last executing test programs: 29.655187694s ago: executing program 3 (id=2764): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xa}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$IPVS_CMD_NEW_SERVICE(r1, 0x0, 0x2004c085) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x2, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r0, 0x5, 0x26, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0xc00, 0x0, 0x0, 0x2}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xf3f, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x14, 0x2, [@TCA_BASIC_EMATCHES={0x10, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000001100000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) 29.457911147s ago: executing program 3 (id=2766): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001c00010469bd700000dcdf2507000000", @ANYRES32=r1, @ANYBLOB="400ec4060a000200aaaaaaaaaa1c00"], 0x28}, 0x1, 0x0, 0x0, 0xc841}, 0x840) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x22, &(0x7f0000000040)={@local, @broadcast, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}}}}}, 0x0) r2 = accept$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14) sendto$packet(r2, &(0x7f00000001c0)="0e9afeed6a7e538a3a51a7b0ae40a7458c410fffbdf87026778432528449baf01a1b4b77c0fe5c5791", 0x29, 0x400c004, &(0x7f0000000200)={0x11, 0x1a, r1, 0x1, 0x4, 0x6, @random="f4f8b3db7ac3"}, 0x14) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000440)={@val={0x70}, @void, @eth={@local, @remote, @void, {@generic={0x4305}}}}, 0x12) 29.221989504s ago: executing program 3 (id=2771): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x2, 0x2, 0x1) bind$can_j1939(r1, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000104feffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000050027000000000008002000feffffff"], 0x30}}, 0x80) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000280)={0x40, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_LABELS_MASK={0x4}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_LABELS={0x4}]}, 0x40}}, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000001980)={{r0, &(0x7f0000000040)='ip6tnl\x00', 0x101000, &(0x7f00000000c0)={@_ha_fsid={[0x0, 0x2]}, {0x20, 0x7f, 0x5, 0x81}}, 0xb, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000180)=0x1}, 0x8, &(0x7f0000001880)=[{0x3, 0x200, &(0x7f00000001c0)='ip6tnl\x00', &(0x7f0000000200)="a904f0f1d13c5167a3e43101a93f30f64dad995560d4bb322282d201c737e50356483daacdd2b23777efd7b97ab5415b83960ecfa80655dc2e418d2bb7dc373672fb30c6b1c44eb99d1ab011ee1e8634d1d5543969039024d9dff85f885911987b8224e4d58fde190bf4df9ef4a111d47ba25a5e8b9fbe3803b412c18216788e5ef8324df6a0c6a46aaf037662e519e9a69069477c7af64fdc23c917", 0x9c, 0x38}, {0x1, 0xe70, &(0x7f00000002c0)='ip6tnl\x00', &(0x7f0000000300)="038cd5072c0841549950c57a5a8b6a9027cb6d683b87476d3e92e1a4d3c3fac9e6bc323d2e98f71694209f6f150c3b5422590f03e266c14aa13c3c2a92f033fe31a7f182a4d6acb3fce2e24728012ba7f77f9b86138455c0464d9b59963b9a270d26699b15888eb468e0046fd02bfa1d072342a8768ee8885eb8", 0x7a, 0x28}, {0x2, 0xea, &(0x7f0000000380)='\xfe\x92#&!$-\\}\'\x00', &(0x7f00000003c0)="bddc8e61e4c6faee0769640f0cb609b67322ef9fe2ed7f0a8de01a4f9a9db11eb3f64c51fa2f84d7175fc5c38c17bf8b8a7c88925f78b527a449ad01ffd6b0b6a82fa9894cb5912619304bb148b1b850", 0x50, 0x1a}, {0x3, 0xf80000, &(0x7f0000000440)='ip6tnl\x00', &(0x7f0000000480)="a7193ba05945ab5c93073c0ece114dfc93a79f294d95308d8297a150b21ebd248abd14544ce0b4fc73c01bf2d951642a78ad20ea7ea813d4b2b19b0410261a5c70ca2a1dc0439026ba6e6ea013bad4964bb92e9dc8b98cd365ce4549bf4df1ed08e8f1eaa64da36162dca4543de4258086fc13054f121ab91dee11a8f53639448bde390229905520d42e32d4aceb1635b06d2ff9ce58", 0x96, 0x32}, {0x2, 0x5, &(0x7f0000000540)='ip6tnl\x00', &(0x7f0000000580)="1a982fda8d24efe9f8a1f28e4df5847808d766bb4a13908c7550667929a42d9a817dfee9f97a9ee66a0366d48f87280912a5c62aa19c552f87d790d15cf1b6ed490beed828cf596cafc5f233f41869d475faffcb6291fa4e92925c9fd446ab909e85732e52edfd4eb988c4602a205cbfd903c2c7f65622436ac61cd00472ce2882cd380745fb16df48505455f00080da282bd24263992d0b266ea14de6cad906b1642d8223085f42", 0xa8, 0x2}, {0x2, 0x1, &(0x7f0000000640)='ip6tnl\x00', &(0x7f0000000680)="146f4afc0bcb58acf1eedf9e8c6f94873b15cc7209a1eab2020efc9b651613d49c2eb8e011f2bd58e9d6a2bc2ec46e6fd4f83c9e4c83b78782c1dd4eabdc920231071eb4e8241e11a40ab6ba9e3a4e7e35db482bebe6693be8d604de24f1d60370f16c3287cc8dc24e36f98b16012624e232b656f4bbc2877a8e5c0b21dd2b335324b01ee9", 0x85, 0x2a}, {0x1, 0xffffff35, &(0x7f0000000740)='ip6tnl\x00', &(0x7f0000000780)="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", 0x1000, 0x8}, {0x1, 0x8, &(0x7f0000001780)='\x00', &(0x7f00000017c0)="db392688f2a8c3c3d1bf7ca870330eb61ced0b6c6344b687143c27574aa3c82ff391b0223bf33156d6956a61e6e93b8ddbf9042ef086fc02cee7f9ccdca924af3de5a02a0909dd278e4d9656a9848ecf0e021fc5c56b216f922d244312e47c218bcc99ba31989144b0ccadd9817010c8ece62d7416f3c49951e0da866be0f763168f8ce0f0e7c0548b86d355902fce9c", 0x90, 0xa}]}) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000001b00)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001a40)={0x68, 0x1, 0x1, 0x5, 0x0, 0x0, {0xc}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x5}, @CTA_TUPLE_ORIG={0x4c, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x11}, 0x20004040) 29.066086413s ago: executing program 3 (id=2775): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000100)={0x10}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x19}]}, @IFLA_GROUP={0x8}]}, 0x3c}}, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000b80)={@broadcast, @random="6487a2bed3d6", @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x14, 0x300, 0x0, 0x0, 0x6c, 0x0, @private}, {{}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4}}}}}}}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$TUNGETDEVNETNS(r2, 0x54e3, 0x0) write$tun(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="00000806000003"], 0xfdef) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005500e502000000000000000007000000", @ANYRES32=r7, @ANYBLOB="200001"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010027bd7000fcdbdf2517000000500006804c0004"], 0x64}}, 0x48c0) 28.371491056s ago: executing program 3 (id=2785): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a80016002000014006000000035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a1a83d5f59e3d", 0xd8}], 0x1}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}, @IFLA_IPTUN_TTL={0x5}]}}}]}, 0x40}}, 0x0) 28.016078543s ago: executing program 3 (id=2791): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000001ec0)="823a734c4f45e4d9720d9abbe9704398", 0x10) (async) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x3c2b}, 0x8) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB], 0x44}, 0x1, 0x1000000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) (async, rerun: 32) r3 = socket$igmp6(0xa, 0x3, 0x3a) (rerun: 32) ioctl$sock_SIOCETHTOOL(r3, 0x8946, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x44, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async, rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10010}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async, rerun: 64) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x15, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0xa0}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x10}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x56010000}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {0x7, 0x0, 0x2}, {}, {}, {0x25}}], {{0x6}, {0x5}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) (async) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8b05, &(0x7f0000000880)={'wlan1\x00'}) (async) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYRES16=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000090a010400000000000000001000000008000a40000000000900010073797a30000000000900020073797a32000000000800054000000033080003400000001408000c40000000000800084040"], 0x7c}}, 0x0) sendmmsg$inet6(r6, &(0x7f00000065c0)=[{{&(0x7f0000000180)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x42}}}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="120000000000000011000000"], 0x28}}], 0x1, 0x0) 1.441119943s ago: executing program 2 (id=3110): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x5, 0x1010, r0, 0x801c9000) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x10, &(0x7f0000000040), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x2, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x72, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x200000}, 0x94) 1.335073137s ago: executing program 2 (id=3112): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x1, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x303}, "1afc7c14d332bcc6", "a9ba0c85d68723369f51322151d9f41aaa2832bb07cc1e49ad714beac6f1ade8", "49960d8f", "bff2a81527ae4190"}, 0x38) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x13, 0x3, &(0x7f0000000000)=@framed={{0x4e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0xa0}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r7, &(0x7f0000000440)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f0000000540), 0x3c) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r8, 0x0) setsockopt$inet6_tcp_int(r7, 0x11a, 0x5, &(0x7f0000000000)=0x3f9, 0x2) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="8000000010000305000000000000000000001000", @ANYRES32=0x0, @ANYBLOB="0088000050080100580012800c0001006d6163766c616e004800028008000100100000001c0005800a000400aaaaaaaaaa3b00000a000400aaaaaaaaaabb0000080003000300000008000300020000000800030002000000080007000500000008000500", @ANYRES32=r6], 0x80}}, 0x4) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$IP_VS_SO_GET_VERSION(r9, 0x0, 0x480, 0x0, 0x0) sendfile(r0, r3, 0x0, 0x20000000002) 986.32425ms ago: executing program 4 (id=3116): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(aes)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000580)="b19ccccf84f531d9ec4cda81a3ef2ca8", 0x10) sendmmsg$alg(r1, &(0x7f0000001bc0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}], 0x1, 0x24041091) recvmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)=""/262, 0x106}], 0x1}, 0x3886d42165142a48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x9c}, @exit], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) 906.111868ms ago: executing program 2 (id=3117): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@ipv4_newroute={0x1c, 0x18, 0x9, 0x0, 0x1, {0x2, 0x0, 0x0, 0x0, 0xff, 0x0, 0xff, 0x1, 0x2a00}}, 0x1c}}, 0x0) 866.940271ms ago: executing program 4 (id=3118): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x40090) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r6) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x4, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x4, 0xd}, {}, {0x3, 0xfff1}}}, 0x24}}, 0x40004) 807.615595ms ago: executing program 1 (id=3120): ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)='^*)\x00', 0x200, &(0x7f0000000040)={@_ha_fsid={[0x9, 0x9]}, {0x2ca, 0x3, 0x7, 0x29}}, 0x7f, &(0x7f0000000080), &(0x7f00000000c0)=0xa0dd}) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, 0x0, 0x8, 0x401, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x9000}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xffff}, @CTA_TIMEOUT_UDP_REPLIED={0x8}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xfffffa79}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x1}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) write$ppp(r0, &(0x7f0000000240)="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", 0x1000) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000001240)={0xffffffffffffffff}) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001300), r0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000014c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001480)={&(0x7f0000001340)={0x134, r2, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_MATCH={0x120, 0x84, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x4}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x6}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x1c, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0xffff}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x1ff}, @NL80211_BAND_LC={0x8, 0x5, 0x1ff}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac=@device_b}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac=@broadcast}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}]}, {0x90, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x5}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x3c, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x80}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x7}, @NL80211_BAND_5GHZ={0x8, 0x1, 0xfffffffd}, @NL80211_BAND_60GHZ={0x8, 0x2, 0xffffffff}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x2}, @NL80211_BAND_2GHZ={0x8}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x80000001}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac=@broadcast}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x2c, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x8}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x7ff}, @NL80211_BAND_5GHZ={0x8, 0x1, 0xc}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x10b}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x6}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x4}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0xfffff203}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x2c, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0x3}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x2}, @NL80211_BAND_6GHZ={0x8, 0x3, 0xe961}, @NL80211_BAND_60GHZ={0x8, 0x2, 0xc314}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x9}]}]}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x4840}, 0x10) (async) nanosleep(&(0x7f0000001500)={0x77359400}, &(0x7f0000001540)) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000015c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f0000001680)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x40, r2, 0x400, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xffffffff, 0x72}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x76}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x42}]}, 0x40}}, 0x4040000) (async) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f00000016c0)={{0x0, 0x8, 0x3, 0x4, 0xd, 0x7, 0x0, 0x7, 0x10001, 0x200, 0x6, 0x2, 0x5d, 0x9, 0x241}}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f00000026c0)={0x0, r4, "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", "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"}) (async) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f00000036c0)=0x400) (async) r6 = socket$tipc(0x1e, 0x4, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r6, 0x80286722, &(0x7f00000037c0)={&(0x7f0000003700)=""/132, 0x84, 0x828, 0x5d0}) (async) r7 = accept4$nfc_llcp(r0, &(0x7f0000003800), &(0x7f0000003880)=0x60, 0x80800) ioctl$EXT4_IOC_MOVE_EXT(r7, 0xc028660f, &(0x7f00000038c0)={0x0, r5, 0x0, 0x100000000, 0x9, 0x5}) (async) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000005280)={{r6, &(0x7f0000003900)='\x00', 0x800, &(0x7f0000003940)={@align=0x8, {0x4, 0x9, 0x8d6b, 0x1}}, 0x800, &(0x7f0000003980), &(0x7f00000039c0)=0x6}, 0xa, &(0x7f0000005140)=[{0x1, 0x3, &(0x7f0000003a00)='^*)\x00', &(0x7f0000003a40)="41a0dd71bcb01a5d42792feaf190e499dd2e0612f1b58c5070e5cdc1c239636f45df57f8dec2ce89f94400910d05a1ac8d63b507aefc5d778580fd5e4555a738d06359c37808b0f7d2f47b00fda4aab41c95340ac570d3e5629488331e017d8f06b530e1f1f0cfae01c1a3a43eb4c5daf87eba9c54efe40aad625b33f69c05659aa05213eab8f5445088b7da0617901c77527820932bb868fc967c709e5829195e75ce8ea2b3ce7e40048e5d54cc0ffadd032aac60dd6b63af4d4016cece85fb42d00bcbcea864bec48d68acd6975a5848c45e810d86968326b058a256", 0xdd, 0x2}, {0x2, 0xa224, &(0x7f0000003b40)='\x00', &(0x7f0000003b80)="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", 0x1000, 0x2}, {0x2, 0x8, &(0x7f0000004b80)='-R\x00', &(0x7f0000004bc0)="5e710f976ffd7383fa0cd8ec5cf25449e01f861cf75cfa1ff664c0a589683e6753a1e78eb36906970db01913ff494ed37966cbde", 0x34}, {0x1, 0x8, &(0x7f0000004c00)='\x00', &(0x7f0000004c40)="d690e798c593f54e3c02ef4c62ce85a887245ab47b7a10a5391cbc120ddd1e24c1d0543c8e034d42a069d234ef3897b96f694597e60209b7eaa50aecb5eb3dd3db44a19f167de17c442b2e5789915d01d28a3463d636cad864f210fc7da5fcfcb9234a58d39373a82fc1c7d6cc1c98e6ed1c68f16872c716e1df32c3061765a4eae14a8fd3ac1e3800a7a72512e11dfc534523b00f311b14f50ab3d386e21525b25fca7e765f26e11e0aec23df71224b87c855c429c0ebb2329c645749fdebd65e4d3e3bddfd6194fc0c608219c9ec02e1b98fa34cbbcce04ed23481", 0xdc, 0x10}, {0x3, 0xff, &(0x7f0000004d40)='@}(@\x00', &(0x7f0000004d80), 0x0, 0x20}, {0x3, 0x200, &(0x7f0000004dc0)='\x01\x01\x01\x01\x01\x01', &(0x7f0000004e00)="be09864c868a1f8443fb0582237c2ab91df3154d3ad84b49206f0d572fd169265ee64e256ddedac3500669e307a22bd102afcb52ddc0e56c16cf493c069926301e3b7e678b719beec3b67793256806d6007d96ef41c94f26438f2a923d2de57ec6606095d165368a9c499c960beab40f73098052719f37ea2d4425444d68957d4534aaa127b7ada51f870e73a75a40e055159a263ae70732becdd3e2b735c275bd1efa3891c57e01d4fd6d27d29d1b2e20c35c869de0b8cd732ebeefed17e150b8600758b3879070fa976144973a5b6a12eabf7e9ba82748789c1f6e9012e0567c067a631bdd03543c0844ab4f72dd94d1c8059600e188bb", 0xf8}, {0x3, 0xa, &(0x7f0000004f00)='^*)\x00', &(0x7f0000004f40)="6a11e601f7a88cf01b03a542ea4ac50eab3a6cd5c563b96c87faac5bebf15e496abee0d1959d482ebd9f60b8aa8010657b20390281bba3b8d98ba2e2c459aa000b1e863ff5e589fea3e4068ce6251669d35cb1afe27b14b41ea258c09505de2a", 0x60, 0x303cc1d2689bce17}, {0x3, 0x3, &(0x7f0000004fc0)='nl80211\x00', &(0x7f0000005000)="8da501873c15d769fab0dc5b96133f4e670fc06a6f7bc01e0fa3357d2c", 0x1d, 0x20}, {0x2, 0x81, &(0x7f0000005040)='\x00', &(0x7f0000005080)="7602a37f0b8e915505e855f9b6e7739c144e070561214585684667e7708b7a9167bf97943cf432d65c5b9dd6379fa115ac56", 0x32, 0x38}, {0x2, 0x1, &(0x7f00000050c0)='\x00', &(0x7f0000005100)="70a12c1427ba7648b3ca2692bd9f64e33e1d66b9a9fe6d062218fb7bea13b19cdac8c2732c4b5fb8367933ff", 0x2c}]}) (async) r9 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000005980)={0x0, 0x0}, &(0x7f00000059c0)=0xc) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000005a00)={{{@in, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @private}}, 0x0, @in6=@private0}}, &(0x7f0000005b00)=0xe8) (async) ioctl$sock_FIOGETOWN(r7, 0x8903, &(0x7f0000006240)=0x0) (async) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000006280)={0x0, 0x0}, &(0x7f00000062c0)=0xc) (async) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000006300)={0x0, 0x0, 0x0}, &(0x7f0000006340)=0xc) (async) r15 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000006380), 0x18002, 0x0) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f00000063c0)=0x0) (async) r17 = gettid() (async) r18 = getuid() (async) r19 = getgid() sendmsg$netlink(r8, &(0x7f00000064c0)={&(0x7f0000005300)=@kern={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000061c0)=[{&(0x7f0000005340)={0x36c, 0x3c, 0x8, 0x70bd2b, 0x25dfdbfe, "", [@nested={0x13a, 0xe8, 0x0, 0x1, [@generic="f6a7aeeea49285f06a90ab6b69126e567f2dd99b9808c96cdc300bdf254e37e7019d6536bfbc058287aed9da", @generic="89082967e7d918c603ba1b7b80551db14cc70396abde5a8d0ac1eec749df3a537d86db6c8e573b1c42531d99ab826bf0c4b33089fed2eff2ebd64d8c84533110321f39bb14d42bc6d8d9e59ed19dcf9fd5b4272d128228dc7784134b7c5727b08854b18f2b63f7e74f4a59e697e56a7c8035733bf2f4dec2d8e2c6ab71762a824f8c1463e2eae9ee433c449b0c90957799ec84e872d05b8242c7392d4bc25ad470e39914a18b1ebe2328a95934cfcc82793f0e64a9cb7deb58fe5193c5113eec4b6de133f79ffc1a3ca97056dee2902b249fd9eccf0ee1d1fa75c8b765283b78832eee4f3bdfbf962a3355db7179154cda2b44919208", @typed={0x14, 0x4e, 0x0, 0x0, @ipv6=@local}]}, @generic="2fe93fc8442f8c8ae50b9fb2a469e57e742680613c378bbce81faa823e9496a814deb3b397042c6856814376dd7502e922", @typed={0x8, 0x14f, 0x0, 0x0, @fd=r5}, @generic="10240f8507216eed24ec38ac9009452fe74c21265e59a4e02ecf57418823ef0c084db1b6093b99cf99c25d18e07e24b47fca8449e3", @nested={0x1a6, 0x9f, 0x0, 0x1, [@nested={0x4, 0xda}, @nested={0x4, 0x134}, @generic="e09e71ccecd8062bbf2ea7f6eeb42e30018ed0f6dc6d4ac0f2bc4524716acfed846ef3c0da39f8639321ab5a895c9b7e20e88dbd978c8f992bc1f2e74af9f583974f9179d85587d73c6567833b834d975d1eac0bd383c3485f7f930904fc027605399d5912c9ae7a6e1b646dc20a26ea345dcc56a56aa6883aa99ab50cb7dc48aa9347458d1d8d32de3aab8cb22f72a92442137df0210917320604ee890ce2baa50ec848c50efb3f5926f9511abbb29170c3c898cd07823bc1d61ce93cd688c23dea6d7a0aeaf9570cdcdbc6a6af3020486c2a0e0aabbe0efe5b9b5f89", @nested={0x4, 0x10}, @generic="ba7735baf8b960d0c4f6455e0a11a64ab0ee482c1948f652f626f7b15e5d934405811e3df12b1ac9f49d615adc4e5a0aeed5037889e726b66159ee7f332eaf39023342b2b32fe069ea5d888578f7049644", @typed={0x8, 0x1f, 0x0, 0x0, @fd=r0}, @generic="d4acc56a705006f3a1f9a77640b7527bd856fc0357c4295e86f05400c899feae97fe141b5ca213046add47cf5b8a3baee7d18e46622678a996ddb1511161f8708105a1bc202e758a4c485aa5ffffb38c933dfc35", @nested={0x4, 0xc9}, @typed={0x4, 0x26}, @nested={0x4, 0x169}]}, @typed={0x8, 0xe2, 0x0, 0x0, @fd=r9}]}, 0x36c}, {&(0x7f00000056c0)={0x270, 0x34, 0x800, 0x70bd2a, 