last executing test programs: 2.737412968s ago: executing program 1 (id=11877): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000000880)=[{{&(0x7f0000000140)={0xa, 0x4e23, 0xf, @private0={0xfc, 0x0, '\x00', 0x1}, 0x405}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000280)="b7", 0x1}], 0x1, 0x0, 0x0, 0xfc000000}}, {{&(0x7f0000000040)={0xa, 0x4e21, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6d1}, 0x1c, &(0x7f0000000800)=[{&(0x7f00000002c0)='n', 0x1}], 0x1}}], 0x2, 0x20004801) shutdown(r0, 0x1) 2.615337665s ago: executing program 2 (id=11880): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x8000800}, 0x8014) 2.575240669s ago: executing program 1 (id=11881): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000ff0f01020000007a2c3b64dd463b54"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x20}, 0x94) r0 = epoll_create(0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmmsg$inet6(r1, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="ed7eceafad27b8a77329bd4c8233b89066aa4b86d2b8225ea5232d8cc1c3b9776937f068d1c9f8e2ff9883a422c3097f6e22f8fd7827286c88399bb9ad23ca19090bde3892fb965456fa987749cde27eb7e9bada534aec65e791da580adcdb237ef370db2d5e7f6efc073e08bd6d9a184d7f3fc63976a9550810df706f79c51b80d8d1f057bad09b2c6a1d59232d973a436f3c60ea2abfc005017da4b2aae86e0926be1ed948e79c98b2f1bee27ecc00", 0xb0}, {&(0x7f0000000380)="932c6fb8f51c4b000fcbca90aca80118718f2dd6938ef427491e90aa1ec87f0d0e23ea0675d6588fd0abd389f12af74b5aff2733a842a090e17aa012fe255a3393f4c1d72b0a73ecb9d70b0c6d037af80ab497df8e4c29428c30291b3587acd57661a32dbff0298db2d7590d9bb0e3b9b3ee5a967a1c79f861ffdfabddd88fd4f3fc62ff9770a7fd5a627b335b18aad4b1c935538f01bba9c99da17b139e80850c1947f073f0d8f72a093226a2b2449e4d78cc2b582c74731d6a15c046f7ebb103298fab6a1a642637e4d69e10e82bc604e2b7", 0xd3}], 0x2, &(0x7f0000000840)=[@rthdr={{0xa8, 0x29, 0x39, {0x2b, 0x12, 0x2, 0x6, 0x0, [@ipv4={'\x00', '\xff\xff', @private=0xa010101}, @private0={0xfc, 0x0, '\x00', 0x1}, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00', @private2={0xfc, 0x2, '\x00', 0x1}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x7}}, @rthdr={{0x28, 0x29, 0x39, {0x16, 0x2, 0x1, 0x40, 0x0, [@mcast2]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0xfff}}], 0x100}}], 0x1, 0x400c0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x4f) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000600)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb5058b292eac8ba88a36aa1d7ee244885b5bb9fa6935849e6098ed884e7cb51726b360", 0x50}], 0x2, 0x0, 0x0, 0x20000000}], 0x1, 0x4040800) recvmsg$qrtr(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000700)=""/195, 0xc3}], 0x1, 0x0, 0x0, 0x10000}, 0x38, 0x10020) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x58, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x470d0, 0x40}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x9}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x2}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x58}}, 0x8000) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETLINK(r5, 0x400454cd, 0x10f) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000080)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xb, r2}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000000)) 2.44427822s ago: executing program 2 (id=11884): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x402, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000040)=0x402, 0x4) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x2c, 0x40, 0x1, 0x7fffc, 0x4, {0x2}, [@nested={0x4, 0x48}, @nested={0x14, 0x1, 0x0, 0x1, [@nested={0x10, 0x10, 0x0, 0x1, [@nested={0x4, 0x8}, @typed={0x8, 0x1, 0x0, 0x0, @u32=0x5}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="034886dd0903280005003000030060000000122884ff81e949b93897bc3b0000000000007d01ff020000000000000000000000000001"], 0xfdef) 2.248256567s ago: executing program 0 (id=11888): r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) accept4$tipc(0xffffffffffffffff, &(0x7f0000000080)=@name, &(0x7f0000000100)=0x10, 0x80800) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}]}, @NFT_MSG_NEWSETELEM={0x3e4, 0xc, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x3c4, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0x3a4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0xa8, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xa3, 0x1, "9c224f690d1be4520e74192c66794ab10687fa6cc8f47d69627deee41b59ecfe0a7a268e077ce266b4ccec2e25b644965de3295111086ff6abffd47c514b4f7cc3db9f773d85ef82dd5a3c1f6a260276b7933f4aacda8db7830b3817e8094464009d516333beb1dc5253523337d1e7ad682f9147827ada9e49a8478a2cd387e87e748ba840b2c55dbb5beccd2644514674a78c066564b2cd80e2d8f1d71ad6"}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7}, @NFTA_SET_ELEM_DATA={0x158, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x5}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_KEY_END={0x188, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x52, 0x1, "0be999eb0287bfc71f96089058eaf1378baf48e893e5d0d927b8c8057cb961bd4e71d584996d8365e483415528e60126ed39549fff0b444b3284c1bd60754e74c70643d80893d2c9ae1ff6847981"}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0xb4, 0x1, "41704fa25b82f4b3a78b4e586952411165e23d23311a01a53671385405e51f7bf4827110f63e4a3fabff478a62c389c600325e98c67a334f9f0e90d22aa8f4a84b5ed58a5c4d8c3c01e39bccd152fcd7ebd798c42e66c8e0689e8caa3d79d05ba5711d6acc5ca1fbabf4ed233d541461709ed55b6ded98952c0e123da3200b843efecd6518108fa7ed16955e7fdad67ff62bc2ba8f10f6e4fca9dc2a77c6e77fc7b828bf3977650ef19b3ba66c2c4cf0"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x8}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x468}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) write(r3, &(0x7f0000000240)="14000000140005b7ffccca38b90000000608", 0x12) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x8, 0x25, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000480)={0x18, 0x0, {0x3, @broadcast, 'ip_vti0\x00'}}, 0x1e) close(r0) close(0xffffffffffffffff) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r5, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xf, 0xf, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x583e}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x1b, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r6, r7, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001940)={0x6, 0x11, &(0x7f0000000640)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8d}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_fd={0x18, 0x5, 0x1, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001780)='syzkaller\x00', 0x1000, 0xb2, &(0x7f00000017c0)=""/178, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001880)={0x0, 0x3}, 0x8, 0x10, &(0x7f00000018c0)={0x3, 0x5, 0x400, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001900)=[0xffffffffffffffff], 0x0, 0x10, 0x2ddc}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001a80)={{0x1, 0xffffffffffffffff}, &(0x7f0000001a00), &(0x7f0000001a40)='%-010d \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000001b00)={0x1b, 0xa, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xad2}, [@map_idx_val={0x18, 0x0, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, @ringbuf_query, @jmp={0x5, 0x1, 0x4, 0xb, 0xb, 0x4}]}, &(0x7f0000000000)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x3, 0x5, 0x80000000, 0x2}, 0x10, r6, r8, 0x0, &(0x7f0000001ac0)=[r9], 0x0, 0x10, 0x7}, 0x94) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000005c0)=@generic={&(0x7f0000000580)='./file0\x00', 0x0, 0x18}, 0x18) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000600)={0x0, 0x7, 0x10}, 0xc) r12 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000640)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x3}, 0x50) r13 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x2, 0x4, 0x1, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r13}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r14}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x200}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x6a2e4e0ed11fabf6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r15 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000006c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x410, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1c, 0xf, &(0x7f0000000140)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @exit], &(0x7f0000000040)='syzkaller\x00', 0xc, 0xc3, &(0x7f0000000340)=""/195, 0x41100, 0x49, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000440)={0x5, 0xb, 0x5, 0xaa3}, 0x10, r6, r1, 0x6, &(0x7f0000000740)=[r10, r11, 0xffffffffffffffff, r12, r13, r15, 0xffffffffffffffff], &(0x7f0000000780)=[{0x5, 0x3, 0x3, 0x8}, {0x3, 0x2, 0x7, 0x8}, {0x5, 0x1, 0xd, 0x4}, {0x3, 0x3, 0xf}, {0x3, 0x1, 0xc, 0x4}, {0x3, 0x5, 0x3, 0xb}], 0x10, 0x2}, 0x94) 2.010091811s ago: executing program 4 (id=11891): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="000086dd0003110004000000a60c6eec00be00442c2f"], 0xfdef) 1.996626523s ago: executing program 0 (id=11892): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000140)={0x4, 0x7f, 0x4, 0x4000000}, 0x18) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000ff110002000200000800040001000000", 0xfdef) 1.894115382s ago: executing program 2 (id=11893): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="440000001000090600000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="a7ffa888000000001c00128009000100766c616e000000000c000280060001000100000008000500", @ANYRES32=r5], 0x44}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) close(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket$inet6_udplite(0xa, 0x2, 0x88) r10 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r10, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r9, 0x1, 0xd8, 0x6, @multicast}, 0x14) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_MASTER={0x8, 0xa, r11}, @IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 1.894031274s ago: executing program 0 (id=11894): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x8000800}, 0x8014) 1.802345811s ago: executing program 0 (id=11896): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r0, 0x942e, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, 0x0, 0x0, 0x4854) sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000}, 0x20040804) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x100, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0xbd1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x40) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r8, {}, {0xffe6, 0xb}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3, 0x0, 0x9, 0x200, 0x3000000, 0x80000002, 0x5, 0x10, 0x7fff}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x850}, 0x8804) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x4, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96d", 0xe}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000000c0)={0x0, 0x611eb2f8}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000140)={0x7f, 0x9, 0x0, 0x7, 0x2, 0x91, 0x0, 0x6, r9}, &(0x7f00000001c0)=0x20) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x402, 0x0) r11 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000002c0)={0x0, 0x6}, 0x8) setsockopt$IP_VS_SO_SET_ADD(r11, 0x0, 0x482, &(0x7f0000000040)={0x11, @private=0xa010101, 0x4e21, 0xffffffff, 'sh\x00', 0x3, 0x1000002, 0x7b}, 0x2c) r12 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r10, &(0x7f00000003c0)=ANY=[@ANYBLOB="034886dd090328000500300003006000000012286c0081e949b93897bc3b0000000000007d01ff020000000000000000000000000001"], 0xfdef) syz_emit_ethernet(0x1102, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)={0x1, 0x4, [0x52e, 0x14a, 0x736, 0x96d]}) 1.775154516s ago: executing program 4 (id=11897): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000000) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x40}, 0x1, 0x0, 0x0, 0x48000}, 0x24004084) syz_emit_ethernet(0x3e, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010101, @local}, @time_exceeded={0x3, 0x5, 0x0, 0x3, 0x0, 0x6, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x89, 0x0, @broadcast, @multicast2}}}}}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000006180)={0x0, 0x0, &(0x7f0000006140)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16, @ANYBLOB="110026bd7000fddbdf2507002600"/26, @ANYRES32, @ANYBLOB="0c009900fb"], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x20004014) r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x298, 0x168, 0x0, 0x0, 0x200, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000300, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x298}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x2, 0x4, 0x11000000]}}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) 1.687618955s ago: executing program 1 (id=11898): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000300, 0x70, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, 0x0, 0x8000) 1.683292069s ago: executing program 1 (id=11899): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="21000000000000002c00128009000100626f6e64000000001c000280050021"], 0x4c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f00000001c0)={0xffffffffffffffff, &(0x7f00000000c0)='%\x00', 0x100, &(0x7f0000000100)={@_ha_fsid={[0x6d43, 0x3]}, {0x3, 0x876, 0x0, 0x4}}, 0x1e0b, &(0x7f0000000140), &(0x7f0000000180)=0x8001}) sendmsg$kcm(r1, &(0x7f00000014c0)={&(0x7f0000000200)=@nl=@unspec, 0x80, &(0x7f0000001280)=[{&(0x7f0000000280)="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", 0x1000}], 0x1, &(0x7f00000012c0)=[{0x28, 0x109, 0x9, "0a5781a9db2c5251b26bc4a45b6613152e"}, {0xf0, 0x10c, 0xdb, "4289cd57ad669c69ddf1c69f44a033a5084ffb885a235d8c4d868760ba3853c9715c682be731b833eb49c68562fd516626779d062282a4ececa30ee6e28999e10e9140373cdaf61b5a4b1c544bd41511af12e08731b49bf21f28c5198400868fea10b4c8259a70b9f4c8dde58c13661bc687c073d5ea2830ed7c56c43b89219f33952016665ead2fa3fc51d74e834a15490309452382b44edfd02117737d3df82f66612b75cc29150dc204cde42f5e40dd498f0614d40ad46dc4d7f3d60beeeb315e7922abd0700cba49321f391f8b1459d4e635afc49bd1219f45"}, {0xb8, 0x10b, 0x5, "e70e53a021d1b5fc726c5e3bb137c526d57ac5ac5d4cf4c4977ea16ed8957b39563a559da9963ad1ae615369a6eea2dc223701964e2f3a6478afdd233a46dbd9b8461963daf7ef97f4df197015f1a261796a4d7441c9d14c37189b45f4b833b186bb46ae67ba1213f28a95329a8f1668437b1f94d173067b8a4a6f8ca18cfe1132fff8ad3cc49cf666101632f2bff1cace57a6358468fd2614e2074e23634c684fb3"}], 0x1d0}, 0x4004041) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x1ff, 0x1, 0x8004}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002280)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0x3}, {0xfff3}, {0x2, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20008091}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) 1.647175162s ago: executing program 3 (id=11900): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x3000, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x5, 0xe, 0x0, &(0x7f0000000440)="469dc2d34ae2b700000000000000", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.539606501s ago: executing program 3 (id=11901): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) bind$unix(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000080003851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50afdff00000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xa}, 0x94) socket$unix(0x1, 0x2, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000047c0)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="180000007a00010600000000fbdbdf2507"], 0x18}], 0x1, 0x0, 0x0, 0x4000050}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1.32027154s ago: executing program 4 (id=11902): r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) accept4$tipc(0xffffffffffffffff, &(0x7f0000000080)=@name, &(0x7f0000000100)=0x10, 0x80800) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}]}, @NFT_MSG_NEWSETELEM={0x3e4, 0xc, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x3c4, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0x3a4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0xa8, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xa3, 0x1, "9c224f690d1be4520e74192c66794ab10687fa6cc8f47d69627deee41b59ecfe0a7a268e077ce266b4ccec2e25b644965de3295111086ff6abffd47c514b4f7cc3db9f773d85ef82dd5a3c1f6a260276b7933f4aacda8db7830b3817e8094464009d516333beb1dc5253523337d1e7ad682f9147827ada9e49a8478a2cd387e87e748ba840b2c55dbb5beccd2644514674a78c066564b2cd80e2d8f1d71ad6"}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7}, @NFTA_SET_ELEM_DATA={0x158, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x5}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_KEY_END={0x188, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x52, 0x1, "0be999eb0287bfc71f96089058eaf1378baf48e893e5d0d927b8c8057cb961bd4e71d584996d8365e483415528e60126ed39549fff0b444b3284c1bd60754e74c70643d80893d2c9ae1ff6847981"}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0xb4, 0x1, "41704fa25b82f4b3a78b4e586952411165e23d23311a01a53671385405e51f7bf4827110f63e4a3fabff478a62c389c600325e98c67a334f9f0e90d22aa8f4a84b5ed58a5c4d8c3c01e39bccd152fcd7ebd798c42e66c8e0689e8caa3d79d05ba5711d6acc5ca1fbabf4ed233d541461709ed55b6ded98952c0e123da3200b843efecd6518108fa7ed16955e7fdad67ff62bc2ba8f10f6e4fca9dc2a77c6e77fc7b828bf3977650ef19b3ba66c2c4cf0"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x8}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x468}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) write(r3, &(0x7f0000000240)="14000000140005b7ffcc", 0xa) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x8, 0x25, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000480)={0x18, 0x0, {0x3, @broadcast, 'ip_vti0\x00'}}, 0x1e) close(r0) close(0xffffffffffffffff) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r5, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xf, 0xf, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x583e}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x1b, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r6, r7, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001940)={0x6, 0x11, &(0x7f0000000640)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8d}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_fd={0x18, 0x5, 0x1, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001780)='syzkaller\x00', 0x1000, 0xb2, &(0x7f00000017c0)=""/178, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001880)={0x0, 0x3}, 0x8, 0x10, &(0x7f00000018c0)={0x3, 0x5, 0x400, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001900)=[0xffffffffffffffff], 0x0, 0x10, 0x2ddc}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001a80)={{0x1, 0xffffffffffffffff}, &(0x7f0000001a00), &(0x7f0000001a40)='%-010d \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000001b00)={0x1b, 0xa, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xad2}, [@map_idx_val={0x18, 0x0, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, @ringbuf_query, @jmp={0x5, 0x1, 0x4, 0xb, 0xb, 0x4}]}, &(0x7f0000000000)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x3, 0x5, 0x80000000, 0x2}, 0x10, r6, r8, 0x0, &(0x7f0000001ac0)=[r9], 0x0, 0x10, 0x7}, 0x94) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000005c0)=@generic={&(0x7f0000000580)='./file0\x00', 0x0, 0x18}, 0x18) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000600)={0x0, 0x7, 0x10}, 0xc) r12 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000640)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x3}, 0x50) r13 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x2, 0x4, 0x1, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r13}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r14}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x200}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x6a2e4e0ed11fabf6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r15 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000006c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x410, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1c, 0xf, &(0x7f0000000140)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @exit], &(0x7f0000000040)='syzkaller\x00', 0xc, 0xc3, &(0x7f0000000340)=""/195, 0x41100, 0x49, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000440)={0x5, 0xb, 0x5, 0xaa3}, 0x10, r6, r1, 0x6, &(0x7f0000000740)=[r10, r11, 0xffffffffffffffff, r12, r13, r15, 0xffffffffffffffff], &(0x7f0000000780)=[{0x5, 0x3, 0x3, 0x8}, {0x3, 0x2, 0x7, 0x8}, {0x5, 0x1, 0xd, 0x4}, {0x3, 0x3, 0xf}, {0x3, 0x1, 0xc, 0x4}, {0x3, 0x5, 0x3, 0xb}], 0x10, 0x2}, 0x94) 1.285944999s ago: executing program 2 (id=11903): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000080000a3c000000120a010200000000000000000100000009000200737905000000000008000440000000000900010073797a3000000000080003400000000a"], 0x64}}, 0x0) (fail_nth: 2) 1.272798639s ago: executing program 3 (id=11904): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x0, 0x0, 0x0, 0x8, 0xff8, &(0x7f0000001e00)=""/4088}, 0x94) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000580)={{0x84, @broadcast, 0x4e23, 0x3, 'lc\x00', 0x2, 0x4, 0x7b}, {@private=0xa010102, 0x4e22, 0x2, 0xc8, 0x80012d58, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) 1.205718387s ago: executing program 0 (id=11905): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002b40), r3) sendmsg$NLBL_MGMT_C_ADD(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000002c00)={&(0x7f0000000100)={0x3c, r4, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_DOMAIN={0xe, 0x1, 'net/l2cap\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @empty=0x2000a00}]}, 0x3c}, 0x1, 0x2000000, 0x0, 0x20000000}, 0x4000080) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000002600)={'gre0\x00', &(0x7f0000002580)={'tunl0\x00', 0x0, 0x1, 0x7800, 0x2, 0x8, {{0x17, 0x4, 0x1, 0xe, 0x5c, 0x68, 0x0, 0x7, 0x2f, 0x0, @multicast2, @multicast1, {[@timestamp_prespec={0x44, 0xc, 0xf8, 0x3, 0x7, [{@remote, 0x6}]}, @lsrr={0x83, 0x17, 0x3a, [@loopback, @dev={0xac, 0x14, 0x14, 0x29}, @multicast2, @dev={0xac, 0x14, 0x14, 0x23}, @remote]}, @end, @timestamp_addr={0x44, 0x1c, 0x29, 0x1, 0x5, [{@empty, 0x5}, {@rand_addr=0x64010100, 0xe}, {@dev={0xac, 0x14, 0x14, 0x29}, 0x5}]}, @generic={0x7, 0x7, "86e96785b1"}]}}}}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000002640)={'dummy0\x00', 0x0}) sendmmsg$inet(r5, &(0x7f0000003f40)=[{{&(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)="7729579e386bf2d3195b4a406dde3ae48383bba34df6f74c35831e0a7f86d510103d7666ef6855acf649b10dec1fdfba22530fb7f3d83719f5e5414cbd88a2ae44c7d5c70a636e34c4e11690504370c66ef815e838b710dd1830bf5d747d346b9ddd96321dd5bde2420f6a725170fa718802e63b8b8e643380227c64cd72f78ef112741ebb37ee5a939f6f94592adf671533d4ac54fccff7638443d9562aa153a296a70a11d12cc70512585a9a85e6962d0af43cc9ea025b19", 0xb9}, {&(0x7f0000000080)="73fc3f63a6813dc73b8d13ba984e46", 0xf}], 0x2, &(0x7f0000000200)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x57}}], 