last executing test programs: 2.630879492s ago: executing program 3 (id=4838): r0 = socket$kcm(0x2, 0xa, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'ipvlan0\x00'}) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x10448) syz_emit_ethernet(0x1e, &(0x7f0000000040)={@random="05853843803c", @empty, @void, {@can={0xc, {{0x0, 0x1, 0x0, 0x1}, 0x6, 0x2, 0x0, 0x0, "0b8a051e3dbb589e"}}}}, &(0x7f0000000200)={0x1, 0x2, [0x475, 0xad, 0x87, 0xa45]}) r2 = socket(0x2d, 0x2, 0x0) setsockopt$netrom_NETROM_T1(r2, 0x103, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x4000010, r1, 0x0) sendto(r0, 0x0, 0x11, 0x20000000, &(0x7f00000004c0)=@rc={0x1f, @none, 0xfe}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x15, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x13}, [@ldst={0x4, 0x0, 0x4, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 2.443924417s ago: executing program 3 (id=4843): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="310300200000000000400800000008000300", @ANYRES32=r2, @ANYBLOB='\a\x00'], 0x24}, 0x1, 0x0, 0x0, 0x400400c}, 0x0) 2.363446315s ago: executing program 3 (id=4845): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x0, 0xca, 0x3, 0x0, 0x1, 0x3}, 0x50) r1 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x4, @empty, 0x10}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) close(0x3) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r10, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') r11 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r12 = socket(0x14, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r12, 0x61d0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r12, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYRES32=r11], 0x1c}, 0x1, 0x0, 0x0, 0x20040824}, 0x8040) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x1d, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0x2}, {}, {0x85, 0x0, 0x0, 0x9c}}}, &(0x7f0000000200)='GPL\x00'}, 0x90) 1.976129782s ago: executing program 0 (id=4850): socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x1000080002, 0x100000000000088) epoll_create1(0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$rxrpc(0x21, 0x2, 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd, 0x4}, 0x0, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @rand_addr, 0x3}, 0x1c) r1 = socket$inet6(0xa, 0x802, 0x88) sendto$inet6(r1, 0x0, 0x0, 0x4008840, &(0x7f0000000180)={0xa, 0x4e23, 0xcc08, @mcast1}, 0x1c) sendto$inet6(r1, &(0x7f0000000000)='~', 0x1, 0x40000, 0x0, 0x0) 1.528571782s ago: executing program 1 (id=4855): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000040)=ANY=[@ANYBLOB="f8"], 0xf8}}, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.528426212s ago: executing program 1 (id=4856): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="310300200000000000400800000008000300", @ANYRES32=r2, @ANYBLOB='\a\x00'], 0x24}, 0x1, 0x0, 0x0, 0x400400c}, 0x0) 1.507870733s ago: executing program 1 (id=4857): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f00000000000000001400020002000000ffffffff00000000000000000d0001007564703a73797a3200000000"], 0x54}}, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x20000090) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001180)=ANY=[@ANYBLOB="54010000100001000000000000000000fc010000000000000000000000000000000000000000000000000000000000000000ecdf00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x154}}, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r3, 0x11c, 0x2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r4 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000001140)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f00000002c0)=0x10) getsockopt$bt_hci(r4, 0x84, 0x72, &(0x7f0000000080)=""/4076, &(0x7f00000010c0)=0xfec) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0) connect$netlink(0xffffffffffffffff, 0x0, 0x0) close(0x3) sendmsg$can_raw(0xffffffffffffffff, 0x0, 0x20000000) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000001100)=@req3={0x9b8, 0xffd, 0x80000001, 0x7fffffff, 0x4, 0x1b280, 0x9a}, 0x1c) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f00000013c0)=""/60, 0x328000, 0x800, 0x4, 0x3}, 0x20) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000040)={0xffffffffffffffff, 0x3, 0x5, 0x4}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8e8243, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, 0x0, 0x0) write$tun(r8, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r7) syz_genetlink_get_family_id$devlink(&(0x7f0000001080), r6) sendmsg$DEVLINK_CMD_PORT_GET(r7, 0x0, 0x0) 1.27361869s ago: executing program 4 (id=4859): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 1.156393841s ago: executing program 2 (id=4860): r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f81510ff6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883d5b1a46696fad128c6805cfb25bc6487e1e407d6b266971b09d0d864a7a550284e24b6cdc9f4ae1081a638175dffef002c76ac5558d23e41edbe68f4b4950a13aa000326dae5a857603dc5a40d6c6618a98c7b6e1eebd325ea2c14601a25658965f40864fd015d9b2fff83ee5ed3212ebd9fa429f0140f633556ac07c0c08e67a1848c9942ecc47dd4ffede9a429e9e0472be7cdbcd117e621ddf745c00a814ffff0224634472577dc0b35a9c153409f1a2bddc193b20b4d244d9cbbd59816c46000c596865f58b4e640ed4a9ab6086cede697fb113560925498da83273e679e0e28b84961eb7b9c9b4fa916590965c76b48e5d453f27a821bd2bf0946ff2413ec30f7893d1f046e18f736c40ceda26dfc4a0a62f71a3606d3f72c0a858dfd7895e2572292e11af913c6b513a141d28e501ae7c49618d104aac9abb78466a636efb88120d0eef0a501558a5aa34784a9823f2802a0bcdf318f9b436b34b42a2a7cf513f80364ad9a699d2e23eb4f3a2bbce818bd20da61882b3dac699d05dc24f29b72471b712423ace6278c43df2be7a09e815517b86d8b3ce16af3d64a575958c5fd52aac53b391f3d2a67c24c6c13ec11428b61b80a6a58cbba1790a98d190a572070f63fc0b809669895ea9865c3066b06102f6f2c7171dc7f76e1931b3e4deb569ef9d07d5f86a848f50942e93c419c3a23489f14803b08182dfd48b8d4375be6b7f805a21209c05e5927693a8834c8d5a5acbd47ed8a30a8a741d1ad77639b56b3b90c0b2023fa334befd28b2e27cbcd94b0ce7437f88ce67a925cea6d6d7e5313de6d328b1124a8b9ef83fe39ca3da97d33c60b7fd4af67d3c8fccb595a27a5bffc71e5a5b2ec966828993b0c0f83cbc55f9a7fb66a4101d5c83b77885072b6e2b2ceebe32f635509698c05089b9ff1cb1959b211e114dadb224ef2d5e7a3c55b3ac00fcdc9018577603c6301e5d4341b3d7eeb2665349d448d28d5d108f576408cbe533a6adbba18ebb2d84bb9af81108506a2f50fb56d595579000747930449fdf4ed01715ec624a0cb73636a35b9136f10b79e3d7ded09008b92e92c64e26e6b6d17f18b70b1d9813de8d2ff151c7a6a0452c660a57c33f13e2d9b88fa5f5c0505722d2e787a425e4a3e9b5efa9668e9199f5fb9fe7d5b8a57719a57df152e7f2c6a1087a2a24084f82455b65353a70559f04d5ed12defb81497ea69c1c7e69c373524770b7473c16a69c7a3648a9dd93377b89cdff61cf62512d1ee67a55ea67993937c1f55a2179bc9c8a337364cfb84d295adda1ad9700fc2f5c11cbfc1b90affb4666c6e7e23a6f7751410a5651819f29f690c6dba2b8a67e0f7f8cc377feb1854c393578994c85391ba21b3961aed477f771645571dc7d6cae72bf79c82a92a4edc3742b1398060a0a5c9e81c016b7f2ae3db529c6ff824cc28678764d8ab49d7dc68e5b0556c9e7ffb6fef442776d86fbd458741830e57f22a1f8513b92abd5b2df93a67cc560134078f0b8ecc3276e40aadef5cd579888b86b4988f396679250701f3869e7493b33692035ecd94aca5189fd0a0893ccc5bb19c0b4caca86cf90ebc2a5558f39cccb33f6773a4e425bf551fb3b6456ee1cc62fa1843a9e5539bb2d02ae6ef82533a9dbcfb562c1ab18c1f639ae7ff02083746f74a15ba2d10e4b955940a5d6f488d326a99f287c48ad463ce40367aeeff519cbad0a2d7fdbfa48bff75955467977764c2be2bd2ffa18396c46920c40c50a4037003666406d177e2cd20aee423d07169d8f611f635ba0b62b61265ff2c5548446a2423dd1038482b6852b2d9d2f90aa05d82c5e2c3d1af0c7aad72d82b3da67471af7b037bb0424a785e73f35b5a10a2ab300a195c20cd119a5390e0cd5d49c70bd80883b933e843d0d2902749dcf3c140c708a0f004b7a2f50bf311305dc01719016fcce5863815ca7951de710fcb71cd177551ff6fcd9f8bf01b93868f24c6129b6d7917125338cf62110083093fc7f862015d48450d992f2bb43e601cab19b2ea7b83962a382fc2a31fdf2358bf8a9a9e506eaa7b6eb5e7444d1ef459b24ffa51362abce902dfd84201a0e4b5a3b62757aad54fb65b83821c6bba663886de092065a565921ea3eb6781bb8ed4f4db3abcfeeb379b7e52fca790bea719918e299ab01bf5e92177d134360bf7a16a59e9d03d3dcfb0a25599237e3d41b3f0026c9402b1fb1894426303413a2cbcf7c72807ca694afa285990d07c3bca26413c9947b3b344aafc04544b8c11416e0312b028da7302e316c3966d41884b15055a49a4a0b3eac8e11f88a5615fb0af582f065d28e5a454447e9d0cfc60356439ebf7e1d0a00f5b9cc6daf2bd7195ba96b4d1a0679ff0fb1c01282c378a880f90f460889b67d76d4d0e8db6c928d113533d1d10b810303c43d8ff622c5bab7f095b96e64bf9daa48a2bdf3d9d40bac00cf1b66df61a4f7c3e21938e876f81b1179dce6a008f28eb682cae690ced0ea0d542da604d8056f2b1813ed36683c4c51aeb2650772cfb1c55d4e60604ff06344cfc271b2175a6c94defb807af240b483e24298ca73bfc743ca2ca2e77e6d5b817b3c1986601537faf59ac84c74d8bd0c068cb8e6bd03ac2dcf5793fb4a00b3c901a33aa3ee86e4f0db317b94bb8678ab26e36d305ebac4b0f7f164947148255b562dd0f87648499d45bccfb7d8c9d5624cadf8160a396e79fbcdc100058ba4606e41c02fb2cc0dc6c36196bd28acfde82a18cda2321d2d83fecd3b85380667cd1d0bc68298c6c8f10421a80c8fa86912b6c3e8ddd9d9668520d5151409e6b77f0d7730b374a68a744151bfbd123cfdf871e8c24e70d2ca3b50e84a48e0b78c1781000cfc848d43584985763a76c0ab9ba882c55e3e4aa8f2174255db38adb8350b48a77be22a869d13d183325f859b883464e5e46de5ea8a92532b9a794daaeff657cd361f7f158f8bebe36e9de1f5b9721d4263dcc9472229bc02d3f552180abfb25ca7aa36cb914d99c09fd5bb99dcab9b4e3c634d18fc7dfe84dc4425ad1e39c3e7410d49b4ea0a8a2958688c7725822f6dfc0827d19dc385e0e35a949941e4dd1aaeaab9ebe402f8c584bca7efc829f2ccfb63fd7bde1c182a67c14f9d3f033ca674e2604e89cd55a15419f956cd61a755c1b13554dae98e77be078aadfc131c9677381f1dbe6ef194eb17603a463e8b844ab46a6046e1f07d96d66de669359bff4c3d80948a4de3abb2f171a09b5d8999c379fb62244114e218c79805df7d899e5661320ee6721d652b95f09e4dfe69bd67099c73294b17ab574e0b966aa3ab44478965b9dca3cb3b9282945f24ccdd07c638ae25a84a728ca24f87ff49d718121a694be46f3616e27b1041b3c6cd24b9cf775bfc28dfbe0a009048f0599f2d5d6586cfd1e7f7fe69872d08b98f60d28e6af0d49d7f06ad71a7b5c41df261aba5de114022c7288bc265cc17909fdeadc3d7b256d7ab3b96e40f857060f16b54a6bb7248ee571f87ace5ee39eab412706cf52fa711468b21ea129c3f44bceb429fcc1a0ac2aa87b9365077dcfcfa9a1b32a0a09699197c20019a66cbd0a897feab3706c23123b888ada643d4560082033e31596b0483578968e3c9593ebd97141c228a42fc7645f92171c120aabca36657683fd7c72fcb87217f124d6fabc52f1d221d8410b47b0ad4bd944bf4085365e9b52a53911ab4ee142c5a1ebbe034c9d98c538c066f2dc0acf372eb2397dcac765055123e0ba19be22b18c886bf0f7490abe9fde91ffa62e059962bd134be8501cb5b715a744b1398e2c4c7e8afe72e189dda0654296afa1c1f99ab7d800fa40f72a758625c833b6fc7b7d42250522b456e1e7de815350c36c9cb2f4d1c9cb99109f89b456c559463f11b8b58247809b17a4ed4912bd0a47a529f1364d6dc593ea7f3eb98962078ac90e5012ee1c7b4b9ed5a8c7a9c0231b4ce425693faab64fa0f3482a04d4be2e06ee5d103694d288810a1a7f4d1e908dd82dd2016a064ece5cd67ef1dd5f4cda728fc6f1ccdd949dd8f775d862621507248ef4c83ae274969d19c7ddb02a4e8a1ab2b7aa539a442b22735ceedeefe60a1059dfaaa0979ce8d5387b5a047841fd9749b88ca91216b02d7926408a01916b7781bb7167528ccdb9a486d173437a5ba3e552c8674dff2cc9b21054e0e4f86b61b8723fca58ceef4413bffae9e9be79c5b9788f5449811ce78be9bc7a86375a670197baaef751beabcba0aa6c7c33f1cd702cb78ec39fa1f17d9da733d6abf2b80f9c51ac8f6f664b24edc53a7c9525c3016bd05c67272375fe816b2b121f2de68b885a0fd8f8b8c6c342237b632f6414a3eb3480f5f42106c5812e9bfd4e8c8dea8d08525d9aa1da7c7c2ee7ff3d31b79b211dd01e304a8ffc83a89a59f3b1e2ef5e969b6d90bea7e161066f25622fad914bff52bacd2807093dda1838b529ee57f718b374ce2841b924a42457867547a6edcb8412d85f11796742bf640b5819a9546357df778c332af5983c4373a95d9c58b52dba445eee92e6911824f0c534e7a5934d9eac9b7f6fec22002fc53a3003a3304217f567b47cd326edc5f48eb1f46bb20d1e10e72239afc9769344590cf48902aba5405b7d4baa31a912ab398a2f2d3f037614bb56a89244ece50f3a1e058d274f1e70f944eb8a305be91e561e5eb843d057a81f4deb84a6335ec81ca964cdae5f318d4e9aaea2c477cc279c00c698bcfe4b8e04c09079d8f3f5438d9d45a00f50d2f9b245c8c68eebf247e25ba8d26f8b95b21ac9ceb50c0aa2e4bdc032024db216b92f9350a90ac79341af14d3fa8ba908096e1b503341aed667bb184c672dac85fc4f335b3871c3b4e55ea219a857d2d2e135358f6b45a20b3e7de8e09b2041eb7c5084a80258fb524a983752659298a251e178b56f96bc67ae0a78ec92f92d92c9cf0edb5dcb11e739d69410ad44c8df00caa030d7d89f2ec38bd7698115c423cf3e6048793aca08ffbcdac766f1553773fa00031c1d75246e4e1eddf8948d02a3de6d67fd7329e45070f29044587f1e0db50d04e673191a63e30f96ee0d8d52738fab36a7fe2c6ab9301d401e7ca5b1f039193a580e40abbdf40c2d7e27809dec80815d37adae9fe7fb9d3a974c9fc03944d7338d000b81170be4c6792ed6b3b827194b3ae11e2acfca48498d1126aacf80f3d574256ef7f75552ff087a819e", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x8, &(0x7f0000001280)=ANY=[@ANYBLOB="6b00000000000000290000000200000000ffffffffffff00000000007f000001080000000700000000000034366567f221978756640000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="000000007f00000100000008"], 0x6b}, 0x0) 1.099580243s ago: executing program 2 (id=4861): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x1}, 0x10) write(r0, &(0x7f0000000000), 0x0) 1.072802936s ago: executing program 3 (id=4862): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r0, 0x0, 0x0, 0x20004041, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0x1}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000003c0)={'ip_vti0\x00', &(0x7f0000000340)={'sit0\x00', 0x0, 0x0, 0x20, 0x4, 0x4, {{0x11, 0x4, 0x3, 0x6, 0x44, 0x66, 0x0, 0x3, 0x2f, 0x0, @empty, @rand_addr=0x64010100, {[@end, @timestamp_addr={0x44, 0x24, 0x45, 0x1, 0x4, [{@multicast2, 0xe}, {@remote, 0xa4a6}, {@dev={0xac, 0x14, 0x14, 0x22}, 0xfffffe01}, {@multicast1, 0x4}]}, @ra={0x94, 0x4, 0x1}, @generic={0x0, 0x6, "b93a57a0"}]}}}}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x5c, 0x5c, 0x4, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x5, 0x10000}}, @var={0xf, 0x0, 0x0, 0xe, 0x2, 0x2}, @restrict={0x10, 0x0, 0x0, 0xb, 0x1}, @decl_tag={0x1, 0x0, 0x0, 0x11, 0x4, 0x4}, @type_tag={0x6, 0x0, 0x0, 0x12, 0x2}, @const={0x10, 0x0, 0x0, 0xa, 0x2}]}, {0x0, [0x2e, 0x2e]}}, &(0x7f0000000480), 0x78, 0x0, 0x1, 0x41c7047c, 0x10000, @value=r0}, 0x28) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x13}, 0x7}, 0x1c) 1.012300564s ago: executing program 0 (id=4863): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2f}}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000500)=@gcm_128={{0x304}, "8763c1e5966c6af2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a0400b9", "12772541f8eb02bb"}, 0x28) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20000004}, 0x24040040) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0x2, 0x4, 0x4a0, 0xffffffff, 0xd0, 0x300, 0x300, 0xfeffffff, 0xffffffff, 0x3d0, 0x3d0, 0x3d0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @empty, [], [], 'macsec0\x00', 'bond_slave_0\x00', {}, {}, 0x6, 0x0, 0x1}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0x208, 0x230, 0x0, {}, [@common=@unspec=@cpu={{0x28}, {0xff, 0x1}}, @common=@rt={{0x138}, {0x7, [0x7, 0x6], 0x3, 0x8, 0x1, [@loopback, @local, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, @dev={0xfe, 0x80, '\x00', 0x3a}, @private0={0xfc, 0x0, '\x00', 0x1}, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast1, @private0, @mcast1, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, @remote], 0x9}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x500) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000940), r2) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002dbd7000000000000100000008000600e0000001050004000100000008000b0049f7a0c1"], 0x2c}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_LOOPBACK(r4, 0x65, 0x3, &(0x7f0000000200), 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) sendmsg$can_raw(r4, &(0x7f0000000340)={&(0x7f0000000180)={0x1d, r5}, 0x10, &(0x7f0000000300)={&(0x7f00000001c0)=@can={{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "43b9dfb720598c2f"}, 0x10}, 0x1, 0x0, 0x0, 0x48001}, 0x4000085) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00042dbd7000fddbdf2501000000050002000200000008000b00", @ANYRES32=r5, @ANYBLOB="1400070020010000000000000000000000000000050003003200000014000900fe26f8e05900000000000000000000bbffdd858a93a31464afe194b2a585757e9a4d548645efcb77a54337b8ae842e69d105db300b95c268c2f8ee04ea03af67f7c93833a556587adc70286fc6d8dd08"], 0x54}, 0x1, 0x0, 0x0, 0x4800}, 0x80c1) r6 = socket$kcm(0x10, 0x400000002, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'geneve1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c000000100001002dbd70000000000000000000", @ANYRES32=r8, @ANYBLOB="0000000070070100f7ff0000010000000100"/36], 0x3c}}, 0x804) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000000000003f00000008040300", @ANYRES32=r10, @ANYBLOB="08005e8004000100"], 0x24}}, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), r12) r13 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r13, 0x11c, 0x1, &(0x7f0000000040)=""/27, &(0x7f0000000080)=0x1b) readv(r6, &(0x7f0000000580)=[{&(0x7f0000003700)=""/4081, 0xff1}, {&(0x7f0000000300)=""/104, 0x68}, {&(0x7f0000000a80)=""/237, 0xed}, {&(0x7f00000000c0)=""/15, 0xf}, {&(0x7f0000000380)=""/20, 0x14}, {&(0x7f00000003c0)=""/52, 0x34}], 0x6) 1.012101227s ago: executing program 1 (id=4864): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001680)=ANY=[@ANYBLOB="5801000010000304000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES8=r0], 0x158}, 0x1, 0xba01}, 0x44) 1.001505299s ago: executing program 4 (id=4865): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafa, {0x0, 0x0, 0x0, r2, {0xc, 0xffff}, {0x0, 0xfff1}, {0x6, 0xffa6}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 994.051067ms ago: executing program 3 (id=4866): setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000d7fa33d6b804ab6d00000000000000000a"], 0xb8}}, 0x2c000010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x2000000, 0x0, 0x0, 0xffffffffffffffff}, 0x7}}, 0xb8}}, 0x10) 944.527277ms ago: executing program 2 (id=4867): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="310300200000000000400800000008000300", @ANYRES32=r2, @ANYBLOB='\a\x00'], 0x24}, 0x1, 0x0, 0x0, 0x400400c}, 0x0) 888.728706ms ago: executing program 2 (id=4868): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2}) write$cgroup_devices(r0, &(0x7f0000000000)={'a', ' *:* ', 'm\x00'}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x1, &(0x7f0000000340)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x1}], &(0x7f0000000200)='syzkaller\x00', 0x8}, 0x90) 838.280699ms ago: executing program 3 (id=4869): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x8}, 0x10) write(r1, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000001d00000000000000050009000d000000", 0x24) shutdown(r0, 0x0) close(0xffffffffffffffff) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x5a}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$xdp(0xffffffffffffffff, 0x0, 0x44040050) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r2, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) syz_emit_ethernet(0x5e, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "e20f00", 0x28, 0x11, 0x0, @remote, @local, {[], {0x4e20, 0x4e22, 0x28, 0x0, @wg=@data={0x4, 0x1, 0x1b5a, "5d0719656701ba4d2a43d88e945401b9"}}}}}}}, 0x0) getpeername$l2tp6(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0x200000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c00028005000300000000000800014000000001080002400000000c0900010073797a30000000000900020073797a320000000014000000110001"], 0x80}}, 0x0) writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) 767.834897ms ago: executing program 0 (id=4870): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="74000000040601030000000000020000030000080500010017000000050001000700000009000200"], 0x74}, 0x1, 0x0, 0x0, 0x52}, 0x400c0) 767.476265ms ago: executing program 1 (id=4871): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0xa4, '\x00', 0x8, 0x1ff, 0x7, 0x7}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r9, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r8, 0x1, 0xd8, 0x6, @multicast}, 0x14) 755.675467ms ago: executing program 2 (id=4872): unshare(0x26020480) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x4, @empty, 0x10}, 0x1c) socket$key(0xf, 0x3, 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in=@remote, 0x0, 0x0, 0xfffe, 0x0, 