last executing test programs: 5.169462481s ago: executing program 2 (id=3596): r0 = socket$kcm(0x2, 0x5, 0x84) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x4, 0x2, 0x0, 0x9}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) (async) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r3, 0x10) (async) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0x1}], 0x1}, 0x80d1) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000072"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc) (async) recvmsg$kcm(r0, &(0x7f0000001e00)={0x0, 0x0, 0x0}, 0x0) 4.571043021s ago: executing program 3 (id=3606): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x1, 0x1010, 0xffffffffffffffff, 0xffffd000) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) pwritev(r1, &(0x7f0000001a00)=[{&(0x7f0000000180)="e613fa1d9cd1b3cc3660d1a3f1ceb73cc00396a4f0edc72d8137d03d09529b70a8af199d8bdb4479eb5d0b9a5fffab5b90e9afd4022fe79a0abadc448c86f58f8efbeb7759d3c01ecedde17411c9935d8fe28830093648df0d477ec47851a00df505334758aa6cc105dd77198cffbc63ea9edb65667ead115400ed4723ea86a610376b0b1df137474813645d85bc2b1bbc650f65bc7e07ab3b366fbbfe54e1def3bd8040c98805c82e70845643e0de8698f1063a0cd6d9384fe9df405e829228eaa305fbf6525b443d51124b16136be02c002c79f1dd1dcb2044781e", 0xdc}, {&(0x7f0000000840)="fb27c6f1f08f0f6a0b94859af9e2c6426d33690c4be9982fe6b7a5a4b13968e83839d0d909de954e41794260839c4c859aa41766b9e91e167fbc171ce1f7620316f31a20e35a9ad07e7d73289a673d83e1471edb4cdd889ffc6c8311e8d5229420ee4a60b9dc413785bdede5bffe747dd1cb36bb904edc97268155633cc9f013e99297681c03c6241899460a019164201b745b35a3089b6106e9e938abdc3800", 0xa0}, {&(0x7f0000000900)="fc097f285d8e80d78387835dcb239b5176d3b32a0ff8ed0cbfce8f6a6f1d0aa29077125e1645d17eee720121", 0x2c}, {&(0x7f0000000940)="ea74de21dc2500b6865d47cbfc06a00103481e23ec3877c65e670852", 0x1c}, {&(0x7f0000000980)="053c1fb534993d73fb01cbef28847b393a6132788695febba1f9c7a60316c45149db179a4aa375544b51f4cbca01d818c9e7f1bccf3ccebd089c8ead205708d6fd0df3def8c3bdb3003d18b7bc", 0x4d}, {&(0x7f0000000a00)="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", 0x1000}], 0x6, 0x5, 0xc) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000001000210400"/20, @ANYRES32=0x0, @ANYBLOB="00000000200000002c00128009000100626f6e64000000001c0002800500010005000000050006000180000008001c00"], 0x4c}}, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x10, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180000000000000000008000540000000000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x20, 0x1, 0x4, 0x5, 0x0, 0x0, {0x1}, [@NFULA_CFG_MODE={0xa, 0x2, {0x7fffffff, 0x1}}]}, 0x20}, 0x1, 0x0, 0x0, 0xc085}, 0x40000) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000140)={0x84, @dev={0xac, 0x14, 0x14, 0x3a}, 0x4e21, 0x3, 'lc\x00', 0x1, 0x80002, 0x64}, 0x2c) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffd}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x6}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x84}}, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r6, 0x0) setsockopt$MRT6_DEL_MFC(r6, 0x29, 0xcd, &(0x7f0000001bc0)={{0xa, 0x4e24, 0x5, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x4}, {0xa, 0x4e23, 0x7fffffff, @mcast1, 0xfffff88a}, 0x0, {[0x9fa, 0x5, 0x401, 0x3, 0x7fff, 0x0, 0xc66, 0x9]}}, 0x5c) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000340)=@nat={'nat\x00', 0x670, 0x5, 0x498, 0x348, 0x128, 0xfeffffff, 0x250, 0x0, 0x400, 0x400, 0xffffffff, 0x400, 0x400, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, 0x0, 0x0, 'veth0_to_bond\x00', 'caif0\x00', {}, {}, 0x6}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[0xffff], [0x0, 0x100], 0x0, 0x40}}, @common=@unspec=@state={{0x28}, {0xb}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @multicast, 0x5, 0x8, [0x0, 0x1c, 0x7, 0x1d, 0x2e, 0x37, 0x2e, 0x9, 0x39, 0x32, 0x2d, 0x32, 0x35, 0x23, 0x15, 0x17], 0x0, 0x3, 0x9}}}, {{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x3, 0x0, 0x4], 0x0, 0x3}}}, @common=@set={{0x40}, {{0x0, [], 0x0, 0x4}}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @initdev={0xac, 0x1e, 0x40, 0x0}, @broadcast, @gre_key=0x6, @port=0x4e23}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00', 0x0, 0xe, 0x2, 0x1}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @private=0xa010102, @gre_key=0x1, @icmp_id=0x66}}}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00', {}, {}, 0x73}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private2, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @port, @gre_key}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4f8) pipe(&(0x7f0000000000)={0xffffffffffffffff}) readv(r8, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/65, 0x41}], 0x1) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000001a80)={0x0, 0x0, 0x2, 0x0, '\x00', [{0x2, 0x2, 0x0, 0x3, 0xf33, 0x40}, {0x9, 0x7, 0x6, 0x3, 0xdb2, 0x800}], ['\x00', '\x00']}) close(0x3) write$cgroup_int(r8, &(0x7f0000000140), 0x12) 4.261958913s ago: executing program 2 (id=3609): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40400d0}, 0x0) recvmmsg(r0, &(0x7f0000003c80)=[{{0x0, 0xa5, 0x0}, 0xffffffff}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001500)=""/4112, 0xe94}, {&(0x7f0000000180)=""/82, 0x52}, {&(0x7f0000000040)=""/212, 0x164}], 0x3}, 0x400000}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=""/212, 0xd4}, 0x400800}], 0x153, 0x20000, 0x0) 3.471778458s ago: executing program 1 (id=3618): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write(r0, &(0x7f0000000000)="2e000000010002", 0x7) (fail_nth: 3) 3.152102882s ago: executing program 2 (id=3620): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet(0x2, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000013000100000000000000000007000001", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a8018000480140006"], 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x4004000) r4 = socket(0x80000000000000a, 0x2, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e005", 0x26}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe9", 0x2a}], 0x2}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)=""/1, 0x1}, {&(0x7f00000001c0)=""/132, 0x84}], 0x2}, 0x0) getsockopt$inet6_buf(r4, 0x11, 0x6, 0x0, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'nicvf0\x00', 0x8fd2}) ioctl$TUNATTACHFILTER(r7, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f00000000c0)=[{0x60, 0x6, 0x3}, {0x6, 0x0, 0xfe, 0x10000000}]}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r9) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100), 0xffffffffffffffff) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="810902000000000000000300000008000100000000001c0007800c00018008000100"], 0x38}, 0x1, 0x0, 0x0, 0x2008810}, 0x48080) ioctl$sock_SIOCGPGRP(r8, 0x8904, &(0x7f0000000000)) r12 = getpid() sendmsg$nl_generic(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={0x25d0, 0x36, 0x301, 0x70bd2d, 0xfffffffc, {0x6}, [@typed={0xc, 0x16, 0x0, 0x0, @u64=0xffffffffffff7fff}, @generic="942bfcbdd8d61d4b91dd24bb7e3e5913af7d0662000000010000000141319aa6febfac7ca5fc612b66c9f16a83e68fcf5698", @nested={0x217a, 0xb5, 0x0, 0x1, [@generic="43033720926c5a0909c05dfa493e095989d8fb1e5746c4d077ab6cf2ac70cec686cfbe7ef217a2fc50fde1b0d2757012a5b817ea3af4f70cd09ff2a48cdd6dd2b850021e969b9eba61ad7e25aef63b5a10eaf5d0dd80b3b698f3146d4a27dabec0e2b7a0bb1280279a630413eac4937a8e95c4840da6a73eed1498a6ed11249e355e77138dac32e4546fb94eedef496f3e37fbff00394ede493467152af8f71d753db5c5863167ca11b59238001de8d29ede9f4605930f079b5a0b2be3591ab978d1bdd63435", @generic="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", @generic="0b5498dc0f1a89c7ba66d3fa905fe45cd887e90429ab482944eb684c3a577a4518ed3880bca8a3f00b73564e7030b5f205a8a92f5e0de213a0e4feea48c454138aef053bdddf011a096237b36a4535c42e49c27b4740883244b54a6365130c15cf5868a25bbcc4340bde06af7b2525300cd7cb427b916422fdb92b59bfb12dc33a842dfdee0a0105ae055312720a3554031eff86cdde8c2a785956550361ce3bb52c3e4d", @generic, @nested={0x4, 0x20}, @generic="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", @typed={0x8, 0x104, 0x0, 0x0, @pid=r12}]}, @nested={0x230, 0x7e, 0x0, 0x1, [@nested={0x22c, 0xe5, 0x0, 0x1, [@nested={0x227, 0xe1, 0x0, 0x1, [@typed={0x85, 0x16b, 0x0, 0x0, @binary="e45832261c321f66aab6fb771cab47ca3ecf69e03d372ca3b3d7192b661623613094ada340b89ab3878eeaabacb23370e9a63a25e78ac3053cfeeb6492c1232531cae829fa9904aeaccd1415b48b1029205e76c47a3b285cbb9e88d2cc06e92c32dfe40dc606146723ff33b682c537b6de41c3d4b1084d7ad5a56910c43373e1d7"}, @nested={0x85, 0x15f, 0x0, 0x1, [@typed={0x8, 0x85, 0x0, 0x0, @fd=r2}, @typed={0xa, 0x158, 0x0, 0x0, @str=',]$:\\\x00'}, @nested={0x4, 0x52}, @generic="0c3b7d600a080ca839456605b2ac65a0eae6fca069536c535dfdb2c68724ff35472cce5b47fc80d8a49d5476dbe4a2a92fe9c02cb1354a7c259af72d3e1de9ffe5a1ed2471085349a05d71a302cbe9af77e2546f44c8c9fd2f05de195eaad769de468b3176", @nested={0x4, 0x16}]}, @generic="9ad224328ac81dc8f7d002a1736ad8fd4eac0bf3fed99e8968676f83babc99cffd17e893a0ef8c45e363bd5b000859c390ced7e54c27ce52ec543c078275f2d66e7ed6961c0b2b034d23b60e952fd9f08ecb2751d2bdff", @nested={0xb9, 0xd7, 0x0, 0x1, [@generic="af86d6cd0bea174b81166cc4872ae5d4e0fde135a6044843f6c8a1893efb20a5a0154b4c18acc2700f3620dccd0563721fa57141b87be4afd03c5409f2e5810b9f841f8dfbc8", @generic="809e505e2b752ce075e3e49930a960ef8205479c2eaab6d154e58d9ea48eee736f6e385ca75cd7ddce26b29dc438d89ef6f37566abdfbcc2fecbb51e5f71f56bbc276d149f95a0c2ffcd555b57fd3e53d79b28", @typed={0xa, 0x12ac, 0x0, 0x0, @str=',]$:\\\x00'}, @typed={0x4, 0x11e}, @typed={0x8, 0x59, 0x0, 0x0, @fd=r8}, @nested={0x4, 0x1c}]}]}]}]}, @generic="f09c9b3408b9779956806acc0997d90d5628a6ad20e800100000ed1d74b727bab75640aee0d721a68b5bc2aca5e219359231330efb706b61f54a8df5397761281220a5810a4782e55a151e24b830f0155cdc98aceaef46523499af297d1a0450e31327b4db3b9aa9c96449d53928236a51868652368f863a84d6b1db5afeaa31c164eff1df933d018503b12838a6c296b3b05f9e64855c2b5b8e3d8e77d279413f807257ea184ec4c75654d616451b5779d927f6f023fb1679413e849b2132b400c5a9287a8afa944ec8a6edbaf7ff4fb3df750e147d50ec34d48ba5", @generic="b12bea0ca33e5ac2bbd2163ce1a9b5d81de122ca044099dbbb995b6d063188a6ddb972cf26b364e928c5348833016f975eeef2d88620b9ebc955095100afbb1f903c13c26a03de89787e4dfed1fc650fb613f372ac57eb4393b53f1eb80634251e60beadddefa20f953f5d15e1b702f4712bd20cadac6559a82c9c9008bd598f1be886605c61ed41550cdd3332f7e111399a0a5105491da593e017d747ce7585770292dbe54894c2d878ede0b369618b0cd9732286e6e669223cef4cbe1acdd363ba517b41ef492db309d1c53e4e9b7aaaa293510117a696fabbb5f60dd379866db46eb52a57ad", @typed={0x4, 0x112}, @typed={0x8, 0x79, 0x0, 0x0, @ipv4=@private=0xa010100}]}, 0x25d0}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xae, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) 3.151870772s ago: executing program 1 (id=3621): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x50}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)=ANY=[@ANYBLOB="38000000090601020000000000000000000000000900020073797a31000000000500010027000000100007800c00018008000140fffffffe"], 0x38}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'hsr0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYRES64=r2, @ANYRESHEX=r3, @ANYRES8=r1, @ANYRESOCT=r3], 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x20000805) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x4044005}, 0x814) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r6 = openat$cgroup_type(r5, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r6, &(0x7f0000000280), 0x9) r7 = openat$cgroup_procs(r5, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000c40), 0x12) r8 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r8, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, 0x0, 0x0) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(r7, &(0x7f0000000080), 0x12) r10 = openat$cgroup_ro(r9, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r10, &(0x7f0000000200)=0x1, 0x12) 3.144056546s ago: executing program 3 (id=3622): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) setsockopt$sock_int(r1, 0x1, 0x7, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x3}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 3.022755634s ago: executing program 3 (id=3623): socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="280100000000000001000000"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001c00010429bd7000ffdbdf2507000000", @ANYRES32=r2, @ANYBLOB="e0ff8b0a0a0002"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x24040040) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001d"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0xc31fe084736598c) 2.959168189s ago: executing program 4 (id=3624): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r1, 0x8000000000000003}, 0x18) sendmmsg$inet(r0, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000001c0)="ef", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000002b40)=[{&(0x7f0000000880)="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", 0x1000}, {&(0x7f0000001880)="e684054ae69028b461c9433d55b7e99521b3a59d5b73e323d1c486097423c95e58d89cd19fd596488ac29bc035baad7e2aaa49892fb425b25cf700a0549dc7eaf52284565789964a1cae47bf20bc1729e0fce341d2525b613a61042d38ce18f98356b1b58eedd3a3ac02", 0x6a}, {&(0x7f00000006c0)="1565fdcb5a36c9bf669e1569437ec6ac7b2424267b6ecf7d2d0e499b1169e34337578c9657df923adbe958a00d07322a7f9e2fba3cc0ae7fe20d7b6816e019c637196531b68fa0569c8ad98416bed633c6b3af22f2dfbdd7bc840c3f6dc14b323f2583dae339aa5a56379ef4bec4ee9200000000000000053fd434724e03a08d0798d58d24f530b0c63de9b142d8fbfb4ec3c91f9018767f09c76022bb176fb78936a39bb57524719396ec03d954da4e555f4b0a92cbc94b6447605910e96a5ba9518b2deab5a59c6dbbfff4df38aae3cfb22e043dd5a4611f5ad9aa0f5a", 0xde}, {&(0x7f0000001a00)="52a228e5ed69fff21319a7add01e2d606c209e309419f79b5f1208", 0x1b}, {&(0x7f0000001a40)="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", 0xfe}, {&(0x7f0000001b40)="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", 0xded}], 0x6}}, {{0x0, 0x0, &(0x7f0000004540)}}], 0x3, 0x6ef8eb021516f219) 2.895653015s ago: executing program 0 (id=3625): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000008f0800000000000000000000850000004f000000850000007d00000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r2, 0x0, 0xe, 0x0, &(0x7f0000000540)="e3006b670002ec67838717bd88a8", 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) socket$packet(0x11, 0x3, 0x300) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, r4, 0x215eb000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002280)=@deltfilter={0x24, 0x2d, 0x800, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x2, 0x9}, {0xfff9, 0xffe0}, {0xd, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x8) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c00e2ff0f00ffff25bd70000104000000000000", @ANYRES32=0x0, @ANYBLOB="4400060021200000240012800c0001006d6163766c616e00140002800800030002000000080001001000000008000500", @ANYRES32=r3, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) 2.791085103s ago: executing program 4 (id=3626): socket(0x18, 0x2, 0x7) sendmsg$kcm(0xffffffffffffffff, 0x0, 0xff00) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r2, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e000300000004"], 0x48}, 0x1, 0x0, 0x0, 0x4c0c0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20008040) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$pppoe(0x18, 0x1, 0x0) syz_emit_ethernet(0x6e, &(0x7f00000000c0)={@local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00\'$', 0x38, 0x3a, 0xff, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x500, {0x6, 0x6, ':yE', 0x2, 0x3a, 0x0, @private2={0xfc, 0x2, '\x00', 0x3}, @mcast2, [], "8029335287b7a081"}}}}}}}, 0x0) 2.757895346s ago: executing program 4 (id=3627): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x14, 0x23, 0x9, 0x70bd25, 0x25dfd3ff, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x24040811}, 0x8410) sendmsg$DEVLINK_CMD_RATE_DEL(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x1c, r3, 0x1, 0x0, 0x0, {0x54}, [@DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x1c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="480000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014001280090001007665746800000000040002800a000100aaaaaaaaaa00000008000400fc"], 0x48}}, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r5, 0xffffffffffffffff, 0x32, 0x0, @void}, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, 0x0, r0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r6, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001480)={0x3, 0x3, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1800000000000000000000002f0000009500000000000800"], &(0x7f00000013c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r10 = openat$cgroup_devices(r9, &(0x7f0000000200)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r10, &(0x7f0000000500)=ANY=[@ANYBLOB='b *:* r'], 0x8) write$cgroup_devices(r10, &(0x7f0000000140)=ANY=[@ANYBLOB='b *:4\tw'], 0xa) r11 = openat$cgroup_devices(r9, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r11, &(0x7f0000000280)={'b', ' *:* ', 'rm\x00'}, 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r8}, 0x94) 2.677667696s ago: executing program 2 (id=3628): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x42, 0x0, 0x0, 0x0, 0x20000}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ab92b}, {0x85, 0x0, 0x0, 0x8}, {0x4}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x203f}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x9, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.561465142s ago: executing program 4 (id=3629): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=@setlink={0x2c, 0x13, 0x5, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r2, 0x312}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0x1, 0x7000000, 0x0, 0x40000}, 0x42) 2.526677471s ago: executing program 2 (id=3630): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40400d0}, 0x0) recvmmsg(r0, &(0x7f0000003c80)=[{{0x0, 0xa5, 0x0}, 0xffffffff}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001500)=""/4112, 0xe94}, {&(0x7f0000000180)=""/82, 0x52}, {&(0x7f0000000040)=""/212, 0x164}], 0x3}, 0x400000}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=""/212, 0xd4}, 0x400800}], 0x153, 0x20000, 0x0) 2.395383238s ago: executing program 4 (id=3631): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048011}, 0x44014) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x2c, 0x0, 0x5, 0x0, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x408d1}, 0x40800) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x44, 0x0, 0x300, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0xb}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x9}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x7}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xd}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x4000084) sendmmsg(0xffffffffffffffff, &(0x7f00000029c0), 0x400006d, 0x20000004) shutdown(0xffffffffffffffff, 0x2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006001700800a0000140002"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x5, &(0x7f0000000880)=ANY=[@ANYBLOB="18020000740400000000000000000000850000004100000085000000a000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4000002, 0x3032, 0xffffffffffffffff, 0x2a1cf000) r3 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) 2.228527876s ago: executing program 1 (id=3632): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x7, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000001d7118aa000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1f, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff000000007ba100000000000007010000f8ffffffb702000005000000b703000009000080850000007100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000000)={@initdev, @loopback}, &(0x7f0000000080)=0xc) 2.073242735s ago: executing program 1 (id=3633): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) setsockopt$sock_int(r1, 0x1, 0x7, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x3}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 2.044240433s ago: executing program 3 (id=3634): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000020303000000000000000000000000000800"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={0x20, 0x1, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x69}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20048001}, 0x5800) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x38, r2, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0xc, 0x9, 0x400, 0x1ff, 0xfffa, 0x4, 0x8]}}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004080}, 0x4000) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0x7, [@type_tag={0x2, 0x0, 0x0, 0x12, 0x2}, @struct={0x2, 0x5, 0x0, 0x4, 0x1, 0xe8, [{0x4, 0x1, 0x2}, {0xf, 0x0, 0x101}, {0xf, 0x3, 0x80}, {0xe, 0x1, 0x3b9}, {0x0, 0x0, 0x81}]}]}, {0x0, [0x5f, 0x5f, 0x5f, 0x30, 0x2e]}}, &(0x7f0000000380)=""/177, 0x73, 0xb1, 0x0, 0x9}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1f, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000040000000000000003000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001800000850000006f00000095", @ANYRESOCT=r0, @ANYRES64], &(0x7f00000002c0)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x78, '\x00', 0x0, 0x0, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) 