last executing test programs: 10.375727395s ago: executing program 0 (id=5833): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000080)={@loopback={0xff00000000000000, 0x3fc}, 0x0, r2}) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a000000060001"], 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x240080d0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_buf(r3, 0x0, 0x4, &(0x7f0000000200)="440910bc996c301c8183070400", 0xd) sendto$inet(r3, 0x0, 0x0, 0x1a38200298d57ae4, &(0x7f00000000c0)={0x2, 0x4e24, @empty}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r7, &(0x7f0000000080)='X', 0x1, 0x20008001, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0, 0x40000000}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r7, 0x84, 0xb, &(0x7f0000000100)={0x66, 0xfe, 0x4, 0x5, 0xa8, 0x20, 0x0, 0x1, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9}, 0xe) shutdown(r7, 0x1) recvmmsg(r7, &(0x7f0000005000)=[{{0x0, 0x2a, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x3}], 0x4000169, 0x60, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r7, 0x84, 0x20, 0x0, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000014800)={0x0, 0x0, &(0x7f00000147c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="f80000001600010025bd7000ffdbdf2500000000000000000000ffff64010100ff"], 0xf8}, 0x1, 0x0, 0x0, 0x880}, 0x48000) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a9b80"], 0xfe33) sendmsg$NL80211_CMD_REGISTER_BEACONS(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="07002bbd700001dcdf25080000000c0099"], 0x20}, 0x1, 0x0, 0x0, 0x91}, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x140, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x140}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000018000100feffffff0001000000000000000000000000ffffe0000002fc0100000000000000000000000000010001071c4e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac14142500000000000000000000000000000000000000009201000000000000a39b000000000000ffff0000000000001c250800000000000500000000000000fcffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffafffffffcffffff00000000800000000035000002"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r11, 0x84, 0x64, &(0x7f00000015c0)=[@in6={0xa, 0x4e21, 0x6, @empty, 0x3}, @in6={0xa, 0x4e21, 0x1, @empty, 0x4}], 0x38) 8.745256485s ago: executing program 3 (id=5844): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000008c0)={'sit0\x00', &(0x7f0000000840)={'tunl0\x00', 0x0, 0x7800, 0x8000, 0xa00, 0x401, {{0x6, 0x4, 0x0, 0x8, 0x18, 0x66, 0x0, 0x4, 0x0, 0x0, @multicast1, @remote, {[@timestamp_addr={0x44, 0x4, 0xd3, 0x1, 0xe}]}}}}}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(0x3) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r2, &(0x7f0000000300)={{0x6, @rose, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default]}, 0x48) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r3, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) listen(r3, 0x80) accept$netrom(r0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r4, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r4, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc}) read(r2, &(0x7f00000003c0)=""/123, 0x7b) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4850}, 0x0) accept(r2, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x7, 0x0, 0xea8b, 0x6, 0x9}, &(0x7f0000000040)=0x14) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000080)={0x3, 0x4, 0x1, 0x4, 0x5b3f, 0x6, 0x1000, 0x4, r5}, 0x20) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_SIOCGIFNETMASK(r6, 0x891b, &(0x7f0000000d80)={'nr0\x00', {0x2, 0x0, @broadcast}}) 7.841975865s ago: executing program 3 (id=5849): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) write$tun(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000060000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f00000004c0), 0xce, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0x7, 0x0, &(0x7f0000000200)="df33c9f7b9a600", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 7.62632374s ago: executing program 3 (id=5852): unshare(0x400) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) sendmsg$nl_route(r0, 0x0, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x4) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = getpid() r6 = socket$caif_seqpacket(0x25, 0x5, 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r9) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), 0xffffffffffffffff) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, 0x0) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="3000000f", @ANYRES32=0x0, @ANYBLOB="06000600000000"], 0x30}, 0x4, 0x700000000000000}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_DEV(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x4004}, 0x4004) r11 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000013c0)=0xc) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000440)="aa", 0x1}], 0x1, &(0x7f0000000180)=[@cred={{0x1c, 0x1, 0x2, {r12, r13, r14}}}], 0x20, 0x40044}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)="114a", 0x2}], 0x1, 0x0, 0x0, 0x400e815}}], 0x2, 0x4) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002440)=[{{&(0x7f0000000240)=@file={0x2, './file0\x00'}, 0x6e, &(0x7f0000000440)=[{&(0x7f00000002c0)="138d7cb84ccc8f4c82e92c2a43da3be36f6a494dab820bfd46a07eabd6af6ab326361bf158bc39045c41d3a1323bc3f112885a1b6d40ed2229b226b5005ae21e0f4a8c806379c334a1602c1d547ef9b9cf4721b8fe41029d0e1c88822b2b4cbdbd21efdb6a7915ed", 0x68}, {&(0x7f0000000340)="1be5825742fa2fdba103b51bfaf761c015bc471c22dcda517c48558810cc26e37b37ac6c9567b3f42386ad4191fe5689dbd88e7ef181183d498d9f8b916f9d2d221f94d77796e9f2612eae5b11117fbd3f017d7662c48f53cb62e461405c70c024da5db2db2ec77584104b2e6b54c042e3f9cd1e3afbc89dea1f8a1fbeecde8d6839234779e96a31f8bfeab48992fc9d72a6401545929b4a46538396cb80b263", 0xa0}, {&(0x7f0000000400)="c4c52fcac76dca08801222c2fe40762ca8bf2185fa", 0x15}], 0x3, &(0x7f0000000700)=[@rights={{0x2c, 0x1, 0x1, [r0, 0xffffffffffffffff, r4, r0, 0xffffffffffffffff, r11, r2]}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @cred={{0x1c}}], 0x68, 0x4000000}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000900)=[{&(0x7f0000000800)="ccc12af6f8c007e4fb0989fcd0318057d1488b67dcc9d86eb3098953a673e4ad290d7b46733798dffc533fabf446f48777f04e2e7bbc44f24888c9df995b96dc6f6105aac3f39c4598d9c7b8c3059a8c080460dd29b89b8108cdf5326510b092d403a5ad949feaf4c31412047a34be755d7e22a29599dc991c35b1e4d9efc10268de4daf324256d9c727d5d54cc96f7ac5d9065019e03a35a9eaa17be32ee1b277a9ee8f21122fc75e4e1b78fa9d129b533110fa890dec685397c65904161f9ee8", 0xc1}], 0x1, 0x0, 0x0, 0x8000}}, {{&(0x7f0000000940)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000b40)=[{&(0x7f00000009c0)="541a05b884f9059c5e8d2be58cd857451f5ad61d2be48d7c7b", 0x19}, {&(0x7f0000000a00)="7b03126b117d50a31a3d03c270e0dd17bdefb1919a69fc6ce72bde92b30cb6eaa8f936755770749dfa772581a583a4689d218fb7217d", 0x36}, {&(0x7f0000000a40)="b1a32263c1ceb54b6476b8841dfcdd79546595443658cccc3df9c47c4c158943676b618c68fbc9b3c772b30b9e7a2f01f16cc9534b13617b8b2ec1bbbef761a4d6f30bb2e55e61600ee88fba6131a3c4a2ff6b72a5c6d59d40cf3e8ca399a74cd07cf32b6ca0fe6b418944e962cb6f30c66804558cf10313a2e773963ded7b22255191e47accadd636a6d73127c4469981e39c8be53f932c9d466c0b2497fd3dc70f1592ee938522a5d82b37dce28fef16445d9cd01bc7ae91119751b7d8e47a46ff938d9e23e45bcd384ed47a8a1359490061bad5ff792f599f241eb6121aa7f30ef90ab26695b01c19c2", 0xeb}], 0x3, &(0x7f0000000e40)=[@cred={{0x1c, 0x1, 0x2, {r5}}}, @cred={{0x1c, 0x1, 0x2, {r5}}}, @cred={{0x1c, 0x1, 0x2, {r5}}}], 0x60, 0x4}}, {{0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000ec0)="1828e87bf30dcbd132260e5653691891666a93bc296fd0e18252f6801a30f366ec8c4be7c28135567f9b09ecff27fe2d0d4212d17466c340d707ccc4e0007519ead9b62654ea75dea4665f8a2094533898b90cb0591001fe7a0ef5665a15b9bc780b94deabdc168fe45bea1793781067a8637453de8238da7147f1c8a853f57d61e2e460a30e2a4cb80bdb7902707b52f9aef408fcf25aaf0a78fdcdca223af3e827", 0xa2}], 0x1, 0x0, 0x0, 0x8020}}, {{&(0x7f0000000fc0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001440)=[{&(0x7f0000001040)="15f36a0555b046d5", 0x8}, {&(0x7f0000001080)="da5c38b99325f65b286ac433d02a3563548f3b681c1bf4fd0c2a3dd281f8f2792417d135a980528bccb71164010033919ff169d716eaba160fa017712f84ae0417e983240fd769d0f8efbb10fc0c66fb03610d62ed4f25765eecbbed01ec241ca44ca40dd47969f259f11f07d746af4e81", 0x71}, {&(0x7f0000001100)="f40f93ae650d20c1ff87b9518431fa94fe956687567bad4e0ad656352044f34a3ff703c5e49d33b1e15ddf92c9d685ea198919dfb403b4d6e930ae877a32055874f1bd83b0b87d7d926f2cdbaf0804c2ad4a6f7a227b645e376d4a8948c6d40e79bad9ddc74226006ec9bbdbcfe2f2c19755b9ca3a18180ce93b93224b7d9e6eddba014b9012b2bc27075600dd07c08f656b0861e127582c177b488de7e1e6461576a002cc08af37665323df8d72ec3d4c0526f9b454a6893b7b97a2a55e3d08ebb8dae22fa08157c977350c87c805a295d3d11c1d14ac3c0b2e1605acd72ef830526f78", 0xe4}, {&(0x7f0000001200)="dee79e69345607ce58276c41d81a6aa6531c02fab6ef48f1eb7d07d94bde7f65d5053d70af1de8f7ac3c50d7d2ea7f8ecf8db7785b90c64d1b4e968d09a07e64284117a128674653499ea80f952b4f31f0da512dc1151bcd0605497c80cc404e9b986b660407163bf1579befea91f2cb4ff1", 0x72}, {&(0x7f0000001280)="b3b6d5c8a3adc08865fb318ab322e3292eae265f2f0e0d1175804ed65a7ecaba56ded7581cad0f754345acf7b7c6512206a767b60155cb69f4f487069aaa40307125f98937b86086c3c30bb8cf26a69445f2bc604886f1f2fb7afdb83459aed3e90570b9076e401ae1dc763ac6", 0x6d}, {&(0x7f0000001300)="cf26a6ac0f67e0e5f0e74fbc7cd386670cdb460eb7893dd772cd5a821ac3a0f061e490c11d26ae98e2822b42081c01bdc39170ea741c694e02583c284b0f7b1ecec07d9a6bd092a603f0e367d639ce0fa187", 0x52}, {&(0x7f0000001380)="f667e77201f1be543bbb8f4513ea5cf3b86785f85b8e6034a812a58a74a84099c41e6e82e63c32dcff6ed20db929a17f6f3cd572eb4726e248b9e7bde8fb3000eb4a54f8b1b4cbd6ab4ab79ead4ad35d09351703124a3b610957036e21f9655633d3f2afa93230343a109391dbc8f0e1368dc378f71c9628654ecc540bffdca7bed87b2171711a75c786ef3876e8a6d4a73382012722", 0x96}], 0x7, &(0x7f0000001600)=[@rights={{0x20, 0x1, 0x1, [r2, r7, r2, r7]}}, @cred={{0x1c, 0x1, 0x2, {r5, 0x0, 0xee01}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r1]}}, @rights={{0x38, 0x1, 0x1, [r2, r11, r3, r7, 0xffffffffffffffff, r6, 0xffffffffffffffff, r0, r0, r11]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xa8}}, {{&(0x7f00000016c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f00000017c0)=[{&(0x7f0000001740)="afc5acb243b987784bd5643fce89b136c3e2dc43303926754c7b6f7fa733378140599f4f798dd879ac8090de730d5134decaf5b704f7e4ca72c8c8345cc7f88c24b32e779079ef0905a3", 0x4a}], 0x1, &(0x7f00000019c0)=[@rights={{0x20, 0x1, 0x1, [r7, r1, 0xffffffffffffffff, r3]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [r6, r7, r0, r3, r7]}}], 0x68, 0x4000040}}, {{&(0x7f0000001a40)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000001fc0)=[{&(0x7f0000001ac0)="34ac1b12", 0x4}, {&(0x7f0000001b00)="76c6d4dba16ffbac8cd8dcd7e144ddf707cccf", 0x13}, {&(0x7f0000001b40)="5f0e69bcb4d27a403f3333581ae431d1755c0e6fac523a44ab07ffd873d263e253c0d60687d55788d8f9904428f73fc24ba0b3ed51230ed81bcecd598292fd463361ad5a528f0afb2c9e5f42234ad301aa948f579d4746f117011a357d89c72c78e908e4ebb00cd390aeda654e4c0c6e15c4b4df15417cc0e376600ea94c65665555", 0x82}, {&(0x7f0000001c00)="957cc9ff38d3676a41febdeee441863bdb35cd376760b66c092addf1d9267a87abe1663a4288e66007090f4b12c658d457d20d4bea8edc4a2bcfc3e4dc9671e443b39e9ff258e118ef8aed75c773c7c8564250e33ed99410b304bf9851a56eb881b6b25108efa4a6a5b2b357bd1d9dd317761d78615d258c818de5298325d8ad4017afce8f2ecbaeac9a83bb8583b5382351217476b574b1b934ab5f4ed5baef3c30ae51fc3cdea3688a67d9378a49cf500ab350d185b4f7576ed03b3ba9b9916e48", 0xc2}, {&(0x7f0000001d00)="6d78c9684b7705d7b5900c00b4c78ec377b87eab787f7cec9b6e5ab0e3d7b2716eb3cbfec00b36e339edb51243cc7539639bbeec20173f7dbfbd4e85cf4e251133c63df7cb23209c6730c6c4299568f7173775f27809608d0c6519ba95b683a9a6", 0x61}, {&(0x7f0000001d80)="848e4b3c9a94a6f2f78709e328883818156791f41cd0b1fdfde5e92843d932a16eaa181935bc21cc52699e1b603845d5ac5dcb160f651a526ab35f17c33112c760ff3eea523e87dcffd4e9421a6928ea1258a74cc6c0c6024fe919d8ca6a3e0eefc2d3a9aee5c6437a8f6a947330d80172750f", 0x73}, {&(0x7f0000001e00)="e36605b796c1ff810592a792e0c3dacb7d118d4e697780050675f0a95fdd6b3664e21560c7c6985a8f99c66a7dc813869172b3263bc92d3dcf1cebab856e9469638641f4fac11b929daf7ceddb8a5b47c094f48fdfb24ae1862ee013cc0deac1c30c9b1cc6057e8b93feae6cb7f36a11e15d5dea1cf36bb6583b3eff84cef7bac0d1c05634c7393b8249f3239eefe5a9ad5fabadb79ede240ca29ffd7754208544b3c58835e44876d544872a2c46d43111", 0xb1}, {&(0x7f0000001ec0)="5c4a36ec259807c4006758f8529e9552a27282ca7943939a420c9d4b415020a21abfcd2f3a3ca552d86565dae96842391672297b7132f95d6b6da59b17980f9ad4a8b515950ed2d49f6a1a93287ae11982c2758b2063eee73d8212e80726b6e8f670551034095240e38632934c34c4de56581c26abb82847667c7b3f4edbff8dc225eb25db1d7ff0eda2a0c0c7a82281b56994dce96a9fa7300924cd8db5a8b56ab036cd4bd15adc3cb1454a84f142458b1b90ee4a1096ba4b5756b911cdc0ebed4bba75e201ceeaa761acfb8029a2204b896b351ea4b243d63a5f04bb75984e", 0xe0}], 0x8, &(0x7f0000002080)=[@cred={{0x1c, 0x1, 0x2, {r5}}}, @cred={{0x1c, 0x1, 0x2, {r5}}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [r11, r2]}}], 0x78, 0x10}}, {{&(0x7f0000002100)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000002280)=[{&(0x7f0000002180)="f88a998e4901babc8375091c124bd913b79788d857db234d702433f0ebc0378343678a836bbb719bf93af84e301b280713a95cdcb298881563d1bf199b975faecb460585337c72912917c7a38c18b46170d27b382903f0084861ba18035f41a0d3d0fb0c376a4d69d412924077ab1e9b5c1197910a3a89022634351c4d70e9f2ab854d05719f5b78cb73e72c459f22e996efdd3ccaeddb78aec69bd307ee1ca1f3e625c59a1975b291df08253dcfeb7231deaf45ebec6b4b8ad0a9e73974bc967633002dc1d9244c72eaae8f86d4c5ceb4bdc131", 0xd4}], 0x1, &(0x7f0000002400)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, r13}}}], 0x40, 0x40040}}], 0x8, 0x20040090) r15 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r15, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) 6.739025344s ago: executing program 3 (id=5859): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000000400000008000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1a1500000000000000000000000000efffffff4a", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r5, &(0x7f00000002c0)=[{&(0x7f0000001980)=""/4099, 0x1003}, {&(0x7f0000000180)=""/178, 0xb2}], 0x2) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETVNETHDRSZ(r5, 0x400454d8, &(0x7f0000000040)=0x1000) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) close(r4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x44, 0x4, 0x2}, 0x50) socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000004c0)={r8, &(0x7f0000000600), &(0x7f0000000480)=@tcp=r10}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r8, &(0x7f00000003c0)="01b4", &(0x7f0000000300)=@tcp=r9, 0x1}, 0x20) r11 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r8, &(0x7f0000000140), &(0x7f0000000340)=@udp6=r11, 0x1}, 0x20) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x20040055}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d1de0000080003400000000114000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x2c, 0xd, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) recvmsg(r12, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x40000140) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x2}}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xa4}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000a40)=@gettclass={0x24, 0x2a, 0x200, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r13, {0x0, 0xfff2}, {0xfff2, 0x4}, {0x10, 0x6}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x0) 5.669506873s ago: executing program 3 (id=5870): syz_emit_ethernet(0x19, &(0x7f00000003c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb88a80000810000008100bcf84ab6e4c61570db0df3eef26e3de9b654c7a7a5819009d67d715cba54ab6f2eb8f56cf047c69fbf816aa205d43704ebc63e69b714f5c0ffd37fae76d848af98a5d32e3252e8a23b8250f3c1b0aaf32ca0ebee132c21bba153b883deae0b98ce38b93939fdfb"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0x20, &(0x7f00000005c0)={&(0x7f00000004c0)=""/56, 0x38, 0x0, &(0x7f00000008c0)=""/203, 0xcb}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xe, 0xc, &(0x7f00000004c0)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaccf}, 0x94) ioctl$XFS_IOC_BULKSTAT(r0, 0x8040587f, &(0x7f0000000300)={{0x1, 0x4, 0xfff, 0x8, 0x4}, &(0x7f0000000c40)=[{}, {}, {}, {}]}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x4a}, 0x28) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@ipv4_getnexthop={0x1c, 0x6a, 0x7d9504e1c39794d, 0x70bd2a, 0x25cfdbfb, {}, [@NHA_GROUPS={0x4}]}, 0x1c}}, 0x24040000) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x140, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x140}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r3 = accept(r1, 0x0, &(0x7f00000000c0)) r4 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc) r5 = socket(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400ee", @ANYBLOB="0100000001000000"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, 0x0, 0x8d0) sendmsg$nl_route_sched(r6, 0x0, 0x0) recvmsg$unix(r3, &(0x7f0000000600)={&(0x7f0000000140)=@abs, 0x6e, &(0x7f0000000440)=[{&(0x7f0000000280)=""/37, 0x25}, {&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f00000018c0)=""/4084, 0xff4}, {&(0x7f00000038c0)=""/194, 0xc2}, {&(0x7f00000028c0)=""/4086, 0xff6}, {&(0x7f00000003c0)=""/112, 0x70}], 0x6, &(0x7f00000004c0)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x38}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r9, &(0x7f0000000100)={0xa, 0xfffe, 0x4, @mcast2={0xff, 0x3}}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r9, 0x29, 0x36, &(0x7f0000000340)=ANY=[], 0x8) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 5.376065961s ago: executing program 3 (id=5872): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="30000000190001000000000000200000021800"], 0x30}}, 0x0) 4.736068575s ago: executing program 0 (id=5876): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="6c00000010000304ee000000fedbdf2500000000", @ANYRES32=0x0, @ANYRES32], 0x6c}}, 0x0) r0 = socket(0x21, 0x80000, 0x2) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000300)={0x7fffffff, 0xfc}, 0x10) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000080)) sendmsg$kcm(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1c00000022008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) 4.567786608s ago: executing program 0 (id=5877): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000300)={{r0, &(0x7f0000000080)='NLBL_MGMT\x00', 0x0, &(0x7f00000000c0)={@align=0x8, {0x1f, 0x9, 0x1, 0x7ea2}}, 0x81, &(0x7f0000000100)={@_ha_fsid}, &(0x7f00000001c0)=0x4}, {[0x3104, 0x5, 0x3, 0x2]}, 0x1, 0xe0, &(0x7f0000000600)=""/224}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x2}, 0x50) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af3653c001a0004000202080002000300010004000600eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r6) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0106000000000000000019"], 0x38}}, 0x0) r10 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r10, &(0x7f0000000100)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r10, 0x80047437, &(0x7f0000000080)) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r11, 0x0, &(0x7f00000000c0)=0x0) sendmmsg(r10, &(0x7f0000005b00)=[{{&(0x7f0000000140)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'sha224-generic\x00'}, 0x80, &(0x7f0000000040)=[{&(0x7f00000002c0)="90caef01467aed8fa60e06fe8b7b17771a9b9bf7c927f7e6428eda81afa29eb7b8d1ef813c159e8e7eec0b9ca8da2b61168bea04569bb07091874b71a3c6ce0b79e5b458d5293089336a5cc8feb2a778b3850f45124dd6b75f65f11ea703ccc22dbaca6171e8fa7d753584a833ac428fd4ab0313ba536f43bc8c0b6c2fdf37cc6ffb", 0x82}, {&(0x7f0000000480)="d7dd7c0ffa7cfab4c63921019c1f0beb9c0849e0fff30b87a631ad60eec9034204d19cf430d00f01c772861db512730aeb439778ba6da125a3ad3e5ab97ab4c4b779090d8c780b6f73da54c56d1fb47affb906ce7852afe6e048d930e19a75913e6fe6e7bc8ca052c9233d40500f6321e827b8033706fd62f390f8999363dddcde1b9603669756d6fac0cbcf925e47995c9285329af3b07e0182bca96ae66b81c47eef05bcbc51bbfa115b34ccdca02162da218cec0bce3dd6ac92a01630a4b5388706e9fe8d2ccf18358577e397958486320c4d066c9b7037ce6e3f52285dd9a958", 0xe2}], 0x2, &(0x7f0000000640)=[{0x90, 0x116, 0xffff, "e2fce8343fa808b80c0a10ddb3516df439a2171ac8d5f3e245f985d84c6e1d2703fd21533f86f3c56e3e153862a5cddb638566d487f3fab492a548c6dca9f9ac1b4f98667a59bde0e3de975d2f02b4b1b3bd790da960e1ab679b99a6f7872126d8fb88f7db41d0a4db95b23c8b21b4d9ee161a1cbcfb9721d23e10b8cf"}, {0x98, 0x3a, 0xf75d, "5a2c8252ca5412881b62f9d21d204dc9add7eba31a683ee79c7a2739371a70b48cb29f3aeb34ad094ec22168f271f2af27f4b05fe22587be5d84252b95390bd88184138ad26a66097920431c373336a828655fd504a5364f241bdc0692ed99910e6a091f44f70f667863c2ff7b8514bae197e06cc8f9515b027df851915fc61f06e6ffa64a7e8428"}, {0x70, 0x10b, 0xfffffffa, "286e5d07b9afd6266ee1a0f8cc13bde9928ce7f252b19f46713ebe29a9ede02d50a7f01f31d6d95fffa2e7f604f18f080ac6dc31d24876bdbd22cf150e2843a2c8ce332cdabb1245cd8ee15d0eeeaf421a9df062f2d4268934fe97"}, {0x10, 0x108, 0xf}, {0x110, 0x109, 0x9, "e4607030387113ef457eb6281fd9a45f4c41b5b2e50d3f0b2d9b49056584a2e6b0af16f140dde8f086042a5ddf6633bb761dce158950ad8560e2b5e23ada6bb6f5866cde826c8408367d096bcad438741c75f59d9cc4a5a31e94801355d9f27ee0c372492cc96ba0f40162fcc33b358be5547749db1494781551204289a49c0123f8356d17f90984b5be601d2748d868ac9026f9344d92f489d73df278a5d754ea724d28f18aec13ace49b3dfbaef2c3d7661a4d4b3715c6b2d2c604f355a1c4cf62de083db306edf99e8e96f7e68b53111673bbc1bcd4ec3c2582c178a2f2ba91082f6a435bc11baf9549c608f12955e241248db0fb37bd3ac9"}], 0x2b8}}, {{&(0x7f0000000200)=@nfc={0x27, r12, 