last executing test programs: 2.706891128s ago: executing program 3 (id=1444): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) socketpair(0x21, 0xb, 0x3, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000340)={'erspan0\x00', &(0x7f00000002c0)={'syztnl0\x00', 0x0, 0x8, 0x700, 0x1, 0x1, {{0x18, 0x4, 0x2, 0x24, 0x60, 0x68, 0x0, 0x1, 0x2f, 0x0, @broadcast, @rand_addr=0x640100fd, {[@rr={0x7, 0xf, 0x6, [@remote, @broadcast, @multicast1]}, @timestamp_addr={0x44, 0x24, 0x36, 0x1, 0x2, [{@broadcast, 0x6}, {@multicast1, 0x8001}, {@loopback, 0x80000000}, {@dev={0xac, 0x14, 0x14, 0x2c}, 0x8}]}, @ssrr={0x89, 0xb, 0xb3, [@broadcast, @remote]}, @timestamp={0x44, 0xc, 0xc0, 0x0, 0x8, [0x1d6, 0xc1]}]}}}}}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21, 0x20}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IGNORE_DF={0x5}]}}}]}, 0x40}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000480)={'gre0\x00', &(0x7f00000006c0)={'sit0\x00', r3, 0x8000, 0x20, 0x7ffffff7, 0xfffffff9, {{0x14, 0x4, 0x2, 0xf, 0x50, 0x66, 0x0, 0xd, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0x3a}, @local, {[@noop, @cipso={0x86, 0x24, 0xffffffffffffffff, [{0x2, 0xc, "4de93bcb31cb937f0f4c"}, {0x0, 0x5, "1f6777"}, {0x7, 0xd, "22386a2ede6e0d60034594"}]}, @lsrr={0x83, 0x17, 0xcc, [@multicast1, @local, @local, @remote, @initdev={0xac, 0x1e, 0x6, 0x0}]}]}}}}}) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000680)={'syztnl2\x00', &(0x7f0000000580)={'tunl0\x00', r3, 0x1, 0x1, 0x800, 0x1, {{0x2a, 0x4, 0x2, 0x2c, 0xa8, 0x66, 0x0, 0x3, 0x4, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x14}, {[@lsrr={0x83, 0xb, 0xb8, [@dev={0xac, 0x14, 0x14, 0x41}, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_prespec={0x44, 0x2c, 0x21, 0x3, 0x3, [{@loopback, 0x2}, {@dev={0xac, 0x14, 0x14, 0x11}, 0x87}, {@dev={0xac, 0x14, 0x14, 0x2b}, 0x9}, {@local, 0xe}, {@multicast1, 0x1}]}, @cipso={0x86, 0x4e, 0x3, [{0x6, 0xc, "91d90efab1fef34000c5"}, {0x1, 0xd, "1e8d156228f2ca1757fc02"}, {0x1, 0x10, "487f0b97f4c0ccbb40b80f63a122"}, {0x0, 0xe, "07293d39b83aaaea7651007e"}, {0x1, 0x3, '^'}, {0x6, 0xe, "994e8ef3e741dbc73ee73fc1"}]}, @timestamp={0x44, 0xc, 0xa, 0x0, 0x2, [0x1, 0xaf08]}]}}}}}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e21}]}}}]}, 0x3c}}, 0x4000) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f0000000180)=r8, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r7}, &(0x7f0000000040), &(0x7f0000000080)=r8}, 0x20) sendmsg$inet(r10, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg(r13, &(0x7f00000039c0)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000180)="6bc3", 0x2}], 0x1, &(0x7f0000001580)=[{0x1010, 0x115, 0x21, "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"}, {0xd0, 0x104, 0x3, "90afb8b4ef5920d0fe5a899b9da8e5238a6f7fe91c8af531afe1d17495091a462bae31130ca82cd6e51d98e6a02bd65fc8f960840a3094178731502a67230830d0aacc16a9c37e14d6be1fb28edd79ab6e9e9edd5bf697a46165aee63037cc81c194015446ee04baf1560f9c530389362bdb5e22f17e169d07d9c2add08cb1a63139a1994823c06be539e2a3920b2e92496c1aaa734c0a2c52de569ff3bd73d0fa6f01649054c3867de5e122f98a9cc66718c74810f582747e"}, {0xf28, 0xff, 0x1, "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"}], 0x2008}}], 0x1, 0x4000) sendmsg$nl_route(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010001d0025bd7000fadbdf2500000000", @ANYRES32=r12, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800", @ANYRES16=r6], 0x44}}, 0x8000) sendmsg$nl_route(r5, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv6_getaddrlabel={0x24, 0x4a, 0x100, 0x70bd25, 0x25dfdbff, {0xa, 0x0, 0x20, 0x0, r12, 0x6}, [@IFAL_LABEL={0x8, 0x2, 0xc}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000010}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x80000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0x7, 0x9, 0x0, 0x2, 0x480010}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xe1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x9, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) 2.382046281s ago: executing program 3 (id=1450): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB='\n\x00\x00\x00\v\x00\x00\x00B\x00\x00\x00>'], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x1005, &(0x7f00000014c0)=""/4101, 0x0, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3f}, 0x94) 2.1737083s ago: executing program 3 (id=1454): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_merged\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_PMK(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, r1, 0x400, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x78}}}}, [@NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "38261096329cf916be8dd04968863ae3"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "099d302a723c7e20ba3e9781c7f3c6ae"}]}, 0x54}, 0x1, 0x0, 0x0, 0x24048014}, 0x81) r2 = accept$nfc_llcp(r0, 0x0, &(0x7f00000001c0)) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000200)=0x0) bind$nfc_llcp(r2, &(0x7f0000000240)={0x27, r3, 0x0, 0x7, 0x5, 0x9, "4b3c965939c5291fc5be7c660e30340b868c33200abc8b9993751d6f9680957de189ca124c9c07e888087476037a59d2f488bbdd33232470125304fe3c12bb", 0x2c}, 0x60) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f00000002c0)={0x1c4, 0x401, 0xb4c, 0xc6, 0x40, 0xa, 0xae3f}, 0xc) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) recvfrom$inet(r4, &(0x7f0000000300)=""/25, 0x19, 0x0, &(0x7f0000000340)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000380)) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_team\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000000) ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f0000000500)=0x20000) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000540)=@req3={0x8d, 0x4, 0x3, 0x7f, 0x0, 0x8, 0x4861dd14}, 0x1c) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000580)) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f00000005c0)={0x8, 0x4, 0x9, 0x2, 0x6b, 0x2, 0x59a2}, 0xc) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000006c0)={'ip6tnl0\x00', &(0x7f0000000640)={'syztnl1\x00', 0x0, 0x4, 0xf7, 0x7, 0x1, 0x11, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x2c}, 0x8000, 0x40, 0x40, 0xed6}}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x23, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x9}, [@exit, @generic={0x4, 0x5, 0x7, 0x7, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000840)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000880)={0x2, 0x6, 0x2, 0x2de}, 0x10, 0x0, 0xffffffffffffffff, 0x1, &(0x7f00000008c0)=[r0, r0, r0], &(0x7f0000000900)=[{0x0, 0x1, 0xf, 0xa}], 0x10, 0x101}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000d80)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000d40)={&(0x7f0000000a00)=@setlink={0x314, 0x13, 0x200, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, 0x20408}, [@IFLA_XDP={0x3c, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r0}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x8}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r0}, @IFLA_XDP_FLAGS={0x8}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r6}, @IFLA_XDP_FLAGS={0x8}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r0}]}, @IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_OKEY={0x8}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x6}]}}}, @IFLA_PHYS_SWITCH_ID={0x7, 0x24, "6e87a8"}, @IFLA_LINKINFO={0x58, 0x12, 0x0, 0x1, @gre={{0x8}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_GRE_TOS={0x5, 0x9, 0x7}, @IFLA_GRE_LOCAL={0x8, 0x6, @local}, @IFLA_GRE_TOS={0x5, 0x9, 0xa}, @IFLA_GRE_ERSPAN_DIR={0x5}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x5}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}, @IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x7f}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x400}]}}}, @IFLA_VFINFO_LIST={0x1fc, 0x16, 0x0, 0x1, [{0xb0, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0x1, 0x3}}, @IFLA_VF_VLAN={0x10, 0x2, {0x5, 0xce4}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x7}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x100, 0x2}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x8100, 0x6}}, @IFLA_VF_VLAN_LIST={0x54, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x0, 0xa65, 0x0, 0x8100}}, {0x14, 0x1, {0xb76, 0x4dc, 0x80000000, 0x88a8}}, {0x14, 0x1, {0x7, 0xc59, 0x7, 0x88a8}}, {0x14, 0x1, {0x81, 0xb9c, 0x2, 0x88a8}}]}, @IFLA_VF_VLAN={0x10, 0x2, {0x1ec9, 0x34, 0xfffffffb}}]}, {0x1c, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0x6, 0x6}}, @IFLA_VF_TRUST={0xc, 0x9, {0x2, 0x6}}]}, {0x70, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x1000, 0x7}}, @IFLA_VF_TRUST={0xc, 0x9, {0x3, 0x4}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x2, 0x62}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x1000, 0x1}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x0, 0xe8}}, @IFLA_VF_TRUST={0xc, 0x9, {0x8, 0x1}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x7fff, 0x9}}]}, {0xbc, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0xb8, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x9, 0x4f9, 0x1, 0x88a8}}, {0x14, 0x1, {0xfd, 0x40c, 0xf6, 0x8100}}, {0x14, 0x1, {0x8, 0x789, 0x7fffffff, 0x8100}}, {0x14, 0x1, {0x3, 0x13f, 0x0, 0x88a8}}, {0x14, 0x1, {0x9, 0xee6, 0x8, 0x8100}}, {0x14, 0x1, {0x2, 0x168, 0x7c0, 0x8100}}, {0x14, 0x1, {0x4, 0x21f, 0x5}}, {0x14, 0x1, {0x8, 0x277, 0x3fef, 0x88a8}}, {0x14, 0x1, {0x0, 0x976, 0x5, 0x88a8}}]}]}]}, @IFLA_EXT_MASK={0x8, 0x1d, 0x30}, @IFLA_IFALIAS={0x14, 0x14, 'geneve1\x00'}, @IFLA_LINKMODE={0x5}, @IFLA_ADDRESS={0xa, 0x1, @random="24eac78d85c8"}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x2bd1ef02}]}, 0x314}, 0x1, 0x0, 0x0, 0x4}, 0x800) r7 = epoll_create1(0x80000) sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f0000000ec0)={&(0x7f0000000dc0), 0xc, &(0x7f0000000e80)={&(0x7f0000000e00)={0x48, r1, 0x10, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x5}}}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3c}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000f40), 0xffffffffffffffff) sendmsg$NFC_CMD_VENDOR(r8, &(0x7f0000001000)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x2c, r9, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x6}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x10001}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8004}, 0x20000000) ioctl$XFS_IOC_GETPARENTS_BY_HANDLE(r0, 0xc040583f, &(0x7f0000001100)={{@align=0x7, {0xbf, 0x10, 0x3, 0x1ff}}, {{[0xd42, 0x7, 0x0, 0x4]}, 0x0, 0x2, 0xd905, 0x0, &(0x7f0000001040)=[{{@align=0x8, {0x1, 0x73, 0x9, 0x655}}, 0x9, 0x0, '-,b:\x00'}, {{@align=0x7ff, {0x7, 0x3, 0x9, 0x9}}, 0x100, 0x0, '\x00'}, {{@align=0x4, {0x8, 0x3, 0x6, 0x7d}}, 0x0, 0x0, '\x00'}, {{@_ha_fsid={[0x80000001, 0x8]}, {0x0, 0xfff, 0x9, 0x2219}}, 0x2, 0x0, 'nfc\x00'}]}}) getsockname(r7, &(0x7f0000001140), &(0x7f00000011c0)=0x80) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000001240), r0) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f0000001300)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x1c, r10, 0x400, 0x70bd2d, 0x25dfdbfd}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000001340)) sendmmsg$alg(r0, &(0x7f0000001780)=[{0x0, 0x0, &(0x7f0000001380), 0x0, &(0x7f00000013c0)=[@op={0x18}, @assoc={0x18, 0x117, 0x4, 0x52b}, @assoc={0x18}, @iv={0xf8, 0x117, 0x2, 0xe2, "7ff474a8e2e1456e6426e277e538dd522105cea29db45ff6e35727d4ff091685305528abae71864d53d0f260b66a5a203ba5354ecb1813f75222270c1ea0a126288649b0fb97f11526acfcf8bf47e2f4dcababf55f98b7fc1bd874e2191697505fe23e2a268a0730957de205b9be0381cb387bf6386065d02cd6337f95d4b822cb8acfd4570336d9eab08c4e8b1fd8f6e908a4337b9ca515386c5ff35a7001273b180c2864ea943c7803bb1e54953a118e3a693337f7f469508a9d847fe81ca328449a55edad3f77c03445a305cea043664e7292668eefbd830a466283c59482b86b"}], 0x140, 0x84}, {0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000001500)="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", 0xfe}, {&(0x7f0000001600)="c795ee56bbc0472a1ebdd1df0a01ef7d14b9dc6cfda7d8fc2bdf96", 0x1b}, {&(0x7f0000001640)="628d4ce2be57eeb110cd98701f9ada36b2cc321aeb9dc97a6b2e8cb294a7ac13351a103ac73b327c40ef62bebc7a51be276568aa05349ff7cec2c7a9ba1b4734b309aaa8c3277e708a96fe8c1221b2ad36c91dcfcb40b99d23a7adbc68f8d4c4665f65378d17f0a5210e1b51f331cf75f44ed46168c3459f859cecc73affbda9", 0x80}, {&(0x7f00000016c0)="ca4dd2e0f86e70d62738275f827d130a56cd6ddda3027fb707637d6dcbed81bfc57432cd9062a74168812b5444423196", 0x30}], 0x4, &(0x7f0000001740)=[@assoc={0x18, 0x117, 0x4, 0x4}, @assoc={0x18, 0x117, 0x4, 0x4a0}], 0x30, 0x80}], 0x2, 0x20008000) sendmmsg(r4, &(0x7f0000001800), 0x0, 0x1) 2.159507408s ago: executing program 2 (id=1455): r0 = socket(0xa, 0x3, 0xff) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000002c0)=0x8120, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r1) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x34, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@nested={0x5, 0x8, 0x0, 0x1, [@generic=',']}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) 2.052433139s ago: executing program 4 (id=1456): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x70bd24, 0x0, {0x2, 0x20, 0x14, 0x0, 0xff, 0x0, 0xff, 0xb, 0x200}, [@RTA_IIF={0x8, 0x3, r2}, @RTA_DST={0x8, 0x1, @multicast1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000004}, 0xea5bc50b619917ee) r3 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r3, &(0x7f0000000140)={&(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x101, @local, 0x6}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000000)="94cc", 0x2}], 0x1}, 0x24009080) sendmsg$kcm(r3, &(0x7f0000000400)={&(0x7f0000000380)=@in6={0xa, 0x4e22, 0x0, @local, 0x575}, 0x80, &(0x7f0000000580)}, 0x20000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'veth0_virt_wifi\x00'}) ioctl$sock_inet_SIOCGIFADDR(r4, 0x8915, &(0x7f0000000040)={'wg2\x00', {0x2, 0x0, @remote}}) 1.969511589s ago: executing program 2 (id=1457): getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, 0x0, &(0x7f0000000340)) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0xfffffff6, @private0, 0x9}]}, &(0x7f0000000080)=0x10) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000200)={0x1f, 0x2, @any, 0x5}, 0xe) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000000)=0x3, 0x4) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000001c0)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)='/', 0x1}], 0x1, 0x0, 0x0, 0x800}, 0x2000c011) recvmsg$unix(r3, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd050007008800000006000540"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x3, 0x6, 0xb83, 0x0, 0x0, {0x1, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x800) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) getpeername(r5, 0x0, &(0x7f0000000700)) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x12, 0x2, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r6}, &(0x7f0000000040), &(0x7f0000000140)}, 0x20) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000000), &(0x7f00000000c0)=0x4) socket$inet6_sctp(0xa, 0x5, 0x84) 1.917910284s ago: executing program 4 (id=1458): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x90) 1.715390581s ago: executing program 1 (id=1462): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x9, 0x4) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff000000007110bb000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) r2 = syz_genetlink_get_family_id$netlbl_cipso(0x0, r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000800)=ANY=[@ANYBLOB="84010000", @ANYRES16=r2, @ANYBLOB="0100d8000000000000000100000004000480080002000100000008000100000000000400088058010c8054000b800800090003"], 0x184}, 0x1, 0x0, 0x0, 0x4}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x8e}, 0x1, 0x0, 0x0, 0x4000850}, 0x4004051) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0xca, &(0x7f0000000640)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x1b, 0xbc, 0x64, 0x0, 0xfb, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x27, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @loopback, @rand_addr=0x640100fe, {[@cipso={0x86, 0x80, 0xffffffffffffffff, [{0x0, 0xe, "08c82ce8da6ee06cb8dd9452"}, {0x7, 0x12, "f1978d7a00000000339ebbc791b73be9"}, {0x1, 0x12, "74b000561de584b703c87214d42243b6"}, {0x0, 0x9, "ae06d30bc224f8"}, {0x2, 0x7, "cfa11cab1a"}, {0x0, 0x10, "84a4913275be675de6a70a05a0dc"}, {0x6, 0xa, "ed54fe6655490000"}, {0x2, 0x12, "73bc23f9ffffffa30900a301c8460028"}, {0x0, 0xc, "c8bf6909a79ea788f03d"}]}, @cipso={0x86, 0x6, 0x20}]}}, "5cb84e09"}}}}}, 0x0) r4 = socket$rxrpc(0x21, 0x2, 0x2) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r5, 0x29, 0x2, &(0x7f00000001c0)=0x7, 0x4) getsockopt$inet6_buf(r5, 0x29, 0x6, &(0x7f0000001500)=""/19, &(0x7f0000000240)=0x13) bind$rxrpc(r4, &(0x7f0000000340)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) r6 = socket$netlink(0x10, 0x3, 0x4) writev(r6, &(0x7f0000000080)=[{&(0x7f0000000180)="580000001400192340834b80040d8c560a117436c379000000007b6fc18d332878e9ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300ffe6e66e7e4acf921bf09cb39fb7f82e21cbea9e86e992", 0x58}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) listen(r4, 0x4) socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) 1.550403153s ago: executing program 4 (id=1464): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x34, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@nested={0x5, 0x8, 0x0, 0x1, [@generic=',']}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64=0x5000000000000000}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) 1.548970068s ago: executing program 1 (id=1465): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f00000001c0)="c2", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003400)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, 0xff}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000080)="0f386bb8", 0x4}], 0x1}}], 0x1, 0x4000) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0xfffffffe}, 0x14) syz_emit_ethernet(0xda, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0) 1.489848751s ago: executing program 1 (id=1466): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000c80), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b26, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="640000001000370403000000ffffffff00000000", @ANYRES32=r2, @ANYBLOB="0b1b050000000000440012800b00010069703667726500003400028008000100", @ANYRES32, @ANYBLOB="14000600fe8000000000000000000000000000aa1400070000000000000000000000000000bb"], 0x64}, 0x1, 0x0, 0x0, 0x48810}, 0x4000010) sendmmsg$inet(r0, &(0x7f0000000440)=[{{&(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="100000000000000000000000070000001c000000000000000011000008000000", @ANYRES32=r2], 0x30}}], 0x1, 0xc0) 1.293752165s ago: executing program 4 (id=1468): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1200000003000000040000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000fdffffffffffffff00"/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r3, &(0x7f0000002680)=[{{&(0x7f0000000000)={0xa, 0x0, 0x2, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000080)="18", 0x1}], 0x1}}, {{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x80000001}, 0x1c, &(0x7f0000000800)=[{&(0x7f0000000240)="00ab0f", 0x3}], 0x1}}], 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x801}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_INFO={0x2c, 0x3, "7339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c700000000000000020000000000000000"}, @NFTA_TARGET_NAME={0x8, 0x1, 'TEE\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) shutdown(r3, 0x1) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x1a, &(0x7f0000000180), &(0x7f0000000100)=0x8) r5 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_int(r5, 0x29, 0x4b, &(0x7f0000000000)=0x2, 0x4) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e22, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r2}, &(0x7f0000000580)=0x2, &(0x7f00000000c0)=r1}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r2, &(0x7f0000000040)}, 0x20) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}, 0x1, 0x0, 0xffffffffffffffa1}, 0x0) 1.293491402s ago: executing program 0 (id=1469): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r3) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e1f, 0x10000, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}, 0x1c) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x4}, {0x0, [0x0, 0x2e]}}, &(0x7f0000000300)=""/211, 0x1c, 0xd3, 0x1, 0x726}, 0x28) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000003c0)='cubic', 0xb) setsockopt$sock_int(r5, 0x1, 0xc, &(0x7f0000000200), 0x4) setsockopt$inet_udp_int(r4, 0x11, 0x65, &(0x7f0000000080)=0x6, 0x4) r6 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3e8, 0x8, 0x70bd2c, 0x25dfdbfe}, 0x10}}, 0x8000) r7 = socket$netlink(0x10, 0x3, 0x6) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0x6}, {0xffff, 0x9}}, [@filter_kind_options=@f_flow={{0x9}, {0x8, 0x2, [@TCA_FLOW_POLICE={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x800) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000800000004000000000000070000000003000000000000080100000000000000000000090200000000002e2e5f"], 0x0, 0x44}, 0x20) r8 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r8, &(0x7f0000000140)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e20, @broadcast}}, 0x24) sendmmsg(r8, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) sendmmsg(r8, &(0x7f0000000300)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000001001000001000000ec"], 0x18, 0x7000000}, 0xf401}], 0x1, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000000)=ANY=[@ANYRESHEX=r3], &(0x7f00000004c0)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x0, 0x0, 0x1, @dev={0xfe, 0x80, '\x00', 