0x25dfdbfc, "", [@generic="c9f68db4931b35b5d0b810b6193e352fff872f3ce146a9b46a64dbc21d20fb720a7cc05067e59b0bc0f7109c4722a984ce41d71234b3f93483e6dd708f31c2c67c282ede17ee7c2c0696ac4afc78e37a3f4f4655fddff0d96afbaa1c5a2d90872cdbd885991847f4a7d029a90411ae2fe922", @generic="9ce89ac856ddd96fbb59d8e89062a83d07fc9d61055b67b8e948d23a766aba07550ec2a28b6048a1a2dbd0c508dcdd2187b2b10e99dfb8c3ab0b871056855bb4efcc9d09110288e41f218abc864d95d03b019668f460554a8ff55172079a71b75f5cee737929e90288f89d0b6978ffbec082aeb6bb8f6709dcdb3afecab8e2f07a4466ebb821e8090ec2705f2baa64c3509126233355a9e271db31794b314f8ab005728c597a4da087b93f19f8df3c18bc0d50649b85232f472e051dc98abfab", @generic="d9b95469cfc23fd7d3abd587bfe604b3abb8a0d62af00287bcc18639efbe392d1a4fc2c693", @generic="a03600a4b39024f65a88389b4875f785248d36b5d3f32235c9ab48b3902bc80f88d7a24a1d6fd6ebcd0b089009502544367016dba0419e411501dd1f24ac079be160f288cd3c18518fde481d0d3bf6af7d8b734d2d277b54aab60f206f1527e4de0d5add1fdd4d538d5d12ca21e2ceb989d0a2a937e43f6b73b0c4bbe0863edd23014dfd983009f3cc25ca3b4bfaf879a2ac25992e344bcef710608e67bd686e78faff14a6898753f36d63a4b181019b4286df80f896ae609d442018488f793c43b05af6f66d6da253ccc7bb00b17594853a7cf43214435535a7", @nested={0x19, 0xe9, 0x0, 0x1, [@generic="89e21a8c1cb49ae379146f42de482cc7cb4f8577e4"]}, @nested={0xd, 0xe, 0x0, 0x1, [@generic="e52a06dc04c821ca62"]}]}, 0x270}, {&(0x7f0000005940)={0x28, 0x12, 0x2, 0x70bd2c, 0x25dfdbff, "", [@generic="a359d1ab7c97c2cc16a16c644f2ec91d6ea5d7c14cda98"]}, 0x28}, {&(0x7f0000005b40)={0x30c, 0x28, 0x20, 0x70bd2a, 0x25dfdbff, "", [@generic="1006f4fc1a79087716aa6a3781867bbbb64aeb79dfb13481a171cf187ca4285879538dbb5552a6f3ab7f2d6e6bdd26cbbd827f8a4621e0e55967d7c9243a734478c5fe56b3", @typed={0x8, 0x116, 0x0, 0x0, @uid=0xee01}, @generic="211256525be01b7db6c943f84e81fdfe3a3ab5b4c3f911c50f6b2a5cb423b960afa57b59f0cdd2ae05bda9a6e9749aed430b7c59f272b8cc8db9b9f4bfdb17af9900cb5a9800625f78a763be083ac3410d8c9ef8adaa29e0597a9eea4805ca8ca589a0df94d89c824316531512824126e7a9bd01ca4e117281a688c453d363f29e3fec024a88f49a87e0cd63e2c87deccc69818cb4700b86d543184223e7b0c10be30088aae5cd6c88ef3efa2ccde7a93f1a894ff34521b2fb40d1abbff12760c61a214f7596a34fef3c29acc43ad9461589916bf8828ac84b7ba7d4d649", @generic="b76d9c34900f76f7383a615722851fdb759151c6b4ee76c0172b928c948ec3385494fb65a0c719b97af1e61b04ed91dbba425f462806e5b801c43c71f02e2298686f0082ba0a7153772892ca2c1eb875552e02ace33b3652b63eaa412cfa7a6e3ba22ab98fb7d9e5d6483331028c71a68f6d38fcebcc291b7858d8528e7440363fa0e14ee3518b2edaf4c2d9f0d27e8dba1282f921f4511c278f678455618a52ae750c874133e8ba9b34ea8fd11ed90df364600b2fb3fb768ca8ee2e4498f1cdb7c6c71b0fa656dc91860044", @nested={0xc, 0xc8, 0x0, 0x1, [@nested={0x4, 0x64}, @nested={0x4, 0xe1}]}, @typed={0x4, 0xd2}, @nested={0xed, 0x70, 0x0, 0x1, [@typed={0x8, 0x64, 0x0, 0x0, @uid=r10}, @typed={0xc, 0xa9, 0x0, 0x0, @u64=0x6}, @typed={0x8, 0x32, 0x0, 0x0, @u32=0x6}, @typed={0x8, 0x31, 0x0, 0x0, @uid=r11}, @generic="176982f35e70a65a508daf7bebf464db5fa861f75837a9e692", @typed={0x8, 0xbd, 0x0, 0x0, @pid=0xffffffffffffffff}, @generic="f4c6a780b8d9d84dfc606e8f2ba2d94ab129f285a67d6cb0737145ef00d17b7bcf050eb17218ff85e8d8095a032b50743d71d2a314793d3efc7cba377245d28260bbb01ef4b57b928118eae7dfd0f7eb2618719b2ff9b809fc17f8cc91c884d93d53a922ab3d03bbd76e8dc5ed5fc924824c5807569cc3a5724e89241a66c9f152d96f374722c53afeac40265f1cbe0a", @nested={0x4, 0x90}, @typed={0xc, 0x10c, 0x0, 0x0, @u64=0xf1}, @nested={0x4, 0x71}]}, @typed={0x4, 0x11e}]}, 0x30c}, {&(0x7f0000005e80)={0x32c, 0x10, 0x100, 0x70bd2d, 0x25dfdbff, "", [@nested={0x31a, 0x8, 0x0, 0x1, [@generic="0223b14c7010a5d699b0df37f8c1f73618f497eaa8c1f652182648471049e82d98aaa3fbb29d409e32bbe51e4efe57c3d01edbc63e54bfd88d3f2c2b827f09cd5a762bbbb7f892d35cf5c3ef49c53dafa3f20e79bd1131da892be71adb9eb0cbe55d6c79e5196ab16269e6bf7f240cbe4fa9234f851d6220378151900227af2ea2c24b89b7b5ff7a298793ce", @generic="3e276ed873b13e7e2fe6c6d759542f4b043150e6610efe17e7c9ed237b20879f751cf9370a64635f799ced6f9d6015d649d9ebb4614f5f", @generic="e85b6806320028a67fdfdc90f1ee5efecadef4", @nested={0x4, 0xf8}, @generic="fc68ee47944eb8ac4895d60840dcde603e4561b1b9668ac38cf6910078b73f9fa89fd1bfbd81393b96d87361edc3da14063ad084875d81ac13c736d7009c222a10296152b08b0814a20ceecd4dada7da82295dff25c876126f24e7105ab149402ed34bd9c7683cfa359317d477f2c4cc56c8054c7045679e6d83b9b192620435173c0c3ff68836b72a0f0bf057e0d69733f169fcbe20249e1e8a2c14925080d778db300932ce12c0c72988a38ea3c4d1ca6d096fb16c415ad36dee9d249b416adb6c1933e40147d187", @generic="17c2a52c78377f6b06e57d1047b70c8124daf02a74cea29b3638b4d9e39bb8a7feafac00da54bb24420d49d12f696026a6218f18f28103983f057bb0d5070e5664ea678522b5fe7ce9854823aa21d8c145b1b334dd23b0c23bc43678051d87410663b4092fb2205958072be25374ce9a56598200af7642f7cb5394f6dc41d43d9369627f5302495e743444a3f63a9461f264979251a10f2efcfee76214442932d631045501155f4efd78b5ac0bdb6ab1855729", @typed={0x8, 0x63, 0x0, 0x0, @u32=0x7}, @nested={0x4, 0xc3}, @generic="3dfe24958ab43a1a99e662f3de63b954bf7b035782a88b805d8acab859fce59852920d97081dac62bfe6fe6c044777c80bb61d098b37ff90517a2debf2d8d11cfd82255084f6cf152a34032eaad74402766bf35224fc455e82c26c8ee315e12e917e9d4f1293e3931a80fb0fad9946ec7d7ae4483e8535e926668aaeecefd7438866870cc12a1a76208fac86099a75aeb44e134ab36c89adef2685d8a5c49a2a62cbba3b2fdac7d938e3bbd3", @typed={0x8, 0x18, 0x0, 0x0, @fd}]}]}, 0x32c}], 0x5, &(0x7f0000006400)=[@cred={{0x1c, 0x1, 0x2, {r12, r13, r14}}}, @rights={{0x28, 0x1, 0x1, [r5, r7, r1, r0, r5, r15]}}, @cred={{0x1c, 0x1, 0x2, {r16, 0xee00, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r17, r18, r19}}}, @rights={{0x2c, 0x1, 0x1, [r6, r5, r5, r1, 0xffffffffffffffff, r1, r6]}}], 0xb8, 0x4000}, 0x4000c001) 750.023813ms ago: executing program 2 (id=3121): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001880)={'veth1_to_hsr\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r0, r1, 0x25, 0x0, @void}, 0x10) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000000000000000f195"], 0x0}, 0x94) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000000010000006000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x80) 711.136685ms ago: executing program 0 (id=3122): r0 = socket(0x35, 0x6, 0x6) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {}, {0x14, 0x19, {0x6, 0x8, 0x0, 0xc69}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x24040000}, 0xc0) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000040)={'team_slave_0\x00', {0x2, 0x4e22, @broadcast}}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0xfffffffc, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x31943}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'wlan0\x00'}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 652.171161ms ago: executing program 4 (id=3123): sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4002004) r0 = socket(0x2a, 0x2, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000480), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000600)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)=@deltclass={0x44, 0x29, 0x320, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0xd}, {0xffeb, 0x7}, {0x7, 0x2}}, [@tclass_kind_options=@c_prio={0x9}, @TCA_RATE={0x6, 0x5, {0x9, 0x8}}, @tclass_kind_options=@c_ingress={0xc}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYRES8=r1, @ANYRES16=r3, @ANYRES64=r2, @ANYRES32=r4], 0x1c}}, 0x840) unshare(0x2c020400) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r2) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x20, r5, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8001}, 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0x3, &(0x7f0000000200)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd7}, 0x94) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, 0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) setsockopt$packet_drop_memb(r7, 0x107, 0x2, &(0x7f0000000080)={0x0, 0x1, 0x6, @remote}, 0x10) write$nci(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="4106013e00"], 0x4) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x5}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40048040}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x1000, {0x0, 0x0, 0x0, r9, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x86dd}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x3a}, @TCA_FLOWER_KEY_ICMPV6_TYPE={0x5}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40010}, 0x24000000) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) socket$tipc(0x1e, 0x2, 0x0) r11 = socket$kcm(0x10, 0x3, 0x10) setsockopt$sock_attach_bpf(r11, 0x1, 0x32, &(0x7f0000000980)=r10, 0x4) 650.415927ms ago: executing program 1 (id=3124): r0 = socket(0x10, 0x2, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r1, 0x0, 0xd0, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000080)={0x8}, 0x10) write(r0, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r0, &(0x7f0000002ec0), 0x0, 0x0, &(0x7f00000001c0)={0x77359400}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) syz_emit_ethernet(0x5a, &(0x7f0000000080)=ANY=[], 0x0) 563.345139ms ago: executing program 1 (id=3125): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, 0x94) socket$l2tp(0x2, 0x2, 0x73) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@random, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x18, 0x3a, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, @loopback, {[], @mld={0x83, 0x0, 0x0, 0x9, 0xc036, @remote}}}}}}, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x26}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xfffffffffffffd2e, &(0x7f0000000000)='e', 0x0, 0xd01, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x48) (fail_nth: 36) 529.605147ms ago: executing program 0 (id=3126): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000000)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) r1 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000000)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000001300)=[{&(0x7f0000002b00)='1', 0x1}], 0x1}}], 0x1, 0x48c4) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) sendmmsg$inet_sctp(r1, &(0x7f0000000380)=[{&(0x7f0000000080)=@in6={0xa, 0x4e23, 0xb6d, @dev={0xfe, 0x80, '\x00', 0x22}, 0x6}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, &(0x7f0000000300)=[@dstaddrv4={0x18, 0x84, 0x7, @remote}], 0x18, 0x4000}], 0x1, 0x20000840) 440.222551ms ago: executing program 2 (id=3127): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xa}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$IPVS_CMD_NEW_SERVICE(r1, 0x0, 0x2004c085) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x2, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r0, 0x5, 0x26, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (fail_nth: 67) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xf3f, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x14, 0x2, [@TCA_BASIC_EMATCHES={0x10, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000001100000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) 440.079656ms ago: executing program 0 (id=3128): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='veno', 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) 356.59517ms ago: executing program 1 (id=3129): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=@allocspi={0x104, 0x16, 0x1, 0x0, 0x0, {{{@in=@loopback, @in6=@mcast1, 0x0, 0x3}, {@in6=@remote, 0x0, 0x33}, @in=@local, {0x2}, {0x0, 0x0, 0x0, 0x3}}, 0x0, 0x5dfe}, [@lastused={0xc, 0xf, 0xfffffffffffffffd}]}, 0x104}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x18000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'veth1\x00', 0x1}) 356.255989ms ago: executing program 4 (id=3130): ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) close(0x3) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r9, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f00000000c0)={0x0, @in={0x2, 0x4e23, @loopback}, @nfc={0x27, r0, 0x1, 0x5}, @isdn={0x22, 0x1, 0x40, 0x7, 0x6}, 0x6, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7fff, 0x8}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000000080)=@ethtool_link_settings={0x4d, 0x4, 0x2b, 0x5, 0x3, 0xd, 0x13, 0xfd, 0xd, 0x4, [0x800, 0x6, 0x8, 0x8, 0x0, 0x5, 0x2, 0xf]}}) 342.505406ms ago: executing program 0 (id=3131): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x4c0, 0x98, 0x138, 0x428, 0x0, 0x0, 0x428, 0x428, 0x428, 0x428, 0x428, 0x6, 0x0, {[{{@ip={@remote, @multicast1=0xe0007600, 0x11000000, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11, 0x0, 0x9}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@private=0xa010100, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00', {}, {0xff}}, 0x0, 0x70, 0x98, 0x0, {0x3000000}}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {}, 0x32}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x9, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x3, 0x8}, 0x0, 0x90, 0xc0, 0x0, {}, [@common=@socket0={{0x20}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x520) 178.588543ms ago: executing program 0 (id=3132): r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r1, &(0x7f0000000080)='syz0\x00', 0x1ff) socket$rxrpc(0x21, 0x2, 0x2) r2 = openat$cgroup(r1, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_type(r2, &(0x7f0000000180), 0x2, 0x0) write$cgroup_type(r3, &(0x7f0000000280), 0x9) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="8c4500004378ac462805dd4bb85efffffffcdbf625017c0000040006801c39da3abb15998926740c84cb4ea4092099fb3f2b7a7459bfe719d63f594eab14d6946ea026396c7d03f5e08e0964f82e4c2749e953e68d6a07a215892768a2651ac1741179527c4b"], 0x458c}, 0x1, 0x0, 0x0, 0xc004}, 0xc000) 178.315894ms ago: executing program 2 (id=3133): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r2 = accept(r0, &(0x7f0000000000)=@un=@abs, &(0x7f0000000080)=0x80) r3 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000100)=@phonet={0x23, 0x5, 0x0, 0x13}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000240)="2705020059feff0006000b2fb96dbcf706e105000706080040008100accb", 0x1e}, {&(0x7f00000002c0)="88a8", 0x2}, {&(0x7f00000005c0)="ac37979d1e439e19a3fab5e73acb3e944e5067314670e86878ea780b34a68a9f01b15a9ff9522b89b6c88218d5f257529aa4e34fab88a671ab48b27ac6a4207fe8a270d3d5b82f100a392980a058dddf565e7deaddd88af7ee746b611a2c5033762a03a3b3e135cf3e1b253385ed8c0de1a820324943afbf72b1509334a4815debe79c5d881fe356404ebd716994cc31b9279965133894ceca066cba08977bfd328ee08749c20449017c661b7cfb27f29f4c2a5ef569403ee926899deada9ab15aba6b7054dc68cf2a65ca130aa11ca288230c24a6f2cd9a865615ce0bdeceb0d07f6a9b693d9aea5629b7578a843b98a8", 0xf1}], 0x3}, 0x894) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f00000001c0), &(0x7f0000000200)=0x4) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x24403}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x50}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 173.080793ms ago: executing program 1 (id=3134): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{0x1, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000200)='%-010d \x00'}, 0x20) getpeername$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000002c0)=0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x4, 0x7fffffff, 0xc, 0x40080, r1, 0x6, '\x00', r2, r0, 0x3, 0x2, 0x4, 0x8}, 0x50) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x4, 0x7fffffff, 0xc, 0x40080, r1, 0x6, '\x00', r2, r0, 0x3, 0x2, 0x4, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x13, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7030000070400008500000021000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 166.092249ms ago: executing program 4 (id=3135): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="40000000130005002cbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="020100000000000014000300766c616e3000fe0000000000000000000a000100aaaa"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x42) 50.934042ms ago: executing program 1 (id=3136): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='highspeed', 0x6) 234.901µs ago: executing program 4 (id=3137): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='highspeed', 0x6) (fail_nth: 1) 0s ago: executing program 0 (id=3138): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, 0x94) socket$l2tp(0x2, 0x2, 0x73) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@random, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x18, 0x3a, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, @loopback, {[], @mld={0x83, 0x0, 0x0, 0x9, 0xc036, @remote}}}}}}, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x26}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xfffffffffffffd2e, &(0x7f0000000000)='e', 0x0, 0xd01, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x48) (fail_nth: 37) kernel console output (not intermixed with test programs): 62710.000:15): pid=11938 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='gJ [ 240.508570][ T29] yk:Xd4yUH,_╆ь8' [ 240.650488][T11945] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 240.719958][T11944] veth0_macvtap: entered allmulticast mode [ 240.726540][T11944] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 240.859323][T11953] tipc: Enabling of bearer rejected, already enabled [ 240.906158][T11945] sch_tbf: burst 255 is lower than device syzkaller0 mtu (313) ! [ 241.183411][T11971] syzkaller0: entered promiscuous mode [ 241.204757][T11971] syzkaller0: entered allmulticast mode [ 241.241416][T11978] xt_SECMARK: invalid mode: 9 [ 241.388473][T11984] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2051'. [ 241.414279][T11984] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2051'. [ 241.493031][T11991] Unknown options in mask b7f2 [ 241.890201][T12008] vlan2: entered promiscuous mode [ 241.908329][T12008] bridge0: entered promiscuous mode [ 242.220655][T12025] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2063'. [ 242.249340][T12025] netlink: 'syz.4.2063': attribute type 7 has an invalid length. [ 242.276833][T12025] netlink: 'syz.4.2063': attribute type 8 has an invalid length. [ 242.303375][T12025] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2063'. [ 242.341039][T12025] gretap0: entered promiscuous mode [ 242.673739][T12044] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2068'. [ 242.688215][T12044] netlink: 13 bytes leftover after parsing attributes in process `syz.2.2068'. [ 242.725351][T12025] gretap0: left promiscuous mode [ 242.843991][T12044] veth5: entered promiscuous mode [ 242.916979][T12050] geneve3: entered allmulticast mode [ 243.022440][T12067] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2073'. [ 243.031844][T12067] openvswitch: netlink: IPv4 frag type 127 is out of range max 2 [ 243.117731][T12057] bond7 (unregistering): Released all slaves [ 243.400221][T12080] netlink: 'syz.4.2077': attribute type 10 has an invalid length. [ 243.415699][T12080] syz_tun: left allmulticast mode [ 243.604288][ T5638] Bluetooth: hci4: link tx timeout [ 243.613714][ T5638] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 243.764006][T12102] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2083'. [ 243.773248][T12102] openvswitch: netlink: Flow key attr not present in new flow. [ 243.967192][T12110] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2086'. [ 244.000352][T12110] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2086'. [ 244.135948][T12123] netlink: 'syz.4.2089': attribute type 2 has an invalid length. [ 244.173094][T12123] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2089'. [ 244.335678][T12128] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2093'. [ 244.560168][T12134] FAULT_INJECTION: forcing a failure. [ 244.560168][T12134] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 244.577942][T12134] CPU: 0 UID: 0 PID: 12134 Comm: syz.2.2096 Not tainted syzkaller #0 PREEMPT(full) [ 244.577970][T12134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 244.577984][T12134] Call Trace: [ 244.577992][T12134] [ 244.578002][T12134] dump_stack_lvl+0xe8/0x150 [ 244.578032][T12134] should_fail_ex+0x40c/0x560 [ 244.578072][T12134] _copy_from_iter+0x1d3/0x1660 [ 244.578100][T12134] ? rcu_is_watching+0x15/0xb0 [ 244.578131][T12134] ? __pfx__copy_from_iter+0x10/0x10 [ 244.578151][T12134] ? kmem_cache_alloc_node_noprof+0x3ca/0x680 [ 244.578190][T12134] ? netlink_sendmsg+0x650/0xb40 [ 244.578220][T12134] ? skb_put+0x112/0x210 [ 244.578257][T12134] netlink_sendmsg+0x6c0/0xb40 [ 244.578306][T12134] ? __pfx_netlink_sendmsg+0x10/0x10 [ 244.578342][T12134] ? aa_sock_msg_perm+0xf1/0x1b0 [ 244.578375][T12134] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 244.578402][T12134] ? __pfx_netlink_sendmsg+0x10/0x10 [ 244.578435][T12134] ____sys_sendmsg+0x9b9/0xa20 [ 244.578467][T12134] ? __might_fault+0xaf/0x130 [ 244.578501][T12134] ? __pfx_____sys_sendmsg+0x10/0x10 [ 244.578544][T12134] ? import_iovec+0x73/0xa0 [ 244.578574][T12134] ___sys_sendmsg+0x2a5/0x360 [ 244.578605][T12134] ? __lock_acquire+0x683/0x2cd0 [ 244.578632][T12134] ? __pfx____sys_sendmsg+0x10/0x10 [ 244.578701][T12134] ? __fget_files+0x2a/0x420 [ 244.578726][T12134] ? __fget_files+0x3a2/0x420 [ 244.578762][T12134] __x64_sys_sendmsg+0x1bd/0x2a0 [ 244.578798][T12134] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 244.578840][T12134] ? __pfx_ksys_write+0x10/0x10 [ 244.578881][T12134] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.578905][T12134] do_syscall_64+0x174/0x580 [ 244.578925][T12134] ? trace_irq_disable+0x3b/0x140 [ 244.578956][T12134] ? clear_bhb_loop+0x40/0x90 [ 244.578983][T12134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.579004][T12134] RIP: 0033:0x7fcf0599ce59 [ 244.579024][T12134] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 