0x1, 0x2}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)}], 0x1, &(0x7f0000000400)}}, {{&(0x7f0000000580)=@llc={0x1a, 0x1, 0x40, 0x9, 0x6, 0x5, @remote}, 0x80, 0x0, 0x0, &(0x7f0000001a40)=[{0x38, 0x10a, 0x2, "d7e9d8315535d57a451da8cf7b41a87805e5b4744e587bc7a518f9cf3d1fee01727575610ed046"}, {0xc0, 0x3a, 0x402, "32072c25391eb7affc8d6b4733e15c92da3be8f26c11f5612c6ad25e3180a9350351d706827d8a20cd4d7a8b7d3f270c3a01b56c99eb88ad082260c407e8e5b49a4ec8ee933ae3ba6aa612ef2559e5514dd690b6b751a9fb946f79bc6701aa1545d50e762396ab2d06df96e25800a5e16662b7e96d2a7fc299456170a46accc72b8ed7beedae4e52af6cbb822126ea3509582b8b7d6f5d98525d741e58a0e121788d45695bd4075400"}, {0x108, 0x113, 0x80, "0111eab70068025f87fe2940c5835ad5ea09a055e5921de0d6c539e2a33ed4171cd13214615b817d0ba38e888c23c22eeb7c452b05c4b402846731539102c057057f40da594283e752404654bf0d97126165c6a327027db751f83b27621aa5cdaddc61d5f95adfc355082082c57d18aa6a5f86940a023ee5776de517b534bd37f4d2ae47947ce43004065705c4a608829c83f14c8cd5f7e24eaf1593f1f5c29de2d712e149021066004835cccb2df406b05a04e603b5ca35e8c432360647e915f11313aaf84583b8e93983fa471a064d3b068e9d608026e14ce0da94a126de5c5c07916394b59142979630a6ca50c77de1ef7a81fb8b5687"}], 0x200}}, {{&(0x7f0000001c80)=@l2={0x1f, 0x8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x101, 0x1}, 0x80, &(0x7f0000001dc0)=[{&(0x7f0000001d00)="88b0eb63268c434bdef80b4c680c5ae84d013238faf2d7fbded2fc85796a1aed7bccaa7b93a68d5c8e38534eb5db54ce385851611f5e133ee03cb173bfea014d5df81b4adf5408f9e73e5be59ee3b4cd40542a27", 0x54}], 0x1}}, {{&(0x7f0000001e00)=@pppol2tpin6={0x18, 0x1, {0x0, r10, 0x0, 0x1, 0x30, 0x0, {0xa, 0x4e21, 0x2, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x9}}}, 0x80, &(0x7f0000002200)}}, {{&(0x7f0000002280)=@tipc=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x0, 0x4}}, 0x80, 0x0, 0x0, &(0x7f0000005d40)=ANY=[@ANYBLOB="b80000000000000001000000080000003da645c5a58dbc661facb4d9d011b440094c4ee2718973a4bad9454e7808ab65f8b19fd40df138ab6e30dd0544a22da60fcc000059cc9bfcddedc6017b08903d712d0c73f7d08736876c561c35d510a8952f09"], 0xb8}}, {{&(0x7f0000003a80)=@rxrpc=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x168a, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}}, 0x80, &(0x7f0000003b00), 0x0, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], 0x328}}, {{&(0x7f0000003f00)=@l2tp={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, 0x80, &(0x7f0000004280)=[{&(0x7f0000003f80)="f019c3a4dbeb877aebc95fd7315d74f8291cdd7a401da4726b3953f40451f2db89fa7e678cac6d8240", 0x29}, {&(0x7f0000003fc0)="71434663bde447e59ee96c26f0eb7d86a9e862a86d12c1599c3cd6b7a096ce87bb44ced3034120e461728c52a985cd73fd1bdf2ecff48b30662a23014325fbdab738cae5fddd6aa7b05c49b96be88c68e0cb29f7887e264390e2952d50d70a874316dc52a68dee2ce5e68b5d5d69ce", 0x6f}, {&(0x7f0000004040)="606152d34f6cb85a1699d4f64a537c1b5d32dece990986262afcabfdf290452eb620656d1a49a1b24069c36b416db39bdd8ac040596c6b65e3f75bb6390f9e1f21a50c85adb9d435cb1cd22fe307ac10e1ee5210c2089961760d2a520e3563d0121a839da644ddfd0d560d1e7c018cd3584620c8b5b28bcec7503b50d60380ce0f3ea7cc08", 0x85}, {0x0}, {&(0x7f0000004180)="6fbc2ff5259c0fdd00598c343f4d5b669abcdd17195a7f9ae8205133ea06ccd97d227d4e8596790d97026fcbf1f174d0cd378fcbc61b4637d1d6618999589d44528542d2b52cdb135b783df72aa9b0e84dd844f4bc96dfda6a1247d4edb6c7c832ad7e0d6242fdc6b123611c8f6c11012623b1f0eb1936afc805ffb08652b0cff6a7a486545e8f156c1252a0433addda8861afbbf43f412ddeb1c345a88a01caf88274454031950ef9a37f350e2b12644b809af166ff7a327a5bdcb4741a6306458ce4dd49d85bd66224f0bb6f26971bcf61d724341851d564b24c74f71f6e1429cc80c44b67181b1edf2e177e76c3c2cd11bc5e4f26454bde", 0xf9}], 0x5, &(0x7f0000004300)=ANY=[@ANYBLOB="e2cc0080e3ffffffffffffff00000000"], 0x10}}, {{&(0x7f0000004400)=@nfc={0x27, 0x0, 0x1, 0x4}, 0x80, &(0x7f0000004580)=[{&(0x7f0000004480)="18e728caccfb1584bed54445d3095f7929dd579b8438950bec7110537f487d773679c7a21efe26ac0dcf00ceccea2e95c2c5592b7884eb07", 0x38}], 0x1, &(0x7f00000045c0)=[{0xb8, 0x103, 0x3, "760fca3ab76e6ed464f3f19dd557cd89bf38aeb9db8fae42010ed6823a32fb96d5a4c124dd5426d62b07c07ea1615a9ffbea16f38450e0e20ae5439724d8ff887a0df3566d10e7c7bd6b846a3b1403927db8191250678e97b098bf1a40c5d39f76a4a81acb7bf5b431a98addcddc8190f299d85a108f0c05b433d0a8acba8d24b2e88da0b1368278310513b4fa6ffa0ccd386c43c6eeb9cfa60f831a40d0dedf4806b84eb698"}, {0xb8, 0x3a, 0x1, "31856e457bf324bd1c05e2b585843f35564c07769c1656fb2b0f8d8542bf3c30c6c4f234bcba222733c30373a0d0bfbfc2c3d270952833eaa5f61ee0f9af144a9172828d9403c466b7152fb7b0ac53cb70f2c4e4d8a611f07585c08bfd84349ea8cfe90ce563775889facbd895386ec3f36052c758c723848073c34fbfa0e9ad974b7d8201e6846b066686e912d7b8b6ea07fee2f3deded2c2425cb996a9849796c4328a4bb7"}, {0x18, 0x10b, 0xf564, "123673aa6a1bc878"}, {0x20, 0x112, 0xf, "e1a4928df2629f1d69982139"}, {0xd8, 0x117, 0x0, "81c1ffb0588d605708b00d4518a965bdbb5f464a1536c83bcb1dd0c603b2795e5e89c49617101c54345f1d55c44abbfd6c342f4fa966964f13c1fc40b1566f7214f06844fa2fa7cfc7d4ba238a6b0740451dbfcda09a87bccd7dac8384e7230a2784d71dae9dbf2b538d9f98f28c12b6a850cc42fe0cb9514564f08118c84e20753bc366f9933dd115dc89697ebec299c0d4a3776f0cd040878945b19586a5585a4e93dd75ee90a40ea644418017fccfaeaa30e092edf961478b94cd4e20b74c75f50f1e594b"}, {0xf0, 0x3a, 0x9, "6eca18512ed630a2b6f239c50d837472d9ccf27df9c0a2a929f650c216fb8164c394f889eae8c44c954c62ecd61fa1955add299b7f1f2e57ef462da1e548bbbb4f6159bd159342a35a8b0c4d7589762c50fce3256573e4671f524ec1683fa960897ce5498173c00e77581d821f681d01e29ebe75db8027b219f82724abaffce07af17ba8af111f89a3966158f651d4b093743edbb483083d3f035e3561cdd155a9733cda2890a1d6f2f9eabadaa0cb3c0ca7cab2ddcdd0ed6968e5a8807fcbda683b85b713d1831ea21b1ec7d9af3c0380842d8dbb71fb41502f6815c5"}, {0x78, 0x1, 0x80000000, "b783a7c59e3597a9f99a1d69eda2c52b92de136403505f250c8bbe8fef8d93c0efd35ed4a5cc44719d846946672c0b57ede42aa7b05123329c3162cc275e1c57f78adb876cb2ae8e5a71b3e922c1dfc3534bcd2b581c1b94bed66455288ba6f14d1505"}], 0x3e8}}], 0x9, 0x20001000) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000480)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000700)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000740)=0x0) sendmsg$NFC_CMD_GET_DEVICE(r5, &(0x7f0000000940)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000900)={&(0x7f0000000800)={0x34, 0x0, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r14}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r15}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x1) sendmsg$TIPC_NL_MON_GET(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000a80)={0x138, r9, 0xc00, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x4}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xe87}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7ff}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7f}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x80}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6fdd415e}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}]}, @TIPC_NLA_NODE={0x58, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "6bd704aef4252049546211ac1e6b5a74bc80864adede92e0e4"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x6}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8000}]}, @TIPC_NLA_SOCK={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xb}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xe}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xc}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x15}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_CON={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffffffff}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x44}, 0x4008800) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x1c, &(0x7f0000000440)=[@in6={0xa, 0x4e21, 0x9, @loopback, 0x18b4}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f0000000240)) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000004c0)={0x0, 0x3, 0x4, 0xffc}, 0x10) sendmsg$NLBL_MGMT_C_ADD(r5, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000c80)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="8100000a40000000000a0100000008000800ac1e0001080007006401010105000100000000000800020005000000"], 0x34}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000500)=ANY=[@ANYBLOB="18080000b0000100000000000000000018113a31", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b7020000000000007baaf8ff00000000b6090000e4b00000dbaaf8ffa0000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffc70200000800000018220000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000020000008500000007000000b7000000000000009500000000000000"], &(0x7f0000001140)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) 4.529051947s ago: executing program 2 (id=5878): bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x13, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3010000}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x30}]}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) 4.359012223s ago: executing program 0 (id=5879): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @empty}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000001580)=ANY=[@ANYBLOB="120000007fffffff29000000", @ANYRES64=r0], 0x108}}], 0x1, 0xc040) 4.263955391s ago: executing program 0 (id=5880): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="4400258a004000a1259b7ed59072fbad2e9b948d7192642351c393c8bb61a6a2b137c4dcbab4f1d6376bdf30e315b1fe3c07a0d145561a2b103e4a9171e8aa1f568ea845c76c5df8bfef4b673d1edb023b70985cda738b598d33376ae05685f355095103a2fe3d3157c78c2af3abff1c3528340d5b3a68d0406b7470b6e2c143ae86892bcf02d243ce47f8995655212f2f1b5713b884c7a373506232e1b6f485330c80c2fa623f3b37a60051dd49836a9920108164cf217728abfdd3c69608234fdcb2868b562dec6c0c6a75ae9d4ef9bb28a99e6fe41a", @ANYRES32=0x0, @ANYBLOB="385a03002f5204002400128009000100626f6e64000000001400028008000b00", @ANYRES32=0x0, @ANYBLOB="08000a0001000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20040044) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, 0x0}, 0x20004880) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040), 0x6) (async) bind$bt_hci(r2, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r2, 0x400448e6, 0x0) ioctl$sock_bt_hci(r2, 0x400448e7, &(0x7f0000000080)) socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x0, 0x105}, 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x0, 0x105}, 0x50) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$l2tp(0x2, 0x2, 0x73) connect$inet(r6, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r6, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000240)=@bpq0, 0x10) (async) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000240)=@bpq0, 0x10) bind$ax25(0xffffffffffffffff, &(0x7f00000000c0)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x4}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null]}, 0x48) ioctl$FS_IOC_RESVSP(r7, 0x40305829, &(0x7f0000000180)={0x1100, 0x0, 0x52, 0x8}) r8 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000040)=@assoc_value, &(0x7f0000000000)=0x8) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000040)=@assoc_value, &(0x7f0000000000)=0x8) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r8, 0x84, 0x73, 0x0, &(0x7f0000000100)) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4005, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x408d8}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4005, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x408d8}, 0x0) socket$alg(0x26, 0x5, 0x0) (async) socket$alg(0x26, 0x5, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x5, &(0x7f0000000140)=ANY=[@ANYRESHEX=r7], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ffffc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x0, 0x2107, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x0, 0x2107, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 4.263433936s ago: executing program 2 (id=5882): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socketpair(0x21, 0x800, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r1, &(0x7f00000002c0)={0x67446698, 0x1, 0x0, 0x0, 0x4, "cb3f2f9b35dc626bbad964bfa630ed2a62a9500e1f086e98b68afa097b96f6d9f6df4813eff8ec5e8f08a5a45466d8f502478cb2dd1813c9b225cc46aca426f46ad3e2860f7e956daf3c9c2b53225a5199c3da3a26b5136c128ebf58ce30df46e94ab56b1facf17434df43c66f3964720d130661392d2ee63df39fe14081033998122de45f6502ee42647e565e34254c5e57a6c024"}, 0xa5) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1003d1, 0x3, 0x20000000, 0x6, 0x6}, 0x30}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0xc804}, 0x2) close(r2) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) close(0x3) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) r7 = socket$unix(0x1, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r8, 0x42}, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000200)="27030200dc0f14000e00033c0ff000000000ff840000000200000003125ce882cbf490d908f152", 0x27}, {&(0x7f0000002680)="76e69c0141b462", 0x7}, {0x0}, {0x0}], 0x4}, 0x4005) 4.11382977s ago: executing program 0 (id=5883): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r1, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) r5 = socket$packet(0x11, 0x2, 0x300) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x1, 0x7, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r12 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r12, &(0x7f0000000240)="80", 0x5e0, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r11, 0x1, 0x9c, 0x6, @random}, 0x14) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) read$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000180)=r7, 0x4) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000300)=ANY=[], 0x340a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000000000000000001100c64b039500000045fa2a28"], &(0x7f0000000080)='GPL\x00', 0x8000, 0x0, 0x0, 0x41100, 0x0, '\x00', r2}, 0x94) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000000114000328bd7000fcdbdf3a08000100000000000800010001000000"], 0x20}, 0x1, 0x0, 0x0, 0x84}, 0x20000000) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="1c0100002e00010000cea14eb300000004001980080111800101cf80e32cc4fbd478b585fc62a92925eb81095df4821c3344fb4ccca51f942f"], 0x11c}], 0x1, 0x0, 0x0, 0x84}, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$can_raw(0x1d, 0x3, 0x1) 3.811503457s ago: executing program 1 (id=5885): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) bind$tipc(r1, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x3, {0x41}}, 0x10) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x9d3354bba4295a8d, {{0x41}}}, 0x10) bind$alg(r0, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp384-generic\x00'}, 0x58) r2 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) mmap(&(0x7f000009e000/0x4000)=nil, 0x4000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x2, 0x13, r3, 0x0) 3.571809387s ago: executing program 4 (id=5886): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000002e40)=ANY=[@ANYBLOB="180000000000000000000000fbffffff850000007d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008080000b704000000000000850000003300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec00c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 3.546569534s ago: executing program 2 (id=5887): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe, 0x0, &(0x7f0000000000)="0000ffffffffa000b07412d2a8de", 0x0, 0x2060ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3f000000}, 0x50) 3.462703237s ago: executing program 4 (id=5888): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000c5000000ad0000009500000000000000c9143f91d59193ecdabcc32c6354768e876ba5d2135abcae1ab90007721c55410c721a1e5f9e543da1ac68ba9169effe5f881b58c6564886d0b11e35ced78cfe1df256b942d9d555d71b3abb45"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xab, 0xfffffffffffffffc, 0x0, 0x0, '\x00', 0x0, 0x38}, 0x80) r0 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x10, 0x80000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x54}}, 0x0) close(0x3) r3 = openat$cgroup_procs(r1, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f00000002c0)=ANY=[@ANYBLOB='-4'], 0xc) recvmsg(r0, &(0x7f0000000480)={&(0x7f0000000180)=@nfc_llcp, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000200)=""/22, 0x16}, {&(0x7f0000000280)=""/194, 0xc2}, {&(0x7f0000000380)=""/51, 0x33}], 0x3, &(0x7f0000000400)=""/66, 0x42}, 0x12042) 2.896016021s ago: executing program 1 (id=5889): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="6c00000010000304ee000000fedbdf250000", @ANYRES32=0x0, @ANYBLOB="f7e8"], 0x6c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000300)={0x7fffffff, 0xfc}, 0x10) sendmsg$kcm(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1c00000022008102e00f80ecdb4cb9020a", 0x11}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe186347", 0x16}], 0x2, 0x0, 0x0, 0x10}, 0x0) 2.816288239s ago: executing program 1 (id=5890): socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000001100000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x3a) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0xa, 0x300) socket$netlink(0x10, 0x3, 0x4) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r0}, 0x11) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0xc) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000056000100dd8600000000000007020000", @ANYRES32=r1, @ANYBLOB="200001"], 0x38}, 0x1, 0x0, 0x0, 0x4044081}, 0x40004010) 2.567697953s ago: executing program 4 (id=5891): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000004000000000000a000000000000000000000008000400", @ANYRES32=r0, @ANYBLOB="06001500070000000c001680080001"], 0x38}}, 0x10) 2.475886239s ago: executing program 2 (id=5892): bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000100)={'bond0\x00', &(0x7f00000001c0)=@ethtool_perm_addr={0x4b, 0x38, "4b721b782a17a7b6a00d960a64048655bcb0b0ac551fdb8a571f6b3c1cb52ecdf3e8721b8bc2e3bdbbff5ee018d48c7c38b4571926ab2a6f"}}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x50, 0x10, 0x439, 0x70bd2b, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x13, 0x618c4}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vti={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x27}}, @vti_common_policy=[@IFLA_VTI_IKEY={0x8, 0x2, 0x3}, @IFLA_VTI_LINK={0x8}], @IFLA_VTI_REMOTE={0x8, 0x5, @rand_addr=0x64010101}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c044) 2.421526862s ago: executing program 4 (id=5893): syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/cgroup\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r0, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) 2.267370016s ago: executing program 4 (id=5894): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x183081, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000500)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22667f2c00dbf6e97158b33d4fec877f1b6d76745b686158bbcfe8875afdef00010000000029"], 0x280) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[], 0x66) 159.795086ms ago: executing program 2 (id=5895): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="01000000060000000800000008"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffff7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1}, 0xc) 159.343354ms ago: executing program 1 (id=5896): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000000c0)={0x9, 0x0}, 0x8) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={r8}, 0x4) 116.433166ms ago: executing program 1 (id=5897): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000010000000000000000000000711807000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 115.991833ms ago: executing program 4 (id=5898): r0 = bpf$ITER_CREATE(0xb, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(r0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000010000000000000000000000950000000000000046682d562c31aa909594c57a164463536e83a7f6ac12a8b52f0d70aa97a91fa46cdcefe7534fda04cace652409e818c0b1da96d9c9fa8e9523840100cbac3c07c3db6bc11fa42d9ca632c33ca9a00987000000002cd50db1486b80ee61ff6ddaa4bf0609a8ef7fd07f4c556489cf61cf8e63e826fff67d3299ca9f9b85cdcd75b85bb1775f4ff03b75aa7b6aa1a7e9a2b91d103d54"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000000000000000000711222000000000095000000000000009e67b6cd76b5e649bf11e55a20333da13425098d25f36fd45441ddd3f276d785adff1ff9e2902ab6c755bb37fe1770214ffa7f4f8a6a016374274cd744c9373908f80852361b7a2288abe97a64145d196d909462b2e5703506a19df008013d72eec41649acf2f1adf2649917b757e0701b7c6f0b03e3b4c7f6c37be30f62a3b792034cfc1b579c207274fa1a3198beb17623714848d50662a383c137f691c2d3d5f276259df08107c66eede2a370927b0a634d1144b9bf49a04f72be0e9eb3e6e0a182027d6b9cf8814c519522cd5cf5ce205787d70ecff2e34e8d80c6acf732"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 99.671466ms ago: executing program 2 (id=5899): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x75, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000900000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="03000000040000000400"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 0s ago: executing program 1 (id=5900): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg1\x00', 0x2}) ioctl$TUNSETDEBUG(r0, 0x400454c9, 0xffffffffffffffff) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000040)) kernel console output (not intermixed with test programs): 7344][T22072] ? __fget_files+0x2a/0x420 [ 486.417369][T22072] ? __fget_files+0x3a0/0x420 [ 486.417405][T22072] __x64_sys_sendmsg+0x1bd/0x2a0 [ 486.417427][T22072] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 486.417454][T22072] ? __pfx_ksys_write+0x10/0x10 [ 486.417487][T22072] do_syscall_64+0x14d/0xf80 [ 486.417504][T22072] ? trace_irq_disable+0x3b/0x150 [ 486.417529][T22072] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.417548][T22072] ? clear_bhb_loop+0x40/0x90 [ 486.417570][T22072] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.417589][T22072] RIP: 0033:0x7f1c6e59c799 [ 486.417608][T22072] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 486.417624][T22072] RSP: 002b:00007f1c6f465028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 486.417645][T22072] RAX: ffffffffffffffda RBX: 00007f1c6e815fa0 RCX: 00007f1c6e59c799 [ 486.417659][T22072] RDX: 0000000000084040 RSI: 00002000000001c0 RDI: 0000000000000004 [ 486.417671][T22072] RBP: 00007f1c6f465090 R08: 0000000000000000 R09: 0000000000000000 [ 486.417683][T22072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 486.417694][T22072] R13: 00007f1c6e816038 R14: 00007f1c6e815fa0 R15: 00007ffdbd973c28 [ 486.417726][T22072] [ 486.976762][T22079] FAULT_INJECTION: forcing a failure. [ 486.976762][T22079] name failslab, interval 1, probability 0, space 0, times 0 [ 487.003817][T22079] CPU: 1 UID: 0 PID: 22079 Comm: syz.2.5122 Not tainted syzkaller #0 PREEMPT(full) [ 487.003843][T22079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 487.003854][T22079] Call Trace: [ 487.003863][T22079] [ 487.003871][T22079] dump_stack_lvl+0xe8/0x150 [ 487.003902][T22079] should_fail_ex+0x412/0x560 [ 487.003931][T22079] should_failslab+0xa8/0x100 [ 487.003957][T22079] __kmalloc_noprof+0xe8/0x760 [ 487.003978][T22079] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 487.004010][T22079] tomoyo_realpath_from_path+0xe3/0x5d0 [ 487.004045][T22079] ? tomoyo_path_number_perm+0x219/0x630 [ 487.004066][T22079] tomoyo_path_number_perm+0x246/0x630 [ 487.004090][T22079] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 487.004114][T22079] ? __lock_acquire+0x6b5/0x2cf0 [ 487.004149][T22079] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 487.004190][T22079] ? __fget_files+0x2a/0x420 [ 487.004218][T22079] ? __fget_files+0x2a/0x420 [ 487.004243][T22079] ? __fget_files+0x3a0/0x420 [ 487.004267][T22079] ? __fget_files+0x2a/0x420 [ 487.004296][T22079] security_file_ioctl+0xc3/0x2a0 [ 487.004318][T22079] __se_sys_ioctl+0x47/0x170 [ 487.004348][T22079] do_syscall_64+0x14d/0xf80 [ 487.004366][T22079] ? trace_irq_disable+0x3b/0x150 [ 487.004391][T22079] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.004410][T22079] ? clear_bhb_loop+0x40/0x90 [ 487.004433][T22079] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.004451][T22079] RIP: 0033:0x7f89c199c799 [ 487.004468][T22079] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 487.004483][T22079] RSP: 002b:00007f89c2845028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 487.004502][T22079] RAX: ffffffffffffffda RBX: 00007f89c1c15fa0 RCX: 00007f89c199c799 [ 487.004516][T22079] RDX: 0000200000000340 RSI: 00000000000089f8 RDI: 0000000000000005 [ 487.004527][T22079] RBP: 00007f89c2845090 R08: 0000000000000000 R09: 0000000000000000 [ 487.004537][T22079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 487.004548][T22079] R13: 00007f89c1c16038 R14: 00007f89c1c15fa0 R15: 00007ffc5f08d678 [ 487.004574][T22079] [ 487.004582][T22079] ERROR: Out of memory at tomoyo_realpath_from_path. [ 487.245900][T14190] net_ratelimit: 13 callbacks suppressed [ 487.245919][T14190] bond5: (slave bridge4): failed to get link speed/duplex [ 487.290133][T22073] kthread_run failed with err -4 [ 487.296917][T22087] netlink: 'syz.4.5123': attribute type 10 has an invalid length. [ 487.466349][ T7305] bond5: (slave bridge4): failed to get link speed/duplex [ 487.595891][T14188] bond5: (slave bridge4): failed to get link speed/duplex [ 487.756931][ T7305] bond5: (slave bridge4): failed to get link speed/duplex [ 487.915878][ T49] bond5: (slave bridge4): failed to get link speed/duplex [ 487.978936][T22132] netlink: 'syz.2.5137': attribute type 7 has an invalid length. [ 487.994923][T22132] netlink: 'syz.2.5137': attribute type 8 has an invalid length. [ 488.055631][T22132] FAULT_INJECTION: forcing a failure. [ 488.055631][T22132] name failslab, interval 1, probability 0, space 0, times 0 [ 488.079058][T22132] CPU: 0 UID: 0 PID: 22132 Comm: syz.2.5137 Not tainted syzkaller #0 PREEMPT(full) [ 488.079083][T22132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 488.079095][T22132] Call Trace: [ 488.079104][T22132] [ 488.079112][T22132] dump_stack_lvl+0xe8/0x150 [ 488.079141][T22132] should_fail_ex+0x412/0x560 [ 488.079167][T22132] ? alloc_inode+0x6a/0x1b0 [ 488.079201][T22132] should_failslab+0xa8/0x100 [ 488.079226][T22132] kmem_cache_alloc_lru_noprof+0x87/0x640 [ 488.079243][T22132] ? simple_start_creating+0xcc/0x110 [ 488.079275][T22132] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 488.079349][T22132] alloc_inode+0x6a/0x1b0 [ 488.079374][T22132] new_inode+0x22/0x170 [ 488.079402][T22132] __debugfs_create_file+0xb8/0x400 [ 488.079431][T22132] debugfs_create_file_full+0x3f/0x60 [ 488.079459][T22132] ref_tracker_dir_debugfs+0x197/0x360 [ 488.079482][T22132] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 488.079531][T22132] ? __kvmalloc_node_noprof+0x545/0x8a0 [ 488.079551][T22132] ? alloc_netdev_mqs+0xa6/0x11b0 [ 488.079734][T22132] ? __raw_spin_lock_init+0x45/0x100 [ 488.079755][T22132] alloc_netdev_mqs+0x272/0x11b0 [ 488.079773][T22132] ? __pfx_hsr_dev_setup+0x10/0x10 [ 488.079838][T22132] rtnl_create_link+0x31f/0xd70 [ 488.079864][T22132] rtnl_newlink_create+0x277/0xb70 [ 488.079895][T22132] ? __mutex_lock+0x5ac/0x1300 [ 488.079917][T22132] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 488.079944][T22132] ? __pfx___mutex_lock+0x10/0x10 [ 488.079969][T22132] ? ns_capable+0x89/0xe0 [ 488.079993][T22132] rtnl_newlink+0x1666/0x1be0 [ 488.080030][T22132] ? __pfx_rtnl_newlink+0x10/0x10 [ 488.080064][T22132] ? __lock_acquire+0x6b5/0x2cf0 [ 488.080097][T22132] ? __lock_acquire+0x6b5/0x2cf0 [ 488.080120][T22132] ? __lock_acquire+0x6b5/0x2cf0 [ 488.080152][T22132] ? unwind_next_frame+0xa5/0x23c0 [ 488.080209][T22132] ? __lock_acquire+0x6b5/0x2cf0 [ 488.080235][T22132] ? is_bpf_text_address+0x26/0x2b0 [ 488.080259][T22132] ? kernel_text_address+0xa5/0xe0 [ 488.080305][T22132] ? __pfx_rtnl_newlink+0x10/0x10 [ 488.080327][T22132] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 488.080354][T22132] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 488.080376][T22132] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 488.080403][T22132] ? __lock_acquire+0x6b5/0x2cf0 [ 488.080435][T22132] netlink_rcv_skb+0x232/0x4b0 [ 488.080460][T22132] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 488.080486][T22132] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 488.080523][T22132] ? netlink_deliver_tap+0x2e/0x1b0 [ 488.080554][T22132] netlink_unicast+0x80f/0x9b0 [ 488.080585][T22132] ? __pfx_netlink_unicast+0x10/0x10 [ 488.080609][T22132] ? netlink_sendmsg+0x650/0xb40 [ 488.080630][T22132] ? skb_put+0x11b/0x210 [ 488.080659][T22132] netlink_sendmsg+0x813/0xb40 [ 488.080690][T22132] ? __pfx_netlink_sendmsg+0x10/0x10 [ 488.080717][T22132] ? aa_sock_msg_perm+0xf1/0x1b0 [ 488.080743][T22132] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 488.080767][T22132] ____sys_sendmsg+0x972/0x9f0 [ 488.080795][T22132] ? __pfx_____sys_sendmsg+0x10/0x10 [ 488.080823][T22132] ? import_iovec+0x73/0xa0 [ 488.080853][T22132] ___sys_sendmsg+0x2a5/0x360 [ 488.080877][T22132] ? __pfx____sys_sendmsg+0x10/0x10 [ 488.080927][T22132] ? __fget_files+0x2a/0x420 [ 488.080952][T22132] ? __fget_files+0x3a0/0x420 [ 488.080984][T22132] __x64_sys_sendmsg+0x1bd/0x2a0 [ 488.081005][T22132] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 488.081032][T22132] ? __pfx_ksys_write+0x10/0x10 [ 488.081062][T22132] do_syscall_64+0x14d/0xf80 [ 488.081078][T22132] ? trace_irq_disable+0x3b/0x150 [ 488.081101][T22132] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.081117][T22132] ? clear_bhb_loop+0x40/0x90 [ 488.081139][T22132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.081157][T22132] RIP: 0033:0x7f89c199c799 [ 488.081185][T22132] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 488.081201][T22132] RSP: 002b:00007f89c2845028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 488.081220][T22132] RAX: ffffffffffffffda RBX: 00007f89c1c15fa0 RCX: 00007f89c199c799 [ 488.081234][T22132] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000006 [ 488.081246][T22132] RBP: 00007f89c2845090 R08: 0000000000000000 R09: 0000000000000000 [ 488.081257][T22132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 488.081267][T22132] R13: 00007f89c1c16038 R14: 00007f89c1c15fa0 R15: 00007ffc5f08d678 [ 488.081303][T22132] [ 488.082228][T22136] FAULT_INJECTION: forcing a failure. [ 488.082228][T22136] name failslab, interval 1, probability 0, space 0, times 0 [ 488.082788][T22132] debugfs: out of free dentries, can not create file 'netdev@ffff88805abe0620' [ 488.094998][T22136] CPU: 1 UID: 0 PID: 22136 Comm: syz.4.5140 Not tainted syzkaller #0 PREEMPT(full) [ 488.095023][T22136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 488.095034][T22136] Call Trace: [ 488.095043][T22136] [ 488.095051][T22136] dump_stack_lvl+0xe8/0x150 [ 488.095082][T22136] should_fail_ex+0x412/0x560 [ 488.095110][T22136] should_failslab+0xa8/0x100 [ 488.095135][T22136] __kmalloc_noprof+0xe8/0x760 [ 488.095155][T22136] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 488.095182][T22136] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 488.095203][T22136] genl_family_rcv_msg_doit+0xd9/0x330 [ 488.095223][T22136] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 488.095249][T22136] ? apparmor_capable+0x126/0x170 [ 488.095278][T22136] ? bpf_lsm_capable+0x9/0x20 [ 488.095302][T22136] ? security_capable+0x7e/0x2c0 [ 488.095329][T22136] genl_rcv_msg+0x61c/0x7a0 [ 488.095354][T22136] ? __pfx_genl_rcv_msg+0x10/0x10 [ 488.095372][T22136] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 488.095398][T22136] ? __lock_acquire+0x6b5/0x2cf0 [ 488.095431][T22136] netlink_rcv_skb+0x232/0x4b0 [ 488.095456][T22136] ? __pfx_genl_rcv_msg+0x10/0x10 [ 488.095480][T22136] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 488.095520][T22136] ? down_read+0x272/0x2e0 [ 488.095537][T22136] ? genl_rcv+0xd/0x40 [ 488.095557][T22136] genl_rcv+0x28/0x40 [ 488.095572][T22136] netlink_unicast+0x80f/0x9b0 [ 488.095602][T22136] ? __pfx_netlink_unicast+0x10/0x10 [ 488.095625][T22136] ? netlink_sendmsg+0x650/0xb40 [ 488.095647][T22136] ? skb_put+0x11b/0x210 [ 488.095682][T22136] netlink_sendmsg+0x813/0xb40 [ 488.095715][T22136] ? __pfx_netlink_sendmsg+0x10/0x10 [ 488.095745][T22136] ? aa_sock_msg_perm+0xf1/0x1b0 [ 488.095769][T22136] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 488.095792][T22136] ____sys_sendmsg+0x972/0x9f0 [ 488.095819][T22136] ? __pfx_____sys_sendmsg+0x10/0x10 [ 488.095845][T22136] ? import_iovec+0x73/0xa0 [ 488.095875][T22136] ___sys_sendmsg+0x2a5/0x360 [ 488.095899][T22136] ? __pfx____sys_sendmsg+0x10/0x10 [ 488.095950][T22136] ? __fget_files+0x2a/0x420 [ 488.095975][T22136] ? __fget_files+0x3a0/0x420 [ 488.096008][T22136] __x64_sys_sendmsg+0x1bd/0x2a0 [ 488.096029][T22136] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 488.096056][T22136] ? __pfx_ksys_write+0x10/0x10 [ 488.096087][T22136] do_syscall_64+0x14d/0xf80 [ 488.096104][T22136] ? trace_irq_disable+0x3b/0x150 [ 488.096128][T22136] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.096147][T22136] ? clear_bhb_loop+0x40/0x90 [ 488.096169][T22136] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.096186][T22136] RIP: 0033:0x7f194f19c799 [ 488.096203][T22136] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 488.096218][T22136] RSP: 002b:00007f1950028028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 488.096238][T22136] RAX: ffffffffffffffda RBX: 00007f194f415fa0 RCX: 00007f194f19c799 [ 488.096252][T22136] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000003 [ 488.096263][T22136] RBP: 00007f1950028090 R08: 0000000000000000 R09: 0000000000000000 [ 488.096275][T22136] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 488.096286][T22136] R13: 00007f194f416038 R14: 00007f194f415fa0 R15: 00007ffee4cf5848 [ 488.096316][T22136] [ 488.387054][T22140] netlink: 'syz.0.5139': attribute type 1 has an invalid length. [ 488.422289][ T7305] bond5: (slave bridge4): failed to get link speed/duplex [ 488.726323][T22140] netlink: 'syz.0.5139': attribute type 1 has an invalid length. [ 488.853845][ T49] bond5: (slave bridge4): failed to get link speed/duplex [ 488.922500][T22140] netlink: 'syz.0.5139': attribute type 8 has an invalid length. [ 489.028172][ T7305] bond5: (slave bridge4): failed to get link speed/duplex [ 489.145930][ T49] bond5: (slave bridge4): failed to get link speed/duplex [ 489.252592][T22177] x_tables: ip6_tables: HMARK.0 target: invalid size 64 (kernel) != (user) 0 [ 489.261691][ T7305] bond5: (slave bridge4): failed to get link speed/duplex [ 489.291432][T22179] tipc: Enabling of bearer rejected, already enabled [ 489.435359][T22188] __nla_validate_parse: 17 callbacks suppressed [ 489.435379][T22188] netlink: 276 bytes leftover after parsing attributes in process `syz.4.5158'. [ 489.467519][T22192] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5159'. [ 490.034034][T22217] netlink: 27 bytes leftover after parsing attributes in process `syz.4.5167'. [ 490.085240][T22222] netlink: 'syz.2.5168': attribute type 3 has an invalid length. [ 490.281701][T22229] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5170'. [ 490.414552][T22234] netlink: 'syz.0.5172': attribute type 3 has an invalid length. [ 490.459862][T22234] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5172'. [ 490.712960][T22244] IPVS: Scheduler module ip_vs_sip not found [ 490.856835][T22257] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5181'. [ 490.893931][T22259] FAULT_INJECTION: forcing a failure. [ 490.893931][T22259] name failslab, interval 1, probability 0, space 0, times 0 [ 490.932657][T22261] IPVS: Unknown mcast interface: netdevsim0 [ 490.946505][T22259] CPU: 1 UID: 0 PID: 22259 Comm: syz.3.5182 Not tainted syzkaller #0 PREEMPT(full) [ 490.946533][T22259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 490.946544][T22259] Call Trace: [ 490.946552][T22259] [ 490.946560][T22259] dump_stack_lvl+0xe8/0x150 [ 490.946590][T22259] should_fail_ex+0x412/0x560 [ 490.946617][T22259] should_failslab+0xa8/0x100 [ 490.946642][T22259] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 490.946662][T22259] ? __alloc_skb+0x186/0x7d0 [ 490.946684][T22259] ? __alloc_skb+0x1d0/0x7d0 [ 490.946704][T22259] ? __local_bh_enable_ip+0xd0/0x130 [ 490.946731][T22259] __alloc_skb+0x1d0/0x7d0 [ 490.946759][T22259] netlink_sendmsg+0x5d4/0xb40 [ 490.946790][T22259] ? __pfx_netlink_sendmsg+0x10/0x10 [ 490.946819][T22259] ? aa_sock_msg_perm+0xf1/0x1b0 [ 490.946844][T22259] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 490.946869][T22259] ____sys_sendmsg+0x972/0x9f0 [ 490.946896][T22259] ? __pfx_____sys_sendmsg+0x10/0x10 [ 490.946920][T22259] ? import_iovec+0x73/0xa0 [ 490.946946][T22259] ___sys_sendmsg+0x2a5/0x360 [ 490.946967][T22259] ? __pfx____sys_sendmsg+0x10/0x10 [ 490.947008][T22259] ? __fget_files+0x2a/0x420 [ 490.947030][T22259] ? __fget_files+0x3a0/0x420 [ 490.947059][T22259] __x64_sys_sendmsg+0x1bd/0x2a0 [ 490.947079][T22259] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 490.947101][T22259] ? __pfx_ksys_write+0x10/0x10 [ 490.947129][T22259] do_syscall_64+0x14d/0xf80 [ 490.947147][T22259] ? trace_irq_disable+0x3b/0x150 [ 490.947171][T22259] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.947190][T22259] ? clear_bhb_loop+0x40/0x90 [ 490.947211][T22259] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.947230][T22259] RIP: 0033:0x7f884fb9c799 [ 490.947248][T22259] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 490.947264][T22259] RSP: 002b:00007f8850afd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 490.947284][T22259] RAX: ffffffffffffffda RBX: 00007f884fe15fa0 RCX: 00007f884fb9c799 [ 490.947298][T22259] RDX: 0000000000000080 RSI: 0000200000000340 RDI: 0000000000000004 [ 490.947309][T22259] RBP: 00007f8850afd090 R08: 0000000000000000 R09: 0000000000000000 [ 490.947321][T22259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 490.947332][T22259] R13: 00007f884fe16038 R14: 00007f884fe15fa0 R15: 00007fff2a022a68 [ 490.947361][T22259] [ 491.320084][T22268] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5187'. [ 491.627110][T22289] FAULT_INJECTION: forcing a failure. [ 491.627110][T22289] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 491.672971][T22289] CPU: 0 UID: 0 PID: 22289 Comm: syz.4.5194 Not tainted syzkaller #0 PREEMPT(full) [ 491.672997][T22289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 491.673009][T22289] Call Trace: [ 491.673017][T22289] [ 491.673025][T22289] dump_stack_lvl+0xe8/0x150 [ 491.673057][T22289] should_fail_ex+0x412/0x560 [ 491.673087][T22289] _copy_from_user+0x2d/0xb0 [ 491.673116][T22289] kstrtouint_from_user+0xd6/0x180 [ 491.673143][T22289] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 491.673183][T22289] proc_fail_nth_write+0x8e/0x210 [ 491.673209][T22289] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 491.673241][T22289] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 491.673269][T22289] vfs_write+0x29a/0xb90 [ 491.673298][T22289] ? __pfx_vfs_write+0x10/0x10 [ 491.673320][T22289] ? __fget_files+0x2a/0x420 [ 491.673350][T22289] ? __fget_files+0x3a0/0x420 [ 491.673374][T22289] ? __fget_files+0x2a/0x420 [ 491.673415][T22289] ksys_write+0x150/0x270 [ 491.673438][T22289] ? __pfx_ksys_write+0x10/0x10 [ 491.673470][T22289] do_syscall_64+0x14d/0xf80 [ 491.673488][T22289] ? trace_irq_disable+0x3b/0x150 [ 491.673513][T22289] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.673532][T22289] ? clear_bhb_loop+0x40/0x90 [ 491.673555][T22289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.673573][T22289] RIP: 0033:0x7f194f15cfce [ 491.673591][T22289] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 491.673607][T22289] RSP: 002b:00007f1950027fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 491.673627][T22289] RAX: ffffffffffffffda RBX: 00007f19500286c0 RCX: 00007f194f15cfce [ 491.673640][T22289] RDX: 0000000000000001 RSI: 00007f19500280a0 RDI: 0000000000000003 [ 491.673651][T22289] RBP: 00007f1950028090 R08: 0000000000000000 R09: 0000000000000000 [ 491.673662][T22289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 491.673672][T22289] R13: 00007f194f416038 R14: 00007f194f415fa0 R15: 00007ffee4cf5848 [ 491.673701][T22289] [ 491.952413][T22298] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5197'. [ 491.963148][T22298] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5197'. [ 492.065538][T22305] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5199'. [ 492.327313][T14190] net_ratelimit: 22 callbacks suppressed [ 492.327332][T14190] bond5: (slave bridge4): failed to get link speed/duplex [ 492.906117][ T35] bond5: (slave bridge4): failed to get link speed/duplex [ 493.027288][T22362] netlink: 'syz.3.5218': attribute type 7 has an invalid length. [ 493.065504][ T35] bond5: (slave bridge4): failed to get link speed/duplex [ 493.072945][T22362] netlink: 'syz.3.5218': attribute type 8 has an invalid length. [ 493.094988][T22368] FAULT_INJECTION: forcing a failure. [ 493.094988][T22368] name failslab, interval 1, probability 0, space 0, times 0 [ 493.097080][T22362] FAULT_INJECTION: forcing a failure. [ 493.097080][T22362] name failslab, interval 1, probability 0, space 0, times 0 [ 493.139029][T22362] CPU: 0 UID: 0 PID: 22362 Comm: syz.3.5218 Not tainted syzkaller #0 PREEMPT(full) [ 493.139055][T22362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 493.139067][T22362] Call Trace: [ 493.139075][T22362] [ 493.139083][T22362] dump_stack_lvl+0xe8/0x150 [ 493.139114][T22362] should_fail_ex+0x412/0x560 [ 493.139141][T22362] ? alloc_inode+0x6a/0x1b0 [ 493.139165][T22362] should_failslab+0xa8/0x100 [ 493.139189][T22362] kmem_cache_alloc_lru_noprof+0x87/0x640 [ 493.139208][T22362] ? simple_start_creating+0xcc/0x110 [ 493.139241][T22362] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 493.139268][T22362] alloc_inode+0x6a/0x1b0 [ 493.139294][T22362] new_inode+0x22/0x170 [ 493.139324][T22362] __debugfs_create_file+0xb8/0x400 [ 493.139355][T22362] debugfs_create_file_full+0x3f/0x60 [ 493.139393][T22362] ref_tracker_dir_debugfs+0x197/0x360 [ 493.139419][T22362] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 493.139470][T22362] ? __kvmalloc_node_noprof+0x545/0x8a0 [ 493.139492][T22362] ? alloc_netdev_mqs+0xa6/0x11b0 [ 493.139517][T22362] ? __raw_spin_lock_init+0x45/0x100 [ 493.139539][T22362] alloc_netdev_mqs+0x272/0x11b0 [ 493.139559][T22362] ? __pfx_hsr_dev_setup+0x10/0x10 [ 493.139588][T22362] rtnl_create_link+0x31f/0xd70 [ 493.139616][T22362] rtnl_newlink_create+0x277/0xb70 [ 493.139643][T22362] ? __pfx___nla_validate_parse+0x10/0x10 [ 493.139680][T22362] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 493.139710][T22362] ? __pfx___mutex_lock+0x10/0x10 [ 493.139740][T22362] ? ns_capable+0x89/0xe0 [ 493.139768][T22362] rtnl_newlink+0x1666/0x1be0 [ 493.139809][T22362] ? __pfx_rtnl_newlink+0x10/0x10 [ 493.139831][T22362] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.139887][T22362] ? kasan_quarantine_put+0xbb/0x1f0 [ 493.139907][T22362] ? lockdep_hardirqs_on+0x7a/0x110 [ 493.139938][T22362] ? kmem_cache_free+0x187/0x630 [ 493.139957][T22362] ? nlmon_xmit+0xb0/0x100 [ 493.139997][T22362] ? __lock_acquire+0x6b5/0x2cf0 [ 