0x2}, {0x0, 0x28c, 0x1, 0x0, 0x0, 0x0, 0x2}, {0x7, 0x0, 0x1}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x2000000, 0x33}, 0x0, @in6=@loopback, 0x0, 0x3, 0x0, 0xb7, 0x0, 0x8000000}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) 705.402458ms ago: executing program 4 (id=4873): r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x8, &(0x7f0000001280)=ANY=[@ANYBLOB="6b0000000000000029000000020000fec0ffffffffffff00000000007f000001080000000700000000000034366567f221978756640000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="000000007f00000100000008"], 0x6b}, 0x0) 639.911608ms ago: executing program 0 (id=4874): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000100000000000a40000000060a0b040000000000000008020000001400048010000180090001006d617371000000000900010073797a30000000000900020073797a3200000000f500000a73737a3e134a72da6c72de100b1bd1fe545e6c0564dcd4bd5aebf7a40000000000001e611d7fec5142e40800000000000000969d01934c639dccba9a998ff7fa74e4907bd5e19e2e64e5b22314016912c3426f39c9747d2c53ac39a88f43af9dace63d0f33049db21aaf869e3a9a4ab44f48d560daa9806c2cd3d04d3a624e919d332bec03237c2c4ffeaf14e300"/245], 0x68}}, 0x0) 631.620323ms ago: executing program 4 (id=4875): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c0000000f67264321af3372a7fe69799217d14bbc2d1dea588ea756a06ccfa8ecfb873af8dc8194e621df78b7988177a989165da6daf751925dc69d561e53ba53c6f532b4a7b9e5d4fb28814fc7ec7bd21a05", @ANYRES16=r1, @ANYBLOB="2d6600000000000000002100000009001f007068793000000000090001007770616e31000000"], 0x2c}}, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019800)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async, rerun: 64) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (async, rerun: 32) r6 = socket$inet(0xa, 0x801, 0x84) (rerun: 32) connect$inet(r6, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r6, 0x8) r7 = accept4(r6, 0x0, 0x0, 0x0) unshare(0x20000400) (async) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_ADDRFORM(r8, 0x3a, 0x1, 0x0, 0x300) (async, rerun: 64) getsockopt$bt_hci(r7, 0x84, 0x7d, &(0x7f00000010c0)=""/4100, &(0x7f0000000200)=0x1004) (async, rerun: 64) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) (async, rerun: 32) r12 = accept4(r11, 0x0, 0x0, 0x800) (rerun: 32) recvmsg$can_raw(r12, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) (async) socketpair$unix(0x1, 0x4ffc4fc1e94087f2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r14, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg(r13, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) (async, rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) (rerun: 32) 614.144406ms ago: executing program 2 (id=4876): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r0, 0x0, 0x0, 0x20004041, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0x1}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000003c0)={'ip_vti0\x00', &(0x7f0000000340)={'sit0\x00', 0x0, 0x0, 0x20, 0x4, 0x4, {{0x11, 0x4, 0x3, 0x6, 0x44, 0x66, 0x0, 0x3, 0x2f, 0x0, @empty, @rand_addr=0x64010100, {[@end, @timestamp_addr={0x44, 0x24, 0x45, 0x1, 0x4, [{@multicast2, 0xe}, {@remote, 0xa4a6}, {@dev={0xac, 0x14, 0x14, 0x22}, 0xfffffe01}, {@multicast1, 0x4}]}, @ra={0x94, 0x4, 0x1}, @generic={0x0, 0x6, "b93a57a0"}]}}}}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x5c, 0x5c, 0x4, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x5, 0x10000}}, @var={0xf, 0x0, 0x0, 0xe, 0x2, 0x2}, @restrict={0x10, 0x0, 0x0, 0xb, 0x1}, @decl_tag={0x1, 0x0, 0x0, 0x11, 0x4, 0x4}, @type_tag={0x6, 0x0, 0x0, 0x12, 0x2}, @const={0x10, 0x0, 0x0, 0xa, 0x2}]}, {0x0, [0x2e, 0x2e]}}, &(0x7f0000000480), 0x78, 0x0, 0x1, 0x41c7047c, 0x10000, @value=r0}, 0x28) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x13}, 0x7}, 0x1c) 551.89936ms ago: executing program 1 (id=4877): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x30, 0x2, 0x3, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFQA_CFG_CMD={0x8, 0x1, {0x3, 0x0, 0x28}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x4, 0x1}}, @NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x30}}, 0x8080) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000540)=@filter={'filter\x00', 0x42, 0x4, 0x410, 0xffffffff, 0x2a8, 0x210, 0x2a8, 0xffffffff, 0xffffffff, 0x378, 0x378, 0x378, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {0xff}, 0x84, 0x2, 0x2}, 0x0, 0x1e8, 0x210, 0x0, {0x100000000000000}, [@common=@inet=@sctp={{0x148}, {[0x4e20, 0x4e20], [0x4e21, 0x4e24], [0x4, 0x8, 0x7f, 0x7, 0x1, 0x7, 0x1ff, 0x9, 0xab2, 0x2, 0x300000, 0x5, 0x9, 0x1, 0x9, 0xcd4, 0x7, 0xc5a, 0x4, 0x7, 0xffffffff, 0xb87d, 0x5b000000, 0x6, 0x1, 0x6c7f, 0x9, 0x0, 0x9, 0x9, 0x8, 0x0, 0x80000001, 0x9, 0x200, 0x71e5e785, 0xfffffbff, 0x19, 0xf6b, 0xab19, 0x81, 0x9, 0xf4, 0x9, 0x2, 0x2, 0x3, 0x1, 0x7, 0x5, 0xcd, 0x6, 0x8f, 0x9, 0x5, 0x4b7d, 0x9, 0x1, 0x7, 0x6, 0x4, 0x6, 0x2, 0xfaa0], 0x6, [{0x5, 0x2, 0xf8}, {0x9, 0x7f, 0x1}, {0x4, 0x9, 0x10}, {0xf, 0x5, 0x1}], 0x11, 0x1, 0x1}}, @common=@unspec=@connmark={{0x30}}]}, @REJECT={0x28}}, {{@ip={@loopback, @rand_addr=0x64010101, 0xffffff00, 0xff000000, 'geneve0\x00', 'macvlan0\x00', {0xff}, {}, 0x2e, 0x0, 0x4}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x10, 0x9, 0x2}}}, {{@ip={@private=0xa010101, @loopback, 0xff, 0xff000000, 'bond0\x00', 'dvmrp0\x00', {}, {}, 0x2f, 0x0, 0x21}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xd, 0x8, [0x8, 0x27, 0x3d, 0x16, 0x13, 0xe, 0x2d, 0x21, 0x2d, 0x32, 0x3f, 0x20, 0x28, 0x18, 0x22, 0x12], 0x0, 0x0, 0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/uts\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000440), 0x10) listen(r2, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000000)=0xcb5) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9}, {0xe}, {0xd, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x691, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000880}, 0x0) r4 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_ifreq(r4, 0x8991, &(0x7f0000000280)={'wlan1\x00', @ifru_names='wlan0\x00'}) r5 = socket(0x10, 0x80002, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f00000000c0)={0x9, &(0x7f0000000040)=[{0x40, 0x8, 0x9, 0xffff}, {0x2400, 0x29, 0xc, 0x5}, {0xfffa, 0x9a, 0x3, 0xffff}, {0x5c, 0x3, 0x13, 0x2}, {0x9, 0x54, 0x9, 0x8001}, {0xffff, 0x46, 0xa5}, {0x4, 0x7, 0x4, 0x2}, {0x6, 0x1, 0x3, 0x9}, {0x6, 0x0, 0x6, 0x80000000}]}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r6, 0x10e, 0xc, &(0x7f0000000200)=0x5, 0x4) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000880)=ANY=[@ANYBLOB="1c0000003a00290201000000000000000a000000750ec696b5000000"], 0x1c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtaction={0xa0, 0x30, 0x53b, 0x70bd2d, 0x0, {0x9}, [{0x8c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x20}, @TCA_SAMPLE_PARMS={0x18}, @TCA_SAMPLE_RATE={0x7, 0x3, 0x20}]}, {0x4}, {0xc}, {0xc, 0x4}}}, @m_skbmod={0x30, 0x1c, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0xa0}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000007280)) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000041c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000800)={0x28, r8, 0x1, 0x70bd28, 0x1, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x28}}, 0x24000880) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000009b40)) 551.504495ms ago: executing program 0 (id=4878): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="310300200000000000400800000008000300", @ANYBLOB="070006"], 0x24}, 0x1, 0x0, 0x0, 0x400400c}, 0x0) 489.665973ms ago: executing program 4 (id=4879): unshare(0x26020480) socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast2, 0x0, 0x0, 0xffff, 0x0, 0x2}, {0x0, 0x28c, 0x1, 0x0, 0x0, 0x0, 0x2}, {0x7}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x2000000, 0x33}, 0x0, @in6=@loopback, 0x0, 0x3, 0x0, 0xb7, 0x0, 0x8000000}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) (fail_nth: 2) 482.207113ms ago: executing program 0 (id=4880): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000940)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r4, @ANYBLOB="00000000000000001c001a800800028008000200080000003e12000008000200", @ANYRES8], 0x44}}, 0x0) write$cgroup_pid(r1, &(0x7f0000000880), 0x12) unshare(0xa020480) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)) preadv(r5, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, 0x13, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r6, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0}}, 0x10) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x810) 0s ago: executing program 4 (id=4881): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x4c, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x40083, 0x715cb}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @sit={{0x8}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_PREFIX={0x14, 0xb, @remote}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x21}}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001300)=@newtfilter={0x70, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {}, {0x1, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x40, 0x2, [@TCA_CGROUP_EMATCHES={0x3c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x2c, 0x1, 0x0, 0x0, {{0x3, 0x9, 0x80}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}, @TCA_EM_IPT_MATCH_DATA={0x4}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}]}}]}, 0x70}}, 0x1) syz_emit_ethernet(0x4e, &(0x7f0000000380)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x18, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x88, 0x0, 0x0, 0x10, '\x00', @mcast1}}}}}}, 0x0) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x84, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @private=0xa010101}}}, &(0x7f0000000300)=0x90) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) kernel console output (not intermixed with test programs): syz.1.3774': attribute type 14 has an invalid length. [ 345.081057][T17508] bond1 (unregistering): Released all slaves [ 345.280720][T17523] openvswitch: netlink: Unknown nsh attribute 0 [ 345.306582][T17523] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 345.319171][T17527] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3783'. [ 345.350831][T17527] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3783'. [ 345.386267][T17529] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3785'. [ 345.488876][T17529] bond6 (unregistering): Released all slaves [ 345.519422][ T25] block nbd0: Possible stuck request ffff888024de5080: control (read@0,1024B). Runtime 2 seconds [ 345.531446][ T25] block nbd0: Possible stuck request ffff888024de5240: control (read@1024,1024B). Runtime 2 seconds [ 345.542607][ T25] block nbd0: Possible stuck request ffff888024de5400: control (read@2048,1024B). Runtime 2 seconds [ 345.557064][ T25] block nbd0: Possible stuck request ffff888024de55c0: control (read@3072,1024B). Runtime 2 seconds [ 345.579084][T17537] netlink: 236 bytes leftover after parsing attributes in process `syz.2.3788'. [ 345.934374][T17559] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 346.100661][T17575] netlink: 'syz.1.3802': attribute type 1 has an invalid length. [ 346.182929][T17571] netlink: 'syz.4.3801': attribute type 8 has an invalid length. [ 346.483991][T17592] bond3: option mode: unable to set because the bond device has slaves [ 346.516495][T17600] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 346.693165][T17608] syzkaller0: entered promiscuous mode [ 346.711483][T17608] syzkaller0: entered allmulticast mode [ 347.046749][T17635] batadv_slave_1: entered promiscuous mode [ 347.117642][T17642] bond1: option mode: unable to set because the bond device has slaves [ 347.288204][T17655] IPVS: set_ctl: invalid protocol: 11612 172.20.20.187:21 [ 347.406217][T17656] IPVS: set_ctl: invalid protocol: 60 172.30.4.4:20000 [ 347.449130][T17663] netlink: 'syz.4.3830': attribute type 10 has an invalid length. [ 347.473100][T17665] netlink: 'syz.3.3831': attribute type 4 has an invalid length. [ 347.483848][T17663] team0: left allmulticast mode [ 347.494389][T17663] team_slave_0: left allmulticast mode [ 347.500029][T17663] team_slave_1: left allmulticast mode [ 347.506521][T17663] team0: left promiscuous mode [ 347.511367][T17663] team_slave_0: left promiscuous mode [ 347.518444][T17663] team_slave_1: left promiscuous mode [ 347.524353][T17663] bridge0: port 3(team0) entered disabled state [ 347.533326][T17666] netlink: 'syz.3.3831': attribute type 4 has an invalid length. [ 347.536482][T17663] 8021q: adding VLAN 0 to HW filter on device team0 [ 347.550090][T17663] team_slave_0: entered promiscuous mode [ 347.556030][T17663] team_slave_1: entered promiscuous mode [ 347.562450][T17663] bond0: (slave team0): Enslaving as an active interface with an up link [ 347.709234][T17678] openvswitch: netlink: Unknown nsh attribute 0 [ 347.717852][T17678] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 347.817054][T17631] batadv_slave_1: left promiscuous mode [ 347.952032][T17691] __nla_validate_parse: 5 callbacks suppressed [ 347.952050][T17691] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3840'. [ 348.119188][T17702] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3844'. [ 348.175932][T17705] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3844'. [ 348.228853][T17705] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3844'. [ 348.831455][T17750] openvswitch: netlink: Unknown nsh attribute 0 [ 348.854867][T17750] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 348.868611][ T25] block nbd0: Possible stuck request ffff888024de5080: control (read@0,1024B). Runtime 4 seconds [ 348.882401][ T25] block nbd0: Possible stuck request ffff888024de5240: control (read@1024,1024B). Runtime 4 seconds [ 348.893792][ T25] block nbd0: Possible stuck request ffff888024de5400: control (read@2048,1024B). Runtime 4 seconds [ 348.908866][ T25] block nbd0: Possible stuck request ffff888024de55c0: control (read@3072,1024B). Runtime 4 seconds [ 349.007247][T17758] netlink: 'syz.3.3864': attribute type 2 has an invalid length. [ 349.028853][T17758] netlink: 119 bytes leftover after parsing attributes in process `syz.3.3864'. [ 349.061866][T17758] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 349.116397][T17765] xt_CT: You must specify a L4 protocol and not use inversions on it [ 349.144714][T17765] C: renamed from team_slave_0 (while UP) [ 349.157583][T17765] netlink: 'syz.2.3866': attribute type 1 has an invalid length. [ 349.166365][T17765] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 349.212594][T17765] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3866'. [ 349.509874][T17792] netlink: 'syz.1.3874': attribute type 1 has an invalid length. [ 349.569714][T17792] 8021q: adding VLAN 0 to HW filter on device bond2 [ 349.622123][T17583] udevd[17583]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 349.803113][T17799] bond2: (slave veth3): Enslaving as an active interface with a down link [ 349.865247][T17792] veth5: entered promiscuous mode [ 349.875473][T17792] bond2: (slave veth5): Enslaving as an active interface with a down link [ 349.890109][T17805] vlan2: entered allmulticast mode [ 349.897426][T17805] bond2: entered allmulticast mode [ 349.903853][T17805] bond2: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 350.102567][T17818] lo: entered allmulticast mode [ 350.140686][T17818] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3881'. [ 350.279818][T17836] bond1: option mode: unable to set because the bond device has slaves [ 350.302163][T17836] bond1: (slave macvlan4): Error -98 calling set_mac_address [ 350.515013][T17852] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3891'. [ 350.811643][T17858] syzkaller0: entered promiscuous mode [ 350.821687][T17858] syzkaller0: entered allmulticast mode [ 350.830016][T17858] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 65487 [ 350.841239][T17857] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 351.072066][T17883] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3901'. [ 351.180102][T17888] 8021q: adding VLAN 0 to HW filter on device bond1 [ 351.217815][T17888] bond_slave_0: entered promiscuous mode [ 351.223588][T17888] bond_slave_1: entered promiscuous mode [ 351.230602][T17888] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 351.240059][T17888] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 351.254032][T17894] FAULT_INJECTION: forcing a failure. [ 351.254032][T17894] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 351.281837][T17894] CPU: 0 UID: 0 PID: 17894 Comm: syz.4.3904 Not tainted syzkaller #0 PREEMPT(full) [ 351.281882][T17894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 351.281902][T17894] Call Trace: [ 351.281908][T17894] [ 351.281916][T17894] dump_stack_lvl+0x189/0x250 [ 351.281939][T17894] ? __pfx____ratelimit+0x10/0x10 [ 351.281960][T17894] ? __pfx_dump_stack_lvl+0x10/0x10 [ 351.281977][T17894] ? __pfx__printk+0x10/0x10 [ 351.281996][T17894] ? __might_fault+0xb0/0x130 [ 351.282023][T17894] should_fail_ex+0x414/0x560 [ 351.282043][T17894] _copy_from_user+0x2d/0xb0 [ 351.282064][T17894] ___sys_sendmsg+0x158/0x2a0 [ 351.282088][T17894] ? __pfx____sys_sendmsg+0x10/0x10 [ 351.282116][T17894] ? rcu_read_lock_any_held+0xb3/0x120 [ 351.282169][T17894] ? __fget_files+0x2a/0x420 [ 351.282183][T17894] ? __fget_files+0x3a0/0x420 [ 351.282206][T17894] __x64_sys_sendmsg+0x19b/0x260 [ 351.282230][T17894] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 351.282262][T17894] ? __pfx_ksys_write+0x10/0x10 [ 351.282286][T17894] ? do_syscall_64+0xbe/0xf80 [ 351.282309][T17894] do_syscall_64+0xfa/0xf80 [ 351.282329][T17894] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.282344][T17894] ? clear_bhb_loop+0x60/0xb0 [ 351.282362][T17894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.282376][T17894] RIP: 0033:0x7f638b78f749 [ 351.282391][T17894] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 351.282405][T17894] RSP: 002b:00007f638c6d2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 351.282424][T17894] RAX: ffffffffffffffda RBX: 00007f638b9e5fa0 RCX: 00007f638b78f749 [ 351.282436][T17894] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000004 [ 351.282446][T17894] RBP: 00007f638c6d2090 R08: 0000000000000000 R09: 0000000000000000 [ 351.282457][T17894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 351.282466][T17894] R13: 00007f638b9e6038 R14: 00007f638b9e5fa0 R15: 00007ffec84e9ee8 [ 351.282493][T17894] [ 352.027777][T17916] vcan0: tx drop: invalid sa for name 0x0000000000000008 [ 352.227963][ T25] block nbd0: Possible stuck request ffff888024de5080: control (read@0,1024B). Runtime 6 seconds [ 352.230247][T17920] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3914'. [ 352.239410][ T25] block nbd0: Possible stuck request ffff888024de5240: control (read@1024,1024B). Runtime 6 seconds [ 352.239467][ T25] block nbd0: Possible stuck request ffff888024de5400: control (read@2048,1024B). Runtime 6 seconds [ 352.239492][ T25] block nbd0: Possible stuck request ffff888024de55c0: control (read@3072,1024B). Runtime 6 seconds [ 353.026124][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 353.034509][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 353.615917][T17965] Cannot find add_set index 2 as target [ 353.736055][T17968] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3926'. [ 353.830193][T17970] tipc: Enabled bearer , priority 0 [ 353.886455][T17969] tipc: Disabling bearer [ 354.392143][T17999] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3939'. [ 354.714427][T18021] syzkaller0: entered promiscuous mode [ 354.722568][T18021] syzkaller0: entered allmulticast mode [ 354.840610][T18021] tipc: Enabled bearer , priority 0 [ 354.872989][T18017] wlan0 speed is unknown, defaulting to 1000 [ 354.887309][T18017] wg1 speed is unknown, defaulting to 1000 [ 354.898038][T18020] tipc: Resetting bearer [ 354.931785][T18030] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3950'. [ 