last executing test programs: 5.387276699s ago: executing program 3 (id=3981): sendmsg$can_j1939(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0xee) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300030e0000002cbd7000fbdbdf2503000900480000001cdc0dca1d9f68846900000000000000030006000000000002004e20ac1414bb000000000000000000000000000000070c00000000030005000000000002004e20ac1e0101000000000000000001001400070000"], 0x70}, 0x1, 0x7}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r2, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x48) (async, rerun: 64) socket(0x8, 0x0, 0x8000) (async, rerun: 64) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r4 = socket$kcm(0x2, 0xa, 0x2) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003"], 0xfc}}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd0100000000001400000060"], 0xfdef) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r1, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={0xffffffffffffffff, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x401, 0x44000000, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffd, 0x2}, 0x50) 5.264867542s ago: executing program 3 (id=3983): pipe(&(0x7f0000000080)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0xf3a, 0x0) tee(r0, r4, 0x8f5, 0x100000000000000) r5 = socket$key(0xf, 0x3, 0x2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000a397d45d5eca7611758f2ca10b00000000000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r7}, 0x10) sendmsg$NFT_BATCH(r6, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000005580)=ANY=[@ANYBLOB="1400000010000114000000140a01030000000000000000070000081fffffeb000a010206bf2872fc296222c4b552072d386b680000000000000000030000090900010073797a300000000058000000160a030000000000000000000200000a2c0003800800014000000000180003801400ffffffffffffff7f00000000020900020073797a31000000000900010073797a30000000001400000011000100000000"], 0xb4}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) sendmsg$key(r5, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="020300021c000000000003a715cd0c001200080008040000d7884a389e967b9e894705b077c135fd1c4a37d5988b140936aefd5769368f40653727f7526af11d10fafc11b91ced9d4ae3916383fb98fc275e11f5bed4ec3469dd878bea99164e2f6bc329d7acd8a89b2b2917fdeb71d607edd3d677414d4e22f99e072d04ea919734bc15cbfbbf5004f18378a4cc482d747ef47e91ccbd3d6200000000000000030006000000000002000000ac141400000000000000000002000100000000000000060000000000030005000000000002"], 0xe0}, 0x1, 0x7}, 0x8800) write$cgroup_type(r4, &(0x7f0000000180), 0x9) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r4}, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) openat$cgroup_devices(r3, &(0x7f0000000140)='devices.deny\x00', 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_BT_SECURITY(r9, 0x112, 0x4, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f00000000c0), 0x4) ioctl$FS_IOC_MEASURE_VERITY(r8, 0xc0046686, &(0x7f0000000700)={0x0, 0x1000, "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"}) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) r11 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) bind$unix(0xffffffffffffffff, &(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e) ioctl$sock_inet6_SIOCSIFDSTADDR(r11, 0x8918, &(0x7f0000000080)={@mcast2, 0x4, r12}) setsockopt$inet_sctp6_SCTP_INITMSG(r10, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000400)={0x0, 0x10, &(0x7f0000000340)=[@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2a}}]}, &(0x7f0000000480)=0x10) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r10, 0x84, 0x74, 0x0, &(0x7f0000000040)) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r8, 0x6, 0x14, &(0x7f00000004c0)=0x1, 0x4) 3.18428528s ago: executing program 1 (id=4005): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket(0xa, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x2}, 0x94) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r4, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000000)={0x0, 0x3, 0x8, 0x40}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r6, &(0x7f00000003c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x4, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x51, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r8 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r8, 0x89e0, &(0x7f0000000180)={r6, r7}) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x89e2, &(0x7f0000001380)={0xffffffffffffffff}) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r9) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYBLOB], 0x2cc}, 0x1, 0x0, 0x0, 0x8804}, 0x41) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r3) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r10, @in6={{0xa, 0x3, 0x4, @mcast1}}}, 0x0) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x82, &(0x7f0000000740), 0x8) syz_emit_ethernet(0x6a, &(0x7f0000000040)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x1, 0x0, 0x0, 0x1, 0x0, @private=0xa014102, @local}, @redirect={0x3, 0x4, 0x0, @broadcast=0x1000000, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, {[@timestamp_prespec={0x44, 0x2c, 0xf, 0x3, 0xd, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x101}, {@rand_addr=0x64010101, 0x10000}, {@multicast1, 0xc}, {@private=0xa010102}, {@multicast1, 0x6}]}]}}}}}}}, 0x0) read(0xffffffffffffffff, &(0x7f0000000380)=""/46, 0xfffffeb4) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r9) sendmsg$NL80211_CMD_ADD_TX_TS(r9, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x38, r11, 0x300, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xb}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x1}, @NL80211_ATTR_ADMITTED_TIME={0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000000}, 0x8010) 2.752803618s ago: executing program 0 (id=4013): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0xf1, &(0x7f0000000240)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x0, 0xf1ffffff, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_HH_FLOWS_LIMIT={0x4}]}}]}, 0x38}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r3) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r3) sendmsg$NL802154_CMD_NEW_INTERFACE(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="01002cbd7000fddbdf2507000000080001000000005a"], 0x1c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000400)) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@delnexthop={0x40, 0x69, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [{0x8}, {0x8, 0x1, 0x2}, {0x8}, {0x8, 0x1, 0x1}, {0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x8044) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r6, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, 0x0, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x40000d0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) preadv(r8, 0x0, 0x0, 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$sock(r8, &(0x7f0000000800)={&(0x7f0000000480)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000700)="af39d68b2fe85bf18fe90ea1177f9a35cae4a4c7cb5f2133e3c0801100a97ba2afca5c1457de37040505647f611fcab8e801c71857ea208d3283dd1a5855ababe5d44dfd8dd42bef50c27ab54d243c40a154d749174a2ad1ed8f6b609055be5bcb1655cb8752c915a3c8e640545df86f6e0ee306f468a7d543b4c3f55e25962cddbc220beb823a314e04033975a3dcce61419dbe33debce41089df07e9eac1d324d71ffc6315f1a0ca2abd17dd13b0b744916c41925b1e78a7740eb1c2050a5bd5c8644309cf3aed9dfdd18980a1686a802a8ead", 0xd4}], 0x1, &(0x7f0000000540)=[@txtime={{0x18, 0x1, 0x3d, 0x7}}, @mark={{0x14, 0x1, 0x24, 0x40f}}, @timestamping={{0x14, 0x1, 0x25, 0x48}}, @txtime={{0x18, 0x1, 0x3d, 0xf032}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}], 0x78}, 0x4000080) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r10, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f00000006c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB, @ANYRES16=r7, @ANYBLOB="20002cbd7000fbdbdf254400000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900050000000a0000000400080108006b000600000014002380050013000100000006000200310000000a00180003030303030300000a0018000303030303030000"], 0x60}}, 0x4008000) sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)={0x20, r7, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void, @val={0xc, 0x99, {0x5, 0x9}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x8000) 2.584222848s ago: executing program 0 (id=4017): r0 = socket$kcm(0x11, 0x2, 0x300) recvmsg(r0, &(0x7f00000017c0)={0x0, 0x0, 0x0}, 0x20) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'syz_tun\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x6, 0x0, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) socket(0x40000000015, 0x5, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x1c, 0x0, &(0x7f00000001c0)="b9fe268cb89e14f088a847ef6e2e158de8ec087d5019fa509e1892f2", 0x0, 0x100, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) (fail_nth: 49) 2.517325715s ago: executing program 2 (id=4020): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'macsec0\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote, r2}, 0x14) socket(0x10, 0x3, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) close(0x4) 2.084071577s ago: executing program 1 (id=4022): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040), 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x44, 0x0, 0x9, 0x201, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x3}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x14}}, @NFCTH_TUPLE={0x10, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0xc000) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x20, 0x6044}, 0x6) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, &(0x7f0000000000)=0x2, 0x4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r4, 0x8b2a, &(0x7f0000000040)) socket$unix(0x1, 0x1, 0x0) getsockopt(0xffffffffffffffff, 0x0, 0x6, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x4000) socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r5}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) r6 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r6, &(0x7f0000000480), 0x2e9, 0x0) connect$inet6(r6, &(0x7f0000000180)={0xa, 0x4e20, 0xffffffff, @empty, 0x5}, 0x1c) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x34, 0x0, 0x0) unshare(0x62040200) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) 2.070441927s ago: executing program 3 (id=4023): socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000003000000040122000b00000001"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x2}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 2.01610842s ago: executing program 2 (id=4025): r0 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80800) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f0000000040)) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) (async, rerun: 64) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) (rerun: 64) connect$bt_rfcomm(r4, &(0x7f00000000c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xd}, 0xa) socket$inet6_udp(0xa, 0x2, 0x0) (async) vmsplice(r0, &(0x7f0000000280)=[{&(0x7f0000000100)="9081c2ad567b9f2749ce7b5b5ded4c410dd39ba89508dcc934e7fa432f78934e396ebdbc32181e5ad8218698f6bd7347baa62d68e7e6c4d3b618", 0x3a}, {&(0x7f0000000140)="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", 0xfb}, {&(0x7f0000000240)="b57330798a7725f94bba2d0e8c8f3d8399098a9dc39702ad7e01e841535a63b4e71a5054c0ec486c0c1e77ee1e7440bc4d2c", 0x32}], 0x3, 0x8) (async, rerun: 64) r5 = socket$inet_smc(0x2b, 0x1, 0x0) (rerun: 64) setsockopt$IP_VS_SO_SET_FLUSH(r5, 0x0, 0x485, 0x0, 0x0) (async) connect$bt_rfcomm(r4, &(0x7f00000002c0)={0x1f, @none, 0x2}, 0xa) (async) sendmsg$NFT_MSG_GETCHAIN(r3, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, 0x4, 0xa, 0x201, 0x0, 0x0, {0x6, 0x0, 0x8}, [@NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x9}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) (async) ioctl$SIOCGETLINKNAME(0xffffffffffffffff, 0x89e0, &(0x7f0000000400)={0x2}) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x13, 0x5, 0x321e, 0xfffffffd, 0x30320, 0xffffffffffffffff, 0x7fffffff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5}, 0x50) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000007c0)={'vcan0\x00', 0x0}) (async) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000008c0)={&(0x7f0000000800)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x60, 0x60, 0x8, [@enum64={0x10, 0x7, 0x0, 0x13, 0x0, 0xc, [{0xa, 0x10000, 0x3}, {0xa, 0x4, 0x9}, {0x4, 0x6, 0x80000001}, {0x9, 0x8, 0x7}, {0x2, 0x200, 0x1}, {0x4, 0x1, 0x1000}, {0x1, 0x4, 0x1}]}]}, {0x0, [0x30, 0x2e, 0x2e, 0x2e, 0x0, 0x5f]}}, &(0x7f0000000880)=""/60, 0x80, 0x3c, 0x0, 0x2}, 0x28) r10 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000980)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) (async) r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x2}, 0x50) r12 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000a40)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xc, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x3}, 0x50) (async, rerun: 32) r13 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000ac0)={0xffffffffffffffff, 0x9, 0x8}, 0xc) (async, rerun: 32) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b80)={{0x1, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000b40)}, 0x20) (async) r15 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000bc0)={0x0, 0x1, 0x18}, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c40)={0x6, 0x27, &(0x7f0000000540)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3d, 0x0, 0x0, 0x0, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe6b}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}, @call={0x85, 0x0, 0x0, 0x7c}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}}, @generic={0x9, 0x4, 0x7, 0x1, 0x800}, @cb_func={0x18, 0xd, 0x4, 0x0, 0xfffffffffffffffe}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffff9}, @ldst={0x2, 0x0, 0x0, 0x3, 0x9, 0xffffffffffffffe0, 0xffffffffffffffff}], &(0x7f0000000680)='GPL\x00', 0x10, 0xf0, &(0x7f00000006c0)=""/240, 0x41000, 0x38, '\x00', r8, 0x25, r9, 0x8, &(0x7f0000000900)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000940)={0x3, 0xc, 0xbd31, 0x1}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000c00)=[r10, r11, r12, r13, r14, r15], 0x0, 0x10, 0x3ff}, 0x94) (async, rerun: 64) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000d00)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x3, '\x00', r8, r9, 0x0, 0x0, 0x2}, 0x50) (rerun: 64) writev(r15, &(0x7f0000000e80)=[{&(0x7f0000000d80)="47c30688ca97d75b12433cd340f4fab0aacdb201e6c4e3a5836dc0879118b1a257712a92042f564ef1d15ff57ab02bae43bc11aefd70a361f41c63c6be25efd6745427271ab6d2fbe5af5325f11cb0e8df1688bac802c667bbd7b0ccc887afaf61c003c3fb35bd7197aa6dfab176e04ff67c670464dfd2033773095f84ef61b78a06781cacd9d70087a71fff3e05edec55c44c765f7279ab2c5eafc6c64cc8dce47cbf54974a0210bf188b97232b7f7a664f1e6db64cb4a551c2e922960a4e23702eae27", 0xc4}], 0x1) (async) getsockopt$inet_sctp6_SCTP_CONTEXT(r10, 0x84, 0x11, &(0x7f0000000ec0)={0x0, 0x1}, &(0x7f0000000f00)=0x8) setsockopt$inet_sctp_SCTP_AUTH_KEY(r10, 0x84, 0x17, &(0x7f0000000f40)={r16, 0x1, 0x4c, "c8a445b5132d08ba27ddcb7f1cfa5fc0b5f037da3d07a1ab6dbc0c5cdc24b22bd9a03ad4301f9253fe1efe45dd1eb7fb28bef6350d8479510c1e4d92b754174bda9b03432e4d9e631e266124"}, 0x54) (async, rerun: 64) sendmsg$NL80211_CMD_FLUSH_PMKSA(r1, &(0x7f0000001080)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001040)={&(0x7f0000001000)={0x20, r2, 0x100, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8001, 0x3b}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20008810}, 0x8000) (rerun: 64) 1.795498942s ago: executing program 3 (id=4026): syz_init_net_socket$netrom(0x6, 0x5, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) recvmmsg(r0, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0) syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0x300, @empty}, {0x0, 0x17c1, 0x9c, 0x0, @wg=@initiation={0x1, 0x1, "717c72635f3b384bdfc23b7cdbd1617d39980ae0343d91a3756391fe0a9a66d4", "0838dbc96ba13dd069ce9c1099890915a06c22e110516ac8db72cf46be8a2cd2288112c641ae96fd6321aabb617c7209", "7b8d57a7c7bce1276d915e2d6d05e53c86a47b318a3ac04c5dd38853", {"7719eecd7b1f5591c287cd8bdc5cb100", "705e0032bb769f2581b5b6ae81bd7bad"}}}}}}}, 0x0) unshare(0x20000400) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000004780)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da97e22f4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ad0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bff3b89c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c2ed01faa7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497dad64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6fba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd2310801570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb414c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a000000000000000000000000000000000000000000000000000000a0cc2b89ce1525748ce167cbabb881f060599a6a59f645edca1d5c24b2f6b8c997a8f3e1b7679984a566d98d4d31198ee4c5ea7be0d99cf89bba4a6fd0bec12e7792bec3c5038e13b1982f80cdecd07f8908a983a7c9fb81c2ba7f7e87c991f30e50d1b3bbe4cf2a2f5d4571b6568ada51bc121c9139d2a8e0638c84066b1759081802"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) close(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000004830000000000000fa40000007010000080020007500feff0000820095"], &(0x7f0000000100)='GPL\x00', 0x3, 0xfa, &(0x7f00000007c0)=""/250, 0x0, 0x8}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r5, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20) sendmsg$inet(r2, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd8073a46b08b94214d816f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb4147000001000000008f2b9000f22425e4097ed62cbc891061017cfa6f6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe68db8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3542646bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r7 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_int(r7, 0x29, 0x1000000000021, 0x0, 0x0) sendmmsg(r7, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x4, 0x1}, 0x80, 0x0}}], 0x1, 0x0) getpid() sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000000200)={0x18, 0x2e, 0x200, 0x0, 0x0, "", [@typed={0x8, 0x14e, 0x0, 0x0, @u32=0xc400}]}, 0x18}, {0x0}], 0x2, 0x0, 0x0, 0x4000}, 0x20000d4) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r8, &(0x7f0000000800)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000680)={0x0, 0x44}, 0x1, 0x0, 0x0, 0xc080}, 0xe821651e0a1b45fc) r9 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) sendmmsg$sock(r9, &(0x7f0000003d00)=[{{&(0x7f00000001c0)=@hci={0x1f, 0x1, 0x1}, 0x80, &(0x7f0000000240)=[{&(0x7f0000001780)="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", 0x1000}, {&(0x7f0000001440)="3bd0ddec82ebf2684aee6e25d630978ab490dad5e148773702583612029b8c496547fe26f0fbd9827e43e50993e2d7a37f5a1da0f0edca32ae4a7b2af0a218954df113655978c01baa1df30e2e2f259a5dd8446913b8df04e7d65ea18f013fcd01b5a81cd399822832720df7f772ac883bdcf26f0dcfc694706a282a51879108067f7d9c27b926e33d92933daa161f80c22b75d3a76692270b099312349e10f3ccbf0bff2795cf520a16a8f5f773064f0473174ae00ec307225b913ecd3b8a28bde317c04f7d2bf0a22fa5efaf09930d83eb340f0e5feaa4e7cd170e68defb63ae", 0xe1}, {&(0x7f0000001540)="e9afd2d256a4f9d8558f7772905d1c7ae7c6f8a0c2e772f3b8f382c6a1c16e9e244f7d4f6daa3fbbc7f70fede7bb26a395350b0b4d0625122f816e6c7080732a3aada3df1b63b17bf396a8cc9057a7f8a44b3ae53e01bb18e5880be1238587ac83593b80833675939fb75602a14bd14aa11dac2df8b37e0122ff61215e6d60a16fef2bb0c3f63cdcdb33a9cf4c7b7241aef0e9ae96025c32a6244659573727b4c4b72429a86c5c", 0xa7}], 0x3, &(0x7f0000000380)=[@mark={{0x14}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}, @txtime={{0x18, 0x1, 0x3d, 0xda8}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}], 0x60}}, {{&(0x7f0000001600)=@sco={0x1f, @none}, 0x80, &(0x7f0000003a40)=[{&(0x7f0000000300)="69ec500f40ae285b39df23745e0c5e4acd09c1324197ed0e8f8f1ffa0ca56613cf5075243258c8ecfa30158b73e63e8853a2133c04ef83dbc610097bd69f1a", 0x3f}, {&(0x7f0000002780)="c00b70aea58cd7df55e9a3232436fc78ddabc34c980b7fe2caae43d34a2a9346455dd14e4c8d27d2d0d906907efb6e34898955f33b848be6a81122bfe210fd89ac60aac39bbdb8da1f9774f548cffffcbd923f734f98a8496942164470ee60bd8fdba39dc174e00f679891d37f3853359486f61b66d95432b98a16b1394242e9e6272e09fa083f77687c0f164aa2633c887267f17b0cf0157ec8c5b374d817a28fead27324964d7a2c935db504577161eea6ac09570a462a3ca04bedfc101d34134662868bb0d0eb53db8cf681b313", 0xcf}, {&(0x7f0000001680)="41b3bc2053ac8cacaf3affcd579ccf56a3abbf175f162127018b23033a89775862c4eb06971050954e9e5c112fb9343a470d8295106420fd4896ab1a0a359e131687569b834be5a5ee163a6f160a3be5cd1eded6d9ba6cf26c26ea0a791071360000f33b3d3065dd5cf2c58d09ce1e2d70220b4aec69e20b", 