244.579042][T12134] RSP: 002b:00007fcf067b0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 244.579064][T12134] RAX: ffffffffffffffda RBX: 00007fcf05c15fa0 RCX: 00007fcf0599ce59 [ 244.579078][T12134] RDX: 0000000000000000 RSI: 00002000000006c0 RDI: 0000000000000003 [ 244.579091][T12134] RBP: 00007fcf067b0090 R08: 0000000000000000 R09: 0000000000000000 [ 244.579104][T12134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 244.579116][T12134] R13: 00007fcf05c16038 R14: 00007fcf05c15fa0 R15: 00007ffd011f77d8 [ 244.579151][T12134] [ 244.847230][T12136] veth0: entered promiscuous mode [ 244.853111][T12136] veth0: left promiscuous mode [ 245.202102][T12157] netlink: 'syz.4.2108': attribute type 83 has an invalid length. [ 245.398327][T12167] FAULT_INJECTION: forcing a failure. [ 245.398327][T12167] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 245.415884][T12167] CPU: 1 UID: 0 PID: 12167 Comm: syz.3.2110 Not tainted syzkaller #0 PREEMPT(full) [ 245.415911][T12167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 245.415923][T12167] Call Trace: [ 245.415930][T12167] [ 245.415938][T12167] dump_stack_lvl+0xe8/0x150 [ 245.415966][T12167] should_fail_ex+0x40c/0x560 [ 245.416001][T12167] _copy_from_iter+0x1d3/0x1660 [ 245.416027][T12167] ? rcu_is_watching+0x15/0xb0 [ 245.416056][T12167] ? __pfx__copy_from_iter+0x10/0x10 [ 245.416074][T12167] ? kmem_cache_alloc_node_noprof+0x3ca/0x680 [ 245.416111][T12167] ? netlink_sendmsg+0x650/0xb40 [ 245.416140][T12167] ? skb_put+0x112/0x210 [ 245.416171][T12167] netlink_sendmsg+0x6c0/0xb40 [ 245.416209][T12167] ? __pfx_netlink_sendmsg+0x10/0x10 [ 245.416242][T12167] ? aa_sock_msg_perm+0xf1/0x1b0 [ 245.416273][T12167] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 245.416299][T12167] ? __pfx_netlink_sendmsg+0x10/0x10 [ 245.416330][T12167] ____sys_sendmsg+0x9b9/0xa20 [ 245.416360][T12167] ? __might_fault+0xaf/0x130 [ 245.416390][T12167] ? __pfx_____sys_sendmsg+0x10/0x10 [ 245.416433][T12167] ? import_iovec+0x73/0xa0 [ 245.416460][T12167] ___sys_sendmsg+0x2a5/0x360 [ 245.416489][T12167] ? __lock_acquire+0x683/0x2cd0 [ 245.416514][T12167] ? __pfx____sys_sendmsg+0x10/0x10 [ 245.416599][T12167] ? __fget_files+0x2a/0x420 [ 245.416624][T12167] ? __fget_files+0x3a2/0x420 [ 245.416660][T12167] __x64_sys_sendmsg+0x1bd/0x2a0 [ 245.416696][T12167] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 245.416739][T12167] ? __pfx_ksys_write+0x10/0x10 [ 245.416780][T12167] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.416804][T12167] do_syscall_64+0x174/0x580 [ 245.416824][T12167] ? trace_irq_disable+0x3b/0x140 [ 245.416856][T12167] ? clear_bhb_loop+0x40/0x90 [ 245.416882][T12167] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.416903][T12167] RIP: 0033:0x7f745ed9ce59 [ 245.416923][T12167] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 245.416940][T12167] RSP: 002b:00007f745fc8a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 245.416963][T12167] RAX: ffffffffffffffda RBX: 00007f745f015fa0 RCX: 00007f745ed9ce59 [ 245.416986][T12167] RDX: 0000000000000000 RSI: 00002000000006c0 RDI: 0000000000000003 [ 245.417000][T12167] RBP: 00007f745fc8a090 R08: 0000000000000000 R09: 0000000000000000 [ 245.417013][T12167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 245.417026][T12167] R13: 00007f745f016038 R14: 00007f745f015fa0 R15: 00007ffcffdd2c08 [ 245.417060][T12167] [ 245.681615][ T5638] Bluetooth: hci4: command 0x0405 tx timeout [ 245.840969][T12178] Cannot find del_set index 3 as target [ 245.851710][T12178] netlink: 'syz.1.2114': attribute type 1 has an invalid length. [ 246.116770][T12194] netlink: 'syz.3.2120': attribute type 63 has an invalid length. [ 246.269686][T12204] xt_SECMARK: invalid mode: 9 [ 246.436988][T12201] 8021q: adding VLAN 0 to HW filter on device bond4 [ 246.520685][T12201] netlink: 'syz.0.2121': attribute type 3 has an invalid length. [ 246.733248][T12225] 8021q: adding VLAN 0 to HW filter on device bond9 [ 246.801078][T12229] macvlan3: entered promiscuous mode [ 246.806715][T12229] macvlan3: entered allmulticast mode [ 246.813733][T12229] bond9: entered promiscuous mode [ 246.819778][T12229] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 246.829592][T12229] bond9: left promiscuous mode [ 247.154122][T12240] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 247.180905][T12240] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.258073][T12256] __nla_validate_parse: 20 callbacks suppressed [ 247.258094][T12256] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2138'. [ 247.371919][T12240] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 247.382673][T12240] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.423016][T12256] bond0: (slave syz_tun): Releasing backup interface [ 247.532840][T12240] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 247.556152][T12240] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.613065][T12270] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2143'. [ 247.690647][T12240] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 247.701180][T12240] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.721176][T12273] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2144'. [ 247.901533][ T198] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 247.914021][ T198] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.938304][T12287] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2149'. [ 247.983041][ T1173] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 248.003630][ T1173] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.074415][T12290] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2148'. [ 248.094263][ T1173] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 248.121007][ T1173] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.148991][T12293] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2151'. [ 248.215373][ T12] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 248.243762][ T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.322980][T12295] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2152'. [ 248.414818][T12306] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2156'. [ 248.719415][T12323] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2160'. [ 248.891929][T12332] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2164'. [ 248.924214][T12332] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 248.964861][T12335] FAULT_INJECTION: forcing a failure. [ 248.964861][T12335] name failslab, interval 1, probability 0, space 0, times 0 [ 249.000465][T12335] CPU: 1 UID: 0 PID: 12335 Comm: syz.2.2165 Not tainted syzkaller #0 PREEMPT(full) [ 249.000492][T12335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 249.000504][T12335] Call Trace: [ 249.000512][T12335] [ 249.000520][T12335] dump_stack_lvl+0xe8/0x150 [ 249.000549][T12335] should_fail_ex+0x40c/0x560 [ 249.000575][T12335] should_failslab+0xa8/0x100 [ 249.000609][T12335] kmem_cache_alloc_node_noprof+0x8f/0x680 [ 249.000639][T12335] ? __alloc_skb+0x1d7/0x7a0 [ 249.000665][T12335] ? __local_bh_enable_ip+0xd0/0x130 [ 249.000690][T12335] __alloc_skb+0x1d7/0x7a0 [ 249.000722][T12335] netlink_ack+0x136/0xb30 [ 249.000749][T12335] ? __pfx_genl_rcv_msg+0x10/0x10 [ 249.000772][T12335] ? __pfx_nl80211_post_doit+0x10/0x10 [ 249.000801][T12335] ? __pfx_ref_tracker_free+0x10/0x10 [ 249.000824][T12335] ? __asan_memcpy+0x40/0x70 [ 249.000856][T12335] netlink_rcv_skb+0x2a4/0x4a0 [ 249.000886][T12335] ? __pfx_genl_rcv_msg+0x10/0x10 [ 249.000910][T12335] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 249.000953][T12335] ? down_read+0x270/0x2e0 [ 249.000973][T12335] ? genl_rcv+0xd/0x40 [ 249.001002][T12335] genl_rcv+0x28/0x40 [ 249.001020][T12335] netlink_unicast+0x7bb/0x940 [ 249.001056][T12335] netlink_sendmsg+0x813/0xb40 [ 249.001094][T12335] ? __pfx_netlink_sendmsg+0x10/0x10 [ 249.001126][T12335] ? aa_sock_msg_perm+0xf1/0x1b0 [ 249.001160][T12335] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 249.001185][T12335] ? __pfx_netlink_sendmsg+0x10/0x10 [ 249.001217][T12335] ____sys_sendmsg+0x9b9/0xa20 [ 249.001247][T12335] ? __might_fault+0xaf/0x130 [ 249.001279][T12335] ? __pfx_____sys_sendmsg+0x10/0x10 [ 249.001317][T12335] ? import_iovec+0x73/0xa0 [ 249.001344][T12335] ___sys_sendmsg+0x2a5/0x360 [ 249.001374][T12335] ? __lock_acquire+0x683/0x2cd0 [ 249.001398][T12335] ? __pfx____sys_sendmsg+0x10/0x10 [ 249.001465][T12335] ? __fget_files+0x2a/0x420 [ 249.001489][T12335] ? __fget_files+0x3a2/0x420 [ 249.001524][T12335] __x64_sys_sendmsg+0x1bd/0x2a0 [ 249.001558][T12335] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 249.001598][T12335] ? __pfx_ksys_write+0x10/0x10 [ 249.001657][T12335] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.001698][T12335] do_syscall_64+0x174/0x580 [ 249.001719][T12335] ? trace_irq_disable+0x3b/0x140 [ 249.001750][T12335] ? clear_bhb_loop+0x40/0x90 [ 249.001777][T12335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.001798][T12335] RIP: 0033:0x7fcf0599ce59 [ 249.001818][T12335] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 249.001836][T12335] RSP: 002b:00007fcf067b0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 249.001859][T12335] RAX: ffffffffffffffda RBX: 00007fcf05c15fa0 RCX: 00007fcf0599ce59 [ 249.001875][T12335] RDX: 0000000000000000 RSI: 00002000000006c0 RDI: 0000000000000003 [ 249.001888][T12335] RBP: 00007fcf067b0090 R08: 0000000000000000 R09: 0000000000000000 [ 249.001901][T12335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 249.001914][T12335] R13: 00007fcf05c16038 R14: 00007fcf05c15fa0 R15: 00007ffd011f77d8 [ 249.001967][T12335] [ 249.366942][T12340] xt_SECMARK: invalid mode: 9 [ 250.175212][T12381] xt_SECMARK: invalid mode: 9 [ 250.258565][T12387] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 252.263207][T12399] FAULT_INJECTION: forcing a failure. [ 252.263207][T12399] name failslab, interval 1, probability 0, space 0, times 0 [ 252.286347][T12399] CPU: 1 UID: 0 PID: 12399 Comm: syz.2.2186 Not tainted syzkaller #0 PREEMPT(full) [ 252.286378][T12399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 252.286391][T12399] Call Trace: [ 252.286399][T12399] [ 252.286408][T12399] dump_stack_lvl+0xe8/0x150 [ 252.286438][T12399] should_fail_ex+0x40c/0x560 [ 252.286467][T12399] should_failslab+0xa8/0x100 [ 252.286500][T12399] ? skb_clone+0x212/0x3a0 [ 252.286521][T12399] kmem_cache_alloc_noprof+0x87/0x650 [ 252.286561][T12399] skb_clone+0x212/0x3a0 [ 252.286585][T12399] __netlink_deliver_tap+0x413/0x860 [ 252.286630][T12399] ? netlink_deliver_tap+0x2e/0x1b0 [ 252.286663][T12399] netlink_deliver_tap+0x19c/0x1b0 [ 252.286702][T12399] netlink_unicast+0x77f/0x940 [ 252.286743][T12399] netlink_sendmsg+0x813/0xb40 [ 252.286786][T12399] ? __pfx_netlink_sendmsg+0x10/0x10 [ 252.286822][T12399] ? aa_sock_msg_perm+0xf1/0x1b0 [ 252.286880][T12399] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 252.286908][T12399] ? __pfx_netlink_sendmsg+0x10/0x10 [ 252.286944][T12399] ____sys_sendmsg+0x9b9/0xa20 [ 252.286977][T12399] ? __might_fault+0xaf/0x130 [ 252.287013][T12399] ? __pfx_____sys_sendmsg+0x10/0x10 [ 252.287058][T12399] ? import_iovec+0x73/0xa0 [ 252.287088][T12399] ___sys_sendmsg+0x2a5/0x360 [ 252.287121][T12399] ? __lock_acquire+0x683/0x2cd0 [ 252.287149][T12399] ? __pfx____sys_sendmsg+0x10/0x10 [ 252.287226][T12399] ? __fget_files+0x2a/0x420 [ 252.287251][T12399] ? __fget_files+0x3a2/0x420 [ 252.287291][T12399] __x64_sys_sendmsg+0x1bd/0x2a0 [ 252.287328][T12399] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 252.287378][T12399] ? __pfx_ksys_write+0x10/0x10 [ 252.287421][T12399] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.287446][T12399] do_syscall_64+0x174/0x580 [ 252.287467][T12399] ? trace_irq_disable+0x3b/0x140 [ 252.287500][T12399] ? clear_bhb_loop+0x40/0x90 [ 252.287528][T12399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.287550][T12399] RIP: 0033:0x7fcf0599ce59 [ 252.287570][T12399] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 252.287588][T12399] RSP: 002b:00007fcf067b0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 252.287611][T12399] RAX: ffffffffffffffda RBX: 00007fcf05c15fa0 RCX: 00007fcf0599ce59 [ 252.287627][T12399] RDX: 0000000000000000 RSI: 00002000000006c0 RDI: 0000000000000003 [ 252.287641][T12399] RBP: 00007fcf067b0090 R08: 0000000000000000 R09: 0000000000000000 [ 252.287654][T12399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 252.287667][T12399] R13: 00007fcf05c16038 R14: 00007fcf05c15fa0 R15: 00007ffd011f77d8 [ 252.287711][T12399] [ 252.562272][T12401] netlink: 'syz.4.2188': attribute type 1 has an invalid length. [ 252.653727][T12399] __nla_validate_parse: 7 callbacks suppressed [ 252.653746][T12399] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2186'. [ 252.677307][T12402] bond7: (slave ip6gretap0): Enslaving as a backup interface with an up link [ 252.687758][T12397] syzkaller0: entered promiscuous mode [ 252.704917][T12397] syzkaller0: entered allmulticast mode [ 252.747060][T12410] netlink: 'syz.0.2189': attribute type 39 has an invalid length. [ 252.858369][T12413] netlink: 216 bytes leftover after parsing attributes in process `syz.2.2190'. [ 252.886326][T12413] netlink: 'syz.2.2190': attribute type 2 has an invalid length. [ 252.912434][T12418] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2190'. [ 253.016949][T12422] xt_SECMARK: invalid mode: 9 [ 253.102079][T12423] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2191'. [ 253.442555][T12432] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2197'. [ 253.568599][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.605739][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 253.640365][T12442] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2199'. [ 253.903797][ T29] audit: type=1804 audit(1781462723.390:16): pid=12456 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2207" name="/newroot/443/cgroup.controllers" dev="tmpfs" ino=2267 res=1 errno=0 [ 253.985280][ T29] audit: type=1800 audit(1781462723.390:17): pid=12456 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2207" name="cgroup.controllers" dev="tmpfs" ino=2267 res=0 errno=0 [ 254.344279][T12473] netlink: 'syz.1.2214': attribute type 11 has an invalid length. [ 254.434388][T12481] bridge0: port 3(batadv1) entered blocking state [ 254.441121][T12481] bridge0: port 3(batadv1) entered forwarding state [ 254.448089][T12481] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.455388][T12481] bridge0: port 2(bridge_slave_1) entered forwarding state [ 254.462962][T12481] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.470191][T12481] bridge0: port 1(bridge_slave_0) entered forwarding state [ 254.604523][T12481] 8021q: adding VLAN 0 to HW filter on device bond1 [ 254.637596][ T48] batman_adv: batadv1: MLD Querier disappeared - multicast optimizations disabled [ 254.661469][T12481] 8021q: adding VLAN 0 to HW filter on device bond2 [ 254.746892][T12487] tipc: Enabled bearer , priority 0 [ 254.776422][T12473] syzkaller0: entered promiscuous mode [ 254.779739][ T29] audit: type=1107 audit(1781462724.260:18): pid=12471 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='gJ [ 254.779739][ T29] yk:Xd4yUH,_╆ь8' [ 254.789778][T12473] syzkaller0: entered allmulticast mode [ 254.851152][T12473] tipc: Resetting bearer [ 255.012105][T12471] tipc: Resetting bearer [ 255.073809][T12471] tipc: Disabling bearer [ 255.144826][T12478] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 255.482546][T12505] bridge4: entered promiscuous mode [ 255.533097][T12505] bridge4: entered allmulticast mode [ 255.747907][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.119892][T12553] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40 [ 256.953937][T12571] batman_adv: batadv0: Interface deactivated: wlan0 [ 257.016718][T12597] netlink: 'syz.3.2235': attribute type 10 has an invalid length. [ 257.195832][T12597] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 257.269189][T12605] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2238'. [ 257.329201][T12571] batman_adv: batadv0: Interface deactivated: wlan0 [ 257.740680][ T154] batman_adv: batadv1: MLD Querier appeared [ 257.910638][T12626] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2244'. [ 258.592325][T12664] bridge0: port 3(veth1_to_bridge) entered blocking state [ 258.626342][T12664] bridge0: port 3(veth1_to_bridge) entered disabled state [ 258.649138][T12664] veth1_to_bridge: entered allmulticast mode [ 258.666979][T12661] Can't find ip_set type bitmap:ip,mac [ 258.723091][T12664] veth1_to_bridge: entered promiscuous mode [ 258.736562][T12675] netlink: 'syz.1.2258': attribute type 10 has an invalid length. [ 258.747517][T12664] bridge0: adding interface veth1_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 258.763198][T12664] bridge0: port 3(veth1_to_bridge) entered blocking state [ 258.770529][T12664] bridge0: port 3(veth1_to_bridge) entered forwarding state [ 258.819601][T12669] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2259'. [ 258.834635][T12674] netlink: 'syz.2.2260': attribute type 5 has an invalid length. [ 258.891189][T12675] syz_tun: entered promiscuous mode [ 259.302682][T12698] FAULT_INJECTION: forcing a failure. [ 259.302682][T12698] name failslab, interval 1, probability 0, space 0, times 0 [ 259.321051][T12698] CPU: 1 UID: 0 PID: 12698 Comm: syz.4.2268 Not tainted syzkaller #0 PREEMPT(full) [ 259.321079][T12698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 259.321093][T12698] Call Trace: [ 259.321102][T12698] [ 259.321112][T12698] dump_stack_lvl+0xe8/0x150 [ 259.321143][T12698] should_fail_ex+0x40c/0x560 [ 259.321173][T12698] should_failslab+0xa8/0x100 [ 259.321215][T12698] ? skb_clone+0x212/0x3a0 [ 259.321237][T12698] kmem_cache_alloc_noprof+0x87/0x650 [ 259.321275][T12698] skb_clone+0x212/0x3a0 [ 259.321300][T12698] __netlink_deliver_tap+0x413/0x860 [ 259.321357][T12698] ? netlink_deliver_tap+0x2e/0x1b0 [ 259.321391][T12698] netlink_deliver_tap+0x19c/0x1b0 [ 259.321423][T12698] netlink_unicast+0x77f/0x940 [ 259.321463][T12698] netlink_sendmsg+0x813/0xb40 [ 259.321505][T12698] ? __pfx_netlink_sendmsg+0x10/0x10 [ 259.321540][T12698] ? aa_sock_msg_perm+0xf1/0x1b0 [ 259.321573][T12698] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 259.321601][T12698] ? __pfx_netlink_sendmsg+0x10/0x10 [ 259.321635][T12698] ____sys_sendmsg+0x9b9/0xa20 [ 259.321667][T12698] ? __might_fault+0xaf/0x130 [ 259.321701][T12698] ? __pfx_____sys_sendmsg+0x10/0x10 [ 259.321744][T12698] ? import_iovec+0x73/0xa0 [ 259.321774][T12698] ___sys_sendmsg+0x2a5/0x360 [ 259.321805][T12698] ? __lock_acquire+0x683/0x2cd0 [ 259.321832][T12698] ? __pfx____sys_sendmsg+0x10/0x10 [ 259.321903][T12698] ? __fget_files+0x2a/0x420 [ 259.321929][T12698] ? __fget_files+0x3a2/0x420 [ 259.321966][T12698] __x64_sys_sendmsg+0x1bd/0x2a0 [ 259.322003][T12698] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 259.322046][T12698] ? __pfx_ksys_write+0x10/0x10 [ 259.322087][T12698] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.322111][T12698] do_syscall_64+0x174/0x580 [ 259.322131][T12698] ? trace_irq_disable+0x3b/0x140 [ 259.322163][T12698] ? clear_bhb_loop+0x40/0x90 [ 259.322197][T12698] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.322218][T12698] RIP: 0033:0x7f15c419ce59 [ 259.322238][T12698] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 259.322255][T12698] RSP: 002b:00007f15c5129028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 259.322279][T12698] RAX: ffffffffffffffda RBX: 00007f15c4415fa0 RCX: 00007f15c419ce59 [ 259.322295][T12698] RDX: 0000000000000000 RSI: 00002000000006c0 RDI: 0000000000000003 [ 259.322308][T12698] RBP: 00007f15c5129090 R08: 0000000000000000 R09: 0000000000000000 [ 259.322321][T12698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 259.322334][T12698] R13: 00007f15c4416038 R14: 00007f15c4415fa0 R15: 00007ffd12a0d588 [ 259.322368][T12698] [ 259.322591][T12695] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2266'. [ 260.131420][T12732] netlink: 'syz.1.2277': attribute type 11 has an invalid length. [ 260.150439][T12732] netlink: 'syz.1.2277': attribute type 11 has an invalid length. [ 260.173235][T12732] netlink: 204 bytes leftover after parsing attributes in process `syz.1.2277'. [ 260.649118][T12762] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2285'. [ 260.966553][T12780] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2291'. [ 261.000854][T12780] netlink: 'syz.4.2291': attribute type 280 has an invalid length. [ 261.055358][T12784] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2293'. [ 261.193826][T12790] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2293'. [ 261.252573][T12792] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2295'. [ 261.523081][T12807] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2299'. [ 261.724932][T12814] IPVS: set_ctl: invalid protocol: 29 172.20.20.41:20004 [ 261.808490][T12819] netlink: 'syz.2.2302': attribute type 10 has an invalid length. [ 261.825068][T12819] syz_tun: entered promiscuous mode [ 261.830392][T12819] syz_tun: left allmulticast mode [ 261.859117][T12819] syz_tun: entered allmulticast mode [ 261.877255][T12819] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 261.906738][T12829] FAULT_INJECTION: forcing a failure. [ 261.906738][T12829] name failslab, interval 1, probability 0, space 0, times 0 [ 261.945703][T12827] syzkaller0: entered promiscuous mode [ 261.968274][T12827] syzkaller0: entered allmulticast mode [ 261.972012][T12829] CPU: 1 UID: 0 PID: 12829 Comm: syz.1.2304 Not tainted syzkaller #0 PREEMPT(full) [ 261.972078][T12829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 261.972109][T12829] Call Trace: [ 261.972149][T12829] [ 261.972172][T12829] dump_stack_lvl+0xe8/0x150 [ 261.972255][T12829] should_fail_ex+0x40c/0x560 [ 261.972336][T12829] should_failslab+0xa8/0x100 [ 261.972437][T12829] __kmalloc_cache_node_noprof+0x8c/0x690 [ 261.972531][T12829] ? page_pool_create_percpu+0x73/0xc70 [ 261.972608][T12829] ? __kvmalloc_node_noprof+0x53d/0x890 [ 261.972717][T12829] page_pool_create_percpu+0x73/0xc70 [ 261.972775][T12829] ? page_pool_create+0xd/0x20 [ 261.972834][T12829] bpf_test_run_xdp_live+0x23a/0x1c20 [ 261.972940][T12829] ? bpf_dispatcher_change_prog+0xc4a/0xf20 [ 261.973029][T12829] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 261.973102][T12829] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 261.973171][T12829] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 261.973313][T12829] ? 