2.00473498s ago: executing program 0 (id=3635): socket$inet6(0xa, 0x800, 0x7c) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x13, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="61124d000000000061134c0000000000bf2000000000000015000f00511b48013d030100000000009500000000000000bc26000000000000bf67000000000000070300000fff07006702000003000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586162c17600674290ca9d8d6413b8199e34f67ceaaa78710f9f8aba4765c91382f497585ca39c595b21afa6bce62b5ab0d44e9c32ad6f0349d92962a58d39494a19a9183362382792ac85578d3de07b7e155cf4ee5e3dd51212d2831bd8e2655b2fbd88791e4c66c832a774919b28b8a62711f0f156e636804e1d3f44a5ff3d63a3a51f0c7ec0c8c25e072194ddd83aa155a537e15c0d91f502deef03f83e826718705c9aef9613ac4a325a428d147c1749196e94226671fd9573ab0d079d4"], &(0x7f0000000100)='GPL\x00'}, 0x94) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendmmsg$alg(r1, &(0x7f0000000040), 0x0, 0x880) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = openat$cgroup_devices(r2, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f00000002c0)=ANY=[@ANYBLOB='c 75:', @ANYRESDEC=r2], 0xc) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000500)=""/88, 0x58}, {&(0x7f0000000200)=""/83, 0x53}], 0x2, 0x0, 0xffffffffffffffef}, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0xa3}, 0x8005c}) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r4, 0x11c, 0x3, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x88fe) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x0, 0x0, 0x6}, 0x10) r6 = socket(0x1e, 0x4, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000"], 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb01005ffc"], 0x0, 0xfc5f}, 0x28) recvmmsg(r5, &(0x7f0000008280)=[{{0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}, 0x8}], 0x1, 0x40000180, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f0", @ANYBLOB], 0x48}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'hsr0\x00', 0x0}) sendto$packet(r6, &(0x7f0000000080)="9d96914067bf7a3be5510b29b4105063f34b32429eef3c72b4c002496c9b12df614608", 0x23, 0x0, &(0x7f00000000c0)={0x11, 0x7, r8, 0x1, 0x8, 0x6, @remote}, 0x14) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000240)={r7, 0xa, 0x9, 0x3ff}) socket$inet6(0xa, 0x3, 0x3a) 1.923576392s ago: executing program 1 (id=3636): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x500, 0x340, 0x11, 0x148, 0x0, 0x300, 0x468, 0x2a8, 0x2a8, 0x468, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x6, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xf8, 0x128, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00', 0x0, 0x4, 0x0, 0x2}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x560) 1.85234333s ago: executing program 3 (id=3637): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x4734, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000740)="98e2", 0x2, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x2000000000000061) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000140)={'veth1\x00', &(0x7f0000000240)=@ethtool_sset_info={0x4a, 0x7, 0x3}}) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) 1.79976417s ago: executing program 4 (id=3638): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) epoll_create1(0x0) socket$l2tp6(0xa, 0x2, 0x73) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b4000000000000006117d00000000000a6070000000013009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x1, 0x84) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000400), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) socket(0x1e, 0x4, 0x0) write$nci(r0, &(0x7f0000000140)=ANY=[], 0x14) 1.70157916s ago: executing program 1 (id=3639): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a6c000000060a0104000000000000000002000000400004803c0001800a0001006d617463680000002c00028014000300f4f03b020000000002008bb36b61979e090001006c3274700000000008000240000000000900010073797a30000000000900020073797a32"], 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) socket(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="810902000000000000000300000008000100000000001c0007800c"], 0x38}, 0x1, 0x0, 0x0, 0x2008810}, 0x48080) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r3) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x40, r5, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_DEVKEY={0x20, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x10, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x2}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4883}, 0x2400c890) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_CONFIG(r7, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="00000000df250c0000000800040000a86701"], 0x1c}, 0x1, 0x0, 0x0, 0x2000040}, 0x24004044) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="40c7ca15", @ANYRES16=0x0, @ANYBLOB="020025bd7000fcdbdf250e00000008000100030000000c000600030000000000000008000300", @ANYRES32=r4, @ANYBLOB="08000100000000000800010003000000"], 0x40}, 0x1, 0x0, 0x0, 0x40050}, 0x40) r8 = socket$packet(0x11, 0x2, 0x300) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000100)=ANY=[@ANYBLOB="700000001900010000000000000080001d0109004d00118025b576faa323b473fe7783bc4a506cf756740574b89d316af9b5963870ef3391f3ac176f884e8ccdd6e1db9b2bb2e5c90fafb663cdebaede447dc8f6f61c6615fcf740adda486b8f11"], 0x70}}, 0xc890) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(r10, &(0x7f0000000540)={0x0, 0x20000, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01000000000000000000140000000800200007001e0018000180140002006e657464657673696d3000000000000008001500000000020800130000000200080014"], 0x4c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000013000100000000000000000007000001", @ANYRES32=r12, @ANYBLOB="00000000000000001c"], 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x4004000) r13 = epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008004}, 0x4) sendmmsg$unix(r15, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r14, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r13, 0x1, r14, &(0x7f0000000100)={0x20000004}) 1.700184565s ago: executing program 3 (id=3640): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_x25_SIOCDELRT(r0, 0x890c, 0x0) write(r0, &(0x7f0000001500)="32bae694e79188862767a02f7d8aa27c3f82de1a36a58504fe55ff50889f275bc67af8313c6c4ccf67a245a1e626e29b46c15e7e78efdfe4071c5e0e0d306aa8f01365a9e70a8a45d578659d2d084efb83007e5e63bfc7c974c93335189677cadd4b47bcf89cf56561d7403e29b8566f932a00ba1f4bfd52b1f06d26812e05fc99467010dca48faa3844bc29e9598f21b7e343da97e7f387c72a5256117e5396bd61f3ad078e14c0", 0xa8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x50}, @call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0xe, 0x0, &(0x7f00000000c0)="00000000000000ce94327fc1a80c", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x54, 0x12, 0x1, 0x0, 0x0, {0x29, 0x0, 0x0, 0x0, {0x0, 0x4e23, [0x0, 0x2], [], 0x0, [0x1, 0x3]}}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x3, "11000000"}]}, 0x54}}, 0x20004010) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000e40), 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000440)={r2, &(0x7f0000000000)='(%][!\'@-.^$#\x00', 0x200000, &(0x7f0000000240)={@_ha_fsid={[0x6, 0x9497]}, {0x2, 0x7, 0x3, 0xf}}, 0x2, &(0x7f00000002c0)={@_ha_fsid}, &(0x7f0000000300)=0xd57f}) ioctl$TUNSETFILTEREBPF(r8, 0x800454e1, &(0x7f0000000480)=r1) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="050300000000000000000a00000008000300", @ANYRES32=r7], 0x1c}}, 0x0) read$alg(0xffffffffffffffff, &(0x7f0000000500)=""/4096, 0x1000) connect(r6, &(0x7f0000000100)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x80) 1.541476131s ago: executing program 2 (id=3641): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000ac0)=@bpf_lsm={0x18, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, [@ldst={0x3, 0x0, 0x6, 0x0, 0x0, 0xffffffffffffffe0}]}, &(0x7f0000000100)='GPL\x00', 0x7, 0xd8, &(0x7f0000000300)=""/216}, 0x94) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000079102800000000003d500000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r1, 0xffffffffffffffff, 0x1a, 0x0, @val=@perf_event={0x7}}, 0x18) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="00000000a705000000000700000000000000005adfb3544004", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r2, 0x0, 0xffffffffffffffff}, 0x10) unshare(0x20000400) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$alg(0x26, 0x5, 0x0) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) setsockopt$inet_buf(r7, 0x0, 0x10, &(0x7f00000000c0)="170007000200020000ffbe8c5ee17688a2006c0001feffff7f77fc5ad90200fb6a880000d6c9db0000db15d088bd8b7000000000d9ce9bc7e28db3000200ff01800a0000ebfc0607bdff59100ac45761547a681f009ceeff5acba400001fb700674f00c8e365d00b5033bf79ac2dfc061f15003901dee2000000000062068f5ee50c08af9b1c568302ffff02ff03310800ab0840024f02d8e9e90539062a80e605007f71174ab498ff0b3e5a1b47b6df7b23de8caa000000", 0x10c) bind$alg(r6, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r8 = accept4(r6, 0x0, 0x0, 0x80000) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000000)="ad00"/16, 0x10) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x1405, 0x20, 0x70bd2c, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0x4004081}, 0x20000000) recvmsg$can_raw(r8, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f00000005c0)=""/240, 0xf0}], 0x1}, 0x43) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x128, r5, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_KEY={0x114, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}, @NL802154_KEY_ATTR_ID={0x60, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x3c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x1ffe5}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "a270e3051e10627326c7f960f81230d5"}, @NL802154_KEY_ATTR_ID={0x90, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x261}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x6}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xfff}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x5c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}]}]}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) socket$nl_route(0x10, 0x3, 0x0) splice(r3, 0x0, r4, 0x0, 0x6, 0x0) r9 = getpid() write$cgroup_pid(r3, &(0x7f0000000400)=r9, 0x12) r10 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r10, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r10, &(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10) connect$inet(r10, &(0x7f0000000200)={0x2, 0x4e22, @remote}, 0xa) setsockopt$inet_tcp_int(r10, 0x6, 0x6, &(0x7f0000000080)=0x80000000, 0x4) 1.101485153s ago: executing program 0 (id=3642): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910fa00000000006200faff080000009500050000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x22, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1000}, 0x23) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x4, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0x246, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x0) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'macvtap0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001c00010029bd7000ffdbdf2507000000", @ANYRES32=r6, @ANYBLOB="80007f0a0a00020091"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040004) sendmmsg(r5, &(0x7f0000000000), 0x400000000000235, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'vxcan1\x00', 0x0}) sendmmsg$inet6(r5, &(0x7f0000000bc0)=[{{&(0x7f0000000340)={0xa, 0x4e22, 0x2, @mcast1, 0xfffffff9}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000380)="c2ba76f399242ebaa0256bf7622598232e2a184e8f8e44b069541474558d1bdf68e834ba1bbd68d2bc58b58dac5c6cac88b128561d852f0fc7a4ad3cb4861891c828cf24c327539f1535af9c701a5660d1744f0472", 0x55}, {&(0x7f0000000400)="ca65b26cbb8c9cbc0933ddd612a41f60eddd5c5a2a6cc104f7b148ee47a7573b1269687dc8ecd0d5877bfdfa7dd99da33b89b15aff1b1e", 0x37}, {&(0x7f0000000440)='4.Z', 0x3}, {&(0x7f0000000480)="51aa7aa8768a08c35671aed5d8ed847b10ccfff204983f613a1208d36f27ab6ea92da4b7398c7b3d041a8d76cf26f009e1fce35d40229df081254f931845173a5504ed8b0d7d625ee55d659ebbb7d16bc0ca712b6ebe143f8be6158e8eb85fe66232e9ad9467dc83b72e064d82eb69f0013827736ea4f28d478e566bd21576bfb59533e8dd477731ce64fb094eb9b5a4f895ef8f858e9c9c4fcc010c78e1", 0x9e}, {&(0x7f0000000540)="163d639a465986ff32438d3f62160ec46ddfd4ad9216591c", 0x18}, {&(0x7f0000000580)="c325c4f3308092ec7dcad0dbd195dd59072cc7", 0x13}, {&(0x7f00000005c0)="ec82a7d912b91466377d37d18b625f52521a53c8e298dee93e7e7c19f3baa6cc3d8b912ccb68ab5be6d128325680797eb00fa6f741f6e8ede190a9213ade2c36a49074c2c50a26d61497b12707eaf73f19621e69ec2d245ba42c08649874f65020836d31f0a60eff6c5f4a77e39d194335230c58adcdacf67e918310cfda0caa9ae67b1fa2ebe8acee9c70febce963e86b8727e1ddc4", 0x96}, {&(0x7f0000000680)="7cc4b412ae09fc2a603a9bee66343a4506a93350e5fae3638356463b2c7f92a007923c1c5f78ff5d9e313eaa39e4555543ee616a1130a5735c2cee7207d4c971096f82dbc4fef2d604050041b0a50051adbf96bbbfafe57085377c", 0x5b}, {&(0x7f0000000700)="93163c38f2df64199c77f41115eeff05e9e46ce8", 0x14}, {&(0x7f0000000740)="411d0a4110c3b97aa24920533a9fa447ba14dfff76c0756b4a063f5b04ab28bb5e5408f112a9bd94917b7faaf87bd26cb6", 0x31}], 0xa, &(0x7f0000000880)=[@rthdrdstopts={{0x28, 0x29, 0x37, {0x3c, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0x3}, @jumbo={0xc2, 0x4, 0xffff7364}]}}}, @hopopts_2292={{0x78, 0x29, 0x36, {0x3c, 0xb, '\x00', [@ra={0x5, 0x2, 0x1ff}, @enc_lim={0x4, 0x1, 0x1}, @enc_lim={0x4, 0x1, 0x1}, @calipso={0x7, 0x48, {0x2, 0x10, 0x9, 0x7, [0x0, 0x2, 0x2, 0x5, 0x9, 0xffffffff, 0x8000000000000001, 0x7]}}, @jumbo={0xc2, 0x4, 0x9}]}}}, @tclass={{0x14, 0x29, 0x43, 0x6}}, @hopopts={{0x98, 0x29, 0x36, {0x29, 0xf, '\x00', [@jumbo={0xc2, 0x4, 0x9}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x2, 0x52, "ce26b94daa777263668b6a1c949d90964af310fbbfcc2bdca1d0e11a402efdeee958ffc2cf693ef6e79f6a6be283f9deab4dd3992987bcf7d659de2a2a092e676bfee852aeb195f94c84553b8846bc6300f3"}, @ra={0x5, 0x2, 0x7}, @enc_lim, @pad1, @hao={0xc9, 0x10, @local}]}}}, @rthdr_2292={{0x58, 0x29, 0x39, {0x87, 0x8, 0x2, 0x5, 0x0, [@empty, @ipv4={'\x00', '\xff\xff', @loopback}, @empty, @private2]}}}, @dstopts={{0x38, 0x29, 0x37, {0x16, 0x4, '\x00', [@calipso={0x7, 0x18, {0x2, 0x4, 0x4, 0x800, [0x1, 0xffffffffffff0000]}}, @jumbo={0xc2, 0x4, 0x3}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@private0, r7}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x2b}}, @hopopts_2292={{0x100, 0x29, 0x36, {0x2e, 0x1c, '\x00', [@generic={0x6, 0xdb, "572917c7d3378e09cf712e33ef91df710dcec5f9d90c9566737b3a252f3ce4180cfc312195de5de6f2ed21fa8c1037567518014dfc53c0e2b3d060a9c91c84831dfd4d0689bf7f853d85e6640eb8a930144729f8c3f805334749661cb3d47e723a2148da055949b83323b1f707e90f81a05a59af25655689c1087390256f0d2a9457ebb694e6c12b11b944e19490ae207a3a8dd97f42b434d2b8adc61b0f7cefae34fc7e7a8780ec74ef3b53157ad969d399c35f326b01176dcd71c735af22889e653c26aed8f9dd148db479465e83487ea572720df4a96ddd56c7"}, @ra={0x5, 0x2, 0x81}, @pad1]}}}], 0x320}}], 0x1, 0x4000) 997.603ms ago: executing program 0 (id=3643): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000800)={'filter\x00', 0xb001, 0xff03, 0x3a8, 0x2c0, 0x1d0, 0x1d0, 0xe8, 0x2c0, 0x2c0, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}, {{@uncond, 0xc0, 0xe8, 0x0, {0x0, 0x1e03}}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x46e, 0xffff}}}, {{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x0, 0x0, 0x2}}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x3f8) (async) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000240)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x7, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local, {[@cipso={0x86, 0x8, 0x3, [{0x5, 0x2}]}]}}, {{0x0, 0xfffe, 0x41424344, 0x41424344, 0x0, 0x2, 0x9, 0x0, 0x4, 0x0, 0x1c, {[@window={0xa, 0x3}, @timestamp={0x5, 0xa}]}}}}}}, 0x4e) (async) read(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) (rerun: 64) sendmmsg$inet6(r3, &(0x7f0000004cc0)=[{{&(0x7f0000000040)={0xa, 0x4e1e, 0x1ff, @private0, 0x401}, 0x1c, &(0x7f00000001c0)=[{&(0x7f00000003c0)="f5", 0x1}], 0x1}}, {{&(0x7f0000000000)={0xa, 0x4e24, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8e}, 0x1c, &(0x7f0000000d80)=[{&(0x7f0000000c40)="ea", 0x1}], 0x1}}], 0x2, 0x40) (async) shutdown(r3, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f00000004c0)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x277b, 0xfffd}, 0x90) 880.531195ms ago: executing program 0 (id=3644): socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="280100000000000001000000"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001c00010429bd7000ffdbdf2507000000", @ANYRES32=r2, @ANYBLOB="e0ff8b0a0a0002"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x24040040) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001d"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0xc31fe084736598c) 0s ago: executing program 0 (id=3645): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = socket(0x28, 0x5, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r1, 0x4) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000000100)=[{{0x0, 0xffffffc2, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) r2 = accept4$unix(r1, 0x0, 0x0, 0x800) recvfrom$unix(r2, &(0x7f0000000140)=""/248, 0x1ffd4, 0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3, 0x4) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x43, 0x0, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000002c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(r5, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x5c, r6, 0x2, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2, 0x28}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x4000010) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000003ec0)=ANY=[@ANYBLOB="3400000043000701fefffffffcdbdf25027c00001800458014000400070000000000000003000000000000aa080001"], 0x34}}, 0x2004c000) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000002780)=ANY=[@ANYBLOB="180000002f00090028bd980f000000000400000004000e80"], 0x18}, 0x1, 0x0, 0x0, 0x42884}, 0x10) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x70, 0xff00, 0x90, [0x3, 0x0, 0x0, 0x0, 0x200000001303, 0x200000001330], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000001000000000000000000000000e07f00feffffff00000000000000000000000000000000000000000000f9ff0000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000"]}, 0x108) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000200)=0xc) sendmsg$netlink(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000001c0)=ANY=[@ANYRESOCT=r4, @ANYRES16=r4], 0x14}, {&(0x7f0000000440)={0x1e8, 0x2a, 0x1, 0x70bd29, 0x25dfdbff, "", [@typed={0x8, 0x160, 0x0, 0x0, @ipv4=@remote}, @typed={0x4, 0x149}, @typed={0xc, 0x12e, 0x0, 0x0, @str='\\h-%+[.