0x78}, {&(0x7f0000002880)="89faad5b7fb64ebc731347519127d112c3b6c6f45e5427e543509bcb2fe3d8b20e13b03ade484edc7c3bd71f547f4df922cd88419fd3fd417908d5a126fa9625637df08dc64292ba76fbd51f340d66be4247ae766db169ad94f178215feb4b3b215b71dd106d09e9b73604d12f35a9864ff98e0e1b9f6087582c468c5efeb94e9d800c60c40958c3678b039522270869c36203eb1d0e4410eec777f2e503e662b3920fc1f8fe0f08972c5d26e518f3a30c32c68b63bc5edde71d9dff654df5a8d8457135e467564e6ca91def62d6dfd614065a45dfc23ee28f7ba6bf44b14c600778d73d7d7cbb2c6e66f8b57998d339ba5bee35a38fc9edee6c52bcd9c39b7a192f1d0a221df3fed25af6e5b9abdab8b559bbb8cc2d5cdb94526931f4b44c070f3b9472b8abed3264251b4a0f032d024554590e0b2d94dc044e0bb126e5fd496756561296930e81cd60b1e7c3e5dca723ed29503889dd5073501a6c942a5536be3f0540b6e1000155de5bba38a35b3a9cdeeb4c80ad2e7dc9c79d9d6202b4e1da848d1404370639dc8be6d0a21037fc918766338ecd046002dff47fa43972abccffea76530f8a500004453fb89977bf795622f9936c22a6551159f1849a1d4b146d206d386c136823125a3e4b534906c50c59b8976bf2071e58fcf87c595892e91776d386937e5f353b08526e7fb019b8a4482ee0283cd38c848820b604bcd67444d24798687bcf84ffbce70b781faca9d3645752309f890e367bf32d5056f4c2ebf7cece5483f75edf380e1f0aeebb1e1976793fd68ac40c1f920db635ee377c56c68f0e0c21d01935b4e90e19ab8b5336748482b99f596e3743bca89afa66a1d049a80787455163bba1ac94653d19ed84336395dec64351f1a98a9e10566a4d4c19c995ce8aaab9a1e7f21cb0fcd7af63c52de802798042b22c0ccb38359b7982142d7621887a5cd7ff288d0bf7b4f27b765827bcbd1f427926a52b03d5991aea3332679c55dadc5ae388262e206c45a27b3c0c98f46c946a9eb93c04a2e686d16d1dc1f02e5a9221ed1f2085c21bf4ed0293e1cba36d26ad2eed5655e164acc765402cef31d300e9ab6d39aaa7c8083bcf3503f64562ed22fe22340020f8f21b0849bfa97e0c322c26ddc90c266bfb1d30d7910d371373049f7dbf6c6bf634f557f3f6fb03f82a04d50ba6896fa8936a8b691fd7f90f3c6bf18daca993c4ba704097a175b771b3641dfc688352afc05c8915d56362daa4cded9660e06d4c5481f6ec0f82102b696c3cb98ecb139cbea65a25f72aaa8ef9c5520ed81af9642d06755cc0f78346e0f39af0f2a8e05888a2d24db65471fbcb77449353e341b6f3f7bb2d3928bd13fd9d335e49863d71780537b4e0961a1fa27af7468bdb10fbf1d2b7807412d2d0f77a3b41c97401346dec05fcebc651313987a1925992308f1ade6356a36c1ba4726cede687cd145abacfc1f9ad4f9686e559db300757f6bb3529a807a2175f697547604a767e06e5044bd3a0b4b1b09d642f25a337219f108271f0b76a106d6d4e7b570efc7086239a7c23371c32cf8f7cb3258c0f6260e4ec65b224d29ba77e0ff953fc05cc563d971fc793c741fec6a72e574b4cbe77159bb72b586a595bc1b9dddb0ca14e9c8b66cafb36c399461d4bfb7af2ee7c038ff28536683118fbc4c4adaf602784a64c9aa18bf7155f50f27e23b0428aec0e8129d14bdad5fca5d4b76d23d9f990fc2e3a275b500bff6c0e05a728d26fa0f08bbd91cfcd836a40d4c08a6d13f688b2c05eb7ff9f82ed93148223870679ff107ab6821a7b1d7341ae0939af2e9d5147230a91368b12608c5e1d981218ea5c672e45ee012896032a72e0c8e1025e28c43b5eb166b4a09683f3d313019d4f18648cb771699590e30c42be524f4528f93c94fd8505d2820e7d941a7d69ad63ddd432ea00bd50274d05cf7928205e37b62b691fbc9bb51a17fd94a00e1b88fd26c44858a068873c454d31f2ce0c2157732a7333cb8ebd65a16ccec6595a9b790c45d181bdbef132c69271212006217c5e2497fa7eef56402b27372fb53a5b0aba4861bddb392d6dcdd003579b2018c5dd9ccedeb2e7203e37d64aa2a40384ba67dc50b031136bd31c2ad57b4160b69e823caf3118b7c6f72ef93a9a1399452ef0ede0c6d313c096063473081c1479ae5958981d89d0d0d08e6f0c254dcd0211de073b1bc5be70b3cf7389fc51f75c9f28cddf347ca2e1beb122cdecd70e6ddd6f24b50d1532dac772677b6e0e54ca12504dd279bd6d545be21445ca60e4a8d85989567360dba83f9eb2f0000863f07b78388f01acf96aa0bdd4ea28545828b62d726093c7c43ecd7a8073dc01589106040bc9942c401d38ece2b16117714342f783ace42383f9cdd30ebb4a1d67560bff2fdf4da5f4db2401560e2447ac1584dc4311fcaca2c1f1e7a9363083b2402860f8e080856e006e6c937831aee66cd73df23786090b51799af990287db1a4d257f3421bac68d6041a3975d0f6344f32a1122e346881e9def2f2bde74974c0c9d43d888151cb291fe7f8b297b95f9e65bddb816a6863a5cd756326794927c7920d0d42627616ca6f20de7831242366fc8fb38b71034a264cff85e35859eb05f6902f826c0db5b4c85a87e99ff514ceca22cb035593398bc89d901d7f798e81fa1f7c93e8aaeced09cbfdd08813204d4de2a67d7d03d4906dcb2fb4b30a57b6517a68d012f97c64d4506e5486dd9ea7aa6b91c33bfec2d100442fa104b05c9a3d7e8b8032e9f605074b672938b3cbcb34e0311ae00af61c2829d0d03645a6e3ccaf4562ce9862bdd8ef7c49454c0bb066eca95181e80cab45bb9e85473ed03ee001b0260315c770f3e569bfe982192ab1172874ffd99e9a9d968b5b96d717b0ad57380cac23bec114062a227322a57f7b1235fa63bb7e38f6f0ea4f4db7d1247b028cb9345189a2dda3c005cb7dcde12e6f5ebd7376e1eae79af65aba91dbc1e9383fe5a328ca4254463920f7f19f1af5e370f55580cd4cbbfdce9006b36fc32822bae88c2564091937a9b56b4c7ca060015b9859a61a9fbd7c55f922806fc0751bc1dbfa20e5924190991c8cc2773426752f75e644d444d73bcbdc62dba8b0f8f73d0a80a9521eb3158af901e85935f4c6d5ffe10d9235a4ba3b67319ba347436c7033c6d97596d9fd14f8258e6d5c113f10d82a92d62f375962594b9dde12b472b63e7dc2054497286dff9cb981123563ad954a860e944401a1b3dd51d92529e1f7751af4b4c29bf4a5b0a343ed9c8cf06935b94ee4afa9be3d5ba52662cddf74f3b67fd2bbeda589691cfe3424a8616e3a13c33fa3023cd634e8837c22a03821b1796adc4de6042010c750eee10e63fb67744d2411a835460420696cb269ef336bf24720a9ed33b4b065496551d58104a42551f0ca317f7c5e23ff93130fae6d44be0f707189c09cf5861e46e76b5029a633df44463292c774f17678c76dc555f79c839cf99d9f5f256ad277a972d3c3fb929eb9341abb44330a738f6a53547159bea9cdfb9b01a18ac47b52e9f029eae9ed379b6ae36209b2c8027c45bed6791022d2a7f7ab80a5ade837e945887d4535f13c40930689c7c971aff953be91c1e4df7f408c16e0ab2ad966a81c0d065bfbd7801011ddec6bc4dcf54927ba4bd25337cd1c0cbd9e250882a8b1d6c9ba89c5749e8b7d00a8430fb05ace7204a912943d288bb096e8a5951d6b9ca7d3b86096b1530876eb7d907ca69e689e8f659c0813970ce626ae5f6978420feb2e7c242eceadc6599fdd1e04fd1c1b8accd70dbdd976da93a7d53f8229a0cc74427e0c2bb834f05a5824b6f6af18f907d0a48f0e4a5ba9869a78cbe76be31692bd51364b4d1c50e9b49a6df02b1d423bd2948eac87b803c24d5264fa9f57ef30ca55b009b365c36db818569aad45ea125f0cebc5e40d1c2eab73fb263f8a7ab16c3406eff767a6ebcee64b820fc4df9a3d7fbb50b69b8f5e471c14c0ca5a082e488467c0c5ed117630d01c135c750aef5f79768fc2b1f5a7eadb0164e96b62a538f95bab7ec9a44b4316007f531f86c38b3b71c74337a4d015291642ac6adce1a76757a7dec43720f4988958726f44c2d0b4afd6b0a608ca12df23401fea8b042b7fcfd2c2627cbc8fe5ecbb0e9fa5dccaa270daada168b3fe29473a023140c3eb3a122081191addcf7e092805a6c36dad643086969482d75e79347d479ef9076bcc0b035c6f6d51bbe17dec51d7968082f0bc28936dc53e1d684ad239916f17bcd639b3fd78823541cab188f9326affde38996e1823d64d2d550eddb8f32c566288b21ea428534fc072e7ec9db751e876c12ba2729360448a2e0cb655876d516d007a4eef70cfaa198c4f1e335ac55c83b9de256a93e8ad77d25be18eae5efa19496363c65e1bd909f48dc96766b1217bb1097e7d25c14fcbe8c3e9b63c640e41d071620483caab5adcf288f1a5be9a72694b37261e504e00a0c363bf1b8b52c82cb08757c0b7e5b67ea4ff3568114550fdd306a0de6e3a5ab5ed6e63c0756e975468e479391f695c4138f895d1a4446dfecf4f490ccab0c675132794a24d96250efae1d99e0a6e55eef5db1bb03c886d08d51f9b695694001b4af52f60c2c4fca61e8bd659c7651c3b6c48ef541b3ceec994122ad70b2a0a814dda28c6a7ad7deb6451a2097d2e71e44cbef5b2fbfdfbf197fd7a4dafeec88c5a53d0b34a0f39ac0d78bec37d14def71e38d497c240e6fbac0206f2321dfc7e86ee75238a8fb133c2918a2d00a1c5cd6c082679c0bd07050e4771e38cc74c041bcc53e1171d5582a100e524118f36176bd3ad95d7a18efd2128fe93e112c76e9dbde2fad4061fda2a11243895801e1db31fd8c90aeacc3fbb73394d68a2c1b7e28e6a980e4a3faba951d04429b2505b35408ee98401aa081bab1b1e0a34937383e46271b34cacc5a5ad13812cbf4850ce8696d8651e4bd4e4ab88e1681c4d782f15c5a7b568083cda97821825e679ecd65994d43d8d676c81cc2c3f0dc58e63756f7a3018077601ea152b44b5dba813aa5381ec335511ad71fae525e0dca8a561945cefb966ca07f5f36de89f6bcf4579ab2b6633ccfff6d5a0e683029a7d29ca58ca44ae7e1620afa97b892874e8ad067f21e02269c84ba1dab4617a2ef6d4aa25fc53cf2246ba24b370c5324d3934f1b884a5ca8ddf8124139445689bbe42cec05a1be745a2094c1098cd3dfb9e168dd018a75658bffeff94a40de50c527afe41cd36c424342fa281d1552671974e8149f41cba8afb492a26779193f59b1344eb7df3f7c5d11c6b1f2ee6c9641186fb758a200c26b5f8fdcccc63cf2d5f0cb38da1212b2d4afc5c3c6c3fc71f9af277647ed6ed0566dc437a75f1527f9b665b3a190a43d4e2cf51fb064ca96907c65b0b411e75860545503322f5f57c50bc3a3ef5cf8358630c8f4a99f09335ca9d807d449978276f9f26915cc37c9f871a3ba80bee2b30731e81abf9ade91ed5e971baace5809d48ab32d98187b432f635882f46c98ea0542d9c44e3328fec124292a0d7f750cb14ddb79e0120b3fad99488c16cceb4043aecfae2d7115a4693dc7ba3571c5bce414f0c5303cbeb3a79250503f4a337078b81908ac2a5aeabdabf8325ba8ef4cb29437714645d1c7275b21ad42b0c39100c9d4a0f4a8821ca0d06e6f281559586c3f24469b310f990d3ae44de6f5e262c00e009220461e4ee4a122b8b56ac0cf76c066f9589d4e188d77d81e2fd8c202db10f2d13be", 0x1000}, {&(0x7f0000003880)="dbd1a7e9239d0beddcfd7b6d1910813cdc8babbd7cf46a224babf364b54fb53ecc1f42d1175bedce2d48b7182b010de1aefab34524fa0180644936a8a981a9f58c5e73d07d487b939df5ebaeea077377814b59ecebc5edf69e32c05e1d37625c46a0880a1b791e9f4ec628826ac40e379173d6ef8f915e1ad20ad02586a08c8340523fb3289f9bb4fa0f8ce166d9abd7705e3445e7059b72eef0f887dc2b3fd3e780", 0xa2}, {&(0x7f0000003940)="160c00532d5c44eb3dd3a57f85e57f798ab13a854df6e8da97aa56a7676a9e7af69a189130b0de55b324df0ddcc6410d699a378f0f03dc37f00b98a7617f5c86c6b6e52a0074ad2fe96d37684953f9c21ad040260f8740eaaf4578d658c776feb7161c76db35a4a552953eb61fbc25dc1b63dd0a481da954e37492c2d80035dd891a201a4878bfc8847d144a7face3f2428838ca89842357f321a8d4265e311c12ff675da7c3ac99fc01455ce8988cdbc01d5d63eef0f1fa93717a3edd569a0a604bf33cef66e35413b3b31881df7ed99ed181acde10c172fdfad9d512f01b8808b9cdba", 0xe4}], 0x6}}, {{&(0x7f0000003ac0)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @null]}, 0x80, &(0x7f0000003c00)=[{&(0x7f0000003b40)="e31d21c97a0f915e360970afebf072b7612def7240777b29e5e71125bd76ca55c6173decf8088e9184ea2f28d66d2efad4048b1388f0b0fab7bc887f1d5e6938dc869b6306a7222a85bdad6474ffbece4267bb8a3753de9447f7ec6f0e87b6e5fa839e24ec9e0721bb2bf12df28238c723b9c0eb802dc61ca2449d113d7a71a127d04eb1d0ba4d73484106b6709404b51b00236a7c20ad72c826750b028ffe39f53e3a", 0xa3}, {&(0x7f0000001700)}], 0x2, &(0x7f0000003c40)=[@timestamping={{0x14, 0x1, 0x25, 0xf094}}, @mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0xfffffffffffffffc}}, @mark={{0x14, 0x1, 0x24, 0x2200}}, @timestamping={{0x14, 0x1, 0x25, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}], 0xa8}}], 0x3, 0x20000040) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, 0x3, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x8040) 1.673814041s ago: executing program 0 (id=4028): syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00'}) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r2, &(0x7f0000000100)={{0x3, @default, 0x1}, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @default, @null]}, 0x48) setsockopt$ax25_SO_BINDTODEVICE(r2, 0x101, 0x19, &(0x7f0000000040)=@rose={'rose', 0x0}, 0x10) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) socket$kcm(0xa, 0x922000000003, 0x11) r3 = socket$kcm(0x10, 0x2, 0x4) socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r3, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000c00)}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="090000000800000004000000094000000a000000", @ANYRES32, @ANYBLOB='\x00'/13, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00?'], 0x48) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)=@o_path={&(0x7f0000000300)='./file0\x00', 0x0, 0x4000, r0}, 0x18) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f0000000080), 0x4) sendmmsg$inet(r4, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r5) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000080)="5800000014001923fc834b80040d8c560a067f020000000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd001a0010000100080c10000000000000000000", 0x58}], 0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x18, 0x24, 0x301, 0x0, 0x80, {0x11}, [@nested={0x4, 0x12f}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000200)) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r6) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="796100000000000000007e00000033000300", @ANYRES32=0x0, @ANYBLOB="a739dfe54ad99ffa18c27526b51001fb4f778791377c"], 0x1c}}, 0x4000054) 1.650531493s ago: executing program 2 (id=4029): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @loopback}}, 0x1e) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000015c0), 0x2300, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000340)=0x1) ppoll(0x0, 0x0, &(0x7f0000000140)={0x0, 0x3938700}, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000001040)={0x0, @in={{0x2, 0x4e21, @rand_addr=0x64010102}}, 0x4, 0x8}, &(0x7f0000001100)=0x90) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x10, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x7, &(0x7f00000000c0), 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x541b, &(0x7f0000000140)={'wg2\x00', @local}) 1.512356601s ago: executing program 4 (id=4030): r0 = socket(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000200)="7800000018002507b9409b14ffff00000200be040205e8056402040c5c0009003f0020030a0000000d0085a168d0bf46d32345653600648d27000b000a00000049935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000402160008200a00000000e000e218bcddf66ed538f252325000", 0x78, 0x2400c090, 0x0, 0x0) 1.435470795s ago: executing program 4 (id=4031): getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x3f}}, 0x40, 0x81, 0x10001, 0x16, 0xc0, 0x9, 0x9}, &(0x7f0000000080)=0x9c) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000000)={r0, 0x7}, &(0x7f0000000040)=0x8) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_opts(r1, 0x0, 0xf, &(0x7f0000000000)='\x00', 0x1) r2 = socket$igmp(0x2, 0x3, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000040)=@assoc_value, &(0x7f0000000000)=0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[], 0x1c}}, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f00000001c0)={0x3, &(0x7f0000000040)=[{0x20, 0x8, 0x0, 0xfffff00c}, {0xb1, 0x0, 0x0, 0x6ec1}, {0x6, 0x0, 0x7, 0x9}]}, 0x10) sendmmsg$unix(r4, &(0x7f00000000c0), 0x3f, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xa8}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0xfffffff5, 0x0, 0x2000094}, 0x4000800) close(r3) setsockopt$MRT_FLUSH(r2, 0x0, 0xd4, &(0x7f0000000100)=0x1, 0x4) r6 = socket(0x1e, 0x2, 0x80) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000380)={'ip6tnl0\x00', 0x0}) 1.377691701s ago: executing program 2 (id=4032): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000001540)=ANY=[@ANYBLOB="1803000040000000000000009c0000df18110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b5020000020100008500000083000000bc0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x5, 0x1003, &(0x7f0000001e40)=""/4099, 0x41100, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000400)=@o_path={&(0x7f0000000180)='./file0\x00', 0x0, 0x18, r4}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x1c, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x807}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @alu={0x7, 0x0, 0x77525885eae57e85, 0xa, 0x4, 0x2, 0xfffffffffffffff0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x5}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x101}, @cb_func={0x18, 0xe, 0x4, 0x0, 0x7}]}, &(0x7f0000000100)='syzkaller\x00', 0x4ff08da5, 0x0, 0x0, 0x41100, 0x10, '\x00', r1, 0x25, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r3, r3, 0x1, 0xffffffffffffffff, r5, r2, r3, r3], 0x0, 0x10, 0x2}, 0x94) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) setsockopt$inet6_IPV6_RTHDR(r4, 0x29, 0x39, &(0x7f00000000c0)=ANY=[@ANYBLOB="84020201"], 0x18) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={r6, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000008c0)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20305}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_VALIDATION={0x5, 0xd, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00', 0x4000}) ioctl$FIBMAP(r8, 0x1, &(0x7f0000000040)=0x4e8) ioctl$TUNSETSNDBUF(r8, 0x400454d4, 0x0) 1.227942256s ago: executing program 2 (id=4033): socket(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x3c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000040}, 0x8889c) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0xf0b, 0x3, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xffe0}, {0xffff, 0xffff}, {0xfff7}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x55, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x1000, 0xb, 0x4}}}}]}, 0x40}}, 0x0) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fbdbdf25270000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x44, 0x0, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x40084) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x5c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0, 0x0, 0xfff}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e3000000000000000000000000800030000000000140006"], 0x58}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r11, 0x84, 0x5, 0xfffffffffffffffe, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x6, 0x4558, 0x7f, 0x1, 0x1}, 0x50) socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x22, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x1}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x3, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x5}}}}]}]}, 0x70}}, 0x4) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000100000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r12, @ANYBLOB="08000100", @ANYRES32=r13], 0x90}}, 0x0) 1.2270448s ago: executing program 1 (id=4034): r0 = socket$pptp(0x18, 0x1, 0x2) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000000)={'veth0_to_batadv\x00', {0x2, 0x4e24, @empty}}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f0000000080)=0x1) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x1) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f00000000c0)=""/114) (async) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r1, 0xf50f, 0x0) r2 = accept4$ax25(0xffffffffffffffff, &(0x7f0000000140)={{0x3, @null}, [@default, @null, @bcast, @remote, @null, @bcast, @bcast, @default]}, &(0x7f00000001c0)=0x48, 0x0) getpeername$ax25(r2, &(0x7f0000000200)={{0x3, @null}, [@remote, @rose, @netrom, @remote, @default, @netrom, @null, @bcast]}, &(0x7f0000000280)=0x48) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r3, 0x810c9365, &(0x7f00000002c0)={{0x1, 0x7}, 0x100, './file0\x00'}) (async) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000400)=""/204) (async) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000500)={'wlan0\x00'}) (async) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x7, [@restrict={0x4, 0x0, 0x0, 0xb, 0x2}, @float={0xf, 0x0, 0x0, 0x10, 0x2}, @ptr={0xa}]}, {0x0, [0x30, 0x2e, 0x30, 0x61, 0x30]}}, &(0x7f00000005c0)=""/147, 0x43, 0x93, 0x0, 0xa85c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x8, 0x40, 0x2, 0x6, 0x4a8, 0x1, 0x1ff, '\x00', 0x0, r5, 0x5, 0x0, 0x1}, 0x50) (async) recvmsg$can_j1939(r2, &(0x7f0000001f80)={&(0x7f0000000740)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x80, &(0x7f0000001dc0)=[{&(0x7f00000007c0)=""/4096, 0x1000}, {&(0x7f00000017c0)=""/142, 0x8e}, {&(0x7f0000001880)=""/183, 0xb7}, {&(0x7f0000001940)=""/181, 0xb5}, {&(0x7f0000001a00)=""/145, 0x91}, {&(0x7f0000001ac0)=""/26, 0x1a}, {&(0x7f0000001b00)=""/27, 0x1b}, {&(0x7f0000001b40)=""/143, 0x8f}, {&(0x7f0000001c00)=""/146, 0x92}, {&(0x7f0000001cc0)=""/207, 0xcf}], 0xa, &(0x7f0000001e80)=""/245, 0xf5}, 0x12120) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002000), r2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f0000002480)={&(0x7f0000001fc0)={0x10, 0x0, 0x0, 0x21040284}, 0xc, &(0x7f0000002440)={&(0x7f0000002080)={0x3bc, r7, 0x400, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x7}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0xc, 0x8}}, @NL80211_ATTR_SCAN_FREQUENCIES={0xc, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0xfffffb21}]}, @NL80211_ATTR_SCAN_SUPP_RATES={0x224, 0x7d, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc5, 0x1, "56fbfdf612f709ee2011593b1dce014abc5315a74e6b92d6fb93aff2faf889165edd2974a51e773d96fd19635eaa7bb7843ae0e35ac490e40d2ad34d9a143a34b47fda5ca56d5e0dfa1903fdc8c5fd0a060c53a185857d927efcc317a52198cab436494a9e4a1143b7b2857a99fa345ea75b2ccdae2da2447e3537d40f82021dc3cdc21778737adfa089c9499d5f94efa6931b94d6388b69b8476c494e2228a17ebe3b6005ffe56ec143b574cf5a1c8963bb4d041764c6af3ad19e2b20ac92410f"}, @NL80211_BAND_6GHZ={0x69, 0x3, "8769bb07ca050e729d93ebab23d555ace0b1bfae8d02f3094045f9e6900299ae75cbad489d6037157a29c67057fe9eac9e835dab37be025ea6b47328019aa7868a4a3cb8ae235005d7e6430cc6629a8c6041c7eab31ae2a998669f36b05fb6bc9f199d6616"}, @NL80211_BAND_2GHZ={0x4}, @NL80211_BAND_2GHZ={0x7d, 0x0, "25f6e9f35872d421532f3033129574f5591e0b3f61ed789b904a51433b54ec902819463b2211008dc0bc8b2584b7aef1652cf16ea25d34b00d848cf580435bb051586975b7cab6df747bc8994f3d6b9afca253edb7fc1373f1dd07eb326e3a0970271b56826dcd89949cb2c970a4e76f2f5d2de82c43b51e56"}, @NL80211_BAND_60GHZ={0x65, 0x2, "d37a60cc18653633094ed65eaac2defdc05c26d87c3c191f577dc4967f9f7f0c4b412fef16e90d164a8e02d3276f3d9c473ee15ce5e8bfb9e0e2381c81b8f08310dcd00be6bf586b904dff9c4f548a17708f240b56da0adf0d95fec8a495c50637"}]}, @NL80211_ATTR_SCAN_SUPP_RATES={0xfc, 0x7d, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xf5, 0x0, "8421a25db3190ddfd657537ca205f2c7586d9ba785b4594f67e48c826a570b7ad9b6f9a145947aa6036951137dd4c2c8547d7786180289e937b425afce968d40633b44420da181546409235cbce0d663da91168daa84151fec662b73938d36f93113f881f2ad6abbc82032813a19555e235edf2278c5d0f0ed01f131c7f2cc39ad59917b35237324e41b8077d396e73d374eed37656cf275d309c50e6a549fe9a7804708198600db66139a95db647aa40dd865237cf694fae7fe3e37e32540db0ff31a5facd40b788c767dfcbddea996aa5ffba6558fab2aab071161389f1d9821819d5e44549245da40dce2cf4c9a03b3"}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4c, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x9}, {0x8, 0x0, 0x5}, {0x8}, {0x8, 0x0, 0x7fffffff}, {0x8, 0x0, 0x3}, {0x8, 0x0, 0x8}, {0x8, 0x0, 0xb}, {0x8, 0x0, 0x1000}, {0x8, 0x0, 0x7}]}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x7}]}, 0x3bc}, 0x1, 0x0, 0x0, 0x40}, 0x4400) ioctl$sock_netdev_private(r3, 0x89f0, &(0x7f00000024c0)="0172a7e9965d143bf554d56a4a8970b9d2d57c96d00f51db7a8dc111430f75014521a34e69af47f51b0e3890210cc2eefdde9d925e6017303e751ceee1956aebdcf85971f0769230ca7909562d14f34b4400201f4a81b1e412b229c12c2b0e7d2e23cfd4f0") (async) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000002540)=0x808, 0x4) (async) getsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000002580), 0x10) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000002700)={&(0x7f00000025c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000026c0)={&(0x7f0000002600)=@newqdisc={0xac, 0x24, 0x0, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x9, 0x4}, {0x7, 0x10}, {0x4, 0x7}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x1}, @qdisc_kind_options=@q_hhf={{0x8}, {0x1c, 0x2, [@TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x87c1}, @TCA_HHF_QUANTUM={0x8, 0x2, 0x1}, @TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x9}]}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xb}, @qdisc_kind_options=@q_fq={{0x7}, {0x3c, 0x2, [@TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x1b}, @TCA_FQ_TIMER_SLACK={0x8, 0xd, 0xb}, @TCA_FQ_FLOW_PLIMIT={0x8, 0x2, 0xa0}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0x81}, @TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x5}, @TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0x2}, @TCA_FQ_RATE_ENABLE={0x8, 0x5, 0x1}]}}]}, 0xac}, 0x1, 0x0, 0x0, 0x20004080}, 0x4) (async) r10 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(r10, 0xc0109428, &(0x7f0000002740)={0x3, 0x7}) (async) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, &(0x7f0000002940)={&(0x7f0000002780)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002900)={&(0x7f00000027c0)={0x140, r7, 0x800, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x12a, 0x2a, [@peer_mgmt={0x75, 0x6, {0x1, 0x6, @void, @val=0x24, @void}}, @challenge={0x10, 0x1, 0x93}, @channel_switch={0x25, 0x3, {0x1, 0x74, 0x3}}, @tim={0x5, 0xfd, {0xce, 0xbe, 0xa, "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"}}, @chsw_timing={0x68, 0x4, {0x6, 0x70}}, @challenge={0x10, 0x1, 0xe5}, @cf={0x4, 0x6, {0x4, 0x8, 0x0, 0x8}}, @chsw_timing={0x68, 0x4, {0x2, 0xfff9}}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) (async) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000002980)={'pim6reg1\x00'}) 1.124177518s ago: executing program 4 (id=4035): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000011002901000000000000000007000000", @ANYRES32=r0, @ANYBLOB="00000000000000001c001a800800068004000500080000003e"], 0x44}}, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="810000002000cc03000000000000df250a0010cdff00000102000100080006000000000014000200000000000000000000000000000020010500150002000000080018004e224e24b381cfb015934b034b0c39f9e104a597d462eb67fcd495aad0599adb3a05c39c061ca6ed1ff8ddc34c57816f43a3856216eb431a00"], 0x48}, 0x1, 0x0, 0x0, 0x840}, 0x4000000) bind$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x1, @none, 0x0, 0x2}, 0xe) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$INCFS_IOC_CREATE_FILE(r3, 0xc058671e, &(0x7f0000000400)={{'\x00', 0x3}, {0x2}, 0x84, 0x0, 0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000480)="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", 0x177, 0x0, &(0x7f00000002c0)={0x2, 0xcd, {0x0, 0xc, 0x3b, "3c5a8df6a5444192738705b956ff2f7b9693bfd44743f30c932ace5815e0eb0b5baa4be37ab075bcb28b0384b8d2afdffb40d9d4196fe2e0da102b", 0x85, "4bddeeb12b3324eda6108b4153c72cc2a60a035a5f932fc148060c70fa6fdcab17579811611286cd2f54239597831c6f44a9667506c253d3c80cf8d415dbcdce833731a8ff476b802fbfe420062e25216e9d7215e68cd47d87cbc40899eb860ea998b7900028dc19839ed0703f841ecfedbe517c0e2d388ae4435384dd3a391b72d1673af0"}, 0x5b, "211070ad7b7740449bbb7351fd33e70c017e1473f071f2f745828ae11f8725b0e6b754b6f6fb7ca3d838d86cc0f5447ffaf14ec3d8ca46f3650b436d8cc08894bb9ff051d1a0166ee91d4d3979f43f643ce0591911fe86a37cefef"}, 0x134}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000000)={0x3, 0x9, 0x6, 0x7, 0xb, 0x7f, 0x0, 0x2, 0xc8, 0x5, 0x9, 0x2, 0x9, 0xd4}, 0xf) unshare(0x2a020400) connect$bt_l2cap(r1, &(0x7f0000000100)={0x1f, 0x0, @any, 0x4}, 0xe) 1.079351883s ago: executing program 0 (id=4036): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000004040)=@broute={'broute\x00', 0x20, 0x4, 0x176, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000002900], 0x0, 0x0, &(0x7f0000002900)=[{0xfeffff07, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0x1, 0x1, [{0x9, 0x4, 0x7, 'veth0_to_bond\x00', 'xfrm0\x00', 'xfrm0\x00', 'veth1_to_bridge\x00', @local, [0xff, 0x0, 0xff, 0xff, 0xff, 0xff], @random="2f7aa66091ad", [0xff, 0xff, 0xff, 0xff, 0x0, 0xff], 0x6e, 0x6e, 0xe6, [], [], @common=@NFLOG={'NFLOG\x00', 0x50, {{0x78000000, 0x36b9, 0x7, 0x1, 