1, &(0x7f00000036c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x43, &(0x7f0000000040)={0x0, 0xea60}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r9, @ANYBLOB="0000000a010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="030000000000f9287c6b577cbe07000000000000", @ANYRES32=0x0, @ANYRES32=r11, @ANYBLOB="000000000300"], 0x50) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x439, 0x70bd2a, 0xffffffea, {0x0, 0x0, 0xe403, r10, 0x3, 0x610c0}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @private=0xa010100}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x801}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x80c1}, 0x4008040) sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={0x18, r5, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) 1.325348849s ago: executing program 1 (id=9001): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) socket$kcm(0x2, 0xa, 0x2) getpid() bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x2000002, 0xe, 0x2100, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (fail_nth: 3) 1.322820276s ago: executing program 4 (id=9002): r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1e, 0x803, 0xff) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f00000007c0)={0x1f, 0x0, @any, 0x4}, 0xe) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd, 0x10000000, 0xffffffffffffffff}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x9, 0x1000000200000009, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) listen(r1, 0x44) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in=@multicast1, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4e22, 0x7ff, 0x4e22, 0x47f5, 0x2, 0x20, 0x20, 0x87, 0x0, r5}, {0x0, 0xffffffffffffff7f, 0xb4c4, 0x8, 0x5fffffffffffff, 0x720, 0x3, 0x17be}, {0x7, 0x401, 0x80, 0x1}, 0x1, 0x6e6bb2, 0x1, 0x1, 0x3, 0x1}, {{@in6=@mcast1, 0x4d2, 0xff}, 0xa, @in=@remote, 0x3504, 0x1, 0x0, 0x0, 0x7fc5b554, 0xc71, 0x7}}, 0xe8) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000400)=0xc) sendmsg$netlink(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000540)=ANY=[@ANYBLOB="2c0000002d000100f1ff00000000000008000c00", @ANYRES32=r8, @ANYBLOB="0b000080976b640868603000080001800400f680"], 0x2c}], 0x1, 0x0, 0x0, 0x2000000}, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000540)={{{@in6=@ipv4={""/10, ""/2, @dev}, @in=@multicast2}}, {{@in=@broadcast}, 0x0, @in6=@private2}}, &(0x7f0000000300)=0xe8) sendmsg$inet(0xffffffffffffffff, 0x0, 0x8004) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x48, 0x83, 0x0, 0x80000001}, {0x6, 0x5, 0x0, 0xfffffc}]}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYRES32, @ANYBLOB="54000000100039042bbd5a002500000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x880}, 0x8000) syz_emit_ethernet(0x46, &(0x7f00000009c0)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x10, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x1f}}}}}}, 0x0) 990.577455ms ago: executing program 2 (id=9003): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000080)=""/115, 0x73}, {&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000003740)=""/4083, 0xff3}], 0x3}, 0x8}], 0x2, 0x2, 0x0) 987.312635ms ago: executing program 0 (id=9004): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYRES16, @ANYBLOB="010000000d0000000000010000000000000001"], 0x38}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0200001900010000ffea0010000000e0000001000000000000000000030000ac1414bb00000000000000000000000000000000ffff00000a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000084010500ac1414aa000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000ac1414aa000000000000000000000000000000003c00000000000000fe80000000000000000000000000000000000000000000000008000000000000000000007f000001000000000000000000000000000000003200000000000000e00000010000000000000000000000000000800003030000000000000000000000000000ff0100000000000000000000000000010000000033"], 0x23c}}, 0x0) 929.050435ms ago: executing program 0 (id=9005): pipe(&(0x7f00000001c0)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, 0x0) close(0x4) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x80, 0x6) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) write(r1, &(0x7f0000003300)="ac", 0x1) write(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x18000000000002a0, 0x26, 0x0, &(0x7f0000000180)="b9ff0b078059268cb89e14f065582de0ffff200000000067000aac14140ce000006a49e832f0", 0x0, 0x5, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) ioctl$F2FS_IOC_DECOMPRESS_FILE(r0, 0xf517, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r5, 0x0, 0x7f}, 0x18) r6 = socket$inet6(0xa, 0x3, 0x3c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(r6, 0x0, 0x0) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) 909.590168ms ago: executing program 2 (id=9006): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020320001900000000000000000000000400030000000000000000000000000000000000000000010000000000000000030006000000000002004e207f00000100000000000000000400040000000000feffffffffffffff0000000000000000000000000000000002000100000000000000000600000000030005000000000002004e21ffffffff00a849000000000005000700000000000a004e2200000005fc0100000000000000000000000000000000000000000000020013"], 0xc8}, 0x1, 0x0, 0x3000000}, 0x0) 793.918173ms ago: executing program 1 (id=9007): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xc5) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) (fail_nth: 10) 791.405807ms ago: executing program 0 (id=9008): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}, 0x80000001}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000600)=""/197, 0xc5}, {&(0x7f0000000000)=""/41, 0x29}, {&(0x7f00000018c0)=""/4104, 0x1008}, {&(0x7f0000000340)=""/75, 0x4b}, {&(0x7f0000000500)=""/224, 0xe0}, {&(0x7f00000000c0)=""/237, 0xed}], 0x6}, 0x7ffffffc}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0xea}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0xd}], 0x9, 0x0, 0x0) 176.099599ms ago: executing program 4 (id=9009): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, 0x0, 0x0, {0x0, 0xfe, 0x4}, 0x2}, 0x18) connect$can_j1939(r0, &(0x7f0000000740)={0x1d, 0x0, 0x0, {0x0, 0xf0}}, 0x18) sendmmsg(r0, &(0x7f0000004580), 0x654, 0x0) 175.84329ms ago: executing program 1 (id=9010): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x13, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x17}}], {{}, {}, {0x85, 0x0, 0x90ff, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 175.164658ms ago: executing program 2 (id=9011): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000005800)={&(0x7f0000005780)={0x4c, 0x2, 0x6, 0x301, 0x0, 0x0, {0xa, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x86df5cc3eb3e0791}, 0x804) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="10000000040000000400000002000000a0000000d412a4ebbe38842808475e0f06cfabcabb23b9fd63776b3feb0d3198a7c775818ff493eda3eba5ba8ce3eb0dd16570e2db0709e0124a9b75b9cc407fb7b0c2b83bcd263dfac403c7da9ddd6e346bdcae8f767055d72d883691501d1bab2b140e5f1a678bb8cec4", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCDELRT(r1, 0x890c, &(0x7f0000000680)={0x1000000, @bcast, @bpq0, 0x86, 'syz1\x00', @null, 0x0, 0xa, [@null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}) 167.555012ms ago: executing program 4 (id=9012): mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000005c0)={@cgroup, 0xffffffffffffffff, 0x10, 0x8}, 0x20) r0 = socket$kcm(0x2d, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x1a, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xa30c00, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, [@alu={0x7, 0x1, 0x2, 0x0, 0x7, 0xfffffffffffffff0, 0xfffffffffffffffc}, @alu={0x4, 0x0, 0x1, 0x4, 0x1, 0xffffffffffffffe0, 0x10}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='syzkaller\x00', 0x3, 0xdf, &(0x7f0000000240)=""/223, 0x41000, 0x70, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000340)={0x4, 0x4, 0x7, 0xfffffffc}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000380)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000003c0)=[{0x3, 0x1, 0x2, 0xc}, {0x1, 0x2, 0x7, 0x6}, {0x0, 0x4, 0x10, 0x3}, {0x4, 0x1, 0xe, 0x8}, {0x5, 0x2, 0x1, 0x7}, {0x5, 0x5, 0x10, 0x9}, {0x0, 0x1, 0x10, 0x7}, {0x1, 0xa55, 0x0, 0x9}], 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000000)='rxrpc_rx_packet\x00', r1, 0x0, 0x100000}, 0x18) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000100)={r0}) r3 = socket$alg(0x26, 0x5, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000001a40)=[@in={0x2, 0x80, @dev={0xac, 0x14, 0x14, 0x12}}], 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f0000000000), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) bind$alg(r2, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4309(ccm_base(ctr-camellia-aesni,crc32c-intel))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r3, 0x0, 0x0, 0x800) r6 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001080)=ANY=[@ANYBLOB="e0000000100001002dbd7000fcdbdf256e68706f6c79313330352d67656e6572696300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e91f4281e9203bae19e7bd29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0xe0}, 0x1, 0x0, 0x0, 0x24008805}, 0x4008080) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg$can_raw(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000540)=""/165, 0xa5}], 0x1}, 0x100) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x18) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r7, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r8, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) setsockopt$TIPC_GROUP_LEAVE(r7, 0x10f, 0x88) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000040e211800c0001006d6198f46c616e0030000280080001001000000010001e8002000400aa0800aaaabb0000080003"], 0x68}}, 0x0) r9 = socket(0x10, 0x3, 0x0) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="5400000010000100"/20, @ANYRES32=r11, @ANYBLOB="7240146c00000000340012800c0001006d6163766c616e0024"], 0x54}}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000080)={r0}) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r9, 0xf507, 0x0) 79.513272ms ago: executing program 2 (id=9013): pselect6(0x40, &(0x7f0000000000)={0x6, 0x9, 0x7, 0xff, 0x1, 0x1, 0x0, 0x9c}, &(0x7f0000000040)={0x9, 0x2e00, 0x0, 0xe2a, 0xfff, 0x19b, 0xfffffffffffffffa, 0x6}, &(0x7f0000000080)={0x4, 0xcc2, 0x20d4, 0x686, 0x617e, 0x7f, 0x7fff, 0x1e1fb210}, &(0x7f00000000c0), &(0x7f0000000140)={&(0x7f0000000100)={[0x3]}, 0x8}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000180), 0x4) r1 = socket$unix(0x1, 0x2, 0x0) recvmmsg$unix(r1, &(0x7f0000001f40)=[{{&(0x7f00000001c0), 0x6e, &(0x7f00000014c0)=[{&(0x7f0000000240)=""/166, 0xa6}, {&(0x7f0000000300)=""/167, 0xa7}, {&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f00000013c0)=""/235, 0xeb}], 0x4, &(0x7f0000001500)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x108}}, {{&(0x7f0000001640)=@abs, 0x6e, &(0x7f0000001bc0)=[{&(0x7f00000016c0)=""/187, 0xbb}, {&(0x7f0000001780)=""/132, 0x84}, {&(0x7f0000001840)=""/139, 0x8b}, {&(0x7f0000001900)=""/208, 0xd0}, {&(0x7f0000001a00)=""/183, 0xb7}, {&(0x7f0000001ac0)=""/10, 0xa}, {&(0x7f0000001b00)=""/115, 0x73}, {&(0x7f0000001b80)=""/42, 0x2a}], 0x8, &(0x7f0000001c40)=[@rights={{0x10}}], 0x10}}, {{&(0x7f0000001c80), 0x6e, &(0x7f0000001e80)=[{&(0x7f0000001d00)=""/84, 0x54}, {&(0x7f0000001d80)=""/248, 0xf8}], 0x2, &(0x7f0000001ec0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}], 0x3, 0x2000, &(0x7f0000002000)={0x0, 0x3938700}) r14 = syz_init_net_socket$ax25(0x3, 0x2, 0xcf) ioctl$SIOCAX25OPTRT(r14, 0x89e7, &(0x7f0000002040)={@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x2, 0x56}) setsockopt$inet6_IPV6_DSTOPTS(r8, 0x29, 0x3b, &(0x7f0000002080)={0x73, 0x1, '\x00', [@ra={0x5, 0x2, 0x2}, @ra={0x5, 0x2, 0xe}, @ra={0x5, 0x2, 0x1}]}, 0x18) ioctl$IOCTL_GET_NCIDEV_IDX(r11, 0x0, &(0x7f00000020c0)=0x0) connect$nfc_raw(0xffffffffffffffff, &(0x7f0000002100)={0x27, r15, 0x0, 0x4}, 0x10) sendmmsg$inet_sctp(r3, &(0x7f0000002140), 0x0, 0x4) ioctl$sock_ax25_SIOCDELRT(r9, 0x890c, &(0x7f0000002180)={@bcast, @null, 0x3, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast]}) setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000002200)=0x2, 0x4) setsockopt$packet_add_memb(r13, 0x107, 0x1, &(0x7f0000002240)={0x0, 0x1, 0x6, @local}, 0x10) sendmsg$RDMA_NLDEV_CMD_DELLINK(r10, &(0x7f0000002340)={&(0x7f0000002280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002300)={&(0x7f00000022c0)={0x18, 0x1404, 0x10, 0x70bd27, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x884}, 0x4000) accept$netrom(r12, &(0x7f0000002380)={{0x3, @netrom}, [@bcast, @null, @rose, @remote, @netrom, @netrom, @default, @null]}, &(0x7f0000002400)=0x48) r16 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r16, 0x29, 0xc8, &(0x7f0000002440)=0x4, 0x4) r17 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r17, 0x84, 0x6e, &(0x7f0000002480)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x32}}, @in={0x2, 0x4e22, @remote}, @in6={0xa, 0x4e24, 0x8, @remote}, @in6={0xa, 0x4e22, 0x80, @private2, 0x81}], 0x58) shutdown(r7, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) sendmsg$NFNL_MSG_ACCT_DEL(r2, &(0x7f00000025c0)={&(0x7f0000002500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002580)={&(0x7f0000002540)={0x2c, 0x3, 0x7, 0x101, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFACCT_FILTER={0x4}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x2}, @NFACCT_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040007}, 0x40010) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, &(0x7f0000002600)=0x80000000, 0x4) ioctl$sock_TIOCOUTQ(r6, 0x5411, &(0x7f0000002640)) syz_emit_ethernet(0xc6, &(0x7f0000002680)={@remote, @random="506d8970987a", @val={@val={0x88a8, 0x4, 0x1, 0x2}, {0x8100, 0x3, 0x0, 0x4}}, {@generic={0x6003, "da8d771bd5abc605596d9b84ceb4915cf327d4b322ce99985478cdc35bf4365e4eadccd0e2212636677650fa0b7938f1921e29fb770f5f46c04f90d3be137e90dc0307d952e8800e508eda57521835d874e28749115dda2189280a2db1d99836c6b1ba88f4d7ac8274fd9c9a2d6fd4894fb1ad7bed18a5e3a9d2fe5442ce830d2653d8083e4544be9c0caab6eb401177f298ca8c2d9c390ff3747c8c01b83a1f52be92eb13ea6a1ce833879b22352925"}}}, 0x0) accept4(r5, &(0x7f0000002780)=@un=@abs, &(0x7f0000002800)=0x80, 0x41000) socket(0x2a, 0x801, 0x8) r18 = syz_genetlink_get_family_id$tipc(&(0x7f0000002880), r4) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, &(0x7f0000002940)={&(0x7f0000002840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002900)={&(0x7f00000028c0)={0x30, r18, 0x400, 0x70bd2d, 0x25dfdbfc, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x0) 0s ago: executing program 1 (id=9014): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%ps \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r1}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x3, 0x10, &(0x7f00000003c0)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x54}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @sched_cls, 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): 6868][T32551] netlink: 'syz.4.7760': attribute type 30 has an invalid length. [ 1051.300221][T32510] vxcan1 speed is unknown, defaulting to 1000 [ 1051.300244][T32508] wg1 speed is unknown, defaulting to 1000 [ 1051.331463][T32551] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7760'. [ 1051.409539][ T3584] bond4: (slave macvlan2): failed to get link speed/duplex [ 1052.510804][T32532] vxcan1 speed is unknown, defaulting to 1000 [ 1052.614555][T32510] wg1 speed is unknown, defaulting to 1000 [ 1052.666723][T32566] netlink: 'syz.1.7764': attribute type 3 has an invalid length. [ 1052.674834][T32566] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7764'. [ 1052.811848][T32573] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7767'. [ 1052.959348][ T49] net_ratelimit: 5 callbacks suppressed [ 1052.959368][ T49] bond4: (slave macvlan2): failed to get link speed/duplex [ 1053.193366][T32565] vxcan1 speed is unknown, defaulting to 1000 [ 1053.209615][T18906] bond4: (slave macvlan2): failed to get link speed/duplex [ 1053.330233][ T3584] bond4: (slave macvlan2): failed to get link speed/duplex [ 1053.460737][T18906] bond4: (slave macvlan2): failed to get link speed/duplex [ 1053.508605][T32532] wg1 speed is unknown, defaulting to 1000 [ 1053.579524][ T7823] bond4: (slave macvlan2): failed to get link speed/duplex [ 1053.689890][ T3584] bond4: (slave macvlan2): failed to get link speed/duplex [ 1053.810145][ T3584] bond4: (slave macvlan2): failed to get link speed/duplex [ 1053.855665][T32565] wg1 speed is unknown, defaulting to 1000 [ 1054.449416][T32588] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7771'. [ 1054.512231][T18906] bond4: (slave macvlan2): failed to get link speed/duplex [ 1054.672065][T32590] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7772'. [ 1054.689377][T32590] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7772'. [ 1054.698355][T32590] netlink: 58 bytes leftover after parsing attributes in process `syz.4.7772'. [ 1054.761390][T32591] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 1054.790443][ T5876] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1054.840481][ T12] bond4: (slave macvlan2): failed to get link speed/duplex [ 1054.909577][T11958] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1056.019678][T32611] netlink: 'syz.4.7780': attribute type 3 has an invalid length. [ 1056.428543][T32618] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7782'. [ 1056.452532][T32618] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7782'. [ 1056.569902][T32618] vlan2: entered promiscuous mode [ 1057.036727][T32624] vxcan1 speed is unknown, defaulting