354.947150][T18020] tipc: Disabling bearer [ 354.985642][T18023] nbd1: detected capacity change from 0 to 127 [ 355.240808][T18046] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3955'. [ 355.283131][T18049] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3958'. [ 355.448445][T18058] netlink: 232 bytes leftover after parsing attributes in process `syz.0.3962'. [ 355.524230][ T5838] block nbd1: Receive control failed (result -104) [ 355.592101][ T25] block nbd0: Possible stuck request ffff888024de5080: control (read@0,1024B). Runtime 8 seconds [ 355.603348][ T25] block nbd0: Possible stuck request ffff888024de5240: control (read@1024,1024B). Runtime 8 seconds [ 355.615720][ T25] block nbd0: Possible stuck request ffff888024de5400: control (read@2048,1024B). Runtime 8 seconds [ 355.627059][ T25] block nbd0: Possible stuck request ffff888024de55c0: control (read@3072,1024B). Runtime 8 seconds [ 355.789866][T18069] syzkaller0: entered promiscuous mode [ 355.799689][T18069] syzkaller0: entered allmulticast mode [ 355.840044][T18069] tipc: Enabled bearer , priority 0 [ 355.880473][T18068] tipc: Resetting bearer [ 355.937284][T18068] tipc: Disabling bearer [ 356.232362][T18055] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 356.254821][T18055] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 356.406402][T18055] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 356.418616][T18055] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 356.633369][T18096] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 356.807878][T18115] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 356.893745][T18117] syzkaller0: entered promiscuous mode [ 356.919798][T18117] syzkaller0: entered allmulticast mode [ 356.970384][T18055] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 356.986616][T18121] tipc: Enabled bearer , priority 0 [ 356.994643][T18055] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 357.002054][T18126] FAULT_INJECTION: forcing a failure. [ 357.002054][T18126] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 357.004987][T18114] tipc: Started in network mode [ 357.036066][T18126] CPU: 1 UID: 0 PID: 18126 Comm: syz.2.3981 Not tainted syzkaller #0 PREEMPT(full) [ 357.036091][T18126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 357.036102][T18126] Call Trace: [ 357.036108][T18126] [ 357.036116][T18126] dump_stack_lvl+0x189/0x250 [ 357.036140][T18126] ? __pfx____ratelimit+0x10/0x10 [ 357.036159][T18126] ? __pfx_dump_stack_lvl+0x10/0x10 [ 357.036175][T18126] ? __pfx__printk+0x10/0x10 [ 357.036196][T18126] ? __might_fault+0xb0/0x130 [ 357.036225][T18126] should_fail_ex+0x414/0x560 [ 357.036248][T18126] _copy_from_user+0x2d/0xb0 [ 357.036270][T18126] ___sys_sendmsg+0x158/0x2a0 [ 357.036296][T18126] ? __pfx____sys_sendmsg+0x10/0x10 [ 357.036326][T18126] ? rcu_read_lock_any_held+0xb3/0x120 [ 357.036381][T18126] ? __fget_files+0x2a/0x420 [ 357.036395][T18126] ? __fget_files+0x3a0/0x420 [ 357.036420][T18126] __x64_sys_sendmsg+0x19b/0x260 [ 357.036446][T18126] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 357.036480][T18126] ? __pfx_ksys_write+0x10/0x10 [ 357.036503][T18126] ? do_syscall_64+0xbe/0xf80 [ 357.036527][T18126] do_syscall_64+0xfa/0xf80 [ 357.036548][T18126] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.036564][T18126] ? clear_bhb_loop+0x60/0xb0 [ 357.036584][T18126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.036598][T18126] RIP: 0033:0x7fe39f18f749 [ 357.036614][T18126] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 357.036628][T18126] RSP: 002b:00007fe3a00c6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 357.036645][T18126] RAX: ffffffffffffffda RBX: 00007fe39f3e5fa0 RCX: 00007fe39f18f749 [ 357.036657][T18126] RDX: 0000000004040140 RSI: 00002000000000c0 RDI: 0000000000000003 [ 357.036668][T18126] RBP: 00007fe3a00c6090 R08: 0000000000000000 R09: 0000000000000000 [ 357.036678][T18126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 357.036687][T18126] R13: 00007fe39f3e6038 R14: 00007fe39f3e5fa0 R15: 00007ffe62b32c48 [ 357.036718][T18126] [ 357.047452][T18114] tipc: Node identity 868629a96488, cluster identity 4711 [ 357.279481][T18114] tipc: Enabled bearer , priority 0 [ 357.309347][T18140] Cannot find add_set index 2 as target [ 357.316272][T18119] tipc: Disabling bearer [ 357.441369][T18145] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3984'. [ 357.551234][T18145] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.558636][T18145] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.575166][T18055] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 357.581155][T18055] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 357.616874][T18111] tipc: Resetting bearer [ 357.666097][T18111] tipc: Disabling bearer [ 358.138375][T18170] bond2: entered allmulticast mode [ 358.173552][T18170] ip6gretap1: entered allmulticast mode [ 358.180968][T18170] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 358.217799][T18170] tipc: Enabled bearer , priority 0 [ 358.255131][T18170] syzkaller0: entered promiscuous mode [ 358.270684][T18182] Cannot find add_set index 2 as target [ 358.292412][T18170] syzkaller0: entered allmulticast mode [ 358.311250][T18178] tipc: Enabled bearer , priority 0 [ 358.338595][T18177] tipc: Disabling bearer [ 358.364566][T18170] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 358.441162][T18170] tipc: Resetting bearer [ 358.495834][T18168] tipc: Resetting bearer [ 358.496718][T18196] FAULT_INJECTION: forcing a failure. [ 358.496718][T18196] name failslab, interval 1, probability 0, space 0, times 0 [ 358.536163][T18196] CPU: 0 UID: 0 PID: 18196 Comm: syz.2.4000 Not tainted syzkaller #0 PREEMPT(full) [ 358.536189][T18196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 358.536199][T18196] Call Trace: [ 358.536206][T18196] [ 358.536214][T18196] dump_stack_lvl+0x189/0x250 [ 358.536237][T18196] ? __pfx____ratelimit+0x10/0x10 [ 358.536258][T18196] ? __pfx_dump_stack_lvl+0x10/0x10 [ 358.536274][T18196] ? __pfx__printk+0x10/0x10 [ 358.536298][T18196] ? __pfx___might_resched+0x10/0x10 [ 358.536315][T18196] ? fs_reclaim_acquire+0x7d/0x100 [ 358.536342][T18196] should_fail_ex+0x414/0x560 [ 358.536365][T18196] should_failslab+0xa8/0x100 [ 358.536388][T18196] kmem_cache_alloc_node_noprof+0x77/0x710 [ 358.536406][T18196] ? __alloc_skb+0x255/0x430 [ 358.536425][T18196] ? napi_skb_cache_get+0x4a5/0x780 [ 358.536444][T18196] ? napi_skb_cache_get+0x151/0x780 [ 358.536469][T18196] __alloc_skb+0x255/0x430 [ 358.536493][T18196] ? __pfx___alloc_skb+0x10/0x10 [ 358.536512][T18196] ? kmem_cache_free+0x197/0x620 [ 358.536532][T18196] ? dev_hard_start_xmit+0x2cd/0x800 [ 358.536548][T18196] ? __dev_queue_xmit+0x1493/0x3140 [ 358.536564][T18196] ? __netlink_deliver_tap+0x5ad/0x850 [ 358.536580][T18196] ? netlink_unicast+0x7fa/0x9e0 [ 358.536600][T18196] ? netlink_sendmsg+0x805/0xb30 [ 358.536614][T18196] ? __sock_sendmsg+0x21c/0x270 [ 358.536630][T18196] ? ____sys_sendmsg+0x505/0x820 [ 358.536656][T18196] tipc_nl_compat_doit+0x15d/0x5f0 [ 358.536681][T18196] ? __pfx_tipc_nl_compat_doit+0x10/0x10 [ 358.536706][T18196] ? apparmor_capable+0x137/0x1a0 [ 358.536728][T18196] ? bpf_lsm_capable+0x9/0x20 [ 358.536744][T18196] ? security_capable+0x7e/0x2e0 [ 358.536775][T18196] tipc_nl_compat_recv+0x83c/0xbe0 [ 358.536796][T18196] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 358.536810][T18196] ? __mutex_trylock_common+0x153/0x260 [ 358.536832][T18196] ? __pfx___mutex_trylock_common+0x10/0x10 [ 358.536850][T18196] ? __pfx___tipc_nl_bearer_enable+0x10/0x10 [ 358.536869][T18196] ? __pfx_tipc_nl_compat_bearer_enable+0x10/0x10 [ 358.536891][T18196] ? trace_contention_end+0x39/0x100 [ 358.536921][T18196] genl_family_rcv_msg_doit+0x215/0x300 [ 358.536950][T18196] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 358.536995][T18196] genl_rcv_msg+0x60e/0x790 [ 358.537023][T18196] ? __pfx_genl_rcv_msg+0x10/0x10 [ 358.537042][T18196] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 358.537075][T18196] netlink_rcv_skb+0x208/0x470 [ 358.537093][T18196] ? __pfx_genl_rcv_msg+0x10/0x10 [ 358.537116][T18196] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 358.537162][T18196] ? down_read+0x274/0x2e0 [ 358.537182][T18196] ? genl_rcv+0xd/0x40 [ 358.537203][T18196] genl_rcv+0x28/0x40 [ 358.537221][T18196] netlink_unicast+0x82f/0x9e0 [ 358.537255][T18196] ? __pfx_netlink_unicast+0x10/0x10 [ 358.537281][T18196] ? netlink_sendmsg+0x642/0xb30 [ 358.537296][T18196] ? skb_put+0x11b/0x210 [ 358.537323][T18196] netlink_sendmsg+0x805/0xb30 [ 358.537351][T18196] ? __pfx_netlink_sendmsg+0x10/0x10 [ 358.537372][T18196] ? aa_sock_msg_perm+0xf1/0x1b0 [ 358.537390][T18196] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 358.537411][T18196] ? __pfx_netlink_sendmsg+0x10/0x10 [ 358.537430][T18196] __sock_sendmsg+0x21c/0x270 [ 358.537454][T18196] ____sys_sendmsg+0x505/0x820 [ 358.537485][T18196] ? __pfx_____sys_sendmsg+0x10/0x10 [ 358.537519][T18196] ? import_iovec+0x74/0xa0 [ 358.537545][T18196] ___sys_sendmsg+0x21f/0x2a0 [ 358.537572][T18196] ? __pfx____sys_sendmsg+0x10/0x10 [ 358.537604][T18196] ? rcu_read_lock_any_held+0xb3/0x120 [ 358.537654][T18196] ? __fget_files+0x2a/0x420 [ 358.537670][T18196] ? __fget_files+0x3a0/0x420 [ 358.537697][T18196] __x64_sys_sendmsg+0x19b/0x260 [ 358.537725][T18196] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 358.537760][T18196] ? __pfx_ksys_write+0x10/0x10 [ 358.537785][T18196] ? do_syscall_64+0xbe/0xf80 [ 358.537810][T18196] do_syscall_64+0xfa/0xf80 [ 358.537832][T18196] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.537849][T18196] ? clear_bhb_loop+0x60/0xb0 [ 358.537870][T18196] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.537886][T18196] RIP: 0033:0x7fe39f18f749 [ 358.537902][T18196] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 358.537918][T18196] RSP: 002b:00007fe3a00c6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 358.537938][T18196] RAX: ffffffffffffffda RBX: 00007fe39f3e5fa0 RCX: 00007fe39f18f749 [ 358.537951][T18196] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000004 [ 358.537963][T18196] RBP: 00007fe3a00c6090 R08: 0000000000000000 R09: 0000000000000000 [ 358.537974][T18196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 358.537985][T18196] R13: 00007fe39f3e6038 R14: 00007fe39f3e5fa0 R15: 00007ffe62b32c48 [ 358.538016][T18196] [ 359.008814][ T25] block nbd0: Possible stuck request ffff888024de5080: control (read@0,1024B). Runtime 10 seconds [ 359.026059][ T25] block nbd0: Possible stuck request ffff888024de5240: control (read@1024,1024B). Runtime 10 seconds [ 359.037329][ T25] block nbd0: Possible stuck request ffff888024de5400: control (read@2048,1024B). Runtime 10 seconds [ 359.048571][ T25] block nbd0: Possible stuck request ffff888024de55c0: control (read@3072,1024B). Runtime 10 seconds [ 359.182384][T18168] tipc: Disabling bearer [ 359.541909][T18222] tipc: Disabling bearer [ 359.599774][T18222] tipc: Enabled bearer , priority 0 [ 359.803219][T18244] FAULT_INJECTION: forcing a failure. [ 359.803219][T18244] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 359.831775][T18244] CPU: 1 UID: 0 PID: 18244 Comm: syz.4.4014 Not tainted syzkaller #0 PREEMPT(full) [ 359.831801][T18244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 359.831813][T18244] Call Trace: [ 359.831821][T18244] [ 359.831830][T18244] dump_stack_lvl+0x189/0x250 [ 359.831854][T18244] ? __pfx____ratelimit+0x10/0x10 [ 359.831876][T18244] ? __pfx_dump_stack_lvl+0x10/0x10 [ 359.831895][T18244] ? __pfx__printk+0x10/0x10 [ 359.831917][T18244] ? __might_fault+0xb0/0x130 [ 359.831949][T18244] should_fail_ex+0x414/0x560 [ 359.831974][T18244] _copy_from_iter+0x1cd/0x1630 [ 359.832000][T18244] ? __build_skb_around+0x22d/0x3c0 [ 359.832028][T18244] ? __pfx__copy_from_iter+0x10/0x10 [ 359.832047][T18244] ? __alloc_skb+0x2f1/0x430 [ 359.832071][T18244] ? __pfx___alloc_skb+0x10/0x10 [ 359.832094][T18244] ? netlink_sendmsg+0x642/0xb30 [ 359.832111][T18244] ? skb_put+0x11b/0x210 [ 359.832137][T18244] netlink_sendmsg+0x6b2/0xb30 [ 359.832164][T18244] ? __pfx_netlink_sendmsg+0x10/0x10 [ 359.832185][T18244] ? aa_sock_msg_perm+0xf1/0x1b0 [ 359.832205][T18244] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 359.832227][T18244] ? __pfx_netlink_sendmsg+0x10/0x10 [ 359.832246][T18244] __sock_sendmsg+0x21c/0x270 [ 359.832270][T18244] ____sys_sendmsg+0x505/0x820 [ 359.832300][T18244] ? __pfx_____sys_sendmsg+0x10/0x10 [ 359.832352][T18244] ? import_iovec+0x74/0xa0 [ 359.832379][T18244] ___sys_sendmsg+0x21f/0x2a0 [ 359.832406][T18244] ? __pfx____sys_sendmsg+0x10/0x10 [ 359.832437][T18244] ? rcu_read_lock_any_held+0xb3/0x120 [ 359.832485][T18244] ? __fget_files+0x2a/0x420 [ 359.832500][T18244] ? __fget_files+0x3a0/0x420 [ 359.832525][T18244] __x64_sys_sendmsg+0x19b/0x260 [ 359.832553][T18244] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 359.832587][T18244] ? __pfx_ksys_write+0x10/0x10 [ 359.832612][T18244] ? do_syscall_64+0xbe/0xf80 [ 359.832636][T18244] do_syscall_64+0xfa/0xf80 [ 359.832658][T18244] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.832675][T18244] ? clear_bhb_loop+0x60/0xb0 [ 359.832696][T18244] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.832712][T18244] RIP: 0033:0x7f638b78f749 [ 359.832727][T18244] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 359.832743][T18244] RSP: 002b:00007f638c6d2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 359.832761][T18244] RAX: ffffffffffffffda RBX: 00007f638b9e5fa0 RCX: 00007f638b78f749 [ 359.832774][T18244] RDX: 0000000004040140 RSI: 00002000000000c0 RDI: 0000000000000003 [ 359.832786][T18244] RBP: 00007f638c6d2090 R08: 0000000000000000 R09: 0000000000000000 [ 359.832797][T18244] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 359.832807][T18244] R13: 00007f638b9e6038 R14: 00007f638b9e5fa0 R15: 00007ffec84e9ee8 [ 359.832838][T18244] [ 360.138450][T18222] syzkaller0: entered promiscuous mode [ 360.143976][T18222] syzkaller0: entered allmulticast mode [ 360.150265][T18222] tipc: Resetting bearer [ 360.190511][T18216] tipc: Resetting bearer [ 362.149836][T18216] tipc: Disabling bearer [ 362.158637][T18270] bond1: option mode: unable to set because the bond device has slaves [ 362.171517][T18271] bond1: (slave macvlan3): Error -98 calling set_mac_address [ 362.287876][T18285] xt_SECMARK: invalid mode: 9 [ 362.318612][T18285] netlink: 228 bytes leftover after parsing attributes in process `syz.1.4027'. [ 362.342632][T18283] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4026'. [ 362.400251][ T25] block nbd0: Possible stuck request ffff888024de5080: control (read@0,1024B). Runtime 12 seconds [ 362.413444][ T25] block nbd0: Possible stuck request ffff888024de5240: control (read@1024,1024B). Runtime 12 seconds [ 362.426147][ T25] block nbd0: Possible stuck request ffff888024de5400: control (read@2048,1024B). Runtime 12 seconds [ 362.437468][ T25] block nbd0: Possible stuck request ffff888024de55c0: control (read@3072,1024B). Runtime 12 seconds [ 363.015235][T18334] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4045'. [ 363.026185][T18334] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.033638][T18334] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.096354][T18338] batadv1: entered allmulticast mode [ 363.239417][T18350] netlink: 256 bytes leftover after parsing attributes in process `syz.1.4050'. [ 363.379301][T18357] netlink: 'syz.2.4052': attribute type 4 has an invalid length. [ 363.426813][T18357] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 363.649234][T18372] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4057'. [ 363.659097][T18372] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4057'. [ 363.879189][T18387] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4064'. [ 363.967419][T18393] netlink: 'syz.4.4066': attribute type 1 has an invalid length. [ 364.098150][T18396] macvlan3: entered promiscuous mode [ 364.103472][T18396] macvlan3: entered allmulticast mode [ 364.110141][T18396] bond6: entered promiscuous mode [ 364.117522][T18396] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 364.128595][T18396] bond6: left promiscuous mode [ 364.242962][T18406] netlink: 'syz.2.4070': attribute type 16 has an invalid length. [ 364.255040][T18406] netlink: 'syz.2.4070': attribute type 17 has an invalid length. [ 364.275543][T18406] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.282726][T18406] bridge0: port 2(bridge_slave_1) entered listening state [ 364.290227][T18406] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.297452][T18406] bridge0: port 1(bridge_slave_0) entered listening state [ 364.328497][T18406] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 364.350177][T18413] FAULT_INJECTION: forcing a failure. [ 364.350177][T18413] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 364.355084][T18411] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4071'. [ 364.377049][T18413] CPU: 0 UID: 0 PID: 18413 Comm: syz.1.4072 Not tainted syzkaller #0 PREEMPT(full) [ 364.377075][T18413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 364.377087][T18413] Call Trace: [ 364.377095][T18413] [ 364.377104][T18413] dump_stack_lvl+0x189/0x250 [ 364.377128][T18413] ? __pfx____ratelimit+0x10/0x10 [ 364.377149][T18413] ? __pfx_dump_stack_lvl+0x10/0x10 [ 364.377168][T18413] ? __pfx__printk+0x10/0x10 [ 364.377191][T18413] ? __might_fault+0xb0/0x130 [ 364.377224][T18413] should_fail_ex+0x414/0x560 [ 364.377250][T18413] _copy_from_user+0x2d/0xb0 [ 364.377273][T18413] kstrtouint_from_user+0xc4/0x170 [ 364.377301][T18413] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 364.377339][T18413] proc_fail_nth_write+0x88/0x200 [ 364.377361][T18413] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 364.377389][T18413] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 364.377413][T18413] vfs_write+0x27e/0xb30 [ 364.377444][T18413] ? __pfx_vfs_write+0x10/0x10 [ 364.377467][T18413] ? __fget_files+0x2a/0x420 [ 364.377488][T18413] ? __fget_files+0x3a0/0x420 [ 364.377503][T18413] ? __fget_files+0x2a/0x420 [ 364.377528][T18413] ksys_write+0x145/0x250 [ 364.377552][T18413] ? __pfx_ksys_write+0x10/0x10 [ 364.377577][T18413] ? do_syscall_64+0xbe/0xf80 [ 364.377602][T18413] do_syscall_64+0xfa/0xf80 [ 364.377624][T18413] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.377641][T18413] ? clear_bhb_loop+0x60/0xb0 [ 364.377663][T18413] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.377686][T18413] RIP: 0033:0x7f8db1d8e1ff [ 364.377704][T18413] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 364.377720][T18413] RSP: 002b:00007f8db2bed030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 364.377739][T18413] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8db1d8e1ff [ 364.377750][T18413] RDX: 0000000000000001 RSI: 00007f8db2bed0a0 RDI: 0000000000000004 [ 364.377761][T18413] RBP: 00007f8db2bed090 R08: 0000000000000000 R09: 0000000000000000 [ 364.377772][T18413] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 364.377783][T18413] R13: 00007f8db1fe6038 R14: 00007f8db1fe5fa0 R15: 00007ffd86acd4f8 [ 364.377816][T18413] [ 364.392773][T18411] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4071'. [ 364.701769][T18421] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4074'. [ 365.027133][T18062] udevd[18062]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 365.070451][T17781] udevd[17781]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 365.395760][T18448] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 365.618006][T18470] FAULT_INJECTION: forcing a failure. [ 365.618006][T18470] name failslab, interval 1, probability 0, space 0, times 0 [ 365.642054][T18470] CPU: 0 UID: 0 PID: 18470 Comm: syz.4.4088 Not tainted syzkaller #0 PREEMPT(full) [ 365.642081][T18470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 365.642096][T18470] Call Trace: [ 