0x18}}, {{&(0x7f0000000240)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f00000008c0)=[{&(0x7f0000000280)="6fee979d2a3148c868757d6bf5aae5f5c23a0ece78170868a25af485a89ae92b2ed2b4d6de179540182befb0c698addaeda08232ed74b6cd26f49772ea3b560564ac9b7f879d53a3393bfb99861745f614bcac8cf3d4f7d153df0bf3b12cb7b7d36a13d307fd31a3bf1021abfc2f8bbef0012d49d97943080a48198be2f7f17c31bbddc29b52c79b6332b43163009008be5172641038ca808ef9845d4112924ad6d4db478495c1d578f82d4d4800e1904971ef3ad69792cbd1a79f28f02aba250f05174d839afa96e5e4ee617c9fb00656b4134f33d4dbecfce17209724e750b5c0a0ac087948dd736839dd0b1b58512e984021dd3ba9c1f", 0xf8}, {&(0x7f0000000380)="7e8e0b7f801967050135f6c0d9957bf19cd2bbba55f40958fa14eabf726858fbf4874363b1dfdb75016c166444b08fbf6824042ffe0a8b97f96a066961b6f6ea487a4e7e59ce35fd583b287fcb81e86366540c1d9136d0c0a911db6d275f54c80602bc7f3129e66c801ee1a7d598dfdd08f8ee17783400f88491a706415c3739794a359b7e92095d778947577ded8dcbd52e30ede8c9673ffbcd1bd89cab74702b98", 0xa2}, {&(0x7f00000006c0)="b5b49b2471fd58aa3bb14d941534eaca63ccba1c93421d6383bdbf021553644fc40d5305cb26db03923f9fb51128e2ca032836d7aaf8182e0283c185939a756ee998c47ec28545d65d84e45845fedcd93edc2d872455078466289511ee6ded746d7d2371b12ce47b862ac7772ae2074e777ceb48da8c21612c381298a7e38de71df91cb154ae70a6089562f031512e660df8089e11e013a3a85610fc30609242b9a2dade4ddfc5f04ce0e9a4d9cdbbb39db29815630180d8d9b2ee9638e3048c80cd6debdb5aa3d59cdcbfbdb0e7b2416c37b5e5982649492f8c6485a2e219464ae9d6d79c26", 0xe6}, {&(0x7f0000000540)="4ce70011f70f881f143b4beb3f147e728400b5108536529464e6c69920be11d7a60ef742dd497da361418ff868cfab8946a5fec0ccecbe3576a0c11ac5e5dc73a569bc31a1115451f1562c7e0e2fe54baccb82ac02a51386e0ead12972937c61b7b4248623a233c05cfdd5b78c", 0x6d}, {&(0x7f00000007c0)="e2e2266ad848b3ae1924b21ce52b7f7c9375dd12cffd36e55cb8fa0944f8b5232653b8a2e50817548eca6fe3d52206451a998e3857eae39c30494f86309b6d887a9fd53ea65c8a7017b890339eb849274527c2b2b5727bc7bbbfad98eafedb84ef5e77b0594dd41ba2b3ce0b23da1654cb4ec052f338f895d9c881d69acc0c2d98d147011499911de13922fbfc6bfad9eef58989d2e024d1e1e341de06889e155795614f9050debd1d6d76736a0b9666d6eb54c12d166c23540ef7a107481d65a0ac10b4c10f72640fe25f70a03d67", 0xcf}], 0x5, &(0x7f0000000940)=[@ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9a}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @local}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}], 0x80}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f00000009c0)="d2e24d77ef0a57e85b816ed30f3641861d77f75a55a3ac806836b8f43a49af3d3c958b30761fc24439628320e4478af5c2db64e184af0b3f8a667567fb04248907a02c29adc5d47c60af0bd4cc06f8f16cd3e4d41b809a679e9edde63b231e72bc57152fa02adff9ea2c70da7d6684064c67885ab7a8c45107eb8e5a2c85064e6663f5a4e0da55f2b28a1d304640d4a1908802982f7aa78a25804b030fa01451e9eb25e91b1599c6acc03020a4f7d47efefc6f2f0a44ee905632d177f443e548546c2437c6ba9739903fe95145dce4fa245e5df866037baa19f47a86baea6df4efecf180061e8f0a95059758503f748f", 0xf0}, {&(0x7f00000004c0)="aa01553fb898f9531f8855fda173cc917ee8ed7fd3618c75d9ab13e6e6fec9242ac16cadb929ea7ad7a2babf872b1b37", 0x30}, {&(0x7f00000005c0)="d822202a507dda17bc54a6f8c72c42ca70b39a66", 0x14}, {&(0x7f0000000ac0)="ca9237c1448867869836ec2a5c8fe7fb7766dc3d2c2650cce0853079366797daa0d6dbd4933dbc1cce2eb48b50bbc211bba0b1e89a69e52dd7103bb1e535b5d23389ab5904096e62cffc531b77ce647d", 0x50}], 0x4}}, {{&(0x7f0000000b80)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}, 0x10, &(0x7f0000000d00)=[{&(0x7f0000000bc0)="be42b6b4eabb59c75978ab9edb5c97dc54865a591b1f7f7cc4dc76acc87cdf5f9144243ef4520a97b09715be1770be5070021215841e510a7ccb6c5f7191f8205de43cf077f2b5c35ce97876c4602aef71edd6e39de0ef55cc255dfdc0fbdf135c250f6dbe2b1fbbd38dc88ebf955410d3e2592e7c21c97887930e7de63a33d0bd9c895b1a150a4526d6c9080f0867d3051e519271841c2b6a7259ea944ce6281f1c7adab71c6d3da9b8baf72351f513fcc8e34891f63a6838be8ba3155b23c8e1b2e80976ce1b26f353cbee935fc94e97ea4344f50cc0f8dc4673cbe005ef1b499e340619fc5d294c86be", 0xeb}, {&(0x7f0000000cc0)="6e0f86b991deca68a2bcd1c2141e49136340d83647d5dc54c4a5352125", 0x1d}], 0x2, &(0x7f0000000d40)=[@ip_retopts={{0x30, 0x0, 0x7, {[@noop, @timestamp_prespec={0x44, 0x1c, 0x6a, 0x3, 0x2, [{@multicast2, 0xa}, {@dev={0xac, 0x14, 0x14, 0x13}, 0x3}, {@private=0xa010101, 0x2}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private=0xa010102}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}}}}], 0xa0}}, {{&(0x7f0000000e00)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f00000020c0)=[{&(0x7f0000000e40)="8ea013ccab735905c39de5f006e4eab5deeab21610160482fe3412c8490f2d9771680ab6a9e3b1f8ac2717a2", 0x2c}, {&(0x7f0000000e80)="8b9fc1196f9a620c1a0eb1754a39df10d0c975893dbcf4a4dc206601e3b6648109ddf1cc2cbfab318da3520f8a8f35a837ec6fc13bc01f0cc8149ed50ea00dab75a2b5af7ec556e48f94ea910f256c26545a39e24978da42ce7efafde864ea299894ba0e9ddfaf7d2aa079c85fe256b15743abd918e3aeaaad8cb31e1b740815157742acb6ac060a0b4fdecc35d333336d954cdd4b37fc9e447b3ff3b0da4962694ced030b6d0e108d413401cc76f947d7f8c5fc9219fb5adf607e58e5e9be29b64f77f68a39160611794aca755d09e6647bb48eceebd96c98c0fe26ffc86f13cb9d90b32950c9c464", 0xe9}, {&(0x7f0000000f80)="446298dc0b13c226a38d", 0xa}, {&(0x7f0000000fc0)="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", 0x1000}, {&(0x7f0000001fc0)="15b19824404f69730a0efcf2b54038fba0fb0802c04724c1eb1606605b96acc125c76f0bf23d34a7b832eb598451bab4c9ea60d43b3fffc43757f9fd1b92", 0x3e}, {&(0x7f0000002000)="32da7d08d1176439461279e21de73c22ea29c04d21141ad3bf6388d58b5423ee1105231505635d262de0d5a1e55300fea9f4892eeeee96a66214a156ca91825b449c11d9ed8cde0a96120e7319dd529448fc2b838fe2c3d0cd6ca8379eba1a8eadedb51566de491a23e499ef266e153693c7b4d7ab7d97e3b50cf8448f0c055fdc27f2d4343e58369f99cb6715e06da6b36196177f099489b5b8c2506c3bc0d2628a6f13821bc29281110b383440", 0xae}], 0x6, &(0x7f00000021c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x40}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xe}}], 0x50}}, {{&(0x7f0000002240)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10, &(0x7f0000002500)=[{&(0x7f0000002280)="f24a37343224b17ebd39734bf62c27f5a97c65c8cad0dff956f23bdf2408fb3e8e0b207633a9dc00e25c1029515cb24492e45bb22f06dd738c23e4bbd8e3e7947e5542b72c01f088c2fb6a31a1bae211572c5f830ada8b73c5c6dfee3090b0", 0x5f}, {&(0x7f0000002300)="74b156c8057bfc773f1bac64be5118404cdb0f6f499b168a1dae802b461d2640f27f9d4df43e279670b4fd9141a78952e810c0dbf8a3dbce48b966ed146ff5f624b85310fbf2dedb181196fb940e431c4b21d5cc4f6c6693be286a20b896d954bc7eb5d8c72c382bfd26e4195ed7feb074d2a069705d9f2239f91e293c25a999a18cc224f05300acca61b40eda46ebe4b4f1f1158abed60b196ce31837515dabceeaae96787ece41bdab71e5188b3c893d2c56bcb22cf7c9aceb4a686431b03a3be47c0cf7a6", 0xc6}, {&(0x7f0000002400)="411d39ba9462ce5b8aea3eb7d9f2989c4925f158ba47522c7f731a1ce4d3e8b9907dfeab579f7192", 0x28}, {&(0x7f0000002c40)="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", 0x1000}, {&(0x7f0000002440)="898d22888c51eec36d7e7d8ff8f4371cfcb569de67", 0x15}, {&(0x7f0000002480)="506dfffcef0b5d895a9eaadfe8ca47903ace25909b2df4d0dbd2feacaa2ae4d504f46fcd1963e9e324fd8a111c0807b5424d3d52d259af11870fb55325d48f9c2c2143c3478e2371bf785193a624606f68a07420c23465e9e552b3cc0827330be88ebdd1f9f5b777d59286932fee62ce2202ec2f9e2a853663108b", 0x7b}], 0x6, &(0x7f0000002680)=[@ip_retopts={{0xb4, 0x0, 0x7, {[@end, @ssrr={0x89, 0xf, 0x77, [@local, @multicast2, @rand_addr=0x64010102]}, @end, @timestamp_addr={0x44, 0x3c, 0xc, 0x1, 0xd, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1f99}, {@empty, 0x7}, {@private=0xa010100, 0x5}, {@multicast2, 0x2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfb}, {@remote, 0x1c800000}, {@remote, 0x1}]}, @cipso={0x86, 0x51, 0x1, [{0x2, 0x5, "ac2936"}, {0x1, 0xa, "20e01f1850c6e57e"}, {0x2, 0x12, "8614927d01a0159f47037a321f0a7934"}, {0x2, 0x8, "98c32ac2e07f"}, {0x5, 0x6, "1671714e"}, {0x2, 0x2}, {0x5, 0xb, "a3eef508bf2279e792"}, {0x7, 0xf, "aadad75c1a3af5d2cbaf5beb24"}]}, @ra={0x94, 0x4}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_retopts={{0x14, 0x0, 0x7, {[@ssrr={0x89, 0x3, 0x48}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @loopback, @rand_addr=0x64010101}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x40}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @loopback, @dev={0xac, 0x14, 0x14, 0x17}}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}], 0x178}}, {{&(0x7f0000002800)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000003d40)=[{&(0x7f0000002840)="8395b195e0941a5681882b8f481fc92d40bfa8a0eded888d6a89d2140c8d08929768f50170633fa32d5c01839ecc335a14136d2cf20fb294ce49cb3f1216a878fd53ba324fa834bb4ae37a31667ce831d188bc24b2669c34d95e6be00a21d4425cddc63e5798f7435ec6d5fc3026173baa5794998b8f94ac2afca5057c339b79723cff4094ddd382a1b4a2c276260dbb595164c57e2035cb9ac78d47b95e5577269c4238656cd1e9e3b09efd57d6722f20587a4770ab3d483129e7b3962a3012b0ae466271b91e8a8be055b2c52175f453fff3e222fc62a85938d482c6aa9b1529ef12e6e23d6714c1877a6491", 0xed}, {&(0x7f0000002940)="aa24793ea8cd1bd7af39561739cfc20b12a1c101f32873f832a3c1246b5e208c5ef5e4ea267e3e8e3ba0e90c87d75abe32e3ae9ea8ad100174fc72fe10e65369f44242cd5d8a9e3575f80b5c6ec300889a31cfd6c29cdd8620d07949cb1c753f9e81174745f0e76ea98759404b823499251e51d51da2a403c32a236ac52bfac3e6caa7051e8c5db3cfc1a26dcaa154d7f50b417b1814744fba9915c7f67d5a5cae115cb9128104b40fa47cf426729485ebf784994f29ff3cefbc1595559ed9ab622865540003687896813b1a08b47bcc6ebbc87c527e5baff202db55a29c73592cb1df3e277c85e7daf9aca9df9b14a941dc3c1aa87fc2b26d", 0xf9}, {&(0x7f0000002a40)="cb09f06c291e82db303fa73e626e3ebc8fac1aff48690b50f3402d0ee900230eab3efddcf09591829f46af5d5fb854958ab488e82ff2f0be75a5e056829e4e43e1b6829169a0640406cbe784e95b8c4a366b497468ffcb0570013512f96d5356e44db810b1d8fa36693b1cb14f1ba0c32b4009f8d55016f8db5f4769f7d517a16015b07458cdbf3ec3a5300e8d963e30f7cebe922bdccc18695e308a10d144413afdfc68ea6338338acaa8429886d927dd9ef557b06944ac62463d4f978ad5e2710fa4660ea81c37ffec5ed89a5a9c20b72ae136882867bdecf746c73f6c7e6c401fef26240354540be62b86ab", 0xed}, {&(0x7f0000002b80)="883e15e5952bf2741cfafe279c7dbc23d0ec576dfaa6a2ba3add4b5d79fa70984c218017086b57e74802298bee006c969301dc3a58c3b07bfb30885e37d0b4ba38dc50ad8b36f8033cbed03b3db56a1ab600a9dce823d4", 0x57}, {&(0x7f0000003c40)="4e398f562015ed7dcbac807b8746426de0a90b63c01dc48365f398e23e74d38bd8e54c50848d25a659cbb172daed5fdc344f5410400c214bcc67edb93a3d771aee820ae0e29e78bad3e258076b67ebd3a6a50b00954f164b37b2d46ea92aa20793a6831c2db2043b86969aba39fad06851c81311d0a44453de94d9c8b0899c4ab5e7d6f1ca2164a6a8c9845f7d39daa3f02202bec4624cb1eec7002f2e85494aab1588e2d9480e95f7e532657f6c688035e61fc05ffed5e39bc3f7f1e504f620ae0ecb1872e296657142657f3ff2e439193a198f90c53725", 0xd8}], 0x5}}, {{&(0x7f0000003dc0)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000003f00)=[{&(0x7f0000003e00)="4bf6203f03fa57df7b6012265756ab357c5f6b751f80c1a5ab34ea5f49b6cba9eab8243e7c927d8abb636d44ec1edee9f4cb0357b886eaab42184a204fcade82ad5da33231b40099c2e56f5e2fcc2283496043f579340e399407a9a5cbc0a933fc59dd77b0e3587070205924c354fb4b3d83bc0c7133d3579001974bcbba5fbfa0b19f741a2bd81a8c13d7721200bd4c376f94f0a336ed1aa0e4b3d4fce54d4bb3e4f0c18ce8e3b3adbdee922a36151b0197439d40de0ab27db840eebc310a4319a3cc4798e37ad5bbe7cc231446", 0xce}], 0x1}}], 0x8, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x4e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x3f}}, &(0x7f0000000480)='syzkaller\x00'}, 0x94) sendmsg$can_bcm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0400000001"], 0x48}}, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="01000000220900"/16, @ANYRES64=0x0, @ANYRES64, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000001"], 0x80}}, 0x2000c080) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, &(0x7f00000001c0)=0x3ff) sendmsg$NFT_BATCH(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0x1c, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x15, 0x1, "41ea2641f8d4df45e1aeadd4354823a621"}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_CMP_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xdc}}, 0x0) close(r1) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_bond\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x70, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x44, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0xffffffffffffffc7, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vcan0\x00'}, {0x14, 0x1, 'pim6reg1\x00'}, {0x14, 0x1, 'veth1_to_bond\x00'}]}]}]}], {0x14, 0x10}}, 0x110}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.205408825s ago: executing program 1 (id=11906): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x8000800}, 0x8014) 958.243613ms ago: executing program 4 (id=11907): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="000086dd0003110004000000a60c6eec00be00442c2f"], 0xfdef) 936.585892ms ago: executing program 1 (id=11908): socket$inet_icmp(0x2, 0x2, 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x4, @empty}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_int(r2, 0x0, 0x21, &(0x7f0000000280)=0x3, 0x1) recvfrom$l2tp6(r1, 0x0, 0x0, 0x40000002, 0x0, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, 0x0, &(0x7f0000000180)) socket$inet_icmp_raw(0x2, 0x3, 0x1) close(0x4) unshare(0x6a040000) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x6180, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x58) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r5, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) 869.63525ms ago: executing program 2 (id=11909): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000300, 0x70, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, 0x0, 0x8000) 820.758881ms ago: executing program 2 (id=11910): ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendfile(0xffffffffffffffff, r0, &(0x7f0000000080), 0x9) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xe, 0x4, 0x4, 0x20002, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value=0x41}, 0x48) sendmsg$sock(0xffffffffffffffff, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) readv(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000080)=""/234, 0xea}], 0x1) ioctl$SIOCSIFHWADDR(r2, 0x8914, 0x0) write$tun(r1, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x78) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000440)={0x1f, 0xffff, 0x3}, 0x6) recvmsg(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000680)=""/153, 0x99}], 0x1}, 0x100) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000002680)={@map, 0xffffffffffffffff, 0x22, 0x8}, 0x20) syz_init_net_socket$netrom(0x6, 0x5, 0x0) 737.581577ms ago: executing program 4 (id=11911): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket(0x28, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x5, &(0x7f0000000080)=0x1d0, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004840}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r2 = socket(0x40000000015, 0x805, 0x0) getsockopt(r2, 0x114, 0x271b, &(0x7f0000000440)=""/102400, &(0x7f00000000c0)=0x41) socket$unix(0x1, 0x1, 0x0) setsockopt$inet_int(r1, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'veth0_macvtap\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002240)=[{{&(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @local, @loopback}}}], 0x20}}], 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=@newlink={0x58, 0x10, 0x1, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x421a2}, [@IFLA_IFNAME={0x14, 0x3, 'wlan0\x00'}, @IFLA_MTU={0x8, 0x4, 0x40e}, @IFLA_VFINFO_LIST={0x1c, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0xfffffffe, 0x2}}]}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 718.549201ms ago: executing program 3 (id=11912): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x24, @none={0x8000000}}, 0x14, &(0x7f0000000080)={0x0}, 0x7}, 0x80) 549.704008ms ago: executing program 4 (id=11913): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000180)={0x9, 0x0, 0xf, 0xc, 0x0}, &(0x7f00000001c0)=0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r2 = socket$netlink(0x10, 0x3, 0x8) sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x100, 0x70bd2a, 0x25dfdbff}, 0x1c}}, 0x880) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x400448ca, 0x0) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r4, 0x400448cb, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x80000001, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0xb}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x4}, {0x7, 0x0, 0xa}, {0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x1d}, {0x18, 0x9, 0x2, 0x0, r6}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xc, 0x9, 0x4}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x2f, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x20602, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r7, &(0x7f0000000440)={@val={0xa}, @void, @eth={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \b', 0xc, 0x11, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], {0x4f19, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x2, 0x8, 0x100, @void}}}}}}}}}, 0x46) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYRES64, @ANYRESDEC=r1], 0x7c}, 0x1, 0x0, 0x0, 0x4004000}, 0x4004) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x6}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x3c}, 0x1, 0x0, 0x0, 0x4044050}, 0x4000080) pselect6(0x0, 0x0, &(0x7f0000000300)={0x7, 0xf, 0x1ff, 0x71a, 0x0, 0x7, 0x7, 0x8001}, &(0x7f0000000340)={0x0, 0xfffffffffffffff8, 0x1, 0xfffffffffffeffff, 0xfffffffffffffffe, 0x5, 0x8000, 0xa08}, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={[0x2]}, 0x8}) 549.383423ms ago: executing program 3 (id=11914): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002200000", @ANYRES32=r1, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000001400212100000000000000000200"], 0x28}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 123.502551ms ago: executing program 0 (id=11915): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000070000000400000002"], 0x48) socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r0, &(0x7f0000000480), &(0x7f0000000580)=@tcp=r2}, 0x99) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000280), &(0x7f0000000400)=@udp=r1}, 0x20) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x82, 0x0) ioctl$TUNSETVNETBE(r5, 0x400454de, &(0x7f0000000180)=0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) syz_emit_ethernet(0x5e, &(0x7f0000002e40)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [{0x0, 0x2, "122b472e41e24b11f34b608816e5"}]}}}}}}, 0x0) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000080)={0x48, r4, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x16c}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x48}}, 0x20000000) 0s ago: executing program 3 (id=11916): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000003f000000000000000000000071120d000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) kernel console output (not intermixed with test programs): r than device syzkaller0 mtu (1514) ! [ 1528.999678][T23195] tipc: Resetting bearer [ 1529.011109][T23194] tipc: Resetting bearer [ 1529.036306][T23194] tipc: Disabling bearer [ 1529.269941][T23219] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10727'. [ 1529.281288][T23219] openvswitch: netlink: Flow actions attr not present in new flow. [ 1529.320934][T23221] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10727'. [ 1529.337741][T23221] openvswitch: netlink: Flow actions attr not present in new flow. [ 1529.730186][T23217] wg1 speed is unknown, defaulting to 1000 [ 1529.756471][T23238] sch_tbf: burst 2976 is lower than device lo mtu (11337746) ! [ 1529.818146][T23217] lo speed is unknown, defaulting to 1000 [ 1530.008023][T23245] netlink: 'syz.2.10733': attribute type 1 has an invalid length. [ 1530.096518][T23236] netlink: 'syz.1.10730': attribute type 2 has an invalid length. [ 1530.205000][T23253] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10734'. [ 1530.212931][T23245] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1530.237244][T23243] ÿÿÿÿÿÿ: renamed from dummy0 [ 1530.251166][T23249] vlan1: entered promiscuous mode [ 1530.260411][T23249] bond10: entered promiscuous mode [ 1530.270942][T23249] vlan1: entered allmulticast mode [ 1530.306502][T23249] bond10: entered allmulticast mode [ 1530.325383][T23251] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1530.357047][T23230] wg1 speed is unknown, defaulting to 1000 [ 1530.358907][T23245] tipc: Resetting bearer [ 1530.373139][T23230] lo speed is unknown, defaulting to 1000 [ 1530.587019][T23245] bond10: (slave bridge46): making interface the new active one [ 1530.594792][T23245] bridge46: entered promiscuous mode [ 1530.600653][T23245] bridge46: entered allmulticast mode [ 1530.607549][T23245] bond10: (slave bridge46): Enslaving as an active interface with an up link [ 1530.706940][T23268] netlink: 'syz.3.10741': attribute type 1 has an invalid length. [ 1530.775150][T23268] bond12: entered promiscuous mode [ 1530.782552][T23268] bond12: entered allmulticast mode [ 1530.788545][T23268] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1530.825425][T23270] macvlan5: entered promiscuous mode [ 1530.832365][T23270] macvlan5: entered allmulticast mode [ 1530.843764][T23270] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 1530.882581][T23272] vlan3: entered promiscuous mode [ 1531.489112][T23292] netlink: 80 bytes leftover after parsing attributes in process `syz.2.10745'. [ 1532.186325][T23310] netlink: 'syz.0.10753': attribute type 2 has an invalid length. [ 1532.326303][T23276] netlink: 'syz.3.10743': attribute type 2 has an invalid length. [ 1532.519850][ T2161] block nbd4: Possible stuck request ffff888026630000: control (read@0,1024B). Runtime 20 seconds [ 1532.532948][ T2161] block nbd4: Possible stuck request ffff888026630200: control (read@1024,1024B). Runtime 20 seconds [ 1532.544931][ T2161] block nbd4: Possible stuck request ffff888026630400: control (read@2048,1024B). Runtime 20 seconds [ 1532.566910][ T2161] block nbd4: Possible stuck request ffff888026630600: control (read@3072,1024B). Runtime 20 seconds [ 1532.587064][T23274] wg1 speed is unknown, defaulting to 1000 [ 1532.595021][T23274] lo speed is unknown, defaulting to 1000 [ 1533.524830][T23314] wg1 speed is unknown, defaulting to 1000 [ 1533.551028][T23324] wg1 speed is unknown, defaulting to 1000 [ 1533.558768][T23314] lo speed is unknown, defaulting to 1000 [ 1533.595411][T23324] lo speed is unknown, defaulting to 1000 [ 1534.072665][T23352] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10766'. [ 1534.476307][T23348] netlink: 'syz.3.10764': attribute type 2 has an invalid length. [ 1534.764608][T23347] wg1 speed is unknown, defaulting to 1000 [ 1534.787704][T23347] lo speed is unknown, defaulting to 1000 [ 1535.268465][T23374] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1535.369809][T23382] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10778'. [ 1535.748024][T23396] netlink: 'syz.1.10782': attribute type 3 has an invalid length. [ 1535.943553][T23405] netlink: 88 bytes leftover after parsing attributes in process `syz.2.10785'. [ 1535.955179][T23390] wg1 speed is unknown, defaulting to 1000 [ 1535.964408][T23390] lo speed is unknown, defaulting to 1000 [ 1536.387803][T23423] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10790'. [ 1536.738159][T23437] netlink: 'syz.1.10794': attribute type 5 has an invalid length. [ 