0x14}, @remote}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r9, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) close(r8) 1.254501917s ago: executing program 1 (id=1470): r0 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) mmap(&(0x7f000086a000/0x2000)=nil, 0x2000, 0x4, 0xf5cfd0ed62d9e836, 0xffffffffffffffff, 0x2000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x0, 0xca, 0x3, 0x0, 0x1}, 0x50) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r2) ioctl$SIOCSIFHWADDR(r2, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0xf, &(0x7f00000001c0)=@ringbuf={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0x2}, {}, {0x85, 0x0, 0x0, 0x9c}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x3c, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000100)={&(0x7f00000000c0)}) 1.243823539s ago: executing program 3 (id=1471): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r1, &(0x7f00000001c0)={0x11, 0x17, r2, 0x1, 0x7, 0x6, @local}, 0x14) getsockname$packet(r1, &(0x7f00000018c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001880)={&(0x7f0000000100)=ANY=[@ANYBLOB="38000000540001050000000000c4000007008209", @ANYRES32=r3, @ANYRES32=r2, @ANYBLOB="00000001e000030000000000000000000000000008"], 0x38}, 0x1, 0x0, 0x0, 0x881}, 0x4040010) 1.126874766s ago: executing program 0 (id=1472): ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0x0) sendmsg$nfc_llcp(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000180)={0x27, r0, 0xffffffffffffffff, 0x1, 0xfd, 0x5, "8ea9f44a1642ece8ae0145d1397be6e6152711c484a301e422e5f12e608e5897c6f57a8e4d8a1851b7808dab1626d9ff4786c4fc80fd26dba3c60e0803a9b2", 0x39}, 0x60, &(0x7f0000000680)=[{&(0x7f0000000200)}, {&(0x7f0000000280)="9460bb4411e8423f4b40dbae580701d9a620cd7a8fbc7d1c53f8a0086439f672063dd1627169c0", 0x27}, {&(0x7f0000000440)="4b5f614ade674d4dde874753ed5def7659c91073fa236be2fa05cb904b57f86cc5a71762c3c4923f6abdbfe0e28e347be555679ccb8d22535ef42d0339b76b4c95cdaeaa926d8ea1d3d0b0342b8c58f8d6f2fcfa47905478f8459ed355916e69e3f5d90b7ff1699b749d936438555b7b4c1dc4560d4234a79cbeecb3fec5c4cccdcfa91fdbb86558b67978143e19a133f24b1672365ad211d7e0efb3d00e77680ec241a22ece18984a783ec85aab9ad865147bf063ddc60c19865954", 0xbc}, {&(0x7f0000000500)="6714ccbbd4081a547f3890f54920a1eb0dd8c3ab4dd05787da983aacbf164d4e31974ea73e122f170a5577354163253cfe098fd67c1915ae536ea823188ef6e38a7518ce4316d359b0eebb4d5280e479d342b5796587173039152b0a67cd02fb7ec114f3b1e3e0c9cbe91e3d467e231d0e3effb3b882fba3e0bff3f4c730", 0x7e}, {&(0x7f00000005c0)="459db88cdf1c5a96ab90f71989be2970528e8875f15832a47eea8497336fe82afa0db84237f41ad614980315a859d17a967d2f2ed1aefc24fb3b678736d92684a856ce2501279a656c4cfe35eef09b77b9b558257a2f23126ff3ef89cb78e262cfe8ee007b587edb9c0cb5c564476d3e0c02157858ec84f580821cfb8f4fb758026a1cc1b473598849892cb0fcb174814403357b2fb14af3e283b7a6be1155f461ee931da71ee631cee251efacfffc4f7768882225f9453e1c", 0xb9}], 0x5, 0x0, 0x0, 0x40010c0}, 0xc800) r1 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x101, @local, 0x6}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000000)="94cc", 0x2}], 0x1}, 0x24009080) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r2) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x34, r3, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000000}, 0x40) sendmsg$kcm(r1, &(0x7f0000000400)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x8}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000240)="7f00", 0x2}], 0x1}, 0x20000000) 1.069925684s ago: executing program 4 (id=1473): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000001c0000000a"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, 0x0, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r1) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d80)={0x14, r3, 0x1, 0x70bd28, 0x25dfdbfc, {0x1a}}, 0x14}, 0x1, 0x0, 0x0, 0x24000800}, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000080), &(0x7f0000000100)=0x4) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0xf, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x5, 0x7, 0x6, 0x1, 0x5, 0x9}, [@TCA_NETEM_JITTER64={0xc, 0xb, 0xf}, @TCA_NETEM_ECN={0x8}]}}}]}, 0x60}}, 0x4000010) r9 = socket(0x2, 0x80805, 0x0) r10 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(r10, 0x65, 0x5, &(0x7f0000000040)=0x1, 0x4) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) sendmsg$can_raw(r10, &(0x7f0000000000)={&(0x7f00000000c0)={0x1d, r11}, 0x10, &(0x7f00000003c0)={&(0x7f0000000200)=@canfd={{0x3, 0x1, 0x1}, 0x19, 0x3, 0x0, 0x0, "240a86003584b924cac358fd4eb444c5fe6eee297e3a4c67d606757d568df33e2c5213673263b835cf2ba3a79fc2bf9b84364474135f7c9d64abb3c843d4d8be"}, 0x48}, 0x2, 0x0, 0x0, 0x24000884}, 0x30048009) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'ip6tnl0\x00', 0x0, 0x4, 0x3, 0x0, 0x3a81245e, 0x18, @rand_addr=' \x01\x00', @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x20, 0x0, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000240)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x8, 0x3, 0x2, @mcast1, @private2, 0x8020, 0x10, 0xc, 0xfff}}) r12 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r12, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) connect$can_bcm(r12, &(0x7f0000000bc0)={0x1d, r13}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000300)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0], 0x0, 0x9a, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0x3e, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000640)) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000f40)={0x0, @local}, &(0x7f0000000f80)=0xc) 1.034910739s ago: executing program 1 (id=1474): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'batadv_slave_0\x00', &(0x7f0000000280)=@ethtool_cmd={0x23, 0x103, 0x0, 0x389, 0x8, 0x0, 0x1, 0x6, 0x0, 0x7, 0xc32, 0x7fffffff, 0xff00, 0x13, 0x5, 0x9, [0xe, 0xfb]}}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001000010826bd7000fedbdf2500000000", @ANYRES32=r2, @ANYBLOB="00000100072000fa08000a00", @ANYRES32], 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x40800) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r6 = accept4$vsock_stream(r4, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @hyper}, 0x10, 0x80000) connect$vsock_stream(r6, &(0x7f0000000240)={0x28, 0x0, 0x0, @host}, 0x10) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180200000004000000000000000000008500000036000000850000000700000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r9, r8, 0x25, 0x0, @val=@tracing}, 0x40) syz_emit_ethernet(0x11dc0, &(0x7f0000000640)={@random="5b37182347bc", @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "9d0080", 0xd4c, 0x3a, 0xff, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, {[@routing={0x73, 0x4, 0x0, 0x80, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2]}, @dstopts={0x84, 0x1a0, '\x00', [@jumbo={0xc2, 0x4, 0x6}, @generic={0x6, 0xb0, "cbc12f7ae3edf4305260157d6e79d0f5da0413cb63f05d411cd975e1a88f080a331a218ac844b9b13e2694a110514ce5d4fe5a79c4725be01c747dd78e6f76d120e48ffbc41c08dc3a09566e862909fc5030a89af80b8323f979f6c025d0229b692eb5f59a3b00f3a9fc6d21e6fbf37cbac386a8c058cefc7f29bb80c48d46f934b4599d3cfa67c8fb55f68f4afff3da8b8987a106977fa97a70d8814849d3a6f7466f68100b36cf826bf2ecd59d4ba5"}, @enc_lim={0x4, 0x1, 0x8}, @calipso={0x7, 0x28, {0x1, 0x8, 0x4, 0xc1, [0x8000000, 0x7, 0x7, 0x4]}}, @generic={0xa7, 0xc1a, "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"}]}], @ndisc_ns={0x87, 0x0, 0x0, @local}}}}}}, 0x0) recvmsg(r5, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000a00)=""/108, 0x6c}], 0x1}, 0x100) write$rfkill(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0xffff, 0x0, 0x0, 0x11, 0x0, @multicast2, @multicast2}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x1, "56805c734ee222c29de4125f81f6e030a5591a99f362cd24f7a1ac6291500733", "0000011300fdffffff00", {"31ffee3fe12566e2616b3976ed837b6f", "876605ac29dcb96a8901e0711afb3db3"}}}}}}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x6c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000007300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000006200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) 1.021245688s ago: executing program 2 (id=1475): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x90) 889.570992ms ago: executing program 0 (id=1476): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0xc081}, 0x4000) 789.491661ms ago: executing program 3 (id=1477): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newpolicy={0xfc, 0x13, 0x1, 0x70bd2b, 0x25dfdbfb, {{@in6=@loopback, @in=@broadcast, 0x0, 0xd, 0x400, 0x6, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x2, 0x0, 0x1, 0xffffffffffffffff, 0xfffffffffffffffe, 0x101, 0x0, 0x2}, {0x0, 0x1765, 0x4000000000}, 0x2, 0x1000000, 0x0, 0x0, 0x0, 0x2}, [@tmpl={0x44, 0x5, [{{@in=@private=0xa010101, 0x0, 0x2b}, 0x2, @in=@local, 0x0, 0x4, 0x0, 0x0, 0x4, 0x7f}]}]}, 0xfc}}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003088700fe88a43de1a487ff0000000000007d01ff020000000000000000000000000001"], 0xfdef) 703.537754ms ago: executing program 0 (id=1478): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000005400e501000000000000000007000000", @ANYRES32=r2, @ANYBLOB="20000100", @ANYRES32=r2, @ANYBLOB="000000000100"], 0x38}, 0x1, 0x0, 0x86ddffffffffffff}, 0x20044050) 401.22793ms ago: executing program 2 (id=1479): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000050400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800c0001006d6163766c616e001400028008000300030081000800010004"], 0x44}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="1ccdd7570b3f0000004800010228bd7000fddbdf", @ANYRES32=0x0, @ANYBLOB="06000000"], 0x1c}}, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) syz_emit_ethernet(0x76, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x1cc, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) socket(0x27, 0xa, 0x2) setsockopt$MRT_FLUSH(r3, 0x0, 0xd4, &(0x7f0000000040)=0x9, 0x4) 364.08594ms ago: executing program 2 (id=1480): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x5}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x70, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000480)={0x0, 0x6, 0x59ee}, 0x8) 238.61543ms ago: executing program 0 (id=1481): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB='\n\x00\x00\x00\v\x00\x00\x00B\x00\x00\x00>'], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x1005, &(0x7f00000014c0)=""/4101, 0x0, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x60}, 0x94) 172.505274ms ago: executing program 4 (id=1482): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x3, 0x8003}, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0x2, 0x3b}, 0x1c) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x4}, 0x50) r1 = socket$kcm(0x2, 0x3, 0x2) syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x5, 0x0, @remote, @private=0xa010100, {[@ssrr={0x89, 0x7, 0xcc, [@remote]}, @lsrr={0x83, 0x3, 0x4a}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x4, 0xfffd}}}}}}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000006110000000000000630002000000000095"], &(0x7f0000000100)='GPL\x00', 0x5, 0xcd, &(0x7f0000000140)=""/205, 0x0, 0x5}, 0x94) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'hsr0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x50}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_rdma(0x10, 0x3, 0x14) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r7) sendmsg$DEVLINK_CMD_RATE_GET(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, r8, 0x701, 0x0, 0x25dfdbfc, {0x41}}, 0x14}}, 0x24000040) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$LINK_DETACH(0x22, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000013c0)={@link_local, @remote, @void, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x40, 0x0, 0xffea, 0x0, 0x32, 0x0, @empty, @broadcast, {[@generic={0x7, 0x10, "050958357cf2cd5834099c981153"}]}}, @time_exceeded={0xb, 0x0, 0x0, 0x0, 0x1, 0x0, {0x5, 0x4, 0x1, 0x1, 0x5, 0x65, 0x1, 0x7a, 0x33, 0x9, @rand_addr=0x64010100, @loopback}}}}}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) syz_genetlink_get_family_id$nl802154(&(0x7f0000001000), 0xffffffffffffffff) close(0x3) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0xfffffffe, 0x2000001, {0x0, 0x0, 0x0, r3, {0x7, 0xa}, {0xa, 0x9}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) sendmsg$inet(r1, &(0x7f0000000000)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, &(0x7f0000002800)=[{&(0x7f0000000c00)}, {&(0x7f0000001680)}, {&(0x7f00000015c0)="6b68b5d7d05d969a191023", 0xb}, {&(0x7f0000001740)="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", 0x2df}], 0x4, &(0x7f0000000540)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @dev={0xac, 0x14, 0x14, 0x10}, @multicast1}}}, @ip_retopts={{0x38, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x1c, 0xff, 0x1, 0x4, [{@multicast2, 0x7}, {@private=0xa010100, 0x3}, {@rand_addr=0x64010100, 0x800}]}]}}}], 0x58}, 0x0) 166.580892ms ago: executing program 3 (id=1483): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x3, 0x8003}, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0x2, 0x3b}, 0x1c) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x4}, 0x50) r1 = socket$kcm(0x2, 0x3, 0x2) syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x5, 0x0, @remote, @private=0xa010100, {[@ssrr={0x89, 0x7, 0xcc, [@remote]}, @lsrr={0x83, 0x3, 0x4a}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x4, 0xfffd}}}}}}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000006110000000000000630002000000000095"], &(0x7f0000000100)='GPL\x00', 0x5, 0xcd, &(0x7f0000000140)=""/205, 0x0, 0x5}, 0x94) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'hsr0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x50}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r7, &(0x7f0000002640)={0x0, 0x0, &(0x7f0000002600)={&(0x7f0000000400)={0x18, 0x1402, 0x1, 0x70bd26, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x81}, 0x4850) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, r8, 0x701, 0x0, 0x25dfdbfc, {0x41}}, 0x14}}, 0x24000040) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$LINK_DETACH(0x22, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000013c0)={@link_local, @remote, @void, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x40, 0x0, 0xffea, 0x0, 0x32, 0x0, @empty, @broadcast, {[@generic={0x7, 0x10, "050958357cf2cd5834099c981153"}]}}, @time_exceeded={0xb, 0x0, 0x0, 0x0, 0x1, 0x0, {0x5, 0x4, 0x1, 0x1, 0x5, 0x65, 0x1, 0x7a, 0x33, 0x9, @rand_addr=0x64010100, @loopback}}}}}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) syz_genetlink_get_family_id$nl802154(&(0x7f0000001000), 0xffffffffffffffff) close(0x3) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0xfffffffe, 0x2000001, {0x0, 0x0, 0x0, r3, {0x7, 0xa}, {0xa, 0x9}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) sendmsg$inet(r1, &(0x7f0000000000)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, &(0x7f0000002800)=[{&(0x7f0000000c00)}, {&(0x7f0000001680)}, {&(0x7f00000015c0)="6b68b5d7d05d969a191023", 0xb}, {&(0x7f0000001740)="3f013c9ef434ca4df0854ba1c14f7db8ccda5e87715ffd1ead9c4d9a2306168b07d3c6763a3ceabf6dfae235f3d783ddc8a7bbd796b345df843b5f0a623ab36b3123dfcd05bf4a6e3f35d859ffc0b699be4052995533be91880029387cc3e15b2d9bf3513e617572d965ba8f665eedcbdaad53d04cddeed78a3904956c5dc95f47132090648f98558d14a4850ac4b92e1b41a06dee6198c74c72607a032c3c7ef5abd0ba4a7f9f5dfebd75457b2ec358e951ade2375ad6524eb4263d6ef72e05901da983aac2b31a5e2631e39301a6dd04c128aabcea9134ec99685df1068506541f1265c77c85300497abfebce6ed768d9922ba3699dc6cc1863c0aa9321170b9e63a74986c1996d0fa1a5886e7023836ddbe64bea33edfe6fc1cb64784da18c2d4930eb481930b9298b57c7939189df401aed6a586f0103fccf70f92a53666d5afd3dd0b12273e5c1f2ddee89ed9a280c10df8e55ed24dcf9d631b693cd38006da4629a6b4a599de94a5b8ba6bccffdaa9d3fe0970623c118ba7e811d534915e4c63fa40df1e5a37ad9e5827ff65b2e4d8480a3f66576a3a52c0c80606098c0cb0b203f20d4f7b614652e4d8eb595d29ad1a4ce2c97aa30328c9987e1f1d8b7954ff54ddb69d5c3d2225bdd84e93b19edc2d33116373b0b5be8eea62d84896d2412edf5d321f75811360f89fe6ca8ac6545ec1c9f86ab285d1b5ba00c269514dab7a076c01cbfecaaff336d116481b16e434262de851a70ff056b1f9319840e27d5f446a3476210f4e70ceb71eeec17619911d56b74d7e761ff9c43dd237772377f888bfad215f3ee19eeeb87564f77241258874dd70bdd976305092426d18a3bc60022cb0acc2d21b3e246ae7f49f5b6461b888a3d353362c2ec9bed1f7d4d3a0200e3af42fcf36f4c09bc095b3fd391a23faad86bfa29696b80093da6a97d6c4a54eca89d4979f12acbf89bca0c8cc5f490737b09fd77b8b7fcfa7b94787f81cff59ae583b5309bdb82ff76ceaf739cd254b32cc8e289541b8921aa2ae", 0x2df}], 0x4, &(0x7f0000000540)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @dev={0xac, 0x14, 0x14, 0x10}, @multicast1}}}, @ip_retopts={{0x38, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x1c, 0xff, 0x1, 0x4, [{@multicast2, 0x7}, {@private=0xa010100, 0x3}, {@rand_addr=0x64010100, 0x800}]}]}}}], 0x58}, 0x0) 126.921532ms ago: executing program 2 (id=1484): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, 0x0, 0xff6c}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x22d00, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) ioctl$PPPIOCGFLAGS1(r2, 0x8004745a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x8000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_smc(0x2b, 0x1, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r5 = socket(0x1, 0x5, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r7, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r5}, 0x20) sendmsg$inet(r3, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x16}, {&(0x7f0000000240)}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r4, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0xffffff9e, &(0x7f0000000000)={&(0x7f00000009c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x18000000, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}]}, @NFT_MSG_NEWSETELEM={0x74, 0xc, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x38, 0x3, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_EXPRESSIONS={0x4, 0x6, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x480}}}]}]}]}]}], {0x14, 0x10}}, 0xe4}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x56, 0x0, &(0x7f0000000100)="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", 0x0, 0xfb, 0x60000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000001c40)="beb61ec2ca90080239f2a54e2368fa761313c3a024a98109ba1e2e7b780d03c54b7a83d56fce397842e724674507d531762055fca371ea775f418df7bee236c9b9968146efb3232ae3413b617445e98bb644a892b9337f1a9135d9f30457a8ffb21aef4a95a155fab70a40b086056b0f63331a66b3457c", 0x2}, 0x2c) 33.563475ms ago: executing program 0 (id=1485): r0 = socket$inet(0x2, 0x3, 0x30) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0xfffffff6, @private0, 0x9}]}, &(0x7f0000000080)=0x10) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) connect$bt_l2cap(r1, &(0x7f0000000200)={0x1f, 0x2, @any, 0x5}, 0xe) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000000)=0x3, 0x4) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000001c0)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)='/', 0x1}], 0x1, 0x0, 0x0, 0x800}, 0x2000c011) recvmsg$unix(r4, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd050007008800000006000540"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x3, 0x6, 0xb83, 0x0, 0x0, {0x1, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x800) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) getpeername(r6, 0x0, &(0x7f0000000700)) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x12, 0x2, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r7}, &(0x7f0000000040), &(0x7f0000000140)}, 0x20) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000000), &(0x7f00000000c0)=0x4) socket$inet6_sctp(0xa, 0x5, 0x84) 0s ago: executing program 1 (id=1486): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r0, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x10, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x102}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0xd00, 0x40000002}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000240)='GPL\x00', 0x7, 0x1012, &(0x7f00000008c0)=""/4114, 0x0, 0x68}, 0x94) kernel console output (not intermixed with test programs): (slave bond_slave_1): Releasing backup interface [ 124.341728][ T7351] team0: Port device team_slave_0 removed [ 124.366151][ T7351] team0: Port device team_slave_1 removed [ 124.372829][ T7351] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 124.381764][ T7351] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 124.391606][ T7358] netlink: 'syz.0.425': attribute type 6 has an invalid length. [ 124.393746][ T7351] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 124.426626][ T7351] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 124.662250][ T7366] tipc: Enabled bearer , priority 0 [ 124.726621][ T12] net_ratelimit: 24 callbacks suppressed [ 124.726637][ T12] bond2: (slave bridge0): failed to get link speed/duplex [ 124.769618][ T7369] netlink: 256 bytes leftover after parsing attributes in process `syz.4.429'. [ 124.807053][ T7369] netlink: 72 bytes leftover after parsing attributes in process `syz.4.429'. [ 124.866653][ T59] bond2: (slave bridge0): failed to get link speed/duplex [ 124.986721][ T36] bond2: (slave bridge0): failed to get link speed/duplex [ 125.048580][ T7374] bond1: entered promiscuous mode [ 125.054266][ T7374] 8021q: adding VLAN 0 to HW filter on device bond1 [ 125.061803][ T7374] bridge0: port 3(bond1) entered blocking state [ 125.070851][ T7374] bridge0: port 3(bond1) entered disabled state [ 125.077957][ T7374] bond1: entered allmulticast mode [ 125.087637][ T7374] bridge0: port 3(bond1) entered blocking state [ 125.094100][ T7374] bridge0: port 3(bond1) entered forwarding state [ 125.102852][ T7376] tunl0: Caught tx_queue_len zero