365.642107][T18470] [ 365.642115][T18470] dump_stack_lvl+0x189/0x250 [ 365.642139][T18470] ? __pfx____ratelimit+0x10/0x10 [ 365.642160][T18470] ? __pfx_dump_stack_lvl+0x10/0x10 [ 365.642178][T18470] ? __pfx__printk+0x10/0x10 [ 365.642207][T18470] ? __pfx___might_resched+0x10/0x10 [ 365.642224][T18470] ? fs_reclaim_acquire+0x7d/0x100 [ 365.642251][T18470] should_fail_ex+0x414/0x560 [ 365.642274][T18470] should_failslab+0xa8/0x100 [ 365.642299][T18470] __kmalloc_noprof+0xcb/0x800 [ 365.642319][T18470] ? security_sk_alloc+0x52/0x390 [ 365.642345][T18470] security_sk_alloc+0x52/0x390 [ 365.642367][T18470] sk_prot_alloc+0x101/0x220 [ 365.642389][T18470] ? sk_alloc+0x27/0x390 [ 365.642413][T18470] sk_alloc+0x3a/0x390 [ 365.642439][T18470] bpf_prog_test_run_skb+0x3f4/0x1d50 [ 365.642470][T18470] ? __fget_files+0x2a/0x420 [ 365.642489][T18470] ? __fget_files+0x2a/0x420 [ 365.642503][T18470] ? __fget_files+0x3a0/0x420 [ 365.642518][T18470] ? __fget_files+0x2a/0x420 [ 365.642538][T18470] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 365.642563][T18470] bpf_prog_test_run+0x2c7/0x340 [ 365.642588][T18470] __sys_bpf+0x562/0x860 [ 365.642610][T18470] ? __pfx___sys_bpf+0x10/0x10 [ 365.642646][T18470] ? ksys_write+0x22a/0x250 [ 365.642667][T18470] ? __pfx_ksys_write+0x10/0x10 [ 365.642691][T18470] __x64_sys_bpf+0x7c/0x90 [ 365.642716][T18470] do_syscall_64+0xfa/0xf80 [ 365.642738][T18470] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.642755][T18470] ? clear_bhb_loop+0x60/0xb0 [ 365.642775][T18470] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.642792][T18470] RIP: 0033:0x7f638b78f749 [ 365.642808][T18470] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 365.642823][T18470] RSP: 002b:00007f638c6d2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 365.642842][T18470] RAX: ffffffffffffffda RBX: 00007f638b9e5fa0 RCX: 00007f638b78f749 [ 365.642855][T18470] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 365.642866][T18470] RBP: 00007f638c6d2090 R08: 0000000000000000 R09: 0000000000000000 [ 365.642877][T18470] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 365.642887][T18470] R13: 00007f638b9e6038 R14: 00007f638b9e5fa0 R15: 00007ffec84e9ee8 [ 365.642918][T18470] [ 365.710374][T18477] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 365.898477][T18477] IPv6: NLM_F_CREATE should be set when creating new route [ 365.922865][ T25] block nbd0: Possible stuck request ffff888024de5080: control (read@0,1024B). Runtime 14 seconds [ 365.939529][ T25] block nbd0: Possible stuck request ffff888024de5240: control (read@1024,1024B). Runtime 14 seconds [ 365.950566][ T25] block nbd0: Possible stuck request ffff888024de5400: control (read@2048,1024B). Runtime 14 seconds [ 365.962080][ T25] block nbd0: Possible stuck request ffff888024de55c0: control (read@3072,1024B). Runtime 14 seconds [ 366.443337][T18502] bond3 (unregistering): Released all slaves [ 366.568795][T18512] bond1: option mode: unable to set because the bond device has slaves [ 366.603756][T18516] bond1: (slave macvlan3): Error -98 calling set_mac_address [ 366.738697][T18518] syzkaller0: entered promiscuous mode [ 366.744888][T18518] syzkaller0: entered allmulticast mode [ 366.768631][T18518] tipc: Enabled bearer , priority 0 [ 366.777075][T18520] syzkaller0: entered promiscuous mode [ 366.792311][T18520] syzkaller0: entered allmulticast mode [ 366.839281][T18517] tipc: Resetting bearer [ 366.870462][T18517] tipc: Disabling bearer [ 366.889698][T18520] tipc: Enabled bearer , priority 0 [ 366.913135][T18519] tipc: Resetting bearer [ 366.973358][T18519] tipc: Disabling bearer [ 367.148887][T18545] vlan1: left allmulticast mode [ 367.153806][T18545] veth0_vlan: left allmulticast mode [ 367.214516][T18550] netlink: 'syz.3.4112': attribute type 4 has an invalid length. [ 367.246600][T18550] netlink: 'syz.3.4112': attribute type 4 has an invalid length. [ 367.417745][T18558] can: request_module (can-proto-5) failed. [ 367.631899][T18550] bond_slave_0: left promiscuous mode [ 367.645646][T18550] bond_slave_1: left promiscuous mode [ 368.001950][T18550] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 368.034618][T18550] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 368.482269][T18573] tipc: Enabling of bearer rejected, failed to enable media [ 368.496424][T18575] syzkaller0: entered promiscuous mode [ 368.502010][T18575] syzkaller0: entered allmulticast mode [ 368.527987][ T12] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.679704][ T12] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.698813][ T12] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.719827][ T12] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.829994][T18603] openvswitch: netlink: Unknown nsh attribute 0 [ 368.844749][T18603] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 369.116673][T18630] __nla_validate_parse: 11 callbacks suppressed [ 369.116693][T18630] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4131'. [ 369.178798][T18632] tipc: Enabled bearer , priority 10 [ 369.267942][ T25] block nbd0: Possible stuck request ffff888024de5080: control (read@0,1024B). Runtime 16 seconds [ 369.279051][ T25] block nbd0: Possible stuck request ffff888024de5240: control (read@1024,1024B). Runtime 16 seconds [ 369.290460][ T25] block nbd0: Possible stuck request ffff888024de5400: control (read@2048,1024B). Runtime 16 seconds [ 369.301891][ T25] block nbd0: Possible stuck request ffff888024de55c0: control (read@3072,1024B). Runtime 16 seconds [ 369.337075][T18635] syzkaller0: entered promiscuous mode [ 369.342607][T18635] syzkaller0: entered allmulticast mode [ 369.361703][T18644] netlink: 96 bytes leftover after parsing attributes in process `syz.4.4137'. [ 369.414193][T18635] tipc: Enabled bearer , priority 0 [ 369.441397][T18644] 8021q: VLANs not supported on gre0 [ 369.458206][T18633] tipc: Resetting bearer [ 369.516861][T18633] tipc: Disabling bearer [ 369.551328][T18654] FAULT_INJECTION: forcing a failure. [ 369.551328][T18654] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 369.607600][T18654] CPU: 0 UID: 0 PID: 18654 Comm: syz.2.4139 Not tainted syzkaller #0 PREEMPT(full) [ 369.607627][T18654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 369.607638][T18654] Call Trace: [ 369.607645][T18654] [ 369.607653][T18654] dump_stack_lvl+0x189/0x250 [ 369.607677][T18654] ? __pfx____ratelimit+0x10/0x10 [ 369.607697][T18654] ? __pfx_dump_stack_lvl+0x10/0x10 [ 369.607716][T18654] ? __pfx__printk+0x10/0x10 [ 369.607737][T18654] ? __might_fault+0xb0/0x130 [ 369.607768][T18654] should_fail_ex+0x414/0x560 [ 369.607792][T18654] _copy_from_iter+0x1cd/0x1630 [ 369.607812][T18654] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 369.607841][T18654] ? policy_nodemask+0x27c/0x720 [ 369.607863][T18654] ? __pfx__copy_from_iter+0x10/0x10 [ 369.607890][T18654] ? set_page_refcounted+0xa0/0x1e0 [ 369.607913][T18654] ? page_copy_sane+0x4e/0x280 [ 369.607935][T18654] copy_page_from_iter+0xdd/0x170 [ 369.607961][T18654] tun_get_user+0x1d40/0x3dc0 [ 369.607988][T18654] ? tun_get_user+0x6fc/0x3dc0 [ 369.608023][T18654] ? aa_file_perm+0x44c/0x1530 [ 369.608041][T18654] ? __pfx_tun_get_user+0x10/0x10 [ 369.608066][T18654] ? __lock_acquire+0x6b6/0x2cf0 [ 369.608084][T18654] ? kstrtoull+0x12f/0x1d0 [ 369.608111][T18654] ? ref_tracker_alloc+0x318/0x460 [ 369.608133][T18654] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 369.608159][T18654] ? tun_get+0x1c/0x2f0 [ 369.608187][T18654] ? tun_get+0x1c/0x2f0 [ 369.608209][T18654] ? tun_get+0x1c/0x2f0 [ 369.608236][T18654] tun_chr_write_iter+0x113/0x200 [ 369.608262][T18654] vfs_write+0x5c9/0xb30 [ 369.608288][T18654] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 369.608311][T18654] ? __pfx_vfs_write+0x10/0x10 [ 369.608346][T18654] ? __fget_files+0x2a/0x420 [ 369.608371][T18654] ksys_write+0x145/0x250 [ 369.608392][T18654] ? __pfx_ksys_write+0x10/0x10 [ 369.608417][T18654] ? do_syscall_64+0xbe/0xf80 [ 369.608441][T18654] do_syscall_64+0xfa/0xf80 [ 369.608463][T18654] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.608480][T18654] ? clear_bhb_loop+0x60/0xb0 [ 369.608501][T18654] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.608518][T18654] RIP: 0033:0x7fe39f18e1ff [ 369.608534][T18654] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 369.608548][T18654] RSP: 002b:00007fe3a00a5000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 369.608566][T18654] RAX: ffffffffffffffda RBX: 00007fe39f3e6090 RCX: 00007fe39f18e1ff [ 369.608580][T18654] RDX: 000000000000005a RSI: 0000200000000080 RDI: 00000000000000c8 [ 369.608592][T18654] RBP: 00007fe3a00a5090 R08: 0000000000000000 R09: 0000000000000000 [ 369.608602][T18654] R10: 000000000000005a R11: 0000000000000293 R12: 0000000000000001 [ 369.608616][T18654] R13: 00007fe39f3e6128 R14: 00007fe39f3e6090 R15: 00007ffe62b32c48 [ 369.608647][T18654] [ 370.044717][T18664] netlink: 'syz.3.4143': attribute type 1 has an invalid length. [ 370.223382][T18669] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4145'. [ 370.299972][T18672] tipc: Enabling of bearer rejected, already enabled [ 370.342265][T18673] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4147'. [ 370.352655][T18677] netlink: 'syz.1.4149': attribute type 21 has an invalid length. [ 370.365948][T18677] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4149'. [ 370.506611][T18685] xt_TCPMSS: Only works on TCP SYN packets [ 370.522886][T18684] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4153'. [ 370.594747][T18684] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4153'. [ 370.626933][T18684] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4153'. [ 370.650137][T18691] Cannot find add_set index 2 as target [ 370.661289][T18684] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4153'. [ 370.672380][T18684] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4153'. [ 370.763582][T18701] bond1: option mode: unable to set because the bond device has slaves [ 370.805038][T18701] bond1: (slave macvlan4): Error -98 calling set_mac_address [ 370.854651][ T10] IPVS: starting estimator thread 0... [ 370.860911][T18706] IPVS: sh: SCTP 127.0.0.1:0 - no destination available [ 370.905063][T18709] FAULT_INJECTION: forcing a failure. [ 370.905063][T18709] name failslab, interval 1, probability 0, space 0, times 0 [ 370.917789][T18709] CPU: 0 UID: 0 PID: 18709 Comm: syz.4.4162 Not tainted syzkaller #0 PREEMPT(full) [ 370.917812][T18709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 370.917824][T18709] Call Trace: [ 370.917832][T18709] [ 370.917841][T18709] dump_stack_lvl+0x189/0x250 [ 370.917865][T18709] ? __pfx____ratelimit+0x10/0x10 [ 370.917885][T18709] ? __pfx_dump_stack_lvl+0x10/0x10 [ 370.917903][T18709] ? __pfx__printk+0x10/0x10 [ 370.917930][T18709] ? finish_task_switch+0x302/0x940 [ 370.917959][T18709] should_fail_ex+0x414/0x560 [ 370.917984][T18709] should_failslab+0xa8/0x100 [ 370.918009][T18709] kmem_cache_alloc_noprof+0x74/0x6f0 [ 370.918030][T18709] ? skb_clone+0x212/0x3a0 [ 370.918052][T18709] skb_clone+0x212/0x3a0 [ 370.918073][T18709] bpf_clone_redirect+0x16a/0x4b0 [ 370.918096][T18709] ? __pfx___schedule+0x10/0x10 [ 370.918123][T18709] ? bpf_test_run+0x192/0x7d0 [ 370.918139][T18709] bpf_prog_7c64685fc60f7d44+0x5f/0x68 [ 370.918162][T18709] ? preempt_schedule+0xae/0xc0 [ 370.918180][T18709] ? bpf_test_run+0x192/0x7d0 [ 370.918196][T18709] ? preempt_schedule_common+0x83/0xd0 [ 370.918218][T18709] ? preempt_schedule+0xae/0xc0 [ 370.918236][T18709] ? __pfx_preempt_schedule+0x10/0x10 [ 370.918258][T18709] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 370.918294][T18709] ? preempt_schedule_thunk+0x16/0x30 [ 370.918319][T18709] ? __local_bh_disable_ip+0xf1/0x190 [ 370.918336][T18709] ? __pfx___cant_migrate+0x10/0x10 [ 370.918352][T18709] ? __local_bh_enable_ip+0x13e/0x1c0 [ 370.918368][T18709] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 370.918390][T18709] ? bpf_test_timer_continue+0x10d/0x320 [ 370.918412][T18709] bpf_test_run+0x313/0x7d0 [ 370.918451][T18709] ? __pfx_bpf_test_run+0x10/0x10 [ 370.918479][T18709] ? rcu_is_watching+0x15/0xb0 [ 370.918500][T18709] ? __kasan_krealloc+0xeb/0x110 [ 370.918523][T18709] ? eth_type_trans+0x35e/0x6d0 [ 370.918548][T18709] ? convert___skb_to_skb+0x3d/0x5b0 [ 370.918568][T18709] bpf_prog_test_run_skb+0xd67/0x1d50 [ 370.918606][T18709] ? __fget_files+0x2a/0x420 [ 370.918621][T18709] ? __fget_files+0x3a0/0x420 [ 370.918636][T18709] ? __fget_files+0x2a/0x420 [ 370.918656][T18709] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 370.918682][T18709] bpf_prog_test_run+0x2c7/0x340 [ 370.918706][T18709] __sys_bpf+0x562/0x860 [ 370.918727][T18709] ? __pfx___sys_bpf+0x10/0x10 [ 370.918760][T18709] ? ksys_write+0x22a/0x250 [ 370.918782][T18709] ? __pfx_ksys_write+0x10/0x10 [ 370.918808][T18709] __x64_sys_bpf+0x7c/0x90 [ 370.918827][T18709] do_syscall_64+0xfa/0xf80 [ 370.918848][T18709] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.918863][T18709] ? clear_bhb_loop+0x60/0xb0 [ 370.918882][T18709] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.918899][T18709] RIP: 0033:0x7f638b78f749 [ 370.918915][T18709] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 370.918930][T18709] RSP: 002b:00007f638c6d2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 370.918949][T18709] RAX: ffffffffffffffda RBX: 00007f638b9e5fa0 RCX: 00007f638b78f749 [ 370.918962][T18709] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 370.918973][T18709] RBP: 00007f638c6d2090 R08: 0000000000000000 R09: 0000000000000000 [ 370.918984][T18709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 370.918995][T18709] R13: 00007f638b9e6038 R14: 00007f638b9e5fa0 R15: 00007ffec84e9ee8 [ 370.919024][T18709] [ 370.955759][T18707] IPVS: using max 32 ests per chain, 76800 per kthread [ 371.555623][T18736] FAULT_INJECTION: forcing a failure. [ 371.555623][T18736] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 371.605493][T18739] !: renamed from dummy0 (while UP) [ 371.616910][T18736] CPU: 0 UID: 0 PID: 18736 Comm: syz.3.4167 Not tainted syzkaller #0 PREEMPT(full) [ 371.616931][T18736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 371.616943][T18736] Call Trace: [ 371.616958][T18736] [ 371.616965][T18736] dump_stack_lvl+0x189/0x250 [ 371.616990][T18736] ? __pfx____ratelimit+0x10/0x10 [ 371.617012][T18736] ? __pfx_dump_stack_lvl+0x10/0x10 [ 371.617029][T18736] ? __pfx__printk+0x10/0x10 [ 371.617061][T18736] should_fail_ex+0x414/0x560 [ 371.617086][T18736] _copy_to_user+0x31/0xb0 [ 371.617108][T18736] simple_read_from_buffer+0xe1/0x170 [ 371.617134][T18736] proc_fail_nth_read+0x1b3/0x220 [ 371.617158][T18736] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 371.617181][T18736] ? rw_verify_area+0x2a6/0x4d0 [ 371.617199][T18736] ? tun_chr_write_iter+0x18a/0x200 [ 371.617219][T18736] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 371.617241][T18736] vfs_read+0x200/0xa30 [ 371.617259][T18736] ? fdget_pos+0x247/0x320 [ 371.617280][T18736] ? __pfx___mutex_lock+0x10/0x10 [ 371.617300][T18736] ? __pfx_vfs_read+0x10/0x10 [ 371.617321][T18736] ? __fget_files+0x2a/0x420 [ 371.617341][T18736] ? __fget_files+0x3a0/0x420 [ 371.617355][T18736] ? __fget_files+0x2a/0x420 [ 371.617380][T18736] ksys_read+0x145/0x250 [ 371.617401][T18736] ? __pfx_ksys_read+0x10/0x10 [ 371.617425][T18736] ? do_syscall_64+0xbe/0xf80 [ 371.617450][T18736] do_syscall_64+0xfa/0xf80 [ 371.617470][T18736] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.617486][T18736] ? clear_bhb_loop+0x60/0xb0 [ 371.617507][T18736] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.617522][T18736] RIP: 0033:0x7fd80ad8e15c [ 371.617536][T18736] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 371.617551][T18736] RSP: 002b:00007fd80bc35030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 371.617569][T18736] RAX: ffffffffffffffda RBX: 00007fd80afe6090 RCX: 00007fd80ad8e15c [ 371.617581][T18736] RDX: 000000000000000f RSI: 00007fd80bc350a0 RDI: 0000000000000006 [ 371.617592][T18736] RBP: 00007fd80bc35090 R08: 0000000000000000 R09: 0000000000000000 [ 371.617602][T18736] R10: 000000000000005a R11: 0000000000000246 R12: 0000000000000001 [ 371.617613][T18736] R13: 00007fd80afe6128 R14: 00007fd80afe6090 R15: 00007ffc1e3db438 [ 371.617644][T18736] [ 371.895322][T18737] vcan0: tx drop: invalid sa for name 0x0000000000000008 [ 372.026434][T18754] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 372.318686][T18776] Cannot find add_set index 2 as target [ 372.402659][T18782] openvswitch: netlink: Unknown nsh attribute 0 [ 372.416093][T18782] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 372.500287][T18788] netlink: 'syz.1.4186': attribute type 33 has an invalid length. [ 372.509456][T18787] netlink: 'syz.1.4186': attribute type 33 has an invalid length. [ 372.638186][ T25] block nbd0: Possible stuck request ffff888024de5080: control (read@0,1024B). Runtime 18 seconds [ 372.651266][T18793] vcan0: tx drop: invalid sa for name 0x0000000000000008 [ 372.652146][ T25] block nbd0: Possible stuck request ffff888024de5240: control (read@1024,1024B). Runtime 18 seconds [ 372.670422][ T25] block nbd0: Possible stuck request ffff888024de5400: control (read@2048,1024B). Runtime 18 seconds [ 372.681973][ T25] block nbd0: Possible stuck request ffff888024de55c0: control (read@3072,1024B). Runtime 18 seconds [ 372.802622][T18812] Cannot find add_set index 2 as target [ 372.889048][T18815] bridge_slave_1 (unregistering): left allmulticast mode [ 372.897481][T18815] bridge_slave_1 (unregistering): left promiscuous mode [ 372.905043][T18815] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.043476][T18826] netlink: 'syz.0.4198': attribute type 1 has an invalid length. [ 373.301294][T18835] vlan2: entered promiscuous mode [ 373.317007][T18835] geneve1: entered promiscuous mode [ 373.331927][T18835] vlan2: entered allmulticast mode [ 373.346825][T18835] geneve1: entered allmulticast mode [ 373.635233][T18862] mac80211_hwsim hwsim29 syzkaller0: entered promiscuous mode [ 373.653407][T18862] mac80211_hwsim hwsim29 syzkaller0: entered allmulticast mode [ 375.984927][ T25] block nbd0: Possible stuck request ffff888024de5080: control (read@0,1024B). Runtime 20 seconds [ 375.995747][ T25] block nbd0: Possible stuck request ffff888024de5240: control (read@1024,1024B). Runtime 20 seconds [ 376.006749][ T25] block nbd0: Possible stuck request ffff888024de5400: control (read@2048,1024B). Runtime 20 seconds [ 376.018179][ T25] block nbd0: Possible stuck request ffff888024de55c0: control (read@3072,1024B). Runtime 20 seconds [ 376.662279][T18878] tipc: New replicast peer: 255.255.255.255 [ 376.684828][T18878] tipc: Enabled bearer , priority 10 [ 376.690116][T18884] __nla_validate_parse: 40 callbacks suppressed [ 376.690136][T18884] netlink: 236 bytes leftover after parsing attributes in process `syz.2.4218'. [ 376.732767][T18886] x_tables: duplicate underflow at hook 2 [ 376.957390][T18893] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4223'. [ 376.986440][T18899] mac80211_hwsim hwsim31 syzkaller0: entered promiscuous mode [ 376.994669][T18899] mac80211_hwsim hwsim31 syzkaller0: entered allmulticast mode [ 377.462310][T18926] mac80211_hwsim hwsim29 syzkaller0: left promiscuous mode [ 377.477693][T18926] mac80211_hwsim hwsim29 syzkaller0: left allmulticast mode [ 377.499343][T18929] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4234'. [ 377.760271][T18943] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4239'. [ 377.769908][T18943] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4239'. [ 377.804420][ T5950] tipc: Node number set to 3792578985 [ 377.983935][T18957] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4243'. [ 377.996450][T18957] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4243'. [ 378.269673][T18975] mac80211_hwsim hwsim31 syzkaller0: left promiscuous mode [ 378.279183][T18975] mac80211_hwsim