last executing test programs: 2.392620306s ago: executing program 1 (id=1241): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xe, 0x16, &(0x7f0000000300)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf20000000000000070000000f0000002d030100000000007300ffb1000000006926000000000000bf67000000000000150002000fff52004507000010000000d60600000ee60000bf0500000000000073700000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070400000400f900bd430100000000009500000000000000050000000000000095000000000000001c15a3ce747c693a74b62fd0758b15f09429c09074bc4b2bd2dc480dd7a064b8473e2060d60bb39d0af449deaa27ea949e8f9000d885dfea2783835e29eb532ba8546fc020c196738b5f32b095f5d5b196b9e8d897e461c01c697671d1000000000000"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="0300000004000000040000000a00080000000200", @ANYRES32=r0, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="05000000040000000100"/28], 0x50) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000a40)={'syztnl2\x00', &(0x7f0000000700)={'ip6gre0\x00', 0x0, 0x2b, 0x3, 0x4, 0x10, 0x4, @empty, @mcast2, 0x80, 0x7, 0x4689, 0x2cbf}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=@bloom_filter={0x1e, 0x4, 0x6, 0x0, 0x200, r1, 0x0, '\x00', r2, 0xffffffffffffffff, 0x4, 0x3, 0x4}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000500)={r3, &(0x7f0000000680)="62b06370633b38c2984b487420f090d7efeee5f8c65b5bf66ff058cb8436560322cc0b5defec08eba6ff4dc23426b4468027a7bce6b3ec972453c75eded328a7c029c0a067cb0d8d3fe8d4044982f1f593ed2fa51cdfcfdf470ba3", &(0x7f0000000580)=""/26, 0x2}, 0x20) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000bc0)='rdma.current\x00', 0x0, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000dc0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e00)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="180011000000000000001aacb26a00008400"/31], &(0x7f0000000f00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0xc, &(0x7f0000000f40), 0xfff1}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001040)={0x6, 0x20, &(0x7f0000000c00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x213}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @map_fd={0x18, 0x2, 0x1, 0x0, r1}, @alu={0x7, 0x0, 0x7, 0x5, 0x6, 0xc, 0xf}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x2}, @map_val={0x18, 0x4, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x7}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @jmp={0x5, 0x0, 0xb, 0x0, 0x5, 0x2, 0xfffffffffffffff0}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x7}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x633f495943f6d69c}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000d00)='syzkaller\x00', 0x0, 0x30, &(0x7f0000000d40)=""/48, 0x41100, 0x0, '\x00', r2, 0x25, r5, 0x8, &(0x7f0000000f80)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000fc0)={0x5, 0x6, 0x5, 0xcdfa}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001000)=[r0], 0x0, 0x10, 0x4}, 0x94) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f00000005c0)={r3, &(0x7f0000000600), 0x0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x3, 0x6, &(0x7f00000001c0)=@framed={{0x18, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, [@map_val={0x18, 0x5, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x5}, @exit={0x95, 0x0, 0x7b00}]}, &(0x7f0000000200)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, r6}, 0x94) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000600)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}], 0x1, 0x0) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000900)=ANY=[@ANYBLOB="140100002300010000000000fcdbdf2502"], 0x114}], 0x1, 0x0, 0x0, 0x48000}, 0x0) r8 = socket(0x2, 0x80805, 0x0) socket(0x10, 0x3, 0x0) bind$bt_hci(r8, &(0x7f0000000b80)={0x1f, 0xffffffffffffffff}, 0x6) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000480)={'bridge_slave_0\x00', 0x0}) r11 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r11, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r10, @ANYBLOB="00000000100000001c001a80", @ANYRES16=r11], 0x44}}, 0x2000800) r12 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001100)={'macsec0\x00', 0x0}) sendmsg$nl_route(r12, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001180)={&(0x7f00000011c0)=ANY=[@ANYRES32=r13, @ANYBLOB="20000000280001006d616373656300000c00028005000b0000000000000000000000000007a83ac483cead202c80e537f3ed4b47a82e5aa904ea3b95675eefd3340ff788a36919b90498794306b649bcd35d70119b2d2b425548b2ade4f0892fd7a534715f088f1c7403d3d84cde1f8b932f3dd3662e482b"], 0x3c}, 0x1, 0x0, 0x0, 0x24008001}, 0x8000) bpf$OBJ_GET_PROG(0x7, &(0x7f0000001240)=@o_path={0x0, 0x0, 0x4008}, 0x18) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000001280), r14) 2.380810347s ago: executing program 3 (id=1242): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x34, 0x6, 0x6, 0x401, 0x0, 0xf0ff, {0xa, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x8810}, 0x80) 2.253522062s ago: executing program 3 (id=1243): r0 = socket$kcm(0x2d, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000003440)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000020014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r1, &(0x7f00000034c0)={0x0, 0x0, &(0x7f0000003500)={&(0x7f0000003540)=ANY=[@ANYBLOB="1400000010000100000000000000000007c7000a5c000000000a05000000000000000000010000090c000440000000000000000108000240000000000900010073797a31000000000c000440000000000000000108000240000000000900010073797a3100000000080002400000000314000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40}, 0x24000840) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000003880)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000003900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b00010067726574617000002400028008000700640101000600030010"], 0x5c}}, 0x40) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r2, 0x4048587b, &(0x7f0000003cc0)={{r2, &(0x7f00000037c0)='-(*,)!\x00', 0x600, &(0x7f0000003a00)={@_ha_fsid={[0x7, 0x3]}, {0xfffc, 0x2, 0x0, 0xffffffffffffa924}}, 0x80000001, &(0x7f0000003a40), &(0x7f0000003a80)=0x6}, 0x2, &(0x7f0000003c80)=[{0x1, 0x8001, &(0x7f0000003ac0)='\\{#++\x00', &(0x7f0000003b00)="9c701990093cc9a868c13d08c2183dd4007c2fa6bf2c9f636a14403c273e1053011996e5c9308ad794aa79a1b8adcd3b2e75cf55fce34f94700863b5315bf4d54605e071f6f044cca1a9f8ea71954b3034b8f6cbb6033630c0c7a47ca916e7653703d5ce", 0x64, 0x8}, {0x3, 0x4, &(0x7f0000003b80)='@@\x00', &(0x7f0000003bc0)="62234643ae3acf2293eee6bc75ec50bf4803f64f1a9f40be9cd39f63ba1501c62df3b5ad73f01b6d02121a7cb20cda0addd6de00445ae08f3bd02af91246ed4ebab9e79579c47acefd30ed324c51bd9e2cf50ac69a4f57933a9adac123e7bb7f29f0e2c29237e2735e045d4feef3cb95319fde07144fe2a495fa26392577f4899ac9d76f9fff6f6ec6b1c794f0b9d318eb5a3a5ddfcb89d712571682c2345832a74808f67ecc96ae3bea99111e8d291e00e104c8d543e60404", 0xb9, 0x32}]}) write$tun(r6, &(0x7f0000003d40)={@val={0x0, 0x8864}, @val={0x2, 0x80, 0x1000, 0x3, 0xb33, 0x8}, @mpls={[{0xfff}, {0x5, 0x0, 0x1}, {0x5, 0x0, 0x1}, {}, {0x6, 0x0, 0x1}], @ipv4=@udp={{0x1a, 0x4, 0x0, 0x3, 0xbd, 0x66, 0x0, 0x2, 0x11, 0x0, @loopback, @empty, {[@noop, @ra={0x94, 0x4}, @cipso={0x86, 0x12, 0x2, [{0x0, 0xc, "e2e9b2690e74b106340b"}]}, @noop, @generic={0x44, 0x4, "e775"}, @ssrr={0x89, 0x27, 0xce, [@private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101, @multicast2, @remote, @private=0xa010100, @loopback, @dev={0xac, 0x14, 0x14, 0x43}, @multicast1]}, @rr={0x7, 0xb, 0x29, [@remote, @broadcast]}, @generic={0x82, 0x4, 'Ps'}]}}, {0x4e21, 0x4e21, 0x55, 0x0, @opaque="18ec9c02e9d9661fb01c4625757bfb0c2036b62118aebba6783c96ec781f1d41b4a787bf0b5ae26c74c7b8b9f8ddc3137ed04d5d7e3fd4d1d44ceb85627207f7001246cb195946b9b8aa2a2fe1"}}}}, 0xdf) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000035c0)={&(0x7f0000003600)={0x1c, r5, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000003680), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f00000036c0)={0x0, 0x0, &(0x7f0000003700)={&(0x7f0000003740)={0x54, r7, 0x1, 0x70bd29, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x8}, {0xc, 0x90, 0xfffffffffffffffd}}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x48000) sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f0000003840)={&(0x7f0000003640)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000003800)={&(0x7f0000003980)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="00022dbd7000ffdbdf25760000000e0001006ef67464657673696d0000000f0002006e657464657673696d3000000800030000000000f0a954575a218cc46f4c8f56462fdf72f96bbd8adbc6a85fdc05f839f639c7b8267cae6bf450bd8ffaa8073eb70bae"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x4040000) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000040)=@tipc=@id={0x2d, 0x3, 0x3, {0x4e24, 0x3}}, 0x80, 0x0}, 0x850) r8 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r8, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x20) sendmsg$nl_generic(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003400)=ANY=[@ANYBLOB="180000d2000000000000000214a0414fc7d319df19f0fadbdf25010000200400ae", @ANYRES16=r0, @ANYRES64=r0, @ANYRES64], 0x18}, 0x1, 0x0, 0x0, 0x802}, 0x0) recvmsg(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)=""/4105, 0x102f}, {&(0x7f0000001380)=""/4094, 0xffe}, {&(0x7f0000002380)=""/119, 0x77}, {&(0x7f0000002400)=""/4096, 0x1000}], 0x4}, 0x40000180) 2.180217387s ago: executing program 1 (id=1246): r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) r1 = socket(0x10, 0x3, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000000040)=0x1, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x50) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x9000, @rand_addr=' \x01\x00'}], 0x1c) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r4, 0x84, 0x74, &(0x7f0000000080)=""/47, &(0x7f00000000c0)=0x2f) sendto(r3, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, 0x0, 0x0) write(r1, 0x0, 0x0) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f00000001c0)={@private2, 0x0, 0x0, 0x103, 0xd, 0x0, 0x1}, 0x20) connect$inet6(r0, 0x0, 0x0) 1.998369914s ago: executing program 1 (id=1248): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001040), r0) sendmsg$NLBL_CALIPSO_C_ADD(r0, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001180)={&(0x7f00000011c0)={0x1c, r1, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}}, 0x8000) 1.914436375s ago: executing program 1 (id=1251): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) shutdown(r0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40800) ioctl$BTRFS_IOC_BALANCE_CTL(r2, 0x40049421, 0x1) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x41, 0x0) sendto$inet(r1, 0x0, 0x0, 0x4011, 0x0, 0x0) 1.645764948s ago: executing program 0 (id=1254): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_buf(r0, 0x29, 0x20, &(0x7f0000000000)="1f40d5e334af84988340ea07a2381c6347df4ebcceb94f2b151f6928131ec0c9", 0x20) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x844) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, 0x0, 0x4000) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r5, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x10000) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xd, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, [@call={0x85, 0x0, 0x0, 0x3b}]}, &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x34, r9, 0x1, 0x0, 0x0, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8, 0xf, 0xfffff076}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000c5}, 0x2404c080) ioctl$SIOCSIFHWADDR(r6, 0x8914, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f0000000440)) r10 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f00000003c0)=0xf, 0x4) sendto$packet(r10, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r11, 0x1, 0x0, 0x6, @multicast}, 0x14) socket$nl_xfrm(0x10, 0x3, 0x6) 1.426093914s ago: executing program 2 (id=1257): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x30, r2, 0x1, 0xfffffffd, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x30}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r2, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x51}, 0x4000810) 1.331608133s ago: executing program 3 (id=1258): openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000180)='wg2\x00', 0x4) bind$xdp(r0, &(0x7f00000001c0)={0x2c, 0x1}, 0x60) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) close(r1) sendmsg$NL80211_CMD_SET_NOACK_MAP(r1, &(0x7f0000000a00)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x34, 0x0, 0x3fe86dc1b83b881e, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x43}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1ff}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xbff3}, @NL80211_ATTR_NOACK_MAP={0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20008880) r2 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r2, 0x84, 0x6d, 0x0, &(0x7f0000000080)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x60480) connect$netlink(r3, &(0x7f00000000c0)=@unspec, 0xc) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r6 = socket$inet6(0xa, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000940)="2e00000011008108090f9becdb4cb92e0a4831371c00000069bd6efb2502eaf60d000100020400bf050005001201", 0x2e}], 0x1}, 0x0) sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x30004001) setsockopt$sock_attach_bpf(r4, 0x6, 0x5, &(0x7f0000000140), 0x4) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000000)={0x8607, 0x3, 0xe, 0xa2}, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000001600010a0000002200000000810000000400000008000a"], 0x20}, 0x1, 0x0, 0x0, 0x48007}, 0x8000) 1.275611059s ago: executing program 4 (id=1259): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000300)) ioctl$PPPIOCSMRRU(r0, 0x4010744d, &(0x7f0000000340)=0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={0x0}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="850000009e000000bf010000000000008500005e1c0000009500000000000000"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000380)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000480)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) bind$tipc(r3, &(0x7f0000000540)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x3}}, 0x10) bind$tipc(r2, 0x0, 0x0) 1.255433614s ago: executing program 2 (id=1260): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x38, 0x2, 0x6, 0x5, 0x0, 0x2000000, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x38}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001"], 0x110}}, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0xa1f08e37025a5455}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x60, 0x1405, 0x14, 0x70bd27, 0x25dfdbfe, "", [{{0x8, 0x1, 0x2}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x1}}, {{0x8}, {0x8, 0x3, 0x4}}, {{0x8}, {0x8}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x2}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4004080}, 0x8000) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r1, 0x400, 0x70bd27, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4894) 1.245713016s ago: executing program 0 (id=1261): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001040), r0) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001180)={&(0x7f00000011c0)={0x1c, r1, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}}, 0x8000) 1.098820088s ago: executing program 0 (id=1262): openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)=@migrate={0xa0, 0x21, 0x1, 0x0, 0xfffffffe, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@rand_addr=0x64010100, 0xfffe, 0x0, 0x2, 0x0, 0xa, 0xe0, 0x80}, 0x2}, [@migrate={0x50, 0x11, [{@in6=@private2, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, @in=@loopback, 0x6c, 0x1, 0x0, 0x0, 0x0, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) 1.040304479s ago: executing program 2 (id=1263): sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="110025bd7000fcdbdf251b000000180014000200"/38], 0x2c}, 0x1, 0x0, 0x0, 0x14880}, 0x1004c810) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000b80)=@updpolicy={0x27c, 0x19, 0x1, 0x0, 0x0, {{@in6=@dev={0xfe, 0x7}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x8000}, [@tmpl={0x1c4, 0x5, [{{@in6=@remote}, 0x0, @in=@broadcast}, {{@in6=@mcast2}, 0x0, @in=@dev}, {{@in=@multicast2}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x12f}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, @in6=@dev}, {{@in=@remote, 0x0, 0x6c}, 0x0, @in6=@loopback}, {{}, 0x0, @in6=@rand_addr=' \x01\x00'}, {{@in6=@dev}, 0x0, @in=@local}]}]}, 0x27c}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0xa2f01, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000005c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000e00)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000e40)=ANY=[@ANYBLOB="0a000806bbbbbbbbbbbbaaaaaaaaaa2986dd6d0020080b1011ff20010000000000000000000000000000ff0210004000000000000000000000014f194e200010907882080001167bb59e"], 0x4a) 1.039102159s ago: executing program 4 (id=1264): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x34, 0x6, 0x6, 0x401, 0x0, 0x1000000, {0xa, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x8810}, 0x80) 959.597046ms ago: executing program 4 (id=1265): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@ipv6_getaddrlabel={0x24, 0x18, 0x1, 0x0, 0x14, {0xa, 0x0, 0x80}, [@IFAL_LABEL={0x8}]}, 0x24}}, 0x0) 957.585733ms ago: executing program 1 (id=1266): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r1) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000640)=@filter={'filter\x00', 0xe, 0x4, 0x260, 0xffffffff, 0x0, 0x130, 0x1c8, 0xffffffff, 0xffffffff, 0x98, 0x130, 0x1c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0xf, 0x7, 0x5b4}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)={0x20, r2, 0x7, 0x400000, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x20}}, 0x0) close(0xffffffffffffffff) r5 = socket$xdp(0x2c, 0x3, 0x0) socket$kcm(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r6, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r6, 0x0, 0x0, 0x4c881, &(0x7f0000000200)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)=' ', 0xfdef}], 0x1}}], 0x1, 0x4000000) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'vcan0\x00'}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="0a39cc5700"/18, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB], 0x80}, 0x1, 0x0, 0x0, 0x20000040}, 0x8050) 882.179614ms ago: executing program 0 (id=1267): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) (async) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000740)={r3, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x9}}, 0x10) (async) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000780)={r3, 0x3, 0x6, @remote}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000840)={'syzkaller0\x00', 0x2}) (async) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000880)={0x1, &(0x7f00000008c0)=[{0x6, 0x8, 0x3, 0x4}]}) (async) ioctl$TUNDETACHFILTER(r4, 0x401054d6, 0x0) (async) write(r1, &(0x7f00000007c0)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x670, 0x0, 0x0, 0x2e0, 0xd0, 0xd0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@empty, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28}}]}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0xfd}}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0xa]}}, @common=@dst={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6d0) 879.36159ms ago: executing program 3 (id=1268): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) (async, rerun: 64) mmap(&(0x7f0000c61000/0x4000)=nil, 0x4000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (rerun: 64) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0xdfdddf82bb4cc70c, 0x28011, r1, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r3 = socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x2, &(0x7f0000000400)=0x5b, 0x4) (async, rerun: 32) bind$inet6(r6, &(0x7f00000008c0)={0xa, 0x4e22}, 0x1c) (async, rerun: 32) mmap(&(0x7f000000f000/0x1000)=nil, 0x1000, 0x3, 0x100010, r3, 0xc5bb4000) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x1, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8, 0x8, 0xff}]}}]}, 0x40}}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180800"/14], 0x0, 0x4}, 0x94) (async, rerun: 64) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0e00000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRESOCT=r1, @ANYBLOB="000000000000000000000000cf26ce7628773be2a300002a00"/37], 0x48) (async, rerun: 64) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000440)="5c00000011006bec9e3be15c6e17aa3107b6ed2e0d000000ba090000160af3653c001ac004000202080002000300010006000000eab556a705251e615739a5e851f60a84c9f4c493803794fc9a26f4e786a6d0000300000000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x2000c810) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r7, &(0x7f0000000240), &(0x7f0000000280)=""/102}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000007c0)={{r7, 0xffffffffffffffff}, &(0x7f0000000740), &(0x7f0000000780)='%-5lx \x00'}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000800)={&(0x7f00000004c0)="880b1ebf129e21912174c71932efe30501dc3e40261f4b6d37cba5f3d0208edbcfc497986848671796601700c0ab19d572f7ce0688499c8e794b11bae2a8ae7d0af1b99794feab178f7914e99366fe41f6528738668a8770f652c189b2fe19b013c1c6e853900cf2d9e196af32a2828784e941323674eeea84d5b247ce71311144fcfcbbc0bc98", &(0x7f0000000580)=""/22, &(0x7f00000005c0)="9110546290971174ab505327fe205fd8898c7094f374c5e53e64c413e9fec48e1d73c765a34ccbd04ea8f12952a61915c4a503b647e2f534bda575a7ebf3282ae0a2fe9d483457216b2175aecb90da80014d5c854b9513bf144c585d8916ffeac22967fac34ad5dcfe8d69b2b1f782941597599052c7e96653d6d63e651665f5d0a42d7dd1c2021423fd41d6ea5ef4ec1b6c5d92c58f3be22f212817ca45d7b11069051b338db818", &(0x7f0000000680)="3b2f520641efd23ca5e72f89122aa86efdf2802fd3dd3edd48f581538d236f746769ed3bb22de0270fb441901d080eda28086eec5ddf2d6e56f60c74ef7f63c9d5638cf9f92cbdda017e371ce781728fd51cc23bc3f4a41b2b996a7bb90c93c7f800f23f87affe8325cada7bda3f2fca3b4a476c9a79b58c4d54157b517977b4570ca6e0f840fbb9529609c2ec9574037e3c3d944ee0f3", 0x0, r9, 0x4}, 0x38) mmap(&(0x7f0000071000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) (async) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r10, 0x0) mmap(&(0x7f00001e3000/0x2000)=nil, 0x2000, 0x0, 0x3032, 0xffffffffffffffff, 0x2689e000) 801.737389ms ago: executing program 4 (id=1269): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000700)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) close(r1) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000780)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x81}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000880)={'syzkaller0\x00', @random="0100003600"}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, 0x0, {0x10, 0xd}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0xb130, 0x5, 0x0, 0xea}, 0x60}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4894}, 0x2) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f00000001c0), 0x56) sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f0000000240)=@xdp={0x2c, 0x8, r6, 0x42}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000300)="27030200dc0f14000e0000000025c10200000001125ce882cbf400930bf4533f00429c65112a", 0x26}, {&(0x7f0000000340)="02db0b9ef1cafdab", 0xdd86}], 0x2}, 0x4005) 757.453082ms ago: executing program 2 (id=1270): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x30, r2, 0x1, 0xfffffffd, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x30}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r2, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x51}, 0x4000810) 681.665475ms ago: executing program 2 (id=1271): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r1], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x8000) sendmsg$inet(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000400)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0018000000040014020d000a00000000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d00d00000000000000bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 434.044087ms ago: executing program 3 (id=1272): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$inet_sctp(0x2, 0x1, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000000c0)={r2, 0x2, 0x30}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a30000000000800410072786500140033006c6f00000000000000000000000000009f439ba65f5d4557825e4a04b4a87b893f93a28315a2d945bc01a26c729eae88"], 0x38}}, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r1, 0x80286722, &(0x7f0000000300)={&(0x7f0000000200)=""/216, 0xd8, 0x368}) 355.898325ms ago: executing program 0 (id=1273): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x2000000, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000, 0x0}, &(0x7f0000000000)=0x40) 270.92271ms ago: executing program 3 (id=1274): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) (async, rerun: 32) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) (rerun: 32) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f00000008c0)) (async, rerun: 32) r5 = socket$unix(0x1, 0x3, 0x0) (rerun: 32) r6 = accept(r3, &(0x7f0000000780)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000800)=0x80) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000880)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r6, &(0x7f0000000cc0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c80)={&(0x7f0000000b00)={0x158, 0x0, 0x800, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_QOS_MAP={0x32, 0xc7, {[{0x0, 0x3}, {0x1, 0x5}, {0x3, 0x1}, {0x81, 0x4}, {0x8, 0x3}, {0x0, 0x7}, {0x9a, 0x6}, {0x7f, 0x6}, {0x5, 0x4}, {0x3, 0x7}, {0x3, 0x4}, {0x5, 0x7}, {0x7f, 0x2}, {0x6, 0x2}, {0xf, 0x6}, {0x6, 0x4}, {0x0, 0x4}, {0x5, 0x4}, {0xe, 0x2}], "c4d03ff2ae81e923"}}, @NL80211_ATTR_QOS_MAP={0x34, 0xc7, {[{0x4, 0x4}, {0x9, 0x3}, {0x9}, {0x9}, {0x4, 0x5}, {0x6, 0x7f}, {0x6, 0x6}, {0x0, 0x1}, {0xac, 0x2}, {0x9, 0x3}, {0x6}, {0xff, 0x1}, {0xb5, 0x2}, {0x7f, 0x1}, {0x1}, {0x10, 0x6}, {0xd7}, {0xf1, 0x1}, {0x0, 0x7}, {0xf, 0x7}], "0250d3f99b7d2316"}}, @NL80211_ATTR_QOS_MAP={0x2e, 0xc7, {[{0xb0, 0x4}, {0x2, 0x1}, {0x5}, {0x1, 0x1}, {0x6, 0x5}, {0x1, 0x5}, {0x9, 0x2}, {0x4, 0x5}, {0x5, 0x7}, {0x7}, {0xf9, 0x4}, {0x7c, 0x1}, {0x4, 0x7}, {0x5, 0x7}, {0xef, 0x1}, {0x7, 0x4}, {0x1, 0x2}], "84d01c33187d7497"}}, @NL80211_ATTR_QOS_MAP={0x28, 0xc7, {[{0x6, 0x5}, {0x8}, {0x9, 0x2}, {0x4, 0x4}, {0x1, 0x1}, {0x5}, {0x6}, {0x8, 0x5}, {0x6, 0x7}, {0x6, 0x4}, {0x0, 0x6}, {0x40, 0x6}, {0x1, 0x1}, {0x8, 0x3}], "4c60a61783278ece"}}, @NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "4ab754dba6442c6e"}}, @NL80211_ATTR_QOS_MAP={0x36, 0xc7, {[{0x3, 0x4}, {0xf3, 0x3}, {0x7, 0x3}, {0x2, 0x4}, {0x3, 0x1}, {0x80, 0x6}, {0x0, 0x6}, {0x3, 0x1}, {0x4, 0x3}, {0xd, 0x3}, {0xff, 0x1}, {0x9, 0x2}, {0xcc, 0x7}, {0x4, 0x1}, {0x1, 0x4}, {0x5, 0x2}, {0x0, 0x6}, {0x6, 0x5}, {0xfd, 0x3}, {0x8, 0x7}, {0x1, 0x3}], "07796a651a9c1ff9"}}, @NL80211_ATTR_QOS_MAP={0x36, 0xc7, {[{0xfb, 0x4}, {0x4, 0x7}, {0x0, 0x5}, {0xe6, 0x7}, {0x15, 0x4}, {0x6, 0x4}, {0xff, 0x3}, {0x6, 0x2}, {0x7, 0x3}, {0x6, 0x3}, {0xf, 0x1}, {0x2, 0x1}, {0x4, 0x4}, {0x9, 0x1}, {0x5, 0x2}, {0xc, 0x7}, {0x6, 0x6}, {0x6, 0x2}, {0x2, 0x2}, {0x7, 0x1}, {0x2, 0x5}], "d27616ca9275b72c"}}]}, 0x158}, 0x1, 0x0, 0x0, 0x2000004a}, 0x40804) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'syzkaller1\x00', 0x0}) (rerun: 32) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=@newtfilter={0x98, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300, 0xa}}, [@filter_kind_options=@f_matchall={{0xd}, {0x64, 0x2, [@TCA_MATCHALL_ACT={0x60, 0x2, [@m_ct={0x5c, 0x1, 0x0, 0x0, {{0x7}, {0x34, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x8000, 0x3}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV4_MIN={0x8}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e20}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x98}}, 0x0) write$tun(r2, &(0x7f0000000740)=ANY=[@ANYBLOB="700000000a00000000000000aaaaaabb080045f0001400000000002f9078"], 0x2e) (async, rerun: 32) r9 = socket$inet(0x2, 0x80001, 0x84) (rerun: 32) setsockopt$EBT_SO_SET_ENTRIES(r9, 0x0, 0x80, &(0x7f0000000900)=@broute={'broute\x00', 0x20, 0x4, 0x12e, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000004c0], 0x0, 0x0, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"]}, 0x1a6) (async) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000d00)={0x13c, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x2}, @ETHTOOL_A_LINKMODES_OURS={0x118, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x110, 0x3, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x54}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '-\xcf,\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '/dev/net/tun\x00'}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'IPVS\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '\x98#{$-\xab\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '/dev/net/tun\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '@](\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x5}]}, 0x13c}}, 0x1) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000a40)={'wlan0\x00', 0x0}) syz_emit_ethernet(0x1d6, &(0x7f00000003c0)={@local, @local, @val={@val={0x88a8, 0x0, 0x1}, {0x8100, 0x6, 0x0, 0x2}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f81fcb", 0x198, 0x3a, 0x0, @private0, @mcast2, {[@routing={0x67, 0x2, 0x0, 0x4, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}]}, @hopopts={0x73, 0xf, '\x00', [@generic={0xfd, 0x26, "fa60deb822baaa25a5a72f3b7b791a6c6744c35dc80556bbc6491e9fca41b458a5f60da44336"}, @enc_lim={0x4, 0x1, 0x2}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @calipso={0x7, 0x20, {0x0, 0x6, 0x9d, 0x3, [0x3, 0xffff, 0x0]}}, @calipso={0x7, 0x18, {0x0, 0x4, 0x2, 0x4, [0x7fffffffffffffff, 0xfffffffffffffff9]}}]}, @hopopts={0x84, 0xa, '\x00', [@calipso={0x7, 0x30, {0x1, 0xa, 0x1, 0x73, [0x336675ab, 0xffff, 0x0, 0x0, 0x7ff]}}, @generic={0x46, 0xb, "9b68dfe0272a50c391102b"}, @hao={0xc9, 0x10, @mcast2}]}, @srh={0x8, 0x6, 0x4, 0x3, 0x1, 0x40, 0x2, [@dev={0xfe, 0x80, '\x00', 0xf}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local]}], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "4aa1d3", 0x0, 0x0, 0x0, @private1, @ipv4={'\x00', '\xff\xff', @loopback}, [@routing={0x3c}, @srh={0x0, 0x2, 0x4, 0x1, 0x0, 0x0, 0x0, [@ipv4={'\x00', '\xff\xff', @remote}]}, @srh={0x2f}, @dstopts]}}}}}}}, 0x0) (async) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r10) sendmsg$NL80211_CMD_SET_COALESCE(r10, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="018d4794c969c8abfa4c9200000008000300db8126770492a64d58231502b44a106fb2713dd124d64dbed0d57be551c0c8cfb0d89f5e18f8fe20bbbcf5212c3fd017a4b879f5237277d0dc706545e6a7aa8ebf1b17f3420164764967e359fb61d93282c595e99f751a2c0729e2801a05e6a85ae9c2abf22e4d5c04df654bf8c2e5e7def48e662f3258bc248f986ada223e8ed20d9a479a971f498a51eab591d5cdfc9baf9cdf6355d89094a41af95502d448f96df56d638f28c9ac55bef6d979213788", @ANYRES32=r12, @ANYRES8=r11], 0x28}}, 0x8044) 261.878489ms ago: executing program 4 (id=1275): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000600)=ANY=[@ANYBLOB="643400000002000000714ed773", @ANYRES16=r1, @ANYBLOB="01002abd7000fcdbdf25140000000800010000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x80) r2 = socket$unix(0x1, 0x5, 0x0) ppoll(&(0x7f0000000180)=[{r2, 0x3206}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r5) sendmsg$unix(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)='\"', 0x1}], 0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) recvmsg$unix(r4, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x1000000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x1e, 0x4, &(0x7f0000000580)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x2a}]}, &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0xa}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000005bdf00008af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001d0000009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r7, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="5a6e41dea43e63a3f70cff11c72b", 0x0, 0x2e00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001ac0)={r6, 0x58, &(0x7f0000001a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001b00)=0xffffffffffffffff, 0x4) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001bc0)={&(0x7f0000001c00)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000001c80)=ANY=[@ANYBLOB="0100000004000000080000000100000001000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00', @ANYRES32=0x0, @ANYRES32=r10, @ANYBLOB="010000000300"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001cc0)={0x2, 0x8, &(0x7f0000001d80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x37, 0x0, 0x0, 0x0, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r11}}]}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001ec0)={0x6, 0x10, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x26}, [@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6b5}}, @cb_func={0x18, 0x1, 0x4, 0x0, 0x1}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x1}, @jmp={0x5, 0x1, 0x1, 0x9, 0xc, 0x8, 0x4}]}, &(0x7f00000006c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000a40)=""/4096, 0x41100, 0x14, '\x00', r8, 0x25, r9, 0x8, &(0x7f0000001b40)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000001b80)={0x2, 0x3, 0x9, 0x8000}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000001e00)=[r11, 0x1, r6, r6, r6], &(0x7f0000001e40)=[{0x4, 0x3, 0xe, 0xb}, {0x5, 0x5, 0x6}, {0x1, 0x1, 0x0, 0xc}, {0x0, 0x4, 0xa}, {0x5, 0x2, 0xf, 0xb}], 0x10, 0x3}, 0x94) ioctl$NILFS_IOCTL_SYNC(r6, 0x80086e8a, &(0x7f0000000080)) 170.293708ms ago: executing program 2 (id=1276): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) shutdown(r0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40800) ioctl$BTRFS_IOC_BALANCE_CTL(r2, 0x40049421, 0x1) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x41, 0x0) sendto$inet(r1, 0x0, 0x0, 0x4011, 0x0, 0x0) 170.052874ms ago: executing program 0 (id=1277): socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x0, 0x34, 0x0, 0x2, 0x9b}, 0x28) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, &(0x7f0000000d80), &(0x7f0000000dc0)=0x4) connect$pppl2tp(r2, &(0x7f0000000c40)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) syz_genetlink_get_family_id$l2tp(&(0x7f0000000c80), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000c00)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200e3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000100"], &(0x7f00000001c0)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000200)={0x0, 0x1}, 0x8}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x7c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20000000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_ext={0x1a, 0x3, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc4f, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000380)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x17, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r5, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) 33.348802ms ago: executing program 4 (id=1278): openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)=@migrate={0xa0, 0x21, 0x1, 0x0, 0xfffffffe, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@rand_addr=0x64010100, 0xfffe, 0x0, 0x2, 0x0, 0xa, 0xe0, 0x80}, 0x2}, [@migrate={0x50, 0x11, [{@in6=@private2, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, @in=@loopback, 0x6c, 0x1, 0x0, 0x0, 0x0, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) 0s ago: executing program 1 (id=1279): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv4_deladdr={0x18, 0x15, 0x1}, 0x18}, 0x1, 0x0, 0xefffffff}, 0x0) kernel console output (not intermixed with test programs): 129.032784][ T6853] R13: 00007f837d226038 R14: 00007f837d225fa0 R15: 00007ffcf9b4f068 [ 129.032811][ T6853] [ 129.276286][ T6859] TC_ACT_REPEAT abuse ? [ 130.505273][ T6811] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 130.674597][ T6874] FAULT_INJECTION: forcing a failure. [ 130.674597][ T6874] name failslab, interval 1, probability 0, space 0, times 0 [ 130.674632][ T6874] CPU: 0 UID: 0 PID: 6874 Comm: syz.3.258 Not tainted syzkaller #0 PREEMPT(full) [ 130.674653][ T6874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 130.674663][ T6874] Call Trace: [ 130.674671][ T6874] [ 130.674681][ T6874] dump_stack_lvl+0xe8/0x150 [ 130.674712][ T6874] should_fail_ex+0x410/0x560 [ 130.674744][ T6874] should_failslab+0xa8/0x100 [ 130.674773][ T6874] __kmalloc_cache_noprof+0x9e/0x600 [ 130.674793][ T6874] ? __kmalloc_cache_noprof+0x148/0x600 [ 130.674812][ T6874] ? sctp_add_bind_addr+0x8c/0x370 [ 130.674841][ T6874] ? sctp_add_bind_addr+0x8c/0x370 [ 130.674865][ T6874] sctp_add_bind_addr+0x8c/0x370 [ 130.674887][ T6874] sctp_copy_local_addr_list+0x31a/0x4e0 [ 130.674908][ T6874] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 130.674927][ T6874] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 130.674948][ T6874] ? sctp_v6_is_any+0x64/0x80 [ 130.674970][ T6874] ? sctp_copy_one_addr+0x93/0x360 [ 130.674991][ T6874] sctp_bind_addr_copy+0x189/0x3c0 [ 130.675017][ T6874] sctp_connect_new_asoc+0x2ff/0x6b0 [ 130.675042][ T6874] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 130.675072][ T6874] ? __local_bh_enable_ip+0xd6/0x140 [ 130.675095][ T6874] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 130.675114][ T6874] ? security_sctp_bind_connect+0x7e/0x2c0 [ 130.675137][ T6874] sctp_sendmsg+0x159b/0x2d00 [ 130.675172][ T6874] ? __pfx_sctp_sendmsg+0x10/0x10 [ 130.675197][ T6874] ? __lock_acquire+0x747/0x2de0 [ 130.675226][ T6874] ? aa_sock_msg_perm+0xf5/0x210 [ 130.675246][ T6874] ? sock_rps_record_flow+0x19/0x350 [ 130.675272][ T6874] ? inet_sendmsg+0x298/0x320 [ 130.675297][ T6874] ? __pfx_inet_sendmsg+0x10/0x10 [ 130.675318][ T6874] sock_sendmsg_nosec+0x10f/0x190 [ 130.675341][ T6874] ____sys_sendmsg+0x54e/0x850 [ 130.675369][ T6874] ? __pfx_____sys_sendmsg+0x10/0x10 [ 130.675405][ T6874] ? import_iovec+0x73/0xa0 [ 130.675431][ T6874] ___sys_sendmsg+0x2a5/0x360 [ 130.675453][ T6874] ? __lock_acquire+0x747/0x2de0 [ 130.675478][ T6874] ? __pfx____sys_sendmsg+0x10/0x10 [ 130.675507][ T6874] ? kstrtouint+0x6e/0xe0 [ 130.675554][ T6874] ? __fget_files+0x3a2/0x420 [ 130.675573][ T6874] ? __fget_files+0x2a/0x420 [ 130.675602][ T6874] __sys_sendmmsg+0x273/0x4e0 [ 130.675624][ T6874] ? __pfx___sys_sendmmsg+0x10/0x10 [ 130.675650][ T6874] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 130.675684][ T6874] ? ksys_write+0x242/0x270 [ 130.675707][ T6874] ? __pfx_ksys_write+0x10/0x10 [ 130.675734][ T6874] __x64_sys_sendmmsg+0xa0/0xc0 [ 130.675769][ T6874] do_syscall_64+0x166/0x520 [ 130.675786][ T6874] ? trace_irq_disable+0x3b/0x140 [ 130.675807][ T6874] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.675825][ T6874] ? clear_bhb_loop+0x70/0xc0 [ 130.675856][ T6874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.675875][ T6874] RIP: 0033:0x7f933b19f559 [ 130.675893][ T6874] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 130.675907][ T6874] RSP: 002b:00007f933bf8c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 130.675927][ T6874] RAX: ffffffffffffffda RBX: 00007f933b425fa0 RCX: 00007f933b19f559 [ 130.675940][ T6874] RDX: 0000000000000002 RSI: 0000200000000040 RDI: 0000000000000003 [ 130.675951][ T6874] RBP: 00007f933bf8c090 R08: 0000000000000000 R09: 0000000000000000 [ 130.675962][ T6874] R10: 0000000004008040 R11: 0000000000000246 R12: 0000000000000002 [ 130.675973][ T6874] R13: 00007f933b426038 R14: 00007f933b425fa0 R15: 00007fff03724d68 [ 130.676003][ T6874] [ 130.711332][ T6868] bond2: entered allmulticast mode [ 130.711718][ T6868] 8021q: adding VLAN 0 to HW filter on device bond2 [ 130.737085][ T6877] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 130.740238][ T6877] macvlan2: entered allmulticast mode [ 130.740259][ T6877] bond0: entered allmulticast mode [ 130.740345][ T6877] bond_slave_0: entered allmulticast mode [ 130.740365][ T6877] bond_slave_1: entered allmulticast mode [ 130.741408][ T6877] bond2: (slave macvlan2): Enslaving as a backup interface with an up link [ 130.840899][ T1171] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 130.843965][ T990] bond2: (slave macvlan2): link status up again after 0 ms [ 130.860928][ T63] bond2: (slave macvlan2): link status up again after 0 ms [ 130.881711][ T1171] bond2: (slave macvlan2): link status up again after 0 ms [ 130.903536][ T1171] bond2: (slave macvlan2): link status