last executing test programs: 2.617490799s ago: executing program 2 (id=4800): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000009ffffff00000000000000008500000036000000850000002a00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000040)="f7edad00"/14, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRESOCT=r2], 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0xf, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1802000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000008000008500000086000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000500)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x42}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010700000000000000006700000008002601"], 0x1c}}, 0x2000) 2.395096878s ago: executing program 2 (id=4802): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f00000004c0)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e321000c8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0xc4) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x50a10, 0x51a23}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}, @IFLA_GRE_OKEY={0x8}]}}}]}, 0x4c}}, 0x20040040) 2.221179184s ago: executing program 3 (id=4806): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r1 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0xfe, &(0x7f0000000000)=[{&(0x7f0000000040)="0207000902000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) r2 = socket$kcm(0xa, 0x922000000003, 0x11) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x80, 0x0}, 0x0) 2.038852431s ago: executing program 2 (id=4807): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000001880)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x3e8, 0xf, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68888a887", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.855277797s ago: executing program 0 (id=4810): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000540)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) r1 = openat$cgroup_pressure(r0, &(0x7f00000006c0)='io.pressure\x00', 0x2, 0x0) write$cgroup_netprio_ifpriomap(r1, &(0x7f00000013c0)={'batadv0', 0x32, 0x31}, 0xa) 1.631405609s ago: executing program 0 (id=4813): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000640)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0xfffd}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x9}]}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}}, 0x0) 1.568916032s ago: executing program 2 (id=4814): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r0 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.450859019s ago: executing program 1 (id=4816): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000001640)=ANY=[@ANYBLOB="180000002d0003"], 0x18}], 0x1}, 0x0) 1.387517354s ago: executing program 0 (id=4817): bpf$BPF_PROG_DETACH(0x9, &(0x7f00000012c0)={@cgroup, 0xffffffffffffffff, 0x24, 0x4}, 0x20) 1.309078166s ago: executing program 1 (id=4818): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1e, 0x0, 0x2, 0xff}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x2000002, 0x3a, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.163013862s ago: executing program 0 (id=4819): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e20}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 979.45924ms ago: executing program 4 (id=4820): r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f0000001d00)={0x0, 0x0, 0x0}, 0x40000020) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000002700)=""/4077, 0xfed}, {&(0x7f0000000240)=""/77, 0x4d}, {&(0x7f0000003700)=""/4087, 0xff7}, {&(0x7f0000000040)=""/36, 0x24}, {&(0x7f00000006c0)=""/4083, 0xff3}, {&(0x7f00000016c0)=""/198, 0xc6}, {&(0x7f00000002c0)=""/156, 0x9c}], 0x7}, 0x32120) 979.297097ms ago: executing program 0 (id=4821): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) 930.448322ms ago: executing program 3 (id=4822): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c0009"], 0x34}}, 0x400c010) 851.105656ms ago: executing program 2 (id=4823): r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000540)="317cf8", 0x3}], 0x1}, 0x1) sendmsg$kcm(r0, &(0x7f0000002080)={0x0, 0x0, 0x0}, 0x0) 799.348259ms ago: executing program 1 (id=4824): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="501a00000d0a010800000000000000000a0000000900020073797a31000000000900010073797a3100000000241a038018013f800c00018006000100000000000800034000000002"], 0x1a50}}, 0x8000) 769.527678ms ago: executing program 4 (id=4825): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000003bc0)={&(0x7f0000002640)={0xa, 0x4e23, 0x8, @private2, 0x8}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="2400000000000000290000003200000000000000000000000000000000000001", @ANYRES32=0x0, @ANYBLOB="000000009000000000000000290000003700"], 0xb8}, 0x20004048) 690.834665ms ago: executing program 3 (id=4826): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001a00)={0x28, 0x35, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x10}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64=0x200}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) 611.299879ms ago: executing program 0 (id=4827): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xd, &(0x7f0000000180)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x87}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1d2c}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000003c0)="c274386d178550cb864bd57221bc", 0x0, 0x1200000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 597.450412ms ago: executing program 4 (id=4828): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000250001012cbd7000fbfffffe15000000080003004700"], 0x1c}, 0x1, 0x0, 0x0, 0x40157}, 0x28850) 591.147221ms ago: executing program 2 (id=4829): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000002600010025bd7000f8dbdf2506"], 0x14}}, 0x20006004) 523.292962ms ago: executing program 1 (id=4830): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="a9adf1eed9c6180000869a434f00030099bf7247", @ANYRES32, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000201"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r1, 0x2000300, 0xe, 0x0, &(0x7f0000000180)="74fa40b249c0d585699ce70fac7b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 445.15522ms ago: executing program 4 (id=4831): bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000016000000080000007f00000001"], 0x48) 430.882805ms ago: executing program 3 (id=4832): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003a80)=ANY=[@ANYBLOB="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"], 0x1cdc}}, 0x0) 395.046242ms ago: executing program 1 (id=4833): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) 246.722995ms ago: executing program 4 (id=4834): r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f0000001d00)={0x0, 0x0, 0x0}, 0x40000020) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000002700)=""/4077, 0xfed}, {&(0x7f0000000240)=""/77, 0x4d}, {&(0x7f0000003700)=""/4087, 0xff7}, {&(0x7f0000000040)=""/36, 0x24}, {&(0x7f0000000080)=""/22, 0x16}, {&(0x7f00000006c0)=""/4083, 0xff3}, {&(0x7f00000016c0)=""/198, 0xc6}, {&(0x7f00000002c0)=""/156, 0x9c}], 0x8}, 0x32120) 151.759243ms ago: executing program 3 (id=4835): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a00)=@newsa={0x168, 0x10, 0x633, 0x0, 0x0, {{@in6=@private0, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5e}, {@in=@private=0xa010102, 0x20000, 0x32}, @in=@rand_addr=0x64010100, {}, {0x0, 0x4000000}, {}, 0x0, 0x3505, 0xa, 0x2}, [@algo_crypt={0x48, 0x2, {{'essiv-cbc-aes-sha256-neon\x00'}}}, @coaddr={0x14, 0xe, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @encap={0x1c, 0x4, {0x2, 0x0, 0x0, @in6=@loopback}}]}, 0x168}}, 0x0) 94.573736ms ago: executing program 4 (id=4836): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) 22.981936ms ago: executing program 1 (id=4837): r0 = socket$inet(0x2, 0xa, 0x3) close(r0) 0s ago: executing program 3 (id=4838): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080400007c09e8fe55a10a0015c00500142603600e1208000f0000000401a8001600a400014003", 0x39}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) kernel console output (not intermixed with test programs): 3041][T20292] syzkaller0: entered promiscuous mode [ 433.501357][T20292] syzkaller0: entered allmulticast mode [ 433.738488][T20292] IPVS: Scheduler module ip_vs_ not found [ 433.797861][T20294] tipc: Resetting bearer [ 433.919903][T20294] tipc: Disabling bearer [ 434.146858][T20322] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3281'. [ 434.232602][T11306] net_ratelimit: 24 callbacks suppressed [ 434.232625][T11306] bond9: (slave macvlan0): failed to get link speed/duplex [ 434.377308][T11306] bond9: (slave macvlan0): failed to get link speed/duplex [ 434.538817][T20338] lo speed is unknown, defaulting to 1000 [ 434.542045][T11305] bond9: (slave macvlan0): failed to get link speed/duplex [ 434.570461][T20338] geneve1 speed is unknown, defaulting to 1000 [ 434.740445][T20349] netlink: 'syz.3.3289': attribute type 1 has an invalid length. [ 434.750240][T20349] netlink: 'syz.3.3289': attribute type 2 has an invalid length. [ 434.768161][T20349] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3289'. [ 434.789675][T20350] netlink: 'syz.1.3288': attribute type 4 has an invalid length. [ 434.804782][T20352] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3290'. [ 434.813225][T20350] netlink: 17 bytes leftover after parsing attributes in process `syz.1.3288'. [ 434.842676][T20344] bond1: entered allmulticast mode [ 434.861399][T11306] bond9: (slave macvlan0): failed to get link speed/duplex [ 434.877768][T20354] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3290'. [ 434.919081][T20348] bridge1: entered promiscuous mode [ 434.933347][T20348] bridge1: entered allmulticast mode [ 434.944422][T20358] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3289'. [ 434.976087][T20348] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 435.164003][T11290] bond9: (slave macvlan0): failed to get link speed/duplex [ 435.211547][T20349] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3289'. [ 435.384284][T20371] Cannot find set identified by id 65534 to match [ 435.401587][T11290] bond9: (slave macvlan0): failed to get link speed/duplex [ 435.571448][T11314] bond9: (slave macvlan0): failed to get link speed/duplex [ 435.622505][T20378] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 435.662395][T20380] ip6t_srh: unknown srh invflags BA61 [ 435.682060][T11305] bond9: (slave macvlan0): failed to get link speed/duplex [ 435.801577][T11290] bond9: (slave macvlan0): failed to get link speed/duplex [ 435.904331][T20380] bridge0: port 1(bridge_slave_0) entered forwarding state [ 435.931490][T11290] bond9: (slave macvlan0): failed to get link speed/duplex [ 436.010652][T20393] netlink: 'syz.0.3296': attribute type 21 has an invalid length. [ 436.353286][T20406] bond2: entered promiscuous mode [ 436.397282][T20409] vcan1: entered promiscuous mode [ 436.406886][T20409] vcan1: entered allmulticast mode [ 436.417054][T20409] bond2: (slave vcan1): The slave device specified does not support setting the MAC address [ 436.445914][T20409] bond2: (slave vcan1): Error -95 calling set_mac_address [ 436.461123][T20413] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 436.507110][T20418] Bluetooth: MGMT ver 1.23 [ 436.572953][T20422] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3303'. [ 436.656193][T20426] sctp: [Deprecated]: syz.2.3304 (pid 20426) Use of struct sctp_assoc_value in delayed_ack socket option. [ 436.656193][T20426] Use struct sctp_sack_info instead [ 437.026930][T20443] syzkaller0: entered promiscuous mode [ 437.096623][T20443] syzkaller0: entered allmulticast mode [ 437.115156][T20444] lo speed is unknown, defaulting to 1000 [ 437.121685][T20452] tipc: Enabled bearer , priority 0 [ 437.133661][T20444] geneve1 speed is unknown, defaulting to 1000 [ 437.181450][T20441] tipc: Resetting bearer [ 437.190345][T20458] netlink: 'syz.3.3311': attribute type 1 has an invalid length. [ 437.300811][T20441] tipc: Disabling bearer [ 437.372904][T20458] bond3: entered promiscuous mode [ 437.378607][T20458] 8021q: adding VLAN 0 to HW filter on device bond3 [ 437.437393][T20461] 8021q: adding VLAN 0 to HW filter on device bond4 [ 437.448023][T20461] bond3: (slave bond4): making interface the new active one [ 437.456686][T20461] bond4: entered promiscuous mode [ 437.463379][T20461] bond3: (slave bond4): Enslaving as an active interface with an up link [ 437.607213][T20475] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3315'. [ 437.784272][T20486] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3316'. [ 438.704024][T20538] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3331'. [ 438.737291][T20538] IPv6: NLM_F_CREATE should be specified when creating new route [ 438.877226][T20549] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3333'. [ 438.993942][T20555] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3336'. [ 439.036152][T20553] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3335'. [ 439.314855][T20571] veth0: entered promiscuous mode [ 439.320729][T20571] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3337'. [ 439.349258][T20573] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 439.360765][T11306] net_ratelimit: 23 callbacks suppressed [ 439.360789][T11306] bond9: (slave macvlan0): failed to get link speed/duplex [ 439.661167][T11300] bond9: (slave macvlan0): failed to get link speed/duplex [ 439.781665][T11300] bond9: (slave macvlan0): failed to get link speed/duplex [ 439.835808][T20592] netlink: 1028 bytes leftover after parsing attributes in process `syz.3.3344'. [ 439.856954][T20592] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 439.894281][T20596] netlink: 'syz.0.3345': attribute type 6 has an invalid length. [ 439.921375][T11300] bond9: (slave macvlan0): failed to get link speed/duplex [ 440.044189][T11300] bond9: (slave macvlan0): failed to get link speed/duplex [ 440.069128][T20562] veth0: left promiscuous mode [ 440.337120][T11300] bond9: (slave macvlan0): failed to get link speed/duplex [ 440.488952][T20621] __nla_validate_parse: 5 callbacks suppressed [ 440.488974][T20621] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3350'. [ 440.532901][T11290] bond9: (slave macvlan0): failed to get link speed/duplex [ 440.633416][T20629] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3354'. [ 440.641527][T11290] bond9: (slave macvlan0): failed to get link speed/duplex [ 440.761647][T11290] bond9: (slave macvlan0): failed to get link speed/duplex [ 440.784763][T20635] siw: device registration error -23 [ 440.921599][T11300] bond9: (slave macvlan0): failed to get link speed/duplex [ 441.249241][T20668] netlink: 'syz.3.3363': attribute type 1 has an invalid length. [ 441.347789][T20668] bond5: entered promiscuous mode [ 441.353725][T20668] 8021q: adding VLAN 0 to HW filter on device bond5 [ 441.403373][T20669] 8021q: adding VLAN 0 to HW filter on device bond5 [ 441.420130][T20669] bond5: (slave vti0): The slave device specified does not support setting the MAC address [ 441.431206][T20669] bond5: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 441.457256][T20669] bond5: (slave vti0): making interface the new active one [ 441.481674][T20669] vti0: entered promiscuous mode [ 441.488181][T20669] bond5: (slave vti0): Enslaving as an active interface with an up link [ 441.688556][T20692] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3367'. [ 441.878846][T20704] xt_TCPMSS: Only works on TCP SYN packets [ 441.942632][T20706] netlink: 'syz.0.3370': attribute type 142 has an invalid length. [ 441.952313][T20704] syzkaller1: entered promiscuous mode [ 441.957846][T20704] syzkaller1: entered allmulticast mode [ 441.971240][T20706] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3370'. [ 441.993566][T20710] netlink: 'syz.3.3371': attribute type 10 has an invalid length. [ 442.555766][T20740] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3379'. [ 443.073589][T20763] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3384'. [ 443.495525][T20773] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.736582][T20801] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3395'. [ 443.774466][T20801] tipc: Can't bind to reserved service type 1 [ 444.924166][T20789] bridge0: port 2(bridge_slave_1) entered disabled state [ 444.931973][T20789] bridge0: port 1(bridge_slave_0) entered disabled state [ 444.981579][T20789] bridge0: left promiscuous mode [ 444.986905][T20789] bridge0: left allmulticast mode [ 445.351272][ C1] net_ratelimit: 18 callbacks suppressed [ 445.351292][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.365426][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.523964][T20789] veth0_to_team: left