hwsim31 syzkaller0: left allmulticast mode [ 378.279318][T18972] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4250'. [ 378.341569][T18978] netlink: 'syz.3.4251': attribute type 1 has an invalid length. [ 378.415392][T18981] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4251'. [ 378.467879][T18986] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4251'. [ 378.611764][T18981] veth2: entered promiscuous mode [ 378.674146][T18981] veth2: entered allmulticast mode [ 378.715030][T17781] udevd[17781]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 378.737731][T18986] 8021q: adding VLAN 0 to HW filter on device bond2 [ 378.785180][T17781] udevd[17781]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 379.087791][T19015] openvswitch: netlink: Key type 50 is out of range max 32 [ 379.106657][T19014] tipc: Enabled bearer , priority 0 [ 379.132938][T19014] syzkaller0: entered promiscuous mode [ 379.145090][T19014] syzkaller0: entered allmulticast mode [ 379.161092][T19014] tipc: Resetting bearer [ 379.262222][T19014] tipc: Disabling bearer [ 379.363907][ T25] block nbd0: Possible stuck request ffff888024de5080: control (read@0,1024B). Runtime 22 seconds [ 379.375818][ T25] block nbd0: Possible stuck request ffff888024de5240: control (read@1024,1024B). Runtime 22 seconds [ 379.387989][ T25] block nbd0: Possible stuck request ffff888024de5400: control (read@2048,1024B). Runtime 22 seconds [ 379.399144][ T25] block nbd0: Possible stuck request ffff888024de55c0: control (read@3072,1024B). Runtime 22 seconds [ 379.421717][T19031] dvmrp0: entered allmulticast mode [ 379.451875][T19031] dvmrp0: left allmulticast mode [ 379.578255][T19045] sch_tbf: burst 512 is lower than device syzkaller0 mtu (1500) ! [ 379.860250][T19063] netlink: 'syz.4.4275': attribute type 8 has an invalid length. [ 380.151542][T19079] FAULT_INJECTION: forcing a failure. [ 380.151542][T19079] name failslab, interval 1, probability 0, space 0, times 0 [ 380.216187][T19079] CPU: 0 UID: 0 PID: 19079 Comm: syz.2.4283 Not tainted syzkaller #0 PREEMPT(full) [ 380.216213][T19079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 380.216225][T19079] Call Trace: [ 380.216233][T19079] [ 380.216241][T19079] dump_stack_lvl+0x189/0x250 [ 380.216264][T19079] ? __pfx____ratelimit+0x10/0x10 [ 380.216286][T19079] ? __pfx_dump_stack_lvl+0x10/0x10 [ 380.216304][T19079] ? __pfx__printk+0x10/0x10 [ 380.216332][T19079] ? __pfx___might_resched+0x10/0x10 [ 380.216355][T19079] should_fail_ex+0x414/0x560 [ 380.216380][T19079] should_failslab+0xa8/0x100 [ 380.216406][T19079] __kmalloc_noprof+0xcb/0x800 [ 380.216426][T19079] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 380.216451][T19079] tomoyo_realpath_from_path+0xe3/0x5d0 [ 380.216472][T19079] ? tomoyo_domain+0xd8/0x130 [ 380.216497][T19079] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 380.216520][T19079] tomoyo_path_number_perm+0x1e8/0x5a0 [ 380.216546][T19079] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 380.216586][T19079] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 380.216628][T19079] ? __fget_files+0x2a/0x420 [ 380.216649][T19079] ? __fget_files+0x3a0/0x420 [ 380.216664][T19079] ? __fget_files+0x2a/0x420 [ 380.216684][T19079] security_file_ioctl+0xcb/0x2d0 [ 380.216709][T19079] __se_sys_ioctl+0x47/0x170 [ 380.216733][T19079] do_syscall_64+0xfa/0xf80 [ 380.216755][T19079] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.216770][T19079] ? clear_bhb_loop+0x60/0xb0 [ 380.216791][T19079] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.216807][T19079] RIP: 0033:0x7fe39f18f749 [ 380.216823][T19079] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 380.216837][T19079] RSP: 002b:00007fe3a00c6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 380.216856][T19079] RAX: ffffffffffffffda RBX: 00007fe39f3e5fa0 RCX: 00007fe39f18f749 [ 380.216868][T19079] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000004 [ 380.216879][T19079] RBP: 00007fe3a00c6090 R08: 0000000000000000 R09: 0000000000000000 [ 380.216890][T19079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 380.216900][T19079] R13: 00007fe39f3e6038 R14: 00007fe39f3e5fa0 R15: 00007ffe62b32c48 [ 380.216932][T19079] [ 380.216940][T19079] ERROR: Out of memory at tomoyo_realpath_from_path. [ 380.672573][T19103] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 380.679872][T19103] IPv6: NLM_F_CREATE should be set when creating new route [ 380.905630][T19119] bond1: option mode: unable to set because the bond device has slaves [ 380.939451][T19120] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 380.967054][T19120] bond1: (slave macvlan3): Enslaving as a backup interface with an up link [ 380.980963][T19125] ipt_REJECT: TCP_RESET invalid for non-tcp [ 381.396762][T19154] netlink: 'syz.2.4312': attribute type 1 has an invalid length. [ 381.412268][T19157] bond1: option mode: unable to set because the bond device has slaves [ 381.526478][T19154] bond4: entered promiscuous mode [ 381.547762][T19154] 8021q: adding VLAN 0 to HW filter on device bond4 [ 381.562851][T19160] bond4: entered allmulticast mode [ 381.655890][T19168] bond4: (slave bridge2): making interface the new active one [ 381.663465][T19168] bridge2: entered promiscuous mode [ 381.688105][T19168] bridge2: entered allmulticast mode [ 381.695325][T19168] bond4: (slave bridge2): Enslaving as an active interface with an up link [ 381.890579][T19187] FAULT_INJECTION: forcing a failure. [ 381.890579][T19187] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 381.906957][T19187] CPU: 0 UID: 0 PID: 19187 Comm: syz.3.4321 Not tainted syzkaller #0 PREEMPT(full) [ 381.906982][T19187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 381.906993][T19187] Call Trace: [ 381.907001][T19187] [ 381.907009][T19187] dump_stack_lvl+0x189/0x250 [ 381.907033][T19187] ? __pfx____ratelimit+0x10/0x10 [ 381.907055][T19187] ? __pfx_dump_stack_lvl+0x10/0x10 [ 381.907073][T19187] ? __pfx__printk+0x10/0x10 [ 381.907095][T19187] ? __might_fault+0xb0/0x130 [ 381.907127][T19187] should_fail_ex+0x414/0x560 [ 381.907149][T19187] _copy_from_user+0x2d/0xb0 [ 381.907173][T19187] sock_do_ioctl+0x182/0x300 [ 381.907194][T19187] ? __pfx_sock_do_ioctl+0x10/0x10 [ 381.907226][T19187] sock_ioctl+0x576/0x790 [ 381.907244][T19187] ? __pfx_sock_ioctl+0x10/0x10 [ 381.907269][T19187] ? __fget_files+0x3a0/0x420 [ 381.907283][T19187] ? __fget_files+0x2a/0x420 [ 381.907302][T19187] ? bpf_lsm_file_ioctl+0x9/0x20 [ 381.907318][T19187] ? __pfx_sock_ioctl+0x10/0x10 [ 381.907336][T19187] __se_sys_ioctl+0xfc/0x170 [ 381.907358][T19187] do_syscall_64+0xfa/0xf80 [ 381.907378][T19187] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.907395][T19187] ? clear_bhb_loop+0x60/0xb0 [ 381.907415][T19187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.907432][T19187] RIP: 0033:0x7fd80ad8f749 [ 381.907448][T19187] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 381.907464][T19187] RSP: 002b:00007fd80bc56038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 381.907483][T19187] RAX: ffffffffffffffda RBX: 00007fd80afe5fa0 RCX: 00007fd80ad8f749 [ 381.907496][T19187] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000004 [ 381.907508][T19187] RBP: 00007fd80bc56090 R08: 0000000000000000 R09: 0000000000000000 [ 381.907520][T19187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 381.907530][T19187] R13: 00007fd80afe6038 R14: 00007fd80afe5fa0 R15: 00007ffc1e3db438 [ 381.907562][T19187] [ 382.440201][T19205] tipc: Enabling of bearer rejected, already enabled [ 382.497962][T19210] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 382.505301][T19210] IPv6: NLM_F_CREATE should be set when creating new route [ 382.534292][T19211] __nla_validate_parse: 12 callbacks suppressed [ 382.534312][T19211] netlink: 96 bytes leftover after parsing attributes in process `syz.4.4328'. [ 382.555956][T19211] 8021q: VLANs not supported on gre0 [ 382.636755][T19217] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4330'. [ 382.699254][T19221] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4333'. [ 382.711694][ T25] block nbd0: Possible stuck request ffff888024de5080: control (read@0,1024B). Runtime 24 seconds [ 382.726605][ T25] block nbd0: Possible stuck request ffff888024de5240: control (read@1024,1024B). Runtime 24 seconds [ 382.740314][ T25] block nbd0: Possible stuck request ffff888024de5400: control (read@2048,1024B). Runtime 24 seconds [ 382.754542][ T25] block nbd0: Possible stuck request ffff888024de55c0: control (read@3072,1024B). Runtime 24 seconds [ 382.836216][T19225] netlink: 'syz.2.4335': attribute type 12 has an invalid length. [ 382.874094][T19225] netlink: 232 bytes leftover after parsing attributes in process `syz.2.4335'. [ 382.906858][T19228] syzkaller0: entered promiscuous mode [ 382.914560][T19228] syzkaller0: entered allmulticast mode [ 383.002751][T19233] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4338'. [ 383.018161][T19233] netlink: 112 bytes leftover after parsing attributes in process `syz.1.4338'. [ 383.463452][T19254] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4343'. [ 384.665918][T19231] bond1: option mode: unable to set because the bond device has slaves [ 384.681977][T19238] bond1: (slave macvlan4): Error -98 calling set_mac_address [ 384.922187][T19265] pimreg: entered allmulticast mode [ 384.971627][T19267] workqueue: name exceeds WQ_NAME_LEN. Truncating to: “&˜%āī÷åQÍ0@ÃĻjÛČĘĢ–Ķéôđ} [ 385.038543][ T25] block nbd1: Possible stuck request ffff888024e15080: control (read@0,1024B). Runtime 30 seconds [ 385.039172][T19265] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4348'. [ 385.049954][ T25] block nbd1: Possible stuck request ffff888024e15240: control (read@1024,1024B). Runtime 30 seconds [ 385.070024][ T25] block nbd1: Possible stuck request ffff888024e15400: control (read@2048,1024B). Runtime 30 seconds [ 385.082192][ T25] block nbd1: Possible stuck request ffff888024e155c0: control (read@3072,1024B). Runtime 30 seconds [ 385.094601][T19269] tipc: Enabling of bearer rejected, already enabled [ 385.117517][T19265] netlink: 'syz.3.4348': attribute type 4 has an invalid length. [ 385.129948][T19264] pimreg: left allmulticast mode [ 385.209851][T19278] FAULT_INJECTION: forcing a failure. [ 385.209851][T19278] name failslab, interval 1, probability 0, space 0, times 0 [ 385.253133][T19278] CPU: 1 UID: 0 PID: 19278 Comm: syz.4.4354 Not tainted syzkaller #0 PREEMPT(full) [ 385.253159][T19278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 385.253170][T19278] Call Trace: [ 385.253178][T19278] [ 385.253185][T19278] dump_stack_lvl+0x189/0x250 [ 385.253208][T19278] ? __pfx____ratelimit+0x10/0x10 [ 385.253229][T19278] ? __pfx_dump_stack_lvl+0x10/0x10 [ 385.253247][T19278] ? __pfx__printk+0x10/0x10 [ 385.253267][T19278] ? kmalloc_reserve+0xbd/0x290 [ 385.253290][T19278] ? __lock_acquire+0x6b6/0x2cf0 [ 385.253315][T19278] should_fail_ex+0x414/0x560 [ 385.253339][T19278] should_failslab+0xa8/0x100 [ 385.253364][T19278] kmem_cache_alloc_noprof+0x74/0x6f0 [ 385.253384][T19278] ? skb_clone+0x212/0x3a0 [ 385.253402][T19278] skb_clone+0x212/0x3a0 [ 385.253422][T19278] __netlink_deliver_tap+0x404/0x850 [ 385.253451][T19278] ? netlink_deliver_tap+0x2e/0x1b0 [ 385.253470][T19278] netlink_deliver_tap+0x19c/0x1b0 [ 385.253489][T19278] netlink_unicast+0x7fa/0x9e0 [ 385.253522][T19278] ? __pfx_netlink_unicast+0x10/0x10 [ 385.253548][T19278] ? netlink_sendmsg+0x642/0xb30 [ 385.253563][T19278] ? skb_put+0x11b/0x210 [ 385.253589][T19278] netlink_sendmsg+0x805/0xb30 [ 385.253613][T19278] ? __pfx_netlink_sendmsg+0x10/0x10 [ 385.253633][T19278] ? aa_sock_msg_perm+0xf1/0x1b0 [ 385.253661][T19278] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 385.253682][T19278] ? __pfx_netlink_sendmsg+0x10/0x10 [ 385.253697][T19278] __sock_sendmsg+0x21c/0x270 [ 385.253720][T19278] ____sys_sendmsg+0x505/0x820 [ 385.253750][T19278] ? __pfx_____sys_sendmsg+0x10/0x10 [ 385.253784][T19278] ? import_iovec+0x74/0xa0 [ 385.253810][T19278] ___sys_sendmsg+0x21f/0x2a0 [ 385.253837][T19278] ? __pfx____sys_sendmsg+0x10/0x10 [ 385.253866][T19278] ? rcu_read_lock_any_held+0xb3/0x120 [ 385.253914][T19278] ? __fget_files+0x2a/0x420 [ 385.253929][T19278] ? __fget_files+0x3a0/0x420 [ 385.253955][T19278] __x64_sys_sendmsg+0x19b/0x260 [ 385.253985][T19278] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 385.254016][T19278] ? __pfx_ksys_write+0x10/0x10 [ 385.254041][T19278] ? do_syscall_64+0xbe/0xf80 [ 385.254066][T19278] do_syscall_64+0xfa/0xf80 [ 385.254088][T19278] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.254105][T19278] ? clear_bhb_loop+0x60/0xb0 [ 385.254126][T19278] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.254142][T19278] RIP: 0033:0x7f638b78f749 [ 385.254159][T19278] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 385.254174][T19278] RSP: 002b:00007f638c6d2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 385.254193][T19278] RAX: ffffffffffffffda RBX: 00007f638b9e5fa0 RCX: 00007f638b78f749 [ 385.254206][T19278] RDX: 00000000000400c0 RSI: 0000200000000240 RDI: 0000000000000003 [ 385.254217][T19278] RBP: 00007f638c6d2090 R08: 0000000000000000 R09: 0000000000000000 [ 385.254227][T19278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 385.254237][T19278] R13: 00007f638b9e6038 R14: 00007f638b9e5fa0 R15: 00007ffec84e9ee8 [ 385.254270][T19278] [ 385.590704][T19278] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4354'. [ 385.618221][T19286] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4355'. [ 385.828933][T19301] 8021q: VLANs not supported on gre0 [ 385.967315][T19305] tipc: Enabling of bearer rejected, already enabled [ 386.076794][ T25] block nbd0: Possible stuck request ffff888024de5080: control (read@0,1024B). Runtime 26 seconds [ 386.088519][ T25] block nbd0: Possible stuck request ffff888024de5240: control (read@1024,1024B). Runtime 26 seconds [ 386.100874][ T25] block nbd0: Possible stuck request ffff888024de5400: control (read@2048,1024B). Runtime 26 seconds [ 386.112122][ T25] block nbd0: Possible stuck request ffff888024de55c0: control (read@3072,1024B). Runtime 26 seconds [ 386.151970][T19320] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 386.155377][T19321] FAULT_INJECTION: forcing a failure. [ 386.155377][T19321] name failslab, interval 1, probability 0, space 0, times 0 [ 386.182140][T19321] CPU: 1 UID: 0 PID: 19321 Comm: syz.0.4370 Not tainted syzkaller #0 PREEMPT(full) [ 386.182164][T19321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 386.182173][T19321] Call Trace: [ 386.182179][T19321] [ 386.182187][T19321] dump_stack_lvl+0x189/0x250 [ 386.182211][T19321] ? __pfx____ratelimit+0x10/0x10 [ 386.182232][T19321] ? __pfx_dump_stack_lvl+0x10/0x10 [ 386.182251][T19321] ? __pfx__printk+0x10/0x10 [ 386.182276][T19321] ? __pfx___might_resched+0x10/0x10 [ 386.182294][T19321] ? fs_reclaim_acquire+0x7d/0x100 [ 386.182322][T19321] should_fail_ex+0x414/0x560 [ 386.182348][T19321] should_failslab+0xa8/0x100 [ 386.182375][T19321] kmem_cache_alloc_node_noprof+0x77/0x710 [ 386.182395][T19321] ? __alloc_skb+0x255/0x430 [ 386.182416][T19321] ? napi_skb_cache_get+0x4a5/0x780 [ 386.182436][T19321] ? napi_skb_cache_get+0x151/0x780 [ 386.182461][T19321] __alloc_skb+0x255/0x430 [ 386.182486][T19321] ? __pfx___alloc_skb+0x10/0x10 [ 386.182506][T19321] ? devlink_nl_port_handle_size+0xe6/0x110 [ 386.182543][T19321] rtmsg_ifinfo_build_skb+0x84/0x260 [ 386.182571][T19321] rtnetlink_event+0x1b7/0x270 [ 386.182598][T19321] notifier_call_chain+0x19d/0x3a0 [ 386.182626][T19321] netdev_features_change+0x85/0xc0 [ 386.182647][T19321] ? __pfx_netdev_features_change+0x10/0x10 [ 386.182668][T19321] ? __pm_runtime_resume+0x9d/0x180 [ 386.182700][T19321] dev_ethtool+0x1541/0x19c0 [ 386.182729][T19321] ? __pfx_dev_ethtool+0x10/0x10 [ 386.182763][T19321] ? dev_load+0x21/0x1f0 [ 386.182786][T19321] dev_ioctl+0x392/0x1150 [ 386.182821][T19321] sock_do_ioctl+0x22c/0x300 [ 386.182843][T19321] ? __pfx_sock_do_ioctl+0x10/0x10 [ 386.182880][T19321] sock_ioctl+0x576/0x790 [ 386.182902][T19321] ? __pfx_sock_ioctl+0x10/0x10 [ 386.182924][T19321] ? __fget_files+0x3a0/0x420 [ 386.182939][T19321] ? __fget_files+0x2a/0x420 [ 386.182959][T19321] ? bpf_lsm_file_ioctl+0x9/0x20 [ 386.182975][T19321] ? __pfx_sock_ioctl+0x10/0x10 [ 386.182994][T19321] __se_sys_ioctl+0xfc/0x170 [ 386.183017][T19321] do_syscall_64+0xfa/0xf80 [ 386.183040][T19321] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.183057][T19321] ? clear_bhb_loop+0x60/0xb0 [ 386.183078][T19321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.183095][T19321] RIP: 0033:0x7f5448d8f749 [ 386.183111][T19321] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 386.183126][T19321] RSP: 002b:00007f5449c37038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 386.183148][T19321] RAX: ffffffffffffffda RBX: 00007f5448fe5fa0 RCX: 00007f5448d8f749 [ 386.183161][T19321] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000004 [ 386.183172][T19321] RBP: 00007f5449c37090 R08: 0000000000000000 R09: 0000000000000000 [ 386.183183][T19321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 386.183194][T19321] R13: 00007f5448fe6038 R14: 00007f5448fe5fa0 R15: 00007ffcb967f9a8 [ 386.183226][T19321] [ 386.185850][ T8670] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 386.491202][ T8670] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.563040][T19327] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 386.621426][T19331] SET target dimension over the limit! [ 386.729477][T19337] ICMPv6: NA: 00:00:00:00:00:00 advertised our address fe80::aa on syz_tun! [ 386.756825][T19335] 8021q: VLANs not supported on gre0 [ 386.858143][T19345] netlink: 'syz.0.4381': attribute type 1 has an invalid length. [ 386.966559][T19350] tipc: Enabling of bearer rejected, already enabled [ 386.994667][T19352] bond3: (slave gretap3): making interface the new active one [ 387.024174][T19352] bond3: (slave gretap3): Enslaving as an active interface with an up link [ 387.232844][T19368] tipc: Enabled bearer , priority 0 [ 387.318214][T19375] 8021q: VLANs not supported on gre0 [ 387.390223][T19381] tipc: Enabled bearer , priority 0 [ 387.408379][T19381] mac80211_hwsim hwsim27 syzkaller0: entered promiscuous mode [ 387.435088][T19381] mac80211_hwsim hwsim27 syzkaller0: entered allmulticast mode [ 387.453013][T19381] tipc: Resetting bearer [ 387.656839][T19392] FAULT_INJECTION: forcing a failure. [ 387.656839][T19392] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 387.690745][T19392] CPU: 0 UID: 0 PID: 19392 Comm: syz.0.4399 Not tainted syzkaller #0 PREEMPT(full) [ 387.690791][T19392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 387.690814][T19392] Call Trace: [ 387.690831][T19392] [ 387.690847][T19392] dump_stack_lvl+0x189/0x250 [ 387.690894][T19392] ? __pfx____ratelimit+0x10/0x10 [ 387.690938][T19392] ? __pfx_dump_stack_lvl+0x10/0x10 [ 387.690956][T19392] ? __pfx__printk+0x10/0x10 [ 387.690978][T19392] ? __might_fault+0xb0/0x130 [ 387.691010][T19392] should_fail_ex+0x414/0x560 [ 387.691034][T19392] _copy_from_user+0x2d/0xb0 [ 387.691059][T19392] ___sys_sendmsg+0x158/0x2a0 [ 387.691086][T19392] ? __pfx____sys_sendmsg+0x10/0x10 [ 387.691116][T19392] ? rcu_read_lock_any_held+0xb3/0x120 [ 387.691163][T19392] ? __fget_files+0x2a/0x420 [ 387.691177][T19392] ? __fget_files+0x3a0/0x420 [ 387.691203][T19392] __x64_sys_sendmsg+0x19b/0x260 [ 387.691231][T19392] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 387.691265][T19392] ? __pfx_ksys_write+0x10/0x10 [ 387.691290][T19392] ? do_syscall_64+0xbe/0xf80 [ 387.691315][T19392] do_syscall_64+0xfa/0xf80 [ 387.691340][T19392] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.691357][T19392] ? clear_bhb_loop+0x60/0xb0 [ 387.691378][T19392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.691395][T19392] RIP: 0033:0x7f5448d8f749 [ 387.691412][T19392] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 