last executing test programs: 3.476386234s ago: executing program 1 (id=6322): r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x300, 0x0, 0x0, 0x81, 0x42, @broadcast}, 0x10) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x6, 0x4, 0x8, 0xb}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000ff80850000002d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r4}, 0xc) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)={0x18, 0x2f, 0x1, 0x70bd2d, 0x25dfdbfc, "", [@nested={0x4, 0x10f3}, @typed={0x4, 0x1e}]}, 0x18}], 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)=ANY=[@ANYBLOB="6801000000010104000000000000000002003a00080003400000100e080007400000000024000280140001800800010000000000080002007f0000010c00028005000100000000001400108008000140000000000800024000000000240001801400018008000100e000000108000200e00000010c000280050001000000000034000f800800014000000f7508000140fffffffd08000340000009c70800034000000081080002"], 0x168}}, 0x0) 3.022085894s ago: executing program 1 (id=6329): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f00000004000000080000000c"], 0x50) socket$inet6_sctp(0xa, 0x1, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) socket(0x400000000010, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket(0x18, 0x800, 0xfffffffc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r2 = socket(0x840000000002, 0x3, 0xff) sendmsg$inet(r2, &(0x7f00000001c0)={&(0x7f00000006c0)={0x2, 0x4e21, @multicast2=0xe0000001}, 0x10, &(0x7f0000000ec0)=[{&(0x7f0000000600)="9745edff0000000001008cc5ffffffff", 0x10}, {&(0x7f0000000000)="74145fdae5ca0070777c079c", 0xc}], 0x2, &(0x7f0000000840)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x15}, @rand_addr=0x64010103}}}], 0x20}, 0x4044040) readv(r1, &(0x7f0000001800)=[{&(0x7f0000000680)=""/38, 0x26}, {0x0}, {&(0x7f00000016c0)=""/4, 0x4}, {&(0x7f0000001700)=""/228, 0xe4}], 0x4) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00', 0x400}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x33, 0x0, 0x0) r4 = socket(0x26, 0x1, 0xa) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000027c0)=ANY=[@ANYBLOB="1800000052000102"], 0x18}}, 0x20000000) syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000240)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x8000000, 0x1, 0x0, 0x0, 0xfffc, 0x8}, 0x20) getsockopt$sock_int(r5, 0x1, 0x2c, 0x0, &(0x7f0000000500)) 2.716633452s ago: executing program 4 (id=6332): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x4b291000) (async, rerun: 64) r0 = socket$rds(0x15, 0x5, 0x0) (rerun: 64) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, 0x0, 0x0}, 0x20) close(0x3) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) (async) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2713, 0x0, 0x0) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x0) (async) socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) (async, rerun: 32) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x0) (async, rerun: 32) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) listen(0xffffffffffffffff, 0x9) 2.052945836s ago: executing program 0 (id=6336): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40100}, 0x40) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="b80000001d00010042d7c4449a867c1ce00000020000000000000000000000000000000000000000000026cefe98000000000000000000000a000000870000000c959eaa64b916d88b0ff7eec1cce0346eaa2086b8", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000500000000000000fbffffffffffffff00000000000000000000000000004000000000000000000200000000000000000200"/112], 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) 1.940611313s ago: executing program 1 (id=6337): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="080008000300000000001400000045ad00280068000060069878ac1e0001ff577bceffbfff11f3616e7c17f78a067835553346"], 0xfdef) 1.904902509s ago: executing program 2 (id=6338): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x6, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0x0, 0xffb, 0x7, 0xb69, 0xc1, 0x81, 0x1, 0x3, 0x5, 0x101, 0xffc, 0x9, 0x701, 0x3, 0x40001, 0xfffffffa, 0x4, 0x6, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0xb6, 0x6, 0x1c00, 0xb, 0x8, 0xbed4, 0x2000008, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0x7, 0x7, 0x10, 0xa14, 0xd7, 0x4, 0x7, 0xaa, 0x81, 0x2, 0x180001, 0x4007, 0x80002, 0x5, 0x2af, 0xf7, 0x5, 0x2, 0x6, 0x6, 0x4, 0x7, 0x5c9, 0x0, 0x4, 0x100002, 0x401, 0x752, 0x0, 0x3, 0x0, 0x10001, 0x2, 0x0, 0x6, 0x6, 0x3, 0x80000000, 0xfdffffff, 0x5a3, 0x2, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x6, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8000, 0x2008da0, 0x1fc, 0x3, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a0103"], 0x7c}}, 0x4) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000001d14d9"], 0x38}, 0x1, 0x0, 0x0, 0x20004085}, 0x4004080) 1.780565399s ago: executing program 0 (id=6339): socket$inet(0x2, 0xa, 0x4) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001200), 0x8a400, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22fff6) close(r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f727400"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1800d54d284d00000000000000000100180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000002008385000000cb0000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) r5 = epoll_create1(0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6c0000001000390428bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="80000000800404004c0012800b000100697036746e6c00003c000280140002000000000000000000000000000000000108001400ff01000014000300", @ANYRES64], 0x6c}, 0x1, 0x0, 0x0, 0x81}, 0x2000c8c0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r7, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x3c, r8, 0x1, 0xfffffffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r9}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000000) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r1, &(0x7f0000000000)={0x10000000}) 1.734156821s ago: executing program 2 (id=6341): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000840)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000001300000c0000000c0000000721"], 0x0, 0x2b, 0x0, 0x1, 0xb}, 0x28) 1.614218594s ago: executing program 2 (id=6342): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x4, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000003880)=[{{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000140)='\f', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000021c0)=[{&(0x7f0000000d40)="f82a370b33b81ccf7e1c527ebda28c7fb10b74814f36e8b19bd4a237f2f5957e0bd1d72c492d25af2fb03f467e3eac2c", 0x30}, {&(0x7f00000011c0)="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", 0x377}], 0x2}}, {{0x0, 0x0, &(0x7f0000003840)=[{&(0x7f0000003780)='!', 0x1}], 0x1}}], 0x3, 0x40080) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x1000806d, 0x0, 0x0) 1.6130179s ago: executing program 3 (id=6343): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x28, r0, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004040}, 0x24000) 1.504716771s ago: executing program 1 (id=6344): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000002b0009002dbd7000fedbdf250500000008000100", @ANYRES32], 0x1c}, 0x1, 0x0, 0xffffff7f00000000, 0x8080}, 0x40070) 1.46045435s ago: executing program 1 (id=6345): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@ipv6_newroute={0x1c, 0x18, 0xffffffffffffffff, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0xfe, 0x0, 0xfd, 0x9}}, 0x1c}}, 0x40800) r1 = socket$inet6(0xa, 0x3, 0xff) sendmmsg$inet6(r1, &(0x7f0000004f00)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @private1}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0xfc01}}], 0x1, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000036000295"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x1412, 0x1, 0x4}, 0x10}, 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xe, 0x0, &(0x7f0000000080)="04000000df000000428b4c6588f5", 0x0, 0x0, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x86, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x1, "56805c734ee222c29de4125f81f6e030a5441a99f362cd24e0a1ac2291500733", "467f517bd818d5a4a8d26ae61b4cbf13", {"31ffc21d2e9bfb1eb3c03976ed837b6f", "876605ac29dcb96a8901e0711afb3db3"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000007300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000006200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c0000df01000000040000000000008401000000040000000000000105000000200000000000"], 0x0, 0x36}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.338635365s ago: executing program 3 (id=6346): r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) (async) setsockopt$inet_opts(r1, 0x0, 0xd, &(0x7f0000000200)='`', 0x1) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) recvmmsg(r1, &(0x7f0000004b40)=[{{0x0, 0x0, 0x0}, 0x76fc5092}], 0x1, 0x40000100, 0x0) (async) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @mcast1, 0x2}, 0x1c) (async) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000ac0)={{r3, &(0x7f00000000c0)='^\x00', 0x501800, &(0x7f0000000100)={@align=0x3, {0xc86, 0x0, 0xe2e, 0x5}}, 0x2, &(0x7f0000000140), &(0x7f0000000180)=0x3}, 0x7, &(0x7f00000009c0)=[{0x1, 0x2, &(0x7f0000000240)='\xff\xff', &(0x7f0000000280)="b84034a14978dc7a981306bba4786bd79dabade44b335800fcfb71a574dc4998ea9ca1e75b9eab452559f2bebc8f5da8ac2d8bde", 0x34, 0x22}, {0x1, 0xa6b7, &(0x7f00000002c0)='\x00', &(0x7f0000000380)="452dfd9c766d989e26c3e24e9972dfc389334b00554b747c08ef7fdd3ff659307b20d71deee811120b3ca6ede4fbfcba01d7e9c554f9cb5214aaebd6cb8705c997e3f3c87f772e0283e3b7e2805bf5bd200b067fd1912b089cb9a4bf855aff1716a428a07f151df6368b048bfa71ce6d4d23fe62a44e0964520c01997c005e203a0948eceff4c224197c6f0deb1c2d6a0c349496c147a1ad99cd75361f41eb2494cda9cbef3e6582e1", 0xa9, 0x12}, {0x2, 0x401, &(0x7f0000000440)='\xff\xff', &(0x7f0000000480)="bc6a36c6e8352456262ff6027f3e1c76043c245bb69d4cdcf5559be594489c850a920b69a619e3620173d37310d799da0931dec58416dc815068c804837474154accbdc93ea8fdd1d108063f2f5d25aaa25037efe54f7bc1c81b47e4c34ba638ad54728f05df4b399432c4977b3de0dae33806d1e688f2ec24425569c376ebf2bbe3bee8ae021a2b4fd243a3f7ad008b7fbb3a9f79448e9d5d50f693427720", 0x9f, 0x18}, {0x1, 0x10001, &(0x7f0000000540)='{\x00', &(0x7f0000000580)="ae326156c807ebed99432400bf8d75978276337ffb2c786d28aa8d3538d2a881fae86e5f232844549a9afe19e225f0326d9524181c49ff2f4eb98d7748f3050a1683d6bdf54047fd56036d234e7f752dab568f68caf88379dcef8c70ec8ca9abe3dd882203df3bb4f370583a11ecd9a104f6b69e341fda50735d940ac49bb5b345274c954afb55b630b72cb44aeb1536a6b84110d88dad7eab07fad057879c6b48e64c76326d8f242e5b3543d994af113a4b05a52c52ef53f524e90d65c10cc4eb33c6ac10e90282cd0499d4263f339c31923ff83a5b3c694d3cdbfe27f529d33da00871ebf7", 0xe6, 0x2}, {0x1, 0xffff5ad1, &(0x7f0000000680)='\x00', &(0x7f00000006c0)="c313138e3d9ba30af68f003b51effb7a39c3dc4c2c938ef1b6312618c93e05a4990559eb627c886e2b49b593b50a63d38a97a2131fa882446bb13e26ba613b0e29a42129a316bbce9d9cdc8bdaed410e6f6890d8577240a51d910cb5103e733852c4d2fe76b515b0e4e9232007add44a597cabfd58222027d9873e0106002a3e24e6eb8ac73534631a965449b514a33acc8c08826cd222", 0x97, 0x12}, {0x2, 0x8, &(0x7f0000000780)='\\}]*\x00', &(0x7f00000007c0)="3fd5e5fe562b1ead0619ffc5ff2a8efef33e438790dbc8b41714d8ed85f6411ae3a0e40971452f631101419b6cc772e67d4e5fe50f23b861d08c33dc8621fd0558c03e7b140a369e86443c4ba4a4e5622090f2b20820b50037d092056680e281bc1f0fd7aa7c53ef2b1f7037869fb7bca5d403de7fe828a3b73b5910cbe54b144d576a78c0d61c3217462e7d8e61eb7f3060401243e511f4d8d0b15249f7ef28778e89d3ef41d0be58df435fdae94291cc4286d5f6af8644ce2bee223d5b711f5cf3b02fcf33c8dcce259c77bbc1d8a02026f73397d448fe07d3c664821ca80e9c", 0xe1, 0x2a}, {0x1, 0x4, &(0x7f00000008c0)='\xff\xff', &(0x7f0000000900)="b7c52107824694c405f22cae86024ce2bde225f350395dbf99c28ef4f7cdb7275dfe12698f1e3c22f664cfb61aaf2a863f3c9faebf4673c2433e04ebca2ef5702e943e1c570ae25641dfec6f50b65f0fdccad8338f40c88ef3c8e29db69e3be6621020d214d26a1ab6a8fc52ac093dbc4c29875cda84c27bb5e49bfdd71b1ff09a8faefe2e67978fb7df3a66946325c82d", 0x91, 0x18}]}) (async) write(r2, &(0x7f0000000300)="89ba41c97928dec7cec15a160d3dba2553b519a795020072aed129d4b5247c983455b3d757e8b2333a64d9abf416fd83f942661c47bcdf71f7d07ba20d03474a4a4bce63", 0x44) (async) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r4, 0x0, 0x18, &(0x7f0000000000)=0xffffff7e, 0x50) (async) bind$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) 1.279815861s ago: executing program 0 (id=6347): r0 = socket$inet(0x2, 0x3, 0xa) sendmmsg$inet(r0, &(0x7f0000000900)=[{{&(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1c0000ffffff80000000000007000000860a00000003"], 0x20}}], 0x1, 0x24000004) 1.246560239s ago: executing program 4 (id=6348): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3183fdfffffffcdbdf251900"], 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x406c810) 1.171249696s ago: executing program 4 (id=6349): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 1.141684458s ago: executing program 0 (id=6350): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x8, 0x3, 0x5a8, 0x250, 0xffffffff, 0xffffffff, 0x250, 0xffffffff, 0x4d8, 0xffffffff, 0xffffffff, 0x4d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [0x0, 0x2000000], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x228, 0x250, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@hashlimit3={{0x158}, {'\x00', {0x4, 0x1, 0x1a, 0x0, 0xdedd, 0x10000000, 0x0, 0x1000, 0x78, 0x20}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x6a, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x608) 1.093516682s ago: executing program 3 (id=6351): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}, 0x1, 0x100000000000000}, 0x0) 1.092500207s ago: executing program 4 (id=6352): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x15, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0xf3, 0x23, 0x0, 0x0, 0x0, 0x81}, {{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x6}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xd00}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0xb0ffffff}, {0x3, 0x3, 0x3, 0xa, 0x6}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x7, 0x1, 0xb, 0x4, 0x2}, {0x7, 0x0, 0x0, 0x6}, {0x4, 0x0, 0x7}, {0x18, 0x6, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 885.423892ms ago: executing program 4 (id=6353): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000840)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x60, 0x0, 0x800, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}]}, 0x60}}, 0x800) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x800, 0x0, 0x1}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000200)=0x1, 0x4) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000002c0)={'wg2\x00'}) recvmmsg(r2, &(0x7f000000a340)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0xce}], 0x2, 0x30140, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x10, 0x4, &(0x7f0000000140)=@framed={{}, [@generic={0x6, 0x9, 0xd, 0x9, 0x8001}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x9}, 0x94) r4 = socket(0xb, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000580)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0ea796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9f86935849e6098ed00004fe035bbb095873048", 0x44}, {&(0x7f00000002c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000540)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, {0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000003c0)="96e6e14d06cd2cd1dc6969313336a9017d94", 0x12}, {&(0x7f0000000400)="499b7fee4035c5b8beb1f70453870f0783c185665f5661dc54c5a1a1ad65e127a695fb29eb758e857595e5277fdfcd8246da633a7d6ed7e05fe75f4f36c670e755ca5142914fdc83650da6c01c7a06ebf495fbe36b151a4c207d9347308484a5891ad7c14310bd", 0x67}, {&(0x7f0000000640)="7caba4f81ffec1c44c4691773da226d91a54e9721f1f4c8f4d4f19a73292612c8ad72d40ac83e55148f6700815e6d140cfab03adc719caee1f3feed087bc616c3bc19a510350d0befe495457b7d16c139c6e6850f1e32a661bd7cc91e333472aae3e3eb8815a38aa8fea91788c44336c8437a86f885f35", 0x77}], 0x3, &(0x7f0000000a80)=ANY=[@ANYBLOB="00000000000000001701000004000000040000000000000000000000000000001701000003000000000000000000000000000000000000001701000002000000000000008db6ba8669d9e3af336c9db7d7b600000000000067ab9dfade50263fca68064513414d4a7812c38b4c70753e9ef9f941ff7c1ebcfd79c64a594b41dd41b329d3cc14c29fa008f5c24363ad52e2bafeba6e55ac24ad2a44cbeacd365353b6541f21789daab56174ca2941b64022d67061ec8e2b1fa1eed6e9d4"], 