up again after 0 ms [ 130.922960][ T63] bond2: (slave macvlan2): link status up again after 0 ms [ 130.942178][ T1171] bond2: (slave macvlan2): link status up again after 0 ms [ 130.990231][ T6868] ip6gretap1: entered allmulticast mode [ 130.991669][ T6868] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 131.415390][ T6901] __nla_validate_parse: 6 callbacks suppressed [ 131.415413][ T6901] netlink: 8 bytes leftover after parsing attributes in process `syz.2.270'. [ 131.415443][ T6901] netlink: 64 bytes leftover after parsing attributes in process `syz.2.270'. [ 131.513683][ T6912] FAULT_INJECTION: forcing a failure. [ 131.513683][ T6912] name failslab, interval 1, probability 0, space 0, times 0 [ 131.513718][ T6912] CPU: 0 UID: 0 PID: 6912 Comm: syz.2.273 Not tainted syzkaller #0 PREEMPT(full) [ 131.513735][ T6912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 131.513746][ T6912] Call Trace: [ 131.513754][ T6912] [ 131.513762][ T6912] dump_stack_lvl+0xe8/0x150 [ 131.513798][ T6912] should_fail_ex+0x410/0x560 [ 131.513830][ T6912] should_failslab+0xa8/0x100 [ 131.513857][ T6912] __kmalloc_cache_noprof+0x9e/0x600 [ 131.513879][ T6912] ? __kmalloc_cache_noprof+0x148/0x600 [ 131.513899][ T6912] ? sctp_add_bind_addr+0x8c/0x370 [ 131.513914][ T6912] ? sctp_add_bind_addr+0x8c/0x370 [ 131.513947][ T6912] sctp_add_bind_addr+0x8c/0x370 [ 131.513970][ T6912] sctp_copy_local_addr_list+0x31a/0x4e0 [ 131.513990][ T6912] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 131.514008][ T6912] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 131.514029][ T6912] ? sctp_v6_is_any+0x64/0x80 [ 131.514049][ T6912] ? sctp_copy_one_addr+0x93/0x360 [ 131.514070][ T6912] sctp_bind_addr_copy+0x189/0x3c0 [ 131.514102][ T6912] sctp_connect_new_asoc+0x2ff/0x6b0 [ 131.514125][ T6912] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 131.514154][ T6912] ? __local_bh_enable_ip+0xd6/0x140 [ 131.514175][ T6912] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 131.514195][ T6912] ? security_sctp_bind_connect+0x7e/0x2c0 [ 131.514217][ T6912] sctp_sendmsg+0x159b/0x2d00 [ 131.514253][ T6912] ? __pfx_sctp_sendmsg+0x10/0x10 [ 131.514289][ T6912] ? __lock_acquire+0x747/0x2de0 [ 131.514322][ T6912] ? aa_sock_msg_perm+0xf5/0x210 [ 131.514344][ T6912] ? sock_rps_record_flow+0x19/0x350 [ 131.514372][ T6912] ? inet_sendmsg+0x298/0x320 [ 131.514396][ T6912] ? __pfx_inet_sendmsg+0x10/0x10 [ 131.514418][ T6912] sock_sendmsg_nosec+0x10f/0x190 [ 131.514440][ T6912] ____sys_sendmsg+0x54e/0x850 [ 131.514461][ T6912] ? __pfx_____sys_sendmsg+0x10/0x10 [ 131.514481][ T6912] ? import_iovec+0x73/0xa0 [ 131.514500][ T6912] ___sys_sendmsg+0x2a5/0x360 [ 131.514513][ T6912] ? __lock_acquire+0x747/0x2de0 [ 131.514527][ T6912] ? __pfx____sys_sendmsg+0x10/0x10 [ 131.514545][ T6912] ? kstrtouint+0x6e/0xe0 [ 131.514572][ T6912] ? __fget_files+0x3a2/0x420 [ 131.514584][ T6912] ? __fget_files+0x2a/0x420 [ 131.514599][ T6912] __sys_sendmmsg+0x273/0x4e0 [ 131.514612][ T6912] ? __pfx___sys_sendmmsg+0x10/0x10 [ 131.514627][ T6912] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 131.514647][ T6912] ? ksys_write+0x242/0x270 [ 131.514661][ T6912] ? __pfx_ksys_write+0x10/0x10 [ 131.514676][ T6912] __x64_sys_sendmmsg+0xa0/0xc0 [ 131.514687][ T6912] do_syscall_64+0x166/0x520 [ 131.514697][ T6912] ? trace_irq_disable+0x3b/0x140 [ 131.514709][ T6912] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.514719][ T6912] ? clear_bhb_loop+0x70/0xc0 [ 131.514732][ T6912] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.514742][ T6912] RIP: 0033:0x7f1f1859f559 [ 131.514754][ T6912] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 131.514763][ T6912] RSP: 002b:00007f1f193be028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 131.514777][ T6912] RAX: ffffffffffffffda RBX: 00007f1f18825fa0 RCX: 00007f1f1859f559 [ 131.514785][ T6912] RDX: 0000000000000002 RSI: 0000200000000040 RDI: 0000000000000003 [ 131.514791][ T6912] RBP: 00007f1f193be090 R08: 0000000000000000 R09: 0000000000000000 [ 131.514797][ T6912] R10: 0000000004008040 R11: 0000000000000246 R12: 0000000000000002 [ 131.514810][ T6912] R13: 00007f1f18826038 R14: 00007f1f18825fa0 R15: 00007ffc52e532b8 [ 131.514835][ T6912] [ 131.515069][ T6905] netlink: 'syz.4.271': attribute type 1 has an invalid length. [ 131.908974][ T6920] block nbd2: not configured, cannot reconfigure [ 132.130992][ T39] net_ratelimit: 15 callbacks suppressed [ 132.131044][ T39] bond2: (slave macvlan2): failed to get link speed/duplex [ 132.242287][ T39] bond2: (slave macvlan2): failed to get link speed/duplex [ 132.337216][ T6940] netlink: 8 bytes leftover after parsing attributes in process `syz.1.283'. [ 132.337271][ T6940] netlink: 64 bytes leftover after parsing attributes in process `syz.1.283'. [ 132.481080][ T6935] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.481773][ T6935] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.899748][ T6935] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 132.939697][ T6935] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 133.182028][ T6969] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 133.325229][ T6972] netlink: 4588 bytes leftover after parsing attributes in process `syz.0.290'. [ 133.432728][ T6935] bond0: left allmulticast mode [ 133.432756][ T6935] bond_slave_0: left allmulticast mode [ 133.432772][ T6935] bond_slave_1: left allmulticast mode [ 133.450700][ T13] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.450765][ T13] bond2: (slave macvlan2): failed to get link speed/duplex [ 133.450854][ T13] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.450920][ T13] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.450952][ T13] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.563138][ T51] bond2: (slave macvlan2): failed to get link speed/duplex [ 133.671285][ T51] bond2: (slave macvlan2): failed to get link speed/duplex [ 133.737190][ T6970] syzkaller0: entered promiscuous mode [ 133.737220][ T6970] syzkaller0: entered allmulticast mode [ 133.822357][ T3287] IPVS: starting estimator thread 0... [ 133.912203][ T6996] IPVS: using max 32 ests per chain, 76800 per kthread [ 133.955328][ T7000] Bluetooth: MGMT ver 1.23 [ 133.985175][ T7000] netlink: 4 bytes leftover after parsing attributes in process `syz.0.296'. [ 135.680791][ T990] bond2: (slave macvlan2): failed to get link speed/duplex [ 135.846126][ T7027] netlink: 12 bytes leftover after parsing attributes in process `syz.1.305'. [ 135.859428][ T990] bond2: (slave macvlan2): failed to get link speed/duplex [ 135.871055][ T7022] netlink: 'syz.3.301': attribute type 1 has an invalid length. [ 135.990568][ T7035] netlink: 'syz.0.306': attribute type 2 has an invalid length. [ 136.009147][ T7035] netlink: 80 bytes leftover after parsing attributes in process `syz.0.306'. [ 136.027143][ T7022] bond1: option mode: invalid value (7) [ 136.055227][ T7022] bond1 (unregistering): Released all slaves [ 136.191120][ T51] bond2: (slave macvlan2): failed to get link speed/duplex [ 136.302219][ T990] bond2: (slave macvlan2): failed to get link speed/duplex [ 136.429539][ T7065] syzkaller0: entered promiscuous mode [ 136.429564][ T7065] syzkaller0: entered allmulticast mode [ 136.528627][ T7067] syzkaller0: entered promiscuous mode [ 136.528655][ T7067] syzkaller0: entered allmulticast mode [ 136.545124][ T7071] FAULT_INJECTION: forcing a failure. [ 136.545124][ T7071] name failslab, interval 1, probability 0, space 0, times 0 [ 136.545176][ T7071] CPU: 0 UID: 0 PID: 7071 Comm: syz.3.315 Not tainted syzkaller #0 PREEMPT(full) [ 136.545197][ T7071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 136.545209][ T7071] Call Trace: [ 136.545217][ T7071] [ 136.545226][ T7071] dump_stack_lvl+0xe8/0x150 [ 136.545261][ T7071] should_fail_ex+0x410/0x560 [ 136.545295][ T7071] should_failslab+0xa8/0x100 [ 136.545324][ T7071] __kmalloc_cache_noprof+0x9e/0x600 [ 136.545347][ T7071] ? __kmalloc_cache_noprof+0x148/0x600 [ 136.545369][ T7071] ? sctp_add_bind_addr+0x8c/0x370 [ 136.545386][ T7071] ? sctp_add_bind_addr+0x8c/0x370 [ 136.545410][ T7071] sctp_add_bind_addr+0x8c/0x370 [ 136.545434][ T7071] sctp_copy_local_addr_list+0x31a/0x4e0 [ 136.545454][ T7071] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 136.545474][ T7071] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 136.545495][ T7071] ? sctp_v6_is_any+0x64/0x80 [ 136.545515][ T7071] ? sctp_copy_one_addr+0x93/0x360 [ 136.545533][ T7071] sctp_bind_addr_copy+0x189/0x3c0 [ 136.545558][ T7071] sctp_connect_new_asoc+0x2ff/0x6b0 [ 136.545580][ T7071] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 136.545604][ T7071] ? __local_bh_enable_ip+0xd6/0x140 [ 136.545624][ T7071] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 136.545642][ T7071] ? security_sctp_bind_connect+0x7e/0x2c0 [ 136.545678][ T7071] sctp_sendmsg+0x159b/0x2d00 [ 136.545717][ T7071] ? __pfx_sctp_sendmsg+0x10/0x10 [ 136.545743][ T7071] ? __lock_acquire+0x747/0x2de0 [ 136.545776][ T7071] ? aa_sock_msg_perm+0xf5/0x210 [ 136.545796][ T7071] ? sock_rps_record_flow+0x19/0x350 [ 136.545827][ T7071] ? inet_sendmsg+0x298/0x320 [ 136.545855][ T7071] ? __pfx_inet_sendmsg+0x10/0x10 [ 136.545879][ T7071] sock_sendmsg_nosec+0x10f/0x190 [ 136.545902][ T7071] ____sys_sendmsg+0x54e/0x850 [ 136.545933][ T7071] ? __pfx_____sys_sendmsg+0x10/0x10 [ 136.545979][ T7071] ? import_iovec+0x73/0xa0 [ 136.546006][ T7071] ___sys_sendmsg+0x2a5/0x360 [ 136.546029][ T7071] ? __lock_acquire+0x747/0x2de0 [ 136.546052][ T7071] ? __pfx____sys_sendmsg+0x10/0x10 [ 136.546085][ T7071] ? kstrtouint+0x6e/0xe0 [ 136.546137][ T7071] ? __fget_files+0x3a2/0x420 [ 136.546156][ T7071] ? __fget_files+0x2a/0x420 [ 136.546186][ T7071] __sys_sendmmsg+0x273/0x4e0 [ 136.546211][ T7071] ? __pfx___sys_sendmmsg+0x10/0x10 [ 136.546239][ T7071] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 136.546276][ T7071] ? ksys_write+0x242/0x270 [ 136.546300][ T7071] ? __pfx_ksys_write+0x10/0x10 [ 136.546330][ T7071] __x64_sys_sendmmsg+0xa0/0xc0 [ 136.546351][ T7071] do_syscall_64+0x166/0x520 [ 136.546375][ T7071] ? trace_irq_disable+0x3b/0x140 [ 136.546397][ T7071] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.546416][ T7071] ? clear_bhb_loop+0x70/0xc0 [ 136.546440][ T7071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.546458][ T7071] RIP: 0033:0x7f933b19f559 [ 136.546477][ T7071] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 136.546492][ T7071] RSP: 002b:00007f933bf8c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 136.546513][ T7071] RAX: ffffffffffffffda RBX: 00007f933b425fa0 RCX: 00007f933b19f559 [ 136.546526][ T7071] RDX: 0000000000000002 RSI: 0000200000000040 RDI: 0000000000000003 [ 136.546538][ T7071] RBP: 00007f933bf8c090 R08: 0000000000000000 R09: 0000000000000000 [ 136.546549][ T7071] R10: 0000000004008040 R11: 0000000000000246 R12: 0000000000000002 [ 136.546560][ T7071] R13: 00007f933b426038 R14: 00007f933b425fa0 R15: 00007fff03724d68 [ 136.546593][ T7071] [ 136.919654][ T7069] syzkaller0: entered promiscuous mode [ 136.919681][ T7069] syzkaller0: entered allmulticast mode [ 137.047106][ T7088] netlink: 56 bytes leftover after parsing attributes in process `syz.2.321'. [ 137.311245][ T7099] netlink: 'syz.0.322': attribute type 1 has an invalid length. [ 137.436355][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.506795][ T7105] netlink: 'syz.0.322': attribute type 10 has an invalid length. [ 137.506821][ T7105] netlink: 40 bytes leftover after parsing attributes in process `syz.0.322'. [ 138.689389][ T7099] 8021q: adding VLAN 0 to HW filter on device bond3 [ 138.702920][ T63] net_ratelimit: 3 callbacks suppressed [ 138.702943][ T63] bond2: (slave macvlan2): failed to get link speed/duplex [ 138.737834][ T7101] bond3: (slave dummy0): making interface the new active one [ 138.740615][ T7101] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 138.741179][ T7105] dummy0: entered promiscuous mode [ 138.767841][ T7105] bond3: (slave dummy0): Releasing active interface [ 138.811271][ T990] bond2: (slave macvlan2): failed to get link speed/duplex [ 138.890148][ T7114] netlink: 4 bytes leftover after parsing attributes in process `syz.2.323'. [ 138.890532][ T7114] netlink: 4 bytes leftover after parsing attributes in process `syz.2.323'. [ 138.890639][ T7114] netlink: 4 bytes leftover after parsing attributes in process `syz.2.323'. [ 138.890751][ T7114] netlink: 4 bytes leftover after parsing attributes in process `syz.2.323'. [ 138.890845][ T7114] netlink: 4 bytes leftover after parsing attributes in process `syz.2.323'. [ 138.890948][ T7114] netlink: 4 bytes leftover after parsing attributes in process `syz.2.323'. [ 138.891049][ T7114] netlink: 4 bytes leftover after parsing attributes in process `syz.2.323'. [ 138.891149][ T7114] netlink: 4 bytes leftover after parsing attributes in process `syz.2.323'. [ 138.920583][ T3287] bond2: (slave macvlan2): failed to get link speed/duplex [ 139.042051][ T7123] FAULT_INJECTION: forcing a failure. [ 139.042051][ T7123] name failslab, interval 1, probability 0, space 0, times 0 [ 139.042110][ T7123] CPU: 1 UID: 0 PID: 7123 Comm: syz.1.329 Not tainted syzkaller #0 PREEMPT(full) [ 139.042131][ T7123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 139.042147][ T7123] Call Trace: [ 139.042156][ T7123] [ 139.042164][ T7123] dump_stack_lvl+0xe8/0x150 [ 139.042200][ T7123] should_fail_ex+0x410/0x560 [ 139.042235][ T7123] should_failslab+0xa8/0x100 [ 139.042265][ T7123] __kmalloc_cache_noprof+0x9e/0x600 [ 139.042293][ T7123] ? __kmalloc_cache_noprof+0x148/0x600 [ 139.042312][ T7123] ? sctp_add_bind_addr+0x8c/0x370 [ 139.042328][ T7123] ? sctp_add_bind_addr+0x8c/0x370 [ 139.042356][ T7123] sctp_add_bind_addr+0x8c/0x370 [ 139.042380][ T7123] sctp_copy_local_addr_list+0x31a/0x4e0 [ 139.042402][ T7123] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 139.042426][ T7123] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 139.042451][ T7123] ? sctp_v6_is_any+0x64/0x80 [ 139.042472][ T7123] ? sctp_copy_one_addr+0x93/0x360 [ 139.042499][ T7123] sctp_bind_addr_copy+0x189/0x3c0 [ 139.042526][ T7123] sctp_connect_new_asoc+0x2ff/0x6b0 [ 139.042553][ T7123] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 139.042583][ T7123] ? __local_bh_enable_ip+0xd6/0x140 [ 139.042605][ T7123] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 139.042625][ T7123] ? security_sctp_bind_connect+0x7e/0x2c0 [ 139.042656][ T7123] sctp_sendmsg+0x159b/0x2d00 [ 139.042695][ T7123] ? __pfx_sctp_sendmsg+0x10/0x10 [ 139.042724][ T7123] ? __lock_acquire+0x747/0x2de0 [ 139.042760][ T7123] ? aa_sock_msg_perm+0xf5/0x210 [ 139.042783][ T7123] ? sock_rps_record_flow+0x19/0x350 [ 139.042815][ T7123] ? inet_sendmsg+0x298/0x320 [ 139.042844][ T7123] ? __pfx_inet_sendmsg+0x10/0x10 [ 139.042869][ T7123] sock_sendmsg_nosec+0x10f/0x190 [ 139.042898][ T7123] ____sys_sendmsg+0x54e/0x850 [ 139.042932][ T7123] ? __pfx_____sys_sendmsg+0x10/0x10 [ 139.042970][ T7123] ? import_iovec+0x73/0xa0 [ 139.043001][ T7123] ___sys_sendmsg+0x2a5/0x360 [ 139.043025][ T7123] ? __lock_acquire+0x747/0x2de0 [ 139.043050][ T7123] ? __pfx____sys_sendmsg+0x10/0x10 [ 139.043084][ T7123] ? kstrtouint+0x6e/0xe0 [ 139.043136][ T7123] ? __fget_files+0x3a2/0x420 [ 139.043154][ T7123] ? __fget_files+0x2a/0x420 [ 139.043184][ T7123] __sys_sendmmsg+0x273/0x4e0 [ 139.043209][ T7123] ? __pfx___sys_sendmmsg+0x10/0x10 [ 139.043238][ T7123] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 139.043273][ T7123] ? ksys_write+0x242/0x270 [ 139.043297][ T7123] ? __pfx_ksys_write+0x10/0x10 [ 139.043326][ T7123] __x64_sys_sendmmsg+0xa0/0xc0 [ 139.043347][ T7123] do_syscall_64+0x166/0x520 [ 139.043364][ T7123] ? trace_irq_disable+0x3b/0x140 [ 139.043385][ T7123] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.043403][ T7123] ? clear_bhb_loop+0x70/0xc0 [ 139.043426][ T7123] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.043445][ T7123] RIP: 0033:0x7f837cf9f559 [ 139.043463][ T7123] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 139.043477][ T7123] RSP: 002b:00007f837de07028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 139.043498][ T7123] RAX: ffffffffffffffda RBX: 00007f837d225fa0 RCX: 00007f837cf9f559 [ 139.043518][ T7123] RDX: 0000000000000002 RSI: 0000200000000040 RDI: 0000000000000003 [ 139.043529][ T7123] RBP: 00007f837de07090 R08: 0000000000000000 R09: 0000000000000000 [ 139.043541][ T7123] R10: 0000000004008040 R11: 0000000000000246 R12: 0000000000000002 [ 139.043552][ T7123] R13: 00007f837d226038 R14: 00007f837d225fa0 R15: 00007ffcf9b4f068 [ 139.043584][ T7123] [ 139.114805][ T990] bond2: (slave macvlan2): failed to get link speed/duplex [ 139.222779][ T51] bond2: (slave macvlan2): failed to get link speed/duplex [ 139.333828][ T51] bond2: (slave macvlan2): failed to get link speed/duplex [ 139.440540][ T51] bond2: (slave macvlan2): failed to get link speed/duplex [ 139.550620][ T990] bond2: (slave macvlan2): failed to get link speed/duplex [ 139.660709][ T3287] bond2: (slave macvlan2): failed to get link speed/duplex [ 139.770524][ T3287] bond2: (slave macvlan2): failed to get link speed/duplex [ 139.788841][ T7143] syzkaller0: entered promiscuous mode [ 139.788857][ T7143] syzkaller0: entered allmulticast mode [ 140.756619][ T7172] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 140.969508][ T7183] syzkaller0: entered promiscuous mode [ 140.969533][ T7183] syzkaller0: entered allmulticast mode [ 141.392595][ T7215] netlink: 'syz.0.355': attribute type 1 has an invalid length. [ 141.447872][ T31] audit: type=1804 audit(1793168228.236:2): pid=7218 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.356" name="/newroot/77/cgroup.controllers" dev="tmpfs" ino=409 res=1 errno=0 [ 141.473598][ T31] audit: type=1800 audit(1793168228.236:3): pid=7218 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.356" name="cgroup.controllers" dev="tmpfs" ino=409 res=0 errno=-22 [ 141.520527][ T7215] 8021q: adding VLAN 0 to HW filter on device bond4 [ 141.528502][ T7222] netlink: 'syz.0.355': attribute type 1 has an invalid length. [ 141.684310][ T7236] bond1: option mode: unable to set because the bond device has slaves [ 141.697528][ T7236] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 141.705412][ T7236] macvlan3: entered allmulticast mode [ 141.705435][ T7236] bond0: entered allmulticast mode [ 141.705450][ T7236] bond_slave_0: entered allmulticast mode [ 141.705469][ T7236] bond_slave_1: entered allmulticast mode [ 141.706010][ T7236] bond1: (slave macvlan3): Enslaving as a backup interface with an up link [ 142.158437][ T7260] syzkaller1: entered promiscuous mode [ 142.158462][ T7260] syzkaller1: entered allmulticast mode [ 142.347354][ T7275] bond2: option mode: unable to set because the bond device has slaves [ 142.359573][ T7273] __nla_validate_parse: 30 callbacks suppressed [ 142.359593][ T7273] netlink: 12 bytes leftover after parsing attributes in process `syz.3.372'. [ 142.432858][ T7275] bond2: (slave macvlan3): Error -98 calling set_mac_address [ 142.533219][ T7280] ip6gretap1: entered allmulticast mode [ 142.534535][ T7280] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 142.538193][ T7278] syzkaller0: entered promiscuous mode [ 142.538216][ T7278] syzkaller0: entered allmulticast mode [ 142.898309][ T7310] netlink: 'syz.3.386': attribute type 19 has an invalid length. [ 143.044912][ T7318] tipc: Started in network mode [ 143.044945][ T7318] tipc: Node identity 062951d92ca7, cluster identity 4711 [ 143.046692][ T7318] tipc: Enabled bearer , priority 0 [ 143.162159][ T7318] syzkaller0: entered promiscuous mode [ 143.162192][ T7318] syzkaller0: entered allmulticast mode [ 143.162723][ T7318] tipc: Resetting bearer [ 143.205232][ T7324] netlink: 20 bytes leftover after parsing attributes in process `syz.3.389'. [ 143.361458][ T13] tipc: Resetting bearer [ 143.363330][ T7317] tipc: Resetting bearer [ 144.996651][ T7317] tipc: Disabling bearer [ 145.009556][ T7324] veth2: entered promiscuous mode [ 145.009581][ T7324] veth2: entered allmulticast mode [ 145.125870][ T9] tipc: Node number set to 713970137 [ 145.141560][ T3287] net_ratelimit: 23 callbacks suppressed [ 145.141584][ T3287] bond2: (slave macvlan2): failed to get link