0xffffffffa0201848 [ 261.973436][T12829] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 261.973548][T12829] ? _copy_from_user+0x94/0xb0 [ 261.973613][T12829] ? bpf_test_init+0x113/0x150 [ 261.973693][T12829] ? xdp_convert_md_to_buff+0x5b/0x330 [ 261.973784][T12829] bpf_prog_test_run_xdp+0x7d8/0x11d0 [ 261.973879][T12829] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 261.973950][T12829] ? __fget_files+0x2a/0x420 [ 261.974064][T12829] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 261.974141][T12829] bpf_prog_test_run+0x2c5/0x340 [ 261.974237][T12829] __sys_bpf+0x643/0x950 [ 261.974315][T12829] ? __pfx___sys_bpf+0x10/0x10 [ 261.974433][T12829] ? ksys_write+0x242/0x270 [ 261.974518][T12829] ? __pfx_ksys_write+0x10/0x10 [ 261.974606][T12829] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.974657][T12829] __x64_sys_bpf+0x7c/0x90 [ 261.974745][T12829] do_syscall_64+0x174/0x580 [ 261.974799][T12829] ? trace_irq_disable+0x3b/0x140 [ 261.974901][T12829] ? clear_bhb_loop+0x40/0x90 [ 261.974975][T12829] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.975101][T12829] RIP: 0033:0x7f31d379ce59 [ 261.975155][T12829] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 261.975200][T12829] RSP: 002b:00007f31d4725028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 261.975263][T12829] RAX: ffffffffffffffda RBX: 00007f31d3a15fa0 RCX: 00007f31d379ce59 [ 261.975305][T12829] RDX: 0000000000000050 RSI: 00002000000006c0 RDI: 000000000000000a [ 261.975338][T12829] RBP: 00007f31d4725090 R08: 0000000000000000 R09: 0000000000000000 [ 261.975386][T12829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 261.975432][T12829] R13: 00007f31d3a16038 R14: 00007f31d3a15fa0 R15: 00007ffdd01f9878 [ 261.975540][T12829] [ 262.456480][T12846] FAULT_INJECTION: forcing a failure. [ 262.456480][T12846] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 262.478083][T12827] tipc: Enabled bearer , priority 0 [ 262.487565][T12846] CPU: 1 UID: 0 PID: 12846 Comm: syz.1.2309 Not tainted syzkaller #0 PREEMPT(full) [ 262.487606][T12846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 262.487619][T12846] Call Trace: [ 262.487628][T12846] [ 262.487637][T12846] dump_stack_lvl+0xe8/0x150 [ 262.487667][T12846] should_fail_ex+0x40c/0x560 [ 262.487695][T12846] _copy_to_user+0x31/0xb0 [ 262.487724][T12846] simple_read_from_buffer+0xe1/0x170 [ 262.487757][T12846] proc_fail_nth_read+0x1bb/0x230 [ 262.487808][T12846] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 262.487840][T12846] ? rw_verify_area+0x24a/0x4c0 [ 262.487873][T12846] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 262.487901][T12846] vfs_read+0x213/0xa80 [ 262.487936][T12846] ? __pfx___mutex_lock+0x10/0x10 [ 262.487983][T12846] ? __pfx_vfs_read+0x10/0x10 [ 262.488014][T12846] ? __fget_files+0x2a/0x420 [ 262.488044][T12846] ? __fget_files+0x3a2/0x420 [ 262.488086][T12846] ? __fget_files+0x2a/0x420 [ 262.488122][T12846] ksys_read+0x150/0x270 [ 262.488156][T12846] ? __pfx_ksys_read+0x10/0x10 [ 262.488197][T12846] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.488222][T12846] do_syscall_64+0x174/0x580 [ 262.488243][T12846] ? trace_irq_disable+0x3b/0x140 [ 262.488275][T12846] ? clear_bhb_loop+0x40/0x90 [ 262.488303][T12846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.488326][T12846] RIP: 0033:0x7f31d375d68e [ 262.488345][T12846] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 262.488365][T12846] RSP: 002b:00007f31d4724fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 262.488387][T12846] RAX: ffffffffffffffda RBX: 00007f31d47256c0 RCX: 00007f31d375d68e [ 262.488415][T12846] RDX: 000000000000000f RSI: 00007f31d47250a0 RDI: 0000000000000004 [ 262.488429][T12846] RBP: 00007f31d4725090 R08: 0000000000000000 R09: 0000000000000000 [ 262.488442][T12846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 262.488455][T12846] R13: 00007f31d3a16038 R14: 00007f31d3a15fa0 R15: 00007ffdd01f9878 [ 262.488490][T12846] [ 262.712371][T12824] tipc: Resetting bearer [ 262.800100][T12854] netlink: 'syz.4.2311': attribute type 1 has an invalid length. [ 262.810125][T12824] tipc: Disabling bearer [ 262.848668][T12854] netlink: 'syz.4.2311': attribute type 1 has an invalid length. [ 262.986842][T12862] __nla_validate_parse: 3 callbacks suppressed [ 262.986863][T12862] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2313'. [ 263.746233][T12900] netlink: 'syz.4.2321': attribute type 1 has an invalid length. [ 264.202588][T12926] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2326'. [ 264.252796][T12926] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2326'. [ 264.297128][T12933] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2331'. [ 264.330724][T12926] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2326'. [ 264.351967][T12934] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2331'. [ 264.390221][T12936] lo speed is unknown, defaulting to 1000 [ 264.495247][T12936] lo speed is unknown, defaulting to 1000 [ 264.644614][T12936] lo speed is unknown, defaulting to 1000 [ 264.674967][T12951] veth0: entered promiscuous mode [ 264.686855][T12951] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2333'. [ 264.713431][T12936] smbdirect: ib_dev[sy2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 264.755502][T12951] veth0 (unregistering): left promiscuous mode [ 264.765946][T12936] smbdirect: ib_dev[sy2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 264.808986][T12936] smbdirect: ib_dev[sy2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 264.887025][T12936] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 264.979121][T12936] infiniband sy2: RDMA CMA: cma_listen_on_dev, error -98 [ 265.039934][T12967] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2337'. [ 265.121654][T12972] netlink: 'syz.3.2339': attribute type 2 has an invalid length. [ 265.140444][T12972] netlink: 'syz.3.2339': attribute type 2 has an invalid length. [ 265.253039][T12936] lo speed is unknown, defaulting to 1000 [ 265.330103][T12936] lo speed is unknown, defaulting to 1000 [ 265.385181][T12936] lo speed is unknown, defaulting to 1000 [ 265.417306][T12990] xt_SECMARK: invalid mode: 9 [ 265.433392][T12936] lo speed is unknown, defaulting to 1000 [ 265.478061][T12936] lo speed is unknown, defaulting to 1000 [ 265.722605][T13002] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 265.738009][T13002] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 265.796369][T13002] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 265.843435][T13010] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2350'. [ 265.886084][T13010] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2350'. [ 265.904093][T13002] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 265.917229][T13010] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 266.654951][T13037] netlink: 'syz.4.2359': attribute type 11 has an invalid length. [ 266.735398][T13040] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 267.990787][T13100] __nla_validate_parse: 3 callbacks suppressed [ 267.990807][T13100] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2383'. [ 268.082433][T13103] lo: entered promiscuous mode [ 268.113771][T13103] netlink: 'syz.0.2381': attribute type 2 has an invalid length. [ 268.136950][T13103] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 268.232991][ T42] lo speed is unknown, defaulting to 1000 [ 268.253013][ T42] sy2: Port: 1 Link DOWN [ 268.267301][T13113] tipc: Resetting bearer [ 268.300788][T13103] smc: net device team0 applied user defined pnetid SYZ2 [ 268.316723][T12369] tipc: Resetting bearer [ 268.520356][T13126] netlink: 'syz.1.2387': attribute type 11 has an invalid length. [ 268.638303][T13126] veth1_vlan: entered promiscuous mode [ 268.713392][T13136] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2390'. [ 268.735718][T13140] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2390'. [ 268.751526][T13130] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2388'. [ 268.765422][T13130] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2388'. [ 268.791323][T13130] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2388'. [ 268.801281][T13130] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2388'. [ 268.822064][T13130] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2388'. [ 268.873769][T13126] tipc: Enabled bearer , priority 0 [ 268.891000][ T29] audit: type=1107 audit(1781462738.370:19): pid=13125 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='gJ [ 268.891000][ T29] yk:Xd4yUH,_╆ь8' [ 268.933620][T13131] syzkaller0: entered promiscuous mode [ 268.953252][T13131] syzkaller0: entered allmulticast mode [ 268.991211][T13126] tipc: Resetting bearer [ 269.034622][T13125] tipc: Resetting bearer [ 269.044707][T13151] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 269.124961][T13125] tipc: Disabling bearer [ 269.226683][T13161] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 269.315841][T13166] netlink: 'syz.2.2401': attribute type 1 has an invalid length. [ 269.349636][T13166] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2401'. [ 269.503523][T13175] tipc: Enabled bearer , priority 0 [ 269.524566][T13175] syzkaller0: entered promiscuous mode [ 269.544314][T13175] syzkaller0: entered allmulticast mode [ 269.612249][T13175] tipc: Resetting bearer [ 269.655366][T13182] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2408'. [ 269.668828][T13185] netlink: 'syz.0.2406': attribute type 30 has an invalid length. [ 269.678129][T13179] netlink: 'syz.0.2406': attribute type 30 has an invalid length. [ 269.685431][T13186] rdma_rxe: rxe_newlink: failed to add lo [ 269.694247][T13171] tipc: Resetting bearer [ 269.712112][T13171] tipc: Disabling bearer [ 269.726009][T13180] lo speed is unknown, defaulting to 1000 [ 269.832288][T13180] lo speed is unknown, defaulting to 1000 [ 269.850683][T13180] lo speed is unknown, defaulting to 1000 [ 270.113913][T13198] netlink: 'syz.0.2413': attribute type 11 has an invalid length. [ 270.275004][T13203] batman_adv: batadv0: Interface activated: wlan0 [ 270.317618][ T5769] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 270.355322][T13203] 8021q: adding VLAN 0 to HW filter on device bond3 [ 270.473457][ T29] audit: type=1107 audit(1781462739.960:20): pid=13197 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='gJ [ 270.473457][ T29] yk:Xd4yUH,_╆ь8' [ 270.496768][T13204] tipc: Resetting bearer [ 270.508398][T13204] tipc: Resetting bearer [ 270.521763][ T5755] lo speed is unknown, defaulting to 1000 [ 270.521880][T13210] lo: left allmulticast mode [ 270.527821][ T5755] sy2: Port: 1 Link ACTIVE [ 270.556879][T13180] infiniband sz1: set active [ 270.562103][T13180] infiniband sz1: added lo [ 270.591145][T13180] smbdirect: ib_dev[sz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 270.610810][T13210] tunl0: left allmulticast mode [ 270.615986][T13180] smbdirect: ib_dev[sz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 270.633560][T13210] gre0: left allmulticast mode [ 270.633567][T13180] smbdirect: ib_dev[sz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 270.662076][T13221] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 270.687991][T13180] RDS/IB: sz1: added [ 270.698682][T13180] smc: adding ib device sz1 with port count 1 [ 270.710328][T13180] smc: ib device sz1 port 1 has no pnetid [ 270.732180][T13210] gretap0: left allmulticast mode [ 270.738975][T13210] erspan0: left allmulticast mode [ 270.745227][T13210] ip_vti0: left allmulticast mode [ 270.751441][T13210] ip6_vti0: left allmulticast mode [ 270.758220][T13210] sit0: left allmulticast mode [ 270.794277][T13210] ip6tnl0: left allmulticast mode [ 270.801722][T13210] ip6gre0: left allmulticast mode [ 270.808341][T13210] syz_tun: left promiscuous mode [ 270.826217][T13210] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.833507][T13210] bridge0: port 1(bridge_slave_0) entered forwarding state [ 270.844226][T13210] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.851404][T13210] bridge0: port 2(bridge_slave_1) entered forwarding state [ 270.878686][T13210] vlan0: left promiscuous mode [ 270.897027][T13210] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 270.906850][T13210] sit1: left promiscuous mode [ 270.911978][T13210] sit1: left allmulticast mode [ 270.920640][T13210] bond1: left promiscuous mode [ 270.925683][T13210] bridge2: left promiscuous mode [ 270.931434][T13210] bond1: left allmulticast mode [ 270.936417][T13210] bridge2: left allmulticast mode [ 270.950711][T13210] bond3: left promiscuous mode [ 270.955833][T13210] bond3: left allmulticast mode [ 270.962127][T13210] geneve2: left promiscuous mode [ 270.970284][T13210] mac80211_hwsim hwsim11 syzkaller0: left promiscuous mode [ 270.977684][T13210] mac80211_hwsim hwsim11 syzkaller0: left allmulticast mode [ 270.985344][T13210] tipc: Resetting bearer [ 270.992770][T13210] bond6: left promiscuous mode [ 270.998349][T13210] bridge3: left promiscuous mode [ 271.005702][T13210] gretap3: left promiscuous mode [ 271.013281][T13210] gretap3: left allmulticast mode [ 271.034878][T13203] tipc: Enabled bearer , priority 0 [ 271.042455][T13216] syzkaller0: entered promiscuous mode [ 271.055117][T13216] syzkaller0: entered allmulticast mode [ 271.086996][ T5755] lo speed is unknown, defaulting to 1000 [ 271.096827][T13218] tipc: Resetting bearer [ 271.173536][T13197] tipc: Resetting bearer [ 271.208432][T13197] tipc: Disabling bearer [ 271.224045][ T5769] lo speed is unknown, defaulting to 1000 [ 271.252254][T13180] lo speed is unknown, defaulting to 1000 [ 271.540804][ T5769] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 271.551386][T13240] xt_SECMARK: invalid mode: 9 [ 272.052526][T13253] openvswitch: netlink: Flow actions attr not present in new flow. [ 272.103533][T13254] netlink: 'syz.3.2429': attribute type 21 has an invalid length. [ 272.132752][T13257] netlink: 'syz.1.2430': attribute type 11 has an invalid length. [ 272.161306][T13257] netlink: 'syz.1.2430': attribute type 11 has an invalid length. [ 272.174867][T13180] lo speed is unknown, defaulting to 1000 [ 272.614383][T13268] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 272.683924][T13180] lo speed is unknown, defaulting to 1000 [ 272.866248][T13279] netlink: 'syz.0.2435': attribute type 11 has an invalid length. [ 273.074055][ T5755] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 273.109854][T13286] xt_SECMARK: invalid mode: 9 [ 273.132210][T13287] __nla_validate_parse: 4 callbacks suppressed [ 273.132228][T13287] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2438'. [ 273.157093][T13279] tipc: Enabled bearer , priority 0 [ 273.174182][ T29] audit: type=1107 audit(1781462742.660:21): pid=13278 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='gJ [ 273.174182][ T29] yk:Xd4yUH,_╆ь8' [ 273.193538][T13280] syzkaller0: entered promiscuous mode [ 273.200974][T13280] syzkaller0: entered allmulticast mode [ 273.208752][T13283] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2436'. [ 273.210992][T13180] lo speed is unknown, defaulting to 1000 [ 273.228896][T13283] syzkaller0: entered promiscuous mode [ 273.234578][T13283] syzkaller0: entered allmulticast mode [ 273.244769][T13279] tipc: Resetting bearer [ 273.286920][T13278] tipc: Resetting bearer [ 273.344038][T13291] netlink: 'syz.3.2440': attribute type 1 has an invalid length. [ 273.397667][ T5769] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 273.465371][T13278] tipc: Disabling bearer [ 273.628966][T13180] lo speed is unknown, defaulting to 1000 [ 273.682825][T13292] bond10: (slave bridge5): Enslaving as a backup interface with an up link [ 273.721367][T13293] macvlan4: entered promiscuous mode [ 273.735229][T13293] macvlan4: entered allmulticast mode [ 273.742084][T13293] bond10: entered promiscuous mode [ 273.747457][T13293] bridge5: entered promiscuous mode [ 273.753610][T13293] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 273.765632][T13293] bond10: left promiscuous mode [ 273.778436][T13293] bridge5: left promiscuous mode [ 273.796587][T13297] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2442'. [ 273.984358][T13307] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2446'. [ 273.996296][T13307] netlink: 43 bytes leftover after parsing attributes in process `syz.3.2446'. [ 274.005779][T13307] netlink: 'syz.3.2446': attribute type 6 has an invalid length. [ 274.014704][T13307] netlink: 'syz.3.2446': attribute type 5 has an invalid length. [ 274.022770][T13307] netlink: 43 bytes leftover after parsing attributes in process `syz.3.2446'. [ 274.403923][T13321] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2450'. [ 274.436327][T13325] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2452'. [ 274.478606][T13325] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2452'. [ 274.614867][T13334] gtp0: entered promiscuous mode [ 274.653700][T13334] gtp0: entered allmulticast mode [ 274.661801][T13332] netlink: 284 bytes leftover after parsing attributes in process `syz.0.2454'. [ 274.739556][T13338] netlink: 'syz.1.2457': attribute type 75 has an invalid length. [ 275.262299][ T5755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.439188][T13381] 0XD: renamed from gretap0 (while UP) [ 275.484163][T13381] 0XD: entered allmulticast mode [ 275.531073][T13384] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 275.825038][T13388] nbd4: detected capacity change from 0 to 63 [ 275.845748][T13394] block nbd4: NBD_DISCONNECT [ 275.874605][T13394] block nbd4: Disconnected due to user request. [ 275.918644][ T5643] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 275.933687][T13394] block nbd4: shutting down sockets [ 275.941175][ T5643] Buffer I/O error on dev nbd4, logical block 1, async page read [ 275.949871][ T5643] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 275.962166][ T5643] Buffer I/O error on dev nbd4, logical block 2, async page read [ 275.971783][ C0] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 275.980959][ C0] Buffer I/O error on dev nbd4, logical block 0, async page read [ 275.992088][ T1651] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 276.002692][T13403] vlan2: entered allmulticast mode [ 276.008747][ T1651] Buffer I/O error on dev nbd4, logical block 3, async page read [ 276.021082][ T5643] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 276.031275][ T5643] Buffer I/O error on dev nbd4, logical block 0, async page read [ 276.041963][ T5643] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 276.052581][ T5643] Buffer I/O error on dev nbd4, logical block 1, async page read [ 276.065569][ T5643] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 276.075457][ T5643] Buffer I/O error on dev nbd4, logical block 2, async page read [ 276.084851][ T5643] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 276.094452][ T5643] Buffer I/O error on dev nbd4, logical block 3, async page read [ 276.102920][ T5643] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 276.112389][ T5643] Buffer I/O error on dev nbd4, logical block 0, async page read [ 276.120538][ T5643] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 276.132121][ T5643] Buffer I/O error on dev nbd4, logical block 1, async page read [ 276.143237][ T5643] ldm_validate_partition_table(): Disk read failed. [ 276.165442][ T5643] Dev nbd4: unable to read RDB block 0 [ 276.211364][ T5643] nbd4: unable to read partition table [ 276.218633][ C0] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 276.269825][ T5643] ldm_validate_partition_table(): Disk read failed. [ 276.308048][ T5643] Dev nbd4: unable to read RDB block 0 [ 276.333141][ T5643] nbd4: unable to read partition table [ 276.497280][T13413] netlink: 'syz.1.2481': attribute type 1 has an invalid length. [ 276.559600][T13416] netlink: 'syz.4.2478': attribute type 10 has an invalid length. [ 276.599634][T13416] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 276.688229][T13416] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 