promiscuous mode [ 445.529529][T20789] veth0_to_team: left allmulticast mode [ 445.538103][T20862] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3405'. [ 445.593357][T20789] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 445.612626][T20789] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 445.827356][T20789] bridge1: left allmulticast mode [ 445.853553][T20789] bond3: left promiscuous mode [ 445.858555][T20789] bond4: left promiscuous mode [ 445.868402][T20789] bond5: left promiscuous mode [ 445.873665][T20789] vti0: left promiscuous mode [ 445.923659][T20773] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.981639][T11305] bond9: (slave macvlan0): failed to get link speed/duplex [ 446.007405][T11291] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.028990][T11291] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.056452][T11291] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.132165][T20773] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.163806][T20860] lo speed is unknown, defaulting to 1000 [ 446.167508][T11291] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.217525][T20860] geneve1 speed is unknown, defaulting to 1000 [ 446.224185][T20871] netlink: 160 bytes leftover after parsing attributes in process `syz.2.3407'. [ 446.241840][T11306] bond9: (slave macvlan0): failed to get link speed/duplex [ 446.295209][T20773] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.405275][T11290] bond9: (slave macvlan0): failed to get link speed/duplex [ 446.602240][T11291] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.610704][T11291] bond9: (slave macvlan0): failed to get link speed/duplex [ 446.722099][T11306] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.816050][T11305] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.905906][T11313] bond9: (slave macvlan0): failed to get link speed/duplex [ 446.919195][T11305] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.061519][T11305] bond9: (slave macvlan0): failed to get link speed/duplex [ 447.190381][T11306] bond9: (slave macvlan0): failed to get link speed/duplex [ 447.255576][T20921] geneve2: entered promiscuous mode [ 447.299640][T20924] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3416'. [ 447.381445][T11300] bond9: (slave macvlan0): failed to get link speed/duplex [ 447.475099][T20932] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3419'. [ 447.500113][T20932] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3419'. [ 447.520897][T20932] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3419'. [ 447.569774][T20932] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3419'. [ 447.602832][T20936] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3420'. [ 447.626299][T20932] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3419'. [ 447.807141][T20943] x_tables: ip6_tables: DNPT target: used from hooks FORWARD, but only usable from PREROUTING/OUTPUT [ 448.101714][T20951] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 448.109189][T20951] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 448.134052][T20951] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 448.143249][T20951] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 448.328186][T20963] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3427'. [ 448.710974][T20979] netlink: 'syz.1.3430': attribute type 29 has an invalid length. [ 449.767546][T21018] vlan4: entered promiscuous mode [ 449.786608][T21018] bridge0: entered promiscuous mode [ 449.798892][T21020] netlink: 'syz.0.3438': attribute type 2 has an invalid length. [ 449.871567][T21013] syzkaller1: entered promiscuous mode [ 449.904632][T21023] FAULT_INJECTION: forcing a failure. [ 449.904632][T21023] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 449.905822][T21013] syzkaller1: entered allmulticast mode [ 449.919352][T21023] CPU: 0 UID: 0 PID: 21023 Comm: syz.1.3440 Not tainted syzkaller #0 PREEMPT(full) [ 449.919427][T21023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 449.919479][T21023] Call Trace: [ 449.919501][T21023] [ 449.919523][T21023] dump_stack_lvl+0xe8/0x150 [ 449.919638][T21023] should_fail_ex+0x412/0x560 [ 449.919716][T21023] _copy_from_user+0x2d/0xb0 [ 449.919803][T21023] copy_from_sockptr_offset+0x66/0xa0 [ 449.919920][T21023] do_ip6t_set_ctl+0x93d/0xe10 [ 449.920005][T21023] ? rcu_is_watching+0x15/0xb0 [ 449.920089][T21023] ? trace_contention_end+0x3d/0x150 [ 449.920177][T21023] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 449.920298][T21023] ? __pfx___mutex_lock+0x10/0x10 [ 449.920393][T21023] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 449.920487][T21023] ? __pfx_aa_sk_perm+0x10/0x10 [ 449.920568][T21023] nf_setsockopt+0x26f/0x290 [ 449.920653][T21023] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 449.920732][T21023] do_sock_setsockopt+0x17c/0x1b0 [ 449.920816][T21023] __x64_sys_setsockopt+0x13d/0x1b0 [ 449.920901][T21023] do_syscall_64+0x14d/0xf80 [ 449.920974][T21023] ? trace_irq_disable+0x3b/0x150 [ 449.921066][T21023] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.921120][T21023] ? clear_bhb_loop+0x40/0x90 [ 449.921192][T21023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.921266][T21023] RIP: 0033:0x7ff00f59c799 [ 449.921344][T21023] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 449.921388][T21023] RSP: 002b:00007ff010530028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 449.921449][T21023] RAX: ffffffffffffffda RBX: 00007ff00f815fa0 RCX: 00007ff00f59c799 [ 449.921490][T21023] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 449.921522][T21023] RBP: 00007ff010530090 R08: 0000000000000578 R09: 0000000000000000 [ 449.921570][T21023] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 449.921604][T21023] R13: 00007ff00f816038 R14: 00007ff00f815fa0 R15: 00007fff8ab54ca8 [ 449.921687][T21023] [ 450.424842][T11300] net_ratelimit: 18 callbacks suppressed [ 450.424866][T11300] bond9: (slave macvlan0): failed to get link speed/duplex [ 450.655260][T21035] lo speed is unknown, defaulting to 1000 [ 450.661654][T11290] bond9: (slave macvlan0): failed to get link speed/duplex [ 450.725536][T21043] lo speed is unknown, defaulting to 1000 [ 450.731601][T21035] geneve1 speed is unknown, defaulting to 1000 [ 450.741826][T21058] openvswitch: netlink: IP tunnel dst address not specified [ 450.772269][T11313] bond9: (slave macvlan0): failed to get link speed/duplex [ 450.829184][T21064] vlan2: entered promiscuous mode [ 450.887614][T21064] vlan2: entered allmulticast mode [ 450.901251][T21064] hsr_slave_1: entered allmulticast mode [ 450.952324][T21064] __nla_validate_parse: 1 callbacks suppressed [ 450.952348][T21064] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3448'. [ 451.062857][T21043] geneve1 speed is unknown, defaulting to 1000 [ 451.211510][T21083] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 451.539700][T21099] netlink: 'syz.4.3457': attribute type 21 has an invalid length. [ 451.558675][T11300] bond9: (slave macvlan0): failed to get link speed/duplex [ 451.571445][T21099] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3457'. [ 451.586633][T21099] netlink: 3 bytes leftover after parsing attributes in process `syz.4.3457'. [ 451.711630][T11300] bond9: (slave macvlan0): failed to get link speed/duplex [ 451.842427][T11291] bond9: (slave macvlan0): failed to get link speed/duplex [ 451.888025][T21123] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3462'. [ 451.907305][T21123] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3462'. [ 451.937578][T21123] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3462'. [ 451.981186][T11291] bond9: (slave macvlan0): failed to get link speed/duplex [ 452.091505][T11300] bond9: (slave macvlan0): failed to get link speed/duplex [ 452.201727][T11291] bond9: (slave macvlan0): failed to get link speed/duplex [ 452.372596][T21141] netlink: 'syz.4.3465': attribute type 1 has an invalid length. [ 452.401362][T21141] netlink: 'syz.4.3465': attribute type 2 has an invalid length. [ 452.424892][T21141] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3465'. [ 452.859598][T21162] x_tables: ip6_tables: DNPT target: used from hooks FORWARD, but only usable from PREROUTING/OUTPUT [ 453.178804][T21170] xt_hashlimit: max too large, truncated to 1048576 [ 453.197726][T21170] xt_hashlimit: overflow, try lower: 18446744073709551608/8 [ 453.226178][T21170] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3471'. [ 453.546182][T21183] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3475'. [ 453.597570][T21190] Cannot find del_set index 1536 as target [ 453.782331][T21183] veth3: entered promiscuous mode [ 454.065465][T21211] syzkaller1: entered promiscuous mode [ 454.101345][T21211] syzkaller1: entered allmulticast mode [ 454.237779][T21222] netlink: 92 bytes leftover after parsing attributes in process `syz.2.3482'. [ 454.348179][T21232] pim6reg: entered allmulticast mode [ 454.430661][T21223] pim6reg: left allmulticast mode [ 454.877132][T21261] syzkaller0: entered promiscuous mode [ 454.917312][T21261] syzkaller0: entered allmulticast mode [ 455.109622][T21261] bond2: option tlb_dynamic_lb: invalid value (5) [ 455.124233][T21261] bond2 (unregistering): Released all slaves [ 455.243700][T21279] tipc: Enabled bearer , priority 0 [ 455.269848][T21279] netlink: 'syz.4.3494': attribute type 13 has an invalid length. [ 455.765691][T11313] net_ratelimit: 19 callbacks suppressed [ 455.765714][T11313] bond9: (slave macvlan0): failed to get link speed/duplex [ 455.805351][T21310] netlink: 'syz.1.3501': attribute type 4 has an invalid length. [ 455.844732][T21310] nbd: must specify at least one socket [ 456.286293][T21332] netlink: 'syz.2.3503': attribute type 1 has an invalid length. [ 456.671768][T21342] ipt_REJECT: TCP_RESET invalid for non-tcp [ 457.472953][T21351] netlink: 'syz.4.3508': attribute type 1 has an invalid length. [ 457.539838][T21352] netlink: 'syz.4.3508': attribute type 5 has an invalid length. [ 458.912235][T21313] veth5: entered promiscuous mode [ 458.933893][ T9127] tipc: Node number set to 2452599395 [ 458.952253][T11306] bond9: (slave macvlan0): failed to get link speed/duplex [ 459.148323][T21356] __nla_validate_parse: 6 callbacks suppressed [ 459.148345][T21356] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3509'. [ 459.166813][T21360] openvswitch: netlink: Tunnel attr 10416 out of range max 16 [ 459.193074][T21362] netlink: 79 bytes leftover after parsing attributes in process `syz.2.3510'. [ 459.278711][T21366] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3513'. [ 459.291561][ T12] bond9: (slave macvlan0): failed to get link speed/duplex [ 459.521149][ T12] bond9: (slave macvlan0): failed to get link speed/duplex [ 459.675391][T11306] bond9: (slave macvlan0): failed to get link speed/duplex [ 459.750529][T21387] netlink: 'syz.2.3514': attribute type 21 has an invalid length. [ 459.769579][T21389] hsr0: entered promiscuous mode [ 459.802463][ T12] bond9: (slave macvlan0): failed to get link speed/duplex [ 459.823854][T21389] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3517'. [ 459.829818][T21387] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3514'. [ 459.895526][T21399] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3520'. [ 459.917096][T11290] bond9: (slave macvlan0): failed to get link speed/duplex [ 459.958102][T21387] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3514'. [ 460.028897][T21384] sctp: [Deprecated]: syz.2.3514 (pid 21384) Use of int in maxseg socket option. [ 460.028897][T21384] Use struct sctp_assoc_value instead [ 460.051154][T11306] bond9: (slave macvlan0): failed to get link speed/duplex [ 460.061311][T21409] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3518'. [ 460.191215][ T12] bond9: (slave macvlan0): failed to get link speed/duplex [ 460.221277][T21412] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3521'. [ 460.333376][T21416] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3522'. [ 460.771245][T11306] net_ratelimit: 4 callbacks suppressed [ 460.771266][T11306] bond9: (slave macvlan0): failed to get link speed/duplex [ 460.922170][ T12] bond9: (slave macvlan0): failed to get link speed/duplex [ 461.051238][T11306] bond9: (slave macvlan0): failed to get link speed/duplex [ 461.172239][ T12] bond9: (slave macvlan0): failed to get link speed/duplex [ 461.304525][T11290] bond9: (slave macvlan0): failed to get link speed/duplex [ 461.624660][ T12] bond9: (slave macvlan0): failed to get link speed/duplex [ 461.751980][ T12] bond9: (slave macvlan0): failed to get link speed/duplex [ 461.862932][ T12] bond9: (slave macvlan0): failed to get link speed/duplex [ 462.007562][T11314] bond9: (slave macvlan0): failed to get link speed/duplex [ 462.101199][T21527] netlink: 'syz.2.3546': attribute type 21 has an invalid length. [ 462.121654][T11285] bond9: (slave macvlan0): failed to get link speed/duplex [ 462.296470][T21538] netlink: 'syz.2.3551': attribute type 21 has an invalid length. [ 462.454580][T21547] netlink: 'syz.3.3552': attribute type 1 has an invalid length. [ 465.376689][T21559] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 465.513804][T21584] netlink: 'syz.2.3559': attribute type 1 has an invalid length. [ 465.680019][T21584] 8021q: adding VLAN 0 to HW filter on device bond2 [ 465.742597][T21596] __nla_validate_parse: 11 callbacks suppressed [ 465.742619][T21596] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3564'. [ 465.814076][T11313] net_ratelimit: 9 callbacks suppressed [ 465.814098][T11313] bond9: (slave macvlan0): failed to get link speed/duplex [ 465.965835][ T12] bond9: (slave macvlan0): failed to get link speed/duplex [ 466.061327][T21607] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3565'. [ 466.101614][T21607] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3565'. [ 466.111959][ T12] bond9: (slave macvlan0): failed to get link speed/duplex [ 466.143709][T21607] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3565'. [ 466.161970][T21607] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3565'. [ 466.171558][T21607] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3565'. [ 466.224416][T11313] bond9: (slave macvlan0): failed to get link speed/duplex [ 466.345301][T11313] bond9: (slave macvlan0): failed to get link speed/duplex [ 466.359999][T21618] netlink: 'syz.0.3569': attribute type 21 has an invalid length. [ 466.390101][T21618] netlink: 'syz.0.3569': attribute type 22 has an invalid length. [ 466.421891][T21618] netlink: 'syz.0.3569': attribute type 23 has an invalid length. [ 466.459280][T21618] netlink: 'syz.0.3569': attribute type 25 has an invalid length. [ 466.472265][T21618] netlink: 'syz.0.3569': attribute type 26 has an invalid length. [ 466.480239][ T12] bond9: (slave macvlan0): failed to get link speed/duplex [ 466.493223][T21618] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3569'. [ 466.611181][T11313] bond9: (slave macvlan0): failed to get link speed/duplex [ 466.646298][T21628] lo speed is unknown, defaulting to 1000 [ 466.654445][T21628] geneve1 speed is unknown, defaulting to 1000 [ 466.904363][T21643] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3574'. [ 466.941181][T11313] bond9: (slave macvlan0): failed to get link speed/duplex [ 466.955918][T21643] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3574'. [ 467.061421][ T12] bond9: (slave macvlan0): failed to get link speed/duplex [ 467.157653][T21629] syzkaller1: entered promiscuous mode [ 467.198447][T21629] syzkaller1: entered allmulticast mode [ 467.276179][T11314] bond9: (slave macvlan0): failed to get link speed/duplex [ 467.395721][T21652] lo speed is unknown, defaulting to 1000 [ 467.415098][T21652] geneve1 speed is unknown, defaulting to 1000 [ 467.765895][T21669] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3575'. [ 468.026272][T21664] lo speed is unknown, defaulting to 1000 [ 468.047055][T21664] geneve1 speed is unknown, defaulting to 1000 [ 468.176514][T21682] RDS: rds_bind could not find a transport for 4004:0:20:0:c002:0:20:0, load rds_tcp or rds_rdma? [ 468.305290][T21679] 8021q: adding VLAN 0 to HW filter on device bond6 [ 468.630448][T14580] IPVS: starting estimator thread 0... [ 468.644063][T21699] netlink: 'syz.1.3585': attribute type 30 has an invalid length. [ 468.731587][T21705] IPVS: using max 26 ests per chain, 62400 per kthread [ 468.795439][T21699] bond2: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4) [ 468.807829][T21699] bond2 (unregistering): Released all slaves [ 468.897037][T21708] lo speed is unknown, defaulting to 1000 [ 468.918730][T21708] geneve1 speed is unknown, defaulting to 1000 [ 468.946300][T21707] lo speed is unknown, defaulting to 1000 [ 469.020767][T21707] geneve1 speed is unknown, defaulting to 1000 [ 470.327021][T21783] IPVS: persistence engine