0x0, 0x40088c0}], 0x2, 0x40800) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x1, 0x0, @private1, 0x80000009}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r5, 0x84, 0x19, &(0x7f0000000280)={r7, 0x5}, 0x8) r8 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) shutdown(r8, 0x0) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001000), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01072bbd7000ffdbdf25010000000c00060002002200000000000000a74f7aaf203a"], 0x28}, 0x1, 0x0, 0x0, 0x50}, 0x4000) syz_emit_ethernet(0x96, &(0x7f0000000180)={@broadcast, @remote, @void, {@ipv4={0x800, @igmp={{0x20, 0x4, 0x1, 0x0, 0x88, 0x67, 0x0, 0x58, 0x2, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp={0x44, 0x1c, 0xca, 0x0, 0x1, [0x782b, 0x5, 0x8000000, 0x3ff, 0x1, 0x9]}, @lsrr={0x83, 0xf, 0xed, [@dev={0xac, 0x14, 0x14, 0xd}, @private=0xa010102, @private=0xa010102]}, @timestamp={0x44, 0x10, 0xdb, 0x0, 0x2, [0x1, 0x8bed, 0x1]}, @timestamp_prespec={0x44, 0x2c, 0xa8, 0x3, 0x5, [{@remote, 0xb}, {@loopback, 0x8}, {@broadcast, 0x2}, {@private=0xa010101, 0x6}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}]}, @ra={0x94, 0x4}]}}, {0x11, 0x8, 0x0, @empty}}}}}, 0x0) 884.29707ms ago: executing program 0 (id=6354): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/3, 0x3}, 0x53}], 0x1, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000100)=0x5, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 884.006725ms ago: executing program 3 (id=6355): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000030000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000380), r2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010024000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a30000000005c000000060a010400000000000000000100000008000b40000000000900010073797a300000000034000480300001800a0001006d61746368000000200002800c000300b07346e358c219250800010023707500080002"], 0xd0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_MSG_GETTABLE(r4, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000040a0101"], 0x14}, 0x1, 0x0, 0x0, 0x444}, 0x0) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB="13004a6c", @ANYRES16=r3, @ANYBLOB="01002bbd7000fed3df2521000000"], 0x14}, 0x1, 0x0, 0x0, 0x20048855}, 0x200408c0) 696.729699ms ago: executing program 2 (id=6356): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x28, r0, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004040}, 0x24000) 529.947809ms ago: executing program 2 (id=6357): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x13, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xb, &(0x7f0000000040)=0x15, 0x4) sendmsg$netlink(r0, &(0x7f0000002b40)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000007a00)={0x44, 0x26, 0x723, 0x0, 0x0, "", [@nested={0x32, 0xa9, 0x0, 0x1, [@generic="57d753865bc026738a23", @nested={0x21, 0xeb, 0x0, 0x1, [@typed={0x8, 0x20, 0x0, 0x0, @fd=r0}, @generic="2db88f6f88ebb2fd1bd786312d0c165c579777e85d"]}]}]}, 0x44}], 0x1, 0x0, 0x0, 0x24008015}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff0000000002000000090001"], 0x7c}}, 0x4) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="0300000000c7d7f3f64d"], 0x38}, 0x1, 0x0, 0x0, 0x20004085}, 0x4004080) 519.032601ms ago: executing program 3 (id=6358): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000004f0001002ae5104822ce021348d4"], 0x14}, 0x1, 0xffef}, 0x20008040) 385.446423ms ago: executing program 1 (id=6359): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[], 0x12f4}, 0x1, 0x0, 0x0, 0x4044010}, 0x0) recvmsg$unix(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000240)=""/54, 0x36}], 0x1}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x1, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xf, 0xb}, {0xffff, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f0000000240)="800000800000210ee7decd7a000340008100", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r5, 0x1, 0xd8, 0x6, @broadcast}, 0x14) (fail_nth: 1) 305.187917ms ago: executing program 2 (id=6360): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xfff1}, {0x0, 0x8}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x7, 0x16, 0x6c3, 0xfffffffa, 0x27, 0x7, 0x1, 0x9, 0x6}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$tipc(0x1e, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000110001002cbd700000dcdf2500000000", @ANYRES32, @ANYBLOB="570da800a65a020008001c00"], 0x34}}, 0x2000e844) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0xfffffffffffffd84, &(0x7f0000000300)={&(0x7f0000000a80)=@getqdisc={0x2c, 0x26, 0x2, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xfff2}, {0xd, 0x7}, {0xa, 0xf}}, [{0x4}, {0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8080}, 0x20008000) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r10, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000000)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x300}], 0x2}, 0x5) 303.015044ms ago: executing program 3 (id=6361): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r3 = accept(r2, 0x0, 0x0) recvmsg$can_j1939(r3, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x1003) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) poll(&(0x7f0000000180)=[{r1, 0x2a6}, {r4}], 0x2, 0xf) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r8, 0x0, 0x14, 0x0, &(0x7f0000000380)="f6f4e9a1d78ad62ceef1884386dd78bb3fb7dbfc", 0x0, 0xa1b, 0x0, 0x2, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r7) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)={0x2c, r9, 0x1, 0x72bd29, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HT={0x4}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_emit_ethernet(0x88, &(0x7f00000000c0)={@local, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x1, 0x6, '1\x00', 0x52, 0x2f, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x6, 0x1, [], "bf3f030b7d27"}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8100, [0x6, 0xb, 0x3e]}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x9]}, {0x8, 0x88be, 0x3, {{0xc, 0x1, 0x48, 0x1, 0x1, 0x0, 0x4, 0x9}, 0x1, {0x89a0}}}, {0x8, 0x22eb, 0x2, {{0x3, 0x2, 0x2, 0x3, 0x0, 0x0, 0x1, 0x9}, 0x2, {0x5, 0xeb, 0x0, 0xd, 0x1, 0x1, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x1}}}}}}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400020000007468305f746f5f68737200000000080002"], 0xe8}}, 0x0) write$tun(r4, &(0x7f0000000840)={@val={0x8, 0x800}, @val={0x6, 0x3, 0x6, 0x8, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0x99, 0x65, 0x0, 0x3, 0x2f, 0x0, @rand_addr=0x64010101, @broadcast}, "3297e3ba0fa8a2e71bd9fe1a399b5110420b70460c0dad392d66248a43540df968e7fcaab34569c0e36170578c0d3c546a98b26295e2592f360905866eb4720fed03a977a3df4224895629fd6ccec64f13a999f18f518e3ee28798381975e862f1db9dccdb2f1c1fb60f5ffc7a339d40a8bd1f24cede8a32f186f142e194d4fb48224759fa"}}, 0xa7) unshare(0x6020400) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r7, 0x8040942d, &(0x7f0000000340)) connect$vsock_stream(r0, &(0x7f0000000640), 0x5) 100.349146ms ago: executing program 0 (id=6362): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r3 = accept(r2, 0x0, 0x0) recvmsg$can_j1939(r3, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x1003) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) poll(&(0x7f0000000180)=[{r1, 0x2a6}, {r4}], 0x2, 0xf) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r8, 0x0, 0x14, 0x0, &(0x7f0000000380)="f6f4e9a1d78ad62ceef1884386dd78bb3fb7dbfc", 0x0, 0xa1b, 0x0, 0x2, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r7) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)={0x2c, r9, 0x1, 0x72bd29, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HT={0x4}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_emit_ethernet(0x88, &(0x7f00000000c0)={@local, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x1, 0x6, '1\x00', 0x52, 0x2f, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x6, 0x1, [], "bf3f030b7d27"}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8100, [0x6, 0xb, 0x3e]}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x9]}, {0x8, 0x88be, 0x3, {{0xc, 0x1, 0x48, 0x1, 0x1, 0x0, 0x4, 0x9}, 0x1, {0x89a0}}}, {0x8, 0x22eb, 0x2, {{0x3, 0x2, 0x2, 0x3, 0x0, 0x0, 0x1, 0x9}, 0x2, {0x5, 0xeb, 0x0, 0xd, 0x1, 0x1, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x1}}}}}}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400020000007468305f746f5f68737200000000080002"], 0xe8}}, 0x0) write$tun(r4, &(0x7f0000000840)={@val={0x8, 0x800}, @val={0x6, 0x3, 0x6, 0x8, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0x99, 0x65, 0x0, 0x3, 0x2f, 0x0, @rand_addr=0x64010101, @broadcast}, "3297e3ba0fa8a2e71bd9fe1a399b5110420b70460c0dad392d66248a43540df968e7fcaab34569c0e36170578c0d3c546a98b26295e2592f360905866eb4720fed03a977a3df4224895629fd6ccec64f13a999f18f518e3ee28798381975e862f1db9dccdb2f1c1fb60f5ffc7a339d40a8bd1f24cede8a32f186f142e194d4fb48224759fa"}}, 0xa7) unshare(0x6020400) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r7, 0x8040942d, &(0x7f0000000340)) connect$vsock_stream(r0, &(0x7f0000000640), 0x5) 0s ago: executing program 4 (id=6363): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001840), r0) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000001880)={0x34, r1, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4020}, 0x8084) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000100001003719c6f53e00000000000000050900010073797a31000000004c0000000c0a010100000000000000000a00000609000200737972bcbc0000000900010073797a31000000002000038081c25f69ea3b9b2eba00028008000340000000010800034000000003140000001100040000000000000000000100000a00"/144], 0x94}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000100)={r4}) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={0x7a4, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xa4, 0x3, 0x0, 0x1, [{0x7c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x6c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x67, 0x1, "734318e73fe3c13eeddf71bdbd453c5ed189b0507585ec1ef2f3fc8ae5b2550df76609a665c1ebf21d50eaae7fcb784aee54cebfe5cbf51fad1c45e995942fb7e347a00d8e0643daef1d54d86d6931c4bbf16f84a0b2b1b922899a04b9ef905441d975"}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x5}]}, {0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x20, 0x6, 0x1, 0x0, "3874f71e176f28a5b4cb35dffb2e36d21a2f8ad4dfcedbdd10d59977"}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x6b8, 0x3, 0x0, 0x1, [{0x654, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x4}, @NFTA_SET_ELEM_EXPRESSIONS={0x74, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}, {0x3c, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x12}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0xd}]}}}, {0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}, {0x14, 0x1, 0x0, 0x1, @connlimit={{0xe}, @void}}]}, @NFTA_SET_ELEM_DATA={0x4a8, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4e, 0x1, "844fe33540a208b1320368aa7882f2e308e07b27d7bbaba4ec95644e31a30ac14713e6471a95ddea719ffaa8814a33aa573048d5f380f0b7133392022d2d7fda13df0d39d2212b4d020e"}, @NFTA_DATA_VALUE={0x7a, 0x1, "8b7fc7b4b31bb5666975323795ab6692f8a10010fbbd451f8495d9457eb9594bf87196e76afeffccee8b0330e159fa702f9386504090bac5003dd7172937ad282c67219c778b33e30dee678e1a11240b3792ad5963ed3052fc57ccee874be425c3673146204aeda5c0c90d1b767d6e24ab4fe13ea8cc"}, @NFTA_DATA_VALUE={0xfd, 0x1, "a36c3399803505572b661dcdcc7c0aea6fe3393a4e3badbb3fa991dc703fd3dd70479e846e16f41d65fdbe0cd6ef25b417097fc600749fd1f89fc710c3c09e4e493c9e0f40be6a5d47e870aba6a6f6a9403dadd6923729a92b88004cf7f2dac99ed832a723a7f01a35201d50ac6a22bbb547cc81fee36422d25f3cad9343b72c3ad68086c81a433d609d2aa904c894202c531aef829cdd08e2569fadee93cf37547982d7c2ba7a5929122bafadc803f55ad2fcc12f4d11ba7b7917a0d6cae0ff67fb20efaffff8d48fb1fdcec6772a139ff0bfbe6da069370384408e17a6fae9d9267f2078113db4b7e57b55ae4f39b3f71a40d57bfdca6413"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0xda, 0x1, "35718f3108faa9f807e761de1b1bf8bcf25ef8069da253c22e2691712c32c4afbae2132004d5ac5083df684e5cac6c720da31e3723d0fec4b4c48efa8c4252e101da5f3bc9eba90295ef07fd9c4fa77085408d7d54f17722043b6b302bd469cd0d2de6d534cebc38cbf6baff00dd1853527e72674a3e35541d52b9ebaa0349dd8f9440b878c279213972fd0500ea8894b86d5166394611e5346213a5e18e9a98d7105317fdb2bdf41249a02dff6d4b723d8434a1f0f9b90059da994422d7717085cef11ab917b7572bae59c5f4a6e1d3be3dd90632ab"}, @NFTA_DATA_VALUE={0x3d, 0x1, "f45b3321f077030b90acb914b5e30c5b7341fb3cd7ecf6f2a1921f2c0c3fc2d077c899725be04cb45b3b55aec48de8b9b790250d477d0f139f"}, @NFTA_DATA_VALUE={0xaa, 0x1, "6db50b41acd4fcddbf07114125baceeea135edd113f8f7812261c33f09976c4f14f403a315b24a50f4ca5af9a7ef3cc5daf27e1c1c7fda0c065e70dbc337b60c58a907716226cc0d0f7b385699f5637819c46f8b9508e4ad6d9e4f12f99968216403c871387fa59862e9e71b3e3773f166d93dd381320917187b333dd24b4c9dadb2c8ed7eef8b6a12958658cc61ae7ab37bab6e9a00d33143c6fcaa9183c4466ff377985e12"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0xcf, 0x1, "556c0f1029ae7343e095cbd87dae813076ce9345110ad05c51ea7a97452142347e71fa1de23ccfce5548c251af888a05746e926d55abda593256406a62d2be5a0215d7378537ce9dc7160128ec534cd96bc2e1f2393894ba853a41bbe03a97dd1e5807bf6be887782151d55118de3c36a418ae9a189aa47cf0a0282c57509cbddedcfecc83152d2254528e0f0b15010869e3ab98952873a2c464c11ed3aab2cffa85c086d5a44b891e45771b05b1434a9f95d901b67d116f3a7fdc9edcbb32e7abd002c66e7ea92b1fd45c"}]}, @NFTA_SET_ELEM_EXPIRATION={0xc}, @NFTA_SET_ELEM_USERDATA={0x9c, 0x6, 0x1, 0x0, "be040da85c08cddfa687e4797cc7e7a86512833575883ec3474c0bcaeadc84948e3144e68043bcc8c62ba5a661f08a64c6d40cec8fde0d162a99fcd898021c3fb6f59316aa31a6eaf2986bf529faceaf42d4ff2991ba9b4ae1aa1b4192ccf6f3a0814306cd492bb277824ccab72531851cea76b22dc331fd79ddb0718553db2e1fffb659d8e0e82b2e93c7db75b244c771e750f1d43b131a"}, @NFTA_SET_ELEM_USERDATA={0x58, 0x6, 0x1, 0x0, "44b9715c62b158716a8f623eef4c8074e1b38bf16ca36ae6853aa6522f9ccf9d22ab34efcfc7e851064a34b44e98619ededabcf4f5b553ae270b911d9c173cf93e6775825436022816ab81b585edca2c93a6162c"}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x401}, @NFTA_SET_ELEM_EXPRESSIONS={0x24, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @objref={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}]}]}, {0x60, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x48, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}, {0x10, 0x1, 0x0, 0x1, @bitwise={{0xc}, @void}}, {0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}, {0x10, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x6}]}]}]}, 0x7a4}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r6, 0x6b, 0x2, 0x0, &(0x7f0000000040)) bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x29}}, 0x1c) ioctl$NILFS_IOCTL_SET_ALLOC_RANGE(r5, 0x40106e8c, &(0x7f0000000000)=[0x9]) recvmmsg(r5, &(0x7f0000000400)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/3, 0x3}, 0x53}], 0x1, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f0000000040)='hugetlb.1GB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) writev(r8, &(0x7f00000012c0)=[{0x0, 0x300}, {&(0x7f0000002ac0)='l', 0x1}], 0x2) r9 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) syz_emit_ethernet(0x86, &(0x7f0000000100)={@random="6deadbc2bdc3", @empty, @val, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "5f1060", 0x48, 0x2f, 0x0, @remote, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x3ff, 0x8]}, {0x8, 0x88be, 0x86ddffff, {{}, 0x1, {0x200}}}}}}}}}, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x1a, 0x0, &(0x7f00000001c0)) bind$can_j1939(r9, &(0x7f0000000340)={0x1d, r10, 0x3, {0x0, 0x1, 0x1}, 0xfd}, 0x18) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[], 0x10c}, 0x1, 0x0, 0x0, 0x84}, 0x48040) bind$can_j1939(r9, &(0x7f0000000580)={0x1d, r10, 0x3, {0x0, 0x1, 0xbcdc596bc9bde1ef}}, 0x18) setsockopt$inet6_int(r5, 0x29, 0x42, &(0x7f0000000100)=0x5, 0x4) kernel console output (not intermixed with test programs): e name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 804.183563][T24524] Call Trace: [ 804.183572][T24524] [ 804.183583][T24524] dump_stack_lvl+0xe8/0x150 [ 804.183616][T24524] should_fail_ex+0x40c/0x560 [ 804.183654][T24524] _copy_from_iter+0x1d3/0x1660 [ 804.183697][T24524] ? skb_set_owner_w+0x263/0x3d0 [ 804.183735][T24524] ? __pfx__copy_from_iter+0x10/0x10 [ 804.183778][T24524] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 804.183809][T24524] skb_copy_datagram_from_iter+0xe6/0x720 [ 804.183841][T24524] ? dev_get_by_index+0x22/0x2d0 [ 804.183869][T24524] ? skb_put+0x112/0x210 [ 