276.730578][T13424] netlink: 'syz.2.2484': attribute type 39 has an invalid length. [ 276.969237][T13408] nbd2: detected capacity change from 0 to 63 [ 276.994942][T13413] netlink: 'syz.1.2481': attribute type 1 has an invalid length. [ 277.019154][ T5638] block nbd2: Receive control failed (result -32) [ 277.021932][ T50] block nbd2: Receive control failed (result -32) [ 277.063374][ T5643] block nbd2: Dead connection, failed to find a fallback [ 277.112862][ T5643] block nbd2: shutting down sockets [ 277.145823][ T5643] ldm_validate_partition_table(): Disk read failed. [ 277.159288][ T5643] Dev nbd2: unable to read RDB block 0 [ 277.166696][ T5643] nbd2: unable to read partition table [ 277.200433][ T5643] ldm_validate_partition_table(): Disk read failed. [ 277.230078][ T5643] Dev nbd2: unable to read RDB block 0 [ 277.252435][ T5643] nbd2: unable to read partition table [ 277.498298][T12520] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.507890][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.298094][ T5755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.474019][T13520] netlink: 'syz.4.2509': attribute type 10 has an invalid length. [ 278.510687][T13520] syz_tun: entered promiscuous mode [ 278.524525][T13527] __nla_validate_parse: 19 callbacks suppressed [ 278.524544][T13527] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2508'. [ 278.765782][T13531] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.2511'. [ 279.030356][T13551] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.035853][T13543] syzkaller0: entered promiscuous mode [ 279.041976][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.065711][T13543] syzkaller0: entered allmulticast mode [ 279.099083][T13543] openvswitch: netlink: nsh attr 6 is out of range max 3 [ 279.122309][T13543] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 279.433229][ T76] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.456788][T13569] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2524'. [ 279.478651][T13569] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2524'. [ 279.536626][T13573] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2525'. [ 279.571053][T13573] netlink: 'syz.1.2525': attribute type 1 has an invalid length. [ 279.600965][T13576] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2526'. [ 279.913430][T13596] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2533'. [ 279.972568][T13598] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2530'. [ 279.986909][T13599] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2534'. [ 280.021538][T13591] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2531'. [ 280.309923][T13608] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode [ 280.349144][T13621] netlink: 'syz.0.2540': attribute type 20 has an invalid length. [ 280.390498][T13621] netlink: 'syz.0.2540': attribute type 20 has an invalid length. [ 280.506546][T13612] bond8: Unable to set peer notification delay as MII monitoring is disabled [ 280.571250][T13612] bond8 (unregistering): Released all slaves [ 280.586451][T13636] netlink: 'syz.1.2542': attribute type 8 has an invalid length. [ 281.113406][T13623] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 281.340723][ T5755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 281.353069][T13659] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 282.697422][ T5755] page_pool_release_retry() stalled pool shutdown: id 167, 1 inflight 60 sec [ 283.259919][ T12] net_ratelimit: 1 callbacks suppressed [ 283.259939][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.273938][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.450838][T13793] netlink: 'syz.4.2585': attribute type 10 has an invalid length. [ 284.378692][ T5755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.178499][T12518] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.194397][T13786] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 286.416763][T13828] netlink: 'syz.1.2591': attribute type 1 has an invalid length. [ 286.525407][T13836] __nla_validate_parse: 22 callbacks suppressed [ 286.525427][T13836] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2593'. [ 286.552644][T13828] bond4: entered promiscuous mode [ 286.566371][T13828] 8021q: adding VLAN 0 to HW filter on device bond4 [ 286.595677][T13836] IPv6: sit1: Disabled Multicast RS [ 286.602352][T13836] sit1: entered allmulticast mode [ 286.661397][T13834] bond4: (slave bridge2): making interface the new active one [ 286.669486][T13834] bridge2: entered promiscuous mode [ 286.675598][T13834] bond4: (slave bridge2): Enslaving as an active interface with an up link [ 286.804682][T13845] netlink: 'syz.1.2597': attribute type 1 has an invalid length. [ 286.819434][T13845] netlink: 'syz.1.2597': attribute type 4 has an invalid length. [ 286.829696][T13845] netlink: 9491 bytes leftover after parsing attributes in process `syz.1.2597'. [ 286.956266][T13853] veth11: entered allmulticast mode [ 287.223212][T13823] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 287.263438][T13871] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2608'. [ 287.334290][T13871] batman_adv: batadv0: Interface activated: wlan0 [ 287.345622][T13871] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 287.393912][T13878] netlink: 'syz.2.2607': attribute type 10 has an invalid length. [ 287.418964][ T5769] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.724944][T13892] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2612'. [ 288.099273][T13911] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2619'. [ 288.129243][T13914] nbd: nbd2 already in use [ 288.137156][T13914] nbd: must specify at least one socket [ 288.168168][T13913] veth1_macvtap: left promiscuous mode [ 288.326865][T13927] netlink: 'syz.3.2622': attribute type 1 has an invalid length. [ 288.355148][T13927] netlink: 280 bytes leftover after parsing attributes in process `syz.3.2622'. [ 288.646788][T13938] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2626'. [ 288.774851][T13943] netlink: 'syz.4.2628': attribute type 1 has an invalid length. [ 288.802328][T13945] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2629'. [ 289.020222][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.028608][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.158466][T13956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.185373][T13956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.253924][T13965] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0 [ 289.282190][T13953] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2633'. [ 289.592987][T13942] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 289.774158][T13983] tipc: Enabling of bearer rejected, failed to enable media [ 289.998205][T13994] netlink: 'syz.2.2641': attribute type 14 has an invalid length. [ 290.006135][T13994] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2641'. [ 290.016944][T13994] netlink: 'syz.2.2641': attribute type 14 has an invalid length. [ 290.102998][T13996] netlink: 'syz.4.2642': attribute type 11 has an invalid length. [ 290.229193][T13996] veth1_macvtap: entered promiscuous mode [ 290.266844][T13996] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 290.417182][T13996] tipc: Enabling of bearer rejected, already enabled [ 290.465469][ T29] audit: type=1107 audit(1781462759.950:22): pid=13995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='gJ [ 290.465469][ T29] yk:Xd4yUH,_╆ь8' [ 290.491125][ T5769] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.529495][T13996] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 290.538480][T13996] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 290.546642][T13996] tipc: Resetting bearer [ 290.554644][T13996] sch_tbf: burst 0 is lower than device syzkaller0 mtu (313) ! [ 290.938398][ T76] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.009626][T14032] bond5: option lp_interval: invalid value (0) [ 291.016712][T14032] bond5: option lp_interval: allowed values 1 - 2147483647 [ 291.028467][T14032] bond5 (unregistering): Released all slaves [ 291.366081][T14058] sock: sock_set_timeout: `syz.2.2661' (pid 14058) tries to set negative timeout [ 291.575854][T14066] netlink: 'syz.1.2663': attribute type 11 has an invalid length. [ 291.749196][T14066] 8021q: adding VLAN 0 to HW filter on device bond3 [ 291.816312][T14081] __nla_validate_parse: 3 callbacks suppressed [ 291.816330][T14081] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2669'. [ 291.835717][T14076] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2667'. [ 291.841189][T14079] tipc: Enabled bearer , priority 0 [ 291.856749][T14081] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2669'. [ 291.874818][T14075] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2666'. [ 291.892684][ T29] audit: type=1107 audit(1781462761.380:23): pid=14065 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='gJ [ 291.892684][ T29] yk:Xd4yUH,_╆ь8' [ 291.895987][T14066] syzkaller0: entered promiscuous mode [ 291.945157][T14066] syzkaller0: entered allmulticast mode [ 291.987301][T14066] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 292.038885][T14066] tipc: Resetting bearer [ 292.106276][T14065] tipc: Resetting bearer [ 292.281781][T14065] tipc: Disabling bearer [ 292.388883][T14101] ieee802154 phy1 wpan1: encryption failed: -22 [ 292.401883][T14101] ieee802154 phy1 wpan1: encryption failed: -22 [ 292.526304][T14109] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2678'. [ 292.568686][T14114] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2678'. [ 292.628829][T14117] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2681'. [ 292.796528][T14124] FAULT_INJECTION: forcing a failure. [ 292.796528][T14124] name failslab, interval 1, probability 0, space 0, times 0 [ 292.841437][T14124] CPU: 0 UID: 0 PID: 14124 Comm: syz.0.2685 Not tainted syzkaller #0 PREEMPT(full) [ 292.841466][T14124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 292.841480][T14124] Call Trace: [ 292.841488][T14124] [ 292.841497][T14124] dump_stack_lvl+0xe8/0x150 [ 292.841527][T14124] should_fail_ex+0x40c/0x560 [ 292.841556][T14124] should_failslab+0xa8/0x100 [ 292.841590][T14124] ? skb_clone+0x212/0x3a0 [ 292.841611][T14124] kmem_cache_alloc_noprof+0x87/0x650 [ 292.841648][T14124] skb_clone+0x212/0x3a0 [ 292.841673][T14124] __netlink_deliver_tap+0x413/0x860 [ 292.841732][T14124] ? netlink_deliver_tap+0x2e/0x1b0 [ 292.841763][T14124] netlink_deliver_tap+0x19c/0x1b0 [ 292.841792][T14124] netlink_unicast+0x77f/0x940 [ 292.841834][T14124] netlink_sendmsg+0x813/0xb40 [ 292.841873][T14124] ? __pfx_netlink_sendmsg+0x10/0x10 [ 292.841906][T14124] ? aa_sock_msg_perm+0xf1/0x1b0 [ 292.841937][T14124] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 292.841985][T14124] ? __pfx_netlink_sendmsg+0x10/0x10 [ 292.842018][T14124] ____sys_sendmsg+0x9b9/0xa20 [ 292.842050][T14124] ? __might_fault+0xaf/0x130 [ 292.842085][T14124] ? __pfx_____sys_sendmsg+0x10/0x10 [ 292.842128][T14124] ? import_iovec+0x73/0xa0 [ 292.842158][T14124] ___sys_sendmsg+0x2a5/0x360 [ 292.842189][T14124] ? __lock_acquire+0x683/0x2cd0 [ 292.842216][T14124] ? __pfx____sys_sendmsg+0x10/0x10 [ 292.842287][T14124] ? __fget_files+0x2a/0x420 [ 292.842312][T14124] ? __fget_files+0x3a2/0x420 [ 292.842349][T14124] __x64_sys_sendmsg+0x1bd/0x2a0 [ 292.842384][T14124] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 292.842428][T14124] ? __pfx_ksys_write+0x10/0x10 [ 292.842468][T14124] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.842491][T14124] do_syscall_64+0x174/0x580 [ 292.842511][T14124] ? trace_irq_disable+0x3b/0x140 [ 292.842543][T14124] ? clear_bhb_loop+0x40/0x90 [ 292.842569][T14124] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.842609][T14124] RIP: 0033:0x7f099439ce59 [ 292.842630][T14124] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 292.842649][T14124] RSP: 002b:00007f099522e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 292.842687][T14124] RAX: ffffffffffffffda RBX: 00007f0994615fa0 RCX: 00007f099439ce59 [ 292.842703][T14124] RDX: 0000000000000040 RSI: 0000200000000100 RDI: 0000000000000003 [ 292.842716][T14124] RBP: 00007f099522e090 R08: 0000000000000000 R09: 0000000000000000 [ 292.842729][T14124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 292.842742][T14124] R13: 00007f0994616038 R14: 00007f0994615fa0 R15: 00007ffe7c389b28 [ 292.842776][T14124] [ 293.187023][T14133] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2688'. [ 293.254713][T14133] bridge0: port 3(batadv1) entered disabled state [ 293.261449][T14133] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.269135][T14133] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.434011][T14144] netlink: 'syz.1.2688': attribute type 2 has an invalid length. [ 293.498151][ T5769] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.523678][T14152] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2692'. [ 293.779592][T14162] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2695'. [ 293.990951][T14173] IPv6: sit1: Disabled Multicast RS [ 294.032014][T14175] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 294.381328][T14199] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20002 [ 294.412605][T14190] team0: Device gtp0 is up. Set it down before adding it as a team port [ 294.736959][T14211] syzkaller1: entered allmulticast mode [ 294.754742][T14217] FAULT_INJECTION: forcing a failure. [ 294.754742][T14217] name failslab, interval 1, probability 0, space 0, times 0 [ 294.780066][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.788589][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.805103][T14217] CPU: 0 UID: 0 PID: 14217 Comm: syz.4.2715 Not tainted syzkaller #0 PREEMPT(full) [ 294.805132][T14217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 294.805146][T14217] Call Trace: [ 294.805155][T14217] [ 294.805164][T14217] dump_stack_lvl+0xe8/0x150 [ 294.805194][T14217] should_fail_ex+0x40c/0x560 [ 294.805224][T14217] should_failslab+0xa8/0x100 [ 294.805261][T14217] kmem_cache_alloc_node_noprof+0x8f/0x680 [ 294.805292][T14217] ? __alloc_skb+0x189/0x7a0 [ 294.805321][T14217] ? __alloc_skb+0x1d7/0x7a0 [ 294.805349][T14217] ? __local_bh_enable_ip+0xd0/0x130 [ 294.805377][T14217] __alloc_skb+0x1d7/0x7a0 [ 294.805411][T14217] netlink_ack+0x136/0xb30 [ 294.805461][T14217] netlink_rcv_skb+0x2a4/0x4a0 [ 294.805494][T14217] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 294.805536][T14217] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 294.805580][T14217] ? bpf_lsm_capable+0x9/0x20 [ 294.805600][T14217] ? security_capable+0x7e/0x2c0 [ 294.805638][T14217] nfnetlink_rcv+0x2b9/0x28c0 [ 294.805672][T14217] ? __dev_queue_xmit+0x29b/0x37f0 [ 294.805698][T14217] ? __local_bh_enable_ip+0xd0/0x130 [ 294.805720][T14217] ? lockdep_hardirqs_on+0x7a/0x110 [ 294.805754][T14217] ? __dev_queue_xmit+0x29b/0x37f0 [ 294.805774][T14217] ? __local_bh_enable_ip+0xd0/0x130 [ 294.805794][T14217] ? __dev_queue_xmit+0x29b/0x37f0 [ 294.805815][T14217] ? __dev_queue_xmit+0x1ed7/0x37f0 [ 294.805836][T14217] ? ____sys_sendmsg+0x9b9/0xa20 [ 294.805867][T14217] ? ___sys_sendmsg+0x2a5/0x360 [ 294.805909][T14217] ? __dev_queue_xmit+0x29b/0x37f0 [ 294.805932][T14217] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 294.805967][T14217] ? __pfx___dev_queue_xmit+0x10/0x10 [ 294.805997][T14217] ? ref_tracker_free+0x689/0x830 [ 294.806024][T14217] ? __pfx_ref_tracker_free+0x10/0x10 [ 294.806058][T14217] ? __skb_clone+0x449/0x6c0 [ 294.806097][T14217] ? skb_clone+0x246/0x3a0 [ 294.806121][T14217] ? __netlink_deliver_tap+0x811/0x860 [ 294.806150][T14217] ? netlink_deliver_tap+0x2e/0x1b0 [ 294.806190][T14217] ? netlink_deliver_tap+0x2e/0x1b0 [ 294.806222][T14217] ? netlink_deliver_tap+0x2e/0x1b0 [ 294.806259][T14217] netlink_unicast+0x7bb/0x940 [ 294.806300][T14217] netlink_sendmsg+0x813/0xb40 [ 294.806343][T14217] ? __pfx_netlink_sendmsg+0x10/0x10 [ 294.806380][T14217] ? aa_sock_msg_perm+0xf1/0x1b0 [ 294.806414][T14217] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 294.806441][T14217] ? __pfx_netlink_sendmsg+0x10/0x10 [ 294.806482][T14217] ____sys_sendmsg+0x9b9/0xa20 [ 294.806536][T14217] ? __might_fault+0xaf/0x130 [ 294.806590][T14217] ? __pfx_____sys_sendmsg+0x10/0x10 [ 294.806634][T14217] ? import_iovec+0x73/0xa0 [ 294.806664][T14217] ___sys_sendmsg+0x2a5/0x360 [ 294.806697][T14217] ? __lock_acquire+0x683/0x2cd0 [ 294.806724][T14217] ? __pfx____sys_sendmsg+0x10/0x10 [ 294.806801][T14217] ? __fget_files+0x2a/0x420 [ 294.806827][T14217] ? __fget_files+0x3a2/0x420 [ 294.806865][T14217] __x64_sys_sendmsg+0x1bd/0x2a0 [ 294.806902][T14217] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 294.806945][T14217] ? __pfx_ksys_write+0x10/0x10 [ 294.806985][T14217] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.807008][T14217] do_syscall_64+0x174/0x580 [ 294.807027][T14217] ? trace_irq_disable+0x3b/0x140 [ 294.807059][T14217] ? clear_bhb_loop+0x40/0x90 [ 294.807085][T14217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.807105][T14217] RIP: 0033:0x7f15c419ce59 [ 294.807125][T14217] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 294.807143][T14217] RSP: 002b:00007f15c5129028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 294.807167][T14217] RAX: ffffffffffffffda RBX: 00007f15c4415fa0 RCX: 00007f15c419ce59 [ 294.807183][T14217] RDX: 0000000000000040 RSI: 0000200000000100 RDI: 0000000000000003 [ 294.807197][T14217] RBP: 00007f15c5129090 R08: 0000000000000000 R09: 0000000000000000 [ 294.807211][T14217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 294.807222][T14217] R13: 00007f15c4416038 R14: 00007f15c4415fa0 R15: 00007ffd12a0d588 [ 294.807257][T14217] [ 295.409028][T14231] bridge0: port 4(batadv0) entered blocking state [ 295.415801][T14231] bridge0: port 4(batadv0) entered disabled state [ 295.424401][T14231] batadv0: entered allmulticast mode [ 295.431730][T14231] batadv0: entered promiscuous mode [ 295.592887][T14245] netlink: 'syz.1.2725': attribute type 1 has an invalid length. [ 295.772209][T14245] 8021q: adding VLAN 0 to HW filter on device bond5 [ 295.879096][T12520] batman_adv: batadv0: IGMP Querier appeared [ 295.885293][T12520] batman_adv: batadv0: MLD Querier appeared [ 295.984073][T14268] netlink: 'syz.2.2732': attribute type 1 has an invalid length. [ 296.042382][T14274] netlink: 'syz.1.2735': attribute type 6 has an invalid length. [ 296.144052][T14275] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 296.154734][T14275] bond2: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 296.171932][T14275] bond2: (slave ip6gre1): making interface the new active one [ 296.180341][T14275] bond2: (slave ip6gre1): Enslaving as an active interface with an up link [ 296.466807][T14275] tipc: Enabling of bearer rejected, failed to enable media [ 296.493237][T14291] FAULT_INJECTION: forcing a failure. [ 296.493237][T14291] name failslab, interval 1, probability 0, space 0, times 0 [ 296.507712][T14291] CPU: 0 UID: 0 PID: 14291 Comm: syz.0.2738 Not tainted syzkaller #0 PREEMPT(full) [ 296.507740][T14291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 296.507753][T14291] Call Trace: [ 296.507762][T14291] [ 296.507771][T14291] dump_stack_lvl+0xe8/0x150 [ 296.507800][T14291] should_fail_ex+0x40c/0x560 [ 296.507829][T14291] should_failslab+0xa8/0x100 [ 296.507864][T14291] kmem_cache_alloc_node_noprof+0x8f/0x680 [ 296.507896][T14291] ? __alloc_skb+0x1d7/0x7a0 [ 296.507923][T14291] ? __local_bh_enable_ip+0xd0/0x130 [ 296.507950][T14291] __alloc_skb+0x1d7/0x7a0 [ 296.507983][T14291] netlink_ack+0x136/0xb30 [ 296.508011][T14291] ? __pfx_genl_rcv_msg+0x10/0x10 [ 296.508036][T14291] ? __pfx_nl80211_post_doit+0x10/0x10 [ 296.508076][T14291] ? __pfx_ref_tracker_free+0x10/0x10 [ 296.508111][T14291] netlink_rcv_skb+0x2a4/0x4a0 [ 296.508147][T14291] ? __pfx_genl_rcv_msg+0x10/0x10 [ 296.508172][T14291] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 296.508219][T14291] ? down_read+0x270/0x2e0 [ 296.508241][T14291] ? genl_rcv+0xd/0x40 [ 296.508265][T14291] genl_rcv+0x28/0x40 [ 296.508286][T14291] netlink_unicast+0x7bb/0x940 [ 296.508325][T14291] netlink_sendmsg+0x813/0xb40 [ 296.508367][T14291] ? __pfx_netlink_sendmsg+0x10/0x10 [ 296.508402][T14291] ? aa_sock_msg_perm+0xf1/0x1b0 [ 296.508435][T14291] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 296.508462][T14291] ? __pfx_netlink_sendmsg+0x10/0x10 [ 296.508496][T14291] ____sys_sendmsg+0x9b9/0xa20 [ 296.508528][T14291] ? __might_fault+0xaf/0x130 [ 296.508569][T14291] ? __pfx_____sys_sendmsg+0x10/0x10 [ 296.508611][T14291] ? import_iovec+0x73/0xa0 [ 296.508642][T14291] ___sys_sendmsg+0x2a5/0x360 [ 296.508673][T14291] ? __lock_acquire+0x683/0x2cd0 [ 296.508700][T14291] ? __pfx____sys_sendmsg+0x10/0x10 [ 296.508770][T14291] ? __fget_files+0x2a/0x420 [ 296.508795][T14291] ? __fget_files+0x3a2/0x420 [ 296.508832][T14291] __x64_sys_sendmsg+0x1bd/0x2a0 [ 296.508867][T14291] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 296.508910][T14291] ? __pfx_ksys_write+0x10/0x10 [ 296.508950][T14291] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.508973][T14291] do_syscall_64+0x174/0x580 [ 296.508992][T14291] ? trace_irq_disable+0x3b/0x140 [ 296.509024][T14291] ? clear_bhb_loop+0x40/0x90 [ 