last executing test programs: 2.127436095s ago: executing program 3 (id=14001): r0 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r0, 0x5) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYRESHEX=r0], 0x50) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f0000000500)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x87}, @call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r3, 0x0, 0xe, 0x0, &(0x7f0000000600)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) unshare(0x1a040500) r4 = socket(0x2, 0x3, 0x100000001) setsockopt(r4, 0xff, 0x1, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x53, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="4800000041000701feffffff00000000017c0000040042802c00018010000400cab1893a20b8d2a93521800a18001c8014000300fe800000000000000000000000000032040002"], 0x48}, 0x1, 0x0, 0x0, 0x40815}, 0xc000) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r2, &(0x7f0000000100)="03", &(0x7f0000000140)}, 0x20) socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100014800c0016"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r7 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000740)={'lo\x00'}) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000780)={'bridge_slave_0\x00', 0x0}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=ANY=[@ANYBLOB="7800000013000100000000000000000007000000", @ANYRES32=r9, @ANYBLOB="000000000000000058001a8006000000010000004c000580"], 0x78}}, 0x0) r11 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000940)={'lo\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="480000001400b59527bd7000ffdbdf250a0800ff", @ANYRES32=r12, @ANYBLOB="1400020000000000000000000000000000000001140001000000000091280000000000000000001a0800090002000000"], 0x48}, 0x1, 0x0, 0x0, 0x2004c040}, 0x0) 1.983968956s ago: executing program 2 (id=14003): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000900)="180000006a00f96b13243a939ed6ff6b26a5f8211bf7b5e8", 0x18}], 0x1}, 0x4080) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000580)={'gretap0\x00', &(0x7f0000000500)={'gre0\x00', 0x0, 0x10, 0x700, 0x80000000, 0x0, {{0xb, 0x4, 0x1, 0x8, 0x2c, 0x66, 0x0, 0x9, 0x29, 0x0, @remote, @private=0xa010102, {[@timestamp={0x44, 0x18, 0xe1, 0x0, 0x8, [0x3, 0x8, 0x9, 0x5, 0x40df]}]}}}}}) pipe(&(0x7f00000005c0)={0xffffffffffffffff}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000600)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x2, '\x00', r1, r2, 0x2, 0x0, 0x3}, 0x50) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000340)=@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000003c0)="af", 0x1}], 0x1, 0x0, 0x0, 0x24000001}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x4e20, @broadcast}, 0x10) socketpair(0x2b, 0x6, 0x5, &(0x7f0000000680)={0xffffffffffffffff}) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f00000006c0)=0x1000, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000480)={0x1f, 0xffff, 0x3}, 0x6) write(r5, &(0x7f00000004c0)="190004000800aaaaaa0103000000", 0xe) (fail_nth: 4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x40, r7, 0x1, 0x70bd29, 0x0, {{0x2}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x41, 0x60}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x976}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x40}}, 0x80) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000040)={0x801}, 0x10) sendmsg$nl_generic(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRES16=r8], 0x20}}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r8, 0x6, 0x14, &(0x7f0000000180)=0x1, 0x4) 1.895665387s ago: executing program 3 (id=14004): r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000280)) r1 = socket(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004", 0x25}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20004080) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00'], 0x44}}, 0x2000800) sendmmsg(r1, &(0x7f0000000280), 0x4000000000001f2, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x10, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x86}}, {}, [@alu={0x7, 0x1, 0x7, 0x9}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41000, 0x2f}, 0x94) 1.797474409s ago: executing program 2 (id=14005): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), r0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000000)='802.15.4 MAC\x00', 0x280201, &(0x7f0000000080)={@_ha_fsid={[0x6, 0x802]}, {0x400, 0x9, 0x9, 0x80000001}}, 0x6, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000100)=0xb}) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7f}, 0xfffffffffffffe49) r3 = socket(0x10, 0x3, 0x0) r4 = socket(0x1e, 0x2, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f00000003c0), 0x4) recvmmsg(r4, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000004c0)=""/174, 0xae}], 0x1, &(0x7f0000000580)=""/67, 0x43}, 0x1}], 0x1, 0x40002122, 0x0) sendmsg$tipc(r4, &(0x7f0000000600)={&(0x7f0000000640)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x1, 0x2}}, 0x10, &(0x7f0000000680)=[{&(0x7f00000006c0)="e8", 0x1}], 0x1, 0x0, 0x0, 0x1}, 0x4800) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="18020000fbffffff00000000000000008500000036000000850000001100000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x32}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r5, 0x0, 0xe, 0x0, &(0x7f0000000380)="05a42f284a5bf1fa61960ae8f0f9", 0x0, 0x4fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) sendmmsg(r3, &(0x7f0000000000), 0x400000000000235, 0x0) setsockopt$inet6_int(r3, 0x29, 0x7, &(0x7f0000000040)=0x2, 0x4) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB='(\x00', @ANYRES16=r1, @ANYBLOB="01060100000003000000270000000a0001007770616e340000000500310002000000"], 0xfffffffffffffd66}}, 0x0) 1.747457998s ago: executing program 3 (id=14006): socket$inet6(0xa, 0x80802, 0x0) pipe(&(0x7f0000000240)) socket$netlink(0x10, 0x3, 0x4) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xfffffd22}, 0x94) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) r3 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f00000000c0)={0x84, @rand_addr=0x64010102, 0x4e20, 0x3, 'nq\x00', 0x30, 0x3, 0x74}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f00000002c0)={{0x84, @multicast2, 0x4f29, 0x3, 'sh\x00', 0x5, 0xc, 0x6c}, {@loopback, 0x4e23, 0x10000, 0x1, 0x1}}, 0x44) sendmsg$sock(r2, &(0x7f0000000340)={&(0x7f0000000380)=@in6={0x2, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xfd}}, 0x80, 0x0, 0x0, &(0x7f0000000400)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="6c00000010001fff109e00008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000440012800b00010067656e6576650000340002800500030003000000060005004e20000005000400ab000000050009000100000005000a0001000000050009000100000008000a00", @ANYRES32=r7], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x10, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r8, @ANYBLOB="0000000002000000b705000008000000850000005d00000095"], &(0x7f00000008c0)='GPL\x00', 0x4, 0x2a, &(0x7f0000000e80)=""/4098, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r9 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f0000001ec0), r9) getsockname$packet(r9, &(0x7f0000001f00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001f40)=0x14) sendmsg$nl_route(r1, &(0x7f0000002000)={0x0, 0x0, &(0x7f0000002040)={&(0x7f0000002080)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r10, @ANYBLOB="01"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000020c0)={0x0, 0x0, &(0x7f0000002100)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) 1.676372845s ago: executing program 4 (id=14008): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf4}, 0x8) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_SUPPORTED(r0, 0x84, 0x81, &(0x7f00000007c0)={0x0, 0x7f}, 0x8) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f0000000100)={0xa, 0x4e23, 0x1, @loopback={0xf803000000000000}, 0x1}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000180)='\t', 0x1}], 0x1}}], 0x1, 0x0) 1.496899248s ago: executing program 2 (id=14010): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) syz_genetlink_get_family_id$team(&(0x7f0000000040), r2) ioctl$XFS_IOC_FSGETXATTRA(r1, 0x801c582d, &(0x7f00000000c0)) r4 = socket$nl_generic(0x10, 0x3, 0x10) write(r4, &(0x7f00000000c0), 0x0) write(r4, 0x0, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r5, &(0x7f0000000140)={0x2, 0x5000, @loopback}, 0x10) listen(r5, 0xa) r6 = socket$inet_smc(0x2b, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffff"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x5}, 0x94) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=@ipv4_newroute={0x30, 0x18, 0x35f32a6dfa748ddd, 0xfffffffd, 0x0, {0x2, 0x10, 0x0, 0x0, 0xfe, 0x0, 0xac, 0x5}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0xa}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @SEG6_LOCAL_IIF={0x8, 0x6, 0xfffffffb}}]}, 0x30}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), r0) sendmsg$IPVS_CMD_ZERO(r2, &(0x7f00000008c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000880)={&(0x7f0000000740)={0x104, r9, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xdab}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5f}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xe}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x9}]}, @IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x80}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vxcan1\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8000}]}, 0x104}, 0x1, 0x0, 0x0, 0x20000000}, 0x400c800) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000540)=@ethtool_link_settings={0x4d, 0x400, 0xf, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1]}}) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)={0x3c, r10, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xfc}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4044851}, 0x0) connect$inet(r6, &(0x7f0000000180)={0x2, 0x5000, @loopback}, 0x10) accept(r5, 0x0, 0x0) write(r4, &(0x7f0000000280)="140000003b0001030300000000000000040100", 0x13) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3], 0x4c}}, 0x884) epoll_create(0x9) 1.321243802s ago: executing program 1 (id=14011): socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x10, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='freezer.self_freezing\x00', 0x275a, 0x0) socket$xdp(0x2c, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x70}, 0x94) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000040000000200"], 0x0, 0x34}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000001000000000000008018000095"], &(0x7f00000007c0)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0}, 0x94) socket$inet6_icmp(0xa, 0x2, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000b00)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010800800014000000000d97405010000000008000240000000000800", @ANYRES64=r1], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) 1.315303967s ago: executing program 0 (id=14012): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='\n\x00\x00\x00\v\x00\x00\x00B\x00\x00\x00>'], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000940)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000980)={{r1, 0xffffffffffffffff}, &(0x7f00000009c0), &(0x7f0000000a00)}, 0x20) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@base={0x12, 0x4, 0x8, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x15, 0xc, &(0x7f0000000b80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x301}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000c00)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xc}, 0x94) 1.285234838s ago: executing program 3 (id=14013): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) close(0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0700000004000000080000000100fcdb97bbeaca97c489e18c16bd0000800000006ece75cd9d6ecc4cbb426c753a138edddbf57f461d686f2762e748cc48ad1eb504f9aa450cc065e957388a458b9d", @ANYRES32=r0, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0200000002000000feffffff00"/28], 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r2) r4 = socket(0x10, 0x803, 0x1000000) sendmmsg(0xffffffffffffffff, &(0x7f0000003a40)=[{{&(0x7f0000000500)=@rxrpc=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e24, 0xfffffffe, @loopback, 0x3}}, 0x80, &(0x7f0000001740)=[{&(0x7f0000000640)="69ecf1b2c018f3f0f096518ff001821e4af793ea61cb3e313b4d14c21c01fe28231b932f7a4119d1614994674acd4988979dace68e652a42ddccefb3b2c5f19bed3995d73c364b64795bc44190291b530bf01eb79ff154a66593c124e9840ee35591de1d077501313ee5c219414ec5beb711", 0x72}, {&(0x7f00000006c0)="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", 0x1000}, {&(0x7f00000016c0)="8db4be52faca5030ef3eb89ae7db5a7b144778ab110b284f42228f1cecd94a348efd51d61cf08998aad89e0cc56a1834543c401b95666e879601a7e3f9848f1128", 0x41}], 0x3, &(0x7f0000001780)=[{0x110, 0x6, 0xb50, "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"}, {0x1010, 0x10b, 0x2, "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"}, {0x40, 0x10d, 0x10000, "4fc0dff604c1992938d3593c1876ef6a2a71183f5c51e09b85887966a74f2bc972942711770b4550a28b427a9bb6"}, {0x1010, 0x107, 0x9, "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"}, {0xf0, 0x10f, 0x3, "ada5cedbebc82195f8d99efb527a8833d9af291761fbff8fac08538b20be65b80260f3b4d177a54a86239d359b74e45352d45f3e5611e8c44d76efceef200d75fa2963f1770464ec1923beba0599a859f9f97b3717301373b4fac7d37e95b74a389b56d02cd9d546b0f705eefc82cc049e973a38c4a335f2cb4b5efade14026ec6931d8a16ea211a4746fbe6e5f8444cddf462412b1da1363b1b1b4b250d77c45060bf9fb4d2519714054c5650584e750bab470c0d0da04e0546e7a4829319a621f357ed565fbf6935c0a265f95bc96eb1689c9b3f08a06742"}, {0x40, 0xff, 0xd27, "1be687652e600d3ad4a21b2db96d4c7a451badf362b27c2bc643c40166ea97f592d55c26f6ec30bc27"}], 0x22a0}}], 0x1, 0x800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x437, 0x800000, 0x0, {0x0, 0x0, 0x0, r5, 0x504c3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp=r4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="030029bd70000e0000000100000008000100", @ANYRES32=r5, @ANYBLOB="080002000000000014000c00fe880000ecff00000000000000000001"], 0x38}, 0x1, 0x0, 0x0, 0x44800}, 0x20000000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x398, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x1, 0xa, 0x10, 0x10, 0x10, 0x2710, 0xea60}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f8) sendto$inet6(r7, &(0x7f0000000200)='test\x00', 0x5, 0x0, &(0x7f0000000240)={0xa, 0x1234, 0x0, @loopback}, 0x1c) r8 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r8, &(0x7f0000000100)={0xa, 0x4e24, 0x0, @rand_addr, 0x7fffffd}, 0x1c) sendmmsg(r8, &(0x7f00000092c0), 0x4ff, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x48}}, 0x0) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="54000000090601020000000000000000027e0000000900020073797a300000000005000100070000002c0007800c0001800800013de7ffffff0c00148008000140ff00000000ffffffff000000050007000600e6"], 0x54}}, 0x0) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r9}, &(0x7f0000000000), &(0x7f0000000040)='%ps \x00'}, 0x20) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c0001800500020000000000080004000500000008000100"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="3f9d00000000fedbdf251800000008000300", @ANYRES32=r12, @ANYBLOB="4800308014000400403a050c5baee2004ef2b6d713459a7a280001800800"], 0x64}}, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) 1.070078989s ago: executing program 0 (id=14014): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@setlink={0x28, 0x13, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_MASTER={0x8, 0xa, r2}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="3800000054000104000000000000000007000000", @ANYRES32=r2, @ANYBLOB="20000100", @ANYRES32=r3, @ANYBLOB], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@setlink={0x28, 0x13, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) 1.068271505s ago: executing program 1 (id=14015): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010829bd7000000000000b8eff0008000300", @ANYRES32=r2, @ANYBLOB="60005080110001004abee339084eeef16f162471f40000000800030005ac0f00050002"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 999.308622ms ago: executing program 2 (id=14016): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x16, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"/480], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x9, 0x7, 0x8, 0x40, 0x42, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580), &(0x7f00000005c0), 0x1000, r0}, 0x38) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000600)={r0, &(0x7f0000000640)="2081", &(0x7f0000000680)=@udp, 0x2}, 0x20) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000440)="4c0000001200ff09ff3a150099a283ff04b8008000f0ffff0000000600401500240036001fc411a0b598bc593ab6821148a730cc33a49868c62b2ca654a6613b6aab", 0x42}, {&(0x7f0000000080)='G%\x00\x00\x00\x00\x00\x00\x00\x00', 0xa}], 0x2}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000400)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000580)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xffff, 0xffe0}, {}, {0x1, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8848}, 0x80) sendmsg$nl_route_sched(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=@gettfilter={0x2c, 0x2e, 0x205, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xffe0, 0xc}, {0x0, 0xfff1}, {0x0, 0x2}}, [{0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) recvmmsg(r1, &(0x7f0000000c80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff01, 0x600}}, {{0x0, 0x0, &(0x7f0000000380), 0x5}, 0x10}, {{0x0, 0x0, 0x0}, 0x1}], 0x4000000000001b2, 0x48, 0x0) 843.441262ms ago: executing program 1 (id=14017): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xf, &(0x7f0000000140)=ANY=[@ANYBLOB="7a0af8ff000000007a0af0ff000000007a0ae8ff000000007a0ae0ff000000007a0ad8ff000000007a0ad0ff000000007a0ac8ff000000007a0ac0ff00000000bfa100000000000007010000d8ffffffbfa200000000000007020000c0ffffff85000000cf000000b70000000200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000000)="b9e20300600d00000000c560380f", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x11}, 0x50) 756.129406ms ago: executing program 0 (id=14018): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa0, 0xffb, 0x2, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x8, 0x9, 0x3, 0x3, 0x1, 0xfffffffc, 0x0, 0x6, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0x240d43ee, 0x6, 0x1c00, 0xb, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x8, 0x11000, 0x80000000, 0xbab4, 0x79b, 0x2, 0x1, 0x7f, 0x3, 0x2, 0x7, 0x8000, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xae, 0x7f, 0x8, 0x180000, 0x4007, 0x8b, 0x5, 0x2b3, 0xf7, 0x5, 0xfffffffe, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x8, 0x753, 0x0, 0x1005, 0x80005, 0x10001, 0x2, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x488b, 0x84, 0x100, 0x10, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xdda, 0xd, 0x29e, 0xfffffffd, 0x2, 0x2, 0x5, 0x8, 0x0, 0x7fff, 0x2, 0x3f, 0x8, 0xcb, 0x3, 0x400, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x800) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)={0x1c, 0x37, 0x109, 0x870bd22, 0x25dfdbfd, {0x2}, [@typed={0x8, 0x7, 0x0, 0x0, @ipv4=@private=0xa010100}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1000c957}, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x6028002}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, r2, 0x400, 0x70bd2a, 0x25dfdbff}, 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a0104000000000000000001"], 0x248}, 0x1, 0x0, 0x0, 0x40040}, 0x4040) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000440)={'netdevsim0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001e0000000c00018008000100", @ANYRES32=r7, @ANYBLOB="050003"], 0x28}}, 0x80) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43afffe800000000000000000000000000010ff02000000000000000000000000000189"], 0x340a) 662.751804ms ago: executing program 1 (id=14019): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)={{0x14}, [@NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0xa9}, @NFTA_SET_DATA_TYPE={0x8}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x6, &(0x7f0000000200)=@raw=[@tail_call, @exit], &(0x7f0000000240)='GPL\x00', 0x80, 0x72, &(0x7f0000000300)=""/114, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x4, 0x5}, 0x8, 0x10, &(0x7f00000003c0)={0x5, 0xf, 0x8, 0xb60}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000400)=[0xffffffffffffffff], &(0x7f0000000440)=[{0x5, 0x1, 0x10, 0x4}, {0x1, 0x1, 0xf, 0x3}, {0x0, 0x5, 0x5, 0x3}, {0x2, 0x5, 0x5, 0x6}], 0x10, 0x81}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r2, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x80, &(0x7f0000000600)=[{}], 0x8, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0x86, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) r3 = socket$can_j1939(0x1d, 0x2, 0x7) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f00000001c0)={r5}) recvfrom$inet6(r6, 0x0, 0x0, 0x2000, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)=ANY=[@ANYBLOB="1c000000190005002dbd7000ffdb3d5b724b14286443df251d010000c2e8c0781b41a41b22bb6136d6e1f5a2737b5a5f30872a44eb917005528fefadff03aa11c71bf6e4f36c06e85d341e08b0f254e0376980750c500f5adb663c7c362f9f0b14f78ff9a231ed117e0300bfb0a9e8fda3f52bb29b66f156766a4d21172bef3bd54ef1c4d53abcecdac0a0424af7f0cc9ea73bccef995c704c7bb50670f923f8d6c75da0beed1486548b6fa260d2a3badb32bc1923b677fa8617785cf5005bc8c6357023b12b5364bb61e85db4ba6b99255ea42774cdad94bec16287ee3e34f7036d09540cfac6fc44df98935a"], 