804.183894][T24524] packet_sendmsg+0x36ab/0x5040 [ 804.183922][T24524] ? aa_file_perm+0x18b/0x15f0 [ 804.183982][T24524] ? __lock_acquire+0x683/0x2cf0 [ 804.184022][T24524] ? __pfx_packet_sendmsg+0x10/0x10 [ 804.184059][T24524] ? __might_fault+0xaf/0x130 [ 804.184098][T24524] ? __pfx_aa_sk_perm+0x10/0x10 [ 804.184132][T24524] ? aa_sock_msg_perm+0xf1/0x1b0 [ 804.184165][T24524] ? __pfx_packet_sendmsg+0x10/0x10 [ 804.184191][T24524] sock_sendmsg_nosec+0x13a/0x180 [ 804.184225][T24524] __sys_sendto+0x408/0x5a0 [ 804.184246][T24524] ? ksys_write+0x1e6/0x270 [ 804.184276][T24524] ? __pfx___sys_sendto+0x10/0x10 [ 804.184295][T24524] ? __mutex_unlock_slowpath+0x731/0x900 [ 804.184365][T24524] ? __pfx_ksys_write+0x10/0x10 [ 804.184397][T24524] __x64_sys_sendto+0xde/0x100 [ 804.184419][T24524] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 804.184444][T24524] do_syscall_64+0x174/0x580 [ 804.184466][T24524] ? clear_bhb_loop+0x40/0x90 [ 804.184494][T24524] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 804.184516][T24524] RIP: 0033:0x7f6b91f9ce59 [ 804.184536][T24524] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 804.184556][T24524] RSP: 002b:00007f6b92e0e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 804.184580][T24524] RAX: ffffffffffffffda RBX: 00007f6b92215fa0 RCX: 00007f6b91f9ce59 [ 804.184597][T24524] RDX: 0000000000000036 RSI: 0000200000000240 RDI: 000000000000000a [ 804.184611][T24524] RBP: 00007f6b92e0e090 R08: 00002000000001c0 R09: 0000000000000014 [ 804.184626][T24524] R10: 0000000000000040 R11: 0000000000000246 R12: 0000000000000001 [ 804.184640][T24524] R13: 00007f6b92216038 R14: 00007f6b92215fa0 R15: 00007fff546c23b8 [ 804.184681][T24524] [ 805.042401][T24547] FAULT_INJECTION: forcing a failure. [ 805.042401][T24547] name failslab, interval 1, probability 0, space 0, times 0 [ 805.084235][T24547] CPU: 1 UID: 0 PID: 24547 Comm: syz.0.5309 Not tainted syzkaller #0 PREEMPT(full) [ 805.084263][T24547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 805.084275][T24547] Call Trace: [ 805.084282][T24547] [ 805.084290][T24547] dump_stack_lvl+0xe8/0x150 [ 805.084316][T24547] should_fail_ex+0x40c/0x560 [ 805.084346][T24547] should_failslab+0xa8/0x100 [ 805.084368][T24547] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 805.084395][T24547] ? local_lock_release+0x9c/0x160 [ 805.084424][T24547] ? __alloc_skb+0x1d7/0x7a0 [ 805.084438][T24547] ? __alloc_skb+0x1d7/0x7a0 [ 805.084458][T24547] __alloc_skb+0x1d7/0x7a0 [ 805.084479][T24547] netlink_sendmsg+0x5d4/0xb40 [ 805.084509][T24547] ? __pfx_netlink_sendmsg+0x10/0x10 [ 805.084533][T24547] ? aa_sock_msg_perm+0xf1/0x1b0 [ 805.084570][T24547] ? __pfx_netlink_sendmsg+0x10/0x10 [ 805.084589][T24547] sock_sendmsg_nosec+0x13a/0x180 [ 805.084616][T24547] ____sys_sendmsg+0x54e/0x850 [ 805.084639][T24547] ? __pfx_____sys_sendmsg+0x10/0x10 [ 805.084667][T24547] ? import_iovec+0x73/0xa0 [ 805.084688][T24547] ___sys_sendmsg+0x2a5/0x360 [ 805.084706][T24547] ? __lock_acquire+0x683/0x2cf0 [ 805.084728][T24547] ? __pfx____sys_sendmsg+0x10/0x10 [ 805.084786][T24547] ? __fget_files+0x2a/0x420 [ 805.084808][T24547] ? __fget_files+0x3a2/0x420 [ 805.084839][T24547] __x64_sys_sendmsg+0x1b1/0x290 [ 805.084867][T24547] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 805.084913][T24547] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 805.084938][T24547] do_syscall_64+0x174/0x580 [ 805.084960][T24547] ? trace_irq_disable+0x3b/0x140 [ 805.084983][T24547] ? clear_bhb_loop+0x40/0x90 [ 805.085011][T24547] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 805.085034][T24547] RIP: 0033:0x7fdb57d9ce59 [ 805.085055][T24547] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 805.085076][T24547] RSP: 002b:00007fdb58b70028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 805.085100][T24547] RAX: ffffffffffffffda RBX: 00007fdb58015fa0 RCX: 00007fdb57d9ce59 [ 805.085117][T24547] RDX: 0000000000040800 RSI: 00002000000002c0 RDI: 0000000000000003 [ 805.085132][T24547] RBP: 00007fdb58b70090 R08: 0000000000000000 R09: 0000000000000000 [ 805.085146][T24547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 805.085160][T24547] R13: 00007fdb58016038 R14: 00007fdb58015fa0 R15: 00007ffe437d6988 [ 805.085195][T24547] [ 806.353014][T24578] FAULT_INJECTION: forcing a failure. [ 806.353014][T24578] name failslab, interval 1, probability 0, space 0, times 0 [ 806.366153][T24578] CPU: 1 UID: 0 PID: 24578 Comm: syz.2.5317 Not tainted syzkaller #0 PREEMPT(full) [ 806.366181][T24578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 806.366195][T24578] Call Trace: [ 806.366203][T24578] [ 806.366213][T24578] dump_stack_lvl+0xe8/0x150 [ 806.366247][T24578] should_fail_ex+0x40c/0x560 [ 806.366284][T24578] should_failslab+0xa8/0x100 [ 806.366312][T24578] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 806.366344][T24578] ? skb_clone+0x212/0x3a0 [ 806.366367][T24578] ? skb_clone+0x212/0x3a0 [ 806.366397][T24578] skb_clone+0x212/0x3a0 [ 806.366424][T24578] __netlink_deliver_tap+0x413/0x860 [ 806.366457][T24578] ? netlink_deliver_tap+0x2e/0x1b0 [ 806.366491][T24578] netlink_deliver_tap+0x19c/0x1b0 [ 806.366513][T24578] netlink_unicast+0x77f/0x940 [ 806.366544][T24578] netlink_sendmsg+0x813/0xb40 [ 806.366579][T24578] ? __pfx_netlink_sendmsg+0x10/0x10 [ 806.366608][T24578] ? aa_sock_msg_perm+0xf1/0x1b0 [ 806.366640][T24578] ? __pfx_netlink_sendmsg+0x10/0x10 [ 806.366664][T24578] sock_sendmsg_nosec+0x13a/0x180 [ 806.366698][T24578] ____sys_sendmsg+0x54e/0x850 [ 806.366728][T24578] ? __pfx_____sys_sendmsg+0x10/0x10 [ 806.366762][T24578] ? import_iovec+0x73/0xa0 [ 806.366788][T24578] ___sys_sendmsg+0x2a5/0x360 [ 806.366811][T24578] ? __lock_acquire+0x683/0x2cf0 [ 806.366838][T24578] ? __pfx____sys_sendmsg+0x10/0x10 [ 806.366900][T24578] ? __fget_files+0x2a/0x420 [ 806.366922][T24578] ? __fget_files+0x3a2/0x420 [ 806.366955][T24578] __x64_sys_sendmsg+0x1b1/0x290 [ 806.366983][T24578] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 806.367028][T24578] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 806.367052][T24578] do_syscall_64+0x174/0x580 [ 806.367077][T24578] ? trace_irq_disable+0x3b/0x140 [ 806.367099][T24578] ? clear_bhb_loop+0x40/0x90 [ 806.367126][T24578] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 806.367149][T24578] RIP: 0033:0x7f082279ce59 [ 806.367170][T24578] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 806.367190][T24578] RSP: 002b:00007f08236f4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 806.367215][T24578] RAX: ffffffffffffffda RBX: 00007f0822a15fa0 RCX: 00007f082279ce59 [ 806.367232][T24578] RDX: 0000000000040070 RSI: 0000200000000100 RDI: 0000000000000003 [ 806.367247][T24578] RBP: 00007f08236f4090 R08: 0000000000000000 R09: 0000000000000000 [ 806.367261][T24578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 806.367274][T24578] R13: 00007f0822a16038 R14: 00007f0822a15fa0 R15: 00007ffdcc56e9a8 [ 806.367311][T24578] [ 806.694409][T24581] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5318'. [ 806.730342][T24581] tc action pedit offset -8192 out of bounds [ 806.737947][T24581] tc action pedit offset -8192 out of bounds [ 806.744092][T24581] tc action pedit offset -8192 out of bounds [ 806.750168][T24581] tc action pedit offset -8192 out of bounds [ 806.756276][T24581] tc action pedit offset -8192 out of bounds [ 806.762313][T24581] tc action pedit offset -8192 out of bounds [ 806.768398][T24581] tc action pedit offset -8192 out of bounds [ 806.774478][T24581] tc action pedit offset -8192 out of bounds [ 806.780570][T24581] tc action pedit offset -8192 out of bounds [ 806.786648][T24581] tc action pedit offset -8192 out of bounds [ 806.792716][T24581] 0: reclassify loop, rule prio 0, protocol 800 [ 806.814265][T24583] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5319'. [ 807.011510][T24595] FAULT_INJECTION: forcing a failure. [ 807.011510][T24595] name failslab, interval 1, probability 0, space 0, times 0 [ 807.039905][T24595] CPU: 1 UID: 0 PID: 24595 Comm: syz.0.5323 Not tainted syzkaller #0 PREEMPT(full) [ 807.039934][T24595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 807.039947][T24595] Call Trace: [ 807.039955][T24595] [ 807.039965][T24595] dump_stack_lvl+0xe8/0x150 [ 807.039997][T24595] should_fail_ex+0x40c/0x560 [ 807.040034][T24595] should_failslab+0xa8/0x100 [ 807.040060][T24595] __kmalloc_cache_noprof+0xa8/0x660 [ 807.040097][T24595] ? genl_start+0x1c9/0x6d0 [ 807.040126][T24595] ? genl_start+0x1c9/0x6d0 [ 807.040162][T24595] genl_start+0x1c9/0x6d0 [ 807.040200][T24595] __netlink_dump_start+0x442/0x7b0 [ 807.040233][T24595] genl_family_rcv_msg_dumpit+0x213/0x310 [ 807.040269][T24595] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 807.040301][T24595] ? genl_get_cmd+0x82f/0x960 [ 807.040337][T24595] ? __pfx_genl_start+0x10/0x10 [ 807.040364][T24595] ? __pfx_genl_dumpit+0x10/0x10 [ 807.040391][T24595] ? __pfx_genl_done+0x10/0x10 [ 807.040424][T24595] ? __lock_acquire+0x683/0x2cf0 [ 807.040459][T24595] genl_rcv_msg+0x5e1/0x7a0 [ 807.040508][T24595] ? __pfx_genl_rcv_msg+0x10/0x10 [ 807.040540][T24595] ? __pfx_netlbl_unlabel_staticlistdef+0x10/0x10 [ 807.040585][T24595] netlink_rcv_skb+0x226/0x4a0 [ 807.040611][T24595] ? __pfx_genl_rcv_msg+0x10/0x10 [ 807.040644][T24595] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 807.040686][T24595] ? down_read+0x2be/0x330 [ 807.040715][T24595] genl_rcv+0x28/0x40 [ 807.040744][T24595] netlink_unicast+0x7bb/0x940 [ 807.040780][T24595] netlink_sendmsg+0x813/0xb40 [ 807.040816][T24595] ? __pfx_netlink_sendmsg+0x10/0x10 [ 807.040852][T24595] ? aa_sock_msg_perm+0xf1/0x1b0 [ 807.040887][T24595] ? __pfx_netlink_sendmsg+0x10/0x10 [ 807.040911][T24595] sock_sendmsg_nosec+0x13a/0x180 [ 807.040945][T24595] ____sys_sendmsg+0x54e/0x850 [ 807.040977][T24595] ? __pfx_____sys_sendmsg+0x10/0x10 [ 807.041012][T24595] ? import_iovec+0x73/0xa0 [ 807.041041][T24595] ___sys_sendmsg+0x2a5/0x360 [ 807.041064][T24595] ? __lock_acquire+0x683/0x2cf0 [ 807.041091][T24595] ? __pfx____sys_sendmsg+0x10/0x10 [ 807.041156][T24595] ? __fget_files+0x2a/0x420 [ 807.041177][T24595] ? __fget_files+0x3a2/0x420 [ 807.041209][T24595] __x64_sys_sendmsg+0x1b1/0x290 [ 807.041238][T24595] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 807.041282][T24595] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 807.041308][T24595] do_syscall_64+0x174/0x580 [ 807.041329][T24595] ? trace_irq_disable+0x3b/0x140 [ 807.041351][T24595] ? clear_bhb_loop+0x40/0x90 [ 807.041379][T24595] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 807.041417][T24595] RIP: 0033:0x7fdb57d9ce59 [ 807.041439][T24595] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 807.041458][T24595] RSP: 002b:00007fdb58b70028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 807.041483][T24595] RAX: ffffffffffffffda RBX: 00007fdb58015fa0 RCX: 00007fdb57d9ce59 [ 807.041506][T24595] RDX: 0000000000045080 RSI: 0000200000000500 RDI: 0000000000000004 [ 807.041521][T24595] RBP: 00007fdb58b70090 R08: 0000000000000000 R09: 0000000000000000 [ 807.041535][T24595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 807.041549][T24595] R13: 00007fdb58016038 R14: 00007fdb58015fa0 R15: 00007ffe437d6988 [ 807.041586][T24595] [ 807.564102][T24609] erspan0: entered promiscuous mode [ 807.616844][T24614] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5324'. [ 807.814307][T24609] 8021q: adding VLAN 0 to HW filter on device  [ 807.826007][T24609] 8021q: adding VLAN 0 to HW filter on device team0 [ 807.992058][T24609] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 808.016229][T24609] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 808.065993][T24609] veth1_vlan: left promiscuous mode [ 808.096599][T24609] vlan0: left promiscuous mode [ 808.112416][T24609] veth1_vlan: entered promiscuous mode [ 808.126834][T24609] ipvlan1: left promiscuous mode [ 808.148628][T24609] veth1_macvtap: left promiscuous mode [ 808.165587][T24609] veth0_macvtap: left promiscuous mode [ 808.180712][T24609] veth0_macvtap: entered promiscuous mode [ 808.189124][T24609] veth1_macvtap: entered promiscuous mode [ 808.231582][T24609] geneve2: left promiscuous mode [ 808.247596][T24609] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 808.259744][T24609] A link change request failed with some changes committed already. Interface macvtap2 may have been left with an inconsistent configuration, please check. [ 808.312276][ T9491] bridge0: port 2(bridge_slave_1) entered blocking state [ 808.319587][ T9491] bridge0: port 2(bridge_slave_1) entered forwarding state [ 808.360451][ T9491] bridge3: port 1(veth0_to_bond) entered blocking state [ 808.367616][ T9491] bridge3: port 1(veth0_to_bond) entered forwarding state [ 808.538813][T24654] netlink: 'syz.4.5332': attribute type 10 has an invalid length. [ 808.563393][T24654] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5332'. [ 808.591092][ T5634] bond_slave_0: entered promiscuous mode [ 808.596963][ T5634] bond_slave_1: entered promiscuous mode [ 808.639982][T24624] syzkaller0: entered promiscuous mode [ 808.648351][T24624] syzkaller0: entered allmulticast mode [ 808.660027][T24618] tipc: Enabled bearer , priority 0 [ 808.674005][T24639] tipc: Resetting bearer [ 808.775941][T24632] syzkaller0: entered promiscuous mode [ 808.781581][T24632] syzkaller0: entered allmulticast mode [ 808.790609][T24654] dummy0: entered promiscuous mode [ 808.797916][T24654] dummy0: entered allmulticast mode [ 808.804068][T24654] bridge0: port 1(dummy0) entered blocking state [ 808.811333][T24654] bridge0: port 1(dummy0) entered disabled state [ 808.820520][T24654] bridge0: port 1(dummy0) entered blocking state [ 808.827130][T24654] bridge0: port 1(dummy0) entered forwarding state [ 808.875541][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.881969][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 811.385082][T24639] tipc: Resetting bearer [ 811.411079][T24639] tipc: Disabling bearer [ 811.651668][T24677] syzkaller0: entered promiscuous mode [ 811.664417][T24677] syzkaller0: entered allmulticast mode [ 811.871951][T24691] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5341'. [ 812.065360][T24672] macsec1: entered promiscuous mode [ 812.734088][T24720] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5348'. [ 812.796790][T24722] Cannot find set identified by id 65534 to match [ 813.318189][T24739] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5355'. [ 813.388462][T24741] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5356'. [ 813.413073][T24741] syz_tun: entered promiscuous mode [ 813.418764][T24741] macvtap7: entered promiscuous mode [ 813.427878][T24741] macvtap7: entered allmulticast mode [ 813.444990][T24741] syz_tun: entered allmulticast mode [ 813.478832][T24742] syz_tun: left allmulticast mode [ 813.490948][T24742] syz_tun: left promiscuous mode [ 813.504233][T24742] macvtap7: left promiscuous mode [ 813.515524][T24742] macvtap7: left allmulticast mode [ 813.598879][T24748] dummy0: left promiscuous mode [ 813.626518][T24753] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5357'. [ 813.763066][T24748] veth1_vlan: left promiscuous mode [ 813.791888][T24748] veth0_vlan: left promiscuous mode [ 813.817917][T24748] veth0_vlan: entered promiscuous mode [ 813.848059][T24748] veth1_vlan: entered promiscuous mode [ 813.895447][T24748] veth1_macvtap: left promiscuous mode [ 813.915644][T24748] veth0_macvtap: left promiscuous mode [ 813.923280][T24748] veth0_macvtap: entered promiscuous mode [ 813.932453][T24748] veth1_macvtap: entered promiscuous mode [ 814.028594][T24748] bridge2: port 1(veth0_to_bond) entered blocking state [ 814.035831][T24748] bridge2: port 1(veth0_to_bond) entered forwarding state [ 815.036794][T24748] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 815.047727][T24748] 8021q: adding VLAN 0 to HW filter on device bond1 [ 815.061223][T24748] 8021q: adding VLAN 0 to HW filter on device bond2 [ 815.095213][T24748] 8021q: adding VLAN 0 to HW filter on device bond3 [ 815.104418][T24748] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 815.121951][T24748] 8021q: adding VLAN 0 to HW filter on device bond4 [ 815.137958][T24748] 8021q: adding VLAN 0 to HW filter on device bond5 [ 815.159298][T24748] ip6gretap0: entered promiscuous mode [ 815.175412][T24748] 8021q: adding VLAN 0 to HW filter on device bond0 [ 815.190540][T24748] 8021q: adding VLAN 0 to HW