493.140026][T22362] ? __local_bh_enable_ip+0xd0/0x130 [ 493.140049][T22362] ? lockdep_hardirqs_on+0x7a/0x110 [ 493.140078][T22362] ? __dev_queue_xmit+0x28d/0x38d0 [ 493.140097][T22362] ? __local_bh_enable_ip+0xd0/0x130 [ 493.140118][T22362] ? __dev_queue_xmit+0x28d/0x38d0 [ 493.140163][T22362] ? __pfx_rtnl_newlink+0x10/0x10 [ 493.140199][T22362] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 493.140227][T22362] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 493.140250][T22362] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 493.140271][T22362] ? ref_tracker_free+0x693/0x840 [ 493.140293][T22362] ? __copy_skb_header+0xa3/0x4a0 [ 493.140313][T22362] ? __pfx_ref_tracker_free+0x10/0x10 [ 493.140348][T22362] netlink_rcv_skb+0x232/0x4b0 [ 493.140382][T22362] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 493.140409][T22362] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 493.140445][T22362] ? netlink_deliver_tap+0x2e/0x1b0 [ 493.140478][T22362] netlink_unicast+0x80f/0x9b0 [ 493.140509][T22362] ? __pfx_netlink_unicast+0x10/0x10 [ 493.140534][T22362] ? netlink_sendmsg+0x650/0xb40 [ 493.140565][T22362] ? skb_put+0x11b/0x210 [ 493.140594][T22362] netlink_sendmsg+0x813/0xb40 [ 493.140629][T22362] ? __pfx_netlink_sendmsg+0x10/0x10 [ 493.140657][T22362] ? aa_sock_msg_perm+0xf1/0x1b0 [ 493.140691][T22362] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 493.140716][T22362] ____sys_sendmsg+0x972/0x9f0 [ 493.140744][T22362] ? __pfx_____sys_sendmsg+0x10/0x10 [ 493.140772][T22362] ? import_iovec+0x73/0xa0 [ 493.140804][T22362] ___sys_sendmsg+0x2a5/0x360 [ 493.140828][T22362] ? __pfx____sys_sendmsg+0x10/0x10 [ 493.140882][T22362] ? __fget_files+0x2a/0x420 [ 493.140908][T22362] ? __fget_files+0x3a0/0x420 [ 493.140944][T22362] __x64_sys_sendmsg+0x1bd/0x2a0 [ 493.140966][T22362] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 493.140994][T22362] ? __pfx_ksys_write+0x10/0x10 [ 493.141027][T22362] do_syscall_64+0x14d/0xf80 [ 493.141044][T22362] ? trace_irq_disable+0x3b/0x150 [ 493.141070][T22362] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.141089][T22362] ? clear_bhb_loop+0x40/0x90 [ 493.141112][T22362] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.141130][T22362] RIP: 0033:0x7f884fb9c799 [ 493.141148][T22362] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 493.141164][T22362] RSP: 002b:00007f8850afd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 493.141215][T22362] RAX: ffffffffffffffda RBX: 00007f884fe15fa0 RCX: 00007f884fb9c799 [ 493.141229][T22362] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000006 [ 493.141241][T22362] RBP: 00007f8850afd090 R08: 0000000000000000 R09: 0000000000000000 [ 493.141253][T22362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 493.141264][T22362] R13: 00007f884fe16038 R14: 00007f884fe15fa0 R15: 00007fff2a022a68 [ 493.141296][T22362] [ 493.143694][T22362] debugfs: out of free dentries, can not create file 'netdev@ffff88807570a620' [ 493.160918][T22368] CPU: 1 UID: 0 PID: 22368 Comm: syz.4.5220 Not tainted syzkaller #0 PREEMPT(full) [ 493.160947][T22368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 493.160960][T22368] Call Trace: [ 493.160967][T22368] [ 493.160975][T22368] dump_stack_lvl+0xe8/0x150 [ 493.161006][T22368] should_fail_ex+0x412/0x560 [ 493.161035][T22368] should_failslab+0xa8/0x100 [ 493.161060][T22368] __kmalloc_cache_noprof+0x88/0x660 [ 493.161079][T22368] ? sctp_v6_cmp_addr+0x15/0xd0 [ 493.161101][T22368] ? sctp_add_bind_addr+0x8c/0x370 [ 493.161126][T22368] sctp_add_bind_addr+0x8c/0x370 [ 493.161151][T22368] sctp_copy_local_addr_list+0x314/0x4f0 [ 493.161176][T22368] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 493.161198][T22368] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 493.161222][T22368] ? sctp_v6_is_any+0x64/0x80 [ 493.161245][T22368] ? sctp_copy_one_addr+0x93/0x360 [ 493.161273][T22368] sctp_bind_addr_copy+0xb3/0x3c0 [ 493.161294][T22368] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 493.161317][T22368] sctp_connect_new_asoc+0x2ff/0x6b0 [ 493.161345][T22368] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 493.161375][T22368] ? __local_bh_enable_ip+0xd0/0x130 [ 493.161396][T22368] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 493.161418][T22368] ? security_sctp_bind_connect+0x7e/0x2c0 [ 493.161441][T22368] sctp_sendmsg+0x1528/0x2c10 [ 493.161480][T22368] ? __pfx_sctp_sendmsg+0x10/0x10 [ 493.161506][T22368] ? aa_sk_perm+0x6d5/0x900 [ 493.161536][T22368] ? __pfx_aa_sk_perm+0x10/0x10 [ 493.161561][T22368] ? sock_rps_record_flow+0x19/0x350 [ 493.161590][T22368] ? inet_sendmsg+0x2f4/0x370 [ 493.161611][T22368] ____sys_sendmsg+0x80a/0x9f0 [ 493.161639][T22368] ? __pfx_____sys_sendmsg+0x10/0x10 [ 493.161666][T22368] ? import_iovec+0x73/0xa0 [ 493.161695][T22368] ___sys_sendmsg+0x2a5/0x360 [ 493.161718][T22368] ? __pfx____sys_sendmsg+0x10/0x10 [ 493.161742][T22368] ? kstrtouint+0x6e/0xe0 [ 493.161789][T22368] ? __fget_files+0x2a/0x420 [ 493.161812][T22368] ? __fget_files+0x3a0/0x420 [ 493.161847][T22368] __sys_sendmmsg+0x27c/0x4e0 [ 493.161876][T22368] ? __pfx___sys_sendmmsg+0x10/0x10 [ 493.161892][T22368] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 493.161936][T22368] ? ksys_write+0x242/0x270 [ 493.161958][T22368] ? __pfx_ksys_write+0x10/0x10 [ 493.161984][T22368] __x64_sys_sendmmsg+0xa0/0xc0 [ 493.162004][T22368] do_syscall_64+0x14d/0xf80 [ 493.162021][T22368] ? trace_irq_disable+0x3b/0x150 [ 493.162045][T22368] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.162063][T22368] ? clear_bhb_loop+0x40/0x90 [ 493.162084][T22368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.162102][T22368] RIP: 0033:0x7f194f19c799 [ 493.162120][T22368] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 493.162135][T22368] RSP: 002b:00007f1950028028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 493.162155][T22368] RAX: ffffffffffffffda RBX: 00007f194f415fa0 RCX: 00007f194f19c799 [ 493.162168][T22368] RDX: 0000000000000001 RSI: 0000200000000500 RDI: 0000000000000003 [ 493.162180][T22368] RBP: 00007f1950028090 R08: 0000000000000000 R09: 0000000000000000 [ 493.162191][T22368] R10: 0000000004000840 R11: 0000000000000246 R12: 0000000000000002 [ 493.162203][T22368] R13: 00007f194f416038 R14: 00007f194f415fa0 R15: 00007ffee4cf5848 [ 493.162233][T22368] [ 493.474119][T22379] x_tables: unsorted entry at hook 2 [ 493.526593][ T49] bond5: (slave bridge4): failed to get link speed/duplex [ 493.984085][T22381] unsupported nlmsg_type 40 [ 494.050227][T22387] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 494.057528][T22387] IPv6: NLM_F_CREATE should be set when creating new route [ 494.099928][T22386] netlink: 'syz.2.5225': attribute type 1 has an invalid length. [ 494.255959][ T7305] bond5: (slave bridge4): failed to get link speed/duplex [ 494.276633][T22393] syzkaller0: entered promiscuous mode [ 494.286793][T22393] syzkaller0: entered allmulticast mode [ 494.343380][T22399] xt_hashlimit: max too large, truncated to 1048576 [ 494.354795][T22400] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 494.384570][T22400] FAULT_INJECTION: forcing a failure. [ 494.384570][T22400] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 494.418990][T22400] CPU: 1 UID: 0 PID: 22400 Comm: syz.1.5228 Not tainted syzkaller #0 PREEMPT(full) [ 494.419016][T22400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 494.419027][T22400] Call Trace: [ 494.419034][T22400] [ 494.419043][T22400] dump_stack_lvl+0xe8/0x150 [ 494.419072][T22400] should_fail_ex+0x412/0x560 [ 494.419100][T22400] _copy_from_user+0x2d/0xb0 [ 494.419126][T22400] kstrtouint_from_user+0xd6/0x180 [ 494.419151][T22400] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 494.419182][T22400] proc_fail_nth_write+0x8e/0x210 [ 494.419206][T22400] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 494.419231][T22400] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 494.419254][T22400] vfs_write+0x29a/0xb90 [ 494.419281][T22400] ? __pfx_vfs_write+0x10/0x10 [ 494.419300][T22400] ? __fget_files+0x2a/0x420 [ 494.419327][T22400] ? __fget_files+0x3a0/0x420 [ 494.419348][T22400] ? __fget_files+0x2a/0x420 [ 494.419378][T22400] ksys_write+0x150/0x270 [ 494.419397][T22400] ? __pfx_ksys_write+0x10/0x10 [ 494.419425][T22400] do_syscall_64+0x14d/0xf80 [ 494.419441][T22400] ? trace_irq_disable+0x3b/0x150 [ 494.419465][T22400] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.419483][T22400] ? clear_bhb_loop+0x40/0x90 [ 494.419505][T22400] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.419523][T22400] RIP: 0033:0x7fde6b15cfce [ 494.419541][T22400] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 494.419558][T22400] RSP: 002b:00007fde693f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 494.419578][T22400] RAX: ffffffffffffffda RBX: 00007fde693f66c0 RCX: 00007fde6b15cfce [ 494.419592][T22400] RDX: 0000000000000001 RSI: 00007fde693f60a0 RDI: 0000000000000004 [ 494.419604][T22400] RBP: 00007fde693f6090 R08: 0000000000000000 R09: 0000000000000000 [ 494.419616][T22400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 494.419627][T22400] R13: 00007fde6b416038 R14: 00007fde6b415fa0 R15: 00007ffdea113ef8 [ 494.419659][T22400] [ 494.685474][T22404] __nla_validate_parse: 10 callbacks suppressed [ 494.685496][T22404] netlink: 72 bytes leftover after parsing attributes in process `syz.0.5233'. [ 494.709694][T22412] netlink: 276 bytes leftover after parsing attributes in process `syz.4.5236'. [ 494.714121][T22404] netlink: 72 bytes leftover after parsing attributes in process `syz.0.5233'. [ 494.728045][T22406] bond0: Caught tx_queue_len zero misconfig [ 494.797816][ T7305] bond5: (slave bridge4): failed to get link speed/duplex [ 494.905947][ T49] bond5: (slave bridge4): failed to get link speed/duplex [ 494.977053][ T29] audit: type=1800 audit(1772854114.634:35): pid=22427 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.5237" name="memory.events" dev="tmpfs" ino=5346 res=0 errno=0 [ 495.076729][ T7305] bond5: (slave bridge4): failed to get link speed/duplex [ 495.150304][T22439] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5242'. [ 495.165002][T22440] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5241'. [ 495.182728][T22439] FAULT_INJECTION: forcing a failure. [ 495.182728][T22439] name failslab, interval 1, probability 0, space 0, times 0 [ 495.196109][T14190] bond5: (slave bridge4): failed to get link speed/duplex [ 495.232335][T22439] CPU: 1 UID: 0 PID: 22439 Comm: syz.4.5242 Not tainted syzkaller #0 PREEMPT(full) [ 495.232365][T22439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 495.232377][T22439] Call Trace: [ 495.232385][T22439] [ 495.232394][T22439] dump_stack_lvl+0xe8/0x150 [ 495.232425][T22439] should_fail_ex+0x412/0x560 [ 495.232454][T22439] should_failslab+0xa8/0x100 [ 495.232478][T22439] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 495.232499][T22439] ? __alloc_skb+0x186/0x7d0 [ 495.232523][T22439] ? __alloc_skb+0x1d0/0x7d0 [ 495.232545][T22439] ? __local_bh_enable_ip+0xd0/0x130 [ 495.232573][T22439] __alloc_skb+0x1d0/0x7d0 [ 495.232597][T22439] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 495.232623][T22439] netlink_sendmsg+0x5d4/0xb40 [ 495.232658][T22439] ? __pfx_netlink_sendmsg+0x10/0x10 [ 495.232686][T22439] ? aa_sock_msg_perm+0xf1/0x1b0 [ 495.232710][T22439] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 495.232728][T22439] ____sys_sendmsg+0x972/0x9f0 [ 495.232753][T22439] ? __pfx_____sys_sendmsg+0x10/0x10 [ 495.232780][T22439] ? import_iovec+0x73/0xa0 [ 495.232810][T22439] ___sys_sendmsg+0x2a5/0x360 [ 495.232834][T22439] ? __pfx____sys_sendmsg+0x10/0x10 [ 495.232884][T22439] ? __fget_files+0x2a/0x420 [ 495.232909][T22439] ? __fget_files+0x3a0/0x420 [ 495.232944][T22439] __x64_sys_sendmsg+0x1bd/0x2a0 [ 495.232965][T22439] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 495.232992][T22439] ? __pfx_ksys_write+0x10/0x10 [ 495.233023][T22439] do_syscall_64+0x14d/0xf80 [ 495.233040][T22439] ? trace_irq_disable+0x3b/0x150 [ 495.233065][T22439] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.233084][T22439] ? clear_bhb_loop+0x40/0x90 [ 495.233107][T22439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.233124][T22439] RIP: 0033:0x7f194f19c799 [ 495.233142][T22439] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 495.233157][T22439] RSP: 002b:00007f1950028028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 495.233177][T22439] RAX: ffffffffffffffda RBX: 00007f194f415fa0 RCX: 00007f194f19c799 [ 495.233191][T22439] RDX: 0000000020000000 RSI: 00002000000012c0 RDI: 000000000000000c [ 495.233204][T22439] RBP: 00007f1950028090 R08: 0000000000000000 R09: 0000000000000000 [ 495.233356][T22439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 495.233368][T22439] R13: 00007f194f416038 R14: 00007f194f415fa0 R15: 00007ffee4cf5848 [ 495.233398][T22439] [ 495.721313][T22457] netlink: 43 bytes leftover after parsing attributes in process `syz.3.5250'. [ 495.966473][T22469] bond0: entered promiscuous mode [ 495.982530][T22469] bond_slave_0: entered promiscuous mode [ 496.016001][T22469] bond_slave_1: entered promiscuous mode [ 496.042175][T22469] batadv0: entered promiscuous mode [ 496.057868][T22469] debugfs: 'hsr0' already exists in 'hsr' [ 496.075861][T22469] Cannot create hsr debugfs directory [ 496.086319][T22469] hsr0: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 496.116929][T22474] netlink: 'syz.3.5256': attribute type 3 has an invalid length. [ 496.128504][T22469] hsr0: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 496.136540][T22474] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5256'. [ 496.150529][T22469] hsr0: entered promiscuous mode [ 496.168878][T22469] 8021q: adding VLAN 0 to HW filter on device hsr0 [ 496.749543][T22506] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.5262'. [ 496.886625][T22513] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5265'. [ 496.935233][T22515] netlink: 168 bytes leftover after parsing attributes in process `syz.3.5263'. [ 497.395993][ T7305] net_ratelimit: 13 callbacks suppressed [ 497.396013][ T7305] bond5: (slave bridge4): failed to get link speed/duplex [ 497.502920][T22556] netlink: zone id is out of range [ 497.519154][T22556] netlink: zone id is out of range [ 497.524408][T22556] netlink: zone id is out of range [ 497.536386][ T49] bond5: (slave bridge4): failed to get link speed/duplex [ 497.545969][T22556] netlink: zone id is out of range [ 497.551232][T22556] netlink: zone id is out of range [ 497.565390][T22556] netlink: zone id is out of range [ 497.573528][T22556] netlink: zone id is out of range [ 497.579623][T22556] netlink: zone id is out of range [ 497.864826][T22569] FAULT_INJECTION: forcing a failure. [ 497.864826][T22569] name failslab, interval 1, probability 0, space 0, times 0 [ 497.891486][T22569] CPU: 1 UID: 0 PID: 22569 Comm: syz.2.5276 Not tainted syzkaller #0 PREEMPT(full) [ 497.891513][T22569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 497.891525][T22569] Call Trace: [ 497.891533][T22569] [ 497.891541][T22569] dump_stack_lvl+0xe8/0x150 [ 497.891572][T22569] should_fail_ex+0x412/0x560 [ 497.891602][T22569] should_failslab+0xa8/0x100 [ 497.891627][T22569] __kmalloc_noprof+0xe8/0x760 [ 497.891649][T22569] ? sctp_bind_addrs_to_raw+0x10a/0x380 [ 497.891677][T22569] sctp_bind_addrs_to_raw+0x10a/0x380 [ 497.891706][T22569] ? __pfx_sctp_bind_addrs_to_raw+0x10/0x10 [ 497.891742][T22569] sctp_make_init+0x174/0xe00 [ 497.891762][T22569] ? is_bpf_text_address+0x292/0x2b0 [ 497.891782][T22569] ? is_bpf_text_address+0x26/0x2b0 [ 497.891808][T22569] ? __kernel_text_address+0xd/0x30 [ 497.891828][T22569] ? __pfx_sctp_make_init+0x10/0x10 [ 497.891862][T22569] ? stack_trace_save+0xa9/0x100 [ 497.891882][T22569] ? __pfx_stack_trace_save+0x10/0x10 [ 497.891904][T22569] sctp_sf_do_prm_asoc+0xd2/0x3f0 [ 497.891936][T22569] sctp_do_sm+0x238/0x5cf0 [ 497.891954][T22569] ? __pfx_sctp_pname+0x10/0x10 [ 497.891972][T22569] ? kasan_save_track+0x4f/0x80 [ 497.891989][T22569] ? kasan_save_track+0x3e/0x80 [ 497.892007][T22569] ? __kmalloc_cache_noprof+0x31c/0x660 [ 497.892028][T22569] ? sctp_sendmsg+0x1b3d/0x2c10 [ 497.892051][T22569] ? __x64_sys_sendto+0xde/0x100 [ 497.892075][T22569] ? do_syscall_64+0x14d/0xf80 [ 497.892092][T22569] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.892118][T22569] ? __pfx_sctp_do_sm+0x10/0x10 [ 497.892174][T22569] ? __sk_mem_raise_allocated+0x290/0x12c0 [ 497.892204][T22569] ? __genradix_ptr+0x1e1/0x220 [ 497.892228][T22569] sctp_primitive_ASSOCIATE+0x95/0xc0 [ 497.892261][T22569] sctp_sendmsg_to_asoc+0x143d/0x1900 [ 497.892284][T22569] ? __asan_memcpy+0x40/0x70 [ 497.892307][T22569] ? sctp_assoc_add_peer+0xce1/0x13b0 [ 497.892347][T22569] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 497.892372][T22569] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 497.892405][T22569] ? __local_bh_enable_ip+0xd0/0x130 [ 497.892427][T22569] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 497.892448][T22569] ? security_sctp_bind_connect+0x7e/0x2c0 [ 497.892480][T22569] sctp_sendmsg+0x1b3d/0x2c10 [ 497.892520][T22569] ? __pfx_sctp_sendmsg+0x10/0x10 [ 497.892548][T22569] ? aa_sk_perm+0x6d5/0x900 [ 497.892578][T22569] ? __pfx_aa_sk_perm+0x10/0x10 [ 497.892603][T22569] ? sock_rps_record_flow+0x19/0x350 [ 497.892630][T22569] ? __pfx_inet_sendmsg+0x10/0x10 [ 497.892649][T22569] ? inet_sendmsg+0x2f4/0x370 [ 497.892667][T22569] ? __pfx_inet_sendmsg+0x10/0x10 [ 497.892685][T22569] __sys_sendto+0x5de/0x710 [ 497.892714][T22569] ? __pfx___sys_sendto+0x10/0x10 [ 497.892737][T22569] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 497.892769][T22569] ? __fget_files+0x3a0/0x420 [ 497.892805][T22569] ? ksys_write+0x242/0x270 [ 497.892827][T22569] ? __pfx_ksys_write+0x10/0x10 [ 497.892852][T22569] __x64_sys_sendto+0xde/0x100 [ 497.892881][T22569] do_syscall_64+0x14d/0xf80 [ 497.892898][T22569] ? trace_irq_disable+0x3b/0x150 [ 497.892922][T22569] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.892941][T22569] ? clear_bhb_loop+0x40/0x90 [ 497.892964][T22569] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.892982][T22569] RIP: 0033:0x7f89c199c799 [ 497.893000][T22569] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 497.893015][T22569] RSP: 002b:00007f89c2845028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 497.893036][T22569] RAX: ffffffffffffffda RBX: 00007f89c1c15fa0 RCX: 00007f89c199c799 [ 497.893048][T22569] RDX: 0000000000000001 RSI: 0000200000000840 RDI: 0000000000000003 [ 497.893060][T22569] RBP: 00007f89c2845090 R08: 0000200000000340 R09: 000000000000001c [ 497.893072][T22569] R10: 0000000000065055 R11: 0000000000000246 R12: 0000000000000002 [ 497.893084][T22569] R13: 00007f89c1c16038 R14: 00007f89c1c15fa0 R15: 00007ffc5f08d678 [ 497.893115][T22569] [ 499.002515][T22600] netlink: 'syz.2.5287': attribute type 13 has an invalid length. [ 499.042465][T22602] x_tables: unsorted entry at hook 2 [ 499.437424][T22628] bond7: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 499.477731][T22628] bond7 (unregistering): Released all slaves [ 499.805128][T22652] FAULT_INJECTION: forcing a failure. [ 499.805128][T22652] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 499.830975][T22652] CPU: 1 UID: 0 PID: 22652 Comm: syz.3.5305 Not tainted syzkaller #0 PREEMPT(full) [ 499.831002][T22652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 499.831015][T22652] Call Trace: [ 499.831023][T22652] [ 499.831039][T22652] dump_stack_lvl+0xe8/0x150 [ 499.831071][T22652] should_fail_ex+0x412/0x560 [ 499.831100][T22652] _copy_to_user+0x31/0xb0 [ 499.831129][T22652] simple_read_from_buffer+0xe1/0x170 [ 499.831159][T22652] proc_fail_nth_read+0x1bb/0x230 [ 499.831187][T22652] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 499.831215][T22652] ? rw_verify_area+0x2a6/0x4d0 [ 499.831234][T22652] ? __fget_files+0x2a/0x420 [ 499.831258][T22652] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 499.831284][T22652] vfs_read+0x20c/0xa70 [ 499.831301][T22652] ? fdget_pos+0x246/0x320 [ 499.831330][T22652] ? __pfx___mutex_lock+0x10/0x10 [ 499.831350][T22652] ? __pfx_vfs_read+0x10/0x10 [ 499.831371][T22652] ? __fget_files+0x2a/0x420 [ 499.831400][T22652] ? __fget_files+0x3a0/0x420 [ 499.831423][T22652] ? __fget_files+0x2a/0x420 [ 499.831457][T22652] ksys_read+0x150/0x270 [ 499.831479][T22652] ? __pfx_ksys_read+0x10/0x10 [ 499.831510][T22652] do_syscall_64+0x14d/0xf80 [ 499.831527][T22652] ? trace_irq_disable+0x3b/0x150 [ 499.831553][T22652] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.831573][T22652] ? clear_bhb_loop+0x40/0x90 [ 499.831596][T22652] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.831615][T22652] RIP: 0033:0x7f884fb5cfce [ 499.831641][T22652] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 499.831656][T22652] RSP: 002b:00007f8850afcfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 499.831677][T22652] RAX: ffffffffffffffda RBX: 00007f8850afd6c0 RCX: 00007f884fb5cfce [ 499.831690][T22652] RDX: 000000000000000f RSI: 00007f8850afd0a0 RDI: 0000000000000004 [ 499.831702][T22652] RBP: 00007f8850afd090 R08: 0000000000000000 R09: 0000000000000000 [ 499.831714][T22652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 499.831725][T22652] R13: 00007f884fe16038 R14: 00007f884fe15fa0 R15: 00007fff2a022a68 [ 499.831756][T22652] [ 500.110421][T22658] __nla_validate_parse: 3 callbacks suppressed [ 500.110438][T22658] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5308'. [ 500.126053][T22654] netlink: 