to 1000 [ 1057.133409][T32632] netlink: 'syz.2.7785': attribute type 178 has an invalid length. [ 1057.213457][T32631] netlink: 80 bytes leftover after parsing attributes in process `syz.2.7785'. [ 1057.831186][T32624] wg1 speed is unknown, defaulting to 1000 [ 1058.069427][T18906] net_ratelimit: 20 callbacks suppressed [ 1058.069507][T18906] bond4: (slave macvlan2): failed to get link speed/duplex [ 1058.220162][ T1333] bond4: (slave macvlan2): failed to get link speed/duplex [ 1058.321115][T32672] netlink: 'syz.0.7799': attribute type 1 has an invalid length. [ 1058.329013][T32672] netlink: 236 bytes leftover after parsing attributes in process `syz.0.7799'. [ 1058.389647][ T7823] bond4: (slave macvlan2): failed to get link speed/duplex [ 1058.486911][T32681] IPVS: set_ctl: invalid protocol: 135 172.20.20.47:20003 [ 1058.556386][ T12] bond4: (slave macvlan2): failed to get link speed/duplex [ 1058.679410][ T3584] bond4: (slave macvlan2): failed to get link speed/duplex [ 1058.800847][T18906] bond4: (slave macvlan2): failed to get link speed/duplex [ 1058.829370][T32691] netlink: 'syz.0.7803': attribute type 3 has an invalid length. [ 1058.930431][ T12] bond4: (slave macvlan2): failed to get link speed/duplex [ 1059.069483][T18906] bond4: (slave macvlan2): failed to get link speed/duplex [ 1059.280148][T18906] bond4: (slave macvlan2): failed to get link speed/duplex [ 1059.409537][T18906] bond4: (slave macvlan2): failed to get link speed/duplex [ 1059.956847][T32719] FAULT_INJECTION: forcing a failure. [ 1059.956847][T32719] name failslab, interval 1, probability 0, space 0, times 0 [ 1060.039246][T32719] CPU: 1 UID: 0 PID: 32719 Comm: syz.4.7810 Not tainted syzkaller #0 PREEMPT(full) [ 1060.039275][T32719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1060.039287][T32719] Call Trace: [ 1060.039297][T32719] [ 1060.039306][T32719] dump_stack_lvl+0x189/0x250 [ 1060.039334][T32719] ? __pfx____ratelimit+0x10/0x10 [ 1060.039356][T32719] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1060.039378][T32719] ? __pfx__printk+0x10/0x10 [ 1060.039405][T32719] ? __pfx___might_resched+0x10/0x10 [ 1060.039424][T32719] ? fs_reclaim_acquire+0x7d/0x100 [ 1060.039447][T32719] should_fail_ex+0x414/0x560 [ 1060.039479][T32719] should_failslab+0xa8/0x100 [ 1060.039505][T32719] __kmalloc_cache_noprof+0x70/0x3d0 [ 1060.039527][T32719] ? xfrm_policy_alloc+0x78/0x2b0 [ 1060.039553][T32719] xfrm_policy_alloc+0x78/0x2b0 [ 1060.039575][T32719] xfrm_policy_construct+0x39/0x6b0 [ 1060.039590][T32719] ? lockdep_hardirqs_on+0x9c/0x150 [ 1060.039615][T32719] xfrm_add_policy+0x267/0x800 [ 1060.039644][T32719] ? __pfx_xfrm_add_policy+0x10/0x10 [ 1060.039664][T32719] ? apparmor_capable+0x137/0x1b0 [ 1060.039691][T32719] ? __nla_parse+0x40/0x60 [ 1060.039712][T32719] xfrm_user_rcv_msg+0x7a3/0xab0 [ 1060.039756][T32719] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 1060.039819][T32719] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1060.039845][T32719] ? rcu_is_watching+0x15/0xb0 [ 1060.039865][T32719] ? trace_contention_end+0x39/0x120 [ 1060.039884][T32719] ? __mutex_lock+0x335/0x1350 [ 1060.039913][T32719] netlink_rcv_skb+0x205/0x470 [ 1060.039934][T32719] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 1060.039958][T32719] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1060.039994][T32719] ? netlink_deliver_tap+0x2e/0x1b0 [ 1060.040012][T32719] ? netlink_deliver_tap+0x2e/0x1b0 [ 1060.040033][T32719] xfrm_netlink_rcv+0x79/0x90 [ 1060.040055][T32719] netlink_unicast+0x82f/0x9e0 [ 1060.040091][T32719] ? __pfx_netlink_unicast+0x10/0x10 [ 1060.040122][T32719] ? netlink_sendmsg+0x642/0xb30 [ 1060.040138][T32719] ? skb_put+0x11b/0x210 [ 1060.040163][T32719] netlink_sendmsg+0x805/0xb30 [ 1060.040192][T32719] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1060.040215][T32719] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1060.040236][T32719] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1060.040254][T32719] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1060.040275][T32719] __sock_sendmsg+0x21c/0x270 [ 1060.040304][T32719] ____sys_sendmsg+0x505/0x830 [ 1060.040332][T32719] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1060.040364][T32719] ? import_iovec+0x74/0xa0 [ 1060.040389][T32719] ___sys_sendmsg+0x21f/0x2a0 [ 1060.040413][T32719] ? __pfx____sys_sendmsg+0x10/0x10 [ 1060.040476][T32719] ? __fget_files+0x2a/0x420 [ 1060.040493][T32719] ? __fget_files+0x3a0/0x420 [ 1060.040522][T32719] __x64_sys_sendmsg+0x19b/0x260 [ 1060.040546][T32719] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1060.040578][T32719] ? __pfx_ksys_write+0x10/0x10 [ 1060.040598][T32719] ? rcu_is_watching+0x15/0xb0 [ 1060.040621][T32719] ? do_syscall_64+0xbe/0x3b0 [ 1060.040646][T32719] do_syscall_64+0xfa/0x3b0 [ 1060.040663][T32719] ? lockdep_hardirqs_on+0x9c/0x150 [ 1060.040681][T32719] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1060.040699][T32719] ? clear_bhb_loop+0x60/0xb0 [ 1060.040721][T32719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1060.040738][T32719] RIP: 0033:0x7fd9b518eba9 [ 1060.040755][T32719] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1060.040772][T32719] RSP: 002b:00007fd9b606e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1060.040792][T32719] RAX: ffffffffffffffda RBX: 00007fd9b53d5fa0 RCX: 00007fd9b518eba9 [ 1060.040805][T32719] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000003 [ 1060.040817][T32719] RBP: 00007fd9b606e090 R08: 0000000000000000 R09: 0000000000000000 [ 1060.040827][T32719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1060.040837][T32719] R13: 00007fd9b53d6038 R14: 00007fd9b53d5fa0 R15: 00007ffe31370f58 [ 1060.040869][T32719] [ 1060.478355][T32724] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1060.640854][T32724] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1060.708310][T32724] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1060.777738][T32724] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1061.106815][ T7462] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1061.133415][ T49] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1061.158206][ T49] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1061.196274][ T49] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1061.470948][T32753] netlink: 'syz.0.7819': attribute type 3 has an invalid length. [ 1061.543526][T32755] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 1065.149314][ T3584] net_ratelimit: 14 callbacks suppressed [ 1065.149337][ T3584] bond4: (slave macvlan2): failed to get link speed/duplex [ 1065.402273][ T362] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7837'. [ 1065.453312][ T365] smc: removing ib device syz2 [ 1065.560343][ T368] tipc: Enabled bearer , priority 0 [ 1065.629844][ T370] syzkaller0: entered promiscuous mode [ 1065.635353][ T370] syzkaller0: entered allmulticast mode [ 1065.659913][ T3584] bond4: (slave macvlan2): failed to get link speed/duplex [ 1065.683809][ T368] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7839'. [ 1065.804058][ T368] tipc: Resetting bearer [ 1065.829733][ T3584] bond4: (slave macvlan2): failed to get link speed/duplex [ 1065.904475][ T366] tipc: Resetting bearer [ 1065.947191][ T366] tipc: Disabling bearer [ 1066.008726][ T375] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7841'. [ 1066.168874][ T380] netlink: 68 bytes leftover after parsing attributes in process `syz.4.7842'. [ 1066.240490][ T1000] bond4: (slave macvlan2): failed to get link speed/duplex [ 1066.370084][ T1000] bond4: (slave macvlan2): failed to get link speed/duplex [ 1066.479796][ T3584] bond4: (slave macvlan2): failed to get link speed/duplex [ 1066.591020][ T3584] bond4: (slave macvlan2): failed to get link speed/duplex [ 1066.699743][ T7462] bond4: (slave macvlan2): failed to get link speed/duplex [ 1066.812460][ T1333] bond4: (slave macvlan2): failed to get link speed/duplex [ 1066.942243][ T1333] bond4: (slave macvlan2): failed to get link speed/duplex [ 1067.341656][ T420] netlink: 'syz.0.7856': attribute type 11 has an invalid length. [ 1067.679784][T26556] Bluetooth: hci4: link tx timeout [ 1067.687932][T26556] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 1067.699577][T26556] Bluetooth: hci4: link tx timeout [ 1067.701595][ T425] wg1 speed is unknown, defaulting to 1000 [ 1067.704702][T26556] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1067.720858][T26556] Bluetooth: hci4: link tx timeout [ 1067.725986][T26556] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 1067.734274][T26556] Bluetooth: hci4: link tx timeout [ 1067.739833][T26556] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1067.945512][ T434] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7859'. [ 1067.984227][ T437] netlink: 'syz.3.7860': attribute type 1 has an invalid length. [ 1067.985726][ T434] netlink: 'syz.0.7859': attribute type 2 has an invalid length. [ 1068.001407][ T437] netlink: 184 bytes leftover after parsing attributes in process `syz.3.7860'. [ 1068.019599][ T437] netlink: 'syz.3.7860': attribute type 1 has an invalid length. [ 1068.028263][ T437] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7860'. [ 1068.287424][ T444] netlink: 212288 bytes leftover after parsing attributes in process `syz.0.7862'. [ 1068.613848][ T454] netlink: 128 bytes leftover after parsing attributes in process `syz.0.7867'. [ 1068.633346][ T455] netlink: 248 bytes leftover after parsing attributes in process `syz.4.7865'. [ 1069.448775][ T468] netlink: 'syz.4.7869': attribute type 1 has an invalid length. [ 1069.534646][ T468] netlink: 'syz.4.7869': attribute type 15 has an invalid length. [ 1069.659983][ T474] FAULT_INJECTION: forcing a failure. [ 1069.659983][ T474] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1069.679660][ T474] CPU: 0 UID: 0 PID: 474 Comm: syz.0.7871 Not tainted syzkaller #0 PREEMPT(full) [ 1069.679685][ T474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1069.679696][ T474] Call Trace: [ 1069.679705][ T474] [ 1069.679713][ T474] dump_stack_lvl+0x189/0x250 [ 1069.679741][ T474] ? __pfx____ratelimit+0x10/0x10 [ 1069.679763][ T474] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1069.679791][ T474] ? __pfx__printk+0x10/0x10 [ 1069.679828][ T474] should_fail_ex+0x414/0x560 [ 1069.679858][ T474] _copy_from_user+0x2d/0xb0 [ 1069.679879][ T474] sctp_setsockopt+0x19f/0x1200 [ 1069.679900][ T474] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1069.679928][ T474] do_sock_setsockopt+0x17c/0x1b0 [ 1069.679954][ T474] __x64_sys_setsockopt+0x13f/0x1b0 [ 1069.679979][ T474] do_syscall_64+0xfa/0x3b0 [ 1069.679999][ T474] ? lockdep_hardirqs_on+0x9c/0x150 [ 1069.680017][ T474] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1069.680034][ T474] ? clear_bhb_loop+0x60/0xb0 [ 1069.680057][ T474] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1069.680073][ T474] RIP: 0033:0x7f8742d8eba9 [ 1069.680090][ T474] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1069.680105][ T474] RSP: 002b:00007f8743c83038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1069.680125][ T474] RAX: ffffffffffffffda RBX: 00007f8742fd5fa0 RCX: 00007f8742d8eba9 [ 1069.680138][ T474] RDX: 0000000000000064 RSI: 0000000000000084 RDI: 0000000000000003 [ 1069.680149][ T474] RBP: 00007f8743c83090 R08: 0000000000000010 R09: 0000000000000000 [ 1069.680160][ T474] R10: 0000200000001a40 R11: 0000000000000246 R12: 0000000000000001 [ 1069.680172][ T474] R13: 00007f8742fd6038 R14: 00007f8742fd5fa0 R15: 00007fff68a61d48 [ 1069.680202][ T474] [ 1069.886315][T26556] Bluetooth: hci4: command 0x0405 tx timeout [ 1069.989572][ T479] netlink: 'syz.3.7874': attribute type 58 has an invalid length. [ 1070.205796][ T487] wg1 speed is unknown, defaulting to 1000 [ 1070.206537][ T7462] net_ratelimit: 19 callbacks suppressed [ 1070.206554][ T7462] bond4: (slave macvlan2): failed to get link speed/duplex [ 1070.371124][ T1333] bond4: (slave macvlan2): failed to get link speed/duplex [ 1070.499830][ T1333] bond4: (slave macvlan2): failed to get link speed/duplex [ 1070.679486][ T1333] bond4: (slave macvlan2): failed to get link speed/duplex [ 1070.695476][ T486] delete_channel: no stack [ 1070.918846][ T523] FAULT_INJECTION: forcing a failure. [ 1070.918846][ T523] name failslab, interval 1, probability 0, space 0, times 0 [ 1070.932068][ T523] CPU: 0 UID: 0 PID: 523 Comm: syz.0.7886 Not tainted syzkaller #0 PREEMPT(full) [ 1070.932094][ T523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1070.932105][ T523] Call Trace: [ 1070.932115][ T523] [ 1070.932124][ T523] dump_stack_lvl+0x189/0x250 [ 1070.932149][ T523] ? __pfx____ratelimit+0x10/0x10 [ 1070.932169][ T523] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1070.932190][ T523] ? __pfx__printk+0x10/0x10 [ 1070.932215][ T523] ? __lock_acquire+0xab9/0xd20 [ 1070.932249][ T523] should_fail_ex+0x414/0x560 [ 1070.932278][ T523] should_failslab+0xa8/0x100 [ 1070.932305][ T523] kmem_cache_alloc_noprof+0x73/0x3c0 [ 1070.932327][ T523] ? sctp_get_port_local+0x6d3/0x1680 [ 1070.932354][ T523] sctp_get_port_local+0x6d3/0x1680 [ 1070.932389][ T523] ? __pfx_sctp_get_port_local+0x10/0x10 [ 1070.932413][ T523] ? sctp_bind_addr_match+0x28b/0x2b0 [ 1070.932437][ T523] sctp_do_bind+0x4ea/0x940 [ 1070.932471][ T523] sctp_setsockopt_bindx+0x260/0x430 [ 1070.932500][ T523] sctp_setsockopt+0x7eb/0x1200 [ 1070.932520][ T523] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1070.932547][ T523] do_sock_setsockopt+0x17c/0x1b0 [ 1070.932572][ T523] __x64_sys_setsockopt+0x13f/0x1b0 [ 1070.932595][ T523] do_syscall_64+0xfa/0x3b0 [ 1070.932612][ T523] ? lockdep_hardirqs_on+0x9c/0x150 [ 1070.932629][ T523] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1070.932647][ T523] ? clear_bhb_loop+0x60/0xb0 [ 1070.932669][ T523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1070.932704][ T523] RIP: 0033:0x7f8742d8eba9 [ 1070.932720][ T523] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1070.932735][ T523] RSP: 002b:00007f8743c83038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1070.932752][ T523] RAX: ffffffffffffffda RBX: 00007f8742fd5fa0 RCX: 00007f8742d8eba9 [ 1070.932765][ T523] RDX: 0000000000000064 RSI: 0000000000000084 RDI: 0000000000000003 [ 1070.932776][ T523] RBP: 00007f8743c83090 R08: 0000000000000010 R09: 0000000000000000 [ 1070.932786][ T523] R10: 0000200000001a40 R11: 0000000000000246 R12: 0000000000000001 [ 1070.932797][ T523] R13: 00007f8742fd6038 R14: 00007f8742fd5fa0 R15: 00007fff68a61d48 [ 1070.932826][ T523] [ 1070.939383][ T7823] bond4: (slave macvlan2): failed to get link speed/duplex [ 1071.376399][ T1333] bond4: (slave macvlan2): failed to get link speed/duplex [ 1071.541542][ T3584] bond4: (slave macvlan2): failed to get link speed/duplex [ 1071.650044][ T1000] bond4: (slave macvlan2): failed to get link speed/duplex [ 1071.770707][ T49] bond4: (slave macvlan2): failed to get link speed/duplex [ 1071.831181][ T557] __nla_validate_parse: 6 callbacks suppressed [ 1071.831203][ T557] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7893'. [ 1071.884470][ T557] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1071.961665][ T561] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7896'. [ 1072.058480][ T571] FAULT_INJECTION: forcing a failure. [ 1072.058480][ T571] name failslab, interval 1, probability 0, space 0, times 0 [ 1072.093382][ T568] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7896'. [ 1072.096837][ T574] netlink: 112 bytes leftover after parsing attributes in process `syz.2.7897'. [ 1072.109572][T16841] Bluetooth: hci4: command 0x0405 tx timeout [ 1072.120909][ T571] CPU: 1 UID: 0 PID: 571 Comm: syz.1.7898 Not tainted syzkaller #0 PREEMPT(full) [ 1072.120931][ T571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1072.120940][ T571] Call Trace: [ 1072.120947][ T571] [ 1072.120954][ T571] dump_stack_lvl+0x189/0x250 [ 1072.120979][ T571] ? __pfx____ratelimit+0x10/0x10 [ 1072.120999][ T571] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1072.121016][ T571] ? __pfx__printk+0x10/0x10 [ 1072.121031][ T571] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1072.121052][ T571] ? sctp_get_port_local+0xe5d/0x1680 [ 1072.121070][ T571] should_fail_ex+0x414/0x560 [ 1072.121093][ T571] should_failslab+0xa8/0x100 [ 1072.121113][ T571] __kmalloc_cache_noprof+0x70/0x3d0 [ 1072.121131][ T571] ? sctp_add_bind_addr+0x8c/0x370 [ 1072.121147][ T571] sctp_add_bind_addr+0x8c/0x370 [ 1072.121159][ T571] ? sctp_auto_asconf_init+0x15c/0x1e0 [ 1072.121177][ T571] sctp_do_bind+0x5ab/0x940 [ 1072.121203][ T571] sctp_setsockopt_bindx+0x260/0x430 [ 1072.121225][ T571] sctp_setsockopt+0x7eb/0x1200 [ 1072.121240][ T571] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1072.121262][ T571] do_sock_setsockopt+0x17c/0x1b0 [ 1072.121282][ T571] __x64_sys_setsockopt+0x13f/0x1b0 [ 1072.121302][ T571] do_syscall_64+0xfa/0x3b0 [ 1072.121317][ T571] ? lockdep_hardirqs_on+0x9c/0x150 [ 1072.121331][ T571] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1072.121345][ T571] ? clear_bhb_loop+0x60/0xb0 [ 1072.121364][ T571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1072.121378][ T571] RIP: 0033:0x7fef6278eba9 [ 1072.121392][ T571] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1072.121402][ T571] RSP: 002b:00007fef636e9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1072.121417][ T571] RAX: ffffffffffffffda RBX: 00007fef629d5fa0 RCX: 00007fef6278eba9 [ 1072.121426][ T571] RDX: 0000000000000064 RSI: 0000000000000084 RDI: 0000000000000003 [ 1072.121434][ T571] RBP: 00007fef636e9090 R08: 0000000000000010 R09: 0000000000000000 [ 1072.121442][ T571] R10: 0000200000001a40 R11: 0000000000000246 R12: 0000000000000001 [ 1072.121450][ T571] R13: 00007fef629d6038 R14: 00007fef629d5fa0 R15: 00007ffe35bd32a8 [ 1072.121474][ T571] [ 1072.381418][ T576] netlink: 'syz.2.7897': attribute type 10 has an invalid length. [ 1072.391937][ T576] netlink: 'syz.2.7897': attribute type 10 has an invalid length. [ 1072.435390][ T576] dummy0: entered promiscuous mode [ 1072.552364][ T573] netlink: 'syz.3.7899': attribute type 1 has an invalid length. [ 1072.563440][ T576] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1072.609378][ T573] netlink: 'syz.3.7899': attribute type 1 has an invalid length. [ 1072.996261][ T589] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7904'. [ 1073.491483][ T616] netlink: 'syz.3.7911': attribute type 3 has an invalid length. [ 1073.665727][ T618] wg1 speed is unknown, defaulting to 1000 [ 1074.141200][ T655] netlink: 'syz.1.7924': attribute type 3 has an invalid length. [ 1074.190379][T16841] Bluetooth: hci4: command 0x0405 tx timeout [ 1074.450464][ T49] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1074.577883][ T49] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1074.627231][ T49] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1074.658122][ T49] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1075.134607][ T701] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1075.209596][ T7823] net_ratelimit: 22 callbacks suppressed [ 1075.209616][ T7823] bond4: (slave macvlan2): failed to get link speed/duplex [ 1075.359445][ T7823] bond4: (slave macvlan2): failed to get link speed/duplex [ 1075.434496][ T707] wg1 speed is unknown, defaulting to 1000 [ 1075.469373][T18906] bond4: (slave macvlan2): failed to get link speed/duplex [ 1075.495415][ T708] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.7937'. [ 1075.512059][ T708] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7937'. [ 1075.541848][ T708] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1075.589421][T18906] bond4: (slave macvlan2): failed to get link speed/duplex [ 1075.607484][ T722] netlink: 'syz.3.7941': attribute type 3 has an invalid length. [ 1075.701971][ T1000] bond4: (slave macvlan2): failed to get link speed/duplex [ 1075.840360][ T1333] bond4: (slave macvlan2): failed to get link speed/duplex [ 1075.959631][ T12] bond4: (slave macvlan2): failed to get link speed/duplex [ 1076.069946][ T1333] bond4: (slave macvlan2): failed to get link speed/duplex [ 1076.179453][ T1333] bond4: (slave macvlan2): failed to get link speed/duplex [ 1076.737015][ T744] tipc: Enabled bearer , priority 0 [ 1076.757484][ T744] syzkaller0: entered promiscuous mode [ 1076.775464][ T744] syzkaller0: entered allmulticast mode [ 1076.876844][ T746] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7949'. [ 1076.878659][ T744] tipc: Resetting bearer [ 1076.902967][ T746] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7949'. [ 1076.941025][ T747] netlink: 'syz.2.7949': attribute type 10 has an invalid length. [ 1076.951741][ T743] tipc: Resetting bearer [ 1076.998395][ T743] tipc: Disabling bearer [ 1077.430986][ T761] netlink: 68 bytes leftover after parsing attributes in process `syz.1.7955'. [ 1077.453831][ T761] netlink: 'syz.1.7955': attribute type 1 has an invalid length. [ 1077.487907][ T763] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7954'. [ 1077.640871][ T761] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1077.699253][ T769] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7956'. [ 1077.855808][ T761] bond3: (slave geneve2): making interface the new active one [ 1077.882938][ T761] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 1077.904475][ T768] bond3: entered promiscuous mode [ 1077.933874][ T768] geneve2: entered promiscuous mode [ 1077.989217][ T777] wg1 speed is unknown, defaulting to 1000 [ 1078.180652][ T779] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7959'. [ 1078.218442][ T779] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7959'. [ 1078.582456][ T801] netlink: 'syz.3.7966': attribute type 1 has an invalid length. [ 1078.758815][ T811] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7969'. [ 1079.204133][ T826] netlink: 'syz.4.7971': attribute type 10 has an invalid length. [ 1079.330439][ T831] netlink: 'syz.2.7975': attribute type 1 has an invalid length. [ 1079.341030][ T826] team0: Port device dummy0 added [ 1079.355790][ T831] netlink: 3 bytes leftover after parsing attributes in process `syz.2.7975'. [ 1079.401694][ T821] netlink: 'syz.4.7971': attribute type 10 has an invalid length. [ 1079.520398][ T837] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7978'. [ 1079.582080][ T821] team0: Port device dummy0 removed [ 1079.602584][ T821] dummy0: entered promiscuous mode [ 1079.611730][ T821] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1079.632167][ T839] veth0_to_team: entered promiscuous mode [ 1080.070972][ T861] netlink: 'syz.2.7988': attribute type 8 has an invalid length. [ 1080.629626][ T881] net_ratelimit: 28 callbacks suppressed [ 1080.629645][ T881] openvswitch: netlink: Flow actions attr not present in new flow. [ 1080.750623][ T867] tipc: Enabling of bearer rejected, failed to enable media [ 1080.889503][ T7823] bond7: (slave macvlan2): failed to get link speed/duplex [ 1080.942848][ T1000] bond4: (slave macvlan2): failed to get link speed/duplex [ 1081.030113][ T1000] bond7: (slave macvlan2): failed to get link speed/duplex [ 1081.077540][ T896] netlink: 'syz.1.7996': attribute type 3 has an invalid length. [ 1081.089771][ T1000] bond4: (slave macvlan2): failed to get link speed/duplex [ 1081.115903][ T897] netlink: 'syz.3.7998': attribute type 6 has an invalid length. [ 1081.149744][T18906] bond7: (slave macvlan2): failed to get link speed/duplex [ 1081.200195][ T1000] bond4: (slave macvlan2): failed to get link speed/duplex [ 1081.260194][ T1000] bond7: (slave macvlan2): failed to get link speed/duplex [ 1081.310425][ T1000] bond4: (slave macvlan2): failed to get link speed/duplex [ 1081.391559][T18906] bond7: (slave macvlan2): failed to get link speed/duplex [ 1082.096907][ T953] __nla_validate_parse: 7 callbacks suppressed [ 1082.096922][ T953] netlink: 100 bytes leftover after parsing attributes in process `syz.4.8017'. [ 1082.161935][ T955] netlink: 'syz.0.8018': attribute type 3 has an invalid length. [ 1082.617081][ T980] tipc: Enabled bearer , priority 0 [ 1082.654794][ T980] syzkaller0: entered promiscuous mode [ 1082.656875][ T982] netlink: 200 bytes leftover after parsing attributes in process `syz.1.8026'. [ 1082.680987][ T980] syzkaller0: entered allmulticast mode [ 1082.714502][ T982] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8026'. [ 1082.719017][ T980] tipc: Resetting bearer [ 1082.768151][ T979] tipc: Resetting bearer [ 1082.883892][ T979] tipc: Disabling bearer [ 1083.076248][ T995] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8032'. [ 1084.173842][ T1042] netlink: 'syz.1.8045': attribute type 3 has an invalid length. [ 1084.564229][ T1068] tipc: Enabled bearer , priority 0 [ 1084.597441][ T1068] syzkaller0: entered promiscuous mode [ 1084.616117][ T1068] syzkaller0: entered allmulticast mode [ 1084.814201][ T1078] tipc: Resetting bearer [ 1084.838584][ T1079] netlink: 152 bytes leftover after parsing attributes in process `syz.4.8055'. [ 1085.230165][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1085.475352][ T1066] tipc: Resetting bearer [ 1085.649400][T32480] tipc: Node number set to 3784622716 [ 1085.679889][ T1066] tipc: Disabling bearer [ 1085.701540][ T1104] netlink: 'syz.1.8064': attribute type 1 has an invalid length. [ 1085.734477][ T1108] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8065'. [ 1085.821347][ T1104] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 1085.880240][ T7823] net_ratelimit: 63 callbacks suppressed [ 1085.880262][ T7823] bond7: (slave macvlan2): failed to get link speed/duplex [ 1085.907213][ T1122] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8067'. [ 1085.917586][ T7823] bond4: (slave macvlan2): failed to get link speed/duplex [ 1086.010555][T18906] bond7: (slave macvlan2): failed to get link speed/duplex [ 1086.053424][T18906] bond4: (slave macvlan2): failed to get link speed/duplex [ 1086.160665][ T7823] bond7: (slave macvlan2): failed to get link speed/duplex [ 1086.190163][ T7823] bond4: (slave macvlan2): failed to get link speed/duplex [ 1086.279498][ T1000] bond7: (slave macvlan2): failed to get link speed/duplex [ 1086.309510][ T7823] bond4: (slave macvlan2): failed to get link speed/duplex [ 1086.389577][T18906] bond7: (slave macvlan2): failed to get link speed/duplex [ 1086.419328][T18906] bond4: (slave macvlan2): failed to get link speed/duplex [ 1086.893991][ T1149] netlink: 'syz.2.8076': attribute type 3 has an invalid length. [ 1087.170157][ T1158] bond0: (slave dummy0): Releasing backup interface [ 1087.207110][ T1158] dummy0: left promiscuous mode [ 1087.299358][ T1158] netlink: 'syz.2.8081': attribute type 10 has an invalid length. [ 1087.320599][ T1158] bond0: (slave wlan1): Opening slave failed [ 1087.932709][ T1209] netlink: 'syz.2.8096': attribute type 3 has an invalid length. [ 1088.009016][ T1211] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8098'. [ 1088.084895][ T1217] !: renamed from dummy0 [ 1088.230746][ T1223] wg1 speed is unknown, defaulting to 1000 [ 1088.654254][ T1238] Bluetooth: MGMT ver 1.23 [ 1089.250034][ T1256] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8111'. [ 1089.359656][ T1261] netlink: 'syz.1.8112': attribute type 3 has an invalid length. [ 1089.398205][ T1256] netlink: 76 bytes leftover after parsing attributes in process `syz.4.8111'. [ 1089.484068][ T1263] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8113'. [ 1089.529722][ T1263] sch_tbf: burst 6 is lower than device team_slave_0 mtu (1514) ! [ 1089.897202][ T1285] netlink: 'syz.4.8120': attribute type 21 has an invalid length. [ 1090.029745][ T1293] netlink: 7 bytes leftover after parsing attributes in process `syz.4.8120'. [ 1090.083031][ T1285] netlink: 156 bytes leftover after parsing attributes in process `syz.4.8120'. [ 1090.369764][ T1310] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8129'. [ 1090.398589][ T1310] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8129'. [ 1090.460893][ T1312] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8129'. [ 1090.492049][ T1310] netlink: 'syz.1.8129': attribute type 12 has an invalid length. [ 1090.533494][ T1310] netlink: 'syz.1.8129': attribute type 11 has an invalid length. [ 1090.543929][ T1317] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8132'. [ 1090.628363][ T1323] netlink: 'syz.2.8132': attribute type 10 has an invalid length. [ 1090.799475][ T1335] netlink: 'syz.0.8137': attribute type 21 has an invalid length. [ 1090.811855][ T1323] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 1090.825834][ T1323] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 1090.834829][ T1323] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1090.892392][ T12] net_ratelimit: 55 callbacks suppressed [ 1090.892413][ T12] bond7: (slave macvlan2): failed to get link speed/duplex [ 1090.915544][ T1334] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1090.930365][ T12] bond4: (slave macvlan2): failed to get link speed/duplex [ 1090.938492][ T1334] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 1091.019365][ T49] bond7: (slave macvlan2): failed to get link speed/duplex [ 1091.041758][ T49] bond4: (slave macvlan2): failed to get link speed/duplex [ 1091.163727][ T49] bond7: (slave macvlan2): failed to get link speed/duplex [ 1091.203970][ T49] bond4: (slave macvlan2): failed to get link speed/duplex [ 1091.289676][ T49] bond7: (slave macvlan2): failed to get link speed/duplex [ 1091.330000][ T49] bond4: (slave macvlan2): failed to get link speed/duplex [ 1091.429571][ T7462] bond7: (slave macvlan2): failed to get link speed/duplex [ 1092.070638][ T1397] netlink: 'syz.4.8152': attribute type 1 has an invalid length. [ 1092.409364][ T1397] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1092.665073][ T1417] netlink: 'syz.3.8160': attribute type 1 has an invalid length. [ 1092.685052][ T1417] netlink: 'syz.3.8160': attribute type 2 has an invalid length. [ 1093.256630][ T1442] __nla_validate_parse: 9 callbacks suppressed [ 1093.256650][ T1442] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8169'. [ 1094.037620][ T1470] syz_tun: entered allmulticast mode [ 1094.083483][ T1470] dvmrp8: entered allmulticast mode [ 1094.152924][ T1475] netlink: 'syz.4.8182': attribute type 13 has an invalid length. [ 1094.174756][ T1475] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8182'. [ 1094.208446][ T1475] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8182'. [ 1094.366870][ T1470] syz_tun: left allmulticast mode [ 1094.421960][ T1470] dvmrp8: left allmulticast mode [ 1094.663489][ T1500] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8191'. [ 1094.678353][ T1501] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8191'. [ 1094.775739][ T1509] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8194'. [ 1094.845752][ T1512] netlink: 68 bytes leftover after parsing attributes in process `syz.3.8195'. [ 1095.284239][ T1533] validate_nla: 2 callbacks suppressed [ 1095.284257][ T1533] netlink: 'syz.1.8201': attribute type 3 has an invalid length. [ 1095.667137][ T1545] netlink: 364 bytes leftover after parsing attributes in process `syz.1.8205'. [ 1095.719847][ T1546] nicvf0: entered promiscuous mode [ 1095.737234][T18906] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 20001 - 0 [ 1095.752630][T18906] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 20001 - 0 [ 1095.774216][T18906] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 20001 - 0 [ 1095.778576][ T1552] netlink: 68 bytes leftover after parsing attributes in process `syz.4.8208'. [ 1095.784344][T18906] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 20001 - 0 [ 1095.825909][ T1545] bridge_slave_0: left allmulticast mode [ 1095.845034][ T1545] bridge_slave_0: left promiscuous mode [ 1095.890336][ T1545] bridge0: port 1(bridge_slave_0) entered disabled state [ 1095.914351][ T1545] bridge_slave_1: left allmulticast mode [ 1095.921011][ T1545] bridge_slave_1: left promiscuous mode [ 1095.936636][ T1545] bridge0: port 2(bridge_slave_1) entered disabled state [ 1095.958746][ T1545] bond0: (slave bond_slave_0): Releasing backup interface [ 1095.967058][ T1545] bond_slave_0: left promiscuous mode [ 1095.975159][ T1545] bond0: (slave bond_slave_1): Releasing backup interface [ 1095.986277][ T1545] bond_slave_1: left promiscuous mode [ 1095.995037][ T1545] team0: Port device team_slave_0 removed [ 1096.005076][ T1545] team0: Port device team_slave_1 removed [ 1096.017395][ T1545] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1096.025815][ T1545] batman_adv: batadv0: Removing interface: 26±ÿ [ 1096.028246][ T1561] netlink: 'syz.3.8212': attribute type 3 has an invalid length. [ 1096.041643][ T1545] net_ratelimit: 70 callbacks suppressed [ 1096.041659][ T1545] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1096.102019][T18906] bond7: (slave macvlan2): failed to get link speed/duplex [ 1096.161045][ T7462] bond4: (slave macvlan2): failed to get link speed/duplex [ 1096.289459][ T12] bond4: (slave macvlan2): failed to get link speed/duplex [ 1096.309962][ T7462] bond7: (slave macvlan2): failed to get link speed/duplex [ 1096.392183][ T1580] !: renamed from dummy0 (while UP) [ 1096.420116][ T7823] bond4: (slave macvlan2): failed to get link speed/duplex [ 1096.437078][ T7462] bond7: (slave macvlan2): failed to get link speed/duplex [ 1096.487608][ T1585] FAULT_INJECTION: forcing a failure. [ 1096.487608][ T1585] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1096.529290][ T7823] bond4: (slave macvlan2): failed to get link speed/duplex [ 1096.539130][ T1585] CPU: 0 UID: 0 PID: 1585 Comm: syz.2.8222 Not tainted syzkaller #0 PREEMPT(full) [ 1096.539158][ T1585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1096.539168][ T1585] Call Trace: [ 1096.539175][ T1585] [ 1096.539183][ T1585] dump_stack_lvl+0x189/0x250 [ 1096.539205][ T1585] ? __pfx____ratelimit+0x10/0x10 [ 1096.539223][ T1585] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1096.539242][ T1585] ? __pfx__printk+0x10/0x10 [ 1096.539263][ T1585] ? __might_fault+0xb0/0x130 [ 1096.539294][ T1585] should_fail_ex+0x414/0x560 [ 1096.539320][ T1585] _copy_from_user+0x2d/0xb0 [ 1096.539340][ T1585] __sys_bpf+0x1ed/0x870 [ 1096.539365][ T1585] ? __pfx___sys_bpf+0x10/0x10 [ 1096.539396][ T1585] ? ksys_write+0x22a/0x250 [ 1096.539434][ T1585] ? __pfx_ksys_write+0x10/0x10 [ 1096.539451][ T1585] ? rcu_is_watching+0x15/0xb0 [ 1096.539477][ T1585] __x64_sys_bpf+0x7c/0x90 [ 1096.539496][ T1585] do_syscall_64+0xfa/0x3b0 [ 1096.539514][ T1585] ? lockdep_hardirqs_on+0x9c/0x150 [ 1096.539531][ T1585] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1096.539549][ T1585] ? clear_bhb_loop+0x60/0xb0 [ 1096.539569][ T1585] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1096.539585][ T1585] RIP: 0033:0x7fd08e38eba9 [ 1096.539601][ T1585] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1096.539616][ T1585] RSP: 002b:00007fd08f1f1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1096.539635][ T1585] RAX: ffffffffffffffda RBX: 00007fd08e5d5fa0 RCX: 00007fd08e38eba9 [ 1096.539647][ T1585] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 1096.539657][ T1585] RBP: 00007fd08f1f1090 R08: 0000000000000000 R09: 0000000000000000 [ 1096.539667][ T1585] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1096.539677][ T1585] R13: 00007fd08e5d6038 R14: 00007fd08e5d5fa0 R15: 00007fffd91c4f68 [ 1096.539706][ T1585] [ 1096.730289][ T7462] bond7: (slave macvlan2): failed to get link speed/duplex [ 1096.766333][ T1589] wg1 speed is unknown, defaulting to 1000 [ 1096.767433][T18906] bond4: (slave macvlan2): failed to get link speed/duplex [ 1097.198405][ T1606] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8228'. [ 1098.301589][ T1645] FAULT_INJECTION: forcing a failure. [ 1098.301589][ T1645] name failslab, interval 1, probability 0, space 0, times 0 [ 1098.339555][ T1645] CPU: 1 UID: 0 PID: 1645 Comm: syz.0.8238 Not tainted syzkaller #0 PREEMPT(full) [ 1098.339584][ T1645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1098.339596][ T1645] Call Trace: [ 1098.339604][ T1645] [ 1098.339613][ T1645] dump_stack_lvl+0x189/0x250 [ 1098.339642][ T1645] ? __pfx____ratelimit+0x10/0x10 [ 1098.339664][ T1645] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1098.339685][ T1645] ? __pfx__printk+0x10/0x10 [ 1098.339715][ T1645] ? __pfx___might_resched+0x10/0x10 [ 1098.339732][ T1645] ? fs_reclaim_acquire+0x7d/0x100 [ 1098.339754][ T1645] should_fail_ex+0x414/0x560 [ 1098.339783][ T1645] should_failslab+0xa8/0x100 [ 1098.339810][ T1645] kmem_cache_alloc_noprof+0x73/0x3c0 [ 1098.339832][ T1645] ? ptlock_alloc+0x20/0x70 [ 1098.339859][ T1645] ptlock_alloc+0x20/0x70 [ 1098.339880][ T1645] pte_alloc_one+0x7d/0x170 [ 1098.339902][ T1645] __handle_mm_fault+0x2795/0x5440 [ 1098.339938][ T1645] ? __pfx___handle_mm_fault+0x10/0x10 [ 1098.339977][ T1645] ? find_vma+0xe7/0x160 [ 1098.339997][ T1645] ? __pfx_find_vma+0x10/0x10 [ 1098.340018][ T1645] handle_mm_fault+0x40a/0x8e0 [ 1098.340050][ T1645] do_user_addr_fault+0x764/0x1390 [ 1098.340093][ T1645] exc_page_fault+0x76/0xf0 [ 1098.340122][ T1645] asm_exc_page_fault+0x26/0x30 [ 1098.340138][ T1645] RIP: 0010:rep_movs_alternative+0x30/0x90 [ 1098.340161][ T1645] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 4d 0a 04 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 1098.340175][ T1645] RSP: 0018:ffffc9000f1bfc98 EFLAGS: 00050212 [ 1098.340192][ T1645] RAX: 00007ffffffff001 RBX: 0000000000000010 RCX: 0000000000000010 [ 1098.340205][ T1645] RDX: 0000000000000001 RSI: 0000200000001100 RDI: ffffc9000f1bfd00 [ 1098.340216][ T1645] RBP: ffffc9000f1bfea0 R08: ffffc9000f1bfd0f R09: 1ffff92001e37fa1 [ 1098.340228][ T1645] R10: dffffc0000000000 R11: fffff52001e37fa2 R12: 0000000000000010 [ 1098.340240][ T1645] R13: 1ffff92001e37f9c R14: ffffc9000f1bfd00 R15: 0000200000001100 [ 1098.340272][ T1645] _copy_from_user+0x7a/0xb0 [ 1098.340294][ T1645] __sys_sendto+0x25c/0x520 [ 1098.340318][ T1645] ? __pfx___sys_sendto+0x10/0x10 [ 1098.340332][ T1645] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 1098.340368][ T1645] ? __fget_files+0x3a0/0x420 [ 1098.340398][ T1645] ? ksys_write+0x22a/0x250 [ 1098.340422][ T1645] ? __pfx_ksys_write+0x10/0x10 [ 1098.340440][ T1645] ? rcu_is_watching+0x15/0xb0 [ 1098.340464][ T1645] __x64_sys_sendto+0xde/0x100 [ 1098.340486][ T1645] do_syscall_64+0xfa/0x3b0 [ 1098.340504][ T1645] ? lockdep_hardirqs_on+0x9c/0x150 [ 1098.340522][ T1645] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1098.340538][ T1645] ? clear_bhb_loop+0x60/0xb0 [ 1098.340559][ T1645] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1098.340575][ T1645] RIP: 0033:0x7f8742d8eba9 [ 1098.340591][ T1645] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1098.340606][ T1645] RSP: 002b:00007f8743c83038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1098.340624][ T1645] RAX: ffffffffffffffda RBX: 00007f8742fd5fa0 RCX: 00007f8742d8eba9 [ 1098.340638][ T1645] RDX: 0000000000000003 RSI: 0000200000000000 RDI: 0000000000000003 [ 1098.340649][ T1645] RBP: 00007f8743c83090 R08: 0000200000001100 R09: 0000000000000010 [ 1098.340661][ T1645] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1098.340672][ T1645] R13: 00007f8742fd6038 R14: 00007f8742fd5fa0 R15: 00007fff68a61d48 [ 1098.340703][ T1645] [ 1098.360554][ T1650] netlink: 'syz.3.8240': attribute type 3 has an invalid length. [ 1098.773510][ T1655] wg1 speed is unknown, defaulting to 1000 [ 1099.048733][ T1672] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8248'. [ 1099.152958][ T1676] netlink: 'syz.3.8249': attribute type 2 has an invalid length. [ 1099.292499][ T1678] netlink: 'syz.0.8250': attribute type 1 has an invalid length. [ 1099.304672][ T1656] wg1 speed is unknown, defaulting to 1000 [ 1099.368865][ T1678] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1099.406699][ T1680] bond9: (slave geneve2): making interface the new active one [ 1099.422518][ T1680] bond9: (slave geneve2): Enslaving as an active interface with an up link [ 1100.090075][ T1694] FAULT_INJECTION: forcing a failure. [ 1100.090075][ T1694] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1100.136211][ T1694] CPU: 1 UID: 0 PID: 1694 Comm: syz.3.8255 Not tainted syzkaller #0 PREEMPT(full) [ 1100.136238][ T1694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1100.136250][ T1694] Call Trace: [ 1100.136258][ T1694] [ 1100.136267][ T1694] dump_stack_lvl+0x189/0x250 [ 1100.136296][ T1694] ? __pfx____ratelimit+0x10/0x10 [ 1100.136328][ T1694] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1100.136349][ T1694] ? __pfx__printk+0x10/0x10 [ 1100.136375][ T1694] ? fs_reclaim_acquire+0x7d/0x100 [ 1100.136405][ T1694] should_fail_ex+0x414/0x560 [ 1100.136437][ T1694] prepare_alloc_pages+0x213/0x610 [ 1100.136463][ T1694] __alloc_frozen_pages_noprof+0x123/0x370 [ 1100.136481][ T1694] ? unwind_get_return_address+0x4d/0x90 [ 1100.136506][ T1694] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1100.136535][ T1694] ? policy_nodemask+0x27c/0x720 [ 1100.136566][ T1694] alloc_pages_mpol+0x232/0x4a0 [ 1100.136597][ T1694] folio_alloc_mpol_noprof+0x39/0x70 [ 1100.136623][ T1694] shmem_alloc_and_add_folio+0x447/0xf60 [ 1100.136652][ T1694] ? filemap_get_entry+0xad/0x2f0 [ 1100.136670][ T1694] ? filemap_get_entry+0xad/0x2f0 [ 1100.136686][ T1694] ? filemap_get_entry+0xad/0x2f0 [ 1100.136709][ T1694] ? shmem_huge_global_enabled+0x174/0x3a0 [ 1100.136731][ T1694] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 1100.136759][ T1694] ? shmem_allowable_huge_orders+0x414/0x420 [ 1100.136787][ T1694] shmem_get_folio_gfp+0x59d/0x1660 [ 1100.136833][ T1694] shmem_fault+0x179/0x390 [ 1100.136866][ T1694] __do_fault+0x138/0x390 [ 1100.136886][ T1694] __handle_mm_fault+0x3611/0x5440 [ 1100.136928][ T1694] ? __pfx___handle_mm_fault+0x10/0x10 [ 1100.136974][ T1694] ? find_vma+0xe7/0x160 [ 1100.136995][ T1694] ? __pfx_find_vma+0x10/0x10 [ 1100.137026][ T1694] handle_mm_fault+0x40a/0x8e0 [ 1100.137061][ T1694] do_user_addr_fault+0x764/0x1390 [ 1100.137107][ T1694] exc_page_fault+0x76/0xf0 [ 1100.137131][ T1694] asm_exc_page_fault+0x26/0x30 [ 1100.137149][ T1694] RIP: 0010:rep_movs_alternative+0x30/0x90 [ 1100.137173][ T1694] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 4d 0a 04 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 1100.137188][ T1694] RSP: 0018:ffffc9000c6a7c98 EFLAGS: 00050212 [ 1100.137206][ T1694] RAX: 00007ffffffff001 RBX: 0000000000000010 RCX: 0000000000000010 [ 1100.137218][ T1694] RDX: 0000000000000001 RSI: 0000200000001100 RDI: ffffc9000c6a7d00 [ 1100.137231][ T1694] RBP: ffffc9000c6a7ea0 R08: ffffc9000c6a7d0f R09: 1ffff920018d4fa1 [ 1100.137245][ T1694] R10: dffffc0000000000 R11: fffff520018d4fa2 R12: 0000000000000010 [ 1100.137258][ T1694] R13: 1ffff920018d4f9c R14: ffffc9000c6a7d00 R15: 0000200000001100 [ 1100.137294][ T1694] _copy_from_user+0x7a/0xb0 [ 1100.137316][ T1694] __sys_sendto+0x25c/0x520 [ 1100.137339][ T1694] ? __pfx___sys_sendto+0x10/0x10 [ 1100.137354][ T1694] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 1100.137383][ T1694] ? __fget_files+0x3a0/0x420 [ 1100.137406][ T1694] ? ksys_write+0x22a/0x250 [ 1100.137427][ T1694] ? __pfx_ksys_write+0x10/0x10 [ 1100.137443][ T1694] ? rcu_is_watching+0x15/0xb0 [ 1100.137466][ T1694] __x64_sys_sendto+0xde/0x100 [ 1100.137487][ T1694] do_syscall_64+0xfa/0x3b0 [ 1100.137507][ T1694] ? lockdep_hardirqs_on+0x9c/0x150 [ 1100.137525][ T1694] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1100.137543][ T1694] ? clear_bhb_loop+0x60/0xb0 [ 1100.137566][ T1694] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1100.137583][ T1694] RIP: 0033:0x7f665e78eba9 [ 1100.137600][ T1694] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1100.137614][ T1694] RSP: 002b:00007f665f62e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1100.137633][ T1694] RAX: ffffffffffffffda RBX: 00007f665e9d5fa0 RCX: 00007f665e78eba9 [ 1100.137647][ T1694] RDX: 0000000000000003 RSI: 0000200000000000 RDI: 0000000000000003 [ 1100.137659][ T1694] RBP: 00007f665f62e090 R08: 0000200000001100 R09: 0000000000000010 [ 1100.137672][ T1694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1100.137683][ T1694] R13: 00007f665e9d6038 R14: 00007f665e9d5fa0 R15: 00007ffe1ade6508 [ 1100.137716][ T1694] [ 1100.926221][ T1707] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8260'. [ 1100.967436][ T1712] delete_channel: no stack [ 1101.059255][ T7467] net_ratelimit: 37 callbacks suppressed [ 1101.059276][ T7467] bond7: (slave macvlan2): failed to get link speed/duplex [ 1101.105951][ T7467] bond4: (slave macvlan2): failed to get link speed/duplex [ 1101.114888][ T1718] netlink: 161716 bytes leftover after parsing attributes in process `syz.3.8265'. [ 1101.138357][ T1718] netlink: zone id is out of range [ 1101.199836][ T7467] bond7: (slave macvlan2): failed to get link speed/duplex [ 1101.239406][ T1333] bond4: (slave macvlan2): failed to get link speed/duplex [ 1101.319851][ T1333] bond7: (slave macvlan2): failed to get link speed/duplex [ 1101.359392][ T1333] bond4: (slave macvlan2): failed to get link speed/duplex [ 1101.449578][ T1333] bond7: (slave macvlan2): failed to get link speed/duplex [ 1101.471370][ T1333] bond4: (slave macvlan2): failed to get link speed/duplex [ 1101.570354][ T7462] bond7: (slave macvlan2): failed to get link speed/duplex [ 1101.585114][ T1747] FAULT_INJECTION: forcing a failure. [ 1101.585114][ T1747] name failslab, interval 1, probability 0, space 0, times 0 [ 1101.598508][ T1747] CPU: 1 UID: 0 PID: 1747 Comm: syz.1.8273 Not tainted syzkaller #0 PREEMPT(full) [ 1101.598535][ T1747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1101.598546][ T1747] Call Trace: [ 1101.598554][ T1747] [ 1101.598562][ T1747] dump_stack_lvl+0x189/0x250 [ 1101.598588][ T1747] ? __pfx____ratelimit+0x10/0x10 [ 1101.598606][ T1747] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1101.598625][ T1747] ? __pfx__printk+0x10/0x10 [ 1101.598655][ T1747] ? __pfx___might_resched+0x10/0x10 [ 1101.598678][ T1747] should_fail_ex+0x414/0x560 [ 1101.598705][ T1747] ? bpf_test_run_xdp_live+0x1b5/0x1b10 [ 1101.598723][ T1747] should_failslab+0xa8/0x100 [ 1101.598751][ T1747] __kvmalloc_node_noprof+0x161/0x5f0 [ 1101.598775][ T1747] ? bpf_test_run_xdp_live+0x1b5/0x1b10 [ 1101.598799][ T1747] bpf_test_run_xdp_live+0x1b5/0x1b10 [ 1101.598822][ T1747] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 1101.598860][ T1747] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1101.598890][ T1747] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 1101.598908][ T1747] ? 0xffffffffa0205800 [ 1101.598925][ T1747] ? 0xffffffffa0205800 [ 1101.598964][ T1747] ? 0xffffffffa0201850 [ 1101.598977][ T1747] ? 0xffffffffa02018b4 [ 1101.598991][ T1747] ? 0xffffffffa0203088 [ 1101.599005][ T1747] ? 0xffffffffa0204ecc [ 1101.599048][ T1747] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 1101.599073][ T1747] ? _copy_from_user+0x94/0xb0 [ 1101.599094][ T1747] ? bpf_test_init+0x133/0x170 [ 1101.599109][ T1747] ? xdp_convert_md_to_buff+0x5b/0x330 [ 1101.599131][ T1747] bpf_prog_test_run_xdp+0x713/0x1000 [ 1101.599164][ T1747] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1101.599187][ T1747] ? __fget_files+0x2a/0x420 [ 1101.599208][ T1747] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1101.599227][ T1747] bpf_prog_test_run+0x2c7/0x340 [ 1101.599251][ T1747] __sys_bpf+0x581/0x870 [ 1101.599273][ T1747] ? __pfx___sys_bpf+0x10/0x10 [ 1101.599303][ T1747] ? ksys_write+0x22a/0x250 [ 1101.599324][ T1747] ? __pfx_ksys_write+0x10/0x10 [ 1101.599339][ T1747] ? rcu_is_watching+0x15/0xb0 [ 1101.599363][ T1747] __x64_sys_bpf+0x7c/0x90 [ 1101.599380][ T1747] do_syscall_64+0xfa/0x3b0 [ 1101.599399][ T1747] ? lockdep_hardirqs_on+0x9c/0x150 [ 1101.599415][ T1747] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1101.599432][ T1747] ? clear_bhb_loop+0x60/0xb0 [ 1101.599451][ T1747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1101.599466][ T1747] RIP: 0033:0x7fef6278eba9 [ 1101.599481][ T1747] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1101.599492][ T1747] RSP: 002b:00007fef636e9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1101.599509][ T1747] RAX: ffffffffffffffda RBX: 00007fef629d5fa0 RCX: 00007fef6278eba9 [ 1101.599521][ T1747] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 1101.599532][ T1747] RBP: 00007fef636e9090 R08: 0000000000000000 R09: 0000000000000000 [ 1101.599542][ T1747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1101.599552][ T1747] R13: 00007fef629d6038 R14: 00007fef629d5fa0 R15: 00007ffe35bd32a8 [ 1101.599580][ T1747] [ 1102.834654][ T1790] wg1 speed is unknown, defaulting to 1000 [ 1102.864129][ T1800] netlink: 44 bytes leftover after parsing attributes in process `syz.4.8288'. [ 1103.066106][ T1803] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8291'. [ 1103.075698][ T1803] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8291'. [ 1103.095499][ T1803] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8291'. [ 1103.270868][ T1812] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.8294'. [ 1103.282919][ T1813] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.8294'. [ 1103.628502][ T1796] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8286'. [ 1103.784089][ T1831] netlink: 'syz.0.8286': attribute type 10 has an invalid length. [ 1104.176733][ T1842] FAULT_INJECTION: forcing a failure. [ 1104.176733][ T1842] name failslab, interval 1, probability 0, space 0, times 0 [ 1104.217167][ T1842] CPU: 1 UID: 0 PID: 1842 Comm: syz.1.8304 Not tainted syzkaller #0 PREEMPT(full) [ 1104.217194][ T1842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1104.217205][ T1842] Call Trace: [ 1104.217213][ T1842] [ 1104.217222][ T1842] dump_stack_lvl+0x189/0x250 [ 1104.217248][ T1842] ? __pfx____ratelimit+0x10/0x10 [ 1104.217268][ T1842] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1104.217289][ T1842] ? __pfx__printk+0x10/0x10 [ 1104.217317][ T1842] ? __pfx___might_resched+0x10/0x10 [ 1104.217333][ T1842] ? fs_reclaim_acquire+0x7d/0x100 [ 1104.217354][ T1842] should_fail_ex+0x414/0x560 [ 1104.217382][ T1842] ? page_pool_create_percpu+0x32a/0xbe0 [ 1104.217403][ T1842] should_failslab+0xa8/0x100 [ 1104.217428][ T1842] __kvmalloc_node_noprof+0x161/0x5f0 [ 1104.217450][ T1842] ? page_pool_create_percpu+0x32a/0xbe0 [ 1104.217477][ T1842] page_pool_create_percpu+0x32a/0xbe0 [ 1104.217500][ T1842] ? bpf_test_run_xdp_live+0x1b5/0x1b10 [ 1104.217525][ T1842] bpf_test_run_xdp_live+0x1ca/0x1b10 [ 1104.217548][ T1842] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 1104.217575][ T1842] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1104.217613][ T1842] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 1104.217631][ T1842] ? 0xffffffffa0205800 [ 1104.217648][ T1842] ? 0xffffffffa0205800 [ 1104.217682][ T1842] ? 0xffffffffa0201850 [ 1104.217696][ T1842] ? 0xffffffffa02019d4 [ 1104.217709][ T1842] ? 0xffffffffa0203088 [ 1104.217722][ T1842] ? 