last executing test programs: 3.840671379s ago: executing program 2 (id=8297): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x0, 0x18c, 0x203, 0x320, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {0x0, 0x14}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8, 0x2000000}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) 3.474966143s ago: executing program 2 (id=8299): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x18, 0x1402, 0x1, 0x70fd29, 0x25dfdc02, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000801}, 0x4800) r1 = socket$nl_rdma(0x10, 0x3, 0x14) syz_emit_ethernet(0x34e, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000001d14d9"], 0x38}, 0x1, 0x0, 0x0, 0x20004085}, 0x4004080) 3.426951958s ago: executing program 2 (id=8302): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bond0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000c40)=ANY=[], 0x58}}, 0x0) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x4, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007919b8000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x4}, 0x94) recvmmsg(r1, &(0x7f0000003e40)=[{{&(0x7f0000000400)=@nl=@proc, 0x80, &(0x7f0000003b00)=[{&(0x7f0000000480)=""/225, 0xe1}, {&(0x7f0000003c00)=""/136, 0x88}, {&(0x7f0000002800)=""/4096, 0x1000}, {&(0x7f0000003800)=""/89, 0x59}, {&(0x7f0000003880)=""/255, 0xff}, {&(0x7f0000003ec0)=""/175, 0xaf}, {&(0x7f0000003a40)=""/163, 0xa3}], 0x7, &(0x7f0000003b80)=""/118, 0x76}, 0x80}, {{0x0, 0x0, &(0x7f0000003d80)=[{&(0x7f0000003980)=""/179, 0xb3}, {&(0x7f0000002740)=""/139, 0x8b}], 0x2, &(0x7f0000003dc0)=""/98, 0x62}}], 0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010025bd7000fddbdf250500000014000380040004000400010008000200000000000c00018008000100", @ANYRES32=r8, @ANYBLOB="080005"], 0x3c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) getsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f00000002c0)={@broadcast, @rand_addr, 0x0}, &(0x7f0000000340)=0xc) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000004100)={0xffffffffffffffff, 0x58, &(0x7f0000004080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_GET(r3, &(0x7f0000004400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000043c0)={&(0x7f0000004140)={0x25c, r6, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@HEADER={0x90, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3096168a66c16814}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x25c}, 0x1, 0x0, 0x0, 0x80}, 0x11) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="18000058ee35c05a8fd07e0907fd8cb80000000000000000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x60, '\x00', r2}, 0x94) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000003cc0)={0x3, 0x4, &(0x7f0000003f80)=ANY=[@ANYBLOB="1802000000000076a32f9d0000000000850000008700000095000000000000006ba1f67e07b955e8bdf83000379a001bc6ad4f0f6a1302b0a530c58653e7c33b633e8a809de3361b0f928a723efa66b5acf2dab2decdfb51f51cb032718448ef183d051a201e0c926c7963cb98dd0ea566d7c30fea5536cd6959bf0e44637181ec85b37e667cf5fcc60b6f8e6d5f69a4f64f6d4a8d4300accc35bd9566f4ca878ee463b3d22ff50e10656291cbd72decd0c1e48f40682088c2500a7ee2b50d78c05cb4a06e2abb8fe3ab754877487e7bf3587400466d09f688"], &(0x7f0000000080)='GPL\x00'}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r13 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000026c0)={r11, 0x0, 0x1f, 0x1000, &(0x7f0000000040)="06862bf0fa9902cc6c91e82705e48d8ab592785be344ef496f8327a0a1ca7d", &(0x7f0000000680)=""/4096, 0xd, 0x0, 0x1000, 0x12, &(0x7f0000001680)="11754602e225d6062074030bcc44ca4a61f6455a83afd6883e36d3be6d6285ec24b01410b7fd520733488b5af902641425ab733cfb5ad802ee363457a389c18ac07b06c0fc1c3901a97c22828cb4716b95a61acd81029d4c1b95d3be30d09d34884e57221086fa55d492add05dce756f22847cfc621bd94928ab94c4a30458b9fd99929215ccbf2a2b9f6d654e053fbf07a8e46e874187acd4a0e0670e98f178eb2ffa9b92bd7385a5c3692acdbd1fead670dda6df5c70683d3b6bc7aa4a8b57e2932f763cb54773aa73bf960d0239dd3067f2599ca21e9c2eea0fabc83f95c12d367ac2a42c16a37b6c236d38c3ff3d83711ea620fde9d701a81ef2f7a7c1169c4d07aa044ff8e15f6f0b754ca88bcef28ba2cdca5e781aa96540bc27b4f01ef7fac6f3870bd93e13f8ef41bbea9b27438c74dc8c0adfaf9e5063f20bdabf80e02292233ce7dfcc20cad199947e5fe05d4e5f10390f599e481d96ae26bbfe80d7afbfafb493ea3065ae07e8624a823553719d695f2adb5a72cc6e972e677c60bd2fc5573709515ef71c44ddd2c6044951cb6d39bf90bfe4f727d635726907bf1cf2fc7813de1409279672c1d2f1a96ac139f9f9eaa1866812a01cbbd89ffd205bc9b1ac1dbcd8532027ece57c369a19b3d39208d4544e6f29e80eb12a596a2d9200ca2f58a82ac1c3d52193fdac583a87b2cec63b7c7655dc0d55d7a979d1014c358f9bd0da220b1adbd23ec6b4107d21f43b3d6b5edec8606977090104a58e1287a7ff7617f19d527e3904ab9909442a5319cc79b3fbd3d816c45bd3a312a00bd117296f0565c2f38e99d376327b614b5df907674420437ab8a4ff9fa2e07155a45141350f167a134c2863f2f00560761d0a425e8b1c2866386c754ae837a7e667825467b1310fa3fd266799937ca10b306bc1b1100b40952c73e7679451c5c4578b6955f991686019a963e9e4d49c6637c07d7ab02b309efb55a391702631b9185b0a80e5f75afabf71798a4e0f1fa5d8c614c8f70600feb4ec90e9d5f097b34566a7d5947e790e964d5db76a1872d5776f5171df54fe62a43d2f2bee244369814d6183ae011b1845382295c864a8712adb6ef741435f4686a37c88510cf310516b78f2b3d2893b1f00850c3ae2d6f605e143a294b32088612a0143415a367aa415bdf88f567740fb84fd1fd2e095122977372658dd676b1280907a374817ae5208fd565f2580b3862df0a82b71d2fcf7711ba0ae29bfdf53085017e30efd5a3c10924d38ca3020557a2860e60f7b335a440e5f4661d05f07ef314258135cc49e54a8a891dd2c0a66c50866c675ae132368c479af98da85f7c7cf1ee864ac4c26e6751164e090dea6e3b8ee14a579a35682ba345c40692768569fe106aecc4e6a2ffd1d1a55fd1d4292bf57ee1e4163207f2638947975a1e5ccc0c6bf2a3565d2ef823085e97c95d4651021d459e67d637b3803091714bb340011c292e9bf7223d7f82bd0946487336c20b2236bbfc7a35940cc4022fb714ad12ade766874d7c03439ebcc5676f6a9f427ad9b7be1e8496b513a6ee5328595d32d77f1d42dcaa1c548124863f8433d5046448bb56a0cea8f745b352886ea2a902ff54db9845aa3f7e832924b7b3e1958b4e92027385173098a45490ba247e5b14ecc72871a4c4a83b314c509555ef9da6664beba5ebabda6bbecc9d458e5af6665ab4738ca5264659dd48f29ab26ae5ababf2449dbca576845012e8c47c94a1c2ea025bc8be125abea6c666be3664ed0f0325da7bafdba2be10e295bea2a902af953a9b4e299ee8ad51fcafcda8f4a48b6a49b5c916d254f69335cb58878eb78f780470612ffd86dfc1dfa6412d42cae8a5fd1b18f983837a0ef31d0931874c456f5a2ba1e042e4a2ed44aba3191bea78995f7e83eec4612a61940cbb81a33d92016d2dfe46336abeeff3c89fe78bdb868f6db994658a610bd8956a8aa7ee6bad997507ec6bb776281272dbe64a5eaaf9c6ad724af8a3be6997de5b2d4dd681b9cf64456a2dd6631011a9bc04c9ecbe3d020ac089944c482aa0bf12c7467de8a549eadd568b0c2bafc1a124987de129f0e901c1934c2c480064bfe4e09ff2ffe729ece21a417dbe9b67dcb5ead9d44737c14afa0efe625340b31cd37caeb5680134945ba6b595163d472eb556651f09991c0c858c70601b30384b7a482d1571a679f0948a8b7539b61cd14ed932f5ba3660c25c0aa698292a2585d648b7b2acb8f910e9e00fac83655ba452feed5ab331b4514e41d3e835483c24dc05b165e7f6e48bf2d4e10dbc9422b03bd608d7f43faf570b85c47de6eaef81750453378ce7bfae09b0c692f9f3c8d1dba2fddea076dfc0310466915b82ec249292fae77158e12d24cfb6fbf74d265d35ba87dd290c83871253feb48b76b70ffce45e171f95ac1f5dad33a090c95f26ee970b2b824cee05318e1523f361632439834b26f42945b4aa173d8baadb298977a8d2257e4e892c607731820652f00896da5934e923fef9bcaed3a6ad848d03a2395c4c5bce4d103a37429ff0c509d47433a15b75544d8f993ab2b6c9f8893ad63cb312c11da8be8e4130020989c8f5a5bb7de4b8a438cc8b1a2cf156cfe08c341cbd94c1bfeec38c99bba26aa447f15305a7e00a586c5f9f67d0cc858744dbf2750a65f142409a4509a745f45fc9fe18b354c0677c441fc82b735b5da8ca95c2a2472e1032e4cac703344a1cf8f6d5eb0d3a3a141fc10b7211574b4438c797d7bbbee5600aa85fb10384181658e12308c76dc56f3a79b175688769637b7a8fafe46039ad9ef355b3b32794bc696eb9a1868566c91bc1f5e1ad359b5c15e44f0a73e1e620bac6c7ff92bafbf542a984a6c57f53df4da2ce968e4d94a227fcbc1d50b71761fb3ecf7340fb1bd14e43afdaf8b734e1a5a92a76b5337e4fc2762e7cf224db4c5e660f22d566fac72ea86e1b662fb309eb0a8ad8dfbeee9d61667ee08f9fb52c79ef32db898c703209dcc408e2c2159606443a7a422ec1efa1c30d57c824a1791654f1dc0fd7fc0ccdd2cf241f9a7c0c7b32d524d08ed0fc113108c75bb91f06d83ea02a6ec3ac75733ea0de8a64f3e70943ceaad6afc7af78ad59d4c867ed7bd8610f4d56098c93706da3ad892196ec4486ab24920140ac49191d09119f52051e91754749e67e5452fcff83f31bed215d4d0d067a462198754b4a6caf6535ed98ebf30a584e911e384a86d2055b534f01e7eb87b69ea2492bafef4f3ea2a86062c4c5228532d91b6927f9907b77d6ad0e1a8c6cb6f18be520753236d6143981dfaaeaa89be936efa2e6afb1b81918f492130026606111d5f0a82006ed9bae0183176af20a51c5419d79fd5949b488e91b63abd1af302a04cf1d8efd552f2de3e3167e61bce22f96e98647410913aa05c6a5ee3c8ec691e485f8a8fbe7326b99b539c11654d2886ab516d6c4354061b34f94b9ba47601a6c660f62bd8c2f26a3c5dcd05866891a6bf76a005f7cb87235d827f0772e129f13e85c5028a7ff22e92ceedbb4cbd80590764721d05de1f6de492e5990ca9534171ee8cf91db212c20062814004ac4632a8f5b265796e98945ae945e1451a392c9e5d0123280facb6de75198ff0bdeb50b2a5eb8a6acf411d2da244a3da9fea64495e8c7ddf0a52575a063ce3f944bbdf553ea26c8bc4cdd5543d59c97ee27354cc3f1f123a3ae39d3cb5a12a2e15c66547f755ee586417aebb451ade94faef3ed3e49875e1051168417eae6eccccb0178486ef877a49a00c39d0d9d33a53b21e20d07f34965d46ff86bc5c8c393898dc09cf4141f1baa3c5694301290d5337fe9c134076663fa6ceba272604346c7a224492a08558fa1c52cf7f05722873868bc3f04c1c8842e31989ad9f3f05f2a2f5ce6a7707fc3140b9e2c0213ac339cd426c18f1e8d896ce8df0ce958c864671aa745bfb74a06cf083573c4d2eab00263ebc7d92feecf745551a6bde1a42dee371327997dab6427d71ff482863b004c7b0e144757da460ef920644f6b94241842f941856ccae9edc672c2bd7a4885c5e423309e46c62de22a663146dfe4d67f457d974ac3f68f06ed4bbba6d1c931939581f46ec48d982eb1dda08974332c28ca5d1537e9f2d5e70e249ea4579dee58b031ed7aa5ce8bee1bd06e77b6292cec1ac4d8bcc9bb528ed8f21b6bfc2934a55f7e68cd0b01bab9abcf6dff321ce2aa850d63ce9d411aecd3884f4e541f7370dc6131c8275d74bd85a84376621404a6cf42427645cadc2e23f83e890682c6e10eb5559f9357a22eadb0c7fd18687ebbf7993da85343cdfb202863c6a390287ec370b6b87d43692d72de12442d3963ca6e6b55c838ac9731ba3d7997250fc6bd022f6f87b2259a8701040ec037421315dcf1553627a5bc4cdd325ecde02639583f61d2012737ec161ddc9ad6bdb50cf8e0637e66f5ddbfa737d90a8f6b218879393b4da98d54f14a64d49d54a5eda7f69ebfd0ad057181aa018bf1eac71e21d27d5035ed05daa7fb5cae886cd3fbe99c5e041c1433621b69336fa5fb1f94505238eeb6c9d06d699c52945c2e0edd759b09def3c7a28153259550111be881cbe697b356eb1cada23160eb63363b10da84e914c02a4fdbf7857122b5e0ba174f2698dc5a45bfbb9f4c268fce075caa0c54a19bb969beaf01de7541f0da8dfdabfea5c8dd350eb74e3ad6c2aad409ea67ca931caabf0e0cf52e5a6ace6976a461dc86ad601790bccac8ca45077d977429e619f8c6eff7753996152d06127c6aeee73cae7063c3b112a51bea2ba786448d440f7521995b2e06f45b81917dc17dc770d4a84cae45b55214f8de86ec23890fcf8c60c4cb44e17cc86a6967138fa63a1304a30728775b808aca65db6d8eeb3674cbcee5a2a7ffb87e7e1f5bf2a569b1cdcf9ea252ea615445df64a675efe603a5cfc0298ac06f7446d81e4b3df740610b1cfe3dc8454ab0050345e9854f14ba9633acfb30edf284a0660f9fcad419798ab6d69f75f8dbba1355df9a6c09d6f369fb619913f1123a784e31fbba30815f6bc31a58b46b6968ad9de33122f7709820fc09876a8619a411b32610fee37d5b343bd4d4c21c82ba7ad6ade1307d7b4b211ec913b5d27ceaeec108de1df06e6538ab6f885a4799a3e746dd2a2e7afb26e6706a46c3b781ac42dd8fa0cf47bec350c4b63daeecc45b79c26dd5cea7354835ec2a70854aecf70c427275bbfbea4601eeebe886e0df688ddc6939ae65a2bc171459e92ede33985dcd1933cb83b83365d6adc01cda9405c64b08f619b7b25292314df598209a088c1ed9e401a7686f4cd11d69b6efb1a9d92b7562e12b9f370fcaed9b4339d6e4b190f530a0a370e727f66989f10b85ede15eee6c73b6bdb5c78ed2ead2d81434ed730bdaaa005a292c48a23b69815abe9d1c9a6ffa97a62c593ac6d20b45be8f0e0dbeff29b4c3673fe452e4a408285b150d265c4c1fcdf234590bff24ae04083b9d9c8e9b57bc91e40d790ed36171b9017e8f002ab80cb316c454d947094978292937b7a81c26e9ccaf4daf458af5bc73157853aaa9af89566d6f654babd1f2b5e490d74c631901ded35c32113205b5b14159f01d3015d06ffab5cbd00c1a758dbad27ba6194489f8b584bdacdff0d8b447e8b0ba1010fc42eaf8472b4ae1885157ec86b7978f33374a8dec3b5d72af015aa5b6179ab737ebbda5d8ae986c8a04428298f29755b24ba2c216129eba51bf277c52bf8be9e5b2e6dc1c31e0c4045c00bae111dd688b8", &(0x7f0000002680)="5c5342c5a04522981ba90140ff8ec723d0bc", 0x4, 0x0, 0x5}, 0x50) r14 = openat$cgroup_int(r13, &(0x7f0000000640)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_int(r14, 0x0, 0x0) sendfile(r12, r14, 0x0, 0xc1) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r11, r4, 0x25, 0x2, @val=@tracing={0x0, 0x8}}, 0x20) 2.463545449s ago: executing program 2 (id=8317): r0 = socket$packet(0x11, 0x2, 0x300) recvmmsg(r0, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/144, 0x90}, {&(0x7f00000000c0)=""/233, 0xe9}], 0x2, &(0x7f0000000200)=""/222, 0xde}, 0xfffff3e2}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/99, 0x63}, 0x9}], 0x2, 0x0, &(0x7f0000000800)={0x77359400}) 2.280345883s ago: executing program 1 (id=8319): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x60, 0x30, 0x9, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_skbedit={0x48, 0x1, 0x0, 0x0, {{0xc}, {0x38, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x9, {0xe4, 0x8100}}}}]}]}, 0x60}}, 0x0) 2.143007711s ago: executing program 3 (id=8320): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a200000001a0a01080000000000000000070000050900010073797a310000000048000000000a050000000000000000000100000308000240000000020c00044000000000000000050900010073797a3100000000080002"], 0x90}, 0x1, 0x0, 0x0, 0x4004020}, 0x80) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x0, 0x2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x30, r4, 0x1c5a7adcb1c518b3, 0x70bd29, 0x25dfdbfb, {{}, {}, {0x14, 0x19, {0xffffff4e, 0x803, 0x2}}}}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x40002) 2.142400586s ago: executing program 1 (id=8321): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYRES64], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x448, 0x2e0, 0x190, 0xffffffff, 0x190, 0x0, 0x3b0, 0x3b0, 0xffffffff, 0x3b0, 0x3b0, 0x5, 0x0, {[{{@uncond, 0x0, 0x158, 0x190, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'bm\x00', "0d01d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x76, 0x2, {0x1}}}, @common=@unspec=@addrtype1={{0x28}, {0x4, 0x400, 0x3}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @rand_addr=0x64010102, @loopback, @gre_key=0x3, @port=0x4e20}}}}, {{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x64}, 0xff, 0xff000000, 'veth1_to_bridge\x00', 'ip6erspan0\x00', {0xff}, {}, 0x11, 0x2, 0x78}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @remote, @local, @port=0x4e20, @gre_key=0x6}}}}, {{@ip={@loopback, @private=0xa010102, 0xff, 0x0, 'veth1_to_hsr\x00', 'batadv_slave_1\x00', {}, {}, 0x6e, 0x0, 0x4}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @remote, @icmp_id=0x67, @port=0x4e23}}}}, {{@ip={@multicast1, @broadcast, 0xff000000, 0xff, 'veth1_macvtap\x00', 'bridge0\x00', {}, {0xff}, 0x73, 0x2, 0x20}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0xc, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x26}, @port=0x4e23, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4a8) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x88, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback=0x7f000015}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_ORIG={0x1c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}]}]}, 0x88}}, 0x0) 1.969063271s ago: executing program 2 (id=8324): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x801, 0xfffffffd, 0x0, {0x0, 0x0, 0xc3ff, 0x0, 0x0, 0x20}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x3}]}]}]}, 0x38}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 1.909213622s ago: executing program 3 (id=8326): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000040), &(0x7f00000000c0)=0x4) r1 = socket(0xa, 0x3, 0x3a) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={0x0, 0x6, 0xfffffff7, 0x6}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000180)={r2, 0x9, 0x10}, 0xc) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000000)={0x2, 0x1, 0x0, 0x0, 0x200}, 0x3a) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000080)=0x9, 0x4) 1.76849203s ago: executing program 1 (id=8328): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r1, 0x100) r2 = socket$inet(0xa, 0x801, 0x84) listen(r2, 0x1) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r3, 0x7) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r4, 0x100) r5 = socket$inet(0xa, 0x801, 0x84) listen(r5, 0x8) r6 = socket$netlink(0x10, 0x3, 0x4) writev(r6, &(0x7f0000000200)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 1.662994617s ago: executing program 2 (id=8330): sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000e00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2400c844}, 0x24044000) r0 = socket(0x10, 0x80002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1092, 0x40000}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_vlan\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r3) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd70027100c1582c00000018000180140002006970766c616e3100"], 0x2c}, 0x1, 0x0, 0x0, 0x2001}, 0x4010000) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x34, r5, 0x1, 0x70bd2c, 0x25dfdbfc, {{}, {}, {0x18, 0x17, {0x7, 0x5, @udp='udp:syz1\x00'}}}, ["", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4080}, 0x44) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="68000000020601000000000600000000000000000e0003006269746d61703a697000000005000400000000000900020073797a30000000002000078005000300000000000c0001800800014080ffffff05001400fa00000005000500020000000500010006"], 0x68}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140011"], 0x48}}, 0x0) 1.626211117s ago: executing program 0 (id=8331): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x400c010) r0 = socket(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x4040) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}}, 0x4084) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (fail_nth: 3) 1.60946664s ago: executing program 4 (id=8332): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000018110004", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000070000008500000006000000b7080000000000007b8af8ff00000000b708000078b500007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70500000800000085000000a50000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000004000000850000000600000087ca08"], 0x0, 0xf234, 0x0, 0x0, 0x41000, 0x24, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)="d8000000140081044e81f782db44b9040a1d080201000000040000a118000200ff020000000000000000000000000001", 0x30}], 0x1, 0x0, 0x0, 0x7400}, 0x4040c04) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)={0x180, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4}, @TIPC_NLA_MON={0x4}, @TIPC_NLA_NET={0x74, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ADDR={0x96}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_BEARER={0x70, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'ib', 0x3a, 'veth0_virt_wifi\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_LINK={0x4}, @TIPC_NLA_SOCK={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MEDIA={0x8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}]}]}, 0x180}}, 0x0) sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="74000000010701030000000000000000030000040900010073797a3100000000540007800800024000000002080002400000b55a0800014000000001080001400000000108000240000000070800014000000006080001400000000808000240ffffdfda0800014000e000000806"], 0x74}, 0x1, 0x0, 0x0, 0x4000010}, 0x8000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000004900010000000000000000000a000044000000eb00000000141001"], 0x3c}, 0x1, 0x0, 0x0, 0x800400d}, 0x8001) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050841) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 1.553609593s ago: executing program 3 (id=8333): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x8040}, 0x10) 1.553415151s ago: executing program 1 (id=8334): r0 = socket$packet(0x11, 0x2, 0x300) recvmmsg(r0, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/144, 0x90}, {&(0x7f00000000c0)=""/233, 0xe9}], 0x2, &(0x7f0000000200)=""/222, 0xde}, 0xfffff3e2}, {{0x0, 0x0, 0x0}, 0x9}], 0x2, 0x0, &(0x7f0000000800)={0x77359400}) 1.09933951s ago: executing program 0 (id=8335): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f00000000c0)=[{0x9c}, {0x6}]}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000180)={0x1d, r3, 0x0, {0x0, 0x0, 0x4}, 0x2}, 0x18) sendmsg$can_j1939(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x1d, 0x0, 0x15, {0x0, 0x1ee, 0x4}}, 0x18, &(0x7f00000004c0)={0x0}}, 0x0) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_int(r4, 0x0, 0x31, &(0x7f0000000700)=0x8f, 0x4) pselect6(0x40, &(0x7f0000000000)={0x2, 0x2, 0x8, 0x1, 0x6, 0x0, 0x7, 0x4}, &(0x7f0000000040)={0x8, 0x240000000000000, 0x6, 0x1, 0x1, 0x6, 0x800, 0x1}, &(0x7f0000000080)={0x8, 0x6, 0x4, 0x22d8, 0x6, 0x1ff, 0x7fffffff, 0x5}, &(0x7f00000000c0), &(0x7f00000001c0)={&(0x7f0000000100)={[0x10000]}, 0x8}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r0) sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, r6, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x7ff}]}, 0x30}, 0x1, 0x0, 0x0, 0x804}, 0x804) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x1, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21a8}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x4, 0x10}}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.098910558s ago: executing program 4 (id=8336): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) unshare(0x20000400) r1 = socket$nl_generic(0x10, 0x3, 0x10) epoll_create(0x2) (async) r2 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x90000002}) (async) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x90000002}) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_SET_EXPRESSIONS={0x2c, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x98}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) 1.026554458s ago: executing program 4 (id=8337): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000800)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0xffea, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000070000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="0c00018008000100000001000c0002"], 0x30}}, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000300000000000000000000090000000000000000000000010500000008000000010000000000000f440000000000000000000003000000000300000002000000000000000061"], 0x0, 0x5b}, 0x28) r3 = socket$inet(0x2, 0x2, 0x1) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x48c, &(0x7f00000003c0)={0x1, 'veth1_virt_wifi\x00'}, 0x18) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b7000000ff00001fbfa300000000000007030000f0ffffff6a0af0fff8ffffff61a4f0ff0000000066040200000000001d400200000000004704000001ed00006203000000ffffffcf440000000000007a0a00ff00ffffffc30300fff1000000b4000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710e4a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00c37dfca3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebaa0f040000c72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204ab3949006c3172171652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d156ae8383117c039862198899b212c55318294270a1ad10c80fef7c247afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15f279b513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aa0000000000000000832371fe5bc621426d1ed0a4a99702cc1b692c3f0b15629eaf4c12a1e717d29135753208165b9cdbae2ed9dc7358f0e3adde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c3bfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbad937f778af083e055f6138a757ebd0ed93517a6b244f9acf41ac5d73a008364e0606a594807031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac42738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c25000000000000000005a7b57f03ca91a01ba2e30ca9be8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998802008f0232b39578052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91ed92cac7c2ccd17d338bbda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922928e000000ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abb8a9982ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130b51d6c9b94c5513df2d85e8c01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139566fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef670000000000000000ba470bfe6290421338ef8f6d27117cd1471bf3c0b64416fbbe955da0281e7ef7f7d5176150e86cda98d07f7de2088cb2ffd1d4c71097635c2bb3d9a0b01e757256ee427f0a244d48682bf89e2279b383b616b40f116172bc1b995eb2c1220597af8df52646f1f0cb65cfa7e038e8bb5d4d52b86a61d82dc14a4f5cc7e6061c65ccdbc2afc3f363ecf34ad0b227687c3ea8d63683ddd5914116edd9e075da9e3638647188bc8f95107c9250995eb6cadcd0f65b8504ff10304f2ceba275f9d485ed5554d64005db877f0fbb3beba59666ff66f132d5077835823592d6d392f5ff62f6f876eb10d8cbf0a73f8421b74c8916e4077b8866c95ad88bc7130244183ed216210f10f69b3e0ee13d06e4eb240cce5ec1c3b1defe4c0f8b83a34ef4f5f8f9ceefb678ad29d3683e3c44a01549e55ffca41c0b06e013f054257646c58b667ec0701004c239589b3e64ef5e1d5ed22b5fd5a90fe345"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xc, 