'syz.2.5307': attribute type 10 has an invalid length. [ 500.133884][T22654] netlink: 228 bytes leftover after parsing attributes in process `syz.2.5307'. [ 500.190075][T22660] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5310'. [ 500.283757][T22660] bond0: Unable to set down delay as MII monitoring is disabled [ 500.441160][T22673] netlink: 452 bytes leftover after parsing attributes in process `syz.3.5314'. [ 500.508569][T22674] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.5313'. [ 500.608136][T22682] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5319'. [ 500.744372][T22694] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5324'. [ 500.757927][T22694] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5324'. [ 501.031548][T22711] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5332'. [ 501.341415][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.390644][T22725] FAULT_INJECTION: forcing a failure. [ 501.390644][T22725] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 501.465975][T22725] CPU: 1 UID: 0 PID: 22725 Comm: syz.4.5334 Not tainted syzkaller #0 PREEMPT(full) [ 501.466002][T22725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 501.466014][T22725] Call Trace: [ 501.466022][T22725] [ 501.466030][T22725] dump_stack_lvl+0xe8/0x150 [ 501.466061][T22725] should_fail_ex+0x412/0x560 [ 501.466089][T22725] _copy_to_user+0x31/0xb0 [ 501.466117][T22725] bpf_test_finish+0x22c/0x6b0 [ 501.466147][T22725] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 501.466174][T22725] ? __pfx_bpf_test_finish+0x10/0x10 [ 501.466202][T22725] ? _copy_from_user+0x94/0xb0 [ 501.466227][T22725] ? bpf_test_init+0x113/0x150 [ 501.466250][T22725] bpf_prog_test_run_xdp+0x8fa/0x1160 [ 501.466294][T22725] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 501.466330][T22725] ? __fget_files+0x2a/0x420 [ 501.466360][T22725] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 501.466385][T22725] bpf_prog_test_run+0x2c7/0x340 [ 501.466408][T22725] __sys_bpf+0x643/0x950 [ 501.466437][T22725] ? __pfx___sys_bpf+0x10/0x10 [ 501.466478][T22725] ? ksys_write+0x242/0x270 [ 501.466500][T22725] ? __pfx_ksys_write+0x10/0x10 [ 501.466526][T22725] __x64_sys_bpf+0x7c/0x90 [ 501.466551][T22725] do_syscall_64+0x14d/0xf80 [ 501.466570][T22725] ? trace_irq_disable+0x3b/0x150 [ 501.466595][T22725] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.466614][T22725] ? clear_bhb_loop+0x40/0x90 [ 501.466635][T22725] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.466653][T22725] RIP: 0033:0x7f194f19c799 [ 501.466670][T22725] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 501.466685][T22725] RSP: 002b:00007f1950028028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 501.466706][T22725] RAX: ffffffffffffffda RBX: 00007f194f415fa0 RCX: 00007f194f19c799 [ 501.466719][T22725] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 501.466731][T22725] RBP: 00007f1950028090 R08: 0000000000000000 R09: 0000000000000000 [ 501.466743][T22725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 501.466754][T22725] R13: 00007f194f416038 R14: 00007f194f415fa0 R15: 00007ffee4cf5848 [ 501.466784][T22725] [ 502.142248][T22747] ip6t_srh: unknown srh match flags 4000 [ 502.247601][T22752] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5345'. [ 502.426614][ T1148] net_ratelimit: 428 callbacks suppressed [ 502.426632][ T1148] bond5: (slave bridge4): failed to get link speed/duplex [ 502.514201][T22768] FAULT_INJECTION: forcing a failure. [ 502.514201][T22768] name failslab, interval 1, probability 0, space 0, times 0 [ 502.514653][T22769] ieee802154 phy0 wpan0: encryption failed: -90 [ 502.555921][ T1148] bond5: (slave bridge4): failed to get link speed/duplex [ 502.563368][T22768] CPU: 0 UID: 0 PID: 22768 Comm: syz.1.5351 Not tainted syzkaller #0 PREEMPT(full) [ 502.563395][T22768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 502.563406][T22768] Call Trace: [ 502.563413][T22768] [ 502.563421][T22768] dump_stack_lvl+0xe8/0x150 [ 502.563452][T22768] should_fail_ex+0x412/0x560 [ 502.563480][T22768] should_failslab+0xa8/0x100 [ 502.563506][T22768] __kmalloc_cache_noprof+0x88/0x660 [ 502.563528][T22768] ? call_usermodehelper_setup+0x8e/0x270 [ 502.563557][T22768] call_usermodehelper_setup+0x8e/0x270 [ 502.563578][T22768] ? __pfx_free_modprobe_argv+0x10/0x10 [ 502.563606][T22768] __request_module+0x3ba/0x660 [ 502.563630][T22768] ? __pfx_stack_trace_save+0x10/0x10 [ 502.563653][T22768] ? __pfx___request_module+0x10/0x10 [ 502.563688][T22768] ? bpf_lsm_capable+0x9/0x20 [ 502.563713][T22768] ? security_capable+0x7e/0x2c0 [ 502.563747][T22768] ? dev_load+0x21/0x1f0 [ 502.563854][T22768] dev_load+0x190/0x1f0 [ 502.563879][T22768] devinet_ioctl+0x138/0x1b30 [ 502.563944][T22768] ? __pfx_devinet_ioctl+0x10/0x10 [ 502.563971][T22768] ? get_user_ifreq+0x12b/0x180 [ 502.563993][T22768] inet_ioctl+0x391/0x560 [ 502.564014][T22768] ? __pfx_inet_ioctl+0x10/0x10 [ 502.564052][T22768] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 502.564080][T22768] sock_do_ioctl+0x101/0x320 [ 502.564104][T22768] ? __pfx_sock_do_ioctl+0x10/0x10 [ 502.564123][T22768] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 502.564159][T22768] sock_ioctl+0x5c6/0x7f0 [ 502.564182][T22768] ? __pfx_sock_ioctl+0x10/0x10 [ 502.564203][T22768] ? __fget_files+0x2a/0x420 [ 502.564227][T22768] ? __fget_files+0x3a0/0x420 [ 502.564251][T22768] ? __fget_files+0x2a/0x420 [ 502.564279][T22768] ? bpf_lsm_file_ioctl+0x9/0x20 [ 502.564302][T22768] ? __pfx_sock_ioctl+0x10/0x10 [ 502.564323][T22768] __se_sys_ioctl+0xfc/0x170 [ 502.564346][T22768] do_syscall_64+0x14d/0xf80 [ 502.564362][T22768] ? trace_irq_disable+0x3b/0x150 [ 502.564386][T22768] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.564403][T22768] ? clear_bhb_loop+0x40/0x90 [ 502.564425][T22768] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.564444][T22768] RIP: 0033:0x7fde6b19c799 [ 502.564462][T22768] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 502.564478][T22768] RSP: 002b:00007fde693f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 502.564498][T22768] RAX: ffffffffffffffda RBX: 00007fde6b415fa0 RCX: 00007fde6b19c799 [ 502.564510][T22768] RDX: 0000200000000d80 RSI: 000000000000891b RDI: 0000000000000003 [ 502.564522][T22768] RBP: 00007fde693f6090 R08: 0000000000000000 R09: 0000000000000000 [ 502.564534][T22768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 502.564545][T22768] R13: 00007fde6b416038 R14: 00007fde6b415fa0 R15: 00007ffdea113ef8 [ 502.564575][T22768] [ 502.844305][ T35] bond5: (slave bridge4): failed to get link speed/duplex [ 502.956411][ T7305] bond5: (slave bridge4): failed to get link speed/duplex [ 503.009774][T22785] netlink: 'syz.2.5358': attribute type 16 has an invalid length. [ 503.055998][ T29] audit: type=1800 audit(1772854122.704:36): pid=22770 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.5349" name="memory.events" dev="tmpfs" ino=5423 res=0 errno=0 [ 503.076559][ T49] bond5: (slave bridge4): failed to get link speed/duplex [ 503.208714][ T1148] bond5: (slave bridge4): failed to get link speed/duplex [ 503.311574][T22796] openvswitch: netlink: Message has 4 unknown bytes. [ 503.322556][T22796] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 503.335991][ T7305] bond5: (slave bridge4): failed to get link speed/duplex [ 503.400675][T22798] netlink: 'syz.3.5361': attribute type 83 has an invalid length. [ 503.474607][ T1148] bond5: (slave bridge4): failed to get link speed/duplex [ 504.039466][T22822] bond7: entered promiscuous mode [ 504.175695][ T29] audit: type=1800 audit(1772854123.814:37): pid=22816 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.5369" name="memory.events" dev="tmpfs" ino=5311 res=0 errno=0 [ 504.248894][T22835] ip6tnl0: Caught tx_queue_len zero misconfig [ 504.648678][T22862] sit0: entered promiscuous mode [ 504.665189][T22862] netlink: 'syz.4.5387': attribute type 1 has an invalid length. [ 505.143632][ T29] audit: type=1800 audit(1772854124.794:38): pid=22879 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.5393" name="memory.events" dev="tmpfs" ino=5499 res=0 errno=0 [ 505.348033][T22902] FAULT_INJECTION: forcing a failure. [ 505.348033][T22902] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 505.362888][T22902] CPU: 0 UID: 0 PID: 22902 Comm: syz.1.5403 Not tainted syzkaller #0 PREEMPT(full) [ 505.362915][T22902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 505.362926][T22902] Call Trace: [ 505.362933][T22902] [ 505.362942][T22902] dump_stack_lvl+0xe8/0x150 [ 505.362971][T22902] should_fail_ex+0x412/0x560 [ 505.362999][T22902] _copy_from_iter+0x1d3/0x1670 [ 505.363025][T22902] ? unwind_next_frame+0xa5/0x23c0 [ 505.363057][T22902] ? __lock_acquire+0x6b5/0x2cf0 [ 505.363080][T22902] ? __pfx__copy_from_iter+0x10/0x10 [ 505.363118][T22902] tun_get_user+0x275/0x3dd0 [ 505.363157][T22902] ? aa_file_perm+0x192/0x15e0 [ 505.363186][T22902] ? aa_file_perm+0x50e/0x15e0 [ 505.363209][T22902] ? __pfx_tun_get_user+0x10/0x10 [ 505.363231][T22902] ? aa_file_perm+0x192/0x15e0 [ 505.363261][T22902] ? __lock_acquire+0x6b5/0x2cf0 [ 505.363293][T22902] ? ref_tracker_alloc+0x35c/0x4c0 [ 505.363320][T22902] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 505.363349][T22902] ? tun_get+0x1c/0x2f0 [ 505.363378][T22902] ? tun_get+0x1c/0x2f0 [ 505.363401][T22902] ? tun_get+0x1c/0x2f0 [ 505.363429][T22902] tun_chr_write_iter+0x113/0x200 [ 505.363457][T22902] vfs_write+0x61d/0xb90 [ 505.363485][T22902] ? __pfx_vfs_write+0x10/0x10 [ 505.363515][T22902] ? __fget_files+0x2a/0x420 [ 505.363556][T22902] ksys_write+0x150/0x270 [ 505.363578][T22902] ? __pfx_ksys_write+0x10/0x10 [ 505.363608][T22902] do_syscall_64+0x14d/0xf80 [ 505.363627][T22902] ? trace_irq_disable+0x3b/0x150 [ 505.363652][T22902] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.363672][T22902] ? clear_bhb_loop+0x40/0x90 [ 505.363694][T22902] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.363729][T22902] RIP: 0033:0x7fde6b19c799 [ 505.363747][T22902] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 505.363763][T22902] RSP: 002b:00007fde693f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 505.363782][T22902] RAX: ffffffffffffffda RBX: 00007fde6b415fa0 RCX: 00007fde6b19c799 [ 505.363795][T22902] RDX: 00000000000000f1 RSI: 0000200000000680 RDI: 0000000000000003 [ 505.363808][T22902] RBP: 00007fde693f6090 R08: 0000000000000000 R09: 0000000000000000 [ 505.363819][T22902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 505.363830][T22902] R13: 00007fde6b416038 R14: 00007fde6b415fa0 R15: 00007ffdea113ef8 [ 505.363859][T22902] [ 505.626806][T22906] __nla_validate_parse: 6 callbacks suppressed [ 505.626825][T22906] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5404'. [ 505.642513][T22906] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5404'. [ 505.653867][T22906] netlink: 'syz.4.5404': attribute type 1 has an invalid length. [ 505.663121][T22906] netlink: 10 bytes leftover after parsing attributes in process `syz.4.5404'. [ 505.672161][T22906] block nbd14: Unsupported socket: should be TCP or UNIX. [ 505.688870][T22908] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5405'. [ 505.773054][T22910] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5406'. [ 505.853701][T22910] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5406'. [ 505.879518][T22920] sch_fq: defrate 0 ignored. [ 506.044492][T22929] af_packet: tpacket_rcv: packet too big, clamped from 32 to 4294967272. macoff=96 [ 506.139336][ T5820] udevd[5820]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 506.194844][T22933] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5413'. [ 506.268297][T22938] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.5416'. [ 506.595386][ T29] audit: type=1800 audit(1772854126.234:39): pid=22941 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.5414" name="memory.events" dev="tmpfs" ino=5516 res=0 errno=0 [ 506.784176][T22954] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5421'. [ 507.068708][T22964] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5422'. [ 507.358795][T22989] syzkaller0: entered promiscuous mode [ 507.379584][T22989] syzkaller0: entered allmulticast mode [ 507.607598][ T35] net_ratelimit: 31 callbacks suppressed [ 507.607617][ T35] bond5: (slave bridge4): failed to get link speed/duplex [ 507.725955][ T1148] bond5: (slave bridge4): failed to get link speed/duplex [ 507.896280][T14190] bond5: (slave bridge4): failed to get link speed/duplex [ 507.958565][T23018] ip6tnl0: Caught tx_queue_len zero misconfig [ 508.006027][ T49] bond5: (slave bridge4): failed to get link speed/duplex [ 508.116781][ T49] bond5: (slave bridge4): failed to get link speed/duplex [ 508.228365][ T7305] bond5: (slave bridge4): failed to get link speed/duplex [ 508.337169][T14190] bond5: (slave bridge4): failed to get link speed/duplex [ 508.461680][T14190] bond5: (slave bridge4): failed to get link speed/duplex [ 508.508744][T23048] netlink: 'syz.3.5448': attribute type 1 has an invalid length. [ 508.631710][T14190] bond5: (slave bridge4): failed to get link speed/duplex [ 508.662431][T23057] netlink: 'syz.2.5451': attribute type 1 has an invalid length. [ 508.674225][T23057] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 508.715200][T23050] bond7: (slave bridge6): making interface the new active one [ 508.771615][T23050] bond7: (slave bridge6): Enslaving as an active interface with an up link [ 508.840129][T23066] FAULT_INJECTION: forcing a failure. [ 508.840129][T23066] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 508.876988][T23066] CPU: 1 UID: 0 PID: 23066 Comm: syz.0.5454 Not tainted syzkaller #0 PREEMPT(full) [ 508.877013][T23066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 508.877024][T23066] Call Trace: [ 508.877032][T23066] [ 508.877039][T23066] dump_stack_lvl+0xe8/0x150 [ 508.877071][T23066] should_fail_ex+0x412/0x560 [ 508.877101][T23066] _copy_from_user+0x2d/0xb0 [ 508.877129][T23066] ____sys_sendmsg+0x308/0x9f0 [ 508.877157][T23066] ? __pfx_____sys_sendmsg+0x10/0x10 [ 508.877181][T23066] ? import_iovec+0x73/0xa0 [ 508.877208][T23066] ___sys_sendmsg+0x2a5/0x360 [ 508.877230][T23066] ? __pfx____sys_sendmsg+0x10/0x10 [ 508.877251][T23066] ? kstrtouint+0x6e/0xe0 [ 508.877292][T23066] ? __fget_files+0x2a/0x420 [ 508.877318][T23066] ? __fget_files+0x3a0/0x420 [ 508.877352][T23066] __sys_sendmmsg+0x27c/0x4e0 [ 508.877380][T23066] ? __pfx___sys_sendmmsg+0x10/0x10 [ 508.877396][T23066] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 508.877440][T23066] ? ksys_write+0x242/0x270 [ 508.877463][T23066] ? __pfx_ksys_write+0x10/0x10 [ 508.877489][T23066] __x64_sys_sendmmsg+0xa0/0xc0 [ 508.877510][T23066] do_syscall_64+0x14d/0xf80 [ 508.877526][T23066] ? trace_irq_disable+0x3b/0x150 [ 508.877552][T23066] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 508.877572][T23066] ? clear_bhb_loop+0x40/0x90 [ 508.877594][T23066] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 508.877613][T23066] RIP: 0033:0x7f1c6e59c799 [ 508.877630][T23066] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 508.877646][T23066] RSP: 002b:00007f1c6f465028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 508.877666][T23066] RAX: ffffffffffffffda RBX: 00007f1c6e815fa0 RCX: 00007f1c6e59c799 [ 508.877679][T23066] RDX: 0000000000000001 RSI: 0000200000001500 RDI: 0000000000000003 [ 508.877689][T23066] RBP: 00007f1c6f465090 R08: 0000000000000000 R09: 0000000000000000 [ 508.877699][T23066] R10: 000000000000c040 R11: 0000000000000246 R12: 0000000000000001 [ 508.877709][T23066] R13: 00007f1c6e816038 R14: 00007f1c6e815fa0 R15: 00007ffdbd973c28 [ 508.877733][T23066] [ 509.492521][T23098] lo: Caught tx_queue_len zero misconfig [ 509.609986][T23103] netlink: 'syz.3.5469': attribute type 11 has an invalid length. [ 509.639924][T14190] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 509.649402][T14190] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 509.663061][T23103] netlink: 'syz.3.5469': attribute type 11 has an invalid length. [ 509.672215][T14190] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 509.683402][T14190] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 509.845112][T23118] netlink: 'syz.0.5474': attribute type 15 has an invalid length. [ 510.018513][T23126] lo speed is unknown, defaulting to 1000 [ 510.518217][T23162] netlink: 'syz.1.5486': attribute type 1 has an invalid length. [ 510.773303][T23164] bond7: (slave gretap1): making interface the new active one [ 510.790340][T23164] bond7: (slave gretap1): Enslaving as an active interface with an up link [ 510.819916][T23168] gre2: entered allmulticast mode [ 510.825584][T23126] lo speed is unknown, defaulting to 1000 [ 510.859066][T23162] vlan0: entered allmulticast mode [ 510.900229][T23162] bond7: entered allmulticast mode [ 510.933096][T23162] gretap1: entered allmulticast mode [ 510.961589][T23162] bond7: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 511.004513][T23126] wlan1 speed is unknown, defaulting to 1000 [ 511.044437][T23177] geneve3: entered promiscuous mode [ 511.049998][T23177] geneve3: entered allmulticast mode [ 511.215565][T23186] FAULT_INJECTION: forcing a failure. [ 511.215565][T23186] name failslab, interval 1, probability 0, space 0, times 0 [ 511.245548][T23186] CPU: 1 UID: 0 PID: 23186 Comm: syz.3.5497 Not tainted syzkaller #0 PREEMPT(full) [ 511.245575][T23186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 511.245588][T23186] Call Trace: [ 511.245596][T23186] [ 511.245604][T23186] dump_stack_lvl+0xe8/0x150 [ 511.245635][T23186] should_fail_ex+0x412/0x560 [ 511.245675][T23186] should_failslab+0xa8/0x100 [ 511.245702][T23186] __kmalloc_cache_noprof+0x88/0x660 [ 511.245725][T23186] ? __sctp_v6_cmp_addr+0x1dc/0x510 [ 511.245745][T23186] ? sctp_v6_cmp_addr+0x15/0xd0 [ 511.245763][T23186] ? sctp_add_bind_addr+0x8c/0x370 [ 511.245787][T23186] sctp_add_bind_addr+0x8c/0x370 [ 511.245811][T23186] sctp_copy_local_addr_list+0x314/0x4f0 [ 511.245834][T23186] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 511.245853][T23186] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 511.245874][T23186] ? sctp_v6_is_any+0x64/0x80 [ 511.245897][T23186] ? sctp_copy_one_addr+0x93/0x360 [ 511.245922][T23186] sctp_bind_addr_copy+0xb3/0x3c0 [ 511.245944][T23186] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 511.245966][T23186] sctp_connect_new_asoc+0x2ff/0x6b0 [ 511.245994][T23186] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 511.246026][T23186] ? __local_bh_enable_ip+0xd0/0x130 [ 511.246049][T23186] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 511.246072][T23186] ? security_sctp_bind_connect+0x7e/0x2c0 [ 511.246098][T23186] sctp_sendmsg+0x1528/0x2c10 [ 511.246138][T23186] ? __pfx_sctp_sendmsg+0x10/0x10 [ 511.246165][T23186] ? aa_sk_perm+0x6d5/0x900 [ 511.246197][T23186] ? __pfx_aa_sk_perm+0x10/0x10 [ 511.246222][T23186] ? sock_rps_record_flow+0x19/0x350 [ 511.246254][T23186] ? inet_sendmsg+0x2f4/0x370 [ 511.246275][T23186] ____sys_sendmsg+0x80a/0x9f0 [ 511.246304][T23186] ? __pfx_____sys_sendmsg+0x10/0x10 [ 511.246328][T23186] ? import_iovec+0x73/0xa0 [ 511.246357][T23186] ___sys_sendmsg+0x2a5/0x360 [ 511.246380][T23186] ? __pfx____sys_sendmsg+0x10/0x10 [ 511.246405][T23186] ? kstrtouint+0x6e/0xe0 [ 511.246454][T23186] ? __fget_files+0x2a/0x420 [ 511.246478][T23186] ? __fget_files+0x3a0/0x420 [ 511.246513][T23186] __sys_sendmmsg+0x27c/0x4e0 [ 511.246536][T23186] ? __pfx___sys_sendmmsg+0x10/0x10 [ 511.246552][T23186] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 511.246598][T23186] ? ksys_write+0x242/0x270 [ 511.246621][T23186] ? __pfx_ksys_write+0x10/0x10 [ 511.246655][T23186] __x64_sys_sendmmsg+0xa0/0xc0 [ 511.246677][T23186] do_syscall_64+0x14d/0xf80 [ 511.246694][T23186] ? trace_irq_disable+0x3b/0x150 [ 511.246719][T23186] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.246738][T23186] ? clear_bhb_loop+0x40/0x90 [ 511.246762][T23186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.246780][T23186] RIP: 0033:0x7f884fb9c799 [ 511.246798][T23186] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 511.246814][T23186] RSP: 002b:00007f8850afd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 511.246834][T23186] RAX: ffffffffffffffda RBX: 00007f884fe15fa0 RCX: 00007f884fb9c799 [ 511.246847][T23186] RDX: 0000000000000001 RSI: 0000200000000500 RDI: 0000000000000003 [ 511.246859][T23186] RBP: 00007f8850afd090 R08: 0000000000000000 R09: 0000000000000000 [ 511.246871][T23186] R10: 0000000004000840 R11: 0000000000000246 R12: 0000000000000002 [ 511.246883][T23186] R13: 00007f884fe16038 R14: 00007f884fe15fa0 R15: 00007fff2a022a68 [ 511.246919][T23186] [ 511.613641][T23189] __nla_validate_parse: 17 callbacks suppressed [ 511.613662][T23189] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5496'. [ 511.630571][T23188] netlink: 452 bytes leftover after parsing attributes in process `syz.4.5496'. [ 512.567168][T23208] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5505'. [ 512.616456][T23211] x_tables: duplicate underflow at hook 3 [ 512.619291][ T1148] net_ratelimit: 22 callbacks suppressed [ 512.619309][ T1148] bond5: (slave bridge4): failed to get link speed/duplex [ 512.755860][ T49] bond5: (slave bridge4): failed to get link speed/duplex [ 512.768844][T23217] FAULT_INJECTION: forcing a failure. [ 512.768844][T23217] name failslab, interval 1, probability 0, space 0, times 0 [ 512.789761][T23217] CPU: 0 UID: 0 PID: 23217 Comm: syz.0.5509 Not tainted syzkaller #0 PREEMPT(full) [ 