module ip_vs_pe_ not found [ 470.380714][T21784] bond1: option fail_over_mac: invalid value (127) [ 470.399803][T21784] bond1 (unregistering): Released all slaves [ 470.624503][T21792] 8021q: adding VLAN 0 to HW filter on device bond2 [ 470.769604][T21792] bond3: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 470.795707][T21792] bond3 (unregistering): Released all slaves [ 470.851242][T11313] net_ratelimit: 18 callbacks suppressed [ 470.851265][T11313] bond9: (slave macvlan0): failed to get link speed/duplex [ 471.041776][T11313] bond9: (slave macvlan0): failed to get link speed/duplex [ 471.176406][T11305] bond9: (slave macvlan0): failed to get link speed/duplex [ 471.215595][T21833] __nla_validate_parse: 7 callbacks suppressed [ 471.215615][T21833] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3614'. [ 471.481446][T11305] bond9: (slave macvlan0): failed to get link speed/duplex [ 471.553652][T21850] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 471.573747][T21850] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 471.625194][T21850] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 471.632913][T21850] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 471.721401][T11313] bond9: (slave macvlan0): failed to get link speed/duplex [ 471.855351][T11313] bond9: (slave macvlan0): failed to get link speed/duplex [ 471.981641][T11313] bond9: (slave macvlan0): failed to get link speed/duplex [ 472.027542][T21877] netlink: 'syz.0.3624': attribute type 1 has an invalid length. [ 472.120872][T21883] netlink: 'syz.1.3625': attribute type 2 has an invalid length. [ 472.145184][T21877] bond1: entered promiscuous mode [ 472.157638][T21877] 8021q: adding VLAN 0 to HW filter on device bond1 [ 472.185277][T21886] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3625'. [ 472.195309][T21878] syzkaller1: entered promiscuous mode [ 472.202099][T21878] syzkaller1: entered allmulticast mode [ 472.209659][T21885] openvswitch: netlink: IPv4 tunnel dst address is zero [ 472.221190][T11305] bond9: (slave macvlan0): failed to get link speed/duplex [ 472.263320][T21882] 8021q: adding VLAN 0 to HW filter on device bond1 [ 472.283132][T21882] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 472.347229][T21882] bond1: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 472.372743][T21882] bond1: (slave vcan1): making interface the new active one [ 472.395764][T21882] vcan1: entered promiscuous mode [ 472.414198][T21882] bond1: (slave vcan1): Enslaving as an active interface with an up link [ 472.462069][T21883] !: entered promiscuous mode [ 472.493254][T21881] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3626'. [ 472.614090][T21905] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3629'. [ 472.645237][T21904] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3630'. [ 472.776287][T21897] syzkaller0: entered promiscuous mode [ 472.777394][T21916] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3630'. [ 472.810438][T21897] syzkaller0: entered allmulticast mode [ 472.841975][T11305] bond9: (slave macvlan0): failed to get link speed/duplex [ 472.896444][T21922] veth0_virt_wifi: entered promiscuous mode [ 472.907506][T21922] macsec1: entered allmulticast mode [ 472.924232][T21922] veth0_virt_wifi: entered allmulticast mode [ 472.946241][T21922] veth0_virt_wifi: left allmulticast mode [ 472.955664][T21922] veth0_virt_wifi: left promiscuous mode [ 475.510269][T21962] tipc: Enabling of bearer rejected, failed to enable media [ 475.644254][T21965] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3641'. [ 475.961406][T11314] net_ratelimit: 7 callbacks suppressed [ 475.961429][T11314] bond9: (slave macvlan0): failed to get link speed/duplex [ 476.092219][T11314] bond9: (slave macvlan0): failed to get link speed/duplex [ 476.201455][T11290] bond9: (slave macvlan0): failed to get link speed/duplex [ 476.218265][T21999] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 476.280017][T22007] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3651'. [ 476.308650][T22007] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 476.326072][T22007] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 476.339946][T22003] netlink: 5 bytes leftover after parsing attributes in process `syz.0.3649'. [ 476.349159][T11314] bond9: (slave macvlan0): failed to get link speed/duplex [ 476.370062][T22012] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3651'. [ 476.389553][T22003] ..0{X: renamed from gretap0 (while UP) [ 476.402873][T22003] ..0{X: entered allmulticast mode [ 476.411471][T22012] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 476.440551][T22003] A link change request failed with some changes committed already. Interface ..0{X may have been left with an inconsistent configuration, please check. [ 476.458312][T22012] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 476.946699][T22039] netlink: 'syz.3.3657': attribute type 21 has an invalid length. [ 476.990222][T22039] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3657'. [ 477.019533][T22042] netlink: 'syz.0.3658': attribute type 12 has an invalid length. [ 477.045057][T22039] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3657'. [ 477.313379][T22060] netlink: 'syz.4.3664': attribute type 4 has an invalid length. [ 477.354649][T22065] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3663'. [ 477.479976][T22074] FAULT_INJECTION: forcing a failure. [ 477.479976][T22074] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 477.501885][T22068] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 477.516336][T22068] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 477.559890][T22074] CPU: 1 UID: 0 PID: 22074 Comm: syz.2.3668 Not tainted syzkaller #0 PREEMPT(full) [ 477.559920][T22074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 477.559934][T22074] Call Trace: [ 477.559942][T22074] [ 477.559951][T22074] dump_stack_lvl+0xe8/0x150 [ 477.559987][T22074] should_fail_ex+0x412/0x560 [ 477.560018][T22074] _copy_from_user+0x2d/0xb0 [ 477.560051][T22074] sctp_setsockopt+0x1c4/0x12c0 [ 477.560080][T22074] ? sock_common_setsockopt+0x36/0xc0 [ 477.560105][T22074] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 477.560134][T22074] do_sock_setsockopt+0x17c/0x1b0 [ 477.560170][T22074] __x64_sys_setsockopt+0x13d/0x1b0 [ 477.560206][T22074] do_syscall_64+0x14d/0xf80 [ 477.560235][T22074] ? trace_irq_disable+0x3b/0x150 [ 477.560265][T22074] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.560288][T22074] ? clear_bhb_loop+0x40/0x90 [ 477.560316][T22074] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.560337][T22074] RIP: 0033:0x7f4bb939c799 [ 477.560358][T22074] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 477.560376][T22074] RSP: 002b:00007f4bba1be028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 477.560399][T22074] RAX: ffffffffffffffda RBX: 00007f4bb9615fa0 RCX: 00007f4bb939c799 [ 477.560415][T22074] RDX: 000000000000006e RSI: 0000000000000084 RDI: 0000000000000003 [ 477.560428][T22074] RBP: 00007f4bba1be090 R08: 000000000000002c R09: 0000000000000000 [ 477.560441][T22074] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001 [ 477.560455][T22074] R13: 00007f4bb9616038 R14: 00007f4bb9615fa0 R15: 00007ffc15ef7628 [ 477.560489][T22074] [ 477.934844][T22089] netlink: 'syz.2.3673': attribute type 1 has an invalid length. [ 477.955698][T22089] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3673'. [ 477.996417][T22089] netlink: 1 bytes leftover after parsing attributes in process `syz.2.3673'. [ 478.020807][T22096] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3670'. [ 478.062301][T22089] netlink: 658 bytes leftover after parsing attributes in process `syz.2.3673'. [ 478.097322][T22105] netlink: 'syz.0.3675': attribute type 11 has an invalid length. [ 478.106531][T22090] netlink: 'syz.2.3673': attribute type 1 has an invalid length. [ 479.182128][T22136] gre1: entered allmulticast mode [ 479.647844][T22156] FAULT_INJECTION: forcing a failure. [ 479.647844][T22156] name failslab, interval 1, probability 0, space 0, times 0 [ 479.661093][T22156] CPU: 0 UID: 0 PID: 22156 Comm: syz.1.3683 Not tainted syzkaller #0 PREEMPT(full) [ 479.661122][T22156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 479.661136][T22156] Call Trace: [ 479.661144][T22156] [ 479.661153][T22156] dump_stack_lvl+0xe8/0x150 [ 479.661188][T22156] should_fail_ex+0x412/0x560 [ 479.661220][T22156] should_failslab+0xa8/0x100 [ 479.661245][T22156] ? sctp_get_port_local+0x6f2/0x1730 [ 479.661276][T22156] kmem_cache_alloc_noprof+0x87/0x650 [ 479.661309][T22156] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 479.661342][T22156] sctp_get_port_local+0x6f2/0x1730 [ 479.661384][T22156] ? __pfx_sctp_get_port_local+0x10/0x10 [ 479.661416][T22156] ? sctp_bind_addr_match+0x28b/0x2b0 [ 479.661447][T22156] sctp_do_bind+0x4f1/0x9d0 [ 479.661488][T22156] sctp_connect_new_asoc+0x270/0x6b0 [ 479.661523][T22156] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 479.661556][T22156] ? __ipv6_addr_type+0x14d/0x2f0 [ 479.661590][T22156] ? sctp_inet6_send_verify+0x6e/0x300 [ 479.661612][T22156] ? sctp_endpoint_lookup_assoc+0xd1/0x260 [ 479.661646][T22156] __sctp_connect+0x5cb/0xdc0 [ 479.661688][T22156] ? __pfx___sctp_connect+0x10/0x10 [ 479.661715][T22156] ? sctp_setsockopt+0x21c/0x12c0 [ 479.661741][T22156] ? security_sctp_bind_connect+0x7e/0x2c0 [ 479.661779][T22156] ? __sctp_setsockopt_connectx+0xc7/0x190 [ 479.661816][T22156] sctp_setsockopt+0x708/0x12c0 [ 479.661844][T22156] ? sock_common_setsockopt+0x36/0xc0 [ 479.661869][T22156] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 479.661898][T22156] do_sock_setsockopt+0x17c/0x1b0 [ 479.661934][T22156] __x64_sys_setsockopt+0x13d/0x1b0 [ 479.661971][T22156] do_syscall_64+0x14d/0xf80 [ 479.662000][T22156] ? trace_irq_disable+0x3b/0x150 [ 479.662030][T22156] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.662053][T22156] ? clear_bhb_loop+0x40/0x90 [ 479.662080][T22156] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.662102][T22156] RIP: 0033:0x7ff00f59c799 [ 479.662123][T22156] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 479.662141][T22156] RSP: 002b:00007ff010530028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 479.662170][T22156] RAX: ffffffffffffffda RBX: 00007ff00f815fa0 RCX: 00007ff00f59c799 [ 479.662186][T22156] RDX: 000000000000006e RSI: 0000000000000084 RDI: 0000000000000003 [ 479.662200][T22156] RBP: 00007ff010530090 R08: 000000000000002c R09: 0000000000000000 [ 479.662213][T22156] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001 [ 479.662227][T22156] R13: 00007ff00f816038 R14: 00007ff00f815fa0 R15: 00007fff8ab54ca8 [ 479.662262][T22156] [ 480.034173][T22159] IPv6: NLM_F_CREATE should be specified when creating new route [ 480.148587][T22165] lo speed is unknown, defaulting to 1000 [ 480.156695][T22165] geneve1 speed is unknown, defaulting to 1000 [ 480.280707][T22165] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input6 [ 480.886741][T22196] netlink: 'syz.1.3691': attribute type 3 has an invalid length. [ 481.007932][ T8203] net_ratelimit: 30 callbacks suppressed [ 481.007956][ T8203] bond9: (slave macvlan0): failed to get link speed/duplex [ 481.541765][T11305] bond9: (slave macvlan0): failed to get link speed/duplex [ 481.651163][T11305] bond9: (slave macvlan0): failed to get link speed/duplex [ 481.708953][T22208] lo speed is unknown, defaulting to 1000 [ 481.717911][T22216] FAULT_INJECTION: forcing a failure. [ 481.717911][T22216] name failslab, interval 1, probability 0, space 0, times 0 [ 481.763441][T22208] geneve1 speed is unknown, defaulting to 1000 [ 481.771413][T22216] CPU: 1 UID: 0 PID: 22216 Comm: syz.1.3696 Not tainted syzkaller #0 PREEMPT(full) [ 481.771443][T22216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 481.771462][T22216] Call Trace: [ 481.771470][T22216] [ 481.771478][T22216] dump_stack_lvl+0xe8/0x150 [ 481.771515][T22216] should_fail_ex+0x412/0x560 [ 481.771545][T22216] should_failslab+0xa8/0x100 [ 481.771583][T22216] __kmalloc_cache_noprof+0x88/0x660 [ 481.771607][T22216] ? sctp_add_bind_addr+0x8c/0x370 [ 481.771630][T22216] ? __pfx_sctp_get_port_local+0x10/0x10 [ 481.771665][T22216] sctp_add_bind_addr+0x8c/0x370 [ 481.771688][T22216] ? sctp_auto_asconf_init+0x15c/0x1e0 [ 481.771722][T22216] sctp_do_bind+0x5b2/0x9d0 [ 481.771764][T22216] sctp_connect_new_asoc+0x270/0x6b0 [ 481.771797][T22216] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 481.771829][T22216] ? __ipv6_addr_type+0x14d/0x2f0 [ 481.771863][T22216] ? sctp_inet6_send_verify+0x6e/0x300 [ 481.771886][T22216] ? sctp_endpoint_lookup_assoc+0xd1/0x260 [ 481.771919][T22216] __sctp_connect+0x5cb/0xdc0 [ 481.771963][T22216] ? __pfx___sctp_connect+0x10/0x10 [ 481.772001][T22216] ? sctp_setsockopt+0x21c/0x12c0 [ 481.772026][T22216] ? security_sctp_bind_connect+0x7e/0x2c0 [ 481.772062][T22216] ? __sctp_setsockopt_connectx+0xc7/0x190 [ 481.772105][T22216] sctp_setsockopt+0x708/0x12c0 [ 481.772132][T22216] ? sock_common_setsockopt+0x36/0xc0 [ 481.772157][T22216] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 481.772185][T22216] do_sock_setsockopt+0x17c/0x1b0 [ 481.772221][T22216] __x64_sys_setsockopt+0x13d/0x1b0 [ 481.772258][T22216] do_syscall_64+0x14d/0xf80 [ 481.772287][T22216] ? trace_irq_disable+0x3b/0x150 [ 481.772318][T22216] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.772340][T22216] ? clear_bhb_loop+0x40/0x90 [ 481.772367][T22216] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.772388][T22216] RIP: 0033:0x7ff00f59c799 [ 481.772408][T22216] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 481.772427][T22216] RSP: 002b:00007ff010530028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 481.772450][T22216] RAX: ffffffffffffffda RBX: 00007ff00f815fa0 RCX: 00007ff00f59c799 [ 481.772485][T22216] RDX: 000000000000006e RSI: 0000000000000084 RDI: 0000000000000003 [ 481.772498][T22216] RBP: 00007ff010530090 R08: 000000000000002c R09: 0000000000000000 [ 481.772512][T22216] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001 [ 481.772526][T22216] R13: 00007ff00f816038 R14: 00007ff00f815fa0 R15: 00007fff8ab54ca8 [ 481.772569][T22216] [ 482.035130][T11312] bond9: (slave macvlan0): failed to get link speed/duplex [ 482.126382][T22223] __nla_validate_parse: 10 callbacks suppressed [ 482.126407][T22223] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3699'. [ 482.184008][T11304] bond9: (slave macvlan0): failed to get link speed/duplex [ 482.431262][T11312] bond9: (slave macvlan0): failed to get link speed/duplex [ 482.568431][T11312] bond9: (slave macvlan0): failed to get link speed/duplex [ 482.684468][T11296] bond9: (slave macvlan0): failed to get link speed/duplex [ 482.695250][T22244] netem: incorrect gi model size [ 482.700689][T22244] netem: change failed [ 482.785373][T22248] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3705'. [ 482.795062][T22248] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3705'. [ 482.813551][T22251] Bluetooth: MGMT ver 1.23 [ 482.830254][T22248] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3705'. [ 482.871472][T11296] bond9: (slave macvlan0): failed to get link speed/duplex [ 482.881601][T22255] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3704'. [ 482.923822][T22248] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3705'. [ 483.008118][T22261] FAULT_INJECTION: forcing a failure. [ 483.008118][T22261] name failslab, interval 1, probability 0, space 0, times 0 [ 483.024410][T22259] tipc: Enabling of bearer rejected, failed to enable media [ 483.038900][T22261] CPU: 0 UID: 0 PID: 22261 Comm: syz.4.3708 Not tainted syzkaller #0 PREEMPT(full) [ 483.038929][T22261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 483.038960][T22261] Call Trace: [ 483.038968][T22261] [ 483.038977][T22261] dump_stack_lvl+0xe8/0x150 [ 483.039013][T22261] should_fail_ex+0x412/0x560 [ 483.039045][T22261] should_failslab+0xa8/0x100 [ 483.039073][T22261] __kmalloc_cache_noprof+0x88/0x660 [ 483.039094][T22261] ? sctp_v6_to_sk_saddr+0x100/0x1c0 [ 483.039120][T22261] ? sctp_association_new+0x89/0x25e0 [ 483.039149][T22261] ? __asan_memcpy+0x40/0x70 [ 483.039193][T22261] sctp_association_new+0x89/0x25e0 [ 483.039223][T22261] ? sctp_do_bind+0x661/0x9d0 [ 483.039257][T22261] ? __ipv6_addr_type+0x14d/0x2f0 [ 483.039304][T22261] sctp_connect_new_asoc+0x2e4/0x6b0 [ 483.039336][T22261] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 483.039369][T22261] ? __ipv6_addr_type+0x14d/0x2f0 [ 483.039402][T22261] ? sctp_inet6_send_verify+0x6e/0x300 [ 483.039424][T22261] ? sctp_endpoint_lookup_assoc+0xd1/0x260 [ 483.039457][T22261] __sctp_connect+0x5cb/0xdc0 [ 483.039500][T22261] ? __pfx___sctp_connect+0x10/0x10 [ 483.039527][T22261] ? sctp_setsockopt+0x21c/0x12c0 [ 483.039554][T22261] ? security_sctp_bind_connect+0x7e/0x2c0 [ 483.039591][T22261] ? __sctp_setsockopt_connectx+0xc7/0x190 [ 483.039617][T22261] sctp_setsockopt+0x708/0x12c0 [ 483.039645][T22261] ? sock_common_setsockopt+0x36/0xc0 [ 483.039670][T22261] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 483.039697][T22261] do_sock_setsockopt+0x17c/0x1b0 [ 483.039733][T22261] __x64_sys_setsockopt+0x13d/0x1b0 [ 483.039769][T22261] do_syscall_64+0x14d/0xf80 [ 483.039799][T22261] ? trace_irq_disable+0x3b/0x150 [ 483.039830][T22261] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.039851][T22261] ? clear_bhb_loop+0x40/0x90 [ 483.039877][T22261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.039899][T22261] RIP: 0033:0x7f1ab599c799 [ 483.039919][T22261] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 483.039938][T22261] RSP: 002b:00007f1ab687d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 483.039961][T22261] RAX: ffffffffffffffda RBX: 00007f1ab5c15fa0 RCX: 00007f1ab599c799 [ 483.039977][T22261] RDX: 000000000000006e RSI: 0000000000000084 RDI: 0000000000000003 [ 483.039990][T22261] RBP: 00007f1ab687d090 R08: 000000000000002c R09: 0000000000000000 [ 483.040004][T22261] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001 [ 483.040018][T22261] R13: 00007f1ab5c16038 R14: 00007f1ab5c15fa0 R15: 00007ffc1f2dbb18 [ 483.040053][T22261] [ 483.302840][T11296] bond9: (slave macvlan0): failed to get link speed/duplex [ 483.508848][T22278] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 483.768303][T22299] 9: renamed from lo [ 483.784252][T22299] team0: Device 9 is loopback device. Loopback devices can't be added as a team port [ 483.913102][T22313] netlink: 'syz.1.3720': attribute type 2 has an invalid length. [ 483.929437][T22313] : entered promiscuous mode [ 483.940618][T22313] netlink: 'syz.1.3720': attribute type 2 has an invalid length. [ 483.969184][T22313] : left promiscuous mode [ 484.308114][T22331] Cannot find add_set index 0 as target [ 484.331787][T22331] Cannot find add_set index 0 as target [ 484.354262][T22331] Cannot find add_set index 0 as target [ 484.360110][T22331] Cannot find add_set index 0 as target [ 484.369156][T22335] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3726'. [ 484.378149][T22331] Cannot find add_set index 0 as target [ 484.386321][T22331] Cannot find add_set index 0 as target [ 484.406444][T22335] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 484.414611][T22331] Cannot find add_set index 0 as target [ 484.446852][T22335] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 484.464679][T22331] Cannot find add_set index 0 as target [ 484.470579][T22331] Cannot find add_set index 0 as target [ 484.494478][T22331] Cannot find add_set index 0 as target [ 484.597539][T22341] IPVS: set_ctl: invalid protocol: 2 0.0.0.0:20003 [ 484.721741][T22346] tipc: Enabled bearer , priority 0 [ 484.766373][T11296] bond0: (slave bond_slave_0): interface is now down [ 484.781380][T11296] bond0: (slave bond_slave_1): interface is now down [ 484.805018][T11296] bond0: now running without any active interface! [ 485.117757][T22343] tipc: Disabling bearer [ 485.276077][T22362] sch_tbf: burst 3 is lower than device ip6tnl0 mtu (1452) ! [ 485.315117][T22362] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3732'. [ 485.315117][T22369] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3732'. [ 485.343262][T22369] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 485.398994][T22366] lo speed is unknown, defaulting to 1000 [ 485.408368][T22366] geneve1 speed is unknown, defaulting to 1000 [ 485.819574][T22391] netlink: 332 bytes leftover after parsing attributes in process `syz.3.3737'. [ 485.851327][T22391] netlink: 'syz.3.3737': attribute type 9 has an invalid length. [ 486.086738][T11296] net_ratelimit: 21 callbacks suppressed [ 486.086761][T11296] bond9: (slave macvlan0): failed to get link speed/duplex [ 486.221536][T11300] bond9: (slave macvlan0): failed to get link speed/duplex [ 486.351714][T11300] bond9: (slave macvlan0): failed to get link speed/duplex [ 486.438208][T22421] lo speed is unknown, defaulting to 1000 [ 486.481411][T11304] bond9: (slave macvlan0): failed to get link speed/duplex [ 486.521637][T22421] geneve1 speed is unknown, defaulting to 1000 [ 486.613135][T11304] bond9: (slave macvlan0): failed to get link speed/duplex [ 486.621515][T22432] tunl0: Caught tx_queue_len zero misconfig [ 486.658574][T22429] netlink: 'syz.2.3748': attribute type 1 has an invalid length. [ 486.987598][T22429] bond1: entered promiscuous mode [ 487.007643][T22429] 8021q: adding VLAN 0 to HW filter on device bond1 [ 487.066018][T11300] bond9: (slave macvlan0): failed to get link speed/duplex [ 487.337676][T22434] lo speed is unknown, defaulting to 1000 [ 487.344181][T11304] bond9: (slave macvlan0): failed to get link speed/duplex [ 487.382162][T22434] geneve1 speed is unknown, defaulting to 1000 [ 487.522581][T22467] IPVS: set_ctl: invalid protocol: 92 127.0.0.1:20000 [ 487.553016][T22456] lo speed is unknown, defaulting to 1000 [ 487.560675][T22456] geneve1 speed is unknown, defaulting to 1000 [ 487.575742][T22468] __nla_validate_parse: 7 callbacks suppressed [ 487.575765][T22468] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3752'. [ 487.680044][T22421] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3745'. [ 487.991205][T11300] bond9: (slave macvlan0): failed to get link speed/duplex [ 488.245782][T11300] bond9: (slave macvlan0): failed to get link speed/duplex [ 488.264617][T22460] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3751'. [ 488.361596][T11300] bond9: (slave macvlan0): failed to get link speed/duplex [ 488.822187][T22503] lo speed is unknown, defaulting to 1000 [ 488.825724][T22504] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3759'. [ 488.859554][T22503] geneve1 speed is unknown, defaulting to 1000 [ 489.002376][T22504] netlink: 'syz.4.3759': attribute type 10 has an invalid length. [ 489.088093][T22504] team0: Device veth1_macvtap failed to register rx_handler [ 489.155170][T22511] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3761'. [ 489.437553][T22525] netlink: 'syz.1.3763': attribute type 5 has an invalid length. [ 489.680388][T22548] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3767'. [ 489.837886][T22555] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3768'. [ 489.848474][T22555] netem: unknown loss type 13 [ 489.854028][T22555] netem: change failed [ 490.343398][T22573] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3774'. [ 491.091492][T11312] net_ratelimit: 17 callbacks suppressed [ 491.091515][T11312] bond9: (slave macvlan0): failed to get link speed/duplex [ 491.211242][T11305] bond9: (slave macvlan0): failed to get link speed/duplex [ 491.321644][T11296] bond9: (slave macvlan0): failed to get link speed/duplex [ 491.431839][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 491.440502][T11305] bond9: (slave macvlan0): failed to get link speed/duplex [ 491.551363][T11304] bond9: (slave macvlan0): failed to get link speed/duplex [ 491.661479][T11305] bond9: (slave macvlan0): failed to get link speed/duplex [ 491.771396][T11312] bond9: (slave macvlan0): failed to get link speed/duplex [ 491.881578][T11304] bond9: (slave macvlan0): failed to get link speed/duplex [ 491.991987][T11305] bond9: (slave macvlan0): failed to get link speed/duplex [ 492.101974][T11304] bond9: (slave macvlan0): failed to get link speed/duplex [ 492.339366][ T30] audit: type=1800 audit(1772392259.070:13): pid=22588 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3777" name="memory.events" dev="tmpfs" ino=683 res=0 errno=0 [ 492.442121][T22527] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 492.648677][T22594] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3780'. [ 492.716552][T22600] netlink: 'syz.2.3779': attribute type 64 has an invalid length. [ 492.855007][T22613] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3779'. [ 493.212620][T22633] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3787'. [ 494.198648][T22676] Cannot find del_set index 4 as target [ 494.923951][T22704] netlink: 'syz.1.3806': attribute type 1 has an invalid length. [ 495.154525][T22708] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3806'. [ 495.173045][T22708] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3806'. [ 495.355793][T22721] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3808'. [ 495.387630][T22704] bond3: (slave geneve3): making interface the new active one [ 495.405239][T22704] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 495.438448][T22708] 8021q: adding VLAN 0 to HW filter on device bond3 [ 495.548591][T22732] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 495.582917][T22715] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3808'. [ 495.662184][T22715] nbd: socks must be embedded in a SOCK_ITEM attr [ 495.699452][T11312] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 495.742199][T22461] block nbd64: NBD_DISCONNECT [ 495.748500][T11312] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 495.921169][T11312] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 495.970806][T11312] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 496.054954][T22748] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3813'. [ 496.112861][T11312] net_ratelimit: 26 callbacks suppressed [ 496.112884][T11312] bond9: (slave macvlan0): failed to get link speed/duplex [ 496.142853][T22461] udevd[22461]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 496.323154][T22754] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 496.350755][T22762] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3818'. [ 496.411108][T11305] bond9: (slave macvlan0): failed to get link speed/duplex [ 496.640629][T22777] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3825'. [ 496.725071][T11305] dummy0: left allmulticast mode [ 496.734683][T11305] bridge0: port 4(dummy0) entered disabled state [ 496.749471][T11305] team0: left allmulticast mode [ 496.755742][T11305] team_slave_0: left allmulticast mode [ 496.761779][T11305] team_slave_1: left allmulticast mode [ 496.778151][T11305] team0: left promiscuous mode [ 496.793166][T11305] team_slave_0: left promiscuous mode [ 496.804456][T11305] team_slave_1: left promiscuous mode [ 496.816452][T11305] bridge0: port 3(team0) entered disabled state [ 496.862662][T11305] bridge_slave_1: left allmulticast mode [ 496.877601][T11305] bridge_slave_1: left promiscuous mode [ 496.883942][T11305] bridge0: port 2(bridge_slave_1) entered disabled state [ 496.904665][T11305] bridge_slave_0: left allmulticast mode [ 496.910905][T11305] bridge_slave_0: left promiscuous mode [ 497.048934][T11305] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.237491][T11305] bond1 (unregistering): (slave ip6gre1): Releasing backup interface [ 497.696019][T11305] team0: Port device bridge5 removed [ 497.828887][T11305] bond9 (unregistering): (slave macvlan0): Removing an active aggregator [ 497.839576][T11305] bond9 (unregistering): (slave macvlan0): Releasing backup interface [ 497.861287][T11305] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 497.872964][T11305] bond0 (unregistering): Released all slaves [ 497.884265][T11305] bond1 (unregistering): Released all slaves [ 497.899281][T11305] bond2 (unregistering): Released all slaves [ 497.916449][T11305] bond3 (unregistering): Released all slaves [ 497.935175][T11305] bond4 (unregistering): Released all slaves [ 497.950753][T11305] bond5 (unregistering): Released all slaves [ 497.972613][T11305] bond6 (unregistering): (slave batadv1): Releasing backup interface [ 497.985710][T11305] bond6 (unregistering): Released all slaves [ 498.000620][T11305] bond7 (unregistering): Released all slaves [ 498.021408][T11305] bond8 (unregistering): Released all slaves [ 498.036586][T11305] bond9 (unregistering): Released all slaves [ 498.053735][T11305] bond10 (unregistering): (slave veth5): Releasing active interface [ 498.062270][T11305] batadv2: entered promiscuous mode [ 498.076810][T11305] bond10 (unregistering): (slave batadv2): Releasing active interface [ 498.087286][T11305] bond10 (unregistering): Released all slaves [ 498.398445][T22806] IPVS: Unknown mcast interface: dvmrp1 [ 498.443039][T11305] tipc: Disabling bearer [ 498.475447][T11305] tipc: Left network mode [ 498.896214][T22841] xt_CT: You must specify a L4 protocol and not use inversions on it [ 498.897483][T22840] xt_CT: You must specify a L4 protocol and not use inversions on it [ 498.949603][T22844] __nla_validate_parse: 1 callbacks suppressed [ 498.949624][T22844] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3839'. [ 499.031622][T22844] syzkaller1: entered promiscuous mode [ 499.037171][T22844] syzkaller1: entered allmulticast mode [ 499.069839][T22849] netlink: 41 bytes leftover after parsing attributes in process `syz.1.3840'. [ 499.095760][T22849] netlink: 116 bytes leftover after parsing attributes in process `syz.1.3840'. [ 499.116672][T22849] netlink: 41 bytes leftover after parsing attributes in process `syz.1.3840'. [ 499.240257][T22849] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3840'. [ 499.710431][T22858] netlink: 7060 bytes leftover after parsing attributes in process `syz.1.3842'. [ 499.730334][T22858] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3842'. [ 499.784962][T22860] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 499.823643][T22865] netlink: 7060 bytes leftover after parsing attributes in process `syz.1.3842'. [ 499.945990][T22873] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3845'. [ 500.443943][T22895] lo speed is unknown, defaulting to 1000 [ 500.474462][T22895] geneve1 speed is unknown, defaulting to 1000 [ 500.476288][T22900] pim6reg1: entered allmulticast mode [ 500.491310][T22906] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.3853'. [ 500.503115][T22907] netlink: 'syz.2.3853': attribute type 10 has an invalid length. [ 500.542543][T22907] bridge0: port 3(netdevsim0) entered blocking state [ 500.566895][T22907] bridge0: port 3(netdevsim0) entered disabled state [ 500.580662][T22907] bridge0: port 3(netdevsim0) entered blocking state [ 500.587616][T22907] bridge0: port 3(netdevsim0) entered forwarding state [ 501.235278][T22920] syzkaller0: entered promiscuous mode [ 501.241576][T22920] syzkaller0: entered allmulticast mode [ 501.521826][T11305] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 501.540197][T11305] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 501.623992][T11305] batadv0: left allmulticast mode [ 502.008099][T22983] netlink: 'syz.0.3870': attribute type 2 has an invalid length. [ 502.287977][T11305] team0 (unregistering): Port device team_slave_1 removed [ 502.306834][T11305] team0 (unregistering): Port device team_slave_0 removed [ 502.506677][T14576] lo speed is unknown, defaulting to 1000 [ 502.513188][T14576] syz2: Port: 1 Link DOWN [ 502.621735][T22994] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 502.653142][T22994] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 502.668883][T22994] bond0 (unregistering): Released all slaves [ 502.799845][T23002] netlink: 'syz.3.3874': attribute type 1 has an invalid length. [ 502.940474][T23008] bond7: (slave geneve3): making interface the new active one [ 502.949643][T23008] bond7: (slave geneve3): Enslaving as an active interface with an up link [ 503.007605][T23002] bond7 (unregistering): (slave geneve3): Releasing active interface [ 503.017055][T23016] FAULT_INJECTION: forcing a failure. [ 503.017055][T23016] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 503.048893][T23016] CPU: 1 UID: 0 PID: 23016 Comm: syz.0.3877 Not tainted syzkaller #0 PREEMPT(full) [ 503.048923][T23016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 503.048937][T23016] Call Trace: [ 503.048945][T23016] [ 503.048954][T23016] dump_stack_lvl+0xe8/0x150 [ 503.048988][T23016] should_fail_ex+0x412/0x560 [ 503.049016][T23016] _copy_from_user+0x2d/0xb0 [ 503.049048][T23016] sctp_setsockopt+0x1c4/0x12c0 [ 503.049076][T23016] ? sock_common_setsockopt+0x36/0xc0 [ 503.049101][T23016] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 503.049127][T23016] do_sock_setsockopt+0x17c/0x1b0 [ 503.049161][T23016] __x64_sys_setsockopt+0x13d/0x1b0 [ 503.049207][T23016] do_syscall_64+0x14d/0xf80 [ 503.049236][T23016] ? trace_irq_disable+0x3b/0x150 [ 503.049267][T23016] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.049290][T23016] ? clear_bhb_loop+0x40/0x90 [ 503.049316][T23016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.049338][T23016] RIP: 0033:0x7ff1d479c799 [ 503.049358][T23016] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 503.049505][T23016] RSP: 002b:00007ff1d56ef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 503.049533][T23016] RAX: ffffffffffffffda RBX: 00007ff1d4a15fa0 RCX: 