387.691428][T19392] RSP: 002b:00007f5449c37038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 387.691448][T19392] RAX: ffffffffffffffda RBX: 00007f5448fe5fa0 RCX: 00007f5448d8f749 [ 387.691461][T19392] RDX: 0000000000000040 RSI: 0000200000000280 RDI: 0000000000000003 [ 387.691473][T19392] RBP: 00007f5449c37090 R08: 0000000000000000 R09: 0000000000000000 [ 387.691483][T19392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 387.691494][T19392] R13: 00007f5448fe6038 R14: 00007f5448fe5fa0 R15: 00007ffcb967f9a8 [ 387.691526][T19392] [ 388.052614][T19396] syzkaller0: entered promiscuous mode [ 388.065246][T19402] __nla_validate_parse: 12 callbacks suppressed [ 388.065265][T19402] netlink: 236 bytes leftover after parsing attributes in process `syz.2.4403'. [ 388.080806][T19396] syzkaller0: entered allmulticast mode [ 388.096412][T19404] ip6gre0: Master is either lo or non-ether device [ 388.447701][T19417] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.569408][T19417] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.596196][T19431] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4415'. [ 388.691713][T19417] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.721930][T19436] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4416'. [ 388.928647][ T8661] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.972888][ T8670] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.017174][ T8670] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.034729][T19448] syzkaller0: entered promiscuous mode [ 389.040963][T19448] syzkaller0: entered allmulticast mode [ 389.078142][ T8179] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.116180][T19448] FAULT_INJECTION: forcing a failure. [ 389.116180][T19448] name failslab, interval 1, probability 0, space 0, times 0 [ 389.144568][T19448] CPU: 0 UID: 0 PID: 19448 Comm: syz.3.4420 Not tainted syzkaller #0 PREEMPT(full) [ 389.144595][T19448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 389.144606][T19448] Call Trace: [ 389.144613][T19448] [ 389.144622][T19448] dump_stack_lvl+0x189/0x250 [ 389.144646][T19448] ? __pfx____ratelimit+0x10/0x10 [ 389.144666][T19448] ? __pfx_dump_stack_lvl+0x10/0x10 [ 389.144683][T19448] ? __pfx__printk+0x10/0x10 [ 389.144705][T19448] ? __pfx___might_resched+0x10/0x10 [ 389.144722][T19448] ? fs_reclaim_acquire+0x7d/0x100 [ 389.144748][T19448] should_fail_ex+0x414/0x560 [ 389.144773][T19448] should_failslab+0xa8/0x100 [ 389.144798][T19448] kmem_cache_alloc_node_noprof+0x77/0x710 [ 389.144820][T19448] ? __alloc_skb+0x255/0x430 [ 389.144840][T19448] ? napi_skb_cache_get+0x4a5/0x780 [ 389.144860][T19448] ? napi_skb_cache_get+0x151/0x780 [ 389.144885][T19448] __alloc_skb+0x255/0x430 [ 389.144910][T19448] ? __pfx___alloc_skb+0x10/0x10 [ 389.144940][T19448] alloc_skb_with_frags+0xca/0x890 [ 389.144967][T19448] ? __lock_acquire+0x6b6/0x2cf0 [ 389.144993][T19448] sock_alloc_send_pskb+0x84d/0x980 [ 389.145031][T19448] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 389.145054][T19448] ? dev_get_by_index+0x22/0x2e0 [ 389.145072][T19448] ? dev_get_by_index+0x22/0x2e0 [ 389.145097][T19448] packet_sendmsg+0x33a0/0x5080 [ 389.145126][T19448] ? aa_label_merge+0xd01/0xdf0 [ 389.145168][T19448] ? __pfx___might_resched+0x10/0x10 [ 389.145198][T19448] ? aa_sk_perm+0x15f/0x920 [ 389.145223][T19448] ? __pfx_packet_sendmsg+0x10/0x10 [ 389.145239][T19448] ? aa_sk_perm+0x7ee/0x920 [ 389.145269][T19448] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 389.145292][T19448] ? aa_sock_msg_perm+0xf1/0x1b0 [ 389.145311][T19448] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 389.145333][T19448] ? __pfx_packet_sendmsg+0x10/0x10 [ 389.145353][T19448] __sock_sendmsg+0x21c/0x270 [ 389.145377][T19448] __sys_sendto+0x3bd/0x520 [ 389.145402][T19448] ? __pfx___sys_sendto+0x10/0x10 [ 389.145422][T19448] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 389.145458][T19448] ? __fget_files+0x3a0/0x420 [ 389.145485][T19448] ? ksys_write+0x22a/0x250 [ 389.145508][T19448] ? __pfx_ksys_write+0x10/0x10 [ 389.145532][T19448] __x64_sys_sendto+0xde/0x100 [ 389.145565][T19448] do_syscall_64+0xfa/0xf80 [ 389.145586][T19448] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.145600][T19448] ? clear_bhb_loop+0x60/0xb0 [ 389.145619][T19448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.145634][T19448] RIP: 0033:0x7fd80ad8f749 [ 389.145648][T19448] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 389.145661][T19448] RSP: 002b:00007fd80bc56038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 389.145678][T19448] RAX: ffffffffffffffda RBX: 00007fd80afe5fa0 RCX: 00007fd80ad8f749 [ 389.145691][T19448] RDX: 000000000000000e RSI: 00002000000004c0 RDI: 0000000000000008 [ 389.145702][T19448] RBP: 00007fd80bc56090 R08: 00002000000002c0 R09: 0000000000000014 [ 389.145713][T19448] R10: 0000000000040054 R11: 0000000000000246 R12: 0000000000000001 [ 389.145722][T19448] R13: 00007fd80afe6038 R14: 00007fd80afe5fa0 R15: 00007ffc1e3db438 [ 389.145750][T19448] [ 389.585939][ T25] block nbd0: Possible stuck request ffff888024de5080: control (read@0,1024B). Runtime 28 seconds [ 389.597109][ T25] block nbd0: Possible stuck request ffff888024de5240: control (read@1024,1024B). Runtime 28 seconds [ 389.608328][ T25] block nbd0: Possible stuck request ffff888024de5400: control (read@2048,1024B). Runtime 28 seconds [ 389.619614][ T25] block nbd0: Possible stuck request ffff888024de55c0: control (read@3072,1024B). Runtime 28 seconds [ 389.984811][ T10] page_pool_release_retry() stalled pool shutdown: id 71, 1 inflight 60 sec [ 390.156710][T19483] pimreg: entered allmulticast mode [ 390.177071][T19484] dvmrp0: entered allmulticast mode [ 390.196096][T19481] pimreg: left allmulticast mode [ 390.208808][T19489] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4437'. [ 390.242505][T19484] dvmrp0: left allmulticast mode [ 390.306505][T19489] 8021q: VLANs not supported on gre0 [ 390.375773][T19494] netlink: 'syz.1.4439': attribute type 12 has an invalid length. [ 390.455473][T19501] mac80211_hwsim hwsim29 syzkaller0: entered promiscuous mode [ 390.495583][T19501] mac80211_hwsim hwsim29 syzkaller0: entered allmulticast mode [ 390.518613][T19507] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4444'. [ 390.596215][T19501] FAULT_INJECTION: forcing a failure. [ 390.596215][T19501] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 390.626547][T19501] CPU: 1 UID: 0 PID: 19501 Comm: syz.2.4441 Not tainted syzkaller #0 PREEMPT(full) [ 390.626573][T19501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 390.626585][T19501] Call Trace: [ 390.626592][T19501] [ 390.626604][T19501] dump_stack_lvl+0x189/0x250 [ 390.626628][T19501] ? __pfx____ratelimit+0x10/0x10 [ 390.626650][T19501] ? __pfx_dump_stack_lvl+0x10/0x10 [ 390.626668][T19501] ? __pfx__printk+0x10/0x10 [ 390.626691][T19501] ? __might_fault+0xb0/0x130 [ 390.626723][T19501] should_fail_ex+0x414/0x560 [ 390.626749][T19501] _copy_from_user+0x2d/0xb0 [ 390.626772][T19501] kstrtouint_from_user+0xc4/0x170 [ 390.626796][T19501] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 390.626838][T19501] proc_fail_nth_write+0x88/0x200 [ 390.626860][T19501] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 390.626886][T19501] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 390.626910][T19501] vfs_write+0x27e/0xb30 [ 390.626940][T19501] ? __pfx_vfs_write+0x10/0x10 [ 390.626963][T19501] ? __fget_files+0x2a/0x420 [ 390.626984][T19501] ? __fget_files+0x3a0/0x420 [ 390.626998][T19501] ? __fget_files+0x2a/0x420 [ 390.627023][T19501] ksys_write+0x145/0x250 [ 390.627046][T19501] ? __pfx_ksys_write+0x10/0x10 [ 390.627071][T19501] ? do_syscall_64+0xbe/0xf80 [ 390.627097][T19501] do_syscall_64+0xfa/0xf80 [ 390.627118][T19501] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.627134][T19501] ? clear_bhb_loop+0x60/0xb0 [ 390.627156][T19501] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.627171][T19501] RIP: 0033:0x7fe39f18e1ff [ 390.627186][T19501] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 390.627200][T19501] RSP: 002b:00007fe3a00c6030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 390.627218][T19501] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe39f18e1ff [ 390.627230][T19501] RDX: 0000000000000001 RSI: 00007fe3a00c60a0 RDI: 0000000000000009 [ 390.627240][T19501] RBP: 00007fe3a00c6090 R08: 0000000000000000 R09: 0000000000000014 [ 390.627250][T19501] R10: 0000000000040054 R11: 0000000000000293 R12: 0000000000000001 [ 390.627259][T19501] R13: 00007fe39f3e6038 R14: 00007fe39f3e5fa0 R15: 00007ffe62b32c48 [ 390.627288][T19501] [ 390.972877][T19518] FAULT_INJECTION: forcing a failure. [ 390.972877][T19518] name failslab, interval 1, probability 0, space 0, times 0 [ 390.986448][T19518] CPU: 1 UID: 0 PID: 19518 Comm: syz.4.4450 Not tainted syzkaller #0 PREEMPT(full) [ 390.986475][T19518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 390.986486][T19518] Call Trace: [ 390.986494][T19518] [ 390.986502][T19518] dump_stack_lvl+0x189/0x250 [ 390.986527][T19518] ? __pfx____ratelimit+0x10/0x10 [ 390.986549][T19518] ? __pfx_dump_stack_lvl+0x10/0x10 [ 390.986567][T19518] ? __pfx__printk+0x10/0x10 [ 390.986596][T19518] ? __pfx___might_resched+0x10/0x10 [ 390.986612][T19518] ? fs_reclaim_acquire+0x7d/0x100 [ 390.986640][T19518] should_fail_ex+0x414/0x560 [ 390.986665][T19518] should_failslab+0xa8/0x100 [ 390.986690][T19518] __kmalloc_noprof+0xcb/0x800 [ 390.986709][T19518] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 390.986738][T19518] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 390.986768][T19518] genl_family_rcv_msg_doit+0xb8/0x300 [ 390.986796][T19518] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 390.986826][T19518] ? apparmor_capable+0x137/0x1a0 [ 390.986849][T19518] ? bpf_lsm_capable+0x9/0x20 [ 390.986866][T19518] ? security_capable+0x7e/0x2e0 [ 390.986896][T19518] genl_rcv_msg+0x60e/0x790 [ 390.986923][T19518] ? __pfx_genl_rcv_msg+0x10/0x10 [ 390.986942][T19518] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 390.986964][T19518] ? __pfx_nl80211_register_unexpected_frame+0x10/0x10 [ 390.986984][T19518] ? __pfx_nl80211_post_doit+0x10/0x10 [ 390.987021][T19518] netlink_rcv_skb+0x208/0x470 [ 390.987039][T19518] ? __pfx_genl_rcv_msg+0x10/0x10 [ 390.987061][T19518] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 390.987106][T19518] ? down_read+0x274/0x2e0 [ 390.987127][T19518] ? genl_rcv+0xd/0x40 [ 390.987150][T19518] genl_rcv+0x28/0x40 [ 390.987168][T19518] netlink_unicast+0x82f/0x9e0 [ 390.987202][T19518] ? __pfx_netlink_unicast+0x10/0x10 [ 390.987228][T19518] ? netlink_sendmsg+0x642/0xb30 [ 390.987243][T19518] ? skb_put+0x11b/0x210 [ 390.987270][T19518] netlink_sendmsg+0x805/0xb30 [ 390.987297][T19518] ? __pfx_netlink_sendmsg+0x10/0x10 [ 390.987318][T19518] ? aa_sock_msg_perm+0xf1/0x1b0 [ 390.987336][T19518] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 390.987358][T19518] ? __pfx_netlink_sendmsg+0x10/0x10 [ 390.987376][T19518] __sock_sendmsg+0x21c/0x270 [ 390.987400][T19518] ____sys_sendmsg+0x505/0x820 [ 390.987430][T19518] ? __pfx_____sys_sendmsg+0x10/0x10 [ 390.987463][T19518] ? import_iovec+0x74/0xa0 [ 390.987490][T19518] ___sys_sendmsg+0x21f/0x2a0 [ 390.987517][T19518] ? __pfx____sys_sendmsg+0x10/0x10 [ 390.987548][T19518] ? rcu_read_lock_any_held+0xb3/0x120 [ 390.987598][T19518] ? __fget_files+0x2a/0x420 [ 390.987612][T19518] ? __fget_files+0x3a0/0x420 [ 390.987639][T19518] __x64_sys_sendmsg+0x19b/0x260 [ 390.987667][T19518] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 390.987701][T19518] ? __pfx_ksys_write+0x10/0x10 [ 390.987725][T19518] ? do_syscall_64+0xbe/0xf80 [ 390.987750][T19518] do_syscall_64+0xfa/0xf80 [ 390.987772][T19518] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.987788][T19518] ? clear_bhb_loop+0x60/0xb0 [ 390.987810][T19518] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.987827][T19518] RIP: 0033:0x7f638b78f749 [ 390.987843][T19518] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 390.987859][T19518] RSP: 002b:00007f638c6d2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 390.987878][T19518] RAX: ffffffffffffffda RBX: 00007f638b9e5fa0 RCX: 00007f638b78f749 [ 390.987891][T19518] RDX: 0000000000004014 RSI: 0000200000000180 RDI: 0000000000000003 [ 390.987903][T19518] RBP: 00007f638c6d2090 R08: 0000000000000000 R09: 0000000000000000 [ 390.987915][T19518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 390.987925][T19518] R13: 00007f638b9e6038 R14: 00007f638b9e5fa0 R15: 00007ffec84e9ee8 [ 390.987958][T19518] [ 391.416535][T19520] netlink: 96 bytes leftover after parsing attributes in process `syz.4.4451'. [ 391.431325][T19520] 8021q: VLANs not supported on gre0 [ 391.568699][T19528] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4453'. [ 391.624333][T19528] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4453'. [ 391.732896][T19541] netlink: 'syz.2.4459': attribute type 33 has an invalid length. [ 391.743846][T19543] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4458'. [ 391.753771][T19541] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4459'. [ 392.110339][T19563] 8021q: VLANs not supported on gre0 [ 392.240961][T19570] netlink: 'syz.0.4470': attribute type 1 has an invalid length. [ 392.257581][T19573] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 392.267569][ T10] IPVS: starting estimator thread 0... [ 392.317630][T19577] bond4: (slave ip6gretap2): making interface the new active one [ 392.326436][T19577] bond4: (slave ip6gretap2): Enslaving as an active interface with an up link [ 392.374803][T19575] IPVS: using max 53 ests per chain, 127200 per kthread [ 392.490613][T19589] FAULT_INJECTION: forcing a failure. [ 392.490613][T19589] name failslab, interval 1, probability 0, space 0, times 0 [ 392.524583][T19588] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.531855][T19588] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.544233][T19589] CPU: 1 UID: 0 PID: 19589 Comm: syz.0.4474 Not tainted syzkaller #0 PREEMPT(full) [ 392.544258][T19589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 392.544268][T19589] Call Trace: [ 392.544275][T19589] [ 392.544282][T19589] dump_stack_lvl+0x189/0x250 [ 392.544306][T19589] ? __pfx____ratelimit+0x10/0x10 [ 392.544327][T19589] ? __pfx_dump_stack_lvl+0x10/0x10 [ 392.544345][T19589] ? __pfx__printk+0x10/0x10 [ 392.544369][T19589] ? __pfx___might_resched+0x10/0x10 [ 392.544387][T19589] ? fs_reclaim_acquire+0x7d/0x100 [ 392.544411][T19589] should_fail_ex+0x414/0x560 [ 392.544436][T19589] should_failslab+0xa8/0x100 [ 392.544461][T19589] __kmalloc_cache_noprof+0x6f/0x6f0 [ 392.544481][T19589] ? rtnl_newlink+0xfb/0x1c90 [ 392.544502][T19589] ? stack_depot_save_flags+0x40/0x850 [ 392.544523][T19589] rtnl_newlink+0xfb/0x1c90 [ 392.544544][T19589] ? kasan_save_track+0x4f/0x80 [ 392.544559][T19589] ? kasan_save_track+0x3e/0x80 [ 392.544575][T19589] ? __kasan_save_free_info+0x46/0x50 [ 392.544589][T19589] ? __kasan_slab_free+0x5c/0x80 [ 392.544607][T19589] ? kmem_cache_free+0x197/0x620 [ 392.544624][T19589] ? nlmon_xmit+0xb0/0x100 [ 392.544636][T19589] ? dev_hard_start_xmit+0x2cd/0x800 [ 392.544651][T19589] ? __dev_queue_xmit+0x1493/0x3140 [ 392.544665][T19589] ? __netlink_deliver_tap+0x5ad/0x850 [ 392.544680][T19589] ? netlink_deliver_tap+0x19c/0x1b0 [ 392.544694][T19589] ? netlink_unicast+0x7fa/0x9e0 [ 392.544714][T19589] ? netlink_sendmsg+0x805/0xb30 [ 392.544731][T19589] ? __pfx_rtnl_newlink+0x10/0x10 [ 392.544750][T19589] ? do_syscall_64+0xfa/0xf80 [ 392.544769][T19589] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.544817][T19589] ? kasan_quarantine_put+0xdd/0x220 [ 392.544837][T19589] ? lockdep_hardirqs_on+0x98/0x140 [ 392.544864][T19589] ? kmem_cache_free+0x197/0x620 [ 392.544882][T19589] ? nlmon_xmit+0xb0/0x100 [ 392.544917][T19589] ? __lock_acquire+0x6b6/0x2cf0 [ 392.544937][T19589] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 392.544958][T19589] ? __dev_queue_xmit+0x289/0x3140 [ 392.545002][T19589] ? __pfx_rtnl_newlink+0x10/0x10 [ 392.545023][T19589] rtnetlink_rcv_msg+0x7cf/0xb70 [ 392.545051][T19589] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 392.545070][T19589] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 392.545097][T19589] ? __pfx_rcu_preempt_deferred_qs_irqrestore+0x10/0x10 [ 392.545129][T19589] netlink_rcv_skb+0x208/0x470 [ 392.545142][T19589] ? rcu_is_watching+0x15/0xb0 [ 392.545159][T19589] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 392.545181][T19589] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 392.545208][T19589] ? netlink_deliver_tap+0x2e/0x1b0 [ 392.545234][T19589] netlink_unicast+0x82f/0x9e0 [ 392.545266][T19589] ? __pfx_netlink_unicast+0x10/0x10 [ 392.545291][T19589] ? netlink_sendmsg+0x642/0xb30 [ 392.545305][T19589] ? skb_put+0x11b/0x210 [ 392.545328][T19589] netlink_sendmsg+0x805/0xb30 [ 392.545349][T19589] ? __pfx_netlink_sendmsg+0x10/0x10 [ 392.545369][T19589] ? aa_sock_msg_perm+0xf1/0x1b0 [ 392.545389][T19589] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 392.545408][T19589] ? __pfx_netlink_sendmsg+0x10/0x10 [ 392.545427][T19589] __sock_sendmsg+0x21c/0x270 [ 392.545449][T19589] ____sys_sendmsg+0x505/0x820 [ 392.545475][T19589] ? __pfx_____sys_sendmsg+0x10/0x10 [ 392.545509][T19589] ? import_iovec+0x74/0xa0 [ 392.545534][T19589] ___sys_sendmsg+0x21f/0x2a0 [ 392.545560][T19589] ? __pfx____sys_sendmsg+0x10/0x10 [ 392.545589][T19589] ? rcu_read_lock_any_held+0xb3/0x120 [ 392.545630][T19589] ? __fget_files+0x2a/0x420 [ 392.545644][T19589] ? __fget_files+0x3a0/0x420 [ 392.545667][T19589] __x64_sys_sendmsg+0x19b/0x260 [ 392.545692][T19589] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 392.545722][T19589] ? __pfx_ksys_write+0x10/0x10 [ 392.545745][T19589] ? do_syscall_64+0xbe/0xf80 [ 392.545768][T19589] do_syscall_64+0xfa/0xf80 [ 392.545789][T19589] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.545805][T19589] ? clear_bhb_loop+0x60/0xb0 [ 392.545824][T19589] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.545840][T19589] RIP: 0033:0x7f5448d8f749 [ 392.545855][T19589] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 392.545871][T19589] RSP: 002b:00007f5449c37038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 392.545898][T19589] RAX: ffffffffffffffda RBX: 00007f5448fe5fa0 RCX: 00007f5448d8f749 [ 392.545911][T19589] RDX: 0000000000000040 RSI: 0000200000000280 RDI: 0000000000000003 [ 392.545922][T19589] RBP: 00007f5449c37090 R08: 0000000000000000 R09: 0000000000000000 [ 392.545933][T19589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 392.545944][T19589] R13: 00007f5448fe6038 R14: 00007f5448fe5fa0 R15: 00007ffcb967f9a8 [ 392.545974][T19589] [ 393.062055][ T25] block nbd0: Possible stuck request ffff888024de5080: control (read@0,1024B). Runtime 30 seconds [ 393.073107][ T25] block nbd0: Possible stuck request ffff888024de5240: control (read@1024,1024B). Runtime 30 seconds [ 393.084187][ T25] block nbd0: Possible stuck request ffff888024de5400: control (read@2048,1024B). Runtime 30 seconds [ 393.095480][ T25] block nbd0: Possible stuck request ffff888024de55c0: control (read@3072,1024B). Runtime 30 seconds [ 393.365375][T19613] __nla_validate_parse: 2 callbacks suppressed [ 393.365394][T19613] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4482'. [ 393.571244][T19628] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4489'. [ 393.929531][T19654] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4499'. [ 394.050228][T19663] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4503'. [ 394.308970][T19677] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4506'. [ 394.422039][T19684] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4511'. [ 394.565828][T19688] tipc: Enabling of bearer rejected, already enabled [ 394.607329][T19691] netdevsim netdevsim2: Direct firmware load for . failed with error -2 [ 394.647249][T19691] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 