\x00'}, @nested={0x10a, 0x160, 0x0, 0x1, [@generic="f6d3d7cd66aa1c205cccaf2ada9dba5d7aca2b1c8e936ba8eb7ffad684dea2623fdadb73097287b55aa75472cd3f0e87794aeea5f628e6b7ea379c018ed74e8bd1c141c615243bbde57dd959758cf7d13eaeb0cbc5d2f52ad9c5ac9068650b7bf9bdbe9886f10de7a82dbad0dcc798bb41f60bedb0efecedcaffcd85f9307753ddf1f492e97dec42872b8c31ced82d036d2e332a522166abde29dd4298ca4012349bee7e3d869fea692d89f645116ad3a16520ce22006c0330fcfc56d2", @typed={0x22, 0x75, 0x0, 0x0, @binary="d9eaf53cdb8fabbb2ed36f56dfa3c60dc63a9305f33640c17cc69be0b856"}, @typed={0x8, 0x59, 0x0, 0x0, @fd=r8}, @nested={0x4, 0x4f}, @generic="6f7868942ab66ee53cf878de824a385290adc9d1ce4d72d254"]}, @nested={0x8, 0x121, 0x0, 0x1, [@nested={0x4, 0xe3}]}, @typed={0x8, 0xdb, 0x0, 0x0, @pid=r9}, @nested={0x4, 0x68}, @generic="2fa5d90cd016e7453bbfeebdc45271ffe2a7f8bb5a0449b85c7467876f2a436e9c3de9dcd12d90391c9ff1507d77a067cceee6600c5cf6d8198ac691cb83d1f68bdbdf5da6ab318150fa9b0388733c2866a90318572056c805dfd666d06f05c9b7a39f11a7797cf5a3d72e165b251b5a4e4acb25911ea536c8e33b746b0cc54f0c95519264e7b4a5a1cd1cbb4ec402af83df8c56", @typed={0xb, 0x13e, 0x0, 0x0, @str='broute\x00'}]}, 0x1e8}], 0x2}, 0x20000000) kernel console output (not intermixed with test programs): mode [ 413.742759][T15993] tipc: Resetting bearer [ 413.774484][T15993] bond10: left promiscuous mode [ 413.782962][T15993] 8021q: adding VLAN 0 to HW filter on device bond11 [ 413.796838][T15993] 8021q: adding VLAN 0 to HW filter on device bond12 [ 413.811575][T15993] 8021q: adding VLAN 0 to HW filter on device bond14 [ 413.826317][T15993] bond15: entered promiscuous mode [ 413.832621][T15993] macvlan4: left promiscuous mode [ 413.839395][T15993] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 413.923574][T16001] 8021q: adding VLAN 0 to HW filter on device bond13 [ 413.968550][T16007] 8021q: adding VLAN 0 to HW filter on device bond0 [ 413.977927][T16007] 8021q: adding VLAN 0 to HW filter on device team0 [ 413.994968][T16007] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 414.040833][T16007] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 414.056541][T16007] veth1_vlan: left promiscuous mode [ 414.064771][T16007] veth0_vlan: left promiscuous mode [ 414.071823][T16007] veth0_vlan: entered promiscuous mode [ 414.081031][T16007] veth1_vlan: entered promiscuous mode [ 414.095062][T16007] veth1_macvtap: left promiscuous mode [ 414.102035][T16007] veth0_macvtap: left promiscuous mode [ 414.109185][T16007] veth0_macvtap: entered promiscuous mode [ 414.116123][T16007] veth1_macvtap: entered promiscuous mode [ 414.130935][T16007] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 414.139597][T16007] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 414.148438][T16007] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 414.156767][T16007] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 414.165778][T16007] mac80211_hwsim hwsim7 wlan0: left promiscuous mode [ 414.175052][T16007] 8021q: adding VLAN 0 to HW filter on device bond1 [ 414.287486][T16007] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode [ 414.296625][T16007] 8021q: adding VLAN 0 to HW filter on device bond2 [ 414.307279][T16007] veth3: left allmulticast mode [ 414.313118][T16007] ip6gre1: left promiscuous mode [ 414.318329][T16007] ip6gre1: left allmulticast mode [ 414.326688][T16007] bond3: left promiscuous mode [ 414.331449][T16021] netlink: 272 bytes leftover after parsing attributes in process `syz.2.2750'. [ 414.342794][T16007] bond3: left allmulticast mode [ 414.350495][T16007] 8021q: adding VLAN 0 to HW filter on device bond3 [ 414.364905][T16007] 8021q: adding VLAN 0 to HW filter on device bond4 [ 414.374539][T16007] veth9: left allmulticast mode [ 414.386918][T16007] bond5: left promiscuous mode [ 414.393165][T16007] bond6: left promiscuous mode [ 414.401569][T16007] veth15: left allmulticast mode [ 414.407889][T16007] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 414.517456][T16024] netlink: 'syz.2.2751': attribute type 1 has an invalid length. [ 414.543878][T15800] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 414.556771][T15800] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.581224][T16027] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2751'. [ 414.612048][T16027] veth21: entered allmulticast mode [ 414.645002][ T3333] bridge0: port 1(bridge_slave_0) entered blocking state [ 414.652240][ T3333] bridge0: port 1(bridge_slave_0) entered forwarding state [ 414.664038][ T3333] bridge0: port 2(bridge_slave_1) entered blocking state [ 414.671337][ T3333] bridge0: port 2(bridge_slave_1) entered forwarding state [ 414.719596][ T3298] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.728969][ T3298] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.756516][T16024] 8021q: adding VLAN 0 to HW filter on device bond20 [ 414.780547][T16029] bond19: (slave veth0_to_bond): Releasing active interface [ 414.793011][T16029] veth0_to_bond: left promiscuous mode [ 414.799344][T16029] veth0_to_bond: left allmulticast mode [ 414.814347][T16029] bond20: (slave veth0_to_bond): making interface the new active one [ 414.827899][T16029] bond20: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 414.870049][T16027] macvlan0: entered promiscuous mode [ 414.883518][T16027] macvlan0: entered allmulticast mode [ 414.913010][ T3298] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.968641][T15800] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 415.001504][T15800] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.144828][ T3298] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.294173][T15800] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 415.305532][T15800] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.346886][T16051] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2758'. [ 415.406077][ T3333] bond12: (slave veth0_to_bond): link status definitely up, 10000 Mbps full duplex [ 415.420641][ T3333] bond12: (slave veth0_to_bond): making interface the new active one [ 415.435526][ T3333] bond12: active interface up! [ 415.469977][ T1107] bond9: (slave veth23): link status definitely up, 10000 Mbps full duplex [ 415.511283][ T1107] bond9: (slave veth23): making interface the new active one [ 415.525260][ T1107] bond9: active interface up! [ 415.558225][T15800] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 415.569607][T15800] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.600283][T16062] FAULT_INJECTION: forcing a failure. [ 415.600283][T16062] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 415.614560][T16062] CPU: 0 UID: 0 PID: 16062 Comm: syz.4.2761 Not tainted syzkaller #0 PREEMPT(full) [ 415.614592][T16062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 415.614605][T16062] Call Trace: [ 415.614614][T16062] [ 415.614622][T16062] dump_stack_lvl+0xe8/0x150 [ 415.614666][T16062] should_fail_ex+0x40c/0x560 [ 415.614698][T16062] _copy_from_iter+0x1d3/0x1660 [ 415.614735][T16062] ? _copy_from_iter+0x21b/0x1660 [ 415.614765][T16062] ? __pfx__copy_from_iter+0x10/0x10 [ 415.614801][T16062] ? __pfx__copy_from_iter+0x10/0x10 [ 415.614841][T16062] copy_page_from_iter+0x219/0x2d0 [ 415.614877][T16062] skb_copy_datagram_from_iter+0x2f4/0x720 [ 415.614938][T16062] tun_get_user+0x1520/0x4370 [ 415.614991][T16062] ? aa_file_perm+0x18b/0x15f0 [ 415.615022][T16062] ? aa_file_perm+0x4ed/0x15f0 [ 415.615046][T16062] ? __pfx_tun_get_user+0x10/0x10 [ 415.615080][T16062] ? __lock_acquire+0x683/0x2cf0 [ 415.615116][T16062] ? kstrtoull+0x12f/0x1d0 [ 415.615150][T16062] ? ref_tracker_alloc+0x341/0x4b0 [ 415.615177][T16062] ? get_pid_task+0x20/0x1f0 [ 415.615210][T16062] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 415.615241][T16062] ? tun_get+0x1c/0x2f0 [ 415.615271][T16062] ? tun_get+0x1c/0x2f0 [ 415.615307][T16062] ? tun_get+0x1c/0x2f0 [ 415.615336][T16062] ? tun_get+0x1c/0x2f0 [ 415.615371][T16062] tun_chr_write_iter+0x113/0x200 [ 415.615412][T16062] vfs_write+0x612/0xba0 [ 415.615444][T16062] ? __pfx_vfs_write+0x10/0x10 [ 415.615475][T16062] ? __fget_files+0x2a/0x420 [ 415.615514][T16062] ksys_write+0x150/0x270 [ 415.615537][T16062] ? __pfx_ksys_write+0x10/0x10 [ 415.615567][T16062] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.615591][T16062] do_syscall_64+0x174/0x580 [ 415.615618][T16062] ? trace_irq_disable+0x3b/0x140 [ 415.615653][T16062] ? clear_bhb_loop+0x40/0x90 [ 415.615679][T16062] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.615698][T16062] RIP: 0033:0x7f62dff5e6ce [ 415.615720][T16062] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 415.615739][T16062] RSP: 002b:00007f62de1f5fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 415.615763][T16062] RAX: ffffffffffffffda RBX: 00007f62de1f66c0 RCX: 00007f62dff5e6ce [ 415.615779][T16062] RDX: 000000000000ff76 RSI: 0000200000000100 RDI: 00000000000000c8 [ 415.615792][T16062] RBP: 00007f62de1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 415.615804][T16062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 415.615817][T16062] R13: 00007f62e0226128 R14: 00007f62e0226090 R15: 00007ffc59d0b508 [ 415.615852][T16062] [ 415.893225][ T13] bond13: (slave veth25): link status definitely up, 10000 Mbps full duplex [ 415.902898][ T13] bond13: (slave veth25): making interface the new active one [ 415.918086][ T13] bond13: active interface up! [ 415.976412][ T12] bond7: (slave veth15): link status definitely up, 10000 Mbps full duplex [ 415.989829][ T12] bond7: (slave veth15): making interface the new active one [ 416.002712][ T12] bond7: active interface up! [ 416.142018][ T13] bond4: (slave veth9): link status definitely up, 10000 Mbps full duplex [ 416.195663][ T13] bond4: (slave veth9): making interface the new active one [ 416.255685][ T13] bond4: active interface up! [ 416.288937][ T3289] bond15: (slave veth27): link status definitely up, 10000 Mbps full duplex [ 416.314495][T16068] netlink: 'syz.4.2764': attribute type 12 has an invalid length. [ 416.340309][T16068] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2764'. [ 416.494175][T16074] netlink: 'syz.0.2766': attribute type 83 has an invalid length. [ 416.525492][T16076] FAULT_INJECTION: forcing a failure. [ 416.525492][T16076] name failslab, interval 1, probability 0, space 0, times 0 [ 416.539248][T16076] CPU: 1 UID: 0 PID: 16076 Comm: syz.4.2767 Not tainted syzkaller #0 PREEMPT(full) [ 416.539281][T16076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 416.539296][T16076] Call Trace: [ 416.539305][T16076] [ 416.539314][T16076] dump_stack_lvl+0xe8/0x150 [ 416.539356][T16076] should_fail_ex+0x40c/0x560 [ 416.539391][T16076] should_failslab+0xa8/0x100 [ 416.539430][T16076] __kmalloc_cache_noprof+0xa8/0x660 [ 416.539464][T16076] ? genl_start+0x1c9/0x6d0 [ 416.539497][T16076] ? genl_start+0x1c9/0x6d0 [ 416.539536][T16076] genl_start+0x1c9/0x6d0 [ 416.539577][T16076] __netlink_dump_start+0x442/0x7b0 [ 416.539612][T16076] genl_family_rcv_msg_dumpit+0x213/0x310 [ 416.539650][T16076] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 416.539692][T16076] ? __pfx_genl_start+0x10/0x10 [ 416.539722][T16076] ? __pfx_genl_dumpit+0x10/0x10 [ 416.539752][T16076] ? __pfx_genl_done+0x10/0x10 [ 416.539788][T16076] ? bpf_lsm_capable+0x9/0x20 [ 416.539858][T16076] ? security_capable+0x7e/0x2c0 [ 416.539955][T16076] genl_rcv_msg+0x5e1/0x7a0 [ 416.539996][T16076] ? __pfx_genl_rcv_msg+0x10/0x10 [ 416.540028][T16076] ? __pfx_batadv_gw_dump+0x10/0x10 [ 416.540142][T16076] ? __pfx_ref_tracker_free+0x10/0x10 [ 416.540185][T16076] netlink_rcv_skb+0x226/0x4a0 [ 416.540213][T16076] ? __pfx_genl_rcv_msg+0x10/0x10 [ 416.540247][T16076] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 416.540290][T16076] ? down_read+0x2be/0x330 [ 416.540327][T16076] genl_rcv+0x28/0x40 [ 416.540356][T16076] netlink_unicast+0x7bb/0x940 [ 416.540390][T16076] netlink_sendmsg+0x813/0xb40 [ 416.540428][T16076] ? __pfx_netlink_sendmsg+0x10/0x10 [ 416.540460][T16076] ? aa_sock_msg_perm+0xf1/0x1b0 [ 416.540491][T16076] ? __pfx_netlink_sendmsg+0x10/0x10 [ 416.540517][T16076] sock_sendmsg_nosec+0x13a/0x180 [ 416.540554][T16076] ____sys_sendmsg+0x54e/0x850 [ 416.540587][T16076] ? __pfx_____sys_sendmsg+0x10/0x10 [ 416.540625][T16076] ? import_iovec+0x73/0xa0 [ 416.540663][T16076] ___sys_sendmsg+0x2a5/0x360 [ 416.540686][T16076] ? __lock_acquire+0x683/0x2cf0 [ 416.540723][T16076] ? __pfx____sys_sendmsg+0x10/0x10 [ 416.540791][T16076] ? __fget_files+0x2a/0x420 [ 416.540821][T16076] ? __fget_files+0x3a2/0x420 [ 416.540863][T16076] __x64_sys_sendmsg+0x1b1/0x290 [ 416.540893][T16076] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 416.540940][T16076] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.540965][T16076] do_syscall_64+0x174/0x580 [ 416.540991][T16076] ? trace_irq_disable+0x3b/0x140 [ 416.541022][T16076] ? clear_bhb_loop+0x40/0x90 [ 416.541050][T16076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.541072][T16076] RIP: 0033:0x7f62dff9de99 [ 416.541100][T16076] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 416.541120][T16076] RSP: 002b:00007f62e0d95028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 416.541144][T16076] RAX: ffffffffffffffda RBX: 00007f62e0225fa0 RCX: 00007f62dff9de99 [ 416.541160][T16076] RDX: 0000000000000000 RSI: 0000200000000780 RDI: 0000000000000003 [ 416.541174][T16076] RBP: 00007f62e0d95090 R08: 0000000000000000 R09: 0000000000000000 [ 416.541187][T16076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 416.541199][T16076] R13: 00007f62e0226038 R14: 00007f62e0225fa0 R15: 00007ffc59d0b508 [ 416.541236][T16076] [ 416.949493][T16080] netlink: 'syz.1.2768': attribute type 3 has an invalid length. [ 416.960145][T16080] netlink: 'syz.1.2768': attribute type 1 has an invalid length. [ 417.035406][T15800] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 417.061259][T15800] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 417.070623][T15800] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 417.102219][T15800] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 417.110757][T15800] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 417.155551][T15800] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 417.180887][T15800] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 417.196313][T15800] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 417.237461][T16086] __nla_validate_parse: 2 callbacks suppressed [ 417.237484][T16086] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2771'. [ 417.278899][T16094] tipc: Resetting bearer [ 417.367150][T16091] tipc: Resetting bearer [ 417.562223][T15800] 8021q: adding VLAN 0 to HW filter on device bond0 [ 417.626940][T15800] 8021q: adding VLAN 0 to HW filter on device team0 [ 417.658447][T16107] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2776'. [ 417.665745][ T1107] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.674717][ T1107] bridge0: port 1(bridge_slave_0) entered forwarding state [ 417.710571][ T1107] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.717913][ T1107] bridge0: port 2(bridge_slave_1) entered forwarding state [ 417.841333][T16111] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2778'. [ 417.999274][ T3333] tipc: Resetting bearer [ 418.117629][T16123] netlink: 'syz.2.2782': attribute type 46 has an invalid length. [ 418.144041][T16123] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2782'. [ 418.248947][T16131] netlink: 'syz.4.2783': attribute type 1 has an invalid length. [ 418.318161][T16131] netlink: 'syz.4.2783': attribute type 1 has an invalid length. [ 418.352644][T16132] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2783'. [ 418.447270][T16131] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2783'. [ 418.484977][T16139] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2788'. [ 419.155350][T16165] syzkaller0: entered promiscuous mode [ 419.260293][T15800] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 419.502561][T16176] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2794'. [ 419.666297][T16182] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 419.732772][T15800] veth0_vlan: entered promiscuous mode [ 419.774302][T15800] veth1_vlan: entered promiscuous mode [ 419.871820][T15800] veth0_macvtap: entered promiscuous mode [ 419.881283][T16188] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 419.905096][T15800] veth1_macvtap: entered promiscuous mode [ 419.989149][T15800] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 420.025386][T15800] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 420.064880][ T8169] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.096306][ T8169] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.147596][T16198] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2799'. [ 420.179279][T16196] tipc: Resetting bearer [ 420.199397][ T8169] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.212833][ T8169] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.440092][ T1107] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 420.450955][ T1107] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 420.572231][ T3289] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 420.592105][ T3289] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 420.712676][T16209] xt_socket: unknown flags 0x4 [ 420.728885][T16196] tipc: Resetting bearer [ 421.118791][T16221] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2804'. [ 421.229722][ T1107] tipc: Resetting bearer [ 421.780705][T16246] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 422.013332][T16253] bond0: Caught tx_queue_len zero misconfig [ 422.182690][T16253] syzkaller0: entered promiscuous mode [ 422.204782][T16253] syzkaller0: entered allmulticast mode [ 422.320086][ T5631] block nbd3: Receive control failed (result -32) [ 422.328245][ T5638] block nbd3: Receive control failed (result -32) [ 422.847262][T16267] __nla_validate_parse: 1 callbacks suppressed [ 422.847287][T16267] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2818'. [ 422.873153][T16267] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2818'. [ 422.979417][T16270] nbd: nbd3 already in use [ 422.985420][T16270] block nbd3: NBD_DISCONNECT [ 422.990667][T16270] block nbd3: Send disconnect failed -32 [ 423.008783][T16270] block nbd3: Send disconnect failed -32 [ 423.015844][T16270] block nbd3: shutting down sockets [ 425.516642][T16291] FAULT_INJECTION: forcing a failure. [ 425.516642][T16291] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 425.586915][T16291] CPU: 0 UID: 0 PID: 16291 Comm: syz.1.2823 Not tainted syzkaller #0 PREEMPT(full) [ 425.586955][T16291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 425.586969][T16291] Call Trace: [ 425.586978][T16291] [ 425.586988][T16291] dump_stack_lvl+0xe8/0x150 [ 425.587033][T16291] should_fail_ex+0x40c/0x560 [ 425.587071][T16291] prepare_alloc_pages+0x230/0x650 [ 425.587117][T16291] __alloc_frozen_pages_noprof+0x12f/0x380 [ 425.587155][T16291] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 425.587193][T16291] ? __pfx_policy_nodemask+0x10/0x10 [ 425.587241][T16291] alloc_pages_mpol+0x212/0x380 [ 425.587283][T16291] alloc_pages_noprof+0xac/0x2a0 [ 425.587322][T16291] anon_pipe_write+0x1f0/0x1c30 [ 425.587355][T16291] ? kstrtoull+0x12f/0x1d0 [ 425.587396][T16291] ? get_pid_task+0x20/0x1f0 [ 425.587434][T16291] ? get_pid_task+0x20/0x1f0 [ 425.587471][T16291] ? __pfx_anon_pipe_write+0x10/0x10 [ 425.587521][T16291] ? apparmor_file_permission+0x1f4/0x300 [ 425.587642][T16291] ? bpf_lsm_file_permission+0x9/0x20 [ 425.587678][T16291] ? security_file_permission+0x75/0x260 [ 425.587758][T16291] vfs_write+0x612/0xba0 [ 425.587794][T16291] ? __pfx_vfs_write+0x10/0x10 [ 425.587830][T16291] ? __fget_files+0x2a/0x420 [ 425.587875][T16291] ksys_write+0x150/0x270 [ 425.587902][T16291] ? __pfx_ksys_write+0x10/0x10 [ 425.587936][T16291] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.587964][T16291] do_syscall_64+0x174/0x580 [ 425.587994][T16291] ? trace_irq_disable+0x3b/0x140 [ 425.588026][T16291] ? clear_bhb_loop+0x40/0x90 [ 425.588055][T16291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.588080][T16291] RIP: 0033:0x7fe39599de99 [ 425.588103][T16291] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 425.588125][T16291] RSP: 002b:00007fe3968af028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 425.588152][T16291] RAX: ffffffffffffffda RBX: 00007fe395c26090 RCX: 00007fe39599de99 [ 425.588170][T16291] RDX: 00000000fffffdef RSI: 0000200000000140 RDI: 0000000000000004 [ 425.588186][T16291] RBP: 00007fe3968af090 R08: 0000000000000000 R09: 0000000000000000 [ 425.588201][T16291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 425.588216][T16291] R13: 00007fe395c26128 R14: 00007fe395c26090 R15: 00007ffc4c9686b8 [ 425.588254][T16291] [ 426.158345][T16313] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 426.331278][ T5631] block nbd3: Receive control failed (result -32) [ 426.342300][ T5638] block nbd3: Receive control failed (result -32) [ 426.423887][T16323] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2836'. [ 426.531286][T16332] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2835'. [ 427.039683][T16344] netlink: 'syz.4.2838': attribute type 1 has an invalid length. [ 427.207338][T16344] 8021q: adding VLAN 0 to HW filter on device bond14 [ 427.239892][T16348] bond12: (slave veth0_to_bond): Releasing active interface [ 427.257375][T16348] bond12: (slave veth0_to_bond): the permanent HWaddr of slave - aa:aa:aa:aa:aa:1d - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 427.384563][T16348] bond14: (slave veth0_to_bond): making interface the new active one [ 427.438688][T16348] bond14: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 427.521068][T16353] bond14: entered promiscuous mode [ 427.526404][T16353] veth0_to_bond: entered promiscuous mode [ 427.539055][T16353] bond14: entered allmulticast mode [ 427.551671][T16353] veth0_to_bond: entered allmulticast mode [ 427.756651][T16367] syzkaller0: entered promiscuous mode [ 427.766534][T16367] syzkaller0: entered allmulticast mode [ 427.780748][T16380] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 427.820353][T16382] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 428.236321][T16402] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2849'. [ 428.534917][ T5638] block nbd4: Receive control failed (result -32) [ 428.542182][ T5631] block nbd4: Receive control failed (result -32) [ 430.818519][T16391] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 430.840506][T16395] workqueue: Failed to create a rescuer kthread for wq "bond15": -EINTR [ 431.383260][T16431] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2861'. [ 431.894498][T16420] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 431.920811][T16433] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 431.970281][T16442] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 432.316306][T16455] tipc: Resetting bearer [ 432.343799][T16455] netlink: 'syz.1.2869': attribute type 14 has an invalid length. [ 432.352665][T16455] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2869'. [ 432.371956][T16455] netlink: 'syz.1.2869': attribute type 14 has an invalid length. [ 432.379987][ T3298] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 432.391107][ T3298] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 432.400120][T16455] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2869'. [ 432.402665][T16461] netlink: 'syz.1.2869': attribute type 4 has an invalid length. [ 432.418349][T16461] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2869'. [ 432.428758][ T3289] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 432.438199][ T3289] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 432.461795][T16461] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 432.489280][T16454] tipc: Resetting bearer [ 