0x8, 0xd8}, 0x10}, 0x94) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c01000010000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb0000fff720000001000000003b000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="64010102000000000000000000000000000000006c000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000004000000000000000000000000000000000000000080000004000000000000000000004000000000000000000000000000000000000000000000000025bd70000000000002000001000000000000000008001f0004000000480003006465666c617465000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c", @ANYRES32=0x0, @ANYBLOB="b58979"], 0x14c}}, 0x4810) splice(r6, &(0x7f0000000080)=0x7, r4, &(0x7f0000000240)=0x4, 0x2, 0x1) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$sock_int(r5, 0x1, 0x2e, &(0x7f0000000000)=0xc7, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r5) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0x80d, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_ACTION={0x6, 0x3, 0x14}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x64}}, 0x0) 870.85653ms ago: executing program 3 (id=8338): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@ipv6_delrule={0x1c, 0x21, 0x121, 0x70bd2d, 0x0, {0xa, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x1c}}, 0x8044) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c80)=@newtaction={0x6c, 0x30, 0x871a15abc695fb3d, 0x0, 0x80000, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x7ea}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0xfffff800, 0x40, 0x1, 0x3, 0x80000001}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 771.266988ms ago: executing program 4 (id=8339): bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000061119400000000000620000000000000950000d70000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x7}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x24}, 0x1, 0x5502000000000000}, 0x4000) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000040), 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000b00)=ANY=[@ANYBLOB="3c000000020801080000000000000000070900010073797a31000000001400048008000b40000000a608000840000000ff0600024000020000e2cfb994fd6d031c7798c4647f97a2a51a937b7cbd3d8097cb5babe5c4946ac2943c08d05fe6684c88fd5abe68ba075feee87158627b266d746183b9cfd1744a50371654a0168c9415241f00abdf9ace36860e265f7ca248e720f46dc69fb5d10bd872e1b89ec93d471cd04f73c0b6"], 0x3c}, 0x1, 0x0, 0x0, 0x404e814}, 0xc0) sendmsg$NFT_BATCH(r3, 0x0, 0x0) sendmsg$NFT_BATCH(r3, 0x0, 0x4000850) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) socket$pppl2tp(0x18, 0x1, 0x1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/uts\x00') r5 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_proto_private(r5, 0x8b01, &(0x7f0000000000)) sendmsg$netlink(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000ec0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x620, 0x340, 0x340, 0x148, 0x438, 0x148, 0x550, 0x550, 0x550, 0x550, 0x550, 0x6, &(0x7f0000000c40), {[{{@uncond, 0x0, 0x100, 0x148, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@frag={{0x30}, {[0x1, 0xd4eb], 0x1, 0x2, 0x1}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@multicast2, @ipv4=@rand_addr=0x64010102, 0x7, 0x1a, 0x81}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, [0xffffffff, 0x0, 0xff, 0xff000000], [0xffffff00, 0xffffffff, 0xff000000], 'syzkaller0\x00', 'syz_tun\x00', {0xff}, {}, 0x32, 0xef, 0x0, 0x48}, 0x0, 0xf8, 0x128, 0x0, {}, [@common=@icmp6={{0x28}, {0xe, "8674"}}, @common=@icmp6={{0x28}, {0x0, "e6f5"}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x3, 0x1, 0x7}, {0xffffffffffffffff, 0x3, 0x4}, 0x0, 0xd}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x3, 0xd}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x8, 0x8, 0x1}}}, {{@uncond, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@hbh={{0x48}, {0x1, 0x1, 0x1, [0xfff8, 0x6, 0x7, 0x8487, 0x6, 0x7, 0x8, 0x8, 0x3, 0x3, 0x9, 0x5, 0x9, 0x4, 0x0, 0xcfca], 0x5}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x680) 768.140295ms ago: executing program 0 (id=8340): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001", @ANYBLOB="ee50eaf1011b630a99c779d496dc39b33bd7c34004812d7ecf4f7bf092cf9b0a8633fbd1e8408b92ad84ee6a754a179683539676693acc3c5cfe6000599d1c873e0834c3ffb6c69b67d5522ff6e4af218cd3e61f2766ec2f2a3e0d797be1f9bb69c5f29b2c87e7e3e8e5328d25d53e67494800435075a0"], 0x7c}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000680), 0x402003, 0x0) r5 = openat$cgroup_ro(r0, &(0x7f0000000440)='cpu.stat\x00', 0x0, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r5, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f00000001c0)={0x4, &(0x7f0000000180)=[{0x6, 0x9, 0x6, 0x2}, {0x8, 0x5, 0x8, 0xffffffff}, {0x81, 0x4, 0x2, 0x1de8}, {0x9, 0x6, 0xc, 0xfff}]}) close(r4) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000040)=0x40) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2000004, 0x1010, r6, 0x12504000) socket$netlink(0x10, 0x3, 0x0) r7 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r7, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f00000003c0)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r7, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r8}, 0x10, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="748b60caed3b213a9188028e1113fe5a725408002e", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="00000000040000000200004001030000697272c14049b41a"], 0x48}}, 0x0) close(0x3) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r9, &(0x7f0000000040)=ANY=[@ANYRESDEC], 0xfdef) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) getsockopt$inet_tcp_int(r6, 0x6, 0x12, &(0x7f0000000300), &(0x7f0000000380)=0x4) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r1, &(0x7f00000002c0)="05031400d3fc1c0000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000030000000900010073797a300000000040000000030a03000000020000000000030000000900030073797a30000000000900010073797a300000000014000480080002406375fd82080001400000000028000000000a01040000000000000000030000000900010073797a3000000000080002400000000114000000110001"], 0xb0}}, 0x0) 726.344318ms ago: executing program 3 (id=8341): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x4e0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x410, 0xffffffff, 0xffffffff, 0x410, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0xffffffff, 0x0, 0x0, 0xff0000ff], [], 'veth0_macvtap\x00', 'ipvlan0\x00', {}, {}, 0x0, 0x0, 0x2}, 0x0, 0x148, 0x1b0, 0x0, {0x1000000}, [@common=@unspec=@nfacct={{0x48}, {'syz1\x00', 0xfd}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x29, 0x1ff, 0x6, 0xb0e6, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x18, 0x800, 0x1, 0x6, 'netbios-ns\x00', 'syz0\x00', {0x8}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {}, {}, 0x0, 0x4}, 0x0, 0x1f8, 0x260, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x10000, 0x0, 0x7, 0x3ff}}}, @common=@inet=@recent0={{0xf8}, {0xffff, 0x40, 0x4, 0x1, 'syz1\x00', 0xa}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x8, 0x2, 0x8, 'pptp\x00', 'syz1\x00', {0x886cb6b}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x540) 589.49823ms ago: executing program 1 (id=8342): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000001000)=@newqdisc={0x24, 0x24, 0x8, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0xfff1, 0xfff1}}}, 0x24}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$unix(0x1, 0x1, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYRESOCT=r3], 0x1c}, 0x1, 0x0, 0x0, 0x20004840}, 0x28000) recvmmsg(0xffffffffffffffff, &(0x7f0000004ac0)=[{{0x0, 0x0, 0x0}, 0xb7de}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000007c0)=""/184, 0xb8}, {&(0x7f0000000880)=""/67, 0x43}], 0x2}, 0x1}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000a00)=""/43, 0x2b}], 0x1}, 0x8}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000c80)=""/176, 0xb0}, {&(0x7f0000000d40)=""/65, 0x41}, {&(0x7f0000000dc0)=""/103, 0x67}], 0x3}, 0x2}, {{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000ec0)=""/33, 0x21}], 0x1}, 0x10001}], 0x5, 0x2103, &(0x7f0000000bc0)={0x0, 0x989680}) sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="340000000007010100000000000400001e0000080c000640001fffe000000000080005"], 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002abd7400ffdbdf250c00000008000b00030000000c000600010000000100000008000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="0c000600020000000000000008000b00c20d00000c00060000000000000000000800"], 0x60}, 0x1, 0x0, 0x0, 0x2001}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={0x0}, 0x1, 0x0, 0x0, 0x4000850}, 0x4048010) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETVNETBE(r5, 0x400454de, &(0x7f0000000600)=0x1) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000003700e409000000000000020080"], 0x14}}, 0x8054) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000018) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c40)=ANY=[@ANYRES64, @ANYRES8=r4, @ANYRESOCT=r2, @ANYRES64=r6], 0x64}, 0x1, 0x0, 0x0, 0x480d4}, 0x24000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000b40)=ANY=[@ANYBLOB="14000000100001000000000000000001060000000000001100010000000000000000000600000a00e7d9600900000000000000be2126e6bcc40bc525ebe02b1ea1619a3ba585a5bbe3bee6311fdbf5b83e1fde3cc7bf8c36d2554d6ee858cb035ca1289617c89eb726500a"], 0x28}, 0x1, 0x0, 0x0, 0x4044050}, 0x4000000) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000680)={0x0, {0x2, 0x4e23, @local}, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2b}}, {0x2, 0x4e24, @rand_addr=0x64010100}, 0x80, 0x0, 0x0, 0x0, 0xf34, &(0x7f0000000640)='ipvlan1\x00', 0xbdbd, 0x1, 0x2}) r8 = accept4(r7, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e", 0xc2}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) write$tun(r5, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0xfd5e, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0xffffff07}, @generic={0x0, 0x2, "d588380003c1"}]}}}}}}, 0xfd6c) 531.287616ms ago: executing program 3 (id=8343): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x40000020) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000004dc0)=""/4060, 0xfdc}, {&(0x7f0000003d80)=""/4128, 0x1020}, {&(0x7f0000002d40)=""/4097, 0x1001}, {&(0x7f00000016c0)=""/198, 0xc6}, {&(0x7f00000004c0)=""/34, 0x22}, {&(0x7f00000001c0)=""/138, 0x8a}], 0x6}, 0x20100) 529.604339ms ago: executing program 4 (id=8344): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000000)={'syztnl1\x00', r1, 0x1, 0x8000, 0x6, 0x4, {{0x1c, 0x4, 0x2, 0x16, 0x70, 0x68, 0x0, 0x9, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x11}, @local, {[@rr={0x7, 0x1f, 0x28, [@multicast1, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @multicast2, @loopback, @dev={0xac, 0x14, 0x14, 0x2f}]}, @cipso={0x86, 0x20, 0x2, [{0x7, 0xc, "d60d7e907edaece6ff03"}, {0x2, 0xe, "eea14c691d17f413ef9c82b2"}]}, @noop, @end, @timestamp_prespec={0x44, 0xc, 0x1d, 0x3, 0xc, [{@rand_addr=0x64010100, 0x8}]}, @timestamp_prespec={0x44, 0xc, 0xed, 0x3, 0xc, [{@remote, 0x1}]}, @noop]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000480)={'syztnl2\x00', &(0x7f00000003c0)={'syztnl2\x00', r1, 0x0, 0x1, 0xfffffff8, 0x8, {{0x20, 0x4, 0x3, 0x9, 0x80, 0x66, 0x0, 0x80, 0x8, 0x0, @empty, @multicast2, {[@timestamp_prespec={0x44, 0x44, 0xf9, 0x3, 0x2, [{@loopback, 0x80000000}, {@rand_addr=0x64010100, 0x7}, {@dev={0xac, 0x14, 0x14, 0x36}, 0x6}, {@multicast1, 0x5}, {@rand_addr=0x64010101, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x40}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, {@private=0xc, 0x1000}]}, @cipso={0x86, 0x26, 0x3, [{0x2, 0xe, "402044054cff1dd07fd71be0"}, {0x0, 0xb, "2abeab1c54254c5cc4"}, {0x0, 0x3, '\"'}, {0x5, 0x4, "6dfd"}]}]}}}}}) getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f00000004c0)={@private1, 0x0}, &(0x7f0000000500)=0x14) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r5, 0x6, 0x1, 0x0, &(0x7f00000000c0)=0x9) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$kcm(0x11, 0x3, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_FLOW_MODE={0x8}, @TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r8, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r13, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="2703", 0x2}], 0x1}, 0x5) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000014c0)=@newchain={0x1708, 0x64, 0x8, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xf, 0x1}, {0xfff9, 0xd}, {0xf, 0xb}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_MASK={0x8, 0x5, 0x8}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0x7}}, @TCA_RATE={0x6, 0x5, {0x40, 0x4}}, @filter_kind_options=@f_cgroup={{0xb}, {0x13c, 0x2, [@TCA_CGROUP_EMATCHES={0x138, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x68, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x64, 0x1, 0x0, 0x0, {{0x5, 0x9, 0x21}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x7}, @TCA_EM_IPT_MATCH_DATA={0x14, 0x5, "48fca1290328fc583fc03877d9d55247"}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x4}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x2}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7fff}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x1ff, 0x1, 0x2}, {0x80000000, 0x6, 0x7a, 0x4, 0x0, 0x1, 0x1}}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x8000, 0x8, 0x1}, {0x4, 0x0, 0x2}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7f}}, @TCA_EMATCH_TREE_LIST={0x80, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x48, 0x2, 0x0, 0x0, {{0x5, 0x9, 0x9}, [@TCA_EM_IPT_MATCH_DATA={0x3b, 0x5, "0957befb9bed3b38db8410fd2b6602b2cf719eb21f7d57eb5617d185b5875c2a309eb49cdaedd4984db8be80e636a308ebc8fc7703a260"}]}}, @TCF_EM_NBYTE={0x10, 0x3, 0x0, 0x0, {{0x21, 0x2, 0x6}, {0x7f, 0x0, 0x1}}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x8}, {0x2, 0x2, 0x9f7953a9c6bd6ad8}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x3ff, 0x7, 0xff}, {{0x2, 0x1}, {0x4, 0x0, 0x0, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xd561}}]}]}}, @TCA_RATE={0x6, 0x5, {0xc, 0x4}}, @TCA_CHAIN={0x8, 0xb, 0x2}, @filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_TCP_FLAGS={0x6, 0x47, 0xfff0}, @TCA_FLOWER_KEY_ARP_SHA_MASK={0xa, 0x40, [0xff, 0x0, 0xff, 0xff, 0xff]}]}}, @TCA_RATE={0x6, 0x5, {0x7, 0xd}}, @filter_kind_options=@f_u32={{0x8}, {0x1534, 0x2, [@TCA_U32_ACT={0x1528, 0x7, [@m_mirred={0x18c, 0xb, 0x0, 0x0, {{0xb}, {0xe4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x7, 0x20000000, 0xd8}, 0x2, r1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xffffffff, 0x0, 0x3, 0xf, 0x97be}, 0x1, r3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x2, 0x2, 0x100, 0x9}, 0x1, r1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8000, 0x10001, 0x4, 0xffffffc0, 0x1ff}, 0x1, r1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7b, 0x5ab, 0x0, 0x2, 0x9}, 0x1, r1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x7, 0x7}, 0x2, r1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x3, 0x7, 0x6, 0x80000001}, 0x0, r1}}]}, {0x7d, 0x6, "c1c18dd1bd5edcc5e0687853771d4163a8521e29c31fac4779fdbc4915c7bbddfeb899740f91e1f15f7ed5e662bd855015045a996fe9856e9c22107feca98ece34bace9ad7347621e405dbc1f7a9314f08ca6cb3e61a64b3e3d729af11a91c1024d477e1a7d7d413ab59a8f0d45a95f5ccaddee0bbb8c4e0aa"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x138, 0x20, 0x0, 0x0, {{0x8}, {0x50, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x6, 0xffffffff, 0x20000000, 0x7fffffff, 0x1}, 0x1}}, @TCA_IFE_METALST={0x14, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0x5}, @IFE_META_PRIO={0x8, 0x3, @val=0x2}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x50db, 0x7fff, 0xffffffffffffffff, 0x80000000, 0xaf57}, 0x1}}]}, {0xc4, 0x6, "886d4592e001ca42916e368efeb2d1f0028c4f1a274aaa540a739a658e0aa0a0648d6a250be88b1d10173202d77a713d1f7eaed922ab6b8f00fa331af4117a5237905b34e05571a99f2091d76f19448767228cb0bb0709409d3902971f625145197d2ea7f5a492827489880fd55b3acb86099e67d51806f6efd917a12225378e6831b8945fc81dd9eee7400de7a1f2411df8b77354f2aafe82880b8ae03749b654f71e678ffb4be8b02cb0fc18f3d5474085dd7857a6bebd51084523542990ef"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_mirred={0x1150, 0x9, 0x0, 0x0, {{0xb}, {0x124, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x80, 0x4, 0x2, 0x1, 0x9d}, 0x1, r1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x26, 0x8, 0x7, 0x71}, 0x4, r4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x2ab, 0x5, 0xe, 0x1}, 0x2, r1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xa9, 0x1, 0x20000000, 0x7, 0x1}, 0x1, r1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x6, 0x7, 0x4, 0x8}, 0x1, r1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7186, 0x6, 0x7, 0x72ab6f1d, 0x7ff}, 0x1, r1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x4, 0x3, 0x356, 0x4883}, 0x4, r1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xb69a, 0x3, 0x0, 0x0, 0xfffffe00}, 0x1, r1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x200, 0x7, 0x20000000, 0x6, 0x938a}, 0x4, r1}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x4}}}}, @m_ctinfo={0x110, 0x1d, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x9}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x8001}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x8}, @TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0xc0000000, 0x5, 0x2, 0x8}}]}, {0xb4, 0x6, "a176e56000ea8fa31b502dfbf6b6a49ea8e818312daaa834f7ebace4e639522d0cdfc345694fd2032400eebe8d53688ed886ed2fe34132844d8992cfcbe2c74d7684cf2c8acab6ee3b736a629c931e8a9103734d00edd60ce2d78a692667e3790e58e21fdc0f0b5ae719f8720489a54203a4251eb92b7f20151b608feb2b020000004d3d8ed90afd7a26eea50871b5cfbc05b77b8bd7d64a743a4bc66962a237079e2a0dde6c8a93497db47618d3cf1d"}, {0xc}, {0xc}}}]}, @TCA_U32_HASH={0x8, 0x2, 0x8}]}}]}, 0x1708}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x4, 0x5}}]}}]}, 0x3c}}, 0x2004c840) r14 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r14, &(0x7f00000002c0), 0x40000000000009f, 0x0) 334.946409ms ago: executing program 0 (id=8345): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, 0x0, 0x700) 268.797482ms ago: executing program 0 (id=8346): r0 = socket$inet(0x2, 0x4000000805, 0x0) sendmmsg(r0, &(0x7f0000000e40)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000000300)=[{&(0x7f00000000c0)="ae", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x10, 0x84, 0x5}], 0x10}}], 0x2, 0xe803000000000000) 266.915987ms ago: executing program 1 (id=8347): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000540006803c00040067636d2861657329fc0000000000000000000000001f0000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) 140.829386ms ago: executing program 0 (id=8348): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x400c010) r0 = socket(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x4040) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}}, 0x4084) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x12, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) 0s ago: executing program 4 (id=8349): r0 = socket(0x10, 0x3, 0x0) (async) r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r1, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) connect$llc(r1, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x0, 0xe, 0x29, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}}, 0x10) r2 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r2, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) (async) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r3, &(0x7f0000002340)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x8521, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}, 0x1c, &(0x7f0000000cc0)=[{&(0x7f00000000c0)='O', 0x1}], 0x1}}], 0x1, 0x0) shutdown(r3, 0x1) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r6) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x20, r7, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xea}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x20040000) (async) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f00000002c0)={r5}, &(0x7f0000000100)=0x8) (async) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f00000000c0)={r5, 0xffffffff}, &(0x7f0000000100)=0x8) (async) r8 = socket(0x10, 0x80002, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020025797a31000000000900010073797a3000000000080005400000001c"], 0xe8}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000240)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000305000000000020000000000000", @ANYRES32=0x0, @ANYBLOB="15e3000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r11, @ANYBLOB="0a000100aaaa00"], 0x48}}, 0x0) sendmmsg$alg(r8, &(0x7f00000000c0), 0x492492492492627, 0x0) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f00000006c0)={0x0, 0x0, {}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB(r9, 0xc400941b, &(0x7f0000000d00)={r12, 0x2, 0x6}) (async) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000080)=0x5, 0x4) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd42"], 0xfdef) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x90) (async, rerun: 32) r13 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) (rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r13, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) kernel console output (not intermixed with test programs): 428335][T28020] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7099'. [ 736.448484][T28020] netlink: 3 bytes leftover after parsing attributes in process `syz.0.7099'. [ 736.511016][ T5621] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 736.656691][T28027] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7103'. [ 736.725523][T28029] tipc: Resetting bearer [ 736.808863][T28029] tipc: Resetting bearer [ 736.866456][T28034] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 736.881889][ T5621] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 736.937000][T28036] netlink: 'syz.1.7107': attribute type 1 has an invalid length. [ 736.949042][T28036] netlink: 224 bytes leftover after parsing attributes in process `syz.1.7107'. [ 736.971553][ T48] net_ratelimit: 28 callbacks suppressed [ 736.971571][ T48] bond8: (slave bridge8): failed to get link speed/duplex [ 737.141125][ T3361] bond8: (slave bridge8): failed to get link speed/duplex [ 737.290896][ T3361] bond8: (slave bridge8): failed to get link speed/duplex [ 737.326789][T28053] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7112'. [ 737.420200][ T111] bond8: (slave bridge8): failed to get link speed/duplex [ 737.550305][T10587] bond8: (slave bridge8): failed to get link speed/duplex [ 737.842526][T12975] bond8: (slave bridge8): failed to get link speed/duplex [ 737.927493][T28077] syzkaller1: entered promiscuous mode [ 737.940999][T28081] xt_nfacct: accounting object `syz1' does not exist [ 737.945231][T28077] syzkaller1: entered allmulticast mode [ 738.100348][ T48] bond8: (slave bridge8): failed to get link speed/duplex [ 738.234403][T12975] bond8: (slave bridge8): failed to get link speed/duplex [ 738.337330][T28096] __nla_validate_parse: 3 callbacks