speed/duplex [ 145.268158][ T7358] syzkaller0: entered promiscuous mode [ 145.268185][ T7358] syzkaller0: entered allmulticast mode [ 145.290236][ T7359] netlink: 4 bytes leftover after parsing attributes in process `syz.3.395'. [ 145.292598][ T3287] bond2: (slave macvlan2): failed to get link speed/duplex [ 145.408812][ T63] bond2: (slave macvlan2): failed to get link speed/duplex [ 145.510516][ T990] bond2: (slave macvlan2): failed to get link speed/duplex [ 145.552512][ T7383] netlink: 8 bytes leftover after parsing attributes in process `syz.3.401'. [ 145.615033][ T7386] syzkaller0: entered promiscuous mode [ 145.615060][ T7386] syzkaller0: entered allmulticast mode [ 145.621080][ T63] bond2: (slave macvlan2): failed to get link speed/duplex [ 145.801756][ T63] bond2: (slave macvlan2): failed to get link speed/duplex [ 145.855984][ T7398] TC_ACT_REPEAT abuse ? [ 145.960490][ T63] bond2: (slave macvlan2): failed to get link speed/duplex [ 146.035215][ T7406] netlink: 12 bytes leftover after parsing attributes in process `syz.3.408'. [ 146.090902][ T51] bond2: (slave macvlan2): failed to get link speed/duplex [ 146.091028][ T63] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.091067][ T63] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.091099][ T63] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.091129][ T63] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.178694][ T7408] netlink: 4 bytes leftover after parsing attributes in process `syz.4.410'. [ 146.178926][ T7408] netlink: 4 bytes leftover after parsing attributes in process `syz.4.410'. [ 146.179110][ T7408] netlink: 4 bytes leftover after parsing attributes in process `syz.4.410'. [ 146.179333][ T7408] netlink: 4 bytes leftover after parsing attributes in process `syz.4.410'. [ 146.179531][ T7408] netlink: 4 bytes leftover after parsing attributes in process `syz.4.410'. [ 146.210439][ T63] bond2: (slave macvlan2): failed to get link speed/duplex [ 146.609906][ T7414] veth3: entered allmulticast mode [ 146.845754][ T7425] syzkaller0: entered promiscuous mode [ 146.845784][ T7425] syzkaller0: entered allmulticast mode [ 148.740526][ T7447] syzkaller0: entered promiscuous mode [ 148.740554][ T7447] syzkaller0: entered allmulticast mode [ 148.986071][ T7469] __nla_validate_parse: 45 callbacks suppressed [ 148.986097][ T7469] netlink: 52 bytes leftover after parsing attributes in process `syz.0.425'. [ 149.101974][ T7491] netlink: 'syz.1.432': attribute type 1 has an invalid length. [ 149.135816][ T4951] Bluetooth: hci1: Malformed HCI Event [ 149.138156][ T7491] 8021q: adding VLAN 0 to HW filter on device bond2 [ 149.152770][ T7491] bond2: (slave dummy0): making interface the new active one [ 149.160724][ T7491] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 149.168393][ T7491] netlink: 'syz.1.432': attribute type 10 has an invalid length. [ 149.168439][ T7491] netlink: 40 bytes leftover after parsing attributes in process `syz.1.432'. [ 149.168605][ T7491] dummy0: entered promiscuous mode [ 149.189557][ T7491] bond2: (slave dummy0): Releasing active interface [ 149.364062][ T7509] FAULT_INJECTION: forcing a failure. [ 149.364062][ T7509] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 149.364095][ T7509] CPU: 1 UID: 0 PID: 7509 Comm: syz.1.437 Not tainted syzkaller #0 PREEMPT(full) [ 149.364112][ T7509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 149.364120][ T7509] Call Trace: [ 149.364127][ T7509] [ 149.364134][ T7509] dump_stack_lvl+0xe8/0x150 [ 149.364162][ T7509] should_fail_ex+0x410/0x560 [ 149.364188][ T7509] _copy_from_user+0x2d/0xb0 [ 149.364211][ T7509] __copy_msghdr+0x390/0x590 [ 149.364240][ T7509] ___sys_sendmsg+0x213/0x360 [ 149.364260][ T7509] ? __lock_acquire+0x747/0x2de0 [ 149.364284][ T7509] ? __pfx____sys_sendmsg+0x10/0x10 [ 149.364336][ T7509] ? __fget_files+0x3a2/0x420 [ 149.364353][ T7509] ? __fget_files+0x2a/0x420 [ 149.364377][ T7509] __x64_sys_sendmsg+0x1b1/0x290 [ 149.364393][ T7509] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 149.364435][ T7509] do_syscall_64+0x166/0x520 [ 149.364450][ T7509] ? trace_irq_disable+0x3b/0x140 [ 149.364482][ T7509] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.364500][ T7509] ? clear_bhb_loop+0x70/0xc0 [ 149.364543][ T7509] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.364559][ T7509] RIP: 0033:0x7f837cf9f559 [ 149.364575][ T7509] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 149.364587][ T7509] RSP: 002b:00007f837de07028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 149.364602][ T7509] RAX: ffffffffffffffda RBX: 00007f837d225fa0 RCX: 00007f837cf9f559 [ 149.364613][ T7509] RDX: 0000000020000000 RSI: 0000200000001b80 RDI: 0000000000000003 [ 149.364623][ T7509] RBP: 00007f837de07090 R08: 0000000000000000 R09: 0000000000000000 [ 149.364633][ T7509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 149.364642][ T7509] R13: 00007f837d226038 R14: 00007f837d225fa0 R15: 00007ffcf9b4f068 [ 149.364669][ T7509] [ 149.596351][ T7512] netlink: 108 bytes leftover after parsing attributes in process `syz.1.438'. [ 149.605200][ T7512] netlink: 108 bytes leftover after parsing attributes in process `syz.1.438'. [ 149.605234][ T7512] netlink: 84 bytes leftover after parsing attributes in process `syz.1.438'. [ 149.748020][ T7516] netlink: 'syz.1.440': attribute type 1 has an invalid length. [ 149.820760][ T7516] netlink: 4 bytes leftover after parsing attributes in process `syz.1.440'. [ 149.823840][ T7521] netlink: 4 bytes leftover after parsing attributes in process `syz.1.440'. [ 150.074070][ T7529] lo: entered allmulticast mode [ 150.102682][ T7528] lo: left allmulticast mode [ 150.200541][ T990] net_ratelimit: 14 callbacks suppressed [ 150.200568][ T990] bond2: (slave macvlan2): failed to get link speed/duplex [ 150.220103][ T7534] IPVS: set_ctl: invalid protocol: 44 127.0.0.1:20003 [ 150.300568][ T7541] tipc: Started in network mode [ 150.300605][ T7541] tipc: Node identity 6a2940c40031, cluster identity 4711 [ 150.300793][ T7541] tipc: Enabled bearer , priority 11 [ 150.312359][ T63] bond2: (slave macvlan2): failed to get link speed/duplex [ 150.382559][ T7545] netlink: 28 bytes leftover after parsing attributes in process `syz.4.450'. [ 150.382605][ T7545] netlink: 28 bytes leftover after parsing attributes in process `syz.4.450'. [ 151.407750][ T7577] TCP: TCP_TX_DELAY enabled [ 152.335890][ T7558] kthread_run failed with err -4 [ 152.342938][ T39] bond2: (slave macvlan2): failed to get link speed/duplex [ 152.358049][ T5839] tipc: Node number set to 1779974340 [ 152.450844][ T990] bond2: (slave macvlan2): failed to get link speed/duplex [ 152.508751][ T7593] netlink: 24 bytes leftover after parsing attributes in process `syz.0.467'. [ 152.578709][ T7593] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 152.601916][ T7595] batman_adv: batadv0: Adding interface: syz_tun [ 152.601939][ T7595] batman_adv: batadv0: The MTU of interface syz_tun is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 152.601970][ T7595] batman_adv: batadv0: Interface activated: syz_tun [ 152.700437][ T1171] bond2: (slave macvlan2): failed to get link speed/duplex [ 152.810736][ T39] bond2: (slave macvlan2): failed to get link speed/duplex [ 152.940626][ T7620] bond1: option mode: unable to set because the bond device has slaves [ 152.941145][ T1171] bond2: (slave macvlan2): failed to get link speed/duplex [ 152.978800][ T7620] bond1 (unregistering): (slave macvlan2): Removing an active aggregator [ 152.984563][ T7620] bond1 (unregistering): (slave macvlan2): Releasing backup interface [ 153.001818][ T7620] macvlan2: left allmulticast mode [ 153.006795][ T7620] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 153.008157][ T7620] ip6gretap1: left allmulticast mode [ 153.014169][ T7620] bond1 (unregistering): (slave macvlan3): Releasing backup interface [ 153.041479][ T7620] macvlan3: left allmulticast mode [ 153.041505][ T7620] bond0: left allmulticast mode [ 153.041520][ T7620] bond_slave_0: left allmulticast mode [ 153.041538][ T7620] bond_slave_1: left allmulticast mode [ 153.077122][ T7620] bond1 (unregistering): Released all slaves [ 155.057608][ T7624] bond2: option mode: unable to set because the bond device has slaves [ 155.114937][ T7648] tipc: Enabled bearer , priority 10 [ 155.206399][ T7647] tipc: Resetting bearer [ 155.263589][ T7647] tipc: Disabling bearer [ 155.309552][ T7676] syzkaller1: entered promiscuous mode [ 155.309578][ T7676] syzkaller1: entered allmulticast mode [ 155.311394][ T39] bond2: (slave macvlan2): failed to get link speed/duplex [ 155.321832][ T7676] __nla_validate_parse: 3 callbacks suppressed [ 155.321854][ T7676] netlink: 28 bytes leftover after parsing attributes in process `syz.3.485'. [ 155.426363][ T7684] netlink: 12 bytes leftover after parsing attributes in process `syz.2.487'. [ 155.470524][ T39] bond2: (slave macvlan2): failed to get link speed/duplex [ 155.580487][ T63] bond2: (slave macvlan2): failed to get link speed/duplex [ 155.584132][ T7692] netlink: 12 bytes leftover after parsing attributes in process `syz.2.489'. [ 155.690468][ T990] bond2: (slave macvlan2): failed to get link speed/duplex [ 155.801877][ T39] bond2: (slave macvlan2): failed to get link speed/duplex [ 155.920589][ T39] bond2: (slave macvlan2): failed to get link speed/duplex [ 155.974761][ T7696] TC_ACT_REPEAT abuse ? [ 156.031395][ T39] bond2: (slave macvlan2): failed to get link speed/duplex [ 156.140622][ T39] bond2: (slave macvlan2): failed to get link speed/duplex [ 157.610884][ T63] bond2: (slave macvlan2): failed to get link speed/duplex [ 157.641169][ T7703] bond2: option mode: unable to set because the bond device has slaves [ 158.180219][ T7668] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 158.467797][ T7722] netlink: 8 bytes leftover after parsing attributes in process `syz.2.496'. [ 158.494134][ T7726] netlink: 12 bytes leftover after parsing attributes in process `syz.0.499'. [ 158.671760][ T7741] bond2: option mode: unable to set because the bond device has slaves [ 158.753043][ T7747] FAULT_INJECTION: forcing a failure. [ 158.753043][ T7747] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 158.753080][ T7747] CPU: 1 UID: 0 PID: 7747 Comm: syz.1.506 Not tainted syzkaller #0 PREEMPT(full) [ 158.753119][ T7747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 158.753131][ T7747] Call Trace: [ 158.753138][ T7747] [ 158.753148][ T7747] dump_stack_lvl+0xe8/0x150 [ 158.753183][ T7747] should_fail_ex+0x410/0x560 [ 158.753216][ T7747] _copy_from_user+0x2d/0xb0 [ 158.753245][ T7747] generic_map_update_batch+0x6b1/0xad0 [ 158.753276][ T7747] ? __pfx_generic_map_update_batch+0x10/0x10 [ 158.753295][ T7747] ? __fget_files+0x3a2/0x420 [ 158.753315][ T7747] ? __fget_files+0x2a/0x420 [ 158.753339][ T7747] ? fdget+0x1ac/0x250 [ 158.753358][ T7747] ? __pfx_generic_map_update_batch+0x10/0x10 [ 158.753377][ T7747] bpf_map_do_batch+0x391/0x630 [ 158.753409][ T7747] __sys_bpf+0xbe5/0xd90 [ 158.753437][ T7747] ? __pfx___sys_bpf+0x10/0x10 [ 158.753473][ T7747] ? __fget_files+0x2a/0x420 [ 158.753509][ T7747] ? ksys_write+0x242/0x270 [ 158.753533][ T7747] ? __pfx_ksys_write+0x10/0x10 [ 158.753560][ T7747] __x64_sys_bpf+0xba/0xd0 [ 158.753585][ T7747] do_syscall_64+0x166/0x520 [ 158.753605][ T7747] ? trace_irq_disable+0x3b/0x140 [ 158.753624][ T7747] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.753650][ T7747] ? clear_bhb_loop+0x70/0xc0 [ 158.753670][ T7747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.753687][ T7747] RIP: 0033:0x7f837cf9f559 [ 158.753704][ T7747] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 158.753718][ T7747] RSP: 002b:00007f837de07028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 158.753737][ T7747] RAX: ffffffffffffffda RBX: 00007f837d225fa0 RCX: 00007f837cf9f559 [ 158.753751][ T7747] RDX: 0000000000000038 RSI: 00002000000000c0 RDI: 000000000000001a [ 158.753763][ T7747] RBP: 00007f837de07090 R08: 0000000000000000 R09: 0000000000000000 [ 158.753773][ T7747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 158.753784][ T7747] R13: 00007f837d226038 R14: 00007f837d225fa0 R15: 00007ffcf9b4f068 [ 158.753815][ T7747] [ 159.939917][ T7785] netlink: 20 bytes leftover after parsing attributes in process `syz.3.513'. [ 159.945915][ T7785] netlink: 8 bytes leftover after parsing attributes in process `syz.3.513'. [ 160.972418][ T7795] netlink: 'syz.1.515': attribute type 1 has an invalid length. [ 161.016299][ T7795] 8021q: adding VLAN 0 to HW filter on device bond1 [ 161.021162][ T39] net_ratelimit: 10 callbacks suppressed [ 161.021205][ T39] bond2: (slave macvlan2): failed to get link speed/duplex [ 161.062309][ T7795] dummy0: left promiscuous mode [ 161.067541][ T7795] bond1: (slave dummy0): making interface the new active one [ 161.068957][ T7795] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 161.130487][ T990] bond2: (slave macvlan2): failed to get link speed/duplex [ 161.182058][ T7800] netlink: 24 bytes leftover after parsing attributes in process `syz.1.521'. [ 161.214519][ T7804] FAULT_INJECTION: forcing a failure. [ 161.214519][ T7804] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 161.214554][ T7804] CPU: 0 UID: 0 PID: 7804 Comm: syz.2.520 Not tainted syzkaller #0 PREEMPT(full) [ 161.214574][ T7804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 161.214585][ T7804] Call Trace: [ 161.214593][ T7804] [ 161.214602][ T7804] dump_stack_lvl+0xe8/0x150 [ 161.214652][ T7804] should_fail_ex+0x410/0x560 [ 161.214684][ T7804] _copy_from_user+0x2d/0xb0 [ 161.214710][ T7804] generic_map_update_batch+0x662/0xad0 [ 161.214739][ T7804] ? __pfx_generic_map_update_batch+0x10/0x10 [ 161.214755][ T7804] ? __fget_files+0x3a2/0x420 [ 161.214773][ T7804] ? __fget_files+0x2a/0x420 [ 161.214795][ T7804] ? fdget+0x1ac/0x250 [ 161.214813][ T7804] ? __pfx_generic_map_update_batch+0x10/0x10 [ 161.214830][ T7804] bpf_map_do_batch+0x391/0x630 [ 161.214854][ T7804] __sys_bpf+0xbe5/0xd90 [ 161.214876][ T7804] ? __pfx___sys_bpf+0x10/0x10 [ 161.214900][ T7804] ? __fget_files+0x2a/0x420 [ 161.214928][ T7804] ? ksys_write+0x242/0x270 [ 161.214946][ T7804] ? __pfx_ksys_write+0x10/0x10 [ 161.214964][ T7804] __x64_sys_bpf+0xba/0xd0 [ 161.214981][ T7804] do_syscall_64+0x166/0x520 [ 161.214996][ T7804] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.215009][ T7804] ? clear_bhb_loop+0x70/0xc0 [ 161.215026][ T7804] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.215038][ T7804] RIP: 0033:0x7f1f1859f559 [ 161.215052][ T7804] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 161.215073][ T7804] RSP: 002b:00007f1f193be028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 161.215088][ T7804] RAX: ffffffffffffffda RBX: 00007f1f18825fa0 RCX: 00007f1f1859f559 [ 161.215097][ T7804] RDX: 0000000000000038 RSI: 00002000000000c0 RDI: 000000000000001a [ 161.215107][ T7804] RBP: 00007f1f193be090 R08: 0000000000000000 R09: 0000000000000000 [ 161.215115][ T7808] xt_cgroup: no path or classid specified [ 161.215117][ T7804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 161.215127][ T7804] R13: 00007f1f18826038 R14: 00007f1f18825fa0 R15: 00007ffc52e532b8 [ 161.215164][ T7804] [ 161.333796][ T7812] xt_cgroup: no path or classid specified [ 161.379454][ T7809] xt_hashlimit: size too large, truncated to 1048576 [ 161.390033][ T7815] netlink: 'syz.1.521': attribute type 2 has an invalid length. [ 161.390055][ T7815] netlink: 'syz.1.521': attribute type 8 has an invalid length. [ 161.390067][ T7815] netlink: 132 bytes leftover after parsing attributes in process `syz.1.521'. [ 161.492931][ T39] bond2: (slave macvlan2): failed to get link speed/duplex [ 161.506882][ T7820] netlink: 8 bytes leftover after parsing attributes in process `syz.2.522'. [ 161.600996][ T63] bond2: (slave macvlan2): failed to get link speed/duplex [ 161.997341][ T7841] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 162.057906][ T7845] netlink: 'syz.4.531': attribute type 49 has an invalid length. [ 162.180003][ T7849] FAULT_INJECTION: forcing a failure. [ 162.180003][ T7849] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 162.180040][ T7849] CPU: 1 UID: 0 PID: 7849 Comm: syz.1.532 Not tainted syzkaller #0 PREEMPT(full) [ 162.180092][ T7849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 162.180104][ T7849] Call Trace: [ 162.180112][ T7849] [ 162.180121][ T7849] dump_stack_lvl+0xe8/0x150 [ 162.180156][ T7849] should_fail_ex+0x410/0x560 [ 162.180193][ T7849] _copy_from_user+0x2d/0xb0 [ 162.180222][ T7849] generic_map_update_batch+0x6b1/0xad0 [ 162.180257][ T7849] ? __pfx_generic_map_update_batch+0x10/0x10 [ 162.180274][ T7849] ? __fget_files+0x3a2/0x420 [ 162.180292][ T7849] ? __fget_files+0x2a/0x420 [ 162.180312][ T7849] ? fdget+0x1ac/0x250 [ 162.180329][ T7849] ? __pfx_generic_map_update_batch+0x10/0x10 [ 162.180348][ T7849] bpf_map_do_batch+0x391/0x630 [ 162.180377][ T7849] __sys_bpf+0xbe5/0xd90 [ 162.180409][ T7849] ? __pfx___sys_bpf+0x10/0x10 [ 162.180441][ T7849] ? __fget_files+0x2a/0x420 [ 162.180477][ T7849] ? ksys_write+0x242/0x270 [ 162.180501][ T7849] ? __pfx_ksys_write+0x10/0x10 [ 162.180526][ T7849] __x64_sys_bpf+0xba/0xd0 [ 162.180550][ T7849] do_syscall_64+0x166/0x520 [ 162.180569][ T7849] ? trace_irq_disable+0x3b/0x140 [ 162.180589][ T7849] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.180607][ T7849] ? clear_bhb_loop+0x70/0xc0 [ 162.180631][ T7849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.180648][ T7849] RIP: 0033:0x7f837cf9f559 [ 162.180665][ T7849] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 162.180679][ T7849] RSP: 002b:00007f837de07028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 162.180698][ T7849] RAX: ffffffffffffffda RBX: 00007f837d225fa0 RCX: 00007f837cf9f559 [ 162.180711][ T7849] RDX: 0000000000000038 RSI: 00002000000000c0 RDI: 000000000000001a [ 162.180723][ T7849] RBP: 00007f837de07090 R08: 0000000000000000 R09: 0000000000000000 [ 162.180734][ T7849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 162.180745][ T7849] R13: 00007f837d226038 R14: 00007f837d225fa0 R15: 00007ffcf9b4f068 [ 162.180776][ T7849] [ 163.776201][ T7845] ip6gretap0: entered promiscuous mode [ 163.776228][ T7845] ip6gretap0: entered allmulticast mode [ 163.849408][ T7871] netlink: 'syz.3.536': attribute type 5 has an invalid length. [ 163.884646][ T63] bond2: (slave macvlan2): failed to get link speed/duplex [ 163.893928][ T7846] virtio_net virtio4: probe with driver virtio_net failed with error -1 [ 163.901358][ T7871] x_tables: duplicate underflow at hook 1 [ 163.990755][ T990] bond2: (slave macvlan2): failed to get link speed/duplex [ 164.100598][ T63] bond2: (slave macvlan2): failed to get link speed/duplex [ 164.201001][ T7891] netlink: 8 bytes leftover after parsing attributes in process `syz.2.542'. [ 164.212282][ T990] bond2: (slave macvlan2): failed to get link speed/duplex [ 164.325176][ T990] bond2: (slave macvlan2): failed to get link speed/duplex [ 164.405352][ T7899] netlink: 'syz.0.543': attribute type 1 has an invalid length. [ 164.432645][ T7899] bond7: entered promiscuous mode [ 164.433173][ T7899] 8021q: adding VLAN 0 to HW filter on device bond7 [ 164.439575][ T7899] netlink: 28 bytes leftover after parsing attributes in process `syz.0.543'. [ 164.444079][ T7899] netlink: 'syz.0.543': attribute type 1 has an invalid length. [ 164.445797][ T7908] netlink: 28 bytes leftover after parsing attributes in process `syz.0.543'. [ 164.447832][ T7906] netlink: 'syz.2.545': attribute type 1 has an invalid length. [ 164.566389][ T7906] netlink: 28 bytes leftover after parsing attributes in process `syz.2.545'. [ 164.573008][ T63] bond2: (slave macvlan2): failed to get link speed/duplex [ 165.556432][ T7957] FAULT_INJECTION: forcing a failure. [ 165.556432][ T7957] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 165.556467][ T7957] CPU: 1 UID: 0 PID: 7957 Comm: syz.1.557 Not tainted syzkaller #0 PREEMPT(full) [ 165.556487][ T7957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 165.556498][ T7957] Call Trace: [ 165.556506][ T7957] [ 165.556515][ T7957] dump_stack_lvl+0xe8/0x150 [ 165.556549][ T7957] should_fail_ex+0x410/0x560 [ 165.556581][ T7957] _copy_from_iter+0x1d3/0x1660 [ 