last executing test programs: 1.919729724s ago: executing program 2 (id=5963): getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x1, 0xff, 0x2}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = socket$inet(0x2, 0x800, 0x5) setsockopt$inet_mreqsrc(r1, 0x0, 0x28, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r2, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600, 0x1}}, 0x20) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r3, &(0x7f0000000480)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0xb, @loopback, 0x1}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000140)='2', 0x1}], 0x1}}], 0x1, 0x8000) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) r5 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, 0x0, 0x8090) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r7 = accept4(r6, 0x0, 0x0, 0x80800) sendmmsg$alg(r7, &(0x7f0000003780)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r7, &(0x7f0000001540)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001500)={&(0x7f0000001480)={0x58, r5, 0x2, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x24}}}}, [@NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x1}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x1}]}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0xa, 0xbd, [0x4ee4, 0x8, 0x40]}, @NL80211_ATTR_STA_VLAN={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000081}, 0x4000) recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000480)=""/102, 0x66}], 0x1}, 0x2041) r8 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="b810000000000000100100000d"], 0x10b8}, 0xff00) bind$llc(r4, &(0x7f0000000200)={0x1a, 0x0, 0x4, 0x10, 0x69, 0x3, @broadcast}, 0x10) r9 = socket(0x848000000015, 0x805, 0x0) sendto$inet6(r9, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x0, 0xf444, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r9, 0x10e, 0x4, &(0x7f0000000040)=0x80000001, 0x4) r10 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r10, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xa004}, 0x4) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000080)=0x1, 0x4) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) 1.868892629s ago: executing program 1 (id=5965): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000016c0)=""/4086, 0xff6}, {&(0x7f0000003700)=""/4087, 0xff7}, {&(0x7f0000000280)=""/58, 0x3a}, {&(0x7f00000000c0)=""/32, 0x20}, {&(0x7f00000006c0)=""/4083, 0xff3}, {&(0x7f0000000440)=""/194, 0xc2}, {&(0x7f0000004700)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/55, 0x37}], 0x8}, 0x32120) 1.392735594s ago: executing program 3 (id=5970): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, 0x0, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x4, 0x20}, &(0x7f0000000040)=0xc) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) ioctl$XFS_IOC_FSGEOMETRY_V1(0xffffffffffffffff, 0x80705864, &(0x7f0000000200)) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) r6 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEYRING(r6, 0x110, 0x2, &(0x7f0000000000)=',&+-&\x00', 0x6) bind$packet(r2, &(0x7f0000000140)={0x11, 0x10, r3, 0x1, 0x1, 0x6, @local}, 0x14) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000080)={r4, 0x5a, "756714ba229084769a00f1cfc69d67e762ae7b1de0613944e28780c845d5620648695b14918c0a257f8ebca5cc605c608ab1519a833d4fb9930d8c81ebb71bb0083740273c13a583482dd87f2265cc8ba2f2547e09bdc0431d74"}, &(0x7f0000000100)=0x62) r7 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r7, 0x180000000) 1.362742058s ago: executing program 3 (id=5972): r0 = socket$netlink(0x10, 0x3, 0xc) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) setsockopt$ax25_int(r1, 0x101, 0xc, &(0x7f0000000080)=0x10000, 0x4) ioctl$SIOCAX25OPTRT(r1, 0x89e7, &(0x7f0000000180)={@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x2, 0x44}) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newtaction={0x68, 0x30, 0x10b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ife={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x3, 0x800000}, 0x1}}, @TCA_IFE_TYPE={0x6, 0x5, 0xfffa}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) ioctl$sock_ax25_SIOCDELRT(r1, 0x890c, &(0x7f00000000c0)={@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x3, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4f}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x37}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x18, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x10}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa4}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) 1.27980235s ago: executing program 3 (id=5973): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0xfcff) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 1.15950064s ago: executing program 4 (id=5976): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e1c, @empty}, 0x10) (async) connect$inet(r0, &(0x7f0000000200)={0x2, 0x4e22, @local}, 0x10) getpeername(r0, 0x0, &(0x7f0000000240)) (async) syz_emit_ethernet(0x86, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000088a800008100000086dd60ff690b00482f00fc0200000000ff000000000000000000ff0200000200"], 0x0) (async) r1 = socket(0x1e, 0x4, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x0) (async) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) (async) sendmmsg(r1, &(0x7f0000002b40)=[{{&(0x7f0000000000)=@tipc=@name={0x1e, 0x2, 0x2, {{0x43, 0x3}, 0x1}}, 0x80, 0x0}}], 0x1, 0x8000) (async) recvmmsg$unix(r1, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/211, 0xd3}], 0x1}}], 0x1, 0x40000100, 0x0) (async) gettid() 1.1139308s ago: executing program 4 (id=5977): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a70000000090a010400000000000000000a0000040900020073797a31f5ff000008000a40fffffffc0900010073797a3100000000080005400000000b2c0012"], 0x98}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) 1.025946086s ago: executing program 2 (id=5979): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f00000001c0)={'syzkaller1\x00', @broadcast}) write$tun(r0, 0x0, 0x152) socket$isdn_base(0x22, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000a0000010900020073797a31000000000900010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) close(r1) recvmsg(r2, &(0x7f0000002240)={0x0, 0x0, 0x0}, 0x0) 973.000641ms ago: executing program 4 (id=5980): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="620ac4ff00000000711019000000000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xfff3}, 0x90) 942.515214ms ago: executing program 4 (id=5981): r0 = socket(0x10, 0x2, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffff7, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) write(r0, &(0x7f0000000000)="240000001e005f80004000000000000002000000000000000000080008000100000000ff", 0x24) 932.5474ms ago: executing program 1 (id=5982): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=r1, @ANYBLOB="0000000000000000240012800b00010065727370616e000014000280050016efffffff0006000e0011"], 0x44}}, 0x0) 874.792136ms ago: executing program 0 (id=5983): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000884) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r4, {0x10}, {0x6}, {0xfff2, 0x1}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x2, '\x00', 0x9, 0x0, 0x3, 0xfffffffd}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040098}, 0x880) sendmsg$nl_route_sched_retired(r1, &(0x7f0000001740)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001700)={&(0x7f00000002c0)=@delchain={0x141c, 0x65, 0x20, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0xf, 0xe}, {0xf}, {0xc, 0xfff3}}, [@f_rsvp6={{0xa}, {0x2c, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @local}, @TCA_RSVP_DST={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x35}}]}}, @f_rsvp6={{0xa}, {0x2ec, 0x2, [@TCA_RSVP_CLASSID={0x8, 0x1, {0xf, 0x5}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x21fd, 0x3, 0x5}, {0x5, 0x10, 0x4}, 0x4, 0x2, 0x1}}, @TCA_RSVP_ACT={0x26c, 0x6, [@m_connmark={0x11c, 0xd, 0x0, 0x0, {{0xd}, {0xac, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x3, 0x5, 0x1, 0x4e5}, 0x1}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x2, 0x6, 0x4b7}, 0x1}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0x9, 0x7, 0x3}, 0x1}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xe, 0x40, 0x10000000, 0x80000000, 0xfffffff2}, 0xc}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x6, 0x8, 0x400, 0x6f53}, 0x81}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xa, 0x8, 0x8, 0x7fffffff, 0x2}, 0x6}}]}, {0x42, 0x6, "f16ad708df0851a961a66b837caa18c640e20b33bf8f1e3f8a861a9484cac67549363abd3a9e46c3cbce073a5c5bf2707fa487293f24baef5b3ccabf1501"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_nat={0x14c, 0x16, 0x0, 0x0, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x100, 0x6, 0x5, 0x9ee}, @empty, @local, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xc, 0x8, 0x3, 0x9, 0x6}, @rand_addr=0x64010100, @private=0xa010101, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x6, 0x7, 0x4, 0x8}, @empty, @multicast1, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0xfffffff7, 0x20000000, 0x9, 0x2}, @remote, @multicast2, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0xffff, 0xfffffffffffffff4, 0xc9, 0x4}, @broadcast, @private=0xa010100, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7f, 0x2, 0x7, 0x7ff, 0x9}, @multicast1, @remote, 0xffffffff, 0x1}}]}, {0x31, 0x6, "d653607545a117b84381876d22798317a8da93950df647b7214e5287df0dd192e4f17981eaf3756c7bf723d4f2"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x2, 0x0, 0x800000}, {0x4, 0xe40, 0x2}, 0x4, 0x81, 0x9}}, @TCA_RSVP_SRC={0x14, 0x3, @mcast2}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x80000000, 0x7, 0x101}, {0xfffffff9, 0x2, 0x68}, 0x73, 0xc7}}]}}, @f_rsvp={{0x9}, {0x10bc, 0x2, [@TCA_RSVP_PINFO={0x20, 0x4, {{0x10, 0x5, 0x2}, {0x0, 0x1, 0xc9}, 0x33, 0x56, 0x7}}, @TCA_RSVP_ACT={0x1098, 0x6, [@m_skbmod={0x1094, 0x1a, 0x0, 0x0, {{0xb}, {0x68, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @local}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0xda1, 0x71, 0x2, 0x5, 0x2}, 0xe}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0xfa15}, @TCA_SKBMOD_DMAC={0xa, 0x3, @random="30553ffc891b"}, @TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}, @TCA_SKBMOD_SMAC={0xa, 0x4, @local}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x1}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x141c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48000) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x20000800) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x40, 0x1410, 0x8b7fbbc5948fecd9, 0x70bd29, 0x25dfd9fc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x20004085}, 0x4004080) 873.037652ms ago: executing program 2 (id=5984): socket$packet(0x11, 0x3, 0x300) r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'tunl0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) bind$packet(r0, &(0x7f0000000080)={0x11, 0x4, r2, 0x1, 0x6, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x14) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xd}, {0xfff1, 0xfff2}, {0xffe0}}}, 0x24}}, 0x40000) 752.914879ms ago: executing program 1 (id=5985): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x418, 0x2c8, 0x0, 0xfeffffff, 0xf8, 0x220, 0x380, 0x380, 0xffffffff, 0x380, 0x380, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'caif0\x00', {}, {}, 0x6}, 0x2002, 0xd0, 0xf8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [0x0, 0x800]}}, @common=@inet=@tcp={{0x30}, {[0x0, 0x4e23], [], 0x0, 0x0, 0x2}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@set={{0x40}}, @common=@set={{0x40}, {{0x3}}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @icmp_id}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x8, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x8}, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, @port, @port=0x4e21}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x478) 752.534756ms ago: executing program 4 (id=5986): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004080)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r2, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x800, 0x2, 0x20000000, 0x10000, 0x40}, 0x8, 0x5}, [{0x7, 0x8, 0x2, 0x5, 0x2, 0x200}, {0xff, 0x7, 0x101, 0x8, 0x810, 0xffffffff}, {0x5, 0x8, 0xfff, 0x2, 0xffffffff, 0xb93}, {0x6, 0x4, 0x3, 0xfffffff3, 0x7, 0x6}, {0xd3d4, 0x2, 0x8, 0x6, 0x101, 0x10}, {0x9, 0x40, 0x6, 0x80000000, 0x6, 0x10001}, {0x4, 0x9, 0x100, 0xf9d8, 0x7, 0x2}, {0x5796, 0xffff, 0xd44b, 0x8, 0x1, 0x37a}, {0x6, 0x3, 0x1, 0x80000001, 0x3f, 0x10}, {0x4, 0x9e9b, 0x60, 0x7, 0x0, 0x1}, {0xffe00000, 0x1, 0x8000, 0x4, 0x3, 0x7}, {0x101, 0x9, 0x400, 0x3, 0x9, 0x3}, {0xce9, 0xfffffffb, 0x4, 0xae5e, 0x3ff, 0x2}, {0x3, 0x5, 0x6, 0x4, 0x197d, 0xfb56}, {0x2, 0xe42, 0xf3, 0x0, 0x6, 0x101}, {0x4, 0x5, 0x74d77b97, 0xfffffd8b, 0x0, 0x4}, {0x7fff, 0x5b, 0xb3a, 0x6, 0x2, 0xb5e}, {0x4c5be96a, 0x6, 0x2, 0x5, 0xd2a1, 0xbe47}, {0x6, 0x7, 0x9, 0x4, 0x3, 0x1}, {0x4, 0x8, 0x7, 0x4, 0x95, 0x3}, {0x6, 0x5, 0x2, 0x7fffffff, 0x8, 0xff}, {0x1, 0x71, 0x800000, 0xcf55, 0x3, 0x9}, {0x7933, 0x6e20, 0x6, 0x81, 0x2, 0x8}, {0xff, 0x8001, 0xff, 0x10001, 0x5, 0x5}, {0x6, 0x37, 0x0, 0x6, 0xed, 0x5}, {0xce, 0xae, 0x4, 0x2, 0x10000, 0x800}, {0x200, 0x5, 0x6, 0x5, 0x9, 0x9}, {0x8, 0xdd8, 0x8, 0x8, 0x5}, {0x9, 0x3, 0xa, 0x6, 0x9, 0x9}, {0x9, 0x4, 0x9d42, 0x4, 0x1, 0xfffffffb}, {0x8c, 0x6b8, 0x6, 0x2, 0x2, 0xfffffffe}, {0x3, 0x811, 0x9, 0x5, 0x4}, {0x3, 0x80000001, 0x400, 0x2, 0x0, 0x8001}, {0xfffffe01, 0x2, 0x8, 0x5, 0x8, 0x8}, {0x0, 0x22, 0x5, 0x3, 0x401, 0x5}, {0xa, 0x5, 0x101, 0x5, 0xfffffc01}, {0x4, 0x5, 0x0, 0x0, 0xdb, 0x3d04b554}, {0x5, 0x9, 0xfffffffa, 0x1, 0xfffffffc, 0x2}, {0x8, 0x7, 0x7, 0x99f, 0x9, 0x3}, {0x5, 0x252, 0x8000, 0xffff8001, 0xb, 0x900}, {0x4, 0x3, 0x3, 0x21, 0x7, 0x7}, {0xfffffffb, 0x8a1, 0x2, 0x7, 0x0, 0x4}, {0x0, 0x7fff, 0x2, 0xfffff399, 0x20000009, 0xe756}, {0xfff, 0xc, 0x4, 0x8, 0x2, 0xe}, {0x6, 0x4, 0x6, 0x1, 0x80, 0x980}, {0x23ae789, 0xc, 0x4, 0x7, 0x200, 0x4}, {0x5, 0xe, 0x2, 0x9, 0x0, 0xf3}, {0x0, 0x9, 0x2, 0x4, 0x3, 0x4}, {0x8, 0x4, 0x5, 0xfffffffd, 0x400, 0x7f}, {0x9, 0x80, 0x6e6b, 0x6, 0x203}, {0x371cf7fc, 0x7, 0x2, 0x1ff, 0xfffffffa, 0x6a97}, {0xd1, 0x6, 0x4, 0x7, 0x5a, 0x9}, {0x8, 0x7f, 0x7fffffff, 0x7f, 0x2, 0x8}, {0x7ff, 0x1, 0x3, 0x2, 0x9, 0x400}, {0x6, 0x1ff, 0x1000000, 0x9, 0x7, 0x4}, {0x4, 0x6, 0xfe, 0x100, 0xc6, 0x8}, {0x3, 0xfffffffd, 0xd, 0x6, 0xfffffffe, 0x1000}, {0x7, 0x2, 0x1, 0xd, 0xfffffffe, 0x3}, {0xfffffff9, 0x80000001, 0xe, 0x2, 0x200, 0x7}, {0x3, 0x0, 0xa820, 0x787e, 0x2, 0x2}, {0x8, 0x4, 0x5ae, 0x2, 0x8}, {0x5, 0x52, 0x8, 0x5, 0x10, 0x9}, {0x1, 0x7, 0x3, 0x280, 0x800, 0x6}, {0x10, 0x801, 0x0, 0x8, 0x3, 0xa}, {0xad, 0x8, 0x4, 0x5, 0x0, 0xfff}, {0x6, 0x6, 0x7fff, 0x0, 0xff, 0x7fffffff}, {0x8, 0x85e6, 0x3, 0x0, 0x10, 0xc}, {0x9, 0x78e3, 0x5, 0xbc27, 0x7, 0x9}, {0x6, 0x7, 0x2, 0xdb60, 0x3}, {0x80000001, 0x0, 0x3, 0x1, 0x81, 0xba}, {0x10001, 0xfff, 0x7, 0x0, 0x9, 0xc29}, {0x100, 0x2, 0x9, 0x7, 0x84e1, 0x3ff}, {0xdc, 0x8, 0xe, 0x7, 0x9}, {0x7, 0x5, 0x1, 0x80, 0x6, 0xff}, {0xd5e, 0x5, 0x0, 0x100, 0x0, 0x40000010}, {0x200, 0x2, 0x8000, 0x0, 0x6b, 0x4}, {0x0, 0x0, 0x9, 0x8, 0x100, 0x1000}, {0x4, 0x3ff, 0x0, 0x10000, 0x7, 0x7}, {0x6, 0x9, 0x1, 0x2001ff, 0x4, 0x1}, {0x4, 0xd38f, 0x6, 0x4, 0x170ddbc4, 0xe38}, {0x14a, 0x7, 0x0, 0x10001, 0x1, 0x2}, {0x9, 0x6, 0x1, 0x400, 0xffffffff, 0xfffffffc}, {0x7, 0x6, 0x3909, 0xffffffff, 0x1705, 0x7}, {0x3, 0x3b10fe2d, 0x4006, 0x5, 0x3, 0xffff7fff}, {0x9430, 0xb, 0x6, 0x2, 0x9, 0x5}, {0xa, 0xb1fb, 0x6, 0x6, 0xc5, 0x9}, {0x2a455dad, 0x5, 0x29, 0xfffffff9, 0x800, 0x7fff}, {0x3, 0x3, 0xee, 0x9, 0x6, 0x8}, {0x5ce, 0x3, 0x0, 0xb, 0x8, 0x99}, {0x2, 0x9, 0xf623, 0x7, 0xff, 0x8}, {0x101, 0x6, 0x80000000, 0x9, 0xfffff697, 0x8}, {0x9, 0x8, 0x7, 0x2, 0xa226, 0x9}, {0x8, 0x8, 0x3, 0xfffff246, 0xf, 0x2}, {0x3, 0xaf, 0x7ff, 0xe0, 0x0, 0x7cf}, {0x8, 0x7, 0x29af2cf0, 0x1, 0x7, 0x80000000}, {0x7fff, 0x9, 0x4b, 0xa4e}, {0xffffffff, 0x7, 0xb, 0x80000000, 0x0, 0x69}, {0x4, 0x7, 0x9, 0x4, 0x100, 0x5}, {0x6, 0x6, 0x2, 0x80000001, 0x6, 0x9}, {0x6, 0x401, 0x2, 0x2, 0x3, 0xb}, {0xd, 0x40, 0x3, 0xa, 0xffffffff, 0x1d1a}, {0xc0, 0x81, 0xb, 0x3, 0xea, 0x3}, {0xc, 0x2, 0x1, 0xa, 0x1, 0x2f4}, {0xf, 0x6, 0x9, 0x73e7, 0x1000, 0x4}, {0x6, 0x8000, 0x3ff, 0x8dcc, 0x4, 0x9}, {0x7, 0x12, 0x8, 0x8, 0x69, 0x9}, {0x7f, 0x7, 0x4, 0x0, 0x3, 0x2}, {0x6, 0x0, 0x7a, 0x5, 0x4, 0x1000}, {0xb06, 0xffffffff, 0x7ff, 0x400009, 0x0, 0x7bffffff}, {0x4, 0x7b, 0x3, 0x4, 0x0, 0xa7}, {0x81, 0x56c3, 0x1, 0xdda, 0x6, 0xb27d}, {0x4, 0x3, 0x401, 0xad, 0xcf5, 0xf8c}, {0x8, 0x1, 0x3, 0x40, 0x1, 0x4907}, {0x6, 0x4, 0x38, 0x4, 0x5, 0x6}, {0x7, 0x2, 0xf, 0x64, 0x1, 0x7}, {0x1, 0x2, 0x4010, 0xffffffad, 0x0, 0x751e}, {0xfff0, 0x2, 0x4, 0x3, 0x3, 0x5}, {0x5, 0x7, 0x8, 0x1, 0x5, 0xfff}, {0x4fb, 0x0, 0x0, 0x7ff, 0x4, 0x5}, {0xf455, 0x3, 0x7fff, 0x59ed, 0xb4e9, 0xe4}, {0x7, 0x2, 0xe, 0x0, 0x3da78e9c, 0x8000}, {0x2, 0x0, 0x400, 0x765, 0x7f, 0x7}, {0x5, 0x7, 0x5, 0x8, 0x8, 0x7}, {0x10, 0x3, 0x9, 0x5, 0x8, 0x2}, {0x6a, 0x200, 0x81, 0xffffffff, 0x4, 0x200}, {0x3, 0x8007, 0x3, 0x4a, 0x6, 0x1}, {0x0, 0x2, 0x7, 0x616, 0x5, 0x4}, {0x6, 0xb25b, 0x3, 0x0, 0x6, 0xb}], [{0x4, 0x1}, {0x5}, {0x4}, {}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x0, 0x1}, {0x2}, {0x4}, {0x5}, {0x4, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x1}, {0x2}, {0x4}, {0x1}, {0x0, 0x1}, {0x5}, {0x5, 0x1}, {0x5}, {0x2, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x4}, {0x3, 0x1}, {}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x5}, {0x5, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {}, {0x3, 0x1}, {0x1, 0x1}, {0x1}, {}, {0x5}, {0x3}, {0xd}, {0x0, 0x338f50ad6d91f11}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4}, {}, {0x4}, {0x3}, {0x1, 0x1}, {0x4}, {0x5}, {0x4, 0x1}, {0x5, 0x1}, {}, {0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4}, {0x4, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x4}, {0x1}, {0x4}, {0x3}, {}, {0x5, 0x1}, {0x2, 0x1}, {}, {0x1, 0x1}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x1}, {0x6, 0x1}, {0x5}, {0x3}, {0x1, 0x1}, {0x1, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x3}, {0x3}, {0x4}, {0x5, 0x1}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x3}, {0x5}, {0x5, 0x1}, {0x2, 0x1}, {0x3}, {0x3, 0x1}, {0x4}, {0x4}, {0x5}, {0x5, 0x1}, {0x2}, {0x2, 0x1}, {0x1, 0x1}, {0x4}]}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 710.9965ms ago: executing program 0 (id=5987): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000780), r1) (async) r3 = socket$unix(0x1, 0x5, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f00000004c0)={0xba, 0x10, 0x8202, 0xff, 0x4800000, 0x0, 0x80, 0x0, 0x0}, &(0x7f0000000500)=0x20) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000300)={r5, 0x0, &(0x7f0000000340)}, &(0x7f0000000200)=0x10) (async) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r6) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000003c0)={'syztnl1\x00', &(0x7f0000000340)={'gretap0\x00', 0x0, 0xc7, 0x40, 0x2, 0x7, {{0x9, 0x4, 0x0, 0x9, 0x24, 0x65, 0x0, 0x6, 0xaaff1a7511628ba1, 0x0, @dev={0xac, 0x14, 0x14, 0xd}, @private=0xa010102, {[@timestamp_addr={0x44, 0xc, 0xe6, 0x1, 0x5, [{@private=0xa010100, 0x200}]}, @ra={0x94, 0x4}]}}}}}) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r6, &(0x7f0000000800)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000007c0)={&(0x7f0000000400)={0x98, r7, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}]}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x114}}, 0x0) (async) r10 = socket$unix(0x1, 0x5, 0x0) bind$unix(r10, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e) (async) bind$unix(r3, &(0x7f0000000280)=@abs={0x1, 0x0, 0x4e24}, 0x6e) (async) sendmsg$IEEE802154_LLSEC_DEL_KEY(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14, r2, 0x1, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0xc800) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x12094}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_COLLECT_METADATA={0x4}, @IFLA_GENEVE_REMOTE={0x8, 0x2, @local}, @IFLA_GENEVE_ID={0x8}]}}}]}, 0x48}}, 0x20000050) 701.433195ms ago: executing program 2 (id=5988): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x13c}], 0x2}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r0}, 0x8) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0), 0x82083, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCGUNIT(r1, 0x80047456, &(0x7f0000000080)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000008000000000000b000000000000"], 0x0, 0x26}, 0x28) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b18, &(0x7f0000000000)={'wlan1\x00'}) socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {}, 0x2, 0x0, 0x0, 0x0, 0x3}}, 0xb8}}, 0x0) socket$inet6(0xa, 0x3, 0x8000000003c) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{0x0}], 0x1}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a"], 0xfdef) r2 