last executing test programs: 4m4.896676706s ago: executing program 1 (id=2269): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x4c, 0x2, 0x6, 0x3, 0x0, 0xa41, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x4c}}, 0x0) 4m4.825402388s ago: executing program 1 (id=2272): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x3) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x8ca9, @none, 0xffff}, 0xe) 4m4.717569794s ago: executing program 1 (id=2275): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000000)={0xe}, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)="5ab585c1497d4aa561a5ceb2be1aaf84e02c9b5b3577a40349cd92a0f12173137f21a8c6311beb8b80278a0c586198b24767cd41938ccbcb9bc5a335a9ccd98df48fbc0458a5aec91e5a0b3bf074624dd2af", 0x52, 0x845, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000000c0)={0x1, 0x100, 0x4, [0x0, 0x0, 0x8ac, 0x4e]}, 0x10) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000100)={0x0, 0x1000, "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"}, &(0x7f0000001140)=0x1008) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000001180)={r1}, &(0x7f00000011c0)=0x8) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000001200)={0x0, 0x2, 0x10, 0x4, 0x1}) sendto$inet6(r0, &(0x7f0000001240)="482cc4f25920a52a98131df7254863", 0xf, 0x20004005, &(0x7f0000001280)={0xa, 0x4e24, 0x30, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xc000000}, 0x1c) r3 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r3, &(0x7f0000001480)={&(0x7f00000012c0)=@in={0x2, 0x4e24, @local}, 0x10, &(0x7f00000013c0)=[{&(0x7f0000001300)="2466e74ed5515f715e7ae17990be028ea5fc6f9136233a864c984ea470ccaaa1326b4ca31ffe8e34de06d8f319f0800348e4183b427af23225b7c12effc5035860f572cfa20713461e1b53c321cea6794cf5c51daac300ad14c35582f0c9ca5167c0dcc9784225f5b5ea5157783ee6fe3d90472a192e348bbc2e4859f39ce99f85ab58b63a2cd44124ffbf37c5d93819a3cca304a0fd693f2271235c42198c04fb4604873738338b6941a970fe416ed315b1ec558c14fcc726", 0xb9}], 0x1, &(0x7f0000001400)=[@authinfo={0x18, 0x84, 0x6, {0x7}}, @sndrcv={0x30, 0x84, 0x1, {0x7, 0x9, 0x4, 0x4, 0x1, 0x7, 0x6, 0x8, r2}}, @authinfo={0x18, 0x84, 0x6, {0x5d2}}, @authinfo={0x18, 0x84, 0x6, {0x1c28}}], 0x78, 0x4080005}, 0x40) recvmsg(r3, &(0x7f00000016c0)={&(0x7f00000014c0)=@caif=@util, 0x80, &(0x7f0000001600)=[{&(0x7f0000001540)=""/144, 0x90}], 0x1, &(0x7f0000001640)=""/86, 0x56}, 0x140) sendto$inet6(r0, &(0x7f0000001700)="47df868abca855ca381c90c73d0fb82d30564739e2", 0x15, 0x40, &(0x7f0000001740)={0xa, 0x4e22, 0x6, @private2, 0x7e}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000001780)={0x3}, 0x1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000017c0)={0xffffffffffffffff}) r5 = socket$netlink(0x10, 0x3, 0xf) ioctl$XFS_IOC_GETBMAPX(r5, 0xc0205838, &(0x7f0000001800)={0x7, 0x1, 0xb6, 0x2, 0xb, 0x3e, 0x6}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000001840)={'gre0\x00', 0x4000}) sendmsg$IPCTNL_MSG_CT_GET_DYING(r5, &(0x7f0000001940)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x14, 0x6, 0x1, 0x0, 0x0, 0x0, {0x1, 0x0, 0x3}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4880}, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000001980)={r1, 0xb8d}, &(0x7f00000019c0)=0x8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000001a00)=0x0) setsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000001a40)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4e24, 0x9, 0x4e22, 0x4, 0x2, 0x0, 0x100, 0x2f, 0x0, r6}, {0x2, 0x2, 0x10, 0x8, 0x994, 0xff, 0x820, 0x6}, {0x6, 0x7fff, 0x8001, 0x7ff}, 0xbe, 0x0, 0x0, 0x1, 0x1}, {{@in6=@remote, 0x4d5, 0x3c}, 0x2, @in6=@private2, 0x3500, 0x2, 0x0, 0x3, 0x4, 0x2, 0x800}}, 0xe8) setsockopt$inet6_buf(r0, 0x29, 0x2d, &(0x7f0000001b40)="4ac37c709b2cdf8ddd3bef40767dde737e0fa4c5b1b382e95643124ced94156eca3923b694b54e3446368459198a8772c91b9ee69e90b51575a84c4faed218bf27802a129658ce9f7ae93bd156a7a0035326220fe5b3bb5e01c189ffe7c0b1b161429284711ba621e760", 0x6a) r7 = socket$unix(0x1, 0x1, 0x0) getsockname$unix(r7, &(0x7f0000001bc0)=@abs, &(0x7f0000001c40)=0x6e) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000001c80)={r1, 0x1}, 0x8) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r3, 0xf50f, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000001cc0)={0x40}, 0x1) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000001d00)={r4, 0x8, 0x4, 0x52b}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000001f80)={0x1d, 0x1b, &(0x7f0000001d40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, {}, {}, [@exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @generic={0x3, 0xb, 0x9, 0x3, 0x1}, @call={0x85, 0x0, 0x0, 0xb7}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001e40)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x18, '\x00', 0x0, @lsm=0x2b, 0xffffffffffffffff, 0x8, &(0x7f0000001e80)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000001ec0)={0x1, 0x7, 0x5, 0x81}, 0x10, 0x0, 0xffffffffffffffff, 0x4, &(0x7f0000001f00)=[r0, 0x1], &(0x7f0000001f40)=[{0x5, 0x1, 0xa, 0x1}, {0x5, 0x5, 0x2, 0xc}, {0x1, 0x1, 0x9, 0xc}, {0x1, 0x5, 0x5, 0x5}], 0x10, 0x40}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000002080)={r8, r9, 0x4}, 0x10) 4m4.396140479s ago: executing program 1 (id=2282): setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtaction={0x48, 0x30, 0x12f, 0x0, 0xffe4, {}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x1}}}}]}]}, 0x48}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000400), 0x40000000000009f, 0x0) 4m3.930892512s ago: executing program 1 (id=2287): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000258000b4824ca945f64009400ff0325010ebc000000000000008004f0fffeffe809005300fff5dd0000000c0001000d0c10000000000000000000", 0x58}], 0x1) 4m3.693231138s ago: executing program 1 (id=2291): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001400)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x9, [@func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{0xb, 0x1}, {0xa, 0x1}, {0x9, 0x1}, {0x2, 0x5}]}, @fwd={0x6}]}, {0x0, [0x61, 0x5f, 0x61, 0x5f, 0x5f, 0x5f, 0x30]}}, &(0x7f0000000400)=""/4096, 0x59, 0x1000, 0x0, 0x5}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000040000000400000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x14, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001440), &(0x7f0000001480), 0xfffffff8, r1}, 0x38) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x1a, 0x1f, &(0x7f0000001880)=ANY=[@ANYBLOB="b7080000000000007b8af8ff00000000b7080000070000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a5000000185700000d000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000ff0300007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000850af4ff0800000095000000000000008520000002000000180000005400000000000000060000008317300001000000bfabf4fffcffffff098affeb78b4ec6356bfcfaca39dea1e8a2041b3440aef40b7315f6861bb475ef3ad2fd15b36a60bbcfe55bd8e9a3afac522fe9635f60e5ec2838fe2e60490efde559265771411d0eec5626ce5c5a220d6c5daf2e6b1b9e416b736cb261a60ec05aadc19"], &(0x7f00000003c0)='GPL\x00', 0x8, 0x0, 0x0, 0x100, 0x10, '\x00', 0x0, 0x3d, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd4}, 0x94) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) epoll_create1(0x80000) r3 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, 0x0, 0x0) epoll_create1(0x0) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0xdfbd5000) sendmsg$NFT_BATCH(r5, 0x0, 0x0) write$tun(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r2, 0x0, 0x0, 0x1, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000001840)={&(0x7f0000001440)="f8d102638696b33e0649b384874743e488bd8a92649cbc880f57b83da1c623917e2c9372a4d816299fd2b296e9d1d4d269acf887096a1d89b246ea4d4332cf9d022e7147aa0c854e0f7919a1", &(0x7f00000014c0)=""/191, &(0x7f0000001700)="3cd7275a97c5d1caf68fc08191a86ae193376bc95f1c0535a18d002adbac1429f95c64c46b7190ab46f7afb9885f60df60e3fbd162ec54e20be9d6c5ba0b697f4775fcc342b4a1520455cbd1468affe9e9664f1dbb09bba06a0aed442f0deaaabc987307d26a9a1df4efcb040aa8e0e8979461b6f1af086ee4eae1cfd61e59e0da2e8493e8137ca85717685b94b4c7b8f3d4d64ae90b16b2b3dcab83edfe8cfad694af8575e04caa2aacf07b", &(0x7f00000017c0)="bec32af60ab3cbc92f1edb5b82e0e27464a773ca8e77ce12765a8ae2ad291d0df6ee61f541681af4db3ca97231dbe6aceca778b46fed17a7e4284a7d3c19d2a3a5a4959be08fc93d764431a5116fc16f6c00", 0x2, r1}, 0x38) 3m48.632397048s ago: executing program 32 (id=2291): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001400)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x9, [@func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{0xb, 0x1}, {0xa, 0x1}, {0x9, 0x1}, {0x2, 0x5}]}, @fwd={0x6}]}, {0x0, [0x61, 0x5f, 0x61, 0x5f, 0x5f, 0x5f, 0x30]}}, &(0x7f0000000400)=""/4096, 0x59, 0x1000, 0x0, 0x5}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000040000000400000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x14, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001440), &(0x7f0000001480), 0xfffffff8, r1}, 0x38) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x1a, 0x1f, &(0x7f0000001880)=ANY=[@ANYBLOB="b7080000000000007b8af8ff00000000b7080000070000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a5000000185700000d000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000ff0300007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000850af4ff0800000095000000000000008520000002000000180000005400000000000000060000008317300001000000bfabf4fffcffffff098affeb78b4ec6356bfcfaca39dea1e8a2041b3440aef40b7315f6861bb475ef3ad2fd15b36a60bbcfe55bd8e9a3afac522fe9635f60e5ec2838fe2e60490efde559265771411d0eec5626ce5c5a220d6c5daf2e6b1b9e416b736cb261a60ec05aadc19"], &(0x7f00000003c0)='GPL\x00', 0x8, 0x0, 0x0, 0x100, 0x10, '\x00', 0x0, 0x3d, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd4}, 0x94) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) epoll_create1(0x80000) r3 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, 0x0, 0x0) epoll_create1(0x0) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0xdfbd5000) sendmsg$NFT_BATCH(r5, 0x0, 0x0) write$tun(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r2, 0x0, 0x0, 0x1, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000001840)={&(0x7f0000001440)="f8d102638696b33e0649b384874743e488bd8a92649cbc880f57b83da1c623917e2c9372a4d816299fd2b296e9d1d4d269acf887096a1d89b246ea4d4332cf9d022e7147aa0c854e0f7919a1", &(0x7f00000014c0)=""/191, &(0x7f0000001700)="3cd7275a97c5d1caf68fc08191a86ae193376bc95f1c0535a18d002adbac1429f95c64c46b7190ab46f7afb9885f60df60e3fbd162ec54e20be9d6c5ba0b697f4775fcc342b4a1520455cbd1468affe9e9664f1dbb09bba06a0aed442f0deaaabc987307d26a9a1df4efcb040aa8e0e8979461b6f1af086ee4eae1cfd61e59e0da2e8493e8137ca85717685b94b4c7b8f3d4d64ae90b16b2b3dcab83edfe8cfad694af8575e04caa2aacf07b", &(0x7f00000017c0)="bec32af60ab3cbc92f1edb5b82e0e27464a773ca8e77ce12765a8ae2ad291d0df6ee61f541681af4db3ca97231dbe6aceca778b46fed17a7e4284a7d3c19d2a3a5a4959be08fc93d764431a5116fc16f6c00", 0x2, r1}, 0x38) 17.114575777s ago: executing program 2 (id=4883): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086", 0x17}], 0x1}, 0x4) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001002000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0) 16.824859022s ago: executing program 2 (id=4886): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x2c, 0x0, 0x1, 0x0, 0x0, 0x0, {0x2, 0x0, 0x1}, [@CTA_MARK_MASK={0x8}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x10}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="60000000090601020000000900020073797a30000000000500010007000000380007800c00018008000140ffffffff060004405000000005000700060000000c00148008000140000000000c00168008000140ac14142e000000000000"], 0x60}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0x6, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) close(0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x500, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x54, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x40000, 0x823}, [@IFLA_LINKINFO={0x1f, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @mcast1}]}}}, @IFLA_MASTER={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x40440e4}, 0x20040000) 16.625054211s ago: executing program 2 (id=4889): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0xf, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x28}}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x16c, 0x10, 0x5, 0x0, 0x0, {{@in=@loopback, @in=@loopback, 0x1f90, 0xffff, 0x1f90, 0xffff, 0x2, 0x20, 0x20}, {@in=@loopback, 0x1234, 0x32}, @in=@loopback, {0x0, 0x14}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x80, '\x00'/20}}, @encap={0x1c, 0x4, {0x7, 0x1f90, 0x1f90, @in=@loopback}}]}, 0x16c}}, 0x0) 16.283910347s ago: executing program 2 (id=4891): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x40080) 16.165347015s ago: executing program 2 (id=4892): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="380000002100010000000000000000000a0000000000000000000000140003"], 0x38}}, 0x0) (fail_nth: 4) 4.319790616s ago: executing program 4 (id=4980): r0 = socket$kcm(0x2, 0x3, 0x106) r1 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008840) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x0, 0x98, 0x130, 0x1c8, 0x2f8, 0x0, 0x98, 0x130, 0x260, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x0, 0x3}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) sendmsg$inet(r0, &(0x7f0000000400)={&(0x7f0000000440)={0x2, 0x0, @loopback}, 0x10, 0x0}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="180000001600010a"], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0xe, 0x4, &(0x7f0000000800)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x3f}]}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x90) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x80000001}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_LIMIT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}}}]}]}], {0x14}}, 0xe8}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x1300, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x8, 0x3, "e5271830"}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_NAME={0xc, 0x1, 'NFQUEUE\x00'}]}}}]}]}], {0x14}}, 0xb0}}, 0x0) recvmmsg(r2, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0}, 0x8}, {{&(0x7f0000003ec0)=@l2tp={0x2, 0x0, @broadcast}, 0x80, &(0x7f0000003f40)=[{&(0x7f0000003f80)=""/96, 0x60}, {&(0x7f0000004000)=""/33, 0x21}], 0x2, &(0x7f0000004040)=""/151, 0x97}, 0x9}, {{&(0x7f0000004100)=@sco, 0x80, &(0x7f0000004180), 0x0, &(0x7f00000041c0)=""/13, 0xd}, 0x1}], 0x3, 0x20, 0x0) 4.084163916s ago: executing program 3 (id=4983): r0 = socket(0x11, 0x3, 0x0) setsockopt(r0, 0x107, 0xf, &(0x7f0000000300)="00008634", 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'geneve0\x00', 0x0}) sendmsg(r0, &(0x7f00000003c0)={&(0x7f0000000400)=@ll={0x11, 0x3, r1, 0x1, 0xe5, 0x6, @broadcast}, 0x80, &(0x7f0000000480)=[{&(0x7f00000004c0)="020195ff002d3922ff65b4355e953d23d254f00000000000", 0x18}, {&(0x7f0000000500)="2cf2565b0e508224b706a643e98dc932f5fc6d8e51626cdbf9ff02dbb8b2d2ca2be0dfa8f2a777f680c590257a0641579678f72a6ff270a8989633cbe781bf372d4a0e61", 0xff87}], 0x2}, 0x44000) 3.912199924s ago: executing program 4 (id=4984): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xe, 0x4, 0x4, 0x3}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000400)={r0, &(0x7f0000000440), &(0x7f0000000480)=@tcp, 0x3}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x7ffffffe, 0x4, {0x0, 0x0, 0x0, 0x0, {0x5, 0x3}, {0x4, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0x62f5}, @TCA_FQ_PIE_ECN={0x8, 0xa, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x20004055) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet6_mreq(r1, 0x29, 0x4, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8b26, &(0x7f0000000040)={'virt_wifi0\x00', @random="390979fd459c"}) r3 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r3, &(0x7f0000000180)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) bind$rxrpc(r3, &(0x7f00000001c0)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x0, @private1}}, 0x24) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.833065388s ago: executing program 5 (id=4985): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff03c}, {0x6}]}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x11) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x1234, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000240)={0x1, 0xa989, 0x6}, &(0x7f0000000280)=0x8) r3 = socket$nl_route(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000000740)={&(0x7f00000004c0)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000540)=""/11, 0xb}, {&(0x7f0000000580)=""/18, 0x12}, {&(0x7f00000005c0)=""/62, 0x3e}, {&(0x7f0000000600)=""/238, 0xee}], 0x4}, 0x3) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'vlan0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'ip6tnl0\x00'}, @IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FLAGS={0x8, 0x8, 0x40000}, @IFLA_IPTUN_LINK={0x8, 0x1, r4}]}}}]}, 0x58}}, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f00000002c0)=@pppol2tpv3={0x18, 0x1, {0x0, r5, {0x2, 0x4e23, @multicast2}, 0x0, 0x0, 0x0, 0x3}}, 0x2e) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000480)={r2, 0x7, 0x84e7, 0xbe, 0x2, 0x5}, &(0x7f0000000300)=0x14) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r7, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x2400c001}, 0x1) 3.832599305s ago: executing program 3 (id=4986): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000100)={0x6, @multicast1, 0x4e1f, 0x0, 'lblcr\x00', 0x0, 0x20, 0xfffffffc}, 0x2c) (async) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f00000002c0)={{0x6, @multicast1, 0x4e1f, 0x0, 'rr\x00'}, {@loopback, 0x4e1f, 0x0, 0x1}}, 0x44) (async) setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x0, 0x488, &(0x7f00000003c0)={{0x6, @multicast1, 0x4e1f, 0x0, 'rr\x00'}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e1f, 0x1, 0x1}}, 0x44) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'nicvf0\x00', 0x0}) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket(0x10, 0x803, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)={0x2c, r7, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_HMACKEYID={0x8}, @SEG6_ATTR_ALGID={0x5}]}, 0x2c}}, 0x0) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r5) (async) getsockname$packet(r5, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="38000000550001002bbd70000200000007000000", @ANYRES32=r8, @ANYBLOB="20000100", @ANYRES32=r3, @ANYBLOB="0002020000000000000000000000ffffac1414bb86dd"], 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x40080c0) (async) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES8=0x0, @ANYBLOB="050000000000000000002200f2ff09fe143626393c0b8500"], 0x20}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000740)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r11, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) (async) sendmsg$nl_route_sched(r10, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70ad25, 0x25dfdbfb, {0x0, 0x0, 0x0, r11, {0x2, 0x4}, {0x0, 0x9}, {0xf, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x10, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x1}]}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) (async) getsockopt$inet_sctp6_SCTP_EXPOSE_POTENTIALLY_FAILED_STATE(r5, 0x84, 0x83, &(0x7f0000000940)={0x2, 0x2}, &(0x7f0000000980)=0x8) getsockopt$inet_sctp6_SCTP_ECN_SUPPORTED(r10, 0x84, 0x82, &(0x7f00000009c0)={r12, 0x1ff}, &(0x7f0000000a00)=0x8) sendmsg$NFT_BATCH(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a30000000002c000000030a01040000000000000000020000000900010073797a30000000000900030073797a300000000090000000060a01240000000000000000020000000900010073797a30000000000900020073797a300000000064000480600001800b0001007461726765740000500002800e00010049444c4554494d45520000000800024000000001340003006400000074"], 0x104}}, 0x0) 3.722286549s ago: executing program 4 (id=4987): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000340)={0x4, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000ff070000000000000300000018110000", @ANYRES64], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffff80}, 0x94) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0100000004000000080000000100000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000a27f7c93b34331b1de", @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="010000000300"/28], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0xfffff8c9, r2, 0x4}, 0x38) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000980)=@newsa={0x140, 0x10, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in, 0x0, 0x6c}, @in=@remote, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @replay_thresh={0x8, 0xb, 0x81}]}, 0x140}}, 0x400c000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r4) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000900)=ANY=[@ANYRESDEC=r5], 0xa8}}, 0x8000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000c40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01010000000000000000020000000900010073797a3000000000080002400000000354000000120a01010000000000000000020000000900010073797a30000000000900020073797a3000000000080003400000000320000480060001"], 0xa4}}, 0x20000000) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r7, 0x891d, 0x0) r8 = socket(0x10, 0x3, 0x0) write(r8, &(0x7f0000000480)="240000001e005f031400ff01000000f80700b3586ff606c2e553797c080008e467dc0000", 0x24) r9 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r9, 0x29, 0xd0, &(0x7f00000004c0)=0xa, 0x4) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000540)={'netdevsim0\x00', 0x0}) r12 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000001000095"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r11}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000006c0)={r12, r11, 0x25, 0x0, @val=@perf_event={0x6}}, 0x18) recvmmsg(r8, &(0x7f0000000700), 0x400000000000166, 0x1a000, 