1536.971870][T23419] wg1 speed is unknown, defaulting to 1000 [ 1536.994060][T23419] lo speed is unknown, defaulting to 1000 [ 1537.244291][T23453] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10797'. [ 1537.255025][T23454] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10798'. [ 1537.266904][T23435] netlink: 'syz.3.10793': attribute type 2 has an invalid length. [ 1537.275123][T23454] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10798'. [ 1537.359671][T23454] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10798'. [ 1537.369627][T23454] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10798'. [ 1537.471097][T23458] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 1537.516637][T23460] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10799'. [ 1537.542926][T23462] netlink: 'syz.1.10801': attribute type 2 has an invalid length. [ 1537.797647][T23433] wg1 speed is unknown, defaulting to 1000 [ 1537.815363][T23443] wg1 speed is unknown, defaulting to 1000 [ 1537.822347][T23433] lo speed is unknown, defaulting to 1000 [ 1537.853147][T23443] lo speed is unknown, defaulting to 1000 [ 1538.306744][ T2161] block nbd4: Possible stuck request ffff888026630000: control (read@0,1024B). Runtime 24 seconds [ 1538.317813][ T2161] block nbd4: Possible stuck request ffff888026630200: control (read@1024,1024B). Runtime 24 seconds [ 1538.329934][ T2161] block nbd4: Possible stuck request ffff888026630400: control (read@2048,1024B). Runtime 24 seconds [ 1538.341482][ T2161] block nbd4: Possible stuck request ffff888026630600: control (read@3072,1024B). Runtime 24 seconds [ 1538.597517][T23491] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 1539.168325][T23527] __nla_validate_parse: 10 callbacks suppressed [ 1539.168347][T23527] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10820'. [ 1539.308859][T23536] tipc: Resetting bearer [ 1539.496605][T23547] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10823'. [ 1539.557523][T23545] veth1_vlan: entered allmulticast mode [ 1539.593461][T23545] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 1539.801625][T23557] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1540.066883][T23567] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10833'. [ 1540.140213][T23571] netlink: 'syz.4.10834': attribute type 27 has an invalid length. [ 1540.187865][T23571] vlan1: left promiscuous mode [ 1540.197338][T23571] veth0_vlan: left promiscuous mode [ 1540.209614][T23571] vlan1: left allmulticast mode [ 1540.222477][T23571] veth0_vlan: left allmulticast mode [ 1540.262618][T23571] veth1_vlan: left allmulticast mode [ 1540.296375][T23571] macvlan0: left promiscuous mode [ 1540.301677][T23571] macvlan0: left allmulticast mode [ 1540.324066][T23571] ip6gretap1: left allmulticast mode [ 1540.352426][T23571] vlan0: left promiscuous mode [ 1540.371338][T23571] vlan2: left promiscuous mode [ 1540.387941][T23571] batadv0: left promiscuous mode [ 1540.408114][T23571] veth5: left promiscuous mode [ 1540.419425][T23571] mac80211_hwsim hwsim37 wlan0: left allmulticast mode [ 1540.439580][T23571] vlan3: left allmulticast mode [ 1540.444515][T23571] veth0_to_bond: left allmulticast mode [ 1540.467837][T23571] bond2: left promiscuous mode [ 1540.501447][T23571] bond4: left promiscuous mode [ 1540.517819][T23554] netlink: 'syz.2.10826': attribute type 2 has an invalid length. [ 1540.566603][T23549] wg1 speed is unknown, defaulting to 1000 [ 1540.595800][T23549] lo speed is unknown, defaulting to 1000 [ 1540.602424][T28702] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1540.612693][T28702] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1540.655201][T28702] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1540.685437][T28702] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1540.845524][T23596] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10842'. [ 1541.149990][T23614] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10848'. [ 1541.282217][T23607] wg1 speed is unknown, defaulting to 1000 [ 1541.308809][T23607] lo speed is unknown, defaulting to 1000 [ 1541.751231][T23632] netlink: 104 bytes leftover after parsing attributes in process `syz.1.10852'. [ 1541.967793][T23645] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10856'. [ 1542.063912][T23648] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10859'. [ 1542.079755][T23651] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10860'. [ 1542.344910][T23645] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10856'. [ 1542.571426][T23677] macsec1: entered promiscuous mode [ 1542.646655][T23677] team0: Device macsec1 is already an upper device of the team interface [ 1542.746715][ T2238] block nbd5: Possible stuck request ffff888026650000: control (read@0,1024B). Runtime 30 seconds [ 1542.757590][ T2238] block nbd5: Possible stuck request ffff888026650200: control (read@1024,1024B). Runtime 30 seconds [ 1542.778003][ T2238] block nbd5: Possible stuck request ffff888026650400: control (read@2048,1024B). Runtime 30 seconds [ 1542.789572][ T2238] block nbd5: Possible stuck request ffff888026650600: control (read@3072,1024B). Runtime 30 seconds [ 1543.539580][T23704] wg1 speed is unknown, defaulting to 1000 [ 1543.548144][T23704] lo speed is unknown, defaulting to 1000 [ 1543.931161][T23735] Cannot find set identified by id 65534 to match [ 1544.040296][ T2161] block nbd4: Possible stuck request ffff888026630000: control (read@0,1024B). Runtime 28 seconds [ 1544.051408][ T2161] block nbd4: Possible stuck request ffff888026630200: control (read@1024,1024B). Runtime 28 seconds [ 1544.063078][ T2161] block nbd4: Possible stuck request ffff888026630400: control (read@2048,1024B). Runtime 28 seconds [ 1544.074154][ T2161] block nbd4: Possible stuck request ffff888026630600: control (read@3072,1024B). Runtime 28 seconds [ 1544.245303][T23744] __nla_validate_parse: 3 callbacks suppressed [ 1544.245320][T23744] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10885'. [ 1544.279670][T23744] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10885'. [ 1544.320607][T23744] batadv2: entered promiscuous mode [ 1544.360280][T23744] batadv2: entered allmulticast mode [ 1544.376541][T23744] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 1544.699464][T23762] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10893'. [ 1544.766227][T23767] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10896'. [ 1544.896696][T23773] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10899'. [ 1544.957480][T23778] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10894'. [ 1545.453889][T23812] netlink: 104 bytes leftover after parsing attributes in process `syz.0.10908'. [ 1545.566170][T23819] xt_TCPMSS: Only works on TCP SYN packets [ 1545.673970][T23783] wg1 speed is unknown, defaulting to 1000 [ 1545.682221][T23783] lo speed is unknown, defaulting to 1000 [ 1545.963064][ T2238] block nbd3: Possible stuck request ffff888026590000: control (read@0,1024B). Runtime 180 seconds [ 1545.965145][ T1298] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 1545.982647][ T2238] block nbd3: Possible stuck request ffff888026590200: control (read@1024,1024B). Runtime 180 seconds [ 1545.982712][ T2238] block nbd3: Possible stuck request ffff888026590400: control (read@2048,1024B). Runtime 180 seconds [ 1545.982738][ T2238] block nbd3: Possible stuck request ffff888026590600: control (read@3072,1024B). Runtime 180 seconds [ 1546.042450][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.055204][ T1298] lec:lec_start_xmit: lec0:No lecd attached [ 1546.101400][T23837] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10917'. [ 1546.152718][T23800] wg1 speed is unknown, defaulting to 1000 [ 1546.177818][T23800] lo speed is unknown, defaulting to 1000 [ 1546.544807][T23850] vlan3: entered promiscuous mode [ 1546.751576][T23859] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10924'. [ 1546.795217][T23859] netlink: 'syz.0.10924': attribute type 6 has an invalid length. [ 1547.007401][T23870] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10926'. [ 1547.393121][T23893] netlink: 'syz.4.10929': attribute type 10 has an invalid length. [ 1547.402297][T23893] A link change request failed with some changes committed already. Interface ªªªªª9oïß+Œü4€ may have been left with an inconsistent configuration, please check. [ 1547.722880][T23905] netlink: 'syz.3.10935': attribute type 4 has an invalid length. [ 1547.731891][T23905] netlink: 'syz.3.10935': attribute type 8 has an invalid length. [ 1547.741180][T23905] netlink: 'syz.3.10935': attribute type 1 has an invalid length. [ 1547.756796][T23905] NCSI netlink: No device for ifindex 0 [ 1548.599440][T23932] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1548.606774][T23932] IPv6: NLM_F_CREATE should be set when creating new route [ 1549.517494][T23948] __nla_validate_parse: 4 callbacks suppressed [ 1549.517515][T23948] netlink: 712 bytes leftover after parsing attributes in process `syz.2.10949'. [ 1549.541219][T23948] netlink: 5504 bytes leftover after parsing attributes in process `syz.2.10949'. [ 1549.552028][T23948] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10949'. [ 1549.696631][T23961] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 1549.704789][T23961] netlink: 48 bytes leftover after parsing attributes in process `syz.3.10955'. [ 1549.793921][ T2161] block nbd4: Possible stuck request ffff888026630000: control (read@0,1024B). Runtime 32 seconds [ 1549.806021][ T2161] block nbd4: Possible stuck request ffff888026630200: control (read@1024,1024B). Runtime 32 seconds [ 1549.817442][ T2161] block nbd4: Possible stuck request ffff888026630400: control (read@2048,1024B). Runtime 32 seconds [ 1549.829607][ T2161] block nbd4: Possible stuck request ffff888026630600: control (read@3072,1024B). Runtime 32 seconds [ 1549.882876][T23968] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10958'. [ 1550.279519][ T5190] udevd[5190]: worker [16709] /devices/virtual/block/nbd3 timeout; kill it [ 1550.298911][T23987] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 1550.303502][ T5190] udevd[5190]: seq 68476 '/devices/virtual/block/nbd3' killed [ 1550.324013][T23987] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10963'. [ 1551.076326][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 1551.084401][ C0] lec:lec_tx_timeout: lec0 [ 1551.089342][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1551.106896][T23992] wg1 speed is unknown, defaulting to 1000 [ 1551.148872][T23992] lo speed is unknown, defaulting to 1000 [ 1551.341672][T24005] wg1 speed is unknown, defaulting to 1000 [ 1551.349776][T24005] lo speed is unknown, defaulting to 1000 [ 1551.543704][T24027] netlink: 188 bytes leftover after parsing attributes in process `syz.0.10976'. [ 1552.001360][T24046] netlink: 'syz.2.10981': attribute type 1 has an invalid length. [ 1552.038188][T24050] Set syz1 is full, maxelem 65536 reached [ 1552.169379][T24046] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1552.210412][T24040] syzkaller1: entered promiscuous mode [ 1552.219047][T24040] syzkaller1: entered allmulticast mode [ 1552.261824][T24046] tipc: Resetting bearer [ 1552.404628][T24062] nbd: must specify at least one socket [ 1552.641888][T24073] ieee802154 phy1 wpan1: encryption failed: -22 [ 1552.833667][T24077] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10991'. [ 1552.931958][T24081] xt_TCPMSS: Only works on TCP SYN packets [ 1553.062552][T24086] FAULT_INJECTION: forcing a failure. [ 1553.062552][T24086] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1553.101818][T24086] CPU: 0 UID: 0 PID: 24086 Comm: syz.4.10995 Not tainted syzkaller #0 PREEMPT(full) [ 1553.101844][T24086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1553.101856][T24086] Call Trace: [ 1553.101863][T24086] [ 1553.101871][T24086] dump_stack_lvl+0xe8/0x150 [ 1553.101903][T24086] should_fail_ex+0x412/0x560 [ 1553.101930][T24086] _copy_from_user+0x2d/0xb0 [ 1553.101955][T24086] netlink_setsockopt+0x1af/0x730 [ 1553.101978][T24086] ? __pfx_aa_sk_perm+0x10/0x10 [ 1553.102000][T24086] ? __pfx_netlink_setsockopt+0x10/0x10 [ 1553.102020][T24086] ? aa_sock_opt_perm+0xff/0x1a0 [ 1553.102043][T24086] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1553.102069][T24086] ? __pfx_netlink_setsockopt+0x10/0x10 [ 1553.102092][T24086] do_sock_setsockopt+0x17c/0x1b0 [ 1553.102121][T24086] __x64_sys_setsockopt+0x13d/0x1b0 [ 1553.102150][T24086] do_syscall_64+0x14d/0xf80 [ 1553.102174][T24086] ? trace_irq_disable+0x3b/0x150 [ 1553.102198][T24086] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1553.102216][T24086] ? clear_bhb_loop+0x40/0x90 [ 1553.102237][T24086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1553.102255][T24086] RIP: 0033:0x7f1e4e39c629 [ 1553.102272][T24086] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1553.102286][T24086] RSP: 002b:00007f1e4f2f5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1553.102306][T24086] RAX: ffffffffffffffda RBX: 00007f1e4e615fa0 RCX: 00007f1e4e39c629 [ 1553.102320][T24086] RDX: 000000000000000b RSI: 000000000000010e RDI: 0000000000000003 [ 1553.102330][T24086] RBP: 00007f1e4f2f5090 R08: 0000000000000004 R09: 0000000000000000 [ 1553.102342][T24086] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1553.102353][T24086] R13: 00007f1e4e616038 R14: 00007f1e4e615fa0 R15: 00007ffd83c4a428 [ 1553.102384][T24086] [ 1553.533051][T24096] FAULT_INJECTION: forcing a failure. [ 1553.533051][T24096] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1553.609976][T24096] CPU: 1 UID: 0 PID: 24096 Comm: syz.4.10998 Not tainted syzkaller #0 PREEMPT(full) [ 1553.610003][T24096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1553.610013][T24096] Call Trace: [ 1553.610021][T24096] [ 1553.610029][T24096] dump_stack_lvl+0xe8/0x150 [ 1553.610058][T24096] should_fail_ex+0x412/0x560 [ 1553.610083][T24096] _copy_from_user+0x2d/0xb0 [ 1553.610109][T24096] dev_ethtool+0xcf/0x1ae0 [ 1553.610139][T24096] ? kasan_quarantine_put+0xbb/0x1f0 [ 1553.610161][T24096] ? __pfx_dev_ethtool+0x10/0x10 [ 1553.610194][T24096] ? dev_load+0x21/0x1f0 [ 1553.610217][T24096] ? dev_load+0x21/0x1f0 [ 1553.610238][T24096] dev_ioctl+0x392/0x1150 [ 1553.610263][T24096] sock_do_ioctl+0x23e/0x320 [ 1553.610284][T24096] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1553.610301][T24096] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1553.610342][T24096] sock_ioctl+0x5c6/0x7f0 [ 1553.610362][T24096] ? __pfx_sock_ioctl+0x10/0x10 [ 1553.610381][T24096] ? __fget_files+0x2a/0x420 [ 1553.610403][T24096] ? __fget_files+0x3a0/0x420 [ 1553.610425][T24096] ? __fget_files+0x2a/0x420 [ 1553.610451][T24096] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1553.610471][T24096] ? __pfx_sock_ioctl+0x10/0x10 [ 1553.610489][T24096] __se_sys_ioctl+0xfc/0x170 [ 1553.610510][T24096] do_syscall_64+0x14d/0xf80 [ 1553.610534][T24096] ? trace_irq_disable+0x3b/0x150 [ 1553.610558][T24096] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1553.610576][T24096] ? clear_bhb_loop+0x40/0x90 [ 1553.610597][T24096] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1553.610614][T24096] RIP: 0033:0x7f1e4e39c629 [ 1553.610631][T24096] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1553.610646][T24096] RSP: 002b:00007f1e4f2f5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1553.610665][T24096] RAX: ffffffffffffffda RBX: 00007f1e4e615fa0 RCX: 00007f1e4e39c629 [ 1553.610678][T24096] RDX: 0000200000000040 RSI: 0000000000008946 RDI: 0000000000000006 [ 1553.610688][T24096] RBP: 00007f1e4f2f5090 R08: 0000000000000000 R09: 0000000000000000 [ 1553.610700][T24096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1553.610711][T24096] R13: 00007f1e4e616038 R14: 00007f1e4e615fa0 R15: 00007ffd83c4a428 [ 1553.610741][T24096] [ 1554.004351][T24108] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11000'. [ 1554.027893][T24109] netlink: 40 bytes leftover after parsing attributes in process `syz.3.10999'. [ 1554.240115][T24114] ieee802154 phy1 wpan1: encryption failed: -22 [ 1554.366354][T24117] nbd6: detected capacity change from 0 to 63 [ 1554.378786][ T5141] block nbd6: Receive control failed (result -104) [ 1554.582695][T24129] ipvlan2: entered promiscuous mode [ 1554.610104][T24129] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1554.636289][T24136] netlink: 'syz.4.11009': attribute type 15 has an invalid length. [ 1554.721243][T24142] __nla_validate_parse: 1 callbacks suppressed [ 1554.721262][T24142] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11014'. [ 1554.772016][T24142] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11014'. [ 1555.238092][T24167] FAULT_INJECTION: forcing a failure. [ 1555.238092][T24167] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1555.273337][T24167] CPU: 0 UID: 0 PID: 24167 Comm: syz.3.11025 Not tainted syzkaller #0 PREEMPT(full) [ 1555.273364][T24167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1555.273375][T24167] Call Trace: [ 1555.273384][T24167] [ 1555.273392][T24167] dump_stack_lvl+0xe8/0x150 [ 1555.273423][T24167] should_fail_ex+0x412/0x560 [ 1555.273448][T24167] _copy_to_user+0x31/0xb0 [ 1555.273474][T24167] simple_read_from_buffer+0xe1/0x170 [ 1555.273502][T24167] proc_fail_nth_read+0x1bb/0x230 [ 1555.273529][T24167] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1555.273555][T24167] ? rw_verify_area+0x2a6/0x4d0 [ 1555.273572][T24167] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1555.273597][T24167] vfs_read+0x20c/0xa70 [ 1555.273620][T24167] ? __pfx_vfs_read+0x10/0x10 [ 1555.273644][T24167] ? netlink_setsockopt+0x41b/0x730 [ 1555.273665][T24167] ? __pfx_aa_sk_perm+0x10/0x10 [ 1555.273694][T24167] ksys_read+0x150/0x270 [ 1555.273714][T24167] ? __pfx_ksys_read+0x10/0x10 [ 1555.273742][T24167] do_syscall_64+0x14d/0xf80 [ 1555.273766][T24167] ? trace_irq_disable+0x3b/0x150 [ 1555.273796][T24167] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1555.273814][T24167] ? clear_bhb_loop+0x40/0x90 [ 1555.273835][T24167] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1555.273852][T24167] RIP: 0033:0x7f2b81d5cece [ 1555.273874][T24167] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1555.273889][T24167] RSP: 002b:00007f2b82be0fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1555.273908][T24167] RAX: ffffffffffffffda RBX: 00007f2b82be16c0 RCX: 00007f2b81d5cece [ 1555.273921][T24167] RDX: 000000000000000f RSI: 00007f2b82be10a0 RDI: 0000000000000004 [ 1555.273932][T24167] RBP: 00007f2b82be1090 R08: 0000000000000000 R09: 0000000000000000 [ 1555.273943][T24167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1555.273954][T24167] R13: 00007f2b82016038 R14: 00007f2b82015fa0 R15: 00007fff19a31678 [ 1555.273983][T24167] [ 1555.574648][T24177] netlink: 44 bytes leftover after parsing attributes in process `syz.2.11028'. [ 1555.631501][ T2161] block nbd4: Possible stuck request ffff888026630000: control (read@0,1024B). Runtime 36 seconds [ 1555.643207][ T2161] block nbd4: Possible stuck request ffff888026630200: control (read@1024,1024B). Runtime 36 seconds [ 1555.657524][ T2161] block nbd4: Possible stuck request ffff888026630400: control (read@2048,1024B). Runtime 36 seconds [ 1555.669813][ T2161] block nbd4: Possible stuck request ffff888026630600: control (read@3072,1024B). Runtime 36 seconds [ 1555.742833][T24186] netlink: 'syz.1.11029': attribute type 1 has an invalid length. [ 1555.781473][T24189] netlink: 104 bytes leftover after parsing attributes in process `syz.0.11032'. [ 1556.105534][T24201] sctp: [Deprecated]: syz.1.11037 (pid 24201) Use of int in maxseg socket option. [ 1556.105534][T24201] Use struct sctp_assoc_value instead [ 1556.190133][T24204] FAULT_INJECTION: forcing a failure. [ 1556.190133][T24204] name failslab, interval 1, probability 0, space 0, times 0 [ 1556.211714][T24204] CPU: 0 UID: 0 PID: 24204 Comm: syz.4.11038 Not tainted syzkaller #0 PREEMPT(full) [ 1556.211741][T24204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1556.211753][T24204] Call Trace: [ 1556.211760][T24204] [ 1556.211768][T24204] dump_stack_lvl+0xe8/0x150 [ 1556.211798][T24204] should_fail_ex+0x412/0x560 [ 1556.211824][T24204] should_failslab+0xa8/0x100 [ 1556.211852][T24204] __kmalloc_cache_noprof+0x88/0x660 [ 1556.211872][T24204] ? dev_ethtool+0x132/0x1ae0 [ 1556.211900][T24204] dev_ethtool+0x132/0x1ae0 [ 1556.211930][T24204] ? kasan_quarantine_put+0xbb/0x1f0 [ 1556.211954][T24204] ? __pfx_dev_ethtool+0x10/0x10 [ 1556.211991][T24204] ? dev_load+0x21/0x1f0 [ 1556.212019][T24204] ? dev_load+0x21/0x1f0 [ 1556.212041][T24204] dev_ioctl+0x392/0x1150 [ 1556.212065][T24204] sock_do_ioctl+0x23e/0x320 [ 1556.212088][T24204] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1556.212104][T24204] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1556.212145][T24204] sock_ioctl+0x5c6/0x7f0 [ 1556.212169][T24204] ? __pfx_sock_ioctl+0x10/0x10 [ 1556.212188][T24204] ? __fget_files+0x2a/0x420 [ 1556.212210][T24204] ? __fget_files+0x3a0/0x420 [ 1556.212232][T24204] ? __fget_files+0x2a/0x420 [ 1556.212258][T24204] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1556.212279][T24204] ? __pfx_sock_ioctl+0x10/0x10 [ 1556.212297][T24204] __se_sys_ioctl+0xfc/0x170 [ 1556.212323][T24204] do_syscall_64+0x14d/0xf80 [ 1556.212346][T24204] ? trace_irq_disable+0x3b/0x150 [ 1556.212370][T24204] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1556.212388][T24204] ? clear_bhb_loop+0x40/0x90 [ 1556.212409][T24204] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1556.212427][T24204] RIP: 0033:0x7f1e4e39c629 [ 1556.212445][T24204] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1556.212460][T24204] RSP: 002b:00007f1e4f2f5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1556.212480][T24204] RAX: ffffffffffffffda RBX: 00007f1e4e615fa0 RCX: 00007f1e4e39c629 [ 1556.212500][T24204] RDX: 0000200000000040 RSI: 0000000000008946 RDI: 0000000000000006 [ 1556.212511][T24204] RBP: 00007f1e4f2f5090 R08: 0000000000000000 R09: 0000000000000000 [ 1556.212523][T24204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1556.212534][T24204] R13: 00007f1e4e616038 R14: 00007f1e4e615fa0 R15: 00007ffd83c4a428 [ 1556.212564][T24204] [ 1556.959650][T24219] macsec2: entered promiscuous mode [ 1556.965056][T24219] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 1557.162487][T24232] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11047'. [ 1557.215179][T24232] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11047'. [ 1557.469294][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 6380 ms [ 1557.477361][ C0] lec:lec_tx_timeout: lec0 [ 1557.529993][T24246] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1557.747276][T24258] netlink: 'syz.1.11057': attribute type 1 has an invalid length. [ 1557.755578][T24258] netlink: 96 bytes leftover after parsing attributes in process `syz.1.11057'. [ 1557.769922][T24258] netlink: 658 bytes leftover after parsing attributes in process `syz.1.11057'. [ 1557.786923][T24258] netlink: 1 bytes leftover after parsing attributes in process `syz.1.11057'. [ 1558.150184][T24285] veth25: entered promiscuous mode [ 1558.270922][T24296] tipc: Resetting bearer [ 1559.150943][T24326] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11079'. [ 1559.444719][T24339] bond0: option all_slaves_active: invalid value (99) [ 1559.919816][T24356] wg1 speed is unknown, defaulting to 1000 [ 1559.928307][T24356] lo speed is unknown, defaulting to 1000 [ 1560.053640][T24372] batadv_slave_0: entered promiscuous mode [ 1560.061349][T24372] __nla_validate_parse: 3 callbacks suppressed [ 1560.061377][T24372] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11099'. [ 1560.077944][T24374] xt_TCPMSS: Only works on TCP SYN packets [ 1560.096202][T24372] batadv_slave_0 (unregistering): left promiscuous mode [ 1560.670724][T24379] wg1 speed is unknown, defaulting to 1000 [ 1560.678704][T24379] lo speed is unknown, defaulting to 1000 [ 1560.788931][T24397] FAULT_INJECTION: forcing a failure. [ 1560.788931][T24397] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1560.809014][T24397] CPU: 1 UID: 0 PID: 24397 Comm: syz.0.11109 Not tainted syzkaller #0 PREEMPT(full) [ 1560.809040][T24397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1560.809051][T24397] Call Trace: [ 1560.809058][T24397] [ 1560.809067][T24397] dump_stack_lvl+0xe8/0x150 [ 1560.809097][T24397] should_fail_ex+0x412/0x560 [ 1560.809121][T24397] _copy_from_user+0x2d/0xb0 [ 1560.809145][T24397] ethtool_set_features+0x10b/0x300 [ 1560.809166][T24397] ? __pfx_ethtool_set_features+0x10/0x10 [ 1560.809182][T24397] ? apparmor_capable+0x137/0x1a0 [ 1560.809208][T24397] ? security_capable+0x7e/0x2c0 [ 1560.809234][T24397] dev_ethtool+0xfa5/0x1ae0 [ 1560.809266][T24397] ? __pfx_dev_ethtool+0x10/0x10 [ 1560.809303][T24397] ? dev_load+0x21/0x1f0 [ 1560.809325][T24397] dev_ioctl+0x392/0x1150 [ 1560.809349][T24397] sock_do_ioctl+0x23e/0x320 [ 1560.809376][T24397] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1560.809392][T24397] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1560.809436][T24397] sock_ioctl+0x5c6/0x7f0 [ 1560.809456][T24397] ? __pfx_sock_ioctl+0x10/0x10 [ 1560.809472][T24397] ? __fget_files+0x2a/0x420 [ 1560.809494][T24397] ? __fget_files+0x3a0/0x420 [ 1560.809515][T24397] ? __fget_files+0x2a/0x420 [ 1560.809541][T24397] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1560.809561][T24397] ? __pfx_sock_ioctl+0x10/0x10 [ 1560.809576][T24397] __se_sys_ioctl+0xfc/0x170 [ 1560.809597][T24397] do_syscall_64+0x14d/0xf80 [ 1560.809619][T24397] ? trace_irq_disable+0x3b/0x150 [ 1560.809642][T24397] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1560.809658][T24397] ? clear_bhb_loop+0x40/0x90 [ 1560.809679][T24397] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1560.809696][T24397] RIP: 0033:0x7f4ee0f9c629 [ 1560.809712][T24397] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1560.809726][T24397] RSP: 002b:00007f4ee1e4e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1560.809744][T24397] RAX: ffffffffffffffda RBX: 00007f4ee1215fa0 RCX: 00007f4ee0f9c629 [ 1560.809756][T24397] RDX: 0000200000000040 RSI: 0000000000008946 RDI: 0000000000000006 [ 1560.809766][T24397] RBP: 00007f4ee1e4e090 R08: 0000000000000000 R09: 0000000000000000 [ 1560.809776][T24397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1560.809785][T24397] R13: 00007f4ee1216038 R14: 00007f4ee1215fa0 R15: 00007fff4879a4a8 [ 1560.809813][T24397] [ 1561.069351][T24401] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11111'. [ 1561.084706][T24395] ieee802154 phy1 wpan1: encryption failed: -22 [ 1561.146774][T24408] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11111'. [ 1561.198207][T24401] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1561.205504][T24401] IPv6: NLM_F_CREATE should be set when creating new route [ 1561.317528][ T2161] block nbd4: Possible stuck request ffff888026630000: control (read@0,1024B). Runtime 40 seconds [ 1561.328323][ T2161] block nbd4: Possible stuck request ffff888026630200: control (read@1024,1024B). Runtime 40 seconds [ 1561.339367][ T2161] block nbd4: Possible stuck request ffff888026630400: control (read@2048,1024B). Runtime 40 seconds [ 1561.351334][ T2161] block nbd4: Possible stuck request ffff888026630600: control (read@3072,1024B). Runtime 40 seconds [ 1561.453917][T24416] netlink: 40 bytes leftover after parsing attributes in process `syz.0.11116'. [ 1562.044314][T24441] netlink: 56 bytes leftover after parsing attributes in process `syz.1.11122'. [ 1562.077791][T24443] ieee802154 phy1 wpan1: encryption failed: -22 [ 1562.146055][T24440] nbd7: detected capacity change from 0 to 63 [ 1562.153921][ T5141] block nbd7: Receive control failed (result -32) [ 1562.168477][T17183] block nbd7: Dead connection, failed to find a fallback [ 1562.188093][T17183] block nbd7: shutting down sockets [ 1562.195338][T17183] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1562.216349][T17183] Buffer I/O error on dev nbd7, logical block 0, async page read [ 1562.224242][T17183] I/O error, dev nbd7, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1562.234467][T17183] Buffer I/O error on dev nbd7, logical block 1, async page read [ 1562.242789][T17183] I/O error, dev nbd7, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1562.253084][T17183] Buffer I/O error on dev nbd7, logical block 2, async page read [ 1562.261080][T17183] I/O error, dev nbd7, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1562.270811][T17183] Buffer I/O error on dev nbd7, logical block 3, async page read [ 1562.278754][T17183] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1562.288437][T17183] Buffer I/O error on dev nbd7, logical block 0, async page read [ 1562.296345][T17183] I/O error, dev nbd7, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1562.316002][T17183] Buffer I/O error on dev nbd7, logical block 1, async page read [ 1562.326118][T17183] I/O error, dev nbd7, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1562.345064][T17183] Buffer I/O error on dev nbd7, logical block 2, async page read [ 1562.354565][T17183] I/O error, dev nbd7, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1562.389890][T17183] Buffer I/O error on dev nbd7, logical block 3, async page read [ 1562.398193][T17183] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1562.407908][T17183] Buffer I/O error on dev nbd7, logical block 0, async page read [ 1562.416750][T17183] I/O error, dev nbd7, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1562.427268][T17183] Buffer I/O error on dev nbd7, logical block 1, async page read [ 1562.435735][T17183] ldm_validate_partition_table(): Disk read failed. [ 1562.445583][T17183] Dev nbd7: unable to read RDB block 0 [ 1562.481236][T17183] nbd7: unable to read partition table [ 1562.485540][T24452] xt_TCPMSS: Only works on TCP SYN packets [ 1562.508000][T17183] ldm_validate_partition_table(): Disk read failed. [ 1562.537735][T17183] Dev nbd7: unable to read RDB block 0 [ 1562.543865][T17183] nbd7: unable to read partition table [ 1562.556898][T24454] No such timeout policy "syz0" [ 1562.631118][T24427] wg1 speed is unknown, defaulting to 1000 [ 1562.654424][T24427] lo speed is unknown, defaulting to 1000 [ 1562.864819][T24476] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11135'. [ 1562.906553][T24476] ieee802154 phy1 wpan1: encryption failed: -22 [ 1563.172834][T24481] veth29: entered promiscuous mode [ 1563.197971][T24484] FAULT_INJECTION: forcing a failure. [ 1563.197971][T24484] name failslab, interval 1, probability 0, space 0, times 0 [ 1563.215449][T24484] CPU: 1 UID: 0 PID: 24484 Comm: syz.3.11138 Not tainted syzkaller #0 PREEMPT(full) [ 1563.215475][T24484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1563.215486][T24484] Call Trace: [ 1563.215495][T24484] [ 1563.215503][T24484] dump_stack_lvl+0xe8/0x150 [ 1563.215532][T24484] should_fail_ex+0x412/0x560 [ 1563.215563][T24484] should_failslab+0xa8/0x100 [ 1563.215586][T24484] __kmalloc_node_track_caller_noprof+0xeb/0x7b0 [ 1563.215606][T24484] ? __kasan_kmalloc+0x93/0xb0 [ 1563.215625][T24484] ? __request_module+0x2ec/0x660 [ 1563.215647][T24484] ? __kmalloc_cache_noprof+0x31c/0x660 [ 1563.215669][T24484] kstrdup+0x42/0x100 [ 1563.215693][T24484] __request_module+0x2ec/0x660 [ 1563.215715][T24484] ? __pfx___request_module+0x10/0x10 [ 1563.215735][T24484] ? kasan_quarantine_put+0xbb/0x1f0 [ 1563.215756][T24484] ? __pfx___request_module+0x10/0x10 [ 1563.215781][T24484] ? apparmor_capable+0x137/0x1a0 [ 1563.215814][T24484] ? dev_load+0x21/0x1f0 [ 1563.215834][T24484] dev_ioctl+0x384/0x1150 [ 1563.215862][T24484] sock_do_ioctl+0x23e/0x320 [ 1563.215882][T24484] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1563.215897][T24484] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1563.215933][T24484] sock_ioctl+0x5c6/0x7f0 [ 1563.215951][T24484] ? __pfx_sock_ioctl+0x10/0x10 [ 1563.215968][T24484] ? __fget_files+0x2a/0x420 [ 1563.215989][T24484] ? __fget_files+0x3a0/0x420 [ 1563.216010][T24484] ? __fget_files+0x2a/0x420 [ 1563.216035][T24484] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1563.216056][T24484] ? __pfx_sock_ioctl+0x10/0x10 [ 1563.216073][T24484] __se_sys_ioctl+0xfc/0x170 [ 1563.216096][T24484] do_syscall_64+0x14d/0xf80 [ 1563.216119][T24484] ? trace_irq_disable+0x3b/0x150 [ 1563.216143][T24484] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1563.216160][T24484] ? clear_bhb_loop+0x40/0x90 [ 1563.216182][T24484] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1563.216199][T24484] RIP: 0033:0x7f2b81d9c629 [ 1563.216216][T24484] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1563.216231][T24484] RSP: 002b:00007f2b82be1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1563.216250][T24484] RAX: ffffffffffffffda RBX: 00007f2b82015fa0 RCX: 00007f2b81d9c629 [ 1563.216263][T24484] RDX: 0000200000000040 RSI: 0000000000008946 RDI: 0000000000000006 [ 1563.216279][T24484] RBP: 00007f2b82be1090 R08: 0000000000000000 R09: 0000000000000000 [ 1563.216290][T24484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1563.216306][T24484] R13: 00007f2b82016038 R14: 00007f2b82015fa0 R15: 00007fff19a31678 [ 1563.216335][T24484] [ 1563.611560][T24471] wg1 speed is unknown, defaulting to 1000 [ 1563.621234][T24471] lo speed is unknown, defaulting to 1000 [ 1563.741419][T24498] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11144'. [ 1563.795421][T24505] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11144'. [ 1563.938381][T24514] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11147'. [ 1563.972642][T24514] ieee802154 phy1 wpan1: encryption failed: -22 [ 1564.963233][T24544] netlink: 'syz.1.11155': attribute type 5 has an invalid length. [ 1565.216763][T24552] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11159'. [ 1565.266734][T24552] ieee802154 phy1 wpan1: encryption failed: -22 [ 1565.297989][T24556] netlink: 36 bytes leftover after parsing attributes in process `syz.2.11161'. [ 1565.349964][T24556] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11161'. [ 1565.387606][T24556] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11161'. [ 1565.437393][T24556] tipc: Enabling of bearer rejected, failed to enable media [ 1565.540709][T24567] veth0: entered promiscuous mode [ 1565.598620][T24567] veth0: left promiscuous mode [ 1565.720408][T24575] vlan3: entered promiscuous mode [ 1565.720475][T24579] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11169'. [ 1565.756440][T24579] netlink: 36 bytes leftover after parsing attributes in process `syz.4.11169'. [ 1565.856447][T24579] FAULT_INJECTION: forcing a failure. [ 1565.856447][T24579] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1565.879699][T24579] CPU: 0 UID: 0 PID: 24579 Comm: syz.4.11169 Not tainted syzkaller #0 PREEMPT(full) [ 1565.879724][T24579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1565.879735][T24579] Call Trace: [ 1565.879743][T24579] [ 1565.879752][T24579] dump_stack_lvl+0xe8/0x150 [ 1565.879780][T24579] should_fail_ex+0x412/0x560 [ 1565.879806][T24579] prepare_alloc_pages+0x22a/0x650 [ 1565.879835][T24579] __alloc_frozen_pages_noprof+0x12f/0x380 [ 1565.879861][T24579] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1565.879890][T24579] ? __pfx_policy_nodemask+0x10/0x10 [ 1565.879922][T24579] alloc_pages_mpol+0x232/0x4a0 [ 1565.879949][T24579] vma_alloc_folio_noprof+0xea/0x210 [ 1565.879973][T24579] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1565.880005][T24579] do_wp_page+0x1204/0x5a00 [ 1565.880042][T24579] ? __pfx_css_rstat_updated+0x10/0x10 [ 1565.880075][T24579] ? __pfx_do_wp_page+0x10/0x10 [ 1565.880096][T24579] ? do_raw_spin_lock+0x12b/0x2f0 [ 1565.880118][T24579] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1565.880146][T24579] handle_mm_fault+0x1520/0x3310 [ 1565.880185][T24579] ? handle_mm_fault+0xee/0x3310 [ 1565.880216][T24579] ? __pfx_handle_mm_fault+0x10/0x10 [ 1565.880253][T24579] ? __pfx___up_read+0x10/0x10 [ 1565.880276][T24579] ? lock_mm_and_find_vma+0xa7/0x340 [ 1565.880297][T24579] do_user_addr_fault+0x75b/0x1340 [ 1565.880342][T24579] exc_page_fault+0x6a/0xc0 [ 1565.880368][T24579] asm_exc_page_fault+0x26/0x30 [ 1565.880386][T24579] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 1565.880407][T24579] Code: cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 1565.880423][T24579] RSP: 0018:ffffc9000495fc78 EFLAGS: 00050206 [ 1565.880439][T24579] RAX: ffffffff84ae1c01 RBX: 0000000000100005 RCX: 00000000000bd185 [ 1565.880452][T24579] RDX: 0000000000000000 RSI: ffff8880a2642e80 RDI: 0000200000043000 [ 1565.880464][T24579] RBP: dffffc0000000000 R08: 0000000000000004 R09: 0000000000000005 [ 1565.880475][T24579] R10: dffffc0000000000 R11: ffffed10144e0000 R12: 0000200000100185 [ 1565.880488][T24579] R13: 00007ffffffff000 R14: ffff8880a2600000 R15: 0000200000000180 [ 1565.880508][T24579] ? _copy_from_user+0x91/0xb0 [ 1565.880622][T24579] _copy_to_user+0x8a/0xb0 [ 1565.880648][T24579] map_get_next_key+0x4c0/0x620 [ 1565.880677][T24579] ? map_get_next_key+0x286/0x620 [ 1565.880703][T24579] __sys_bpf+0x768/0x950 [ 1565.880726][T24579] ? __pfx___sys_bpf+0x10/0x10 [ 1565.880761][T24579] ? ksys_write+0x242/0x270 [ 1565.880779][T24579] ? __pfx_ksys_write+0x10/0x10 [ 1565.880798][T24579] __x64_sys_bpf+0x7c/0x90 [ 1565.880818][T24579] do_syscall_64+0x14d/0xf80 [ 1565.880839][T24579] ? trace_irq_disable+0x3b/0x150 [ 1565.880859][T24579] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1565.880876][T24579] ? clear_bhb_loop+0x40/0x90 [ 1565.880899][T24579] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1565.880916][T24579] RIP: 0033:0x7f1e4e39c629 [ 1565.880933][T24579] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1565.880948][T24579] RSP: 002b:00007f1e4f2f5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1565.880966][T24579] RAX: ffffffffffffffda RBX: 00007f1e4e615fa0 RCX: 00007f1e4e39c629 [ 1565.880979][T24579] RDX: 0000000000000020 RSI: 0000200000000240 RDI: 0000000000000004 [ 1565.880991][T24579] RBP: 00007f1e4f2f5090 R08: 0000000000000000 R09: 0000000000000000 [ 1565.881002][T24579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1565.881012][T24579] R13: 00007f1e4e616038 R14: 00007f1e4e615fa0 R15: 00007ffd83c4a428 [ 1565.881038][T24579] [ 1566.259458][T24586] netlink: 'syz.0.11170': attribute type 3 has an invalid length. [ 1566.692605][T24600] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11173'. [ 1566.714943][T24600] ieee802154 phy1 wpan1: encryption failed: -22 [ 1567.065186][T24617] netlink: 'syz.1.11177': attribute type 1 has an invalid length. [ 1567.080782][ T2161] block nbd4: Possible stuck request ffff888026630000: control (read@0,1024B). Runtime 44 seconds [ 1567.091899][ T2161] block nbd4: Possible stuck request ffff888026630200: control (read@1024,1024B). Runtime 44 seconds [ 1567.105199][ T2161] block nbd4: Possible stuck request ffff888026630400: control (read@2048,1024B). Runtime 44 seconds [ 1567.116384][ T2161] block nbd4: Possible stuck request ffff888026630600: control (read@3072,1024B). Runtime 44 seconds [ 1567.125666][T24617] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1567.216850][T24617] vlan5: entered promiscuous mode [ 1567.235568][T24617] bond7: entered promiscuous mode [ 1567.255498][T24617] vlan5: entered allmulticast mode [ 1567.274011][T24617] bond7: entered allmulticast mode [ 1567.303639][T24627] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11180'. [ 1567.345158][T24617] syzkaller0: entered promiscuous mode [ 1567.351129][T24617] syzkaller0: entered allmulticast mode [ 1567.465252][T24626] bond7: (slave bridge28): making interface the new active one [ 1567.473376][T24633] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11181'. [ 1567.487251][T24626] bridge28: entered promiscuous mode [ 1567.503613][T24626] bridge28: entered allmulticast mode [ 1567.511589][T24626] bond7: (slave bridge28): Enslaving as an active interface with an up link [ 1567.669352][T24641] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11185'. [ 1567.702016][T24641] ieee802154 phy1 wpan1: encryption failed: -22 [ 1568.414435][T24681] syzkaller0: entered promiscuous mode [ 1568.435971][T24681] syzkaller0: entered allmulticast mode [ 1568.743201][T24690] ieee802154 phy1 wpan1: encryption failed: -22 [ 1568.895026][T24658] wg1 speed is unknown, defaulting to 1000 [ 1568.928684][T24658] lo speed is unknown, defaulting to 1000 [ 1569.518056][T24722] ieee802154 phy1 wpan1: encryption failed: -22 [ 1570.432557][T24762] __nla_validate_parse: 6 callbacks suppressed [ 1570.432579][T24762] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11224'. [ 1570.501758][T24764] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11225'. [ 1570.546757][T24764] ieee802154 phy1 wpan1: encryption failed: -22 [ 1571.023045][T24748] wg1 speed is unknown, defaulting to 1000 [ 1571.040521][T24748] lo speed is unknown, defaulting to 1000 [ 1571.188382][T24781] netlink: 'syz.0.11230': attribute type 1 has an invalid length. [ 1571.584255][T24794] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11233'. [ 1572.826893][ T2161] block nbd4: Possible stuck request ffff888026630000: control (read@0,1024B). Runtime 48 seconds [ 1572.836171][ T2238] block nbd5: Possible stuck request ffff888026650000: control (read@0,1024B). Runtime 60 seconds [ 1572.837622][ T2161] block nbd4: Possible stuck request ffff888026630200: control (read@1024,1024B). Runtime 48 seconds [ 1572.848847][ T2238] block nbd5: Possible stuck request ffff888026650200: control (read@1024,1024B). Runtime 60 seconds [ 1572.859813][ T2161] block nbd4: Possible stuck request ffff888026630400: control (read@2048,1024B). Runtime 48 seconds [ 1572.870551][ T2238] block nbd5: Possible stuck request ffff888026650400: control (read@2048,1024B). Runtime 60 seconds [ 1572.881104][ T2161] block nbd4: Possible stuck request ffff888026630600: control (read@3072,1024B). Runtime 48 seconds [ 1572.903830][ T2238] block nbd5: Possible stuck request ffff888026650600: control (read@3072,1024B). Runtime 60 seconds [ 1573.136155][ T5190] udevd[5190]: worker [18802] /devices/virtual/block/nbd4 is taking a long time [ 1573.145565][ T5190] udevd[5190]: worker [18801] /devices/virtual/block/nbd5 is taking a long time [ 1573.363065][T24778] veth31: entered promiscuous mode [ 1573.394177][T24781] 8021q: adding VLAN 0 to HW filter on device bond16 [ 1573.434510][T24783] vlan3: entered promiscuous mode [ 1573.439667][T24783] bond16: entered promiscuous mode [ 1573.444919][T24783] vlan3: entered allmulticast mode [ 1573.450146][T24783] bond16: entered allmulticast mode [ 1573.483813][T24793] bond16: (slave bridge28): making interface the new active one [ 1573.491968][T24793] bridge28: entered promiscuous mode [ 1573.498870][T24793] bridge28: entered allmulticast mode [ 1573.505549][T24793] bond16: (slave bridge28): Enslaving as an active interface with an up link [ 1573.516786][T24794] 8021q: VLANs not supported on nlmon0 [ 1573.681793][T24808] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11236'. [ 1573.704339][T24811] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11239'. [ 1573.724420][T24808] ieee802154 phy1 wpan1: encryption failed: -22 [ 1573.792084][T24815] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11240'. [ 1573.854410][T24815] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1573.861712][T24815] IPv6: NLM_F_CREATE should be set when creating new route [ 1574.085342][T24823] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11243'. [ 1574.137837][T24824] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11243'. [ 1574.259852][T24826] netlink: 36 bytes leftover after parsing attributes in process `syz.3.11245'. [ 1574.299492][T24826] FAULT_INJECTION: forcing a failure. [ 1574.299492][T24826] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1574.356743][T24826] CPU: 1 UID: 0 PID: 24826 Comm: syz.3.11245 Not tainted syzkaller #0 PREEMPT(full) [ 1574.356770][T24826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1574.356782][T24826] Call Trace: [ 1574.356789][T24826] [ 1574.356797][T24826] dump_stack_lvl+0xe8/0x150 [ 1574.356828][T24826] should_fail_ex+0x412/0x560 [ 1574.356854][T24826] prepare_alloc_pages+0x22a/0x650 [ 1574.356882][T24826] __alloc_frozen_pages_noprof+0x12f/0x380 [ 1574.356908][T24826] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1574.356933][T24826] ? __pfx_policy_nodemask+0x10/0x10 [ 1574.356964][T24826] alloc_pages_mpol+0x232/0x4a0 [ 1574.356991][T24826] vma_alloc_folio_noprof+0xea/0x210 [ 1574.357022][T24826] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1574.357054][T24826] do_wp_page+0x1204/0x5a00 [ 1574.357084][T24826] ? __pfx_css_rstat_updated+0x10/0x10 [ 1574.357115][T24826] ? __pfx_do_wp_page+0x10/0x10 [ 1574.357136][T24826] ? do_raw_spin_lock+0x12b/0x2f0 [ 1574.357157][T24826] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1574.357186][T24826] handle_mm_fault+0x1520/0x3310 [ 1574.357224][T24826] ? handle_mm_fault+0xee/0x3310 [ 1574.357255][T24826] ? __pfx_handle_mm_fault+0x10/0x10 [ 1574.357293][T24826] ? __pfx___up_read+0x10/0x10 [ 1574.357316][T24826] ? lock_mm_and_find_vma+0xa7/0x340 [ 1574.357338][T24826] do_user_addr_fault+0x75b/0x1340 [ 1574.357377][T24826] exc_page_fault+0x6a/0xc0 [ 1574.357403][T24826] asm_exc_page_fault+0x26/0x30 [ 1574.357420][T24826] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 1574.357441][T24826] Code: cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 1574.357457][T24826] RSP: 0018:ffffc90005db7c78 EFLAGS: 00050206 [ 1574.357473][T24826] RAX: ffffffff84ae1c01 RBX: 0000000000100005 RCX: 00000000000ba185 [ 1574.357486][T24826] RDX: 0000000000000000 RSI: ffff888095445e80 RDI: 0000200000046000 [ 1574.357497][T24826] RBP: dffffc0000000000 R08: 0000000000000004 R09: 0000000000000005 [ 1574.357508][T24826] R10: dffffc0000000000 R11: ffffed1012aa0000 R12: 0000200000100185 [ 1574.357520][T24826] R13: 00007ffffffff000 R14: ffff888095400000 R15: 0000200000000180 [ 1574.357540][T24826] ? _copy_from_user+0x91/0xb0 [ 1574.357570][T24826] _copy_to_user+0x8a/0xb0 [ 1574.357594][T24826] map_get_next_key+0x4c0/0x620 [ 1574.357620][T24826] ? map_get_next_key+0x286/0x620 [ 1574.357648][T24826] __sys_bpf+0x768/0x950 [ 1574.357675][T24826] ? __pfx___sys_bpf+0x10/0x10 [ 1574.357715][T24826] ? ksys_write+0x242/0x270 [ 1574.357736][T24826] ? __pfx_ksys_write+0x10/0x10 [ 1574.357758][T24826] __x64_sys_bpf+0x7c/0x90 [ 1574.357781][T24826] do_syscall_64+0x14d/0xf80 [ 1574.357805][T24826] ? trace_irq_disable+0x3b/0x150 [ 1574.357828][T24826] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1574.357845][T24826] ? clear_bhb_loop+0x40/0x90 [ 1574.357867][T24826] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1574.357884][T24826] RIP: 0033:0x7f2b81d9c629 [ 1574.357901][T24826] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1574.357916][T24826] RSP: 002b:00007f2b82be1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1574.357934][T24826] RAX: ffffffffffffffda RBX: 00007f2b82015fa0 RCX: 00007f2b81d9c629 [ 1574.357947][T24826] RDX: 0000000000000020 RSI: 0000200000000240 RDI: 0000000000000004 [ 1574.357959][T24826] RBP: 00007f2b82be1090 R08: 0000000000000000 R09: 0000000000000000 [ 1574.357971][T24826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1574.357981][T24826] R13: 00007f2b82016038 R14: 00007f2b82015fa0 R15: 00007fff19a31678 [ 1574.358019][T24826] [ 1575.013532][T24847] netlink: 'syz.2.11253': attribute type 7 has an invalid length. [ 1575.033646][T24849] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11251'. [ 1575.110012][T24855] ieee802154 phy1 wpan1: encryption failed: -22 [ 1575.349820][T24864] veth1_vlan: left allmulticast mode [ 1575.628543][T24866] veth31: entered promiscuous mode [ 1575.927848][T24893] __nla_validate_parse: 3 callbacks suppressed [ 1575.927868][T24893] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11268'. [ 1575.963664][T24902] tipc: Enabling of bearer rejected, failed to enable media [ 1576.000470][T24904] ieee802154 phy1 wpan1: encryption failed: -22 [ 1576.038755][ T2238] block nbd3: Possible stuck request ffff888026590000: control (read@0,1024B). Runtime 210 seconds [ 1576.056497][ T2238] block nbd3: Possible stuck request ffff888026590200: control (read@1024,1024B). Runtime 210 seconds [ 1576.067945][ T2238] block nbd3: Possible stuck request ffff888026590400: control (read@2048,1024B). Runtime 210 seconds [ 1576.086003][ T2238] block nbd3: Possible stuck request ffff888026590600: control (read@3072,1024B). Runtime 210 seconds [ 1576.171785][T24912] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11271'. [ 1576.222523][T24918] netlink: 'syz.3.11269': attribute type 1 has an invalid length. [ 1576.234462][T24912] 8021q: VLANs not supported on nlmon0 [ 1576.673143][T24933] netlink: 32 bytes leftover after parsing attributes in process `syz.1.11279'. [ 1576.683237][T24933] netlink: 32 bytes leftover after parsing attributes in process `syz.1.11279'. [ 1576.833847][T24943] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11282'. [ 1576.845596][T24943] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11282'. [ 1576.862019][T24945] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11283'. [ 1576.907933][T24945] ieee802154 phy1 wpan1: encryption failed: -22 [ 1576.939514][T24943] gretap0: entered promiscuous mode [ 1576.955962][T24943] gretap0: left promiscuous mode [ 1577.109597][T24959] FAULT_INJECTION: forcing a failure. [ 1577.109597][T24959] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1577.123975][T24959] CPU: 0 UID: 0 PID: 24959 Comm: syz.3.11287 Not tainted syzkaller #0 PREEMPT(full) [ 1577.123996][T24959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1577.124007][T24959] Call Trace: [ 1577.124014][T24959] [ 1577.124020][T24959] dump_stack_lvl+0xe8/0x150 [ 1577.124047][T24959] should_fail_ex+0x412/0x560 [ 1577.124072][T24959] _copy_from_user+0x2d/0xb0 [ 1577.124096][T24959] generic_map_update_batch+0x648/0x990 [ 1577.124128][T24959] ? __pfx_generic_map_update_batch+0x10/0x10 [ 1577.124149][T24959] ? __fget_files+0x2a/0x420 [ 1577.124179][T24959] ? __pfx_generic_map_update_batch+0x10/0x10 [ 1577.124199][T24959] bpf_map_do_batch+0x39b/0x630 [ 1577.124221][T24959] __sys_bpf+0x7c1/0x950 [ 1577.124245][T24959] ? __pfx___sys_bpf+0x10/0x10 [ 1577.124282][T24959] ? ksys_write+0x242/0x270 [ 1577.124303][T24959] ? __pfx_ksys_write+0x10/0x10 [ 1577.124329][T24959] __x64_sys_bpf+0x7c/0x90 [ 1577.124353][T24959] do_syscall_64+0x14d/0xf80 [ 1577.124377][T24959] ? trace_irq_disable+0x3b/0x150 [ 1577.124397][T24959] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1577.124414][T24959] ? clear_bhb_loop+0x40/0x90 [ 1577.124431][T24959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1577.124448][T24959] RIP: 0033:0x7f2b81d9c629 [ 1577.124465][T24959] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1577.124480][T24959] RSP: 002b:00007f2b82be1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1577.124498][T24959] RAX: ffffffffffffffda RBX: 00007f2b82015fa0 RCX: 00007f2b81d9c629 [ 1577.124511][T24959] RDX: 0000000000000038 RSI: 00002000000000c0 RDI: 000000000000001a [ 1577.124523][T24959] RBP: 00007f2b82be1090 R08: 0000000000000000 R09: 0000000000000000 [ 1577.124534][T24959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1577.124543][T24959] R13: 00007f2b82016038 R14: 00007f2b82015fa0 R15: 00007fff19a31678 [ 1577.124570][T24959] [ 1577.424193][T24946] wg1 speed is unknown, defaulting to 1000 [ 1577.431950][T24946] lo speed is unknown, defaulting to 1000 [ 1577.538642][T24967] netlink: 32 bytes leftover after parsing attributes in process `syz.0.11291'. [ 1577.569923][T24969] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11292'. [ 1577.579142][T24967] netlink: 32 bytes leftover after parsing attributes in process `syz.0.11291'. [ 1578.588497][ T2161] block nbd4: Possible stuck request ffff888026630000: control (read@0,1024B). Runtime 52 seconds [ 1578.599405][ T2161] block nbd4: Possible stuck request ffff888026630200: control (read@1024,1024B). Runtime 52 seconds [ 1578.610453][ T2161] block nbd4: Possible stuck request ffff888026630400: control (read@2048,1024B). Runtime 52 seconds [ 1578.624820][ T2161] block nbd4: Possible stuck request ffff888026630600: control (read@3072,1024B). Runtime 52 seconds [ 1578.742046][T25047] netlink: 'syz.3.11323': attribute type 1 has an invalid length. [ 1578.773707][T25047] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1578.792150][T25047] vlan3: entered promiscuous mode [ 1578.798426][T25047] bond13: entered promiscuous mode [ 1578.803797][T25047] vlan3: entered allmulticast mode [ 1578.812827][T25047] bond13: entered allmulticast mode [ 1578.829076][T25047] syzkaller0: entered promiscuous mode [ 1578.834664][T25047] syzkaller0: entered allmulticast mode [ 1578.856871][T25047] bond13: (slave bridge29): making interface the new active one [ 1578.864639][T25047] bridge29: entered promiscuous mode [ 1578.874082][T25047] bridge29: entered allmulticast mode [ 1578.881513][T25047] bond13: (slave bridge29): Enslaving as an active interface with an up link [ 1579.655988][T25101] xt_TCPMSS: Only works on TCP SYN packets [ 1579.981790][T25122] tap0: tun_chr_ioctl cmd 1074025692 [ 1580.316937][T25134] nbd8: detected capacity change from 0 to 63 [ 1580.330698][T24583] block nbd8: Send control failed (result -32) [ 1580.331725][T25139] macvtap1: entered promiscuous mode [ 1580.337194][ T5141] block nbd8: Receive control failed (result -32) [ 1580.343800][T25139] bridge0: port 3(macvtap1) entered blocking state [ 1580.350966][T24583] block nbd8: Request send failed, requeueing [ 1580.366872][T25139] bridge0: port 3(macvtap1) entered disabled state [ 1580.376337][ T2161] block nbd8: Dead connection, failed to find a fallback [ 1580.386443][T25139] macvtap1: entered allmulticast mode [ 1580.386725][ T2161] block nbd8: shutting down sockets [ 1580.397637][T25139] bridge0: entered allmulticast mode [ 1580.402211][T25139] macvtap1: left allmulticast mode [ 1580.402935][ T2161] blk_print_req_error: 138 callbacks suppressed [ 1580.402948][ T2161] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1580.425417][ T2161] buffer_io_error: 138 callbacks suppressed [ 1580.425436][ T2161] Buffer I/O error on dev nbd8, logical block 0, async page read [ 1580.441146][T24583] I/O error, dev nbd8, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1580.444949][T25139] bridge0: left allmulticast mode [ 1580.451588][T24583] Buffer I/O error on dev nbd8, logical block 1, async page read [ 1580.464169][T24583] I/O error, dev nbd8, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1580.473774][T24583] Buffer I/O error on dev nbd8, logical block 2, async page read [ 1580.482334][T24583] I/O error, dev nbd8, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1580.492501][T24583] Buffer I/O error on dev nbd8, logical block 3, async page read [ 1580.505358][T24583] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1580.517757][T24583] Buffer I/O error on dev nbd8, logical block 0, async page read [ 1580.525569][T24583] I/O error, dev nbd8, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1580.541135][T24583] Buffer I/O error on dev nbd8, logical block 1, async page read [ 1580.553646][T24583] I/O error, dev nbd8, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1580.581263][T24583] Buffer I/O error on dev nbd8, logical block 2, async page read [ 1580.589675][T24583] I/O error, dev nbd8, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1580.600276][T24583] Buffer I/O error on dev nbd8, logical block 3, async page read [ 1580.647027][T24583] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1580.674971][T24583] Buffer I/O error on dev nbd8, logical block 0, async page read [ 1580.687553][T24583] I/O error, dev nbd8, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1580.697546][T24583] Buffer I/O error on dev nbd8, logical block 1, async page read [ 1580.706539][T24583] ldm_validate_partition_table(): Disk read failed. [ 1580.713695][T24583] Dev nbd8: unable to read RDB block 0 [ 1580.720961][T24583] nbd8: unable to read partition table [ 1580.750628][T24583] ldm_validate_partition_table(): Disk read failed. [ 1580.768161][T24583] Dev nbd8: unable to read RDB block 0 [ 1580.780685][T24583] nbd8: unable to read partition table [ 1580.802413][T25157] 8021q: VLANs not supported on nlmon0 [ 1581.322103][T25192] wg1 speed is unknown, defaulting to 1000 [ 1581.329321][T25192] lo speed is unknown, defaulting to 1000 [ 1581.545609][T25200] netlink: 'syz.3.11375': attribute type 9 has an invalid length. [ 1581.689440][T25200] __nla_validate_parse: 48 callbacks suppressed [ 1581.689461][T25200] netlink: 44 bytes leftover after parsing attributes in process `syz.3.11375'. [ 1581.845468][T25212] FAULT_INJECTION: forcing a failure. [ 1581.845468][T25212] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1581.878371][T25212] CPU: 1 UID: 0 PID: 25212 Comm: syz.2.11376 Not tainted syzkaller #0 PREEMPT(full) [ 1581.878398][T25212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1581.878410][T25212] Call Trace: [ 1581.878417][T25212] [ 1581.878425][T25212] dump_stack_lvl+0xe8/0x150 [ 1581.878455][T25212] should_fail_ex+0x412/0x560 [ 1581.878481][T25212] _copy_from_user+0x2d/0xb0 [ 1581.878506][T25212] do_sock_getsockopt+0x165/0x3f0 [ 1581.878534][T25212] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1581.878559][T25212] ? __fget_files+0x3a0/0x420 [ 1581.878582][T25212] ? __fget_files+0x2a/0x420 [ 1581.878611][T25212] __x64_sys_getsockopt+0x1a4/0x240 [ 1581.878644][T25212] do_syscall_64+0x14d/0xf80 [ 1581.878667][T25212] ? trace_irq_disable+0x3b/0x150 [ 1581.878691][T25212] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1581.878710][T25212] ? clear_bhb_loop+0x40/0x90 [ 1581.878731][T25212] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1581.878749][T25212] RIP: 0033:0x7f056679c629 [ 1581.878767][T25212] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1581.878781][T25212] RSP: 002b:00007f05649f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1581.878799][T25212] RAX: ffffffffffffffda RBX: 00007f0566a16090 RCX: 00007f056679c629 [ 1581.878811][T25212] RDX: 000000000000000e RSI: 0000000000000084 RDI: 0000000000000003 [ 1581.878822][T25212] RBP: 00007f05649f6090 R08: 0000200000000140 R09: 0000000000000000 [ 1581.878832][T25212] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 1581.878841][T25212] R13: 00007f0566a16128 R14: 00007f0566a16090 R15: 00007ffe9e333078 [ 1581.878868][T25212] [ 1582.121437][T25219] netlink: 80 bytes leftover after parsing attributes in process `syz.3.11380'. [ 1582.370400][T25222] mac80211_hwsim hwsim9 wlan1: left promiscuous mode [ 1582.918739][T25231] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 1583.123890][T25235] netlink: 'syz.2.11386': attribute type 4 has an invalid length. [ 1583.132994][T25235] netlink: 17 bytes leftover after parsing attributes in process `syz.2.11386'. [ 1583.139173][T25207] wg1 speed is unknown, defaulting to 1000 [ 1583.235429][T25207] lo speed is unknown, defaulting to 1000 [ 1583.812473][T25255] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11394'. [ 1584.362297][ T2161] block nbd4: Possible stuck request ffff888026630000: control (read@0,1024B). Runtime 56 seconds [ 1584.373836][ T2161] block nbd4: Possible stuck request ffff888026630200: control (read@1024,1024B). Runtime 56 seconds [ 1584.385159][ T2161] block nbd4: Possible stuck request ffff888026630400: control (read@2048,1024B). Runtime 56 seconds [ 1584.397071][ T2161] block nbd4: Possible stuck request ffff888026630600: control (read@3072,1024B). Runtime 56 seconds [ 1584.552450][T25274] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11401'. [ 1584.792414][T25280] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11403'. [ 1584.819669][T25280] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1584.826995][T25280] IPv6: NLM_F_CREATE should be set when creating new route [ 1584.895239][T25284] netlink: 64 bytes leftover after parsing attributes in process `syz.2.11405'. [ 1584.986424][ T2238] block nbd6: Possible stuck request ffff8880266c0000: control (read@0,1024B). Runtime 30 seconds [ 1584.997323][ T2238] block nbd6: Possible stuck request ffff8880266c0200: control (read@1024,1024B). Runtime 30 seconds [ 1585.008697][ T2238] block nbd6: Possible stuck request ffff8880266c0400: control (read@2048,1024B). Runtime 30 seconds [ 1585.020204][ T2238] block nbd6: Possible stuck request ffff8880266c0600: control (read@3072,1024B). Runtime 30 seconds [ 1585.417210][T25307] netlink: 'syz.2.11415': attribute type 1 has an invalid length. [ 1585.471390][T25313] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11416'. [ 1585.499470][T25307] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1585.544142][T25315] vlan3: entered promiscuous mode [ 1585.564440][T25315] bond12: entered promiscuous mode [ 1585.572563][T25315] vlan3: entered allmulticast mode [ 1585.578257][T25315] bond12: entered allmulticast mode [ 1585.616193][T25307] tipc: Resetting bearer [ 1585.671612][T25307] bond12: (slave bridge52): making interface the new active one [ 1585.685960][T25307] bridge52: entered promiscuous mode [ 1585.691456][T25307] bridge52: entered allmulticast mode [ 1585.709643][T25307] bond12: (slave bridge52): Enslaving as an active interface with an up link [ 1585.730609][T25321] netlink: 48 bytes leftover after parsing attributes in process `syz.0.11413'. [ 1586.008725][T25309] wg1 speed is unknown, defaulting to 1000 [ 1586.018127][T25309] lo speed is unknown, defaulting to 1000 [ 1586.722345][T25351] ieee802154 phy1 wpan1: encryption failed: -22 [ 1586.733753][T25354] bridge_slave_0: entered promiscuous mode [ 1586.969423][T25362] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11430'. [ 1587.263083][T25380] ieee802154 phy1 wpan1: encryption failed: -22 [ 1587.272640][T25384] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11441'. [ 1587.404333][T25395] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11444'. [ 1587.792531][T25415] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 1587.882378][T25420] ieee802154 phy1 wpan1: encryption failed: -22 [ 1588.180538][T25431] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11458'. [ 1588.336988][T25446] FAULT_INJECTION: forcing a failure. [ 1588.336988][T25446] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1588.354852][T25446] CPU: 1 UID: 0 PID: 25446 Comm: syz.0.11465 Not tainted syzkaller #0 PREEMPT(full) [ 1588.354877][T25446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1588.354887][T25446] Call Trace: [ 1588.354895][T25446] [ 1588.354903][T25446] dump_stack_lvl+0xe8/0x150 [ 1588.354931][T25446] should_fail_ex+0x412/0x560 [ 1588.354954][T25446] _copy_to_user+0x31/0xb0 [ 1588.354979][T25446] simple_read_from_buffer+0xe1/0x170 [ 1588.355004][T25446] proc_fail_nth_read+0x1bb/0x230 [ 1588.355027][T25446] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1588.355052][T25446] ? rw_verify_area+0x2a6/0x4d0 [ 1588.355068][T25446] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1588.355090][T25446] vfs_read+0x20c/0xa70 [ 1588.355105][T25446] ? fdget_pos+0x246/0x320 [ 1588.355130][T25446] ? __pfx___mutex_lock+0x10/0x10 [ 1588.355157][T25446] ? __pfx_vfs_read+0x10/0x10 [ 1588.355176][T25446] ? __fget_files+0x2a/0x420 [ 1588.355198][T25446] ? __fget_files+0x3a0/0x420 [ 1588.355216][T25446] ? __fget_files+0x2a/0x420 [ 1588.355247][T25446] ksys_read+0x150/0x270 [ 1588.355268][T25446] ? __pfx_ksys_read+0x10/0x10 [ 1588.355293][T25446] do_syscall_64+0x14d/0xf80 [ 1588.355314][T25446] ? trace_irq_disable+0x3b/0x150 [ 1588.355332][T25446] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1588.355348][T25446] ? clear_bhb_loop+0x40/0x90 [ 1588.355368][T25446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1588.355382][T25446] RIP: 0033:0x7f4ee0f5cece [ 1588.355409][T25446] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1588.355423][T25446] RSP: 002b:00007f4ee1e4dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1588.355440][T25446] RAX: ffffffffffffffda RBX: 00007f4ee1e4e6c0 RCX: 00007f4ee0f5cece [ 1588.355453][T25446] RDX: 000000000000000f RSI: 00007f4ee1e4e0a0 RDI: 0000000000000004 [ 1588.355464][T25446] RBP: 00007f4ee1e4e090 R08: 0000000000000000 R09: 0000000000000000 [ 1588.355473][T25446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1588.355483][T25446] R13: 00007f4ee1216038 R14: 00007f4ee1215fa0 R15: 00007fff4879a4a8 [ 1588.355510][T25446] [ 1588.367709][T25450] FAULT_INJECTION: forcing a failure. [ 1588.367709][T25450] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1588.402773][T25452] FAULT_INJECTION: forcing a failure. [ 1588.402773][T25452] name failslab, interval 1, probability 0, space 0, times 0 [ 1588.494565][T25450] CPU: 0 UID: 0 PID: 25450 Comm: syz.3.11466 Not tainted syzkaller #0 PREEMPT(full) [ 1588.494591][T25450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1588.494602][T25450] Call Trace: [ 1588.494610][T25450] [ 1588.494619][T25450] dump_stack_lvl+0xe8/0x150 [ 1588.494654][T25450] should_fail_ex+0x412/0x560 [ 1588.494679][T25450] _copy_from_iter+0x1d3/0x1670 [ 1588.494711][T25450] ? __pfx__copy_from_iter+0x10/0x10 [ 1588.494730][T25450] ? sock_alloc_send_pskb+0x896/0x990 [ 1588.494761][T25450] ? __pfx__copy_from_iter+0x10/0x10 [ 1588.494784][T25450] ? page_copy_sane+0x16a/0x270 [ 1588.494806][T25450] copy_page_from_iter+0xdd/0x170 [ 1588.494831][T25450] skb_copy_datagram_from_iter+0x306/0x710 [ 1588.494867][T25450] tun_get_user+0xc38/0x3dd0 [ 1588.494900][T25450] ? aa_file_perm+0x12d/0x1630 [ 1588.494925][T25450] ? aa_file_perm+0x440/0x1630 [ 1588.494945][T25450] ? __pfx_tun_get_user+0x10/0x10 [ 1588.494972][T25450] ? __lock_acquire+0x6b5/0x2cf0 [ 1588.495003][T25450] ? ref_tracker_alloc+0x363/0x4d0 [ 1588.495024][T25450] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1588.495050][T25450] ? tun_get+0x1c/0x2f0 [ 1588.495075][T25450] ? tun_get+0x1c/0x2f0 [ 1588.495096][T25450] ? tun_get+0x1c/0x2f0 [ 1588.495119][T25450] tun_chr_write_iter+0x113/0x200 [ 1588.495143][T25450] vfs_write+0x61d/0xb90 [ 1588.495168][T25450] ? __pfx_vfs_write+0x10/0x10 [ 1588.495194][T25450] ? __fget_files+0x2a/0x420 [ 1588.495225][T25450] ksys_write+0x150/0x270 [ 1588.495244][T25450] ? __pfx_ksys_write+0x10/0x10 [ 1588.495272][T25450] do_syscall_64+0x14d/0xf80 [ 1588.495295][T25450] ? trace_irq_disable+0x3b/0x150 [ 1588.495318][T25450] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1588.495336][T25450] ? clear_bhb_loop+0x40/0x90 [ 1588.495356][T25450] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1588.495374][T25450] RIP: 0033:0x7f2b81d9c629 [ 1588.495391][T25450] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1588.495406][T25450] RSP: 002b:00007f2b82be1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1588.495425][T25450] RAX: ffffffffffffffda RBX: 00007f2b82015fa0 RCX: 00007f2b81d9c629 [ 1588.495437][T25450] RDX: 000000000000fdef RSI: 00002000000003c0 RDI: 0000000000000003 [ 1588.495449][T25450] RBP: 00007f2b82be1090 R08: 0000000000000000 R09: 0000000000000000 [ 1588.495459][T25450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1588.495469][T25450] R13: 00007f2b82016038 R14: 00007f2b82015fa0 R15: 00007fff19a31678 [ 1588.495497][T25450] [ 1588.656982][T25452] CPU: 1 UID: 0 PID: 25452 Comm: syz.2.11467 Not tainted syzkaller #0 PREEMPT(full) [ 1588.657007][T25452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1588.657018][T25452] Call Trace: [ 1588.657027][T25452] [ 1588.657035][T25452] dump_stack_lvl+0xe8/0x150 [ 1588.657064][T25452] should_fail_ex+0x412/0x560 [ 1588.657089][T25452] should_failslab+0xa8/0x100 [ 1588.657111][T25452] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 1588.657138][T25452] ? __alloc_skb+0x186/0x7d0 [ 1588.657159][T25452] ? __alloc_skb+0x1d0/0x7d0 [ 1588.657177][T25452] ? __local_bh_enable_ip+0xd0/0x130 [ 1588.657202][T25452] __alloc_skb+0x1d0/0x7d0 [ 1588.657227][T25452] alloc_skb_with_frags+0xca/0x890 [ 1588.657262][T25452] sock_alloc_send_pskb+0x878/0x990 [ 1588.657303][T25452] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 1588.657343][T25452] ? iov_iter_advance+0x8b/0x1c0 [ 1588.657366][T25452] tun_get_user+0x92d/0x3dd0 [ 1588.657399][T25452] ? aa_file_perm+0x12d/0x1630 [ 1588.657425][T25452] ? aa_file_perm+0x440/0x1630 [ 1588.657444][T25452] ? __pfx_tun_get_user+0x10/0x10 [ 1588.657471][T25452] ? __lock_acquire+0x6b5/0x2cf0 [ 1588.657499][T25452] ? ref_tracker_alloc+0x363/0x4d0 [ 1588.657519][T25452] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1588.657542][T25452] ? tun_get+0x1c/0x2f0 [ 1588.657565][T25452] ? tun_get+0x1c/0x2f0 [ 1588.657583][T25452] ? tun_get+0x1c/0x2f0 [ 1588.657605][T25452] tun_chr_write_iter+0x113/0x200 [ 1588.657627][T25452] vfs_write+0x61d/0xb90 [ 1588.657650][T25452] ? __pfx_vfs_write+0x10/0x10 [ 1588.657675][T25452] ? __fget_files+0x2a/0x420 [ 1588.657704][T25452] ksys_write+0x150/0x270 [ 1588.657723][T25452] ? __pfx_ksys_write+0x10/0x10 [ 1588.657749][T25452] do_syscall_64+0x14d/0xf80 [ 1588.657773][T25452] ? trace_irq_disable+0x3b/0x150 [ 1588.657796][T25452] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1588.657814][T25452] ? clear_bhb_loop+0x40/0x90 [ 