0x1c}}, 0x4040850) setsockopt$SO_J1939_ERRQUEUE(r3, 0x6b, 0x4, &(0x7f0000000000)=0x1, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="30000000121401002bbd7000fbdbdf250800150005000000080035"], 0x30}, 0x1, 0x0, 0x0, 0x8890}, 0x10000000) socket$nl_rdma(0x10, 0x3, 0x14) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)={{0x14}, [@NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0xa9}, @NFTA_SET_DATA_TYPE={0x8}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x6, &(0x7f0000000200)=@raw=[@tail_call, @exit], &(0x7f0000000240)='GPL\x00', 0x80, 0x72, &(0x7f0000000300)=""/114, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x4, 0x5}, 0x8, 0x10, &(0x7f00000003c0)={0x5, 0xf, 0x8, 0xb60}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000400)=[0xffffffffffffffff], &(0x7f0000000440)=[{0x5, 0x1, 0x10, 0x4}, {0x1, 0x1, 0xf, 0x3}, {0x0, 0x5, 0x5, 0x3}, {0x2, 0x5, 0x5, 0x6}], 0x10, 0x81}, 0x94) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r2, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x80, &(0x7f0000000600)=[{}], 0x8, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0x86, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$kcm(0x2d, 0x2, 0x0) (async) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f00000001c0)={r5}) (async) recvfrom$inet6(r6, 0x0, 0x0, 0x2000, 0xffffffffffffffff, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) (async) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)=ANY=[@ANYBLOB="1c000000190005002dbd7000ffdb3d5b724b14286443df251d010000c2e8c0781b41a41b22bb6136d6e1f5a2737b5a5f30872a44eb917005528fefadff03aa11c71bf6e4f36c06e85d341e08b0f254e0376980750c500f5adb663c7c362f9f0b14f78ff9a231ed117e0300bfb0a9e8fda3f52bb29b66f156766a4d21172bef3bd54ef1c4d53abcecdac0a0424af7f0cc9ea73bccef995c704c7bb50670f923f8d6c75da0beed1486548b6fa260d2a3badb32bc1923b677fa8617785cf5005bc8c6357023b12b5364bb61e85db4ba6b99255ea42774cdad94bec16287ee3e34f7036d09540cfac6fc44df98935a"], 0x1c}}, 0x4040850) (async) setsockopt$SO_J1939_ERRQUEUE(r3, 0x6b, 0x4, &(0x7f0000000000)=0x1, 0x4) (async) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="30000000121401002bbd7000fbdbdf250800150005000000080035"], 0x30}, 0x1, 0x0, 0x0, 0x8890}, 0x10000000) (async) 662.474183ms ago: executing program 4 (id=14020): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000040)="4c00000011001400"/23, 0x17) 643.870509ms ago: executing program 3 (id=14021): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="480000001400b59527bd7000ffdbdf250a0800ff", @ANYRES32, @ANYBLOB="1400020000000000000000000000000000000001140001000000000091280000000000000000001a0800090002000000"], 0x48}, 0x1, 0x0, 0x0, 0x2004c040}, 0x0) 580.166741ms ago: executing program 1 (id=14022): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="d800000018000100007c00000000b904021d080406037c09e8fe55a10a0015400400142603604ef02f00160006000600a80006f0200002400700027c035c0461c1d67f6f94007134cf6efbbca68000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x48040) r1 = socket(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) write$tun(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) ppoll(&(0x7f0000000340)=[{r0, 0x2060}, {r2, 0xc29a}, {r0, 0x8441}], 0x3, &(0x7f00000003c0)={0x77359400}, &(0x7f0000000400)={[0x6]}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r4, 0x0, 0x32, &(0x7f0000000500)=0x1000000, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000540)={'veth0_macvtap\x00', 0x0}) sendmmsg$inet(r4, &(0x7f0000000580)=[{{&(0x7f00000005c0)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000600)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_retopts={{0x10}}], 0x30}}], 0x1, 0x40010) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) close(r6) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a80080002802d07420008000200", @ANYBLOB="358749"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x18, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x807}, [@CTA_TUPLE_ORIG={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x48040) write(r1, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 460.213412ms ago: executing program 4 (id=14023): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000004000000040000000a00000080000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000de8c979113ecc9e919fd8dec942fbd1e911ffb5578647bacdd49701e6a8c96f21c4c44b92d7fc16c24860e7ee4ae0136401d545f9982b0647928e66ad80adf3ac64a8dee390549839971e77a4c2753cfb34063b9f819e2b002c6d9023ee3102da2092237f235a91d6976e48b7f7f2b9e66f9b2a79614020ae174d186a1", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0x6, &(0x7f0000000600)=@raw=[@alu={0x7, 0x1, 0xb, 0x2, 0xa}, @alu={0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc}, @call={0x85, 0x0, 0x0, 0x4b}, @jmp={0x5, 0x0, 0x5, 0x0, 0x0, 0x1}, @exit, @exit], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 459.644309ms ago: executing program 2 (id=14024): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c0000001000010029bd700000dcdf2500000000", @ANYRES32=0x0, @ANYBLOB="4d83020004010000140003006e6574646576a04a6d30000000000000180016801400018010000600070000008623000086230000"], 0x4c}, 0x1, 0x0, 0x0, 0x40c1}, 0x8840) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_x25_SIOCADDRT(r1, 0x890b, &(0x7f0000000500)={@null, 0xd, 'dummy0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_buf(r2, 0x1, 0x19, 0x0, &(0x7f0000000000)) r3 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet_sctp(r3, &(0x7f0000000240)=[{&(0x7f0000000280)=@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x35}}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000300)="86", 0x1}], 0x1, &(0x7f0000000340)=ANY=[@ANYBLOB="20000000000000008400000008000000fff5000000000000000000000000000118"], 0x38}], 0x1, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r2, 0x8002f515, &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000ac0)={'bridge0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r4, 0x891e, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x3c, r6, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xb6}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}]}]}, 0xffffffffffffff09}, 0x1, 0x0, 0x0, 0x4010000}, 0x4000000) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="400e0000240001050000000000000000000000000100000000000100ffffffff00000000090001007072696f00000000180002000300000000000000000000000000000000000000f80d08001c0001000000000000000000000000000000000000000000ea"], 0xe40}}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000003140100320000000008000a5c73697700140033006c0000000000000000000000000021e718d5865d16002b9b97bfa9d3423f41783eb2577cb1687d1cb8e9d02929be00"/88], 0x38}, 0x1, 0x0, 0x0, 0x48050}, 0x4000) 385.961509ms ago: executing program 4 (id=14025): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5c00000010000d0429bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000010000000300012800c0001006d6163766c616e002000028008000900ffffffff08000700800000000a0004000180c200000000000a0002000180c200000e0000e72c282b1c7d7385b07fb89247cd7b4919c0b3e205d3cbc964dbb1ed75aed4bef18d46de"], 0x5c}}, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) 375.59865ms ago: executing program 0 (id=14026): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1e, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1900}, [@ldst={0x1, 0x2, 0x3, 0x8, 0x1}]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 305.980797ms ago: executing program 4 (id=14027): socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r0 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/cgroup\x00') mmap(&(0x7f00002d3000/0x1000)=nil, 0x1000, 0xb635773f07ebbeec, 0x50, 0xffffffffffffffff, 0xe000a000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="160000000000000004000000ffff000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000017000000e7000000000000100000000079000000004bff518f62caa12ef06323042f3b91469244ed4f125b4ed4ecbc309da182789cfe03afc133e59f8320746df8257c6a4a01ae91e1e5c3a93885e15a2f326e3586133ed7b3cdb09a07a34707649c9b1cdebc0e202d7bda21f9700b"], 0x48) r2 = socket$nl_crypto(0x10, 0x3, 0x15) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000300)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1b0000002020000000266b00", @ANYRES32=0x0, @ANYBLOB, @ANYRES64=0x0], 0x20) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000100)={'sit0\x00', &(0x7f00000003c0)=@ethtool_sset_info={0x37, 0xfb1, 0x0, [0x6, 0x400]}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0d000000875a0000040000000100000000000000", @ANYRES32=r1, @ANYBLOB="32432637fc00002000000004feffffd5d71733d58088d7000053f325ac7c735f4ac37fbccca1f23b9636aa8129cc8bd49b96c6a439d7685f5eec8d09a0f2a53a3cfd1d145508ee2433cc9a4b169f7a81cc6fcd28963aec9c9c44b06b0163d990e40469a4093a7aa9ecd5747e069cfdbb3cb7bb399743640c67e8badc425c63e4adb0e96013003feb5abecd65bced656122af31dc4cb889c230be23ebb6b29db783f2e9591cc2ba049683a55a94beb07b2233b35c6f9662d980c031b9519cd594aa5906a10f147485e3aa0eba1d0465a885063fc648f3f34f8075d43b03c2250563ad6b", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f0000000180)=0x79, 0x4) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x4e20, @multicast1}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000001300)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000012c0)={&(0x7f0000000fc0)={0x2d0, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [{{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x29f}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xe58}}}]}}, {{0x8}, {0xb0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0xf0, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7f}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x7, 0x8, 0x7, 0x6}]}}}]}}, {{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x7, 0x2}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}]}, 0x2d0}, 0x1, 0x0, 0x0, 0x90}, 0x4) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000240)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000000280)={0x2, 0x4e23, @loopback}, 0x10) sendmmsg$inet(r4, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000005c0)="91f8a9848519def38491bbe1173c3c6f357d0272b7319130feaab952ac4703cad04bdc890ee50e997fc26e0000ea4feb931647fc5393de2500000000000012f67dd0000000f4922da20bf1f802970c30f03cc271337e892c99bda9475d51361f8b78938a6a68ba85987219000000eb52c9ff439180b413ec4d4fe130b41d113ce7efb5e9838379c5a554eb896f7808d5904cd8da06fd5159085c9275f49e775e92fb106c2f10442d500891e58a3f851ff5c85244beacba25d854577d68ca555e88fc249340ab9bdd8680abbbde02b0307ef45cb7bebc905a984c", 0xda}], 0x1}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000c00)="31fdffffffffffffff74098b2e5e55a1828636f60fbfcfdac56c75f1687f0c562874230300d69f117e766bdbad0c2171ad6227e1173afcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbb9de494c9721d9bf80f2f75c3b4bea78e385ea382294882839a22674037b89108a1420e33eb9be6d10cfb24eb7cccdf1528ef33b34ab07cdb0909a9ba999d89d0c5d889c8c569334e9547e1e343b451d9025c4e153612d4674b9411fb4de29559900bcb388d291aa839ab0954e6a8dfc19c3c153", 0xc5}], 0x1}}], 0x2, 0x2090) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000d00)=0xdf8, 0x4) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x8000000}, 0x38) r5 = socket(0x8, 0x5, 0x3) setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='memory.events\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000d40)=ANY=[], 0x50) r6 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) writev(r6, &(0x7f0000000040)=[{&(0x7f0000000080)="a90f", 0x2}], 0x1) write$tcp_congestion(r6, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, &(0x7f0000000140), 0x0}, 0x20) close(0x3) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f0000000e00)={0x0, 0x4}, 0x8) socket$inet6(0xa, 0x3, 0xff) 303.28411ms ago: executing program 3 (id=14028): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180000000000000000008000540000000000500010001"], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000300)={0x20, 0x1, 0x4, 0x5, 0x0, 0x0, {}, [@NFULA_CFG_MODE={0xa, 0x2, {0x6}}]}, 0x20}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x38, 0x2, {{0x0, 0x4, 0x0, 0x4, 0xfffffffc}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0xfffffff8, 0x5, 0xfffffffe, 0x1, 0x345}}]}]}}}]}, 0x68}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000020000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300a00000014000000020a0500000000000000000000000008140000001100010000000000000000000000000a"], 0x5c}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a30000000002c000000030a01040000000000000000020000000900010073797a30000000000900030073797a300000000090000000060a01240000000000000000020000000900010073797a30000000000900020073797a300000000064000480600001800b0001007461726765740000500002800e00010049444c4554494d4552000000080002400000000134000300"], 0x104}}, 0x0) 196.035658ms ago: executing program 2 (id=14029): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[@ANYBLOB="6000000010000100"/20, @ANYRES32=r1, @ANYBLOB="0000020081800000400012800e0337006970366772657461700000002c00028014000700ff02000000000000000000000000000114000600fe"], 0x60}}, 0x0) 175.937632ms ago: executing program 1 (id=14030): socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180), 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f00000001c0)='hugetlb.1GB.rsvd.failcnt\x00', 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x11, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x15, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000300)='GPL\x00'}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4433000041000701fefffffffeffffff017c0000040042800c00018006000600800a0000203302801c3317800400150004008b80080086800400b2800633018024", @ANYRES8=r1, @ANYRES64=r1], 0x3344}, 0x1, 0x0, 0x0, 0x4040044}, 0xc000) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0x2, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, 0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e25, 0xe5, @ipv4={'\x00', '\xff\xff', @local}, 0x12}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac710aa7d0000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 161.286878ms ago: executing program 0 (id=14031): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000040)=@newsa={0x180, 0x10, 0x1, 0xfffffffe, 0x100, {{@in=@private=0xa010102, @in=@rand_addr=0x64010100, 0x1, 0x7fff, 0x4e23, 0x25, 0x0, 0x0, 0x0, 0x3a}, {@in=@remote, 0x4d4, 0x6c}, @in6=@mcast1, {0x401, 0x1, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffffb}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0x92}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x28}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}, 0x1a}}, @algo_crypt={0x48, 0x2, {{'cbc(camellia)\x00'}}}]}, 0x180}, 0x1, 0x0, 0x0, 0x20048041}, 0x0) 44.284493ms ago: executing program 0 (id=14032): r0 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000000c0)={0x2, {{0xa, 0x4e21, 0xffffffda, @mcast1, 0x72}}, 0x1}, 0x20000) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r5, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x87, @loopback={0xfec0ffffffffffff, 0xa8aaaafffeaaaa1e}, 0x8000}, 0x1c) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32=r2, @ANYBLOB="60005e80080006000002000008000700f605000008000900000000000c0001000500000002000000080005"], 0x7c}, 0x1, 0x0, 0x0, 0x20000800}, 0x8d0) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x80000001, 0x22}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004840}, 0x15) 0s ago: executing program 4 (id=14033): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@setlink={0x28, 0x13, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_MASTER={0x8, 0xa, r2}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="3800000054000104000000000000000007000000", @ANYRES32=r2, @ANYBLOB="20000100", @ANYRES32=r3, @ANYBLOB], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@setlink={0x28, 0x13, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) kernel console output (not intermixed with test programs): 4][T17782] ? clear_bhb_loop+0x70/0xc0 [ 1622.115491][T17782] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1622.115512][T17782] RIP: 0033:0x7f575ef9e1d9 [ 1622.115534][T17782] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1622.115552][T17782] RSP: 002b:00007f575fe98028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1622.115576][T17782] RAX: ffffffffffffffda RBX: 00007f575f225fa0 RCX: 00007f575ef9e1d9 [ 1622.115592][T17782] RDX: 0000000000000000 RSI: 00002000000012c0 RDI: 0000000000000003 [ 1622.115606][T17782] RBP: 00007f575fe98090 R08: 0000000000000000 R09: 0000000000000000 [ 1622.115626][T17782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1622.115638][T17782] R13: 00007f575f226038 R14: 00007f575f225fa0 R15: 00007ffc02aeb258 [ 1622.115672][T17782] [ 1622.464498][T17789] bridge_slave_0: left allmulticast mode [ 1622.464549][T17789] bridge_slave_0: left promiscuous mode [ 1622.464788][T17789] bridge0: port 1(bridge_slave_0) entered disabled state [ 1622.678523][T17793] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13084'. [ 1622.711750][T17791] bond7 (unregistering): Released all slaves [ 1622.781947][T17793] vlan2: entered allmulticast mode [ 1622.781972][T17793] macsec0: entered allmulticast mode [ 1622.782702][T17793] batman_adv: batadv0: Adding interface: vlan2 [ 1622.782717][T17793] batman_adv: batadv0: The MTU of interface vlan2 is too small (1464) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1622.782754][T17793] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 1622.954102][T17802] ip_tables: iptables: counters copy to user failed while replacing table [ 1623.267296][T17810] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13093'. [ 1623.327981][T17826] syzkaller0: entered promiscuous mode [ 1623.328015][T17826] syzkaller0: entered allmulticast mode [ 1623.675000][T17842] syzkaller0: entered promiscuous mode [ 1623.675038][T17842] syzkaller0: entered allmulticast mode [ 1623.691228][T17843] tipc: Enabling of bearer rejected, failed to enable media [ 1624.084647][T17852] syzkaller0: entered promiscuous mode [ 1624.084673][T17852] syzkaller0: entered allmulticast mode [ 1624.188836][T17859] block nbd3: not configured, cannot reconfigure [ 1624.235932][T17850] bond4 (unregistering): Released all slaves [ 1624.367021][T17871] FAULT_INJECTION: forcing a failure. [ 1624.367021][T17871] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1624.367061][T17871] CPU: 0 UID: 0 PID: 17871 Comm: syz.3.13109 Not tainted syzkaller #0 PREEMPT(full) [ 1624.367084][T17871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1624.367096][T17871] Call Trace: [ 1624.367105][T17871] [ 1624.367114][T17871] dump_stack_lvl+0xe8/0x150 [ 1624.367149][T17871] should_fail_ex+0x410/0x560 [ 1624.367183][T17871] _copy_from_user+0x2d/0xb0 [ 1624.367212][T17871] generic_map_update_batch+0x6b1/0xae0 [ 1624.367258][T17871] ? __pfx_generic_map_update_batch+0x10/0x10 [ 1624.367287][T17871] ? __fget_files+0x2a/0x420 [ 1624.367325][T17871] ? __pfx_generic_map_update_batch+0x10/0x10 [ 1624.367353][T17871] bpf_map_do_batch+0x391/0x630 [ 1624.367386][T17871] __sys_bpf+0xbe5/0xd90 [ 1624.367419][T17871] ? __pfx___sys_bpf+0x10/0x10 [ 1624.367455][T17871] ? __fget_files+0x2a/0x420 [ 1624.367503][T17871] ? ksys_write+0x242/0x270 [ 1624.367528][T17871] ? __pfx_ksys_write+0x10/0x10 [ 1624.367554][T17871] __x64_sys_bpf+0xba/0xd0 [ 1624.367580][T17871] do_syscall_64+0x166/0x520 [ 1624.367607][T17871] ? trace_irq_disable+0x3b/0x140 [ 1624.367628][T17871] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1624.367648][T17871] ? clear_bhb_loop+0x70/0xc0 [ 1624.367675][T17871] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1624.367695][T17871] RIP: 0033:0x7f6a2b19e1d9 [ 1624.367726][T17871] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1624.367743][T17871] RSP: 002b:00007f6a293f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1624.367767][T17871] RAX: ffffffffffffffda RBX: 00007f6a2b426090 RCX: 00007f6a2b19e1d9 [ 1624.367783][T17871] RDX: 0000000000000038 RSI: 0000200000000dc0 RDI: 000000000000001a [ 1624.367797][T17871] RBP: 00007f6a293f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1624.367811][T17871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1624.367824][T17871] R13: 00007f6a2b426128 R14: 00007f6a2b426090 R15: 00007ffc23da78d8 [ 1624.367858][T17871] [ 1624.385482][T17869] netlink: 72 bytes leftover after parsing attributes in process `syz.2.13110'. [ 1624.762052][T17881] netlink: 'syz.0.13114': attribute type 11 has an invalid length. [ 1624.767056][T17880] netlink: 80 bytes leftover after parsing attributes in process `syz.2.13112'. [ 1624.849422][T17883] syzkaller0: entered promiscuous mode [ 1624.849448][T17883] syzkaller0: entered allmulticast mode [ 1624.974702][T17886] netlink: 36 bytes leftover after parsing attributes in process `syz.2.13116'. [ 1625.038415][T17889] batman_adv: batadv0: Adding interface: syzkaller0 [ 1625.038439][T17889] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1625.038474][T17889] batman_adv: batadv0: Interface activated: syzkaller0 [ 1625.051143][T17888] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 1625.131932][T17888] batman_adv: batadv0: Removing interface: syzkaller0 [ 1625.162811][T17893] syzkaller0: entered promiscuous mode [ 1625.162839][T17893] syzkaller0: entered allmulticast mode [ 1625.313810][T17901] netlink: 20 