0x0, "1b053d745cc80704dd5b744f3bbaf702cbb1231c10e8f45fc4b3b5b40e7454ebca4f4f0b6cd1a8d30a013c8906bad5d59124e6ee95d923d3eb3c7ce90fbe3954"}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}]}, 0x1ee) 888.093195ms ago: executing program 0 (id=4037): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x887de000) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000200)={@empty=0x1f, @multicast2=0xe000031f, 0x0, "ff00000058b274e6d845167fefe428970548fc3c7b00000000000000fcff00", 0xb2, 0x0, 0x6, 0x5}, 0x3c) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="20000000051421060001000000000000080001"], 0x20}}, 0x0) readv(r2, &(0x7f0000000200)=[{&(0x7f0000000180)=""/89, 0x59}], 0x1) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r2, 0x80286722, &(0x7f0000000100)={&(0x7f00000000c0), 0x0, 0x2, 0xed9}) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f0000000000), &(0x7f0000000040)=0x4) syz_emit_ethernet(0x86, &(0x7f0000000000)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x50, 0x3a, 0xff, @remote, @local, {[], @pkt_toobig={0x8, 0x2, 0x0, 0x0, {0x0, 0x6, "000810", 0x0, 0x11, 0x0, @private1, @empty, [@dstopts={0x0, 0x0, '\x00', [@ra={0x5, 0x2f}]}], "db9f49b2609ceb2ef48b2730155717d8"}}}}}}}, 0x0) 883.433431ms ago: executing program 4 (id=4038): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xaf}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6b, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 815.634369ms ago: executing program 4 (id=4039): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) (async) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$igmp(0x2, 0x3, 0x2) (async) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) (async) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xfff3}}}, 0x24}}, 0x0) (async) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000005000000080000000f"], 0x50) close(0x3) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r8, 0x1, 0x1f, &(0x7f00000041c0)=""/4100, &(0x7f0000000100)=0x1004) (async) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r9, 0x89f1, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000140)=@ethtool_cmd={0x2f, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffff7fc, 0x0, 0x0, 0x0, 0x47, [0xfffffffc, 0x80]}}) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r7}, 0xc) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x78}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x8}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) 724.19714ms ago: executing program 1 (id=4040): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000f00)=@newqdisc={0x90, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x60, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x240, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4}]}}]}, 0x90}}, 0x0) socket$inet(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00'}) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000f00)=@newqdisc={0x90, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x60, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x240, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4}]}}]}, 0x90}}, 0x0) (async) 723.319835ms ago: executing program 3 (id=4041): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x6, &(0x7f0000000180)=[{0x20, 0xff, 0x0, 0xfffff038}, {0x28, 0x8, 0xe, 0xffeff024}, {0x6, 0x10, 0x83, 0xfffffffd}, {0x8, 0xb3, 0x1, 0x6}, {0x1, 0x8, 0x5, 0xf}, {0x1, 0xb5, 0xfa, 0x4}]}, 0x10) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfb, 0x20}, 0xc) socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000000240)={0x10, 0x0, 0x25d7dbfc, 0x2ffffffff}, 0xc) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000680)=""/203, 0x0) sendto$inet(r0, &(0x7f0000000c80)="8d5ea325cc811067588cf4f4b353", 0xe, 0x20004010, &(0x7f0000000cc0)={0x2, 0x4e22, @private=0xa010101}, 0x10) close(0x4) getpeername$packet(0xffffffffffffffff, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000640)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000900)={'vcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$inet(r0, &(0x7f0000000c40)={&(0x7f00000000c0)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000300)="099ece52c397e4fef3f81cdf1a6e559920829aa9152bb1f21186b2ff5af14ab7dbb2ba986f23982b85ede7e182db23b4425abac505f190517ba6390019037ed03c02635a7a5338cd89a8805b8353823cc7142ae803ec8da2c22fe6307215edea947d5f2f44779817e6edba3eb3130ffcb0135209016f3e3ffeb0db528e60f74f14da1955a41c02c9a64a8bf0e8e2e91ba0ad3b8f2b9b4abd1c494abce4d0e3d975f6bbb61d4d22c2793e4f7525a84c92c46c0f9b1188f4f99c1ebffa0a78d336ec77a4c5d9b0eeb9cef66ae6150c94143825", 0xd2}, {&(0x7f0000000580)="82fe4f5685dc415a2d88faa092ee6527eada0b4c8eddbd270070fee69c599f9bee4c1a337b4354cd33a9f0525233a1c41f766f86c8f4a75c46fad0893197d993eeb2b9b0ead7eed703beb97026bd6c616a1d019a23d5674c6a6960050ffd69e9424e242144b664815dcecede175eadab2002232bc2f3f161ad539973001a4d1f9323bda25dacf97810eb452a8b8ee4d63bb08bb3e29749fbd57a2efcd9e58fbd895964c5787803", 0xa7}, {&(0x7f0000000280)="83fa68893f86100bf7cc2312d7a26d24567d5671fabe7d236d308b13", 0x1c}], 0x3, &(0x7f0000000980)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @private=0xa010102, @local}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}}}, @ip_retopts={{0x44, 0x0, 0x7, {[@ra={0x94, 0x4}, @generic={0x89, 0xa, "8a4ca271575e9f93"}, @end, @ssrr={0x89, 0x7, 0x3e, [@remote]}, @ssrr={0x89, 0x1b, 0x46, [@remote, @private=0xa010100, @remote, @dev={0xac, 0x14, 0x14, 0x3f}, @loopback, @loopback]}]}}}, @ip_retopts={{0x100, 0x0, 0x7, {[@timestamp_addr={0x44, 0x1c, 0xd0, 0x1, 0x2, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, {@remote, 0xa30}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xff}]}, @cipso={0x86, 0x87, 0x4, [{0x0, 0x5, "f13b46"}, {0x2, 0xd, "56b4de52ac5afbdeab855e"}, {0x6, 0xd, "879d06232bdb213e6159e0"}, {0x6, 0xc, "b1e69737a528fed46208"}, {0x1, 0xa, "73b1f40d6b0895c1"}, {0x2, 0x10, "6138472fe635ac17b8a42a56a198"}, {0x6, 0x12, "f18d0f09aa93666d047af3128960ea0f"}, {0xcf172e0494faa803, 0xe, "395ec0c033206c94e5c360e1"}, {0x7, 0xf, "432d2eabc81a9f1c110f81f36f"}, {0x0, 0xd, "10752317d374174f5eed60"}]}, @noop, @end, @timestamp_prespec={0x44, 0x1c, 0xab, 0x3, 0x5, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7ff}, {@remote, 0x3}, {@rand_addr=0x64010100, 0x3}]}, @generic={0x44, 0xb, "e7e1bb1f63a465f45d"}, @rr={0x7, 0x23, 0x89, [@dev={0xac, 0x14, 0x14, 0xb}, @rand_addr=0x64010102, @multicast2, @multicast1, @remote, @empty, @broadcast, @local]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x76}}, @ip_ttl={{0x14, 0x0, 0x2, 0x36}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7fff}}, @ip_retopts={{0xb4, 0x0, 0x7, {[@ssrr={0x89, 0x2b, 0xc7, [@rand_addr=0x64010102, @broadcast, @multicast1, @private=0xa010100, @local, @dev={0xac, 0x14, 0x14, 0x22}, @dev={0xac, 0x14, 0x14, 0x37}, @dev={0xac, 0x14, 0x14, 0x1c}, @rand_addr=0x64010101, @loopback]}, @cipso={0x86, 0x4f, 0x2, [{0x7, 0xc, "2a3a629964464e4f978b"}, {0x7, 0x4, "118a"}, {0x5, 0x8, "dbc260807d13"}, {0x6, 0x7, "820116a381"}, {0x6, 0xd, "fe028a8384b2ee58082963"}, {0x6, 0xc, "ebb0cd45e548fa46b768"}, {0xa1992f317f5fccfd, 0x11, "08806c75ad74fcbfc4cc39ee2f96d0"}]}, @generic={0x7, 0x9, "80db891d1d6429"}, @lsrr={0x83, 0xf, 0x56, [@rand_addr=0x64010100, @multicast1, @private=0xa010102]}, @end, @lsrr={0x83, 0xf, 0xcb, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102]}]}}}], 0x2a8}, 0x40) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/cgroup\x00') socket(0x8, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000d00)={'vxcan1\x00'}) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r7 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r7, &(0x7f00000002c0)={0xa, 0x4e24, 0x0, @rand_addr, 0x8000}, 0x1c) sendmmsg(r7, &(0x7f00000092c0), 0x4ff, 0xfdff) 666.186159ms ago: executing program 0 (id=4042): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="080400000000fddbdf251b4000202e27225810a7893e037a364b15ba71f7b8641d7bc9e0610495eacf04c3bbf9fd289a5df1166958be01ae539ddc2e8467fb466e6ba093d30ff41b9985039d33af28deb0a4ef5837ac7ad90a0cd2280e"], 0x14}}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000b80)={'ip_vti0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000e40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000001280)=ANY=[@ANYBLOB="38020000", @ANYRES16=r3, @ANYBLOB="080027bd7000fcdbdf25020000001800018014000200697036677265746170300000000000000c00018008000100", @ANYRES32=r4, @ANYBLOB="58000180080003000100000008000100", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r1, @ANYBLOB="0800030003000000080003000300e3ff130002006272696467653000000000000000002f08000100", @ANYRES32=r4, @ANYBLOB="080003000000000008000100", @ANYRES32=r1, @ANYBLOB="1800018014000200766574683000000000000000000000008400018008000100", @ANYRES32=r1, @ANYBLOB="08000300030000001400020069703665727370616e300000000000001400020070696d7265670000000000000000000008000100", @ANYRES32=r1, @ANYRESOCT=r3, @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r1, @ANYBLOB="1400020073797a6b616c6c657230000000000000140002006772653000000000000000000000000008000300000000006400018008000300030000001400020076657468315f746f5f68737200000000080003000300000014000200766c616e3100000000000000000000001400020069703667726574617030000000000000140002006d6163766c616e3100000000000000000c00018008000300010000007400018008000100", @ANYRES8=r1, @ANYBLOB="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", @ANYRES32=r1, @ANYBLOB="0800030001000000140002006970766c616e3100000000000000000008000300010000001400020073797a5f74756e000000000000000000140002006d6163736563300000000000000000001400020073797a5f74756e00000000000000000014000180080003000100000008000100", @ANYRES32=r1, @ANYBLOB="1400018008000100", @ANYRES32=r1, @ANYBLOB="0800030002000000", @ANYRESOCT=r0, @ANYRESDEC=0x0], 0x238}, 0x1, 0x0, 0x0, 0x4020}, 0x10) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)=ANY=[@ANYBLOB="600000000206030000000000000000000000000705000100070000000900020073797a31000000001400078008001300000000000800122f000000010500050002000000050004000100000014000300686173683a68702c706f72742c697000"], 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000001dcdfeaf4b485c8aa02d289fb6e4765b9199025011000000894927f81d1be8189e0bdb561012422000100", @ANYRES32=r3, @ANYBLOB="44000280400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000410000008000600", @ANYRES8=r1, @ANYBLOB], 0x60}}, 0xdd5f3e8365dcb316) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000100)={0x0, @multicast2, @dev}, &(0x7f0000000140)=0xc) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000140)) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000002c0)={'macvlan0\x00'}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x200000, 0x0) close(r11) r12 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r12) sendmsg$TIPC_CMD_ENABLE_BEARER(r12, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYRESOCT=r8, @ANYRES32=r5, @ANYRESDEC=r0], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r13) socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) 369.610033ms ago: executing program 1 (id=4043): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f00000001c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)) close(0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="01000000080000000200000004"], 0x48) pipe(&(0x7f0000000040)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) socketpair$unix(0x2d, 0x2, 0x0, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r1, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r4, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r5], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x24, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r4, {0xfff2}, {}, {0xa, 0x1}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4004140}, 0x0) 324.214734ms ago: executing program 4 (id=4044): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002000)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000002a80)=[{&(0x7f0000000a00)}], 0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0xf3a, 0x0) write$cgroup_pid(r5, &(0x7f0000000000), 0xffffff98) splice(r1, 0x0, r5, 0x0, 0x80, 0x8) write(r3, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000002c0)={@multicast, @random="4aa468739b85", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @local, @empty, @random="57330377ba25", @dev={0xac, 0x14, 0x14, 0xfd}}}}}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000006d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 149.836661ms ago: executing program 3 (id=4045): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_raw(r3, &(0x7f0000000200)={0x1d, r4}, 0x10) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f0000000040)=[{{0x3, 0x0, 0x1}, {0x3, 0x1, 0x0, 0x1}}, {{0x4, 0x0, 0x1, 0x1}, {0x3, 0x1, 0x1, 0x1}}, {{0x3, 0x1, 0x1}, {0x3, 0x0, 0x1}}], 0x18) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r4, {0x1}, {0xc, 0xa}, {0x1, 0x6}}}, 0x24}}, 0x80) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0x0, 0x1000000, 0xffffffff, 0x2d0, 0xffffffff, 0x3e8, 0xffffffff, 0xffffffff, 0x3e8, 0xffffffff, 0x3, 0x0, {[{{@ip={@rand_addr=0x64010101, @private=0xa010100, 0x0, 0x0, 'bond_slave_1\x00', 'geneve1\x00', {}, {0xff}, 0x4, 0x0, 0x28}, 0x0, 0x70, 0xb8, 0x0, {0x0, 0x1c8}}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x0, 0x5, 0xce, 'netbios-ns\x00', {0x1c}}}}, {{@ip={@remote, @rand_addr=0x64010101, 0xff, 0xffffff, 'veth0_vlan\x00', 'vcan0\x00', {}, {0xff}}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x400, 0x7ff, 0xe7, 'netbios-ns\x00', {0x3ff}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x64, 0xfffffffd}}}}, 0x268) socket$alg(0x26, 0x5, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r7 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="050000000000000008000300", @ANYRES32=r11, @ANYBLOB="0800050007000000"], 0x24}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, &(0x7f00000002c0)='syzkaller\x00'}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="2800227c1e2147e4cc1efe0696aa346eace19e584db485a80ebdfd8dab8481663097a8192ff903e460fd2974b94a02acbafc9525842381d9485ee1bdc4831499103def29b75fd88b745a53a8a7c1619f31876041181c9f02e62dafe5d11584d6fb4f1cb4a300"/117, @ANYRES16=r6, @ANYBLOB="050003000000000000000600000008000300", @ANYRES32=r12, @ANYBLOB="0a0018000303030303030000"], 0x28}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) syz_emit_ethernet(0x127, &(0x7f0000000280)=ANY=[@ANYBLOB="e727dc071f0000000000000086dd609907a600f12c03cb697a653e336f000000500000000000ff0200"/51, @ANYRES32, @ANYRES32=r0, @ANYRESHEX=r1], 0x0) socket$nl_rdma(0x10, 0x3, 0x14) 125.603148ms ago: executing program 1 (id=4046): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r1, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x20000000, 0x0, 0x0) r2 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000180)={0x4, {{0xa, 0x4e20, 0x0, @mcast2, 0x9}}, 0x0, 0x3, [{{0xa, 0x4e22, 0xffff84f3, @loopback, 0x9}}, {{0xa, 0x4e24, 0x5, @mcast1, 0x5}}, {{0xa, 0x4e22, 0x26, @private1, 0x845}}]}, 0x210) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r2, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="120000000000000029000000", @ANYRES64=r2], 0x108}}], 0x1, 0xc040) r3 = socket$l2tp6(0xa, 0x2, 0x73) r4 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$F2FS_IOC_DEFRAGMENT(r3, 0xc010f508, &(0x7f0000000140)={0x6, 0x2}) getpeername$l2tp6(r4, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffffee0000000000000000850000002c00000095"], &(0x7f0000000040)='GPL\x00'}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r5, r6}, 0x40) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000c40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@struct={0x3, 0x155555555555565e}]}, {0x0, [0x2e, 0x30, 0x0, 0x61, 0x61]}}, 0x0, 0x2b, 0x0, 0x1}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r7, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400)=r8, 0x4) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x16, 0x6, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1ff}, [@btf_id={0x18, 0x1, 0x3, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0x40}]}, &(0x7f0000000680)='syzkaller\x00', 0x50, 0x5b, &(0x7f00000006c0)=""/91, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000780)={0x1, 0xe, 0x6, 0x4}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, &(0x7f00000007c0)=[0x1], &(0x7f0000000800)=[{0x3, 0x3, 0xe, 0x9}, {0x2, 0x1, 0xd, 0x8}], 0x10, 0x2cb}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000980)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000900), &(0x7f0000000940)='%pB \x00'}, 0x20) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=ANY=[@ANYBLOB="1200000005000000040000000200000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000fde3792c", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r12, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000000c0)={0x30, r13, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r11}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000810}, 0x20000000) r14 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x2}, 0x50) r15 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a40)={0x0, 0x9, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x13, 0x12, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x2}, {}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xae}, @func={0x85, 0x0, 0x1, 0x0, 0x3}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000500)='GPL\x00', 0x5, 0x5f, &(0x7f0000000540)=""/95, 0x41100, 0x40, '\x00', r6, @fallback=0x3, r4, 0x8, &(0x7f00000005c0)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x4, 0xc, 0x6, 0x91e9}, 0x10, r8, r9, 0xa, &(0x7f0000000a80)=[r4, r10, 0x1, r11, r14, r15], &(0x7f0000000ac0)=[{0x5, 0x2, 0xb}, {0x4, 0x4, 0x7, 0xa}, {0x2, 0x3, 0xb, 0x6}, {0x5, 0x1, 0xd, 0x7}, {0x0, 0x1, 0xb, 0xa}, {0x3, 0x5, 0x10, 0x4}, {0x1, 0x3, 0xa, 0xa}, {0x4, 0x4, 0x3, 0x4}, {0x1, 0x1, 0x7, 0x6}, {0x4, 0x5, 0x6, 0x4}], 0x10, 0x3}, 0x94) ioctl$sock_inet_SIOCGIFDSTADDR(r3, 0x8917, &(0x7f00000003c0)={'syzkaller0\x00', {0x2, 0x0, @empty}}) 0s ago: executing program 2 (id=4047): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x140}, 0x1, 0x0, 0x0, 0x20044081}, 0x8000) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f00000000c0), 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10) unshare(0x62040200) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002021702500000000002020207b1af8ff00000000bfa10000951234d35864aa628023ce005f3d367c00000701fefff7ffffffb702000008000000b703003e6d000083850054308de8c7749781c53da224ccde11e158"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) syz_init_net_socket$llc(0x1a, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) socket$l2tp6(0xa, 0x2, 0x73) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0xf) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000080000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="140000001300015b993dde440113e90006"], 0x14}], 0x1}, 0x0) r6 = openat$cgroup_type(r3, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r6, &(0x7f0000000280), 0x9) openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="92", 0x1}], 0x1}, 0x3) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) connect$bt_sco(r0, &(0x7f0000000100)={0x1f, @none}, 0x8) kernel console output (not intermixed with test programs): ing a failure. [ 416.761182][T16960] name failslab, interval 1, probability 0, space 0, times 0 [ 416.790883][T16960] CPU: 0 UID: 0 PID: 16960 Comm: syz.1.3261 Not tainted syzkaller #0 PREEMPT(full) [ 416.790910][T16960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 416.790922][T16960] Call Trace: [ 416.790930][T16960] [ 416.790939][T16960] dump_stack_lvl+0x189/0x250 [ 416.790965][T16960] ? __pfx____ratelimit+0x10/0x10 [ 416.790987][T16960] ? __pfx_dump_stack_lvl+0x10/0x10 [ 416.791007][T16960] ? __pfx__printk+0x10/0x10 [ 416.791032][T16960] ? __lock_acquire+0xab9/0xd20 [ 416.791062][T16960] should_fail_ex+0x414/0x560 [ 416.791087][T16960] should_failslab+0xa8/0x100 [ 416.791112][T16960] kmem_cache_alloc_noprof+0x74/0x6e0 [ 416.791132][T16960] ? skb_clone+0x212/0x3a0 [ 416.791159][T16960] skb_clone+0x212/0x3a0 [ 416.791183][T16960] __netlink_deliver_tap+0x404/0x850 [ 416.791215][T16960] ? netlink_deliver_tap+0x2e/0x1b0 [ 416.791236][T16960] netlink_deliver_tap+0x19c/0x1b0 [ 416.791256][T16960] netlink_unicast+0x7fa/0x9e0 [ 416.791291][T16960] ? __pfx_netlink_unicast+0x10/0x10 [ 416.791319][T16960] ? netlink_sendmsg+0x642/0xb30 [ 416.791336][T16960] ? skb_put+0x11b/0x210 [ 416.791391][T16960] netlink_sendmsg+0x805/0xb30 [ 416.791421][T16960] ? __pfx_netlink_sendmsg+0x10/0x10 [ 416.791445][T16960] ? aa_sock_msg_perm+0xf1/0x1d0 [ 416.791468][T16960] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 416.791490][T16960] ? __pfx_netlink_sendmsg+0x10/0x10 [ 416.791510][T16960] __sock_sendmsg+0x21c/0x270 [ 416.791538][T16960] ____sys_sendmsg+0x505/0x830 [ 416.791565][T16960] ? __pfx_____sys_sendmsg+0x10/0x10 [ 416.791595][T16960] ? import_iovec+0x74/0xa0 [ 416.791624][T16960] ___sys_sendmsg+0x21f/0x2a0 [ 416.791647][T16960] ? __pfx____sys_sendmsg+0x10/0x10 [ 416.791706][T16960] ? __fget_files+0x2a/0x420 [ 416.791727][T16960] ? __fget_files+0x3a0/0x420 [ 416.791760][T16960] __x64_sys_sendmsg+0x19b/0x260 [ 416.791784][T16960] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 416.791815][T16960] ? __pfx_ksys_write+0x10/0x10 [ 416.791840][T16960] ? do_syscall_64+0xbe/0xfa0 [ 416.791866][T16960] do_syscall_64+0xfa/0xfa0 [ 416.791888][T16960] ? lockdep_hardirqs_on+0x9c/0x150 [ 416.791910][T16960] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.791928][T16960] ? clear_bhb_loop+0x60/0xb0 [ 416.791951][T16960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.791969][T16960] RIP: 0033:0x7f5af458efc9 [ 416.791986][T16960] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 416.792002][T16960] RSP: 002b:00007f5af53fb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 416.792022][T16960] RAX: ffffffffffffffda RBX: 00007f5af47e5fa0 RCX: 00007f5af458efc9 [ 416.792037][T16960] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000007 [ 416.792048][T16960] RBP: 00007f5af53fb090 R08: 0000000000000000 R09: 0000000000000000 [ 416.792060][T16960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 416.792071][T16960] R13: 00007f5af47e6038 R14: 00007f5af47e5fa0 R15: 00007ffcf8d055e8 [ 416.792103][T16960] [ 417.153483][T16954] wg1 speed is unknown, defaulting to 1000 [ 417.165882][T16954] lo speed is unknown, defaulting to 1000 [ 417.399023][T16954] chnl_net:caif_netlink_parms(): no params data found [ 417.613257][T16984] FAULT_INJECTION: forcing a failure. [ 417.613257][T16984] name failslab, interval 1, probability 0, space 0, times 0 [ 417.660042][T16984] CPU: 0 UID: 0 PID: 16984 Comm: syz.4.3267 Not tainted syzkaller #0 PREEMPT(full) [ 417.660067][T16984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 417.660078][T16984] Call Trace: [ 417.660085][T16984] [ 417.660094][T16984] dump_stack_lvl+0x189/0x250 [ 417.660118][T16984] ? __pfx____ratelimit+0x10/0x10 [ 417.660140][T16984] ? __pfx_dump_stack_lvl+0x10/0x10 [ 417.660160][T16984] ? __pfx__printk+0x10/0x10 [ 417.660182][T16984] ? __pfx___might_resched+0x10/0x10 [ 417.660205][T16984] ? fs_reclaim_acquire+0x7d/0x100 [ 417.660231][T16984] should_fail_ex+0x414/0x560 [ 417.660253][T16984] should_failslab+0xa8/0x100 [ 417.660279][T16984] __kvmalloc_node_noprof+0x158/0x910 [ 417.660302][T16984] ? map_get_next_key+0x234/0x630 [ 417.660326][T16984] ? _copy_from_user+0x94/0xb0 [ 417.660353][T16984] map_get_next_key+0x234/0x630 [ 417.660376][T16984] ? bpf_lsm_bpf+0x9/0x20 [ 417.660397][T16984] __sys_bpf+0x63d/0x860 [ 417.660421][T16984] ? __pfx___sys_bpf+0x10/0x10 [ 