filter on device eth0 [ 815.201229][T24748] 8021q: adding VLAN 0 to HW filter on device eth1 [ 815.211727][T24748] 8021q: adding VLAN 0 to HW filter on device eth2 [ 815.222205][T24748] 8021q: adding VLAN 0 to HW filter on device eth3 [ 815.234400][T24748] 8021q: adding VLAN 0 to HW filter on device bond7 [ 815.246227][T24748] 8021q: adding VLAN 0 to HW filter on device bond8 [ 815.261476][T24748] A link change request failed with some changes committed already. Interface macvtap3 may have been left with an inconsistent configuration, please check. [ 815.283581][ T5819] bond_slave_0: entered promiscuous mode [ 815.289404][ T5819] bond_slave_1: entered promiscuous mode [ 815.360676][ T155] bridge3: port 1(veth3) entered blocking state [ 815.367155][ T155] bridge3: port 1(veth3) entered forwarding state [ 815.424139][ T99] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 4352 - 0 [ 815.432590][ T99] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 815.441871][ T99] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 4352 - 0 [ 815.450415][ T99] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 815.459942][ T155] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 4352 - 0 [ 815.468718][ T155] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 815.614276][ T155] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 4352 - 0 [ 815.645612][ T155] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 815.836473][T24797] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5372'. [ 815.926795][ T1181] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 815.966122][ T5819] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 815.987985][ T1181] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 816.006102][ T5819] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 816.078343][ T155] wlan1: Trigger new scan to find an IBSS to join [ 816.229207][T24789] syzkaller0: entered promiscuous mode [ 816.243726][ T29] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 816.282339][T24789] syzkaller0: entered allmulticast mode [ 816.645435][T24814] syzkaller1: entered promiscuous mode [ 816.660531][T24814] syzkaller1: entered allmulticast mode [ 817.566208][T24851] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5384'. [ 817.825753][T24852] nbd7: detected capacity change from 0 to 127 [ 818.129392][ T4943] block nbd7: Receive control failed (result -104) [ 819.993441][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 820.445237][T24872] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5393'. [ 820.486237][T24872] syz_tun: entered promiscuous mode [ 820.498593][T24872] macvtap4: entered promiscuous mode [ 820.510955][T24872] macvtap4: entered allmulticast mode [ 820.525204][T24872] syz_tun: entered allmulticast mode [ 820.553188][T24879] syz_tun: left allmulticast mode [ 820.569471][T24879] syz_tun: left promiscuous mode [ 820.659038][T24879] macvtap4: left promiscuous mode [ 820.667101][T24879] macvtap4: left allmulticast mode [ 820.728466][T24886] netlink: 296 bytes leftover after parsing attributes in process `syz.4.5397'. [ 820.917644][T24891] xt_hashlimit: max too large, truncated to 1048576 [ 820.940546][T24891] xt_hashlimit: overflow, try lower: 2/0 [ 820.955870][T24895] netlink: 'syz.4.5400': attribute type 3 has an invalid length. [ 820.966511][T24895] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5400'. [ 821.034892][ T9482] wlan1: Trigger new scan to find an IBSS to join [ 821.197602][ T10] block nbd7: Connection timed out, retrying (0/1 alive) [ 821.205140][ T10] block nbd7: Connection timed out, retrying (0/1 alive) [ 821.212421][ T10] block nbd7: Connection timed out, retrying (0/1 alive) [ 821.219912][T22256] block nbd7: Dead connection, failed to find a fallback [ 821.228130][T22256] block nbd7: shutting down sockets [ 821.233650][T22256] blk_print_req_error: 199 callbacks suppressed [ 821.233671][T22256] I/O error, dev nbd7, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 821.254238][ T10] block nbd7: Connection timed out, retrying (0/1 alive) [ 821.261465][T22256] buffer_io_error: 286 callbacks suppressed [ 821.261486][T22256] Buffer I/O error on dev nbd7, logical block 1, async page read [ 821.276017][T22256] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 821.285358][T22256] Buffer I/O error on dev nbd7, logical block 0, async page read [ 821.293394][T22256] I/O error, dev nbd7, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 821.302522][T22256] Buffer I/O error on dev nbd7, logical block 3, async page read [ 821.304397][T24909] IPVS: set_ctl: invalid protocol: 0 10.1.1.0:20001 [ 821.310917][T22256] I/O error, dev nbd7, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 821.326377][T22256] Buffer I/O error on dev nbd7, logical block 2, async page read [ 821.334898][T24913] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 821.344162][T24913] Buffer I/O error on dev nbd7, logical block 0, async page read [ 821.351992][T24913] Buffer I/O error on dev nbd7, logical block 1, async page read [ 821.360496][T24913] Buffer I/O error on dev nbd7, logical block 2, async page read [ 821.368420][T24913] Buffer I/O error on dev nbd7, logical block 3, async page read [ 821.376562][T24913] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 821.385781][T24913] Buffer I/O error on dev nbd7, logical block 0, async page read [ 821.393951][T24913] Buffer I/O error on dev nbd7, logical block 1, async page read [ 821.405393][T24913] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 821.415004][T24913] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 821.424686][T24913] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 821.434553][T24913] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 821.444452][T24071] ldm_validate_partition_table(): Disk read failed. [ 821.457372][T24071] Dev nbd7: unable to read RDB block 0 [ 821.465657][T24071] nbd7: unable to read partition table [ 821.482830][T24071] ldm_validate_partition_table(): Disk read failed. [ 821.492473][T24071] Dev nbd7: unable to read RDB block 0 [ 821.500761][T24071] nbd7: unable to read partition table [ 821.958863][ T9480] wlan1: Creating new IBSS network, BSSID f6:c3:5a:94:63:99 [ 822.062374][T24938] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5410'. [ 822.170388][T24943] netlink: 'syz.4.5411': attribute type 23 has an invalid length. [ 822.822852][T24923] macsec1: entered promiscuous mode [ 823.380066][T24966] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5415'. [ 824.086491][T24978] netlink: 'syz.4.5419': attribute type 1 has an invalid length. [ 824.470031][T25000] batadv_slave_0: entered promiscuous mode [ 824.746412][T25011] syzkaller1: entered promiscuous mode [ 824.752031][T25011] syzkaller1: entered allmulticast mode [ 824.762232][T25013] FAULT_INJECTION: forcing a failure. [ 824.762232][T25013] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 824.776030][T25013] CPU: 1 UID: 0 PID: 25013 Comm: syz.0.5427 Not tainted syzkaller #0 PREEMPT(full) [ 824.776060][T25013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 824.776074][T25013] Call Trace: [ 824.776083][T25013] [ 824.776092][T25013] dump_stack_lvl+0xe8/0x150 [ 824.776126][T25013] should_fail_ex+0x40c/0x560 [ 824.776162][T25013] _copy_from_iter+0x1d3/0x1660 [ 824.776196][T25013] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 824.776225][T25013] ? __pfx_policy_nodemask+0x10/0x10 [ 824.776252][T25013] ? unwind_next_frame+0x8f/0x2550 [ 824.776283][T25013] ? __pfx__copy_from_iter+0x10/0x10 [ 824.776320][T25013] ? alloc_pages_mpol+0x24a/0x380 [ 824.776356][T25013] copy_page_from_iter+0x219/0x2d0 [ 824.776395][T25013] tun_get_user+0x1bf1/0x4370 [ 824.776433][T25013] ? tun_get_user+0x6e7/0x4370 [ 824.776482][T25013] ? aa_file_perm+0x4ed/0x15f0 [ 824.776511][T25013] ? __pfx_tun_get_user+0x10/0x10 [ 824.776546][T25013] ? __lock_acquire+0x683/0x2cf0 [ 824.776586][T25013] ? ref_tracker_alloc+0x341/0x4b0 [ 824.776616][T25013] ? get_pid_task+0x20/0x1f0 [ 824.776642][T25013] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 824.776675][T25013] ? tun_get+0x1c/0x2f0 [ 824.776709][T25013] ? tun_get+0x1c/0x2f0 [ 824.776746][T25013] ? tun_get+0x1c/0x2f0 [ 824.776778][T25013] ? tun_get+0x1c/0x2f0 [ 824.776825][T25013] tun_chr_write_iter+0x113/0x200 [ 824.776862][T25013] vfs_write+0x612/0xba0 [ 824.776901][T25013] ? __pfx_vfs_write+0x10/0x10 [ 824.776940][T25013] ? __fget_files+0x2a/0x420 [ 824.776972][T25013] ksys_write+0x150/0x270 [ 824.777001][T25013] ? __pfx_ksys_write+0x10/0x10 [ 824.777036][T25013] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 824.777061][T25013] do_syscall_64+0x174/0x580 [ 824.777082][T25013] ? trace_irq_disable+0x3b/0x140 [ 824.777105][T25013] ? clear_bhb_loop+0x40/0x90 [ 824.777132][T25013] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 824.777155][T25013] RIP: 0033:0x7fdb57d5d68e [ 824.777176][T25013] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 824.777195][T25013] RSP: 002b:00007fdb58b6ffb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 824.777219][T25013] RAX: ffffffffffffffda RBX: 00007fdb58b706c0 RCX: 00007fdb57d5d68e [ 824.777235][T25013] RDX: 0000000000000022 RSI: 00002000000001c0 RDI: 00000000000000c8 [ 824.777250][T25013] RBP: 00007fdb58b70090 R08: 0000000000000000 R09: 0000000000000000 [ 824.777264][T25013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 824.777277][T25013] R13: 00007fdb58016038 R14: 00007fdb58015fa0 R15: 00007ffe437d6988 [ 824.777312][T25013] [ 825.133538][T24995] batadv_slave_0: left promiscuous mode [ 825.558389][T25027] macsec2: entered promiscuous mode [ 826.681222][T25058] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5442'. [ 826.802127][T25062] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5442'. [ 826.973017][T25068] netlink: 'syz.3.5446': attribute type 4 has an invalid length. [ 826.989084][T25068] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5446'. [ 827.018654][T25067] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5441'. [ 827.090073][T25067] syz_tun: entered promiscuous mode [ 827.103850][T25067] macvtap5: entered promiscuous mode [ 827.128894][T25067] macvtap5: entered allmulticast mode [ 827.142682][T25067] syz_tun: entered allmulticast mode [ 827.201552][T25073] syz_tun: left allmulticast mode [ 827.209479][T25073] syz_tun: left promiscuous mode [ 827.214965][T25073] macvtap5: left promiscuous mode [ 827.220128][T25073] macvtap5: left allmulticast mode [ 827.339935][T25068] syz.3.5446 (25068) used greatest stack depth: 17744 bytes left [ 827.406891][T25083] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5450'. [ 827.617303][T25091] nbd8: detected capacity change from 0 to 127 [ 827.746037][T25098] IPVS: set_ctl: invalid protocol: 0 10.1.1.0:20001 [ 828.038414][ T4943] block nbd8: Receive control failed (result -104) [ 828.075246][ T9491] wlan1: Trigger new scan to find an IBSS to join [ 828.707918][T25110] FAULT_INJECTION: forcing a failure. [ 828.707918][T25110] name failslab, interval 1, probability 0, space 0, times 0 [ 828.721361][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 828.761137][T25110] CPU: 1 UID: 0 PID: 25110 Comm: syz.2.5461 Not tainted syzkaller #0 PREEMPT(full) [ 828.761170][T25110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 828.761183][T25110] Call Trace: [ 828.761192][T25110] [ 828.761202][T25110] dump_stack_lvl+0xe8/0x150 [ 828.761235][T25110] should_fail_ex+0x40c/0x560 [ 828.761273][T25110] should_failslab+0xa8/0x100 [ 828.761301][T25110] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 828.761334][T25110] ? local_lock_release+0x9c/0x160 [ 828.761371][T25110] ? __alloc_skb+0x1d7/0x7a0 [ 828.761389][T25110] ? __alloc_skb+0x1d7/0x7a0 [ 828.761417][T25110] __alloc_skb+0x1d7/0x7a0 [ 828.761443][T25110] netlink_ack+0x136/0xb30 [ 828.761466][T25110] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 828.761499][T25110] ? ref_tracker_free+0x689/0x830 [ 828.761534][T25110] ? __pfx_ref_tracker_free+0x10/0x10 [ 828.761578][T25110] netlink_rcv_skb+0x2a4/0x4a0 [ 828.761605][T25110] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 828.761642][T25110] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 828.761682][T25110] ? netlink_deliver_tap+0x2e/0x1b0 [ 828.761707][T25110] ? netlink_deliver_tap+0x2e/0x1b0 [ 828.761738][T25110] netlink_unicast+0x7bb/0x940 [ 828.761773][T25110] netlink_sendmsg+0x813/0xb40 [ 828.761808][T25110] ? __pfx_netlink_sendmsg+0x10/0x10 [ 828.761837][T25110] ? aa_sock_msg_perm+0xf1/0x1b0 [ 828.761869][T25110] ? __pfx_netlink_sendmsg+0x10/0x10 [ 828.761893][T25110] sock_sendmsg_nosec+0x13a/0x180 [ 828.761926][T25110] ____sys_sendmsg+0x54e/0x850 [ 828.761956][T25110] ? __pfx_____sys_sendmsg+0x10/0x10 [ 828.761990][T25110] ? import_iovec+0x73/0xa0 [ 828.762018][T25110] ___sys_sendmsg+0x2a5/0x360 [ 828.762041][T25110] ? __lock_acquire+0x683/0x2cf0 [ 828.762069][T25110] ? __pfx____sys_sendmsg+0x10/0x10 [ 828.762145][T25110] ? __fget_files+0x2a/0x420 [ 828.762167][T25110] ? __fget_files+0x3a2/0x420 [ 828.762199][T25110] __x64_sys_sendmsg+0x1b1/0x290 [ 828.762227][T25110] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 828.762270][T25110] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 828.762295][T25110] do_syscall_64+0x174/0x580 [ 828.762315][T25110] ? trace_irq_disable+0x3b/0x140 [ 828.762337][T25110] ? clear_bhb_loop+0x40/0x90 [ 828.762365][T25110] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 828.762386][T25110] RIP: 0033:0x7f082279ce59 [ 828.762406][T25110] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 828.762426][T25110] RSP: 002b:00007f08236f4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 828.762450][T25110] RAX: ffffffffffffffda RBX: 00007f0822a15fa0 RCX: 00007f082279ce59 [ 828.762467][T25110] RDX: 0000000000040800 RSI: 00002000000002c0 RDI: 0000000000000003 [ 828.762482][T25110] RBP: 00007f08236f4090 R08: 0000000000000000 R09: 0000000000000000 [ 828.762496][T25110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 828.762510][T25110] R13: 00007f0822a16038 R14: 00007f0822a15fa0 R15: 00007ffdcc56e9a8 [ 828.762545][T25110] [ 829.649792][T25135] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5468'. [ 830.953667][T24013] block nbd8: Connection timed out, retrying (0/1 alive) [ 830.961030][T24013] block nbd8: Dead connection, failed to find a fallback [ 830.969090][T24013] block nbd8: shutting down sockets [ 830.974778][T24013] blk_print_req_error: 117 callbacks suppressed [ 830.974798][T24013] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 830.990647][T24013] buffer_io_error: 138 callbacks suppressed [ 830.990679][T24013] Buffer I/O error on dev nbd8, logical block 0, async page read [ 831.006222][T24013] Buffer I/O error on dev nbd8, logical block 1, async page read [ 831.014393][T24013] Buffer I/O error on dev nbd8, logical block 2, async page read [ 831.022247][T24013] Buffer I/O error on dev nbd8, logical block 3, async page read [ 831.030928][T24013] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 831.041054][T24013] Buffer I/O error on dev nbd8, logical block 0, async page read [ 831.049506][T24013] Buffer I/O error on dev nbd8, logical block 1, async page read [ 831.057817][T24013] Buffer I/O error on dev nbd8, logical block 2, async page read [ 831.066632][T24013] Buffer I/O error on dev nbd8, logical block 3, async page read [ 831.075276][T24013] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 831.084862][T24013] Buffer I/O error on dev nbd8, logical block 0, async page read [ 831.092821][T24013] Buffer I/O error on dev nbd8, logical block 1, async page read [ 831.101379][T24013] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 831.111318][T24013] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 831.121300][T24013] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 831.131211][T24013] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 831.141321][T24013] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 831.150985][T24071] ldm_validate_partition_table(): Disk read failed. [ 831.159335][T24013] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 831.169186][T24013] I/O error, dev nbd8, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 831.181091][T24071] Dev nbd8: unable to read RDB block 0 [ 831.189527][T24071] nbd8: unable to read partition table [ 831.205366][T24071] ldm_validate_partition_table(): Disk read failed. [ 831.215990][T24071] Dev