bytes leftover after parsing attributes in process `syz.4.13123'. [ 1625.362522][T17895] bond4 (unregistering): Released all slaves [ 1625.518888][T17912] netlink: 80 bytes leftover after parsing attributes in process `syz.0.13126'. [ 1625.560219][T17913] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13124'. [ 1625.631809][T17913] bond7: option broadcast_neighbor: invalid value (3) [ 1625.634235][T17913] bond7 (unregistering): Released all slaves [ 1626.050326][T17934] openvswitch: netlink: Message has -2 unknown bytes. [ 1626.050393][T17934] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1626.138922][T17939] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1626.142102][T17939] netlink: 64 bytes leftover after parsing attributes in process `syz.2.13137'. [ 1626.211436][T17944] netlink: 80 bytes leftover after parsing attributes in process `syz.0.13138'. [ 1626.305253][T17946] syzkaller0: entered promiscuous mode [ 1626.305281][T17946] syzkaller0: entered allmulticast mode [ 1626.770413][T17961] batman_adv: batadv0: Adding interface: syzkaller0 [ 1626.770662][T17961] batman_adv: batadv0: Interface activated: syzkaller0 [ 1626.928147][T17965] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1626.931017][T17968] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13150'. [ 1626.968592][T17970] netlink: 80 bytes leftover after parsing attributes in process `syz.3.13149'. [ 1627.245109][T17980] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 1627.297766][T17980] netlink: 232 bytes leftover after parsing attributes in process `syz.1.13152'. [ 1627.297808][T17980] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13152'. [ 1627.322382][T17980] siw: device registration error -23 [ 1627.409923][T10157] IPVS: starting estimator thread 0... [ 1627.453024][T17994] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1627.455691][T17994] netlink: 64 bytes leftover after parsing attributes in process `syz.1.13156'. [ 1627.507984][T17992] IPVS: using max 25 ests per chain, 60000 per kthread [ 1627.903577][T18005] batman_adv: batadv0: Adding interface: syzkaller0 [ 1627.903598][T18005] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1627.903629][T18005] batman_adv: batadv0: Interface activated: syzkaller0 [ 1628.087395][T18004] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 1628.135558][T18009] netlink: 80 bytes leftover after parsing attributes in process `syz.1.13161'. [ 1628.164735][T18004] batman_adv: batadv0: Removing interface: syzkaller0 [ 1628.201675][T18011] netlink: 136 bytes leftover after parsing attributes in process `syz.4.13162'. [ 1628.283869][T18015] bridge_slave_0: default FDB implementation only supports local addresses [ 1628.285268][T18015] xt_limit: Overflow, try lower: 268435456/134217728 [ 1628.496894][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1628.760197][T18046] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1628.845018][T18047] netlink: 64 bytes leftover after parsing attributes in process `syz.4.13171'. [ 1628.962847][T18053] FAULT_INJECTION: forcing a failure. [ 1628.962847][T18053] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1628.962885][T18053] CPU: 1 UID: 0 PID: 18053 Comm: syz.2.13172 Not tainted syzkaller #0 PREEMPT(full) [ 1628.962909][T18053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1628.962923][T18053] Call Trace: [ 1628.962932][T18053] [ 1628.962942][T18053] dump_stack_lvl+0xe8/0x150 [ 1628.962979][T18053] should_fail_ex+0x410/0x560 [ 1628.963014][T18053] _copy_from_user+0x2d/0xb0 [ 1628.963047][T18053] ___sys_recvmsg+0x173/0x5a0 [ 1628.963078][T18053] ? __pfx____sys_recvmsg+0x10/0x10 [ 1628.963109][T18053] ? lock_acquire+0x115/0x350 [ 1628.963166][T18053] do_recvmmsg+0x31a/0x7f0 [ 1628.963209][T18053] ? __pfx_do_recvmmsg+0x10/0x10 [ 1628.963248][T18053] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1628.963279][T18053] ? __fget_files+0x3a2/0x420 [ 1628.963321][T18053] __x64_sys_recvmmsg+0x198/0x250 [ 1628.963353][T18053] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1628.963391][T18053] do_syscall_64+0x166/0x520 [ 1628.963418][T18053] ? trace_irq_disable+0x3b/0x140 [ 1628.963440][T18053] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1628.963461][T18053] ? clear_bhb_loop+0x70/0xc0 [ 1628.963489][T18053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1628.963510][T18053] RIP: 0033:0x7efd5519e1d9 [ 1628.963531][T18053] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1628.963550][T18053] RSP: 002b:00007efd56066028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1628.963574][T18053] RAX: ffffffffffffffda RBX: 00007efd55426090 RCX: 00007efd5519e1d9 [ 1628.963589][T18053] RDX: 03ffffffffffff67 RSI: 0000200000000280 RDI: 0000000000000006 [ 1628.963604][T18053] RBP: 00007efd56066090 R08: 0000000000000000 R09: 0000000000000000 [ 1628.963618][T18053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1628.963631][T18053] R13: 00007efd55426128 R14: 00007efd55426090 R15: 00007ffdcf4920b8 [ 1628.963667][T18053] [ 1629.417645][T18061] netlink: 'syz.1.13175': attribute type 21 has an invalid length. [ 1629.652870][T18063] netlink: 80 bytes leftover after parsing attributes in process `syz.1.13176'. [ 1630.103916][T18084] pim6reg: entered allmulticast mode [ 1630.105753][T18081] pim6reg: left allmulticast mode [ 1630.371762][T18101] FAULT_INJECTION: forcing a failure. [ 1630.371762][T18101] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1630.371799][T18101] CPU: 1 UID: 0 PID: 18101 Comm: syz.1.13191 Not tainted syzkaller #0 PREEMPT(full) [ 1630.371823][T18101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1630.371835][T18101] Call Trace: [ 1630.371845][T18101] [ 1630.371855][T18101] dump_stack_lvl+0xe8/0x150 [ 1630.371891][T18101] should_fail_ex+0x410/0x560 [ 1630.371926][T18101] _copy_from_user+0x2d/0xb0 [ 1630.371959][T18101] __tun_chr_ioctl+0x20a/0x1e70 [ 1630.371998][T18101] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 1630.372031][T18101] ? __fget_files+0x2a/0x420 [ 1630.372061][T18101] ? __fget_files+0x3a2/0x420 [ 1630.372104][T18101] ? __fget_files+0x2a/0x420 [ 1630.372144][T18101] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1630.372177][T18101] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 1630.372200][T18101] __se_sys_ioctl+0xfc/0x170 [ 1630.372229][T18101] do_syscall_64+0x166/0x520 [ 1630.372257][T18101] ? trace_irq_disable+0x3b/0x140 [ 1630.372279][T18101] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1630.372300][T18101] ? clear_bhb_loop+0x70/0xc0 [ 1630.372326][T18101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1630.372352][T18101] RIP: 0033:0x7fe174b9e1d9 [ 1630.372373][T18101] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1630.372391][T18101] RSP: 002b:00007fe175a9b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1630.372415][T18101] RAX: ffffffffffffffda RBX: 00007fe174e25fa0 RCX: 00007fe174b9e1d9 [ 1630.372431][T18101] RDX: 0000200000000140 RSI: 00000000400454d9 RDI: 0000000000000003 [ 1630.372445][T18101] RBP: 00007fe175a9b090 R08: 0000000000000000 R09: 0000000000000000 [ 1630.372458][T18101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1630.372471][T18101] R13: 00007fe174e26038 R14: 00007fe174e25fa0 R15: 00007ffebb250508 [ 1630.372508][T18101] [ 1630.438657][T18103] ip_tables: iptables: counters copy to user failed while replacing table [ 1630.709449][T18109] block nbd4: not configured, cannot reconfigure [ 1631.282943][T18135] xt_IDLETIMER: label is empty or not nul-terminated [ 1631.445481][T18141] netlink: 'syz.0.13206': attribute type 4 has an invalid length. [ 1631.445507][T18141] __nla_validate_parse: 3 callbacks suppressed [ 1631.445519][T18141] netlink: 152 bytes leftover after parsing attributes in process `syz.0.13206'. [ 1631.487549][T18141] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1631.583887][T18137] udevd[18137]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1631.600959][T18137] udevd[18137]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1631.692149][T18152] bridge0: port 1(bridge_slave_0) entered blocking state [ 1631.692279][T18152] bridge0: port 1(bridge_slave_0) entered disabled state [ 1631.692505][T18152] bridge_slave_0: entered allmulticast mode [ 1631.705207][T18152] bridge_slave_0: entered promiscuous mode [ 1631.723388][T18152] bridge_slave_0: left allmulticast mode [ 1631.723417][T18152] bridge_slave_0: left promiscuous mode [ 1631.724003][T18152] bridge0: port 1(bridge_slave_0) entered disabled state [ 1631.765115][T18156] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 1632.124227][T18175] netlink: 128 bytes leftover after parsing attributes in process `syz.3.13217'. [ 1632.142382][T18175] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13217'. [ 1632.251365][T18182] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13218'. [ 1632.357005][T18185] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1632.377685][T18185] ksmbd: Unknown IPC event: 8, ignore. [ 1632.402385][T18185] netlink: 72 bytes leftover after parsing attributes in process `syz.2.13218'. [ 1632.611245][T18156] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1632.611279][T18156] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 1632.945148][T18196] block nbd4: not configured, cannot reconfigure [ 1632.961898][T18156] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1632.961923][T18156] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1633.037803][T18156] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1633.037830][T18156] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1633.357589][T18206] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13227'. [ 1633.401016][T18212] ip_tables: iptables: counters copy to user failed while replacing table [ 1633.499510][T18214] netlink: 56 bytes leftover after parsing attributes in process `syz.0.13231'. [ 1633.585889][T18217] syzkaller1: entered promiscuous mode [ 1633.585916][T18217] syzkaller1: entered allmulticast mode [ 1633.710588][T18226] netlink: 'syz.0.13233': attribute type 1 has an invalid length. [ 1633.710613][T18226] netlink: 92 bytes leftover after parsing attributes in process `syz.0.13233'. [ 1633.728853][T18211] bond7 (unregistering): Released all slaves [ 1633.754941][T18230] block nbd3: not configured, cannot reconfigure [ 1633.931554][T18236] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 1634.078104][T18242] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13239'. [ 1634.270756][T18254] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13244'. [ 1634.403795][T18255] ieee802154 phy1 wpan1: encryption failed: -22 [ 1634.450948][T18265] block nbd4: not configured, cannot reconfigure [ 1634.456229][T18264] openvswitch: netlink: Unexpected mask (mask=40010, allowed=10058) [ 1634.562386][T18268] macsec0: entered promiscuous mode [ 1634.573635][T18268] veth1_macvtap: left allmulticast mode [ 1634.573861][T18268] veth1_macvtap: left promiscuous mode [ 1634.591815][T18268] macsec0 (unregistering): left promiscuous mode [ 1634.601570][T18268] batman_adv: batadv0: Removing interface: vlan2 [ 1634.675826][T18270] syzkaller0: entered promiscuous mode [ 1634.675852][T18270] syzkaller0: entered allmulticast mode [ 1634.947768][T18284] siw: device registration error -23 [ 1636.534734][T18325] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1636.634838][T18347] netlink: 'syz.0.13277': attribute type 2 has an invalid length. [ 1636.634864][T18347] netlink: 'syz.0.13277': attribute type 5 has an invalid length. [ 1637.076216][T18366] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1637.098909][T18366] __nla_validate_parse: 4 callbacks suppressed [ 1637.098934][T18366] netlink: 64 bytes leftover after parsing attributes in process `syz.1.13285'. [ 1637.180662][T18369] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13283'. [ 1637.301045][T18368] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 1637.391891][T18378] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13286'. [ 1637.716255][T18385] netlink: 20 bytes leftover after parsing attributes in process `syz.1.13288'. [ 1637.748097][T18382] bond7 (unregistering): Released all slaves [ 1637.782113][T18385] 8021q: VLANs not supported on vxcan0 [ 1638.242758][T18417] syzkaller0: left promiscuous mode [ 1638.242785][T18417] syzkaller0: left allmulticast mode [ 1638.244716][T18417] syzkaller0: MTU not usable for tipc bearer [ 1638.244762][T18417] tipc: Enabling of bearer rejected, failed to enable media [ 1638.470066][T18425] netlink: 'syz.0.13299': attribute type 1 has an invalid length. [ 1638.513269][T18425] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1638.913391][T18434] netlink: 24 bytes leftover after parsing attributes in process `syz.4.13302'. [ 1639.098228][T18440] openvswitch: netlink: Message has 16 unknown bytes. [ 1639.184425][T18444] bridge0: port 1(bridge_slave_0) entered blocking state [ 1639.184573][T18444] bridge0: port 1(bridge_slave_0) entered disabled state [ 1639.184693][T18444] bridge_slave_0: entered allmulticast mode [ 1639.186117][T18444] bridge_slave_0: entered promiscuous mode [ 1639.186817][T18444] bridge0: port 1(bridge_slave_0) entered blocking state [ 1639.186962][T18444] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1639.401046][T18452] syzkaller0: MTU not usable for tipc bearer [ 1639.401103][T18452] tipc: Enabling of bearer rejected, failed to enable media [ 1639.641038][T18462] netlink: 80 bytes leftover after parsing attributes in process `syz.2.13312'. [ 1639.801733][T18468] netlink: 'syz.0.13315': attribute type 1 has an invalid length. [ 1639.831542][T18471] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13316'. [ 1639.859973][T18473] netlink: 'syz.4.13317': attribute type 7 has an invalid length. [ 1639.873342][ C0] vcan0: j1939_tp_rxtimer: 0xffff888055339000: rx timeout, send abort [ 1639.873752][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888055339000: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 1639.896606][T18468] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1639.932790][T18474] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1639.933209][T18474] bond5: (slave gre1): The slave device specified does not support setting the MAC address [ 1639.934005][T18474] bond5: (slave gre1): Error -95 calling set_mac_address [ 1639.945010][T18468] netlink: 32 bytes leftover after parsing attributes in process `syz.0.13315'. [ 1640.027121][T18468] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13315'. [ 1640.034968][T18468] bond5 (unregistering): Released all slaves [ 1640.101469][T18482] bridge_slave_0: left allmulticast mode [ 1640.101500][T18482] bridge_slave_0: left promiscuous mode [ 1640.101753][T18482] bridge0: port 1(bridge_slave_0) entered disabled state [ 1640.177213][T18480] netlink: 36 bytes leftover after parsing attributes in process `syz.2.13319'. [ 1640.255659][T18486] syzkaller0: MTU not usable for tipc bearer [ 1640.255703][T18486] tipc: Enabling of bearer rejected, failed to enable media [ 1640.807768][T18507] syzkaller0: entered promiscuous mode [ 1640.807794][T18507] syzkaller0: entered allmulticast mode [ 1641.091548][T18515] netlink: 'syz.2.13328': attribute type 10 has an invalid length. [ 1641.478164][T18510] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1641.860904][T18515] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1641.872408][T18515] team0: Port device netdevsim1 added [ 1641.873783][ T119] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1641.873834][ T119] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1641.873870][ T119] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1641.887166][T31972] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1641.951213][T18535] tipc: Started in network mode [ 1641.951248][T18535] tipc: Node identity 260051c712f7, cluster identity 4711 [ 1641.951725][T18535] tipc: Enabled bearer , priority 0 [ 1642.005940][T18543] tipc: Resetting bearer [ 1642.260098][T18553] __nla_validate_parse: 3 callbacks suppressed [ 1642.260123][T18553] netlink: 64 bytes leftover after parsing attributes in process `syz.2.13335'. [ 1642.422258][T18557] syzkaller0: entered promiscuous mode [ 1642.422282][T18557] syzkaller0: entered allmulticast mode [ 1642.457808][T18555] lo speed is unknown, defaulting to 1000 [ 1642.479378][T18561] netlink: 32 bytes leftover after parsing attributes in process `syz.3.13339'. [ 1642.574440][T18561] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13339'. [ 1642.599113][T18561] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13339'. [ 1643.120381][T18579] netlink: 'syz.4.13345': attribute type 1 has an invalid length. [ 1643.120407][T18579] netlink: 92 bytes leftover after parsing attributes in process `syz.4.13345'. [ 1643.202021][T18517] tipc: Node number set to 888623559 [ 1643.405484][T18589] syzkaller0: MTU not usable for tipc bearer [ 1643.405528][T18589] tipc: Enabling of bearer rejected, failed to enable media [ 1643.578672][T18596] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13354'. [ 1643.648878][T18601] FAULT_INJECTION: forcing a failure. [ 1643.648878][T18601] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1643.648915][T18601] CPU: 1 UID: 0 PID: 18601 Comm: syz.0.13356 Not tainted syzkaller #0 PREEMPT(full) [ 1643.648938][T18601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1643.648951][T18601] Call Trace: [ 1643.648960][T18601] [ 1643.648970][T18601] dump_stack_lvl+0xe8/0x150 [ 1643.649017][T18601] should_fail_ex+0x410/0x560 [ 1643.649050][T18601] _copy_from_user+0x2d/0xb0 [ 1643.649080][T18601] ___sys_sendmsg+0x1c6/0x360 [ 1643.649103][T18601] ? __lock_acquire+0x747/0x2de0 [ 1643.649131][T18601] ? __pfx____sys_sendmsg+0x10/0x10 [ 1643.649195][T18601] ? __fget_files+0x2a/0x420 [ 1643.649226][T18601] ? __fget_files+0x3a2/0x420 [ 1643.649272][T18601] __x64_sys_sendmsg+0x1b1/0x290 [ 1643.649298][T18601] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1643.649346][T18601] do_syscall_64+0x166/0x520 [ 1643.649371][T18601] ? trace_irq_disable+0x3b/0x140 [ 1643.649392][T18601] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1643.649412][T18601] ? clear_bhb_loop+0x70/0xc0 [ 1643.649435][T18601] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1643.649455][T18601] RIP: 0033:0x7f8064f9e1d9 [ 1643.649473][T18601] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1643.649489][T18601] RSP: 002b:00007f8065e04028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1643.649510][T18601] RAX: ffffffffffffffda RBX: 00007f8065225fa0 RCX: 00007f8064f9e1d9 [ 1643.649523][T18601] RDX: 00000000200440c4 RSI: 0000200000001340 RDI: 0000000000000004 [ 1643.649536][T18601] RBP: 00007f8065e04090 R08: 0000000000000000 R09: 0000000000000000 [ 1643.649549][T18601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1643.649560][T18601] R13: 00007f8065226038 R14: 00007f8065225fa0 R15: 00007fffde088e28 [ 1643.649594][T18601] [ 1643.890924][T18609] netlink: 20 bytes leftover after parsing attributes in process `syz.4.13359'. [ 1643.923771][T18607] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1644.035693][T18613] bond0: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 1644.057933][T18613] netlink: 24 bytes leftover after parsing attributes in process `syz.4.13361'. [ 1644.092809][T18613] netlink: 24 bytes leftover after parsing attributes in process `syz.4.13361'. [ 1644.100492][T18615] syzkaller0: MTU not usable for tipc bearer [ 1644.100532][T18615] tipc: Enabling of bearer rejected, failed to enable media [ 1644.137303][T18617] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1644.138605][T18617] netlink: 64 bytes leftover after parsing attributes in process `syz.3.13362'. [ 1644.233156][T18613] nbd4: detected capacity change from 0 to 63 [ 1644.251499][T18613] block nbd4: NBD_DISCONNECT [ 1644.295238][T18613] block nbd4: Disconnected due to user request. [ 1644.309919][T18613] block nbd4: shutting down sockets [ 1644.329303][ C1] blk_print_req_error: 49 callbacks suppressed [ 1644.329366][ C1] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 1644.329498][ C1] buffer_io_error: 138 callbacks suppressed [ 1644.329513][ C1] Buffer I/O error on dev nbd4, logical block 0, async page read [ 1644.329607][ C1] Buffer I/O error on dev nbd4, logical block 1, async page read [ 1644.329713][ C1] Buffer I/O error on dev nbd4, logical block 2, async page read [ 1644.329805][ C1] Buffer I/O error on dev nbd4, logical block 3, async page read [ 1644.331271][ T26] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 1644.331308][ T26] Buffer I/O error on dev nbd4, logical block 0, async page read [ 1644.331363][ T26] Buffer I/O error on dev nbd4, logical block 1, async page read [ 1644.331381][ T26] Buffer I/O error on dev nbd4, logical block 2, async page read [ 1644.331397][ T26] Buffer I/O error on dev nbd4, logical block 3, async page read [ 1644.344517][ T2123] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 1644.344551][ T2123] Buffer I/O error on dev nbd4, logical block 0, async page read [ 1644.344568][ T2123] Buffer I/O error on dev nbd4, logical block 1, async page read [ 1644.344696][ T2123] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1644.344799][ T2123] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1644.344925][ T2123] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1644.368839][ T2123] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1644.369031][ T2123] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 1644.369254][ T2123] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 1644.369425][ T2123] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 1644.369901][T18559] ldm_validate_partition_table(): Disk read failed. [ 1644.372145][T18559] Dev nbd4: unable to read RDB block 0 [ 1644.372847][T18559] nbd4: unable to read partition table [ 1644.430771][T18559] ldm_validate_partition_table(): Disk read failed. [ 1644.433110][T18559] Dev nbd4: unable to read RDB block 0 [ 1644.447321][T18559] nbd4: unable to read partition table [ 1645.312539][T18661] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 1645.313080][T18661] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1645.316280][T18661] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1645.374119][T18665] ip_tables: iptables: counters copy to user failed while replacing table [ 1645.425219][T18667] A link change request failed with some changes committed already. Interface netdevsim1 may have been left with an inconsistent configuration, please check. [ 1645.454960][T18670] syzkaller0: left promiscuous mode [ 1645.454986][T18670] syzkaller0: left allmulticast mode [ 1645.471762][T18670] tipc: Enabling of bearer rejected, already enabled [ 1645.895968][T18682] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1647.466417][T18709] netlink: 'syz.1.13386': attribute type 1 has an invalid length. [ 1647.804224][T18720] netlink: 'syz.2.13387': attribute type 10 has an invalid length. [ 1647.875143][T18722] syzkaller0: MTU not usable for tipc bearer [ 1647.875183][T18722] tipc: Enabling of bearer rejected, failed to enable media [ 1648.059818][T18728] __nla_validate_parse: 4 callbacks suppressed [ 1648.059841][T18728] netlink: 16 bytes leftover after parsing attributes in process `syz.2.13390'. [ 1648.213737][T18739] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1648.214949][T18739] netlink: 64 bytes leftover after parsing attributes in process `syz.3.13394'. [ 1648.948830][T18762] tipc: Started in network mode [ 1648.948862][T18762] tipc: Node identity 523b63d72fa3, cluster identity 4711 [ 1648.949030][T18762] tipc: Enabled bearer , priority 1 [ 1648.975923][T18761] tipc: Resetting bearer [ 1649.022569][T18761] tipc: Disabling bearer [ 1649.095909][T18768] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13402'. [ 1649.187598][T18768] dummy0: left promiscuous mode [ 1649.188011][T18768] bridge0: port 1(dummy0) entered blocking state [ 1649.188241][T18768] bridge0: port 1(dummy0) entered disabled state [ 1649.188422][T18768] dummy0: entered allmulticast mode [ 1649.202836][T18768] dummy0: entered promiscuous mode [ 1649.259116][T18771] netlink: 80 bytes leftover after parsing attributes in process `syz.1.13403'. [ 1649.438838][T18775] netlink: 279 bytes leftover after parsing attributes in process `syz.1.13405'. [ 1649.438868][T18775] veth0_to_bond: default FDB implementation only supports local addresses [ 1649.468319][T18779] netlink: 279 bytes leftover after parsing attributes in process `syz.1.13405'. [ 1649.468351][T18779] veth0_to_bond: default FDB implementation only supports local addresses [ 1649.685571][T18787] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1649.691905][T18787] netlink: 64 bytes leftover after parsing attributes in process `syz.1.13406'. [ 1650.009911][T18808] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13410'. [ 1650.202082][T18812] tipc: Started in network mode [ 1650.202116][T18812] tipc: Node identity 663d74404d93, cluster identity 4711 [ 1650.202313][T18812] tipc: Enabled bearer , priority 1 [ 1650.216116][T18815] ip_tables: iptables: counters copy to user failed while replacing table [ 1650.283198][T18811] tipc: Resetting bearer [ 1650.357430][T18811] tipc: Disabling bearer [ 1650.359198][T18816] netlink: 20 bytes leftover after parsing attributes in process `syz.3.13412'. [ 1650.390167][T18815] netlink: 'syz.3.13412': attribute type 11 has an invalid length. [ 1650.583290][T18820] netlink: 80 bytes leftover after parsing attributes in process `syz.2.13415'. [ 1650.682791][T18827] netlink: 'syz.3.13419': attribute type 10 has an invalid length. [ 1650.765131][T18830] FAULT_INJECTION: forcing a failure. [ 1650.765131][T18830] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1650.765170][T18830] CPU: 1 UID: 0 PID: 18830 Comm: syz.4.13418 Not tainted syzkaller #0 PREEMPT(full) [ 1650.765192][T18830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1650.765204][T18830] Call Trace: [ 1650.765213][T18830] [ 1650.765223][T18830] dump_stack_lvl+0xe8/0x150 [ 1650.765257][T18830] should_fail_ex+0x410/0x560 [ 1650.765290][T18830] _copy_from_user+0x2d/0xb0 [ 1650.765326][T18830] ___sys_recvmsg+0x173/0x5a0 [ 1650.765358][T18830] ? __pfx____sys_recvmsg+0x10/0x10 [ 1650.765388][T18830] ? lock_acquire+0x115/0x350 [ 1650.765456][T18830] do_recvmmsg+0x31a/0x7f0 [ 1650.765491][T18830] ? __pfx_do_recvmmsg+0x10/0x10 [ 1650.765527][T18830] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1650.765557][T18830] ? __fget_files+0x3a2/0x420 [ 1650.765600][T18830] __x64_sys_recvmmsg+0x198/0x250 [ 1650.765627][T18830] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1650.765666][T18830] do_syscall_64+0x166/0x520 [ 1650.765692][T18830] ? trace_irq_disable+0x3b/0x140 [ 1650.765714][T18830] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1650.765736][T18830] ? clear_bhb_loop+0x70/0xc0 [ 1650.765761][T18830] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1650.765780][T18830] RIP: 0033:0x7f575ef9e1d9 [ 1650.765800][T18830] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1650.765817][T18830] RSP: 002b:00007f575fe98028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1650.765841][T18830] RAX: ffffffffffffffda RBX: 00007f575f225fa0 RCX: 00007f575ef9e1d9 [ 1650.765855][T18830] RDX: 03ffffffffffff67 RSI: 0000200000000280 RDI: 0000000000000006 [ 1650.765869][T18830] RBP: 00007f575fe98090 R08: 0000000000000000 R09: 0000000000000000 [ 1650.765881][T18830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1650.765892][T18830] R13: 00007f575f226038 R14: 00007f575f225fa0 R15: 00007ffc02aeb258 [ 1650.765924][T18830] [ 1651.195243][T18845] bond5 (unregistering): Released all slaves [ 1651.390107][T18855] siw: device registration error -23 [ 1651.488491][ T32] audit: type=1800 audit(1791616510.177:23): pid=18859 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.13426" name="blkio.bfq.time_recursive" dev="tmpfs" ino=921 res=0 errno=0 [ 1651.490179][ T32] audit: type=1800 audit(1791616510.177:24): pid=18858 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.13426" name="blkio.bfq.time_recursive" dev="tmpfs" ino=921 res=0 errno=0 [ 1651.529579][T18862] FAULT_INJECTION: forcing a failure. [ 1651.529579][T18862] name failslab, interval 1, probability 0, space 0, times 0 [ 1651.529612][T18862] CPU: 1 UID: 0 PID: 18862 Comm: syz.1.13428 Not tainted syzkaller #0 PREEMPT(full) [ 1651.529634][T18862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1651.529645][T18862] Call Trace: [ 1651.529653][T18862] [ 1651.529662][T18862] dump_stack_lvl+0xe8/0x150 [ 1651.529693][T18862] should_fail_ex+0x410/0x560 [ 1651.529721][T18862] ? __alloc_skb+0x1db/0x7a0 [ 1651.529748][T18862] should_failslab+0xa8/0x100 [ 1651.529773][T18862] ? __alloc_skb+0x1db/0x7a0 [ 1651.529795][T18862] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 1651.529815][T18862] ? __alloc_skb+0x18d/0x7a0 [ 1651.529839][T18862] ? __alloc_skb+0x1db/0x7a0 [ 1651.529871][T18862] __alloc_skb+0x1db/0x7a0 [ 1651.529901][T18862] netlink_sendmsg+0x5d4/0xb40 [ 1651.529935][T18862] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1651.529966][T18862] ? apparmor_socket_sendmsg+0x98/0x360 [ 1651.529992][T18862] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1651.530023][T18862] sock_sendmsg_nosec+0x14e/0x190 [ 1651.530049][T18862] ____sys_sendmsg+0x54e/0x850 [ 1651.530074][T18862] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1651.530103][T18862] ? import_iovec+0x73/0xa0 [ 1651.530131][T18862] ___sys_sendmsg+0x2a5/0x360 [ 1651.530149][T18862] ? __lock_acquire+0x747/0x2de0 [ 1651.530177][T18862] ? __pfx____sys_sendmsg+0x10/0x10 [ 1651.530232][T18862] ? __fget_files+0x2a/0x420 [ 1651.530257][T18862] ? __fget_files+0x3a2/0x420 [ 1651.530292][T18862] __x64_sys_sendmsg+0x1b1/0x290 [ 1651.530315][T18862] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1651.530356][T18862] do_syscall_64+0x166/0x520 [ 1651.530379][T18862] ? trace_irq_disable+0x3b/0x140 [ 1651.530398][T18862] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1651.530417][T18862] ? clear_bhb_loop+0x70/0xc0 [ 1651.530440][T18862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1651.530458][T18862] RIP: 0033:0x7fe174b9e1d9 [ 1651.530477][T18862] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1651.530492][T18862] RSP: 002b:00007fe175a9b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1651.530513][T18862] RAX: ffffffffffffffda RBX: 00007fe174e25fa0 RCX: 00007fe174b9e1d9 [ 1651.530527][T18862] RDX: 0000000000000000 RSI: 00002000000007c0 RDI: 0000000000000003 [ 1651.530539][T18862] RBP: 00007fe175a9b090 R08: 0000000000000000 R09: 0000000000000000 [ 1651.530550][T18862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1651.530561][T18862] R13: 00007fe174e26038 R14: 00007fe174e25fa0 R15: 00007ffebb250508 [ 1651.530592][T18862] [ 1652.381392][T18880] 0: reclassify loop, rule prio 0, protocol 03 [ 1652.452493][T18885] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 1652.564620][T18885] bridge0: port 2(bridge_slave_1) entered disabled state [ 1652.702662][T18895] syzkaller0: entered promiscuous mode [ 1652.702687][T18895] syzkaller0: entered allmulticast mode [ 1653.057841][T18909] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1653.171849][T18912] __nla_validate_parse: 8 callbacks suppressed [ 1653.171874][T18912] netlink: 20 bytes leftover after parsing attributes in process `syz.0.13446'. [ 1654.003152][T18941] netlink: 32 bytes leftover after parsing attributes in process `syz.0.13458'. [ 1654.234061][T18953] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 1654.515283][T18969] netlink: 284 bytes leftover after parsing attributes in process `syz.2.13467'. [ 1654.531127][T18969] netlink: 'syz.2.13467': attribute type 3 has an invalid length. [ 1655.009625][T18989] netlink: 36 bytes leftover after parsing attributes in process `syz.3.13474'. [ 1655.099993][T18991] netlink: 'syz.0.13475': attribute type 10 has an invalid length. [ 1655.100034][T18991] veth0_to_bond: left promiscuous mode [ 1655.106052][T18991] veth0_to_bond: entered promiscuous mode [ 1655.506768][T19011] netlink: 60 bytes leftover after parsing attributes in process `syz.0.13483'. [ 1655.772014][T19025] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13486'. [ 1655.955319][T19039] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13492'. [ 1656.068412][T19037] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13489'. [ 1656.161082][T19042] bond2: (slave syz_tun): Removing an active aggregator [ 1656.161861][T19042] bond2: (slave syz_tun): Releasing backup interface [ 1656.197882][T19042] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1656.275938][T19055] xt_IDLETIMER: label is empty or not nul-terminated [ 1656.336165][T19060] netlink: 'syz.0.13497': attribute type 10 has an invalid length. [ 1656.433945][T19065] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13498'. [ 1656.510242][T19065] bridge3: port 1(dummy0) entered blocking state [ 1656.510476][T19065] bridge3: port 1(dummy0) entered disabled state [ 1656.510657][T19065] dummy0: entered allmulticast mode [ 1656.513752][T19065] dummy0: entered promiscuous mode [ 1656.654748][T19072] FAULT_INJECTION: forcing a failure. [ 1656.654748][T19072] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1656.654782][T19072] CPU: 0 UID: 0 PID: 19072 Comm: syz.4.13500 Not tainted syzkaller #0 PREEMPT(full) [ 1656.654804][T19072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1656.654817][T19072] Call Trace: [ 1656.654825][T19072] [ 1656.654839][T19072] dump_stack_lvl+0xe8/0x150 [ 1656.654874][T19072] should_fail_ex+0x410/0x560 [ 1656.654907][T19072] _copy_from_user+0x2d/0xb0 [ 1656.654938][T19072] ___sys_sendmsg+0x1c6/0x360 [ 1656.654960][T19072] ? __lock_acquire+0x747/0x2de0 [ 1656.654988][T19072] ? __pfx____sys_sendmsg+0x10/0x10 [ 1656.655051][T19072] ? __fget_files+0x2a/0x420 [ 1656.655080][T19072] ? __fget_files+0x3a2/0x420 [ 1656.655122][T19072] __x64_sys_sendmsg+0x1b1/0x290 [ 1656.655148][T19072] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1656.655195][T19072] do_syscall_64+0x166/0x520 [ 1656.655222][T19072] ? trace_irq_disable+0x3b/0x140 [ 1656.655244][T19072] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1656.655265][T19072] ? clear_bhb_loop+0x70/0xc0 [ 1656.655293][T19072] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1656.655313][T19072] RIP: 0033:0x7f575ef9e1d9 [ 1656.655333][T19072] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1656.655350][T19072] RSP: 002b:00007f575fe98028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1656.655374][T19072] RAX: ffffffffffffffda RBX: 00007f575f225fa0 RCX: 00007f575ef9e1d9 [ 1656.655389][T19072] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1656.655402][T19072] RBP: 00007f575fe98090 R08: 0000000000000000 R09: 0000000000000000 [ 1656.655415][T19072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1656.655427][T19072] R13: 00007f575f226038 R14: 00007f575f225fa0 R15: 00007ffc02aeb258 [ 1656.655462][T19072] [ 1657.045156][T19083] syzkaller0: entered promiscuous mode [ 1657.045186][T19083] syzkaller0: entered allmulticast mode [ 1657.573932][T19106] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13509'. [ 1657.573959][T19106] netlink: 'syz.3.13509': attribute type 1 has an invalid length. [ 1661.802611][T19126] __nla_validate_parse: 2 callbacks suppressed [ 1661.802637][T19126] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13514'. [ 1661.956280][T19132] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13516'. [ 1662.092052][T19137] netlink: 'syz.0.13517': attribute type 1 has an invalid length. [ 1662.158496][T19137] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1662.159449][T19136] tipc: Enabled bearer , priority 1 [ 1662.199018][T19135] tipc: Resetting bearer [ 1662.250274][T19135] tipc: Disabling bearer [ 1662.278924][T19140] bond7 (unregistering): Released all slaves [ 1662.338033][T19143] tipc: Enabling of bearer rejected, already enabled [ 1662.410708][T19147] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13521'. [ 1662.582251][T19154] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1662.619170][T19155] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1662.876589][T19168] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 1662.882179][T19168] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1662.882631][T19168] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1662.898091][T19176] netlink: 'syz.4.13530': attribute type 7 has an invalid length. [ 1663.119276][T19180] syzkaller0: left promiscuous mode [ 1663.119302][T19180] syzkaller0: left allmulticast mode [ 1663.127219][T19180] syzkaller0: MTU not usable for tipc bearer [ 1663.127258][T19180] tipc: Enabling of bearer rejected, failed to enable media [ 1663.303876][T19187] netlink: 112 bytes leftover after parsing attributes in process `syz.2.13535'. [ 1663.351425][T19189] FAULT_INJECTION: forcing a failure. [ 1663.351425][T19189] name failslab, interval 1, probability 0, space 0, times 0 [ 1663.351460][T19189] CPU: 1 UID: 0 PID: 19189 Comm: syz.0.13536 Not tainted syzkaller #0 PREEMPT(full) [ 1663.351482][T19189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1663.351494][T19189] Call Trace: [ 1663.351503][T19189] [ 1663.351513][T19189] dump_stack_lvl+0xe8/0x150 [ 1663.351549][T19189] should_fail_ex+0x410/0x560 [ 1663.351584][T19189] should_failslab+0xa8/0x100 [ 1663.351614][T19189] __kmalloc_node_track_caller_noprof+0xfb/0x720 [ 1663.351641][T19189] ? diag_reason+0x15d/0x250 [ 1663.351667][T19189] ? diag_reason+0x15d/0x250 [ 1663.351702][T19189] kvasprintf+0xeb/0x1a0 [ 1663.351811][T19189] ? __pfx_kvasprintf+0x10/0x10 [ 1663.351856][T19189] diag_reason+0x15d/0x250 [ 1663.351890][T19189] ? __pfx_diag_reason+0x10/0x10 [ 1663.351922][T19189] ? verbose+0x11d/0x1a0 [ 1663.351951][T19189] bpf_diag_unreadable_reg+0x57d/0x870 [ 1663.352000][T19189] check_reg_arg+0x2cc/0x420 [ 1663.352033][T19189] do_check_insn+0x3d11/0x17d00 [ 1663.352079][T19189] ? format_decode+0xdc/0xda0 [ 1663.352101][T19189] ? vsnprintf+0x3a0/0xef0 [ 1663.352123][T19189] ? __asan_memcpy+0x40/0x70 [ 1663.352147][T19189] ? __pfx_do_check_insn+0x10/0x10 [ 1663.352185][T19189] ? vscnprintf+0x5c/0x90 [ 1663.352208][T19189] ? bpf_verifier_vlog+0x3d1/0x900 [ 1663.352242][T19189] ? verbose+0x11d/0x1a0 [ 1663.352262][T19189] ? __pfx_bpf_verifier_log_write+0x10/0x10 [ 1663.352289][T19189] ? __pfx_verbose+0x10/0x10 [ 1663.352316][T19189] ? bpf_vlog_reset+0x1db/0x340 [ 1663.352341][T19189] ? print_insn_state+0x106/0x170 [ 1663.352366][T19189] do_check_common+0x364c/0x5610 [ 1663.352400][T19189] ? kasan_quarantine_put+0xbb/0x1f0 [ 1663.352455][T19189] ? __pfx_do_check_common+0x10/0x10 [ 1663.352479][T19189] ? __pfx_verbose+0x10/0x10 [ 1663.352495][T19189] ? __pfx_bpf_disasm_kfunc_name+0x10/0x10 [ 1663.352531][T19189] do_check_main+0xa2/0x1f0 [ 1663.352558][T19189] bpf_check+0x2775/0x2ef0 [ 1663.352602][T19189] ? __pfx_bpf_check+0x10/0x10 [ 1663.352629][T19189] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1663.352662][T19189] bpf_prog_load+0x14d6/0x1c20 [ 1663.352700][T19189] ? __pfx_bpf_prog_load+0x10/0x10 [ 1663.352754][T19189] __sys_bpf+0xd0d/0xd90 [ 1663.352788][T19189] ? __pfx___sys_bpf+0x10/0x10 [ 1663.352824][T19189] ? __fget_files+0x2a/0x420 [ 1663.352874][T19189] ? ksys_write+0x242/0x270 [ 1663.352898][T19189] ? __pfx_ksys_write+0x10/0x10 [ 1663.352925][T19189] __x64_sys_bpf+0xba/0xd0 [ 1663.352951][T19189] do_syscall_64+0x166/0x520 [ 1663.352976][T19189] ? trace_irq_disable+0x3b/0x140 [ 1663.353005][T19189] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1663.353026][T19189] ? clear_bhb_loop+0x70/0xc0 [ 1663.353052][T19189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1663.353072][T19189] RIP: 0033:0x7f8064f9e1d9 [ 1663.353093][T19189] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1663.353111][T19189] RSP: 002b:00007f8065e04028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1663.353135][T19189] RAX: ffffffffffffffda RBX: 00007f8065225fa0 RCX: 00007f8064f9e1d9 [ 1663.353150][T19189] RDX: 0000000000000094 RSI: 00002000000026c0 RDI: 0000000000000005 [ 1663.353163][T19189] RBP: 00007f8065e04090 R08: 0000000000000000 R09: 0000000000000000 [ 1663.353176][T19189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1663.353189][T19189] R13: 00007f8065226038 R14: 00007f8065225fa0 R15: 00007fffde088e28 [ 1663.353224][T19189] [ 1663.423714][T19192] batman_adv: batadv0: Adding interface: syzkaller0 [ 1663.423733][T19192] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1663.423761][T19192] batman_adv: batadv0: Interface activated: syzkaller0 [ 1663.594459][T19190] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 1663.733966][T19190] batman_adv: batadv0: Removing interface: syzkaller0 [ 1663.822607][T19196] netlink: 16 bytes leftover after parsing attributes in process `syz.1.13540'. [ 1663.967623][T19207] netlink: 'syz.3.13544': attribute type 7 has an invalid length. [ 1664.071018][T19211] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13545'. [ 1664.131639][T19210] tipc: Enabled bearer , priority 1 [ 1664.437193][T19226] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13549'. [ 1664.493138][T19226] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1664.895288][T19209] tipc: Resetting bearer [ 1664.952802][T19209] tipc: Disabling bearer [ 1664.993946][T19234] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13554'. [ 1664.995697][T19236] netlink: 1004 bytes leftover after parsing attributes in process `syz.1.13555'. [ 1665.253215][T19248] netlink: 'syz.4.13559': attribute type 7 has an invalid length. [ 1665.303579][T19250] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13560'. [ 1665.371031][T19254] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1665.690387][T19269] tipc: Enabled bearer , priority 1 [ 1665.715544][T19268] tipc: Resetting bearer [ 1665.778259][T19268] tipc: Disabling bearer [ 1666.083276][T19285] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 1666.083308][T19285] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1666.303783][T19278] geneve2: entered promiscuous mode [ 1666.303810][T19278] geneve2: entered allmulticast mode [ 1666.344283][T19294] FAULT_INJECTION: forcing a failure. [ 1666.344283][T19294] name failslab, interval 1, probability 0, space 0, times 0 [ 1666.344324][T19294] CPU: 1 UID: 0 PID: 19294 Comm: syz.1.13573 Not tainted syzkaller #0 PREEMPT(full) [ 1666.344347][T19294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1666.344360][T19294] Call Trace: [ 1666.344378][T19294] [ 1666.344388][T19294] dump_stack_lvl+0xe8/0x150 [ 1666.344424][T19294] should_fail_ex+0x410/0x560 [ 1666.344459][T19294] should_failslab+0xa8/0x100 [ 1666.344488][T19294] __kmalloc_noprof+0xfe/0x720 [ 1666.344512][T19294] ? tomoyo_encode+0x2ad/0x570 [ 