last executing test programs: 2.008898842s ago: executing program 2 (id=1563): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x90) unshare(0x24020400) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x2f, &(0x7f0000000040), 0x3b) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000002100010000000000000000000a00004000000000000000000500160000000000080017"], 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="700000001104030400830080000000000000107400", @ANYRES32=r4, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x4008088}, 0x24) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x11, 0x4, 0x4, 0x5}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000157b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r6, 0xffffffffffffffff, 0x500}, 0x57) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f0000000340)={'filter\x00', 0x2, [{}, {}]}, 0x48) socket(0x9, 0x1, 0x7) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000040)={0x20002008}) 1.871227623s ago: executing program 2 (id=1567): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4440b, 0x4}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e20}]}}}]}, 0x62}, 0x1, 0x0, 0x0, 0x40004}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4440b, 0x4}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e20}]}}}]}, 0x62}, 0x1, 0x0, 0x0, 0x40004}, 0x0) (async) 1.755336525s ago: executing program 2 (id=1569): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000002000000000000000000000d02000000000000000000008b"], 0x0, 0x32, 0x0, 0x0, 0xfffffffe}, 0xa8) 1.57181114s ago: executing program 2 (id=1574): socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x1000080002, 0x100000000000088) epoll_create1(0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$rxrpc(0x21, 0x2, 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd, 0x4}, 0x0, &(0x7f0000000240)={0x3ff, 0x5, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @rand_addr, 0x3}, 0x1c) r1 = socket$inet6(0xa, 0x802, 0x88) sendto$inet6(r1, 0x0, 0x0, 0x4008840, &(0x7f0000000180)={0xa, 0x4e23, 0xcc08, @mcast1}, 0x1c) sendto$inet6(r1, &(0x7f0000000000)='~', 0x1, 0x40000, 0x0, 0x0) 1.230423549s ago: executing program 4 (id=1580): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe", 0x2c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722", 0x44}], 0x3}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='[\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002abd7000fcdbdf253d00000008000300", @ANYRES32=r5, @ANYBLOB="02005d0001000000"], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2100000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, r2, 0x331, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void, @void}}, ["", ""]}, 0xff0b}, 0x1, 0x0, 0x0, 0x20000040}, 0x4040040) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40040c5) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002100)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x20000011) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f000000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x11) sendmmsg(r7, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1.171607674s ago: executing program 1 (id=1582): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, 0x0, 0x24000840) r1 = socket$inet6(0xa, 0x3, 0x1) sendmmsg(r1, &(0x7f0000000640)=[{{&(0x7f0000000540)=@l2tp6={0xa, 0x0, 0xf, @mcast2, 0x7fffffff, 0x4}, 0x1b, 0x0}}], 0x1, 0x0) 1.171300694s ago: executing program 3 (id=1583): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, 0x0, 0x0) 1.114978295s ago: executing program 4 (id=1584): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021bc0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000900003808c000080080003400000000280000b807c000180090001006c617374"], 0x140}}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0104000000000000000002000000300004802c0001800a00010071756f74610000001c0002800c000440ffffffffffffffff0c00014000000000000000050900010073797a30000000000900020073797a3200000000140000001100010000000000000000000069000a"], 0x84}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001f40)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_XFRM_DIR={0x5, 0x3, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001f40)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_XFRM_DIR={0x5, 0x3, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req={0x2f, 0x2, 0x8001, 0x6}, 0x10) (async) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req={0x2f, 0x2, 0x8001, 0x6}, 0x10) setsockopt$packet_int(r1, 0x107, 0x13, &(0x7f0000000240)=0xfef, 0x4) 1.10764097s ago: executing program 0 (id=1585): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001201", 0x2e}], 0x1}, 0x48000) 1.08121426s ago: executing program 1 (id=1586): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0xc, 0x3032, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000340)}}], 0x1, 0x0) r0 = socket(0x2b, 0x80801, 0x1) r1 = socket(0x10, 0x400000000080803, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f00000001c0)=@ethtool_ringparam={0x4, 0x0, 0x48, 0xfffffffe, 0xc11, 0x7, 0x20000, 0x0, 0xf}}) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000140)={'nat\x00', 0x0, 0x0, 0x0, [0x8, 0x401, 0x7, 0x6, 0x1000000004, 0x100002001]}, &(0x7f0000000300)=0x78) 898.992715ms ago: executing program 3 (id=1587): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x3, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000040)=0x1) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x38, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8}, {0xc, 0x2, 0x0, 0x1, {0x8, 0x1, r2}}}}]}, 0x38}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x1ec}}, 0x8054) 872.857819ms ago: executing program 1 (id=1588): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000425bd7000fcdbdf040200010008003f0036000000080061"], 0x24}, 0x1, 0x0, 0x0, 0x4008001}, 0x20000000) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={0x0}}, 0x0) 860.458042ms ago: executing program 4 (id=1589): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="74000000040601030000000000000002030000080500010017000000050001000700000009000200"], 0x74}, 0x1, 0x0, 0x0, 0x52}, 0x400c0) 811.069888ms ago: executing program 0 (id=1590): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 775.152044ms ago: executing program 0 (id=1591): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x58, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x4}, @IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x9, 0xffffffff}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x58}}, 0x8000) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x44, 0x2c, 0xd2b, 0x800, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x9}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0xd, 0x1, 0x7, 0x1, 0x4, 0x401, 0xe, 0xfffffffa}}]}}]}, 0x44}}, 0x20000000) 768.011837ms ago: executing program 4 (id=1592): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xfe, 0x10000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x6, &(0x7f0000000000), &(0x7f0000000000), 0x8000000}, 0x2c) 748.073804ms ago: executing program 3 (id=1593): syz_emit_ethernet(0x6e, &(0x7f0000000200)={@multicast, @remote, @val={@void, {0x8100, 0x3, 0x0, 0x3}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0xa1, 0x2f, 0x0, @loopback, @multicast1}, {0x2001, 0x880b, 0x48, 0x0, @wg=@cookie={0x3, 0x1, "8975bfcda76bf25138533281ea847af3cff15372ee1253e4", "0b6b49cdf92833ed5a3dd2a3e2986f7d53a0f0ca511cfa750b4a18d985797c35"}}}}}}, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x82, &(0x7f00000001c0)={r1, 0x40, 0x8}, 0x8) (async) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r2}, 0x8) (async) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000001c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha384\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) (async) accept4(r3, 0x0, 0x0, 0x80800) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1, 0x10, &(0x7f0000000000)=ANY=[], &(0x7f0000005d80)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x24}, 0x94) 693.644337ms ago: executing program 1 (id=1594): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe", 0x2c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722", 0x44}], 0x3}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='[\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002abd7000fcdbdf253d00000008000300", @ANYRES32=r5, @ANYBLOB="02005d0001000000"], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2100000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, r2, 0x331, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void, @void}}, ["", ""]}, 0xff0b}, 0x1, 0x0, 0x0, 0x20000040}, 0x4040040) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40040c5) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x20000011) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f000000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x11) sendmmsg(r7, &(0x7f0000000000), 0x4000000000001f2, 0x0) 693.076427ms ago: executing program 2 (id=1595): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, r2, 0x400, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x8}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x3}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0\x00'}]}, 0x38}}, 0x4000881) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000200)={'tunl0\x00', &(0x7f0000000140)={'gretap0\x00', 0x0, 0x7800, 0x700, 0xc, 0xff, {{0x5, 0x4, 0x2, 0x8, 0x14, 0x65, 0x0, 0x1, 0x29, 0x0, @empty, @empty}}}}) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) recvfrom$llc(r4, 0x0, 0x0, 0x12100, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)={0x1c, r8, 0x1, 0x80, 0x0, {{0x8}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) r10 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$sock_int(r10, 0x1, 0x26, &(0x7f00000004c0), 0x4) sendmsg$NL80211_CMD_TDLS_OPER(r5, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r8, @ANYRESDEC=r9, @ANYRES32=r9, @ANYBLOB="0c00995302b3558b4460b17c85d9a2e5e70008000000320000000a00060008008a00010000000a000600ffffffffffff00000a00060008021100000000000a00060008020000000000000000"], 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000040) sendmmsg$inet6(r0, &(0x7f0000000880)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0}}, {{&(0x7f00000001c0)={0xa, 0x4e22, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1}, 0x6, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="140000000000000029000f000000000000"], 0x18}}], 0x2, 0x4001) 615.681654ms ago: executing program 0 (id=1596): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, 0x0, 0x24000840) r1 = socket$inet6(0xa, 0x3, 0x1) sendmmsg(r1, &(0x7f0000000640)=[{{&(0x7f0000000540)=@l2tp6={0xa, 0x0, 0xf, @mcast2, 0x7fffffff, 0x4}, 0x1b, 0x0}}], 0x1, 0x0) 571.379254ms ago: executing program 3 (id=1597): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r2 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev}, &(0x7f00000002c0)=0x1c, 0x800) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000000, 0x11, r2, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@mask_fadd={0x58, 0x114, 0x8, {{0x6, 0x4}, &(0x7f0000000080)=0x8000000000000001, &(0x7f0000000140)=0x5, 0x7, 0xfffffffffffffc01, 0x5, 0xc65, 0x68, 0x9}}], 0x58}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000680)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000000c0)}}], 0x2, 0x4040040) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r5, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x278, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x328, 0xffffffff, 0xffffffff, 0x328, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x18}}, [], [], 'wg1\x00', 'caif0\x00', {}, {}, 0x62}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x0, 0x0, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x2d8) 507.754968ms ago: executing program 4 (id=1598): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x40020) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x70bd27, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}}, 0x4000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000001800dd8d00000000000000000a000000000000060000000008001e0002"], 0x30}}, 0x4090) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x38}, 0x1, 0x300}, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[], 0x24}}, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x4924b68, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @mcast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) (fail_nth: 5) 466.943676ms ago: executing program 0 (id=1599): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1400000010000100000000000000000000f5ff0a50000000090a010200000000000000000000000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000340000000300c000b4047"], 0x78}}, 0x0) 464.908088ms ago: executing program 1 (id=1600): r0 = accept$ax25(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @bcast}, [@null, @null, @rose, @default, @remote, @default, @remote, @netrom]}, &(0x7f0000000080)=0x48) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r1, 0x110, 0x3) connect$rxrpc(r1, &(0x7f00000003c0)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) 262.166966ms ago: executing program 3 (id=1601): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafa, {0x0, 0x0, 0x0, r2, {0xc, 0xffff}, {0x0, 0xfff1}, {0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 164.839243ms ago: executing program 0 (id=1602): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) shutdown(r1, 0x1) r2 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x10001, @loopback, 0x1}, 0x1c) sendmmsg(r2, &(0x7f0000000300)=[{{&(0x7f0000000540)=@l2tp6={0xa, 0x0, 0xf, @remote, 0x7fffffff, 0x20000004}, 0x80, 0x0}}], 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) r7 = openat$cgroup_ro(r4, &(0x7f00000001c0)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x11, r4, 0x0) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) splice(0xffffffffffffffff, 0x0, r5, 0x0, 0x10000008ebe, 0x6) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="380000002e00090026bd7000000000000493e6985f45285a0d992f9ed292f704b4978d2516a00900e50000000000000040c8cae6ea228d3e"], 0x38}, 0x1, 0x0, 0x0, 0x42804}, 0x4000000) r8 = socket$unix(0x1, 0x7, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20048815) sendmsg$key(0xffffffffffffffff, &(0x7f0000000280)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020d0000100000002f3144a8edffffff03000600ff18000002004909000100000000000000001e0e080012000200010000d200000000000030006c540203009f7eae02000000adb20200000000f52c000000cdff00000001020014bb000001000000002300001300030005000020000002"], 0x80}}, 0x0) r10 = socket$key(0xf, 0x3, 0x2) sendmmsg(r10, &(0x7f00000000c0), 0x2c8, 0x0) r11 = socket(0xa, 0x3, 0x3a) setsockopt$inet6_int(r11, 0x29, 0xc8, &(0x7f0000000000)=0x1, 0x4) r12 = socket(0x28, 0x8000b, 0x38) close(r12) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafa, {0x0, 0x0, 0x0, r9, {0x8, 0xffff}, {0x0, 0xfff1}, {0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 163.729544ms ago: executing program 2 (id=1603): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x3, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000040)=0x1) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x38, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8}, {0xc, 0x2, 0x0, 0x1, {0x8, 0x1, r2}}}}]}, 0x38}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x1ec}}, 0x8054) 94.937174ms ago: executing program 4 (id=1604): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40008c5}, 0x20000080) r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0xfff3}, {0x6, 0xffe0}, {0x10, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 20.637364ms ago: executing program 1 (id=1605): pipe(&(0x7f00000045c0)) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080), 0x0) 0s ago: executing program 3 (id=1606): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x2c, r3, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x2c}}, 0x0) socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1800000040000703fcffffff00000100037c000004"], 0x18}, 0x1, 0x0, 0x0, 0x4008011}, 0xc000) syz_emit_ethernet(0x3b6, &(0x7f0000000200)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cabf00", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af2502"}, {0x0, 0x1, "000000050000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x4, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483be298af1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303"}, {0x21, 0x7, "b8a3e100908f61640000000200fe80ffff00000000000000ff0bc0fe00000000008879e66485201a0015ca83747357a027450004000000"}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) getsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000040), &(0x7f00000005c0)=0x8) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r5, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) kernel console output (not intermixed with test programs): ailed: -4 [ 108.233745][ T7237] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 108.313528][ T7314] netlink: 148 bytes leftover after parsing attributes in process `syz.3.464'. [ 108.363224][ T7237] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 108.418378][ T7237] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 108.561622][ T7322] SET target dimension over the limit! [ 108.994513][ T7336] netlink: 16 bytes leftover after parsing attributes in process `syz.0.468'. [ 109.042459][ T7336] netlink: 28 bytes leftover after parsing attributes in process `syz.0.468'. [ 109.212435][ T7336] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 109.271617][ T7336] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 109.559965][ T7360] netlink: 8 bytes leftover after parsing attributes in process `syz.3.476'. [ 109.610120][ T7357] netdevsim netdevsim2 : renamed from netdevsim0 (while UP) [ 109.639478][ T7366] netlink: 8 bytes leftover after parsing attributes in process `syz.3.476'. [ 109.950370][ T7381] netlink: 12 bytes leftover after parsing attributes in process `syz.2.484'. [ 109.969390][ T7384] trusted_key: syz.0.485 sent an empty control message without MSG_MORE. [ 110.036934][ T7393] 8021q: VLANs not supported on gre0 [ 110.642512][ T7423] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 110.672905][ T7423] xt_CT: You must specify a L4 protocol and not use inversions on it [ 110.992729][ T7438] FAULT_INJECTION: forcing a failure. [ 110.992729][ T7438] name failslab, interval 1, probability 0, space 0, times 0 [ 111.037198][ T7438] CPU: 1 UID: 0 PID: 7438 Comm: syz.1.502 Not tainted syzkaller #0 PREEMPT(full) [ 111.037222][ T7438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 111.037231][ T7438] Call Trace: [ 111.037238][ T7438] [ 111.037245][ T7438] dump_stack_lvl+0x189/0x250 [ 111.037267][ T7438] ? __pfx____ratelimit+0x10/0x10 [ 111.037287][ T7438] ? __pfx_dump_stack_lvl+0x10/0x10 [ 111.037305][ T7438] ? __pfx__printk+0x10/0x10 [ 111.037328][ T7438] ? __pfx___might_resched+0x10/0x10 [ 111.037345][ T7438] ? fs_reclaim_acquire+0x7d/0x100 [ 111.037372][ T7438] should_fail_ex+0x414/0x560 [ 111.037395][ T7438] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 111.037410][ T7438] should_failslab+0xa8/0x100 [ 111.037434][ T7438] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 111.037447][ T7438] kmem_cache_alloc_lru_noprof+0x79/0x6d0 [ 111.037467][ T7438] ? alloc_inode+0x6a/0x1b0 [ 111.037493][ T7438] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 111.037507][ T7438] alloc_inode+0x6a/0x1b0 [ 111.037530][ T7438] new_inode+0x22/0x170 [ 111.037550][ T7438] debugfs_create_dir+0xfb/0x420 [ 111.037570][ T7438] ieee80211_debugfs_recreate_netdev+0x1a6/0x1450 [ 111.037599][ T7438] ? __pfx_ieee80211_debugfs_recreate_netdev+0x10/0x10 [ 111.037620][ T7438] ? ieee80211_if_add+0xad0/0x1370 [ 111.037651][ T7438] ieee80211_if_change_type+0x146/0x940 [ 111.037685][ T7438] ieee80211_change_iface+0xd5/0x510 [ 111.037716][ T7438] cfg80211_change_iface+0x6ba/0xe30 [ 111.037748][ T7438] nl80211_set_interface+0x764/0xa80 [ 111.037783][ T7438] ? __pfx_nl80211_set_interface+0x10/0x10 [ 111.037810][ T7438] ? nl80211_pre_doit+0x4fb/0x930 [ 111.037839][ T7438] genl_family_rcv_msg_doit+0x215/0x300 [ 111.037868][ T7438] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 111.037902][ T7438] ? bpf_lsm_capable+0x9/0x20 [ 111.037918][ T7438] ? security_capable+0x7e/0x2e0 [ 111.037948][ T7438] genl_rcv_msg+0x60e/0x790 [ 111.037975][ T7438] ? __pfx_genl_rcv_msg+0x10/0x10 [ 111.037993][ T7438] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 111.038012][ T7438] ? __pfx_nl80211_set_interface+0x10/0x10 [ 111.038033][ T7438] ? __pfx_nl80211_post_doit+0x10/0x10 [ 111.038069][ T7438] netlink_rcv_skb+0x208/0x470 [ 111.038086][ T7438] ? __pfx_genl_rcv_msg+0x10/0x10 [ 111.038108][ T7438] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 111.038143][ T7438] ? down_read+0x274/0x2e0 [ 111.038163][ T7438] ? genl_rcv+0xd/0x40 [ 111.038184][ T7438] genl_rcv+0x28/0x40 [ 111.038201][ T7438] netlink_unicast+0x82f/0x9e0 [ 111.038238][ T7438] ? __pfx_netlink_unicast+0x10/0x10 [ 111.038258][ T7438] ? netlink_sendmsg+0x642/0xb30 [ 111.038270][ T7438] ? skb_put+0x11b/0x210 [ 111.038292][ T7438] netlink_sendmsg+0x805/0xb30 [ 111.038317][ T7438] ? __pfx_netlink_sendmsg+0x10/0x10 [ 111.038337][ T7438] ? aa_sock_msg_perm+0xf1/0x1b0 [ 111.038356][ T7438] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 111.038377][ T7438] ? __pfx_netlink_sendmsg+0x10/0x10 [ 111.038395][ T7438] __sock_sendmsg+0x21c/0x270 [ 111.038416][ T7438] ____sys_sendmsg+0x505/0x820 [ 111.038476][ T7438] ? __pfx_____sys_sendmsg+0x10/0x10 [ 111.038508][ T7438] ? import_iovec+0x74/0xa0 [ 111.038531][ T7438] ___sys_sendmsg+0x21f/0x2a0 [ 111.038556][ T7438] ? __pfx____sys_sendmsg+0x10/0x10 [ 111.038587][ T7438] ? rcu_read_lock_any_held+0xb3/0x120 [ 111.038637][ T7438] ? __fget_files+0x2a/0x420 [ 111.038651][ T7438] ? __fget_files+0x3a0/0x420 [ 111.038683][ T7438] __x64_sys_sendmsg+0x19b/0x260 [ 111.038709][ T7438] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 111.038744][ T7438] ? __pfx_ksys_write+0x10/0x10 [ 111.038768][ T7438] ? do_syscall_64+0xbe/0xf80 [ 111.038792][ T7438] do_syscall_64+0xfa/0xf80 [ 111.038813][ T7438] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.038830][ T7438] ? clear_bhb_loop+0x60/0xb0 [ 111.038851][ T7438] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.038866][ T7438] RIP: 0033:0x7f47e2f8f749 [ 111.038883][ T7438] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 111.038897][ T7438] RSP: 002b:00007f47e3dcd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 111.038915][ T7438] RAX: ffffffffffffffda RBX: 00007f47e31e5fa0 RCX: 00007f47e2f8f749 [ 111.038927][ T7438] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000003 [ 111.038937][ T7438] RBP: 00007f47e3dcd090 R08: 0000000000000000 R09: 0000000000000000 [ 111.038947][ T7438] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 111.038955][ T7438] R13: 00007f47e31e6038 R14: 00007f47e31e5fa0 R15: 00007ffe16d5e488 [ 111.038984][ T7438] [ 111.503366][ T7438] debugfs: out of free dentries, can not create directory 'netdev:wlan1' [ 111.546794][ T7442] 8021q: adding VLAN 0 to HW filter on device bond1 [ 111.555266][ T7440] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 111.605318][ T7446] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 111.658376][ T6313] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 111.672624][ T7446] bond1: (slave macvlan2): Enslaving as an active interface with an up link [ 111.778857][ T6313] bond1: (slave macvlan2): link status up again after 0 ms [ 111.787386][ T6313] bond1: (slave macvlan2): failed to get link speed/duplex [ 111.823708][ T7455] __nla_validate_parse: 3 callbacks suppressed [ 111.823725][ T7455] netlink: 4 bytes leftover after parsing attributes in process `syz.0.508'. [ 111.863907][ T6313] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 111.909399][ T7455] xt_l2tp: missing protocol rule (udp|l2tpip) [ 111.920412][ T7463] netlink: 236 bytes leftover after parsing attributes in process `syz.4.512'. [ 111.968440][ T6313] bond1: (slave macvlan2): failed to get link speed/duplex [ 112.236917][ T1162] bond1: (slave macvlan2): failed to get link speed/duplex [ 112.347410][ T7486] netlink: 20 bytes leftover after parsing attributes in process `syz.1.519'. [ 112.402451][ T6313] bond1: (slave macvlan2): failed to get link speed/duplex [ 112.518434][ T1025] bond1: (slave macvlan2): failed to get link speed/duplex [ 112.868386][ T36] bond1: (slave macvlan2): failed to get link speed/duplex [ 112.962363][ T7513] netlink: 236 bytes leftover after parsing attributes in process `syz.2.527'. [ 112.988476][ T1162] bond1: (slave macvlan2): failed to get link speed/duplex [ 113.110559][ T7518] netlink: 12 bytes leftover after parsing attributes in process `syz.3.530'. [ 113.680878][ T7547] netlink: 236 bytes leftover after parsing attributes in process `syz.0.542'. [ 114.601014][ T7587] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 115.123683][ T7620] netlink: 28 bytes leftover after parsing attributes in process `syz.2.560'. [ 115.322012][ T7625] netlink: 4 bytes leftover after parsing attributes in process `syz.0.562'. [ 116.046585][ T7654] lo speed is unknown, defaulting to 1000 [ 116.542657][ T7683] netlink: 4 bytes leftover after parsing attributes in process `syz.0.585'. [ 117.318503][ T3796] net_ratelimit: 30 callbacks suppressed [ 117.318523][ T3796] bond1: (slave macvlan2): failed to get link speed/duplex [ 117.426582][ T7699] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.434276][ T7699] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.548527][ T1162] bond1: (slave macvlan2): failed to get link speed/duplex [ 117.582551][ T7710] lo: entered allmulticast mode [ 117.602247][ T7711] netlink: 8 bytes leftover after parsing attributes in process `syz.1.595'. [ 117.678504][ T6313] bond1: (slave macvlan2): failed to get link speed/duplex [ 117.734788][ T7719] netlink: 236 bytes leftover after parsing attributes in process `syz.2.598'. [ 117.788490][ T4504] bond1: (slave macvlan2): failed to get link speed/duplex [ 117.842401][ T7721] netlink: 16 bytes leftover after parsing attributes in process `syz.0.599'. [ 117.917983][ T7724] xt_CT: You must specify a L4 protocol and not use inversions on it [ 117.932956][ T7724] netlink: 'syz.2.600': attribute type 2 has an invalid length. [ 117.934704][ T4504] bond1: (slave macvlan2): failed to get link speed/duplex [ 117.940963][ T7724] netlink: 44 bytes leftover after parsing attributes in process `syz.2.600'. [ 118.078430][ T4504] bond1: (slave macvlan2): failed to get link speed/duplex [ 118.198511][ T6313] bond1: (slave macvlan2): failed to get link speed/duplex [ 118.296085][ T7739] netlink: 44 bytes leftover after parsing attributes in process `syz.0.605'. [ 118.338647][ T6313] bond1: (slave macvlan2): failed to get link speed/duplex [ 118.422466][ T7743] netlink: 'syz.4.608': attribute type 21 has an invalid length. [ 118.452387][ T7743] netlink: 128 bytes leftover after parsing attributes in process `syz.4.608'. [ 118.461623][ T1162] bond1: (slave macvlan2): failed to get link speed/duplex [ 118.485357][ T7748] netlink: 236 bytes leftover after parsing attributes in process `syz.3.610'. [ 118.499993][ T7743] netlink: 'syz.4.608': attribute type 5 has an invalid length. [ 118.514074][ T7743] netlink: 3 bytes leftover after parsing attributes in process `syz.4.608'. [ 118.543374][ T7743] netlink: 40 bytes leftover after parsing attributes in process `syz.4.608'. [ 118.590260][ T7743] netlink: 40 bytes leftover after parsing attributes in process `syz.4.608'. [ 118.624868][ T7743] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 119.022702][ T7775] netlink: 'syz.4.620': attribute type 21 has an invalid length. [ 119.311793][ T7791] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.319495][ T7791] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.795724][ T7826] netlink: 'syz.4.637': attribute type 10 has an invalid length. [ 119.824664][ T7825] syzkaller0: entered promiscuous mode [ 119.831390][ T7825] syzkaller0: entered allmulticast mode [ 119.838699][ T7826] team0: entered promiscuous mode [ 119.844451][ T7826] team_slave_0: entered promiscuous mode [ 119.858726][ T7826] team_slave_1: entered promiscuous mode [ 119.879977][ T7826] bridge0: port 3(team0) entered blocking state [ 119.889777][ T7826] bridge0: port 3(team0) entered disabled state [ 119.902490][ T7826] team0: entered allmulticast mode [ 119.913934][ T7826] team_slave_0: entered allmulticast mode [ 119.929877][ T7826] team_slave_1: entered allmulticast mode [ 119.951740][ T7825] tipc: Started in network mode [ 119.956648][ T7825] tipc: Node identity 3a124ca039ed, cluster identity 4711 [ 119.967918][ T7825] tipc: Enabled bearer , priority 0 [ 120.024368][ T7833] bond3: (slave erspan0): Device is not bonding slave [ 120.034038][ T7833] bond3: option active_slave: invalid value (erspan0) [ 120.046539][ T7833] bond3 (unregistering): Released all slaves [ 120.075893][ T7836] bond0: entered promiscuous mode [ 120.089634][ T7836] bond_slave_0: entered promiscuous mode [ 120.095561][ T7836] bond_slave_1: entered promiscuous mode [ 120.119123][ T7820] tipc: Resetting bearer [ 120.119173][ T7844] netlink: 'syz.4.640': attribute type 10 has an invalid length. [ 120.170219][ T7820] tipc: Disabling bearer [ 120.190470][ T7844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 120.202928][ T7844] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 120.242721][ T7846] FAULT_INJECTION: forcing a failure. [ 120.242721][ T7846] name failslab, interval 1, probability 0, space 0, times 0 [ 120.266043][ T7846] CPU: 1 UID: 0 PID: 7846 Comm: syz.1.641 Not tainted syzkaller #0 PREEMPT(full) [ 120.266068][ T7846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 120.266078][ T7846] Call Trace: [ 120.266085][ T7846] [ 120.266092][ T7846] dump_stack_lvl+0x189/0x250 [ 120.266115][ T7846] ? __pfx____ratelimit+0x10/0x10 [ 120.266135][ T7846] ? __pfx_dump_stack_lvl+0x10/0x10 [ 120.266152][ T7846] ? __pfx__printk+0x10/0x10 [ 120.266171][ T7846] ? kmalloc_reserve+0xbd/0x290 [ 120.266197][ T7846] ? __lock_acquire+0x6b6/0x2cf0 [ 120.266221][ T7846] should_fail_ex+0x414/0x560 [ 120.266245][ T7846] should_failslab+0xa8/0x100 [ 120.266271][ T7846] kmem_cache_alloc_noprof+0x74/0x6f0 [ 120.266291][ T7846] ? skb_clone+0x212/0x3a0 [ 120.266312][ T7846] skb_clone+0x212/0x3a0 [ 120.266332][ T7846] __netlink_deliver_tap+0x404/0x850 [ 120.266362][ T7846] ? netlink_deliver_tap+0x2e/0x1b0 [ 120.266379][ T7846] netlink_deliver_tap+0x19c/0x1b0 [ 120.266396][ T7846] netlink_unicast+0x7fa/0x9e0 [ 120.266429][ T7846] ? __pfx_netlink_unicast+0x10/0x10 [ 120.266453][ T7846] ? netlink_sendmsg+0x642/0xb30 [ 120.266466][ T7846] ? skb_put+0x11b/0x210 [ 120.266491][ T7846] netlink_sendmsg+0x805/0xb30 [ 120.266523][ T7846] ? __pfx_netlink_sendmsg+0x10/0x10 [ 120.266543][ T7846] ? aa_sock_msg_perm+0xf1/0x1b0 [ 120.266561][ T7846] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 120.266581][ T7846] ? __pfx_netlink_sendmsg+0x10/0x10 [ 120.266599][ T7846] __sock_sendmsg+0x21c/0x270 [ 120.266623][ T7846] ____sys_sendmsg+0x505/0x820 [ 120.266652][ T7846] ? __pfx_____sys_sendmsg+0x10/0x10 [ 120.266685][ T7846] ? import_iovec+0x74/0xa0 [ 120.266716][ T7846] ___sys_sendmsg+0x21f/0x2a0 [ 120.266742][ T7846] ? __pfx____sys_sendmsg+0x10/0x10 [ 120.266772][ T7846] ? rcu_read_lock_any_held+0xb3/0x120 [ 120.266818][ T7846] ? __fget_files+0x2a/0x420 [ 120.266832][ T7846] ? __fget_files+0x3a0/0x420 [ 120.266858][ T7846] __x64_sys_sendmsg+0x19b/0x260 [ 120.266884][ T7846] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 120.266917][ T7846] ? __pfx_ksys_write+0x10/0x10 [ 120.266942][ T7846] ? do_syscall_64+0xbe/0xf80 [ 120.266965][ T7846] do_syscall_64+0xfa/0xf80 [ 120.266986][ T7846] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.267001][ T7846] ? clear_bhb_loop+0x60/0xb0 [ 120.267038][ T7846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.267053][ T7846] RIP: 0033:0x7f47e2f8f749 [ 120.267068][ T7846] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.267102][ T7846] RSP: 002b:00007f47e3dcd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 120.267120][ T7846] RAX: ffffffffffffffda RBX: 00007f47e31e5fa0 RCX: 00007f47e2f8f749 [ 120.267131][ T7846] RDX: 0000000000000040 RSI: 0000200000000280 RDI: 0000000000000004 [ 120.267142][ T7846] RBP: 00007f47e3dcd090 R08: 0000000000000000 R09: 0000000000000000 [ 120.267152][ T7846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 120.267162][ T7846] R13: 00007f47e31e6038 R14: 00007f47e31e5fa0 R15: 00007ffe16d5e488 [ 120.267191][ T7846] [ 120.957982][ T7866] tipc: Enabled bearer , priority 0 [ 120.973041][ T7866] syzkaller0: entered promiscuous mode [ 120.979035][ T7866] syzkaller0: entered allmulticast mode [ 120.986999][ T7864] only policy match revision 0 supported [ 120.987018][ T7864] unable to load match [ 121.202399][ T7865] tipc: Resetting bearer [ 121.258990][ T7865] tipc: Disabling bearer [ 121.265211][ T7880] Bluetooth: MGMT ver 1.23 [ 121.278423][ T7882] bond1: option mode: unable to set because the bond device has slaves [ 121.298111][ T7883] syzkaller0: entered promiscuous mode [ 121.308782][ T7883] syzkaller0: entered allmulticast mode [ 121.367429][ T7882] bond1: (slave macvlan3): Error -98 calling set_mac_address [ 121.431240][ T7875] tipc: Started in network mode [ 121.438783][ T7875] tipc: Node identity 2641ce14f91b, cluster identity 4711 [ 121.456884][ T7875] tipc: Enabled bearer , priority 0 [ 121.536244][ T7890] 8021q: adding VLAN 0 to HW filter on device bond1 [ 121.568996][ T7894] bond_slave_0: entered promiscuous mode [ 121.574947][ T7894] bond_slave_1: entered promiscuous mode [ 121.580782][ T7894] batadv0: entered promiscuous mode [ 121.599845][ T7894] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 121.610778][ T7894] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 121.663268][ T7874] tipc: Resetting bearer [ 121.747666][ T7874] tipc: Disabling bearer [ 122.423496][ T7940] tipc: Enabling of bearer rejected, failed to enable media [ 122.558901][ T78] net_ratelimit: 25 callbacks suppressed [ 122.558919][ T78] bond1: (slave macvlan2): failed to get link speed/duplex [ 122.708730][ T1309] bond1: (slave macvlan2): failed to get link speed/duplex [ 122.838369][ T4937] bond1: (slave macvlan2): failed to get link speed/duplex [ 122.998873][ T1162] bond1: (slave macvlan2): failed to get link speed/duplex [ 123.119155][ T6313] bond1: (slave macvlan2): failed to get link speed/duplex [ 123.229724][ T3796] bond1: (slave macvlan2): failed to get link speed/duplex [ 123.259186][ T7978] netlink: 'syz.2.683': attribute type 1 has an invalid length. [ 123.366258][ T7978] bond3: (slave xfrm1): The slave device specified does not support setting the MAC address [ 123.377035][ T7978] bond3: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 123.389481][ T7978] bond3: (slave xfrm1): making interface the new active one [ 123.399373][ T7978] bond3: (slave xfrm1): Enslaving as an active interface with an up link [ 123.427086][ T7978] __nla_validate_parse: 9 callbacks suppressed [ 123.427103][ T7978] netlink: 4 bytes leftover after parsing attributes in process `syz.2.683'. [ 123.428505][ T1025] bond1: (slave macvlan2): failed to get link speed/duplex [ 123.586006][ T4937] bond1: (slave macvlan2): failed to get link speed/duplex [ 123.738482][ T3563] bond1: (slave macvlan2): failed to get link speed/duplex [ 123.849006][ T3563] bond1: (slave macvlan2): failed to get link speed/duplex [ 123.916832][ T8006] syzkaller0: entered promiscuous mode [ 123.928489][ T8006] syzkaller0: entered allmulticast mode [ 124.028060][ T8015] netlink: 20 bytes leftover after parsing attributes in process `syz.2.694'. [ 124.131151][ T8006] nbd0: detected capacity change from 0 to 127 [ 124.155936][ T5156] block nbd0: Receive control failed (result -32) [ 124.167948][ T5850] block nbd0: Send control failed (result -32) [ 124.175318][ T5850] block nbd0: Request send failed, requeueing [ 124.185891][ T11] block nbd0: Dead connection, failed to find a fallback [ 124.194157][ T11] block nbd0: shutting down sockets [ 124.200531][ T11] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 124.211088][ T11] Buffer I/O error on dev nbd0, logical block 0, async page read [ 124.219561][ T5850] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 124.229635][ T5850] Buffer