00007ff1d479c799 [ 503.049553][T23016] RDX: 000000000000006e RSI: 0000000000000084 RDI: 0000000000000003 [ 503.049566][T23016] RBP: 00007ff1d56ef090 R08: 000000000000001e R09: 0000000000000000 [ 503.049578][T23016] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001 [ 503.049591][T23016] R13: 00007ff1d4a16038 R14: 00007ff1d4a15fa0 R15: 00007ffc09db7168 [ 503.049629][T23016] [ 503.238173][T23022] netlink: 'syz.4.3876': attribute type 2 has an invalid length. [ 503.248376][T23002] bond7 (unregistering): Released all slaves [ 503.472039][T23024] bond2: entered promiscuous mode [ 503.479033][T23024] bond2: entered allmulticast mode [ 503.485819][T23024] 8021q: adding VLAN 0 to HW filter on device bond2 [ 503.669722][T11305] IPVS: stop unused estimator thread 0... [ 503.752453][ T5825] Bluetooth: hci5: command 0x041b tx timeout [ 503.835331][T23044] geneve1 speed is unknown, defaulting to 1000 [ 503.877915][T23043] netlink: 'syz.4.3882': attribute type 1 has an invalid length. [ 504.516052][T23083] geneve1 speed is unknown, defaulting to 1000 [ 504.634695][T23095] __nla_validate_parse: 7 callbacks suppressed [ 504.634720][T23095] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3892'. [ 504.701421][T23095] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3892'. [ 504.710387][T23095] netlink: 'syz.0.3892': attribute type 14 has an invalid length. [ 504.751231][T23095] netlink: 'syz.0.3892': attribute type 13 has an invalid length. [ 504.832247][T23104] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3892'. [ 504.841592][T23104] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3892'. [ 504.935729][T23109] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3896'. [ 504.955836][T23107] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3895'. [ 505.150608][T23111] tipc: Failed to remove unknown binding: 66,0,0/0:2317656766/2317656767 [ 505.170335][T23111] tipc: Failed to remove unknown binding: 66,0,0/0:2317656766/2317656767 [ 505.199749][T23115] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3898'. [ 505.209221][T23114] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3898'. [ 505.385877][T23124] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3897'. [ 505.634337][T23145] SET target dimension over the limit! [ 505.937179][T23163] geneve1 speed is unknown, defaulting to 1000 [ 506.023773][T23170] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3905'. [ 506.233730][ T5825] Bluetooth: hci1: command 0x0405 tx timeout [ 506.266584][T23186] netlink: 'syz.4.3907': attribute type 12 has an invalid length. [ 506.406946][T23197] netlink: 'syz.3.3910': attribute type 10 has an invalid length. [ 506.440692][T23192] geneve1 speed is unknown, defaulting to 1000 [ 506.453819][T23197] team0: Port device dummy0 added [ 506.461769][T23197] netlink: 'syz.3.3910': attribute type 10 has an invalid length. [ 506.475494][T23198] netlink: 'syz.3.3910': attribute type 10 has an invalid length. [ 506.515672][T23197] team0: Port device dummy0 removed [ 506.539613][T23197] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 506.794969][T23203] bond0: up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms [ 506.804958][T23203] bond0: down delay (4) is not a multiple of miimon (100), value rounded to 0 ms [ 507.066570][T23221] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 507.113904][T23214] geneve1 speed is unknown, defaulting to 1000 [ 507.343332][T23234] syzkaller0: entered promiscuous mode [ 507.348937][T23234] syzkaller0: entered allmulticast mode [ 507.821180][T23263] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 507.930597][T23269] bond1: Removing last ns target with arp_interval on [ 508.056479][T23276] ip6gre1: entered promiscuous mode [ 508.062256][T23276] ip6gre1: entered allmulticast mode [ 508.330287][T23288] netlink: 'syz.4.3930': attribute type 5 has an invalid length. [ 508.898497][T23322] vcan0: tx drop: invalid da for name 0x00000000000000ee [ 509.288618][T23346] netlink: 'syz.4.3941': attribute type 1 has an invalid length. [ 509.482550][T23351] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 509.494319][T23351] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 509.942597][T23384] __nla_validate_parse: 21 callbacks suppressed [ 509.942621][T23384] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3950'. [ 510.019800][T23384] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3950'. [ 510.803450][T23421] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3954'. [ 511.038030][T23430] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.166433][T23444] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3960'. [ 511.188426][T23444] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3960'. [ 511.304388][T23430] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.565857][T23430] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.768928][T23430] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.796391][T23472] netlink: 'syz.2.3965': attribute type 1 has an invalid length. [ 511.888669][T23472] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 511.955180][T23472] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 512.315993][T11297] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.363848][T11295] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.413723][T11301] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.465883][T11301] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.656091][T23520] rdma_rxe: rxe_newlink: failed to add lo [ 512.668233][T23520] IPVS: stopping backup sync thread 22732 ... [ 513.196740][T23545] netlink: 'syz.1.3977': attribute type 30 has an invalid length. [ 513.308999][T23545] bond4: option arp_missed_max: invalid value (0) [ 513.342874][T23545] bond4: option arp_missed_max: allowed values 1 - 255 [ 513.364112][T23545] bond4 (unregistering): Released all slaves [ 513.421450][T23558] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3983'. [ 513.896819][T23567] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3984'. [ 513.991394][ T5833] Bluetooth: hci4: command 0x0406 tx timeout [ 514.220214][T23600] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3990'. [ 514.232632][T23602] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 32, id = 0 [ 514.385769][T23608] debugfs: 'netdev:syzkaller0' already exists in 'phy39' [ 514.723276][T23630] tipc: Enabled bearer , priority 0 [ 514.761773][T23630] syzkaller0: entered promiscuous mode [ 514.767446][T23630] syzkaller0: entered allmulticast mode [ 514.833202][T23640] FAULT_INJECTION: forcing a failure. [ 514.833202][T23640] name failslab, interval 1, probability 0, space 0, times 0 [ 514.891099][T23640] CPU: 0 UID: 0 PID: 23640 Comm: syz.2.4000 Not tainted syzkaller #0 PREEMPT(full) [ 514.891129][T23640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 514.891142][T23640] Call Trace: [ 514.891150][T23640] [ 514.891159][T23640] dump_stack_lvl+0xe8/0x150 [ 514.891194][T23640] should_fail_ex+0x412/0x560 [ 514.891227][T23640] should_failslab+0xa8/0x100 [ 514.891254][T23640] __kmalloc_cache_noprof+0x88/0x660 [ 514.891276][T23640] ? __sctp_v6_cmp_addr+0x1e6/0x510 [ 514.891302][T23640] ? sctp_add_bind_addr+0x8c/0x370 [ 514.891332][T23640] sctp_add_bind_addr+0x8c/0x370 [ 514.891362][T23640] sctp_copy_local_addr_list+0x314/0x4f0 [ 514.891392][T23640] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 514.891417][T23640] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 514.891444][T23640] ? sctp_v6_is_any+0x64/0x80 [ 514.891478][T23640] ? sctp_copy_one_addr+0x93/0x360 [ 514.891507][T23640] sctp_bind_addr_copy+0xb3/0x3c0 [ 514.891533][T23640] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 514.891572][T23640] sctp_connect_new_asoc+0x2ff/0x6b0 [ 514.891606][T23640] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 514.891640][T23640] ? __ipv6_addr_type+0x14d/0x2f0 [ 514.891674][T23640] ? sctp_inet6_send_verify+0x6e/0x300 [ 514.891696][T23640] ? sctp_endpoint_lookup_assoc+0xd1/0x260 [ 514.891730][T23640] __sctp_connect+0x5cb/0xdc0 [ 514.891773][T23640] ? __pfx___sctp_connect+0x10/0x10 [ 514.891800][T23640] ? sctp_setsockopt+0x21c/0x12c0 [ 514.891826][T23640] ? security_sctp_bind_connect+0x7e/0x2c0 [ 514.891864][T23640] ? __sctp_setsockopt_connectx+0xc7/0x190 [ 514.891891][T23640] sctp_setsockopt+0x708/0x12c0 [ 514.891918][T23640] ? sock_common_setsockopt+0x36/0xc0 [ 514.891943][T23640] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 514.891969][T23640] do_sock_setsockopt+0x17c/0x1b0 [ 514.892004][T23640] __x64_sys_setsockopt+0x13d/0x1b0 [ 514.892040][T23640] do_syscall_64+0x14d/0xf80 [ 514.892069][T23640] ? trace_irq_disable+0x3b/0x150 [ 514.892099][T23640] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.892122][T23640] ? clear_bhb_loop+0x40/0x90 [ 514.892149][T23640] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.892171][T23640] RIP: 0033:0x7f4bb939c799 [ 514.892192][T23640] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 514.892211][T23640] RSP: 002b:00007f4bba1be028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 514.892235][T23640] RAX: ffffffffffffffda RBX: 00007f4bb9615fa0 RCX: 00007f4bb939c799 [ 514.892251][T23640] RDX: 000000000000006e RSI: 0000000000000084 RDI: 0000000000000003 [ 514.892264][T23640] RBP: 00007f4bba1be090 R08: 000000000000001e R09: 0000000000000000 [ 514.892277][T23640] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001 [ 514.892291][T23640] R13: 00007f4bb9616038 R14: 00007f4bb9615fa0 R15: 00007ffc15ef7628 [ 514.892327][T23640] [ 515.259227][T23630] tipc: Resetting bearer [ 515.361098][T23658] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 515.365220][T23630] tipc: Disabling bearer [ 515.398742][T23650] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4002'. [ 515.437196][T23643] mac80211_hwsim hwsim38 syzkaller0: entered promiscuous mode [ 515.475216][T23643] mac80211_hwsim hwsim38 syzkaller0: entered allmulticast mode [ 515.488990][T23650] netlink: 'syz.2.4002': attribute type 13 has an invalid length. [ 515.502176][T23660] netlink: 112 bytes leftover after parsing attributes in process `syz.1.4005'. [ 515.526435][T23650] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4002'. [ 515.563405][T23665] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4007'. [ 515.648240][T23666] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4006'. [ 515.707879][T23665] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4007'. [ 515.714353][T23669] : entered promiscuous mode [ 515.749625][ T5825] Bluetooth: hci1: link tx timeout [ 515.765400][ T5825] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 515.778719][T23603] block nbd64: NBD_DISCONNECT [ 516.226542][T23603] udevd[23603]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 516.559002][T23704] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4011'. [ 516.712395][T23716] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4013'. [ 516.760614][T23716] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4013'. [ 516.760614][T23718] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4013'. [ 516.846295][T23721] netlink: 'syz.1.4014': attribute type 18 has an invalid length. [ 516.865441][T23716] 8021q: adding VLAN 0 to HW filter on device bond4 [ 516.907933][T23718] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 517.832052][ T5833] Bluetooth: hci1: command 0x0405 tx timeout [ 518.753677][T23741] lec:lec_atm_close: lec0: Shut down! [ 519.437421][T23828] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 519.744633][T23841] bond8: option arp_all_targets: invalid value (129) [ 519.766730][T23841] bond8 (unregistering): Released all slaves [ 519.905784][T23851] syzkaller0: entered promiscuous mode [ 519.941594][T23851] syzkaller0: entered allmulticast mode [ 520.208913][T23858] syzkaller1: entered promiscuous mode [ 520.226322][T23858] syzkaller1: entered allmulticast mode [ 520.306291][T14576] IPVS: starting estimator thread 0... [ 520.319973][T23875] netlink: 'syz.0.4045': attribute type 1 has an invalid length. [ 520.366110][T23882] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 520.421927][T23878] IPVS: using max 25 ests per chain, 60000 per kthread [ 520.695632][T23892] __nla_validate_parse: 4 callbacks suppressed [ 520.695656][T23892] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4049'. [ 521.092416][T23911] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4053'. [ 521.123197][T23915] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4054'. [ 521.290454][T23924] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.4056'. [ 521.315669][T23924] netlink: Conntrack attr has 3 unknown bytes [ 521.474784][T23928] geneve1 speed is unknown, defaulting to 1000 [ 522.046399][T23967] veth1_macvtap: left promiscuous mode [ 522.062094][T23967] macsec0: entered promiscuous mode [ 522.084677][T23967] veth1_macvtap: entered promiscuous mode [ 522.102404][T23967] macsec0: left promiscuous mode [ 522.148930][T23967] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4068'. [ 522.309849][T23974] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4070'. [ 522.751405][T24005] geneve1 speed is unknown, defaulting to 1000 [ 523.575466][T24033] syzkaller0: entered promiscuous mode [ 523.597904][T24033] syzkaller0: entered allmulticast mode [ 523.855399][T24067] netlink: 'syz.4.4092': attribute type 1 has an invalid length. [ 526.114930][T11312] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 526.142552][T11312] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 526.183757][T24067] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 526.315534][T24078] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4095'. [ 526.579178][T24093] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4100'. [ 526.602310][T24093] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4100'. [ 526.908190][T24106] geneve1 speed is unknown, defaulting to 1000 [ 528.107832][T24143] syzkaller1: entered promiscuous mode [ 528.119317][T24143] syzkaller1: entered allmulticast mode [ 528.179256][T24153] hsr0: entered allmulticast mode [ 528.214721][T24153] hsr_slave_0: entered allmulticast mode [ 528.228788][T24153] hsr_slave_1: entered allmulticast mode [ 528.260654][T24153] A link change request failed with some changes committed already. Interface hsr0 may have been left with an inconsistent configuration, please check. [ 528.299526][ T5486] lec:lec_start_xmit: lec0:No lecd attached [ 528.470915][T24171] tipc: Enabled bearer , priority 0 [ 528.586087][T24171] tipc: Disabling bearer [ 528.962193][T24208] netlink: 624 bytes leftover after parsing attributes in process `syz.3.4122'. [ 529.000855][T24208] openvswitch: netlink: Flow key attr not present in new flow. [ 529.016082][T24208] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4122'. [ 529.026875][T24215] lo: Caught tx_queue_len zero misconfig [ 529.055548][T24216] policy can only be matched on NF_INET_PRE_ROUTING [ 529.055572][T24216] unable to load match [ 529.069584][T24208] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4122'. [ 529.079928][T24208] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4122'. [ 529.089377][T24208] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4122'. [ 529.100328][T24208] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4122'. [ 529.966280][T24255] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4134'. [ 530.863801][T24298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 531.213222][T24317] bond4: option arp_interval: invalid value (18446744073709551615) [ 531.222077][T24317] bond4: option arp_interval: allowed values 0 - 2147483647 [ 531.316066][T24317] bond4 (unregistering): Released all slaves [ 531.574887][T24336] ipvlan3: entered promiscuous mode [ 532.089709][T24357] __nla_validate_parse: 209 callbacks suppressed [ 532.089734][T24357] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4156'. [ 532.708109][T24374] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4161'. [ 533.003236][T24390] netlink: 'syz.0.4163': attribute type 3 has an invalid length. [ 533.054467][T24390] netlink: 'syz.0.4163': attribute type 1 has an invalid length. [ 533.064642][T24390] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4163'. [ 533.075112][T24395] netlink: 280 bytes leftover after parsing attributes in process `syz.1.4165'. [ 533.153901][T24389] erspan1: entered promiscuous mode [ 533.302389][T24402] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4167'. [ 533.389463][T24399] netlink: 'syz.4.4167': attribute type 10 has an invalid length. [ 533.648989][T24411] netlink: 84 bytes leftover after parsing attributes in process `syz.2.4169'. [ 534.071734][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5770 ms [ 534.080346][ C0] lec:lec_tx_timeout: lec0 [ 534.085260][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 