165.556619][ T7957] ? __pfx__copy_from_iter+0x10/0x10 [ 165.556645][ T7957] ? aa_file_perm+0x18b/0x15f0 [ 165.556674][ T7957] ? skb_put+0x112/0x210 [ 165.556704][ T7957] hci_sock_sendmsg+0x426/0xfd0 [ 165.556742][ T7957] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 165.556774][ T7957] ? apparmor_socket_sendmsg+0x98/0x360 [ 165.556792][ T7957] ? lock_acquire+0x115/0x350 [ 165.556814][ T7957] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 165.556840][ T7957] sock_sendmsg_nosec+0x14e/0x190 [ 165.556867][ T7957] sock_write_iter+0x2de/0x3e0 [ 165.556891][ T7957] ? __pfx_sock_write_iter+0x10/0x10 [ 165.556917][ T7957] ? bpf_lsm_file_permission+0x9/0x20 [ 165.556937][ T7957] ? security_file_permission+0x75/0x260 [ 165.556967][ T7957] vfs_write+0x612/0xba0 [ 165.556999][ T7957] ? __pfx_vfs_write+0x10/0x10 [ 165.557024][ T7957] ? __fget_files+0x3a2/0x420 [ 165.557043][ T7957] ? __fget_files+0x2a/0x420 [ 165.557067][ T7957] ? fdget+0x1ac/0x250 [ 165.557094][ T7957] ksys_write+0x150/0x270 [ 165.557118][ T7957] ? __pfx_ksys_write+0x10/0x10 [ 165.557150][ T7957] do_syscall_64+0x166/0x520 [ 165.557168][ T7957] ? trace_irq_disable+0x3b/0x140 [ 165.557196][ T7957] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.557215][ T7957] ? clear_bhb_loop+0x70/0xc0 [ 165.557238][ T7957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.557269][ T7957] RIP: 0033:0x7f837cf9f559 [ 165.557287][ T7957] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 165.557301][ T7957] RSP: 002b:00007f837de07028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 165.557321][ T7957] RAX: ffffffffffffffda RBX: 00007f837d225fa0 RCX: 00007f837cf9f559 [ 165.557335][ T7957] RDX: 0000000000000007 RSI: 0000200000000740 RDI: 0000000000000004 [ 165.557346][ T7957] RBP: 00007f837de07090 R08: 0000000000000000 R09: 0000000000000000 [ 165.557357][ T7957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 165.557368][ T7957] R13: 00007f837d226038 R14: 00007f837d225fa0 R15: 00007ffcf9b4f068 [ 165.557399][ T7957] [ 165.992619][ T7973] netlink: 8 bytes leftover after parsing attributes in process `syz.1.559'. [ 166.038672][ T7977] netlink: 'syz.4.560': attribute type 64 has an invalid length. [ 166.087446][ T7983] netlink: 8 bytes leftover after parsing attributes in process `syz.1.559'. [ 167.246437][ T7977] bridge0: port 3(veth0) entered disabled state [ 167.246761][ T7977] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.247345][ T7977] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.270488][ T51] net_ratelimit: 3 callbacks suppressed [ 167.270534][ T51] bond2: (slave macvlan2): failed to get link speed/duplex [ 167.387298][ T51] bond2: (slave macvlan2): failed to get link speed/duplex [ 167.452038][ T7998] netlink: 16 bytes leftover after parsing attributes in process `syz.3.566'. [ 167.479934][ T8000] bond2: option mode: unable to set because the bond device has slaves [ 167.532421][ T8000] bond2: (slave macvlan3): Error -98 calling set_mac_address [ 167.575049][ T8000] netlink: 14 bytes leftover after parsing attributes in process `syz.4.564'. [ 167.577941][ T8000] bond_slave_0: left promiscuous mode [ 167.578103][ T8000] bond_slave_1: left promiscuous mode [ 167.607724][ T8000] bond0 (unregistering): left allmulticast mode [ 167.607748][ T8000] bond_slave_0: left allmulticast mode [ 167.607767][ T8000] bond_slave_1: left allmulticast mode [ 167.636630][ T8000] bond2: (slave macvlan2): Removing an active aggregator [ 167.636673][ T8000] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 167.637188][ T8000] bond2: (slave macvlan2): Releasing backup interface [ 167.637206][ T8000] bond2: (slave macvlan2): the permanent HWaddr of slave - 76:3d:6b:9f:ab:75 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 167.639983][ T8000] macvlan2 (unregistering): left allmulticast mode [ 167.705904][ T8000] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 167.724412][ T8000] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 167.735235][ T8000] bond0 (unregistering): Released all slaves [ 167.759557][ T8013] lo: entered allmulticast mode [ 167.771100][ T8008] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 167.787656][ T8007] lo: left allmulticast mode [ 167.802491][ T990] bond2: (slave macvlan2): failed to get link speed/duplex [ 167.911123][ T51] bond2: (slave macvlan2): failed to get link speed/duplex [ 168.023521][ T39] bond2: (slave macvlan2): failed to get link speed/duplex [ 168.112457][ T8027] ieee802154 phy0 wpan0: encryption failed: -22 [ 168.266804][ T8037] Unsupported ieee802154 address type: 0 [ 169.860454][ T39] bond2: (slave macvlan2): failed to get link speed/duplex [ 169.970439][ T39] bond2: (slave macvlan2): failed to get link speed/duplex [ 170.129164][ T8087] wireguard0: entered promiscuous mode [ 170.215293][ T8099] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 170.232764][ T39] bond2: (slave macvlan2): failed to get link speed/duplex [ 170.437414][ T8104] x_tables: unsorted underflow at hook 2 [ 170.438110][ T8104] netlink: 'syz.2.590': attribute type 3 has an invalid length. [ 170.469210][ T8104] netlink: 'syz.2.590': attribute type 2 has an invalid length. [ 170.564633][ T8112] netlink: 'syz.1.594': attribute type 10 has an invalid length. [ 170.566632][ T8112] 8021q: adding VLAN 0 to HW filter on device team0 [ 170.568772][ T8112] bond0: (slave team0): Enslaving as an active interface with an up link [ 170.678373][ T8119] syzkaller0: entered promiscuous mode [ 170.678397][ T8119] syzkaller0: entered allmulticast mode [ 170.973283][ T8128] netlink: 'syz.4.600': attribute type 10 has an invalid length. [ 170.980680][ T8129] netlink: 4 bytes leftover after parsing attributes in process `syz.4.600'. [ 170.983066][ T8129] veth0: left allmulticast mode [ 170.983091][ T8129] veth0: left promiscuous mode [ 170.983355][ T8129] bridge0: port 3(veth0) entered disabled state [ 171.051596][ T8129] bridge_slave_1: left allmulticast mode [ 171.051625][ T8129] bridge_slave_1: left promiscuous mode [ 171.051920][ T8129] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.071096][ T8129] bridge_slave_0: left allmulticast mode [ 171.071126][ T8129] bridge_slave_0: left promiscuous mode [ 171.071380][ T8129] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.078731][ T8136] netlink: 32 bytes leftover after parsing attributes in process `syz.1.602'. [ 171.182414][ T8139] netlink: 'syz.1.603': attribute type 1 has an invalid length. [ 171.218682][ T8139] 8021q: adding VLAN 0 to HW filter on device bond4 [ 171.246416][ T8139] bond1: (slave dummy0): Releasing active interface [ 171.273634][ T8139] bond4: (slave dummy0): making interface the new active one [ 171.276304][ T8139] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 171.469089][ T8154] syzkaller0: entered promiscuous mode [ 171.469114][ T8154] syzkaller0: entered allmulticast mode [ 171.772933][ T8166] bond0: left allmulticast mode [ 171.772962][ T8166] bond_slave_0: left allmulticast mode [ 171.772981][ T8166] bond_slave_1: left allmulticast mode [ 171.812716][ T8169] netlink: 8 bytes leftover after parsing attributes in process `syz.0.613'. [ 171.812770][ T8169] netlink: 64 bytes leftover after parsing attributes in process `syz.0.613'. [ 171.860534][ T1171] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.860633][ T1171] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.860667][ T1171] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.860707][ T1171] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.882583][ T8171] netlink: 12 bytes leftover after parsing attributes in process `syz.3.615'. [ 172.136156][ T8190] syzkaller0: entered promiscuous mode [ 172.136181][ T8190] syzkaller0: entered allmulticast mode [ 172.455902][ T8204] netlink: 68 bytes leftover after parsing attributes in process `syz.2.629'. [ 172.456315][ T8205] netlink: 68 bytes leftover after parsing attributes in process `syz.2.629'. [ 172.456738][ T8204] netlink: 12 bytes leftover after parsing attributes in process `syz.2.629'. [ 172.547559][ T8209] netlink: 8 bytes leftover after parsing attributes in process `syz.4.630'. [ 172.547590][ T8209] netlink: 64 bytes leftover after parsing attributes in process `syz.4.630'. [ 172.685546][ T8207] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 172.712085][ T8207] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 173.031239][ T8221] netlink: 8 bytes leftover after parsing attributes in process `syz.3.634'. [ 173.064682][ T8221] netlink: 24 bytes leftover after parsing attributes in process `syz.3.634'. [ 173.072444][ T1171] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.072497][ T1171] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.072529][ T1171] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.080629][ T1171] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.152666][ T8221] xt_hashlimit: size too large, truncated to 1048576 [ 173.321101][ T8230] Bluetooth: MGMT ver 1.23 [ 173.351215][ T8231] syzkaller0: entered promiscuous mode [ 173.351242][ T8231] syzkaller0: entered allmulticast mode [ 173.484915][ T8242] lo: entered allmulticast mode [ 173.495223][ T8239] lo: left allmulticast mode [ 173.727226][ T8251] syzkaller0: entered promiscuous mode [ 173.727253][ T8251] syzkaller0: entered allmulticast mode [ 173.930075][ T8262] netlink: 8 bytes leftover after parsing attributes in process `syz.3.649'. [ 173.930342][ T8262] netlink: 64 bytes leftover after parsing attributes in process `syz.3.649'. [ 174.025410][ T8262] geneve2: entered promiscuous mode [ 174.025441][ T8262] geneve2: entered allmulticast mode [ 175.131058][ T8292] FAULT_INJECTION: forcing a failure. [ 175.131058][ T8292] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 175.131096][ T8292] CPU: 0 UID: 0 PID: 8292 Comm: syz.3.654 Not tainted syzkaller #0 PREEMPT(full) [ 175.131126][ T8292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 175.131138][ T8292] Call Trace: [ 175.131146][ T8292] [ 175.131156][ T8292] dump_stack_lvl+0xe8/0x150 [ 175.131192][ T8292] should_fail_ex+0x410/0x560 [ 175.131229][ T8292] _copy_from_user+0x2d/0xb0 [ 175.131258][ T8292] generic_map_update_batch+0x6b1/0xad0 [ 175.131293][ T8292] ? __pfx_generic_map_update_batch+0x10/0x10 [ 175.131312][ T8292] ? __fget_files+0x3a2/0x420 [ 175.131332][ T8292] ? __fget_files+0x2a/0x420 [ 175.131356][ T8292] ? fdget+0x1ac/0x250 [ 175.131375][ T8292] ? __pfx_generic_map_update_batch+0x10/0x10 [ 175.131395][ T8292] bpf_map_do_batch+0x391/0x630 [ 175.131427][ T8292] __sys_bpf+0xbe5/0xd90 [ 175.131460][ T8292] ? __pfx___sys_bpf+0x10/0x10 [ 175.131495][ T8292] ? __fget_files+0x2a/0x420 [ 175.131533][ T8292] ? ksys_write+0x242/0x270 [ 175.131557][ T8292] ? __pfx_ksys_write+0x10/0x10 [ 175.131585][ T8292] __x64_sys_bpf+0xba/0xd0 [ 175.131609][ T8292] do_syscall_64+0x166/0x520 [ 175.131630][ T8292] ? trace_irq_disable+0x3b/0x140 [ 175.131651][ T8292] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.131671][ T8292] ? clear_bhb_loop+0x70/0xc0 [ 175.131694][ T8292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.131712][ T8292] RIP: 0033:0x7f933b19f559 [ 175.131746][ T8292] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 175.131761][ T8292] RSP: 002b:00007f933bf8c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 175.131782][ T8292] RAX: ffffffffffffffda RBX: 00007f933b425fa0 RCX: 00007f933b19f559 [ 175.131796][ T8292] RDX: 0000000000000038 RSI: 00002000000000c0 RDI: 000000000000001a [ 175.131808][ T8292] RBP: 00007f933bf8c090 R08: 0000000000000000 R09: 0000000000000000 [ 175.131821][ T8292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 175.131832][ T8292] R13: 00007f933b426038 R14: 00007f933b425fa0 R15: 00007fff03724d68 [ 175.131864][ T8292] [ 176.408209][ T8287] netlink: 12 bytes leftover after parsing attributes in process `syz.2.653'. [ 176.623886][ T8307] bond5: entered allmulticast mode [ 176.624320][ T8307] 8021q: adding VLAN 0 to HW filter on device bond5 [ 176.654672][ T8312] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 176.659522][ T8312] macvlan4: entered allmulticast mode [ 176.659551][ T8312] bond0: entered allmulticast mode [ 176.659566][ T8312] bond_slave_0: entered allmulticast mode [ 176.659584][ T8312] bond_slave_1: entered allmulticast mode [ 176.659600][ T8312] team0: entered allmulticast mode [ 176.659614][ T8312] team_slave_0: entered allmulticast mode [ 176.659629][ T8312] team_slave_1: entered allmulticast mode [ 176.664968][ T8312] bond5: (slave macvlan4): Enslaving as a backup interface with an up link [ 176.671595][ T51] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 176.671628][ T51] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.671666][ T51] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 176.671689][ T51] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.697889][ T8307] netlink: 14 bytes leftover after parsing attributes in process `syz.1.658'. [ 176.707754][ T8307] bond0 (unregistering): left allmulticast mode [ 176.707782][ T8307] bond_slave_0: left allmulticast mode [ 176.707803][ T8307] bond_slave_1: left allmulticast mode [ 176.707817][ T8307] team0: left allmulticast mode [ 176.707831][ T8307] team_slave_0: left allmulticast mode [ 176.707846][ T8307] team_slave_1: left allmulticast mode [ 176.794845][ T8307] bond5: (slave macvlan4): Releasing backup interface [ 176.808403][ T8307] macvlan4 (unregistering): left allmulticast mode [ 176.821865][ T8307] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 176.823400][ T8307] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 176.825021][ T8307] bond0 (unregistering): (slave team0): Releasing backup interface [ 176.842356][ T8307] bond0 (unregistering): Released all slaves [ 176.973805][ T8314] syzkaller0: entered promiscuous mode [ 176.973836][ T8314] syzkaller0: entered allmulticast mode [ 176.990552][ T51] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 176.990591][ T51] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.990627][ T51] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 176.990650][ T51] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.030678][ T8284] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 177.312789][ T8340] netlink: 'syz.1.665': attribute type 1 has an invalid length. [ 178.347858][ T8368] nbd4: detected capacity change from 0 to 63 [ 178.360208][ T4951] block nbd4: Receive control failed (result -32) [ 178.367218][ T2621] block nbd4: Dead connection, failed to find a fallback [ 178.367247][ T2621] block nbd4: shutting down sockets [ 178.367261][ T2621] blk_print_req_error: 166 callbacks suppressed [ 178.367275][ T2621] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 178.367302][ T2621] buffer_io_error: 286 callbacks suppressed [ 178.367312][ T2621] Buffer I/O error on dev nbd4, logical block 0, async page read [ 178.369242][ T2621] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 178.369270][ T2621] Buffer I/O error on dev nbd4, logical block 1, async page read [ 178.369371][ T2621] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 178.369399][ T2621] Buffer I/O error on dev nbd4, logical block 2, async page read [ 178.369493][ T2621] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 178.369515][ T2621] Buffer I/O error on dev nbd4, logical block 3, async page read [ 178.369624][ T2621] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 178.369646][ T2621] Buffer I/O error on dev nbd4, logical block 0, async page read [ 178.369751][ T2621] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 178.369772][ T2621] Buffer I/O error on dev nbd4, logical block 1, async page read [ 178.369859][ T2621] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 178.369880][ T2621] Buffer I/O error on dev nbd4, logical block 2, async page read [ 178.369984][ T2621] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 178.370005][ T2621] Buffer I/O error on dev nbd4, logical block 3, async page read [ 178.370119][ T2621] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 178.370140][ T2621] Buffer I/O error on dev nbd4, logical block 0, async page read [ 178.370465][ T2621] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 178.370488][ T2621] Buffer I/O error on dev nbd4, logical block 1, async page read [ 178.372710][ T8331] ldm_validate_partition_table(): Disk read failed. [ 178.375959][ T8331] Dev nbd4: unable to read RDB block 0 [ 178.377582][ T8331] nbd4: unable to read partition table [ 178.410467][ T8331] ldm_validate_partition_table(): Disk read failed. [ 178.411795][ T8331] Dev nbd4: unable to read RDB block 0 [ 178.415604][ T8331] nbd4: unable to read partition table [ 180.023927][ T8340] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 180.030999][ T8342] bond4: (slave dummy0): Releasing active interface [ 180.183826][ T8393] bond5: option mode: unable to set because the bond device is up [ 180.318649][ T8403] netlink: 14 bytes leftover after parsing attributes in process `syz.1.673'. [ 180.334074][ T8407] netlink: 'syz.2.678': attribute type 83 has an invalid length. [ 180.404142][ T8412] nbd2: detected capacity change from 0 to 63 [ 180.404935][ T8412] block nbd2: NBD_DISCONNECT [ 180.405045][ T8412] block nbd2: Disconnected due to user request. [ 180.405059][ T8412] block nbd2: shutting down sockets [ 180.472554][ T8331] ldm_validate_partition_table(): Disk read failed. [ 180.477415][ T8331] Dev nbd2: unable to read RDB block 0 [ 180.481969][ T8331] nbd2: unable to read partition table [ 180.513057][ T8331] ldm_validate_partition_table(): Disk read failed. [ 180.515268][ T8410] net_ratelimit: 10 callbacks suppressed [ 180.515285][ T8410] ip_tables: iptables: counters copy to user failed while replacing table [ 180.538159][ T8331] Dev nbd2: unable to read RDB block 0 [ 180.551821][ T8331] nbd2: unable to read partition table [ 180.803290][ T8427] lo speed is unknown, defaulting to 1000 [ 180.804581][ T8427] lo speed is unknown, defaulting to 1000 [ 180.829746][ T8427] lo speed is unknown, defaulting to 1000 [ 180.901623][ T8431] netlink: 20 bytes leftover after parsing attributes in process `syz.4.683'. [ 181.372286][ T8456] netlink: 12 bytes leftover after parsing attributes in process `syz.3.690'. [ 181.528036][ T8460] ip_tables: iptables: counters copy to user failed while replacing table [ 181.544602][ T8427] infiniband syz0: set down [ 181.544664][ T6459] lo speed is unknown, defaulting to 1000 [ 181.544729][ T8427] infiniband syz0: added lo [ 181.598710][ T8465] bond5: option mode: unable to set because the bond device is up [ 181.611099][ T8427] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 181.611136][ T8427] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 181.611171][ T8427] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 181.688785][ T8427] RDS/IB: syz0: added [ 181.688848][ T8427] smc: adding ib device syz0 with port count 1 [ 181.688867][ T8427] smc: ib device syz0 port 1 has no pnetid [ 181.722290][ T6459] lo speed is unknown, defaulting to 1000 [ 181.734053][ T8427] lo speed is unknown, defaulting to 1000 [ 181.745689][ T8467] netlink: 14 bytes leftover after parsing attributes in process `syz.1.694'. [ 182.012536][ T8480] netlink: 8 bytes leftover after parsing attributes in process `syz.0.698'. [ 182.012579][ T8480] netlink: 12 bytes leftover after parsing attributes in process `syz.0.698'. [ 182.180682][ T8493] netlink: 8 bytes leftover after parsing attributes in process `syz.0.705'. [ 182.315793][ T8427] lo speed is unknown, defaulting to 1000 [ 182.353693][ T8496] ip_tables: iptables: counters copy to user failed while replacing table [ 182.400860][ T8498] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 182.599569][ T8504] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 182.628505][ T8501] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.646165][ T8501] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 182.711266][ T8501] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 182.719465][ T8501] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 182.753815][ T8501] veth1_vlan: left promiscuous mode [ 182.758526][ T8501] veth0_vlan: left promiscuous mode [ 182.765113][ T8501] veth0_vlan: entered promiscuous mode [ 182.769970][ T8501] veth1_vlan: entered