last executing test programs: 4m28.441583442s ago: executing program 3 (id=5277): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) (async) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="020500000c0000000000000000000000150000000000040a00000000000000fc0104000000000000000000000000000100000000000000f5ff000000000000000000000000000003000500000000000200000005639a971bb3de030900005812c7933f8077bc3e31575b2ffbab00074aed0a5a493b9e8b6ce42d30baf01a5db842959e420c2a4d8c3e03b700"], 0x60}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r3, &(0x7f00000006c0)=[{{&(0x7f00000003c0)={0xa, 0x40, 0x46f7, @mcast2}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000080)="18", 0x1}, {&(0x7f0000000440)="7d38f57adfebff6d531cb91932eb20325a6c2ce9582243da390db7489762cb366012a93bbf83c9dbcdd3412cd04dc92e1d6df2e0672018f29e0d6fa359312dd857998098222c4a12be0e798f1ef8f64185bf9594af4c9d6268e7d9ccca3adb0f8eb64c3c7512c30a197f5715625f305f94161ffba7cdcb0b7cc8da4a49880be2b7c0bab77301e602d35640e104d3321f700aefa631f56e106fd4812d37fa754f06d7207aeab1d52f", 0xa8}], 0x2}}, {{&(0x7f0000000040)={0xa, 0x4e23, 0xfffffffb, @remote, 0x5}, 0x1c, &(0x7f0000000500), 0x1000000000000388}}], 0x2, 0x0) shutdown(r3, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000300)={0x0, 0x1, 0x1, 'U'}, 0x9) r4 = openat$cgroup_devices(r1, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB='b ', @ANYRESDEC], 0xa) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="30000000030805000000000000000000000000000c0004800800014000000000060002400000000005000300ff"], 0x30}}, 0x0) (async) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x14e94ee1, '\x00', r6, 0xffffffffffffffff, 0x1, 0x3}, 0x50) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fab0817dbcb5f31a50001280110001006272696467655f736c617665000000003800058005001900030000000500090001000000080025000100000006001f00d500000008002200", @ANYBLOB="040018000500010003"], 0x84}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x18, 0x25, 0x109, 0x70bd1f, 0xfffffffc, {0xe}, [@typed={0x4, 0x14e, 0x0, 0x0, @binary}]}, 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) r8 = socket$kcm(0xa, 0x1, 0x0) sendmsg$sock(r8, &(0x7f0000000400)={0x0, 0xffffffffffffffea, 0x0, 0x0, &(0x7f00000005c0)=[@txtime={{0x18, 0x1, 0x3d, 0x655}}, @txtime={{0x0, 0x1, 0x3d, 0x8000000000000000}}], 0x18}, 0x4008010) socket$nl_route(0x10, 0x3, 0x0) (async) r9 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r9, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x0, "d32984bd1ca44c066af5160e961701a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000001200000000001900", 0x3c}, 0x60) (async) r10 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r10, &(0x7f00000000c0)={0x27, 0x0, 0x1, 0x4, 0x0, 0xff, "bac5115c7dad488702b535116fad55baf63cdd52fc30106310abb622a1c3c01c13c04df6b906288e64e96754059e65c39c5759b069d6e6d9589e5f2348878c", 0x24}, 0x60) close(r10) r11 = socket$nl_route(0x10, 0x3, 0x0) (async) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWSETELEM={0x64, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x24, 0x3, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x14, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe8}}, 0x0) (async) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="08010000100001002dbd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0221000000000000140003006e657464657673696d300000", @ANYRES32=0x0, @ANYBLOB="cc001680c80001800c000500ff0f00000008000014000a0004000000000000000400000000000000100006"], 0x108}}, 0x24040800) 4m28.428391446s ago: executing program 3 (id=5283): openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x30}, {0x6}]}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r0, 0x8b32, &(0x7f0000000040)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xe, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0x4, 0xffb, 0x7, 0xb69, 0xc1, 0x8, 0x1, 0x3, 0x5, 0x101, 0x1000, 0x9, 0x3, 0x3, 0x1, 0xfffffffa, 0x1, 0x6, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0xffffffff, 0xd, 0xe, 0x2b12, 0x100, 0x6, 0x1c00, 0xb, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180000, 0x4007, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0xa, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x0, 0xf, 0x0, 0x10001, 0x2, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x2, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x2, 0x2, 0x6, 0x8, 0x9, 0x4, 0x1, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000014000000080016000000000018000180140002006e657464657673696d3000000000000008001500170000000800130000170000080014"], 0x4c}}, 0x0) 4m28.422280233s ago: executing program 3 (id=5286): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001280)=@mangle={'mangle\x00', 0x2, 0x6, 0x5b0, 0x148, 0x2f8, 0x228, 0x228, 0x228, 0x618, 0x618, 0x618, 0x618, 0x618, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [0x0, 0x0, 0xff000000], 'pimreg0\x00', 'vlan1\x00', {}, {}, 0x21}, 0x0, 0x120, 0x148, 0x0, {0x7a00000010000000}, [@inet=@rpfilter={{0x28}, {0x8}}, @common=@inet=@multiport={{0x50}, {0x0, 0xc, [], [], 0x1}}]}, @HL={0x28, 'HL\x00', 0x0, {0x3}}}, {{@ipv6={@mcast2, @dev, [0x0, 0x0, 0x0, 0xffffffff], [], 'bridge0\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {0x0, 0x8}, {}, 0x300, 0x4}}}, {{@ipv6={@ipv4, @empty, [], [0x0, 0x0, 0x0, 0xffffff00], '\x00', 'bond_slave_0\x00', {}, {}, 0x84}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, [0xff000000, 0xff000000, 0x0, 0xff000000], [0x0, 0x0, 0xff000000, 0xffffffff], 'veth1_to_hsr\x00', '\x00', {0xff}, {}, 0x62, 0x35, 0x1, 0x10}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@multicast1, @ipv4=@remote, 0x0, 0x37}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x240, 0x0, 0x700001b, 0x148, 0x0, 0x148, 0x210, 0x206, 0x240, 0x210, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x1ea, 0x70, 0xd0, 0x0, {0x390, 0x8f00}}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 0x7, 0x0, [0x2d, 0x12, 0x2e, 0x40, 0xd, 0x3a, 0x23, 0x2b, 0x103, 0x1c, 0x4037, 0x15, 0x31, 0x4, 0x31, 0x1d], 0x1, 0x8, 0x7}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x900, 0x10, 0x8, 'snmp\x00', 'syz0\x00', {0x8000}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0) syz_extract_tcp_res$synack(&(0x7f00000002c0)={0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x14d, &(0x7f0000000340)={@local, @random="149a2f91de59", @void, {@mpls_mc={0x8848, {[{0x400}, {0xf0, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x5}, {}, {0x2, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0x9}, {0x6}], @ipv4=@tcp={{0xf, 0x4, 0x0, 0x8, 0x11b, 0x68, 0x0, 0xb, 0x6, 0x0, @multicast2, @remote, {[@ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x18, [@dev={0xac, 0x14, 0x14, 0x2c}, @multicast2, @broadcast, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @multicast2, @rand_addr=0x64010100]}]}}, {{0x4e22, 0x4e22, r0, 0x41424344, 0x0, 0x0, 0xb, 0x10, 0x6, 0x0, 0x4, {[@eol, @exp_smc={0xfe, 0x6}, @exp_fastopen={0xfe, 0xd, 0xf989, "e16fa42e30cd0207e0"}, @mss={0x2, 0x4, 0x3}]}}, {"375937df02851d56a0df91f30d27dac776284730ca059f031a5e8c1144776160bdd6d655e10129a9306180bd0ac462e2564d1e8b996256e3203ef33a56d6fb86843803a979bc3133752cc3a57ab722a58a080af267e7708356446a5f16e8a52b517b9b8b8eddbbad6a7073ab14d8c51f5aa15488ddf1a555136931ceb1efae6727f126764618e750e367e9c864351cac154501d97f9e6d0600a01fbcd8e57413b9e0adfa2068a6252989d17a8e5730d55fb5f9"}}}}}}}, &(0x7f00000004c0)={0x0, 0x1, [0xb4, 0x3e2, 0xb4a, 0x857]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) (async) r2 = socket(0x400000000010, 0x3, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd28, 0x2000000, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {}, {0xfff8, 0xffff}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x1, 0x1}, {0x7, 0x5}}}]}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1404c885}, 0x2000d8d0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x9fd, 0x84, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x803, r5}, 0x38) 4m28.222337549s ago: executing program 3 (id=5289): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r0}, &(0x7f00000008c0), &(0x7f0000000880)=r1}, 0x20) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000140)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee0000000000000000020000", 0x56}, {&(0x7f0000000000)="abd9", 0x2}], 0x2) r3 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20040845}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newtfilter={0x90, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x60, 0x2, [@TCA_FLOWER_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffff8, 0xfff, 0x0, 0x200, 0xa}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}, @TCA_FLOWER_FLAGS={0x8, 0x16, 0x12}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x20000004}, 0x24000000) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup.cpu/syz0\x00', 0x1ff) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="64000000020605000000000000000000000049001400078008000800000000000800064000000000050001001b00000005000500020000000500040000000000090002009c5b7a310000000015000300686173683a6970"], 0x64}}, 0x0) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r3) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="f4000000", @ANYRES16=r7, @ANYBLOB="000228bd7000fedbdf250d0000007000038014000600fe80000000000000000000000000001d0600e4193d78343a519c0200626f6e645f736c6176655f3000000000080003000400000006000400c768000008000500640101020800030002000000080001000100000014000600000000000000000000000000000000000800040087b700002800038005000800040000000600040009050000140002006261746164765f736c6176655f3000000800050000000000080005000b00000030000380060007004e21000008000500ac1414aa08000300010000001400020067726574617030000000000000000000"], 0xf4}, 0x1, 0x0, 0x0, 0x44000}, 0x4000) 4m28.06158567s ago: executing program 3 (id=5292): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r1, &(0x7f0000000440)={0x0, 0x7, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1800000007140100000032c83a110000050042"], 0x18}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004ec0)=ANY=[@ANYBLOB="28000000400007012bbd700000080000017a03000400c2800c0001800800108004000f80040002"], 0x28}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)=@getlink={0x28, 0x12, 0x1, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x100, 0xb59d27701cdff289}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0x1}]}, 0x28}}, 0x90) getsockname$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000080)=0x1c) 4m27.894255854s ago: executing program 3 (id=5296): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@ipv6_getnexthop={0x30, 0x6a, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@NHA_MASTER={0x8, 0xa, 0x1}, @NHA_ID={0x8}, @NHA_GROUPS={0x4}, @NHA_FDB={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x8d0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000001c0)={0x14, 0x26, 0x1, 0x70bd25, 0x25dfdbfc, {0x6}}, 0x14}}, 0x20006004) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000680)=ANY=[@ANYBLOB="6110bd000000000095"], &(0x7f0000000200)='GPL\x00'}, 0x90) syz_init_net_socket$netrom(0x6, 0x5, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0xfffe}, [@NFTA_SET_USERDATA={0x0, 0xd, 0x1, 0x0, "fb71da273e218636bfef5aa921a19a8e7ab3b5f03388c5"}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x220, 0xc, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1f4, 0x3, 0x0, 0x1, [{0x1f0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x1b8, 0xb, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x3}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x6}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x1000}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}}}, {0x48, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x38, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SET={0x9, 0x1, 'syz1\x00'}, @NFTA_LOOKUP_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0x1e}, @NFTA_LOOKUP_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0x15}]}}}, {0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}, {0x8c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x78, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DREG={0xd, 0x1, 0x1, 0x0, 0x2}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_IMMEDIATE_DATA={0x54, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}]}}}, {0x5c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}, {0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x34, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc}]}}}, {0x10, 0x20, 0x0, 0x1, @counter={{0xc}, @void}}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}}, 0x27c}}, 0x0) 3m21.033722433s ago: executing program 32 (id=5296): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@ipv6_getnexthop={0x30, 0x6a, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@NHA_MASTER={0x8, 0xa, 0x1}, @NHA_ID={0x8}, @NHA_GROUPS={0x4}, @NHA_FDB={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x8d0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000001c0)={0x14, 0x26, 0x1, 0x70bd25, 0x25dfdbfc, {0x6}}, 0x14}}, 0x20006004) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000680)=ANY=[@ANYBLOB="6110bd000000000095"], &(0x7f0000000200)='GPL\x00'}, 0x90) syz_init_net_socket$netrom(0x6, 0x5, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0xfffe}, [@NFTA_SET_USERDATA={0x0, 0xd, 0x1, 0x0, "fb71da273e218636bfef5aa921a19a8e7ab3b5f03388c5"}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x220, 0xc, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1f4, 0x3, 0x0, 0x1, [{0x1f0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x1b8, 0xb, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x3}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x6}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x1000}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}}}, {0x48, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x38, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SET={0x9, 0x1, 'syz1\x00'}, @NFTA_LOOKUP_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0x1e}, @NFTA_LOOKUP_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0x15}]}}}, {0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}, {0x8c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x78, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DREG={0xd, 0x1, 0x1, 0x0, 0x2}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_IMMEDIATE_DATA={0x54, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}]}}}, {0x5c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}, {0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x34, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc}]}}}, {0x10, 0x20, 0x0, 0x1, @counter={{0xc}, @void}}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}}, 0x27c}}, 0x0) 2m7.716821028s ago: executing program 2 (id=6366): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x1}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x15625}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20020804}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001400000008000a00fc000000180001"], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b40a000040000900000000000000000003000000040060809c0a01"], 0xab4}, 0x1, 0x0, 0x0, 0x80}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x99, 0xb, 0x0, 0x1, 0x5392, 0xc, 0x9, {0x0, @in6={{0xa, 0x4e20, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10}}, 0x81, 0x3, 0xc, 0x4b, 0x9}}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006cdbf80789f3f947dd000280080003"], 0xe4}}, 0x20050840) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000001d00010028bd7b000000000007000000", @ANYRES32=r3, @ANYBLOB="000096040a000200aaaaaaaaaa0c0000"], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) getsockopt$netrom_NETROM_T1(0xffffffffffffffff, 0x103, 0x1, &(0x7f0000000400), &(0x7f0000000500)=0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) r5 = socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r6, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x600000000000000, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r7}, 0x10) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x80010, r5, 0xf952b000) sendto$inet(r0, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) 2m7.173516553s ago: executing program 2 (id=6371): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000040)=@assoc_value={r1, 0x9}, 0x8) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f00000004c0)={0x0, 0x6, 0x8, 0x1, 0x7, 0x800, 0x7, 0x5, {r1, @in6={{0xa, 0x4e20, 0xfff, @private0, 0xa}}, 0x1c0000, 0xb, 0x0, 0x3}}, &(0x7f0000000580)=0xb0) r2 = socket$inet6(0xa, 0x2, 0xffffffff) bind$inet6(r0, &(0x7f0000000dc0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x2, @empty, 0x1}, 0x1c) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="380000000b060101000000000000000000000000100007"], 0x38}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) r6 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r6, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) setsockopt$CAN_RAW_FD_FRAMES(r6, 0x65, 0x5, &(0x7f0000000180)=0x1, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendto$packet(r5, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) close(r4) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r3, &(0x7f0000000200)=ANY=[@ANYBLOB="1b23000d"], 0xffdd) syz_emit_ethernet(0x2a, &(0x7f0000000e00)=ANY=[@ANYBLOB="aaaaaaaaaa0400000000000000004500001c0000000000119078000000000000000003004e2000089078"], 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r8, &(0x7f0000000080), 0xc) r9 = socket$inet6(0xa, 0x80003, 0x4) connect$inet6(r9, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000100)={{{@in=@multicast2, @in6=@dev, 0xfffd, 0x0, 0x4e22, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x7, 0xfffffffffffffffd, 0x0, 0xe0, 0x265d}, {0xd20, 0x4, 0x0, 0x1}, 0xfffffffe, 0x0, 0x1, 0x1}, {{@in=@private, 0xffffffff, 0x33}, 0x0, @in=@multicast1, 0x0, 0x3, 0x1, 0x3}}, 0xe8) 2m5.622186371s ago: executing program 2 (id=6384): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x1070bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x20048884) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xc, 0x4}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r11) socket(0x2, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r12 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0xff97, 0x8, {r13, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x27, 0x0) 2m2.85801286s ago: executing program 2 (id=6390): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x2c, 0x11, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_OP={0x8}, @NFTA_EXTHDR_DREG={0x8}]}}}]}], {0x14, 0x10}}, 0xb0}}, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x2c, r4, 0x1, 0x70bd26, 0x25dfdbfe, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaaa}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20006911}, 0x0) sendmmsg$inet6(r0, &(0x7f0000001cc0)=[{{&(0x7f0000000100)={0xa, 0x4e23, 0x4, @empty, 0x9f9}, 0x1c, 0x0, 0x0, &(0x7f0000000700)=[@flowinfo={{0x14, 0x29, 0xb, 0x4}}], 0x18}}], 0x1, 0xe6aa0a9f27214269) r6 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r7, &(0x7f0000000340), 0x11000) vmsplice(r7, &(0x7f0000000280)=[{&(0x7f0000000680)="85", 0x1}], 0x1, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000080)=@newtaction={0x1038, 0x30, 0x1, 0x0, 0x0, {}, [{0x1024, 0x1, [@m_bpf={0x1020, 0x1, 0x0, 0x0, {{0x8}, {0xff8, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xff4, 0x6, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x1038}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x22b}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020e000010000000000000000004830008001200000001000000ff000000400000001ea0abff7f00000000000000d41f9ab9000100700000ebdf000008000000c4fc0000100000000000e2ffff1c004f030006000020080002000080f5008e24ce6e4ae300a5000003000500001e001e02"], 0x80}}, 0x4814) r10 = socket$key(0xf, 0x3, 0x2) sendmmsg(r10, &(0x7f0000000180), 0x229ffa1c4ce5369, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f00000002c0)=""/114, &(0x7f00000003c0)=0x72) sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x2c, 0x0, 0x610, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_PREV_BSSID={0xa, 0x4f, @random="360d352e30b2"}, @NL80211_ATTR_PRIVACY={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCINQ(r6, 0x541b, &(0x7f0000000080)) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x28, r11, 0x1, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_AS={0x5}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4002001}, 0x2400400c) 2m1.961874321s ago: executing program 2 (id=6403): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) r2 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r2, &(0x7f0000001000)={&(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000140)=[{&(0x7f0000001040)="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", 0x5c9}, {&(0x7f0000000600)="3001fb90647586f4601659c5ad2644b99bfd65452e947b394c96c29278d097c5f170d7729d2ce2a2f4bb5bb37e7396e7bac14056f25d17145e73bc2461b20ea3fce771f1b32d1585e8a456763cfafcf7187e45a6e261af6232014cbf8a0f898bf6d14136874b6a1fd7caf8ec9966b0419be0420dc6e247d1a44f038ae29eb4bc67d6a04e80dfb7715ebafaa20fcbc57ade23cba05da1fbe4bba675b742472eebaabf356adc99866930e146125a272cef5baf5dfad4a28a01208d9908183ab2085a781e531f1bed4ac9c245ec19be383047656a7d857d364e6f69eccea5aca3964f00000000", 0xe5}, {&(0x7f0000000940)="79dfe4263f037de282e588f3c773eca5f0c383e7425d1573aa90a44223bfeced3ff85afe9d0c0b3b5a7ed7fcdb96a3934fe7af73ee25d5d36ba42e2a858c3d134299abc0393e031db435ae156e55eb2b2b2e2300e0706dfc5c4ec73ba929ffe8a7bb7ce55d95fb6e58560c45d96a58a13aa944b98c481a82927ec071b272b4592616116116527fd2dbc0dfd58c572f714f6852063afc8358fb33ccb8a95460b32b4e26bea604e534d8983790b5e2a180fed88108b0f5a499d5f80b4e4047d9ecc03d21856a4ec0d0d41496d99dddfa9098d327d9559e82fceb2b1b1c", 0xdc}, {&(0x7f00000003c0)="f2a0f0f863621a483b19e7ecfce0d34e53fbf295927214684f4d69e973ac2fa5fd0ddf47c314ac0cdfd79dc1815274c3ee57068b3793c25fab48eb353478689f452328afb023f75f93227bbe5a4a93e14eb44aacf27f9060bc2c82dd05d1e8c3a549a06e280ca4eaf77b4aed57a0c5f6120d25a3d5121895638ec5e2e600000000f5be12a64e075c60dd63e0b00e8f42bfb7671a56925477029cec7e7f16b358404edfb5e7a0552c317f587f591626ceed08555ca0b2f31a3e7bf5ba7541db275e6a6b6501b87cc74c4804f6da7d3de93327287204cc97f9cb747576d2ab23a6e35c6da6b3240c92ae18b31cb6e7bc60066994e2cb401c76b1840d3e231621355f10ff35ea91ffd463228d000000000000000e454d3c36efee949f6311c6ad78b5a8f091d2ebb008925107e4a4584dab83f7f0cb5ad94266e71e2b7aaa01cf4f9f5e1d52e1e5086e9633cbee8126a2", 0x14f}, {&(0x7f0000000700)="15c84609b06c6d85a5ca6f3a9a242f214aee4e7093161b717090c0c852a05393abd8992d91576f57bbd3488e85d8456d6c6c09de5c5228ee18819665861f01a2823a7cfa8e9260a5fe3921638db2dc5156149f86916810f913a944e1c8cd7fccb63f37900c5b287016e512b050ca214125b2217260c9ce3019e88b80985402ff7ca34be17e0dbda4f028cec9973a2b9eed83eee86f35f2c0adf50a04296e99c0f709fb3990aa5d0e74a125971357630b6f3eb4fb4064c42c2b2519a1c77824df6f0653fb116149fcb5c7e46fce32b1de7f511951d4b1ae47781250afdb11680684c1d2854810a90dbe10016823346663fdf1df6200a0dc3cafe8ec225fda", 0xfe}, {&(0x7f0000000800)="3a0846cacd7448e2015cc9a09c5f5608265e1e0fe02aa9077d7ddd960ba112fe1c64f57cba71e7ad8bbdc06a3299398e39498fc459bc1745e3d21a7ca987a4f4b774fe331d20dab2e846a721ff43b0491dc4cb32e16330e0d7d520f4887da0d6f356f8ef230b9b237409", 0x6a}], 0x6, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}], 0x20}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newlink={0x8c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x50, 0x2, 0x0, 0x1, [@IFLA_HSR_SUPERVISION_ADDR={0xa, 0x4, @local}, @IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x2}, @IFLA_HSR_VERSION={0x5, 0x6, 0x8}, @IFLA_HSR_VERSION={0x5, 0x6, 0xa6}, @IFLA_HSR_SEQ_NR={0x6, 0x5, 0x140}, @IFLA_HSR_SEQ_NR={0x6, 0x5, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x8c}}, 0x0) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)={0xc4, 0x41, 0x100, 0x0, 0x0, "", [@generic="5837795dac3dda9b84e2f8c4adeba23c1b2f31c1391d9b03e53d622b347b0737d8b23d72fab923a318985e1e3bb8fee8abd037e0c19d7b1dff2968e9725313db8e78ceab1c610de3ddcc057a473afeac50754a1f7a4973c18f6af40351445ea2e6b509037c3ceb82ed5ff4ba89b6589dd9088c6553c31dab44542dbd766bd087aee484e3407723a19c91eceffd17ef52a450300a67fcdc96d0d788882be545ab20b9e727adf697e62dea461f5eb9d133cc"]}, 0xc4}], 0x1}, 0x0) 2m1.750540689s