suppressed [ 738.337349][T28096] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7127'. [ 738.361751][T28097] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7124'. [ 738.416525][T28098] netlink: 207952 bytes leftover after parsing attributes in process `syz.2.7125'. [ 738.432462][T10587] bond8: (slave bridge8): failed to get link speed/duplex [ 738.574863][ T48] bond8: (slave bridge8): failed to get link speed/duplex [ 738.591023][T10587] bond0: (slave syz_tun): interface is now down [ 738.607463][T10587] bond0: now running without any active interface! [ 738.695035][T28106] syzkaller1: entered promiscuous mode [ 738.733191][T28106] syzkaller1: entered allmulticast mode [ 738.757635][T28113] netlink: 104 bytes leftover after parsing attributes in process `syz.2.7132'. [ 739.045216][T28127] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7137'. [ 739.083033][T28128] syzkaller1: entered promiscuous mode [ 739.102928][T28128] syzkaller1: entered allmulticast mode [ 739.211164][T28136] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7139'. [ 739.247632][T28141] xt_nfacct: accounting object `syz1' does not exist [ 739.507197][T28153] netlink: 200 bytes leftover after parsing attributes in process `syz.3.7143'. [ 739.538674][T28154] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7142'. [ 739.744438][T28164] netlink: 116 bytes leftover after parsing attributes in process `syz.4.7146'. [ 740.098033][T28177] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7152'. [ 740.158196][T28177] bond0: entered promiscuous mode [ 740.165787][T28177] bond0: left promiscuous mode [ 740.812040][T28222] netlink: 'syz.4.7167': attribute type 3 has an invalid length. [ 741.881982][T28258] netlink: 'syz.1.7180': attribute type 1 has an invalid length. [ 742.031867][T12975] net_ratelimit: 23 callbacks suppressed [ 742.031884][T12975] bond8: (slave bridge8): failed to get link speed/duplex [ 742.180341][T12975] bond8: (slave bridge8): failed to get link speed/duplex [ 742.205015][T28271] xt_CT: You must specify a L4 protocol and not use inversions on it [ 742.301049][ T48] bond8: (slave bridge8): failed to get link speed/duplex [ 742.336318][T28275] netlink: 'syz.4.7188': attribute type 58 has an invalid length. [ 742.367776][T28279] x_tables: unsorted entry at hook 2 [ 742.415758][T28289] x_tables: unsorted entry at hook 2 [ 742.443303][T12975] bond8: (slave bridge8): failed to get link speed/duplex [ 742.506918][T28294] netlink: ct family unspecified [ 742.579934][T12975] bond8: (slave bridge8): failed to get link speed/duplex [ 742.801485][ T48] bond8: (slave bridge8): failed to get link speed/duplex [ 742.931830][ T111] bond8: (slave bridge8): failed to get link speed/duplex [ 743.082844][ T48] bond8: (slave bridge8): failed to get link speed/duplex [ 743.234098][ T48] bond8: (slave bridge8): failed to get link speed/duplex [ 743.340746][T28330] xt_nfacct: accounting object `syz1' does not exist [ 743.446986][T28333] __nla_validate_parse: 23 callbacks suppressed [ 743.447005][T28333] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7209'. [ 743.506236][T28336] FAULT_INJECTION: forcing a failure. [ 743.506236][T28336] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 743.557175][T28336] CPU: 0 UID: 0 PID: 28336 Comm: syz.1.7211 Not tainted syzkaller #0 PREEMPT(full) [ 743.557204][T28336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 743.557219][T28336] Call Trace: [ 743.557229][T28336] [ 743.557239][T28336] dump_stack_lvl+0xe8/0x150 [ 743.557271][T28336] should_fail_ex+0x412/0x560 [ 743.557305][T28336] _copy_from_iter+0x1d3/0x1670 [ 743.557339][T28336] ? rcu_is_watching+0x15/0xb0 [ 743.557373][T28336] ? __pfx__copy_from_iter+0x10/0x10 [ 743.557411][T28336] ? netlink_sendmsg+0x650/0xb40 [ 743.557438][T28336] ? skb_put+0x11b/0x210 [ 743.557468][T28336] netlink_sendmsg+0x6c0/0xb40 [ 743.557506][T28336] ? __pfx_netlink_sendmsg+0x10/0x10 [ 743.557538][T28336] ? aa_sock_msg_perm+0xf1/0x1b0 [ 743.557567][T28336] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 743.557602][T28336] ____sys_sendmsg+0x972/0x9f0 [ 743.557631][T28336] ? __might_fault+0xaf/0x130 [ 743.557676][T28336] ? __pfx_____sys_sendmsg+0x10/0x10 [ 743.557714][T28336] ? import_iovec+0x73/0xa0 [ 743.557750][T28336] ___sys_sendmsg+0x2a5/0x360 [ 743.557776][T28336] ? __lock_acquire+0x6b5/0x2cf0 [ 743.557806][T28336] ? __pfx____sys_sendmsg+0x10/0x10 [ 743.557880][T28336] ? __fget_files+0x2a/0x420 [ 743.557904][T28336] ? __fget_files+0x3a0/0x420 [ 743.557948][T28336] __x64_sys_sendmsg+0x1bd/0x2a0 [ 743.557975][T28336] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 743.558009][T28336] ? __pfx_ksys_write+0x10/0x10 [ 743.558042][T28336] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 743.558063][T28336] do_syscall_64+0x15f/0xf80 [ 743.558083][T28336] ? trace_irq_disable+0x3b/0x140 [ 743.558109][T28336] ? clear_bhb_loop+0x40/0x90 [ 743.558132][T28336] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 743.558149][T28336] RIP: 0033:0x7f2c1399cdd9 [ 743.558167][T28336] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 743.558183][T28336] RSP: 002b:00007f2c14887028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 743.558206][T28336] RAX: ffffffffffffffda RBX: 00007f2c13c15fa0 RCX: 00007f2c1399cdd9 [ 743.558219][T28336] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 743.558231][T28336] RBP: 00007f2c14887090 R08: 0000000000000000 R09: 0000000000000000 [ 743.558242][T28336] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 743.558253][T28336] R13: 00007f2c13c16038 R14: 00007f2c13c15fa0 R15: 00007fffd0c88678 [ 743.558281][T28336] [ 744.310633][T28347] tipc: Resetting bearer [ 744.337589][T28349] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7214'. [ 744.386191][T28347] tipc: Resetting bearer [ 744.444117][T28352] netlink: 'syz.1.7215': attribute type 25 has an invalid length. [ 744.665791][T28362] syzkaller1: entered promiscuous mode [ 744.684164][T28362] syzkaller1: entered allmulticast mode [ 745.073023][T28389] tipc: Failed to remove unknown binding: 66,0,0/2829912554:3642241647/3642241648 [ 745.108759][T28389] tipc: Failed to remove unknown binding: 66,0,0/2829912554:3642241647/3642241648 [ 745.133227][T28389] netlink: 'syz.0.7226': attribute type 1 has an invalid length. [ 745.195683][T28394] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7226'. [ 745.258173][T28394] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7226'. [ 745.273235][T28352] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 745.284932][T28389] bond14: entered promiscuous mode [ 745.292103][T28389] 8021q: adding VLAN 0 to HW filter on device bond14 [ 745.324502][T28400] bond14: (slave bridge3): making interface the new active one [ 745.342979][T28400] bridge3: entered promiscuous mode [ 745.354273][T28400] bond14: (slave bridge3): Enslaving as an active interface with an up link [ 745.532084][T28402] netlink: 104 bytes leftover after parsing attributes in process `syz.4.7229'. [ 746.373680][T28440] netlink: 104 bytes leftover after parsing attributes in process `syz.0.7244'. [ 746.831943][T28468] FAULT_INJECTION: forcing a failure. [ 746.831943][T28468] name failslab, interval 1, probability 0, space 0, times 0 [ 746.882345][T28468] CPU: 1 UID: 0 PID: 28468 Comm: syz.4.7254 Not tainted syzkaller #0 PREEMPT(full) [ 746.882371][T28468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 746.882383][T28468] Call Trace: [ 746.882391][T28468] [ 746.882400][T28468] dump_stack_lvl+0xe8/0x150 [ 746.882428][T28468] should_fail_ex+0x412/0x560 [ 746.882466][T28468] should_failslab+0xa8/0x100 [ 746.882497][T28468] __kmalloc_noprof+0xe8/0x760 [ 746.882523][T28468] ? tomoyo_encode+0x28b/0x550 [ 746.882553][T28468] tomoyo_encode+0x28b/0x550 [ 746.882583][T28468] tomoyo_realpath_from_path+0x58d/0x5d0 [ 746.882611][T28468] ? tomoyo_domain+0xd7/0x130 [ 746.882641][T28468] ? tomoyo_path_number_perm+0x219/0x630 [ 746.882663][T28468] tomoyo_path_number_perm+0x246/0x630 [ 746.882687][T28468] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 746.882708][T28468] ? __lock_acquire+0x6b5/0x2cf0 [ 746.882743][T28468] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 746.882785][T28468] ? __fget_files+0x2a/0x420 [ 746.882810][T28468] ? __fget_files+0x2a/0x420 [ 746.882831][T28468] ? __fget_files+0x3a0/0x420 [ 746.882852][T28468] ? __fget_files+0x2a/0x420 [ 746.882879][T28468] security_file_ioctl+0xc3/0x2a0 [ 746.882900][T28468] __se_sys_ioctl+0x47/0x170 [ 746.882947][T28468] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 746.882969][T28468] do_syscall_64+0x15f/0xf80 [ 746.882991][T28468] ? trace_irq_disable+0x3b/0x140 [ 746.883021][T28468] ? clear_bhb_loop+0x40/0x90 [ 746.883046][T28468] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 746.883066][T28468] RIP: 0033:0x7fa54e99cdd9 [ 746.883085][T28468] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 746.883102][T28468] RSP: 002b:00007fa54f8ed028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 746.883124][T28468] RAX: ffffffffffffffda RBX: 00007fa54ec15fa0 RCX: 00007fa54e99cdd9 [ 746.883139][T28468] RDX: 0000200000000040 RSI: 00000000000089e0 RDI: 0000000000000003 [ 746.883152][T28468] RBP: 00007fa54f8ed090 R08: 0000000000000000 R09: 0000000000000000 [ 746.883164][T28468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 746.883176][T28468] R13: 00007fa54ec16038 R14: 00007fa54ec15fa0 R15: 00007fffc7357368 [ 746.883209][T28468] [ 746.883236][T28468] ERROR: Out of memory at tomoyo_realpath_from_path. [ 747.082699][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.137478][T27356] net_ratelimit: 30 callbacks suppressed [ 747.137498][T27356] bond8: (slave bridge8): failed to get link speed/duplex [ 747.227106][T28472] netlink: 44 bytes leftover after parsing attributes in process `syz.0.7257'. [ 747.276472][T28475] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7258'. [ 747.320516][T11459] bond8: (slave bridge8): failed to get link speed/duplex [ 747.354758][T28478] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7259'. [ 747.414592][T28475] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7258'. [ 747.461103][ T36] bond8: (slave bridge8): failed to get link speed/duplex [ 747.544870][T28485] openvswitch: netlink: Flow actions attr not present in new flow. [ 747.580747][ T111] bond8: (slave bridge8): failed to get link speed/duplex [ 747.640367][T28487] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 747.647696][T28487] IPv6: NLM_F_CREATE should be set when creating new route [ 747.654993][T28487] IPv6: NLM_F_CREATE should be set when creating new route [ 747.706999][T28487] netlink: 'syz.0.7262': attribute type 21 has an invalid length. [ 747.721048][ T36] bond8: (slave bridge8): failed to get link speed/duplex [ 747.850136][ T36] bond8: (slave bridge8): failed to get link speed/duplex [ 747.931500][T28497] netlink: 'syz.3.7267': attribute type 1 has an invalid length. [ 747.995317][T28502] FAULT_INJECTION: forcing a failure. [ 747.995317][T28502] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 748.009456][T28502] CPU: 1 UID: 0 PID: 28502 Comm: syz.1.7269 Not tainted syzkaller #0 PREEMPT(full) [ 748.009494][T28502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 748.009513][T28502] Call Trace: [ 748.009527][T28502] [ 748.009541][T28502] dump_stack_lvl+0xe8/0x150 [ 748.009581][T28502] should_fail_ex+0x412/0x560 [ 748.009635][T28502] _copy_to_user+0x31/0xb0 [ 748.009665][T28502] simple_read_from_buffer+0xe1/0x170 [ 748.009693][T28502] proc_fail_nth_read+0x1bb/0x230 [ 748.009720][T28502] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 748.009747][T28502] ? rw_verify_area+0x2a6/0x4d0 [ 748.009772][T28502] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 748.009798][T28502] vfs_read+0x20c/0xa70 [ 748.009829][T28502] ? __pfx___mutex_lock+0x10/0x10 [ 748.009852][T28502] ? __pfx_vfs_read+0x10/0x10 [ 748.009879][T28502] ? __fget_files+0x2a/0x420 [ 748.009906][T28502] ? __fget_files+0x3a0/0x420 [ 748.009927][T28502] ? __fget_files+0x2a/0x420 [ 748.009963][T28502] ksys_read+0x150/0x270 [ 748.009991][T28502] ? __pfx_ksys_read+0x10/0x10 [ 748.010017][T28502] ? __pfx_sock_ioctl+0x10/0x10 [ 748.010051][T28502] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 748.010072][T28502] do_syscall_64+0x15f/0xf80 [ 748.010093][T28502] ? trace_irq_disable+0x3b/0x140 [ 748.010121][T28502] ? clear_bhb_loop+0x40/0x90 [ 748.010145][T28502] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 748.010164][T28502] RIP: 0033:0x7f2c1395d60e [ 748.010181][T28502] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 748.010199][T28502] RSP: 002b:00007f2c14886fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 748.010219][T28502] RAX: ffffffffffffffda RBX: 00007f2c148876c0 RCX: 00007f2c1395d60e [ 748.010233][T28502] RDX: 000000000000000f RSI: 00007f2c148870a0 RDI: 0000000000000004 [ 748.010245][T28502] RBP: 00007f2c14887090 R08: 0000000000000000 R09: 0000000000000000 [ 748.010258][T28502] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 748.010287][T28502] R13: 00007f2c13c16038 R14: 00007f2c13c15fa0 R15: 00007fffd0c88678 [ 748.010320][T28502] [ 748.250600][T28497] 8021q: adding VLAN 0 to HW filter on device bond11 [ 748.282687][T28497] bond11: (slave geneve4): making interface the new active one [ 748.291767][T28497] bond11: (slave geneve4): Enslaving as an active interface with an up link [ 748.340919][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 748.349696][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 748.361736][ T48] bond8: (slave bridge8): failed to get link speed/duplex [ 748.420322][ T3361] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 748.450985][ T3361] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 748.582377][ T48] bond8: (slave bridge8): failed to get link speed/duplex [ 748.603348][T28518] __nla_validate_parse: 6 callbacks suppressed [ 748.603366][T28518] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7276'. [ 748.622029][T28518] netlink: 3 bytes leftover after parsing attributes in process `syz.0.7276'. [ 748.637752][T28519] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7274'. [ 748.681518][T28519] openvswitch: netlink: Flow actions attr not present in new flow. [ 748.765392][T28524] syzkaller0: entered promiscuous mode [ 748.776120][T28524] syzkaller0: entered allmulticast mode [ 748.796766][T28524] netlink: 84 bytes leftover after parsing attributes in process `syz.2.7278'. [ 748.821777][T28527] tipc: Bearer : already 2 bearers with priority 10 [ 748.867766][T28527] tipc: Bearer : trying with adjusted priority [ 748.887148][T28527] tipc: Enabling of bearer rejected, failed to enable media [ 748.923068][T28524] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7278'. [ 749.082527][T28540] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7282'. [ 749.117629][T28527] syzkaller1: entered promiscuous mode [ 749.124478][T28527] syzkaller1: entered allmulticast mode [ 749.365031][T28547] ip6erspan0: entered allmulticast mode [ 749.512399][T28561] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7287'. [ 749.522154][T28558] syzkaller1: entered promiscuous mode [ 749.530195][T28558] syzkaller1: entered allmulticast mode [ 749.538649][T28553] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7287'. [ 749.645627][T28553] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7287'. [ 749.666880][T28553] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7287'. [ 750.421511][T28603] bond15: entered promiscuous mode [ 750.441212][T28603] 8021q: adding VLAN 0 to HW filter on device bond15 [ 750.701278][T28627] FAULT_INJECTION: forcing a failure. [ 750.701278][T28627] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 750.758251][T28627] CPU: 1 UID: 0 PID: 28627 Comm: syz.1.7307 Not tainted syzkaller #0 PREEMPT(full) [ 750.758278][T28627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 750.758290][T28627] Call Trace: [ 750.758298][T28627] [ 750.758307][T28627] dump_stack_lvl+0xe8/0x150 [ 750.758334][T28627] should_fail_ex+0x412/0x560 [ 750.758362][T28627] _copy_from_user+0x2d/0xb0 [ 750.758390][T28627] ___sys_sendmsg+0x1c6/0x360 [ 750.758414][T28627] ? __lock_acquire+0x6b5/0x2cf0 [ 750.758439][T28627] ? __pfx____sys_sendmsg+0x10/0x10 [ 750.758503][T28627] ? __fget_files+0x2a/0x420 [ 750.758524][T28627] ? __fget_files+0x3a0/0x420 [ 750.758557][T28627] __x64_sys_sendmsg+0x1bd/0x2a0 [ 750.758584][T28627] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 750.758617][T28627] ? __pfx_ksys_write+0x10/0x10 [ 750.758651][T28627] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 750.758672][T28627] do_syscall_64+0x15f/0xf80 [ 750.758693][T28627] ? trace_irq_disable+0x3b/0x140 [ 750.758721][T28627] ? clear_bhb_loop+0x40/0x90 [ 750.758744][T28627] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 750.758763][T28627] RIP: 0033:0x7f2c1399cdd9 [ 750.758781][T28627] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 750.758798][T28627] RSP: 002b:00007f2c14887028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 750.758818][T28627] RAX: ffffffffffffffda RBX: 00007f2c13c15fa0 RCX: 00007f2c1399cdd9 [ 750.758832][T28627] RDX: 000000000000c000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 750.758845][T28627] RBP: 00007f2c14887090 R08: 0000000000000000 R09: 0000000000000000 [ 750.758857][T28627] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 750.758868][T28627] R13: 00007f2c13c16038 R14: 00007f2c13c15fa0 R15: 00007fffd0c88678 [ 750.758898][T28627] [ 750.830680][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 751.215829][T28646] FAULT_INJECTION: forcing a failure. [ 751.215829][T28646] name failslab, interval 1, probability 0, space 0, times 0 [ 751.276902][T28646] CPU: 1 UID: 0 PID: 28646 Comm: syz.1.7313 Not tainted syzkaller #0 PREEMPT(full) [ 751.276932][T28646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 751.276947][T28646] Call Trace: [ 751.276956][T28646] [ 751.276965][T28646] dump_stack_lvl+0xe8/0x150 [ 751.276997][T28646] should_fail_ex+0x412/0x560 [ 751.277032][T28646] should_failslab+0xa8/0x100 [ 751.277066][T28646] ? skb_clone+0x212/0x3a0 [ 751.277095][T28646] kmem_cache_alloc_noprof+0x87/0x650 [ 751.277135][T28646] skb_clone+0x212/0x3a0 [ 751.277169][T28646] __netlink_deliver_tap+0x404/0x850 [ 751.277211][T28646] ? netlink_deliver_tap+0x2e/0x1b0 [ 751.277240][T28646] netlink_deliver_tap+0x19c/0x1b0 [ 751.277269][T28646] __netlink_sendskb+0x47/0x90 [ 751.277294][T28646] netlink_dump+0xa0f/0xe10 [ 751.277334][T28646] ? __pfx_netlink_dump+0x10/0x10 [ 751.277379][T28646] ? genl_start+0x499/0x6c0 [ 751.277429][T28646] __netlink_dump_start+0x5cb/0x7e0 [ 751.277465][T28646] genl_family_rcv_msg_dumpit+0x213/0x310 [ 751.277509][T28646] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 751.277546][T28646] ? __pfx_genl_start+0x10/0x10 [ 751.277571][T28646] ? __pfx_genl_dumpit+0x10/0x10 [ 751.277597][T28646] ? __pfx_genl_done+0x10/0x10 [ 751.277628][T28646] ? bpf_lsm_capable+0x9/0x20 [ 751.277647][T28646] ? security_capable+0x7e/0x2c0 [ 751.277677][T28646] genl_rcv_msg+0x5e8/0x7a0 [ 751.277712][T28646] ? __pfx_genl_rcv_msg+0x10/0x10 [ 751.277739][T28646] ? __pfx_batadv_bla_claim_dump+0x10/0x10 [ 751.277766][T28646] ? __pfx_ref_tracker_free+0x10/0x10 [ 751.277795][T28646] netlink_rcv_skb+0x232/0x4b0 [ 751.277814][T28646] ? __pfx_genl_rcv_msg+0x10/0x10 [ 751.277838][T28646] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 751.277869][T28646] ? down_read+0x270/0x2e0 [ 751.277887][T28646] ? genl_rcv+0xd/0x40 [ 751.277910][T28646] genl_rcv+0x28/0x40 [ 751.277930][T28646] netlink_unicast+0x75c/0x8e0 [ 751.277954][T28646] netlink_sendmsg+0x813/0xb40 [ 751.277980][T28646] ? __pfx_netlink_sendmsg+0x10/0x10 [ 751.278001][T28646] ? aa_sock_msg_perm+0xf1/0x1b0 [ 751.278022][T28646] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 751.278046][T28646] ____sys_sendmsg+0x972/0x9f0 [ 751.278066][T28646] ? __might_fault+0xaf/0x130 [ 751.278090][T28646] ? __pfx_____sys_sendmsg+0x10/0x10 [ 751.278117][T28646] ? import_iovec+0x73/0xa0 [ 751.278142][T28646] ___sys_sendmsg+0x2a5/0x360 [ 751.278162][T28646] ? __lock_acquire+0x6b5/0x2cf0 [ 751.278182][T28646] ? __pfx____sys_sendmsg+0x10/0x10 [ 751.278228][T28646] ? __fget_files+0x2a/0x420 [ 751.278246][T28646] ? __fget_files+0x3a0/0x420 [ 751.278272][T28646] __x64_sys_sendmsg+0x1bd/0x2a0 [ 751.278294][T28646] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 751.278322][T28646] ? __pfx_ksys_write+0x10/0x10 [ 751.278350][T28646] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 751.278367][T28646] do_syscall_64+0x15f/0xf80 [ 751.278384][T28646] ? trace_irq_disable+0x3b/0x140 [ 751.278412][T28646] ? clear_bhb_loop+0x40/0x90 [ 751.278432][T28646] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 751.278447][T28646] RIP: 0033:0x7f2c1399cdd9 [ 751.278461][T28646] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 751.278474][T28646] RSP: 002b:00007f2c14866028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 751.278491][T28646] RAX: ffffffffffffffda RBX: 00007f2c13c16090 RCX: 00007f2c1399cdd9 [ 751.278503][T28646] RDX: 0000000004000000 RSI: 0000200000004340 RDI: 0000000000000003 [ 751.278513][T28646] RBP: 00007f2c14866090 R08: 0000000000000000 R09: 0000000000000000 [ 751.278523][T28646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 751.278533][T28646] R13: 00007f2c13c16128 R14: 00007f2c13c16090 R15: 00007fffd0c88678 [ 751.278557][T28646] [ 751.894882][T28662] tipc: Bearer : already 2 bearers with priority 10 [ 751.902648][T28662] tipc: Bearer : trying with adjusted priority [ 751.909756][T28662] tipc: Enabling of bearer rejected, failed to enable media [ 751.920732][T28662] netlink: 'syz.0.7321': attribute type 6 has an invalid length. [ 752.168355][T28676] IPVS: set_ctl: invalid protocol: 51 172.20.20.187:20001 [ 752.211241][T11459] net_ratelimit: 16 callbacks suppressed [ 752.211258][T11459] bond8: (slave bridge8): failed to get link speed/duplex [ 752.255890][T28678] tipc: Enabling of bearer rejected, failed to enable media [ 752.343369][T11459] bond8: (slave bridge8): failed to get link speed/duplex [ 752.460788][T15441] bond8: (slave bridge8): failed to get link speed/duplex [ 752.587947][T28695] FAULT_INJECTION: forcing a failure. [ 752.587947][T28695] name failslab, interval 1, probability 0, space 0, times 0 [ 752.641484][T28695] CPU: 1 UID: 0 PID: 28695 Comm: syz.2.7333 Not tainted syzkaller #0 PREEMPT(full) [ 752.641509][T28695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 752.641521][T28695] Call Trace: [ 752.641529][T28695] [ 752.641537][T28695] dump_stack_lvl+0xe8/0x150 [ 752.641566][T28695] should_fail_ex+0x412/0x560 [ 752.641595][T28695] should_failslab+0xa8/0x100 [ 752.641626][T28695] ? skb_clone+0x212/0x3a0 [ 752.641654][T28695] kmem_cache_alloc_noprof+0x87/0x650 [ 752.641690][T28695] skb_clone+0x212/0x3a0 [ 752.641719][T28695] __netlink_deliver_tap+0x404/0x850 [ 752.641756][T28695] ? netlink_deliver_tap+0x2e/0x1b0 [ 752.641781][T28695] netlink_deliver_tap+0x19c/0x1b0 [ 752.641806][T28695] __netlink_sendskb+0x47/0x90 [ 752.641828][T28695] netlink_dump+0xa0f/0xe10 [ 752.641863][T28695] ? __pfx_netlink_dump+0x10/0x10 [ 752.641898][T28695] ? genl_start+0x499/0x6c0 [ 752.641934][T28695] __netlink_dump_start+0x5cb/0x7e0 [ 752.641966][T28695] genl_family_rcv_msg_dumpit+0x213/0x310 [ 752.641999][T28695] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 752.642036][T28695] ? __pfx_genl_start+0x10/0x10 [ 752.642062][T28695] ? __pfx_genl_dumpit+0x10/0x10 [ 752.642105][T28695] ? __pfx_genl_done+0x10/0x10 [ 752.642139][T28695] ? bpf_lsm_capable+0x9/0x20 [ 752.642159][T28695] ? security_capable+0x7e/0x2c0 [ 752.642191][T28695] genl_rcv_msg+0x5e8/0x7a0 [ 752.642232][T28695] ? __pfx_genl_rcv_msg+0x10/0x10 [ 752.642261][T28695] ? __pfx_batadv_bla_claim_dump+0x10/0x10 [ 752.642292][T28695] ? __pfx_ref_tracker_free+0x10/0x10 [ 752.642337][T28695] netlink_rcv_skb+0x232/0x4b0 [ 752.642363][T28695] ? __pfx_genl_rcv_msg+0x10/0x10 [ 752.642395][T28695] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 752.642436][T28695] ? down_read+0x270/0x2e0 [ 752.642460][T28695] ? genl_rcv+0xd/0x40 [ 752.642490][T28695] genl_rcv+0x28/0x40 [ 752.642518][T28695] netlink_unicast+0x75c/0x8e0 [ 752.642551][T28695] netlink_sendmsg+0x813/0xb40 [ 752.642585][T28695] ? __pfx_netlink_sendmsg+0x10/0x10 [ 752.642614][T28695] ? aa_sock_msg_perm+0xf1/0x1b0 [ 752.642642][T28695] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 752.642673][T28695] ____sys_sendmsg+0x972/0x9f0 [ 752.642699][T28695] ? __might_fault+0xaf/0x130 [ 752.642731][T28695] ? __pfx_____sys_sendmsg+0x10/0x10 [ 752.642767][T28695] ? import_iovec+0x73/0xa0 [ 752.642800][T28695] ___sys_sendmsg+0x2a5/0x360 [ 752.642824][T28695] ? __lock_acquire+0x6b5/0x2cf0 [ 752.642851][T28695] ? __pfx____sys_sendmsg+0x10/0x10 [ 752.642915][T28695] ? __fget_files+0x2a/0x420 [ 752.642938][T28695] ? __fget_files+0x3a0/0x420 [ 752.642974][T28695] __x64_sys_sendmsg+0x1bd/0x2a0 [ 752.643003][T28695] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 752.643039][T28695] ? __pfx_ksys_write+0x10/0x10 [ 752.643077][T28695] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 752.643100][T28695] do_syscall_64+0x15f/0xf80 [ 752.643123][T28695] ? trace_irq_disable+0x3b/0x140 [ 752.643153][T28695] ? clear_bhb_loop+0x40/0x90 [ 752.643180][T28695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 752.643200][T28695] RIP: 0033:0x7f5b00b9cdd9 [ 752.643219][T28695] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 752.643237][T28695] RSP: 002b:00007f5b01aca028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 752.643259][T28695] RAX: ffffffffffffffda RBX: 00007f5b00e15fa0 RCX: 00007f5b00b9cdd9 [ 752.643274][T28695] RDX: 0000000004000000 RSI: 0000200000004340 RDI: 0000000000000003 [ 752.643288][T28695] RBP: 00007f5b01aca090 R08: 0000000000000000 R09: 0000000000000000 [ 752.643301][T28695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 752.643320][T28695] R13: 00007f5b00e16038 R14: 00007f5b00e15fa0 R15: 00007ffe26d1a448 [ 752.643354][T28695] [ 753.101444][ T3361] bond8: (slave bridge8): failed to get link speed/duplex [ 753.210366][ T48] bond8: (slave bridge8): failed to get link speed/duplex [ 753.330223][ T3361] bond8: (slave bridge8): failed to get link speed/duplex [ 753.475479][T10591] bond8: (slave bridge8): failed to get link speed/duplex [ 753.544690][T28725] xt_nfacct: accounting object `syz1' does not exist [ 753.592313][T15441] bond8: (slave bridge8): failed to get link speed/duplex [ 753.674403][T28733] FAULT_INJECTION: forcing a failure. [ 753.674403][T28733] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 753.687626][T28733] CPU: 0 UID: 0 PID: 28733 Comm: syz.0.7347 Not tainted syzkaller #0 PREEMPT(full) [ 753.687649][T28733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 753.687661][T28733] Call Trace: [ 753.687669][T28733] [ 753.687677][T28733] dump_stack_lvl+0xe8/0x150 [ 753.687704][T28733] should_fail_ex+0x412/0x560 [ 753.687733][T28733] _copy_from_iter+0x1d3/0x1670 [ 753.687760][T28733] ? rcu_is_watching+0x15/0xb0 [ 753.687790][T28733] ? __pfx__copy_from_iter+0x10/0x10 [ 753.687821][T28733] ? netlink_sendmsg+0x650/0xb40 [ 753.687844][T28733] ? skb_put+0x11b/0x210 [ 753.687869][T28733] netlink_sendmsg+0x6c0/0xb40 [ 753.687900][T28733] ? __pfx_netlink_sendmsg+0x10/0x10 [ 753.687926][T28733] ? aa_sock_msg_perm+0xf1/0x1b0 [ 753.687951][T28733] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 753.687980][T28733] ____sys_sendmsg+0x972/0x9f0 [ 753.688022][T28733] ? __pfx_____sys_sendmsg+0x10/0x10 [ 753.688055][T28733] ? import_iovec+0x73/0xa0 [ 753.688084][T28733] ___sys_sendmsg+0x2a5/0x360 [ 753.688107][T28733] ? __lock_acquire+0x6b5/0x2cf0 [ 753.688132][T28733] ? __pfx____sys_sendmsg+0x10/0x10 [ 753.688186][T28733] ? __fget_files+0x2a/0x420 [ 753.688208][T28733] ? __fget_files+0x3a0/0x420 [ 753.688239][T28733] __x64_sys_sendmsg+0x1bd/0x2a0 [ 753.688267][T28733] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 753.688300][T28733] ? __pfx_ksys_write+0x10/0x10 [ 753.688336][T28733] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 753.688358][T28733] do_syscall_64+0x15f/0xf80 [ 753.688379][T28733] ? trace_irq_disable+0x3b/0x140 [ 753.688408][T28733] ? clear_bhb_loop+0x40/0x90 [ 753.688431][T28733] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 753.688451][T28733] RIP: 0033:0x7fbb5919cdd9 [ 753.688468][T28733] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 753.688486][T28733] RSP: 002b:00007fbb5a036028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 753.688506][T28733] RAX: ffffffffffffffda RBX: 00007fbb59415fa0 RCX: 00007fbb5919cdd9 [ 753.688521][T28733] RDX: 000000000000c000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 753.688533][T28733] RBP: 00007fbb5a036090 R08: 0000000000000000 R09: 0000000000000000 [ 753.688545][T28733] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 753.688557][T28733] R13: 00007fbb59416038 R14: 00007fbb59415fa0 R15: 00007ffd0411c358 [ 753.688586][T28733] [ 753.988771][ T48] bond8: (slave bridge8): failed to get link speed/duplex [ 754.037870][T28737] __nla_validate_parse: 67 callbacks suppressed [ 754.037886][T28737] netlink: 240 bytes leftover after parsing attributes in process `syz.1.7348'. [ 754.055551][T28737] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 754.161933][T28742] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7350'. [ 754.295643][T28746] netlink: 'syz.1.7351': attribute type 3 has an invalid length. [ 754.309515][T28746] netlink: 'syz.1.7351': attribute type 3 has an invalid length. [ 754.383866][T28755] tipc: Resetting bearer [ 754.429367][T28755] tipc: Resetting bearer [ 754.542415][T28764] sctp: [Deprecated]: syz.1.7356 (pid 28764) Use of int in max_burst socket option. [ 754.542415][T28764] Use struct sctp_assoc_value instead [ 754.592577][T28763] sctp: [Deprecated]: syz.1.7356 (pid 28763) Use of int in max_burst socket option. [ 754.592577][T28763] Use struct sctp_assoc_value instead [ 754.665443][T28770] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7358'. [ 754.828828][T28780] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7362'. [ 754.868834][T28782] FAULT_INJECTION: forcing a failure. [ 754.868834][T28782] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 754.883946][T28780] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7362'. [ 754.893951][T28782] CPU: 1 UID: 0 PID: 28782 Comm: syz.3.7363 Not tainted syzkaller #0 PREEMPT(full) [ 754.893980][T28782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 754.893994][T28782] Call Trace: [ 754.894003][T28782] [ 754.894013][T28782] dump_stack_lvl+0xe8/0x150 [ 754.894044][T28782] should_fail_ex+0x412/0x560 [ 754.894077][T28782] _copy_from_iter+0x1d3/0x1670 [ 754.894111][T28782] ? rcu_is_watching+0x15/0xb0 [ 754.894145][T28782] ? __pfx__copy_from_iter+0x10/0x10 [ 754.894182][T28782] ? netlink_sendmsg+0x650/0xb40 [ 754.894209][T28782] ? skb_put+0x11b/0x210 [ 754.894240][T28782] netlink_sendmsg+0x6c0/0xb40 [ 754.894277][T28782] ? __pfx_netlink_sendmsg+0x10/0x10 [ 754.894308][T28782] ? aa_sock_msg_perm+0xf1/0x1b0 [ 754.894339][T28782] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 754.894374][T28782] ____sys_sendmsg+0x972/0x9f0 [ 754.894407][T28782] ? __might_fault+0xaf/0x130 [ 754.894443][T28782] ? __pfx_____sys_sendmsg+0x10/0x10 [ 754.894482][T28782] ? import_iovec+0x73/0xa0 [ 754.894517][T28782] ___sys_sendmsg+0x2a5/0x360 [ 754.894544][T28782] ? __lock_acquire+0x6b5/0x2cf0 [ 754.894574][T28782] ? __pfx____sys_sendmsg+0x10/0x10 [ 754.894640][T28782] ? __fget_files+0x2a/0x420 [ 754.894666][T28782] ? __fget_files+0x3a0/0x420 [ 754.894705][T28782] __x64_sys_sendmsg+0x1bd/0x2a0 [ 754.894736][T28782] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 754.894776][T28782] ? __pfx_ksys_write+0x10/0x10 [ 754.894825][T28782] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 754.894848][T28782] do_syscall_64+0x15f/0xf80 [ 754.894870][T28782] ? trace_irq_disable+0x3b/0x140 [ 754.894900][T28782] ? clear_bhb_loop+0x40/0x90 [ 754.894933][T28782] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 754.894954][T28782] RIP: 0033:0x7f446359cdd9 [ 754.894974][T28782] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 754.894990][T28782] RSP: 002b:00007f446449a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 754.895011][T28782] RAX: ffffffffffffffda RBX: 00007f4463815fa0 RCX: 00007f446359cdd9 [ 754.895026][T28782] RDX: 00000000200c4050 RSI: 0000200000000140 RDI: 0000000000000003 [ 754.895040][T28782] RBP: 00007f446449a090 R08: 0000000000000000 R09: 0000000000000000 [ 754.895052][T28782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 754.895064][T28782] R13: 00007f4463816038 R14: 00007f4463815fa0 R15: 00007ffe1fca0e48 [ 754.895115][T28782] [ 755.463920][T28773] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 755.486832][T28796] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7368'. [ 755.615479][T28807] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7373'. [ 755.653545][T28809] xt_CT: You must specify a L4 protocol and not use inversions on it [ 755.878690][T28816] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.7375'. [ 755.934351][T28819] syzkaller0: entered promiscuous mode [ 755.962177][T28819] syzkaller0: entered allmulticast mode [ 756.063423][T28828] syzkaller1: entered promiscuous mode [ 756.075332][T28828] syzkaller1: entered allmulticast mode [ 756.175038][T28836] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7381'. [ 756.339336][T28841] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7384'. [ 756.738299][T28860] tipc: Enabled bearer , priority 24 [ 756.763629][T28864] dvmrp1: left allmulticast mode [ 757.141413][T28885] FAULT_INJECTION: forcing a failure. [ 757.141413][T28885] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 757.155165][T28885] CPU: 0 UID: 0 PID: 28885 Comm: syz.1.7400 Not tainted syzkaller #0 PREEMPT(full) [ 757.155189][T28885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 757.155202][T28885] Call Trace: [ 757.155211][T28885] [ 757.155219][T28885] dump_stack_lvl+0xe8/0x150 [ 757.155246][T28885] should_fail_ex+0x412/0x560 [ 757.155276][T28885] _copy_from_user+0x2d/0xb0 [ 757.155304][T28885] kstrtouint_from_user+0xd6/0x180 [ 757.155330][T28885] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 757.155369][T28885] proc_fail_nth_write+0x8e/0x210 [ 757.155394][T28885] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 757.155425][T28885] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 757.155451][T28885] vfs_write+0x29a/0xb90 [ 757.155484][T28885] ? __pfx_vfs_write+0x10/0x10 [ 757.155514][T28885] ? __fget_files+0x2a/0x420 [ 757.155541][T28885] ? __fget_files+0x3a0/0x420 [ 757.155563][T28885] ? __fget_files+0x2a/0x420 [ 757.155594][T28885] ksys_write+0x150/0x270 [ 757.155623][T28885] ? __pfx_ksys_write+0x10/0x10 [ 757.155662][T28885] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 757.155683][T28885] do_syscall_64+0x15f/0xf80 [ 757.155704][T28885] ? trace_irq_disable+0x3b/0x140 [ 757.155733][T28885] ? clear_bhb_loop+0x40/0x90 [ 757.155757][T28885] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 757.155790][T28885] RIP: 0033:0x7f2c1395d60e [ 757.155809][T28885] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 757.155843][T28885] RSP: 002b:00007f2c14886fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 757.155865][T28885] RAX: ffffffffffffffda RBX: 00007f2c148876c0 RCX: 00007f2c1395d60e [ 757.155881][T28885] RDX: 0000000000000001 RSI: 00007f2c148870a0 RDI: 0000000000000004 [ 757.155895][T28885] RBP: 00007f2c14887090 R08: 0000000000000000 R09: 0000000000000000 [ 757.155908][T28885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 757.155921][T28885] R13: 00007f2c13c16038 R14: 00007f2c13c15fa0 R15: 00007fffd0c88678 [ 757.155957][T28885] [ 757.416350][T27356] net_ratelimit: 23 callbacks suppressed [ 757.416370][T27356] bond8: (slave bridge8): failed to get link speed/duplex [ 757.458781][T28877] netlink: 'syz.3.7397': attribute type 25 has an invalid length. [ 757.468274][T28877] netlink: 'syz.3.7397': attribute type 25 has an invalid length. [ 757.571148][T28894] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 757.611216][T27356] bond8: (slave bridge8): failed to get link speed/duplex [ 757.741466][T10591] bond8: (slave bridge8): failed to get link speed/duplex [ 757.757847][T28903] netlink: ct family unspecified [ 757.926323][T28905] veth7: entered allmulticast mode [ 758.050545][ T111] bond8: (slave bridge8): failed to get link speed/duplex [ 758.364591][ T36] bond8: (slave bridge8): failed to get link speed/duplex [ 758.500141][ T36] bond8: (slave bridge8): failed to get link speed/duplex [ 758.514172][T28943] netlink: 'syz.0.7417': attribute type 3 has an invalid length. [ 758.622142][T28944] sctp: [Deprecated]: syz.0.7417 (pid 28944) Use of int in max_burst socket option deprecated. [ 758.622142][T28944] Use struct sctp_assoc_value instead [ 758.638092][T11459] bond8: (slave bridge8): failed to get link speed/duplex [ 758.706818][T28951] netlink: ct family unspecified [ 758.713723][T28944] netlink: 'syz.0.7417': attribute type 10 has an invalid length. [ 758.749899][T28949] netlink: 'syz.0.7417': attribute type 10 has an invalid length. [ 758.778268][T28954] netlink: 'syz.1.7421': attribute type 10 has an invalid length. [ 758.786886][ T3361] bond8: (slave bridge8): failed to get link speed/duplex [ 758.828143][T28956] netlink: 'syz.4.7422': attribute type 10 has an invalid length. [ 758.876312][T28956] smc: removing net device team0 with user defined pnetid SYZ2 [ 758.927742][T28956] team0 (unregistering): Port device vlan0 removed [ 759.127018][T28967] __nla_validate_parse: 19 callbacks suppressed [ 759.127038][T28967] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7425'. [ 759.459869][T28988] bond1: (slave bridge2): Releasing active interface [ 759.468330][T28988] bond1: (slave bridge2): the permanent HWaddr of slave - 06:40:fa:b0:45:e1 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 759.511338][T28988] bond1: (slave bridge3): Releasing active interface [ 759.538840][T28988] bond3: (slave bridge6): Releasing backup interface [ 759.548040][T28988] bridge6: left promiscuous mode [ 759.579739][T28988] bond5: (slave gretap1): Releasing active interface [ 759.604149][T28993] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.7434'. [ 759.619783][T28988] bond6: (slave geneve2): Releasing active interface [ 759.630953][T28988] geneve2: left allmulticast mode [ 759.767401][T28999] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7436'. [ 759.941401][T29007] syzkaller1: entered promiscuous mode [ 759.955570][T29007] syzkaller1: entered allmulticast mode [ 760.025303][T29014] netlink: 'syz.1.7440': attribute type 4 has an invalid length. [ 760.256047][T29024] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7447'. [ 760.319572][T29027] syzkaller0: entered promiscuous mode [ 760.341166][T29027] syzkaller0: entered allmulticast mode [ 760.686810][T29048] syzkaller1: entered promiscuous mode [ 760.698916][T29048] syzkaller1: entered allmulticast mode [ 760.719092][T29050] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7454'. [ 760.865974][T29052] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7456'. [ 760.904071][T29052] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7456'. [ 761.032557][T29061] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 761.157336][T29073] Cannot find map_set index 135 as target [ 761.275142][T29078] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7465'. [ 761.376104][T29081] xt_hashlimit: size too large, truncated to 1048576 [ 761.827249][T29098] syzkaller1: entered promiscuous mode [ 761.836228][T29098] syzkaller1: entered allmulticast mode [ 762.170678][T29110] syzkaller0: entered promiscuous mode [ 762.176407][T29110] syzkaller0: entered allmulticast mode [ 763.169559][T29139] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7482'. [ 764.551604][T15441] net_ratelimit: 29 callbacks suppressed [ 764.551622][T15441] bond8: (slave bridge8): failed to get link speed/duplex [ 764.611643][T29150] syzkaller1: entered promiscuous mode [ 764.629896][T29150] syzkaller1: entered allmulticast mode [ 764.682301][T29152] netlink: 104 bytes leftover after parsing attributes in process `syz.1.7486'. [ 764.720190][T27356] bond8: (slave bridge8): failed to get link speed/duplex [ 764.840378][ T111] bond8: (slave bridge8): failed to get link speed/duplex [ 764.885191][T29161] netlink: 52 bytes leftover after parsing attributes in process `syz.1.7489'. [ 764.989327][ T48] bond8: (slave bridge8): failed to get link speed/duplex [ 765.121126][ T36] bond8: (slave bridge8): failed to get link speed/duplex [ 765.140240][T29173] Cannot find map_set index 135 as target [ 765.273873][ T36] bond8: (slave bridge8): failed to get link speed/duplex [ 765.320505][T29179] openvswitch: netlink: Unexpected mask (mask=2020040, allowed=2010048) [ 765.397300][T29181] smc: adding net device team0 with user defined pnetid SYZ2 [ 765.440154][T15441] bond8: (slave bridge8): failed to get link speed/duplex [ 765.472650][T29189] veth0: entered promiscuous mode [ 765.507576][T29187] veth0: left promiscuous mode [ 765.571903][T15441] bond8: (slave bridge8): failed to get link speed/duplex [ 765.697300][T29180] smc: removing net device team0 with user defined pnetid SYZ2 [ 765.760132][T27356] bond8: (slave bridge8): failed to get link speed/duplex [ 766.138346][T29215] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7510'. [ 766.290401][T29226] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7514'. [ 766.313328][T29226] netlink: 3 bytes leftover after parsing attributes in process `syz.2.7514'. [ 766.602489][T29238] : entered promiscuous mode [ 766.735035][T29244] Cannot find map_set index 135 as target [ 767.596920][T29285] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7537'. [ 767.617605][T29285] netlink: 3 bytes leftover after parsing attributes in process `syz.2.7537'. [ 767.768804][T29292] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7540'. [ 767.826188][T29292] bond8: entered promiscuous mode [ 767.832498][T29292] 8021q: adding VLAN 0 to HW filter on device bond8 [ 767.960278][T29299] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.7544'. [ 768.069491][T29308] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7545'. [ 768.263874][T29321] syzkaller0: entered promiscuous mode [ 768.464044][T29327] bond9: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 768.496340][T29327] bond9 (unregistering): Released all slaves [ 768.679377][T29344] FAULT_INJECTION: forcing a failure. [ 768.679377][T29344] name failslab, interval 1, probability 0, space 0, times 0 [ 768.693732][T29344] CPU: 0 UID: 0 PID: 29344 Comm: syz.0.7559 Not tainted syzkaller #0 PREEMPT(full) [ 768.693761][T29344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 768.693775][T29344] Call Trace: [ 768.693784][T29344] [ 768.693794][T29344] dump_stack_lvl+0xe8/0x150 [ 768.693825][T29344] should_fail_ex+0x412/0x560 [ 768.693860][T29344] should_failslab+0xa8/0x100 [ 768.693896][T29344] __kmalloc_cache_noprof+0x88/0x660 [ 768.693929][T29344] ? ovs_flow_cmd_new+0x356/0xe80 [ 768.693957][T29344] ovs_flow_cmd_new+0x356/0xe80 [ 768.693977][T29344] ? kasan_save_track+0x3e/0x80 [ 768.694023][T29344] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 768.694106][T29344] ? __nla_parse+0x40/0x60 [ 768.694145][T29344] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 768.694180][T29344] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 768.694224][T29344] genl_family_rcv_msg_doit+0x22a/0x330 [ 768.694267][T29344] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 768.694323][T29344] ? bpf_lsm_capable+0x9/0x20 [ 768.694346][T29344] ? security_capable+0x7e/0x2c0 [ 768.694381][T29344] genl_rcv_msg+0x61c/0x7a0 [ 768.694422][T29344] ? __pfx_genl_rcv_msg+0x10/0x10 [ 768.694454][T29344] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 768.694479][T29344] ? __pfx_ref_tracker_free+0x10/0x10 [ 768.694520][T29344] netlink_rcv_skb+0x232/0x4b0 [ 768.694549][T29344] ? __pfx_genl_rcv_msg+0x10/0x10 [ 768.694588][T29344] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 768.694633][T29344] ? down_read+0x270/0x2e0 [ 768.694659][T29344] ? genl_rcv+0xd/0x40 [ 768.694693][T29344] genl_rcv+0x28/0x40 [ 768.694723][T29344] netlink_unicast+0x75c/0x8e0 [ 768.694771][T29344] netlink_sendmsg+0x813/0xb40 [ 768.694818][T29344] ? __pfx_netlink_sendmsg+0x10/0x10 [ 768.694857][T29344] ? aa_sock_msg_perm+0xf1/0x1b0 [ 768.694884][T29344] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 768.694913][T29344] ____sys_sendmsg+0x972/0x9f0 [ 768.694938][T29344] ? __might_fault+0xaf/0x130 [ 768.694969][T29344] ? __pfx_____sys_sendmsg+0x10/0x10 [ 768.695002][T29344] ? import_iovec+0x73/0xa0 [ 768.695046][T29344] ___sys_sendmsg+0x2a5/0x360 [ 768.695088][T29344] ? __lock_acquire+0x6b5/0x2cf0 [ 768.695115][T29344] ? __pfx____sys_sendmsg+0x10/0x10 [ 768.695200][T29344] ? __fget_files+0x2a/0x420 [ 768.695226][T29344] ? __fget_files+0x3a0/0x420 [ 768.695264][T29344] __x64_sys_sendmsg+0x1bd/0x2a0 [ 768.695304][T29344] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 768.695344][T29344] ? __pfx_ksys_write+0x10/0x10 [ 768.695387][T29344] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 768.695412][T29344] do_syscall_64+0x15f/0xf80 [ 768.695436][T29344] ? trace_irq_disable+0x3b/0x140 [ 768.695469][T29344] ? clear_bhb_loop+0x40/0x90 [ 768.695497][T29344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 768.695520][T29344] RIP: 0033:0x7fbb5919cdd9 [ 768.695541][T29344] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 768.695560][T29344] RSP: 002b:00007fbb5a036028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 768.695584][T29344] RAX: ffffffffffffffda RBX: 00007fbb59415fa0 RCX: 00007fbb5919cdd9 [ 768.695601][T29344] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000003 [ 768.695616][T29344] RBP: 00007fbb5a036090 R08: 0000000000000000 R09: 0000000000000000 [ 768.695631][T29344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 768.695644][T29344] R13: 00007fbb59416038 R14: 00007fbb59415fa0 R15: 00007ffd0411c358 [ 768.695681][T29344] [ 769.168586][T29347] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 769.193808][T29353] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 769.284780][T29347] gretap3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 769.305752][T29347] gretap3: entered promiscuous mode [ 769.311464][T29347] gretap3: entered allmulticast mode [ 769.600429][T11459] net_ratelimit: 28 callbacks suppressed [ 769.600446][T11459] bond8: (slave bridge8): failed to get link speed/duplex [ 769.755135][T29381] syzkaller1: entered promiscuous mode [ 769.765159][T29383] __nla_validate_parse: 3 callbacks suppressed [ 769.765176][T29383] netlink: 408 bytes leftover after parsing attributes in process `syz.0.7572'. [ 769.780994][T29381] syzkaller1: entered allmulticast mode [ 769.801475][ T3361] bond8: (slave bridge8): failed to get link speed/duplex [ 769.862990][T29379] netlink: 408 bytes leftover after parsing attributes in process `syz.0.7572'. [ 769.931298][ T3361] bond8: (slave bridge8): failed to get link speed/duplex [ 769.954236][T29389] netlink: 'syz.2.7575': attribute type 1 has an invalid length. [ 770.052011][T15441] bond8: (slave bridge8): failed to get link speed/duplex [ 770.159948][T29400] netlink: 76 bytes leftover after parsing attributes in process `syz.0.7576'. [ 770.169441][T15441] bond8: (slave bridge8): failed to get link speed/duplex [ 770.186163][T29400] nbd: illegal input index -8454144 [ 770.251922][T29405] netlink: 104 bytes leftover after parsing attributes in process `syz.1.7580'. [ 770.291561][T10591] bond8: (slave bridge8): failed to get link speed/duplex [ 770.420491][T11459] bond8: (slave bridge8): failed to get link speed/duplex [ 770.447917][T29413] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7583'. [ 770.494879][T29415] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7584'. [ 770.594115][T11459] bond8: (slave bridge8): failed to get link speed/duplex [ 770.731687][T15441] bond8: (slave bridge8): failed to get link speed/duplex [ 770.920228][T10591] bond8: (slave bridge8): failed to get link speed/duplex [ 770.948371][T29434] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7590'. [ 771.045485][T29437] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7592'. [ 771.061649][T29439] FAULT_INJECTION: forcing a failure. [ 771.061649][T29439] name failslab, interval 1, probability 0, space 0, times 0 [ 771.113057][T29442] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 771.114824][T29439] CPU: 1 UID: 0 PID: 29439 Comm: syz.1.7591 Not tainted syzkaller #0 PREEMPT(full) [ 771.114949][T29439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 771.114977][T29439] Call Trace: [ 771.115008][T29439] [ 771.115031][T29439] dump_stack_lvl+0xe8/0x150 [ 771.115117][T29439] should_fail_ex+0x412/0x560 [ 771.115214][T29439] ? __d_alloc+0x37/0x6f0 [ 771.115300][T29439] should_failslab+0xa8/0x100 [ 771.115398][T29439] kmem_cache_alloc_lru_noprof+0x87/0x640 [ 771.115507][T29439] __d_alloc+0x37/0x6f0 [ 771.115605][T29439] d_alloc+0x4b/0x190 [ 771.115679][T29439] ? lookup_one_qstr_excl+0xc4/0x360 [ 771.115767][T29439] lookup_one_qstr_excl+0xd8/0x360 [ 771.115856][T29439] ? lookup_noperm_common+0x245/0x430 [ 771.115953][T29439] start_dirop+0x5c/0x90 [ 771.116078][T29439] simple_start_creating+0xcc/0x110 [ 771.116157][T29439] ? __pfx_simple_start_creating+0x10/0x10 [ 771.116225][T29439] ? do_raw_spin_unlock+0xf5/0x210 [ 771.116306][T29439] ? mntput+0x65/0xc0 [ 771.116399][T29439] debugfs_start_creating+0xdb/0x1a0 [ 771.116483][T29439] __debugfs_create_file+0x6f/0x400 [ 771.116573][T29439] debugfs_create_file_full+0x3f/0x60 [ 771.116658][T29439] ref_tracker_dir_debugfs+0x197/0x360 [ 771.116725][T29439] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 771.116856][T29439] ? __kvmalloc_node_noprof+0x545/0x8a0 [ 771.116951][T29439] ? alloc_netdev_mqs+0xa8/0x1210 [ 771.117041][T29439] ? __raw_spin_lock_init+0x45/0x100 [ 771.117130][T29439] alloc_netdev_mqs+0x274/0x1210 [ 771.117200][T29439] ? __pfx_vxlan_setup+0x10/0x10 [ 771.117282][T29439] rtnl_create_link+0x31f/0xd70 [ 771.117386][T29439] rtnl_newlink_create+0x277/0xb70 [ 771.117487][T29439] ? __pfx___nla_validate_parse+0x10/0x10 [ 771.117583][T29439] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 771.117657][T29439] ? __pfx___mutex_lock+0x10/0x10 [ 771.117743][T29439] ? ns_capable+0x89/0xe0 [ 771.117807][T29439] rtnl_newlink+0x166a/0x1bb0 [ 771.117928][T29439] ? __pfx_rtnl_newlink+0x10/0x10 [ 771.117996][T29439] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 771.118133][T29439] ? kasan_quarantine_put+0xbb/0x1f0 [ 771.118199][T29439] ? lockdep_hardirqs_on+0x7a/0x110 [ 771.118271][T29439] ? nlmon_xmit+0xb0/0x100 [ 771.118326][T29439] ? kmem_cache_free+0x182/0x650 [ 771.118425][T29439] ? __lock_acquire+0x6b5/0x2cf0 [ 771.118491][T29439] ? __dev_queue_xmit+0x2b6/0x3950 [ 771.118573][T29439] ? __local_bh_enable_ip+0xd0/0x130 [ 771.118628][T29439] ? lockdep_hardirqs_on+0x7a/0x110 [ 771.118677][T29439] ? __dev_queue_xmit+0x2b6/0x3950 [ 771.118747][T29439] ? __local_bh_enable_ip+0xd0/0x130 [ 771.118812][T29439] ? __dev_queue_xmit+0x2b6/0x3950 [ 771.118977][T29439] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 771.119101][T29439] ? __pfx_rtnl_newlink+0x10/0x10 [ 771.119171][T29439] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 771.119248][T29439] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 771.119318][T29439] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 771.119375][T29439] ? ref_tracker_free+0x693/0x840 [ 771.119474][T29439] ? __pfx_ref_tracker_free+0x10/0x10 [ 771.119580][T29439] netlink_rcv_skb+0x232/0x4b0 [ 771.119653][T29439] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 771.119727][T29439] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 771.119834][T29439] ? netlink_deliver_tap+0x2e/0x1b0 [ 771.119910][T29439] ? netlink_deliver_tap+0x2e/0x1b0 [ 771.119996][T29439] netlink_unicast+0x75c/0x8e0 [ 771.120105][T29439] netlink_sendmsg+0x813/0xb40 [ 771.120227][T29439] ? __pfx_netlink_sendmsg+0x10/0x10 [ 771.120296][T29439] ? aa_sock_msg_perm+0xf1/0x1b0 [ 771.120367][T29439] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 771.120442][T29439] ____sys_sendmsg+0x972/0x9f0 [ 771.120494][T29439] ? __might_fault+0xaf/0x130 [ 771.120570][T29439] ? __pfx_____sys_sendmsg+0x10/0x10 [ 771.120660][T29439] ? import_iovec+0x73/0xa0 [ 771.120742][T29439] ___sys_sendmsg+0x2a5/0x360 [ 771.120805][T29439] ? __lock_acquire+0x6b5/0x2cf0 [ 771.120863][T29439] ? __pfx____sys_sendmsg+0x10/0x10 [ 771.121033][T29439] ? __fget_files+0x2a/0x420 [ 771.121090][T29439] ? __fget_files+0x3a0/0x420 [ 771.121239][T29439] __x64_sys_sendmsg+0x1bd/0x2a0 [ 771.121273][T29439] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 771.121309][T29439] ? __pfx_ksys_write+0x10/0x10 [ 771.121345][T29439] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 771.121368][T29439] do_syscall_64+0x15f/0xf80 [ 771.121436][T29439] ? trace_irq_disable+0x3b/0x140 [ 771.121527][T29439] ? clear_bhb_loop+0x40/0x90 [ 771.121599][T29439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 771.121647][T29439] RIP: 0033:0x7f2c1399cdd9 [ 771.121695][T29439] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 771.121735][T29439] RSP: 002b:00007f2c14887028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 771.121791][T29439] RAX: ffffffffffffffda RBX: 00007f2c13c15fa0 RCX: 00007f2c1399cdd9 [ 771.121829][T29439] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 771.121859][T29439] RBP: 00007f2c14887090 R08: 0000000000000000 R09: 0000000000000000 [ 771.121893][T29439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 771.121928][T29439] R13: 00007f2c13c16038 R14: 00007f2c13c15fa0 R15: 00007fffd0c88678 [ 771.122011][T29439] [ 771.802831][T29454] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7597'. [ 771.914280][T29460] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7598'. [ 771.955891][T29463] netlink: 'syz.4.7599': attribute type 1 has an invalid length. [ 772.008879][T29454] 8021q: adding VLAN 0 to HW filter on device bond12 [ 772.024385][T29462] macvlan2: entered promiscuous mode [ 772.029819][T29462] macvlan2: entered allmulticast mode [ 772.038256][T29462] bond12: entered promiscuous mode [ 772.047468][T29462] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 772.076356][T29462] bond12: left promiscuous mode [ 772.213563][T29463] 8021q: adding VLAN 0 to HW filter on device bond15 [ 772.285988][T29467] ip_vti0: entered promiscuous mode [ 772.337940][T29462] macvlan2: entered promiscuous mode [ 772.374730][T29462] macvlan2: entered allmulticast mode [ 772.397609][T29462] bond12: entered promiscuous mode [ 772.405159][T29462] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 772.417339][T29462] bond12: left promiscuous mode [ 772.558695][T29462] macvlan2: entered promiscuous mode [ 772.564310][T29462] macvlan2: entered allmulticast mode [ 772.575746][T29462] bond12: entered promiscuous mode [ 772.583483][T29462] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 772.596456][T29462] bond12: left promiscuous mode [ 772.630334][T29490] tun0: tun_chr_ioctl cmd 1074025675 [ 772.647773][T29490] tun0: persist disabled [ 772.686366][T29490] netlink: 'syz.4.7607': attribute type 10 has an invalid length. [ 772.987061][T29515] x_tables: ip6_tables: MASQUERADE target: only valid in nat table, not syz1 [ 773.164567][ T30] audit: type=1800 audit(1777338973.772:9): pid=29525 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.7620" name="memory.events" dev="tmpfs" ino=7820 res=0 errno=0 [ 773.172490][T29521] IPVS: Unknown mcast interface: vcan0 [ 773.248294][ T30] audit: type=1804 audit(1777338973.802:10): pid=29525 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.7620" name="/newroot/1542/memory.events" dev="tmpfs" ino=7820 res=1 errno=0 [ 773.489650][T29542] netlink: 'syz.2.7624': attribute type 12 has an invalid length. [ 774.142302][T29571] syzkaller0: entered promiscuous mode [ 774.155256][T29571] syzkaller0: entered allmulticast mode [ 774.610287][T27356] net_ratelimit: 19 callbacks suppressed [ 774.610306][T27356] bond8: (slave bridge8): failed to get link speed/duplex [ 774.693105][T29599] openvswitch: netlink: Invalid VLAN frame [ 774.774444][ T3361] bond8: (slave bridge8): failed to get link speed/duplex [ 774.912472][ T36] bond8: (slave bridge8): failed to get link speed/duplex [ 775.052051][T27356] bond8: (slave bridge8): failed to get link speed/duplex [ 775.106146][T29619] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 775.116968][T29622] __nla_validate_parse: 7 callbacks suppressed [ 775.116985][T29622] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7651'. [ 775.159783][T29612] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 775.169429][T29622] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7651'. [ 775.187029][ T3361] bond8: (slave bridge8): failed to get link speed/duplex [ 775.315364][ T36] bond8: (slave bridge8): failed to get link speed/duplex [ 775.377556][T29632] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 775.431854][T29635] Cannot find map_set index 135 as target [ 775.445458][ T36] bond8: (slave bridge8): failed to get link speed/duplex [ 775.554280][T29643] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7655'. [ 775.582400][ T48] bond8: (slave bridge8): failed to get link speed/duplex [ 775.730695][ T36] bond8: (slave bridge8): failed to get link speed/duplex [ 775.998320][T29661] netlink: 175688 bytes leftover after parsing attributes in process `syz.2.7664'. [ 776.121434][T29665] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7667'. [ 776.140663][T29664] netlink: 68 bytes leftover after parsing attributes in process `syz.3.7665'. [ 776.152443][T29665] netlink: 3 bytes leftover after parsing attributes in process `syz.2.7667'. [ 776.172194][T29668] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7668'. [ 776.199136][T29669] Cannot find map_set index 135 as target [ 776.361660][T29675] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7671'. [ 776.469139][T29682] Unsupported ieee802154 address type: 0 [ 776.498144][T29682] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7675'. [ 776.884045][T29711] Cannot find map_set index 135 as target [ 777.019900][T29716] block nbd0: NBD_DISCONNECT [ 777.050426][T29716] block nbd0: Send disconnect failed -32 [ 777.067174][T29716] block nbd0: shutting down sockets [ 777.664040][T29741] bond10 (unregistering): Released all slaves [ 778.087790][T29780] ip6t_srh: unknown srh invflags 4000 [ 778.098029][T29780] ip6t_srh: unknown srh invflags 4000 [ 778.104331][T29780] ip6t_srh: unknown srh invflags 4000 [ 778.110629][T29780] ip6t_srh: unknown srh invflags 4000 [ 778.116792][T29780] ip6t_srh: unknown srh invflags 4000 [ 778.123474][T29780] ip6t_srh: unknown srh invflags 4000 [ 778.129120][T29780] ip6t_srh: unknown srh invflags 4000 [ 778.135603][T29780] ip6t_srh: unknown srh invflags 4000 [ 778.141541][T29780] ip6t_srh: unknown srh invflags 4000 [ 778.147275][T29780] ip6t_srh: unknown srh invflags 4000 [ 778.485020][T29796] FAULT_INJECTION: forcing a failure. [ 778.485020][T29796] name failslab, interval 1, probability 0, space 0, times 0 [ 778.504045][T29796] CPU: 0 UID: 0 PID: 29796 Comm: syz.2.7714 Not tainted syzkaller #0 PREEMPT(full) [ 778.504077][T29796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 778.504091][T29796] Call Trace: [ 778.504101][T29796] [ 778.504110][T29796] dump_stack_lvl+0xe8/0x150 [ 778.504142][T29796] should_fail_ex+0x412/0x560 [ 778.504177][T29796] should_failslab+0xa8/0x100 [ 778.504212][T29796] __kvmalloc_node_noprof+0x178/0x8a0 [ 778.504247][T29796] ? alloc_netdev_mqs+0x8fb/0x1210 [ 778.504289][T29796] alloc_netdev_mqs+0x8fb/0x1210 [ 778.504330][T29796] rtnl_create_link+0x31f/0xd70 [ 778.504371][T29796] rtnl_newlink_create+0x277/0xb70 [ 778.504400][T29796] ? __pfx___nla_validate_parse+0x10/0x10 [ 778.504455][T29796] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 778.504488][T29796] ? __pfx___mutex_lock+0x10/0x10 [ 778.504528][T29796] ? ns_capable+0x89/0xe0 [ 778.504556][T29796] rtnl_newlink+0x166a/0x1bb0 [ 778.504599][T29796] ? __pfx_rtnl_newlink+0x10/0x10 [ 778.504622][T29796] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 778.504687][T29796] ? kasan_quarantine_put+0xbb/0x1f0 [ 778.504718][T29796] ? lockdep_hardirqs_on+0x7a/0x110 [ 778.504748][T29796] ? nlmon_xmit+0xb0/0x100 [ 778.504783][T29796] ? kmem_cache_free+0x182/0x650 [ 778.504833][T29796] ? __lock_acquire+0x6b5/0x2cf0 [ 778.504858][T29796] ? __dev_queue_xmit+0x2b6/0x3950 [ 778.504888][T29796] ? __local_bh_enable_ip+0xd0/0x130 [ 778.504908][T29796] ? lockdep_hardirqs_on+0x7a/0x110 [ 778.504928][T29796] ? __dev_queue_xmit+0x2b6/0x3950 [ 778.504952][T29796] ? __local_bh_enable_ip+0xd0/0x130 [ 778.504971][T29796] ? __dev_queue_xmit+0x2b6/0x3950 [ 778.505003][T29796] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 778.505039][T29796] ? __pfx_rtnl_newlink+0x10/0x10 [ 778.505059][T29796] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 778.505083][T29796] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 778.505102][T29796] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 778.505120][T29796] ? ref_tracker_free+0x693/0x840 [ 778.505145][T29796] ? __pfx_ref_tracker_free+0x10/0x10 [ 778.505177][T29796] netlink_rcv_skb+0x232/0x4b0 [ 778.505200][T29796] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 778.505221][T29796] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 778.505253][T29796] ? netlink_deliver_tap+0x2e/0x1b0 [ 778.505275][T29796] ? netlink_deliver_tap+0x2e/0x1b0 [ 778.505301][T29796] netlink_unicast+0x75c/0x8e0 [ 778.505331][T29796] netlink_sendmsg+0x813/0xb40 [ 778.505363][T29796] ? __pfx_netlink_sendmsg+0x10/0x10 [ 778.505389][T29796] ? aa_sock_msg_perm+0xf1/0x1b0 [ 778.505415][T29796] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 778.505452][T29796] ____sys_sendmsg+0x972/0x9f0 [ 778.505476][T29796] ? __might_fault+0xaf/0x130 [ 778.505507][T29796] ? __pfx_____sys_sendmsg+0x10/0x10 [ 778.505540][T29796] ? import_iovec+0x73/0xa0 [ 778.505570][T29796] ___sys_sendmsg+0x2a5/0x360 [ 778.505593][T29796] ? __lock_acquire+0x6b5/0x2cf0 [ 778.505618][T29796] ? __pfx____sys_sendmsg+0x10/0x10 [ 778.505677][T29796] ? __fget_files+0x2a/0x420 [ 778.505700][T29796] ? __fget_files+0x3a0/0x420 [ 778.505733][T29796] __x64_sys_sendmsg+0x1bd/0x2a0 [ 778.505761][T29796] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 778.505795][T29796] ? __pfx_ksys_write+0x10/0x10 [ 778.505831][T29796] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 778.505852][T29796] do_syscall_64+0x15f/0xf80 [ 778.505873][T29796] ? trace_irq_disable+0x3b/0x140 [ 778.505901][T29796] ? clear_bhb_loop+0x40/0x90 [ 778.505926][T29796] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 778.505945][T29796] RIP: 0033:0x7f5b00b9cdd9 [ 778.505963][T29796] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 778.505980][T29796] RSP: 002b:00007f5b01aca028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 778.506000][T29796] RAX: ffffffffffffffda RBX: 00007f5b00e15fa0 RCX: 00007f5b00b9cdd9 [ 778.506014][T29796] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 778.506026][T29796] RBP: 00007f5b01aca090 R08: 0000000000000000 R09: 0000000000000000 [ 778.506039][T29796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 778.506050][T29796] R13: 00007f5b00e16038 R14: 00007f5b00e15fa0 R15: 00007ffe26d1a448 [ 778.506082][T29796] [ 779.666739][T29845] netlink: 'syz.4.7729': attribute type 1 has an invalid length. [ 779.902032][T15441] net_ratelimit: 29 callbacks suppressed [ 779.902051][T15441] bond8: (slave bridge8): failed to get link speed/duplex [ 780.071013][ T3361] bond8: (slave bridge8): failed to get link speed/duplex [ 780.088279][T29861] pim6reg1: entered promiscuous mode [ 780.101928][T29861] pim6reg1: entered allmulticast mode [ 780.146992][T29861] __nla_validate_parse: 20 callbacks suppressed [ 780.147010][T29861] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7733'. [ 780.291020][T15441] bond8: (slave bridge8): failed to get link speed/duplex [ 780.317886][T29874] netlink: 104 bytes leftover after parsing attributes in process `syz.0.7737'. [ 780.434025][ T36] bond8: (slave bridge8): failed to get link speed/duplex [ 780.580618][ T3361] bond8: (slave bridge8): failed to get link speed/duplex [ 780.710167][ T3361] bond8: (slave bridge8): failed to get link speed/duplex [ 780.902592][T29904] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7748'. [ 780.912622][ T3361] bond8: (slave bridge8): failed to get link speed/duplex [ 780.934898][T29907] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7749'. [ 781.032524][T29908] netlink: 'syz.4.7748': attribute type 21 has an invalid length. [ 781.050931][T10591] bond8: (slave bridge8): failed to get link speed/duplex [ 781.192229][T10591] bond8: (slave bridge8): failed to get link speed/duplex [ 781.330470][ T36] bond8: (slave bridge8): failed to get link speed/duplex [ 781.661824][T29943] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.7759'. [ 781.899674][T29951] netlink: 104 bytes leftover after parsing attributes in process `syz.4.7763'. [ 781.924542][T29953] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7764'. [ 782.259473][T29960] netlink: 44 bytes leftover after parsing attributes in process `syz.0.7765'. [ 782.830927][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 782.992748][T29988] netlink: 'syz.2.7777': attribute type 1 has an invalid length. [ 783.004645][T29987] netlink: 104 bytes leftover after parsing attributes in process `syz.4.7776'. [ 783.193389][T29988] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 783.606738][T30017] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 783.631758][T30018] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7788'. [ 783.669528][T30020] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 783.816143][T30029] netlink: 'syz.2.7794': attribute type 1 has an invalid length. [ 783.825205][T30029] netlink: 'syz.2.7794': attribute type 2 has an invalid length. [ 783.931532][T30030] bond16: entered allmulticast mode [ 784.514237][ T30] audit: type=1107 audit(1777338985.112:11): pid=30064 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='íc”š²àÄUd [ 784.514237][ T30] [EǧÇÖŠ´Šs—éÞpuda¤Q­êˆT-ñÖ¸À¢CéS¼ìè”Ê›£¬û«ï`9Hn1ÿÕOÓÿƒýÎí=Îëä¤E [ 784.514237][ T30] cÇ,âÈöß¼›¶ì=q!@êG[ _KÈÿ«­m¸h¡à¦N4ÓÊiÙôe2áñ«xY€$ö®Y²E`Ö’p' [ 784.618157][ T30] audit: type=1107 audit(1777338985.112:12): pid=30064 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='íc”š²àÄUd [ 784.618157][ T30] [EǧÇÖŠ´Šs—éÞpuda¤Q­êˆT-ñÖ¸À¢CéS¼ìè”Ê›£¬û«ï`9Hn1ÿÕOÓÿƒýÎí=Îëä¤E [ 784.618157][ T30] cÇ,âÈöß¼›¶ì=q!@êG[ _KÈÿ«­m¸h¡à¦N4ÓÊiÙôe2áñ«xY€$ö®Y²E`Ö’p' [ 784.932560][T27357] net_ratelimit: 28 callbacks suppressed [ 784.932576][T27357] bond8: (slave bridge8): failed to get link speed/duplex [ 785.093761][T27356] bond8: (slave bridge8): failed to get link speed/duplex [ 785.216455][T30107] __nla_validate_parse: 6 callbacks suppressed [ 785.216474][T30107] netlink: 124 bytes leftover after parsing attributes in process `syz.0.7819'. [ 785.243054][ T111] bond8: (slave bridge8): failed to get link speed/duplex [ 785.320833][T30113] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7820'. [ 785.370340][ T48] bond8: (slave bridge8): failed to get link speed/duplex [ 785.510264][T10591] bond8: (slave bridge8): failed to get link speed/duplex [ 785.651832][T27356] bond8: (slave bridge8): failed to get link speed/duplex [ 785.780126][T10591] bond8: (slave bridge8): failed to get link speed/duplex [ 785.829856][T30146] netlink: 'syz.4.7831': attribute type 1 has an invalid length. [ 785.899139][T30149] netlink: 104 bytes leftover after parsing attributes in process `syz.2.7832'. [ 785.910389][T10591] bond8: (slave bridge8): failed to get link speed/duplex [ 785.933253][T30150] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7833'. [ 785.971340][T30150] openvswitch: netlink: Flow actions attr not present in new flow. [ 786.040586][ T48] bond8: (slave bridge8): failed to get link speed/duplex [ 786.043369][T30156] netlink: 'syz.4.7836': attribute type 4 has an invalid length. [ 786.090001][T30156] netlink: 17 bytes leftover after parsing attributes in process `syz.4.7836'. [ 786.114413][T30159] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7837'. [ 786.148966][T30161] netlink: 'syz.1.7838': attribute type 12 has an invalid length. [ 786.315263][T30169] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7841'. [ 786.356007][T30176] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7844'. [ 786.527567][T30184] netlink: 104 bytes leftover after parsing attributes in process `syz.0.7847'. [ 786.557850][T30187] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7846'. [ 787.198717][T30224] netlink: 'syz.1.7860': attribute type 5 has an invalid length. [ 787.949491][T30268] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 789.054712][T30307] bond14: entered promiscuous mode [ 789.069289][T30307] 8021q: adding VLAN 0 to HW filter on device bond14 [ 789.688266][T30342] Cannot find add_set index 46338 as target [ 789.712213][T30341] Cannot find add_set index 46338 as target [ 789.962509][ T48] net_ratelimit: 30 callbacks suppressed [ 789.962529][ T48] bond8: (slave bridge8): failed to get link speed/duplex [ 790.101386][T27357] bond8: (slave bridge8): failed to get link speed/duplex [ 790.323783][T30380] __nla_validate_parse: 25 callbacks suppressed [ 790.323806][T30380] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7913'. [ 790.340150][ T36] bond8: (slave bridge8): failed to get link speed/duplex [ 790.516019][T30387] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7914'. [ 790.563491][T30387] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7914'. [ 790.596502][ T48] bond8: (slave bridge8): failed to get link speed/duplex [ 790.612725][T30389] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7915'. [ 790.632189][T30389] netlink: 3 bytes leftover after parsing attributes in process `syz.3.7915'. [ 790.689512][T30391] srh_mt6_check: 23 callbacks suppressed [ 790.689528][T30391] ip6t_srh: unknown srh invflags 4000 [ 790.735560][T10591] bond8: (slave bridge8): failed to get link speed/duplex [ 790.841831][T30400] netlink: 'syz.2.7919': attribute type 21 has an invalid length. [ 790.865489][T30400] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 790.880227][T12975] bond8: (slave bridge8): failed to get link speed/duplex [ 790.896831][T30405] netlink: 256 bytes leftover after parsing attributes in process `syz.0.7921'. [ 790.907033][T30405] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7921'. [ 791.032668][T12975] bond8: (slave bridge8): failed to get link speed/duplex [ 791.041310][T30410] netlink: 'syz.1.7923': attribute type 10 has an invalid length. [ 791.131759][T30413] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7927'. [ 791.161212][ T36] bond8: (slave bridge8): failed to get link speed/duplex [ 791.177138][T30418] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 791.224187][T30419] netlink: 'syz.0.7926': attribute type 2 has an invalid length. [ 791.313530][ T3361] bond8: (slave bridge8): failed to get link speed/duplex [ 791.318097][T30425] netlink: 'syz.4.7929': attribute type 1 has an invalid length. [ 791.344976][T30428] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7930'. [ 