nbd8: unable to read RDB block 0 [ 831.226710][T24071] nbd8: unable to read partition table [ 831.489120][T25216] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5493'. [ 831.699799][T25199] 8021q: adding VLAN 0 to HW filter on device bond1 [ 831.709130][T25199] ip6gretap0: entered promiscuous mode [ 831.804235][T25199] 8021q: adding VLAN 0 to HW filter on device bond2 [ 831.812203][T25199] bond3: left promiscuous mode [ 831.817939][T25199] 8021q: adding VLAN 0 to HW filter on device bond3 [ 831.844861][T25199] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode [ 831.859826][T25199] veth19: left promiscuous mode [ 831.875223][T25199] 8021q: adding VLAN 0 to HW filter on device  [ 831.882850][T25199] batadv0: left promiscuous mode [ 831.891427][T25199] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 831.902422][T25199] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 831.965107][T25208] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5493'. [ 832.077061][ T155] wlan1: Trigger new scan to find an IBSS to join [ 832.143075][T25227] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5501'. [ 832.237043][T25236] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5504'. [ 832.268736][T25236] macvtap2: entered promiscuous mode [ 832.282671][T25236] macvtap2: entered allmulticast mode [ 832.299346][T25236] bridge0: entered allmulticast mode [ 832.336703][T25237] bridge0: left allmulticast mode [ 832.358136][T25237] macvtap2: left promiscuous mode [ 832.364004][T25237] macvtap2: left allmulticast mode [ 832.512785][T25251] netlink: 6060 bytes leftover after parsing attributes in process `syz.3.5510'. [ 832.559208][T25249] bridge0: port 2(bridge_slave_1) entered disabled state [ 832.566644][T25249] bridge0: port 1(bridge_slave_0) entered disabled state [ 832.717527][T25249] bridge0: port 2(bridge_slave_1) entered blocking state [ 832.724864][T25249] bridge0: port 2(bridge_slave_1) entered forwarding state [ 832.732495][T25249] bridge0: port 1(bridge_slave_0) entered blocking state [ 832.739832][T25249] bridge0: port 1(bridge_slave_0) entered forwarding state [ 832.770771][T25249] bridge0: entered allmulticast mode [ 832.807860][T25249] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5509'. [ 832.807884][T25255] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5511'. [ 832.860301][T25255] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5511'. [ 832.999375][ T9482] wlan1: Creating new IBSS network, BSSID 6e:8f:94:b8:d5:97 [ 833.181543][T25279] tipc: MTU too low for tipc bearer [ 833.397716][T25291] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5525'. [ 833.429086][T25291] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5525'. [ 833.471729][T25296] netlink: 'syz.4.5524': attribute type 30 has an invalid length. [ 833.480235][T25296] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5524'. [ 833.552038][T25296] bond9: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4) [ 833.588872][T25296] bond9 (unregistering): Released all slaves [ 833.872081][T25315] sctp: [Deprecated]: syz.0.5534 (pid 25315) Use of int in max_burst socket option. [ 833.872081][T25315] Use struct sctp_assoc_value instead [ 833.898745][T25319] FAULT_INJECTION: forcing a failure. [ 833.898745][T25319] name failslab, interval 1, probability 0, space 0, times 0 [ 833.911500][T25319] CPU: 1 UID: 0 PID: 25319 Comm: syz.2.5536 Not tainted syzkaller #0 PREEMPT(full) [ 833.911532][T25319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 833.911546][T25319] Call Trace: [ 833.911556][T25319] [ 833.911565][T25319] dump_stack_lvl+0xe8/0x150 [ 833.911599][T25319] should_fail_ex+0x40c/0x560 [ 833.911636][T25319] should_failslab+0xa8/0x100 [ 833.911665][T25319] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 833.911697][T25319] ? dst_alloc+0x105/0x170 [ 833.911723][T25319] ? dst_alloc+0x105/0x170 [ 833.911758][T25319] dst_alloc+0x105/0x170 [ 833.911791][T25319] ip_route_input_rcu+0x20ca/0x3190 [ 833.911838][T25319] ? __pfx_ip_route_input_rcu+0x10/0x10 [ 833.911907][T25319] ? ip_route_input_noref+0xad/0x270 [ 833.911942][T25319] ip_route_input_noref+0x17c/0x270 [ 833.911989][T25319] ? __pfx_ip_route_input_noref+0x10/0x10 [ 833.912028][T25319] ? tcp_v4_early_demux+0x465/0x9c0 [ 833.912054][T25319] ? tcp_v4_early_demux+0x5a7/0x9c0 [ 833.912088][T25319] ip_rcv_finish_core+0x593/0x1c00 [ 833.912124][T25319] ip_rcv_finish+0x14c/0x2a0 [ 833.912151][T25319] NF_HOOK+0x336/0x3c0 [ 833.912178][T25319] ? __pfx_ip_rcv_finish+0x10/0x10 [ 833.912200][T25319] ? NF_HOOK+0x9e/0x3c0 [ 833.912223][T25319] ? __pfx_NF_HOOK+0x10/0x10 [ 833.912245][T25319] ? __pfx_ip_rcv_finish+0x10/0x10 [ 833.912271][T25319] ? netif_receive_skb+0x102/0xbf0 [ 833.912294][T25319] ? __pfx_ip_rcv+0x10/0x10 [ 833.912314][T25319] netif_receive_skb+0x45b/0xbf0 [ 833.912342][T25319] ? __pfx_netif_receive_skb+0x10/0x10 [ 833.912369][T25319] ? rcu_is_watching+0x15/0xb0 [ 833.912388][T25319] ? tun_rx_batched+0x185/0x790 [ 833.912417][T25319] tun_rx_batched+0x1de/0x790 [ 833.912449][T25319] ? __pfx_tun_rx_batched+0x10/0x10 [ 833.912477][T25319] ? tun_get_user+0x2717/0x4370 [ 833.912504][T25319] ? tun_get_user+0x2717/0x4370 [ 833.912531][T25319] ? tun_get_user+0x23cb/0x4370 [ 833.912557][T25319] ? tun_get_user+0x23cb/0x4370 [ 833.912582][T25319] ? __local_bh_enable_ip+0xd0/0x130 [ 833.912608][T25319] ? tun_get_user+0x2717/0x4370 [ 833.912633][T25319] ? tun_get_user+0x2717/0x4370 [ 833.912660][T25319] tun_get_user+0x2b44/0x4370 [ 833.912704][T25319] ? aa_file_perm+0x4ed/0x15f0 [ 833.912728][T25319] ? __pfx_tun_get_user+0x10/0x10 [ 833.912756][T25319] ? __lock_acquire+0x683/0x2cf0 [ 833.912787][T25319] ? ref_tracker_alloc+0x341/0x4b0 [ 833.912811][T25319] ? get_pid_task+0x20/0x1f0 [ 833.912833][T25319] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 833.912860][T25319] ? tun_get+0x1c/0x2f0 [ 833.912887][T25319] ? tun_get+0x1c/0x2f0 [ 833.912917][T25319] ? tun_get+0x1c/0x2f0 [ 833.912943][T25319] ? tun_get+0x1c/0x2f0 [ 833.912986][T25319] tun_chr_write_iter+0x113/0x200 [ 833.913015][T25319] vfs_write+0x612/0xba0 [ 833.913044][T25319] ? __pfx_vfs_write+0x10/0x10 [ 833.913073][T25319] ? __fget_files+0x2a/0x420 [ 833.913103][T25319] ksys_write+0x150/0x270 [ 833.913128][T25319] ? __pfx_ksys_write+0x10/0x10 [ 833.913157][T25319] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 833.913176][T25319] do_syscall_64+0x174/0x580 [ 833.913213][T25319] ? trace_irq_disable+0x3b/0x140 [ 833.913230][T25319] ? clear_bhb_loop+0x40/0x90 [ 833.913254][T25319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 833.913271][T25319] RIP: 0033:0x7f082275d68e [ 833.913289][T25319] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 833.913305][T25319] RSP: 002b:00007f08236f3fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 833.913326][T25319] RAX: ffffffffffffffda RBX: 00007f08236f46c0 RCX: 00007f082275d68e [ 833.913342][T25319] RDX: 000000000000003a RSI: 0000200000000080 RDI: 00000000000000c8 [ 833.913355][T25319] RBP: 00007f08236f4090 R08: 0000000000000000 R09: 0000000000000000 [ 833.913368][T25319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 833.913381][T25319] R13: 00007f0822a16038 R14: 00007f0822a15fa0 R15: 00007ffdcc56e9a8 [ 833.913415][T25319] [ 834.418332][T25320] veth35: entered promiscuous mode [ 834.811101][T25339] syz_tun: entered promiscuous mode [ 834.819416][T25339] macvtap2: entered promiscuous mode [ 834.834992][T25339] macvtap2: entered allmulticast mode [ 834.840656][T25339] syz_tun: entered allmulticast mode [ 834.874169][T25340] syz_tun: left allmulticast mode [ 834.895541][T25340] syz_tun: left promiscuous mode [ 834.932597][T25340] macvtap2: left promiscuous mode [ 834.952265][T25340] macvtap2: left allmulticast mode [ 835.288390][T25362] 8021q: adding VLAN 0 to HW filter on device bond6 [ 835.446191][T25368] bond6: (slave veth23): Enslaving as an active interface with an up link [ 835.498516][T25370] bond6: (slave bridge25): Enslaving as an active interface with an up link [ 835.736171][T25391] lo speed is unknown, defaulting to 1000 [ 835.751071][T25391] xfrm0 speed is unknown, defaulting to 1000 [ 835.769852][T25392] ieee802154 phy0 wpan0: encryption failed: -22 [ 836.281825][T25413] netlink: 'syz.2.5575': attribute type 4 has an invalid length. [ 836.642191][T25427] syz.3.5578: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 836.679324][T25427] CPU: 1 UID: 0 PID: 25427 Comm: syz.3.5578 Not tainted syzkaller #0 PREEMPT(full) [ 836.679357][T25427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 836.679372][T25427] Call Trace: [ 836.679381][T25427] [ 836.679391][T25427] dump_stack_lvl+0xe8/0x150 [ 836.679426][T25427] warn_alloc+0x24c/0x270 [ 836.679465][T25427] ? stack_depot_save_flags+0x33/0x800 [ 836.679501][T25427] ? __pfx_warn_alloc+0x10/0x10 [ 836.679538][T25427] ? kasan_save_track+0x3e/0x80 [ 836.679559][T25427] ? __kasan_kmalloc+0x93/0xb0 [ 836.679584][T25427] ? xsk_setsockopt+0x52a/0x960 [ 836.679731][T25427] ? do_sock_setsockopt+0x17c/0x1b0 [ 836.679754][T25427] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 836.679776][T25427] ? do_syscall_64+0x174/0x580 [ 836.679798][T25427] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 836.679832][T25427] __vmalloc_node_range_noprof+0x12c/0x1730 [ 836.679900][T25427] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 836.679939][T25427] ? __kasan_kmalloc+0x93/0xb0 [ 836.679964][T25427] ? __kmalloc_cache_noprof+0x32d/0x660 [ 836.680000][T25427] ? __kmalloc_cache_noprof+0x150/0x660 [ 836.680040][T25427] vmalloc_user_noprof+0xad/0xe0 [ 836.680077][T25427] ? xskq_create+0xbf/0x170 [ 836.680112][T25427] xskq_create+0xbf/0x170 [ 836.680148][T25427] xsk_init_queue+0x8a/0xe0 [ 836.680183][T25427] xsk_setsockopt+0x52a/0x960 [ 836.680213][T25427] ? __fget_files+0x2a/0x420 [ 836.680239][T25427] ? __pfx_xsk_setsockopt+0x10/0x10 [ 836.680282][T25427] ? __pfx_aa_sk_perm+0x10/0x10 [ 836.680315][T25427] ? aa_sock_opt_perm+0xff/0x1a0 [ 836.680347][T25427] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 836.680377][T25427] ? __pfx_xsk_setsockopt+0x10/0x10 [ 836.680409][T25427] do_sock_setsockopt+0x17c/0x1b0 [ 836.680440][T25427] __x64_sys_setsockopt+0x13d/0x1b0 [ 836.680468][T25427] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 836.680493][T25427] do_syscall_64+0x174/0x580 [ 836.680512][T25427] ? trace_irq_disable+0x3b/0x140 [ 836.680533][T25427] ? clear_bhb_loop+0x40/0x90 [ 836.680562][T25427] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 836.680584][T25427] RIP: 0033:0x7f6b91f9ce59 [ 836.680605][T25427] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 836.680625][T25427] RSP: 002b:00007f6b92ded028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 836.680650][T25427] RAX: ffffffffffffffda RBX: 00007f6b92216090 RCX: 00007f6b91f9ce59 [ 836.680668][T25427] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000d [ 836.680683][T25427] RBP: 00007f6b92032e6f R08: 0000000000000004 R09: 0000000000000000 [ 836.680700][T25427] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 836.680715][T25427] R13: 00007f6b92216128 R14: 00007f6b92216090 R15: 00007fff546c23b8 [ 836.680752][T25427] [ 836.680786][T25427] Mem-Info: [ 837.082368][T25427] active_anon:27775 inactive_anon:5 isolated_anon:0 [ 837.082368][T25427] active_file:81 inactive_file:43398 isolated_file:0 [ 837.082368][T25427] unevictable:768 dirty:203 writeback:0 [ 837.082368][T25427] slab_reclaimable:11576 slab_unreclaimable:138297 [ 837.082368][T25427] mapped:33651 shmem:5129 pagetables:1668 [ 837.082368][T25427] sec_pagetables:0 bounce:0 [ 837.082368][T25427] kernel_misc_reclaimable:0 [ 837.082368][T25427] free:1262997 free_pcp:8498 free_cma:0 [ 837.206584][T25427] Node 0 active_anon:112636kB inactive_anon:20kB active_file:324kB inactive_file:173388kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:134580kB dirty:720kB writeback:0kB shmem:20520kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14488kB pagetables:6572kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 837.307507][T25427] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 837.415160][T25427] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 837.472162][T25427] lowmem_reserve[]: 0 2491 2492 2492 2492 [ 837.478702][T25427] Node 0 DMA32 free:1101224kB boost:0kB min:34184kB low:42728kB high:51272kB reserved_highatomic:0KB free_highatomic:0KB active_anon:113836kB inactive_anon:20kB active_file:324kB inactive_file:173388kB unevictable:1536kB writepending:720kB zspages:0kB present:3129332kB managed:2551444kB mlocked:0kB bounce:0kB free_pcp:32816kB local_pcp:16188kB free_cma:0kB [ 837.524275][T25427] lowmem_reserve[]: 0 0 0 0 0 [ 837.529134][T25427] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:624kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 837.571971][T25427] lowmem_reserve[]: 0 0 0 0 0 [ 837.582114][T25427] Node 1 Normal free:3932684kB boost:0kB min:55708kB low:69632kB high:83556kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:248kB local_pcp:248kB free_cma:0kB [ 837.643863][T25427] lowmem_reserve[]: 0 0 0 0 0 [ 837.648868][T25427] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 837.682779][T25427] Node 0 DMA32: 1573*4kB (U) 1500*8kB (UM) 710*16kB (UM) 928*32kB (UME) 247*64kB (UM) 115*128kB (UME) 59*256kB (UM) 30*512kB (UME) 10*1024kB (UME) 4*2048kB (UM) 235*4096kB (UM) = 1101332kB [ 837.737084][T25427] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 837.761748][T25427] Node 1 Normal: 1*4kB (U) 1*8kB (M) 2*16kB (UM) 5*32kB (UM) 9*64kB (UM) 6*128kB (UM) 4*256kB (UM) 2*512kB (M) 1*1024kB (M) 0*2048kB 959*4096kB (UM) = 3932684kB [ 837.803399][T25427] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 837.819588][T25427] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 837.833043][T25427] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 837.844165][T25427] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 837.855480][T25427] 49289 total pagecache pages [ 837.873677][T25427] 0 pages in swap cache [ 837.881894][T25427] Free swap = 124996kB [ 837.892255][T25427] Total swap = 124996kB [ 837.904850][T25427] 2097051 pages RAM [ 837.916544][T25427] 0 pages HighMem/MovableOnly [ 837.937383][T25427] 427419 pages reserved [ 837.942317][T25427] 0 pages cma reserved [ 838.052316][T25458] __nla_validate_parse: 17 callbacks suppressed [ 838.052340][T25458] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5589'. [ 838.137202][T25461] lo speed is unknown, defaulting to 1000 [ 838.188550][T25461] xfrm0 speed is unknown, defaulting to 1000 [ 838.335435][T25472] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5591'. [ 838.549876][T25481] netlink: 'syz.2.5594': attribute type 15 has an invalid length. [ 838.566192][T25481] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5594'. [ 838.924059][T25493] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5598'. [ 839.077101][T25488] smc: removing ib device syz0 [ 839.321918][T25488] smbdirect: ib_dev[syz0] removed [ 839.682195][T25518] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5605'. [ 839.966100][T25529] netlink: 'syz.1.5606': attribute type 1 has an invalid length. [ 840.190810][T25538] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5611'. [ 840.396456][T25529] bond10: entered promiscuous mode [ 840.402132][T25529] 8021q: adding VLAN 0 to HW filter on device bond10 [ 840.509060][T25536] 8021q: adding VLAN 0 to HW filter on device bond11 [ 840.540746][T25536] bond10: (slave bond11): making interface the new active one [ 840.559171][T25546] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5613'. [ 840.564714][T25536] bond11: entered promiscuous mode [ 840.584927][T25536] bond10: (slave bond11): Enslaving as an active interface with an up link [ 840.599323][T25545] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5613'. [ 840.636326][T25543] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5613'. [ 840.890748][ T4943] block nbd9: Receive control failed (result -32) [ 840.890748][T16054] block nbd9: Receive control failed (result -32) [ 841.941203][T25590] IPVS: set_ctl: invalid protocol: 0 10.1.1.0:20001 [ 842.682662][T25603] xt_NFQUEUE: number of total queues is 0 [ 842.757060][T25603] bond7: option arp_all_targets: invalid value (3) [ 842.768905][T25603] bond7 (unregistering): Released all slaves [ 843.080379][T25624] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5636'. [ 843.265152][T25613] macsec2: entered promiscuous