ago: executing program 2 (id=6406): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000240)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20048000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)={0x24, r2, 0x1, 0xfffffffc, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 1m46.710285426s ago: executing program 33 (id=6406): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000240)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20048000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)={0x24, r2, 0x1, 0xfffffffc, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 5.446557824s ago: executing program 0 (id=7593): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000300), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x1d, r1, 0x2000000}, 0x10, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="0400000001f400"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=r1, @ANYBLOB="000000000100000000000000840004"], 0x48}}, 0x0) 5.224574665s ago: executing program 0 (id=7597): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000680)={0xc24f, 0xc, 0x200, 0x8, 0x0}, &(0x7f00000006c0)=0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x33, 0x0, 0x802e2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}}) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000140)={r2, 0xdc, "9409b4b74d761196500e53b9e2818958b371cdaa02486697aa2d9537e29262053006b2c3d4f4075b6e6ecefd5d6d8bf39a0502f7c9260cdbfad54dfe4557035f88c612541de897129542f59e95912afbe33801c2dd99ff9c73c2fdc5e39d7e39dd0b08850842e2c84fb4ad3b81a7f41eee4ba747a267e9418f1ca6d3e18e1ec6eea0be2a708f982023ab0da3b62402c5a2032acf69e1dca298fc78555414284d831eeffe1eba5b5901eed4edf0ea2d546353abfd9cb9d1a16e5366c0b7e47969856bc5e804eb2f39a147a78c90aa4aab98a960143b4f8ffd17911ca2"}, &(0x7f00000000c0)=0xe4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000840)={0x30, r5, 0x5, 0x0, 0x1ffff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004014}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={r3, 0x30, &(0x7f0000000240)=[@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x28}}, @in={0x2, 0x4e20, @broadcast}, @in={0x2, 0x4e22, @empty}]}, &(0x7f00000002c0)=0x10) r7 = socket$inet(0x2, 0xa, 0x1) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r7, 0x84, 0x8, &(0x7f0000000040), &(0x7f0000000080)=0x4) 5.061027796s ago: executing program 4 (id=7599): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2d}, 0x90) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000004c0)={'syzkaller1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r1, r4, 0x25, 0x4, @void}, 0x10) write$tun(r2, &(0x7f0000000300)={@void, @val={0x3, 0x5, 0x4, 0x7ff, 0x9d}, @ipv4=@tipc={{0x5, 0x4, 0x3, 0x3, 0x40, 0x68, 0x0, 0x1, 0x6, 0x0, @local, @rand_addr=0x64010102}, @payload_mcast={{{{{{0x2c, 0x0, 0x1, 0x1, 0x0, 0xb, 0x1, 0x2, 0x7, 0x0, 0x3, 0x4, 0x2, 0x1, 0x40, 0x4, 0x4, 0x4e20, 0x4e23}, 0x0, 0x3}, 0x3, 0x3}, 0x1}}}}}, 0x4a) r5 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x0, 0x1400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 4.835006415s ago: executing program 4 (id=7604): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x20048884) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket(0x2, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r8 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x27, 0x0) 4.702412987s ago: executing program 5 (id=7605): bpf$MAP_CREATE(0x0, 0x0, 0x10fb006e22a2f71f) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000680)={'syz_tun\x00', 0x400}) close(r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0x17, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2}, {0x10000002, 0x0, 0xb, 0xc}]}, 0x94) r3 = socket$tipc(0x1e, 0x4, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xe, 0x4, &(0x7f0000001980)=ANY=[@ANYBLOB="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", @ANYRES32=r3], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f00000006c0)=""/195, 0x0, 0x40, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x4}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x3}, 0x10}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000600)={r1, r5, 0x5}, 0x14) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000440)={r4, r5, 0x26, 0x0, @val=@kprobe_multi=@addrs={0x1, 0x0, 0x0, 0x0}}, 0x30) getsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x83, &(0x7f0000000140), &(0x7f00000001c0)=0x4) socketpair$unix(0x1, 0x1, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x64, &(0x7f0000000000), 0x10) sendmsg$inet(r2, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0x1}], 0x1}, 0xc095) socket$kcm(0x2, 0x1, 0x84) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0xff5e, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x40400c0}, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYRES64=r6], 0x68}}, 0x40000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="000000002bde388c6117db77c0165a65c5df95d5d930497e94cc83868f48c3e221dfd675f92669ef3386b9f0e191a1d85b2c86127f367c5c81d573cff6c049f504370b93f318d660cee6e9c0842d9e8a0a2fa3344cef75324925f88dcc14c732a1338c2126053007bb39fde6ca00bc1472d7aa7dfb0f0000b83c9c8d66453175fa3a5061", @ANYRES16=r9, @ANYBLOB="0100ffffffff0a0000002e00000008000300", @ANYRES32=r10, @ANYBLOB="04003400"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11}}) close(r7) 4.586308511s ago: executing program 6 (id=7608): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000300), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x1d, r1, 0x2000000}, 0x10, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="04000000000000000002000000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=r1, @ANYBLOB="000000000100000000000000840004"], 0x48}}, 0x0) 4.469513726s ago: executing program 6 (id=7609): bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=ANY=[@ANYBLOB="0a00000016000000b30000007f00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000001d000000000000000007c8f79519e8c997bcff1be497d02ccce0550bf16bd71a2946b3cad52f67d76e6051cfbccb2ebb3f3d34ee80dd71f69737e171b7c4"], 0x48) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_virt_wifi\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r1, {0xfff1}, {0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x40000) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000580)=@ethtool_per_queue_op={0x4b, 0xf, [0x5, 0x9, 0x3, 0x4, 0x2, 0x3, 0x6, 0x4, 0x4, 0x5, 0x8a, 0xa, 0x4a, 0x400, 0xfffffffc, 0x200, 0xd894, 0xffffffc0, 0x6, 0x3, 0x7, 0xf67, 0x6, 0x8, 0xe4, 0xe4, 0x1000, 0x2, 0x5, 0x0, 0xe03a, 0x6, 0xfda6, 0x6, 0x1, 0x4, 0x9, 0x96, 0x4, 0x4, 0x9, 0xa, 0xfffffffe, 0xffffffff, 0x8, 0xfffffffe, 0x8, 0x3, 0x9, 0xc26, 0x10, 0x21c1, 0x6, 0x6, 0x2, 0x70, 0xff, 0x80, 0xe, 0x2, 0x80000001, 0x3, 0x6, 0x2cc0, 0x40, 0xe7, 0x7ff, 0x8b, 0x9, 0x3, 0x6, 0x2a5, 0x189, 0x8001, 0x3ff, 0x6, 0x0, 0x7f, 0x9, 0xba0, 0x7ff, 0x3, 0x74, 0x4, 0x7, 0x2, 0x2, 0x5, 0x7, 0x4, 0x95f, 0x6, 0x2, 0x7, 0x8, 0x5, 0x1, 0x9, 0x4, 0x1ff, 0x2, 0x5, 0x9c3b, 0x3ff, 0x4, 0x5, 0x3f, 0xb, 0x6c, 0x101, 0x1, 0x66d, 0x4, 0x2a, 0xffffffff, 0xfff, 0x9073, 0x7fffffff, 0x9, 0x8, 0x571, 0x1, 0x101, 0xc408, 0xd, 0x6, 0x4, 0xffffffff], "546ceac14a8e68ea0ce0d0ff9279ba27f962430b31795c559a421c1af645835f84b9630f39d70a9b3680e33a746e382c8cefc31546d0ad9744cbbce17804f04402b254078769a4868d03a21694565f43796b962105a78085ac4ff0687fc57e2511b7ddd4567565f6fd16765cd059031f8547d0238278e41364cc5cd508f82d73217c2bf766a13b4728d1079be85203c6de53bc1ef27ffcc5608d5b53d50a71e9a0497b88dd33c8c6f6b00b8041cd24a03746f38b7dc0aa3aac1338e7eea48d249222be362dafbbddaf0cb702f6d129dd1f7cdc1bed98d7764adf8507cf8bfd"}}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x12, r4, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000000180)=ANY=[@ANYRESDEC], &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xec9}, 0x94) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000001c0), 0x12) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 4.291340432s ago: executing program 0 (id=7610): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x1070bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x20048884) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xc, 0x4}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r11) socket(0x2, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r12 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r13, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}, 0x1100}], 0x27, 0x0) 2.67370308s ago: executing program 1 (id=7611): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, r1, 0x20, 0x2000, 0x2, {}, [@NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0x3}, @NL80211_ATTR_TXQ_LIMIT={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000084}, 0x2000c000) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}}, 0x28}, 0x1, 0x6c00}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002900)={0x1c, 0x2a, 0x1, 0x0, 0x25dfdbfc, {0x1, 0x0, 0x2c00}, [@typed={0x8, 0x1, 0x0, 0x0, @str=')$-\x00'}]}, 0x1c}, 0x1, 0x3000000, 0x0, 0x800}, 0x8080) socket$can_raw(0x1d, 0x3, 0x1) 2.656992666s ago: executing program 6 (id=7612): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x3) (async) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) (async) 2.598428776s ago: executing program 4 (id=7613): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xffffffffffffffd6, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="240000001e00010400000000000000000a0000003f00000000000000080001"], 0x24}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x8}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$igmp(0x2, 0x3, 0x2) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4090}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) ioctl$SIOCGETMIFCNT_IN6(r3, 0x89e0, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x12a0, 0x1100, 0x18c, 0x203, 0x1100, 0x19030000, 0x11d0, 0x2e0, 0x2e0, 0x11d0, 0x2e0, 0x7fffffe, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [0x0, 0x0, 0xff, 0xff], [0x7fffffff, 0xff000000, 0xff000000, 0xff000000], 'bond_slave_1\x00', 'bond0\x00', {}, {}, 0x84, 0x7, 0x2, 0x55}, 0x300, 0x10d8, 0x1100, 0x0, {0x1000000}, [@common=@unspec=@cgroup1={{0x1030}, {0x1, 0x0, 0x1, 0x1, './cgroup.cpu/syz1\x00', 0xfffffffc, {0x3}}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1, 0x8d, 0x74c}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1300) 2.542341223s ago: executing program 6 (id=7614): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000240)={0x0, 0xa2}, 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) socket$unix(0x1, 0x2, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="08000000c30926652aaf2ae48fa4d9110b5adbae221c1f73201f56bab49b266e1e74a0229c4debc51afe35e918447d1c1b0908b8da690aab2149d43dc20b211d494eda8de4e037be3f346c52e23a635b65821805d45c4f96964f209b1a319247a5a5d821821843d5ffc310b664a158b225df3d3fc54ec80ad16a077577252407b576d87679ee99a030aca25970d8f249306a1b1e15eddef385bf448f69fe480314ccc19bb626c80bfab6ab", @ANYRES16=r3, @ANYBLOB="0800000008000000000003000000680001802c0004001400010002004e220000000000000000000000001400020002004e24ac1414aa000000000000000038000400200001000a00000000000000ff01000000000000000000000000000100000000140002000a0000000a0101020000000000000000"], 0x7c}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[], 0x1c}}, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r4, 0x800448d2, &(0x7f0000000100)) recvmmsg(r1, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001680)=""/4091, 0xffb}, {&(0x7f00000003c0)=""/253, 0xfd}], 0x2}}], 0x1, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r7, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r7, 0x84, 0x18, &(0x7f0000000180)={0x0, 0x5}, 0x8) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="380000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="0b1205005924000018001280090001006970697000"], 0x38}}, 0x0) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010014000000000000000200e70308000300", @ANYRES32, @ANYBLOB="0c00990000000000000000000800a0002616000008009f0005000000080026000816"], 0x40}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_SCHED_SCAN(r5, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000640)={0x68, r6, 0x20, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x5, 0x3, r9}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x44, 0x2d, 0x0, 0x1, [{0x4}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x44001) r10 = socket$l2tp(0x2, 0x2, 0x73) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r11, &(0x7f0000000700)=[{&(0x7f00000000c0)="0232e6", 0x3}, {&(0x7f0000000140)="1a36c585f33853c08764d056a86d003cbaf5cde47e5f51052d82c19aa673d671416429534237090097b3116d403a08c07bbbe72da665341d6592092455897fe84a54e94a43", 0x45}], 0x2) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r11, 0xfffff000) setsockopt$ARPT_SO_SET_REPLACE(r10, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x1f8, 0x0, 0x110, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x8, 0x0, {@empty, {[0xff, 0xff]}}, {@mac=@local, {[0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'netdevsim0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}, @multicast2, @multicast2, 0x2, 0x1}}}, {{@arp={@rand_addr=0x64010102, @empty, 0x0, 0x0, 0x0, 0x0, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6572211f, 'syz0\x00', {0x6}}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYBLOB="01002d"], 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x810) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000004e0001000000000000ffffffff020000080001"], 0x1c}}, 0x0) 2.541892693s ago: executing program 5 (id=7615): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x53, &(0x7f0000000000)=0x2, 0x4) r1 = socket$netlink(0x10, 0x3, 0x4) write(r1, &(0x7f00000000c0)="29000000140005b7ff000051915f95eb010100030006a40e07fff024bb000000000000000040000000", 0x29) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040), 0x10) listen(0xffffffffffffffff, 0x0) r3 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r3, &(0x7f0000000080), 0x10) sendmmsg$alg(r3, &(0x7f0000004ec0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000004}], 0x1, 0x20) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg(r3, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) r4 = accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvfrom$unix(r4, &(0x7f0000000140)=""/263, 0x107, 0x0, 0x0, 0x0) r5 = epoll_create(0x7) listen(r4, 0x8) close(r4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="19d910c6d6535860a30000000900000000000000", @ANYRES32=0x1], 0x48) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r8, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c00018005000200000000000800040005000000080001"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r3, &(0x7f00000000c0)={0x20000000}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r2}, 0x10) r9 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r9, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000000)=""/5, 0x204000, 0x1000}, 0x20) r10 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000000bc0)=0xc) 2.466164773s ago: executing program 0 (id=7616): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000000)={0x5c, 0x1, 0x0, 0x0, 0x0, 0xf0}) (async) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000000)={0x5c, 0x1, 0x0, 0x0, 0x0, 0xf0}) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x4, '\x00', 0x0, r0, 0x3, 0x1, 0x3}, 0x50) ioctl$BTRFS_IOC_DEFRAG(r2, 0x50009402, 0x0) sendto$inet(r1, 0x0, 0x0, 0x20008800, &(0x7f00000001c0)={0x2, 0x4e24, @local}, 0x10) (async) sendto$inet(r1, 0x0, 0x0, 0x20008800, &(0x7f00000001c0)={0x2, 0x4e24, @local}, 0x10) 2.428350897s ago: executing program 1 (id=7617): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, 0x0) (async) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={r2, 0x2}, 0x8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket(0x15, 0x5, 0x0) getsockopt(r4, 0x200000000114, 0x5, &(0x7f0000000580)=""/102393, &(0x7f0000000000)=0x18ff9) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xb, &(0x7f0000000080)=@framed={{}, [@printk={@lli, {}, {}, {}, {0x7, 0x0, 0xb, 0x2, 0x0, 0xfff8}, {}, {0x85, 0x0, 0x0, 0x10}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="b70000000000000007000000000000009500e200000000001e5286574356940658273ad1326fc65be4b1037a74cfb5af100fc4e94d123d9b22a7561b8850821bc1f8b5b0a3e3b79b0d96ab7cc60e0e144f0f04bfffe68fe46421a161eedd1a5cee316f68f7617859f06c8efd5da6abe446649c322209b1af93c6c999058168ad0a70992124d19c7c9cc22ff9a6b1a058039ab938480e8697f8715bcb18e1fd0773909464a783148e0e7b604a6c47b33c43a3ffff92ec8bbde1af40f29cfcf0836a70a2f6b1192ab8f24ca363492393e1c2a3b190180caafbf8cfca720074bdcc7cbd978efd8404a1c700000000d97899514e64e36cad5eba82010b2d149ac02e5f07000000000000000000000000000000000000000000009d5df0e0dbb9821d9c5402474d5866ce5eb60188d83ac741b45aeacac594cf09de9b460f48b96ae8a0eead478e46c8ca3e4c5d2b3cb4ad48c830e8003c45f5b2dcbf36b7e8be59ca4b46266cf75bea8a22ab71895d954dc6d28864144c73391770690a9301cde97565d509effc252599b26555355d7955f551df82ea475a711ec56d00000000a89c7533c9955fd63cd00cb83d1228"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) setsockopt$sock_attach_bpf(r5, 0x1, 0x34, &(0x7f00000000c0)=r6, 0x4) (async) getsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000100)=0x30) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="80000000000201040000000000000000020000002400028014000180080001000000000008000200000000000c00028005000100000000002400038014000180080001000001000008000200ac1414000c0002800500010000000000240001801400018008000100ac1414bb08000200ac1414000c0002800500010000000000"], 0x80}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x13, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000014007910480000000000690032000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c}, 0x94) 2.374329465s ago: executing program 4 (id=7618): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', 0x0}) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) sendmsg$netlink(r1, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="3b84954fc5dc2f"], 0xdd12}], 0x1}, 0x20040051) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, @timestamp_reply={0xe, 0x0, 0x0, 0x7fff, 0x1ff, 0xfffffff3, 0xc, 0x8000}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000600)={'macvtap0\x00', 0x0}) r5 = syz_init_net_socket$ax25(0x3, 0x3, 0xca) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000a000000080000000100000f00"], 0x0, 0x3a, 0x0, 0x6}, 0x28) getsockname$ax25(r5, 0x0, &(0x7f00000001c0)) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001400010000000000fbdbdf250a00a100", @ANYRES32=r4, @ANYBLOB="14000100ff05000000000000dfce00000000000108000800"], 0x34}}, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000100)={@private2, r2}, 0x14) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000015"], 0x34}, 0x1, 0x0, 0x0, 0x41c1}, 0x4040800) 2.317579335s ago: executing program 1 (id=7619): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000300), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x1d, r1, 0x2000000}, 0x10, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="040000000000000003e8000000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=r1, @ANYBLOB="000000000100000000000000840004"], 0x48}}, 0x0) 2.307371455s ago: executing program 4 (id=7620): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000b80)={@broadcast, @random="6487a2bed3d6", @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x14, 0x300, 0x0, 0x0, 0x6c, 0x0, @private}, {{}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4}}}}}}}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0xd4, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_EXPRESSIONS={0xb0, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_LOOKUP_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_LOOKUP_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_LOOKUP_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0x11}, @NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0x10}]}}}, {0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4, 0x2, 0x0, 0x1, ["", ""]}}}, {0xc, 0x1, 0x0, 0x1, @rt={{0x7}, @void}}, {0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}, {0x38, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0xb}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xfc}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) 2.250064723s ago: executing program 5 (id=7621): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r4) sendmsg$IEEE802154_SCAN_REQ(r4, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000ac0)={0x1c, r5, 0xd5c15c672e322a81, 0x0, 0x0, {}, [@IEEE802154_ATTR_SCAN_TYPE={0x5}]}, 0x1c}}, 0x0) (async) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000012c0)=@nat={'nat\x00', 0x670, 0x5, 0x3d0, 0x270, 0x0, 0xfeffffff, 0x270, 0xf8, 0x338, 0x338, 0xffffffff, 0x338, 0x338, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0xffffffff, 'veth0_to_bond\x00', 'caif0\x00', {}, {}, 0x6}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x7, 0x3, 0xa}}, @common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2, 0x4}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id}}}}, {{@ip={@loopback, @broadcast, 0xff, 0x0, 'lo\x00', 'veth1_to_batadv\x00', {0xff}}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0xe, "8a1c"}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@remote, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0x90, 0xc8, 0x0, {}, [@common=@socket0={{0x20}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @private=0xa010101, @rand_addr, @gre_key, @gre_key}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x430) (async, rerun: 64) write$tun(r0, &(0x7f0000000140)={@void, @val={0x3, 0x3, 0x1, 0x4, 0x6, 0xbc}, @ipv4=@tipc={{0x17, 0x4, 0x3, 0x5, 0x85, 0x65, 0x0, 0x8, 0x6, 0x0, @local, @private=0xa010102, {[@timestamp_prespec={0x44, 0x24, 0xc9, 0x3, 0x1, [{@local, 0x99a}, {@broadcast, 0x10001}, {@local, 0xfffffffe}, {@remote, 0x1}]}, @end, @timestamp={0x44, 0x20, 0xfb, 0x0, 0x6, [0x0, 0x8, 0x5, 0x10000, 0x5a82, 0x6, 0x200]}, @end]}}, @payload_named={{{{{0x29, 0x0, 0x1, 0x1, 0x0, 0xa, 0x0, 0x2, 0x5, 0x0, 0x1, 0x8, 0x1, 0x2, 0x9, 0x2, 0x2, 0x4e24, 0x4e22}, 0x0, 0x2}, 0x4, 0x2}}, [0x0]}}}, 0x8f) (async, rerun: 64) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x5}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x4, 0xffffff00, 0x6, 0xc31, 0x7}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) bind$rds(r1, &(0x7f00000003c0)={0x2, 0x4e20, @multicast1}, 0x10) (async) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000340), &(0x7f0000000380)=0x4) write$cgroup_subtree(r6, &(0x7f0000000080)=ANY=[], 0x10448) (async, rerun: 64) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) (rerun: 64) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@o_path={&(0x7f00000000c0)='./file0\x00', 0x0, 0x4008, r0}, 0x18) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async, rerun: 64) getsockname$packet(r7, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) (async, rerun: 64) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r8, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r8], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r10 = socket(0x10, 0x3, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newtfilter={0x170, 0x28, 0xd27, 0x1004001, 0x0, {0x0, 0x0, 0x0, r11, {0x10, 0x9}, {}, {0x2, 0x6}}, [@filter_kind_options=@f_matchall={{0xd}, {0x13c, 0x2, [@TCA_MATCHALL_FLAGS={0x32}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x5}, @TCA_MATCHALL_ACT={0x128, 0x2, [@m_simple={0x124, 0x12, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x5, 0x3, '\x00'}]}, {0xed, 0x6, "3e646269c3df304241ce324d47b125d7a4a8d79b2a0b56f9a790eef30c380ee737f882a1ace5b99dc384455842da670b4364c2699e2a4deda99d5ac5af7598eafb44ee7b61521294803d19e166a043c9ea005551852b2eb1b21d628ae156baaa32c3890b2ff9e1f2274b7900ade8cb7f068e2d8c59223aa536382f4b3fdc88b30e39c6a0b01e34b42ad9559b09bd8aacd3d6838e7f2807af14a1f1e6f2cd0816e3910e7458eeac8454326426f6a645ad4c0198e50d009c89064d00d73616952b31bebb70c93daa6eca3d0e675df6606ebe16c1143909e95618e4887ac4135f5d5420ea66b543501ea0"}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x170}, 0x1, 0x0, 0x0, 0x810}, 0x48c0) 2.223487166s ago: executing program 1 (id=7622): bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=ANY=[@ANYBLOB="0a00000016000000b30000007f00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000001d000000000000000007c8f79519e8c997bcff1be497d02ccce0550bf16bd71a2946b3cad52f67d76e6051cfbccb2ebb3f3d34ee80dd71f69737e171b7c4"], 