last executing test programs: 5.354255809s ago: executing program 1 (id=5675): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="021500000200000000e2ffffff000000b81441d0cfac05fedf32b71e8a28374288454b0ba123c05c89adc3a716576e70e54747dae043308a794d9e39c20ed8a1e19e8d1985216a3ea732350ec7aa1bcebcd289220b4af6316b8b14e1e34949da5be4862df7674ead5c223b4e272f02d4e505a90f730ce36777d0dc6a92f460fe9d42cdf1c07b80de68aece3945ab58fd215db6b72bd72a8801cb58b296196694c6aba853a37c1d85bb32ac202f47423e63670b475dd644e7666f4ae05e69708461262230e796c3f476445b953ba9e2ff71c3e2"], 0x10}}, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="0a000000090000000800000002"], 0x48) listen(r3, 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x3, 0x1, 0x0, r5}, @call={0x85, 0x0, 0x0, 0x26}]}, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r4, @ANYRES32=r6, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r4, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r3}, 0x20) recvfrom$inet(r3, 0x0, 0x0, 0x40000020, 0x0, 0x64) connect$bt_l2cap(r2, &(0x7f00000000c0)={0x1f, 0x80, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x5}}, 0xe) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2a}}]}, &(0x7f0000000180)=0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000440)={'vxcan0\x00'}) 5.061808563s ago: executing program 2 (id=5679): r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f0000004ac0)={0x0, 0x0, 0x0}, 0x4002) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x100) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a00000006000100"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) 4.670105332s ago: executing program 1 (id=5682): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f00000001c0)={@empty, @multicast2}, &(0x7f0000000240)=0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000300)={@fallback=r1, r1, 0x2f}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) recvmmsg(r4, &(0x7f0000002d80)=[{{0x0, 0x0, 0x0}, 0x101}], 0x1, 0x10042, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r6) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@delchain={0x54, 0x64, 0xf31, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}]}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0xfffffffffffffe04}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40044}, 0x4804) setsockopt$sock_attach_bpf(r3, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)}, 0x0) r8 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) setsockopt$inet6_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f0000000280)=0xffffffffffffffff, 0xfffffffffffffcd0) r10 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r9, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000780)={@fallback=r1, r8, 0x2f, 0x2018, 0x4, @value=r10}, 0x20) 4.124987612s ago: executing program 4 (id=5684): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x8001, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}, {0x0, 0x0, 0x0, 0x800, 0x7}, {0x0, 0x0, 0xe6}, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in=@remote, 0x404d3, 0x2b}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}}, 0xe4) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0xcb23c9c9931e99e9, 0x0, 0x25dfdbfc, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8, 0x4}, {0x0, 0x8}}}, 0xb8}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = socket$kcm(0x2, 0x5, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000006900040025bd700002000000000000000000000008000100e5ffffff0700010002000000080001002b0000000800010001000000"], 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r5 = socket(0x10, 0xa, 0x7) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="38000000180001002abd7000fcdbdf250a800000ff02fd00", @ANYRES32, @ANYBLOB="140005"], 0x38}, 0x1, 0x0, 0x0, 0xcdb281c6bb69a510}, 0x4000) sendmmsg(r5, &(0x7f0000000000), 0x400000000000235, 0x0) sendmsg$inet(r4, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc) sendmsg$inet(r4, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000240)="f9", 0x1}], 0x1}, 0x4000080) sendmsg$inet(r4, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)="cd", 0x1}], 0x1}, 0x240448c4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000200)=r6}, 0x20) sendmsg$NFT_MSG_GETFLOWTABLE(r5, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f0000000180)={0x34, 0x17, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x814) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r7}, &(0x7f00000005c0)=0x20000, &(0x7f00000001c0)=r6}, 0x20) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 4.025189487s ago: executing program 0 (id=5686): r0 = socket$inet(0x2, 0x2, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000000)={'filter\x00', 0x3b8, "000000000000000000e9741900"/952}, &(0x7f0000000400)=0x3e0) 3.956047776s ago: executing program 1 (id=5687): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0xffffff2e, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r0, &(0x7f0000002680)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000005c0)=""/162, 0xa2}, {&(0x7f0000000180)=""/200, 0xc8}, {&(0x7f0000000040)=""/118, 0x81}, {&(0x7f0000003800)=""/4106, 0x100a}, {&(0x7f0000000300)=""/65, 0x41}], 0x5}, 0x7}, {{0x0, 0x0, 0x0}, 0x20000}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff6}, 0x38000000}, {{0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000000740)=""/132}, {&(0x7f0000000dc0)=""/4096, 0xa2}, {&(0x7f0000001dc0)=""/194}], 0x0, &(0x7f0000001f00)=""/135}, 0x2c}, {{&(0x7f0000001fc0)=@xdp, 0x0, &(0x7f0000002500)=[{&(0x7f0000002040)=""/249}, {&(0x7f0000002140)=""/68}, {&(0x7f00000021c0)=""/100}, {&(0x7f0000002240)=""/255}, {&(0x7f0000002340)=""/160}, {&(0x7f0000002400)=""/164}, {&(0x7f00000024c0)=""/60}], 0x0, &(0x7f0000002580)=""/249}, 0x1d}], 0x400019f, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 3.954131213s ago: executing program 2 (id=5688): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x4800) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b000000000000"], 0x25) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_MSG_GETSETELEM(r0, 0x0, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000100)=0x8001, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0xa, @empty, 0x9}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)='2', 0x1}], 0x1}}], 0x1, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x66, 0x0, 0x0, 0x11, 0x0, @private=0x800001c, @empty=0xe0000001}, {0x0, 0x17c1, 0x1c, 0x0, @opaque="571818d3e222532f03de8fba932ff0e0f5d52380"}}}}}, 0x0) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e23, 0x100002, @ipv4={'\x00', '\xff\xff', @empty}, 0xffff}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000000680)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xa3, @loopback, 0x8}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000900)='2', 0x1}], 0x1}}], 0x1, 0x804) 3.7394442s ago: executing program 0 (id=5689): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x3, 0xfe, 0x2, 0xd, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0xffffff7f}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_key={0x2, 0x8, 0x8, 0x0, '4'}, @sadb_x_nat_t_type={0x1, 0x14, 0x35}]}, 0x68}, 0x1, 0x7}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x35f, @private1, 0xfffffffe}], 0x1c) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=@newtfilter={0x24, 0x2c, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x3}, {0x0, 0xd}, {0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f00000002c0)=0x10) r7 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r7, &(0x7f0000001540)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000001140)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000300)="99", 0x1}], 0x1}}, {{&(0x7f00000001c0)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000340)='v&U', 0x3}], 0x1}}], 0x3, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r7, 0x84, 0xa, &(0x7f0000000400)={0x93de, 0x1, 0x0, 0x3, 0x1ff, 0x7, 0xdff8, 0xb, r8}, 0x20) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f0000000200)={r8, 0x2, 0x2, [0xa, 0xfff9]}, &(0x7f0000000240)=0xc) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000040)=@sack_info={r9, 0xd4}, 0xc) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000180)={r9, 0x4}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x10, &(0x7f0000000400)=[@in={0x2, 0x4e22, @rand_addr=0x64010101}]}, &(0x7f00000004c0)=0x10) setsockopt(r1, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000140)=[@in6={0xa, 0x4e20, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000080)={r10, 0x2}, &(0x7f0000000100)=0x8) 3.379239914s ago: executing program 3 (id=5692): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x4800) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b000000000000"], 0x25) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_MSG_GETSETELEM(r0, 0x0, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000100)=0x8001, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0xa, @empty, 0x9}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)='2', 0x1}], 0x1}}], 0x1, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x66, 0x0, 0x0, 0x11, 0x0, @private=0x800001c, @empty=0xe0000001}, {0x0, 0x17c1, 0x1c, 0x0, @opaque="571818d3e222532f03de8fba932ff0e0f5d52380"}}}}}, 0x0) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e23, 0x100002, @ipv4={'\x00', '\xff\xff', @empty}, 0xffff}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000000680)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xa3, @loopback, 0x8}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000900)='2', 0x1}], 0x1}}], 0x1, 0x804) 3.128486088s ago: executing program 4 (id=5693): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e02"], 0x0, 0x37, 0x0, 0x0, 0x0, 0x5f00}, 0x28) 3.029604291s ago: executing program 4 (id=5694): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x1, @none, 0x0, 0x1}, 0xe) bind$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x1, @none, 0x0, 0x2}, 0xe) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000040), 0x0) mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, 0xffffffffffffffff, 0x913e0000) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r2, &(0x7f0000000080), 0x12) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x2c, &(0x7f0000000000)=0x80000001, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000106010000000000000000000000000000000000000000000000100003"], 0x48}}, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="28000000130001000200"/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7], 0x28}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000120)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="340000001400010604000000000000000a402000", @ANYRES32, @ANYBLOB], 0x34}}, 0x0) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000880)='veth0\x00', 0x6) sendto$inet6(r6, 0x0, 0x0, 0x0, &(0x7f0000000a00)={0xa, 0x5000, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'dvmrp0\x00'}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r8) bind$x25(r4, &(0x7f00000001c0), 0x12) 2.899746852s ago: executing program 2 (id=5695): socketpair$unix(0x1, 0x2, 0x0, 0x0) pipe(0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0) socket$netlink(0x10, 0x3, 0xc) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xfc}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x64}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4044851}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000080)={'ip6_vti0\x00', 0x0, 0x0, 0x2, 0x2, 0xaf08, 0x1c, @private0, @mcast1, 0x700, 0x8000, 0x78, 0xb}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r2) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x437, 0x800000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x504c3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp6}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0xc0c4) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@ipv6_newrule={0x38, 0x20, 0x2d2c6d60ea1da725, 0x2070bd29, 0x25dfdbfd, {0xa, 0x0, 0x80, 0xcd, 0x0, 0x0, 0x0, 0x1}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}, @FRA_SRC={0x14, 0x2, @mcast1}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008081}, 0x840) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x100, 0x0, 0x25dfdbfb, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@multicast2, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x2, 0x0, 0x2000000000000, 0x40, 0xfffffffffffffdfd, 0x50}, {0x5}, 0x6, 0x40000000, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e"], 0xb8}}, 0x20004000) sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) 2.851652703s ago: executing program 1 (id=5696): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000001200)={0x60000010}) epoll_create1(0x0) epoll_create1(0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xe, 0x0, &(0x7f0000000000)="259a53f271a76d2688634c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2.753927918s ago: executing program 0 (id=5697): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r2, 0x8919, &(0x7f0000000080)={'hsr0\x00', {0x2, 0x0, @broadcast}}) accept$inet(r1, &(0x7f0000000240)={0x2, 0x0, @local}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000080)={0x0, 0x2, 0x1, "fa"}, 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000040)={r3, 0x2}, 0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000100)={r3, 0xe1, "9bfd32d5a2036adff26323b0d9bb1c79f76349dfbba145f26337bb09ee5bfb99a80470e4128778bda2e6fffed579c343a1030c578aa77bd8fd89cd6a5a5f90e6beec26561e0ac1d9f471f37d7bf54df62f7515e49af23f31a87dab3cb00f2abd9bfeca8826cf6470d637d9b01a3a4914857a3a793eafd1ffc7f6b42cc491068f396b316393cff0383f2a85315f1c08be33094e6067ea68cac34d1086a91b490bb60460e6b8a00c0273c390f22d35bc6938cc89ac5fc1eb0955b3cca0b04da95b7aa4af04f5a03a94260cda23364c39b7be073166323e5e603b2875fd268a6af037"}, &(0x7f0000000200)=0xe9) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x4}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x7, 0x84}}}, 0x90}, 0x1, 0x0, 0x0, 0x40000}, 0x20040084) 2.559874893s ago: executing program 4 (id=5698): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0xd, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000490ff00000000009aaa000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000807b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001d000000850000007d00000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.372769147s ago: executing program 0 (id=5699): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x4800) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b000000000000"], 0x25) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_MSG_GETSETELEM(r0, 0x0, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000100)=0x8001, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0xa, @empty, 0x9}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000480)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0xb, @loopback, 0x1}, 0x1c, 0x0}}], 0x1, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_emit_ethernet(0x0, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e23, 0x100002, @ipv4={'\x00', '\xff\xff', @empty}, 0xffff}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000000680)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xa3, @loopback, 0x8}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000900)='2', 0x1}], 0x1}}], 0x1, 0x804) 2.370697002s ago: executing program 3 (id=5700): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x9}, 0x20) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f00000001c0)={0xa, 0x4e21, 0x80000, @dev={0xfe, 0x80, '\x00', 0x19}, 0xfe000001}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=[@dontfrag={{0x14, 0x29, 0x3e, 0x400}}], 0x18}, 0xc4) 2.319292237s ago: executing program 1 (id=5701): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c00000010000104000000000000000000410000", @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r2], 0x4c}}, 0x884) 2.272446101s ago: executing program 4 (id=5702): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000580)="aaf0e87536926700e5a2aa142a77325c4f1953d3", 0x14}], 0x1, &(0x7f00000006c0)=ANY=[@ANYBLOB="141000000000000001000001aba32ee84795e78316910fce8347747eadf45e6e2fbe395c9a99b056a4d10519c04e6ed461df861b291d839fed2fde271b8a933b05112a6eed38e9431aafa555e9c9f217ea2d6a20ce307768027e42eb30e9ed"], 0x18, 0x2000c001}, 0x4c800) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000500), &(0x7f0000000540)=0x8) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0207e80702"], 0x10}}, 0x40044) r4 = socket$inet6(0xa, 0x3, 0x82) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000380)={{{@in=@remote, @in=@local, 0x0, 0x100, 0x4e23, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0x0, 0x2, 0xfffffffffffffff3, 0x0, 0x1, 0xfffffffffffffffa}, {0xbad, 0xfff9, 0x4, 0xffffffffffffff7f}, 0x1, 0x0, 0x3, 0x0, 0x1}, {{@in=@multicast2, 0xfffffffe, 0x2b}, 0x2, @in=@local, 0x3504, 0x6, 0x3, 0x0, 0xfffffffd, 0x81, 0x4}}, 0xe8) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000480)=0x19, 0x4) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_int(r6, 0x1, 0x2, &(0x7f00000000c0)=0x1051, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}], 0x10) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x28, &(0x7f0000000680)={@private=0xa010102, @rand_addr=0x64010102, @private=0xa010101}, 0xc) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @remote}], 0x10) setsockopt$packet_int(r5, 0x107, 0xa, 0x0, 0x0) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x3221}, 0x1c) setsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000000), 0x4) recvmmsg(r2, &(0x7f0000001140), 0x700, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000040)=0x1ff, 0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0xffffff2e, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r8, &(0x7f0000002680)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000005c0)=""/162, 0xa2}, {&(0x7f0000000180)=""/200, 0xc8}, {&(0x7f0000000040)=""/118, 0x81}, {&(0x7f0000003800)=""/4106, 0x100a}, {&(0x7f0000000300)=""/65, 0x41}], 0x5}, 0x7}, {{0x0, 0x0, 0x0}, 0x20000}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff6}, 0x38000000}, {{0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000000740)=""/132}, {&(0x7f0000000dc0)=""/4096}, {&(0x7f0000001dc0)=""/194}], 0x4100, &(0x7f0000001f00)=""/135}, 0x2c}, {{&(0x7f0000001fc0)=@xdp, 0x0, &(0x7f0000002500)=[{&(0x7f0000002040)=""/249}, {&(0x7f0000002140)=""/68}, {&(0x7f00000021c0)=""/100}, {&(0x7f0000002240)=""/255}, {&(0x7f0000002340)=""/160}, {&(0x7f0000002400)=""/164}, {&(0x7f00000024c0)=""/60}], 0x0, &(0x7f0000002580)=""/249}, 0x1d}], 0x400019f, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 2.176853481s ago: executing program 2 (id=5703): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="c762c43b13c4d560df2ded1591f2e2c8e689ffdc", @ANYRES64], &(0x7f0000000040)='GPL\x00', 0x5, 0xfe7, &(0x7f0000001e00)=""/4071, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0120200e"], 0x12) 2.104707215s ago: executing program 3 (id=5704): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x273, 0x4) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f00000000c0)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000001800dd8d25bd70000000000002000000000300060000000006001500060000fb130016"], 0x38}, 0x1, 0x0, 0x0, 0x841}, 0x0) 1.839263713s ago: executing program 2 (id=5705): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x2, 0x0, 0x2, 0xc, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, 'p'}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0xa0000000}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}]}, 0x60}, 0x1, 0x7}, 0xfffd) 1.302887558s ago: executing program 0 (id=5706): socket$nl_rdma(0x10, 0x3, 0x14) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x14, 0x0, &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 1.27369041s ago: executing program 3 (id=5707): getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f00000001c0)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x2, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180a000000000000000000000000000095000000000000006bef80454bb38dde38e864e1f61a8c4724a0f85a6e8a20c3611a69e61f596a41fa23999b06b8c8a423bdefe28232440d7611557ae3284f0d3bd364f14c49259a8b50ef4dcd7c20f841babb9797b2efc9107ca7ce3dc6d53389702f2a8ea4cae5a3712c06de8ed2687a228104a80cd4ce3f38e6f63af1ef5ca3208a360b9f83c512eaed8937a2acf9b48a519d073665ece5d3ff7e264f0bb9f18acdacf00ba1db3753e9c9127e6484c691130a88bacc2f291182cb94c0ae15142d2dd18b589ec79520"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x1b, 0xffffffffffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9e20300600d0600fb9e34f086f8", 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x50) (fail_nth: 1) 1.183686194s ago: executing program 1 (id=5708): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x1, @none, 0x0, 0x1}, 0xe) bind$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x1, @none, 0x0, 0x2}, 0xe) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000040), 0x0) mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, 0xffffffffffffffff, 0x913e0000) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r2, &(0x7f0000000080), 0x12) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x2c, &(0x7f0000000000)=0x80000001, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000106010000000000000000000000000000000000000000000000100003"], 0x48}}, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="28000000130001000200"/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7], 0x28}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000120)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="340000001400010604000000000000000a402000", @ANYRES32, @ANYBLOB="140002002001000000"], 0x34}}, 0x0) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000880)='veth0\x00', 0x6) sendto$inet6(r6, 0x0, 0x0, 0x0, &(0x7f0000000a00)={0xa, 0x5000, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'dvmrp0\x00'}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r8) bind$x25(r4, &(0x7f00000001c0), 0x12) 879.357523ms ago: executing program 2 (id=5709): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaa0300bb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r4], 0x68}}, 0x8c1) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x20000880) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r5, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1, 0x0, 0x300}, 0x1f00) sendmsg$tipc(r6, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000140)=@bpf_lsm={0x18, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="180000008d510000000000000000000079a00000000000007b00e0ff00000000180100002020752500000000002020207b1af8fd00000000bfa100000000000007010000faffffffb702000008000000b70300000280007f720000000000000095"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xdc}, 0x94) setsockopt$TIPC_SRC_DROPPABLE(r5, 0x10f, 0x80, &(0x7f0000000180), 0x4) r7 = socket(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f0000000000), 0x4000000000001f2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000041ffffff000000000800000091119a000000000095"], &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x40) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r8, &(0x7f0000000180), 0x400008a, 0x0) sendmsg$key(r8, &(0x7f0000000000)={0x9, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0209000902"], 0x10}}, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000240), 0x3) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$CAN_RAW_LOOPBACK(r7, 0x65, 0x3, 0x0, &(0x7f0000000340)) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000002c0)={'tunl0\x00', 0x0}) recvmsg(r9, &(0x7f0000002840)={&(0x7f0000000080)=@caif=@util, 0x80, &(0x7f0000002680)=[{&(0x7f0000000100)=""/58, 0x3a}, {&(0x7f0000000140)=""/127, 0x7f}, {&(0x7f00000001c0)=""/113, 0x71}, {&(0x7f0000001240)=""/4096, 0x1000}, {&(0x7f0000002240)=""/253, 0xfd}, {&(0x7f0000002340)=""/236, 0xec}, {&(0x7f0000002440)=""/223, 0xdf}, {&(0x7f0000002540)=""/107, 0x6b}, {&(0x7f00000025c0)=""/178, 0xb2}], 0x9, &(0x7f0000002740)=""/247, 0xf7}, 0x40012140) sendmsg$nl_route_sched(r9, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x2000, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xffff}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0xb, 0x1}}, {0x6, 0x2, [0x4782]}}]}]}, 0x58}}, 0x4000010) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x44, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) pipe(&(0x7f0000000000)) 742.5421ms ago: executing program 4 (id=5710): socket(0x1d, 0x2, 0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x4, 0x2, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000220000000080000006b1189800003000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000001f80)=0x5, 0x4) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e) bind$unix(r1, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e27}, 0x6e) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000040)={0x5}, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r2, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$phonet_pipe(0x23, 0x5, 0x2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="300000003f0007012bbd700000000000037c"], 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}, 0x1, 0x0, 0x0, 0x8008000}, 0x400c080) getsockname$packet(r4, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x52) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r5, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c0000001500010000000000000000000b000000080002000a"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x20000080) sendmsg$NLBL_UNLABEL_C_STATICADD(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x80}, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r8, 0x400442c8, &(0x7f0000000680)=ANY=[@ANYRES32=r7, @ANYBLOB="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"]) 702.994819ms ago: executing program 0 (id=5711): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000001200)={0x60000010}) epoll_create1(0x0) epoll_create1(0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xe, 0x0, &(0x7f0000000000)="259a53f271a76d2688634c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 584.845443ms ago: executing program 3 (id=5713): socketpair$unix(0x1, 0x2, 0x0, 0x0) pipe(0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0) socket$netlink(0x10, 0x3, 0xc) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xfc}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x64}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4044851}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000080)={'ip6_vti0\x00', 0x0, 0x0, 0x2, 0x2, 0xaf08, 0x1c, @private0, @mcast1, 0x700, 0x8000, 0x78, 0xb}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r2) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x437, 0x800000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x504c3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp6}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0xc0c4) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@ipv6_newrule={0x38, 0x20, 0x2d2c6d60ea1da725, 0x2070bd29, 0x25dfdbfd, {0xa, 0x0, 0x80, 0xcd, 0x0, 0x0, 0x0, 0x1}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}, @FRA_SRC={0x14, 0x2, @mcast1}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008081}, 0x840) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x100, 0x0, 0x25dfdbfb, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@multicast2, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x2, 0x0, 0x2000000000000, 0x40, 0xfffffffffffffdfd, 0x50}, {0x5}, 0x6, 0x40000000, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e"], 0xb8}}, 0x20004000) sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) 0s ago: executing program 3 (id=5714): socket$kcm(0x2, 0xa, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfb, {{@in6=@private0, @in=@loopback, 0x0, 0x4, 0x1, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x2, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0xfffffffffffffffe, 0x4}, 0x9, 0x0, 0x0, 0x1, 0x2}}, 0xb8}}, 0x8004850) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000001"], 0xb8}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000040)=ANY=[@ANYRESDEC=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x71, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}}, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='pids.max\x00', 0x2, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x4040095}, 0x40010) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000003ac1e000100000000000000000000000000000000000000000a0040"], 0xb8}}, 0x0) kernel console output (not intermixed with test programs): packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 702.652302][T21765] batman_adv: batadv0: Interface activated: gretap2 [ 702.768151][ T1118] bond1: (slave bridge1): failed to get link speed/duplex [ 702.817684][T21770] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4783'. [ 702.885435][ T42] bond1: (slave bridge1): failed to get link speed/duplex [ 703.003008][T21774] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4782'. [ 703.070429][T10818] bond1: (slave bridge1): failed to get link speed/duplex [ 703.278055][ T13] bond1: (slave bridge1): failed to get link speed/duplex [ 703.392467][ T9972] bond1: (slave bridge1): failed to get link speed/duplex [ 703.444164][T10811] hsr_slave_0: left promiscuous mode [ 703.447154][T10811] hsr_slave_1: left promiscuous mode [ 703.690958][T21795] FAULT_INJECTION: forcing a failure. [ 703.690958][T21795] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 703.691019][T21795] CPU: 1 UID: 0 PID: 21795 Comm: syz.1.4791 Not tainted syzkaller #0 PREEMPT(full) [ 703.691047][T21795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 703.691062][T21795] Call Trace: [ 703.691071][T21795] [ 703.691081][T21795] dump_stack_lvl+0xe8/0x150 [ 703.691121][T21795] should_fail_ex+0x410/0x560 [ 703.691153][T21795] _copy_to_user+0x31/0xb0 [ 703.691186][T21795] simple_read_from_buffer+0xe1/0x170 [ 703.691224][T21795] proc_fail_nth_read+0x1bb/0x230 [ 703.691246][T21795] ? common_file_perm+0x20e/0x2b0 [ 703.691278][T21795] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 703.691304][T21795] ? rw_verify_area+0x24a/0x4c0 [ 703.691340][T21795] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 703.691362][T21795] vfs_read+0x213/0xa80 [ 703.691419][T21795] ? __pfx___mutex_lock+0x10/0x10 [ 703.691452][T21795] ? __pfx_vfs_read+0x10/0x10 [ 703.691489][T21795] ? __fget_files+0x2a/0x420 [ 703.691526][T21795] ? __fget_files+0x3a2/0x420 [ 703.691557][T21795] ? __fget_files+0x2a/0x420 [ 703.691599][T21795] ksys_read+0x150/0x270 [ 703.691637][T21795] ? __pfx_ksys_read+0x10/0x10 [ 703.691685][T21795] do_syscall_64+0x166/0x520 [ 703.691716][T21795] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 703.691747][T21795] ? clear_bhb_loop+0x70/0xc0 [ 703.691776][T21795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 703.691800][T21795] RIP: 0033:0x7f89a415e98e [ 703.691822][T21795] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 703.691842][T21795] RSP: 002b:00007f89a50cefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 703.691868][T21795] RAX: ffffffffffffffda RBX: 00007f89a50cf6c0 RCX: 00007f89a415e98e [ 703.691885][T21795] RDX: 000000000000000f RSI: 00007f89a50cf0a0 RDI: 0000000000000003 [ 703.691900][T21795] RBP: 00007f89a50cf090 R08: 0000000000000000 R09: 0000000000000000 [ 703.691915][T21795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 703.691930][T21795] R13: 00007f89a4426038 R14: 00007f89a4425fa0 R15: 00007ffe593c1698 [ 703.691967][T21795] [ 704.344362][T21808] openvswitch: netlink: Flow actions attr not present in new flow. [ 704.590322][T21816] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4796'. [ 705.498691][ T5624] Bluetooth: hci3: command 0x0406 tx timeout [ 705.528315][ T1118] bond1: (slave bridge1): failed to get link speed/duplex [ 705.538377][T21837] tipc: Enabling of bearer rejected, already enabled [ 706.410282][T21868] pim6reg: entered allmulticast mode [ 706.881094][T21861] pim6reg: left allmulticast mode [ 707.130587][T21880] netlink: 'syz.3.4807': attribute type 1 has an invalid length. [ 707.259541][ T1118] net_ratelimit: 9 callbacks suppressed [ 707.259593][ T1118] bond1: (slave bridge1): failed to get link speed/duplex [ 707.377329][T10812] bond1: (slave bridge1): failed to get link speed/duplex [ 707.459623][T10811] IPVS: stop unused estimator thread 0... [ 707.479404][ T9962] bond1: (slave bridge1): failed to get link speed/duplex [ 707.578241][ T5624] Bluetooth: hci3: command 0x0406 tx timeout [ 707.591340][ T42] bond1: (slave bridge1): failed to get link speed/duplex [ 707.703910][ T1118] bond1: (slave bridge1): failed to get link speed/duplex [ 707.809918][T10818] bond1: (slave bridge1): failed to get link speed/duplex [ 707.917972][ T201] bond1: (slave bridge1): failed to get link speed/duplex [ 708.028975][ T13] bond1: (slave bridge1): failed to get link speed/duplex [ 708.138709][ T201] bond1: (slave bridge1): failed to get link speed/duplex [ 708.248813][T10812] bond1: (slave bridge1): failed to get link speed/duplex [ 708.257408][T21906] netlink: 'syz.3.4813': attribute type 1 has an invalid length. [ 708.257431][T21906] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4813'. [ 708.568326][T21919] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4818'. [ 708.628315][T21922] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4818'. [ 708.649833][T21922] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4818'. [ 709.164888][T21934] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4821'. [ 709.164913][T21934] netlink: 192 bytes leftover after parsing attributes in process `syz.4.4821'. [ 709.600238][T21947] FAULT_INJECTION: forcing a failure. [ 709.600238][T21947] name failslab, interval 1, probability 0, space 0, times 0 [ 709.600300][T21947] CPU: 0 UID: 0 PID: 21947 Comm: syz.2.4827 Not tainted syzkaller #0 PREEMPT(full) [ 709.600326][T21947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 709.600340][T21947] Call Trace: [ 709.600350][T21947] [ 709.600360][T21947] dump_stack_lvl+0xe8/0x150 [ 709.600399][T21947] should_fail_ex+0x410/0x560 [ 709.600431][T21947] should_failslab+0xa8/0x100 [ 709.600464][T21947] __kmalloc_cache_noprof+0xa3/0x600 [ 709.600487][T21947] ? copy_array+0xab/0x100 [ 709.600520][T21947] ? bpf_copy_verifier_state+0xb1f/0x1170 [ 709.600554][T21947] ? bpf_copy_verifier_state+0xb1f/0x1170 [ 709.600595][T21947] bpf_copy_verifier_state+0xb1f/0x1170 [ 709.600643][T21947] push_stack+0x1b9/0x380 [ 709.600682][T21947] do_check_insn+0x8194/0x17d00 [ 709.600711][T21947] ? __kasan_slab_free+0x5c/0x80 [ 709.600735][T21947] ? kfree+0x1c5/0x650 [ 709.600796][T21947] ? __pfx_do_check_insn+0x10/0x10 [ 709.600853][T21947] ? kasan_quarantine_put+0xbb/0x1f0 [ 709.600876][T21947] ? lockdep_hardirqs_on+0x7b/0x110 [ 709.600911][T21947] ? kfree+0x1c5/0x650 [ 709.600939][T21947] ? krealloc_node_align_noprof+0x235/0x390 [ 709.600969][T21947] ? krealloc_node_align_noprof+0x235/0x390 [ 709.600999][T21947] ? bpf_push_jmp_history+0x27d/0x6d0 [ 709.601031][T21947] do_check_common+0x35fa/0x55c0 [ 709.601096][T21947] ? __pfx_do_check_common+0x10/0x10 [ 709.601139][T21947] do_check_main+0xa2/0x1f0 [ 709.601166][T21947] bpf_check+0x2777/0x2ef0 [ 709.601209][T21947] ? __pfx_bpf_check+0x10/0x10 [ 709.601236][T21947] ? bpf_obj_name_cpy+0x194/0x1e0 [ 709.601278][T21947] bpf_prog_load+0x14d6/0x1c20 [ 709.601316][T21947] ? __pfx_bpf_prog_load+0x10/0x10 [ 709.601372][T21947] __sys_bpf+0xd0d/0xd90 [ 709.601424][T21947] ? __pfx___sys_bpf+0x10/0x10 [ 709.601480][T21947] ? __fget_files+0x2a/0x420 [ 709.601535][T21947] ? ksys_write+0x242/0x270 [ 709.601575][T21947] ? __pfx_ksys_write+0x10/0x10 [ 709.601617][T21947] __x64_sys_bpf+0xba/0xd0 [ 709.601645][T21947] do_syscall_64+0x166/0x520 [ 709.601678][T21947] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 709.601704][T21947] ? clear_bhb_loop+0x70/0xc0 [ 709.601735][T21947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 709.601760][T21947] RIP: 0033:0x7f041c59e159 [ 709.601783][T21947] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 709.601804][T21947] RSP: 002b:00007f041d4d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 709.601832][T21947] RAX: ffffffffffffffda RBX: 00007f041c825fa0 RCX: 00007f041c59e159 [ 709.601851][T21947] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005 [ 709.601868][T21947] RBP: 00007f041d4d6090 R08: 0000000000000000 R09: 0000000000000000 [ 709.601884][T21947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 709.601898][T21947] R13: 00007f041c826038 R14: 00007f041c825fa0 R15: 00007ffd0be3fe18 [ 709.601937][T21947] [ 709.658880][ T5624] Bluetooth: hci3: command 0x0406 tx timeout [ 710.201886][T21960] netlink: 316 bytes leftover after parsing attributes in process `syz.4.4833'. [ 710.201918][T21960] netlink: 316 bytes leftover after parsing attributes in process `syz.4.4833'. [ 710.244586][T21961] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4832'. [ 710.309848][T21966] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4834'. [ 710.544946][T21970] bridge0: port 1(bond0) entered blocking state [ 710.545140][T21970] bridge0: port 1(bond0) entered disabled state [ 710.545298][T21970] bond0: entered allmulticast mode [ 711.801505][T22021] block nbd0: not configured, cannot reconfigure [ 711.826022][T22021] netlink: 'syz.2.4853': attribute type 9 has an invalid length. [ 711.952734][T22033] netlink: 'syz.3.4857': attribute type 10 has an invalid length. [ 712.236815][T22049] netlink: 'syz.0.4861': attribute type 1 has an invalid length. [ 712.317451][T22049] bond10: entered promiscuous mode [ 712.325052][T22049] 8021q: adding VLAN 0 to HW filter on device bond10 [ 712.397367][T22049] ipvlan12: entered allmulticast mode [ 712.397388][T22049] bond10: entered allmulticast mode [ 712.412032][T22049] ipvlan13: entered allmulticast mode [ 712.436715][T22049] bond10: (slave bridge9): making interface the new active one [ 712.436742][T22049] bridge9: entered promiscuous mode [ 712.436963][T22049] bridge9: entered allmulticast mode [ 712.446205][T22049] bond10: (slave bridge9): Enslaving as an active interface with an up link [ 712.459191][T10811] net_ratelimit: 33 callbacks suppressed [ 712.459211][T10811] bond1: (slave bridge1): failed to get link speed/duplex [ 712.560509][T22053] openvswitch: netlink: Flow actions attr not present in new flow. [ 712.568001][T10812] bond1: (slave bridge1): failed to get link speed/duplex [ 712.680103][T10812] bond1: (slave bridge1): failed to get link speed/duplex [ 712.788685][ T42] bond1: (slave bridge1): failed to get link speed/duplex [ 712.919511][T10818] bond1: (slave bridge1): failed to get link speed/duplex [ 713.039350][T10818] bond1: (slave bridge1): failed to get link speed/duplex [ 713.139026][T10818] bond1: (slave bridge1): failed to get link speed/duplex [ 713.249196][ T13] bond1: (slave bridge1): failed to get link speed/duplex [ 713.360567][T10812] bond1: (slave bridge1): failed to get link speed/duplex [ 713.486334][T22083] xt_nfacct: accounting object `' does not exist [ 713.701052][T22091] Cannot find set identified by id 0 to match [ 713.848559][T22097] batman_adv: batadv0: Adding interface: veth0 [ 713.848577][T22097] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 713.848608][T22097] batman_adv: batadv0: Interface activated: veth0 [ 713.927366][T22105] __nla_validate_parse: 10 callbacks suppressed [ 713.927422][T22105] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4876'. [ 713.934973][T22105] batman_adv: batadv0: Interface deactivated: macvlan3 [ 713.934999][T22105] batman_adv: batadv0: Removing interface: macvlan3 [ 713.964622][T22105] batman_adv: batadv0: Interface deactivated: macvlan4 [ 713.964645][T22105] batman_adv: batadv0: Removing interface: macvlan4 [ 713.968439][T22105] batman_adv: batadv0: Interface deactivated: gretap1 [ 713.968460][T22105] batman_adv: batadv0: Removing interface: gretap1 [ 714.012150][T22105] batman_adv: batadv0: Interface deactivated: gretap2 [ 714.012176][T22105] batman_adv: batadv0: Removing interface: gretap2 [ 714.014138][T22105] batman_adv: batadv0: Interface deactivated: veth0 [ 714.014158][T22105] batman_adv: batadv0: Removing interface: veth0 [ 714.086113][T22105] batadv0 (unregistering): left allmulticast mode [ 714.199448][T22112] netlink: 284 bytes leftover after parsing attributes in process `syz.2.4880'. [ 714.482808][T10811] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 714.482849][T10811] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 714.530540][T22119] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 714.590609][T22119] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4881'. [ 714.590884][T22119] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4881'. [ 714.815004][T22130] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4885'. [ 715.217898][T22140] netlink: 284 bytes leftover after parsing attributes in process `syz.1.4890'. [ 715.295208][T22142] xt_hashlimit: size too large, truncated to 