417.660459][T16984] ? ksys_write+0x22a/0x250 [ 417.660481][T16984] ? __pfx_ksys_write+0x10/0x10 [ 417.660507][T16984] __x64_sys_bpf+0x7c/0x90 [ 417.660527][T16984] do_syscall_64+0xfa/0xfa0 [ 417.660547][T16984] ? lockdep_hardirqs_on+0x9c/0x150 [ 417.660568][T16984] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.660584][T16984] ? clear_bhb_loop+0x60/0xb0 [ 417.660606][T16984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.660624][T16984] RIP: 0033:0x7f7e34b8efc9 [ 417.660641][T16984] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 417.660656][T16984] RSP: 002b:00007f7e3598d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 417.660676][T16984] RAX: ffffffffffffffda RBX: 00007f7e34de5fa0 RCX: 00007f7e34b8efc9 [ 417.660690][T16984] RDX: 0000000000000020 RSI: 00002000000002c0 RDI: 0000000000000004 [ 417.660702][T16984] RBP: 00007f7e3598d090 R08: 0000000000000000 R09: 0000000000000000 [ 417.660714][T16984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 417.660725][T16984] R13: 00007f7e34de6038 R14: 00007f7e34de5fa0 R15: 00007ffcb253ad18 [ 417.660757][T16984] [ 417.887521][T16954] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.894685][T16954] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.902127][T16954] bridge_slave_0: entered allmulticast mode [ 417.910315][T16954] bridge_slave_0: entered promiscuous mode [ 417.918798][T16954] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.926008][T16954] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.933293][T16954] bridge_slave_1: entered allmulticast mode [ 417.947527][T16954] bridge_slave_1: entered promiscuous mode [ 418.027189][T16991] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3271'. [ 418.063814][T16989] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 418.084044][T16954] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 418.108875][T16954] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 418.164880][T17000] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3273'. [ 418.199333][T16989] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 418.211641][T16989] batadv_slave_0: entered promiscuous mode [ 418.243042][T16989] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3269'. [ 418.260946][T16954] team0: Port device team_slave_0 added [ 418.306844][T16989] netlink: 428 bytes leftover after parsing attributes in process `syz.0.3269'. [ 418.335733][T17007] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3273'. [ 418.352149][T16954] team0: Port device team_slave_1 added [ 418.375379][T16989] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3269'. [ 418.400596][T16954] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 418.408148][T16954] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 418.435861][ T5842] Bluetooth: hci4: command tx timeout [ 418.442197][T16954] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 418.461207][T17007] veth1_macvtap: left promiscuous mode [ 418.487365][T17000] netlink: 288 bytes leftover after parsing attributes in process `syz.4.3273'. [ 418.497558][T16954] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 418.504594][T16954] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 418.538921][T16954] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 418.564553][T17014] tipc: Enabled bearer , priority 0 [ 418.575707][T17014] syzkaller0: entered promiscuous mode [ 418.581213][T17014] syzkaller0: entered allmulticast mode [ 418.697481][T17017] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3280'. [ 418.715928][T17017] netlink: 200 bytes leftover after parsing attributes in process `syz.2.3280'. [ 418.739255][T17015] tipc: Resetting bearer [ 418.764419][T16954] hsr_slave_0: entered promiscuous mode [ 418.786307][T16954] hsr_slave_1: entered promiscuous mode [ 418.793573][T16954] debugfs: 'hsr0' already exists in 'hsr' [ 418.880944][T16954] Cannot create hsr debugfs directory [ 418.973315][T17014] tipc: Resetting bearer [ 419.029071][T17014] tipc: Disabling bearer [ 419.039499][T17039] FAULT_INJECTION: forcing a failure. [ 419.039499][T17039] name failslab, interval 1, probability 0, space 0, times 0 [ 419.054055][T17039] CPU: 0 UID: 0 PID: 17039 Comm: syz.0.3286 Not tainted syzkaller #0 PREEMPT(full) [ 419.054082][T17039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 419.054093][T17039] Call Trace: [ 419.054100][T17039] [ 419.054108][T17039] dump_stack_lvl+0x189/0x250 [ 419.054133][T17039] ? __pfx____ratelimit+0x10/0x10 [ 419.054163][T17039] ? __pfx_dump_stack_lvl+0x10/0x10 [ 419.054182][T17039] ? __pfx__printk+0x10/0x10 [ 419.054206][T17039] ? __pfx___might_resched+0x10/0x10 [ 419.054235][T17039] should_fail_ex+0x414/0x560 [ 419.054258][T17039] should_failslab+0xa8/0x100 [ 419.054281][T17039] kmem_cache_alloc_noprof+0x74/0x6e0 [ 419.054302][T17039] ? __pmd_alloc+0xc2/0x540 [ 419.054330][T17039] __pmd_alloc+0xc2/0x540 [ 419.054353][T17039] __handle_mm_fault+0x9ad/0x5400 [ 419.054387][T17039] ? __pfx___handle_mm_fault+0x10/0x10 [ 419.054422][T17039] ? find_vma+0xe7/0x160 [ 419.054438][T17039] ? __pfx_find_vma+0x10/0x10 [ 419.054460][T17039] handle_mm_fault+0x40a/0x8e0 [ 419.054489][T17039] do_user_addr_fault+0x764/0x1380 [ 419.054530][T17039] exc_page_fault+0x82/0x100 [ 419.054556][T17039] asm_exc_page_fault+0x26/0x30 [ 419.054572][T17039] RIP: 0010:rep_movs_alternative+0x33/0x90 [ 419.054591][T17039] Code: 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 7d 35 04 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb [ 419.054608][T17039] RSP: 0018:ffffc9000524fb08 EFLAGS: 00050212 [ 419.054625][T17039] RAX: 000000000000000a RBX: 0000000000000034 RCX: 0000000000000034 [ 419.054638][T17039] RDX: 0000000000000000 RSI: ffffc9000524fba0 RDI: 0000200000000000 [ 419.054651][T17039] RBP: ffffc9000524fc90 R08: ffffc9000524fbd3 R09: 1ffff92000a49f7a [ 419.054665][T17039] R10: dffffc0000000000 R11: fffff52000a49f7b R12: 0000200000000034 [ 419.054679][T17039] R13: 00007ffffffff000 R14: ffffc9000524fba0 R15: 0000200000000000 [ 419.054712][T17039] _copy_to_user+0x8a/0xb0 [ 419.054737][T17039] ax25_ioctl+0x6a5/0xca0 [ 419.054763][T17039] ? __pfx_ax25_ioctl+0x10/0x10 [ 419.054796][T17039] ? do_vfs_ioctl+0xbe8/0x1430 [ 419.054813][T17039] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 419.054841][T17039] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 419.054868][T17039] sock_do_ioctl+0xdc/0x300 [ 419.054896][T17039] ? __pfx_sock_do_ioctl+0x10/0x10 [ 419.054936][T17039] sock_ioctl+0x576/0x790 [ 419.054961][T17039] ? __pfx_sock_ioctl+0x10/0x10 [ 419.054987][T17039] ? __fget_files+0x3a0/0x420 [ 419.055010][T17039] ? __fget_files+0x2a/0x420 [ 419.055035][T17039] ? bpf_lsm_file_ioctl+0x9/0x20 [ 419.055059][T17039] ? __pfx_sock_ioctl+0x10/0x10 [ 419.055080][T17039] __se_sys_ioctl+0xfc/0x170 [ 419.055100][T17039] do_syscall_64+0xfa/0xfa0 [ 419.055121][T17039] ? lockdep_hardirqs_on+0x9c/0x150 [ 419.055144][T17039] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.055168][T17039] ? clear_bhb_loop+0x60/0xb0 [ 419.055189][T17039] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.055206][T17039] RIP: 0033:0x7f4bd838efc9 [ 419.055223][T17039] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 419.055239][T17039] RSP: 002b:00007f4bd92a6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 419.055257][T17039] RAX: ffffffffffffffda RBX: 00007f4bd85e5fa0 RCX: 00007f4bd838efc9 [ 419.055271][T17039] RDX: 0000200000000000 RSI: 00000000000089e9 RDI: 0000000000000004 [ 419.055283][T17039] RBP: 00007f4bd92a6090 R08: 0000000000000000 R09: 0000000000000000 [ 419.055295][T17039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 419.055306][T17039] R13: 00007f4bd85e6038 R14: 00007f4bd85e5fa0 R15: 00007fff951949d8 [ 419.055340][T17039] [ 419.499539][T17041] 8021q: adding VLAN 0 to HW filter on device bond1 [ 419.514087][T17034] wlan1 speed is unknown, defaulting to 1000 [ 419.704759][T17052] FAULT_INJECTION: forcing a failure. [ 419.704759][T17052] name failslab, interval 1, probability 0, space 0, times 0 [ 419.729454][T16954] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 419.741894][T16954] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 419.748424][T17052] CPU: 1 UID: 0 PID: 17052 Comm: syz.1.3291 Not tainted syzkaller #0 PREEMPT(full) [ 419.748451][T17052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 419.748462][T17052] Call Trace: [ 419.748470][T17052] [ 419.748478][T17052] dump_stack_lvl+0x189/0x250 [ 419.748504][T17052] ? __pfx____ratelimit+0x10/0x10 [ 419.748527][T17052] ? __pfx_dump_stack_lvl+0x10/0x10 [ 419.748546][T17052] ? __pfx__printk+0x10/0x10 [ 419.748571][T17052] ? __pfx___might_resched+0x10/0x10 [ 419.748593][T17052] ? fs_reclaim_acquire+0x7d/0x100 [ 419.748619][T17052] should_fail_ex+0x414/0x560 [ 419.748643][T17052] should_failslab+0xa8/0x100 [ 419.748667][T17052] __kmalloc_noprof+0xcb/0x7f0 [ 419.748685][T17052] ? iovec_from_user+0x87/0x250 [ 419.748716][T17052] iovec_from_user+0x87/0x250 [ 419.748743][T17052] __import_iovec+0x163/0x7f0 [ 419.748776][T17052] import_iovec+0x74/0xa0 [ 419.748803][T17052] ___sys_recvmsg+0x43a/0x510 [ 419.748831][T17052] ? __pfx____sys_recvmsg+0x10/0x10 [ 419.748876][T17052] ? __fget_files+0x3a0/0x420 [ 419.748909][T17052] do_recvmmsg+0x307/0x770 [ 419.748938][T17052] ? __pfx_do_recvmmsg+0x10/0x10 [ 419.748972][T17052] ? _copy_from_user+0x94/0xb0 [ 419.749011][T17052] __x64_sys_recvmmsg+0x1af/0x240 [ 419.749035][T17052] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 419.749060][T17052] ? do_syscall_64+0xbe/0xfa0 [ 419.749086][T17052] do_syscall_64+0xfa/0xfa0 [ 419.749107][T17052] ? lockdep_hardirqs_on+0x9c/0x150 [ 419.749135][T17052] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.749153][T17052] ? clear_bhb_loop+0x60/0xb0 [ 419.749174][T17052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.749191][T17052] RIP: 0033:0x7f5af458efc9 [ 419.749208][T17052] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 419.749223][T17052] RSP: 002b:00007f5af53fb038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 419.749243][T17052] RAX: ffffffffffffffda RBX: 00007f5af47e5fa0 RCX: 00007f5af458efc9 [ 419.749257][T17052] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000004 [ 419.749269][T17052] RBP: 00007f5af53fb090 R08: 0000200000003700 R09: 0000000000000000 [ 419.749281][T17052] R10: 0000000002040000 R11: 0000000000000246 R12: 0000000000000001 [ 419.749293][T17052] R13: 00007f5af47e6038 R14: 00007f5af47e5fa0 R15: 00007ffcf8d055e8 [ 419.749324][T17052] [ 419.995136][T16954] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 420.054523][T17034] wg1 speed is unknown, defaulting to 1000 [ 420.073942][T17034] lo speed is unknown, defaulting to 1000 [ 420.094813][T16954] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 420.120758][T16954] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 420.145571][T16954] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 420.225351][T16954] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 420.235233][T16954] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 420.244978][T16954] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 420.342283][T17066] wg1: entered promiscuous mode [ 420.358557][T17066] wg1: entered allmulticast mode [ 420.390893][T16954] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 420.414248][T16954] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 420.443565][T16954] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 420.515227][ T5842] Bluetooth: hci4: command tx timeout [ 420.801676][T17080] macvlan0: entered allmulticast mode [ 420.807519][T17080] veth1_vlan: entered allmulticast mode [ 420.852920][T17080] ipip0: entered allmulticast mode [ 420.884441][T17080] ipip0: left allmulticast mode [ 420.893293][T16954] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 420.917176][T16954] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 420.931349][T16954] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 420.955505][T16954] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 421.251608][T16954] 8021q: adding VLAN 0 to HW filter on device bond0 [ 421.287490][T17096] wlan1 speed is unknown, defaulting to 1000 [ 421.337120][T16954] 8021q: adding VLAN 0 to HW filter on device team0 [ 421.370978][ T7325] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.378290][ T7325] bridge0: port 1(bridge_slave_0) entered forwarding state [ 421.414889][T15378] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.422143][T15378] bridge0: port 2(bridge_slave_1) entered forwarding state [ 421.472208][T17109] FAULT_INJECTION: forcing a failure. [ 421.472208][T17109] name failslab, interval 1, probability 0, space 0, times 0 [ 421.495213][T17109] CPU: 1 UID: 0 PID: 17109 Comm: syz.1.3311 Not tainted syzkaller #0 PREEMPT(full) [ 421.495240][T17109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 421.495253][T17109] Call Trace: [ 421.495261][T17109] [ 421.495270][T17109] dump_stack_lvl+0x189/0x250 [ 421.495296][T17109] ? __pfx____ratelimit+0x10/0x10 [ 421.495320][T17109] ? __pfx_dump_stack_lvl+0x10/0x10 [ 421.495340][T17109] ? __pfx__printk+0x10/0x10 [ 421.495365][T17109] ? __lock_acquire+0xab9/0xd20 [ 421.495396][T17109] should_fail_ex+0x414/0x560 [ 421.495420][T17109] should_failslab+0xa8/0x100 [ 421.495446][T17109] kmem_cache_alloc_noprof+0x74/0x6e0 [ 421.495466][T17109] ? skb_clone+0x212/0x3a0 [ 421.495493][T17109] skb_clone+0x212/0x3a0 [ 421.495518][T17109] __netlink_deliver_tap+0x404/0x850 [ 421.495552][T17109] ? netlink_deliver_tap+0x2e/0x1b0 [ 421.495573][T17109] netlink_deliver_tap+0x19c/0x1b0 [ 421.495593][T17109] netlink_unicast+0x7fa/0x9e0 [ 421.495629][T17109] ? __pfx_netlink_unicast+0x10/0x10 [ 421.495656][T17109] ? netlink_sendmsg+0x642/0xb30 [ 421.495673][T17109] ? skb_put+0x11b/0x210 [ 421.495694][T17109] netlink_sendmsg+0x805/0xb30 [ 421.495722][T17109] ? __pfx_netlink_sendmsg+0x10/0x10 [ 421.495745][T17109] ? aa_sock_msg_perm+0xf1/0x1d0 [ 421.495767][T17109] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 421.495789][T17109] ? __pfx_netlink_sendmsg+0x10/0x10 [ 421.495810][T17109] __sock_sendmsg+0x21c/0x270 [ 421.495838][T17109] ____sys_sendmsg+0x505/0x830 [ 421.495865][T17109] ? __pfx_____sys_sendmsg+0x10/0x10 [ 421.495895][T17109] ? import_iovec+0x74/0xa0 [ 421.495923][T17109] ___sys_sendmsg+0x21f/0x2a0 [ 421.495953][T17109] ? __pfx____sys_sendmsg+0x10/0x10 [ 421.496013][T17109] ? __fget_files+0x2a/0x420 [ 421.496034][T17109] ? __fget_files+0x3a0/0x420 [ 421.496068][T17109] __x64_sys_sendmsg+0x19b/0x260 [ 421.496092][T17109] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 421.496124][T17109] ? __pfx_ksys_write+0x10/0x10 [ 421.496148][T17109] ? do_syscall_64+0xbe/0xfa0 [ 421.496175][T17109] do_syscall_64+0xfa/0xfa0 [ 421.496197][T17109] ? lockdep_hardirqs_on+0x9c/0x150 [ 421.496219][T17109] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.496237][T17109] ? clear_bhb_loop+0x60/0xb0 [ 421.496259][T17109] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.496277][T17109] RIP: 0033:0x7f5af458efc9 [ 421.496294][T17109] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 421.496310][T17109] RSP: 002b:00007f5af53fb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 421.496330][T17109] RAX: ffffffffffffffda RBX: 00007f5af47e5fa0 RCX: 00007f5af458efc9 [ 421.496344][T17109] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 421.496356][T17109] RBP: 00007f5af53fb090 R08: 0000000000000000 R09: 0000000000000000 [ 421.496368][T17109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 421.496379][T17109] R13: 00007f5af47e6038 R14: 00007f5af47e5fa0 R15: 00007ffcf8d055e8 [ 421.496412][T17109] [ 421.812484][T17111] __nla_validate_parse: 8 callbacks suppressed [ 421.812503][T17111] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3312'. [ 421.827735][T17111] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3312'. [ 421.901226][T17113] netlink: 'syz.1.3313': attribute type 1 has an invalid length. [ 421.917618][T17111] team0: entered promiscuous mode [ 421.922689][T17111] team_slave_0: entered promiscuous mode [ 421.928640][T17111] team_slave_1: entered promiscuous mode [ 421.936421][T17111] bond0: entered promiscuous mode [ 421.941488][T17111] bond_slave_0: entered promiscuous mode [ 421.947750][T17111] bond_slave_1: entered promiscuous mode [ 421.954929][T17111] debugfs: 'hsr1' already exists in 'hsr' [ 421.960990][T17111] Cannot create hsr debugfs directory [ 421.969004][T17111] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 422.019329][T16954] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 422.178435][T17118] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3316'. [ 422.214780][T17118] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3316'. [ 422.239892][T17096] wg1 speed is unknown, defaulting to 1000 [ 422.244751][T17118] netlink: 35 bytes leftover after parsing attributes in process `syz.4.3316'. [ 422.273319][T17096] lo speed is unknown, defaulting to 1000 [ 422.274739][T17118] netlink: 'syz.4.3316': attribute type 6 has an invalid length. [ 422.295479][T17118] netlink: 'syz.4.3316': attribute type 5 has an invalid length. [ 422.322603][T17118] netlink: 35 bytes leftover after parsing attributes in process `syz.4.3316'. [ 422.380038][T17118] netlink: 'syz.4.3316': attribute type 4 has an invalid length. [ 422.403599][T16954] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 422.443965][T17118] netlink: 'syz.4.3316': attribute type 4 has an invalid length. [ 422.605944][ T5842] Bluetooth: hci4: command tx timeout [ 422.699241][T17141] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3320'. [ 422.756711][T16954] veth0_vlan: entered promiscuous mode [ 422.777959][T16954] veth1_vlan: entered promiscuous mode [ 422.863030][T16954] veth0_macvtap: entered promiscuous mode [ 422.876643][T16954] veth1_macvtap: entered promiscuous mode [ 422.885737][T17144] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3321'. [ 422.902339][T17144] netlink: 'syz.4.3321': attribute type 1 has an invalid length. [ 422.913349][T17144] netlink: 'syz.4.3321': attribute type 2 has an invalid length. [ 422.952895][T16954] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 422.974008][T16954] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 422.992533][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.012445][T17146] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3322'. [ 423.027891][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.040755][T17146] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3322'. [ 423.070781][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.082945][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.216700][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 423.250469][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 423.272480][T17152] netlink: 'syz.2.3325': attribute type 18 has an invalid length. [ 423.299867][ T7325] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 423.303105][T17152] netlink: 'syz.2.3325': attribute type 18 has an invalid length. [ 423.337015][ T7325] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 423.352051][T17156] tipc: Can't bind to reserved service type 0 [ 423.405162][ T30] audit: type=1804 audit(1761049031.101:7): pid=17156 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.3327" name="x000000000000000b00000000000000000000013" dev="tmpfs" ino=339 res=1 errno=0 [ 423.433992][ T7325] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 423.472499][ T7325] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 423.481295][ T4484] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 423.501562][ T4484] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 423.509920][ T30] audit: type=1800 audit(1761049031.101:8): pid=17156 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3327" name="x000000000000000b00000000000000000000013" dev="tmpfs" ino=339 res=0 errno=0 [ 423.652294][T17160] syzkaller1: entered promiscuous mode [ 423.658965][T17160] syzkaller1: entered allmulticast mode [ 423.743171][T17171] FAULT_INJECTION: forcing a failure. [ 423.743171][T17171] name failslab, interval 1, probability 0, space 0, times 0 [ 423.776107][T17171] CPU: 1 UID: 0 PID: 17171 Comm: syz.3.3257 Not tainted syzkaller #0 PREEMPT(full) [ 423.776135][T17171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 423.776147][T17171] Call Trace: [ 423.776154][T17171] [ 423.776162][T17171] dump_stack_lvl+0x189/0x250 [ 423.776182][T17171] ? __pfx____ratelimit+0x10/0x10 [ 423.776200][T17171] ? __pfx_dump_stack_lvl+0x10/0x10 [ 423.776215][T17171] ? __pfx__printk+0x10/0x10 [ 423.776235][T17171] ? __pfx___might_resched+0x10/0x10 [ 423.776258][T17171] should_fail_ex+0x414/0x560 [ 423.776276][T17171] should_failslab+0xa8/0x100 [ 423.776296][T17171] kmem_cache_alloc_node_noprof+0x77/0x710 [ 423.776312][T17171] ? __alloc_skb+0x112/0x2d0 [ 423.776331][T17171] __alloc_skb+0x112/0x2d0 [ 423.776347][T17171] netlink_ack+0x146/0xa50 [ 423.776375][T17171] netlink_rcv_skb+0x28c/0x470 [ 423.776389][T17171] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 423.776411][T17171] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 423.776434][T17171] ? bpf_lsm_capable+0x9/0x20 [ 423.776447][T17171] ? security_capable+0x7e/0x2e0 [ 423.776467][T17171] nfnetlink_rcv+0x282/0x2590 [ 423.776488][T17171] ? __dev_queue_xmit+0x284/0x3740 [ 423.776505][T17171] ? __dev_queue_xmit+0x1bfb/0x3740 [ 423.776540][T17171] ? __dev_queue_xmit+0x284/0x3740 [ 423.776564][T17171] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 423.776596][T17171] ? ref_tracker_free+0x63a/0x7d0 [ 423.776611][T17171] ? __asan_memcpy+0x40/0x70 [ 423.776625][T17171] ? __pfx_ref_tracker_free+0x10/0x10 [ 423.776652][T17171] ? skb_clone+0x246/0x3a0 [ 423.776670][T17171] ? __netlink_deliver_tap+0x807/0x850 [ 423.776684][T17171] ? netlink_deliver_tap+0x2e/0x1b0 [ 423.776703][T17171] ? netlink_deliver_tap+0x2e/0x1b0 [ 423.776723][T17171] netlink_unicast+0x82f/0x9e0 [ 423.776749][T17171] ? __pfx_netlink_unicast+0x10/0x10 [ 423.776770][T17171] ? netlink_sendmsg+0x642/0xb30 [ 423.776784][T17171] ? skb_put+0x11b/0x210 [ 423.776801][T17171] netlink_sendmsg+0x805/0xb30 [ 423.776822][T17171] ? __pfx_netlink_sendmsg+0x10/0x10 [ 423.776839][T17171] ? aa_sock_msg_perm+0xf1/0x1d0 [ 423.776856][T17171] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 423.776873][T17171] ? __pfx_netlink_sendmsg+0x10/0x10 [ 423.776889][T17171] __sock_sendmsg+0x21c/0x270 [ 423.776910][T17171] ____sys_sendmsg+0x505/0x830 [ 423.776929][T17171] ? __pfx_____sys_sendmsg+0x10/0x10 [ 423.776951][T17171] ? import_iovec+0x74/0xa0 [ 423.776972][T17171] ___sys_sendmsg+0x21f/0x2a0 [ 423.776990][T17171] ? __pfx____sys_sendmsg+0x10/0x10 [ 423.777031][T17171] ? __fget_files+0x2a/0x420 [ 423.777048][T17171] ? __fget_files+0x3a0/0x420 [ 423.777072][T17171] __x64_sys_sendmsg+0x19b/0x260 [ 423.777090][T17171] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 423.777113][T17171] ? __pfx_ksys_write+0x10/0x10 [ 423.777131][T17171] ? do_syscall_64+0xbe/0xfa0 [ 423.777152][T17171] do_syscall_64+0xfa/0xfa0 [ 423.777168][T17171] ? lockdep_hardirqs_on+0x9c/0x150 [ 423.777185][T17171] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.777199][T17171] ? clear_bhb_loop+0x60/0xb0 [ 423.777216][T17171] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.777229][T17171] RIP: 0033:0x7f3921b8efc9 [ 423.777243][T17171] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 423.777254][T17171] RSP: 002b:00007f3922a64038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 423.777271][T17171] RAX: ffffffffffffffda RBX: 00007f3921de5fa0 RCX: 00007f3921b8efc9 [ 