1588.657836][T25452] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1588.657853][T25452] RIP: 0033:0x7f056679c629 [ 1588.657870][T25452] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1588.657884][T25452] RSP: 002b:00007f056757f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1588.657902][T25452] RAX: ffffffffffffffda RBX: 00007f0566a15fa0 RCX: 00007f056679c629 [ 1588.657913][T25452] RDX: 000000000000fdef RSI: 00002000000003c0 RDI: 0000000000000003 [ 1588.657924][T25452] RBP: 00007f056757f090 R08: 0000000000000000 R09: 0000000000000000 [ 1588.657933][T25452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1588.657943][T25452] R13: 00007f0566a16038 R14: 00007f0566a15fa0 R15: 00007ffe9e333078 [ 1588.657972][T25452] [ 1588.834840][T25459] ieee802154 phy1 wpan1: encryption failed: -22 [ 1589.375919][T25473] tipc: Resetting bearer [ 1589.482173][T25478] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11479'. [ 1589.618108][T25488] ieee802154 phy1 wpan1: encryption failed: -22 [ 1589.651022][T25494] netlink: 64 bytes leftover after parsing attributes in process `syz.2.11482'. [ 1589.798194][T25496] netlink: 52 bytes leftover after parsing attributes in process `syz.3.11483'. [ 1589.815754][T25496] ip6tnl0: Caught tx_queue_len zero misconfig [ 1589.925170][T25484] wg1 speed is unknown, defaulting to 1000 [ 1589.992672][T25484] lo speed is unknown, defaulting to 1000 [ 1590.116177][ T2161] block nbd4: Possible stuck request ffff888026630000: control (read@0,1024B). Runtime 60 seconds [ 1590.127141][ T2161] block nbd4: Possible stuck request ffff888026630200: control (read@1024,1024B). Runtime 60 seconds [ 1590.138985][ T2161] block nbd4: Possible stuck request ffff888026630400: control (read@2048,1024B). Runtime 60 seconds [ 1590.150048][ T2161] block nbd4: Possible stuck request ffff888026630600: control (read@3072,1024B). Runtime 60 seconds [ 1590.271427][T25523] IPVS: Unknown mcast interface: ipvlan0 [ 1590.719631][T25548] FAULT_INJECTION: forcing a failure. [ 1590.719631][T25548] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1590.746132][T25548] CPU: 0 UID: 0 PID: 25548 Comm: syz.2.11503 Not tainted syzkaller #0 PREEMPT(full) [ 1590.746158][T25548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1590.746169][T25548] Call Trace: [ 1590.746181][T25548] [ 1590.746190][T25548] dump_stack_lvl+0xe8/0x150 [ 1590.746218][T25548] should_fail_ex+0x412/0x560 [ 1590.746243][T25548] _copy_from_iter+0x1d3/0x1670 [ 1590.746276][T25548] ? __pfx__copy_from_iter+0x10/0x10 [ 1590.746295][T25548] ? sock_alloc_send_pskb+0x896/0x990 [ 1590.746327][T25548] ? __pfx__copy_from_iter+0x10/0x10 [ 1590.746350][T25548] ? page_copy_sane+0x16a/0x270 [ 1590.746374][T25548] copy_page_from_iter+0xdd/0x170 [ 1590.746400][T25548] skb_copy_datagram_from_iter+0x306/0x710 [ 1590.746444][T25548] tun_get_user+0xc38/0x3dd0 [ 1590.746477][T25548] ? aa_file_perm+0x12d/0x1630 [ 1590.746503][T25548] ? aa_file_perm+0x440/0x1630 [ 1590.746523][T25548] ? __pfx_tun_get_user+0x10/0x10 [ 1590.746549][T25548] ? __lock_acquire+0x6b5/0x2cf0 [ 1590.746581][T25548] ? ref_tracker_alloc+0x363/0x4d0 [ 1590.746604][T25548] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1590.746630][T25548] ? tun_get+0x1c/0x2f0 [ 1590.746655][T25548] ? tun_get+0x1c/0x2f0 [ 1590.746675][T25548] ? tun_get+0x1c/0x2f0 [ 1590.746700][T25548] tun_chr_write_iter+0x113/0x200 [ 1590.746725][T25548] vfs_write+0x61d/0xb90 [ 1590.746749][T25548] ? __pfx_vfs_write+0x10/0x10 [ 1590.746775][T25548] ? __fget_files+0x2a/0x420 [ 1590.746806][T25548] ksys_write+0x150/0x270 [ 1590.746826][T25548] ? __pfx_ksys_write+0x10/0x10 [ 1590.746853][T25548] do_syscall_64+0x14d/0xf80 [ 1590.746877][T25548] ? trace_irq_disable+0x3b/0x150 [ 1590.746900][T25548] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1590.746918][T25548] ? clear_bhb_loop+0x40/0x90 [ 1590.746939][T25548] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1590.746957][T25548] RIP: 0033:0x7f056679c629 [ 1590.746975][T25548] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1590.746988][T25548] RSP: 002b:00007f056757f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1590.747007][T25548] RAX: ffffffffffffffda RBX: 00007f0566a15fa0 RCX: 00007f056679c629 [ 1590.747020][T25548] RDX: 000000000000fdef RSI: 00002000000003c0 RDI: 0000000000000003 [ 1590.747031][T25548] RBP: 00007f056757f090 R08: 0000000000000000 R09: 0000000000000000 [ 1590.747042][T25548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1590.747052][T25548] R13: 00007f0566a16038 R14: 00007f0566a15fa0 R15: 00007ffe9e333078 [ 1590.747080][T25548] [ 1591.044333][T25530] wg1 speed is unknown, defaulting to 1000 [ 1591.062799][T25530] lo speed is unknown, defaulting to 1000 [ 1591.247503][T25565] netlink: 'syz.4.11508': attribute type 1 has an invalid length. [ 1591.348555][T25565] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1591.390267][T25571] vlan5: entered promiscuous mode [ 1591.395715][T25571] bond7: entered promiscuous mode [ 1591.396875][T25573] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11511'. [ 1591.410339][T25571] vlan5: entered allmulticast mode [ 1591.415488][T25571] bond7: entered allmulticast mode [ 1591.471158][T25575] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11512'. [ 1591.473657][T25565] syzkaller0: entered promiscuous mode [ 1591.489101][T25565] syzkaller0: entered allmulticast mode [ 1591.539749][T25565] bond7: (slave bridge36): making interface the new active one [ 1591.562099][T25565] bridge36: entered promiscuous mode [ 1591.578130][T25565] bridge36: entered allmulticast mode [ 1591.593004][T25565] bond7: (slave bridge36): Enslaving as an active interface with an up link [ 1591.840938][T25591] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11515'. [ 1592.151039][T25608] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11522'. [ 1592.217175][T25611] xt_TCPMSS: Only works on TCP SYN packets [ 1592.441787][T25623] veth1_vlan: entered allmulticast mode [ 1592.461580][T25623] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 1592.493008][T25625] netlink: 132 bytes leftover after parsing attributes in process `syz.1.11526'. [ 1592.515418][T25626] netlink: 80 bytes leftover after parsing attributes in process `syz.2.11527'. [ 1592.552483][T25628] vlan4: entered promiscuous mode [ 1592.748422][T25637] FAULT_INJECTION: forcing a failure. [ 1592.748422][T25637] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1592.767518][T25637] CPU: 1 UID: 0 PID: 25637 Comm: syz.3.11533 Not tainted syzkaller #0 PREEMPT(full) [ 1592.767543][T25637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1592.767553][T25637] Call Trace: [ 1592.767559][T25637] [ 1592.767568][T25637] dump_stack_lvl+0xe8/0x150 [ 1592.767595][T25637] should_fail_ex+0x412/0x560 [ 1592.767619][T25637] _copy_from_iter+0x1d3/0x1670 [ 1592.767651][T25637] ? __pfx__copy_from_iter+0x10/0x10 [ 1592.767669][T25637] ? sock_alloc_send_pskb+0x896/0x990 [ 1592.767698][T25637] ? __pfx__copy_from_iter+0x10/0x10 [ 1592.767719][T25637] ? page_copy_sane+0x16a/0x270 [ 1592.767739][T25637] copy_page_from_iter+0xdd/0x170 [ 1592.767762][T25637] skb_copy_datagram_from_iter+0x306/0x710 [ 1592.767799][T25637] tun_get_user+0xc38/0x3dd0 [ 1592.767830][T25637] ? aa_file_perm+0x12d/0x1630 [ 1592.767855][T25637] ? aa_file_perm+0x440/0x1630 [ 1592.767873][T25637] ? __pfx_tun_get_user+0x10/0x10 [ 1592.767895][T25637] ? __lock_acquire+0x6b5/0x2cf0 [ 1592.767920][T25637] ? ref_tracker_alloc+0x363/0x4d0 [ 1592.767939][T25637] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1592.767958][T25637] ? tun_get+0x1c/0x2f0 [ 1592.767987][T25637] ? tun_get+0x1c/0x2f0 [ 1592.768002][T25637] ? tun_get+0x1c/0x2f0 [ 1592.768021][T25637] tun_chr_write_iter+0x113/0x200 [ 1592.768040][T25637] vfs_write+0x61d/0xb90 [ 1592.768061][T25637] ? __pfx_vfs_write+0x10/0x10 [ 1592.768082][T25637] ? __fget_files+0x2a/0x420 [ 1592.768106][T25637] ksys_write+0x150/0x270 [ 1592.768122][T25637] ? __pfx_ksys_write+0x10/0x10 [ 1592.768143][T25637] do_syscall_64+0x14d/0xf80 [ 1592.768162][T25637] ? trace_irq_disable+0x3b/0x150 [ 1592.768181][T25637] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1592.768195][T25637] ? clear_bhb_loop+0x40/0x90 [ 1592.768212][T25637] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1592.768226][T25637] RIP: 0033:0x7f2b81d9c629 [ 1592.768240][T25637] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1592.768252][T25637] RSP: 002b:00007f2b82be1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1592.768268][T25637] RAX: ffffffffffffffda RBX: 00007f2b82015fa0 RCX: 00007f2b81d9c629 [ 1592.768279][T25637] RDX: 000000000000fdef RSI: 00002000000003c0 RDI: 0000000000000003 [ 1592.768288][T25637] RBP: 00007f2b82be1090 R08: 0000000000000000 R09: 0000000000000000 [ 1592.768296][T25637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1592.768305][T25637] R13: 00007f2b82016038 R14: 00007f2b82015fa0 R15: 00007fff19a31678 [ 1592.768327][T25637] [ 1593.116980][T25648] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11536'. [ 1593.126550][T25647] openvswitch: netlink: Key type 30 is not supported [ 1593.175495][T25653] bond17: option miimon: invalid value (18446744073709551607) [ 1593.183485][T25653] bond17: option miimon: allowed values 0 - 2147483647 [ 1593.198350][T25653] bond17 (unregistering): Released all slaves [ 1593.320699][T25668] ieee802154 phy1 wpan1: encryption failed: -22 [ 1593.341847][T25669] netlink: 112 bytes leftover after parsing attributes in process `syz.0.11538'. [ 1593.450421][T25671] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 1593.516502][T25671] netlink: 132 bytes leftover after parsing attributes in process `syz.3.11540'. [ 1593.724278][T25642] wg1 speed is unknown, defaulting to 1000 [ 1593.740606][T25642] lo speed is unknown, defaulting to 1000 [ 1593.996760][T25650] wg1 speed is unknown, defaulting to 1000 [ 1594.057559][T25650] lo speed is unknown, defaulting to 1000 [ 1594.128925][T25694] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11548'. [ 1594.271597][T28691] bond11: (slave bridge28): link status up again after 0 ms [ 1594.296131][T28691] bond11: (slave bridge28): link status up again after 0 ms [ 1594.316091][T28691] bond11: (slave bridge28): link status up again after 0 ms [ 1594.336168][T28691] bond11: (slave bridge28): link status up again after 0 ms [ 1594.344994][T28691] bond11: (slave bridge28): failed to get link speed/duplex [ 1594.389335][T25702] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11551'. [ 1594.404937][T25702] ieee802154 phy1 wpan1: encryption failed: -22 [ 1594.486185][T28691] bond11: (slave bridge28): failed to get link speed/duplex [ 1594.499937][T25691] wg1 speed is unknown, defaulting to 1000 [ 1594.518862][T25691] lo speed is unknown, defaulting to 1000 [ 1595.176737][T28704] bond11: (slave bridge28): failed to get link speed/duplex [ 1595.200670][T25723] netlink: 132 bytes leftover after parsing attributes in process `syz.0.11554'. [ 1595.429372][T25730] netlink: 64 bytes leftover after parsing attributes in process `syz.0.11558'. [ 1595.758236][T25738] FAULT_INJECTION: forcing a failure. [ 1595.758236][T25738] name failslab, interval 1, probability 0, space 0, times 0 [ 1595.806506][T25738] CPU: 0 UID: 0 PID: 25738 Comm: syz.3.11562 Not tainted syzkaller #0 PREEMPT(full) [ 1595.806533][T25738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1595.806544][T25738] Call Trace: [ 1595.806552][T25738] [ 1595.806559][T25738] dump_stack_lvl+0xe8/0x150 [ 1595.806587][T25738] should_fail_ex+0x412/0x560 [ 1595.806612][T25738] should_failslab+0xa8/0x100 [ 1595.806634][T25738] ? security_inode_alloc+0x39/0x310 [ 1595.806654][T25738] kmem_cache_alloc_noprof+0x87/0x650 [ 1595.806690][T25738] security_inode_alloc+0x39/0x310 [ 1595.806714][T25738] inode_init_always_gfp+0x9ed/0xdc0 [ 1595.806744][T25738] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 1595.806768][T25738] alloc_inode+0x82/0x1b0 [ 1595.806791][T25738] new_inode+0x22/0x170 [ 1595.806818][T25738] debugfs_create_dir+0x68/0x350 [ 1595.806844][T25738] nbd_start_device+0x329/0xb10 [ 1595.806874][T25738] ? device_create_file+0xf4/0x1b0 [ 1595.806907][T25738] nbd_genl_connect+0x165b/0x1cf0 [ 1595.806941][T25738] ? __pfx_nbd_genl_connect+0x10/0x10 [ 1595.806969][T25738] ? rcu_is_watching+0x15/0xb0 [ 1595.807001][T25738] ? __nla_parse+0x40/0x60 [ 1595.807026][T25738] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 1595.807058][T25738] genl_family_rcv_msg_doit+0x22a/0x330 [ 1595.807091][T25738] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1595.807128][T25738] ? __lock_acquire+0x6b5/0x2cf0 [ 1595.807154][T25738] genl_rcv_msg+0x61c/0x7a0 [ 1595.807182][T25738] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1595.807206][T25738] ? __pfx_nbd_genl_connect+0x10/0x10 [ 1595.807228][T25738] ? __lock_acquire+0x6b5/0x2cf0 [ 1595.807259][T25738] netlink_rcv_skb+0x232/0x4b0 [ 1595.807275][T25738] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1595.807295][T25738] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1595.807325][T25738] ? down_read+0x272/0x2e0 [ 1595.807338][T25738] ? genl_rcv+0xd/0x40 [ 1595.807358][T25738] genl_rcv+0x28/0x40 [ 1595.807375][T25738] netlink_unicast+0x80f/0x9b0 [ 1595.807396][T25738] ? __pfx_netlink_unicast+0x10/0x10 [ 1595.807413][T25738] ? netlink_sendmsg+0x650/0xb40 [ 1595.807427][T25738] ? skb_put+0x11b/0x210 [ 1595.807448][T25738] netlink_sendmsg+0x813/0xb40 [ 1595.807472][T25738] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1595.807490][T25738] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1595.807509][T25738] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1595.807525][T25738] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1595.807540][T25738] ____sys_sendmsg+0xa68/0xad0 [ 1595.807567][T25738] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1595.807593][T25738] ? import_iovec+0x73/0xa0 [ 1595.807614][T25738] ___sys_sendmsg+0x2a5/0x360 [ 1595.807638][T25738] ? __pfx____sys_sendmsg+0x10/0x10 [ 1595.807686][T25738] ? __fget_files+0x2a/0x420 [ 1595.807704][T25738] ? __fget_files+0x3a0/0x420 [ 1595.807731][T25738] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1595.807751][T25738] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1595.807778][T25738] ? __pfx_ksys_write+0x10/0x10 [ 1595.807802][T25738] do_syscall_64+0x14d/0xf80 [ 1595.807821][T25738] ? trace_irq_disable+0x3b/0x150 [ 1595.807840][T25738] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1595.807854][T25738] ? clear_bhb_loop+0x40/0x90 [ 1595.807871][T25738] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1595.807885][T25738] RIP: 0033:0x7f2b81d9c629 [ 1595.807909][T25738] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1595.807922][T25738] RSP: 002b:00007f2b82be1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1595.807938][T25738] RAX: ffffffffffffffda RBX: 00007f2b82015fa0 RCX: 00007f2b81d9c629 [ 1595.807948][T25738] RDX: 0000000020000000 RSI: 0000200000001ac0 RDI: 0000000000000004 [ 1595.807957][T25738] RBP: 00007f2b82be1090 R08: 0000000000000000 R09: 0000000000000000 [ 1595.807966][T25738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1595.807975][T25738] R13: 00007f2b82016038 R14: 00007f2b82015fa0 R15: 00007fff19a31678 [ 1595.807999][T25738] [ 1595.808091][T25738] debugfs: out of free dentries, can not create directory 'nbd9' [ 1595.894935][T25738] block nbd9: Failed to create debugfs dir for 'nbd9' [ 1596.012218][T25746] ieee802154 phy1 wpan1: encryption failed: -22 [ 1596.017088][ T2161] block nbd4: Possible stuck request ffff888026630000: control (read@0,1024B). Runtime 64 seconds [ 1596.029114][T25743] ieee802154 phy1 wpan1: encryption failed: -22 [ 1596.033686][ T2161] block nbd4: Possible stuck request ffff888026630200: control (read@1024,1024B). Runtime 64 seconds [ 1596.248391][ T2161] block nbd4: Possible stuck request ffff888026630400: control (read@2048,1024B). Runtime 64 seconds [ 1596.260033][ T2161] block nbd4: Possible stuck request ffff888026630600: control (read@3072,1024B). Runtime 64 seconds [ 1596.282655][T25738] nbd9: detected capacity change from 0 to 63 [ 1596.293998][ T5141] block nbd9: Receive control failed (result -104) [ 1596.401272][T25755] macvlan0: entered promiscuous mode [ 1596.407874][T25755] macvlan0: entered allmulticast mode [ 1596.737509][T25774] ieee802154 phy1 wpan1: encryption failed: -22 [ 1596.883319][T25787] FAULT_INJECTION: forcing a failure. [ 1596.883319][T25787] name failslab, interval 1, probability 0, space 0, times 0 [ 1596.925979][T25787] CPU: 1 UID: 0 PID: 25787 Comm: syz.3.11580 Not tainted syzkaller #0 PREEMPT(full) [ 1596.926003][T25787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1596.926012][T25787] Call Trace: [ 1596.926019][T25787] [ 1596.926026][T25787] dump_stack_lvl+0xe8/0x150 [ 1596.926056][T25787] should_fail_ex+0x412/0x560 [ 1596.926082][T25787] should_failslab+0xa8/0x100 [ 1596.926105][T25787] __kmalloc_noprof+0xe8/0x760 [ 1596.926124][T25787] ? tomoyo_encode+0x28b/0x550 [ 1596.926149][T25787] tomoyo_encode+0x28b/0x550 [ 1596.926175][T25787] tomoyo_realpath_from_path+0x58d/0x5d0 [ 1596.926207][T25787] ? tomoyo_path_number_perm+0x219/0x630 [ 1596.926226][T25787] tomoyo_path_number_perm+0x246/0x630 [ 1596.926248][T25787] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1596.926269][T25787] ? __lock_acquire+0x6b5/0x2cf0 [ 1596.926298][T25787] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1596.926341][T25787] ? __fget_files+0x2a/0x420 [ 1596.926365][T25787] ? __fget_files+0x2a/0x420 [ 1596.926383][T25787] ? __fget_files+0x3a0/0x420 [ 1596.926403][T25787] ? __fget_files+0x2a/0x420 [ 1596.926427][T25787] security_file_ioctl+0xc3/0x2a0 [ 1596.926455][T25787] __se_sys_ioctl+0x47/0x170 [ 1596.926476][T25787] do_syscall_64+0x14d/0xf80 [ 1596.926497][T25787] ? trace_irq_disable+0x3b/0x150 [ 1596.926518][T25787] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1596.926536][T25787] ? clear_bhb_loop+0x40/0x90 [ 1596.926558][T25787] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1596.926575][T25787] RIP: 0033:0x7f2b81d9c629 [ 1596.926591][T25787] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1596.926605][T25787] RSP: 002b:00007f2b82be1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1596.926624][T25787] RAX: ffffffffffffffda RBX: 00007f2b82015fa0 RCX: 00007f2b81d9c629 [ 1596.926636][T25787] RDX: 0000200000000000 RSI: 000000000000890c RDI: 0000000000000003 [ 1596.926647][T25787] RBP: 00007f2b82be1090 R08: 0000000000000000 R09: 0000000000000000 [ 1596.926656][T25787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1596.926665][T25787] R13: 00007f2b82016038 R14: 00007f2b82015fa0 R15: 00007fff19a31678 [ 1596.926696][T25787] [ 1596.926746][T25787] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1596.980437][T25791] netlink: 'syz.1.11583': attribute type 1 has an invalid length. [ 1597.044017][T25794] macvlan0: entered promiscuous mode [ 1597.175262][T25797] __nla_validate_parse: 6 callbacks suppressed [ 1597.175279][T25797] netlink: 132 bytes leftover after parsing attributes in process `syz.4.11582'. [ 1597.192513][T25794] macvlan0: entered allmulticast mode [ 1597.198266][T25794] veth1_vlan: entered allmulticast mode [ 1597.318569][T25791] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1597.410199][T25800] vlan6: entered promiscuous mode [ 1597.434855][T25800] bond8: entered promiscuous mode [ 1597.450913][T25800] vlan6: entered allmulticast mode [ 1597.470775][T25800] bond8: entered allmulticast mode [ 1597.538134][T28691] net_ratelimit: 13 callbacks suppressed [ 1597.538154][T28691] bond11: (slave bridge28): failed to get link speed/duplex [ 1597.648580][T25800] bond8: (slave bridge30): making interface the new active one [ 1597.670043][T25800] bridge30: entered promiscuous mode [ 1597.687435][T25800] bridge30: entered allmulticast mode [ 1597.703078][T25800] bond8: (slave bridge30): Enslaving as an active interface with an up link [ 1597.764428][T25828] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11590'. [ 1597.777715][T28707] bond11: (slave bridge28): failed to get link speed/duplex [ 1597.861314][T25832] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11592'. [ 1597.889991][T25828] ieee802154 phy1 wpan1: encryption failed: -22 [ 1597.905987][T28702] bond11: (slave bridge28): failed to get link speed/duplex [ 1598.016430][T28702] bond11: (slave bridge28): failed to get link speed/duplex [ 1598.086114][T25838] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11594'. [ 1598.137756][T28702] bond11: (slave bridge28): failed to get link speed/duplex [ 1598.266680][T28707] bond11: (slave bridge28): failed to get link speed/duplex [ 1598.347537][T25851] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 1598.386229][T28707] bond11: (slave bridge28): failed to get link speed/duplex [ 1598.394716][T25851] netlink: 132 bytes leftover after parsing attributes in process `syz.4.11598'. [ 1598.527436][T25865] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11603'. [ 1598.543154][T25867] syzkaller0: refused to change device tx_queue_len [ 1598.554484][T25865] ieee802154 phy1 wpan1: encryption failed: -22 [ 1598.625988][T28691] bond11: (slave bridge28): failed to get link speed/duplex [ 1598.643414][T25871] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11606'. [ 1598.664287][T25872] netlink: 'syz.1.11605': attribute type 1 has an invalid length. [ 1598.668270][T25871] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11606'. [ 1598.733190][T25872] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1598.807082][T25872] vlan7: entered promiscuous mode [ 1598.812201][T25872] bond9: entered promiscuous mode [ 1598.818070][T25872] vlan7: entered allmulticast mode [ 1598.824104][T25872] bond9: entered allmulticast mode [ 1598.855078][T25872] bond9: (slave bridge31): making interface the new active one [ 1598.862969][T25872] bridge31: entered promiscuous mode [ 1598.868918][T25872] bridge31: entered allmulticast mode [ 1598.875540][T25872] bond9: (slave bridge31): Enslaving as an active interface with an up link [ 1598.908376][T28702] bond11: (slave bridge28): failed to get link speed/duplex [ 1598.996974][T25884] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11610'. [ 1599.066511][T25884] netlink: 60 bytes leftover after parsing attributes in process `syz.2.11610'. [ 1599.626881][T25919] netlink: 'syz.2.11625': attribute type 4 has an invalid length. [ 1600.000066][T25917] wg1 speed is unknown, defaulting to 1000 [ 1600.043469][T25917] lo speed is unknown, defaulting to 1000 [ 1600.333805][T25950] gtp1: entered promiscuous mode [ 1600.363963][T25950] gtp1: entered allmulticast mode [ 1600.534078][T25958] vlan4: entered promiscuous mode [ 1600.686953][T25969] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1601.037321][T25980] nbd10: detected capacity change from 0 to 63 [ 1601.055737][ T5141] block nbd10: Receive control failed (result -104) [ 1601.496915][T26013] 8021q: VLANs not supported on nlmon0 [ 1601.499258][T26015] netlink: 'syz.4.11661': attribute type 11 has an invalid length. [ 1601.631262][ T2161] block nbd4: Possible stuck request