0x0) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r4, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000700)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002abd7000fbdbdf25080000a5879312284d5347003400069b14000400fc01000000000000000000000000000100c959fc2c6654898984317de0c614000400ff0200000000000000aeabe900000000000001060005004e23000008000300010000000800040005"], 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x24000010) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r4, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000300}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, r5, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_TOKEN={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) 2.792722386s ago: executing program 4 (id=4988): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0xfc5, 0x0, 0x0, {{0x11}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x8, 0x2a, [@perr={0x84, 0xffffffffffffff21}]}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r3, 0x5, 0x0, 0x0, {{}, {@val={0xffffffffffffff6b, 0x3, r1}, @void}}, [@NL80211_ATTR_SSID={0xf, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @random="b368950b5c4b"}, @NL80211_ATTR_SSID={0x0, 0x34, @random="2e932952"}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r4, 0x29, 0x46, &(0x7f0000000000)=0x6, 0x4) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) 892.544841ms ago: executing program 0 (id=4989): r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000e80)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100ffffffff0000400001000000050007000000000008000900000000101400200000000000000000000000ffff"], 0x6c}, 0x1, 0x620b}, 0x0) 889.611443ms ago: executing program 5 (id=4990): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001200192340834b80040d8c560a067f0200ff000000000000c00e58000b4824ca945f64009400ff0325010ebc000000000000008004f0fffeffe809005300fff5dd0000000c0001000d0c10000000000000000000", 0x58}], 0x1) 889.154205ms ago: executing program 3 (id=4991): syz_emit_ethernet(0x3b6, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0xf5, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000050000000026000400"}, {0x18, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x18, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "ffffffffffff00000000000200000000000000000000000000008879e66485201a0015ca837400"/55}, {0x0, 0x14, "5e14f0e7e72d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fa632dbf04542188b196e213408c"}, {0x3, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="6800000000090504000000000000000002000000090001007379002c00000000140002800600010000020000050002000600000008000500000000002c0004800800010000000001200002800c000100706f6c696379300008000200000000fe070003000000001e", 0x68}], 0x1}, 0x4800) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000780)=@filter={'filter\x00', 0xe, 0x4, 0x398, 0xffffffff, 0xe0, 0x1f8, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, &(0x7f0000000000), {[{{@ipv6={@remote, @loopback, [0xff, 0xffffffff, 0xff000000, 0xff], [0xffffffff, 0xff, 0x0, 0xff000000], 'lo\x00', 'macvtap0\x00', {}, {}, 0x0, 0xd, 0x4, 0x5b}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x1, 0x2, 0x4}, {0x2, 0x3, 0x4}, {0x0, 0x3}, 0x5, 0x3}}}, {{@uncond, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@dst={{0x48}, {0x3, 0xd, 0x1, [0x2, 0x8, 0x0, 0x8847, 0x8001, 0x3, 0x8000, 0x0, 0x7f, 0x5, 0x1, 0x0, 0x200, 0x1, 0x8001, 0xc], 0x10}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@mcast1, @loopback, [0xffffff00, 0xffffff00, 0xff], [0xff, 0xffffff00, 0xff, 0xff000000], 'veth1_macvtap\x00', 'rose0\x00', {}, {0xff}, 0xc, 0x9, 0x5, 0xe}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f8) 843.319065ms ago: executing program 4 (id=4992): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff00000000ffff000058000b4824ca945f64009400ff0325010ebc000000000000008004f0fffeffe809005300fff5dd0000000c0001000d0c10000000000000000000", 0x58}], 0x1) 704.030256ms ago: executing program 0 (id=4993): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000000000000000000000000000850000000700000085000000070000009500000000000000"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0x0, 0xe, 0xfffffffffffffd85, &(0x7f0000000300)="61df712bc884fed5722780b6c2a7", 0x0, 0x739d, 0x0, 0x7, 0xfffffffffffffe73, &(0x7f0000000340), &(0x7f0000000380)}, 0x28) 649.3035ms ago: executing program 3 (id=4994): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x5, 0x4, 0x8, 0x100, 0x0, 0x0, 0x7, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1, 0x14, &(0x7f0000000b00)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020692500000000002022206b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000f00000085000000060000007a0af0ff0000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffffbfa300000000000007030000f0ffffffb704000000000000850000000200000095"], &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c00)={r1, 0x0, 0xe, 0x0, &(0x7f0000000c80)='\x00'/14, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 576.417359ms ago: executing program 4 (id=4995): unshare(0x22020600) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000ec0)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000f40)=@abs={0x1, 0x0, 0x4e20}, 0x1c) 576.305171ms ago: executing program 5 (id=4996): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r0) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, r1, 0x1, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4810}, 0x800) 568.399814ms ago: executing program 2 (id=4896): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none, 0x4, 0x1}, 0xe) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000080), 0x10) read(r1, &(0x7f00000000c0)=""/41, 0x29) listen(r0, 0x90004) shutdown(r0, 0x1) shutdown(r0, 0xf10958b175592617) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x84}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90) 463.656455ms ago: executing program 5 (id=4997): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000002f40)=ANY=[@ANYBLOB="3c0000001c00070c002000000000000002000000", @ANYRES32=r1, @ANYBLOB="080010001400010098e5b7a10000000000002000000000000a000200"], 0x3c}}, 0x20024090) 397.929013ms ago: executing program 0 (id=4999): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1e, 0x4, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000000)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x20000040}, 0x4041) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES64=r1, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028005000e0040"], 0x44}, 0x1, 0x0, 0x0, 0x20003}, 0x0) 396.953173ms ago: executing program 3 (id=5000): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000001340), 0x35c, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001380)={&(0x7f00000013c0)=ANY=[@ANYBLOB="740000001200030600"/20, @ANYRES32=0x0, @ANYBLOB="2fedaa88000000003800128009000100766c616e000000002800028006000100000000000c0002000000000000000000100004800c00010000000000", @ANYRES32, @ANYBLOB='\b\x00\n\x00\r'], 0x74}, 0x1, 0x0, 0x0, 0x4000}, 0x0) preadv(r1, &(0x7f0000000100)=[{&(0x7f0000000280)=""/4081, 0xff1}], 0x1, 0x5, 0x45) socket$packet(0x11, 0x3, 0x300) r3 = socket$can_raw(0x1d, 0x3, 0x1) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=@base={0x16, 0x0, 0x8, 0x10002, 0x0, 0x1}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000014c0)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r4}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x2, r5, 0x900}, 0x38) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) sendmsg$can_raw(r3, &(0x7f0000001300)={&(0x7f0000000180)={0x1d, r6}, 0x10, &(0x7f00000012c0)={&(0x7f0000001280)=@can={{0x3, 0x1, 0x0, 0x1}, 0x8, 0x3, 0x0, 0x0, "d60b7b45c0842535"}, 0x10}, 0x1, 0x0, 0x0, 0x8800}, 0x24040884) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000040), 0x49) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000200)=@phonet={0x23, 0x0, 0x0, 0x6}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)="27050200160014000600002fb96dbcf706e10500070088a800a88800f90ecf7b704fb64a5239", 0xfe39}], 0x1}, 0x0) 267.80977ms ago: executing program 5 (id=5001): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000009112ca000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x2c, 0x2f, 0x1, 0x0, 0x25dfdc00, {0x3, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x104}]}, @nested={0x10, 0x2, 0x0, 0x1, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x5, 0x0, 0x0, @pid}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) (async) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000dc0), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000e00)={0xffffffffffffffff}) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000ec0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="63812bbd7000fcdbdf25030000000800010000000000280007800c00018008000100", @ANYRES32=r3], 0x44}, 0x1, 0x0, 0x0, 0x440c0}, 0x40040) 207.774751ms ago: executing program 0 (id=5002): r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000e80)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100ffffffff0000400001000000050007000000000008000900000000101400200000000000000000000000ffff"], 0x6c}, 0x1, 0x620b}, 0x0) 161.289824ms ago: executing program 3 (id=5003): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x2c, 0x0, 0x1, 0x0, 0x0, 0x0, {0x2, 0x0, 0x1}, [@CTA_MARK_MASK={0x8}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x10}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="60000000090601020000000900020073797a30000000000500010007000000380007800c00018008000140ffffffff060004405000000005000700060000000c00148008000140000000000c00168008000140ac14142e000000000000"], 0x60}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0x6, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) close(0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x4f00, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x54, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x40000, 0x823}, [@IFLA_LINKINFO={0x1f, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @mcast1}]}}}, @IFLA_MASTER={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x40440e4}, 0x20040000) 121.572143ms ago: executing program 0 (id=5004): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff0000efffffff000058000b4824ca945f64009400ff0325010ebc000000000000008004f0fffeffe809005300fff5dd0000000c0001000d0c10000000000000000000", 0x58}], 0x1) 77.124896ms ago: executing program 5 (id=5005): socketpair(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x48, r2, 0x1, 0x70bd2b, 0x1000, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x27, 0x1, r0}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x122}]}, 0x48}}, 0x400400c) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r3) sendmsg$IEEE802154_LIST_IFACE(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x14, r4, 0x703, 0x70bd26}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x5c, r6, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_SEC_KEY={0x40, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "a97be044a6cb0046726ff790a5b74c26"}, @NL802154_KEY_ATTR_ID={0x20, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x4}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x5}, 0x800) r8 = socket(0x21, 0xa, 0x0) bind$inet(r8, &(0x7f00000006c0)={0x10, 0x2}, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000480)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)={0x14, r10, 0x2, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x5}, 0x800) setsockopt$MRT_INIT(r8, 0x0, 0xc8, &(0x7f0000000580), 0x4) sendmsg$IEEE802154_LLSEC_DEL_DEV(r1, &(0x7f0000000680)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x48, r4, 0x20, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r11}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2004c000}, 0x20049800) 0s ago: executing program 0 (id=5006): r0 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80800) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000000), &(0x7f0000000040)=0x40) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x14, &(0x7f0000000080)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4a8}}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x7}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8001}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @generic={0x2, 0x0, 0x8, 0x5}], &(0x7f0000000140)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x5, 0x3}, 0x8, 0x10, &(0x7f00000001c0)={0x4, 0x0, 0x4, 0xf35}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000200)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000240)=[{0x1, 0x2, 0x10, 0x3}, {0x1, 0x1, 0x5, 0x5}, {0x4, 0x1, 0xb, 0x9}, {0x2, 0x2, 0xd}], 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x50, 0x8f, &(0x7f0000000340)="4750482ee6f89636ce1e1b85e486676b927baf9e8183b7cd850c36f843ee9d860c98f4d0f76db05d18d74b1441c556c2a8de071efc30be805c64a1a49986c57b09380f4135704422f4825192f1290f29", &(0x7f00000003c0)=""/143, 0x5, 0x0, 0xbc, 0xa0, &(0x7f0000000480)="5998e419621f98873b396561c55a78add777a6cb539e9062024aec628565e740ce38284bfa5e2a728ac8d5af129d850d7920acbbf2b285a982b7196144f5dbf49c168bdc8bdb1469d0b05c2325485e00a50c3c0bc37aa1c12d7af4d6d0fbb5960c7ab934edb4ce1d7692097da3e09ef8e0275cf4de543da155888da157aec5a0e0ccdbe4470af11ead51e90c089dc11fb6a9f41d2a928b4c2a569a401e9b69be212fab034137089b630909f48ffa8af9ef81e1f9ac880ba81c739b2f", &(0x7f0000000540)="626ccaf7b69c698a7ee4a039f80c01b8561de1beb0cf6abc146ebcb81c878492b3bed43b17db468812cb1856eceac97e0fa89fc49ad630ca66dd154e6d7496c8cf8c0da73a7cb6e1686d3d67b20a887e0c2b8084b6ba3ea5f537c6fdc82c658b9346e8351b19e2146f75cdca261548a5ea66893d178363f083f962e47703eb5ad6de03ebdefc19ef09c50f5046903a8cbcf6b42c661a306476cebef78d2f09c0", 0x4, 0x0, 0x80}, 0x50) (async) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f0000000680)={0x8, 'bridge0\x00', {'veth1_vlan\x00'}}) (async) r2 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f00000006c0), &(0x7f0000000700)=0x10, 0x80800) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000a80)={'tunl0\x00', &(0x7f0000000a00)={'gretap0\x00', 0x0, 0x80, 0x8, 0xc78, 0xfffffffc, {{0x9, 0x4, 0x2, 0x25, 0x24, 0x68, 0x0, 0x40, 0x4, 0x0, @multicast1, @private=0xa010102, {[@cipso={0x86, 0x10, 0x3, [{0x1, 0xa, "488a04a146bc866c"}]}]}}}}}) sendmsg$inet(r2, &(0x7f0000000bc0)={&(0x7f0000000740)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000009c0)=[{&(0x7f0000000780)="1d23786a705db715e79adbe7ecb6c00f3b55d22813b7d4f60d7b725b02a3f1a258f1479b54dcb88f798a1911d313308a45843de0f187b07aee39c11c2c983a9eb3d1a5cd6ed58ed20c7797f3ef8c115f74ea1714b5fc04e24bea1e801294c30ee4a442b4e45470930fa50f319007eec01e7f9095b4056f6e213cc6d699c52e34ae25443dd7a887ad8cddc1c11c8e72fd88a771ac468fff0f03938d9bffc52fd2289af86dab69d02dfb08d66b7fc890329bfb35f6e555dacd8f85b2b89fb0331fbce8a7b797e0b2c325ff652b1ebe8bd7c66617d63c5dc7b777a60a2ed15cb52ba7e8a4b80befcf2227e0bfd6fbe036dcaefbed75b9b2e90713", 0xf9}, {&(0x7f0000000880)="d7a280d66e30e7e6ed170af038997ad6e8d4b297c918d90e76ea17ec039b69f85d7fbf3eb21bf4cb093a14c8d561b913b18b3193fa07b7e87b21b89cd7837b37bf25fd3c93e2465d979b7ccda480c50d4783337bbd4f3b64ef9e819114437f3356f99505ee6f74110336ddfe8fd4f6c79d8530f25f5a44a421ae4c262f79308d153141e7cc1f38e7b296c3203d8cf8db45557d4bbc33b7f7fcabe39e89d266d38d34e45ee852258154e6539ae6335df37915139c46bf62c7f9", 0xb9}, {&(0x7f0000000940)="aab1e93ed8bc2f423d24", 0xa}, {&(0x7f0000000980)="66d99088cd2aa8f066adfc4c22733bfd8016cddd0814d4a1eb88b1ec0f0c013cc6", 0x21}], 0x4, &(0x7f0000000ac0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x100}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xb98c70}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp_prespec={0x44, 0xc, 0x91, 0x3, 0x7, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4b4}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @multicast1, @local}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}], 0xe8}, 0x8000) (async, rerun: 64) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000c40), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r4, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x54, r5, 0x100, 0x70bd2a, 0x8, {}, [@L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_FD={0x8}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x5}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @loopback}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000001}, 0x8004) (async, rerun: 64) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000d80)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0x1, 0x1, '\x00', r3, 0xffffffffffffffff, 0x0, 0x5, 0x1}, 0x50) (rerun: 64) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) pipe(&(0x7f0000000e40)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001180)={&(0x7f0000001000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x80, 0x80, 0x6, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x4, 0xb454}}, @fwd={0x10}, @type_tag={0x3, 0x0, 0x0, 0x12, 0x2}, @fwd={0xf}, @enum64={0x8, 0x3, 0x0, 0x13, 0x0, 0x3, [{0x7, 0x3, 0xefc}, {0x8, 0x8571}, {0xe, 0x3, 0x9}]}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0xe, 0x2}]}]}, {0x0, [0x30, 0x10, 0x61, 0x0]}}, &(0x7f00000010c0)=""/144, 0x9e, 0x90, 0x0, 0x9c75, 0x10000}, 0x28) (async, rerun: 64) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000001240)={0xffffffffffffffff}) (async, rerun: 64) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000012c0)={0x1b, 0x0, 0x0, 0xfffeffff, 0x0, 0x1, 0x5, '\x00', r3, 0xffffffffffffffff, 0x0, 0x2, 0x3}, 0x50) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000013c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000001340), &(0x7f0000001380)='%-010d \x00'}, 0x20) r14 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001400)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x7, '\x00', r3, 0xffffffffffffffff, 0x0, 0x4, 0x3}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001540)={0x11, 0x19, &(0x7f0000000e80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x47}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@map_val={0x18, 0xe, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x2}, @ldst={0x2, 0x1, 0x4, 0x5, 0xa, 0x1, 0x4}, @exit, @map_fd={0x18, 0x6, 0x1, 0x0, r9}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x5}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x4}]}, &(0x7f0000000f80)='GPL\x00', 0x6, 0x0, &(0x7f0000000fc0), 0x40f00, 0x42, '\x00', 0x0, 0x0, r10, 0x8, &(0x7f00000011c0)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000001200)={0x5, 0x7, 0xe, 0xc5}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000001480)=[r11, 0xffffffffffffffff, r12, r13, r14], &(0x7f00000014c0)=[{0x5, 0x5, 0x4, 0x7}, {0x2, 0x4, 0x2, 0x6}, {0x3, 0x4, 0x5, 0x2}, {0x5, 0x4, 0xa, 0xc}, {0x0, 0x5, 0x5, 0x5}, {0x0, 0x1, 0xb, 0x9}, {0x4, 0x1, 0x1, 0x4}, {0x2, 0x1, 0x9, 0xb}], 0x10, 0x6}, 0x94) ioctl$sock_inet6_tcp_SIOCINQ(r8, 0x541b, &(0x7f0000001600)) (async) r15 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001680), r11) sendmsg$NL80211_CMD_SET_MPATH(r4, &(0x7f0000001780)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001740)={&(0x7f00000016c0)={0x74, r15, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x40, 0x32}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000020}, 0x80) connect$pppl2tp(0xffffffffffffffff, &(0x7f00000017c0)=@pppol2tpv3={0x18, 0x1, {0x0, r8, {0x2, 0x4e23, @multicast2}, 0x4, 0x1, 0x4, 0x1}}, 0x2e) (async) r16 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_SOCK_GET(r16, &(0x7f00000018c0)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001880)={&(0x7f0000001840)={0x14, 0x0, 0x8, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x4000000) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$inet(r16, &(0x7f0000001f40)={&(0x7f0000001900)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10, &(0x7f0000001d40)=[{&(0x7f0000001940)="1e429fb992112133b2af9c85e214a87a42fa5b66e681e5e4ee3733e247e278e9aee42198ab8fdb", 0x27}, {&(0x7f0000001980)="171e2335e2f7f34d36cb8cb48532a95073e917d1b86fc40c9da8fb324f17ff82bfa52c1cae79b9a44e52ae6a6ce6715861405d4683a03bf9df68bec66d5f84a7413cbcc4b8eb9850697aa8e94eb43ba9ed86bac21f80e4e6784aadbc3535a7caec7713a08ad032cceb079f3e45a57ee1ea02b9bf3858030bc28e91", 0x7b}, {&(0x7f0000001a00)="01c3a1db79a0036b25eabfbd9c0052693f422146b50aac618ac1e87f3fb9232932c07a280da655db7999c0fa3536", 0x2e}, {&(0x7f0000001a40)="fe6e212b7866012fb402787fea46fb205803834946fcdbf7ffdfdcad33ef9bf2c618fed018be9f1873aff55548954ddfe2fd4fdb3248b4deb0b449836f9ac0c383ea22d06960b09b6ca468736689b83305f6cbb9", 0x54}, {&(0x7f0000001ac0)="e0c69a5e985268bf1f55ba756ba97db565805ac8654e7f42f11efa707ece6b03397c5edc19752c26cba01b5ddf61f0984b5dd35a69d755ba0a5615548f29d3d67c6fe5d064598022d09fc58c4f855f4f57c95fb488f75f33706264c66899aff7213091f9dfc089528456875921a3f5682089a6d849869ab8d07b83d41d1c305463f7e86047d519c5dd66900564cbfe3f2a4c16fc81f28145003fe07dccdbcfb6b97333760a2e1624be22e530ef07ced1e9709b4deedc495592df6a9d02639321bfdf9453f7ca3a732390a528fc592765a5fec609b7f022f4f579f68dd29426fdff8f1d", 0xe3}, {&(0x7f0000001bc0)="9f3875639b016cc65700a8445942f8a9dbb7545c1a442eda0fe461739ac40f780d3afa4c9dd31e89362c813076bbfca925ae3e869a2a909797ab76bc97790e4fe24c056775e6fe18f58a", 0x4a}, {&(0x7f0000001c40)="f0ee3aa8dfd66826fe7287dc3393a6c3badb4ebc44f23e385c36071281ba9e08905f4073bb9de8bde9c1317d539c8e94ec680d2a0883", 0x36}, {&(0x7f0000001c80)="9720097403bed98d2c2ed788d444fcb476cf1caf0c6fdb5543b66d0c1131bce01aa1bc6c4d4260a726b5359e6d1fa34dc91cb6978f93c6bfe5cfa6bdefedc69a40eb5bb49c32bde1333f64beeeab9af8d07ad8019dd4773b8c3382c7367de2245c3bbc972d826d261cbff93b37c56b1ec800c44d4f64bb620a0a5a", 0x7b}, {&(0x7f0000001d00)}], 0x9, &(0x7f0000001e00)=[@ip_retopts={{0x7c, 0x0, 0x7, {[@rr={0x7, 0x7, 0x3c, [@empty]}, @timestamp_addr={0x44, 0x2c, 0x7d, 0x1, 0x6, [{@loopback, 0x2}, {@local, 0x9}, {@broadcast, 0x7}, {@private=0xa010102, 0xa}, {@broadcast, 0x8}]}, @timestamp_addr={0x44, 0x2c, 0xb2, 0x1, 0x6, [{@loopback, 0x80000001}, {@multicast1, 0x3}, {@private=0xa010102, 0xb}, {@remote, 0xfffeffff}, {@remote, 0x58}]}, @timestamp={0x44, 0xc, 0xab, 0x0, 0x2, [0x8001, 0x8]}, @noop]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x80}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9000}}, @ip_ttl={{0x14, 0x0, 0x2, 