423.777282][T17171] RDX: 0000000020000000 RSI: 0000200000000300 RDI: 0000000000000003 [ 423.777291][T17171] RBP: 00007f3922a64090 R08: 0000000000000000 R09: 0000000000000000 [ 423.777300][T17171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 423.777309][T17171] R13: 00007f3921de6038 R14: 00007f3921de5fa0 R15: 00007fff253be208 [ 423.777332][T17171] [ 424.273423][T17182] ip6erspan0: entered allmulticast mode [ 424.408153][T17188] wlan1 speed is unknown, defaulting to 1000 [ 424.675519][ T5842] Bluetooth: hci4: command tx timeout [ 425.279035][T17188] wg1 speed is unknown, defaulting to 1000 [ 425.279182][T17202] wlan1 speed is unknown, defaulting to 1000 [ 425.367042][T17188] lo speed is unknown, defaulting to 1000 [ 425.820242][T17238] wlan1 speed is unknown, defaulting to 1000 [ 426.027790][T17241] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 426.040605][T17241] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 426.051556][T17241] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 426.081455][T17202] wg1 speed is unknown, defaulting to 1000 [ 426.101033][T17202] lo speed is unknown, defaulting to 1000 [ 426.229617][T17245] wlan1 speed is unknown, defaulting to 1000 [ 426.407279][T17249] erspan0: entered promiscuous mode [ 426.792985][T17245] wg1 speed is unknown, defaulting to 1000 [ 426.822130][T17245] lo speed is unknown, defaulting to 1000 [ 427.033653][T17264] wlan1 speed is unknown, defaulting to 1000 [ 427.453488][T17284] __nla_validate_parse: 4 callbacks suppressed [ 427.453506][T17284] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3367'. [ 427.508901][T17264] wg1 speed is unknown, defaulting to 1000 [ 427.528010][T17264] lo speed is unknown, defaulting to 1000 [ 427.559659][ T5149] Bluetooth: hci4: command 0x0405 tx timeout [ 428.498478][T17307] netlink: 112 bytes leftover after parsing attributes in process `syz.2.3373'. [ 428.689476][T17314] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3374'. [ 428.716725][T17314] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3374'. [ 428.789846][T17314] team0: entered promiscuous mode [ 428.794980][T17314] team_slave_0: entered promiscuous mode [ 428.800977][T17314] team_slave_1: entered promiscuous mode [ 428.809813][T17314] bond0: entered promiscuous mode [ 428.814921][T17314] bond_slave_0: entered promiscuous mode [ 428.822140][T17314] bond_slave_1: entered promiscuous mode [ 428.838435][T17314] debugfs: 'hsr1' already exists in 'hsr' [ 428.852355][T17314] Cannot create hsr debugfs directory [ 428.866463][T17314] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 428.914500][T17324] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 428.921793][T17324] IPv6: NLM_F_CREATE should be set when creating new route [ 429.075754][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 429.097057][T17335] syzkaller0: create flow: hash 852720242 index 2 [ 429.152645][T17337] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3380'. [ 429.317778][T17345] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3383'. [ 429.328396][T17327] syzkaller0: delete flow: hash 852720242 index 2 [ 429.639746][ T5149] Bluetooth: hci4: command 0x0405 tx timeout [ 429.649765][T17350] netlink: 'syz.3.3385': attribute type 13 has an invalid length. [ 429.715183][T17358] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 430.859280][T17344] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 431.010166][T17363] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3388'. [ 431.143091][T17373] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3391'. [ 431.164985][T17373] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3391'. [ 431.372235][T17382] siw: device registration error -23 [ 431.393922][T17382] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 431.631642][T17400] netlink: 'syz.3.3399': attribute type 13 has an invalid length. [ 431.665422][T17400] netlink: 'syz.3.3399': attribute type 17 has an invalid length. [ 431.855674][T17405] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3402'. [ 431.933697][T17400] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 431.957856][T17405] erspan0: entered promiscuous mode [ 431.966163][T17405] erspan0: left promiscuous mode [ 432.194439][T17420] netlink: 'syz.4.3406': attribute type 72 has an invalid length. [ 432.200308][T17423] ip6tnl0: mtu less than device minimum [ 432.392274][T17436] FAULT_INJECTION: forcing a failure. [ 432.392274][T17436] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 432.406595][T17436] CPU: 0 UID: 0 PID: 17436 Comm: syz.4.3411 Not tainted syzkaller #0 PREEMPT(full) [ 432.406620][T17436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 432.406632][T17436] Call Trace: [ 432.406640][T17436] [ 432.406649][T17436] dump_stack_lvl+0x189/0x250 [ 432.406674][T17436] ? __pfx____ratelimit+0x10/0x10 [ 432.406697][T17436] ? __pfx_dump_stack_lvl+0x10/0x10 [ 432.406717][T17436] ? __pfx__printk+0x10/0x10 [ 432.406736][T17436] ? __might_fault+0xb0/0x130 [ 432.406767][T17436] should_fail_ex+0x414/0x560 [ 432.406788][T17436] _copy_from_iter+0x1de/0x1790 [ 432.406822][T17436] ? rcu_is_watching+0x15/0xb0 [ 432.406849][T17436] ? kmalloc_reserve+0xbd/0x290 [ 432.406866][T17436] ? __pfx__copy_from_iter+0x10/0x10 [ 432.406888][T17436] ? __build_skb_around+0x262/0x3f0 [ 432.406907][T17436] ? netlink_sendmsg+0x642/0xb30 [ 432.406921][T17436] ? skb_put+0x11b/0x210 [ 432.406938][T17436] netlink_sendmsg+0x6b2/0xb30 [ 432.406962][T17436] ? __pfx_netlink_sendmsg+0x10/0x10 [ 432.406985][T17436] ? aa_sock_msg_perm+0xf1/0x1d0 [ 432.407008][T17436] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 432.407029][T17436] ? __pfx_netlink_sendmsg+0x10/0x10 [ 432.407045][T17436] __sock_sendmsg+0x21c/0x270 [ 432.407071][T17436] ____sys_sendmsg+0x505/0x830 [ 432.407095][T17436] ? __pfx_____sys_sendmsg+0x10/0x10 [ 432.407126][T17436] ? import_iovec+0x74/0xa0 [ 432.407152][T17436] ___sys_sendmsg+0x21f/0x2a0 [ 432.407175][T17436] ? __pfx____sys_sendmsg+0x10/0x10 [ 432.407234][T17436] ? __fget_files+0x2a/0x420 [ 432.407255][T17436] ? __fget_files+0x3a0/0x420 [ 432.407287][T17436] __x64_sys_sendmsg+0x19b/0x260 [ 432.407308][T17436] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 432.407340][T17436] ? __pfx_ksys_write+0x10/0x10 [ 432.407364][T17436] ? do_syscall_64+0xbe/0xfa0 [ 432.407390][T17436] do_syscall_64+0xfa/0xfa0 [ 432.407415][T17436] ? lockdep_hardirqs_on+0x9c/0x150 [ 432.407438][T17436] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.407456][T17436] ? clear_bhb_loop+0x60/0xb0 [ 432.407478][T17436] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.407496][T17436] RIP: 0033:0x7f7e34b8efc9 [ 432.407512][T17436] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 432.407527][T17436] RSP: 002b:00007f7e3598d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 432.407547][T17436] RAX: ffffffffffffffda RBX: 00007f7e34de5fa0 RCX: 00007f7e34b8efc9 [ 432.407561][T17436] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 432.407572][T17436] RBP: 00007f7e3598d090 R08: 0000000000000000 R09: 0000000000000000 [ 432.407584][T17436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 432.407595][T17436] R13: 00007f7e34de6038 R14: 00007f7e34de5fa0 R15: 00007ffcb253ad18 [ 432.407626][T17436] [ 433.118447][T17450] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3417'. [ 433.122134][T17454] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3419'. [ 433.138517][T17450] netlink: 'syz.3.3417': attribute type 4 has an invalid length. [ 433.183652][T17450] netlink: 'syz.3.3417': attribute type 4 has an invalid length. [ 433.696718][T17480] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3426'. [ 433.718138][T17480] dummy0: entered promiscuous mode [ 433.723523][T17480] macvtap1: entered promiscuous mode [ 433.734153][T17480] macvtap1: entered allmulticast mode [ 433.754729][T17480] dummy0: entered allmulticast mode [ 433.761098][T17485] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3426'. [ 433.785712][T17482] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3427'. [ 433.799707][T17485] dummy0: left allmulticast mode [ 433.812918][T17485] dummy0: left promiscuous mode [ 434.159914][T17498] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3434'. [ 434.636398][T17530] netlink: 'syz.4.3446': attribute type 1 has an invalid length. [ 434.768065][T17530] bond2: entered promiscuous mode [ 434.786567][T17530] 8021q: adding VLAN 0 to HW filter on device bond2 [ 434.809753][T17538] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 434.825756][T17538] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 434.850479][T17538] bond2: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 435.201676][T17566] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 435.237379][T17566] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 435.310898][T17569] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 435.387269][T17566] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.3460'. [ 435.410421][T17582] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3465'. [ 435.420578][T17582] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3465'. [ 435.533077][T17589] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3469'. [ 435.628696][T17595] FAULT_INJECTION: forcing a failure. [ 435.628696][T17595] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 435.666933][T17595] CPU: 0 UID: 0 PID: 17595 Comm: syz.4.3470 Not tainted syzkaller #0 PREEMPT(full) [ 435.666959][T17595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 435.666971][T17595] Call Trace: [ 435.666978][T17595] [ 435.666987][T17595] dump_stack_lvl+0x189/0x250 [ 435.667013][T17595] ? __pfx____ratelimit+0x10/0x10 [ 435.667034][T17595] ? __pfx_dump_stack_lvl+0x10/0x10 [ 435.667053][T17595] ? __pfx__printk+0x10/0x10 [ 435.667072][T17595] ? __might_fault+0xb0/0x130 [ 435.667103][T17595] should_fail_ex+0x414/0x560 [ 435.667127][T17595] _copy_from_iter+0x1de/0x1790 [ 435.667156][T17595] ? rcu_is_watching+0x15/0xb0 [ 435.667184][T17595] ? kmalloc_reserve+0xbd/0x290 [ 435.667203][T17595] ? __pfx__copy_from_iter+0x10/0x10 [ 435.667227][T17595] ? __build_skb_around+0x262/0x3f0 [ 435.667249][T17595] ? netlink_sendmsg+0x642/0xb30 [ 435.667266][T17595] ? skb_put+0x11b/0x210 [ 435.667289][T17595] netlink_sendmsg+0x6b2/0xb30 [ 435.667317][T17595] ? __pfx_netlink_sendmsg+0x10/0x10 [ 435.667340][T17595] ? aa_sock_msg_perm+0xf1/0x1d0 [ 435.667363][T17595] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 435.667385][T17595] ? __pfx_netlink_sendmsg+0x10/0x10 [ 435.667405][T17595] __sock_sendmsg+0x21c/0x270 [ 435.667432][T17595] ____sys_sendmsg+0x505/0x830 [ 435.667458][T17595] ? __pfx_____sys_sendmsg+0x10/0x10 [ 435.667488][T17595] ? import_iovec+0x74/0xa0 [ 435.667514][T17595] ___sys_sendmsg+0x21f/0x2a0 [ 435.667537][T17595] ? __pfx____sys_sendmsg+0x10/0x10 [ 435.667565][T17595] ? rcu_read_lock_any_held+0xb3/0x120 [ 435.667596][T17595] ? sb_end_write+0xe9/0x1c0 [ 435.667637][T17595] ? __pfx_vfs_write+0x10/0x10 [ 435.667657][T17595] ? do_sys_openat2+0x154/0x1c0 [ 435.667697][T17595] __x64_sys_sendmsg+0x19b/0x260 [ 435.667721][T17595] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 435.667757][T17595] ? __pfx_ksys_write+0x10/0x10 [ 435.667781][T17595] ? do_syscall_64+0xbe/0xfa0 [ 435.667809][T17595] do_syscall_64+0xfa/0xfa0 [ 435.667830][T17595] ? lockdep_hardirqs_on+0x9c/0x150 [ 435.667853][T17595] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.667872][T17595] ? clear_bhb_loop+0x60/0xb0 [ 435.667894][T17595] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.667912][T17595] RIP: 0033:0x7f7e34b8efc9 [ 435.667930][T17595] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 435.667946][T17595] RSP: 002b:00007f7e3598d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 435.667968][T17595] RAX: ffffffffffffffda RBX: 00007f7e34de5fa0 RCX: 00007f7e34b8efc9 [ 435.667982][T17595] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 435.667995][T17595] RBP: 00007f7e3598d090 R08: 0000000000000000 R09: 0000000000000000 [ 435.668007][T17595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 435.668018][T17595] R13: 00007f7e34de6038 R14: 00007f7e34de5fa0 R15: 00007ffcb253ad18 [ 435.668051][T17595] [ 436.137456][T17608] FAULT_INJECTION: forcing a failure. [ 436.137456][T17608] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 436.153294][T17608] CPU: 0 UID: 0 PID: 17608 Comm: syz.1.3474 Not tainted syzkaller #0 PREEMPT(full) [ 436.153320][T17608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 436.153332][T17608] Call Trace: [ 436.153340][T17608] [ 436.153348][T17608] dump_stack_lvl+0x189/0x250 [ 436.153374][T17608] ? __pfx____ratelimit+0x10/0x10 [ 436.153397][T17608] ? __pfx_dump_stack_lvl+0x10/0x10 [ 436.153415][T17608] ? __pfx__printk+0x10/0x10 [ 436.153436][T17608] ? fs_reclaim_acquire+0x7d/0x100 [ 436.153468][T17608] should_fail_ex+0x414/0x560 [ 436.153492][T17608] prepare_alloc_pages+0x213/0x610 [ 436.153523][T17608] __alloc_frozen_pages_noprof+0x123/0x370 [ 436.153564][T17608] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 436.153597][T17608] ? policy_nodemask+0x27c/0x720 [ 436.153626][T17608] alloc_pages_mpol+0x232/0x4a0 [ 436.153654][T17608] vma_alloc_folio_noprof+0xe4/0x200 [ 436.153679][T17608] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 436.153711][T17608] folio_prealloc+0x30/0x180 [ 436.153733][T17608] do_wp_page+0x1231/0x5800 [ 436.153776][T17608] ? __pfx_do_wp_page+0x10/0x10 [ 436.153790][T17608] ? do_raw_spin_lock+0x121/0x290 [ 436.153813][T17608] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 436.153844][T17608] __handle_mm_fault+0x1033/0x5400 [ 436.153881][T17608] ? __pfx___handle_mm_fault+0x10/0x10 [ 436.153915][T17608] ? follow_page_pte+0xd03/0x13e0 [ 436.153943][T17608] handle_mm_fault+0x40a/0x8e0 [ 436.153972][T17608] __get_user_pages+0x165c/0x2a00 [ 436.154033][T17608] __gup_longterm_locked+0xde4/0x1660 [ 436.154066][T17608] ? sanity_check_pinned_pages+0x1241/0x1300 [ 436.154095][T17608] ? gup_fast_fallback+0x1b86/0x22d0 [ 436.154118][T17608] gup_fast_fallback+0x1d65/0x22d0 [ 436.154136][T17608] ? __kernel_text_address+0xd/0x40 [ 436.154158][T17608] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 436.154212][T17608] ? __pfx_gup_fast_fallback+0x10/0x10 [ 436.154228][T17608] ? kasan_save_track+0x4f/0x80 [ 436.154247][T17608] ? __kasan_kmalloc+0x93/0xb0 [ 436.154265][T17608] ? __kmalloc_noprof+0x411/0x7f0 [ 436.154283][T17608] ? sock_kmalloc+0xd6/0x160 [ 436.154303][T17608] ? skcipher_recvmsg+0x3d1/0x11d0 [ 436.154320][T17608] ? sock_recvmsg+0x22c/0x270 [ 436.154348][T17608] ? ____sys_recvmsg+0x1c9/0x460 [ 436.154366][T17608] ? __x64_sys_recvmsg+0x198/0x260 [ 436.154385][T17608] ? do_syscall_64+0xfa/0xfa0 [ 436.154406][T17608] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.154429][T17608] ? pin_user_pages_fast+0x4d/0xb0 [ 436.154450][T17608] iov_iter_extract_pages+0x35f/0x5e0 [ 436.154484][T17608] extract_iter_to_sg+0xe46/0x24e0 [ 436.154523][T17608] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 436.154554][T17608] ? rcu_is_watching+0x15/0xb0 [ 436.154579][T17608] ? trace_kmalloc+0x1f/0xd0 [ 436.154598][T17608] ? sock_kmalloc+0xd6/0x160 [ 436.154624][T17608] ? __asan_memset+0x22/0x50 [ 436.154646][T17608] af_alg_get_rsgl+0x436/0x810 [ 436.154693][T17608] skcipher_recvmsg+0x3d1/0x11d0 [ 436.154715][T17608] ? aa_sk_perm+0x81e/0x950 [ 436.154747][T17608] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 436.154769][T17608] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 436.154790][T17608] ? security_socket_recvmsg+0x7e/0x2e0 [ 436.154813][T17608] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 436.154833][T17608] sock_recvmsg+0x22c/0x270 [ 436.154861][T17608] ____sys_recvmsg+0x1c9/0x460 [ 436.154892][T17608] ? __pfx_____sys_recvmsg+0x10/0x10 [ 436.154932][T17608] ? import_iovec+0x74/0xa0 [ 436.154959][T17608] ___sys_recvmsg+0x1b5/0x510 [ 436.154986][T17608] ? __pfx____sys_recvmsg+0x10/0x10 [ 436.155033][T17608] ? __fget_files+0x3a0/0x420 [ 436.155065][T17608] __x64_sys_recvmsg+0x198/0x260 [ 436.155088][T17608] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 436.155116][T17608] ? __pfx_ksys_write+0x10/0x10 [ 436.155139][T17608] ? do_syscall_64+0xbe/0xfa0 [ 436.155164][T17608] do_syscall_64+0xfa/0xfa0 [ 436.155184][T17608] ? lockdep_hardirqs_on+0x9c/0x150 [ 436.155206][T17608] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.155225][T17608] ? clear_bhb_loop+0x60/0xb0 [ 436.155247][T17608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.155265][T17608] RIP: 0033:0x7f5af458efc9 [ 436.155283][T17608] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 436.155299][T17608] RSP: 002b:00007f5af53fb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 436.155320][T17608] RAX: ffffffffffffffda RBX: 00007f5af47e5fa0 RCX: 00007f5af458efc9 [ 436.155334][T17608] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000005 [ 436.155346][T17608] RBP: 00007f5af53fb090 R08: 0000000000000000 R09: 0000000000000000 [ 436.155358][T17608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 436.155369][T17608] R13: 00007f5af47e6038 R14: 00007f5af47e5fa0 R15: 00007ffcf8d055e8 [ 436.155403][T17608] [ 436.633079][T17612] !: entered promiscuous mode [ 436.641151][T17612] debugfs: 'hsr1' already exists in 'hsr' [ 436.647011][T17612] Cannot create hsr debugfs directory [ 436.655543][T17613] netlink: 'syz.2.3475': attribute type 13 has an invalid length. [ 436.664714][T17613] netlink: 'syz.2.3475': attribute type 17 has an invalid length. [ 436.909596][T17613] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 437.138736][ T855] IPVS: starting estimator thread 0... [ 437.202576][T17636] erspan0: entered promiscuous mode [ 437.216702][T17636] macvtap1: entered promiscuous mode [ 437.230448][T17636] macvtap1: entered allmulticast mode [ 437.235383][T17634] IPVS: using max 27 ests per chain, 64800 per kthread [ 437.253089][T17639] netlink: 'syz.4.3487': attribute type 9 has an invalid length. [ 437.261859][T17636] erspan0: entered allmulticast mode [ 437.274023][T17641] erspan0: left allmulticast mode [ 437.282965][T17641] erspan0: left promiscuous mode [ 437.506123][T17655] 8021q: VLANs not supported on vcan0 [ 437.559987][T17660] FAULT_INJECTION: forcing a failure. [ 437.559987][T17660] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 437.574255][T17660] CPU: 1 UID: 0 PID: 17660 Comm: syz.4.3494 Not tainted syzkaller #0 PREEMPT(full) [ 437.574281][T17660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 437.574292][T17660] Call Trace: [ 437.574301][T17660] [ 437.574309][T17660] dump_stack_lvl+0x189/0x250 [ 437.574333][T17660] ? __pfx____ratelimit+0x10/0x10 [ 437.574356][T17660] ? __pfx_dump_stack_lvl+0x10/0x10 [ 437.574384][T17660] ? __pfx__printk+0x10/0x10 [ 437.574412][T17660] should_fail_ex+0x414/0x560 [ 437.574433][T17660] _copy_to_user+0x31/0xb0 [ 437.574457][T17660] simple_read_from_buffer+0xe1/0x170 [ 437.574483][T17660] proc_fail_nth_read+0x1b3/0x220 [ 437.574503][T17660] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 437.574521][T17660] ? rw_verify_area+0x2a6/0x4d0 [ 437.574536][T17660] ? __lock_acquire+0xab9/0xd20 [ 437.574555][T17660] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 437.574573][T17660] vfs_read+0x200/0xa30 [ 437.574591][T17660] ? fdget_pos+0x247/0x320 [ 437.574616][T17660] ? __pfx___mutex_lock+0x10/0x10 [ 437.574639][T17660] ? __pfx_vfs_read+0x10/0x10 [ 437.574661][T17660] ? __fget_files+0x2a/0x420 [ 437.574688][T17660] ? __fget_files+0x3a0/0x420 [ 437.574708][T17660] ? __fget_files+0x2a/0x420 [ 437.574734][T17660] ksys_read+0x145/0x250 [ 437.574755][T17660] ? __pfx_ksys_read+0x10/0x10 [ 437.574777][T17660] ? do_syscall_64+0xbe/0xfa0 [ 437.574803][T17660] do_syscall_64+0xfa/0xfa0 [ 437.574824][T17660] ? lockdep_hardirqs_on+0x9c/0x150 [ 437.574846][T17660] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.574862][T17660] ? clear_bhb_loop+0x60/0xb0 [ 437.574884][T17660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.574901][T17660] RIP: 0033:0x7f7e34b8d9dc [ 437.574918][T17660] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 437.574934][T17660] RSP: 002b:00007f7e3598d030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 437.574952][T17660] RAX: ffffffffffffffda RBX: 00007f7e34de5fa0 RCX: 00007f7e34b8d9dc [ 437.574964][T17660] RDX: 000000000000000f RSI: 00007f7e3598d0a0 RDI: 0000000000000008 [ 437.574975][T17660] RBP: 00007f7e3598d090 R08: 0000000000000000 R09: 0000000000000000 [ 437.574987][T17660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 437.575002][T17660] R13: 00007f7e34de6038 R14: 00007f7e34de5fa0 R15: 00007ffcb253ad18 [ 437.575032][T17660] [ 437.823757][T17662] netlink: 'syz.0.3496': attribute type 1 has an invalid length. [ 437.878423][T17662] bond1: entered promiscuous mode [ 437.906541][T17662] 8021q: adding VLAN 0 to HW filter on device bond1 [ 437.921660][T17668] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 437.934108][T17668] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 437.944580][T17668] bond1: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 438.145483][T17684] netlink: 'syz.0.3500': attribute type 1 has an invalid length. [ 438.261094][T17688] bond2: (slave bridge2): making interface the new active one [ 438.269746][T17688] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 438.339210][T17694] netlink: 'syz.4.3504': attribute type 2 has an invalid length. [ 438.501821][T17704] wlan1 speed is unknown, defaulting to 1000 [ 438.586957][T17714] __nla_validate_parse: 12 callbacks suppressed [ 438.586975][T17714] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3512'. [ 438.620390][T17714] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3512'. [ 439.295520][T17708] netlink: 'syz.2.3506': attribute type 4 has an invalid length. [ 439.313245][T17708] netlink: 17 bytes leftover after parsing attributes in process `syz.2.3506'. [ 439.368114][T17735] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.376510][T17742] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3520'. [ 439.386227][T17742] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3520'. [ 439.395397][T17742] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3520'. [ 439.404361][T17742] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3520'. [ 439.420741][T17704] wg1 speed is unknown, defaulting to 1000 [ 439.436936][T17725] wlan1 speed is unknown, defaulting to 1000 [ 439.456538][T17704] lo speed is unknown, defaulting to 1000 [ 439.688435][T17751] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 439.776816][T17725] wg1 speed is unknown, defaulting to 1000 [ 439.784723][T17725] lo speed is unknown, defaulting to 1000 [ 439.875635][T17755] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3524'. [ 439.936213][T17755] dummy0: entered promiscuous mode [ 439.941519][T17755] macvtap2: entered promiscuous mode [ 439.941796][T17756] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3524'. [ 439.956838][T17755] macvtap2: entered allmulticast mode [ 439.962238][T17755] dummy0: entered allmulticast mode [ 439.976135][T17756] dummy0: left allmulticast mode [ 439.984818][T17756] dummy0: left promiscuous mode [ 440.476731][T17767] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3528'. [ 440.523498][T17764] ªªªªªª: renamed from wg2 (while UP) [ 440.783314][T17779] wlan1 speed is unknown, defaulting to 1000 [ 440.999527][T17779] wg1 speed is unknown, defaulting to 1000 [ 441.007252][T17779] lo speed is unknown, defaulting to 1000 [ 441.314714][T17797] wlan1 speed is unknown, defaulting to 1000 [ 441.363581][T17789] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x7 [ 441.420731][T17789] geneve2: entered promiscuous mode [ 441.444616][T17789] geneve2: entered allmulticast mode [ 441.805566][T17797] wg1 speed is unknown, defaulting to 1000 [ 441.826758][T17797] lo speed is unknown, defaulting to 1000 [ 442.395993][T17839] FAULT_INJECTION: forcing a failure. [ 442.395993][T17839] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 442.411752][T17839] CPU: 0 UID: 0 PID: 17839 Comm: syz.0.3554 Not tainted syzkaller #0 PREEMPT(full) [ 442.411778][T17839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 442.411791][T17839] Call Trace: [ 442.411799][T17839] [ 442.411808][T17839] dump_stack_lvl+0x189/0x250 [ 442.411834][T17839] ? __pfx____ratelimit+0x10/0x10 [ 442.411858][T17839] ? __pfx_dump_stack_lvl+0x10/0x10 [ 442.411879][T17839] ? __pfx__printk+0x10/0x10 [ 442.411921][T17839] should_fail_ex+0x414/0x560 [ 442.411946][T17839] _copy_to_user+0x31/0xb0 [ 442.411973][T17839] simple_read_from_buffer+0xe1/0x170 [ 442.412000][T17839] proc_fail_nth_read+0x1b3/0x220 [ 442.412023][T17839] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 442.412045][T17839] ? rw_verify_area+0x2a6/0x4d0 [ 442.412063][T17839] ? __lock_acquire+0xab9/0xd20 [ 442.412084][T17839] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 442.412105][T17839] vfs_read+0x200/0xa30 [ 442.412124][T17839] ? fdget_pos+0x247/0x320 [ 442.412151][T17839] ? __pfx___mutex_lock+0x10/0x10 [ 442.412175][T17839] ? __pfx_vfs_read+0x10/0x10 [ 442.412197][T17839] ? __fget_files+0x2a/0x420 [ 442.412223][T17839] ? __fget_files+0x3a0/0x420 [ 442.412244][T17839] ? __fget_files+0x2a/0x420 [ 442.412276][T17839] ksys_read+0x145/0x250 [ 442.412298][T17839] ? __pfx_ksys_read+0x10/0x10 [ 442.412329][T17839] do_syscall_64+0xfa/0xfa0 [ 442.412349][T17839] ? lockdep_hardirqs_on+0x9c/0x150 [ 442.412371][T17839] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.412390][T17839] ? clear_bhb_loop+0x60/0xb0 [ 442.412411][T17839] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.412427][T17839] RIP: 0033:0x7f4bd838d9dc [ 442.412443][T17839] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 442.412458][T17839] RSP: 002b:00007f4bd92a6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 442.412476][T17839] RAX: ffffffffffffffda RBX: 00007f4bd85e5fa0 RCX: 00007f4bd838d9dc [ 442.412489][T17839] RDX: 000000000000000f RSI: 00007f4bd92a60a0 RDI: 0000000000000005 [ 442.412507][T17839] RBP: 00007f4bd92a6090 R08: 0000000000000000 R09: 0000000000000000 [ 442.412518][T17839] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 442.412529][T17839] R13: 00007f4bd85e6038 R14: 00007f4bd85e5fa0 R15: 00007fff951949d8 [ 442.412560][T17839] [ 442.838260][T17853] FAULT_INJECTION: forcing a failure. [ 442.838260][T17853] name failslab, interval 1, probability 0, space 0, times 0 [ 442.862377][T17853] CPU: 1 UID: 0 PID: 17853 Comm: syz.1.3558 Not tainted syzkaller #0 PREEMPT(full) [ 442.862404][T17853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 442.862416][T17853] Call Trace: [ 442.862424][T17853] [ 442.862433][T17853] dump_stack_lvl+0x189/0x250 [ 442.862459][T17853] ? __pfx____ratelimit+0x10/0x10 [ 442.862482][T17853] ? __pfx_dump_stack_lvl+0x10/0x10 [ 442.862502][T17853] ? __pfx__printk+0x10/0x10 [ 442.862528][T17853] ? __pfx___might_resched+0x10/0x10 [ 442.862557][T17853] should_fail_ex+0x414/0x560 [ 442.862582][T17853] should_failslab+0xa8/0x100 [ 442.862608][T17853] __kmalloc_noprof+0xcb/0x7f0 [ 442.862626][T17853] ? kfree+0x4d/0x6d0 [ 442.862642][T17853] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 442.862671][T17853] tomoyo_realpath_from_path+0xe3/0x5d0 [ 442.862695][T17853] ? tomoyo_domain+0xd9/0x130 [ 442.862722][T17853] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 442.862749][T17853] tomoyo_path_number_perm+0x1e8/0x5a0 [ 442.862779][T17853] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 442.862805][T17853] ? __pfx_bpf_send_signal_common+0x10/0x10 [ 442.862874][T17853] ? __fget_files+0x2a/0x420 [ 442.862902][T17853] ? __fget_files+0x3a0/0x420 [ 442.862922][T17853] ? __fget_files+0x2a/0x420 [ 442.862948][T17853] security_file_ioctl+0xcb/0x2d0 [ 442.862977][T17853] __se_sys_ioctl+0x47/0x170 [ 442.862998][T17853] do_syscall_64+0xfa/0xfa0 [ 442.863020][T17853] ? lockdep_hardirqs_on+0x9c/0x150 [ 442.863043][T17853] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.863061][T17853] ? clear_bhb_loop+0x60/0xb0 [ 442.863084][T17853] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.863102][T17853] RIP: 0033:0x7f5af458efc9 [ 442.863119][T17853] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 442.863135][T17853] RSP: 002b:00007f5af53fb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 442.863155][T17853] RAX: ffffffffffffffda RBX: 00007f5af47e5fa0 RCX: 00007f5af458efc9 [ 442.863169][T17853] RDX: 0000200000000080 RSI: 0000000000008b19 RDI: 0000000000000004 [ 442.863182][T17853] RBP: 00007f5af53fb090 R08: 0000000000000000 R09: 0000000000000000 [ 442.863194][T17853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 442.863205][T17853] R13: 00007f5af47e6038 R14: 00007f5af47e5fa0 R15: 00007ffcf8d055e8 [ 442.863239][T17853] [ 442.863247][T17853] ERROR: Out of memory at tomoyo_realpath_from_path. [ 443.404938][T17867] FAULT_INJECTION: forcing a failure. [ 443.404938][T17867] name failslab, interval 1, probability 0, space 0, times 0 [ 443.445147][T17867] CPU: 1 UID: 0 PID: 17867 Comm: syz.3.3564 Not tainted syzkaller #0 PREEMPT(full) [ 443.445174][T17867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 443.445187][T17867] Call Trace: [ 443.445195][T17867] [ 443.445204][T17867] dump_stack_lvl+0x189/0x250 [ 443.445229][T17867] ? __pfx____ratelimit+0x10/0x10 [ 443.445254][T17867] ? __pfx_dump_stack_lvl+0x10/0x10 [ 443.445274][T17867] ? __pfx__printk+0x10/0x10 [ 443.445299][T17867] ? __pfx___might_resched+0x10/0x10 [ 443.445320][T17867] ? fs_reclaim_acquire+0x7d/0x100 [ 443.445345][T17867] should_fail_ex+0x414/0x560 [ 443.445369][T17867] should_failslab+0xa8/0x100 [ 443.445393][T17867] __kmalloc_noprof+0xcb/0x7f0 [ 443.445412][T17867] ? tomoyo_encode+0x28b/0x550 [ 443.445436][T17867] tomoyo_encode+0x28b/0x550 [ 443.445462][T17867] tomoyo_realpath_from_path+0x58d/0x5d0 [ 443.445483][T17867] ? tomoyo_domain+0xd9/0x130 [ 443.445510][T17867] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 443.445535][T17867] tomoyo_path_number_perm+0x1e8/0x5a0 [ 443.445563][T17867] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 443.445627][T17867] ? __fget_files+0x2a/0x420 [ 443.445653][T17867] ? __fget_files+0x3a0/0x420 [ 443.445673][T17867] ? __fget_files+0x2a/0x420 [ 443.445697][T17867] security_file_ioctl+0xcb/0x2d0 [ 443.445721][T17867] __se_sys_ioctl+0x47/0x170 [ 443.445745][T17867] do_syscall_64+0xfa/0xfa0 [ 443.445766][T17867] ? lockdep_hardirqs_on+0x9c/0x150 [ 443.445789][T17867] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.445805][T17867] ? clear_bhb_loop+0x60/0xb0 [ 443.445826][T17867] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.445842][T17867] RIP: 0033:0x7f3921b8efc9 [ 443.445859][T17867] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 443.445875][T17867] RSP: 002b:00007f3922a64038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 443.445895][T17867] RAX: ffffffffffffffda RBX: 00007f3921de5fa0 RCX: 00007f3921b8efc9 [ 443.445909][T17867] RDX: 0000200000000140 RSI: 0000000000008923 RDI: 000000000000000a [ 443.445920][T17867] RBP: 00007f3922a64090 R08: 0000000000000000 R09: 0000000000000000 [ 443.445931][T17867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 443.445942][T17867] R13: 00007f3921de6038 R14: 00007f3921de5fa0 R15: 00007fff253be208 [ 443.445975][T17867] [ 443.446020][T17867] ERROR: Out of memory at tomoyo_realpath_from_path. [ 443.648024][T17878] wlan1 speed is unknown, defaulting to 1000 [ 443.654644][T17867] ªªªªªª: renamed from wg2 (while UP) [ 444.074831][T17897] __nla_validate_parse: 9 callbacks suppressed [ 444.074847][T17897] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3574'. [ 444.092810][T17896] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3573'. [ 444.102384][T17896] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 444.138334][T17896] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 444.181595][T17878] wg1 speed is unknown, defaulting to 1000 [ 444.189902][T17878] lo speed is unknown, defaulting to 1000 [ 444.197511][T17902] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3575'. [ 444.206927][T17902] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3575'. [ 444.354113][ T10] IPVS: starting estimator thread 0... [ 444.412733][T17904] nbd: must specify a size in bytes for the device [ 444.421408][T17907] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3578'. [ 444.445171][T17908] IPVS: using max 31 ests per chain, 74400 per kthread [ 444.508125][T17916] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3580'. [ 444.612088][T17920] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3581'. [ 444.626084][T17920] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3581'. [ 444.986960][T17931] FAULT_INJECTION: forcing a failure. [ 444.986960][T17931] name failslab, interval 1, probability 0, space 0, times 0 [ 445.000038][T17931] CPU: 0 UID: 0 PID: 17931 Comm: syz.3.3587 Not tainted syzkaller #0 PREEMPT(full) [ 445.000064][T17931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 445.000075][T17931] Call Trace: [ 445.000083][T17931] [ 445.000092][T17931] dump_stack_lvl+0x189/0x250 [ 445.000115][T17931] ? __pfx____ratelimit+0x10/0x10 [ 445.000138][T17931] ? __pfx_dump_stack_lvl+0x10/0x10 [ 445.000158][T17931] ? __pfx__printk+0x10/0x10 [ 445.000192][T17931] should_fail_ex+0x414/0x560 [ 445.000217][T17931] should_failslab+0xa8/0x100 [ 445.000242][T17931] __kmalloc_cache_noprof+0x6f/0x6f0 [ 445.000264][T17931] ? nsim_fib_event_nb+0x187/0x1080 [ 445.000285][T17931] ? __lock_acquire+0xab9/0xd20 [ 445.000313][T17931] nsim_fib_event_nb+0x187/0x1080 [ 445.000336][T17931] ? atomic_notifier_call_chain+0x26/0x180 [ 445.000372][T17931] notifier_call_chain+0x1b6/0x3e0 [ 445.000401][T17931] ? atomic_notifier_call_chain+0x26/0x180 [ 445.000429][T17931] atomic_notifier_call_chain+0xda/0x180 [ 445.000458][T17931] call_fib_notifiers+0x31/0x60 [ 445.000479][T17931] fib6_del+0x104d/0x1550 [ 445.000506][T17931] ? fib6_del+0x651/0x1550 [ 445.000547][T17931] ? __pfx_fib6_del+0x10/0x10 [ 445.000571][T17931] ? do_raw_spin_lock+0x121/0x290 [ 445.000589][T17931] ? __ip6_del_rt+0x8c/0x180 [ 445.000619][T17931] ? nla_put+0xd0/0x150 [ 445.000641][T17931] ? __ip6_del_rt+0x8c/0x180 [ 445.000668][T17931] __ip6_del_rt+0x97/0x180 [ 445.000695][T17931] ip6_del_rt+0xb3/0x100 [ 445.000715][T17931] ? __pfx_ip6_del_rt+0x10/0x10 [ 445.000742][T17931] ? nlmsg_notify+0xf0/0x1a0 [ 445.000759][T17931] ? nlmsg_notify+0x14a/0x1a0 [ 445.000780][T17931] __ipv6_ifa_notify+0x5c7/0xac0 [ 445.000815][T17931] ? __pfx___ipv6_ifa_notify+0x10/0x10 [ 445.000838][T17931] ? __pfx_work_grab_pending+0x10/0x10 [ 445.000866][T17931] ? __lock_acquire+0xab9/0xd20 [ 445.000893][T17931] ? __cancel_work+0x1e6/0x2e0 [ 445.000910][T17931] ? lockdep_hardirqs_on+0x9c/0x150 [ 445.000940][T17931] ? __cancel_work+0x254/0x2e0 [ 445.000961][T17931] ? __pfx___cancel_work+0x10/0x10 [ 445.000980][T17931] ? ipv6_del_addr+0x60c/0x8f0 [ 445.001010][T17931] ipv6_del_addr+0x6b1/0x8f0 [ 445.001041][T17931] inet6_addr_del+0x473/0x600 [ 445.001076][T17931] addrconf_del_ifaddr+0x113/0x160 [ 445.001098][T17931] ? __pfx_addrconf_del_ifaddr+0x10/0x10 [ 445.001121][T17931] ? kasan_quarantine_put+0xdd/0x220 [ 445.001141][T17931] ? lockdep_hardirqs_on+0x9c/0x150 [ 445.001171][T17931] inet6_ioctl+0x10f/0x280 [ 445.001191][T17931] ? __pfx_inet6_ioctl+0x10/0x10 [ 445.001215][T17931] ? do_vfs_ioctl+0xbe8/0x1430 [ 445.001232][T17931] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 445.001261][T17931] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 445.001287][T17931] sock_do_ioctl+0xdc/0x300 [ 445.001314][T17931] ? __pfx_sock_do_ioctl+0x10/0x10 [ 445.001356][T17931] sock_ioctl+0x576/0x790 [ 445.001382][T17931] ? __pfx_sock_ioctl+0x10/0x10 [ 445.001408][T17931] ? __fget_files+0x3a0/0x420 [ 445.001429][T17931] ? __fget_files+0x2a/0x420 [ 445.001454][T17931] ? bpf_lsm_file_ioctl+0x9/0x20 [ 445.001478][T17931] ? __pfx_sock_ioctl+0x10/0x10 [ 445.001500][T17931] __se_sys_ioctl+0xfc/0x170 [ 445.001522][T17931] do_syscall_64+0xfa/0xfa0 [ 445.001543][T17931] ? lockdep_hardirqs_on+0x9c/0x150 [ 445.001565][T17931] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.001583][T17931] ? clear_bhb_loop+0x60/0xb0 [ 445.001606][T17931] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.001623][T17931] RIP: 0033:0x7f3921b8efc9 [ 445.001640][T17931] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 445.001655][T17931] RSP: 002b:00007f3922a64038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 445.001675][T17931] RAX: ffffffffffffffda RBX: 00007f3921de5fa0 RCX: 00007f3921b8efc9 [ 445.001689][T17931] RDX: 0000200000000000 RSI: 0000000000008936 RDI: 0000000000000005 [ 445.001701][T17931] RBP: 00007f3922a64090 R08: 0000000000000000 R09: 0000000000000000 [ 445.001713][T17931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 445.001724][T17931] R13: 00007f3921de6038 R14: 00007f3921de5fa0 R15: 00007fff253be208 [ 445.001759][T17931] [ 445.055867][T17936] sch_tbf: burst 21990 is lower than device lo mtu (65550) ! [ 445.445654][T17942] 8021q: VLANs not supported on vcan0 [ 445.486172][T17953] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3592'. [ 445.562299][T17957] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3594'. [ 445.664348][T17964] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 445.894412][T17976] vlan2: entered promiscuous mode [ 446.068811][T17986] IPVS: set_ctl: invalid protocol: 29 172.20.20.187:20001 [ 446.441639][T18014] netlink: 'syz.4.3615': attribute type 1 has an invalid length. [ 446.508272][T18014] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 446.523336][T18014] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 446.544957][T18017] vlan3: entered promiscuous mode [ 446.577974][T18018] bond3: (slave bridge1): Enslaving as an active interface with a down link [ 446.619037][T18014] bond3: (slave gretap1): making interface the new active one [ 446.629581][T18014] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 446.831048][T18028] siw: device registration error -23 [ 446.841186][T18028] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 447.326060][T18050] 8021q: VLANs not supported on vcan0 [ 447.616392][ T36] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 447.633789][ T36] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 447.646877][T18051] tipc: Started in network mode [ 447.651774][T18051] tipc: Node identity de664bd5f9c5, cluster identity 4711 [ 447.672827][T18051] tipc: Enabled bearer , priority 0 [ 447.680306][ T36] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 447.761831][ T36] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 447.891566][T18051] tipc: Disabling bearer [ 447.943701][T18070] tipc: Enabled bearer , priority 0 [ 447.956267][T18070] syzkaller0: entered promiscuous mode [ 447.972001][T18070] syzkaller0: entered allmulticast mode [ 448.052009][T18070] tipc: Resetting bearer [ 448.081784][T18070] tipc: Disabling bearer [ 448.561508][T18109] wlan1 speed is unknown, defaulting to 1000 [ 449.194817][T18109] wg1 speed is unknown, defaulting to 1000 [ 449.196010][T18111] wlan1 speed is unknown, defaulting to 1000 [ 449.210836][T18109] lo speed is unknown, defaulting to 1000 [ 449.266042][T18128] __nla_validate_parse: 17 callbacks suppressed [ 449.266060][T18128] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3657'. [ 449.334342][T18131] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3658'. [ 449.350475][T18131] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3658'. [ 449.462254][T18131] dummy0: entered promiscuous mode [ 449.469055][T18131] dummy0: left promiscuous mode [ 449.610598][T18126] wlan1 speed is unknown, defaulting to 1000 [ 449.622045][T18111] wg1 speed is unknown, defaulting to 1000 [ 449.636778][T18111] lo speed is unknown, defaulting to 1000 [ 449.804267][T18147] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3662'. [ 449.972146][T18147] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.043636][T18126] wg1 speed is unknown, defaulting to 1000 [ 450.059023][T18126] lo speed is unknown, defaulting to 1000 [ 450.137416][T18147] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.182056][T18158] FAULT_INJECTION: forcing a failure. [ 450.182056][T18158] name failslab, interval 1, probability 0, space 0, times 0 [ 450.225822][T18158] CPU: 1 UID: 0 PID: 18158 Comm: syz.3.3665 Not tainted syzkaller #0 PREEMPT(full) [ 450.225848][T18158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 450.225861][T18158] Call Trace: [ 450.225869][T18158] [ 450.225878][T18158] dump_stack_lvl+0x189/0x250 [ 450.225908][T18158] ? __pfx____ratelimit+0x10/0x10 [ 450.225931][T18158] ? __pfx_dump_stack_lvl+0x10/0x10 [ 450.225951][T18158] ? __pfx__printk+0x10/0x10 [ 450.225976][T18158] ? __pfx___might_resched+0x10/0x10 [ 450.225997][T18158] ? fs_reclaim_acquire+0x7d/0x100 [ 450.226021][T18158] should_fail_ex+0x414/0x560 [ 450.226043][T18158] should_failslab+0xa8/0x100 [ 450.226068][T18158] __kmalloc_noprof+0xcb/0x7f0 [ 450.226087][T18158] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 450.226111][T18158] ? rcu_is_watching+0x15/0xb0 [ 450.226139][T18158] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 450.226170][T18158] genl_family_rcv_msg_doit+0xb8/0x300 [ 450.226198][T18158] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 450.226228][T18158] ? apparmor_capable+0x137/0x1b0 [ 450.226255][T18158] ? bpf_lsm_capable+0x9/0x20 [ 450.226278][T18158] ? security_capable+0x7e/0x2e0 [ 450.226306][T18158] genl_rcv_msg+0x60e/0x790 [ 450.226336][T18158] ? __pfx_genl_rcv_msg+0x10/0x10 [ 450.226357][T18158] ? __pfx_macsec_del_rxsc+0x10/0x10 [ 450.226378][T18158] ? __asan_memcpy+0x40/0x70 [ 450.226394][T18158] ? __pfx_ref_tracker_free+0x10/0x10 [ 450.226421][T18158] netlink_rcv_skb+0x208/0x470 [ 450.226439][T18158] ? __lock_acquire+0xab9/0xd20 [ 450.226460][T18158] ? __pfx_genl_rcv_msg+0x10/0x10 [ 450.226482][T18158] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 450.226515][T18158] ? down_read+0x1ad/0x2e0 [ 450.226539][T18158] genl_rcv+0x28/0x40 [ 450.226555][T18158] netlink_unicast+0x82f/0x9e0 [ 450.226581][T18158] ? __pfx_netlink_unicast+0x10/0x10 [ 450.226603][T18158] ? netlink_sendmsg+0x642/0xb30 [ 450.226619][T18158] ? skb_put+0x11b/0x210 [ 450.226641][T18158] netlink_sendmsg+0x805/0xb30 [ 450.226671][T18158] ? __pfx_netlink_sendmsg+0x10/0x10 [ 450.226694][T18158] ? aa_sock_msg_perm+0xf1/0x1d0 [ 450.226716][T18158] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 450.226738][T18158] ? __pfx_netlink_sendmsg+0x10/0x10 [ 450.226758][T18158] __sock_sendmsg+0x21c/0x270 [ 450.226784][T18158] ____sys_sendmsg+0x505/0x830 [ 450.226810][T18158] ? __pfx_____sys_sendmsg+0x10/0x10 [ 450.226838][T18158] ? import_iovec+0x74/0xa0 [ 450.226866][T18158] ___sys_sendmsg+0x21f/0x2a0 [ 450.226888][T18158] ? __pfx____sys_sendmsg+0x10/0x10 [ 450.226944][T18158] ? __fget_files+0x2a/0x420 [ 450.226964][T18158] ? __fget_files+0x3a0/0x420 [ 450.226995][T18158] __x64_sys_sendmsg+0x19b/0x260 [ 450.227017][T18158] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 450.227049][T18158] ? rcu_is_watching+0x15/0xb0 [ 450.227082][T18158] do_syscall_64+0xfa/0xfa0 [ 450.227104][T18158] ? lockdep_hardirqs_on+0x9c/0x150 [ 450.227126][T18158] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.227143][T18158] ? clear_bhb_loop+0x60/0xb0 [ 450.227165][T18158] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.227182][T18158] RIP: 0033:0x7f3921b8efc9 [ 450.227200][T18158] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 450.227215][T18158] RSP: 002b:00007f3922a64038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 450.227236][T18158] RAX: ffffffffffffffda RBX: 00007f3921de5fa0 RCX: 00007f3921b8efc9 [ 450.227251][T18158] RDX: 000000000000c010 RSI: 0000200000000040 RDI: 0000000000000003 [ 450.227271][T18158] RBP: 00007f3922a64090 R08: 0000000000000000 R09: 0000000000000000 [ 450.227282][T18158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 450.227293][T18158] R13: 00007f3921de6038 R14: 00007f3921de5fa0 R15: 00007fff253be208 [ 450.227325][T18158] [ 450.819739][T18147] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.049372][T18147] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.268005][T15376] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.342480][T15376] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.351261][T15376] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.365767][T18176] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 451.396587][ T1093] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.453408][T18180] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3672'. [ 451.462620][T18180] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3672'. [ 451.472879][T18180] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3672'. [ 451.565992][T18187] syzkaller1: entered promiscuous mode [ 451.574980][T18187] syzkaller1: entered allmulticast mode [ 451.943524][T18208] vlan2: entered promiscuous mode [ 452.210358][T18216] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3684'. [ 452.436916][T18227] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3686'. [ 452.466394][T18227] IPVS: Error connecting to the multicast addr [ 452.754693][T18241] netlink: 248 bytes leftover after parsing attributes in process `syz.0.3692'. [ 452.939024][T18248] vlan2: entered promiscuous mode [ 453.017693][T18250] syzkaller1: entered promiscuous mode [ 453.023476][T18250] syzkaller1: entered allmulticast mode [ 453.229848][T18265] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.393176][T18265] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.467429][T18265] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.559123][T18265] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.100814][T18307] rdma_op ffff8880687bb1f0 conn xmit_rdma 0000000000000000 [ 454.374285][T18324] bridge0: vlan filtering disabled, automatically disabling multicast vlan snooping [ 454.514314][T18332] vlan2: entered promiscuous mode [ 454.560321][T18337] __nla_validate_parse: 6 callbacks suppressed [ 454.560337][T18337] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3728'. [ 454.579195][T18336] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3727'. [ 454.870342][T18358] Bluetooth: MGMT ver 1.23 [ 454.929856][ T7326] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.944264][ T7326] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.982292][ T4484] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.044847][ T1093] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.105075][T18358] wlan1 speed is unknown, defaulting to 1000 [ 455.243029][T18377] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3741'. [ 455.260135][T18377] netlink: 'syz.0.3741': attribute type 16 has an invalid length. [ 455.268976][T18377] netlink: 'syz.0.3741': attribute type 17 has an invalid length. [ 455.340048][T18381] IPv6: NLM_F_REPLACE set, but no existing node found! [ 455.449437][T18377] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.624627][T18377] veth1_vlan: left allmulticast mode [ 455.686765][T18380] vlan2: entered promiscuous mode [ 