534.437818][T24438] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4177'. [ 534.473157][T24458] netlink: 'syz.0.4181': attribute type 1 has an invalid length. [ 534.493884][T24438] veth0_macvtap: left promiscuous mode [ 534.501689][T24458] netlink: 'syz.0.4181': attribute type 2 has an invalid length. [ 534.518304][T24458] netlink: 'syz.0.4181': attribute type 1 has an invalid length. [ 534.572735][T24458] netlink: 'syz.0.4181': attribute type 3 has an invalid length. [ 534.604780][T24462] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4182'. [ 534.679589][T24462] dummy0: entered promiscuous mode [ 534.693979][T24462] macvtap1: entered promiscuous mode [ 534.717874][T24462] macvtap1: entered allmulticast mode [ 534.729055][T24462] dummy0: entered allmulticast mode [ 535.070657][T24486] netlink: 180 bytes leftover after parsing attributes in process `syz.2.4187'. [ 535.090298][T24495] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4190'. [ 535.101958][T24486] openvswitch: netlink: Flow key attr not present in new flow. [ 535.303002][T24505] IPVS: set_ctl: invalid protocol: 59 224.0.0.2:20001 [ 535.318682][T24502] bridge_slave_1 (unregistering): left promiscuous mode [ 535.342168][T24505] IPVS: set_ctl: invalid protocol: 59 224.0.0.2:20001 [ 535.349177][T24502] bridge0: port 2(bridge_slave_1) entered disabled state [ 535.448630][T24518] netlink: 'syz.2.4195': attribute type 1 has an invalid length. [ 535.775784][T24539] netdevsim netdevsim2 netdevsim2: entered allmulticast mode [ 535.925172][T24546] netlink: 'syz.0.4201': attribute type 9 has an invalid length. [ 535.980019][T24546] syzkaller0: entered promiscuous mode [ 535.996292][T24546] syzkaller0: entered allmulticast mode [ 536.020202][T24546] 0: reclassify loop, rule prio 0, protocol 800 [ 536.189639][T24549] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 537.435310][T24607] __nla_validate_parse: 6 callbacks suppressed [ 537.435334][T24607] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4214'. [ 537.788858][T24626] netlink: 'syz.1.4219': attribute type 4 has an invalid length. [ 537.856074][T24626] netlink: 212 bytes leftover after parsing attributes in process `syz.1.4219'. [ 537.962872][T24639] tunl0: entered allmulticast mode [ 538.044664][T24632] geneve1 speed is unknown, defaulting to 1000 [ 538.498628][T24648] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 538.852551][T24668] netlink: 140 bytes leftover after parsing attributes in process `syz.3.4225'. [ 539.038465][T24671] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4227'. [ 539.060470][T24671] validate_nla: 1 callbacks suppressed [ 539.060491][T24671] netlink: 'syz.3.4227': attribute type 21 has an invalid length. [ 539.079145][T24673] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4228'. [ 539.111631][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 539.119768][ C0] lec:lec_tx_timeout: lec0 [ 539.125097][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 539.391491][T24687] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4232'. [ 539.408272][T24687] vlan3: entered promiscuous mode [ 539.594401][ T5833] Bluetooth: hci3: command 0x0406 tx timeout [ 539.924019][T24697] syzkaller0: entered promiscuous mode [ 539.929888][T24697] syzkaller0: entered allmulticast mode [ 540.078599][T24701] bridge0: port 2(bridge_slave_1) entered disabled state [ 540.086235][T24701] bridge0: port 1(bridge_slave_0) entered disabled state [ 540.178863][T24701] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 540.229396][T24701] veth1_macvtap: left allmulticast mode [ 540.350003][T11314] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 540.360810][T11314] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.375454][T11314] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 540.385347][T11314] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 540.398216][T11314] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.408264][T11314] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 540.418197][T11314] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 540.427731][T11314] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.437657][T11314] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 540.449271][T11314] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 540.459800][T11314] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.469527][T11314] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 541.368408][T24646] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 541.576752][T24706] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4238'. [ 541.845442][T24723] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4240'. [ 541.865056][T24728] netlink: 'syz.0.4242': attribute type 21 has an invalid length. [ 541.885308][T24728] netlink: 156 bytes leftover after parsing attributes in process `syz.0.4242'. [ 541.905608][T24728] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4242'. [ 542.333539][T24745] bond5: entered promiscuous mode [ 542.359542][T24745] 8021q: adding VLAN 0 to HW filter on device bond5 [ 542.394718][T24745] bond5 (unregistering): Released all slaves [ 542.634016][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.642452][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.990139][T24790] netlink: 'syz.0.4257': attribute type 6 has an invalid length. [ 543.010681][T24790] netlink: 'syz.0.4257': attribute type 6 has an invalid length. [ 543.157092][T24796] __nla_validate_parse: 36 callbacks suppressed [ 543.157111][T24796] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4259'. [ 543.583023][T24802] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4261'. [ 543.594724][T24802] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4261'. [ 543.627071][T24802] team0: entered promiscuous mode [ 543.651275][T24823] FAULT_INJECTION: forcing a failure. [ 543.651275][T24823] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 543.678999][T24802] team_slave_0: entered promiscuous mode [ 543.699452][T24802] team_slave_1: entered promiscuous mode [ 543.719703][T24823] CPU: 0 UID: 0 PID: 24823 Comm: syz.0.4266 Not tainted syzkaller #0 PREEMPT(full) [ 543.719734][T24823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 543.719747][T24823] Call Trace: [ 543.719755][T24823] [ 543.719764][T24823] dump_stack_lvl+0xe8/0x150 [ 543.719798][T24823] should_fail_ex+0x412/0x560 [ 543.719828][T24823] _copy_from_user+0x2d/0xb0 [ 543.719858][T24823] ___sys_recvmsg+0x175/0x590 [ 543.719888][T24823] ? __lock_acquire+0x6b5/0x2cf0 [ 543.719922][T24823] ? __pfx____sys_recvmsg+0x10/0x10 [ 543.719995][T24823] do_recvmmsg+0x334/0x800 [ 543.720036][T24823] ? __pfx_do_recvmmsg+0x10/0x10 [ 543.720081][T24823] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 543.720131][T24823] __x64_sys_recvmmsg+0x198/0x250 [ 543.720168][T24823] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 543.720213][T24823] do_syscall_64+0x14d/0xf80 [ 543.720242][T24823] ? trace_irq_disable+0x3b/0x150 [ 543.720272][T24823] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.720293][T24823] ? clear_bhb_loop+0x40/0x90 [ 543.720320][T24823] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.720358][T24823] RIP: 0033:0x7ff1d479c799 [ 543.720378][T24823] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 543.720397][T24823] RSP: 002b:00007ff1d56ef028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 543.720420][T24823] RAX: ffffffffffffffda RBX: 00007ff1d4a15fa0 RCX: 00007ff1d479c799 [ 543.720436][T24823] RDX: 0400000000000300 RSI: 00002000000031c0 RDI: 0000000000000003 [ 543.720450][T24823] RBP: 00007ff1d56ef090 R08: 0000000000000000 R09: 0000000000000000 [ 543.720464][T24823] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000001 [ 543.720476][T24823] R13: 00007ff1d4a16038 R14: 00007ff1d4a15fa0 R15: 00007ffc09db7168 [ 543.720514][T24823] [ 543.963995][T24802] gretap0: entered promiscuous mode [ 543.992856][T24831] openvswitch: netlink: Key type 7932 is out of range max 32 [ 544.141053][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 544.149301][ C0] lec:lec_tx_timeout: lec0 [ 544.154724][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 546.344953][T24807] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 546.358075][T24861] netlink: 'syz.1.4273': attribute type 1 has an invalid length. [ 546.513700][T24867] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4274'. [ 546.664850][T24880] FAULT_INJECTION: forcing a failure. [ 546.664850][T24880] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 546.701891][T24881] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4279'. [ 546.713373][T24880] CPU: 1 UID: 0 PID: 24880 Comm: syz.0.4277 Not tainted syzkaller #0 PREEMPT(full) [ 546.713404][T24880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 546.713417][T24880] Call Trace: [ 546.713425][T24880] [ 546.713434][T24880] dump_stack_lvl+0xe8/0x150 [ 546.713469][T24880] should_fail_ex+0x412/0x560 [ 546.713499][T24880] _copy_from_user+0x2d/0xb0 [ 546.713541][T24880] ___sys_recvmsg+0x175/0x590 [ 546.713572][T24880] ? __lock_acquire+0x6b5/0x2cf0 [ 546.713605][T24880] ? __pfx____sys_recvmsg+0x10/0x10 [ 546.713679][T24880] do_recvmmsg+0x334/0x800 [ 546.713720][T24880] ? __pfx_do_recvmmsg+0x10/0x10 [ 546.713765][T24880] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 546.713825][T24880] __x64_sys_recvmmsg+0x198/0x250 [ 546.713862][T24880] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 546.713907][T24880] do_syscall_64+0x14d/0xf80 [ 546.713937][T24880] ? trace_irq_disable+0x3b/0x150 [ 546.713967][T24880] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 546.713989][T24880] ? clear_bhb_loop+0x40/0x90 [ 546.714015][T24880] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 546.714037][T24880] RIP: 0033:0x7ff1d479c799 [ 546.714057][T24880] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 546.714074][T24880] RSP: 002b:00007ff1d56ef028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 546.714097][T24880] RAX: ffffffffffffffda RBX: 00007ff1d4a15fa0 RCX: 00007ff1d479c799 [ 546.714113][T24880] RDX: 0400000000000300 RSI: 00002000000031c0 RDI: 0000000000000003 [ 546.714126][T24880] RBP: 00007ff1d56ef090 R08: 0000000000000000 R09: 0000000000000000 [ 546.714139][T24880] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000001 [ 546.714152][T24880] R13: 00007ff1d4a16038 R14: 00007ff1d4a15fa0 R15: 00007ffc09db7168 [ 546.714186][T24880] [ 546.772670][T24881] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4279'. [ 546.966495][T24881] netlink: 'syz.1.4279': attribute type 7 has an invalid length. [ 547.085223][T24889] openvswitch: netlink: Key type 104 is out of range max 32 [ 547.448184][T24914] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4288'. [ 547.520227][T24919] FAULT_INJECTION: forcing a failure. [ 547.520227][T24919] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 547.563926][T24919] CPU: 1 UID: 0 PID: 24919 Comm: syz.0.4291 Not tainted syzkaller #0 PREEMPT(full) [ 547.563958][T24919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 547.563971][T24919] Call Trace: [ 547.563979][T24919] [ 547.563989][T24919] dump_stack_lvl+0xe8/0x150 [ 547.564024][T24919] should_fail_ex+0x412/0x560 [ 547.564056][T24919] _copy_from_user+0x2d/0xb0 [ 547.564088][T24919] ___sys_recvmsg+0x175/0x590 [ 547.564119][T24919] ? __lock_acquire+0x6b5/0x2cf0 [ 547.564152][T24919] ? __pfx____sys_recvmsg+0x10/0x10 [ 547.564225][T24919] do_recvmmsg+0x334/0x800 [ 547.564276][T24919] ? __pfx_do_recvmmsg+0x10/0x10 [ 547.564327][T24919] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 547.564378][T24919] __x64_sys_recvmmsg+0x198/0x250 [ 547.564414][T24919] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 547.564461][T24919] do_syscall_64+0x14d/0xf80 [ 547.564490][T24919] ? trace_irq_disable+0x3b/0x150 [ 547.564528][T24919] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.564550][T24919] ? clear_bhb_loop+0x40/0x90 [ 547.564576][T24919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.564598][T24919] RIP: 0033:0x7ff1d479c799 [ 547.564617][T24919] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 547.564635][T24919] RSP: 002b:00007ff1d56ef028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 547.564658][T24919] RAX: ffffffffffffffda RBX: 00007ff1d4a15fa0 RCX: 00007ff1d479c799 [ 547.564675][T24919] RDX: 0400000000000300 RSI: 00002000000031c0 RDI: 0000000000000003 [ 547.564689][T24919] RBP: 00007ff1d56ef090 R08: 0000000000000000 R09: 0000000000000000 [ 547.564702][T24919] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000001 [ 547.564715][T24919] R13: 00007ff1d4a16038 R14: 00007ff1d4a15fa0 R15: 00007ffc09db7168 [ 547.564750][T24919] [ 547.642166][T24928] netlink: 'syz.3.4292': attribute type 10 has an invalid length. [ 547.905198][T24922] geneve1 speed is unknown, defaulting to 1000 [ 547.945845][T24924] geneve1 speed is unknown, defaulting to 1000 [ 548.218154][T24949] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4294'. [ 548.248512][T24912] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 548.507625][T24960] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4297'. [ 548.585910][T24960] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.698679][T24960] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.801673][T24960] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.882610][T24960] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.925983][T24981] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4302'. [ 549.090706][T11291] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.094128][T24992] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4305'. [ 549.156512][T11314] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.165210][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 549.165286][ C0] lec:lec_tx_timeout: lec0 [ 549.174415][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 549.224176][T24992] syzkaller0: entered promiscuous mode [ 549.235131][T24992] syzkaller0: entered allmulticast mode [ 549.325271][T11301] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.771735][T11291] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.023063][T25020] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4311'. [ 550.047593][T25020] sctp: [Deprecated]: syz.4.4311 (pid 25020) Use of int in max_burst socket option. [ 550.047593][T25020] Use struct sctp_assoc_value instead [ 550.159175][T25029] macvtap1: mtu less than device minimum [ 550.288645][T25030] geneve1 speed is unknown, defaulting to 1000 [ 550.309149][T25031] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4312'. [ 550.837195][T25057] block nbd0: server does not support multiple connections per device. [ 550.866304][T25057] block nbd0: shutting down sockets [ 550.994967][T25077] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4320'. [ 551.035773][T25077] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4320'. [ 551.198657][T25088] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4325'. [ 551.233931][T25088] bridge_slave_1: left allmulticast mode [ 551.259843][T25088] bridge_slave_1: left promiscuous mode [ 551.270142][T25088] bridge0: port 2(bridge_slave_1) entered disabled state [ 551.382393][T25088] bridge_slave_0: left allmulticast mode [ 551.398540][T25088] bridge_slave_0: left promiscuous mode [ 551.426339][T25088] bridge0: port 1(bridge_slave_0) entered disabled state [ 551.434422][T25093] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4321'. [ 551.585558][T25097] netlink: 'syz.0.4326': attribute type 1 has an invalid length. [ 551.682287][T25097] 8021q: adding VLAN 0 to HW filter on device bond5 [ 552.203089][T25132] : renamed from veth0_to_bond (while UP) [ 552.342191][T25136] xt_TCPMSS: Only works on TCP SYN packets [ 552.508921][T25146] mac80211_hwsim hwsim50 wlan1: entered promiscuous mode [ 552.546961][T25152] Cannot find set identified by id 65534 to match [ 552.637274][T25146] mac80211_hwsim hwsim50 wlan1: left promiscuous mode [ 552.680804][T25161] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 552.808651][T25160] geneve1 speed is unknown, defaulting to 1000 [ 553.521799][T25214] bridge0: port 4(syz_tun) entered blocking state [ 553.528410][T25214] bridge0: port 4(syz_tun) entered disabled state [ 553.555040][T25214] syz_tun: entered allmulticast mode [ 553.593605][T25217] __nla_validate_parse: 3 callbacks suppressed [ 553.593628][T25217] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4354'. [ 553.618558][T25214] syz_tun: entered promiscuous mode [ 553.629585][T25214] bridge0: port 4(syz_tun) entered blocking state [ 553.636238][T25214] bridge0: port 4(syz_tun) entered forwarding state [ 553.654389][T25219] netlink: 'syz.3.4355': attribute type 2 has an invalid length. [ 553.736004][T25232] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4354'. [ 554.011883][T25249] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4360'. [ 