0xa}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x593}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @empty}}}], 0x138}, 0x41) (async) epoll_create(0xa9c6) (async, rerun: 64) syz_genetlink_get_family_id$tipc(&(0x7f0000001f80), r9) (rerun: 64) kernel console output (not intermixed with test programs): 6.651312][T18587] tipc: Resetting bearer [ 436.746455][T18587] tipc: Disabling bearer [ 436.777442][T18591] __nla_validate_parse: 2 callbacks suppressed [ 436.777467][T18591] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3982'. [ 436.777502][T18591] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3982'. [ 436.808629][T18591] erspan0: entered promiscuous mode [ 436.810850][T18591] 0ªX¹¦Dö»: entered promiscuous mode [ 437.097073][T18600] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3985'. [ 437.281078][T18616] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3992'. [ 437.293892][T18611] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3991'. [ 437.298119][T18616] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3992'. [ 437.298160][T18616] netlink: 11 bytes leftover after parsing attributes in process `syz.3.3992'. [ 437.352932][T18611] bridge11: entered promiscuous mode [ 437.352961][T18611] bridge11: entered allmulticast mode [ 437.387634][T18611] team0: Port device bridge11 added [ 437.467355][T18622] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3989'. [ 437.641809][T18629] netlink: 'syz.4.3997': attribute type 1 has an invalid length. [ 437.641836][T18629] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3997'. [ 437.732064][T18633] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3996'. [ 438.000183][T18647] rxe_eth0 speed is unknown, defaulting to 1000 [ 438.085923][T18654] netlink: 'syz.2.4007': attribute type 16 has an invalid length. [ 438.085963][T18654] veth0_macvtap: entered allmulticast mode [ 438.196459][T18656] tipc: Enabling of bearer rejected, media not registered [ 438.342193][T18674] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 438.809154][T18691] syzkaller0: entered promiscuous mode [ 438.809179][T18691] syzkaller0: entered allmulticast mode [ 438.916728][ T1703] block nbd12: Possible stuck request ffff8880293ae000: control (read@0,4096B). Runtime 90 seconds [ 439.041030][T18701] tipc: Enabled bearer , priority 10 [ 439.231908][T18698] tipc: Disabling bearer [ 439.432836][T18721] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 440.321088][T18775] netlink: 'syz.3.4041': attribute type 11 has an invalid length. [ 440.601958][T18789] tipc: Enabled bearer , priority 10 [ 440.615618][T18787] tipc: Resetting bearer [ 440.660208][T18787] tipc: Disabling bearer [ 441.359054][T18831] syzkaller0: MTU not usable for tipc bearer [ 441.359098][T18831] tipc: Enabling of bearer rejected, failed to enable media [ 441.864778][T18855] __nla_validate_parse: 17 callbacks suppressed [ 441.864806][T18855] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4069'. [ 442.080344][T18862] ip6t_rt: unknown flags 36 [ 442.304998][T18870] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4076'. [ 442.807263][T18849] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 443.127578][T18874] syzkaller0: MTU not usable for tipc bearer [ 443.127624][T18874] tipc: Enabling of bearer rejected, failed to enable media [ 443.154324][ T6627] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 443.154365][ T6627] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.154421][ T6627] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 443.154449][ T6627] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.154487][ T6627] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 443.154514][ T6627] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.154557][ T6627] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 443.154581][ T6627] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.449265][T18918] FAULT_INJECTION: forcing a failure. [ 443.449265][T18918] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 443.449318][T18918] CPU: 0 UID: 0 PID: 18918 Comm: syz.5.4082 Not tainted syzkaller #0 PREEMPT(full) [ 443.449345][T18918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 443.449364][T18918] Call Trace: [ 443.449374][T18918] [ 443.449411][T18918] dump_stack_lvl+0xe8/0x150 [ 443.449457][T18918] should_fail_ex+0x3eb/0x540 [ 443.449492][T18918] _copy_to_user+0x31/0xb0 [ 443.449526][T18918] simple_read_from_buffer+0xe1/0x170 [ 443.449561][T18918] proc_fail_nth_read+0x1bb/0x230 [ 443.449602][T18918] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 443.449643][T18918] ? rw_verify_area+0x24a/0x4c0 [ 443.449675][T18918] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 443.449711][T18918] vfs_read+0x213/0xa80 [ 443.449747][T18918] ? __pfx___mutex_lock+0x10/0x10 [ 443.449799][T18918] ? __pfx_vfs_read+0x10/0x10 [ 443.449831][T18918] ? __fget_files+0x2a/0x420 [ 443.449858][T18918] ? __fget_files+0x3a2/0x420 [ 443.449885][T18918] ? __fget_files+0x2a/0x420 [ 443.449924][T18918] ? fdget+0x1ac/0x250 [ 443.449961][T18918] ksys_read+0x150/0x270 [ 443.449995][T18918] ? __pfx_ksys_read+0x10/0x10 [ 443.450038][T18918] do_syscall_64+0x166/0x520 [ 443.450064][T18918] ? trace_irq_disable+0x3b/0x140 [ 443.450095][T18918] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.450120][T18918] ? clear_bhb_loop+0x70/0xc0 [ 443.450151][T18918] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.450181][T18918] RIP: 0033:0x7f0a9d36034e [ 443.450204][T18918] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 443.450226][T18918] RSP: 002b:00007f0a9e2d8fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 443.450252][T18918] RAX: ffffffffffffffda RBX: 00007f0a9e2d96c0 RCX: 00007f0a9d36034e [ 443.450270][T18918] RDX: 000000000000000f RSI: 00007f0a9e2d90a0 RDI: 0000000000000004 [ 443.450285][T18918] RBP: 00007f0a9e2d9090 R08: 0000000000000000 R09: 0000000000000000 [ 443.450301][T18918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 443.450315][T18918] R13: 00007f0a9d626038 R14: 00007f0a9d625fa0 R15: 00007ffd6185d038 [ 443.450354][T18918] [ 443.756645][T18921] nbd: socks must be embedded in a SOCK_ITEM attr [ 443.756949][T18921] block nbd19: shutting down sockets [ 443.822213][T18928] openvswitch: netlink: nsh attr 359 is out of range max 3 [ 443.940089][T18934] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4084'. [ 443.948802][T18931] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4083'. [ 444.020803][T18934] bond4: entered promiscuous mode [ 444.022810][T18934] 8021q: adding VLAN 0 to HW filter on device bond4 [ 444.056147][T18934] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4084'. [ 444.088737][T18936] bridge11: entered promiscuous mode [ 444.101134][T18936] bond4: (slave bridge11): Enslaving as an active interface with an up link [ 444.128502][T18939] bridge12: entered promiscuous mode [ 444.129294][T18939] bond4: (slave bridge12): Enslaving as an active interface with an up link [ 444.342037][T18944] syzkaller1: entered promiscuous mode [ 444.342064][T18944] syzkaller1: entered allmulticast mode [ 444.677725][T18969] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4096'. [ 444.731036][T18981] block nbd4: NBD_DISCONNECT [ 444.731085][T18981] block nbd4: Send disconnect failed -32 [ 444.731109][T18981] block nbd4: Send disconnect failed -32 [ 444.731130][T18981] block nbd4: shutting down sockets [ 444.898621][T18987] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4100'. [ 445.331696][T19005] syzkaller1: entered promiscuous mode [ 445.331723][T19005] syzkaller1: entered allmulticast mode [ 445.418111][T19010] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4108'. [ 445.670665][T19022] block nbd3: NBD_DISCONNECT [ 445.670697][T19022] block nbd3: Send disconnect failed -32 [ 445.670719][T19022] block nbd3: Send disconnect failed -32 [ 445.670741][T19022] block nbd3: shutting down sockets [ 445.738045][T19025] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4115'. [ 445.756792][T19025] bridge11: entered promiscuous mode [ 445.756820][T19025] bridge11: entered allmulticast mode [ 445.760956][T19025] team0: Port device bridge11 added [ 445.984543][T19035] vlan1: entered allmulticast mode [ 445.984570][T19035] bond0: entered allmulticast mode [ 445.984586][T19035] bond_slave_0: entered allmulticast mode [ 445.984603][T19035] bond_slave_1: entered allmulticast mode [ 445.984627][T19035] netdevsim netdevsim4 netdevsim1: entered allmulticast mode [ 446.028541][T19041] syzkaller1: entered promiscuous mode [ 446.028571][T19041] syzkaller1: entered allmulticast mode [ 446.140855][T19035] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4116'. [ 446.482214][T19064] tipc: Enabling of bearer rejected, failed to enable media [ 446.524857][T19067] FAULT_INJECTION: forcing a failure. [ 446.524857][T19067] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 446.524893][T19067] CPU: 0 UID: 0 PID: 19067 Comm: syz.5.4124 Not tainted syzkaller #0 PREEMPT(full) [ 446.524925][T19067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 446.524940][T19067] Call Trace: [ 446.524949][T19067] [ 446.524960][T19067] dump_stack_lvl+0xe8/0x150 [ 446.525002][T19067] should_fail_ex+0x3eb/0x540 [ 446.525037][T19067] _copy_from_user+0x2d/0xb0 [ 446.525067][T19067] ___sys_sendmsg+0x1c6/0x360 [ 446.525092][T19067] ? __lock_acquire+0x747/0x2de0 [ 446.525126][T19067] ? __pfx____sys_sendmsg+0x10/0x10 [ 446.525204][T19067] ? __fget_files+0x3a2/0x420 [ 446.525232][T19067] ? __fget_files+0x2a/0x420 [ 446.525271][T19067] __x64_sys_sendmsg+0x1b1/0x290 [ 446.525299][T19067] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 446.525348][T19067] do_syscall_64+0x166/0x520 [ 446.525374][T19067] ? trace_irq_disable+0x3b/0x140 [ 446.525405][T19067] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.525428][T19067] ? clear_bhb_loop+0x70/0xc0 [ 446.525456][T19067] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.525478][T19067] RIP: 0033:0x7f0a9d39fb19 [ 446.525499][T19067] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 446.525519][T19067] RSP: 002b:00007f0a9e2d9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 446.525544][T19067] RAX: ffffffffffffffda RBX: 00007f0a9d625fa0 RCX: 00007f0a9d39fb19 [ 446.525561][T19067] RDX: 0000000000000044 RSI: 0000200000001ec0 RDI: 0000000000000003 [ 446.525574][T19067] RBP: 00007f0a9e2d9090 R08: 0000000000000000 R09: 0000000000000000 [ 446.525589][T19067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 446.525601][T19067] R13: 00007f0a9d626038 R14: 00007f0a9d625fa0 R15: 00007ffd6185d038 [ 446.525638][T19067] [ 446.837948][T19073] bridge11: entered promiscuous mode [ 446.838012][T19073] bridge11: entered allmulticast mode [ 446.858261][T19073] team0: Port device bridge11 added [ 447.092881][T19080] Cannot find add_set index 4 as target [ 447.327812][T19094] __nla_validate_parse: 5 callbacks suppressed [ 447.327839][T19094] netlink: 76 bytes leftover after parsing attributes in process `syz.5.4134'. [ 447.360752][T19093] syzkaller1: entered promiscuous mode [ 447.360781][T19093] syzkaller1: entered allmulticast mode [ 447.604048][T19108] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4137'. [ 447.608286][T19108] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4137'. [ 448.049843][T19124] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4143'. [ 448.067126][T19124] nbd: socks must be embedded in a SOCK_ITEM attr [ 448.120699][T19126] FAULT_INJECTION: forcing a failure. [ 448.120699][T19126] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 448.120731][T19126] CPU: 0 UID: 0 PID: 19126 Comm: syz.4.4144 Not tainted syzkaller #0 PREEMPT(full) [ 448.120755][T19126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 448.120769][T19126] Call Trace: [ 448.120777][T19126] [ 448.120787][T19126] dump_stack_lvl+0xe8/0x150 [ 448.120828][T19126] should_fail_ex+0x3eb/0x540 [ 448.120861][T19126] _copy_to_user+0x31/0xb0 [ 448.120893][T19126] simple_read_from_buffer+0xe1/0x170 [ 448.120927][T19126] proc_fail_nth_read+0x1bb/0x230 [ 448.120969][T19126] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 448.121009][T19126] ? rw_verify_area+0x24a/0x4c0 [ 448.121039][T19126] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 448.121075][T19126] vfs_read+0x213/0xa80 [ 448.121112][T19126] ? __pfx___mutex_lock+0x10/0x10 [ 448.121141][T19126] ? __pfx_vfs_read+0x10/0x10 [ 448.121173][T19126] ? __fget_files+0x2a/0x420 [ 448.121198][T19126] ? __fget_files+0x3a2/0x420 [ 448.121225][T19126] ? __fget_files+0x2a/0x420 [ 448.121258][T19126] ? fdget+0x1ac/0x250 [ 448.121294][T19126] ksys_read+0x150/0x270 [ 448.121327][T19126] ? __pfx_ksys_read+0x10/0x10 [ 448.121371][T19126] do_syscall_64+0x166/0x520 [ 448.121395][T19126] ? trace_irq_disable+0x3b/0x140 [ 448.121428][T19126] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.121453][T19126] ? clear_bhb_loop+0x70/0xc0 [ 448.121486][T19126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.121509][T19126] RIP: 0033:0x7ff38236034e [ 448.121539][T19126] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 448.121560][T19126] RSP: 002b:00007ff38323dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 448.121585][T19126] RAX: ffffffffffffffda RBX: 00007ff38323e6c0 RCX: 00007ff38236034e [ 448.121603][T19126] RDX: 000000000000000f RSI: 00007ff38323e0a0 RDI: 0000000000000005 [ 448.121618][T19126] RBP: 00007ff38323e090 R08: 0000000000000000 R09: 0000000000000000 [ 448.121633][T19126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 448.121647][T19126] R13: 00007ff382626038 R14: 00007ff382625fa0 R15: 00007ffe6d092fc8 [ 448.121686][T19126] [ 448.372648][T19125] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 448.481487][T19133] syzkaller1: entered promiscuous mode [ 448.481516][T19133] syzkaller1: entered allmulticast mode [ 448.617031][T19140] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4149'. [ 448.617061][T19140] nbd: must specify at least one socket [ 448.741728][T19148] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 448.792397][T19154] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4154'. [ 448.816968][T19158] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4151'. [ 448.835570][T19149] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 448.868392][T19150] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 448.878433][T19150] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 448.905554][T19150] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 448.936268][T19150] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 448.938664][T19150] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 448.940055][T19150] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 448.941368][T19150] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 448.957467][T19163] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 449.002451][T19150] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 449.021345][T19150] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 449.037534][T19150] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 449.059242][T19150] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 449.062961][T19150] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 449.120350][T19150] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 449.121643][T19150] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 449.122865][T19150] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 449.144119][T19150] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 449.155157][T19150] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 449.178426][T19150] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 449.181911][T19150] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 449.190350][T19150] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 449.216718][T19150] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 449.226746][T19150] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 449.246426][T19150] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 449.268513][T19150] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 449.295744][T19150] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 449.302225][T19150] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 449.341639][T19150] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 449.342967][T19150] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 449.382318][T19150] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 449.406911][T19150] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 449.408282][T19150] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 449.409660][T19150] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 449.410943][T19150] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 449.412339][T19150] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 449.413793][T19150] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 449.478336][T19150] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 449.479408][T19150] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 449.513432][T19173] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4156'. [ 449.515207][T19150] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 449.652509][T19176] openvswitch: netlink: Duplicate or invalid key (type 0). [ 449.652549][T19176] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 449.748519][ T5650] block nbd3: Receive control failed (result -32) [ 449.767984][T19150] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 449.774511][T19150] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 449.794958][T19150] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 449.795823][T19150] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 449.796718][T19150] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 449.801416][T19150] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 449.825671][T19150] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 449.869091][T19150] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 449.870106][T19150] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 449.902851][T19150] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 449.926400][T19150] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 450.028305][T19150] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 450.065491][T19150] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 450.067096][T19150] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 450.090987][T19150] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 450.111088][T19150] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 450.129504][T19150] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 450.132609][T19150] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 450.157440][T19150] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 450.158403][T19150] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 450.205693][T19150] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 450.602871][T19191] syzkaller1: entered promiscuous mode [ 450.602911][T19191] syzkaller1: entered allmulticast mode [ 450.747409][T19196] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4165'. [ 450.751999][T19196] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4165'. [ 451.464789][ T5968] bond3: (slave team0): link status definitely down, disabling slave [ 451.528022][T19239] syzkaller1: entered promiscuous mode [ 451.528051][T19239] syzkaller1: entered allmulticast mode [ 452.177875][T19279] netlink: 'syz.4.4192': attribute type 3 has an invalid length. [ 452.262923][T19281] xt_hashlimit: size too large, truncated to 1048576 [ 452.262947][T19281] xt_hashlimit: max too large, truncated to 1048576 [ 452.262960][T19281] xt_hashlimit: overflow, rate too high: 0 [ 452.512280][T19298] sctp: [Deprecated]: syz.0.4196 (pid 19298) Use of int in max_burst socket option. [ 452.512280][T19298] Use struct sctp_assoc_value instead [ 452.615264][T19302] syzkaller1: entered promiscuous mode [ 452.615292][T19302] syzkaller1: entered allmulticast mode [ 452.934669][T19314] team0: Device gtp0 is up. Set it down before adding it as a team port [ 453.006108][T19322] __nla_validate_parse: 3 callbacks suppressed [ 453.006131][T19322] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4202'. [ 453.056071][T19324] openvswitch: netlink: Flow key attr not present in new flow. [ 453.090055][T19319] xt_CT: No such helper "pptp" [ 453.417372][T19337] syzkaller1: entered promiscuous mode [ 453.417402][T19337] syzkaller1: entered allmulticast mode [ 453.611013][T19347] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4213'. [ 453.725160][T19346] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4215'. [ 453.767867][T19346] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4215'. [ 453.925791][ T5650] block nbd4: Receive control failed (result -32) [ 453.982253][T19359] x_tables: duplicate underflow at hook 1 [ 454.023609][T19359] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4220'. [ 454.178501][T19372] netlink: 348 bytes leftover after parsing attributes in process `syz.2.4224'. [ 454.351185][T19380] syzkaller1: entered promiscuous mode [ 454.351215][T19380] syzkaller1: entered allmulticast mode [ 454.476726][T19389] nbd: must specify a size in bytes for the device [ 454.477012][T19387] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4232'. [ 454.477502][T19391] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 454.506126][T19393] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 454.527643][T19387] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4232'. [ 454.810925][T19403] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4234'. [ 454.817860][T19403] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 454.835043][T18911] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 454.856675][T19403] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 455.074816][T18911] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 455.112270][T19416] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4240'. [ 455.442421][T19427] syzkaller1: entered