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r6, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4000000010003904000000000000000080040000", @ANYRES32=r5, @ANYBLOB="01980000000000002000128008000100736974001400028006000e000600000008000100", @ANYRES64=r4], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0) bind$pptp(r3, &(0x7f00000002c0)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) ioctl$XFS_IOC_GETBMAPA(r3, 0xc020582c, &(0x7f0000000280)={0x3, 0xb, 0x3, 0x9}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000002, 0x4000010, r2, 0x7b301000) socket$nl_xfrm(0x10, 0x3, 0x6) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x0) 635.564161ms ago: executing program 1 (id=5989): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00', 0x0}) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000100000001dcdf250100000008000100", @ANYBLOB="400002803c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r1, @ANYBLOB="e00dcd661c82634193a7bc7eedc7b5538dd943482215f84ccd1f9790553171bcb34e8fffc852e65bdf0f873b166527b8c9857db21b2cfbdf2c369b726455a05f5a7701ba6a59b75ebb0331ef0bde1732912a0fde6f3d1a2f649d6e8331b801"], 0x5c}, 0x1, 0x400000000000000}, 0x40810) 584.350848ms ago: executing program 0 (id=5990): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='hsr0\x00'}) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000480)={&(0x7f0000000380), 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x20, 0x1405, 0x1, 0x0, 0x0, "", [{{0x8}, {0x4}}]}, 0x20}}, 0x0) 503.029293ms ago: executing program 3 (id=5991): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)={r0}) getsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000100), &(0x7f0000000140)=0xe) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000000000419010000000800000000000000", @ANYRES32=0x0, @ANYBLOB="434000000080000008001d0000000000"], 0x28}}, 0x40000) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000)='cgroup\x00', 0x101, 0x0, 0xf, 0x0, 0x0}) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f00000005c0)='cpu.stat\x00', 0x275a, 0x0) preadv(r3, &(0x7f00000004c0)=[{&(0x7f0000000280)=""/96, 0x60}], 0x1, 0xa, 0x6c8) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) getsockopt$nfc_llcp(r4, 0x118, 0x3, &(0x7f0000000040)=""/72, 0x48) ioctl$BTRFS_IOC_BALANCE_V2(r4, 0xc4009420, &(0x7f00000004c0)={0x0, 0x6, {0x101, @struct={0xe, 0x2008}, 0x0, 0x3, 0x40000000000000, 0x800, 0x7fffffff, 0x2, 0x400, @usage=0x5, 0x6, 0x6, [0xfffffffffffffffe, 0x3, 0x5b42, 0x8000000000000000, 0x2, 0x4]}, {0x1000, @struct={0xd9, 0x7fff}, 0x0, 0x7, 0x3, 0x1, 0x1, 0xc4e4, 0x0, @struct={0x6, 0x7660}, 0x5, 0x2, [0xf, 0x12d, 0x200000000000, 0x7, 0x8, 0xfffffffffffffff8]}, {0x1, @usage=0x6, 0x0, 0x3, 0x9b4, 0x800, 0x2, 0x0, 0x14, @usage=0xfffffffffffffff9, 0x8000000, 0x4, [0x100, 0x4, 0xfffffffffffeffff, 0x81, 0x4, 0x4]}, {0x5, 0x6, 0x543}}) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f00000008c0)={r5, "6622498e34ed26a020dc4a8db0c19a06"}) 432.647815ms ago: executing program 4 (id=5992): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000016c0)=""/4086, 0xff6}, {&(0x7f0000003700)=""/4087, 0xff7}, {&(0x7f0000000280)=""/58, 0x3a}, {&(0x7f00000000c0)=""/32, 0x20}, {&(0x7f00000006c0)=""/4083, 0xff3}, {&(0x7f0000000440)=""/194, 0xc2}, {&(0x7f0000004700)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/55, 0x37}], 0x8}, 0x32120) 430.687194ms ago: executing program 1 (id=5993): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="b4080000000000006110800000000000a60000000000000095000000000000002708bf5d6df57e4036e97f802a67fdc2ee21b92ca9f507707dd754479a8dcf28b7ce595ab47e7a5396f780ee222b42395b5664f0c435febc86e01cd2cf1190b290320885b36f24493454294552dfaa3a17a7462612e5f8980fd439b09ee96e4c0ca8581e36cc8acfdfdd08b7856e8cf498d2d7ff6abd"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x0, 0x10, &(0x7f0000000080), 0xffffffffffffffb2}, 0x48) 428.843441ms ago: executing program 2 (id=5994): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c9000feff0000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) 397.108797ms ago: executing program 3 (id=5995): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=r1, @ANYBLOB="0000000000000000240012800b00010065727370616e000014000280050016f0ffffff0006000e0011"], 0x44}}, 0x0) 324.981126ms ago: executing program 0 (id=5996): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000002010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080035cc43520dc657420140000000000900010073797a3000"], 0xd4}}, 0x0) 295.840289ms ago: executing program 1 (id=5997): r0 = socket$inet(0xa, 0x801, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1007f}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa33"], 0xfdef) gettid() getgid() getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000060c0)={{{@in=@local, @in6=@loopback}}, {{@in=@initdev}, 0x0, @in=@empty}}, &(0x7f00000061c0)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000006200), &(0x7f0000006240)=0xc) r1 = socket$netlink(0x10, 0x3, 0xb) close(r1) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_init_net_socket$x25(0x9, 0x5, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000066c0)={{0x1}, &(0x7f0000006640), &(0x7f0000006680)='%+9llu \x00'}, 0x20) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce220000000000000000000000000000000000000001"], 0xfdef) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x5, 0x47, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) accept4(r0, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x14) 247.180651ms ago: executing program 2 (id=5998): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825803f00000000000280000c0012", 0x2e}], 0x1}, 0x0) 245.081393ms ago: executing program 0 (id=5999): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x2a, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x1}, {}, {}, [@exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0xc827}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0x7d}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000}}, @map_val={0x18, 0x5, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffff9}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000001c0)='GPL\x00', 0x10, 0x30, &(0x7f0000000200)=""/48, 0x1e00, 0x46, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000280)={0x2, 0xf, 0x1000, 0xffffff16}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f00000002c0)=[{0x3, 0x2, 0xc, 0x9}], 0x10, 0x7}, 0x94) r1 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f00000003c0), &(0x7f0000000400)=0x10) r2 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000840)={&(0x7f0000000440)={0x3f8, 0xb, 0x3, 0x301, 0x70bd2d, 0x25dfdbff, {0xa, 0x0, 0x1}, [@generic="891631137cbeed046d59f0d81b", @generic="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", @typed={0x8, 0x14d, 0x0, 0x0, @fd=r0}, @nested={0xdb, 0x2, 0x0, 0x1, [@typed={0x8, 0xab, 0x0, 0x0, @fd}, @generic="229f312817e5169822863624716c3ad7f4ba6363d5291b5bcc876c2f061504fd25b6d79e47345c01e4c8cd46b38279446f8dbd4fff57d55c988bb192b0a95ac7e49d89e208f5fded896d3503821c1895c08deb23b861afcc2379534bf311361c48def734e9b3064618f2d2279cb739dbdc1053b1df1e22f0886c13af5c7198aa2443771ca626593a51fcfe39786d9145aa83f7576a3b2bd7826a1d0f48d1dac6c3b27c1c6f228c8af7dea1e375248713c496a73a4c6a5e69f2e726983ce610c8f64ac8981b55e1a4cb61d81a6b5b21"]}, @nested={0x1eb, 0xd4, 0x0, 0x1, [@typed={0x8, 0xae, 0x0, 0x0, @fd=r1}, @nested={0x4, 0x119}, @typed={0x43, 0x151, 0x0, 0x0, @binary="37cdb15ba13c12ec591c6fe05f3bcf3066237ca44da2950c9fec5fa8ffd5766f0bcf7ca528b6fdacec35813f1d79c1873ed3ef6df1d923f5d611aa9304bf14"}, @nested={0x4, 0x123}, @generic="5a747df0321388f370a04e429e99df7b0c248fe640e6de7c6bc2d32124486830c199385451cf4148d47eed2e483170b047a328b70661af800d2422b8475e68ad3abeef558e2c1b954426c00fcc63a006a4f40f74e0f3061b6791350260edef27a7f30bb7a48c641fdc9ab7aa04978e19c8018245aa922e1bd97c7c2d09b05671c5b42cc66d871cb0df4988ab84441d4908347c98ec71541a2313174a7e0a094aa8b05591", @generic="a6b51a71d880e1313079020b497e8b1887443905b2e6c4d7db655cdbc308cfea0332b5827b6a3292d365be1c55311ec372481759c4f95a13b966afae46671c17e8e6c8782833fe4aa37af47d93a67e3a19213587fbe748d103e9b21b859665ba85da506b38caa6dbd4baf29704275785f52e479408a5016f099668f1175370ecf48068e78af9c3909c8cc27e01229782c3c218ed7bec9731c885a43cb468991258dad508c0422a665dab28475c8b91ae37add9e74dfbef1b01b6701789c72be6175283da13fa95d7a22dee0cfe8acb291b58b876c8feb676ad3cb9", @typed={0x8, 0x133, 0x0, 0x0, @fd=r2}, @nested={0x4, 0xbf}, @typed={0x8, 0xc8, 0x0, 0x0, @str=']$(\x00'}]}, @generic="80ba2e9c8fe3f5"]}, 0x3f8}, 0x1, 0x0, 0x0, 0xc0}, 0x1) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='cgroup.events\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000900)={0x0, @in={{0x2, 0x4e20, @broadcast}}, 0x0, 0x5, 0x80, 0x8, 0x2}, &(0x7f00000009c0)=0x98) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000a00)={r4, @in={{0x2, 0x4e24, @empty}}, 0x80000001, 0x6, 0x96f, 0x4, 0x9c, 0x3ff, 0x2}, &(0x7f0000000ac0)=0x9c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000b00)='./cgroup/syz0\x00', 0x1ff) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000c40)={r3, &(0x7f0000000b40)="e7db6a28264556586fa6a751d926a5fe5c62c5993c66435dcecb13fd9a46e6bff96e66be506570905008dafcc4d63be81e0dd4923bba559455e03b44b00234bf6f43e2544d845498dabb1821b729eb37b8b6c32120e2eb4cc097a1cf9ae573e39f0ed4f79d12289f859e32a17b143b3900d1f0a5e2e9d195c4b8d31a8fadd656fc3b92c5a0", &(0x7f0000000c00)=""/44}, 0x20) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r3, 0x8983, &(0x7f0000000c80)={0x7, 'ipvlan0\x00', {0x1}, 0x2}) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f0000000cc0)={r4, 0x6d, "4510d6aa5d6172297e2ad9dccb5734a15a153c34a9eedfa1971b34de8ec3ab4cb356f2536059de1d25f215ff0b58f4586a2c15dcad21cfaac951af96342f89dac7e5c5d1e40cac372e600689b3692d40d1f509b4676c04c18656e40090175caac85c9a28b9c1b09ec1ecff525b"}, &(0x7f0000000d40)=0x75) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x1a, &(0x7f0000000d80)={r5, 0x65, "f5518ed51687c1d3572b37eb638d19d92a6360b5d2cd977d12856b7fbb8317e0260418e91d975030af8b4598c4650e1cc3c0d26aa4913de5cc9059f1102ce07518e9b2fa8711ad729915bb11b0270181f9743ee6251cd4e060584dbca5e912973bc442163f"}, &(0x7f0000000e00)=0x6d) getsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f0000000e40), &(0x7f0000000e80)=0x4) r7 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_mreqsrc(r7, 0x0, 0x28, &(0x7f0000000ec0)={@initdev, @empty, @remote}, &(0x7f0000000f00)=0xc) bind$802154_dgram(r3, &(0x7f0000000f40)={0x24, @none={0x0, 0x3}}, 0x14) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000f80)={r7, r0}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000fc0)='./cgroup.net/syz1\x00', 0x1ff) socket$nl_route(0x10, 0x3, 0x0) r8 = accept4$inet6(r3, &(0x7f0000001000)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000001040)=0x1c, 0x80000) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r7, 0x84, 0x15, &(0x7f0000001080)={0x6a}, 0x1) setsockopt$IP_VS_SO_SET_FLUSH(r7, 0x0, 0x485, 0x0, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000010c0)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@val={0x88a8, 0x1, 0x0, 0x4}, {0x8100, 0x3, 0x0, 0x1}}, {@canfd={0xd, {{0x3, 0x0, 0x1, 0x1}, 0x26, 0x0, 0x0, 0x0, "6104f2ee34ea8977fb7e68777709f318734228bd1400e28cfaefc94d41433e5f3cd6e8289ece829ef6206a2a90b6456b813c51e32685a3adfc9af3ed3db6f681"}}}}, &(0x7f0000001140)={0x1, 0x1, [0x4bc, 0x8b7, 0x9, 0xad9]}) setsockopt$XDP_TX_RING(r7, 0x11b, 0x3, &(0x7f0000001180)=0x20, 0x4) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f00000011c0)={r1}) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000001200)={r6, @in6={{0xa, 0x4e24, 0x7fffffff, @private0, 0x8}}, 0x1000, 0x7, 0x3, 0x3000, 0x13, 0x9, 0x9}, &(0x7f00000012c0)=0x9c) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000001300)={r9, @in6={{0xa, 0x4e24, 0x42d1253d, @private0={0xfc, 0x0, '\x00', 0x1}}}, 0x3, 0x5}, &(0x7f00000013c0)=0x90) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001440), r3) sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f0000001500)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x34, r10, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x9}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x8040}, 0x4) ioctl$XFS_IOC_SCRUBV_METADATA(r0, 0xc0285840, &(0x7f00000015c0)={0x8000000000000001, 0x9, 0x6, 0x0, 0x1, 0x6, 0x0, &(0x7f0000001540)=[{0x0, 0x612c610041840f2e, 0xc800}, {0x1a, 0x1ff, 0x9}, {0x1a, 0x1ff}, {0x1, 0x101, 0x6}, {0x9, 0x1ff, 0x4}, {0x8, 0xfe, 0x8}]}) 176.548742ms ago: executing program 3 (id=6000): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x1100, 0x1, {0x0, 0x0, 0x0, 0x0, 0x8, 0x4408}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 0s ago: executing program 0 (id=6001): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="d800000018008103e00312ba0d8105040a600300ff0f04d0067c55a1bc000900b80006990700000015000500fef32702d3001500030001400200000901", 0x3d}], 0x1}, 0x48002) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc81100fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x4004032, 0xffffffffffffffff, 0xb06cb000) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000f40)={@in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x35}}}, 0x0, 0x0, 0x23d, 0x0, "2dfedf4fe729e6da2c283c04b074205e1eefc56dbc4e3bbeef85e81f0118fc0f64326f290de80584bce41936f14cb7a820ac8e630e660da57c076a7cb4155c7f0efdcea917bd84db674f344208d682a5"}, 0xd8) kernel console output (not intermixed with test programs): ss `syz.1.4204'. [ 425.206632][T19366] syzkaller0: entered promiscuous mode [ 425.226442][T19366] syzkaller0: entered allmulticast mode [ 425.455863][T19386] bond13: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 425.486757][T19386] bond13 (unregistering): Released all slaves [ 425.807234][T19415] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4216'. [ 426.127122][T19430] xt_policy: output policy not valid in PREROUTING and INPUT [ 426.160463][T19433] netlink: 76 bytes leftover after parsing attributes in process `syz.4.4222'. [ 426.390260][T19433] syzkaller0: entered promiscuous mode [ 426.444245][T19433] syzkaller0: entered allmulticast mode [ 426.562215][T19438] syzkaller1: entered promiscuous mode [ 426.568262][T19438] syzkaller1: entered allmulticast mode [ 426.827510][T19455] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4230'. [ 427.131113][T19472] FAULT_INJECTION: forcing a failure. [ 427.131113][T19472] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 427.161976][T19472] CPU: 0 UID: 0 PID: 19472 Comm: syz.3.4235 Not tainted syzkaller #0 PREEMPT(full) [ 427.162005][T19472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 427.162017][T19472] Call Trace: [ 427.162025][T19472] [ 427.162034][T19472] dump_stack_lvl+0xe8/0x150 [ 427.162068][T19472] should_fail_ex+0x412/0x560 [ 427.162102][T19472] _copy_from_user+0x2d/0xb0 [ 427.162127][T19472] ___sys_sendmsg+0x1c6/0x360 [ 427.162157][T19472] ? __pfx____sys_sendmsg+0x10/0x10 [ 427.162219][T19472] ? __fget_files+0x2a/0x420 [ 427.162247][T19472] ? __fget_files+0x3a0/0x420 [ 427.162287][T19472] __x64_sys_sendmsg+0x1bd/0x2a0 [ 427.162312][T19472] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 427.162351][T19472] ? __pfx_ksys_write+0x10/0x10 [ 427.162385][T19472] do_syscall_64+0x14d/0xf80 [ 427.162409][T19472] ? trace_irq_disable+0x3b/0x150 [ 427.162428][T19472] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.162449][T19472] ? clear_bhb_loop+0x40/0x90 [ 427.162474][T19472] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.162494][T19472] RIP: 0033:0x7f7492f9c819 [ 427.162513][T19472] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 427.162531][T19472] RSP: 002b:00007f7493e2c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 427.162563][T19472] RAX: ffffffffffffffda RBX: 00007f7493216090 RCX: 00007f7492f9c819 [ 427.162578][T19472] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000004 [ 427.162590][T19472] RBP: 00007f7493e2c090 R08: 0000000000000000 R09: 0000000000000000 [ 427.162603][T19472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 427.162615][T19472] R13: 00007f7493216128 R14: 00007f7493216090 R15: 00007ffce5e5e728 [ 427.162649][T19472] [ 427.526260][T19490] validate_nla: 23 callbacks suppressed [ 427.526283][T19490] netlink: 'syz.3.4239': attribute type 10 has an invalid length. [ 427.546326][T19485] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4241'. [ 427.594845][T19485] syzkaller0: entered promiscuous mode [ 427.600384][T19485] syzkaller0: entered allmulticast mode [ 427.712178][T19497] xt_limit: Overflow, try lower: 604147548/4200216962 [ 428.073453][T19517] FAULT_INJECTION: forcing a failure. [ 428.073453][T19517] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 428.082055][T19516] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4251'. [ 428.093730][T19517] CPU: 0 UID: 0 PID: 19517 Comm: syz.0.4250 Not tainted syzkaller #0 PREEMPT(full) [ 428.093757][T19517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 428.093769][T19517] Call Trace: [ 428.093776][T19517] [ 428.093783][T19517] dump_stack_lvl+0xe8/0x150 [ 428.093815][T19517] should_fail_ex+0x412/0x560 [ 428.093847][T19517] _copy_from_user+0x2d/0xb0 [ 428.093868][T19517] copy_from_sockptr_offset+0x66/0xa0 [ 428.093897][T19517] do_ipt_set_ctl+0x934/0xe00 [ 428.093924][T19517] ? rcu_is_watching+0x15/0xb0 [ 428.093951][T19517] ? trace_contention_end+0x3d/0x150 [ 428.093979][T19517] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 428.094022][T19517] ? __pfx___mutex_lock+0x10/0x10 [ 428.094045][T19517] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 428.094074][T19517] ? __pfx_aa_sk_perm+0x10/0x10 [ 428.094106][T19517] nf_setsockopt+0x26f/0x290 [ 428.094129][T19517] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 428.094158][T19517] do_sock_setsockopt+0x17c/0x1b0 [ 428.094182][T19517] __x64_sys_setsockopt+0x13d/0x1b0 [ 428.094216][T19517] do_syscall_64+0x14d/0xf80 [ 428.094236][T19517] ? trace_irq_disable+0x3b/0x150 [ 428.094252][T19517] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.094270][T19517] ? clear_bhb_loop+0x40/0x90 [ 428.094292][T19517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.094310][T19517] RIP: 0033:0x7fadd699c819 [ 428.094328][T19517] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 428.094344][T19517] RSP: 002b:00007fadd77c0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 428.094364][T19517] RAX: ffffffffffffffda RBX: 00007fadd6c15fa0 RCX: 00007fadd699c819 [ 428.094377][T19517] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 428.094388][T19517] RBP: 00007fadd77c0090 R08: 0000000000000478 R09: 0000000000000000 [ 428.094399][T19517] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 428.094410][T19517] R13: 00007fadd6c16038 R14: 00007fadd6c15fa0 R15: 00007fff47836e58 [ 428.094439][T19517] [ 428.204613][T19527] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4251'. [ 428.259377][T19521] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4252'. [ 428.498197][T19533] syzkaller0: entered promiscuous mode [ 428.522419][T19533] syzkaller0: entered allmulticast mode [ 428.631849][T19538] vlan3: entered allmulticast mode [ 428.639104][T19538] bridge0: entered allmulticast mode [ 428.646252][T19549] bridge0: port 1(erspan0) entered blocking state [ 428.652943][T19549] bridge0: port 1(erspan0) entered disabled state [ 428.660985][T19549] erspan0: entered allmulticast mode [ 428.695100][T19549] erspan0: entered promiscuous mode [ 428.748477][T19556] FAULT_INJECTION: forcing a failure. [ 428.748477][T19556] name failslab, interval 1, probability 0, space 0, times 0 [ 428.761594][T19556] CPU: 0 UID: 0 PID: 19556 Comm: syz.0.4264 Not tainted syzkaller #0 PREEMPT(full) [ 428.761622][T19556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 428.761634][T19556] Call Trace: [ 428.761643][T19556] [ 428.761651][T19556] dump_stack_lvl+0xe8/0x150 [ 428.761686][T19556] should_fail_ex+0x412/0x560 [ 428.761721][T19556] should_failslab+0xa8/0x100 [ 428.761749][T19556] __kvmalloc_node_noprof+0x178/0x8a0 [ 428.761772][T19556] ? xt_alloc_table_info+0x40/0xb0 [ 428.761797][T19556] ? do_ipt_set_ctl+0x903/0xe00 [ 428.761823][T19556] ? translate_table+0x1b5/0x2110 [ 428.761860][T19556] translate_table+0x1b5/0x2110 [ 428.761912][T19556] ? __pfx_translate_table+0x10/0x10 [ 428.761966][T19556] ? _copy_from_user+0x94/0xb0 [ 428.761995][T19556] do_ipt_set_ctl+0x9f5/0xe00 [ 428.762026][T19556] ? rcu_is_watching+0x15/0xb0 [ 428.762055][T19556] ? trace_contention_end+0x3d/0x150 [ 428.762087][T19556] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 428.762137][T19556] ? __pfx___mutex_lock+0x10/0x10 [ 428.762163][T19556] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 428.762196][T19556] ? __pfx_aa_sk_perm+0x10/0x10 [ 428.762231][T19556] nf_setsockopt+0x26f/0x290 [ 428.762259][T19556] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 428.762290][T19556] do_sock_setsockopt+0x17c/0x1b0 [ 428.762320][T19556] __x64_sys_setsockopt+0x13d/0x1b0 [ 428.762349][T19556] do_syscall_64+0x14d/0xf80 [ 428.762372][T19556] ? trace_irq_disable+0x3b/0x150 [ 