1048576 [ 715.361197][T22144] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4892'. [ 715.442428][T22146] xt_hashlimit: size too large, truncated to 1048576 [ 715.582616][ T5624] Bluetooth: hci3: command 0x0406 tx timeout [ 716.190105][T22166] netlink: 'syz.2.4898': attribute type 11 has an invalid length. [ 717.474492][T22201] netlink: 6024 bytes leftover after parsing attributes in process `syz.3.4916'. [ 717.562632][T10818] net_ratelimit: 30 callbacks suppressed [ 717.562668][T10818] bond1: (slave bridge1): failed to get link speed/duplex [ 717.668711][T10818] bond1: (slave bridge1): failed to get link speed/duplex [ 717.789709][T22219] netlink: 'syz.1.4922': attribute type 1 has an invalid length. [ 717.851963][T22219] bond4: entered promiscuous mode [ 717.852426][T22219] 8021q: adding VLAN 0 to HW filter on device bond4 [ 717.853844][T22215] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4920'. [ 717.855395][T22215] lo: left promiscuous mode [ 717.855583][T22215] tunl0: left promiscuous mode [ 717.855793][T22215] gre0: left promiscuous mode [ 717.855926][T22215] gretap0: left promiscuous mode [ 717.856054][T22215] erspan0: left promiscuous mode [ 717.856183][T22215] ip_vti0: left promiscuous mode [ 717.856379][T22215] ip6_vti0: left promiscuous mode [ 717.856509][T22215] sit0: left promiscuous mode [ 717.857473][T22215] ip6tnl0: left promiscuous mode [ 717.857592][T22215] ip6gre0: left promiscuous mode [ 717.858701][T22215] syz_tun: left promiscuous mode [ 717.858880][T22215] ip6gretap0: left promiscuous mode [ 717.886609][T22215] vcan0: left promiscuous mode [ 717.896533][T22215] bond0: left promiscuous mode [ 717.896968][T22215] team0: left promiscuous mode [ 717.897435][T22215] dummy0: left promiscuous mode [ 717.906390][T22215] nlmon0: left promiscuous mode [ 717.906855][T22215] batadv0: left promiscuous mode [ 717.907207][T22215] vxcan0: left promiscuous mode [ 717.907650][T22215] vxcan1: left promiscuous mode [ 717.952447][T22215] veth0: left promiscuous mode [ 717.952955][T22215] veth1: left promiscuous mode [ 717.953340][T22215] wg0: left promiscuous mode [ 717.978519][T22215] wg1: left promiscuous mode [ 717.978705][T22215] wg2: left promiscuous mode [ 717.978854][T22215] veth0_to_bridge: left promiscuous mode [ 717.979020][T22215] bridge_slave_0: left promiscuous mode [ 717.982025][T22215] veth1_to_bridge: left promiscuous mode [ 718.003962][T22215] bridge_slave_1: left promiscuous mode [ 718.004419][T22215] veth0_to_bond: left promiscuous mode [ 718.004957][T22215] bond_slave_0: left promiscuous mode [ 718.018568][T22215] veth0_to_team: left promiscuous mode [ 718.019463][T22215] team_slave_0: left promiscuous mode [ 718.019910][T22215] veth1_to_team: left promiscuous mode [ 718.026051][T22215] team_slave_1: left promiscuous mode [ 718.032205][T22215] veth0_to_batadv: left promiscuous mode [ 718.032679][T22215] batadv_slave_0: left promiscuous mode [ 718.044261][T22215] veth1_to_batadv: left promiscuous mode [ 718.044860][T22215] batadv_slave_1: left promiscuous mode [ 718.045234][T22215] xfrm0: left promiscuous mode [ 718.061021][T22215] veth0_to_hsr: left promiscuous mode [ 718.065049][T22215] veth1_to_hsr: left promiscuous mode [ 718.073891][T22215] hsr0: left promiscuous mode [ 718.074068][T22215] veth1_virt_wifi: left promiscuous mode [ 718.099057][T22215] veth0_virt_wifi: left promiscuous mode [ 718.099599][T22215] virt_wifi0: left promiscuous mode [ 718.116040][T22215] vlan0: left promiscuous mode [ 718.116894][T22215] vlan1: left promiscuous mode [ 718.147156][T22215] macvlan0: left promiscuous mode [ 718.151184][T22215] macvlan1: left promiscuous mode [ 718.155969][T22215] ipvlan0: left promiscuous mode [ 718.156183][T22215] ipvlan1: left promiscuous mode [ 718.156492][T22215] geneve1: left promiscuous mode [ 718.156677][T22215] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 718.157015][T22215] netdevsim netdevsim4 netdevsim1: left promiscuous mode [ 718.192011][T22215] netdevsim netdevsim4 netdevsim2: left promiscuous mode [ 718.192510][T22215] netdevsim netdevsim4 netdevsim3: left promiscuous mode [ 718.193375][T22215] mac80211_hwsim hwsim84 wlan0: left promiscuous mode [ 718.200623][T22215] macvlan2: left promiscuous mode [ 718.204414][T22215] macvlan3: left promiscuous mode [ 718.207542][T22215] syztnl0: left promiscuous mode [ 718.247228][T22215] macvlan4: left promiscuous mode [ 718.247665][T22215] ip6erspan0: left promiscuous mode [ 718.273533][T22215] gretap1: left promiscuous mode [ 718.273699][T22215] gtp0: left promiscuous mode [ 718.273886][T22215] : left promiscuous mode [ 718.274010][T22215] gtp1: left promiscuous mode [ 718.274209][T22215] gtp2: left promiscuous mode [ 718.274363][T22215] gtp3: left promiscuous mode [ 718.274550][T22215] ifb2: left promiscuous mode [ 718.274707][T22215] ipip0: left promiscuous mode [ 718.274884][T22215] bond1: left promiscuous mode [ 718.275017][T22215] gtp4: left promiscuous mode [ 718.296518][T22215] sit1: left promiscuous mode [ 718.297120][T22215] gretap2: left promiscuous mode [ 718.297433][T22215] pimreg9: left promiscuous mode [ 718.336816][T22215] bond2: left promiscuous mode [ 718.355734][T22215] batadv1: left promiscuous mode [ 718.356228][T22215] veth2: left promiscuous mode [ 718.356611][T22215] veth3: left promiscuous mode [ 718.357001][T22215] bond3: left promiscuous mode [ 718.357297][T22215] mac80211_hwsim hwsim99 wlan2: left promiscuous mode [ 718.357692][T22215] gre1: left promiscuous mode [ 718.363882][T22215] bond4: left promiscuous mode [ 718.451334][ T42] bond1: (slave bridge1): failed to get link speed/duplex [ 718.513336][T22219] ipvlan4: entered allmulticast mode [ 718.513360][T22219] bond4: entered allmulticast mode [ 718.575003][T22222] ipvlan5: entered allmulticast mode [ 718.578007][T10812] bond1: (slave bridge1): failed to get link speed/duplex [ 718.677993][T22229] bond4: (slave bridge2): making interface the new active one [ 718.678022][T22229] bridge2: entered promiscuous mode [ 718.678234][T22229] bridge2: entered allmulticast mode [ 718.683855][T22229] bond4: (slave bridge2): Enslaving as an active interface with an up link [ 718.689644][T10812] bond1: (slave bridge1): failed to get link speed/duplex [ 718.800373][ T13] bond1: (slave bridge1): failed to get link speed/duplex [ 718.822319][T22235] lo: left promiscuous mode [ 718.836831][T22235] tunl0: left promiscuous mode [ 718.847183][T22235] v: left promiscuous mode [ 718.847205][T22235] v: left allmulticast mode [ 718.930899][T22235] gretap0: left promiscuous mode [ 718.951897][T22235] erspan0: left promiscuous mode [ 718.955355][T22236] netlink: zone id is out of range [ 718.955371][T22236] netlink: zone id is out of range [ 718.955381][T22236] netlink: zone id is out of range [ 718.955400][T22236] netlink: zone id is out of range [ 718.990574][T22235] ip_vti0: left promiscuous mode [ 718.997189][T22235] ip6_vti0: left promiscuous mode [ 719.046751][T22235] sit0: left promiscuous mode [ 719.086186][T22235] ip6tnl0: left promiscuous mode [ 719.108498][T22235] ip6gre0: left promiscuous mode [ 719.153992][T22235] ip6gretap0: left promiscuous mode [ 719.184745][T22235] vcan0: left promiscuous mode [ 719.202639][T22235] bond0: left promiscuous mode [ 719.202666][T22235] syz_tun: left promiscuous mode [ 719.234519][T22235] team0: left promiscuous mode [ 719.237639][T22235] dummy0: left promiscuous mode [ 719.295501][T22235] nlmon0: left promiscuous mode [ 719.312877][T22235] vxcan0: left promiscuous mode [ 719.330416][T22235] vxcan1: left promiscuous mode [ 719.348344][T22235] veth0: left promiscuous mode [ 719.375805][T22235] veth1: left promiscuous mode [ 719.393897][T22235] wg0: left promiscuous mode [ 719.394877][T22248] xt_hashlimit: size too large, truncated to 1048576 [ 719.426407][T22235] wg1: left promiscuous mode [ 719.436710][T22235] wg2: left promiscuous mode [ 719.445294][T22235] veth0_to_bridge: left promiscuous mode [ 719.464161][T22235] bridge_slave_0: left promiscuous mode [ 719.476191][T22235] veth1_to_bridge: left promiscuous mode [ 719.496257][T22235] bridge_slave_1: left promiscuous mode [ 719.525988][T22235] veth0_to_bond: left promiscuous mode [ 719.551436][T22235] bond_slave_0: left promiscuous mode [ 719.580956][T22235] veth1_to_bond: left promiscuous mode [ 719.608446][T22235] bond_slave_1: left promiscuous mode [ 719.627408][T22235] veth0_to_team: left promiscuous mode [ 719.644767][T22235] team_slave_0: left promiscuous mode [ 719.662412][T22235] veth1_to_team: left promiscuous mode [ 719.680352][T22235] team_slave_1: left promiscuous mode [ 719.696885][T22235] veth0_to_batadv: left promiscuous mode [ 719.722548][T22235] batadv_slave_0: left promiscuous mode [ 719.741219][T22235] veth1_to_batadv: left promiscuous mode [ 719.758534][T22235] batadv_slave_1: left promiscuous mode [ 719.767389][T22235] xfrm0: left promiscuous mode [ 719.787343][T22235] veth0_to_hsr: left promiscuous mode [ 719.825626][T22235] veth1_to_hsr: left promiscuous mode [ 719.844847][T22235] hsr0: left promiscuous mode [ 719.860347][T22235] veth1_virt_wifi: left promiscuous mode [ 719.882283][T22235] veth0_virt_wifi: left promiscuous mode [ 719.913562][T22235] virt_wifi0: left promiscuous mode [ 719.947153][T22235] vlan0: left promiscuous mode [ 719.963223][T22235] vlan1: left promiscuous mode [ 719.975197][T22235] macvlan0: left promiscuous mode [ 719.998078][T22235] macvlan1: left promiscuous mode [ 720.014818][T22235] ipvlan0: left promiscuous mode [ 720.024236][T22235] ipvlan1: left promiscuous mode [ 720.066936][T22235] macvtap0: left promiscuous mode [ 720.078831][T22235] macsec0: left promiscuous mode [ 720.101297][T22235] geneve1: left promiscuous mode [ 720.113821][T22235] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 720.122436][T22235] netdevsim netdevsim0 netdevsim1: left promiscuous mode [ 720.128242][T22235] netdevsim netdevsim0 netdevsim2: left promiscuous mode [ 720.146195][T22235] netdevsim netdevsim0 netdevsim3: left promiscuous mode [ 720.165342][T22235] mac80211_hwsim hwsim81 wlan0: left promiscuous mode [ 720.191113][T22235] mac80211_hwsim hwsim82 wlan1: left promiscuous mode [ 720.196416][T22235] macvlan2: left promiscuous mode [ 720.216121][T22235] bond1: left promiscuous mode [ 720.216323][T22235] bond1: left allmulticast mode [ 720.216338][T22235] bridge1: left allmulticast mode [ 720.246645][T22235] bridge1: left promiscuous mode [ 720.259264][T22235] ip6erspan0: left promiscuous mode [ 720.264232][T22235] tipc: Resetting bearer [ 720.264645][T22235] syzkaller0: left promiscuous mode [ 720.264663][T22235] syzkaller0: left allmulticast mode [ 720.323574][T22235] mac80211_hwsim hwsim86 wlan2: left promiscuous mode [ 720.362060][T22235] mac80211_hwsim hwsim89 wlan3: left promiscuous mode [ 720.376371][T22235] bond2: left promiscuous mode [ 720.400708][T22235] ipvlan2: left promiscuous mode [ 720.400733][T22235] ipvlan2: left allmulticast mode [ 720.429189][T22235] ipvlan3: left promiscuous mode [ 720.429214][T22235] ipvlan3: left allmulticast mode [ 720.429228][T22235] bond2: left allmulticast mode [ 720.429243][T22235] bridge2: left allmulticast mode [ 720.453702][T22235] bridge2: left promiscuous mode [ 720.481764][T22235] macsec1: left promiscuous mode [ 720.502685][T22235] macvlan3: left promiscuous mode [ 720.511124][T22235] gtp0: left promiscuous mode [ 720.529452][T22235] bond3: left promiscuous mode [ 720.537567][T22235] ipvlan4: left promiscuous mode [ 720.537625][T22235] ipvlan4: left allmulticast mode [ 720.563226][T22235] ipvlan5: left promiscuous mode [ 720.563254][T22235] ipvlan5: left allmulticast mode [ 720.563269][T22235] bond3: left allmulticast mode [ 720.563285][T22235] bridge3: left allmulticast mode [ 720.573784][T22235] bridge3: left promiscuous mode [ 720.600066][T22235] macvlan4: left promiscuous mode [ 720.605386][T22235] ifb2: left promiscuous mode [ 720.650655][T22235] gretap1: left promiscuous mode [ 720.669539][T22257] virtio_blk virtio4: 1/0/0 default/read/poll queues [ 720.670595][T22235] bond4: left promiscuous mode [ 720.690989][T22235] veth2: left promiscuous mode [ 720.710963][T22235] veth3: left promiscuous mode [ 720.711004][T22235] veth3: left allmulticast mode [ 720.713163][T22257] virtio_blk virtio4: [vda] 262144 512-byte logical blocks (134 MB/128 MiB) [ 720.737728][T22235] vrf0: left promiscuous mode [ 720.760607][T22235] bond5: left promiscuous mode [ 720.981285][T22235] gre0: left promiscuous mode [ 720.985468][T22235] gretap2: left promiscuous mode [ 721.003197][T22235] geneve2: left promiscuous mode [ 721.003662][T22235] bond6: left promiscuous mode [ 721.004289][T22235] ipvlan6: left promiscuous mode [ 721.004341][T22235] ipvlan6: left allmulticast mode [ 721.004682][T22235] ipvlan7: left promiscuous mode [ 721.004735][T22235] ipvlan7: left allmulticast mode [ 721.004767][T22235] bond6: left allmulticast mode [ 721.004782][T22235] bridge4: left allmulticast mode [ 721.005196][T22235] bridge4: left promiscuous mode [ 721.026128][T22235] veth0_vlan.4: left promiscuous mode [ 721.074044][T22235] mac80211_hwsim hwsim97 wlan4: left promiscuous mode [ 721.074467][T22235] bond7: left promiscuous mode [ 721.084529][T22235] ipvlan8: left promiscuous mode [ 721.084590][T22235] ipvlan8: left allmulticast mode [ 721.085110][T22235] ipvlan9: left promiscuous mode [ 721.085178][T22235] ipvlan9: left allmulticast mode [ 721.085229][T22235] bond7: left allmulticast mode [ 721.085262][T22235] bridge5: left allmulticast mode [ 721.085547][T22235] bridge5: left promiscuous mode [ 721.086057][T22235] bond8: left promiscuous mode [ 721.086378][T22235] veth4: left promiscuous mode [ 721.096901][T22235] veth5: left promiscuous mode [ 721.142676][T22257] Dev vda: unable to read RDB block 8 [ 721.143002][T22257] vda: unable to read partition table [ 721.147382][T22235] bond9: left promiscuous mode [ 721.147429][T22235] bridge8: left promiscuous mode [ 721.174106][T22235] ipvlan10: left allmulticast mode [ 721.182772][T22235] ipvlan11: left allmulticast mode [ 721.182832][T22235] bond9: left allmulticast mode [ 721.182871][T22235] bridge8: left allmulticast mode [ 721.203361][T22235] bond10: left promiscuous mode [ 721.203416][T22235] bridge9: left promiscuous mode [ 721.217008][T22235] ipvlan12: left allmulticast mode [ 721.225512][T22235] ipvlan13: left allmulticast mode [ 721.225564][T22235] bond10: left allmulticast mode [ 721.225579][T22235] bridge9: left allmulticast mode [ 721.399647][ T1118] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 721.399735][ T1118] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 721.399806][ T1118] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 721.399877][ T1118] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 722.845912][T22288] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4942'. [ 722.932801][T22292] netlink: 84 bytes leftover after parsing attributes in process `syz.1.4943'. [ 723.716043][T22316] net_ratelimit: 500 callbacks suppressed [ 723.716067][T22316] openvswitch: netlink: Key type 16137 is out of range max 32 [ 724.610534][T22345] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4960'. [ 724.784738][T22320] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 724.914571][T22352] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 724.956599][T22352] gre0: entered promiscuous mode [ 724.956647][T22352] gre0: entered allmulticast mode [ 725.183066][T22361] xt_hashlimit: size too large, truncated to 1048576 [ 725.603149][T22374] v: entered allmulticast mode [ 725.603482][T22374] A link change request failed with some changes committed already. Interface v may have been left with an inconsistent configuration, please check. [ 725.706276][T22376] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4974'. [ 725.707650][T22376] FAULT_INJECTION: forcing a failure. [ 725.707650][T22376] name failslab, interval 1, probability 0, space 0, times 0 [ 725.707683][T22376] CPU: 0 UID: 0 PID: 22376 Comm: syz.0.4974 Not tainted syzkaller #0 PREEMPT(full) [ 725.707711][T22376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 725.707724][T22376] Call Trace: [ 725.707734][T22376] [ 725.707745][T22376] dump_stack_lvl+0xe8/0x150 [ 725.707784][T22376] should_fail_ex+0x410/0x560 [ 725.707817][T22376] should_failslab+0xa8/0x100 [ 725.707850][T22376] __kmalloc_noprof+0xfe/0x720 [ 725.707874][T22376] ? __asan_memcpy+0x40/0x70 [ 725.707893][T22376] ? nft_trans_alloc+0x22/0x2a0 [ 725.708044][T22376] ? nft_trans_alloc+0x22/0x2a0 [ 725.708083][T22376] nft_trans_alloc+0x22/0x2a0 [ 725.708120][T22376] nf_tables_newsetelem+0x298a/0x4200 [ 725.708185][T22376] ? skb_clone+0x212/0x3a0 [ 725.708229][T22376] ? __pfx_nf_tables_newsetelem+0x10/0x10 [ 725.708276][T22376] ? nla_validate_array+0xfc/0x260 [ 725.708337][T22376] ? reacquire_held_locks+0x117/0x1a0 [ 725.708385][T22376] ? __pfx___nla_validate_parse+0x10/0x10 [ 725.708437][T22376] ? nfnetlink_rcv+0x8d1/0x28c0 [ 725.708510][T22376] ? lock_acquire+0x115/0x350 [ 725.708534][T22376] ? nfnl_pernet+0x23/0x240 [ 725.708578][T22376] ? __nla_parse+0x40/0x60 [ 725.708613][T22376] nfnetlink_rcv+0x1288/0x28c0 [ 725.708686][T22376] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 725.708772][T22376] ? lock_acquire+0x115/0x350 [ 725.708807][T22376] ? netlink_deliver_tap+0x2e/0x1b0 [ 725.708830][T22376] ? netlink_deliver_tap+0x2e/0x1b0 [ 725.708860][T22376] netlink_unicast+0x7bd/0x940 [ 725.708907][T22376] netlink_sendmsg+0x813/0xb40 [ 725.708942][T22376] ? __pfx_netlink_sendmsg+0x10/0x10 [ 725.708974][T22376] ? apparmor_socket_sendmsg+0x98/0x360 [ 725.709005][T22376] ? __pfx_netlink_sendmsg+0x10/0x10 [ 725.709027][T22376] sock_sendmsg_nosec+0x13a/0x180 [ 725.709056][T22376] ____sys_sendmsg+0x54e/0x850 [ 725.709096][T22376] ? __pfx_____sys_sendmsg+0x10/0x10 [ 725.709138][T22376] ? import_iovec+0x73/0xa0 [ 725.709174][T22376] ___sys_sendmsg+0x2a5/0x360 [ 725.709204][T22376] ? __lock_acquire+0x747/0x2de0 [ 725.709243][T22376] ? __pfx____sys_sendmsg+0x10/0x10 [ 725.709311][T22376] ? __fget_files+0x2a/0x420 [ 725.709358][T22376] ? __fget_files+0x3a2/0x420 [ 725.709401][T22376] __x64_sys_sendmsg+0x1b1/0x290 [ 725.709436][T22376] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 725.709502][T22376] do_syscall_64+0x166/0x520 [ 725.709534][T22376] ? trace_irq_disable+0x3b/0x140 [ 725.709558][T22376] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 725.709582][T22376] ? clear_bhb_loop+0x70/0xc0 [ 725.709621][T22376] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 725.709643][T22376] RIP: 0033:0x7f12ff39e159 [ 725.709663][T22376] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 725.709682][T22376] RSP: 002b:00007f13001ac028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 725.709705][T22376] RAX: ffffffffffffffda RBX: 00007f12ff625fa0 RCX: 00007f12ff39e159 [ 725.709721][T22376] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 725.709736][T22376] RBP: 00007f13001ac090 R08: 0000000000000000 R09: 0000000000000000 [ 725.709749][T22376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 725.709762][T22376] R13: 00007f12ff626038 R14: 00007f12ff625fa0 R15: 00007ffd1938d198 [ 725.709798][T22376] [ 728.106309][T22439] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4999'. [ 728.199195][T22441] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4999'. [ 728.316066][T22445] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5001'. [ 729.454434][T22484] netlink: 'syz.2.5015': attribute type 1 has an invalid length. [ 729.454512][T22484] netlink: 'syz.2.5015': attribute type 1 has an invalid length. [ 729.788944][T22492] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5017'. [ 729.793571][T22492] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5017'. [ 730.148258][T22505] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5024'. [ 730.352980][ T5624] block nbd0: Receive control failed (result -1) [ 730.652404][T22516] A link change request failed with some changes committed already. Interface v may have been left with an inconsistent configuration, please check. [ 730.737349][T22521] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5030'. [ 730.841644][T22521] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5030'. [ 730.842087][T22521] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5030'. [ 731.777348][T22555] FAULT_INJECTION: forcing a failure. [ 731.777348][T22555] name failslab, interval 1, probability 0, space 0, times 0 [ 731.777385][T22555] CPU: 1 UID: 