512.789787][T23217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 512.789798][T23217] Call Trace: [ 512.789806][T23217] [ 512.789815][T23217] dump_stack_lvl+0xe8/0x150 [ 512.789846][T23217] should_fail_ex+0x412/0x560 [ 512.789875][T23217] should_failslab+0xa8/0x100 [ 512.789900][T23217] __kmalloc_cache_noprof+0x88/0x660 [ 512.789920][T23217] ? __kasan_kmalloc+0x93/0xb0 [ 512.789940][T23217] ? ovs_nla_get_identifier+0x72/0xd0 [ 512.790039][T23217] ovs_nla_get_identifier+0x72/0xd0 [ 512.790060][T23217] ovs_flow_cmd_new+0x505/0xe80 [ 512.790090][T23217] ? kasan_save_track+0x4f/0x80 [ 512.790111][T23217] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 512.790193][T23217] ? __nla_parse+0x40/0x60 [ 512.790221][T23217] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 512.790251][T23217] genl_family_rcv_msg_doit+0x22a/0x330 [ 512.790278][T23217] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 512.790310][T23217] ? bpf_lsm_capable+0x9/0x20 [ 512.790333][T23217] ? security_capable+0x7e/0x2c0 [ 512.790362][T23217] genl_rcv_msg+0x61c/0x7a0 [ 512.790388][T23217] ? __pfx_genl_rcv_msg+0x10/0x10 [ 512.790406][T23217] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 512.790431][T23217] ? __lock_acquire+0x6b5/0x2cf0 [ 512.790474][T23217] netlink_rcv_skb+0x232/0x4b0 [ 512.790499][T23217] ? __pfx_genl_rcv_msg+0x10/0x10 [ 512.790520][T23217] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 512.790561][T23217] ? down_read+0x272/0x2e0 [ 512.790579][T23217] ? genl_rcv+0xd/0x40 [ 512.790599][T23217] genl_rcv+0x28/0x40 [ 512.790615][T23217] netlink_unicast+0x80f/0x9b0 [ 512.790646][T23217] ? __pfx_netlink_unicast+0x10/0x10 [ 512.790669][T23217] ? netlink_sendmsg+0x650/0xb40 [ 512.790688][T23217] ? skb_put+0x11b/0x210 [ 512.790713][T23217] netlink_sendmsg+0x813/0xb40 [ 512.790740][T23217] ? __pfx_netlink_sendmsg+0x10/0x10 [ 512.790766][T23217] ? aa_sock_msg_perm+0xf1/0x1b0 [ 512.790786][T23217] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 512.790807][T23217] ____sys_sendmsg+0x972/0x9f0 [ 512.790830][T23217] ? __pfx_____sys_sendmsg+0x10/0x10 [ 512.790854][T23217] ? import_iovec+0x73/0xa0 [ 512.790882][T23217] ___sys_sendmsg+0x2a5/0x360 [ 512.790904][T23217] ? __pfx____sys_sendmsg+0x10/0x10 [ 512.790953][T23217] ? __fget_files+0x2a/0x420 [ 512.790978][T23217] ? __fget_files+0x3a0/0x420 [ 512.791014][T23217] __x64_sys_sendmsg+0x1bd/0x2a0 [ 512.791035][T23217] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 512.791064][T23217] ? __pfx_ksys_write+0x10/0x10 [ 512.791096][T23217] do_syscall_64+0x14d/0xf80 [ 512.791113][T23217] ? trace_irq_disable+0x3b/0x150 [ 512.791139][T23217] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.791158][T23217] ? clear_bhb_loop+0x40/0x90 [ 512.791181][T23217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.791200][T23217] RIP: 0033:0x7f1c6e59c799 [ 512.791218][T23217] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 512.791234][T23217] RSP: 002b:00007f1c6f465028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 512.791254][T23217] RAX: ffffffffffffffda RBX: 00007f1c6e815fa0 RCX: 00007f1c6e59c799 [ 512.791267][T23217] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000003 [ 512.791279][T23217] RBP: 00007f1c6f465090 R08: 0000000000000000 R09: 0000000000000000 [ 512.791290][T23217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 512.791302][T23217] R13: 00007f1c6e816038 R14: 00007f1c6e815fa0 R15: 00007ffdbd973c28 [ 512.791332][T23217] [ 513.165065][ T7305] bond5: (slave bridge4): failed to get link speed/duplex [ 513.186008][T23223] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5512'. [ 513.285954][ T49] bond5: (slave bridge4): failed to get link speed/duplex [ 513.395876][ T7305] bond5: (slave bridge4): failed to get link speed/duplex [ 513.506738][ T49] bond5: (slave bridge4): failed to get link speed/duplex [ 513.518261][T23231] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5516'. [ 513.635851][ T1148] bond5: (slave bridge4): failed to get link speed/duplex [ 513.749167][ T35] bond5: (slave bridge4): failed to get link speed/duplex [ 513.773290][T23243] lo speed is unknown, defaulting to 1000 [ 513.866150][T14188] bond5: (slave bridge4): failed to get link speed/duplex [ 513.985844][ T7305] bond5: (slave bridge4): failed to get link speed/duplex [ 514.206543][T23243] lo speed is unknown, defaulting to 1000 [ 514.214069][T23243] wlan1 speed is unknown, defaulting to 1000 [ 514.556383][T23274] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5523'. [ 514.667631][T23276] netlink: 'syz.3.5525': attribute type 11 has an invalid length. [ 514.821926][T23288] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5527'. [ 514.831497][T23291] FAULT_INJECTION: forcing a failure. [ 514.831497][T23291] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 514.885922][T23291] CPU: 0 UID: 0 PID: 23291 Comm: syz.0.5528 Not tainted syzkaller #0 PREEMPT(full) [ 514.885951][T23291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 514.885963][T23291] Call Trace: [ 514.885971][T23291] [ 514.885980][T23291] dump_stack_lvl+0xe8/0x150 [ 514.886011][T23291] should_fail_ex+0x412/0x560 [ 514.886040][T23291] _copy_from_user+0x2d/0xb0 [ 514.886067][T23291] ___sys_sendmsg+0x1c6/0x360 [ 514.886092][T23291] ? __pfx____sys_sendmsg+0x10/0x10 [ 514.886142][T23291] ? __fget_files+0x2a/0x420 [ 514.886166][T23291] ? __fget_files+0x3a0/0x420 [ 514.886194][T23291] __x64_sys_sendmsg+0x1bd/0x2a0 [ 514.886212][T23291] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 514.886234][T23291] ? __pfx_ksys_write+0x10/0x10 [ 514.886263][T23291] do_syscall_64+0x14d/0xf80 [ 514.886279][T23291] ? trace_irq_disable+0x3b/0x150 [ 514.886301][T23291] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.886317][T23291] ? clear_bhb_loop+0x40/0x90 [ 514.886339][T23291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.886356][T23291] RIP: 0033:0x7f1c6e59c799 [ 514.886372][T23291] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 514.886389][T23291] RSP: 002b:00007f1c6f465028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 514.886413][T23291] RAX: ffffffffffffffda RBX: 00007f1c6e815fa0 RCX: 00007f1c6e59c799 [ 514.886426][T23291] RDX: 0000000000000000 RSI: 00002000000016c0 RDI: 0000000000000003 [ 514.886438][T23291] RBP: 00007f1c6f465090 R08: 0000000000000000 R09: 0000000000000000 [ 514.886459][T23291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 514.886470][T23291] R13: 00007f1c6e816038 R14: 00007f1c6e815fa0 R15: 00007ffdbd973c28 [ 514.886499][T23291] [ 515.584625][T23303] lo speed is unknown, defaulting to 1000 [ 516.080248][T23328] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5537'. [ 516.292369][T23303] lo speed is unknown, defaulting to 1000 [ 516.338820][T23303] wlan1 speed is unknown, defaulting to 1000 [ 516.688265][T23356] lo speed is unknown, defaulting to 1000 [ 516.701566][T23363] netlink: 'syz.0.5549': attribute type 6 has an invalid length. [ 516.743992][T23363] netlink: 232 bytes leftover after parsing attributes in process `syz.0.5549'. [ 516.818294][T23371] netlink: 5252 bytes leftover after parsing attributes in process `syz.0.5549'. [ 517.205202][ T5820] udevd[5820]: inotify_add_watch(7, /dev/nbd14, 10) failed: No such file or directory [ 517.341561][T23380] syzkaller1: entered promiscuous mode [ 517.357531][T23380] syzkaller1: entered allmulticast mode [ 517.663711][T23356] lo speed is unknown, defaulting to 1000 [ 517.670194][T14188] net_ratelimit: 31 callbacks suppressed [ 517.670214][T14188] bond5: (slave bridge4): failed to get link speed/duplex [ 517.717586][T23407] netlink: 'syz.1.5561': attribute type 15 has an invalid length. [ 517.749324][T23409] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 517.751977][T23356] wlan1 speed is unknown, defaulting to 1000 [ 517.779892][T23409] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 517.796292][ T35] bond5: (slave bridge4): failed to get link speed/duplex [ 517.903457][T23406] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5560'. [ 518.106290][T14190] bond5: (slave bridge4): failed to get link speed/duplex [ 518.226764][T14190] bond5: (slave bridge4): failed to get link speed/duplex [ 518.335908][ T35] bond5: (slave bridge4): failed to get link speed/duplex [ 518.356519][T23431] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5572'. [ 518.373202][ T5933] lo speed is unknown, defaulting to 1000 [ 518.390403][ T5933] syz0: Port: 1 Link ACTIVE [ 518.398377][T23431] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5572'. [ 518.416132][ T980] lo speed is unknown, defaulting to 1000 [ 519.107156][T14190] bond5: (slave bridge4): failed to get link speed/duplex [ 519.249945][ T35] bond5: (slave bridge4): failed to get link speed/duplex [ 519.426076][ T1148] bond5: (slave bridge4): failed to get link speed/duplex [ 519.445228][T23457] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5581'. [ 519.536269][T14188] bond5: (slave bridge4): failed to get link speed/duplex [ 519.666109][T14190] bond5: (slave bridge4): failed to get link speed/duplex [ 519.714113][T23471] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 520.083519][T23498] netlink: 452 bytes leftover after parsing attributes in process `syz.2.5593'. [ 520.401412][T23518] FAULT_INJECTION: forcing a failure. [ 520.401412][T23518] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 520.471836][T23518] CPU: 1 UID: 0 PID: 23518 Comm: syz.0.5600 Not tainted syzkaller #0 PREEMPT(full) [ 520.471863][T23518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 520.471875][T23518] Call Trace: [ 520.471883][T23518] [ 520.471891][T23518] dump_stack_lvl+0xe8/0x150 [ 520.471923][T23518] should_fail_ex+0x412/0x560 [ 520.471952][T23518] _copy_from_user+0x2d/0xb0 [ 520.471980][T23518] ___sys_sendmsg+0x1c6/0x360 [ 520.472005][T23518] ? __pfx____sys_sendmsg+0x10/0x10 [ 520.472055][T23518] ? __fget_files+0x2a/0x420 [ 520.472081][T23518] ? __fget_files+0x3a0/0x420 [ 520.472115][T23518] __x64_sys_sendmsg+0x1bd/0x2a0 [ 520.472143][T23518] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 520.472171][T23518] ? __pfx_ksys_write+0x10/0x10 [ 520.472202][T23518] do_syscall_64+0x14d/0xf80 [ 520.472220][T23518] ? trace_irq_disable+0x3b/0x150 [ 520.472246][T23518] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 520.472265][T23518] ? clear_bhb_loop+0x40/0x90 [ 520.472288][T23518] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 520.472306][T23518] RIP: 0033:0x7f1c6e59c799 [ 520.472324][T23518] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 520.472340][T23518] RSP: 002b:00007f1c6f465028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 520.472360][T23518] RAX: ffffffffffffffda RBX: 00007f1c6e815fa0 RCX: 00007f1c6e59c799 [ 520.472374][T23518] RDX: 0000000000040090 RSI: 0000200000000780 RDI: 0000000000000004 [ 520.472387][T23518] RBP: 00007f1c6f465090 R08: 0000000000000000 R09: 0000000000000000 [ 520.472399][T23518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 520.472410][T23518] R13: 00007f1c6e816038 R14: 00007f1c6e815fa0 R15: 00007ffdbd973c28 [ 520.472440][T23518] [ 520.756706][T23528] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not filter [ 520.983198][T23543] netlink: 'syz.3.5607': attribute type 5 has an invalid length. [ 521.046205][T23547] sch_tbf: burst 1447 is lower than device macvtap0 mtu (1514) ! [ 521.047573][T23548] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5611'. [ 521.063595][T23548] netlink: 43 bytes leftover after parsing attributes in process `syz.2.5611'. [ 521.073369][T23548] netlink: 'syz.2.5611': attribute type 5 has an invalid length. [ 521.081662][T23548] netlink: 43 bytes leftover after parsing attributes in process `syz.2.5611'. [ 521.296117][T23561] netlink: 'syz.4.5616': attribute type 1 has an invalid length. [ 521.338961][T23565] netlink: 'syz.1.5617': attribute type 15 has an invalid length. [ 521.599009][T23581] xt_hashlimit: max too large, truncated to 1048576 [ 521.854549][T23589] __nla_validate_parse: 4 callbacks suppressed [ 521.854572][T23589] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5625'. [ 522.020554][T23602] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5632'. [ 522.045653][T23604] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5630'. [ 522.127826][T23613] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5635'. [ 522.161699][T23613] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5635'. [ 522.454047][T23630] siw: device registration error -23 [ 522.746378][T14188] net_ratelimit: 21 callbacks suppressed [ 522.746399][T14188] bond5: (slave bridge4): failed to get link speed/duplex [ 522.918295][T14186] bond5: (slave bridge4): failed to get link speed/duplex [ 523.026126][T14186] bond5: (slave bridge4): failed to get link speed/duplex [ 523.145882][T14186] bond5: (slave bridge4): failed to get link speed/duplex [ 523.217902][T23676] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5653'. [ 523.295310][T23682] netlink: 452 bytes leftover after parsing attributes in process `syz.1.5655'. [ 523.410081][T23689] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.5656'. [ 523.441306][T23689] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.5656'. [ 523.715951][T14186] bond5: (slave bridge4): failed to get link speed/duplex [ 523.725930][T23696] netlink: 148 bytes leftover after parsing attributes in process `syz.3.5658'. [ 523.835833][ T35] bond5: (slave bridge4): failed to get link speed/duplex [ 523.945903][ T35] bond5: (slave bridge4): failed to get link speed/duplex [ 524.070574][ T35] bond5: (slave bridge4): failed to get link speed/duplex [ 524.186029][T14188] bond5: (slave bridge4): failed to get link speed/duplex [ 524.327923][ T35] bond5: (slave bridge4): failed to get link speed/duplex [ 524.403751][T23735] FAULT_INJECTION: forcing a failure. [ 524.403751][T23735] name failslab, interval 1, probability 0, space 0, times 0 [ 524.416878][T23735] CPU: 1 UID: 0 PID: 23735 Comm: syz.1.5670 Not tainted syzkaller #0 PREEMPT(full) [ 524.416904][T23735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 524.416915][T23735] Call Trace: [ 524.416923][T23735] [ 524.416932][T23735] dump_stack_lvl+0xe8/0x150 [ 524.416963][T23735] should_fail_ex+0x412/0x560 [ 524.416991][T23735] should_failslab+0xa8/0x100 [ 524.417014][T23735] ? sctp_chunkify+0x5a/0x260 [ 524.417038][T23735] kmem_cache_alloc_noprof+0x87/0x650 [ 524.417066][T23735] sctp_chunkify+0x5a/0x260 [ 524.417091][T23735] _sctp_make_chunk+0x122/0x290 [ 524.417115][T23735] sctp_make_init+0x5e3/0xe00 [ 524.417134][T23735] ? is_bpf_text_address+0x292/0x2b0 [ 524.417162][T23735] ? __pfx_sctp_make_init+0x10/0x10 [ 524.417194][T23735] ? stack_trace_save+0xa9/0x100 [ 524.417214][T23735] ? __pfx_stack_trace_save+0x10/0x10 [ 524.417235][T23735] sctp_sf_do_prm_asoc+0xd2/0x3f0 [ 524.417266][T23735] sctp_do_sm+0x238/0x5cf0 [ 524.417283][T23735] ? __pfx_sctp_pname+0x10/0x10 [ 524.417300][T23735] ? kasan_save_track+0x4f/0x80 [ 524.417319][T23735] ? kasan_save_track+0x3e/0x80 [ 524.417337][T23735] ? __kmalloc_cache_noprof+0x31c/0x660 [ 524.417358][T23735] ? sctp_sendmsg+0x1b3d/0x2c10 [ 524.417382][T23735] ? ___sys_sendmsg+0x2a5/0x360 [ 524.417399][T23735] ? __sys_sendmmsg+0x27c/0x4e0 [ 524.417415][T23735] ? __x64_sys_sendmmsg+0xa0/0xc0 [ 524.417431][T23735] ? do_syscall_64+0x14d/0xf80 [ 524.417447][T23735] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.417471][T23735] ? __pfx_sctp_do_sm+0x10/0x10 [ 524.417527][T23735] ? __sk_mem_raise_allocated+0x290/0x12c0 [ 524.417548][T23735] ? __genradix_ptr+0x1e1/0x220 [ 524.417586][T23735] sctp_primitive_ASSOCIATE+0x95/0xc0 [ 524.417617][T23735] sctp_sendmsg_to_asoc+0x143d/0x1900 [ 524.417639][T23735] ? __asan_memcpy+0x40/0x70 [ 524.417670][T23735] ? sctp_assoc_add_peer+0xce1/0x13b0 [ 524.417710][T23735] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 524.417736][T23735] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 524.417768][T23735] ? __local_bh_enable_ip+0xd0/0x130 [ 524.417790][T23735] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 524.417813][T23735] ? security_sctp_bind_connect+0x7e/0x2c0 [ 524.417837][T23735] sctp_sendmsg+0x1b3d/0x2c10 [ 524.417875][T23735] ? __pfx_sctp_sendmsg+0x10/0x10 [ 524.417904][T23735] ? aa_sk_perm+0x6d5/0x900 [ 524.417932][T23735] ? __pfx_aa_sk_perm+0x10/0x10 [ 524.417957][T23735] ? sock_rps_record_flow+0x19/0x350 [ 524.417988][T23735] ? inet_sendmsg+0x2f4/0x370 [ 524.418010][T23735] ____sys_sendmsg+0x80a/0x9f0 [ 524.418037][T23735] ? __pfx_____sys_sendmsg+0x10/0x10 [ 524.418065][T23735] ? import_iovec+0x73/0xa0 [ 524.418096][T23735] ___sys_sendmsg+0x2a5/0x360 [ 524.418119][T23735] ? __pfx____sys_sendmsg+0x10/0x10 [ 524.418142][T23735] ? kstrtouint+0x6e/0xe0 [ 524.418185][T23735] ? __fget_files+0x2a/0x420 [ 524.418210][T23735] ? __fget_files+0x3a0/0x420 [ 524.418245][T23735] __sys_sendmmsg+0x27c/0x4e0 [ 524.418269][T23735] ? __pfx___sys_sendmmsg+0x10/0x10 [ 524.418285][T23735] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 524.418326][T23735] ? ksys_write+0x242/0x270 [ 524.418345][T23735] ? __pfx_ksys_write+0x10/0x10 [ 524.418371][T23735] __x64_sys_sendmmsg+0xa0/0xc0 [ 524.418390][T23735] do_syscall_64+0x14d/0xf80 [ 524.418406][T23735] ? trace_irq_disable+0x3b/0x150 [ 524.418429][T23735] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.418447][T23735] ? clear_bhb_loop+0x40/0x90 [ 524.418469][T23735] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.418488][T23735] RIP: 0033:0x7fde6b19c799 [ 524.418506][T23735] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 524.418520][T23735] RSP: 002b:00007fde693f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 524.418539][T23735] RAX: ffffffffffffffda RBX: 00007fde6b415fa0 RCX: 00007fde6b19c799 [ 524.418552][T23735] RDX: 0000000000000001 RSI: 0000200000000500 RDI: 0000000000000003 [ 524.418563][T23735] RBP: 00007fde693f6090 R08: 0000000000000000 R09: 0000000000000000 [ 524.418575][T23735] R10: 0000000004000840 R11: 0000000000000246 R12: 0000000000000002 [ 524.418586][T23735] R13: 00007fde6b416038 R14: 00007fde6b415fa0 R15: 00007ffdea113ef8 [ 524.418616][T23735] [ 525.003157][T23745] vlan3: entered promiscuous mode [ 525.029155][T23745] bridge0: entered promiscuous mode [ 525.161701][T23750] netlink: 'syz.4.5679': attribute type 1 has an invalid length. [ 525.207793][ T5827] syz_tun (unregistering): left promiscuous mode [ 525.270328][T23759] IPv6: Can't replace route, no match found [ 525.278831][ T5825] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 525.281561][T23759] IPv6: Can't replace route, no match found [ 525.296128][ T5825] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 525.304433][ T5825] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 525.315006][ T5825] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 525.324367][ T5825] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 525.335704][T23750] bond10: entered promiscuous mode [ 525.361126][T23750] 8021q: adding VLAN 0 to HW filter on device bond10 [ 525.376013][ T5146] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 525.383415][ T5146] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 525.391071][ T5146] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 525.399787][ T5146] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 525.410677][ T5146] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 525.471517][T23754] 8021q: adding VLAN 0 to HW filter on device bond10 [ 525.479245][T23754] bond10: (slave wireguard0): The slave device specified does not support setting the MAC address [ 525.500716][T23754] bond10: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 525.522113][T23754] bond10: (slave wireguard0): making interface the new active one [ 525.531811][T23754] wireguard0: entered promiscuous mode [ 525.539559][T23754] bond10: (slave wireguard0): Enslaving as an active interface with an up link [ 525.580730][T23759] bond10: (slave wireguard1): The slave device specified does not support setting the MAC address [ 525.593900][T23759] bond10: (slave wireguard1): Enslaving as a backup interface with an up link [ 525.625691][T23767] macvlan3: entered allmulticast mode [ 525.631499][T23767] bridge0: entered allmulticast mode [ 525.639305][T23767] bridge0: port 1(macvlan3) entered blocking state [ 525.648804][T23767] bridge0: port 1(macvlan3) entered disabled state [ 525.657893][T23767] bridge0: left allmulticast mode [ 525.679920][T14188] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 525.691304][T14188] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.727653][T23755] lo speed is unknown, defaulting to 1000 [ 525.764675][T14188] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 525.775289][T14188] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.850832][T14188] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 525.861677][T14188] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.875145][T23755] lo speed is unknown, defaulting to 1000 [ 525.882513][T23755] wlan1 speed is unknown, defaulting to 1000 [ 525.907270][T14188] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 525.917466][T14188] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.058292][T23755] chnl_net:caif_netlink_parms(): no params data found [ 526.115534][T14188] bridge_slave_1: left allmulticast mode [ 526.122561][T14188] bridge_slave_1: left promiscuous mode [ 526.131213][T14188] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.146855][T14188] bridge_slave_0: left allmulticast mode [ 526.152644][T14188] bridge_slave_0: left promiscuous mode [ 