296.509050][T14291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.509071][T14291] RIP: 0033:0x7f099439ce59 [ 296.509090][T14291] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 296.509108][T14291] RSP: 002b:00007f099522e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 296.509130][T14291] RAX: ffffffffffffffda RBX: 00007f0994615fa0 RCX: 00007f099439ce59 [ 296.509146][T14291] RDX: 0000000000000000 RSI: 00002000000006c0 RDI: 0000000000000003 [ 296.509159][T14291] RBP: 00007f099522e090 R08: 0000000000000000 R09: 0000000000000000 [ 296.509172][T14291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 296.509184][T14291] R13: 00007f0994616038 R14: 00007f0994615fa0 R15: 00007ffe7c389b28 [ 296.509248][T14291] [ 296.850857][T12520] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.892378][ T5769] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.133916][T14293] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 297.164164][T14313] __nla_validate_parse: 13 callbacks suppressed [ 297.164186][T14313] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2741'. [ 297.328726][T14321] openvswitch: netlink: IPv4 tun info is not correct [ 297.365904][T14322] netlink: 'syz.2.2743': attribute type 11 has an invalid length. [ 297.404099][T14322] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2743'. [ 297.547992][T14326] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 297.555453][T14326] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 297.624052][T14333] netlink: 'syz.2.2749': attribute type 11 has an invalid length. [ 297.649777][T14334] veth0: entered promiscuous mode [ 297.755918][T14339] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2750'. [ 297.779586][T14337] bond0: entered promiscuous mode [ 297.786310][T14337] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 297.803938][T14337] 8021q: adding VLAN 0 to HW filter on device eth0 [ 297.813929][T14337] 8021q: adding VLAN 0 to HW filter on device eth1 [ 297.823188][T14337] 8021q: adding VLAN 0 to HW filter on device eth2 [ 297.832460][T14337] 8021q: adding VLAN 0 to HW filter on device eth3 [ 297.843543][T14337] 8021q: adding VLAN 0 to HW filter on device bond2 [ 297.857019][ T5738] lo speed is unknown, defaulting to 1000 [ 297.861603][T14336] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2751'. [ 297.891433][T14348] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2750'. [ 297.931987][T14327] veth0: left promiscuous mode [ 297.940413][ T29] audit: type=1107 audit(1781462767.430:24): pid=14332 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='gJ [ 297.940413][ T29] yk:Xd4yUH,_╆ь8' [ 297.964834][T14337] tipc: Enabled bearer , priority 0 [ 297.985469][T14333] syzkaller0: entered promiscuous mode [ 297.994335][T14333] syzkaller0: entered allmulticast mode [ 298.023226][T14337] sch_tbf: peakrate 11 is lower than or equals to rate 2048 ! [ 298.087135][T14333] tipc: Resetting bearer [ 298.156045][T14332] tipc: Resetting bearer [ 298.167929][T14354] netlink: 'syz.1.2755': attribute type 1 has an invalid length. [ 298.176368][T14354] netlink: 'syz.1.2755': attribute type 2 has an invalid length. [ 298.200493][T14354] netlink: 'syz.1.2755': attribute type 1 has an invalid length. [ 298.215807][T14354] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2755'. [ 298.233320][T14332] tipc: Disabling bearer [ 299.149950][T14406] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 299.812729][T14442] netlink: 220 bytes leftover after parsing attributes in process `syz.0.2781'. [ 299.826182][T14443] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 299.869877][T14446] netlink: 'syz.3.2785': attribute type 21 has an invalid length. [ 299.894947][T14446] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2785'. [ 299.934126][T14448] netlink: 'syz.2.2786': attribute type 3 has an invalid length. [ 300.202738][T14455] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2790'. [ 300.666896][T14480] openvswitch: netlink: IP tunnel dst address not specified [ 300.777800][ T50] Bluetooth: hci4: command 0x0405 tx timeout [ 300.816529][ T50] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 300.831487][ T50] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 300.840030][ T50] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 300.851773][ T50] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 300.861897][ T50] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 300.948968][T14490] FAULT_INJECTION: forcing a failure. [ 300.948968][T14490] name failslab, interval 1, probability 0, space 0, times 0 [ 300.991302][T14490] CPU: 1 UID: 0 PID: 14490 Comm: syz.4.2799 Not tainted syzkaller #0 PREEMPT(full) [ 300.991332][T14490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 300.991357][T14490] Call Trace: [ 300.991366][T14490] [ 300.991375][T14490] dump_stack_lvl+0xe8/0x150 [ 300.991406][T14490] should_fail_ex+0x40c/0x560 [ 300.991435][T14490] should_failslab+0xa8/0x100 [ 300.991473][T14490] __kmalloc_cache_noprof+0x88/0x660 [ 300.991504][T14490] ? lockdep_hardirqs_on+0x7a/0x110 [ 300.991539][T14490] ? __request_module+0x2d0/0x630 [ 300.991570][T14490] __request_module+0x2d0/0x630 [ 300.991601][T14490] ? __pfx___request_module+0x10/0x10 [ 300.991631][T14490] ? __pfx___up_read+0x10/0x10 [ 300.991680][T14490] crypto_alg_mod_lookup+0xa2/0x5d0 [ 300.991715][T14490] crypto_has_alg+0x26/0x190 [ 300.991747][T14490] tipc_aead_key_validate+0x2b/0x210 [ 300.991777][T14490] tipc_nl_node_set_key+0x5c1/0xa20 [ 300.991811][T14490] ? __pfx_tipc_nl_node_set_key+0x10/0x10 [ 300.991844][T14490] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 300.991871][T14490] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 300.991907][T14490] genl_family_rcv_msg_doit+0x233/0x340 [ 300.991942][T14490] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 300.991983][T14490] ? bpf_lsm_capable+0x9/0x20 [ 300.992011][T14490] ? security_capable+0x7e/0x2c0 [ 300.992049][T14490] genl_rcv_msg+0x614/0x7a0 [ 300.992082][T14490] ? __pfx_genl_rcv_msg+0x10/0x10 [ 300.992106][T14490] ? __pfx_tipc_nl_node_set_key+0x10/0x10 [ 300.992133][T14490] ? __pfx_ref_tracker_free+0x10/0x10 [ 300.992175][T14490] netlink_rcv_skb+0x226/0x4a0 [ 300.992210][T14490] ? __pfx_genl_rcv_msg+0x10/0x10 [ 300.992237][T14490] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 300.992294][T14490] ? down_read+0x270/0x2e0 [ 300.992316][T14490] ? genl_rcv+0xd/0x40 [ 300.992341][T14490] genl_rcv+0x28/0x40 [ 300.992364][T14490] netlink_unicast+0x7bb/0x940 [ 300.992404][T14490] netlink_sendmsg+0x813/0xb40 [ 300.992448][T14490] ? __pfx_netlink_sendmsg+0x10/0x10 [ 300.992486][T14490] ? aa_sock_msg_perm+0xf1/0x1b0 [ 300.992520][T14490] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 300.992547][T14490] ? __pfx_netlink_sendmsg+0x10/0x10 [ 300.992582][T14490] ____sys_sendmsg+0x9b9/0xa20 [ 300.992615][T14490] ? __might_fault+0xaf/0x130 [ 300.992652][T14490] ? __pfx_____sys_sendmsg+0x10/0x10 [ 300.992695][T14490] ? import_iovec+0x73/0xa0 [ 300.992724][T14490] ___sys_sendmsg+0x2a5/0x360 [ 300.992757][T14490] ? __lock_acquire+0x683/0x2cd0 [ 300.992784][T14490] ? __pfx____sys_sendmsg+0x10/0x10 [ 300.992859][T14490] ? __fget_files+0x2a/0x420 [ 300.992886][T14490] ? __fget_files+0x3a2/0x420 [ 300.992927][T14490] __x64_sys_sendmsg+0x1bd/0x2a0 [ 300.992965][T14490] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 300.993010][T14490] ? __pfx_ksys_write+0x10/0x10 [ 300.993053][T14490] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.993077][T14490] do_syscall_64+0x174/0x580 [ 300.993097][T14490] ? trace_irq_disable+0x3b/0x140 [ 300.993129][T14490] ? clear_bhb_loop+0x40/0x90 [ 300.993156][T14490] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.993177][T14490] RIP: 0033:0x7f15c419ce59 [ 300.993197][T14490] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 300.993216][T14490] RSP: 002b:00007f15c5129028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 300.993239][T14490] RAX: ffffffffffffffda RBX: 00007f15c4415fa0 RCX: 00007f15c419ce59 [ 300.993262][T14490] RDX: 00000000000048c0 RSI: 0000200000000540 RDI: 0000000000000003 [ 300.993276][T14490] RBP: 00007f15c5129090 R08: 0000000000000000 R09: 0000000000000000 [ 300.993289][T14490] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 300.993302][T14490] R13: 00007f15c4416038 R14: 00007f15c4415fa0 R15: 00007ffd12a0d588 [ 300.993337][T14490] [ 301.688431][ T5641] bond0: (slave syz_tun): Releasing backup interface [ 301.791717][T14507] siw: device registration error -23 [ 301.997051][T14514] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2807'. [ 302.233806][T14514] macvlan0: entered promiscuous mode [ 302.636020][T14548] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2813'. [ 302.650916][T14485] lo speed is unknown, defaulting to 1000 [ 302.673897][T14552] ieee802154 phy1 wpan1: encryption failed: -22 [ 302.750387][T14485] lo speed is unknown, defaulting to 1000 [ 302.770117][T14557] netlink: 'syz.0.2815': attribute type 1 has an invalid length. [ 302.938490][ T5638] Bluetooth: hci5: command tx timeout [ 303.380452][T14580] FAULT_INJECTION: forcing a failure. [ 303.380452][T14580] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 303.433651][T14580] CPU: 1 UID: 0 PID: 14580 Comm: syz.1.2823 Not tainted syzkaller #0 PREEMPT(full) [ 303.433680][T14580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 303.433693][T14580] Call Trace: [ 303.433701][T14580] [ 303.433710][T14580] dump_stack_lvl+0xe8/0x150 [ 303.433741][T14580] should_fail_ex+0x40c/0x560 [ 303.433769][T14580] _copy_from_user+0x2d/0xb0 [ 303.433797][T14580] ___sys_sendmsg+0x1c6/0x360 [ 303.433831][T14580] ? __lock_acquire+0x683/0x2cd0 [ 303.433859][T14580] ? __pfx____sys_sendmsg+0x10/0x10 [ 303.433930][T14580] ? __fget_files+0x2a/0x420 [ 303.433956][T14580] ? __fget_files+0x3a2/0x420 [ 303.433993][T14580] __x64_sys_sendmsg+0x1bd/0x2a0 [ 303.434030][T14580] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 303.434081][T14580] ? __pfx_ksys_write+0x10/0x10 [ 303.434122][T14580] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.434146][T14580] do_syscall_64+0x174/0x580 [ 303.434166][T14580] ? trace_irq_disable+0x3b/0x140 [ 303.434198][T14580] ? clear_bhb_loop+0x40/0x90 [ 303.434225][T14580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.434247][T14580] RIP: 0033:0x7f31d379ce59 [ 303.434266][T14580] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 303.434285][T14580] RSP: 002b:00007f31d4725028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 303.434307][T14580] RAX: ffffffffffffffda RBX: 00007f31d3a15fa0 RCX: 00007f31d379ce59 [ 303.434322][T14580] RDX: 0000000000000000 RSI: 00002000000006c0 RDI: 0000000000000003 [ 303.434336][T14580] RBP: 00007f31d4725090 R08: 0000000000000000 R09: 0000000000000000 [ 303.434349][T14580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 303.434362][T14580] R13: 00007f31d3a16038 R14: 00007f31d3a15fa0 R15: 00007ffdd01f9878 [ 303.434396][T14580] [ 303.843724][T14593] netlink: 'syz.1.2827': attribute type 1 has an invalid length. [ 303.895398][T14595] FAULT_INJECTION: forcing a failure. [ 303.895398][T14595] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 303.910390][T14595] CPU: 0 UID: 0 PID: 14595 Comm: syz.0.2828 Not tainted syzkaller #0 PREEMPT(full) [ 303.910418][T14595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 303.910431][T14595] Call Trace: [ 303.910439][T14595] [ 303.910447][T14595] dump_stack_lvl+0xe8/0x150 [ 303.910488][T14595] should_fail_ex+0x40c/0x560 [ 303.910514][T14595] _copy_from_user+0x2d/0xb0 [ 303.910539][T14595] ___sys_sendmsg+0x1c6/0x360 [ 303.910570][T14595] ? __lock_acquire+0x683/0x2cd0 [ 303.910595][T14595] ? __pfx____sys_sendmsg+0x10/0x10 [ 303.910660][T14595] ? __fget_files+0x2a/0x420 [ 303.910683][T14595] ? __fget_files+0x3a2/0x420 [ 303.910718][T14595] __x64_sys_sendmsg+0x1bd/0x2a0 [ 303.910750][T14595] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 303.910797][T14595] ? __pfx_ksys_write+0x10/0x10 [ 303.910833][T14595] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.910856][T14595] do_syscall_64+0x174/0x580 [ 303.910875][T14595] ? trace_irq_disable+0x3b/0x140 [ 303.910904][T14595] ? clear_bhb_loop+0x40/0x90 [ 303.910929][T14595] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.910949][T14595] RIP: 0033:0x7f099439ce59 [ 303.910967][T14595] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 303.910984][T14595] RSP: 002b:00007f099522e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 303.911005][T14595] RAX: ffffffffffffffda RBX: 00007f0994615fa0 RCX: 00007f099439ce59 [ 303.911019][T14595] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 303.911031][T14595] RBP: 00007f099522e090 R08: 0000000000000000 R09: 0000000000000000 [ 303.911044][T14595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 303.911056][T14595] R13: 00007f0994616038 R14: 00007f0994615fa0 R15: 00007ffe7c389b28 [ 303.911087][T14595] [ 304.183747][T14595] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 304.215069][T14595] 8021q: adding VLAN 0 to HW filter on device bond5 [ 304.230212][ T5769] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 304.252245][T14604] syz.2.2829 (14604) used obsolete PPPIOCDETACH ioctl [ 304.260353][T14610] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2831'. [ 304.295165][T14613] netlink: 'syz.1.2832': attribute type 1 has an invalid length. [ 304.372200][T14613] bond6: entered promiscuous mode [ 304.380955][T14613] 8021q: adding VLAN 0 to HW filter on device bond6 [ 304.538945][ T5769] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 304.556594][T14616] bond8: (slave ip6tnl0): Device is not bonding slave [ 304.569042][T14624] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2836'. [ 304.578624][T14616] bond8: option active_slave: invalid value (ip6tnl0) [ 304.589213][T14625] netlink: 108 bytes leftover after parsing attributes in process `syz.1.2832'. [ 304.591971][T14616] bond8 (unregistering): Released all slaves [ 304.661971][T14620] bond6: (slave bridge3): making interface the new active one [ 304.673478][T14620] bridge3: entered promiscuous mode [ 304.688635][T14620] bond6: (slave bridge3): Enslaving as an active interface with an up link [ 304.709812][T14627] lo: left promiscuous mode [ 304.741219][T14627] 0XD: left allmulticast mode [ 304.832061][T14627] ip6tnl0: left allmulticast mode [ 304.875727][T14627] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.883653][T14627] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.949469][T14627] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 305.010940][ T5769] lo speed is unknown, defaulting to 1000 [ 305.017784][ T5638] Bluetooth: hci5: command tx timeout [ 305.028704][ T5769] sy2: Port: 1 Link DOWN [ 305.063481][T14642] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2840'. [ 305.522845][T14668] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2847'. [ 305.612823][T14679] netlink: 'syz.0.2848': attribute type 10 has an invalid length. [ 305.732479][T14485] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.752786][T14681] netlink: 'syz.2.2849': attribute type 1 has an invalid length. [ 305.795886][T14485] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.819583][T14485] bridge_slave_0: entered allmulticast mode [ 305.846415][T14485] bridge_slave_0: entered promiscuous mode [ 305.949330][T14681] 8021q: adding VLAN 0 to HW filter on device bond3 [ 305.965725][T14686] vlan0: entered promiscuous mode [ 305.976878][T14485] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.991687][T14485] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.999573][T14485] bridge_slave_1: entered allmulticast mode [ 306.008376][T14485] bridge_slave_1: entered promiscuous mode [ 306.017997][T14690] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2853'. [ 306.154202][T14485] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 306.154414][T14703] FAULT_INJECTION: forcing a failure. [ 306.154414][T14703] name failslab, interval 1, probability 0, space 0, times 0 [ 306.186619][T14703] CPU: 0 UID: 0 PID: 14703 Comm: syz.1.2855 Not tainted syzkaller #0 PREEMPT(full) [ 306.186645][T14703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 306.186658][T14703] Call Trace: [ 306.186666][T14703] [ 306.186674][T14703] dump_stack_lvl+0xe8/0x150 [ 306.186702][T14703] should_fail_ex+0x40c/0x560 [ 306.186727][T14703] should_failslab+0xa8/0x100 [ 306.186760][T14703] kmem_cache_alloc_node_noprof+0x8f/0x680 [ 306.186788][T14703] ? __alloc_skb+0x189/0x7a0 [ 306.186832][T14703] ? __alloc_skb+0x1d7/0x7a0 [ 306.186860][T14703] ? __local_bh_enable_ip+0xd0/0x130 [ 306.186888][T14703] __alloc_skb+0x1d7/0x7a0 [ 306.186922][T14703] netlink_sendmsg+0x5d4/0xb40 [ 306.186977][T14703] ? __pfx_netlink_sendmsg+0x10/0x10 [ 306.187013][T14703] ? aa_sock_msg_perm+0xf1/0x1b0 [ 306.187046][T14703] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 306.187073][T14703] ? __pfx_netlink_sendmsg+0x10/0x10 [ 306.187107][T14703] ____sys_sendmsg+0x9b9/0xa20 [ 306.187157][T14703] ? __might_fault+0xaf/0x130 [ 306.187192][T14703] ? __pfx_____sys_sendmsg+0x10/0x10 [ 306.187236][T14703] ? import_iovec+0x73/0xa0 [ 306.187267][T14703] ___sys_sendmsg+0x2a5/0x360 [ 306.187300][T14703] ? __lock_acquire+0x683/0x2cd0 [ 306.187327][T14703] ? __pfx____sys_sendmsg+0x10/0x10 [ 306.187403][T14703] ? __fget_files+0x2a/0x420 [ 306.187429][T14703] ? __fget_files+0x3a2/0x420 [ 306.187468][T14703] __x64_sys_sendmsg+0x1bd/0x2a0 [ 306.187504][T14703] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 306.187549][T14703] ? __pfx_ksys_write+0x10/0x10 [ 306.187591][T14703] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.187624][T14703] do_syscall_64+0x174/0x580 [ 306.187644][T14703] ? trace_irq_disable+0x3b/0x140 [ 306.187676][T14703] ? clear_bhb_loop+0x40/0x90 [ 306.187703][T14703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.187724][T14703] RIP: 0033:0x7f31d379ce59 [ 306.187745][T14703] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 306.187763][T14703] RSP: 002b:00007f31d4725028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 306.187786][T14703] RAX: ffffffffffffffda RBX: 00007f31d3a15fa0 RCX: 00007f31d379ce59 [ 306.187803][T14703] RDX: 0000000000000000 RSI: 00002000000006c0 RDI: 0000000000000003 [ 306.187817][T14703] RBP: 00007f31d4725090 R08: 0000000000000000 R09: 0000000000000000 [ 306.187831][T14703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 306.187843][T14703] R13: 00007f31d3a16038 R14: 00007f31d3a15fa0 R15: 00007ffdd01f9878 [ 306.187880][T14703] [ 306.245893][T14485] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 306.500983][T14485] team0: Port device team_slave_0 added [ 306.510479][T14485] team0: Port device team_slave_1 added [ 306.572766][T14485] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 306.580046][T14485] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 306.607634][T14485] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 306.621725][T14485] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 306.628097][T14707] nbd4: detected capacity change from 0 to 63 [ 306.636454][T14485] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 306.666228][T14485] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 306.670357][T14708] block nbd4: NBD_DISCONNECT [ 306.696769][T14708] block nbd4: Disconnected due to user request. [ 306.705558][T14708] block nbd4: shutting down sockets [ 306.747555][ C0] blk_print_req_error: 286 callbacks suppressed [ 306.747575][ C0] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 306.763036][ C0] buffer_io_error: 286 callbacks suppressed [ 306.763054][ C0] Buffer I/O error on dev nbd4, logical block 0, async page read [ 306.768300][ C1] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 306.785985][ C1] Buffer I/O error on dev nbd4, logical block 1, async page read [ 306.793841][ C1] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 306.802948][ C1] Buffer I/O error on dev nbd4, logical block 2, async page read [ 306.810810][ C1] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 306.819925][ C1] Buffer I/O error on dev nbd4, logical block 3, async page read [ 306.831003][T14485] hsr_slave_0: entered promiscuous mode [ 306.839472][T14712] netlink: 'syz.1.2858': attribute type 2 has an invalid length. [ 306.849399][ T5643] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 306.869081][T14485] hsr_slave_1: entered promiscuous mode [ 306.876699][T14485] debugfs: 'hsr0' already exists in 'hsr' [ 306.884007][T14711] netlink: 'syz.1.2858': attribute type 8 has an invalid length. [ 306.885604][ T5643] Buffer I/O error on dev nbd4, logical block 0, async page read [ 306.915672][T14485] Cannot create hsr debugfs directory [ 306.927730][ T5643] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 306.956003][ T5643] Buffer I/O error on dev nbd4, logical block 1, async page read [ 306.995962][ T5643] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 307.024763][ T5643] Buffer I/O error on dev nbd4, logical block 2, async page read [ 307.049070][ T5643] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 307.077245][ T5643] Buffer I/O error on dev nbd4, logical block 3, async page read [ 307.097417][ T5638] Bluetooth: hci5: command tx timeout [ 307.120116][ T5643] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 307.152137][ T5643] Buffer