791.366041][T30428] netlink: 3 bytes leftover after parsing attributes in process `syz.2.7930'. [ 791.397340][T30425] bond17: entered promiscuous mode [ 791.408431][T30425] 8021q: adding VLAN 0 to HW filter on device bond17 [ 791.418506][T30427] netlink: 'syz.4.7929': attribute type 4 has an invalid length. [ 791.453467][T30427] netlink: 'syz.4.7929': attribute type 4 has an invalid length. [ 791.462977][ T3361] bond8: (slave bridge8): failed to get link speed/duplex [ 791.490914][T30427] netlink: 'syz.4.7929': attribute type 4 has an invalid length. [ 791.499124][T30427] netlink: 'syz.4.7929': attribute type 4 has an invalid length. [ 791.507221][T30427] netlink: 'syz.4.7929': attribute type 4 has an invalid length. [ 791.519654][T30427] netlink: 'syz.4.7929': attribute type 4 has an invalid length. [ 791.566445][T30425] bridge17: entered promiscuous mode [ 791.583400][T30425] bond17: (slave bridge17): Enslaving as a backup interface with an up link [ 791.687456][T30440] block nbd0: not configured, cannot reconfigure [ 791.778193][T30444] netlink: 'syz.1.7936': attribute type 11 has an invalid length. [ 791.983574][T30455] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 793.244483][T30517] FAULT_INJECTION: forcing a failure. [ 793.244483][T30517] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 793.278796][T30517] CPU: 0 UID: 0 PID: 30517 Comm: syz.2.7961 Not tainted syzkaller #0 PREEMPT(full) [ 793.278824][T30517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 793.278836][T30517] Call Trace: [ 793.278845][T30517] [ 793.278854][T30517] dump_stack_lvl+0xe8/0x150 [ 793.278883][T30517] should_fail_ex+0x412/0x560 [ 793.278914][T30517] _copy_from_user+0x2d/0xb0 [ 793.278944][T30517] ___sys_sendmsg+0x1c6/0x360 [ 793.278970][T30517] ? __lock_acquire+0x6b5/0x2cf0 [ 793.278997][T30517] ? __pfx____sys_sendmsg+0x10/0x10 [ 793.279058][T30517] ? __fget_files+0x2a/0x420 [ 793.279083][T30517] ? __fget_files+0x3a0/0x420 [ 793.279118][T30517] __x64_sys_sendmsg+0x1bd/0x2a0 [ 793.279148][T30517] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 793.279184][T30517] ? __pfx_ksys_write+0x10/0x10 [ 793.279222][T30517] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 793.279244][T30517] do_syscall_64+0x15f/0xf80 [ 793.279266][T30517] ? trace_irq_disable+0x3b/0x140 [ 793.279296][T30517] ? clear_bhb_loop+0x40/0x90 [ 793.279321][T30517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 793.279341][T30517] RIP: 0033:0x7f5b00b9cdd9 [ 793.279361][T30517] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 793.279378][T30517] RSP: 002b:00007f5b01aca028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 793.279400][T30517] RAX: ffffffffffffffda RBX: 00007f5b00e15fa0 RCX: 00007f5b00b9cdd9 [ 793.279415][T30517] RDX: 0000000000004080 RSI: 0000200000000000 RDI: 0000000000000003 [ 793.279429][T30517] RBP: 00007f5b01aca090 R08: 0000000000000000 R09: 0000000000000000 [ 793.279442][T30517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 793.279455][T30517] R13: 00007f5b00e16038 R14: 00007f5b00e15fa0 R15: 00007ffe26d1a448 [ 793.279495][T30517] [ 793.834603][T30504] ipvlan2: entered promiscuous mode [ 794.191522][T30539] veth0: entered promiscuous mode [ 794.221318][T30539] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 794.246661][T30539] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 794.265034][T30546] FAULT_INJECTION: forcing a failure. [ 794.265034][T30546] name failslab, interval 1, probability 0, space 0, times 0 [ 794.265636][T30539] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 794.343625][T30546] CPU: 1 UID: 0 PID: 30546 Comm: syz.4.7972 Not tainted syzkaller #0 PREEMPT(full) [ 794.343654][T30546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 794.343669][T30546] Call Trace: [ 794.343678][T30546] [ 794.343688][T30546] dump_stack_lvl+0xe8/0x150 [ 794.343720][T30546] should_fail_ex+0x412/0x560 [ 794.343754][T30546] should_failslab+0xa8/0x100 [ 794.343792][T30546] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 794.343824][T30546] ? __alloc_skb+0x186/0x7d0 [ 794.343848][T30546] ? __alloc_skb+0x1d0/0x7d0 [ 794.343870][T30546] ? __local_bh_enable_ip+0xd0/0x130 [ 794.343900][T30546] __alloc_skb+0x1d0/0x7d0 [ 794.343931][T30546] netlink_sendmsg+0x5d4/0xb40 [ 794.343969][T30546] ? __pfx_netlink_sendmsg+0x10/0x10 [ 794.344001][T30546] ? aa_sock_msg_perm+0xf1/0x1b0 [ 794.344032][T30546] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 794.344066][T30546] ____sys_sendmsg+0x972/0x9f0 [ 794.344094][T30546] ? __might_fault+0xaf/0x130 [ 794.344129][T30546] ? __pfx_____sys_sendmsg+0x10/0x10 [ 794.344168][T30546] ? import_iovec+0x73/0xa0 [ 794.344203][T30546] ___sys_sendmsg+0x2a5/0x360 [ 794.344231][T30546] ? __lock_acquire+0x6b5/0x2cf0 [ 794.344261][T30546] ? __pfx____sys_sendmsg+0x10/0x10 [ 794.344328][T30546] ? __fget_files+0x2a/0x420 [ 794.344354][T30546] ? __fget_files+0x3a0/0x420 [ 794.344393][T30546] __x64_sys_sendmsg+0x1bd/0x2a0 [ 794.344431][T30546] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 794.344464][T30546] ? __pfx_ksys_write+0x10/0x10 [ 794.344500][T30546] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 794.344522][T30546] do_syscall_64+0x15f/0xf80 [ 794.344543][T30546] ? trace_irq_disable+0x3b/0x140 [ 794.344572][T30546] ? clear_bhb_loop+0x40/0x90 [ 794.344595][T30546] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 794.344614][T30546] RIP: 0033:0x7fa54e99cdd9 [ 794.344632][T30546] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 794.344649][T30546] RSP: 002b:00007fa54f8ed028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 794.344671][T30546] RAX: ffffffffffffffda RBX: 00007fa54ec15fa0 RCX: 00007fa54e99cdd9 [ 794.344685][T30546] RDX: 0000000000004080 RSI: 0000200000000000 RDI: 0000000000000003 [ 794.344698][T30546] RBP: 00007fa54f8ed090 R08: 0000000000000000 R09: 0000000000000000 [ 794.344709][T30546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 794.344720][T30546] R13: 00007fa54ec16038 R14: 00007fa54ec15fa0 R15: 00007fffc7357368 [ 794.344759][T30546] [ 794.894689][T30567] bond0: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 794.994906][T30536] veth0: left promiscuous mode [ 795.073474][T10587] net_ratelimit: 22 callbacks suppressed [ 795.073493][T10587] bond8: (slave bridge8): failed to get link speed/duplex [ 795.233705][ T36] bond8: (slave bridge8): failed to get link speed/duplex [ 795.370537][ T3361] bond8: (slave bridge8): failed to get link speed/duplex [ 795.419227][T30592] FAULT_INJECTION: forcing a failure. [ 795.419227][T30592] name failslab, interval 1, probability 0, space 0, times 0 [ 795.437210][T30592] CPU: 0 UID: 0 PID: 30592 Comm: syz.0.7986 Not tainted syzkaller #0 PREEMPT(full) [ 795.437236][T30592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 795.437248][T30592] Call Trace: [ 795.437256][T30592] [ 795.437264][T30592] dump_stack_lvl+0xe8/0x150 [ 795.437291][T30592] should_fail_ex+0x412/0x560 [ 795.437339][T30592] should_failslab+0xa8/0x100 [ 795.437373][T30592] __kmalloc_cache_noprof+0x88/0x660 [ 795.437402][T30592] ? __hw_addr_create+0x60/0x250 [ 795.437433][T30592] __hw_addr_create+0x60/0x250 [ 795.437456][T30592] ? stack_depot_init+0x36/0x1a0 [ 795.437484][T30592] __hw_addr_add_ex+0x1c2/0x520 [ 795.437523][T30592] dev_addr_init+0x15e/0x240 [ 795.437553][T30592] ? __pfx_dev_addr_init+0x10/0x10 [ 795.437582][T30592] ? alloc_netdev_mqs+0xa8/0x1210 [ 795.437619][T30592] alloc_netdev_mqs+0x2b3/0x1210 [ 795.437646][T30592] ? __pfx_macvlan_setup+0x10/0x10 [ 795.437683][T30592] rtnl_create_link+0x31f/0xd70 [ 795.437720][T30592] rtnl_newlink_create+0x277/0xb70 [ 795.437747][T30592] ? __pfx___nla_validate_parse+0x10/0x10 [ 795.437785][T30592] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 795.437815][T30592] ? __pfx___mutex_lock+0x10/0x10 [ 795.437851][T30592] ? ns_capable+0x89/0xe0 [ 795.437877][T30592] rtnl_newlink+0x166a/0x1bb0 [ 795.437916][T30592] ? __pfx_rtnl_newlink+0x10/0x10 [ 795.437936][T30592] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 795.438016][T30592] ? kasan_quarantine_put+0xbb/0x1f0 [ 795.438046][T30592] ? lockdep_hardirqs_on+0x7a/0x110 [ 795.438074][T30592] ? nlmon_xmit+0xb0/0x100 [ 795.438098][T30592] ? kmem_cache_free+0x182/0x650 [ 795.438140][T30592] ? __lock_acquire+0x6b5/0x2cf0 [ 795.438169][T30592] ? __dev_queue_xmit+0x2b6/0x3950 [ 795.438203][T30592] ? __local_bh_enable_ip+0xd0/0x130 [ 795.438226][T30592] ? lockdep_hardirqs_on+0x7a/0x110 [ 795.438249][T30592] ? __dev_queue_xmit+0x2b6/0x3950 [ 795.438277][T30592] ? __local_bh_enable_ip+0xd0/0x130 [ 795.438297][T30592] ? __dev_queue_xmit+0x2b6/0x3950 [ 795.438333][T30592] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 795.438375][T30592] ? __pfx_rtnl_newlink+0x10/0x10 [ 795.438399][T30592] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 795.438427][T30592] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 795.438452][T30592] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 795.438474][T30592] ? ref_tracker_free+0x693/0x840 [ 795.438506][T30592] ? __pfx_ref_tracker_free+0x10/0x10 [ 795.438546][T30592] netlink_rcv_skb+0x232/0x4b0 [ 795.438585][T30592] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 795.438610][T30592] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 795.438647][T30592] ? netlink_deliver_tap+0x2e/0x1b0 [ 795.438688][T30592] ? netlink_deliver_tap+0x2e/0x1b0 [ 795.438716][T30592] netlink_unicast+0x75c/0x8e0 [ 795.438747][T30592] netlink_sendmsg+0x813/0xb40 [ 795.438780][T30592] ? __pfx_netlink_sendmsg+0x10/0x10 [ 795.438807][T30592] ? aa_sock_msg_perm+0xf1/0x1b0 [ 795.438834][T30592] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 795.438864][T30592] ____sys_sendmsg+0x972/0x9f0 [ 795.438889][T30592] ? __might_fault+0xaf/0x130 [ 795.438920][T30592] ? __pfx_____sys_sendmsg+0x10/0x10 [ 795.438954][T30592] ? import_iovec+0x73/0xa0 [ 795.438985][T30592] ___sys_sendmsg+0x2a5/0x360 [ 795.439009][T30592] ? __lock_acquire+0x6b5/0x2cf0 [ 795.439035][T30592] ? __pfx____sys_sendmsg+0x10/0x10 [ 795.439096][T30592] ? __fget_files+0x2a/0x420 [ 795.439119][T30592] ? __fget_files+0x3a0/0x420 [ 795.439152][T30592] __x64_sys_sendmsg+0x1bd/0x2a0 [ 795.439180][T30592] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 795.439215][T30592] ? __pfx_ksys_write+0x10/0x10 [ 795.439250][T30592] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 795.439272][T30592] do_syscall_64+0x15f/0xf80 [ 795.439293][T30592] ? trace_irq_disable+0x3b/0x140 [ 795.439322][T30592] ? clear_bhb_loop+0x40/0x90 [ 795.439347][T30592] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 795.439366][T30592] RIP: 0033:0x7fbb5919cdd9 [ 795.439385][T30592] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 795.439402][T30592] RSP: 002b:00007fbb5a036028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 795.439422][T30592] RAX: ffffffffffffffda RBX: 00007fbb59415fa0 RCX: 00007fbb5919cdd9 [ 795.439437][T30592] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000004 [ 795.439449][T30592] RBP: 00007fbb5a036090 R08: 0000000000000000 R09: 0000000000000000 [ 795.439461][T30592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 795.439473][T30592] R13: 00007fbb59416038 R14: 00007fbb59415fa0 R15: 00007ffd0411c358 [ 795.439503][T30592] [ 795.938368][ T48] bond8: (slave bridge8): failed to get link speed/duplex [ 796.060113][T27356] bond8: (slave bridge8): failed to get link speed/duplex [ 796.242217][T12975] bond8: (slave bridge8): failed to get link speed/duplex [ 796.297525][T30618] validate_nla: 33 callbacks suppressed [ 796.297543][T30618] netlink: 'syz.0.7990': attribute type 10 has an invalid length. [ 796.362834][ T36] bond8: (slave bridge8): failed to get link speed/duplex [ 796.501761][T27356] bond8: (slave bridge8): failed to get link speed/duplex [ 796.521527][T30626] tipc: Enabled bearer , priority 10 [ 796.747693][T12975] bond8: (slave bridge8): failed to get link speed/duplex [ 796.771112][T30642] __nla_validate_parse: 8 callbacks suppressed [ 796.771131][T30642] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7998'. [ 796.802016][T30642] openvswitch: netlink: Flow actions attr not present in new flow. [ 797.239672][T30662] netlink: 'syz.2.8007': attribute type 2 has an invalid length. [ 797.278183][T30662] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8007'. [ 797.296962][T30663] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 797.326261][T30664] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8006'. [ 797.489859][T30676] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8012'. [ 797.547698][T30680] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8013'. [ 797.564216][T30679] netlink: 44 bytes leftover after parsing attributes in process `syz.0.8010'. [ 797.582872][T30680] netlink: 'syz.1.8013': attribute type 5 has an invalid length. [ 797.613945][T30680] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8013'. [ 797.677062][ T5736] tipc: Node number set to 4143189273 [ 797.709236][T30685] xt_CT: No such helper "snmp_trap" [ 797.902821][T30698] netlink: 256 bytes leftover after parsing attributes in process `syz.4.8017'. [ 797.999244][T30703] netlink: 'syz.1.8019': attribute type 10 has an invalid length. [ 798.312624][T30719] netlink: 'syz.1.8023': attribute type 1 has an invalid length. [ 798.368951][T30723] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8024'. [ 798.447431][T30722] netlink: 'syz.2.8025': attribute type 1 has an invalid length. [ 798.466064][T30727] FAULT_INJECTION: forcing a failure. [ 798.466064][T30727] name failslab, interval 1, probability 0, space 0, times 0 [ 798.517035][T30722] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8025'. [ 798.531141][T30727] CPU: 1 UID: 0 PID: 30727 Comm: syz.3.8026 Not tainted syzkaller #0 PREEMPT(full) [ 798.531184][T30727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 798.531197][T30727] Call Trace: [ 798.531205][T30727] [ 798.531214][T30727] dump_stack_lvl+0xe8/0x150 [ 798.531242][T30727] should_fail_ex+0x412/0x560 [ 798.531291][T30727] should_failslab+0xa8/0x100 [ 798.531327][T30727] __kvmalloc_node_noprof+0x178/0x8a0 [ 798.531373][T30727] ? alloc_netdev_mqs+0x8fb/0x1210 [ 798.531412][T30727] ? __asan_memset+0x22/0x50 [ 798.531440][T30727] alloc_netdev_mqs+0x8fb/0x1210 [ 798.531476][T30727] rtnl_create_link+0x31f/0xd70 [ 798.531513][T30727] rtnl_newlink_create+0x277/0xb70 [ 798.531538][T30727] ? __pfx___nla_validate_parse+0x10/0x10 [ 798.531578][T30727] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 798.531608][T30727] ? __pfx___mutex_lock+0x10/0x10 [ 798.531642][T30727] ? ns_capable+0x89/0xe0 [ 798.531668][T30727] rtnl_newlink+0x166a/0x1bb0 [ 798.531706][T30727] ? __pfx_rtnl_newlink+0x10/0x10 [ 798.531735][T30727] ? __lock_acquire+0x6b5/0x2cf0 [ 798.531761][T30727] ? __lock_acquire+0x6b5/0x2cf0 [ 798.531792][T30727] ? unwind_next_frame+0xa6/0x2550 [ 798.531825][T30727] ? unwind_next_frame+0xa6/0x2550 [ 798.531853][T30727] ? is_bpf_text_address+0x26/0x2b0 [ 798.531887][T30727] ? is_bpf_text_address+0x26/0x2b0 [ 798.531914][T30727] ? __lock_acquire+0x6b5/0x2cf0 [ 798.531940][T30727] ? kernel_text_address+0xa5/0xe0 [ 798.531970][T30727] ? __kernel_text_address+0xd/0x30 [ 798.531998][T30727] ? unwind_get_return_address+0x4d/0x90 [ 798.532023][T30727] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 798.532054][T30727] ? arch_stack_walk+0xfb/0x150 [ 798.532090][T30727] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 798.532134][T30727] ? __pfx_rtnl_newlink+0x10/0x10 [ 798.532175][T30727] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 798.532196][T30727] ? kmem_cache_alloc_node_noprof+0x384/0x690 [ 798.532226][T30727] ? netlink_sendmsg+0x5d4/0xb40 [ 798.532255][T30727] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 798.532278][T30727] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 798.532305][T30727] ? __lock_acquire+0x6b5/0x2cf0 [ 798.532342][T30727] netlink_rcv_skb+0x232/0x4b0 [ 798.532368][T30727] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 798.532404][T30727] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 798.532445][T30727] ? netlink_deliver_tap+0x2e/0x1b0 [ 798.532483][T30727] ? netlink_deliver_tap+0x2e/0x1b0 [ 798.532513][T30727] netlink_unicast+0x75c/0x8e0 [ 798.532546][T30727] netlink_sendmsg+0x813/0xb40 [ 798.532581][T30727] ? __pfx_netlink_sendmsg+0x10/0x10 [ 798.532611][T30727] ? aa_sock_msg_perm+0xf1/0x1b0 [ 798.532639][T30727] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 798.532671][T30727] ____sys_sendmsg+0x972/0x9f0 [ 798.532696][T30727] ? __might_fault+0xaf/0x130 [ 798.532730][T30727] ? __pfx_____sys_sendmsg+0x10/0x10 [ 798.532765][T30727] ? import_iovec+0x73/0xa0 [ 798.532797][T30727] ___sys_sendmsg+0x2a5/0x360 [ 798.532822][T30727] ? __lock_acquire+0x6b5/0x2cf0 [ 798.532849][T30727] ? __pfx____sys_sendmsg+0x10/0x10 [ 798.532910][T30727] ? __fget_files+0x2a/0x420 [ 798.532935][T30727] ? __fget_files+0x3a0/0x420 [ 798.532970][T30727] __x64_sys_sendmsg+0x1bd/0x2a0 [ 798.533000][T30727] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 798.533036][T30727] ? __pfx_ksys_write+0x10/0x10 [ 798.533075][T30727] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 798.533098][T30727] do_syscall_64+0x15f/0xf80 [ 798.533120][T30727] ? trace_irq_disable+0x3b/0x140 [ 798.533164][T30727] ? clear_bhb_loop+0x40/0x90 [ 798.533209][T30727] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 798.533232][T30727] RIP: 0033:0x7f446359cdd9 [ 798.533252][T30727] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 798.533272][T30727] RSP: 002b:00007f446449a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 798.533296][T30727] RAX: ffffffffffffffda RBX: 00007f4463815fa0 RCX: 00007f446359cdd9 [ 798.533313][T30727] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000004 [ 798.533327][T30727] RBP: 00007f446449a090 R08: 0000000000000000 R09: 0000000000000000 [ 798.533341][T30727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 798.533355][T30727] R13: 00007f4463816038 R14: 00007f4463815fa0 R15: 00007ffe1fca0e48 [ 798.533391][T30727] [ 799.306319][T30754] Cannot find del_set index 0 as target [ 800.307222][T30798] syz1: rxe_newlink: already configured on bond_slave_1 [ 800.490714][ T3361] net_ratelimit: 23 callbacks suppressed [ 800.490732][ T3361] bond8: (slave bridge8): failed to get link speed/duplex [ 800.542990][ T5634] block nbd0: Receive control failed (result -32) [ 800.578512][T30808] netlink: 'syz.3.8052': attribute type 33 has an invalid length. [ 800.748297][T30808] bond13: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 800.767812][T30808] bond13 (unregistering): Released all slaves [ 800.880180][ T3361] bond8: (slave bridge8): failed to get link speed/duplex [ 801.021298][T12975] bond8: (slave bridge8): failed to get link speed/duplex [ 801.161480][ T36] bond8: (slave bridge8): failed to get link speed/duplex [ 801.300284][ T3361] bond8: (slave bridge8): failed to get link speed/duplex [ 801.410253][ T36] bond8: (slave bridge8): failed to get link speed/duplex [ 801.449635][T30845] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 801.519082][T30849] ip6erspan0: entered allmulticast mode [ 801.582029][T27356] bond8: (slave bridge8): failed to get link speed/duplex [ 801.731356][T27356] bond8: (slave bridge8): failed to get link speed/duplex [ 801.861901][ T36] bond8: (slave bridge8): failed to get link speed/duplex [ 801.985011][T30837] netlink: 'syz.0.8062': attribute type 10 has an invalid length. [ 801.994063][T30837] __nla_validate_parse: 8 callbacks suppressed [ 801.994083][T30837] netlink: 228 bytes leftover after parsing attributes in process `syz.0.8062'. [ 802.168769][T30868] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8072'. [ 802.251109][T30870] netlink: 'syz.3.8073': attribute type 3 has an invalid length. [ 802.294681][T30870] netlink: 244 bytes leftover after parsing attributes in process `syz.3.8073'. [ 802.399868][T30878] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8075'. [ 802.433694][T30878] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8075'. [ 802.458138][T30878] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8075'. [ 802.779306][T30893] vlan1: entered allmulticast mode [ 802.798318][T30893] veth0_vlan: entered allmulticast mode [ 802.981776][T30901] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.8086'. [ 802.998563][T30903] FAULT_INJECTION: forcing a failure. [ 802.998563][T30903] name failslab, interval 1, probability 0, space 0, times 0 [ 803.035304][T30903] CPU: 0 UID: 0 PID: 30903 Comm: syz.3.8087 Not tainted syzkaller #0 PREEMPT(full) [ 803.035329][T30903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 803.035341][T30903] Call Trace: [ 803.035349][T30903] [ 803.035358][T30903] dump_stack_lvl+0xe8/0x150 [ 803.035385][T30903] should_fail_ex+0x412/0x560 [ 803.035414][T30903] should_failslab+0xa8/0x100 [ 803.035445][T30903] __kvmalloc_node_noprof+0x178/0x8a0 [ 803.035473][T30903] ? alloc_netdev_mqs+0xce1/0x1210 [ 803.035502][T30903] ? alloc_netdev_mqs+0xc51/0x1210 [ 803.035533][T30903] alloc_netdev_mqs+0xce1/0x1210 [ 803.035567][T30903] rtnl_create_link+0x31f/0xd70 [ 803.035601][T30903] rtnl_newlink_create+0x277/0xb70 [ 803.035626][T30903] ? __pfx___nla_validate_parse+0x10/0x10 [ 803.035667][T30903] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 803.035694][T30903] ? __pfx___mutex_lock+0x10/0x10 [ 803.035728][T30903] ? ns_capable+0x89/0xe0 [ 803.035751][T30903] rtnl_newlink+0x166a/0x1bb0 [ 803.035787][T30903] ? __pfx_rtnl_newlink+0x10/0x10 [ 803.035814][T30903] ? __lock_acquire+0x6b5/0x2cf0 [ 803.035838][T30903] ? __lock_acquire+0x6b5/0x2cf0 [ 803.035868][T30903] ? unwind_next_frame+0xa6/0x2550 [ 803.035898][T30903] ? unwind_next_frame+0xa6/0x2550 [ 803.035924][T30903] ? is_bpf_text_address+0x26/0x2b0 [ 803.035961][T30903] ? is_bpf_text_address+0x26/0x2b0 [ 803.035986][T30903] ? __lock_acquire+0x6b5/0x2cf0 [ 803.036028][T30903] ? kernel_text_address+0xa5/0xe0 [ 803.036058][T30903] ? __kernel_text_address+0xd/0x30 [ 803.036086][T30903] ? unwind_get_return_address+0x4d/0x90 [ 803.036111][T30903] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 803.036142][T30903] ? arch_stack_walk+0xfb/0x150 [ 803.036178][T30903] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 803.036217][T30903] ? __pfx_rtnl_newlink+0x10/0x10 [ 803.036240][T30903] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 803.036261][T30903] ? kmem_cache_alloc_node_noprof+0x384/0x690 [ 803.036288][T30903] ? netlink_sendmsg+0x5d4/0xb40 [ 803.036315][T30903] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 803.036337][T30903] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 803.036361][T30903] ? __lock_acquire+0x6b5/0x2cf0 [ 803.036396][T30903] netlink_rcv_skb+0x232/0x4b0 [ 803.036421][T30903] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 803.036446][T30903] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 803.036484][T30903] ? netlink_deliver_tap+0x2e/0x1b0 [ 803.036507][T30903] ? netlink_deliver_tap+0x2e/0x1b0 [ 803.036538][T30903] netlink_unicast+0x75c/0x8e0 [ 803.036571][T30903] netlink_sendmsg+0x813/0xb40 [ 803.036605][T30903] ? __pfx_netlink_sendmsg+0x10/0x10 [ 803.036633][T30903] ? aa_sock_msg_perm+0xf1/0x1b0 [ 803.036661][T30903] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 803.036702][T30903] ____sys_sendmsg+0x972/0x9f0 [ 803.036726][T30903] ? __might_fault+0xaf/0x130 [ 803.036756][T30903] ? __pfx_____sys_sendmsg+0x10/0x10 [ 803.036790][T30903] ? import_iovec+0x73/0xa0 [ 803.036820][T30903] ___sys_sendmsg+0x2a5/0x360 [ 803.036842][T30903] ? __lock_acquire+0x6b5/0x2cf0 [ 803.036867][T30903] ? __pfx____sys_sendmsg+0x10/0x10 [ 803.036926][T30903] ? __fget_files+0x2a/0x420 [ 803.036953][T30903] ? __fget_files+0x3a0/0x420 [ 803.036986][T30903] __x64_sys_sendmsg+0x1bd/0x2a0 [ 803.037013][T30903] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 