ffff888026630000: control (read@0,1024B). Runtime 68 seconds [ 1601.642455][ T2161] block nbd4: Possible stuck request ffff888026630200: control (read@1024,1024B). Runtime 68 seconds [ 1601.653996][ T2161] block nbd4: Possible stuck request ffff888026630400: control (read@2048,1024B). Runtime 68 seconds [ 1601.665319][ T2161] block nbd4: Possible stuck request ffff888026630600: control (read@3072,1024B). Runtime 68 seconds [ 1601.667771][T26024] netlink: 'syz.4.11666': attribute type 1 has an invalid length. [ 1601.722031][T26024] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1601.859884][T26024] vlan6: entered promiscuous mode [ 1601.870684][T26024] bond8: entered promiscuous mode [ 1601.876854][T26024] vlan6: entered allmulticast mode [ 1601.882106][T26024] bond8: entered allmulticast mode [ 1601.988235][T26024] bond8: (slave bridge38): making interface the new active one [ 1602.049602][T26024] bridge38: entered promiscuous mode [ 1602.055109][T26024] bridge38: entered allmulticast mode [ 1602.071578][T26024] bond8: (slave bridge38): Enslaving as an active interface with an up link [ 1602.376330][T26064] __nla_validate_parse: 14 callbacks suppressed [ 1602.376351][T26064] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11681'. [ 1602.493018][T26072] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11685'. [ 1602.545759][T26077] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11685'. [ 1602.602940][T26072] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1602.610383][T26072] IPv6: NLM_F_CREATE should be set when creating new route [ 1602.646502][T28691] net_ratelimit: 26 callbacks suppressed [ 1602.646522][T28691] bond11: (slave bridge28): failed to get link speed/duplex [ 1602.764198][T26085] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11690'. [ 1602.866185][T28707] bond11: (slave bridge28): failed to get link speed/duplex [ 1602.916905][ T2238] block nbd5: Possible stuck request ffff888026650000: control (read@0,1024B). Runtime 90 seconds [ 1602.928407][ T2238] block nbd5: Possible stuck request ffff888026650200: control (read@1024,1024B). Runtime 90 seconds [ 1602.939859][ T2238] block nbd5: Possible stuck request ffff888026650400: control (read@2048,1024B). Runtime 90 seconds [ 1602.951797][ T2238] block nbd5: Possible stuck request ffff888026650600: control (read@3072,1024B). Runtime 90 seconds [ 1602.976911][T28691] bond11: (slave bridge28): failed to get link speed/duplex [ 1603.069059][T26102] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11698'. [ 1603.086822][T28691] bond11: (slave bridge28): failed to get link speed/duplex [ 1603.127006][T26099] nbd11: detected capacity change from 0 to 63 [ 1603.135714][ T5141] block nbd11: Receive control failed (result -104) [ 1603.219024][ T57] bond11: (slave bridge28): failed to get link speed/duplex [ 1603.346104][T28691] bond11: (slave bridge28): failed to get link speed/duplex [ 1603.437770][T26123] FAULT_INJECTION: forcing a failure. [ 1603.437770][T26123] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1603.451120][T26123] CPU: 1 UID: 0 PID: 26123 Comm: syz.3.11706 Not tainted syzkaller #0 PREEMPT(full) [ 1603.451145][T26123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1603.451157][T26123] Call Trace: [ 1603.451165][T26123] [ 1603.451174][T26123] dump_stack_lvl+0xe8/0x150 [ 1603.451203][T26123] should_fail_ex+0x412/0x560 [ 1603.451229][T26123] _copy_from_user+0x2d/0xb0 [ 1603.451261][T26123] generic_map_update_batch+0x648/0x990 [ 1603.451293][T26123] ? __pfx_generic_map_update_batch+0x10/0x10 [ 1603.451315][T26123] ? __fget_files+0x2a/0x420 [ 1603.451345][T26123] ? __pfx_generic_map_update_batch+0x10/0x10 [ 1603.451365][T26123] bpf_map_do_batch+0x39b/0x630 [ 1603.451388][T26123] __sys_bpf+0x7c1/0x950 [ 1603.451415][T26123] ? __pfx___sys_bpf+0x10/0x10 [ 1603.451453][T26123] ? ksys_write+0x242/0x270 [ 1603.451474][T26123] ? __pfx_ksys_write+0x10/0x10 [ 1603.451499][T26123] __x64_sys_bpf+0x7c/0x90 [ 1603.451523][T26123] do_syscall_64+0x14d/0xf80 [ 1603.451547][T26123] ? trace_irq_disable+0x3b/0x150 [ 1603.451570][T26123] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1603.451588][T26123] ? clear_bhb_loop+0x40/0x90 [ 1603.451610][T26123] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1603.451627][T26123] RIP: 0033:0x7f2b81d9c629 [ 1603.451644][T26123] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1603.451660][T26123] RSP: 002b:00007f2b82be1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1603.451678][T26123] RAX: ffffffffffffffda RBX: 00007f2b82015fa0 RCX: 00007f2b81d9c629 [ 1603.451691][T26123] RDX: 0000000000000038 RSI: 00002000000000c0 RDI: 000000000000001a [ 1603.451702][T26123] RBP: 00007f2b82be1090 R08: 0000000000000000 R09: 0000000000000000 [ 1603.451713][T26123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1603.451724][T26123] R13: 00007f2b82016038 R14: 00007f2b82015fa0 R15: 00007fff19a31678 [ 1603.451753][T26123] [ 1603.648012][ T57] bond11: (slave bridge28): failed to get link speed/duplex [ 1603.687324][T26129] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11705'. [ 1603.698909][T26129] 8021q: VLANs not supported on nlmon0 [ 1603.767696][T28691] bond11: (slave bridge28): failed to get link speed/duplex [ 1603.827838][T26133] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11707'. [ 1603.883527][T26133] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1603.921194][T28691] bond11: (slave bridge28): failed to get link speed/duplex [ 1604.035062][T26150] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1604.074761][T26152] netlink: 'syz.3.11716': attribute type 10 has an invalid length. [ 1604.109772][T26150] bond0: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 1604.148426][T26150] bond0: (slave ipvlan0): Error -95 calling set_mac_address [ 1604.303667][T26141] wg1 speed is unknown, defaulting to 1000 [ 1604.308973][T28691] bond11: (slave bridge28): failed to get link speed/duplex [ 1604.333480][T26141] lo speed is unknown, defaulting to 1000 [ 1604.754938][T26189] xt_TCPMSS: Only works on TCP SYN packets [ 1605.524597][T26225] netlink: 'syz.3.11740': attribute type 4 has an invalid length. [ 1605.839070][T26241] netlink: 'syz.0.11745': attribute type 1 has an invalid length. [ 1605.889420][T26241] 8021q: adding VLAN 0 to HW filter on device bond17 [ 1605.920749][T26241] vlan4: entered promiscuous mode [ 1605.925966][T26241] bond17: entered promiscuous mode [ 1605.931377][T26241] vlan4: entered allmulticast mode [ 1605.937090][T26241] bond17: entered allmulticast mode [ 1605.967106][T26241] bond17: (slave bridge34): making interface the new active one [ 1605.975253][T26241] bridge34: entered promiscuous mode [ 1605.981114][T26241] bridge34: entered allmulticast mode [ 1605.987970][T26241] bond17: (slave bridge34): Enslaving as an active interface with an up link [ 1606.108320][ T2238] block nbd3: Possible stuck request ffff888026590000: control (read@0,1024B). Runtime 240 seconds [ 1606.119243][ T2238] block nbd3: Possible stuck request ffff888026590200: control (read@1024,1024B). Runtime 240 seconds [ 1606.130352][ T2238] block nbd3: Possible stuck request ffff888026590400: control (read@2048,1024B). Runtime 240 seconds [ 1606.141393][ T2238] block nbd3: Possible stuck request ffff888026590600: control (read@3072,1024B). Runtime 240 seconds [ 1606.503504][T26274] veth1_vlan: left allmulticast mode [ 1606.629548][T26279] netlink: 'syz.1.11760': attribute type 4 has an invalid length. [ 1606.652072][T26279] netlink: 224 bytes leftover after parsing attributes in process `syz.1.11760'. [ 1606.735431][T26285] netlink: 56 bytes leftover after parsing attributes in process `syz.3.11763'. [ 1607.054368][T26299] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11769'. [ 1607.075431][T26299] 8021q: VLANs not supported on nlmon0 [ 1607.391629][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.400436][ T2161] block nbd4: Possible stuck request ffff888026630000: control (read@0,1024B). Runtime 72 seconds [ 1607.412326][ T1298] lec:lec_start_xmit: lec0:No lecd attached [ 1607.418512][ T2161] block nbd4: Possible stuck request ffff888026630200: control (read@1024,1024B). Runtime 72 seconds [ 1607.428678][T26310] __nla_validate_parse: 1 callbacks suppressed [ 1607.428698][T26310] netlink: 144 bytes leftover after parsing attributes in process `syz.4.11773'. [ 1607.431777][ T2161] block nbd4: Possible stuck request ffff888026630400: control (read@2048,1024B). Runtime 72 seconds [ 1607.456690][ T2161] block nbd4: Possible stuck request ffff888026630600: control (read@3072,1024B). Runtime 72 seconds [ 1607.468592][T26310] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.11773'. [ 1607.697108][ T57] net_ratelimit: 26 callbacks suppressed [ 1607.697129][ T57] bond11: (slave bridge28): failed to get link speed/duplex [ 1607.855924][T28691] bond11: (slave bridge28): failed to get link speed/duplex [ 1607.966425][ T57] bond11: (slave bridge28): failed to get link speed/duplex [ 1607.982403][T26337] netlink: 260 bytes leftover after parsing attributes in process `syz.2.11784'. [ 1608.086486][ T57] bond11: (slave bridge28): failed to get link speed/duplex [ 1608.151900][T26346] tipc: Enabling of bearer rejected, failed to enable media [ 1608.206231][T28707] bond11: (slave bridge28): failed to get link speed/duplex [ 1608.316459][ T57] bond11: (slave bridge28): failed to get link speed/duplex [ 1608.352056][T26363] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1608.407348][T26364] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1608.436049][ T57] bond11: (slave bridge28): failed to get link speed/duplex [ 1608.474220][T26369] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11798'. [ 1608.556226][T28707] bond11: (slave bridge28): failed to get link speed/duplex [ 1608.677782][T26373] nbd12: detected capacity change from 0 to 63 [ 1608.696812][T26384] netlink: 'syz.3.11804': attribute type 1 has an invalid length. [ 1608.704749][ T5141] block nbd12: Receive control failed (result -32) [ 1608.723099][T26143] block nbd12: Dead connection, failed to find a fallback [ 1608.730385][T26143] block nbd12: shutting down sockets [ 1608.735690][T26143] blk_print_req_error: 138 callbacks suppressed [ 1608.735707][T26143] I/O error, dev nbd12, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1608.752596][T26143] buffer_io_error: 138 callbacks suppressed [ 1608.752614][T26143] Buffer I/O error on dev nbd12, logical block 0, async page read [ 1608.767027][T26143] I/O error, dev nbd12, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1608.777319][T26143] Buffer I/O error on dev nbd12, logical block 1, async page read [ 1608.785233][T26143] I/O error, dev nbd12, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1608.795979][T26143] Buffer I/O error on dev nbd12, logical block 2, async page read [ 1608.803900][T26143] I/O error, dev nbd12, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1608.805029][T26384] 8021q: adding VLAN 0 to HW filter on device bond15 [ 1608.814158][T26143] Buffer I/O error on dev nbd12, logical block 3, async page read [ 1608.829931][T26143] I/O error, dev nbd12, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1608.830473][T26390] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11802'. [ 1608.844021][T26143] Buffer I/O error on dev nbd12, logical block 0, async page read [ 1608.896707][T26143] I/O error, dev nbd12, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1608.916952][T26389] vlan4: entered promiscuous mode [ 1608.938295][T26143] Buffer I/O error on dev nbd12, logical block 1, async page read [ 1608.949281][T26143] I/O error, dev nbd12, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1608.949698][T26389] bond15: entered promiscuous mode [ 1608.981667][T26143] Buffer I/O error on dev nbd12, logical block 2, async page read [ 1608.987453][T26389] vlan4: entered allmulticast mode [ 1609.001019][T26389] bond15: entered allmulticast mode [ 1609.013546][T26143] I/O error, dev nbd12, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1609.046487][T26143] Buffer I/O error on dev nbd12, logical block 3, async page read [ 1609.073039][T26143] I/O error, dev nbd12, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1609.089676][T26143] Buffer I/O error on dev nbd12, logical block 0, async page read [ 1609.108504][T26143] I/O error, dev nbd12, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1609.138777][T26143] Buffer I/O error on dev nbd12, logical block 1, async page read [ 1609.151619][T26389] bond15: (slave bridge0): making interface the new active one [ 1609.163897][T26143] ldm_validate_partition_table(): Disk read failed. [ 1609.183787][T26143] Dev nbd12: unable to read RDB block 0 [ 1609.191694][T26389] bridge0: entered promiscuous mode [ 1609.206486][T26143] nbd12: unable to read partition table [ 1609.212424][T26389] bridge0: entered allmulticast mode [ 1609.223166][T26389] bond15: (slave bridge0): Enslaving as an active interface with an up link [ 1609.234662][T26143] ldm_validate_partition_table(): Disk read failed. [ 1609.242947][T26143] Dev nbd12: unable to read RDB block 0 [ 1609.265630][T26143] nbd12: unable to read partition table [ 1609.339590][T26418] FAULT_INJECTION: forcing a failure. [ 1609.339590][T26418] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1609.353874][T26418] CPU: 0 UID: 0 PID: 26418 Comm: syz.2.11812 Not tainted syzkaller #0 PREEMPT(full) [ 1609.353900][T26418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1609.353911][T26418] Call Trace: [ 1609.353919][T26418] [ 1609.353927][T26418] dump_stack_lvl+0xe8/0x150 [ 1609.353957][T26418] should_fail_ex+0x412/0x560 [ 1609.353983][T26418] _copy_from_user+0x2d/0xb0 [ 1609.354008][T26418] generic_map_update_batch+0x648/0x990 [ 1609.354039][T26418] ? __pfx_generic_map_update_batch+0x10/0x10 [ 1609.354061][T26418] ? __fget_files+0x2a/0x420 [ 1609.354091][T26418] ? __pfx_generic_map_update_batch+0x10/0x10 [ 1609.354112][T26418] bpf_map_do_batch+0x39b/0x630 [ 1609.354136][T26418] __sys_bpf+0x7c1/0x950 [ 1609.354163][T26418] ? __pfx___sys_bpf+0x10/0x10 [ 1609.354202][T26418] ? ksys_write+0x242/0x270 [ 1609.354222][T26418] ? __pfx_ksys_write+0x10/0x10 [ 1609.354247][T26418] __x64_sys_bpf+0x7c/0x90 [ 1609.354270][T26418] do_syscall_64+0x14d/0xf80 [ 1609.354294][T26418] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1609.354312][T26418] ? clear_bhb_loop+0x40/0x90 [ 1609.354333][T26418] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1609.354360][T26418] RIP: 0033:0x7f056679c629 [ 1609.354377][T26418] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1609.354391][T26418] RSP: 002b:00007f056757f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1609.354410][T26418] RAX: ffffffffffffffda RBX: 00007f0566a15fa0 RCX: 00007f056679c629 [ 1609.354422][T26418] RDX: 0000000000000038 RSI: 00002000000000c0 RDI: 000000000000001a [ 1609.354434][T26418] RBP: 00007f056757f090 R08: 0000000000000000 R09: 0000000000000000 [ 1609.354445][T26418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1609.354455][T26418] R13: 00007f0566a16038 R14: 00007f0566a15fa0 R15: 00007ffe9e333078 [ 1609.354485][T26418] [ 1609.845578][T26433] netlink: 64 bytes leftover after parsing attributes in process `syz.4.11818'. [ 1609.948452][T26440] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11821'. [ 1610.059240][T26451] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11821'. [ 1610.088257][T26451] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11821'. [ 1610.407232][T26467] netlink: 'syz.3.11829': attribute type 6 has an invalid length. [ 1610.443410][T26473] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11827'. [ 1610.883436][T26500] veth1_vlan: left allmulticast mode [ 1611.118810][T26514] vlan4: entered promiscuous mode [ 1611.306997][T26502] wg1 speed is unknown, defaulting to 1000 [ 1611.314610][T26502] lo speed is unknown, defaulting to 1000 [ 1611.397909][T26523] netlink: 'syz.1.11850': attribute type 1 has an invalid length. [ 1611.450281][T26526] syzkaller1: entered promiscuous mode [ 1611.465958][T26526] syzkaller1: entered allmulticast mode [ 1611.776764][T26545] FAULT_INJECTION: forcing a failure. [ 1611.776764][T26545] name failslab, interval 1, probability 0, space 0, times 0 [ 1611.798013][T26545] CPU: 0 UID: 0 PID: 26545 Comm: syz.1.11860 Not tainted syzkaller #0 PREEMPT(full) [ 1611.798040][T26545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1611.798050][T26545] Call Trace: [ 1611.798058][T26545] [ 1611.798066][T26545] dump_stack_lvl+0xe8/0x150 [ 1611.798095][T26545] should_fail_ex+0x412/0x560 [ 1611.798121][T26545] should_failslab+0xa8/0x100 [ 1611.798145][T26545] __kmalloc_cache_noprof+0x88/0x660 [ 1611.798163][T26545] ? sctp_v6_cmp_addr+0x15/0xd0 [ 1611.798184][T26545] ? sctp_add_bind_addr+0x8c/0x370 [ 1611.798211][T26545] sctp_add_bind_addr+0x8c/0x370 [ 1611.798245][T26545] sctp_copy_local_addr_list+0x314/0x4f0 [ 1611.798271][T26545] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 1611.798292][T26545] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1611.798316][T26545] ? sctp_v6_is_any+0x64/0x80 [ 1611.798339][T26545] ? sctp_copy_one_addr+0x93/0x360 [ 1611.798364][T26545] sctp_bind_addr_copy+0xb3/0x3c0 [ 1611.798386][T26545] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1611.798409][T26545] sctp_connect_new_asoc+0x2ff/0x6b0 [ 1611.798437][T26545] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1611.798468][T26545] ? __local_bh_enable_ip+0xd0/0x130 [ 1611.798488][T26545] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1611.798508][T26545] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1611.798539][T26545] sctp_sendmsg+0x1528/0x2c10 [ 1611.798578][T26545] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1611.798601][T26545] ? aa_sk_perm+0x15a/0x960 [ 1611.798623][T26545] ? aa_sk_perm+0x82d/0x960 [ 1611.798650][T26545] ? __pfx_aa_sk_perm+0x10/0x10 [ 1611.798672][T26545] ? sock_rps_record_flow+0x19/0x400 [ 1611.798701][T26545] ? inet_sendmsg+0x2f4/0x370 [ 1611.798729][T26545] __sys_sendto+0x627/0x7a0 [ 1611.798755][T26545] ? __pfx___sys_sendto+0x10/0x10 [ 1611.798775][T26545] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1611.798815][T26545] ? __fget_files+0x3a0/0x420 [ 1611.798850][T26545] ? ksys_write+0x242/0x270 [ 1611.798871][T26545] ? __pfx_ksys_write+0x10/0x10 [ 1611.798895][T26545] __x64_sys_sendto+0xde/0x100 [ 1611.798922][T26545] do_syscall_64+0x14d/0xf80 [ 1611.798946][T26545] ? trace_irq_disable+0x3b/0x150 [ 1611.798970][T26545] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1611.798989][T26545] ? clear_bhb_loop+0x40/0x90 [ 1611.799011][T26545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1611.799029][T26545] RIP: 0033:0x7fc21a39c629 [ 1611.799046][T26545] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1611.799061][T26545] RSP: 002b:00007fc21b2b1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1611.799081][T26545] RAX: ffffffffffffffda RBX: 00007fc21a615fa0 RCX: 00007fc21a39c629 [ 1611.799094][T26545] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000005 [ 1611.799106][T26545] RBP: 00007fc21b2b1090 R08: 000020000005ffe4 R09: 000000000000001c [ 1611.799118][T26545] R10: 00000000000000e0 R11: 0000000000000246 R12: 0000000000000002 [ 1611.799130][T26545] R13: 00007fc21a616038 R14: 00007fc21a615fa0 R15: 00007ffe4f7a4568 [ 1611.799161][T26545] [ 1612.113796][T26552] netlink: 'syz.3.11863': attribute type 1 has an invalid length. [ 1612.707600][ T57] net_ratelimit: 25 callbacks suppressed [ 1612.707619][ T57] bond11: (slave bridge28): failed to get link speed/duplex [ 1612.836369][T28691] bond11: (slave bridge28): failed to get link speed/duplex [ 1612.905837][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5490 ms [ 1612.913885][ C0] lec:lec_tx_timeout: lec0 [ 1612.918625][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1612.966090][T28707] bond11: (slave bridge28): failed to get link speed/duplex [ 1613.090420][T26606] __nla_validate_parse: 3 callbacks suppressed [ 1613.090441][T26606] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11885'. [ 1613.123815][T26604] openvswitch: netlink: IPv4 tunnel dst address is zero [ 1613.130946][ T57] bond11: (slave bridge28): failed to get link speed/duplex [ 1613.161293][ T2161] block nbd4: Possible stuck request ffff888026630000: control (read@0,1024B). Runtime 76 seconds [ 1613.172214][ T2161] block nbd4: Possible stuck request ffff888026630200: control (read@1024,1024B). Runtime 76 seconds [ 1613.183280][ T2161] block nbd4: Possible stuck request ffff888026630400: control (read@2048,1024B). Runtime 76 seconds [ 1613.194833][ T2161] block nbd4: Possible stuck request ffff888026630600: control (read@3072,1024B). Runtime 76 seconds [ 1613.367362][ T57] bond11: (slave bridge28): failed to get link speed/duplex [ 1613.479088][T26607] wg1 speed is unknown, defaulting to 1000 [ 1613.486810][T26607] lo speed is unknown, defaulting to 1000 [ 1613.575973][T28691] bond11: (slave bridge28): failed to get link speed/duplex [ 1613.608228][T26625] netlink: 'syz.2.11893': attribute type 1 has an invalid length. [ 1613.673175][T26625] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1613.717753][T26631] vlan4: entered promiscuous mode [ 1613.736344][T26630] nbd13: detected capacity change from 0 to 63 [ 1613.751201][ T5141] block nbd13: Receive control failed (result -104) [ 1613.766435][T26631] bond13: entered promiscuous mode [ 1613.771781][T26631] vlan4: entered allmulticast mode [ 1613.805425][T26631] bond13: entered allmulticast mode [ 1614.060475][T26640] dummy0: Caught tx_queue_len zero misconfig [ 1614.136068][ T57] bond11: (slave bridge28): failed to get link speed/duplex [ 1614.217529][T26655] FAULT_INJECTION: forcing a failure. [ 1614.217529][T26655] name failslab, interval 1, probability 0, space 0, times 0 [ 1614.244221][T26655] CPU: 1 UID: 0 PID: 26655 Comm: syz.2.11903 Not tainted syzkaller #0 PREEMPT(full) [ 1614.244246][T26655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1614.244258][T26655] Call Trace: [ 1614.244265][T26655] [ 1614.244273][T26655] dump_stack_lvl+0xe8/0x150 [ 1614.244304][T26655] should_fail_ex+0x412/0x560 [ 1614.244330][T26655] should_failslab+0xa8/0x100 [ 1614.244353][T26655] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 1614.244381][T26655] ? __alloc_skb+0x186/0x7d0 [ 1614.244402][T26655] ? __alloc_skb+0x1d0/0x7d0 [ 1614.244420][T26655] ? __local_bh_enable_ip+0xd0/0x130 [ 1614.244446][T26655] __alloc_skb+0x1d0/0x7d0 [ 1614.244473][T26655] netlink_sendmsg+0x5d4/0xb40 [ 1614.244504][T26655] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1614.244529][T26655] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1614.244551][T26655] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1614.244572][T26655] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1614.244591][T26655] ____sys_sendmsg+0xa68/0xad0 [ 1614.244623][T26655] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1614.244656][T26655] ? import_iovec+0x73/0xa0 [ 1614.244683][T26655] ___sys_sendmsg+0x2a5/0x360 [ 1614.244712][T26655] ? __pfx____sys_sendmsg+0x10/0x10 [ 1614.244768][T26655] ? __fget_files+0x2a/0x420 [ 1614.244791][T26655] ? __fget_files+0x3a0/0x420 [ 1614.244818][T26655] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1614.244840][T26655] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1614.244870][T26655] ? __pfx_ksys_write+0x10/0x10 [ 1614.244896][T26655] do_syscall_64+0x14d/0xf80 [ 1614.244920][T26655] ? trace_irq_disable+0x3b/0x150 [ 1614.244942][T26655] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1614.244957][T26655] ? clear_bhb_loop+0x40/0x90 [ 1614.244979][T26655] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1614.244995][T26655] RIP: 0033:0x7f056679c629 [ 1614.245012][T26655] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1614.245028][T26655] RSP: 002b:00007f056757f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1614.245045][T26655] RAX: ffffffffffffffda RBX: 00007f0566a15fa0 RCX: 00007f056679c629 [ 1614.245055][T26655] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 1614.245065][T26655] RBP: 00007f056757f090 R08: 0000000000000000 R09: 0000000000000000 [ 1614.245075][T26655] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1614.245085][T26655] R13: 00007f0566a16038 R14: 00007f0566a15fa0 R15: 00007ffe9e333078 [ 1614.245113][T26655] [ 1614.489662][T28691] bond11: (slave bridge28): failed to get link speed/duplex [ 1614.608945][T26668] netlink: 64 bytes leftover after parsing attributes in process `syz.0.11905'. [ 1614.629296][T28704] bond11: (slave bridge28): failed to get link speed/duplex [ 1614.822208][T26676] mac80211_hwsim hwsim37 wlan0: entered promiscuous mode [ 1614.979239][T26687] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11914'. [ 1615.078246][ T2238] block nbd6: Possible stuck request ffff8880266c0000: control (read@0,1024B). Runtime 60 seconds [ 1615.088973][ T2238] block nbd6: Possible stuck request ffff8880266c0200: control (read@1024,1024B). Runtime 60 seconds [ 1615.100003][ T2238] block nbd6: Possible stuck request ffff8880266c0400: control (read@2048,1024B). Runtime 60 seconds [ 1615.110924][ T2238] block nbd6: Possible stuck request ffff8880266c0600: control (read@3072,1024B). Runtime 60 seconds [ 1615.589732][T26697] [ 1615.590380][T26703] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11917'. [ 1615.592188][T26697] ====================================================== [ 1615.592199][T26697] WARNING: possible circular locking dependency detected [ 1615.592221][T26697] syzkaller #0 Not tainted [ 1615.592233][T26697] ------------------------------------------------------ [ 1615.607013][T26703] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11917'. [ 1615.608164][T26697] syz.0.11915/26697 is trying to acquire lock: [ 1615.608178][T26697] ffff8880252a98b0 (&q->elevator_lock){+.