0x48) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_virt_wifi\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r1, {0xfff1}, {0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x40000) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000580)=@ethtool_per_queue_op={0x4b, 0xf, [0x5, 0x9, 0x3, 0x4, 0x2, 0x3, 0x6, 0x4, 0x4, 0x5, 0x8a, 0xa, 0x4a, 0x400, 0xfffffffc, 0x200, 0xd894, 0xffffffc0, 0x6, 0x3, 0x7, 0xf67, 0x6, 0x8, 0xe4, 0xe4, 0x1000, 0x2, 0x5, 0x0, 0xe03a, 0x6, 0xfda6, 0x6, 0x1, 0x4, 0x9, 0x96, 0x4, 0x4, 0x9, 0xa, 0xfffffffe, 0xffffffff, 0x8, 0xfffffffe, 0x8, 0x3, 0x9, 0xc26, 0x10, 0x21c1, 0x6, 0x6, 0x2, 0x70, 0xff, 0x80, 0xe, 0x2, 0x80000001, 0x3, 0x6, 0x2cc0, 0x40, 0xe7, 0x7ff, 0x8b, 0x9, 0x3, 0x6, 0x2a5, 0x189, 0x8001, 0x3ff, 0x6, 0x0, 0x7f, 0x9, 0xba0, 0x7ff, 0x3, 0x74, 0x4, 0x7, 0x2, 0x2, 0x5, 0x7, 0x4, 0x95f, 0x6, 0x2, 0x7, 0x8, 0x5, 0x1, 0x9, 0x4, 0x1ff, 0x2, 0x5, 0x9c3b, 0x3ff, 0x4, 0x5, 0x3f, 0xb, 0x6c, 0x101, 0x1, 0x66d, 0x4, 0x2a, 0xffffffff, 0xfff, 0x9073, 0x7fffffff, 0x9, 0x8, 0x571, 0x1, 0x101, 0xc408, 0xd, 0x6, 0x4, 0xffffffff], "546ceac14a8e68ea0ce0d0ff9279ba27f962430b31795c559a421c1af645835f84b9630f39d70a9b3680e33a746e382c8cefc31546d0ad9744cbbce17804f04402b254078769a4868d03a21694565f43796b962105a78085ac4ff0687fc57e2511b7ddd4567565f6fd16765cd059031f8547d0238278e41364cc5cd508f82d73217c2bf766a13b4728d1079be85203c6de53bc1ef27ffcc5608d5b53d50a71e9a0497b88dd33c8c6f6b00b8041cd24a03746f38b7dc0aa3aac1338e7eea48d249222be362dafbbddaf0cb702f6d129dd1f7cdc1bed98d7764adf8507cf8bfd"}}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x12, r4, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000000180)=ANY=[@ANYRESDEC], &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xec9}, 0x94) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000001c0), 0x12) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 2.189693604s ago: executing program 4 (id=7623): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x20048884) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket(0x2, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r8 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x27, 0x0) 2.122520523s ago: executing program 5 (id=7624): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x83, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x34, r0, 0x1, 0x70bd28, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xea}]}, 0x34}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x83, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x34, r0, 0x1, 0x70bd28, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xea}]}, 0x34}}, 0x0) (async) 2.035355275s ago: executing program 1 (id=7625): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newtaction={0x1e0, 0x30, 0x48b, 0x70bd26, 0x40000000, {}, [{0x1cc, 0x1, [@m_ctinfo={0x38, 0xd, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x6}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}, @m_connmark={0x190, 0x18, 0x0, 0x0, {{0xd}, {0x74, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0xef1, 0x4, 0x6, 0x4}, 0x8001}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x1, 0x20000000, 0xfffffff2, 0x3}, 0x3}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xbe, 0xa, 0x4, 0x9, 0x9}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x0, 0x20000000, 0x4e000000, 0xffffff11}, 0x6}}]}, {0xf0, 0x6, "21fad18d59a4cd80bea224ea63c09e4dad80894a1229c48f46cb768ce3b7429516895354199c64c9fb6ac3663243c4c964da24a33a95e3efd1e732fcef9ffefea452d14909b9b47031e63655ede52a7174493b81b65aecd211454d21e7b96728cb7aed97399bc08168c01e664fa1cfecb4165f7837b9a2c827be13d6a59bd9b31be67482dfa7f10ba6f93e1fd4ea4ba5b50a904950a398bc4cc42e598ee355b07e8e0bed2ff798c55186ec82a4522b0c83a38c6c21cc9f2296ffb0384f85a85d4ead9baeb463785a65563b364adfea6e6c028dd058a1e711412ab057dd7c562f523498c2ebae7f07a0f3d2ad"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}, 0x1e0}}, 0x481d5) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c0001800600060065580000080002"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) 1.98816735s ago: executing program 1 (id=7626): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x1070bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x20048884) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xc, 0x4}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r11) socket(0x2, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r12 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r13, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}, 0x2900}], 0x27, 0x0) 1.94198368s ago: executing program 5 (id=7627): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000000)=0x80000002, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r1, 0x0, 0x33, &(0x7f0000000000)=0x80000002, 0x4) sendto$inet(r1, &(0x7f0000000040)='@', 0x1, 0x20044890, &(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10) (async) sendto$inet(r1, &(0x7f0000000040)='@', 0x1, 0x20044890, &(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10) connect$inet(r0, &(0x7f0000000400)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10) socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000640)=@newtaction={0x5c, 0x30, 0x7, 0x0, 0x0, {}, [{0x48, 0x1, [@m_bpf={0x44, 0x1, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0) 1.652073194s ago: executing program 6 (id=7628): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000000080)=0x10, 0x4) close(r0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) r2 = socket(0x840000000002, 0x3, 0xff) bind$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e23, 0x9, @empty, 0x5}, 0x1c) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000000280)={0xb4, 0x1, 0x1, 0x301, 0x0, 0x0, {0x5, 0x0, 0x5}, [@CTA_NAT_SRC={0x4c, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @mcast2}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, @CTA_HELP={0xc, 0x5, 0x0, 0x1, {0x5, 0x1, '\x00'}}, @CTA_LABELS_MASK={0x2c, 0x17, [0x4, 0x4, 0x7546, 0x8, 0x7, 0x3, 0xa49, 0x2, 0x8001, 0x80000000]}, @CTA_STATUS_MASK={0x8}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xf, 0x1, 'netbios-ns\x00'}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8800}, 0x4004) 1.536429489s ago: executing program 0 (id=7629): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) r1 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_SIOCGIFADDR(r1, 0x8915, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x24, r5, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}]}, 0x24}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r6, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000007, 0x10012, r6, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) 10.443274ms ago: executing program 5 (id=7630): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x17, 0x0, 0x1, 0x1ff}, 0x48) syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$inet6(0xa, 0x2, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}], 0xb8}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000013c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb8}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r11, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32=r2], 0x1c}}, 0x8004) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) write$nci(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="414601", @ANYRES8=r12], 0x4) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r13) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000007c0)={0x4c, r14, 0x1, 0x70bd2a, 0x0, {0x4e}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xab, 0xfffffffc}}, {0x8, 0xb, 0x60a7}, {0x6, 0x11, 0x2}}]}, 0x4c}}, 0x4004880) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, 0x0, 0x20, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r15}, @val={0xc, 0x99, {0x8, 0x9}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x40004}, 0x400) r16 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r16, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000011008188040f80ec59acbc0413a181004000000004000000000000000e000a0012e2440102800200121f", 0x2e}], 0x1}, 0x0) 10.1164ms ago: executing program 6 (id=7631): socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r0 = socket$netlink(0x10, 0x3, 0xe) (rerun: 64) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async, rerun: 64) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32=r2, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) (async, rerun: 64) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0xe, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="911039000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) (async) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000140), &(0x7f0000000180)=0x4) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e21, 0xed, @dev={0xfe, 0x80, '\x00', 0x12}, 0xc7}, 0x1c) 0s ago: executing program 0 (id=7632): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000300), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x1d, r1, 0x2000000}, 0x10, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="040000000000000001f4000000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=r1, @ANYBLOB="000000000100000000000000840004"], 0x48}}, 0x0) kernel console output (not intermixed with test programs): 9: 0000000000000000 [ 645.857660][T29171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 645.857668][T29171] R13: 00007febba3e6038 R14: 00007febba3e5fa0 R15: 00007ffe19db6fb8 [ 645.857691][T29171] [ 645.909032][T29173] netlink: 'syz.4.7008': attribute type 32 has an invalid length. [ 645.955062][T29175] Cannot find add_set index 2 as target [ 646.028629][T29173] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7008'. [ 646.084251][T29183] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 646.216290][T29173] bond1: Setting coupled_control to off (0) [ 646.338422][T29197] netlink: 64 bytes leftover after parsing attributes in process `syz.5.7013'. [ 646.436172][T29201] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7014'. [ 646.663099][T29217] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7020'. [ 646.672768][T29218] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7019'. [ 646.868343][T29225] FAULT_INJECTION: forcing a failure. [ 646.868343][T29225] name failslab, interval 1, probability 0, space 0, times 0 [ 646.900269][T29225] CPU: 1 UID: 0 PID: 29225 Comm: syz.4.7022 Not tainted syzkaller #0 PREEMPT(full) [ 646.900294][T29225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 646.900304][T29225] Call Trace: [ 646.900312][T29225] [ 646.900320][T29225] dump_stack_lvl+0x189/0x250 [ 646.900348][T29225] ? __pfx____ratelimit+0x10/0x10 [ 646.900372][T29225] ? __pfx_dump_stack_lvl+0x10/0x10 [ 646.900395][T29225] ? __pfx__printk+0x10/0x10 [ 646.900429][T29225] ? __pfx___might_resched+0x10/0x10 [ 646.900446][T29225] ? fs_reclaim_acquire+0x7d/0x100 [ 646.900466][T29225] should_fail_ex+0x414/0x560 [ 646.900498][T29225] should_failslab+0xa8/0x100 [ 646.900518][T29225] __kmalloc_noprof+0xcb/0x7f0 [ 646.900539][T29225] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 646.900562][T29225] ? __local_bh_enable_ip+0x12d/0x1c0 [ 646.900586][T29225] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 646.900615][T29225] genl_family_rcv_msg_doit+0xb8/0x300 [ 646.900642][T29225] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 646.900672][T29225] ? apparmor_capable+0x137/0x1b0 [ 646.900694][T29225] ? bpf_lsm_capable+0x9/0x20 [ 646.900713][T29225] ? security_capable+0x7e/0x2e0 [ 646.900743][T29225] genl_rcv_msg+0x60e/0x790 [ 646.900770][T29225] ? __pfx_genl_rcv_msg+0x10/0x10 [ 646.900790][T29225] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 646.900808][T29225] ? __pfx_nl80211_set_station+0x10/0x10 [ 646.900828][T29225] ? __pfx_nl80211_post_doit+0x10/0x10 [ 646.900849][T29225] ? __asan_memcpy+0x40/0x70 [ 646.900870][T29225] ? __pfx_ref_tracker_free+0x10/0x10 [ 646.900895][T29225] netlink_rcv_skb+0x208/0x470 [ 646.900910][T29225] ? __lock_acquire+0xab9/0xd20 [ 646.900928][T29225] ? __pfx_genl_rcv_msg+0x10/0x10 [ 646.900957][T29225] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 646.900993][T29225] ? down_read+0x1ad/0x2e0 [ 646.901014][T29225] genl_rcv+0x28/0x40 [ 646.901032][T29225] netlink_unicast+0x82f/0x9e0 [ 646.901066][T29225] ? __pfx_netlink_unicast+0x10/0x10 [ 646.901091][T29225] ? netlink_sendmsg+0x642/0xb30 [ 646.901106][T29225] ? skb_put+0x11b/0x210 [ 646.901127][T29225] netlink_sendmsg+0x805/0xb30 [ 646.901152][T29225] ? __pfx_netlink_sendmsg+0x10/0x10 [ 646.901172][T29225] ? aa_sock_msg_perm+0xf1/0x1d0 [ 646.901197][T29225] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 646.901213][T29225] ? __pfx_netlink_sendmsg+0x10/0x10 [ 646.901231][T29225] __sock_sendmsg+0x21c/0x270 [ 646.901256][T29225] ____sys_sendmsg+0x505/0x830 [ 646.901279][T29225] ? __pfx_____sys_sendmsg+0x10/0x10 [ 646.901304][T29225] ? import_iovec+0x74/0xa0 [ 646.901327][T29225] ___sys_sendmsg+0x21f/0x2a0 [ 646.901349][T29225] ? __pfx____sys_sendmsg+0x10/0x10 [ 646.901406][T29225] ? __fget_files+0x2a/0x420 [ 646.901422][T29225] ? __fget_files+0x3a0/0x420 [ 646.901449][T29225] __x64_sys_sendmsg+0x19b/0x260 [ 646.901471][T29225] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 646.901500][T29225] ? __pfx_ksys_write+0x10/0x10 [ 646.901527][T29225] ? do_syscall_64+0xbe/0xfa0 [ 646.901553][T29225] do_syscall_64+0xfa/0xfa0 [ 646.901572][T29225] ? lockdep_hardirqs_on+0x9c/0x150 [ 646.901592][T29225] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 646.901608][T29225] ? clear_bhb_loop+0x60/0xb0 [ 646.901629][T29225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 646.901646][T29225] RIP: 0033:0x7f412a38f6c9 [ 646.901663][T29225] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 646.901678][T29225] RSP: 002b:00007f412b162038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 646.901701][T29225] RAX: ffffffffffffffda RBX: 00007f412a5e5fa0 RCX: 00007f412a38f6c9 [ 646.901712][T29225] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000003 [ 646.901721][T29225] RBP: 00007f412b162090 R08: 0000000000000000 R09: 0000000000000000 [ 646.901731][T29225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 646.901741][T29225] R13: 00007f412a5e6038 R14: 00007f412a5e5fa0 R15: 00007ffc5edcc988 [ 646.901771][T29225] [ 647.538864][T29251] FAULT_INJECTION: forcing a failure. [ 647.538864][T29251] name failslab, interval 1, probability 0, space 0, times 0 [ 647.560104][T29251] CPU: 0 UID: 0 PID: 29251 Comm: syz.4.7030 Not tainted syzkaller #0 PREEMPT(full) [ 647.560130][T29251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 647.560141][T29251] Call Trace: [ 647.560150][T29251] [ 647.560158][T29251] dump_stack_lvl+0x189/0x250 [ 647.560186][T29251] ? __pfx____ratelimit+0x10/0x10 [ 647.560209][T29251] ? __pfx_dump_stack_lvl+0x10/0x10 [ 647.560230][T29251] ? __pfx__printk+0x10/0x10 [ 647.560255][T29251] ? __might_fault+0xb0/0x130 [ 647.560281][T29251] should_fail_ex+0x414/0x560 [ 647.560311][T29251] should_failslab+0xa8/0x100 [ 647.560331][T29251] kmem_cache_alloc_noprof+0x74/0x6e0 [ 647.560355][T29251] ? skb_clone+0x212/0x3a0 [ 647.560377][T29251] ? ref_tracker_alloc+0x318/0x460 [ 647.560397][T29251] skb_clone+0x212/0x3a0 [ 647.560414][T29251] ? can_send+0x655/0xd00 [ 647.560440][T29251] can_send+0x673/0xd00 [ 647.560470][T29251] ? __pfx_can_send+0x10/0x10 [ 647.560491][T29251] ? dev_get_by_index+0x22/0x2e0 [ 647.560512][T29251] ? dev_get_by_index+0x22/0x2e0 [ 647.560539][T29251] bcm_tx_send+0x406/0x5f0 [ 647.560564][T29251] ? __pfx_bcm_tx_send+0x10/0x10 [ 647.560593][T29251] bcm_sendmsg+0x4c8/0x6a0 [ 647.560618][T29251] ? __pfx_bcm_sendmsg+0x10/0x10 [ 647.560649][T29251] ? __lock_acquire+0xab9/0xd20 [ 647.560664][T29251] ? aa_sock_msg_perm+0xf1/0x1d0 [ 647.560691][T29251] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 647.560709][T29251] ? __pfx_bcm_sendmsg+0x10/0x10 [ 647.560728][T29251] __sock_sendmsg+0x21c/0x270 [ 647.560753][T29251] ____sys_sendmsg+0x505/0x830 [ 647.560779][T29251] ? __pfx_____sys_sendmsg+0x10/0x10 [ 647.560808][T29251] ? import_iovec+0x74/0xa0 [ 647.560833][T29251] ___sys_sendmsg+0x21f/0x2a0 [ 647.560855][T29251] ? __pfx____sys_sendmsg+0x10/0x10 [ 647.560912][T29251] ? __fget_files+0x2a/0x420 [ 647.560929][T29251] ? __fget_files+0x3a0/0x420 [ 647.560957][T29251] __x64_sys_sendmsg+0x19b/0x260 [ 647.560979][T29251] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 647.561008][T29251] ? __pfx_ksys_write+0x10/0x10 [ 647.561035][T29251] ? do_syscall_64+0xbe/0xfa0 [ 647.561062][T29251] do_syscall_64+0xfa/0xfa0 [ 647.561083][T29251] ? lockdep_hardirqs_on+0x9c/0x150 [ 647.561106][T29251] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 647.561123][T29251] ? clear_bhb_loop+0x60/0xb0 [ 647.561144][T29251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 647.561161][T29251] RIP: 0033:0x7f412a38f6c9 [ 647.561178][T29251] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 647.561193][T29251] RSP: 002b:00007f412b162038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 647.561213][T29251] RAX: ffffffffffffffda RBX: 00007f412a5e5fa0 RCX: 00007f412a38f6c9 [ 647.561226][T29251] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 647.561238][T29251] RBP: 00007f412b162090 R08: 0000000000000000 R09: 0000000000000000 [ 647.561250][T29251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 647.561260][T29251] R13: 00007f412a5e6038 R14: 00007f412a5e5fa0 R15: 00007ffc5edcc988 [ 647.561292][T29251] [ 648.012459][T29260] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7031'. [ 648.025356][T29264] netlink: 48 bytes leftover after parsing attributes in process `syz.4.7034'. [ 648.109490][T29263] erspan1: entered promiscuous mode [ 648.499365][T29284] netlink: 'syz.4.7043': attribute type 12 has an invalid length. [ 648.507423][T29284] netlink: 190972 bytes leftover after parsing attributes in process `syz.4.7043'. [ 648.712267][ T1118] net_ratelimit: 22 callbacks suppressed [ 648.712286][ T1118] bond0: (slave wlan0): failed to get link speed/duplex [ 648.842174][T12567] bond0: (slave wlan0): failed to get link speed/duplex [ 648.969189][ T1118] bond0: (slave wlan0): failed to get link speed/duplex [ 649.047440][T29319] FAULT_INJECTION: forcing a failure. [ 649.047440][T29319] name failslab, interval 1, probability 0, space 0, times 0 [ 649.087405][T29319] CPU: 1 UID: 0 PID: 29319 Comm: syz.5.7053 Not tainted syzkaller #0 PREEMPT(full) [ 649.087431][T29319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 649.087442][T29319] Call Trace: [ 649.087450][T29319] [ 649.087458][T29319] dump_stack_lvl+0x189/0x250 [ 649.087486][T29319] ? __pfx____ratelimit+0x10/0x10 [ 649.087510][T29319] ? __pfx_dump_stack_lvl+0x10/0x10 [ 649.087533][T29319] ? __pfx__printk+0x10/0x10 [ 649.087567][T29319] should_fail_ex+0x414/0x560 [ 649.087599][T29319] should_failslab+0xa8/0x100 [ 649.087620][T29319] __kmalloc_cache_noprof+0x6f/0x6f0 [ 649.087647][T29319] ? __sctp_v6_cmp_addr+0x1e6/0x510 [ 649.087670][T29319] ? sctp_add_bind_addr+0x8c/0x370 [ 649.087691][T29319] ? sctp_add_bind_addr+0xb0/0x370 [ 649.087724][T29319] sctp_add_bind_addr+0x8c/0x370 [ 649.087752][T29319] sctp_copy_local_addr_list+0x30b/0x4e0 [ 649.087780][T29319] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 649.087803][T29319] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 649.087827][T29319] ? sctp_v6_is_any+0x64/0x80 [ 649.087852][T29319] ? sctp_copy_one_addr+0x93/0x360 [ 649.087878][T29319] sctp_bind_addr_copy+0xb3/0x3c0 [ 649.087902][T29319] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 649.087928][T29319] sctp_connect_new_asoc+0x2e0/0x690 [ 649.087951][T29319] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 649.087967][T29319] ? __local_bh_enable_ip+0x12d/0x1c0 [ 649.087994][T29319] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 649.088013][T29319] ? security_sctp_bind_connect+0x7e/0x2e0 [ 649.088037][T29319] sctp_sendmsg+0x155c/0x2810 [ 649.088069][T29319] ? __pfx_sctp_sendmsg+0x10/0x10 [ 649.088091][T29319] ? aa_sk_perm+0x81e/0x950 [ 649.088120][T29319] ? __pfx_aa_sk_perm+0x10/0x10 [ 649.088147][T29319] ? sock_rps_record_flow+0x19/0x410 [ 649.088174][T29319] ? inet_sendmsg+0x2f4/0x370 [ 649.088195][T29319] __sock_sendmsg+0x19c/0x270 [ 649.088221][T29319] __sys_sendto+0x3bd/0x520 [ 649.088241][T29319] ? __pfx___sys_sendto+0x10/0x10 [ 649.088255][T29319] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 649.088294][T29319] ? __fget_files+0x3a0/0x420 [ 649.088323][T29319] ? ksys_write+0x22a/0x250 [ 649.088349][T29319] ? __pfx_ksys_write+0x10/0x10 [ 649.088376][T29319] __x64_sys_sendto+0xde/0x100 [ 649.088396][T29319] do_syscall_64+0xfa/0xfa0 [ 649.088418][T29319] ? lockdep_hardirqs_on+0x9c/0x150 [ 649.088439][T29319] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 649.088456][T29319] ? clear_bhb_loop+0x60/0xb0 [ 649.088475][T29319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 649.088492][T29319] RIP: 0033:0x7fcab8d8f6c9 [ 649.088508][T29319] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 649.088523][T29319] RSP: 002b:00007fcab9c20038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 649.088543][T29319] RAX: ffffffffffffffda RBX: 00007fcab8fe5fa0 RCX: 00007fcab8d8f6c9 [ 649.088556][T29319] RDX: 0000000000000001 RSI: 0000200000000840 RDI: 0000000000000003 [ 649.088574][T29319] RBP: 00007fcab9c20090 R08: 0000200000000340 R09: 000000000000001c [ 649.088586][T29319] R10: 0000000000065055 R11: 0000000000000246 R12: 0000000000000002 [ 649.088597][T29319] R13: 00007fcab8fe6038 R14: 00007fcab8fe5fa0 R15: 00007ffc11c837e8 [ 649.088629][T29319] [ 649.415753][T12567] bond0: (slave wlan0): failed to get link speed/duplex [ 649.531942][ T1118] bond0: (slave wlan0): failed to get link speed/duplex [ 649.714847][T12567] bond0: (slave wlan0): failed to get link speed/duplex [ 649.899042][T29339] 8021q: adding VLAN 0 to HW filter on device bond2 [ 649.913883][ T1118] bond0: (slave wlan0): failed to get link speed/duplex [ 650.022139][ T13] bond0: (slave wlan0): failed to get link speed/duplex [ 650.180042][T29368] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 650.240666][T29359] bond3: option min_links: invalid value (18446744073709551614) [ 650.254322][T29359] bond3: option min_links: allowed values 0 - 2147483647 [ 650.267234][T29359] bond3 (unregistering): Released all slaves [ 650.306752][ T13] bond0: (slave wlan0): failed to get link speed/duplex [ 650.389044][T29381] FAULT_INJECTION: forcing a failure. [ 650.389044][T29381] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 650.402653][T29381] CPU: 1 UID: 0 PID: 29381 Comm: syz.5.7077 Not tainted syzkaller #0 PREEMPT(full) [ 650.402676][T29381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 650.402688][T29381] Call Trace: [ 650.402696][T29381] [ 650.402704][T29381] dump_stack_lvl+0x189/0x250 [ 650.402732][T29381] ? __pfx____ratelimit+0x10/0x10 [ 650.402754][T29381] ? __pfx_dump_stack_lvl+0x10/0x10 [ 650.402776][T29381] ? __pfx__printk+0x10/0x10 [ 650.402807][T29381] should_fail_ex+0x414/0x560 [ 650.402837][T29381] _copy_to_user+0x31/0xb0 [ 650.402861][T29381] simple_read_from_buffer+0xe1/0x170 [ 650.402891][T29381] proc_fail_nth_read+0x1b3/0x220 [ 650.402915][T29381] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 650.402939][T29381] ? rw_verify_area+0x2a6/0x4d0 [ 650.402957][T29381] ? __lock_acquire+0xab9/0xd20 [ 650.402972][T29381] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 650.402994][T29381] vfs_read+0x200/0xa30 [ 650.403014][T29381] ? fdget_pos+0x247/0x320 [ 650.403036][T29381] ? __pfx___mutex_lock+0x10/0x10 [ 650.403060][T29381] ? __pfx_vfs_read+0x10/0x10 [ 650.403084][T29381] ? __fget_files+0x2a/0x420 [ 650.403104][T29381] ? __fget_files+0x3a0/0x420 [ 650.403120][T29381] ? __fget_files+0x2a/0x420 [ 650.403145][T29381] ksys_read+0x145/0x250 [ 650.403171][T29381] ? __pfx_ksys_read+0x10/0x10 [ 650.403195][T29381] ? do_syscall_64+0xbe/0xfa0 [ 650.403222][T29381] do_syscall_64+0xfa/0xfa0 [ 650.403243][T29381] ? lockdep_hardirqs_on+0x9c/0x150 [ 650.403265][T29381] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 650.403282][T29381] ? clear_bhb_loop+0x60/0xb0 [ 650.403302][T29381] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 