0 PID: 22555 Comm: syz.4.5038 Not tainted syzkaller #0 PREEMPT(full) [ 731.777404][T22555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 731.777413][T22555] Call Trace: [ 731.777419][T22555] [ 731.777425][T22555] dump_stack_lvl+0xe8/0x150 [ 731.777450][T22555] should_fail_ex+0x410/0x560 [ 731.777471][T22555] should_failslab+0xa8/0x100 [ 731.777491][T22555] __kmalloc_node_track_caller_noprof+0xfb/0x720 [ 731.777531][T22555] ? copy_array+0x71/0x100 [ 731.777558][T22555] ? copy_array+0x71/0x100 [ 731.777592][T22555] ? copy_array+0x71/0x100 [ 731.777614][T22555] krealloc_node_align_noprof+0x19a/0x390 [ 731.777630][T22555] ? rcu_is_watching+0x16/0xb0 [ 731.777650][T22555] copy_array+0x71/0x100 [ 731.777672][T22555] bpf_copy_verifier_state+0xad/0x1170 [ 731.777717][T22555] bpf_is_state_visited+0x385b/0x48b0 [ 731.777752][T22555] ? bpf_diag_record_branch+0x58/0x90 [ 731.777802][T22555] do_check_common+0x224b/0x55c0 [ 731.777844][T22555] ? __pfx_do_check_common+0x10/0x10 [ 731.777871][T22555] do_check_main+0xa2/0x1f0 [ 731.777889][T22555] bpf_check+0x2777/0x2ef0 [ 731.777915][T22555] ? __pfx_bpf_check+0x10/0x10 [ 731.777932][T22555] ? bpf_obj_name_cpy+0x194/0x1e0 [ 731.777955][T22555] bpf_prog_load+0x14d6/0x1c20 [ 731.777980][T22555] ? __pfx_bpf_prog_load+0x10/0x10 [ 731.778013][T22555] __sys_bpf+0xd0d/0xd90 [ 731.778034][T22555] ? __pfx___sys_bpf+0x10/0x10 [ 731.778056][T22555] ? __fget_files+0x2a/0x420 [ 731.778087][T22555] ? ksys_write+0x242/0x270 [ 731.778109][T22555] ? __pfx_ksys_write+0x10/0x10 [ 731.778133][T22555] __x64_sys_bpf+0xba/0xd0 [ 731.778149][T22555] do_syscall_64+0x166/0x520 [ 731.778168][T22555] ? trace_irq_disable+0x3b/0x140 [ 731.778182][T22555] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 731.778196][T22555] ? clear_bhb_loop+0x70/0xc0 [ 731.778213][T22555] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 731.778245][T22555] RIP: 0033:0x7fd61799e159 [ 731.778264][T22555] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 731.778282][T22555] RSP: 002b:00007fd6188bf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 731.778304][T22555] RAX: ffffffffffffffda RBX: 00007fd617c25fa0 RCX: 00007fd61799e159 [ 731.778319][T22555] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005 [ 731.778332][T22555] RBP: 00007fd6188bf090 R08: 0000000000000000 R09: 0000000000000000 [ 731.778345][T22555] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 731.778357][T22555] R13: 00007fd617c26038 R14: 00007fd617c25fa0 R15: 00007ffe8f799238 [ 731.778385][T22555] [ 732.337926][T22561] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5042'. [ 732.916977][T22589] netlink: 'syz.0.5050': attribute type 1 has an invalid length. [ 733.081911][T22594] FAULT_INJECTION: forcing a failure. [ 733.081911][T22594] name failslab, interval 1, probability 0, space 0, times 0 [ 733.081949][T22594] CPU: 0 UID: 0 PID: 22594 Comm: syz.3.5052 Not tainted syzkaller #0 PREEMPT(full) [ 733.081978][T22594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 733.081992][T22594] Call Trace: [ 733.082002][T22594] [ 733.082013][T22594] dump_stack_lvl+0xe8/0x150 [ 733.082053][T22594] should_fail_ex+0x410/0x560 [ 733.082089][T22594] should_failslab+0xa8/0x100 [ 733.082122][T22594] __kmalloc_cache_noprof+0xa3/0x600 [ 733.082149][T22594] ? nf_tables_commit+0x906/0xad60 [ 733.082181][T22594] ? nf_tables_commit+0x906/0xad60 [ 733.082219][T22594] nf_tables_commit+0x906/0xad60 [ 733.082255][T22594] ? __pfx_nf_tables_newsetelem+0x10/0x10 [ 733.082323][T22594] ? __pfx_nf_tables_commit+0x10/0x10 [ 733.082368][T22594] ? reacquire_held_locks+0x117/0x1a0 [ 733.082399][T22594] ? __pfx___nla_validate_parse+0x10/0x10 [ 733.082439][T22594] ? nfnetlink_rcv+0x8d1/0x28c0 [ 733.082480][T22594] ? lock_acquire+0x115/0x350 [ 733.082530][T22594] nfnetlink_rcv+0x1caf/0x28c0 [ 733.082618][T22594] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 733.082723][T22594] ? lock_acquire+0x115/0x350 [ 733.082757][T22594] ? netlink_deliver_tap+0x2e/0x1b0 [ 733.082779][T22594] ? netlink_deliver_tap+0x2e/0x1b0 [ 733.082806][T22594] netlink_unicast+0x7bd/0x940 [ 733.082850][T22594] netlink_sendmsg+0x813/0xb40 [ 733.082883][T22594] ? __pfx_netlink_sendmsg+0x10/0x10 [ 733.082914][T22594] ? apparmor_socket_sendmsg+0x98/0x360 [ 733.082943][T22594] ? __pfx_netlink_sendmsg+0x10/0x10 [ 733.082963][T22594] sock_sendmsg_nosec+0x13a/0x180 [ 733.082990][T22594] ____sys_sendmsg+0x54e/0x850 [ 733.083026][T22594] ? __pfx_____sys_sendmsg+0x10/0x10 [ 733.083076][T22594] ? import_iovec+0x73/0xa0 [ 733.083108][T22594] ___sys_sendmsg+0x2a5/0x360 [ 733.083134][T22594] ? __lock_acquire+0x747/0x2de0 [ 733.083159][T22594] ? __pfx____sys_sendmsg+0x10/0x10 [ 733.083241][T22594] ? __fget_files+0x2a/0x420 [ 733.083270][T22594] ? __fget_files+0x3a2/0x420 [ 733.083311][T22594] __x64_sys_sendmsg+0x1b1/0x290 [ 733.083345][T22594] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 733.083397][T22594] do_syscall_64+0x166/0x520 [ 733.083427][T22594] ? trace_irq_disable+0x3b/0x140 [ 733.083448][T22594] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 733.083470][T22594] ? clear_bhb_loop+0x70/0xc0 [ 733.083496][T22594] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 733.083518][T22594] RIP: 0033:0x7f5e7759e159 [ 733.083537][T22594] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 733.083555][T22594] RSP: 002b:00007f5e78458028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 733.083578][T22594] RAX: ffffffffffffffda RBX: 00007f5e77825fa0 RCX: 00007f5e7759e159 [ 733.083594][T22594] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 733.083631][T22594] RBP: 00007f5e78458090 R08: 0000000000000000 R09: 0000000000000000 [ 733.083645][T22594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 733.083677][T22594] R13: 00007f5e77826038 R14: 00007f5e77825fa0 R15: 00007ffdee996878 [ 733.083722][T22594] [ 733.419864][T22589] bond11: entered promiscuous mode [ 733.423034][T22589] 8021q: adding VLAN 0 to HW filter on device bond11 [ 733.484506][T22591] ipvlan14: entered allmulticast mode [ 733.484531][T22591] bond11: entered allmulticast mode [ 733.562589][T22592] ipvlan15: entered allmulticast mode [ 733.664877][T22600] bond11: (slave bridge10): making interface the new active one [ 733.664942][T22600] bridge10: entered promiscuous mode [ 733.665333][T22600] bridge10: entered allmulticast mode [ 733.696299][T22600] bond11: (slave bridge10): Enslaving as an active interface with an up link [ 733.715538][T22599] __nla_validate_parse: 5 callbacks suppressed [ 733.715558][T22599] netlink: 208 bytes leftover after parsing attributes in process `syz.1.5051'. [ 733.715584][T22599] netlink: 208 bytes leftover after parsing attributes in process `syz.1.5051'. [ 733.715668][T22613] netlink: 208 bytes leftover after parsing attributes in process `syz.1.5051'. [ 733.715727][T22613] netlink: 208 bytes leftover after parsing attributes in process `syz.1.5051'. [ 734.482384][T22639] team_slave_1: entered allmulticast mode [ 734.713479][T22646] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5068'. [ 734.808610][T22646] netlink: 'syz.4.5068': attribute type 1 has an invalid length. [ 734.908474][ T31] audit: type=1800 audit(1790313905.528:7): pid=22646 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.5068" name=3A202E31323334352E2E2E2E2028313829207238203D2030783363333130303030300A202020202020323A202E31323334352E2E382E20283835292063616C6C2070632B360A202020202020333A202E2E2E2E2E2E2E2E382E2028313829207230203D203078313130303030303066666666666666660A202020202020353A202E2E2E2E2E2E2E2E382E202836362920696620773820733E2030783020676F746F2070632B300A202020202020363A202E2E2E2E2E2E2E2E2E2E20283138292072 dev="tmpfs" ino=1967 res=0 errno=0 [ 735.477068][T22674] FAULT_INJECTION: forcing a failure. [ 735.477068][T22674] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 735.477104][T22674] CPU: 0 UID: 0 PID: 22674 Comm: syz.0.5077 Not tainted syzkaller #0 PREEMPT(full) [ 735.477128][T22674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 735.477142][T22674] Call Trace: [ 735.477154][T22674] [ 735.477164][T22674] dump_stack_lvl+0xe8/0x150 [ 735.477200][T22674] should_fail_ex+0x410/0x560 [ 735.477230][T22674] _copy_from_user+0x2d/0xb0 [ 735.477259][T22674] ___sys_recvmsg+0x173/0x5a0 [ 735.477297][T22674] ? __pfx____sys_recvmsg+0x10/0x10 [ 735.477333][T22674] ? lock_acquire+0x115/0x350 [ 735.477372][T22674] ? __fget_files+0x3a2/0x420 [ 735.477429][T22674] __x64_sys_recvmsg+0x1ae/0x290 [ 735.477463][T22674] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 735.477515][T22674] do_syscall_64+0x166/0x520 [ 735.477544][T22674] ? trace_irq_disable+0x3b/0x140 [ 735.477565][T22674] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 735.477588][T22674] ? clear_bhb_loop+0x70/0xc0 [ 735.477614][T22674] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 735.477638][T22674] RIP: 0033:0x7f12ff39e159 [ 735.477658][T22674] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 735.477677][T22674] RSP: 002b:00007f13001ac028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 735.477699][T22674] RAX: ffffffffffffffda RBX: 00007f12ff625fa0 RCX: 00007f12ff39e159 [ 735.477713][T22674] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000007 [ 735.477726][T22674] RBP: 00007f13001ac090 R08: 0000000000000000 R09: 0000000000000000 [ 735.477739][T22674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 735.477752][T22674] R13: 00007f12ff626038 R14: 00007f12ff625fa0 R15: 00007ffd1938d198 [ 735.477784][T22674] [ 735.987507][T22689] Cannot find set identified by id 0 to match [ 736.221974][T22692] netlink: zone id is out of range [ 736.221994][T22692] netlink: del zone limit has 8 unknown bytes [ 736.451501][T22699] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5083'. [ 736.524297][T22704] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 737.880417][T22747] Cannot find add_set index 2 as target [ 738.276880][T22757] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5103'. [ 738.276921][T22757] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5103'. [ 738.440809][T22759] veth1_to_bond: entered allmulticast mode [ 738.444344][T22759] veth1_to_bond: entered promiscuous mode [ 738.444911][T22759] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5104'. [ 738.495330][T22763] FAULT_INJECTION: forcing a failure. [ 738.495330][T22763] name failslab, interval 1, probability 0, space 0, times 0 [ 738.495367][T22763] CPU: 0 UID: 0 PID: 22763 Comm: syz.4.5105 Not tainted syzkaller #0 PREEMPT(full) [ 738.495392][T22763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 738.495407][T22763] Call Trace: [ 738.495416][T22763] [ 738.495426][T22763] dump_stack_lvl+0xe8/0x150 [ 738.495465][T22763] should_fail_ex+0x410/0x560 [ 738.495499][T22763] should_failslab+0xa8/0x100 [ 738.495532][T22763] __kmalloc_noprof+0xfe/0x720 [ 738.495556][T22763] ? bpf_test_init+0x9f/0x150 [ 738.495591][T22763] ? bpf_test_init+0x9f/0x150 [ 738.495638][T22763] bpf_test_init+0x9f/0x150 [ 738.495679][T22763] bpf_prog_test_run_xdp+0x4cc/0x11d0 [ 738.495720][T22763] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 738.495750][T22763] ? __fget_files+0x2a/0x420 [ 738.495795][T22763] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 738.495820][T22763] bpf_prog_test_run+0x2c5/0x340 [ 738.495854][T22763] __sys_bpf+0xa22/0xd90 [ 738.495889][T22763] ? __pfx___sys_bpf+0x10/0x10 [ 738.495928][T22763] ? __fget_files+0x2a/0x420 [ 738.495979][T22763] ? ksys_write+0x242/0x270 [ 738.496018][T22763] ? __pfx_ksys_write+0x10/0x10 [ 738.496057][T22763] __x64_sys_bpf+0xba/0xd0 [ 738.496085][T22763] do_syscall_64+0x166/0x520 [ 738.496116][T22763] ? trace_irq_disable+0x3b/0x140 [ 738.496139][T22763] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 738.496163][T22763] ? clear_bhb_loop+0x70/0xc0 [ 738.496191][T22763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 738.496214][T22763] RIP: 0033:0x7fd61799e159 [ 738.496236][T22763] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 738.496256][T22763] RSP: 002b:00007fd6188bf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 738.496281][T22763] RAX: ffffffffffffffda RBX: 00007fd617c25fa0 RCX: 00007fd61799e159 [ 738.496298][T22763] RDX: 0000000000000050 RSI: 0000200000000240 RDI: 000000000000000a [ 738.496314][T22763] RBP: 00007fd6188bf090 R08: 0000000000000000 R09: 0000000000000000 [ 738.496328][T22763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 738.496342][T22763] R13: 00007fd617c26038 R14: 00007fd617c25fa0 R15: 00007ffe8f799238 [ 738.496381][T22763] [ 738.497445][T22759] veth1_to_bond (unregistering): left allmulticast mode [ 738.497491][T22759] veth1_to_bond (unregistering): left promiscuous mode [ 738.995955][T22775] Cannot find add_set index 2 as target [ 739.011240][T22772] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 739.219717][T22782] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5115'. [ 739.678111][T22803] tc_dump_action: action bad kind [ 740.377935][ T5624] Bluetooth: hci3: command 0x0406 tx timeout [ 740.450680][T22832] bridge0: port 1(macvlan5) entered blocking state [ 740.451531][T22832] bridge0: port 1(macvlan5) entered disabled state [ 740.451688][T22832] macvlan5: entered allmulticast mode [ 740.451707][T22832] ip6gretap0: entered allmulticast mode [ 740.493129][T22832] macvlan5: entered promiscuous mode [ 740.507753][T22832] bridge0: port 1(macvlan5) entered blocking state [ 740.507927][T22832] bridge0: port 1(macvlan5) entered forwarding state [ 740.612048][T22839] netlink: 'syz.4.5134': attribute type 1 has an invalid length. [ 740.677362][T22839] bond5: entered promiscuous mode [ 740.683332][T22839] 8021q: adding VLAN 0 to HW filter on device bond5 [ 740.794549][T22839] ipvlan2: entered allmulticast mode [ 740.794594][T22839] bond5: entered allmulticast mode [ 740.908419][T22844] ipvlan3: entered allmulticast mode [ 741.042151][T22839] bond5: (slave bridge3): making interface the new active one [ 741.042218][T22839] bridge3: entered promiscuous mode [ 741.042740][T22839] bridge3: entered allmulticast mode [ 741.081746][T22839] bond5: (slave bridge3): Enslaving as an active interface with an up link [ 742.342201][T22905] netlink: 'syz.1.5152': attribute type 1 has an invalid length. [ 742.342227][T22905] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5152'. [ 742.342602][T22908] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5152'. [ 742.398893][T22904] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5150'. [ 742.523341][T22912] Cannot find add_set index 2 as target [ 742.672301][T22919] set match dimension is over the limit! [ 742.695611][T22904] netlink: 'syz.0.5150': attribute type 1 has an invalid length. [ 742.695681][T22904] netlink: 200 bytes leftover after parsing attributes in process `syz.0.5150'. [ 742.835264][T22928] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5160'. [ 742.924460][T22928] ip6gre1: entered promiscuous mode [ 742.924483][T22928] ip6gre1: entered allmulticast mode [ 742.971751][T22928] x_tables: ip6_tables: cgroup match: used from hooks PREROUTING, but only valid from INPUT/OUTPUT/POSTROUTING [ 743.005358][T22904] netdevsim netdevsim0 netdevsim0: IPsec offload requires 128 bit authentication [ 743.020413][T22935] xt_hashlimit: size too large, truncated to 1048576 [ 743.738042][ T5624] Bluetooth: hci3: command 0x0406 tx timeout [ 743.982193][T22967] Cannot find add_set index 2 as target [ 744.570822][T22983] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5173'. [ 744.578032][T22983] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5173'. [ 744.844478][T22992] Cannot find add_set index 2 as target [ 745.079366][T23000] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 745.254265][T23006] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5184'. [ 745.417624][T23013] tipc: Enabling of bearer rejected, failed to enable media [ 745.553218][T23021] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5189'. [ 745.777630][T23027] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 745.793759][T23027] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5188'. [ 745.793981][T23031] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5188'. [ 745.817935][ T5624] Bluetooth: hci3: command 0x0406 tx timeout [ 746.060680][T23037] Cannot find add_set index 2 as target [ 746.615185][T23051] FAULT_INJECTION: forcing a failure. [ 746.615185][T23051] name failslab, interval 1, probability 0, space 0, times 0 [ 746.615249][T23051] CPU: 1 UID: 0 PID: 23051 Comm: syz.2.5197 Not tainted syzkaller #0 PREEMPT(full) [ 746.615279][T23051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 746.615294][T23051] Call Trace: [ 746.615303][T23051] [ 746.615314][T23051] dump_stack_lvl+0xe8/0x150 [ 746.615354][T23051] should_fail_ex+0x410/0x560 [ 746.615388][T23051] should_failslab+0xa8/0x100 [ 746.615420][T23051] __kmalloc_node_track_caller_noprof+0xfb/0x720 [ 746.615457][T23051] ? bpf_push_jmp_history+0x26c/0x6d0 [ 746.615478][T23051] ? bpf_push_jmp_history+0x26c/0x6d0 [ 746.615502][T23051] ? bpf_push_jmp_history+0x26c/0x6d0 [ 746.615525][T23051] krealloc_node_align_noprof+0x19a/0x390 [ 746.615547][T23051] ? bpf_diag_record_branch+0x58/0x90 [ 746.615579][T23051] bpf_push_jmp_history+0x26c/0x6d0 [ 746.615610][T23051] do_check_common+0x240b/0x55c0 [ 746.615670][T23051] ? __pfx_do_check_common+0x10/0x10 [ 746.615708][T23051] do_check_main+0xa2/0x1f0 [ 746.615734][T23051] bpf_check+0x2777/0x2ef0 [ 746.615772][T23051] ? __pfx_bpf_check+0x10/0x10 [ 746.615796][T23051] ? bpf_obj_name_cpy+0x194/0x1e0 [ 746.615835][T23051] bpf_prog_load+0x14d6/0x1c20 [ 746.615870][T23051] ? __pfx_bpf_prog_load+0x10/0x10 [ 746.615908][T23051] ? __sys_bpf+0x5c8/0xd90 [ 746.615936][T23051] __sys_bpf+0xd0d/0xd90 [ 746.615967][T23051] ? __pfx___sys_bpf+0x10/0x10 [ 746.616000][T23051] ? __fget_files+0x2a/0x420 [ 746.616044][T23051] ? ksys_write+0x242/0x270 [ 746.616095][T23051] ? __pfx_ksys_write+0x10/0x10 [ 746.616131][T23051] __x64_sys_bpf+0xba/0xd0 [ 746.616156][T23051] do_syscall_64+0x166/0x520 [ 746.616197][T23051] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 746.616235][T23051] ? clear_bhb_loop+0x70/0xc0 [ 746.616262][T23051] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 746.616283][T23051] RIP: 0033:0x7f041c59e159 [ 746.616303][T23051] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 746.616321][T23051] RSP: 002b:00007f041d4d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 746.616344][T23051] RAX: ffffffffffffffda RBX: 00007f041c825fa0 RCX: 00007f041c59e159 [ 746.616360][T23051] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005 [ 746.616374][T23051] RBP: 00007f041d4d6090 R08: 0000000000000000 R09: 0000000000000000 [ 746.616388][T23051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 746.616401][T23051] R13: 00007f041c826038 R14: 00007f041c825fa0 R15: 00007ffd0be3fe18 [ 746.616435][T23051] [ 746.907605][T23055] syzkaller0: left promiscuous mode [ 746.966991][T23058] Cannot find set identified by id 65534 to match [ 747.033098][T23060] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5201'. [ 747.157284][T23062] Cannot find add_set index 2 as target [ 747.271054][T23066] netlink: 'syz.3.5200': attribute type 1 has an invalid length. [ 747.293054][T23070] netlink: 'syz.4.5205': attribute type 1 has an invalid length. [ 747.387519][T23078] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5200'. [ 747.401703][T23066] bond4: entered promiscuous mode [ 747.402291][T23066] 8021q: adding VLAN 0 to HW filter on device bond4 [ 747.524379][T23070] bond6: entered promiscuous mode [ 747.525418][T23070] 8021q: adding VLAN 0 to HW filter on device bond6 [ 747.753147][T23073] 8021q: adding VLAN 0 to HW filter on device bond4 [ 747.757368][T23073] bond4: (slave gre0): The slave device specified does not support setting the MAC address [ 747.757393][T23073] bond4: (slave gre0): Setting fail_over_mac to active for active-backup mode [ 747.790660][T23094] openvswitch: netlink: Flow actions attr not present in new flow. [ 747.797651][T23073] bond4: (slave gre0): making interface the new active one [ 747.797676][T23073] gre0: entered promiscuous mode [ 747.822551][T23073] bond4: (slave gre0): Enslaving as an active interface with an up link [ 747.839190][T23075] ipvlan4: entered allmulticast mode [ 747.839212][T23075] bond6: entered allmulticast mode [ 747.894560][T23078] bond4 (unregistering): (slave gre0): Releasing backup interface [ 747.894603][T23078] gre0: left promiscuous mode [ 747.911494][T23078] bond4 (unregistering): Released all slaves [ 748.085694][T23097] ip_tables: iptables: counters copy to user failed while replacing table [ 748.158338][T23080] ipvlan5: entered allmulticast mode [ 748.313532][T23085] bond6: (slave bridge4): making interface the new active one [ 748.313593][T23085] bridge4: entered promiscuous mode [ 748.313962][T23085] bridge4: entered allmulticast mode [ 748.331995][T23085] bond6: (slave bridge4): Enslaving as an active interface with an up link [ 748.410300][T23107] Cannot find add_set index 2 as target [ 748.445488][T23101] FAULT_INJECTION: forcing a failure. [ 748.445488][T23101] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 748.445561][T23101] CPU: 1 UID: 0 PID: 23101 Comm: syz.2.5215 Not tainted syzkaller #0 PREEMPT(full) [ 748.445589][T23101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 748.445603][T23101] Call Trace: [ 748.445613][T23101] [ 748.445622][T23101] dump_stack_lvl+0xe8/0x150 [ 748.445660][T23101] should_fail_ex+0x410/0x560 [ 748.445694][T23101] _copy_to_user+0x31/0xb0 [ 748.445727][T23101] simple_read_from_buffer+0xe1/0x170 [ 748.445766][T23101] proc_fail_nth_read+0x1bb/0x230 [ 748.445786][T23101] ? common_file_perm+0x20e/0x2b0 [ 748.445818][T23101] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 748.445844][T23101] ? rw_verify_area+0x24a/0x4c0 [ 748.445880][T23101] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 748.445901][T23101] vfs_read+0x213/0xa80 [ 748.445940][T23101] ? __pfx___mutex_lock+0x10/0x10 [ 748.445972][T23101] ? __pfx_vfs_read+0x10/0x10 [ 748.446007][T23101] ? __fget_files+0x2a/0x420 [ 748.446043][T23101] ? __fget_files+0x3a2/0x420 [ 748.446073][T23101] ? __fget_files+0x2a/0x420 [ 748.446113][T23101] ksys_read+0x150/0x270 [ 748.446150][T23101] ? __pfx_ksys_read+0x10/0x10 [ 748.446203][T23101] do_syscall_64+0x166/0x520 [ 748.446234][T23101] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 748.446258][T23101] ? clear_bhb_loop+0x70/0xc0 [ 748.446286][T23101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 748.446310][T23101] RIP: 0033:0x7f041c55e98e [ 748.446330][T23101] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 748.446350][T23101] RSP: 002b:00007f041d4d5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 748.446375][T23101] RAX: ffffffffffffffda RBX: 00007f041d4d66c0 RCX: 00007f041c55e98e [ 748.446392][T23101] RDX: 000000000000000f RSI: 00007f041d4d60a0 RDI: 000000000000000b [ 748.446407][T23101] RBP: 00007f041d4d6090 R08: 0000000000000000 R09: 0000000000000000 [ 748.446422][T23101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 748.446437][T23101] R13: 00007f041c826038 R14: 00007f041c825fa0 R15: 00007ffd0be3fe18 [ 748.446475][T23101] [ 749.170970][T23121] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5221'. [ 749.285348][T23131] xt_l2tp: missing protocol rule (udp|l2tpip) [ 749.356382][T23133] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5229'. [ 749.652081][T23136] 8021q: adding VLAN 0 to HW filter on device bond7 [ 749.715581][T23145] FAULT_INJECTION: forcing a failure. [ 749.715581][T23145] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 749.715652][T23145] CPU: 1 UID: 0 PID: 23145 Comm: syz.1.5228 Not tainted syzkaller #0 PREEMPT(full) [ 749.715677][T23145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 749.715691][T23145] Call Trace: [ 749.715700][T23145] [ 749.715709][T23145] dump_stack_lvl+0xe8/0x150 [ 749.715745][T23145] should_fail_ex+0x410/0x560 [ 749.715777][T23145] prepare_alloc_pages+0x223/0x600 [ 749.715807][T23145] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 749.715835][T23145] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 749.715864][T23145] ? __pfx_policy_nodemask+0x10/0x10 [ 749.715890][T23145] ? finish_task_switch+0x40e/0xc60 [ 749.715957][T23145] alloc_pages_mpol+0x21e/0x390 [ 749.715991][T23145] folio_alloc_mpol_noprof+0x39/0x160 [ 749.716021][T23145] vma_alloc_folio_noprof+0xe1/0x1e0 [ 749.716052][T23145] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 749.716091][T23145] do_wp_page+0x117d/0x4b80 [ 749.716147][T23145] ? __pfx_do_wp_page+0x10/0x10 [ 749.716173][T23145] ? do_raw_spin_lock+0x12b/0x2f0 [ 749.716205][T23145] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 749.716246][T23145] handle_mm_fault+0x15d7/0x3750 [ 749.716288][T23145] ? handle_mm_fault+0xf1/0x3750 [ 749.716328][T23145] ? __pfx_handle_mm_fault+0x10/0x10 [ 749.716358][T23145] ? follow_page_pte+0xc8f/0xf10 [ 749.716397][T23145] ? __pfx_follow_page_pte+0x10/0x10 [ 749.716446][T23145] __get_user_pages+0x1675/0x2750 [ 749.716508][T23145] __gup_longterm_locked+0xd52/0x15c0 [ 749.716536][T23145] ? trace_irq_disable+0x3b/0x140 [ 749.716571][T23145] ? sanity_check_pinned_pages+0x810/0x8d0 [ 749.716606][T23145] gup_fast_fallback+0x1d92/0x20e0 [ 749.716668][T23145] ? __pfx_gup_fast_fallback+0x10/0x10 [ 749.716700][T23145] ? is_valid_gup_args+0x11f/0x200 [ 749.716730][T23145] ? pin_user_pages_fast+0x4d/0xb0 [ 749.716761][T23145] iov_iter_extract_pages+0x3a1/0x690 [ 749.716801][T23145] extract_iter_to_sg+0xeda/0x2610 [ 749.716841][T23145] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 749.716887][T23145] ? __asan_memset+0x22/0x50 [ 749.716927][T23145] af_alg_get_rsgl+0x493/0x8d0 [ 749.717056][T23145] ? af_alg_alloc_areq+0xac/0x200 [ 749.717096][T23145] skcipher_recvmsg+0x39d/0xe10 [ 749.717168][T23145] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 749.717199][T23145] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 749.717229][T23145] ? security_socket_recvmsg+0x7e/0x2c0 [ 749.717295][T23145] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 749.717322][T23145] sock_recvmsg+0x196/0x1e0 [ 749.717353][T23145] ____sys_recvmsg+0x1e6/0x4a0 [ 749.717397][T23145] ? __pfx_____sys_recvmsg+0x10/0x10 [ 749.717457][T23145] ? import_iovec+0x73/0xa0 [ 749.717489][T23145] ___sys_recvmsg+0x213/0x5a0 [ 749.717527][T23145] ? __pfx____sys_recvmsg+0x10/0x10 [ 749.717565][T23145] ? lock_acquire+0x115/0x350 [ 749.717607][T23145] ? __fget_files+0x3a2/0x420 [ 749.717652][T23145] __x64_sys_recvmsg+0x1ae/0x290 [ 749.717684][T23145] ? lockdep_hardirqs_on+0x7b/0x110 [ 749.717717][T23145] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 749.717775][T23145] do_syscall_64+0x166/0x520 [ 749.717805][T23145] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 749.717830][T23145] ? clear_bhb_loop+0x70/0xc0 [ 749.717860][T23145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 749.717884][T23145] RIP: 0033:0x7f89a419e159 [ 749.717906][T23145] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 749.717926][T23145] RSP: 002b:00007f89a50cf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 749.717953][T23145] RAX: ffffffffffffffda RBX: 00007f89a4425fa0 RCX: 00007f89a419e159 [ 749.717971][T23145] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000007 [ 749.717985][T23145] RBP: 00007f89a50cf090 R08: 0000000000000000 R09: 0000000000000000 [ 749.718000][T23145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 749.718014][T23145] R13: 00007f89a4426038 R14: 00007f89a4425fa0 R15: 00007ffe593c1698 [ 749.718052][T23145] [ 749.719534][T23139] bond7 (unregistering): Released all slaves [ 750.064281][T23136] netlink: 'syz.4.5226': attribute type 2 has an invalid length. [ 750.064351][T23136] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5226'. [ 750.084182][T23155] Cannot find add_set index 2 as target [ 750.686485][T23168] bridge0: port 1(macvlan5) entered disabled state [ 750.711555][T23168] team_slave_1: left allmulticast mode [ 751.099050][ T5624] Bluetooth: hci3: command 0x0406 tx timeout [ 751.131114][T23168] ipvlan2: left allmulticast mode [ 751.131312][T23168] ipvlan3: left allmulticast mode [ 751.131328][T23168] bond5: left allmulticast mode [ 751.131343][T23168] bridge3: left allmulticast mode [ 751.213472][T23168] ip6gre1: left allmulticast mode [ 751.228872][T23168] ipvlan4: left allmulticast mode [ 751.229043][T23168] ipvlan5: left allmulticast mode [ 751.229060][T23168] bond6: left allmulticast mode [ 751.229075][T23168] bridge4: left allmulticast mode [ 751.540009][T23184] xt_hashlimit: size too large, truncated to 1048576 [ 751.603042][T23193] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 751.690184][T23195] netlink: 'syz.1.5244': attribute type 1 has an invalid length. [ 751.792441][T23195] 8021q: adding VLAN 0 to HW filter on device bond6 [ 751.998329][T23205] Cannot find add_set index 2 as target [ 752.058881][T23195] bond6: (slave geneve2): making interface the new active one [ 752.062220][T23195] bond6: (slave geneve2): Enslaving as an active interface with an up link [ 752.289592][T23210] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5247'. [ 752.329577][T10818] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 752.330310][T10818] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 752.330350][T10818] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 752.330385][T10818] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 752.643386][T23215] netlink: 14 bytes leftover after parsing attributes in process `syz.4.5252'. [ 753.275765][T23247] Cannot find add_set index 2 as target [ 753.295124][T23245] bridge0: left promiscuous mode [ 753.542495][T23253] netlink: 'syz.1.5263': attribute type 10 has an invalid length. [ 754.039459][T23269] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5270'. [ 754.133116][T23272] ip_tables: iptables: counters copy to user failed while replacing table [ 754.256166][T23277] netlink: 'syz.0.5274': attribute type 1 has an invalid length. [ 754.305280][T23280] Cannot find add_set index 2 as target [ 754.359328][T23277] bond12: entered promiscuous mode [ 754.359764][T23277] 8021q: adding VLAN 0 to HW filter on device bond12 [ 754.398335][T23277] ipvlan16: entered allmulticast mode [ 754.398359][T23277] bond12: entered allmulticast mode [ 754.492648][T23277] ipvlan17: entered allmulticast mode [ 754.515239][T23281] bond12: (slave bridge11): making interface the new active one [ 754.515264][T23281] bridge11: entered promiscuous mode [ 754.515433][T23281] bridge11: entered allmulticast mode [ 754.525754][T23281] bond12: (slave bridge11): Enslaving as an active interface with an up link [ 754.645641][T23284] syzkaller0: entered promiscuous mode [ 754.656920][T23284] tipc: Enabling of bearer rejected, already enabled [ 755.465992][T23311] Cannot find add_set index 2 as target [ 755.517476][T23314] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5286'. [ 755.528219][T23314] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5286'. [ 755.528554][T23314] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5286'. [ 755.661713][T23319] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5290'. [ 755.935652][T23327] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 756.114107][T23333] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5297'. [ 756.405175][T23345] bridge0: left promiscuous mode [ 756.646707][T23353] ip_tables: iptables: counters copy to user failed while replacing table [ 756.678322][T23351] ip_tables: iptables: counters copy to user failed while replacing table [ 756.794031][T23359] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5305'. [ 756.796985][T23361] openvswitch: netlink: IP tunnel attribute has 5405 unknown bytes. [ 756.981606][T23366] s: renamed from veth0 [ 757.568842][T23382] FAULT_INJECTION: forcing a failure. [ 757.568842][T23382] name failslab, interval 1, probability 0, space 0, times 0 [ 757.568878][T23382] CPU: 0 UID: 0 PID: 23382 Comm: syz.3.5311 Not tainted syzkaller #0 PREEMPT(full) [ 757.568904][T23382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 757.568918][T23382] Call Trace: [ 757.568928][T23382] [ 757.568937][T23382] dump_stack_lvl+0xe8/0x150 [ 757.568977][T23382] should_fail_ex+0x410/0x560 [ 757.569029][T23382] should_failslab+0xa8/0x100 [ 757.569063][T23382] __kvmalloc_node_noprof+0x176/0x820 [ 757.569093][T23382] ? check_max_stack_depth+0x5c/0x2160 [ 757.569122][T23382] ? check_max_stack_depth+0x5c/0x2160 [ 757.569157][T23382] check_max_stack_depth+0x5c/0x2160 [ 757.569194][T23382] ? kasan_quarantine_put+0xbb/0x1f0 [ 757.569218][T23382] ? lockdep_hardirqs_on+0x7b/0x110 [ 757.569257][T23382] ? bpf_remove_fastcall_spills_fills+0xabc/0xb00 [ 757.569302][T23382] bpf_check+0x1a52/0x2ef0 [ 757.569344][T23382] ? __pfx_bpf_check+0x10/0x10 [ 757.569370][T23382] ? bpf_obj_name_cpy+0x194/0x1e0 [ 757.569406][T23382] bpf_prog_load+0x14d6/0x1c20 [ 757.569443][T23382] ? __pfx_bpf_prog_load+0x10/0x10 [ 757.569498][T23382] __sys_bpf+0xd0d/0xd90 [ 757.569530][T23382] ? __pfx___sys_bpf+0x10/0x10 [ 757.569565][T23382] ? __fget_files+0x2a/0x420 [ 757.569619][T23382] ? ksys_write+0x242/0x270 [ 757.569654][T23382] ? __pfx_ksys_write+0x10/0x10 [ 757.569691][T23382] __x64_sys_bpf+0xba/0xd0 [ 757.569717][T23382] do_syscall_64+0x166/0x520 [ 757.569746][T23382] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 757.569769][T23382] ? clear_bhb_loop+0x70/0xc0 [ 757.569795][T23382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 757.569816][T23382] RIP: 0033:0x7f5e7759e159 [ 757.569836][T23382] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 757.569855][T23382] RSP: 002b:00007f5e78458028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 757.569879][T23382] RAX: ffffffffffffffda RBX: 00007f5e77825fa0 RCX: 00007f5e7759e159 [ 757.569895][T23382] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005 [ 757.569910][T23382] RBP: 00007f5e78458090 R08: 0000000000000000 R09: 0000000000000000 [ 757.569924][T23382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 757.569937][T23382] R13: 00007f5e77826038 R14: 00007f5e77825fa0 R15: 00007ffdee996878 [ 757.569970][T23382] [ 757.830823][ T5624] Bluetooth: hci3: command 0x0406 tx timeout [ 758.354079][T23403] Bluetooth: hci0: unsupported parameter 5135 [ 758.354106][T23403] Bluetooth: hci0: unsupported parameter 8192 [ 758.354121][T23403] Bluetooth: hci0: unsupported parameter 5135 [ 758.354135][T23403] Bluetooth: hci0: unsupported parameter 8192 [ 758.807160][T23421] netlink: 316 bytes leftover after parsing attributes in process `syz.0.5321'. [ 758.807190][T23421] netlink: 316 bytes leftover after parsing attributes in process `syz.0.5321'. [ 759.424684][T23434] Cannot find set identified by id 0 to match [ 759.736314][T23439] tipc: Enabling of bearer rejected, already enabled [ 759.992498][T23456] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5334'. [ 760.012096][T23458] netlink: 'syz.4.5333': attribute type 1 has an invalid length. [ 760.122120][T23458] 8021q: adding VLAN 0 to HW filter on device bond7 [ 760.210275][T23464] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5336'. [ 760.275819][T23458] bond7: (slave geneve2): making interface the new active one [ 760.277342][T23458] bond7: (slave geneve2): Enslaving as an active interface with an up link [ 760.280712][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 760.387952][T10812] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 760.388042][T10812] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 760.388110][T10812] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 760.493451][T23473] syz.4.5340: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 760.493523][T23473] CPU: 0 UID: 0 PID: 23473 Comm: syz.4.5340 Not tainted syzkaller #0 PREEMPT(full) [ 760.493546][T23473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 760.493559][T23473] Call Trace: [ 760.493568][T23473] [ 760.493578][T23473] dump_stack_lvl+0xe8/0x150 [ 760.493616][T23473] warn_alloc+0x24d/0x270 [ 760.493640][T23473] ? kasan_save_track+0x4f/0x80 [ 760.493663][T23473] ? kasan_save_track+0x3e/0x80 [ 760.493690][T23473] ? __pfx_warn_alloc+0x10/0x10 [ 760.493709][T23473] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 760.493742][T23473] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 760.493785][T23473] __vmalloc_node_range_noprof+0x127/0x1540 [ 760.493853][T23473] ? rcu_is_watching+0x16/0xb0 [ 760.493887][T23473] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 760.493921][T23473] ? __kmalloc_cache_noprof+0x321/0x600 [ 760.493948][T23473] ? __kmalloc_cache_noprof+0x14d/0x600 [ 760.493970][T23473] ? xskq_create+0x56/0x220 [ 760.494092][T23473] xskq_create+0x148/0x220 [ 760.494120][T23473] ? xsk_init_queue+0x8a/0xe0 [ 760.494149][T23473] xsk_init_queue+0x8a/0xe0 [ 760.494177][T23473] xsk_setsockopt+0x52a/0x960 [ 760.494206][T23473] ? __pfx_xsk_setsockopt+0x10/0x10 [ 760.494232][T23473] ? __pfx_aa_sk_perm+0x10/0x10 [ 760.494271][T23473] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 760.494299][T23473] ? __pfx_xsk_setsockopt+0x10/0x10 [ 760.494326][T23473] do_sock_setsockopt+0x17c/0x1b0 [ 760.494362][T23473] __x64_sys_setsockopt+0x13d/0x1b0 [ 760.494398][T23473] do_syscall_64+0x166/0x520 [ 760.494428][T23473] ? trace_irq_disable+0x3b/0x140 [ 760.494449][T23473] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 760.494473][T23473] ? clear_bhb_loop+0x70/0xc0 [ 760.494500][T23473] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 760.494524][T23473] RIP: 0033:0x7fd61799e159 [ 760.494544][T23473] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 760.494563][T23473] RSP: 002b:00007fd6188bf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 760.494586][T23473] RAX: ffffffffffffffda RBX: 00007fd617c25fa0 RCX: 00007fd61799e159 [ 760.494604][T23473] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 760.494618][T23473] RBP: 00007fd617a3506b R08: 0000000000000004 R09: 0000000000000000 [ 760.494632][T23473] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 760.494646][T23473] R13: 00007fd617c26038 R14: 00007fd617c25fa0 R15: 00007ffe8f799238 [ 760.494682][T23473] [ 760.494703][T23473] Mem-Info: [ 760.494713][T23473] active_anon:5933 inactive_anon:0 isolated_anon:0 [ 760.494713][T23473] active_file:2 inactive_file:44091 isolated_file:0 [ 760.494713][T23473] unevictable:0 dirty:428 writeback:0 [ 760.494713][T23473] slab_reclaimable:11909 slab_unreclaimable:111621 [ 760.494713][T23473] mapped:30158 shmem:670 pagetables:1311 [ 760.494713][T23473] sec_pagetables:0 bounce:0 [ 760.494713][T23473] kernel_misc_reclaimable:0 [ 760.494713][T23473] free:1250994 free_pcp:11326 free_cma:0 [ 760.496136][T23473] Node 0 active_anon:23732kB inactive_anon:0kB active_file:8kB inactive_file:176168kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:120632kB dirty:1712kB writeback:0kB shmem:2680kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15268kB pagetables:5080kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 760.496202][T23473] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 760.496261][T23473] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 760.496340][T23473] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 760.496385][T23473] Node 0 DMA32 free:1042556kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:23732kB inactive_anon:0kB active_file:8kB inactive_file:176168kB unevictable:0kB writepending:1712kB zspages:0kB present:3129332kB managed:2546852kB mlocked:0kB bounce:0kB free_pcp:45276kB local_pcp:23028kB free_cma:0kB [ 760.496450][T23473] lowmem_reserve[]: 0 0 0 0 0 [ 760.496489][T23473] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 760.496548][T23473] lowmem_reserve[]: 0 0 0 0 0 [ 760.496589][T23473] Node 1 Normal free:3946060kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 760.496654][T23473] lowmem_reserve[]: 0 0 0 0 0 [ 760.496696][T23473] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 760.582972][T23473] Node 0 DMA32: 307*4kB (UM) 792*8kB (UME) 1877*16kB (U) 602*32kB (UME) 702*64kB (UME) 247*128kB (UME) 79*256kB (UM) 34*512kB (UME) 23*1024kB (UME) 10*2048kB (UE) 202*4096kB (UM) = 1042460kB [ 760.583179][T23473] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 760.583285][T23473] Node 1 Normal: 1*4kB (M) 3*8kB (UM) 5*16kB (UM) 11*32kB (UM) 8*64kB (UM) 7*128kB (UM) 3*256kB (UM) 6*512kB (UM) 4*1024kB (UM) 0*2048kB 961*4096kB (UM) = 3946060kB [ 760.583447][T23473] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 760.583465][T23473] Node 0 hugepages_total=6 hugepages_free=0 hugepages_surp=4 hugepages_size=2048kB [ 760.583483][T23473] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 760.583500][T23473] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 760.583516][T23473] 44759 total pagecache pages [ 760.583525][T23473] 0 pages in swap cache [ 760.583533][T23473] Free swap = 124996kB [ 760.583541][T23473] Total swap = 124996kB [ 760.583550][T23473] 2097051 pages RAM [ 760.583558][T23473] 0 pages