I/O error on dev nbd0, logical block 1, async page read [ 124.237968][ T5850] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 124.247664][ T5850] Buffer I/O error on dev nbd0, logical block 2, async page read [ 124.256220][ T5850] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 124.267431][ T5850] Buffer I/O error on dev nbd0, logical block 3, async page read [ 124.276465][ T5850] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 124.285861][ T5850] Buffer I/O error on dev nbd0, logical block 0, async page read [ 124.294239][ T5850] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 124.303841][ T5850] Buffer I/O error on dev nbd0, logical block 1, async page read [ 124.312406][ T5850] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 124.329164][ T5850] Buffer I/O error on dev nbd0, logical block 2, async page read [ 124.337247][ T5850] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 124.348696][ T5850] Buffer I/O error on dev nbd0, logical block 3, async page read [ 124.356949][ T5850] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 124.368699][ T5850] Buffer I/O error on dev nbd0, logical block 0, async page read [ 124.376820][ T5850] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 124.398864][ T5850] Buffer I/O error on dev nbd0, logical block 1, async page read [ 124.443942][ T5850] ldm_validate_partition_table(): Disk read failed. [ 124.488229][ T5850] Dev nbd0: unable to read RDB block 0 [ 124.522144][ T5850] nbd0: unable to read partition table [ 124.561370][ T5850] ldm_validate_partition_table(): Disk read failed. [ 124.591062][ T5850] Dev nbd0: unable to read RDB block 0 [ 124.622414][ T5850] nbd0: unable to read partition table [ 124.668693][ T8030] netlink: 'syz.2.701': attribute type 1 has an invalid length. [ 124.676463][ T8030] netlink: 4 bytes leftover after parsing attributes in process `syz.2.701'. [ 124.921117][ T8046] bond1: option mode: unable to set because the bond device has slaves [ 124.973840][ T8046] bond1: (slave macvlan3): Error -98 calling set_mac_address [ 125.120017][ T8054] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 125.518968][ T8074] netlink: 'syz.2.720': attribute type 10 has an invalid length. [ 125.543327][ T8074] veth0_virt_wifi: entered allmulticast mode [ 125.609665][ T8074] team0: Port device veth0_virt_wifi added [ 125.754801][ T8089] netlink: 830 bytes leftover after parsing attributes in process `syz.0.725'. [ 125.767945][ T8090] tipc: Enabled bearer , priority 0 [ 125.775870][ T8090] syzkaller0: entered promiscuous mode [ 125.784036][ T8090] syzkaller0: entered allmulticast mode [ 125.823808][ T8090] tipc: Resetting bearer [ 125.924628][ T8088] tipc: Resetting bearer [ 125.976062][ T8088] tipc: Disabling bearer [ 126.174640][ T8106] netlink: 8 bytes leftover after parsing attributes in process `syz.2.731'. [ 126.227219][ T8115] netlink: 256 bytes leftover after parsing attributes in process `syz.3.733'. [ 126.246932][ T8115] netlink: 'syz.3.733': attribute type 9 has an invalid length. [ 126.349919][ T8118] netlink: 'syz.4.735': attribute type 4 has an invalid length. [ 126.378490][ T8118] netlink: 8 bytes leftover after parsing attributes in process `syz.4.735'. [ 126.576949][ T8134] tipc: Enabled bearer , priority 0 [ 126.634213][ T8131] tipc: Disabling bearer [ 126.975564][ T8154] netlink: 52 bytes leftover after parsing attributes in process `syz.4.749'. [ 127.000833][ T8153] netlink: 16 bytes leftover after parsing attributes in process `syz.0.751'. [ 127.025129][ T8155] pimreg3: entered allmulticast mode [ 127.500711][ T8185] netlink: 28 bytes leftover after parsing attributes in process `syz.3.760'. [ 127.626306][ T8194] xt_CT: You must specify a L4 protocol and not use inversions on it [ 127.639064][ T13] net_ratelimit: 28 callbacks suppressed [ 127.639083][ T13] bond1: (slave macvlan2): failed to get link speed/duplex [ 127.722185][ T8197] FAULT_INJECTION: forcing a failure. [ 127.722185][ T8197] name failslab, interval 1, probability 0, space 0, times 0 [ 127.743643][ T8197] CPU: 1 UID: 0 PID: 8197 Comm: syz.1.764 Not tainted syzkaller #0 PREEMPT(full) [ 127.743667][ T8197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 127.743676][ T8197] Call Trace: [ 127.743682][ T8197] [ 127.743689][ T8197] dump_stack_lvl+0x189/0x250 [ 127.743710][ T8197] ? __pfx____ratelimit+0x10/0x10 [ 127.743729][ T8197] ? __pfx_dump_stack_lvl+0x10/0x10 [ 127.743746][ T8197] ? __pfx__printk+0x10/0x10 [ 127.743769][ T8197] ? __pfx___might_resched+0x10/0x10 [ 127.743784][ T8197] ? fs_reclaim_acquire+0x7d/0x100 [ 127.743807][ T8197] should_fail_ex+0x414/0x560 [ 127.743830][ T8197] should_failslab+0xa8/0x100 [ 127.743854][ T8197] kmem_cache_alloc_node_noprof+0x77/0x710 [ 127.743871][ T8197] ? __alloc_skb+0x255/0x430 [ 127.743891][ T8197] ? napi_skb_cache_get+0x4a5/0x780 [ 127.744016][ T8197] ? napi_skb_cache_get+0x151/0x780 [ 127.744043][ T8197] __alloc_skb+0x255/0x430 [ 127.744065][ T8197] ? __pfx___alloc_skb+0x10/0x10 [ 127.744094][ T8197] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 127.744120][ T8197] netlink_sendmsg+0x5c6/0xb30 [ 127.744145][ T8197] ? __pfx_netlink_sendmsg+0x10/0x10 [ 127.744163][ T8197] ? aa_sock_msg_perm+0xf1/0x1b0 [ 127.744181][ T8197] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 127.744198][ T8197] ? __pfx_netlink_sendmsg+0x10/0x10 [ 127.744215][ T8197] __sock_sendmsg+0x21c/0x270 [ 127.744237][ T8197] ____sys_sendmsg+0x505/0x820 [ 127.744266][ T8197] ? __pfx_____sys_sendmsg+0x10/0x10 [ 127.744297][ T8197] ? import_iovec+0x74/0xa0 [ 127.744321][ T8197] ___sys_sendmsg+0x21f/0x2a0 [ 127.744346][ T8197] ? __pfx____sys_sendmsg+0x10/0x10 [ 127.744374][ T8197] ? rcu_read_lock_any_held+0xb3/0x120 [ 127.744415][ T8197] ? __fget_files+0x2a/0x420 [ 127.744430][ T8197] ? __fget_files+0x3a0/0x420 [ 127.744455][ T8197] __x64_sys_sendmsg+0x19b/0x260 [ 127.744481][ T8197] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 127.744509][ T8197] ? __pfx_ksys_write+0x10/0x10 [ 127.744532][ T8197] ? do_syscall_64+0xbe/0xf80 [ 127.744556][ T8197] do_syscall_64+0xfa/0xf80 [ 127.744577][ T8197] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.744591][ T8197] ? clear_bhb_loop+0x60/0xb0 [ 127.744608][ T8197] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.744623][ T8197] RIP: 0033:0x7f47e2f8f749 [ 127.744639][ T8197] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.744651][ T8197] RSP: 002b:00007f47e3dcd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 127.744670][ T8197] RAX: ffffffffffffffda RBX: 00007f47e31e5fa0 RCX: 00007f47e2f8f749 [ 127.744680][ T8197] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000004 [ 127.744690][ T8197] RBP: 00007f47e3dcd090 R08: 0000000000000000 R09: 0000000000000000 [ 127.744699][ T8197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 127.744708][ T8197] R13: 00007f47e31e6038 R14: 00007f47e31e5fa0 R15: 00007ffe16d5e488 [ 127.744734][ T8197] [ 128.170249][ T3563] bond1: (slave macvlan2): failed to get link speed/duplex [ 128.180376][ T8203] netlink: 'syz.1.767': attribute type 5 has an invalid length. [ 128.286438][ T3563] bond1: (slave macvlan2): failed to get link speed/duplex [ 128.370828][ T8216] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 128.378094][ T8216] IPv6: NLM_F_CREATE should be set when creating new route [ 128.398379][ T6313] bond1: (slave macvlan2): failed to get link speed/duplex [ 128.518475][ T3521] bond1: (slave macvlan2): failed to get link speed/duplex [ 128.658391][ T3521] bond1: (slave macvlan2): failed to get link speed/duplex [ 128.780346][ T8229] lo speed is unknown, defaulting to 1000 [ 128.818405][ T13] bond1: (slave macvlan2): failed to get link speed/duplex [ 128.880720][ T8227] nbd1: detected capacity change from 0 to 127 [ 128.899966][ T8238] tipc: Enabled bearer , priority 0 [ 128.974280][ T8231] tipc: Disabling bearer [ 129.026653][ T8250] __nla_validate_parse: 2 callbacks suppressed [ 129.026670][ T8250] netlink: 96 bytes leftover after parsing attributes in process `syz.0.777'. [ 129.047997][ T4384] bond1: (slave macvlan2): failed to get link speed/duplex [ 129.198410][ T3521] bond1: (slave macvlan2): failed to get link speed/duplex [ 129.236361][ T8255] lo speed is unknown, defaulting to 1000 [ 129.448411][ T4384] bond1: (slave macvlan2): failed to get link speed/duplex [ 129.624885][ T5156] block nbd1: Receive control failed (result -104) [ 129.885759][ T8277] FAULT_INJECTION: forcing a failure. [ 129.885759][ T8277] name failslab, interval 1, probability 0, space 0, times 0 [ 129.938554][ T8277] CPU: 1 UID: 0 PID: 8277 Comm: syz.4.785 Not tainted syzkaller #0 PREEMPT(full) [ 129.938576][ T8277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 129.938584][ T8277] Call Trace: [ 129.938590][ T8277] [ 129.938596][ T8277] dump_stack_lvl+0x189/0x250 [ 129.938617][ T8277] ? __pfx____ratelimit+0x10/0x10 [ 129.938645][ T8277] ? __pfx_dump_stack_lvl+0x10/0x10 [ 129.938662][ T8277] ? __pfx__printk+0x10/0x10 [ 129.938680][ T8277] ? kmalloc_reserve+0xbd/0x290 [ 129.938704][ T8277] ? __lock_acquire+0x6b6/0x2cf0 [ 129.938728][ T8277] should_fail_ex+0x414/0x560 [ 129.938752][ T8277] should_failslab+0xa8/0x100 [ 129.938794][ T8277] kmem_cache_alloc_noprof+0x74/0x6f0 [ 129.938815][ T8277] ? skb_clone+0x212/0x3a0 [ 129.938835][ T8277] skb_clone+0x212/0x3a0 [ 129.938857][ T8277] __netlink_deliver_tap+0x404/0x850 [ 129.938884][ T8277] ? netlink_deliver_tap+0x2e/0x1b0 [ 129.938902][ T8277] netlink_deliver_tap+0x19c/0x1b0 [ 129.938918][ T8277] netlink_unicast+0x7fa/0x9e0 [ 129.938950][ T8277] ? __pfx_netlink_unicast+0x10/0x10 [ 129.938973][ T8277] ? netlink_sendmsg+0x642/0xb30 [ 129.938987][ T8277] ? skb_put+0x11b/0x210 [ 129.939011][ T8277] netlink_sendmsg+0x805/0xb30 [ 129.939036][ T8277] ? __pfx_netlink_sendmsg+0x10/0x10 [ 129.939056][ T8277] ? aa_sock_msg_perm+0xf1/0x1b0 [ 129.939074][ T8277] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 129.939094][ T8277] ? __pfx_netlink_sendmsg+0x10/0x10 [ 129.939111][ T8277] __sock_sendmsg+0x21c/0x270 [ 129.939132][ T8277] ____sys_sendmsg+0x505/0x820 [ 129.939161][ T8277] ? __pfx_____sys_sendmsg+0x10/0x10 [ 129.939193][ T8277] ? import_iovec+0x74/0xa0 [ 129.939218][ T8277] ___sys_sendmsg+0x21f/0x2a0 [ 129.939243][ T8277] ? __pfx____sys_sendmsg+0x10/0x10 [ 129.939272][ T8277] ? rcu_read_lock_any_held+0xb3/0x120 [ 129.939317][ T8277] ? __fget_files+0x2a/0x420 [ 129.939331][ T8277] ? __fget_files+0x3a0/0x420 [ 129.939355][ T8277] __x64_sys_sendmsg+0x19b/0x260 [ 129.939381][ T8277] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 129.939413][ T8277] ? __pfx_ksys_write+0x10/0x10 [ 129.939436][ T8277] ? do_syscall_64+0xbe/0xf80 [ 129.939460][ T8277] do_syscall_64+0xfa/0xf80 [ 129.939480][ T8277] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.939496][ T8277] ? clear_bhb_loop+0x60/0xb0 [ 129.939515][ T8277] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.939530][ T8277] RIP: 0033:0x7f555c78f749 [ 129.939546][ T8277] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 129.939558][ T8277] RSP: 002b:00007f555d570038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 129.939577][ T8277] RAX: ffffffffffffffda RBX: 00007f555c9e5fa0 RCX: 00007f555c78f749 [ 129.939594][ T8277] RDX: 0000000000000040 RSI: 0000200000000280 RDI: 0000000000000003 [ 129.939604][ T8277] RBP: 00007f555d570090 R08: 0000000000000000 R09: 0000000000000000 [ 129.939614][ T8277] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 129.939623][ T8277] R13: 00007f555c9e6038 R14: 00007f555c9e5fa0 R15: 00007fff40e27d58 [ 129.939657][ T8277] [ 129.943074][ T8277] netlink: 52 bytes leftover after parsing attributes in process `syz.4.785'. [ 130.495863][ T8296] netlink: 8 bytes leftover after parsing attributes in process `syz.4.791'. [ 130.506537][ T8296] netlink: 'syz.4.791': attribute type 5 has an invalid length. [ 130.515499][ T8296] netlink: 28 bytes leftover after parsing attributes in process `syz.4.791'. [ 130.573810][ T8296] geneve2: entered promiscuous mode [ 130.586565][ T8296] geneve2: entered allmulticast mode [ 130.605229][ T8293] netlink: 20 bytes leftover after parsing attributes in process `syz.3.789'. [ 130.650560][ T78] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 130.680142][ T8301] tipc: Enabled bearer , priority 0 [ 130.709409][ T8300] syzkaller0: entered promiscuous mode [ 130.755791][ T8300] syzkaller0: entered allmulticast mode [ 130.767151][ T78] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 130.799772][ T8294] tipc: Disabling bearer [ 130.825798][ T78] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 130.919140][ T78] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 130.942935][ T8312] netlink: 44 bytes leftover after parsing attributes in process `syz.2.797'. [ 131.309662][ T8329] netlink: 48 bytes leftover after parsing attributes in process `syz.2.801'. [ 131.325493][ T8331] netlink: 52 bytes leftover after parsing attributes in process `syz.0.802'. [ 131.334790][ T8331] FAULT_INJECTION: forcing a failure. [ 131.334790][ T8331] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 131.350323][ T8331] CPU: 0 UID: 0 PID: 8331 Comm: syz.0.802 Not tainted syzkaller #0 PREEMPT(full) [ 131.350346][ T8331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 131.350356][ T8331] Call Trace: [ 131.350363][ T8331] [ 131.350370][ T8331] dump_stack_lvl+0x189/0x250 [ 131.350393][ T8331] ? __pfx____ratelimit+0x10/0x10 [ 131.350412][ T8331] ? __pfx_dump_stack_lvl+0x10/0x10 [ 131.350428][ T8331] ? __pfx__printk+0x10/0x10 [ 131.350458][ T8331] should_fail_ex+0x414/0x560 [ 131.350480][ T8331] _copy_to_user+0x31/0xb0 [ 131.350503][ T8331] simple_read_from_buffer+0xe1/0x170 [ 131.350536][ T8331] proc_fail_nth_read+0x1b3/0x220 [ 131.350557][ T8331] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 131.350579][ T8331] ? rw_verify_area+0x2a6/0x4d0 [ 131.350595][ T8331] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 131.350615][ T8331] vfs_read+0x200/0xa30 [ 131.350632][ T8331] ? fdget_pos+0x247/0x320 [ 131.350650][ T8331] ? __pfx___mutex_lock+0x10/0x10 [ 131.350671][ T8331] ? __pfx_vfs_read+0x10/0x10 [ 131.350693][ T8331] ? __fget_files+0x2a/0x420 [ 131.350712][ T8331] ? __fget_files+0x3a0/0x420 [ 131.350726][ T8331] ? __fget_files+0x2a/0x420 [ 131.350750][ T8331] ksys_read+0x145/0x250 [ 131.350772][ T8331] ? __pfx_ksys_read+0x10/0x10 [ 131.350795][ T8331] ? do_syscall_64+0xbe/0xf80 [ 131.350819][ T8331] do_syscall_64+0xfa/0xf80 [ 131.350840][ T8331] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.350857][ T8331] ? clear_bhb_loop+0x60/0xb0 [ 131.350876][ T8331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.350892][ T8331] RIP: 0033:0x7fd43738e15c [ 131.350907][ T8331] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 131.350920][ T8331] RSP: 002b:00007fd4382ae030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 131.350937][ T8331] RAX: ffffffffffffffda RBX: 00007fd4375e5fa0 RCX: 00007fd43738e15c [ 131.350948][ T8331] RDX: 000000000000000f RSI: 00007fd4382ae0a0 RDI: 0000000000000005 [ 131.350962][ T8331] RBP: 00007fd4382ae090 R08: 0000000000000000 R09: 0000000000000000 [ 131.350972][ T8331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 131.350981][ T8331] R13: 00007fd4375e6038 R14: 00007fd4375e5fa0 R15: 00007ffeecc791b8 [ 131.351008][ T8331] [ 131.854683][ T8336] netlink: 52 bytes leftover after parsing attributes in process `syz.0.803'. [ 132.026074][ T8340] FAULT_INJECTION: forcing a failure. [ 132.026074][ T8340] name failslab, interval 1, probability 0, space 0, times 0 [ 132.073681][ T8342] netlink: 'syz.2.808': attribute type 3 has an invalid length. [ 132.098512][ T8340] CPU: 0 UID: 0 PID: 8340 Comm: syz.0.807 Not tainted syzkaller #0 PREEMPT(full) [ 132.098536][ T8340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 132.098546][ T8340] Call Trace: [ 132.098553][ T8340] [ 132.098560][ T8340] dump_stack_lvl+0x189/0x250 [ 132.098583][ T8340] ? __pfx____ratelimit+0x10/0x10 [ 132.098603][ T8340] ? __pfx_dump_stack_lvl+0x10/0x10 [ 132.098633][ T8340] ? __pfx__printk+0x10/0x10 [ 132.098666][ T8340] should_fail_ex+0x414/0x560 [ 132.098689][ T8340] should_failslab+0xa8/0x100 [ 132.098712][ T8340] kmem_cache_alloc_noprof+0x74/0x6f0 [ 132.098732][ T8340] ? dst_alloc+0x105/0x170 [ 132.098755][ T8340] dst_alloc+0x105/0x170 [ 132.098776][ T8340] ip_route_output_key_hash_rcu+0x1560/0x23e0 [ 132.098808][ T8340] ? ip_route_output_key_hash+0xc1/0x280 [ 132.098831][ T8340] ip_route_output_key_hash+0x174/0x280 [ 132.098852][ T8340] ? ns_capable+0x8a/0xf0 [ 132.098869][ T8340] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 132.098907][ T8340] ip_route_output_flow+0x2a/0x150 [ 132.098926][ T8340] ? security_sk_classify_flow+0x70/0x180 [ 132.098946][ T8340] udp_sendmsg+0x142e/0x2170 [ 132.098977][ T8340] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 132.099003][ T8340] ? __pfx_udp_sendmsg+0x10/0x10 [ 132.099017][ T8340] ? tomoyo_write_log2+0x250/0x910 [ 132.099040][ T8340] ? look_up_lock_class+0x74/0x150 [ 132.099058][ T8340] ? look_up_lock_class+0x74/0x150 [ 132.099097][ T8340] ? lockdep_hardirqs_on+0x98/0x140 [ 132.099117][ T8340] ? get_random_u32+0x155/0x930 [ 132.099135][ T8340] ? get_random_u32+0x4df/0x930 [ 132.099160][ T8340] ? __pfx_get_random_u32+0x10/0x10 [ 132.099185][ T8340] udpv6_sendmsg+0xc1c/0x2510 [ 132.099225][ T8340] ? udp_lib_get_port+0x164b/0x1b10 [ 132.099248][ T8340] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 132.099281][ T8340] ? ip6_datagram_release_cb+0x7c/0x550 [ 132.099312][ T8340] ? __local_bh_enable_ip+0x12d/0x1c0 [ 132.099328][ T8340] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 132.099373][ T8340] ? inet_send_prepare+0x1b9/0x270 [ 132.099392][ T8340] ? inet_send_prepare+0x1b9/0x270 [ 132.099412][ T8340] ? inet6_sendmsg+0xe4/0x120 [ 132.099444][ T8340] __sock_sendmsg+0xe5/0x270 [ 132.099466][ T8340] ____sys_sendmsg+0x505/0x820 [ 132.099494][ T8340] ? __pfx_____sys_sendmsg+0x10/0x10 [ 132.099526][ T8340] ? import_iovec+0x74/0xa0 [ 132.099556][ T8340] ___sys_sendmsg+0x21f/0x2a0 [ 132.099581][ T8340] ? __pfx____sys_sendmsg+0x10/0x10 [ 132.099611][ T8340] ? rcu_read_lock_any_held+0xb3/0x120 [ 132.099643][ T8340] ? sb_end_write+0xe9/0x1c0 [ 132.099679][ T8340] ? __pfx_vfs_write+0x10/0x10 [ 132.099708][ T8340] __x64_sys_sendmsg+0x19b/0x260 [ 132.099734][ T8340] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 132.099767][ T8340] ? __pfx_ksys_write+0x10/0x10 [ 132.099790][ T8340] ? do_syscall_64+0xbe/0xf80 [ 132.099814][ T8340] do_syscall_64+0xfa/0xf80 [ 132.099835][ T8340] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.099850][ T8340] ? clear_bhb_loop+0x60/0xb0 [ 132.099870][ T8340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.099886][ T8340] RIP: 0033:0x7fd43738f749 [ 132.099901][ T8340] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 132.099913][ T8340] RSP: 002b:00007fd4382ae038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 132.099927][ T8340] RAX: ffffffffffffffda RBX: 00007fd4375e5fa0 RCX: 00007fd43738f749 [ 132.099936][ T8340] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000008 [ 132.099944][ T8340] RBP: 00007fd4382ae090 R08: 0000000000000000 R09: 0000000000000000 [ 132.099952][ T8340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 132.099959][ T8340] R13: 00007fd4375e6038 R14: 00007fd4375e5fa0 R15: 00007ffeecc791b8 [ 132.099981][ T8340] [ 132.173179][ T8346] netlink: 4 bytes leftover after parsing attributes in process `syz.3.809'. [ 132.406737][ T8359] syz.4.805 (8359) used obsolete PPPIOCDETACH ioctl [ 132.667839][ T3521] net_ratelimit: 17 callbacks suppressed [ 132.667859][ T3521] bond1: (slave macvlan2): failed to get link speed/duplex [ 132.754654][ T8369] netlink: 'syz.3.815': attribute type 3 has an invalid length. [ 132.847002][ T8373] syzkaller0: entered promiscuous mode [ 132.861600][ T8373] syzkaller0: entered allmulticast mode [ 132.913504][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.927718][ T3521] bond1: (slave macvlan2): failed to get link speed/duplex [ 132.978989][ T8383] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 133.001986][ T8379] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 133.137900][ T8379] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 133.195780][ T8397] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 133.203139][ T8397] IPv6: NLM_F_CREATE should be set when creating new route [ 133.283520][ T3796] bond1: (slave macvlan2): failed to get link speed/duplex [ 133.399185][ T3796] bond1: (slave macvlan2): failed to get link speed/duplex [ 133.442539][ T8409] FAULT_INJECTION: forcing a failure. [ 133.442539][ T8409] name failslab, interval 1, probability 0, space 0, times 0 [ 133.464568][ T8409] CPU: 1 UID: 0 PID: 8409 Comm: syz.4.830 Not tainted syzkaller #0 PREEMPT(full) [ 133.464593][ T8409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 133.464603][ T8409] Call Trace: [ 133.464610][ T8409] [ 133.464617][ T8409] dump_stack_lvl+0x189/0x250 [ 133.464640][ T8409] ? __pfx____ratelimit+0x10/0x10 [ 133.464660][ T8409] ? __pfx_dump_stack_lvl+0x10/0x10 [ 133.464678][ T8409] ? __pfx__printk+0x10/0x10 [ 133.464702][ T8409] ? __pfx___might_resched+0x10/0x10 [ 133.464719][ T8409] ? fs_reclaim_acquire+0x7d/0x100 [ 133.464754][ T8409] should_fail_ex+0x414/0x560 [ 133.464778][ T8409] should_failslab+0xa8/0x100 [ 133.464803][ T8409] kmem_cache_alloc_node_noprof+0x77/0x710 [ 133.464823][ T8409] ? __alloc_skb+0x255/0x430 [ 133.464843][ T8409] ? napi_skb_cache_get+0x4a5/0x780 [ 133.464862][ T8409] ? napi_skb_cache_get+0x151/0x780 [ 133.464887][ T8409] __alloc_skb+0x255/0x430 [ 133.464910][ T8409] ? __pfx___alloc_skb+0x10/0x10 [ 133.464934][ T8409] ? netlink_autobind+0xdb/0x300 [ 133.464949][ T8409] ? netlink_autobind+0x2c2/0x300 [ 133.464971][ T8409] netlink_sendmsg+0x5c6/0xb30 [ 133.464996][ T8409] ? __pfx_netlink_sendmsg+0x10/0x10 [ 133.465016][ T8409] ? aa_sock_msg_perm+0xf1/0x1b0 [ 133.465035][ T8409] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 133.465148][ T8409] ? __pfx_netlink_sendmsg+0x10/0x10 [ 133.465165][ T8409] __sock_sendmsg+0x21c/0x270 [ 133.465187][ T8409] ____sys_sendmsg+0x505/0x820 [ 133.465216][ T8409] ? __pfx_____sys_sendmsg+0x10/0x10 [ 133.465249][ T8409] ? import_iovec+0x74/0xa0 [ 133.465271][ T8409] ___sys_sendmsg+0x21f/0x2a0 [ 133.465293][ T8409] ? __pfx____sys_sendmsg+0x10/0x10 [ 133.465318][ T8409] ? rcu_read_lock_any_held+0xb3/0x120 [ 133.465355][ T8409] ? __fget_files+0x2a/0x420 [ 133.465367][ T8409] ? __fget_files+0x3a0/0x420 [ 133.465389][ T8409] __x64_sys_sendmsg+0x19b/0x260 [ 133.465413][ T8409] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 133.465443][ T8409] ? __pfx_ksys_write+0x10/0x10 [ 133.465466][ T8409] ? do_syscall_64+0xbe/0xf80 [ 133.465489][ T8409] do_syscall_64+0xfa/0xf80 [ 133.465507][ T8409] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.465523][ T8409] ? clear_bhb_loop+0x60/0xb0 [ 133.465542][ T8409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.465558][ T8409] RIP: 0033:0x7f555c78f749 [ 133.465573][ T8409] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 133.465586][ T8409] RSP: 002b:00007f555d570038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 133.465604][ T8409] RAX: ffffffffffffffda RBX: 00007f555c9e5fa0 RCX: 00007f555c78f749 [ 133.465616][ T8409] RDX: 0000000004040140 RSI: 00002000000000c0 RDI: 0000000000000003 [ 133.465626][ T8409] RBP: 00007f555d570090 R08: 0000000000000000 R09: 0000000000000000 [ 133.465636][ T8409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 133.465650][ T8409] R13: 00007f555c9e6038 R14: 00007f555c9e5fa0 R15: 00007fff40e27d58 [ 133.465679][ T8409] [ 133.764883][ T6313] bond1: (slave macvlan2): failed to get link speed/duplex [ 133.888358][ T3796] bond1: (slave macvlan2): failed to get link speed/duplex [ 133.919066][ T8418] tipc: Enabling of bearer rejected, failed to enable media [ 134.040278][ T13] bond1: (slave macvlan2): failed to get link speed/duplex [ 134.145478][ T8430] syzkaller0: entered promiscuous mode [ 134.158471][ T8430] syzkaller0: entered allmulticast mode [ 134.182513][ T8432] syzkaller0: entered promiscuous mode [ 134.188011][ T8432] syzkaller0: entered allmulticast mode [ 134.243805][ T8442] __nla_validate_parse: 7 callbacks suppressed [ 134.243821][ T8442] netlink: 8 bytes leftover after parsing attributes in process `syz.0.840'. [ 134.280865][ T8432] tipc: Enabled bearer , priority 0 [ 134.331240][ T8431] tipc: Resetting bearer [ 134.386723][ T8431] tipc: Disabling bearer [ 134.478377][ T3796] bond1: (slave macvlan2): failed to get link speed/duplex [ 134.608687][ T13] bond1: (slave macvlan2): failed to get link speed/duplex [ 134.642824][ T8452] netlink: 36 bytes leftover after parsing attributes in process `syz.4.842'. [ 134.658077][ T8459] FAULT_INJECTION: forcing a failure. [ 134.658077][ T8459] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 134.718301][ T8459] CPU: 1 UID: 0 PID: 8459 Comm: syz.2.845 Not tainted syzkaller #0 PREEMPT(full) [ 134.718323][ T8459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 134.718332][ T8459] Call Trace: [ 134.718339][ T8459] [ 134.718346][ T8459] dump_stack_lvl+0x189/0x250 [ 134.718368][ T8459] ? __pfx____ratelimit+0x10/0x10 [ 134.718389][ T8459] ? __pfx_dump_stack_lvl+0x10/0x10 [ 134.718406][ T8459] ? __pfx__printk+0x10/0x10 [ 134.718426][ T8459] ? __might_fault+0xb0/0x130 [ 134.718455][ T8459] should_fail_ex+0x414/0x560 [ 134.718480][ T8459] _copy_from_iter+0x1cd/0x1630 [ 134.718504][ T8459] ? __build_skb_around+0x22d/0x3c0 [ 134.718531][ T8459] ? __pfx__copy_from_iter+0x10/0x10 [ 134.718548][ T8459] ? __alloc_skb+0x2f1/0x430 [ 134.718571][ T8459] ? __pfx___alloc_skb+0x10/0x10 [ 134.718592][ T8459] ? netlink_sendmsg+0x642/0xb30 [ 134.718607][ T8459] ? skb_put+0x11b/0x210 [ 134.718630][ T8459] netlink_sendmsg+0x6b2/0xb30 [ 134.718655][ T8459] ? __pfx_netlink_sendmsg+0x10/0x10 [ 134.718674][ T8459] ? aa_sock_msg_perm+0xf1/0x1b0 [ 134.718691][ T8459] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 134.718710][ T8459] ? __pfx_netlink_sendmsg+0x10/0x10 [ 134.718726][ T8459] __sock_sendmsg+0x21c/0x270 [ 134.718745][ T8459] ____sys_sendmsg+0x505/0x820 [ 134.718773][ T8459] ? __pfx_____sys_sendmsg+0x10/0x10 [ 134.718803][ T8459] ? import_iovec+0x74/0xa0 [ 134.718826][ T8459] ___sys_sendmsg+0x21f/0x2a0 [ 134.718848][ T8459] ? __pfx____sys_sendmsg+0x10/0x10 [ 134.718877][ T8459] ? rcu_read_lock_any_held+0xb3/0x120 [ 134.718917][ T8459] ? __fget_files+0x2a/0x420 [ 134.718931][ T8459] ? __fget_files+0x3a0/0x420 [ 134.718954][ T8459] __x64_sys_sendmsg+0x19b/0x260 [ 134.718960][ T8463] netlink: 100 bytes leftover after parsing attributes in process `syz.1.846'. [ 134.718978][ T8459] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 134.719006][ T8459] ? __pfx_ksys_write+0x10/0x10 [ 134.719024][ T8459] ? do_syscall_64+0xbe/0xf80 [ 134.719044][ T8459] do_syscall_64+0xfa/0xf80 [ 134.719064][ T8459] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.719080][ T8459] ? clear_bhb_loop+0x60/0xb0 [ 134.719099][ T8459] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.719114][ T8459] RIP: 0033:0x7f306478f749 [ 134.719129][ T8459] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 134.719141][ T8459] RSP: 002b:00007f30655a6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 134.719157][ T8459] RAX: ffffffffffffffda RBX: 00007f30649e5fa0 RCX: 00007f306478f749 [ 134.719168][ T8459] RDX: 0000000004040140 RSI: 00002000000000c0 RDI: 0000000000000003 [ 134.719179][ T8459] RBP: 00007f30655a6090 R08: 0000000000000000 R09: 0000000000000000 [ 134.719188][ T8459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 134.719196][ T8459] R13: 00007f30649e6038 R14: 00007f30649e5fa0 R15: 00007ffe6cc59ca8 [ 134.719232][ T8459] [ 135.038468][ T3796] bond1: (slave macvlan2): failed to get link speed/duplex [ 135.155089][ T8481] syzkaller0: entered promiscuous mode [ 135.160099][ T8483] netlink: 52 bytes leftover after parsing attributes in process `syz.1.854'. [ 135.175287][ T24] IPVS: starting estimator thread 0... [ 135.178709][ T8481] syzkaller0: entered allmulticast mode [ 135.251475][ T8489] TCP: TCP_TX_DELAY enabled [ 135.256626][ T8489] Unsupported ieee802154 address type: 0 [ 135.271118][ T8489] netlink: 'syz.4.855': attribute type 1 has an invalid length. [ 135.278567][ T8484] IPVS: using max 29 ests per chain, 69600 per kthread [ 135.311490][ T8489] 8021q: adding VLAN 0 to HW filter on device bond2 [ 135.345750][ T8492] netlink: 4 bytes leftover after parsing attributes in process `syz.0.857'. [ 135.451992][ T8489] bond2: (slave ip6erspan0): making interface the new active one [ 135.463054][ T8489] bond2: (slave ip6erspan0): Enslaving as an active interface with an up link [ 135.483510][ T8489] smc: net device gre0 applied user defined pnetid SYZ1 [ 135.499112][ T8489] smc: net device gre0 erased user defined pnetid SYZ1 [ 135.924725][ T8523] netlink: 8 bytes leftover after parsing attributes in process `syz.1.868'. [ 135.981955][ T8521] syzkaller0: entered promiscuous mode [ 136.008075][ T8526] netlink: 52 bytes leftover after parsing attributes in process `syz.3.867'. [ 136.018071][ T8521] syzkaller0: entered allmulticast mode [ 136.093090][ T8531] netlink: 4 bytes leftover after parsing attributes in process `syz.2.872'. [ 136.160640][ T8534] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 136.168024][ T8534] IPv6: NLM_F_CREATE should be set when creating new route [ 136.252226][ T8538] netlink: 'syz.0.874': attribute type 1 has an invalid length. [ 136.271101][ T8538] netlink: 12 bytes leftover after parsing attributes in process `syz.0.874'. [ 136.305689][ T8539] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 136.490077][ T8553] netlink: 236 bytes leftover after parsing attributes in process `syz.1.878'. [ 136.690256][ T8562] syzkaller0: entered promiscuous mode [ 136.697592][ T8562] syzkaller0: entered allmulticast mode [ 136.893171][ T8578] netlink: 'syz.4.888': attribute type 21 has an invalid length. [ 137.067568][ T8593] Cannot find add_set index 2 as target [ 137.477271][ T3796] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.503050][ T3796] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.533286][ T3796] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.557904][ T8626] 8021q: VLANs not supported on ip6tnl0 [ 137.576245][ T3796] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.739942][ T3796] net_ratelimit: 18 callbacks suppressed [ 137.739963][ T3796] bond1: (slave macvlan2): failed to get link speed/duplex [ 137.938405][ T3796] bond1: (slave macvlan2): failed to get link speed/duplex [ 138.089962][ T3796] bond1: (slave macvlan2): failed to get link speed/duplex [ 138.155910][ T8663] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 138.163317][ T8663] IPv6: NLM_F_CREATE should be set when creating new route [ 138.189415][ T8662] syzkaller0: entered promiscuous mode [ 138.197757][ T8662] syzkaller0: entered allmulticast mode [ 138.259494][ T3796] bond1: (slave macvlan2): failed to get link speed/duplex [ 138.270418][ T8662] tipc: Started in network mode [ 138.275662][ T8662] tipc: Node identity 9e14070945bb, cluster identity 4711 [ 138.298543][ T8662] tipc: Enabled bearer , priority 0 [ 138.349546][ T8660] tipc: Resetting bearer [ 138.422903][ T8660] tipc: Disabling bearer [ 138.509922][ T3521] bond1: (slave macvlan2): failed to get link speed/duplex [ 138.530228][ T8676] tipc: Enabled bearer , priority 0 [ 138.544895][ T8679] netlink: 'syz.4.927': attribute type 11 has an invalid length. [ 138.555998][ T8675] tipc: Disabling bearer [ 138.565091][ T8679] Bluetooth: MGMT ver 1.23 [ 138.638823][ T78] bond1: (slave macvlan2): failed to get link speed/duplex [ 138.749828][ T78] bond1: (slave macvlan2): failed to get link speed/duplex [ 138.774231][ T8694] FAULT_INJECTION: forcing a failure. [ 138.774231][ T8694] name failslab, interval 1, probability 0, space 0, times 0 [ 138.810030][ T8694] CPU: 0 UID: 0 PID: 8694 Comm: syz.3.931 Not tainted syzkaller #0 PREEMPT(full) [ 138.810055][ T8694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 138.810064][ T8694] Call Trace: [ 138.810070][ T8694] [ 138.810077][ T8694] dump_stack_lvl+0x189/0x250 [ 138.810099][ T8694] ? __pfx____ratelimit+0x10/0x10 [ 138.810119][ T8694] ? __pfx_dump_stack_lvl+0x10/0x10 [ 138.810137][ T8694] ? __pfx__printk+0x10/0x10 [ 138.810163][ T8694] ? __pfx___might_resched+0x10/0x10 [ 138.810178][ T8694] ? fs_reclaim_acquire+0x7d/0x100 [ 138.810202][ T8694] should_fail_ex+0x414/0x560 [ 138.810232][ T8694] should_failslab+0xa8/0x100 [ 138.810255][ T8694] __kmalloc_noprof+0xcb/0x800 [ 138.810273][ T8694] ? bpf_test_init+0x9f/0x150 [ 138.810292][ T8694] bpf_test_init+0x9f/0x150 [ 138.810309][ T8694] bpf_prog_test_run_skb+0x376/0x1d50 [ 138.810354][ T8694] ? __fget_files+0x2a/0x420 [ 138.810371][ T8694] ? __fget_files+0x2a/0x420 [ 138.810384][ T8694] ? __fget_files+0x3a0/0x420 [ 138.810397][ T8694] ? __fget_files+0x2a/0x420 [ 138.810416][ T8694] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 138.810440][ T8694] bpf_prog_test_run+0x2c7/0x340 [ 138.810463][ T8694] __sys_bpf+0x562/0x860 [ 138.810483][ T8694] ? __pfx___sys_bpf+0x10/0x10 [ 138.810516][ T8694] ? ksys_write+0x22a/0x250 [ 138.810538][ T8694] ? __pfx_ksys_write+0x10/0x10 [ 138.810564][ T8694] __x64_sys_bpf+0x7c/0x90 [ 138.810581][ T8694] do_syscall_64+0xfa/0xf80 [ 138.810602][ T8694] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.810617][ T8694] ? clear_bhb_loop+0x60/0xb0 [ 138.810635][ T8694] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.810649][ T8694] RIP: 0033:0x7f970b58f749 [ 138.810664][ T8694] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 138.810677][ T8694] RSP: 002b:00007f970c3e0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 138.810701][ T8694] RAX: ffffffffffffffda RBX: 00007f970b7e5fa0 RCX: 00007f970b58f749 [ 138.810713][ T8694] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 138.810723][ T8694] RBP: 00007f970c3e0090 R08: 0000000000000000 R09: 0000000000000000 [ 138.810734][ T8694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 138.810743][ T8694] R13: 00007f970b7e6038 R14: 00007f970b7e5fa0 R15: 00007fffeb3b5e08 [ 138.810772][ T8694] [ 138.868385][ T13] bond1: (slave macvlan2): failed to get link speed/duplex [ 138.987524][ T8710] sctp: [Deprecated]: syz.3.937 (pid 8710) Use of int in max_burst socket option. [ 138.987524][ T8710] Use struct sctp_assoc_value instead [ 139.177289][ T8706] FAULT_INJECTION: forcing a failure. [ 139.177289][ T8706] name failslab, interval 1, probability 0, space 0, times 0 [ 139.201376][ T8706] CPU: 0 UID: 0 PID: 8706 Comm: syz.2.936 Not tainted syzkaller #0 PREEMPT(full) [ 139.201401][ T8706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 139.201411][ T8706] Call Trace: [ 139.201418][ T8706] [ 139.201426][ T8706] dump_stack_lvl+0x189/0x250 [ 139.201448][ T8706] ? __pfx____ratelimit+0x10/0x10 [ 139.201476][ T8706] ? __pfx_dump_stack_lvl+0x10/0x10 [ 139.201494][ T8706] ? __pfx__printk+0x10/0x10 [ 139.201512][ T8706] ? __sock_sendmsg+0x21c/0x270 [ 139.201532][ T8706] ? do_syscall_64+0xfa/0xf80 [ 139.201563][ T8706] should_fail_ex+0x414/0x560 [ 139.201587][ T8706] should_failslab+0xa8/0x100 [ 139.201612][ T8706] kmem_cache_alloc_node_noprof+0x77/0x710 [ 139.201632][ T8706] ? __alloc_skb+0x255/0x430 [ 139.201659][ T8706] __alloc_skb+0x255/0x430 [ 139.201682][ T8706] ? __pfx___alloc_skb+0x10/0x10 [ 139.201701][ T8706] ? __kasan_kmalloc+0x93/0xb0 [ 139.201723][ T8706] ? __kmalloc_cache_noprof+0x3d5/0x6f0 [ 139.201743][ T8706] ? tipc_net+0x45/0x270 [ 139.201757][ T8706] ? tipc_disc_create+0x6e/0x4a0 [ 139.201783][ T8706] tipc_buf_acquire+0x2b/0xe0 [ 139.201802][ T8706] tipc_disc_create+0x92/0x4a0 [ 139.201829][ T8706] __tipc_nl_bearer_enable+0xdee/0x13f0 [ 139.201861][ T8706] ? __pfx___tipc_nl_bearer_enable+0x10/0x10 [ 139.201879][ T8706] ? __mutex_lock+0xd3b/0x1350 [ 139.201910][ T8706] ? __asan_memcpy+0x40/0x70 [ 139.201930][ T8706] ? nla_put+0xd0/0x150 [ 139.201955][ T8706] ? tipc_nl_compat_bearer_enable+0x427/0x5d0 [ 139.201979][ T8706] ? __pfx_tipc_nl_compat_bearer_enable+0x10/0x10 [ 139.202000][ T8706] ? __nla_parse+0x40/0x60 [ 139.202026][ T8706] tipc_nl_compat_doit+0x3bc/0x5f0 [ 139.202050][ T8706] ? __pfx_tipc_nl_compat_doit+0x10/0x10 [ 139.202081][ T8706] ? bpf_lsm_capable+0x9/0x20 [ 139.202096][ T8706] ? security_capable+0x7e/0x2e0 [ 139.202128][ T8706] tipc_nl_compat_recv+0x83c/0xbe0 [ 139.202146][ T8706] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 139.202159][ T8706] ? __mutex_trylock_common+0x153/0x260 [ 139.202180][ T8706] ? __pfx___mutex_trylock_common+0x10/0x10 [ 139.202198][ T8706] ? __pfx___tipc_nl_bearer_enable+0x10/0x10 [ 139.202217][ T8706] ? __pfx_tipc_nl_compat_bearer_enable+0x10/0x10 [ 139.202243][ T8706] ? trace_contention_end+0x39/0x100 [ 139.202273][ T8706] genl_family_rcv_msg_doit+0x215/0x300 [ 139.202302][ T8706] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 139.202347][ T8706] genl_rcv_msg+0x60e/0x790 [ 139.202375][ T8706] ? __pfx_genl_rcv_msg+0x10/0x10 [ 139.202403][ T8706] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 139.202435][ T8706] netlink_rcv_skb+0x208/0x470 [ 139.202453][ T8706] ? __pfx_genl_rcv_msg+0x10/0x10 [ 139.202481][ T8706] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 139.202517][ T8706] ? down_read+0x274/0x2e0 [ 139.202536][ T8706] ? genl_rcv+0xd/0x40 [ 139.202557][ T8706] genl_rcv+0x28/0x40 [ 139.202575][ T8706] netlink_unicast+0x82f/0x9e0 [ 139.202608][ T8706] ? __pfx_netlink_unicast+0x10/0x10 [ 139.202633][ T8706] ? netlink_sendmsg+0x642/0xb30 [ 139.202648][ T8706] ? skb_put+0x11b/0x210 [ 139.202674][ T8706] netlink_sendmsg+0x805/0xb30 [ 139.202701][ T8706] ? __pfx_netlink_sendmsg+0x10/0x10 [ 139.202721][ T8706] ? aa_sock_msg_perm+0xf1/0x1b0 [ 139.202740][ T8706] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 139.202761][ T8706] ? __pfx_netlink_sendmsg+0x10/0x10 [ 139.202778][ T8706] __sock_sendmsg+0x21c/0x270 [ 139.202802][ T8706] ____sys_sendmsg+0x505/0x820 [ 139.202832][ T8706] ? __pfx_____sys_sendmsg+0x10/0x10 [ 139.202865][ T8706] ? import_iovec+0x74/0xa0 [ 139.202891][ T8706] ___sys_sendmsg+0x21f/0x2a0 [ 139.202917][ T8706] ? __pfx____sys_sendmsg+0x10/0x10 [ 139.202948][ T8706] ? rcu_read_lock_any_held+0xb3/0x120 [ 139.202997][ T8706] ? __fget_files+0x2a/0x420 [ 139.203011][ T8706] ? __fget_files+0x3a0/0x420 [ 139.203038][ T8706] __x64_sys_sendmsg+0x19b/0x260 [ 139.203064][ T8706] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 139.203097][ T8706] ? __pfx_ksys_write+0x10/0x10 [ 139.203122][ T8706] ? do_syscall_64+0xbe/0xf80 [ 139.203147][ T8706] do_syscall_64+0xfa/0xf80 [ 139.203169][ T8706] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.203185][ T8706] ? clear_bhb_loop+0x60/0xb0 [ 139.203207][ T8706] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.203223][ T8706] RIP: 0033:0x7f306478f749 [ 139.203239][ T8706] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 139.203252][ T8706] RSP: 002b:00007f3065585038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 139.203271][ T8706] RAX: ffffffffffffffda RBX: 00007f30649e6090 RCX: 00007f306478f749 [ 139.203283][ T8706] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000004 [ 139.203293][ T8706] RBP: 00007f3065585090 R08: 0000000000000000 R09: 0000000000000000 [ 139.203303][ T8706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 139.203313][ T8706] R13: 00007f30649e6128 R14: 00007f30649e6090 R15: 00007ffe6cc59ca8 [ 139.203345][ T8706] [ 139.203443][ T8706] tipc: Disabling bearer [ 139.703982][ T8706] tipc: Enabling of bearer rejected, failed to create discoverer [ 139.857192][ T8715] tipc: Enabled bearer , priority 0 [ 139.872788][ T8721] syzkaller0: entered promiscuous mode [ 139.895655][ T8721] syzkaller0: entered allmulticast mode [ 139.955434][ T3796] bond1: (slave macvlan2): failed to get link speed/duplex [ 139.979656][ T8714] tipc: Resetting bearer [ 140.012507][ T8744] __nla_validate_parse: 18 callbacks suppressed [ 140.012527][ T8744] netlink: 16 bytes leftover after parsing attributes in process `syz.1.942'. [ 140.092920][ T8714] tipc: Disabling bearer [ 140.107934][ T8752] netlink: 8 bytes leftover after parsing attributes in process `syz.0.946'. [ 140.158601][ T8752] netlink: 16 bytes leftover after parsing attributes in process `syz.0.946'. [ 140.178533][ T13] bond1: (slave macvlan2): failed to get link speed/duplex [ 140.238488][ T8756] Cannot find add_set index 2 as target [ 140.452859][ T8770] tipc: Enabled bearer , priority 0 [ 140.532484][ T8767] tipc: Disabling bearer [ 140.555664][ T8777] FAULT_INJECTION: forcing a failure. [ 140.555664][ T8777] name failslab, interval 1, probability 0, space 0, times 0 [ 140.569508][ T8777] CPU: 1 UID: 0 PID: 8777 Comm: syz.4.956 Not tainted syzkaller #0 PREEMPT(full) [ 140.569530][ T8777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 140.569540][ T8777] Call Trace: [ 140.569546][ T8777] [ 140.569553][ T8777] dump_stack_lvl+0x189/0x250 [ 140.569575][ T8777] ? __pfx____ratelimit+0x10/0x10 [ 140.569596][ T8777] ? __pfx_dump_stack_lvl+0x10/0x10 [ 140.569613][ T8777] ? __pfx__printk+0x10/0x10 [ 140.569640][ T8777] ? __pfx___might_resched+0x10/0x10 [ 140.569654][ T8777] ? fs_reclaim_acquire+0x7d/0x100 [ 140.569680][ T8777] should_fail_ex+0x414/0x560 [ 140.569703][ T8777] should_failslab+0xa8/0x100 [ 140.569726][ T8777] __kmalloc_noprof+0xcb/0x800 [ 140.569745][ T8777] ? sk_prot_alloc+0xe7/0x220 [ 140.569772][ T8777] sk_prot_alloc+0xe7/0x220 [ 140.569791][ T8777] ? sk_alloc+0x27/0x390 [ 140.569815][ T8777] sk_alloc+0x3a/0x390 [ 140.569841][ T8777] bpf_prog_test_run_skb+0x3f4/0x1d50 [ 140.569872][ T8777] ? __fget_files+0x2a/0x420 [ 140.569889][ T8777] ? __fget_files+0x2a/0x420 [ 140.569902][ T8777] ? __fget_files+0x3a0/0x420 [ 140.569916][ T8777] ? __fget_files+0x2a/0x420 [ 140.569935][ T8777] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 140.569960][ T8777] bpf_prog_test_run+0x2c7/0x340 [ 140.569984][ T8777] __sys_bpf+0x562/0x860 [ 140.570005][ T8777] ? __pfx___sys_bpf+0x10/0x10 [ 140.570038][ T8777] ? ksys_write+0x22a/0x250 [ 140.570059][ T8777] ? __pfx_ksys_write+0x10/0x10 [ 140.570082][ T8777] __x64_sys_bpf+0x7c/0x90 [ 140.570099][ T8777] do_syscall_64+0xfa/0xf80 [ 140.570119][ T8777] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.570152][ T8777] ? clear_bhb_loop+0x60/0xb0 [ 140.570171][ T8777] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.570186][ T8777] RIP: 0033:0x7f555c78f749 [ 140.570201][ T8777] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 140.570215][ T8777] RSP: 002b:00007f555d570038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 140.570233][ T8777] RAX: ffffffffffffffda RBX: 00007f555c9e5fa0 RCX: 00007f555c78f749 [ 140.570245][ T8777] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 140.570255][ T8777] RBP: 00007f555d570090 R08: 0000000000000000 R09: 0000000000000000 [ 140.570264][ T8777] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 140.570274][ T8777] R13: 00007f555c9e6038 R14: 00007f555c9e5fa0 R15: 00007fff40e27d58 [ 140.570302][ T8777] [ 140.576268][ T8779] netlink: 96 bytes leftover after parsing attributes in process `syz.2.957'. [ 140.833073][ T8779] 8021q: VLANs not supported on gre0 [ 141.036247][ T8791] syzkaller0: entered promiscuous mode [ 141.073769][ T8791] syzkaller0: entered allmulticast mode [ 141.121612][ T8800] netlink: 4 bytes leftover after parsing attributes in process `syz.3.965'. [ 141.139171][ T8798] tipc: New replicast peer: 255.255.255.255 [ 141.166148][ T8798] tipc: Enabled bearer , priority 10 [ 141.525740][ T8818] netlink: 96 bytes leftover after parsing attributes in process `syz.2.971'. [ 141.558857][ T8818] 8021q: VLANs not supported on gre0 [ 141.766786][ T8832] netlink: 8 bytes leftover after parsing attributes in process `syz.1.977'. [ 141.810456][ T8832] netlink: 24 bytes leftover after parsing attributes in process `syz.1.977'. [ 141.846067][ T8835] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.978'. [ 141.904664][ T8841] netlink: 'syz.0.981': attribute type 1 has an invalid length. [ 141.966256][ T8847] netlink: 8 bytes leftover after parsing attributes in process `syz.1.982'. [ 142.004054][ T8841] bond3: entered promiscuous mode [ 142.012740][ T8841] 8021q: adding VLAN 0 to HW filter on device bond3 [ 142.152999][ T8858] tipc: New replicast peer: 255.255.255.255 [ 142.163182][ T8858] tipc: Enabled bearer , priority 10 [ 142.170773][ T8857] 8021q: VLANs not supported on gre0 [ 142.314175][ T8868] bond0: entered promiscuous mode [ 142.326998][ T8868] bond_slave_0: entered promiscuous mode [ 142.333300][ T8868] bond_slave_1: entered promiscuous mode [ 142.341448][ T8868] bond0: left promiscuous mode [ 142.356708][ T8868] bond_slave_0: left promiscuous mode [ 142.367003][ T8868] bond_slave_1: left promiscuous mode [ 142.550546][ T8881] netlink: 'syz.3.994': attribute type 1 has an invalid length. [ 142.828789][ T13] net_ratelimit: 15 callbacks suppressed [ 142.828808][ T13] bond1: (slave macvlan2): failed to get link speed/duplex [ 142.941783][ T8905] bridge: RTM_NEWNEIGH with unconfigured vlan 1 on bridge0 [ 142.969643][ T13] bond1: (slave macvlan2): failed to get link speed/duplex [ 143.035804][ T8909] tipc: New replicast peer: 255.255.255.255 [ 143.060714][ T8909] tipc: Enabled bearer , priority 10 [ 143.085085][ T8911] 8021q: VLANs not supported on gre0 [ 143.151409][ T4937] bond1: (slave macvlan2): failed to get link speed/duplex [ 143.396719][ T5905] tipc: Node number set to 67062944 [ 143.412445][ T8922] openvswitch: netlink: Flow key attr not present in new flow. [ 143.423486][ T13] bond1: (slave macvlan2): failed to get link speed/duplex [ 143.748667][ T3521] bond1: (slave macvlan2): failed to get link speed/duplex [ 143.922002][ T1025] bond1: (slave macvlan2): failed to get link speed/duplex [ 144.109808][ T1162] bond1: (slave macvlan2): failed to get link speed/duplex [ 144.189969][ T181] tipc: Node number set to 3747270164 [ 144.243176][ T3521] bond1: (slave macvlan2): failed to get link speed/duplex [ 144.272578][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.368595][ T8972] netlink: 'syz.4.1025': attribute type 1 has an invalid length. [ 145.194929][ T9018] tipc: Enabling of bearer rejected, already enabled [ 145.694711][ T9047] __nla_validate_parse: 11 callbacks suppressed [ 145.694730][ T9047] netlink: 236 bytes leftover after parsing attributes in process `syz.3.1051'. [ 145.907394][ T9053] net veth1_virt_wifi .: renamed from virt_wifi0 [ 145.945199][ T9054] syzkaller0: entered promiscuous mode [ 145.963308][ T9054] syzkaller0: entered allmulticast mode [ 146.034483][ T9054] tipc: Enabled bearer , priority 0 [ 146.059648][ T9065] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1057'. [ 146.132324][ T9051] tipc: Resetting bearer [ 146.180128][ T9051] tipc: Disabling bearer [ 146.321110][ T9075] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1061'. [ 146.504274][ T9090] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1066'. [ 146.541128][ T9090] 8021q: VLANs not supported on gre0 [ 146.571725][ T9096] netlink: 'syz.0.1069': attribute type 21 has an invalid length. [ 146.587409][ T9096] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1069'. [ 148.508797][ T24] net_ratelimit: 38 callbacks suppressed [ 148.508816][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.918793][ T1162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.927740][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.389503][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.397866][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.548576][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.790478][ T3563] bond1: (slave macvlan2): failed to get link speed/duplex [ 149.817403][ T9125] tipc: Enabled bearer , priority 0 [ 149.867988][ T9134] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1078'. [ 149.903675][ T3796] bond1: (slave macvlan2): failed to get link speed/duplex [ 150.028159][ T9146] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1082'. [ 150.046003][ T9146] 8021q: VLANs not supported on gre0 [ 150.059295][ T3521] bond1: (slave macvlan2): failed to get link speed/duplex [ 150.179348][ T1162] bond1: (slave macvlan2): failed to get link speed/duplex [ 150.208960][ T9153] netlink: 'syz.0.1086': attribute type 9 has an invalid length. [ 150.234595][ T9153] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1086'. [ 150.298992][ T9160] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1090'. [ 150.307888][ T9160] Unsupported xt match [ 150.307902][ T9160] unable to load match [ 150.318727][ T9162] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1089'. [ 150.375496][ T30] audit: type=1107 audit(1764826138.378:2): pid=9165 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''qϨ' [ 150.393678][ T30] audit: type=1107 audit(1764826138.378:3): pid=9165 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً5%UA٠0ltݕ/ 6򊨊' [ 150.549051][ T9183] tipc: Enabled bearer , priority 10 [ 150.758085][ T9193] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1099'. [ 150.929469][ T9204] FAULT_INJECTION: forcing a failure. [ 150.929469][ T9204] name failslab, interval 1, probability 0, space 0, times 0 [ 150.942267][ T9204] CPU: 1 UID: 0 PID: 9204 Comm: syz.0.1103 Not tainted syzkaller #0 PREEMPT(full) [ 150.942290][ T9204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 150.942300][ T9204] Call Trace: [ 150.942307][ T9204] [ 150.942314][ T9204] dump_stack_lvl+0x189/0x250 [ 150.942338][ T9204] ? __pfx____ratelimit+0x10/0x10 [ 150.942357][ T9204] ? __pfx_dump_stack_lvl+0x10/0x10 [ 150.942373][ T9204] ? __pfx__printk+0x10/0x10 [ 150.942395][ T9204] ? rcu_is_watching+0x15/0xb0 [ 150.942413][ T9204] ? trace_kmalloc+0x1f/0xb0 [ 150.942428][ T9204] ? __kmalloc_node_track_caller_noprof+0x58b/0x810 [ 150.942452][ T9204] should_fail_ex+0x414/0x560 [ 150.942481][ T9204] should_failslab+0xa8/0x100 [ 150.942505][ T9204] kmem_cache_alloc_noprof+0x74/0x6f0 [ 150.942524][ T9204] ? skb_clone+0x212/0x3a0 [ 150.942542][ T9204] skb_clone+0x212/0x3a0 [ 150.942561][ T9204] bpf_clone_redirect+0x16a/0x4b0 [ 150.942588][ T9204] ? bpf_test_run+0x192/0x7d0 [ 150.942602][ T9204] bpf_prog_7c64685fc60f7d44+0x5f/0x68 [ 150.942628][ T9204] ? seqcount_lockdep_reader_access+0x122/0x1c0 [ 150.942650][ T9204] ? lockdep_hardirqs_on+0x98/0x140 [ 150.942671][ T9204] ? ktime_get+0x45/0x200 [ 150.942688][ T9204] ? seqcount_lockdep_reader_access+0x174/0x1c0 [ 150.942710][ T9204] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 150.942740][ T9204] ? __local_bh_disable_ip+0xf1/0x190 [ 150.942755][ T9204] ? __pfx___cant_migrate+0x10/0x10 [ 150.942770][ T9204] ? __local_bh_enable_ip+0x12d/0x1c0 [ 150.942785][ T9204] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 150.942804][ T9204] ? bpf_test_timer_continue+0x10d/0x320 [ 150.942824][ T9204] bpf_test_run+0x313/0x7d0 [ 150.942860][ T9204] ? __pfx_bpf_test_run+0x10/0x10 [ 150.942886][ T9204] ? rcu_is_watching+0x15/0xb0 [ 150.942906][ T9204] ? __kasan_krealloc+0xeb/0x110 [ 150.942928][ T9204] ? eth_type_trans+0x35e/0x6d0 [ 150.942952][ T9204] ? convert___skb_to_skb+0x3d/0x5b0 [ 150.942969][ T9204] bpf_prog_test_run_skb+0xd67/0x1d50 [ 150.943003][ T9204] ? __fget_files+0x2a/0x420 [ 150.943017][ T9204] ? __fget_files+0x3a0/0x420 [ 150.943030][ T9204] ? __fget_files+0x2a/0x420 [ 150.943048][ T9204] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 150.943072][ T9204] bpf_prog_test_run+0x2c7/0x340 [ 150.943096][ T9204] __sys_bpf+0x562/0x860 [ 150.943117][ T9204] ? __pfx___sys_bpf+0x10/0x10 [ 150.943152][ T9204] ? ksys_write+0x22a/0x250 [ 150.943174][ T9204] ? __pfx_ksys_write+0x10/0x10 [ 150.943199][ T9204] __x64_sys_bpf+0x7c/0x90 [ 150.943217][ T9204] do_syscall_64+0xfa/0xf80 [ 150.943236][ T9204] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.943252][ T9204] ? clear_bhb_loop+0x60/0xb0 [ 150.943272][ T9204] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.943288][ T9204] RIP: 0033:0x7fd43738f749 [ 150.943303][ T9204] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 150.943317][ T9204] RSP: 002b:00007fd4382ae038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 150.943334][ T9204] RAX: ffffffffffffffda RBX: 00007fd4375e5fa0 RCX: 00007fd43738f749 [ 150.943345][ T9204] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 150.943355][ T9204] RBP: 00007fd4382ae090 R08: 0000000000000000 R09: 0000000000000000 [ 150.943365][ T9204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 150.943374][ T9204] R13: 00007fd4375e6038 R14: 00007fd4375e5fa0 R15: 00007ffeecc791b8 [ 150.943398][ T9204] [ 151.586632][ T9223] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1112'. [ 151.804048][ T9243] FAULT_INJECTION: forcing a failure. [ 151.804048][ T9243] name failslab, interval 1, probability 0, space 0, times 0 [ 151.817216][ T9243] CPU: 1 UID: 0 PID: 9243 Comm: syz.1.1119 Not tainted syzkaller #0 PREEMPT(full) [ 151.817238][ T9243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 151.817247][ T9243] Call Trace: [ 151.817253][ T9243] [ 151.817261][ T9243] dump_stack_lvl+0x189/0x250 [ 151.817283][ T9243] ? __pfx____ratelimit+0x10/0x10 [ 151.817303][ T9243] ? __pfx_dump_stack_lvl+0x10/0x10 [ 151.817320][ T9243] ? __pfx__printk+0x10/0x10 [ 151.817348][ T9243] ? __ip_dev_find+0x444/0x4e0 [ 151.817372][ T9243] should_fail_ex+0x414/0x560 [ 151.817396][ T9243] should_failslab+0xa8/0x100 [ 151.817419][ T9243] kmem_cache_alloc_noprof+0x74/0x6f0 [ 151.817437][ T9243] ? dst_alloc+0x105/0x170 [ 151.817456][ T9243] dst_alloc+0x105/0x170 [ 151.817471][ T9243] ? ip_check_mc_rcu+0x4c7/0x680 [ 151.817493][ T9243] ip_route_output_key_hash_rcu+0x1560/0x23e0 [ 151.817525][ T9243] ? ip_route_output_key_hash+0xc1/0x280 [ 151.817550][ T9243] ip_route_output_key_hash+0x174/0x280 [ 151.817575][ T9243] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 151.817605][ T9243] ? __asan_memset+0x22/0x50 [ 151.817629][ T9243] ip_route_output_flow+0x2a/0x150 [ 151.817654][ T9243] ip_tunnel_xmit+0x96b/0x2390 [ 151.817669][ T9243] ? unwind_next_frame+0xa5/0x2390 [ 151.817690][ T9243] ? ip_tunnel_xmit+0xb0/0x2390 [ 151.817722][ T9243] ? __pfx_ip_tunnel_xmit+0x10/0x10 [ 151.817736][ T9243] ? gre_build_header+0x31c/0xa40 [ 151.817757][ T9243] ? is_bpf_text_address+0x292/0x2b0 [ 151.817787][ T9243] ? __pfx_gre_build_header+0x10/0x10 [ 151.817807][ T9243] ? validate_xmit_xfrm+0xbf/0x1160 [ 151.817823][ T9243] ? iptunnel_handle_offloads+0x2fd/0x630 [ 151.817850][ T9243] ipgre_xmit+0x89e/0xc50 [ 151.817883][ T9243] ? __pfx_ipgre_xmit+0x10/0x10 [ 151.817903][ T9243] ? validate_xmit_skb+0xd78/0x1500 [ 151.817931][ T9243] dev_hard_start_xmit+0x2cd/0x800 [ 151.817965][ T9243] __dev_queue_xmit+0x1493/0x3140 [ 151.817991][ T9243] ? __dev_queue_xmit+0x289/0x3140 [ 151.818024][ T9243] ? __pfx___dev_queue_xmit+0x10/0x10 [ 151.818040][ T9243] ? pskb_expand_head+0x19d/0x1160 [ 151.818061][ T9243] ? rcu_is_watching+0x15/0xb0 [ 151.818080][ T9243] ? trace_kmalloc+0x1f/0xb0 [ 151.818097][ T9243] ? __kmalloc_node_track_caller_noprof+0x58b/0x810 [ 151.818120][ T9243] ? skb_release_data+0x2b6/0x7c0 [ 151.818150][ T9243] ? pskb_expand_head+0xb44/0x1160 [ 151.818184][ T9243] __bpf_tx_skb+0x18e/0x260 [ 151.818205][ T9243] bpf_clone_redirect+0x313/0x4b0 [ 151.818239][ T9243] ? bpf_test_run+0x192/0x7d0 [ 151.818253][ T9243] bpf_prog_7c64685fc60f7d44+0x5f/0x68 [ 151.818279][ T9243] ? seqcount_lockdep_reader_access+0x122/0x1c0 [ 151.818301][ T9243] ? lockdep_hardirqs_on+0x98/0x140 [ 151.818320][ T9243] ? ktime_get+0x45/0x200 [ 151.818337][ T9243] ? seqcount_lockdep_reader_access+0x174/0x1c0 [ 151.818356][ T9243] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 151.818382][ T9243] ? __local_bh_disable_ip+0xf1/0x190 [ 151.818397][ T9243] ? __pfx___cant_migrate+0x10/0x10 [ 151.818412][ T9243] ? __local_bh_enable_ip+0x12d/0x1c0 [ 151.818427][ T9243] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 151.818448][ T9243] ? bpf_test_timer_continue+0x10d/0x320 [ 151.818469][ T9243] bpf_test_run+0x313/0x7d0 [ 151.818507][ T9243] ? __pfx_bpf_test_run+0x10/0x10 [ 151.818535][ T9243] ? rcu_is_watching+0x15/0xb0 [ 151.818555][ T9243] ? __kasan_krealloc+0xeb/0x110 [ 151.818577][ T9243] ? eth_type_trans+0x35e/0x6d0 [ 151.818600][ T9243] ? convert___skb_to_skb+0x3d/0x5b0 [ 151.818616][ T9243] bpf_prog_test_run_skb+0xd67/0x1d50 [ 151.818650][ T9243] ? __fget_files+0x2a/0x420 [ 151.818662][ T9243] ? __fget_files+0x3a0/0x420 [ 151.818675][ T9243] ? __fget_files+0x2a/0x420 [ 151.818695][ T9243] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 151.818719][ T9243] bpf_prog_test_run+0x2c7/0x340 [ 151.818744][ T9243] __sys_bpf+0x562/0x860 [ 151.818766][ T9243] ? __pfx___sys_bpf+0x10/0x10 [ 151.818802][ T9243] ? ksys_write+0x22a/0x250 [ 151.818824][ T9243] ? __pfx_ksys_write+0x10/0x10 [ 151.818851][ T9243] __x64_sys_bpf+0x7c/0x90 [ 151.818869][ T9243] do_syscall_64+0xfa/0xf80 [ 151.818891][ T9243] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.818907][ T9243] ? clear_bhb_loop+0x60/0xb0 [ 151.818927][ T9243] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.818943][ T9243] RIP: 0033:0x7f47e2f8f749 [ 151.818958][ T9243] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 151.818972][ T9243] RSP: 002b:00007f47e3dcd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 151.818990][ T9243] RAX: ffffffffffffffda RBX: 00007f47e31e5fa0 RCX: 00007f47e2f8f749 [ 151.819001][ T9243] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 151.819012][ T9243] RBP: 00007f47e3dcd090 R08: 0000000000000000 R09: 0000000000000000 [ 151.819022][ T9243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 151.819032][ T9243] R13: 00007f47e31e6038 R14: 00007f47e31e5fa0 R15: 00007ffe16d5e488 [ 151.819062][ T9243] [ 152.582694][ T9254] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1127'. [ 152.780790][ T9272] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1131'. [ 152.944515][ T9275] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1129'. [ 153.119426][ T8833] udevd[8833]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 153.162308][ T9275] hsr_slave_1 (unregistering): left promiscuous mode [ 153.232579][ T9296] syzkaller0: entered promiscuous mode [ 153.238462][ T9296] syzkaller0: entered allmulticast mode [ 153.264956][ T9296] tipc: Enabled bearer , priority 0 [ 153.283608][ T9293] tipc: Resetting bearer [ 153.304059][ T9303] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1139'. [ 153.319957][ T9293] tipc: Disabling bearer [ 153.444433][ T9315] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 153.526628][ T9319] Cannot find add_set index 2 as target [ 153.579424][ T4937] net_ratelimit: 27 callbacks suppressed [ 153.579444][ T4937] bond1: (slave macvlan2): failed to get link speed/duplex [ 153.586804][ T9322] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1145'. [ 153.617677][ T9323] bond4: entered promiscuous mode [ 153.624015][ T9323] 8021q: adding VLAN 0 to HW filter on device bond4 [ 153.698512][ T3796] bond1: (slave macvlan2): failed to get link speed/duplex [ 153.712460][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.808443][ T1162] bond1: (slave macvlan2): failed to get link speed/duplex [ 153.913263][ T9345] netlink: 'syz.1.1153': attribute type 3 has an invalid length. [ 153.928370][ T4937] bond1: (slave macvlan2): failed to get link speed/duplex [ 153.950432][ T9345] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1153'. [ 153.994058][ T9348] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1152'. [ 154.029884][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.038592][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.047146][ T4384] bond1: (slave macvlan2): failed to get link speed/duplex [ 154.052877][ T9353] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1154'. [ 154.158389][ T3796] bond1: (slave macvlan2): failed to get link speed/duplex [ 154.278357][ T3796] bond1: (slave macvlan2): failed to get link speed/duplex [ 154.525583][ T9383] 8021q: VLANs not supported on gre0 [ 154.570693][ T9387] tipc: Enabling of bearer rejected, already enabled [ 154.632702][ T9389] netem: change failed [ 154.950998][ T9406] netlink: 'syz.4.1181': attribute type 5 has an invalid length. [ 154.989035][ T9406] geneve3: entered promiscuous mode [ 154.994311][ T9406] geneve3: entered allmulticast mode [ 155.093310][ T9419] tipc: Enabling of bearer rejected, already enabled [ 155.489770][ T9436] tipc: Enabled bearer , priority 0 [ 155.655848][ T9436] syzkaller0: entered promiscuous mode [ 155.665437][ T9436] syzkaller0: entered allmulticast mode [ 155.674121][ T9436] tipc: Resetting bearer [ 155.689651][ T9455] lo speed is unknown, defaulting to 1000 [ 155.700126][ T9452] tipc: Enabling of bearer rejected, failed to enable media [ 155.723886][ T9435] tipc: Resetting bearer [ 155.916431][ T9466] __nla_validate_parse: 12 callbacks suppressed [ 155.916451][ T9466] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1198'. [ 155.973524][ T30] audit: type=1804 audit(1764826143.968:4): pid=9468 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1200" name="/newroot/235/cgroup.controllers" dev="tmpfs" ino=1209 res=1 errno=0 [ 155.997283][ T30] audit: type=1800 audit(1764826143.978:5): pid=9468 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1200" name="cgroup.controllers" dev="tmpfs" ino=1209 res=0 errno=0 [ 156.434728][ T9474] xt_TCPMSS: Only works on TCP SYN packets [ 156.761708][ T9480] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1204'. [ 156.761911][ T9479] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1204'. [ 157.127042][ T9435] tipc: Disabling bearer [ 157.138908][ T9480] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 157.142423][ T9479] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 157.239955][ T9487] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1205'. [ 157.353323][ T9494] tipc: Enabled bearer , priority 0 [ 157.536260][ T9494] tipc: Disabling bearer [ 157.748679][ T9518] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1214'. [ 157.765970][ T9518] netlink: 'syz.0.1214': attribute type 8 has an invalid length. [ 157.850122][ T9520] netlink: 'syz.3.1218': attribute type 12 has an invalid length. [ 158.131438][ T9539] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1223'. [ 158.264354][ T9550] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1226'. [ 158.589411][ T13] net_ratelimit: 36 callbacks suppressed [ 158.589429][ T13] bond1: (slave macvlan2): failed to get link speed/duplex [ 158.718523][ T6313] bond1: (slave macvlan2): failed to get link speed/duplex [ 158.735385][ T9570] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1234'. [ 158.765185][ T9570] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1234'. [ 158.848360][ T1162] bond1: (slave macvlan2): failed to get link speed/duplex [ 158.911903][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.960530][ T9579] tipc: Enabling of bearer rejected, already enabled [ 159.009373][ T3796] bond1: (slave macvlan2): failed to get link speed/duplex [ 159.017048][ T9581] tipc: Enabled bearer , priority 13 [ 159.050810][ T9587] FAULT_INJECTION: forcing a failure. [ 159.050810][ T9587] name failslab, interval 1, probability 0, space 0, times 0 [ 159.055095][ T9581] xt_hashlimit: overflow, try lower: 3/0 [ 159.081242][ T9584] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1240'. [ 159.090940][ T9587] CPU: 0 UID: 0 PID: 9587 Comm: syz.4.1241 Not tainted syzkaller #0 PREEMPT(full) [ 159.090965][ T9587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 159.090975][ T9587] Call Trace: [ 159.090981][ T9587] [ 159.090989][ T9587] dump_stack_lvl+0x189/0x250 [ 159.091012][ T9587] ? __pfx____ratelimit+0x10/0x10 [ 159.091034][ T9587] ? __pfx_dump_stack_lvl+0x10/0x10 [ 159.091052][ T9587] ? __pfx__printk+0x10/0x10 [ 159.091076][ T9587] ? __pfx___might_resched+0x10/0x10 [ 159.091093][ T9587] ? fs_reclaim_acquire+0x7d/0x100 [ 159.091118][ T9587] should_fail_ex+0x414/0x560 [ 159.091143][ T9587] should_failslab+0xa8/0x100 [ 159.091167][ T9587] __kmalloc_cache_noprof+0x6f/0x6f0 [ 159.091187][ T9587] ? dev_ethtool+0x126/0x19c0 [ 159.091213][ T9587] dev_ethtool+0x126/0x19c0 [ 159.091243][ T9587] ? __pfx_dev_ethtool+0x10/0x10 [ 159.091273][ T9587] ? dev_load+0x21/0x1f0 [ 159.091296][ T9587] ? dev_load+0x21/0x1f0 [ 159.091319][ T9587] dev_ioctl+0x392/0x1150 [ 159.091345][ T9587] sock_do_ioctl+0x22c/0x300 [ 159.091366][ T9587] ? __pfx_sock_do_ioctl+0x10/0x10 [ 159.091407][ T9587] sock_ioctl+0x576/0x790 [ 159.091427][ T9587] ? __pfx_sock_ioctl+0x10/0x10 [ 159.091449][ T9587] ? __fget_files+0x3a0/0x420 [ 159.091463][ T9587] ? __fget_files+0x2a/0x420 [ 159.091481][ T9587] ? bpf_lsm_file_ioctl+0x9/0x20 [ 159.091497][ T9587] ? __pfx_sock_ioctl+0x10/0x10 [ 159.091514][ T9587] __se_sys_ioctl+0xfc/0x170 [ 159.091536][ T9587] do_syscall_64+0xfa/0xf80 [ 159.091557][ T9587] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.091573][ T9587] ? clear_bhb_loop+0x60/0xb0 [ 159.091593][ T9587] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.091609][ T9587] RIP: 0033:0x7f555c78f749 [ 159.091623][ T9587] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 159.091639][ T9587] RSP: 002b:00007f555d570038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 159.091657][ T9587] RAX: ffffffffffffffda RBX: 00007f555c9e5fa0 RCX: 00007f555c78f749 [ 159.091669][ T9587] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000004 [ 159.091680][ T9587] RBP: 00007f555d570090 R08: 0000000000000000 R09: 0000000000000000 [ 159.091691][ T9587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 159.091701][ T9587] R13: 00007f555c9e6038 R14: 00007f555c9e5fa0 R15: 00007fff40e27d58 [ 159.091729][ T9587] [ 159.139326][ T1162] bond1: (slave macvlan2): failed to get link speed/duplex [ 159.340966][ T25] block nbd1: Possible stuck request ffff888025450000: control (read@0,1024B). Runtime 30 seconds [ 159.356776][ T25] block nbd1: Possible stuck request ffff8880254501c0: control (read@1024,1024B). Runtime 30 seconds [ 159.368217][ T25] block nbd1: Possible stuck request ffff888025450380: control (read@2048,1024B). Runtime 30 seconds [ 159.386140][ T25] block nbd1: Possible stuck request ffff888025450540: control (read@3072,1024B). Runtime 30 seconds [ 159.477986][ T9599] bridge1: port 1(veth0_to_bond) entered blocking state [ 159.500022][ T9599] bridge1: port 1(veth0_to_bond) entered disabled state [ 159.507538][ T9599] veth0_to_bond: entered allmulticast mode [ 159.516341][ T9599] veth0_to_bond: entered promiscuous mode [ 159.530098][ T9605] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode [ 159.547490][ T9605] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode [ 159.664023][ T3563] bond1: (slave macvlan2): failed to get link speed/duplex [ 159.778378][ T1025] bond1: (slave macvlan2): failed to get link speed/duplex [ 159.793153][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.801716][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.914447][ T9627] FAULT_INJECTION: forcing a failure. [ 159.914447][ T9627] name failslab, interval 1, probability 0, space 0, times 0 [ 159.927198][ T9627] CPU: 0 UID: 0 PID: 9627 Comm: syz.0.1252 Not tainted syzkaller #0 PREEMPT(full) [ 159.927221][ T9627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 159.927231][ T9627] Call Trace: [ 159.927240][ T9627] [ 159.927247][ T9627] dump_stack_lvl+0x189/0x250 [ 159.927271][ T9627] ? __pfx____ratelimit+0x10/0x10 [ 159.927291][ T9627] ? __pfx_dump_stack_lvl+0x10/0x10 [ 159.927308][ T9627] ? __pfx__printk+0x10/0x10 [ 159.927334][ T9627] ? rcu_is_watching+0x15/0xb0 [ 159.927353][ T9627] ? trace_kmalloc+0x1f/0xb0 [ 159.927371][ T9627] ? __kmalloc_node_track_caller_noprof+0x58b/0x810 [ 159.927396][ T9627] should_fail_ex+0x414/0x560 [ 159.927421][ T9627] should_failslab+0xa8/0x100 [ 159.927445][ T9627] kmem_cache_alloc_noprof+0x74/0x6f0 [ 159.927465][ T9627] ? skb_clone+0x212/0x3a0 [ 159.927487][ T9627] skb_clone+0x212/0x3a0 [ 159.927506][ T9627] bpf_clone_redirect+0x16a/0x4b0 [ 159.927542][ T9627] ? bpf_test_run+0x192/0x7d0 [ 159.927558][ T9627] bpf_prog_7c64685fc60f7d44+0x5f/0x68 [ 159.927587][ T9627] ? seqcount_lockdep_reader_access+0x122/0x1c0 [ 159.927611][ T9627] ? lockdep_hardirqs_on+0x98/0x140 [ 159.927632][ T9627] ? ktime_get+0x45/0x200 [ 159.927651][ T9627] ? seqcount_lockdep_reader_access+0x174/0x1c0 [ 159.927674][ T9627] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 159.927704][ T9627] ? __local_bh_disable_ip+0xf1/0x190 [ 159.927721][ T9627] ? __pfx___cant_migrate+0x10/0x10 [ 159.927738][ T9627] ? __local_bh_enable_ip+0x12d/0x1c0 [ 159.927753][ T9627] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 159.927775][ T9627] ? bpf_test_timer_continue+0x10d/0x320 [ 159.927796][ T9627] bpf_test_run+0x313/0x7d0 [ 159.927834][ T9627] ? __pfx_bpf_test_run+0x10/0x10 [ 159.927862][ T9627] ? rcu_is_watching+0x15/0xb0 [ 159.927882][ T9627] ? __kasan_krealloc+0xeb/0x110 [ 159.927904][ T9627] ? eth_type_trans+0x35e/0x6d0 [ 159.927930][ T9627] ? convert___skb_to_skb+0x3d/0x5b0 [ 159.927948][ T9627] bpf_prog_test_run_skb+0xd67/0x1d50 [ 159.927986][ T9627] ? __fget_files+0x2a/0x420 [ 159.928000][ T9627] ? __fget_files+0x3a0/0x420 [ 159.928014][ T9627] ? __fget_files+0x2a/0x420 [ 159.928035][ T9627] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 159.928059][ T9627] bpf_prog_test_run+0x2c7/0x340 [ 159.928084][ T9627] __sys_bpf+0x562/0x860 [ 159.928119][ T9627] ? __pfx___sys_bpf+0x10/0x10 [ 159.928155][ T9627] ? ksys_write+0x22a/0x250 [ 159.928178][ T9627] ? __pfx_ksys_write+0x10/0x10 [ 159.928204][ T9627] __x64_sys_bpf+0x7c/0x90 [ 159.928223][ T9627] do_syscall_64+0xfa/0xf80 [ 159.928247][ T9627] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.928262][ T9627] ? clear_bhb_loop+0x60/0xb0 [ 159.928280][ T9627] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.928294][ T9627] RIP: 0033:0x7fd43738f749 [ 159.928307][ T9627] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 159.928321][ T9627] RSP: 002b:00007fd4382ae038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 159.928338][ T9627] RAX: ffffffffffffffda RBX: 00007fd4375e5fa0 RCX: 00007fd43738f749 [ 159.928350][ T9627] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 159.928361][ T9627] RBP: 00007fd4382ae090 R08: 0000000000000000 R09: 0000000000000000 [ 159.928370][ T9627] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 159.928379][ T9627] R13: 00007fd4375e6038 R14: 00007fd4375e5fa0 R15: 00007ffeecc791b8 [ 159.928403][ T9627] [ 160.440426][ T9640] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 160.463959][ T9640] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode [ 160.622501][ T9656] netlink: 'syz.3.1261': attribute type 29 has an invalid length. [ 160.669213][ T9656] netlink: 'syz.3.1261': attribute type 29 has an invalid length. [ 160.719560][ T9653] tipc: Enabled bearer , priority 0 [ 160.745195][ T9653] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode [ 160.804285][ T9653] tipc: Resetting bearer [ 160.961522][ T9672] __nla_validate_parse: 4 callbacks suppressed [ 160.961541][ T9672] netlink: 236 bytes leftover after parsing attributes in process `syz.2.1269'. [ 161.139784][ T9689] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1271'. [ 161.218320][ T9694] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1275'. [ 161.306240][ T9697] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1277'. [ 161.347785][ T9699] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1278'. [ 161.402330][ T9699] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1278'. [ 161.808518][ T9] tipc: Node number set to 3685680905 [ 161.949236][ T9710] IPVS: length: 77 != 6664 [ 162.145847][ T9722] netlink: 236 bytes leftover after parsing attributes in process `syz.4.1284'. [ 162.235211][ T9727] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1286'. [ 162.245359][ T9731] delete_channel: no stack [ 162.549726][ T9749] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1292'. [ 162.617786][ T9749] bond4: Invalid ad_actor_system MAC address. [ 162.624874][ T9749] bond4: option ad_actor_system: invalid value (1) [ 162.656903][ T9749] bond4 (unregistering): Released all slaves [ 162.740596][ T9757] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1298'. [ 163.522559][ T9789] veth0: entered promiscuous mode [ 163.619601][ T3521] net_ratelimit: 90 callbacks suppressed [ 163.619621][ T3521] bond1: (slave macvlan2): failed to get link speed/duplex [ 163.648368][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.658428][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.667068][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.675279][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.683855][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.692644][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.701108][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.709485][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.718200][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.731559][ T9784] veth0: left promiscuous mode [ 164.911574][ T9841] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 165.058389][ T9851] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 165.096411][ T9851] netem: change failed [ 165.166641][ T9855] tipc: Enabling of bearer rejected, already enabled [ 165.236259][ T9859] bond_slave_1: entered promiscuous mode [ 165.330729][ T9803] x_tables: ip6_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT/POSTROUTING [ 165.338613][ T9861] netlink: 'syz.1.1329': attribute type 12 has an invalid length. [ 165.378763][ T9861] netlink: 'syz.1.1329': attribute type 29 has an invalid length. [ 165.977372][ T9886] tipc: Enabling of bearer rejected, already enabled [ 166.177142][ T9888] veth3: entered allmulticast mode [ 166.198067][ T9895] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode [ 166.228568][ T9895] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode [ 166.305054][ T9899] netlink: 'syz.0.1338': attribute type 2 has an invalid length. [ 166.351601][ T9899] 9: entered promiscuous mode [ 166.434051][ T9908] tipc: Enabling of bearer rejected, already enabled [ 166.505562][ T9917] FAULT_INJECTION: forcing a failure. [ 166.505562][ T9917] name failslab, interval 1, probability 0, space 0, times 0 [ 166.518386][ T9917] CPU: 1 UID: 0 PID: 9917 Comm: syz.2.1341 Not tainted syzkaller #0 PREEMPT(full) [ 166.518407][ T9917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 166.518416][ T9917] Call Trace: [ 166.518424][ T9917] [ 166.518430][ T9917] dump_stack_lvl+0x189/0x250 [ 166.518449][ T9917] ? __pfx____ratelimit+0x10/0x10 [ 166.518467][ T9917] ? __pfx_dump_stack_lvl+0x10/0x10 [ 166.518482][ T9917] ? __pfx__printk+0x10/0x10 [ 166.518502][ T9917] ? lockdep_hardirqs_on+0x98/0x140 [ 166.518522][ T9917] ? finish_task_switch+0x23d/0x940 [ 166.518546][ T9917] should_fail_ex+0x414/0x560 [ 166.518569][ T9917] should_failslab+0xa8/0x100 [ 166.518600][ T9917] kmem_cache_alloc_noprof+0x74/0x6f0 [ 166.518621][ T9917] ? skb_clone+0x212/0x3a0 [ 166.518643][ T9917] skb_clone+0x212/0x3a0 [ 166.518663][ T9917] bpf_clone_redirect+0x16a/0x4b0 [ 166.518685][ T9917] ? __pfx___schedule+0x10/0x10 [ 166.518708][ T9917] ? bpf_test_run+0x192/0x7d0 [ 166.518723][ T9917] bpf_prog_7c64685fc60f7d44+0x5f/0x68 [ 166.518743][ T9917] ? preempt_schedule+0xae/0xc0 [ 166.518760][ T9917] ? bpf_test_run+0x192/0x7d0 [ 166.518774][ T9917] ? preempt_schedule_common+0x83/0xd0 [ 166.518793][ T9917] ? preempt_schedule+0xae/0xc0 [ 166.518811][ T9917] ? __pfx_preempt_schedule+0x10/0x10 [ 166.518833][ T9917] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 166.518858][ T9917] ? preempt_schedule_thunk+0x16/0x30 [ 166.518882][ T9917] ? __local_bh_disable_ip+0xf1/0x190 [ 166.518897][ T9917] ? __pfx___cant_migrate+0x10/0x10 [ 166.518910][ T9917] ? __local_bh_enable_ip+0x13e/0x1c0 [ 166.518923][ T9917] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 166.518940][ T9917] ? bpf_test_timer_continue+0x10d/0x320 [ 166.518958][ T9917] bpf_test_run+0x313/0x7d0 [ 166.518993][ T9917] ? __pfx_bpf_test_run+0x10/0x10 [ 166.519018][ T9917] ? rcu_is_watching+0x15/0xb0 [ 166.519038][ T9917] ? __kasan_krealloc+0xeb/0x110 [ 166.519057][ T9917] ? eth_type_trans+0x35e/0x6d0 [ 166.519079][ T9917] ? convert___skb_to_skb+0x3d/0x5b0 [ 166.519095][ T9917] bpf_prog_test_run_skb+0xd67/0x1d50 [ 166.519128][ T9917] ? __fget_files+0x2a/0x420 [ 166.519141][ T9917] ? __fget_files+0x3a0/0x420 [ 166.519153][ T9917] ? __fget_files+0x2a/0x420 [ 166.519171][ T9917] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 166.519194][ T9917] bpf_prog_test_run+0x2c7/0x340 [ 166.519219][ T9917] __sys_bpf+0x562/0x860 [ 166.519239][ T9917] ? __pfx___sys_bpf+0x10/0x10 [ 166.519275][ T9917] ? ksys_write+0x22a/0x250 [ 166.519297][ T9917] ? __pfx_ksys_write+0x10/0x10 [ 166.519322][ T9917] __x64_sys_bpf+0x7c/0x90 [ 166.519340][ T9917] do_syscall_64+0xfa/0xf80 [ 166.519360][ T9917] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.519377][ T9917] ? clear_bhb_loop+0x60/0xb0 [ 166.519396][ T9917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.519411][ T9917] RIP: 0033:0x7f306478f749 [ 166.519427][ T9917] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 166.519443][ T9917] RSP: 002b:00007f30655a6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 166.519461][ T9917] RAX: ffffffffffffffda RBX: 00007f30649e5fa0 RCX: 00007f306478f749 [ 166.519474][ T9917] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 166.519485][ T9917] RBP: 00007f30655a6090 R08: 0000000000000000 R09: 0000000000000000 [ 166.519495][ T9917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 166.519504][ T9917] R13: 00007f30649e6038 R14: 00007f30649e5fa0 R15: 00007ffe6cc59ca8 [ 166.519530][ T9917] [ 167.169184][ T9925] netlink: 'syz.0.1344': attribute type 14 has an invalid length. [ 167.238594][ T9925] __nla_validate_parse: 6 callbacks suppressed [ 167.238610][ T9925] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1344'. [ 167.294208][ T9939] ip6erspan0: entered promiscuous mode [ 167.305764][ T9939] ip6erspan0: entered allmulticast mode [ 167.323888][ T9937] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1347'. [ 167.355495][ T9929] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1346'. [ 167.494780][ T5945] IPVS: starting estimator thread 0... [ 167.505164][ T9937] team0: Port device veth0_virt_wifi removed [ 167.556390][ T9954] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1350'. [ 167.590901][ T9949] IPVS: using max 53 ests per chain, 127200 per kthread [ 167.698512][ T9962] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1354'. [ 167.730011][ T9962] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1354'. [ 167.836646][ T9970] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1357'. [ 168.343742][ T9992] tipc: Enabling of bearer rejected, already enabled [ 168.435779][ T9999] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1366'. [ 168.648383][ T78] net_ratelimit: 279 callbacks suppressed [ 168.648404][ T78] bond1: (slave macvlan2): failed to get link speed/duplex [ 168.746841][T10014] tipc: Enabling of bearer rejected, already enabled [ 168.759721][ T78] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.768343][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.810643][T10021] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1376'. [ 168.838919][ T78] bond1: (slave macvlan2): failed to get link speed/duplex [ 168.958689][ T78] bond1: (slave macvlan2): failed to get link speed/duplex [ 169.069425][ T13] bond1: (slave macvlan2): failed to get link speed/duplex [ 169.178362][ T13] bond1: (slave macvlan2): failed to get link speed/duplex [ 169.300061][ T78] bond1: (slave macvlan2): failed to get link speed/duplex [ 169.309930][T10045] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1384'. [ 169.408429][ T78] bond1: (slave macvlan2): failed to get link speed/duplex [ 169.536973][T10054] bond2: (slave sit0): Device is not bonding slave [ 169.544089][T10054] bond2: option active_slave: invalid value (sit0) [ 169.552450][T10054] bond2 (unregistering): Released all slaves [ 169.588625][ T6313] bond1: (slave macvlan2): failed to get link speed/duplex [ 169.858067][T10077] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode [ 169.892213][T10077] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode [ 170.156068][T10092] 8021q: VLANs not supported on gre0 [ 170.561295][T10105] netlink: 'syz.3.1406': attribute type 4 has an invalid length. [ 170.611431][T10115] netlink: 'syz.3.1406': attribute type 4 has an invalid length. [ 170.622336][T10111] bridge_slave_1 (unregistering): left allmulticast mode [ 170.630279][T10111] bridge_slave_1 (unregistering): left promiscuous mode [ 170.648057][T10111] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.729120][T10122] block nbd4: NBD_DISCONNECT [ 170.889117][T10127] mac80211_hwsim hwsim8 syzkaller0: left promiscuous mode [ 170.906692][T10127] mac80211_hwsim hwsim8 syzkaller0: left allmulticast mode [ 171.283262][T10149] Cannot find add_set index 2 as target [ 171.304335][T10151] netlink: 'syz.2.1421': attribute type 10 has an invalid length. [ 171.368446][T10151] team0: Failed to send options change via netlink (err -105) [ 171.375955][T10151] team0: Port device dummy0 added [ 171.412564][T10155] FAULT_INJECTION: forcing a failure. [ 171.412564][T10155] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 171.414122][T10156] netlink: 'syz.2.1421': attribute type 10 has an invalid length. [ 171.437180][T10156] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 171.477840][T10156] team0: Failed to send options change via netlink (err -105) [ 171.487551][T10155] CPU: 1 UID: 0 PID: 10155 Comm: syz.0.1424 Not tainted syzkaller #0 PREEMPT(full) [ 171.487576][T10155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 171.487587][T10155] Call Trace: [ 171.487594][T10155] [ 171.487602][T10155] dump_stack_lvl+0x189/0x250 [ 171.487625][T10155] ? __pfx____ratelimit+0x10/0x10 [ 171.487645][T10155] ? __pfx_dump_stack_lvl+0x10/0x10 [ 171.487662][T10155] ? __pfx__printk+0x10/0x10 [ 171.487684][T10155] ? __might_fault+0xb0/0x130 [ 171.487713][T10155] should_fail_ex+0x414/0x560 [ 171.487737][T10155] _copy_from_user+0x2d/0xb0 [ 171.487760][T10155] ___sys_sendmsg+0x158/0x2a0 [ 171.487785][T10155] ? __pfx____sys_sendmsg+0x10/0x10 [ 171.487815][T10155] ? rcu_read_lock_any_held+0xb3/0x120 [ 171.487860][T10155] ? __fget_files+0x2a/0x420 [ 171.487875][T10155] ? __fget_files+0x3a0/0x420 [ 171.487900][T10155] __x64_sys_sendmsg+0x19b/0x260 [ 171.487924][T10155] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 171.487953][T10155] ? __pfx_ksys_write+0x10/0x10 [ 171.487973][T10155] ? do_syscall_64+0xbe/0xf80 [ 171.487996][T10155] do_syscall_64+0xfa/0xf80 [ 171.488016][T10155] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.488032][T10155] ? clear_bhb_loop+0x60/0xb0 [ 171.488051][T10155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.488067][T10155] RIP: 0033:0x7fd43738f749 [ 171.488091][T10155] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 171.488104][T10155] RSP: 002b:00007fd4382ae038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 171.488121][T10155] RAX: ffffffffffffffda RBX: 00007fd4375e5fa0 RCX: 00007fd43738f749 [ 171.488133][T10155] RDX: 0000000020000000 RSI: 0000200000006040 RDI: 0000000000000003 [ 171.488144][T10155] RBP: 00007fd4382ae090 R08: 0000000000000000 R09: 0000000000000000 [ 171.488153][T10155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 171.488162][T10155] R13: 00007fd4375e6038 R14: 00007fd4375e5fa0 R15: 00007ffeecc791b8 [ 171.488189][T10155] [ 171.491553][T10156] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 171.712567][T10156] team0: Port device dummy0 removed [ 171.729687][T10156] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 171.990000][T10181] netlink: 'syz.0.1432': attribute type 2 has an invalid length. [ 172.071465][T10185] tipc: Enabling of bearer rejected, already enabled [ 172.161017][T10193] FAULT_INJECTION: forcing a failure. [ 172.161017][T10193] name failslab, interval 1, probability 0, space 0, times 0 [ 172.184492][T10193] CPU: 0 UID: 0 PID: 10193 Comm: syz.0.1437 Not tainted syzkaller #0 PREEMPT(full) [ 172.184518][T10193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 172.184529][T10193] Call Trace: [ 172.184536][T10193] [ 172.184544][T10193] dump_stack_lvl+0x189/0x250 [ 172.184566][T10193] ? __pfx____ratelimit+0x10/0x10 [ 172.184587][T10193] ? __pfx_dump_stack_lvl+0x10/0x10 [ 172.184605][T10193] ? __pfx__printk+0x10/0x10 [ 172.184629][T10193] ? __pfx___might_resched+0x10/0x10 [ 172.184646][T10193] ? fs_reclaim_acquire+0x7d/0x100 [ 172.184672][T10193] should_fail_ex+0x414/0x560 [ 172.184695][T10193] should_failslab+0xa8/0x100 [ 172.184720][T10193] kmem_cache_alloc_node_noprof+0x77/0x710 [ 172.184741][T10193] ? __alloc_skb+0x255/0x430 [ 172.184762][T10193] ? napi_skb_cache_get+0x4a5/0x780 [ 172.184781][T10193] ? napi_skb_cache_get+0x151/0x780 [ 172.184806][T10193] __alloc_skb+0x255/0x430 [ 172.184829][T10193] ? __pfx___alloc_skb+0x10/0x10 [ 172.184853][T10193] ? netlink_autobind+0xdb/0x300 [ 172.184868][T10193] ? netlink_autobind+0x2c2/0x300 [ 172.184889][T10193] netlink_sendmsg+0x5c6/0xb30 [ 172.184915][T10193] ? __pfx_netlink_sendmsg+0x10/0x10 [ 172.184934][T10193] ? aa_sock_msg_perm+0xf1/0x1b0 [ 172.184953][T10193] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 172.184974][T10193] ? __pfx_netlink_sendmsg+0x10/0x10 [ 172.184991][T10193] __sock_sendmsg+0x21c/0x270 [ 172.185014][T10193] ____sys_sendmsg+0x505/0x820 [ 172.185043][T10193] ? __pfx_____sys_sendmsg+0x10/0x10 [ 172.185075][T10193] ? import_iovec+0x74/0xa0 [ 172.185100][T10193] ___sys_sendmsg+0x21f/0x2a0 [ 172.185126][T10193] ? __pfx____sys_sendmsg+0x10/0x10 [ 172.185156][T10193] ? rcu_read_lock_any_held+0xb3/0x120 [ 172.185201][T10193] ? __fget_files+0x2a/0x420 [ 172.185216][T10193] ? __fget_files+0x3a0/0x420 [ 172.185247][T10193] __x64_sys_sendmsg+0x19b/0x260 [ 172.185273][T10193] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 172.185306][T10193] ? __pfx_ksys_write+0x10/0x10 [ 172.185330][T10193] ? do_syscall_64+0xbe/0xf80 [ 172.185355][T10193] do_syscall_64+0xfa/0xf80 [ 172.185376][T10193] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.185392][T10193] ? clear_bhb_loop+0x60/0xb0 [ 172.185412][T10193] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.185428][T10193] RIP: 0033:0x7fd43738f749 [ 172.185444][T10193] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 172.185458][T10193] RSP: 002b:00007fd4382ae038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 172.185477][T10193] RAX: ffffffffffffffda RBX: 00007fd4375e5fa0 RCX: 00007fd43738f749 [ 172.185489][T10193] RDX: 0000000020000000 RSI: 0000200000006040 RDI: 0000000000000003 [ 172.185500][T10193] RBP: 00007fd4382ae090 R08: 0000000000000000 R09: 0000000000000000 [ 172.185511][T10193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 172.185521][T10193] R13: 00007fd4375e6038 R14: 00007fd4375e5fa0 R15: 00007ffeecc791b8 [ 172.185550][T10193] [ 172.536935][T10201] __nla_validate_parse: 8 callbacks suppressed [ 172.536953][T10201] netlink: 800 bytes leftover after parsing attributes in process `syz.3.1440'. [ 172.568722][T10201] unsupported nla_type 776 [ 172.579871][T10202] netlink: 800 bytes leftover after parsing attributes in process `syz.3.1440'. [ 172.593191][T10201] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1440'. [ 172.603682][T10204] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1439'. [ 172.623029][ T5905] lo speed is unknown, defaulting to 1000 [ 172.746272][T10201] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1440'. [ 172.961016][T10220] netlink: 236 bytes leftover after parsing attributes in process `syz.2.1444'. [ 172.971345][T10223] IPVS: length: 8 != 1152 [ 172.975814][T10223] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1448'. [ 173.204985][T10234] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1453'. [ 173.350714][T10241] tipc: Enabled bearer , priority 0 [ 173.666443][T10267] bond1: option mode: unable to set because the bond device is up [ 173.693042][T10267] bond_slave_0: entered promiscuous mode [ 173.698826][T10267] bond_slave_1: entered promiscuous mode [ 173.704543][T10267] dummy0: entered promiscuous mode [ 173.720718][T10270] netlink: 'syz.4.1467': attribute type 1 has an invalid length. [ 173.731794][T10267] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 173.745054][T10267] bond1: (slave macvlan0): Enslaving as an active interface with an up link [ 173.799744][T10271] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1467'. [ 173.841536][T10275] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1467'. [ 173.901581][T10270] 8021q: adding VLAN 0 to HW filter on device bond3 [ 173.918624][ T3796] net_ratelimit: 33 callbacks suppressed [ 173.918640][ T3796] bond1: (slave macvlan2): failed to get link speed/duplex [ 173.961127][T10268] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode [ 173.970669][T10268] mac80211_hwsim hwsim2 syzkaller0: left allmulticast mode [ 174.113697][ T2917] bond1: (slave macvlan2): failed to get link speed/duplex [ 174.258574][ T78] bond1: (slave macvlan2): failed to get link speed/duplex [ 174.409157][ T78] bond1: (slave macvlan2): failed to get link speed/duplex [ 174.469070][T10311] Cannot find del_set index 4 as target [ 174.480559][T10312] netlink: 'syz.1.1481': attribute type 11 has an invalid length. [ 174.528597][ T36] bond1: (slave macvlan2): failed to get link speed/duplex [ 174.659365][ T36] bond1: (slave macvlan2): failed to get link speed/duplex [ 174.694206][T10326] tipc: Enabled bearer , priority 0 [ 174.798397][ T36] bond1: (slave macvlan2): failed to get link speed/duplex [ 174.830175][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.863204][T10336] netlink: 'syz.0.1488': attribute type 1 has an invalid length. [ 174.933709][T10336] 8021q: adding VLAN 0 to HW filter on device bond4 [ 175.001596][T10342] bond4: (slave geneve2): making interface the new active one [ 175.012057][T10342] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 175.026094][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.036854][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.068953][ T3796] bond1: (slave macvlan2): failed to get link speed/duplex [ 175.102129][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.118631][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.198535][ T1025] bond1: (slave macvlan2): failed to get link speed/duplex [ 175.501457][T10380] nbd: must specify a device to reconfigure [ 175.507673][T10381] netlink: 'syz.1.1506': attribute type 8 has an invalid length. [ 175.764564][T10398] Driver unsupported XDP return value 0 on prog (id 300) dev N/A, expect packet loss! [ 175.880699][T10402] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode [ 175.913357][T10402] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode [ 176.042048][T10415] 8021q: VLANs not supported on gre0 [ 176.259887][T10423] bond4: entered promiscuous mode [ 176.264966][T10423] bond4: entered