650.403318][T29381] RIP: 0033:0x7fcab8d8e0dc [ 650.403334][T29381] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 650.403347][T29381] RSP: 002b:00007fcab9c20030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 650.403367][T29381] RAX: ffffffffffffffda RBX: 00007fcab8fe5fa0 RCX: 00007fcab8d8e0dc [ 650.403379][T29381] RDX: 000000000000000f RSI: 00007fcab9c200a0 RDI: 0000000000000004 [ 650.403390][T29381] RBP: 00007fcab9c20090 R08: 0000000000000000 R09: 0000000000000000 [ 650.403400][T29381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 650.403411][T29381] R13: 00007fcab8fe6038 R14: 00007fcab8fe5fa0 R15: 00007ffc11c837e8 [ 650.403443][T29381] [ 650.692991][ T13] bond0: (slave wlan0): failed to get link speed/duplex [ 650.801514][T29392] __nla_validate_parse: 10 callbacks suppressed [ 650.801532][T29392] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7079'. [ 650.833870][T29394] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7081'. [ 650.913175][T29396] FAULT_INJECTION: forcing a failure. [ 650.913175][T29396] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 650.929096][T29396] CPU: 1 UID: 0 PID: 29396 Comm: syz.5.7082 Not tainted syzkaller #0 PREEMPT(full) [ 650.929122][T29396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 650.929134][T29396] Call Trace: [ 650.929142][T29396] [ 650.929150][T29396] dump_stack_lvl+0x189/0x250 [ 650.929179][T29396] ? __pfx____ratelimit+0x10/0x10 [ 650.929202][T29396] ? __pfx_dump_stack_lvl+0x10/0x10 [ 650.929224][T29396] ? __pfx__printk+0x10/0x10 [ 650.929243][T29396] ? __might_fault+0xb0/0x130 [ 650.929277][T29396] should_fail_ex+0x414/0x560 [ 650.929307][T29396] _copy_from_iter+0x1de/0x1790 [ 650.929341][T29396] ? rcu_is_watching+0x15/0xb0 [ 650.929365][T29396] ? kmalloc_reserve+0xbd/0x290 [ 650.929382][T29396] ? __pfx__copy_from_iter+0x10/0x10 [ 650.929403][T29396] ? __build_skb_around+0x262/0x3f0 [ 650.929432][T29396] ? netlink_sendmsg+0x642/0xb30 [ 650.929448][T29396] ? skb_put+0x11b/0x210 [ 650.929469][T29396] netlink_sendmsg+0x6b2/0xb30 [ 650.929496][T29396] ? __pfx_netlink_sendmsg+0x10/0x10 [ 650.929517][T29396] ? aa_sock_msg_perm+0xf1/0x1d0 [ 650.929544][T29396] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 650.929561][T29396] ? __pfx_netlink_sendmsg+0x10/0x10 [ 650.929579][T29396] __sock_sendmsg+0x21c/0x270 [ 650.929605][T29396] ____sys_sendmsg+0x505/0x830 [ 650.929630][T29396] ? __pfx_____sys_sendmsg+0x10/0x10 [ 650.929658][T29396] ? import_iovec+0x74/0xa0 [ 650.929683][T29396] ___sys_sendmsg+0x21f/0x2a0 [ 650.929705][T29396] ? __pfx____sys_sendmsg+0x10/0x10 [ 650.929759][T29396] ? __fget_files+0x2a/0x420 [ 650.929776][T29396] ? __fget_files+0x3a0/0x420 [ 650.929803][T29396] __x64_sys_sendmsg+0x19b/0x260 [ 650.929825][T29396] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 650.929854][T29396] ? __pfx_ksys_write+0x10/0x10 [ 650.929880][T29396] ? do_syscall_64+0xbe/0xfa0 [ 650.929907][T29396] do_syscall_64+0xfa/0xfa0 [ 650.929929][T29396] ? lockdep_hardirqs_on+0x9c/0x150 [ 650.929952][T29396] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 650.929972][T29396] ? clear_bhb_loop+0x60/0xb0 [ 650.929994][T29396] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 650.930011][T29396] RIP: 0033:0x7fcab8d8f6c9 [ 650.930028][T29396] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 650.930043][T29396] RSP: 002b:00007fcab9c20038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 650.930063][T29396] RAX: ffffffffffffffda RBX: 00007fcab8fe5fa0 RCX: 00007fcab8d8f6c9 [ 650.930076][T29396] RDX: 0000000000000014 RSI: 0000200000000300 RDI: 0000000000000003 [ 650.930087][T29396] RBP: 00007fcab9c20090 R08: 0000000000000000 R09: 0000000000000000 [ 650.930099][T29396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 650.930110][T29396] R13: 00007fcab8fe6038 R14: 00007fcab8fe5fa0 R15: 00007ffc11c837e8 [ 650.930141][T29396] [ 651.475778][T29406] syz.6.7085: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 651.482819][T29410] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7089'. [ 651.491849][T29406] CPU: 1 UID: 0 PID: 29406 Comm: syz.6.7085 Not tainted syzkaller #0 PREEMPT(full) [ 651.491873][T29406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 651.491883][T29406] Call Trace: [ 651.491892][T29406] [ 651.491900][T29406] dump_stack_lvl+0x189/0x250 [ 651.491932][T29406] ? __pfx_dump_stack_lvl+0x10/0x10 [ 651.491955][T29406] ? __pfx__printk+0x10/0x10 [ 651.491974][T29406] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 651.491997][T29406] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 651.492023][T29406] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 651.492049][T29406] warn_alloc+0x214/0x310 [ 651.492074][T29406] ? stack_depot_save_flags+0x40/0x860 [ 651.492103][T29406] ? __pfx_warn_alloc+0x10/0x10 [ 651.492129][T29406] ? kasan_save_track+0x3e/0x80 [ 651.492152][T29406] ? __kasan_kmalloc+0x93/0xb0 [ 651.492177][T29406] ? xsk_setsockopt+0x4dc/0x8d0 [ 651.492196][T29406] ? do_sock_setsockopt+0x17c/0x1b0 [ 651.492212][T29406] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 651.492228][T29406] ? do_syscall_64+0xfa/0xfa0 [ 651.492251][T29406] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 651.492278][T29406] __vmalloc_node_range_noprof+0x125/0x12d0 [ 651.492331][T29406] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 651.492358][T29406] ? __kasan_kmalloc+0x93/0xb0 [ 651.492388][T29406] vmalloc_user_noprof+0xad/0xf0 [ 651.492412][T29406] ? xskq_create+0xbf/0x170 [ 651.492435][T29406] xskq_create+0xbf/0x170 [ 651.492458][T29406] xsk_init_queue+0xb0/0x110 [ 651.492483][T29406] xsk_setsockopt+0x4dc/0x8d0 [ 651.492506][T29406] ? __pfx_xsk_setsockopt+0x10/0x10 [ 651.492530][T29406] ? __pfx_aa_sk_perm+0x10/0x10 [ 651.492561][T29406] ? aa_sock_opt_perm+0xff/0x1b0 [ 651.492591][T29406] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 651.492609][T29406] ? __pfx_xsk_setsockopt+0x10/0x10 [ 651.492632][T29406] do_sock_setsockopt+0x17c/0x1b0 [ 651.492654][T29406] __x64_sys_setsockopt+0x13f/0x1b0 [ 651.492678][T29406] do_syscall_64+0xfa/0xfa0 [ 651.492700][T29406] ? lockdep_hardirqs_on+0x9c/0x150 [ 651.492723][T29406] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 651.492740][T29406] ? clear_bhb_loop+0x60/0xb0 [ 651.492761][T29406] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 651.492777][T29406] RIP: 0033:0x7f42b1d8f6c9 [ 651.492794][T29406] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 651.492810][T29406] RSP: 002b:00007f42b2b73038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 651.492831][T29406] RAX: ffffffffffffffda RBX: 00007f42b1fe5fa0 RCX: 00007f42b1d8f6c9 [ 651.492844][T29406] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000009 [ 651.492855][T29406] RBP: 00007f42b1e11f91 R08: 0000000000000004 R09: 0000000000000000 [ 651.492866][T29406] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 651.492877][T29406] R13: 00007f42b1fe6038 R14: 00007f42b1fe5fa0 R15: 00007fff31172628 [ 651.492909][T29406] [ 651.492930][T29406] Mem-Info: [ 651.504974][T29409] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7088'. [ 651.509921][T29406] active_anon:5356 inactive_anon:0 isolated_anon:0 [ 651.509921][T29406] active_file:3545 inactive_file:40110 isolated_file:0 [ 651.509921][T29406] unevictable:768 dirty:120 writeback:0 [ 651.509921][T29406] slab_reclaimable:13566 slab_unreclaimable:266093 [ 651.509921][T29406] mapped:39726 shmem:1356 pagetables:1207 [ 651.509921][T29406] sec_pagetables:0 bounce:0 [ 651.509921][T29406] kernel_misc_reclaimable:0 [ 651.509921][T29406] free:1128393 free_pcp:12485 free_cma:0 [ 651.521004][T29411] netlink: 48 bytes leftover after parsing attributes in process `syz.4.7087'. [ 651.523595][T29406] Node 0 active_anon:21424kB inactive_anon:0kB active_file:14180kB inactive_file:160236kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:158904kB dirty:480kB writeback:0kB shmem:3888kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16992kB pagetables:4688kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 651.523650][T29406] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 651.523698][T29406] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 651.523767][T29406] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 651.523809][T29406] Node 0 DMA32 free:593488kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:21424kB inactive_anon:0kB active_file:14180kB inactive_file:160236kB unevictable:1536kB writepending:480kB zspages:0kB present:3129332kB managed:2565160kB mlocked:0kB bounce:0kB free_pcp:38724kB local_pcp:20724kB free_cma:0kB [ 651.560474][T29404] bond2: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 651.590298][T29406] lowmem_reserve[]: [ 651.645876][T29416] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7090'. [ 651.672809][T29406] 0 0 0 0 0 [ 652.036011][T29406] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 652.038085][T29404] bond2 (unregistering): Released all slaves [ 652.067656][T29406] lowmem_reserve[]: 0 0 0 0 0 [ 652.080079][T29406] Node 1 Normal free:3904724kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:11172kB local_pcp:9028kB free_cma:0kB [ 652.092617][ T5845] Bluetooth: hci4: command 0x0406 tx timeout [ 652.119413][T29406] lowmem_reserve[]: 0 0 0 0 0 [ 652.126349][T29406] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 652.141967][T29410] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7089'. [ 652.152086][T29406] Node 0 DMA32: 2065*4kB (UM) 452*8kB (UME) 97*16kB (UME) 309*32kB (UME) 54*64kB (UME) 53*128kB (UME) 24*256kB (UME) 11*512kB (UM) 8*1024kB (ME) 9*2048kB (UME) 128*4096kB (UM) = 596244kB [ 652.172088][T29409] team1: entered promiscuous mode [ 652.177236][T29409] team1: entered allmulticast mode [ 652.188120][T29406] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 652.190488][T29417] vlan0: entered promiscuous mode [ 652.200120][T29406] Node 1 Normal: 165*4kB (UM) 50*8kB (UME) 45*16kB (UME) 235*32kB (UME) 66*64kB (UME) 14*128kB (UME) 3*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 948*4096kB (M) = 3904724kB [ 652.227737][T29417] bridge0: entered promiscuous mode [ 652.234108][T29406] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 652.246707][T29406] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 652.253717][T29416] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7090'. [ 652.321935][T29406] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 652.331553][T29406] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 652.366426][T29406] 45007 total pagecache pages [ 652.371160][T29406] 0 pages in swap cache [ 652.391172][T29406] Free swap = 124996kB [ 652.407476][T29406] Total swap = 124996kB [ 652.419476][T29406] 2097051 pages RAM [ 652.427692][T29406] 0 pages HighMem/MovableOnly [ 652.437862][T29406] 424119 pages reserved [ 652.448052][T29406] 0 pages cma reserved [ 652.458268][T29429] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7092'. [ 652.510148][T29433] FAULT_INJECTION: forcing a failure. [ 652.510148][T29433] name failslab, interval 1, probability 0, space 0, times 0 [ 652.534667][T29433] CPU: 0 UID: 0 PID: 29433 Comm: syz.1.7095 Not tainted syzkaller #0 PREEMPT(full) [ 652.534694][T29433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 652.534705][T29433] Call Trace: [ 652.534713][T29433] [ 652.534722][T29433] dump_stack_lvl+0x189/0x250 [ 652.534750][T29433] ? __pfx____ratelimit+0x10/0x10 [ 652.534774][T29433] ? __pfx_dump_stack_lvl+0x10/0x10 [ 652.534797][T29433] ? __pfx__printk+0x10/0x10 [ 652.534831][T29433] should_fail_ex+0x414/0x560 [ 652.534861][T29433] should_failslab+0xa8/0x100 [ 652.534881][T29433] __kmalloc_cache_noprof+0x6f/0x6f0 [ 652.534904][T29433] ? __sctp_v6_cmp_addr+0x1dc/0x510 [ 652.534926][T29433] ? sctp_v6_cmp_addr+0x15/0xd0 [ 652.534947][T29433] ? sctp_add_bind_addr+0x8c/0x370 [ 652.534968][T29433] ? sctp_add_bind_addr+0xb0/0x370 [ 652.534995][T29433] sctp_add_bind_addr+0x8c/0x370 [ 652.535022][T29433] sctp_copy_local_addr_list+0x30b/0x4e0 [ 652.535048][T29433] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 652.535071][T29433] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 652.535096][T29433] ? sctp_v6_is_any+0x64/0x80 [ 652.535120][T29433] ? sctp_copy_one_addr+0x93/0x360 [ 652.535146][T29433] sctp_bind_addr_copy+0xb3/0x3c0 [ 652.535170][T29433] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 652.535195][T29433] sctp_connect_new_asoc+0x2e0/0x690 [ 652.535216][T29433] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 652.535232][T29433] ? __local_bh_enable_ip+0x12d/0x1c0 [ 652.535259][T29433] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 652.535283][T29433] ? security_sctp_bind_connect+0x7e/0x2e0 [ 652.535306][T29433] sctp_sendmsg+0x155c/0x2810 [ 652.535336][T29433] ? __pfx_sctp_sendmsg+0x10/0x10 [ 652.535356][T29433] ? aa_sk_perm+0x81e/0x950 [ 652.535381][T29433] ? __pfx_aa_sk_perm+0x10/0x10 [ 652.535406][T29433] ? sock_rps_record_flow+0x19/0x410 [ 652.535433][T29433] ? inet_sendmsg+0x2f4/0x370 [ 652.535452][T29433] __sock_sendmsg+0x19c/0x270 [ 652.535478][T29433] __sys_sendto+0x3bd/0x520 [ 652.535499][T29433] ? __pfx___sys_sendto+0x10/0x10 [ 652.535511][T29433] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 652.535546][T29433] ? __fget_files+0x3a0/0x420 [ 652.535573][T29433] ? ksys_write+0x22a/0x250 [ 652.535598][T29433] ? __pfx_ksys_write+0x10/0x10 [ 652.535622][T29433] __x64_sys_sendto+0xde/0x100 [ 652.535642][T29433] do_syscall_64+0xfa/0xfa0 [ 652.535667][T29433] ? lockdep_hardirqs_on+0x9c/0x150 [ 652.535687][T29433] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 652.535703][T29433] ? clear_bhb_loop+0x60/0xb0 [ 652.535723][T29433] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 652.535740][T29433] RIP: 0033:0x7efdc198f6c9 [ 652.535757][T29433] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 652.535771][T29433] RSP: 002b:00007efdc28ab038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 652.535789][T29433] RAX: ffffffffffffffda RBX: 00007efdc1be5fa0 RCX: 00007efdc198f6c9 [ 652.535800][T29433] RDX: 0000000000000001 RSI: 0000200000000840 RDI: 0000000000000003 [ 652.535811][T29433] RBP: 00007efdc28ab090 R08: 0000200000000340 R09: 000000000000001c [ 652.535823][T29433] R10: 0000000000065055 R11: 0000000000000246 R12: 0000000000000002 [ 652.535834][T29433] R13: 00007efdc1be6038 R14: 00007efdc1be5fa0 R15: 00007ffe7d387f08 [ 652.535867][T29433] [ 653.014004][T29444] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7099'. [ 653.095773][T29452] FAULT_INJECTION: forcing a failure. [ 653.095773][T29452] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 653.109024][T29452] CPU: 1 UID: 0 PID: 29452 Comm: syz.4.7101 Not tainted syzkaller #0 PREEMPT(full) [ 653.109049][T29452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 653.109059][T29452] Call Trace: [ 653.109067][T29452] [ 653.109075][T29452] dump_stack_lvl+0x189/0x250 [ 653.109101][T29452] ? __pfx____ratelimit+0x10/0x10 [ 653.109130][T29452] ? __pfx_dump_stack_lvl+0x10/0x10 [ 653.109153][T29452] ? __pfx__printk+0x10/0x10 [ 653.109172][T29452] ? __might_fault+0xb0/0x130 [ 653.109207][T29452] should_fail_ex+0x414/0x560 [ 653.109237][T29452] _copy_from_iter+0x1de/0x1790 [ 653.109262][T29452] ? rcu_is_watching+0x15/0xb0 [ 653.109286][T29452] ? kmalloc_reserve+0xbd/0x290 [ 653.109303][T29452] ? __pfx__copy_from_iter+0x10/0x10 [ 653.109324][T29452] ? __build_skb_around+0x262/0x3f0 [ 653.109352][T29452] ? netlink_sendmsg+0x642/0xb30 [ 653.109367][T29452] ? skb_put+0x11b/0x210 [ 653.109387][T29452] netlink_sendmsg+0x6b2/0xb30 [ 653.109414][T29452] ? __pfx_netlink_sendmsg+0x10/0x10 [ 653.109434][T29452] ? aa_sock_msg_perm+0xf1/0x1d0 [ 653.109460][T29452] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 653.109477][T29452] ? __pfx_netlink_sendmsg+0x10/0x10 [ 653.109495][T29452] __sock_sendmsg+0x21c/0x270 [ 653.109521][T29452] ____sys_sendmsg+0x505/0x830 [ 653.109546][T29452] ? __pfx_____sys_sendmsg+0x10/0x10 [ 653.109573][T29452] ? import_iovec+0x74/0xa0 [ 653.109597][T29452] ___sys_sendmsg+0x21f/0x2a0 [ 653.109618][T29452] ? __pfx____sys_sendmsg+0x10/0x10 [ 653.109672][T29452] ? __fget_files+0x2a/0x420 [ 653.109689][T29452] ? __fget_files+0x3a0/0x420 [ 653.109715][T29452] __x64_sys_sendmsg+0x19b/0x260 [ 653.109736][T29452] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 653.109763][T29452] ? __pfx_ksys_write+0x10/0x10 [ 653.109789][T29452] ? do_syscall_64+0xbe/0xfa0 [ 653.109815][T29452] do_syscall_64+0xfa/0xfa0 [ 653.109837][T29452] ? lockdep_hardirqs_on+0x9c/0x150 [ 653.109860][T29452] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 653.109877][T29452] ? clear_bhb_loop+0x60/0xb0 [ 653.109898][T29452] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 653.109915][T29452] RIP: 0033:0x7f412a38f6c9 [ 653.109931][T29452] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 653.109946][T29452] RSP: 002b:00007f412b141038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 653.109966][T29452] RAX: ffffffffffffffda RBX: 00007f412a5e6090 RCX: 00007f412a38f6c9 [ 653.109979][T29452] RDX: 0000000004000004 RSI: 0000200000000200 RDI: 0000000000000003 [ 653.109990][T29452] RBP: 00007f412b141090 R08: 0000000000000000 R09: 0000000000000000 [ 653.110000][T29452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 653.110009][T29452] R13: 00007f412a5e6128 R14: 00007f412a5e6090 R15: 00007ffc5edcc988 [ 653.110038][T29452] [ 653.820422][ T1118] net_ratelimit: 14 callbacks suppressed [ 653.820444][ T1118] bond0: (slave wlan0): failed to get link speed/duplex [ 653.870338][T29462] sch_tbf: peakrate 1 is lower than or equals to rate 5 ! [ 653.945087][ T1118] bond0: (slave wlan0): failed to get link speed/duplex [ 653.971288][T29469] ip6gretap1: entered allmulticast mode [ 654.023415][T29479] netlink: 'syz.6.7106': attribute type 3 has an invalid length. [ 654.091970][ T68] bond0: (slave wlan0): failed to get link speed/duplex [ 654.231822][ T13] bond0: (slave wlan0): failed to get link speed/duplex [ 654.295666][T29493] netlink: 'syz.6.7115': attribute type 1 has an invalid length. [ 654.310760][T29493] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 654.361906][ T68] bond0: (slave wlan0): failed to get link speed/duplex [ 654.436896][T29500] FAULT_INJECTION: forcing a failure. [ 654.436896][T29500] name failslab, interval 1, probability 0, space 0, times 0 [ 654.451634][T29500] CPU: 0 UID: 0 PID: 29500 Comm: syz.4.7117 Not tainted syzkaller #0 PREEMPT(full) [ 654.451659][T29500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 654.451669][T29500] Call Trace: [ 654.451678][T29500] [ 654.451686][T29500] dump_stack_lvl+0x189/0x250 [ 654.451716][T29500] ? __pfx____ratelimit+0x10/0x10 [ 654.451738][T29500] ? __pfx_dump_stack_lvl+0x10/0x10 [ 654.451760][T29500] ? __pfx__printk+0x10/0x10 [ 654.451782][T29500] ? __lock_acquire+0xab9/0xd20 [ 654.451807][T29500] should_fail_ex+0x414/0x560 [ 654.451835][T29500] should_failslab+0xa8/0x100 [ 654.451854][T29500] kmem_cache_alloc_noprof+0x74/0x6e0 [ 654.451877][T29500] ? skb_clone+0x212/0x3a0 [ 654.451902][T29500] skb_clone+0x212/0x3a0 [ 654.451924][T29500] __netlink_deliver_tap+0x404/0x850 [ 654.451955][T29500] ? netlink_deliver_tap+0x2e/0x1b0 [ 654.451974][T29500] netlink_deliver_tap+0x19c/0x1b0 [ 654.451993][T29500] netlink_unicast+0x7fa/0x9e0 [ 654.452026][T29500] ? __pfx_netlink_unicast+0x10/0x10 [ 654.452052][T29500] ? netlink_sendmsg+0x642/0xb30 [ 654.452066][T29500] ? skb_put+0x11b/0x210 [ 654.452087][T29500] netlink_sendmsg+0x805/0xb30 [ 654.452114][T29500] ? __pfx_netlink_sendmsg+0x10/0x10 [ 654.452134][T29500] ? aa_sock_msg_perm+0xf1/0x1d0 [ 654.452161][T29500] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 654.452178][T29500] ? __pfx_netlink_sendmsg+0x10/0x10 [ 654.452197][T29500] __sock_sendmsg+0x21c/0x270 [ 654.452223][T29500] ____sys_sendmsg+0x505/0x830 [ 654.452249][T29500] ? __pfx_____sys_sendmsg+0x10/0x10 [ 654.452277][T29500] ? import_iovec+0x74/0xa0 [ 654.452301][T29500] ___sys_sendmsg+0x21f/0x2a0 [ 654.452331][T29500] ? __pfx____sys_sendmsg+0x10/0x10 [ 654.452387][T29500] ? __fget_files+0x2a/0x420 [ 654.452404][T29500] ? __fget_files+0x3a0/0x420 [ 654.452431][T29500] __x64_sys_sendmsg+0x19b/0x260 [ 654.452453][T29500] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 654.452482][T29500] ? __pfx_ksys_write+0x10/0x10 [ 654.452510][T29500] ? do_syscall_64+0xbe/0xfa0 [ 654.452538][T29500] do_syscall_64+0xfa/0xfa0 [ 654.452559][T29500] ? lockdep_hardirqs_on+0x9c/0x150 [ 654.452582][T29500] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 654.452599][T29500] ? clear_bhb_loop+0x60/0xb0 [ 654.452621][T29500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 654.452638][T29500] RIP: 0033:0x7f412a38f6c9 [ 654.452654][T29500] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 654.452669][T29500] RSP: 002b:00007f412b162038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 654.452688][T29500] RAX: ffffffffffffffda RBX: 00007f412a5e5fa0 RCX: 00007f412a38f6c9 [ 654.452701][T29500] RDX: 0000000000000014 RSI: 0000200000000300 RDI: 0000000000000003 [ 654.452713][T29500] RBP: 00007f412b162090 R08: 0000000000000000 R09: 0000000000000000 [ 654.452724][T29500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 654.452735][T29500] R13: 00007f412a5e6038 R14: 00007f412a5e5fa0 R15: 00007ffc5edcc988 [ 654.452767][T29500] [ 654.746842][ T68] bond0: (slave wlan0): failed to get link speed/duplex [ 654.869320][ T68] bond0: (slave wlan0): failed to get link speed/duplex [ 654.983127][T12567] bond0: (slave wlan0): failed to get link speed/duplex [ 655.136518][T12567] bond0: (slave wlan0): failed to get link speed/duplex [ 655.253072][T12567] bond0: (slave wlan0): failed to get link speed/duplex [ 655.765313][T29547] xt_TPROXY: Can be used only with -p tcp or -p udp [ 655.780570][T29549] FAULT_INJECTION: forcing a failure. [ 655.780570][T29549] name failslab, interval 1, probability 0, space 0, times 0 [ 655.812059][T29549] CPU: 0 UID: 0 PID: 29549 Comm: syz.5.7135 Not tainted syzkaller #0 PREEMPT(full) [ 655.812084][T29549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 655.812095][T29549] Call Trace: [ 655.812103][T29549] [ 655.812111][T29549] dump_stack_lvl+0x189/0x250 [ 655.812139][T29549] ? __pfx____ratelimit+0x10/0x10 [ 655.812162][T29549] ? __pfx_dump_stack_lvl+0x10/0x10 [ 655.812184][T29549] ? __pfx__printk+0x10/0x10 [ 655.812208][T29549] ? __pfx___might_resched+0x10/0x10 [ 655.812231][T29549] should_fail_ex+0x414/0x560 [ 655.812259][T29549] should_failslab+0xa8/0x100 [ 655.812278][T29549] __kmalloc_noprof+0xcb/0x7f0 [ 655.812299][T29549] ? kfree+0x4d/0x6d0 [ 655.812316][T29549] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 655.812346][T29549] tomoyo_realpath_from_path+0xe3/0x5d0 [ 655.812373][T29549] ? tomoyo_domain+0xd9/0x130 [ 655.812395][T29549] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 655.812419][T29549] tomoyo_path_number_perm+0x1e8/0x5a0 [ 655.812443][T29549] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 655.812506][T29549] ? __fget_files+0x2a/0x420 [ 655.812529][T29549] ? __fget_files+0x3a0/0x420 [ 655.812544][T29549] ? __fget_files+0x2a/0x420 [ 655.812565][T29549] security_file_ioctl+0xcb/0x2d0 [ 655.812589][T29549] __se_sys_ioctl+0x47/0x170 [ 655.812614][T29549] do_syscall_64+0xfa/0xfa0 [ 655.812636][T29549] ? lockdep_hardirqs_on+0x9c/0x150 [ 655.812659][T29549] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 655.812677][T29549] ? clear_bhb_loop+0x60/0xb0 [ 655.812699][T29549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 655.812716][T29549] RIP: 0033:0x7fcab8d8f6c9 [ 655.812731][T29549] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 655.812746][T29549] RSP: 002b:00007fcab9c20038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 655.812765][T29549] RAX: ffffffffffffffda RBX: 00007fcab8fe5fa0 RCX: 00007fcab8d8f6c9 [ 655.812778][T29549] RDX: 0000200000000000 RSI: 0000000000008b18 RDI: 0000000000000004 [ 655.812791][T29549] RBP: 00007fcab9c20090 R08: 0000000000000000 R09: 0000000000000000 [ 655.812802][T29549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 655.812813][T29549] R13: 00007fcab8fe6038 R14: 00007fcab8fe5fa0 R15: 00007ffc11c837e8 [ 655.812846][T29549] [ 655.812866][T29549] ERROR: Out of memory at tomoyo_realpath_from_path. [ 655.820891][T29547] bond1: option