0xffffffffa0204ecc [ 1104.217764][ T1842] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 1104.217792][ T1842] ? _copy_from_user+0x94/0xb0 [ 1104.217812][ T1842] ? bpf_test_init+0x133/0x170 [ 1104.217828][ T1842] ? xdp_convert_md_to_buff+0x5b/0x330 [ 1104.217850][ T1842] bpf_prog_test_run_xdp+0x713/0x1000 [ 1104.217886][ T1842] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1104.217911][ T1842] ? __fget_files+0x2a/0x420 [ 1104.217934][ T1842] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1104.217953][ T1842] bpf_prog_test_run+0x2c7/0x340 [ 1104.217981][ T1842] __sys_bpf+0x581/0x870 [ 1104.218004][ T1842] ? __pfx___sys_bpf+0x10/0x10 [ 1104.218039][ T1842] ? ksys_write+0x22a/0x250 [ 1104.218063][ T1842] ? __pfx_ksys_write+0x10/0x10 [ 1104.218082][ T1842] ? rcu_is_watching+0x15/0xb0 [ 1104.218108][ T1842] __x64_sys_bpf+0x7c/0x90 [ 1104.218133][ T1842] do_syscall_64+0xfa/0x3b0 [ 1104.218150][ T1842] ? lockdep_hardirqs_on+0x9c/0x150 [ 1104.218168][ T1842] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1104.218186][ T1842] ? clear_bhb_loop+0x60/0xb0 [ 1104.218207][ T1842] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1104.218224][ T1842] RIP: 0033:0x7fef6278eba9 [ 1104.218239][ T1842] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1104.218254][ T1842] RSP: 002b:00007fef636e9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1104.218274][ T1842] RAX: ffffffffffffffda RBX: 00007fef629d5fa0 RCX: 00007fef6278eba9 [ 1104.218287][ T1842] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 1104.218298][ T1842] RBP: 00007fef636e9090 R08: 0000000000000000 R09: 0000000000000000 [ 1104.218309][ T1842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1104.218320][ T1842] R13: 00007fef629d6038 R14: 00007fef629d5fa0 R15: 00007ffe35bd32a8 [ 1104.218350][ T1842] [ 1104.604345][ T1842] page_pool_create_percpu() gave up with errno -12 [ 1105.168673][ T1869] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8315'. [ 1105.207022][ T1869] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8315'. [ 1105.247955][ T1869] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8315'. [ 1105.892756][ T1898] wg1 speed is unknown, defaulting to 1000 [ 1106.082023][ T1910] FAULT_INJECTION: forcing a failure. [ 1106.082023][ T1910] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1106.139300][ T1910] CPU: 0 UID: 0 PID: 1910 Comm: syz.3.8330 Not tainted syzkaller #0 PREEMPT(full) [ 1106.139327][ T1910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1106.139336][ T1910] Call Trace: [ 1106.139343][ T1910] [ 1106.139350][ T1910] dump_stack_lvl+0x189/0x250 [ 1106.139371][ T1910] ? __pfx____ratelimit+0x10/0x10 [ 1106.139387][ T1910] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1106.139410][ T1910] ? __pfx__printk+0x10/0x10 [ 1106.139428][ T1910] ? __might_fault+0xb0/0x130 [ 1106.139456][ T1910] should_fail_ex+0x414/0x560 [ 1106.139480][ T1910] _copy_from_user+0x2d/0xb0 [ 1106.139497][ T1910] kstrtouint_from_user+0xc4/0x170 [ 1106.139514][ T1910] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1106.139542][ T1910] proc_fail_nth_write+0x88/0x200 [ 1106.139558][ T1910] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1106.139578][ T1910] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1106.139595][ T1910] vfs_write+0x27b/0xb30 [ 1106.139621][ T1910] ? __pfx_vfs_write+0x10/0x10 [ 1106.139639][ T1910] ? __fget_files+0x2a/0x420 [ 1106.139656][ T1910] ? __fget_files+0x3a0/0x420 [ 1106.139667][ T1910] ? __fget_files+0x2a/0x420 [ 1106.139687][ T1910] ksys_write+0x145/0x250 [ 1106.139707][ T1910] ? __pfx_ksys_write+0x10/0x10 [ 1106.139721][ T1910] ? rcu_is_watching+0x15/0xb0 [ 1106.139741][ T1910] ? do_syscall_64+0xbe/0x3b0 [ 1106.139760][ T1910] do_syscall_64+0xfa/0x3b0 [ 1106.139773][ T1910] ? lockdep_hardirqs_on+0x9c/0x150 [ 1106.139788][ T1910] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1106.139801][ T1910] ? clear_bhb_loop+0x60/0xb0 [ 1106.139818][ T1910] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1106.139831][ T1910] RIP: 0033:0x7f665e78d65f [ 1106.139844][ T1910] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 1106.139856][ T1910] RSP: 002b:00007f665f62e030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1106.139873][ T1910] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f665e78d65f [ 1106.139883][ T1910] RDX: 0000000000000001 RSI: 00007f665f62e0a0 RDI: 0000000000000004 [ 1106.139892][ T1910] RBP: 00007f665f62e090 R08: 0000000000000000 R09: 0000000000000010 [ 1106.139901][ T1910] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1106.139910][ T1910] R13: 00007f665e9d6038 R14: 00007f665e9d5fa0 R15: 00007ffe1ade6508 [ 1106.139935][ T1910] [ 1106.212324][T18906] net_ratelimit: 68 callbacks suppressed [ 1106.212345][T18906] bond4: (slave macvlan2): failed to get link speed/duplex [ 1106.449809][ T1917] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8331'. [ 1106.759301][T18906] bond7: (slave macvlan2): failed to get link speed/duplex [ 1107.052611][ T7462] bond7: (slave macvlan2): failed to get link speed/duplex [ 1107.066470][ T1938] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8337'. [ 1107.080823][ T7462] bond4: (slave macvlan2): failed to get link speed/duplex [ 1107.282171][ T12] bond7: (slave macvlan2): failed to get link speed/duplex [ 1107.323517][ T3584] bond4: (slave macvlan2): failed to get link speed/duplex [ 1107.419735][ T3584] bond7: (slave macvlan2): failed to get link speed/duplex [ 1107.479520][ T3584] bond4: (slave macvlan2): failed to get link speed/duplex [ 1107.585608][ T7462] bond7: (slave macvlan2): failed to get link speed/duplex [ 1107.609618][ T3584] bond4: (slave macvlan2): failed to get link speed/duplex [ 1107.619488][ T1950] netlink: 'syz.4.8340': attribute type 3 has an invalid length. [ 1107.851791][ T1954] netlink: 48 bytes leftover after parsing attributes in process `syz.1.8342'. [ 1108.080068][ T1965] syzkaller0: entered promiscuous mode [ 1108.087888][ T1965] syzkaller0: entered allmulticast mode [ 1108.464336][ T30] audit: type=1800 audit(1757631368.492:18): pid=1989 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.8355" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2129 res=0 errno=0 [ 1109.420011][ T2030] netlink: 'syz.2.8369': attribute type 1 has an invalid length. [ 1109.708023][ T2052] netlink: 248 bytes leftover after parsing attributes in process `syz.3.8374'. [ 1109.968817][ T2053] wg1 speed is unknown, defaulting to 1000 [ 1109.991720][ T2058] netlink: 161716 bytes leftover after parsing attributes in process `syz.4.8377'. [ 1110.845091][ T2093] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8386'. [ 1111.084165][ T2093] bond4: (slave bridge0): Releasing active interface [ 1111.337475][ T2099] wg1 speed is unknown, defaulting to 1000 [ 1111.493998][ T1333] net_ratelimit: 48 callbacks suppressed [ 1111.494021][ T1333] bond4: (slave macvlan2): failed to get link speed/duplex [ 1111.507264][ T1333] bond7: (slave macvlan2): failed to get link speed/duplex [ 1111.659336][ T12] bond4: (slave macvlan2): failed to get link speed/duplex [ 1112.090585][ T2118] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8396'. [ 1115.128972][ T2147] ip_vti0: entered promiscuous mode [ 1115.144283][ T2147] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8403'. [ 1115.209556][ T1333] bond4: (slave macvlan2): failed to get link speed/duplex [ 1115.254399][ T2152] batadv0: entered promiscuous mode [ 1115.300670][ T2152] debugfs: 'hsr0' already exists in 'hsr' [ 1115.306538][ T2152] Cannot create hsr debugfs directory [ 1115.313756][ T2152] hsr0: entered allmulticast mode [ 1115.318884][ T2152] bond0: entered allmulticast mode [ 1115.324170][ T2152] bond_slave_0: entered allmulticast mode [ 1115.330451][ T2152] bond_slave_1: entered allmulticast mode [ 1115.336252][ T2152] batadv0: entered allmulticast mode [ 1115.371741][ T2152] batadv0: left promiscuous mode [ 1115.385637][ T2156] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8407'. [ 1115.449465][ T12] bond4: (slave macvlan2): failed to get link speed/duplex [ 1115.469905][ T3584] bond7: (slave macvlan2): failed to get link speed/duplex [ 1115.569571][ T3584] bond4: (slave macvlan2): failed to get link speed/duplex [ 1115.587181][ T2165] openvswitch: netlink: Invalid VLAN frame [ 1115.593366][ T3584] bond7: (slave macvlan2): failed to get link speed/duplex [ 1115.690587][ T3584] bond4: (slave macvlan2): failed to get link speed/duplex [ 1115.807473][ T2169] dvmrp8: entered allmulticast mode [ 1115.914917][ T2177] netlink: 80 bytes leftover after parsing attributes in process `syz.1.8414'. [ 1115.972489][ T2177] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8414'. [ 1115.983312][ T2181] netlink: 80 bytes leftover after parsing attributes in process `syz.1.8414'. [ 1116.777855][ T2200] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8422'. [ 1118.263237][ T2169] dvmrp8: left allmulticast mode [ 1118.416344][ T3584] net_ratelimit: 5 callbacks suppressed [ 1118.416365][ T3584] bond4: (slave macvlan2): failed to get link speed/duplex [ 1118.500395][ T5876] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1118.539105][ T2204] bridge: RTM_NEWNEIGH with invalid ether address [ 1118.551442][ T7823] bond7: (slave macvlan2): link status up again after 0 ms [ 1118.588685][ T3584] bond7: (slave macvlan2): link status up again after 0 ms [ 1118.629530][ T3584] bond7: (slave macvlan2): link status up again after 0 ms [ 1118.649484][ T7462] bond7: (slave macvlan2): link status up again after 0 ms [ 1118.682293][ T2216] netlink: 648 bytes leftover after parsing attributes in process `syz.0.8426'. [ 1118.709565][ T7823] bond7: (slave macvlan2): link status up again after 0 ms [ 1118.771057][ T7462] bond4: (slave macvlan2): failed to get link speed/duplex [ 1118.772771][ T3584] bond7: (slave macvlan2): link status up again after 0 ms [ 1118.887354][ T5876] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1118.895374][ T7823] bond7: (slave macvlan2): link status up again after 0 ms [ 1118.935518][ T3584] bond7: (slave macvlan2): link status up again after 0 ms [ 1119.013807][ T2234] netlink: 'syz.4.8433': attribute type 21 has an invalid length. [ 1119.035175][ T2234] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8433'. [ 1119.095357][ T2234] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 1119.287328][ T2251] netlink: 16170 bytes leftover after parsing attributes in process `syz.1.8439'. [ 1119.314131][ T2251] netlink: 'syz.1.8439': attribute type 4 has an invalid length. [ 1119.376723][ T2255] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8441'. [ 1119.391228][ T2255] netlink: 'syz.0.8441': attribute type 1 has an invalid length. [ 1119.428945][ T2258] Bluetooth: MGMT ver 1.23 [ 1119.436743][ T2258] netlink: 64 bytes leftover after parsing attributes in process `syz.4.8442'. [ 1119.452596][ T2255] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1119.485214][ T2259] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1119.492649][ T2259] bond10: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1119.504764][ T2259] bond10: (slave vxcan3): Error -95 calling set_mac_address [ 1119.507643][ T2255] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8441'. [ 1119.574759][ T2258] netlink: 'syz.4.8442': attribute type 2 has an invalid length. [ 1119.982157][ T2281] wg1 speed is unknown, defaulting to 1000 [ 1120.966779][ T2311] wg1 speed is unknown, defaulting to 1000 [ 1121.152995][ T2321] netlink: 'syz.4.8457': attribute type 3 has an invalid length. [ 1121.401386][ T2326] tipc: Enabled bearer , priority 0 [ 1121.409881][ T2324] netlink: 224 bytes leftover after parsing attributes in process `syz.4.8458'. [ 1121.440196][ T2326] syzkaller0: entered promiscuous mode [ 1121.445703][ T2326] syzkaller0: entered allmulticast mode [ 1121.466674][ T2326] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1121.504723][ T2326] tipc: Resetting bearer [ 1121.535864][ T2325] tipc: Resetting bearer [ 1121.596251][ T2325] tipc: Disabling bearer [ 1122.309118][ T2352] netlink: 64 bytes leftover after parsing attributes in process `syz.1.8469'. [ 1122.345911][ T2352] netlink: 'syz.1.8469': attribute type 2 has an invalid length. [ 1123.510046][ T12] net_ratelimit: 65 callbacks suppressed [ 1123.510068][ T12] bond7: (slave macvlan2): failed to get link speed/duplex [ 1123.544986][ T12] bond4: (slave macvlan2): failed to get link speed/duplex [ 1123.651231][T18906] bond7: (slave macvlan2): failed to get link speed/duplex [ 1123.679414][ T12] bond4: (slave macvlan2): failed to get link speed/duplex [ 1123.744188][ T2410] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8486'. [ 1123.761947][T18906] bond7: (slave macvlan2): failed to get link speed/duplex [ 1123.799324][T18906] bond4: (slave macvlan2): failed to get link speed/duplex [ 1123.889731][ T7467] bond7: (slave macvlan2): failed to get link speed/duplex [ 1123.931879][ T7467] bond4: (slave macvlan2): failed to get link speed/duplex [ 1124.003306][ T2424] netlink: 'syz.0.8491': attribute type 3 has an invalid length. [ 1124.692249][ T2462] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8499'. [ 1124.875425][ T2470] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8503'. [ 1124.884912][ T2470] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8503'. [ 1126.922227][ T2436] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8494'. [ 1126.950428][ T2481] tipc: Enabled bearer , priority 0 [ 1126.960176][ T7462] bond4: (slave macvlan2): failed to get link speed/duplex [ 1127.044440][ T2483] tipc: Resetting bearer [ 1127.074918][ T2478] tipc: Disabling bearer [ 1127.131664][ T7462] bond7: (slave macvlan2): failed to get link speed/duplex [ 1127.407335][ T2522] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8515'. [ 1128.249814][ T2578] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8533'. [ 1128.318104][ T2578] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8533'. [ 1128.339821][ T2580] wg1 speed is unknown, defaulting to 1000 [ 1128.609562][ T7462] net_ratelimit: 19 callbacks suppressed [ 1128.609753][ T7462] bond7: (slave macvlan2): failed to get link speed/duplex [ 1128.649298][ T7462] bond4: (slave macvlan2): failed to get link speed/duplex [ 1128.750686][ T3584] bond7: (slave macvlan2): failed to get link speed/duplex [ 1128.780423][ T3584] bond4: (slave macvlan2): failed to get link speed/duplex [ 1128.801362][ T2608] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8540'. [ 1128.866294][ T2614] ip6tnl1: entered promiscuous mode [ 1128.899327][ T7462] bond4: (slave macvlan2): failed to get link speed/duplex [ 1128.920236][ T7462] bond7: (slave macvlan2): failed to get link speed/duplex [ 1129.316398][ T2586] wg1 speed is unknown, defaulting to 1000 [ 1129.449581][ T12] bond4: (slave macvlan2): failed to get link speed/duplex [ 1129.589856][ T7462] bond4: (slave macvlan2): failed to get link speed/duplex [ 1129.619349][ T2623] syzkaller1: entered promiscuous mode [ 1129.627940][ T2623] syzkaller1: entered allmulticast mode [ 1129.639496][ T3584] bond7: (slave macvlan2): failed to get link speed/duplex [ 1129.739467][ T7462] bond4: (slave macvlan2): failed to get link speed/duplex [ 1130.628992][ T2656] netlink: 96 bytes leftover after parsing attributes in process `syz.0.8552'. [ 1130.700334][ T2656] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 1130.795628][ T2674] netlink: 68 bytes leftover after parsing attributes in process `syz.2.8556'. [ 1130.921495][ T2676] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8557'. [ 1131.627745][ T2721] netlink: 'syz.1.8567': attribute type 1 has an invalid length. [ 1132.265012][ T2730] netlink: 68 bytes leftover after parsing attributes in process `syz.0.8570'. [ 1133.836426][ T2736] netlink: 'syz.2.8571': attribute type 12 has an invalid length. [ 1133.889328][ T1333] net_ratelimit: 23 callbacks suppressed [ 1133.889354][ T1333] bond4: (slave macvlan2): failed to get link speed/duplex [ 1133.943246][ T2739] netlink: zone id is out of range [ 1133.948407][ T2739] netlink: zone id is out of range [ 1133.958669][ T1333] bond7: (slave macvlan2): failed to get link speed/duplex [ 1133.987542][ T2739] netlink: zone id is out of range [ 1134.013379][ T2741] netlink: del zone limit has 4 unknown bytes [ 1134.039506][ T1333] bond4: (slave macvlan2): failed to get link speed/duplex [ 1134.045281][ T2739] netlink: zone id is out of range [ 1134.089384][ T1333] bond7: (slave macvlan2): failed to get link speed/duplex [ 1134.129113][ T2739] netlink: set zone limit has 4 unknown bytes [ 1134.421474][ T2767] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8579'. [ 1134.497505][ T2773] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8579'. [ 1134.792860][ T2789] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8586'. [ 1134.844460][ T2785] syzkaller1: entered promiscuous mode [ 1134.855203][ T2777] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8582'. [ 1134.858573][ T2785] syzkaller1: entered allmulticast mode [ 1134.939087][ T2777] bond4: entered promiscuous mode [ 1134.944454][ T2777] bond4: entered allmulticast mode [ 1134.950160][ T2777] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1135.084454][ T2798] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1135.122742][ T2800] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1135.151696][ T2800] bond7: (slave macvlan3): Enslaving as a backup interface with an up link [ 1135.262410][ T2805] vlan0: entered promiscuous mode [ 1135.426347][ T2822] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8593'. [ 1135.673217][ T2839] bond5: entered promiscuous mode [ 1135.865125][ T2863] Only authenc() type AEADs are supported by ESSIV [ 1135.947701][ T7823] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 1136.002891][ T2872] netlink: 'syz.4.8604': attribute type 1 has an invalid length. [ 1136.029790][ T2872] netlink: 'syz.4.8604': attribute type 6 has an invalid length. [ 1136.051205][ T2872] netlink: 'syz.4.8604': attribute type 1 has an invalid length. [ 1136.692805][ T2890] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8609'. [ 1136.753304][ C1] vcan0: j1939_tp_rxtimer: 0xffff888054a63c00: rx timeout, send abort [ 1136.764276][ C1] vcan0: j1939_tp_rxtimer: 0xffff888054a62000: rx timeout, send abort [ 1136.985405][ T12] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1137.007293][ T2896] dvmrp0: entered allmulticast mode [ 1137.025210][ T12] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1137.042799][ T12] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1137.132180][ T12] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1137.390147][ T2917] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8619'. [ 1137.705739][ T2926] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8622'. [ 1137.739642][ T2926] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8622'. [ 1137.867496][ T2926] team0: Port device geneve0 removed [ 1138.095533][ T2941] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8627'. [ 1138.174747][ T2945] netlink: 68 bytes leftover after parsing attributes in process `syz.3.8629'. [ 1138.257326][ T2949] netlink: 'syz.0.8630': attribute type 3 has an invalid length. [ 1138.624282][ T2964] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1139.046241][T18906] net_ratelimit: 85 callbacks suppressed [ 1139.046261][T18906] bond7: (slave macvlan2): failed to get link speed/duplex [ 1139.099586][T18906] bond7: (slave macvlan3): failed to get link speed/duplex [ 