mode [ 843.660522][T25648] FAULT_INJECTION: forcing a failure. [ 843.660522][T25648] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 843.696081][T25648] CPU: 1 UID: 0 PID: 25648 Comm: syz.4.5640 Not tainted syzkaller #0 PREEMPT(full) [ 843.696113][T25648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 843.696124][T25648] Call Trace: [ 843.696131][T25648] [ 843.696139][T25648] dump_stack_lvl+0xe8/0x150 [ 843.696168][T25648] should_fail_ex+0x40c/0x560 [ 843.696206][T25648] _copy_to_user+0x31/0xb0 [ 843.696227][T25648] simple_read_from_buffer+0xe1/0x170 [ 843.696251][T25648] proc_fail_nth_read+0x1bb/0x230 [ 843.696272][T25648] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 843.696293][T25648] ? rw_verify_area+0x24a/0x4c0 [ 843.696315][T25648] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 843.696332][T25648] vfs_read+0x213/0xa80 [ 843.696357][T25648] ? __pfx___mutex_lock+0x10/0x10 [ 843.696375][T25648] ? __pfx_vfs_read+0x10/0x10 [ 843.696397][T25648] ? __fget_files+0x2a/0x420 [ 843.696418][T25648] ? __fget_files+0x3a2/0x420 [ 843.696434][T25648] ? __fget_files+0x2a/0x420 [ 843.696458][T25648] ksys_read+0x150/0x270 [ 843.696480][T25648] ? __pfx_ksys_read+0x10/0x10 [ 843.696507][T25648] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 843.696526][T25648] do_syscall_64+0x174/0x580 [ 843.696542][T25648] ? trace_irq_disable+0x3b/0x140 [ 843.696558][T25648] ? clear_bhb_loop+0x40/0x90 [ 843.696584][T25648] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 843.696601][T25648] RIP: 0033:0x7f937095d68e [ 843.696618][T25648] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 843.696633][T25648] RSP: 002b:00007f9371940fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 843.696652][T25648] RAX: ffffffffffffffda RBX: 00007f93719416c0 RCX: 00007f937095d68e [ 843.696665][T25648] RDX: 000000000000000f RSI: 00007f93719410a0 RDI: 0000000000000004 [ 843.696676][T25648] RBP: 00007f9371941090 R08: 0000000000000000 R09: 0000000000000000 [ 843.696688][T25648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 843.696700][T25648] R13: 00007f9370c16038 R14: 00007f9370c15fa0 R15: 00007ffc66f507d8 [ 843.696727][T25648] [ 843.945510][T25646] netlink: zone id is out of range [ 843.996480][T25646] netlink: zone id is out of range [ 844.018204][T25646] netlink: zone id is out of range [ 844.036830][T25646] netlink: zone id is out of range [ 844.062533][T25646] netlink: zone id is out of range [ 844.074833][T25646] netlink: zone id is out of range [ 844.086498][T25646] netlink: zone id is out of range [ 844.114330][T25646] netlink: zone id is out of range [ 844.133101][T25646] netlink: zone id is out of range [ 844.152854][T25646] netlink: zone id is out of range [ 844.299885][T25654] lo speed is unknown, defaulting to 1000 [ 845.003702][T25654] netlink: 'syz.4.5643': attribute type 4 has an invalid length. [ 845.177563][T25670] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5649'. [ 845.256314][T25670] macvtap4: entered promiscuous mode [ 845.278076][T25670] macvtap4: entered allmulticast mode [ 845.329119][T25672] macvtap4: left promiscuous mode [ 845.353764][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 845.361431][T25672] macvtap4: left allmulticast mode [ 845.807110][T25693] netlink: 'syz.0.5659': attribute type 2 has an invalid length. [ 845.924768][T25703] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5658'. [ 846.590240][T25734] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5666'. [ 846.746610][T25736] FAULT_INJECTION: forcing a failure. [ 846.746610][T25736] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 846.782552][T25736] CPU: 1 UID: 0 PID: 25736 Comm: syz.0.5667 Not tainted syzkaller #0 PREEMPT(full) [ 846.782583][T25736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 846.782597][T25736] Call Trace: [ 846.782606][T25736] [ 846.782616][T25736] dump_stack_lvl+0xe8/0x150 [ 846.782648][T25736] should_fail_ex+0x40c/0x560 [ 846.782682][T25736] _copy_from_user+0x2d/0xb0 [ 846.782707][T25736] get_timespec64+0x96/0x1b0 [ 846.782734][T25736] ? __pfx_get_timespec64+0x10/0x10 [ 846.782760][T25736] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 846.782805][T25736] __se_sys_ppoll+0xe3/0x2b0 [ 846.782840][T25736] ? fput+0xa0/0xd0 [ 846.782876][T25736] ? __pfx___se_sys_ppoll+0x10/0x10 [ 846.782910][T25736] ? __pfx_ksys_write+0x10/0x10 [ 846.782943][T25736] ? __x64_sys_ppoll+0x20/0xc0 [ 846.782975][T25736] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 846.783000][T25736] do_syscall_64+0x174/0x580 [ 846.783020][T25736] ? trace_irq_disable+0x3b/0x140 [ 846.783042][T25736] ? clear_bhb_loop+0x40/0x90 [ 846.783071][T25736] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 846.783094][T25736] RIP: 0033:0x7fdb57d9ce59 [ 846.783115][T25736] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 846.783135][T25736] RSP: 002b:00007fdb58b70028 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 846.783159][T25736] RAX: ffffffffffffffda RBX: 00007fdb58015fa0 RCX: 00007fdb57d9ce59 [ 846.783176][T25736] RDX: 00002000000004c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 846.783191][T25736] RBP: 00007fdb58b70090 R08: 0000000000000000 R09: 0000000000000000 [ 846.783210][T25736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 846.783222][T25736] R13: 00007fdb58016038 R14: 00007fdb58015fa0 R15: 00007ffe437d6988 [ 846.783256][T25736] [ 847.005240][T25738] vlan3: entered promiscuous mode [ 847.010380][T25738] hsr0: entered promiscuous mode [ 847.016059][T25738] vlan3: entered allmulticast mode [ 847.021238][T25738] hsr0: entered allmulticast mode [ 847.026378][T25738] hsr_slave_0: entered allmulticast mode [ 847.032073][T25738] hsr_slave_1: entered allmulticast mode [ 847.299089][T25750] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5674'. [ 847.319594][T25750] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5674'. [ 847.405659][T25754] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5675'. [ 847.690353][T25773] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5679'. [ 847.776710][T25767] syzkaller0: entered promiscuous mode [ 847.790617][T25767] syzkaller0: entered allmulticast mode [ 848.585708][T25789] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5684'. [ 848.689087][T25788] syzkaller0: entered promiscuous mode [ 848.695946][T25788] syzkaller0: entered allmulticast mode [ 848.813634][T25794] tipc: Enabled bearer , priority 0 [ 848.877458][T25787] tipc: Resetting bearer [ 848.916101][T25800] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5687'. [ 848.977011][T25787] tipc: Disabling bearer [ 849.345257][T25813] syzkaller0: entered promiscuous mode [ 849.355184][T25809] xt_NFQUEUE: number of total queues is 0 [ 849.368769][T25813] syzkaller0: entered allmulticast mode [ 849.410171][T25816] netlink: 'syz.0.5693': attribute type 1 has an invalid length. [ 849.456145][T25809] bond7: option arp_all_targets: invalid value (3) [ 849.468229][T25809] bond7 (unregistering): Released all slaves [ 849.693842][T25819] bond10: entered promiscuous mode [ 849.703906][T25819] bond10: entered allmulticast mode [ 849.709853][T25819] 8021q: adding VLAN 0 to HW filter on device bond10 [ 849.721900][T25822] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5694'. [ 849.739111][T25822] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5694'. [ 849.951274][T25840] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5696'. [ 850.581371][T25866] netlink: 'syz.0.5702': attribute type 30 has an invalid length. [ 850.603354][T25866] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5702'. [ 850.723811][T25866] bond11: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4) [ 850.770993][T25866] bond11 (unregistering): Released all slaves [ 850.808471][T25875] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5707'. [ 850.847655][T25870] bond3: left allmulticast mode [ 850.939574][T25879] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 851.085442][T25885] vlan0: entered promiscuous mode [ 851.239265][T25889] IPVS: persistence engine module ip_vs_pe_À not found [ 851.406177][T25897] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5712'. [ 851.430338][T25897] netlink: 136 bytes leftover after parsing attributes in process `syz.0.5712'. [ 851.512158][T25899] netlink: 424 bytes leftover after parsing attributes in process `syz.1.5713'. [ 851.522173][T25899] netlink: 'syz.1.5713': attribute type 1 has an invalid length. [ 851.543790][T25899] team0: No ports can be present during mode change [ 851.795847][T25908] macvtap3: entered promiscuous mode [ 851.802979][T25908] macvtap3: entered allmulticast mode [ 851.809329][T25908] bridge0: entered allmulticast mode [ 851.824204][T25910] netlink: 'syz.1.5716': attribute type 30 has an invalid length. [ 851.848104][T25908] bridge0: left allmulticast mode [ 851.864063][T25908] macvtap3: left promiscuous mode [ 851.869305][T25908] macvtap3: left allmulticast mode [ 851.959461][T25910] bond12: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4) [ 851.997956][T25910] bond12 (unregistering): Released all slaves [ 852.142619][T25921] FAULT_INJECTION: forcing a failure. [ 852.142619][T25921] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 852.213668][T25921] CPU: 0 UID: 0 PID: 25921 Comm: syz.4.5721 Not tainted syzkaller #0 PREEMPT(full) [ 852.213700][T25921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 852.213713][T25921] Call Trace: [ 852.213722][T25921] [ 852.213732][T25921] dump_stack_lvl+0xe8/0x150 [ 852.213765][T25921] should_fail_ex+0x40c/0x560 [ 852.213800][T25921] _copy_to_user+0x31/0xb0 [ 852.213828][T25921] simple_read_from_buffer+0xe1/0x170 [ 852.213856][T25921] proc_fail_nth_read+0x1bb/0x230 [ 852.213883][T25921] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 852.213910][T25921] ? rw_verify_area+0x24a/0x4c0 [ 852.213938][T25921] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 852.213960][T25921] vfs_read+0x213/0xa80 [ 852.213992][T25921] ? __pfx___mutex_lock+0x10/0x10 [ 852.214016][T25921] ? __pfx_vfs_read+0x10/0x10 [ 852.214044][T25921] ? __fget_files+0x2a/0x420 [ 852.214072][T25921] ? __fget_files+0x3a2/0x420 [ 852.214092][T25921] ? __fget_files+0x2a/0x420 [ 852.214124][T25921] ksys_read+0x150/0x270 [ 852.214154][T25921] ? __pfx_ksys_read+0x10/0x10 [ 852.214189][T25921] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 852.214213][T25921] do_syscall_64+0x174/0x580 [ 852.214234][T25921] ? trace_irq_disable+0x3b/0x140 [ 852.214255][T25921] ? clear_bhb_loop+0x40/0x90 [ 852.214284][T25921] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 852.214315][T25921] RIP: 0033:0x7f937095d68e [ 852.214336][T25921] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 852.214355][T25921] RSP: 002b:00007f9371940fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 852.214378][T25921] RAX: ffffffffffffffda RBX: 00007f93719416c0 RCX: 00007f937095d68e [ 852.214396][T25921] RDX: 000000000000000f RSI: 00007f93719410a0 RDI: 0000000000000004 [ 852.214410][T25921] RBP: 00007f9371941090 R08: 0000000000000000 R09: 0000000000000000 [ 852.214424][T25921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 852.214437][T25921] R13: 00007f9370c16038 R14: 00007f9370c15fa0 R15: 00007ffc66f507d8 [ 852.214473][T25921] [ 853.821481][T25977] __nla_validate_parse: 5 callbacks suppressed [ 853.821504][T25977] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5738'. [ 854.175402][T25993] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5742'. [ 854.251977][T25997] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5744'. [ 854.803694][T26009] netlink: 'syz.2.5747': attribute type 9 has an invalid length. [ 854.811809][T26009] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5747'. [ 856.408744][ T4994] udevd[4994]: worker [23720] /devices/virtual/block/nbd3 is taking a long time [ 857.420096][T26009] bond0: option arp_validate: invalid value (228) [ 857.695442][T26023] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5752'. [ 857.805209][T26026] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5752'. [ 857.815149][T26027] xt_NFQUEUE: number of total queues is 0 [ 857.886789][T26025] bond11: (slave bridge21): Enslaving as an active interface with an up link [ 857.906966][T26035] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 857.951393][T26019] bond7: option arp_all_targets: invalid value (3) [ 857.958641][T26038] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5754'. [ 857.964275][T26019] bond7 (unregistering): Released all slaves [ 858.002431][T26026] bond11: entered promiscuous mode [ 858.007976][T26026] bridge21: entered promiscuous mode [ 858.014451][T26026] bond11: entered allmulticast mode [ 858.019754][T26026] bridge21: entered allmulticast mode [ 858.027313][T26026] 8021q: adding VLAN 0 to HW filter on device bond11 [ 858.054281][T26040] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5754'. [ 858.197952][T26042] netlink: 277 bytes leftover after parsing attributes in process `syz.0.5755'. [ 858.301577][T26042] netlink: 'syz.0.5755': attribute type 3 has an invalid length. [ 858.358925][T26042] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5755'. [ 858.841965][T26079] xt_NFQUEUE: number of total queues is 0 [ 858.854060][T26085] veth0: entered promiscuous mode [ 858.866495][T26081] syzkaller0: entered promiscuous mode [ 858.876942][T26081] syzkaller0: entered allmulticast mode [ 858.901118][T26081] netlink: 'syz.4.5767': attribute type 1 has an invalid length. [ 858.919974][T26089] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5768'. [ 858.952069][T26079] bond12: option arp_all_targets: invalid value (3) [ 858.967355][T26079] bond12 (unregistering): Released all slaves [ 859.015417][T26095] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5767'. [ 859.041935][T26085] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 859.249520][T26093] bond9 (unregistering): Released all slaves [ 859.364148][T26082] veth0: left promiscuous mode [ 859.787115][T26118] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5776'. [ 860.064574][T26138] FAULT_INJECTION: forcing a failure. [ 860.064574][T26138] name failslab, interval 1, probability 0, space 0, times 0 [ 860.077359][T26138] CPU: 0 UID: 0 PID: 26138 Comm: syz.4.5781 Not tainted syzkaller #0 PREEMPT(full) [ 860.077390][T26138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 860.077403][T26138] Call Trace: [ 860.077413][T26138] [ 860.077423][T26138] dump_stack_lvl+0xe8/0x150 [ 860.077456][T26138] should_fail_ex+0x40c/0x560 [ 860.077493][T26138] should_failslab+0xa8/0x100 [ 860.077522][T26138] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 860.077555][T26138] ? skb_clone+0x212/0x3a0 [ 860.077579][T26138] ? skb_clone+0x212/0x3a0 [ 860.077611][T26138] skb_clone+0x212/0x3a0 [ 860.077641][T26138] bpf_clone_redirect+0x170/0x4b0 [ 860.077681][T26138] ? bpf_test_run+0x1d1/0x830 [ 860.077707][T26138] bpf_prog_8dc8bbec83c669e7+0x22/0x2a [ 860.077730][T26138] bpf_test_run+0x354/0x830 [ 860.077779][T26138] ? __pfx_bpf_test_run+0x10/0x10 [ 860.077817][T26138] ? csum_partial+0x239/0x2c0 [ 860.077854][T26138] ? skb_dst_set+0x72/0x140 [ 860.077882][T26138] bpf_prog_test_run_skb+0xe35/0x2230 [ 860.077929][T26138] ? __fget_files+0x3a2/0x420 [ 860.077951][T26138] ? __fget_files+0x2a/0x420 [ 860.077978][T26138] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 860.078005][T26138] bpf_prog_test_run+0x2c5/0x340 [ 860.078034][T26138] __sys_bpf+0xa22/0xd90 [ 860.078062][T26138] ? __pfx___sys_bpf+0x10/0x10 [ 860.078097][T26138] ? __fget_files+0x2a/0x420 [ 860.078146][T26138] ? ksys_write+0x242/0x270 [ 860.078176][T26138] ? __pfx_ksys_write+0x10/0x10 [ 860.078207][T26138] __x64_sys_bpf+0xba/0xd0 [ 860.078251][T26138] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 860.078274][T26138] do_syscall_64+0x174/0x580 [ 860.078295][T26138] ? trace_irq_disable+0x3b/0x140 [ 860.078316][T26138] ? clear_bhb_loop+0x40/0x90 [ 860.078343][T26138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 860.078366][T26138] RIP: 0033:0x7f937099ce59 [ 860.078387][T26138] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 860.078406][T26138] RSP: 002b:00007f9371941028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 860.078430][T26138] RAX: ffffffffffffffda RBX: 00007f9370c15fa0 RCX: 00007f937099ce59 [ 860.078447][T26138] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 860.078461][T26138] RBP: 00007f9371941090 R08: 