803.037047][T30903] ? __pfx_ksys_write+0x10/0x10 [ 803.037083][T30903] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 803.037104][T30903] do_syscall_64+0x15f/0xf80 [ 803.037125][T30903] ? trace_irq_disable+0x3b/0x140 [ 803.037153][T30903] ? clear_bhb_loop+0x40/0x90 [ 803.037176][T30903] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 803.037195][T30903] RIP: 0033:0x7f446359cdd9 [ 803.037213][T30903] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 803.037229][T30903] RSP: 002b:00007f446449a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 803.037250][T30903] RAX: ffffffffffffffda RBX: 00007f4463815fa0 RCX: 00007f446359cdd9 [ 803.037264][T30903] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000004 [ 803.037276][T30903] RBP: 00007f446449a090 R08: 0000000000000000 R09: 0000000000000000 [ 803.037288][T30903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 803.037299][T30903] R13: 00007f4463816038 R14: 00007f4463815fa0 R15: 00007ffe1fca0e48 [ 803.037331][T30903] [ 803.696033][T30911] netlink: 576 bytes leftover after parsing attributes in process `syz.3.8089'. [ 803.721863][T30917] netlink: 4100 bytes leftover after parsing attributes in process `syz.2.8093'. [ 803.787650][T30919] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8094'. [ 804.190139][T30936] bond0 (unregistering): Released all slaves [ 804.203370][T30942] FAULT_INJECTION: forcing a failure. [ 804.203370][T30942] name failslab, interval 1, probability 0, space 0, times 0 [ 804.217320][T30942] CPU: 0 UID: 0 PID: 30942 Comm: syz.4.8100 Not tainted syzkaller #0 PREEMPT(full) [ 804.217344][T30942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 804.217359][T30942] Call Trace: [ 804.217367][T30942] [ 804.217375][T30942] dump_stack_lvl+0xe8/0x150 [ 804.217402][T30942] should_fail_ex+0x412/0x560 [ 804.217432][T30942] should_failslab+0xa8/0x100 [ 804.217463][T30942] __kvmalloc_node_noprof+0x178/0x8a0 [ 804.217491][T30942] ? alloc_netdev_mqs+0xce1/0x1210 [ 804.217521][T30942] ? alloc_netdev_mqs+0xc51/0x1210 [ 804.217544][T30942] alloc_netdev_mqs+0xce1/0x1210 [ 804.217568][T30942] rtnl_create_link+0x31f/0xd70 [ 804.217593][T30942] rtnl_newlink_create+0x277/0xb70 [ 804.217611][T30942] ? __pfx___nla_validate_parse+0x10/0x10 [ 804.217634][T30942] ? __mutex_lock+0x608/0x1550 [ 804.217652][T30942] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 804.217671][T30942] ? __pfx___mutex_lock+0x10/0x10 [ 804.217694][T30942] ? ns_capable+0x89/0xe0 [ 804.217736][T30942] rtnl_newlink+0x166a/0x1bb0 [ 804.217771][T30942] ? __pfx_rtnl_newlink+0x10/0x10 [ 804.217785][T30942] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 804.217827][T30942] ? kasan_quarantine_put+0xbb/0x1f0 [ 804.217846][T30942] ? lockdep_hardirqs_on+0x7a/0x110 [ 804.217863][T30942] ? nlmon_xmit+0xb0/0x100 [ 804.217878][T30942] ? kmem_cache_free+0x182/0x650 [ 804.217905][T30942] ? __lock_acquire+0x6b5/0x2cf0 [ 804.217923][T30942] ? __dev_queue_xmit+0x2b6/0x3950 [ 804.217943][T30942] ? __local_bh_enable_ip+0xd0/0x130 [ 804.217958][T30942] ? lockdep_hardirqs_on+0x7a/0x110 [ 804.217972][T30942] ? __dev_queue_xmit+0x2b6/0x3950 [ 804.217989][T30942] ? __local_bh_enable_ip+0xd0/0x130 [ 804.218001][T30942] ? __dev_queue_xmit+0x2b6/0x3950 [ 804.218024][T30942] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 804.218049][T30942] ? __pfx_rtnl_newlink+0x10/0x10 [ 804.218064][T30942] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 804.218081][T30942] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 804.218096][T30942] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 804.218109][T30942] ? ref_tracker_free+0x693/0x840 [ 804.218128][T30942] ? __pfx_ref_tracker_free+0x10/0x10 [ 804.218151][T30942] netlink_rcv_skb+0x232/0x4b0 [ 804.218186][T30942] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 804.218210][T30942] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 804.218249][T30942] ? netlink_deliver_tap+0x2e/0x1b0 [ 804.218265][T30942] ? netlink_deliver_tap+0x2e/0x1b0 [ 804.218284][T30942] netlink_unicast+0x75c/0x8e0 [ 804.218306][T30942] netlink_sendmsg+0x813/0xb40 [ 804.218328][T30942] ? __pfx_netlink_sendmsg+0x10/0x10 [ 804.218346][T30942] ? aa_sock_msg_perm+0xf1/0x1b0 [ 804.218365][T30942] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 804.218385][T30942] ____sys_sendmsg+0x972/0x9f0 [ 804.218423][T30942] ? __might_fault+0xaf/0x130 [ 804.218446][T30942] ? __pfx_____sys_sendmsg+0x10/0x10 [ 804.218498][T30942] ? import_iovec+0x73/0xa0 [ 804.218523][T30942] ___sys_sendmsg+0x2a5/0x360 [ 804.218541][T30942] ? __lock_acquire+0x6b5/0x2cf0 [ 804.218561][T30942] ? __pfx____sys_sendmsg+0x10/0x10 [ 804.218607][T30942] ? __fget_files+0x2a/0x420 [ 804.218625][T30942] ? __fget_files+0x3a0/0x420 [ 804.218650][T30942] __x64_sys_sendmsg+0x1bd/0x2a0 [ 804.218672][T30942] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 804.218699][T30942] ? __pfx_ksys_write+0x10/0x10 [ 804.218727][T30942] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 804.218743][T30942] do_syscall_64+0x15f/0xf80 [ 804.218760][T30942] ? trace_irq_disable+0x3b/0x140 [ 804.218783][T30942] ? clear_bhb_loop+0x40/0x90 [ 804.218807][T30942] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 804.218822][T30942] RIP: 0033:0x7fa54e99cdd9 [ 804.218837][T30942] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 804.218850][T30942] RSP: 002b:00007fa54f8ed028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 804.218866][T30942] RAX: ffffffffffffffda RBX: 00007fa54ec15fa0 RCX: 00007fa54e99cdd9 [ 804.218877][T30942] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000004 [ 804.218887][T30942] RBP: 00007fa54f8ed090 R08: 0000000000000000 R09: 0000000000000000 [ 804.218896][T30942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 804.218905][T30942] R13: 00007fa54ec16038 R14: 00007fa54ec15fa0 R15: 00007fffc7357368 [ 804.218929][T30942] [ 804.897554][T30957] syzkaller1: entered promiscuous mode [ 804.903196][T30957] syzkaller1: entered allmulticast mode [ 805.312788][T30968] syzkaller0: entered promiscuous mode [ 805.325399][T30968] syzkaller0: entered allmulticast mode [ 805.691370][T31001] net_ratelimit: 24 callbacks suppressed [ 805.691388][T31001] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 807.314995][T30995] __nla_validate_parse: 7 callbacks suppressed [ 807.315018][T30995] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8115'. [ 807.330636][T11459] bond8: (slave bridge8): failed to get link speed/duplex [ 807.355118][T30995] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8115'. [ 807.450751][ T36] bond8: (slave bridge8): failed to get link speed/duplex [ 807.474362][T30995] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8115'. [ 807.477862][T31004] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.8118'. [ 807.503241][T30995] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8115'. [ 807.570341][ T36] bond8: (slave bridge8): failed to get link speed/duplex [ 807.701120][T10587] bond8: (slave bridge8): failed to get link speed/duplex [ 807.768211][T31018] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8123'. [ 807.820427][ T36] bond8: (slave bridge8): failed to get link speed/duplex [ 807.941320][T31027] netlink: 'syz.1.8124': attribute type 9 has an invalid length. [ 807.954088][ T48] bond8: (slave bridge8): failed to get link speed/duplex [ 808.058256][T31033] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8128'. [ 808.130126][T27356] bond8: (slave bridge8): failed to get link speed/duplex [ 808.204582][T31042] netlink: 56 bytes leftover after parsing attributes in process `syz.0.8131'. [ 808.256682][T11459] bond8: (slave bridge8): failed to get link speed/duplex [ 808.394102][T11459] bond8: (slave bridge8): failed to get link speed/duplex [ 808.464108][T31052] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8135'. [ 808.687239][T31062] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8138'. [ 808.859103][T31072] netlink: 'syz.4.8142': attribute type 1 has an invalid length. [ 808.957708][T31072] 8021q: adding VLAN 0 to HW filter on device bond18 [ 809.089180][T31072] syzkaller0: entered promiscuous mode [ 809.127258][T31072] syzkaller0: entered allmulticast mode [ 809.188263][T31072] vlan3: entered allmulticast mode [ 809.198444][T31072] veth0_to_bond: entered allmulticast mode [ 809.231693][T31095] netlink: 'syz.2.8145': attribute type 10 has an invalid length. [ 809.248268][T31072] bond18: (slave vlan3): Enslaving as an active interface with a down link [ 809.857263][T31122] netlink: 'syz.0.8156': attribute type 4 has an invalid length. [ 809.977473][T31127] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 810.317139][T31139] netlink: 'syz.2.8166': attribute type 33 has an invalid length. [ 810.424919][T31139] bond10: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 810.460921][T31139] bond10 (unregistering): Released all slaves [ 810.801182][T11459] net_ratelimit: 16 callbacks suppressed [ 810.801202][T11459] bond8: (slave bridge8): failed to get link speed/duplex [ 810.816197][T31171] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 810.950449][T11459] bond8: (slave bridge8): failed to get link speed/duplex [ 811.090142][T10587] bond8: (slave bridge8): failed to get link speed/duplex [ 811.199182][T31189] FAULT_INJECTION: forcing a failure. [ 811.199182][T31189] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 811.240196][ T3361] bond8: (slave bridge8): failed to get link speed/duplex [ 811.262742][T31191] Cannot find add_set index 0 as target [ 811.273466][T31189] CPU: 0 UID: 0 PID: 31189 Comm: syz.2.8182 Not tainted syzkaller #0 PREEMPT(full) [ 811.273494][T31189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 811.273509][T31189] Call Trace: [ 811.273519][T31189] [ 811.273529][T31189] dump_stack_lvl+0xe8/0x150 [ 811.273559][T31189] should_fail_ex+0x412/0x560 [ 811.273601][T31189] _copy_to_user+0x31/0xb0 [ 811.273636][T31189] simple_read_from_buffer+0xe1/0x170 [ 811.273670][T31189] proc_fail_nth_read+0x1bb/0x230 [ 811.273703][T31189] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 811.273737][T31189] ? rw_verify_area+0x2a6/0x4d0 [ 811.273767][T31189] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 811.273798][T31189] vfs_read+0x20c/0xa70 [ 811.273835][T31189] ? __pfx___mutex_lock+0x10/0x10 [ 811.273863][T31189] ? __pfx_vfs_read+0x10/0x10 [ 811.273897][T31189] ? __fget_files+0x2a/0x420 [ 811.273929][T31189] ? __fget_files+0x3a0/0x420 [ 811.273955][T31189] ? __fget_files+0x2a/0x420 [ 811.273993][T31189] ksys_read+0x150/0x270 [ 811.274027][T31189] ? __pfx_ksys_read+0x10/0x10 [ 811.274069][T31189] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 811.274095][T31189] do_syscall_64+0x15f/0xf80 [ 811.274120][T31189] ? trace_irq_disable+0x3b/0x140 [ 811.274153][T31189] ? clear_bhb_loop+0x40/0x90 [ 811.274185][T31189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 811.274208][T31189] RIP: 0033:0x7f5b00b5d60e [ 811.274228][T31189] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 811.274248][T31189] RSP: 002b:00007f5b01ac9fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 811.274271][T31189] RAX: ffffffffffffffda RBX: 00007f5b01aca6c0 RCX: 00007f5b00b5d60e [ 811.274288][T31189] RDX: 000000000000000f RSI: 00007f5b01aca0a0 RDI: 0000000000000006 [ 811.274303][T31189] RBP: 00007f5b01aca090 R08: 0000000000000000 R09: 0000000000000000 [ 811.274317][T31189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 811.274331][T31189] R13: 00007f5b00e16038 R14: 00007f5b00e15fa0 R15: 00007ffe26d1a448 [ 811.274368][T31189] [ 811.620504][ T3361] bond8: (slave bridge8): failed to get link speed/duplex [ 811.730804][ T48] bond8: (slave bridge8): failed to get link speed/duplex [ 811.845510][T31206] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 811.878204][ T36] bond8: (slave bridge8): failed to get link speed/duplex [ 812.010897][T11459] bond8: (slave bridge8): failed to get link speed/duplex [ 812.122926][ T3361] bond8: (slave bridge8): failed to get link speed/duplex [ 812.282344][T10587] bond8: (slave bridge8): failed to get link speed/duplex [ 812.330557][T31229] syzkaller0: entered promiscuous mode [ 812.352061][T31229] syzkaller0: entered allmulticast mode [ 812.944586][T31258] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 813.112030][T31269] Cannot find map_set index 135 as target [ 813.452610][T31287] __nla_validate_parse: 12 callbacks suppressed [ 813.452632][T31287] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8214'. [ 813.483132][T31289] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8215'. [ 813.550245][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 813.609091][T31293] netlink: 'syz.1.8216': attribute type 1 has an invalid length. [ 813.697181][T31293] bond0: entered promiscuous mode [ 813.706673][T31293] 8021q: adding VLAN 0 to HW filter on device bond0 [ 813.745126][T31303] netlink: 'syz.2.8220': attribute type 21 has an invalid length. [ 813.823653][T31307] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8216'. [ 813.898841][T31301] ipvlan0: entered allmulticast mode [ 813.929706][T31301] bond0: entered allmulticast mode [ 813.952324][T31314] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8222'. [ 813.966856][T31303] netlink: 'syz.2.8220': attribute type 6 has an invalid length. [ 813.990830][T31303] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8220'. [ 814.000163][T31314] netlink: 3 bytes leftover after parsing attributes in process `syz.4.8222'. [ 814.024985][T31293] ipvlan1: entered allmulticast mode [ 814.047868][T31318] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 814.057420][T31315] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8223'. [ 814.094985][T31315] netlink: 2 bytes leftover after parsing attributes in process `syz.0.8223'. [ 814.156847][T31317] vlan3: entered promiscuous mode [ 814.177169][T31317] bridge0: entered promiscuous mode [ 814.362218][T31330] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.8229'. [ 814.467662][T31335] Cannot find map_set index 135 as target [ 814.607651][T31340] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8234'. [ 815.539964][T31381] ip6erspan1: entered allmulticast mode [ 815.901042][ T36] net_ratelimit: 50 callbacks suppressed [ 815.901077][ T36] bond8: (slave bridge8): failed to get link speed/duplex [ 816.159068][T31411] tipc: Enabled bearer , priority 0 [ 816.304968][T31418] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 816.329472][T31411] syzkaller0: entered promiscuous mode [ 816.343249][T31411] syzkaller0: entered allmulticast mode [ 816.366238][T31411] tipc: Resetting bearer [ 816.445672][T31410] tipc: Resetting bearer [ 816.695273][T31435] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 818.480662][T31410] tipc: Disabling bearer [ 818.510166][ T48] bond8: (slave bridge8): failed to get link speed/duplex [ 818.632588][ T48] bond8: (slave bridge8): failed to get link speed/duplex [ 818.729263][T31448] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 818.791359][ T48] bond8: (slave bridge8): failed to get link speed/duplex [ 818.971163][ T111] bond8: (slave bridge8): failed to get link speed/duplex [ 819.039365][T31463] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 819.097551][T31463] xt_hashlimit: size too large, truncated to 1048576 [ 819.117018][T10591] bond8: (slave bridge8): failed to get link speed/duplex [ 819.243117][T27356] bond8: (slave bridge8): failed to get link speed/duplex [ 819.394461][ T111] bond8: (slave bridge8): failed to get link speed/duplex [ 819.476009][T31475] __nla_validate_parse: 6 callbacks suppressed [ 819.476027][T31475] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8277'. [ 819.521186][ T48] bond8: (slave bridge8): failed to get link speed/duplex [ 819.594177][T31477] netlink: 'syz.4.8278': attribute type 21 has an invalid length. [ 819.613718][T31477] IPv6: NLM_F_CREATE should be specified when creating new route [ 819.641284][ T111] bond8: (slave bridge8): failed to get link speed/duplex [ 819.662803][T31477] netlink: 104 bytes leftover after parsing attributes in process `syz.4.8278'. [ 820.086561][T31499] Cannot find map_set index 135 as target [ 820.189814][T31504] netlink: 'syz.1.8289': attribute type 2 has an invalid length. [ 820.403283][T31513] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8293'. [ 820.425931][T31511] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8291'. [ 820.467299][T31511] netlink: 'syz.3.8291': attribute type 21 has an invalid length. [ 820.521528][T31511] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8291'. [ 820.586605][T31521] FAULT_INJECTION: forcing a failure. [ 820.586605][T31521] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 820.616372][T31521] CPU: 0 UID: 0 PID: 31521 Comm: syz.4.8295 Not tainted syzkaller #0 PREEMPT(full) [ 820.616397][T31521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 820.616410][T31521] Call Trace: [ 820.616419][T31521] [ 820.616427][T31521] dump_stack_lvl+0xe8/0x150 [ 820.616457][T31521] should_fail_ex+0x412/0x560 [ 820.616487][T31521] _copy_from_user+0x2d/0xb0 [ 820.616517][T31521] ___sys_sendmsg+0x1c6/0x360 [ 820.616542][T31521] ? __lock_acquire+0x6b5/0x2cf0 [ 820.616569][T31521] ? __pfx____sys_sendmsg+0x10/0x10 [ 820.616600][T31521] ? kstrtouint+0x6e/0xe0 [ 820.616648][T31521] ? __fget_files+0x2a/0x420 [ 820.616671][T31521] ? __fget_files+0x3a0/0x420 [ 820.616705][T31521] __sys_sendmmsg+0x27c/0x4e0 [ 820.616745][T31521] ? __pfx___sys_sendmmsg+0x10/0x10 [ 820.616770][T31521] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 820.616851][T31521] ? ksys_write+0x242/0x270 [ 820.616885][T31521] ? __pfx_ksys_write+0x10/0x10 [ 820.616923][T31521] __x64_sys_sendmmsg+0xa0/0xc0 [ 820.616950][T31521] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 820.616974][T31521] do_syscall_64+0x15f/0xf80 [ 820.616997][T31521] ? trace_irq_disable+0x3b/0x140 [ 820.617029][T31521] ? clear_bhb_loop+0x40/0x90 [ 820.617055][T31521] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 820.617077][T31521] RIP: 0033:0x7fa54e99cdd9 [ 820.617097][T31521] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 820.617118][T31521] RSP: 002b:00007fa54f8ed028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 820.617142][T31521] RAX: ffffffffffffffda RBX: 00007fa54ec15fa0 RCX: 00007fa54e99cdd9 [ 820.617157][T31521] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 820.617173][T31521] RBP: 00007fa54f8ed090 R08: 0000000000000000 R09: 0000000000000000 [ 820.617187][T31521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 820.617200][T31521] R13: 00007fa54ec16038 R14: 00007fa54ec15fa0 R15: 00007fffc7357368 [ 820.617235][T31521] [ 821.040148][T11459] net_ratelimit: 8 callbacks suppressed [ 821.040167][T11459] bond8: (slave bridge8): failed to get link speed/duplex [ 821.203764][ T48] bond8: (slave bridge8): failed to get link speed/duplex [ 821.350771][T11459] bond8: (slave bridge8): failed to get link speed/duplex [ 821.480388][T12975] bond8: (slave bridge8): failed to get link speed/duplex [ 821.615884][T12975] bond8: (slave bridge8): failed to get link speed/duplex [ 821.675550][T31566] syzkaller0: entered promiscuous mode [ 821.696559][T31566] syzkaller0: entered allmulticast mode [ 821.727662][T31566] SET target dimension over the limit! [ 821.740994][T10587] bond8: (slave bridge8): failed to get link speed/duplex [ 821.778498][T31566] simple: basic_1 [ 821.784023][T31566] simple: basic_2 [ 821.787701][T31566] simple: basic_3 [ 821.791416][T31566] simple: basic_4 [ 821.795086][T31566] simple: basic_5 [ 821.798764][T31566] simple: basic_6 [ 821.802474][T31566] simple: basic_7 [ 821.806146][T31566] simple: basic_8 [ 821.809806][T31566] simple: basic_9 [ 821.813523][T31566] simple: basic_10 [ 821.817283][T31566] simple: basic_11 [ 821.821074][T31566] simple: basic_12 [ 821.824838][T31566] simple: basic_13 [ 821.828598][T31566] simple: basic_14 [ 821.832404][T31566] simple: basic_15 [ 821.836171][T31566] simple: basic_16 [ 821.840060][T31566] simple: basic_17 [ 821.843831][T31566] 0: reclassify loop, rule prio 0, protocol 800 [ 821.866752][T12975] bond8: (slave bridge8): failed to get link speed/duplex [ 822.247415][ T48] bond8: (slave bridge8): failed to get link speed/duplex [ 822.339468][T31589] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8320'. [ 822.371842][T10587] bond8: (slave bridge8): failed to get link speed/duplex [ 822.427661][T31592] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8322'. [ 822.473337][T31592] netlink: 'syz.0.8322': attribute type 30 has an invalid length. [ 822.478791][T31593] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 822.563486][T31603] sctp: [Deprecated]: syz.3.8326 (pid 31603) Use of int in max_burst socket option. [ 822.563486][T31603] Use struct sctp_assoc_value instead [ 822.632381][T31603] pim6reg: entered allmulticast mode [ 822.658434][T31605] pim6reg: left allmulticast mode [ 822.727253][T31607] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8327'. [ 822.766520][T31612] xt_nfacct: accounting object `syz1' does not exist [ 822.872739][T31615] veth1_vlan (unregistering): left allmulticast mode [ 822.901875][T31619] FAULT_INJECTION: forcing a failure. [ 822.901875][T31619] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 822.917755][T31620] netlink: 104 bytes leftover after parsing attributes in process `syz.4.8332'. [ 822.943925][T31620] netlink: 208240 bytes leftover after parsing attributes in process `syz.4.8332'. [ 822.954117][T31619] CPU: 0 UID: 0 PID: 31619 Comm: syz.0.8331 Not tainted syzkaller #0 PREEMPT(full) [ 822.954145][T31619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 822.954160][T31619] Call Trace: [ 822.954170][T31619] [ 822.954180][T31619] dump_stack_lvl+0xe8/0x150 [ 822.954216][T31619] should_fail_ex+0x412/0x560 [ 822.954250][T31619] _copy_from_iter+0x1d3/0x1670 [ 822.954283][T31619] ? rcu_is_watching+0x15/0xb0 [ 822.954316][T31619] ? __pfx__copy_from_iter+0x10/0x10 [ 822.954354][T31619] ? netlink_sendmsg+0x650/0xb40 [ 822.954380][T31619] ? skb_put+0x11b/0x210 [ 822.954410][T31619] netlink_sendmsg+0x6c0/0xb40 [ 822.954447][T31619] ? __pfx_netlink_sendmsg+0x10/0x10 [ 822.954477][T31619] ? aa_sock_msg_perm+0xf1/0x1b0 [ 822.954508][T31619] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 822.954543][T31619] ____sys_sendmsg+0x972/0x9f0 [ 822.954571][T31619] ? __might_fault+0xaf/0x130 [ 822.954609][T31619] ? __pfx_____sys_sendmsg+0x10/0x10 [ 822.954647][T31619] ? import_iovec+0x73/0xa0 [ 822.954682][T31619] ___sys_sendmsg+0x2a5/0x360 [ 822.954709][T31619] ? __lock_acquire+0x6b5/0x2cf0 [ 822.954739][T31619] ? __pfx____sys_sendmsg+0x10/0x10 [ 822.954817][T31619] ? __fget_files+0x2a/0x420 [ 822.954859][T31619] ? __fget_files+0x3a0/0x420 [ 822.954891][T31619] __x64_sys_sendmsg+0x1bd/0x2a0 [ 822.954918][T31619] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 822.954970][T31619] ? __pfx_ksys_write+0x10/0x10 [ 822.955008][T31619] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 822.955030][T31619] do_syscall_64+0x15f/0xf80 [ 822.955052][T31619] ? trace_irq_disable+0x3b/0x140 [ 822.955081][T31619] ? clear_bhb_loop+0x40/0x90 [ 822.955107][T31619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 822.955128][T31619] RIP: 0033:0x7fbb5919cdd9 [ 822.955147][T31619] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 822.955165][T31619] RSP: 002b:00007fbb5a036028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 822.955187][T31619] RAX: ffffffffffffffda RBX: 00007fbb59415fa0 RCX: 00007fbb5919cdd9 [ 822.955203][T31619] RDX: 0000000004008840 RSI: 0000200000000000 RDI: 0000000000000003 [ 822.955216][T31619] RBP: 00007fbb5a036090 R08: 0000000000000000 R09: 0000000000000000 [ 822.955229][T31619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 822.955242][T31619] R13: 00007fbb59416038 R14: 00007fbb59415fa0 R15: 00007ffd0411c358 [ 822.955274][T31619] [ 