HighMem/MovableOnly [ 760.583567][T23473] 428722 pages reserved [ 760.583575][T23473] 0 pages cma reserved [ 760.886247][T23482] __nla_validate_parse: 3 callbacks suppressed [ 760.886318][T23482] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5340'. [ 761.180331][T23473] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 761.399499][T23490] netlink: 'syz.3.5343': attribute type 7 has an invalid length. [ 761.856095][T23510] openvswitch: netlink: Flow actions attr not present in new flow. [ 762.486206][T23531] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5360'. [ 762.500199][T23531] netlink: 'syz.1.5360': attribute type 5 has an invalid length. [ 762.500221][T23531] netlink: 'syz.1.5360': attribute type 9 has an invalid length. [ 762.500238][T23531] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5360'. [ 763.123605][T23550] xt_hashlimit: size too large, truncated to 1048576 [ 763.667642][T23565] A link change request failed with some changes committed already. Interface v may have been left with an inconsistent configuration, please check. [ 764.398053][T23591] netlink: 'syz.2.5379': attribute type 1 has an invalid length. [ 764.499862][T23593] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5379'. [ 764.606654][T23593] bond4 (unregistering): Released all slaves [ 764.637264][T23605] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5382'. [ 764.637287][T23605] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5382'. [ 764.677314][T23599] 8021q: adding VLAN 0 to HW filter on device bond5 [ 764.696073][T23605] bond0: left allmulticast mode [ 764.696108][T23605] bond0: left promiscuous mode [ 764.696386][T23605] bridge0: port 1(bond0) entered disabled state [ 764.759904][T23605] 8021q: adding VLAN 0 to HW filter on device bond0 [ 764.776766][T23605] bond5: (slave bond0): Enslaving as an active interface with a down link [ 764.847910][T23605] netlink: 'syz.1.5382': attribute type 2 has an invalid length. [ 764.847946][T23605] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5382'. [ 764.921452][T23599] bond5 (unregistering): (slave bond0): Releasing active interface [ 764.955804][T23599] bond5 (unregistering): Released all slaves [ 765.075306][T23610] xt_limit: Overflow, try lower: 0/0 [ 765.106046][T23616] batman_adv: batadv0: Adding interface: macvlan6 [ 765.106068][T23616] batman_adv: batadv0: The MTU of interface macvlan6 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 765.106103][T23616] batman_adv: batadv0: Interface activated: macvlan6 [ 765.252244][T23627] FAULT_INJECTION: forcing a failure. [ 765.252244][T23627] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 765.252282][T23627] CPU: 0 UID: 0 PID: 23627 Comm: syz.1.5390 Not tainted syzkaller #0 PREEMPT(full) [ 765.252308][T23627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 765.252322][T23627] Call Trace: [ 765.252332][T23627] [ 765.252343][T23627] dump_stack_lvl+0xe8/0x150 [ 765.252383][T23627] should_fail_ex+0x410/0x560 [ 765.252430][T23627] _copy_to_user+0x31/0xb0 [ 765.252466][T23627] simple_read_from_buffer+0xe1/0x170 [ 765.252507][T23627] proc_fail_nth_read+0x1bb/0x230 [ 765.252531][T23627] ? common_file_perm+0x20e/0x2b0 [ 765.252565][T23627] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 765.252603][T23627] ? rw_verify_area+0x24a/0x4c0 [ 765.252637][T23627] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 765.252658][T23627] vfs_read+0x213/0xa80 [ 765.252696][T23627] ? __pfx___mutex_lock+0x10/0x10 [ 765.252728][T23627] ? __pfx_vfs_read+0x10/0x10 [ 765.252761][T23627] ? __fget_files+0x2a/0x420 [ 765.252796][T23627] ? __fget_files+0x3a2/0x420 [ 765.252825][T23627] ? __fget_files+0x2a/0x420 [ 765.252864][T23627] ksys_read+0x150/0x270 [ 765.252899][T23627] ? __pfx_ksys_read+0x10/0x10 [ 765.252930][T23627] ? __pfx_sock_ioctl+0x10/0x10 [ 765.252964][T23627] do_syscall_64+0x166/0x520 [ 765.252991][T23627] ? trace_irq_disable+0x3b/0x140 [ 765.253026][T23627] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 765.253047][T23627] ? clear_bhb_loop+0x70/0xc0 [ 765.253072][T23627] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 765.253094][T23627] RIP: 0033:0x7f89a415e98e [ 765.253112][T23627] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 765.253129][T23627] RSP: 002b:00007f89a50cefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 765.253152][T23627] RAX: ffffffffffffffda RBX: 00007f89a50cf6c0 RCX: 00007f89a415e98e [ 765.253167][T23627] RDX: 000000000000000f RSI: 00007f89a50cf0a0 RDI: 0000000000000006 [ 765.253180][T23627] RBP: 00007f89a50cf090 R08: 0000000000000000 R09: 0000000000000000 [ 765.253194][T23627] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 765.253206][T23627] R13: 00007f89a4426038 R14: 00007f89a4425fa0 R15: 00007ffe593c1698 [ 765.253239][T23627] [ 765.767019][T23635] syzkaller1: entered promiscuous mode [ 765.767046][T23635] syzkaller1: entered allmulticast mode [ 766.098980][T23648] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5398'. [ 766.156810][T23651] netlink: 'syz.3.5400': attribute type 1 has an invalid length. [ 766.254594][T23651] 8021q: adding VLAN 0 to HW filter on device bond4 [ 766.269268][T23651] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5400'. [ 766.416228][T23659] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5403'. [ 766.436708][T23660] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5403'. [ 766.633027][T23663] ipvlan8: entered allmulticast mode [ 766.633070][T23663] macvlan1: entered allmulticast mode [ 766.662033][T23663] batman_adv: batadv0: Adding interface: ipvlan8 [ 766.662075][T23663] batman_adv: batadv0: The MTU of interface ipvlan8 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 766.662134][T23663] batman_adv: batadv0: Interface activated: ipvlan8 [ 766.910299][T23676] netlink: zone id is out of range [ 766.910324][T23676] netlink: zone id is out of range [ 766.910333][T23676] netlink: zone id is out of range [ 766.910341][T23676] netlink: zone id is out of range [ 766.910350][T23676] netlink: zone id is out of range [ 766.910359][T23676] netlink: zone id is out of range [ 766.910367][T23676] netlink: zone id is out of range [ 766.910376][T23676] netlink: zone id is out of range [ 766.910384][T23676] netlink: zone id is out of range [ 766.910393][T23676] netlink: zone id is out of range [ 767.988521][T23712] FAULT_INJECTION: forcing a failure. [ 767.988521][T23712] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 767.988564][T23712] CPU: 0 UID: 0 PID: 23712 Comm: syz.3.5420 Not tainted syzkaller #0 PREEMPT(full) [ 767.988588][T23712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 767.988603][T23712] Call Trace: [ 767.988611][T23712] [ 767.988621][T23712] dump_stack_lvl+0xe8/0x150 [ 767.988656][T23712] should_fail_ex+0x410/0x560 [ 767.988688][T23712] _copy_to_user+0x31/0xb0 [ 767.988720][T23712] simple_read_from_buffer+0xe1/0x170 [ 767.988757][T23712] proc_fail_nth_read+0x1bb/0x230 [ 767.988778][T23712] ? common_file_perm+0x20e/0x2b0 [ 767.988809][T23712] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 767.988835][T23712] ? rw_verify_area+0x24a/0x4c0 [ 767.988868][T23712] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 767.988893][T23712] vfs_read+0x213/0xa80 [ 767.988931][T23712] ? __pfx___mutex_lock+0x10/0x10 [ 767.988963][T23712] ? __pfx_vfs_read+0x10/0x10 [ 767.988997][T23712] ? __fget_files+0x2a/0x420 [ 767.989031][T23712] ? __fget_files+0x3a2/0x420 [ 767.989059][T23712] ? __fget_files+0x2a/0x420 [ 767.989098][T23712] ksys_read+0x150/0x270 [ 767.989133][T23712] ? __pfx_ksys_read+0x10/0x10 [ 767.989176][T23712] do_syscall_64+0x166/0x520 [ 767.989204][T23712] ? trace_irq_disable+0x3b/0x140 [ 767.989226][T23712] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 767.989248][T23712] ? clear_bhb_loop+0x70/0xc0 [ 767.989275][T23712] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 767.989296][T23712] RIP: 0033:0x7f5e7755e98e [ 767.989316][T23712] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 767.989335][T23712] RSP: 002b:00007f5e78457fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 767.989359][T23712] RAX: ffffffffffffffda RBX: 00007f5e784586c0 RCX: 00007f5e7755e98e [ 767.989375][T23712] RDX: 000000000000000f RSI: 00007f5e784580a0 RDI: 0000000000000003 [ 767.989389][T23712] RBP: 00007f5e78458090 R08: 0000000000000000 R09: 0000000000000000 [ 767.989402][T23712] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 767.989414][T23712] R13: 00007f5e77826038 R14: 00007f5e77825fa0 R15: 00007ffdee996878 [ 767.989449][T23712] [ 768.889501][T23729] bond0: left allmulticast mode [ 768.889532][T23729] bond0: left promiscuous mode [ 768.889789][T23729] bridge0: port 1(bond0) entered disabled state [ 768.934225][T23729] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5428'. [ 769.041033][T23734] netlink: 284 bytes leftover after parsing attributes in process `syz.0.5430'. [ 769.384213][T23754] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5435'. [ 770.045030][T23780] netlink: 84 bytes leftover after parsing attributes in process `syz.1.5446'. [ 770.230107][T23781] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5445'. [ 771.249334][T23812] batadv_slave_0: entered allmulticast mode [ 771.323774][T23808] bridge0: port 3(wlan1) entered blocking state [ 771.323944][T23808] bridge0: port 3(wlan1) entered disabled state [ 771.324112][T23808] mac80211_hwsim hwsim88 wlan1: entered allmulticast mode [ 771.440958][T23808] mac80211_hwsim hwsim88 wlan1 (unregistering): left allmulticast mode [ 771.446723][T23808] bridge0: port 3(wlan1) entered disabled state [ 771.654307][T23818] netlink: 'syz.0.5459': attribute type 2 has an invalid length. [ 771.768136][T23823] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5461'. [ 771.800182][T23818] ´: entered promiscuous mode [ 772.489520][T23842] FAULT_INJECTION: forcing a failure. [ 772.489520][T23842] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 772.489556][T23842] CPU: 0 UID: 0 PID: 23842 Comm: syz.0.5469 Not tainted syzkaller #0 PREEMPT(full) [ 772.489580][T23842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 772.489594][T23842] Call Trace: [ 772.489603][T23842] [ 772.489614][T23842] dump_stack_lvl+0xe8/0x150 [ 772.489652][T23842] should_fail_ex+0x410/0x560 [ 772.489687][T23842] _copy_to_user+0x31/0xb0 [ 772.489720][T23842] simple_read_from_buffer+0xe1/0x170 [ 772.489758][T23842] proc_fail_nth_read+0x1bb/0x230 [ 772.489779][T23842] ? common_file_perm+0x20e/0x2b0 [ 772.489810][T23842] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 772.489835][T23842] ? rw_verify_area+0x24a/0x4c0 [ 772.489870][T23842] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 772.489891][T23842] vfs_read+0x213/0xa80 [ 772.489928][T23842] ? __pfx___mutex_lock+0x10/0x10 [ 772.489959][T23842] ? __pfx_vfs_read+0x10/0x10 [ 772.489992][T23842] ? __fget_files+0x2a/0x420 [ 772.490027][T23842] ? __fget_files+0x3a2/0x420 [ 772.490062][T23842] ? __fget_files+0x2a/0x420 [ 772.490102][T23842] ksys_read+0x150/0x270 [ 772.490137][T23842] ? __pfx_ksys_read+0x10/0x10 [ 772.490167][T23842] ? fput+0xa0/0xd0 [ 772.490204][T23842] do_syscall_64+0x166/0x520 [ 772.490233][T23842] ? trace_irq_disable+0x3b/0x140 [ 772.490255][T23842] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 772.490278][T23842] ? clear_bhb_loop+0x70/0xc0 [ 772.490304][T23842] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 772.490325][T23842] RIP: 0033:0x7f12ff35e98e [ 772.490346][T23842] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 772.490365][T23842] RSP: 002b:00007f130018afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 772.490389][T23842] RAX: ffffffffffffffda RBX: 00007f130018b6c0 RCX: 00007f12ff35e98e [ 772.490405][T23842] RDX: 000000000000000f RSI: 00007f130018b0a0 RDI: 0000000000000004 [ 772.490419][T23842] RBP: 00007f130018b090 R08: 0000000000000000 R09: 0000000000000000 [ 772.490432][T23842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 772.490445][T23842] R13: 00007f12ff626128 R14: 00007f12ff626090 R15: 00007ffd1938d198 [ 772.490480][T23842] [ 772.745707][T23845] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5470'. [ 772.922069][T23849] net_ratelimit: 13 callbacks suppressed [ 772.922109][T23849] ip_tables: iptables: counters copy to user failed while replacing table [ 772.987803][T23855] FAULT_INJECTION: forcing a failure. [ 772.987803][T23855] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 772.987836][T23855] CPU: 1 UID: 0 PID: 23855 Comm: syz.0.5472 Not tainted syzkaller #0 PREEMPT(full) [ 772.987857][T23855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 772.987869][T23855] Call Trace: [ 772.987877][T23855] [ 772.987886][T23855] dump_stack_lvl+0xe8/0x150 [ 772.987919][T23855] should_fail_ex+0x410/0x560 [ 772.987946][T23855] _copy_from_user+0x2d/0xb0 [ 772.987974][T23855] __sys_connect+0x155/0x450 [ 772.988011][T23855] ? __pfx___sys_connect+0x10/0x10 [ 772.988045][T23855] ? __pfx_ksys_write+0x10/0x10 [ 772.988083][T23855] __x64_sys_connect+0x7a/0x90 [ 772.988109][T23855] do_syscall_64+0x166/0x520 [ 772.988135][T23855] ? trace_irq_disable+0x3b/0x140 [ 772.988156][T23855] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 772.988176][T23855] ? clear_bhb_loop+0x70/0xc0 [ 772.988201][T23855] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 772.988221][T23855] RIP: 0033:0x7f12ff39e159 [ 772.988239][T23855] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 772.988255][T23855] RSP: 002b:00007f13001ac028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 772.988276][T23855] RAX: ffffffffffffffda RBX: 00007f12ff625fa0 RCX: 00007f12ff39e159 [ 772.988291][T23855] RDX: 000000000000000e RSI: 00002000000000c0 RDI: 0000000000000004 [ 772.988304][T23855] RBP: 00007f13001ac090 R08: 0000000000000000 R09: 0000000000000000 [ 772.988317][T23855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 772.988329][T23855] R13: 00007f12ff626038 R14: 00007f12ff625fa0 R15: 00007ffd1938d198 [ 772.988360][T23855] [ 773.110302][T23860] xt_socket: unknown flags 0x4 [ 773.531993][T23872] ip_tables: iptables: counters copy to user failed while replacing table [ 773.770899][T23877] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 774.074345][T23893] xt_hashlimit: size too large, truncated to 1048576 [ 776.741178][T23877] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 777.035924][T23952] netlink: 176 bytes leftover after parsing attributes in process `syz.2.5504'. [ 777.084306][T23952] syzkaller1: entered promiscuous mode [ 777.084331][T23952] syzkaller1: entered allmulticast mode [ 777.093740][T23953] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 777.117763][T23952] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 777.157355][T23953] netlink: 'syz.1.5502': attribute type 1 has an invalid length. [ 777.214666][T23956] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5502'. [ 777.291918][T23959] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5502'. [ 777.430255][T23953] 8021q: adding VLAN 0 to HW filter on device bond5 [ 777.461212][T23965] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5503'. [ 777.518495][T23960] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5503'. [ 777.631241][T23960] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5503'. [ 777.886815][T23974] netlink: 'syz.4.5510': attribute type 4 has an invalid length. [ 777.946494][T23978] ip_tables: iptables: counters copy to user failed while replacing table [ 778.105939][T23983] IPVS: set_ctl: invalid protocol: 135 172.20.20.61:20001 [ 778.577855][T23998] FAULT_INJECTION: forcing a failure. [ 778.577855][T23998] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 778.577921][T23998] CPU: 1 UID: 0 PID: 23998 Comm: syz.1.5517 Not tainted syzkaller #0 PREEMPT(full) [ 778.577958][T23998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 778.577973][T23998] Call Trace: [ 778.577983][T23998] [ 778.577993][T23998] dump_stack_lvl+0xe8/0x150 [ 778.578032][T23998] should_fail_ex+0x410/0x560 [ 778.578066][T23998] _copy_from_user+0x2d/0xb0 [ 778.578097][T23998] __sys_bpf+0x2e7/0xd90 [ 778.578152][T23998] ? __pfx___sys_bpf+0x10/0x10 [ 778.578177][T23998] ? taprio_dequeue+0x250/0x540 [ 778.578275][T23998] ? sched_clock_cpu+0x74/0x440 [ 778.578319][T23998] ? __irq_exit_rcu+0xcb/0x220 [ 778.578351][T23998] ? handle_softirqs+0x720/0x860 [ 778.578383][T23998] __x64_sys_bpf+0xba/0xd0 [ 778.578408][T23998] do_syscall_64+0x166/0x520 [ 778.578439][T23998] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 778.578461][T23998] ? clear_bhb_loop+0x70/0xc0 [ 778.578489][T23998] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 778.578510][T23998] RIP: 0033:0x7f89a419e159 [ 778.578530][T23998] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 778.578548][T23998] RSP: 002b:00007f89a50cf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 778.578571][T23998] RAX: ffffffffffffffda RBX: 00007f89a4425fa0 RCX: 00007f89a419e159 [ 778.578588][T23998] RDX: 000000000000002d RSI: 00002000002a0fb8 RDI: 0000000000000005 [ 778.578602][T23998] RBP: 00007f89a50cf090 R08: 0000000000000000 R09: 0000000000000000 [ 778.578616][T23998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 778.578629][T23998] R13: 00007f89a4426038 R14: 00007f89a4425fa0 R15: 00007ffe593c1698 [ 778.578663][T23998] [ 779.057397][T24008] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 779.089021][T24008] netlink: 'syz.4.5519': attribute type 1 has an invalid length. [ 779.089042][T24008] netlink: 16150 bytes leftover after parsing attributes in process `syz.4.5519'. [ 779.214716][T24015] netlink: 'syz.1.5520': attribute type 1 has an invalid length. [ 779.416439][T24025] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5524'. [ 779.418157][T24015] 8021q: adding VLAN 0 to HW filter on device bond7 [ 779.464901][T24030] netlink: zone id is out of range [ 779.464938][T24030] netlink: zone id is out of range [ 779.464966][T24030] netlink: zone id is out of range [ 779.464989][T24030] netlink: zone id is out of range [ 779.465033][T24030] netlink: zone id is out of range [ 779.465043][T24030] netlink: zone id is out of range [ 779.465073][T24030] netlink: zone id is out of range [ 779.465102][T24030] netlink: zone id is out of range [ 779.516144][T24029] lo: left promiscuous mode [ 779.516292][T24029] tunl0: left promiscuous mode [ 779.516430][T24029] v: left promiscuous mode [ 779.516445][T24029] v: left allmulticast mode [ 779.516533][T24029] gretap0: left promiscuous mode [ 779.516625][T24029] erspan0: left promiscuous mode [ 779.516715][T24029] ip_vti0: left promiscuous mode [ 779.516843][T24029] ip6_vti0: left promiscuous mode [ 779.516926][T24029] sit0: left promiscuous mode [ 779.517015][T24029] ip6tnl0: left promiscuous mode [ 779.517098][T24029] ip6gre0: left promiscuous mode [ 779.517182][T24029] syz_tun: left promiscuous mode [ 779.517290][T24029] ip6gretap0: left promiscuous mode [ 779.517647][T24029] bridge0: port 2(macvlan5) entered disabled state [ 779.520451][T24029] vcan0: left promiscuous mode [ 779.520607][T24029] bond0: left promiscuous mode [ 779.520701][T24029] team0: left promiscuous mode [ 779.520818][T24029] dummy0: left promiscuous mode [ 779.520936][T24029] nlmon0: left promiscuous mode [ 779.521050][T24029] batadv0: left promiscuous mode [ 779.521161][T24029] vxcan0: left promiscuous mode [ 779.521300][T24029] vxcan1: left promiscuous mode [ 779.521450][T24029] veth0: left promiscuous mode [ 779.521596][T24029] veth1: left promiscuous mode [ 779.521752][T24029] wg0: left promiscuous mode [ 779.522035][T24033] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5526'. [ 779.522434][T24029] wg1: left promiscuous mode [ 779.523867][T24029] wg2: left promiscuous mode [ 779.524027][T24029] veth0_to_bridge: left promiscuous mode [ 779.524150][T24029] bridge_slave_0: left promiscuous mode [ 779.524266][T24029] veth1_to_bridge: left promiscuous mode [ 779.524415][T24029] bridge_slave_1: left promiscuous mode [ 779.524653][T24029] veth0_to_bond: left promiscuous mode [ 779.524773][T24029] bond_slave_0: left promiscuous mode [ 779.524898][T24029] veth1_to_bond: left promiscuous mode [ 779.525033][T24029] bond_slave_1: left promiscuous mode [ 779.525178][T24029] veth0_to_team: left promiscuous mode [ 779.525295][T24029] team_slave_0: left promiscuous mode [ 779.525436][T24029] veth1_to_team: left promiscuous mode [ 779.525582][T24029] team_slave_1: left promiscuous mode [ 779.525726][T24029] veth0_to_batadv: left promiscuous mode [ 779.525853][T24029] batadv_slave_0: left promiscuous