455.762085][T15376] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.770885][T15376] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.818227][T15376] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.844662][T15376] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.880713][T18389] wlan1 speed is unknown, defaulting to 1000 [ 455.926595][T18358] wg1 speed is unknown, defaulting to 1000 [ 455.953359][T18358] lo speed is unknown, defaulting to 1000 [ 456.093174][T18401] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3750'. [ 456.102359][T18401] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3750'. [ 456.148127][T18404] 8021q: VLANs not supported on vcan0 [ 456.154919][T18405] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3752'. [ 456.216383][T18405] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3752'. [ 456.245305][T18405] hsr_slave_0: left promiscuous mode [ 456.257426][T18405] hsr_slave_1: left promiscuous mode [ 456.280843][T18408] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3754'. [ 456.334942][T18409] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3753'. [ 456.366311][T18389] wg1 speed is unknown, defaulting to 1000 [ 456.458875][T18389] lo speed is unknown, defaulting to 1000 [ 456.802670][T18424] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3760'. [ 456.852657][T18426] FAULT_INJECTION: forcing a failure. [ 456.852657][T18426] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 456.884516][T18426] CPU: 1 UID: 0 PID: 18426 Comm: syz.0.3761 Not tainted syzkaller #0 PREEMPT(full) [ 456.884547][T18426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 456.884558][T18426] Call Trace: [ 456.884566][T18426] [ 456.884575][T18426] dump_stack_lvl+0x189/0x250 [ 456.884599][T18426] ? __pfx____ratelimit+0x10/0x10 [ 456.884623][T18426] ? __pfx_dump_stack_lvl+0x10/0x10 [ 456.884642][T18426] ? __pfx__printk+0x10/0x10 [ 456.884685][T18426] should_fail_ex+0x414/0x560 [ 456.884709][T18426] _copy_to_user+0x31/0xb0 [ 456.884737][T18426] simple_read_from_buffer+0xe1/0x170 [ 456.884764][T18426] proc_fail_nth_read+0x1b3/0x220 [ 456.884787][T18426] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 456.884808][T18426] ? rw_verify_area+0x2a6/0x4d0 [ 456.884826][T18426] ? __lock_acquire+0xab9/0xd20 [ 456.884846][T18426] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 456.884867][T18426] vfs_read+0x200/0xa30 [ 456.884885][T18426] ? fdget_pos+0x247/0x320 [ 456.884912][T18426] ? __pfx___mutex_lock+0x10/0x10 [ 456.884936][T18426] ? __pfx_vfs_read+0x10/0x10 [ 456.884957][T18426] ? __fget_files+0x2a/0x420 [ 456.884983][T18426] ? __fget_files+0x3a0/0x420 [ 456.885000][T18426] ? __fget_files+0x2a/0x420 [ 456.885026][T18426] ksys_read+0x145/0x250 [ 456.885047][T18426] ? __pfx_ksys_read+0x10/0x10 [ 456.885070][T18426] ? do_syscall_64+0xbe/0xfa0 [ 456.885096][T18426] do_syscall_64+0xfa/0xfa0 [ 456.885116][T18426] ? lockdep_hardirqs_on+0x9c/0x150 [ 456.885138][T18426] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.885155][T18426] ? clear_bhb_loop+0x60/0xb0 [ 456.885178][T18426] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.885195][T18426] RIP: 0033:0x7f4bd838d9dc [ 456.885213][T18426] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 456.885227][T18426] RSP: 002b:00007f4bd92a6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 456.885248][T18426] RAX: ffffffffffffffda RBX: 00007f4bd85e5fa0 RCX: 00007f4bd838d9dc [ 456.885262][T18426] RDX: 000000000000000f RSI: 00007f4bd92a60a0 RDI: 0000000000000008 [ 456.885274][T18426] RBP: 00007f4bd92a6090 R08: 0000000000000000 R09: 0000000000000000 [ 456.885285][T18426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 456.885295][T18426] R13: 00007f4bd85e6038 R14: 00007f4bd85e5fa0 R15: 00007fff951949d8 [ 456.885325][T18426] [ 457.135461][T18432] netlink: 'syz.2.3763': attribute type 1 has an invalid length. [ 457.172670][T18432] bond4: entered promiscuous mode [ 457.178752][T18432] 8021q: adding VLAN 0 to HW filter on device bond4 [ 457.202542][T18435] 8021q: VLANs not supported on vcan0 [ 457.369947][T18444] netlink: 'syz.0.3766': attribute type 4 has an invalid length. [ 458.031097][T18457] bridge_slave_1: left allmulticast mode [ 458.076956][T18457] bridge_slave_1: left promiscuous mode [ 458.096859][T18457] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.150421][T18457] bridge_slave_0: left allmulticast mode [ 458.167191][T18457] bridge_slave_0: left promiscuous mode [ 458.188866][T18457] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.391390][T18488] netlink: 'syz.1.3780': attribute type 1 has an invalid length. [ 458.670490][T18488] bond2: entered promiscuous mode [ 458.685893][T18488] 8021q: adding VLAN 0 to HW filter on device bond2 [ 458.994102][T18506] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 459.039535][T18512] wlan1 speed is unknown, defaulting to 1000 [ 459.387575][T18512] wg1 speed is unknown, defaulting to 1000 [ 459.395512][T18512] lo speed is unknown, defaulting to 1000 [ 459.607668][T18531] __nla_validate_parse: 8 callbacks suppressed [ 459.607686][T18531] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3797'. [ 459.657317][T18531] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3797'. [ 459.725836][T18538] FAULT_INJECTION: forcing a failure. [ 459.725836][T18538] name failslab, interval 1, probability 0, space 0, times 0 [ 459.769252][T18537] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3799'. [ 459.791990][T18538] CPU: 1 UID: 0 PID: 18538 Comm: syz.2.3800 Not tainted syzkaller #0 PREEMPT(full) [ 459.792017][T18538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 459.792029][T18538] Call Trace: [ 459.792037][T18538] [ 459.792046][T18538] dump_stack_lvl+0x189/0x250 [ 459.792071][T18538] ? __pfx____ratelimit+0x10/0x10 [ 459.792095][T18538] ? __pfx_dump_stack_lvl+0x10/0x10 [ 459.792114][T18538] ? __pfx__printk+0x10/0x10 [ 459.792141][T18538] ? __pfx___might_resched+0x10/0x10 [ 459.792165][T18538] ? fs_reclaim_acquire+0x7d/0x100 [ 459.792192][T18538] should_fail_ex+0x414/0x560 [ 459.792216][T18538] should_failslab+0xa8/0x100 [ 459.792241][T18538] __kvmalloc_node_noprof+0x158/0x910 [ 459.792265][T18538] ? alloc_netdev_mqs+0x8a6/0x11b0 [ 459.792294][T18538] alloc_netdev_mqs+0x8a6/0x11b0 [ 459.792325][T18538] rtnl_create_link+0x31f/0xd10 [ 459.792355][T18538] rtnl_newlink_create+0x25c/0xb00 [ 459.792381][T18538] ? __lock_acquire+0xab9/0xd20 [ 459.792410][T18538] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 459.792434][T18538] ? __pfx___mutex_lock+0x10/0x10 [ 459.792470][T18538] ? ns_capable+0x8a/0xf0 [ 459.792497][T18538] rtnl_newlink+0x16e4/0x1c80 [ 459.792517][T18538] ? ____sys_sendmsg+0x505/0x830 [ 459.792550][T18538] ? __pfx_rtnl_newlink+0x10/0x10 [ 459.792592][T18538] ? kasan_quarantine_put+0xdd/0x220 [ 459.792611][T18538] ? lockdep_hardirqs_on+0x9c/0x150 [ 459.792641][T18538] ? nlmon_xmit+0xb0/0x100 [ 459.792661][T18538] ? kmem_cache_free+0x19b/0x690 [ 459.792692][T18538] ? __local_bh_enable_ip+0x12d/0x1c0 [ 459.792716][T18538] ? lockdep_hardirqs_on+0x9c/0x150 [ 459.792739][T18538] ? __local_bh_enable_ip+0x12d/0x1c0 [ 459.792769][T18538] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 459.792797][T18538] ? __dev_queue_xmit+0x284/0x3740 [ 459.792822][T18538] ? __dev_queue_xmit+0x284/0x3740 [ 459.792843][T18538] ? __dev_queue_xmit+0x1bfb/0x3740 [ 459.792874][T18538] ? __lock_acquire+0xab9/0xd20 [ 459.792923][T18538] ? __pfx_rtnl_newlink+0x10/0x10 [ 459.792940][T18538] rtnetlink_rcv_msg+0x7cf/0xb70 [ 459.792970][T18538] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 459.792994][T18538] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 459.793022][T18538] ? ref_tracker_free+0x63a/0x7d0 [ 459.793042][T18538] ? __asan_memcpy+0x40/0x70 [ 459.793060][T18538] ? __pfx_ref_tracker_free+0x10/0x10 [ 459.793092][T18538] netlink_rcv_skb+0x208/0x470 [ 459.793113][T18538] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 459.793141][T18538] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 459.793173][T18538] ? netlink_deliver_tap+0x2e/0x1b0 [ 459.793201][T18538] netlink_unicast+0x82f/0x9e0 [ 459.793236][T18538] ? __pfx_netlink_unicast+0x10/0x10 [ 459.793264][T18538] ? netlink_sendmsg+0x642/0xb30 [ 459.793281][T18538] ? skb_put+0x11b/0x210 [ 459.793304][T18538] netlink_sendmsg+0x805/0xb30 [ 459.793334][T18538] ? __pfx_netlink_sendmsg+0x10/0x10 [ 459.793357][T18538] ? aa_sock_msg_perm+0xf1/0x1d0 [ 459.793381][T18538] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 459.793403][T18538] ? __pfx_netlink_sendmsg+0x10/0x10 [ 459.793423][T18538] __sock_sendmsg+0x21c/0x270 [ 459.793451][T18538] ____sys_sendmsg+0x505/0x830 [ 459.793478][T18538] ? __pfx_____sys_sendmsg+0x10/0x10 [ 459.793509][T18538] ? import_iovec+0x74/0xa0 [ 459.793537][T18538] ___sys_sendmsg+0x21f/0x2a0 [ 459.793560][T18538] ? __pfx____sys_sendmsg+0x10/0x10 [ 459.793621][T18538] ? __fget_files+0x2a/0x420 [ 459.793642][T18538] ? __fget_files+0x3a0/0x420 [ 459.793675][T18538] __x64_sys_sendmsg+0x19b/0x260 [ 459.793699][T18538] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 459.793730][T18538] ? __pfx_ksys_write+0x10/0x10 [ 459.793760][T18538] ? do_syscall_64+0xbe/0xfa0 [ 459.793787][T18538] do_syscall_64+0xfa/0xfa0 [ 459.793809][T18538] ? lockdep_hardirqs_on+0x9c/0x150 [ 459.793830][T18538] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.793849][T18538] ? clear_bhb_loop+0x60/0xb0 [ 459.793872][T18538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.793890][T18538] RIP: 0033:0x7faab4f8efc9 [ 459.793907][T18538] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 459.793922][T18538] RSP: 002b:00007faab5d97038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 459.793943][T18538] RAX: ffffffffffffffda RBX: 00007faab51e5fa0 RCX: 00007faab4f8efc9 [ 459.793956][T18538] RDX: 0000000000004000 RSI: 0000200000000400 RDI: 0000000000000003 [ 459.793969][T18538] RBP: 00007faab5d97090 R08: 0000000000000000 R09: 0000000000000000 [ 459.793980][T18538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 459.793992][T18538] R13: 00007faab51e6038 R14: 00007faab51e5fa0 R15: 00007ffeab97e0d8 [ 459.794026][T18538] [ 460.254330][T18541] FAULT_INJECTION: forcing a failure. [ 460.254330][T18541] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 460.267800][T18541] CPU: 1 UID: 0 PID: 18541 Comm: syz.0.3801 Not tainted syzkaller #0 PREEMPT(full) [ 460.267826][T18541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 460.267837][T18541] Call Trace: [ 460.267845][T18541] [ 460.267853][T18541] dump_stack_lvl+0x189/0x250 [ 460.267876][T18541] ? __pfx____ratelimit+0x10/0x10 [ 460.267894][T18541] ? __pfx_dump_stack_lvl+0x10/0x10 [ 460.267910][T18541] ? __pfx__printk+0x10/0x10 [ 460.267925][T18541] ? __might_fault+0xb0/0x130 [ 460.267950][T18541] should_fail_ex+0x414/0x560 [ 460.267968][T18541] _copy_from_user+0x2d/0xb0 [ 460.267987][T18541] kstrtouint_from_user+0xc4/0x170 [ 460.268005][T18541] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 460.268035][T18541] proc_fail_nth_write+0x88/0x200 [ 460.268049][T18541] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 460.268067][T18541] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 460.268082][T18541] vfs_write+0x27e/0xb30 [ 460.268105][T18541] ? __pfx_vfs_write+0x10/0x10 [ 460.268122][T18541] ? __fget_files+0x2a/0x420 [ 460.268143][T18541] ? __fget_files+0x3a0/0x420 [ 460.268159][T18541] ? __fget_files+0x2a/0x420 [ 460.268183][T18541] ksys_write+0x145/0x250 [ 460.268200][T18541] ? __pfx_ksys_write+0x10/0x10 [ 460.268218][T18541] ? do_syscall_64+0xbe/0xfa0 [ 460.268239][T18541] do_syscall_64+0xfa/0xfa0 [ 460.268256][T18541] ? lockdep_hardirqs_on+0x9c/0x150 [ 460.268273][T18541] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.268287][T18541] ? clear_bhb_loop+0x60/0xb0 [ 460.268304][T18541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.268318][T18541] RIP: 0033:0x7f4bd838da7f [ 460.268332][T18541] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 460.268344][T18541] RSP: 002b:00007f4bd9285030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 460.268360][T18541] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4bd838da7f [ 460.268371][T18541] RDX: 0000000000000001 RSI: 00007f4bd92850a0 RDI: 0000000000000005 [ 460.268380][T18541] RBP: 00007f4bd9285090 R08: 0000000000000000 R09: 0000000000000000 [ 460.268389][T18541] R10: 0000000002040000 R11: 0000000000000293 R12: 0000000000000001 [ 460.268398][T18541] R13: 00007f4bd85e6128 R14: 00007f4bd85e6090 R15: 00007fff951949d8 [ 460.268424][T18541] [ 460.928365][T18564] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3810'. [ 460.979010][T18564] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3810'. [ 461.029015][T18565] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3811'. [ 461.164686][T18567] wlan1 speed is unknown, defaulting to 1000 [ 461.307046][T18575] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3813'. [ 461.401121][T18575] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3813'. [ 461.433035][T18583] batadv_slave_0: left promiscuous mode [ 461.442388][T18584] Cannot find add_set index 4 as target [ 461.455131][T18581] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3816'. [ 461.467950][T18583] macvlan0: left allmulticast mode [ 461.487290][T18583] macvtap1: left promiscuous mode [ 461.497397][T18583] macvtap1: left allmulticast mode [ 461.502782][T18583] bond1: left promiscuous mode [ 461.507935][T18583] macvtap2: left promiscuous mode [ 461.512960][T18583] macvtap2: left allmulticast mode [ 461.531606][T18567] wg1 speed is unknown, defaulting to 1000 [ 461.540219][T18567] lo speed is unknown, defaulting to 1000 [ 461.620066][T18577] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3813'. [ 461.679108][T18577] hsr_slave_0: left promiscuous mode [ 461.687576][T18577] hsr_slave_1: left promiscuous mode [ 461.939234][ T7326] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 461.958841][ T5944] IPVS: starting estimator thread 0... [ 461.966610][T18604] IPVS: lc: FWM 3 0x00000003 - no destination available [ 461.973962][ T7326] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 462.065757][T18606] IPVS: using max 35 ests per chain, 84000 per kthread [ 462.332795][T18618] vlan2: entered promiscuous mode [ 462.444647][T18619] ªªªªªª: renamed from wg2 (while UP) [ 462.483792][T18625] wlan1 speed is unknown, defaulting to 1000 [ 462.888119][T18633] wlan1 speed is unknown, defaulting to 1000 [ 462.906000][T18625] wg1 speed is unknown, defaulting to 1000 [ 462.913484][T18625] lo speed is unknown, defaulting to 1000 [ 462.954275][T18643] netlink: 'syz.2.3835': attribute type 1 has an invalid length. [ 463.141398][T18648] syzkaller1: entered promiscuous mode [ 463.147237][T18648] syzkaller1: entered allmulticast mode [ 463.176898][T18648] block nbd0: not configured, cannot reconfigure [ 463.267194][T18636] wlan1 speed is unknown, defaulting to 1000 [ 463.369326][T18652] syzkaller1: entered promiscuous mode [ 463.375319][T18652] syzkaller1: entered allmulticast mode [ 463.581121][T18633] wg1 speed is unknown, defaulting to 1000 [ 463.643117][T18633] lo speed is unknown, defaulting to 1000 [ 463.643131][T18636] wg1 speed is unknown, defaulting to 1000 [ 463.691862][T18636] lo speed is unknown, defaulting to 1000 [ 464.173864][T18661] ªªªªªª: renamed from wg2 [ 464.619213][T18681] wlan1 speed is unknown, defaulting to 1000 [ 465.106267][T18681] wg1 speed is unknown, defaulting to 1000 [ 465.106312][T18688] wlan1 speed is unknown, defaulting to 1000 [ 465.114240][T18681] lo speed is unknown, defaulting to 1000 [ 465.175541][T18695] __nla_validate_parse: 8 callbacks suppressed [ 465.175559][T18695] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3851'. [ 465.428955][T18688] wg1 speed is unknown, defaulting to 1000 [ 465.436734][T18688] lo speed is unknown, defaulting to 1000 [ 465.457969][T18693] wlan1 speed is unknown, defaulting to 1000 [ 465.584417][T18719] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3858'. [ 465.606366][T18719] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3858'. [ 465.667205][T18718] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 465.783057][T18693] wg1 speed is unknown, defaulting to 1000 [ 465.783619][T18714] wlan1 speed is unknown, defaulting to 1000 [ 465.790815][T18693] lo speed is unknown, defaulting to 1000 [ 465.992316][T18714] wg1 speed is unknown, defaulting to 1000 [ 465.999362][T18714] lo speed is unknown, defaulting to 1000 [ 466.006443][T18716] siw: device registration error -23 [ 466.434679][T18732] netlink: 'syz.3.3862': attribute type 1 has an invalid length. [ 466.487758][T18734] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3864'. [ 466.583469][T18734] FAULT_INJECTION: forcing a failure. [ 466.583469][T18734] name failslab, interval 1, probability 0, space 0, times 0 [ 466.646972][T18734] CPU: 0 UID: 0 PID: 18734 Comm: syz.0.3864 Not tainted syzkaller #0 PREEMPT(full) [ 466.647000][T18734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 466.647011][T18734] Call Trace: [ 466.647019][T18734] [ 466.647028][T18734] dump_stack_lvl+0x189/0x250 [ 466.647053][T18734] ? __pfx____ratelimit+0x10/0x10 [ 466.647079][T18734] ? __pfx_dump_stack_lvl+0x10/0x10 [ 466.647097][T18734] ? __pfx__printk+0x10/0x10 [ 466.647124][T18734] ? __pfx___might_resched+0x10/0x10 [ 466.647147][T18734] ? fs_reclaim_acquire+0x7d/0x100 [ 466.647174][T18734] should_fail_ex+0x414/0x560 [ 466.647198][T18734] should_failslab+0xa8/0x100 [ 466.647224][T18734] __kvmalloc_node_noprof+0x158/0x910 [ 466.647247][T18734] ? alloc_netdev_mqs+0xa6/0x11b0 [ 466.647278][T18734] alloc_netdev_mqs+0xa6/0x11b0 [ 466.647299][T18734] ? __pfx_macvlan_setup+0x10/0x10 [ 466.647315][T18734] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 466.647343][T18734] rtnl_create_link+0x31f/0xd10 [ 466.647373][T18734] rtnl_newlink_create+0x25c/0xb00 [ 466.647400][T18734] ? __mutex_lock+0x5bb/0x1350 [ 466.647429][T18734] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 466.647453][T18734] ? __pfx___mutex_lock+0x10/0x10 [ 466.647488][T18734] ? ns_capable+0x8a/0xf0 [ 466.647516][T18734] rtnl_newlink+0x16e4/0x1c80 [ 466.647552][T18734] ? __pfx_rtnl_newlink+0x10/0x10 [ 466.647576][T18734] ? is_bpf_text_address+0x26/0x2b0 [ 466.647606][T18734] ? is_bpf_text_address+0x292/0x2b0 [ 466.647629][T18734] ? is_bpf_text_address+0x26/0x2b0 [ 466.647659][T18734] ? __lock_acquire+0xab9/0xd20 [ 466.647695][T18734] ? __lock_acquire+0xab9/0xd20 [ 466.647740][T18734] ? is_bpf_text_address+0x26/0x2b0 [ 466.647769][T18734] ? is_bpf_text_address+0x292/0x2b0 [ 466.647792][T18734] ? is_bpf_text_address+0x26/0x2b0 [ 466.647825][T18734] ? __lock_acquire+0xab9/0xd20 [ 466.647882][T18734] ? __pfx_rtnl_newlink+0x10/0x10 [ 466.647898][T18734] rtnetlink_rcv_msg+0x7cf/0xb70 [ 466.647924][T18734] ? __lock_acquire+0xab9/0xd20 [ 466.647948][T18734] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 466.647973][T18734] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 466.648019][T18734] netlink_rcv_skb+0x208/0x470 [ 466.648036][T18734] ? __lock_acquire+0xab9/0xd20 [ 466.648059][T18734] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 466.648086][T18734] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 466.648119][T18734] ? netlink_deliver_tap+0x2e/0x1b0 [ 466.648147][T18734] netlink_unicast+0x82f/0x9e0 [ 466.648183][T18734] ? __pfx_netlink_unicast+0x10/0x10 [ 466.648210][T18734] ? netlink_sendmsg+0x642/0xb30 [ 466.648227][T18734] ? skb_put+0x11b/0x210 [ 466.648250][T18734] netlink_sendmsg+0x805/0xb30 [ 466.648285][T18734] ? __pfx_netlink_sendmsg+0x10/0x10 [ 466.648308][T18734] ? aa_sock_msg_perm+0xf1/0x1d0 [ 466.648331][T18734] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 466.648353][T18734] ? __pfx_netlink_sendmsg+0x10/0x10 [ 466.648373][T18734] __sock_sendmsg+0x21c/0x270 [ 466.648401][T18734] ____sys_sendmsg+0x505/0x830 [ 466.648428][T18734] ? __pfx_____sys_sendmsg+0x10/0x10 [ 466.648459][T18734] ? import_iovec+0x74/0xa0 [ 466.648488][T18734] ___sys_sendmsg+0x21f/0x2a0 [ 466.648516][T18734] ? __pfx____sys_sendmsg+0x10/0x10 [ 466.648579][T18734] ? __fget_files+0x2a/0x420 [ 466.648600][T18734] ? __fget_files+0x3a0/0x420 [ 466.648633][T18734] __x64_sys_sendmsg+0x19b/0x260 [ 466.648657][T18734] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 466.648690][T18734] ? __pfx_ksys_write+0x10/0x10 [ 466.648715][T18734] ? do_syscall_64+0xbe/0xfa0 [ 466.648742][T18734] do_syscall_64+0xfa/0xfa0 [ 466.648763][T18734] ? lockdep_hardirqs_on+0x9c/0x150 [ 466.648785][T18734] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.648803][T18734] ? clear_bhb_loop+0x60/0xb0 [ 466.648826][T18734] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.648850][T18734] RIP: 0033:0x7f4bd838efc9 [ 466.648867][T18734] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 466.648883][T18734] RSP: 002b:00007f4bd92a6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 466.648903][T18734] RAX: ffffffffffffffda RBX: 00007f4bd85e5fa0 RCX: 00007f4bd838efc9 [ 466.648917][T18734] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 466.648935][T18734] RBP: 00007f4bd92a6090 R08: 0000000000000000 R09: 0000000000000000 [ 466.648947][T18734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 466.648958][T18734] R13: 00007f4bd85e6038 R14: 00007f4bd85e5fa0 R15: 00007fff951949d8 [ 466.648997][T18734] [ 467.578885][T18753] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3872'. [ 467.616015][T18755] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3873'. [ 467.670100][T18759] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3873'. [ 467.734973][T18764] netlink: 'syz.4.3876': attribute type 1 has an invalid length. [ 467.743419][T18764] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3876'. [ 468.038814][T18773] wlan1 speed is unknown, defaulting to 1000 [ 468.087287][T18779] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 468.105635][ T5944] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.235747][ T5944] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.608441][T18786] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 468.916367][T18795] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3885'. [ 469.067114][T18787] wlan1 speed is unknown, defaulting to 1000 [ 469.074267][T18773] wg1 speed is unknown, defaulting to 1000 [ 469.092497][T18773] lo speed is unknown, defaulting to 1000 [ 469.388601][ T5842] Bluetooth: hci4: link tx timeout [ 469.395540][ T5842] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 469.429995][T18788] wlan1 speed is unknown, defaulting to 1000 [ 469.558786][T18788] wg1 speed is unknown, defaulting to 1000 [ 469.567188][T18788] lo speed is unknown, defaulting to 1000 [ 469.576057][T18787] wg1 speed is unknown, defaulting to 1000 [ 469.597501][T18787] lo speed is unknown, defaulting to 1000 [ 470.916458][T18871] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3909'. [ 470.933190][T18871] erspan0: entered promiscuous mode [ 470.938707][T18871] macsec1: entered allmulticast mode [ 470.943990][T18871] erspan0: entered allmulticast mode [ 470.951435][T18871] bridge0: port 1(macsec1) entered blocking state [ 470.958090][T18871] bridge0: port 1(macsec1) entered disabled state [ 470.967168][T18871] macsec1: entered promiscuous mode [ 470.974405][T18871] bridge0: port 1(macsec1) entered blocking state [ 470.981221][T18871] bridge0: port 1(macsec1) entered forwarding state [ 471.151258][T18883] RDS: rds_bind could not find a transport for ::ffff:172.30.0.1, load rds_tcp or rds_rdma? [ 471.240775][T18882] wlan1 speed is unknown, defaulting to 1000 [ 471.475116][ T5149] Bluetooth: hci4: command 0x0405 tx timeout [ 471.733071][T18899] vlan2: entered promiscuous mode [ 471.814248][T18901] netlink: 