I/O error on dev nbd4, logical block 0, async page read [ 307.162769][ T5643] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 307.198543][ T5643] Buffer I/O error on dev nbd4, logical block 1, async page read [ 307.243499][ T5643] ldm_validate_partition_table(): Disk read failed. [ 307.254871][ T5643] Dev nbd4: unable to read RDB block 0 [ 307.263622][ T5643] nbd4: unable to read partition table [ 307.304334][ T5643] ldm_validate_partition_table(): Disk read failed. [ 307.332057][ T5643] Dev nbd4: unable to read RDB block 0 [ 307.366367][ T5643] nbd4: unable to read partition table [ 307.385463][T14728] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2862'. [ 307.429942][T14729] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2864'. [ 308.016008][T14762] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2875'. [ 308.451283][T14791] netlink: 'syz.0.2883': attribute type 21 has an invalid length. [ 308.460142][T14791] netlink: 'syz.0.2883': attribute type 6 has an invalid length. [ 308.469283][T14791] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2883'. [ 308.525834][T14794] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2884'. [ 308.540264][T14794] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2884'. [ 308.552504][T14794] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2884'. [ 308.605659][T14794] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2884'. [ 308.912553][T14769] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 309.091838][T14813] xt_CT: You must specify a L4 protocol and not use inversions on it [ 309.164999][T14818] openvswitch: netlink: Unknown key attributes 2 [ 309.179024][ T5638] Bluetooth: hci5: command tx timeout [ 309.746802][T14851] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2896'. [ 312.071556][T14830] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 312.246503][T14869] netlink: 'syz.4.2902': attribute type 4 has an invalid length. [ 312.261907][T14869] netlink: 17 bytes leftover after parsing attributes in process `syz.4.2902'. [ 312.322428][T14874] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2902'. [ 312.361777][T14878] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2903'. [ 313.168270][T14910] bond4: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 313.181869][T14910] bond4 (unregistering): Released all slaves [ 313.439554][T14925] __nla_validate_parse: 1 callbacks suppressed [ 313.439572][T14925] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.2917'. [ 313.495891][T14918] FAULT_INJECTION: forcing a failure. [ 313.495891][T14918] name failslab, interval 1, probability 0, space 0, times 0 [ 313.510885][T14924] gre0: Master is either lo or non-ether device [ 313.527459][T14918] CPU: 1 UID: 0 PID: 14918 Comm: syz.1.2915 Not tainted syzkaller #0 PREEMPT(full) [ 313.527489][T14918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 313.527503][T14918] Call Trace: [ 313.527512][T14918] [ 313.527521][T14918] dump_stack_lvl+0xe8/0x150 [ 313.527552][T14918] should_fail_ex+0x40c/0x560 [ 313.527582][T14918] should_failslab+0xa8/0x100 [ 313.527619][T14918] kmem_cache_alloc_node_noprof+0x8f/0x680 [ 313.527653][T14918] ? __alloc_skb+0x1d7/0x7a0 [ 313.527682][T14918] ? __local_bh_enable_ip+0xd0/0x130 [ 313.527710][T14918] __alloc_skb+0x1d7/0x7a0 [ 313.527745][T14918] netlink_ack+0x136/0xb30 [ 313.527774][T14918] ? __pfx_genl_rcv_msg+0x10/0x10 [ 313.527803][T14918] ? __pfx_ref_tracker_free+0x10/0x10 [ 313.527841][T14918] netlink_rcv_skb+0x2a4/0x4a0 [ 313.527875][T14918] ? __pfx_genl_rcv_msg+0x10/0x10 [ 313.527902][T14918] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 313.527970][T14918] ? down_read+0x270/0x2e0 [ 313.527992][T14918] ? genl_rcv+0xd/0x40 [ 313.528017][T14918] genl_rcv+0x28/0x40 [ 313.528038][T14918] netlink_unicast+0x7bb/0x940 [ 313.528078][T14918] netlink_sendmsg+0x813/0xb40 [ 313.528126][T14918] ? __pfx_netlink_sendmsg+0x10/0x10 [ 313.528163][T14918] ? aa_sock_msg_perm+0xf1/0x1b0 [ 313.528197][T14918] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 313.528226][T14918] ? __pfx_netlink_sendmsg+0x10/0x10 [ 313.528260][T14918] ____sys_sendmsg+0x9b9/0xa20 [ 313.528296][T14918] ? __might_fault+0xaf/0x130 [ 313.528337][T14918] ? __pfx_____sys_sendmsg+0x10/0x10 [ 313.528379][T14918] ? import_iovec+0x73/0xa0 [ 313.528414][T14918] ___sys_sendmsg+0x2a5/0x360 [ 313.528445][T14918] ? __lock_acquire+0x683/0x2cd0 [ 313.528472][T14918] ? __pfx____sys_sendmsg+0x10/0x10 [ 313.528543][T14918] ? __fget_files+0x2a/0x420 [ 313.528568][T14918] ? __fget_files+0x3a2/0x420 [ 313.528605][T14918] __x64_sys_sendmsg+0x1bd/0x2a0 [ 313.528641][T14918] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 313.528683][T14918] ? __pfx_ksys_write+0x10/0x10 [ 313.528723][T14918] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.528747][T14918] do_syscall_64+0x174/0x580 [ 313.528766][T14918] ? trace_irq_disable+0x3b/0x140 [ 313.528796][T14918] ? clear_bhb_loop+0x40/0x90 [ 313.528821][T14918] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.528842][T14918] RIP: 0033:0x7f31d379ce59 [ 313.528874][T14918] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 313.528891][T14918] RSP: 002b:00007f31d4725028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 313.528911][T14918] RAX: ffffffffffffffda RBX: 00007f31d3a15fa0 RCX: 00007f31d379ce59 [ 313.528926][T14918] RDX: 00000000000048c0 RSI: 0000200000000540 RDI: 0000000000000003 [ 313.528938][T14918] RBP: 00007f31d4725090 R08: 0000000000000000 R09: 0000000000000000 [ 313.528950][T14918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 313.528979][T14918] R13: 00007f31d3a16038 R14: 00007f31d3a15fa0 R15: 00007ffdd01f9878 [ 313.529014][T14918] [ 314.046772][T14938] syzkaller0: entered promiscuous mode [ 314.054695][T14938] syzkaller0: entered allmulticast mode [ 314.120829][T14944] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2925'. [ 314.305389][T14954] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2928'. [ 314.346474][T14954] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2928'. [ 314.453339][T14954] FAULT_INJECTION: forcing a failure. [ 314.453339][T14954] name failslab, interval 1, probability 0, space 0, times 0 [ 314.490767][T14954] CPU: 1 UID: 0 PID: 14954 Comm: syz.2.2928 Not tainted syzkaller #0 PREEMPT(full) [ 314.490796][T14954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 314.490809][T14954] Call Trace: [ 314.490816][T14954] [ 314.490825][T14954] dump_stack_lvl+0xe8/0x150 [ 314.490854][T14954] should_fail_ex+0x40c/0x560 [ 314.490882][T14954] should_failslab+0xa8/0x100 [ 314.490916][T14954] __kmalloc_cache_noprof+0x88/0x660 [ 314.490945][T14954] ? __asan_memset+0x22/0x50 [ 314.490969][T14954] ? alloc_netdev_mqs+0xca5/0x12b0 [ 314.490990][T14954] ? __kmalloc_cache_noprof+0x157/0x660 [ 314.491022][T14954] alloc_netdev_mqs+0xca5/0x12b0 [ 314.491059][T14954] rtnl_create_link+0x321/0xd70 [ 314.491089][T14954] rtnl_newlink_create+0x25f/0xb00 [ 314.491124][T14954] ? __mutex_lock+0x5c5/0x1590 [ 314.491147][T14954] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 314.491182][T14954] ? __pfx___mutex_lock+0x10/0x10 [ 314.491212][T14954] ? ns_capable+0x89/0xe0 [ 314.491237][T14954] rtnl_newlink+0x167f/0x1bd0 [ 314.491281][T14954] ? __pfx_rtnl_newlink+0x10/0x10 [ 314.491307][T14954] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.491366][T14954] ? kasan_quarantine_put+0xbb/0x1f0 [ 314.491394][T14954] ? lockdep_hardirqs_on+0x7a/0x110 [ 314.491431][T14954] ? nlmon_xmit+0xb0/0x100 [ 314.491448][T14954] ? kmem_cache_free+0x182/0x650 [ 314.491489][T14954] ? __lock_acquire+0x683/0x2cd0 [ 314.491515][T14954] ? __dev_queue_xmit+0x29b/0x37f0 [ 314.491539][T14954] ? __local_bh_enable_ip+0xd0/0x130 [ 314.491560][T14954] ? lockdep_hardirqs_on+0x7a/0x110 [ 314.491590][T14954] ? __dev_queue_xmit+0x29b/0x37f0 [ 314.491609][T14954] ? __local_bh_enable_ip+0xd0/0x130 [ 314.491627][T14954] ? __dev_queue_xmit+0x29b/0x37f0 [ 314.491655][T14954] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 314.491717][T14954] ? __pfx_rtnl_newlink+0x10/0x10 [ 314.491745][T14954] rtnetlink_rcv_msg+0x802/0xc00 [ 314.491778][T14954] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 314.491812][T14954] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 314.491840][T14954] ? ref_tracker_free+0x689/0x830 [ 314.491868][T14954] ? __pfx_ref_tracker_free+0x10/0x10 [ 314.491904][T14954] netlink_rcv_skb+0x226/0x4a0 [ 314.491937][T14954] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 314.491969][T14954] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 314.492015][T14954] ? netlink_deliver_tap+0x2e/0x1b0 [ 314.492053][T14954] ? netlink_deliver_tap+0x2e/0x1b0 [ 314.492091][T14954] netlink_unicast+0x7bb/0x940 [ 314.492132][T14954] netlink_sendmsg+0x813/0xb40 [ 314.492176][T14954] ? __pfx_netlink_sendmsg+0x10/0x10 [ 314.492232][T14954] ? aa_sock_msg_perm+0xf1/0x1b0 [ 314.492266][T14954] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 314.492295][T14954] ? __pfx_netlink_sendmsg+0x10/0x10 [ 314.492330][T14954] ____sys_sendmsg+0x9b9/0xa20 [ 314.492363][T14954] ? __might_fault+0xaf/0x130 [ 314.492399][T14954] ? __pfx_____sys_sendmsg+0x10/0x10 [ 314.492444][T14954] ? import_iovec+0x73/0xa0 [ 314.492477][T14954] ___sys_sendmsg+0x2a5/0x360 [ 314.492510][T14954] ? __lock_acquire+0x683/0x2cd0 [ 314.492537][T14954] ? __pfx____sys_sendmsg+0x10/0x10 [ 314.492613][T14954] ? __fget_files+0x2a/0x420 [ 314.492640][T14954] ? __fget_files+0x3a2/0x420 [ 314.492678][T14954] __x64_sys_sendmsg+0x1bd/0x2a0 [ 314.492717][T14954] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 314.492762][T14954] ? __pfx_ksys_write+0x10/0x10 [ 314.492805][T14954] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.492830][T14954] do_syscall_64+0x174/0x580 [ 314.492851][T14954] ? trace_irq_disable+0x3b/0x140 [ 314.492883][T14954] ? clear_bhb_loop+0x40/0x90 [ 314.492911][T14954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.492933][T14954] RIP: 0033:0x7fcf0599ce59 [ 314.492954][T14954] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 314.492972][T14954] RSP: 002b:00007fcf067b0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 314.492996][T14954] RAX: ffffffffffffffda RBX: 00007fcf05c15fa0 RCX: 00007fcf0599ce59 [ 314.493012][T14954] RDX: 0000000020008848 RSI: 0000200000000000 RDI: 0000000000000004 [ 314.493026][T14954] RBP: 00007fcf067b0090 R08: 0000000000000000 R09: 0000000000000000 [ 314.493048][T14954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 314.493061][T14954] R13: 00007fcf05c16038 R14: 00007fcf05c15fa0 R15: 00007ffd011f77d8 [ 314.493110][T14954] [ 315.198175][T14966] FAULT_INJECTION: forcing a failure. [ 315.198175][T14966] name failslab, interval 1, probability 0, space 0, times 0 [ 315.223274][T14955] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2929'. [ 315.232392][T14966] CPU: 0 UID: 0 PID: 14966 Comm: syz.2.2932 Not tainted syzkaller #0 PREEMPT(full) [ 315.232417][T14966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 315.232430][T14966] Call Trace: [ 315.232438][T14966] [ 315.232446][T14966] dump_stack_lvl+0xe8/0x150 [ 315.232475][T14966] should_fail_ex+0x40c/0x560 [ 315.232502][T14966] should_failslab+0xa8/0x100 [ 315.232535][T14966] kmem_cache_alloc_node_noprof+0x8f/0x680 [ 315.232566][T14966] ? __alloc_skb+0x1d7/0x7a0 [ 315.232592][T14966] ? __local_bh_enable_ip+0xd0/0x130 [ 315.232617][T14966] __alloc_skb+0x1d7/0x7a0 [ 315.232650][T14966] netlink_ack+0x136/0xb30 [ 315.232676][T14966] ? __pfx_genl_rcv_msg+0x10/0x10 [ 315.232702][T14966] ? __pfx_ref_tracker_free+0x10/0x10 [ 315.232753][T14966] netlink_rcv_skb+0x2a4/0x4a0 [ 315.232785][T14966] ? __pfx_genl_rcv_msg+0x10/0x10 [ 315.232810][T14966] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 315.232950][T14966] ? down_read+0x270/0x2e0 [ 315.233021][T14966] ? genl_rcv+0xd/0x40 [ 315.233085][T14966] genl_rcv+0x28/0x40 [ 315.233155][T14966] netlink_unicast+0x7bb/0x940 [ 315.233260][T14966] netlink_sendmsg+0x813/0xb40 [ 315.233367][T14966] ? __pfx_netlink_sendmsg+0x10/0x10 [ 315.233469][T14966] ? aa_sock_msg_perm+0xf1/0x1b0 [ 315.233547][T14966] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 315.233619][T14966] ? __pfx_netlink_sendmsg+0x10/0x10 [ 315.233711][T14966] ____sys_sendmsg+0x9b9/0xa20 [ 315.233794][T14966] ? __might_fault+0xaf/0x130 [ 315.233885][T14966] ? __pfx_____sys_sendmsg+0x10/0x10 [ 315.233991][T14966] ? import_iovec+0x73/0xa0 [ 315.234066][T14966] ___sys_sendmsg+0x2a5/0x360 [ 315.234151][T14966] ? __lock_acquire+0x683/0x2cd0 [ 315.234223][T14966] ? __pfx____sys_sendmsg+0x10/0x10 [ 315.234453][T14966] ? __fget_files+0x2a/0x420 [ 315.234525][T14966] ? __fget_files+0x3a2/0x420 [ 315.234623][T14966] __x64_sys_sendmsg+0x1bd/0x2a0 [ 315.234715][T14966] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 315.234827][T14966] ? __pfx_ksys_write+0x10/0x10 [ 315.234942][T14966] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.234992][T14966] do_syscall_64+0x174/0x580 [ 315.235043][T14966] ? trace_irq_disable+0x3b/0x140 [ 315.235119][T14966] ? clear_bhb_loop+0x40/0x90 [ 315.235190][T14966] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.235250][T14966] RIP: 0033:0x7fcf0599ce59 [ 315.235302][T14966] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 315.235346][T14966] RSP: 002b:00007fcf067b0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 315.235400][T14966] RAX: ffffffffffffffda RBX: 00007fcf05c15fa0 RCX: 00007fcf0599ce59 [ 315.235441][T14966] RDX: 00000000000048c0 RSI: 0000200000000540 RDI: 0000000000000003 [ 315.235473][T14966] RBP: 00007fcf067b0090 R08: 0000000000000000 R09: 0000000000000000 [ 315.235512][T14966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 315.235544][T14966] R13: 00007fcf05c16038 R14: 00007fcf05c15fa0 R15: 00007ffd011f77d8 [ 315.235629][T14966] [ 315.552552][T14979] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2933'. [ 315.638460][T14979] netlink: 83 bytes leftover after parsing attributes in process `syz.1.2933'. [ 315.920691][T14992] : entered promiscuous mode [ 316.212198][T15010] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2941'. [ 316.415902][T15019] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2946'. [ 316.521911][T15023] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 316.542821][T15023] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 316.584137][T15028] ip_vti0: entered promiscuous mode [ 316.591600][T15028] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2948'. [ 316.840729][T15041] tipc: Enabling of bearer rejected, failed to enable media [ 316.871760][T15045] tipc: Enabling of bearer rejected, failed to enable media [ 317.182136][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.361700][T15067] FAULT_INJECTION: forcing a failure. [ 317.361700][T15067] name failslab, interval 1, probability 0, space 0, times 0 [ 317.377668][T15067] CPU: 0 UID: 0 PID: 15067 Comm: syz.2.2963 Not tainted syzkaller #0 PREEMPT(full) [ 317.377696][T15067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 317.377709][T15067] Call Trace: [ 317.377717][T15067] [ 317.377726][T15067] dump_stack_lvl+0xe8/0x150 [ 317.377756][T15067] should_fail_ex+0x40c/0x560 [ 317.377785][T15067] should_failslab+0xa8/0x100 [ 317.377819][T15067] ? skb_clone+0x212/0x3a0 [ 317.377839][T15067] kmem_cache_alloc_noprof+0x87/0x650 [ 317.377878][T15067] skb_clone+0x212/0x3a0 [ 317.377921][T15067] __netlink_deliver_tap+0x413/0x860 [ 317.377967][T15067] ? netlink_deliver_tap+0x2e/0x1b0 [ 317.378002][T15067] netlink_deliver_tap+0x19c/0x1b0 [ 317.378047][T15067] netlink_sendskb+0x68/0x140 [ 317.378089][T15067] netlink_rcv_skb+0x2a4/0x4a0 [ 317.378130][T15067] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 317.378178][T15067] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 317.378223][T15067] ? netlink_deliver_tap+0x2e/0x1b0 [ 317.378253][T15067] ? netlink_deliver_tap+0x2e/0x1b0 [ 317.378290][T15067] netlink_unicast+0x7bb/0x940 [ 317.378329][T15067] netlink_sendmsg+0x813/0xb40 [ 317.378371][T15067] ? __pfx_netlink_sendmsg+0x10/0x10 [ 317.378409][T15067] ? aa_sock_msg_perm+0xf1/0x1b0 [ 317.378442][T15067] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 317.378469][T15067] ? __pfx_netlink_sendmsg+0x10/0x10 [ 317.378502][T15067] ____sys_sendmsg+0x9b9/0xa20 [ 317.378534][T15067] ? __might_fault+0xaf/0x130 [ 317.378568][T15067] ? __pfx_____sys_sendmsg+0x10/0x10 [ 317.378611][T15067] ? import_iovec+0x73/0xa0 [ 317.378639][T15067] ___sys_sendmsg+0x2a5/0x360 [ 317.378670][T15067] ? __lock_acquire+0x683/0x2cd0 [ 317.378697][T15067] ? __pfx____sys_sendmsg+0x10/0x10 [ 317.378769][T15067] ? __fget_files+0x2a/0x420 [ 317.378793][T15067] ? __fget_files+0x3a2/0x420 [ 317.378830][T15067] __x64_sys_sendmsg+0x1bd/0x2a0 [ 317.378865][T15067] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 317.378909][T15067] ? __pfx_ksys_write+0x10/0x10 [ 317.378949][T15067] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.378972][T15067] do_syscall_64+0x174/0x580 [ 317.378992][T15067] ? trace_irq_disable+0x3b/0x140 [ 317.379024][T15067] ? clear_bhb_loop+0x40/0x90 [ 317.379057][T15067] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.379080][T15067] RIP: 0033:0x7fcf0599ce59 [ 317.379099][T15067] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 317.379118][T15067] RSP: 002b:00007fcf067b0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 317.379140][T15067] RAX: ffffffffffffffda RBX: 00007fcf05c15fa0 RCX: 00007fcf0599ce59 [ 317.379156][T15067] RDX: 0000000020008848 RSI: 0000200000000000 RDI: 0000000000000004 [ 317.379170][T15067] RBP: 00007fcf067b0090 R08: 0000000000000000 R09: 0000000000000000 [ 317.379183][T15067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 317.379195][T15067] R13: 00007fcf05c16038 R14: 00007fcf05c15fa0 R15: 00007ffd011f77d8 [ 317.379230][T15067] [ 317.905392][T15084] netlink: 'syz.1.2968': attribute type 1 has an invalid length. [ 318.004605][T15084] bond7: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 318.037479][T15084] bond7: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 318.061657][T15084] bond7: (slave ip6gre1): making interface the new active one [ 318.071925][T15084] bond7: (slave ip6gre1): Enslaving as an active interface with an up link [ 318.205508][T15092] team0: Device xfrm0 is of different type [ 318.469887][T15107] __nla_validate_parse: 10 callbacks suppressed [ 318.469907][T15107] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2975'. [ 318.521322][T15107] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2975'. [ 318.575781][T15111] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2978'. [ 318.691586][T15119] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2980'. [ 318.829106][T15126] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2981'. [ 318.854332][T15126] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2981'. [ 318.885718][T15126] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 318.995549][T15135] netlink: 'syz.1.2986': attribute type 18 has an invalid length. [ 319.124030][T15142] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2988'. [ 319.135001][T15142] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2988'. [ 319.145121][T15142] FAULT_INJECTION: forcing a failure. [ 319.145121][T15142] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 319.159663][T15142] CPU: 1 UID: 0 PID: 15142 Comm: syz.2.2988 Not tainted syzkaller #0 PREEMPT(full) [ 319.159689][T15142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 319.159713][T15142] Call Trace: [ 319.159721][T15142] [ 319.159729][T15142] dump_stack_lvl+0xe8/0x150 [ 319.159758][T15142] should_fail_ex+0x40c/0x560 [ 319.159785][T15142] _copy_from_user+0x2d/0xb0 [ 319.159810][T15142] kstrtouint_from_user+0xd6/0x180 [ 319.159835][T15142] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 319.159892][T15142] proc_fail_nth_write+0x8e/0x210 [ 319.159919][T15142] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 319.159956][T15142] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 319.159983][T15142] vfs_write+0x296/0xba0 [ 319.160025][T15142] ? __pfx_vfs_write+0x10/0x10 [ 319.160056][T15142] ? __fget_files+0x2a/0x420 [ 319.160087][T15142] ? __fget_files+0x3a2/0x420 [ 319.160112][T15142] ? __fget_files+0x2a/0x420 [ 319.160148][T15142] ksys_write+0x150/0x270 [ 319.160182][T15142] ? __pfx_ksys_write+0x10/0x10 [ 319.160222][T15142] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.160246][T15142] do_syscall_64+0x174/0x580 [ 319.160266][T15142] ? trace_irq_disable+0x3b/0x140 [ 319.160298][T15142] ? clear_bhb_loop+0x40/0x90 [ 319.160324][T15142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.160345][T15142] RIP: 0033:0x7fcf0595d68e [ 319.160364][T15142] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 319.160382][T15142] RSP: 002b:00007fcf067affe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 319.160404][T15142] RAX: ffffffffffffffda RBX: 00007fcf067b06c0 RCX: 00007fcf0595d68e [ 319.160419][T15142] RDX: 0000000000000001 RSI: 00007fcf067b00a0 RDI: 0000000000000005 [ 319.160433][T15142] RBP: 00007fcf067b0090 R08: 0000000000000000 R09: 0000000000000000 [ 319.160445][T15142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 319.160457][T15142] R13: 00007fcf05c16038 R14: 00007fcf05c15fa0 R15: 00007ffd011f77d8 [ 319.160493][T15142] [ 