misconfig [ 125.122126][ T7376] netlink: 288 bytes leftover after parsing attributes in process `syz.1.432'. [ 125.312179][ T486] bond2: (slave bridge0): failed to get link speed/duplex [ 125.427517][ T486] bond2: (slave bridge0): failed to get link speed/duplex [ 125.500467][ T7390] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 125.546616][ T12] bond2: (slave bridge0): failed to get link speed/duplex [ 125.617677][ T5637] Bluetooth: hci4: link tx timeout [ 125.623624][ T5637] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 125.641517][ T12] bridge0: port 3(bond1) entered disabled state [ 125.737336][ T59] bond2: (slave bridge0): failed to get link speed/duplex [ 125.761686][ T7394] netlink: 'syz.4.438': attribute type 1 has an invalid length. [ 125.879998][ T7404] netlink: 'syz.0.437': attribute type 4 has an invalid length. [ 125.944649][ T7394] bond2: entered promiscuous mode [ 125.965003][ T7394] 8021q: adding VLAN 0 to HW filter on device bond2 [ 125.979500][ T7410] netlink: 'syz.0.437': attribute type 4 has an invalid length. [ 126.018055][ T7403] bond2: entered allmulticast mode [ 126.053852][ T59] bond2: (slave bridge0): failed to get link speed/duplex [ 126.138030][ T7394] bond2: (slave bridge4): making interface the new active one [ 126.154969][ T7394] bridge4: entered promiscuous mode [ 126.176269][ T7394] bridge4: entered allmulticast mode [ 126.191497][ T7394] bond2: (slave bridge4): Enslaving as an active interface with an up link [ 126.219515][ T7418] Cannot find add_set index 1 as target [ 126.246296][ T7418] Cannot find add_set index 1 as target [ 126.325453][ T7418] Cannot find add_set index 1 as target [ 126.348461][ T7418] Cannot find add_set index 1 as target [ 126.377982][ T7418] Cannot find add_set index 1 as target [ 126.419729][ T7418] Cannot find add_set index 1 as target [ 126.425842][ T7418] Cannot find add_set index 1 as target [ 126.440806][ T7427] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 126.488331][ T7418] Cannot find add_set index 1 as target [ 126.510683][ T7418] Cannot find add_set index 1 as target [ 126.519147][ T7418] Cannot find add_set index 1 as target [ 126.767750][ T7439] netem: incorrect ge model size [ 126.790250][ T7439] netem: change failed [ 127.370896][ T7452] vlan2: entered promiscuous mode [ 127.381694][ T7452] bridge0: entered promiscuous mode [ 127.542287][ T7454] vlan2: entered promiscuous mode [ 127.561217][ T7454] bridge0: entered promiscuous mode [ 127.646960][ T5637] Bluetooth: hci4: command 0x0405 tx timeout [ 128.217406][ T7477] xt_hashlimit: size too large, truncated to 1048576 [ 128.899391][ T7490] erspan1: entered promiscuous mode [ 128.904845][ T7490] erspan1: entered allmulticast mode [ 129.118270][ T7497] vlan2: entered promiscuous mode [ 129.134071][ T7497] bridge0: entered promiscuous mode [ 129.426072][ T7505] tipc: Enabled bearer , priority 0 [ 129.530234][ T7507] __nla_validate_parse: 15 callbacks suppressed [ 129.530252][ T7507] netlink: 8 bytes leftover after parsing attributes in process `syz.0.476'. [ 129.750654][ T36] net_ratelimit: 27 callbacks suppressed [ 129.750672][ T36] bond2: (slave bridge0): failed to get link speed/duplex [ 129.958420][ T486] bond2: (slave bridge0): failed to get link speed/duplex [ 130.305622][ T7538] netlink: 12 bytes leftover after parsing attributes in process `syz.1.486'. [ 130.314705][ T7538] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 130.416770][ T36] bond2: (slave bridge0): failed to get link speed/duplex [ 130.528592][ T36] bond2: (slave bridge0): failed to get link speed/duplex [ 130.614764][ T7549] netlink: 8 bytes leftover after parsing attributes in process `syz.2.490'. [ 130.648344][ T36] bond2: (slave bridge0): failed to get link speed/duplex [ 130.776639][ T36] bond2: (slave bridge0): failed to get link speed/duplex [ 130.839105][ T7563] netlink: 'syz.3.494': attribute type 10 has an invalid length. [ 130.870269][ T7565] openvswitch: netlink: Flow actions attr not present in new flow. [ 130.882103][ T7563] team0: Port device dummy0 added [ 130.905920][ T7565] netlink: 8 bytes leftover after parsing attributes in process `syz.0.495'. [ 130.920283][ T486] bond2: (slave bridge0): failed to get link speed/duplex [ 131.047664][ T36] bond2: (slave bridge0): failed to get link speed/duplex [ 131.255430][ T7578] netlink: 60 bytes leftover after parsing attributes in process `syz.0.499'. [ 131.273846][ T7580] netlink: 4 bytes leftover after parsing attributes in process `syz.4.502'. [ 131.309978][ T7578] netlink: 124 bytes leftover after parsing attributes in process `syz.0.499'. [ 131.588268][ T7596] Cannot find del_set index 1 as target [ 131.604449][ T7590] bond3: entered promiscuous mode [ 131.609956][ T7590] 8021q: adding VLAN 0 to HW filter on device bond3 [ 131.618018][ T7590] bridge0: port 4(bond3) entered blocking state [ 131.624767][ T7590] bridge0: port 4(bond3) entered disabled state [ 131.633869][ T7590] bond3: entered allmulticast mode [ 131.648737][ T7590] bridge0: port 4(bond3) entered blocking state [ 131.655136][ T7590] bridge0: port 4(bond3) entered forwarding state [ 131.736343][ T36] bridge0: port 4(bond3) entered disabled state [ 131.947301][ T7603] netlink: 8 bytes leftover after parsing attributes in process `syz.4.509'. [ 132.204234][ T7611] syz_tun: entered promiscuous mode [ 132.218368][ T7611] vlan2: entered promiscuous mode [ 132.324891][ T7612] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 132.628510][ T7618] netlink: 16 bytes leftover after parsing attributes in process `syz.0.514'. [ 132.646685][ T7618] netlink: 11 bytes leftover after parsing attributes in process `syz.0.514'. [ 132.680282][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.563531][ T7672] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 133.578812][ T7672] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 133.615840][ T7672] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 133.670677][ T7672] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 133.731150][ T7672] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 134.181005][ T7705] tipc: Enabling of bearer rejected, already enabled [ 134.633069][ T7727] __nla_validate_parse: 6 callbacks suppressed [ 134.633086][ T7727] netlink: 20 bytes leftover after parsing attributes in process `syz.4.551'. [ 134.683035][ T7727] xfrm0: entered allmulticast mode [ 134.741063][ T7727] syzkaller0: entered promiscuous mode [ 134.756269][ T7727] syzkaller0: entered allmulticast mode [ 134.825081][ T7739] netlink: 40 bytes leftover after parsing attributes in process `syz.2.555'. [ 134.918881][ T7729] netlink: 8 bytes leftover after parsing attributes in process `syz.1.552'. [ 134.944328][ T7735] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.952015][ T7735] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.972595][ T7735] tipc: Resetting bearer [ 134.981388][ T7746] FAULT_INJECTION: forcing a failure. [ 134.981388][ T7746] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 134.997457][ T7746] CPU: 1 UID: 0 PID: 7746 Comm: syz.2.556 Not tainted syzkaller #0 PREEMPT(full) [ 134.997478][ T7746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 134.997488][ T7746] Call Trace: [ 134.997495][ T7746] [ 134.997502][ T7746] dump_stack_lvl+0xe8/0x150 [ 134.997527][ T7746] should_fail_ex+0x412/0x560 [ 134.997554][ T7746] _copy_from_user+0x2d/0xb0 [ 134.997579][ T7746] do_bnep_sock_ioctl+0x1b4/0x650 [ 134.997603][ T7746] ? __pfx_do_bnep_sock_ioctl+0x10/0x10 [ 134.997629][ T7746] ? tomoyo_path_number_perm+0x219/0x630 [ 134.997668][ T7746] sock_do_ioctl+0x101/0x320 [ 134.997689][ T7746] ? __pfx_sock_do_ioctl+0x10/0x10 [ 134.997706][ T7746] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 134.997739][ T7746] sock_ioctl+0x5c6/0x7f0 [ 134.997760][ T7746] ? __pfx_sock_ioctl+0x10/0x10 [ 134.997778][ T7746] ? __fget_files+0x2a/0x420 [ 134.997798][ T7746] ? __fget_files+0x3a0/0x420 [ 134.997817][ T7746] ? __fget_files+0x2a/0x420 [ 134.997841][ T7746] ? bpf_lsm_file_ioctl+0x9/0x20 [ 134.997865][ T7746] ? __pfx_sock_ioctl+0x10/0x10 [ 134.997884][ T7746] __se_sys_ioctl+0xfc/0x170 [ 134.997908][ T7746] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.997928][ T7746] do_syscall_64+0x15f/0xf80 [ 134.997943][ T7746] ? trace_irq_disable+0x3b/0x140 [ 134.997979][ T7746] ? clear_bhb_loop+0x40/0x90 [ 134.998001][ T7746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.998018][ T7746] RIP: 0033:0x7f942b59ce59 [ 134.998034][ T7746] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 134.998048][ T7746] RSP: 002b:00007f942c4c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 134.998066][ T7746] RAX: ffffffffffffffda RBX: 00007f942b815fa0 RCX: 00007f942b59ce59 [ 134.998079][ T7746] RDX: 0000200000000080 RSI: 00000000400442c9 RDI: 0000000000000004 [ 134.998090][ T7746] RBP: 00007f942c4c7090 R08: 0000000000000000 R09: 0000000000000000 [ 134.998101][ T7746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 134.998110][ T7746] R13: 00007f942b816038 R14: 00007f942b815fa0 R15: 00007fff5215d5f8 [ 134.998136][ T7746] [ 135.275276][ T7735] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 135.288778][ T7735] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 135.375369][ T7735] ipvlan0: left promiscuous mode [ 135.420650][ T7754] netlink: 24 bytes leftover after parsing attributes in process `syz.0.559'. [ 135.432939][ T7754] netlink: 12 bytes leftover after parsing attributes in process `syz.0.559'. [ 135.446435][ T7735] mac80211_hwsim hwsim9 wlan0: left promiscuous mode [ 135.453880][ T7735] ip6gre1: left promiscuous mode [ 135.459116][ T7735] ip6gre1: left allmulticast mode [ 135.536673][ T13] net_ratelimit: 34 callbacks suppressed [ 135.536689][ T13] bond2: (slave bridge0): failed to get link speed/duplex [ 135.562327][ T36] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.580355][ T36] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.610600][ T36] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.639548][ T36] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.708239][ T36] bond2: (slave bridge0): failed to get link speed/duplex [ 135.773267][ T7763] tipc: Enabling of bearer rejected, already enabled [ 135.837355][ T36] bond2: (slave bridge0): failed to get link speed/duplex [ 136.021385][ T7778] bond1: entered promiscuous mode [ 136.030591][ T7778] 8021q: adding VLAN 0 to HW filter on device bond1 [ 136.038059][ T7778] bridge0: port 3(bond1) entered blocking state [ 136.044621][ T7778] bridge0: port 3(bond1) entered disabled state [ 136.052493][ T7778] bond1: entered allmulticast mode [ 136.076591][ T13] bond2: (slave bridge0): failed to get link speed/duplex [ 136.197047][ T12] bond2: (slave bridge0): failed to get link speed/duplex [ 136.228514][ T7795] tipc: Enabling of bearer rejected, already enabled [ 136.246859][ T7794] netlink: 4 bytes leftover after parsing attributes in process `syz.1.569'. [ 136.337351][ T12] bond2: (slave bridge0): failed to get link speed/duplex [ 136.476821][ T12] bond2: (slave bridge0): failed to get link speed/duplex [ 136.699742][ T7822] netlink: 4 bytes leftover after parsing attributes in process `syz.2.579'. [ 136.727272][ T7815] bond3: entered promiscuous mode [ 136.733934][ T7815] 8021q: adding VLAN 0 to HW filter on device bond3 [ 136.741965][ T7815] bridge0: port 3(bond3) entered blocking state [ 136.749252][ T7815] bridge0: port 3(bond3) entered disabled state [ 136.755717][ T7815] bond3: entered allmulticast mode [ 136.766199][ T7815] bridge0: port 3(bond3) entered blocking state [ 136.772609][ T7815] bridge0: port 3(bond3) entered forwarding state [ 137.003782][ T7834] netlink: 8 bytes leftover after parsing attributes in process `syz.4.583'. [ 137.014978][ T7836] netlink: 'syz.2.581': attribute type 2 has an invalid length. [ 137.137750][ T7841] xt_CT: No such helper "netbios-ns" [ 137.386878][ T36] bond2: (slave bridge0): failed to get link speed/duplex [ 137.512788][ T7860] netlink: 4 bytes leftover after parsing attributes in process `syz.3.590'. [ 137.537190][ T36] bond2: (slave bridge0): failed to get link speed/duplex [ 137.593484][ T7862] netlink: 4 bytes leftover after parsing attributes in process `syz.1.592'. [ 137.645942][ T12] bridge0: port 3(bond3) entered disabled state [ 137.664073][ T7864] xt_limit: Overflow, try lower: 324382443/0 [ 137.666869][ T12] bond2: (slave bridge0): failed to get link speed/duplex [ 138.092629][ T7877] ip6gretap0: entered promiscuous mode [ 138.099353][ T7877] vlan2: entered promiscuous mode [ 138.389405][ T7897] xt_limit: Overflow, try lower: 324382443/0 [ 138.735290][ T7909] netlink: 'syz.1.610': attribute type 1 has an invalid length. [ 138.803525][ T7909] bond3: entered promiscuous mode [ 138.809094][ T7909] 8021q: adding VLAN 0 to HW filter on device bond3 [ 138.817976][ T7916] bond3: entered allmulticast mode [ 138.944265][ T7922] netlink: 'syz.0.615': attribute type 1 has an invalid length. [ 139.095342][ T7922] bond4: entered promiscuous mode [ 139.101283][ T7922] 8021q: adding VLAN 0 to HW filter on device bond4 [ 139.109068][ T7929] tipc: Enabling of bearer rejected, already enabled [ 139.146315][ T7930] bond4: entered allmulticast mode [ 139.241780][ T7935] xt_limit: Overflow, try lower: 324382443/0 [ 139.276197][ T7922] bond4: (slave bridge3): making interface the new active one [ 139.297852][ T7922] bridge3: entered promiscuous mode [ 139.310400][ T7922] bridge3: entered allmulticast mode [ 139.327761][ T7922] bond4: (slave bridge3): Enslaving as an active interface with an up link [ 139.464865][ T7941] pim6reg1: entered allmulticast mode [ 139.667170][ T7949] xt_hashlimit: size too large, truncated to 1048576 [ 139.876138][ T7963] netlink: 'syz.4.627': attribute type 1 has an invalid length. [ 139.948232][ T7965] __nla_validate_parse: 13 callbacks suppressed [ 139.948251][ T7965] netlink: 28 bytes leftover after parsing attributes in process `syz.4.627'. [ 140.117521][ T7963] bond4: entered promiscuous mode [ 140.124953][ T7963] 8021q: adding VLAN 0 to HW filter on device bond4 [ 140.133481][ T7965] bond4: entered allmulticast mode [ 140.422598][ T7972] netlink: 4 bytes leftover after parsing attributes in process `syz.4.631'. [ 140.586742][ T12] net_ratelimit: 15 callbacks suppressed [ 140.586759][ T12] bond2: (slave bridge0): failed to get link speed/duplex [ 140.739970][ T1330] bond2: (slave bridge0): failed to get link speed/duplex [ 140.752536][ T7991] netlink: 8 bytes leftover after parsing attributes in process `syz.0.633'. [ 140.822375][ T7992] vlan2: entered promiscuous mode [ 140.840908][ T7992] ip6gretap0: entered promiscuous mode [ 140.916689][ T81] bond2: (slave bridge0): failed to get link speed/duplex [ 141.053093][ T1330] bond2: (slave bridge0): failed to get link speed/duplex [ 141.124143][ T8009] xt_hashlimit: size too large, truncated to 1048576 [ 141.176595][ T1330] bond2: (slave bridge0): failed to get link speed/duplex [ 141.225569][ T8013] netlink: 'syz.3.641': attribute type 1 has an invalid length. [ 141.287380][ T8019] netlink: 28 bytes leftover after parsing attributes in process `syz.3.641'. [ 141.386329][ T8013] bond2: entered promiscuous mode [ 141.394560][ T8013] 8021q: adding VLAN 0 to HW filter on device bond2 [ 141.415655][ T8018] bond5: entered promiscuous mode [ 141.421237][ T8018] 8021q: adding VLAN 0 to HW filter on device bond5 [ 141.429044][ T8018] bridge0: port 4(bond5) entered blocking state [ 141.435411][ T8018] bridge0: port 4(bond5) entered disabled state [ 141.442011][ T8018] bond5: entered allmulticast mode [ 141.449657][ T8018] bridge0: port 4(bond5) entered blocking state [ 141.455973][ T8018] bridge0: port 4(bond5) entered forwarding state [ 141.463464][ T8019] bond2: entered allmulticast mode [ 141.508340][ T81] bond2: (slave bridge0): failed to get link speed/duplex [ 141.647462][ T81] bond2: (slave bridge0): failed to get link speed/duplex [ 141.732250][ T8028] netlink: 4 bytes leftover after parsing attributes in process `syz.0.645'. [ 141.780152][ T8036] netlink: 4 bytes leftover after parsing attributes in process `syz.3.646'. [ 141.799824][ T81] bond2: (slave bridge0): failed to get link speed/duplex [ 141.947398][ T8040] tipc: Resetting bearer [ 141.964808][ T8040] tipc: Resetting bearer [ 142.118796][ T12] bond2: (slave bridge0): failed to get link speed/duplex [ 142.154585][ T8053] xt_hashlimit: size too large, truncated to 1048576 [ 142.203526][ T8055] netlink: 'syz.3.655': attribute type 2 has an invalid length. [ 142.215770][ T12] bridge0: port 4(bond5) entered disabled state [ 142.291562][ T8058] netlink: 'syz.1.656': attribute type 1 has an invalid length. [ 142.298777][ T12] bond2: (slave bridge0): failed to get link speed/duplex [ 142.355287][ T8066] netlink: 28 bytes leftover after parsing attributes in process `syz.1.656'. [ 142.394897][ T8058] bond4: entered promiscuous mode [ 142.401918][ T8058] 8021q: adding VLAN 0 to HW filter on device bond4 [ 142.419908][ T8066] bond4: entered allmulticast mode [ 142.534832][ T8073] netlink: 4 bytes leftover after parsing attributes in process `syz.2.661'. [ 142.779373][ T8083] netlink: 208 bytes leftover after parsing attributes in process `syz.1.664'. [ 142.853140][ T8089] netlink: 4 bytes leftover after parsing attributes in process `syz.4.663'. [ 143.263401][ T8107] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 143.388068][ T8109] netlink: 'syz.1.669': attribute type 11 has an invalid length. [ 143.611743][ T8117] xt_hashlimit: size too large, truncated to 1048576 [ 143.803879][ T8127] netlink: 'syz.2.674': attribute type 1 has an invalid length. [ 143.883325][ T8132] netlink: 'syz.4.675': attribute type 4 has an invalid length. [ 143.942487][ T8135] netlink: 'syz.4.675': attribute type 4 has an invalid length. [ 144.052991][ T8127] bond3: entered promiscuous mode [ 144.058828][ T8127] 8021q: adding VLAN 0 to HW filter on device bond3 [ 144.066295][ T8131] bond3: entered allmulticast mode [ 144.969930][ T8177] xt_hashlimit: size too large, truncated to 1048576 [ 145.054788][ T8183] netlink: 'syz.4.689': attribute type 1 has an invalid length. [ 145.255432][ T808] syz1: Port: 1 Link DOWN [ 145.382712][ T8183] bond5: entered promiscuous mode [ 145.397861][ T8183] 8021q: adding VLAN 0 to HW filter on device bond5 [ 145.640656][ T1330] net_ratelimit: 19 callbacks suppressed [ 145.640673][ T1330] bond2: (slave bridge0): failed to get link speed/duplex [ 145.777545][ T59] bond2: (slave bridge0): failed to get link speed/duplex [ 145.782210][ T8215] __nla_validate_parse: 7 callbacks suppressed [ 145.782233][ T8215] netlink: 4 bytes leftover after parsing attributes in process `syz.4.697'. [ 145.898150][ T1330] bond2: (slave bridge0): failed to get link speed/duplex [ 146.016398][ T8222] netlink: 12 bytes leftover after parsing attributes in process `syz.4.700'. [ 146.016680][ T59] bond2: (slave bridge0): failed to get link speed/duplex [ 146.138519][ T59] bond2: (slave bridge0): failed to get link speed/duplex [ 146.256218][ T8228] xt_hashlimit: size too large, truncated to 1048576 [ 146.264568][ T1330] bond2: (slave bridge0): failed to get link speed/duplex [ 146.266028][ T8230] netlink: 24 bytes leftover after parsing attributes in process `syz.4.704'. [ 146.289199][ T8230] set_target_v1_checkentry: 23 callbacks suppressed [ 146.289214][ T8230] Cannot find add_set index 1 as target [ 146.377845][ T1330] bond2: (slave bridge0): failed to get link speed/duplex [ 146.506757][ T1330] bond2: (slave bridge0): failed to get link speed/duplex [ 146.546074][ T8243] netlink: 4 bytes leftover after parsing attributes in process `syz.2.708'. [ 146.659913][ T1330] bond2: (slave bridge0): failed to get link speed/duplex [ 146.787403][ T1330] bond2: (slave bridge0): failed to get link speed/duplex [ 146.899933][ T8254] netlink: 4 bytes leftover after parsing attributes in process `syz.0.712'. [ 146.925876][ T8255] netlink: 12 bytes leftover after parsing attributes in process `syz.2.711'. [ 147.066177][ T8258] netlink: 4 bytes leftover after parsing attributes in process `syz.4.713'. [ 147.196748][ T8264] FAULT_INJECTION: forcing a failure. [ 147.196748][ T8264] name failslab, interval 1, probability 0, space 0, times 0 [ 147.246848][ T8264] CPU: 1 UID: 0 PID: 8264 Comm: syz.0.715 Not tainted syzkaller #0 PREEMPT(full) [ 147.246872][ T8264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 147.246881][ T8264] Call Trace: [ 147.246889][ T8264] [ 147.246896][ T8264] dump_stack_lvl+0xe8/0x150 [ 147.246921][ T8264] should_fail_ex+0x412/0x560 [ 147.246949][ T8264] should_failslab+0xa8/0x100 [ 147.246976][ T8264] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 147.246999][ T8264] ? kmem_cache_alloc_noprof+0x307/0x650 [ 147.247021][ T8264] ? ovs_flow_alloc+0x24/0x1f0 [ 147.247039][ T8264] ? ovs_flow_alloc+0x103/0x1f0 [ 147.247063][ T8264] ovs_flow_alloc+0x103/0x1f0 [ 147.247086][ T8264] ovs_flow_cmd_new+0x2b9/0xe80 [ 147.247108][ T8264] ? kasan_save_track+0x3e/0x80 [ 147.247139][ T8264] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 147.247217][ T8264] ? __nla_parse+0x40/0x60 [ 147.247243][ T8264] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 147.247264][ T8264] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 147.247292][ T8264] genl_family_rcv_msg_doit+0x22a/0x330 [ 147.247318][ T8264] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 147.247357][ T8264] ? bpf_lsm_capable+0x9/0x20 [ 147.247373][ T8264] ? security_capable+0x7e/0x2c0 [ 147.247402][ T8264] genl_rcv_msg+0x61c/0x7a0 [ 147.247428][ T8264] ? __pfx_genl_rcv_msg+0x10/0x10 [ 147.247446][ T8264] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 147.247471][ T8264] ? __pfx_ref_tracker_free+0x10/0x10 [ 147.247493][ T8264] ? __asan_memcpy+0x40/0x70 [ 147.247512][ T8264] ? __skb_clone+0x63/0x7a0 [ 147.247545][ T8264] netlink_rcv_skb+0x232/0x4b0 [ 147.247570][ T8264] ? __pfx_genl_rcv_msg+0x10/0x10 [ 147.247591][ T8264] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 147.247631][ T8264] ? down_read+0x270/0x2e0 [ 147.247648][ T8264] ? genl_rcv+0xd/0x40 [ 147.247668][ T8264] genl_rcv+0x28/0x40 [ 147.247685][ T8264] netlink_unicast+0x75c/0x8e0 [ 147.247718][ T8264] netlink_sendmsg+0x813/0xb40 [ 147.247752][ T8264] ? __pfx_netlink_sendmsg+0x10/0x10 [ 147.247780][ T8264] ? aa_sock_msg_perm+0xf1/0x1b0 [ 147.247805][ T8264] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 147.247831][ T8264] ____sys_sendmsg+0x972/0x9f0 [ 147.247856][ T8264] ? __might_fault+0xaf/0x130 [ 147.247884][ T8264] ? __pfx_____sys_sendmsg+0x10/0x10 [ 147.247919][ T8264] ? import_iovec+0x73/0xa0 [ 147.247947][ T8264] ___sys_sendmsg+0x2a5/0x360 [ 147.247971][ T8264] ? __lock_acquire+0x6b5/0x2cf0 [ 147.247994][ T8264] ? __pfx____sys_sendmsg+0x10/0x10 [ 147.248054][ T8264] ? __fget_files+0x2a/0x420 [ 147.248074][ T8264] ? __fget_files+0x3a0/0x420 [ 147.248104][ T8264] __x64_sys_sendmsg+0x1bd/0x2a0 [ 147.248133][ T8264] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 147.248168][ T8264] ? __pfx_ksys_write+0x10/0x10 [ 147.248201][ T8264] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.248221][ T8264] do_syscall_64+0x15f/0xf80 [ 147.248237][ T8264] ? trace_irq_disable+0x3b/0x140 [ 147.248265][ T8264] ? clear_bhb_loop+0x40/0x90 [ 147.248287][ T8264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.248304][ T8264] RIP: 0033:0x7f4ea659ce59 [ 147.248321][ T8264] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 147.248334][ T8264] RSP: 002b:00007f4ea73f0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 147.248359][ T8264] RAX: ffffffffffffffda RBX: 00007f4ea6815fa0 RCX: 00007f4ea659ce59 [ 147.248371][ T8264] RDX: 0000000004008094 RSI: 0000200000000100 RDI: 0000000000000003 [ 147.248383][ T8264] RBP: 00007f4ea73f0090 R08: 0000000000000000 R09: 0000000000000000 [ 147.248393][ T8264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 147.248403][ T8264] R13: 00007f4ea6816038 R14: 00007f4ea6815fa0 R15: 00007ffe4744d7f8 [ 147.248431][ T8264] [ 147.729097][ T8270] FAULT_INJECTION: forcing a failure. [ 147.729097][ T8270] name failslab, interval 1, probability 0, space 0, times 0 [ 147.775791][ T8270] CPU: 0 UID: 0 PID: 8270 Comm: syz.0.718 Not tainted syzkaller #0 PREEMPT(full) [ 147.775814][ T8270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 147.775824][ T8270] Call Trace: [ 147.775832][ T8270] [ 147.775839][ T8270] dump_stack_lvl+0xe8/0x150 [ 147.775865][ T8270] should_fail_ex+0x412/0x560 [ 147.775894][ T8270] should_failslab+0xa8/0x100 [ 147.775920][ T8270] ? security_inode_alloc+0x39/0x310 [ 147.775944][ T8270] kmem_cache_alloc_noprof+0x87/0x650 [ 147.775976][ T8270] security_inode_alloc+0x39/0x310 [ 147.776002][ T8270] inode_init_always_gfp+0x9c8/0xda0 [ 147.776035][ T8270] ? __pfx_sock_alloc_inode+0x10/0x10 [ 147.776056][ T8270] alloc_inode+0x82/0x1b0 [ 147.776077][ T8270] __sock_create+0x12d/0x9d0 [ 147.776108][ T8270] mptcp_subflow_create_socket+0xfb/0x800 [ 147.776130][ T8270] ? aa_label_sk_perm+0x532/0x6e0 [ 147.776155][ T8270] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 147.776180][ T8270] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 147.776199][ T8270] ? look_up_lock_class+0x57/0x110 [ 147.776220][ T8270] __mptcp_nmpc_sk+0x155/0x790 [ 147.776243][ T8270] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 147.776267][ T8270] ? __pfx_tomoyo_check_inet_address+0x10/0x10 [ 147.776295][ T8270] mptcp_connect+0x71/0x830 [ 147.776324][ T8270] __inet_stream_connect+0x25a/0xdd0 [ 147.776351][ T8270] ? do_raw_spin_lock+0x12b/0x2f0 [ 147.776374][ T8270] ? lock_sock_nested+0x6a/0x100 [ 147.776397][ T8270] ? __pfx___inet_stream_connect+0x10/0x10 [ 147.776420][ T8270] ? inet_stream_connect+0x51/0xa0 [ 147.776441][ T8270] ? __local_bh_enable_ip+0xd0/0x130 [ 147.776465][ T8270] inet_stream_connect+0x66/0xa0 [ 147.776488][ T8270] __sys_connect+0x312/0x450 [ 147.776515][ T8270] ? __pfx___sys_connect+0x10/0x10 [ 147.776548][ T8270] ? __pfx_ksys_write+0x10/0x10 [ 147.776578][ T8270] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.776598][ T8270] __x64_sys_connect+0x7a/0x90 [ 147.776623][ T8270] do_syscall_64+0x15f/0xf80 [ 147.776639][ T8270] ? trace_irq_disable+0x3b/0x140 [ 147.776665][ T8270] ? clear_bhb_loop+0x40/0x90 [ 147.776687][ T8270] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.776705][ T8270] RIP: 0033:0x7f4ea659ce59 [ 147.776722][ T8270] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 147.776736][ T8270] RSP: 002b:00007f4ea73f0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 147.776755][ T8270] RAX: ffffffffffffffda RBX: 00007f4ea6815fa0 RCX: 00007f4ea659ce59 [ 147.776768][ T8270] RDX: 0000000000000010 RSI: 00002000000001c0 RDI: 0000000000000003 [ 147.776779][ T8270] RBP: 00007f4ea73f0090 R08: 0000000000000000 R09: 0000000000000000 [ 147.776790][ T8270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 147.776800][ T8270] R13: 00007f4ea6816038 R14: 00007f4ea6815fa0 R15: 00007ffe4744d7f8 [ 147.776828][ T8270] [ 148.197585][ T8278] xt_hashlimit: size too large, truncated to 1048576 [ 148.625882][ T8292] trusted_key: syz.0.724 sent an empty control message without MSG_MORE. [ 148.786189][ T8294] netlink: 8 bytes leftover after parsing attributes in process `syz.2.727'. [ 148.794118][ T8298] netlink: 4 bytes leftover after parsing attributes in process `syz.4.726'. [ 148.962171][ T8296] netlink: 180568 bytes leftover after parsing attributes in process `syz.1.725'. [ 149.121765][ T8307] ip6gretap0: entered promiscuous mode [ 149.127571][ T8307] vlan2: entered promiscuous mode [ 149.672074][ T8329] xt_hashlimit: size too large, truncated to 1048576 [ 149.899317][ T8345] netlink: 'syz.0.745': attribute type 3 has an invalid length. [ 150.469177][ T8371] FAULT_INJECTION: forcing a failure. [ 150.469177][ T8371] name failslab, interval 1, probability 0, space 0, times 0 [ 150.512181][ T8371] CPU: 1 UID: 0 PID: 8371 Comm: syz.2.750 Not tainted syzkaller #0 PREEMPT(full) [ 150.512203][ T8371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 150.512213][ T8371] Call Trace: [ 150.512220][ T8371] [ 150.512227][ T8371] dump_stack_lvl+0xe8/0x150 [ 150.512252][ T8371] should_fail_ex+0x412/0x560 [ 150.512279][ T8371] should_failslab+0xa8/0x100 [ 150.512310][ T8371] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 150.512334][ T8371] ? __alloc_skb+0x186/0x7d0 [ 150.512355][ T8371] ? __alloc_skb+0x1d0/0x7d0 [ 150.512374][ T8371] ? __local_bh_enable_ip+0xd0/0x130 [ 150.512396][ T8371] __alloc_skb+0x1d0/0x7d0 [ 150.512424][ T8371] netlink_sendmsg+0x5d4/0xb40 [ 150.512463][ T8371] ? __pfx_netlink_sendmsg+0x10/0x10 [ 150.512490][ T8371] ? aa_sock_msg_perm+0xf1/0x1b0 [ 150.512515][ T8371] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 150.512542][ T8371] ____sys_sendmsg+0x972/0x9f0 [ 150.512566][ T8371] ? __might_fault+0xaf/0x130 [ 150.512594][ T8371] ? __pfx_____sys_sendmsg+0x10/0x10 [ 150.512626][ T8371] ? import_iovec+0x73/0xa0 [ 150.512655][ T8371] ___sys_sendmsg+0x2a5/0x360 [ 150.512679][ T8371] ? __lock_acquire+0x6b5/0x2cf0 [ 150.512702][ T8371] ? __pfx____sys_sendmsg+0x10/0x10 [ 150.512760][ T8371] ? __fget_files+0x2a/0x420 [ 150.512780][ T8371] ? __fget_files+0x3a0/0x420 [ 150.512810][ T8371] __x64_sys_sendmsg+0x1bd/0x2a0 [ 150.512844][ T8371] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 150.512878][ T8371] ? __pfx_ksys_write+0x10/0x10 [ 150.512910][ T8371] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.512929][ T8371] do_syscall_64+0x15f/0xf80 [ 150.512945][ T8371] ? trace_irq_disable+0x3b/0x140 [ 150.512970][ T8371] ? clear_bhb_loop+0x40/0x90 [ 150.512991][ T8371] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.513007][ T8371] RIP: 0033:0x7f942b59ce59 [ 150.513023][ T8371] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 150.513036][ T8371] RSP: 002b:00007f942c4c7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 150.513055][ T8371] RAX: ffffffffffffffda RBX: 00007f942b815fa0 RCX: 00007f942b59ce59 [ 150.513067][ T8371] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000003 [ 150.513078][ T8371] RBP: 00007f942c4c7090 R08: 0000000000000000 R09: 0000000000000000 [ 150.513088][ T8371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 150.513098][ T8371] R13: 00007f942b816038 R14: 00007f942b815fa0 R15: 00007fff5215d5f8 [ 150.513127][ T8371] [ 150.884179][ T8376] __nla_validate_parse: 2 callbacks suppressed [ 150.884197][ T8376] netlink: 4 bytes leftover after parsing attributes in process `syz.1.751'. [ 150.959561][ T8380] netlink: 68 bytes leftover after parsing attributes in process `syz.2.752'. [ 151.010731][ T8380] netlink: 16 bytes leftover after parsing attributes in process `syz.2.752'. [ 151.040049][ T8380] netlink: 11 bytes leftover after parsing attributes in process `syz.2.752'. [ 151.056660][ T8380] netlink: 11 bytes leftover after parsing attributes in process `syz.2.752'. [ 151.065657][ T8380] netlink: 52 bytes leftover after parsing attributes in process `syz.2.752'. [ 151.098628][ T8385] netlink: 8 bytes leftover after parsing attributes in process `syz.1.756'. [ 151.211490][ T8389] FAULT_INJECTION: forcing a failure. [ 151.211490][ T8389] name failslab, interval 1, probability 0, space 0, times 0 [ 151.236294][ T8389] CPU: 0 UID: 0 PID: 8389 Comm: syz.2.758 Not tainted syzkaller #0 PREEMPT(full) [ 151.236314][ T8389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 151.236323][ T8389] Call Trace: [ 151.236329][ T8389] [ 151.236334][ T8389] dump_stack_lvl+0xe8/0x150 [ 151.236355][ T8389] should_fail_ex+0x412/0x560 [ 151.236377][ T8389] should_failslab+0xa8/0x100 [ 151.236400][ T8389] __kmalloc_noprof+0xe8/0x760 [ 151.236420][ T8389] ? security_sk_alloc+0x52/0x360 [ 151.236437][ T8389] security_sk_alloc+0x52/0x360 [ 151.236454][ T8389] sk_prot_alloc+0x101/0x210 [ 151.236480][ T8389] sk_alloc+0x3a/0x390 [ 151.236509][ T8389] inet_create+0x7a0/0x1000 [ 151.236527][ T8389] ? inet_create+0x9c/0x1000 [ 151.236546][ T8389] __sock_create+0x4b2/0x9d0 [ 151.236574][ T8389] mptcp_subflow_create_socket+0xfb/0x800 [ 151.236594][ T8389] ? aa_label_sk_perm+0x532/0x6e0 [ 151.236616][ T8389] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 151.236640][ T8389] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 151.236659][ T8389] ? look_up_lock_class+0x57/0x110 [ 151.236679][ T8389] __mptcp_nmpc_sk+0x155/0x790 [ 151.236703][ T8389] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 151.236726][ T8389] ? __pfx_tomoyo_check_inet_address+0x10/0x10 [ 151.236753][ T8389] mptcp_connect+0x71/0x830 [ 151.236782][ T8389] __inet_stream_connect+0x25a/0xdd0 [ 151.236807][ T8389] ? do_raw_spin_lock+0x12b/0x2f0 [ 151.236829][ T8389] ? lock_sock_nested+0x6a/0x100 [ 151.236850][ T8389] ? __pfx___inet_stream_connect+0x10/0x10 [ 151.236872][ T8389] ? inet_stream_connect+0x51/0xa0 [ 151.236893][ T8389] ? __local_bh_enable_ip+0xd0/0x130 [ 151.236916][ T8389] inet_stream_connect+0x66/0xa0 [ 151.236938][ T8389] __sys_connect+0x312/0x450 [ 151.236963][ T8389] ? __pfx___sys_connect+0x10/0x10 [ 151.236997][ T8389] ? __pfx_ksys_write+0x10/0x10 [ 151.237026][ T8389] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.237052][ T8389] __x64_sys_connect+0x7a/0x90 [ 151.237075][ T8389] do_syscall_64+0x15f/0xf80 [ 151.237090][ T8389] ? trace_irq_disable+0x3b/0x140 [ 151.237115][ T8389] ? clear_bhb_loop+0x40/0x90 [ 151.237136][ T8389] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.237148][ T8389] RIP: 0033:0x7f942b59ce59 [ 151.237161][ T8389] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 151.237171][ T8389] RSP: 002b:00007f942c4c7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 151.237187][ T8389] RAX: ffffffffffffffda RBX: 00007f942b815fa0 RCX: 00007f942b59ce59 [ 151.237197][ T8389] RDX: 0000000000000010 RSI: 00002000000001c0 RDI: 0000000000000003 [ 151.237205][ T8389] RBP: 00007f942c4c7090 R08: 0000000000000000 R09: 0000000000000000 [ 151.237214][ T8389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 151.237222][ T8389] R13: 00007f942b816038 R14: 00007f942b815fa0 R15: 00007fff5215d5f8 [ 151.237244][ T8389] [ 151.533817][ T8392] netlink: 'syz.1.759': attribute type 1 has an invalid length. [ 151.604266][ T8393] netlink: 28 bytes leftover after parsing attributes in process `syz.1.759'. [ 151.735357][ T8392] bond5: entered promiscuous mode [ 151.743068][ T8392] 8021q: adding VLAN 0 to HW filter on device bond5 [ 151.754770][ T8393] bond5: entered allmulticast mode [ 151.799495][ T8391] bond5: (slave bridge3): making interface the new active one [ 151.807170][ T8391] bridge3: entered promiscuous mode [ 151.812580][ T8391] bridge3: entered allmulticast mode [ 151.838753][ T8391] bond5: (slave bridge3): Enslaving as an active interface with an up link [ 151.857857][ T1330] net_ratelimit: 25 callbacks suppressed [ 151.857871][ T1330] bond2: (slave bridge0): failed to get link speed/duplex [ 151.997062][ T1330] bond2: (slave bridge0): failed to get link speed/duplex [ 152.036949][ T8403] netlink: 'syz.4.762': attribute type 32 has an invalid length. [ 152.119035][ T1330] bond2: (slave bridge0): failed to get link speed/duplex [ 152.249585][ T13] bond2: (slave bridge0): failed to get link speed/duplex [ 152.366634][ T1330] bond2: (slave bridge0): failed to get link speed/duplex [ 152.465823][ T8431] netlink: 40 bytes leftover after parsing attributes in process `syz.1.776'. [ 152.625939][ T8439] FAULT_INJECTION: forcing a failure. [ 152.625939][ T8439] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 152.647134][ T8439] CPU: 1 UID: 0 PID: 8439 Comm: syz.3.778 Not tainted syzkaller #0 PREEMPT(full) [ 152.647157][ T8439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 152.647167][ T8439] Call Trace: [ 152.647174][ T8439] [ 152.647182][ T8439] dump_stack_lvl+0xe8/0x150 [ 152.647207][ T8439] should_fail_ex+0x412/0x560 [ 152.647235][ T8439] _copy_from_iter+0x1d3/0x1670 [ 152.647269][ T8439] ? rcu_is_watching+0x15/0xb0 [ 152.647296][ T8439] ? __pfx__copy_from_iter+0x10/0x10 [ 152.647327][ T8439] ? netlink_sendmsg+0x650/0xb40 [ 152.647351][ T8439] ? skb_put+0x11b/0x210 [ 152.647387][ T8439] netlink_sendmsg+0x6c0/0xb40 [ 152.647420][ T8439] ? __pfx_netlink_sendmsg+0x10/0x10 [ 152.647447][ T8439] ? aa_sock_msg_perm+0xf1/0x1b0 [ 152.647472][ T8439] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 152.647498][ T8439] ____sys_sendmsg+0x972/0x9f0 [ 152.647523][ T8439] ? __might_fault+0xaf/0x130 [ 152.647551][ T8439] ? __pfx_____sys_sendmsg+0x10/0x10 [ 152.647585][ T8439] ? import_iovec+0x73/0xa0 [ 152.647612][ T8439] ___sys_sendmsg+0x2a5/0x360 [ 152.647636][ T8439] ? __lock_acquire+0x6b5/0x2cf0 [ 152.647659][ T8439] ? __pfx____sys_sendmsg+0x10/0x10 [ 152.647768][ T8439] ? __fget_files+0x2a/0x420 [ 152.647790][ T8439] ? __fget_files+0x3a0/0x420 [ 152.647819][ T8439] __x64_sys_sendmsg+0x1bd/0x2a0 [ 152.647846][ T8439] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 152.647880][ T8439] ? __pfx_ksys_write+0x10/0x10 [ 152.647913][ T8439] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.647931][ T8439] do_syscall_64+0x15f/0xf80 [ 152.647951][ T8439] ? trace_irq_disable+0x3b/0x140 [ 152.647976][ T8439] ? clear_bhb_loop+0x40/0x90 [ 152.647999][ T8439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.648016][ T8439] RIP: 0033:0x7ff53b99ce59 [ 152.648032][ T8439] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 152.648047][ T8439] RSP: 002b:00007ff53c876028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 152.648065][ T8439] RAX: ffffffffffffffda RBX: 00007ff53bc15fa0 RCX: 00007ff53b99ce59 [ 152.648077][ T8439] RDX: 0000000020008000 RSI: 0000200000000500 RDI: 0000000000000003 [ 152.648088][ T8439] RBP: 00007ff53c876090 R08: 0000000000000000 R09: 0000000000000000 [ 152.648099][ T8439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 152.648109][ T8439] R13: 00007ff53bc16038 R14: 00007ff53bc15fa0 R15: 00007fff6116ba98 [ 152.648137][ T8439] [ 152.687752][ T36] bond2: (slave bridge0): failed to get link speed/duplex [ 153.119958][ T8456] vlan2: entered promiscuous mode [ 153.135142][ T8459] wg1: Caught tx_queue_len zero misconfig [ 153.166825][ T36] bond2: (slave bridge0): failed to get link speed/duplex [ 153.184336][ T8459] netlink: 4 bytes leftover after parsing attributes in process `syz.1.783'. [ 153.209164][ T8452] nbd0: detected capacity change from 0 to 63 [ 153.232235][ T5640] block nbd0: Receive control failed (result -104) [ 153.240951][ T5637] block nbd0: Receive control failed (result -32) [ 153.394042][ T8468] openvswitch: netlink: EtherType 0 is less than min 600 [ 153.426700][ T13] bond2: (slave bridge0): failed to get link speed/duplex [ 153.576993][ T12] bond2: (slave bridge0): failed to get link speed/duplex [ 153.840024][ T8488] FAULT_INJECTION: forcing a failure. [ 153.840024][ T8488] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 153.874666][ T8488] CPU: 1 UID: 0 PID: 8488 Comm: syz.4.796 Not tainted syzkaller #0 PREEMPT(full) [ 153.874689][ T8488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 153.874699][ T8488] Call Trace: [ 153.874706][ T8488] [ 153.874714][ T8488] dump_stack_lvl+0xe8/0x150 [ 153.874739][ T8488] should_fail_ex+0x412/0x560 [ 153.874766][ T8488] _copy_from_user+0x2d/0xb0 [ 153.874791][ T8488] do_bnep_sock_ioctl+0x293/0x650 [ 153.874815][ T8488] ? __pfx_do_bnep_sock_ioctl+0x10/0x10 [ 153.874840][ T8488] ? tomoyo_path_number_perm+0x219/0x630 [ 153.874884][ T8488] sock_do_ioctl+0x101/0x320 [ 153.874907][ T8488] ? __pfx_sock_do_ioctl+0x10/0x10 [ 153.874924][ T8488] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 153.874954][ T8488] sock_ioctl+0x5c6/0x7f0 [ 153.874975][ T8488] ? __pfx_sock_ioctl+0x10/0x10 [ 153.874994][ T8488] ? __fget_files+0x2a/0x420 [ 153.875014][ T8488] ? __fget_files+0x3a0/0x420 [ 153.875033][ T8488] ? __fget_files+0x2a/0x420 [ 153.875056][ T8488] ? bpf_lsm_file_ioctl+0x9/0x20 [ 153.875080][ T8488] ? __pfx_sock_ioctl+0x10/0x10 [ 153.875099][ T8488] __se_sys_ioctl+0xfc/0x170 [ 153.875122][ T8488] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.875141][ T8488] do_syscall_64+0x15f/0xf80 [ 153.875156][ T8488] ? trace_irq_disable+0x3b/0x140 [ 153.875180][ T8488] ? clear_bhb_loop+0x40/0x90 [ 153.875202][ T8488] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.875219][ T8488] RIP: 0033:0x7fa05259ce59 [ 153.875236][ T8488] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 153.875249][ T8488] RSP: 002b:00007fa05341f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 153.875268][ T8488] RAX: ffffffffffffffda RBX: 00007fa052815fa0 RCX: 00007fa05259ce59 [ 153.875280][ T8488] RDX: 00002000000000c0 RSI: 00000000400442c8 RDI: 0000000000000006 [ 153.875291][ T8488] RBP: 00007fa05341f090 R08: 0000000000000000 R09: 0000000000000000 [ 153.875302][ T8488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 153.875312][ T8488] R13: 00007fa052816038 R14: 00007fa052815fa0 R15: 00007ffed0841818 [ 153.875339][ T8488] [ 154.114817][ T8494] netlink: 'syz.1.797': attribute type 1 has an invalid length. [ 154.201735][ T8494] 8021q: adding VLAN 0 to HW filter on device bond6 [ 154.250748][ T8502] tipc: Enabled bearer , priority 0 [ 154.658449][ T8525] FAULT_INJECTION: forcing a failure. [ 154.658449][ T8525] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 154.696415][ T8525] CPU: 0 UID: 0 PID: 8525 Comm: syz.2.807 Not tainted syzkaller #0 PREEMPT(full) [ 154.696437][ T8525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 154.696447][ T8525] Call Trace: [ 154.696453][ T8525] [ 154.696461][ T8525] dump_stack_lvl+0xe8/0x150 [ 154.696486][ T8525] should_fail_ex+0x412/0x560 [ 154.696516][ T8525] _copy_from_user+0x2d/0xb0 [ 154.696540][ T8525] ___sys_sendmsg+0x1c6/0x360 [ 154.696566][ T8525] ? __lock_acquire+0x6b5/0x2cf0 [ 154.696588][ T8525] ? __pfx____sys_sendmsg+0x10/0x10 [ 154.696643][ T8525] ? __fget_files+0x2a/0x420 [ 154.696663][ T8525] ? __fget_files+0x3a0/0x420 [ 154.696691][ T8525] __x64_sys_sendmsg+0x1bd/0x2a0 [ 154.696718][ T8525] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 154.696752][ T8525] ? __pfx_ksys_write+0x10/0x10 [ 154.696791][ T8525] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.696811][ T8525] do_syscall_64+0x15f/0xf80 [ 154.696828][ T8525] ? trace_irq_disable+0x3b/0x140 [ 154.696852][ T8525] ? clear_bhb_loop+0x40/0x90 [ 154.696874][ T8525] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.696890][ T8525] RIP: 0033:0x7f942b59ce59 [ 154.696906][ T8525] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 154.696920][ T8525] RSP: 002b:00007f942c4c7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 154.696937][ T8525] RAX: ffffffffffffffda RBX: 00007f942b815fa0 RCX: 00007f942b59ce59 [ 154.696949][ T8525] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000008 [ 154.696960][ T8525] RBP: 00007f942c4c7090 R08: 0000000000000000 R09: 0000000000000000 [ 154.696970][ T8525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 154.696980][ T8525] R13: 00007f942b816038 R14: 00007f942b815fa0 R15: 00007fff5215d5f8 [ 154.697008][ T8525] [ 154.904640][ T8533] FAULT_INJECTION: forcing a failure. [ 154.904640][ T8533] name failslab, interval 1, probability 0, space 0, times 0 [ 154.932226][ T8533] CPU: 0 UID: 0 PID: 8533 Comm: syz.3.812 Not tainted syzkaller #0 PREEMPT(full) [ 154.932248][ T8533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 154.932258][ T8533] Call Trace: [ 154.932266][ T8533] [ 154.932273][ T8533] dump_stack_lvl+0xe8/0x150 [ 154.932297][ T8533] should_fail_ex+0x412/0x560 [ 154.932323][ T8533] should_failslab+0xa8/0x100 [ 154.932348][ T8533] ? skb_clone+0x212/0x3a0 [ 154.932364][ T8533] kmem_cache_alloc_noprof+0x87/0x650 [ 154.932385][ T8533] ? apparmor_capable+0x126/0x170 [ 154.932407][ T8533] skb_clone+0x212/0x3a0 [ 154.932421][ T8533] ? nfnetlink_rcv+0x4b0/0x27b0 [ 154.932446][ T8533] nfnetlink_rcv+0x4de/0x27b0 [ 154.932476][ T8533] ? kernel_text_address+0xa5/0xe0 [ 154.932501][ T8533] ? __kernel_text_address+0xd/0x30 [ 154.932526][ T8533] ? arch_stack_walk+0xfb/0x150 [ 154.932556][ T8533] ? stack_trace_save+0xa9/0x100 [ 154.932592][ T8533] ? __lock_acquire+0x6b5/0x2cf0 [ 154.932612][ T8533] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 154.932651][ T8533] ? __lock_acquire+0x6b5/0x2cf0 [ 154.932680][ T8533] ? __netlink_lookup+0xc6/0x8b0 [ 154.932715][ T8533] ? netlink_deliver_tap+0x2e/0x1b0 [ 154.932739][ T8533] ? netlink_deliver_tap+0x2e/0x1b0 [ 154.932767][ T8533] ? netlink_deliver_tap+0x2e/0x1b0 [ 154.932790][ T8533] ? netlink_deliver_tap+0x2e/0x1b0 [ 154.932818][ T8533] netlink_unicast+0x75c/0x8e0 [ 154.932848][ T8533] netlink_sendmsg+0x813/0xb40 [ 154.932880][ T8533] ? __pfx_netlink_sendmsg+0x10/0x10 [ 154.932906][ T8533] ? aa_sock_msg_perm+0xf1/0x1b0 [ 154.932931][ T8533] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 154.932957][ T8533] ____sys_sendmsg+0x972/0x9f0 [ 154.932981][ T8533] ? __might_fault+0xaf/0x130 [ 154.933008][ T8533] ? __pfx_____sys_sendmsg+0x10/0x10 [ 154.933041][ T8533] ? import_iovec+0x73/0xa0 [ 154.933069][ T8533] ___sys_sendmsg+0x2a5/0x360 [ 154.933092][ T8533] ? __lock_acquire+0x6b5/0x2cf0 [ 154.933115][ T8533] ? __pfx____sys_sendmsg+0x10/0x10 [ 154.933171][ T8533] ? __fget_files+0x2a/0x420 [ 154.933191][ T8533] ? __fget_files+0x3a0/0x420 [ 154.933219][ T8533] __x64_sys_sendmsg+0x1bd/0x2a0 [ 154.933246][ T8533] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 154.933278][ T8533] ? __pfx_ksys_write+0x10/0x10 [ 154.933309][ T8533] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.933328][ T8533] do_syscall_64+0x15f/0xf80 [ 154.933344][ T8533] ? trace_irq_disable+0x3b/0x140 [ 154.933369][ T8533] ? clear_bhb_loop+0x40/0x90 [ 154.933389][ T8533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.933406][ T8533] RIP: 0033:0x7ff53b99ce59 [ 154.933422][ T8533] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 154.933436][ T8533] RSP: 002b:00007ff53c876028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 154.933454][ T8533] RAX: ffffffffffffffda RBX: 00007ff53bc15fa0 RCX: 00007ff53b99ce59 [ 154.933466][ T8533] RDX: 0000000020008000 RSI: 0000200000000500 RDI: 0000000000000003 [ 154.933476][ T8533] RBP: 00007ff53c876090 R08: 0000000000000000 R09: 0000000000000000 [ 154.933486][ T8533] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 154.933495][ T8533] R13: 00007ff53bc16038 R14: 00007ff53bc15fa0 R15: 00007fff6116ba98 [ 154.933523][ T8533] [ 154.933535][ T8529] netlink: 'syz.4.811': attribute type 1 has an invalid length. [ 154.959637][ T8534] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 155.262860][ T8534] IPv6: NLM_F_CREATE should be set when creating new route [ 155.270156][ T8534] IPv6: NLM_F_CREATE should be set when creating new route [ 155.277403][ T8534] IPv6: NLM_F_CREATE should be set when creating new route [ 155.332631][ T8529] 8021q: adding VLAN 0 to HW filter on device bond6 [ 155.359070][ T8532] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.367327][ T8532] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.408356][ T8532] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.415547][ T8532] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.423078][ T8532] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.430263][ T8532] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.443021][ T8532] bond6: (slave bridge0): Enslaving as a backup interface with an up link [ 155.456996][ T8538] bridge_slave_1: entered promiscuous mode [ 155.471130][ T8543] tipc: Enabling of bearer rejected, already enabled [ 155.985576][ T8581] FAULT_INJECTION: forcing a failure. [ 155.985576][ T8581] name failslab, interval 1, probability 0, space 0, times 0 [ 156.003451][ T8581] CPU: 0 UID: 0 PID: 8581 Comm: syz.0.826 Not tainted syzkaller #0 PREEMPT(full) [ 156.003473][ T8581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 156.003494][ T8581] Call Trace: [ 156.003501][ T8581] [ 156.003508][ T8581] dump_stack_lvl+0xe8/0x150 [ 156.003533][ T8581] should_fail_ex+0x412/0x560 [ 156.003561][ T8581] should_failslab+0xa8/0x100 [ 156.003588][ T8581] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 156.003612][ T8581] ? __alloc_skb+0x186/0x7d0 [ 156.003634][ T8581] ? __alloc_skb+0x1d0/0x7d0 [ 156.003653][ T8581] ? __local_bh_enable_ip+0xd0/0x130 [ 156.003676][ T8581] __alloc_skb+0x1d0/0x7d0 [ 156.003714][ T8581] netlink_sendmsg+0x5d4/0xb40 [ 156.003750][ T8581] ? __pfx_netlink_sendmsg+0x10/0x10 [ 156.003778][ T8581] ? aa_sock_msg_perm+0xf1/0x1b0 [ 156.003802][ T8581] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 156.003827][ T8581] ____sys_sendmsg+0x972/0x9f0 [ 156.003860][ T8581] ? __might_fault+0xaf/0x130 [ 156.003887][ T8581] ? __pfx_____sys_sendmsg+0x10/0x10 [ 156.003921][ T8581] ? import_iovec+0x73/0xa0 [ 156.003950][ T8581] ___sys_sendmsg+0x2a5/0x360 [ 156.003974][ T8581] ? __lock_acquire+0x6b5/0x2cf0 [ 156.003995][ T8581] ? __pfx____sys_sendmsg+0x10/0x10 [ 156.004052][ T8581] ? __fget_files+0x2a/0x420 [ 156.004072][ T8581] ? __fget_files+0x3a0/0x420 [ 156.004103][ T8581] __x64_sys_sendmsg+0x1bd/0x2a0 [ 156.004131][ T8581] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 156.004166][ T8581] ? __pfx_ksys_write+0x10/0x10 [ 156.004200][ T8581] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.004220][ T8581] do_syscall_64+0x15f/0xf80 [ 156.004237][ T8581] ? trace_irq_disable+0x3b/0x140 [ 156.004264][ T8581] ? clear_bhb_loop+0x40/0x90 [ 156.004286][ T8581] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.004304][ T8581] RIP: 0033:0x7f4ea659ce59 [ 156.004320][ T8581] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 156.004333][ T8581] RSP: 002b:00007f4ea73f0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 156.004350][ T8581] RAX: ffffffffffffffda RBX: 00007f4ea6815fa0 RCX: 00007f4ea659ce59 [ 156.004362][ T8581] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000008 [ 156.004373][ T8581] RBP: 00007f4ea73f0090 R08: 0000000000000000 R09: 0000000000000000 [ 156.004384][ T8581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 156.004394][ T8581] R13: 00007f4ea6816038 R14: 00007f4ea6815fa0 R15: 00007ffe4744d7f8 [ 156.004424][ T8581] [ 156.367181][ T8573] syzkaller1: entered promiscuous mode [ 156.372927][ T8573] syzkaller1: entered allmulticast mode [ 156.760463][ T8598] __nla_validate_parse: 10 callbacks suppressed [ 156.760482][ T8598] netlink: 4 bytes leftover after parsing attributes in process `syz.2.831'. [ 156.792821][ T8600] netlink: 4 bytes leftover after parsing attributes in process `syz.0.832'. [ 156.966679][ T13] net_ratelimit: 24 callbacks suppressed [ 156.966696][ T13] bond6: (slave bridge0): failed to get link speed/duplex [ 156.986621][ T13] bond2: (slave bridge0): failed to get link speed/duplex [ 157.043352][ T8607] netlink: 32 bytes leftover after parsing attributes in process `syz.0.835'. [ 157.086736][ T13] bond6: (slave bridge0): failed to get link speed/duplex [ 157.129940][ T13] bond2: (slave bridge0): failed to get link speed/duplex [ 157.206819][ T13] bond6: (slave bridge0): failed to get link speed/duplex [ 157.225446][ T8620] openvswitch: netlink: Tunnel attr 78 out of range max 16 [ 157.267575][ T81] bond2: (slave bridge0): failed to get link speed/duplex [ 157.348362][ T36] bond6: (slave bridge0): failed to get link speed/duplex [ 157.363971][ T8629] netlink: 4 bytes leftover after parsing attributes in process `syz.4.839'. [ 157.396958][ T36] bond2: (slave bridge0): failed to get link speed/duplex [ 157.449619][ T8632] netlink: 4 bytes leftover after parsing attributes in process `syz.1.845'. [ 157.468517][ T81] bond6: (slave bridge0): failed to get link speed/duplex [ 157.729675][ T8646] netlink: 4 bytes leftover after parsing attributes in process `syz.0.847'. [ 157.841115][ T8649] FAULT_INJECTION: forcing a failure. [ 157.841115][ T8649] name failslab, interval 1, probability 0, space 0, times 0 [ 157.858721][ T8649] CPU: 1 UID: 0 PID: 8649 Comm: syz.1.849 Not tainted syzkaller #0 PREEMPT(full) [ 157.858743][ T8649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 157.858753][ T8649] Call Trace: [ 157.858760][ T8649] [ 157.858768][ T8649] dump_stack_lvl+0xe8/0x150 [ 157.858793][ T8649] should_fail_ex+0x412/0x560 [ 157.858821][ T8649] should_failslab+0xa8/0x100 [ 157.858849][ T8649] __kmalloc_cache_noprof+0x88/0x660 [ 157.858874][ T8649] ? nft_netdev_hook_alloc+0x5a/0x570 [ 157.858904][ T8649] nft_netdev_hook_alloc+0x5a/0x570 [ 157.858925][ T8649] ? __lock_acquire+0x6b5/0x2cf0 [ 157.858953][ T8649] nf_tables_parse_netdev_hooks+0x152/0xa30 [ 157.858988][ T8649] nft_flowtable_parse_hook+0x46a/0x920 [ 157.859014][ T8649] ? __pfx_nft_flowtable_parse_hook+0x10/0x10 [ 157.859034][ T8649] ? nft_pernet+0x23/0x240 [ 157.859063][ T8649] nf_tables_delflowtable+0xa85/0x1b10 [ 157.859112][ T8649] ? __pfx_nf_tables_delflowtable+0x10/0x10 [ 157.859136][ T8649] ? nfnl_pernet+0x23/0x240 [ 157.859185][ T8649] ? __nla_parse+0x40/0x60 [ 157.859222][ T8649] nfnetlink_rcv+0x123e/0x27b0 [ 157.859279][ T8649] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 157.859327][ T8649] ? ref_tracker_free+0x693/0x840 [ 157.859386][ T8649] ? __netlink_deliver_tap+0x807/0x850 [ 157.859420][ T8649] ? netlink_deliver_tap+0x2e/0x1b0 [ 157.859445][ T8649] ? netlink_deliver_tap+0x2e/0x1b0 [ 157.859473][ T8649] netlink_unicast+0x75c/0x8e0 [ 157.859507][ T8649] netlink_sendmsg+0x813/0xb40 [ 157.859541][ T8649] ? __pfx_netlink_sendmsg+0x10/0x10 [ 157.859568][ T8649] ? aa_sock_msg_perm+0xf1/0x1b0 [ 157.859596][ T8649] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 157.859628][ T8649] ____sys_sendmsg+0x972/0x9f0 [ 157.859654][ T8649] ? __might_fault+0xaf/0x130 [ 157.859683][ T8649] ? __pfx_____sys_sendmsg+0x10/0x10 [ 157.859716][ T8649] ? import_iovec+0x73/0xa0 [ 157.859745][ T8649] ___sys_sendmsg+0x2a5/0x360 [ 157.859768][ T8649] ? __lock_acquire+0x6b5/0x2cf0 [ 157.859791][ T8649] ? __pfx____sys_sendmsg+0x10/0x10 [ 157.859851][ T8649] ? __fget_files+0x2a/0x420 [ 157.859871][ T8649] ? __fget_files+0x3a0/0x420 [ 157.859902][ T8649] __x64_sys_sendmsg+0x1bd/0x2a0 [ 157.859929][ T8649] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 157.859974][ T8649] ? __pfx_ksys_write+0x10/0x10 [ 157.860007][ T8649] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.860026][ T8649] do_syscall_64+0x15f/0xf80 [ 157.860043][ T8649] ? trace_irq_disable+0x3b/0x140 [ 157.860068][ T8649] ? clear_bhb_loop+0x40/0x90 [ 157.860089][ T8649] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.860106][ T8649] RIP: 0033:0x7f8bf699ce59 [ 157.860122][ T8649] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 157.860135][ T8649] RSP: 002b:00007f8bf77d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 157.860152][ T8649] RAX: ffffffffffffffda RBX: 00007f8bf6c15fa0 RCX: 00007f8bf699ce59 [ 157.860164][ T8649] RDX: 0000000020008000 RSI: 0000200000000500 RDI: 0000000000000003 [ 157.860175][ T8649] RBP: 00007f8bf77d5090 R08: 0000000000000000 R09: 0000000000000000 [ 157.860185][ T8649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 157.860195][ T8649] R13: 00007f8bf6c16038 R14: 00007f8bf6c15fa0 R15: 00007ffe155aef78 [ 157.860224][ T8649] [ 158.231536][ T8654] netlink: 32 bytes leftover after parsing attributes in process `syz.0.851'. [ 158.602338][ T8670] netlink: 4 bytes leftover after parsing attributes in process `syz.0.858'. [ 158.677533][ T8660] bond3: entered promiscuous mode [ 158.688246][ T8660] 8021q: adding VLAN 0 to HW filter on device bond3 [ 158.815488][ T8684] netlink: 4 bytes leftover after parsing attributes in process `syz.4.861'. [ 158.839401][ T8685] FAULT_INJECTION: forcing a failure. [ 158.839401][ T8685] name failslab, interval 1, probability 0, space 0, times 0 [ 158.894480][ T8685] CPU: 1 UID: 0 PID: 8685 Comm: syz.0.863 Not tainted syzkaller #0 PREEMPT(full) [ 158.894501][ T8685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 158.894511][ T8685] Call Trace: [ 158.894518][ T8685] [ 158.894525][ T8685] dump_stack_lvl+0xe8/0x150 [ 158.894558][ T8685] should_fail_ex+0x412/0x560 [ 158.894585][ T8685] should_failslab+0xa8/0x100 [ 158.894612][ T8685] __kmalloc_cache_noprof+0x88/0x660 [ 158.894637][ T8685] ? nft_netdev_hook_alloc+0x220/0x570 [ 158.894666][ T8685] nft_netdev_hook_alloc+0x220/0x570 [ 158.894699][ T8685] nf_tables_parse_netdev_hooks+0x152/0xa30 [ 158.894733][ T8685] nft_flowtable_parse_hook+0x46a/0x920 [ 158.894760][ T8685] ? __pfx_nft_flowtable_parse_hook+0x10/0x10 [ 158.894780][ T8685] ? nft_pernet+0x23/0x240 [ 158.894809][ T8685] nf_tables_delflowtable+0xa85/0x1b10 [ 158.894843][ T8685] ? __pfx_nf_tables_delflowtable+0x10/0x10 [ 158.894866][ T8685] ? nfnl_pernet+0x23/0x240 [ 158.894900][ T8685] ? __nla_parse+0x40/0x60 [ 158.894929][ T8685] nfnetlink_rcv+0x123e/0x27b0 [ 158.894981][ T8685] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 158.895019][ T8685] ? ref_tracker_free+0x693/0x840 [ 158.895069][ T8685] ? __netlink_deliver_tap+0x807/0x850 [ 158.895098][ T8685] ? netlink_deliver_tap+0x2e/0x1b0 [ 158.895117][ T8685] ? netlink_deliver_tap+0x2e/0x1b0 [ 158.895141][ T8685] netlink_unicast+0x75c/0x8e0 [ 158.895171][ T8685] netlink_sendmsg+0x813/0xb40 [ 158.895198][ T8685] ? __pfx_netlink_sendmsg+0x10/0x10 [ 158.895221][ T8685] ? aa_sock_msg_perm+0xf1/0x1b0 [ 158.895241][ T8685] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 158.895263][ T8685] ____sys_sendmsg+0x972/0x9f0 [ 158.895284][ T8685] ? __might_fault+0xaf/0x130 [ 158.895307][ T8685] ? __pfx_____sys_sendmsg+0x10/0x10 [ 158.895335][ T8685] ? import_iovec+0x73/0xa0 [ 158.895358][ T8685] ___sys_sendmsg+0x2a5/0x360 [ 158.895381][ T8685] ? __lock_acquire+0x6b5/0x2cf0 [ 158.895400][ T8685] ? __pfx____sys_sendmsg+0x10/0x10 [ 158.895447][ T8685] ? __fget_files+0x2a/0x420 [ 158.895464][ T8685] ? __fget_files+0x3a0/0x420 [ 158.895488][ T8685] __x64_sys_sendmsg+0x1bd/0x2a0 [ 158.895511][ T8685] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 158.895539][ T8685] ? __pfx_ksys_write+0x10/0x10 [ 158.895571][ T8685] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.895586][ T8685] do_syscall_64+0x15f/0xf80 [ 158.895600][ T8685] ? trace_irq_disable+0x3b/0x140 [ 158.895621][ T8685] ? clear_bhb_loop+0x40/0x90 [ 158.895639][ T8685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.895653][ T8685] RIP: 0033:0x7f4ea659ce59 [ 158.895666][ T8685] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 158.895677][ T8685] RSP: 002b:00007f4ea73f0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 158.895693][ T8685] RAX: ffffffffffffffda RBX: 00007f4ea6815fa0 RCX: 00007f4ea659ce59 [ 158.895703][ T8685] RDX: 0000000020008000 RSI: 0000200000000500 RDI: 0000000000000003 [ 158.895712][ T8685] RBP: 00007f4ea73f0090 R08: 0000000000000000 R09: 0000000000000000 [ 158.895720][ T8685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 158.895728][ T8685] R13: 00007f4ea6816038 R14: 00007f4ea6815fa0 R15: 00007ffe4744d7f8 [ 158.895751][ T8685] [ 159.219806][ T8694] netlink: 24 bytes leftover after parsing attributes in process `syz.2.865'. [ 159.255570][ T8693] netlink: 'syz.1.866': attribute type 3 has an invalid length. [ 159.619163][ T8709] netlink: 'syz.0.872': attribute type 1 has an invalid length. [ 159.733434][ T8709] bond6: entered promiscuous mode [ 159.739533][ T8709] 8021q: adding VLAN 0 to HW filter on device bond6 [ 159.753296][ T8720] ip6tnl0: Caught tx_queue_len zero misconfig [ 159.863902][ T8709] bond6: (slave bridge4): making interface the new active one [ 159.882706][ T8709] bridge4: entered promiscuous mode [ 159.901528][ T8709] bond6: (slave bridge4): Enslaving as an active interface with an up link [ 160.242494][ T8748] netlink: 'syz.2.884': attribute type 1 has an invalid length. [ 160.373375][ T8748] 8021q: adding VLAN 0 to HW filter on device bond4 [ 160.381628][ T8750] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.388809][ T8750] bridge0: port 2(bridge_slave_1) entered forwarding state [ 160.396271][ T8750] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.403440][ T8750] bridge0: port 1(bridge_slave_0) entered forwarding state [ 160.438202][ T8750] bond4: (slave bridge0): Enslaving as a backup interface with an up link [ 161.132425][ T8790] xt_limit: Overflow, try lower: 324382443/0 [ 161.718618][ T5761] IPVS: starting estimator thread 0... [ 161.816960][ T8810] IPVS: using max 30 ests per chain, 72000 per kthread [ 161.990660][ T8821] __nla_validate_parse: 11 callbacks suppressed [ 161.990677][ T8821] netlink: 8 bytes leftover after parsing attributes in process `syz.1.905'. [ 161.991248][ T8822] netlink: 8 bytes leftover after parsing attributes in process `syz.1.905'. [ 162.008291][ T8821] IPVS: Unknown mcast interface: vcan0 [ 162.090695][ T8819] bond5: entered promiscuous mode [ 162.096385][ T8819] 8021q: adding VLAN 0 to HW filter on device bond5 [ 162.104030][ T8819] bridge0: port 4(bond5) entered blocking state [ 162.110780][ T8819] bridge0: port 4(bond5) entered disabled state [ 162.117423][ T8819] bond5: entered allmulticast mode [ 162.125898][ T8819] bridge0: port 4(bond5) entered blocking state [ 162.132331][ T8819] bridge0: port 4(bond5) entered forwarding state [ 162.140489][ T8822] IPVS: Unknown mcast interface: vcan0 [ 162.147648][ T12] net_ratelimit: 74 callbacks suppressed [ 162.147662][ T12] bond6: (slave bridge0): failed to get link speed/duplex [ 162.197777][ T12] bond4: (slave bridge0): failed to get link speed/duplex [ 162.218907][ T12] bond2: (slave bridge0): failed to get link speed/duplex [ 162.262593][ T8837] netlink: 4 bytes leftover after parsing attributes in process `syz.0.908'. [ 162.287488][ T12] bond6: (slave bridge0): failed to get link speed/duplex [ 162.478709][ T486] bond6: (slave bridge0): failed to get link speed/duplex [ 162.609473][ T12] bridge0: port 4(bond5) entered disabled state [ 162.696802][ T486] bond4: (slave bridge0): failed to get link speed/duplex [ 162.726652][ T486] bond6: (slave bridge0): failed to get link speed/duplex [ 162.993632][ T8865] netlink: 8 bytes leftover after parsing attributes in process `syz.3.917'. [ 163.006623][ T486] bond2: (slave bridge0): failed to get link speed/duplex [ 163.015251][ T8865] netlink: 8 bytes leftover after parsing attributes in process `syz.3.917'. [ 163.049738][ T8867] netlink: 'syz.0.918': attribute type 1 has an invalid length. [ 163.066968][ T486] bond4: (slave bridge0): failed to get link speed/duplex [ 163.182790][ T8867] 8021q: adding VLAN 0 to HW filter on device bond7 [ 163.198914][ T8876] netlink: 4 bytes leftover after parsing attributes in process `syz.3.920'. [ 163.245784][ T8873] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.253310][ T8873] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.270868][ T8873] bond2: (slave bridge0): Removing an active aggregator [ 163.281158][ T8873] bond2: (slave bridge0): Releasing backup interface [ 163.298484][ T8873] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.305649][ T8873] bridge0: port 2(bridge_slave_1) entered forwarding state [ 163.313465][ T8873] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.320602][ T8873] bridge0: port 1(bridge_slave_0) entered forwarding state [ 163.331852][ T8873] bond7: (slave bridge0): Enslaving as a backup interface with an up link [ 163.347360][ T8882] lo: entered allmulticast mode [ 163.357618][ T8878] lo: left allmulticast mode [ 163.366725][ T486] bond6: (slave bridge0): failed to get link speed/duplex [ 163.527192][ T8889] netlink: 20 bytes leftover after parsing attributes in process `syz.0.924'. [ 163.552628][ T8891] vlan2: entered promiscuous mode [ 163.858719][ T8899] netlink: 24 bytes leftover after parsing attributes in process `syz.3.929'. [ 163.927709][ T8906] netlink: 4 bytes leftover after parsing attributes in process `syz.2.932'. [ 163.971126][ T8912] netlink: 8 bytes leftover after parsing attributes in process `syz.3.929'. [ 164.120791][ T8910] hsr_slave_0: left promiscuous mode [ 164.147403][ T8910] hsr_slave_1: left promiscuous mode [ 164.216436][ T8926] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 164.225542][ T8926] syzkaller1: linktype set to 780 [ 165.301727][ T8968] hsr_slave_0: left promiscuous mode [ 165.309963][ T8968] hsr_slave_1: left promiscuous mode [ 165.486850][ T8974] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 165.694540][ T8989] erspan1: entered promiscuous mode [ 165.702539][ T8989] erspan1: entered allmulticast mode [ 165.709278][ T8992] syz_tun: entered allmulticast mode [ 165.888990][ T8999] vlan2: entered promiscuous mode [ 165.953757][ T9007] netlink: 'syz.4.964': attribute type 1 has an invalid length. [ 165.985716][ T9010] syz_tun: entered allmulticast mode [ 166.042708][ T9007] bond7: entered promiscuous mode [ 166.049605][ T9007] 8021q: adding VLAN 0 to HW filter on device bond7 [ 166.061681][ T9010] syz_tun: left allmulticast mode [ 166.194983][ T9002] bond7: (slave bridge5): making interface the new active one [ 166.219092][ T9002] bridge5: entered promiscuous mode [ 166.230877][ T9002] bond7: (slave bridge5): Enslaving as an active interface with an up link [ 166.342219][ T9025] lo: entered allmulticast mode [ 166.371872][ T9027] netlink: 'syz.0.972': attribute type 10 has an invalid length. [ 166.412523][ T9027] team0: Port device dummy0 added [ 166.618579][ T9040] lo: left allmulticast mode [ 166.637437][ T9038] syzkaller0: entered promiscuous mode [ 166.643544][ T9042] netlink: 'syz.0.979': attribute