432.584910][T16466] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 432.666744][T16469] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 432.740923][T16466] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 432.784826][T16472] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 432.896701][T16476] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2876'. [ 432.936836][T16476] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2876'. [ 433.371074][ T8169] tipc: Resetting bearer [ 433.598465][T16491] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2881'. [ 434.037966][T16503] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 434.615570][ T5631] block nbd5: Receive control failed (result -32) [ 434.622807][ T5638] block nbd5: Receive control failed (result -32) [ 434.630752][T16515] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2888'. [ 434.701097][T16511] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2887'. [ 435.233959][T16536] bond0: (slave bridge0): Releasing backup interface [ 435.282997][T16536] bridge0: port 3(team0) entered disabled state [ 435.289801][T16536] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.297148][T16536] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.338801][T16536] team0: left allmulticast mode [ 435.356147][T16536] team_slave_0: left allmulticast mode [ 435.376873][T16536] team_slave_1: left allmulticast mode [ 435.391556][T16536] bridge3: left allmulticast mode [ 435.409075][T16536] team0: left promiscuous mode [ 435.421139][T16536] team_slave_0: left promiscuous mode [ 435.438806][T16536] team_slave_1: left promiscuous mode [ 435.449189][T16536] bridge3: left promiscuous mode [ 435.454967][T16536] bridge0: port 3(team0) entered disabled state [ 435.475713][T16536] bridge_slave_0: left allmulticast mode [ 435.482298][T16536] bridge_slave_0: left promiscuous mode [ 435.488929][T16536] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.512202][T16536] bridge_slave_1: left allmulticast mode [ 435.518954][T16536] bridge_slave_1: left promiscuous mode [ 435.525119][T16536] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.561969][T16536] bond15: (slave veth0_to_bond): Releasing active interface [ 435.570774][T16536] veth0_to_bond: left promiscuous mode [ 435.580475][T16536] bond15: (slave veth27): making interface the new active one [ 435.590197][T16536] veth27: entered promiscuous mode [ 435.618119][T16536] bond0: (slave bond_slave_0): Releasing backup interface [ 435.633954][T16536] bond0: (slave bond_slave_1): Releasing backup interface [ 435.664289][T16536] team0: Port device team_slave_0 removed [ 435.681951][T16536] team0: Port device team_slave_1 removed [ 435.692391][T16536] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 435.702412][T16536] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 435.728511][T16536] bond1: (slave bridge1): Releasing active interface [ 435.756182][T16536] tipc: Resetting bearer [ 435.766890][T16536] bond3: (slave bond4): Releasing backup interface [ 435.791835][T16536] bond6: (slave veth17): Releasing active interface [ 435.813983][T16536] bond7: (slave veth19): Releasing active interface [ 435.835614][T16536] team0: Port device bridge3 removed [ 435.843950][T16536] bond8: (slave veth21): Releasing active interface [ 435.878850][T16536] bond9: (slave veth23): Releasing active interface [ 435.929479][T16536] bond13: (slave veth25): Releasing active interface [ 435.962582][T16536] bond15: (slave veth27): Releasing active interface [ 435.983036][T16536] veth27: left promiscuous mode [ 436.422967][T16559] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2904'. [ 436.619245][T16566] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 436.737086][ T5638] Bluetooth: hci0: command 0x0406 tx timeout [ 436.932631][T16577] tipc: Resetting bearer [ 437.081695][T16576] tipc: Resetting bearer [ 437.096452][ T211] tipc: Resetting bearer [ 437.120783][ T5638] block nbd6: Receive control failed (result -32) [ 437.121463][ T5631] block nbd6: Receive control failed (result -32) [ 437.621054][T16589] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2915'. [ 437.710468][T16592] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2917'. [ 438.071752][T16587] tipc: Resetting bearer [ 438.170847][T16587] bond15: left promiscuous mode [ 438.199543][ T3298] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 438.240700][ T3298] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.249998][ T5819] syz1: Port: 1 Link DOWN [ 438.282508][ T3298] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 438.293444][ T3298] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.351732][ T3298] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 438.369433][ T3298] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.380250][ T3298] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 438.389743][ T3298] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.423411][T16600] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 438.437263][T16600] syzkaller0: linktype set to 0 [ 438.555605][T16614] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 439.164018][T16634] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 439.213584][T16636] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2930'. [ 439.566360][ T5638] block nbd7: Receive control failed (result -32) [ 439.566366][ T5631] block nbd7: Receive control failed (result -32) [ 440.052101][ T5638] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 440.061835][ T5638] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 440.075410][ T5638] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 440.084917][ T5638] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 440.114463][ T5638] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 440.351510][T16666] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2936'. [ 440.425857][T16670] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2937'. [ 440.608003][T16678] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2942'. [ 440.986925][T15848] udevd[15848]: inotify_add_watch(7, /dev/nbd8, 10) failed: No such file or directory [ 441.115307][T16694] netlink: 'syz.2.2947': attribute type 2 has an invalid length. [ 441.309573][T16700] netlink: 100 bytes leftover after parsing attributes in process `syz.3.2949'. [ 441.581078][T16706] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2951'. [ 442.167268][ T5638] Bluetooth: hci1: command tx timeout [ 442.181150][T16715] 8021q: VLANs not supported on ipvlan0 [ 442.341408][T16721] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2955'. [ 442.386038][T16721] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2955'. [ 442.589844][T16730] block nbd3: NBD_DISCONNECT [ 442.610121][T16730] block nbd3: Send disconnect failed -32 [ 442.636429][T16730] block nbd3: Send disconnect failed -32 [ 442.662389][T16730] block nbd3: shutting down sockets [ 443.426537][T16760] netlink: 'syz.2.2962': attribute type 1 has an invalid length. [ 443.876652][T16769] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2965'. [ 443.899706][T16769] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2965'. [ 444.120665][ T3289] bond0 (unregistering): Released all slaves [ 444.178723][ T3289] bond1 (unregistering): Released all slaves [ 444.208021][ T3289] bond2 (unregistering): Released all slaves [ 444.243855][ T3289] bond3 (unregistering): Released all slaves [ 444.255883][ T5638] Bluetooth: hci1: command tx timeout [ 444.288131][T16778] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2968'. [ 444.322406][ T3289] bond4 (unregistering): Released all slaves [ 444.347765][ T3289] bond5 (unregistering): Released all slaves [ 444.365489][ T3289] bond6 (unregistering): Released all slaves [ 444.393633][ T3289] bond7 (unregistering): Released all slaves [ 444.412462][ T3289] bond8 (unregistering): Released all slaves [ 444.431603][ T3289] bond9 (unregistering): Released all slaves [ 444.457080][ T3289] bond10 (unregistering): Released all slaves [ 444.474559][ T3289] bond11 (unregistering): Released all slaves [ 444.492224][ T3289] bond12 (unregistering): Released all slaves [ 444.524034][ T3289] bond13 (unregistering): Released all slaves [ 444.547733][ T3289] bond14 (unregistering): Released all slaves [ 444.569733][ T3289] bond15 (unregistering): Released all slaves [ 444.614731][ T5286] 8021q: adding VLAN 0 to HW filter on device eth1 [ 444.724912][T16771] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 444.898294][T16785] block nbd4: NBD_DISCONNECT [ 444.933118][T16785] block nbd4: Send disconnect failed -32 [ 444.980455][T16785] block nbd4: Send disconnect failed -32 [ 445.012757][T16785] block nbd4: shutting down sockets [ 445.066374][ T3289] : left promiscuous mode [ 445.187343][T16792] netlink: 'syz.0.2972': attribute type 3 has an invalid length. [ 445.329749][ T3289] tipc: Disabling bearer [ 445.353833][ T3289] tipc: Left network mode [ 445.748215][ T3289] IPVS: stopping backup sync thread 5940 ... [ 445.843563][T16811] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2976'. [ 445.946665][T16809] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2976'. [ 446.268252][T16824] netlink: 'syz.3.2977': attribute type 1 has an invalid length. [ 446.338292][ T5638] Bluetooth: hci1: command tx timeout [ 446.365526][T16827] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2977'. [ 446.452798][T16826] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2978'. [ 446.563710][T16843] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2977'. [ 446.572961][T16824] 8021q: adding VLAN 0 to HW filter on device bond1 [ 446.919719][T16827] veth3: entered allmulticast mode [ 447.008376][T16827] bond1: (slave veth3): Enslaving as an active interface with a down link [ 447.078062][T16859] netlink: 'syz.2.2981': attribute type 7 has an invalid length. [ 447.145393][T16859] netlink: 'syz.2.2981': attribute type 3 has an invalid length. [ 447.156630][T16835] bond1: (slave veth0_to_bond): making interface the new active one [ 447.188299][T16835] veth0_to_bond: entered promiscuous mode [ 447.207741][T16835] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 447.235726][T16862] nbd: couldn't find a device at index 2 [ 447.237643][T16859] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2981'. [ 447.257656][T16861] block nbd0: NBD_DISCONNECT [ 447.267159][T16861] block nbd0: Send disconnect failed -32 [ 447.281483][T16861] block nbd0: shutting down sockets [ 447.841822][ T5286] 8021q: adding VLAN 0 to HW filter on device eth2 [ 448.124456][T16876] netlink: 'syz.4.2986': attribute type 4 has an invalid length. [ 448.185365][T16878] netlink: 'syz.4.2986': attribute type 4 has an invalid length. [ 448.419506][ T5638] Bluetooth: hci1: command tx timeout [ 448.438338][ T13] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 448.651913][ T8169] smc: removing ib device syz1 [ 448.774765][ T8169] smbdirect: ib_dev[syz1] removed [ 449.314750][T16886] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2988'. [ 449.352090][T16895] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2992'. [ 449.556730][T16883] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2988'. [ 449.771757][T16920] xt_CT: You must specify a L4 protocol and not use inversions on it [ 449.960404][T16925] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2996'. [ 449.983393][T16925] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2996'. [ 450.031285][T16908] bond15 (unregistering): Released all slaves [ 450.196676][T16928] xt_cgroup: invalid path, errno=-2 [ 450.719287][T16656] bridge0: port 1(bridge_slave_0) entered blocking state [ 450.743424][T16656] bridge0: port 1(bridge_slave_0) entered disabled state [ 450.769916][T16656] bridge_slave_0: entered allmulticast mode [ 450.805533][T16656] bridge_slave_0: entered promiscuous mode [ 450.965938][T16656] bridge0: port 2(bridge_slave_1) entered blocking state [ 451.002441][T16656] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.004544][T16952] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3002'. [ 451.047525][T16656] bridge_slave_1: entered allmulticast mode [ 451.102045][T16656] bridge_slave_1: entered promiscuous mode [ 451.470642][T16962] nbd: couldn't find device at index 2 [ 451.520960][T16966] FAULT_INJECTION: forcing a failure. [ 451.520960][T16966] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 451.575807][T16966] CPU: 1 UID: 0 PID: 16966 Comm: syz.3.3004 Not tainted syzkaller #0 PREEMPT(full) [ 451.575841][T16966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 451.575855][T16966] Call Trace: [ 451.575864][T16966] [ 451.575874][T16966] dump_stack_lvl+0xe8/0x150 [ 451.575916][T16966] should_fail_ex+0x40c/0x560 [ 451.575949][T16966] _copy_from_iter+0x1d3/0x1660 [ 451.575988][T16966] ? _copy_from_iter+0x21b/0x1660 [ 451.576019][T16966] ? __pfx__copy_from_iter+0x10/0x10 [ 451.576054][T16966] ? __pfx__copy_from_iter+0x10/0x10 [ 451.576091][T16966] copy_page_from_iter+0x219/0x2d0 [ 451.576127][T16966] skb_copy_datagram_from_iter+0x2f4/0x720 [ 451.576170][T16966] tun_get_user+0x1520/0x4370 [ 451.576229][T16966] ? aa_file_perm+0x18b/0x15f0 [ 451.576262][T16966] ? aa_file_perm+0x4ed/0x15f0 [ 451.576287][T16966] ? __pfx_tun_get_user+0x10/0x10 [ 451.576322][T16966] ? __lock_acquire+0x683/0x2cf0 [ 451.576356][T16966] ? kstrtoull+0x12f/0x1d0 [ 451.576390][T16966] ? ref_tracker_alloc+0x341/0x4b0 [ 451.576419][T16966] ? get_pid_task+0x20/0x1f0 [ 451.576454][T16966] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 451.576485][T16966] ? tun_get+0x1c/0x2f0 [ 451.576515][T16966] ? tun_get+0x1c/0x2f0 [ 451.576552][T16966] ? tun_get+0x1c/0x2f0 [ 451.576591][T16966] ? tun_get+0x1c/0x2f0 [ 451.576627][T16966] tun_chr_write_iter+0x113/0x200 [ 451.576661][T16966] vfs_write+0x612/0xba0 [ 451.576693][T16966] ? __pfx_vfs_write+0x10/0x10 [ 451.576723][T16966] ? __fget_files+0x2a/0x420 [ 451.576764][T16966] ksys_write+0x150/0x270 [ 451.576796][T16966] ? __pfx_ksys_write+0x10/0x10 [ 451.576828][T16966] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.576852][T16966] do_syscall_64+0x174/0x580 [ 451.576880][T16966] ? trace_irq_disable+0x3b/0x140 [ 451.576909][T16966] ? clear_bhb_loop+0x40/0x90 [ 451.576940][T16966] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.576961][T16966] RIP: 0033:0x7ffa38d5e6ce [ 451.576981][T16966] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 451.576999][T16966] RSP: 002b:00007ffa39d04fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 451.577023][T16966] RAX: ffffffffffffffda RBX: 00007ffa39d056c0 RCX: 00007ffa38d5e6ce [ 451.577039][T16966] RDX: 000000000000ff76 RSI: 0000200000000100 RDI: 00000000000000c8 [ 451.577053][T16966] RBP: 00007ffa39d05090 R08: 0000000000000000 R09: 0000000000000000 [ 451.577067][T16966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 451.577079][T16966] R13: 00007ffa39026128 R14: 00007ffa39026090 R15: 00007ffe8b61a6d8 [ 451.577113][T16966] [ 452.168494][T16656] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 452.280953][T16656] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 452.357402][T16982] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 452.555394][T16990] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3010'. [ 452.575726][T16656] team0: Port device team_slave_0 added [ 452.640593][T16656] team0: Port device team_slave_1 added [ 452.674025][T16990] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3010'. [ 452.929481][T16656] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 452.974389][T16656] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 453.016645][T16656] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 453.070495][ T5286] 8021q: adding VLAN 0 to HW filter on device eth3 [ 453.088152][T17003] netlink: 100 bytes leftover after parsing attributes in process `syz.4.3011'. [ 453.103913][T16656] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 453.130979][T16656] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 453.176080][T16656] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 453.357587][ T3289] IPVS: stop unused estimator thread 0... [ 453.406729][T17008] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 453.576274][T16656] hsr_slave_0: entered promiscuous mode [ 453.601579][T16656] hsr_slave_1: entered promiscuous mode [ 453.636494][T16656] debugfs: 'hsr0' already exists in 'hsr' [ 453.655328][T16656] Cannot create hsr debugfs directory [ 453.679035][T17013] netlink: 'syz.4.3015': attribute type 4 has an invalid length. [ 453.798133][T17013] netlink: 136 bytes leftover after parsing attributes in process `syz.4.3015'. [ 454.030314][ T5638] block nbd0: Receive control failed (result -32) [ 454.030314][ T5631] block nbd0: Receive control failed (result -32) [ 454.359564][T17006] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3013'. [ 454.661277][T17039] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3017'. [ 454.715696][ T3289] bond0 (unregistering): Released all slaves [ 454.731613][ T3289] bond1 (unregistering): Released all slaves [ 454.752383][ T3289] bond2 (unregistering): Released all slaves [ 454.773336][ T3289] bond3 (unregistering): Released all slaves [ 454.782405][T17041] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3017'. [ 454.803075][ T3289] bond4 (unregistering): Released all slaves [ 454.824007][ T3289] bond5 (unregistering): Released all slaves [ 454.843123][ T3289] bond6 (unregistering): Released all slaves [ 454.864376][ T3289] bond7 (unregistering): Released all slaves [ 454.885034][ T3289] bond8 (unregistering): Released all slaves [ 454.905017][ T3289] bond9 (unregistering): Released all slaves [ 454.926860][ T3289] bond10 (unregistering): Released all slaves [ 454.946396][ T3289] bond11 (unregistering): Released all slaves [ 454.966455][ T3289] bond12 (unregistering): Released all slaves [ 455.011735][ T5286] 8021q: adding VLAN 0 to HW filter on device eth4 [ 455.154201][T17041] lo speed is unknown, defaulting to 1000 [ 455.869087][T17046] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.876524][T17046] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.002001][T17057] nbd: couldn't find device at index 2 [ 456.245360][T17059] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3022'. [ 456.417227][T17046] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 456.491431][T17068] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3022'. [ 456.868990][T17046] batman_adv: batadv0: Interface deactivated: wlan0 [ 457.274303][T17046] bridge3: left promiscuous mode [ 457.286880][T17046] bond10: left promiscuous mode [ 457.292228][T17046] bridge4: left promiscuous mode [ 457.298691][T17046] bond10: left allmulticast mode [ 457.303718][T17046] bridge4: left allmulticast mode [ 457.320042][T17046] bond11: left promiscuous mode [ 457.326751][T17046] bond11: left allmulticast mode [ 457.336039][T17046] veth17: left allmulticast mode [ 457.352282][T17046] bond14: left promiscuous mode [ 457.357566][T17046] veth0_to_bond: left promiscuous mode [ 457.363316][T17046] bond14: left allmulticast mode [ 457.368995][T17046] veth0_to_bond: left allmulticast mode [ 457.381010][T17047] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 457.400455][T17041] lo speed is unknown, defaulting to 1000 [ 457.410073][T17041] lo speed is unknown, defaulting to 1000 [ 457.432262][T17041] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 457.449654][ T3289] tipc: Left network mode [ 457.482472][T17041] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 457.511679][T17041] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 457.551285][ T1003] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.589437][ T1003] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.613524][T17041] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 457.675987][T17041] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 457.741173][ T1003] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.766764][ T1003] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.833316][T17041] lo speed is unknown, defaulting to 1000 [ 457.885645][T17041] lo speed is unknown, defaulting to 1000 [ 457.938067][T17083] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3027'. [ 457.967329][T17084] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 458.027378][T17041] lo speed is unknown, defaulting to 1000 [ 458.063193][T17083] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3027'. [ 458.134290][T17041] lo speed is unknown, defaulting to 1000 [ 458.179807][ T5638] block nbd3: Receive control failed (result -32) [ 458.186524][ T5631] block nbd3: Receive control failed (result -32) [ 458.309560][T17041] lo speed is unknown, defaulting to 1000 [ 458.329832][T17041] lo speed is unknown, defaulting to 1000 [ 458.997912][T17111] nbd: couldn't find device at index 2 [ 459.171193][ T3289] veth1_macvtap: left promiscuous mode [ 459.184946][ T3289] veth0_macvtap: left promiscuous mode [ 459.192598][ T3289] veth1_vlan: left promiscuous mode [ 459.200422][ T3289] veth0_vlan: left promiscuous mode [ 459.633807][T17131] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3035'. [ 459.670782][T17131] netlink: 'syz.3.3035': attribute type 1 has an invalid length. [ 459.686642][T17133] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3034'. [ 