1666.344538][T19294] ? tomoyo_encode+0x2ad/0x570 [ 1666.344573][T19294] tomoyo_encode+0x2ad/0x570 [ 1666.344606][T19294] tomoyo_realpath_from_path+0x5fa/0x640 [ 1666.344647][T19294] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1666.344673][T19294] tomoyo_path_number_perm+0x246/0x5f0 [ 1666.344701][T19294] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1666.344724][T19294] ? __lock_acquire+0x747/0x2de0 [ 1666.344788][T19294] ? hook_file_ioctl+0x1f2/0x600 [ 1666.344840][T19294] ? __fget_files+0x2a/0x420 [ 1666.344871][T19294] ? __fget_files+0x2a/0x420 [ 1666.344897][T19294] ? __fget_files+0x3a2/0x420 [ 1666.344923][T19294] ? __fget_files+0x2a/0x420 [ 1666.344955][T19294] security_file_ioctl+0xc3/0x2a0 [ 1666.344984][T19294] __se_sys_ioctl+0x47/0x170 [ 1666.345011][T19294] do_syscall_64+0x166/0x520 [ 1666.345038][T19294] ? trace_irq_disable+0x3b/0x140 [ 1666.345058][T19294] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1666.345080][T19294] ? clear_bhb_loop+0x70/0xc0 [ 1666.345107][T19294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1666.345126][T19294] RIP: 0033:0x7fe174b9e1d9 [ 1666.345147][T19294] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1666.345165][T19294] RSP: 002b:00007fe175a9b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1666.345188][T19294] RAX: ffffffffffffffda RBX: 00007fe174e25fa0 RCX: 00007fe174b9e1d9 [ 1666.345204][T19294] RDX: 0000200000000740 RSI: 00000000400448e1 RDI: 0000000000000004 [ 1666.345217][T19294] RBP: 00007fe175a9b090 R08: 0000000000000000 R09: 0000000000000000 [ 1666.345231][T19294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1666.345244][T19294] R13: 00007fe174e26038 R14: 00007fe174e25fa0 R15: 00007ffebb250508 [ 1666.345280][T19294] [ 1666.356819][T10157] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1666.356877][T10157] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1666.356909][T10157] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1666.356941][T10157] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1666.456793][T19294] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1667.032257][T19305] FAULT_INJECTION: forcing a failure. [ 1667.032257][T19305] name failslab, interval 1, probability 0, space 0, times 0 [ 1667.032293][T19305] CPU: 1 UID: 0 PID: 19305 Comm: syz.2.13576 Not tainted syzkaller #0 PREEMPT(full) [ 1667.032321][T19305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1667.032333][T19305] Call Trace: [ 1667.032342][T19305] [ 1667.032352][T19305] dump_stack_lvl+0xe8/0x150 [ 1667.032386][T19305] should_fail_ex+0x410/0x560 [ 1667.032419][T19305] should_failslab+0xa8/0x100 [ 1667.032448][T19305] ? security_inode_alloc+0x39/0x310 [ 1667.032477][T19305] kmem_cache_alloc_noprof+0xa1/0x600 [ 1667.032502][T19305] ? security_inode_alloc+0x39/0x310 [ 1667.032539][T19305] security_inode_alloc+0x39/0x310 [ 1667.032568][T19305] inode_init_always_gfp+0x97e/0xd30 [ 1667.032603][T19305] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 1667.032658][T19305] alloc_inode+0x82/0x1b0 [ 1667.032689][T19305] new_inode+0x1f/0x170 [ 1667.032722][T19305] __debugfs_create_file+0xb8/0x400 [ 1667.032761][T19305] debugfs_create_file_full+0x3f/0x60 [ 1667.032790][T19305] ref_tracker_dir_debugfs+0x197/0x360 [ 1667.032821][T19305] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 1667.032883][T19305] ? __kvmalloc_node_noprof+0x52f/0x820 [ 1667.032911][T19305] ? __kvmalloc_node_noprof+0x345/0x820 [ 1667.032941][T19305] ? __raw_spin_lock_init+0x45/0x100 [ 1667.032975][T19305] alloc_netdev_mqs+0x275/0x1240 [ 1667.033002][T19305] ? __pfx_snprintf+0x10/0x10 [ 1667.033023][T19305] ? __pfx_veth_setup+0x10/0x10 [ 1667.033050][T19305] rtnl_create_link+0x321/0xd70 [ 1667.033088][T19305] rtnl_newlink_create+0x258/0x7b0 [ 1667.033122][T19305] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 1667.033152][T19305] ? __pfx___mutex_lock+0x10/0x10 [ 1667.033195][T19305] ? ns_capable+0x89/0xe0 [ 1667.033229][T19305] rtnl_newlink+0x167a/0x1c30 [ 1667.033271][T19305] ? __pfx_rtnl_newlink+0x10/0x10 [ 1667.033290][T19305] ? __netlink_deliver_tap+0x4f1/0x6e0 [ 1667.033316][T19305] ? netlink_deliver_tap+0x19c/0x1b0 [ 1667.033340][T19305] ? netlink_unicast+0x781/0x940 [ 1667.033362][T19305] ? netlink_sendmsg+0x813/0xb40 [ 1667.033386][T19305] ? sock_sendmsg_nosec+0x14e/0x190 [ 1667.033411][T19305] ? ____sys_sendmsg+0x54e/0x850 [ 1667.033429][T19305] ? ___sys_sendmsg+0x2a5/0x360 [ 1667.033449][T19305] ? __x64_sys_sendmsg+0x1b1/0x290 [ 1667.033468][T19305] ? do_syscall_64+0x166/0x520 [ 1667.033493][T19305] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1667.033602][T19305] ? __dev_queue_xmit+0x29b/0x3920 [ 1667.033631][T19305] ? __local_bh_enable_ip+0xd6/0x140 [ 1667.033658][T19305] ? lockdep_hardirqs_on+0x7b/0x110 [ 1667.033719][T19305] ? __pfx_rtnl_newlink+0x10/0x10 [ 1667.033739][T19305] rtnetlink_rcv_msg+0x802/0xc00 [ 1667.033783][T19305] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1667.033813][T19305] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1667.033848][T19305] ? __copy_skb_header+0xa3/0x4a0 [ 1667.033886][T19305] netlink_rcv_skb+0x226/0x4a0 [ 1667.033915][T19305] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1667.033949][T19305] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1667.033993][T19305] ? netlink_deliver_tap+0x2e/0x1b0 [ 1667.034019][T19305] ? netlink_deliver_tap+0x2e/0x1b0 [ 1667.034054][T19305] netlink_unicast+0x7bd/0x940 [ 1667.034094][T19305] netlink_sendmsg+0x813/0xb40 [ 1667.034134][T19305] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1667.034170][T19305] ? apparmor_socket_sendmsg+0x98/0x360 [ 1667.034199][T19305] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1667.034225][T19305] sock_sendmsg_nosec+0x14e/0x190 [ 1667.034254][T19305] ____sys_sendmsg+0x54e/0x850 [ 1667.034284][T19305] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1667.034319][T19305] ? import_iovec+0x73/0xa0 [ 1667.034353][T19305] ___sys_sendmsg+0x2a5/0x360 [ 1667.034374][T19305] ? __lock_acquire+0x747/0x2de0 [ 1667.034402][T19305] ? __pfx____sys_sendmsg+0x10/0x10 [ 1667.034471][T19305] ? __fget_files+0x2a/0x420 [ 1667.034500][T19305] ? __fget_files+0x3a2/0x420 [ 1667.034544][T19305] __x64_sys_sendmsg+0x1b1/0x290 [ 1667.034571][T19305] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1667.034622][T19305] do_syscall_64+0x166/0x520 [ 1667.034648][T19305] ? trace_irq_disable+0x3b/0x140 [ 1667.034669][T19305] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1667.034690][T19305] ? clear_bhb_loop+0x70/0xc0 [ 1667.034718][T19305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1667.034740][T19305] RIP: 0033:0x7efd5519e1d9 [ 1667.034774][T19305] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1667.034791][T19305] RSP: 002b:00007efd56087028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1667.034816][T19305] RAX: ffffffffffffffda RBX: 00007efd55425fa0 RCX: 00007efd5519e1d9 [ 1667.034831][T19305] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1667.034844][T19305] RBP: 00007efd56087090 R08: 0000000000000000 R09: 0000000000000000 [ 1667.034858][T19305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1667.034871][T19305] R13: 00007efd55426038 R14: 00007efd55425fa0 R15: 00007ffdcf4920b8 [ 1667.034909][T19305] [ 1667.058389][T19303] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1667.078529][T19303] sctp: [Deprecated]: syz.0.13577 (pid 19303) Use of int in max_burst socket option deprecated. [ 1667.078529][T19303] Use struct sctp_assoc_value instead [ 1667.085619][T19304] __nla_validate_parse: 7 callbacks suppressed [ 1667.085638][T19304] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13577'. [ 1667.085652][T19304] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13577'. [ 1667.152720][T19305] debugfs: out of free dentries, can not create file 'netdev@ffff88805d382700' [ 1667.635013][T19316] ip_tables: iptables: counters copy to user failed while replacing table [ 1667.681896][T19317] tipc: Enabled bearer , priority 1 [ 1667.714618][T19314] tipc: Resetting bearer [ 1667.778393][T19314] tipc: Disabling bearer [ 1667.793242][T19319] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1667.794532][T19319] netlink: 64 bytes leftover after parsing attributes in process `syz.0.13582'. [ 1667.907222][T19321] ip6gretap0: entered promiscuous mode [ 1667.909582][T19321] batadv0: entered promiscuous mode [ 1667.911065][T19321] debugfs: 'hsr1' already exists in 'hsr' [ 1667.911093][T19321] Cannot create hsr debugfs directory [ 1667.911361][T19321] hsr1: Slave A (ip6gretap0) is not up; please bring it up to get a fully working HSR network [ 1667.911384][T19321] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 1668.254146][T19332] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13585'. [ 1668.696279][T19338] bond7 (unregistering): Released all slaves [ 1668.741098][T19346] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13591'. [ 1668.744348][T19344] ip6erspan0: entered allmulticast mode [ 1668.961973][T19354] tipc: Enabled bearer , priority 1 [ 1669.076113][T19358] netlink: 'syz.1.13596': attribute type 10 has an invalid length. [ 1669.087665][T19358] netlink: 'syz.1.13596': attribute type 10 has an invalid length. [ 1669.219288][T19372] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13601'. [ 1669.458260][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1669.460088][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.573243][T19386] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13606'. [ 1669.752516][T19398] FAULT_INJECTION: forcing a failure. [ 1669.752516][T19398] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1669.752552][T19398] CPU: 1 UID: 0 PID: 19398 Comm: syz.1.13612 Not tainted syzkaller #0 PREEMPT(full) [ 1669.752576][T19398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1669.752589][T19398] Call Trace: [ 1669.752598][T19398] [ 1669.752608][T19398] dump_stack_lvl+0xe8/0x150 [ 1669.752644][T19398] should_fail_ex+0x410/0x560 [ 1669.752678][T19398] _copy_from_iter+0x1d3/0x1660 [ 1669.752707][T19398] ? __alloc_skb+0x27a/0x7a0 [ 1669.752740][T19398] ? __alloc_skb+0x27a/0x7a0 [ 1669.752771][T19398] ? __alloc_skb+0x27a/0x7a0 [ 1669.752800][T19398] ? __pfx__copy_from_iter+0x10/0x10 [ 1669.752825][T19398] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 1669.752846][T19398] ? __alloc_skb+0x27a/0x7a0 [ 1669.752873][T19398] ? __alloc_skb+0x27a/0x7a0 [ 1669.752918][T19398] ? netlink_sendmsg+0x650/0xb40 [ 1669.752945][T19398] ? skb_put+0x112/0x210 [ 1669.752968][T19398] netlink_sendmsg+0x6c0/0xb40 [ 1669.753005][T19398] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1669.753042][T19398] ? apparmor_socket_sendmsg+0x98/0x360 [ 1669.753071][T19398] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1669.753097][T19398] sock_sendmsg_nosec+0x14e/0x190 [ 1669.753128][T19398] ____sys_sendmsg+0x54e/0x850 [ 1669.753156][T19398] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1669.753190][T19398] ? import_iovec+0x73/0xa0 [ 1669.753223][T19398] ___sys_sendmsg+0x2a5/0x360 [ 1669.753244][T19398] ? __lock_acquire+0x747/0x2de0 [ 1669.753276][T19398] ? __pfx____sys_sendmsg+0x10/0x10 [ 1669.753338][T19398] ? __fget_files+0x2a/0x420 [ 1669.753365][T19398] ? __fget_files+0x3a2/0x420 [ 1669.753405][T19398] __x64_sys_sendmsg+0x1b1/0x290 [ 1669.753431][T19398] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1669.753479][T19398] do_syscall_64+0x166/0x520 [ 1669.753505][T19398] ? trace_irq_disable+0x3b/0x140 [ 1669.753527][T19398] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1669.753549][T19398] ? clear_bhb_loop+0x70/0xc0 [ 1669.753573][T19398] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1669.753592][T19398] RIP: 0033:0x7fe174b9e1d9 [ 1669.753612][T19398] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1669.753630][T19398] RSP: 002b:00007fe175a9b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1669.753654][T19398] RAX: ffffffffffffffda RBX: 00007fe174e25fa0 RCX: 00007fe174b9e1d9 [ 1669.753669][T19398] RDX: 0000000000000000 RSI: 00002000000007c0 RDI: 0000000000000003 [ 1669.753683][T19398] RBP: 00007fe175a9b090 R08: 0000000000000000 R09: 0000000000000000 [ 1669.753696][T19398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1669.753709][T19398] R13: 00007fe174e26038 R14: 00007fe174e25fa0 R15: 00007ffebb250508 [ 1669.753745][T19398] [ 1669.801918][T19395] macsec2: entered promiscuous mode [ 1669.809656][T19353] tipc: Resetting bearer [ 1669.988820][T19353] tipc: Disabling bearer [ 1670.070706][T19402] 8021q: adding VLAN 0 to HW filter on device macsec0 [ 1670.221527][T19412] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13619'. [ 1670.464908][T19421] FAULT_INJECTION: forcing a failure. [ 1670.464908][T19421] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1670.464946][T19421] CPU: 1 UID: 0 PID: 19421 Comm: syz.1.13618 Not tainted syzkaller #0 PREEMPT(full) [ 1670.464969][T19421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1670.464981][T19421] Call Trace: [ 1670.464990][T19421] [ 1670.465000][T19421] dump_stack_lvl+0xe8/0x150 [ 1670.465035][T19421] should_fail_ex+0x410/0x560 [ 1670.465068][T19421] _copy_from_user+0x2d/0xb0 [ 1670.465099][T19421] ___sys_recvmsg+0x173/0x5a0 [ 1670.465129][T19421] ? __pfx____sys_recvmsg+0x10/0x10 [ 1670.465157][T19421] ? lock_acquire+0x115/0x350 [ 1670.465212][T19421] do_recvmmsg+0x31a/0x7f0 [ 1670.465243][T19421] ? __pfx_do_recvmmsg+0x10/0x10 [ 1670.465276][T19421] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1670.465304][T19421] ? __fget_files+0x3a2/0x420 [ 1670.465343][T19421] __x64_sys_recvmmsg+0x198/0x250 [ 1670.465366][T19421] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1670.465400][T19421] do_syscall_64+0x166/0x520 [ 1670.465424][T19421] ? trace_irq_disable+0x3b/0x140 [ 1670.465455][T19421] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1670.465474][T19421] ? clear_bhb_loop+0x70/0xc0 [ 1670.465496][T19421] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1670.465515][T19421] RIP: 0033:0x7fe174b9e1d9 [ 1670.465536][T19421] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1670.465553][T19421] RSP: 002b:00007fe175a9b028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1670.465576][T19421] RAX: ffffffffffffffda RBX: 00007fe174e25fa0 RCX: 00007fe174b9e1d9 [ 1670.465591][T19421] RDX: 03ffffffffffff67 RSI: 0000200000000280 RDI: 0000000000000006 [ 1670.465604][T19421] RBP: 00007fe175a9b090 R08: 0000000000000000 R09: 0000000000000000 [ 1670.465617][T19421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1670.465629][T19421] R13: 00007fe174e26038 R14: 00007fe174e25fa0 R15: 00007ffebb250508 [ 1670.465664][T19421] [ 1670.888984][T19436] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13625'. [ 1670.947581][T19436] dummy0: left allmulticast mode [ 1670.947623][T19436] dummy0: left promiscuous mode [ 1670.947888][T19436] bridge3: port 1(dummy0) entered disabled state [ 1670.977795][T19436] bridge5: port 1(dummy0) entered blocking state [ 1670.980429][T19436] bridge5: port 1(dummy0) entered disabled state [ 1670.980601][T19436] dummy0: entered allmulticast mode [ 1670.984410][T19436] dummy0: entered promiscuous mode [ 1671.015977][T19445] netlink: 'syz.4.13625': attribute type 10 has an invalid length. [ 1671.016002][T19445] netlink: 40 bytes leftover after parsing attributes in process `syz.4.13625'. [ 1671.023726][T19445] bridge5: port 1(dummy0) entered blocking state [ 1671.023886][T19445] bridge5: port 1(dummy0) entered forwarding state [ 1671.028950][T19445] dummy0: left allmulticast mode [ 1671.029452][T19445] bridge5: port 1(dummy0) entered disabled state [ 1671.101664][T19440] tipc: Enabling of bearer rejected, already enabled [ 1671.573733][T19466] syzkaller0: entered promiscuous mode [ 1671.573758][T19466] syzkaller0: entered allmulticast mode [ 1671.691061][T19476] FAULT_INJECTION: forcing a failure. [ 1671.691061][T19476] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1671.691098][T19476] CPU: 0 UID: 0 PID: 19476 Comm: syz.4.13639 Not tainted syzkaller #0 PREEMPT(full) [ 1671.691122][T19476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1671.691134][T19476] Call Trace: [ 1671.691144][T19476] [ 1671.691154][T19476] dump_stack_lvl+0xe8/0x150 [ 1671.691191][T19476] should_fail_ex+0x410/0x560 [ 1671.691225][T19476] _copy_from_user+0x2d/0xb0 [ 1671.691256][T19476] generic_map_update_batch+0x662/0xae0 [ 1671.691303][T19476] ? __pfx_generic_map_update_batch+0x10/0x10 [ 1671.691332][T19476] ? __fget_files+0x2a/0x420 [ 1671.691371][T19476] ? __pfx_generic_map_update_batch+0x10/0x10 [ 1671.691401][T19476] bpf_map_do_batch+0x391/0x630 [ 1671.691433][T19476] __sys_bpf+0xbe5/0xd90 [ 1671.691468][T19476] ? __pfx___sys_bpf+0x10/0x10 [ 1671.691505][T19476] ? __fget_files+0x2a/0x420 [ 1671.691554][T19476] ? ksys_write+0x242/0x270 [ 1671.691579][T19476] ? __pfx_ksys_write+0x10/0x10 [ 1671.691607][T19476] __x64_sys_bpf+0xba/0xd0 [ 1671.691633][T19476] do_syscall_64+0x166/0x520 [ 1671.691659][T19476] ? trace_irq_disable+0x3b/0x140 [ 1671.691681][T19476] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1671.691703][T19476] ? clear_bhb_loop+0x70/0xc0 [ 1671.691728][T19476] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1671.691749][T19476] RIP: 0033:0x7f575ef9e1d9 [ 1671.691770][T19476] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1671.691788][T19476] RSP: 002b:00007f575fe77028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1671.691811][T19476] RAX: ffffffffffffffda RBX: 00007f575f226090 RCX: 00007f575ef9e1d9 [ 1671.691827][T19476] RDX: 0000000000000038 RSI: 0000200000000dc0 RDI: 000000000000001a [ 1671.691842][T19476] RBP: 00007f575fe77090 R08: 0000000000000000 R09: 0000000000000000 [ 1671.691855][T19476] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1671.691868][T19476] R13: 00007f575f226128 R14: 00007f575f226090 R15: 00007ffc02aeb258 [ 1671.691903][T19476] [ 1671.782942][T19480] syzkaller0: left promiscuous mode [ 1671.782963][T19480] syzkaller0: left allmulticast mode [ 1671.792837][T19480] tipc: Enabling of bearer rejected, already enabled [ 1671.808161][T10156] bond3: (slave syz_tun): link status up again after 0 ms [ 1671.808192][T10156] bond3: (slave syz_tun): failed to get link speed/duplex [ 1671.926758][ T119] bond3: (slave syz_tun): failed to get link speed/duplex [ 1672.036528][T10159] bond3: (slave syz_tun): failed to get link speed/duplex [ 1672.087542][T19490] __nla_validate_parse: 4 callbacks suppressed [ 1672.087560][T19490] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13646'. [ 1672.146935][T10159] bond3: (slave syz_tun): failed to get link speed/duplex [ 1672.260633][T10159] bond3: (slave syz_tun): failed to get link speed/duplex [ 1672.314604][T19498] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 1672.366834][T10156] bond3: (slave syz_tun): failed to get link speed/duplex [ 1672.396716][T19500] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13650'. [ 1672.463490][T19493] xt_hashlimit: size too large, truncated to 1048576 [ 1672.474338][T19503] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13651'. [ 1672.476572][T10157] bond3: (slave syz_tun): failed to get link speed/duplex [ 1672.667313][T19506] syzkaller0: entered promiscuous mode [ 1672.667340][T19506] syzkaller0: entered allmulticast mode [ 1672.847046][T10156] net_ratelimit: 1 callbacks suppressed [ 1672.847072][T10156] bond3: (slave syz_tun): failed to get link speed/duplex [ 1672.877827][T19510] tipc: Enabled bearer , priority 1 [ 1672.907065][T19509] tipc: Resetting bearer [ 1672.987613][T19509] tipc: Disabling bearer [ 1673.018069][T10156] bond3: (slave syz_tun): failed to get link speed/duplex [ 1673.089290][T19516] FAULT_INJECTION: forcing a failure. [ 1673.089290][T19516] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1673.089355][T19516] CPU: 1 UID: 0 PID: 19516 Comm: syz.4.13658 Not tainted syzkaller #0 PREEMPT(full) [ 1673.089378][T19516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1673.089389][T19516] Call Trace: [ 1673.089398][T19516] [ 1673.089407][T19516] dump_stack_lvl+0xe8/0x150 [ 1673.089442][T19516] should_fail_ex+0x410/0x560 [ 1673.089475][T19516] _copy_from_user+0x2d/0xb0 [ 1673.089503][T19516] copy_bpf_fprog_from_user+0x179/0x2c0 [ 1673.089535][T19516] ? __pfx_copy_bpf_fprog_from_user+0x10/0x10 [ 1673.089562][T19516] ? aa_label_sk_perm+0x532/0x6e0 [ 1673.089598][T19516] fanout_set_data+0x22d/0x430 [ 1673.089628][T19516] ? __pfx_fanout_set_data+0x10/0x10 [ 1673.089651][T19516] ? get_pid_task+0x20/0x1f0 [ 1673.089671][T19516] ? get_pid_task+0x20/0x1f0 [ 1673.089708][T19516] packet_setsockopt+0x8b6/0x1510 [ 1673.089734][T19516] ? __pfx_packet_setsockopt+0x10/0x10 [ 1673.089767][T19516] ? ksys_write+0x1e6/0x270 [ 1673.089793][T19516] ? aa_sk_perm+0x713/0x900 [ 1673.089827][T19516] ? __pfx_aa_sk_perm+0x10/0x10 [ 1673.089857][T19516] ? aa_sock_opt_perm+0x142/0x1e0 [ 1673.089888][T19516] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1673.089915][T19516] ? __pfx_packet_setsockopt+0x10/0x10 [ 1673.089938][T19516] do_sock_setsockopt+0x17c/0x1b0 [ 1673.089964][T19516] __x64_sys_setsockopt+0x13d/0x1b0 [ 1673.089991][T19516] do_syscall_64+0x166/0x520 [ 1673.090016][T19516] ? trace_irq_disable+0x3b/0x140 [ 1673.090036][T19516] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1673.090057][T19516] ? clear_bhb_loop+0x70/0xc0 [ 1673.090084][T19516] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1673.090104][T19516] RIP: 