type 1 has an invalid length. [ 166.657280][ T9038] syzkaller0: entered allmulticast mode [ 166.765513][ T36] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.776195][ T36] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.848390][ T36] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.895720][ T36] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 167.114181][ T9067] __nla_validate_parse: 10 callbacks suppressed [ 167.114200][ T9067] netlink: 4 bytes leftover after parsing attributes in process `syz.4.986'. [ 167.191622][ T9071] xt_limit: Overflow, try lower: 324382443/0 [ 167.276764][ T1330] net_ratelimit: 69 callbacks suppressed [ 167.276780][ T1330] bond7: (slave bridge0): failed to get link speed/duplex [ 167.326713][ T36] bond6: (slave bridge0): failed to get link speed/duplex [ 167.346687][ T36] bond4: (slave bridge0): failed to get link speed/duplex [ 167.424710][ T9089] netlink: 8 bytes leftover after parsing attributes in process `syz.4.994'. [ 167.427401][ T13] bond7: (slave bridge0): failed to get link speed/duplex [ 167.448430][ T13] bond6: (slave bridge0): failed to get link speed/duplex [ 167.466731][ T13] bond4: (slave bridge0): failed to get link speed/duplex [ 167.483710][ T9091] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.996'. [ 167.490911][ T9093] FAULT_INJECTION: forcing a failure. [ 167.490911][ T9093] name failslab, interval 1, probability 0, space 0, times 0 [ 167.493236][ T9091] netlink: Unknown conntrack attr (0) [ 167.505685][ T9093] CPU: 0 UID: 0 PID: 9093 Comm: syz.0.995 Not tainted syzkaller #0 PREEMPT(full) [ 167.505705][ T9093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 167.505715][ T9093] Call Trace: [ 167.505722][ T9093] [ 167.505729][ T9093] dump_stack_lvl+0xe8/0x150 [ 167.505755][ T9093] should_fail_ex+0x412/0x560 [ 167.505782][ T9093] should_failslab+0xa8/0x100 [ 167.505808][ T9093] ? fib6_add_1+0xa3a/0x1460 [ 167.505830][ T9093] kmem_cache_alloc_noprof+0x87/0x650 [ 167.505850][ T9093] ? fib6_add_1+0x9c1/0x1460 [ 167.505871][ T9093] ? kmem_cache_alloc_noprof+0x15a/0x650 [ 167.505904][ T9093] fib6_add_1+0xa3a/0x1460 [ 167.505938][ T9093] fib6_add+0x211/0x18c0 [ 167.505969][ T9093] ? do_raw_spin_lock+0x12b/0x2f0 [ 167.505993][ T9093] ? __pfx_fib6_add+0x10/0x10 [ 167.506023][ T9093] ? ip6_route_add+0xc9/0x1b0 [ 167.506049][ T9093] ip6_route_add+0xde/0x1b0 [ 167.506074][ T9093] addrconf_prefix_route+0x3a2/0x480 [ 167.506097][ T9093] ? addrconf_prefix_route+0xf5/0x480 [ 167.506117][ T9093] ? __pfx_addrconf_prefix_route+0x10/0x10 [ 167.506135][ T9093] ? nlmsg_notify+0x14a/0x1a0 [ 167.506171][ T9093] ? __pfx___ipv6_ifa_notify+0x10/0x10 [ 167.506197][ T9093] ? inet6_addr_modify+0x6b4/0x11d0 [ 167.506217][ T9093] ? __local_bh_enable_ip+0xd0/0x130 [ 167.506239][ T9093] inet6_addr_modify+0x9bb/0x11d0 [ 167.506272][ T9093] inet6_rtm_newaddr+0x9d0/0xe30 [ 167.506297][ T9093] ? __pfx_inet6_rtm_newaddr+0x10/0x10 [ 167.506312][ T9093] ? __dev_queue_xmit+0x2b6/0x3950 [ 167.506338][ T9093] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 167.506373][ T9093] ? __pfx_inet6_rtm_newaddr+0x10/0x10 [ 167.506389][ T9093] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 167.506415][ T9093] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 167.506436][ T9093] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 167.506457][ T9093] ? ref_tracker_free+0x693/0x840 [ 167.506481][ T9093] ? __pfx_ref_tracker_free+0x10/0x10 [ 167.506505][ T9093] ? __asan_memcpy+0x40/0x70 [ 167.506524][ T9093] ? __skb_clone+0x63/0x7a0 [ 167.506555][ T9093] netlink_rcv_skb+0x232/0x4b0 [ 167.506579][ T9093] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 167.506602][ T9093] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 167.506636][ T9093] ? netlink_deliver_tap+0x2e/0x1b0 [ 167.506659][ T9093] ? netlink_deliver_tap+0x2e/0x1b0 [ 167.506687][ T9093] netlink_unicast+0x75c/0x8e0 [ 167.506717][ T9093] netlink_sendmsg+0x813/0xb40 [ 167.506749][ T9093] ? __pfx_netlink_sendmsg+0x10/0x10 [ 167.506775][ T9093] ? aa_sock_msg_perm+0xf1/0x1b0 [ 167.506799][ T9093] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 167.506825][ T9093] ____sys_sendmsg+0x972/0x9f0 [ 167.506848][ T9093] ? __might_fault+0xaf/0x130 [ 167.506875][ T9093] ? __pfx_____sys_sendmsg+0x10/0x10 [ 167.506913][ T9093] ? import_iovec+0x73/0xa0 [ 167.506940][ T9093] ___sys_sendmsg+0x2a5/0x360 [ 167.506963][ T9093] ? __lock_acquire+0x6b5/0x2cf0 [ 167.506985][ T9093] ? __pfx____sys_sendmsg+0x10/0x10 [ 167.507041][ T9093] ? __fget_files+0x2a/0x420 [ 167.507060][ T9093] ? __fget_files+0x3a0/0x420 [ 167.507089][ T9093] __x64_sys_sendmsg+0x1bd/0x2a0 [ 167.507115][ T9093] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 167.507148][ T9093] ? __pfx_ksys_write+0x10/0x10 [ 167.507179][ T9093] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.507198][ T9093] do_syscall_64+0x15f/0xf80 [ 167.507213][ T9093] ? trace_irq_disable+0x3b/0x140 [ 167.507237][ T9093] ? clear_bhb_loop+0x40/0x90 [ 167.507257][ T9093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.507274][ T9093] RIP: 0033:0x7f4ea659ce59 [ 167.507290][ T9093] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 167.507305][ T9093] RSP: 002b:00007f4ea73f0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 167.507323][ T9093] RAX: ffffffffffffffda RBX: 00007f4ea6815fa0 RCX: 00007f4ea659ce59 [ 167.507336][ T9093] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000007 [ 167.507346][ T9093] RBP: 00007f4ea73f0090 R08: 0000000000000000 R09: 0000000000000000 [ 167.507357][ T9093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 167.507367][ T9093] R13: 00007f4ea6816038 R14: 00007f4ea6815fa0 R15: 00007ffe4744d7f8 [ 167.507395][ T9093] [ 167.546619][ T1330] bond7: (slave bridge0): failed to get link speed/duplex [ 167.574183][ T9096] netlink: 'syz.0.997': attribute type 1 has an invalid length. [ 167.597483][ T59] bond6: (slave bridge0): failed to get link speed/duplex [ 167.602052][ T9096] netlink: 4 bytes leftover after parsing attributes in process `syz.0.997'. [ 167.612774][ T59] bond4: (slave bridge0): failed to get link speed/duplex [ 167.986460][ T9091] batman_adv: batadv0: Adding interface: macvtap1 [ 167.993313][ T9091] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 168.020637][ T9091] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 168.172071][ T9108] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1000'. [ 168.245591][ T9115] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1001'. [ 168.303324][ T9117] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1003'. [ 168.342117][ T9103] netlink: 4 bytes leftover after parsing attributes in process `syz.3.999'. [ 168.475370][ T9124] FAULT_INJECTION: forcing a failure. [ 168.475370][ T9124] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 168.507073][ T9124] CPU: 1 UID: 0 PID: 9124 Comm: syz.0.1006 Not tainted syzkaller #0 PREEMPT(full) [ 168.507097][ T9124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 168.507108][ T9124] Call Trace: [ 168.507115][ T9124] [ 168.507123][ T9124] dump_stack_lvl+0xe8/0x150 [ 168.507149][ T9124] should_fail_ex+0x412/0x560 [ 168.507178][ T9124] _copy_to_user+0x31/0xb0 [ 168.507205][ T9124] simple_read_from_buffer+0xe1/0x170 [ 168.507232][ T9124] proc_fail_nth_read+0x1bb/0x230 [ 168.507259][ T9124] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 168.507284][ T9124] ? rw_verify_area+0x2a6/0x4d0 [ 168.507307][ T9124] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 168.507331][ T9124] vfs_read+0x20c/0xa70 [ 168.507359][ T9124] ? __pfx___mutex_lock+0x10/0x10 [ 168.507378][ T9124] ? __pfx_vfs_read+0x10/0x10 [ 168.507403][ T9124] ? __fget_files+0x2a/0x420 [ 168.507428][ T9124] ? __fget_files+0x3a0/0x420 [ 168.507448][ T9124] ? __fget_files+0x2a/0x420 [ 168.507477][ T9124] ksys_read+0x150/0x270 [ 168.507503][ T9124] ? __pfx_ksys_read+0x10/0x10 [ 168.507536][ T9124] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.507562][ T9124] do_syscall_64+0x15f/0xf80 [ 168.507578][ T9124] ? trace_irq_disable+0x3b/0x140 [ 168.507603][ T9124] ? clear_bhb_loop+0x40/0x90 [ 168.507625][ T9124] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.507642][ T9124] RIP: 0033:0x7f4ea655d68e [ 168.507659][ T9124] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 168.507674][ T9124] RSP: 002b:00007f4ea73effe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 168.507693][ T9124] RAX: ffffffffffffffda RBX: 00007f4ea73f06c0 RCX: 00007f4ea655d68e [ 168.507705][ T9124] RDX: 000000000000000f RSI: 00007f4ea73f00a0 RDI: 0000000000000004 [ 168.507716][ T9124] RBP: 00007f4ea73f0090 R08: 0000000000000000 R09: 0000000000000000 [ 168.507727][ T9124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 168.507737][ T9124] R13: 00007f4ea6816038 R14: 00007f4ea6815fa0 R15: 00007ffe4744d7f8 [ 168.507767][ T9124] [ 169.125092][ T9154] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1017'. [ 169.413165][ T9170] syz_tun: entered allmulticast mode [ 169.550733][ T9180] netlink: 'syz.2.1030': attribute type 15 has an invalid length. [ 169.578035][ T9180] netlink: 666 bytes leftover after parsing attributes in process `syz.2.1030'. [ 169.887223][ T9198] netlink: 'syz.2.1035': attribute type 21 has an invalid length. [ 171.311153][ T9265] xt_hashlimit: size too large, truncated to 1048576 [ 171.641103][ T9274] tipc: Enabling of bearer rejected, already enabled [ 172.155229][ T9308] xt_hashlimit: size too large, truncated to 1048576 [ 172.308340][ T9318] net_ratelimit: 90 callbacks suppressed [ 172.308358][ T9318] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 172.326894][ T9319] __nla_validate_parse: 8 callbacks suppressed [ 172.326910][ T9319] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1077'. [ 172.376734][ T12] bond4: (slave bridge0): failed to get link speed/duplex [ 172.418047][ T12] bond6: (slave bridge0): failed to get link speed/duplex [ 172.459518][ T12] bond7: (slave bridge0): failed to get link speed/duplex [ 172.498218][ T9326] netlink: 'syz.1.1077': attribute type 2 has an invalid length. [ 172.516307][ T9326] netlink: 'syz.1.1077': attribute type 2 has an invalid length. [ 172.556330][ T9325] bond8: entered promiscuous mode [ 172.584243][ T1330] bond4: (slave bridge0): failed to get link speed/duplex [ 172.607328][ T12] bond6: (slave bridge0): failed to get link speed/duplex [ 172.647583][ T12] bond7: (slave bridge0): failed to get link speed/duplex [ 172.706716][ T13] bond4: (slave bridge0): failed to get link speed/duplex [ 172.723870][ T9337] xt_limit: Overflow, try lower: 324382443/0 [ 172.759305][ T13] bond6: (slave bridge0): failed to get link speed/duplex [ 172.846924][ T13] bond7: (slave bridge0): failed to get link speed/duplex [ 173.137814][ T9359] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1083'. [ 173.528572][ T9373] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1094'. [ 173.545212][ T9373] FAULT_INJECTION: forcing a failure. [ 173.545212][ T9373] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 173.551384][ T9375] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1093'. [ 173.559419][ T9373] CPU: 1 UID: 0 PID: 9373 Comm: syz.3.1094 Not tainted syzkaller #0 PREEMPT(full) [ 173.559440][ T9373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 173.559462][ T9373] Call Trace: [ 173.559470][ T9373] [ 173.559477][ T9373] dump_stack_lvl+0xe8/0x150 [ 173.559502][ T9373] should_fail_ex+0x412/0x560 [ 173.559530][ T9373] _copy_to_user+0x31/0xb0 [ 173.559556][ T9373] simple_read_from_buffer+0xe1/0x170 [ 173.559582][ T9373] proc_fail_nth_read+0x1bb/0x230 [ 173.559607][ T9373] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 173.559632][ T9373] ? rw_verify_area+0x2a6/0x4d0 [ 173.559654][ T9373] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 173.559677][ T9373] vfs_read+0x20c/0xa70 [ 173.559704][ T9373] ? __pfx___mutex_lock+0x10/0x10 [ 173.559723][ T9373] ? __pfx_vfs_read+0x10/0x10 [ 173.559751][ T9373] ? __fget_files+0x2a/0x420 [ 173.559775][ T9373] ? __fget_files+0x3a0/0x420 [ 173.559794][ T9373] ? __fget_files+0x2a/0x420 [ 173.559823][ T9373] ksys_read+0x150/0x270 [ 173.559848][ T9373] ? __pfx_ksys_read+0x10/0x10 [ 173.559878][ T9373] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.559897][ T9373] do_syscall_64+0x15f/0xf80 [ 173.559913][ T9373] ? trace_irq_disable+0x3b/0x140 [ 173.559938][ T9373] ? clear_bhb_loop+0x40/0x90 [ 173.559966][ T9373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.559983][ T9373] RIP: 0033:0x7ff53b95d68e [ 173.559999][ T9373] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 173.560014][ T9373] RSP: 002b:00007ff53c875fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 173.560031][ T9373] RAX: ffffffffffffffda RBX: 00007ff53c8766c0 RCX: 00007ff53b95d68e [ 173.560044][ T9373] RDX: 000000000000000f RSI: 00007ff53c8760a0 RDI: 0000000000000004 [ 173.560054][ T9373] RBP: 00007ff53c876090 R08: 0000000000000000 R09: 0000000000000000 [ 173.560064][ T9373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 173.560074][ T9373] R13: 00007ff53bc16038 R14: 00007ff53bc15fa0 R15: 00007fff6116ba98 [ 173.560103][ T9373] [ 173.615340][ T9377] Bluetooth: MGMT ver 1.23 [ 173.812657][ T9348] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 173.989986][ T9382] FAULT_INJECTION: forcing a failure. [ 173.989986][ T9382] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 174.020131][ T9386] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1097'. [ 174.029550][ T9382] CPU: 1 UID: 0 PID: 9382 Comm: syz.0.1096 Not tainted syzkaller #0 PREEMPT(full) [ 174.029572][ T9382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 174.029582][ T9382] Call Trace: [ 174.029589][ T9382] [ 174.029596][ T9382] dump_stack_lvl+0xe8/0x150 [ 174.029621][ T9382] should_fail_ex+0x412/0x560 [ 174.029648][ T9382] _copy_from_iter+0x1d3/0x1670 [ 174.029674][ T9382] ? rcu_is_watching+0x15/0xb0 [ 174.029701][ T9382] ? __pfx__copy_from_iter+0x10/0x10 [ 174.029729][ T9382] ? netlink_sendmsg+0x650/0xb40 [ 174.029753][ T9382] ? skb_put+0x11b/0x210 [ 174.029779][ T9382] netlink_sendmsg+0x6c0/0xb40 [ 174.029811][ T9382] ? __pfx_netlink_sendmsg+0x10/0x10 [ 174.029839][ T9382] ? aa_sock_msg_perm+0xf1/0x1b0 [ 174.029863][ T9382] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 174.029890][ T9382] ____sys_sendmsg+0x972/0x9f0 [ 174.029916][ T9382] ? __might_fault+0xaf/0x130 [ 174.029943][ T9382] ? __pfx_____sys_sendmsg+0x10/0x10 [ 174.029974][ T9382] ? import_iovec+0x73/0xa0 [ 174.030000][ T9382] ___sys_sendmsg+0x2a5/0x360 [ 174.030023][ T9382] ? __lock_acquire+0x6b5/0x2cf0 [ 174.030045][ T9382] ? __pfx____sys_sendmsg+0x10/0x10 [ 174.030098][ T9382] ? __fget_files+0x2a/0x420 [ 174.030117][ T9382] ? __fget_files+0x3a0/0x420 [ 174.030144][ T9382] __x64_sys_sendmsg+0x1bd/0x2a0 [ 174.030171][ T9382] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 174.030203][ T9382] ? __pfx_ksys_write+0x10/0x10 [ 174.030234][ T9382] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.030252][ T9382] do_syscall_64+0x15f/0xf80 [ 174.030268][ T9382] ? trace_irq_disable+0x3b/0x140 [ 174.030293][ T9382] ? clear_bhb_loop+0x40/0x90 [ 174.030315][ T9382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.030332][ T9382] RIP: 0033:0x7f4ea659ce59 [ 174.030348][ T9382] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 174.030363][ T9382] RSP: 002b:00007f4ea73f0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 174.030390][ T9382] RAX: ffffffffffffffda RBX: 00007f4ea6815fa0 RCX: 00007f4ea659ce59 [ 174.030402][ T9382] RDX: 0000000000048810 RSI: 0000200000000140 RDI: 0000000000000008 [ 174.030413][ T9382] RBP: 00007f4ea73f0090 R08: 0000000000000000 R09: 0000000000000000 [ 174.030424][ T9382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 174.030434][ T9382] R13: 00007f4ea6816038 R14: 00007f4ea6815fa0 R15: 00007ffe4744d7f8 [ 174.030464][ T9382] [ 174.480298][ T9399] xt_hashlimit: size too large, truncated to 1048576 [ 174.530379][ T9405] FAULT_INJECTION: forcing a failure. [ 174.530379][ T9405] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 174.544686][ T9405] CPU: 1 UID: 0 PID: 9405 Comm: syz.4.1104 Not tainted syzkaller #0 PREEMPT(full) [ 174.544708][ T9405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 174.544719][ T9405] Call Trace: [ 174.544727][ T9405] [ 174.544734][ T9405] dump_stack_lvl+0xe8/0x150 [ 174.544760][ T9405] should_fail_ex+0x412/0x560 [ 174.544788][ T9405] _copy_from_user+0x2d/0xb0 [ 174.544817][ T9405] __sys_bpf+0x229/0x950 [ 174.544846][ T9405] ? __pfx___sys_bpf+0x10/0x10 [ 174.544887][ T9405] ? ksys_write+0x242/0x270 [ 174.544915][ T9405] ? __pfx_ksys_write+0x10/0x10 [ 174.544943][ T9405] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.544963][ T9405] __x64_sys_bpf+0x7c/0x90 [ 174.544988][ T9405] do_syscall_64+0x15f/0xf80 [ 174.545005][ T9405] ? trace_irq_disable+0x3b/0x140 [ 174.545030][ T9405] ? clear_bhb_loop+0x40/0x90 [ 174.545053][ T9405] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.545071][ T9405] RIP: 0033:0x7fa05259ce59 [ 174.545095][ T9405] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 174.545111][ T9405] RSP: 002b:00007fa0533fe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 174.545130][ T9405] RAX: ffffffffffffffda RBX: 00007fa052816090 RCX: 00007fa05259ce59 [ 174.545143][ T9405] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 174.545155][ T9405] RBP: 00007fa0533fe090 R08: 0000000000000000 R09: 0000000000000000 [ 174.545166][ T9405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 174.545177][ T9405] R13: 00007fa052816128 R14: 00007fa052816090 R15: 00007ffed0841818 [ 174.545206][ T9405] [ 174.848466][ T9410] tipc: Resetting bearer [ 174.989178][ T9410] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 175.018019][ T9410] bond2: left promiscuous mode [ 175.022896][ T9410] bridge1: left promiscuous mode [ 175.030484][ T9410] bond3: left promiscuous mode [ 175.035813][ T9410] bond4: left promiscuous mode [ 175.041663][ T9410] bond5: left promiscuous mode [ 175.048424][ T9410] bridge3: left promiscuous mode [ 175.103488][ T9420] dvmrp0: entered allmulticast mode [ 175.191140][ T9422] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1108'. [ 175.544687][ T9439] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1112'. [ 175.757155][ T9444] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1110'. [ 176.673669][ T9465] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 176.680983][ T9465] IPv6: NLM_F_CREATE should be set when creating new route [ 176.688284][ T9465] IPv6: NLM_F_CREATE should be set when creating new route [ 176.695492][ T9465] IPv6: NLM_F_CREATE should be set when creating new route [ 179.199732][ T13] net_ratelimit: 64 callbacks suppressed [ 179.199751][ T13] bond7: (slave bridge0): failed to get link speed/duplex [ 179.256639][ T13] bond4: (slave bridge0): failed to get link speed/duplex [ 179.297623][ T81] bond6: (slave bridge0): failed to get link speed/duplex [ 179.356767][ T81] bond7: (slave bridge0): failed to get link speed/duplex [ 179.392860][ T59] bond4: (slave bridge0): failed to get link speed/duplex [ 179.447401][ T59] bond6: (slave bridge0): failed to get link speed/duplex [ 179.506611][ T1330] bond7: (slave bridge0): failed to get link speed/duplex [ 179.526642][ T1330] bond4: (slave bridge0): failed to get link speed/duplex [ 179.576861][ T1330] bond6: (slave bridge0): failed to get link speed/duplex [ 179.626708][ T36] bond7: (slave bridge0): failed to get link speed/duplex [ 179.742715][ T9495] ip6gre1: entered promiscuous mode [ 179.757609][ T9495] ip6gre1: entered allmulticast mode [ 180.029474][ T9515] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1141'. [ 180.032542][ T9516] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1135'. [ 180.047379][ T9515] netlink: 19 bytes leftover after parsing attributes in process `syz.0.1141'. [ 180.130980][ T9520] IPVS: set_ctl: invalid protocol: 58 172.30.0.5:20004 [ 180.250223][ T9526] syzkaller0: entered promiscuous mode [ 180.256086][ T9526] syzkaller0: entered allmulticast mode [ 180.416103][ T9533] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1148'. [ 180.437744][ T9538] ip6gre1: entered promiscuous mode [ 180.444811][ T9533] netlink: 'syz.4.1148': attribute type 20 has an invalid length. [ 180.452777][ T9538] ip6gre1: entered allmulticast mode [ 180.460420][ T36] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 180.475971][ T36] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 180.487039][ T5732] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 180.534502][ T9543] netlink: 'syz.0.1151': attribute type 1 has an invalid length. [ 180.700519][ T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 180.722244][ T9549] netlink: 292 bytes leftover after parsing attributes in process `syz.1.1154'. [ 180.724863][ T9553] FAULT_INJECTION: forcing a failure. [ 180.724863][ T9553] name failslab, interval 1, probability 0, space 0, times 0 [ 180.747444][ T9553] CPU: 0 UID: 0 PID: 9553 Comm: syz.4.1156 Not tainted syzkaller #0 PREEMPT(full) [ 180.747464][ T9553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 180.747473][ T9553] Call Trace: [ 180.747480][ T9553] [ 180.747487][ T9553] dump_stack_lvl+0xe8/0x150 [ 180.747508][ T9553] should_fail_ex+0x412/0x560 [ 180.747532][ T9553] should_failslab+0xa8/0x100 [ 180.747555][ T9553] __kmalloc_cache_noprof+0x88/0x660 [ 180.747578][ T9553] ? tcf_action_init_1+0x1c2/0x740 [ 180.747600][ T9553] tcf_action_init_1+0x1c2/0x740 [ 180.747623][ T9553] ? __pfx_tcf_action_init_1+0x10/0x10 [ 180.747638][ T9553] ? _raw_read_unlock+0x28/0x50 [ 180.747658][ T9553] ? tc_action_load_ops+0x247/0x540 [ 180.747688][ T9553] ? is_bpf_text_address+0x292/0x2b0 [ 180.747708][ T9553] ? __nla_parse+0x40/0x60 [ 180.747733][ T9553] tcf_action_init+0x31e/0xb40 [ 180.747763][ T9553] ? __pfx_tcf_action_init+0x10/0x10 [ 180.747805][ T9553] ? netlink_sendmsg+0x813/0xb40 [ 180.747828][ T9553] ? ____sys_sendmsg+0x972/0x9f0 [ 180.747853][ T9553] ? __pfx___nla_validate_parse+0x10/0x10 [ 180.747877][ T9553] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.747938][ T9553] tc_ctl_action+0x43b/0xc70 [ 180.747971][ T9553] ? __pfx_tc_ctl_action+0x10/0x10 [ 180.747998][ T9553] ? trace_contention_end+0x3d/0x140 [ 180.748063][ T9553] ? __pfx_tc_ctl_action+0x10/0x10 [ 180.748088][ T9553] rtnetlink_rcv_msg+0x77e/0xbe0 [ 180.748115][ T9553] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 180.748137][ T9553] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 180.748157][ T9553] ? ref_tracker_free+0x693/0x840 [ 180.748181][ T9553] ? __pfx_ref_tracker_free+0x10/0x10 [ 180.748203][ T9553] ? __asan_memcpy+0x40/0x70 [ 180.748223][ T9553] ? __skb_clone+0x63/0x7a0 [ 180.748256][ T9553] netlink_rcv_skb+0x232/0x4b0 [ 180.748281][ T9553] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 180.748305][ T9553] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 180.748340][ T9553] ? netlink_deliver_tap+0x2e/0x1b0 [ 180.748363][ T9553] ? netlink_deliver_tap+0x2e/0x1b0 [ 180.748391][ T9553] netlink_unicast+0x75c/0x8e0 [ 180.748423][ T9553] netlink_sendmsg+0x813/0xb40 [ 180.748455][ T9553] ? __pfx_netlink_sendmsg+0x10/0x10 [ 180.748481][ T9553] ? aa_sock_msg_perm+0xf1/0x1b0 [ 180.748507][ T9553] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 180.748534][ T9553] ____sys_sendmsg+0x972/0x9f0 [ 180.748561][ T9553] ? __might_fault+0xaf/0x130 [ 180.748590][ T9553] ? __pfx_____sys_sendmsg+0x10/0x10 [ 180.748622][ T9553] ? import_iovec+0x73/0xa0 [ 180.748650][ T9553] ___sys_sendmsg+0x2a5/0x360 [ 180.748674][ T9553] ? __lock_acquire+0x6b5/0x2cf0 [ 180.748697][ T9553] ? __pfx____sys_sendmsg+0x10/0x10 [ 180.748754][ T9553] ? __fget_files+0x2a/0x420 [ 180.748775][ T9553] ? __fget_files+0x3a0/0x420 [ 180.748805][ T9553] __x64_sys_sendmsg+0x1bd/0x2a0 [ 180.748832][ T9553] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 180.748867][ T9553] ? __pfx_ksys_write+0x10/0x10 [ 180.748905][ T9553] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.748925][ T9553] do_syscall_64+0x15f/0xf80 [ 180.748942][ T9553] ? trace_irq_disable+0x3b/0x140 [ 180.748966][ T9553] ? clear_bhb_loop+0x40/0x90 [ 180.748988][ T9553] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.749005][ T9553] RIP: 0033:0x7fa05259ce59 [ 180.749021][ T9553] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 180.749035][ T9553] RSP: 002b:00007fa05341f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 180.749054][ T9553] RAX: ffffffffffffffda RBX: 00007fa052815fa0 RCX: 00007fa05259ce59 [ 180.749067][ T9553] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 180.749078][ T9553] RBP: 00007fa05341f090 R08: 0000000000000000 R09: 0000000000000000 [ 180.749089][ T9553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 180.749099][ T9553] R13: 00007fa052816038 R14: 00007fa052815fa0 R15: 00007ffed0841818 [ 180.749128][ T9553] [ 181.234711][ T9557] xt_limit: Overflow, try lower: 324382443/0 [ 181.476944][ T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 181.529293][ T9572] x_tables: duplicate underflow at hook 1 [ 181.645501][ T9582] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1165'. [ 181.789475][ T9587] xt_hashlimit: size too large, truncated to 1048576 [ 181.851018][ T9588] FAULT_INJECTION: forcing a failure. [ 181.851018][ T9588] name failslab, interval 1, probability 0, space 0, times 0 [ 181.884490][ T9588] CPU: 0 UID: 0 PID: 9588 Comm: syz.0.1167 Not tainted syzkaller #0 PREEMPT(full) [ 181.884516][ T9588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 181.884526][ T9588] Call Trace: [ 181.884534][ T9588] [ 181.884541][ T9588] dump_stack_lvl+0xe8/0x150 [ 181.884577][ T9588] should_fail_ex+0x412/0x560 [ 181.884606][ T9588] should_failslab+0xa8/0x100 [ 181.884635][ T9588] __kvmalloc_node_noprof+0x178/0x8a0 [ 181.884661][ T9588] ? bpf_test_run_xdp_live+0x223/0x1cf0 [ 181.884689][ T9588] ? __kvmalloc_node_noprof+0x393/0x8a0 [ 181.884717][ T9588] bpf_test_run_xdp_live+0x223/0x1cf0 [ 181.884745][ T9588] ? bpf_dispatcher_change_prog+0xae0/0xd70 [ 181.884784][ T9588] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 181.884825][ T9588] ? 0xffffffffa02019c8 [ 181.884868][ T9588] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 181.884894][ T9588] ? _copy_from_user+0x94/0xb0 [ 181.884918][ T9588] ? bpf_test_init+0x113/0x150 [ 181.884938][ T9588] ? xdp_convert_md_to_buff+0x5b/0x330 [ 181.884964][ T9588] bpf_prog_test_run_xdp+0x81c/0x1160 [ 181.885003][ T9588] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 181.885032][ T9588] ? __fget_files+0x2a/0x420 [ 181.885058][ T9588] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 181.885084][ T9588] bpf_prog_test_run+0x2c7/0x340 [ 181.885104][ T9588] __sys_bpf+0x643/0x950 [ 181.885131][ T9588] ? __pfx___sys_bpf+0x10/0x10 [ 181.885170][ T9588] ? ksys_write+0x242/0x270 [ 181.885195][ T9588] ? __pfx_ksys_write+0x10/0x10 [ 181.885222][ T9588] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.885241][ T9588] __x64_sys_bpf+0x7c/0x90 [ 181.885263][ T9588] do_syscall_64+0x15f/0xf80 [ 181.885280][ T9588] ? trace_irq_disable+0x3b/0x140 [ 181.885304][ T9588] ? clear_bhb_loop+0x40/0x90 [ 181.885325][ T9588] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.885342][ T9588] RIP: 0033:0x7f4ea659ce59 [ 181.885358][ T9588] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 181.885372][ T9588] RSP: 002b:00007f4ea73cf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 181.885391][ T9588] RAX: ffffffffffffffda RBX: 00007f4ea6816090 RCX: 00007f4ea659ce59 [ 181.885403][ T9588] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 181.885414][ T9588] RBP: 00007f4ea73cf090 R08: 0000000000000000 R09: 0000000000000000 [ 181.885425][ T9588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 181.885435][ T9588] R13: 00007f4ea6816128 R14: 00007f4ea6816090 R15: 00007ffe4744d7f8 [ 181.885463][ T9588] [ 182.291243][ T5637] Bluetooth: hci4: command 0x0405 tx timeout [ 182.324731][ T9603] xt_limit: Overflow, try lower: 324382443/0 [ 182.411725][ T9608] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1169'. [ 182.474823][ T9609] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1173'. [ 182.487418][ T9609] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1173'. [ 182.857168][ T9623] netlink: 'syz.4.1178': attribute type 9 has an invalid length. [ 182.927511][ T9623] netlink: 'syz.4.1178': attribute type 3 has an invalid length. [ 182.961574][ T9623] netlink: 'syz.4.1178': attribute type 3 has an invalid length. [ 182.995841][ T9632] netlink: 'syz.2.1182': attribute type 10 has an invalid length. [ 183.035183][ T9635] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1183'. [ 183.057449][ T9632] team0: Port device dummy0 added [ 183.117747][ T9632] netlink: 'syz.2.1182': attribute type 10 has an invalid length. [ 183.182884][ T9632] team0: Port device dummy0 removed [ 183.200589][ T9632] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 183.238972][ T4957] block nbd0: Connection timed out, retrying (0/2 alive) [ 183.249017][ T4957] block nbd0: Connection timed out, retrying (0/2 alive) [ 183.256086][ T4957] block nbd0: Connection timed out, retrying (0/2 alive) [ 183.263416][ T4957] block nbd0: Connection timed out, retrying (0/2 alive) [ 183.270948][ T4957] block nbd0: Dead connection, failed to find a fallback [ 183.279306][ T4957] block nbd0: shutting down sockets [ 183.285481][ T4957] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 183.296050][ T4957] Buffer I/O error on dev nbd0, logical block 3, async page read [ 183.304173][ T4957] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 183.313321][ T4957] Buffer I/O error on dev nbd0, logical block 2, async page read [ 183.322019][ T4957] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 183.331173][ T4957] Buffer I/O error on dev nbd0, logical block 1, async page read [ 183.339055][ T4957] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 183.348307][ T4957] Buffer I/O error on dev nbd0, logical block 0, async page read [ 183.358436][ T6862] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 183.368247][ T6862] Buffer I/O error on dev nbd0, logical block 0, async page read [ 183.376915][ T6862] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 183.378575][ T9643] syz_tun: entered allmulticast mode [ 183.385951][ T6862] Buffer I/O error on dev nbd0, logical block 1, async page read [ 183.399503][ T6862] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 183.400701][ T9636] nbd1: detected capacity change from 0 to 63 [ 183.408589][ T6862] Buffer I/O error on dev nbd0, logical block 2, async page read [ 183.408802][ T6862] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 183.431651][ T6862] Buffer I/O error on dev nbd0, logical block 3, async page read [ 183.439663][ T6862] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 183.448906][ T6862] Buffer I/O error on dev nbd0, logical block 0, async page read [ 183.456833][ T6862] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 183.465866][ T6862] Buffer I/O error on dev nbd0, logical block 1, async page read [ 183.478799][ T6862] ldm_validate_partition_table(): Disk read failed. [ 183.487817][ T6862] Dev nbd0: unable to read RDB block 0 [ 183.499266][ T6862] nbd0: unable to read partition table [ 183.505845][ T5637] block nbd1: Receive control failed (result -104) [ 183.514468][ T5640] block nbd1: Receive control failed (result -32) [ 183.528645][ T9642] syz_tun: left allmulticast mode [ 183.549377][ T6862] ldm_validate_partition_table(): Disk read failed. [ 183.558333][ T6862] Dev nbd0: unable to read RDB block 0 [ 183.565740][ T6862] nbd0: unable to read partition table [ 183.572622][ T9645] xt_hashlimit: size too large, truncated to 1048576 [ 184.355465][ T9674] vlan2: entered promiscuous mode [ 184.607187][ T1330] net_ratelimit: 83 callbacks suppressed [ 184.607205][ T1330] bond4: (slave bridge0): failed to get link speed/duplex [ 184.636702][ T36] bond6: (slave bridge0): failed to get link speed/duplex [ 184.656697][ T36] bond7: (slave bridge0): failed to get link speed/duplex [ 184.727102][ T1330] bond4: (slave bridge0): failed to get link speed/duplex [ 184.756729][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 184.798334][ T81] bond6: (slave bridge0): failed to get link speed/duplex [ 184.867256][ T1330] bond7: (slave bridge0): failed to get link speed/duplex [ 184.886384][ T9688] hsr_slave_0: left promiscuous mode [ 184.895796][ T9688] hsr_slave_1: left promiscuous mode [ 184.937179][ T36] bond4: (slave bridge0): failed to get link speed/duplex [ 184.977040][ T1330] bond6: (slave bridge0): failed to get link speed/duplex [ 185.007815][ T1330] bond7: (slave bridge0): failed to get link speed/duplex [ 185.078982][ T81] bond4: (slave bridge0): failed to get link speed/duplex [ 185.135449][ T9710] __nla_validate_parse: 6 callbacks suppressed [ 185.135465][ T9710] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1212'. [ 185.170206][ T9713] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1212'. [ 185.170564][ T9710] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1212'. [ 185.192602][ T9712] xt_hashlimit: size too large, truncated to 1048576 [ 185.199965][ T9715] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1211'. [ 185.226571][ T9713] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1212'. [ 185.239292][ T9717] syz_tun: left allmulticast mode [ 185.401979][ T9727] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1216'. [ 185.801374][ T9739] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1219'. [ 185.802187][ T9740] xt_hashlimit: size too large, truncated to 1048576 [ 186.331279][ T9755] syz_tun: entered allmulticast mode [ 186.354312][ T9753] syz_tun: left allmulticast mode [ 186.543222][ T9774] xt_limit: Overflow, try lower: 324382443/0 [ 186.586132][ T9778] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1232'. [ 186.622000][ T9770] bond4: option arp_all_targets: invalid value (129) [ 186.630781][ T9770] bond4 (unregistering): Released all slaves [ 186.715259][ T9778] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1232'. [ 186.729857][ T9778] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1232'. [ 186.810391][ T9778] geneve2: entered promiscuous mode [ 186.817201][ T9778] geneve2: entered allmulticast mode [ 187.179996][ T9814] lo: entered allmulticast mode [ 187.215691][ T9812] lo: left allmulticast mode [ 189.210870][ T9885] FAULT_INJECTION: forcing a failure. [ 189.210870][ T9885] name failslab, interval 1, probability 0, space 0, times 0 [ 189.224191][ T9885] CPU: 0 UID: 0 PID: 9885 Comm: syz.2.1258 Not tainted syzkaller #0 PREEMPT(full) [ 189.224205][ T9885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 189.224212][ T9885] Call Trace: [ 189.224216][ T9885] [ 189.224220][ T9885] dump_stack_lvl+0xe8/0x150 [ 189.224236][ T9885] should_fail_ex+0x412/0x560 [ 189.224252][ T9885] should_failslab+0xa8/0x100 [ 189.224268][ T9885] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 189.224282][ T9885] ? __alloc_skb+0x186/0x7d0 [ 189.224294][ T9885] ? __alloc_skb+0x1d0/0x7d0 [ 189.224306][ T9885] ? __local_bh_enable_ip+0xd0/0x130 [ 189.224319][ T9885] __alloc_skb+0x1d0/0x7d0 [ 189.224334][ T9885] netlink_sendmsg+0x5d4/0xb40 [ 189.224353][ T9885] ? __pfx_netlink_sendmsg+0x10/0x10 [ 189.224369][ T9885] ? aa_sock_msg_perm+0xf1/0x1b0 [ 189.224383][ T9885] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 189.224398][ T9885] ____sys_sendmsg+0x972/0x9f0 [ 189.224413][ T9885] ? __might_fault+0xaf/0x130 [ 189.224428][ T9885] ? __pfx_____sys_sendmsg+0x10/0x10 [ 189.224446][ T9885] ? import_iovec+0x73/0xa0 [ 189.224462][ T9885] ___sys_sendmsg+0x2a5/0x360 [ 189.224476][ T9885] ? __lock_acquire+0x6b5/0x2cf0 [ 189.224489][ T9885] ? __pfx____sys_sendmsg+0x10/0x10 [ 189.224519][ T9885] ? __fget_files+0x2a/0x420 [ 189.224530][ T9885] ? __fget_files+0x3a0/0x420 [ 189.224546][ T9885] __x64_sys_sendmsg+0x1bd/0x2a0 [ 189.224562][ T9885] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 189.224581][ T9885] ? __pfx_ksys_write+0x10/0x10 [ 189.224599][ T9885] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.224609][ T9885] do_syscall_64+0x15f/0xf80 [ 189.224620][ T9885] ? clear_bhb_loop+0x40/0x90 [ 189.224632][ T9885] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.224641][ T9885] RIP: 0033:0x7f942b59ce59 [ 189.224651][ T9885] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 189.224660][ T9885] RSP: 002b:00007f942c4c7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 189.224672][ T9885] RAX: ffffffffffffffda RBX: 00007f942b815fa0 RCX: 00007f942b59ce59 [ 189.224679][ T9885] RDX: 0000000004008094 RSI: 0000200000000100 RDI: 0000000000000003 [ 189.224686][ T9885] RBP: 00007f942c4c7090 R08: 0000000000000000 R09: 0000000000000000 [ 189.224692][ T9885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 189.224698][ T9885] R13: 00007f942b816038 R14: 00007f942b815fa0 R15: 00007fff5215d5f8 [ 189.224713][ T9885] [ 189.646771][ T12] net_ratelimit: 84 callbacks suppressed [ 189.646789][ T12] bond6: (slave bridge0): failed to get link speed/duplex [ 189.676933][ T12] bond7: (slave bridge0): failed to get link speed/duplex [ 189.687829][ T12] bond4: (slave bridge0): failed to get link speed/duplex [ 189.766613][ T12] bond6: (slave bridge0): failed to get link speed/duplex [ 189.786710][ T12] bond7: (slave bridge0): failed to get link speed/duplex [ 189.797209][ T12] bond4: (slave bridge0): failed to get link speed/duplex [ 189.878320][ T36] bond6: (slave bridge0): failed to get link speed/duplex [ 189.897029][ T12] bond7: (slave bridge0): failed to get link speed/duplex [ 189.917517][ T36] bond4: (slave bridge0): failed to get link speed/duplex [ 189.986618][ T36] bond6: (slave bridge0): failed to get link speed/duplex [ 190.785451][ T9843] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 191.002321][ T9894] __nla_validate_parse: 13 callbacks suppressed [ 191.002340][ T9894] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1261'. [ 191.085825][ T9893] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1262'. [ 191.113952][ T9900] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1264'. [ 191.135949][ T9902] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1265'. [ 191.388579][ T9913] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 191.519127][ T9928] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1272'. [ 191.715062][ T9944] xt_hashlimit: size too large, truncated to 1048576 [ 191.724275][ T9946] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1278'. [ 192.037757][ T9955] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1280'. [ 192.103836][ T9960] x_tables: duplicate underflow at hook 3 [ 192.260529][ T9957] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1282'. [ 192.347378][ T9976] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1287'. [ 192.538458][ T9984] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1289'. [ 193.037198][T10018] syz_tun: entered allmulticast mode [ 193.055763][T10016] syz_tun: left allmulticast mode [ 193.320606][T10032] xt_hashlimit: size too large, truncated to 1048576 [ 193.476702][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 193.707930][T10046] bond1: left allmulticast mode [ 193.731897][T10046] bridge0: port 3(bond1) entered disabled state [ 193.852701][T10059] sctp: [Deprecated]: syz.2.1313 (pid 10059) Use of int in max_burst socket option. [ 193.852701][T10059] Use struct sctp_assoc_value instead [ 193.953419][T10046] bridge_slave_1: left allmulticast mode [ 194.013810][T10046] bridge_slave_1: left promiscuous mode [ 194.030139][T10046] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.056023][T10046] bridge_slave_0: left allmulticast mode [ 194.086698][T10046] bridge_slave_0: left promiscuous mode [ 194.092913][T10046] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.119582][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.133357][T10066] netlink: 'syz.1.1314': attribute type 1 has an invalid length. [ 194.245702][T10066] 8021q: adding VLAN 0 to HW filter on device bond7 [ 194.294075][T10070] bond7: (slave bridge0): Enslaving as a backup interface with a down link [ 194.483180][T10082] tap0: tun_chr_ioctl cmd 1074025677 [ 194.510137][T10082] tap0: linktype set to 4 [ 194.655398][T10091] xt_limit: Overflow, try lower: 324382443/0 [ 194.667296][ T12] net_ratelimit: 112 callbacks suppressed [ 194.667312][ T12] bond7: (slave bridge0): failed to get link speed/duplex [ 194.716719][ T13] bond6: (slave bridge0): failed to get link speed/duplex [ 194.741465][ T1330] bond4: (slave bridge0): failed to get link speed/duplex [ 194.781217][T10098] ip6gre1: entered promiscuous mode [ 194.798324][T10098] ip6gre1: entered allmulticast mode [ 194.829177][ T36] bond7: (slave bridge0): failed to get link speed/duplex [ 194.857429][ T1330] bond6: (slave bridge0): failed to get link speed/duplex [ 194.875253][T10104] syz_tun: entered allmulticast mode [ 194.893802][T10102] syz_tun: left allmulticast mode [ 194.927977][ T36] bond4: (slave bridge0): failed to get link speed/duplex [ 194.966809][ T36] bond7: (slave bridge0): failed to get link speed/duplex [ 194.983946][T10107] xt_hashlimit: size too large, truncated to 1048576 [ 194.996844][ T36] bond6: (slave bridge0): failed to get link speed/duplex [ 195.045091][T10113] openvswitch: netlink: Flow actions attr not present in new flow. [ 195.066005][T10114] bridge0: port 5(vlan2) entered blocking state [ 195.072844][T10114] bridge0: port 5(vlan2) entered disabled state [ 195.082483][T10114] vlan2: entered allmulticast mode [ 195.093433][T10114] geneve0: entered allmulticast mode [ 195.108114][T10114] vlan2: entered promiscuous mode [ 195.123919][T10114] geneve0: entered promiscuous mode [ 195.137852][ T59] bond6: (slave bridge0): link status up again after 0 ms [ 195.161065][T10121] FAULT_INJECTION: forcing a failure. [ 195.161065][T10121] name failslab, interval 1, probability 0, space 0, times 0 [ 195.202970][T10121] CPU: 1 UID: 0 PID: 10121 Comm: syz.0.1331 Not tainted syzkaller #0 PREEMPT(full) [ 195.202993][T10121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 195.203004][T10121] Call Trace: [ 195.203012][T10121] [ 195.203019][T10121] dump_stack_lvl+0xe8/0x150 [ 195.203045][T10121] should_fail_ex+0x412/0x560 [ 195.203075][T10121] should_failslab+0xa8/0x100 [ 195.203105][T10121] __kmalloc_cache_noprof+0x88/0x660 [ 195.203132][T10121] ? ovs_flow_cmd_new+0x356/0xe80 [ 195.203163][T10121] ovs_flow_cmd_new+0x356/0xe80 [ 195.203185][T10121] ? kasan_save_track+0x3e/0x80 [ 195.203217][T10121] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 195.203299][T10121] ? __nla_parse+0x40/0x60 [ 195.203328][T10121] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 195.203349][T10121] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 195.203378][T10121] genl_family_rcv_msg_doit+0x22a/0x330 [ 195.203406][T10121] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 195.203438][T10121] ? bpf_lsm_capable+0x9/0x20 [ 195.203455][T10121] ? security_capable+0x7e/0x2c0 [ 195.203482][T10121] genl_rcv_msg+0x61c/0x7a0 [ 195.203509][T10121] ? __pfx_genl_rcv_msg+0x10/0x10 [ 195.203529][T10121] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 195.203554][T10121] ? __pfx_ref_tracker_free+0x10/0x10 [ 195.203589][T10121] netlink_rcv_skb+0x232/0x4b0 [ 195.203614][T10121] ? __pfx_genl_rcv_msg+0x10/0x10 [ 195.203635][T10121] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 195.203674][T10121] ? down_read+0x270/0x2e0 [ 195.203691][T10121] ? genl_rcv+0xd/0x40 [ 