0000000000000000 R09: 0000000000000000 [ 860.078476][T26138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 860.078489][T26138] R13: 00007f9370c16038 R14: 00007f9370c15fa0 R15: 00007ffc66f507d8 [ 860.078522][T26138] [ 860.403530][T26142] lo speed is unknown, defaulting to 1000 [ 860.473057][T26140] lo speed is unknown, defaulting to 1000 [ 860.505686][T26140] lo speed is unknown, defaulting to 1000 [ 860.518003][T26146] xt_NFQUEUE: number of total queues is 0 [ 860.521187][T26144] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5783'. [ 860.554675][T26146] bond12: option arp_all_targets: invalid value (3) [ 860.563466][T26146] bond12 (unregistering): Released all slaves [ 860.601143][T26140] lo speed is unknown, defaulting to 1000 [ 860.658006][T26151] FAULT_INJECTION: forcing a failure. [ 860.658006][T26151] name failslab, interval 1, probability 0, space 0, times 0 [ 860.671957][T26151] CPU: 1 UID: 0 PID: 26151 Comm: syz.4.5784 Not tainted syzkaller #0 PREEMPT(full) [ 860.671991][T26151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 860.672007][T26151] Call Trace: [ 860.672017][T26151] [ 860.672028][T26151] dump_stack_lvl+0xe8/0x150 [ 860.672076][T26151] should_fail_ex+0x40c/0x560 [ 860.672119][T26151] should_failslab+0xa8/0x100 [ 860.672151][T26151] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 860.672190][T26151] ? skb_ext_add+0x148/0x8e0 [ 860.672214][T26151] ? skb_ext_add+0x148/0x8e0 [ 860.672248][T26151] skb_ext_add+0x148/0x8e0 [ 860.672274][T26151] ? dev_get_by_index+0x22/0x2d0 [ 860.672315][T26151] isotp_sendmsg+0x825/0x1540 [ 860.672451][T26151] ? __pfx_isotp_sendmsg+0x10/0x10 [ 860.672475][T26151] ? aa_sk_perm+0x6d5/0x900 [ 860.672512][T26151] ? __mutex_trylock_common+0x15f/0x270 [ 860.672547][T26151] ? __pfx_aa_sk_perm+0x10/0x10 [ 860.672580][T26151] ? aa_sock_msg_perm+0xf1/0x1b0 [ 860.672617][T26151] ? __pfx_isotp_sendmsg+0x10/0x10 [ 860.672642][T26151] sock_sendmsg_nosec+0x13a/0x180 [ 860.672681][T26151] sock_sendmsg+0x1ca/0x2d0 [ 860.672721][T26151] ? __pfx_sock_sendmsg+0x10/0x10 [ 860.672772][T26151] ? __asan_memset+0x22/0x50 [ 860.672812][T26151] ? iov_iter_bvec+0xb8/0x180 [ 860.672841][T26151] splice_to_socket+0xb5e/0x12a0 [ 860.672915][T26151] ? __pfx_splice_to_socket+0x10/0x10 [ 860.672993][T26151] ? bpf_lsm_file_permission+0x9/0x20 [ 860.673027][T26151] ? security_file_permission+0x75/0x260 [ 860.673077][T26151] ? rw_verify_area+0x203/0x4c0 [ 860.673107][T26151] ? __pfx_splice_to_socket+0x10/0x10 [ 860.673136][T26151] do_splice+0xf14/0x1970 [ 860.673195][T26151] ? __pfx_do_splice+0x10/0x10 [ 860.673231][T26151] __se_sys_splice+0x353/0x490 [ 860.673267][T26151] ? __pfx___se_sys_splice+0x10/0x10 [ 860.673293][T26151] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 860.673325][T26151] ? __x64_sys_splice+0x21/0xf0 [ 860.673353][T26151] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 860.673380][T26151] do_syscall_64+0x174/0x580 [ 860.673406][T26151] ? clear_bhb_loop+0x40/0x90 [ 860.673438][T26151] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 860.673464][T26151] RIP: 0033:0x7f937099ce59 [ 860.673488][T26151] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 860.673509][T26151] RSP: 002b:00007f9371920028 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 860.673536][T26151] RAX: ffffffffffffffda RBX: 00007f9370c16090 RCX: 00007f937099ce59 [ 860.673570][T26151] RDX: 0000000000000006 RSI: 0000000000000000 RDI: 0000000000000005 [ 860.673586][T26151] RBP: 00007f9371920090 R08: 000000000000fffd R09: 0000000000000000 [ 860.673603][T26151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 860.673619][T26151] R13: 00007f9370c16128 R14: 00007f9370c16090 R15: 00007ffc66f507d8 [ 860.673661][T26151] [ 861.046379][T26153] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5785'. [ 861.194423][T26140] infiniband syz1: set active [ 861.199274][T26140] infiniband syz1: added lo [ 861.209333][ T5745] lo speed is unknown, defaulting to 1000 [ 861.227828][T26140] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 861.243036][T26140] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 861.260967][T26140] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 861.292786][T26140] RDS/IB: syz1: added [ 861.304720][T26140] smc: adding ib device syz1 with port count 1 [ 861.311241][T26140] smc: ib device syz1 port 1 has no pnetid [ 861.319194][ T195] lo speed is unknown, defaulting to 1000 [ 861.326595][T26140] lo speed is unknown, defaulting to 1000 [ 861.498144][T26164] syzkaller1: entered promiscuous mode [ 861.513780][T26164] syzkaller1: entered allmulticast mode [ 861.796351][T26140] lo speed is unknown, defaulting to 1000 [ 861.985159][T26176] syzkaller0: entered promiscuous mode [ 862.004758][T26176] syzkaller0: entered allmulticast mode [ 862.150996][T26140] lo speed is unknown, defaulting to 1000 [ 862.571631][T26140] lo speed is unknown, defaulting to 1000 [ 862.777596][T26140] lo speed is unknown, defaulting to 1000 [ 862.942951][T26127] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 863.108580][T26187] netlink: 'syz.4.5796': attribute type 1 has an invalid length. [ 863.117143][T26187] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5796'. [ 863.169045][T26193] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5799'. [ 863.184588][T26191] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5798'. [ 863.839613][T26220] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5806'. [ 864.351095][T26238] rdma_rxe: rxe_newlink: failed to add lo [ 864.407295][T26238] lo speed is unknown, defaulting to 1000 [ 864.571027][T26244] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5811'. [ 864.679482][T26251] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5812'. [ 864.692723][T26229] sctp: [Deprecated]: syz.0.5808 (pid 26229) Use of struct sctp_assoc_value in delayed_ack socket option. [ 864.692723][T26229] Use struct sctp_sack_info instead [ 865.215378][T26257] FAULT_INJECTION: forcing a failure. [ 865.215378][T26257] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 865.229090][T26257] CPU: 1 UID: 0 PID: 26257 Comm: syz.3.5814 Not tainted syzkaller #0 PREEMPT(full) [ 865.229120][T26257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 865.229135][T26257] Call Trace: [ 865.229144][T26257] [ 865.229153][T26257] dump_stack_lvl+0xe8/0x150 [ 865.229187][T26257] should_fail_ex+0x40c/0x560 [ 865.229223][T26257] _copy_from_iter+0x1d3/0x1660 [ 865.229255][T26257] ? kmem_cache_alloc_node_noprof+0x1b1/0x610 [ 865.229291][T26257] ? rcu_is_watching+0x15/0xb0 [ 865.229328][T26257] ? trace_kmem_cache_alloc+0x29/0xe0 [ 865.229364][T26257] ? kmem_cache_alloc_node_noprof+0x3b8/0x610 [ 865.229398][T26257] ? __pfx__copy_from_iter+0x10/0x10 [ 865.229430][T26257] ? __alloc_skb+0x276/0x7a0 [ 865.229450][T26257] ? __alloc_skb+0x276/0x7a0 [ 865.229477][T26257] ? netlink_sendmsg+0x650/0xb40 [ 865.229502][T26257] ? skb_put+0x112/0x210 [ 865.229528][T26257] netlink_sendmsg+0x6c0/0xb40 [ 865.229564][T26257] ? __pfx_netlink_sendmsg+0x10/0x10 [ 865.229595][T26257] ? aa_sock_msg_perm+0xf1/0x1b0 [ 865.229629][T26257] ? __pfx_netlink_sendmsg+0x10/0x10 [ 865.229654][T26257] sock_sendmsg_nosec+0x13a/0x180 [ 865.229688][T26257] ____sys_sendmsg+0x54e/0x850 [ 865.229718][T26257] ? __pfx_____sys_sendmsg+0x10/0x10 [ 865.229753][T26257] ? import_iovec+0x73/0xa0 [ 865.229785][T26257] ___sys_sendmsg+0x2a5/0x360 [ 865.229808][T26257] ? __lock_acquire+0x683/0x2cf0 [ 865.229837][T26257] ? __pfx____sys_sendmsg+0x10/0x10 [ 865.229899][T26257] ? __fget_files+0x2a/0x420 [ 865.229921][T26257] ? __fget_files+0x3a2/0x420 [ 865.229953][T26257] __x64_sys_sendmsg+0x1b1/0x290 [ 865.229982][T26257] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 865.230030][T26257] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 865.230055][T26257] do_syscall_64+0x174/0x580 [ 865.230076][T26257] ? trace_irq_disable+0x3b/0x140 [ 865.230098][T26257] ? clear_bhb_loop+0x40/0x90 [ 865.230126][T26257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 865.230148][T26257] RIP: 0033:0x7f6b91f9ce59 [ 865.230169][T26257] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 865.230190][T26257] RSP: 002b:00007f6b92e0e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 865.230214][T26257] RAX: ffffffffffffffda RBX: 00007f6b92215fa0 RCX: 00007f6b91f9ce59 [ 865.230230][T26257] RDX: 000000002c000010 RSI: 0000200000000000 RDI: 0000000000000004 [ 865.230245][T26257] RBP: 00007f6b92e0e090 R08: 0000000000000000 R09: 0000000000000000 [ 865.230260][T26257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 865.230274][T26257] R13: 00007f6b92216038 R14: 00007f6b92215fa0 R15: 00007fff546c23b8 [ 865.230309][T26257] [ 865.997301][T26268] IPVS: set_ctl: invalid protocol: 0 10.1.1.0:20001 [ 867.131795][T26227] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 867.373691][T26276] syzkaller0: entered promiscuous mode [ 867.387347][T26276] syzkaller0: entered allmulticast mode [ 867.458509][T26281] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5818'. [ 867.730855][T26296] syzkaller1: entered promiscuous mode [ 867.749708][T26296] syzkaller1: entered allmulticast mode [ 868.197037][T26312] netlink: 'syz.0.5828': attribute type 30 has an invalid length. [ 868.211795][T26314] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 868.223929][T26312] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5828'. [ 868.266474][T26312] bond12: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4) [ 868.280819][T26312] bond12 (unregistering): Released all slaves [ 868.416148][T26322] IPVS: set_ctl: invalid protocol: 0 10.1.1.0:20001 [ 868.707057][T26333] lo speed is unknown, defaulting to 1000 [ 869.075107][T26332] rdma_rxe: rxe_newlink: failed to add lo [ 869.260426][T26353] netlink: 'syz.3.5839': attribute type 1 has an invalid length. [ 869.268516][T26353] netlink: 'syz.3.5839': attribute type 2 has an invalid length. [ 869.280439][T26353] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5839'. [ 869.322054][T26351] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5836'. [ 869.478492][T26361] netlink: 'syz.4.5837': attribute type 1 has an invalid length. [ 869.553106][T26361] 8021q: adding VLAN 0 to HW filter on device bond9 [ 869.615437][T26357] bond9: (slave geneve4): making interface the new active one [ 869.643575][T26357] bond9: (slave geneve4): Enslaving as an active interface with an up link [ 869.657370][T26361] netlink: 'syz.4.5837': attribute type 4 has an invalid length. [ 870.315006][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.321579][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.468215][T26324] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 871.852193][T26392] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5848'. [ 871.867483][T26389] IPVS: set_ctl: invalid protocol: 0 10.1.1.0:20001 [ 871.999120][T26395] netlink: 'syz.0.5849': attribute type 4 has an invalid length. [ 872.163782][T26403] netlink: 100 bytes leftover after parsing attributes in process `syz.1.5851'. [ 872.256265][T26405] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5850'. [ 872.641210][T26429] rdma_rxe: rxe_newlink: failed to add lo [ 872.661498][T26429] lo speed is unknown, defaulting to 1000 [ 872.724249][T26432] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5859'. [ 873.009882][T26440] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5861'. [ 873.042168][T26440] netlink: 'syz.4.5861': attribute type 1 has an invalid length. [ 873.547705][T26449] netlink: 'syz.0.5863': attribute type 30 has an invalid length. [ 873.556065][T26449] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5863'. [ 873.582544][T26449] bond13: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4) [ 873.594684][T26449] bond13 (unregistering): Released all slaves [ 875.467957][T26414] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 875.649938][T26452] syzkaller1: entered promiscuous mode [ 875.674065][T26452] syzkaller1: entered allmulticast mode [ 875.728852][T26460] netlink: 'syz.2.5868': attribute type 12 has an invalid length. [ 875.846423][T26466] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5867'. [ 876.383044][T26488] lo speed is unknown, defaulting to 1000 [ 876.391239][T26488] lo speed is unknown, defaulting to 1000 [ 876.789764][ T30] audit: type=1804 audit(1782838141.921:3): pid=26503 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.5877" name="/newroot/1171/cgroup.controllers" dev="tmpfs" ino=5957 res=1 errno=0 [ 876.858634][T26504] rdma_rxe: rxe_newlink: failed to add lo [ 876.886402][ T30] audit: type=1800 audit(1782838141.921:4): pid=26503 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5877" name="cgroup.controllers" dev="tmpfs" ino=5957 res=0 errno=0 [ 876.950405][T26505] lo speed is unknown, defaulting to 1000 [ 877.683700][T26521] netlink: 'syz.4.5879': attribute type 30 has an invalid length. [ 877.691831][T26521] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5879'. [ 877.787471][T26521] bond10: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4) [ 877.799654][T26521] bond10 (unregistering): Released all slaves [ 877.858709][T26525] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5881'. [ 878.007978][T26522] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5880'. [ 878.210079][T26530] veth31: entered allmulticast mode [ 878.240096][T26530] bond12: (slave veth31): Enslaving as an active interface with an up link [ 878.307913][T26525] bond13: option min_links: invalid value (18446744073709551612) [ 878.317439][T26525] bond13: option min_links: allowed values 0 - 2147483647 [ 878.327252][T26525] bond13 (unregistering): Released all slaves [ 878.634759][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 878.978684][T26550] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5886'. [ 879.609723][T26494] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 879.846633][T26561] netlink: 'syz.3.5891': attribute type 5 has an invalid length. [ 879.855806][T26561] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5891'. [ 880.024611][T26568] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5892'. [ 880.116521][T26570] netlink: 'syz.2.5893': attribute type 30 has an invalid length. [ 880.125547][T26570] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5893'. [ 880.166212][T26570] bond7: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4) [ 880.180002][T26570] bond7 (unregistering): Released all slaves [ 880.272359][T26574] IPVS: set_ctl: invalid protocol: 0 10.1.1.0:20001 [ 880.704568][T26576] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5895'. [ 880.749791][T26576] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5895'. [ 880.869601][T26581] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5897'. [ 881.343558][T26590] nbd10: detected capacity change from 0 to 127 [ 881.412549][T26601] xt_NFQUEUE: number of total queues is 0 [ 881.483812][T26607] macvtap3: entered promiscuous mode [ 881.506587][T26607] syz_tun: entered promiscuous mode [ 881.537815][T26607] macvtap3: entered allmulticast mode [ 881.545341][T26607] syz_tun: entered allmulticast mode [ 881.712041][T26593] bond13: option arp_all_targets: invalid value (3) [ 881.755543][T26593] bond13 (unregistering): Released all slaves [ 881.811824][ T4943] block nbd10: Receive control failed (result -104) [ 881.853703][T26609] lo speed is unknown, defaulting to 1000 [ 881.980215][T26620] IPVS: set_ctl: invalid protocol: 0 10.1.1.0:20001 [ 882.453495][T26626] macvtap4: entered promiscuous mode [ 882.459281][T26626] macvtap4: entered allmulticast mode [ 882.465034][T26626] bridge0: entered allmulticast mode [ 882.481037][T26626] bridge0: left allmulticast mode [ 882.486535][T26626] macvtap4: left promiscuous mode [ 882.491757][T26626] macvtap4: left allmulticast mode [ 883.588043][T26634] netlink: 'syz.3.5909': attribute type 30 has an invalid length. [ 883.596215][T26634] __nla_validate_parse: 4 callbacks suppressed [ 883.596236][T26634] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5909'. [ 883.632734][T26634] bond7: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4) [ 883.645077][T26634] bond7 (unregistering): Released all slaves [ 884.225857][T26594] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 884.457540][T26637] xt_NFQUEUE: number of total queues is 0 [ 884.539231][T26637] bond10: option arp_all_targets: invalid value (3) [ 884.580659][T26651] FAULT_INJECTION: forcing