0033:0x7f575ef9e1d9 [ 1673.090126][T19516] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1673.090143][T19516] RSP: 002b:00007f575fe98028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1673.090166][T19516] RAX: ffffffffffffffda RBX: 00007f575f225fa0 RCX: 00007f575ef9e1d9 [ 1673.090182][T19516] RDX: 0000000000000016 RSI: 0000000000000107 RDI: 0000000000000005 [ 1673.090195][T19516] RBP: 00007f575fe98090 R08: 0000000000000010 R09: 0000000000000000 [ 1673.090209][T19516] R10: 0000200000000300 R11: 0000000000000246 R12: 0000000000000001 [ 1673.090223][T19516] R13: 00007f575f226038 R14: 00007f575f225fa0 R15: 00007ffc02aeb258 [ 1673.090259][T19516] [ 1673.092293][T19516] netlink: 80 bytes leftover after parsing attributes in process `syz.4.13658'. [ 1673.316770][T10156] bond3: (slave syz_tun): failed to get link speed/duplex [ 1673.414947][T19521] netlink: 20 bytes leftover after parsing attributes in process `syz.3.13660'. [ 1673.426475][T10156] bond3: (slave syz_tun): failed to get link speed/duplex [ 1673.537423][T10157] bond3: (slave syz_tun): failed to get link speed/duplex [ 1673.567221][T19527] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13662'. [ 1673.647582][T10159] bond3: (slave syz_tun): failed to get link speed/duplex [ 1673.757910][T10156] bond3: (slave syz_tun): failed to get link speed/duplex [ 1673.839770][T19542] netlink: 20 bytes leftover after parsing attributes in process `syz.1.13668'. [ 1673.866567][T10159] bond3: (slave syz_tun): failed to get link speed/duplex [ 1673.944632][T19548] tipc: Enabling of bearer rejected, already enabled [ 1673.982049][ T119] bond3: (slave syz_tun): failed to get link speed/duplex [ 1674.015434][T19550] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13671'. [ 1674.400632][T19564] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13675'. [ 1674.486875][T10159] bond3: (slave syz_tun): failed to get link speed/duplex [ 1674.792039][T19579] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13682'. [ 1674.948332][T19582] dummy0: left promiscuous mode [ 1674.959610][T19582] bridge4: port 1(dummy0) entered blocking state [ 1674.959728][T19582] bridge4: port 1(dummy0) entered disabled state [ 1674.959929][T19582] dummy0: entered allmulticast mode [ 1674.975099][T19582] dummy0: entered promiscuous mode [ 1675.001421][T19579] netlink: 'syz.3.13682': attribute type 10 has an invalid length. [ 1675.009949][T19579] bridge4: port 1(dummy0) entered blocking state [ 1675.010073][T19579] bridge4: port 1(dummy0) entered forwarding state [ 1675.017082][T19579] dummy0: left allmulticast mode [ 1675.018969][T19579] bridge4: port 1(dummy0) entered disabled state [ 1675.543157][T19601] FAULT_INJECTION: forcing a failure. [ 1675.543157][T19601] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1675.543196][T19601] CPU: 0 UID: 0 PID: 19601 Comm: syz.3.13689 Not tainted syzkaller #0 PREEMPT(full) [ 1675.543220][T19601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1675.543233][T19601] Call Trace: [ 1675.543242][T19601] [ 1675.543252][T19601] dump_stack_lvl+0xe8/0x150 [ 1675.543288][T19601] should_fail_ex+0x410/0x560 [ 1675.543321][T19601] _copy_from_user+0x2d/0xb0 [ 1675.543352][T19601] ___sys_sendmsg+0x1c6/0x360 [ 1675.543375][T19601] ? __lock_acquire+0x747/0x2de0 [ 1675.543403][T19601] ? __pfx____sys_sendmsg+0x10/0x10 [ 1675.543466][T19601] ? __fget_files+0x2a/0x420 [ 1675.543497][T19601] ? __fget_files+0x3a2/0x420 [ 1675.543538][T19601] __x64_sys_sendmsg+0x1b1/0x290 [ 1675.543565][T19601] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1675.543617][T19601] do_syscall_64+0x166/0x520 [ 1675.543646][T19601] ? trace_irq_disable+0x3b/0x140 [ 1675.543669][T19601] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1675.543689][T19601] ? clear_bhb_loop+0x70/0xc0 [ 1675.543721][T19601] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1675.543740][T19601] RIP: 0033:0x7f6a2b19e1d9 [ 1675.543760][T19601] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1675.543776][T19601] RSP: 002b:00007f6a2bf8c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1675.543797][T19601] RAX: ffffffffffffffda RBX: 00007f6a2b425fa0 RCX: 00007f6a2b19e1d9 [ 1675.543812][T19601] RDX: 0000000000000090 RSI: 00002000000002c0 RDI: 0000000000000004 [ 1675.543825][T19601] RBP: 00007f6a2bf8c090 R08: 0000000000000000 R09: 0000000000000000 [ 1675.543839][T19601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1675.543850][T19601] R13: 00007f6a2b426038 R14: 00007f6a2b425fa0 R15: 00007ffc23da78d8 [ 1675.543880][T19601] [ 1675.852460][T19590] FAULT_INJECTION: forcing a failure. [ 1675.852460][T19590] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1675.852496][T19590] CPU: 0 UID: 0 PID: 19590 Comm: syz.2.13684 Not tainted syzkaller #0 PREEMPT(full) [ 1675.852523][T19590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1675.852535][T19590] Call Trace: [ 1675.852544][T19590] [ 1675.852554][T19590] dump_stack_lvl+0xe8/0x150 [ 1675.852589][T19590] should_fail_ex+0x410/0x560 [ 1675.852620][T19590] strncpy_from_user+0x36/0x2c0 [ 1675.852650][T19590] do_getname+0x77/0x250 [ 1675.852681][T19590] do_sys_openat2+0xcc/0x200 [ 1675.852710][T19590] ? __pfx_do_sys_openat2+0x10/0x10 [ 1675.852738][T19590] ? ksys_write+0x242/0x270 [ 1675.852761][T19590] ? __pfx_ksys_write+0x10/0x10 [ 1675.852786][T19590] __x64_sys_openat+0x138/0x170 [ 1675.852819][T19590] do_syscall_64+0x166/0x520 [ 1675.852845][T19590] ? trace_irq_disable+0x3b/0x140 [ 1675.852864][T19590] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1675.852884][T19590] ? clear_bhb_loop+0x70/0xc0 [ 1675.852918][T19590] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1675.852937][T19590] RIP: 0033:0x7efd5519e1d9 [ 1675.852957][T19590] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1675.852974][T19590] RSP: 002b:00007efd56087028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1675.852997][T19590] RAX: ffffffffffffffda RBX: 00007efd55425fa0 RCX: 00007efd5519e1d9 [ 1675.853012][T19590] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1675.853026][T19590] RBP: 00007efd56087090 R08: 0000000000000000 R09: 0000000000000000 [ 1675.853039][T19590] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1675.853052][T19590] R13: 00007efd55426038 R14: 00007efd55425fa0 R15: 00007ffdcf4920b8 [ 1675.853087][T19590] [ 1677.420027][T19639] IPVS: set_ctl: invalid protocol: 135 0.0.0.0:20003 [ 1677.639001][T19652] __nla_validate_parse: 7 callbacks suppressed [ 1677.639026][T19652] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13708'. [ 1677.862456][T19662] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13712'. [ 1677.939937][T31976] net_ratelimit: 25 callbacks suppressed [ 1677.939962][T31976] bond3: (slave syz_tun): failed to get link speed/duplex [ 1677.964110][T19667] Cannot find del_set index 2 as target [ 1678.047755][T10160] bond3: (slave syz_tun): failed to get link speed/duplex [ 1678.166963][T10161] bond3: (slave syz_tun): failed to get link speed/duplex [ 1678.276620][T10161] bond3: (slave syz_tun): failed to get link speed/duplex [ 1678.513677][T19687] FAULT_INJECTION: forcing a failure. [ 1678.513677][T19687] name failslab, interval 1, probability 0, space 0, times 0 [ 1678.513714][T19687] CPU: 1 UID: 0 PID: 19687 Comm: syz.0.13720 Not tainted syzkaller #0 PREEMPT(full) [ 1678.513737][T19687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1678.513750][T19687] Call Trace: [ 1678.513759][T19687] [ 1678.513769][T19687] dump_stack_lvl+0xe8/0x150 [ 1678.513804][T19687] should_fail_ex+0x410/0x560 [ 1678.513836][T19687] ? __alloc_skb+0x1db/0x7a0 [ 1678.513865][T19687] should_failslab+0xa8/0x100 [ 1678.513893][T19687] ? __alloc_skb+0x1db/0x7a0 [ 1678.513919][T19687] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 1678.513941][T19687] ? __alloc_skb+0x18d/0x7a0 [ 1678.513970][T19687] ? __alloc_skb+0x1db/0x7a0 [ 1678.514006][T19687] __alloc_skb+0x1db/0x7a0 [ 1678.514039][T19687] netlink_ack+0x136/0xb30 [ 1678.514085][T19687] netlink_rcv_skb+0x2a4/0x4a0 [ 1678.514113][T19687] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1678.514141][T19687] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1678.514180][T19687] ? bpf_lsm_capable+0x9/0x20 [ 1678.514200][T19687] ? security_capable+0x7e/0x2c0 [ 1678.514236][T19687] nfnetlink_rcv+0x2b9/0x28c0 [ 1678.514267][T19687] ? kernel_text_address+0xa5/0xe0 [ 1678.514292][T19687] ? __kernel_text_address+0xd/0x30 [ 1678.514313][T19687] ? unwind_get_return_address+0x4d/0x90 [ 1678.514355][T19687] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1678.514377][T19687] ? arch_stack_walk+0xfb/0x150 [ 1678.514428][T19687] ? stack_trace_save+0xa9/0x100 [ 1678.514451][T19687] ? __lock_acquire+0x747/0x2de0 [ 1678.514475][T19687] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1678.514504][T19687] ? __kasan_slab_alloc+0x6c/0x80 [ 1678.514527][T19687] ? kmem_cache_alloc_node_noprof+0x354/0x610 [ 1678.514546][T19687] ? __alloc_skb+0x27a/0x7a0 [ 1678.514572][T19687] ? netlink_sendmsg+0x5d4/0xb40 [ 1678.514597][T19687] ? sock_sendmsg_nosec+0x14e/0x190 [ 1678.514620][T19687] ? ____sys_sendmsg+0x54e/0x850 [ 1678.514649][T19687] ? __lock_acquire+0x747/0x2de0 [ 1678.514684][T19687] ? __netlink_lookup+0xc6/0x8b0 [ 1678.514729][T19687] ? lock_acquire+0x115/0x350 [ 1678.514751][T19687] ? netlink_deliver_tap+0x2e/0x1b0 [ 1678.514784][T19687] ? netlink_deliver_tap+0x2e/0x1b0 [ 1678.514810][T19687] ? netlink_deliver_tap+0x2e/0x1b0 [ 1678.514842][T19687] netlink_unicast+0x7bd/0x940 [ 1678.514880][T19687] netlink_sendmsg+0x813/0xb40 [ 1678.514916][T19687] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1678.514952][T19687] ? apparmor_socket_sendmsg+0x98/0x360 [ 1678.514981][T19687] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1678.515006][T19687] sock_sendmsg_nosec+0x14e/0x190 [ 1678.515036][T19687] ____sys_sendmsg+0x54e/0x850 [ 1678.515063][T19687] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1678.515095][T19687] ? import_iovec+0x73/0xa0 [ 1678.515128][T19687] ___sys_sendmsg+0x2a5/0x360 [ 1678.515149][T19687] ? __lock_acquire+0x747/0x2de0 [ 1678.515175][T19687] ? __pfx____sys_sendmsg+0x10/0x10 [ 1678.515238][T19687] ? __fget_files+0x2a/0x420 [ 1678.515266][T19687] ? __fget_files+0x3a2/0x420 [ 1678.515307][T19687] __x64_sys_sendmsg+0x1b1/0x290 [ 1678.515332][T19687] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1678.515387][T19687] do_syscall_64+0x166/0x520 [ 1678.515414][T19687] ? trace_irq_disable+0x3b/0x140 [ 1678.515436][T19687] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1678.515456][T19687] ? clear_bhb_loop+0x70/0xc0 [ 1678.515482][T19687] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1678.515502][T19687] RIP: 0033:0x7f8064f9e1d9 [ 1678.515523][T19687] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1678.515541][T19687] RSP: 002b:00007f8065e04028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1678.515564][T19687] RAX: ffffffffffffffda RBX: 00007f8065225fa0 RCX: 00007f8064f9e1d9 [ 1678.515579][T19687] RDX: 0000000000000090 RSI: 00002000000002c0 RDI: 0000000000000003 [ 1678.515592][T19687] RBP: 00007f8065e04090 R08: 0000000000000000 R09: 0000000000000000 [ 1678.515605][T19687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1678.515616][T19687] R13: 00007f8065226038 R14: 00007f8065225fa0 R15: 00007fffde088e28 [ 1678.515651][T19687] [ 1678.787477][T19681] bond4 (unregistering): Released all slaves [ 1678.996924][T31975] bond3: (slave syz_tun): failed to get link speed/duplex [ 1679.014149][ T32] audit: type=1800 audit(1791616537.697:25): pid=19695 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.13724" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1824 res=0 errno=0 [ 1679.187237][T19696] syzkaller1: entered promiscuous mode [ 1679.187264][T19696] syzkaller1: entered allmulticast mode [ 1679.271430][T19706] FAULT_INJECTION: forcing a failure. [ 1679.271430][T19706] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1679.271468][T19706] CPU: 1 UID: 0 PID: 19706 Comm: syz.2.13725 Not tainted syzkaller #0 PREEMPT(full) [ 1679.271491][T19706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1679.271503][T19706] Call Trace: [ 1679.271513][T19706] [ 1679.271522][T19706] dump_stack_lvl+0xe8/0x150 [ 1679.271558][T19706] should_fail_ex+0x410/0x560 [ 1679.271588][T19706] _copy_from_user+0x2d/0xb0 [ 1679.271616][T19706] generic_map_update_batch+0x6b1/0xae0 [ 1679.271659][T19706] ? __pfx_generic_map_update_batch+0x10/0x10 [ 1679.271689][T19706] ? __fget_files+0x2a/0x420 [ 1679.271727][T19706] ? __pfx_generic_map_update_batch+0x10/0x10 [ 1679.271757][T19706] bpf_map_do_batch+0x391/0x630 [ 1679.271787][T19706] __sys_bpf+0xbe5/0xd90 [ 1679.271821][T19706] ? __pfx___sys_bpf+0x10/0x10 [ 1679.271855][T19706] ? __fget_files+0x2a/0x420 [ 1679.271905][T19706] ? rcu_is_watching+0x16/0xb0 [ 1679.271937][T19706] __x64_sys_bpf+0xba/0xd0 [ 1679.271962][T19706] do_syscall_64+0x166/0x520 [ 1679.271988][T19706] ? trace_irq_disable+0x3b/0x140 [ 1679.272008][T19706] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1679.272029][T19706] ? clear_bhb_loop+0x70/0xc0 [ 1679.272056][T19706] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1679.272077][T19706] RIP: 0033:0x7efd5519e1d9 [ 1679.272099][T19706] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1679.272117][T19706] RSP: 002b:00007efd56066028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1679.272141][T19706] RAX: ffffffffffffffda RBX: 00007efd55426090 RCX: 00007efd5519e1d9 [ 1679.272157][T19706] RDX: 0000000000000038 RSI: 0000200000000dc0 RDI: 000000000000001a [ 1679.272181][T19706] RBP: 00007efd56066090 R08: 0000000000000000 R09: 0000000000000000 [ 1679.272194][T19706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1679.272208][T19706] R13: 00007efd55426128 R14: 00007efd55426090 R15: 00007ffdcf4920b8 [ 1679.272243][T19706] [ 1679.272842][T19702] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13726'. [ 1679.409499][T10161] bond3: (slave syz_tun): failed to get link speed/duplex [ 1679.519503][T10159] bond3: (slave syz_tun): failed to get link speed/duplex [ 1679.612618][T19713] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13729'. [ 1679.626670][T31976] bond3: (slave syz_tun): failed to get link speed/duplex [ 1679.737121][T10160] bond3: (slave syz_tun): failed to get link speed/duplex [ 1679.833899][T19722] x_tables: unsorted entry at hook 3 [ 1679.847926][T10161] bond3: (slave syz_tun): failed to get link speed/duplex [ 1680.195556][T19734] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13739'. [ 1680.615674][T19732] bond7 (unregistering): Released all slaves [ 1680.750753][T19749] netlink: 20 bytes leftover after parsing attributes in process `syz.1.13744'. [ 1680.937847][T19754] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13745'. [ 1680.942584][T19754] netlink: 'syz.1.13745': attribute type 1 has an invalid length. [ 1680.947474][T19752] IPVS: Scheduler module ip_vs_sip not found [ 1681.082296][T19741] netlink: 260 bytes leftover after parsing attributes in process `syz.3.13740'. [ 1681.141052][T19754] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1681.392355][T19768] netlink: 80 bytes leftover after parsing attributes in process `syz.0.13751'. [ 1682.153456][T19774] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13752'. [ 1682.419582][T19792] bridge_slave_0: left allmulticast mode [ 1682.419616][T19792] bridge_slave_0: left promiscuous mode [ 1682.419880][T19792] bridge0: port 1(bridge_slave_0) entered disabled state [ 1682.679525][T19806] __nla_validate_parse: 5 callbacks suppressed [ 1682.679549][T19806] netlink: 40 bytes leftover after parsing attributes in process `syz.4.13764'. [ 1682.898213][T19815] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13767'. [ 1683.026725][T10159] net_ratelimit: 22 callbacks suppressed [ 1683.026750][T10159] bond3: (slave syz_tun): failed to get link speed/duplex [ 1683.144748][T10159] bond3: (slave syz_tun): failed to get link speed/duplex [ 1683.266488][T10159] bond3: (slave syz_tun): failed to get link speed/duplex [ 1683.374161][T19833] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1683.377824][T10159] bond3: (slave syz_tun): link status up again after 0 ms [ 1683.377854][T10159] bond3: (slave syz_tun): failed to get link speed/duplex [ 1683.452140][T19836] FAULT_INJECTION: forcing a failure. [ 1683.452140][T19836] name failslab, interval 1, probability 0, space 0, times 0 [ 1683.452176][T19836] CPU: 0 UID: 0 PID: 19836 Comm: syz.4.13776 Not tainted syzkaller #0 PREEMPT(full) [ 1683.452200][T19836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1683.452213][T19836] Call Trace: [ 1683.452222][T19836] [ 1683.452232][T19836] dump_stack_lvl+0xe8/0x150 [ 1683.452267][T19836] should_fail_ex+0x410/0x560 [ 1683.452302][T19836] should_failslab+0xa8/0x100 [ 1683.452328][T19836] ? alloc_empty_file+0x5b/0x1d0 [ 1683.452354][T19836] kmem_cache_alloc_noprof+0xa1/0x600 [ 1683.452376][T19836] ? stack_depot_save_flags+0x33/0x7f0 [ 1683.452402][T19836] ? alloc_empty_file+0x5b/0x1d0 [ 1683.452429][T19836] ? kmem_cache_alloc_noprof+0x156/0x600 [ 1683.452454][T19836] alloc_empty_file+0x5b/0x1d0 [ 1683.452481][T19836] path_openat+0xa2/0x1d60 [ 1683.452514][T19836] ? __lock_acquire+0x747/0x2de0 [ 1683.452547][T19836] do_file_open+0x23e/0x4a0 [ 1683.452577][T19836] ? __pfx_do_file_open+0x10/0x10 [ 1683.452625][T19836] ? _raw_spin_unlock+0x28/0x50 [ 1683.452647][T19836] ? alloc_fd+0x651/0x6c0 [ 1683.452687][T19836] do_sys_openat2+0x115/0x200 [ 1683.452717][T19836] ? __pfx_do_sys_openat2+0x10/0x10 [ 1683.452745][T19836] ? ksys_write+0x242/0x270 [ 1683.452768][T19836] ? __pfx_ksys_write+0x10/0x10 [ 1683.452791][T19836] __x64_sys_openat+0x138/0x170 [ 1683.452825][T19836] do_syscall_64+0x166/0x520 [ 1683.452861][T19836] ? trace_irq_disable+0x3b/0x140 [ 1683.452883][T19836] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1683.452904][T19836] ? clear_bhb_loop+0x70/0xc0 [ 1683.452929][T19836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1683.452949][T19836] RIP: 0033:0x7f575ef9e1d9 [ 1683.452974][T19836] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1683.452991][T19836] RSP: 002b:00007f575fe77028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1683.453015][T19836] RAX: ffffffffffffffda RBX: 00007f575f226090 RCX: 00007f575ef9e1d9 [ 1683.453030][T19836] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1683.453043][T19836] RBP: 00007f575fe77090 R08: 0000000000000000 R09: 0000000000000000 [ 1683.453055][T19836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1683.453067][T19836] R13: 00007f575f226128 R14: 00007f575f226090 R15: 00007ffc02aeb258 [ 1683.453101][T19836] [ 1683.486720][T10161] bond3: (slave syz_tun): failed to get link speed/duplex [ 1683.515871][T19840] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13778'. [ 1683.515903][T19840] netlink: 'syz.1.13778': attribute type 3 has an invalid length. [ 1683.524026][T19842] netlink: 20 bytes leftover after parsing attributes in process `syz.3.13781'. [ 1683.575636][T19844] netlink: 'syz.0.13780': attribute type 21 has an invalid length. [ 1683.588454][T19842] 8021q: VLANs not supported on vxcan0 [ 1683.597800][T10159] bond3: (slave syz_tun): failed to get link speed/duplex [ 1683.607643][T10159] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1683.608586][T10161] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1683.608620][T10161] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1683.608650][T10161] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1683.706835][ T13] bond3: (slave syz_tun): failed to get link speed/duplex [ 1683.823502][T10159] bond3: (slave syz_tun): failed to get link speed/duplex [ 1683.913729][T19855] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13786'. [ 1684.208834][T19868] xt_IDLETIMER: label is empty or not nul-terminated [ 1684.330288][T19873] netlink: 'syz.2.13790': attribute type 10 has an invalid length. [ 1684.335002][T19871] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13789'. [ 1685.257535][T19908] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1686.365029][T19939] Bluetooth: MGMT ver 1.23 [ 1686.473149][T19935] bond7 (unregistering): Released all slaves [ 1686.630218][T19951] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 1686.797709][T19957] netlink: 'syz.3.13818': attribute type 1 has an invalid length. [ 1686.797737][T19957] netlink: 92 bytes leftover after parsing attributes in process `syz.3.13818'. [ 1686.876162][T19961] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13819'. [ 1687.125536][T19970] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 1687.125916][T19970] syzkaller0: entered promiscuous mode [ 1687.130053][T19970] sit1: entered promiscuous mode [ 1687.130176][T19970] ip6_vti1: entered promiscuous mode [ 1687.130296][T19970] ipip0: entered promiscuous mode [ 1687.163027][T19970] bond3: entered promiscuous mode [ 1687.171377][T19970] vrf0: entered promiscuous mode [ 1687.171566][T19970] vrf1: entered promiscuous mode [ 1687.177358][T19970] erspan1: entered promiscuous mode [ 1687.184937][T19970] vxlan0: entered promiscuous mode [ 1687.185084][T19970] batadv2: entered promiscuous mode [ 1687.202372][T19970] bond4: entered promiscuous mode [ 1687.223544][T19970] bridge0: entered promiscuous mode [ 1687.248773][T19970] bridge4: entered promiscuous mode [ 1687.249021][T19970] batadv3: entered promiscuous mode [ 1687.250606][T19970] bridge5: entered promiscuous mode [ 1687.270628][T19970] bond5: entered promiscuous mode [ 1687.271426][T19970] veth4: entered promiscuous mode [ 1687.277608][T19970] veth5: entered promiscuous mode [ 1687.278341][T19970] bond6: entered promiscuous mode [ 1687.291489][T19970] syzkaller1: entered promiscuous mode [ 1687.411968][T19979] lo: entered promiscuous mode [ 1687.560357][T19979] tunl0: entered promiscuous mode [ 1687.602819][T19979] gre0: entered promiscuous mode [ 1687.631304][T19986] netlink: 'syz.0.13828': attribute type 7 has an invalid length. [ 1687.695665][T19979] gretap0: entered promiscuous mode [ 1687.852526][T19979] erspan0: entered promiscuous mode [ 1687.866999][T19979] ip_vti0: entered promiscuous mode [ 1687.875963][T19979] ip6_vti0: entered promiscuous mode [ 1687.885024][T19979] sit0: entered promiscuous mode [ 1687.894455][T19979] ip6tnl0: entered promiscuous mode [ 1687.902827][T19979] ip6gre0: entered promiscuous mode [ 1687.913620][T19979] syz_tun: entered promiscuous mode [ 1687.932992][T19979] ip6gretap0: entered promiscuous mode [ 1687.945980][T19979] bridge0: port 3(bond0) entered disabled state [ 1687.953360][T19979] bridge0: entered promiscuous mode [ 1687.954598][T19979] vcan0: entered promiscuous mode [ 1687.977416][T19979] nlmon0: entered promiscuous mode [ 1687.997788][T19979] batadv0: entered promiscuous mode [ 1688.005046][T19979] vxcan0: entered promiscuous mode [ 1688.028112][T19979] vxcan1: entered promiscuous mode [ 1688.047542][T19979] veth0: entered promiscuous mode [ 1688.170051][T19979] veth1: entered promiscuous mode [ 1688.191095][T19979] wg0: entered promiscuous mode [ 1688.208223][T19979] wg1: entered promiscuous mode [ 1688.229140][T19979] wg2: entered promiscuous mode [ 1688.473457][T19979] veth0_to_bridge: entered promiscuous mode [ 1688.498470][T19979] bridge_slave_0: entered promiscuous mode [ 1688.528289][T19979] veth1_to_bridge: entered promiscuous mode [ 1688.581039][T20004] netlink: 36 bytes leftover after parsing attributes in process `syz.1.13832'. [ 1688.582994][T19979] veth0_to_bond: entered promiscuous mode [ 1688.629237][T19979] veth1_to_bond: entered promiscuous mode [ 1688.690559][T19979] veth0_to_team: entered promiscuous mode [ 1688.733047][T19979] team_slave_0: entered promiscuous mode [ 1688.759407][T19979] veth1_to_team: entered promiscuous mode [ 1688.805398][T19979] team_slave_1: entered promiscuous mode [ 1688.850989][T19979] veth0_to_batadv: entered promiscuous mode [ 1688.921993][T19979] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1688.922058][T19979] batadv_slave_0: entered promiscuous mode [ 1688.949797][T19979] veth1_to_batadv: entered promiscuous mode [ 1689.003269][T19979] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1689.003332][T19979] batadv_slave_1: entered promiscuous mode [ 1689.072981][T19979] xfrm0: entered promiscuous mode [ 1689.128981][T19979] veth0_to_hsr: entered promiscuous mode [ 1689.227643][T19979] hsr0: entered promiscuous mode [ 1689.299326][T19979] veth1_virt_wifi: entered promiscuous mode [ 1689.369637][T19979] veth0_virt_wifi: entered promiscuous mode [ 1689.431856][T19979] virt_wifi0: entered promiscuous mode [ 1689.563538][T19979] vlan0: entered promiscuous mode [ 1689.566066][T19979] vlan1: entered promiscuous mode [ 1689.633312][T19979] macvlan0: entered promiscuous mode [ 1689.653423][T19979] macvlan1: entered promiscuous mode [ 1689.691732][T19979] ipvlan0: entered promiscuous mode [ 1689.713942][T19979] ipvlan1: entered promiscuous mode [ 1689.750983][T19979] macvtap0: entered promiscuous mode [ 1689.802367][T19979] veth1_macvtap: left allmulticast mode [ 1689.802403][T19979] macsec0: entered promiscuous mode [ 1689.828505][T19979] geneve0: entered promiscuous mode [ 1689.854925][T19979] geneve1: entered promiscuous mode [ 1689.946193][T19979] netdevsim netdevsim4 netdevsim1: entered promiscuous mode [ 1689.954984][T19979] netdevsim netdevsim4 netdevsim2: entered promiscuous mode [ 1689.977525][T19979] netdevsim netdevsim4 netdevsim3: entered promiscuous mode [ 1689.989915][T19979] mac80211_hwsim hwsim42 wlan0: entered promiscuous mode [ 1689.990114][T19979] mac80211_hwsim hwsim43 wlan1: entered promiscuous mode [ 1689.990879][T19979] bond1: entered promiscuous mode [ 1689.993117][T19979] bond2: entered promiscuous mode [ 1689.994150][T19979] macsec1: entered promiscuous mode [ 1690.003985][T19979] bond3: entered promiscuous mode [ 1690.007430][T19979] : entered promiscuous mode [ 1690.018442][T19979] bond4: entered promiscuous mode [ 1690.021107][T19979] vlan2: entered promiscuous mode [ 1690.021406][T19979] syztnl1: entered promiscuous mode [ 1690.021677][T19979] sit1: entered promiscuous mode [ 1690.049553][T19979] veth2: entered promiscuous mode [ 1690.049741][T19979] veth3: entered promiscuous mode [ 1690.061811][T19979] bond5: entered promiscuous mode [ 1690.063968][T19979] bond6: entered promiscuous mode [ 1690.070250][T19979] bridge1: entered promiscuous mode [ 1690.074726][T19979] bridge2: entered promiscuous mode [ 1690.080383][T19979] ip6tnl1: entered promiscuous mode [ 1690.080521][T19979] veth4: entered promiscuous mode [ 1690.080673][T19979] veth5: entered promiscuous mode [ 1690.085219][T19979] bridge3: entered promiscuous mode [ 1690.091990][T19979] bridge4: entered promiscuous mode [ 1690.095732][T19979] bridge5: entered promiscuous mode [ 1690.103315][T19979] bridge6: entered promiscuous mode [ 1690.103472][T19979] syzkaller0: entered promiscuous mode [ 1690.148297][T19983] syzkaller0: entered allmulticast mode [ 1690.158556][T19991] netlink: 48 bytes leftover after parsing attributes in process `syz.3.13829'. [ 1690.187333][T10159] net_ratelimit: 27 callbacks suppressed [ 1690.187356][T10159] bond3: (slave syz_tun): failed to get link speed/duplex [ 1690.187401][T10159] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1690.187430][T10159] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1690.433588][T20023] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13839'. [ 1690.541085][T20025] ip_tables: iptables: counters copy to user failed while replacing table [ 1694.460223][T20011] netlink: 260 bytes leftover after parsing attributes in process `syz.1.13835'. [ 1694.461785][T20021] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 1694.476859][T31975] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1694.476898][T31975] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1694.476948][T31975] bond3: (slave syz_tun): failed to get link speed/duplex [ 1694.477647][T31975] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1694.477675][T31975] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1694.477753][T31975] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1694.477778][T31975] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1694.587415][T10161] bond3: (slave syz_tun): failed to get link speed/duplex [ 1694.631810][T20049] netlink: 136 bytes leftover after parsing attributes in process `syz.2.13846'. [ 1694.699684][T31975] bond3: (slave syz_tun): failed to get link speed/duplex [ 1694.938554][T20046] bond4 (unregistering): Released all slaves [ 1694.950690][T20065] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13850'. [ 1695.013874][T20068] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13851'. [ 1695.039153][T31975] bond3: (slave syz_tun): failed to get link speed/duplex [ 1695.043300][T20070] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma? [ 1695.149180][T31975] bond3: (slave syz_tun): failed to get link speed/duplex [ 1695.267001][T31975] bond3: (slave syz_tun): failed to get link speed/duplex [ 1695.306119][T20081] batman_adv: batadv0: Adding interface: syzkaller0 [ 1695.306141][T20081] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (299) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1695.327111][T20081] batman_adv: batadv0: Interface activated: syzkaller0 [ 1695.383220][ T13] bond3: (slave syz_tun): failed to get link speed/duplex [ 1695.487331][T10160] bond3: (slave syz_tun): failed to get link speed/duplex [ 1695.488649][T20091] netlink: 'syz.3.13856': attribute type 10 has an invalid length. [ 1695.599255][T31976] bond3: (slave syz_tun): failed to get link speed/duplex [ 1695.717919][T31975] bond3: (slave syz_tun): failed to get link speed/duplex [ 1695.746210][T20100] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13858'. [ 1695.827758][T31976] bond3: (slave syz_tun): failed to get link speed/duplex [ 1695.886675][T20109] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1695.941530][T31976] bond3: (slave syz_tun): failed to get link speed/duplex [ 1696.014764][T20114] netlink: 'syz.1.13861': attribute type 4 has an invalid length. [ 1696.014793][T20114] netlink: 152 bytes leftover after parsing attributes in process `syz.1.13861'. [ 1696.021173][T20114] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1696.063081][T31976] bond3: (slave syz_tun): failed to get link speed/duplex [ 1696.167364][T31978] bond3: (slave syz_tun): failed to get link speed/duplex [ 1696.476067][T20128] FAULT_INJECTION: forcing a failure. [ 1696.476067][T20128] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1696.476102][T20128] CPU: 0 UID: 0 PID: 20128 Comm: syz.0.13867 Not tainted syzkaller #0 PREEMPT(full) [ 1696.476126][T20128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1696.476138][T20128] Call Trace: [ 1696.476149][T20128] [ 1696.476159][T20128] dump_stack_lvl+0xe8/0x150 [ 1696.476199][T20128] should_fail_ex+0x410/0x560 [ 1696.476239][T20128] prepare_alloc_pages+0x223/0x600 [ 1696.476275][T20128] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 1696.476311][T20128] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1696.476341][T20128] ? __pfx_policy_nodemask+0x10/0x10 [ 1696.476376][T20128] ? do_raw_spin_lock+0x12b/0x2f0 [ 1696.476416][T20128] alloc_pages_mpol+0x21e/0x390 [ 1696.476452][T20128] alloc_pages_noprof+0xb1/0x2b0 [ 1696.476484][T20128] __pmd_alloc+0x3a/0x5c0 [ 1696.476520][T20128] handle_mm_fault+0xe9d/0x3750 [ 1696.476563][T20128] ? handle_mm_fault+0xf1/0x3750 [ 1696.476615][T20128] ? __pfx_handle_mm_fault+0x10/0x10 [ 1696.476661][T20128] ? __lock_acquire+0x747/0x2de0 [ 1696.476689][T20128] ? lock_mm_and_find_vma+0xa7/0x340 [ 1696.476716][T20128] do_user_addr_fault+0x746/0x1340 [ 1696.476759][T20128] exc_page_fault+0x6a/0xc0 [ 1696.476792][T20128] asm_exc_page_fault+0x26/0x30 [ 1696.476814][T20128] RIP: 0010:rep_movs_alternative+0x30/0xa0 [ 1696.476837][T20128] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 3d 68 04 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 1696.476856][T20128] RSP: 0018:ffffc90006317bb8 EFLAGS: 00050246 [ 1696.476876][T20128] RAX: 00007ffffffff001 RBX: 0000000000000008 RCX: 0000000000000008 [ 1696.476891][T20128] RDX: 0000000000000001 RSI: 0000200000000740 RDI: ffffc90006317c20 [ 1696.476906][T20128] RBP: ffffc90006317cb0 R08: ffffc90006317c27 R09: 1ffff92000c62f84 [ 1696.476921][T20128] R10: dffffc0000000000 R11: fffff52000c62f85 R12: 00000000400448e1 [ 1696.476936][T20128] R13: dffffc0000000000 R14: ffffc90006317c20 R15: 0000200000000740 [ 1696.476973][T20128] _copy_from_user+0x7a/0xb0 [ 1696.477007][T20128] hci_dev_cmd+0xad/0x7c0 [ 1696.477063][T20128] ? __pfx_hci_dev_cmd+0x10/0x10 [ 1696.477093][T20128] ? capable+0x88/0xe0 [ 1696.477120][T20128] ? hci_sock_ioctl+0x5e5/0x940 [ 1696.477165][T20128] sock_do_ioctl+0x101/0x320 [ 1696.477199][T20128] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1696.477221][T20128] ? hook_file_ioctl+0x1f2/0x600 [ 1696.477270][T20128] sock_ioctl+0x57a/0x7e0 [ 1696.477299][T20128] ? __pfx_sock_ioctl+0x10/0x10 [ 1696.477322][T20128] ? __fget_files+0x2a/0x420 [ 1696.477353][T20128] ? __fget_files+0x3a2/0x420 [ 1696.477382][T20128] ? __fget_files+0x2a/0x420 [ 1696.477416][T20128] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1696.477449][T20128] ? __pfx_sock_ioctl+0x10/0x10 [ 1696.477473][T20128] __se_sys_ioctl+0xfc/0x170 [ 1696.477502][T20128] do_syscall_64+0x166/0x520 [ 1696.477527][T20128] ? trace_irq_disable+0x3b/0x140 [ 1696.477550][T20128] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1696.477571][T20128] ? clear_bhb_loop+0x70/0xc0 [ 1696.477598][T20128] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1696.477627][T20128] RIP: 0033:0x7f8064f9e1d9 [ 1696.477646][T20128] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1696.477660][T20128] RSP: 002b:00007f8065e04028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1696.477681][T20128] RAX: ffffffffffffffda RBX: 00007f8065225fa0 RCX: 00007f8064f9e1d9 [ 1696.477695][T20128] RDX: 0000200000000740 RSI: 00000000400448e1 RDI: 0000000000000004 [ 1696.477708][T20128] RBP: 00007f8065e04090 R08: 0000000000000000 R09: 0000000000000000 [ 1696.477722][T20128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1696.477733][T20128] R13: 00007f8065226038 R14: 00007f8065225fa0 R15: 00007fffde088e28 [ 1696.477770][T20128] [ 1696.773237][T20132] netlink: 'syz.1.13870': attribute type 4 has an invalid length. [ 1697.044475][T20139] netlink: 44 bytes leftover after parsing attributes in process `syz.0.13872'. [ 1697.134378][T20145] netlink: 324 bytes leftover after parsing attributes in process `syz.3.13871'. [ 1697.136465][T20138] lo speed is unknown, defaulting to 1000 [ 1697.143150][T20135] siw: device registration error -23 [ 1697.258423][T20150] netlink: 'syz.2.13876': attribute type 1 has an invalid length. [ 1697.349019][T20150] bond4: entered promiscuous mode [ 1697.349460][T20150] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1697.672596][T20176] netlink: 32 bytes leftover after parsing attributes in process `syz.3.13881'. [ 1697.920451][T20189] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13887'. [ 1697.950480][T20189] gre0: left promiscuous mode [ 1697.970176][T20189] dummy0: left promiscuous mode [ 1698.866126][T20214] netlink: 'syz.1.13896': attribute type 2 has an invalid length. [ 1698.932228][T20214] netlink: 'syz.1.13896': attribute type 10 has an invalid length. [ 1698.932285][T20214] dummy0: left promiscuous mode [ 1698.959433][T20214] team0: Port device dummy0 added [ 1699.707488][T20248] __nla_validate_parse: 5 callbacks suppressed [ 1699.707513][T20248] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13909'. [ 1699.774637][T20252] tipc: Started in network mode [ 1699.774699][T20252] tipc: Node identity ac14141d, cluster identity 4711 [ 1699.774970][T20252] tipc: New replicast peer: 255.255.255.255 [ 1699.796493][T20252] tipc: Enabled bearer , priority 10 [ 1699.799579][T20251] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13910'. [ 1699.990407][T20260] tipc: New replicast peer: 172.20.20.170 [ 1699.993727][T20260] tipc: Enabled bearer , priority 10 [ 1700.062227][T20260] syzkaller0: entered promiscuous mode [ 1700.062253][T20260] syzkaller0: entered allmulticast mode [ 1700.105671][T20260] netlink: 20 bytes leftover after parsing attributes in process `syz.2.13912'. [ 1700.438463][T31975] net_ratelimit: 44 callbacks suppressed [ 1700.438489][T31975] bond3: (slave syz_tun): failed to get link speed/duplex [ 1700.455712][T20281] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13919'. [ 1700.547826][T31975] bond3: (slave syz_tun): failed to get link speed/duplex [ 1700.605280][T20281] team0: Port device dummy0 removed [ 1700.605910][T20281] bridge4: port 1(dummy0) entered blocking state [ 1700.606025][T20281] bridge4: port 1(dummy0) entered disabled state [ 1700.606165][T20281] dummy0: entered allmulticast mode [ 1700.619592][T20281] dummy0: entered promiscuous mode [ 1700.637127][T20285] netlink: 'syz.1.13919': attribute type 10 has an invalid length. [ 1700.637151][T20285] netlink: 40 bytes leftover after parsing attributes in process `syz.1.13919'. [ 1700.644974][T20285] dummy0: left allmulticast mode [ 1700.650690][T20285] bridge4: port 1(dummy0) entered disabled state [ 1700.727012][T10158] bond3: (slave syz_tun): failed to get link speed/duplex [ 1700.782278][T20291] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13924'. [ 1700.786675][ T334] tipc: Node number set to 2886997021 [ 1700.808227][T20288] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13922'. [ 1700.841179][T31975] bond3: (slave syz_tun): failed to get link speed/duplex [ 1700.911719][T20293] FAULT_INJECTION: forcing a failure. [ 1700.911719][T20293] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1700.911763][T20293] CPU: 1 UID: 0 PID: 20293 Comm: syz.4.13923 Not tainted syzkaller #0 PREEMPT(full) [ 1700.911786][T20293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1700.911799][T20293] Call Trace: [ 1700.911808][T20293] [ 1700.911818][T20293] dump_stack_lvl+0xe8/0x150 [ 1700.911854][T20293] should_fail_ex+0x410/0x560 [ 1700.911887][T20293] _copy_from_iter+0x1d3/0x1660 [ 1700.911924][T20293] ? _copy_from_iter+0x21b/0x1660 [ 1700.911949][T20293] ? sock_alloc_send_pskb+0xb87/0xc90 [ 1700.911974][T20293] ? __pfx__copy_from_iter+0x10/0x10 [ 1700.912005][T20293] ? __pfx__copy_from_iter+0x10/0x10 [ 1700.912043][T20293] copy_page_from_iter+0x219/0x2d0 [ 1700.912075][T20293] skb_copy_datagram_from_iter+0x2f4/0x720 [ 1700.912113][T20293] tun_get_user+0x14fd/0x4450 [ 1700.912165][T20293] ? aa_file_perm+0x18b/0x15f0 [ 1700.912201][T20293] ? aa_file_perm+0x4ed/0x15f0 [ 1700.912230][T20293] ? __pfx_tun_get_user+0x10/0x10 [ 1700.912257][T20293] ? __lock_acquire+0x747/0x2de0 [ 1700.912283][T20293] ? kstrtoull+0x137/0x1d0 [ 1700.912316][T20293] ? ref_tracker_alloc+0x172/0x530 [ 1700.912343][T20293] ? lock_acquire+0x115/0x350 [ 1700.912366][T20293] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1700.912396][T20293] ? lock_acquire+0x115/0x350 [ 1700.912418][T20293] ? tun_get+0x1c/0x2f0 [ 1700.912449][T20293] ? tun_get+0x1c/0x2f0 [ 1700.912473][T20293] ? tun_get+0x1c/0x2f0 [ 1700.912504][T20293] tun_chr_write_iter+0x113/0x200 [ 1700.912532][T20293] vfs_write+0x612/0xba0 [ 1700.912564][T20293] ? __pfx_vfs_write+0x10/0x10 [ 1700.912597][T20293] ? __fget_files+0x2a/0x420 [ 1700.912637][T20293] ksys_write+0x150/0x270 [ 1700.912660][T20293] ? __pfx_ksys_write+0x10/0x10 [ 1700.912695][T20293] do_syscall_64+0x166/0x520 [ 1700.912720][T20293] ? trace_irq_disable+0x3b/0x140 [ 1700.912750][T20293] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1700.912771][T20293] ? clear_bhb_loop+0x70/0xc0 [ 1700.912798][T20293] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1700.912817][T20293] RIP: 0033:0x7f575ef5ea0e [ 1700.912838][T20293] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1700.912855][T20293] RSP: 002b:00007f575fe97fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1700.912878][T20293] RAX: ffffffffffffffda RBX: 00007f575fe986c0 RCX: 00007f575ef5ea0e [ 1700.912894][T20293] RDX: 000000000000fdef RSI: 00002000000018c0 RDI: 00000000000000c8 [ 1700.912907][T20293] RBP: 00007f575fe98090 R08: 0000000000000000 R09: 0000000000000000 [ 1700.912920][T20293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1700.912933][T20293] R13: 00007f575f226038 R14: 00007f575f225fa0 R15: 00007ffc02aeb258 [ 1700.912969][T20293] [ 1700.956916][T31976] bond3: (slave syz_tun): failed to get link speed/duplex [ 1701.077887][T10158] bond3: (slave syz_tun): failed to get link speed/duplex [ 1701.090800][T20301] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13926'. [ 1701.124463][T20301] netlink: 88 bytes leftover after parsing attributes in process `syz.2.13926'. [ 1701.126956][ T334] tipc: Node number set to 732853312 [ 1701.179389][T20301] netlink: 80 bytes leftover after parsing attributes in process `syz.2.13926'. [ 1701.186937][T31976] bond3: (slave syz_tun): failed to get link speed/duplex [ 1701.287909][T31975] bond3: (slave syz_tun): failed to get link speed/duplex [ 1701.330005][T20308] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 1701.398036][T31975] bond3: (slave syz_tun): failed to get link speed/duplex [ 1701.734653][T20330] block nbd0: reconnected socket [ 1701.789435][T20330] bridge7: entered promiscuous mode [ 1701.806237][T10158] bridge_slave_1: left promiscuous mode [ 1701.812334][T10158] bridge0: port 2(bridge_slave_1) entered disabled state [ 1701.834552][T10158] bridge_slave_0: left allmulticast mode [ 1701.834584][T10158] bridge_slave_0: left promiscuous mode [ 1701.834816][T10158] bridge0: port 1(bridge_slave_0) entered disabled state [ 1701.955946][T10158] dummy0: left allmulticast mode [ 1701.955981][T10158] dummy0: left promiscuous mode [ 1701.956209][T10158] bridge16: port 1(dummy0) entered disabled state [ 1702.410732][T10158] bond2 (unregistering): (slave bridge5): Releasing backup interface [ 1702.410764][T10158] bridge5 (unregistering): left promiscuous mode [ 1702.464231][T20349] netlink: 'syz.1.13945': attribute type 4 has an invalid length. [ 1702.481795][T15837] block nbd0: Receive control failed (result -32) [ 1702.593805][T10158] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1702.608638][T10158] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1702.609992][T10158] bond0 (unregistering): Released all slaves [ 1702.614981][T10158] bond1 (unregistering): Released all slaves [ 1702.632975][T10158] bond2 (unregistering): Released all slaves [ 1702.647906][T10158] bond3 (unregistering): Released all slaves [ 1702.660746][T10158] bond4 (unregistering): Released all slaves [ 1702.981079][T20358] syzkaller0: entered promiscuous mode [ 1702.981105][T20358] syzkaller0: entered allmulticast mode [ 1703.234924][T10158] tipc: Left network mode [ 1703.471170][T20379] ip6gre2: entered promiscuous mode [ 1703.471197][T20379] ip6gre2: entered allmulticast mode [ 1703.559471][T20386] bridge_slave_0: left allmulticast mode [ 1703.559503][T20386] bridge_slave_0: left promiscuous mode [ 1703.559745][T20386] bridge0: port 1(bridge_slave_0) entered disabled state [ 1703.623648][T31975] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1703.623854][T31975] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1703.646669][T29768] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1704.028846][T10158] batman_adv: batadv0: Interface deactivated: vlan2 [ 1704.028874][T10158] batman_adv: batadv0: Removing interface: vlan2 [ 1704.084870][T10158] hsr_slave_0: left promiscuous mode [ 1704.085683][T10158] hsr_slave_1: left promiscuous mode [ 1704.114911][T10158] veth1_macvtap: left allmulticast mode [ 1704.114943][T10158] veth1_macvtap: left promiscuous mode [ 1704.114969][T10158] veth0_macvtap: left promiscuous mode [ 1704.115081][T10158] veth1_vlan: left promiscuous mode [ 1704.115148][T10158] veth0_vlan: left promiscuous mode [ 1704.344096][T29782] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1704.418111][T29782] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1704.941533][T10158] team0 (unregistering): Port device team_slave_1 removed [ 1704.962460][T10158] team0 (unregistering): Port device team_slave_0 removed [ 1705.218726][T20408] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 1705.386269][T20432] __nla_validate_parse: 8 callbacks suppressed [ 1705.402639][T20432] netlink: 40 bytes leftover after parsing attributes in process `syz.1.13974'. [ 1705.462657][T20439] net_ratelimit: 18 callbacks suppressed [ 1705.462674][T20439] openvswitch: netlink: Missing key (keys=c0, expected=480) [ 1705.513476][T20437] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1705.556217][T10159] bond3: (slave syz_tun): failed to get link speed/duplex [ 1705.677181][T10160] bond3: (slave syz_tun): failed to get link speed/duplex [ 1705.720343][T20441] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1705.760646][T20441] netlink: 64 bytes leftover after parsing attributes in process `syz.2.13975'. [ 1705.787780][T10160] bond3: (slave syz_tun): failed to get link speed/duplex [ 1705.813095][T10158] IPVS: stop unused estimator thread 0... [ 1705.896516][T10159] bond3: (slave syz_tun): failed to get link speed/duplex [ 1706.006587][T10158] bond3: (slave syz_tun): failed to get link speed/duplex [ 1706.097148][T20449] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13977'. [ 1706.119147][T31976] bond3: (slave syz_tun): failed to get link speed/duplex [ 1706.226562][T10159] bond3: (slave syz_tun): failed to get link speed/duplex [ 1706.368282][T20452] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13978'. [ 1706.397429][T20452] ip6tnl2: entered allmulticast mode [ 1706.482001][T20460] batman_adv: batadv0: Adding interface: syzkaller0 [ 1706.482023][T20460] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1706.482054][T20460] batman_adv: batadv0: Interface activated: syzkaller0 [ 1707.081845][T20451] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 1707.107273][T20482] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1707.112920][T20481] netlink: 'syz.0.13985': attribute type 7 has an invalid length. [ 1707.340667][T20451] batman_adv: batadv0: Removing interface: syzkaller0 [ 1707.376863][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1707.548378][T20498] netlink: 16 bytes leftover after parsing attributes in process `syz.2.13989'. [ 1707.824823][T20497] netlink: 'syz.3.13990': attribute type 1 has an invalid length. [ 1707.869675][T20497] bond4: entered promiscuous mode [ 1707.870555][T20497] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1707.910034][T20508] netlink: 64 bytes leftover after parsing attributes in process `syz.1.13993'. [ 1707.999071][T20497] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1708.005573][T20515] netlink: 16 bytes leftover after parsing attributes in process `syz.4.13995'. [ 1708.031224][T20519] netlink: 'syz.0.13997': attribute type 1 has an invalid length. [ 1708.031768][T20497] bond4: (slave bond5): making interface the new active one [ 1708.031824][T20497] bond5: entered promiscuous mode [ 1708.034096][T20497] bond4: (slave bond5): Enslaving as an active interface with an up link [ 1708.186241][T20527] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13998'. [ 1708.273666][T20521] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1708.284700][T20525] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13997'. [ 1708.286263][T20521] bond7: (slave bond8): making interface the new active one [ 1708.287039][T20521] bond7: (slave bond8): Enslaving as an active interface with an up link [ 1708.294696][T20527] batadv1: entered promiscuous mode [ 1708.294716][T20527] batadv1: entered allmulticast mode [ 1708.360822][T20519] bond7: (slave gretap1): Enslaving as a backup interface with an up link [ 1708.449860][T20519] lo speed is unknown, defaulting to 1000 [ 1708.660008][T20539] netlink: 'syz.1.14002': attribute type 7 has an invalid length. [ 1708.849662][T20543] netlink: 'syz.3.14006': attribute type 1 has an invalid length. [ 1708.991647][T20547] bond6: (slave geneve3): making interface the new active one [ 1709.012107][T20547] bond6: (slave geneve3): Enslaving as an active interface with an up link [ 1709.042955][T20543] netlink: 28 bytes leftover after parsing attributes in process `syz.3.14006'. [ 1709.126903][T20543] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1709.147631][T10159] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1709.148229][T10159] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1709.148267][T10159] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1709.148329][T10159] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1709.402411][T10160] bond3: (slave syz_tun): link status definitely up, 1024 Mbps full duplex [ 1709.402474][T10160] bond3: (slave syz_tun): speed changed to 0 on port 1 [ 1709.433518][T10160] bond3: active interface up! [ 1709.596183][T20567] bridge0: port 2(bridge_slave_0) entered blocking state [ 1709.604153][T20567] bridge0: port 2(bridge_slave_0) entered disabled state [ 1709.604342][T20567] bridge_slave_0: entered allmulticast mode [ 1709.659798][T20567] bridge_slave_0: left allmulticast mode [ 1709.660822][T20567] bridge0: port 2(bridge_slave_0) entered disabled state [ 1709.901317][T20577] netlink: 'syz.0.14018': attribute type 7 has an invalid length. [ 1710.027979][T20586] netlink: 'syz.1.14022': attribute type 21 has an invalid length. [ 1710.123599][T20586] bridge_slave_1: left promiscuous mode [ 1710.123863][T20586] bridge0: port 2(bridge_slave_1) entered disabled state [ 1710.415338][T20605] __nla_validate_parse: 7 callbacks suppressed [ 1710.415363][T20605] netlink: 20 bytes leftover after parsing attributes in process `syz.3.14028'. [ 1710.433763][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1710.512802][T20611] netlink: 60 bytes leftover after parsing attributes in process `syz.2.14029'. [ 1710.513713][T20605] [ 1710.518988][T20614] net_ratelimit: 19 callbacks suppressed [ 1710.519007][T20614] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1710.539619][T20605] ====================================================== [ 1710.546694][T20605] WARNING: possible circular locking dependency detected [ 1710.553824][T20605] syzkaller #0 Not tainted [ 1710.558266][T20605] ------------------------------------------------------ [ 1710.565369][T20605] syz.3.14028/20605 is trying to acquire lock: [ 1710.571549][T20605] ffff88802c57ad18 (set->srcu){.+.+}-{0:0}, at: __synchronize_srcu+0xb5/0x2f0 [ 1710.580622][T20605] [ 1710.580622][T20605] but task is already holding lock: [ 1710.588011][T20605] ffff888029c962a8 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1af/0x480 [ 1710.597543][T20605] [ 1710.597543][T20605] which lock already depends on the new lock. [ 1710.597543][T20605] [ 1710.607956][T20605] [ 1710.607956][T20605] the existing dependency chain (in reverse order) is: [ 1710.617069][T20605] [ 1710.617069][T20605] -> #6 (&q->elevator_lock){+.+.}-{4:4}: [ 1710.624999][T20605] __mutex_lock+0x19d/0x1550 [ 1710.630224][T20605] elevator_change+0x1af/0x480 [ 1710.635532][T20605] elevator_set_none+0xb5/0x140 [ 1710.640929][T20605] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 1710.647376][T20605] nbd_start_device+0x189/0xb30 [ 1710.652827][T20605] nbd_genl_connect+0x167d/0x1cd0 [ 1710.658382][T20605] genl_family_rcv_msg_doit+0x233/0x340 [ 1710.664550][T20605] genl_rcv_msg+0x614/0x7a0 [ 1710.669579][T20605] netlink_rcv_skb+0x226/0x4a0 [ 1710.674897][T20605] genl_rcv+0x28/0x40 [ 1710.679489][T20605] netlink_unicast+0x7bd/0x940 [ 1710.684801][T20605] netlink_sendmsg+0x813/0xb40 [ 1710.690095][T20605] sock_sendmsg_nosec+0x14e/0x190 [ 1710.695664][T20605] ____sys_sendmsg+0x54e/0x850 [ 1710.701136][T20605] ___sys_sendmsg+0x2a5/0x360 [ 1710.706339][T20605] __x64_sys_sendmsg+0x1b1/0x290 [ 1710.711798][T20605] do_syscall_64+0x166/0x520 [ 1710.716915][T20605] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1710.723330][T20605] [ 1710.723330][T20605] -> #5 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 1710.731978][T20605] blk_alloc_queue+0x544/0x690 [ 1710.737271][T20605] __blk_mq_alloc_disk+0x194/0x390 [ 1710.742911][T20605] nbd_dev_add+0x494/0xb60 [ 1710.747855][T20605] nbd_init+0x168/0x1f0 [ 1710.752616][T20605] do_one_initcall+0x250/0x870 [ 1710.757911][T20605] do_initcall_level+0x10a/0x1a0 [ 1710.763438][T20605] do_initcalls+0x59/0xa0 [ 1710.768294][T20605] kernel_init_freeable+0x29d/0x3e0 [ 1710.774017][T20605] kernel_init+0x22/0x1d0 [ 1710.778877][T20605] ret_from_fork+0x514/0xb70 [ 1710.784019][T20605] ret_from_fork_asm+0x1a/0x30 [ 1710.789310][T20605] [ 1710.789310][T20605] -> #4 (fs_reclaim){+.+.}-{0:0}: [ 1710.796526][T20605] fs_reclaim_acquire+0x71/0x100 [ 1710.802003][T20605] __kmalloc_cache_node_noprof+0x66/0x620 [ 1710.808278][T20605] create_worker+0x112/0x7c0 [ 1710.813409][T20605] workqueue_prepare_cpu+0xe4/0x170 [ 1710.819134][T20605] cpuhp_invoke_callback+0x434/0x810 [ 1710.824952][T20605] _cpu_up+0x2ce/0x5b0 [ 1710.829544][T20605] cpu_up+0x1d2/0x220 [ 1710.834054][T20605] cpuhp_bringup_mask+0xb2/0x1a0 [ 1710.839604][T20605] cpuhp_bringup_cpus_parallel+0x109/0x120 [ 1710.845941][T20605] bringup_nonboot_cpus+0x17/0x30 [ 1710.851496][T20605] smp_init+0x32/0x110 [ 1710.856174][T20605] kernel_init_freeable+0x27f/0x3e0 [ 1710.861899][T20605] kernel_init+0x22/0x1d0 [ 1710.866757][T20605] ret_from_fork+0x514/0xb70 [ 1710.871879][T20605] ret_from_fork_asm+0x1a/0x30 [ 1710.877278][T20605] [ 1710.877278][T20605] -> #3 (cpu_hotplug_lock){++++}-{0:0}: [ 1710.885014][T20605] cpus_read_lock+0x42/0x160 [ 1710.890129][T20605] static_key_slow_inc+0x12/0x30 [ 1710.895658][T20605] nbd_genl_reconnect_sock_cb+0x69a/0xbb0 [ 1710.901909][T20605] nbd_genl_foreach_sock+0x265/0x450 [ 1710.907723][T20605] nbd_genl_reconfigure+0xbbb/0x1040 [ 1710.913534][T20605] genl_family_rcv_msg_doit+0x233/0x340 [ 1710.919780][T20605] genl_rcv_msg+0x614/0x7a0 [ 1710.924900][T20605] netlink_rcv_skb+0x226/0x4a0 [ 1710.930193][T20605] genl_rcv+0x28/0x40 [ 1710.934698][T20605] netlink_unicast+0x7bd/0x940 [ 1710.939987][T20605] netlink_sendmsg+0x813/0xb40 [ 1710.945275][T20605] sock_sendmsg_nosec+0x14e/0x190 [ 1710.950920][T20605] ____sys_sendmsg+0x54e/0x850 [ 1710.956209][T20605] ___sys_sendmsg+0x2a5/0x360 [ 1710.961407][T20605] __x64_sys_sendmsg+0x1b1/0x290 [ 1710.966955][T20605] do_syscall_64+0x166/0x520 [ 1710.972072][T20605] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1710.978579][T20605] [ 1710.978579][T20605] -> #2 (&nsock->tx_lock){+.+.}-{4:4}: [ 1710.986230][T20605] __mutex_lock+0x19d/0x1550 [ 1710.991375][T20605] nbd_queue_rq+0x373/0xff0 [ 1710.996406][T20605] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1711.002483][T20605] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1711.009388][T20605] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1711.015894][T20605] blk_mq_run_work_fn+0x16c/0x300 [ 1711.021458][T20605] process_scheduled_works+0xc3d/0x1630 [ 1711.027703][T20605] worker_thread+0xa47/0xfb0 [ 1711.032821][T20605] kthread+0x38b/0x480 [ 1711.037414][T20605] ret_from_fork+0x514/0xb70 [ 1711.042567][T20605] ret_from_fork_asm+0x1a/0x30 [ 1711.047878][T20605] [ 1711.047878][T20605] -> #1 (&cmd->lock){+.+.}-{4:4}: [ 1711.055102][T20605] __mutex_lock+0x19d/0x1550 [ 1711.060228][T20605] nbd_queue_rq+0xc1/0xff0 [ 1711.065606][T20605] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1711.071682][T20605] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1711.078537][T20605] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1711.085055][T20605] blk_mq_run_work_fn+0x16c/0x300 [ 1711.090629][T20605] process_scheduled_works+0xc3d/0x1630 [ 1711.096787][T20605] worker_thread+0xa47/0xfb0 [ 1711.101906][T20605] kthread+0x38b/0x480 [ 1711.106580][T20605] ret_from_fork+0x514/0xb70 [ 1711.111702][T20605] ret_from_fork_asm+0x1a/0x30 [ 1711.116992][T20605] [ 1711.116992][T20605] -> #0 (set->srcu){.+.+}-{0:0}: [ 1711.124117][T20605] __lock_acquire+0x164c/0x2de0 [ 1711.129488][T20605] lock_sync+0xb3/0x130 [ 1711.134168][T20605] __synchronize_srcu+0xc9/0x2f0 [ 1711.139623][T20605] elevator_switch+0x1e8/0x7b0 [ 1711.144911][T20605] elevator_change+0x2fa/0x480 [ 1711.150203][T20605] elevator_set_default+0x375/0x440 [ 1711.155925][T20605] blk_register_queue+0x3f3/0x4e0 [ 1711.161723][T20605] __add_disk+0x6b8/0xdb0 [ 1711.166679][T20605] add_disk_fwnode+0x100/0x3a0 [ 1711.171998][T20605] nbd_dev_add+0x733/0xb60 [ 1711.176950][T20605] nbd_genl_connect+0x96c/0x1cd0 [ 1711.182424][T20605] genl_family_rcv_msg_doit+0x233/0x340 [ 1711.188548][T20605] genl_rcv_msg+0x614/0x7a0 [ 1711.193592][T20605] netlink_rcv_skb+0x226/0x4a0 [ 1711.198893][T20605] genl_rcv+0x28/0x40 [ 1711.203395][T20605] netlink_unicast+0x7bd/0x940 [ 1711.208680][T20605] netlink_sendmsg+0x813/0xb40 [ 1711.213970][T20605] sock_sendmsg_nosec+0x14e/0x190 [ 1711.219618][T20605] ____sys_sendmsg+0x54e/0x850 [ 1711.224903][T20605] ___sys_sendmsg+0x2a5/0x360 [ 1711.230101][T20605] __x64_sys_sendmsg+0x1b1/0x290 [ 1711.235560][T20605] do_syscall_64+0x166/0x520 [ 1711.240673][T20605] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1711.247095][T20605] [ 1711.247095][T20605] other info that might help us debug this: [ 1711.247095][T20605] [ 1711.257319][T20605] Chain exists of: [ 1711.257319][T20605] set->srcu --> &q->q_usage_counter(io)#50 --> &q->elevator_lock [ 1711.257319][T20605] [ 1711.270973][T20605] Possible unsafe locking scenario: [ 1711.270973][T20605] [ 1711.278493][T20605] CPU0 CPU1 [ 1711.283873][T20605] ---- ---- [ 1711.289283][T20605] lock(&q->elevator_lock); [ 1711.293900][T20605] lock(&q->q_usage_counter(io)#50); [ 1711.301804][T20605] lock(&q->elevator_lock); [ 1711.308916][T20605] sync(set->srcu); [ 1711.312842][T20605] [ 1711.312842][T20605] *** DEADLOCK *** [ 1711.312842][T20605] [ 1711.320988][T20605] locks held by syz.3.14028/20605: 6, last CPU#1: [ 1711.327490][T20605] #0: ffffffff912b9b28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1711.335717][T20605] #1: ffffffff912b9960 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1711.344683][T20605] #2: ffff8880347ac1c0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: add_disk_fwnode+0xea/0x3a0 [ 1711.355137][T20605] #3: ffff888029c96330 (&q->sysfs_lock){+.+.}-{4:4}, at: blk_register_queue+0x10d/0x4e0 [ 1711.365001][T20605] #4: ffff888029c95db8 (&q->q_usage_counter(queue)#54){+.+.}-{0:0}, at: elevator_change+0x194/0x480 [ 1711.375889][T20605] #5: ffff888029c962a8 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1af/0x480 [ 1711.385743][T20605] [ 1711.385743][T20605] stack backtrace: [ 1711.391652][T20605] CPU: 1 UID: 0 PID: 20605 Comm: syz.3.14028 Not tainted syzkaller #0 PREEMPT(full) [ 1711.401126][T20605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1711.411186][T20605] Call Trace: [ 1711.414482][T20605] [ 1711.417422][T20605] dump_stack_lvl+0xe8/0x150 [ 1711.422030][T20605] print_circular_bug+0x2e2/0x300 [ 1711.427064][T20605] check_noncircular+0x12f/0x150 [ 1711.432011][T20605] __lock_acquire+0x164c/0x2de0 [ 1711.436868][T20605] ? lockdep_unlock+0x5c/0xd0 [ 1711.441549][T20605] ? __lock_acquire+0x1511/0x2de0 [ 1711.446584][T20605] lock_sync+0xb3/0x130 [ 1711.450747][T20605] ? __synchronize_srcu+0xb5/0x2f0 [ 1711.456136][T20605] ? __synchronize_srcu+0xb5/0x2f0 [ 1711.461253][T20605] __synchronize_srcu+0xc9/0x2f0 [ 1711.466296][T20605] ? __pfx___synchronize_srcu+0x10/0x10 [ 1711.471856][T20605] ? do_raw_spin_lock+0x12b/0x2f0 [ 1711.476893][T20605] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1711.482707][T20605] ? ktime_get_mono_fast_ns+0x2d2/0x2f0 [ 1711.488261][T20605] ? synchronize_srcu+0x20a/0x260 [ 1711.493408][T20605] elevator_switch+0x1e8/0x7b0 [ 1711.498179][T20605] ? blk_mq_cancel_work_sync+0xa5/0xe0 [ 1711.503736][T20605] elevator_change+0x2fa/0x480 [ 1711.508506][T20605] elevator_set_default+0x375/0x440 [ 1711.513889][T20605] ? __pfx_elevator_set_default+0x10/0x10 [ 1711.519705][T20605] ? disk_register_independent_access_ranges+0x2d8/0x380 [ 1711.526797][T20605] ? blk_crypto_sysfs_register+0x11c/0x170 [ 1711.532662][T20605] blk_register_queue+0x3f3/0x4e0 [ 1711.537700][T20605] __add_disk+0x6b8/0xdb0 [ 1711.542048][T20605] add_disk_fwnode+0x100/0x3a0 [ 1711.546834][T20605] nbd_dev_add+0x733/0xb60 [ 1711.551264][T20605] ? __pfx_nbd_dev_add+0x10/0x10 [ 1711.556213][T20605] ? __pfx_nbd_genl_foreach_sock+0x10/0x10 [ 1711.562043][T20605] ? bpf_lsm_capable+0x9/0x20 [ 1711.566726][T20605] ? security_capable+0x7e/0x2c0 [ 1711.571679][T20605] ? radix_tree_lookup+0x25c/0x290 [ 1711.576797][T20605] nbd_genl_connect+0x96c/0x1cd0 [ 1711.581787][T20605] ? __pfx_nbd_genl_connect+0x10/0x10 [ 1711.587168][T20605] ? rcu_is_watching+0x16/0xb0 [ 1711.591939][T20605] ? trace_kmalloc+0x2a/0xf0 [ 1711.596539][T20605] ? __kmalloc_noprof+0x38c/0x720 [ 1711.601574][T20605] ? __nla_parse+0x40/0x60 [ 1711.606005][T20605] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 1711.612334][T20605] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 1711.618667][T20605] genl_family_rcv_msg_doit+0x233/0x340 [ 1711.624307][T20605] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1711.630378][T20605] ? __lock_acquire+0x747/0x2de0 [ 1711.635359][T20605] genl_rcv_msg+0x614/0x7a0 [ 1711.639875][T20605] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1711.644900][T20605] ? __pfx_nbd_genl_connect+0x10/0x10 [ 1711.650281][T20605] netlink_rcv_skb+0x226/0x4a0 [ 1711.655055][T20605] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1711.660083][T20605] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1711.665380][T20605] ? down_read+0x2be/0x330 [ 1711.669823][T20605] genl_rcv+0x28/0x40 [ 1711.673805][T20605] netlink_unicast+0x7bd/0x940 [ 1711.678587][T20605] netlink_sendmsg+0x813/0xb40 [ 1711.683362][T20605] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1711.688746][T20605] ? apparmor_socket_sendmsg+0x98/0x360 [ 1711.694301][T20605] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1711.699603][T20605] sock_sendmsg_nosec+0x14e/0x190 [ 1711.704638][T20605] ____sys_sendmsg+0x54e/0x850 [ 1711.709408][T20605] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1711.714703][T20605] ? import_iovec+0x73/0xa0 [ 1711.719222][T20605] ___sys_sendmsg+0x2a5/0x360 [ 1711.723899][T20605] ? __lock_acquire+0x747/0x2de0 [ 1711.728841][T20605] ? __pfx____sys_sendmsg+0x10/0x10 [ 1711.734044][T20605] ? futex_wait+0x2a2/0x390 [ 1711.738563][T20605] ? __fget_files+0x2a/0x420 [ 1711.743191][T20605] ? __fget_files+0x3a2/0x420 [ 1711.747881][T20605] __x64_sys_sendmsg+0x1b1/0x290 [ 1711.752824][T20605] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1711.758294][T20605] do_syscall_64+0x166/0x520 [ 1711.762912][T20605] ? trace_irq_disable+0x3b/0x140 [ 1711.767948][T20605] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1711.774021][T20605] ? clear_bhb_loop+0x70/0xc0 [ 1711.778722][T20605] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1711.784617][T20605] RIP: 0033:0x7f6a2b19e1d9 [ 1711.789035][T20605] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1711.808715][T20605] RSP: 002b:00007f6a2bf8c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1711.817141][T20605] RAX: ffffffffffffffda RBX: 00007f6a2b425fa0 RCX: 00007f6a2b19e1d9 [ 1711.825115][T20605] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000008 [ 1711.833105][T20605] RBP: 00007f6a2b235888 R08: 0000000000000000 R09: 0000000000000000 [ 1711.841077][T20605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1711.849054][T20605] R13: 00007f6a2b426038 R14: 00007f6a2b425fa0 R15: 00007ffc23da78d8 [ 1711.857037][T20605] [ 1711.876891][T20615] xt_IDLETIMER: label is empty or not nul-terminated [ 1711.921168][T20620] bridge0: port 1(bridge_slave_0) entered blocking state [ 1711.921245][T20620] bridge0: port 1(bridge_slave_0) entered disabled state [ 1711.921382][T20620] bridge_slave_0: entered allmulticast mode [ 1711.932029][T20620] bridge_slave_0: left allmulticast mode [ 1711.932187][T20620] bridge0: port 1(bridge_slave_0) entered disabled state [ 1712.037575][T20396] udevd[20396]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1715.536973][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!