1139.139514][ T3584] bond4: (slave macvlan2): failed to get link speed/duplex [ 1139.239527][ T2991] netlink: 'syz.0.8642': attribute type 3 has an invalid length. [ 1139.665349][ T1333] bond7: (slave macvlan2): failed to get link speed/duplex [ 1139.691423][ T7823] bond7: (slave macvlan3): failed to get link speed/duplex [ 1139.839342][ T7823] bond4: (slave macvlan2): failed to get link speed/duplex [ 1139.846647][ T7823] bond7: (slave macvlan2): failed to get link speed/duplex [ 1139.879353][ T1333] bond7: (slave macvlan3): failed to get link speed/duplex [ 1139.950154][ T7462] bond4: (slave macvlan2): failed to get link speed/duplex [ 1139.959285][ T7462] bond7: (slave macvlan2): failed to get link speed/duplex [ 1139.967712][ T3013] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8647'. [ 1140.736754][ T3032] veth0_to_team: entered promiscuous mode [ 1140.775330][ T3026] netlink: 48 bytes leftover after parsing attributes in process `syz.4.8651'. [ 1140.819234][ T3026] netlink: 245 bytes leftover after parsing attributes in process `syz.4.8651'. [ 1140.892201][ T3032] netlink: 48 bytes leftover after parsing attributes in process `syz.1.8652'. [ 1141.451939][ T3046] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8655'. [ 1141.762534][ T3058] netlink: 'syz.4.8660': attribute type 3 has an invalid length. [ 1142.349452][ T3070] netlink: 'syz.0.8664': attribute type 14 has an invalid length. [ 1143.267100][ T3099] netlink: 3 bytes leftover after parsing attributes in process `syz.4.8673'. [ 1143.323012][ T3099] batadv1: entered promiscuous mode [ 1143.382710][ T3099] batadv1: entered allmulticast mode [ 1143.781276][ T3110] netlink: 'syz.3.8678': attribute type 2 has an invalid length. [ 1143.815525][ T3110] netlink: 119 bytes leftover after parsing attributes in process `syz.3.8678'. [ 1143.853240][ T3112] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8677'. [ 1143.930177][ T3113] netlink: 'syz.3.8678': attribute type 1 has an invalid length. [ 1144.180817][ T7467] net_ratelimit: 90 callbacks suppressed [ 1144.180847][ T7467] bond7: (slave macvlan2): failed to get link speed/duplex [ 1144.220137][ T7467] bond4: (slave macvlan2): failed to get link speed/duplex [ 1144.261047][ T7823] bond7: (slave macvlan3): failed to get link speed/duplex [ 1144.292679][ T3118] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8680'. [ 1144.342491][ T12] bond7: (slave macvlan2): failed to get link speed/duplex [ 1144.359708][ T7467] bond4: (slave macvlan2): failed to get link speed/duplex [ 1144.371867][ T3121] netlink: 'syz.3.8681': attribute type 3 has an invalid length. [ 1144.419570][ T7823] bond7: (slave macvlan3): failed to get link speed/duplex [ 1144.461663][ T7823] bond7: (slave macvlan2): failed to get link speed/duplex [ 1144.491855][ T7467] bond4: (slave macvlan2): failed to get link speed/duplex [ 1144.542239][ T7823] bond7: (slave macvlan3): failed to get link speed/duplex [ 1144.578390][ T12] bond7: (slave macvlan2): failed to get link speed/duplex [ 1145.230885][ T3147] vlan2: entered promiscuous mode [ 1145.608886][ T3160] netlink: 'syz.1.8693': attribute type 1 has an invalid length. [ 1148.698475][ T3189] pimreg: entered allmulticast mode [ 1149.096862][ T3215] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8708'. [ 1149.126843][ T3217] netlink: 37 bytes leftover after parsing attributes in process `syz.3.8711'. [ 1149.186071][ T3223] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8711'. [ 1149.239623][ T3223] vlan1: entered promiscuous mode [ 1149.263841][ T12] net_ratelimit: 65 callbacks suppressed [ 1149.263862][ T12] bond4: (slave macvlan2): failed to get link speed/duplex [ 1149.319396][ T3584] bond7: (slave macvlan3): failed to get link speed/duplex [ 1149.341680][ T7467] bond7: (slave macvlan2): failed to get link speed/duplex [ 1149.379324][ T7467] bond4: (slave macvlan2): failed to get link speed/duplex [ 1149.413720][ T3231] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8716'. [ 1149.430749][ T7467] bond7: (slave macvlan3): failed to get link speed/duplex [ 1149.469521][ T7467] bond7: (slave macvlan2): failed to get link speed/duplex [ 1149.494762][ T3234] netlink: 180 bytes leftover after parsing attributes in process `syz.1.8717'. [ 1149.531614][ T3584] bond4: (slave macvlan2): failed to get link speed/duplex [ 1149.550267][ T3584] bond7: (slave macvlan3): failed to get link speed/duplex [ 1149.621027][ T3584] bond7: (slave macvlan2): failed to get link speed/duplex [ 1149.649822][T18906] bond4: (slave macvlan2): failed to get link speed/duplex [ 1150.001557][ T3257] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8726'. [ 1150.005908][ T3261] tipc: Enabled bearer , priority 0 [ 1150.054369][ T3257] vlan2: entered promiscuous mode [ 1150.074372][ T3265] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8729'. [ 1150.131418][ T3266] tipc: Resetting bearer [ 1150.186152][ T3259] tipc: Disabling bearer [ 1150.469103][ T3275] wg1 speed is unknown, defaulting to 1000 [ 1150.550030][ T3286] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8736'. [ 1150.732516][ T3294] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8737'. [ 1150.792318][ T3297] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8737'. [ 1151.032945][ T3307] vlan2: entered allmulticast mode [ 1151.069065][ T3307] hsr0: entered allmulticast mode [ 1151.074849][ T3307] hsr_slave_0: entered allmulticast mode [ 1151.096323][ T3307] hsr_slave_1: entered allmulticast mode [ 1151.213864][ T3312] vlan0: entered promiscuous mode [ 1152.279653][ T3359] syzkaller0: Caught tx_queue_len zero misconfig [ 1152.839800][ T3390] vlan2: entered promiscuous mode [ 1152.953695][ T3400] netlink: 'syz.1.8773': attribute type 8 has an invalid length. [ 1153.454737][ T3442] vlan2: entered promiscuous mode [ 1153.576816][ T3446] tipc: Enabled bearer , priority 0 [ 1153.585021][ T3446] syzkaller0: entered promiscuous mode [ 1153.591032][ T3446] syzkaller0: entered allmulticast mode [ 1153.644602][ T3446] tipc: Resetting bearer [ 1153.680377][ T3450] vlan2: entered promiscuous mode [ 1153.739845][ T3445] tipc: Resetting bearer [ 1153.795337][ T3445] tipc: Disabling bearer [ 1153.978455][ T3462] batadv0: entered promiscuous mode [ 1153.984966][ T3462] vlan1: entered promiscuous mode [ 1154.165519][ T3470] !: renamed from dummy0 (while UP) [ 1154.388115][ T3482] netlink: 'syz.3.8803': attribute type 3 has an invalid length. [ 1154.508346][ T3488] __nla_validate_parse: 5 callbacks suppressed [ 1154.508364][ T3488] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8807'. [ 1154.520346][ T3490] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8806'. [ 1154.529916][ T3487] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8805'. [ 1154.562036][ T3484] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8804'. [ 1154.655617][ T3494] FAULT_INJECTION: forcing a failure. [ 1154.655617][ T3494] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1154.669802][ T3494] CPU: 0 UID: 0 PID: 3494 Comm: syz.1.8805 Not tainted syzkaller #0 PREEMPT(full) [ 1154.669827][ T3494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1154.669839][ T3494] Call Trace: [ 1154.669847][ T3494] [ 1154.669854][ T3494] dump_stack_lvl+0x189/0x250 [ 1154.669879][ T3494] ? __pfx____ratelimit+0x10/0x10 [ 1154.669898][ T3494] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1154.669916][ T3494] ? __pfx__printk+0x10/0x10 [ 1154.669938][ T3494] ? __might_fault+0xb0/0x130 [ 1154.669966][ T3494] should_fail_ex+0x414/0x560 [ 1154.669993][ T3494] _copy_from_user+0x2d/0xb0 [ 1154.670014][ T3494] ___sys_sendmsg+0x158/0x2a0 [ 1154.670038][ T3494] ? __pfx____sys_sendmsg+0x10/0x10 [ 1154.670094][ T3494] ? __fget_files+0x2a/0x420 [ 1154.670111][ T3494] ? __fget_files+0x3a0/0x420 [ 1154.670136][ T3494] __x64_sys_sendmsg+0x19b/0x260 [ 1154.670158][ T3494] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1154.670190][ T3494] ? __pfx_ksys_write+0x10/0x10 [ 1154.670209][ T3494] ? rcu_is_watching+0x15/0xb0 [ 1154.670233][ T3494] ? do_syscall_64+0xbe/0x3b0 [ 1154.670257][ T3494] do_syscall_64+0xfa/0x3b0 [ 1154.670273][ T3494] ? lockdep_hardirqs_on+0x9c/0x150 [ 1154.670290][ T3494] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1154.670307][ T3494] ? clear_bhb_loop+0x60/0xb0 [ 1154.670348][ T3494] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1154.670364][ T3494] RIP: 0033:0x7fef6278eba9 [ 1154.670381][ T3494] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1154.670394][ T3494] RSP: 002b:00007fef636a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1154.670412][ T3494] RAX: ffffffffffffffda RBX: 00007fef629d6180 RCX: 00007fef6278eba9 [ 1154.670424][ T3494] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 1154.670435][ T3494] RBP: 00007fef636a7090 R08: 0000000000000000 R09: 0000000000000000 [ 1154.670446][ T3494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1154.670457][ T3494] R13: 00007fef629d6218 R14: 00007fef629d6180 R15: 00007ffe35bd32a8 [ 1154.670485][ T3494] [ 1154.969887][ T3490] vlan2: entered promiscuous mode [ 1154.974967][ T3490] bridge0: entered promiscuous mode [ 1155.060632][ T3477] wg1 speed is unknown, defaulting to 1000 [ 1155.071143][ T3584] net_ratelimit: 103 callbacks suppressed [ 1155.071187][ T3584] bond7: (slave macvlan3): failed to get link speed/duplex [ 1155.150041][ T3584] bond4: (slave macvlan2): failed to get link speed/duplex [ 1155.169484][ T3584] bond7: (slave macvlan2): failed to get link speed/duplex [ 1155.290157][ T1333] bond4: (slave macvlan2): failed to get link speed/duplex [ 1155.297551][ T1333] bond7: (slave macvlan2): failed to get link speed/duplex [ 1155.340464][ T3584] bond7: (slave macvlan3): failed to get link speed/duplex [ 1155.402462][ T1333] bond4: (slave macvlan2): failed to get link speed/duplex [ 1155.403782][ T3501] netlink: 4280 bytes leftover after parsing attributes in process `syz.0.8810'. [ 1155.433124][ T1333] bond7: (slave macvlan2): failed to get link speed/duplex [ 1155.440300][ T3501] netlink: 4280 bytes leftover after parsing attributes in process `syz.0.8810'. [ 1155.462060][ T3584] bond7: (slave macvlan3): failed to get link speed/duplex [ 1155.500528][ T3501] netlink: 'syz.0.8810': attribute type 11 has an invalid length. [ 1155.511295][ T3501] netlink: 'syz.0.8810': attribute type 11 has an invalid length. [ 1155.519293][ T3501] netlink: 224 bytes leftover after parsing attributes in process `syz.0.8810'. [ 1155.529918][ T3584] bond4: (slave macvlan2): failed to get link speed/duplex [ 1155.648088][ T3517] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8814'. [ 1155.672778][ T3517] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8814'. [ 1155.711508][ T3517] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8814'. [ 1155.770970][ T3517] vlan1: entered promiscuous mode [ 1155.787934][ T3522] netlink: 'syz.4.8817': attribute type 3 has an invalid length. [ 1156.094824][ T3529] vlan3: entered promiscuous mode [ 1156.187503][ T3533] wg0: entered allmulticast mode [ 1156.492561][ T3552] vlan0: entered promiscuous mode [ 1157.284686][ T3600] wg1 speed is unknown, defaulting to 1000 [ 1157.599870][ T3608] nbd: must specify a size in bytes for the device [ 1157.627753][ T3608] netlink: 'syz.1.8848': attribute type 1 has an invalid length. [ 1158.896383][ T5873] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1158.911274][ T5873] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1158.920163][ T5873] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1158.932002][ T5873] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1158.951620][ T5873] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1159.196424][ T3662] wg1 speed is unknown, defaulting to 1000 [ 1159.683010][ T3687] __nla_validate_parse: 5 callbacks suppressed [ 1159.683028][ T3687] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8871'. [ 1159.962788][ T3699] netlink: 'syz.0.8875': attribute type 3 has an invalid length. [ 1160.001675][ T3699] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8875'. [ 1160.379528][ T3645] net_ratelimit: 105 callbacks suppressed [ 1160.379547][ T3645] bond7: (slave macvlan2): failed to get link speed/duplex [ 1160.421223][ T3645] bond7: (slave macvlan3): failed to get link speed/duplex [ 1160.494372][ T3645] bond4: (slave macvlan2): failed to get link speed/duplex [ 1160.519938][ T3644] bond7: (slave macvlan2): failed to get link speed/duplex [ 1160.549754][ T3646] bond7: (slave macvlan3): failed to get link speed/duplex [ 1160.578436][ T3720] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8883'. [ 1160.594689][ T3662] chnl_net:caif_netlink_parms(): no params data found [ 1160.605059][ T3722] netlink: 'syz.1.8882': attribute type 30 has an invalid length. [ 1160.643236][ T3720] vlan1: entered promiscuous mode [ 1160.660153][ T3723] netlink: 348 bytes leftover after parsing attributes in process `syz.1.8882'. [ 1160.699113][ T3724] netlink: 348 bytes leftover after parsing attributes in process `syz.1.8882'. [ 1160.710304][ T3641] bond7: (slave macvlan3): failed to get link speed/duplex [ 1160.985827][ T3733] netlink: 'syz.3.8885': attribute type 1 has an invalid length. [ 1161.026748][ T3737] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8887'. [ 1161.044970][ T3738] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8886'. [ 1161.073266][T16841] Bluetooth: hci5: command tx timeout [ 1161.098679][ T3737] vlan2: entered promiscuous mode [ 1161.135188][ T3738] vlan2: entered promiscuous mode [ 1161.164245][ T3662] bridge0: port 1(bridge_slave_0) entered blocking state [ 1161.172535][ T3662] bridge0: port 1(bridge_slave_0) entered disabled state [ 1161.191919][ T3662] bridge_slave_0: entered allmulticast mode [ 1161.211385][ T3662] bridge_slave_0: entered promiscuous mode [ 1161.233153][ T3662] bridge0: port 2(bridge_slave_1) entered blocking state [ 1161.248639][ T3662] bridge0: port 2(bridge_slave_1) entered disabled state [ 1161.266570][ T3662] bridge_slave_1: entered allmulticast mode [ 1161.278428][ T3662] bridge_slave_1: entered promiscuous mode [ 1161.407947][ T3752] FAULT_INJECTION: forcing a failure. [ 1161.407947][ T3752] name failslab, interval 1, probability 0, space 0, times 0 [ 1161.425351][ T3662] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1161.445727][ T3662] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1161.473720][ T3752] CPU: 1 UID: 0 PID: 3752 Comm: syz.1.8891 Not tainted syzkaller #0 PREEMPT(full) [ 1161.473749][ T3752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1161.473761][ T3752] Call Trace: [ 1161.473769][ T3752] [ 1161.473778][ T3752] dump_stack_lvl+0x189/0x250 [ 1161.473805][ T3752] ? __pfx____ratelimit+0x10/0x10 [ 1161.473826][ T3752] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1161.473846][ T3752] ? __pfx__printk+0x10/0x10 [ 1161.473876][ T3752] ? __pfx___might_resched+0x10/0x10 [ 1161.473893][ T3752] ? fs_reclaim_acquire+0x7d/0x100 [ 1161.473915][ T3752] should_fail_ex+0x414/0x560 [ 1161.473945][ T3752] should_failslab+0xa8/0x100 [ 1161.473971][ T3752] __kmalloc_noprof+0xcb/0x4f0 [ 1161.473991][ T3752] ? kfree+0x4d/0x440 [ 1161.474009][ T3752] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1161.474034][ T3752] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1161.474069][ T3752] ? tomoyo_domain+0xd9/0x130 [ 1161.474094][ T3752] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1161.474118][ T3752] tomoyo_path_number_perm+0x1e8/0x5a0 [ 1161.474144][ T3752] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1161.474185][ T3752] ? __lock_acquire+0xab9/0xd20 [ 1161.474232][ T3752] ? __fget_files+0x2a/0x420 [ 1161.474253][ T3752] ? __fget_files+0x2a/0x420 [ 1161.474267][ T3752] ? __fget_files+0x3a0/0x420 [ 1161.474282][ T3752] ? __fget_files+0x2a/0x420 [ 1161.474303][ T3752] security_file_ioctl+0xcb/0x2d0 [ 1161.474328][ T3752] __se_sys_ioctl+0x47/0x170 [ 1161.474352][ T3752] do_syscall_64+0xfa/0x3b0 [ 1161.474371][ T3752] ? lockdep_hardirqs_on+0x9c/0x150 [ 1161.474389][ T3752] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1161.474407][ T3752] ? clear_bhb_loop+0x60/0xb0 [ 1161.474428][ T3752] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1161.474446][ T3752] RIP: 0033:0x7fef6278eba9 [ 1161.474463][ T3752] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1161.474478][ T3752] RSP: 002b:00007fef636e9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1161.474498][ T3752] RAX: ffffffffffffffda RBX: 00007fef629d5fa0 RCX: 00007fef6278eba9 [ 1161.474510][ T3752] RDX: 0000200000000000 RSI: 000000000000541b RDI: 0000000000000004 [ 1161.474522][ T3752] RBP: 00007fef636e9090 R08: 0000000000000000 R09: 0000000000000000 [ 1161.474533][ T3752] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1161.474544][ T3752] R13: 00007fef629d6038 R14: 00007fef629d5fa0 R15: 00007ffe35bd32a8 [ 1161.474576][ T3752] [ 1161.474584][ T3752] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1161.646643][ T3757] netlink: 14 bytes leftover after parsing attributes in process `syz.3.8893'. [ 1161.722314][ T3759] netlink: 14 bytes leftover after parsing attributes in process `syz.3.8893'. [ 1161.852122][ T3765] netlink: 'syz.2.8896': attribute type 3 has an invalid length. [ 1162.017287][ T3773] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8900'. [ 1162.262761][ T3757] bond7: (slave macvlan3): Removing an active aggregator [ 1162.284856][ T3757] bond7: (slave macvlan3): Releasing backup interface [ 1162.300310][ T3757] bond0 (unregistering): Released all slaves [ 1162.325975][ T3662] team0: Port device team_slave_0 added [ 1162.359102][ T3662] team0: Port device team_slave_1 added [ 