promiscuous mode [ 455.442449][T19427] syzkaller1: entered allmulticast mode [ 455.528798][T19429] ip6gre1: entered allmulticast mode [ 455.796878][T19442] bond5: option resend_igmp: invalid value (32767) [ 455.796906][T19442] bond5: option resend_igmp: allowed values 0 - 255 [ 455.801854][T19442] bond5 (unregistering): Released all slaves [ 456.122042][T19455] FAULT_INJECTION: forcing a failure. [ 456.122042][T19455] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 456.122077][T19455] CPU: 1 UID: 0 PID: 19455 Comm: syz.3.4254 Not tainted syzkaller #0 PREEMPT(full) [ 456.122105][T19455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 456.122119][T19455] Call Trace: [ 456.122129][T19455] [ 456.122140][T19455] dump_stack_lvl+0xe8/0x150 [ 456.122186][T19455] should_fail_ex+0x3eb/0x540 [ 456.122221][T19455] _copy_from_user+0x2d/0xb0 [ 456.122254][T19455] ___sys_sendmsg+0x1c6/0x360 [ 456.122279][T19455] ? __lock_acquire+0x747/0x2de0 [ 456.122314][T19455] ? __pfx____sys_sendmsg+0x10/0x10 [ 456.122384][T19455] ? __fget_files+0x3a2/0x420 [ 456.122412][T19455] ? __fget_files+0x2a/0x420 [ 456.122452][T19455] __x64_sys_sendmsg+0x1b1/0x290 [ 456.122503][T19455] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 456.122552][T19455] do_syscall_64+0x166/0x520 [ 456.122577][T19455] ? trace_irq_disable+0x3b/0x140 [ 456.122609][T19455] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.122634][T19455] ? clear_bhb_loop+0x70/0xc0 [ 456.122663][T19455] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.122688][T19455] RIP: 0033:0x7f56ac19fb19 [ 456.122714][T19455] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 456.122734][T19455] RSP: 002b:00007f56ad011028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 456.122759][T19455] RAX: ffffffffffffffda RBX: 00007f56ac425fa0 RCX: 00007f56ac19fb19 [ 456.122777][T19455] RDX: 0000000000000000 RSI: 0000200000001180 RDI: 0000000000000003 [ 456.122792][T19455] RBP: 00007f56ad011090 R08: 0000000000000000 R09: 0000000000000000 [ 456.122807][T19455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 456.122821][T19455] R13: 00007f56ac426038 R14: 00007f56ac425fa0 R15: 00007fffe589bd08 [ 456.122860][T19455] [ 456.329354][T19459] FAULT_INJECTION: forcing a failure. [ 456.329354][T19459] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 456.329789][T19459] CPU: 1 UID: 0 PID: 19459 Comm: syz.0.4253 Not tainted syzkaller #0 PREEMPT(full) [ 456.329818][T19459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 456.329833][T19459] Call Trace: [ 456.329842][T19459] [ 456.329852][T19459] dump_stack_lvl+0xe8/0x150 [ 456.329897][T19459] should_fail_ex+0x3eb/0x540 [ 456.329932][T19459] _copy_from_iter+0x1d3/0x1680 [ 456.329960][T19459] ? __alloc_skb+0x27a/0x7a0 [ 456.329999][T19459] ? __alloc_skb+0x27a/0x7a0 [ 456.330036][T19459] ? __alloc_skb+0x27a/0x7a0 [ 456.330071][T19459] ? __pfx__copy_from_iter+0x10/0x10 [ 456.330096][T19459] ? kmem_cache_alloc_node_noprof+0x1f4/0x600 [ 456.330122][T19459] ? __alloc_skb+0x27a/0x7a0 [ 456.330158][T19459] ? __alloc_skb+0x27a/0x7a0 [ 456.330200][T19459] ? netlink_sendmsg+0x64f/0xb20 [ 456.330235][T19459] ? skb_put+0x112/0x210 [ 456.330260][T19459] netlink_sendmsg+0x6bb/0xb20 [ 456.330301][T19459] ? __pfx_netlink_sendmsg+0x10/0x10 [ 456.330339][T19459] ? aa_sock_msg_perm+0x144/0x210 [ 456.330369][T19459] ? apparmor_socket_sendmsg+0x98/0x360 [ 456.330405][T19459] ? __pfx_netlink_sendmsg+0x10/0x10 [ 456.330444][T19459] sock_sendmsg_nosec+0x14e/0x190 [ 456.330479][T19459] ____sys_sendmsg+0x54e/0x850 [ 456.330511][T19459] ? __pfx_____sys_sendmsg+0x10/0x10 [ 456.330547][T19459] ? import_iovec+0x73/0xa0 [ 456.330587][T19459] ___sys_sendmsg+0x2a5/0x360 [ 456.330609][T19459] ? __lock_acquire+0x747/0x2de0 [ 456.330645][T19459] ? __pfx____sys_sendmsg+0x10/0x10 [ 456.330713][T19459] ? __fget_files+0x3a2/0x420 [ 456.330740][T19459] ? __fget_files+0x2a/0x420 [ 456.330779][T19459] __x64_sys_sendmsg+0x1b1/0x290 [ 456.330808][T19459] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 456.330859][T19459] do_syscall_64+0x166/0x520 [ 456.330886][T19459] ? trace_irq_disable+0x3b/0x140 [ 456.330918][T19459] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.330941][T19459] ? clear_bhb_loop+0x70/0xc0 [ 456.330970][T19459] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.330994][T19459] RIP: 0033:0x7ff4fbd9fb19 [ 456.331015][T19459] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 456.331035][T19459] RSP: 002b:00007ff4fcbb3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 456.331060][T19459] RAX: ffffffffffffffda RBX: 00007ff4fc025fa0 RCX: 00007ff4fbd9fb19 [ 456.331077][T19459] RDX: 0000000000000000 RSI: 0000200000001180 RDI: 0000000000000003 [ 456.331093][T19459] RBP: 00007ff4fcbb3090 R08: 0000000000000000 R09: 0000000000000000 [ 456.331108][T19459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 456.331122][T19459] R13: 00007ff4fc026038 R14: 00007ff4fc025fa0 R15: 00007ffcf31a9368 [ 456.331160][T19459] [ 456.694923][T19462] syzkaller0: entered promiscuous mode [ 456.694950][T19462] syzkaller0: entered allmulticast mode [ 456.792846][T19467] bridge12: entered promiscuous mode [ 456.792930][T19467] bridge12: entered allmulticast mode [ 456.927474][T19473] 8021q: adding VLAN 0 to HW filter on device bond5 [ 456.976662][T19477] syzkaller1: entered promiscuous mode [ 456.976690][T19477] syzkaller1: entered allmulticast mode [ 457.123889][T19489] IPVS: set_ctl: invalid protocol: 50 127.0.0.1:21 [ 457.214857][T19486] 8021q: adding VLAN 0 to HW filter on device bond6 [ 457.267663][T19490] vlan2: entered promiscuous mode [ 457.267691][T19490] bridge0: entered promiscuous mode [ 457.271580][T19490] vlan2: entered allmulticast mode [ 457.271606][T19490] bridge0: entered allmulticast mode [ 457.454550][T19502] netlink: 'syz.2.4270': attribute type 1 has an invalid length. [ 457.473442][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 457.566003][T19502] 8021q: adding VLAN 0 to HW filter on device bond11 [ 457.615704][T19502] netlink: 'syz.2.4270': attribute type 10 has an invalid length. [ 457.639467][T19508] bond11: (slave dummy0): making interface the new active one [ 457.642548][T19508] bond11: (slave dummy0): Enslaving as an active interface with an up link [ 457.644657][T19502] dummy0: entered promiscuous mode [ 457.679180][T19502] bond11: (slave dummy0): Releasing active interface [ 457.847089][T19520] syzkaller1: entered promiscuous mode [ 457.847116][T19520] syzkaller1: entered allmulticast mode [ 458.159248][T19538] __nla_validate_parse: 9 callbacks suppressed [ 458.159274][T19538] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4284'. [ 458.452181][T19557] openvswitch: netlink: IP tunnel TTL not specified. [ 458.545539][T19564] syzkaller1: entered promiscuous mode [ 458.545566][T19564] syzkaller1: entered allmulticast mode [ 459.172797][T19597] netlink: 244 bytes leftover after parsing attributes in process `syz.2.4303'. [ 459.205193][T19602] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 459.250658][T19598] netlink: 'syz.2.4303': attribute type 1 has an invalid length. [ 459.375892][T19594] syzkaller0: entered promiscuous mode [ 459.375919][T19594] syzkaller0: entered allmulticast mode [ 459.591884][T19584] A link change request failed with some changes committed already. Interface bridge1 may have been left with an inconsistent configuration, please check. [ 459.592889][T19589] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 459.687052][ T5938] bond3: (slave team0): link status definitely down, disabling slave [ 459.944317][T19619] syzkaller1: entered promiscuous mode [ 459.944349][T19619] syzkaller1: entered allmulticast mode [ 460.198439][T19647] netlink: 'syz.5.4317': attribute type 2 has an invalid length. [ 460.412136][T19648] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 460.571291][T19670] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4324'. [ 461.547260][T19686] syzkaller1: entered promiscuous mode [ 461.547289][T19686] syzkaller1: entered allmulticast mode [ 462.030969][T19717] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4338'. [ 462.231931][T19723] sit0: entered promiscuous mode [ 462.232114][T19723] netlink: 'syz.4.4342': attribute type 1 has an invalid length. [ 462.232134][T19723] netlink: 1 bytes leftover after parsing attributes in process `syz.4.4342'. [ 462.375789][T19730] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4347'. [ 462.567371][T19742] netlink: 'syz.0.4352': attribute type 1 has an invalid length. [ 462.660851][T19742] 8021q: adding VLAN 0 to HW filter on device bond7 [ 462.758578][T19742] bond7: (slave geneve4): making interface the new active one [ 462.785356][T19742] bond7: (slave geneve4): Enslaving as an active interface with an up link [ 462.861412][T19748] netlink: 'syz.5.4353': attribute type 16 has an invalid length. [ 462.861432][T19748] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4353'. [ 462.861454][T19748] veth0_macvtap: entered allmulticast mode [ 462.946328][T19753] netlink: 'syz.3.4354': attribute type 2 has an invalid length. [ 463.004610][T19764] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4356'. [ 463.004652][T19764] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4356'. [ 463.046701][T19764] geneve3: entered promiscuous mode [ 463.046729][T19764] geneve3: entered allmulticast mode [ 463.048480][T19761] tipc: Enabling of bearer rejected, already enabled [ 463.059482][T19764] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4356'. [ 463.150886][ T5938] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.150943][ T5938] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.162213][ T5968] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.163461][ T5938] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.164160][T19764] __nla_validate_parse: 3 callbacks suppressed [ 463.164205][T19764] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4356'. [ 463.164292][T19764] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4356'. [ 463.219151][T19764] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4356'. [ 463.219268][T19764] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4356'. [ 463.246632][T19764] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4356'. [ 463.246674][T19764] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4356'. [ 463.247520][T19764] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4356'. [ 463.247541][T19764] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4356'. [ 463.255645][T19764] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4356'. [ 463.255747][T19764] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4356'. [ 463.674489][T19789] netlink: 'syz.5.4359': attribute type 2 has an invalid length. [ 463.674520][T19789] netlink: 'syz.5.4359': attribute type 2 has an invalid length. [ 463.805492][T19793] FAULT_INJECTION: forcing a failure. [ 463.805492][T19793] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 463.805531][T19793] CPU: 1 UID: 0 PID: 19793 Comm: syz.0.4361 Not tainted syzkaller #0 PREEMPT(full) [ 463.805558][T19793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 463.805573][T19793] Call Trace: [ 463.805583][T19793] [ 463.805594][T19793] dump_stack_lvl+0xe8/0x150 [ 463.805640][T19793] should_fail_ex+0x3eb/0x540 [ 463.805677][T19793] _copy_from_user+0x2d/0xb0 [ 463.805710][T19793] __copy_msghdr+0x390/0x590 [ 463.805744][T19793] ___sys_sendmsg+0x213/0x360 [ 463.805767][T19793] ? __lock_acquire+0x747/0x2de0 [ 463.805805][T19793] ? __pfx____sys_sendmsg+0x10/0x10 [ 463.805877][T19793] ? __fget_files+0x3a2/0x420 [ 463.805916][T19793] ? __fget_files+0x2a/0x420 [ 463.805956][T19793] __x64_sys_sendmsg+0x1b1/0x290 [ 463.805987][T19793] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 463.806606][T19793] do_syscall_64+0x166/0x520 [ 463.807003][T19793] ? trace_irq_disable+0x3b/0x140 [ 463.807229][T19793] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.807263][T19793] ? clear_bhb_loop+0x70/0xc0 [ 463.807294][T19793] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.807320][T19793] RIP: 0033:0x7ff4fbd9fb19 [ 463.807344][T19793] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 463.807365][T19793] RSP: 002b:00007ff4fcbb3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 463.807392][T19793] RAX: ffffffffffffffda RBX: 00007ff4fc025fa0 RCX: 00007ff4fbd9fb19 [ 463.807410][T19793] RDX: 0000000000004005 RSI: 0000200000000480 RDI: 0000000000000007 [ 463.807426][T19793] RBP: 00007ff4fcbb3090 R08: 0000000000000000 R09: 0000000000000000 [ 463.807441][T19793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 463.807455][T19793] R13: 00007ff4fc026038 R14: 00007ff4fc025fa0 R15: 00007ffcf31a9368 [ 463.807504][T19793] [ 464.621722][T19811] netlink: 'syz.0.4367': attribute type 29 has an invalid length. [ 464.645573][T19811] netlink: 'syz.0.4367': attribute type 29 has an invalid length. [ 464.804218][T19820] openvswitch: netlink: IPv6 tunnel dst address is zero [ 464.998259][T19820] bond7: Removing last arp target with arp_interval on [ 465.431951][T19825] syz.5.4371 (19825) used greatest stack depth: 17824 bytes left [ 465.522787][T19857] ip_tables: iptables: counters copy to user failed while replacing table [ 466.220136][T19891] syzkaller0: entered promiscuous mode [ 466.220165][T19891] syzkaller0: entered allmulticast mode [ 466.237686][ T6627] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 466.237742][ T6627] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 466.237783][ T6627] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 466.237822][ T6627] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 466.242532][T19888] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 466.485954][T19909] team0: Device ipvlan0 failed to register rx_handler [ 467.264778][T19944] syzkaller1: entered promiscuous mode [ 467.264809][T19944] syzkaller1: entered allmulticast mode [ 467.484964][T19953] ip6_vti0: entered promiscuous mode [ 467.697013][T19961] netlink: 'syz.2.4412': attribute type 1 has an invalid length. [ 468.167352][T19987] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 468.223544][T19988] ipt_ECN: cannot use operation on non-tcp rule [ 468.237878][T19988] Bluetooth: hci2: Opcode 0x0401 failed: -22 [ 468.567891][T20010] __nla_validate_parse: 66 callbacks suppressed [ 468.567916][T20010] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4427'. [ 468.954321][T20024] smbdirect: ib_dev[syz2] removed [ 468.971889][T20030] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4432'. [ 468.972293][T20030] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4432'. [ 468.972631][T20030] gre0: Master is either lo or non-ether device [ 468.999216][ T1703] block nbd12: Possible stuck request ffff8880293ae000: control (read@0,4096B). Runtime 120 seconds [ 469.034260][T20038] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4432'. [ 469.034678][T20030] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4432'. [ 469.035059][T20030] gre0: Master is either lo or non-ether device [ 469.221719][T20040] netlink: 'syz.4.4434': attribute type 8 has an invalid length. [ 469.221746][T20040] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4434'. [ 469.382174][T20045] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4438'. [ 469.396971][T20050] netlink: 300 bytes leftover after parsing attributes in process `syz.3.4437'. [ 469.621140][T20055] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4437'. [ 469.893674][T20076] ip_tables: iptables: counters copy to user failed while replacing table [ 469.992401][T20079] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 470.126758][T20092] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4449'. [ 470.390713][T20100] 8021q: adding VLAN 0 to HW filter on device bond10 [ 470.418766][T20105] bridge12: entered promiscuous mode [ 470.418792][T20105] bridge12: entered allmulticast mode [ 470.438706][T20105] team0: Port device bridge12 added [ 470.709768][T20121] tipc: Enabled bearer , priority 10 [ 470.730045][T20118] tipc: Resetting bearer [ 470.812428][T20118] tipc: Disabling bearer [ 470.874978][T20129] veth1_macvtap: left promiscuous mode [ 470.875013][T20129] macsec0: entered allmulticast mode [ 470.936756][T20129] veth1_macvtap: entered promiscuous mode [ 470.936785][T20129] veth1_macvtap: entered allmulticast mode [ 470.936891][T20129] macsec0: left allmulticast mode [ 470.936908][T20129] veth1_macvtap: left allmulticast mode [ 471.054735][T20140] netlink: 'syz.4.4470': attribute type 3 has an invalid length. [ 471.385485][T20143] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 471.841186][T20179] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 471.989442][T20181] bridge12: entered promiscuous mode [ 471.993387][T20181] bridge12: entered allmulticast mode [ 472.012985][T20181] team0: Port device bridge12 added [ 472.304880][T20197] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 473.087232][T20213] bond8: Invalid ad_actor_system MAC address. [ 473.087260][T20213] bond8: option ad_actor_system: invalid value (1) [ 473.105406][T20213] bond8 (unregistering): Released all slaves [ 473.489570][T20258] sctp: [Deprecated]: syz.0.4504 (pid 20258) Use of struct sctp_assoc_value in delayed_ack socket option. [ 473.489570][T20258] Use struct sctp_sack_info instead [ 473.829332][T20280] __nla_validate_parse: 26 callbacks suppressed [ 473.829358][T20280] netlink: 80 bytes leftover after parsing attributes in process `syz.2.4513'. [ 473.858648][T20280] pim6reg1: entered promiscuous mode [ 473.858678][T20280] pim6reg1: entered allmulticast mode [ 473.888281][ T5636] block nbd19: Receive control failed (result -32) [ 473.890006][ T5650] block nbd19: Receive control failed (result -32) [ 474.061867][T20286] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 474.801033][T20297] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 474.801079][T20297] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.947656][T20320] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4526'. [ 474.950284][T20333] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4529'. [ 475.018349][T20336] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4530'. [ 475.096541][T20333] 8021q: adding VLAN 0 to HW filter on device bond14 [ 475.122318][T20337] bond13: (slave team0): Releasing backup interface [ 475.168436][T20337] 8021q: adding VLAN 0 to HW filter on device team0 [ 475.189205][T20337] bond14: (slave team0): Enslaving as an active interface with an up link [ 475.289205][T20297] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 475.289250][T20297] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.532418][T20297] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 475.532465][T20297] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.561367][T20347] netlink: 'syz.3.4531': attribute type 1 has an invalid length. [ 475.689133][T20297] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 475.689174][T20297] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.895706][ T5932] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 2816 - 0 [ 475.895745][ T5932] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.954223][ T5932] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 2816 - 0 [ 475.954262][ T5932] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.004137][ T5938] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 2816 - 0 [ 476.004179][ T5938] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.007559][ T5932] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 2816 - 0 [ 476.007674][ T5932] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.439747][T20385] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4541'. [ 476.507840][T20398] netlink: 76 bytes leftover after parsing attributes in process `syz.5.4544'. [ 476.527685][T20398] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4544'. [ 476.527714][T20398] netlink: 11 bytes leftover after parsing attributes in process `syz.5.4544'. [ 476.573347][T18911] tipc: Resetting bearer [ 476.693216][T20403] openvswitch: netlink: nsh attr 359 is out of range max 3 [ 476.710845][T20403] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4545'. [ 476.864994][T20408] IPVS: length: 1152 != 8 [ 476.878769][T20412] netlink: 'syz.0.4549': attribute type 1 has an invalid length. [ 476.878881][T20412] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4549'. [ 476.965929][T20414] openvswitch: netlink: IP tunnel dst address not specified [ 477.182005][T20416] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 477.182139][T20416] syzkaller1: linktype set to 823 [ 477.317134][T20427] netlink: 'syz.2.4555': attribute type 4 has an invalid length. [ 477.541347][T20433] syzkaller0: entered allmulticast mode [ 477.826178][T20459] block nbd3: NBD_DISCONNECT [ 477.826297][T20459] block nbd3: Send disconnect failed -32 [ 477.826323][T20459] block nbd3: shutting down sockets [ 478.471905][T20485] gretap1: entered promiscuous mode [ 478.471932][T20485] gretap1: entered allmulticast mode [ 478.480942][T20487] netlink: 'syz.0.4570': attribute type 11 has an invalid length. [ 478.586532][T20485] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 478.626150][T20485] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 478.733621][T20503] netlink: 'syz.5.4575': attribute type 2 has an invalid length. [ 478.735147][T20502] tipc: Enabling of bearer rejected, failed to enable media [ 479.145670][T20522] rdma_rxe: rxe_newlink: failed to add syz_tun [ 479.307115][T20525] __nla_validate_parse: 4 callbacks suppressed [ 479.307143][T20525] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4580'. [ 479.832232][ T5636] block nbd3: Receive control failed (result -32) [ 479.832232][ T5650] block nbd3: Receive control failed (result -32) [ 479.888558][T20558] netlink: 'syz.0.4592': attribute type 1 has an invalid length. [ 479.922922][T20558] netlink: 'syz.0.4592': attribute type 1 has an invalid length. [ 480.250809][T20580] netlink: 'syz.4.4599': attribute type 2 has an