195.203712][T10121] genl_rcv+0x28/0x40 [ 195.203730][T10121] netlink_unicast+0x75c/0x8e0 [ 195.203762][T10121] netlink_sendmsg+0x813/0xb40 [ 195.203796][T10121] ? __pfx_netlink_sendmsg+0x10/0x10 [ 195.203824][T10121] ? aa_sock_msg_perm+0xf1/0x1b0 [ 195.203856][T10121] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 195.203883][T10121] ____sys_sendmsg+0x972/0x9f0 [ 195.203909][T10121] ? __might_fault+0xaf/0x130 [ 195.203937][T10121] ? __pfx_____sys_sendmsg+0x10/0x10 [ 195.203972][T10121] ? import_iovec+0x73/0xa0 [ 195.204005][T10121] ___sys_sendmsg+0x2a5/0x360 [ 195.204031][T10121] ? __lock_acquire+0x6b5/0x2cf0 [ 195.204054][T10121] ? __pfx____sys_sendmsg+0x10/0x10 [ 195.204116][T10121] ? __fget_files+0x2a/0x420 [ 195.204136][T10121] ? __fget_files+0x3a0/0x420 [ 195.204168][T10121] __x64_sys_sendmsg+0x1bd/0x2a0 [ 195.204196][T10121] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 195.204232][T10121] ? __pfx_ksys_write+0x10/0x10 [ 195.204265][T10121] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.204285][T10121] do_syscall_64+0x15f/0xf80 [ 195.204302][T10121] ? trace_irq_disable+0x3b/0x140 [ 195.204327][T10121] ? clear_bhb_loop+0x40/0x90 [ 195.204350][T10121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.204368][T10121] RIP: 0033:0x7f4ea659ce59 [ 195.204384][T10121] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 195.204399][T10121] RSP: 002b:00007f4ea73f0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 195.204419][T10121] RAX: ffffffffffffffda RBX: 00007f4ea6815fa0 RCX: 00007f4ea659ce59 [ 195.204432][T10121] RDX: 0000000004008094 RSI: 0000200000000100 RDI: 0000000000000003 [ 195.204443][T10121] RBP: 00007f4ea73f0090 R08: 0000000000000000 R09: 0000000000000000 [ 195.204454][T10121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 195.204465][T10121] R13: 00007f4ea6816038 R14: 00007f4ea6815fa0 R15: 00007ffe4744d7f8 [ 195.204497][T10121] [ 195.616476][T10125] netlink: 'syz.4.1329': attribute type 4 has an invalid length. [ 195.993012][T10141] xt_limit: Overflow, try lower: 324382443/0 [ 196.014027][T10144] __nla_validate_parse: 9 callbacks suppressed [ 196.014044][T10144] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1338'. [ 196.085699][T10148] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1339'. [ 196.210498][T10150] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1340'. [ 196.624185][T10170] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1348'. [ 196.684331][T10172] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1349'. [ 196.692230][T10174] xt_limit: Overflow, try lower: 324382443/0 [ 196.700940][T10172] netlink: 'syz.2.1349': attribute type 10 has an invalid length. [ 196.714787][T10167] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1345'. [ 196.866388][T10162] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.873686][T10162] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.903656][T10162] tipc: Resetting bearer [ 197.149496][T10162] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 197.167267][T10162] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 197.388474][T10172] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 197.401363][T10172] team0: Port device netdevsim1 added [ 197.592017][ T81] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.615862][ T81] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.699771][ T81] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.720008][T10224] lo: entered allmulticast mode [ 197.731572][ T81] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.761484][T10223] lo: left allmulticast mode [ 198.156328][T10249] xt_limit: Overflow, try lower: 324382443/0 [ 198.331907][T10259] vlan2: entered promiscuous mode [ 198.346920][T10259] ip6gretap0: entered promiscuous mode [ 198.604860][T10276] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1373'. [ 198.632229][T10279] syz_tun: entered allmulticast mode [ 198.675805][T10277] syz_tun: left allmulticast mode [ 198.835813][T10294] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1380'. [ 199.020666][T10300] xt_limit: Overflow, try lower: 324382443/0 [ 199.162382][T10307] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1385'. [ 199.187368][T10308] xt_hashlimit: size too large, truncated to 1048576 [ 199.464040][T10327] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1389'. [ 199.728585][ T486] net_ratelimit: 61 callbacks suppressed [ 199.728603][ T486] bond6: (slave bridge0): failed to get link speed/duplex [ 199.778836][ T486] bond4: (slave bridge0): failed to get link speed/duplex [ 199.866614][ T486] bond6: (slave bridge0): failed to get link speed/duplex [ 199.897428][ T36] bond4: (slave bridge0): failed to get link speed/duplex [ 199.989914][T10221] bond6: (slave bridge0): failed to get link speed/duplex [ 200.026707][T10221] bond4: (slave bridge0): failed to get link speed/duplex [ 200.030205][T10347] xt_limit: Overflow, try lower: 324382443/0 [ 200.086918][T10350] netlink: 'syz.0.1397': attribute type 1 has an invalid length. [ 200.116642][ T486] bond6: (slave bridge0): failed to get link speed/duplex [ 200.147088][ T486] bond4: (slave bridge0): failed to get link speed/duplex [ 200.226871][T10221] bond6: (slave bridge0): failed to get link speed/duplex [ 200.359188][T10364] xt_hashlimit: size too large, truncated to 1048576 [ 200.393502][T10366] vlan2: entered promiscuous mode [ 200.799925][T10383] syzkaller1: entered promiscuous mode [ 200.808002][T10383] syzkaller1: entered allmulticast mode [ 200.822083][T10383] lo: entered allmulticast mode [ 200.844244][T10385] xt_limit: Overflow, try lower: 324382443/0 [ 200.896660][ T486] bond6: (slave bridge0): failed to get link speed/duplex [ 200.918203][T10382] lo: left allmulticast mode [ 200.963984][T10387] xt_hashlimit: size too large, truncated to 1048576 [ 201.230682][T10403] __nla_validate_parse: 3 callbacks suppressed [ 201.230700][T10403] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1416'. [ 201.323100][ T5630] Bluetooth: hci1: command 0x0406 tx timeout [ 201.329255][ T5624] Bluetooth: hci2: command 0x0406 tx timeout [ 201.330310][ T4942] Bluetooth: hci3: command 0x0406 tx timeout [ 201.614820][T10417] xt_limit: Overflow, try lower: 324382443/0 [ 201.641115][T10419] FAULT_INJECTION: forcing a failure. [ 201.641115][T10419] name failslab, interval 1, probability 0, space 0, times 0 [ 201.672677][T10419] CPU: 1 UID: 0 PID: 10419 Comm: syz.0.1424 Not tainted syzkaller #0 PREEMPT(full) [ 201.672701][T10419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 201.672712][T10419] Call Trace: [ 201.672719][T10419] [ 201.672727][T10419] dump_stack_lvl+0xe8/0x150 [ 201.672752][T10419] should_fail_ex+0x412/0x560 [ 201.672780][T10419] should_failslab+0xa8/0x100 [ 201.672809][T10419] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 201.672834][T10419] ? __alloc_skb+0x186/0x7d0 [ 201.672856][T10419] ? __alloc_skb+0x1d0/0x7d0 [ 201.672877][T10419] ? __local_bh_enable_ip+0xd0/0x130 [ 201.672901][T10419] __alloc_skb+0x1d0/0x7d0 [ 201.672924][T10419] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 201.672954][T10419] netlink_sendmsg+0x5d4/0xb40 [ 201.672988][T10419] ? __pfx_netlink_sendmsg+0x10/0x10 [ 201.673016][T10419] ? aa_sock_msg_perm+0xf1/0x1b0 [ 201.673041][T10419] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 201.673063][T10419] ? __pfx_netlink_sendmsg+0x10/0x10 [ 201.673089][T10419] __sys_sendto+0x672/0x710 [ 201.673116][T10419] ? __pfx___sys_sendto+0x10/0x10 [ 201.673163][T10419] ? exc_page_fault+0x6a/0xc0 [ 201.673193][T10419] ? do_user_addr_fault+0xc6f/0x1340 [ 201.673217][T10419] __x64_sys_sendto+0xde/0x100 [ 201.673241][T10419] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.673261][T10419] do_syscall_64+0x15f/0xf80 [ 201.673277][T10419] ? trace_irq_disable+0x3b/0x140 [ 201.673303][T10419] ? clear_bhb_loop+0x40/0x90 [ 201.673325][T10419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.673343][T10419] RIP: 0033:0x7f4ea655d68e [ 201.673360][T10419] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 201.673380][T10419] RSP: 002b:00007f4ea73eee88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 201.673400][T10419] RAX: ffffffffffffffda RBX: 00007f4ea73f06c0 RCX: 00007f4ea655d68e [ 201.673413][T10419] RDX: 0000000000000020 RSI: 00007f4ea73ef000 RDI: 0000000000000003 [ 201.673424][T10419] RBP: 0000000000000000 R08: 00007f4ea73eef04 R09: 000000000000000c [ 201.673434][T10419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 201.673445][T10419] R13: 00007f4ea73eef58 R14: 00007f4ea73ef000 R15: 0000000000000000 [ 201.673470][T10419] [ 201.732249][T10425] syz_tun: entered allmulticast mode [ 201.931029][T10430] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1429'. [ 201.944967][T10424] syz_tun: left allmulticast mode [ 202.636323][T10469] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 202.900744][T10483] geneve2: entered allmulticast mode [ 202.924876][ T486] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20001 - 0 [ 202.932789][T10485] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1446'. [ 202.961112][T10483] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1444'. [ 202.983305][ T486] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20001 - 0 [ 202.994395][ T486] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20001 - 0 [ 203.020479][T10483] 8021q: adding VLAN 0 to HW filter on device bond0 [ 203.049774][ T486] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20001 - 0 [ 203.343520][T10502] netlink: 'syz.0.1452': attribute type 1 has an invalid length. [ 203.413754][T10502] 8021q: adding VLAN 0 to HW filter on device bond9 [ 203.437552][T10511] sock: sock_timestamping_bind_phc: sock not bind to device [ 203.445558][T10499] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1448'. [ 203.466178][T10499] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1448'. [ 203.494666][T10509] bond7: (slave bridge0): Removing an active aggregator [ 203.518414][T10509] bond7: (slave bridge0): Releasing backup interface [ 203.567954][T10509] bond9: (slave bridge0): Enslaving as a backup interface with a down link [ 203.685885][T10522] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1459'. [ 204.455463][T10556] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1471'. [ 204.638715][T10568] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1474'. [ 204.827073][ T3379] net_ratelimit: 51 callbacks suppressed [ 204.827090][ T3379] bond6: (slave bridge0): failed to get link speed/duplex [ 205.018184][ T3379] bond6: (slave bridge0): failed to get link speed/duplex [ 205.035474][ T3379] bond4: (slave bridge0): failed to get link speed/duplex [ 205.113294][T10590] syz_tun: left allmulticast mode [ 205.136904][ T486] bond6: (slave bridge0): failed to get link speed/duplex [ 205.167015][ T486] bond4: (slave bridge0): failed to get link speed/duplex [ 205.386954][ T59] bond4: (slave bridge0): failed to get link speed/duplex [ 205.437504][ T13] bond6: (slave bridge0): failed to get link speed/duplex [ 205.541277][ T13] bond4: (slave bridge0): failed to get link speed/duplex [ 205.551532][T10597] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1482'. [ 205.592935][T10597] hsr_slave_0: left promiscuous mode [ 205.612575][T10597] hsr_slave_1: left promiscuous mode [ 205.627592][T10608] ------------[ cut here ]------------ [ 205.633811][T10608] HSR: No self node [ 205.637680][T10608] WARNING: net/hsr/hsr_framereg.c:39 at hsr_addr_is_self+0x211/0x3f0, CPU#0: syz.4.1482/10608 [ 205.647979][T10608] Modules linked in: [ 205.652599][T10608] CPU: 0 UID: 0 PID: 10608 Comm: syz.4.1482 Not tainted syzkaller #0 PREEMPT(full) [ 205.662040][T10608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 205.672241][T10608] RIP: 0010:hsr_addr_is_self+0x211/0x3f0 [ 205.677932][T10608] Code: 33 2f 41 0f b7 dd 89 ee 09 de 31 ff e8 18 27 3b f6 09 dd 74 54 e8 cf 22 3b f6 31 ed eb 53 e8 c6 22 3b f6 48 8d 3d bf 91 b8 04 <67> 48 0f b9 3a 31 ed eb 42 e8 d1 1d 1f 00 89 c5 31 ff 89 c6 e8 e6 [ 205.697596][T10608] RSP: 0018:ffffc9000532f0e0 EFLAGS: 00010283 [ 205.703685][T10608] RAX: ffffffff8b8a9caa RBX: ffffffff8b8a9ac6 RCX: 0000000000080000 [ 205.711700][T10608] RDX: ffffc9000e7ec000 RSI: 00000000000008bb RDI: ffffffff90432e70 [ 205.719718][T10608] RBP: 0000000000000001 R08: ffffffff8b8a9ac6 R09: ffffffff8e95cd60 [ 205.727729][T10608] R10: ffffc9000532f1e8 R11: fffff52000a65e3f R12: dffffc0000000000 [ 205.735700][T10608] R13: ffff888025017640 R14: ffff888029971002 R15: 0000000000000000 [ 205.743715][T10608] FS: 00007fa0533fe6c0(0000) GS:ffff888125287000(0000) knlGS:0000000000000000 [ 205.752692][T10608] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 205.759307][T10608] CR2: 00007fa0533fdff8 CR3: 0000000038d16000 CR4: 00000000003526f0 [ 205.767320][T10608] Call Trace: [ 205.770606][T10608] [ 205.773552][T10608] hsr_forward_skb+0xa11/0x2a80 [ 205.778462][T10608] ? sock_def_readable+0xae/0x550 [ 205.783513][T10608] ? sock_def_readable+0xae/0x550 [ 205.788573][T10608] ? hsr_forward_skb+0xbb/0x2a80 [ 205.793532][T10608] ? __pfx_hsr_forward_skb+0x10/0x10 [ 205.798858][T10608] ? do_raw_spin_lock+0x12b/0x2f0 [ 205.803905][T10608] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 205.809308][T10608] ? dev_queue_xmit_nit+0x969/0xad0 [ 205.814527][T10608] ? hsr_dev_xmit+0x237/0x360 [ 205.819244][T10608] hsr_dev_xmit+0x242/0x360 [ 205.823765][T10608] ? hsr_dev_xmit+0x2d/0x360 [ 205.828391][T10608] dev_hard_start_xmit+0x2cd/0x830 [ 205.833520][T10608] __dev_queue_xmit+0x14d9/0x3950 [ 205.838585][T10608] ? __dev_queue_xmit+0x2b6/0x3950 [ 205.843713][T10608] ? __pfx___dev_queue_xmit+0x10/0x10 [ 205.849149][T10608] ? neigh_connected_output+0x1ea/0x460 [ 205.854725][T10608] ? eth_header+0x11b/0x200 [ 205.859297][T10608] ? __asan_memcpy+0x40/0x70 [ 205.863940][T10608] ? ip_finish_output2+0x3c2/0x1070 [ 205.869202][T10608] ip_finish_output2+0xca9/0x1070 [ 205.874248][T10608] ? ip_skb_dst_mtu+0x80b/0xa50 [ 205.879166][T10608] ? ip_finish_output+0x40e/0x530 [ 205.884213][T10608] ip_push_pending_frames+0x8b/0x110 [ 205.889577][T10608] raw_sendmsg+0x1547/0x1a50 [ 205.894203][T10608] ? __pfx_raw_sendmsg+0x10/0x10 [ 205.899212][T10608] ? aa_sk_perm+0x6d5/0x900 [ 205.903745][T10608] ? __pfx_aa_sk_perm+0x10/0x10 [ 205.908672][T10608] ? tomoyo_socket_sendmsg_permission+0x215/0x300 [ 205.915121][T10608] ? sock_rps_record_flow+0x19/0x350 [ 205.920473][T10608] ? inet_sendmsg+0x2f4/0x370 [ 205.925166][T10608] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 205.930527][T10608] ____sys_sendmsg+0x80a/0x9f0 [ 205.935328][T10608] ? __pfx_____sys_sendmsg+0x10/0x10 [ 205.940694][T10608] ? import_iovec+0x73/0xa0 [ 205.945220][T10608] ___sys_sendmsg+0x2a5/0x360 [ 205.949923][T10608] ? __lock_acquire+0x6b5/0x2cf0 [ 205.954874][T10608] ? __pfx____sys_sendmsg+0x10/0x10 [ 205.960113][T10608] ? tomoyo_path_number_perm+0x219/0x630 [ 205.965775][T10608] ? __fget_files+0x2a/0x420 [ 205.970398][T10608] ? __fget_files+0x3a0/0x420 [ 205.975109][T10608] __x64_sys_sendmsg+0x1bd/0x2a0 [ 205.980083][T10608] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 205.985558][T10608] ? rcu_is_watching+0x15/0xb0 [ 205.990362][T10608] ? __pfx_kcov_ioctl+0x10/0x10 [ 205.995239][T10608] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.001347][T10608] do_syscall_64+0x15f/0xf80 [ 206.005944][T10608] ? trace_irq_disable+0x3b/0x140 [ 206.010996][T10608] ? clear_bhb_loop+0x40/0x90 [ 206.015687][T10608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.021619][T10608] RIP: 0033:0x7fa05259ce59 [ 206.026042][T10608] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 206.045686][T10608] RSP: 002b:00007fa0533fe028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 206.054141][T10608] RAX: ffffffffffffffda RBX: 00007fa052816090 RCX: 00007fa05259ce59 [ 206.062130][T10608] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 206.070137][T10608] RBP: 00007fa052632d6f R08: 0000000000000000 R09: 0000000000000000 [ 206.078164][T10608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 206.086140][T10608] R13: 00007fa052816128 R14: 00007fa052816090 R15: 00007ffed0841818 [ 206.094161][T10608] [ 206.097217][T10608] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 206.104494][T10608] CPU: 0 UID: 0 PID: 10608 Comm: syz.4.1482 Not tainted syzkaller #0 PREEMPT(full) [ 206.113848][T10608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 206.123897][T10608] Call Trace: [ 206.127183][T10608] [ 206.130101][T10608] vpanic+0x56c/0xa60 [ 206.134078][T10608] ? __pfx__printk+0x10/0x10 [ 206.138656][T10608] ? __pfx_vpanic+0x10/0x10 [ 206.143144][T10608] ? is_bpf_text_address+0x292/0x2b0 [ 206.148420][T10608] ? is_bpf_text_address+0x26/0x2b0 [ 206.153639][T10608] panic+0xc5/0xd0 [ 206.157376][T10608] ? __pfx_panic+0x10/0x10 [ 206.161787][T10608] __warn+0x315/0x4c0 [ 206.165757][T10608] ? hsr_addr_is_self+0x211/0x3f0 [ 206.170779][T10608] ? hsr_addr_is_self+0x211/0x3f0 [ 206.175802][T10608] __report_bug+0x29a/0x540 [ 206.180301][T10608] ? hsr_addr_is_self+0x211/0x3f0 [ 206.185311][T10608] ? __pfx___report_bug+0x10/0x10 [ 206.190325][T10608] ? hsr_addr_is_self+0x26/0x3f0 [ 206.195255][T10608] report_bug_entry+0x19a/0x290 [ 206.200100][T10608] ? hsr_addr_is_self+0x211/0x3f0 [ 206.205112][T10608] ? hsr_addr_is_self+0x216/0x3f0 [ 206.210147][T10608] handle_bug+0xce/0x200 [ 206.214390][T10608] exc_invalid_op+0x1a/0x50 [ 206.218906][T10608] asm_exc_invalid_op+0x1a/0x20 [ 206.223761][T10608] RIP: 0010:hsr_addr_is_self+0x211/0x3f0 [ 206.229388][T10608] Code: 33 2f 41 0f b7 dd 89 ee 09 de 31 ff e8 18 27 3b f6 09 dd 74 54 e8 cf 22 3b f6 31 ed eb 53 e8 c6 22 3b f6 48 8d 3d bf 91 b8 04 <67> 48 0f b9 3a 31 ed eb 42 e8 d1 1d 1f 00 89 c5 31 ff 89 c6 e8 e6 [ 206.248993][T10608] RSP: 0018:ffffc9000532f0e0 EFLAGS: 00010283 [ 206.255070][T10608] RAX: ffffffff8b8a9caa RBX: ffffffff8b8a9ac6 RCX: 0000000000080000 [ 206.263026][T10608] RDX: ffffc9000e7ec000 RSI: 00000000000008bb RDI: ffffffff90432e70 [ 206.270984][T10608] RBP: 0000000000000001 R08: ffffffff8b8a9ac6 R09: ffffffff8e95cd60 [ 206.278942][T10608] R10: ffffc9000532f1e8 R11: fffff52000a65e3f R12: dffffc0000000000 [ 206.286913][T10608] R13: ffff888025017640 R14: ffff888029971002 R15: 0000000000000000 [ 206.294881][T10608] ? hsr_addr_is_self+0x26/0x3f0 [ 206.299830][T10608] ? hsr_addr_is_self+0x26/0x3f0 [ 206.304777][T10608] ? hsr_addr_is_self+0x20a/0x3f0 [ 206.309829][T10608] hsr_forward_skb+0xa11/0x2a80 [ 206.314684][T10608] ? sock_def_readable+0xae/0x550 [ 206.319719][T10608] ? sock_def_readable+0xae/0x550 [ 206.324729][T10608] ? hsr_forward_skb+0xbb/0x2a80 [ 206.329657][T10608] ? __pfx_hsr_forward_skb+0x10/0x10 [ 206.334925][T10608] ? do_raw_spin_lock+0x12b/0x2f0 [ 206.339941][T10608] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 206.345309][T10608] ? dev_queue_xmit_nit+0x969/0xad0 [ 206.350508][T10608] ? hsr_dev_xmit+0x237/0x360 [ 206.355183][T10608] hsr_dev_xmit+0x242/0x360 [ 206.359696][T10608] ? hsr_dev_xmit+0x2d/0x360 [ 206.364274][T10608] dev_hard_start_xmit+0x2cd/0x830 [ 206.369385][T10608] __dev_queue_xmit+0x14d9/0x3950 [ 206.374405][T10608] ? __dev_queue_xmit+0x2b6/0x3950 [ 206.379527][T10608] ? __pfx___dev_queue_xmit+0x10/0x10 [ 206.384906][T10608] ? neigh_connected_output+0x1ea/0x460 [ 206.390443][T10608] ? eth_header+0x11b/0x200 [ 206.394946][T10608] ? __asan_memcpy+0x40/0x70 [ 206.399562][T10608] ? ip_finish_output2+0x3c2/0x1070 [ 206.404743][T10608] ip_finish_output2+0xca9/0x1070 [ 206.409763][T10608] ? ip_skb_dst_mtu+0x80b/0xa50 [ 206.414602][T10608] ? ip_finish_output+0x40e/0x530 [ 206.419625][T10608] ip_push_pending_frames+0x8b/0x110 [ 206.424896][T10608] raw_sendmsg+0x1547/0x1a50 [ 206.429480][T10608] ? __pfx_raw_sendmsg+0x10/0x10 [ 206.434411][T10608] ? aa_sk_perm+0x6d5/0x900 [ 206.438939][T10608] ? __pfx_aa_sk_perm+0x10/0x10 [ 206.443773][T10608] ? tomoyo_socket_sendmsg_permission+0x215/0x300 [ 206.450180][T10608] ? sock_rps_record_flow+0x19/0x350 [ 206.455449][T10608] ? inet_sendmsg+0x2f4/0x370 [ 206.460113][T10608] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 206.465388][T10608] ____sys_sendmsg+0x80a/0x9f0 [ 206.470145][T10608] ? __pfx_____sys_sendmsg+0x10/0x10 [ 206.475424][T10608] ? import_iovec+0x73/0xa0 [ 206.479917][T10608] ___sys_sendmsg+0x2a5/0x360 [ 206.484582][T10608] ? __lock_acquire+0x6b5/0x2cf0 [ 206.489507][T10608] ? __pfx____sys_sendmsg+0x10/0x10 [ 206.494701][T10608] ? tomoyo_path_number_perm+0x219/0x630 [ 206.500353][T10608] ? __fget_files+0x2a/0x420 [ 206.504928][T10608] ? __fget_files+0x3a0/0x420 [ 206.509614][T10608] __x64_sys_sendmsg+0x1bd/0x2a0 [ 206.514541][T10608] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 206.519986][T10608] ? rcu_is_watching+0x15/0xb0 [ 206.524749][T10608] ? __pfx_kcov_ioctl+0x10/0x10 [ 206.529596][T10608] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.535649][T10608] do_syscall_64+0x15f/0xf80 [ 206.540224][T10608] ? trace_irq_disable+0x3b/0x140 [ 206.545238][T10608] ? clear_bhb_loop+0x40/0x90 [ 206.549912][T10608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.555809][T10608] RIP: 0033:0x7fa05259ce59 [ 206.560227][T10608] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 206.579829][T10608] RSP: 002b:00007fa0533fe028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 206.588248][T10608] RAX: ffffffffffffffda RBX: 00007fa052816090 RCX: 00007fa05259ce59 [ 206.596200][T10608] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 206.604152][T10608] RBP: 00007fa052632d6f R08: 0000000000000000 R09: 0000000000000000 [ 206.612118][T10608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 206.620078][T10608] R13: 00007fa052816128 R14: 00007fa052816090 R15: 00007ffed0841818 [ 206.628084][T10608] [ 206.631606][T10608] Kernel Offset: disabled [ 206.635912][T10608] Rebooting in 86400 seconds..