428.762390][T19556] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.762410][T19556] ? clear_bhb_loop+0x40/0x90 [ 428.762435][T19556] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.762455][T19556] RIP: 0033:0x7fadd699c819 [ 428.762475][T19556] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 428.762493][T19556] RSP: 002b:00007fadd77c0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 428.762515][T19556] RAX: ffffffffffffffda RBX: 00007fadd6c15fa0 RCX: 00007fadd699c819 [ 428.762540][T19556] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 428.762553][T19556] RBP: 00007fadd77c0090 R08: 0000000000000478 R09: 0000000000000000 [ 428.762566][T19556] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 428.762578][T19556] R13: 00007fadd6c16038 R14: 00007fadd6c15fa0 R15: 00007fff47836e58 [ 428.762613][T19556] [ 429.036226][T19554] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 429.099090][T19558] IPVS: Unknown mcast interface: vcan0 [ 429.175346][T19570] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 429.303093][T19576] netlink: 'syz.2.4270': attribute type 10 has an invalid length. [ 429.492915][T19584] syzkaller0: entered promiscuous mode [ 429.499223][T19584] syzkaller0: entered allmulticast mode [ 429.565913][T19591] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 429.667454][T19592] Cannot find set identified by id 0 to match [ 429.722485][T19598] nbd: must specify at least one socket [ 429.745186][T19602] nbd: must specify at least one socket [ 430.067262][T19628] __nla_validate_parse: 12 callbacks suppressed [ 430.067285][T19628] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4289'. [ 430.092559][T19630] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4288'. [ 430.119146][T19628] syzkaller0: entered promiscuous mode [ 430.147495][T19628] syzkaller0: entered allmulticast mode [ 430.308055][T19644] tc_dump_action: action bad kind [ 430.329739][T19649] tc_dump_action: action bad kind [ 430.883158][T19681] netlink: 'syz.0.4302': attribute type 8 has an invalid length. [ 431.080315][T19692] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4305'. [ 431.110208][T19696] netlink: 'syz.4.4306': attribute type 3 has an invalid length. [ 431.119192][T19696] netlink: 666 bytes leftover after parsing attributes in process `syz.4.4306'. [ 431.134650][T19692] syzkaller0: entered promiscuous mode [ 431.140759][T19692] syzkaller0: entered allmulticast mode [ 431.400726][T19714] netlink: 'syz.3.4309': attribute type 1 has an invalid length. [ 431.422690][T19716] FAULT_INJECTION: forcing a failure. [ 431.422690][T19716] name failslab, interval 1, probability 0, space 0, times 0 [ 431.429663][T19715] netlink: 'syz.0.4311': attribute type 3 has an invalid length. [ 431.444112][T19714] netlink: 'syz.3.4309': attribute type 3 has an invalid length. [ 431.453714][T19716] CPU: 1 UID: 0 PID: 19716 Comm: syz.1.4310 Not tainted syzkaller #0 PREEMPT(full) [ 431.453745][T19716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 431.453757][T19716] Call Trace: [ 431.453765][T19716] [ 431.453773][T19716] dump_stack_lvl+0xe8/0x150 [ 431.453809][T19716] should_fail_ex+0x412/0x560 [ 431.453845][T19716] should_failslab+0xa8/0x100 [ 431.453872][T19716] ? skb_clone+0x212/0x3a0 [ 431.453897][T19716] kmem_cache_alloc_noprof+0x87/0x650 [ 431.453929][T19716] skb_clone+0x212/0x3a0 [ 431.453959][T19716] __netlink_deliver_tap+0x404/0x850 [ 431.454003][T19716] ? netlink_deliver_tap+0x2e/0x1b0 [ 431.454036][T19716] netlink_deliver_tap+0x19c/0x1b0 [ 431.454069][T19716] netlink_sendskb+0x68/0x140 [ 431.454099][T19716] netlink_unicast+0x3a3/0x9b0 [ 431.454137][T19716] ? __pfx_netlink_unicast+0x10/0x10 [ 431.454187][T19716] netlink_rcv_skb+0x2b6/0x4b0 [ 431.454220][T19716] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 431.454254][T19716] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 431.454308][T19716] ? netlink_deliver_tap+0x2e/0x1b0 [ 431.454347][T19716] netlink_unicast+0x80f/0x9b0 [ 431.454382][T19716] ? __pfx_netlink_unicast+0x10/0x10 [ 431.454413][T19716] ? netlink_sendmsg+0x650/0xb40 [ 431.454430][T19716] ? skb_put+0x11b/0x210 [ 431.454455][T19716] netlink_sendmsg+0x813/0xb40 [ 431.454487][T19716] ? __pfx_netlink_sendmsg+0x10/0x10 [ 431.454512][T19716] ? aa_sock_msg_perm+0xf1/0x1b0 [ 431.454543][T19716] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 431.454571][T19716] ____sys_sendmsg+0x972/0x9f0 [ 431.454606][T19716] ? __pfx_____sys_sendmsg+0x10/0x10 [ 431.454640][T19716] ? import_iovec+0x73/0xa0 [ 431.454667][T19716] ___sys_sendmsg+0x2a5/0x360 [ 431.454704][T19716] ? __pfx____sys_sendmsg+0x10/0x10 [ 431.454778][T19716] ? __fget_files+0x2a/0x420 [ 431.454807][T19716] ? __fget_files+0x3a0/0x420 [ 431.454848][T19716] __x64_sys_sendmsg+0x1bd/0x2a0 [ 431.454876][T19716] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 431.454911][T19716] ? __pfx_ksys_write+0x10/0x10 [ 431.454947][T19716] do_syscall_64+0x14d/0xf80 [ 431.454969][T19716] ? trace_irq_disable+0x3b/0x150 [ 431.454985][T19716] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.455005][T19716] ? clear_bhb_loop+0x40/0x90 [ 431.455030][T19716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.455050][T19716] RIP: 0033:0x7f9de5d9c819 [ 431.455071][T19716] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 431.455086][T19716] RSP: 002b:00007f9de6c41028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 431.455109][T19716] RAX: ffffffffffffffda RBX: 00007f9de6016090 RCX: 00007f9de5d9c819 [ 431.455124][T19716] RDX: 0000000020004004 RSI: 0000200000006040 RDI: 0000000000000005 [ 431.455138][T19716] RBP: 00007f9de6c41090 R08: 0000000000000000 R09: 0000000000000000 [ 431.455150][T19716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 431.455162][T19716] R13: 00007f9de6016128 R14: 00007f9de6016090 R15: 00007ffd9d946748 [ 431.455202][T19716] [ 431.487030][T19715] netlink: 'syz.0.4311': attribute type 3 has an invalid length. [ 431.595832][T19714] netlink: 172 bytes leftover after parsing attributes in process `syz.3.4309'. [ 431.629023][T19721] netlink: 208 bytes leftover after parsing attributes in process `syz.2.4312'. [ 431.812454][T19714] NCSI netlink: No device for ifindex 813332851 [ 431.847977][T19718] netlink: 'syz.3.4309': attribute type 1 has an invalid length. [ 431.926189][T19718] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4309'. [ 431.936102][T19718] netlink: 658 bytes leftover after parsing attributes in process `syz.3.4309'. [ 431.989722][T19722] bond13: (slave vlan0): Opening slave failed [ 432.174717][T19750] netlink: 156 bytes leftover after parsing attributes in process `syz.0.4317'. [ 432.502563][T19775] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4327'. [ 433.190448][T19803] syzkaller0: entered promiscuous mode [ 433.197019][T19803] syzkaller0: entered allmulticast mode [ 433.428629][T16851] udevd[16851]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 435.167108][T19847] netlink: 'syz.3.4343': attribute type 4 has an invalid length. [ 435.369211][T19854] __nla_validate_parse: 6 callbacks suppressed [ 435.369234][T19854] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4343'. [ 435.407135][T19854] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4343'. [ 435.527948][T19870] netlink: 'syz.0.4347': attribute type 2 has an invalid length. [ 435.976968][T19886] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4350'. [ 435.980935][T19888] netlink: 208 bytes leftover after parsing attributes in process `syz.0.4351'. [ 436.081743][T19890] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4352'. [ 436.108542][T19892] xt_hashlimit: size too large, truncated to 1048576 [ 436.177017][T19898] –: renamed from vxcan1 [ 436.715983][T19921] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4364'. [ 436.922117][T19940] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4367'. [ 436.979464][T19941] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4369'. [ 437.444279][ T30] audit: type=1107 audit(1775101794.247:4): pid=19965 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ù‹5ž÷Œ•%èÍUýAÊÃËÙ ë0ä™l…t¿Ý•/Öÿ Ž6òŠ¨Šç›' [ 437.592241][T19977] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4379'. [ 437.615342][T19977] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.4379'. [ 437.654561][T19984] netlink: 'syz.4.4381': attribute type 1 has an invalid length. [ 437.767238][T19984] bond13: entered promiscuous mode [ 437.772975][T19984] 8021q: adding VLAN 0 to HW filter on device bond13 [ 437.865864][T19997] lo: MTU too low for tipc bearer [ 437.877064][T19997] tipc: Enabling of bearer rejected, failed to enable media [ 438.233004][T20021] xt_check_table_hooks: 23 callbacks suppressed [ 438.233025][T20021] x_tables: duplicate underflow at hook 2 [ 438.256947][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.363546][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.398057][T20034] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 438.440604][T20036] IPVS: Unknown mcast interface: vcan0 [ 438.659786][T20046] sock: sock_timestamping_bind_phc: sock not bind to device [ 439.233529][T20079] netlink: 'syz.1.4413': attribute type 1 has an invalid length. [ 439.248951][T20079] workqueue: Failed to create a rescuer kthread for wq "bond16": -EINTR [ 439.363641][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.383549][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.391833][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.401143][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.409580][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.765720][T20114] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 439.990008][T20128] IPVS: set_ctl: invalid protocol: 59 0.0.0.0:20004 [ 440.146156][T20139] xt_hashlimit: size too large, truncated to 1048576 [ 440.314529][T20150] netlink: 'syz.2.4431': attribute type 1 has an invalid length. [ 440.395928][T20152] __nla_validate_parse: 15 callbacks suppressed [ 440.395954][T20152] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4432'. [ 440.425680][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.496647][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.610383][T20162] syzkaller0: entered promiscuous mode [ 440.670419][T20165] netlink: 'syz.2.4439': attribute type 4 has an invalid length. [ 440.684913][T20165] netlink: 'syz.2.4439': attribute type 4 has an invalid length. [ 440.905127][T20178] netlink: 'syz.0.4442': attribute type 10 has an invalid length. [ 440.915832][T20178] bridge_slave_1: left allmulticast mode [ 440.929235][T20182] netlink: 'syz.1.4444': attribute type 1 has an invalid length. [ 440.939744][T20184] netlink: 'syz.0.4442': attribute type 10 has an invalid length. [ 440.957173][T20179] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4443'. [ 441.004185][T20182] workqueue: Failed to create a rescuer kthread for wq "bond16": -EINTR [ 441.006079][T20181] netlink: 'syz.4.4441': attribute type 1 has an invalid length. [ 441.107485][T20181] 8021q: adding VLAN 0 to HW filter on device bond14 [ 441.116218][ T5193] udevd[5193]: worker [16349] /devices/virtual/block/nbd0 is taking a long time [ 441.221018][T20196] bond14: (slave geneve4): making interface the new active one [ 441.257534][T20196] bond14: (slave geneve4): Enslaving as an active interface with an up link [ 441.312241][T20204] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 441.332527][T20204] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 441.359582][T20214] netlink: 'syz.0.4450': attribute type 17 has an invalid length. [ 441.405922][ T66] netdevsim netdevsim4 eth0: set [1, 2] type 2 family 0 port 20004 - 0 [ 441.416989][T20214] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4450'. [ 441.428129][T20214] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4450'. [ 441.443581][ T66] netdevsim netdevsim4 eth1: set [1, 2] type 2 family 0 port 20004 - 0 [ 441.457110][T20206] tipc: Bearer : already 2 bearers with priority 10 [ 441.472293][T20206] tipc: Bearer : trying with adjusted priority [ 441.482095][T20206] tipc: Enabled bearer , priority 9 [ 441.534225][T20214] gretap0: entered promiscuous mode [ 441.550008][T20214] gretap0: left promiscuous mode [ 441.574080][ T66] netdevsim netdevsim4 eth2: set [1, 2] type 2 family 0 port 20004 - 0 [ 441.575751][T20224] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4451'. [ 441.582538][ T66] netdevsim netdevsim4 eth3: set [1, 2] type 2 family 0 port 20004 - 0 [ 441.625244][T20229] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.4452'. [ 441.687426][T20224] IPVS: Unknown mcast interface: vcan0 [ 441.787735][T20233] xt_hashlimit: invalid rate [ 441.923000][T20242] netlink: 'syz.3.4458': attribute type 9 has an invalid length. [ 441.923000][T20243] netlink: 'syz.3.4458': attribute type 9 has an invalid length. [ 441.923032][T20243] netlink: 210020 bytes leftover after parsing attributes in process `syz.3.4458'. [ 441.932592][T20242] netlink: 210020 bytes leftover after parsing attributes in process `syz.3.4458'. [ 441.964264][T20244] Cannot find set identified by id 0 to match [ 442.004024][T20242] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4458'. [ 442.030830][T20243] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4458'. [ 442.211089][T20263] RDS: rds_bind could not find a transport for ::ffff:172.30.0.2, load rds_tcp or rds_rdma? [ 442.532852][T20285] netem: incorrect ge model size [ 442.549768][T20285] netem: change failed [ 442.599343][T20288] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 442.606676][T20288] IPv6: NLM_F_CREATE should be set when creating new route [ 442.613996][T20288] IPv6: NLM_F_CREATE should be set when creating new route [ 442.812289][T20305] Cannot find set identified by id 3 to match [ 443.405086][ C0] net_ratelimit: 32 callbacks suppressed [ 443.405110][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.438875][T20339] 8021q: VLANs not supported on gre0 [ 443.462475][T20337] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 443.515241][T20346] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.524346][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.532562][T20337] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 443.609903][T20352] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 443.782460][T20361] syzkaller1: entered promiscuous mode [ 443.794809][T20361] syzkaller1: entered allmulticast mode [ 443.803646][T20361] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 443.824570][T18965] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.988875][T20372] Cannot find set identified by id 3 to match [ 444.078768][T20378] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.088605][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.423464][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.956413][ T66] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.286435][T20451] Cannot find set identified by id 3 to match [ 445.463462][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.575645][T20481] __nla_validate_parse: 12 callbacks suppressed [ 445.575673][T20481] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4533'. [ 445.608254][T20481] xfrm1: entered promiscuous mode [ 445.613722][T20481] xfrm1: entered allmulticast mode [ 445.619827][T20481] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4533'. [ 445.675111][T20481] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4533'. [ 445.714107][T20481] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4533'. [ 445.738876][T20487] syzkaller0: entered promiscuous mode [ 445.754316][T20487] syzkaller0: entered allmulticast mode [ 445.762615][T20490] ip6tnl0: Caught tx_queue_len zero misconfig [ 445.965479][T20499] netlink: 5 bytes leftover after parsing attributes in process `syz.3.4539'. [ 445.990772][T20499] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4539'. [ 446.375148][T20525] validate_nla: 8 callbacks suppressed [ 446.375170][T20525] netlink: 'syz.4.4551': attribute type 1 has an invalid length. [ 446.401935][T20525] netlink: 216 bytes leftover after parsing attributes in process `syz.4.4551'. [ 446.430422][T20531] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4555'. [ 446.643985][T20544] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4558'. [ 446.749737][T20551] netlink: 'syz.4.4560': attribute type 4 has an invalid length. [ 446.913469][T20561] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4563'. [ 447.034115][T20567] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 447.131999][T20580] x_tables: ip_tables: socket match: used from hooks POSTROUTING, but only valid from PREROUTING/INPUT [ 447.763681][T20620] netlink: 'syz.1.4582': attribute type 21 has an invalid length. [ 448.195587][T20650] ip6gre0: Master is either lo or non-ether device [ 448.436571][T20669] smc: adding net device veth1_to_batadv with user defined pnetid SYZ1 [ 448.462782][T20675] ±ÿ: renamed from lo [ 448.657023][T20681] net_ratelimit: 36 callbacks suppressed [ 448.657047][T20681] openvswitch: netlink: Unexpected mask (mask=240040, allowed=10048) [ 448.773569][T20694] netlink: 'syz.0.4612': attribute type 1 has an invalid length. [ 448.782203][T20694] netlink: 'syz.0.4612': attribute type 1 has an invalid length. [ 448.892746][T20699] IPVS: set_ctl: invalid protocol: 115 172.20.20.15:20001 [ 449.092623][T20703] syzkaller0: entered promiscuous mode [ 449.099678][T20703] syzkaller0: entered allmulticast mode [ 449.623972][T20717] Cannot find set identified by id 0 to match [ 450.699719][T20722] __nla_validate_parse: 6 callbacks suppressed [ 450.699742][T20722] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4621'. [ 450.738692][T20722] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4621'. [ 451.032563][T20746] netlink: 208 bytes leftover after parsing attributes in process `syz.1.4628'. [ 451.056257][T20748] netlink: 'syz.0.4629': attribute type 9 has an invalid length. [ 451.321312][T20756] openvswitch: netlink: IP tunnel TTL not specified. [ 451.396529][T20765] netlink: 7064 bytes leftover after parsing attributes in process `syz.0.4637'. [ 451.408362][T20765] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 451.571809][T20777] netlink: 208 bytes leftover after parsing attributes in process `syz.3.4641'. [ 451.637659][T20780] netlink: 'syz.1.4643': attribute type 1 has an invalid length. [ 451.662923][T20782] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4644'. [ 451.799554][T20794] sctp: [Deprecated]: syz.2.4646 (pid 20794) Use of int in max_burst socket option. [ 451.799554][T20794] Use struct sctp_assoc_value instead [ 451.833137][T20784] bond16: (slave vxcan3): The slave device specified does not support setting the MAC address [ 451.866714][T20784] bond16: (slave vxcan3): Error -95 calling set_mac_address [ 452.027273][T20790] bond16: (slave gretap2): making interface the new active one [ 452.036032][T20790] bond16: (slave gretap2): Enslaving as an active interface with an up link [ 452.062997][T20780] macvlan0: entered promiscuous mode [ 452.068544][T20780] macvlan0: entered allmulticast mode [ 452.077765][T20780] bond16: entered promiscuous mode [ 452.083763][T20780] gretap2: entered promiscuous mode [ 452.090191][T20780] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 452.103470][T20780] bond16: (slave macvlan0): the slave hw address is in use by the bond; giving it the hw address of gretap2 [ 452.116920][T20780] bond16: left promiscuous mode [ 452.121818][T20780] gretap2: left promiscuous mode [ 452.166074][T20812] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.4650'. [ 452.178257][T20812] netlink: Conntrack attr has 4 unknown bytes [ 452.277604][T20814] vlan4: entered promiscuous mode [ 452.282719][T20814] geneve1: entered promiscuous mode [ 452.325737][T20814] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4651'. [ 452.350455][T20816] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4653'. [ 452.399615][T20825] vlan0: entered allmulticast mode [ 452.406055][T20825] bridge0: entered allmulticast mode [ 452.490573][T20828] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4655'. [ 452.523836][T20817] vlan0: left allmulticast mode [ 452.528864][T20817] bridge0: left allmulticast mode [ 452.759523][T20854] pim6reg: entered allmulticast mode [ 452.796017][T20855] syzkaller0: entered promiscuous mode [ 452.801564][T20855] syzkaller0: entered allmulticast mode [ 452.868506][T20859] FAULT_INJECTION: forcing a failure. [ 452.868506][T20859] name failslab, interval 1, probability 0, space 0, times 0 [ 452.904287][T20859] CPU: 1 UID: 0 PID: 20859 Comm: syz.3.4665 Not tainted syzkaller #0 PREEMPT(full) [ 452.904317][T20859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 452.904330][T20859] Call Trace: [ 452.904339][T20859] [ 452.904349][T20859] dump_stack_lvl+0xe8/0x150 [ 452.904395][T20859] should_fail_ex+0x412/0x560 [ 452.904432][T20859] should_failslab+0xa8/0x100 [ 452.904462][T20859] __kmalloc_cache_noprof+0x88/0x660 [ 452.904485][T20859] ? nl80211_prepare_wdev_dump+0x55f/0x6a0 [ 