459.707248][T17131] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3035'. [ 459.739305][T17131] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3035'. [ 459.978937][T17140] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3034'. [ 460.338625][T17113] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3032'. [ 460.353855][T17131] syz_tun: entered promiscuous mode [ 460.371648][T17146] IPVS: Error connecting to the multicast addr [ 460.432061][ T1107] veth0_to_bond: left promiscuous mode [ 460.580822][T17157] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 460.660564][T17130] syz_tun: left promiscuous mode [ 460.756353][ T5631] block nbd4: Receive control failed (result -32) [ 460.757495][ T5638] block nbd4: Receive control failed (result -32) [ 460.965304][T17168] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3042'. [ 461.977886][T16656] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 462.022646][T16656] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 462.030960][T16656] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 462.073269][T16656] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 462.151912][T16656] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 462.175654][T16656] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 462.199590][T16656] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 462.241973][T16656] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 462.675853][T17211] netlink: 100 bytes leftover after parsing attributes in process `syz.3.3047'. [ 462.696506][T16656] 8021q: adding VLAN 0 to HW filter on device bond0 [ 462.751754][T16656] 8021q: adding VLAN 0 to HW filter on device team0 [ 462.795375][ T1107] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.802764][ T1107] bridge0: port 1(bridge_slave_0) entered forwarding state [ 462.898219][ T1107] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.905526][ T1107] bridge0: port 2(bridge_slave_1) entered forwarding state [ 463.526495][T17237] block nbd3: NBD_DISCONNECT [ 463.541234][T17237] block nbd3: Send disconnect failed -32 [ 463.563258][T17237] block nbd3: Send disconnect failed -32 [ 463.582845][T17237] block nbd3: shutting down sockets [ 466.212475][T17161] Set syz1 is full, maxelem 65536 reached [ 466.759716][T17284] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 468.293857][T17293] netlink: 240 bytes leftover after parsing attributes in process `syz.2.3061'. [ 468.353034][T17293] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input16 [ 468.433273][T16656] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 468.498551][T17308] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3064'. [ 468.566571][T17324] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3062'. [ 468.748146][T17333] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3062'. [ 468.853676][T16656] veth0_vlan: entered promiscuous mode [ 468.902990][T16656] veth1_vlan: entered promiscuous mode [ 469.027314][T16656] veth0_macvtap: entered promiscuous mode [ 469.100785][T16656] veth1_macvtap: entered promiscuous mode [ 469.231606][T16656] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 469.254204][T16656] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 469.289701][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.311002][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.333263][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.354550][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.574661][T17360] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3067'. [ 471.315876][T17299] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 472.271849][T17380] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 472.341501][ T3333] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 472.359938][ T3333] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 472.485324][T17389] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3077'. [ 472.535769][T17392] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 472.569741][ T3298] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 472.594872][ T3298] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 472.691067][ T5631] block nbd3: Receive control failed (result -32) [ 472.691068][ T5638] block nbd3: Receive control failed (result -32) [ 472.721607][T17400] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3082'. [ 473.235708][ T5638] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 473.256321][ T5638] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 473.270325][ T5638] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 473.279407][ T5638] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 473.290816][ T5638] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 473.636207][T17436] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3093'. [ 474.035242][T17460] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3099'. [ 474.068026][T17460] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3099'. [ 474.372798][T17424] lo speed is unknown, defaulting to 1000 [ 474.721501][ T1107] bridge_slave_1: left allmulticast mode [ 474.735691][ T1107] bridge_slave_1: left promiscuous mode [ 474.746361][ T1107] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.758424][ T1107] bridge_slave_0: left allmulticast mode [ 474.764113][ T1107] bridge_slave_0: left promiscuous mode [ 474.770680][ T1107] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.808220][ T1107] pim6reg: left allmulticast mode [ 474.813536][ T1107] pim6reg99999999: left allmulticast mode [ 475.033524][ T1107] bond8 (unregistering): (slave bridge3): Releasing backup interface [ 475.047958][ T1107] bond10 (unregistering): (slave bridge4): Releasing backup interface [ 475.106647][ T1107] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 475.118819][ T1107] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 475.132952][ T1107] bond0 (unregistering): Released all slaves [ 475.146578][ T1107] team0: Port device bond1 removed [ 475.153527][ T1107] bond1 (unregistering): Released all slaves [ 475.175332][ T1107] bond2 (unregistering): Released all slaves [ 475.191918][ T1107] bond3 (unregistering): Released all slaves [ 475.220000][ T1107] bond4 (unregistering): (slave veth9): Releasing active interface [ 475.228947][ T1107] bond4 (unregistering): Released all slaves [ 475.246513][ T1107] bond5 (unregistering): Released all slaves [ 475.263027][ T1107] bond6 (unregistering): Released all slaves [ 475.284672][ T1107] bond7 (unregistering): (slave veth15): Releasing active interface [ 475.304296][ T1107] bond7 (unregistering): Released all slaves [ 475.320773][ T1107] bond8 (unregistering): Released all slaves [ 475.338262][ T1107] bond9 (unregistering): Released all slaves [ 475.354346][ T1107] bond10 (unregistering): Released all slaves [ 475.367538][ T5631] Bluetooth: hci0: command tx timeout [ 475.376612][ T1107] bond11 (unregistering): Released all slaves [ 475.402537][ T1107] bond12 (unregistering): (slave veth17): Releasing active interface [ 475.414609][ T1107] bond12 (unregistering): Released all slaves [ 475.431704][ T1107] bond13 (unregistering): Released all slaves [ 475.449125][ T1107] bond14 (unregistering): (slave veth0_to_bond): Releasing active interface [ 475.459091][ T1107] bond14 (unregistering): Released all slaves [ 475.621735][T17424] bridge0: port 1(bridge_slave_0) entered blocking state [ 475.631396][T17424] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.654378][T17424] bridge_slave_0: entered allmulticast mode [ 475.673952][T17424] bridge_slave_0: entered promiscuous mode [ 475.684059][T17424] bridge0: port 2(bridge_slave_1) entered blocking state [ 475.727201][T17424] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.748705][T17424] bridge_slave_1: entered allmulticast mode [ 475.757289][T17424] bridge_slave_1: entered promiscuous mode [ 475.790663][ T1107] tipc: Left network mode [ 475.828060][T17424] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 475.870132][T17424] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 475.979671][T17424] team0: Port device team_slave_0 added [ 475.988750][T17424] team0: Port device team_slave_1 added [ 476.032972][T17424] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 476.040120][T17424] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 476.068240][T17424] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 476.093906][T17424] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 476.101777][T17424] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 476.131666][T17424] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 476.212423][T17424] hsr_slave_0: entered promiscuous mode [ 476.220502][T17424] hsr_slave_1: entered promiscuous mode [ 476.227066][T17424] debugfs: 'hsr0' already exists in 'hsr' [ 476.233086][T17424] Cannot create hsr debugfs directory [ 476.266093][ T1107] batman_adv: batadv0: Removing interface: wlan0 [ 476.562332][T17438] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 476.832084][T17484] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3103'. [ 476.902578][T17484] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3103'. [ 477.449604][ T5631] Bluetooth: hci0: command tx timeout [ 477.796263][T17424] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 477.896699][T17424] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 477.956249][T17517] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 477.965281][T17424] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 477.976293][T17518] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3109'. [ 478.003893][T17424] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 478.023035][T17517] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 478.044763][T17519] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3109'. [ 478.054116][T17517] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 478.120390][T17424] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 478.189044][T17424] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 478.242354][T17424] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 478.294326][T17424] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 478.348661][T17524] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3110'. [ 478.513869][T17514] syzkaller0: entered promiscuous mode [ 478.547710][T17514] syzkaller0: entered allmulticast mode [ 478.939103][ T1107] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 479.529741][ T5631] Bluetooth: hci0: command tx timeout [ 480.350437][ T1107] team0 (unregistering): Port device team_slave_1 removed [ 480.435395][ T1107] team0 (unregistering): Port device team_slave_0 removed [ 480.696123][T17563] syzkaller0: entered promiscuous mode [ 480.705027][T17563] syzkaller0: entered allmulticast mode [ 481.041911][T17424] 8021q: adding VLAN 0 to HW filter on device bond0 [ 481.147310][T17424] 8021q: adding VLAN 0 to HW filter on device team0 [ 481.200595][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 481.207848][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 481.273320][ T8169] bridge0: port 2(bridge_slave_1) entered blocking state [ 481.280583][ T8169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 481.384691][T17592] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3120'. [ 481.433238][T17597] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3121'. [ 481.512822][T17597] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3121'. [ 481.596335][ T1107] IPVS: stop unused estimator thread 0... [ 481.607416][ T5631] Bluetooth: hci0: command tx timeout [ 482.690681][T17424] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 483.086345][T17642] IPVS: set_ctl: invalid protocol: 50 172.20.20.170:20002 [ 483.163515][T17632] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3126'. [ 483.278790][T17424] veth0_vlan: entered promiscuous mode [ 483.294148][T17424] veth1_vlan: entered promiscuous mode [ 483.360911][T17424] veth0_macvtap: entered promiscuous mode [ 483.399265][T17424] veth1_macvtap: entered promiscuous mode [ 483.475494][T17424] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 483.491508][T17650] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 483.531239][T17424] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 483.575123][ T1107] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.592612][T17652] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3132'. [ 483.617458][ T1107] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.641575][ T1107] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.686016][ T1107] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.029081][T17659] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3134'. [ 484.057707][ T8169] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 484.073465][ T8169] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 484.194955][ T211] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 484.224001][T17494] Set syz1 is full, maxelem 65536 reached [ 484.229506][ T211] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 484.355920][T17665] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3136'. [ 484.409715][T17665] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3136'. [ 485.174823][T17686] netlink: 100 bytes leftover after parsing attributes in process `syz.1.3140'. [ 485.393117][T17694] xt_bpf: check failed: parse error [ 485.411532][T17699] netlink: 'syz.0.3145': attribute type 46 has an invalid length. [ 485.457882][T17699] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3145'. [ 485.668481][ T5638] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 485.683976][ T5638] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 485.692983][ T5638] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 485.702966][ T5638] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 485.710800][ T5638] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 485.806332][T17710] netlink: 'syz.0.3147': attribute type 2 has an invalid length. [ 486.769077][T17702] lo speed is unknown, defaulting to 1000 [ 486.884138][T17744] veth1_to_bond: entered allmulticast mode [ 486.895119][T17743] veth1_to_bond: left allmulticast mode [ 486.945649][T17747] syzkaller0: entered promiscuous mode [ 486.952002][T17747] syzkaller0: entered allmulticast mode [ 487.297558][T17760] netlink: 100 bytes leftover after parsing attributes in process `syz.3.3164'. [ 487.319266][T17759] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3163'. [ 487.571413][T17767] veth3: entered allmulticast mode [ 487.582640][T17702] bridge0: port 1(bridge_slave_0) entered blocking state [ 487.598705][T17702] bridge0: port 1(bridge_slave_0) entered disabled state [ 487.608982][T17702] bridge_slave_0: entered allmulticast mode [ 487.618060][T17702] bridge_slave_0: entered promiscuous mode [ 487.626907][T17767] syz_tun: entered promiscuous mode [ 487.644971][T17702] bridge0: port 2(bridge_slave_1) entered blocking state [ 487.658361][T17702] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.666050][T17702] bridge_slave_1: entered allmulticast mode [ 487.675027][T17702] bridge_slave_1: entered promiscuous mode [ 487.722068][T17702] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 487.740156][T17702] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 487.767396][ T5631] Bluetooth: hci2: command tx timeout [ 487.825255][T17702] team0: Port device team_slave_0 added [ 487.835050][T17702] team0: Port device team_slave_1 added [ 487.873439][T17702] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 487.880760][T17702] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 487.907369][T17702] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 487.921361][T17702] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 487.929170][T17702] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 487.990239][T17702] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 488.084882][T17702] hsr_slave_0: entered promiscuous mode [ 488.104484][T17702] hsr_slave_1: entered promiscuous mode [ 488.118920][T17702] debugfs: 'hsr0' already exists in 'hsr' [ 488.128431][T17702] Cannot create hsr debugfs directory [ 488.253754][T17766] syz_tun: left promiscuous mode [ 488.604160][T17800] netlink: 100 bytes leftover after parsing attributes in process `syz.3.3176'. [ 488.661015][T17804] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 488.668569][T17804] IPv6: NLM_F_CREATE should be set when creating new route [ 488.984978][T17826] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3183'. [ 489.008890][T17826] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3183'. [ 489.161382][T17826] geneve0: entered allmulticast mode [ 489.344683][T17840] xt_CT: You must specify a L4 protocol and not use inversions on it [ 489.667263][T17702] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 489.697183][T17702] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 489.721313][T17702] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 489.847074][ T5631] Bluetooth: hci2: command tx timeout [ 489.898274][T17702] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 489.934692][T17702] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 490.082867][T17702] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 490.127618][T17702] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 490.177831][T17702] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 490.209345][T17860] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3195'. [ 490.246618][T17860] netlink: 'syz.3.3195': attribute type 17 has an invalid length. [ 490.627890][T17882] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 490.844379][T17702] 8021q: adding VLAN 0 to HW filter on device bond0 [ 490.874109][T17893] FAULT_INJECTION: forcing a failure. [ 490.874109][T17893] name failslab, interval 1, probability 0, space 0, times 0 [ 490.887860][T17893] CPU: 0 UID: 0 PID: 17893 Comm: syz.3.3202 Not tainted syzkaller #0 PREEMPT(full) [ 490.887893][T17893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 490.887907][T17893] Call Trace: [ 490.887915][T17893] [ 490.887924][T17893] dump_stack_lvl+0xe8/0x150 [ 490.887966][T17893] should_fail_ex+0x40c/0x560 [ 490.888002][T17893] should_failslab+0xa8/0x100 [ 490.888037][T17893] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 490.888065][T17893] ? local_lock_release+0x9c/0x160 [ 490.888092][T17893] ? __alloc_skb+0x1d7/0x7a0 [ 490.888111][T17893] ? __alloc_skb+0x1d7/0x7a0 [ 490.888138][T17893] __alloc_skb+0x1d7/0x7a0 [ 490.888162][T17893] hci_mgmt_cmd+0x1c1/0xfc0 [ 490.888288][T17893] ? hci_sock_ioctl+0x5d0/0x940 [ 490.888322][T17893] hci_sock_sendmsg+0x6e1/0xf50 [ 490.888360][T17893] ? __pfx_aa_sk_perm+0x10/0x10 [ 490.888385][T17893] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 490.888410][T17893] ? aa_sock_msg_perm+0xf1/0x1b0 [ 490.888441][T17893] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 490.888463][T17893] sock_sendmsg_nosec+0x13a/0x180 [ 490.888500][T17893] sock_write_iter+0x2de/0x3e0 [ 490.888531][T17893] ? __pfx_sock_write_iter+0x10/0x10 [ 490.888568][T17893] ? bpf_lsm_file_permission+0x9/0x20 [ 490.888597][T17893] ? security_file_permission+0x75/0x260 [ 490.888641][T17893] vfs_write+0x612/0xba0 [ 490.888672][T17893] ? __pfx_vfs_write+0x10/0x10 [ 490.888706][T17893] ? __fget_files+0x2a/0x420 [ 490.888747][T17893] ksys_write+0x150/0x270 [ 490.888770][T17893] ? __pfx_ksys_write+0x10/0x10 [ 490.888799][T17893] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.888824][T17893] do_syscall_64+0x174/0x580 [ 490.888851][T17893] ? trace_irq_disable+0x3b/0x140 [ 490.888882][T17893] ? clear_bhb_loop+0x40/0x90 [ 490.888908][T17893] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.888928][T17893] RIP: 0033:0x7ffa38d9de99 [ 490.888949][T17893] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 490.888968][T17893] RSP: 002b:00007ffa39d26028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 490.888992][T17893] RAX: ffffffffffffffda RBX: 00007ffa39025fa0 RCX: 00007ffa38d9de99 [ 490.889007][T17893] RDX: 0000000000000007 RSI: 0000200000000340 RDI: 000000000000000a [ 490.889019][T17893] RBP: 00007ffa39d26090 R08: 0000000000000000 R09: 0000000000000000 [ 490.889032][T17893] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 490.889044][T17893] R13: 00007ffa39026038 R14: 00007ffa39025fa0 R15: 00007ffe8b61a6d8 [ 490.889079][T17893] [ 490.889215][T17893] Bluetooth: MGMT ver 1.23 [ 490.945202][T17702] 8021q: adding VLAN 0 to HW filter on device team0 [ 491.169047][ T8169] bridge0: port 1(bridge_slave_0) entered blocking state [ 491.176505][ T8169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 491.242342][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 491.249865][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 491.277489][ T5638] block nbd9: Receive control failed (result -32) [ 491.290163][ T5631] block nbd9: Receive control failed (result -32) [ 491.301507][T17898] FAULT_INJECTION: forcing a failure. [ 491.301507][T17898] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 491.346555][T17898] CPU: 1 UID: 0 PID: 17898 Comm: syz.3.3203 Not tainted syzkaller #0 PREEMPT(full) [ 491.346587][T17898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 491.346600][T17898] Call Trace: [ 491.346610][T17898] [ 491.346619][T17898] dump_stack_lvl+0xe8/0x150 [ 491.346659][T17898] should_fail_ex+0x40c/0x560 [ 491.346692][T17898] _copy_from_iter+0x1d3/0x1660 [ 491.346724][T17898] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 491.346763][T17898] ? __pfx_policy_nodemask+0x10/0x10 [ 491.346797][T17898] ? unwind_next_frame+0x8f/0x2550 [ 491.346859][T17898] ? __pfx__copy_from_iter+0x10/0x10 [ 491.346894][T17898] ? alloc_pages_mpol+0x24a/0x380 [ 491.346938][T17898] copy_page_from_iter+0x219/0x2d0 [ 491.346974][T17898] tun_get_user+0x1bf1/0x4370 [ 491.347011][T17898] ? tun_get_user+0x6e7/0x4370 [ 491.347059][T17898] ? aa_file_perm+0x4ed/0x15f0 [ 491.347085][T17898] ? __pfx_tun_get_user+0x10/0x10 [ 491.347118][T17898] ? __lock_acquire+0x683/0x2cf0 [ 491.347164][T17898] ? ref_tracker_alloc+0x341/0x4b0 [ 491.347201][T17898] ? get_pid_task+0x20/0x1f0 [ 491.347235][T17898] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 491.347265][T17898] ? tun_get+0x1c/0x2f0 [ 491.347296][T17898] ? tun_get+0x1c/0x2f0 [ 491.347332][T17898] ? tun_get+0x1c/0x2f0 [ 491.347362][T17898] ? tun_get+0x1c/0x2f0 [ 491.347398][T17898] tun_chr_write_iter+0x113/0x200 [ 491.347433][T17898] vfs_write+0x612/0xba0 [ 491.347464][T17898] ? __pfx_vfs_write+0x10/0x10 [ 491.347497][T17898] ? __fget_files+0x2a/0x420 [ 491.347538][T17898] ksys_write+0x150/0x270 [ 491.347563][T17898] ? __pfx_ksys_write+0x10/0x10 [ 491.347593][T17898] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.347618][T17898] do_syscall_64+0x174/0x580 [ 491.347647][T17898] ? trace_irq_disable+0x3b/0x140 [ 491.347677][T17898] ? clear_bhb_loop+0x40/0x90 [ 491.347704][T17898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.347726][T17898] RIP: 0033:0x7ffa38d5e6ce [ 491.347748][T17898] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 491.347767][T17898] RSP: 002b:00007ffa39d25fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 491.347790][T17898] RAX: ffffffffffffffda RBX: 00007ffa39d266c0 RCX: 00007ffa38d5e6ce [ 491.347806][T17898] RDX: 000000000000002a RSI: 0000200000000000 RDI: 00000000000000c8 [ 491.347819][T17898] RBP: 00007ffa39d26090 R08: 0000000000000000 R09: 0000000000000000 [ 491.347832][T17898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 491.347844][T17898] R13: 00007ffa39026038 R14: 00007ffa39025fa0 R15: 00007ffe8b61a6d8 [ 491.347878][T17898] [ 491.631401][T17702] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 491.641892][T17702] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 491.904625][T17909] netlink: 'syz.4.3206': attribute type 1 has an invalid length. [ 491.914920][T17909] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3206'. [ 491.927783][ T5631] Bluetooth: hci2: command tx timeout [ 491.991882][T17909] veth3: entered allmulticast mode [ 492.055890][T17914] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3206'. [ 492.360958][T17926] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3211'. [ 492.565955][T17936] block nbd4: NBD_DISCONNECT [ 492.578149][T17936] block nbd4: Send disconnect failed -32 [ 492.589799][T17936] block nbd4: Send disconnect failed -32 [ 492.601433][T17936] block nbd4: shutting down sockets [ 492.610855][T17940] netlink: 'syz.0.3212': attribute type 21 has an invalid length. [ 492.638476][T17940] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3212'. [ 492.689671][T17940] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3212'. [ 492.803423][T17948] syzkaller0: entered promiscuous mode [ 492.810134][T17948] syzkaller0: entered allmulticast mode [ 492.935565][T17950] syzkaller0: entered promiscuous mode [ 492.947985][T17950] syzkaller0: entered allmulticast mode [ 493.109600][T17702] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 493.284646][T17702] veth0_vlan: entered promiscuous mode [ 493.316794][T17962] netlink: 100 bytes leftover after parsing attributes in process `syz.4.3222'. [ 493.326149][T17702] veth1_vlan: entered promiscuous mode [ 493.541729][T17702] veth0_macvtap: entered promiscuous mode [ 493.565708][T17702] veth1_macvtap: entered promiscuous mode [ 493.631237][T17702] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 493.679698][T17702] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 493.705809][T17969] block nbd1: NBD_DISCONNECT [ 493.721963][T17969] block nbd1: Send disconnect failed -32 [ 493.732780][ T3333] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.750683][T17969] block nbd1: Send disconnect failed -32 [ 493.775476][T17969] block nbd1: shutting down sockets [ 493.798674][ T3333] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.824551][ T3333] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.884930][ T3333] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.007293][ T5631] Bluetooth: hci2: command tx timeout [ 494.029911][T17982] netlink: 'syz.1.3229': attribute type 9 has an invalid length. [ 494.415082][ T3289] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 494.431959][ T3289] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 494.515649][ T3289] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 494.542531][ T3289] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 494.850295][T18003] netlink: 'syz.3.3234': attribute type 1 has an invalid length. [ 494.870362][T17996] block nbd1: server does not support multiple connections per device. [ 494.913772][T18004] netlink: 'syz.1.3232': attribute type 46 has an invalid length. [ 494.936465][T17996] block nbd1: shutting down sockets [ 494.942408][T18007] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3234'. [ 494.974426][T18004] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3232'. [ 495.056565][T18011] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3234'. [ 495.122798][T18003] 8021q: adding VLAN 0 to HW filter on device bond2 [ 495.239221][T18007] veth7: entered allmulticast mode [ 495.260885][ T5638] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 495.282196][ T5638] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 495.291185][ T5638] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 495.299698][ T5638] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 495.309951][ T5638] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 495.336673][T18007] bond2: (slave veth7): Enslaving as an active interface with a down link [ 495.401519][T18008] bond1: (slave veth0_to_bond): Releasing active interface [ 495.460319][T18008] bond2: (slave veth0_to_bond): making interface the new active one [ 495.498888][T18008] veth0_to_bond: entered promiscuous mode [ 495.508827][T18008] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 495.793343][T18031] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3241'. [ 495.821582][T18030] FAULT_INJECTION: forcing a failure. [ 495.821582][T18030] name failslab, interval 1, probability 0, space 0, times 0 [ 495.877920][T18030] CPU: 1 UID: 0 PID: 18030 Comm: syz.1.3242 Not tainted syzkaller #0 PREEMPT(full) [ 495.877954][T18030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 495.877967][T18030] Call Trace: [ 495.877975][T18030] [ 495.877985][T18030] dump_stack_lvl+0xe8/0x150 [ 495.878028][T18030] should_fail_ex+0x40c/0x560 [ 495.878063][T18030] should_failslab+0xa8/0x100 [ 495.878099][T18030] __kmalloc_noprof+0xfe/0x720 [ 495.878130][T18030] ? bpf_test_init+0x9f/0x150 [ 495.878155][T18030] ? bpf_test_init+0x9f/0x150 [ 495.878185][T18030] bpf_test_init+0x9f/0x150 [ 495.878212][T18030] bpf_prog_test_run_skb+0x31e/0x2230 [ 495.878255][T18030] ? __fget_files+0x3a2/0x420 [ 495.878283][T18030] ? __fget_files+0x2a/0x420 [ 495.878319][T18030] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 495.878345][T18030] bpf_prog_test_run+0x2c5/0x340 [ 495.878383][T18030] __sys_bpf+0xa22/0xd90 [ 495.878430][T18030] ? __pfx___sys_bpf+0x10/0x10 [ 495.878470][T18030] ? __fget_files+0x2a/0x420 [ 495.878518][T18030] ? ksys_write+0x242/0x270 [ 495.878542][T18030] ? __pfx_ksys_write+0x10/0x10 [ 495.878569][T18030] __x64_sys_bpf+0xba/0xd0 [ 495.878596][T18030] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.878620][T18030] do_syscall_64+0x174/0x580 [ 495.878647][T18030] ? trace_irq_disable+0x3b/0x140 [ 495.878676][T18030] ? clear_bhb_loop+0x40/0x90 [ 495.878704][T18030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.878727][T18030] RIP: 0033:0x7f7f3279de99 [ 495.878747][T18030] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 495.878766][T18030] RSP: 002b:00007f7f335d2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 495.878791][T18030] RAX: ffffffffffffffda RBX: 00007f7f32a25fa0 RCX: 00007f7f3279de99 [ 495.878806][T18030] RDX: 0000000000000022 RSI: 0000200000001bc0 RDI: 000000000000000a [ 495.878820][T18030] RBP: 00007f7f335d2090 R08: 0000000000000000 R09: 0000000000000000 [ 495.878833][T18030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 495.878846][T18030] R13: 00007f7f32a26038 R14: 00007f7f32a25fa0 R15: 00007ffdbfa03d48 [ 495.878881][T18030] [ 496.685207][ T5631] block nbd1: Receive control failed (result -32) [ 496.685423][ T5638] block nbd1: Receive control failed (result -32) [ 496.921904][T18015] lo speed is unknown, defaulting to 1000 [ 497.179216][T18073] netlink: 100 bytes leftover after parsing attributes in process `syz.4.3252'. [ 497.212047][T18073] FAULT_INJECTION: forcing a failure. [ 497.212047][T18073] name failslab, interval 1, probability 0, space 0, times 0 [ 497.228333][T18073] CPU: 1 UID: 0 PID: 18073 Comm: syz.4.3252 Not tainted syzkaller #0 PREEMPT(full) [ 497.228366][T18073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 497.228380][T18073] Call Trace: [ 497.228389][T18073] [ 497.228399][T18073] dump_stack_lvl+0xe8/0x150 [ 497.228439][T18073] should_fail_ex+0x40c/0x560 [ 497.228474][T18073] should_failslab+0xa8/0x100 [ 497.228511][T18073] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 497.228540][T18073] ? local_lock_release+0x9c/0x160 [ 497.228568][T18073] ? __alloc_skb+0x1d7/0x7a0 [ 497.228588][T18073] ? __alloc_skb+0x1d7/0x7a0 [ 497.228616][T18073] __alloc_skb+0x1d7/0x7a0 [ 497.228643][T18073] netlink_ack+0x136/0xb30 [ 497.228668][T18073] ? __pfx_genl_rcv_msg+0x10/0x10 [ 497.228700][T18073] ? __pfx_nl80211_post_doit+0x10/0x10 [ 497.228856][T18073] ? __pfx_ref_tracker_free+0x10/0x10 [ 497.228898][T18073] netlink_rcv_skb+0x2a4/0x4a0 [ 497.228926][T18073] ? __pfx_genl_rcv_msg+0x10/0x10 [ 497.228960][T18073] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 497.229020][T18073] ? down_read+0x2be/0x330 [ 497.229057][T18073] genl_rcv+0x28/0x40 [ 497.229087][T18073] netlink_unicast+0x7bb/0x940 [ 497.229123][T18073] netlink_sendmsg+0x813/0xb40 [ 497.229160][T18073] ? __pfx_netlink_sendmsg+0x10/0x10 [ 497.229192][T18073] ? aa_sock_msg_perm+0xf1/0x1b0 [ 497.229225][T18073] ? __pfx_netlink_sendmsg+0x10/0x10 [ 497.229250][T18073] sock_sendmsg_nosec+0x13a/0x180 [ 497.229285][T18073] ____sys_sendmsg+0x54e/0x850 [ 497.229322][T18073] ? __pfx_____sys_sendmsg+0x10/0x10 [ 497.229357][T18073] ? import_iovec+0x73/0xa0 [ 497.229394][T18073] ___sys_sendmsg+0x2a5/0x360 [ 497.229419][T18073] ? __lock_acquire+0x683/0x2cf0 [ 497.229456][T18073] ? __pfx____sys_sendmsg+0x10/0x10 [ 497.229520][T18073] ? __fget_files+0x2a/0x420 [ 497.229550][T18073] ? __fget_files+0x3a2/0x420 [ 497.229591][T18073] __x64_sys_sendmsg+0x1b1/0x290 [ 497.229620][T18073] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 497.229666][T18073] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.229689][T18073] do_syscall_64+0x174/0x580 [ 497.229714][T18073] ? trace_irq_disable+0x3b/0x140 [ 497.229742][T18073] ? clear_bhb_loop+0x40/0x90 [ 497.229769][T18073] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.229791][T18073] RIP: 0033:0x7faf05d9de99 [ 497.229811][T18073] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 497.229838][T18073] RSP: 002b:00007faf03ff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 497.229860][T18073] RAX: ffffffffffffffda RBX: 00007faf06025fa0 RCX: 00007faf05d9de99 [ 497.229875][T18073] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000007 [ 497.229888][T18073] RBP: 00007faf03ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 497.229900][T18073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 497.229913][T18073] R13: 00007faf06026038 R14: 00007faf06025fa0 R15: 00007ffe76ce00c8 [ 497.229946][T18073] [ 497.548822][ T5638] Bluetooth: hci4: command tx timeout [ 497.825600][T18089] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3255'. [ 498.041331][T18015] bridge0: port 1(bridge_slave_0) entered blocking state [ 498.062772][T18015] bridge0: port 1(bridge_slave_0) entered disabled state [ 498.071857][T18015] bridge_slave_0: entered allmulticast mode [ 498.098923][T18015] bridge_slave_0: entered promiscuous mode [ 498.123426][T18015] bridge0: port 2(bridge_slave_1) entered blocking state [ 498.136185][ T12] IPVS: starting estimator thread 0... [ 498.145040][T18015] bridge0: port 2(bridge_slave_1) entered disabled state [ 498.162544][T18015] bridge_slave_1: entered allmulticast mode [ 498.188235][T18015] bridge_slave_1: entered promiscuous mode [ 498.257222][T18101] IPVS: using max 29 ests per chain, 69600 per kthread [ 498.363999][T18015] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 498.403348][T18015] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 498.486007][T18106] xt_hashlimit: size too large, truncated to 1048576 [ 498.558153][T18015] team0: Port device team_slave_0 added [ 498.579515][T18015] team0: Port device team_slave_1 added [ 498.672996][T18015] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 498.710364][T18015] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 498.768604][T18015] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 498.823287][T18015] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 498.834963][T18015] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 498.886611][T18015] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 498.917668][T18117] syzkaller1: entered promiscuous mode [ 498.923981][T18117] syzkaller1: entered allmulticast mode [ 498.965672][T18117] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3263'. [ 499.144278][T18130] FAULT_INJECTION: forcing a failure. [ 499.144278][T18130] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 499.158425][T18130] CPU: 0 UID: 0 PID: 18130 Comm: syz.3.3265 Not tainted syzkaller #0 PREEMPT(full) [ 499.158473][T18130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 499.158495][T18130] Call Trace: [ 499.158509][T18130] [ 499.158521][T18130] dump_stack_lvl+0xe8/0x150 [ 499.158564][T18130] should_fail_ex+0x40c/0x560 [ 499.158599][T18130] _copy_from_user+0x2d/0xb0 [ 499.158620][T18130] kstrtouint_from_user+0xd6/0x180 [ 499.158652][T18130] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 499.158708][T18130] proc_fail_nth_write+0x8e/0x210 [ 499.158741][T18130] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 499.158782][T18130] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 499.158813][T18130] vfs_write+0x296/0xba0 [ 499.158845][T18130] ? __pfx_vfs_write+0x10/0x10 [ 499.158869][T18130] ? __fget_files+0x2a/0x420 [ 499.158904][T18130] ? __fget_files+0x3a2/0x420 [ 499.158933][T18130] ? __fget_files+0x2a/0x420 [ 499.158972][T18130] ksys_write+0x150/0x270 [ 499.158998][T18130] ? __pfx_ksys_write+0x10/0x10 [ 499.159029][T18130] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.159053][T18130] do_syscall_64+0x174/0x580 [ 499.159081][T18130] ? trace_irq_disable+0x3b/0x140 [ 499.159111][T18130] ? clear_bhb_loop+0x40/0x90 [ 499.159139][T18130] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.159161][T18130] RIP: 0033:0x7ffa38d5e6ce [ 499.159182][T18130] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 499.159202][T18130] RSP: 002b:00007ffa39d04fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 499.159226][T18130] RAX: ffffffffffffffda RBX: 00007ffa39d056c0 RCX: 00007ffa38d5e6ce [ 499.159242][T18130] RDX: 0000000000000001 RSI: 00007ffa39d050a0 RDI: 000000000000000a [ 499.159255][T18130] RBP: 00007ffa39d05090 R08: 0000000000000000 R09: 0000000000000000 [ 499.159269][T18130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 499.159281][T18130] R13: 00007ffa39026128 R14: 00007ffa39026090 R15: 00007ffe8b61a6d8 [ 499.159317][T18130] [ 499.578633][T18015] hsr_slave_0: entered promiscuous mode [ 499.608740][ T5638] Bluetooth: hci4: command tx timeout [ 499.634562][T18015] hsr_slave_1: entered promiscuous mode [ 499.668192][T18015] debugfs: 'hsr0' already exists in 'hsr' [ 499.674126][T18015] Cannot create hsr debugfs directory [ 500.326372][T18159] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3275'. [ 500.335729][T18157] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3274'. [ 500.473206][T18015] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 500.613392][T18159] hsr_slave_1 (unregistering): left promiscuous mode [ 500.803614][T18015] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 501.265352][T18015] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 501.283018][T18184] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 501.416726][T18015] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 501.687146][ T5638] Bluetooth: hci4: command tx timeout [ 501.750550][T18203] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 501.858386][T18214] netlink: 'syz.4.3290': attribute type 21 has an invalid length. [ 501.867174][T18214] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3290'. [ 501.949278][T18218] netlink: 'syz.4.3292': attribute type 1 has an invalid length. [ 501.977481][T18218] 8021q: adding VLAN 0 to HW filter on device bond1 [ 502.000400][T18218] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3292'. [ 502.014401][T18218] netlink: 144 bytes leftover after parsing attributes in process `syz.4.3292'. [ 502.025513][T18218] netlink: 144 bytes leftover after parsing attributes in process `syz.4.3292'. [ 503.767335][ T5638] Bluetooth: hci4: command tx timeout [ 504.079021][T18191] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 504.109850][T18015] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 504.181073][T18015] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 504.200591][T18015] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 504.267520][T18015] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 504.275697][T18015] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 504.289006][T18015] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 504.308508][T18015] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 504.355628][T18015] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 504.438179][T18245] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.3300'. [ 504.802826][T18257] FAULT_INJECTION: forcing a failure. [ 504.802826][T18257] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 504.841182][T18257] CPU: 1 UID: 0 PID: 18257 Comm: syz.2.3302 Not tainted syzkaller #0 PREEMPT(full) [ 504.841215][T18257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 504.841237][T18257] Call Trace: [ 504.841246][T18257] [ 504.841256][T18257] dump_stack_lvl+0xe8/0x150 [ 504.841295][T18257] should_fail_ex+0x40c/0x560 [ 504.841330][T18257] _copy_from_user+0x2d/0xb0 [ 504.841353][T18257] bpf_test_init+0xd8/0x150 [ 504.841385][T18257] bpf_prog_test_run_skb+0x31e/0x2230 [ 504.841431][T18257] ? __fget_files+0x3a2/0x420 [ 504.841461][T18257] ? __fget_files+0x2a/0x420 [ 504.841495][T18257] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 504.841526][T18257] bpf_prog_test_run+0x2c5/0x340 [ 504.841564][T18257] __sys_bpf+0xa22/0xd90 [ 504.841601][T18257] ? __pfx___sys_bpf+0x10/0x10 [ 504.841642][T18257] ? __fget_files+0x2a/0x420 [ 504.841690][T18257] ? ksys_write+0x242/0x270 [ 504.841715][T18257] ? __pfx_ksys_write+0x10/0x10 [ 504.841743][T18257] __x64_sys_bpf+0xba/0xd0 [ 504.841771][T18257] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.841795][T18257] do_syscall_64+0x174/0x580 [ 504.841823][T18257] ? trace_irq_disable+0x3b/0x140 [ 504.841851][T18257] ? clear_bhb_loop+0x40/0x90 [ 504.841878][T18257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.841899][T18257] RIP: 0033:0x7f1da4f9de99 [ 504.841920][T18257] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 504.841940][T18257] RSP: 002b:00007f1da5dea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 504.841963][T18257] RAX: ffffffffffffffda RBX: 00007f1da5225fa0 RCX: 00007f1da4f9de99 [ 504.841978][T18257] RDX: 0000000000000022 RSI: 0000200000001bc0 RDI: 000000000000000a [ 504.841993][T18257] RBP: 00007f1da5dea090 R08: 0000000000000000 R09: 0000000000000000 [ 504.842006][T18257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 504.842018][T18257] R13: 00007f1da5226038 R14: 00007f1da5225fa0 R15: 00007ffe73e99d38 [ 504.842053][T18257] [ 505.071055][T18015] 8021q: adding VLAN 0 to HW filter on device bond0 [ 505.110825][T18015] 8021q: adding VLAN 0 to HW filter on device team0 [ 505.123575][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 505.130836][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 505.225519][ T8169] bridge0: port 2(bridge_slave_1) entered blocking state [ 505.232780][ T8169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 505.313149][T18269] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3306'. [ 505.400191][T18271] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3307'. [ 