554.031929][T25250] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 554.110433][T25255] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4362'. [ 554.152902][T25255] netlink: 'syz.1.4362': attribute type 4 has an invalid length. [ 554.181325][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 554.189481][ C0] lec:lec_tx_timeout: lec0 [ 554.194202][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 554.605617][T25275] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 554.700300][T25279] netlink: 'syz.0.4367': attribute type 6 has an invalid length. [ 554.709878][T25279] netlink: 'syz.0.4367': attribute type 7 has an invalid length. [ 554.737144][T25279] netlink: 'syz.0.4367': attribute type 8 has an invalid length. [ 554.782124][T25279] netlink: 'syz.0.4367': attribute type 15 has an invalid length. [ 554.876458][T25279] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 554.877429][T25279] netlink: 148 bytes leftover after parsing attributes in process `syz.0.4367'. [ 554.918407][T25279] netlink: 116 bytes leftover after parsing attributes in process `syz.0.4367'. [ 554.971189][T25279] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4367'. [ 555.452594][T25330] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4372'. [ 555.502531][T25330] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4372'. [ 555.564349][T25320] geneve1 speed is unknown, defaulting to 1000 [ 555.867943][T25349] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4382'. [ 556.102970][T25356] netlink: 'syz.3.4386': attribute type 2 has an invalid length. [ 556.933560][T25396] netlink: 'syz.3.4394': attribute type 5 has an invalid length. [ 557.036448][T25399] bond3: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 557.076382][T25399] bond3: (slave lo): Enslaving as an active interface with an up link [ 557.140610][T25399] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 557.266872][T25406] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 557.514469][T25428] netlink: 'syz.0.4401': attribute type 1 has an invalid length. [ 558.178119][T25473] vcan1: entered promiscuous mode [ 558.215573][T25473] vcan1: entered allmulticast mode [ 558.256236][T25483] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 558.273080][T25479] bond4: entered promiscuous mode [ 558.282015][T25479] 8021q: adding VLAN 0 to HW filter on device bond4 [ 558.408022][T25483] 8021q: adding VLAN 0 to HW filter on device bond8 [ 558.494528][T25493] IPVS: set_ctl: invalid protocol: 98 172.20.20.187:20004 [ 558.516085][T25485] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 558.524046][T25502] netlink: 'syz.2.4421': attribute type 33 has an invalid length. [ 558.544911][T25485] bond8: (slave batadv1): Enslaving as an active interface with an up link [ 558.618292][T25502] `: renamed from team0 (while UP) [ 558.652899][T25504] __nla_validate_parse: 16 callbacks suppressed [ 558.652921][T25504] netlink: 17 bytes leftover after parsing attributes in process `syz.2.4421'. [ 558.838230][T25519] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.174686][T25531] netlink: 'syz.2.4426': attribute type 33 has an invalid length. [ 559.183754][T25531] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4426'. [ 559.202007][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 559.210108][ C0] lec:lec_tx_timeout: lec0 [ 559.214868][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 559.485535][T25519] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.713401][T11290] bond0: (slave dummy0): link status definitely down, disabling slave [ 559.749746][T25519] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.774066][T25540] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4429'. [ 559.814259][T25546] sctp: [Deprecated]: syz.2.4431 (pid 25546) Use of int in maxseg socket option. [ 559.814259][T25546] Use struct sctp_assoc_value instead [ 559.878689][T25519] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.976713][T25547] geneve1 speed is unknown, defaulting to 1000 [ 560.108273][ T12] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.187329][T11301] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.322960][T11290] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.407568][T11290] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.517762][T25576] IPVS: length: 242 != 8 [ 560.613486][T25580] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4436'. [ 560.895880][T25580] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4436'. [ 561.187049][T25593] geneve1 speed is unknown, defaulting to 1000 [ 561.478338][T25607] geneve1 speed is unknown, defaulting to 1000 [ 561.843358][T25636] netlink: 'syz.3.4448': attribute type 1 has an invalid length. [ 561.894283][T25636] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4448'. [ 562.144522][T25647] tipc: Failed to remove unknown binding: 66,0,0/2886997007:3551589849/3551589851 [ 562.195908][T25647] tipc: Failed to remove unknown binding: 66,0,0/2886997007:3551589849/3551589850 [ 562.222733][T25656] netlink: 108 bytes leftover after parsing attributes in process `syz.2.4454'. [ 562.233634][T25647] tipc: Failed to remove unknown binding: 66,0,0/2886997007:3551589849/3551589851 [ 562.244051][T25647] tipc: Failed to remove unknown binding: 66,0,0/2886997007:3551589849/3551589850 [ 562.693049][T25682] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4459'. [ 562.758747][T25682] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4459'. [ 563.106845][T25707] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4466'. [ 563.709418][T25743] netlink: 'syz.1.4471': attribute type 32 has an invalid length. [ 563.942962][T25758] netlink: 'syz.2.4474': attribute type 13 has an invalid length. [ 563.996463][T25762] netlink: 'syz.0.4476': attribute type 32 has an invalid length. [ 564.005871][T25762] __nla_validate_parse: 2 callbacks suppressed [ 564.005890][T25762] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4476'. [ 564.035559][T25757] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4475'. [ 564.103602][T25762] bond6: Setting coupled_control to off (0) [ 564.221496][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 564.229623][ C0] lec:lec_tx_timeout: lec0 [ 564.234467][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 564.248811][T25768] 9iLL: renamed from lo [ 564.405855][T25777] bridge0: entered promiscuous mode [ 564.442216][T25779] bond5: entered allmulticast mode [ 564.447424][T25779] vti0: entered allmulticast mode [ 564.501865][T25779] bond5: left allmulticast mode [ 564.506809][T25779] vti0: left allmulticast mode [ 564.542757][T25783] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4480'. [ 564.557592][T25783] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4480'. [ 564.567319][T25783] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 564.696355][T25795] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4483'. [ 564.780718][T25795] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4483'. [ 564.792231][T25795] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4483'. [ 564.962371][T25802] geneve3: entered promiscuous mode [ 565.366899][T25832] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4493'. [ 565.396186][T25834] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4492'. [ 565.437549][T25836] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4494'. [ 565.506473][T25839] geneve1: entered promiscuous mode [ 565.528240][T25839] geneve1: entered allmulticast mode [ 565.583365][T25843] RDS: rds_bind could not find a transport for fe88::5, load rds_tcp or rds_rdma? [ 565.606606][T11301] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.740450][T11301] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.767165][T11301] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.819231][T11301] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.198380][T25879] geneve1 speed is unknown, defaulting to 1000 [ 567.330115][T25925] netlink: 'syz.1.4514': attribute type 16 has an invalid length. [ 567.345610][T25925] netlink: 'syz.1.4514': attribute type 17 has an invalid length. [ 567.747643][T25947] netlink: 'syz.4.4518': attribute type 33 has an invalid length. [ 567.890139][T25948] geneve1 speed is unknown, defaulting to 1000 [ 568.119654][T25961] syzkaller1: entered promiscuous mode [ 568.143996][T25961] syzkaller1: entered allmulticast mode [ 568.603731][T25978] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.668994][T25996] netlink: 'syz.4.4529': attribute type 3 has an invalid length. [ 568.692052][T25996] nbd: must specify a size in bytes for the device [ 568.784946][T25978] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.940669][T25978] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.241078][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 569.249193][ C0] lec:lec_tx_timeout: lec0 [ 569.254320][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 569.274908][T25978] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.386775][T26019] geneve1 speed is unknown, defaulting to 1000 [ 569.684770][T26037] __nla_validate_parse: 9 callbacks suppressed [ 569.684790][T26037] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4539'. [ 569.706273][T26034] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4538'. [ 569.759561][T26038] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4539'. [ 569.775631][T14575] IPVS: starting estimator thread 0... [ 569.789185][T26035] nbd: must specify at least one socket [ 569.814466][T26043] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4540'. [ 569.832541][T26043] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4540'. [ 569.882338][T26046] IPVS: using max 26 ests per chain, 62400 per kthread [ 570.037595][T26056] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.4542'. [ 570.048816][T26056] netlink: ct family unspecified [ 570.765184][T26101] geneve1 speed is unknown, defaulting to 1000 [ 570.807050][T26104] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 570.897318][T26108] netlink: 260 bytes leftover after parsing attributes in process `syz.2.4553'. [ 570.939002][T26111] netlink: 548 bytes leftover after parsing attributes in process `syz.3.4554'. [ 571.033375][ T5833] Bluetooth: hci1: command 0x0405 tx timeout [ 571.163079][T26117] geneve1 speed is unknown, defaulting to 1000 [ 571.259421][T26128] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4557'. [ 571.379409][T26133] netlink: 'syz.1.4558': attribute type 11 has an invalid length. [ 571.947731][T26155] m1Ie5n: entered promiscuous mode [ 571.959312][T26152] geneve1 speed is unknown, defaulting to 1000 [ 572.330680][T26185] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4570'. [ 572.459555][T26199] netlink: 'syz.1.4569': attribute type 4 has an invalid length. [ 572.680157][T26180] bond5: entered allmulticast mode [ 572.717461][T26209] netlink: 'syz.4.4573': attribute type 15 has an invalid length. [ 572.743504][T26209] netlink: 'syz.4.4573': attribute type 18 has an invalid length. [ 573.184695][T26229] netlink: 'syz.1.4579': attribute type 13 has an invalid length. [ 573.615436][T26236] geneve1 speed is unknown, defaulting to 1000 [ 573.964048][ T30] audit: type=1107 audit(1772392340.690:14): pid=26259 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 573.968338][T26262] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 574.261345][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 574.269455][ C0] lec:lec_tx_timeout: lec0 [ 574.274378][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 574.763048][T26306] netlink: 'syz.4.4597': attribute type 3 has an invalid length. [ 574.832460][T26307] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 575.595244][T26357] __nla_validate_parse: 41 callbacks suppressed [ 575.595265][T26357] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4608'. [ 575.654720][T26357] netlink: 'syz.4.4608': attribute type 1 has an invalid length. [ 575.686526][T26357] netlink: 'syz.4.4608': attribute type 1 has an invalid length. [ 575.735104][T26357] netlink: 11 bytes leftover after parsing attributes in process `syz.4.4608'. [ 576.995949][T26435] team0: No ports can be present during mode change [ 577.014415][T26435] netlink: 'syz.1.4626': attribute type 5 has an invalid length. [ 577.082659][T26441] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4628'. [ 577.151842][T26445] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4630'. [ 577.181932][T26444] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4630'. [ 577.191107][T26445] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4630'. [ 577.268819][T26444] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4630'. [ 577.346464][T26445] veth1: entered promiscuous mode [ 577.359350][T26445] veth0: entered promiscuous mode [ 577.371279][T26461] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 577.386015][T26445] debugfs: 'hsr1' already exists in 'hsr' [ 577.393187][T26445] Cannot create hsr debugfs directory [ 577.677641][T26452] geneve1 speed is unknown, defaulting to 1000 [ 577.727347][T26476] mac80211_hwsim hwsim44 syzkaller0: entered promiscuous mode [ 577.736094][T26476] mac80211_hwsim hwsim44 syzkaller0: entered allmulticast mode [ 578.014681][T26485] geneve1 speed is unknown, defaulting to 1000 [ 578.037437][T26491] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4637'. [ 578.116414][T26491] netlink: 43 bytes leftover after parsing attributes in process `syz.1.4637'. [ 578.126364][T26491] netlink: 'syz.1.4637': attribute type 5 has an invalid length. [ 578.167402][T26491] netlink: 43 bytes leftover after parsing attributes in process `syz.1.4637'. [ 578.320710][T26504] netlink: 'syz.2.4640': attribute type 2 has an invalid length. [ 578.365950][T26506] netlink: 'syz.1.4637': attribute type 13 has an invalid length. [ 578.389073][T26506] netlink: 'syz.1.4637': attribute type 17 has an invalid length. [ 578.416618][T26508] netlink: 'syz.2.4640': attribute type 10 has an invalid length. [ 578.748450][T26506] 8021q: adding VLAN 0 to HW filter on device team0 [ 578.843299][T26506] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 578.869294][T26508] dummy0: entered promiscuous mode [ 578.886267][T26508] bond0: (slave dummy0): Releasing backup interface [ 578.997446][T26508] bridge0: port 5(dummy0) entered blocking state [ 579.032058][T26508] bridge0: port 5(dummy0) entered disabled state [ 579.038874][T26508] dummy0: entered allmulticast mode [ 579.281070][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 579.289210][ C0] lec:lec_tx_timeout: lec0 [ 579.294539][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 579.383771][T26541] lo speed is unknown, defaulting to 1000 [ 579.393169][T26541] lo speed is unknown, defaulting to 1000 [ 579.399857][T26541] lo speed is unknown, defaulting to 1000 [ 579.499846][T26541] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 579.679285][T26541] lo speed is unknown, defaulting to 1000 [ 579.688993][T26541] lo speed is unknown, defaulting to 1000 [ 579.735011][T26541] lo speed is unknown, defaulting to 1000 [ 579.811766][T26541] lo speed is unknown, defaulting to 1000 [ 579.819621][T26541] lo speed is unknown, defaulting to 1000 [ 579.843328][T26541] lo speed is unknown, defaulting to 1000 [ 579.872729][T26541] lo speed is unknown, defaulting to 1000 [ 579.892245][T26541] lo speed is unknown, defaulting to 1000 [ 579.935986][T26541] lo speed is unknown, defaulting to 1000 [ 579.994408][T26541] lo speed is unknown, defaulting to 1000 [ 580.005869][T26552] geneve1 speed is unknown, defaulting to 1000 [ 580.746147][T26601] __nla_validate_parse: 7 callbacks suppressed [ 580.746168][T26601] netlink: 340 bytes leftover after parsing attributes in process `syz.0.4655'. [ 581.073938][T26619] xt_TCPMSS: Only works on TCP SYN packets [ 581.467591][T26643] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4667'. [ 581.708000][T26664] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4671'. [ 581.743577][T26664] netlink: 144 bytes leftover after parsing attributes in process `syz.2.4671'. [ 581.766976][T26670] nftables ruleset with unbound set [ 581.797726][T26664] netlink: 2 bytes leftover after parsing attributes in process `syz.2.4671'. [ 581.807338][T26670] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4673'. [ 581.885603][T26675] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4671'. [ 582.050878][T26680] No such timeout policy "syz0" [ 582.448065][T26700] syzkaller0: entered promiscuous mode [ 582.471821][T26700] syzkaller0: entered allmulticast mode [ 582.499186][T26700] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4681'. [ 582.663008][T26709] veth4: entered allmulticast mode [ 582.708523][T26712] veth4: entered allmulticast mode [ 582.926833][T26728] 8021q: VLANs not supported on syzkaller0 [ 582.944976][T26728] mac80211_hwsim hwsim38 