395.013490][T19708] tipc: Enabled bearer , priority 13 [ 395.105438][T19711] netlink: 'syz.0.4522': attribute type 11 has an invalid length. [ 395.129338][T19711] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4522'. [ 395.169519][T19712] netlink: 'syz.0.4522': attribute type 11 has an invalid length. [ 395.189005][T19712] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4522'. [ 395.217942][T19716] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4523'. [ 395.244550][T19718] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4525'. [ 395.470873][T19724] mac80211_hwsim hwsim31 syzkaller0: entered promiscuous mode [ 395.481067][T19724] mac80211_hwsim hwsim31 syzkaller0: entered allmulticast mode [ 395.491561][T19721] tipc: Enabled bearer , priority 0 [ 395.514290][T19725] openvswitch: netlink: IPv4 tun info is not correct [ 395.599443][T19727] netlink: 'syz.4.4527': attribute type 3 has an invalid length. [ 395.694729][T19733] tipc: Enabling of bearer rejected, already enabled [ 395.727940][T19731] mac80211_hwsim hwsim31 syzkaller0: left promiscuous mode [ 395.735338][T19731] mac80211_hwsim hwsim31 syzkaller0: left allmulticast mode [ 395.756316][T19731] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 395.863713][T19739] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 396.070397][T19755] mac80211_hwsim hwsim31 syzkaller0: entered promiscuous mode [ 396.082769][T19755] mac80211_hwsim hwsim31 syzkaller0: entered allmulticast mode [ 396.096084][T19755] tipc: Enabling of bearer rejected, already enabled [ 396.179224][T19752] tipc: Enabling not permitted [ 396.186506][T19752] tipc: Enabling of bearer rejected, failed to enable media [ 396.199069][T19760] mac80211_hwsim hwsim31 syzkaller0: left promiscuous mode [ 396.212994][T19752] netlink: 'syz.0.4541': attribute type 13 has an invalid length. [ 396.215141][T19760] mac80211_hwsim hwsim31 syzkaller0: left allmulticast mode [ 396.289329][T19763] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 396.362564][T19766] tipc: Enabled bearer , priority 0 [ 396.370362][T19766] syzkaller0: entered promiscuous mode [ 396.377525][T19766] syzkaller0: entered allmulticast mode [ 396.384702][ T25] block nbd0: Possible stuck request ffff888024de5080: control (read@0,1024B). Runtime 32 seconds [ 396.388810][T19766] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 396.396774][ T25] block nbd0: Possible stuck request ffff888024de5240: control (read@1024,1024B). Runtime 32 seconds [ 396.415669][ T25] block nbd0: Possible stuck request ffff888024de5400: control (read@2048,1024B). Runtime 32 seconds [ 396.426685][ T25] block nbd0: Possible stuck request ffff888024de55c0: control (read@3072,1024B). Runtime 32 seconds [ 396.510087][T19766] tipc: Resetting bearer [ 396.531887][T19765] tipc: Resetting bearer [ 396.586619][T19765] tipc: Disabling bearer [ 396.612994][T19777] netlink: 'syz.2.4547': attribute type 21 has an invalid length. [ 396.675488][T19777] bond5: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 396.698281][T19777] bond5 (unregistering): Released all slaves [ 396.723061][T19788] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 396.843331][T19792] tipc: Enabling of bearer rejected, already enabled [ 396.888481][T19800] mac80211_hwsim hwsim29 syzkaller0: left promiscuous mode [ 396.896168][T19800] mac80211_hwsim hwsim29 syzkaller0: left allmulticast mode [ 396.927076][T19800] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 397.504209][T19838] wlan0 speed is unknown, defaulting to 1000 [ 397.521189][T19838] wg1 speed is unknown, defaulting to 1000 [ 397.616140][T19844] tipc: Enabling of bearer rejected, already enabled [ 398.188281][T19868] Cannot find add_set index 2 as target [ 398.301057][T19875] mac80211_hwsim hwsim29 syzkaller0: entered promiscuous mode [ 398.331111][T19875] mac80211_hwsim hwsim29 syzkaller0: entered allmulticast mode [ 398.378125][T19878] __nla_validate_parse: 11 callbacks suppressed [ 398.378143][T19878] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4581'. [ 398.408087][T19875] tipc: Enabling of bearer rejected, already enabled [ 398.538249][T19886] tipc: Enabling of bearer rejected, already enabled [ 398.592250][T19889] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4586'. [ 398.663641][T19893] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4588'. [ 398.723259][T19898] Cannot find add_set index 2 as target [ 398.739717][T19896] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4589'. [ 398.750364][T19896] netlink: 'syz.4.4589': attribute type 7 has an invalid length. [ 398.765403][T19896] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4589'. [ 398.789630][T19896] netlink: 'syz.4.4589': attribute type 7 has an invalid length. [ 398.854873][T19907] netlink: 'syz.0.4592': attribute type 1 has an invalid length. [ 398.966362][T19915] FAULT_INJECTION: forcing a failure. [ 398.966362][T19915] name failslab, interval 1, probability 0, space 0, times 0 [ 398.988124][T19901] sctp: [Deprecated]: syz.2.4591 (pid 19901) Use of struct sctp_assoc_value in delayed_ack socket option. [ 398.988124][T19901] Use struct sctp_sack_info instead [ 399.014801][T19915] CPU: 0 UID: 0 PID: 19915 Comm: syz.4.4595 Not tainted syzkaller #0 PREEMPT(full) [ 399.014828][T19915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 399.014840][T19915] Call Trace: [ 399.014848][T19915] [ 399.014856][T19915] dump_stack_lvl+0x189/0x250 [ 399.014880][T19915] ? __pfx____ratelimit+0x10/0x10 [ 399.014899][T19915] ? __pfx_dump_stack_lvl+0x10/0x10 [ 399.014916][T19915] ? __pfx__printk+0x10/0x10 [ 399.014935][T19915] ? kmalloc_reserve+0xbd/0x290 [ 399.014961][T19915] ? __lock_acquire+0x6b6/0x2cf0 [ 399.014987][T19915] should_fail_ex+0x414/0x560 [ 399.015011][T19915] should_failslab+0xa8/0x100 [ 399.015037][T19915] kmem_cache_alloc_noprof+0x74/0x6f0 [ 399.015058][T19915] ? skb_clone+0x212/0x3a0 [ 399.015079][T19915] skb_clone+0x212/0x3a0 [ 399.015099][T19915] __netlink_deliver_tap+0x404/0x850 [ 399.015129][T19915] ? netlink_deliver_tap+0x2e/0x1b0 [ 399.015147][T19915] netlink_deliver_tap+0x19c/0x1b0 [ 399.015164][T19915] netlink_unicast+0x7fa/0x9e0 [ 399.015195][T19915] ? __pfx_netlink_unicast+0x10/0x10 [ 399.015220][T19915] ? netlink_sendmsg+0x642/0xb30 [ 399.015235][T19915] ? skb_put+0x11b/0x210 [ 399.015259][T19915] netlink_sendmsg+0x805/0xb30 [ 399.015293][T19915] ? __pfx_netlink_sendmsg+0x10/0x10 [ 399.015314][T19915] ? aa_sock_msg_perm+0xf1/0x1b0 [ 399.015334][T19915] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 399.015356][T19915] ? __pfx_netlink_sendmsg+0x10/0x10 [ 399.015374][T19915] __sock_sendmsg+0x21c/0x270 [ 399.015398][T19915] ____sys_sendmsg+0x505/0x820 [ 399.015428][T19915] ? __pfx_____sys_sendmsg+0x10/0x10 [ 399.015463][T19915] ? import_iovec+0x74/0xa0 [ 399.015489][T19915] ___sys_sendmsg+0x21f/0x2a0 [ 399.015515][T19915] ? __pfx____sys_sendmsg+0x10/0x10 [ 399.015545][T19915] ? rcu_read_lock_any_held+0xb3/0x120 [ 399.015594][T19915] ? __fget_files+0x2a/0x420 [ 399.015609][T19915] ? __fget_files+0x3a0/0x420 [ 399.015636][T19915] __x64_sys_sendmsg+0x19b/0x260 [ 399.015663][T19915] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 399.015696][T19915] ? __pfx_ksys_write+0x10/0x10 [ 399.015722][T19915] ? do_syscall_64+0xbe/0xf80 [ 399.015747][T19915] do_syscall_64+0xfa/0xf80 [ 399.015768][T19915] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.015785][T19915] ? clear_bhb_loop+0x60/0xb0 [ 399.015810][T19915] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.015827][T19915] RIP: 0033:0x7f638b78f749 [ 399.015844][T19915] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 399.015859][T19915] RSP: 002b:00007f638c6b1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 399.015877][T19915] RAX: ffffffffffffffda RBX: 00007f638b9e6090 RCX: 00007f638b78f749 [ 399.015890][T19915] RDX: 0000000020000000 RSI: 0000200000006040 RDI: 0000000000000003 [ 399.015901][T19915] RBP: 00007f638c6b1090 R08: 0000000000000000 R09: 0000000000000000 [ 399.015913][T19915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 399.015924][T19915] R13: 00007f638b9e6128 R14: 00007f638b9e6090 R15: 00007ffec84e9ee8 [ 399.015955][T19915] [ 399.332971][T19918] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4596'. [ 399.380387][T19925] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4597'. [ 399.548044][T19937] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4601'. [ 399.550974][T19939] Cannot find add_set index 2 as target [ 399.755367][ T25] block nbd0: Possible stuck request ffff888024de5080: control (read@0,1024B). Runtime 34 seconds [ 399.766548][ T25] block nbd0: Possible stuck request ffff888024de5240: control (read@1024,1024B). Runtime 34 seconds [ 399.778117][ T25] block nbd0: Possible stuck request ffff888024de5400: control (read@2048,1024B). Runtime 34 seconds [ 399.789743][ T25] block nbd0: Possible stuck request ffff888024de55c0: control (read@3072,1024B). Runtime 34 seconds [ 400.398072][T19981] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4618'. [ 400.429206][T19981] tipc: Enabling of bearer rejected, failed to enable media [ 400.497323][T19988] bond1: option mode: unable to set because the bond device has slaves [ 400.538900][T19988] bond1: (slave macvlan4): Error -98 calling set_mac_address [ 400.621229][T19992] tipc: Enabled bearer , priority 0 [ 400.663073][T19990] tipc: Disabling bearer [ 400.732992][T19997] netlink: 'syz.0.4625': attribute type 2 has an invalid length. [ 400.893053][T20007] Cannot find add_set index 2 as target [ 401.347710][T20037] netlink: 'syz.1.4639': attribute type 1 has an invalid length. [ 401.391008][T20037] bond3: entered promiscuous mode [ 401.396272][T20037] bond3: entered allmulticast mode [ 401.403298][T20037] 8021q: adding VLAN 0 to HW filter on device bond3 [ 401.477395][T20042] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4640'. [ 402.238278][T20058] tipc: Enabling of bearer rejected, already enabled [ 402.299606][T20063] netlink: 'syz.3.4648': attribute type 1 has an invalid length. [ 402.322548][T20063] veth0: entered promiscuous mode [ 402.337112][T20061] veth0: left promiscuous mode [ 402.496223][T20077] Cannot find add_set index 2 as target [ 402.847116][T20095] tipc: Enabling of bearer rejected, already enabled [ 402.912460][T20102] x_tables: ip6_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT/POSTROUTING [ 402.960603][T20106] netlink: 'syz.3.4662': attribute type 10 has an invalid length. [ 403.008033][T20106] vūth0_virt_wmfi: renamed from veth1_vlan [ 403.112952][ T25] block nbd0: Possible stuck request ffff888024de5080: control (read@0,1024B). Runtime 36 seconds [ 403.124305][ T25] block nbd0: Possible stuck request ffff888024de5240: control (read@1024,1024B). Runtime 36 seconds [ 403.135279][T20115] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 403.135373][ T25] block nbd0: Possible stuck request ffff888024de5400: control (read@2048,1024B). Runtime 36 seconds [ 403.155551][ T25] block nbd0: Possible stuck request ffff888024de55c0: control (read@3072,1024B). Runtime 36 seconds [ 403.696029][T20148] __nla_validate_parse: 4 callbacks suppressed [ 403.696048][T20148] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4680'. [ 403.733922][T20148] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4680'. [ 403.783456][T20151] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4679'. [ 403.788945][T20146] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 403.867478][T20155] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4682'. [ 403.985881][T20160] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4684'. [ 404.028434][T20164] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4679'. [ 404.206284][T20167] tipc: Enabling of bearer rejected, failed to enable media [ 404.229090][T20157] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4683'. [ 404.389193][T20179] FAULT_INJECTION: forcing a failure. [ 404.389193][T20179] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 404.415458][T20179] CPU: 0 UID: 0 PID: 20179 Comm: syz.4.4687 Not tainted syzkaller #0 PREEMPT(full) [ 404.415483][T20179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 404.415495][T20179] Call Trace: [ 404.415503][T20179] [ 404.415511][T20179] dump_stack_lvl+0x189/0x250 [ 404.415535][T20179] ? __pfx____ratelimit+0x10/0x10 [ 404.415557][T20179] ? __pfx_dump_stack_lvl+0x10/0x10 [ 404.415575][T20179] ? __pfx__printk+0x10/0x10 [ 404.415598][T20179] ? __might_fault+0xb0/0x130 [ 404.415628][T20179] should_fail_ex+0x414/0x560 [ 404.415653][T20179] _copy_from_user+0x2d/0xb0 [ 404.415678][T20179] ___sys_sendmsg+0x158/0x2a0 [ 404.415706][T20179] ? __pfx____sys_sendmsg+0x10/0x10 [ 404.415735][T20179] ? rcu_read_lock_any_held+0xb3/0x120 [ 404.415781][T20179] ? __fget_files+0x2a/0x420 [ 404.415804][T20179] ? __fget_files+0x3a0/0x420 [ 404.415830][T20179] __x64_sys_sendmsg+0x19b/0x260 [ 404.415855][T20179] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 404.415884][T20179] ? __pfx_ksys_write+0x10/0x10 [ 404.415907][T20179] ? do_syscall_64+0xbe/0xf80 [ 404.415931][T20179] do_syscall_64+0xfa/0xf80 [ 404.415950][T20179] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.415966][T20179] ? clear_bhb_loop+0x60/0xb0 [ 404.415987][T20179] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.416001][T20179] RIP: 0033:0x7f638b78f749 [ 404.416016][T20179] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 404.416030][T20179] RSP: 002b:00007f638c6b1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 404.416048][T20179] RAX: ffffffffffffffda RBX: 00007f638b9e6090 RCX: 00007f638b78f749 [ 404.416059][T20179] RDX: 0000000004041080 RSI: 0000200000006040 RDI: 0000000000000003 [ 404.416071][T20179] RBP: 00007f638c6b1090 R08: 0000000000000000 R09: 0000000000000000 [ 404.416081][T20179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 404.416092][T20179] R13: 00007f638b9e6128 R14: 00007f638b9e6090 R15: 00007ffec84e9ee8 [ 404.416121][T20179] [ 404.647426][T20182] mac80211_hwsim hwsim27 syzkaller0: left promiscuous mode [ 404.654810][T20182] mac80211_hwsim hwsim27 syzkaller0: left allmulticast mode [ 404.711793][T20184] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4690'. [ 404.717585][T20186] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4689'. [ 404.724336][T20184] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 405.129886][T20208] mac80211_hwsim hwsim31 syzkaller0: entered promiscuous mode [ 405.137720][T20208] mac80211_hwsim hwsim31 syzkaller0: entered allmulticast mode [ 405.167269][T20213] netlink: 236 bytes leftover after parsing attributes in process `syz.0.4699'. [ 405.351021][T20223] tipc: Enabling of bearer rejected, already enabled [ 405.477721][T20227] Cannot find add_set index 2 as target [ 405.722847][T20244] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 405.752974][T20247] mac80211_hwsim hwsim27 syzkaller0: entered promiscuous mode [ 405.795970][T20247] mac80211_hwsim hwsim27 syzkaller0: entered allmulticast mode [ 405.906174][T20260] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 405.923611][T20260] FAULT_INJECTION: forcing a failure. [ 405.923611][T20260] name failslab, interval 1, probability 0, space 0, times 0 [ 405.963411][T20260] CPU: 0 UID: 0 PID: 20260 Comm: syz.1.4716 Not tainted syzkaller #0 PREEMPT(full) [ 405.963436][T20260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 405.963449][T20260] Call Trace: [ 405.963456][T20260] [ 405.963465][T20260] dump_stack_lvl+0x189/0x250 [ 405.963489][T20260] ? __pfx____ratelimit+0x10/0x10 [ 405.963510][T20260] ? __pfx_dump_stack_lvl+0x10/0x10 [ 405.963528][T20260] ? __pfx__printk+0x10/0x10 [ 405.963553][T20260] ? __pfx___might_resched+0x10/0x10 [ 405.963572][T20260] ? fs_reclaim_acquire+0x7d/0x100 [ 405.963599][T20260] should_fail_ex+0x414/0x560 [ 405.963624][T20260] should_failslab+0xa8/0x100 [ 405.963650][T20260] kmem_cache_alloc_node_noprof+0x77/0x710 [ 405.963681][T20260] ? __alloc_skb+0x255/0x430 [ 405.963702][T20260] ? napi_skb_cache_get+0x4a5/0x780 [ 405.963723][T20260] ? napi_skb_cache_get+0x151/0x780 [ 405.963749][T20260] __alloc_skb+0x255/0x430 [ 405.963773][T20260] ? __pfx___alloc_skb+0x10/0x10 [ 405.963802][T20260] ? netlink_ack_tlv_len+0x6c/0x210 [ 405.963818][T20260] netlink_ack+0x146/0xa50 [ 405.963830][T20260] ? __pfx_genl_rcv_msg+0x10/0x10 [ 405.963866][T20260] netlink_rcv_skb+0x28c/0x470 [ 405.963884][T20260] ? __pfx_genl_rcv_msg+0x10/0x10 [ 405.963904][T20260] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 405.963932][T20260] ? down_read+0x274/0x2e0 [ 405.963949][T20260] ? genl_rcv+0xd/0x40 [ 405.963969][T20260] genl_rcv+0x28/0x40 [ 405.963989][T20260] netlink_unicast+0x82f/0x9e0 [ 405.964016][T20260] ? __pfx_netlink_unicast+0x10/0x10 [ 405.964041][T20260] ? netlink_sendmsg+0x642/0xb30 [ 405.964055][T20260] ? skb_put+0x11b/0x210 [ 405.964081][T20260] netlink_sendmsg+0x805/0xb30 [ 405.964107][T20260] ? __pfx_netlink_sendmsg+0x10/0x10 [ 405.964128][T20260] ? aa_sock_msg_perm+0xf1/0x1b0 [ 405.964148][T20260] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 405.964169][T20260] ? __pfx_netlink_sendmsg+0x10/0x10 [ 405.964185][T20260] __sock_sendmsg+0x21c/0x270 [ 405.964204][T20260] ____sys_sendmsg+0x505/0x820 [ 405.964234][T20260] ? __pfx_____sys_sendmsg+0x10/0x10 [ 405.964267][T20260] ? import_iovec+0x74/0xa0 [ 405.964294][T20260] ___sys_sendmsg+0x21f/0x2a0 [ 405.964318][T20260] ? __pfx____sys_sendmsg+0x10/0x10 [ 405.964345][T20260] ? rcu_read_lock_any_held+0xb3/0x120 [ 405.964387][T20260] ? __fget_files+0x2a/0x420 [ 405.964402][T20260] ? __fget_files+0x3a0/0x420 [ 405.964424][T20260] __x64_sys_sendmsg+0x19b/0x260 [ 405.964451][T20260] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 405.964486][T20260] ? __pfx_ksys_write+0x10/0x10 [ 405.964511][T20260] ? do_syscall_64+0xbe/0xf80 [ 405.964536][T20260] do_syscall_64+0xfa/0xf80 [ 405.964558][T20260] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.964575][T20260] ? clear_bhb_loop+0x60/0xb0 [ 405.964596][T20260] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.964613][T20260] RIP: 0033:0x7f8db1d8f749 [ 405.964630][T20260] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 405.964646][T20260] RSP: 002b:00007f8db2bed038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 405.964672][T20260] RAX: ffffffffffffffda RBX: 00007f8db1fe5fa0 RCX: 00007f8db1d8f749 [ 405.964685][T20260] RDX: 0000000000000000 RSI: 00002000000010c0 RDI: 0000000000000008 [ 405.964696][T20260] RBP: 00007f8db2bed090 R08: 0000000000000000 R09: 0000000000000000 [ 405.964707][T20260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 405.964717][T20260] R13: 00007f8db1fe6038 R14: 00007f8db1fe5fa0 R15: 00007ffd86acd4f8 [ 405.964745][T20260] [ 406.408214][T20274] netlink: 'syz.1.4723': attribute type 16 has an invalid length. [ 406.464625][ T25] block nbd0: Possible stuck request ffff888024de5080: control (read@0,1024B). Runtime 38 seconds [ 406.476851][ T25] block nbd0: Possible stuck request ffff888024de5240: control (read@1024,1024B). Runtime 38 seconds [ 406.478574][T20280] team_slave_0: entered promiscuous mode [ 406.488979][ T25] block nbd0: Possible stuck request ffff888024de5400: control (read@2048,1024B). Runtime 38 seconds [ 406.493863][T20280] team_slave_1: entered promiscuous mode [ 406.494846][T20280] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 406.505793][ T25] block nbd0: Possible stuck request ffff888024de55c0: control (read@3072,1024B). Runtime 38 seconds [ 406.511736][T20280] team0: Device macvtap1 is already an upper device of the team interface [ 406.566368][T20280] team_slave_0: left promiscuous mode [ 406.568024][T20282] openvswitch: netlink: IP tunnel dst address not specified [ 406.571913][T20280] team_slave_1: left promiscuous mode [ 406.705352][ T48] page_pool_release_retry() stalled pool shutdown: id 80, 1 inflight 60 sec [ 407.114970][T20296] tipc: Enabling of bearer