1162.497063][ T3770] wg1 speed is unknown, defaulting to 1000 [ 1162.506834][ T3662] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1162.540107][ T3662] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1162.603784][ T3662] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1162.636543][ T3662] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1162.647014][ T3662] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1162.678425][ T3662] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1162.710537][ T3646] bond7: (slave macvlan2): failed to get link speed/duplex [ 1162.717832][ T3646] bond4: (slave macvlan2): failed to get link speed/duplex [ 1162.816266][ T3796] FAULT_INJECTION: forcing a failure. [ 1162.816266][ T3796] name failslab, interval 1, probability 0, space 0, times 0 [ 1162.843953][ T3796] CPU: 1 UID: 0 PID: 3796 Comm: syz.3.8906 Not tainted syzkaller #0 PREEMPT(full) [ 1162.843979][ T3796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1162.843989][ T3796] Call Trace: [ 1162.843998][ T3796] [ 1162.844006][ T3796] dump_stack_lvl+0x189/0x250 [ 1162.844035][ T3796] ? __pfx____ratelimit+0x10/0x10 [ 1162.844057][ T3796] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1162.844076][ T3796] ? __pfx__printk+0x10/0x10 [ 1162.844102][ T3796] ? __pfx___might_resched+0x10/0x10 [ 1162.844120][ T3796] ? fs_reclaim_acquire+0x7d/0x100 [ 1162.844143][ T3796] should_fail_ex+0x414/0x560 [ 1162.844173][ T3796] should_failslab+0xa8/0x100 [ 1162.844200][ T3796] __kmalloc_noprof+0xcb/0x4f0 [ 1162.844222][ T3796] ? tomoyo_encode+0x28b/0x550 [ 1162.844267][ T3796] tomoyo_encode+0x28b/0x550 [ 1162.844292][ T3796] tomoyo_realpath_from_path+0x58d/0x5d0 [ 1162.844313][ T3796] ? tomoyo_domain+0xd9/0x130 [ 1162.844337][ T3796] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1162.844361][ T3796] tomoyo_path_number_perm+0x1e8/0x5a0 [ 1162.844388][ T3796] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1162.844429][ T3796] ? __lock_acquire+0xab9/0xd20 [ 1162.844477][ T3796] ? __fget_files+0x2a/0x420 [ 1162.844498][ T3796] ? __fget_files+0x2a/0x420 [ 1162.844513][ T3796] ? __fget_files+0x3a0/0x420 [ 1162.844527][ T3796] ? __fget_files+0x2a/0x420 [ 1162.844548][ T3796] security_file_ioctl+0xcb/0x2d0 [ 1162.844573][ T3796] __se_sys_ioctl+0x47/0x170 [ 1162.844598][ T3796] do_syscall_64+0xfa/0x3b0 [ 1162.844617][ T3796] ? lockdep_hardirqs_on+0x9c/0x150 [ 1162.844635][ T3796] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1162.844653][ T3796] ? clear_bhb_loop+0x60/0xb0 [ 1162.844674][ T3796] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1162.844691][ T3796] RIP: 0033:0x7f665e78eba9 [ 1162.844708][ T3796] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1162.844722][ T3796] RSP: 002b:00007f665f62e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1162.844741][ T3796] RAX: ffffffffffffffda RBX: 00007f665e9d5fa0 RCX: 00007f665e78eba9 [ 1162.844754][ T3796] RDX: 0000200000000000 RSI: 000000000000541b RDI: 0000000000000004 [ 1162.844766][ T3796] RBP: 00007f665f62e090 R08: 0000000000000000 R09: 0000000000000000 [ 1162.844777][ T3796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1162.844788][ T3796] R13: 00007f665e9d6038 R14: 00007f665e9d5fa0 R15: 00007ffe1ade6508 [ 1162.844825][ T3796] [ 1162.844949][ T3796] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1162.852354][ T3662] hsr_slave_0: entered promiscuous mode [ 1163.109879][ T3662] hsr_slave_1: entered promiscuous mode [ 1163.116371][ T3662] debugfs: 'hsr0' already exists in 'hsr' [ 1163.122910][ T3662] Cannot create hsr debugfs directory [ 1163.149268][T16841] Bluetooth: hci5: command tx timeout [ 1163.240932][ T3639] bond4: (slave macvlan2): failed to get link speed/duplex [ 1163.373616][ T3806] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input9 [ 1163.486889][ T3809] syzkaller1: entered promiscuous mode [ 1163.496764][ T3809] syzkaller1: entered allmulticast mode [ 1163.599353][ T3639] bond4: (slave macvlan2): failed to get link speed/duplex [ 1163.761585][ T3662] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1163.776387][ T3662] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1163.954777][ T3662] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1163.976610][ T3662] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1164.092991][ T3662] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1164.106057][ T3662] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1164.540856][ T3662] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1164.561382][ T3662] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1164.596110][ T3662] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1164.623366][ T3662] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1164.816282][ T3858] __nla_validate_parse: 10 callbacks suppressed [ 1164.816302][ T3858] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8925'. [ 1164.866249][ T3858] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8925'. [ 1164.877568][ T3858] netlink: 34 bytes leftover after parsing attributes in process `syz.1.8925'. [ 1164.899679][ T3662] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1164.940196][ T3662] 8021q: adding VLAN 0 to HW filter on device team0 [ 1164.947688][ T3860] wg1 speed is unknown, defaulting to 1000 [ 1164.965268][ T3641] bridge0: port 1(bridge_slave_0) entered blocking state [ 1164.972482][ T3641] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1165.004793][ T3641] bridge0: port 2(bridge_slave_1) entered blocking state [ 1165.011989][ T3641] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1165.132904][ T3870] syzkaller0: entered promiscuous mode [ 1165.138497][ T3870] syzkaller0: entered allmulticast mode [ 1165.229853][T16841] Bluetooth: hci5: command tx timeout [ 1165.498412][ T3662] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1165.509176][ T3662] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1165.521380][ T3881] netlink: 'syz.2.8929': attribute type 21 has an invalid length. [ 1165.583610][ T3883] netlink: 256 bytes leftover after parsing attributes in process `syz.2.8929'. [ 1165.612784][ T3885] FAULT_INJECTION: forcing a failure. [ 1165.612784][ T3885] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1165.651992][ T3885] CPU: 0 UID: 0 PID: 3885 Comm: syz.3.8930 Not tainted syzkaller #0 PREEMPT(full) [ 1165.652019][ T3885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1165.652030][ T3885] Call Trace: [ 1165.652038][ T3885] [ 1165.652047][ T3885] dump_stack_lvl+0x189/0x250 [ 1165.652073][ T3885] ? __pfx____ratelimit+0x10/0x10 [ 1165.652094][ T3885] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1165.652116][ T3885] ? __pfx__printk+0x10/0x10 [ 1165.652141][ T3885] ? fs_reclaim_acquire+0x7d/0x100 [ 1165.652169][ T3885] should_fail_ex+0x414/0x560 [ 1165.652199][ T3885] prepare_alloc_pages+0x213/0x610 [ 1165.652227][ T3885] __alloc_frozen_pages_noprof+0x123/0x370 [ 1165.652259][ T3885] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1165.652291][ T3885] ? policy_nodemask+0x27c/0x720 [ 1165.652312][ T3885] ? do_raw_spin_lock+0x121/0x290 [ 1165.652341][ T3885] alloc_pages_mpol+0x232/0x4a0 [ 1165.652371][ T3885] alloc_pages_noprof+0xa9/0x190 [ 1165.652398][ T3885] __pmd_alloc+0x3a/0x3b0 [ 1165.652425][ T3885] __handle_mm_fault+0x9ad/0x5440 [ 1165.652467][ T3885] ? __pfx___handle_mm_fault+0x10/0x10 [ 1165.652514][ T3885] ? find_vma+0xe7/0x160 [ 1165.652535][ T3885] ? __pfx_find_vma+0x10/0x10 [ 1165.652559][ T3885] handle_mm_fault+0x40a/0x8e0 [ 1165.652595][ T3885] do_user_addr_fault+0x764/0x1390 [ 1165.652640][ T3885] exc_page_fault+0x76/0xf0 [ 1165.652663][ T3885] asm_exc_page_fault+0x26/0x30 [ 1165.652680][ T3885] RIP: 0010:__put_user_4+0xd/0x20 [ 1165.652699][ T3885] Code: 66 89 01 31 c9 0f 01 ca e9 10 45 03 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 [ 1165.652713][ T3885] RSP: 0018:ffffc9000430f8b8 EFLAGS: 00050206 [ 1165.652730][ T3885] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000200000000000 [ 1165.652743][ T3885] RDX: 0000000000000001 RSI: ffffffff8dba8f4b RDI: ffffffff8be33880 [ 1165.652756][ T3885] RBP: ffffc9000430fa10 R08: 0000000000000000 R09: ffffffff820b8290 [ 1165.652769][ T3885] R10: 00000000000089ed R11: 0000000000000000 R12: dffffc0000000000 [ 1165.652782][ T3885] R13: 1ffff92000861f1c R14: ffff8880570f6000 R15: 0000000000000000 [ 1165.652802][ T3885] ? __might_fault+0xb0/0x130 [ 1165.652834][ T3885] ax25_ioctl+0x9f5/0xca0 [ 1165.652857][ T3885] ? __pfx_ax25_ioctl+0x10/0x10 [ 1165.652880][ T3885] ? kasan_save_track+0x4f/0x80 [ 1165.652900][ T3885] ? kasan_save_track+0x3e/0x80 [ 1165.652917][ T3885] ? kasan_save_free_info+0x46/0x50 [ 1165.652934][ T3885] ? __kasan_slab_free+0x5b/0x80 [ 1165.652953][ T3885] ? kfree+0x18e/0x440 [ 1165.652972][ T3885] ? tomoyo_path_number_perm+0x47a/0x5a0 [ 1165.652993][ T3885] ? security_file_ioctl+0xcb/0x2d0 [ 1165.653012][ T3885] ? __se_sys_ioctl+0x47/0x170 [ 1165.653031][ T3885] ? do_syscall_64+0xfa/0x3b0 [ 1165.653047][ T3885] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1165.653079][ T3885] sock_do_ioctl+0xd9/0x300 [ 1165.653107][ T3885] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1165.653149][ T3885] sock_ioctl+0x576/0x790 [ 1165.653175][ T3885] ? __pfx_sock_ioctl+0x10/0x10 [ 1165.653204][ T3885] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1165.653227][ T3885] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1165.653259][ T3885] ? __pfx_sock_ioctl+0x10/0x10 [ 1165.653281][ T3885] do_vfs_ioctl+0xe67/0x1430 [ 1165.653305][ T3885] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1165.653342][ T3885] ? __lock_acquire+0xab9/0xd20 [ 1165.653390][ T3885] ? __fget_files+0x2a/0x420 [ 1165.653412][ T3885] ? __fget_files+0x2a/0x420 [ 1165.653427][ T3885] ? __fget_files+0x3a0/0x420 [ 1165.653443][ T3885] ? __fget_files+0x2a/0x420 [ 1165.653463][ T3885] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1165.653488][ T3885] __se_sys_ioctl+0x82/0x170 [ 1165.653512][ T3885] do_syscall_64+0xfa/0x3b0 [ 1165.653530][ T3885] ? lockdep_hardirqs_on+0x9c/0x150 [ 1165.653549][ T3885] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1165.653567][ T3885] ? clear_bhb_loop+0x60/0xb0 [ 1165.653589][ T3885] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1165.653606][ T3885] RIP: 0033:0x7f665e78eba9 [ 1165.653622][ T3885] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1165.653637][ T3885] RSP: 002b:00007f665f62e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1165.653655][ T3885] RAX: ffffffffffffffda RBX: 00007f665e9d5fa0 RCX: 00007f665e78eba9 [ 1165.653668][ T3885] RDX: 0000200000000000 RSI: 000000000000541b RDI: 0000000000000004 [ 1165.653679][ T3885] RBP: 00007f665f62e090 R08: 0000000000000000 R09: 0000000000000000 [ 1165.653691][ T3885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1165.653701][ T3885] R13: 00007f665e9d6038 R14: 00007f665e9d5fa0 R15: 00007ffe1ade6508 [ 1165.653735][ T3885] [ 1166.110555][ T3642] net_ratelimit: 17 callbacks suppressed [ 1166.110578][ T3642] bond7: (slave macvlan2): failed to get link speed/duplex [ 1166.160573][ T3646] bond4: (slave macvlan2): failed to get link speed/duplex [ 1166.370361][ T3893] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8932'. [ 1166.406282][ T3893] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 1166.412196][ T3646] bond7: (slave macvlan2): failed to get link speed/duplex [ 1166.479368][ T3646] bond4: (slave macvlan2): failed to get link speed/duplex [ 1166.520588][ T3905] vlan1: entered allmulticast mode [ 1166.525748][ T3905] bridge_slave_0: entered allmulticast mode [ 1166.607765][ T3646] bond7: (slave macvlan2): failed to get link speed/duplex [ 1166.689906][ T3643] bond4: (slave macvlan2): failed to get link speed/duplex [ 1166.707604][ T3911] netlink: 236 bytes leftover after parsing attributes in process `syz.2.8938'. [ 1166.731763][ T3907] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8937'. [ 1166.746287][ T3911] netlink: 1 bytes leftover after parsing attributes in process `syz.2.8938'. [ 1166.765712][ T3915] netlink: 152 bytes leftover after parsing attributes in process `syz.1.8936'. [ 1166.775081][ T3646] bond7: (slave macvlan2): failed to get link speed/duplex [ 1166.804927][ T3662] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1166.839331][ T3641] bond4: (slave macvlan2): failed to get link speed/duplex [ 1166.846803][ T3911] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8938'. [ 1166.906769][ T3919] netlink: 'syz.3.8939': attribute type 10 has an invalid length. [ 1167.053690][ T3919] dummy0: entered promiscuous mode [ 1167.064258][ T3919] team0: Port device dummy0 added [ 1167.083241][ T3921] vlan2: entered promiscuous mode [ 1167.099653][ T3921] team0: entered promiscuous mode [ 1167.150713][ T3639] bond7: (slave macvlan2): failed to get link speed/duplex [ 1167.212852][ T3929] netlink: 'syz.3.8941': attribute type 1 has an invalid length. [ 1167.230149][ T3646] bond4: (slave macvlan2): failed to get link speed/duplex [ 1167.309714][T16841] Bluetooth: hci5: command tx timeout [ 1167.310959][ T3930] gretap2: entered promiscuous mode [ 1167.331163][ T3930] bond0: (slave gretap2): making interface the new active one [ 1167.343166][ T3930] bond0: (slave gretap2): Enslaving as an active interface with an up link [ 1167.671851][ T3662] veth0_vlan: entered promiscuous mode [ 1167.703241][ T3662] veth1_vlan: entered promiscuous mode [ 1167.836741][ T3662] veth0_macvtap: entered promiscuous mode [ 1167.862726][ T3662] veth1_macvtap: entered promiscuous mode [ 1167.907569][ T3662] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1167.945262][ T3662] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1167.971763][ T3641] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1168.000039][ T3641] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1168.018771][ T3641] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1168.042541][ T3641] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1168.247316][ T3644] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1168.264984][ T3644] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1168.484330][ T3644] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1168.492460][ T3644] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1168.607485][ T3985] netlink: 'syz.1.8955': attribute type 1 has an invalid length. [ 1169.008466][ T4013] wg1: entered promiscuous mode [ 1169.013652][ T4013] wg1: entered allmulticast mode [ 1169.133935][ T4018] vlan0: entered promiscuous mode [ 1169.201696][ T4020] tipc: Enabled bearer , priority 0 [ 1169.218696][ T4020] syzkaller0: entered promiscuous mode [ 1169.243941][ T4020] syzkaller0: entered allmulticast mode [ 1169.366836][ T4020] tipc: Resetting bearer [ 1169.380086][ T4019] tipc: Resetting bearer [ 1169.442134][ T4019] tipc: Disabling bearer [ 1169.867081][ T4045] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input10 [ 1170.846372][ T4077] __nla_validate_parse: 34 callbacks suppressed [ 1170.846395][ T4077] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8984'. [ 1170.881723][ T1000] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1170.919060][ T5873] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1170.935094][ T4077] 8021q: VLANs not supported on nlmon0 [ 1170.939593][ T5873] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1170.948894][ T5873] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1170.957610][ T5873] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1170.969481][ T5873] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1171.027276][ T1000] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1171.123884][ T4087] netlink: 68 bytes leftover after parsing attributes in process `syz.1.8985'. [ 1171.133120][ T3632] net_ratelimit: 50 callbacks suppressed [ 1171.133142][ T3632] bond7: (slave macvlan2): failed to get link speed/duplex [ 1171.133242][ T3632] bond4: (slave macvlan2): failed to get link speed/duplex [ 1171.147033][ T4082] wg1 speed is unknown, defaulting to 1000 [ 1171.248645][ T1000] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1171.345182][ T4095] netlink: 96 bytes leftover after parsing attributes in process `syz.2.8989'. [ 1171.390038][T18905] bond4: (slave macvlan2): failed to get link speed/duplex [ 1171.397540][T18905] bond7: (slave macvlan2): failed to get link speed/duplex [ 1171.421480][ T1000] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1171.500019][T18905] bond4: (slave macvlan2): failed to get link speed/duplex [ 1171.519279][T18905] bond7: (slave macvlan2): failed to get link speed/duplex [ 1171.547726][ T4097] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8990'. [ 1171.603540][ T4097] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8990'. [ 1171.611943][ T3627] bond4: (slave macvlan2): failed to get link speed/duplex [ 1171.638908][ T4097] netlink: 'syz.0.8990': attribute type 1 has an invalid length. [ 1171.647992][ T4097] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8990'. [ 1171.649537][ T3584] bond7: (slave macvlan2): failed to get link speed/duplex [ 1171.660123][ T4097] netlink: 96 bytes leftover after parsing attributes in process `syz.0.8990'. [ 1171.690026][ T4101] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8992'. [ 1171.824999][ T4108] IPVS: stopping backup sync thread 4111 ... [ 1171.848309][ T4107] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8993'. [ 1171.852405][ T4111] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 1171.869449][ T3627] bond4: (slave macvlan2): failed to get link speed/duplex [ 1171.891457][ T3627] bond7: (slave macvlan2): failed to get link speed/duplex [ 1171.965426][ T4116] FAULT_INJECTION: forcing a failure. [ 1171.965426][ T4116] name failslab, interval 1, probability 0, space 0, times 0 [ 1171.981847][ T4116] CPU: 0 UID: 0 PID: 4116 Comm: syz.0.8997 Not tainted syzkaller #0 PREEMPT(full) [ 1171.981875][ T4116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1171.981886][ T4116] Call Trace: [ 1171.981894][ T4116] [ 1171.981903][ T4116] dump_stack_lvl+0x189/0x250 [ 1171.981929][ T4116] ? __pfx____ratelimit+0x10/0x10 [ 1171.981950][ T4116] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1171.981970][ T4116] ? __pfx__printk+0x10/0x10 [ 1171.981997][ T4116] ? __pfx___might_resched+0x10/0x10 [ 1171.982016][ T4116] ? fs_reclaim_acquire+0x7d/0x100 [ 1171.982040][ T4116] should_fail_ex+0x414/0x560 [ 1171.982069][ T4116] should_failslab+0xa8/0x100 [ 1171.982095][ T4116] kmem_cache_alloc_noprof+0x73/0x3c0 [ 1171.982117][ T4116] ? __anon_vma_prepare+0x117/0x4a0 [ 1171.982146][ T4116] __anon_vma_prepare+0x117/0x4a0 [ 1171.982168][ T4116] ? __pte_alloc+0x15e/0x1a0 [ 1171.982191][ T4116] __handle_mm_fault+0x4b2d/0x5440 [ 1171.982230][ T4116] ? __pfx___handle_mm_fault+0x10/0x10 [ 1171.982274][ T4116] ? find_vma+0xe7/0x160 [ 1171.982295][ T4116] ? __pfx_find_vma+0x10/0x10 [ 1171.982319][ T4116] handle_mm_fault+0x40a/0x8e0 [ 1171.982354][ T4116] do_user_addr_fault+0x764/0x1390 [ 1171.982398][ T4116] exc_page_fault+0x76/0xf0 [ 1171.982420][ T4116] asm_exc_page_fault+0x26/0x30 [ 1171.982437][ T4116] RIP: 0010:__put_user_4+0xd/0x20 [ 1171.982456][ T4116] Code: 66 89 01 31 c9 0f 01 ca e9 10 45 03 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 [ 1171.982472][ T4116] RSP: 0018:ffffc9001143f8b8 EFLAGS: 00050206 [ 1171.982489][ T4116] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000200000000000 [ 1171.982501][ T4116] RDX: 0000000000000001 RSI: ffffffff8dba8f4b RDI: ffffffff8be33880 [ 1171.982514][ T4116] RBP: ffffc9001143fa10 R08: 0000000000000000 R09: ffffffff820b8290 [ 1171.982527][ T4116] R10: 00000000000089ed R11: 0000000000000000 R12: dffffc0000000000 [ 1171.982539][ T4116] R13: 1ffff92002287f1c R14: ffff888097254000 R15: 0000000000000000 [ 1171.982560][ T4116] ? __might_fault+0xb0/0x130 [ 1171.982592][ T4116] ax25_ioctl+0x9f5/0xca0 [ 1171.982614][ T4116] ? __pfx_ax25_ioctl+0x10/0x10 [ 1171.982639][ T4116] ? kasan_save_track+0x4f/0x80 [ 1171.982659][ T4116] ? kasan_save_track+0x3e/0x80 [ 1171.982677][ T4116] ? kasan_save_free_info+0x46/0x50 [ 1171.982700][ T4116] ? __kasan_slab_free+0x5b/0x80 [ 1171.982719][ T4116] ? kfree+0x18e/0x440 [ 1171.982737][ T4116] ? tomoyo_path_number_perm+0x47a/0x5a0 [ 1171.982759][ T4116] ? security_file_ioctl+0xcb/0x2d0 [ 1171.982779][ T4116] ? __se_sys_ioctl+0x47/0x170 [ 1171.982798][ T4116] ? do_syscall_64+0xfa/0x3b0 [ 1171.982815][ T4116] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1171.982847][ T4116] sock_do_ioctl+0xd9/0x300 [ 1171.982875][ T4116] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1171.982918][ T4116] sock_ioctl+0x576/0x790 [ 1171.982943][ T4116] ? __pfx_sock_ioctl+0x10/0x10 [ 1171.982974][ T4116] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1171.982999][ T4116] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1171.983023][ T4116] ? __pfx_sock_ioctl+0x10/0x10 [ 1171.983043][ T4116] do_vfs_ioctl+0xe67/0x1430 [ 1171.983068][ T4116] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1171.983106][ T4116] ? __lock_acquire+0xab9/0xd20 [ 1171.983154][ T4116] ? __fget_files+0x2a/0x420 [ 1171.983175][ T4116] ? __fget_files+0x2a/0x420 [ 1171.983190][ T4116] ? __fget_files+0x3a0/0x420 [ 1171.983206][ T4116] ? __fget_files+0x2a/0x420 [ 1171.983226][ T4116] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1171.983252][ T4116] __se_sys_ioctl+0x82/0x170 [ 1171.983276][ T4116] do_syscall_64+0xfa/0x3b0 [ 1171.983294][ T4116] ? lockdep_hardirqs_on+0x9c/0x150 [ 1171.983312][ T4116] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1171.983329][ T4116] ? clear_bhb_loop+0x60/0xb0 [ 1171.983351][ T4116] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1171.983368][ T4116] RIP: 0033:0x7f8742d8eba9 [ 1171.983384][ T4116] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1171.983399][ T4116] RSP: 002b:00007f8743c83038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1171.983418][ T4116] RAX: ffffffffffffffda RBX: 00007f8742fd5fa0 RCX: 00007f8742d8eba9 [ 1171.983432][ T4116] RDX: 0000200000000000 RSI: 000000000000541b RDI: 0000000000000004 [ 1171.983444][ T4116] RBP: 00007f8743c83090 R08: 0000000000000000 R09: 0000000000000000 [ 1171.983455][ T4116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1171.983466][ T4116] R13: 00007f8742fd6038 R14: 00007f8742fd5fa0 R15: 00007fff68a61d48 [ 1171.983500][ T4116] [ 1172.767260][ T1000] bond0 (unregistering): (slave gretap2): Releasing active interface [ 1172.852509][ T1000] dvmrp0 (unregistering): left allmulticast mode [ 1172.989658][ T5873] Bluetooth: hci1: command tx timeout [ 1173.203292][ T1000] bond1 (unregistering): Released all slaves [ 1173.219355][ T1000] bond2 (unregistering): Released all slaves [ 1173.237841][ T1000] bond3 (unregistering): Released all slaves [ 1173.255658][ T1000] bond4 (unregistering): Released all slaves [ 1173.278693][ T1000] bond5 (unregistering): Released all slaves [ 1173.408156][ T1000] bond6 (unregistering): (slave veth3): Releasing active interface [ 1173.417889][ T1000] bond6 (unregistering): Released all slaves [ 1173.553997][ T1000] bond7 (unregistering): Released all slaves [ 1173.572718][ T1000] bond0 (unregistering): Released all slaves [ 1173.606471][ T4123] vlan0: entered allmulticast mode [ 1173.630539][ T4123] bridge_slave_0: entered allmulticast mode [ 1173.743130][ T4135] FAULT_INJECTION: forcing a failure. [ 1173.743130][ T4135] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1173.778532][ T4135] CPU: 0 UID: 0 PID: 4135 Comm: syz.1.9001 Not tainted syzkaller #0 PREEMPT(full) [ 1173.778555][ T4135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1173.778565][ T4135] Call Trace: [ 1173.778573][ T4135] [ 1173.778580][ T4135] dump_stack_lvl+0x189/0x250 [ 1173.778604][ T4135] ? __pfx____ratelimit+0x10/0x10 [ 1173.778625][ T4135] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1173.778642][ T4135] ? __pfx__printk+0x10/0x10 [ 1173.778675][ T4135] should_fail_ex+0x414/0x560 [ 1173.778702][ T4135] _copy_from_user+0x2d/0xb0 [ 1173.778723][ T4135] bpf_test_init+0xf8/0x170 [ 1173.778746][ T4135] bpf_prog_test_run_xdp+0x37c/0x1000 [ 1173.778781][ T4135] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1173.778805][ T4135] ? __fget_files+0x2a/0x420 [ 1173.778827][ T4135] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1173.778847][ T4135] bpf_prog_test_run+0x2c7/0x340 [ 1173.778874][ T4135] __sys_bpf+0x581/0x870 [ 1173.778896][ T4135] ? __pfx___sys_bpf+0x10/0x10 [ 1173.778929][ T4135] ? ksys_write+0x22a/0x250 [ 1173.778951][ T4135] ? __pfx_ksys_write+0x10/0x10 [ 1173.778968][ T4135] ? rcu_is_watching+0x15/0xb0 [ 1173.778991][ T4135] __x64_sys_bpf+0x7c/0x90 [ 1173.779010][ T4135] do_syscall_64+0xfa/0x3b0 [ 1173.779029][ T4135] ? lockdep_hardirqs_on+0x9c/0x150 [ 1173.779047][ T4135] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1173.779062][ T4135] ? clear_bhb_loop+0x60/0xb0 [ 1173.779082][ T4135] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1173.779098][ T4135] RIP: 0033:0x7fef6278eba9 [ 1173.779114][ T4135] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1173.779127][ T4135] RSP: 002b:00007fef636e9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1173.779149][ T4135] RAX: ffffffffffffffda RBX: 00007fef629d5fa0 RCX: 00007fef6278eba9 [ 1173.779162][ T4135] RDX: 0000000000000050 RSI: 0000200000000340 RDI: 000000000000000a [ 1173.779172][ T4135] RBP: 00007fef636e9090 R08: 0000000000000000 R09: 0000000000000000 [ 1173.779181][ T4135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1173.779191][ T4135] R13: 00007fef629d6038 R14: 00007fef629d5fa0 R15: 00007ffe35bd32a8 [ 1173.779221][ T4135] [ 1174.073507][ T1000] tipc: Left network mode [ 1174.236368][ T4152] FAULT_INJECTION: forcing a failure. [ 1174.236368][ T4152] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1174.251375][ T4152] CPU: 0 UID: 0 PID: 4152 Comm: syz.1.9007 Not tainted syzkaller #0 PREEMPT(full) [ 1174.251401][ T4152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1174.251411][ T4152] Call Trace: [ 1174.251420][ T4152] [ 1174.251428][ T4152] dump_stack_lvl+0x189/0x250 [ 1174.251453][ T4152] ? __pfx____ratelimit+0x10/0x10 [ 1174.251473][ T4152] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1174.251493][ T4152] ? __pfx__printk+0x10/0x10 [ 1174.251517][ T4152] ? fs_reclaim_acquire+0x7d/0x100 [ 1174.251544][ T4152] should_fail_ex+0x414/0x560 [ 1174.251573][ T4152] prepare_alloc_pages+0x213/0x610 [ 1174.251600][ T4152] __alloc_frozen_pages_noprof+0x123/0x370 [ 1174.251623][ T4152] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1174.251653][ T4152] ? policy_nodemask+0x27c/0x720 [ 1174.251683][ T4152] ? __lock_acquire+0xab9/0xd20 [ 1174.251711][ T4152] alloc_pages_mpol+0x232/0x4a0 [ 1174.251740][ T4152] vma_alloc_folio_noprof+0xe4/0x200 [ 1174.251762][ T4152] ? __anon_vma_prepare+0x3d2/0x4a0 [ 1174.251785][ T4152] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1174.251808][ T4152] ? up_write+0x1c4/0x420 [ 1174.251824][ T4152] ? do_raw_spin_unlock+0x122/0x240 [ 1174.251852][ T4152] folio_prealloc+0x30/0x180 [ 1174.251876][ T4152] __handle_mm_fault+0x2ab9/0x5440 [ 1174.251915][ T4152] ? __pfx___handle_mm_fault+0x10/0x10 [ 1174.251958][ T4152] ? find_vma+0xe7/0x160 [ 1174.251979][ T4152] ? __pfx_find_vma+0x10/0x10 [ 1174.252002][ T4152] handle_mm_fault+0x40a/0x8e0 [ 1174.252036][ T4152] do_user_addr_fault+0x764/0x1390 [ 1174.252080][ T4152] exc_page_fault+0x76/0xf0 [ 1174.252102][ T4152] asm_exc_page_fault+0x26/0x30 [ 1174.252119][ T4152] RIP: 0010:__put_user_4+0xd/0x20 [ 1174.252139][ T4152] Code: 66 89 01 31 c9 0f 01 ca e9 10 45 03 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 [ 1174.252153][ T4152] RSP: 0018:ffffc9001161f8b8 EFLAGS: 00050206 [ 1174.252170][ T4152] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000200000000000 [ 1174.252183][ T4152] RDX: 0000000000000001 RSI: ffffffff8dba8f4b RDI: ffffffff8be33880 [ 1174.252195][ T4152] RBP: ffffc9001161fa10 R08: 0000000000000000 R09: ffffffff820b8290 [ 1174.252207][ T4152] R10: 00000000000089ed R11: 0000000000000000 R12: dffffc0000000000 [ 1174.252218][ T4152] R13: 1ffff920022c3f1c R14: ffff888064c7c000 R15: 0000000000000000 [ 1174.252238][ T4152] ? __might_fault+0xb0/0x130 [ 1174.252270][ T4152] ax25_ioctl+0x9f5/0xca0 [ 1174.252291][ T4152] ? __pfx_ax25_ioctl+0x10/0x10 [ 1174.252315][ T4152] ? kasan_save_track+0x4f/0x80 [ 1174.252334][ T4152] ? kasan_save_track+0x3e/0x80 [ 1174.252351][ T4152] ? kasan_save_free_info+0x46/0x50 [ 1174.252367][ T4152] ? __kasan_slab_free+0x5b/0x80 [ 1174.252385][ T4152] ? kfree+0x18e/0x440 [ 1174.252402][ T4152] ? tomoyo_path_number_perm+0x47a/0x5a0 [ 1174.252423][ T4152] ? security_file_ioctl+0xcb/0x2d0 [ 1174.252442][ T4152] ? __se_sys_ioctl+0x47/0x170 [ 1174.252459][ T4152] ? do_syscall_64+0xfa/0x3b0 [ 1174.252475][ T4152] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1174.252503][ T4152] sock_do_ioctl+0xd9/0x300 [ 1174.252530][ T4152] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1174.252571][ T4152] sock_ioctl+0x576/0x790 [ 1174.252596][ T4152] ? __pfx_sock_ioctl+0x10/0x10 [ 1174.252625][ T4152] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1174.252649][ T4152] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1174.252681][ T4152] ? __pfx_sock_ioctl+0x10/0x10 [ 1174.252701][ T4152] do_vfs_ioctl+0xe67/0x1430 [ 1174.252725][ T4152] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1174.252761][ T4152] ? __lock_acquire+0xab9/0xd20 [ 1174.252807][ T4152] ? __fget_files+0x2a/0x420 [ 1174.252827][ T4152] ? __fget_files+0x2a/0x420 [ 1174.252842][ T4152] ? __fget_files+0x3a0/0x420 [ 1174.252856][ T4152] ? __fget_files+0x2a/0x420 [ 1174.252876][ T4152] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1174.252901][ T4152] __se_sys_ioctl+0x82/0x170 [ 1174.252924][ T4152] do_syscall_64+0xfa/0x3b0 [ 1174.252942][ T4152] ? lockdep_hardirqs_on+0x9c/0x150 [ 1174.252960][ T4152] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1174.252977][ T4152] ? clear_bhb_loop+0x60/0xb0 [ 1174.253000][ T4152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1174.253016][ T4152] RIP: 0033:0x7fef6278eba9 [ 1174.253032][ T4152] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1174.253046][ T4152] RSP: 002b:00007fef636e9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1174.253063][ T4152] RAX: ffffffffffffffda RBX: 00007fef629d5fa0 RCX: 00007fef6278eba9 [ 1174.253076][ T4152] RDX: 0000200000000000 RSI: 000000000000541b RDI: 0000000000000004 [ 1174.253088][ T4152] RBP: 00007fef636e9090 R08: 0000000000000000 R09: 0000000000000000 [ 1174.253099][ T4152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1174.253110][ T4152] R13: 00007fef629d6038 R14: 00007fef629d5fa0 R15: 00007ffe35bd32a8 [ 1174.253141][ T4152] [ 1174.895370][ T4082] chnl_net:caif_netlink_parms(): no params data found [ 1174.989814][T32480] Oops: general protection fault, probably for non-canonical address 0xdffffc000000004c: 0000 [#1] SMP KASAN PTI [ 1175.001751][T32480] KASAN: null-ptr-deref in range [0x0000000000000260-0x0000000000000267] [ 1175.010179][T32480] CPU: 0 UID: 0 PID: 32480 Comm: kworker/0:5 Not tainted syzkaller #0 PREEMPT(full) [ 1175.019641][T32480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1175.029698][T32480] Workqueue: events l2cap_info_timeout [ 1175.035167][T32480] RIP: 0010:kasan_byte_accessible+0x12/0x30 [ 1175.041064][T32480] Code: 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 07 3c 08 0f 92 c0 e9 50 6f 5a 09 cc 66 66 66 66 66 66 2e [ 1175.060658][T32480] RSP: 0000:ffffc90004b1f7a8 EFLAGS: 00010202 [ 1175.066711][T32480] RAX: dffffc0000000000 RBX: ffffffff895a8358 RCX: ab9d013bcdc44300 [ 1175.074667][T32480] RDX: 0000000000000000 RSI: ffffffff895a8358 RDI: 000000000000004c [ 1175.082624][T32480] RBP: ffffffff8a843035 R08: 0000000000000001 R09: 0000000000000000 [ 1175.090598][T32480] R10: dffffc0000000000 R11: ffffffff8a842ff0 R12: 0000000000000000 [ 1175.098555][T32480] R13: 0000000000000260 R14: 0000000000000260 R15: 0000000000000001 [ 1175.106510][T32480] FS: 0000000000000000(0000) GS:ffff888125c14000(0000) knlGS:0000000000000000 [ 1175.115426][T32480] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1175.121992][T32480] CR2: 00007ff5d4c222d0 CR3: 00000000536ae000 CR4: 00000000003526f0 [ 1175.129950][T32480] Call Trace: [ 1175.133214][T32480] [ 1175.136128][T32480] __kasan_check_byte+0x12/0x40 [ 1175.140971][T32480] lock_acquire+0x8d/0x360 [ 1175.145375][T32480] ? lockdep_hardirqs_on+0x9c/0x150 [ 1175.150560][T32480] ? __cancel_work+0x254/0x2e0 [ 1175.155309][T32480] lock_sock_nested+0x48/0x100 [ 1175.160060][T32480] ? l2cap_sock_ready_cb+0x45/0x140 [ 1175.165243][T32480] l2cap_sock_ready_cb+0x45/0x140 [ 1175.170252][T32480] l2cap_conn_start+0x76a/0xe50 [ 1175.175088][T32480] ? __pfx_l2cap_conn_start+0x10/0x10 [ 1175.180496][T32480] ? __lock_acquire+0xab9/0xd20 [ 1175.185387][T32480] ? __pfx___mutex_lock+0x10/0x10 [ 1175.190534][T32480] ? process_scheduled_works+0x9ef/0x17b0 [ 1175.196248][T32480] l2cap_info_timeout+0x68/0xa0 [ 1175.201086][T32480] ? process_scheduled_works+0x9ef/0x17b0 [ 1175.206789][T32480] process_scheduled_works+0xae1/0x17b0 [ 1175.212339][T32480] ? __pfx_process_scheduled_works+0x10/0x10 [ 1175.218309][T32480] worker_thread+0x8a0/0xda0 [ 1175.222886][T32480] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1175.229203][T32480] ? __kthread_parkme+0x7b/0x200 [ 1175.234142][T32480] kthread+0x70e/0x8a0 [ 1175.238200][T32480] ? __pfx_worker_thread+0x10/0x10 [ 1175.243293][T32480] ? __pfx_kthread+0x10/0x10 [ 1175.247871][T32480] ? _raw_spin_unlock_irq+0x23/0x50 [ 1175.253051][T32480] ? lockdep_hardirqs_on+0x9c/0x150 [ 1175.258231][T32480] ? __pfx_kthread+0x10/0x10 [ 1175.262804][T32480] ret_from_fork+0x3fc/0x770 [ 1175.267378][T32480] ? __pfx_ret_from_fork+0x10/0x10 [ 1175.272477][T32480] ? __switch_to_asm+0x39/0x70 [ 1175.277226][T32480] ? __switch_to_asm+0x33/0x70 [ 1175.281980][T32480] ? __pfx_kthread+0x10/0x10 [ 1175.286555][T32480] ret_from_fork_asm+0x1a/0x30 [ 1175.291308][T32480] [ 1175.294328][T32480] Modules linked in: [ 1175.298452][ T5873] Bluetooth: hci1: command tx timeout [ 1175.300570][T32480] ---[ end trace 0000000000000000 ]--- [ 1175.351258][T32480] RIP: 0010:kasan_byte_accessible+0x12/0x30 [ 1175.357385][T32480] Code: 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 07 3c 08 0f 92 c0 e9 50 6f 5a 09 cc 66 66 66 66 66 66 2e [ 1175.387466][T32480] RSP: 0000:ffffc90004b1f7a8 EFLAGS: 00010202 [ 1175.394253][T32480] RAX: dffffc0000000000 RBX: ffffffff895a8358 RCX: ab9d013bcdc44300 [ 1175.402437][T32480] RDX: 0000000000000000 RSI: ffffffff895a8358 RDI: 000000000000004c [ 1175.410874][T32480] RBP: ffffffff8a843035 R08: 0000000000000001 R09: 0000000000000000 [ 1175.426005][T32480] R10: dffffc0000000000 R11: ffffffff8a842ff0 R12: 0000000000000000 [ 1175.434198][T32480] R13: 0000000000000260 R14: 0000000000000260 R15: 0000000000000001 [ 1175.442574][T32480] FS: 0000000000000000(0000) GS:ffff888125c14000(0000) knlGS:0000000000000000 [ 1175.451900][T32480] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1175.458588][T32480] CR2: 0000001b31319ff8 CR3: 0000000074e86000 CR4: 00000000003526f0 [ 1175.473563][T32480] Kernel panic - not syncing: Fatal exception [ 1175.479989][T32480] Kernel Offset: disabled [ 1175.484307][T32480] Rebooting in 86400 seconds..