mode [ 779.525972][T24029] veth1_to_batadv: left promiscuous mode [ 779.526131][T24029] batadv_slave_1: left promiscuous mode [ 779.526278][T24029] xfrm0: left promiscuous mode [ 779.526395][T24029] veth0_to_hsr: left promiscuous mode [ 779.526645][T24029] veth1_to_hsr: left promiscuous mode [ 779.526902][T24029] hsr0: left promiscuous mode [ 779.527013][T24029] veth1_virt_wifi: left promiscuous mode [ 779.527127][T24029] veth0_virt_wifi: left promiscuous mode [ 779.527263][T24029] virt_wifi0: left promiscuous mode [ 779.527593][T24029] vlan0: left promiscuous mode [ 779.592341][T24029] vlan1: left promiscuous mode [ 779.592989][T24029] macvlan0: left promiscuous mode [ 779.593288][T24029] macvlan1: left promiscuous mode [ 779.593617][T24029] ipvlan0: left promiscuous mode [ 779.593912][T24029] ipvlan1: left promiscuous mode [ 779.594782][T24029] macvtap0: left promiscuous mode [ 779.595084][T24029] macsec0: left promiscuous mode [ 779.595543][T24029] geneve1: left promiscuous mode [ 779.595841][T24029] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 779.596070][T24029] netdevsim netdevsim2 netdevsim1: left promiscuous mode [ 779.654850][T24029] netdevsim netdevsim2 netdevsim2: left promiscuous mode [ 779.655132][T24029] netdevsim netdevsim2 netdevsim3: left promiscuous mode [ 779.655398][T24029] mac80211_hwsim hwsim87 wlan0: left promiscuous mode [ 779.655733][T24029] ip6erspan0: left promiscuous mode [ 779.655957][T24029] macvlan2: left promiscuous mode [ 779.656315][T24029] macvlan3: left promiscuous mode [ 779.657063][T24029] macvlan4: left promiscuous mode [ 779.657443][T24029] bond1: left promiscuous mode [ 779.657771][T24029] vxlan0: left promiscuous mode [ 779.658093][T24029] mac80211_hwsim hwsim90 wlan2: left promiscuous mode [ 779.658493][T24029] bond2: left promiscuous mode [ 779.658816][T24029] vrf0: left promiscuous mode [ 779.659217][T24029] vrf1: left promiscuous mode [ 779.659580][T24029] vrf2: left promiscuous mode [ 779.659967][T24029] gtp0: left promiscuous mode [ 779.660332][T24029] gtp1: left promiscuous mode [ 779.661048][T24029] bridge1: left promiscuous mode [ 779.661389][T24029] gretap1: left promiscuous mode [ 779.661703][T24029] vrf3: left promiscuous mode [ 779.662081][T24029] vrf4: left promiscuous mode [ 779.662475][T24029] vrf5: left promiscuous mode [ 779.662819][T24029] gtp2: left promiscuous mode [ 779.714098][T24029] batman_adv: batadv0: Interface deactivated: macvlan6 [ 779.900601][T24029] batman_adv: batadv0: Interface deactivated: gretap2 [ 780.004314][T24029] batman_adv: batadv0: Interface deactivated: macvlan7 [ 780.721594][T24058] netlink: 'syz.0.5536': attribute type 1 has an invalid length. [ 780.722611][T24058] netlink: 756 bytes leftover after parsing attributes in process `syz.0.5536'. [ 781.287215][T24083] netlink: 'syz.1.5545': attribute type 4 has an invalid length. [ 781.389290][T24082] ipvlan6: entered allmulticast mode [ 781.389362][T24082] syz_tun: entered allmulticast mode [ 782.504173][T24114] FAULT_INJECTION: forcing a failure. [ 782.504173][T24114] name failslab, interval 1, probability 0, space 0, times 0 [ 782.504208][T24114] CPU: 0 UID: 0 PID: 24114 Comm: syz.2.5558 Not tainted syzkaller #0 PREEMPT(full) [ 782.504231][T24114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 782.504244][T24114] Call Trace: [ 782.504253][T24114] [ 782.504262][T24114] dump_stack_lvl+0xe8/0x150 [ 782.504299][T24114] should_fail_ex+0x410/0x560 [ 782.504329][T24114] should_failslab+0xa8/0x100 [ 782.504359][T24114] __kmalloc_cache_node_noprof+0xaa/0x620 [ 782.504388][T24114] ? __get_vm_area_node+0x155/0x2f0 [ 782.504416][T24114] ? __get_vm_area_node+0x155/0x2f0 [ 782.504452][T24114] __get_vm_area_node+0x155/0x2f0 [ 782.504488][T24114] __vmalloc_node_range_noprof+0x343/0x1540 [ 782.504530][T24114] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 782.504556][T24114] ? __lock_acquire+0x747/0x2de0 [ 782.504606][T24114] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 782.504649][T24114] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 782.504671][T24114] __vmalloc_noprof+0xd2/0x120 [ 782.504704][T24114] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 782.504732][T24114] bpf_prog_alloc_no_stats+0x47/0x560 [ 782.504757][T24114] ? bpf_prog_alloc+0x2a/0x1a0 [ 782.504782][T24114] bpf_prog_alloc+0x3c/0x1a0 [ 782.504811][T24114] bpf_prog_load+0x7f8/0x1c20 [ 782.504848][T24114] ? __pfx_bpf_prog_load+0x10/0x10 [ 782.504898][T24114] __sys_bpf+0xd0d/0xd90 [ 782.504931][T24114] ? __pfx___sys_bpf+0x10/0x10 [ 782.504966][T24114] ? __fget_files+0x2a/0x420 [ 782.505012][T24114] ? ksys_write+0x242/0x270 [ 782.505048][T24114] ? __pfx_ksys_write+0x10/0x10 [ 782.505084][T24114] __x64_sys_bpf+0xba/0xd0 [ 782.505109][T24114] do_syscall_64+0x166/0x520 [ 782.505140][T24114] ? trace_irq_disable+0x3b/0x140 [ 782.505162][T24114] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 782.505184][T24114] ? clear_bhb_loop+0x70/0xc0 [ 782.505211][T24114] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 782.505232][T24114] RIP: 0033:0x7f041c59e159 [ 782.505252][T24114] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 782.505270][T24114] RSP: 002b:00007f041d4d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 782.505293][T24114] RAX: ffffffffffffffda RBX: 00007f041c825fa0 RCX: 00007f041c59e159 [ 782.505309][T24114] RDX: 000000000000002d RSI: 00002000002a0fb8 RDI: 0000000000000005 [ 782.505323][T24114] RBP: 00007f041d4d6090 R08: 0000000000000000 R09: 0000000000000000 [ 782.505337][T24114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 782.505349][T24114] R13: 00007f041c826038 R14: 00007f041c825fa0 R15: 00007ffd0be3fe18 [ 782.505382][T24114] [ 782.571031][T24114] syz.2.5558: vmalloc error: size 4096, align 0x1, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 782.571213][T24114] CPU: 1 UID: 0 PID: 24114 Comm: syz.2.5558 Not tainted syzkaller #0 PREEMPT(full) [ 782.571271][T24114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 782.571301][T24114] Call Trace: [ 782.571328][T24114] [ 782.571348][T24114] dump_stack_lvl+0xe8/0x150 [ 782.571460][T24114] warn_alloc+0x24d/0x270 [ 782.571508][T24114] ? __kasan_kmalloc+0x22/0xb0 [ 782.571596][T24114] ? __pfx_warn_alloc+0x10/0x10 [ 782.571648][T24114] ? __get_vm_area_node+0x155/0x2f0 [ 782.571753][T24114] ? __get_vm_area_node+0x2a9/0x2f0 [ 782.571857][T24114] __vmalloc_node_range_noprof+0x36b/0x1540 [ 782.571947][T24114] ? __lock_acquire+0x747/0x2de0 [ 782.572082][T24114] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 782.572143][T24114] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 782.572168][T24114] __vmalloc_noprof+0xd2/0x120 [ 782.572201][T24114] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 782.572230][T24114] bpf_prog_alloc_no_stats+0x47/0x560 [ 782.572256][T24114] ? bpf_prog_alloc+0x2a/0x1a0 [ 782.572284][T24114] bpf_prog_alloc+0x3c/0x1a0 [ 782.572314][T24114] bpf_prog_load+0x7f8/0x1c20 [ 782.572363][T24114] ? __pfx_bpf_prog_load+0x10/0x10 [ 782.572529][T24114] __sys_bpf+0xd0d/0xd90 [ 782.572632][T24114] ? __pfx___sys_bpf+0x10/0x10 [ 782.572740][T24114] ? __fget_files+0x2a/0x420 [ 782.572857][T24114] ? ksys_write+0x242/0x270 [ 782.572941][T24114] ? __pfx_ksys_write+0x10/0x10 [ 782.573030][T24114] __x64_sys_bpf+0xba/0xd0 [ 782.573087][T24114] do_syscall_64+0x166/0x520 [ 782.573154][T24114] ? trace_irq_disable+0x3b/0x140 [ 782.573209][T24114] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 782.573265][T24114] ? clear_bhb_loop+0x70/0xc0 [ 782.573331][T24114] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 782.573374][T24114] RIP: 0033:0x7f041c59e159 [ 782.573427][T24114] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 782.573466][T24114] RSP: 002b:00007f041d4d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 782.573514][T24114] RAX: ffffffffffffffda RBX: 00007f041c825fa0 RCX: 00007f041c59e159 [ 782.573533][T24114] RDX: 000000000000002d RSI: 00002000002a0fb8 RDI: 0000000000000005 [ 782.573563][T24114] RBP: 00007f041d4d6090 R08: 0000000000000000 R09: 0000000000000000 [ 782.573599][T24114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 782.573648][T24114] R13: 00007f041c826038 R14: 00007f041c825fa0 R15: 00007ffd0be3fe18 [ 782.573704][T24114] [ 782.573725][T24114] Mem-Info: [ 782.573755][T24114] active_anon:10831 inactive_anon:0 isolated_anon:0 [ 782.573755][T24114] active_file:2 inactive_file:48690 isolated_file:0 [ 782.573755][T24114] unevictable:0 dirty:259 writeback:0 [ 782.573755][T24114] slab_reclaimable:12112 slab_unreclaimable:112017 [ 782.573755][T24114] mapped:34638 shmem:5541 pagetables:1353 [ 782.573755][T24114] sec_pagetables:0 bounce:0 [ 782.573755][T24114] kernel_misc_reclaimable:0 [ 782.573755][T24114] free:1246264 free_pcp:8657 free_cma:0 [ 782.573922][T24114] Node 0 active_anon:43324kB inactive_anon:0kB active_file:8kB inactive_file:194564kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:138552kB dirty:1036kB writeback:0kB shmem:22164kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15432kB pagetables:5248kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 782.574074][T24114] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 782.574205][T24114] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 782.574352][T24114] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 782.574452][T24114] Node 0 DMA32 free:1023636kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:43324kB inactive_anon:0kB active_file:8kB inactive_file:194564kB unevictable:0kB writepending:1036kB zspages:0kB present:3129332kB managed:2546852kB mlocked:0kB bounce:0kB free_pcp:34628kB local_pcp:18548kB free_cma:0kB [ 782.574596][T24114] lowmem_reserve[]: 0 0 0 0 0 [ 782.574681][T24114] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 782.574833][T24114] lowmem_reserve[]: 0 0 0 0 0 [ 782.654562][T24114] Node 1 Normal free:3946060kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 782.654717][T24114] lowmem_reserve[]: 0 0 0 0 0 [ 782.654817][T24114] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 782.655161][T24114] Node 0 DMA32: 1*4kB (E) 707*8kB (UM) 1859*16kB (UE) 445*32kB (U) 612*64kB (UME) 231*128kB (UE) 73*256kB (UE) 27*512kB (U) 18*1024kB (UE) 13*2048kB (UME) 202*4096kB (UM) = 1023340kB [ 782.655583][T24114] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 782.655827][T24114] Node 1 Normal: 1*4kB (M) 3*8kB (UM) 5*16kB (UM) 11*32kB (UM) 8*64kB (UM) 7*128kB (UM) 3*256kB (UM) 6*512kB (UM) 4*1024kB (UM) 0*2048kB 961*4096kB (UM) = 3946060kB [ 782.656277][T24114] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 782.656355][T24114] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 782.656399][T24114] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 782.656459][T24114] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 782.656489][T24114] 54304 total pagecache pages [ 782.656521][T24114] 0 pages in swap cache [ 782.656548][T24114] Free swap = 124996kB [ 782.656577][T24114] Total swap = 124996kB [ 782.656593][T24114] 2097051 pages RAM [ 782.656621][T24114] 0 pages HighMem/MovableOnly [ 782.656643][T24114] 428722 pages reserved [ 782.656672][T24114] 0 pages cma reserved [ 782.877356][T24109] syzkaller0: entered promiscuous mode [ 782.877417][T24109] syzkaller0: entered allmulticast mode [ 782.880269][T24117] __nla_validate_parse: 2 callbacks suppressed [ 782.880316][T24117] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5559'. [ 783.481989][T24117] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 783.508016][T24117] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 784.628807][T24161] net_ratelimit: 502 callbacks suppressed [ 784.628835][T24161] ip_tables: iptables: counters copy to user failed while replacing table [ 784.665832][T24162] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5576'. [ 784.701905][T24164] v: entered allmulticast mode [ 784.702076][T24164] A link change request failed with some changes committed already. Interface v may have been left with an inconsistent configuration, please check. [ 785.167883][T24180] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5584'. [ 785.300270][T24186] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5587'. [ 785.337932][T24186] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5587'. [ 785.515935][T24194] netlink: 'syz.4.5590': attribute type 39 has an invalid length. [ 786.137241][T24218] xt_hashlimit: size too large, truncated to 1048576 [ 786.584412][T24235] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5604'. [ 786.586887][T24235] netlink: 284 bytes leftover after parsing attributes in process `syz.0.5604'. [ 786.869056][T24245] netlink: 'syz.0.5608': attribute type 1 has an invalid length. [ 787.251404][T24256] openvswitch: netlink: Flow actions attr not present in new flow. [ 787.269234][T24254] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5611'. [ 787.508968][T24263] syzkaller0: left promiscuous mode [ 787.509036][T24263] syzkaller0: left allmulticast mode [ 787.516076][T24263] netlink: 'syz.1.5613': attribute type 9 has an invalid length. [ 787.921334][T24276] netlink: 'syz.2.5620': attribute type 1 has an invalid length. [ 787.987471][T24276] 8021q: adding VLAN 0 to HW filter on device bond5 [ 788.245961][T24290] netlink: 'syz.0.5623': attribute type 1 has an invalid length. [ 788.283110][T24292] netlink: 'syz.4.5621': attribute type 1 has an invalid length. [ 788.283134][T24292] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5621'. [ 788.414001][T24290] bond13: entered promiscuous mode [ 788.415814][T24290] 8021q: adding VLAN 0 to HW filter on device bond13 [ 788.470673][T24291] wg2 speed is unknown, defaulting to 1000 [ 788.470764][T24291] wg2 speed is unknown, defaulting to 1000 [ 788.471595][T24291] wg2 speed is unknown, defaulting to 1000 [ 788.558410][T24291] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 788.558497][T24291] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 788.558566][T24291] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 788.641520][T24299] ipvlan18: entered allmulticast mode [ 788.641544][T24299] bond13: entered allmulticast mode [ 788.697074][T24291] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 788.716462][T24290] ipvlan19: entered allmulticast mode [ 788.725654][T24308] netlink: NAT attribute has 8 unknown bytes [ 788.725687][T24308] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 788.762496][T24290] bond13: (slave bridge13): making interface the new active one [ 788.762526][T24290] bridge13: entered promiscuous mode [ 788.762723][T24290] bridge13: entered allmulticast mode [ 788.764972][T24290] bond13: (slave bridge13): Enslaving as an active interface with an up link [ 788.768108][T24308] sctp: [Deprecated]: syz.1.5627 (pid 24308) Use of struct sctp_assoc_value in delayed_ack socket option. [ 788.768108][T24308] Use struct sctp_sack_info instead [ 789.063446][T24291] wg2 speed is unknown, defaulting to 1000 [ 789.067135][T24311] syzkaller0: mtu less than device minimum [ 789.088807][T24291] wg2 speed is unknown, defaulting to 1000 [ 789.108804][T24291] wg2 speed is unknown, defaulting to 1000 [ 789.114121][T24291] wg2 speed is unknown, defaulting to 1000 [ 789.116818][T24312] netlink: 'syz.1.5627': attribute type 1 has an invalid length. [ 789.142435][T24291] wg2 speed is unknown, defaulting to 1000 [ 789.144484][T24291] wg2 speed is unknown, defaulting to 1000 [ 789.294382][T24316] netlink: 316 bytes leftover after parsing attributes in process `syz.0.5628'. [ 789.294413][T24316] netlink: 316 bytes leftover after parsing attributes in process `syz.0.5628'. [ 789.851562][T24339] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5635'. [ 789.854653][T24339] 8021q: adding VLAN 0 to HW filter on device bond0 [ 790.141175][T20814] Bluetooth: hci1: command 0x0406 tx timeout [ 790.285725][T24350] syzkaller1: entered promiscuous mode [ 790.285788][T24350] syzkaller1: entered allmulticast mode [ 790.799478][T24361] nbd: socks must be embedded in a SOCK_ITEM attr [ 790.834660][T24361] netlink: 84 bytes leftover after parsing attributes in process `syz.3.5643'. [ 791.050438][T24387] netlink: 84 bytes leftover after parsing attributes in process `syz.2.5651'. [ 791.194822][T24389] xt_hashlimit: size too large, truncated to 1048576 [ 791.388676][T24394] wg2 speed is unknown, defaulting to 1000 [ 791.703399][T24403] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5656'. [ 791.812785][T24409] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5656'. [ 792.594593][T24441] block nbd2: NBD_DISCONNECT [ 792.594728][T24441] block nbd2: Send disconnect failed -32 [ 792.594749][T24441] block nbd2: shutting down sockets [ 792.643650][T24440] nbd2: detected capacity change from 0 to 63 [ 792.648958][ T5624] block nbd2: Receive control failed (result -32) [ 792.673035][ T1721] block nbd2: Dead connection, failed to find a fallback [ 792.673104][ T1721] block nbd2: shutting down sockets [ 792.673260][ T1721] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 792.673397][ T1721] Buffer I/O error on dev nbd2, logical block 0, async page read [ 792.674384][ T1721] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 792.674446][ T1721] Buffer I/O error on dev nbd2, logical block 1, async page read [ 792.674645][ T1721] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 792.674706][ T1721] Buffer I/O error on dev nbd2, logical block 2, async page read [ 792.675067][ T1721] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 792.675136][ T1721] Buffer I/O error on dev nbd2, logical block 3, async page read [ 792.675401][ T1721] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 792.675463][ T1721] Buffer I/O error on dev nbd2, logical block 0, async page read [ 792.675697][ T1721] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 792.675759][ T1721] Buffer I/O error on dev nbd2, logical block 1, async page read [ 792.675990][ T1721] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 792.676068][ T1721] Buffer I/O error on dev nbd2, logical block 2, async page read [ 792.682604][ T1721] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 792.682713][ T1721] Buffer I/O error on dev nbd2, logical block 3, async page read [ 792.713546][ T1721] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 792.713583][ T1721] Buffer I/O error on dev nbd2, logical block 0, async page read [ 792.713604][ T1721] Buffer I/O error on dev nbd2, logical block 1, async page read [ 792.719354][ T1721] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 792.728367][T21374] ldm_validate_partition_table(): Disk read failed. [ 792.730501][T21374] Dev nbd2: unable to read RDB block 0 [ 792.731911][T21374] nbd2: unable to read partition table [ 792.860117][T21374] ldm_validate_partition_table(): Disk read failed. [ 792.873723][T21374] Dev nbd2: unable to read RDB block 0 [ 792.877234][T21374] nbd2: unable to read partition table [ 793.308126][T24455] batman_adv: batadv0: Adding interface: macvlan6 [ 793.308147][T24455] batman_adv: batadv0: The MTU of interface macvlan6 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 793.308179][T24455] batman_adv: batadv0: Interface activated: macvlan6 [ 793.698487][T24468] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5673'. [ 793.882386][T24477] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5673'. [ 794.258572][T24481] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5676'. [ 794.365913][ T1118] batman_adv: batadv0: Removing interface: gretap4 [ 794.411820][ T1118] batman_adv: batadv0: Removing interface: gretap3 [ 794.472203][ T1118] batman_adv: batadv0: Removing interface: gretap1 [ 794.585511][ T1118] batman_adv: batadv0: Removing interface: macvlan2 [ 794.654182][ T1118] bond6 (unregistering): (slave bridge1): Releasing backup interface [ 794.654220][ T1118] bridge1 (unregistering): left allmulticast mode [ 794.680915][ T1118] bond1 (unregistering): Released all slaves [ 794.704672][ T1118] bond2 (unregistering): Released all slaves [ 794.730306][ T1118] bond3 (unregistering): Released all slaves [ 794.767967][ T1118] bond4 (unregistering): Released all slaves [ 794.831916][ T1118] bond5 (unregistering): Released all slaves [ 794.914871][ T1118] bond6 (unregistering): Released all slaves [ 794.974073][ T1118] bond7 (unregistering): Released all slaves [ 795.010963][ T1118] bond8 (unregistering): (slave veth3): Releasing active interface [ 795.013870][ T1118] bond8 (unregistering): Released all slaves [ 795.071597][T24503] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5682'. [ 