rejected, already enabled [ 407.273249][T20307] IPVS: set_ctl: invalid protocol: 41 172.20.20.170:20002 [ 408.157829][T20337] tipc: Enabling of bearer rejected, failed to enable media [ 409.090795][T20357] __nla_validate_parse: 15 callbacks suppressed [ 409.090816][T20357] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4755'. [ 409.118514][T20361] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 409.233586][T20369] netlink: 236 bytes leftover after parsing attributes in process `syz.0.4758'. [ 409.245737][T20371] Cannot find add_set index 2 as target [ 409.451527][T20379] netlink: 'syz.0.4763': attribute type 83 has an invalid length. [ 409.604893][T20393] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.4766'. [ 409.760670][ C0] vcan0: j1939_tp_rxtimer: 0xffff888035348000: rx timeout, send abort [ 409.770918][ C0] vcan0: j1939_tp_rxtimer: 0xffff888035348400: rx timeout, send abort [ 409.780048][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888035348000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 409.795818][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888035348400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 409.836121][ T25] block nbd0: Possible stuck request ffff888024de5080: control (read@0,1024B). Runtime 40 seconds [ 409.847646][ T25] block nbd0: Possible stuck request ffff888024de5240: control (read@1024,1024B). Runtime 40 seconds [ 409.858820][ T25] block nbd0: Possible stuck request ffff888024de5400: control (read@2048,1024B). Runtime 40 seconds [ 409.870784][ T25] block nbd0: Possible stuck request ffff888024de55c0: control (read@3072,1024B). Runtime 40 seconds [ 410.018464][T20410] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4768'. [ 410.066007][ T10] page_pool_release_retry() stalled pool shutdown: id 81, 1 inflight 60 sec [ 410.246753][T20420] Cannot find add_set index 2 as target [ 410.299082][ T5202] udevd[5202]: worker [17148] /devices/virtual/block/nbd0 is taking a long time [ 410.846048][T20450] netlink: 'syz.3.4781': attribute type 2 has an invalid length. [ 410.958566][T20450] 9: entered promiscuous mode [ 411.141853][T20470] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4785'. [ 411.186752][T20472] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4785'. [ 411.337985][T20482] netlink: 'syz.2.4790': attribute type 1 has an invalid length. [ 411.350637][T20482] netlink: 'syz.2.4790': attribute type 4 has an invalid length. [ 411.359895][T20479] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 411.376304][T20482] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.4790'. [ 411.395383][T20485] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4789'. [ 411.569462][T20495] netlink: 'syz.0.4793': attribute type 2 has an invalid length. [ 411.586587][T20495] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4793'. [ 411.646919][T20497] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4795'. [ 411.687437][T20500] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 411.796875][T20506] tipc: Enabling of bearer rejected, already enabled [ 412.006959][T20522] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 412.285998][T20541] tipc: Enabled bearer , priority 10 [ 412.694411][T20567] netlink: 'syz.0.4816': attribute type 33 has an invalid length. [ 412.996868][T20585] Cannot find add_set index 2 as target [ 413.038399][T20589] tipc: Enabling of bearer rejected, failed to enable media [ 413.185538][ T25] block nbd0: Possible stuck request ffff888024de5080: control (read@0,1024B). Runtime 42 seconds [ 413.196377][ T25] block nbd0: Possible stuck request ffff888024de5240: control (read@1024,1024B). Runtime 42 seconds [ 413.208782][ T25] block nbd0: Possible stuck request ffff888024de5400: control (read@2048,1024B). Runtime 42 seconds [ 413.220519][ T25] block nbd0: Possible stuck request ffff888024de55c0: control (read@3072,1024B). Runtime 42 seconds [ 413.842463][T20620] tipc: Enabling of bearer rejected, already enabled [ 414.125431][T20638] erspan0: entered allmulticast mode [ 414.246158][T20649] __nla_validate_parse: 14 callbacks suppressed [ 414.246175][T20649] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4847'. [ 414.273601][T20649] bond_slave_0: left promiscuous mode [ 414.279766][T20649] bond_slave_1: left promiscuous mode [ 414.433591][T20649] bond3: (slave macvlan2): Removing an active aggregator [ 414.443068][T20649] bond3: (slave macvlan2): Releasing backup interface [ 414.457287][T20649] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 414.478493][T20649] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 414.493494][T20649] bond0 (unregistering): Released all slaves [ 414.812843][T20673] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4852'. [ 414.822288][T20673] 8021q: VLANs not supported on gre0 [ 415.114291][ T25] block nbd1: Possible stuck request ffff888024e15080: control (read@0,1024B). Runtime 60 seconds [ 415.125497][ T25] block nbd1: Possible stuck request ffff888024e15240: control (read@1024,1024B). Runtime 60 seconds [ 415.136901][ T25] block nbd1: Possible stuck request ffff888024e15400: control (read@2048,1024B). Runtime 60 seconds [ 415.148078][ T25] block nbd1: Possible stuck request ffff888024e155c0: control (read@3072,1024B). Runtime 60 seconds [ 415.247534][T20691] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4858'. [ 415.336299][T20695] tipc: Enabled bearer , priority 0 [ 415.368705][T20694] tipc: Disabling bearer [ 415.553248][T20705] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4863'. [ 415.568351][T20707] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4864'. [ 415.590578][T20705] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4863'. [ 415.598119][ T5202] udevd[5202]: worker [17583] /devices/virtual/block/nbd1 is taking a long time [ 415.610715][T20707] 8021q: VLANs not supported on gre0 [ 415.791073][T20723] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4870'. [ 415.829708][T20722] tipc: Enabling of bearer rejected, already enabled [ 416.061735][T20743] netlink: 'syz.1.4877': attribute type 13 has an invalid length. [ 416.093042][T20745] FAULT_INJECTION: forcing a failure. [ 416.093042][T20745] name failslab, interval 1, probability 0, space 0, times 0 [ 416.106297][T20745] CPU: 1 UID: 0 PID: 20745 Comm: syz.4.4879 Not tainted syzkaller #0 PREEMPT(full) [ 416.106321][T20745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 416.106331][T20745] Call Trace: [ 416.106338][T20745] [ 416.106346][T20745] dump_stack_lvl+0x189/0x250 [ 416.106370][T20745] ? __pfx____ratelimit+0x10/0x10 [ 416.106389][T20745] ? __pfx_dump_stack_lvl+0x10/0x10 [ 416.106407][T20745] ? __pfx__printk+0x10/0x10 [ 416.106434][T20745] ? __ip_dev_find+0x444/0x4e0 [ 416.106457][T20745] should_fail_ex+0x414/0x560 [ 416.106480][T20745] should_failslab+0xa8/0x100 [ 416.106503][T20745] kmem_cache_alloc_noprof+0x74/0x6f0 [ 416.106524][T20745] ? dst_alloc+0x105/0x170 [ 416.106546][T20745] dst_alloc+0x105/0x170 [ 416.106559][T20745] ? ip_check_mc_rcu+0x4c7/0x680 [ 416.106581][T20745] ip_route_output_key_hash_rcu+0x1560/0x23e0 [ 416.106613][T20745] ? ip_route_output_key_hash+0xc1/0x280 [ 416.106636][T20745] ip_route_output_key_hash+0x174/0x280 [ 416.106661][T20745] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 416.106700][T20745] ip_route_output_flow+0x2a/0x150 [ 416.106719][T20745] ? security_sk_classify_flow+0x70/0x180 [ 416.106743][T20745] udp_sendmsg+0x142e/0x2170 [ 416.106771][T20745] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 416.106796][T20745] ? __pfx_udp_sendmsg+0x10/0x10 [ 416.106821][T20745] ? count_memcg_event_mm+0x21/0x260 [ 416.106862][T20745] ? __pfx_aa_sk_perm+0x10/0x10 [ 416.106885][T20745] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 416.106906][T20745] ? sock_rps_record_flow+0x19/0x410 [ 416.106927][T20745] ? inet_sendmsg+0x29c/0x370 [ 416.106951][T20745] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 416.106978][T20745] __sock_sendmsg+0x19c/0x270 [ 416.107002][T20745] ____sys_sendmsg+0x52d/0x820 [ 416.107030][T20745] ? __pfx_____sys_sendmsg+0x10/0x10 [ 416.107060][T20745] ? import_iovec+0x74/0xa0 [ 416.107087][T20745] ___sys_sendmsg+0x21f/0x2a0 [ 416.107112][T20745] ? __pfx____sys_sendmsg+0x10/0x10 [ 416.107174][T20745] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 416.107207][T20745] __sys_sendmmsg+0x227/0x430 [ 416.107240][T20745] ? __pfx___sys_sendmmsg+0x10/0x10 [ 416.107261][T20745] ? lockdep_hardirqs_on+0x98/0x140 [ 416.107289][T20745] ? do_sys_openat2+0x15a/0x200 [ 416.107320][T20745] ? ksys_write+0x1e1/0x250 [ 416.107342][T20745] ? __pfx_ksys_write+0x10/0x10 [ 416.107366][T20745] __x64_sys_sendmmsg+0xa0/0xc0 [ 416.107383][T20745] do_syscall_64+0xfa/0xf80 [ 416.107406][T20745] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.107423][T20745] ? clear_bhb_loop+0x60/0xb0 [ 416.107444][T20745] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.107460][T20745] RIP: 0033:0x7f638b78f749 [ 416.107476][T20745] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 416.107489][T20745] RSP: 002b:00007f638c6d2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 416.107507][T20745] RAX: ffffffffffffffda RBX: 00007f638b9e5fa0 RCX: 00007f638b78f749 [ 416.107520][T20745] RDX: 000000000800001d RSI: 0000200000007fc0 RDI: 0000000000000005 [ 416.107531][T20745] RBP: 00007f638c6d2090 R08: 0000000000000000 R09: 0000000000000000 [ 416.107542][T20745] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 416.107552][T20745] R13: 00007f638b9e6038 R14: 00007f638b9e5fa0 R15: 00007ffec84e9ee8 [ 416.107584][T20745] [ 416.457043][T20748] siw: device registration error -23 [ 416.516393][ C1] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000c: 0000 [#1] SMP KASAN PTI [ 416.528328][ C1] KASAN: null-ptr-deref in range [0x0000000000000060-0x0000000000000067] [ 416.536742][ C1] CPU: 1 UID: 0 PID: 5950 Comm: kworker/1:6 Not tainted syzkaller #0 PREEMPT(full) [ 416.538355][T20751] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4877'. [ 416.546118][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 416.546138][ C1] Workqueue: mld mld_ifc_work [ 416.546161][ C1] RIP: 0010:rt6_find_cached_rt+0xb9/0x270 [ 416.546185][ C1] Code: 48 c1 e8 03 48 89 44 24 08 48 8b 44 24 08 80 3c 18 00 74 08 4c 89 f7 e8 65 74 2b f8 49 8b 2e 48 83 c5 60 48 89 e8 48 c1 e8 03 <80> 3c 18 00 74 08 48 89 ef e8 49 74 2b f8 4c 8b 6d 00 e8 d0 8d 4d [ 416.546201][ C1] RSP: 0018:ffffc90000a079e0 EFLAGS: 00010206 [ 416.546217][ C1] RAX: 000000000000000c RBX: dffffc0000000000 RCX: 0000000000000100 [ 416.609046][ C1] RDX: ffff888024168000 RSI: 0000000000000000 RDI: 0000000000000000 [ 416.617102][ C1] RBP: 0000000000000060 R08: ffff888031963133 R09: 1ffff1100632c626 [ 416.625069][ C1] R10: dffffc0000000000 R11: ffffed100632c627 R12: ffffc90000a07ab8 [ 416.633040][ C1] R13: 0000000000000000 R14: ffffc90000a07ab0 R15: 0000000000000000 [ 416.641025][ C1] FS: 0000000000000000(0000) GS:ffff8881261b1000(0000) knlGS:0000000000000000 [ 416.649946][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 416.656523][ C1] CR2: 00007fa9aa4131e8 CR3: 00000000510ec000 CR4: 00000000003526f0 [ 416.664494][ C1] Call Trace: [ 416.667767][ C1] [ 416.670606][ C1] ? ip6_pol_route+0x162/0x1180 [ 416.675455][ C1] ip6_pol_route+0x28d/0x1180 [ 416.680128][ C1] ? __pfx_ip6_pol_route+0x10/0x10 [ 416.685231][ C1] ? net_generic+0x1e/0x240 [ 416.689730][ C1] ? br_nf_post_routing+0xb66/0xfe0 [ 416.694924][ C1] ? __pfx_br_nf_dev_queue_xmit+0x10/0x10 [ 416.700636][ C1] fib6_rule_lookup+0x55e/0x6f0 [ 416.705487][ C1] ? __pfx_ip6_pol_route_input+0x10/0x10 [ 416.711116][ C1] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 416.716485][ C1] ? do_xdp_generic+0x11a/0x1190 [ 416.721414][ C1] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 416.727311][ C1] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 416.733297][ C1] ? NF_HOOK+0x329/0x3c0 [ 416.737541][ C1] ? NF_HOOK+0x9e/0x3c0 [ 416.741697][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 416.746281][ C1] ? net_generic+0x1e/0x240 [ 416.750787][ C1] ip6_route_input+0x6de/0xad0 [ 416.755559][ C1] ? __pfx_ip6_route_input+0x10/0x10 [ 416.760926][ C1] ? rcu_lockdep_current_cpu_online+0x37/0x120 [ 416.767083][ C1] ? __lock_acquire+0x6b6/0x2cf0 [ 416.772017][ C1] ? ip6_parse_tlv+0x17d3/0x1e60 [ 416.776948][ C1] ? ip6_rcv_finish_core+0x222/0x420 [ 416.782250][ C1] ip6_rcv_finish+0x141/0x2e0 [ 416.786922][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 416.792112][ C1] ip_sabotage_in+0x1e1/0x270 [ 416.796787][ C1] ? __pfx_ip_sabotage_in+0x10/0x10 [ 416.801985][ C1] nf_hook_slow+0xc5/0x220 [ 416.806398][ C1] NF_HOOK+0x206/0x3a0 [ 416.810459][ C1] ? skb_orphan+0xaf/0xd0 [ 416.814796][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 416.819984][ C1] ? NF_HOOK+0x9a/0x3a0 [ 416.824130][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 416.828721][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 416.833917][ C1] __netif_receive_skb+0xd3/0x380 [ 416.838937][ C1] ? netif_receive_skb+0x105/0x750 [ 416.844042][ C1] netif_receive_skb+0x1bb/0x750 [ 416.848975][ C1] ? __pfx_netif_receive_skb+0x10/0x10 [ 416.854428][ C1] ? br_netif_receive_skb+0x126/0x190 [ 416.859796][ C1] NF_HOOK+0xa0/0x390 [ 416.863783][ C1] ? __pfx_br_netif_receive_skb+0x10/0x10 [ 416.869489][ C1] ? NF_HOOK+0x102/0x390 [ 416.873719][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 416.878302][ C1] ? __pfx_br_netif_receive_skb+0x10/0x10 [ 416.884021][ C1] ? br_pass_frame_up+0x275/0x420 [ 416.889041][ C1] br_handle_frame_finish+0x15c6/0x1c90 [ 416.894605][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 416.900616][ C1] ? ip6t_do_table+0x1db/0x1560 [ 416.905477][ C1] ? nf_hook_slow+0x176/0x220 [ 416.910147][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 416.916039][ C1] br_nf_hook_thresh+0x3c6/0x4a0 [ 416.920982][ C1] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 416.926438][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 416.932332][ C1] ? nf_nat_ipv6_in+0x1fc/0x2b0 [ 416.937185][ C1] br_nf_pre_routing_finish_ipv6+0x999/0xd60 [ 416.943159][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 416.949048][ C1] ? br_nf_pre_routing_ipv6+0x42f/0x6b0 [ 416.954589][ C1] br_nf_pre_routing_ipv6+0x37e/0x6b0 [ 416.959961][ C1] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 416.965850][ C1] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 416.972343][ C1] ? br_nf_pre_routing+0x720/0x1470 [ 416.977550][ C1] ? __pfx_br_nf_pre_routing+0x10/0x10 [ 416.983005][ C1] br_handle_frame+0x96e/0x14f0 [ 416.987858][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 416.993136][ C1] ? rcu_lockdep_current_cpu_online+0x37/0x120 [ 416.999288][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 417.005175][ C1] ? __pfx_rcu_read_lock_bh_held+0x10/0x10 [ 417.010980][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 417.016263][ C1] __netif_receive_skb_core+0x95f/0x2f90 [ 417.021898][ C1] ? __lock_acquire+0x6b6/0x2cf0 [ 417.026839][ C1] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 417.032911][ C1] ? process_backlog+0x2d9/0x1500 [ 417.037930][ C1] ? process_backlog+0x2d9/0x1500 [ 417.042946][ C1] __netif_receive_skb+0x72/0x380 [ 417.047964][ C1] ? process_backlog+0x2d9/0x1500 [ 417.052982][ C1] process_backlog+0x622/0x1500 [ 417.057839][ C1] ? __pfx_process_backlog+0x10/0x10 [ 417.063121][ C1] ? xdp_do_check_flushed+0x205/0x230 [ 417.068491][ C1] __napi_poll+0xae/0x320 [ 417.072818][ C1] ? skb_defer_free_flush+0x229/0x250 [ 417.078183][ C1] net_rx_action+0x672/0xe50 [ 417.082776][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 417.087888][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 417.093082][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 417.098363][ C1] handle_softirqs+0x27d/0x850 [ 417.103119][ C1] ? do_softirq+0xec/0x180 [ 417.107526][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 417.112808][ C1] ? __dev_queue_xmit+0x289/0x3140 [ 417.117913][ C1] do_softirq+0xec/0x180 [ 417.122149][ C1] [ 417.125074][ C1] [ 417.128004][ C1] ? __pfx_do_softirq+0x10/0x10 [ 417.132846][ C1] ? veth_xmit+0x61/0xd50 [ 417.137169][ C1] ? lockdep_softirqs_on+0x13b/0x1c0 [ 417.142461][ C1] __local_bh_enable_ip+0x17d/0x1c0 [ 417.147651][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 417.153363][ C1] ? __dev_queue_xmit+0x289/0x3140 [ 417.158464][ C1] ? __dev_queue_xmit+0x289/0x3140 [ 417.163569][ C1] ? __dev_queue_xmit+0x289/0x3140 [ 417.168713][ C1] __dev_queue_xmit+0x1955/0x3140 [ 417.173736][ C1] ? __dev_queue_xmit+0x289/0x3140 [ 417.178860][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 417.184224][ C1] ? read_seqbegin+0x1ac/0x250 [ 417.188979][ C1] ? __pfx_read_seqbegin+0x10/0x10 [ 417.194083][ C1] ? __local_bh_enable_ip+0x12d/0x1c0 [ 417.199464][ C1] ? eth_header+0x11b/0x200 [ 417.203957][ C1] ? __asan_memcpy+0x40/0x70 [ 417.208552][ C1] ip6_finish_output2+0xfb3/0x1480 [ 417.213672][ C1] ? __pfx_ip6_finish_output2+0x10/0x10 [ 417.219210][ C1] ? ip6_mtu+0x7d/0x490 [ 417.223359][ C1] ? ip6_mtu+0x38c/0x490 [ 417.227603][ C1] ? ip6_finish_output+0x2ef/0x4e0 [ 417.232747][ C1] ? ip6_output+0x126/0x550 [ 417.237248][ C1] ip6_output+0x340/0x550 [ 417.241578][ C1] NF_HOOK+0x9e/0x380 [ 417.245549][ C1] ? NF_HOOK+0x101/0x380 [ 417.249779][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 417.254356][ C1] ? __pfx_dst_output+0x10/0x10 [ 417.259195][ C1] ? icmp6_dst_alloc+0x3a5/0x420 [ 417.264124][ C1] ? icmp6_dst_alloc+0x3a5/0x420 [ 417.269056][ C1] mld_sendpack+0x8d4/0xe60 [ 417.273556][ C1] ? mld_sendpack+0x1e7/0xe60 [ 417.278227][ C1] ? __pfx_mld_sendpack+0x10/0x10 [ 417.283251][ C1] mld_ifc_work+0x83e/0xd60 [ 417.287739][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 417.292928][ C1] ? process_scheduled_works+0x9ef/0x1770 [ 417.298641][ C1] process_scheduled_works+0xad1/0x1770 [ 417.304293][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 417.310298][ C1] worker_thread+0x8a0/0xda0 [ 417.314897][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 417.321222][ C1] ? __kthread_parkme+0x7b/0x200 [ 417.326155][ C1] kthread+0x711/0x8a0 [ 417.330222][ C1] ? __pfx_worker_thread+0x10/0x10 [ 417.335326][ C1] ? __pfx_kthread+0x10/0x10 [ 417.339923][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 417.345138][ C1] ? lockdep_hardirqs_on+0x98/0x140 [ 417.350334][ C1] ? __pfx_kthread+0x10/0x10 [ 417.354925][ C1] ret_from_fork+0x599/0xb30 [ 417.359518][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 417.364631][ C1] ? __switch_to_asm+0x39/0x70 [ 417.369400][ C1] ? __switch_to_asm+0x33/0x70 [ 417.374174][ C1] ? __pfx_kthread+0x10/0x10 [ 417.378773][ C1] ret_from_fork_asm+0x1a/0x30 [ 417.383547][ C1] [ 417.386568][ C1] Modules linked in: [ 417.390573][ C1] ---[ end trace 0000000000000000 ]--- [ 417.396087][ C1] RIP: 0010:rt6_find_cached_rt+0xb9/0x270 [ 417.401834][ C1] Code: 48 c1 e8 03 48 89 44 24 08 48 8b 44 24 08 80 3c 18 00 74 08 4c 89 f7 e8 65 74 2b f8 49 8b 2e 48 83 c5 60 48 89 e8 48 c1 e8 03 <80> 3c 18 00 74 08 48 89 ef e8 49 74 2b f8 4c 8b 6d 00 e8 d0 8d 4d [ 417.421518][ C1] RSP: 0018:ffffc90000a079e0 EFLAGS: 00010206 [ 417.427675][ C1] RAX: 000000000000000c RBX: dffffc0000000000 RCX: 0000000000000100 [ 417.435688][ C1] RDX: ffff888024168000 RSI: 0000000000000000 RDI: 0000000000000000 [ 417.443688][ C1] RBP: 0000000000000060 R08: ffff888031963133 R09: 1ffff1100632c626 [ 417.451742][ C1] R10: dffffc0000000000 R11: ffffed100632c627 R12: ffffc90000a07ab8 [ 417.459782][ C1] R13: 0000000000000000 R14: ffffc90000a07ab0 R15: 0000000000000000 [ 417.467843][ C1] FS: 0000000000000000(0000) GS:ffff8881261b1000(0000) knlGS:0000000000000000 [ 417.476831][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 417.483435][ C1] CR2: 00007fa9aa4131e8 CR3: 00000000510ec000 CR4: 00000000003526f0 [ 417.491498][ C1] Kernel panic - not syncing: Fatal exception in interrupt [ 417.499132][ C1] Kernel Offset: disabled [ 417.503448][ C1] Rebooting in 86400 seconds..