invalid length. [ 480.250840][T20580] netlink: 'syz.4.4599': attribute type 2 has an invalid length. [ 480.276980][T20580] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4599'. [ 480.479654][T20591] xt_CT: You must specify a L4 protocol and not use inversions on it [ 480.589154][ T5650] block nbd20: Receive control failed (result -32) [ 480.589738][ T5636] block nbd20: Receive control failed (result -32) [ 480.613660][T20597] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4605'. [ 480.613693][T20597] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4605'. [ 480.613726][T20597] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4605'. [ 480.670504][T20599] netlink: 'syz.2.4606': attribute type 1 has an invalid length. [ 480.722733][T20602] FAULT_INJECTION: forcing a failure. [ 480.722733][T20602] name failslab, interval 1, probability 0, space 0, times 0 [ 480.722769][T20602] CPU: 1 UID: 0 PID: 20602 Comm: syz.4.4607 Not tainted syzkaller #0 PREEMPT(full) [ 480.722796][T20602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 480.722811][T20602] Call Trace: [ 480.722820][T20602] [ 480.722831][T20602] dump_stack_lvl+0xe8/0x150 [ 480.722875][T20602] should_fail_ex+0x3eb/0x540 [ 480.722910][T20602] ? __alloc_skb+0x1db/0x7a0 [ 480.722945][T20602] should_failslab+0xa8/0x100 [ 480.722981][T20602] ? __alloc_skb+0x1db/0x7a0 [ 480.723017][T20602] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 480.723043][T20602] ? __alloc_skb+0x18d/0x7a0 [ 480.723078][T20602] ? __alloc_skb+0x1db/0x7a0 [ 480.723118][T20602] __alloc_skb+0x1db/0x7a0 [ 480.723156][T20602] netlink_ack+0x136/0xb30 [ 480.723186][T20602] ? __lock_acquire+0x747/0x2de0 [ 480.723220][T20602] ? hook_capable+0x1c3/0x5e0 [ 480.723255][T20602] netlink_rcv_skb+0x2a4/0x4a0 [ 480.723289][T20602] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 480.723415][T20602] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 480.723460][T20602] ? bpf_lsm_capable+0x9/0x20 [ 480.723482][T20602] ? security_capable+0x7e/0x2c0 [ 480.723527][T20602] nfnetlink_rcv+0x2b9/0x28c0 [ 480.723561][T20602] ? is_bpf_text_address+0x292/0x2b0 [ 480.723585][T20602] ? is_bpf_text_address+0x26/0x2b0 [ 480.723614][T20602] ? kernel_text_address+0xa5/0xe0 [ 480.723664][T20602] ? __kernel_text_address+0xd/0x30 [ 480.723693][T20602] ? unwind_get_return_address+0x4d/0x90 [ 480.723731][T20602] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 480.723761][T20602] ? arch_stack_walk+0xfb/0x150 [ 480.723811][T20602] ? __lock_acquire+0x747/0x2de0 [ 480.723840][T20602] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 480.723877][T20602] ? __lock_acquire+0x747/0x2de0 [ 480.723921][T20602] ? __lock_acquire+0x747/0x2de0 [ 480.723965][T20602] ? __netlink_lookup+0xe6/0x8f0 [ 480.724012][T20602] ? lock_acquire+0x115/0x350 [ 480.724041][T20602] ? netlink_deliver_tap+0x2e/0x1b0 [ 480.724081][T20602] ? netlink_deliver_tap+0x2e/0x1b0 [ 480.724114][T20602] ? netlink_deliver_tap+0x2e/0x1b0 [ 480.724154][T20602] netlink_unicast+0x8ef/0xa80 [ 480.724205][T20602] netlink_sendmsg+0x7f0/0xb20 [ 480.724245][T20602] ? __pfx_netlink_sendmsg+0x10/0x10 [ 480.724283][T20602] ? aa_sock_msg_perm+0x144/0x210 [ 480.724332][T20602] ? apparmor_socket_sendmsg+0x98/0x360 [ 480.724370][T20602] ? __pfx_netlink_sendmsg+0x10/0x10 [ 480.724401][T20602] sock_sendmsg_nosec+0x14e/0x190 [ 480.724437][T20602] ____sys_sendmsg+0x54e/0x850 [ 480.724476][T20602] ? __pfx_____sys_sendmsg+0x10/0x10 [ 480.724513][T20602] ? import_iovec+0x73/0xa0 [ 480.724546][T20602] ___sys_sendmsg+0x2a5/0x360 [ 480.724569][T20602] ? __lock_acquire+0x747/0x2de0 [ 480.724604][T20602] ? __pfx____sys_sendmsg+0x10/0x10 [ 480.724672][T20602] ? __fget_files+0x3a2/0x420 [ 480.724701][T20602] ? __fget_files+0x2a/0x420 [ 480.724741][T20602] __x64_sys_sendmsg+0x1b1/0x290 [ 480.724770][T20602] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 480.724821][T20602] do_syscall_64+0x166/0x520 [ 480.724847][T20602] ? trace_irq_disable+0x3b/0x140 [ 480.724878][T20602] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.724903][T20602] ? clear_bhb_loop+0x70/0xc0 [ 480.724932][T20602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.724956][T20602] RIP: 0033:0x7ff38239fb19 [ 480.724980][T20602] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 480.725001][T20602] RSP: 002b:00007ff38323e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 480.725026][T20602] RAX: ffffffffffffffda RBX: 00007ff382625fa0 RCX: 00007ff38239fb19 [ 480.725043][T20602] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000004 [ 480.725057][T20602] RBP: 00007ff38323e090 R08: 0000000000000000 R09: 0000000000000000 [ 480.725084][T20602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 480.725099][T20602] R13: 00007ff382626038 R14: 00007ff382625fa0 R15: 00007ffe6d092fc8 [ 480.725138][T20602] [ 480.784547][T20603] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4606'. [ 480.816886][T20599] bond12: entered promiscuous mode [ 480.821674][T20599] 8021q: adding VLAN 0 to HW filter on device bond12 [ 480.831752][T20597] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4605'. [ 480.831819][T20597] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4605'. [ 480.831868][T20597] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4605'. [ 481.229906][T20603] bridge_slave_1: left allmulticast mode [ 481.229941][T20603] bridge_slave_1: left promiscuous mode [ 481.230198][T20603] bridge0: port 2(bridge_slave_1) entered disabled state [ 481.274738][T20603] bridge_slave_0: left allmulticast mode [ 481.276882][T20603] bridge0: port 1(bridge_slave_0) entered disabled state [ 481.364823][T20611] block nbd5: NBD_DISCONNECT [ 481.364858][T20611] block nbd5: Send disconnect failed -32 [ 481.364880][T20611] block nbd5: Send disconnect failed -32 [ 481.364900][T20611] block nbd5: shutting down sockets [ 481.412072][T20612] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4611'. [ 481.471354][T20615] FAULT_INJECTION: forcing a failure. [ 481.471354][T20615] name failslab, interval 1, probability 0, space 0, times 0 [ 481.471391][T20615] CPU: 0 UID: 0 PID: 20615 Comm: syz.0.4608 Not tainted syzkaller #0 PREEMPT(full) [ 481.471419][T20615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 481.471435][T20615] Call Trace: [ 481.471446][T20615] [ 481.471457][T20615] dump_stack_lvl+0xe8/0x150 [ 481.471503][T20615] should_fail_ex+0x3eb/0x540 [ 481.471538][T20615] should_failslab+0xa8/0x100 [ 481.471577][T20615] __kmalloc_noprof+0xf9/0x710 [ 481.471609][T20615] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 481.471639][T20615] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 481.471676][T20615] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 481.471714][T20615] genl_family_rcv_msg_doit+0xda/0x340 [ 481.471752][T20615] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 481.471786][T20615] ? __pfx_genl_get_cmd+0x10/0x10 [ 481.471810][T20615] ? __pfx_nbd_genl_disconnect+0x10/0x10 [ 481.472002][T20615] ? __lock_acquire+0x747/0x2de0 [ 481.472047][T20615] genl_rcv_msg+0x614/0x7a0 [ 481.472084][T20615] ? __pfx_genl_rcv_msg+0x10/0x10 [ 481.472110][T20615] ? __pfx_nbd_genl_disconnect+0x10/0x10 [ 481.472168][T20615] netlink_rcv_skb+0x226/0x4a0 [ 481.472204][T20615] ? __pfx_genl_rcv_msg+0x10/0x10 [ 481.472233][T20615] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 481.472286][T20615] ? down_read+0x2b9/0x320 [ 481.472333][T20615] genl_rcv+0x28/0x40 [ 481.472358][T20615] netlink_unicast+0x8ef/0xa80 [ 481.472410][T20615] netlink_sendmsg+0x7f0/0xb20 [ 481.472452][T20615] ? __pfx_netlink_sendmsg+0x10/0x10 [ 481.472491][T20615] ? aa_sock_msg_perm+0x144/0x210 [ 481.472523][T20615] ? apparmor_socket_sendmsg+0x98/0x360 [ 481.472562][T20615] ? __pfx_netlink_sendmsg+0x10/0x10 [ 481.472596][T20615] sock_sendmsg_nosec+0x14e/0x190 [ 481.472633][T20615] ____sys_sendmsg+0x54e/0x850 [ 481.472667][T20615] ? __pfx_____sys_sendmsg+0x10/0x10 [ 481.472741][T20615] ? import_iovec+0x73/0xa0 [ 481.472778][T20615] ___sys_sendmsg+0x2a5/0x360 [ 481.472802][T20615] ? __lock_acquire+0x747/0x2de0 [ 481.472840][T20615] ? __pfx____sys_sendmsg+0x10/0x10 [ 481.472913][T20615] ? __fget_files+0x3a2/0x420 [ 481.472942][T20615] ? __fget_files+0x2a/0x420 [ 481.472984][T20615] __x64_sys_sendmsg+0x1b1/0x290 [ 481.473013][T20615] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 481.473065][T20615] do_syscall_64+0x166/0x520 [ 481.473091][T20615] ? trace_irq_disable+0x3b/0x140 [ 481.473125][T20615] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.473162][T20615] ? clear_bhb_loop+0x70/0xc0 [ 481.473193][T20615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.473218][T20615] RIP: 0033:0x7ff4fbd9fb19 [ 481.473240][T20615] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 481.473260][T20615] RSP: 002b:00007ff4fcbb3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 481.473286][T20615] RAX: ffffffffffffffda RBX: 00007ff4fc025fa0 RCX: 00007ff4fbd9fb19 [ 481.473304][T20615] RDX: 0000000004000810 RSI: 00002000000005c0 RDI: 0000000000000004 [ 481.473336][T20615] RBP: 00007ff4fcbb3090 R08: 0000000000000000 R09: 0000000000000000 [ 481.473352][T20615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 481.473367][T20615] R13: 00007ff4fc026038 R14: 00007ff4fc025fa0 R15: 00007ffcf31a9368 [ 481.473407][T20615] [ 481.846422][T20599] macvtap1: entered allmulticast mode [ 481.876260][T20605] macvtap2: entered allmulticast mode [ 481.920961][T20606] bond12: (slave bridge0): making interface the new active one [ 481.920994][T20606] bridge0: entered promiscuous mode [ 481.937460][T20606] bond12: (slave bridge0): Enslaving as an active interface with an up link [ 482.192156][T20635] ip_tables: iptables: counters copy to user failed while replacing table [ 482.652792][T20670] FAULT_INJECTION: forcing a failure. [ 482.652792][T20670] name failslab, interval 1, probability 0, space 0, times 0 [ 482.652829][T20670] CPU: 1 UID: 0 PID: 20670 Comm: syz.2.4625 Not tainted syzkaller #0 PREEMPT(full) [ 482.652856][T20670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 482.652871][T20670] Call Trace: [ 482.652881][T20670] [ 482.652891][T20670] dump_stack_lvl+0xe8/0x150 [ 482.652937][T20670] should_fail_ex+0x3eb/0x540 [ 482.652972][T20670] should_failslab+0xa8/0x100 [ 482.653012][T20670] __kmalloc_noprof+0xf9/0x710 [ 482.653039][T20670] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 482.653067][T20670] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 482.653104][T20670] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 482.653141][T20670] genl_family_rcv_msg_doit+0xda/0x340 [ 482.653178][T20670] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 482.653209][T20670] ? __pfx_genl_get_cmd+0x10/0x10 [ 482.653232][T20670] ? __pfx_nbd_genl_disconnect+0x10/0x10 [ 482.653271][T20670] ? __lock_acquire+0x747/0x2de0 [ 482.653314][T20670] genl_rcv_msg+0x614/0x7a0 [ 482.653348][T20670] ? __pfx_genl_rcv_msg+0x10/0x10 [ 482.653373][T20670] ? __pfx_nbd_genl_disconnect+0x10/0x10 [ 482.653427][T20670] netlink_rcv_skb+0x226/0x4a0 [ 482.653461][T20670] ? __pfx_genl_rcv_msg+0x10/0x10 [ 482.653489][T20670] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 482.653541][T20670] ? down_read+0x2b9/0x320 [ 482.653577][T20670] genl_rcv+0x28/0x40 [ 482.653600][T20670] netlink_unicast+0x8ef/0xa80 [ 482.653660][T20670] netlink_sendmsg+0x7f0/0xb20 [ 482.653701][T20670] ? __pfx_netlink_sendmsg+0x10/0x10 [ 482.653740][T20670] ? aa_sock_msg_perm+0x144/0x210 [ 482.653770][T20670] ? apparmor_socket_sendmsg+0x98/0x360 [ 482.653807][T20670] ? __pfx_netlink_sendmsg+0x10/0x10 [ 482.653839][T20670] sock_sendmsg_nosec+0x14e/0x190 [ 482.653875][T20670] ____sys_sendmsg+0x54e/0x850 [ 482.653908][T20670] ? __pfx_____sys_sendmsg+0x10/0x10 [ 482.653946][T20670] ? import_iovec+0x73/0xa0 [ 482.653980][T20670] ___sys_sendmsg+0x2a5/0x360 [ 482.654003][T20670] ? __lock_acquire+0x747/0x2de0 [ 482.654039][T20670] ? __pfx____sys_sendmsg+0x10/0x10 [ 482.654110][T20670] ? __fget_files+0x3a2/0x420 [ 482.654136][T20670] ? __fget_files+0x2a/0x420 [ 482.654177][T20670] __x64_sys_sendmsg+0x1b1/0x290 [ 482.654206][T20670] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 482.654259][T20670] do_syscall_64+0x166/0x520 [ 482.654285][T20670] ? trace_irq_disable+0x3b/0x140 [ 482.654318][T20670] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.654342][T20670] ? clear_bhb_loop+0x70/0xc0 [ 482.654372][T20670] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.654396][T20670] RIP: 0033:0x7fe2a5b9fb19 [ 482.654418][T20670] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 482.654439][T20670] RSP: 002b:00007fe2a6a94028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 482.654465][T20670] RAX: ffffffffffffffda RBX: 00007fe2a5e25fa0 RCX: 00007fe2a5b9fb19 [ 482.654482][T20670] RDX: 0000000004000810 RSI: 00002000000005c0 RDI: 0000000000000004 [ 482.654499][T20670] RBP: 00007fe2a6a94090 R08: 0000000000000000 R09: 0000000000000000 [ 482.654514][T20670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 482.654528][T20670] R13: 00007fe2a5e26038 R14: 00007fe2a5e25fa0 R15: 00007ffdcd7ebbf8 [ 482.654568][T20670] [ 483.715919][T20695] erspan0: entered promiscuous mode [ 483.905309][T20704] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 484.028835][T20706] veth5: entered allmulticast mode [ 484.125867][T20712] block nbd4: NBD_DISCONNECT [ 484.125900][T20712] block nbd4: Send disconnect failed -32 [ 484.125920][T20712] block nbd4: shutting down sockets [ 484.140015][T20712] FAULT_INJECTION: forcing a failure. [ 484.140015][T20712] name failslab, interval 1, probability 0, space 0, times 0 [ 484.140129][T20712] CPU: 0 UID: 0 PID: 20712 Comm: syz.4.4637 Not tainted syzkaller #0 PREEMPT(full) [ 484.140213][T20712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 484.140255][T20712] Call Trace: [ 484.140277][T20712] [ 484.140300][T20712] dump_stack_lvl+0xe8/0x150 [ 484.140410][T20712] should_fail_ex+0x3eb/0x540 [ 484.140498][T20712] ? __pfx_dev_uevent_name+0x10/0x10 [ 484.140752][T20712] should_failslab+0xa8/0x100 [ 484.140849][T20712] __kmalloc_cache_noprof+0x9e/0x600 [ 484.140952][T20712] ? kobject_uevent_env+0x289/0x9e0 [ 484.141117][T20712] ? kobject_uevent_env+0x289/0x9e0 [ 484.141270][T20712] ? __pfx_dev_uevent_name+0x10/0x10 [ 484.141351][T20712] kobject_uevent_env+0x289/0x9e0 [ 484.141470][T20712] nbd_config_put+0x2c8/0x7e0 [ 484.141546][T20712] ? nbd_disconnect_and_put+0x18b/0x280 [ 484.141629][T20712] ? __pfx_nbd_config_put+0x10/0x10 [ 484.141757][T20712] ? blk_mq_run_hw_queues+0x34a/0x3f0 [ 484.141926][T20712] ? nbd_disconnect_and_put+0x1d1/0x280 [ 484.141996][T20712] nbd_genl_disconnect+0x4b7/0x590 [ 484.142106][T20712] ? __pfx_nbd_genl_disconnect+0x10/0x10 [ 484.142204][T20712] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 484.142302][T20712] genl_family_rcv_msg_doit+0x233/0x340 [ 484.142398][T20712] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 484.142497][T20712] ? __lock_acquire+0x747/0x2de0 [ 484.142598][T20712] genl_rcv_msg+0x614/0x7a0 [ 484.142726][T20712] ? __pfx_genl_rcv_msg+0x10/0x10 [ 484.142792][T20712] ? __pfx_nbd_genl_disconnect+0x10/0x10 [ 484.142948][T20712] netlink_rcv_skb+0x226/0x4a0 [ 484.143035][T20712] ? __pfx_genl_rcv_msg+0x10/0x10 [ 484.143119][T20712] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 484.143258][T20712] ? down_read+0x2b9/0x320 [ 484.143345][T20712] genl_rcv+0x28/0x40 [ 484.143407][T20712] netlink_unicast+0x8ef/0xa80 [ 484.143534][T20712] netlink_sendmsg+0x7f0/0xb20 [ 484.143635][T20712] ? __pfx_netlink_sendmsg+0x10/0x10 [ 484.143769][T20712] ? aa_sock_msg_perm+0x144/0x210 [ 484.143836][T20712] ? apparmor_socket_sendmsg+0x98/0x360 [ 484.143868][T20712] ? __pfx_netlink_sendmsg+0x10/0x10 [ 484.143899][T20712] sock_sendmsg_nosec+0x14e/0x190 [ 484.143934][T20712] ____sys_sendmsg+0x54e/0x850 [ 484.144033][T20712] ? __pfx_____sys_sendmsg+0x10/0x10 [ 484.144141][T20712] ? import_iovec+0x73/0xa0 [ 484.144229][T20712] ___sys_sendmsg+0x2a5/0x360 [ 484.144287][T20712] ? __lock_acquire+0x747/0x2de0 [ 484.144383][T20712] ? __pfx____sys_sendmsg+0x10/0x10 [ 484.144552][T20712] ? __fget_files+0x3a2/0x420 [ 484.144620][T20712] ? __fget_files+0x2a/0x420 [ 484.144719][T20712] __x64_sys_sendmsg+0x1b1/0x290 [ 484.144794][T20712] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 484.144928][T20712] do_syscall_64+0x166/0x520 [ 484.145001][T20712] ? trace_irq_disable+0x3b/0x140 [ 484.145098][T20712] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.145164][T20712] ? clear_bhb_loop+0x70/0xc0 [ 484.145239][T20712] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.145304][T20712] RIP: 0033:0x7ff38239fb19 [ 484.145368][T20712] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 484.145423][T20712] RSP: 002b:00007ff38323e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 484.145496][T20712] RAX: ffffffffffffffda RBX: 00007ff382625fa0 RCX: 00007ff38239fb19 [ 484.145547][T20712] RDX: 0000000004000810 RSI: 00002000000005c0 RDI: 0000000000000004 [ 484.145583][T20712] RBP: 00007ff38323e090 R08: 0000000000000000 R09: 0000000000000000 [ 484.145625][T20712] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 484.145659][T20712] R13: 00007ff382626038 R14: 00007ff382625fa0 R15: 00007ffe6d092fc8 [ 484.145757][T20712] [ 484.578451][T20719] __nla_validate_parse: 6 callbacks suppressed [ 484.578473][T20719] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4638'. [ 484.628540][T20720] xt_hashlimit: size too large, truncated to 1048576 [ 484.874683][T20735] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4641'. [ 485.205602][T20748] netlink: set zone limit has 4 unknown bytes [ 485.339435][T20754] netlink: 'syz.3.4650': attribute type 1 has an invalid length. [ 485.368244][T20755] netlink: 76 bytes leftover after parsing attributes in process `syz.4.4649'. [ 485.472528][T20757] netlink: 'syz.3.4650': attribute type 1 has an invalid length. [ 485.766986][T20781] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4657'. [ 485.807103][T20784] openvswitch: netlink: IP tunnel dst address not specified [ 485.811821][T20784] ip_tables: iptables: counters copy to user failed while replacing table [ 485.828429][T20783] tls_set_device_offload_rx: netdev not found [ 485.845917][T20784] ip_tables: iptables: counters copy to user failed while replacing table [ 486.056663][T20801] netlink: 56 bytes leftover after parsing attributes in process `syz.5.4663'. [ 486.075722][T20798] netlink: 'syz.5.4663': attribute type 2 has an invalid length. [ 486.099543][T20802] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4662'. [ 486.131598][T20802] bridge13: entered promiscuous mode [ 486.131626][T20802] bridge13: entered allmulticast mode [ 486.162858][T20802] team0: Port device bridge13 added [ 486.368906][T20810] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4666'. [ 486.368959][T20810] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4666'. [ 486.560842][T20817] syzkaller0: entered promiscuous mode [ 486.560873][T20817] syzkaller0: entered allmulticast mode [ 486.650966][T20828] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4670'. [ 486.688790][T20831] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4672'. [ 487.173678][T20853] netlink: 'syz.5.4679': attribute type 1 has an invalid length. [ 487.181190][T20851] nbd: must specify an index to disconnect [ 487.309675][T20853] bond8: entered promiscuous mode [ 487.310713][T20853] 8021q: adding VLAN 0 to HW filter on device bond8 [ 487.550527][T20870] ip6_tunnel: non-ECT from fe88:a43d:e1a4:0000:0000:0000:0002:7d01 with DS=0x1 [ 487.942278][T20890] netlink: 'syz.5.4690': attribute type 1 has an invalid length. [ 488.072088][T20893] bond13 (unregistering): Released all slaves [ 488.080563][T20904] netlink: 'syz.4.4692': attribute type 5 has an invalid length. [ 488.160976][T20904] geneve4: entered promiscuous mode [ 488.161003][T20904] geneve4: entered allmulticast mode [ 488.237030][T20903] bond13 (unregistering): Released all slaves [ 488.271720][T20906] bond3: (slave team0): Releasing backup interface [ 488.287397][T20906] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 488.288233][T20909] tipc: Enabled bearer , priority 0 [ 488.297094][ T1155] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 488.297234][ T1155] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 488.297319][ T1155] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 488.310562][ T1155] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 488.593637][T20926] FAULT_INJECTION: forcing a failure. [ 488.593637][T20926] name failslab, interval 1, probability 0, space 0, times 0 [ 488.593674][T20926] CPU: 1 UID: 0 PID: 20926 Comm: syz.4.4699 Not tainted syzkaller #0 PREEMPT(full) [ 488.593701][T20926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 488.593716][T20926] Call Trace: [ 488.593726][T20926] [ 488.593736][T20926] dump_stack_lvl+0xe8/0x150 [ 488.593779][T20926] should_fail_ex+0x3eb/0x540 [ 488.593815][T20926] should_failslab+0xa8/0x100 [ 488.593852][T20926] __kmalloc_cache_noprof+0x9e/0x600 [ 488.593883][T20926] ? alloc_netdev_mqs+0xc4a/0x1240 [ 488.594010][T20926] ? alloc_netdev_mqs+0xc4a/0x1240 [ 488.594041][T20926] ? __xdp_rxq_info_reg+0x171/0x280 [ 488.594134][T20926] alloc_netdev_mqs+0xc4a/0x1240 [ 488.594174][T20926] rtnl_create_link+0x321/0xd70 [ 488.594233][T20926] rtnl_newlink_create+0x258/0x7b0 [ 488.594270][T20926] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 488.594302][T20926] ? __pfx___mutex_lock+0x10/0x10 [ 488.594344][T20926] ? ns_capable+0x84/0xe0 [ 488.594389][T20926] rtnl_newlink+0x167a/0x1c30 [ 488.594433][T20926] ? __pfx_rtnl_newlink+0x10/0x10 [ 488.594455][T20926] ? __lock_acquire+0x747/0x2de0 [ 488.594498][T20926] ? __lock_acquire+0x747/0x2de0 [ 488.594537][T20926] ? __lock_acquire+0x747/0x2de0 [ 488.594586][T20926] ? lock_acquire+0x115/0x350 [ 488.594624][T20926] ? lock_acquire+0x115/0x350 [ 488.594667][T20926] ? __lock_acquire+0x747/0x2de0 [ 488.594700][T20926] ? is_bpf_text_address+0x292/0x2b0 [ 488.594728][T20926] ? __pfx_hook_capable+0x10/0x10 [ 488.594754][T20926] ? kernel_text_address+0xa5/0xe0 [ 488.594786][T20926] ? __pfx_hook_capable+0x10/0x10 [ 488.594807][T20926] ? unwind_get_return_address+0x4d/0x90 [ 488.594870][T20926] ? __pfx_rtnl_newlink+0x10/0x10 [ 488.594892][T20926] rtnetlink_rcv_msg+0x802/0xc00 [ 488.594939][T20926] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 488.594962][T20926] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 488.594987][T20926] ? __lock_acquire+0x747/0x2de0 [ 488.595030][T20926] netlink_rcv_skb+0x226/0x4a0 [ 488.595065][T20926] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 488.595091][T20926] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 488.595139][T20926] ? netlink_deliver_tap+0x2e/0x1b0 [ 488.595171][T20926] ? netlink_deliver_tap+0x2e/0x1b0 [ 488.595211][T20926] netlink_unicast+0x8ef/0xa80 [ 488.595262][T20926] netlink_sendmsg+0x7f0/0xb20 [ 488.595302][T20926] ? __pfx_netlink_sendmsg+0x10/0x10 [ 488.595341][T20926] ? aa_sock_msg_perm+0x144/0x210 [ 488.595369][T20926] ? apparmor_socket_sendmsg+0x18b/0x360 [ 488.595405][T20926] ? __pfx_netlink_sendmsg+0x10/0x10 [ 488.595438][T20926] sock_sendmsg_nosec+0x14e/0x190 [ 488.595473][T20926] ____sys_sendmsg+0x54e/0x850 [ 488.595503][T20926] ? __pfx_____sys_sendmsg+0x10/0x10 [ 488.595537][T20926] ? import_iovec+0x73/0xa0 [ 488.595569][T20926] ___sys_sendmsg+0x2a5/0x360 [ 488.595590][T20926] ? __lock_acquire+0x747/0x2de0 [ 488.595623][T20926] ? __pfx____sys_sendmsg+0x10/0x10 [ 488.595692][T20926] ? __fget_files+0x3a2/0x420 [ 488.595720][T20926] ? __fget_files+0x2a/0x420 [ 488.595759][T20926] __x64_sys_sendmsg+0x1b1/0x290 [ 488.595789][T20926] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 488.595839][T20926] do_syscall_64+0x166/0x520 [ 488.595864][T20926] ? trace_irq_disable+0x3b/0x140 [ 488.595896][T20926] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.595929][T20926] ? clear_bhb_loop+0x70/0xc0 [ 488.595960][T20926] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.595983][T20926] RIP: 0033:0x7ff38239fb19 [ 488.596006][T20926] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 488.596027][T20926] RSP: 002b:00007ff38323e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 488.596052][T20926] RAX: ffffffffffffffda RBX: 00007ff382625fa0 RCX: 00007ff38239fb19 [ 488.596070][T20926] RDX: 0000000020040000 RSI: 0000200000000000 RDI: 0000000000000004 [ 488.596086][T20926] RBP: 00007ff38323e090 R08: 0000000000000000 R09: 0000000000000000 [ 488.596101][T20926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 488.596115][T20926] R13: 00007ff382626038 R14: 00007ff382625fa0 R15: 00007ffe6d092fc8 [ 488.596156][T20926] [ 489.241304][T20941] netlink: 'syz.4.4706': attribute type 10 has an invalid length. [ 489.691934][T20963] __nla_validate_parse: 19 callbacks suppressed [ 489.691961][T20963] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4713'. [ 489.691979][T20963] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4713'. [ 489.731451][T20963] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4713'. [ 489.731478][T20963] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4713'. [ 489.955767][T20973] netlink: 'syz.4.4716': attribute type 2 has an invalid length. [ 489.955795][T20973] netlink: 'syz.4.4716': attribute type 11 has an invalid length. [ 489.955811][T20973] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4716'. [ 490.088288][T20985] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4720'. [ 490.121049][T20990] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4721'. [ 490.143384][T20990] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4721'. [ 490.143463][T20990] netlink: 11 bytes leftover after parsing attributes in process `syz.3.4721'. [ 490.218833][T20993] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4723'. [ 490.484761][T21007] veth0: entered promiscuous mode [ 490.492475][T21006] veth0: left promiscuous mode [ 491.102569][T21038] ip_tables: iptables: counters copy to user failed while replacing table [ 491.556214][T21059] xt_MASQUERADE: bad MAP_IPS. [ 492.195717][T21085] syzkaller0: left promiscuous mode [ 492.195743][T21085] syzkaller0: left allmulticast mode [ 492.240548][T21094] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 492.328861][T21092] netlink: 'syz.0.4753': attribute type 1 has an invalid length. [ 492.427615][T21092] bond8: entered promiscuous mode [ 492.428199][T21092] 8021q: adding VLAN 0 to HW filter on device bond8 [ 492.560568][T21092] 8021q: adding VLAN 0 to HW filter on device bond8 [ 492.561187][T21092] bond8: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 492.561213][T21092] bond8: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 492.601163][T21092] bond8: (slave ip6gre1): making interface the new active one [ 492.601193][T21092] ip6gre1: entered promiscuous mode [ 492.619862][T21092] bond8: (slave ip6gre1): Enslaving as an active interface with an up link [ 492.624542][T21106] FAULT_INJECTION: forcing a failure. [ 492.624542][T21106] name failslab, interval 1, probability 0, space 0, times 0 [ 492.624626][T21106] CPU: 0 UID: 0 PID: 21106 Comm: syz.5.4755 Not tainted syzkaller #0 PREEMPT(full) [ 492.624697][T21106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 492.624738][T21106] Call Trace: [ 492.624768][T21106] [ 492.624792][T21106] dump_stack_lvl+0xe8/0x150 [ 492.624933][T21106] should_fail_ex+0x3eb/0x540 [ 492.625027][T21106] should_failslab+0xa8/0x100 [ 492.625123][T21106] __kmalloc_cache_noprof+0x9e/0x600 [ 492.625203][T21106] ? alloc_netdev_mqs+0xc4a/0x1240 [ 492.625287][T21106] ? alloc_netdev_mqs+0xc4a/0x1240 [ 492.625365][T21106] ? __xdp_rxq_info_reg+0x171/0x280 [ 492.625452][T21106] alloc_netdev_mqs+0xc4a/0x1240 [ 492.625548][T21106] rtnl_create_link+0x321/0xd70 [ 492.625650][T21106] rtnl_newlink_create+0x258/0x7b0 [ 492.625737][T21106] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 492.625865][T21106] ? __pfx___mutex_lock+0x10/0x10 [ 492.625990][T21106] ? ns_capable+0x84/0xe0 [ 492.626080][T21106] rtnl_newlink+0x167a/0x1c30 [ 492.626226][T21106] ? __pfx_rtnl_newlink+0x10/0x10 [ 492.626281][T21106] ? __netlink_deliver_tap+0x4f1/0x6e0 [ 492.626381][T21106] ? netlink_deliver_tap+0x19c/0x1b0 [ 492.626464][T21106] ? netlink_unicast+0x8c1/0xa80 [ 492.626529][T21106] ? netlink_sendmsg+0x7f0/0xb20 [ 492.626613][T21106] ? sock_sendmsg_nosec+0x14e/0x190 [ 492.626692][T21106] ? ____sys_sendmsg+0x54e/0x850 [ 492.626747][T21106] ? ___sys_sendmsg+0x2a5/0x360 [ 492.626808][T21106] ? __x64_sys_sendmsg+0x1b1/0x290 [ 492.626866][T21106] ? do_syscall_64+0x166/0x520 [ 492.626930][T21106] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.627099][T21106] ? kasan_quarantine_put+0xbb/0x1f0 [ 492.627183][T21106] ? lockdep_hardirqs_on+0x7b/0x110 [ 492.627258][T21106] ? nlmon_xmit+0xb0/0x100 [ 492.627481][T21106] ? kmem_cache_free+0x182/0x650 [ 492.627581][T21106] ? __lock_acquire+0x747/0x2de0 [ 492.627670][T21106] ? __pfx_hook_capable+0x10/0x10 [ 492.627736][T21106] ? __dev_queue_xmit+0x29b/0x3920 [ 492.627870][T21106] ? __pfx_hook_capable+0x10/0x10 [ 492.627934][T21106] ? lockdep_hardirqs_on+0x7b/0x110 [ 492.628084][T21106] ? __pfx_rtnl_newlink+0x10/0x10 [ 492.628148][T21106] rtnetlink_rcv_msg+0x802/0xc00 [ 492.628223][T21106] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 492.628280][T21106] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 492.628352][T21106] ? __copy_skb_header+0xa3/0x4a0 [ 492.628452][T21106] netlink_rcv_skb+0x226/0x4a0 [ 492.628536][T21106] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 492.628606][T21106] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 492.628719][T21106] ? netlink_deliver_tap+0x2e/0x1b0 [ 492.628801][T21106] ? netlink_deliver_tap+0x2e/0x1b0 [ 492.628903][T21106] netlink_unicast+0x8ef/0xa80 [ 492.629030][T21106] netlink_sendmsg+0x7f0/0xb20 [ 492.629135][T21106] ? __pfx_netlink_sendmsg+0x10/0x10 [ 492.629243][T21106] ? aa_sock_msg_perm+0x144/0x210 [ 492.629333][T21106] ? apparmor_socket_sendmsg+0x18b/0x360 [ 492.629434][T21106] ? __pfx_netlink_sendmsg+0x10/0x10 [ 492.629510][T21106] sock_sendmsg_nosec+0x14e/0x190 [ 492.629602][T21106] ____sys_sendmsg+0x54e/0x850 [ 492.629675][T21106] ? __pfx_____sys_sendmsg+0x10/0x10 [ 492.629769][T21106] ? import_iovec+0x73/0xa0 [ 492.629853][T21106] ___sys_sendmsg+0x2a5/0x360 [ 492.629908][T21106] ? __lock_acquire+0x747/0x2de0 [ 492.629993][T21106] ? __pfx____sys_sendmsg+0x10/0x10 [ 492.630188][T21106] ? __fget_files+0x3a2/0x420 [ 492.630262][T21106] ? __fget_files+0x2a/0x420 [ 492.630360][T21106] __x64_sys_sendmsg+0x1b1/0x290 [ 492.630435][T21106] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 492.630583][T21106] do_syscall_64+0x166/0x520 [ 492.630648][T21106] ? trace_irq_disable+0x3b/0x140 [ 492.630751][T21106] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.630806][T21106] ? clear_bhb_loop+0x70/0xc0 [ 492.630879][T21106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.630936][T21106] RIP: 0033:0x7f0a9d39fb19 [ 492.630998][T21106] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 492.631044][T21106] RSP: 002b:00007f0a9e2d9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 492.631110][T21106] RAX: ffffffffffffffda RBX: 00007f0a9d625fa0 RCX: 00007f0a9d39fb19 [ 492.631156][T21106] RDX: 0000000020040000 RSI: 0000200000000000 RDI: 0000000000000004 [ 492.631192][T21106] RBP: 00007f0a9e2d9090 R08: 0000000000000000 R09: 0000000000000000 [ 492.631232][T21106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 492.631268][T21106] R13: 00007f0a9d626038 R14: 00007f0a9d625fa0 R15: 00007ffd6185d038 [ 492.631366][T21106] [ 493.139964][T21114] FAULT_INJECTION: forcing a failure. [ 493.139964][T21114] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 493.140000][T21114] CPU: 1 UID: 0 PID: 21114 Comm: syz.3.4758 Not tainted syzkaller #0 PREEMPT(full) [ 493.140026][T21114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 493.140040][T21114] Call Trace: [ 493.140049][T21114] [ 493.140058][T21114] dump_stack_lvl+0xe8/0x150 [ 493.140101][T21114] should_fail_ex+0x3eb/0x540 [ 493.140135][T21114] _copy_from_user+0x2d/0xb0 [ 493.140165][T21114] ___sys_sendmsg+0x1c6/0x360 [ 493.140189][T21114] ? __lock_acquire+0x747/0x2de0 [ 493.140223][T21114] ? __pfx____sys_sendmsg+0x10/0x10 [ 493.140289][T21114] ? __fget_files+0x3a2/0x420 [ 493.140318][T21114] ? __fget_files+0x2a/0x420 [ 493.140358][T21114] __x64_sys_sendmsg+0x1b1/0x290 [ 493.140388][T21114] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 493.140445][T21114] do_syscall_64+0x166/0x520 [ 493.140472][T21114] ? trace_irq_disable+0x3b/0x140 [ 493.140504][T21114] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.140528][T21114] ? clear_bhb_loop+0x70/0xc0 [ 493.140557][T21114] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.140581][T21114] RIP: 0033:0x7f56ac19fb19 [ 493.140602][T21114] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 493.140623][T21114] RSP: 002b:00007f56ad011028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 493.140649][T21114] RAX: ffffffffffffffda RBX: 00007f56ac425fa0 RCX: 00007f56ac19fb19 [ 493.140667][T21114] RDX: 0000000000004000 RSI: 0000200000000040 RDI: 0000000000000003 [ 493.140683][T21114] RBP: 00007f56ad011090 R08: 0000000000000000 R09: 0000000000000000 [ 493.140699][T21114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 493.140713][T21114] R13: 00007f56ac426038 R14: 00007f56ac425fa0 R15: 00007fffe589bd08 [ 493.140751][T21114] [ 493.511330][T21126] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 493.631367][T21131] syz1: rxe_newlink: already configured on syz_tun [ 493.704190][T21136] FAULT_INJECTION: forcing a failure. [ 493.704190][T21136] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 493.704225][T21136] CPU: 1 UID: 0 PID: 21136 Comm: syz.5.4766 Not tainted syzkaller #0 PREEMPT(full) [ 493.704252][T21136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 493.704266][T21136] Call Trace: [ 493.704276][T21136] [ 493.704286][T21136] dump_stack_lvl+0xe8/0x150 [ 493.704329][T21136] should_fail_ex+0x3eb/0x540 [ 493.704364][T21136] _copy_from_user+0x2d/0xb0 [ 493.704406][T21136] ___sys_sendmsg+0x1c6/0x360 [ 493.704430][T21136] ? __lock_acquire+0x747/0x2de0 [ 493.704466][T21136] ? __pfx____sys_sendmsg+0x10/0x10 [ 493.704532][T21136] ? __fget_files+0x3a2/0x420 [ 493.704561][T21136] ? __fget_files+0x2a/0x420 [ 493.704600][T21136] __x64_sys_sendmsg+0x1b1/0x290 [ 493.704628][T21136] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 493.704694][T21136] do_syscall_64+0x166/0x520 [ 493.704722][T21136] ? trace_irq_disable+0x3b/0x140 [ 493.704755][T21136] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.704780][T21136] ? clear_bhb_loop+0x70/0xc0 [ 493.704810][T21136] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.704834][T21136] RIP: 0033:0x7f0a9d39fb19 [ 493.704858][T21136] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 493.704878][T21136] RSP: 002b:00007f0a9e2d9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 493.704904][T21136] RAX: ffffffffffffffda RBX: 00007f0a9d625fa0 RCX: 00007f0a9d39fb19 [ 493.704925][T21136] RDX: 0000000000000000 RSI: 0000200000001bc0 RDI: 0000000000000003 [ 493.704942][T21136] RBP: 00007f0a9e2d9090 R08: 0000000000000000 R09: 0000000000000000 [ 493.704957][T21136] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 493.704972][T21136] R13: 00007f0a9d626038 R14: 00007f0a9d625fa0 R15: 00007ffd6185d038 [ 493.705010][T21136] [ 494.122374][T21147] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 494.145362][T21154] FAULT_INJECTION: forcing a failure. [ 494.145362][T21154] name failslab, interval 1, probability 0, space 0, times 0 [ 494.145399][T21154] CPU: 0 UID: 0 PID: 21154 Comm: syz.0.4772 Not tainted syzkaller #0 PREEMPT(full) [ 494.145426][T21154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 494.145441][T21154] Call Trace: [ 494.145451][T21154] [ 494.145461][T21154] dump_stack_lvl+0xe8/0x150 [ 494.145505][T21154] should_fail_ex+0x3eb/0x540 [ 494.145538][T21154] ? __alloc_skb+0x1db/0x7a0 [ 494.145574][T21154] should_failslab+0xa8/0x100 [ 494.145611][T21154] ? __alloc_skb+0x1db/0x7a0 [ 494.145643][T21154] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 494.145672][T21154] ? __alloc_skb+0x18d/0x7a0 [ 494.145707][T21154] ? __alloc_skb+0x1db/0x7a0 [ 494.145751][T21154] __alloc_skb+0x1db/0x7a0 [ 494.145792][T21154] netlink_sendmsg+0x5cd/0xb20 [ 494.145833][T21154] ? __pfx_netlink_sendmsg+0x10/0x10 [ 494.145870][T21154] ? aa_sock_msg_perm+0x144/0x210 [ 494.145899][T21154] ? apparmor_socket_sendmsg+0x98/0x360 [ 494.145936][T21154] ? __pfx_netlink_sendmsg+0x10/0x10 [ 494.145969][T21154] sock_sendmsg_nosec+0x14e/0x190 [ 494.146003][T21154] ____sys_sendmsg+0x54e/0x850 [ 494.146034][T21154] ? __pfx_____sys_sendmsg+0x10/0x10 [ 494.146071][T21154] ? import_iovec+0x73/0xa0 [ 494.146104][T21154] ___sys_sendmsg+0x2a5/0x360 [ 494.146127][T21154] ? __lock_acquire+0x747/0x2de0 [ 494.146164][T21154] ? __pfx____sys_sendmsg+0x10/0x10 [ 494.146235][T21154] ? __fget_files+0x3a2/0x420 [ 494.146263][T21154] ? __fget_files+0x2a/0x420 [ 494.146303][T21154] __x64_sys_sendmsg+0x1b1/0x290 [ 494.146333][T21154] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 494.146390][T21154] do_syscall_64+0x166/0x520 [ 494.146417][T21154] ? trace_irq_disable+0x3b/0x140 [ 494.146450][T21154] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.146476][T21154] ? clear_bhb_loop+0x70/0xc0 [ 494.146505][T21154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.146529][T21154] RIP: 0033:0x7ff4fbd9fb19 [ 494.146551][T21154] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 494.146572][T21154] RSP: 002b:00007ff4fcbb3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 494.146598][T21154] RAX: ffffffffffffffda RBX: 00007ff4fc025fa0 RCX: 00007ff4fbd9fb19 [ 494.146616][T21154] RDX: 0000000000004000 RSI: 0000200000000040 RDI: 0000000000000003 [ 494.146632][T21154] RBP: 00007ff4fcbb3090 R08: 0000000000000000 R09: 0000000000000000 [ 494.146647][T21154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 494.146662][T21154] R13: 00007ff4fc026038 R14: 00007ff4fc025fa0 R15: 00007ffcf31a9368 [ 494.146701][T21154] [ 494.443462][T21156] unsupported nlmsg_type 40 [ 494.732002][T21170] FAULT_INJECTION: forcing a failure. [ 494.732002][T21170] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 494.732040][T21170] CPU: 1 UID: 0 PID: 21170 Comm: syz.4.4779 Not tainted syzkaller #0 PREEMPT(full) [ 494.732067][T21170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 494.732082][T21170] Call Trace: [ 494.732091][T21170] [ 494.732119][T21170] dump_stack_lvl+0xe8/0x150 [ 494.732162][T21170] should_fail_ex+0x3eb/0x540 [ 494.732197][T21170] _copy_from_user+0x2d/0xb0 [ 494.732227][T21170] ___sys_sendmsg+0x1c6/0x360 [ 494.732249][T21170] ? __lock_acquire+0x747/0x2de0 [ 494.732283][T21170] ? __pfx____sys_sendmsg+0x10/0x10 [ 494.732345][T21170] ? __fget_files+0x3a2/0x420 [ 494.732372][T21170] ? __fget_files+0x2a/0x420 [ 494.732411][T21170] __x64_sys_sendmsg+0x1b1/0x290 [ 494.732439][T21170] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 494.732488][T21170] do_syscall_64+0x166/0x520 [ 494.732514][T21170] ? trace_irq_disable+0x3b/0x140 [ 494.732545][T21170] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.732567][T21170] ? clear_bhb_loop+0x70/0xc0 [ 494.732596][T21170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.732619][T21170] RIP: 0033:0x7ff38239fb19 [ 494.732641][T21170] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 494.732661][T21170] RSP: 002b:00007ff38323e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 494.732685][T21170] RAX: ffffffffffffffda RBX: 00007ff382625fa0 RCX: 00007ff38239fb19 [ 494.732703][T21170] RDX: 0000000000040000 RSI: 0000200000000700 RDI: 0000000000000003 [ 494.732717][T21170] RBP: 00007ff38323e090 R08: 0000000000000000 R09: 0000000000000000 [ 494.732732][T21170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 494.732746][T21170] R13: 00007ff382626038 R14: 00007ff382625fa0 R15: 00007ffe6d092fc8 [ 494.732781][T21170] [ 495.229553][T21184] __nla_validate_parse: 16 callbacks suppressed [ 495.229579][T21184] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4782'. [ 495.352787][T21190] tipc: Enabling of bearer rejected, failed to enable media [ 495.388125][T21193] rdma_rxe: rxe_newlink: failed to add syz_tun [ 495.496972][T21197] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4785'. [ 495.567764][T21197] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4785'. [ 495.822440][T21216] FAULT_INJECTION: forcing a failure. [ 495.822440][T21216] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 495.822476][T21216] CPU: 1 UID: 0 PID: 21216 Comm: syz.2.4791 Not tainted syzkaller #0 PREEMPT(full) [ 495.822503][T21216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 495.822518][T21216] Call Trace: [ 495.822527][T21216] [ 495.822537][T21216] dump_stack_lvl+0xe8/0x150 [ 495.822580][T21216] should_fail_ex+0x3eb/0x540 [ 495.822614][T21216] _copy_from_iter+0x1d3/0x1680 [ 495.822642][T21216] ? __alloc_skb+0x27a/0x7a0 [ 495.822679][T21216] ? __alloc_skb+0x27a/0x7a0 [ 495.822716][T21216] ? __alloc_skb+0x27a/0x7a0 [ 495.822749][T21216] ? __pfx__copy_from_iter+0x10/0x10 [ 495.822783][T21216] ? kmem_cache_alloc_node_noprof+0x1f4/0x600 [ 495.822808][T21216] ? __alloc_skb+0x27a/0x7a0 [ 495.822841][T21216] ? __alloc_skb+0x27a/0x7a0 [ 495.822882][T21216] ? netlink_sendmsg+0x64f/0xb20 [ 495.822915][T21216] ? skb_put+0x112/0x210 [ 495.822942][T21216] netlink_sendmsg+0x6bb/0xb20 [ 495.822982][T21216] ? __pfx_netlink_sendmsg+0x10/0x10 [ 495.823018][T21216] ? aa_sock_msg_perm+0x144/0x210 [ 495.823045][T21216] ? apparmor_socket_sendmsg+0x98/0x360 [ 495.823079][T21216] ? __pfx_netlink_sendmsg+0x10/0x10 [ 495.823110][T21216] sock_sendmsg_nosec+0x14e/0x190 [ 495.823144][T21216] ____sys_sendmsg+0x54e/0x850 [ 495.823174][T21216] ? __pfx_____sys_sendmsg+0x10/0x10 [ 495.823209][T21216] ? import_iovec+0x73/0xa0 [ 495.823241][T21216] ___sys_sendmsg+0x2a5/0x360 [ 495.823263][T21216] ? __lock_acquire+0x747/0x2de0 [ 495.823297][T21216] ? __pfx____sys_sendmsg+0x10/0x10 [ 495.823364][T21216] ? __fget_files+0x3a2/0x420 [ 495.823391][T21216] ? __fget_files+0x2a/0x420 [ 495.823430][T21216] __x64_sys_sendmsg+0x1b1/0x290 [ 495.823459][T21216] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 495.823507][T21216] do_syscall_64+0x166/0x520 [ 495.823532][T21216] ? trace_irq_disable+0x3b/0x140 [ 495.823564][T21216] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.823587][T21216] ? clear_bhb_loop+0x70/0xc0 [ 495.823617][T21216] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.823640][T21216] RIP: 0033:0x7fe2a5b9fb19 [ 495.823662][T21216] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 495.823681][T21216] RSP: 002b:00007fe2a6a94028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 495.823706][T21216] RAX: ffffffffffffffda RBX: 00007fe2a5e25fa0 RCX: 00007fe2a5b9fb19 [ 495.823722][T21216] RDX: 0000000000000000 RSI: 0000200000001bc0 RDI: 0000000000000003 [ 495.823736][T21216] RBP: 00007fe2a6a94090 R08: 0000000000000000 R09: 0000000000000000 [ 495.823750][T21216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 495.823771][T21216] R13: 00007fe2a5e26038 R14: 00007fe2a5e25fa0 R15: 00007ffdcd7ebbf8 [ 495.823811][T21216] [ 496.012760][T21217] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4790'. [ 496.012850][T21217] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4790'. [ 496.116189][T21218] netlink: 'syz.5.4790': attribute type 4 has an invalid length. [ 496.116215][T21218] netlink: 152 bytes leftover after parsing attributes in process `syz.5.4790'. [ 496.190085][T21215] 8021q: adding VLAN 0 to HW filter on device bond10 [ 496.218045][T21218] .