syzkaller0: left promiscuous mode [ 582.958216][T26728] mac80211_hwsim hwsim38 syzkaller0: left allmulticast mode [ 583.107386][T26730] bond5: entered promiscuous mode [ 583.129735][T26730] 8021q: adding VLAN 0 to HW filter on device bond5 [ 583.684418][T26768] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4698'. [ 584.546703][T26806] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4704'. [ 584.744715][T26819] netlink: 'syz.1.4707': attribute type 1 has an invalid length. [ 584.904772][ T10] lo speed is unknown, defaulting to 1000 [ 585.520985][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 6230 ms [ 585.529068][ C0] lec:lec_tx_timeout: lec0 [ 585.535176][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 586.093804][T26841] geneve1 speed is unknown, defaulting to 1000 [ 586.106437][T26841] lo speed is unknown, defaulting to 1000 [ 586.323598][T26853] netlink: 'syz.3.4715': attribute type 4 has an invalid length. [ 586.326131][T26864] IPVS: set_ctl: invalid protocol: 29 172.30.0.2:20001 [ 586.350636][T26857] bond5: option fail_over_mac: invalid value (127) [ 586.376316][T26857] bond5 (unregistering): Released all slaves [ 586.504399][T26861] geneve1 speed is unknown, defaulting to 1000 [ 586.520659][T26861] lo speed is unknown, defaulting to 1000 [ 587.038630][T26883] netlink: 'syz.2.4721': attribute type 1 has an invalid length. [ 587.250776][T26883] bond5: entered promiscuous mode [ 587.276660][T26883] 8021q: adding VLAN 0 to HW filter on device bond5 [ 587.387498][T26902] bond5: (slave veth5): making interface the new active one [ 587.408557][T26902] veth5: entered promiscuous mode [ 587.442597][T26902] bond5: (slave veth5): Enslaving as an active interface with an up link [ 587.629157][T26912] netlink: 'syz.0.4724': attribute type 16 has an invalid length. [ 587.668077][T26907] bridge0: port 1(bridge_slave_0) entered disabled state [ 587.695111][T26912] netlink: 'syz.0.4724': attribute type 17 has an invalid length. [ 587.750249][T26907] bridge0: port 2(bridge_slave_1) entered disabled state [ 587.807175][T26918] siw: device registration error -23 [ 587.985371][T26912] ..0{X: left allmulticast mode [ 588.029417][T26912] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 588.121928][T26929] bridge_slave_1: left allmulticast mode [ 588.127658][T26929] bridge_slave_1: left promiscuous mode [ 588.145661][T26929] bridge0: port 2(bridge_slave_1) entered disabled state [ 588.422338][T26936] geneve1 speed is unknown, defaulting to 1000 [ 588.430374][T26936] lo speed is unknown, defaulting to 1000 [ 588.898675][T26962] bridge2: entered promiscuous mode [ 588.922581][T26962] bridge2: entered allmulticast mode [ 588.954404][T26962] team0: Port device bridge2 added [ 589.239862][T26984] netlink: 'syz.3.4739': attribute type 6 has an invalid length. [ 589.266744][T26984] IPv6: NLM_F_CREATE should be specified when creating new route [ 589.307815][T26984] block nbd1: Unsupported socket: should be TCP or UNIX. [ 589.460539][T26991] geneve1 speed is unknown, defaulting to 1000 [ 589.504490][T26998] __nla_validate_parse: 3 callbacks suppressed [ 589.504514][T26998] netlink: 76 bytes leftover after parsing attributes in process `syz.4.4742'. [ 589.559243][T26991] lo speed is unknown, defaulting to 1000 [ 589.632971][T26987] sctp: [Deprecated]: syz.0.4740 (pid 26987) Use of struct sctp_assoc_value in delayed_ack socket option. [ 589.632971][T26987] Use struct sctp_sack_info instead [ 589.675857][T26988] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4741'. [ 589.935714][T27018] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4747'. [ 589.952733][T27013] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 589.973248][T27018] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4747'. [ 590.108359][T27016] geneve1 speed is unknown, defaulting to 1000 [ 590.121863][T27027] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4748'. [ 590.130297][T27016] lo speed is unknown, defaulting to 1000 [ 590.200135][T27027] dummy0 (unregistering): left allmulticast mode [ 590.493710][T27044] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4753'. [ 590.503680][T27041] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4753'. [ 591.270976][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5730 ms [ 591.279063][ C0] lec:lec_tx_timeout: lec0 [ 591.284234][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 591.497798][T27085] netlink: 'syz.1.4761': attribute type 2 has an invalid length. [ 591.561790][T27085] netlink: 144 bytes leftover after parsing attributes in process `syz.1.4761'. [ 591.727081][T27096] netlink: 'syz.1.4763': attribute type 8 has an invalid length. [ 591.883633][T27104] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4766'. [ 592.772597][T27158] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 593.176433][T27176] netlink: 76 bytes leftover after parsing attributes in process `syz.4.4782'. [ 593.373079][T27179] geneve1 speed is unknown, defaulting to 1000 [ 593.397290][T27179] lo speed is unknown, defaulting to 1000 [ 593.649251][T27197] netlink: 'syz.2.4787': attribute type 10 has an invalid length. [ 593.701773][T27195] netlink: 'syz.2.4787': attribute type 10 has an invalid length. [ 593.792726][T27197] dummy0: left allmulticast mode [ 593.809242][T27197] dummy0: left promiscuous mode [ 593.818135][T27197] bridge0: port 5(dummy0) entered disabled state [ 593.865811][T27197] dummy0: entered promiscuous mode [ 593.883038][T27197] `: Port device dummy0 added [ 593.889342][T27211] netlink: 'syz.1.4790': attribute type 32 has an invalid length. [ 593.931903][T27195] dummy0: left promiscuous mode [ 593.946805][T27195] `: Port device dummy0 removed [ 593.970755][T27195] bond0: (slave dummy0): Enslaving as an active interface with a down link [ 594.066195][T27220] tipc: Enabled bearer , priority 0 [ 594.076408][T27220] mac80211_hwsim hwsim38 syzkaller0: entered promiscuous mode [ 594.094519][T27220] mac80211_hwsim hwsim38 syzkaller0: entered allmulticast mode [ 594.326225][T27239] tipc: Resetting bearer [ 594.708802][T27255] block nbd1: not configured, cannot reconfigure [ 594.873018][T27260] netlink: 'syz.0.4799': attribute type 5 has an invalid length. [ 594.959796][T27265] __nla_validate_parse: 2 callbacks suppressed [ 594.959815][T27265] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4801'. [ 595.061161][ T24] tipc: Node number set to 1743280294 [ 595.172377][T27271] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4804'. [ 595.184486][T27271] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4804'. [ 595.249502][T27272] ip6erspan0: entered allmulticast mode [ 595.604263][T27288] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4808'. [ 595.629798][T27288] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4808'. [ 596.575474][T27335] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 596.696574][T27341] netlink: 256 bytes leftover after parsing attributes in process `syz.1.4824'. [ 596.737015][T27341] netlink: 256 bytes leftover after parsing attributes in process `syz.1.4824'. [ 596.861779][T27348] netlink: 'syz.3.4826': attribute type 1 has an invalid length. [ 596.869586][T27348] netlink: 'syz.3.4826': attribute type 2 has an invalid length. [ 597.110973][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5830 ms [ 597.119115][ C0] lec:lec_tx_timeout: lec0 [ 597.124574][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 597.479995][T27373] ------------[ cut here ]------------ [ 597.486312][T27373] verifier bug: REG INVARIANTS VIOLATION (true_reg2): range bounds violation u64=[0x17, 0x10] s64=[0x17, 0x10] u32=[0x17, 0x10] s32=[0x17, 0x10] var_off=(0x10, 0x0) [ 597.503656][T27373] WARNING: kernel/bpf/verifier.c:2769 at reg_bounds_sanity_check+0x201/0xc30, CPU#1: syz.4.4836/27373 [ 597.515550][T27373] Modules linked in: [ 597.519525][T27373] CPU: 1 UID: 0 PID: 27373 Comm: syz.4.4836 Not tainted syzkaller #0 PREEMPT(full) [ 597.529693][T27373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 597.540614][T27373] RIP: 0010:reg_bounds_sanity_check+0x3e6/0xc30 [ 597.547612][T27373] Code: 98 00 00 00 4c 8b 8c 24 88 00 00 00 41 ff 34 24 41 57 55 41 55 ff b4 24 f0 00 00 00 ff b4 24 a8 00 00 00 ff b4 24 c0 00 00 00 <67> 48 0f b9 3a 48 83 c4 38 49 bf 00 00 00 00 00 fc ff df 48 8b 84 [ 597.568129][T27373] RSP: 0018:ffffc90005d1eeb0 EFLAGS: 00010246 [ 597.574947][T27373] RAX: dffffc0000000000 RBX: 1ffff11009542e12 RCX: 0000000000000017 [ 597.583656][T27373] RDX: ffffffff8bd46f60 RSI: ffffffff8bd4f8a0 RDI: ffffffff90158700 [ 597.592477][T27373] RBP: 0000000000000010 R08: 0000000000000010 R09: 0000000000000017 [ 597.600525][T27373] R10: 00000000000000d0 R11: 0000000000000002 R12: ffff88804aa17090 [ 597.609240][T27373] R13: 0000000000000017 R14: 1ffff11009542e11 R15: 0000000000000010 [ 597.617929][T27373] FS: 00007f1ab687d6c0(0000) GS:ffff888125567000(0000) knlGS:0000000000000000 [ 597.627634][T27373] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 597.634949][T27373] CR2: 00007ff00f817dac CR3: 0000000076250000 CR4: 00000000003526f0 [ 597.643646][T27373] Call Trace: [ 597.646980][T27373] [ 597.649987][T27373] reg_set_min_max+0x28c/0x340 [ 597.655542][T27373] check_cond_jmp_op+0x1db5/0x31a0 [ 597.660753][T27373] ? __pfx_check_cond_jmp_op+0x10/0x10 [ 597.666916][T27373] ? bpf_reset_stack_write_marks+0x1eb/0x260 [ 597.673695][T27373] do_check+0x7970/0x10690 [ 597.678244][T27373] ? __pfx_do_check+0x10/0x10 [ 597.683329][T27373] ? init_func_state+0x1ab2/0x28d0 [ 597.688517][T27373] do_check_common+0x19c8/0x25b0 [ 597.693677][T27373] bpf_check+0x5f3e/0x1ce00 [ 597.698287][T27373] ? rcu_is_watching+0x15/0xb0 [ 597.703238][T27373] ? __lock_acquire+0x6b5/0x2cf0 [ 597.708253][T27373] ? css_rstat_updated+0x23a/0x530 [ 597.714161][T27373] ? __pfx_css_rstat_updated+0x10/0x10 [ 597.719702][T27373] ? pcpu_alloc_noprof+0xe8f/0x19c0 [ 597.725764][T27373] ? __lock_acquire+0x6b5/0x2cf0 [ 597.730811][T27373] ? __pfx_bpf_check+0x10/0x10 [ 597.736300][T27373] ? pcpu_memcg_post_alloc_hook+0x77/0x580 [ 597.742873][T27373] ? pcpu_memcg_post_alloc_hook+0x44a/0x580 [ 597.748886][T27373] ? ktime_get_with_offset+0x93/0x2a0 [ 597.755062][T27373] ? ktime_get_with_offset+0x93/0x2a0 [ 597.760505][T27373] ? __asan_memset+0x22/0x50 [ 597.765855][T27373] ? bpf_lsm_bpf_prog_load+0x9/0x20 [ 597.771847][T27373] ? security_bpf_prog_load+0x125/0x3c0 [ 597.777472][T27373] bpf_prog_load+0x1484/0x1ae0 [ 597.783003][T27373] ? __pfx_bpf_prog_load+0x10/0x10 [ 597.788196][T27373] ? tomoyo_path_number_perm+0x219/0x630 [ 597.794576][T27373] ? bpf_lsm_bpf+0x9/0x20 [ 597.798972][T27373] ? security_bpf+0x7e/0x2d0 [ 597.804295][T27373] __sys_bpf+0x618/0x950 [ 597.808614][T27373] ? __pfx___sys_bpf+0x10/0x10 [ 597.814306][T27373] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 597.820194][T27373] ? __pfx_kcov_ioctl+0x10/0x10 [ 597.825788][T27373] __x64_sys_bpf+0x7c/0x90 [ 597.830292][T27373] do_syscall_64+0x14d/0xf80 [ 597.835474][T27373] ? trace_irq_disable+0x3b/0x150 [ 597.840564][T27373] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.847360][T27373] ? clear_bhb_loop+0x40/0x90 [ 597.852772][T27373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.858747][T27373] RIP: 0033:0x7f1ab599c799 [ 597.863940][T27373] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 597.884326][T27373] RSP: 002b:00007f1ab687d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 597.893603][T27373] RAX: ffffffffffffffda RBX: 00007f1ab5c15fa0 RCX: 00007f1ab599c799 [ 597.902287][T27373] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 597.910334][T27373] RBP: 00007f1ab5a32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 597.919099][T27373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 597.927628][T27379] netlink: 'syz.3.4838': attribute type 21 has an invalid length. [ 597.936397][T27373] R13: 00007f1ab5c16038 R14: 00007f1ab5c15fa0 R15: 00007ffc1f2dbb18 [ 597.945154][T27373] [ 597.948243][T27373] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 597.955595][T27373] CPU: 1 UID: 0 PID: 27373 Comm: syz.4.4836 Not tainted syzkaller #0 PREEMPT(full) [ 597.965015][T27373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 597.975114][T27373] Call Trace: [ 597.978440][T27373] [ 597.981415][T27373] vpanic+0x56c/0xa60 [ 597.985465][T27373] ? __pfx__printk+0x10/0x10 [ 597.990102][T27373] ? __pfx_vpanic+0x10/0x10 [ 597.994669][T27373] ? is_bpf_text_address+0x292/0x2b0 [ 598.000012][T27373] ? is_bpf_text_address+0x26/0x2b0 [ 598.005276][T27373] panic+0xc5/0xd0 [ 598.009145][T27373] ? __pfx_panic+0x10/0x10 [ 598.013711][T27373] __warn+0x315/0x4f0 [ 598.017756][T27373] ? reg_bounds_sanity_check+0x201/0xc30 [ 598.023454][T27373] ? reg_bounds_sanity_check+0x201/0xc30 [ 598.029150][T27373] __report_bug+0x29a/0x540 [ 598.033725][T27373] ? reg_bounds_sanity_check+0x201/0xc30 [ 598.039442][T27373] ? __pfx___report_bug+0x10/0x10 [ 598.044538][T27373] ? bpf_prog_load+0x1484/0x1ae0 [ 598.049597][T27373] report_bug_entry+0x19a/0x290 [ 598.054516][T27373] ? reg_bounds_sanity_check+0x3e6/0xc30 [ 598.060473][T27373] ? reg_bounds_sanity_check+0x3eb/0xc30 [ 598.066145][T27373] handle_bug+0xca/0x200 [ 598.070419][T27373] exc_invalid_op+0x1a/0x50 [ 598.074948][T27373] asm_exc_invalid_op+0x1a/0x20 [ 598.079829][T27373] RIP: 0010:reg_bounds_sanity_check+0x3e6/0xc30 [ 598.086113][T27373] Code: 98 00 00 00 4c 8b 8c 24 88 00 00 00 41 ff 34 24 41 57 55 41 55 ff b4 24 f0 00 00 00 ff b4 24 a8 00 00 00 ff b4 24 c0 00 00 00 <67> 48 0f b9 3a 48 83 c4 38 49 bf 00 00 00 00 00 fc ff df 48 8b 84 [ 598.105755][T27373] RSP: 0018:ffffc90005d1eeb0 EFLAGS: 00010246 [ 598.111864][T27373] RAX: dffffc0000000000 RBX: 1ffff11009542e12 RCX: 0000000000000017 [ 598.119863][T27373] RDX: ffffffff8bd46f60 RSI: ffffffff8bd4f8a0 RDI: ffffffff90158700 [ 598.127871][T27373] RBP: 0000000000000010 R08: 0000000000000010 R09: 0000000000000017 [ 598.135871][T27373] R10: 00000000000000d0 R11: 0000000000000002 R12: ffff88804aa17090 [ 598.143876][T27373] R13: 0000000000000017 R14: 1ffff11009542e11 R15: 0000000000000010 [ 598.151932][T27373] reg_set_min_max+0x28c/0x340 [ 598.156764][T27373] check_cond_jmp_op+0x1db5/0x31a0 [ 598.161948][T27373] ? __pfx_check_cond_jmp_op+0x10/0x10 [ 598.167514][T27373] ? bpf_reset_stack_write_marks+0x1eb/0x260 [ 598.173537][T27373] do_check+0x7970/0x10690 [ 598.178042][T27373] ? __pfx_do_check+0x10/0x10 [ 598.182740][T27373] ? init_func_state+0x1ab2/0x28d0 [ 598.187893][T27373] do_check_common+0x19c8/0x25b0 [ 598.192881][T27373] bpf_check+0x5f3e/0x1ce00 [ 598.197448][T27373] ? rcu_is_watching+0x15/0xb0 [ 598.202301][T27373] ? __lock_acquire+0x6b5/0x2cf0 [ 598.207284][T27373] ? css_rstat_updated+0x23a/0x530 [ 598.212429][T27373] ? __pfx_css_rstat_updated+0x10/0x10 [ 598.217921][T27373] ? pcpu_alloc_noprof+0xe8f/0x19c0 [ 598.223155][T27373] ? __lock_acquire+0x6b5/0x2cf0 [ 598.228133][T27373] ? __pfx_bpf_check+0x10/0x10 [ 598.233008][T27373] ? pcpu_memcg_post_alloc_hook+0x77/0x580 [ 598.238848][T27373] ? pcpu_memcg_post_alloc_hook+0x44a/0x580 [ 598.244806][T27373] ? ktime_get_with_offset+0x93/0x2a0 [ 598.250206][T27373] ? ktime_get_with_offset+0x93/0x2a0 [ 598.255639][T27373] ? __asan_memset+0x22/0x50 [ 598.260364][T27373] ? bpf_lsm_bpf_prog_load+0x9/0x20 [ 598.265596][T27373] ? security_bpf_prog_load+0x125/0x3c0 [ 598.271175][T27373] bpf_prog_load+0x1484/0x1ae0 [ 598.275986][T27373] ? __pfx_bpf_prog_load+0x10/0x10 [ 598.281132][T27373] ? tomoyo_path_number_perm+0x219/0x630 [ 598.286842][T27373] ? bpf_lsm_bpf+0x9/0x20 [ 598.291203][T27373] ? security_bpf+0x7e/0x2d0 [ 598.295820][T27373] __sys_bpf+0x618/0x950 [ 598.300109][T27373] ? __pfx___sys_bpf+0x10/0x10 [ 598.304917][T27373] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 598.310766][T27373] ? __pfx_kcov_ioctl+0x10/0x10 [ 598.315751][T27373] __x64_sys_bpf+0x7c/0x90 [ 598.320203][T27373] do_syscall_64+0x14d/0xf80 [ 598.324822][T27373] ? trace_irq_disable+0x3b/0x150 [ 598.329879][T27373] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 598.335977][T27373] ? clear_bhb_loop+0x40/0x90 [ 598.340686][T27373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 598.346620][T27373] RIP: 0033:0x7f1ab599c799 [ 598.351061][T27373] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 598.370697][T27373] RSP: 002b:00007f1ab687d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 598.379144][T27373] RAX: ffffffffffffffda RBX: 00007f1ab5c15fa0 RCX: 00007f1ab599c799 [ 598.387143][T27373] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 598.395140][T27373] RBP: 00007f1ab5a32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 598.403143][T27373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 598.411145][T27373] R13: 00007f1ab5c16038 R14: 00007f1ab5c15fa0 R15: 00007ffc1f2dbb18 [ 598.419157][T27373] [ 598.422811][T27373] Kernel Offset: disabled [ 598.427148][T27373] Rebooting in 86400 seconds..