526.158618][T14188] bridge0: port 1(bridge_slave_0) entered disabled state [ 526.586249][T14188] tipc: Resetting bearer [ 526.794035][T14188] tipc: Disabling bearer [ 527.096341][T14188] bond5 (unregistering): (slave bridge4): Removing an active aggregator [ 527.108408][T23795] FAULT_INJECTION: forcing a failure. [ 527.108408][T23795] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 527.126697][T14188] bond5 (unregistering): (slave bridge4): Releasing backup interface [ 527.145052][T14188] bond5 (unregistering): (slave bridge4): the permanent HWaddr of slave - a2:04:5b:a1:80:bf - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 527.158155][T23795] CPU: 0 UID: 0 PID: 23795 Comm: syz.3.5685 Not tainted syzkaller #0 PREEMPT(full) [ 527.158187][T23795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 527.158199][T23795] Call Trace: [ 527.158206][T23795] [ 527.158214][T23795] dump_stack_lvl+0xe8/0x150 [ 527.158294][T23795] should_fail_ex+0x412/0x560 [ 527.158344][T23795] _copy_from_user+0x2d/0xb0 [ 527.158376][T23795] copy_from_sockptr+0x5e/0x90 [ 527.158500][T23795] packet_setsockopt+0xbeb/0x1510 [ 527.158526][T23795] ? __pfx_packet_setsockopt+0x10/0x10 [ 527.158558][T23795] ? aa_sk_perm+0x6d5/0x900 [ 527.158599][T23795] ? fd_install+0x94/0x3d0 [ 527.158641][T23795] ? __pfx_aa_sk_perm+0x10/0x10 [ 527.158665][T23795] ? aa_sock_opt_perm+0xff/0x1a0 [ 527.158691][T23795] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 527.158726][T23795] ? __pfx_packet_setsockopt+0x10/0x10 [ 527.158750][T23795] do_sock_setsockopt+0x17c/0x1b0 [ 527.158796][T23795] __x64_sys_setsockopt+0x13d/0x1b0 [ 527.158826][T23795] do_syscall_64+0x14d/0xf80 [ 527.158862][T23795] ? trace_irq_disable+0x3b/0x150 [ 527.158896][T23795] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.158923][T23795] ? clear_bhb_loop+0x40/0x90 [ 527.158946][T23795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.158964][T23795] RIP: 0033:0x7f884fb9c799 [ 527.158982][T23795] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 527.158998][T23795] RSP: 002b:00007f8850afd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 527.159017][T23795] RAX: ffffffffffffffda RBX: 00007f884fe15fa0 RCX: 00007f884fb9c799 [ 527.159031][T23795] RDX: 0000000000000012 RSI: 0000000000000107 RDI: 0000000000000004 [ 527.159043][T23795] RBP: 00007f8850afd090 R08: 0000000000000008 R09: 0000000000000000 [ 527.159054][T23795] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 527.159066][T23795] R13: 00007f884fe16038 R14: 00007f884fe15fa0 R15: 00007fff2a022a68 [ 527.159100][T23795] [ 527.264685][T23802] FAULT_INJECTION: forcing a failure. [ 527.264685][T23802] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 527.293679][T23804] RDS: rds_bind could not find a transport for ::ffff:172.20.20.50, load rds_tcp or rds_rdma? [ 527.311613][T23802] CPU: 0 UID: 0 PID: 23802 Comm: syz.4.5687 Not tainted syzkaller #0 PREEMPT(full) [ 527.311641][T23802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 527.311652][T23802] Call Trace: [ 527.311661][T23802] [ 527.311675][T23802] dump_stack_lvl+0xe8/0x150 [ 527.311704][T23802] should_fail_ex+0x412/0x560 [ 527.311733][T23802] _copy_to_user+0x31/0xb0 [ 527.311762][T23802] simple_read_from_buffer+0xe1/0x170 [ 527.311793][T23802] proc_fail_nth_read+0x1bb/0x230 [ 527.311840][T23802] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 527.311869][T23802] ? rw_verify_area+0x2a6/0x4d0 [ 527.311891][T23802] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 527.311917][T23802] vfs_read+0x20c/0xa70 [ 527.311934][T23802] ? fdget_pos+0x246/0x320 [ 527.311964][T23802] ? __pfx___mutex_lock+0x10/0x10 [ 527.311992][T23802] ? __pfx_vfs_read+0x10/0x10 [ 527.312013][T23802] ? __fget_files+0x2a/0x420 [ 527.312040][T23802] ? __fget_files+0x3a0/0x420 [ 527.312064][T23802] ? __fget_files+0x2a/0x420 [ 527.312096][T23802] ksys_read+0x150/0x270 [ 527.312117][T23802] ? __pfx_ksys_read+0x10/0x10 [ 527.312147][T23802] do_syscall_64+0x14d/0xf80 [ 527.312164][T23802] ? trace_irq_disable+0x3b/0x150 [ 527.312189][T23802] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.312208][T23802] ? clear_bhb_loop+0x40/0x90 [ 527.312229][T23802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.312252][T23802] RIP: 0033:0x7f194f15cfce [ 527.312269][T23802] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 527.312285][T23802] RSP: 002b:00007f1950027fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 527.312304][T23802] RAX: ffffffffffffffda RBX: 00007f19500286c0 RCX: 00007f194f15cfce [ 527.312318][T23802] RDX: 000000000000000f RSI: 00007f19500280a0 RDI: 0000000000000004 [ 527.312330][T23802] RBP: 00007f1950028090 R08: 0000000000000000 R09: 0000000000000000 [ 527.312342][T23802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 527.312353][T23802] R13: 00007f194f416038 R14: 00007f194f415fa0 R15: 00007ffee4cf5848 [ 527.312383][T23802] [ 527.499097][ T5146] Bluetooth: hci2: command tx timeout [ 527.612086][T14188] bridge4 (unregistering): left allmulticast mode [ 527.673628][T14188] bond5 (unregistering): (slave bridge5): Releasing backup interface [ 527.695291][T14188] bridge5 (unregistering): left allmulticast mode [ 527.830131][T14188] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 527.842650][T14188] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 527.865663][T14188] bond0 (unregistering): Released all slaves [ 527.880017][T14188] bond1 (unregistering): Released all slaves [ 527.899976][T14188] bond2 (unregistering): (slave macvlan2): Releasing backup interface [ 527.909229][T14188] veth0_to_bond: left promiscuous mode [ 527.920995][T14188] bond2 (unregistering): Released all slaves [ 527.943518][T14188] bond3 (unregistering): Released all slaves [ 527.958586][T14188] bond4 (unregistering): Released all slaves [ 527.971929][T14188] bond5 (unregistering): Released all slaves [ 527.987707][T14188] bond6 (unregistering): Released all slaves [ 528.007638][T14188] bond7 (unregistering): (slave batadv1): Releasing active interface [ 528.022557][T14188] batadv1: left allmulticast mode [ 528.030131][T14188] bond7 (unregistering): Released all slaves [ 528.210924][T14188] tipc: Left network mode [ 528.218698][T23828] __nla_validate_parse: 10 callbacks suppressed [ 528.218730][T23828] netlink: 83 bytes leftover after parsing attributes in process `syz.4.5693'. [ 528.242456][T23755] bridge0: port 1(bridge_slave_0) entered blocking state [ 528.250866][T23755] bridge0: port 1(bridge_slave_0) entered disabled state [ 528.258448][T23755] bridge_slave_0: entered allmulticast mode [ 528.266701][T23755] bridge_slave_0: entered promiscuous mode [ 528.275678][T23755] bridge0: port 2(bridge_slave_1) entered blocking state [ 528.293791][T23755] bridge0: port 2(bridge_slave_1) entered disabled state [ 528.303638][T23755] bridge_slave_1: entered allmulticast mode [ 528.309419][T14188] IPVS: stopping master sync thread 6889 ... [ 528.319394][T23755] bridge_slave_1: entered promiscuous mode [ 528.569581][T23755] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 528.686857][T23755] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 528.714095][T23848] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5700'. [ 529.012772][T23755] team0: Port device team_slave_0 added [ 529.039703][T23755] team0: Port device team_slave_1 added [ 529.059025][T23872] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5704'. [ 529.107071][T23876] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5706'. [ 529.132999][T23876] net_ratelimit: 9 callbacks suppressed [ 529.133018][T23876] openvswitch: netlink: Flow key attr not present in new flow. [ 529.274456][T23755] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 529.282436][T23755] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 529.346560][T23755] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 529.364600][T23886] x_tables: unsorted entry at hook 2 [ 529.450785][T23755] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 529.461702][T23755] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 529.472147][T23892] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 529.494418][T23755] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 529.510527][T23891] siw: device registration error -23 [ 529.545598][T23896] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5713'. [ 529.605462][T23891] wg0: left promiscuous mode [ 529.620061][T23891] hsr0: left promiscuous mode [ 529.625776][T23891] bond7: left promiscuous mode [ 529.634786][T23900] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5715'. [ 529.653224][T23898] vlan0: entered promiscuous mode [ 529.666222][ T5146] Bluetooth: hci2: command tx timeout [ 529.696738][T23898] geneve1: entered promiscuous mode [ 529.703340][T23898] vlan0: entered allmulticast mode [ 529.715263][T23898] geneve1: entered allmulticast mode [ 529.743288][T23904] openvswitch: netlink: Duplicate or invalid key (type 0). [ 529.755094][T23904] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 529.835784][T23906] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5718'. [ 529.844774][T23906] openvswitch: netlink: Flow key attr not present in new flow. [ 529.879041][T23908] x_tables: duplicate underflow at hook 2 [ 529.975607][T23755] hsr_slave_0: entered promiscuous mode [ 529.985102][T23755] hsr_slave_1: entered promiscuous mode [ 530.000721][T23755] debugfs: 'hsr0' already exists in 'hsr' [ 530.020404][T23755] Cannot create hsr debugfs directory [ 530.704010][T23938] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5731'. [ 530.755921][T23938] openvswitch: netlink: Flow key attr not present in new flow. [ 530.853013][T14188] hsr_slave_0: left promiscuous mode [ 530.923100][T14188] hsr_slave_1: left promiscuous mode [ 530.930055][T14188] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 531.077595][T14188] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 531.108323][T23962] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 531.697910][T14188] batman_adv: batadv0: Removing interface: ipvlan2 [ 531.715349][T14188] batman_adv: batadv0: Removing interface: ipvlan4 [ 531.723166][T14188] batman_adv: batadv0: Removing interface: ipvlan5 [ 531.736705][ T5146] Bluetooth: hci2: command tx timeout [ 531.742722][T14188] dummy0: left allmulticast mode [ 531.760377][T14188] veth0_macvtap: left promiscuous mode [ 531.774665][T14188] veth1_vlan: left promiscuous mode [ 531.780506][T14188] veth0_vlan: left promiscuous mode [ 532.309424][T23959] macsec2: entered allmulticast mode [ 532.316960][T23959] veth1: entered allmulticast mode [ 532.506747][T23983] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.5740'. [ 532.516715][T23983] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.5740'. [ 532.552128][T23968] lo speed is unknown, defaulting to 1000 [ 533.165463][T24007] openvswitch: netlink: Flow actions attr not present in new flow. [ 533.338550][T23968] lo speed is unknown, defaulting to 1000 [ 533.351701][T23968] wlan1 speed is unknown, defaulting to 1000 [ 533.475050][T14188] IPVS: stop unused estimator thread 0... [ 533.620167][T24019] __nla_validate_parse: 2 callbacks suppressed [ 533.620189][T24019] netlink: 104 bytes leftover after parsing attributes in process `syz.3.5750'. [ 533.816273][ T5146] Bluetooth: hci2: command tx timeout [ 533.903326][T24024] syzkaller0: entered promiscuous mode [ 533.909188][T24024] syzkaller0: entered allmulticast mode [ 533.928314][T23755] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 533.957387][T23755] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 534.095831][T23755] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 534.532973][ T29] audit: type=1800 audit(1772854154.184:40): pid=24038 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.5754" name="memory.events" dev="tmpfs" ino=5768 res=0 errno=0 [ 536.031463][T23755] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 536.196789][T24081] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5757'. [ 536.223407][T24081] openvswitch: netlink: Flow actions attr not present in new flow. [ 536.225376][T23755] 8021q: adding VLAN 0 to HW filter on device bond0 [ 536.244516][T24077] netlink: 'syz.4.5759': attribute type 9 has an invalid length. [ 536.245005][T24084] netlink: 'syz.4.5759': attribute type 9 has an invalid length. [ 536.256072][T24077] netlink: 'syz.4.5759': attribute type 11 has an invalid length. [ 536.306715][T24084] netlink: 'syz.4.5759': attribute type 11 has an invalid length. [ 536.320489][T23755] 8021q: adding VLAN 0 to HW filter on device team0 [ 536.348509][T24077] netlink: 'syz.4.5759': attribute type 12 has an invalid length. [ 536.377867][T14188] bridge0: port 1(bridge_slave_0) entered blocking state [ 536.385032][T14188] bridge0: port 1(bridge_slave_0) entered forwarding state [ 536.396393][T24084] netlink: 'syz.4.5759': attribute type 12 has an invalid length. [ 536.442559][T14188] bridge0: port 2(bridge_slave_1) entered blocking state [ 536.449767][T14188] bridge0: port 2(bridge_slave_1) entered forwarding state [ 536.491461][T24094] block nbd15: Unsupported socket: should be TCP or UNIX. [ 536.514623][T23755] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 536.566344][T24092] netlink: 332 bytes leftover after parsing attributes in process `syz.3.5763'. [ 536.574188][T23755] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 536.577523][T24092] netlink: 'syz.3.5763': attribute type 9 has an invalid length. [ 536.606257][T24092] netlink: 108 bytes leftover after parsing attributes in process `syz.3.5763'. [ 536.630812][T24092] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5763'. [ 536.823394][T23755] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 536.880658][T23755] veth0_vlan: entered promiscuous mode [ 536.892706][T23755] veth1_vlan: entered promiscuous mode [ 536.940217][T23755] veth0_macvtap: entered promiscuous mode [ 536.953999][T23755] veth1_macvtap: entered promiscuous mode [ 536.979309][T23755] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 536.995414][T23755] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 537.011615][ T49] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.041056][ T49] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.077304][ T49] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.101561][ T49] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.144214][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 537.169374][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 537.205313][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 537.214427][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 537.319755][T24120] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not filter [ 540.305991][T24124] netlink: 'syz.0.5764': attribute type 4 has an invalid length. [ 540.313992][T24124] netlink: 'syz.0.5764': attribute type 4 has an invalid length. [ 540.359802][T24124] netlink: 'syz.0.5764': attribute type 4 has an invalid length. [ 540.459520][T24131] netlink: 452 bytes leftover after parsing attributes in process `syz.4.5768'. [ 540.637462][ T5825] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 540.647788][ T5825] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 540.656014][ T5825] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 540.663957][ T5825] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 540.671644][ T5825] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 541.227690][T24149] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5772'. [ 541.255445][T24139] lo speed is unknown, defaulting to 1000 [ 541.264523][T24149] openvswitch: netlink: Flow actions attr not present in new flow. [ 541.690792][T24162] FAULT_INJECTION: forcing a failure. [ 541.690792][T24162] name failslab, interval 1, probability 0, space 0, times 0 [ 541.722874][T24162] CPU: 0 UID: 0 PID: 24162 Comm: syz.0.5776 Not tainted syzkaller #0 PREEMPT(full) [ 541.722898][T24162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 541.722908][T24162] Call Trace: [ 541.722914][T24162] [ 541.722920][T24162] dump_stack_lvl+0xe8/0x150 [ 541.722945][T24162] should_fail_ex+0x412/0x560 [ 541.722969][T24162] should_failslab+0xa8/0x100 [ 541.723014][T24162] __kmalloc_cache_noprof+0x88/0x660 [ 541.723029][T24162] ? __sctp_v6_cmp_addr+0x1dc/0x510 [ 541.723058][T24162] ? sctp_v6_cmp_addr+0x15/0xd0 [ 541.723074][T24162] ? sctp_add_bind_addr+0x8c/0x370 [ 541.723094][T24162] sctp_add_bind_addr+0x8c/0x370 [ 541.723114][T24162] sctp_copy_local_addr_list+0x314/0x4f0 [ 541.723138][T24162] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 541.723155][T24162] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 541.723173][T24162] ? sctp_v6_is_any+0x64/0x80 [ 541.723191][T24162] ? sctp_copy_one_addr+0x93/0x360 [ 541.723211][T24162] sctp_bind_addr_copy+0xb3/0x3c0 [ 541.723230][T24162] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 541.723249][T24162] sctp_connect_new_asoc+0x2ff/0x6b0 [ 541.723272][T24162] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 541.723298][T24162] ? __local_bh_enable_ip+0xd0/0x130 [ 541.723328][T24162] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 541.723348][T24162] ? security_sctp_bind_connect+0x7e/0x2c0 [ 541.723372][T24162] sctp_sendmsg+0x1528/0x2c10 [ 541.723404][T24162] ? __pfx_sctp_sendmsg+0x10/0x10 [ 541.723429][T24162] ? aa_sk_perm+0x6d5/0x900 [ 541.723459][T24162] ? __pfx_aa_sk_perm+0x10/0x10 [ 541.723479][T24162] ? sock_rps_record_flow+0x19/0x350 [ 541.723518][T24162] ? inet_sendmsg+0x2f4/0x370 [ 541.723537][T24162] ____sys_sendmsg+0x80a/0x9f0 [ 541.723563][T24162] ? __pfx_____sys_sendmsg+0x10/0x10 [ 541.723589][T24162] ? import_iovec+0x73/0xa0 [ 541.723623][T24162] ___sys_sendmsg+0x2a5/0x360 [ 541.723644][T24162] ? __pfx____sys_sendmsg+0x10/0x10 [ 541.723666][T24162] ? kstrtouint+0x6e/0xe0 [ 541.723712][T24162] ? __fget_files+0x2a/0x420 [ 541.723737][T24162] ? __fget_files+0x3a0/0x420 [ 541.723769][T24162] __sys_sendmmsg+0x27c/0x4e0 [ 541.723791][T24162] ? __pfx___sys_sendmmsg+0x10/0x10 [ 541.723806][T24162] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 541.723850][T24162] ? ksys_write+0x242/0x270 [ 541.723871][T24162] ? __pfx_ksys_write+0x10/0x10 [ 541.723897][T24162] __x64_sys_sendmmsg+0xa0/0xc0 [ 541.723917][T24162] do_syscall_64+0x14d/0xf80 [ 541.723934][T24162] ? trace_irq_disable+0x3b/0x150 [ 541.723959][T24162] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 541.723986][T24162] ? clear_bhb_loop+0x40/0x90 [ 541.724007][T24162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 541.724024][T24162] RIP: 0033:0x7f7d5079c799 [ 541.724043][T24162] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 541.724059][T24162] RSP: 002b:00007f7d51579028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 541.724080][T24162] RAX: ffffffffffffffda RBX: 00007f7d50a15fa0 RCX: 00007f7d5079c799 [ 541.724094][T24162] RDX: 0000000000000001 RSI: 0000200000000500 RDI: 0000000000000003 [ 541.724106][T24162] RBP: 00007f7d51579090 R08: 0000000000000000 R09: 0000000000000000 [ 541.724118][T24162] R10: 0000000004000840 R11: 0000000000000246 R12: 0000000000000002 [ 541.724130][T24162] R13: 00007f7d50a16038 R14: 00007f7d50a15fa0 R15: 00007ffc28aa8e88 [ 541.724160][T24162] [ 541.748057][T24139] lo speed is unknown, defaulting to 1000 [ 541.979611][T24165] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 542.166470][T14190] bridge_slave_0: left allmulticast mode [ 542.172238][T14190] bridge_slave_0: left promiscuous mode [ 542.178732][T14190] bridge0: port 1(bridge_slave_0) entered disabled state [ 542.513429][T24186] xt_hashlimit: max too large, truncated to 1048576 [ 542.722279][T24195] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5787'. [ 542.976427][ T5146] Bluetooth: hci5: command tx timeout [ 543.192938][T14190] bond7 (unregistering): (slave gretap1): Releasing active interface [ 543.212216][T14190] gretap1 (unregistering): left allmulticast mode [ 543.255101][T14190] tipc: Disabling bearer [ 543.612088][T14190] bond1 (unregistering): (slave bond0): Releasing active interface [ 543.623308][T14190] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 543.654306][T14190] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 543.664365][T14190] bond0 (unregistering): Released all slaves [ 543.678764][T14190] bond1 (unregistering): Released all slaves [ 543.697687][T14190] bond2 (unregistering): Released all slaves [ 543.717079][T14190] bond3 (unregistering): Released all slaves [ 543.740000][T14190] bond4 (unregistering): Released all slaves [ 543.765258][T14190] bond5 (unregistering): Released all slaves [ 543.782842][T14190] bond6 (unregistering): Released all slaves [ 543.808391][T14190] bond7 (unregistering): Released all slaves [ 543.828136][T24139] wlan1 speed is unknown, defaulting to 1000 [ 544.029079][T14190] : left promiscuous mode [ 544.176555][T24202] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5788'. [ 544.188983][T14190] tipc: Disabling bearer [ 544.231214][T14190] tipc: Left network mode [ 544.242783][T24202] tipc: Started in network mode [ 544.247822][T24202] tipc: Node identity 82b7cc5047d, cluster identity 4711 [ 544.255006][T24202] tipc: Enabled bearer , priority 0 [ 544.306996][T24202] syzkaller0: entered promiscuous mode [ 544.312506][T24202] syzkaller0: entered allmulticast mode [ 544.397550][T24201] tipc: Resetting bearer [ 544.424082][T24201] tipc: Disabling bearer [ 544.455837][T14190] IPVS: stopping master sync thread 13483 ... [ 544.722547][T24227] openvswitch: netlink: Missing valid actions attribute. [ 