505.756464][T18288] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3313'. [ 505.777948][T18288] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3313'. [ 506.347775][T18015] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 506.371239][T18288] mac80211_hwsim hwsim27 wlan1: entered promiscuous mode [ 506.436441][T18015] veth0_vlan: entered promiscuous mode [ 506.452990][T18015] veth1_vlan: entered promiscuous mode [ 506.561956][T18015] veth0_macvtap: entered promiscuous mode [ 506.609559][T18015] veth1_macvtap: entered promiscuous mode [ 506.634941][T18302] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 506.712001][T18305] bond2: up delay (7) is not a multiple of miimon (100), value rounded to 0 ms [ 506.723056][T18305] bond2: entered allmulticast mode [ 506.780425][T18015] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 506.858325][T18015] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 506.886545][ T3333] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.932026][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.949226][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.000237][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.192946][ T5758] lo speed is unknown, defaulting to 1000 [ 507.201944][ T9604] lo speed is unknown, defaulting to 1000 [ 507.231266][T18316] ip6erspan0: entered allmulticast mode [ 507.371839][ T1107] veth0_to_bond: left promiscuous mode [ 507.371913][T18326] netlink: 81 bytes leftover after parsing attributes in process `syz.3.3322'. [ 507.380997][T18326] netlink: 81 bytes leftover after parsing attributes in process `syz.3.3322'. [ 507.480955][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 507.505938][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 507.616685][ T1003] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 507.650101][ T1003] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 507.982194][T18345] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3235'. [ 508.034953][T18345] netlink: 'syz.0.3235': attribute type 29 has an invalid length. [ 508.246443][T18348] bond1: up delay (7) is not a multiple of miimon (100), value rounded to 0 ms [ 508.279478][T18356] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3333'. [ 508.297192][T18348] bond1: entered allmulticast mode [ 508.559064][T18371] netlink: 'syz.0.3337': attribute type 1 has an invalid length. [ 508.634233][T18367] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3337'. [ 508.705668][T18367] veth3: entered allmulticast mode [ 508.737918][T18368] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 508.765343][T18360] sch_tbf: burst 4 is lower than device lo mtu (65550) ! [ 508.934262][T18381] syzkaller0: entered promiscuous mode [ 508.947273][T18381] syzkaller0: entered allmulticast mode [ 509.238264][T18394] netlink: 'syz.1.3347': attribute type 1 has an invalid length. [ 509.326526][T18394] 8021q: adding VLAN 0 to HW filter on device bond2 [ 509.502698][T18400] bond2: (slave veth0_to_bond): making interface the new active one [ 509.542413][T18400] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 509.608714][T18404] bond2: entered promiscuous mode [ 509.627471][T18404] veth0_to_bond: entered promiscuous mode [ 509.644338][T18404] bond2: entered allmulticast mode [ 509.714578][T18404] veth0_to_bond: entered allmulticast mode [ 509.746276][T18415] __nla_validate_parse: 3 callbacks suppressed [ 509.746304][T18415] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3350'. [ 509.853694][T18421] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3350'. [ 509.882937][T18422] netlink: 100 bytes leftover after parsing attributes in process `syz.3.3351'. [ 509.918435][T18421] hsr_slave_0: left promiscuous mode [ 509.928685][T18424] FAULT_INJECTION: forcing a failure. [ 509.928685][T18424] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 509.968268][T18421] hsr_slave_1: left promiscuous mode [ 509.979664][T18424] CPU: 1 UID: 0 PID: 18424 Comm: syz.2.3352 Not tainted syzkaller #0 PREEMPT(full) [ 509.979698][T18424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 509.979712][T18424] Call Trace: [ 509.979722][T18424] [ 509.979732][T18424] dump_stack_lvl+0xe8/0x150 [ 509.979775][T18424] should_fail_ex+0x40c/0x560 [ 509.979810][T18424] _copy_from_iter+0x1d3/0x1660 [ 509.979841][T18424] ? kmem_cache_alloc_node_noprof+0x111/0x610 [ 509.979882][T18424] ? rcu_is_watching+0x15/0xb0 [ 509.979944][T18424] ? trace_kmem_cache_alloc+0x29/0xe0 [ 509.979974][T18424] ? kmem_cache_alloc_node_noprof+0x3b8/0x610 [ 509.980003][T18424] ? __pfx__copy_from_iter+0x10/0x10 [ 509.980033][T18424] ? __alloc_skb+0x276/0x7a0 [ 509.980057][T18424] ? __alloc_skb+0x276/0x7a0 [ 509.980086][T18424] ? netlink_sendmsg+0x650/0xb40 [ 509.980116][T18424] ? skb_put+0x112/0x210 [ 509.980143][T18424] netlink_sendmsg+0x6c0/0xb40 [ 509.980180][T18424] ? __pfx_netlink_sendmsg+0x10/0x10 [ 509.980212][T18424] ? aa_sock_msg_perm+0xf1/0x1b0 [ 509.980244][T18424] ? __pfx_netlink_sendmsg+0x10/0x10 [ 509.980270][T18424] sock_sendmsg_nosec+0x13a/0x180 [ 509.980306][T18424] ____sys_sendmsg+0x54e/0x850 [ 509.980340][T18424] ? __pfx_____sys_sendmsg+0x10/0x10 [ 509.980377][T18424] ? import_iovec+0x73/0xa0 [ 509.980417][T18424] ___sys_sendmsg+0x2a5/0x360 [ 509.980443][T18424] ? __lock_acquire+0x683/0x2cf0 [ 509.980480][T18424] ? __pfx____sys_sendmsg+0x10/0x10 [ 509.980543][T18424] ? __fget_files+0x2a/0x420 [ 509.980575][T18424] ? __fget_files+0x3a2/0x420 [ 509.980615][T18424] __x64_sys_sendmsg+0x1b1/0x290 [ 509.980646][T18424] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 509.980693][T18424] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 509.980718][T18424] do_syscall_64+0x174/0x580 [ 509.980745][T18424] ? trace_irq_disable+0x3b/0x140 [ 509.980774][T18424] ? clear_bhb_loop+0x40/0x90 [ 509.980801][T18424] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 509.980823][T18424] RIP: 0033:0x7f1da4f9de99 [ 509.980846][T18424] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 509.980874][T18424] RSP: 002b:00007f1da5dea028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 509.980898][T18424] RAX: ffffffffffffffda RBX: 00007f1da5225fa0 RCX: 00007f1da4f9de99 [ 509.980914][T18424] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 509.980929][T18424] RBP: 00007f1da5dea090 R08: 0000000000000000 R09: 0000000000000000 [ 509.980943][T18424] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 509.980956][T18424] R13: 00007f1da5226038 R14: 00007f1da5225fa0 R15: 00007ffe73e99d38 [ 509.980989][T18424] [ 510.593022][T18445] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 510.672777][T18435] ip6gre1: entered promiscuous mode [ 510.693863][T18442] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3356'. [ 510.743833][T18435] ip6gre1: entered allmulticast mode [ 510.836841][T18451] syzkaller0: entered promiscuous mode [ 510.848827][T18451] syzkaller0: entered allmulticast mode [ 510.875970][T18451] 0: reclassify loop, rule prio 0, protocol 800 [ 511.031930][T18458] netlink: 212 bytes leftover after parsing attributes in process `syz.2.3363'. [ 511.060430][T18458] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3363'. [ 511.279326][T18467] IPVS: set_ctl: invalid protocol: 50 172.20.20.170:20002 [ 511.350001][T18469] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3365'. [ 511.517141][T18463] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3365'. [ 511.543774][T18463] hsr_slave_0: left promiscuous mode [ 512.597844][T18525] ip6t_rpfilter: unknown options [ 512.652876][T18530] sctp: [Deprecated]: syz.1.3392 (pid 18530) Use of struct sctp_assoc_value in delayed_ack socket option. [ 512.652876][T18530] Use struct sctp_sack_info instead [ 513.069801][T18555] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3401'. [ 513.089797][T18553] bond1: up delay (7) is not a multiple of miimon (100), value rounded to 0 ms [ 513.110501][T18553] bond1: entered allmulticast mode [ 513.232721][T18559] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3403'. [ 513.522143][T18570] nbd: must specify at least one socket [ 513.531780][T18572] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 513.549537][T18570] block nbd3: NBD_DISCONNECT [ 513.567561][T18570] block nbd3: Send disconnect failed -32 [ 513.574334][T18570] block nbd3: Send disconnect failed -32 [ 513.590753][T18570] block nbd3: shutting down sockets [ 514.064680][ T5631] block nbd3: Receive control failed (result -32) [ 514.064680][ T5638] block nbd3: Receive control failed (result -32) [ 514.363475][T18577] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.371485][T18577] bridge0: port 1(bridge_slave_0) entered disabled state [ 515.033066][T18577] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 515.095256][T18577] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 515.760385][T18577] bond2: left allmulticast mode [ 515.804004][T18586] veth3: entered allmulticast mode [ 515.843093][ T1003] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.867350][ T1003] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.921189][ T1003] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.930513][ T1003] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.041123][T18611] __nla_validate_parse: 3 callbacks suppressed [ 516.041146][T18611] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3418'. [ 516.082163][T18614] xt_hashlimit: max too large, truncated to 1048576 [ 516.089904][T18611] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3418'. [ 516.125416][T18616] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 516.519970][ T5638] block nbd4: Receive control failed (result -32) [ 516.529539][ T5631] block nbd4: Receive control failed (result -32) [ 516.912295][T18630] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3425'. [ 517.131503][T18635] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3426'. [ 517.160562][T18633] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3426'. [ 517.165411][T18636] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3427'. [ 517.199292][T18635] syzkaller0: entered promiscuous mode [ 517.211848][T18636] nbd: must specify at least one socket [ 517.217718][T18635] syzkaller0: entered allmulticast mode [ 517.239532][T18636] netlink: 212 bytes leftover after parsing attributes in process `syz.2.3427'. [ 517.658481][T18657] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3435'. [ 517.760915][T18662] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 518.235218][T18672] bond2: up delay (7) is not a multiple of miimon (100), value rounded to 0 ms [ 518.284704][T18672] bond2: entered allmulticast mode [ 518.492790][ T5638] block nbd10: Receive control failed (result -32) [ 518.499936][ T5631] block nbd10: Receive control failed (result -32) [ 518.679965][T18683] netlink: 'syz.1.3443': attribute type 1 has an invalid length. [ 518.757998][T18683] 8021q: adding VLAN 0 to HW filter on device bond3 [ 518.831763][T18683] netlink: 'syz.1.3443': attribute type 1 has an invalid length. [ 518.856601][T18683] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3443'. [ 518.909176][T18689] bond3: (slave gretap1): making interface the new active one [ 518.943436][T18689] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 519.183648][T18701] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3448'. [ 519.562768][T18721] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 520.593240][ T5638] block nbd11: Receive control failed (result -32) [ 520.597851][ T5631] block nbd11: Receive control failed (result -32) [ 521.459969][T18762] __nla_validate_parse: 3 callbacks suppressed [ 521.459995][T18762] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3468'. [ 521.699965][T18777] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 521.717398][T18746] lo speed is unknown, defaulting to 1000 [ 521.723593][T18778] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 522.394073][T18789] tipc: Started in network mode [ 522.406378][T18789] tipc: Node identity 928a8de1f8fb, cluster identity 4711 [ 522.422379][T18789] tipc: Enabled bearer , priority 0 [ 522.440693][T18789] syzkaller0: entered promiscuous mode [ 522.456532][T18789] syzkaller0: entered allmulticast mode [ 522.518141][T18793] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3478'. [ 522.563541][T18789] veth1_to_hsr: mtu greater than device maximum [ 522.582027][T18788] tipc: Resetting bearer [ 522.682304][T18788] tipc: Disabling bearer [ 523.154160][ T3289] IPVS: starting estimator thread 0... [ 523.257073][T18804] IPVS: using max 26 ests per chain, 62400 per kthread [ 523.366873][T18813] tipc: Enabling of bearer rejected, failed to enable media [ 523.403450][T18814] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3483'. [ 523.437178][T18814] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3483'. [ 523.468212][T18816] netlink: 'syz.1.3483': attribute type 1 has an invalid length. [ 523.960276][T18835] FAULT_INJECTION: forcing a failure. [ 523.960276][T18835] name failslab, interval 1, probability 0, space 0, times 0 [ 523.991400][T18835] CPU: 1 UID: 0 PID: 18835 Comm: syz.3.3489 Not tainted syzkaller #0 PREEMPT(full) [ 523.991435][T18835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 523.991449][T18835] Call Trace: [ 523.991459][T18835] [ 523.991467][T18835] dump_stack_lvl+0xe8/0x150 [ 523.991507][T18835] should_fail_ex+0x40c/0x560 [ 523.991542][T18835] should_failslab+0xa8/0x100 [ 523.991587][T18835] __kmalloc_noprof+0xfe/0x720 [ 523.991619][T18835] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 523.991654][T18835] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 523.991696][T18835] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 523.991740][T18835] genl_family_rcv_msg_doit+0xda/0x340 [ 523.991784][T18835] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 523.991822][T18835] ? __pfx_genl_get_cmd+0x10/0x10 [ 523.991850][T18835] ? stack_trace_save+0xa9/0x100 [ 523.991878][T18835] ? __pfx_nbd_genl_disconnect+0x10/0x10 [ 523.992019][T18835] ? __lock_acquire+0x683/0x2cf0 [ 523.992061][T18835] genl_rcv_msg+0x614/0x7a0 [ 523.992100][T18835] ? __pfx_genl_rcv_msg+0x10/0x10 [ 523.992129][T18835] ? __pfx_nbd_genl_disconnect+0x10/0x10 [ 523.992167][T18835] netlink_rcv_skb+0x226/0x4a0 [ 523.992196][T18835] ? __pfx_genl_rcv_msg+0x10/0x10 [ 523.992231][T18835] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 523.992275][T18835] ? down_read+0x2be/0x330 [ 523.992312][T18835] genl_rcv+0x28/0x40 [ 523.992341][T18835] netlink_unicast+0x7bb/0x940 [ 523.992386][T18835] netlink_sendmsg+0x813/0xb40 [ 523.992424][T18835] ? __pfx_netlink_sendmsg+0x10/0x10 [ 523.992457][T18835] ? aa_sock_msg_perm+0xf1/0x1b0 [ 523.992487][T18835] ? __pfx_netlink_sendmsg+0x10/0x10 [ 523.992513][T18835] sock_sendmsg_nosec+0x13a/0x180 [ 523.992550][T18835] ____sys_sendmsg+0x54e/0x850 [ 523.992582][T18835] ? __pfx_____sys_sendmsg+0x10/0x10 [ 523.992618][T18835] ? import_iovec+0x73/0xa0 [ 523.992656][T18835] ___sys_sendmsg+0x2a5/0x360 [ 523.992680][T18835] ? __lock_acquire+0x683/0x2cf0 [ 523.992716][T18835] ? __pfx____sys_sendmsg+0x10/0x10 [ 523.992777][T18835] ? __fget_files+0x2a/0x420 [ 523.992807][T18835] ? __fget_files+0x3a2/0x420 [ 523.992846][T18835] __x64_sys_sendmsg+0x1b1/0x290 [ 523.992875][T18835] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 523.992919][T18835] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 523.992944][T18835] do_syscall_64+0x174/0x580 [ 523.992970][T18835] ? trace_irq_disable+0x3b/0x140 [ 523.992998][T18835] ? clear_bhb_loop+0x40/0x90 [ 523.993026][T18835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 523.993049][T18835] RIP: 0033:0x7ffa38d9de99 [ 523.993072][T18835] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 523.993092][T18835] RSP: 002b:00007ffa39d26028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 523.993116][T18835] RAX: ffffffffffffffda RBX: 00007ffa39025fa0 RCX: 00007ffa38d9de99 [ 523.993131][T18835] RDX: 0000000004000810 RSI: 00002000000002c0 RDI: 0000000000000004 [ 523.993145][T18835] RBP: 00007ffa39d26090 R08: 0000000000000000 R09: 0000000000000000 [ 523.993158][T18835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 523.993171][T18835] R13: 00007ffa39026038 R14: 00007ffa39025fa0 R15: 00007ffe8b61a6d8 [ 523.993204][T18835] [ 524.930453][T18849] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3493'. [ 525.148802][T18853] netlink: 'syz.2.3493': attribute type 2 has an invalid length. [ 525.168320][T18853] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3493'. [ 525.192317][ T5631] block nbd12: Receive control failed (result -32) [ 525.193304][ T5638] block nbd12: Receive control failed (result -32) [ 526.258994][T18888] ip6t_rpfilter: unknown options [ 526.544460][T18896] ip6gre1: entered promiscuous mode [ 526.554173][T18896] ip6gre1: entered allmulticast mode [ 526.776254][T18905] vxcan1: tx drop: invalid da for name 0x0000000000000015 [ 526.821558][T18907] syzkaller0: entered promiscuous mode [ 526.842078][T18907] syzkaller0: entered allmulticast mode [ 526.851016][T18911] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 526.877424][T18907] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3515'. [ 526.945190][T18907] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3515'. [ 527.005540][T18916] netlink: 'syz.2.3518': attribute type 2 has an invalid length. [ 527.085509][T18918] netlink: zone id is out of range [ 527.334587][T18927] netlink: 'syz.3.3522': attribute type 1 has an invalid length. [ 527.455686][T18932] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3525'. [ 527.484664][T18935] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3526'. [ 527.495564][T18935] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3526'. [ 528.678560][T18957] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3532'. [ 529.019467][T18974] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3536'. [ 529.121059][ T3333] nci: nci_rsp_packet: unknown rsp opcode 0x9 [ 529.145463][T18984] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 529.185756][T18987] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3539'. [ 529.207051][ T5638] Bluetooth: hci5: command 0x0406 tx timeout [ 529.284319][T18990] bond0: (slave ip6tnl0): refused to change device type [ 529.302428][T18990] ip6erspan0: entered allmulticast mode [ 529.345433][T18992] syz_tun: entered promiscuous mode [ 529.362338][T18988] syz_tun: left promiscuous mode [ 529.467866][T18994] netlink: 'syz.3.3542': attribute type 8 has an invalid length. [ 529.532683][T18996] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3543'. [ 531.936146][T18972] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 532.245945][T19015] netlink: 100 bytes leftover after parsing attributes in process `syz.3.3548'. [ 532.905136][T19042] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3554'. [ 532.934866][T19041] nbd: must specify an index to disconnect [ 533.397943][T19051] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3558'. [ 533.496713][T19053] FAULT_INJECTION: forcing a failure. [ 533.496713][T19053] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 533.537233][T19053] CPU: 1 UID: 0 PID: 19053 Comm: syz.0.3559 Not tainted syzkaller #0 PREEMPT(full) [ 533.537270][T19053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 533.537285][T19053] Call Trace: [ 533.537295][T19053] [ 533.537305][T19053] dump_stack_lvl+0xe8/0x150 [ 533.537348][T19053] should_fail_ex+0x40c/0x560 [ 533.537383][T19053] _copy_to_user+0x31/0xb0 [ 533.537409][T19053] generic_map_lookup_batch+0xa93/0xeb0 [ 533.537453][T19053] ? __pfx_generic_map_lookup_batch+0x10/0x10 [ 533.537480][T19053] ? __fget_files+0x2a/0x420 [ 533.537525][T19053] ? __pfx_generic_map_lookup_batch+0x10/0x10 [ 533.537558][T19053] bpf_map_do_batch+0x27f/0x630 [ 533.537591][T19053] ? bpf_lsm_bpf+0x9/0x20 [ 533.537618][T19053] ? security_bpf+0x7e/0x2d0 [ 533.537731][T19053] __sys_bpf+0xa9f/0xd90 [ 533.537772][T19053] ? __pfx___sys_bpf+0x10/0x10 [ 533.537814][T19053] ? __fget_files+0x2a/0x420 [ 533.537864][T19053] ? ksys_write+0x242/0x270 [ 533.537889][T19053] ? __pfx_ksys_write+0x10/0x10 [ 533.537917][T19053] __x64_sys_bpf+0xba/0xd0 [ 533.537946][T19053] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.537971][T19053] do_syscall_64+0x174/0x580 [ 533.537999][T19053] ? trace_irq_disable+0x3b/0x140 [ 533.538029][T19053] ? clear_bhb_loop+0x40/0x90 [ 533.538057][T19053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.538080][T19053] RIP: 0033:0x7fa59139de99 [ 533.538106][T19053] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 533.538126][T19053] RSP: 002b:00007fa592200028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 533.538151][T19053] RAX: ffffffffffffffda RBX: 00007fa591625fa0 RCX: 00007fa59139de99 [ 533.538167][T19053] RDX: 0000000000000038 RSI: 00002000000003c0 RDI: 0000000000000018 [ 533.538182][T19053] RBP: 00007fa592200090 R08: 0000000000000000 R09: 0000000000000000 [ 533.538196][T19053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 533.538210][T19053] R13: 00007fa591626038 R14: 00007fa591625fa0 R15: 00007fffb864dbf8 [ 533.538245][T19053] [ 533.944046][T19059] syzkaller0: entered promiscuous mode [ 533.949941][T19059] syzkaller0: entered allmulticast mode [ 534.018077][T19059] tipc: Enabled bearer , priority 0 [ 534.056181][T19059] tipc: Resetting