xmit_hash_policy: invalid value (64) [ 656.073279][T29547] bond1 (unregistering): Released all slaves [ 656.120321][T29569] __nla_validate_parse: 10 callbacks suppressed [ 656.120339][T29569] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7140'. [ 656.124403][T29557] 8021q: VLANs not supported on ip6_vti0 [ 656.165656][T29558] bond0: entered promiscuous mode [ 656.170973][T29558] bond_slave_0: entered promiscuous mode [ 656.177512][T29558] bond_slave_1: entered promiscuous mode [ 656.295706][T29574] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7142'. [ 656.326975][T29578] FAULT_INJECTION: forcing a failure. [ 656.326975][T29578] name failslab, interval 1, probability 0, space 0, times 0 [ 656.339873][T29578] CPU: 0 UID: 0 PID: 29578 Comm: syz.4.7144 Not tainted syzkaller #0 PREEMPT(full) [ 656.339897][T29578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 656.339907][T29578] Call Trace: [ 656.339916][T29578] [ 656.339923][T29578] dump_stack_lvl+0x189/0x250 [ 656.339951][T29578] ? __pfx____ratelimit+0x10/0x10 [ 656.339975][T29578] ? __pfx_dump_stack_lvl+0x10/0x10 [ 656.339996][T29578] ? __pfx__printk+0x10/0x10 [ 656.340020][T29578] ? __lock_acquire+0xab9/0xd20 [ 656.340045][T29578] should_fail_ex+0x414/0x560 [ 656.340075][T29578] should_failslab+0xa8/0x100 [ 656.340094][T29578] kmem_cache_alloc_noprof+0x74/0x6e0 [ 656.340125][T29578] ? skb_clone+0x212/0x3a0 [ 656.340151][T29578] skb_clone+0x212/0x3a0 [ 656.340173][T29578] __netlink_deliver_tap+0x404/0x850 [ 656.340204][T29578] ? netlink_deliver_tap+0x2e/0x1b0 [ 656.340223][T29578] netlink_deliver_tap+0x19c/0x1b0 [ 656.340242][T29578] netlink_unicast+0x7fa/0x9e0 [ 656.340275][T29578] ? __pfx_netlink_unicast+0x10/0x10 [ 656.340301][T29578] ? netlink_sendmsg+0x642/0xb30 [ 656.340316][T29578] ? skb_put+0x11b/0x210 [ 656.340337][T29578] netlink_sendmsg+0x805/0xb30 [ 656.340365][T29578] ? __pfx_netlink_sendmsg+0x10/0x10 [ 656.340386][T29578] ? aa_sock_msg_perm+0xf1/0x1d0 [ 656.340411][T29578] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 656.340428][T29578] ? __pfx_netlink_sendmsg+0x10/0x10 [ 656.340446][T29578] __sock_sendmsg+0x21c/0x270 [ 656.340472][T29578] ____sys_sendmsg+0x505/0x830 [ 656.340497][T29578] ? __pfx_____sys_sendmsg+0x10/0x10 [ 656.340526][T29578] ? import_iovec+0x74/0xa0 [ 656.340552][T29578] ___sys_sendmsg+0x21f/0x2a0 [ 656.340574][T29578] ? __pfx____sys_sendmsg+0x10/0x10 [ 656.340629][T29578] ? __fget_files+0x2a/0x420 [ 656.340645][T29578] ? __fget_files+0x3a0/0x420 [ 656.340673][T29578] __x64_sys_sendmsg+0x19b/0x260 [ 656.340696][T29578] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 656.340723][T29578] ? __pfx_ksys_write+0x10/0x10 [ 656.340750][T29578] ? do_syscall_64+0xbe/0xfa0 [ 656.340777][T29578] do_syscall_64+0xfa/0xfa0 [ 656.340796][T29578] ? lockdep_hardirqs_on+0x9c/0x150 [ 656.340817][T29578] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 656.340833][T29578] ? clear_bhb_loop+0x60/0xb0 [ 656.340853][T29578] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 656.340870][T29578] RIP: 0033:0x7f412a38f6c9 [ 656.340885][T29578] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 656.340895][T29578] RSP: 002b:00007f412b162038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 656.340907][T29578] RAX: ffffffffffffffda RBX: 00007f412a5e5fa0 RCX: 00007f412a38f6c9 [ 656.340914][T29578] RDX: 0000000004000004 RSI: 0000200000000200 RDI: 0000000000000003 [ 656.340921][T29578] RBP: 00007f412b162090 R08: 0000000000000000 R09: 0000000000000000 [ 656.340927][T29578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 656.340933][T29578] R13: 00007f412a5e6038 R14: 00007f412a5e5fa0 R15: 00007ffc5edcc988 [ 656.340951][T29578] [ 656.711109][T29574] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7142'. [ 656.903735][T29598] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7149'. [ 657.004474][T29607] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7152'. [ 657.219708][T24520] Bluetooth: hci2: command 0x0406 tx timeout [ 657.823602][T29650] FAULT_INJECTION: forcing a failure. [ 657.823602][T29650] name failslab, interval 1, probability 0, space 0, times 0 [ 657.856234][T29652] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7161'. [ 657.871908][T29650] CPU: 1 UID: 0 PID: 29650 Comm: syz.1.7159 Not tainted syzkaller #0 PREEMPT(full) [ 657.871934][T29650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 657.871945][T29650] Call Trace: [ 657.871953][T29650] [ 657.871961][T29650] dump_stack_lvl+0x189/0x250 [ 657.871988][T29650] ? __pfx____ratelimit+0x10/0x10 [ 657.872012][T29650] ? __pfx_dump_stack_lvl+0x10/0x10 [ 657.872035][T29650] ? __pfx__printk+0x10/0x10 [ 657.872066][T29650] ? __pfx___might_resched+0x10/0x10 [ 657.872092][T29650] should_fail_ex+0x414/0x560 [ 657.872123][T29650] should_failslab+0xa8/0x100 [ 657.872144][T29650] kmem_cache_alloc_node_noprof+0x77/0x710 [ 657.872168][T29650] ? __alloc_skb+0x112/0x2d0 [ 657.872192][T29650] __alloc_skb+0x112/0x2d0 [ 657.872213][T29650] netlink_ack+0x146/0xa50 [ 657.872236][T29650] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 657.872258][T29650] ? ref_tracker_free+0x63a/0x7d0 [ 657.872277][T29650] ? __asan_memcpy+0x40/0x70 [ 657.872298][T29650] ? __pfx_ref_tracker_free+0x10/0x10 [ 657.872327][T29650] netlink_rcv_skb+0x28c/0x470 [ 657.872346][T29650] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 657.872372][T29650] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 657.872402][T29650] ? netlink_deliver_tap+0x2e/0x1b0 [ 657.872429][T29650] netlink_unicast+0x82f/0x9e0 [ 657.872462][T29650] ? __pfx_netlink_unicast+0x10/0x10 [ 657.872487][T29650] ? netlink_sendmsg+0x642/0xb30 [ 657.872502][T29650] ? skb_put+0x11b/0x210 [ 657.872522][T29650] netlink_sendmsg+0x805/0xb30 [ 657.872548][T29650] ? __pfx_netlink_sendmsg+0x10/0x10 [ 657.872570][T29650] ? aa_sock_msg_perm+0xf1/0x1d0 [ 657.872596][T29650] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 657.872614][T29650] ? __pfx_netlink_sendmsg+0x10/0x10 [ 657.872633][T29650] __sock_sendmsg+0x21c/0x270 [ 657.872656][T29650] ____sys_sendmsg+0x505/0x830 [ 657.872678][T29650] ? __pfx_____sys_sendmsg+0x10/0x10 [ 657.872705][T29650] ? import_iovec+0x74/0xa0 [ 657.872728][T29650] ___sys_sendmsg+0x21f/0x2a0 [ 657.872748][T29650] ? __pfx____sys_sendmsg+0x10/0x10 [ 657.872798][T29650] ? __fget_files+0x2a/0x420 [ 657.872814][T29650] ? __fget_files+0x3a0/0x420 [ 657.872842][T29650] __x64_sys_sendmsg+0x19b/0x260 [ 657.872865][T29650] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 657.872895][T29650] ? __pfx_ksys_write+0x10/0x10 [ 657.872923][T29650] ? do_syscall_64+0xbe/0xfa0 [ 657.872950][T29650] do_syscall_64+0xfa/0xfa0 [ 657.872971][T29650] ? lockdep_hardirqs_on+0x9c/0x150 [ 657.872994][T29650] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 657.873012][T29650] ? clear_bhb_loop+0x60/0xb0 [ 657.873033][T29650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 657.873057][T29650] RIP: 0033:0x7efdc198f6c9 [ 657.873073][T29650] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 657.873088][T29650] RSP: 002b:00007efdc28ab038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 657.873108][T29650] RAX: ffffffffffffffda RBX: 00007efdc1be5fa0 RCX: 00007efdc198f6c9 [ 657.873121][T29650] RDX: 0000000000000014 RSI: 0000200000000300 RDI: 0000000000000003 [ 657.873133][T29650] RBP: 00007efdc28ab090 R08: 0000000000000000 R09: 0000000000000000 [ 657.873144][T29650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 657.873155][T29650] R13: 00007efdc1be6038 R14: 00007efdc1be5fa0 R15: 00007ffe7d387f08 [ 657.873188][T29650] [ 657.884675][T29652] FAULT_INJECTION: forcing a failure. [ 657.884675][T29652] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 657.909319][T29658] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7162'. [ 658.005463][T29652] CPU: 0 UID: 0 PID: 29652 Comm: syz.6.7161 Not tainted syzkaller #0 PREEMPT(full) [ 658.005488][T29652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 658.005499][T29652] Call Trace: [ 658.005507][T29652] [ 658.005515][T29652] dump_stack_lvl+0x189/0x250 [ 658.005543][T29652] ? __pfx____ratelimit+0x10/0x10 [ 658.005566][T29652] ? __pfx_dump_stack_lvl+0x10/0x10 [ 658.005589][T29652] ? __pfx__printk+0x10/0x10 [ 658.005606][T29652] ? __might_fault+0xb0/0x130 [ 658.005643][T29652] should_fail_ex+0x414/0x560 [ 658.005674][T29652] _copy_from_user+0x2d/0xb0 [ 658.005697][T29652] kstrtouint_from_user+0xc4/0x170 [ 658.005720][T29652] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 658.005758][T29652] proc_fail_nth_write+0x88/0x200 [ 658.005780][T29652] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 658.005816][T29652] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 658.005839][T29652] vfs_write+0x27e/0xb30 [ 658.005873][T29652] ? __pfx_vfs_write+0x10/0x10 [ 658.005899][T29652] ? __fget_files+0x2a/0x420 [ 658.005921][T29652] ? __fget_files+0x3a0/0x420 [ 658.005937][T29652] ? __fget_files+0x2a/0x420 [ 658.005965][T29652] ksys_write+0x145/0x250 [ 658.005992][T29652] ? __pfx_ksys_write+0x10/0x10 [ 658.006019][T29652] ? do_syscall_64+0xbe/0xfa0 [ 658.006046][T29652] do_syscall_64+0xfa/0xfa0 [ 658.006067][T29652] ? lockdep_hardirqs_on+0x9c/0x150 [ 658.006090][T29652] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 658.006109][T29652] ? clear_bhb_loop+0x60/0xb0 [ 658.006131][T29652] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 658.006148][T29652] RIP: 0033:0x7f42b1d8e17f [ 658.006164][T29652] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 658.006178][T29652] RSP: 002b:00007f42b2b73030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 658.006198][T29652] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f42b1d8e17f [ 658.006210][T29652] RDX: 0000000000000001 RSI: 00007f42b2b730a0 RDI: 0000000000000004 [ 658.006221][T29652] RBP: 00007f42b2b73090 R08: 0000000000000000 R09: 0000000000000000 [ 658.006232][T29652] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 658.006243][T29652] R13: 00007f42b1fe6038 R14: 00007f42b1fe5fa0 R15: 00007fff31172628 [ 658.006278][T29652] [ 658.137153][T29667] netlink: 'syz.1.7164': attribute type 1 has an invalid length. [ 658.328220][T29671] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7166'. [ 658.330763][T29667] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7164'. [ 658.787556][T29657] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 658.828598][T29657] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 659.308470][ T12] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 659.333592][ T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 659.345119][ T12] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 659.354366][ T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 660.387569][T29724] net_ratelimit: 17 callbacks suppressed [ 660.387587][T29724] openvswitch: netlink: Key 6 has unexpected len 0 expected 2 [ 661.090470][ T12] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 661.100297][ T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 661.110125][ T12] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 661.119208][ T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 661.182448][ T12] bond0: (slave wlan0): failed to get link speed/duplex [ 661.204830][T29726] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7176'. [ 661.296851][T17898] bond0: (slave wlan0): failed to get link speed/duplex [ 661.336124][T29731] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7179'. [ 661.356327][T29728] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7177'. [ 661.394242][T29728] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7177'. [ 661.423496][ T12] bond0: (slave wlan0): failed to get link speed/duplex [ 661.505551][T29737] openvswitch: netlink: nsh attr 0 has unexpected len 32768 expected 0 [ 661.516824][T29738] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7180'. [ 661.522737][T29737] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 661.552001][T17898] bond0: (slave wlan0): failed to get link speed/duplex [ 661.583721][T29740] FAULT_INJECTION: forcing a failure. [ 661.583721][T29740] name failslab, interval 1, probability 0, space 0, times 0 [ 661.614106][T29740] CPU: 0 UID: 0 PID: 29740 Comm: syz.1.7182 Not tainted syzkaller #0 PREEMPT(full) [ 661.614133][T29740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 661.614145][T29740] Call Trace: [ 661.614152][T29740] [ 661.614160][T29740] dump_stack_lvl+0x189/0x250 [ 661.614187][T29740] ? __pfx____ratelimit+0x10/0x10 [ 661.614209][T29740] ? __pfx_dump_stack_lvl+0x10/0x10 [ 661.614231][T29740] ? __pfx__printk+0x10/0x10 [ 661.614253][T29740] ? __pfx___might_resched+0x10/0x10 [ 661.614270][T29740] ? fs_reclaim_acquire+0x7d/0x100 [ 661.614291][T29740] should_fail_ex+0x414/0x560 [ 661.614321][T29740] should_failslab+0xa8/0x100 [ 661.614341][T29740] __kmalloc_noprof+0xcb/0x7f0 [ 661.614363][T29740] ? tomoyo_encode+0x28b/0x550 [ 661.614393][T29740] tomoyo_encode+0x28b/0x550 [ 661.614423][T29740] tomoyo_realpath_from_path+0x58d/0x5d0 [ 661.614459][T29740] ? tomoyo_domain+0xd9/0x130 [ 661.614481][T29740] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 661.614504][T29740] tomoyo_path_number_perm+0x1e8/0x5a0 [ 661.614529][T29740] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 661.614589][T29740] ? __fget_files+0x2a/0x420 [ 661.614611][T29740] ? __fget_files+0x3a0/0x420 [ 661.614626][T29740] ? __fget_files+0x2a/0x420 [ 661.614647][T29740] security_file_ioctl+0xcb/0x2d0 [ 661.614671][T29740] __se_sys_ioctl+0x47/0x170 [ 661.614695][T29740] do_syscall_64+0xfa/0xfa0 [ 661.614716][T29740] ? lockdep_hardirqs_on+0x9c/0x150 [ 661.614739][T29740] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.614756][T29740] ? clear_bhb_loop+0x60/0xb0 [ 661.614778][T29740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.614794][T29740] RIP: 0033:0x7efdc198f6c9 [ 661.614810][T29740] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 661.614835][T29740] RSP: 002b:00007efdc28ab038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 661.614855][T29740] RAX: ffffffffffffffda RBX: 00007efdc1be5fa0 RCX: 00007efdc198f6c9 [ 661.614866][T29740] RDX: 0000200000000000 RSI: 0000000000008b18 RDI: 0000000000000004 [ 661.614877][T29740] RBP: 00007efdc28ab090 R08: 0000000000000000 R09: 0000000000000000 [ 661.614888][T29740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 661.614899][T29740] R13: 00007efdc1be6038 R14: 00007efdc1be5fa0 R15: 00007ffe7d387f08 [ 661.614932][T29740] [ 661.618137][T29740] ERROR: Out of memory at tomoyo_realpath_from_path. [ 661.678397][ T68] bond0: (slave wlan0): failed to get link speed/duplex [ 662.031977][ T13] bond0: (slave wlan0): failed to get link speed/duplex [ 662.174175][ T1118] bond0: (slave wlan0): failed to get link speed/duplex [ 662.521582][T29779] veth0_to_bond: entered allmulticast mode [ 662.555557][T17898] bond1: (slave veth0_to_bond): link status definitely down, disabling slave [ 662.576081][T17898] bond1: now running without any active interface! [ 662.684813][T29783] FAULT_INJECTION: forcing a failure. [ 662.684813][T29783] name failslab, interval 1, probability 0, space 0, times 0 [ 662.731583][T29783] CPU: 1 UID: 0 PID: 29783 Comm: syz.1.7191 Not tainted syzkaller #0 PREEMPT(full) [ 662.731610][T29783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 662.731622][T29783] Call Trace: [ 662.731630][T29783] [ 662.731638][T29783] dump_stack_lvl+0x189/0x250 [ 662.731666][T29783] ? __pfx____ratelimit+0x10/0x10 [ 662.731693][T29783] ? __pfx_dump_stack_lvl+0x10/0x10 [ 662.731712][T29783] ? __pfx__printk+0x10/0x10 [ 662.731734][T29783] ? __pfx___might_resched+0x10/0x10 [ 662.731750][T29783] ? fs_reclaim_acquire+0x7d/0x100 [ 662.731771][T29783] should_fail_ex+0x414/0x560 [ 662.731799][T29783] should_failslab+0xa8/0x100 [ 662.731819][T29783] __kmalloc_noprof+0xcb/0x7f0 [ 662.731841][T29783] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 662.731864][T29783] ? __local_bh_enable_ip+0x12d/0x1c0 [ 662.731886][T29783] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 662.731915][T29783] genl_family_rcv_msg_doit+0xb8/0x300 [ 662.731943][T29783] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 662.731972][T29783] ? apparmor_capable+0x137/0x1b0 [ 662.731994][T29783] ? bpf_lsm_capable+0x9/0x20 [ 662.732013][T29783] ? security_capable+0x7e/0x2e0 [ 662.732043][T29783] genl_rcv_msg+0x60e/0x790 [ 662.732070][T29783] ? __pfx_genl_rcv_msg+0x10/0x10 [ 662.732089][T29783] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 662.732107][T29783] ? __pfx_nl80211_new_station+0x10/0x10 [ 662.732126][T29783] ? __pfx_nl80211_post_doit+0x10/0x10 [ 662.732145][T29783] ? __asan_memcpy+0x40/0x70 [ 662.732165][T29783] ? __pfx_ref_tracker_free+0x10/0x10 [ 662.732189][T29783] netlink_rcv_skb+0x208/0x470 [ 662.732203][T29783] ? __lock_acquire+0xab9/0xd20 [ 662.732221][T29783] ? __pfx_genl_rcv_msg+0x10/0x10 [ 662.732243][T29783] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 662.732281][T29783] ? down_read+0x1ad/0x2e0 [ 662.732301][T29783] genl_rcv+0x28/0x40 [ 662.732320][T29783] netlink_unicast+0x82f/0x9e0 [ 662.732352][T29783] ? __pfx_netlink_unicast+0x10/0x10 [ 662.732376][T29783] ? netlink_sendmsg+0x642/0xb30 [ 662.732390][T29783] ? skb_put+0x11b/0x210 [ 662.732412][T29783] netlink_sendmsg+0x805/0xb30 [ 662.732439][T29783] ? __pfx_netlink_sendmsg+0x10/0x10 [ 662.732460][T29783] ? aa_sock_msg_perm+0xf1/0x1d0 [ 662.732486][T29783] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 662.732503][T29783] ? __pfx_netlink_sendmsg+0x10/0x10 [ 662.732521][T29783] __sock_sendmsg+0x21c/0x270 [ 662.732548][T29783] ____sys_sendmsg+0x505/0x830 [ 662.732579][T29783] ? __pfx_____sys_sendmsg+0x10/0x10 [ 662.732607][T29783] ? import_iovec+0x74/0xa0 [ 662.732633][T29783] ___sys_sendmsg+0x21f/0x2a0 [ 662.732655][T29783] ? __pfx____sys_sendmsg+0x10/0x10 [ 662.732711][T29783] ? __fget_files+0x2a/0x420 [ 662.732727][T29783] ? __fget_files+0x3a0/0x420 [ 662.732754][T29783] __x64_sys_sendmsg+0x19b/0x260 [ 662.732775][T29783] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 662.732805][T29783] ? __pfx_ksys_write+0x10/0x10 [ 662.732832][T29783] ? do_syscall_64+0xbe/0xfa0 [ 662.732860][T29783] do_syscall_64+0xfa/0xfa0 [ 662.732880][T29783] ? lockdep_hardirqs_on+0x9c/0x150 [ 662.732902][T29783] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 662.732920][T29783] ? clear_bhb_loop+0x60/0xb0 [ 662.732941][T29783] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 662.732959][T29783] RIP: 0033:0x7efdc198f6c9 [ 662.732975][T29783] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 662.732990][T29783] RSP: 002b:00007efdc28ab038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 662.733009][T29783] RAX: ffffffffffffffda RBX: 00007efdc1be5fa0 RCX: 00007efdc198f6c9 [ 662.733023][T29783] RDX: 0000000004000004 RSI: 0000200000000200 RDI: 0000000000000003 [ 662.733034][T29783] RBP: 00007efdc28ab090 R08: 0000000000000000 R09: 0000000000000000 [ 662.733045][T29783] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 662.733056][T29783] R13: 00007efdc1be6038 R14: 00007efdc1be5fa0 R15: 00007ffe7d387f08 [ 662.733089][T29783] [ 663.155956][T29791] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7196'. [ 663.262672][T29793] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7195'. [ 663.976100][T29848] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7207'. [ 664.019985][T29851] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7209'. [ 664.287290][T29866] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7211'. [ 664.796067][T10268] IPVS: starting estimator thread 0... [ 664.893176][T29886] IPVS: using max 27 ests per chain, 64800 per kthread [ 665.116325][T29903] FAULT_INJECTION: forcing a failure. [ 665.116325][T29903] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 665.145447][T29903] CPU: 0 UID: 0 PID: 29903 Comm: syz.5.7223 Not tainted syzkaller #0 PREEMPT(full) [ 665.145480][T29903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 665.145491][T29903] Call Trace: [ 665.145498][T29903] [ 665.145507][T29903] dump_stack_lvl+0x189/0x250 [ 665.145535][T29903] ? __pfx____ratelimit+0x10/0x10 [ 665.145558][T29903] ? __pfx_dump_stack_lvl+0x10/0x10 [ 665.145581][T29903] ? __pfx__printk+0x10/0x10 [ 665.145599][T29903] ? __might_fault+0xb0/0x130 [ 665.145634][T29903] should_fail_ex+0x414/0x560 [ 665.145665][T29903] _copy_from_user+0x2d/0xb0 [ 665.145689][T29903] wext_handle_ioctl+0xba/0x1c0 [ 665.145710][T29903] ? __pfx_wext_handle_ioctl+0x10/0x10 [ 665.145744][T29903] sock_ioctl+0x15f/0x790 [ 665.145769][T29903] ? __pfx_sock_ioctl+0x10/0x10 [ 665.145793][T29903] ? __fget_files+0x3a0/0x420 [ 665.145810][T29903] ? __fget_files+0x2a/0x420 [ 665.145830][T29903] ? bpf_lsm_file_ioctl+0x9/0x20 [ 665.145851][T29903] ? __pfx_sock_ioctl+0x10/0x10 [ 665.145872][T29903] __se_sys_ioctl+0xfc/0x170 [ 665.145896][T29903] do_syscall_64+0xfa/0xfa0 [ 665.145919][T29903] ? lockdep_hardirqs_on+0x9c/0x150 [ 665.145942][T29903] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 665.145961][T29903] ? clear_bhb_loop+0x60/0xb0 [ 665.145982][T29903] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 665.145998][T29903] RIP: 0033:0x7fcab8d8f6c9 [ 665.146015][T29903] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 665.146029][T29903] RSP: 002b:00007fcab9c20038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 665.146048][T29903] RAX: ffffffffffffffda RBX: 00007fcab8fe5fa0 RCX: 00007fcab8d8f6c9 [ 665.146060][T29903] RDX: 0000200000000000 RSI: 0000000000008b18 RDI: 0000000000000004 [ 665.146072][T29903] RBP: 00007fcab9c20090 R08: 0000000000000000 R09: 0000000000000000 [ 665.146082][T29903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 665.146092][T29903] R13: 00007fcab8fe6038 R14: 00007fcab8fe5fa0 R15: 00007ffc11c837e8 [ 665.146121][T29903] [ 665.476080][ T13] net_ratelimit: 23 callbacks suppressed [ 665.476100][ T13] bond0: (slave wlan0): failed to get link speed/duplex [ 665.615865][ T1118] bond0: (slave wlan0): failed to get link speed/duplex [ 665.744572][ T13] bond0: (slave wlan0): failed to get link speed/duplex [ 665.797920][T29935] FAULT_INJECTION: forcing a failure. [ 665.797920][T29935] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 665.834149][T29935] CPU: 0 UID: 0 PID: 29935 Comm: syz.6.7234 Not tainted syzkaller #0 PREEMPT(full) [ 665.834174][T29935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 665.834191][T29935] Call Trace: [ 665.834199][T29935] [ 665.834207][T29935] dump_stack_lvl+0x189/0x250 [ 665.834235][T29935] ? __pfx____ratelimit+0x10/0x10 [ 665.834259][T29935] ? __pfx_dump_stack_lvl+0x10/0x10 [ 665.834282][T29935] ? __pfx__printk+0x10/0x10 [ 665.834301][T29935] ? __might_fault+0xb0/0x130 [ 665.834336][T29935] should_fail_ex+0x414/0x560 [ 665.834366][T29935] _copy_from_user+0x2d/0xb0 [ 665.834389][T29935] kstrtouint_from_user+0xc4/0x170 [ 665.834411][T29935] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 665.834446][T29935] proc_fail_nth_write+0x88/0x200 [ 665.834469][T29935] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 665.834497][T29935] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 665.834519][T29935] vfs_write+0x27e/0xb30 [ 665.834552][T29935] ? __pfx_vfs_write+0x10/0x10 [ 665.834576][T29935] ? __fget_files+0x2a/0x420 [ 665.834599][T29935] ? __fget_files+0x3a0/0x420 [ 665.834613][T29935] ? __fget_files+0x2a/0x420 [ 665.834636][T29935] ksys_write+0x145/0x250 [ 665.834658][T29935] ? __pfx_ksys_write+0x10/0x10 [ 665.834681][T29935] ? do_syscall_64+0xbe/0xfa0 [ 665.834709][T29935] do_syscall_64+0xfa/0xfa0 [ 665.834730][T29935] ? lockdep_hardirqs_on+0x9c/0x150 [ 665.834751][T29935] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 665.834766][T29935] ? clear_bhb_loop+0x60/0xb0 [ 665.834785][T29935] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 665.834801][T29935] RIP: 0033:0x7f42b1d8e17f [ 665.834817][T29935] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 665.834832][T29935] RSP: 002b:00007f42b2b73030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 665.834852][T29935] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f42b1d8e17f [ 665.834865][T29935] RDX: 0000000000000001 RSI: 00007f42b2b730a0 RDI: 0000000000000006 [ 665.834875][T29935] RBP: 00007f42b2b73090 R08: 0000000000000000 R09: 0000000000000000 [ 