promiscuous mode [ 182.776380][ T8501] veth1_macvtap: left promiscuous mode [ 182.777764][ T8501] veth0_macvtap: left promiscuous mode [ 182.779185][ T8501] veth0_macvtap: entered promiscuous mode [ 182.780918][ T8501] veth1_macvtap: entered promiscuous mode [ 182.789571][ T8501] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 182.796607][ T8501] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 182.799404][ T8501] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 182.804898][ T8501] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 182.807864][ T8501] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 182.854275][ T8427] lo speed is unknown, defaulting to 1000 [ 183.049611][ T8512] netlink: 4 bytes leftover after parsing attributes in process `syz.4.714'. [ 183.161956][ T39] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.162009][ T39] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.162039][ T39] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.162059][ T39] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.294933][ T8526] netlink: 'syz.1.713': attribute type 1 has an invalid length. [ 183.357355][ T8427] lo speed is unknown, defaulting to 1000 [ 183.442885][ T8540] ip_tables: iptables: counters copy to user failed while replacing table [ 183.755141][ T8427] lo speed is unknown, defaulting to 1000 [ 184.171833][ T8556] netlink: 8 bytes leftover after parsing attributes in process `syz.1.725'. [ 184.368956][ T8575] ip_tables: iptables: counters copy to user failed while replacing table [ 184.629082][ T8588] netlink: 24 bytes leftover after parsing attributes in process `syz.0.735'. [ 184.797467][ T8594] bond8: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 184.833404][ T8594] bond8 (unregistering): Released all slaves [ 184.905315][ T8609] ip_tables: iptables: counters copy to user failed while replacing table [ 184.969265][ T8594] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 185.149337][ T8622] FAULT_INJECTION: forcing a failure. [ 185.149337][ T8622] name failslab, interval 1, probability 0, space 0, times 0 [ 185.149373][ T8622] CPU: 1 UID: 0 PID: 8622 Comm: syz.2.745 Not tainted syzkaller #0 PREEMPT(full) [ 185.149394][ T8622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 185.149405][ T8622] Call Trace: [ 185.149414][ T8622] [ 185.149423][ T8622] dump_stack_lvl+0xe8/0x150 [ 185.149460][ T8622] should_fail_ex+0x410/0x560 [ 185.149493][ T8622] should_failslab+0xa8/0x100 [ 185.149524][ T8622] __kmalloc_cache_noprof+0x9e/0x600 [ 185.149550][ T8622] ? tcf_action_init_1+0x1c2/0x740 [ 185.149581][ T8622] ? tcf_action_init_1+0x1c2/0x740 [ 185.149613][ T8622] tcf_action_init_1+0x1c2/0x740 [ 185.149647][ T8622] ? __pfx_tcf_action_init_1+0x10/0x10 [ 185.149673][ T8622] ? _raw_read_unlock+0x28/0x50 [ 185.149696][ T8622] ? tc_action_load_ops+0x247/0x540 [ 185.149736][ T8622] ? __lock_acquire+0x747/0x2de0 [ 185.149762][ T8622] ? __nla_parse+0x40/0x60 [ 185.149785][ T8622] tcf_action_init+0x31f/0xac0 [ 185.149825][ T8622] ? __pfx_tcf_action_init+0x10/0x10 [ 185.149849][ T8622] ? do_raw_spin_lock+0x12b/0x2f0 [ 185.149901][ T8622] ? hook_capable+0x1c3/0x5e0 [ 185.149926][ T8622] ? __pfx___nla_validate_parse+0x10/0x10 [ 185.149944][ T8622] ? hook_capable+0x1c3/0x5e0 [ 185.150002][ T8622] tc_ctl_action+0x44a/0xc80 [ 185.150032][ T8622] ? __pfx_tc_ctl_action+0x10/0x10 [ 185.150076][ T8622] ? __mutex_lock+0x5cd/0x15a0 [ 185.150229][ T8622] ? __pfx___mutex_lock+0x10/0x10 [ 185.150265][ T8622] ? __pfx_tc_ctl_action+0x10/0x10 [ 185.150282][ T8622] rtnetlink_rcv_msg+0x7b9/0xc00 [ 185.150311][ T8622] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 185.150333][ T8622] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 185.150356][ T8622] ? __lock_acquire+0x747/0x2de0 [ 185.150409][ T8622] netlink_rcv_skb+0x226/0x4a0 [ 185.150432][ T8622] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 185.150458][ T8622] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 185.150492][ T8622] ? netlink_deliver_tap+0x2e/0x1b0 [ 185.150511][ T8622] ? netlink_deliver_tap+0x2e/0x1b0 [ 185.150538][ T8622] netlink_unicast+0x8ef/0xa80 [ 185.150574][ T8622] netlink_sendmsg+0x7f0/0xb20 [ 185.150603][ T8622] ? __pfx_netlink_sendmsg+0x10/0x10 [ 185.150630][ T8622] ? aa_sock_msg_perm+0x144/0x210 [ 185.150664][ T8622] ? apparmor_socket_sendmsg+0x98/0x360 [ 185.150687][ T8622] ? __pfx_netlink_sendmsg+0x10/0x10 [ 185.150709][ T8622] sock_sendmsg_nosec+0x14e/0x190 [ 185.150737][ T8622] ____sys_sendmsg+0x54e/0x850 [ 185.150781][ T8622] ? __pfx_____sys_sendmsg+0x10/0x10 [ 185.150819][ T8622] ? import_iovec+0x73/0xa0 [ 185.150851][ T8622] ___sys_sendmsg+0x2a5/0x360 [ 185.150876][ T8622] ? __lock_acquire+0x747/0x2de0 [ 185.150902][ T8622] ? __pfx____sys_sendmsg+0x10/0x10 [ 185.150963][ T8622] ? __fget_files+0x3a2/0x420 [ 185.151011][ T8622] ? __fget_files+0x2a/0x420 [ 185.151035][ T8622] __x64_sys_sendmsg+0x1b1/0x290 [ 185.151054][ T8622] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 185.151099][ T8622] do_syscall_64+0x166/0x520 [ 185.151116][ T8622] ? trace_irq_disable+0x3b/0x140 [ 185.151135][ T8622] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.151153][ T8622] ? clear_bhb_loop+0x70/0xc0 [ 185.151176][ T8622] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.151195][ T8622] RIP: 0033:0x7f1f1859f559 [ 185.151215][ T8622] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 185.151230][ T8622] RSP: 002b:00007f1f193be028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 185.151251][ T8622] RAX: ffffffffffffffda RBX: 00007f1f18825fa0 RCX: 00007f1f1859f559 [ 185.151264][ T8622] RDX: 0000000004000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 185.151275][ T8622] RBP: 00007f1f193be090 R08: 0000000000000000 R09: 0000000000000000 [ 185.151287][ T8622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 185.151298][ T8622] R13: 00007f1f18826038 R14: 00007f1f18825fa0 R15: 00007ffc52e532b8 [ 185.151328][ T8622] [ 185.262843][ T8627] dummy0: left promiscuous mode [ 185.271852][ T8626] netlink: 'syz.0.747': attribute type 10 has an invalid length. [ 185.276132][ T8626] dummy0: entered promiscuous mode [ 185.578271][ T8636] netlink: 'syz.1.749': attribute type 1 has an invalid length. [ 185.578297][ T8636] netlink: 'syz.1.749': attribute type 2 has an invalid length. [ 185.578310][ T8636] __nla_validate_parse: 2 callbacks suppressed [ 185.578320][ T8636] netlink: 12 bytes leftover after parsing attributes in process `syz.1.749'. [ 185.724507][ T8648] raw_sendmsg: syz.2.753 forgot to set AF_INET. Fix it! [ 185.785972][ T8651] netlink: 48 bytes leftover after parsing attributes in process `syz.3.755'. [ 185.838946][ T8656] netlink: 4 bytes leftover after parsing attributes in process `syz.3.755'. [ 185.959052][ T8663] net_ratelimit: 1 callbacks suppressed [ 185.959099][ T8663] ip_tables: iptables: counters copy to user failed while replacing table [ 185.964637][ T8659] netlink: 164 bytes leftover after parsing attributes in process `syz.4.757'. [ 186.099380][ T8669] netlink: 'syz.3.761': attribute type 1 has an invalid length. [ 186.137830][ T8669] 8021q: adding VLAN 0 to HW filter on device bond3 [ 186.151758][ T8672] netlink: 'syz.4.762': attribute type 2 has an invalid length. [ 186.172381][ T8669] bond3: (slave dummy0): making interface the new active one [ 186.175652][ T8669] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 186.179129][ T8669] netlink: 'syz.3.761': attribute type 10 has an invalid length. [ 186.179162][ T8669] netlink: 40 bytes leftover after parsing attributes in process `syz.3.761'. [ 186.179239][ T8669] dummy0: entered promiscuous mode [ 186.228956][ T8669] bond3: (slave dummy0): Releasing active interface [ 186.615596][ T8699] netlink: 48 bytes leftover after parsing attributes in process `syz.3.771'. [ 186.671407][ T8703] netlink: 4 bytes leftover after parsing attributes in process `syz.3.771'. [ 186.918785][ T8716] netlink: 8 bytes leftover after parsing attributes in process `syz.4.775'. [ 187.334527][ T8746] ip_tables: iptables: counters copy to user failed while replacing table [ 187.393159][ T8748] netlink: 48 bytes leftover after parsing attributes in process `syz.4.787'. [ 187.445835][ T8751] netlink: 4 bytes leftover after parsing attributes in process `syz.4.787'. [ 188.018498][ T8782] ip_tables: iptables: counters copy to user failed while replacing table [ 188.081056][ T13] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 188.111575][ T63] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 188.111681][ T63] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 188.111750][ T63] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 188.122057][ T8791] FAULT_INJECTION: forcing a failure. [ 188.122057][ T8791] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 188.122095][ T8791] CPU: 0 UID: 0 PID: 8791 Comm: syz.2.801 Not tainted syzkaller #0 PREEMPT(full) [ 188.122118][ T8791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 188.122130][ T8791] Call Trace: [ 188.122138][ T8791] [ 188.122146][ T8791] dump_stack_lvl+0xe8/0x150 [ 188.122184][ T8791] should_fail_ex+0x410/0x560 [ 188.122217][ T8791] _copy_from_user+0x2d/0xb0 [ 188.122246][ T8791] generic_map_update_batch+0x662/0xad0 [ 188.122280][ T8791] ? __pfx_generic_map_update_batch+0x10/0x10 [ 188.122298][ T8791] ? __fget_files+0x3a2/0x420 [ 188.122319][ T8791] ? __fget_files+0x2a/0x420 [ 188.122341][ T8791] ? fdget+0x1ac/0x250 [ 188.122360][ T8791] ? __pfx_generic_map_update_batch+0x10/0x10 [ 188.122379][ T8791] bpf_map_do_batch+0x391/0x630 [ 188.122410][ T8791] __sys_bpf+0xbe5/0xd90 [ 188.122441][ T8791] ? __pfx___sys_bpf+0x10/0x10 [ 188.122475][ T8791] ? __fget_files+0x2a/0x420 [ 188.122511][ T8791] ? ksys_write+0x242/0x270 [ 188.122534][ T8791] ? __pfx_ksys_write+0x10/0x10 [ 188.122560][ T8791] __x64_sys_bpf+0xba/0xd0 [ 188.122585][ T8791] do_syscall_64+0x166/0x520 [ 188.122604][ T8791] ? trace_irq_disable+0x3b/0x140 [ 188.122625][ T8791] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.122660][ T8791] ? clear_bhb_loop+0x70/0xc0 [ 188.122683][ T8791] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.122702][ T8791] RIP: 0033:0x7f1f1859f559 [ 188.122719][ T8791] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 188.122734][ T8791] RSP: 002b:00007f1f193be028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 188.122756][ T8791] RAX: ffffffffffffffda RBX: 00007f1f18825fa0 RCX: 00007f1f1859f559 [ 188.122769][ T8791] RDX: 0000000000000038 RSI: 00002000000000c0 RDI: 000000000000001a [ 188.122786][ T8791] RBP: 00007f1f193be090 R08: 0000000000000000 R09: 0000000000000000 [ 188.122797][ T8791] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 188.122815][ T8791] R13: 00007f1f18826038 R14: 00007f1f18825fa0 R15: 00007ffc52e532b8 [ 188.122844][ T8791] [ 188.657348][ T8819] netlink: 'syz.1.810': attribute type 2 has an invalid length. [ 188.905323][ T8830] FAULT_INJECTION: forcing a failure. [ 188.905323][ T8830] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 188.905360][ T8830] CPU: 1 UID: 0 PID: 8830 Comm: syz.3.815 Not tainted syzkaller #0 PREEMPT(full) [ 188.905380][ T8830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 188.905392][ T8830] Call Trace: [ 188.905400][ T8830] [ 188.905408][ T8830] dump_stack_lvl+0xe8/0x150 [ 188.905443][ T8830] should_fail_ex+0x410/0x560 [ 188.905477][ T8830] _copy_from_user+0x2d/0xb0 [ 188.905505][ T8830] generic_map_update_batch+0x6b1/0xad0 [ 188.905540][ T8830] ? __pfx_generic_map_update_batch+0x10/0x10 [ 188.905559][ T8830] ? __fget_files+0x3a2/0x420 [ 188.905581][ T8830] ? __fget_files+0x2a/0x420 [ 188.905604][ T8830] ? fdget+0x1ac/0x250 [ 188.905623][ T8830] ? __pfx_generic_map_update_batch+0x10/0x10 [ 188.905644][ T8830] bpf_map_do_batch+0x391/0x630 [ 188.905676][ T8830] __sys_bpf+0xbe5/0xd90 [ 188.905708][ T8830] ? __pfx___sys_bpf+0x10/0x10 [ 188.905743][ T8830] ? __fget_files+0x2a/0x420 [ 188.905783][ T8830] ? ksys_write+0x242/0x270 [ 188.905809][ T8830] ? __pfx_ksys_write+0x10/0x10 [ 188.905836][ T8830] __x64_sys_bpf+0xba/0xd0 [ 188.905861][ T8830] do_syscall_64+0x166/0x520 [ 188.905880][ T8830] ? trace_irq_disable+0x3b/0x140 [ 188.905903][ T8830] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.905922][ T8830] ? clear_bhb_loop+0x70/0xc0 [ 188.905946][ T8830] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.905965][ T8830] RIP: 0033:0x7f933b19f559 [ 188.905990][ T8830] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 188.906007][ T8830] RSP: 002b:00007f933bf8c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 188.906028][ T8830] RAX: ffffffffffffffda RBX: 00007f933b425fa0 RCX: 00007f933b19f559 [ 188.906042][ T8830] RDX: 0000000000000038 RSI: 00002000000000c0 RDI: 000000000000001a [ 188.906054][ T8830] RBP: 00007f933bf8c090 R08: 0000000000000000 R09: 0000000000000000 [ 188.906065][ T8830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 188.906076][ T8830] R13: 00007f933b426038 R14: 00007f933b425fa0 R15: 00007fff03724d68 [ 188.906107][ T8830] [ 189.564926][ T8853] netlink: 'syz.0.822': attribute type 2 has an invalid length. [ 189.790853][ T8875] ip_tables: iptables: counters copy to user failed while replacing table [ 190.380852][ T8912] netlink: 'syz.3.835': attribute type 1 has an invalid length. [ 190.438810][ T8912] 8021q: adding VLAN 0 to HW filter on device bond5 [ 190.451471][ T8912] dummy0: left promiscuous mode [ 190.457249][ T8912] bond5: (slave dummy0): making interface the new active one [ 190.458421][ T8912] bond5: (slave dummy0): Enslaving as an active interface with an up link [ 190.459941][ T8912] netlink: 'syz.3.835': attribute type 10 has an invalid length. [ 190.591706][ T8918] netlink: 'syz.3.836': attribute type 2 has an invalid length. [ 190.627250][ T8920] ip_tables: iptables: counters copy to user failed while replacing table [ 190.703679][ T8925] syzkaller0: entered promiscuous mode [ 190.703704][ T8925] syzkaller0: entered allmulticast mode [ 190.793446][ T8932] ip_tables: iptables: counters copy to user failed while replacing table [ 190.891918][ T8937] __nla_validate_parse: 76 callbacks suppressed [ 190.891943][ T8937] netlink: 8 bytes leftover after parsing attributes in process `syz.2.844'. [ 191.120099][ T8947] ip_tables: iptables: counters copy to user failed while replacing table [ 191.856298][ T8949] netlink: 'syz.3.848': attribute type 1 has an invalid length. [ 191.876608][ T8949] 8021q: adding VLAN 0 to HW filter on device bond6 [ 191.891245][ T8949] bond5: (slave dummy0): Releasing active interface [ 191.896069][ T8949] bond6: (slave dummy0): making interface the new active one [ 191.896815][ T8949] bond6: (slave dummy0): Enslaving as an active interface with an up link [ 191.899657][ T8949] netlink: 'syz.3.848': attribute type 10 has an invalid length. [ 191.899672][ T8949] netlink: 40 bytes leftover after parsing attributes in process `syz.3.848'. [ 192.585847][ T8874] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 192.723348][ T8967] netlink: 8 bytes leftover after parsing attributes in process `syz.1.855'. [ 193.046632][ T8987] netlink: 24 bytes leftover after parsing attributes in process `syz.2.862'. [ 193.206159][ T8997] ip_tables: iptables: counters copy to user failed while replacing table [ 193.538712][ T9022] netlink: 132 bytes leftover after parsing attributes in process `syz.0.869'. [ 193.538742][ T9022] tc_dump_action: action bad kind [ 193.723974][ T9034] netlink: 24 bytes leftover after parsing attributes in process `syz.2.876'. [ 193.863809][ T9040] ip_tables: iptables: counters copy to user failed while replacing table [ 193.901002][ T9044] Bluetooth: hci0: unsupported parameter 5135 [ 193.901029][ T9044] Bluetooth: hci0: unsupported parameter 8192 [ 193.901048][ T9044] Bluetooth: hci0: unsupported parameter 5135 [ 193.901061][ T9044] Bluetooth: hci0: unsupported parameter 8192 [ 194.647496][ T9075] netlink: 'syz.1.887': attribute type 1 has an invalid length. [ 195.725755][ T9056] netlink: 8 bytes leftover after parsing attributes in process `syz.3.885'. [ 195.888216][ T9079] syzkaller0: entered promiscuous mode [ 195.888240][ T9079] syzkaller0: entered allmulticast mode [ 195.922300][ T9084] netlink: 16 bytes leftover after parsing attributes in process `syz.0.891'. [ 196.105766][ T9098] ip_tables: iptables: counters copy to user failed while replacing table [ 196.168213][ T9102] FAULT_INJECTION: forcing a failure. [ 196.168213][ T9102] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 196.168247][ T9102] CPU: 1 UID: 0 PID: 9102 Comm: syz.4.898 Not tainted syzkaller #0 PREEMPT(full) [ 196.168269][ T9102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 196.168280][ T9102] Call Trace: [ 196.168308][ T9102] [ 196.168317][ T9102] dump_stack_lvl+0xe8/0x150 [ 196.168351][ T9102] should_fail_ex+0x410/0x560 [ 196.168385][ T9102] _copy_from_user+0x2d/0xb0 [ 196.168413][ T9102] generic_map_update_batch+0x6b1/0xad0 [ 196.168451][ T9102] ? __pfx_generic_map_update_batch+0x10/0x10 [ 196.168470][ T9102] ? __fget_files+0x3a2/0x420 [ 196.168490][ T9102] ? __fget_files+0x2a/0x420 [ 196.168513][ T9102] ? fdget+0x1ac/0x250 [ 196.168531][ T9102] ? __pfx_generic_map_update_batch+0x10/0x10 [ 196.168551][ T9102] bpf_map_do_batch+0x391/0x630 [ 196.168582][ T9102] __sys_bpf+0xbe5/0xd90 [ 196.168615][ T9102] ? __pfx___sys_bpf+0x10/0x10 [ 196.168649][ T9102] ? __fget_files+0x2a/0x420 [ 196.168685][ T9102] ? ksys_write+0x242/0x270 [ 196.168709][ T9102] ? __pfx_ksys_write+0x10/0x10 [ 196.168736][ T9102] __x64_sys_bpf+0xba/0xd0 [ 196.168762][ T9102] do_syscall_64+0x166/0x520 [ 196.168780][ T9102] ? trace_irq_disable+0x3b/0x140 [ 196.168801][ T9102] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.168820][ T9102] ? clear_bhb_loop+0x70/0xc0 [ 196.168843][ T9102] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.168862][ T9102] RIP: 0033:0x7f476399f559 [ 196.168887][ T9102] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 196.168903][ T9102] RSP: 002b:00007f4764798028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 196.168924][ T9102] RAX: ffffffffffffffda RBX: 00007f4763c25fa0 RCX: 00007f476399f559 [ 196.168938][ T9102] RDX: 0000000000000038 RSI: 00002000000000c0 RDI: 000000000000001a [ 196.168951][ T9102] RBP: 00007f4764798090 R08: 0000000000000000 R09: 0000000000000000 [ 196.168963][ T9102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 196.168974][ T9102] R13: 00007f4763c26038 R14: 00007f4763c25fa0 R15: 00007fffcef27cf8 [ 196.169008][ T9102] [ 196.392020][ T9108] syzkaller0: left promiscuous mode [ 196.392043][ T9108] syzkaller0: left allmulticast mode [ 197.127954][ T9142] netlink: 52 bytes leftover after parsing attributes in process `syz.0.907'. [ 198.279014][ T9130] syzkaller0: entered promiscuous mode [ 198.279041][ T9130] syzkaller0: entered allmulticast mode [ 198.279469][ T9136] netlink: 'syz.2.906': attribute type 2 has an invalid length. [ 198.565640][ T9162] Unsupported ieee802154 address type: 0 [ 198.632275][ T9165] syzkaller0: left promiscuous mode [ 198.632297][ T9165] syzkaller0: left allmulticast mode [ 198.873653][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 198.882675][ T9184] syzkaller0: entered promiscuous mode [ 198.882707][ T9184] syzkaller0: entered allmulticast mode [ 199.226136][ T9204] FAULT_INJECTION: forcing a failure. [ 199.226136][ T9204] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 199.226178][ T9204] CPU: 0 UID: 0 PID: 9204 Comm: syz.0.930 Not tainted syzkaller #0 PREEMPT(full) [ 199.226199][ T9204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 199.226210][ T9204] Call Trace: [ 199.226239][ T9204] [ 199.226248][ T9204] dump_stack_lvl+0xe8/0x150 [ 199.226285][ T9204] should_fail_ex+0x410/0x560 [ 199.226320][ T9204] _copy_from_user+0x2d/0xb0 [ 199.226350][ T9204] generic_map_update_batch+0x6b1/0xad0 [ 199.226392][ T9204] ? __pfx_generic_map_update_batch+0x10/0x10 [ 199.226410][ T9204] ? __fget_files+0x3a2/0x420 [ 199.226430][ T9204] ? __fget_files+0x2a/0x420 [ 199.226452][ T9204] ? fdget+0x1ac/0x250 [ 199.226471][ T9204] ? __pfx_generic_map_update_batch+0x10/0x10 [ 199.226490][ T9204] bpf_map_do_batch+0x391/0x630 [ 199.226519][ T9204] __sys_bpf+0xbe5/0xd90 [ 199.226547][ T9204] ? __pfx___sys_bpf+0x10/0x10 [ 199.226579][ T9204] ? __fget_files+0x2a/0x420 [ 199.226613][ T9204] ? ksys_write+0x242/0x270 [ 199.226641][ T9204] ? __pfx_ksys_write+0x10/0x10 [ 199.226666][ T9204] __x64_sys_bpf+0xba/0xd0 [ 199.226690][ T9204] do_syscall_64+0x166/0x520 [ 199.226710][ T9204] ? trace_irq_disable+0x3b/0x140 [ 199.226732][ T9204] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.226751][ T9204] ? clear_bhb_loop+0x70/0xc0 [ 199.226781][ T9204] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.226799][ T9204] RIP: 0033:0x7f7b0bf9f559 [ 199.226816][ T9204] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 199.226832][ T9204] RSP: 002b:00007f7b0cf34028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 199.226852][ T9204] RAX: ffffffffffffffda RBX: 00007f7b0c225fa0 RCX: 00007f7b0bf9f559 [ 199.226866][ T9204] RDX: 0000000000000038 RSI: 00002000000000c0 RDI: 000000000000001a [ 199.226877][ T9204] RBP: 00007f7b0cf34090 R08: 0000000000000000 R09: 0000000000000000 [ 199.226889][ T9204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 199.226899][ T9204] R13: 00007f7b0c226038 R14: 00007f7b0c225fa0 R15: 00007ffe18f65678 [ 199.226927][ T9204] [ 199.856254][ T9240] netlink: 'syz.3.940': attribute type 1 has an invalid length. [ 199.892146][ T9240] 8021q: adding VLAN 0 to HW filter on device bond7 [ 199.910889][ T9240] bond6: (slave dummy0): Releasing active interface [ 199.930150][ T9240] bond7: (slave dummy0): making interface the new active one [ 199.940594][ T9240] bond7: (slave dummy0): Enslaving as an active interface with an up link [ 199.943754][ T9240] netlink: 'syz.3.940': attribute type 10 has an invalid length. [ 199.943775][ T9240] netlink: 40 bytes leftover after parsing attributes in process `syz.3.940'. [ 200.545159][ T9266] netlink: 'syz.0.951': attribute type 1 has an invalid length. [ 200.587081][ T9266] 8021q: adding VLAN 0 to HW filter on device bond8 [ 200.587589][ T9269] batman_adv: batadv0: Interface deactivated: syz_tun [ 200.645645][ T9266] dummy0: left promiscuous mode [ 200.646907][ T9271] netlink: 'syz.0.951': attribute type 10 has an invalid length. [ 200.646927][ T9271] netlink: 40 bytes leftover after parsing attributes in process `syz.0.951'. [ 200.699552][ T9266] bond8: (slave dummy0): making interface the new active one [ 200.709672][ T9266] bond8: (slave dummy0): Enslaving as an active interface with an up link [ 200.742149][ T1171] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 200.742224][ T1171] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 200.742239][ T9273] netlink: 8 bytes leftover after parsing attributes in process `syz.2.953'. [ 200.742257][ T1171] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 200.742289][ T1171] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 200.844382][ T9276] IPv6: NLM_F_CREATE should be specified when creating new route [ 200.907025][ T9283] xt_TCPMSS: Only works on TCP SYN packets [ 200.924234][ T9283] netlink: 36 bytes leftover after parsing attributes in process `syz.2.956'. [ 202.423700][ T9344] netlink: 'syz.4.969': attribute type 1 has an invalid length. [ 202.447848][ T9344] 8021q: adding VLAN 0 to HW filter on device bond0 [ 202.463774][ T9344] dummy0: left promiscuous mode [ 202.475412][ T9344] bond0: (slave dummy0): making interface the new active one [ 202.478834][ T9344] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 202.500300][ T9344] netlink: 'syz.4.969': attribute type 10 has an invalid length. [ 202.500326][ T9344] netlink: 40 bytes leftover after parsing attributes in process `syz.4.969'. [ 202.542421][ T9347] FAULT_INJECTION: forcing a failure. [ 202.542421][ T9347] name failslab, interval 1, probability 0, space 0, times 0 [ 202.542446][ T9347] CPU: 1 UID: 0 PID: 9347 Comm: syz.4.970 Not tainted syzkaller #0 PREEMPT(full) [ 202.542458][ T9347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 202.542465][ T9347] Call Trace: [ 202.542470][ T9347] [ 202.542475][ T9347] dump_stack_lvl+0xe8/0x150 [ 202.542500][ T9347] should_fail_ex+0x410/0x560 [ 202.542522][ T9347] should_failslab+0xa8/0x100 [ 202.542541][ T9347] __kmalloc_noprof+0xf9/0x710 [ 202.542555][ T9347] ? tomoyo_encode+0x2ad/0x570 [ 202.542570][ T9347] ? tomoyo_encode+0x2ad/0x570 [ 202.542586][ T9347] tomoyo_encode+0x2ad/0x570 [ 202.542602][ T9347] tomoyo_realpath_from_path+0x5fa/0x640 [ 202.542621][ T9347] ? tomoyo_path_number_perm+0x219/0x5f0 [ 202.542632][ T9347] tomoyo_path_number_perm+0x246/0x5f0 [ 202.542646][ T9347] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 202.542656][ T9347] ? __lock_acquire+0x747/0x2de0 [ 202.542690][ T9347] ? __fget_files+0x2a/0x420 [ 202.542704][ T9347] ? __fget_files+0x2a/0x420 [ 202.542715][ T9347] ? __fget_files+0x2a/0x420 [ 202.542728][ T9347] security_file_ioctl+0xc3/0x2a0 [ 202.542742][ T9347] __se_sys_ioctl+0x47/0x170 [ 202.542758][ T9347] do_syscall_64+0x166/0x520 [ 202.542770][ T9347] ? trace_irq_disable+0x3b/0x140 [ 202.542785][ T9347] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.542795][ T9347] ? clear_bhb_loop+0x70/0xc0 [ 202.542809][ T9347] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.542819][ T9347] RIP: 0033:0x7f476399f559 [ 202.542830][ T9347] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 202.542839][ T9347] RSP: 002b:00007f4764798028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 202.542855][ T9347] RAX: ffffffffffffffda RBX: 00007f4763c25fa0 RCX: 00007f476399f559 [ 202.542863][ T9347] RDX: 0000200000000240 RSI: 000000000000890b RDI: 0000000000000003 [ 202.542882][ T9347] RBP: 00007f4764798090 R08: 0000000000000000 R09: 0000000000000000 [ 202.542888][ T9347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 202.542894][ T9347] R13: 00007f4763c26038 R14: 00007f4763c25fa0 R15: 00007fffcef27cf8 [ 202.542912][ T9347] [ 202.542924][ T9347] ERROR: Out of memory at tomoyo_realpath_from_path. [ 202.734227][ T9353] Unsupported ieee802154 address type: 0 [ 203.532745][ T9355] netlink: 48 bytes leftover after parsing attributes in process `syz.4.973'. [ 204.089573][ T9295] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 204.112893][ T9304] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 204.115563][ T9349] netlink: 'syz.0.971': attribute type 11 has an invalid length. [ 204.115589][ T9349] netlink: 224 bytes leftover after parsing attributes in process `syz.0.971'. [ 204.326135][ T9376] netlink: 'syz.3.978': attribute type 1 has an invalid length. [ 204.326261][ T9376] netlink: 'syz.3.978': attribute type 1 has an invalid length. [ 204.326361][ T9376] netlink: 'syz.3.978': attribute type 1 has an invalid length. [ 204.326459][ T9376] netlink: 'syz.3.978': attribute type 1 has an invalid length. [ 204.827054][ T9407] netlink: 8 bytes leftover after parsing attributes in process `syz.1.990'. [ 205.041773][ T9417] bond8: entered allmulticast mode [ 205.042207][ T9417] 8021q: adding VLAN 0 to HW filter on device bond8 [ 205.093536][ T9417] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 205.095438][ T9417] macvlan2: entered allmulticast mode [ 205.095461][ T9417] bond0: entered allmulticast mode [ 205.095478][ T9417] bond_slave_0: entered allmulticast mode [ 205.095499][ T9417] bond_slave_1: entered allmulticast mode [ 205.128941][ T9417] bond8: (slave macvlan2): Enslaving as a backup interface with an up link [ 205.151267][ T13] bond8: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 205.192175][ T9417] ip6gretap1: entered allmulticast mode [ 205.193424][ T9420] netlink: 14 bytes leftover after parsing attributes in process `syz.3.993'. [ 205.203625][ T9417] bond8: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 205.264282][ T9420] bond0 (unregistering): left allmulticast mode [ 205.264311][ T9420] bond_slave_0: left allmulticast mode [ 205.264330][ T9420] bond_slave_1: left allmulticast mode [ 205.280647][ T990] bond8: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 205.308101][ T9420] bond8: (slave macvlan2): Releasing backup interface [ 205.308128][ T9420] bond8: (slave macvlan2): the permanent HWaddr of slave - 66:19:58:46:a3:66 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 205.309811][ T9420] macvlan2 (unregistering): left allmulticast mode [ 205.368763][ T9420] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 205.380456][ T3287] bond8: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 205.386304][ T9431] netlink: 'syz.4.997': attribute type 11 has an invalid length. [ 205.392887][ T9420] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 205.409698][ T9420] bond0 (unregistering): Released all slaves [ 205.449401][ T9432] FAULT_INJECTION: forcing a failure. [ 205.449401][ T9432] name failslab, interval 1, probability 0, space 0, times 0 [ 205.449437][ T9432] CPU: 0 UID: 0 PID: 9432 Comm: syz.0.996 Not tainted syzkaller #0 PREEMPT(full) [ 205.449458][ T9432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 205.449470][ T9432] Call Trace: [ 205.449478][ T9432] [ 205.449486][ T9432] dump_stack_lvl+0xe8/0x150 [ 205.449521][ T9432] should_fail_ex+0x410/0x560 [ 205.449575][ T9432] should_failslab+0xa8/0x100 [ 205.449605][ T9432] __kmalloc_noprof+0xf9/0x710 [ 205.449626][ T9432] ? __se_sys_ioctl+0xfc/0x170 [ 205.449657][ T9432] ? do_syscall_64+0x166/0x520 [ 205.449674][ T9432] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.449692][ T9432] ? fib_create_info+0x16fe/0x3170 [ 205.449712][ T9432] ? fib_create_info+0x16fe/0x3170 [ 205.449737][ T9432] fib_create_info+0x16fe/0x3170 [ 205.449782][ T9432] fib_table_insert+0xcb/0x1b10 [ 205.449806][ T9432] ? rcu_is_watching+0x16/0xb0 [ 205.449843][ T9432] ? ip_rt_ioctl+0x94c/0x1240 [ 205.449867][ T9432] ? fib_new_table+0x14b/0x3f0 [ 205.449898][ T9432] ip_rt_ioctl+0x4da/0x1240 [ 205.449934][ T9432] ? __pfx_ip_rt_ioctl+0x10/0x10 [ 205.449956][ T9432] ? lock_acquire+0x115/0x350 [ 205.450003][ T9432] inet_ioctl+0x49d/0x560 [ 205.450032][ T9432] ? __pfx_inet_ioctl+0x10/0x10 [ 205.450081][ T9432] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 205.450112][ T9432] sock_do_ioctl+0x101/0x320 [ 205.450138][ T9432] ? __pfx_sock_do_ioctl+0x10/0x10 [ 205.450176][ T9432] sock_ioctl+0x57a/0x7e0 [ 205.450196][ T9432] ? __fget_files+0x2a/0x420 [ 205.450214][ T9432] ? __pfx_sock_ioctl+0x10/0x10 [ 205.450237][ T9432] ? __fget_files+0x2a/0x420 [ 205.450254][ T9432] ? __fget_files+0x2a/0x420 [ 205.450275][ T9432] ? bpf_lsm_file_ioctl+0x9/0x20 [ 205.450295][ T9432] ? __pfx_sock_ioctl+0x10/0x10 [ 205.450313][ T9432] __se_sys_ioctl+0xfc/0x170 [ 205.450336][ T9432] do_syscall_64+0x166/0x520 [ 205.450353][ T9432] ? trace_irq_disable+0x3b/0x140 [ 205.450373][ T9432] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.450391][ T9432] ? clear_bhb_loop+0x70/0xc0 [ 205.450413][ T9432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.450431][ T9432] RIP: 0033:0x7f7b0bf9f559 [ 205.450448][ T9432] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 205.450461][ T9432] RSP: 002b:00007f7b0cf34028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 205.450481][ T9432] RAX: ffffffffffffffda RBX: 00007f7b0c225fa0 RCX: 00007f7b0bf9f559 [ 205.450492][ T9432] RDX: 0000200000000240 RSI: 000000000000890b RDI: 0000000000000003 [ 205.450502][ T9432] RBP: 00007f7b0cf34090 R08: 0000000000000000 R09: 0000000000000000 [ 205.450512][ T9432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 205.450522][ T9432] R13: 00007f7b0c226038 R14: 00007f7b0c225fa0 R15: 00007ffe18f65678 [ 205.450551][ T9432] [ 205.481067][ T3287] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 205.481585][ T3287] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 205.481741][ T3287] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 205.481774][ T3287] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 205.804631][ T9439] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 205.815329][ T9443] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 205.927301][ T9449] FAULT_INJECTION: forcing a failure. [ 205.927301][ T9449] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 205.927338][ T9449] CPU: 0 UID: 0 PID: 9449 Comm: syz.0.1002 Not tainted syzkaller #0 PREEMPT(full) [ 205.927359][ T9449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 205.927371][ T9449] Call Trace: [ 205.927379][ T9449] [ 205.927388][ T9449] dump_stack_lvl+0xe8/0x150 [ 205.927422][ T9449] should_fail_ex+0x410/0x560 [ 205.927455][ T9449] _copy_from_user+0x2d/0xb0 [ 205.927487][ T9449] generic_map_update_batch+0x662/0xad0 [ 205.927521][ T9449] ? __pfx_generic_map_update_batch+0x10/0x10 [ 205.927540][ T9449] ? __fget_files+0x3a2/0x420 [ 205.927559][ T9449] ? __fget_files+0x2a/0x420 [ 205.927583][ T9449] ? fdget+0x1ac/0x250 [ 205.927602][ T9449] ? __pfx_generic_map_update_batch+0x10/0x10 [ 205.927622][ T9449] bpf_map_do_batch+0x391/0x630 [ 205.927654][ T9449] __sys_bpf+0xbe5/0xd90 [ 205.927686][ T9449] ? __pfx___sys_bpf+0x10/0x10 [ 205.927724][ T9449] ? __fget_files+0x2a/0x420 [ 205.927758][ T9449] ? ksys_write+0x242/0x270 [ 205.927782][ T9449] ? __pfx_ksys_write+0x10/0x10 [ 205.927805][ T9449] __x64_sys_bpf+0xba/0xd0 [ 205.927849][ T9449] do_syscall_64+0x166/0x520 [ 205.927868][ T9449] ? trace_irq_disable+0x3b/0x140 [ 205.927889][ T9449] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.927907][ T9449] ? clear_bhb_loop+0x70/0xc0 [ 205.927931][ T9449] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.927950][ T9449] RIP: 0033:0x7f7b0bf9f559 [ 205.927967][ T9449] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 205.927983][ T9449] RSP: 002b:00007f7b0cf34028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 205.928004][ T9449] RAX: ffffffffffffffda RBX: 00007f7b0c225fa0 RCX: 00007f7b0bf9f559 [ 205.928017][ T9449] RDX: 0000000000000038 RSI: 00002000000000c0 RDI: 000000000000001a [ 205.928030][ T9449] RBP: 00007f7b0cf34090 R08: 0000000000000000 R09: 0000000000000000 [ 205.928042][ T9449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 205.928053][ T9449] R13: 00007f7b0c226038 R14: 00007f7b0c225fa0 R15: 00007ffe18f65678 [ 205.928086][ T9449] [ 205.947892][ T9443] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1001'. [ 205.947913][ T9443] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1001'. [ 206.310913][ T9476] bond8: option mode: unable to set because the bond device has slaves [ 206.324420][ T9478] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1009'. [ 206.411182][ T9480] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1011'. [ 206.700776][ T990] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.700828][ T990] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.700861][ T990] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.700891][ T990] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.738725][ T9490] ip_tables: iptables: counters copy to user failed while replacing table [ 206.754832][ T9495] FAULT_INJECTION: forcing a failure. [ 206.754832][ T9495] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 206.754866][ T9495] CPU: 0 UID: 0 PID: 9495 Comm: syz.2.1015 Not tainted syzkaller #0 PREEMPT(full) [ 206.754889][ T9495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 206.754901][ T9495] Call Trace: [ 206.754909][ T9495] [ 206.754918][ T9495] dump_stack_lvl+0xe8/0x150 [ 206.754953][ T9495] should_fail_ex+0x410/0x560 [ 206.754985][ T9495] _copy_from_user+0x2d/0xb0 [ 206.755013][ T9495] generic_map_update_batch+0x6b1/0xad0 [ 206.755046][ T9495] ? __pfx_generic_map_update_batch+0x10/0x10 [ 206.755064][ T9495] ? __fget_files+0x3a2/0x420 [ 206.755083][ T9495] ? __fget_files+0x2a/0x420 [ 206.755107][ T9495] ? fdget+0x1ac/0x250 [ 206.755125][ T9495] ? __pfx_generic_map_update_batch+0x10/0x10 [ 206.755144][ T9495] bpf_map_do_batch+0x391/0x630 [ 206.755175][ T9495] __sys_bpf+0xbe5/0xd90 [ 206.755213][ T9495] ? __pfx___sys_bpf+0x10/0x10 [ 206.755247][ T9495] ? __fget_files+0x2a/0x420 [ 206.755283][ T9495] ? ksys_write+0x242/0x270 [ 206.755306][ T9495] ? __pfx_ksys_write+0x10/0x10 [ 206.755333][ T9495] __x64_sys_bpf+0xba/0xd0 [ 206.755357][ T9495] do_syscall_64+0x166/0x520 [ 206.755375][ T9495] ? trace_irq_disable+0x3b/0x140 [ 206.755395][ T9495] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.755414][ T9495] ? clear_bhb_loop+0x70/0xc0 [ 206.755436][ T9495] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.755454][ T9495] RIP: 0033:0x7f1f1859f559 [ 206.755471][ T9495] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 206.755486][ T9495] RSP: 002b:00007f1f193be028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 206.755506][ T9495] RAX: ffffffffffffffda RBX: 00007f1f18825fa0 RCX: 00007f1f1859f559 [ 206.755519][ T9495] RDX: 0000000000000038 RSI: 00002000000000c0 RDI: 000000000000001a [ 206.755531][ T9495] RBP: 00007f1f193be090 R08: 0000000000000000 R09: 0000000000000000 [ 206.755543][ T9495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 206.755554][ T9495] R13: 00007f1f18826038 R14: 00007f1f18825fa0 R15: 00007ffc52e532b8 [ 206.755585][ T9495] [ 206.995057][ T9499] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 206.997052][ T9499] macvlan2: entered allmulticast mode [ 206.997075][ T9499] bond0: entered allmulticast mode [ 206.997091][ T9499] dummy0: entered allmulticast mode [ 206.998279][ T9499] bond2: (slave macvlan2): Enslaving as a backup interface with an up link [ 207.013029][ T6454] dummy0: entered promiscuous mode [ 207.136805][ T9505] validate_nla: 61 callbacks suppressed [ 207.136852][ T9505] netlink: 'syz.0.1020': attribute type 1 has an invalid length. [ 207.136865][ T9505] netlink: 'syz.0.1020': attribute type 3 has an invalid length. [ 207.136877][ T9505] netlink: 172 bytes leftover after parsing attributes in process `syz.0.1020'. [ 207.136900][ T9505] NCSI netlink: No device for ifindex 813332851 [ 207.313423][ T9509] bond9: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 207.315944][ T9509] bond9 (unregistering): Released all slaves [ 207.381627][ T9515] bond4: entered allmulticast mode [ 207.382029][ T9515] 8021q: adding VLAN 0 to HW filter on device bond4 [ 207.393400][ T9509] ip_tables: iptables: counters copy to user failed while replacing table [ 207.429000][ T9515] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 207.448879][ T9515] macvlan2: entered allmulticast mode [ 207.449877][ T9515] bond0: entered allmulticast mode [ 207.449899][ T9515] bond_slave_0: entered allmulticast mode [ 207.449919][ T9515] bond_slave_1: entered allmulticast mode [ 207.455443][ T9515] bond4: (slave macvlan2): Enslaving as a backup interface with an up link [ 207.492397][ T13] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 207.513170][ T9523] ip6gretap1: entered allmulticast mode [ 207.513826][ T9523] bond4: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 207.543617][ T9515] bond0 (unregistering): left allmulticast mode [ 207.543644][ T9515] bond_slave_0: left allmulticast mode [ 207.543663][ T9515] bond_slave_1: left allmulticast mode [ 207.550329][ T9515] bond4: (slave macvlan2): Removing an active aggregator [ 207.561176][ T9515] bond4: (slave macvlan2): Releasing backup interface [ 207.561200][ T9515] bond4: (slave macvlan2): the permanent HWaddr of slave - aa:31:ac:da:6b:75 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 207.588008][ T9515] macvlan2 (unregistering): left allmulticast mode [ 207.613874][ T990] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 207.631718][ T9515] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 207.636467][ T9515] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 207.646615][ T9515] bond0 (unregistering): Released all slaves [ 207.679235][ T9528] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 207.731261][ T13] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 207.820617][ T9536] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 207.822298][ T9536] macvlan2: entered allmulticast mode [ 207.822318][ T9536] bond0: entered allmulticast mode [ 207.822823][ T9536] bond5: (slave macvlan2): Enslaving as a backup interface with a down link [ 208.124961][ T9564] __nla_validate_parse: 1 callbacks suppressed [ 208.124981][ T9564] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1034'. [ 208.198350][ T9568] bond3: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 208.199589][ T9568] bond3 (unregistering): Released all slaves [ 208.624963][ T9578] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 208.645344][ T9578] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 208.753853][ T9578] bond0: left allmulticast mode [ 208.753874][ T9578] dummy0: left allmulticast mode [ 208.771163][ T13] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.771211][ T13] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.771244][ T13] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.771274][ T13] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.848552][ T9538] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 211.191829][ T5646] Bluetooth: hci2: command 0x0406 tx timeout [ 211.191943][ T5646] Bluetooth: hci0: command 0x0406 tx timeout [ 211.191988][ T5646] Bluetooth: hci1: command 0x0406 tx timeout [ 211.192047][ T5646] Bluetooth: hci3: command 0x0406 tx timeout [ 211.344780][ T9602] bond6: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 211.346092][ T9602] bond6 (unregistering): Released all slaves [ 211.384725][ T9611] net_ratelimit: 2 callbacks suppressed [ 211.384745][ T9611] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 211.508084][ T9615] xt_policy: neither incoming nor outgoing policy selected [ 211.790467][ T9640] bridge0: port 3(syz_tun) entered blocking state [ 211.790578][ T9640] bridge0: port 3(syz_tun) entered disabled state [ 211.790783][ T9640] syz_tun: entered allmulticast mode [ 211.794396][ T9636] netlink: 'syz.1.1057': attribute type 4 has an invalid length. [ 211.794418][ T9636] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1057'. [ 211.797437][ T9642] ip6t_REJECT: ECHOREPLY is not supported [ 211.797802][ T9640] syz_tun: entered promiscuous mode [ 211.804395][ T9642] ip6t_REJECT: ECHOREPLY is not supported [ 211.804531][ T9642] ip6t_REJECT: ECHOREPLY is not supported [ 211.804630][ T9642] ip6t_REJECT: ECHOREPLY is not supported [ 211.804727][ T9642] ip6t_REJECT: ECHOREPLY is not supported [ 211.804824][ T9642] ip6t_REJECT: ECHOREPLY is not supported [ 211.804920][ T9642] ip6t_REJECT: ECHOREPLY is not supported [ 211.805017][ T9642] ip6t_REJECT: ECHOREPLY is not supported [ 211.805113][ T9642] ip6t_REJECT: ECHOREPLY is not supported [ 211.805209][ T9642] ip6t_REJECT: ECHOREPLY is not supported [ 212.034225][ T9653] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 212.135859][ T9657] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 212.138306][ T9657] bond0 (unregistering): Released all slaves [ 212.525845][ T9680] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 212.527793][ T9680] macvlan3: entered allmulticast mode [ 212.527813][ T9680] bond0: entered allmulticast mode [ 212.527830][ T9680] dummy0: entered allmulticast mode [ 212.529024][ T9680] bond2: (slave macvlan3): Enslaving as a backup interface with an up link [ 212.665058][ T9689] ip_tables: iptables: counters copy to user failed while replacing table [ 212.741183][ T9691] rdma_rxe: rxe_newlink: failed to add lo [ 212.875421][ T9697] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1081'. [ 212.893496][ T9700] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1080'. [ 212.905480][ T9693] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 212.912391][ T9693] bond0 (unregistering): Released all slaves [ 213.099367][ T9714] netlink: 120 bytes leftover after parsing attributes in process `syz.1.1085'. [ 213.276939][ T9728] ip_tables: iptables: counters copy to user failed while replacing table [ 213.466538][ T9736] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1093'. [ 213.485597][ T9736] bridge1: entered promiscuous mode [ 213.485623][ T9736] bridge1: entered allmulticast mode [ 213.501898][ T9736] team0: Port device bridge1 added [ 213.508605][ T9736] bridge0: port 3(team0) entered blocking state [ 213.516138][ T9736] bridge0: port 3(team0) entered disabled state [ 213.516508][ T9736] team0: entered allmulticast mode [ 213.516528][ T9736] team_slave_0: entered allmulticast mode [ 213.516590][ T9736] team_slave_1: entered allmulticast mode [ 213.529960][ T9736] team0: entered promiscuous mode [ 213.529983][ T9736] team_slave_0: entered promiscuous mode [ 213.532297][ T9736] team_slave_1: entered promiscuous mode [ 213.616108][ T9739] Unsupported ieee802154 address type: 0 [ 213.656316][ T9741] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1094'. [ 213.768843][ T9747] netlink: 'syz.1.1095': attribute type 9 has an invalid length. [ 213.801812][ T9750] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1097'. [ 213.861199][ T9755] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1098'. [ 214.777577][ T9775] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1105'. [ 214.923512][ T9783] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1109'. [ 215.066269][ T9794] ip_tables: iptables: counters copy to user failed while replacing table [ 215.874363][ T9813] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1121'. [ 216.113968][ T9716] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 216.364272][ T9829] netlink: 'syz.0.1127': attribute type 1 has an invalid length. [ 216.447803][ T9836] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1129'. [ 216.459350][ T9829] 8021q: adding VLAN 0 to HW filter on device bond10 [ 216.476531][ T9829] netlink: 'syz.0.1127': attribute type 10 has an invalid length. [ 216.476555][ T9829] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1127'. [ 216.516251][ T9834] bond8: (slave dummy0): Releasing active interface [ 216.555622][ T9834] bond10: (slave dummy0): making interface the new active one [ 216.559429][ T9834] bond10: (slave dummy0): Enslaving as an active interface with an up link [ 216.666483][ T9841] bond4: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 216.669287][ T9841] bond4 (unregistering): Released all slaves [ 216.725225][ T9850] ip_tables: iptables: counters copy to user failed while replacing table [ 216.741597][ T9849] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1132'. [ 217.317645][ T9888] bond4: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 217.333728][ T9888] bond4 (unregistering): Released all slaves [ 217.612010][ T9903] netlink: 'syz.3.1152': attribute type 3 has an invalid length. [ 217.612996][ T9903] netlink: 'syz.3.1152': attribute type 4 has an invalid length. [ 218.075008][ T9932] bond5: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 218.077711][ T9932] bond5 (unregistering): Released all slaves [ 218.077946][ T9935] ip_tables: iptables: counters copy to user failed while replacing table [ 218.220133][ T9944] FAULT_INJECTION: forcing a failure. [ 218.220133][ T9944] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 218.220173][ T9944] CPU: 1 UID: 0 PID: 9944 Comm: syz.1.1165 Not tainted syzkaller #0 PREEMPT(full) [ 218.220195][ T9944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 218.220207][ T9944] Call Trace: [ 218.220216][ T9944] [ 218.220229][ T9944] dump_stack_lvl+0xe8/0x150 [ 218.220262][ T9944] should_fail_ex+0x410/0x560 [ 218.220293][ T9944] _copy_from_user+0x2d/0xb0 [ 218.220320][ T9944] ___sys_sendmsg+0x1c6/0x360 [ 218.220346][ T9944] ? __lock_acquire+0x747/0x2de0 [ 218.220370][ T9944] ? __pfx____sys_sendmsg+0x10/0x10 [ 218.220434][ T9944] ? __fget_files+0x3a2/0x420 [ 218.220451][ T9944] ? __fget_files+0x2a/0x420 [ 218.220476][ T9944] __x64_sys_sendmsg+0x1b1/0x290 [ 218.220519][ T9944] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 218.220575][ T9944] do_syscall_64+0x166/0x520 [ 218.220595][ T9944] ? trace_irq_disable+0x3b/0x140 [ 218.220617][ T9944] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.220637][ T9944] ? clear_bhb_loop+0x70/0xc0 [ 218.220660][ T9944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.220679][ T9944] RIP: 0033:0x7f837cf9f559 [ 218.220697][ T9944] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 218.220713][ T9944] RSP: 002b:00007f837de07028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 218.220743][ T9944] RAX: ffffffffffffffda RBX: 00007f837d225fa0 RCX: 00007f837cf9f559 [ 218.220756][ T9944] RDX: 0000000000008000 RSI: 0000200000000040 RDI: 0000000000000003 [ 218.220769][ T9944] RBP: 00007f837de07090 R08: 0000000000000000 R09: 0000000000000000 [ 218.220781][ T9944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 218.220793][ T9944] R13: 00007f837d226038 R14: 00007f837d225fa0 R15: 00007ffcf9b4f068 [ 218.220825][ T9944] [ 218.565629][ T9954] __nla_validate_parse: 5 callbacks suppressed [ 218.565655][ T9954] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1169'. [ 218.699917][ T9970] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1174'. [ 218.783889][ T9973] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1175'. [ 219.198030][ T9998] nbd: must specify at least one socket [ 254.016579][T10014] netlink: 'syz.0.1188': attribute type 21 has an invalid length. [ 254.288208][T10038] nbd: must specify at least one socket [ 255.180705][T10074] nbd: must specify at least one socket [ 255.532941][T10095] ip_tables: iptables: counters copy to user failed while replacing table [ 255.725683][T10104] nbd: must specify a size in bytes for the device [ 256.202822][T10121] xt_hashlimit: size too large, truncated to 1048576 [ 256.459584][T10132] nbd: must specify a size in bytes for the device [ 256.944100][T10152] ip_tables: iptables: counters copy to user failed while replacing table [ 257.027464][T10156] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1241'. [ 257.075119][T10158] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1243'. [ 257.075161][T10158] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1243'. [ 257.166141][T10160] nbd: must specify a size in bytes for the device [ 257.166677][T10160] block nbd4: NBD_DISCONNECT [ 257.166717][T10160] block nbd4: Send disconnect failed -32 [ 257.201605][T10163] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 257.777751][T10191] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1256'. [ 257.899242][T10195] nbd0: detected capacity change from 0 to 63 [ 257.912483][ T4951] block nbd0: Receive control failed (result -104) [ 257.913233][ T2621] block nbd0: Dead connection, failed to find a fallback [ 257.913251][ T2621] block nbd0: shutting down sockets [ 257.913263][ T2621] blk_print_req_error: 252 callbacks suppressed [ 257.913284][ T2621] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 257.913308][ T2621] buffer_io_error: 286 callbacks suppressed [ 257.913316][ T2621] Buffer I/O error on dev nbd0, logical block 1, async page read [ 257.915083][ T2621] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 2 prio class 2 [ 257.915110][ T2621] Buffer I/O error on dev nbd0, logical block 2, async page read [ 257.915143][ T2621] Buffer I/O error on dev nbd0, logical block 3, async page read [ 258.001859][T10197] xt_hashlimit: size too large, truncated to 1048576 [ 258.074847][T10198] bridge_slave_0 (unregistering): left allmulticast mode [ 258.074891][T10198] bridge_slave_0 (unregistering): left promiscuous mode [ 258.074999][T10198] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.501460][T10222] veth0: entered promiscuous mode [ 258.509842][T10224] ip_tables: iptables: counters copy to user failed while replacing table [ 258.586790][T10233] nbd1: detected capacity change from 0 to 63 [ 258.589309][ T4951] block nbd1: Receive control failed (result -32) [ 258.628300][ T1954] block nbd1: Dead connection, failed to find a fallback [ 258.628341][ T1954] block nbd1: shutting down sockets [ 258.628355][ T1954] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 258.628400][ T1954] Buffer I/O error on dev nbd1, logical block 0, async page read [ 258.638576][ T1954] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 2 prio class 2 [ 258.638609][ T1954] Buffer I/O error on dev nbd1, logical block 1, async page read [ 258.638627][ T1954] Buffer I/O error on dev nbd1, logical block 2, async page read [ 258.670902][ T2621] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 258.670937][ T2621] Buffer I/O error on dev nbd1, logical block 3, async page read [ 258.671140][ T2621] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 258.671191][ T2621] Buffer I/O error on dev nbd1, logical block 0, async page read [ 258.671205][ T2621] Buffer I/O error on dev nbd1, logical block 1, async page read [ 258.671218][ T2621] Buffer I/O error on dev nbd1, logical block 2, async page read [ 258.671343][ T2621] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 258.671479][ T2621] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 258.672327][ T2621] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 258.672547][ T2621] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 258.673049][T10234] ldm_validate_partition_table(): Disk read failed. [ 258.673912][T10234] Dev nbd1: unable to read RDB block 0 [ 258.675898][T10234] nbd1: unable to read partition table [ 258.708623][T10234] ldm_validate_partition_table(): Disk read failed. [ 258.709203][T10234] Dev nbd1: unable to read RDB block 0 [ 258.713216][T10234] nbd1: unable to read partition table [ 258.823454][T10236] netlink: 'syz.2.1271': attribute type 1 has an invalid length. [ 258.872563][T10238] rdma_rxe: rxe_newlink: failed to add lo [ 258.922596][T10221] veth0: left promiscuous mode [ 258.935704][T10241] netlink: 'syz.2.1271': attribute type 10 has an invalid length. [ 258.935729][T10241] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1271'. [ 258.974599][T10236] 8021q: adding VLAN 0 to HW filter on device bond5 [ 258.976989][T10239] dummy0: left promiscuous mode [ 258.995101][T10239] bond5: (slave dummy0): making interface the new active one [ 258.996083][T10239] bond5: (slave dummy0): Enslaving as an active interface with an up link [ 259.023299][T10241] bond5: (slave dummy0): Releasing active interface [ 259.254093][T10246] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1274'. [ 259.308870][ T6445] ------------[ cut here ]------------ [ 259.308889][ T6445] 1 [ 259.308909][ T6445] WARNING: net/netfilter/nf_flow_table_core.c:553 at nf_flow_table_extend_ct_timeout+0x1ee/0x2f0, CPU#0: kworker/0:10/6445 [ 259.331664][ T6445] Modules linked in: [ 259.335734][ T6445] CPU: 0 UID: 0 PID: 6445 Comm: kworker/0:10 Not tainted syzkaller #0 PREEMPT(full) [ 259.346452][ T6445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 259.357234][ T6445] Workqueue: events_power_efficient nf_flow_offload_work_gc [ 259.365487][ T6445] RIP: 0010:nf_flow_table_extend_ct_timeout+0x1ee/0x2f0 [ 259.373204][ T6445] Code: 00 00 00 41 83 ff 06 0f 84 9a 00 00 00 41 83 ff 05 0f 85 b0 00 00 00 e8 a0 a6 a0 f7 41 bf 30 75 00 00 eb 0f e8 93 a6 a0 f7 90 <0f> 0b 90 41 bf 01 00 00 00 48 c7 c0 80 f2 a0 8f 48 c1 e8 03 42 80 [ 259.393278][ T6445] RSP: 0018:ffffc9000d167930 EFLAGS: 00010293 [ 259.399961][ T6445] RAX: ffffffff8a27bf8d RBX: ffff88801f73e300 RCX: ffff88807bda3e80 [ 259.408292][ T6445] RDX: 0000000000000000 RSI: ffffffff9130fa60 RDI: 000000000000002f [ 259.416747][ T6445] RBP: 00000000000033e6 R08: ffff88807bda3e80 R09: 0000000000000002 [ 259.424817][ T6445] R10: 0000000000000011 R11: 0000000000000000 R12: dffffc0000000000 [ 259.433678][ T6445] R13: 1ffff11003ee7c78 R14: ffff88801f73e348 R15: 000000000000002f [ 259.441754][ T6445] FS: 0000000000000000(0000) GS:ffff888123a6b000(0000) knlGS:0000000000000000 [ 259.451026][ T6445] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 259.457667][ T6445] CR2: 00007f47647556c8 CR3: 000000000fb48000 CR4: 00000000003526f0 [ 259.460656][T10264] nbd2: detected capacity change from 0 to 63 [ 259.461484][T10264] block nbd1: NBD_DISCONNECT [ 259.461508][T10264] block nbd1: Send disconnect failed -32 [ 259.482987][ T6445] Call Trace: [ 259.486292][ T6445] [ 259.489276][ T6445] nf_flow_offload_gc_step+0x5aa/0x840 [ 259.495372][ T6445] nf_flow_table_iterate+0x13c/0x1f0 [ 259.500764][ T6445] ? __pfx_nf_flow_offload_gc_step+0x10/0x10 [ 259.506761][ T6445] ? __pfx_nf_flow_table_iterate+0x10/0x10 [ 259.513219][ T6445] ? rcu_is_watching+0x16/0xb0 [ 259.518110][ T6445] ? process_scheduled_works+0x97a/0x1630 [ 259.524211][ T6445] nf_flow_offload_work_gc+0x22/0x70 [ 259.529540][ T6445] process_scheduled_works+0xc3d/0x1630 [ 259.535575][ T6445] ? __pfx_process_scheduled_works+0x10/0x10 [ 259.541670][ T6445] ? assign_work+0x3cf/0x5d0 [ 259.546305][ T6445] worker_thread+0xa47/0xfb0 [ 259.551519][ T6445] kthread+0x38b/0x480 [ 259.555601][ T6445] ? __pfx_worker_thread+0x10/0x10 [ 259.560869][ T6445] ? __pfx_kthread+0x10/0x10 [ 259.565530][ T6445] ret_from_fork+0x514/0xb70 [ 259.570532][ T6445] ? __pfx_ret_from_fork+0x10/0x10 [ 259.575679][ T6445] ? __switch_to+0xc78/0x1410 [ 259.580760][ T6445] ? __pfx_kthread+0x10/0x10 [ 259.585414][ T6445] ret_from_fork_asm+0x1a/0x30 [ 259.590710][ T6445] [ 259.593773][ T6445] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 259.601074][ T6445] CPU: 0 UID: 0 PID: 6445 Comm: kworker/0:10 Not tainted syzkaller #0 PREEMPT(full) [ 259.611414][ T6445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 259.621492][ T6445] Workqueue: events_power_efficient nf_flow_offload_work_gc [ 259.628984][ T6445] Call Trace: [ 259.632276][ T6445] [ 259.635309][ T6445] vpanic+0x56d/0xa60 [ 259.639343][ T6445] ? __pfx__printk+0x10/0x10 [ 259.643949][ T6445] ? __pfx_vpanic+0x10/0x10 [ 259.648473][ T6445] ? is_bpf_text_address+0x292/0x2b0 [ 259.653786][ T6445] ? is_bpf_text_address+0x26/0x2b0 [ 259.659007][ T6445] panic+0xc5/0xd0 [ 259.662751][ T6445] ? __pfx_panic+0x10/0x10 [ 259.667206][ T6445] ? ret_from_fork_asm+0x1a/0x30 [ 259.672319][ T6445] __warn+0x315/0x4c0 [ 259.676323][ T6445] ? nf_flow_table_extend_ct_timeout+0x1ee/0x2f0 [ 259.682678][ T6445] ? nf_flow_table_extend_ct_timeout+0x1ee/0x2f0 [ 259.689050][ T6445] __report_bug+0x276/0x570 [ 259.693587][ T6445] ? nf_flow_table_extend_ct_timeout+0x1ee/0x2f0 [ 259.699959][ T6445] ? __pfx___report_bug+0x10/0x10 [ 259.705013][ T6445] ? __lock_acquire+0x747/0x2de0 [ 259.709982][ T6445] ? nf_flow_table_extend_ct_timeout+0x1ee/0x2f0 [ 259.716414][ T6445] report_bug+0x16b/0x220 [ 259.720766][ T6445] ? nf_flow_table_extend_ct_timeout+0x1ee/0x2f0 [ 259.727108][ T6445] ? nf_flow_table_extend_ct_timeout+0x1f0/0x2f0 [ 259.733451][ T6445] handle_bug+0x9c/0x200 [ 259.737711][ T6445] exc_invalid_op+0x1a/0x50 [ 259.742230][ T6445] asm_exc_invalid_op+0x1a/0x20 [ 259.747094][ T6445] RIP: 0010:nf_flow_table_extend_ct_timeout+0x1ee/0x2f0 [ 259.754038][ T6445] Code: 00 00 00 41 83 ff 06 0f 84 9a 00 00 00 41 83 ff 05 0f 85 b0 00 00 00 e8 a0 a6 a0 f7 41 bf 30 75 00 00 eb 0f e8 93 a6 a0 f7 90 <0f> 0b 90 41 bf 01 00 00 00 48 c7 c0 80 f2 a0 8f 48 c1 e8 03 42 80 [ 259.773659][ T6445] RSP: 0018:ffffc9000d167930 EFLAGS: 00010293 [ 259.779731][ T6445] RAX: ffffffff8a27bf8d RBX: ffff88801f73e300 RCX: ffff88807bda3e80 [ 259.787707][ T6445] RDX: 0000000000000000 RSI: ffffffff9130fa60 RDI: 000000000000002f [ 259.795680][ T6445] RBP: 00000000000033e6 R08: ffff88807bda3e80 R09: 0000000000000002 [ 259.803731][ T6445] R10: 0000000000000011 R11: 0000000000000000 R12: dffffc0000000000 [ 259.811700][ T6445] R13: 1ffff11003ee7c78 R14: ffff88801f73e348 R15: 000000000000002f [ 259.819686][ T6445] ? nf_flow_table_extend_ct_timeout+0x1ed/0x2f0 [ 259.826039][ T6445] nf_flow_offload_gc_step+0x5aa/0x840 [ 259.831518][ T6445] nf_flow_table_iterate+0x13c/0x1f0 [ 259.836812][ T6445] ? __pfx_nf_flow_offload_gc_step+0x10/0x10 [ 259.842795][ T6445] ? __pfx_nf_flow_table_iterate+0x10/0x10 [ 259.848633][ T6445] ? rcu_is_watching+0x16/0xb0 [ 259.853407][ T6445] ? process_scheduled_works+0x97a/0x1630 [ 259.859145][ T6445] nf_flow_offload_work_gc+0x22/0x70 [ 259.864440][ T6445] process_scheduled_works+0xc3d/0x1630 [ 259.870020][ T6445] ? __pfx_process_scheduled_works+0x10/0x10 [ 259.876071][ T6445] ? assign_work+0x3cf/0x5d0 [ 259.880678][ T6445] worker_thread+0xa47/0xfb0 [ 259.885308][ T6445] kthread+0x38b/0x480 [ 259.889390][ T6445] ? __pfx_worker_thread+0x10/0x10 [ 259.894510][ T6445] ? __pfx_kthread+0x10/0x10 [ 259.899132][ T6445] ret_from_fork+0x514/0xb70 [ 259.903752][ T6445] ? __pfx_ret_from_fork+0x10/0x10 [ 259.908877][ T6445] ? __switch_to+0xc78/0x1410 [ 259.913611][ T6445] ? __pfx_kthread+0x10/0x10 [ 259.918213][ T6445] ret_from_fork_asm+0x1a/0x30 [ 259.923012][ T6445] [ 259.926423][ T6445] Kernel Offset: disabled [ 259.930762][ T6445] Rebooting in 86400 seconds..