bearer [ 534.739640][T19059] tipc: Resetting bearer [ 534.801580][T19059] tipc: Disabling bearer [ 534.917177][T19069] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3565'. [ 534.990585][T19071] nbd: must specify an index to disconnect [ 535.165185][T19077] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3569'. [ 535.222562][T19078] syzkaller0: entered promiscuous mode [ 535.237084][T19078] syzkaller0: entered allmulticast mode [ 535.456684][T19082] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3571'. [ 535.706584][T19088] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3572'. [ 536.768714][T19101] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3577'. [ 537.068078][T19101] bond4: entered promiscuous mode [ 537.077583][T19101] 8021q: adding VLAN 0 to HW filter on device bond4 [ 537.133266][T19109] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3580'. [ 537.215836][T19111] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3581'. [ 537.259445][T19113] netlink: 'syz.0.3579': attribute type 21 has an invalid length. [ 537.283593][T19113] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3579'. [ 537.318164][T19113] netlink: 'syz.0.3579': attribute type 5 has an invalid length. [ 537.350349][T19113] netlink: 'syz.0.3579': attribute type 6 has an invalid length. [ 537.382005][T19113] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3579'. [ 537.382443][T19118] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 537.884186][T19129] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3586'. [ 538.215154][T19039] Set syz1 is full, maxelem 65536 reached [ 538.631154][T19138] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3588'. [ 538.793846][T19123] lo speed is unknown, defaulting to 1000 [ 538.930747][T19149] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3593'. [ 538.949580][T19147] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3592'. [ 539.585682][T19167] x_tables: duplicate underflow at hook 1 [ 539.751564][T19175] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3600'. [ 540.834533][T19216] FAULT_INJECTION: forcing a failure. [ 540.834533][T19216] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 540.853178][T19216] CPU: 1 UID: 0 PID: 19216 Comm: syz.1.3616 Not tainted syzkaller #0 PREEMPT(full) [ 540.853215][T19216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 540.853230][T19216] Call Trace: [ 540.853240][T19216] [ 540.853252][T19216] dump_stack_lvl+0xe8/0x150 [ 540.853298][T19216] should_fail_ex+0x40c/0x560 [ 540.853337][T19216] _copy_to_user+0x31/0xb0 [ 540.853365][T19216] bpf_test_finish+0x17e/0x690 [ 540.853492][T19216] ? __pfx_bpf_test_finish+0x10/0x10 [ 540.853538][T19216] bpf_prog_test_run_skb+0x11fe/0x2230 [ 540.853596][T19216] ? __fget_files+0x3a2/0x420 [ 540.853632][T19216] ? __fget_files+0x2a/0x420 [ 540.853674][T19216] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 540.853705][T19216] bpf_prog_test_run+0x2c5/0x340 [ 540.853748][T19216] __sys_bpf+0xa22/0xd90 [ 540.853793][T19216] ? __pfx___sys_bpf+0x10/0x10 [ 540.853842][T19216] ? __fget_files+0x2a/0x420 [ 540.853898][T19216] ? ksys_write+0x242/0x270 [ 540.853927][T19216] ? __pfx_ksys_write+0x10/0x10 [ 540.853959][T19216] __x64_sys_bpf+0xba/0xd0 [ 540.853990][T19216] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 540.854019][T19216] do_syscall_64+0x174/0x580 [ 540.854053][T19216] ? clear_bhb_loop+0x40/0x90 [ 540.854084][T19216] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 540.854114][T19216] RIP: 0033:0x7f7f3279de99 [ 540.854146][T19216] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 540.854168][T19216] RSP: 002b:00007f7f335d2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 540.854196][T19216] RAX: ffffffffffffffda RBX: 00007f7f32a25fa0 RCX: 00007f7f3279de99 [ 540.854214][T19216] RDX: 0000000000000022 RSI: 0000200000001bc0 RDI: 000000000000000a [ 540.854229][T19216] RBP: 00007f7f335d2090 R08: 0000000000000000 R09: 0000000000000000 [ 540.854245][T19216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 540.854260][T19216] R13: 00007f7f32a26038 R14: 00007f7f32a25fa0 R15: 00007ffdbfa03d48 [ 540.854301][T19216] [ 541.110602][T19220] FAULT_INJECTION: forcing a failure. [ 541.110602][T19220] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 541.124235][T19220] CPU: 0 UID: 0 PID: 19220 Comm: syz.1.3618 Not tainted syzkaller #0 PREEMPT(full) [ 541.124267][T19220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 541.124281][T19220] Call Trace: [ 541.124291][T19220] [ 541.124300][T19220] dump_stack_lvl+0xe8/0x150 [ 541.124342][T19220] should_fail_ex+0x40c/0x560 [ 541.124378][T19220] _copy_from_iter+0x1d3/0x1660 [ 541.124426][T19220] ? __pfx__copy_from_iter+0x10/0x10 [ 541.124468][T19220] ? skb_put+0x112/0x210 [ 541.124498][T19220] hci_sock_sendmsg+0x42a/0xf50 [ 541.124528][T19220] ? __pfx_aa_sk_perm+0x10/0x10 [ 541.124552][T19220] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 541.124578][T19220] ? aa_sock_msg_perm+0xf1/0x1b0 [ 541.124617][T19220] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 541.124640][T19220] sock_sendmsg_nosec+0x13a/0x180 [ 541.124677][T19220] sock_write_iter+0x2de/0x3e0 [ 541.124710][T19220] ? __pfx_sock_write_iter+0x10/0x10 [ 541.124748][T19220] ? bpf_lsm_file_permission+0x9/0x20 [ 541.124775][T19220] ? security_file_permission+0x75/0x260 [ 541.124817][T19220] vfs_write+0x612/0xba0 [ 541.124850][T19220] ? __pfx_vfs_write+0x10/0x10 [ 541.124890][T19220] ? __fget_files+0x2a/0x420 [ 541.124929][T19220] ksys_write+0x150/0x270 [ 541.124953][T19220] ? __pfx_ksys_write+0x10/0x10 [ 541.124984][T19220] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 541.125009][T19220] do_syscall_64+0x174/0x580 [ 541.125037][T19220] ? trace_irq_disable+0x3b/0x140 [ 541.125065][T19220] ? clear_bhb_loop+0x40/0x90 [ 541.125092][T19220] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 541.125113][T19220] RIP: 0033:0x7f7f3279de99 [ 541.125133][T19220] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 541.125151][T19220] RSP: 002b:00007f7f335d2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 541.125173][T19220] RAX: ffffffffffffffda RBX: 00007f7f32a25fa0 RCX: 00007f7f3279de99 [ 541.125211][T19220] RDX: 0000000000000007 RSI: 0000200000000000 RDI: 0000000000000004 [ 541.125226][T19220] RBP: 00007f7f335d2090 R08: 0000000000000000 R09: 0000000000000000 [ 541.125239][T19220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 541.125253][T19220] R13: 00007f7f32a26038 R14: 00007f7f32a25fa0 R15: 00007ffdbfa03d48 [ 541.125287][T19220] [ 541.419098][T19222] bond1: option xmit_hash_policy: invalid value (10) [ 541.441538][T19222] bond1 (unregistering): Released all slaves [ 541.731323][ T5631] block nbd0: Receive control failed (result -107) [ 541.738345][T19233] block nbd0: reconnected socket [ 541.760864][T19240] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3623'. [ 541.801117][T19244] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3626'. [ 542.041617][T19252] netlink: 'syz.4.3629': attribute type 1 has an invalid length. [ 542.087852][T19252] 8021q: adding VLAN 0 to HW filter on device bond3 [ 542.107136][T19252] bond3: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 542.129831][T19252] bond3: entered promiscuous mode [ 542.135537][T19252] bond3: entered allmulticast mode [ 542.780840][T19273] xt_hashlimit: max too large, truncated to 1048576 [ 542.908827][T19282] xt_l2tp: unknown flags: 8b [ 543.139767][T19293] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3639'. [ 543.815905][T19308] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3644'. [ 544.678449][T19311] [ 544.680848][T19311] ====================================================== [ 544.687877][T19311] WARNING: possible circular locking dependency detected [ 544.694916][T19311] syzkaller #0 Not tainted [ 544.699423][T19311] ------------------------------------------------------ [ 544.706544][T19311] syz.0.3645/19311 is trying to acquire lock: [ 544.712644][T19311] ffffffff8ec848a0 (fs_reclaim){+.+.}-{0:0}, at: prepare_alloc_pages+0x15b/0x650 [ 544.721914][T19311] [ 544.721914][T19311] but task is already holding lock: [ 544.729328][T19311] ffff8880760529f8 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x36/0x340 [ 544.738890][T19311] [ 544.738890][T19311] which lock already depends on the new lock. [ 544.738890][T19311] [ 544.749322][T19311] [ 544.749322][T19311] the existing dependency chain (in reverse order) is: [ 544.758369][T19311] [ 544.758369][T19311] -> #7 (&mm->mmap_lock){++++}-{4:4}: [ 544.765946][T19311] __might_fault+0xcb/0x130 [ 544.770993][T19311] _copy_from_user+0x28/0xb0 [ 544.776118][T19311] csum_and_copy_from_iter_full+0x210/0x1fb0 [ 544.782818][T19311] ip_generic_getfrag+0x149/0x2d0 [ 544.788471][T19311] __ip6_append_data+0x3b26/0x40c0 [ 544.794237][T19311] ip6_append_data+0x108/0x270 [ 544.799587][T19311] rawv6_sendmsg+0x1298/0x18c0 [ 544.805056][T19311] sock_sendmsg_nosec+0x10e/0x180 [ 544.810754][T19311] ____sys_sendmsg+0x54e/0x850 [ 544.816058][T19311] ___sys_sendmsg+0x2a5/0x360 [ 544.821299][T19311] __x64_sys_sendmsg+0x1b1/0x290 [ 544.826793][T19311] do_syscall_64+0x174/0x580 [ 544.831953][T19311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.838402][T19311] [ 544.838402][T19311] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 544.846194][T19311] lock_sock_nested+0x41/0x100 [ 544.851509][T19311] inet_shutdown+0x6a/0x390 [ 544.857223][T19311] nbd_mark_nsock_dead+0x2cb/0x550 [ 544.863090][T19311] recv_work+0x1cee/0x1e10 [ 544.868175][T19311] process_scheduled_works+0xa8e/0x14e0 [ 544.874263][T19311] worker_thread+0xa47/0xfb0 [ 544.879742][T19311] kthread+0x388/0x470 [ 544.884537][T19311] ret_from_fork+0x514/0xb70 [ 544.889892][T19311] ret_from_fork_asm+0x1a/0x30 [ 544.895251][T19311] [ 544.895251][T19311] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 544.902921][T19311] __mutex_lock+0x19d/0x1550 [ 544.908152][T19311] nbd_queue_rq+0x373/0x1150 [ 544.913373][T19311] blk_mq_dispatch_rq_list+0x499/0x1990 [ 544.919552][T19311] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 544.926508][T19311] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 544.933057][T19311] blk_mq_run_work_fn+0x16c/0x300 [ 544.938660][T19311] process_scheduled_works+0xa8e/0x14e0 [ 544.944767][T19311] worker_thread+0xa47/0xfb0 [ 544.949910][T19311] kthread+0x388/0x470 [ 544.954524][T19311] ret_from_fork+0x514/0xb70 [ 544.959683][T19311] ret_from_fork_asm+0x1a/0x30 [ 544.965016][T19311] [ 544.965016][T19311] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 544.972244][T19311] __mutex_lock+0x19d/0x1550 [ 544.977374][T19311] nbd_queue_rq+0xc1/0x1150 [ 544.982412][T19311] blk_mq_dispatch_rq_list+0x499/0x1990 [ 544.988680][T19311] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 544.995573][T19311] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 545.002119][T19311] blk_mq_run_work_fn+0x16c/0x300 [ 545.007691][T19311] process_scheduled_works+0xa8e/0x14e0 [ 545.013833][T19311] worker_thread+0xa47/0xfb0 [ 545.018971][T19311] kthread+0x388/0x470 [ 545.023575][T19311] ret_from_fork+0x514/0xb70 [ 545.028702][T19311] ret_from_fork_asm+0x1a/0x30 [ 545.033998][T19311] [ 545.033998][T19311] -> #3 (set->srcu){.+.+}-{0:0}: [ 545.041260][T19311] __synchronize_srcu+0xc9/0x2f0 [ 545.046844][T19311] elevator_switch+0x1e8/0x7b0 [ 545.052295][T19311] elevator_change+0x2fa/0x480 [ 545.057657][T19311] elevator_set_default+0x375/0x440 [ 545.063418][T19311] blk_register_queue+0x3f3/0x4e0 [ 545.069046][T19311] __add_disk+0x6cb/0xe30 [ 545.073968][T19311] add_disk_fwnode+0x100/0x3a0 [ 545.079400][T19311] nbd_dev_add+0x733/0xb60 [ 545.084367][T19311] nbd_init+0x15f/0x1e0 [ 545.089126][T19311] do_one_initcall+0x250/0x870 [ 545.094451][T19311] do_initcall_level+0x10a/0x1a0 [ 545.099987][T19311] do_initcalls+0x59/0xa0 [ 545.104878][T19311] kernel_init_freeable+0x29d/0x3e0 [ 545.110683][T19311] kernel_init+0x1d/0x1d0 [ 545.115592][T19311] ret_from_fork+0x514/0xb70 [ 545.120752][T19311] ret_from_fork_asm+0x1a/0x30 [ 545.126053][T19311] [ 545.126053][T19311] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 545.133898][T19311] __mutex_lock+0x19d/0x1550 [ 545.139134][T19311] elevator_change+0x1af/0x480 [ 545.144439][T19311] elevator_set_none+0xb5/0x140 [ 545.149856][T19311] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 545.156197][T19311] nbd_start_device+0x189/0xb30 [ 545.161581][T19311] nbd_genl_connect+0x1597/0x1c10 [ 545.167151][T19311] genl_family_rcv_msg_doit+0x233/0x340 [ 545.173556][T19311] genl_rcv_msg+0x614/0x7a0 [ 545.178704][T19311] netlink_rcv_skb+0x226/0x4a0 [ 545.184029][T19311] genl_rcv+0x28/0x40 [ 545.188587][T19311] netlink_unicast+0x7bb/0x940 [ 545.193971][T19311] netlink_sendmsg+0x813/0xb40 [ 545.199369][T19311] sock_sendmsg_nosec+0x13a/0x180 [ 545.204937][T19311] ____sys_sendmsg+0x54e/0x850 [ 545.210261][T19311] ___sys_sendmsg+0x2a5/0x360 [ 545.215581][T19311] __x64_sys_sendmsg+0x1b1/0x290 [ 545.221099][T19311] do_syscall_64+0x174/0x580 [ 545.226234][T19311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 545.232729][T19311] [ 545.232729][T19311] -> #1 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 545.241553][T19311] blk_alloc_queue+0x544/0x690 [ 545.246877][T19311] __blk_mq_alloc_disk+0x194/0x390 [ 545.252557][T19311] nbd_dev_add+0x494/0xb60 [ 545.257523][T19311] nbd_init+0x15f/0x1e0 [ 545.262214][T19311] do_one_initcall+0x250/0x870 [ 545.267534][T19311] do_initcall_level+0x10a/0x1a0 [ 545.273009][T19311] do_initcalls+0x59/0xa0 [ 545.277873][T19311] kernel_init_freeable+0x29d/0x3e0 [ 545.283613][T19311] kernel_init+0x1d/0x1d0 [ 545.288696][T19311] ret_from_fork+0x514/0xb70 [ 545.293824][T19311] ret_from_fork_asm+0x1a/0x30 [ 545.299207][T19311] [ 545.299207][T19311] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 545.306516][T19311] __lock_acquire+0x1520/0x2cf0 [ 545.311931][T19311] lock_acquire+0x106/0x350 [ 545.317073][T19311] fs_reclaim_acquire+0x71/0x100 [ 545.322601][T19311] prepare_alloc_pages+0x15b/0x650 [ 545.328300][T19311] __alloc_frozen_pages_noprof+0x12f/0x380 [ 545.334692][T19311] alloc_pages_mpol+0x212/0x380 [ 545.340115][T19311] folio_alloc_mpol_noprof+0x39/0x160 [ 545.346078][T19311] vma_alloc_folio_noprof+0xe1/0x1e0 [ 545.351947][T19311] do_wp_page+0x1163/0x4c70 [ 545.357059][T19311] handle_mm_fault+0x1490/0x3080 [ 545.362683][T19311] do_user_addr_fault+0x744/0x1340 [ 545.368351][T19311] exc_page_fault+0x6a/0xc0 [ 545.373448][T19311] asm_exc_page_fault+0x26/0x30 [ 545.378909][T19311] rep_movs_alternative+0x4a/0xa0 [ 545.384615][T19311] _copy_to_iter+0x255/0x1810 [ 545.389903][T19311] __skb_datagram_iter+0x419/0x980 [ 545.395587][T19311] skb_copy_datagram_iter+0xb5/0x240 [ 545.401464][T19311] virtio_transport_seqpacket_dequeue+0x321/0xc30 [ 545.408559][T19311] __vsock_connectible_recvmsg+0x63e/0xc30 [ 545.414922][T19311] sock_recvmsg+0x196/0x1e0 [ 545.420058][T19311] __sys_recvfrom+0x231/0x3a0 [ 545.425293][T19311] __x64_sys_recvfrom+0xde/0x100 [ 545.430773][T19311] do_syscall_64+0x174/0x580 [ 545.435915][T19311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 545.442443][T19311] [ 545.442443][T19311] other info that might help us debug this: [ 545.442443][T19311] [ 545.452747][T19311] Chain exists of: [ 545.452747][T19311] fs_reclaim --> sk_lock-AF_INET6 --> &mm->mmap_lock [ 545.452747][T19311] [ 545.465470][T19311] Possible unsafe locking scenario: [ 545.465470][T19311] [ 545.472968][T19311] CPU0 CPU1 [ 545.478350][T19311] ---- ---- [ 545.483729][T19311] rlock(&mm->mmap_lock); [ 545.488189][T19311] lock(sk_lock-AF_INET6); [ 545.495332][T19311] lock(&mm->mmap_lock); [ 545.502216][T19311] lock(fs_reclaim); [ 545.506304][T19311] [ 545.506304][T19311] *** DEADLOCK *** [ 545.506304][T19311] [ 545.514452][T19311] 2 locks held by syz.0.3645/19311: [ 545.519663][T19311] #0: ffff88802b1c36e0 (sk_lock-AF_VSOCK){+.+.}-{0:0}, at: __vsock_connectible_recvmsg+0xf6/0xc30 [ 545.530407][T19311] #1: ffff8880760529f8 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x36/0x340 [ 545.540411][T19311] [ 545.540411][T19311] stack backtrace: [ 545.546335][T19311] CPU: 0 UID: 0 PID: 19311 Comm: syz.0.3645 Not tainted syzkaller #0 PREEMPT(full) [ 545.546369][T19311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 545.546380][T19311] Call Trace: [ 545.546388][T19311] [ 545.546397][T19311] dump_stack_lvl+0xe8/0x150 [ 545.546426][T19311] print_circular_bug+0x2e1/0x300 [ 545.546446][T19311] check_noncircular+0x12e/0x150 [ 545.546465][T19311] __lock_acquire+0x1520/0x2cf0 [ 545.546498][T19311] ? prepare_alloc_pages+0x15b/0x650 [ 545.546520][T19311] lock_acquire+0x106/0x350 [ 545.546542][T19311] ? prepare_alloc_pages+0x15b/0x650 [ 545.546569][T19311] fs_reclaim_acquire+0x71/0x100 [ 545.546590][T19311] ? prepare_alloc_pages+0x15b/0x650 [ 545.546612][T19311] prepare_alloc_pages+0x15b/0x650 [ 545.546642][T19311] __alloc_frozen_pages_noprof+0x12f/0x380 [ 545.546668][T19311] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 545.546693][T19311] ? __pfx_policy_nodemask+0x10/0x10 [ 545.546722][T19311] alloc_pages_mpol+0x212/0x380 [ 545.546749][T19311] folio_alloc_mpol_noprof+0x39/0x160 [ 545.546776][T19311] vma_alloc_folio_noprof+0xe1/0x1e0 [ 545.546802][T19311] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 545.546832][T19311] do_wp_page+0x1163/0x4c70 [ 545.546856][T19311] ? __pfx_do_wp_page+0x10/0x10 [ 545.546872][T19311] ? do_raw_spin_lock+0x12b/0x2f0 [ 545.546891][T19311] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 545.546937][T19311] handle_mm_fault+0x1490/0x3080 [ 545.546969][T19311] ? handle_mm_fault+0xec/0x3080 [ 545.546997][T19311] ? __pfx_handle_mm_fault+0x10/0x10 [ 545.547028][T19311] ? __lock_acquire+0x683/0x2cf0 [ 545.547060][T19311] ? lock_mm_and_find_vma+0xa7/0x340 [ 545.547091][T19311] do_user_addr_fault+0x744/0x1340 [ 545.547135][T19311] exc_page_fault+0x6a/0xc0 [ 545.547166][T19311] asm_exc_page_fault+0x26/0x30 [ 545.547189][T19311] RIP: 0010:rep_movs_alternative+0x4a/0xa0 [ 545.547228][T19311] Code: 61 04 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 545.547249][T19311] RSP: 0018:ffffc9000e8c76b8 EFLAGS: 00050206 [ 545.547269][T19311] RAX: ffffffff84d13501 RBX: ffff888023690000 RCX: 0000000000007140 [ 545.547286][T19311] RDX: 0000000000000000 RSI: ffff888023690ec0 RDI: 0000200000001000 [ 545.547301][T19311] RBP: ffffc9000e8c7830 R08: ffff888023697fff R09: 1ffff110046d2fff [ 545.547319][T19311] R10: dffffc0000000000 R11: ffffed10046d3000 R12: 1ffff92001d18fbb [ 545.547337][T19311] R13: 0000200000000140 R14: ffffc9000e8c7de8 R15: 0000000000008000 [ 545.547358][T19311] ? _copy_to_iter+0x191/0x1810 [ 545.547393][T19311] _copy_to_iter+0x255/0x1810 [ 545.547428][T19311] ? __lock_acquire+0x683/0x2cf0 [ 545.547460][T19311] ? register_lock_class+0x31/0x2e0 [ 545.547492][T19311] ? __pfx__copy_to_iter+0x10/0x10 [ 545.547525][T19311] ? __lock_acquire+0x683/0x2cf0 [ 545.547562][T19311] __skb_datagram_iter+0x419/0x980 [ 545.547591][T19311] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 545.547625][T19311] skb_copy_datagram_iter+0xb5/0x240 [ 545.547664][T19311] virtio_transport_seqpacket_dequeue+0x321/0xc30 [ 545.547709][T19311] ? __pfx_virtio_transport_seqpacket_dequeue+0x10/0x10 [ 545.547746][T19311] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 545.547774][T19311] ? vsock_connectible_wait_data+0x4d1/0x510 [ 545.547797][T19311] __vsock_connectible_recvmsg+0x63e/0xc30 [ 545.547819][T19311] ? __pfx___vsock_connectible_recvmsg+0x10/0x10 [ 545.547835][T19311] ? aa_sk_perm+0x6d5/0x900 [ 545.547851][T19311] ? __pfx_autoremove_wake_function+0x10/0x10 [ 545.547896][T19311] ? __pfx_aa_sk_perm+0x10/0x10 [ 545.547912][T19311] ? __fget_files+0x2a/0x420 [ 545.547936][T19311] ? aa_sock_msg_perm+0xf1/0x1b0 [ 545.547953][T19311] ? vsock_connectible_recvmsg+0xb7/0xe0 [ 545.547970][T19311] ? __pfx_vsock_connectible_recvmsg+0x10/0x10 [ 545.547986][T19311] sock_recvmsg+0x196/0x1e0 [ 545.548011][T19311] __sys_recvfrom+0x231/0x3a0 [ 545.548029][T19311] ? __pfx___sys_recvfrom+0x10/0x10 [ 545.548056][T19311] ? rcu_is_watching+0x15/0xb0 [ 545.548074][T19311] __x64_sys_recvfrom+0xde/0x100 [ 545.548090][T19311] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 545.548107][T19311] do_syscall_64+0x174/0x580 [ 545.548126][T19311] ? trace_irq_disable+0x3b/0x140 [ 545.548150][T19311] ? clear_bhb_loop+0x40/0x90 [ 545.548168][T19311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 545.548184][T19311] RIP: 0033:0x7fa59139de99 [ 545.548198][T19311] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 545.548213][T19311] RSP: 002b:00007fa5921df028 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 545.548229][T19311] RAX: ffffffffffffffda RBX: 00007fa591626090 RCX: 00007fa59139de99 [ 545.548241][T19311] RDX: 000000000001ffd4 RSI: 0000200000000140 RDI: 0000000000000005 [ 545.548252][T19311] RBP: 00007fa591433eaf R08: 0000000000000000 R09: 0000000000000000 [ 545.548262][T19311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 545.548272][T19311] R13: 00007fa591626128 R14: 00007fa591626090 R15: 00007fffb864dbf8 [ 545.548291][T19311] [ 546.041861][T19277] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 546.150470][T19310] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3645'. [ 546.164521][T19310] ieee80211 phy36: Selected rate control algorithm 'minstrel_ht'