665.834884][T29935] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 665.834896][T29935] R13: 00007f42b1fe6038 R14: 00007f42b1fe5fa0 R15: 00007fff31172628 [ 665.834927][T29935] [ 666.066432][ T1118] bond0: (slave wlan0): failed to get link speed/duplex [ 666.182016][ T68] bond0: (slave wlan0): failed to get link speed/duplex [ 666.253112][T29951] __nla_validate_parse: 4 callbacks suppressed [ 666.253131][T29951] netlink: 68 bytes leftover after parsing attributes in process `syz.1.7236'. [ 666.268438][T29951] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7236'. [ 666.304944][ T12] bond0: (slave wlan0): failed to get link speed/duplex [ 666.428958][ T1101] bond0: (slave wlan0): failed to get link speed/duplex [ 666.448902][T29964] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7238'. [ 666.547603][ T1118] bond0: (slave wlan0): failed to get link speed/duplex [ 666.617622][T29974] netem: incorrect gi model size [ 666.625927][T29974] netem: change failed [ 666.699322][T29981] netlink: 32 bytes leftover after parsing attributes in process `syz.5.7240'. [ 666.727952][T29978] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 666.750344][ T1101] bond0: (slave wlan0): failed to get link speed/duplex [ 666.862146][ T1101] bond0: (slave wlan0): failed to get link speed/duplex [ 667.839324][T30017] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7252'. [ 668.033778][T30025] FAULT_INJECTION: forcing a failure. [ 668.033778][T30025] name failslab, interval 1, probability 0, space 0, times 0 [ 668.092416][T30025] CPU: 0 UID: 0 PID: 30025 Comm: syz.0.7256 Not tainted syzkaller #0 PREEMPT(full) [ 668.092442][T30025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 668.092453][T30025] Call Trace: [ 668.092464][T30025] [ 668.092473][T30025] dump_stack_lvl+0x189/0x250 [ 668.092500][T30025] ? __pfx____ratelimit+0x10/0x10 [ 668.092523][T30025] ? __pfx_dump_stack_lvl+0x10/0x10 [ 668.092546][T30025] ? __pfx__printk+0x10/0x10 [ 668.092570][T30025] ? __pfx___might_resched+0x10/0x10 [ 668.092594][T30025] should_fail_ex+0x414/0x560 [ 668.092624][T30025] should_failslab+0xa8/0x100 [ 668.092645][T30025] __kmalloc_noprof+0xcb/0x7f0 [ 668.092667][T30025] ? ioctl_standard_iw_point+0x4d5/0xd40 [ 668.092686][T30025] ? rcu_is_watching+0x15/0xb0 [ 668.092710][T30025] ioctl_standard_iw_point+0x4d5/0xd40 [ 668.092743][T30025] ? __pfx_cfg80211_wext_siwscan+0x10/0x10 [ 668.092765][T30025] ? __pfx_ioctl_standard_iw_point+0x10/0x10 [ 668.092784][T30025] ? __pfx___mutex_lock+0x10/0x10 [ 668.092814][T30025] ? full_name_hash+0x92/0xe0 [ 668.092832][T30025] ? __pfx_cfg80211_wext_siwscan+0x10/0x10 [ 668.092853][T30025] ioctl_standard_call+0xaf/0x1b0 [ 668.092874][T30025] ? __pfx_cfg80211_wext_siwscan+0x10/0x10 [ 668.092892][T30025] wext_ioctl_dispatch+0xee/0x410 [ 668.092907][T30025] ? __pfx_ioctl_standard_call+0x10/0x10 [ 668.092928][T30025] wext_handle_ioctl+0x100/0x1c0 [ 668.092948][T30025] ? __pfx_wext_handle_ioctl+0x10/0x10 [ 668.092981][T30025] sock_ioctl+0x15f/0x790 [ 668.093006][T30025] ? __pfx_sock_ioctl+0x10/0x10 [ 668.093029][T30025] ? __fget_files+0x3a0/0x420 [ 668.093046][T30025] ? __fget_files+0x2a/0x420 [ 668.093066][T30025] ? bpf_lsm_file_ioctl+0x9/0x20 [ 668.093086][T30025] ? __pfx_sock_ioctl+0x10/0x10 [ 668.093106][T30025] __se_sys_ioctl+0xfc/0x170 [ 668.093128][T30025] do_syscall_64+0xfa/0xfa0 [ 668.093155][T30025] ? lockdep_hardirqs_on+0x9c/0x150 [ 668.093177][T30025] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 668.093195][T30025] ? clear_bhb_loop+0x60/0xb0 [ 668.093216][T30025] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 668.093233][T30025] RIP: 0033:0x7febba18f6c9 [ 668.093250][T30025] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 668.093265][T30025] RSP: 002b:00007febbb0ba038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 668.093285][T30025] RAX: ffffffffffffffda RBX: 00007febba3e5fa0 RCX: 00007febba18f6c9 [ 668.093298][T30025] RDX: 0000200000000000 RSI: 0000000000008b18 RDI: 0000000000000004 [ 668.093310][T30025] RBP: 00007febbb0ba090 R08: 0000000000000000 R09: 0000000000000000 [ 668.093322][T30025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 668.093332][T30025] R13: 00007febba3e6038 R14: 00007febba3e5fa0 R15: 00007ffe19db6fb8 [ 668.093365][T30025] [ 668.528149][T30041] FAULT_INJECTION: forcing a failure. [ 668.528149][T30041] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 668.574879][T30041] CPU: 0 UID: 0 PID: 30041 Comm: syz.5.7262 Not tainted syzkaller #0 PREEMPT(full) [ 668.574905][T30041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 668.574916][T30041] Call Trace: [ 668.574924][T30041] [ 668.574932][T30041] dump_stack_lvl+0x189/0x250 [ 668.574963][T30041] ? __pfx____ratelimit+0x10/0x10 [ 668.574987][T30041] ? __pfx_dump_stack_lvl+0x10/0x10 [ 668.575009][T30041] ? __pfx__printk+0x10/0x10 [ 668.575028][T30041] ? __might_fault+0xb0/0x130 [ 668.575064][T30041] should_fail_ex+0x414/0x560 [ 668.575094][T30041] _copy_from_user+0x2d/0xb0 [ 668.575116][T30041] ___sys_sendmsg+0x158/0x2a0 [ 668.575138][T30041] ? __pfx____sys_sendmsg+0x10/0x10 [ 668.575194][T30041] ? __fget_files+0x2a/0x420 [ 668.575210][T30041] ? __fget_files+0x3a0/0x420 [ 668.575238][T30041] __x64_sys_sendmsg+0x19b/0x260 [ 668.575260][T30041] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 668.575289][T30041] ? __pfx_ksys_write+0x10/0x10 [ 668.575316][T30041] ? do_syscall_64+0xbe/0xfa0 [ 668.575341][T30041] do_syscall_64+0xfa/0xfa0 [ 668.575361][T30041] ? lockdep_hardirqs_on+0x9c/0x150 [ 668.575384][T30041] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 668.575401][T30041] ? clear_bhb_loop+0x60/0xb0 [ 668.575422][T30041] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 668.575438][T30041] RIP: 0033:0x7fcab8d8f6c9 [ 668.575454][T30041] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 668.575469][T30041] RSP: 002b:00007fcab9c20038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 668.575488][T30041] RAX: ffffffffffffffda RBX: 00007fcab8fe5fa0 RCX: 00007fcab8d8f6c9 [ 668.575502][T30041] RDX: 0000000020000000 RSI: 0000200000001080 RDI: 0000000000000005 [ 668.575514][T30041] RBP: 00007fcab9c20090 R08: 0000000000000000 R09: 0000000000000000 [ 668.575525][T30041] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 668.575537][T30041] R13: 00007fcab8fe6038 R14: 00007fcab8fe5fa0 R15: 00007ffc11c837e8 [ 668.575568][T30041] [ 668.852266][T30051] FAULT_INJECTION: forcing a failure. [ 668.852266][T30051] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 668.895748][T30051] CPU: 1 UID: 0 PID: 30051 Comm: syz.6.7266 Not tainted syzkaller #0 PREEMPT(full) [ 668.895773][T30051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 668.895784][T30051] Call Trace: [ 668.895792][T30051] [ 668.895800][T30051] dump_stack_lvl+0x189/0x250 [ 668.895828][T30051] ? __pfx____ratelimit+0x10/0x10 [ 668.895848][T30051] ? __pfx_dump_stack_lvl+0x10/0x10 [ 668.895865][T30051] ? __pfx__printk+0x10/0x10 [ 668.895897][T30051] should_fail_ex+0x414/0x560 [ 668.895928][T30051] _copy_to_user+0x31/0xb0 [ 668.895952][T30051] simple_read_from_buffer+0xe1/0x170 [ 668.895982][T30051] proc_fail_nth_read+0x1b3/0x220 [ 668.896008][T30051] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 668.896032][T30051] ? rw_verify_area+0x2a6/0x4d0 [ 668.896054][T30051] ? __lock_acquire+0xab9/0xd20 [ 668.896074][T30051] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 668.896103][T30051] vfs_read+0x200/0xa30 [ 668.896125][T30051] ? fdget_pos+0x247/0x320 [ 668.896146][T30051] ? __pfx___mutex_lock+0x10/0x10 [ 668.896171][T30051] ? __pfx_vfs_read+0x10/0x10 [ 668.896218][T30051] ? __fget_files+0x2a/0x420 [ 668.896239][T30051] ? __fget_files+0x3a0/0x420 [ 668.896254][T30051] ? __fget_files+0x2a/0x420 [ 668.896281][T30051] ksys_read+0x145/0x250 [ 668.896306][T30051] ? __pfx_ksys_read+0x10/0x10 [ 668.896332][T30051] ? do_syscall_64+0xbe/0xfa0 [ 668.896360][T30051] do_syscall_64+0xfa/0xfa0 [ 668.896380][T30051] ? lockdep_hardirqs_on+0x9c/0x150 [ 668.896402][T30051] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 668.896420][T30051] ? clear_bhb_loop+0x60/0xb0 [ 668.896441][T30051] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 668.896458][T30051] RIP: 0033:0x7f42b1d8e0dc [ 668.896474][T30051] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 668.896488][T30051] RSP: 002b:00007f42b2b73030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 668.896507][T30051] RAX: ffffffffffffffda RBX: 00007f42b1fe5fa0 RCX: 00007f42b1d8e0dc [ 668.896520][T30051] RDX: 000000000000000f RSI: 00007f42b2b730a0 RDI: 0000000000000004 [ 668.896531][T30051] RBP: 00007f42b2b73090 R08: 0000000000000000 R09: 0000000000000000 [ 668.896542][T30051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 668.896553][T30051] R13: 00007f42b1fe6038 R14: 00007f42b1fe5fa0 R15: 00007fff31172628 [ 668.896581][T30051] [ 669.173399][T30059] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7267'. [ 669.190063][T30062] netlink: 'syz.6.7269': attribute type 1 has an invalid length. [ 669.307758][T30066] veth5: entered promiscuous mode [ 669.368543][T30062] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 669.807591][T30099] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.7277'. [ 670.100335][T30114] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7283'. [ 670.497281][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 670.527799][T30128] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7286'. [ 670.582966][T17898] net_ratelimit: 25 callbacks suppressed [ 670.582995][T17898] bond0: (slave wlan0): failed to get link speed/duplex [ 670.712380][T17898] bond0: (slave wlan0): failed to get link speed/duplex [ 670.823461][ T12] bond0: (slave wlan0): failed to get link speed/duplex [ 670.857575][T30135] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7288'. [ 670.979911][T30139] FAULT_INJECTION: forcing a failure. [ 670.979911][T30139] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 671.046349][T30139] CPU: 0 UID: 0 PID: 30139 Comm: syz.1.7291 Not tainted syzkaller #0 PREEMPT(full) [ 671.046376][T30139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 671.046387][T30139] Call Trace: [ 671.046395][T30139] [ 671.046403][T30139] dump_stack_lvl+0x189/0x250 [ 671.046429][T30139] ? __pfx____ratelimit+0x10/0x10 [ 671.046452][T30139] ? __pfx_dump_stack_lvl+0x10/0x10 [ 671.046473][T30139] ? __pfx__printk+0x10/0x10 [ 671.046491][T30139] ? __might_fault+0xb0/0x130 [ 671.046526][T30139] should_fail_ex+0x414/0x560 [ 671.046556][T30139] _copy_from_user+0x2d/0xb0 [ 671.046579][T30139] ioctl_standard_iw_point+0x59d/0xd40 [ 671.046612][T30139] ? __pfx_cfg80211_wext_siwscan+0x10/0x10 [ 671.046634][T30139] ? __pfx_ioctl_standard_iw_point+0x10/0x10 [ 671.046652][T30139] ? __pfx___mutex_lock+0x10/0x10 [ 671.046683][T30139] ? full_name_hash+0x92/0xe0 [ 671.046704][T30139] ? __pfx_cfg80211_wext_siwscan+0x10/0x10 [ 671.046725][T30139] ioctl_standard_call+0xaf/0x1b0 [ 671.046746][T30139] ? __pfx_cfg80211_wext_siwscan+0x10/0x10 [ 671.046765][T30139] wext_ioctl_dispatch+0xee/0x410 [ 671.046781][T30139] ? __pfx_ioctl_standard_call+0x10/0x10 [ 671.046802][T30139] wext_handle_ioctl+0x100/0x1c0 [ 671.046823][T30139] ? __pfx_wext_handle_ioctl+0x10/0x10 [ 671.046857][T30139] sock_ioctl+0x15f/0x790 [ 671.046882][T30139] ? __pfx_sock_ioctl+0x10/0x10 [ 671.046913][T30139] ? __fget_files+0x3a0/0x420 [ 671.046930][T30139] ? __fget_files+0x2a/0x420 [ 671.046950][T30139] ? bpf_lsm_file_ioctl+0x9/0x20 [ 671.046970][T30139] ? __pfx_sock_ioctl+0x10/0x10 [ 671.046991][T30139] __se_sys_ioctl+0xfc/0x170 [ 671.047015][T30139] do_syscall_64+0xfa/0xfa0 [ 671.047037][T30139] ? lockdep_hardirqs_on+0x9c/0x150 [ 671.047059][T30139] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 671.047076][T30139] ? clear_bhb_loop+0x60/0xb0 [ 671.047097][T30139] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 671.047114][T30139] RIP: 0033:0x7efdc198f6c9 [ 671.047130][T30139] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 671.047145][T30139] RSP: 002b:00007efdc28ab038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 671.047164][T30139] RAX: ffffffffffffffda RBX: 00007efdc1be5fa0 RCX: 00007efdc198f6c9 [ 671.047176][T30139] RDX: 0000200000000000 RSI: 0000000000008b18 RDI: 0000000000000004 [ 671.047187][T30139] RBP: 00007efdc28ab090 R08: 0000000000000000 R09: 0000000000000000 [ 671.047197][T30139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 671.047207][T30139] R13: 00007efdc1be6038 R14: 00007efdc1be5fa0 R15: 00007ffe7d387f08 [ 671.047238][T30139] [ 671.052532][ T12] bond0: (slave wlan0): failed to get link speed/duplex [ 671.401410][T30160] __nla_validate_parse: 2 callbacks suppressed [ 671.401428][T30160] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7297'. [ 671.429601][T30163] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.7296'. [ 671.439191][ T1118] bond0: (slave wlan0): failed to get link speed/duplex [ 671.589382][ T13] bond0: (slave wlan0): failed to get link speed/duplex [ 671.663207][T30175] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7300'. [ 671.692747][T30175] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7300'. [ 671.796887][T30175] gretap1: entered promiscuous mode [ 671.819209][T30175] gretap1: entered allmulticast mode [ 671.833290][T12567] bond0: (slave wlan0): failed to get link speed/duplex [ 671.974445][ T13] bond0: (slave wlan0): failed to get link speed/duplex [ 672.293729][ T13] bond0: (slave wlan0): failed to get link speed/duplex [ 672.402823][ T1101] bond0: (slave wlan0): failed to get link speed/duplex [ 672.418858][T30224] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7309'. [ 672.466411][T30226] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7311'. [ 672.572693][T24520] Bluetooth: hci0: command 0x0406 tx timeout [ 672.596682][T30229] sock: sock_timestamping_bind_phc: sock not bind to device [ 673.070702][T30238] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7314'. [ 673.133560][T30238] netlink: 224 bytes leftover after parsing attributes in process `syz.0.7314'. [ 673.173427][T30238] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7314'. [ 673.263016][T30246] sctp: [Deprecated]: syz.0.7314 (pid 30246) Use of int in maxseg socket option. [ 673.263016][T30246] Use struct sctp_assoc_value instead [ 673.287433][T30256] FAULT_INJECTION: forcing a failure. [ 673.287433][T30256] name failslab, interval 1, probability 0, space 0, times 0 [ 673.303708][T30255] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7317'. [ 673.336419][T30256] CPU: 0 UID: 0 PID: 30256 Comm: syz.4.7318 Not tainted syzkaller #0 PREEMPT(full) [ 673.336446][T30256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 673.336457][T30256] Call Trace: [ 673.336464][T30256] [ 673.336472][T30256] dump_stack_lvl+0x189/0x250 [ 673.336499][T30256] ? __pfx____ratelimit+0x10/0x10 [ 673.336522][T30256] ? __pfx_dump_stack_lvl+0x10/0x10 [ 673.336545][T30256] ? __pfx__printk+0x10/0x10 [ 673.336564][T30256] ? ref_tracker_free+0x63a/0x7d0 [ 673.336580][T30256] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 673.336598][T30256] ? __pfx_ref_tracker_free+0x10/0x10 [ 673.336621][T30256] should_fail_ex+0x414/0x560 [ 673.336650][T30256] should_failslab+0xa8/0x100 [ 673.336669][T30256] __kmalloc_noprof+0xcb/0x7f0 [ 673.336692][T30256] ? cfg80211_wext_siwscan+0x24c/0x1230 [ 673.336720][T30256] cfg80211_wext_siwscan+0x24c/0x1230 [ 673.336770][T30256] ioctl_standard_iw_point+0x689/0xd40 [ 673.336803][T30256] ? __pfx_cfg80211_wext_siwscan+0x10/0x10 [ 673.336830][T30256] ? __pfx_ioctl_standard_iw_point+0x10/0x10 [ 673.336847][T30256] ? __pfx___mutex_lock+0x10/0x10 [ 673.336878][T30256] ? full_name_hash+0x92/0xe0 [ 673.336898][T30256] ? __pfx_cfg80211_wext_siwscan+0x10/0x10 [ 673.336918][T30256] ioctl_standard_call+0xaf/0x1b0 [ 673.336939][T30256] ? __pfx_cfg80211_wext_siwscan+0x10/0x10 [ 673.336956][T30256] wext_ioctl_dispatch+0xee/0x410 [ 673.336970][T30256] ? __pfx_ioctl_standard_call+0x10/0x10 [ 673.336990][T30256] wext_handle_ioctl+0x100/0x1c0 [ 673.337009][T30256] ? __pfx_wext_handle_ioctl+0x10/0x10 [ 673.337042][T30256] sock_ioctl+0x15f/0x790 [ 673.337065][T30256] ? __pfx_sock_ioctl+0x10/0x10 [ 673.337088][T30256] ? __fget_files+0x3a0/0x420 [ 673.337104][T30256] ? __fget_files+0x2a/0x420 [ 673.337123][T30256] ? bpf_lsm_file_ioctl+0x9/0x20 [ 673.337143][T30256] ? __pfx_sock_ioctl+0x10/0x10 [ 673.337164][T30256] __se_sys_ioctl+0xfc/0x170 [ 673.337189][T30256] do_syscall_64+0xfa/0xfa0 [ 673.337211][T30256] ? lockdep_hardirqs_on+0x9c/0x150 [ 673.337232][T30256] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 673.337249][T30256] ? clear_bhb_loop+0x60/0xb0 [ 673.337269][T30256] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 673.337286][T30256] RIP: 0033:0x7f412a38f6c9 [ 673.337303][T30256] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 673.337319][T30256] RSP: 002b:00007f412b162038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 673.337338][T30256] RAX: ffffffffffffffda RBX: 00007f412a5e5fa0 RCX: 00007f412a38f6c9 [ 673.337352][T30256] RDX: 0000200000000000 RSI: 0000000000008b18 RDI: 0000000000000004 [ 673.337363][T30256] RBP: 00007f412b162090 R08: 0000000000000000 R09: 0000000000000000 [ 673.337375][T30256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 673.337389][T30256] R13: 00007f412a5e6038 R14: 00007f412a5e5fa0 R15: 00007ffc5edcc988 [ 673.337420][T30256] [ 673.777895][T30271] syz_tun: entered allmulticast mode [ 673.788195][T30271] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 673.816997][T30270] syz_tun: left allmulticast mode [ 673.922359][T30277] netlink: 'syz.5.7321': attribute type 4 has an invalid length. [ 673.952852][T30280] netlink: 'syz.4.7324': attribute type 29 has an invalid length. [ 674.053034][T30287] netlink: 'syz.4.7324': attribute type 39 has an invalid length. [ 674.692402][T30327] IPv6: NLM_F_CREATE should be specified when creating new route [ 674.700254][T30327] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 674.707531][T30327] IPv6: NLM_F_CREATE should be set when creating new route [ 674.714803][T30327] IPv6: NLM_F_CREATE should be set when creating new route [ 675.037009][T30345] FAULT_INJECTION: forcing a failure. [ 675.037009][T30345] name failslab, interval 1, probability 0, space 0, times 0 [ 675.084411][T30345] CPU: 0 UID: 0 PID: 30345 Comm: syz.0.7341 Not tainted syzkaller #0 PREEMPT(full) [ 675.084445][T30345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 675.084456][T30345] Call Trace: [ 675.084464][T30345] [ 675.084473][T30345] dump_stack_lvl+0x189/0x250 [ 675.084502][T30345] ? __pfx____ratelimit+0x10/0x10 [ 675.084524][T30345] ? __pfx_dump_stack_lvl+0x10/0x10 [ 675.084546][T30345] ? __pfx__printk+0x10/0x10 [ 675.084570][T30345] ? __pfx___might_resched+0x10/0x10 [ 675.084587][T30345] ? fs_reclaim_acquire+0x7d/0x100 [ 675.084609][T30345] should_fail_ex+0x414/0x560 [ 675.084637][T30345] should_failslab+0xa8/0x100 [ 675.084656][T30345] kmem_cache_alloc_node_noprof+0x77/0x710 [ 675.084678][T30345] ? __alloc_skb+0x112/0x2d0 [ 675.084700][T30345] __alloc_skb+0x112/0x2d0 [ 675.084721][T30345] nl80211_send_scan_start+0x2f/0x170 [ 675.084748][T30345] cfg80211_wext_siwscan+0xe46/0x1230 [ 675.084795][T30345] ioctl_standard_iw_point+0x689/0xd40 [ 675.084829][T30345] ? __pfx_cfg80211_wext_siwscan+0x10/0x10 [ 675.084851][T30345] ? __pfx_ioctl_standard_iw_point+0x10/0x10 [ 675.084870][T30345] ? __pfx___mutex_lock+0x10/0x10 [ 675.084901][T30345] ? full_name_hash+0x92/0xe0 [ 675.084925][T30345] ? __pfx_cfg80211_wext_siwscan+0x10/0x10 [ 675.084944][T30345] ioctl_standard_call+0xaf/0x1b0 [ 675.084964][T30345] ? __pfx_cfg80211_wext_siwscan+0x10/0x10 [ 675.084982][T30345] wext_ioctl_dispatch+0xee/0x410 [ 675.084997][T30345] ? __pfx_ioctl_standard_call+0x10/0x10 [ 675.085017][T30345] wext_handle_ioctl+0x100/0x1c0 [ 675.085037][T30345] ? __pfx_wext_handle_ioctl+0x10/0x10 [ 675.085070][T30345] sock_ioctl+0x15f/0x790 [ 675.085095][T30345] ? __pfx_sock_ioctl+0x10/0x10 [ 675.085119][T30345] ? __fget_files+0x3a0/0x420 [ 675.085133][T30345] ? __fget_files+0x2a/0x420 [ 675.085152][T30345] ? bpf_lsm_file_ioctl+0x9/0x20 [ 675.085172][T30345] ? __pfx_sock_ioctl+0x10/0x10 [ 675.085192][T30345] __se_sys_ioctl+0xfc/0x170 [ 675.085216][T30345] do_syscall_64+0xfa/0xfa0 [ 675.085237][T30345] ? lockdep_hardirqs_on+0x9c/0x150 [ 675.085259][T30345] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 675.085277][T30345] ? clear_bhb_loop+0x60/0xb0 [ 675.085299][T30345] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 675.085316][T30345] RIP: 0033:0x7febba18f6c9 [ 675.085332][T30345] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 675.085347][T30345] RSP: 002b:00007febbb0ba038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 675.085367][T30345] RAX: ffffffffffffffda RBX: 00007febba3e5fa0 RCX: 00007febba18f6c9 [ 675.085380][T30345] RDX: 0000200000000000 RSI: 0000000000008b18 RDI: 0000000000000004 [ 675.085391][T30345] RBP: 00007febbb0ba090 R08: 0000000000000000 R09: 0000000000000000 [ 675.085402][T30345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 675.085413][T30345] R13: 00007febba3e6038 R14: 00007febba3e5fa0 R15: 00007ffe19db6fb8 [ 675.085452][T30345] [ 676.409012][T30400] __nla_validate_parse: 7 callbacks suppressed [ 676.409030][T30400] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7351'. [ 676.847495][ T13] bond0 (unregistering): Released all slaves [ 676.976171][ T13] bond1 (unregistering): Released all slaves [ 677.104842][ T13] bond2 (unregistering): Released all slaves [ 677.117902][ T13] bond3 (unregistering): Released all slaves [ 677.143818][T12575] net_ratelimit: 20 callbacks suppressed [ 677.143840][T12575] bond0: (slave wlan0): failed to get link speed/duplex [ 677.313828][ T1118] bond0: (slave wlan0): failed to get link speed/duplex [ 677.322774][ T13] tipc: Disabling bearer [ 677.329799][ T13] tipc: Left network mode [ 677.398935][T30418] syz.6.7356: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 677.420290][T30418] CPU: 0 UID: 0 PID: 30418 Comm: syz.6.7356 Not tainted syzkaller #0 PREEMPT(full) [ 677.420316][T30418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 677.420327][T30418] Call Trace: [ 677.420336][T30418] [ 677.420345][T30418] dump_stack_lvl+0x189/0x250 [ 677.420379][T30418] ? __pfx_dump_stack_lvl+0x10/0x10 [ 677.420403][T30418] ? __pfx__printk+0x10/0x10 [ 677.420422][T30418] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 677.420447][T30418] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 677.420472][T30418] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 677.420498][T30418] warn_alloc+0x214/0x310 [ 677.420524][T30418] ? stack_depot_save_flags+0x40/0x860 [ 677.420553][T30418] ? __pfx_warn_alloc+0x10/0x10 [ 677.420580][T30418] ? kasan_save_track+0x3e/0x80 [ 677.420604][T30418] ? __kasan_kmalloc+0x93/0xb0 [ 677.420630][T30418] ? xsk_setsockopt+0x4dc/0x8d0 [ 677.420651][T30418] ? do_sock_setsockopt+0x17c/0x1b0 [ 677.420668][T30418] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 677.420685][T30418] ? do_syscall_64+0xfa/0xfa0 [ 677.420708][T30418] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 677.420737][T30418] __vmalloc_node_range_noprof+0x125/0x12d0 [ 677.420794][T30418] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 677.420823][T30418] ? __kasan_kmalloc+0x93/0xb0 [ 677.420854][T30418] vmalloc_user_noprof+0xad/0xf0 [ 677.420880][T30418] ? xskq_create+0xbf/0x170 [ 677.420903][T30418] xskq_create+0xbf/0x170 [ 677.420928][T30418] xsk_init_queue+0xb0/0x110 [ 677.420952][T30418] xsk_setsockopt+0x4dc/0x8d0 [ 677.420977][T30418] ? __pfx_xsk_setsockopt+0x10/0x10 [ 677.421002][T30418] ? __pfx_aa_sk_perm+0x10/0x10 [ 677.421028][T30418] ? aa_sock_opt_perm+0xff/0x1b0 [ 677.421057][T30418] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 677.421076][T30418] ? __pfx_xsk_setsockopt+0x10/0x10 [ 677.421099][T30418] do_sock_setsockopt+0x17c/0x1b0 [ 677.421122][T30418] __x64_sys_setsockopt+0x13f/0x1b0 [ 677.421157][T30418] do_syscall_64+0xfa/0xfa0 [ 677.421181][T30418] ? lockdep_hardirqs_on+0x9c/0x150 [ 677.421205][T30418] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 677.421222][T30418] ? clear_bhb_loop+0x60/0xb0 [ 677.421247][T30418] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 677.421265][T30418] RIP: 0033:0x7f42b1d8f6c9 [ 677.421281][T30418] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 677.421298][T30418] RSP: 002b:00007f42b2b52038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 677.421318][T30418] RAX: ffffffffffffffda RBX: 00007f42b1fe6090 RCX: 00007f42b1d8f6c9 [ 677.421332][T30418] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 677.421344][T30418] RBP: 00007f42b1e11f91 R08: 0000000000000004 R09: 0000000000000000 [ 677.421356][T30418] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 677.421369][T30418] R13: 00007f42b1fe6128 R14: 00007f42b1fe6090 R15: 00007fff31172628 [ 677.421401][T30418] [ 677.442239][T30418] Mem-Info: [ 677.466488][T30422] netlink: 'syz.0.7358': attribute type 1 has an invalid length. [ 677.473714][T30418] active_anon:5354 inactive_anon:0 isolated_anon:0 [ 677.473714][T30418] active_file:3545 inactive_file:40120 isolated_file:0 [ 677.473714][T30418] unevictable:768 dirty:73 writeback:0 [ 677.473714][T30418] slab_reclaimable:13586 slab_unreclaimable:256608 [ 677.473714][T30418] mapped:39759 shmem:1377 pagetables:1208 [ 677.473714][T30418] sec_pagetables:0 bounce:0 [ 677.473714][T30418] kernel_misc_reclaimable:0 [ 677.473714][T30418] free:1136669 free_pcp:13755 free_cma:0 [ 677.647810][T30430] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7359'. [ 677.792479][T30418] Node 0 active_anon:21716kB inactive_anon:0kB active_file:14180kB inactive_file:160276kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:183536kB dirty:288kB writeback:0kB shmem:3972kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:17220kB pagetables:4892kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 677.826135][T30418] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 677.873050][T30418] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 677.887349][T12575] bond0: (slave wlan0): failed to get link speed/duplex [ 677.911058][T30418] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 677.918033][T30418] Node 0 DMA32 free:626216kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:21716kB inactive_anon:0kB active_file:14180kB inactive_file:160276kB unevictable:1536kB writepending:288kB zspages:0kB present:3129332kB managed:2565160kB mlocked:0kB bounce:0kB free_pcp:44248kB local_pcp:21904kB free_cma:0kB [ 677.958078][T30418] lowmem_reserve[]: 0 0 0 0 0 [ 677.984996][T30422] 8021q: adding VLAN 0 to HW filter on device bond1 [ 677.992242][T30418] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 678.022829][T30418] lowmem_reserve[]: 0 0 0 0 0 [ 678.023234][T12575] bond0: (slave wlan0): failed to get link speed/duplex [ 678.027563][T30418] Node 1 Normal free:3904980kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:10916kB local_pcp:9028kB free_cma:0kB [ 678.081822][T30418] lowmem_reserve[]: 0 0 0 0 0 [ 678.086594][T30418] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 678.100182][T30418] Node 0 DMA32: 783*4kB (UM) 412*8kB (UME) 66*16kB (UME) 245*32kB (UME) 48*64kB (UME) 56*128kB (UME) 26*256kB (UME) 13*512kB (UM) 10*1024kB (UME) 9*2048kB (UME) 137*4096kB (UM) = 628700kB [ 678.118929][T30418] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 678.130947][T30418] Node 1 Normal: 165*4kB (UM) 50*8kB (UME) 45*16kB (UME) 239*32kB (UME) 66*64kB (UME) 15*128kB (UME) 3*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 948*4096kB (M) = 3904980kB [ 678.146159][T30426] bond1: (slave veth3): Enslaving as an active interface with a down link [ 678.149741][T30418] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 678.170195][T30418] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 678.186600][T30429] vlan2: entered allmulticast mode [ 678.187674][T30418] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 678.193206][T30429] bond1: entered allmulticast mode [ 678.206551][T30418] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 678.206575][T30418] 45017 total pagecache pages [ 678.206584][T30418] 0 pages in swap cache [ 678.206592][T30418] Free swap = 124996kB [ 678.206600][T30418] Total swap = 124996kB [ 678.206612][T30418] 2097051 pages RAM [ 678.206619][T30418] 0 pages HighMem/MovableOnly [ 678.206625][T30418] 424119 pages reserved [ 678.206636][T30418] 0 pages cma reserved [ 678.258399][T30429] bond1: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 678.505115][T30456] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7365'. [ 678.547572][T30455] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 678.631025][ T12] bond0: (slave wlan0): failed to get link speed/duplex [ 678.727783][T30466] netlink: 'syz.1.7367': attribute type 1 has an invalid length. [ 678.824848][T30466] bond3: entered promiscuous mode [ 678.849490][T30466] bond3: entered allmulticast mode [ 678.881274][T30466] 8021q: adding VLAN 0 to HW filter on device bond3 [ 678.904747][ T1118] bond0: (slave wlan0): failed to get link speed/duplex [ 679.040008][T30488] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7371'. [ 679.052917][ T1118] bond0: (slave wlan0): failed to get link speed/duplex [ 679.171988][T17898] bond0: (slave wlan0): failed to get link speed/duplex [ 679.301892][T12567] bond0: (slave wlan0): failed to get link speed/duplex [ 679.431827][ T1118] bond0: (slave wlan0): failed to get link speed/duplex [ 679.958019][T30505] netlink: 18 bytes leftover after parsing attributes in process `syz.6.7376'. [ 680.042963][T30508] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7377'. [ 680.109235][T30518] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7378'. [ 681.138066][T30580] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7393'. [ 681.176639][ T13] hsr_slave_0: left promiscuous mode [ 681.182962][ T13] hsr_slave_1: left promiscuous mode [ 681.906665][T30603] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7401'. [ 682.194216][T30603] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7401'. [ 682.203539][ T1118] net_ratelimit: 11 callbacks suppressed [ 682.203558][ T1118] bond0: (slave wlan0): failed to get link speed/duplex [ 682.309119][T30609] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7403'. [ 682.388211][T30609] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7403'. [ 682.484262][T30621] FAULT_INJECTION: forcing a failure. [ 682.484262][T30621] name failslab, interval 1, probability 0, space 0, times 0 [ 682.499975][T30621] CPU: 1 UID: 0 PID: 30621 Comm: syz.4.7408 Not tainted syzkaller #0 PREEMPT(full) [ 682.500000][T30621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 682.500011][T30621] Call Trace: [ 682.500018][T30621] [ 682.500027][T30621] dump_stack_lvl+0x189/0x250 [ 682.500055][T30621] ? __pfx____ratelimit+0x10/0x10 [ 682.500077][T30621] ? __pfx_dump_stack_lvl+0x10/0x10 [ 682.500100][T30621] ? __pfx__printk+0x10/0x10 [ 682.500124][T30621] ? __lock_acquire+0xab9/0xd20 [ 682.500149][T30621] should_fail_ex+0x414/0x560 [ 682.500179][T30621] should_failslab+0xa8/0x100 [ 682.500199][T30621] kmem_cache_alloc_noprof+0x74/0x6e0 [ 682.500223][T30621] ? skb_clone+0x212/0x3a0 [ 682.500247][T30621] skb_clone+0x212/0x3a0 [ 682.500270][T30621] __netlink_deliver_tap+0x404/0x850 [ 682.500300][T30621] ? netlink_deliver_tap+0x2e/0x1b0 [ 682.500319][T30621] netlink_deliver_tap+0x19c/0x1b0 [ 682.500337][T30621] netlink_unicast+0x7fa/0x9e0 [ 682.500369][T30621] ? __pfx_netlink_unicast+0x10/0x10 [ 682.500393][T30621] ? netlink_sendmsg+0x642/0xb30 [ 682.500408][T30621] ? skb_put+0x11b/0x210 [ 682.500428][T30621] netlink_sendmsg+0x805/0xb30 [ 682.500455][T30621] ? __pfx_netlink_sendmsg+0x10/0x10 [ 682.500475][T30621] ? aa_sock_msg_perm+0xf1/0x1d0 [ 682.500502][T30621] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 682.500518][T30621] ? __pfx_netlink_sendmsg+0x10/0x10 [ 682.500537][T30621] __sock_sendmsg+0x21c/0x270 [ 682.500562][T30621] ____sys_sendmsg+0x505/0x830 [ 682.500587][T30621] ? __pfx_____sys_sendmsg+0x10/0x10 [ 682.500615][T30621] ? import_iovec+0x74/0xa0 [ 682.500640][T30621] ___sys_sendmsg+0x21f/0x2a0 [ 682.500661][T30621] ? __pfx____sys_sendmsg+0x10/0x10 [ 682.500717][T30621] ? __fget_files+0x2a/0x420 [ 682.500732][T30621] ? __fget_files+0x3a0/0x420 [ 682.500760][T30621] __x64_sys_sendmsg+0x19b/0x260 [ 682.500782][T30621] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 682.500811][T30621] ? __pfx_ksys_write+0x10/0x10 [ 682.500845][T30621] ? do_syscall_64+0xbe/0xfa0 [ 682.500872][T30621] do_syscall_64+0xfa/0xfa0 [ 682.500893][T30621] ? lockdep_hardirqs_on+0x9c/0x150 [ 682.500916][T30621] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 682.500933][T30621] ? clear_bhb_loop+0x60/0xb0 [ 682.500954][T30621] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 682.500971][T30621] RIP: 0033:0x7f412a38f6c9 [ 682.500988][T30621] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 682.501003][T30621] RSP: 002b:00007f412b162038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 682.501023][T30621] RAX: ffffffffffffffda RBX: 00007f412a5e5fa0 RCX: 00007f412a38f6c9 [ 682.501036][T30621] RDX: 0000000020000000 RSI: 0000200000001080 RDI: 0000000000000005 [ 682.501049][T30621] RBP: 00007f412b162090 R08: 0000000000000000 R09: 0000000000000000 [ 682.501060][T30621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 682.501071][T30621] R13: 00007f412a5e6038 R14: 00007f412a5e5fa0 R15: 00007ffc5edcc988 [ 682.501103][T30621] [ 682.814013][ T5845] Bluetooth: hci1: command 0x0406 tx timeout [ 682.826592][T30624] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7409'. [ 682.883117][ T1118] bond0: (slave wlan0): failed to get link speed/duplex [ 682.890862][T30624] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7409'. [ 683.077683][ T1118] bond0: (slave wlan0): failed to get link speed/duplex [ 683.154160][T30648] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7414'. [ 683.194661][T30647] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7416'. [ 683.262889][ T1101] bond0: (slave wlan0): failed to get link speed/duplex [ 683.291628][T30648] netlink: 56 bytes leftover after parsing attributes in process `syz.1.7414'. [ 683.305771][T30652] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7418'. [ 683.382410][T30656] netlink: 'syz.0.7417': attribute type 1 has an invalid length. [ 683.401392][T12567] bond0: (slave wlan0): failed to get link speed/duplex [ 683.594628][T30656] 8021q: adding VLAN 0 to HW filter on device bond2 [ 683.612643][ T1118] bond0: (slave wlan0): failed to get link speed/duplex [ 683.650765][T30663] netlink: 'syz.4.7421': attribute type 1 has an invalid length. [ 683.670502][T30658] veth5: entered promiscuous mode [ 683.688506][T30658] bond2: (slave veth5): Enslaving as an active interface with a down link [ 683.744726][T30663] 8021q: adding VLAN 0 to HW filter on device bond2 [ 683.777649][ T13] IPVS: stop unused estimator thread 0... [ 683.837958][T30669] veth3: entered promiscuous mode [ 683.851275][T30669] bond2: (slave veth3): Enslaving as an active interface with an up link [ 683.923086][T12575] bond0: (slave wlan0): failed to get link speed/duplex [ 683.966551][T30674] netlink: 'syz.5.7424': attribute type 1 has an invalid length. [ 683.982990][T30674] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 684.026122][T30675] FAULT_INJECTION: forcing a failure. [ 684.026122][T30675] name failslab, interval 1, probability 0, space 0, times 0 [ 684.062929][T30675] CPU: 1 UID: 0 PID: 30675 Comm: syz.0.7423 Not tainted syzkaller #0 PREEMPT(full) [ 684.062956][T30675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 684.062967][T30675] Call Trace: [ 684.062975][T30675] [ 684.062983][T30675] dump_stack_lvl+0x189/0x250 [ 684.063011][T30675] ? __pfx____ratelimit+0x10/0x10 [ 684.063035][T30675] ? __pfx_dump_stack_lvl+0x10/0x10 [ 684.063057][T30675] ? __pfx__printk+0x10/0x10 [ 684.063082][T30675] ? __pfx___might_resched+0x10/0x10 [ 684.063107][T30675] should_fail_ex+0x414/0x560 [ 684.063138][T30675] should_failslab+0xa8/0x100 [ 684.063159][T30675] kmem_cache_alloc_node_noprof+0x77/0x710 [ 684.063183][T30675] ? __alloc_skb+0x112/0x2d0 [ 684.063207][T30675] __alloc_skb+0x112/0x2d0 [ 684.063229][T30675] netlink_ack+0x146/0xa50 [ 684.063252][T30675] ? __pfx_genl_rcv_msg+0x10/0x10 [ 684.063271][T30675] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 684.063291][T30675] ? __pfx_nl80211_post_doit+0x10/0x10 [ 684.063325][T30675] netlink_rcv_skb+0x28c/0x470 [ 684.063340][T30675] ? __lock_acquire+0xab9/0xd20 [ 684.063358][T30675] ? __pfx_genl_rcv_msg+0x10/0x10 [ 684.063381][T30675] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 684.063418][T30675] ? down_read+0x1ad/0x2e0 [ 684.063438][T30675] genl_rcv+0x28/0x40 [ 684.063457][T30675] netlink_unicast+0x82f/0x9e0 [ 684.063490][T30675] ? __pfx_netlink_unicast+0x10/0x10 [ 684.063516][T30675] ? netlink_sendmsg+0x642/0xb30 [ 684.063532][T30675] ? skb_put+0x11b/0x210 [ 684.063553][T30675] netlink_sendmsg+0x805/0xb30 [ 684.063580][T30675] ? __pfx_netlink_sendmsg+0x10/0x10 [ 684.063601][T30675] ? aa_sock_msg_perm+0xf1/0x1d0 [ 684.063629][T30675] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 684.063646][T30675] ? __pfx_netlink_sendmsg+0x10/0x10 [ 684.063664][T30675] __sock_sendmsg+0x21c/0x270 [ 684.063691][T30675] ____sys_sendmsg+0x505/0x830 [ 684.063716][T30675] ? __pfx_____sys_sendmsg+0x10/0x10 [ 684.063745][T30675] ? import_iovec+0x74/0xa0 [ 684.063771][T30675] ___sys_sendmsg+0x21f/0x2a0 [ 684.063793][T30675] ? __pfx____sys_sendmsg+0x10/0x10 [ 684.063849][T30675] ? __fget_files+0x2a/0x420 [ 684.063865][T30675] ? __fget_files+0x3a0/0x420 [ 684.063893][T30675] __x64_sys_sendmsg+0x19b/0x260 [ 684.063920][T30675] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 684.063950][T30675] ? __pfx_ksys_write+0x10/0x10 [ 684.063978][T30675] ? do_syscall_64+0xbe/0xfa0 [ 684.064005][T30675] do_syscall_64+0xfa/0xfa0 [ 684.064027][T30675] ? lockdep_hardirqs_on+0x9c/0x150 [ 684.064049][T30675] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 684.064067][T30675] ? clear_bhb_loop+0x60/0xb0 [ 684.064089][T30675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 684.064106][T30675] RIP: 0033:0x7febba18f6c9 [ 684.064123][T30675] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 684.064138][T30675] RSP: 002b:00007febbb0ba038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 684.064158][T30675] RAX: ffffffffffffffda RBX: 00007febba3e5fa0 RCX: 00007febba18f6c9 [ 684.064171][T30675] RDX: 0000000020000000 RSI: 0000200000001080 RDI: 0000000000000005 [ 684.064182][T30675] RBP: 00007febbb0ba090 R08: 0000000000000000 R09: 0000000000000000 [ 684.064193][T30675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 684.064203][T30675] R13: 00007febba3e6038 R14: 00007febba3e5fa0 R15: 00007ffe19db6fb8 [ 684.064232][T30675] [ 684.064278][ T13] bond0: (slave wlan0): failed to get link speed/duplex [ 684.818283][ T1118] bond0: (slave wlan0): failed to get link speed/duplex [ 685.358796][T30743] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 686.279108][T30790] bridge0: entered promiscuous mode [ 686.285291][T30790] macsec1: entered promiscuous mode [ 686.290807][T30790] macsec1: entered allmulticast mode [ 686.296433][T30790] bridge0: entered allmulticast mode [ 686.304030][T30790] bridge0: port 4(macsec1) entered blocking state [ 686.310757][T30790] bridge0: port 4(macsec1) entered disabled state [ 686.363317][T30790] bridge0: left allmulticast mode [ 686.379600][T30790] bridge0: left promiscuous mode [ 686.447440][T30789] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 686.791480][T30808] netlink: 'syz.1.7459': attribute type 1 has an invalid length. [ 686.902959][T30815] __nla_validate_parse: 12 callbacks suppressed [ 686.902978][T30815] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7461'. [ 687.117024][T30820] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7464'. [ 687.237986][T30832] netlink: 44 bytes leftover after parsing attributes in process `syz.0.7468'. [ 687.254196][T30829] netlink: 76 bytes leftover after parsing attributes in process `syz.4.7466'. [ 687.292397][T12575] net_ratelimit: 17 callbacks suppressed [ 687.292417][T12575] bond0: (slave wlan0): failed to get link speed/duplex [ 687.592468][ T1118] bond0: (slave wlan0): failed to get link speed/duplex [ 687.608555][T30836] syzkaller1: entered promiscuous mode [ 687.614207][T30836] syzkaller1: entered allmulticast mode [ 688.064683][ T68] bond0: (slave wlan0): failed to get link speed/duplex [ 688.222812][T30866] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7475'. [ 688.826135][T30633] Set syz1 is full, maxelem 65536 reached [ 690.232546][ T1118] bond0: (slave wlan0): failed to get link speed/duplex [ 690.341898][ T1101] bond0: (slave wlan0): failed to get link speed/duplex [ 690.442199][T30905] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7486'. [ 690.492852][T12575] bond0: (slave wlan0): failed to get link speed/duplex [ 690.589260][T30919] netlink: 'syz.1.7490': attribute type 1 has an invalid length. [ 690.662407][T30926] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7490'. [ 690.670521][T30919] 8021q: adding VLAN 0 to HW filter on device bond4 [ 690.723821][T30926] bond4: entered allmulticast mode [ 690.742436][ T1101] bond0: (slave wlan0): failed to get link speed/duplex [ 690.779744][T30926] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7490'. [ 690.798906][T30935] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 690.825183][T30926] bond4: (slave ip6gretap1): making interface the new active one [ 690.826069][T30937] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7494'. [ 690.834518][T30926] ip6gretap1: entered allmulticast mode [ 690.851503][T30926] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link [ 690.891924][ T1101] bond0: (slave wlan0): failed to get link speed/duplex [ 691.002714][ T1118] bond0: (slave wlan0): failed to get link speed/duplex [ 691.048122][T30941] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 691.059197][T30941] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 691.068032][T30941] gretap2: entered promiscuous mode [ 691.074063][T30941] gretap2: entered allmulticast mode [ 691.178846][T30944] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7498'. [ 691.519965][T30948] netlink: 'syz.1.7500': attribute type 83 has an invalid length. [ 691.858285][T30963] syzkaller0: entered promiscuous mode [ 691.865125][T30963] syzkaller0: entered allmulticast mode [ 692.025603][T30983] __nla_validate_parse: 3 callbacks suppressed [ 692.025620][T30983] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7510'. [ 692.064791][T30983] xt_hashlimit: overflow, try lower: 3/0 [ 692.228434][T30995] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7514'. [ 693.961907][T31001] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 694.002017][ T1118] net_ratelimit: 8 callbacks suppressed [ 694.002037][ T1118] bond0: (slave wlan0): failed to get link speed/duplex [ 694.112958][T31021] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7520'. [ 694.147714][ T1101] bond0: (slave wlan0): failed to get link speed/duplex [ 694.215310][T31025] tipc: Enabled bearer , priority 0 [ 694.243440][T31025] syzkaller0: entered promiscuous mode [ 694.256197][T31025] syzkaller0: entered allmulticast mode [ 694.302399][ T1101] bond0: (slave wlan0): failed to get link speed/duplex [ 694.328536][T31025] syzkaller0: mtu less than device minimum [ 694.372832][T31035] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7526'. [ 694.389550][T31024] tipc: Resetting bearer [ 694.421593][T31024] tipc: Disabling bearer [ 694.472087][ T1118] bond0: (slave wlan0): failed to get link speed/duplex [ 694.528175][T31052] netlink: 48 bytes leftover after parsing attributes in process `syz.5.7530'. [ 694.662070][ T1101] bond0: (slave wlan0): failed to get link speed/duplex [ 694.782910][ T1101] bond0: (slave wlan0): failed to get link speed/duplex [ 694.892999][T12582] bond0: (slave wlan0): failed to get link speed/duplex [ 695.001892][T12575] bond0: (slave wlan0): failed to get link speed/duplex [ 695.111861][ T1118] bond0: (slave wlan0): failed to get link speed/duplex [ 695.443312][T31077] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7536'. [ 695.660126][T31090] netlink: 48 bytes leftover after parsing attributes in process `syz.4.7542'. [ 695.720662][T31094] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7544'. [ 695.897531][ T1101] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 695.907575][ T1101] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 695.917497][ T1101] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 695.981384][T31107] vlan2: entered promiscuous mode [ 696.017632][T31107] geneve1: entered promiscuous mode [ 696.023574][T31110] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7546'. [ 696.032785][T31107] vlan2: entered allmulticast mode [ 696.032808][T31107] geneve1: entered allmulticast mode [ 696.045648][ T1101] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 696.080266][T31110] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7546'. [ 696.188403][T31124] netlink: 'syz.1.7550': attribute type 1 has an invalid length. [ 696.264666][T31121] bridge_slave_1 (unregistering): left allmulticast mode [ 696.303010][T31121] bridge_slave_1 (unregistering): left promiscuous mode [ 696.331544][T31121] bridge0: port 2(bridge_slave_1) entered disabled state [ 696.373937][T31134] netlink: 'syz.4.7552': attribute type 1 has an invalid length. [ 696.436692][T31124] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 696.599404][T31130] veth5: entered promiscuous mode [ 696.666217][T31134] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 697.089111][T31169] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 697.112349][T31169] netlink: 'syz.0.7562': attribute type 2 has an invalid length. [ 697.178488][T31169] 9: entered promiscuous mode [ 698.049043][T31194] __nla_validate_parse: 3 callbacks suppressed [ 698.049062][T31194] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7569'. [ 699.094393][T31185] tipc: Resetting bearer [ 699.113127][T31188] net_ratelimit: 13 callbacks suppressed [ 699.113146][T31188] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 699.163710][ T12] bond0: (slave wlan0): failed to get link speed/duplex [ 699.241111][T31199] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7571'. [ 699.255437][T31199] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 699.264354][T31199] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 699.295476][T31199] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 699.313052][T31199] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 699.366403][T31199] batadv0 (unregistering): left promiscuous mode [ 699.410412][T31216] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7574'. [ 699.444482][ T1118] bond0: (slave wlan0): failed to get link speed/duplex [ 699.602592][T12582] bond0: (slave wlan0): failed to get link speed/duplex [ 699.604182][T31225] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7577'. [ 699.714479][ T1118] bond0: (slave wlan0): failed to get link speed/duplex [ 699.738384][T31230] netlink: 'syz.1.7579': attribute type 1 has an invalid length. [ 699.861539][T31238] bond5: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 699.899455][T31238] bond5: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 699.913035][T31238] bond5: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 699.952790][T31249] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7584'. [ 700.014468][T17898] bond0: (slave wlan0): failed to get link speed/duplex [ 701.821926][T12582] bond0: (slave wlan0): failed to get link speed/duplex [ 701.932685][T12582] bond0: (slave wlan0): failed to get link speed/duplex [ 701.969378][T31275] netlink: 'syz.5.7594': attribute type 10 has an invalid length. [ 702.059598][T31275] bridge0: port 2(bridge_slave_1) entered disabled state [ 702.085484][T31275] bridge_slave_1: left allmulticast mode [ 702.124806][T31275] bridge_slave_1: left promiscuous mode [ 702.130304][T31284] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7596'. [ 702.144783][T31275] bridge0: port 2(bridge_slave_1) entered disabled state [ 702.199961][T31275] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 702.222988][T17898] bond0: (slave wlan0): failed to get link speed/duplex [ 702.225960][T31289] netdevsim netdevsim0: Direct firmware load for .. failed with error -2 [ 702.262620][T31289] netdevsim netdevsim0: Falling back to sysfs fallback for: .. [ 702.329417][T31297] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7598'. [ 702.346419][T12575] bond0: (slave wlan0): failed to get link speed/duplex [ 702.585915][T31309] netlink: 'syz.1.7603': attribute type 27 has an invalid length. [ 702.593889][T31309] netlink: 'syz.1.7603': attribute type 4 has an invalid length. [ 702.596926][T31308] netlink: 153992 bytes leftover after parsing attributes in process `syz.6.7602'. [ 702.601611][T31309] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7603'. [ 702.965580][T31330] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7609'. [ 704.724746][ T13] net_ratelimit: 5 callbacks suppressed [ 704.724787][ T13] bond0: (slave wlan0): failed to get link speed/duplex [ 704.786412][T31354] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7611'. [ 704.845584][T31354] nbd: illegal input index 2958377 [ 704.852122][T12575] bond0: (slave wlan0): failed to get link speed/duplex [ 704.885914][T31359] netlink: 36 bytes leftover after parsing attributes in process `syz.5.7615'. [ 704.904775][T31360] xt_cgroup: invalid path, errno=-2 [ 704.940753][T31361] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7614'. [ 704.981812][T12575] bond0: (slave wlan0): failed to get link speed/duplex [ 705.101853][T12575] bond0: (slave wlan0): failed to get link speed/duplex [ 705.232858][T31385] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7622'. [ 705.296267][ T13] bond0: (slave wlan0): failed to get link speed/duplex [ 705.781289][T31410] netlink: 'syz.6.7628': attribute type 10 has an invalid length. [ 705.790147][T31410] netlink: 40 bytes leftover after parsing attributes in process `syz.6.7628'. [ 707.268154][T31410] team0: Port device geneve0 added [ 707.275753][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 707.292448][ T12] bond0: (slave wlan0): failed to get link speed/duplex [ 707.322593][ T68] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 707.331366][ T68] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 707.373506][ T68] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 707.433774][T12575] bond0: (slave wlan0): failed to get link speed/duplex [ 707.457257][T31422] netlink: 'syz.5.7630': attribute type 10 has an invalid length. [ 707.505613][T31422] veth1_macvtap: left promiscuous mode [ 707.681946][T12575] bond0: (slave wlan0): failed to get link speed/duplex [ 707.714737][T31449] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7635'. [ 707.812082][T17898] bond0: (slave wlan0): failed to get link speed/duplex [ 707.896823][T31452] netlink: 'syz.4.7636': attribute type 16 has an invalid length. [ 707.922490][T17898] bond0: (slave wlan0): failed to get link speed/duplex [ 707.929229][T31452] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7636'. [ 709.812252][T12575] net_ratelimit: 16 callbacks suppressed [ 709.812269][T12575] bond0: (slave wlan0): failed to get link speed/duplex [ 709.932869][ T12] bond0: (slave wlan0): failed to get link speed/duplex [ 710.042301][T12575] bond0: (slave wlan0): failed to get link speed/duplex [ 710.151860][T12582] bond0: (slave wlan0): failed to get link speed/duplex [ 710.262621][ T68] bond0: (slave wlan0): failed to get link speed/duplex [ 710.371900][T12582] bond0: (slave wlan0): failed to get link speed/duplex [ 710.481914][T12582] bond0: (slave wlan0): failed to get link speed/duplex [ 710.592276][ T68] bond0: (slave wlan0): failed to get link speed/duplex [ 710.701837][T12582] bond0: (slave wlan0): failed to get link speed/duplex [ 710.811891][ T12] bond0: (slave wlan0): failed to get link speed/duplex [ 714.912201][ T68] net_ratelimit: 36 callbacks suppressed [ 714.912223][ T68] bond0: (slave wlan0): failed to get link speed/duplex [ 715.032144][T12582] bond0: (slave wlan0): failed to get link speed/duplex [ 715.142354][T12582] bond0: (slave wlan0): failed to get link speed/duplex [ 715.251838][ T68] bond0: (slave wlan0): failed to get link speed/duplex [ 715.362026][ T68] bond0: (slave wlan0): failed to get link speed/duplex [ 715.472262][T12575] bond0: (slave wlan0): failed to get link speed/duplex [ 715.581908][ T68] bond0: (slave wlan0): failed to get link speed/duplex [ 715.692457][T17898] bond0: (slave wlan0): failed to get link speed/duplex [ 715.801960][T12575] bond0: (slave wlan0): failed to get link speed/duplex [ 715.912246][T12575] bond0: (slave wlan0): failed to get link speed/duplex [ 718.652241][T24520] Bluetooth: hci5: command 0x0406 tx timeout [ 719.982638][ T12] net_ratelimit: 36 callbacks suppressed [ 719.982659][ T12] bond0: (slave wlan0): failed to get link speed/duplex [ 720.102001][T12575] bond0: (slave wlan0): failed to get link speed/duplex [ 720.212286][T12575] bond0: (slave wlan0): failed to get link speed/duplex [ 720.333721][T12575] bond0: (slave wlan0): failed to get link speed/duplex [ 720.442085][T12582] bond0: (slave wlan0): failed to get link speed/duplex [ 720.552706][T12582] bond0: (slave wlan0): failed to get link speed/duplex [ 720.661925][ T12] bond0: (slave wlan0): failed to get link speed/duplex [ 720.772390][ T12] bond0: (slave wlan0): failed to get link speed/duplex [ 720.882098][ T12] bond0: (slave wlan0): failed to get link speed/duplex [ 720.992721][ T12] bond0: (slave wlan0): failed to get link speed/duplex [ 723.772865][T24520] Bluetooth: hci6: command 0x0406 tx timeout [ 725.072138][T12575] net_ratelimit: 36 callbacks suppressed [ 725.072159][T12575] bond0: (slave wlan0): failed to get link speed/duplex [ 725.192120][T12575] bond0: (slave wlan0): failed to get link speed/duplex [ 725.302371][T12582] bond0: (slave wlan0): failed to get link speed/duplex [ 725.412253][T17898] bond0: (slave wlan0): failed to get link speed/duplex [ 725.521952][T12575] bond0: (slave wlan0): failed to get link speed/duplex [ 725.632314][T12582] bond0: (slave wlan0): failed to get link speed/duplex [ 725.742205][T12582] bond0: (slave wlan0): failed to get link speed/duplex [ 725.852058][T12582] bond0: (slave wlan0): failed to get link speed/duplex [ 725.962384][T12575] bond0: (slave wlan0): failed to get link speed/duplex [ 726.072134][T12575] bond0: (slave wlan0): failed to get link speed/duplex [ 730.012186][ T31] INFO: task syz.2.6406:27321 blocked for more than 143 seconds. [ 730.019975][ T31] Not tainted syzkaller #0 [ 730.025417][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 730.034202][ T31] task:syz.2.6406 state:D stack:27272 pid:27321 tgid:27319 ppid:26214 task_flags:0x400040 flags:0x00080002 [ 730.046301][ T31] Call Trace: [ 730.049581][ T31] [ 730.052962][ T31] __schedule+0x1798/0x4cc0 [ 730.057467][ T31] ? __lock_acquire+0xab9/0xd20 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 730.062518][ T31] ? __lock_acquire+0xab9/0xd20 [ 730.067592][ T31] ? __pfx___schedule+0x10/0x10 [ 730.072631][ T31] ? schedule+0x91/0x360 [ 730.078535][ T31] schedule+0x165/0x360 [ 730.083628][ T31] schedule_preempt_disabled+0x13/0x30 [ 730.089111][ T31] __mutex_lock+0x7e6/0x1350 [ 730.121768][ T31] ? __mutex_lock+0x5bb/0x1350 [ 730.126608][ T31] ? nfsd_nl_version_get_doit+0x16e/0xb60 [ 730.191134][T17898] net_ratelimit: 36 callbacks suppressed [ 730.191161][T17898] bond0: (slave wlan0): failed to get link speed/duplex [ 730.197239][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 730.251973][ T31] ? __nlmsg_put+0xef/0x1b0 [ 730.256542][ T31] ? genlmsg_put+0x137/0x2e0 [ 730.261156][ T31] nfsd_nl_version_get_doit+0x16e/0xb60 [ 730.283863][ T31] ? __local_bh_enable_ip+0x12d/0x1c0 [ 730.289317][ T31] ? __pfx_nfsd_nl_version_get_doit+0x10/0x10 [ 730.296523][ T31] genl_family_rcv_msg_doit+0x215/0x300 [ 730.302268][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 730.308378][ T31] genl_rcv_msg+0x60e/0x790 [ 730.313082][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 730.318126][ T31] ? __pfx_nfsd_nl_version_get_doit+0x10/0x10 [ 730.325255][ T31] ? __asan_memcpy+0x40/0x70 [ 730.329873][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 730.335468][ T31] netlink_rcv_skb+0x208/0x470 [ 730.340245][ T31] ? __lock_acquire+0xab9/0xd20 [ 730.348590][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 730.354547][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 730.359866][ T31] ? down_read+0x1ad/0x2e0 [ 730.364575][T17898] bond0: (slave wlan0): failed to get link speed/duplex [ 730.371577][ T31] genl_rcv+0x28/0x40 [ 730.375804][ T31] netlink_unicast+0x82f/0x9e0 [ 730.380600][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 730.389236][ T31] ? netlink_sendmsg+0x642/0xb30 [ 730.395249][ T31] ? skb_put+0x11b/0x210 [ 730.399515][ T31] netlink_sendmsg+0x805/0xb30 [ 730.421776][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 730.427124][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 730.442584][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 730.447914][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 730.472616][ T12] bond0: (slave wlan0): failed to get link speed/duplex [ 730.479657][ T31] __sock_sendmsg+0x21c/0x270 [ 730.486488][ T31] ____sys_sendmsg+0x505/0x830 [ 730.491301][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 730.512034][ T31] ? import_iovec+0x74/0xa0 [ 730.516603][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 730.521289][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 730.541802][ T31] ? __fget_files+0x2a/0x420 [ 730.546444][ T31] ? __fget_files+0x3a0/0x420 [ 730.551135][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 730.581865][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 730.588818][ T31] ? do_syscall_64+0xbe/0xfa0 [ 730.594559][T12575] bond0: (slave wlan0): failed to get link speed/duplex [ 730.606043][ T31] do_syscall_64+0xfa/0xfa0 [ 730.610597][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 730.633841][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 730.639961][ T31] ? clear_bhb_loop+0x60/0xb0 [ 730.657016][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 730.672326][ T31] RIP: 0033:0x7f9312b8f6c9 [ 730.676783][ T31] RSP: 002b:00007f9313a37038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 730.706904][ T31] RAX: ffffffffffffffda RBX: 00007f9312de5fa0 RCX: 00007f9312b8f6c9 [ 730.706913][ T12] bond0: (slave wlan0): failed to get link speed/duplex [ 730.723163][ T31] RDX: 0000000020048000 RSI: 0000200000000140 RDI: 0000000000000004 [ 730.731151][ T31] RBP: 00007f9312c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 730.741131][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 730.750316][ T31] R13: 00007f9312de6038 R14: 00007f9312de5fa0 R15: 00007ffd74550878 [ 730.758410][ T31] [ 730.761558][ T31] [ 730.761558][ T31] Showing all locks held in the system: [ 730.815414][T17898] bond0: (slave wlan0): failed to get link speed/duplex [ 730.822085][ T31] 1 lock held by khungtaskd/31: [ 730.828228][ T31] #0: ffffffff8df3d6a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 730.851892][ T31] 2 locks held by getty/5592: [ 730.856602][ T31] #0: ffff888033cb20a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 730.881924][ T31] #1: ffffc900036bb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 730.911847][ T31] 3 locks held by kworker/0:9/10273: [ 730.917255][ T31] #0: ffff88801a055948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 730.944535][T17898] bond0: (slave wlan0): failed to get link speed/duplex [ 730.952665][ T31] #1: ffffc90003a1fba0 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 730.974202][ T31] #2: ffffffff8df43138 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 731.001959][ T31] 2 locks held by syz.3.5296/24271: [ 731.007209][ T31] #0: ffffffff8f331690 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 731.031796][ T31] #1: ffffffff8e226fe8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690 [ 731.045991][ T31] 5 locks held by syz-executor/24518: [ 731.051389][ T31] #0: ffff888080854dc8 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 731.061493][ T31] #1: ffff8880808540b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 731.062932][T12575] bond0: (slave wlan0): failed to get link speed/duplex [ 731.078742][ T31] #2: ffffffff8f435ba8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 731.078805][ T31] #3: ffff88803034e338 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 731.104028][ T31] #4: ffffffff8df43138 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 731.115097][ T31] 3 locks held by syz-executor/25657: [ 731.120479][ T31] #0: ffff888080a88dc8 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 731.130666][ T31] #1: ffff888080a880b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 731.145324][ T31] #2: ffffffff8f435ba8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 731.155490][ T31] 1 lock held by syz-executor/26596: [ 731.160785][ T31] 2 locks held by syz.2.6406/27321: [ 731.166268][ T31] #0: ffffffff8f331690 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 731.175368][ T31] #1: ffffffff8e226fe8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_get_doit+0x16e/0xb60 [ 731.187983][ T31] 2 locks held by syz-executor/27958: [ 731.193469][ T31] #0: ffff88801c728dc8 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 731.204994][ T31] #1: ffff88801c7280b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 731.215747][ T31] [ 731.218348][ T31] ============================================= [ 731.218348][ T31] [ 731.236339][ T31] NMI backtrace for cpu 1 [ 731.236361][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 731.236381][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 731.236392][ T31] Call Trace: [ 731.236400][ T31] [ 731.236409][ T31] dump_stack_lvl+0x189/0x250 [ 731.236440][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 731.236464][ T31] ? __pfx__printk+0x10/0x10 [ 731.236494][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 731.236517][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 731.236539][ T31] ? __pfx__printk+0x10/0x10 [ 731.236562][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 731.236590][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 731.236613][ T31] watchdog+0xf60/0xfa0 [ 731.236701][ T31] ? watchdog+0x1e2/0xfa0 [ 731.236730][ T31] kthread+0x711/0x8a0 [ 731.236756][ T31] ? __pfx_watchdog+0x10/0x10 [ 731.236771][ T31] ? __pfx_kthread+0x10/0x10 [ 731.236794][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 731.236814][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 731.236834][ T31] ? __pfx_kthread+0x10/0x10 [ 731.236853][ T31] ret_from_fork+0x4bc/0x870 [ 731.236872][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 731.236895][ T31] ? __switch_to_asm+0x39/0x70 [ 731.236908][ T31] ? __switch_to_asm+0x33/0x70 [ 731.236922][ T31] ? __pfx_kthread+0x10/0x10 [ 731.236946][ T31] ret_from_fork_asm+0x1a/0x30 [ 731.236977][ T31] [ 731.236985][ T31] Sending NMI from CPU 1 to CPUs 0: [ 731.388836][ C0] NMI backtrace for cpu 0 [ 731.388862][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 731.388879][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 731.388889][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 731.388912][ C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d f3 e0 21 00 f3 0f 1e fa fb f4 c8 e6 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 731.388925][ C0] RSP: 0018:ffffffff8dc07d80 EFLAGS: 000002c6 [ 731.388939][ C0] RAX: 4eb66201474e6200 RBX: ffffffff81967b47 RCX: 4eb66201474e6200 [ 731.388950][ C0] RDX: 0000000000000001 RSI: ffffffff8d70dfda RDI: ffffffff8bbf0760 [ 731.388961][ C0] RBP: ffffffff8dc07ea8 R08: ffff8880b8832fdb R09: 1ffff110171065fb [ 731.388972][ C0] R10: dffffc0000000000 R11: ffffed10171065fc R12: ffffffff8f7ce870 [ 731.388983][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1b92a40 [ 731.388994][ C0] FS: 0000000000000000(0000) GS:ffff88812613b000(0000) knlGS:0000000000000000 [ 731.389006][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 731.389017][ C0] CR2: 000055e52efff000 CR3: 000000000dd38000 CR4: 00000000003526f0 [ 731.389031][ C0] Call Trace: [ 731.389037][ C0] [ 731.389043][ C0] default_idle+0x13/0x20 [ 731.389057][ C0] default_idle_call+0x73/0xb0 [ 731.389072][ C0] do_idle+0x1e7/0x510 [ 731.389091][ C0] ? __pfx_do_idle+0x10/0x10 [ 731.389113][ C0] cpu_startup_entry+0x44/0x60 [ 731.389128][ C0] rest_init+0x2de/0x300 [ 731.389144][ C0] start_kernel+0x3ae/0x410 [ 731.389161][ C0] x86_64_start_reservations+0x24/0x30 [ 731.389179][ C0] x86_64_start_kernel+0x143/0x1c0 [ 731.389197][ C0] common_startup_64+0x13e/0x147 [ 731.389223][ C0] [ 731.647393][T25657] bridge0: port 3(syz_tun) entered disabled state [ 731.666562][T25657] syz_tun (unregistering): left allmulticast mode [ 731.675862][T25657] syz_tun (unregistering): left promiscuous mode [ 731.684616][T25657] bridge0: port 3(syz_tun) entered disabled state [ 731.743527][ T68] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 731.782767][T12582] bond0: (slave wlan0): failed to get link speed/duplex [ 731.852705][ T68] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 731.894570][T12582] bond0: (slave wlan0): failed to get link speed/duplex [ 731.920928][ T68] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 731.975504][ T68] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 732.079219][ T68] bridge_slave_0: left allmulticast mode [ 732.085579][ T68] bridge_slave_0: left promiscuous mode [ 732.091264][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 732.240167][ T68] team0: Port device geneve0 removed [ 732.425349][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 732.436887][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 732.446401][ T68] bond0 (unregistering): Released all slaves [ 734.086686][ T68] hsr_slave_0: left promiscuous mode [ 734.093623][ T68] hsr_slave_1: left promiscuous mode [ 734.099543][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 734.112303][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 734.420584][ T68] team0 (unregistering): Port device team_slave_1 removed [ 734.464752][ T68] team0 (unregistering): Port device team_slave_0 removed [ 735.327257][ T68] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 735.361896][T12575] net_ratelimit: 20 callbacks suppressed [ 735.361916][T12575] bond0: (slave wlan0): failed to get link speed/duplex [ 735.389293][ T68] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 735.459930][ T68] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 735.481981][T17898] bond0: (slave wlan0): failed to get link speed/duplex [ 735.538697][ T68] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 735.592050][T12575] bond0: (slave wlan0): failed to get link speed/duplex [ 735.665859][ T68] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 735.679446][ T68] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 735.690183][ T68] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 735.722003][T12575] bond0: (slave wlan0): failed to get link speed/duplex [ 735.759463][ T68] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 735.770261][ T68] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 735.781248][ T68] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 735.831993][T17898] bond0: (slave wlan0): failed to get link speed/duplex [ 735.851574][ T68] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 735.863049][ T68] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 735.873655][ T68] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 735.938541][ T68] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 735.949054][ T68] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 735.959889][ T68] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 736.002322][ T13] bond0: (slave wlan0): failed to get link speed/duplex [ 736.075008][ T68] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 736.112319][ T13] bond0: (slave wlan0): failed to get link speed/duplex [ 736.150213][ T68] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 736.214094][ T68] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 736.242035][ T1118] bond0: (slave wlan0): failed to get link speed/duplex [ 736.296672][ T68] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 736.369521][ T68] bridge_slave_1: left allmulticast mode [ 736.375913][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 736.385914][ T68] bridge_slave_0: left allmulticast mode [ 736.391553][ T68] bridge_slave_0: left promiscuous mode [ 736.397415][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 736.408454][ T68] dummy0: left allmulticast mode [ 736.415209][ T68] bridge0: port 3(dummy0) entered disabled state [ 736.425761][ T68] bridge_slave_0: left allmulticast mode [ 736.431391][ T68] bridge_slave_0: left promiscuous mode [ 736.437204][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 736.449715][ T68] bridge_slave_1: left allmulticast mode [ 736.456580][ T68] bridge_slave_1: left promiscuous mode [ 736.463065][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 736.471557][ T68] bridge_slave_0: left allmulticast mode [ 736.477481][ T68] bridge_slave_0: left promiscuous mode [ 736.483589][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 736.971223][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 736.985459][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 736.996356][ T68] bond0 (unregistering): Released all slaves [ 737.009126][ T68] bond1 (unregistering): Released all slaves [ 737.119201][ T68] bond2 (unregistering): (slave veth3): Releasing backup interface [ 737.129200][ T68] bond2 (unregistering): Released all slaves [ 737.305003][ T68] bond2 (unregistering): (slave geneve2): Releasing backup interface [ 737.481057][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 737.493127][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 737.504225][ T68] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 737.515107][ T68] bond0 (unregistering): Released all slaves [ 737.623123][ T68] bond1 (unregistering): (slave veth0_to_bond): Releasing active interface [ 737.633350][ T68] bond1 (unregistering): Released all slaves [ 737.645581][ T68] bond2 (unregistering): Released all slaves [ 738.030876][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 738.039827][ T68] bond_slave_0: left promiscuous mode [ 738.046888][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 738.056118][ T68] bond_slave_1: left promiscuous mode [ 738.064601][ T68] bond0 (unregistering): Released all slaves [ 738.179609][ T68] bond1 (unregistering): (slave veth3): Releasing active interface [ 738.189532][ T68] bond1 (unregistering): Released all slaves [ 738.298211][ T68] bond2 (unregistering): (slave veth5): Releasing active interface [ 738.307670][ T68] bond2 (unregistering): Released all slaves [ 738.332653][T12582] bond0: (slave wlan0): failed to get link speed/duplex [ 738.427271][ T68] 9: left promiscuous mode [ 738.443435][ T1118] bond0: (slave wlan0): failed to get link speed/duplex [ 738.486276][ T68] tipc: Left network mode [ 739.235926][ T68] hsr_slave_0: left promiscuous mode [ 739.245594][ T68] hsr_slave_1: left promiscuous mode [ 739.251466][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 739.259341][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 739.267241][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 739.274854][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 739.285334][ T68] hsr_slave_0: left promiscuous mode [ 739.293329][ T68] hsr_slave_1: left promiscuous mode [ 739.299179][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 739.306962][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 739.318701][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 739.326493][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 739.373337][ T68] veth1_macvtap: left promiscuous mode [ 739.378896][ T68] veth0_macvtap: left promiscuous mode [ 739.384617][ T68] veth1_vlan: left promiscuous mode [ 739.389874][ T68] veth0_vlan: left promiscuous mode [ 739.397017][ T68] veth0_macvtap: left promiscuous mode [ 739.403271][ T68] veth1_vlan: left promiscuous mode [ 739.409805][ T68] veth0_vlan: left promiscuous mode [ 739.828311][ T68] team0 (unregistering): Port device team_slave_1 removed [ 739.868293][ T68] team0 (unregistering): Port device team_slave_0 removed