'syz.4.3917': attribute type 2 has an invalid length. [ 471.816367][T18882] wg1 speed is unknown, defaulting to 1000 [ 471.825722][T18901] FAULT_INJECTION: forcing a failure. [ 471.825722][T18901] name failslab, interval 1, probability 0, space 0, times 0 [ 471.829973][T18882] lo speed is unknown, defaulting to 1000 [ 471.841713][T18901] CPU: 1 UID: 0 PID: 18901 Comm: syz.4.3917 Not tainted syzkaller #0 PREEMPT(full) [ 471.841741][T18901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 471.841753][T18901] Call Trace: [ 471.841761][T18901] [ 471.841770][T18901] dump_stack_lvl+0x189/0x250 [ 471.841796][T18901] ? __pfx____ratelimit+0x10/0x10 [ 471.841827][T18901] ? __pfx_dump_stack_lvl+0x10/0x10 [ 471.841847][T18901] ? __pfx__printk+0x10/0x10 [ 471.841874][T18901] ? __pfx___might_resched+0x10/0x10 [ 471.841899][T18901] ? fs_reclaim_acquire+0x7d/0x100 [ 471.841927][T18901] should_fail_ex+0x414/0x560 [ 471.841951][T18901] should_failslab+0xa8/0x100 [ 471.841977][T18901] __kmalloc_cache_noprof+0x6f/0x6f0 [ 471.842001][T18901] ? __asan_memset+0x22/0x50 [ 471.842017][T18901] ? alloc_netdev_mqs+0xbf8/0x11b0 [ 471.842052][T18901] alloc_netdev_mqs+0xbf8/0x11b0 [ 471.842082][T18901] internal_dev_create+0x8b/0x470 [ 471.842113][T18901] ovs_vport_add+0x113/0x370 [ 471.842134][T18901] ? new_vport+0x12/0x190 [ 471.842158][T18901] new_vport+0x1a/0x190 [ 471.842182][T18901] ovs_dp_cmd_new+0x69f/0xaf0 [ 471.842215][T18901] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 471.842245][T18901] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 471.842278][T18901] genl_family_rcv_msg_doit+0x215/0x300 [ 471.842307][T18901] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 471.842343][T18901] ? bpf_lsm_capable+0x9/0x20 [ 471.842359][T18901] ? security_capable+0x7e/0x2e0 [ 471.842386][T18901] genl_rcv_msg+0x60e/0x790 [ 471.842426][T18901] ? __pfx_genl_rcv_msg+0x10/0x10 [ 471.842449][T18901] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 471.842472][T18901] ? __asan_memcpy+0x40/0x70 [ 471.842489][T18901] ? __pfx_ref_tracker_free+0x10/0x10 [ 471.842516][T18901] netlink_rcv_skb+0x208/0x470 [ 471.842532][T18901] ? __lock_acquire+0xab9/0xd20 [ 471.842555][T18901] ? __pfx_genl_rcv_msg+0x10/0x10 [ 471.842578][T18901] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 471.842618][T18901] ? down_read+0x1ad/0x2e0 [ 471.842645][T18901] genl_rcv+0x28/0x40 [ 471.842665][T18901] netlink_unicast+0x82f/0x9e0 [ 471.842699][T18901] ? __pfx_netlink_unicast+0x10/0x10 [ 471.842726][T18901] ? netlink_sendmsg+0x642/0xb30 [ 471.842746][T18901] ? skb_put+0x11b/0x210 [ 471.842779][T18901] netlink_sendmsg+0x805/0xb30 [ 471.842807][T18901] ? __pfx_netlink_sendmsg+0x10/0x10 [ 471.842831][T18901] ? aa_sock_msg_perm+0xf1/0x1d0 [ 471.842859][T18901] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 471.842881][T18901] ? __pfx_netlink_sendmsg+0x10/0x10 [ 471.842901][T18901] __sock_sendmsg+0x21c/0x270 [ 471.842928][T18901] ____sys_sendmsg+0x505/0x830 [ 471.842954][T18901] ? __pfx_____sys_sendmsg+0x10/0x10 [ 471.842985][T18901] ? import_iovec+0x74/0xa0 [ 471.843015][T18901] ___sys_sendmsg+0x21f/0x2a0 [ 471.843038][T18901] ? __pfx____sys_sendmsg+0x10/0x10 [ 471.843099][T18901] ? __fget_files+0x2a/0x420 [ 471.843119][T18901] ? __fget_files+0x3a0/0x420 [ 471.843151][T18901] __x64_sys_sendmsg+0x19b/0x260 [ 471.843185][T18901] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 471.843215][T18901] ? __pfx_ksys_write+0x10/0x10 [ 471.843240][T18901] ? do_syscall_64+0xbe/0xfa0 [ 471.843267][T18901] do_syscall_64+0xfa/0xfa0 [ 471.843287][T18901] ? lockdep_hardirqs_on+0x9c/0x150 [ 471.843309][T18901] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.843326][T18901] ? clear_bhb_loop+0x60/0xb0 [ 471.843353][T18901] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.843371][T18901] RIP: 0033:0x7f7e34b8efc9 [ 471.843389][T18901] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 471.843411][T18901] RSP: 002b:00007f7e3598d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 471.843432][T18901] RAX: ffffffffffffffda RBX: 00007f7e34de5fa0 RCX: 00007f7e34b8efc9 [ 471.843446][T18901] RDX: 000000000000c000 RSI: 0000200000000040 RDI: 0000000000000003 [ 471.843458][T18901] RBP: 00007f7e3598d090 R08: 0000000000000000 R09: 0000000000000000 [ 471.843469][T18901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 471.843480][T18901] R13: 00007f7e34de6038 R14: 00007f7e34de5fa0 R15: 00007ffcb253ad18 [ 471.843514][T18901] [ 472.485835][T18918] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3923'. [ 472.507931][T18918] macvtap2: entered promiscuous mode [ 472.513515][T18918] macvtap2: entered allmulticast mode [ 472.519475][T18918] bond0: entered allmulticast mode [ 472.524613][T18918] bond_slave_0: entered allmulticast mode [ 472.539679][T18918] bond_slave_1: entered allmulticast mode [ 472.546877][T18918] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 472.554476][T18922] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3923'. [ 472.698606][T18927] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3922'. [ 472.718310][T18922] bond0: left allmulticast mode [ 472.723224][T18922] bond_slave_0: left allmulticast mode [ 472.735460][T18922] bond_slave_1: left allmulticast mode [ 472.817052][T18933] 8021q: VLANs not supported on vcan0 [ 472.926818][T18938] netlink: 'syz.1.3928': attribute type 2 has an invalid length. [ 472.941902][T18938] netlink: 200 bytes leftover after parsing attributes in process `syz.1.3928'. [ 473.278693][T18947] wlan1 speed is unknown, defaulting to 1000 [ 473.411674][T18953] x_tables: unsorted underflow at hook 2 [ 473.457190][T18953] x_tables: unsorted underflow at hook 2 [ 473.556492][ T5149] Bluetooth: hci4: command 0x0405 tx timeout [ 473.600666][T18960] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3935'. [ 473.745328][T18965] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3937'. [ 473.767867][T18965] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3937'. [ 473.846849][T18959] wg1: left promiscuous mode [ 473.851488][T18959] wg1: left allmulticast mode [ 473.908876][T18959] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 473.926894][T18959] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 473.936880][T18968] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3938'. [ 474.028966][T18959] mac80211_hwsim hwsim18 wlan0: left promiscuous mode [ 474.037179][T18959] ip6gre1: left promiscuous mode [ 474.044097][T18959] ip6erspan0: left allmulticast mode [ 474.050305][T18959] bond2: left promiscuous mode [ 474.060930][T18947] wg1 speed is unknown, defaulting to 1000 [ 474.061723][T15378] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.077940][T15378] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.097248][T18947] lo speed is unknown, defaulting to 1000 [ 474.097668][T15378] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.133092][T15378] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.193890][T18973] netlink: 'syz.4.3940': attribute type 4 has an invalid length. [ 474.211496][T18970] wlan1 speed is unknown, defaulting to 1000 [ 474.231314][T18973] netlink: 'syz.4.3940': attribute type 4 has an invalid length. [ 474.328581][T18977] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3941'. [ 474.541478][T18970] wg1 speed is unknown, defaulting to 1000 [ 474.605509][T18970] lo speed is unknown, defaulting to 1000 [ 474.955806][T18997] vlan4: entered promiscuous mode [ 475.018386][T18998] netem: unknown loss type 4 [ 475.023585][T18998] netem: change failed [ 475.568020][T19022] netlink: 'syz.1.3954': attribute type 1 has an invalid length. [ 475.803140][T19034] vlan3: entered promiscuous mode [ 475.956370][T19045] __nla_validate_parse: 6 callbacks suppressed [ 475.956389][T19045] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3963'. [ 476.141034][T19049] wlan1 speed is unknown, defaulting to 1000 [ 476.186479][T19056] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3967'. [ 476.339329][T19063] FAULT_INJECTION: forcing a failure. [ 476.339329][T19063] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 476.362986][T19063] CPU: 1 UID: 0 PID: 19063 Comm: syz.1.3970 Not tainted syzkaller #0 PREEMPT(full) [ 476.363021][T19063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 476.363033][T19063] Call Trace: [ 476.363041][T19063] [ 476.363051][T19063] dump_stack_lvl+0x189/0x250 [ 476.363076][T19063] ? __pfx____ratelimit+0x10/0x10 [ 476.363099][T19063] ? __pfx_dump_stack_lvl+0x10/0x10 [ 476.363118][T19063] ? __pfx__printk+0x10/0x10 [ 476.363138][T19063] ? __might_fault+0xb0/0x130 [ 476.363170][T19063] should_fail_ex+0x414/0x560 [ 476.363194][T19063] _copy_from_user+0x2d/0xb0 [ 476.363220][T19063] ___sys_sendmsg+0x158/0x2a0 [ 476.363244][T19063] ? __pfx____sys_sendmsg+0x10/0x10 [ 476.363298][T19063] ? __fget_files+0x2a/0x420 [ 476.363318][T19063] ? __fget_files+0x3a0/0x420 [ 476.363351][T19063] __sys_sendmmsg+0x227/0x430 [ 476.363377][T19063] ? __pfx___sys_sendmmsg+0x10/0x10 [ 476.363407][T19063] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 476.363449][T19063] ? ksys_write+0x22a/0x250 [ 476.363472][T19063] ? __pfx_ksys_write+0x10/0x10 [ 476.363497][T19063] __x64_sys_sendmmsg+0xa0/0xc0 [ 476.363520][T19063] do_syscall_64+0xfa/0xfa0 [ 476.363544][T19063] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.363561][T19063] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 476.363579][T19063] ? clear_bhb_loop+0x60/0xb0 [ 476.363601][T19063] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.363618][T19063] RIP: 0033:0x7f5af458efc9 [ 476.363635][T19063] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 476.363650][T19063] RSP: 002b:00007f5af53fb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 476.363670][T19063] RAX: ffffffffffffffda RBX: 00007f5af47e5fa0 RCX: 00007f5af458efc9 [ 476.363684][T19063] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000003 [ 476.363697][T19063] RBP: 00007f5af53fb090 R08: 0000000000000000 R09: 0000000000000000 [ 476.363708][T19063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 476.363720][T19063] R13: 00007f5af47e6038 R14: 00007f5af47e5fa0 R15: 00007ffcf8d055e8 [ 476.363752][T19063] [ 476.711490][T19065] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3971'. [ 476.732606][T19049] wg1 speed is unknown, defaulting to 1000 [ 476.740209][T19049] lo speed is unknown, defaulting to 1000 [ 477.284783][T19100] FAULT_INJECTION: forcing a failure. [ 477.284783][T19100] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 477.286097][T19086] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3978'. [ 477.298363][T19100] CPU: 1 UID: 0 PID: 19100 Comm: syz.0.3985 Not tainted syzkaller #0 PREEMPT(full) [ 477.298389][T19100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 477.298400][T19100] Call Trace: [ 477.298409][T19100] [ 477.298416][T19100] dump_stack_lvl+0x189/0x250 [ 477.298441][T19100] ? __pfx____ratelimit+0x10/0x10 [ 477.298465][T19100] ? __pfx_dump_stack_lvl+0x10/0x10 [ 477.298484][T19100] ? __pfx__printk+0x10/0x10 [ 477.298515][T19100] should_fail_ex+0x414/0x560 [ 477.298538][T19100] _copy_to_user+0x31/0xb0 [ 477.298564][T19100] simple_read_from_buffer+0xe1/0x170 [ 477.298590][T19100] proc_fail_nth_read+0x1b3/0x220 [ 477.298612][T19100] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 477.298632][T19100] ? rw_verify_area+0x2a6/0x4d0 [ 477.298650][T19100] ? __lock_acquire+0xab9/0xd20 [ 477.298671][T19100] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 477.298690][T19100] vfs_read+0x200/0xa30 [ 477.298708][T19100] ? fdget_pos+0x247/0x320 [ 477.298733][T19100] ? __pfx___mutex_lock+0x10/0x10 [ 477.298757][T19100] ? __pfx_vfs_read+0x10/0x10 [ 477.298778][T19100] ? __fget_files+0x2a/0x420 [ 477.298803][T19100] ? __fget_files+0x3a0/0x420 [ 477.298823][T19100] ? __fget_files+0x2a/0x420 [ 477.298853][T19100] ksys_read+0x145/0x250 [ 477.298874][T19100] ? __pfx_ksys_read+0x10/0x10 [ 477.298897][T19100] ? do_syscall_64+0xbe/0xfa0 [ 477.298922][T19100] do_syscall_64+0xfa/0xfa0 [ 477.298942][T19100] ? lockdep_hardirqs_on+0x9c/0x150 [ 477.298964][T19100] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.298981][T19100] ? clear_bhb_loop+0x60/0xb0 [ 477.299003][T19100] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.299020][T19100] RIP: 0033:0x7f4bd838d9dc [ 477.299036][T19100] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 477.299051][T19100] RSP: 002b:00007f4bd92a6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 477.299071][T19100] RAX: ffffffffffffffda RBX: 00007f4bd85e5fa0 RCX: 00007f4bd838d9dc [ 477.299084][T19100] RDX: 000000000000000f RSI: 00007f4bd92a60a0 RDI: 0000000000000004 [ 477.299096][T19100] RBP: 00007f4bd92a6090 R08: 0000000000000000 R09: 000000000000001c [ 477.299108][T19100] R10: 0000000020044045 R11: 0000000000000246 R12: 0000000000000001 [ 477.299119][T19100] R13: 00007f4bd85e6038 R14: 00007f4bd85e5fa0 R15: 00007fff951949d8 [ 477.299150][T19100] [ 477.648259][T19106] wlan1 speed is unknown, defaulting to 1000 [ 477.794302][T19124] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3988'. [ 477.803627][T19124] netlink: 236 bytes leftover after parsing attributes in process `syz.0.3988'. [ 478.151436][T19109] wlan1 speed is unknown, defaulting to 1000 [ 478.233769][T19142] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3995'. [ 478.367986][T19109] wg1 speed is unknown, defaulting to 1000 [ 478.376330][T19106] wg1 speed is unknown, defaulting to 1000 [ 478.383832][T19106] lo speed is unknown, defaulting to 1000 [ 478.464361][T19109] lo speed is unknown, defaulting to 1000 [ 478.590755][T19150] netlink: 'syz.4.3997': attribute type 1 has an invalid length. [ 478.618021][T19150] bond4: entered promiscuous mode [ 478.623511][T19150] 8021q: adding VLAN 0 to HW filter on device bond4 [ 478.723972][T19156] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3999'. [ 478.949357][T19160] vlan2: entered promiscuous mode [ 479.568853][T19185] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4008'. [ 479.606189][T19191] netlink: 'syz.4.4010': attribute type 1 has an invalid length. [ 479.625268][T19190] netlink: 'syz.4.4010': attribute type 1 has an invalid length. [ 479.626264][T19191] netlink: 'syz.4.4010': attribute type 2 has an invalid length. [ 479.633108][T19190] netlink: 'syz.4.4010': attribute type 2 has an invalid length. [ 479.779968][T19200] netlink: 'syz.0.4013': attribute type 3 has an invalid length. [ 479.953196][T19212] FAULT_INJECTION: forcing a failure. [ 479.953196][T19212] name failslab, interval 1, probability 0, space 0, times 0 [ 479.965908][T19212] CPU: 0 UID: 0 PID: 19212 Comm: syz.0.4017 Not tainted syzkaller #0 PREEMPT(full) [ 479.965935][T19212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 479.965946][T19212] Call Trace: [ 479.965955][T19212] [ 479.965969][T19212] dump_stack_lvl+0x189/0x250 [ 479.965994][T19212] ? __pfx____ratelimit+0x10/0x10 [ 479.966016][T19212] ? __pfx_dump_stack_lvl+0x10/0x10 [ 479.966034][T19212] ? __pfx__printk+0x10/0x10 [ 479.966059][T19212] ? kmem_cache_alloc_node_noprof+0x483/0x710 [ 479.966085][T19212] should_fail_ex+0x414/0x560 [ 479.966108][T19212] should_failslab+0xa8/0x100 [ 479.966133][T19212] kmem_cache_alloc_noprof+0x74/0x6e0 [ 479.966153][T19212] ? skb_clone+0x212/0x3a0 [ 479.966179][T19212] skb_clone+0x212/0x3a0 [ 479.966204][T19212] bpf_clone_redirect+0xad/0x3d0 [ 479.966235][T19212] ? bpf_test_run+0x197/0x7b0 [ 479.966254][T19212] bpf_prog_1939c40fbf65037b+0x5f/0x68 [ 479.966284][T19212] ? seqcount_lockdep_reader_access+0x122/0x1c0 [ 479.966304][T19212] ? lockdep_hardirqs_on+0x9c/0x150 [ 479.966328][T19212] ? ktime_get+0x45/0x200 [ 479.966342][T19212] ? seqcount_lockdep_reader_access+0x174/0x1c0 [ 479.966362][T19212] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 479.966390][T19212] ? __local_bh_disable_ip+0xf1/0x190 [ 479.966414][T19212] ? __pfx___cant_migrate+0x10/0x10 [ 479.966436][T19212] ? __local_bh_enable_ip+0x12d/0x1c0 [ 479.966459][T19212] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 479.966486][T19212] ? bpf_test_timer_continue+0x130/0x350 [ 479.966510][T19212] bpf_test_run+0x318/0x7b0 [ 479.966550][T19212] ? __pfx_bpf_test_run+0x10/0x10 [ 479.966595][T19212] ? convert___skb_to_skb+0x3d/0x590 [ 479.966615][T19212] bpf_prog_test_run_skb+0xb4e/0x1550 [ 479.966643][T19212] ? __fget_files+0x2a/0x420 [ 479.966670][T19212] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 479.966690][T19212] bpf_prog_test_run+0x2c7/0x340 [ 479.966716][T19212] __sys_bpf+0x562/0x860 [ 479.966741][T19212] ? __pfx___sys_bpf+0x10/0x10 [ 479.966780][T19212] ? ksys_write+0x22a/0x250 [ 479.966803][T19212] ? __pfx_ksys_write+0x10/0x10 [ 479.966828][T19212] __x64_sys_bpf+0x7c/0x90 [ 479.966850][T19212] do_syscall_64+0xfa/0xfa0 [ 479.966871][T19212] ? lockdep_hardirqs_on+0x9c/0x150 [ 479.966893][T19212] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.966912][T19212] ? clear_bhb_loop+0x60/0xb0 [ 479.966934][T19212] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.966952][T19212] RIP: 0033:0x7f4bd838efc9 [ 479.966975][T19212] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 479.966990][T19212] RSP: 002b:00007f4bd9285038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 479.967011][T19212] RAX: ffffffffffffffda RBX: 00007f4bd85e6090 RCX: 00007f4bd838efc9 [ 479.967025][T19212] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 479.967037][T19212] RBP: 00007f4bd9285090 R08: 0000000000000000 R09: 0000000000000000 [ 479.967049][T19212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 479.967061][T19212] R13: 00007f4bd85e6128 R14: 00007f4bd85e6090 R15: 00007fff951949d8 [ 479.967094][T19212] [ 480.299796][T19215] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4021'. [ 480.423201][T19223] netlink: 'syz.1.4022': attribute type 2 has an invalid length. [ 480.570413][T19225] wlan1 speed is unknown, defaulting to 1000 [ 480.896018][T19225] wg1 speed is unknown, defaulting to 1000 [ 480.907586][T19225] lo speed is unknown, defaulting to 1000 [ 481.109843][T19246] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4028'. [ 481.140079][T19253] macsec2: entered promiscuous mode [ 481.145490][T19253] mac80211_hwsim hwsim14 wlan0: entered promiscuous mode [ 481.152818][T19253] macsec2: entered allmulticast mode [ 481.158537][T19253] mac80211_hwsim hwsim14 wlan0: entered allmulticast mode [ 481.253290][T19255] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4033'. [ 481.401169][T19260] netlink: 'syz.2.4033': attribute type 83 has an invalid length. [ 481.428381][T19260] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4033'. [ 481.507373][T19260] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4033'. [ 481.548730][T19260] netlink: 'syz.2.4033': attribute type 7 has an invalid length. [ 481.605334][T19260] netlink: 'syz.2.4033': attribute type 8 has an invalid length. [ 481.680198][T19260] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4033'. [ 481.699068][T19274] syz_tun: entered allmulticast mode [ 481.736884][T19274] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4039'. [ 481.807304][T19274] syz_tun (unregistering): left allmulticast mode [ 481.883947][T19260] batadv0: entered promiscuous mode [ 481.955128][T19260] batadv0: left promiscuous mode [ 482.198608][T19293] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4043'. [ 482.232763][T19293] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4043'. [ 482.402775][T19288] syzkaller0: entered promiscuous mode [ 482.413205][T19288] syzkaller0: entered allmulticast mode [ 482.472461][T19302] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4045'. [ 482.482047][ T5149] non-paged memory [ 482.487338][ T5149] list_del corruption, ffff888045c85500->next is LIST_POISON1 (dead000000000100) [ 482.497482][ T5149] ------------[ cut here ]------------ [ 482.502991][ T5149] kernel BUG at lib/list_debug.c:58! [ 482.509774][ T5149] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 482.516053][ T5149] CPU: 1 UID: 0 PID: 5149 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT(full) [ 482.525518][ T5149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 482.535575][ T5149] Workqueue: hci4 hci_conn_timeout [ 482.540685][ T5149] RIP: 0010:__list_del_entry_valid_or_report+0x10e/0x190 [ 482.547723][ T5149] Code: e0 7a c0 8b 48 89 de e8 20 8d 8d fc 90 0f 0b 4c 89 e7 e8 c5 26 6a fd 48 c7 c7 40 7b c0 8b 48 89 de 4c 89 e2 e8 03 8d 8d fc 90 <0f> 0b 4c 89 e7 e8 a8 26 6a fd 48 c7 c7 a0 7b c0 8b 48 89 de 4c 89 [ 482.567326][ T5149] RSP: 0018:ffffc9000f56f960 EFLAGS: 00010246 [ 482.573389][ T5149] RAX: 000000000000004e RBX: ffff888045c85500 RCX: e4ab76f3553dde00 [ 482.581347][ T5149] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 482.589305][ T5149] RBP: ffffffff8a5ac5c0 R08: 0000000000000003 R09: 0000000000000004 [ 482.597263][ T5149] R10: dffffc0000000000 R11: fffffbfff1bfa650 R12: dead000000000100 [ 482.605220][ T5149] R13: dffffc0000000000 R14: dead000000000100 R15: dead000000000122 [ 482.613183][ T5149] FS: 0000000000000000(0000) GS:ffff888125e06000(0000) knlGS:0000000000000000 [ 482.622096][ T5149] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 482.628668][ T5149] CR2: 00007fee1401182e CR3: 00000000755f0000 CR4: 00000000003526f0 [ 482.636628][ T5149] Call Trace: [ 482.639894][ T5149] [ 482.642812][ T5149] hci_cmd_sync_dequeue_once+0x24a/0x370 [ 482.648437][ T5149] hci_cancel_connect_sync+0xc8/0x120 [ 482.653799][ T5149] hci_abort_conn+0x191/0x330 [ 482.658468][ T5149] ? process_scheduled_works+0x9ef/0x17b0 [ 482.664178][ T5149] process_scheduled_works+0xae1/0x17b0 [ 482.669722][ T5149] ? __pfx_process_scheduled_works+0x10/0x10 [ 482.675704][ T5149] worker_thread+0x8a0/0xda0 [ 482.680293][ T5149] kthread+0x711/0x8a0 [ 482.684348][ T5149] ? __pfx_worker_thread+0x10/0x10 [ 482.689447][ T5149] ? __pfx_kthread+0x10/0x10 [ 482.694021][ T5149] ? _raw_spin_unlock_irq+0x23/0x50 [ 482.699207][ T5149] ? lockdep_hardirqs_on+0x9c/0x150 [ 482.704391][ T5149] ? __pfx_kthread+0x10/0x10 [ 482.708963][ T5149] ret_from_fork+0x4bc/0x870 [ 482.713545][ T5149] ? __pfx_ret_from_fork+0x10/0x10 [ 482.718649][ T5149] ? __switch_to_asm+0x39/0x70 [ 482.723403][ T5149] ? __switch_to_asm+0x33/0x70 [ 482.728156][ T5149] ? __pfx_kthread+0x10/0x10 [ 482.732737][ T5149] ret_from_fork_asm+0x1a/0x30 [ 482.737493][ T5149] [ 482.740507][ T5149] Modules linked in: [ 482.745252][ T5149] ---[ end trace 0000000000000000 ]--- [ 482.751094][ T5149] RIP: 0010:__list_del_entry_valid_or_report+0x10e/0x190 [ 482.758365][ T5149] Code: e0 7a c0 8b 48 89 de e8 20 8d 8d fc 90 0f 0b 4c 89 e7 e8 c5 26 6a fd 48 c7 c7 40 7b c0 8b 48 89 de 4c 89 e2 e8 03 8d 8d fc 90 <0f> 0b 4c 89 e7 e8 a8 26 6a fd 48 c7 c7 a0 7b c0 8b 48 89 de 4c 89 [ 482.778296][ T5149] RSP: 0018:ffffc9000f56f960 EFLAGS: 00010246 [ 482.784475][ T5149] RAX: 000000000000004e RBX: ffff888045c85500 RCX: e4ab76f3553dde00 [ 482.792611][ T5149] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 482.800737][ T5149] RBP: ffffffff8a5ac5c0 R08: 0000000000000003 R09: 0000000000000004 [ 482.808938][ T5149] R10: dffffc0000000000 R11: fffffbfff1bfa650 R12: dead000000000100 [ 482.817454][ T5149] R13: dffffc0000000000 R14: dead000000000100 R15: dead000000000122 [ 482.825896][ T5149] FS: 0000000000000000(0000) GS:ffff888125e06000(0000) knlGS:0000000000000000 [ 482.834921][ T5149] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 482.841774][ T5149] CR2: 00007f3922a21f98 CR3: 0000000063cb4000 CR4: 00000000003526f0 [ 482.850044][ T5149] Kernel panic - not syncing: Fatal exception [ 482.856383][ T5149] Kernel Offset: disabled [ 482.860704][ T5149] Rebooting in 86400 seconds..