allmulticast mode [ 176.291055][T10423] 8021q: adding VLAN 0 to HW filter on device bond4 [ 176.298440][T10426] tipc: Enabling of bearer rejected, already enabled [ 176.499454][T10447] FAULT_INJECTION: forcing a failure. [ 176.499454][T10447] name failslab, interval 1, probability 0, space 0, times 0 [ 176.563869][T10447] CPU: 0 UID: 0 PID: 10447 Comm: syz.0.1531 Not tainted syzkaller #0 PREEMPT(full) [ 176.563894][T10447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 176.563905][T10447] Call Trace: [ 176.563912][T10447] [ 176.563920][T10447] dump_stack_lvl+0x189/0x250 [ 176.563943][T10447] ? __pfx____ratelimit+0x10/0x10 [ 176.563963][T10447] ? __pfx_dump_stack_lvl+0x10/0x10 [ 176.563980][T10447] ? __pfx__printk+0x10/0x10 [ 176.564003][T10447] ? __pfx___might_resched+0x10/0x10 [ 176.564020][T10447] ? fs_reclaim_acquire+0x7d/0x100 [ 176.564046][T10447] should_fail_ex+0x414/0x560 [ 176.564070][T10447] should_failslab+0xa8/0x100 [ 176.564094][T10447] kmem_cache_alloc_node_noprof+0x77/0x710 [ 176.564115][T10447] ? __alloc_skb+0x255/0x430 [ 176.564135][T10447] ? napi_skb_cache_get+0x4a5/0x780 [ 176.564155][T10447] ? napi_skb_cache_get+0x151/0x780 [ 176.564179][T10447] __alloc_skb+0x255/0x430 [ 176.564202][T10447] ? __pfx___alloc_skb+0x10/0x10 [ 176.564225][T10447] ? netlink_autobind+0xdb/0x300 [ 176.564240][T10447] ? netlink_autobind+0x2c2/0x300 [ 176.564259][T10447] netlink_sendmsg+0x5c6/0xb30 [ 176.564284][T10447] ? __pfx_netlink_sendmsg+0x10/0x10 [ 176.564304][T10447] ? aa_sock_msg_perm+0xf1/0x1b0 [ 176.564324][T10447] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 176.564344][T10447] ? __pfx_netlink_sendmsg+0x10/0x10 [ 176.564362][T10447] __sock_sendmsg+0x21c/0x270 [ 176.564384][T10447] ____sys_sendmsg+0x505/0x820 [ 176.564414][T10447] ? __pfx_____sys_sendmsg+0x10/0x10 [ 176.564445][T10447] ? import_iovec+0x74/0xa0 [ 176.564470][T10447] ___sys_sendmsg+0x21f/0x2a0 [ 176.564495][T10447] ? __pfx____sys_sendmsg+0x10/0x10 [ 176.564524][T10447] ? rcu_read_lock_any_held+0xb3/0x120 [ 176.564567][T10447] ? __fget_files+0x2a/0x420 [ 176.564582][T10447] ? __fget_files+0x3a0/0x420 [ 176.564605][T10447] __x64_sys_sendmsg+0x19b/0x260 [ 176.564631][T10447] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 176.564664][T10447] ? __pfx_ksys_write+0x10/0x10 [ 176.564687][T10447] ? do_syscall_64+0xbe/0xf80 [ 176.564711][T10447] do_syscall_64+0xfa/0xf80 [ 176.564733][T10447] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.564749][T10447] ? clear_bhb_loop+0x60/0xb0 [ 176.564769][T10447] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.564784][T10447] RIP: 0033:0x7fd43738f749 [ 176.564807][T10447] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 176.564821][T10447] RSP: 002b:00007fd4382ae038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 176.564840][T10447] RAX: ffffffffffffffda RBX: 00007fd4375e5fa0 RCX: 00007fd43738f749 [ 176.564853][T10447] RDX: 0000000000000000 RSI: 00002000000010c0 RDI: 0000000000000008 [ 176.564862][T10447] RBP: 00007fd4382ae090 R08: 0000000000000000 R09: 0000000000000000 [ 176.564873][T10447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 176.564883][T10447] R13: 00007fd4375e6038 R14: 00007fd4375e5fa0 R15: 00007ffeecc791b8 [ 176.564912][T10447] [ 177.000062][T10465] tipc: Enabled bearer , priority 10 [ 177.128547][T10473] netlink: 'syz.4.1540': attribute type 2 has an invalid length. [ 177.131391][T10472] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 177.478781][T10496] atomic_op ffff888047f4d198 conn xmit_atomic 0000000000000000 [ 177.606790][T10502] mac80211_hwsim hwsim8 syzkaller0: left promiscuous mode [ 177.622120][T10504] __nla_validate_parse: 11 callbacks suppressed [ 177.622137][T10504] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1552'. [ 177.638726][T10502] mac80211_hwsim hwsim8 syzkaller0: left allmulticast mode [ 177.648512][T10500] tipc: Enabling of bearer rejected, already enabled [ 177.867209][T10518] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1560'. [ 177.886788][T10518] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1560'. [ 177.896656][T10518] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1560'. [ 177.914849][T10518] tipc: Enabling of bearer rejected, already enabled [ 177.997470][T10532] pim6reg: entered allmulticast mode [ 178.009075][T10532] pim6reg: left allmulticast mode [ 178.324921][T10562] tipc: New replicast peer: 255.255.255.255 [ 178.345440][T10562] tipc: Enabled bearer , priority 10 [ 178.506910][T10573] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1576'. [ 178.518419][ T24] IPVS: starting estimator thread 0... [ 178.628413][T10574] IPVS: using max 29 ests per chain, 69600 per kthread [ 178.646571][T10583] bridge0: entered allmulticast mode [ 178.652928][T10570] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1576'. [ 178.672653][T10570] tipc: Enabling of bearer rejected, already enabled [ 178.749637][T10587] netlink: 592 bytes leftover after parsing attributes in process `syz.0.1581'. [ 178.864460][T10594] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 178.873601][T10597] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1584'. [ 178.885217][T10594] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 178.905260][T10597] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1584'. [ 178.932446][T10597] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1584'. [ 178.950063][ T78] net_ratelimit: 37 callbacks suppressed [ 178.950083][ T78] bond1: (slave macvlan2): failed to get link speed/duplex [ 179.092652][ T3796] bond1: (slave macvlan2): failed to get link speed/duplex [ 179.157422][ T5918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.208485][ T3796] bond1: (slave macvlan2): failed to get link speed/duplex [ 179.358409][ T3796] bond1: (slave macvlan2): failed to get link speed/duplex [ 179.452824][T10629] atomic_op ffff888048ad2198 conn xmit_atomic 0000000000000000 [ 179.521869][T10636] FAULT_INJECTION: forcing a failure. [ 179.521869][T10636] name failslab, interval 1, probability 0, space 0, times 0 [ 179.540238][ T3796] bond1: (slave macvlan2): failed to get link speed/duplex [ 179.549004][T10636] CPU: 1 UID: 0 PID: 10636 Comm: syz.4.1598 Not tainted syzkaller #0 PREEMPT(full) [ 179.549028][T10636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 179.549042][T10636] Call Trace: [ 179.549049][T10636] [ 179.549056][T10636] dump_stack_lvl+0x189/0x250 [ 179.549087][T10636] ? __pfx____ratelimit+0x10/0x10 [ 179.549107][T10636] ? __pfx_dump_stack_lvl+0x10/0x10 [ 179.549124][T10636] ? __pfx__printk+0x10/0x10 [ 179.549142][T10636] ? kmalloc_reserve+0xbd/0x290 [ 179.549167][T10636] ? __lock_acquire+0x6b6/0x2cf0 [ 179.549189][T10636] should_fail_ex+0x414/0x560 [ 179.549210][T10636] should_failslab+0xa8/0x100 [ 179.549233][T10636] kmem_cache_alloc_noprof+0x74/0x6f0 [ 179.549253][T10636] ? skb_clone+0x212/0x3a0 [ 179.549274][T10636] skb_clone+0x212/0x3a0 [ 179.549292][T10636] __netlink_deliver_tap+0x404/0x850 [ 179.549320][T10636] ? netlink_deliver_tap+0x2e/0x1b0 [ 179.549337][T10636] netlink_deliver_tap+0x19c/0x1b0 [ 179.549355][T10636] netlink_unicast+0x7fa/0x9e0 [ 179.549386][T10636] ? __pfx_netlink_unicast+0x10/0x10 [ 179.549409][T10636] ? netlink_sendmsg+0x642/0xb30 [ 179.549424][T10636] ? skb_put+0x11b/0x210 [ 179.549456][T10636] netlink_sendmsg+0x805/0xb30 [ 179.549483][T10636] ? __pfx_netlink_sendmsg+0x10/0x10 [ 179.549503][T10636] ? aa_sock_msg_perm+0xf1/0x1b0 [ 179.549523][T10636] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 179.549544][T10636] ? __pfx_netlink_sendmsg+0x10/0x10 [ 179.549562][T10636] __sock_sendmsg+0x21c/0x270 [ 179.549585][T10636] ____sys_sendmsg+0x505/0x820 [ 179.549615][T10636] ? __pfx_____sys_sendmsg+0x10/0x10 [ 179.549648][T10636] ? import_iovec+0x74/0xa0 [ 179.549674][T10636] ___sys_sendmsg+0x21f/0x2a0 [ 179.549700][T10636] ? __pfx____sys_sendmsg+0x10/0x10 [ 179.549731][T10636] ? rcu_read_lock_any_held+0xb3/0x120 [ 179.549779][T10636] ? __fget_files+0x2a/0x420 [ 179.549793][T10636] ? __fget_files+0x3a0/0x420 [ 179.549819][T10636] __x64_sys_sendmsg+0x19b/0x260 [ 179.549842][T10636] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 179.549873][T10636] ? __pfx_ksys_write+0x10/0x10 [ 179.549897][T10636] ? do_syscall_64+0xbe/0xf80 [ 179.549921][T10636] do_syscall_64+0xfa/0xf80 [ 179.549941][T10636] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.549956][T10636] ? clear_bhb_loop+0x60/0xb0 [ 179.549976][T10636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.549991][T10636] RIP: 0033:0x7f555c78f749 [ 179.550012][T10636] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 179.550026][T10636] RSP: 002b:00007f555d570038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 179.550050][T10636] RAX: ffffffffffffffda RBX: 00007f555c9e5fa0 RCX: 00007f555c78f749 [ 179.550058][T10636] RDX: 0000000000000000 RSI: 00002000000010c0 RDI: 0000000000000008 [ 179.550064][T10636] RBP: 00007f555d570090 R08: 0000000000000000 R09: 0000000000000000 [ 179.550070][T10636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 179.550076][T10636] R13: 00007f555c9e6038 R14: 00007f555c9e5fa0 R15: 00007fff40e27d58 [ 179.550092][T10636] [ 179.550141][T10636] tipc: Enabling of bearer rejected, already enabled [ 179.630512][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.870073][ T5918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.888537][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.896971][ T60] bond1: (slave macvlan2): failed to get link speed/duplex [ 179.948913][ C0] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000c: 0000 [#1] SMP KASAN PTI [ 179.960924][ C0] KASAN: null-ptr-deref in range [0x0000000000000060-0x0000000000000067] [ 179.969349][ C0] CPU: 0 UID: 0 PID: 5834 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 179.978797][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 179.988841][ C0] RIP: 0010:rt6_find_cached_rt+0xb9/0x270 [ 179.994559][ C0] Code: 48 c1 e8 03 48 89 44 24 08 48 8b 44 24 08 80 3c 18 00 74 08 4c 89 f7 e8 65 74 2b f8 49 8b 2e 48 83 c5 60 48 89 e8 48 c1 e8 03 <80> 3c 18 00 74 08 48 89 ef e8 49 74 2b f8 4c 8b 6d 00 e8 d0 8d 4d [ 180.014168][ C0] RSP: 0018:ffffc90000007360 EFLAGS: 00010206 [ 180.020231][ C0] RAX: 000000000000000c RBX: dffffc0000000000 RCX: 0000000000000100 [ 180.028192][ C0] RDX: ffff888029c53d00 RSI: 0000000000000000 RDI: 0000000000000000 [ 180.036158][ C0] RBP: 0000000000000060 R08: ffff88807de09733 R09: 1ffff1100fbc12e6 [ 180.044139][ C0] R10: dffffc0000000000 R11: ffffed100fbc12e7 R12: ffffc90000007438 [ 180.052102][ C0] R13: 0000000000000000 R14: ffffc90000007430 R15: 0000000000000000 [ 180.060064][ C0] FS: 000055556af0d500(0000) GS:ffff8881260b1000(0000) knlGS:0000000000000000 [ 180.068982][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 180.075555][ C0] CR2: 00007f970c3156c0 CR3: 000000007839c000 CR4: 00000000003526f0 [ 180.083608][ C0] Call Trace: [ 180.086875][ C0] [ 180.089707][ C0] ? ip6_pol_route+0x162/0x1180 [ 180.094560][ C0] ip6_pol_route+0x28d/0x1180 [ 180.099236][ C0] ? neigh_connected_output+0x3e9/0x460 [ 180.104781][ C0] ? __pfx_ip6_pol_route+0x10/0x10 [ 180.109885][ C0] ? __lock_acquire+0x6b6/0x2cf0 [ 180.114832][ C0] ? ip_finish_output2+0x452/0x1160 [ 180.120024][ C0] fib6_rule_lookup+0x348/0x6f0 [ 180.124908][ C0] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 180.130656][ C0] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 180.136058][ C0] ? ip6_route_output_flags+0x2e/0x5d0 [ 180.141532][ C0] ? ip6_route_output_flags+0x2e/0x5d0 [ 180.146992][ C0] ? dev_get_by_index_rcu+0xf4/0x110 [ 180.152271][ C0] ip6_route_output_flags+0x364/0x5d0 [ 180.157641][ C0] ? ip6_route_output_flags+0x2e/0x5d0 [ 180.163099][ C0] ip6_dst_lookup_tail+0x299/0x1510 [ 180.168295][ C0] ? __pfx_ip6_dst_lookup_tail+0x10/0x10 [ 180.173917][ C0] ? dst_cache_get+0x10e/0x5a0 [ 180.178681][ C0] ? dst_cache_get+0x10e/0x5a0 [ 180.183448][ C0] ip6_dst_lookup_flow+0x47/0xe0 [ 180.188375][ C0] ? __pfx_ip6_dst_lookup_flow+0x10/0x10 [ 180.193995][ C0] tipc_udp_xmit+0x315/0xb60 [ 180.198583][ C0] ? tipc_udp_xmit+0xa4/0xb60 [ 180.203250][ C0] ? __pfx_tipc_udp_xmit+0x10/0x10 [ 180.208438][ C0] ? tipc_net+0x45/0x270 [ 180.212672][ C0] ? tipc_udp_send_msg+0x2a6/0x3f0 [ 180.217775][ C0] tipc_bearer_xmit_skb+0x2b3/0x400 [ 180.222962][ C0] ? tipc_bearer_xmit_skb+0xa9/0x400 [ 180.228243][ C0] ? __pfx_tipc_bearer_xmit_skb+0x10/0x10 [ 180.233962][ C0] tipc_disc_timeout+0x580/0x6d0 [ 180.238979][ C0] ? __pfx_tipc_disc_timeout+0x10/0x10 [ 180.244432][ C0] call_timer_fn+0x16e/0x590 [ 180.249017][ C0] ? __pfx_tipc_disc_timeout+0x10/0x10 [ 180.254465][ C0] ? call_timer_fn+0xbe/0x590 [ 180.259129][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 180.264332][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 180.269530][ C0] ? lockdep_hardirqs_on+0x98/0x140 [ 180.274722][ C0] ? __pfx_tipc_disc_timeout+0x10/0x10 [ 180.280172][ C0] __run_timer_base+0x61a/0x860 [ 180.285022][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 180.290390][ C0] ? seqcount_lockdep_reader_access+0x15e/0x1c0 [ 180.296632][ C0] run_timer_softirq+0xb7/0x180 [ 180.301472][ C0] handle_softirqs+0x27d/0x850 [ 180.306221][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 180.311172][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 180.316678][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 180.321882][ C0] __irq_exit_rcu+0xca/0x1f0 [ 180.326466][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 180.331653][ C0] irq_exit_rcu+0x9/0x30 [ 180.335894][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 180.341608][ C0] [ 180.344537][ C0] [ 180.347460][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 180.353431][ C0] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x11/0x90 [ 180.360276][ C0] Code: 09 cc 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 04 24 65 48 8b 14 25 08 f0 76 92 <65> 8b 0d 78 a1 b5 10 81 e1 00 01 ff 00 74 11 81 f9 00 01 00 00 75 [ 180.380002][ C0] RSP: 0018:ffffc9000423f368 EFLAGS: 00000246 [ 180.386115][ C0] RAX: ffffffff823247c4 RBX: 800000007599a000 RCX: 0000000000000000 [ 180.394103][ C0] RDX: ffff888029c53d00 RSI: 0000000000000000 RDI: 0000000000000000 [ 180.402186][ C0] RBP: 0000000000000001 R08: ffffea0001d66687 R09: 1ffffd40003accd0 [ 180.410155][ C0] R10: dffffc0000000000 R11: fffff940003accd1 R12: dffffc0000000000 [ 180.418125][ C0] R13: 800000007599a007 R14: ffff888078465a28 R15: ffff88806e9ed501 [ 180.426184][ C0] ? __page_table_check_ptes_set+0x54/0x2f0 [ 180.432078][ C0] ? page_table_check_set+0x4d7/0x610 [ 180.437456][ C0] __page_table_check_ptes_set+0x54/0x2f0 [ 180.443168][ C0] ? page_table_check_set+0x148/0x610 [ 180.448530][ C0] ? vm_normal_page+0x10d/0x240 [ 180.453394][ C0] copy_pmd_range+0x4b9b/0x7f00 [ 180.458236][ C0] ? unwind_get_return_address+0x4d/0x90 [ 180.463869][ C0] ? __pfx_copy_pmd_range+0x10/0x10 [ 180.469057][ C0] ? vm_area_dup+0x2b/0x680 [ 180.473558][ C0] ? dup_mmap+0x903/0x1b10 [ 180.477967][ C0] ? copy_mm+0x13c/0x4b0 [ 180.482196][ C0] ? copy_process+0x165d/0x3950 [ 180.487033][ C0] ? kernel_clone+0x21e/0x820 [ 180.491789][ C0] ? __lock_acquire+0x6b6/0x2cf0 [ 180.496720][ C0] copy_page_range+0xc14/0x1270 [ 180.501578][ C0] ? __pfx_copy_page_range+0x10/0x10 [ 180.507061][ C0] ? __pfx_vma_interval_tree_augment_rotate+0x10/0x10 [ 180.513867][ C0] dup_mmap+0xf4c/0x1b10 [ 180.518124][ C0] ? __pfx_dup_mmap+0x10/0x10 [ 180.522798][ C0] ? mm_init+0xa91/0xc60 [ 180.527051][ C0] copy_mm+0x13c/0x4b0 [ 180.531108][ C0] copy_process+0x165d/0x3950 [ 180.535785][ C0] ? copy_process+0x915/0x3950 [ 180.540537][ C0] ? __pfx_copy_process+0x10/0x10 [ 180.545547][ C0] ? __lock_acquire+0x6b6/0x2cf0 [ 180.550475][ C0] kernel_clone+0x21e/0x820 [ 180.554967][ C0] ? css_rstat_updated+0x23a/0x4f0 [ 180.560103][ C0] ? __pfx_kernel_clone+0x10/0x10 [ 180.565117][ C0] ? count_memcg_event_mm+0x21/0x260 [ 180.570481][ C0] __x64_sys_clone+0x18b/0x1e0 [ 180.575301][ C0] ? __pfx___x64_sys_clone+0x10/0x10 [ 180.580631][ C0] ? do_syscall_64+0xbe/0xf80 [ 180.585299][ C0] do_syscall_64+0xfa/0xf80 [ 180.589817][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.595882][ C0] ? clear_bhb_loop+0x60/0xb0 [ 180.600570][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.606452][ C0] RIP: 0033:0x7f970b585e93 [ 180.610946][ C0] Code: 1f 84 00 00 00 00 00 64 48 8b 04 25 10 00 00 00 45 31 c0 31 d2 31 f6 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 89 c2 85 c0 75 2c 64 48 8b 04 25 10 00 00 [ 180.630716][ C0] RSP: 002b:00007fffeb3b6088 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 180.639296][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f970b585e93 [ 180.647259][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 180.655220][ C0] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001 [ 180.663267][ C0] R10: 000055556af0d7d0 R11: 0000000000000246 R12: 0000000000000000 [ 180.671392][ C0] R13: 00000000000927c0 R14: 000000000002be81 R15: 00007fffeb3b6220 [ 180.679371][ C0] [ 180.682376][ C0] Modules linked in: [ 180.686401][ C0] ---[ end trace 0000000000000000 ]--- [ 180.691925][ C0] RIP: 0010:rt6_find_cached_rt+0xb9/0x270 [ 180.697676][ C0] Code: 48 c1 e8 03 48 89 44 24 08 48 8b 44 24 08 80 3c 18 00 74 08 4c 89 f7 e8 65 74 2b f8 49 8b 2e 48 83 c5 60 48 89 e8 48 c1 e8 03 <80> 3c 18 00 74 08 48 89 ef e8 49 74 2b f8 4c 8b 6d 00 e8 d0 8d 4d [ 180.717341][ C0] RSP: 0018:ffffc90000007360 EFLAGS: 00010206 [ 180.723454][ C0] RAX: 000000000000000c RBX: dffffc0000000000 RCX: 0000000000000100 [ 180.731447][ C0] RDX: ffff888029c53d00 RSI: 0000000000000000 RDI: 0000000000000000 [ 180.739434][ C0] RBP: 0000000000000060 R08: ffff88807de09733 R09: 1ffff1100fbc12e6 [ 180.747418][ C0] R10: dffffc0000000000 R11: ffffed100fbc12e7 R12: ffffc90000007438 [ 180.755422][ C0] R13: 0000000000000000 R14: ffffc90000007430 R15: 0000000000000000 [ 180.763523][ C0] FS: 000055556af0d500(0000) GS:ffff8881260b1000(0000) knlGS:0000000000000000 [ 180.772495][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 180.779120][ C0] CR2: 00007f970c3156c0 CR3: 000000007839c000 CR4: 00000000003526f0 [ 180.787118][ C0] Kernel panic - not syncing: Fatal exception in interrupt [ 180.794843][ C0] Kernel Offset: disabled [ 180.799169][ C0] Rebooting in 86400 seconds..