544.745068][T24227] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 544.962617][T24139] chnl_net:caif_netlink_parms(): no params data found [ 545.017369][ T5146] Bluetooth: hci5: command tx timeout [ 545.307857][T24248] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5797'. [ 545.320295][T24248] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5797'. [ 545.442010][T24139] bridge0: port 1(bridge_slave_0) entered blocking state [ 545.458144][T24139] bridge0: port 1(bridge_slave_0) entered disabled state [ 545.475875][T24139] bridge_slave_0: entered allmulticast mode [ 545.497648][T24139] bridge_slave_0: entered promiscuous mode [ 545.509916][T24139] bridge0: port 2(bridge_slave_1) entered blocking state [ 545.543974][T24139] bridge0: port 2(bridge_slave_1) entered disabled state [ 545.573439][T24139] bridge_slave_1: entered allmulticast mode [ 545.581625][T24249] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5797'. [ 545.587574][T24139] bridge_slave_1: entered promiscuous mode [ 545.797667][T24264] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.5802'. [ 545.997124][T24270] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5803'. [ 546.230953][T24248] tipc: Resetting bearer [ 546.262230][ T980] IPVS: starting estimator thread 0... [ 546.285469][T24279] openvswitch: netlink: Message has 91 unknown bytes. [ 546.316354][T24248] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 546.370283][T24280] IPVS: using max 35 ests per chain, 84000 per kthread [ 546.465053][T24248] ip6gre1: left allmulticast mode [ 546.478385][T24248] bond2: left allmulticast mode [ 546.496371][T24248] bridge0: left allmulticast mode [ 546.610773][T24248] bond6: left promiscuous mode [ 546.628932][T24249] hsr_slave_0: left promiscuous mode [ 546.642365][T24249] hsr_slave_1: left promiscuous mode [ 546.672300][ T5933] lo speed is unknown, defaulting to 1000 [ 546.680667][ T5933] syz2: Port: 1 Link DOWN [ 546.699081][T24288] openvswitch: : Dropping previously announced user features [ 546.773494][ T49] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 546.783719][ T49] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.793992][ T49] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 546.803854][ T49] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.819246][T24292] syzkaller0: entered promiscuous mode [ 546.824884][T24292] syzkaller0: entered allmulticast mode [ 546.867083][ T49] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 546.876154][ T49] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.889525][ T49] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 546.907616][ T49] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.920316][T24139] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 546.934627][T24139] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 547.077810][T24139] team0: Port device team_slave_0 added [ 547.089557][T24139] team0: Port device team_slave_1 added [ 547.096143][ T5146] Bluetooth: hci5: command tx timeout [ 547.231641][T24139] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 547.256941][T24139] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 547.355833][T24139] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 547.411254][T24139] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 547.418893][T24139] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 547.478036][T24139] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 547.492293][T24336] validate_nla: 62 callbacks suppressed [ 547.492310][T24336] netlink: 'syz.2.5814': attribute type 6 has an invalid length. [ 547.506277][T24336] netlink: 232 bytes leftover after parsing attributes in process `syz.2.5814'. [ 547.551231][T24336] netlink: 5252 bytes leftover after parsing attributes in process `syz.2.5814'. [ 547.594285][T14190] veth1: left allmulticast mode [ 548.363764][ T7305] smc: removing ib device syz0 [ 548.378687][ T980] lo speed is unknown, defaulting to 1000 [ 548.384454][ T980] syz0: Port: 1 Link DOWN [ 548.456136][T24366] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5822'. [ 548.611885][T24370] openvswitch: : Dropping previously announced user features [ 548.665223][T24139] hsr_slave_0: entered promiscuous mode [ 548.717392][T24139] hsr_slave_1: entered promiscuous mode [ 548.985237][T24389] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5825'. [ 549.043733][T24389] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5825'. [ 549.180315][ T5146] Bluetooth: hci5: command tx timeout [ 549.205366][T24399] FAULT_INJECTION: forcing a failure. [ 549.205366][T24399] name failslab, interval 1, probability 0, space 0, times 0 [ 549.279208][T24399] CPU: 1 UID: 0 PID: 24399 Comm: syz.0.5831 Not tainted syzkaller #0 PREEMPT(full) [ 549.279236][T24399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 549.279248][T24399] Call Trace: [ 549.279256][T24399] [ 549.279264][T24399] dump_stack_lvl+0xe8/0x150 [ 549.279295][T24399] should_fail_ex+0x412/0x560 [ 549.279325][T24399] should_failslab+0xa8/0x100 [ 549.279351][T24399] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 549.279373][T24399] ? __alloc_skb+0x1d0/0x7d0 [ 549.279397][T24399] ? __local_bh_enable_ip+0xd0/0x130 [ 549.279426][T24399] __alloc_skb+0x1d0/0x7d0 [ 549.279464][T24399] alloc_skb_with_frags+0xca/0x890 [ 549.279521][T24399] virtio_transport_alloc_skb+0xf4/0x1180 [ 549.279670][T24399] ? __pfx_virtio_transport_alloc_skb+0x10/0x10 [ 549.279708][T24399] virtio_transport_send_pkt_info+0x570/0xff0 [ 549.279754][T24399] virtio_transport_release+0x363/0x8c0 [ 549.279785][T24399] ? __pfx_virtio_transport_release+0x10/0x10 [ 549.279806][T24399] ? do_raw_spin_lock+0x12b/0x2f0 [ 549.279836][T24399] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 549.279859][T24399] ? __vsock_release+0x2c/0x540 [ 549.279887][T24399] ? __local_bh_enable_ip+0xd0/0x130 [ 549.279912][T24399] __vsock_release+0x9f/0x540 [ 549.279940][T24399] __vsock_release+0x39c/0x540 [ 549.279969][T24399] vsock_release+0x99/0x100 [ 549.279995][T24399] sock_close+0xc3/0x240 [ 549.280018][T24399] ? __pfx_sock_close+0x10/0x10 [ 549.280039][T24399] __fput+0x44f/0xa70 [ 549.280082][T24399] fput_close_sync+0x11f/0x240 [ 549.280108][T24399] ? __pfx_fput_close_sync+0x10/0x10 [ 549.280146][T24399] __x64_sys_close+0x7e/0x110 [ 549.280174][T24399] do_syscall_64+0x14d/0xf80 [ 549.280191][T24399] ? trace_irq_disable+0x3b/0x150 [ 549.280216][T24399] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.280236][T24399] ? clear_bhb_loop+0x40/0x90 [ 549.280259][T24399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.280278][T24399] RIP: 0033:0x7f7d5079c799 [ 549.280296][T24399] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 549.280312][T24399] RSP: 002b:00007f7d51579028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 549.280332][T24399] RAX: ffffffffffffffda RBX: 00007f7d50a15fa0 RCX: 00007f7d5079c799 [ 549.280346][T24399] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 549.280358][T24399] RBP: 00007f7d51579090 R08: 0000000000000000 R09: 0000000000000000 [ 549.280370][T24399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 549.280381][T24399] R13: 00007f7d50a16038 R14: 00007f7d50a15fa0 R15: 00007ffc28aa8e88 [ 549.280413][T24399] [ 549.936603][T24406] netlink: 64691 bytes leftover after parsing attributes in process `syz.0.5833'. [ 549.970729][T24410] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5834'. [ 551.541779][T14190] IPVS: stop unused estimator thread 0... [ 551.579001][T24460] __nla_validate_parse: 1 callbacks suppressed [ 551.579024][T24460] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5846'. [ 552.236971][T24139] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 552.313204][T24139] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 552.356563][T24139] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 552.380655][T24139] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 552.776788][T24139] 8021q: adding VLAN 0 to HW filter on device bond0 [ 552.923829][T24139] 8021q: adding VLAN 0 to HW filter on device team0 [ 552.970227][T14190] bridge0: port 1(bridge_slave_0) entered blocking state [ 552.977412][T14190] bridge0: port 1(bridge_slave_0) entered forwarding state [ 552.994043][T24512] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5856'. [ 553.067917][T14190] bridge0: port 2(bridge_slave_1) entered blocking state [ 553.075067][T14190] bridge0: port 2(bridge_slave_1) entered forwarding state [ 553.257387][T24519] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5857'. [ 553.295814][T24519] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5857'. [ 553.321976][T24519] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5857'. [ 553.356739][T24519] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5857'. [ 553.611579][T24139] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 553.804249][T24139] veth0_vlan: entered promiscuous mode [ 553.843512][T24139] veth1_vlan: entered promiscuous mode [ 553.939315][T24139] veth0_macvtap: entered promiscuous mode [ 553.962784][T24139] veth1_macvtap: entered promiscuous mode [ 554.012273][T24139] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 554.038454][T24139] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 554.039739][T24554] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5866'. [ 554.053819][ T49] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.083632][ T49] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.113855][ T49] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.134514][ T49] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.399303][T14190] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 554.436488][T14190] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 554.445395][T24561] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 554.459669][T24572] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5870'. [ 554.512721][T14188] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 554.521219][T24561] netlink: 'syz.2.5868': attribute type 4 has an invalid length. [ 554.555888][T14188] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 554.674389][T24580] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5872'. [ 554.772394][T24586] netlink: 244 bytes leftover after parsing attributes in process `syz.1.5765'. [ 554.803757][T24586] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 555.027668][ T5825] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 555.040931][ T5825] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 555.062407][ T5825] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 555.080227][ T5825] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 555.087938][ T5825] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 555.230847][T24594] lo speed is unknown, defaulting to 1000 [ 556.462115][T24645] workqueue: name exceeds WQ_NAME_LEN. Truncating to: π,xb)% ]3DL̥ [ 557.176151][ T5825] Bluetooth: hci0: command tx timeout [ 557.556178][T24649] syzkaller0: entered promiscuous mode [ 557.561697][T24649] syzkaller0: entered allmulticast mode [ 559.258211][ T5825] Bluetooth: hci0: command tx timeout [ 559.800864][T24594] chnl_net:caif_netlink_parms(): no params data found [ 559.958580][T24770] ------------[ cut here ]------------ [ 559.964087][T24770] verifier bug: REG INVARIANTS VIOLATION (true_reg1): range bounds violation u64=[0xffffdfcd, 0xffffffffffffdfcc] s64=[0x80000000ffffdfcd, 0x7fffffffffffdfcc] u32=[0xffffdfcd, 0xffffdfcc] s32=[0xffffdfcd, 0xffffdfcc] var_off=(0xffffdfcc, 0xffffffff00000000) [ 559.989349][T24770] WARNING: kernel/bpf/verifier.c:2799 at reg_bounds_sanity_check+0x201/0xc30, CPU#1: syz.4.5898/24770 [ 560.000728][T24770] Modules linked in: [ 560.004661][T24770] CPU: 1 UID: 0 PID: 24770 Comm: syz.4.5898 Not tainted syzkaller #0 PREEMPT(full) [ 560.014287][T24770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 560.024518][T24770] RIP: 0010:reg_bounds_sanity_check+0x3e6/0xc30 [ 560.030858][T24770] Code: 98 00 00 00 4c 8b 8c 24 88 00 00 00 41 ff 34 24 41 57 55 41 55 ff b4 24 f0 00 00 00 ff b4 24 a8 00 00 00 ff b4 24 c0 00 00 00 <67> 48 0f b9 3a 48 83 c4 38 49 bf 00 00 00 00 00 fc ff df 48 8b 84 [ 560.050727][T24770] RSP: 0018:ffffc90004236eb0 EFLAGS: 00010246 [ 560.057042][T24770] RAX: dffffc0000000000 RBX: 1ffff1100677c04a RCX: 00000000ffffdfcd [ 560.065045][T24770] RDX: ffffffff8bd47160 RSI: ffffffff8bd4fa80 RDI: ffffffff901546f0 [ 560.073514][T24770] RBP: 00000000ffffdfcc R08: ffffffffffffdfcc R09: 80000000ffffdfcd [ 560.082433][T24770] R10: ffff888033be0358 R11: 1ffff1100677c050 R12: ffff888033be0250 [ 560.090777][T24770] R13: 00000000ffffdfcd R14: 1ffff1100677c049 R15: 00000000ffffdfcc [ 560.099053][T24770] FS: 00007f19500286c0(0000) GS:ffff888125565000(0000) knlGS:0000000000000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 560.108321][T24770] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 560.115194][T24770] CR2: 0000200000001000 CR3: 0000000034356000 CR4: 00000000003526f0 [ 560.123505][T24770] Call Trace: [ 560.127088][T24770] [ 560.130065][T24770] reg_set_min_max+0x264/0x340 [ 560.134854][T24770] check_cond_jmp_op+0x1db5/0x31a0 [ 560.140592][T24770] ? __pfx_check_cond_jmp_op+0x10/0x10 [ 560.146468][T24770] ? kfree+0x1c1/0x630 [ 560.150560][T24770] ? do_check+0x6326/0x10690 [ 560.155171][T24770] ? bpf_reset_stack_write_marks+0x1eb/0x260 [ 560.161522][T24770] do_check+0x7970/0x10690 [ 560.166297][T24770] ? __pfx_do_check+0x10/0x10 [ 560.170997][T24770] ? init_func_state+0x1ab2/0x28d0 [ 560.177707][T24770] do_check_common+0x19c8/0x25b0 [ 560.183367][T24770] bpf_check+0x5f3e/0x1ce00 [ 560.188569][T24770] ? __lock_acquire+0x6b5/0x2cf0 [ 560.193548][T24770] ? __lock_acquire+0x6b5/0x2cf0 [ 560.199023][T24770] ? __mutex_trylock_common+0x158/0x260 [ 560.204654][T24770] ? __pfx___mutex_trylock_common+0x10/0x10 [ 560.210915][T24770] ? __lock_acquire+0x6b5/0x2cf0 [ 560.216328][T24770] ? css_rstat_updated+0x23a/0x530 [ 560.221512][T24770] ? __pfx_css_rstat_updated+0x10/0x10 [ 560.227047][T24770] ? pcpu_alloc_noprof+0xe8f/0x19c0 [ 560.232299][T24770] ? __lock_acquire+0x6b5/0x2cf0 [ 560.237337][T24770] ? __pfx_bpf_check+0x10/0x10 [ 560.242129][T24770] ? pcpu_memcg_post_alloc_hook+0x77/0x580 [ 560.248022][T24770] ? pcpu_memcg_post_alloc_hook+0x44a/0x580 [ 560.253949][T24770] ? ktime_get_with_offset+0x93/0x2a0 [ 560.259392][T24770] ? ktime_get_with_offset+0x93/0x2a0 [ 560.264791][T24770] ? __asan_memset+0x22/0x50 [ 560.269466][T24770] ? bpf_lsm_bpf_prog_load+0x9/0x20 [ 560.274704][T24770] ? security_bpf_prog_load+0x125/0x3c0 [ 560.280394][T24770] bpf_prog_load+0x1484/0x1ae0 [ 560.285407][T24770] ? __pfx_bpf_prog_load+0x10/0x10 [ 560.290933][T24770] ? futex_wait+0x29a/0x380 [ 560.295501][T24770] ? bpf_lsm_bpf+0x9/0x20 [ 560.299928][T24770] ? security_bpf+0x7e/0x2d0 [ 560.304662][T24770] __sys_bpf+0x618/0x950 [ 560.309070][T24770] ? __pfx___sys_bpf+0x10/0x10 [ 560.313893][T24770] ? rcu_is_watching+0x15/0xb0 [ 560.318771][T24770] __x64_sys_bpf+0x7c/0x90 [ 560.323230][T24770] do_syscall_64+0x14d/0xf80 [ 560.327897][T24770] ? trace_irq_disable+0x3b/0x150 [ 560.332953][T24770] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 560.337987][T24594] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg0": -EINTR [ 560.339072][T24770] ? clear_bhb_loop+0x40/0x90 [ 560.352664][T24770] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 560.358611][T24770] RIP: 0033:0x7f194f19c799 [ 560.363050][T24770] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 560.382935][T24770] RSP: 002b:00007f1950028028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 560.391630][T24770] RAX: ffffffffffffffda RBX: 00007f194f415fa0 RCX: 00007f194f19c799 [ 560.399872][T24770] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 560.407934][T24770] RBP: 00007f194f232bd9 R08: 0000000000000000 R09: 0000000000000000 [ 560.415980][T24770] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 560.423993][T24770] R13: 00007f194f416038 R14: 00007f194f415fa0 R15: 00007ffee4cf5848 [ 560.432056][T24770] [ 560.435113][T24770] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 560.442405][T24770] CPU: 1 UID: 0 PID: 24770 Comm: syz.4.5898 Not tainted syzkaller #0 PREEMPT(full) [ 560.451792][T24770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 560.461865][T24770] Call Trace: [ 560.465159][T24770] [ 560.468109][T24770] vpanic+0x56c/0xa60 [ 560.472165][T24770] ? __pfx__printk+0x10/0x10 [ 560.476769][T24770] ? __pfx_vpanic+0x10/0x10 [ 560.481294][T24770] ? is_bpf_text_address+0x292/0x2b0 [ 560.486592][T24770] ? is_bpf_text_address+0x26/0x2b0 [ 560.491826][T24770] panic+0xc5/0xd0 [ 560.495576][T24770] ? __pfx_panic+0x10/0x10 [ 560.500038][T24770] __warn+0x315/0x4f0 [ 560.504045][T24770] ? reg_bounds_sanity_check+0x201/0xc30 [ 560.509699][T24770] ? reg_bounds_sanity_check+0x201/0xc30 [ 560.515354][T24770] __report_bug+0x29a/0x540 [ 560.519971][T24770] ? __pfx_stack_trace_save+0x10/0x10 [ 560.525372][T24770] ? reg_bounds_sanity_check+0x201/0xc30 [ 560.531029][T24770] ? __pfx___report_bug+0x10/0x10 [ 560.536075][T24770] ? check_cond_jmp_op+0x1c55/0x31a0 [ 560.541361][T24770] ? do_check+0x7970/0x10690 [ 560.545953][T24770] ? do_check_common+0x19c8/0x25b0 [ 560.551059][T24770] ? bpf_check+0x5f3e/0x1ce00 [ 560.555737][T24770] ? bpf_prog_load+0x1484/0x1ae0 [ 560.560686][T24770] ? __sys_bpf+0x618/0x950 [ 560.565115][T24770] ? __x64_sys_bpf+0x7c/0x90 [ 560.569712][T24770] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 560.575899][T24770] report_bug_entry+0x19a/0x290 [ 560.581134][T24770] ? reg_bounds_sanity_check+0x3e6/0xc30 [ 560.586786][T24770] ? reg_bounds_sanity_check+0x3eb/0xc30 [ 560.592513][T24770] handle_bug+0xce/0x200 [ 560.596769][T24770] exc_invalid_op+0x1a/0x50 [ 560.601278][T24770] asm_exc_invalid_op+0x1a/0x20 [ 560.606125][T24770] RIP: 0010:reg_bounds_sanity_check+0x3e6/0xc30 [ 560.612365][T24770] Code: 98 00 00 00 4c 8b 8c 24 88 00 00 00 41 ff 34 24 41 57 55 41 55 ff b4 24 f0 00 00 00 ff b4 24 a8 00 00 00 ff b4 24 c0 00 00 00 <67> 48 0f b9 3a 48 83 c4 38 49 bf 00 00 00 00 00 fc ff df 48 8b 84 [ 560.632498][T24770] RSP: 0018:ffffc90004236eb0 EFLAGS: 00010246 [ 560.638586][T24770] RAX: dffffc0000000000 RBX: 1ffff1100677c04a RCX: 00000000ffffdfcd [ 560.646577][T24770] RDX: ffffffff8bd47160 RSI: ffffffff8bd4fa80 RDI: ffffffff901546f0 [ 560.654545][T24770] RBP: 00000000ffffdfcc R08: ffffffffffffdfcc R09: 80000000ffffdfcd [ 560.662511][T24770] R10: ffff888033be0358 R11: 1ffff1100677c050 R12: ffff888033be0250 [ 560.670489][T24770] R13: 00000000ffffdfcd R14: 1ffff1100677c049 R15: 00000000ffffdfcc [ 560.678494][T24770] reg_set_min_max+0x264/0x340 [ 560.683287][T24770] check_cond_jmp_op+0x1db5/0x31a0 [ 560.688431][T24770] ? __pfx_check_cond_jmp_op+0x10/0x10 [ 560.693897][T24770] ? kfree+0x1c1/0x630 [ 560.697965][T24770] ? do_check+0x6326/0x10690 [ 560.702551][T24770] ? bpf_reset_stack_write_marks+0x1eb/0x260 [ 560.708707][T24770] do_check+0x7970/0x10690 [ 560.713169][T24770] ? __pfx_do_check+0x10/0x10 [ 560.717839][T24770] ? init_func_state+0x1ab2/0x28d0 [ 560.722951][T24770] do_check_common+0x19c8/0x25b0 [ 560.727890][T24770] bpf_check+0x5f3e/0x1ce00 [ 560.732392][T24770] ? __lock_acquire+0x6b5/0x2cf0 [ 560.737327][T24770] ? __lock_acquire+0x6b5/0x2cf0 [ 560.742278][T24770] ? __mutex_trylock_common+0x158/0x260 [ 560.747834][T24770] ? __pfx___mutex_trylock_common+0x10/0x10 [ 560.753744][T24770] ? __lock_acquire+0x6b5/0x2cf0 [ 560.758685][T24770] ? css_rstat_updated+0x23a/0x530 [ 560.763793][T24770] ? __pfx_css_rstat_updated+0x10/0x10 [ 560.769245][T24770] ? pcpu_alloc_noprof+0xe8f/0x19c0 [ 560.774453][T24770] ? __lock_acquire+0x6b5/0x2cf0 [ 560.779399][T24770] ? __pfx_bpf_check+0x10/0x10 [ 560.784164][T24770] ? pcpu_memcg_post_alloc_hook+0x77/0x580 [ 560.789964][T24770] ? pcpu_memcg_post_alloc_hook+0x44a/0x580 [ 560.795860][T24770] ? ktime_get_with_offset+0x93/0x2a0 [ 560.801233][T24770] ? ktime_get_with_offset+0x93/0x2a0 [ 560.806636][T24770] ? __asan_memset+0x22/0x50 [ 560.811252][T24770] ? bpf_lsm_bpf_prog_load+0x9/0x20 [ 560.816452][T24770] ? security_bpf_prog_load+0x125/0x3c0 [ 560.822002][T24770] bpf_prog_load+0x1484/0x1ae0 [ 560.826775][T24770] ? __pfx_bpf_prog_load+0x10/0x10 [ 560.831876][T24770] ? futex_wait+0x29a/0x380 [ 560.836398][T24770] ? bpf_lsm_bpf+0x9/0x20 [ 560.840729][T24770] ? security_bpf+0x7e/0x2d0 [ 560.845316][T24770] __sys_bpf+0x618/0x950 [ 560.849558][T24770] ? __pfx___sys_bpf+0x10/0x10 [ 560.854335][T24770] ? rcu_is_watching+0x15/0xb0 [ 560.859103][T24770] __x64_sys_bpf+0x7c/0x90 [ 560.863522][T24770] do_syscall_64+0x14d/0xf80 [ 560.868104][T24770] ? trace_irq_disable+0x3b/0x150 [ 560.873161][T24770] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 560.879219][T24770] ? clear_bhb_loop+0x40/0x90 [ 560.883892][T24770] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 560.889779][T24770] RIP: 0033:0x7f194f19c799 [ 560.894188][T24770] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 560.913792][T24770] RSP: 002b:00007f1950028028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 560.922208][T24770] RAX: ffffffffffffffda RBX: 00007f194f415fa0 RCX: 00007f194f19c799 [ 560.930177][T24770] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 560.938141][T24770] RBP: 00007f194f232bd9 R08: 0000000000000000 R09: 0000000000000000 [ 560.946136][T24770] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 560.954100][T24770] R13: 00007f194f416038 R14: 00007f194f415fa0 R15: 00007ffee4cf5848 [ 560.962429][T24770] [ 560.965712][T24770] Kernel Offset: disabled [ 560.970036][T24770] Rebooting in 86400 seconds..