452.904516][T20859] ? nl80211_dump_station+0x2ab/0xdd0 [ 452.904552][T20859] nl80211_dump_station+0x2ab/0xdd0 [ 452.904578][T20859] ? kasan_save_track+0x3e/0x80 [ 452.904597][T20859] ? netlink_dump+0x1ef/0xe80 [ 452.904623][T20859] ? netlink_rcv_skb+0x232/0x4b0 [ 452.904644][T20859] ? genl_rcv+0x28/0x40 [ 452.904665][T20859] ? netlink_unicast+0x80f/0x9b0 [ 452.904687][T20859] ? netlink_sendmsg+0x813/0xb40 [ 452.904700][T20859] ? ____sys_sendmsg+0x972/0x9f0 [ 452.904724][T20859] ? __pfx_nl80211_dump_station+0x10/0x10 [ 452.904792][T20859] ? trace_kmalloc+0x2a/0x110 [ 452.904818][T20859] ? __kmalloc_node_track_caller_noprof+0x4f9/0x7b0 [ 452.904855][T20859] genl_dumpit+0x10b/0x1b0 [ 452.904886][T20859] netlink_dump+0x722/0xe80 [ 452.904931][T20859] ? __pfx_netlink_dump+0x10/0x10 [ 452.904980][T20859] ? genl_start+0x499/0x6c0 [ 452.905016][T20859] __netlink_dump_start+0x5cb/0x7e0 [ 452.905056][T20859] genl_family_rcv_msg_dumpit+0x213/0x310 [ 452.905087][T20859] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 452.905111][T20859] ? genl_get_cmd+0x7f4/0x930 [ 452.905141][T20859] ? __pfx_genl_start+0x10/0x10 [ 452.905162][T20859] ? __pfx_genl_dumpit+0x10/0x10 [ 452.905185][T20859] ? __pfx_genl_done+0x10/0x10 [ 452.905216][T20859] ? __lock_acquire+0x6b5/0x2cf0 [ 452.905251][T20859] genl_rcv_msg+0x5e8/0x7a0 [ 452.905284][T20859] ? __pfx_genl_rcv_msg+0x10/0x10 [ 452.905309][T20859] ? __pfx_nl80211_dump_station+0x10/0x10 [ 452.905338][T20859] ? __lock_acquire+0x6b5/0x2cf0 [ 452.905388][T20859] netlink_rcv_skb+0x232/0x4b0 [ 452.905422][T20859] ? __pfx_genl_rcv_msg+0x10/0x10 [ 452.905449][T20859] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 452.905502][T20859] ? down_read+0x272/0x2e0 [ 452.905528][T20859] ? genl_rcv+0xd/0x40 [ 452.905555][T20859] genl_rcv+0x28/0x40 [ 452.905578][T20859] netlink_unicast+0x80f/0x9b0 [ 452.905618][T20859] ? __pfx_netlink_unicast+0x10/0x10 [ 452.905651][T20859] ? netlink_sendmsg+0x650/0xb40 [ 452.905670][T20859] ? skb_put+0x11b/0x210 [ 452.905698][T20859] netlink_sendmsg+0x813/0xb40 [ 452.905730][T20859] ? __pfx_netlink_sendmsg+0x10/0x10 [ 452.905755][T20859] ? aa_sock_msg_perm+0xf1/0x1b0 [ 452.905789][T20859] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 452.905818][T20859] ____sys_sendmsg+0x972/0x9f0 [ 452.905855][T20859] ? __pfx_____sys_sendmsg+0x10/0x10 [ 452.905892][T20859] ? import_iovec+0x73/0xa0 [ 452.905919][T20859] ___sys_sendmsg+0x2a5/0x360 [ 452.905952][T20859] ? __pfx____sys_sendmsg+0x10/0x10 [ 452.906020][T20859] ? __fget_files+0x2a/0x420 [ 452.906051][T20859] ? __fget_files+0x3a0/0x420 [ 452.906093][T20859] __x64_sys_sendmsg+0x1bd/0x2a0 [ 452.906121][T20859] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 452.906159][T20859] ? __pfx_ksys_write+0x10/0x10 [ 452.906197][T20859] do_syscall_64+0x14d/0xf80 [ 452.906221][T20859] ? trace_irq_disable+0x3b/0x150 [ 452.906238][T20859] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.906260][T20859] ? clear_bhb_loop+0x40/0x90 [ 452.906286][T20859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.906307][T20859] RIP: 0033:0x7f7492f9c819 [ 452.906329][T20859] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 452.906347][T20859] RSP: 002b:00007f7493e4d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 452.906379][T20859] RAX: ffffffffffffffda RBX: 00007f7493215fa0 RCX: 00007f7492f9c819 [ 452.906395][T20859] RDX: 0000000020004044 RSI: 0000200000000180 RDI: 0000000000000003 [ 452.906410][T20859] RBP: 00007f7493e4d090 R08: 0000000000000000 R09: 0000000000000000 [ 452.906423][T20859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 452.906435][T20859] R13: 00007f7493216038 R14: 00007f7493215fa0 R15: 00007ffce5e5e728 [ 452.906473][T20859] [ 452.911832][T20864] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 454.181337][T20929] IPVS: set_ctl: invalid protocol: 115 172.20.20.15:20001 [ 454.322983][T20935] netlink: 'syz.3.4690': attribute type 12 has an invalid length. [ 454.334336][T20935] netlink: 'syz.3.4690': attribute type 12 has an invalid length. [ 454.468044][T20948] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 454.560488][T20948] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 454.655225][T20948] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 454.697735][T20963] netlink: 'syz.0.4701': attribute type 29 has an invalid length. [ 454.706255][T20962] netlink: 'syz.2.4700': attribute type 1 has an invalid length. [ 454.706410][T20964] netlink: 'syz.0.4701': attribute type 29 has an invalid length. [ 455.286353][T20994] IPVS: Unknown mcast interface: vcan0 [ 456.255321][T21036] __nla_validate_parse: 13 callbacks suppressed [ 456.255344][T21036] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4723'. [ 456.601705][T21063] netlink: 232 bytes leftover after parsing attributes in process `syz.4.4731'. [ 456.904297][T21079] openvswitch: netlink: Flow actions attr not present in new flow. [ 456.927996][T21069] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96 [ 457.344723][T21089] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 457.408929][T21089] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 457.482136][T21089] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 457.573505][T21096] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4741'. [ 457.742436][T21096] netlink: 'syz.0.4741': attribute type 1 has an invalid length. [ 457.773484][T21096] netlink: 'syz.0.4741': attribute type 2 has an invalid length. [ 458.108712][T21114] syzkaller0: entered promiscuous mode [ 458.148285][T21114] syzkaller0: entered allmulticast mode [ 459.641636][T21162] netlink: 'syz.1.4760': attribute type 10 has an invalid length. [ 460.069080][T21124] workqueue: Failed to create a rescuer kthread for wq "bond14": -EINTR [ 460.137916][T21162] vxcan1: left allmulticast mode [ 460.158676][T21162] team0: Refused to change device type [ 460.224154][T21167] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 460.225241][T21169] netlink: 208 bytes leftover after parsing attributes in process `syz.0.4763'. [ 460.324818][T21167] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 460.374577][T21178] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4764'. [ 460.407725][T21179] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 460.457377][T21181] netlink: 'syz.0.4767': attribute type 1 has an invalid length. [ 460.490759][T21181] netlink: 'syz.0.4767': attribute type 2 has an invalid length. [ 460.504827][T21181] netlink: 'syz.0.4767': attribute type 1 has an invalid length. [ 460.512696][T21181] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4767'. [ 460.549895][T21187] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4770'. [ 460.585838][T21187] ¾x9ÿ: left promiscuous mode [ 460.591707][T21187] bridge0: port 1(0¾x9ÿ) entered disabled state [ 462.459926][T21204] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4776'. [ 462.514696][T21219] tipc: Enabled bearer , priority 10 [ 462.543830][T21229] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4779'. [ 462.553056][T21229] IPVS: Unknown mcast interface: vcan0 [ 462.683745][T21235] netlink: 'syz.0.4780': attribute type 25 has an invalid length. [ 462.691739][T21235] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4780'. [ 462.702791][T21235] netlink: 'syz.0.4780': attribute type 25 has an invalid length. [ 462.727228][T21235] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4780'. [ 462.748146][T21246] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4783'. [ 463.062411][T21266] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 463.126335][T21266] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 463.200633][T21273] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 463.361914][T21282] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4794'. [ 463.636144][T20882] tipc: Node number set to 1334335022 [ 463.722664][T21303] netlink: 92 bytes leftover after parsing attributes in process `syz.4.4801'. [ 463.856972][T21310] netlink: 208 bytes leftover after parsing attributes in process `syz.3.4803'. [ 463.914914][T21312] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 464.188615][T21332] Set syz1 is full, maxelem 0 reached [ 464.561025][T21353] netlink: 208 bytes leftover after parsing attributes in process `syz.4.4820'. [ 464.687643][T21359] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4822'. [ 464.758158][T21363] rdma_rxe: rxe_newlink: failed to add lo [ 464.850902][T21367] syzkaller0: entered promiscuous mode [ 465.057017][T21375] syzkaller0: entered promiscuous mode [ 465.072394][T21375] syzkaller0: entered allmulticast mode [ 465.448464][T21401] openvswitch: netlink: Flow actions attr not present in new flow. [ 465.778456][T21424] netlink: 'syz.4.4847': attribute type 1 has an invalid length. [ 465.859034][T21430] netlink: 'syz.4.4847': attribute type 1 has an invalid length. [ 466.064589][T21430] bond15: entered promiscuous mode [ 466.070307][T21430] 8021q: adding VLAN 0 to HW filter on device bond15 [ 466.087706][T21436] tipc: Enabling of bearer rejected, already enabled [ 466.145263][T21433] bond15: (slave bridge0): making interface the new active one [ 466.152879][T21433] bridge0: entered promiscuous mode [ 466.159684][T21433] bond15: (slave bridge0): Enslaving as an active interface with an up link [ 466.601832][T21466] erspan0: entered promiscuous mode [ 466.608957][T21466] gretap0: entered promiscuous mode [ 466.617827][T21466] hsr1: Slave A (erspan0) is not up; please bring it up to get a fully working HSR network [ 466.644834][T21466] hsr1: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network [ 466.657335][T21468] tipc: Enabling of bearer rejected, already enabled [ 467.099513][T21499] IPVS: Unknown mcast interface: vcan0 [ 467.648922][T21542] netlink: 'syz.4.4890': attribute type 1 has an invalid length. [ 467.936012][T21564] sctp: [Deprecated]: syz.2.4897 (pid 21564) Use of int in maxseg socket option. [ 467.936012][T21564] Use struct sctp_assoc_value instead [ 468.004977][T21571] __nla_validate_parse: 16 callbacks suppressed [ 468.005001][T21571] netlink: 92 bytes leftover after parsing attributes in process `syz.1.4900'. [ 468.144712][T21581] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4904'. [ 468.328548][T21589] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4908'. [ 468.351535][ T49] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 468.361146][ T49] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 468.375317][ T7099] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 468.643956][ T7099] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 468.652083][ T7099] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 468.974487][T21616] netem: unknown loss type 0 [ 468.989871][T21616] netem: change failed [ 469.025792][T21617] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4915'. [ 469.052206][T21617] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4915'. [ 469.093232][T21623] FAULT_INJECTION: forcing a failure. [ 469.093232][T21623] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 469.113475][T21623] CPU: 1 UID: 0 PID: 21623 Comm: syz.1.4917 Not tainted syzkaller #0 PREEMPT(full) [ 469.113504][T21623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 469.113516][T21623] Call Trace: [ 469.113525][T21623] [ 469.113534][T21623] dump_stack_lvl+0xe8/0x150 [ 469.113569][T21623] should_fail_ex+0x412/0x560 [ 469.113605][T21623] _copy_to_user+0x31/0xb0 [ 469.113632][T21623] simple_read_from_buffer+0xe1/0x170 [ 469.113669][T21623] proc_fail_nth_read+0x1bb/0x230 [ 469.113704][T21623] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 469.113737][T21623] ? rw_verify_area+0x2a6/0x4d0 [ 469.113760][T21623] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 469.113791][T21623] vfs_read+0x20c/0xa70 [ 469.113813][T21623] ? fdget_pos+0x246/0x320 [ 469.113838][T21623] ? __pfx___mutex_lock+0x10/0x10 [ 469.113865][T21623] ? __pfx_vfs_read+0x10/0x10 [ 469.113889][T21623] ? __fget_files+0x2a/0x420 [ 469.113925][T21623] ? __fget_files+0x3a0/0x420 [ 469.113961][T21623] ? __fget_files+0x2a/0x420 [ 469.114000][T21623] ksys_read+0x150/0x270 [ 469.114027][T21623] ? __pfx_ksys_read+0x10/0x10 [ 469.114061][T21623] do_syscall_64+0x14d/0xf80 [ 469.114086][T21623] ? trace_irq_disable+0x3b/0x150 [ 469.114105][T21623] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.114127][T21623] ? clear_bhb_loop+0x40/0x90 [ 469.114154][T21623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.114175][T21623] RIP: 0033:0x7f9de5d5d04e [ 469.114196][T21623] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 469.114215][T21623] RSP: 002b:00007f9de6c61fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 469.114239][T21623] RAX: ffffffffffffffda RBX: 00007f9de6c626c0 RCX: 00007f9de5d5d04e [ 469.114255][T21623] RDX: 000000000000000f RSI: 00007f9de6c620a0 RDI: 0000000000000008 [ 469.114269][T21623] RBP: 00007f9de6c62090 R08: 0000000000000000 R09: 0000000000000000 [ 469.114282][T21623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 469.114304][T21623] R13: 00007f9de6016038 R14: 00007f9de6015fa0 R15: 00007ffd9d946748 [ 469.114339][T21623] [ 469.374324][T21617] syzkaller0: entered promiscuous mode [ 469.379872][T21617] syzkaller0: entered allmulticast mode [ 469.550772][T21630] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4920'. [ 469.875779][T21644] netlink: 'syz.3.4925': attribute type 1 has an invalid length. [ 469.884017][T21644] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4925'. [ 471.536860][T21682] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4934'. [ 471.598806][T21685] netlink: 'syz.3.4936': attribute type 1 has an invalid length. [ 471.607529][T21685] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4936'. [ 471.723477][T21692] netlink: 'syz.2.4940': attribute type 1 has an invalid length. [ 471.782878][T21699] netlink: 'syz.4.4942': attribute type 3 has an invalid length. [ 471.816478][T21692] bond19: entered promiscuous mode [ 471.821741][T21692] bond19: entered allmulticast mode [ 471.829600][T21699] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4942'. [ 471.830522][T21692] 8021q: adding VLAN 0 to HW filter on device bond19 [ 471.846937][T21698] netem: incorrect gi model size [ 471.853414][T21698] netem: change failed [ 471.887301][T21692] macvlan0: entered promiscuous mode [ 471.892753][T21692] macvlan0: entered allmulticast mode [ 471.900827][T21692] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 472.245427][T21729] netlink: 'syz.2.4951': attribute type 1 has an invalid length. [ 472.364356][T21733] sctp: [Deprecated]: syz.0.4952 (pid 21733) Use of int in maxseg socket option. [ 472.364356][T21733] Use struct sctp_assoc_value instead [ 472.371448][T21738] erspan0: entered promiscuous mode [ 472.423563][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 472.431394][T21740] lo: Caught tx_queue_len zero misconfig [ 472.526953][T21747] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 472.593151][T21747] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 472.668070][T21747] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 472.778149][T21762] netlink: 'syz.0.4966': attribute type 1 has an invalid length. [ 472.841773][T21766] Cannot find set identified by id 0 to match [ 472.981853][T21772] netlink: 'syz.2.4971': attribute type 1 has an invalid length. [ 473.025637][T21772] bond20: entered promiscuous mode [ 473.031518][T21772] 8021q: adding VLAN 0 to HW filter on device bond20 [ 473.353715][T21793] netlink: 'syz.4.4978': attribute type 1 has an invalid length. [ 473.361506][T21793] __nla_validate_parse: 8 callbacks suppressed [ 473.361522][T21793] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4978'. [ 473.838826][T21820] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4985'. [ 474.061390][T21838] veth0: entered promiscuous mode [ 474.136696][T21836] veth0: left promiscuous mode [ 474.224039][T21846] sctp: [Deprecated]: syz.0.4994 (pid 21846) Use of struct sctp_assoc_value in delayed_ack socket option. [ 474.224039][T21846] Use struct sctp_sack_info instead [ 474.304475][T21850] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4995'. [ 474.333231][T21850] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4995'. [ 474.531185][T21865] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5001'. [ 474.591758][T21867] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5002'. [ 474.596756][T21872] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5003'. [ 474.616649][T21865] veth10: entered allmulticast mode [ 474.798418][T21885] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5007'. [ 474.917763][T21885] 8021q: adding VLAN 0 to HW filter on device bond17 [ 474.975544][T21896] Cannot find set identified by id 0 to match [ 475.018809][T21885] macvlan0: entered promiscuous mode [ 475.041399][T21885] macvlan0: entered allmulticast mode [ 475.047808][T21885] bond17: entered allmulticast mode [ 475.058604][T21885] bond17: entered promiscuous mode [ 475.068426][T21885] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 475.107054][T21885] team0: Port device macvlan0 added [ 475.364126][T21918] netlink: 256 bytes leftover after parsing attributes in process `syz.3.5018'. [ 475.541975][T21928] netlink: 208 bytes leftover after parsing attributes in process `syz.0.5021'. [ 475.800431][T21934] IPVS: Unknown mcast interface: vcan0 [ 475.905726][T21942] tipc: Enabling of bearer rejected, already enabled [ 476.446514][T21974] netlink: 'syz.3.5039': attribute type 1 has an invalid length. [ 476.547967][T21982] bond10: (slave ip6gretap1): making interface the new active one [ 476.599123][T21982] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 476.614090][T21982] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 476.622055][T21982] bond10: (slave ip6gretap1): Enslaving as an active interface with an up link [ 476.634984][T21985] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 476.686357][T21990] syzkaller1: entered promiscuous mode [ 476.692071][T21990] syzkaller1: entered allmulticast mode [ 476.698800][T21985] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 476.713048][T21990] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324 [ 476.801363][T21997] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 476.910695][T22000] xt_policy: neither incoming nor outgoing policy selected [ 477.524228][T22043] netlink: 'syz.0.5056': attribute type 1 has an invalid length. [ 477.538411][T22043] netlink: 'syz.0.5056': attribute type 8 has an invalid length. [ 477.559668][T22049] xt_policy: neither incoming nor outgoing policy selected [ 477.567874][T22036] syzkaller1: entered promiscuous mode [ 477.583630][T22036] syzkaller1: entered allmulticast mode [ 478.101826][T22076] x_tables: unsorted entry at hook 1 [ 478.130494][T22079] tipc: Enabled bearer , priority 10 [ 478.173255][T22084] xt_policy: neither incoming nor outgoing policy selected [ 478.397151][T22094] netlink: 'syz.2.5077': attribute type 11 has an invalid length. [ 478.425258][T22094] netlink: 'syz.2.5077': attribute type 4 has an invalid length. [ 478.435512][T22094] __nla_validate_parse: 15 callbacks suppressed [ 478.435533][T22094] netlink: 199768 bytes leftover after parsing attributes in process `syz.2.5077'. [ 478.454697][T22100] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5079'. [ 478.569504][T22105] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5084'. [ 478.605312][T22108] netlink: 256 bytes leftover after parsing attributes in process `syz.3.5083'. [ 478.950498][T22134] netlink: 'syz.1.5089': attribute type 1 has an invalid length. [ 478.960610][T22135] x_tables: duplicate underflow at hook 3 [ 479.044624][T22134] workqueue: Failed to create a rescuer kthread for wq "bond18": -EINTR [ 479.253936][T22156] netlink: 'syz.1.5095': attribute type 11 has an invalid length. [ 479.274597][T22142] syzkaller1: entered promiscuous mode [ 479.280138][T22142] syzkaller1: entered allmulticast mode [ 479.310450][T22156] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5095'. [ 479.319412][T22158] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5094'. [ 479.552557][T22172] netlink: 'syz.2.5099': attribute type 1 has an invalid length. [ 479.563993][T22176] netlink: 'syz.2.5099': attribute type 2 has an invalid length. [ 479.735310][T22184] netlink: 256 bytes leftover after parsing attributes in process `syz.0.5103'. [ 479.919848][T22197] tipc: Enabled bearer , priority 10 [ 480.175438][T22211] syzkaller1: entered promiscuous mode [ 480.186295][T22211] syzkaller1: entered allmulticast mode [ 480.319884][T18967] tipc: Subscription rejected, illegal request [ 480.392301][T22228] netlink: 256 bytes leftover after parsing attributes in process `syz.2.5120'. [ 480.610796][T22237] netlink: 'syz.3.5123': attribute type 4 has an invalid length. [ 480.777034][T22247] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.5125'. [ 480.834914][T22253] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5126'. [ 