319.166337][T15144] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2987'. [ 319.477274][T15150] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2989'. [ 319.885607][T15167] netlink: 'syz.0.2995': attribute type 21 has an invalid length. [ 319.902496][T15167] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 319.909897][T15167] IPv6: NLM_F_CREATE should be set when creating new route [ 319.917247][T15167] IPv6: NLM_F_CREATE should be set when creating new route [ 319.924550][T15167] IPv6: NLM_F_CREATE should be set when creating new route [ 320.049233][T15167] syzkaller0: entered promiscuous mode [ 320.059432][T15167] syzkaller0: entered allmulticast mode [ 321.678642][T15252] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 322.176664][T15283] ipt_REJECT: TCP_RESET invalid for non-tcp [ 322.205011][T15283] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.562712][T15296] syzkaller0: entered promiscuous mode [ 322.579394][T15296] syzkaller0: entered allmulticast mode [ 322.767296][T15303] bond0: entered promiscuous mode [ 322.780870][T15303] bond_slave_0: entered promiscuous mode [ 322.786789][T15303] bond_slave_1: entered promiscuous mode [ 322.798328][T15303] batadv0: entered promiscuous mode [ 322.808820][T15303] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 322.821118][T15303] bond0: left promiscuous mode [ 322.826142][T15303] bond_slave_0: left promiscuous mode [ 322.832543][T15303] bond_slave_1: left promiscuous mode [ 322.839745][T15303] batadv0: left promiscuous mode [ 322.981169][T15318] netlink: 'syz.2.3044': attribute type 15 has an invalid length. [ 323.150434][T15324] netlink: 'syz.2.3047': attribute type 3 has an invalid length. [ 323.273717][T15329] vlan0: entered promiscuous mode [ 323.279198][T15329] bridge0: entered promiscuous mode [ 323.492657][T15336] xt_SECMARK: invalid mode: 9 [ 323.573306][T15338] syzkaller1: entered promiscuous mode [ 323.592673][T15338] syzkaller1: entered allmulticast mode [ 323.676515][T15345] tc_dump_action: action bad kind [ 323.783537][T15347] __nla_validate_parse: 15 callbacks suppressed [ 323.783552][T15347] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3055'. [ 323.818508][T15350] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3058'. [ 323.842916][T15351] netlink: 244 bytes leftover after parsing attributes in process `syz.0.3057'. [ 323.982276][T15363] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3062'. [ 323.999094][T15363] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 324.011772][T15363] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 324.020697][T15363] gretap2: entered promiscuous mode [ 324.026379][T15363] gretap2: entered allmulticast mode [ 324.096826][T15365] xt_SECMARK: invalid mode: 9 [ 324.281017][T15375] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3067'. [ 324.290270][T15375] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3067'. [ 324.415034][T15385] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3069'. [ 324.476759][T15387] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3070'. [ 324.701092][T15393] netlink: 190972 bytes leftover after parsing attributes in process `syz.4.3073'. [ 324.735163][T15398] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3075'. [ 324.943812][T15406] netlink: 'syz.2.3078': attribute type 11 has an invalid length. [ 325.021457][T15413] IPVS: set_ctl: invalid protocol: 44 224.0.0.2:0 [ 325.047251][T15406] 8021q: adding VLAN 0 to HW filter on device bond3 [ 325.075533][T15416] netlink: 'syz.4.3082': attribute type 3 has an invalid length. [ 325.075766][T15406] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 325.097974][T15416] netlink: 'syz.4.3082': attribute type 2 has an invalid length. [ 325.142764][T15406] tipc: Enabled bearer , priority 0 [ 325.159956][T15406] syzkaller0: entered promiscuous mode [ 325.160844][ T29] audit: type=1107 audit(1781462794.650:25): pid=15405 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='gJ [ 325.160844][ T29] yk:Xd4yUH,_╆ь8' [ 325.174124][T15406] syzkaller0: entered allmulticast mode [ 325.234319][T15406] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 325.295018][T15412] tipc: Resetting bearer [ 325.374331][T15405] tipc: Resetting bearer [ 325.404854][T15405] tipc: Disabling bearer [ 325.523524][T15430] netlink: 'syz.0.3086': attribute type 10 has an invalid length. [ 326.029792][T15458] Can't find ip_set type [ 326.047070][T15457] Can't find ip_set type [ 326.211038][T15477] xt_SECMARK: invalid mode: 9 [ 326.309742][T15481] netlink: 'syz.2.3102': attribute type 1 has an invalid length. [ 326.318695][T15481] netlink: 'syz.2.3102': attribute type 1 has an invalid length. [ 326.329600][T15483] netlink: 'syz.4.3101': attribute type 4 has an invalid length. [ 326.461546][T15487] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 326.487856][T15487] netlink: 'syz.2.3105': attribute type 1 has an invalid length. [ 326.496030][T15487] netlink: 'syz.2.3105': attribute type 2 has an invalid length. [ 326.593907][T15493] xt_hashlimit: size too large, truncated to 1048576 [ 326.929081][T15503] ip6gre2: entered allmulticast mode [ 326.950031][ T5638] block nbd3: Receive control failed (result -1) [ 327.902765][T15562] xt_SECMARK: invalid mode: 9 [ 328.236110][T15577] FAULT_INJECTION: forcing a failure. [ 328.236110][T15577] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 328.252267][ T76] [ 328.254629][ T76] ====================================================== [ 328.261666][ T76] WARNING: possible circular locking dependency detected [ 328.268724][ T76] syzkaller #0 Not tainted [ 328.273154][ T76] ------------------------------------------------------ [ 328.280183][ T76] kworker/u8:4/76 is trying to acquire lock: [ 328.286168][ T76] ffffffff8ea5f200 (pcpu_alloc_mutex){+.+.}-{4:4}, at: pcpu_alloc_noprof+0x231/0x1900 [ 328.295770][ T76] [ 328.295770][ T76] but task is already holding lock: [ 328.303154][ T76] ffffffff8e7fa9c0 (wq_pool_mutex){+.+.}-{4:4}, at: __alloc_workqueue+0x9df/0x1f70 [ 328.312596][ T76] [ 328.312596][ T76] which lock already depends on the new lock. [ 328.312596][ T76] [ 328.323017][ T76] [ 328.323017][ T76] the existing dependency chain (in reverse order) is: [ 328.332085][ T76] [ 328.332085][ T76] -> #9 (wq_pool_mutex){+.+.}-{4:4}: [ 328.339599][ T76] __mutex_lock+0x19d/0x1590 [ 328.344739][ T76] __alloc_workqueue+0x9df/0x1f70 [ 328.350310][ T76] alloc_workqueue_noprof+0xe3/0x210 [ 328.356232][ T76] padata_alloc+0xbe/0x360 [ 328.361196][ T76] pcrypt_init_padata+0x27/0x100 [ 328.366687][ T76] pcrypt_init+0x60/0xc0 [ 328.371487][ T76] do_one_initcall+0x250/0x870 [ 328.376809][ T76] do_initcall_level+0x10a/0x1a0 [ 328.382300][ T76] do_initcalls+0x59/0xa0 [ 328.387179][ T76] kernel_init_freeable+0x29d/0x3e0 [ 328.392911][ T76] kernel_init+0x1d/0x1d0 [ 328.397787][ T76] ret_from_fork+0x514/0xb70 [ 328.402922][ T76] ret_from_fork_asm+0x1a/0x30 [ 328.408235][ T76] [ 328.408235][ T76] -> #8 (cpu_hotplug_lock){++++}-{0:0}: [ 328.415988][ T76] cpus_read_lock+0x42/0x160 [ 328.421146][ T76] static_key_slow_inc+0x12/0x30 [ 328.426626][ T76] setup_udp_tunnel_sock+0x2fd/0x510 [ 328.432448][ T76] l2tp_tunnel_register+0xdda/0x1490 [ 328.438269][ T76] pppol2tp_connect+0x8e3/0x18b0 [ 328.443751][ T76] __sys_connect+0x323/0x460 [ 328.448884][ T76] __x64_sys_connect+0x7a/0x90 [ 328.454194][ T76] do_syscall_64+0x174/0x580 [ 328.459315][ T76] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.465744][ T76] [ 328.465744][ T76] -> #7 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 328.473498][ T76] lock_sock_nested+0x41/0x100 [ 328.478805][ T76] inet_shutdown+0x6a/0x390 [ 328.483852][ T76] nbd_mark_nsock_dead+0x2cb/0x550 [ 328.489515][ T76] recv_work+0x1cef/0x1e10 [ 328.494473][ T76] process_scheduled_works+0xa8e/0x14e0 [ 328.500557][ T76] worker_thread+0xa47/0xfb0 [ 328.505692][ T76] kthread+0x389/0x470 [ 328.510316][ T76] ret_from_fork+0x514/0xb70 [ 328.515561][ T76] ret_from_fork_asm+0x1a/0x30 [ 328.520867][ T76] [ 328.520867][ T76] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 328.528537][ T76] __mutex_lock+0x19d/0x1590 [ 328.533662][ T76] nbd_queue_rq+0x373/0x1150 [ 328.538800][ T76] blk_mq_dispatch_rq_list+0x499/0x1990 [ 328.544899][ T76] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 328.551785][ T76] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 328.558319][ T76] blk_mq_run_hw_queue+0x348/0x4f0 [ 328.563976][ T76] blk_mq_dispatch_list+0xd11/0xe10 [ 328.569723][ T76] blk_mq_flush_plug_list+0x45f/0x540 [ 328.575645][ T76] __blk_flush_plug+0x3ed/0x4d0 [ 328.581047][ T76] __submit_bio+0x465/0x560 [ 328.586095][ T76] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 328.592276][ T76] block_read_full_folio+0x599/0x830 [ 328.598122][ T76] filemap_read_folio+0x12c/0x3a0 [ 328.603700][ T76] do_read_cache_folio+0x354/0x590 [ 328.609360][ T76] read_part_sector+0xb6/0x2b0 [ 328.614671][ T76] adfspart_check_ICS+0xb1/0x960 [ 328.620160][ T76] bdev_disk_changed+0x82b/0x1780 [ 328.625733][ T76] blkdev_get_whole+0x372/0x510 [ 328.631134][ T76] bdev_open+0x324/0xd70 [ 328.635920][ T76] blkdev_open+0x461/0x600 [ 328.640875][ T76] do_dentry_open+0x816/0x1380 [ 328.646207][ T76] vfs_open+0x3b/0x340 [ 328.650821][ T76] path_openat+0x2e3b/0x3890 [ 328.655951][ T76] do_file_open+0x23e/0x4a0 [ 328.660999][ T76] do_sys_openat2+0x113/0x200 [ 328.666214][ T76] __x64_sys_openat+0x138/0x170 [ 328.671604][ T76] do_syscall_64+0x174/0x580 [ 328.676731][ T76] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.683160][ T76] [ 328.683160][ T76] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 328.690391][ T76] __mutex_lock+0x19d/0x1590 [ 328.695525][ T76] nbd_queue_rq+0xc1/0x1150 [ 328.700583][ T76] blk_mq_dispatch_rq_list+0x499/0x1990 [ 328.706679][ T76] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 328.713548][ T76] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 328.720070][ T76] blk_mq_run_hw_queue+0x348/0x4f0 [ 328.725724][ T76] blk_mq_dispatch_list+0xd11/0xe10 [ 328.731466][ T76] blk_mq_flush_plug_list+0x45f/0x540 [ 328.737384][ T76] __blk_flush_plug+0x3ed/0x4d0 [ 328.742783][ T76] __submit_bio+0x465/0x560 [ 328.747828][ T76] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 328.754002][ T76] block_read_full_folio+0x599/0x830 [ 328.759826][ T76] filemap_read_folio+0x12c/0x3a0 [ 328.765392][ T76] do_read_cache_folio+0x354/0x590 [ 328.771048][ T76] read_part_sector+0xb6/0x2b0 [ 328.776348][ T76] adfspart_check_ICS+0xb1/0x960 [ 328.781821][ T76] bdev_disk_changed+0x82b/0x1780 [ 328.787382][ T76] blkdev_get_whole+0x372/0x510 [ 328.792775][ T76] bdev_open+0x324/0xd70 [ 328.797559][ T76] blkdev_open+0x461/0x600 [ 328.802513][ T76] do_dentry_open+0x816/0x1380 [ 328.807808][ T76] vfs_open+0x3b/0x340 [ 328.812408][ T76] path_openat+0x2e3b/0x3890 [ 328.817537][ T76] do_file_open+0x23e/0x4a0 [ 328.822581][ T76] do_sys_openat2+0x113/0x200 [ 328.827792][ T76] __x64_sys_openat+0x138/0x170 [ 328.833196][ T76] do_syscall_64+0x174/0x580 [ 328.838327][ T76] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.844757][ T76] [ 328.844757][ T76] -> #4 (set->srcu){.+.+}-{0:0}: [ 328.851896][ T76] __synchronize_srcu+0xc9/0x2f0 [ 328.857367][ T76] elevator_switch+0x1e8/0x7b0 [ 328.862675][ T76] elevator_change+0x2fa/0x480 [ 328.867978][ T76] elevator_set_default+0x375/0x440 [ 328.873733][ T76] blk_register_queue+0x3f3/0x4e0 [ 328.879300][ T76] __add_disk+0x6cb/0xe30 [ 328.884200][ T76] add_disk_fwnode+0xfb/0x4b0 [ 328.889427][ T76] nbd_dev_add+0x733/0xb60 [ 328.894407][ T76] nbd_init+0x15f/0x1e0 [ 328.899117][ T76] do_one_initcall+0x250/0x870 [ 328.904416][ T76] do_initcall_level+0x10a/0x1a0 [ 328.909883][ T76] do_initcalls+0x59/0xa0 [ 328.914741][ T76] kernel_init_freeable+0x29d/0x3e0 [ 328.920479][ T76] kernel_init+0x1d/0x1d0 [ 328.925343][ T76] ret_from_fork+0x514/0xb70 [ 328.930466][ T76] ret_from_fork_asm+0x1a/0x30 [ 328.935792][ T76] [ 328.935792][ T76] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 328.943639][ T76] __mutex_lock+0x19d/0x1590 [ 328.948769][ T76] elevator_change+0x1af/0x480 [ 328.954090][ T76] elevator_set_none+0xb5/0x140 [ 328.959486][ T76] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 328.965841][ T76] nbd_start_device+0x189/0xb30 [ 328.971269][ T76] nbd_genl_connect+0x1597/0x1c10 [ 328.976854][ T76] genl_family_rcv_msg_doit+0x233/0x340 [ 328.982939][ T76] genl_rcv_msg+0x614/0x7a0 [ 328.987997][ T76] netlink_rcv_skb+0x226/0x4a0 [ 328.993331][ T76] genl_rcv+0x28/0x40 [ 328.997855][ T76] netlink_unicast+0x7bb/0x940 [ 329.003176][ T76] netlink_sendmsg+0x813/0xb40 [ 329.008486][ T76] ____sys_sendmsg+0x9b9/0xa20 [ 329.013798][ T76] ___sys_sendmsg+0x2a5/0x360 [ 329.019020][ T76] __x64_sys_sendmsg+0x1bd/0x2a0 [ 329.024533][ T76] do_syscall_64+0x174/0x580 [ 329.029663][ T76] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.036105][ T76] [ 329.036105][ T76] -> #2 (&q->q_usage_counter(io)#51){++++}-{0:0}: [ 329.044741][ T76] blk_alloc_queue+0x544/0x690 [ 329.050050][ T76] __blk_mq_alloc_disk+0x194/0x390 [ 329.055703][ T76] nbd_dev_add+0x494/0xb60 [ 329.060668][ T76] nbd_init+0x15f/0x1e0 [ 329.065364][ T76] do_one_initcall+0x250/0x870 [ 329.070668][ T76] do_initcall_level+0x10a/0x1a0 [ 329.076138][ T76] do_initcalls+0x59/0xa0 [ 329.081004][ T76] kernel_init_freeable+0x29d/0x3e0 [ 329.086739][ T76] kernel_init+0x1d/0x1d0 [ 329.091606][ T76] ret_from_fork+0x514/0xb70 [ 329.096739][ T76] ret_from_fork_asm+0x1a/0x30 [ 329.102042][ T76] [ 329.102042][ T76] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 329.109275][ T76] fs_reclaim_acquire+0x71/0x100 [ 329.114748][ T76] prepare_alloc_pages+0x15b/0x650 [ 329.120423][ T76] __alloc_frozen_pages_noprof+0x12f/0x380 [ 329.126774][ T76] __alloc_pages_noprof+0x10/0x100 [ 329.132445][ T76] pcpu_populate_chunk+0x181/0xb30 [ 329.138093][ T76] pcpu_alloc_noprof+0xbca/0x1900 [ 329.143659][ T76] bpf_map_alloc_percpu+0x65/0x180 [ 329.149312][ T76] prealloc_init+0x214/0x650 [ 329.154449][ T76] htab_map_alloc+0x6a0/0xc90 [ 329.159652][ T76] map_create+0xaa3/0x1660 [ 329.164606][ T76] __sys_bpf+0x6e1/0x950 [ 329.169393][ T76] __x64_sys_bpf+0x7c/0x90 [ 329.174345][ T76] do_syscall_64+0x174/0x580 [ 329.179469][ T76] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.185924][ T76] [ 329.185924][ T76] -> #0 (pcpu_alloc_mutex){+.+.}-{4:4}: [ 329.193697][ T76] __lock_acquire+0x1520/0x2cd0 [ 329.199088][ T76] lock_acquire+0x106/0x350 [ 329.204120][ T76] __mutex_lock+0x19d/0x1590 [ 329.209240][ T76] pcpu_alloc_noprof+0x231/0x1900 [ 329.214812][ T76] __alloc_workqueue+0xa6f/0x1f70 [ 329.220385][ T76] alloc_workqueue_noprof+0xe3/0x210 [ 329.226216][ T76] __rds_conn_create+0x130d/0x2250 [ 329.231883][ T76] rds_conn_create+0x43/0x60 [ 329.237037][ T76] rds_tcp_accept_one+0x44f/0xd40 [ 329.242606][ T76] rds_tcp_accept_worker+0x1d/0x70 [ 329.248267][ T76] process_scheduled_works+0xa8e/0x14e0 [ 329.254357][ T76] worker_thread+0xa47/0xfb0 [ 329.259479][ T76] kthread+0x389/0x470 [ 329.264091][ T76] ret_from_fork+0x514/0xb70 [ 329.269212][ T76] ret_from_fork_asm+0x1a/0x30 [ 329.274607][ T76] [ 329.274607][ T76] other info that might help us debug this: [ 329.274607][ T76] [ 329.284839][ T76] Chain exists of: [ 329.284839][ T76] pcpu_alloc_mutex --> cpu_hotplug_lock --> wq_pool_mutex [ 329.284839][ T76] [ 329.297906][ T76] Possible unsafe locking scenario: [ 329.297906][ T76] [ 329.305452][ T76] CPU0 CPU1 [ 329.310839][ T76] ---- ---- [ 329.316215][ T76] lock(wq_pool_mutex); [ 329.320476][ T76] lock(cpu_hotplug_lock); [ 329.327514][ T76] lock(wq_pool_mutex); [ 329.334289][ T76] lock(pcpu_alloc_mutex); [ 329.338807][ T76] [ 329.338807][ T76] *** DEADLOCK *** [ 329.338807][ T76] [ 329.347019][ T76] 4 locks held by kworker/u8:4/76: [ 329.352149][ T76] #0: ffff888031f75140 ((wq_completion)krdsd){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 329.363059][ T76] #1: ffffc9000246fc40 ((work_completion)(&rtn->rds_tcp_accept_w)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 329.375781][ T76] #2: ffff888032f15260 (&rtn->rds_tcp_accept_lock){+.+.}-{4:4}, at: rds_tcp_accept_one+0xb3/0xd40 [ 329.386518][ T76] #3: ffffffff8e7fa9c0 (wq_pool_mutex){+.+.}-{4:4}, at: __alloc_workqueue+0x9df/0x1f70 [ 329.396290][ T76] [ 329.396290][ T76] stack backtrace: [ 329.402188][ T76] CPU: 0 UID: 0 PID: 76 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT(full) [ 329.402208][ T76] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 329.402221][ T76] Workqueue: krdsd rds_tcp_accept_worker [ 329.402247][ T76] Call Trace: [ 329.402256][ T76] [ 329.402264][ T76] dump_stack_lvl+0xe8/0x150 [ 329.402283][ T76] print_circular_bug+0x2e1/0x300 [ 329.402308][ T76] check_noncircular+0x12e/0x150 [ 329.402332][ T76] __lock_acquire+0x1520/0x2cd0 [ 329.402352][ T76] ? check_path+0x21/0x40 [ 329.402371][ T76] ? check_noncircular+0xda/0x150 [ 329.402392][ T76] ? add_lock_to_list+0xc7/0x100 [ 329.402413][ T76] ? lockdep_unlock+0x5d/0xd0 [ 329.402426][ T76] ? __lock_acquire+0x13e8/0x2cd0 [ 329.402445][ T76] ? pcpu_alloc_noprof+0x231/0x1900 [ 329.402469][ T76] lock_acquire+0x106/0x350 [ 329.402484][ T76] ? pcpu_alloc_noprof+0x231/0x1900 [ 329.402513][ T76] __mutex_lock+0x19d/0x1590 [ 329.402529][ T76] ? pcpu_alloc_noprof+0x231/0x1900 [ 329.402554][ T76] ? __pfx___mutex_trylock_common+0x10/0x10 [ 329.402578][ T76] ? pcpu_alloc_noprof+0x231/0x1900 [ 329.402600][ T76] ? trace_contention_end+0x3d/0x140 [ 329.402622][ T76] ? __pfx___mutex_lock+0x10/0x10 [ 329.402637][ T76] ? __mutex_lock+0x30f/0x1590 [ 329.402659][ T76] ? __pfx___mutex_lock+0x10/0x10 [ 329.402676][ T76] pcpu_alloc_noprof+0x231/0x1900 [ 329.402701][ T76] ? __kmalloc_cache_node_noprof+0x3dd/0x690 [ 329.402730][ T76] __alloc_workqueue+0xa6f/0x1f70 [ 329.402758][ T76] alloc_workqueue_noprof+0xe3/0x210 [ 329.402779][ T76] ? pcpu_alloc+0x10/0x310 [ 329.402797][ T76] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 329.402822][ T76] ? mutex_init_lockdep+0xdf/0x110 [ 329.402844][ T76] __rds_conn_create+0x130d/0x2250 [ 329.402868][ T76] ? __rds_conn_create+0x2d2/0x2250 [ 329.402896][ T76] ? __pfx___rds_conn_create+0x10/0x10 [ 329.402918][ T76] ? __ipv6_chk_addr_and_flags+0x688/0x7e0 [ 329.402937][ T76] ? __ipv6_chk_addr_and_flags+0x184/0x7e0 [ 329.402966][ T76] rds_conn_create+0x43/0x60 [ 329.402990][ T76] rds_tcp_accept_one+0x44f/0xd40 [ 329.403017][ T76] ? __pfx_rds_tcp_accept_one+0x10/0x10 [ 329.403043][ T76] ? rcu_is_watching+0x15/0xb0 [ 329.403063][ T76] ? process_scheduled_works+0xa20/0x14e0 [ 329.403079][ T76] rds_tcp_accept_worker+0x1d/0x70 [ 329.403102][ T76] process_scheduled_works+0xa8e/0x14e0 [ 329.403129][ T76] ? __pfx_process_scheduled_works+0x10/0x10 [ 329.403160][ T76] ? assign_work+0x3cf/0x5d0 [ 329.403188][ T76] worker_thread+0xa47/0xfb0 [ 329.403218][ T76] kthread+0x389/0x470 [ 329.403239][ T76] ? __pfx_worker_thread+0x10/0x10 [ 329.403255][ T76] ? __pfx_kthread+0x10/0x10 [ 329.403277][ T76] ret_from_fork+0x514/0xb70 [ 329.403295][ T76] ? __pfx_ret_from_fork+0x10/0x10 [ 329.403312][ T76] ? __switch_to+0xc89/0x1420 [ 329.403337][ T76] ? __pfx_kthread+0x10/0x10 [ 329.403358][ T76] ret_from_fork_asm+0x1a/0x30 [ 329.403384][ T76] [ 329.693433][T15577] CPU: 0 UID: 0 PID: 15577 Comm: syz.4.3137 Not tainted syzkaller #0 PREEMPT(full) [ 329.693463][T15577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 329.693476][T15577] Call Trace: [ 329.693484][T15577] [ 329.693494][T15577] dump_stack_lvl+0xe8/0x150 [ 329.693521][T15577] should_fail_ex+0x40c/0x560 [ 329.693545][T15577] strncpy_from_user+0x36/0x2c0 [ 329.693578][T15577] do_tcp_setsockopt+0x169/0x1f80 [ 329.693611][T15577] ? __pfx_do_tcp_setsockopt+0x10/0x10 [ 329.693646][T15577] ? mptcp_setsockopt+0x2c45/0x3550 [ 329.693672][T15577] ? mptcp_setsockopt+0x2c45/0x3550 [ 329.693696][T15577] ? __local_bh_enable_ip+0xd0/0x130 [ 329.693716][T15577] ? tcp_setsockopt+0x3d/0xe0 [ 329.693743][T15577] ? mptcp_setsockopt+0x2c4f/0x3550 [ 329.693770][T15577] mptcp_setsockopt+0x2c6d/0x3550 [ 329.693798][T15577] ? __pfx_mptcp_setsockopt+0x10/0x10 [ 329.693825][T15577] ? __pfx_aa_sk_perm+0x10/0x10 [ 329.693859][T15577] ? __fget_files+0x2a/0x420 [ 329.693883][T15577] ? aa_sock_opt_perm+0xff/0x1a0 [ 329.693913][T15577] ? sock_common_setsockopt+0x36/0xc0 [ 329.693947][T15577] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 329.693974][T15577] do_sock_setsockopt+0x17c/0x1b0 [ 329.694005][T15577] __x64_sys_setsockopt+0x13d/0x1b0 [ 329.694035][T15577] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.694057][T15577] do_syscall_64+0x174/0x580 [ 329.694075][T15577] ? trace_irq_disable+0x3b/0x140 [ 329.694105][T15577] ? clear_bhb_loop+0x40/0x90 [ 329.694129][T15577] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.694150][T15577] RIP: 0033:0x7f15c419ce59 [ 329.694168][T15577] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 329.694186][T15577] RSP: 002b:00007f15c5129028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 329.694208][T15577] RAX: ffffffffffffffda RBX: 00007f15c4415fa0 RCX: 00007f15c419ce59 [ 329.694224][T15577] RDX: 000000000000000d RSI: 0000000000000006 RDI: 0000000000000003 [ 329.694237][T15577] RBP: 00007f15c5129090 R08: 0000000000000006 R09: 0000000000000000 [ 329.694250][T15577] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 329.694264][T15577] R13: 00007f15c4416038 R14: 00007f15c4415fa0 R15: 00007ffd12a0d588 [ 329.694290][T15577]