`: renamed from bond0 [ 496.356075][T21227] SET target dimension over the limit! [ 496.362320][T21227] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4794'. [ 497.294443][T21255] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4803'. [ 497.327841][T21274] netlink: 112 bytes leftover after parsing attributes in process `syz.5.4806'. [ 497.622724][T21288] ipt_REJECT: ECHOREPLY no longer supported. [ 499.074165][ T1703] block nbd12: Possible stuck request ffff8880293ae000: control (read@0,4096B). Runtime 150 seconds [ 500.687933][T21285] netlink: 'syz.2.4809': attribute type 2 has an invalid length. [ 500.688061][T21297] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 501.363565][ T5636] block nbd4: Receive control failed (result -32) [ 501.366349][ T5650] block nbd4: Receive control failed (result -32) [ 501.499874][T21343] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4818'. [ 501.752863][T21353] syz1: rxe_newlink: already configured on syz_tun [ 501.860080][T21359] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4823'. [ 502.018299][ T5636] block nbd5: Receive control failed (result -32) [ 502.325492][T21374] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4827'. [ 502.325528][T21374] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4827'. [ 502.526048][T21393] syzkaller0: left promiscuous mode [ 502.526076][T21393] syzkaller0: left allmulticast mode [ 502.609010][T21400] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4831'. [ 502.703829][T21400] bridge13: entered promiscuous mode [ 502.703856][T21400] bridge13: entered allmulticast mode [ 503.026323][T21418] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4837'. [ 503.087543][T21418] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4837'. [ 503.131323][ T5636] block nbd21: Receive control failed (result -32) [ 503.177184][T21428] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4840'. [ 503.230922][T21428] bridge14: entered promiscuous mode [ 503.230950][T21428] bridge14: entered allmulticast mode [ 503.300074][T21428] team0: Port device bridge14 added [ 503.941514][T21463] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4851'. [ 505.057736][T21516] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4867'. [ 505.196936][T21523] netlink: 'syz.4.4868': attribute type 3 has an invalid length. [ 505.884600][T21555] rxe_eth0 speed is unknown, defaulting to 1000 [ 505.995916][T21560] syzkaller0: entered promiscuous mode [ 505.995941][T21560] syzkaller0: entered allmulticast mode [ 506.004208][T21562] nbd: must specify an index to disconnect [ 506.029590][T21564] netlink: 'syz.4.4882': attribute type 3 has an invalid length. [ 506.405181][T21575] FAULT_INJECTION: forcing a failure. [ 506.405181][T21575] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 506.405227][T21575] CPU: 0 UID: 0 PID: 21575 Comm: syz.5.4888 Not tainted syzkaller #0 PREEMPT(full) [ 506.405253][T21575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 506.405268][T21575] Call Trace: [ 506.405278][T21575] [ 506.405288][T21575] dump_stack_lvl+0xe8/0x150 [ 506.405331][T21575] should_fail_ex+0x3eb/0x540 [ 506.405365][T21575] _copy_from_user+0x2d/0xb0 [ 506.405395][T21575] ___sys_sendmsg+0x1c6/0x360 [ 506.405419][T21575] ? __lock_acquire+0x747/0x2de0 [ 506.405455][T21575] ? __pfx____sys_sendmsg+0x10/0x10 [ 506.405524][T21575] ? __fget_files+0x3a2/0x420 [ 506.405551][T21575] ? __fget_files+0x2a/0x420 [ 506.405590][T21575] __x64_sys_sendmsg+0x1b1/0x290 [ 506.405619][T21575] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 506.405670][T21575] do_syscall_64+0x166/0x520 [ 506.405696][T21575] ? trace_irq_disable+0x3b/0x140 [ 506.405728][T21575] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.405752][T21575] ? clear_bhb_loop+0x70/0xc0 [ 506.405782][T21575] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.405806][T21575] RIP: 0033:0x7f0a9d39fb19 [ 506.405827][T21575] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 506.405847][T21575] RSP: 002b:00007f0a9e2d9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 506.405872][T21575] RAX: ffffffffffffffda RBX: 00007f0a9d625fa0 RCX: 00007f0a9d39fb19 [ 506.405890][T21575] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 506.405906][T21575] RBP: 00007f0a9e2d9090 R08: 0000000000000000 R09: 0000000000000000 [ 506.405921][T21575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 506.405936][T21575] R13: 00007f0a9d626038 R14: 00007f0a9d625fa0 R15: 00007ffd6185d038 [ 506.405975][T21575] [ 506.539331][T21575] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 506.890916][T21589] FAULT_INJECTION: forcing a failure. [ 506.890916][T21589] name failslab, interval 1, probability 0, space 0, times 0 [ 506.890972][T21589] CPU: 1 UID: 0 PID: 21589 Comm: syz.2.4892 Not tainted syzkaller #0 PREEMPT(full) [ 506.891000][T21589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 506.891016][T21589] Call Trace: [ 506.891026][T21589] [ 506.891037][T21589] dump_stack_lvl+0xe8/0x150 [ 506.891083][T21589] should_fail_ex+0x3eb/0x540 [ 506.891119][T21589] should_failslab+0xa8/0x100 [ 506.891154][T21589] ? skb_clone+0x212/0x3a0 [ 506.891183][T21589] kmem_cache_alloc_noprof+0x9c/0x600 [ 506.891215][T21589] ? skb_clone+0x212/0x3a0 [ 506.891251][T21589] skb_clone+0x212/0x3a0 [ 506.891283][T21589] __netlink_deliver_tap+0x355/0x6e0 [ 506.891333][T21589] ? netlink_deliver_tap+0x2e/0x1b0 [ 506.891369][T21589] netlink_deliver_tap+0x19c/0x1b0 [ 506.891406][T21589] netlink_unicast+0x8c1/0xa80 [ 506.891467][T21589] netlink_sendmsg+0x7f0/0xb20 [ 506.891510][T21589] ? __pfx_netlink_sendmsg+0x10/0x10 [ 506.891551][T21589] ? aa_sock_msg_perm+0x144/0x210 [ 506.891582][T21589] ? apparmor_socket_sendmsg+0x98/0x360 [ 506.891620][T21589] ? __pfx_netlink_sendmsg+0x10/0x10 [ 506.891654][T21589] sock_sendmsg_nosec+0x14e/0x190 [ 506.891690][T21589] ____sys_sendmsg+0x54e/0x850 [ 506.891724][T21589] ? __pfx_____sys_sendmsg+0x10/0x10 [ 506.891763][T21589] ? import_iovec+0x73/0xa0 [ 506.891799][T21589] ___sys_sendmsg+0x2a5/0x360 [ 506.891822][T21589] ? __lock_acquire+0x747/0x2de0 [ 506.891859][T21589] ? __pfx____sys_sendmsg+0x10/0x10 [ 506.891931][T21589] ? __fget_files+0x3a2/0x420 [ 506.891960][T21589] ? __fget_files+0x2a/0x420 [ 506.892001][T21589] __x64_sys_sendmsg+0x1b1/0x290 [ 506.892032][T21589] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 506.892085][T21589] do_syscall_64+0x166/0x520 [ 506.892113][T21589] ? trace_irq_disable+0x3b/0x140 [ 506.892146][T21589] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.892171][T21589] ? clear_bhb_loop+0x70/0xc0 [ 506.892202][T21589] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.892226][T21589] RIP: 0033:0x7fe2a5b9fb19 [ 506.892249][T21589] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 506.892270][T21589] RSP: 002b:00007fe2a6a94028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 506.892295][T21589] RAX: ffffffffffffffda RBX: 00007fe2a5e25fa0 RCX: 00007fe2a5b9fb19 [ 506.892313][T21589] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 506.892328][T21589] RBP: 00007fe2a6a94090 R08: 0000000000000000 R09: 0000000000000000 [ 506.892343][T21589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 506.892358][T21589] R13: 00007fe2a5e26038 R14: 00007fe2a5e25fa0 R15: 00007ffdcd7ebbf8 [ 506.892396][T21589] [ 506.977076][T21589] __nla_validate_parse: 12 callbacks suppressed [ 506.977102][T21589] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4892'. [ 507.322632][T21555] lo speed is unknown, defaulting to 1000 [ 507.324204][T21594] netlink: 'syz.0.4893': attribute type 3 has an invalid length. [ 507.324266][T21594] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4893'. [ 507.367858][T21555] wg1 speed is unknown, defaulting to 1000 [ 507.525731][T21601] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4895'. [ 507.586967][T21601] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4895'. [ 507.611696][T21604] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4897'. [ 507.761175][ T5631] syz_tun (unregistering): left allmulticast mode [ 507.796339][ T6627] smc: removing ib device syz1 [ 507.860959][ T5650] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 507.872182][ T5650] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 507.875025][ T5650] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 507.891371][ T5650] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 507.902582][ T5650] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 507.907091][T21618] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4899'. [ 507.974595][T21616] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20003 [ 508.017371][ T5636] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 508.018531][ T5636] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 508.030815][ T5636] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 508.048883][ T5636] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 508.063263][ T5636] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 508.241942][ T5736] infiniband syz1: ib_query_port failed (-19) [ 508.283469][T21618] macvtap1: entered promiscuous mode [ 508.283494][T21618] hsr0: entered promiscuous mode [ 508.283703][T21618] macvtap1: entered allmulticast mode [ 508.283718][T21618] hsr0: entered allmulticast mode [ 508.283732][T21618] hsr_slave_0: entered allmulticast mode [ 508.283750][T21618] hsr_slave_1: entered allmulticast mode [ 508.287423][T21618] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4899'. [ 508.376230][T21618] macvtap2: entered promiscuous mode [ 508.386120][T21618] macvtap2: entered allmulticast mode [ 508.408212][T21618] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4899'. [ 508.435142][ T31] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 508.555161][ T6627] smbdirect: ib_dev[syz1] removed [ 508.638987][T21618] macvtap3: entered promiscuous mode [ 508.639167][T21618] macvtap3: entered allmulticast mode [ 508.639771][T21618] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4899'. [ 508.762661][T21618] macvtap4: entered promiscuous mode [ 508.762868][T21618] macvtap4: entered allmulticast mode [ 508.943204][ T5938] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 508.943259][ T5938] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 508.943297][ T5938] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 508.991098][T21656] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4906'. [ 509.023992][T21657] FAULT_INJECTION: forcing a failure. [ 509.023992][T21657] name failslab, interval 1, probability 0, space 0, times 0 [ 509.024027][T21657] CPU: 1 UID: 0 PID: 21657 Comm: syz.4.4907 Not tainted syzkaller #0 PREEMPT(full) [ 509.024054][T21657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 509.024069][T21657] Call Trace: [ 509.024079][T21657] [ 509.024089][T21657] dump_stack_lvl+0xe8/0x150 [ 509.024135][T21657] should_fail_ex+0x3eb/0x540 [ 509.024170][T21657] should_failslab+0xa8/0x100 [ 509.024207][T21657] __kmalloc_node_noprof+0xfb/0x720 [ 509.024238][T21657] ? __kmalloc_node_noprof+0x2eb/0x720 [ 509.024282][T21657] ? blk_mq_alloc_tag_set+0x4bd/0xfa0 [ 509.024410][T21657] ? blk_mq_alloc_tag_set+0x4bd/0xfa0 [ 509.024446][T21657] blk_mq_alloc_tag_set+0x4bd/0xfa0 [ 509.024489][T21657] nbd_dev_add+0x30e/0xb60 [ 509.024521][T21657] ? __pfx_nbd_dev_add+0x10/0x10 [ 509.024568][T21657] ? __pfx_nbd_genl_foreach_sock+0x10/0x10 [ 509.024594][T21657] ? security_capable+0x7e/0x2c0 [ 509.024637][T21657] nbd_genl_connect+0x96c/0x1cd0 [ 509.024684][T21657] ? __pfx_nbd_genl_connect+0x10/0x10 [ 509.024729][T21657] ? rcu_is_watching+0x16/0xb0 [ 509.024766][T21657] ? trace_kmalloc+0x2a/0xf0 [ 509.024808][T21657] ? __kmalloc_noprof+0x387/0x710 [ 509.024839][T21657] ? __nla_parse+0x40/0x60 [ 509.024919][T21657] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 509.024958][T21657] genl_family_rcv_msg_doit+0x233/0x340 [ 509.024994][T21657] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 509.025033][T21657] ? __lock_acquire+0x747/0x2de0 [ 509.025074][T21657] genl_rcv_msg+0x614/0x7a0 [ 509.025108][T21657] ? __pfx_genl_rcv_msg+0x10/0x10 [ 509.025134][T21657] ? __pfx_nbd_genl_connect+0x10/0x10 [ 509.025186][T21657] netlink_rcv_skb+0x226/0x4a0 [ 509.025221][T21657] ? __pfx_genl_rcv_msg+0x10/0x10 [ 509.025247][T21657] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 509.025297][T21657] ? down_read+0x2b9/0x320 [ 509.025333][T21657] genl_rcv+0x28/0x40 [ 509.025354][T21657] netlink_unicast+0x8ef/0xa80 [ 509.025404][T21657] netlink_sendmsg+0x7f0/0xb20 [ 509.025444][T21657] ? __pfx_netlink_sendmsg+0x10/0x10 [ 509.025483][T21657] ? aa_sock_msg_perm+0x144/0x210 [ 509.025513][T21657] ? apparmor_socket_sendmsg+0x98/0x360 [ 509.025550][T21657] ? __pfx_netlink_sendmsg+0x10/0x10 [ 509.025583][T21657] sock_sendmsg_nosec+0x14e/0x190 [ 509.025619][T21657] ____sys_sendmsg+0x54e/0x850 [ 509.025652][T21657] ? __pfx_____sys_sendmsg+0x10/0x10 [ 509.025689][T21657] ? import_iovec+0x73/0xa0 [ 509.025723][T21657] ___sys_sendmsg+0x2a5/0x360 [ 509.025746][T21657] ? __lock_acquire+0x747/0x2de0 [ 509.025782][T21657] ? __pfx____sys_sendmsg+0x10/0x10 [ 509.025862][T21657] ? __fget_files+0x3a2/0x420 [ 509.025890][T21657] ? __fget_files+0x2a/0x420 [ 509.025930][T21657] __x64_sys_sendmsg+0x1b1/0x290 [ 509.025959][T21657] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 509.026010][T21657] do_syscall_64+0x166/0x520 [ 509.026036][T21657] ? trace_irq_disable+0x3b/0x140 [ 509.026068][T21657] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 509.026092][T21657] ? clear_bhb_loop+0x70/0xc0 [ 509.026122][T21657] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 509.026147][T21657] RIP: 0033:0x7ff38239fb19 [ 509.026170][T21657] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 509.026190][T21657] RSP: 002b:00007ff38323e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 509.026216][T21657] RAX: ffffffffffffffda RBX: 00007ff382625fa0 RCX: 00007ff38239fb19 [ 509.026234][T21657] RDX: 000000000400400c RSI: 0000200000000340 RDI: 0000000000000006 [ 509.026250][T21657] RBP: 00007ff38323e090 R08: 0000000000000000 R09: 0000000000000000 [ 509.026265][T21657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 509.026279][T21657] R13: 00007ff382626038 R14: 00007ff382625fa0 R15: 00007ffe6d092fc8 [ 509.026320][T21657] [ 509.052490][T21657] nbd: failed to add new device [ 510.026079][T21607] rxe_eth0 speed is unknown, defaulting to 1000 [ 510.123690][ T5636] Bluetooth: hci2: command tx timeout [ 510.224993][T21688] FAULT_INJECTION: forcing a failure. [ 510.224993][T21688] name failslab, interval 1, probability 0, space 0, times 0 [ 510.225028][T21688] CPU: 0 UID: 0 PID: 21688 Comm: syz.0.4918 Not tainted syzkaller #0 PREEMPT(full) [ 510.225054][T21688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 510.225069][T21688] Call Trace: [ 510.225078][T21688] [ 510.225089][T21688] dump_stack_lvl+0xe8/0x150 [ 510.225133][T21688] should_fail_ex+0x3eb/0x540 [ 510.225169][T21688] should_failslab+0xa8/0x100 [ 510.225205][T21688] __kmalloc_noprof+0xf9/0x710 [ 510.225234][T21688] ? group_cpus_evenly+0xcf/0x5e0 [ 510.225350][T21688] ? group_cpus_evenly+0xcf/0x5e0 [ 510.225383][T21688] group_cpus_evenly+0xcf/0x5e0 [ 510.225412][T21688] ? __pfx_group_cpus_evenly+0x10/0x10 [ 510.225455][T21688] blk_mq_map_queues+0xb1/0x490 [ 510.225478][T21688] ? rcu_is_watching+0x16/0xb0 [ 510.225514][T21688] ? trace_kmalloc+0x2a/0xf0 [ 510.225543][T21688] ? __pfx_blk_mq_map_queues+0x10/0x10 [ 510.225569][T21688] ? __kmalloc_node_noprof+0x2eb/0x720 [ 510.225596][T21688] ? blk_mq_update_queue_map+0x383/0x450 [ 510.225633][T21688] blk_mq_alloc_tag_set+0x812/0xfa0 [ 510.225677][T21688] nbd_dev_add+0x30e/0xb60 [ 510.225708][T21688] ? __pfx_nbd_dev_add+0x10/0x10 [ 510.225762][T21688] ? __pfx_nbd_genl_foreach_sock+0x10/0x10 [ 510.225787][T21688] ? security_capable+0x7e/0x2c0 [ 510.225832][T21688] nbd_genl_connect+0x96c/0x1cd0 [ 510.225880][T21688] ? __pfx_nbd_genl_connect+0x10/0x10 [ 510.225921][T21688] ? rcu_is_watching+0x16/0xb0 [ 510.225957][T21688] ? trace_kmalloc+0x2a/0xf0 [ 510.225988][T21688] ? __kmalloc_noprof+0x387/0x710 [ 510.226019][T21688] ? __nla_parse+0x40/0x60 [ 510.226058][T21688] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 510.226097][T21688] genl_family_rcv_msg_doit+0x233/0x340 [ 510.226132][T21688] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 510.226173][T21688] ? __lock_acquire+0x747/0x2de0 [ 510.226216][T21688] genl_rcv_msg+0x614/0x7a0 [ 510.226251][T21688] ? __pfx_genl_rcv_msg+0x10/0x10 [ 510.226276][T21688] ? __pfx_nbd_genl_connect+0x10/0x10 [ 510.226330][T21688] netlink_rcv_skb+0x226/0x4a0 [ 510.226364][T21688] ? __pfx_genl_rcv_msg+0x10/0x10 [ 510.226393][T21688] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 510.226445][T21688] ? down_read+0x2b9/0x320 [ 510.226481][T21688] genl_rcv+0x28/0x40 [ 510.226505][T21688] netlink_unicast+0x8ef/0xa80 [ 510.226557][T21688] netlink_sendmsg+0x7f0/0xb20 [ 510.226598][T21688] ? __pfx_netlink_sendmsg+0x10/0x10 [ 510.226635][T21688] ? aa_sock_msg_perm+0x144/0x210 [ 510.226663][T21688] ? apparmor_socket_sendmsg+0x98/0x360 [ 510.226701][T21688] ? __pfx_netlink_sendmsg+0x10/0x10 [ 510.226743][T21688] sock_sendmsg_nosec+0x14e/0x190 [ 510.226780][T21688] ____sys_sendmsg+0x54e/0x850 [ 510.226812][T21688] ? __pfx_____sys_sendmsg+0x10/0x10 [ 510.226849][T21688] ? import_iovec+0x73/0xa0 [ 510.226884][T21688] ___sys_sendmsg+0x2a5/0x360 [ 510.226907][T21688] ? __lock_acquire+0x747/0x2de0 [ 510.226943][T21688] ? __pfx____sys_sendmsg+0x10/0x10 [ 510.227014][T21688] ? __fget_files+0x3a2/0x420 [ 510.227041][T21688] ? __fget_files+0x2a/0x420 [ 510.227081][T21688] __x64_sys_sendmsg+0x1b1/0x290 [ 510.227111][T21688] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 510.227164][T21688] do_syscall_64+0x166/0x520 [ 510.227190][T21688] ? trace_irq_disable+0x3b/0x140 [ 510.227221][T21688] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.227246][T21688] ? clear_bhb_loop+0x70/0xc0 [ 510.227276][T21688] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.227300][T21688] RIP: 0033:0x7ff4fbd9fb19 [ 510.227324][T21688] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 510.227345][T21688] RSP: 002b:00007ff4fcbb3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 510.227371][T21688] RAX: ffffffffffffffda RBX: 00007ff4fc025fa0 RCX: 00007ff4fbd9fb19 [ 510.227388][T21688] RDX: 000000000400400c RSI: 0000200000000340 RDI: 0000000000000006 [ 510.227404][T21688] RBP: 00007ff4fcbb3090 R08: 0000000000000000 R09: 0000000000000000 [ 510.227419][T21688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 510.227433][T21688] R13: 00007ff4fc026038 R14: 00007ff4fc025fa0 R15: 00007ffcf31a9368 [ 510.227473][T21688] [ 510.790842][ T5636] block nbd22: Receive control failed (result -32) [ 511.160654][ T5636] block nbd23: Receive control failed (result -32) [ 511.353605][T21710] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 511.527632][T21715] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 511.990992][T21741] __nla_validate_parse: 13 callbacks suppressed [ 511.991019][T21741] netlink: 84 bytes leftover after parsing attributes in process `syz.3.4933'. [ 512.198119][ T5636] Bluetooth: hci2: command tx timeout [ 512.496527][T21765] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4933'. [ 512.711419][T21607] lo speed is unknown, defaulting to 1000 [ 512.800098][T21760] veth1_macvtap: left promiscuous mode [ 512.840251][T21607] wg1 speed is unknown, defaulting to 1000 [ 513.167889][T21775] netlink: 5236 bytes leftover after parsing attributes in process `syz.3.4945'. [ 513.167919][T21775] openvswitch: netlink: Flow key attr not present in new flow. [ 513.168170][T21775] netlink: 5236 bytes leftover after parsing attributes in process `syz.3.4945'. [ 513.168189][T21775] openvswitch: netlink: Flow key attr not present in new flow. [ 513.168400][T21775] netlink: 5236 bytes leftover after parsing attributes in process `syz.3.4945'. [ 513.168415][T21775] openvswitch: netlink: Flow key attr not present in new flow. [ 513.168615][T21775] netlink: 5236 bytes leftover after parsing attributes in process `syz.3.4945'. [ 513.168633][T21775] openvswitch: netlink: Flow key attr not present in new flow. [ 513.208439][T21775] netlink: 5236 bytes leftover after parsing attributes in process `syz.3.4945'. [ 513.208550][T21775] openvswitch: netlink: Flow key attr not present in new flow. [ 513.208927][T21775] netlink: 5236 bytes leftover after parsing attributes in process `syz.3.4945'. [ 513.208992][T21775] openvswitch: netlink: Flow key attr not present in new flow. [ 513.209808][T21775] netlink: 5236 bytes leftover after parsing attributes in process `syz.3.4945'. [ 513.209895][T21775] openvswitch: netlink: Flow key attr not present in new flow. [ 513.230532][T21775] netlink: 5236 bytes leftover after parsing attributes in process `syz.3.4945'. [ 513.230621][T21775] openvswitch: netlink: Flow key attr not present in new flow. [ 513.278667][T21775] openvswitch: netlink: Flow key attr not present in new flow. [ 513.279215][T21775] openvswitch: netlink: Flow key attr not present in new flow. [ 513.978534][T21802] bridge15: entered promiscuous mode [ 513.978612][T21802] bridge15: entered allmulticast mode [ 514.001574][T21802] team0: Port device bridge15 added [ 514.117727][T21810] rdma_rxe: rxe_newlink: failed to add syz_tun [ 514.285114][ T5636] Bluetooth: hci2: command tx timeout [ 514.432765][T21816] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 514.534533][ T5636] block nbd24: Receive control failed (result -32) [ 514.535806][ T5650] block nbd24: Receive control failed (result -32) [ 514.636636][T21607] bridge0: port 1(bridge_slave_0) entered blocking state [ 514.638373][T21607] bridge0: port 1(bridge_slave_0) entered disabled state [ 514.638579][T21607] bridge_slave_0: entered allmulticast mode [ 514.642173][T21607] bridge_slave_0: entered promiscuous mode [ 514.677881][T21607] bridge0: port 2(bridge_slave_1) entered blocking state [ 514.678010][T21607] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.678195][T21607] bridge_slave_1: entered allmulticast mode [ 514.681769][T21607] bridge_slave_1: entered promiscuous mode [ 514.768147][T21607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 514.784341][T21607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 514.909204][T21607] team0: Port device team_slave_0 added [ 