480.884515][T22258] wlan1 speed is unknown, defaulting to 1000 [ 480.890767][T22258] wlan1 speed is unknown, defaulting to 1000 [ 480.902260][T22258] wlan1 speed is unknown, defaulting to 1000 [ 480.923189][T22258] infiniband óyz2: RDMA CMA: cma_listen_on_dev, error -98 [ 481.001833][T22258] wlan1 speed is unknown, defaulting to 1000 [ 481.019557][T22258] wlan1 speed is unknown, defaulting to 1000 [ 481.038298][T22258] wlan1 speed is unknown, defaulting to 1000 [ 481.075246][T22258] wlan1 speed is unknown, defaulting to 1000 [ 481.092883][T22258] wlan1 speed is unknown, defaulting to 1000 [ 481.137458][T22271] syzkaller1: entered promiscuous mode [ 481.143203][T22271] syzkaller1: entered allmulticast mode [ 481.143516][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 481.360902][T22281] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma? [ 481.920144][T22320] mac80211_hwsim hwsim37 wlan0: entered promiscuous mode [ 482.206191][T22334] netlink: 'syz.3.5159': attribute type 8 has an invalid length. [ 482.338288][T22346] netlink: 'syz.1.5163': attribute type 1 has an invalid length. [ 482.416538][T22346] 8021q: adding VLAN 0 to HW filter on device bond18 [ 482.758525][T22372] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20003 [ 482.892170][T22375] xt_CT: No such helper "pptp" [ 482.954564][T22386] macsec0: entered promiscuous mode [ 482.974358][T22386] macsec0: entered allmulticast mode [ 482.984095][T22386] macsec0: left promiscuous mode [ 482.989474][T22386] macsec0: left allmulticast mode [ 483.007884][T22389] macvtap1: entered allmulticast mode [ 483.043580][T22386] netlink: 'syz.2.5180': attribute type 1 has an invalid length. [ 483.140054][T22387] xt_hashlimit: size too large, truncated to 1048576 [ 483.200640][T22405] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 483.402515][T22415] netlink: 'syz.4.5189': attribute type 1 has an invalid length. [ 483.412053][T22415] netlink: 'syz.4.5189': attribute type 2 has an invalid length. [ 483.540421][T22419] A link change request failed with some changes committed already. Interface 26±ÿ may have been left with an inconsistent configuration, please check. [ 483.585565][T22426] FAULT_INJECTION: forcing a failure. [ 483.585565][T22426] name failslab, interval 1, probability 0, space 0, times 0 [ 483.663641][T22426] CPU: 0 UID: 0 PID: 22426 Comm: syz.0.5191 Not tainted syzkaller #0 PREEMPT(full) [ 483.663672][T22426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 483.663686][T22426] Call Trace: [ 483.663694][T22426] [ 483.663704][T22426] dump_stack_lvl+0xe8/0x150 [ 483.663759][T22426] should_fail_ex+0x412/0x560 [ 483.663795][T22426] should_failslab+0xa8/0x100 [ 483.663825][T22426] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 483.663848][T22426] ? __alloc_skb+0x186/0x7d0 [ 483.663868][T22426] ? __alloc_skb+0x1d0/0x7d0 [ 483.663938][T22426] ? __local_bh_enable_ip+0xd0/0x130 [ 483.663971][T22426] __alloc_skb+0x1d0/0x7d0 [ 483.663992][T22426] ? netlink_ack_tlv_len+0x6c/0x210 [ 483.664026][T22426] netlink_ack+0x146/0xa50 [ 483.664053][T22426] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 483.664078][T22426] ? __lock_acquire+0x6b5/0x2cf0 [ 483.664116][T22426] netlink_rcv_skb+0x2b6/0x4b0 [ 483.664148][T22426] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 483.664170][T22426] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 483.664213][T22426] ? netlink_deliver_tap+0x2e/0x1b0 [ 483.664253][T22426] netlink_unicast+0x80f/0x9b0 [ 483.664290][T22426] ? __pfx_netlink_unicast+0x10/0x10 [ 483.664327][T22426] ? netlink_sendmsg+0x650/0xb40 [ 483.664344][T22426] ? skb_put+0x11b/0x210 [ 483.664370][T22426] netlink_sendmsg+0x813/0xb40 [ 483.664400][T22426] ? __pfx_netlink_sendmsg+0x10/0x10 [ 483.664424][T22426] ? aa_sock_msg_perm+0xf1/0x1b0 [ 483.664455][T22426] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 483.664481][T22426] ____sys_sendmsg+0x972/0x9f0 [ 483.664516][T22426] ? __pfx_____sys_sendmsg+0x10/0x10 [ 483.664549][T22426] ? import_iovec+0x73/0xa0 [ 483.664577][T22426] ___sys_sendmsg+0x2a5/0x360 [ 483.664606][T22426] ? __pfx____sys_sendmsg+0x10/0x10 [ 483.664667][T22426] ? __fget_files+0x2a/0x420 [ 483.664696][T22426] ? __fget_files+0x3a0/0x420 [ 483.664737][T22426] __x64_sys_sendmsg+0x1bd/0x2a0 [ 483.664765][T22426] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 483.664798][T22426] ? __pfx_ksys_write+0x10/0x10 [ 483.664834][T22426] do_syscall_64+0x14d/0xf80 [ 483.664858][T22426] ? trace_irq_disable+0x3b/0x150 [ 483.664875][T22426] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.664993][T22426] ? clear_bhb_loop+0x40/0x90 [ 483.665021][T22426] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.665041][T22426] RIP: 0033:0x7fadd699c819 [ 483.665062][T22426] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 483.665080][T22426] RSP: 002b:00007fadd77c0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 483.665105][T22426] RAX: ffffffffffffffda RBX: 00007fadd6c15fa0 RCX: 00007fadd699c819 [ 483.665121][T22426] RDX: 000000002000400c RSI: 0000200000000300 RDI: 0000000000000003 [ 483.665135][T22426] RBP: 00007fadd77c0090 R08: 0000000000000000 R09: 0000000000000000 [ 483.665149][T22426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 483.665162][T22426] R13: 00007fadd6c16038 R14: 00007fadd6c15fa0 R15: 00007fff47836e58 [ 483.665194][T22426] [ 484.016454][T22432] __nla_validate_parse: 9 callbacks suppressed [ 484.016477][T22432] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5193'. [ 484.030444][T22436] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 484.034382][T22434] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5194'. [ 484.429566][T22460] netlink: 'syz.3.5203': attribute type 39 has an invalid length. [ 484.431475][T22459] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5204'. [ 484.475163][T22460] hsr_slave_1 (unregistering): left promiscuous mode [ 484.623033][T22473] tipc: Enabled bearer , priority 0 [ 484.700657][T22479] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5210'. [ 484.724795][T22482] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5211'. [ 484.730032][T22483] openvswitch: netlink: IP tunnel dst address not specified [ 484.752569][T22483] netlink: 'syz.3.5208': attribute type 10 has an invalid length. [ 484.764643][T22483] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5208'. [ 484.950381][T22494] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5213'. [ 484.959964][T22495] siw: device registration error -23 [ 484.972071][T22497] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5217'. [ 485.004538][T22494] ±ÿ: entered allmulticast mode [ 485.016804][T22494] tunl0: entered allmulticast mode [ 485.022202][T22494] gre0: entered allmulticast mode [ 485.033614][T22494] gretap0: entered allmulticast mode [ 485.055893][T22494] erspan0: entered allmulticast mode [ 485.061574][T22494] ip_vti0: entered allmulticast mode [ 485.118102][T22494] ip6_vti0: entered allmulticast mode [ 485.138537][T22494] bridge_slave_1: entered allmulticast mode [ 485.158840][T22494] sit1: entered allmulticast mode [ 485.188133][T22494] @: entered allmulticast mode [ 485.200557][T22494] bond1: left promiscuous mode [ 485.227563][T22494] bond1: entered allmulticast mode [ 485.245130][T22494] vlan2: entered allmulticast mode [ 485.250501][T22494] veth0_to_team.2: entered allmulticast mode [ 485.262387][T22494] gtp0: left promiscuous mode [ 485.270408][T22494] bond2: entered allmulticast mode [ 485.277721][T22494] : entered allmulticast mode [ 485.288167][T22494] macvtap1: left promiscuous mode [ 485.298690][T22494] bond3: entered allmulticast mode [ 485.305816][T22494] bond_slave_1.4: entered allmulticast mode [ 485.312636][T22494] mac80211_hwsim hwsim11 pimreg: entered allmulticast mode [ 485.314182][T22522] netlink: 348 bytes leftover after parsing attributes in process `syz.3.5224'. [ 485.320975][T22494] bond4: entered allmulticast mode [ 485.336833][T22494] team0.0000: entered allmulticast mode [ 485.342877][T22494] bridge1: entered allmulticast mode [ 485.350541][T22494] bridge2: left promiscuous mode [ 485.356419][T22494] mac80211_hwsim hwsim28 wlan2: entered allmulticast mode [ 485.364262][T22494] erspan2: entered allmulticast mode [ 485.369844][T22494] ipip0: entered allmulticast mode [ 485.376997][T22494] bond5: entered allmulticast mode [ 485.382140][T22494] geneve2: entered allmulticast mode [ 485.390788][T22494] mac80211_hwsim hwsim30 wlan3: entered allmulticast mode [ 485.398734][T22494] vxlan0: entered allmulticast mode [ 485.406489][T22494] bond6: entered allmulticast mode [ 485.412003][T22494] vlan3: left promiscuous mode [ 485.418009][T22494] bond0: entered allmulticast mode [ 485.424556][T22494] bridge3: entered allmulticast mode [ 485.431307][T22494] gretap1: entered allmulticast mode [ 485.437077][T22494] veth2: entered allmulticast mode [ 485.442340][T22494] veth3: entered allmulticast mode [ 485.448234][T22494] ipvlan2: entered allmulticast mode [ 485.455566][T22494] bond7: entered allmulticast mode [ 485.460692][T22494] geneve3: entered allmulticast mode [ 485.469737][T22494] bridge4: entered allmulticast mode [ 485.477030][T22494] bridge5: entered allmulticast mode [ 485.484384][T22494] bond8: entered allmulticast mode [ 485.490678][T22494] bond9: left promiscuous mode [ 485.495880][T22494] bond9: entered allmulticast mode [ 485.501904][T22494] sit2: entered allmulticast mode [ 485.509320][T22494] bond10: entered allmulticast mode [ 485.514989][T22494] ip6tnl1: entered allmulticast mode [ 485.520373][T22494] ip6_vti1: entered allmulticast mode [ 485.526116][T22494] gre1: entered allmulticast mode [ 485.531370][T22494] gre2: entered allmulticast mode [ 485.538358][T22494] bond11: left promiscuous mode [ 485.543231][T22494] ip6gre1: left promiscuous mode [ 485.548788][T22494] bond11: entered allmulticast mode [ 485.554537][T22494] ip6gre1: entered allmulticast mode [ 485.562053][T22494] mac80211_hwsim hwsim10 dvmrp0: entered allmulticast mode [ 485.569620][T22494] macsec1: entered allmulticast mode [ 485.575324][T22494] veth4: entered allmulticast mode [ 485.580537][T22494] veth5: entered allmulticast mode [ 485.585899][T22494] bond12: entered allmulticast mode [ 485.591327][T22494] sit3: entered allmulticast mode [ 485.598757][T22494] netdevsim netdevsim4 eth0: entered allmulticast mode [ 485.605925][T22494] netdevsim netdevsim4 eth1: entered allmulticast mode [ 485.612924][T22494] netdevsim netdevsim4 eth2: entered allmulticast mode [ 485.620267][T22494] netdevsim netdevsim4 eth3: entered allmulticast mode [ 485.627780][T22494] bridge6: entered allmulticast mode [ 485.635262][T22494] mac80211_hwsim hwsim10 pim6reg0: entered allmulticast mode [ 485.643703][T22494] bond13: left promiscuous mode [ 485.648704][T22494] bond13: entered allmulticast mode [ 485.655078][T22494] vlan0000: entered allmulticast mode [ 485.660888][T22494] bridge7: entered allmulticast mode [ 485.668796][T22494] bond14: entered allmulticast mode [ 485.674677][T22494] geneve4: entered allmulticast mode [ 485.684359][T22494] ip6tnl2: entered allmulticast mode [ 485.689932][T22494] xfrm1: left promiscuous mode [ 485.695289][T22494] batadv1: entered allmulticast mode [ 485.700779][T22494] sit4: entered allmulticast mode [ 485.706176][T22494] vlan4: left promiscuous mode [ 485.711059][T22494] geneve1: left promiscuous mode [ 485.717212][T22494] vlan4: entered allmulticast mode [ 485.724066][T22494] mac80211_hwsim hwsim40 wlan4: entered allmulticast mode [ 485.733617][T22494] bond15: left promiscuous mode [ 485.738788][T22494] bridge0: left promiscuous mode [ 485.744049][T22494] bond15: entered allmulticast mode [ 485.749365][T22494] bridge0: entered allmulticast mode [ 485.763589][T22494] bridge8: entered allmulticast mode [ 485.764024][T22525] FAULT_INJECTION: forcing a failure. [ 485.764024][T22525] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 485.771815][T22494] ip6tnl3: entered allmulticast mode [ 485.788777][T22525] CPU: 0 UID: 0 PID: 22525 Comm: syz.2.5225 Not tainted syzkaller #0 PREEMPT(full) [ 485.788805][T22525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 485.788818][T22525] Call Trace: [ 485.788826][T22525] [ 485.788835][T22525] dump_stack_lvl+0xe8/0x150 [ 485.788871][T22525] should_fail_ex+0x412/0x560 [ 485.788914][T22525] _copy_to_user+0x31/0xb0 [ 485.788941][T22525] simple_read_from_buffer+0xe1/0x170 [ 485.788976][T22525] proc_fail_nth_read+0x1bb/0x230 [ 485.789010][T22525] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 485.789042][T22525] ? rw_verify_area+0x2a6/0x4d0 [ 485.789061][T22525] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 485.789079][T22525] vfs_read+0x20c/0xa70 [ 485.789092][T22525] ? fdget_pos+0x246/0x320 [ 485.789106][T22525] ? __pfx___mutex_lock+0x10/0x10 [ 485.789126][T22525] ? __pfx_vfs_read+0x10/0x10 [ 485.789140][T22525] ? __fget_files+0x2a/0x420 [ 485.789163][T22525] ? __fget_files+0x3a0/0x420 [ 485.789180][T22525] ? __fget_files+0x2a/0x420 [ 485.789202][T22525] ksys_read+0x150/0x270 [ 485.789217][T22525] ? __pfx_ksys_read+0x10/0x10 [ 485.789230][T22525] ? __pfx_sock_ioctl+0x10/0x10 [ 485.789253][T22525] do_syscall_64+0x14d/0xf80 [ 485.789267][T22525] ? trace_irq_disable+0x3b/0x150 [ 485.789278][T22525] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.789291][T22525] ? clear_bhb_loop+0x40/0x90 [ 485.789307][T22525] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.789319][T22525] RIP: 0033:0x7fdc1e15d04e [ 485.789333][T22525] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 485.789345][T22525] RSP: 002b:00007fdc1f0c7fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 485.789360][T22525] RAX: ffffffffffffffda RBX: 00007fdc1f0c86c0 RCX: 00007fdc1e15d04e [ 485.789369][T22525] RDX: 000000000000000f RSI: 00007fdc1f0c80a0 RDI: 0000000000000003 [ 485.789377][T22525] RBP: 00007fdc1f0c8090 R08: 0000000000000000 R09: 0000000000000000 [ 485.789385][T22525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 485.789392][T22525] R13: 00007fdc1e416038 R14: 00007fdc1e415fa0 R15: 00007ffc4f4f8878 [ 485.789412][T22525] [ 486.018589][T18967] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 486.040967][T18967] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 486.068020][T18967] netdevsim netdevsim4 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 486.097869][T18967] netdevsim netdevsim4 eth0: unset [1, 2] type 2 family 0 port 20004 - 0 [ 486.139993][T18967] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 486.148632][T18967] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 486.157398][T18967] netdevsim netdevsim4 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 486.175306][T18967] netdevsim netdevsim4 eth1: unset [1, 2] type 2 family 0 port 20004 - 0 [ 486.186617][T18967] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 486.195408][T18967] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 486.204551][T18967] netdevsim netdevsim4 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 486.212939][T18967] netdevsim netdevsim4 eth2: unset [1, 2] type 2 family 0 port 20004 - 0 [ 486.250616][T18967] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 486.279030][T18967] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 486.299257][T18967] netdevsim netdevsim4 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 486.320568][T18967] netdevsim netdevsim4 eth3: unset [1, 2] type 2 family 0 port 20004 - 0 [ 486.460570][T22539] openvswitch: netlink: IP tunnel attribute has 30 unknown bytes. [ 486.460990][T22548] netlink: 216 bytes leftover after parsing attributes in process `syz.4.5234'. [ 486.479067][T22546] IPVS: Unknown mcast interface: pimreg1 [ 486.519911][T22551] openvswitch: netlink: IP tunnel dst address not specified [ 486.893466][T22573] bond19: entered promiscuous mode [ 486.898850][T22573] bond19: entered allmulticast mode [ 486.910696][T22573] 8021q: adding VLAN 0 to HW filter on device bond19 [ 487.175140][T22579] syzkaller0: entered promiscuous mode [ 487.180710][T22579] syzkaller0: entered allmulticast mode [ 487.476827][T22611] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 487.512983][T22611] netlink: 'syz.4.5256': attribute type 1 has an invalid length. [ 488.996373][T22614] IPVS: Unknown mcast interface: vcan0 [ 489.002124][T22625] gre0: entered promiscuous mode [ 489.007642][T22611] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 489.007997][T22625] gre0: entered allmulticast mode [ 489.169834][T22632] __nla_validate_parse: 5 callbacks suppressed [ 489.169856][T22632] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5263'. [ 489.247266][T22632] bond16: option xmit_hash_policy: invalid value (64) [ 489.256478][T22632] bond16 (unregistering): Released all slaves [ 489.280387][T22642] netlink: 256 bytes leftover after parsing attributes in process `syz.2.5265'. [ 489.387830][T22649] netlink: 208 bytes leftover after parsing attributes in process `syz.3.5268'. [ 489.398167][T22645] syzkaller1: entered promiscuous mode [ 489.405611][T22645] syzkaller1: entered allmulticast mode [ 489.417850][T22645] netlink: 256 bytes leftover after parsing attributes in process `syz.1.5267'. [ 489.436666][T22645] unsupported nlmsg_type 40 [ 489.714167][T22665] Bluetooth: hci1: too big key_count value 32778 [ 489.850359][ T13] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 489.871465][ T13] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 489.937121][T22673] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 489.966616][ T13] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 489.983435][ T13] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 490.059902][T22682] netlink: 'syz.2.5280': attribute type 1 has an invalid length. [ 490.067873][T22682] netlink: 228 bytes leftover after parsing attributes in process `syz.2.5280'. [ 490.179552][T22690] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5283'. [ 490.207740][T22690] IPVS: Unknown mcast interface: vcan0 [ 490.267008][T22693] bond14: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 490.333160][T22693] bond14 (unregistering): Released all slaves [ 490.364628][T22697] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5285'. [ 490.377729][T22697] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5285'. [ 490.403874][T22697] netlink: 'syz.1.5285': attribute type 3 has an invalid length. [ 490.458626][T22706] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5287'. [ 490.556631][T22714] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5291'. [ 490.815638][T22730] syzkaller1: entered promiscuous mode [ 490.821164][T22730] syzkaller1: entered allmulticast mode [ 490.940038][T22726] netlink: 'syz.2.5294': attribute type 3 has an invalid length. [ 491.014050][T22726] netlink: 'syz.2.5294': attribute type 3 has an invalid length. [ 491.179436][T22757] netlink: 'syz.4.5301': attribute type 1 has an invalid length. [ 491.408026][T22768] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 491.839355][T22796] syzkaller1: entered promiscuous mode [ 491.856561][T22796] syzkaller1: entered allmulticast mode [ 492.047884][T22804] bond14: entered promiscuous mode [ 492.092692][T22804] 8021q: adding VLAN 0 to HW filter on device bond14 [ 492.516101][T22843] FAULT_INJECTION: forcing a failure. [ 492.516101][T22843] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 492.519984][T22839] syzkaller1: entered promiscuous mode [ 492.530084][T22843] CPU: 0 UID: 0 PID: 22843 Comm: syz.2.5332 Not tainted syzkaller #0 PREEMPT(full) [ 492.530115][T22843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 492.530138][T22843] Call Trace: [ 492.530147][T22843] [ 492.530155][T22843] dump_stack_lvl+0xe8/0x150 [ 492.530187][T22843] should_fail_ex+0x412/0x560 [ 492.530218][T22843] _copy_from_iter+0x1d3/0x1670 [ 492.530260][T22843] ? rcu_is_watching+0x15/0xb0 [ 492.530291][T22843] ? __pfx__copy_from_iter+0x10/0x10 [ 492.530327][T22843] ? netlink_sendmsg+0x650/0xb40 [ 492.530344][T22843] ? skb_put+0x11b/0x210 [ 492.530368][T22843] netlink_sendmsg+0x6c0/0xb40 [ 492.530394][T22843] ? __pfx_netlink_sendmsg+0x10/0x10 [ 492.530416][T22843] ? aa_sock_msg_perm+0xf1/0x1b0 [ 492.530444][T22843] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 492.530470][T22843] ____sys_sendmsg+0x972/0x9f0 [ 492.530501][T22843] ? __pfx_____sys_sendmsg+0x10/0x10 [ 492.530531][T22843] ? import_iovec+0x73/0xa0 [ 492.530554][T22843] ___sys_sendmsg+0x2a5/0x360 [ 492.530582][T22843] ? __pfx____sys_sendmsg+0x10/0x10 [ 492.530638][T22843] ? __fget_files+0x2a/0x420 [ 492.530665][T22843] ? __fget_files+0x3a0/0x420 [ 492.530702][T22843] __x64_sys_sendmsg+0x1bd/0x2a0 [ 492.530727][T22843] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 492.530758][T22843] ? __pfx_ksys_write+0x10/0x10 [ 492.530791][T22843] do_syscall_64+0x14d/0xf80 [ 492.530813][T22843] ? trace_irq_disable+0x3b/0x150 [ 492.530829][T22843] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.530848][T22843] ? clear_bhb_loop+0x40/0x90 [ 