823.384901][T31632] vcan0: tx drop: invalid da for name 0x0000000000000015 [ 823.399863][T31615] tipc: Disabling bearer [ 823.455363][T31615] tipc: Disabling bearer [ 823.483767][T31615] vlan1 (unregistering): left allmulticast mode [ 823.490931][T31615] veth0_vlan (unregistering): left allmulticast mode [ 823.515487][T31621] tipc: Enabling of bearer rejected, failed to enable media [ 823.558839][T31635] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 823.814887][T31647] xt_CT: You must specify a L4 protocol and not use inversions on it [ 824.122260][T31651] syzkaller0: entered promiscuous mode [ 824.138567][T31651] syzkaller0: entered allmulticast mode [ 824.269604][T31668] netlink: 'syz.0.8348': attribute type 30 has an invalid length. [ 824.430140][ C0] ================================================================== [ 824.438345][ C0] BUG: KASAN: slab-use-after-free in ipvlan_hard_header+0xa2/0x120 [ 824.446291][ C0] Read of size 8 at addr ffff88807ab4c010 by task syz-executor/5625 [ 824.454293][ C0] [ 824.456652][ C0] CPU: 0 UID: 0 PID: 5625 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 824.456674][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 824.456685][ C0] Call Trace: [ 824.456693][ C0] [ 824.456701][ C0] dump_stack_lvl+0xe8/0x150 [ 824.456733][ C0] print_address_description+0x55/0x1e0 [ 824.456755][ C0] ? ipvlan_hard_header+0xa2/0x120 [ 824.456783][ C0] print_report+0x58/0x70 [ 824.456800][ C0] kasan_report+0x117/0x150 [ 824.456830][ C0] ? ipvlan_hard_header+0xa2/0x120 [ 824.456862][ C0] ipvlan_hard_header+0xa2/0x120 [ 824.456890][ C0] ? __pfx_ipvlan_hard_header+0x10/0x10 [ 824.456919][ C0] tipc_l2_send_msg+0x31f/0x400 [ 824.456944][ C0] tipc_bearer_xmit_skb+0x2b3/0x400 [ 824.456966][ C0] ? tipc_bearer_xmit_skb+0xa9/0x400 [ 824.456988][ C0] ? __pfx_tipc_bearer_xmit_skb+0x10/0x10 [ 824.457009][ C0] ? tipc_disc_timeout+0x576/0x6f0 [ 824.457031][ C0] ? __local_bh_enable_ip+0xd0/0x130 [ 824.457054][ C0] tipc_disc_timeout+0x595/0x6f0 [ 824.457077][ C0] ? __pfx_tipc_disc_timeout+0x10/0x10 [ 824.457099][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 824.457131][ C0] call_timer_fn+0x192/0x5e0 [ 824.457153][ C0] ? __pfx_tipc_disc_timeout+0x10/0x10 [ 824.457172][ C0] ? call_timer_fn+0xd4/0x5e0 [ 824.457193][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 824.457218][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 824.457236][ C0] ? __pfx_tipc_disc_timeout+0x10/0x10 [ 824.457257][ C0] __run_timer_base+0x652/0x8b0 [ 824.457275][ C0] ? ktime_get+0x45/0x220 [ 824.457308][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 824.457335][ C0] run_timer_softirq+0xb7/0x170 [ 824.457355][ C0] handle_softirqs+0x22a/0x840 [ 824.457375][ C0] ? __irq_exit_rcu+0xca/0x220 [ 824.457398][ C0] __irq_exit_rcu+0xca/0x220 [ 824.457417][ C0] irq_exit_rcu+0x9/0x30 [ 824.457435][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 824.457456][ C0] [ 824.457463][ C0] [ 824.457470][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 824.457491][ C0] RIP: 0010:lock_release+0x2d7/0x3c0 [ 824.457512][ C0] Code: 43 97 11 00 00 00 00 eb b5 e8 45 e3 05 0a f7 c3 00 02 00 00 74 b9 65 48 8b 05 35 fe 96 11 48 3b 44 24 28 75 44 fb 48 83 c4 30 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 9a d5 08 0a cc 48 8d 3d 72 1e 92 [ 824.457530][ C0] RSP: 0018:ffffc90004616b20 EFLAGS: 00000282 [ 824.457548][ C0] RAX: 7cca543a5f2ff500 RBX: 0000000000000202 RCX: 0000000000000046 [ 824.457562][ C0] RDX: 0000000000000001 RSI: ffffffff8e217007 RDI: ffffffff8c28aa60 [ 824.457575][ C0] RBP: ffff888036ddaa78 R08: ffffc90004616c87 R09: 0000000000000000 [ 824.457588][ C0] R10: ffffc90004616c78 R11: fffff520008c2d91 R12: 0000000000000001 [ 824.457602][ C0] R13: 0000000000000001 R14: ffffffff8e95cd60 R15: ffff888036dd9ec0 [ 824.457625][ C0] ? unwind_next_frame+0xa6/0x2550 [ 824.457648][ C0] unwind_next_frame+0x1bba/0x2550 [ 824.457691][ C0] ? unwind_next_frame+0xa6/0x2550 [ 824.457733][ C0] ? vzalloc_noprof+0xb2/0xe0 [ 824.457778][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 824.457808][ C0] arch_stack_walk+0x11b/0x150 [ 824.457835][ C0] ? alloc_counters+0x64/0x5d0 [ 824.457856][ C0] stack_trace_save+0xa9/0x100 [ 824.457885][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 824.457919][ C0] save_stack+0x122/0x230 [ 824.457948][ C0] ? __pfx_save_stack+0x10/0x10 [ 824.457973][ C0] ? post_alloc_hook+0x231/0x280 [ 824.457999][ C0] ? get_page_from_freelist+0x24ba/0x2540 [ 824.458029][ C0] ? __alloc_frozen_pages_noprof+0x18d/0x380 [ 824.458058][ C0] ? alloc_pages_mpol+0x235/0x490 [ 824.458098][ C0] ? alloc_pages_noprof+0xac/0x2a0 [ 824.458126][ C0] ? get_free_pages_noprof+0xf/0x80 [ 824.458153][ C0] ? __kasan_populate_vmalloc+0x38/0x1d0 [ 824.458176][ C0] ? alloc_vmap_area+0xd47/0x1480 [ 824.458198][ C0] ? __get_vm_area_node+0x1f8/0x300 [ 824.458220][ C0] ? __vmalloc_node_range_noprof+0x36a/0x1750 [ 824.458244][ C0] ? vzalloc_noprof+0xb2/0xe0 [ 824.458274][ C0] __set_page_owner+0x8d/0x4c0 [ 824.458301][ C0] ? __pfx___set_page_owner+0x10/0x10 [ 824.458327][ C0] ? seqcount_lockdep_reader_access+0x89/0xc0 [ 824.458350][ C0] ? bad_range+0x8b/0x2c0 [ 824.458373][ C0] post_alloc_hook+0x231/0x280 [ 824.458399][ C0] get_page_from_freelist+0x24ba/0x2540 [ 824.458449][ C0] __alloc_frozen_pages_noprof+0x18d/0x380 [ 824.458480][ C0] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 824.458512][ C0] ? __pfx_policy_nodemask+0x10/0x10 [ 824.458540][ C0] ? kasan_save_track+0x4f/0x80 [ 824.458564][ C0] ? kasan_save_track+0x3e/0x80 [ 824.458587][ C0] ? __kasan_kmalloc+0x93/0xb0 [ 824.458612][ C0] ? __kmalloc_cache_node_noprof+0x3ef/0x6b0 [ 824.458638][ C0] ? __get_vm_area_node+0x13f/0x300 [ 824.458661][ C0] ? vzalloc_noprof+0xb2/0xe0 [ 824.458684][ C0] ? alloc_counters+0x64/0x5d0 [ 824.458701][ C0] ? do_ipt_get_ctl+0xada/0x1240 [ 824.458734][ C0] ? nf_getsockopt+0x26e/0x290 [ 824.458761][ C0] ? ip_getsockopt+0x19e/0x230 [ 824.458778][ C0] ? do_sock_getsockopt+0x51d/0x7e0 [ 824.458803][ C0] alloc_pages_mpol+0x235/0x490 [ 824.458834][ C0] alloc_pages_noprof+0xac/0x2a0 [ 824.458864][ C0] get_free_pages_noprof+0xf/0x80 [ 824.458893][ C0] __kasan_populate_vmalloc+0x38/0x1d0 [ 824.458917][ C0] ? do_raw_spin_unlock+0xf5/0x210 [ 824.458946][ C0] alloc_vmap_area+0xd47/0x1480 [ 824.458977][ C0] ? __pfx_alloc_vmap_area+0x10/0x10 [ 824.458998][ C0] ? __kasan_kmalloc+0x93/0xb0 [ 824.459026][ C0] ? __get_vm_area_node+0x13f/0x300 [ 824.459048][ C0] ? __kmalloc_cache_node_noprof+0x248/0x6b0 [ 824.459074][ C0] ? alloc_counters+0x64/0x5d0 [ 824.459091][ C0] __get_vm_area_node+0x1f8/0x300 [ 824.459117][ C0] __vmalloc_node_range_noprof+0x36a/0x1750 [ 824.459143][ C0] ? alloc_counters+0x64/0x5d0 [ 824.459162][ C0] ? __pfx___mutex_trylock_common+0x10/0x10 [ 824.459193][ C0] ? __mutex_lock+0x319/0x1550 [ 824.459220][ C0] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 824.459247][ C0] ? xt_find_table_lock+0x51/0x3f0 [ 824.459275][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 824.459297][ C0] ? net_generic+0x1e/0x240 [ 824.459322][ C0] ? alloc_counters+0x64/0x5d0 [ 824.459340][ C0] vzalloc_noprof+0xb2/0xe0 [ 824.459364][ C0] ? alloc_counters+0x64/0x5d0 [ 824.459382][ C0] alloc_counters+0x64/0x5d0 [ 824.459402][ C0] ? xt_find_table_lock+0x365/0x3f0 [ 824.459431][ C0] do_ipt_get_ctl+0xada/0x1240 [ 824.459462][ C0] ? do_ip_getsockopt+0x131d/0x1d40 [ 824.459480][ C0] ? __pfx_do_ipt_get_ctl+0x10/0x10 [ 824.459507][ C0] ? do_ip_getsockopt+0x131d/0x1d40 [ 824.459528][ C0] ? __mutex_trylock_common+0x158/0x260 [ 824.459553][ C0] ? __pfx___mutex_trylock_common+0x10/0x10 [ 824.459596][ C0] ? rcu_is_watching+0x15/0xb0 [ 824.459620][ C0] ? trace_contention_end+0x3d/0x140 [ 824.459651][ C0] ? nf_getsockopt+0x224/0x290 [ 824.459683][ C0] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 824.459705][ C0] ? nf_getsockopt+0x34/0x290 [ 824.459740][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 824.459763][ C0] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 824.459789][ C0] ? __might_fault+0xaf/0x130 [ 824.459818][ C0] nf_getsockopt+0x26e/0x290 [ 824.459851][ C0] ip_getsockopt+0x19e/0x230 [ 824.459873][ C0] ? __pfx_ip_getsockopt+0x10/0x10 [ 824.459894][ C0] ? sock_common_getsockopt+0x2d/0xb0 [ 824.459913][ C0] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 824.459933][ C0] do_sock_getsockopt+0x51d/0x7e0 [ 824.459956][ C0] ? __asan_memcpy+0x40/0x70 [ 824.459982][ C0] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 824.460006][ C0] ? fd_install+0x94/0x3d0 [ 824.460040][ C0] __x64_sys_getsockopt+0x1a4/0x240 [ 824.460067][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 824.460089][ C0] do_syscall_64+0x15f/0xf80 [ 824.460109][ C0] ? trace_irq_disable+0x3b/0x140 [ 824.460138][ C0] ? clear_bhb_loop+0x40/0x90 [ 824.460161][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 824.460181][ C0] RIP: 0033:0x7fa54e99e5aa [ 824.460198][ C0] Code: 48 83 ec 10 89 d2 48 63 ff 45 31 c9 6a 2a 45 31 c0 31 c9 e8 d8 99 fb ff 48 83 c4 18 c3 0f 1f 00 49 89 ca b8 37 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 [ 824.460216][ C0] RSP: 002b:00007fffc7356fd8 EFLAGS: 00000202 ORIG_RAX: 0000000000000037 [ 824.460237][ C0] RAX: ffffffffffffffda RBX: 00007fffc7357060 RCX: 00007fa54e99e5aa [ 824.460252][ C0] RDX: 0000000000000041 RSI: 0000000000000000 RDI: 0000000000000003 [ 824.460265][ C0] RBP: 0000000000000003 R08: 00007fffc7356ffc R09: 0000000000000000 [ 824.460278][ C0] R10: 00007fffc7357060 R11: 0000000000000202 R12: 00007fa54ebeb680 [ 824.460292][ C0] R13: 00007fffc7356ffc R14: 0000000000000000 R15: 00007fa54ebed180 [ 824.460315][ C0] [ 824.460323][ C0] [ 825.300444][ C0] Allocated by task 5630: [ 825.304801][ C0] kasan_save_track+0x3e/0x80 [ 825.309516][ C0] __kasan_kmalloc+0x93/0xb0 [ 825.314131][ C0] __kvmalloc_node_noprof+0x528/0x8a0 [ 825.319618][ C0] alloc_netdev_mqs+0xa8/0x1210 [ 825.324577][ C0] rtnl_create_link+0x31f/0xd70 [ 825.329478][ C0] rtnl_newlink_create+0x277/0xb70 [ 825.334622][ C0] rtnl_newlink+0x166a/0x1bb0 [ 825.339317][ C0] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 825.344281][ C0] netlink_rcv_skb+0x232/0x4b0 [ 825.349087][ C0] netlink_unicast+0x75c/0x8e0 [ 825.353873][ C0] netlink_sendmsg+0x813/0xb40 [ 825.358659][ C0] __sys_sendto+0x672/0x710 [ 825.363188][ C0] __x64_sys_sendto+0xde/0x100 [ 825.367980][ C0] do_syscall_64+0x15f/0xf80 [ 825.372585][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 825.378507][ C0] [ 825.380849][ C0] Freed by task 31615: [ 825.384918][ C0] kasan_save_track+0x3e/0x80 [ 825.389616][ C0] kasan_save_free_info+0x46/0x50 [ 825.394663][ C0] __kasan_slab_free+0x5c/0x80 [ 825.399455][ C0] kfree+0x1c5/0x640 [ 825.403358][ C0] device_release+0xc4/0x1f0 [ 825.407963][ C0] kobject_put+0x228/0x560 [ 825.412393][ C0] netdev_run_todo+0xc75/0xde0 [ 825.417188][ C0] rtnl_dellink+0x6a7/0x820 [ 825.421710][ C0] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 825.426658][ C0] netlink_rcv_skb+0x232/0x4b0 [ 825.431464][ C0] netlink_unicast+0x75c/0x8e0 [ 825.436256][ C0] netlink_sendmsg+0x813/0xb40 [ 825.441032][ C0] ____sys_sendmsg+0x972/0x9f0 [ 825.445820][ C0] ___sys_sendmsg+0x2a5/0x360 [ 825.450506][ C0] __x64_sys_sendmsg+0x1bd/0x2a0 [ 825.455458][ C0] do_syscall_64+0x15f/0xf80 [ 825.460062][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 825.465969][ C0] [ 825.468307][ C0] The buggy address belongs to the object at ffff88807ab4c000 [ 825.468307][ C0] which belongs to the cache kmalloc-cg-4k of size 4096 [ 825.482627][ C0] The buggy address is located 16 bytes inside of [ 825.482627][ C0] freed 4096-byte region [ffff88807ab4c000, ffff88807ab4d000) [ 825.496455][ C0] [ 825.498803][ C0] The buggy address belongs to the physical page: [ 825.505242][ C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7ab48 [ 825.514021][ C0] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 825.522536][ C0] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 825.530088][ C0] page_type: f5(slab) [ 825.534085][ C0] raw: 00fff00000000040 ffff88813fe35500 dead000000000100 dead000000000122 [ 825.542682][ C0] raw: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 825.551543][ C0] head: 00fff00000000040 ffff88813fe35500 dead000000000100 dead000000000122 [ 825.560324][ C0] head: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 825.569009][ C0] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 825.577688][ C0] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 825.586422][ C0] page dumped because: kasan: bad access detected [ 825.592847][ C0] page_owner tracks the page as allocated [ 825.598580][ C0] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5630, tgid 5630 (syz-executor), ts 79626211097, free_ts 61473919470 [ 825.619941][ C0] post_alloc_hook+0x231/0x280 [ 825.624738][ C0] get_page_from_freelist+0x24ba/0x2540 [ 825.630329][ C0] __alloc_frozen_pages_noprof+0x18d/0x380 [ 825.636154][ C0] allocate_slab+0x77/0x660 [ 825.640673][ C0] refill_objects+0x339/0x3d0 [ 825.645370][ C0] __pcs_replace_empty_main+0x321/0x720 [ 825.650932][ C0] __kmalloc_node_track_caller_noprof+0x572/0x7b0 [ 825.657454][ C0] kmemdup_noprof+0x2b/0x70 [ 825.661962][ C0] __addrconf_sysctl_register+0xa7/0x4d0 [ 825.667603][ C0] addrconf_sysctl_register+0x168/0x1c0 [ 825.673160][ C0] ipv6_add_dev+0xd26/0x13a0 [ 825.677764][ C0] addrconf_notify+0x771/0x1050 [ 825.682621][ C0] notifier_call_chain+0x1ad/0x3d0 [ 825.687742][ C0] register_netdevice+0x18c9/0x1ec0 [ 825.692960][ C0] veth_newlink+0x67b/0xb70 [ 825.697478][ C0] rtnl_newlink_create+0x329/0xb70 [ 825.702615][ C0] page last free pid 5472 tgid 5472 stack trace: [ 825.708943][ C0] __free_frozen_pages+0xbc7/0xd30 [ 825.714117][ C0] __slab_free+0x274/0x2c0 [ 825.718563][ C0] qlist_free_all+0x99/0x100 [ 825.723171][ C0] kasan_quarantine_reduce+0x148/0x160 [ 825.728677][ C0] __kasan_slab_alloc+0x22/0x80 [ 825.733573][ C0] kmem_cache_alloc_noprof+0x2bc/0x650 [ 825.739067][ C0] vm_area_alloc+0x24/0x140 [ 825.743595][ C0] mmap_region+0x11c6/0x22a0 [ 825.748274][ C0] do_mmap+0xc39/0x10c0 [ 825.752527][ C0] vm_mmap_pgoff+0x2c9/0x4f0 [ 825.757259][ C0] ksys_mmap_pgoff+0x51e/0x760 [ 825.762051][ C0] do_syscall_64+0x15f/0xf80 [ 825.766662][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 825.772575][ C0] [ 825.774917][ C0] Memory state around the buggy address: [ 825.780561][ C0] ffff88807ab4bf00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 825.788657][ C0] ffff88807ab4bf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 825.796728][ C0] >ffff88807ab4c000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 825.804809][ C0] ^ [ 825.809415][ C0] ffff88807ab4c080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 825.817481][ C0] ffff88807ab4c100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 825.825556][ C0] ================================================================== [ 825.833921][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 825.841166][ C0] CPU: 0 UID: 0 PID: 5625 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 825.850653][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 825.860733][ C0] Call Trace: [ 825.864043][ C0] [ 825.866921][ C0] vpanic+0x56c/0xa60 [ 825.870941][ C0] ? __pfx_vpanic+0x10/0x10 [ 825.875477][ C0] ? irqentry_exit+0x218/0x730 [ 825.880271][ C0] panic+0xc5/0xd0 [ 825.884031][ C0] ? __pfx_panic+0x10/0x10 [ 825.888493][ C0] ? ipvlan_hard_header+0xa2/0x120 [ 825.893684][ C0] ? ipvlan_hard_header+0xa2/0x120 [ 825.898843][ C0] check_panic_on_warn+0x89/0xb0 [ 825.903810][ C0] ? ipvlan_hard_header+0xa2/0x120 [ 825.908955][ C0] end_report+0x73/0x170 [ 825.913216][ C0] ? ipvlan_hard_header+0xa2/0x120 [ 825.918347][ C0] kasan_report+0x128/0x150 [ 825.922866][ C0] ? ipvlan_hard_header+0xa2/0x120 [ 825.927998][ C0] ipvlan_hard_header+0xa2/0x120 [ 825.932956][ C0] ? __pfx_ipvlan_hard_header+0x10/0x10 [ 825.938523][ C0] tipc_l2_send_msg+0x31f/0x400 [ 825.943397][ C0] tipc_bearer_xmit_skb+0x2b3/0x400 [ 825.948614][ C0] ? tipc_bearer_xmit_skb+0xa9/0x400 [ 825.953947][ C0] ? __pfx_tipc_bearer_xmit_skb+0x10/0x10 [ 825.959708][ C0] ? tipc_disc_timeout+0x576/0x6f0 [ 825.964872][ C0] ? __local_bh_enable_ip+0xd0/0x130 [ 825.970178][ C0] tipc_disc_timeout+0x595/0x6f0 [ 825.975135][ C0] ? __pfx_tipc_disc_timeout+0x10/0x10 [ 825.980611][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 825.985668][ C0] call_timer_fn+0x192/0x5e0 [ 825.990278][ C0] ? __pfx_tipc_disc_timeout+0x10/0x10 [ 825.995764][ C0] ? call_timer_fn+0xd4/0x5e0 [ 826.000475][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 826.005610][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 826.010826][ C0] ? __pfx_tipc_disc_timeout+0x10/0x10 [ 826.016296][ C0] __run_timer_base+0x652/0x8b0 [ 826.021156][ C0] ? ktime_get+0x45/0x220 [ 826.025511][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 826.030910][ C0] run_timer_softirq+0xb7/0x170 [ 826.035796][ C0] handle_softirqs+0x22a/0x840 [ 826.040580][ C0] ? __irq_exit_rcu+0xca/0x220 [ 826.045375][ C0] __irq_exit_rcu+0xca/0x220 [ 826.049977][ C0] irq_exit_rcu+0x9/0x30 [ 826.054243][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 826.059895][ C0] [ 826.062842][ C0] [ 826.065783][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 826.071784][ C0] RIP: 0010:lock_release+0x2d7/0x3c0 [ 826.077101][ C0] Code: 43 97 11 00 00 00 00 eb b5 e8 45 e3 05 0a f7 c3 00 02 00 00 74 b9 65 48 8b 05 35 fe 96 11 48 3b 44 24 28 75 44 fb 48 83 c4 30 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 9a d5 08 0a cc 48 8d 3d 72 1e 92 [ 826.096729][ C0] RSP: 0018:ffffc90004616b20 EFLAGS: 00000282 [ 826.102806][ C0] RAX: 7cca543a5f2ff500 RBX: 0000000000000202 RCX: 0000000000000046 [ 826.110790][ C0] RDX: 0000000000000001 RSI: ffffffff8e217007 RDI: ffffffff8c28aa60 [ 826.118773][ C0] RBP: ffff888036ddaa78 R08: ffffc90004616c87 R09: 0000000000000000 [ 826.126910][ C0] R10: ffffc90004616c78 R11: fffff520008c2d91 R12: 0000000000000001 [ 826.134900][ C0] R13: 0000000000000001 R14: ffffffff8e95cd60 R15: ffff888036dd9ec0 [ 826.142899][ C0] ? unwind_next_frame+0xa6/0x2550 [ 826.148034][ C0] unwind_next_frame+0x1bba/0x2550 [ 826.153254][ C0] ? unwind_next_frame+0xa6/0x2550 [ 826.158387][ C0] ? vzalloc_noprof+0xb2/0xe0 [ 826.163077][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 826.169254][ C0] arch_stack_walk+0x11b/0x150 [ 826.174045][ C0] ? alloc_counters+0x64/0x5d0 [ 826.178830][ C0] stack_trace_save+0xa9/0x100 [ 826.183611][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 826.189044][ C0] save_stack+0x122/0x230 [ 826.193393][ C0] ? __pfx_save_stack+0x10/0x10 [ 826.198268][ C0] ? post_alloc_hook+0x231/0x280 [ 826.203222][ C0] ? get_page_from_freelist+0x24ba/0x2540 [ 826.208964][ C0] ? __alloc_frozen_pages_noprof+0x18d/0x380 [ 826.214965][ C0] ? alloc_pages_mpol+0x235/0x490 [ 826.220100][ C0] ? alloc_pages_noprof+0xac/0x2a0 [ 826.225245][ C0] ? get_free_pages_noprof+0xf/0x80 [ 826.230470][ C0] ? __kasan_populate_vmalloc+0x38/0x1d0 [ 826.236126][ C0] ? alloc_vmap_area+0xd47/0x1480 [ 826.241194][ C0] ? __get_vm_area_node+0x1f8/0x300 [ 826.246411][ C0] ? __vmalloc_node_range_noprof+0x36a/0x1750 [ 826.252500][ C0] ? vzalloc_noprof+0xb2/0xe0 [ 826.257208][ C0] __set_page_owner+0x8d/0x4c0 [ 826.261989][ C0] ? __pfx___set_page_owner+0x10/0x10 [ 826.267386][ C0] ? seqcount_lockdep_reader_access+0x89/0xc0 [ 826.273472][ C0] ? bad_range+0x8b/0x2c0 [ 826.277827][ C0] post_alloc_hook+0x231/0x280 [ 826.282614][ C0] get_page_from_freelist+0x24ba/0x2540 [ 826.288192][ C0] __alloc_frozen_pages_noprof+0x18d/0x380 [ 826.294024][ C0] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 826.300386][ C0] ? __pfx_policy_nodemask+0x10/0x10 [ 826.305696][ C0] ? kasan_save_track+0x4f/0x80 [ 826.310566][ C0] ? kasan_save_track+0x3e/0x80 [ 826.315444][ C0] ? __kasan_kmalloc+0x93/0xb0 [ 826.320326][ C0] ? __kmalloc_cache_node_noprof+0x3ef/0x6b0 [ 826.326322][ C0] ? __get_vm_area_node+0x13f/0x300 [ 826.331545][ C0] ? vzalloc_noprof+0xb2/0xe0 [ 826.336246][ C0] ? alloc_counters+0x64/0x5d0 [ 826.341030][ C0] ? do_ipt_get_ctl+0xada/0x1240 [ 826.345998][ C0] ? nf_getsockopt+0x26e/0x290 [ 826.350873][ C0] ? ip_getsockopt+0x19e/0x230 [ 826.355661][ C0] ? do_sock_getsockopt+0x51d/0x7e0 [ 826.360883][ C0] alloc_pages_mpol+0x235/0x490 [ 826.365772][ C0] alloc_pages_noprof+0xac/0x2a0 [ 826.370727][ C0] get_free_pages_noprof+0xf/0x80 [ 826.375778][ C0] __kasan_populate_vmalloc+0x38/0x1d0 [ 826.381264][ C0] ? do_raw_spin_unlock+0xf5/0x210 [ 826.386407][ C0] alloc_vmap_area+0xd47/0x1480 [ 826.391276][ C0] ? __pfx_alloc_vmap_area+0x10/0x10 [ 826.396582][ C0] ? __kasan_kmalloc+0x93/0xb0 [ 826.401384][ C0] ? __get_vm_area_node+0x13f/0x300 [ 826.406623][ C0] ? __kmalloc_cache_node_noprof+0x248/0x6b0 [ 826.412631][ C0] ? alloc_counters+0x64/0x5d0 [ 826.417420][ C0] __get_vm_area_node+0x1f8/0x300 [ 826.422506][ C0] __vmalloc_node_range_noprof+0x36a/0x1750 [ 826.428425][ C0] ? alloc_counters+0x64/0x5d0 [ 826.433212][ C0] ? __pfx___mutex_trylock_common+0x10/0x10 [ 826.439132][ C0] ? __mutex_lock+0x319/0x1550 [ 826.443923][ C0] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 826.450281][ C0] ? xt_find_table_lock+0x51/0x3f0 [ 826.455408][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 826.460453][ C0] ? net_generic+0x1e/0x240 [ 826.464970][ C0] ? alloc_counters+0x64/0x5d0 [ 826.469743][ C0] vzalloc_noprof+0xb2/0xe0 [ 826.474266][ C0] ? alloc_counters+0x64/0x5d0 [ 826.479048][ C0] alloc_counters+0x64/0x5d0 [ 826.483677][ C0] ? xt_find_table_lock+0x365/0x3f0 [ 826.488990][ C0] do_ipt_get_ctl+0xada/0x1240 [ 826.493783][ C0] ? do_ip_getsockopt+0x131d/0x1d40 [ 826.499009][ C0] ? __pfx_do_ipt_get_ctl+0x10/0x10 [ 826.504226][ C0] ? do_ip_getsockopt+0x131d/0x1d40 [ 826.509446][ C0] ? __mutex_trylock_common+0x158/0x260 [ 826.515012][ C0] ? __pfx___mutex_trylock_common+0x10/0x10 [ 826.520940][ C0] ? rcu_is_watching+0x15/0xb0 [ 826.525719][ C0] ? trace_contention_end+0x3d/0x140 [ 826.531027][ C0] ? nf_getsockopt+0x224/0x290 [ 826.535807][ C0] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 826.541547][ C0] ? nf_getsockopt+0x34/0x290 [ 826.546255][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 826.551290][ C0] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 826.557325][ C0] ? __might_fault+0xaf/0x130 [ 826.562029][ C0] nf_getsockopt+0x26e/0x290 [ 826.566646][ C0] ip_getsockopt+0x19e/0x230 [ 826.571246][ C0] ? __pfx_ip_getsockopt+0x10/0x10 [ 826.576368][ C0] ? sock_common_getsockopt+0x2d/0xb0 [ 826.581753][ C0] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 826.587652][ C0] do_sock_getsockopt+0x51d/0x7e0 [ 826.592701][ C0] ? __asan_memcpy+0x40/0x70 [ 826.597312][ C0] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 826.602868][ C0] ? fd_install+0x94/0x3d0 [ 826.607305][ C0] __x64_sys_getsockopt+0x1a4/0x240 [ 826.612540][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 826.618634][ C0] do_syscall_64+0x15f/0xf80 [ 826.623231][ C0] ? trace_irq_disable+0x3b/0x140 [ 826.628282][ C0] ? clear_bhb_loop+0x40/0x90 [ 826.632968][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 826.638868][ C0] RIP: 0033:0x7fa54e99e5aa [ 826.643293][ C0] Code: 48 83 ec 10 89 d2 48 63 ff 45 31 c9 6a 2a 45 31 c0 31 c9 e8 d8 99 fb ff 48 83 c4 18 c3 0f 1f 00 49 89 ca b8 37 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 [ 826.662932][ C0] RSP: 002b:00007fffc7356fd8 EFLAGS: 00000202 ORIG_RAX: 0000000000000037 [ 826.671369][ C0] RAX: ffffffffffffffda RBX: 00007fffc7357060 RCX: 00007fa54e99e5aa [ 826.679378][ C0] RDX: 0000000000000041 RSI: 0000000000000000 RDI: 0000000000000003 [ 826.687364][ C0] RBP: 0000000000000003 R08: 00007fffc7356ffc R09: 0000000000000000 [ 826.695353][ C0] R10: 00007fffc7357060 R11: 0000000000000202 R12: 00007fa54ebeb680 [ 826.703337][ C0] R13: 00007fffc7356ffc R14: 0000000000000000 R15: 00007fa54ebed180 [ 826.711350][ C0] [ 826.715283][ C0] Kernel Offset: disabled [ 826.719629][ C0] Rebooting in 86400 seconds..