514.920972][T21607] team0: Port device team_slave_1 added [ 515.010484][T21607] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 515.010506][T21607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 515.010538][T21607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 515.028707][T21607] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 515.028782][T21607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 515.028906][T21607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 515.208463][T21607] hsr_slave_0: entered promiscuous mode [ 515.209822][T21607] hsr_slave_1: entered promiscuous mode [ 515.211495][T21607] debugfs: 'hsr0' already exists in 'hsr' [ 515.211521][T21607] Cannot create hsr debugfs directory [ 515.341658][T21858] netlink: 'syz.4.4964': attribute type 1 has an invalid length. [ 515.429094][T21863] bridge14: entered promiscuous mode [ 515.429123][T21863] bridge14: entered allmulticast mode [ 515.774772][T21607] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 515.780467][T21607] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.930067][T21607] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 515.930110][T21607] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.068414][T21607] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 516.068464][T21607] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.145878][T21607] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 516.145921][T21607] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.252346][T21891] veth0_vlan: entered allmulticast mode [ 516.353846][ T5636] Bluetooth: hci2: command tx timeout [ 516.993372][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 517.023701][T21911] bond12: Unable to set peer notification delay as MII monitoring is disabled [ 517.029667][T21911] bond12 (unregistering): Released all slaves [ 517.507040][T21826] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 517.528045][T21855] netlink: 'syz.4.4964': attribute type 2 has an invalid length. [ 517.572685][T21607] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 517.605040][T21607] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 517.609415][T21607] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 517.709809][T21607] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 517.720877][T21607] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 517.761232][T21607] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 517.771464][T21607] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 517.790883][T21607] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 517.889771][T21950] __nla_validate_parse: 33 callbacks suppressed [ 517.889796][T21950] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4974'. [ 517.889953][T21950] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4974'. [ 517.931656][T21945] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 518.203210][T21607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 518.264304][T21959] netlink: 'syz.4.4975': attribute type 64 has an invalid length. [ 518.307074][T21607] 8021q: adding VLAN 0 to HW filter on device team0 [ 518.351064][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 518.351193][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 518.387455][ T6627] bridge0: port 2(bridge_slave_1) entered blocking state [ 518.387603][ T6627] bridge0: port 2(bridge_slave_1) entered forwarding state [ 518.872267][T21983] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4979'. [ 518.887123][T21984] net_ratelimit: 23 callbacks suppressed [ 518.887147][T21984] ip_tables: iptables: counters copy to user failed while replacing table [ 518.942358][T21983] 8021q: adding VLAN 0 to HW filter on device bond0 [ 519.036248][T21983] macvlan3: entered promiscuous mode [ 519.036276][T21983] macvlan3: entered allmulticast mode [ 519.241084][T22003] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4984'. [ 519.241262][T22003] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4984'. [ 519.331529][T22010] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4986'. [ 519.345704][T22009] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4986'. [ 519.522637][T22025] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4987'. [ 519.651207][T21607] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 519.701828][T21607] veth0_vlan: entered promiscuous mode [ 519.721175][T21607] veth1_vlan: entered promiscuous mode [ 519.756608][T21607] veth0_macvtap: entered promiscuous mode [ 519.761339][T21607] veth1_macvtap: entered promiscuous mode [ 519.789508][T21607] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 519.808419][T21607] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 519.843421][ T6627] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.843477][ T6627] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.843514][ T6627] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.843574][ T6627] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.985216][T21991] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 522.118148][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 522.118173][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 522.209713][ T31] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 522.209739][ T31] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 522.265009][T22039] netlink: 'syz.3.4991': attribute type 3 has an invalid length. [ 522.269566][T22039] x_tables: duplicate underflow at hook 2 [ 522.705870][T22060] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5000'. [ 522.709470][T22059] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4999'. [ 522.825150][T22062] block nbd0: reconnected socket [ 522.825714][ T5636] block nbd0: Receive control failed (result -32) [ 522.998013][T22071] netlink: 76 bytes leftover after parsing attributes in process `syz.3.5003'. [ 523.034765][T22071] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5003'. [ 523.034804][T22071] netlink: 11 bytes leftover after parsing attributes in process `syz.3.5003'. [ 523.122009][T22078] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5005'. [ 523.144682][ T5650] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 523.150742][ T5650] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 523.152546][ T5650] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 523.160503][ T5650] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 523.169535][ T5650] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 523.207707][T22078] [ 523.210143][T22078] ====================================================== [ 523.217225][T22078] WARNING: possible circular locking dependency detected [ 523.224394][T22078] syzkaller #0 Not tainted [ 523.228866][T22078] ------------------------------------------------------ [ 523.235983][T22078] syz.5.5005/22078 is trying to acquire lock: [ 523.242086][T22078] ffff8880562cc298 (set->srcu){.+.+}-{0:0}, at: __synchronize_srcu+0xb6/0x2f0 [ 523.251097][T22078] [ 523.251097][T22078] but task is already holding lock: [ 523.258502][T22078] ffff88802da0a178 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1af/0x480 [ 523.268265][T22078] [ 523.268265][T22078] which lock already depends on the new lock. [ 523.268265][T22078] [ 523.278800][T22078] [ 523.278800][T22078] the existing dependency chain (in reverse order) is: [ 523.287954][T22078] [ 523.287954][T22078] -> #6 (&q->elevator_lock){+.+.}-{4:4}: [ 523.295838][T22078] __mutex_lock+0x197/0x15a0 [ 523.301007][T22078] elevator_change+0x1af/0x480 [ 523.306536][T22078] elevator_set_none+0xb5/0x140 [ 523.311980][T22078] blk_mq_update_nr_hw_queues+0x5ef/0x19e0 [ 523.318369][T22078] nbd_start_device+0x189/0xb30 [ 523.323806][T22078] nbd_genl_connect+0x167d/0x1cd0 [ 523.329450][T22078] genl_family_rcv_msg_doit+0x233/0x340 [ 523.335586][T22078] genl_rcv_msg+0x614/0x7a0 [ 523.340706][T22078] netlink_rcv_skb+0x226/0x4a0 [ 523.346079][T22078] genl_rcv+0x28/0x40 [ 523.350724][T22078] netlink_unicast+0x8ef/0xa80 [ 523.356062][T22078] netlink_sendmsg+0x7f0/0xb20 [ 523.361447][T22078] sock_sendmsg_nosec+0x14e/0x190 [ 523.367063][T22078] ____sys_sendmsg+0x54e/0x850 [ 523.372441][T22078] ___sys_sendmsg+0x2a5/0x360 [ 523.377694][T22078] __x64_sys_sendmsg+0x1b1/0x290 [ 523.383238][T22078] do_syscall_64+0x166/0x520 [ 523.388414][T22078] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 523.395164][T22078] [ 523.395164][T22078] -> #5 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 523.403929][T22078] blk_alloc_queue+0x544/0x690 [ 523.409348][T22078] __blk_mq_alloc_disk+0x194/0x390 [ 523.415019][T22078] nbd_dev_add+0x494/0xb60 [ 523.419991][T22078] nbd_init+0x168/0x1f0 [ 523.424808][T22078] do_one_initcall+0x250/0x870 [ 523.430128][T22078] do_initcall_level+0x10a/0x1a0 [ 523.435733][T22078] do_initcalls+0x59/0xa0 [ 523.440614][T22078] kernel_init_freeable+0x29d/0x3e0 [ 523.446377][T22078] kernel_init+0x22/0x1d0 [ 523.451396][T22078] ret_from_fork+0x514/0xb70 [ 523.456598][T22078] ret_from_fork_asm+0x1a/0x30 [ 523.462007][T22078] [ 523.462007][T22078] -> #4 (fs_reclaim){+.+.}-{0:0}: [ 523.469252][T22078] fs_reclaim_acquire+0x71/0x100 [ 523.474757][T22078] __kmalloc_cache_node_noprof+0x66/0x620 [ 523.481044][T22078] create_worker+0x112/0x7c0 [ 523.486202][T22078] workqueue_prepare_cpu+0xe4/0x170 [ 523.491958][T22078] cpuhp_invoke_callback+0x434/0x810 [ 523.497808][T22078] _cpu_up+0x2ce/0x5b0 [ 523.502444][T22078] cpu_up+0x1d2/0x220 [ 523.506989][T22078] cpuhp_bringup_mask+0xb2/0x1a0 [ 523.512615][T22078] cpuhp_bringup_cpus_parallel+0x109/0x120 [ 523.519084][T22078] bringup_nonboot_cpus+0x17/0x30 [ 523.524675][T22078] smp_init+0x32/0x110 [ 523.529655][T22078] kernel_init_freeable+0x27f/0x3e0 [ 523.535463][T22078] kernel_init+0x22/0x1d0 [ 523.540369][T22078] ret_from_fork+0x514/0xb70 [ 523.545514][T22078] ret_from_fork_asm+0x1a/0x30 [ 523.551228][T22078] [ 523.551228][T22078] -> #3 (cpu_hotplug_lock){++++}-{0:0}: [ 523.559294][T22078] cpus_read_lock+0x3d/0x160 [ 523.564463][T22078] static_key_slow_inc+0x12/0x30 [ 523.570016][T22078] nbd_genl_reconnect_sock_cb+0x69a/0xbb0 [ 523.576446][T22078] nbd_genl_foreach_sock+0x265/0x450 [ 523.582339][T22078] nbd_genl_reconfigure+0xbbb/0x1040 [ 523.588187][T22078] genl_family_rcv_msg_doit+0x233/0x340 [ 523.594341][T22078] genl_rcv_msg+0x614/0x7a0 [ 523.599395][T22078] netlink_rcv_skb+0x226/0x4a0 [ 523.604708][T22078] genl_rcv+0x28/0x40 [ 523.609239][T22078] netlink_unicast+0x8ef/0xa80 [ 523.614688][T22078] netlink_sendmsg+0x7f0/0xb20 [ 523.620049][T22078] sock_sendmsg_nosec+0x14e/0x190 [ 523.625641][T22078] ____sys_sendmsg+0x54e/0x850 [ 523.630977][T22078] ___sys_sendmsg+0x2a5/0x360 [ 523.636218][T22078] __x64_sys_sendmsg+0x1b1/0x290 [ 523.641716][T22078] do_syscall_64+0x166/0x520 [ 523.646914][T22078] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 523.653382][T22078] [ 523.653382][T22078] -> #2 (&nsock->tx_lock){+.+.}-{4:4}: [ 523.661071][T22078] __mutex_lock+0x197/0x15a0 [ 523.666216][T22078] nbd_queue_rq+0x373/0xff0 [ 523.671278][T22078] blk_mq_dispatch_rq_list+0x499/0x1990 [ 523.677391][T22078] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 523.684710][T22078] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 523.691280][T22078] blk_mq_run_work_fn+0x167/0x2f0 [ 523.696892][T22078] process_scheduled_works+0xc3d/0x1630 [ 523.703012][T22078] worker_thread+0xa47/0xfb0 [ 523.708201][T22078] kthread+0x38b/0x480 [ 523.712868][T22078] ret_from_fork+0x514/0xb70 [ 523.718016][T22078] ret_from_fork_asm+0x1a/0x30 [ 523.723341][T22078] [ 523.723341][T22078] -> #1 (&cmd->lock){+.+.}-{4:4}: [ 523.730597][T22078] __mutex_lock+0x197/0x15a0 [ 523.735760][T22078] nbd_queue_rq+0xc1/0xff0 [ 523.740777][T22078] blk_mq_dispatch_rq_list+0x499/0x1990 [ 523.746892][T22078] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 523.753780][T22078] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 523.760444][T22078] blk_mq_run_work_fn+0x167/0x2f0 [ 523.766039][T22078] process_scheduled_works+0xc3d/0x1630 [ 523.772171][T22078] worker_thread+0xa47/0xfb0 [ 523.777429][T22078] kthread+0x38b/0x480 [ 523.782057][T22078] ret_from_fork+0x514/0xb70 [ 523.787202][T22078] ret_from_fork_asm+0x1a/0x30 [ 523.792520][T22078] [ 523.792520][T22078] -> #0 (set->srcu){.+.+}-{0:0}: [ 523.799696][T22078] __lock_acquire+0x164c/0x2de0 [ 523.805109][T22078] lock_sync+0xb3/0x130 [ 523.809826][T22078] __synchronize_srcu+0xca/0x2f0 [ 523.815327][T22078] elevator_switch+0x1e8/0x7b0 [ 523.820688][T22078] elevator_change+0x2fa/0x480 [ 523.826225][T22078] elevator_set_default+0x375/0x440 [ 523.831986][T22078] blk_register_queue+0x404/0x4f0 [ 523.837823][T22078] __add_disk+0x6b8/0xdb0 [ 523.842788][T22078] add_disk_fwnode+0x100/0x3a0 [ 523.848115][T22078] nbd_dev_add+0x733/0xb60 [ 523.853291][T22078] nbd_genl_connect+0x96c/0x1cd0 [ 523.858816][T22078] genl_family_rcv_msg_doit+0x233/0x340 [ 523.865098][T22078] genl_rcv_msg+0x614/0x7a0 [ 523.870332][T22078] netlink_rcv_skb+0x226/0x4a0 [ 523.875660][T22078] genl_rcv+0x28/0x40 [ 523.880193][T22078] netlink_unicast+0x8ef/0xa80 [ 523.885512][T22078] netlink_sendmsg+0x7f0/0xb20 [ 523.891098][T22078] sock_sendmsg_nosec+0x14e/0x190 [ 523.896780][T22078] ____sys_sendmsg+0x54e/0x850 [ 523.902359][T22078] ___sys_sendmsg+0x2a5/0x360 [ 523.907589][T22078] __x64_sys_sendmsg+0x1b1/0x290 [ 523.913270][T22078] do_syscall_64+0x166/0x520 [ 523.918465][T22078] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 523.924953][T22078] [ 523.924953][T22078] other info that might help us debug this: [ 523.924953][T22078] [ 523.935212][T22078] Chain exists of: [ 523.935212][T22078] set->srcu --> &q->q_usage_counter(io)#50 --> &q->elevator_lock [ 523.935212][T22078] [ 523.948955][T22078] Possible unsafe locking scenario: [ 523.948955][T22078] [ 523.956457][T22078] CPU0 CPU1 [ 523.961856][T22078] ---- ---- [ 523.967967][T22078] lock(&q->elevator_lock); [ 523.972634][T22078] lock(&q->q_usage_counter(io)#50); [ 523.980651][T22078] lock(&q->elevator_lock); [ 523.987889][T22078] sync(set->srcu); [ 523.991812][T22078] [ 523.991812][T22078] *** DEADLOCK *** [ 523.991812][T22078] [ 523.999982][T22078] locks held by syz.5.5005/22078: 6, last CPU#1: [ 524.006341][T22078] #0: ffffffff914f05a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 524.014591][T22078] #1: ffffffff914f03e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 524.023597][T22078] #2: ffff888054fc6178 (&set->update_nr_hwq_lock){++++}-{4:4}, at: add_disk_fwnode+0xea/0x3a0 [ 524.033998][T22078] #3: ffff88802da0a200 (&q->sysfs_lock){+.+.}-{4:4}, at: blk_register_queue+0x10d/0x4f0 [ 524.043881][T22078] #4: ffff88802da09c88 (&q->q_usage_counter(queue)#64){+.+.}-{0:0}, at: elevator_change+0x194/0x480 [ 524.054860][T22078] #5: ffff88802da0a178 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1af/0x480 [ 524.064757][T22078] [ 524.064757][T22078] stack backtrace: [ 524.070710][T22078] CPU: 1 UID: 0 PID: 22078 Comm: syz.5.5005 Not tainted syzkaller #0 PREEMPT(full) [ 524.080113][T22078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 524.090205][T22078] Call Trace: [ 524.093522][T22078] [ 524.096482][T22078] dump_stack_lvl+0xe8/0x150 [ 524.101141][T22078] print_circular_bug+0x2e2/0x300 [ 524.106216][T22078] check_noncircular+0x12f/0x150 [ 524.111208][T22078] __lock_acquire+0x164c/0x2de0 [ 524.116128][T22078] ? lockdep_unlock+0x5c/0xd0 [ 524.120844][T22078] ? __lock_acquire+0x1511/0x2de0 [ 524.125948][T22078] lock_sync+0xb3/0x130 [ 524.130159][T22078] ? __synchronize_srcu+0xb6/0x2f0 [ 524.135337][T22078] ? __synchronize_srcu+0xb6/0x2f0 [ 524.140536][T22078] __synchronize_srcu+0xca/0x2f0 [ 524.145530][T22078] ? __pfx___synchronize_srcu+0x10/0x10 [ 524.151138][T22078] ? do_raw_spin_lock+0x12b/0x2f0 [ 524.156212][T22078] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 524.162079][T22078] ? ktime_get_mono_fast_ns+0x2d2/0x2f0 [ 524.167670][T22078] ? synchronize_srcu+0x20c/0x270 [ 524.172930][T22078] elevator_switch+0x1e8/0x7b0 [ 524.178348][T22078] ? blk_mq_cancel_work_sync+0xa5/0xe0 [ 524.183881][T22078] elevator_change+0x2fa/0x480 [ 524.188705][T22078] ? do_raw_spin_unlock+0xf5/0x200 [ 524.193955][T22078] elevator_set_default+0x375/0x440 [ 524.199222][T22078] ? __pfx_elevator_set_default+0x10/0x10 [ 524.205093][T22078] ? disk_register_independent_access_ranges+0x2d8/0x380 [ 524.212255][T22078] ? blk_crypto_sysfs_register+0x11c/0x170 [ 524.218546][T22078] blk_register_queue+0x404/0x4f0 [ 524.223625][T22078] __add_disk+0x6b8/0xdb0 [ 524.228029][T22078] add_disk_fwnode+0x100/0x3a0 [ 524.232844][T22078] nbd_dev_add+0x733/0xb60 [ 524.237305][T22078] ? __pfx_nbd_dev_add+0x10/0x10 [ 524.242282][T22078] ? __pfx_nbd_genl_foreach_sock+0x10/0x10 [ 524.248172][T22078] ? security_capable+0x7e/0x2c0 [ 524.253278][T22078] nbd_genl_connect+0x96c/0x1cd0 [ 524.258280][T22078] ? __pfx_nbd_genl_connect+0x10/0x10 [ 524.263701][T22078] ? rcu_is_watching+0x16/0xb0 [ 524.268539][T22078] ? trace_kmalloc+0x2a/0xf0 [ 524.273210][T22078] ? __kmalloc_noprof+0x387/0x710 [ 524.278383][T22078] ? __nla_parse+0x40/0x60 [ 524.282903][T22078] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 524.289286][T22078] genl_family_rcv_msg_doit+0x233/0x340 [ 524.294906][T22078] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 524.301018][T22078] ? __lock_acquire+0x747/0x2de0 [ 524.306134][T22078] genl_rcv_msg+0x614/0x7a0 [ 524.310681][T22078] ? __pfx_genl_rcv_msg+0x10/0x10 [ 524.315780][T22078] ? __pfx_nbd_genl_connect+0x10/0x10 [ 524.321210][T22078] netlink_rcv_skb+0x226/0x4a0 [ 524.326020][T22078] ? __pfx_genl_rcv_msg+0x10/0x10 [ 524.331084][T22078] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 524.336421][T22078] ? down_read+0x2b9/0x320 [ 524.340907][T22078] genl_rcv+0x28/0x40 [ 524.344962][T22078] netlink_unicast+0x8ef/0xa80 [ 524.349788][T22078] netlink_sendmsg+0x7f0/0xb20 [ 524.354602][T22078] ? __pfx_netlink_sendmsg+0x10/0x10 [ 524.359935][T22078] ? aa_sock_msg_perm+0x144/0x210 [ 524.365026][T22078] ? apparmor_socket_sendmsg+0x98/0x360 [ 524.370814][T22078] ? __pfx_netlink_sendmsg+0x10/0x10 [ 524.376153][T22078] sock_sendmsg_nosec+0x14e/0x190 [ 524.381217][T22078] ____sys_sendmsg+0x54e/0x850 [ 524.386190][T22078] ? __pfx_____sys_sendmsg+0x10/0x10 [ 524.391521][T22078] ? import_iovec+0x73/0xa0 [ 524.396097][T22078] ___sys_sendmsg+0x2a5/0x360 [ 524.400827][T22078] ? __lock_acquire+0x747/0x2de0 [ 524.405810][T22078] ? __pfx____sys_sendmsg+0x10/0x10 [ 524.411058][T22078] ? futex_wait+0x2a2/0x390 [ 524.415649][T22078] ? __fget_files+0x3a2/0x420 [ 524.420386][T22078] ? __fget_files+0x2a/0x420 [ 524.425018][T22078] __x64_sys_sendmsg+0x1b1/0x290 [ 524.429992][T22078] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 524.435680][T22078] do_syscall_64+0x166/0x520 [ 524.440352][T22078] ? trace_irq_disable+0x3b/0x140 [ 524.445428][T22078] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.451555][T22078] ? clear_bhb_loop+0x70/0xc0 [ 524.456270][T22078] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.462198][T22078] RIP: 0033:0x7f0a9d39fb19 [ 524.466825][T22078] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 524.486469][T22078] RSP: 002b:00007f0a9e2d9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 524.494924][T22078] RAX: ffffffffffffffda RBX: 00007f0a9d625fa0 RCX: 00007f0a9d39fb19 [ 524.502932][T22078] RDX: 000000000400400c RSI: 0000200000000340 RDI: 0000000000000006 [ 524.511035][T22078] RBP: 00007f0a9d437b70 R08: 0000000000000000 R09: 0000000000000000 [ 524.519142][T22078] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 524.527280][T22078] R13: 00007f0a9d626038 R14: 00007f0a9d625fa0 R15: 00007ffd6185d038 [ 524.535313][T22078] [ 524.806769][T22078] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5005'. [ 525.346457][ T5650] block nbd25: Receive control failed (result -32) [ 525.431625][ T5938] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.488566][ T5938] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.528542][ T5938] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.578509][ T5938] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.645657][ T5938] bridge_slave_1: left allmulticast mode [ 525.645683][ T5938] bridge_slave_1: left promiscuous mode [ 525.645859][ T5938] bridge0: port 2(bridge_slave_1) entered disabled state [ 525.647940][ T5938] bridge_slave_0: left allmulticast mode [ 525.647965][ T5938] bridge_slave_0: left promiscuous mode [ 525.648111][ T5938] bridge0: port 1(bridge_slave_0) entered disabled state [ 525.752294][ T5938] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 525.764054][ T5938] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 525.765046][ T5938] bond0 (unregistering): Released all slaves [ 526.052531][ T5938] hsr_slave_0: left promiscuous mode [ 526.059012][ T5938] hsr_slave_1: left promiscuous mode [ 526.073827][ T5938] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 526.074705][ T5938] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 526.099384][ T5938] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 526.099410][ T5938] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 526.111250][ T5938] veth1_macvtap: left promiscuous mode [ 526.111366][ T5938] veth0_macvtap: left promiscuous mode [ 526.111582][ T5938] veth1_vlan: left promiscuous mode [ 526.111738][ T5938] veth0_vlan: left promiscuous mode [ 526.283593][ T5938] team0 (unregistering): Port device team_slave_1 removed [ 526.287737][ T5938] team0 (unregistering): Port device team_slave_0 removed [ 526.355791][ T5294] 8021q: adding VLAN 0 to HW filter on device eth2 [ 526.730180][ T5294] 8021q: adding VLAN 0 to HW filter on device eth3 [ 527.047092][ T5294] 8021q: adding VLAN 0 to HW filter on device eth4 [ 527.342602][ T5294] 8021q: adding VLAN 0 to HW filter on device eth5 [ 529.153636][ T1703] block nbd12: Possible stuck request ffff8880293ae000: control (read@0,4096B). Runtime 180 seconds [ 529.589609][ T4999] udevd[4999]: worker [15148] /devices/virtual/block/nbd12 timeout; kill it [ 529.589717][ T4999] udevd[4999]: seq 16281 '/devices/virtual/block/nbd12' killed