+.}-{4:4} [ 1615.615762][T26703] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11917'. [ 1615.619624][T26697] , at: elevator_change+0x1b3/0x450 [ 1615.619656][T26697] [ 1615.619656][T26697] but task is already holding lock: [ 1615.619662][T26697] ffff8880252a9370 (&q->q_usage_counter(io)#63){++++}-{0:0}, at: elevator_change+0x198/0x450 [ 1615.619714][T26697] [ 1615.619714][T26697] which lock already depends on the new lock. [ 1615.619714][T26697] [ 1615.619720][T26697] [ 1615.619720][T26697] the existing dependency chain (in reverse order) is: [ 1615.619727][T26697] [ 1615.619727][T26697] -> #6 (&q->q_usage_counter(io)#63){++++}-{0:0}: [ 1615.619757][T26697] blk_alloc_queue+0x546/0x680 [ 1615.633618][T26703] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11917'. [ 1615.635697][T26697] __blk_mq_alloc_disk+0x197/0x390 [ 1615.635723][T26697] nbd_dev_add+0x499/0xb50 [ 1615.642635][T26703] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11917'. [ 1615.648352][T26697] nbd_init+0x168/0x1f0 [ 1615.648385][T26697] do_one_initcall+0x250/0x8d0 [ 1615.648406][T26697] do_initcall_level+0x104/0x190 [ 1615.648427][T26697] do_initcalls+0x59/0xa0 [ 1615.648446][T26697] kernel_init_freeable+0x2a6/0x3e0 [ 1615.648467][T26697] kernel_init+0x1d/0x1d0 [ 1615.648485][T26697] ret_from_fork+0x51e/0xb90 [ 1615.658881][T26703] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11917'. [ 1615.662579][T26697] ret_from_fork_asm+0x1a/0x30 [ 1615.662611][T26697] [ 1615.662611][T26697] -> #5 ( [ 1615.671461][T26703] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11917'. [ 1615.680190][T26697] fs_reclaim){+.+.}-{0:0}: [ 1615.680212][T26697] fs_reclaim_acquire+0x71/0x100 [ 1615.680235][T26697] kmem_cache_alloc_node_noprof+0x4a/0x690 [ 1615.680262][T26697] __alloc_skb+0x1d0/0x7d0 [ 1615.680282][T26697] __ip6_append_data+0x2a44/0x3c50 [ 1615.680305][T26697] ip6_append_data+0x10f/0x280 [ 1615.680325][T26697] rawv6_sendmsg+0x12d3/0x18e0 [ 1615.680352][T26697] ____sys_sendmsg+0x894/0xad0 [ 1615.680377][T26697] ___sys_sendmsg+0x2a5/0x360 [ 1615.680400][T26697] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1615.680426][T26697] do_syscall_64+0x14d/0xf80 [ 1615.864013][T26697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1615.870424][T26697] [ 1615.870424][T26697] -> #4 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 1615.878145][T26697] lock_sock_nested+0x48/0x100 [ 1615.883419][T26697] inet_shutdown+0x6a/0x390 [ 1615.888434][T26697] nbd_mark_nsock_dead+0x2e9/0x560 [ 1615.894058][T26697] recv_work+0x1c7f/0x1d90 [ 1615.898984][T26697] process_scheduled_works+0xb02/0x1830 [ 1615.905044][T26697] worker_thread+0xa50/0xfc0 [ 1615.910144][T26697] kthread+0x388/0x470 [ 1615.914717][T26697] ret_from_fork+0x51e/0xb90 [ 1615.919813][T26697] ret_from_fork_asm+0x1a/0x30 [ 1615.925090][T26697] [ 1615.925090][T26697] -> #3 (&nsock->tx_lock){+.+.}-{4:4}: [ 1615.932724][T26697] __mutex_lock+0x19f/0x1300 [ 1615.937830][T26697] nbd_queue_rq+0x37b/0x1100 [ 1615.942928][T26697] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 1615.948990][T26697] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 1615.955839][T26697] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1615.962346][T26697] blk_mq_run_hw_queue+0x348/0x4f0 [ 1615.967971][T26697] blk_mq_dispatch_list+0xd16/0xe10 [ 1615.973686][T26697] blk_mq_flush_plug_list+0x48d/0x570 [ 1615.979575][T26697] __blk_flush_plug+0x3ed/0x4d0 [ 1615.984938][T26697] __submit_bio+0x28d/0x580 [ 1615.989953][T26697] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 1615.996115][T26697] block_read_full_folio+0x599/0x830 [ 1616.001941][T26697] filemap_read_folio+0x137/0x3b0 [ 1616.007495][T26697] do_read_cache_folio+0x358/0x590 [ 1616.013301][T26697] read_part_sector+0xb6/0x2b0 [ 1616.018586][T26697] adfspart_check_ICS+0xa5/0xa40 [ 1616.024041][T26697] bdev_disk_changed+0x7ba/0x1550 [ 1616.029583][T26697] blkdev_get_whole+0x380/0x510 [ 1616.034953][T26697] bdev_open+0x31e/0xd30 [ 1616.039704][T26697] blkdev_open+0x470/0x610 [ 1616.044632][T26697] do_dentry_open+0x785/0x14e0 [ 1616.049908][T26697] vfs_open+0x3b/0x340 [ 1616.054510][T26697] path_openat+0x2e08/0x3860 [ 1616.059637][T26697] do_file_open+0x23e/0x4a0 [ 1616.064659][T26697] do_sys_openat2+0x113/0x200 [ 1616.069852][T26697] __x64_sys_openat+0x138/0x170 [ 1616.075253][T26697] do_syscall_64+0x14d/0xf80 [ 1616.080365][T26697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1616.086773][T26697] [ 1616.086773][T26697] -> #2 (&cmd->lock){+.+.}-{4:4}: [ 1616.094065][T26697] __mutex_lock+0x19f/0x1300 [ 1616.099174][T26697] nbd_queue_rq+0xc6/0x1100 [ 1616.104190][T26697] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 1616.110252][T26697] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 1616.117098][T26697] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1616.123599][T26697] blk_mq_run_hw_queue+0x348/0x4f0 [ 1616.129221][T26697] blk_mq_dispatch_list+0xd16/0xe10 [ 1616.134940][T26697] blk_mq_flush_plug_list+0x48d/0x570 [ 1616.140832][T26697] __blk_flush_plug+0x3ed/0x4d0 [ 1616.146205][T26697] __submit_bio+0x28d/0x580 [ 1616.151294][T26697] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 1616.157443][T26697] block_read_full_folio+0x599/0x830 [ 1616.163245][T26697] filemap_read_folio+0x137/0x3b0 [ 1616.168781][T26697] do_read_cache_folio+0x358/0x590 [ 1616.174403][T26697] read_part_sector+0xb6/0x2b0 [ 1616.179687][T26697] adfspart_check_ICS+0xa5/0xa40 [ 1616.185196][T26697] bdev_disk_changed+0x7ba/0x1550 [ 1616.190739][T26697] blkdev_get_whole+0x380/0x510 [ 1616.196110][T26697] bdev_open+0x31e/0xd30 [ 1616.200877][T26697] blkdev_open+0x470/0x610 [ 1616.205798][T26697] do_dentry_open+0x785/0x14e0 [ 1616.211076][T26697] vfs_open+0x3b/0x340 [ 1616.215655][T26697] path_openat+0x2e08/0x3860 [ 1616.220750][T26697] do_file_open+0x23e/0x4a0 [ 1616.225758][T26697] do_sys_openat2+0x113/0x200 [ 1616.230953][T26697] __x64_sys_openat+0x138/0x170 [ 1616.236323][T26697] do_syscall_64+0x14d/0xf80 [ 1616.241432][T26697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1616.247832][T26697] [ 1616.247832][T26697] -> #1 (set->srcu){.+.+}-{0:0}: [ 1616.254948][T26697] __synchronize_srcu+0xca/0x3e0 [ 1616.260404][T26697] elevator_switch+0x1e8/0x7a0 [ 1616.265681][T26697] elevator_change+0x2cc/0x450 [ 1616.270962][T26697] elevator_set_default+0x36c/0x430 [ 1616.276678][T26697] blk_register_queue+0x366/0x430 [ 1616.282214][T26697] __add_disk+0x677/0xd50 [ 1616.287229][T26697] add_disk_fwnode+0xfb/0x480 [ 1616.292499][T26697] nbd_dev_add+0x72c/0xb50 [ 1616.297425][T26697] nbd_init+0x168/0x1f0 [ 1616.302095][T26697] do_one_initcall+0x250/0x8d0 [ 1616.307370][T26697] do_initcall_level+0x104/0x190 [ 1616.312818][T26697] do_initcalls+0x59/0xa0 [ 1616.317689][T26697] kernel_init_freeable+0x2a6/0x3e0 [ 1616.323424][T26697] kernel_init+0x1d/0x1d0 [ 1616.328291][T26697] ret_from_fork+0x51e/0xb90 [ 1616.333423][T26697] ret_from_fork_asm+0x1a/0x30 [ 1616.338774][T26697] [ 1616.338774][T26697] -> #0 (&q->elevator_lock){+.+.}-{4:4}: [ 1616.346590][T26697] __lock_acquire+0x15a5/0x2cf0 [ 1616.351958][T26697] lock_acquire+0xf0/0x2e0 [ 1616.356883][T26697] __mutex_lock+0x19f/0x1300 [ 1616.361988][T26697] elevator_change+0x1b3/0x450 [ 1616.367269][T26697] elevator_set_none+0xb5/0x140 [ 1616.372632][T26697] blk_mq_update_nr_hw_queues+0x5e7/0x1ae0 [ 1616.378948][T26697] nbd_start_device+0x17f/0xb10 [ 1616.384307][T26697] nbd_genl_connect+0x165b/0x1cf0 [ 1616.389840][T26697] genl_family_rcv_msg_doit+0x22a/0x330 [ 1616.395898][T26697] genl_rcv_msg+0x61c/0x7a0 [ 1616.400924][T26697] netlink_rcv_skb+0x232/0x4b0 [ 1616.406197][T26697] genl_rcv+0x28/0x40 [ 1616.410698][T26697] netlink_unicast+0x80f/0x9b0 [ 1616.415970][T26697] netlink_sendmsg+0x813/0xb40 [ 1616.421255][T26697] ____sys_sendmsg+0xa68/0xad0 [ 1616.426553][T26697] ___sys_sendmsg+0x2a5/0x360 [ 1616.431767][T26697] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1616.437241][T26697] do_syscall_64+0x14d/0xf80 [ 1616.442361][T26697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1616.448764][T26697] [ 1616.448764][T26697] other info that might help us debug this: [ 1616.448764][T26697] [ 1616.459006][T26697] Chain exists of: [ 1616.459006][T26697] &q->elevator_lock --> fs_reclaim --> &q->q_usage_counter(io)#63 [ 1616.459006][T26697] [ 1616.472751][T26697] Possible unsafe locking scenario: [ 1616.472751][T26697] [ 1616.480189][T26697] CPU0 CPU1 [ 1616.485539][T26697] ---- ---- [ 1616.490883][T26697] lock(&q->q_usage_counter(io)#63); [ 1616.496267][T26697] lock(fs_reclaim); [ 1616.502788][T26697] lock(&q->q_usage_counter(io)#63); [ 1616.510680][T26697] lock(&q->elevator_lock); [ 1616.515263][T26697] [ 1616.515263][T26697] *** DEADLOCK *** [ 1616.515263][T26697] [ 1616.523402][T26697] 6 locks held by syz.0.11915/26697: [ 1616.528768][T26697] #0: ffffffff8fc39470 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1616.536965][T26697] #1: ffffffff8fc39288 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1616.545928][T26697] #2: ffff8880268fb9d0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0xad/0x1ae0 [ 1616.557328][T26697] #3: ffff8880268fb8d8 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xc0/0x1ae0 [ 1616.568294][T26697] #4: ffff8880252a9370 (&q->q_usage_counter(io)#63){++++}-{0:0}, at: elevator_change+0x198/0x450 [ 1616.578929][T26697] #5: ffff8880252a93a8 (&q->q_usage_counter(queue)#47){+.+.}-{0:0}, at: elevator_change+0x198/0x450 [ 1616.589821][T26697] [ 1616.589821][T26697] stack backtrace: [ 1616.595710][T26697] CPU: 0 UID: 0 PID: 26697 Comm: syz.0.11915 Not tainted syzkaller #0 PREEMPT(full) [ 1616.595732][T26697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1616.595742][T26697] Call Trace: [ 1616.595751][T26697] [ 1616.595760][T26697] dump_stack_lvl+0xe8/0x150 [ 1616.595786][T26697] print_circular_bug+0x2e1/0x300 [ 1616.595812][T26697] check_noncircular+0x12e/0x150 [ 1616.595836][T26697] __lock_acquire+0x15a5/0x2cf0 [ 1616.595867][T26697] lock_acquire+0xf0/0x2e0 [ 1616.595885][T26697] ? elevator_change+0x1b3/0x450 [ 1616.595916][T26697] __mutex_lock+0x19f/0x1300 [ 1616.595940][T26697] ? elevator_change+0x1b3/0x450 [ 1616.595962][T26697] ? rcu_is_watching+0x15/0xb0 [ 1616.595984][T26697] ? elevator_change+0x1b3/0x450 [ 1616.596006][T26697] ? __pfx___mutex_lock+0x10/0x10 [ 1616.596027][T26697] ? enable_work+0x17f/0x230 [ 1616.596050][T26697] ? lockdep_hardirqs_on+0x7a/0x110 [ 1616.596073][T26697] ? __cancel_work_sync+0xf7/0x110 [ 1616.596096][T26697] ? blk_mq_cancel_work_sync+0xa5/0xe0 [ 1616.596112][T26697] elevator_change+0x1b3/0x450 [ 1616.596136][T26697] elevator_set_none+0xb5/0x140 [ 1616.596156][T26697] ? __pfx_elevator_set_none+0x10/0x10 [ 1616.596179][T26697] ? xa_load+0x1db/0x210 [ 1616.596195][T26697] blk_mq_update_nr_hw_queues+0x5e7/0x1ae0 [ 1616.596217][T26697] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1616.596239][T26697] ? kernfs_add_one+0x477/0x5c0 [ 1616.596260][T26697] ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10 [ 1616.596280][T26697] ? sysfs_add_file_mode_ns+0x259/0x300 [ 1616.596300][T26697] nbd_start_device+0x17f/0xb10 [ 1616.596323][T26697] ? device_create_file+0xf4/0x1b0 [ 1616.596346][T26697] nbd_genl_connect+0x165b/0x1cf0 [ 1616.596370][T26697] ? __pfx_nbd_genl_connect+0x10/0x10 [ 1616.596391][T26697] ? rcu_is_watching+0x15/0xb0 [ 1616.596414][T26697] ? __nla_parse+0x40/0x60 [ 1616.596435][T26697] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 1616.596461][T26697] genl_family_rcv_msg_doit+0x22a/0x330 [ 1616.596486][T26697] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1616.596513][T26697] ? __lock_acquire+0x6b5/0x2cf0 [ 1616.596533][T26697] genl_rcv_msg+0x61c/0x7a0 [ 1616.596556][T26697] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1616.596576][T26697] ? __pfx_nbd_genl_connect+0x10/0x10 [ 1616.596596][T26697] ? __lock_acquire+0x6b5/0x2cf0 [ 1616.596618][T26697] netlink_rcv_skb+0x232/0x4b0 [ 1616.596635][T26697] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1616.596657][T26697] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1616.596680][T26697] ? down_read+0x272/0x2e0 [ 1616.596693][T26697] ? genl_rcv+0xd/0x40 [ 1616.596714][T26697] genl_rcv+0x28/0x40 [ 1616.596733][T26697] netlink_unicast+0x80f/0x9b0 [ 1616.596750][T26697] ? __pfx_netlink_unicast+0x10/0x10 [ 1616.596765][T26697] ? netlink_sendmsg+0x650/0xb40 [ 1616.596782][T26697] ? skb_put+0x11b/0x210 [ 1616.596803][T26697] netlink_sendmsg+0x813/0xb40 [ 1616.596824][T26697] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1616.596842][T26697] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1616.596861][T26697] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1616.596877][T26697] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1616.596894][T26697] ____sys_sendmsg+0xa68/0xad0 [ 1616.596921][T26697] ? futex_unqueue+0x211/0x240 [ 1616.596941][T26697] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1616.596965][T26697] ? import_iovec+0x73/0xa0 [ 1616.596986][T26697] ___sys_sendmsg+0x2a5/0x360 [ 1616.597009][T26697] ? __pfx____sys_sendmsg+0x10/0x10 [ 1616.597032][T26697] ? futex_wait+0x29a/0x380 [ 1616.597062][T26697] ? __fget_files+0x2a/0x420 [ 1616.597083][T26697] ? __fget_files+0x3a0/0x420 [ 1616.597106][T26697] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1616.597128][T26697] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1616.597152][T26697] ? rcu_is_watching+0x15/0xb0 [ 1616.597177][T26697] do_syscall_64+0x14d/0xf80 [ 1616.597199][T26697] ? trace_irq_disable+0x3b/0x150 [ 1616.597220][T26697] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1616.597236][T26697] ? clear_bhb_loop+0x40/0x90 [ 1616.597252][T26697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1616.597268][T26697] RIP: 0033:0x7f4ee0f9c629 [ 1616.597283][T26697] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1616.597297][T26697] RSP: 002b:00007f4ee1e4e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1616.597316][T26697] RAX: ffffffffffffffda RBX: 00007f4ee1215fa0 RCX: 00007f4ee0f9c629 [ 1616.597327][T26697] RDX: 0000000020000000 RSI: 0000200000001ac0 RDI: 0000000000000007 [ 1616.597338][T26697] RBP: 00007f4ee1032b39 R08: 0000000000000000 R09: 0000000000000000 [ 1616.597349][T26697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1616.597359][T26697] R13: 00007f4ee1216038 R14: 00007f4ee1215fa0 R15: 00007fff4879a4a8 [ 1616.597377][T26697] [ 1617.086015][T26683] wg1 speed is unknown, defaulting to 1000 [ 1617.091986][T26705] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 1617.092677][T26683] lo speed is unknown, defaulting to 1000 [ 1617.158634][T26704] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 1617.166585][T26704] x_tables: unsorted underflow at hook 4 [ 1617.189369][T17154] block nbd14: Receive control failed (result -32) [ 1617.196177][ T5141] block nbd14: Receive control failed (result -32) [ 1617.216593][T26697] nbd14: detected capacity change from 0 to 63 [ 1617.227108][T26387] block nbd14: Dead connection, failed to find a fallback [ 1617.234274][T26387] block nbd14: shutting down sockets [ 1617.247222][T26387] blk_print_req_error: 138 callbacks suppressed [ 1617.247243][T26387] I/O error, dev nbd14, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1617.263224][T26387] buffer_io_error: 138 callbacks suppressed [ 1617.263239][T26387] Buffer I/O error on dev nbd14, logical block 0, async page read [ 1617.278185][T26387] I/O error, dev nbd14, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1617.287810][T26387] Buffer I/O error on dev nbd14, logical block 1, async page read [ 1617.295688][T26387] I/O error, dev nbd14, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1617.305386][T26387] Buffer I/O error on dev nbd14, logical block 2, async page read [ 1617.313529][T26387] I/O error, dev nbd14, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1617.325204][T26387] Buffer I/O error on dev nbd14, logical block 3, async page read [ 1617.334539][T26387] I/O error, dev nbd14, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1617.344791][T26387] Buffer I/O error on dev nbd14, logical block 0, async page read [ 1617.353086][T26387] I/O error, dev nbd14, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1617.362867][T26387] Buffer I/O error on dev nbd14, logical block 1, async page read [ 1617.370884][T26387] I/O error, dev nbd14, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1617.380928][T26387] Buffer I/O error on dev nbd14, logical block 2, async page read [ 1617.393259][T26387] I/O error, dev nbd14, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1617.404110][T26387] Buffer I/O error on dev nbd14, logical block 3, async page read [ 1617.412293][T26387] I/O error, dev nbd14, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1617.428161][T26387] Buffer I/O error on dev nbd14, logical block 0, async page read [ 1617.436484][T26387] I/O error, dev nbd14, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1617.446380][T26387] Buffer I/O error on dev nbd14, logical block 1, async page read [ 1617.454729][T26387] ldm_validate_partition_table(): Disk read failed. [ 1617.462841][T26387] Dev nbd14: unable to read RDB block 0 [ 1617.468976][T26387] nbd14: unable to read partition table [ 1617.479788][T26387] ldm_validate_partition_table(): Disk read failed. [ 1617.486910][T26387] Dev nbd14: unable to read RDB block 0 [ 1617.492731][T26387] nbd14: unable to read partition table [ 1617.756067][T28691] net_ratelimit: 10 callbacks suppressed [ 1617.756089][T28691] bond11: (slave bridge28): failed to get link speed/duplex [ 1617.876274][T28706] bond11: (slave bridge28): failed to get link speed/duplex [ 1617.925893][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1617.933906][ C0] lec:lec_tx_timeout: lec0 [ 1617.996080][T28706] bond11: (slave bridge28): failed to get link speed/duplex [ 1618.106165][T28691] bond11: (slave bridge28): failed to get link speed/duplex [ 1618.215991][T28707] bond11: (slave bridge28): failed to get link speed/duplex [ 1618.326222][T28706] bond11: (slave bridge28): failed to get link speed/duplex [ 1618.435945][T28707] bond11: (slave bridge28): failed to get link speed/duplex [ 1618.545963][T28691] bond11: (slave bridge28): failed to get link speed/duplex [ 1618.655986][T28691] bond11: (slave bridge28): failed to get link speed/duplex [ 1618.765966][T28691] bond11: (slave bridge28): failed to get link speed/duplex [ 1618.916105][ T2161] block nbd4: Possible stuck request ffff888026630000: control (read@0,1024B). Runtime 80 seconds [ 1618.927145][ T2161] block nbd4: Possible stuck request ffff888026630200: control (read@1024,1024B). Runtime 80 seconds [ 1618.938052][ T2161] block nbd4: Possible stuck request ffff888026630400: control (read@2048,1024B). Runtime 80 seconds [ 1618.949030][ T2161] block nbd4: Possible stuck request ffff888026630600: control (read@3072,1024B). Runtime 80 seconds [ 1620.523132][ T5190] udevd[5190]: worker [16746] /devices/virtual/block/nbd6 is taking a long time [ 1622.776073][T28704] net_ratelimit: 35 callbacks suppressed [ 1622.776096][T28704] bond11: (slave bridge28): failed to get link speed/duplex [ 1622.896035][T28706] bond11: (slave bridge28): failed to get link speed/duplex [ 1623.006295][T28707] bond11: (slave bridge28): failed to get link speed/duplex [ 1623.115947][T28707] bond11: (slave bridge28): failed to get link speed/duplex [ 1623.236006][T28706] bond11: (slave bridge28): failed to get link speed/duplex [ 1623.345962][T28707] bond11: (slave bridge28): failed to get link speed/duplex [ 1623.456302][T28707] bond11: (slave bridge28): failed to get link speed/duplex [ 1623.576369][T28707] bond11: (slave bridge28): failed to get link speed/duplex [ 1623.686182][T28704] bond11: (slave bridge28): failed to get link speed/duplex [ 1623.796304][T28691] bond11: (slave bridge28): failed to get link speed/duplex [ 1624.666071][ T2161] block nbd4: Possible stuck request ffff888026630000: control (read@0,1024B). Runtime 84 seconds [ 1624.676777][ T2161] block nbd4: Possible stuck request ffff888026630200: control (read@1024,1024B). Runtime 84 seconds [ 1624.688162][ T2161] block nbd4: Possible stuck request ffff888026630400: control (read@2048,1024B). Runtime 84 seconds [ 1624.699056][ T2161] block nbd4: Possible stuck request ffff888026630600: control (read@3072,1024B). Runtime 84 seconds