795.488161][ T1118] tipc: Disabling bearer [ 795.528753][ T1118] tipc: Left network mode [ 796.505582][T24533] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5694'. [ 796.601202][T24535] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5694'. [ 797.244336][T24551] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5701'. [ 797.280174][ T1118] batman_adv: batadv0: Removing interface: macvtap1 [ 798.034548][T24560] netlink: 15 bytes leftover after parsing attributes in process `syz.3.5704'. [ 798.445326][T24581] FAULT_INJECTION: forcing a failure. [ 798.445326][T24581] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 798.445364][T24581] CPU: 0 UID: 0 PID: 24581 Comm: syz.3.5707 Not tainted syzkaller #0 PREEMPT(full) [ 798.445392][T24581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 798.445406][T24581] Call Trace: [ 798.445415][T24581] [ 798.445426][T24581] dump_stack_lvl+0xe8/0x150 [ 798.445465][T24581] should_fail_ex+0x410/0x560 [ 798.445498][T24581] _copy_from_user+0x2d/0xb0 [ 798.445530][T24581] __sys_bpf+0x2e7/0xd90 [ 798.445567][T24581] ? __pfx___sys_bpf+0x10/0x10 [ 798.445606][T24581] ? __fget_files+0x2a/0x420 [ 798.445658][T24581] ? ksys_write+0x242/0x270 [ 798.445695][T24581] ? __pfx_ksys_write+0x10/0x10 [ 798.445734][T24581] __x64_sys_bpf+0xba/0xd0 [ 798.445762][T24581] do_syscall_64+0x166/0x520 [ 798.445796][T24581] ? trace_irq_disable+0x3b/0x140 [ 798.445820][T24581] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 798.445845][T24581] ? clear_bhb_loop+0x70/0xc0 [ 798.445879][T24581] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 798.445903][T24581] RIP: 0033:0x7f5e7759e159 [ 798.445924][T24581] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 798.445945][T24581] RSP: 002b:00007f5e78458028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 798.445970][T24581] RAX: ffffffffffffffda RBX: 00007f5e77825fa0 RCX: 00007f5e7759e159 [ 798.445988][T24581] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 798.446004][T24581] RBP: 00007f5e78458090 R08: 0000000000000000 R09: 0000000000000000 [ 798.446018][T24581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 798.446032][T24581] R13: 00007f5e77826038 R14: 00007f5e77825fa0 R15: 00007ffdee996878 [ 798.446068][T24581] [ 798.657997][T24583] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5708'. [ 798.658969][T24583] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5708'. [ 799.062978][ T1118] IPVS: stop unused estimator thread 0... [ 799.173683][T24595] netlink: 'syz.4.5710': attribute type 1 has an invalid length. [ 799.348151][T20814] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 799.368280][T20814] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 799.371488][T20814] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 799.376111][T20814] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 799.377493][T20814] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 799.439342][ T5624] [ 799.441735][ T5624] ====================================================== [ 799.448786][ T5624] WARNING: possible circular locking dependency detected [ 799.455844][ T5624] syzkaller #0 Not tainted [ 799.460293][ T5624] ------------------------------------------------------ [ 799.467359][ T5624] kworker/u9:3/5624 is trying to acquire lock: [ 799.473539][ T5624] ffff88801c2d4a10 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_link_sibling+0x4c7/0x5a0 [ 799.477323][T24595] bond8: entered promiscuous mode SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 799.484032][T24595] 8021q: adding VLAN 0 to HW filter on device bond8 [ 799.495663][ T5624] [ 799.495663][ T5624] but task is already holding lock: [ 799.503146][ T5624] ffff88801c2d4980 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x41/0x6f0 [ 799.512600][ T5624] [ 799.512600][ T5624] which lock already depends on the new lock. [ 799.512600][ T5624] [ 799.523054][ T5624] [ 799.523054][ T5624] the existing dependency chain (in reverse order) is: [ 799.532110][ T5624] [ 799.532110][ T5624] -> #9 (&root->kernfs_rwsem){++++}-{4:4}: [ 799.540153][ T5624] down_write+0x96/0x200 [ 799.544979][ T5624] kernfs_add_one+0x41/0x6f0 [ 799.550130][ T5624] kernfs_create_dir_ns+0x1a1/0x230 [ 799.555904][ T5624] internal_create_group+0x440/0x1180 [ 799.561832][ T5624] cpuhp_invoke_callback+0x434/0x810 [ 799.567687][ T5624] cpuhp_issue_call+0x3f0/0x750 [ 799.573117][ T5624] __cpuhp_setup_state_cpuslocked+0x3f4/0x6f0 [ 799.579765][ T5624] __cpuhp_setup_state+0x3f/0x60 [ 799.585278][ T5624] do_one_initcall+0x250/0x870 [ 799.590618][ T5624] do_initcall_level+0x10a/0x1a0 [ 799.596187][ T5624] do_initcalls+0x59/0xa0 [ 799.601085][ T5624] kernel_init_freeable+0x29d/0x3e0 [ 799.606849][ T5624] kernel_init+0x22/0x1d0 [ 799.611739][ T5624] ret_from_fork+0x514/0xb70 [ 799.616892][ T5624] ret_from_fork_asm+0x1a/0x30 [ 799.622221][ T5624] [ 799.622221][ T5624] -> #8 (cpuhp_state_mutex){+.+.}-{4:4}: [ 799.630084][ T5624] [ 799.630084][ T5624] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 799.637862][ T5624] cpus_read_lock+0x42/0x160 [ 799.643021][ T5624] static_key_slow_inc+0x12/0x30 [ 799.648546][ T5624] nbd_genl_reconnect_sock_cb+0x69a/0xbb0 [ 799.654903][ T5624] nbd_genl_foreach_sock+0x265/0x450 [ 799.660751][ T5624] nbd_genl_reconfigure+0xbbb/0x1040 [ 799.666604][ T5624] genl_family_rcv_msg_doit+0x233/0x340 [ 799.672714][ T5624] genl_rcv_msg+0x614/0x7a0 [ 799.677785][ T5624] netlink_rcv_skb+0x226/0x4a0 [ 799.683123][ T5624] genl_rcv+0x28/0x40 [ 799.687664][ T5624] netlink_unicast+0x7bd/0x940 [ 799.692998][ T5624] netlink_sendmsg+0x813/0xb40 [ 799.698314][ T5624] sock_sendmsg_nosec+0x13a/0x180 [ 799.703904][ T5624] ____sys_sendmsg+0x54e/0x850 [ 799.709241][ T5624] ___sys_sendmsg+0x2a5/0x360 [ 799.714499][ T5624] __x64_sys_sendmsg+0x1b1/0x290 [ 799.720016][ T5624] do_syscall_64+0x166/0x520 [ 799.725187][ T5624] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 799.731642][ T5624] [ 799.731642][ T5624] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 799.739333][ T5624] __mutex_lock+0x19d/0x1550 [ 799.744496][ T5624] nbd_queue_rq+0x373/0xff0 [ 799.749561][ T5624] blk_mq_dispatch_rq_list+0x499/0x1990 [ 799.755761][ T5624] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 799.762740][ T5624] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 799.769285][ T5624] blk_mq_run_work_fn+0x16c/0x300 [ 799.774886][ T5624] process_scheduled_works+0xc3d/0x1630 [ 799.780983][ T5624] worker_thread+0xa47/0xfb0 [ 799.786124][ T5624] kthread+0x38b/0x480 [ 799.790741][ T5624] ret_from_fork+0x514/0xb70 [ 799.795876][ T5624] ret_from_fork_asm+0x1a/0x30 [ 799.801236][ T5624] [ 799.801236][ T5624] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 799.808489][ T5624] __mutex_lock+0x19d/0x1550 [ 799.813658][ T5624] nbd_queue_rq+0xc1/0xff0 [ 799.818634][ T5624] blk_mq_dispatch_rq_list+0x499/0x1990 [ 799.824744][ T5624] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 799.831627][ T5624] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 799.838146][ T5624] blk_mq_run_work_fn+0x16c/0x300 [ 799.843708][ T5624] process_scheduled_works+0xc3d/0x1630 [ 799.849794][ T5624] worker_thread+0xa47/0xfb0 [ 799.854937][ T5624] kthread+0x38b/0x480 [ 799.859535][ T5624] ret_from_fork+0x514/0xb70 [ 799.864654][ T5624] ret_from_fork_asm+0x1a/0x30 [ 799.869964][ T5624] [ 799.869964][ T5624] -> #4 (set->srcu){.+.+}-{0:0}: [ 799.877103][ T5624] __synchronize_srcu+0xc9/0x2f0 [ 799.882584][ T5624] elevator_switch+0x1e8/0x7b0 [ 799.887957][ T5624] elevator_change+0x2fa/0x480 [ 799.893264][ T5624] elevator_set_default+0x375/0x440 [ 799.899003][ T5624] blk_register_queue+0x3f3/0x4e0 [ 799.904645][ T5624] __add_disk+0x6b8/0xdb0 [ 799.909543][ T5624] add_disk_fwnode+0x100/0x3a0 [ 799.914847][ T5624] nbd_dev_add+0x733/0xb60 [ 799.919796][ T5624] nbd_init+0x168/0x1f0 [ 799.924591][ T5624] do_one_initcall+0x250/0x870 [ 799.929907][ T5624] do_initcall_level+0x10a/0x1a0 [ 799.935387][ T5624] do_initcalls+0x59/0xa0 [ 799.940253][ T5624] kernel_init_freeable+0x29d/0x3e0 [ 799.945984][ T5624] kernel_init+0x22/0x1d0 [ 799.950848][ T5624] ret_from_fork+0x514/0xb70 [ 799.955975][ T5624] ret_from_fork_asm+0x1a/0x30 [ 799.961288][ T5624] [ 799.961288][ T5624] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 799.969124][ T5624] __mutex_lock+0x19d/0x1550 [ 799.974248][ T5624] elevator_change+0x1af/0x480 [ 799.979546][ T5624] elevator_set_none+0xb5/0x140 [ 799.984933][ T5624] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 799.991274][ T5624] nbd_start_device+0x189/0xb30 [ 799.996653][ T5624] nbd_genl_connect+0x167d/0x1cd0 [ 800.002227][ T5624] genl_family_rcv_msg_doit+0x233/0x340 [ 800.008324][ T5624] genl_rcv_msg+0x614/0x7a0 [ 800.013384][ T5624] netlink_rcv_skb+0x226/0x4a0 [ 800.018695][ T5624] genl_rcv+0x28/0x40 [ 800.023217][ T5624] netlink_unicast+0x7bd/0x940 [ 800.028531][ T5624] netlink_sendmsg+0x813/0xb40 [ 800.033832][ T5624] sock_sendmsg_nosec+0x13a/0x180 [ 800.039384][ T5624] ____sys_sendmsg+0x54e/0x850 [ 800.044687][ T5624] ___sys_sendmsg+0x2a5/0x360 [ 800.049901][ T5624] __x64_sys_sendmsg+0x1b1/0x290 [ 800.055375][ T5624] do_syscall_64+0x166/0x520 [ 800.060501][ T5624] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 800.066953][ T5624] [ 800.066953][ T5624] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 800.075568][ T5624] blk_alloc_queue+0x544/0x690 [ 800.080867][ T5624] __blk_mq_alloc_disk+0x194/0x390 [ 800.086511][ T5624] nbd_dev_add+0x494/0xb60 [ 800.091513][ T5624] nbd_init+0x168/0x1f0 [ 800.096214][ T5624] do_one_initcall+0x250/0x870 [ 800.101527][ T5624] do_initcall_level+0x10a/0x1a0 [ 800.107008][ T5624] do_initcalls+0x59/0xa0 [ 800.111885][ T5624] kernel_init_freeable+0x29d/0x3e0 [ 800.117630][ T5624] kernel_init+0x22/0x1d0 [ 800.122521][ T5624] ret_from_fork+0x514/0xb70 [ 800.127664][ T5624] ret_from_fork_asm+0x1a/0x30 [ 800.132984][ T5624] [ 800.132984][ T5624] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 800.140212][ T5624] fs_reclaim_acquire+0x71/0x100 [ 800.145698][ T5624] kmem_cache_alloc_noprof+0x5f/0x600 [ 800.151619][ T5624] __kernfs_iattrs+0xdd/0x380 [ 800.156843][ T5624] kernfs_iop_setattr+0xe6/0x3f0 [ 800.162332][ T5624] notify_change+0xbba/0xea0 [ 800.167459][ T5624] do_truncate+0x1c2/0x250 [ 800.172409][ T5624] path_openat+0x15b5/0x1d60 [ 800.177536][ T5624] do_file_open+0x23e/0x4a0 [ 800.182606][ T5624] do_sys_openat2+0x115/0x200 [ 800.187817][ T5624] __x64_sys_openat+0x138/0x170 [ 800.193216][ T5624] do_syscall_64+0x166/0x520 [ 800.198343][ T5624] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 800.204775][ T5624] [ 800.204775][ T5624] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 800.213314][ T5624] __lock_acquire+0x164c/0x2de0 [ 800.218690][ T5624] lock_acquire+0x115/0x350 [ 800.223722][ T5624] down_write+0x96/0x200 [ 800.228683][ T5624] kernfs_link_sibling+0x4c7/0x5a0 [ 800.234357][ T5624] kernfs_add_one+0x2db/0x6f0 [ 800.239565][ T5624] kernfs_create_dir_ns+0x1a1/0x230 [ 800.245293][ T5624] sysfs_create_dir_ns+0x12f/0x2a0 [ 800.250934][ T5624] kobject_add_internal+0x622/0xcd0 [ 800.256677][ T5624] kobject_add+0x163/0x240 [ 800.261660][ T5624] device_add+0x3fa/0xb80 [ 800.266527][ T5624] hci_conn_add_sysfs+0xd5/0x210 [ 800.272108][ T5624] hci_conn_complete_evt+0x8a8/0x1350 [ 800.278067][ T5624] hci_event_packet+0x6cd/0xf10 [ 800.283446][ T5624] hci_rx_work+0x3ee/0x1020 [ 800.288573][ T5624] process_scheduled_works+0xc3d/0x1630 [ 800.294662][ T5624] worker_thread+0xa47/0xfb0 [ 800.299793][ T5624] kthread+0x38b/0x480 [ 800.304409][ T5624] ret_from_fork+0x514/0xb70 [ 800.309529][ T5624] ret_from_fork_asm+0x1a/0x30 [ 800.314842][ T5624] [ 800.314842][ T5624] other info that might help us debug this: [ 800.314842][ T5624] [ 800.325082][ T5624] Chain exists of: [ 800.325082][ T5624] &root->kernfs_iattr_rwsem --> cpuhp_state_mutex --> &root->kernfs_rwsem [ 800.325082][ T5624] [ 800.339526][ T5624] Possible unsafe locking scenario: [ 800.339526][ T5624] [ 800.346983][ T5624] CPU0 CPU1 [ 800.352361][ T5624] ---- ---- [ 800.357737][ T5624] lock(&root->kernfs_rwsem); [ 800.362516][ T5624] lock(cpuhp_state_mutex); [ 800.369651][ T5624] lock(&root->kernfs_rwsem); [ 800.376949][ T5624] lock(&root->kernfs_iattr_rwsem); [ 800.382252][ T5624] [ 800.382252][ T5624] *** DEADLOCK *** [ 800.382252][ T5624] [ 800.390407][ T5624] locks held by kworker/u9:3/5624: 4, last CPU#1: [ 800.396830][ T5624] #0: ffff88807b6c8140 ((wq_completion)hci2#2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 800.407831][ T5624] #1: ffffc9000404fc40 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 800.419857][ T5624] #2: ffff88802aabc0b8 (&hdev->lock){+.+.}-{4:4}, at: hci_conn_complete_evt+0xba/0x1350 [ 800.429707][ T5624] #3: ffff88801c2d4980 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x41/0x6f0 [ 800.439556][ T5624] [ 800.439556][ T5624] stack backtrace: [ 800.445453][ T5624] CPU: 1 UID: 0 PID: 5624 Comm: kworker/u9:3 Not tainted syzkaller #0 PREEMPT(full) [ 800.454924][ T5624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 800.464999][ T5624] Workqueue: hci2 hci_rx_work [ 800.469702][ T5624] Call Trace: [ 800.472993][ T5624] [ 800.475927][ T5624] dump_stack_lvl+0xe8/0x150 [ 800.480539][ T5624] print_circular_bug+0x2e2/0x300 [ 800.485588][ T5624] check_noncircular+0x12f/0x150 [ 800.490550][ T5624] __lock_acquire+0x164c/0x2de0 [ 800.495431][ T5624] ? __lock_acquire+0x747/0x2de0 [ 800.500384][ T5624] lock_acquire+0x115/0x350 [ 800.504904][ T5624] ? kernfs_link_sibling+0x4c7/0x5a0 [ 800.510221][ T5624] down_write+0x96/0x200 [ 800.514491][ T5624] ? kernfs_link_sibling+0x4c7/0x5a0 [ 800.519802][ T5624] ? __pfx_down_write+0x10/0x10 [ 800.524671][ T5624] ? kernfs_root+0x1c/0x230 [ 800.529188][ T5624] ? kernfs_root+0x1c/0x230 [ 800.533701][ T5624] ? kernfs_root+0x1c/0x230 [ 800.538217][ T5624] ? kernfs_root+0x1ea/0x230 [ 800.542820][ T5624] kernfs_link_sibling+0x4c7/0x5a0 [ 800.547943][ T5624] kernfs_add_one+0x2db/0x6f0 [ 800.552645][ T5624] kernfs_create_dir_ns+0x1a1/0x230 [ 800.557870][ T5624] sysfs_create_dir_ns+0x12f/0x2a0 [ 800.563011][ T5624] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 800.568666][ T5624] ? do_raw_spin_unlock+0xf5/0x200 [ 800.573804][ T5624] kobject_add_internal+0x622/0xcd0 [ 800.579017][ T5624] kobject_add+0x163/0x240 [ 800.583459][ T5624] ? __pfx_kobject_add+0x10/0x10 [ 800.588421][ T5624] ? get_device_parent+0x366/0x3a0 [ 800.593573][ T5624] device_add+0x3fa/0xb80 [ 800.597947][ T5624] hci_conn_add_sysfs+0xd5/0x210 [ 800.602913][ T5624] hci_conn_complete_evt+0x8a8/0x1350 [ 800.608308][ T5624] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 800.614308][ T5624] ? __pfx_hci_conn_complete_evt+0x10/0x10 [ 800.620128][ T5624] ? skb_pull_data+0xf0/0x200 [ 800.624826][ T5624] hci_event_packet+0x6cd/0xf10 [ 800.629700][ T5624] ? __pfx_hci_conn_complete_evt+0x10/0x10 [ 800.635522][ T5624] ? __pfx_hci_event_packet+0x10/0x10 [ 800.640912][ T5624] ? audit_filter_rules+0x45f0/0x5d10 [ 800.646341][ T5624] ? hci_send_to_monitor+0xe2/0x590 [ 800.651615][ T5624] hci_rx_work+0x3ee/0x1020 [ 800.656141][ T5624] ? process_scheduled_works+0x97a/0x1630 [ 800.661876][ T5624] process_scheduled_works+0xc3d/0x1630 [ 800.667457][ T5624] ? __pfx_process_scheduled_works+0x10/0x10 [ 800.673468][ T5624] ? assign_work+0x3cf/0x5d0 [ 800.678073][ T5624] worker_thread+0xa47/0xfb0 [ 800.682725][ T5624] ? __kthread_parkme+0x71/0x1f0 [ 800.687686][ T5624] kthread+0x38b/0x480 [ 800.691786][ T5624] ? __pfx_worker_thread+0x10/0x10 [ 800.696917][ T5624] ? __pfx_kthread+0x10/0x10 [ 800.701528][ T5624] ret_from_fork+0x514/0xb70 [ 800.706139][ T5624] ? __pfx_ret_from_fork+0x10/0x10 [ 800.711274][ T5624] ? __switch_to+0xc89/0x1420 [ 800.715993][ T5624] ? __pfx_kthread+0x10/0x10 [ 800.720600][ T5624] ret_from_fork_asm+0x1a/0x30 [ 800.725406][ T5624] [ 800.792840][ T5624] Bluetooth: hci3: command 0x0406 tx timeout [ 801.802040][T24594] bond0: (slave syz_tun): Releasing backup interface [ 802.126539][ T1118] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 802.173590][ T1118] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 802.222057][ T1118] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 802.257052][ T1118] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 802.613313][ T1118] macvlan5: left allmulticast mode [ 802.613370][ T1118] macvlan5: left promiscuous mode [ 802.613627][ T1118] bridge0: port 1(macvlan5) entered disabled state [ 802.644736][ T1118] pimreg9: left allmulticast mode [ 802.806412][ T1118] batman_adv: batadv0: Removing interface: gretap2 [ 802.826505][ T1118] batman_adv: batadv0: Removing interface: gretap1 [ 802.882719][ T1118] bond7 (unregistering): (slave geneve2): Releasing active interface [ 802.899963][ T1118] batman_adv: batadv0: Interface deactivated: macvlan6 [ 802.901993][ T1118] batman_adv: batadv0: Removing interface: macvlan2 [ 802.905339][ T1118] batman_adv: batadv0: Removing interface: macvlan3 [ 802.930765][ T1118] batman_adv: batadv0: Removing interface: macvlan4 [ 802.934230][ T1118] batman_adv: batadv0: Removing interface: macvlan6 [ 802.960575][ T1118] bond5 (unregistering): (slave bridge3): Releasing backup interface [ 802.960601][ T1118] bridge3 (unregistering): left promiscuous mode [ 802.980871][ T1118] bond6 (unregistering): (slave bridge4): Releasing backup interface [ 802.980898][ T1118] bridge4 (unregistering): left promiscuous mode [ 802.997049][ T1118] bond0 (unregistering): Released all slaves [ 803.000599][ T1118] bond1 (unregistering): Released all slaves [ 803.016849][ T1118] bond2 (unregistering): (slave batadv1): Releasing active interface [ 803.032992][ T1118] bond2 (unregistering): (slave veth3): Releasing active interface [ 803.033574][ T1118] bond2 (unregistering): Released all slaves [ 803.049306][ T1118] bond3 (unregistering): Released all slaves [ 803.060345][ T1118] bond4 (unregistering): Released all slaves [ 803.074286][ T1118] bond5 (unregistering): Released all slaves [ 803.089717][ T1118] bond6 (unregistering): Released all slaves [ 803.096102][ T1118] bond7 (unregistering): Released all slaves [ 803.100003][ T1118] bond8 (unregistering): Released all slaves [ 803.199955][ T1118] batman_adv: batadv0: Removing interface: gretap2 [ 803.219636][ T1118] batman_adv: batadv0: Removing interface: gretap1 [ 803.273647][ T1118] batman_adv: batadv0: Removing interface: macvlan2 [ 803.275984][ T1118] batman_adv: batadv0: Removing interface: macvlan3 [ 803.308120][ T1118] batman_adv: batadv0: Removing interface: macvlan4 [ 803.315431][ T1118] batman_adv: batadv0: Removing interface: macvlan5 [ 803.325039][ T1118] batman_adv: batadv0: Removing interface: macvlan6 [ 803.345760][ T1118] bond3 (unregistering): (slave bridge1): Releasing backup interface [ 803.360938][ T1118] bond2 (unregistering): (slave bridge2): Releasing backup interface [ 803.373803][ T1118] bond0 (unregistering): Released all slaves [ 803.376704][ T1118] bond1 (unregistering): Released all slaves [ 803.396422][ T1118] bond3 (unregistering): Released all slaves [ 803.414191][ T1118] bond2 (unregistering): Released all slaves [ 803.430660][ T1118] bond4 (unregistering): Released all slaves [ 803.441696][ T5284] 8021q: adding VLAN 0 to HW filter on device eth2 [ 803.566806][ T1118] : left promiscuous mode [ 803.588519][ T1118] : left promiscuous mode [ 803.617871][ T1118] ovs-s!: left promiscuous mode [ 803.647969][ T1118] tipc: Disabling bearer [ 803.648052][ T1118] tipc: Left network mode [ 803.648460][ T1118] tipc: Disabling bearer [ 803.648523][ T1118] tipc: Left network mode [ 803.981481][ T5284] 8021q: adding VLAN 0 to HW filter on device eth1 [ 804.164248][ T1118] hsr_slave_0: left promiscuous mode [ 804.164724][ T1118] hsr_slave_1: left promiscuous mode [ 804.179831][ T1118] hsr_slave_0: left promiscuous mode [ 804.181052][ T1118] batman_adv: batadv0: Interface deactivated: ipvlan8 [ 804.181099][ T1118] batman_adv: batadv0: Removing interface: ipvlan8 [ 804.679036][ T5284] 8021q: adding VLAN 0 to HW filter on device eth3 [ 805.023048][ T5284] 8021q: adding VLAN 0 to HW filter on device eth4 [ 805.126693][ T1118] IPVS: stop unused estimator thread 0... [ 805.127860][ T1118] IPVS: stop unused estimator thread 0... [ 805.321404][ T5284] 8021q: adding VLAN 0 to HW filter on device eth5 [ 805.571380][ T5284] 8021q: adding VLAN 0 to HW filter on device eth6 [ 805.850590][ T5284] 8021q: adding VLAN 0 to HW filter on device eth7 [ 806.101217][ T5284] 8021q: adding VLAN 0 to HW filter on device eth8