492.530871][T22843] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.530889][T22843] RIP: 0033:0x7fdc1e19c819 [ 492.530907][T22843] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 492.530924][T22843] RSP: 002b:00007fdc1f0c8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 492.530945][T22843] RAX: ffffffffffffffda RBX: 00007fdc1e415fa0 RCX: 00007fdc1e19c819 [ 492.530959][T22843] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 492.530971][T22843] RBP: 00007fdc1f0c8090 R08: 0000000000000000 R09: 0000000000000000 [ 492.530983][T22843] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 492.530995][T22843] R13: 00007fdc1e416038 R14: 00007fdc1e415fa0 R15: 00007ffc4f4f8878 [ 492.531025][T22843] [ 492.780891][T22839] syzkaller1: entered allmulticast mode [ 492.811540][T22850] netlink: 'syz.0.5334': attribute type 1 has an invalid length. [ 492.837571][T22850] netlink: 'syz.0.5334': attribute type 2 has an invalid length. [ 493.157702][T22876] tipc: Enabling of bearer rejected, already enabled [ 493.520445][T22891] syzkaller1: entered promiscuous mode [ 493.527530][T22891] syzkaller1: entered allmulticast mode [ 493.767383][T22910] tipc: Enabling of bearer rejected, already enabled [ 493.977261][T22931] Cannot find set identified by id 0 to match [ 494.066135][T22939] 8021q: VLANs not supported on gre0 [ 494.262773][T22947] syzkaller1: entered promiscuous mode [ 494.276172][T22947] syzkaller1: entered allmulticast mode [ 494.518441][T22963] __nla_validate_parse: 24 callbacks suppressed [ 494.518465][T22963] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5377'. [ 494.726842][T22971] netlink: 1044 bytes leftover after parsing attributes in process `syz.0.5383'. [ 494.869350][T22983] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5385'. [ 495.037809][T22995] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5393'. [ 495.037966][T22992] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5390'. [ 495.071496][T22997] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5392'. [ 495.072602][T22992] openvswitch: netlink: nsh attr 5 is out of range max 3 [ 495.156885][T22997] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5392'. [ 495.207897][T23006] netlink: 'syz.3.5395': attribute type 29 has an invalid length. [ 495.226510][T23006] netlink: 'syz.3.5395': attribute type 29 has an invalid length. [ 495.267178][T23006] netlink: 'syz.3.5395': attribute type 29 has an invalid length. [ 495.284876][T23006] netlink: 'syz.3.5395': attribute type 29 has an invalid length. [ 495.293923][T23010] tipc: Enabling of bearer rejected, already enabled [ 495.317696][T23006] netlink: 'syz.3.5395': attribute type 29 has an invalid length. [ 495.365737][T23006] netlink: 'syz.3.5395': attribute type 29 has an invalid length. [ 495.414240][T23006] netlink: 'syz.3.5395': attribute type 29 has an invalid length. [ 495.575459][T23025] bond0: (slave bridge_slave_1): Releasing backup interface [ 495.589761][T23025] bond0: (slave bond_slave_0): Releasing backup interface [ 495.628284][T23025] bond0: (slave bond_slave_1): Releasing backup interface [ 495.647629][T23025] team0: Port device team_slave_0 removed [ 495.656397][T23025] team0: Port device team_slave_1 removed [ 495.663741][T23035] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 495.674014][T23025] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 495.684561][T23025] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 495.703046][T23025] bond3: (slave bridge3): Releasing active interface [ 495.733865][T23043] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.5405'. [ 495.749990][T23025] bond10: (slave geneve2): Releasing active interface [ 495.769141][T21792] syz1: Port: 1 Link DOWN [ 495.776942][T18964] netdevsim netdevsim2 : unset [1, 0] type 2 family 0 port 20004 - 0 [ 495.789589][T18964] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 495.819376][T18964] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 495.875559][T18964] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 495.899578][T23047] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5409'. [ 496.383570][T23080] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5417'. [ 496.394753][T23080] netlink: 'syz.3.5417': attribute type 1 has an invalid length. [ 496.402651][T23080] netlink: 'syz.3.5417': attribute type 2 has an invalid length. [ 496.413029][T23080] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 497.258227][T23138] FAULT_INJECTION: forcing a failure. [ 497.258227][T23138] name failslab, interval 1, probability 0, space 0, times 0 [ 497.297916][T23138] CPU: 1 UID: 0 PID: 23138 Comm: syz.4.5433 Not tainted syzkaller #0 PREEMPT(full) [ 497.297946][T23138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 497.297960][T23138] Call Trace: [ 497.297969][T23138] [ 497.297979][T23138] dump_stack_lvl+0xe8/0x150 [ 497.298025][T23138] should_fail_ex+0x412/0x560 [ 497.298064][T23138] should_failslab+0xa8/0x100 [ 497.298093][T23138] ? security_inode_alloc+0x39/0x310 [ 497.298126][T23138] kmem_cache_alloc_noprof+0x87/0x650 [ 497.298159][T23138] security_inode_alloc+0x39/0x310 [ 497.298195][T23138] inode_init_always_gfp+0x9ed/0xdc0 [ 497.298234][T23138] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 497.298258][T23138] alloc_inode+0x82/0x1b0 [ 497.298289][T23138] new_inode+0x22/0x170 [ 497.298325][T23138] __debugfs_create_file+0xb8/0x400 [ 497.298354][T23138] debugfs_create_file_full+0x3f/0x60 [ 497.298381][T23138] ref_tracker_dir_debugfs+0x197/0x360 [ 497.298414][T23138] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 497.298479][T23138] ? __kvmalloc_node_noprof+0x545/0x8a0 [ 497.298505][T23138] ? alloc_netdev_mqs+0xa6/0x11b0 [ 497.298537][T23138] ? __raw_spin_lock_init+0x45/0x100 [ 497.298564][T23138] alloc_netdev_mqs+0x272/0x11b0 [ 497.298591][T23138] ? __pfx_geneve_setup+0x10/0x10 [ 497.298624][T23138] rtnl_create_link+0x31f/0xd70 [ 497.298661][T23138] rtnl_newlink_create+0x277/0xb70 [ 497.298685][T23138] ? __pfx___nla_validate_parse+0x10/0x10 [ 497.298721][T23138] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 497.298750][T23138] ? __pfx___mutex_lock+0x10/0x10 [ 497.298788][T23138] ? ns_capable+0x89/0xe0 [ 497.298820][T23138] rtnl_newlink+0x1666/0x1be0 [ 497.298861][T23138] ? __pfx_rtnl_newlink+0x10/0x10 [ 497.298895][T23138] ? __lock_acquire+0x6b5/0x2cf0 [ 497.298931][T23138] ? __lock_acquire+0x6b5/0x2cf0 [ 497.298960][T23138] ? __lock_acquire+0x6b5/0x2cf0 [ 497.299000][T23138] ? unwind_next_frame+0xa5/0x23c0 [ 497.299066][T23138] ? __lock_acquire+0x6b5/0x2cf0 [ 497.299097][T23138] ? is_bpf_text_address+0x26/0x2b0 [ 497.299125][T23138] ? kernel_text_address+0xa5/0xe0 [ 497.299182][T23138] ? __pfx_rtnl_newlink+0x10/0x10 [ 497.299203][T23138] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 497.299229][T23138] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 497.299248][T23138] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 497.299273][T23138] ? __lock_acquire+0x6b5/0x2cf0 [ 497.299312][T23138] netlink_rcv_skb+0x232/0x4b0 [ 497.299346][T23138] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 497.299369][T23138] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 497.299416][T23138] ? netlink_deliver_tap+0x2e/0x1b0 [ 497.299456][T23138] netlink_unicast+0x80f/0x9b0 [ 497.299497][T23138] ? __pfx_netlink_unicast+0x10/0x10 [ 497.299529][T23138] ? netlink_sendmsg+0x650/0xb40 [ 497.299547][T23138] ? skb_put+0x11b/0x210 [ 497.299575][T23138] netlink_sendmsg+0x813/0xb40 [ 497.299608][T23138] ? __pfx_netlink_sendmsg+0x10/0x10 [ 497.299634][T23138] ? aa_sock_msg_perm+0xf1/0x1b0 [ 497.299666][T23138] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 497.299695][T23138] ____sys_sendmsg+0x972/0x9f0 [ 497.299732][T23138] ? __pfx_____sys_sendmsg+0x10/0x10 [ 497.299768][T23138] ? import_iovec+0x73/0xa0 [ 497.299797][T23138] ___sys_sendmsg+0x2a5/0x360 [ 497.299829][T23138] ? __pfx____sys_sendmsg+0x10/0x10 [ 497.299896][T23138] ? __fget_files+0x2a/0x420 [ 497.299926][T23138] ? __fget_files+0x3a0/0x420 [ 497.299969][T23138] __x64_sys_sendmsg+0x1bd/0x2a0 [ 497.299997][T23138] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 497.300040][T23138] ? __pfx_ksys_write+0x10/0x10 [ 497.300076][T23138] do_syscall_64+0x14d/0xf80 [ 497.300099][T23138] ? trace_irq_disable+0x3b/0x150 [ 497.300116][T23138] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.300138][T23138] ? clear_bhb_loop+0x40/0x90 [ 497.300164][T23138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.300186][T23138] RIP: 0033:0x7f80d199c819 [ 497.300207][T23138] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 497.300225][T23138] RSP: 002b:00007f80d27ed028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 497.300248][T23138] RAX: ffffffffffffffda RBX: 00007f80d1c15fa0 RCX: 00007f80d199c819 [ 497.300264][T23138] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 497.300277][T23138] RBP: 00007f80d27ed090 R08: 0000000000000000 R09: 0000000000000000 [ 497.300290][T23138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 497.300303][T23138] R13: 00007f80d1c16038 R14: 00007f80d1c15fa0 R15: 00007ffcae0cc2d8 [ 497.300339][T23138] [ 497.300624][T23138] debugfs: out of free dentries, can not create file 'netdev@ffff8880227b2620' [ 497.787376][T23141] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 497.796709][T23141] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 498.089559][T23151] bridge14: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 498.264141][T23170] tipc: Invalid UDP bearer configuration [ 498.264205][T23170] tipc: Enabling of bearer rejected, failed to enable media [ 498.623224][T23195] netlink: 'syz.0.5448': attribute type 11 has an invalid length. [ 498.968343][T23212] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 499.124039][T23214] openvswitch: netlink: Flow key attr not present in new flow. [ 499.351698][T23229] veth0_to_bridge: vlans aren't supported yet for dev_uc|mc_add() [ 499.679473][T23249] tipc: Bearer : already 2 bearers with priority 10 [ 499.701571][T23249] tipc: Bearer : trying with adjusted priority [ 499.729750][T23249] tipc: Invalid UDP bearer configuration [ 499.729824][T23249] tipc: Enabling of bearer rejected, failed to enable media [ 499.737456][T23251] Cannot find set identified by id 3 to match [ 499.783579][T23248] __nla_validate_parse: 10 callbacks suppressed [ 499.783604][T23248] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5470'. [ 499.800953][T23248] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5470'. [ 499.833675][T23248] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5470'. [ 500.159979][T23271] netlink: 'syz.3.5476': attribute type 3 has an invalid length. [ 500.169639][T23271] netlink: 204 bytes leftover after parsing attributes in process `syz.3.5476'. [ 500.283937][T23275] block nbd2: server does not support multiple connections per device. [ 500.293731][T23275] block nbd2: shutting down sockets [ 500.443238][T23287] validate_nla: 1 callbacks suppressed [ 500.459383][T23287] netlink: 'syz.1.5482': attribute type 1 has an invalid length. [ 500.480560][T23290] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 500.603904][T23299] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5487'. [ 501.013685][T23322] virt_wifi0: left allmulticast mode [ 501.276402][T23338] Unsupported ieee802154 address type: 0 [ 501.416310][T23344] x_tables: duplicate underflow at hook 2 [ 501.422000][T23346] netlink: 'syz.0.5503': attribute type 1 has an invalid length. [ 501.425460][T23344] x_tables: duplicate underflow at hook 2 [ 501.459436][T23346] bond15: entered promiscuous mode [ 501.465250][T23346] bond15: entered allmulticast mode [ 501.471449][T23346] 8021q: adding VLAN 0 to HW filter on device bond15 [ 501.551540][T23350] macvlan2: entered promiscuous mode [ 501.577732][T23350] macvlan2: entered allmulticast mode [ 501.599180][T23350] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 501.717975][T23363] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5506'. [ 501.727785][T23363] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5506'. [ 501.875288][T23372] netlink: 248 bytes leftover after parsing attributes in process `syz.4.5510'. [ 501.885359][T23372] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5510'. [ 501.899249][T23373] netlink: 'syz.2.5509': attribute type 8 has an invalid length. [ 502.170375][T23389] Cannot find set identified by id 3 to match [ 502.195568][T23387] netlink: 'syz.0.5515': attribute type 16 has an invalid length. [ 502.217529][T23387] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5515'. [ 502.561679][T23415] xt_hashlimit: size too large, truncated to 1048576 [ 502.889661][T23436] Cannot find set identified by id 3 to match [ 503.095436][T23447] x_tables: duplicate entry at hook 1 [ 503.140809][T23450] H: renamed from dummy0 [ 504.197397][T23512] netlink: 'syz.2.5551': attribute type 1 has an invalid length. [ 504.266932][T23517] syzkaller0: entered promiscuous mode [ 504.272469][T23517] syzkaller0: entered allmulticast mode [ 504.531170][T23530] netlink: 'syz.2.5558': attribute type 39 has an invalid length. [ 504.711861][T23538] syzkaller0: entered promiscuous mode [ 504.734409][T23538] syzkaller0: entered allmulticast mode [ 504.902434][T23554] xt_l2tp: missing protocol rule (udp|l2tpip) [ 505.285579][T23578] __nla_validate_parse: 42 callbacks suppressed [ 505.285603][T23578] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5573'. [ 505.482759][T23585] SET target dimension over the limit! [ 505.537391][T23589] FAULT_INJECTION: forcing a failure. [ 505.537391][T23589] name failslab, interval 1, probability 0, space 0, times 0 [ 505.573491][T23589] CPU: 0 UID: 0 PID: 23589 Comm: syz.3.5579 Not tainted syzkaller #0 PREEMPT(full) [ 505.573522][T23589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 505.573534][T23589] Call Trace: [ 505.573542][T23589] [ 505.573551][T23589] dump_stack_lvl+0xe8/0x150 [ 505.573589][T23589] should_fail_ex+0x412/0x560 [ 505.573626][T23589] should_failslab+0xa8/0x100 [ 505.573657][T23589] __kmalloc_noprof+0xe8/0x760 [ 505.573682][T23589] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 505.573711][T23589] tomoyo_realpath_from_path+0xe3/0x5d0 [ 505.573743][T23589] ? tomoyo_path_number_perm+0x219/0x630 [ 505.573773][T23589] tomoyo_path_number_perm+0x246/0x630 [ 505.573805][T23589] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 505.573837][T23589] ? __lock_acquire+0x6b5/0x2cf0 [ 505.573878][T23589] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 505.573929][T23589] ? __fget_files+0x2a/0x420 [ 505.573964][T23589] ? __fget_files+0x2a/0x420 [ 505.574002][T23589] ? __fget_files+0x3a0/0x420 [ 505.574032][T23589] ? __fget_files+0x2a/0x420 [ 505.574067][T23589] security_file_ioctl+0xc3/0x2a0 [ 505.574097][T23589] __se_sys_ioctl+0x47/0x170 [ 505.574126][T23589] do_syscall_64+0x14d/0xf80 [ 505.574151][T23589] ? trace_irq_disable+0x3b/0x150 [ 505.574171][T23589] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.574193][T23589] ? clear_bhb_loop+0x40/0x90 [ 505.574220][T23589] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.574241][T23589] RIP: 0033:0x7f7492f9c819 [ 505.574263][T23589] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 505.574282][T23589] RSP: 002b:00007f7493e4d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 505.574305][T23589] RAX: ffffffffffffffda RBX: 00007f7493215fa0 RCX: 00007f7492f9c819 [ 505.574321][T23589] RDX: 0000200000000240 RSI: 0000000000008b07 RDI: 0000000000000004 [ 505.574336][T23589] RBP: 00007f7493e4d090 R08: 0000000000000000 R09: 0000000000000000 [ 505.574350][T23589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 505.574363][T23589] R13: 00007f7493216038 R14: 00007f7493215fa0 R15: 00007ffce5e5e728 [ 505.574398][T23589] [ 505.574408][T23589] ERROR: Out of memory at tomoyo_realpath_from_path. [ 505.654863][T23597] FAULT_INJECTION: forcing a failure. [ 505.654863][T23597] name failslab, interval 1, probability 0, space 0, times 0 [ 505.823123][T23597] CPU: 1 UID: 0 PID: 23597 Comm: syz.1.5581 Not tainted syzkaller #0 PREEMPT(full) [ 505.823154][T23597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 505.823167][T23597] Call Trace: [ 505.823176][T23597] [ 505.823186][T23597] dump_stack_lvl+0xe8/0x150 [ 505.823220][T23597] should_fail_ex+0x412/0x560 [ 505.823263][T23597] should_failslab+0xa8/0x100 [ 505.823291][T23597] __kmalloc_noprof+0xe8/0x760 [ 505.823315][T23597] ? dev_prep_valid_name+0x1bc/0x630 [ 505.823351][T23597] dev_prep_valid_name+0x1bc/0x630 [ 505.823381][T23597] ? __pfx_stack_trace_save+0x10/0x10 [ 505.823407][T23597] ? __pfx_dev_prep_valid_name+0x10/0x10 [ 505.823445][T23597] ? __raw_spin_lock_init+0x45/0x100 [ 505.823471][T23597] register_netdevice+0x539/0x1cf0 [ 505.823497][T23597] ? ___sys_sendmsg+0x2a5/0x360 [ 505.823521][T23597] ? __x64_sys_sendmsg+0x1bd/0x2a0 [ 505.823544][T23597] ? do_syscall_64+0x14d/0xf80 [ 505.823580][T23597] ? net_generic+0x1e/0x240 [ 505.823627][T23597] ? __pfx_register_netdevice+0x10/0x10 [ 505.823656][T23597] ? net_generic+0x1e/0x240 [ 505.823679][T23597] ? net_generic+0x1e/0x240 [ 505.823707][T23597] geneve_configure+0x611/0xa30 [ 505.823741][T23597] ? geneve_configure+0x1b1/0xa30 [ 505.823774][T23597] geneve_newlink+0x1b9/0x260 [ 505.823802][T23597] ? __pfx_geneve_newlink+0x10/0x10 [ 505.823846][T23597] ? __pfx_geneve_newlink+0x10/0x10 [ 505.823872][T23597] rtnl_newlink_create+0x329/0xb70 [ 505.823896][T23597] ? __pfx___nla_validate_parse+0x10/0x10 [ 505.823929][T23597] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 505.823957][T23597] ? __pfx___mutex_lock+0x10/0x10 [ 505.823993][T23597] ? ns_capable+0x89/0xe0 [ 505.824024][T23597] rtnl_newlink+0x1666/0x1be0 [ 505.824063][T23597] ? __pfx_rtnl_newlink+0x10/0x10 [ 505.824081][T23597] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.824147][T23597] ? kasan_quarantine_put+0xbb/0x1f0 [ 505.824170][T23597] ? lockdep_hardirqs_on+0x7a/0x110 [ 505.824211][T23597] ? kmem_cache_free+0x187/0x630 [ 505.824234][T23597] ? nlmon_xmit+0xb0/0x100 [ 505.824273][T23597] ? __lock_acquire+0x6b5/0x2cf0 [ 505.824307][T23597] ? __local_bh_enable_ip+0xd0/0x130 [ 505.824333][T23597] ? lockdep_hardirqs_on+0x7a/0x110 [ 505.824357][T23597] ? __dev_queue_xmit+0x277/0x3890 [ 505.824382][T23597] ? __local_bh_enable_ip+0xd0/0x130 [ 505.824406][T23597] ? __dev_queue_xmit+0x277/0x3890 [ 505.824462][T23597] ? __pfx_rtnl_newlink+0x10/0x10 [ 505.824482][T23597] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 505.824509][T23597] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 505.824529][T23597] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 505.824547][T23597] ? ref_tracker_free+0x693/0x840 [ 505.824576][T23597] ? __copy_skb_header+0xa3/0x4a0 [ 505.824603][T23597] ? __pfx_ref_tracker_free+0x10/0x10 [ 505.824648][T23597] netlink_rcv_skb+0x232/0x4b0 [ 505.824682][T23597] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 505.824705][T23597] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 505.824759][T23597] ? netlink_deliver_tap+0x2e/0x1b0 [ 505.824800][T23597] netlink_unicast+0x80f/0x9b0 [ 505.824839][T23597] ? __pfx_netlink_unicast+0x10/0x10 [ 505.824871][T23597] ? netlink_sendmsg+0x650/0xb40 [ 505.824890][T23597] ? skb_put+0x11b/0x210 [ 505.824917][T23597] netlink_sendmsg+0x813/0xb40 [ 505.824949][T23597] ? __pfx_netlink_sendmsg+0x10/0x10 [ 505.824974][T23597] ? aa_sock_msg_perm+0xf1/0x1b0 [ 505.825005][T23597] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 505.825034][T23597] ____sys_sendmsg+0x972/0x9f0 [ 505.825068][T23597] ? __pfx_____sys_sendmsg+0x10/0x10 [ 505.825104][T23597] ? import_iovec+0x73/0xa0 [ 505.825131][T23597] ___sys_sendmsg+0x2a5/0x360 [ 505.825163][T23597] ? __pfx____sys_sendmsg+0x10/0x10 [ 505.825229][T23597] ? __fget_files+0x2a/0x420 [ 505.825259][T23597] ? __fget_files+0x3a0/0x420 [ 505.825312][T23597] __x64_sys_sendmsg+0x1bd/0x2a0 [ 505.825341][T23597] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 505.825378][T23597] ? __pfx_ksys_write+0x10/0x10 [ 505.825416][T23597] do_syscall_64+0x14d/0xf80 [ 505.825448][T23597] ? trace_irq_disable+0x3b/0x150 [ 505.825473][T23597] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.825493][T23597] ? clear_bhb_loop+0x40/0x90 [ 505.825521][T23597] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.825543][T23597] RIP: 0033:0x7f9de5d9c819 [ 505.825564][T23597] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 505.825583][T23597] RSP: 002b:00007f9de6c62028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 505.825606][T23597] RAX: ffffffffffffffda RBX: 00007f9de6015fa0 RCX: 00007f9de5d9c819 [ 505.825621][T23597] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 505.825635][T23597] RBP: 00007f9de6c62090 R08: 0000000000000000 R09: 0000000000000000 [ 505.825648][T23597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 505.825661][T23597] R13: 00007f9de6016038 R14: 00007f9de6015fa0 R15: 00007ffd9d946748 [ 505.825697][T23597] [ 506.491662][T23616] syzkaller1: entered promiscuous mode [ 506.497468][T23616] syzkaller1: entered allmulticast mode [ 506.510723][T23617] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5587'. [ 506.589028][T23620] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5589'. [ 506.697875][T23628] netlink: 'syz.0.5590': attribute type 1 has an invalid length. [ 506.746767][T23628] nbd: error processing sock list [ 506.913524][T23642] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5593'. [ 506.990553][T23648] FAULT_INJECTION: forcing a failure. [ 506.990553][T23648] name failslab, interval 1, probability 0, space 0, times 0 [ 507.013894][T23648] CPU: 0 UID: 0 PID: 23648 Comm: syz.2.5596 Not tainted syzkaller #0 PREEMPT(full) [ 507.013921][T23648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 507.013934][T23648] Call Trace: [ 507.013943][T23648] [ 507.013951][T23648] dump_stack_lvl+0xe8/0x150 [ 507.013985][T23648] should_fail_ex+0x412/0x560 [ 507.014030][T23648] should_failslab+0xa8/0x100 [ 507.014058][T23648] __kmalloc_noprof+0xe8/0x760 [ 507.014083][T23648] ? tomoyo_encode+0x28b/0x550 [ 507.014110][T23648] tomoyo_encode+0x28b/0x550 [ 507.014137][T23648] tomoyo_realpath_from_path+0x58d/0x5d0 [ 507.014170][T23648] ? tomoyo_path_number_perm+0x219/0x630 [ 507.014198][T23648] tomoyo_path_number_perm+0x246/0x630 [ 507.014229][T23648] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 507.014260][T23648] ? __lock_acquire+0x6b5/0x2cf0 [ 507.014300][T23648] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 507.014350][T23648] ? __fget_files+0x2a/0x420 [ 507.014383][T23648] ? __fget_files+0x2a/0x420 [ 507.014411][T23648] ? __fget_files+0x3a0/0x420 [ 507.014438][T23648] ? __fget_files+0x2a/0x420 [ 507.014474][T23648] security_file_ioctl+0xc3/0x2a0 [ 507.014503][T23648] __se_sys_ioctl+0x47/0x170 [ 507.014532][T23648] do_syscall_64+0x14d/0xf80 [ 507.014555][T23648] ? trace_irq_disable+0x3b/0x150 [ 507.014573][T23648] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.014595][T23648] ? clear_bhb_loop+0x40/0x90 [ 507.014621][T23648] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.014642][T23648] RIP: 0033:0x7fdc1e19c819 [ 507.014663][T23648] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 507.014681][T23648] RSP: 002b:00007fdc1f0c8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 507.014704][T23648] RAX: ffffffffffffffda RBX: 00007fdc1e415fa0 RCX: 00007fdc1e19c819 [ 507.014720][T23648] RDX: 0000200000000240 RSI: 0000000000008b07 RDI: 0000000000000004 [ 507.014733][T23648] RBP: 00007fdc1f0c8090 R08: 0000000000000000 R09: 0000000000000000 [ 507.014745][T23648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 507.014758][T23648] R13: 00007fdc1e416038 R14: 00007fdc1e415fa0 R15: 00007ffc4f4f8878 [ 507.014793][T23648] [ 507.014817][T23648] ERROR: Out of memory at tomoyo_realpath_from_path. [ 507.032109][T23650] netlink: 'syz.4.5597': attribute type 1 has an invalid length. [ 507.265327][T23657] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5599'. [ 507.380902][T23650] bond16: entered promiscuous mode [ 507.407554][T23650] 8021q: adding VLAN 0 to HW filter on device bond16 [ 507.425233][T23669] openvswitch: netlink: IP tunnel dst address not specified [ 507.437495][T23663] syzkaller1: entered promiscuous mode [ 507.443070][T23663] syzkaller1: entered allmulticast mode [ 507.555352][T23679] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5601'. [ 507.667497][T23681] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5607'. [ 507.890367][T23697] FAULT_INJECTION: forcing a failure. [ 507.890367][T23697] name failslab, interval 1, probability 0, space 0, times 0 [ 507.948009][T23697] CPU: 0 UID: 0 PID: 23697 Comm: syz.2.5610 Not tainted syzkaller #0 PREEMPT(full) [ 507.948041][T23697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 507.948054][T23697] Call Trace: [ 507.948062][T23697] [ 507.948072][T23697] dump_stack_lvl+0xe8/0x150 [ 507.948107][T23697] should_fail_ex+0x412/0x560 [ 507.948145][T23697] should_failslab+0xa8/0x100 [ 507.948174][T23697] __kmalloc_noprof+0xe8/0x760 [ 507.948200][T23697] ? tomoyo_encode+0x28b/0x550 [ 507.948226][T23697] tomoyo_encode+0x28b/0x550 [ 507.948254][T23697] tomoyo_realpath_from_path+0x58d/0x5d0 [ 507.948287][T23697] ? tomoyo_path_number_perm+0x219/0x630 [ 507.948316][T23697] tomoyo_path_number_perm+0x246/0x630 [ 507.948346][T23697] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 507.948378][T23697] ? __lock_acquire+0x6b5/0x2cf0 [ 507.948418][T23697] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 507.948469][T23697] ? __fget_files+0x2a/0x420 [ 507.948502][T23697] ? __fget_files+0x2a/0x420 [ 507.948531][T23697] ? __fget_files+0x3a0/0x420 [ 507.948560][T23697] ? __fget_files+0x2a/0x420 [ 507.948595][T23697] security_file_ioctl+0xc3/0x2a0 [ 507.948623][T23697] __se_sys_ioctl+0x47/0x170 [ 507.948652][T23697] do_syscall_64+0x14d/0xf80 [ 507.948676][T23697] ? trace_irq_disable+0x3b/0x150 [ 507.948695][T23697] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.948716][T23697] ? clear_bhb_loop+0x40/0x90 [ 507.948741][T23697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.948762][T23697] RIP: 0033:0x7fdc1e19c819 [ 507.948782][T23697] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 507.948800][T23697] RSP: 002b:00007fdc1f0c8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 507.948833][T23697] RAX: ffffffffffffffda RBX: 00007fdc1e415fa0 RCX: 00007fdc1e19c819 [ 507.948848][T23697] RDX: 0000200000000240 RSI: 0000000000008b07 RDI: 0000000000000004 [ 507.948862][T23697] RBP: 00007fdc1f0c8090 R08: 0000000000000000 R09: 0000000000000000 [ 507.948875][T23697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 507.948888][T23697] R13: 00007fdc1e416038 R14: 00007fdc1e415fa0 R15: 00007ffc4f4f8878 [ 507.948922][T23697] [ 507.948946][T23697] ERROR: Out of memory at tomoyo_realpath_from_path. [ 508.328454][T23712] bond16: option min_links: invalid value (18446744073709551614) [ 508.338336][T23712] bond16: option min_links: allowed values 0 - 2147483647 [ 508.376141][T23712] bond16 (unregistering): Released all slaves [ 508.411157][T23716] IPVS: length: 32 != 8 [ 508.433471][T23723] syzkaller0: entered promiscuous mode [ 508.441217][T23723] syzkaller0: entered allmulticast mode [ 508.574462][T23728] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5618'. [ 508.889140][T23749] FAULT_INJECTION: forcing a failure. [ 508.889140][T23749] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 508.919277][T23749] CPU: 0 UID: 0 PID: 23749 Comm: syz.4.5627 Not tainted syzkaller #0 PREEMPT(full) [ 508.919309][T23749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 508.919321][T23749] Call Trace: [ 508.919329][T23749] [ 508.919338][T23749] dump_stack_lvl+0xe8/0x150 [ 508.919373][T23749] should_fail_ex+0x412/0x560 [ 508.919410][T23749] _copy_to_user+0x31/0xb0 [ 508.919436][T23749] wext_handle_ioctl+0x145/0x1d0 [ 508.919464][T23749] ? __pfx_wext_handle_ioctl+0x10/0x10 [ 508.919483][T23749] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 508.919526][T23749] sock_ioctl+0x159/0x7f0 [ 508.919556][T23749] ? __pfx_sock_ioctl+0x10/0x10 [ 508.919583][T23749] ? __fget_files+0x2a/0x420 [ 508.919611][T23749] ? __fget_files+0x3a0/0x420 [ 508.919637][T23749] ? __fget_files+0x2a/0x420 [ 508.919669][T23749] ? bpf_lsm_file_ioctl+0x9/0x20 [ 508.919695][T23749] ? __pfx_sock_ioctl+0x10/0x10 [ 508.919720][T23749] __se_sys_ioctl+0xfc/0x170 [ 508.919749][T23749] do_syscall_64+0x14d/0xf80 [ 508.919771][T23749] ? trace_irq_disable+0x3b/0x150 [ 508.919798][T23749] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 508.919825][T23749] ? clear_bhb_loop+0x40/0x90 [ 508.919851][T23749] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 508.919871][T23749] RIP: 0033:0x7f80d199c819 [ 508.919890][T23749] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 508.919909][T23749] RSP: 002b:00007f80d27ed028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 508.919932][T23749] RAX: ffffffffffffffda RBX: 00007f80d1c15fa0 RCX: 00007f80d199c819 [ 508.919948][T23749] RDX: 0000200000000240 RSI: 0000000000008b07 RDI: 0000000000000004 [ 508.919960][T23749] RBP: 00007f80d27ed090 R08: 0000000000000000 R09: 0000000000000000 [ 508.919973][T23749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 508.919986][T23749] R13: 00007f80d1c16038 R14: 00007f80d1c15fa0 R15: 00007ffcae0cc2d8 [ 508.920020][T23749] [ 509.386138][T23758] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5631'. [ 509.572564][T23765] netlink: 'syz.2.5634': attribute type 2 has an invalid length. [ 509.810946][T23783] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5638'. [ 509.878254][T23786] syzkaller0: entered promiscuous mode [ 509.884887][T23786] syzkaller0: entered allmulticast mode [ 509.934075][ T5831] block nbd2: Receive control failed (result -1) [ 512.504666][T23764] 8021q: adding VLAN 0 to HW filter on device bond0 [ 512.531044][T23764] bond0: (slave ip6tnl1): The slave device specified does not support setting the MAC address [ 512.562790][T23764] bond0: (slave ip6tnl1): Setting fail_over_mac to active for active-backup mode [ 512.590677][T23764] bond0: (slave ip6tnl1): making interface the new active one [ 512.599823][T23764] ip6tnl1: entered promiscuous mode [ 512.607681][T23764] ip6tnl1: entered allmulticast mode [ 512.615465][T23764] bond0: (slave ip6tnl1): Enslaving as an active interface with an up link [ 512.640785][T23799] FAULT_INJECTION: forcing a failure. [ 512.640785][T23799] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 512.673589][T23799] CPU: 1 UID: 0 PID: 23799 Comm: syz.4.5641 Not tainted syzkaller #0 PREEMPT(full) [ 512.673620][T23799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 512.673633][T23799] Call Trace: [ 512.673642][T23799] [ 512.673652][T23799] dump_stack_lvl+0xe8/0x150 [ 512.673689][T23799] should_fail_ex+0x412/0x560 [ 512.673736][T23799] _copy_to_user+0x31/0xb0 [ 512.673764][T23799] simple_read_from_buffer+0xe1/0x170 [ 512.673800][T23799] proc_fail_nth_read+0x1bb/0x230 [ 512.673840][T23799] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 512.673874][T23799] ? rw_verify_area+0x2a6/0x4d0 [ 512.673897][T23799] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 512.673928][T23799] vfs_read+0x20c/0xa70 [ 512.673950][T23799] ? fdget_pos+0x246/0x320 [ 512.673975][T23799] ? __pfx___mutex_lock+0x10/0x10 [ 512.674003][T23799] ? __pfx_vfs_read+0x10/0x10 [ 512.674028][T23799] ? __fget_files+0x2a/0x420 [ 512.674063][T23799] ? __fget_files+0x3a0/0x420 [ 512.674091][T23799] ? __fget_files+0x2a/0x420 [ 512.674132][T23799] ksys_read+0x150/0x270 [ 512.674157][T23799] ? __pfx_ksys_read+0x10/0x10 [ 512.674194][T23799] do_syscall_64+0x14d/0xf80 [ 512.674217][T23799] ? trace_irq_disable+0x3b/0x150 [ 512.674235][T23799] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.674258][T23799] ? clear_bhb_loop+0x40/0x90 [ 512.674285][T23799] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.674306][T23799] RIP: 0033:0x7f80d195d04e [ 512.674327][T23799] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 512.674345][T23799] RSP: 002b:00007f80d27ecfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 512.674368][T23799] RAX: ffffffffffffffda RBX: 00007f80d27ed6c0 RCX: 00007f80d195d04e [ 512.674383][T23799] RDX: 000000000000000f RSI: 00007f80d27ed0a0 RDI: 0000000000000005 [ 512.674397][T23799] RBP: 00007f80d27ed090 R08: 0000000000000000 R09: 0000000000000000 [ 512.674410][T23799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 512.674423][T23799] R13: 00007f80d1c16038 R14: 00007f80d1c15fa0 R15: 00007ffcae0cc2d8 [ 512.674458][T23799] [ 513.181033][T23824] __nla_validate_parse: 2 callbacks suppressed [ 513.181055][T23824] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5652'. [ 513.208222][T23826] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5651'. [ 513.236666][T23826] IPVS: Unknown mcast interface: vcan0 [ 513.264262][T23824] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5652'. [ 513.325680][T23824] netlink: 104 bytes leftover after parsing attributes in process `syz.4.5652'. [ 513.414239][T23837] netlink: 'syz.2.5655': attribute type 9 has an invalid length. [ 513.422196][T23837] netlink: 'syz.2.5655': attribute type 6 has an invalid length. [ 513.560152][T23848] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5658'. [ 513.593824][T23848] netlink: 'syz.1.5658': attribute type 1 has an invalid length. [ 513.620597][T23848] netlink: 'syz.1.5658': attribute type 1 has an invalid length. [ 513.649704][T23848] netlink: 'syz.1.5658': attribute type 2 has an invalid length. [ 513.661528][T23848] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5658'. [ 513.737659][T23858] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5664'. [ 513.751366][T23858] IPVS: Unknown mcast interface: vcan0 [ 513.845183][T23864] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5665'. [ 513.937704][T23869] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5668'. [ 538.761298][T23883] Cannot find add_set index 2 as target [ 538.825350][T23887] sctp: [Deprecated]: syz.3.5675 (pid 23887) Use of int in maxseg socket option. [ 538.825350][T23887] Use struct sctp_assoc_value instead [ 538.855064][T23888] sctp: [Deprecated]: syz.3.5675 (pid 23888) Use of int in max_burst socket option deprecated. [ 538.855064][T23888] Use struct sctp_assoc_value instead [ 538.878826][T23889] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 538.889283][T23896] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5677'. [ 538.907950][T23896] IPVS: Unknown mcast interface: vcan0 [ 539.031334][T23901] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5679'. [ 539.232540][T23912] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5683'. [ 539.398063][T23919] Cannot find set identified by id 3 to match [ 539.466500][T23920] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 539.611941][T23930] netlink: 156 bytes leftover after parsing attributes in process `syz.0.5692'. [ 539.637041][T23930] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5692'. [ 539.767206][T23939] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5694'. [ 539.860768][T23943] netlink: 1 bytes leftover after parsing attributes in process `syz.0.5695'. [ 539.872010][T23943] xt_policy: neither incoming nor outgoing policy selected [ 539.934198][T23943] netlink: 16166 bytes leftover after parsing attributes in process `syz.0.5695'. [ 539.936770][T23948] netlink: 'syz.4.5697': attribute type 1 has an invalid length. [ 539.958098][T23948] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5697'. [ 540.182229][T23959] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 540.196710][T23959] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5702'. [ 540.393753][T23967] x_tables: (null)_tables: NFQUEUE.1 target: invalid size 8 (kernel) != (user) 16 [ 540.543648][T23973] xt_policy: neither incoming nor outgoing policy selected [ 540.675965][T23987] FAULT_INJECTION: forcing a failure. [ 540.675965][T23987] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 540.714489][T23987] CPU: 1 UID: 0 PID: 23987 Comm: syz.2.5713 Not tainted syzkaller #0 PREEMPT(full) [ 540.714520][T23987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 540.714533][T23987] Call Trace: [ 540.714542][T23987] [ 540.714552][T23987] dump_stack_lvl+0xe8/0x150 [ 540.714587][T23987] should_fail_ex+0x412/0x560 [ 540.714622][T23987] _copy_from_user+0x2d/0xb0 [ 540.714645][T23987] ___sys_sendmsg+0x1c6/0x360 [ 540.714677][T23987] ? __pfx____sys_sendmsg+0x10/0x10 [ 540.714739][T23987] ? __fget_files+0x2a/0x420 [ 540.714768][T23987] ? __fget_files+0x3a0/0x420 [ 540.714813][T23987] __x64_sys_sendmsg+0x1bd/0x2a0 [ 540.714841][T23987] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 540.714885][T23987] ? __pfx_ksys_write+0x10/0x10 [ 540.714921][T23987] do_syscall_64+0x14d/0xf80 [ 540.714945][T23987] ? trace_irq_disable+0x3b/0x150 [ 540.714963][T23987] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 540.714983][T23987] ? clear_bhb_loop+0x40/0x90 [ 540.715009][T23987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 540.715029][T23987] RIP: 0033:0x7fdc1e19c819 [ 540.715050][T23987] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 540.715068][T23987] RSP: 002b:00007fdc1f0c8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 540.715091][T23987] RAX: ffffffffffffffda RBX: 00007fdc1e415fa0 RCX: 00007fdc1e19c819 [ 540.715107][T23987] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000004 [ 540.715120][T23987] RBP: 00007fdc1f0c8090 R08: 0000000000000000 R09: 0000000000000000 [ 540.715133][T23987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 540.715145][T23987] R13: 00007fdc1e416038 R14: 00007fdc1e415fa0 R15: 00007ffc4f4f8878 [ 540.715177][T23987] [ 540.916139][T23994] Cannot find set identified by id 3 to match [ 541.827946][T24048] netlink: 'syz.4.5736': attribute type 21 has an invalid length. [ 541.976531][T24057] bridge0: port 1(syz_tun) entered blocking state [ 541.993704][T24057] bridge0: port 1(syz_tun) entered disabled state [ 542.038244][T24062] netlink: 'syz.0.5741': attribute type 21 has an invalid length. [ 542.361989][T24080] netlink: 'syz.1.5746': attribute type 24 has an invalid length. [ 542.436049][T24084] Cannot find set identified by id 3 to match [ 542.590948][T24088] vlan0: entered allmulticast mode [ 542.865577][T24097] netlink: 'syz.4.5752': attribute type 2 has an invalid length. [ 542.873862][T24100] netlink: 'syz.0.5753': attribute type 3 has an invalid length. [ 543.135267][T24120] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 543.626592][T24154] lo: left promiscuous mode [ 543.632965][T24154] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 543.966038][T24172] __nla_validate_parse: 15 callbacks suppressed [ 543.966061][T24172] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5774'. [ 544.046374][T24177] block nbd3: Unsupported socket: should be TCP or UNIX. [ 544.182415][T24183] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5779'. [ 544.364374][T24204] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5781'. [ 544.468066][T24191] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5781'. [ 544.484645][T24191] bond0: entered promiscuous mode [ 544.500096][T24191] bond0: left promiscuous mode [ 544.531325][T24211] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5787'. [ 544.649182][T24221] netlink: 184 bytes leftover after parsing attributes in process `syz.1.5790'. [ 544.885628][T24236] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5798'. [ 545.268479][T24258] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5803'. [ 545.400684][T24267] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5807'. [ 545.848535][T24292] netlink: 'syz.4.5817': attribute type 1 has an invalid length. [ 545.879831][T24292] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5817'. [ 546.348940][T24311] Cannot find set identified by id 3 to match [ 546.844885][T24340] netlink: 'syz.4.5838': attribute type 1 has an invalid length. [ 547.971880][T24408] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 548.368943][T24426] netlink: 'syz.2.5875': attribute type 1 has an invalid length. [ 548.402542][T24428] IPVS: Unknown mcast interface: vcan0 [ 548.428599][T24430] netlink: 'syz.4.5877': attribute type 1 has an invalid length. [ 548.495589][T24433] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 548.558992][T24433] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 548.591705][T24439] Cannot find set identified by id 3 to match [ 548.621082][T24433] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 549.016703][T24455] __nla_validate_parse: 12 callbacks suppressed [ 549.016726][T24455] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5887'. [ 549.078832][T24459] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5889'. [ 549.104680][T24459] IPVS: Unknown mcast interface: vcan0 [ 549.525778][T24488] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5899'. [ 549.724991][T24492] Cannot find set identified by id 3 to match [ 549.774162][T24496] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5902'. [ 549.783184][T24496] netlink: 50 bytes leftover after parsing attributes in process `syz.3.5902'. [ 549.785035][T24499] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5904'. [ 549.833674][T24496] netlink: 50 bytes leftover after parsing attributes in process `syz.3.5902'. [ 549.865006][T24499] lo: left allmulticast mode [ 549.870097][T24499] tunl0: left allmulticast mode [ 549.883634][T24499] gretap0: left allmulticast mode [ 549.895216][T24499] erspan0: left allmulticast mode [ 549.902911][T24499] ip_vti0: left allmulticast mode [ 549.929522][T24499] ip6_vti0: left allmulticast mode [ 549.943738][T24499] sit0: left allmulticast mode [ 549.948847][T24499] ip6tnl0: left allmulticast mode [ 549.957059][T24499] ip6gre0: left allmulticast mode [ 549.962455][T24499] syz_tun: left allmulticast mode [ 549.976878][T24499] ip6gretap0: left allmulticast mode [ 549.982714][T24499] team0: left allmulticast mode [ 549.989309][T24499] H: left allmulticast mode [ 549.995744][T24499] nlmon0: left allmulticast mode [ 550.001251][T24499] vxcan0: left allmulticast mode [ 550.007386][T24499] –: left allmulticast mode [ 550.017522][T24499] veth0: left allmulticast mode [ 550.032907][T24499] veth1: left allmulticast mode [ 550.039507][T24499] wg1: left promiscuous mode [ 550.044767][T24499] wg1: left allmulticast mode [ 550.059415][T24499] wg2: left allmulticast mode [ 550.065019][T24499] veth0_to_bridge: left allmulticast mode [ 550.071206][T24499] bridge_slave_0: left allmulticast mode [ 550.078557][T24499] veth1_to_bridge: left allmulticast mode [ 550.085248][T24499] veth0_to_bond: left allmulticast mode [ 550.091235][T24499] bond_slave_0: left allmulticast mode [ 550.097565][T24499] veth1_to_bond: left allmulticast mode [ 550.104624][T24499] bond_slave_1: left allmulticast mode [ 550.110493][T24499] veth0_to_team: left allmulticast mode [ 550.118125][T24499] team_slave_0: left allmulticast mode [ 550.125328][T24499] veth1_to_team: left allmulticast mode [ 550.132107][T24499] team_slave_1: left allmulticast mode [ 550.138462][T24499] veth0_to_batadv: left allmulticast mode [ 550.144946][T24499] batadv_slave_0: left allmulticast mode [ 550.151796][T24499] xfrm0: left allmulticast mode [ 550.157398][T24499] veth0_to_hsr: left allmulticast mode [ 550.163740][T24499] veth1_to_hsr: left allmulticast mode [ 550.169700][T24499] hsr0: left allmulticast mode [ 550.175074][T24499] hsr_slave_0: left allmulticast mode [ 550.180611][T24499] hsr_slave_1: left allmulticast mode [ 550.188117][T24499] veth1_virt_wifi: left allmulticast mode [ 550.195650][T24499] veth0_virt_wifi: left allmulticast mode [ 550.201746][T24499] virt_wifi0: left allmulticast mode [ 550.208087][T24499] vlan0: left allmulticast mode [ 550.213643][T24499] vlan1: left allmulticast mode [ 550.220224][T24499] macvlan0: left promiscuous mode [ 550.234448][T24499] macvlan1: left allmulticast mode [ 550.239920][T24499] ipvlan0: left allmulticast mode [ 550.246006][T24499] ipvlan1: left allmulticast mode [ 550.251152][T24499] veth0_vlan: left allmulticast mode [ 550.256865][T24499] veth1_macvtap: left allmulticast mode [ 550.262638][T24499] macvtap0: left allmulticast mode [ 550.268480][T24499] macsec0: left allmulticast mode [ 550.273741][T24499] geneve0: left allmulticast mode [ 550.279021][T24499] geneve1: left allmulticast mode [ 550.324094][T24499] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 550.331937][T24499] netdevsim netdevsim0 netdevsim1: left allmulticast mode [ 550.340372][T24499] netdevsim netdevsim0 netdevsim2: left allmulticast mode [ 550.350392][T24499] netdevsim netdevsim0 netdevsim3: left allmulticast mode [ 550.359330][T24499] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 550.367272][T24499] mac80211_hwsim hwsim4 wlan1: left allmulticast mode [ 550.375796][T24499] syztnl0: left allmulticast mode [ 550.381521][T24499] ipip0: left allmulticast mode [ 550.387458][T24499] veth2: left allmulticast mode [ 550.392903][T24499] veth3: left allmulticast mode [ 550.398749][T24499] @: left allmulticast mode [ 550.430309][T24499] vxlan0: left allmulticast mode [ 550.494595][T24499] bond0: left promiscuous mode [ 550.499655][T24499] ip6tnl1: left promiscuous mode [ 550.507938][T24499] bond0: left allmulticast mode [ 550.513212][T24499] ip6tnl1: left allmulticast mode [ 550.565708][T24499] sit1: left promiscuous mode [ 550.571020][T24499] sit1: left allmulticast mode [ 550.603849][T24499] veth1_vlan: left allmulticast mode [ 550.609817][T24499] macvtap1: left promiscuous mode [ 550.616334][T24499] macvtap1: left allmulticast mode [ 550.630904][T24499] ip6erspan0: left allmulticast mode [ 550.637951][T24499] veth0_macvtap: left allmulticast mode [ 550.644556][T24499] macvtap2: left allmulticast mode [ 550.687151][T24499] bond3: left promiscuous mode [ 550.697628][T24499] bond3: left allmulticast mode [ 550.726003][T24499] ip6gre2: left allmulticast mode [ 550.766609][T24499] bond9: left promiscuous mode [ 550.881130][T24499] gre1: left allmulticast mode [ 551.070092][T24499] bond14: left promiscuous mode [ 551.096682][T24499] bond15: left promiscuous mode [ 551.126671][T24499] bond15: left allmulticast mode [ 551.190061][ T66] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 551.199578][ T66] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 551.264010][ T66] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 551.290260][ T66] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 551.650746][T24551] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5919'. [ 551.682383][T24553] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5920'. [ 551.702853][T24553] IPVS: Unknown mcast interface: vcan0 [ 551.831064][T24560] netlink: 'syz.0.5922': attribute type 1 has an invalid length. [ 551.841256][T24560] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5922'. [ 552.151193][T24584] netlink: 'syz.3.5929': attribute type 32 has an invalid length. [ 552.186728][T24585] syzkaller0: entered promiscuous mode [ 552.196967][T24585] syzkaller0: entered allmulticast mode [ 552.396231][T24597] IPVS: Unknown mcast interface: vcan0 [ 552.519421][T24602] Cannot find set identified by id 3 to match [ 552.589132][T24576] wlan1 speed is unknown, defaulting to 1000 [ 552.868329][T24609] netlink: 'syz.4.5938': attribute type 1 has an invalid length. [ 554.199323][T24673] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 554.479541][T24688] netlink: 'syz.4.5962': attribute type 11 has an invalid length. [ 554.508894][T24688] netlink: 'syz.4.5962': attribute type 11 has an invalid length. [ 554.536094][T24688] __nla_validate_parse: 9 callbacks suppressed [ 554.536116][T24688] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5962'. [ 555.039667][T24720] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5971'. [ 555.063539][T24720] IPVS: Unknown mcast interface: vcan0 [ 555.170390][T24728] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 555.237502][T24737] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 555.290933][T24739] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5977'. [ 555.302904][T24728] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 555.368072][T24741] netlink: 'syz.0.5978': attribute type 1 has an invalid length. [ 555.380021][T24741] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5978'. [ 555.564102][T24756] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5984'. [ 555.631770][T24758] Cannot find set identified by id 3 to match [ 555.719914][T24764] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5987'. [ 555.820050][T24773] netlink: 'syz.1.5989': attribute type 1 has an invalid length. [ 555.828761][T24773] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5989'. [ 555.909691][T24775] netlink: 'syz.0.5990': attribute type 3 has an invalid length. [ 556.060778][T24786] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5996'. [ 556.216995][T24797] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5998'. [ 556.376988][ T13] [ 556.379513][ T13] ====================================================== [ 556.386563][ T13] WARNING: possible circular locking dependency detected [ 556.393593][ T13] syzkaller #0 Not tainted [ 556.398043][ T13] ------------------------------------------------------ [ 556.405062][ T13] kworker/u8:1/13 is trying to acquire lock: [ 556.411049][ T13] ffff88801b6dda20 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_unlink_sibling+0x71/0x180 [ 556.421592][ T13] [ 556.421592][ T13] but task is already holding lock: [ 556.429224][ T13] ffff88801b6dd988 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3d/0x130 [ 556.439520][ T13] [ 556.439520][ T13] which lock already depends on the new lock. [ 556.439520][ T13] [ 556.450025][ T13] [ 556.450025][ T13] the existing dependency chain (in reverse order) is: [ 556.459049][ T13] [ 556.459049][ T13] -> #10 (&root->kernfs_rwsem){++++}-{4:4}: [ 556.467140][ T13] down_write+0x96/0x200 [ 556.472003][ T13] kernfs_add_one+0x41/0x5c0 [ 556.477151][ T13] kernfs_create_dir_ns+0xde/0x130 [ 556.482875][ T13] internal_create_group+0x425/0x1180 [ 556.488781][ T13] cpuhp_invoke_callback+0x445/0x860 [ 556.494605][ T13] cpuhp_issue_call+0x430/0x7a0 [ 556.499996][ T13] __cpuhp_setup_state_cpuslocked+0x3d9/0x6b0 [ 556.506611][ T13] __cpuhp_setup_state+0x3f/0x60 [ 556.512095][ T13] do_one_initcall+0x250/0x8d0 [ 556.517575][ T13] do_initcall_level+0x104/0x190 [ 556.523141][ T13] do_initcalls+0x59/0xa0 [ 556.528007][ T13] kernel_init_freeable+0x2a6/0x3e0 [ 556.533825][ T13] kernel_init+0x1d/0x1d0 [ 556.538689][ T13] ret_from_fork+0x51e/0xb90 [ 556.543808][ T13] ret_from_fork_asm+0x1a/0x30 [ 556.549107][ T13] [ 556.549107][ T13] -> #9 (cpuhp_state_mutex){+.+.}-{4:4}: [ 556.556931][ T13] [ 556.556931][ T13] -> #8 (cpu_hotplug_lock){++++}-{0:0}: [ 556.564680][ T13] cpus_read_lock+0x42/0x160 [ 556.569813][ T13] static_key_slow_inc+0x12/0x30 [ 556.575288][ T13] setup_udp_tunnel_sock+0x343/0x550 [ 556.581108][ T13] l2tp_tunnel_register+0xda0/0x1460 [ 556.586927][ T13] pppol2tp_connect+0x8b7/0x17c0 [ 556.592392][ T13] __sys_connect+0x312/0x450 [ 556.597530][ T13] __x64_sys_connect+0x7a/0x90 [ 556.602818][ T13] do_syscall_64+0x14d/0xf80 [ 556.607931][ T13] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.614452][ T13] [ 556.614452][ T13] -> #7 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 556.622279][ T13] lock_sock_nested+0x48/0x100 [ 556.627574][ T13] inet_shutdown+0x6a/0x390 [ 556.632602][ T13] nbd_mark_nsock_dead+0x2e9/0x560 [ 556.638248][ T13] recv_work+0x1c7f/0x1d90 [ 556.643210][ T13] process_scheduled_works+0xb6e/0x18c0 [ 556.649378][ T13] worker_thread+0xa53/0xfc0 [ 556.654598][ T13] kthread+0x388/0x470 [ 556.659193][ T13] ret_from_fork+0x51e/0xb90 [ 556.664308][ T13] ret_from_fork_asm+0x1a/0x30 [ 556.669602][ T13] [ 556.669602][ T13] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 556.677267][ T13] __mutex_lock+0x19f/0x1300 [ 556.682390][ T13] nbd_queue_rq+0x37b/0x1100 [ 556.687502][ T13] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 556.693579][ T13] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 556.700439][ T13] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 556.706945][ T13] blk_mq_run_hw_queue+0x348/0x4f0 [ 556.712578][ T13] blk_mq_dispatch_list+0xd16/0xe10 [ 556.718300][ T13] blk_mq_flush_plug_list+0x48d/0x570 [ 556.724207][ T13] __blk_flush_plug+0x3ed/0x4d0 [ 556.729584][ T13] __submit_bio+0x28d/0x580 [ 556.734613][ T13] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 556.740769][ T13] block_read_full_folio+0x599/0x830 [ 556.746583][ T13] filemap_read_folio+0x137/0x3b0 [ 556.752130][ T13] do_read_cache_folio+0x358/0x590 [ 556.757765][ T13] read_part_sector+0xb6/0x2b0 [ 556.763056][ T13] adfspart_check_ICS+0xa5/0xa40 [ 556.768617][ T13] bdev_disk_changed+0x7ba/0x1550 [ 556.774253][ T13] blkdev_get_whole+0x380/0x510 [ 556.779632][ T13] bdev_open+0x31e/0xd30 [ 556.784407][ T13] blkdev_open+0x470/0x610 [ 556.789353][ T13] do_dentry_open+0x785/0x14e0 [ 556.794825][ T13] vfs_open+0x3b/0x340 [ 556.799425][ T13] path_openat+0x2e08/0x3860 [ 556.804800][ T13] do_file_open+0x23e/0x4a0 [ 556.810097][ T13] do_sys_openat2+0x113/0x200 [ 556.815307][ T13] __x64_sys_openat+0x138/0x170 [ 556.820692][ T13] do_syscall_64+0x14d/0xf80 [ 556.825811][ T13] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.832313][ T13] [ 556.832313][ T13] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 556.839535][ T13] __mutex_lock+0x19f/0x1300 [ 556.844741][ T13] nbd_queue_rq+0xc6/0x1100 [ 556.849796][ T13] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 556.855900][ T13] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 556.862758][ T13] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 556.869277][ T13] blk_mq_run_hw_queue+0x348/0x4f0 [ 556.874912][ T13] blk_mq_dispatch_list+0xd16/0xe10 [ 556.880641][ T13] blk_mq_flush_plug_list+0x48d/0x570 [ 556.886552][ T13] __blk_flush_plug+0x3ed/0x4d0 [ 556.891930][ T13] __submit_bio+0x28d/0x580 [ 556.896966][ T13] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 556.903121][ T13] block_read_full_folio+0x599/0x830 [ 556.908940][ T13] filemap_read_folio+0x137/0x3b0 [ 556.914512][ T13] do_read_cache_folio+0x358/0x590 [ 556.920163][ T13] read_part_sector+0xb6/0x2b0 [ 556.925457][ T13] adfspart_check_ICS+0xa5/0xa40 [ 556.930919][ T13] bdev_disk_changed+0x7ba/0x1550 [ 556.936475][ T13] blkdev_get_whole+0x380/0x510 [ 556.941856][ T13] bdev_open+0x31e/0xd30 [ 556.946634][ T13] blkdev_open+0x470/0x610 [ 556.951582][ T13] do_dentry_open+0x785/0x14e0 [ 556.956875][ T13] vfs_open+0x3b/0x340 [ 556.961475][ T13] path_openat+0x2e08/0x3860 [ 556.966687][ T13] do_file_open+0x23e/0x4a0 [ 556.971719][ T13] do_sys_openat2+0x113/0x200 [ 556.976937][ T13] __x64_sys_openat+0x138/0x170 [ 556.982355][ T13] do_syscall_64+0x14d/0xf80 [ 556.987498][ T13] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.993932][ T13] [ 556.993932][ T13] -> #4 (set->srcu){.+.+}-{0:0}: [ 557.001068][ T13] __synchronize_srcu+0xca/0x300 [ 557.006535][ T13] elevator_switch+0x1e8/0x7a0 [ 557.011836][ T13] elevator_change+0x2cc/0x450 [ 557.017129][ T13] elevator_set_default+0x36c/0x430 [ 557.022855][ T13] blk_register_queue+0x366/0x430 [ 557.028413][ T13] __add_disk+0x677/0xd50 [ 557.033294][ T13] add_disk_fwnode+0xfb/0x480 [ 557.038678][ T13] nbd_dev_add+0x72c/0xb50 [ 557.043647][ T13] nbd_init+0x168/0x1f0 [ 557.048330][ T13] do_one_initcall+0x250/0x8d0 [ 557.053728][ T13] do_initcall_level+0x104/0x190 [ 557.059278][ T13] do_initcalls+0x59/0xa0 [ 557.064225][ T13] kernel_init_freeable+0x2a6/0x3e0 [ 557.069949][ T13] kernel_init+0x1d/0x1d0 [ 557.074819][ T13] ret_from_fork+0x51e/0xb90 [ 557.079941][ T13] ret_from_fork_asm+0x1a/0x30 [ 557.085250][ T13] [ 557.085250][ T13] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 557.093162][ T13] __mutex_lock+0x19f/0x1300 [ 557.098284][ T13] elevator_change+0x1b3/0x450 [ 557.103728][ T13] elevator_set_none+0xb5/0x140 [ 557.109107][ T13] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 557.115540][ T13] nbd_start_device+0x17f/0xb10 [ 557.120917][ T13] nbd_genl_connect+0x165b/0x1cf0 [ 557.126501][ T13] genl_family_rcv_msg_doit+0x22a/0x330 [ 557.132600][ T13] genl_rcv_msg+0x61c/0x7a0 [ 557.137642][ T13] netlink_rcv_skb+0x232/0x4b0 [ 557.143038][ T13] genl_rcv+0x28/0x40 [ 557.147566][ T13] netlink_unicast+0x80f/0x9b0 [ 557.152863][ T13] netlink_sendmsg+0x813/0xb40 [ 557.158160][ T13] ____sys_sendmsg+0x972/0x9f0 [ 557.163465][ T13] ___sys_sendmsg+0x2a5/0x360 [ 557.168690][ T13] __x64_sys_sendmsg+0x1bd/0x2a0 [ 557.174348][ T13] do_syscall_64+0x14d/0xf80 [ 557.179493][ T13] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.185915][ T13] [ 557.185915][ T13] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 557.194622][ T13] blk_alloc_queue+0x546/0x680 [ 557.200215][ T13] __blk_mq_alloc_disk+0x197/0x390 [ 557.206040][ T13] nbd_dev_add+0x499/0xb50 [ 557.210996][ T13] nbd_init+0x168/0x1f0 [ 557.215781][ T13] do_one_initcall+0x250/0x8d0 [ 557.221079][ T13] do_initcall_level+0x104/0x190 [ 557.226632][ T13] do_initcalls+0x59/0xa0 [ 557.231495][ T13] kernel_init_freeable+0x2a6/0x3e0 [ 557.237233][ T13] kernel_init+0x1d/0x1d0 [ 557.242120][ T13] ret_from_fork+0x51e/0xb90 [ 557.247381][ T13] ret_from_fork_asm+0x1a/0x30 [ 557.252701][ T13] [ 557.252701][ T13] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 557.259944][ T13] fs_reclaim_acquire+0x71/0x100 [ 557.265514][ T13] kmem_cache_alloc_noprof+0x40/0x650 [ 557.271422][ T13] __kernfs_iattrs+0xdf/0x340 [ 557.276639][ T13] kernfs_iop_setattr+0xea/0x3f0 [ 557.282116][ T13] notify_change+0xc1a/0xf40 [ 557.287237][ T13] do_truncate+0x1c2/0x250 [ 557.292369][ T13] path_openat+0x2f89/0x3860 [ 557.297488][ T13] do_file_open+0x23e/0x4a0 [ 557.302607][ T13] do_sys_openat2+0x113/0x200 [ 557.307832][ T13] __x64_sys_openat+0x138/0x170 [ 557.313213][ T13] do_syscall_64+0x14d/0xf80 [ 557.318334][ T13] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.324846][ T13] [ 557.324846][ T13] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 557.333379][ T13] __lock_acquire+0x15a5/0x2cf0 [ 557.338788][ T13] lock_acquire+0xf0/0x2e0 [ 557.343787][ T13] down_write+0x96/0x200 [ 557.348688][ T13] kernfs_unlink_sibling+0x71/0x180 [ 557.354433][ T13] __kernfs_remove+0x3e7/0x660 [ 557.359723][ T13] kernfs_remove_by_name_ns+0xaf/0x130 [ 557.365724][ T13] sysfs_unmerge_group+0xd4/0x140 [ 557.371290][ T13] dpm_sysfs_remove+0x76/0xd0 [ 557.376510][ T13] device_del+0x250/0x8f0 [ 557.381497][ T13] srp_remove_one+0x81/0x280 [ 557.386614][ T13] remove_client_context+0xb9/0x1e0 [ 557.392339][ T13] disable_device+0x137/0x330 [ 557.397543][ T13] __ib_unregister_device+0x2cb/0x3f0 [ 557.403447][ T13] ib_unregister_work+0x19/0x30 [ 557.409175][ T13] process_scheduled_works+0xb6e/0x18c0 [ 557.415257][ T13] worker_thread+0xa53/0xfc0 [ 557.420399][ T13] kthread+0x388/0x470 [ 557.425010][ T13] ret_from_fork+0x51e/0xb90 [ 557.430222][ T13] ret_from_fork_asm+0x1a/0x30 [ 557.435521][ T13] [ 557.435521][ T13] other info that might help us debug this: [ 557.435521][ T13] [ 557.445749][ T13] Chain exists of: [ 557.445749][ T13] &root->kernfs_iattr_rwsem --> cpuhp_state_mutex --> &root->kernfs_rwsem [ 557.445749][ T13] [ 557.460359][ T13] Possible unsafe locking scenario: [ 557.460359][ T13] [ 557.467808][ T13] CPU0 CPU1 [ 557.473523][ T13] ---- ---- [ 557.478893][ T13] lock(&root->kernfs_rwsem); [ 557.483666][ T13] lock(cpuhp_state_mutex); [ 557.490785][ T13] lock(&root->kernfs_rwsem); [ 557.498159][ T13] lock(&root->kernfs_iattr_rwsem); [ 557.503462][ T13] [ 557.503462][ T13] *** DEADLOCK *** [ 557.503462][ T13] [ 557.511636][ T13] 4 locks held by kworker/u8:1/13: [ 557.516755][ T13] #0: ffff88801ab24148 ((wq_completion)ib-unreg-wq){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 557.528177][ T13] #1: ffffc90000127c40 ((work_completion)(&device->unregistration_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 557.541412][ T13] #2: ffff888031624718 (&device->unregistration_lock){+.+.}-{4:4}, at: __ib_unregister_device+0x284/0x3f0 [ 557.552829][ T13] #3: ffff88801b6dd988 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3d/0x130 [ 557.563628][ T13] [ 557.563628][ T13] stack backtrace: [ 557.569521][ T13] CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT(full) [ 557.569541][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 557.569553][ T13] Workqueue: ib-unreg-wq ib_unregister_work [ 557.569578][ T13] Call Trace: [ 557.569587][ T13] [ 557.569595][ T13] dump_stack_lvl+0xe8/0x150 [ 557.569618][ T13] print_circular_bug+0x2e1/0x300 [ 557.569643][ T13] check_noncircular+0x12e/0x150 [ 557.569669][ T13] __lock_acquire+0x15a5/0x2cf0 [ 557.569691][ T13] ? __lock_acquire+0x6b5/0x2cf0 [ 557.569722][ T13] lock_acquire+0xf0/0x2e0 [ 557.569741][ T13] ? kernfs_unlink_sibling+0x71/0x180 [ 557.569761][ T13] down_write+0x96/0x200 [ 557.569781][ T13] ? kernfs_unlink_sibling+0x71/0x180 [ 557.569797][ T13] ? __pfx_down_write+0x10/0x10 [ 557.569817][ T13] ? kernfs_root+0x1c/0x230 [ 557.569838][ T13] ? kernfs_root+0x1c/0x230 [ 557.569859][ T13] ? kernfs_root+0x1c/0x230 [ 557.569880][ T13] ? kernfs_root+0x1ea/0x230 [ 557.569902][ T13] kernfs_unlink_sibling+0x71/0x180 [ 557.569920][ T13] __kernfs_remove+0x3e7/0x660 [ 557.569936][ T13] kernfs_remove_by_name_ns+0xaf/0x130 [ 557.569953][ T13] sysfs_unmerge_group+0xd4/0x140 [ 557.569977][ T13] dpm_sysfs_remove+0x76/0xd0 [ 557.570000][ T13] device_del+0x250/0x8f0 [ 557.570021][ T13] ? xa_load+0x60/0x210 [ 557.570039][ T13] ? __pfx_device_del+0x10/0x10 [ 557.570060][ T13] ? remove_client_context+0x79/0x1e0 [ 557.570075][ T13] ? __pfx_srp_remove_one+0x10/0x10 [ 557.570093][ T13] srp_remove_one+0x81/0x280 [ 557.570112][ T13] ? __pfx_srp_remove_one+0x10/0x10 [ 557.570130][ T13] remove_client_context+0xb9/0x1e0 [ 557.570146][ T13] disable_device+0x137/0x330 [ 557.570163][ T13] ? __pfx_disable_device+0x10/0x10 [ 557.570183][ T13] __ib_unregister_device+0x2cb/0x3f0 [ 557.570210][ T13] ib_unregister_work+0x19/0x30 [ 557.570231][ T13] ? process_scheduled_works+0xa8d/0x18c0 [ 557.570250][ T13] process_scheduled_works+0xb6e/0x18c0 [ 557.570280][ T13] ? __pfx_process_scheduled_works+0x10/0x10 [ 557.570302][ T13] ? assign_work+0x3d5/0x5e0 [ 557.570323][ T13] worker_thread+0xa53/0xfc0 [ 557.570352][ T13] kthread+0x388/0x470 [ 557.570367][ T13] ? __pfx_worker_thread+0x10/0x10 [ 557.570386][ T13] ? __pfx_kthread+0x10/0x10 [ 557.570401][ T13] ret_from_fork+0x51e/0xb90 [ 557.570422][ T13] ? __pfx_ret_from_fork+0x10/0x10 [ 557.570442][ T13] ? __switch_to+0xc7d/0x1450 [ 557.570460][ T13] ? __pfx_kthread+0x10/0x10 [ 557.570475][ T13] ret_from_fork_asm+0x1a/0x30 [ 557.570503][ T13] [ 557.825280][ T5193] udevd[5193]: worker [16349] /devices/virtual/block/nbd0 timeout; kill it [ 557.826803][T24797] bond0 (unregistering): Released all slaves [ 557.834058][ T5193] udevd[5193]: seq 21677 '/devices/virtual/block/nbd0' killed