a failure. [ 884.580659][T26651] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 884.580998][T26637] bond10 (unregistering): Released all slaves [ 884.594748][T26651] CPU: 1 UID: 0 PID: 26651 Comm: syz.2.5916 Not tainted syzkaller #0 PREEMPT(full) [ 884.594822][T26651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 884.594863][T26651] Call Trace: [ 884.594892][T26651] [ 884.594915][T26651] dump_stack_lvl+0xe8/0x150 [ 884.595009][T26651] should_fail_ex+0x40c/0x560 [ 884.595120][T26651] _copy_from_user+0x2d/0xb0 [ 884.595186][T26651] kstrtouint_from_user+0xd6/0x180 [ 884.595284][T26651] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 884.595426][T26651] proc_fail_nth_write+0x8e/0x210 [ 884.595491][T26651] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 884.595598][T26651] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 884.595681][T26651] vfs_write+0x296/0xba0 [ 884.595782][T26651] ? __pfx_vfs_write+0x10/0x10 [ 884.595849][T26651] ? __fget_files+0x2a/0x420 [ 884.595921][T26651] ? __fget_files+0x3a2/0x420 [ 884.595982][T26651] ? __fget_files+0x2a/0x420 [ 884.596058][T26651] ksys_write+0x150/0x270 [ 884.596097][T26651] ? __pfx_ksys_write+0x10/0x10 [ 884.596194][T26651] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 884.596275][T26651] do_syscall_64+0x174/0x580 [ 884.596338][T26651] ? trace_irq_disable+0x3b/0x140 [ 884.596400][T26651] ? clear_bhb_loop+0x40/0x90 [ 884.596472][T26651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 884.596534][T26651] RIP: 0033:0x7f082275d68e [ 884.596616][T26651] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 884.596669][T26651] RSP: 002b:00007f08236f3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 884.596733][T26651] RAX: ffffffffffffffda RBX: 00007f08236f46c0 RCX: 00007f082275d68e [ 884.596775][T26651] RDX: 0000000000000001 RSI: 00007f08236f40a0 RDI: 0000000000000003 [ 884.596809][T26651] RBP: 00007f08236f4090 R08: 0000000000000000 R09: 0000000000000000 [ 884.596852][T26651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 884.596891][T26651] R13: 00007f0822a16038 R14: 00007f0822a15fa0 R15: 00007ffdcc56e9a8 [ 884.597006][T26651] [ 884.805301][T24913] block nbd10: Connection timed out, retrying (0/1 alive) [ 884.812715][T24913] block nbd10: Connection timed out, retrying (0/1 alive) [ 884.820056][T24913] block nbd10: Connection timed out, retrying (0/1 alive) [ 884.827516][T24913] block nbd10: Connection timed out, retrying (0/1 alive) [ 884.834840][T22256] block nbd10: Dead connection, failed to find a fallback [ 884.845925][T22256] block nbd10: shutting down sockets [ 884.854702][T22256] blk_print_req_error: 114 callbacks suppressed [ 884.854724][T22256] I/O error, dev nbd10, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 884.870519][T22256] buffer_io_error: 138 callbacks suppressed [ 884.870540][T22256] Buffer I/O error on dev nbd10, logical block 2, async page read [ 884.885028][T22256] I/O error, dev nbd10, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 884.894363][T22256] Buffer I/O error on dev nbd10, logical block 1, async page read [ 884.902236][T22256] I/O error, dev nbd10, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 884.913090][T22256] Buffer I/O error on dev nbd10, logical block 0, async page read [ 884.921234][T22256] I/O error, dev nbd10, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 884.930726][T22256] Buffer I/O error on dev nbd10, logical block 3, async page read [ 884.938965][T22256] I/O error, dev nbd10, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 884.948386][T22256] Buffer I/O error on dev nbd10, logical block 0, async page read [ 884.961875][T22256] Buffer I/O error on dev nbd10, logical block 1, async page read [ 884.969942][T22256] Buffer I/O error on dev nbd10, logical block 2, async page read [ 884.977950][T22256] Buffer I/O error on dev nbd10, logical block 3, async page read [ 884.986363][T22256] I/O error, dev nbd10, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 884.995730][T22256] Buffer I/O error on dev nbd10, logical block 0, async page read [ 885.003812][T22256] Buffer I/O error on dev nbd10, logical block 1, async page read [ 885.012078][T22256] I/O error, dev nbd10, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 885.021868][T22256] I/O error, dev nbd10, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 885.031771][T22256] I/O error, dev nbd10, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 885.038208][T26656] netlink: 632 bytes leftover after parsing attributes in process `syz.0.5915'. [ 885.042481][T22256] I/O error, dev nbd10, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 885.060118][T24071] ldm_validate_partition_table(): Disk read failed. [ 885.072066][T24071] Dev nbd10: unable to read RDB block 0 [ 885.081564][T24071] nbd10: unable to read partition table [ 885.107477][T24071] ldm_validate_partition_table(): Disk read failed. [ 885.117023][T24071] Dev nbd10: unable to read RDB block 0 [ 885.128071][T24071] nbd10: unable to read partition table [ 885.141115][T26658] netlink: 'syz.3.5917': attribute type 4 has an invalid length. [ 885.141152][T26661] netlink: 'syz.3.5917': attribute type 4 has an invalid length. [ 885.344391][T26656] bridge0: port 1(bridge_slave_0) entered disabled state [ 885.383798][T26656] bridge0: port 2(bridge_slave_1) entered disabled state [ 885.408450][T26656] bridge1: port 1(veth0_to_bond) entered disabled state [ 885.503085][ T5634] lo speed is unknown, defaulting to 1000 [ 885.518127][ T5634] syz1: Port: 1 Link DOWN [ 885.544250][ T5634] lo speed is unknown, defaulting to 1000 [ 885.664575][T26682] lo speed is unknown, defaulting to 1000 [ 888.431132][T26671] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 888.642204][T26723] netlink: 92 bytes leftover after parsing attributes in process `syz.2.5933'. [ 888.686072][T26727] syzkaller1: entered promiscuous mode [ 888.701349][T26727] syzkaller1: entered allmulticast mode [ 888.760303][T26727] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5936'. [ 889.058331][T26744] pim6reg0: tun_chr_ioctl cmd 35111 [ 889.369543][T26756] IPv6: sit2: Disabled Multicast RS [ 889.398461][T26756] netlink: 'syz.4.5946': attribute type 1 has an invalid length. [ 889.420625][T26756] netlink: 232 bytes leftover after parsing attributes in process `syz.4.5946'. [ 889.441555][T26756] netlink: 'syz.4.5946': attribute type 1 has an invalid length. [ 889.741243][T26769] IPVS: set_ctl: invalid protocol: 0 10.1.1.0:20001 [ 889.789336][T26774] netlink: 108 bytes leftover after parsing attributes in process `syz.0.5951'. [ 890.086321][T26781] xt_hashlimit: size too large, truncated to 1048576 [ 890.185713][T26784] SET target dimension over the limit! [ 890.431585][T26796] xt_NFQUEUE: number of total queues is 0 [ 890.439573][T26794] xt_NFQUEUE: number of total queues is 0 [ 890.505662][T26796] bond13: option arp_all_targets: invalid value (3) [ 890.515544][T26796] bond13 (unregistering): Released all slaves [ 890.631849][T26794] bond13: option arp_all_targets: invalid value (3) [ 890.644545][T26794] bond13 (unregistering): Released all slaves [ 890.694984][T26805] sctp: [Deprecated]: syz.3.5960 (pid 26805) Use of int in max_burst socket option. [ 890.694984][T26805] Use struct sctp_assoc_value instead [ 890.751650][T26805] net_ratelimit: 338 callbacks suppressed [ 890.751671][T26805] netlink: zone id is out of range [ 890.802285][T26811] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5963'. [ 890.840460][T26812] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 890.910654][T26816] syzkaller1: entered promiscuous mode [ 890.917449][T26816] syzkaller1: entered allmulticast mode [ 890.978527][T26821] syz_tun: entered allmulticast mode [ 891.150790][T26829] netlink: 'syz.3.5968': attribute type 11 has an invalid length. [ 891.217224][T26831] netlink: 'syz.1.5970': attribute type 1 has an invalid length. [ 891.239603][T26831] netlink: 'syz.1.5970': attribute type 32 has an invalid length. [ 891.427132][T26841] netlink: 104 bytes leftover after parsing attributes in process `syz.3.5968'. [ 891.477495][T26840] xt_NFQUEUE: number of total queues is 0 [ 891.682068][T26840] bond7: option arp_all_targets: invalid value (3) [ 891.766357][T26840] bond7 (unregistering): Released all slaves [ 892.089631][T26858] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 892.510949][T26859] syzkaller1: entered allmulticast mode [ 892.567498][T26875] xt_NFQUEUE: number of total queues is 0 [ 892.590483][T26877] netlink: 'syz.0.5985': attribute type 1 has an invalid length. [ 892.619156][T26877] netlink: 'syz.0.5985': attribute type 32 has an invalid length. [ 892.650078][T26875] bond13: option arp_all_targets: invalid value (3) [ 892.665896][T26875] bond13 (unregistering): Released all slaves [ 893.464872][T26896] xt_NFQUEUE: number of total queues is 0 [ 896.710122][T26896] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR [ 896.888821][T26903] IPVS: persistence engine module ip_vs_pe_À not found [ 896.969573][T26913] Cannot find del_set index 4 as target [ 897.068555][T26917] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5993'. [ 897.174928][T26917] xt_hashlimit: max too large, truncated to 1048576 [ 897.204085][T26917] No such timeout policy "syz1" [ 897.400791][T26940] ipip0: entered promiscuous mode [ 897.407965][T26940] ipip0: entered allmulticast mode [ 897.447467][T26940] syzkaller0: entered promiscuous mode [ 897.453436][T26940] syzkaller0: entered allmulticast mode [ 897.684386][T26956] FAULT_INJECTION: forcing a failure. [ 897.684386][T26956] name failslab, interval 1, probability 0, space 0, times 0 [ 897.698867][T26956] CPU: 0 UID: 0 PID: 26956 Comm: syz.4.6007 Not tainted syzkaller #0 PREEMPT(full) [ 897.698898][T26956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 897.698908][T26956] Call Trace: [ 897.698916][T26956] [ 897.698924][T26956] dump_stack_lvl+0xe8/0x150 [ 897.698949][T26956] should_fail_ex+0x40c/0x560 [ 897.698976][T26956] should_failslab+0xa8/0x100 [ 897.698996][T26956] __kmalloc_cache_node_noprof+0xaa/0x630 [ 897.699023][T26956] ? bpf_test_run_xdp_live+0x220/0x1c20 [ 897.699046][T26956] ? page_pool_create_percpu+0x73/0xc70 [ 897.699132][T26956] ? page_pool_create_percpu+0x73/0xc70 [ 897.699159][T26956] page_pool_create_percpu+0x73/0xc70 [ 897.699180][T26956] ? page_pool_create+0xd/0x20 [ 897.699203][T26956] bpf_test_run_xdp_live+0x23a/0x1c20 [ 897.699225][T26956] ? __pfx_stack_trace_save+0x10/0x10 [ 897.699252][T26956] ? stack_depot_save_flags+0x33/0x800 [ 897.699274][T26956] ? do_raw_spin_lock+0x12b/0x2f0 [ 897.699298][T26956] ? __kmalloc_noprof+0x1ad/0x720 [ 897.699322][T26956] ? kasan_save_track+0x4f/0x80 [ 897.699336][T26956] ? kasan_save_track+0x3e/0x80 [ 897.699349][T26956] ? __kasan_kmalloc+0x93/0xb0 [ 897.699364][T26956] ? __kmalloc_noprof+0x375/0x720 [ 897.699389][T26956] ? bpf_test_init+0x9f/0x150 [ 897.699403][T26956] ? bpf_prog_test_run_xdp+0x4cc/0x11d0 [ 897.699423][T26956] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 897.699467][T26956] ? __might_fault+0xaf/0x130 [ 897.699514][T26956] ? __might_fault+0xaf/0x130 [ 897.699554][T26956] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 897.699589][T26956] ? _copy_from_user+0x94/0xb0 [ 897.699613][T26956] ? bpf_test_init+0x113/0x150 [ 897.699629][T26956] ? xdp_convert_md_to_buff+0x5b/0x330 [ 897.699649][T26956] bpf_prog_test_run_xdp+0x7d8/0x11d0 [ 897.699702][T26956] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 897.699734][T26956] ? __fget_files+0x2a/0x420 [ 897.699762][T26956] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 897.699789][T26956] bpf_prog_test_run+0x2c5/0x340 [ 897.699819][T26956] __sys_bpf+0xa22/0xd90 [ 897.699850][T26956] ? __pfx___sys_bpf+0x10/0x10 [ 897.699889][T26956] ? __fget_files+0x2a/0x420 [ 897.699918][T26956] ? ksys_write+0x242/0x270 [ 897.699939][T26956] ? __pfx_ksys_write+0x10/0x10 [ 897.699962][T26956] __x64_sys_bpf+0xba/0xd0 [ 897.699986][T26956] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 897.700003][T26956] do_syscall_64+0x174/0x580 [ 897.700018][T26956] ? trace_irq_disable+0x3b/0x140 [ 897.700033][T26956] ? clear_bhb_loop+0x40/0x90 [ 897.700053][T26956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 897.700069][T26956] RIP: 0033:0x7f937099ce59 [ 897.700085][T26956] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 897.700098][T26956] RSP: 002b:00007f9371941028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 897.700115][T26956] RAX: ffffffffffffffda RBX: 00007f9370c15fa0 RCX: 00007f937099ce59 [ 897.700127][T26956] RDX: 0000000000000050 RSI: 0000200000000c80 RDI: 000000000000000a [ 897.700137][T26956] RBP: 00007f9371941090 R08: 0000000000000000 R09: 0000000000000000 [ 897.700147][T26956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 897.700157][T26956] R13: 00007f9370c16038 R14: 00007f9370c15fa0 R15: 00007ffc66f507d8 [ 897.700182][T26956] [ 898.162834][T26960] lo speed is unknown, defaulting to 1000 [ 898.171162][T26960] lo speed is unknown, defaulting to 1000 [ 898.818016][T26960] netlink: 'syz.4.6009': attribute type 4 has an invalid length. [ 898.948525][T26981] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6011'. [ 900.115179][T26919] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 900.499832][T27005] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6022'. [ 900.709535][T27016] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6026'. [ 902.396788][T27050] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6034'. [ 903.698342][T27017] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 904.291644][T27083] netlink: 272 bytes leftover after parsing attributes in process `syz.1.6046'. [ 904.350479][T27086] netlink: 1028 bytes leftover after parsing attributes in process `syz.4.6044'. [ 904.370480][T27086] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 904.634083][T27101] FAULT_INJECTION: forcing a failure. [ 904.634083][T27101] name failslab, interval 1, probability 0, space 0, times 0 [ 904.658421][T27101] CPU: 1 UID: 0 PID: 27101 Comm: syz.0.6047 Not tainted syzkaller #0 PREEMPT(full) [ 904.658453][T27101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 904.658466][T27101] Call Trace: [ 904.658475][T27101] [ 904.658485][T27101] dump_stack_lvl+0xe8/0x150 [ 904.658519][T27101] should_fail_ex+0x40c/0x560 [ 904.658554][T27101] should_failslab+0xa8/0x100 [ 904.658582][T27101] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 904.658618][T27101] ? can_rx_register+0x6c1/0x7a0 [ 904.658649][T27101] ? can_rx_register+0x16d/0x7a0 [ 904.658676][T27101] ? can_rx_register+0x16d/0x7a0 [ 904.658719][T27101] can_rx_register+0x16d/0x7a0 [ 904.658749][T27101] ? __pfx_raw_rcv+0x10/0x10 [ 904.658784][T27101] raw_enable_filters+0x98/0x200 [ 904.658823][T27101] raw_setsockopt+0xcc2/0x12f0 [ 904.658857][T27101] ? __pfx_aa_sk_perm+0x10/0x10 [ 904.658885][T27101] ? __pfx_raw_setsockopt+0x10/0x10 [ 904.658916][T27101] ? __fget_files+0x2a/0x420 [ 904.658936][T27101] ? aa_sock_opt_perm+0xff/0x1a0 [ 904.658967][T27101] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 904.658996][T27101] ? __pfx_raw_setsockopt+0x10/0x10 [ 904.659030][T27101] do_sock_setsockopt+0x17c/0x1b0 [ 904.659061][T27101] __x64_sys_setsockopt+0x13d/0x1b0 [ 904.659087][T27101] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 904.659111][T27101] do_syscall_64+0x174/0x580 [ 904.659132][T27101] ? trace_irq_disable+0x3b/0x140 [ 904.659154][T27101] ? clear_bhb_loop+0x40/0x90 [ 904.659180][T27101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 904.659201][T27101] RIP: 0033:0x7fdb57d9ce59 [ 904.659222][T27101] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 904.659242][T27101] RSP: 002b:00007fdb55ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 904.659265][T27101] RAX: ffffffffffffffda RBX: 00007fdb58016090 RCX: 00007fdb57d9ce59 [ 904.659282][T27101] RDX: 0000000000000001 RSI: 0000000000000065 RDI: 0000000000000003 [ 904.659295][T27101] RBP: 00007fdb55ff6090 R08: 0000000000000f00 R09: 0000000000000000 [ 904.659309][T27101] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000003 [ 904.659323][T27101] R13: 00007fdb58016128 R14: 00007fdb58016090 R15: 00007ffe437d6988 [ 904.659360][T27101] [ 904.938316][T27105] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6048'. [ 905.096068][T27110] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6051'. [ 905.235337][T27117] netlink: 'syz.4.6050': attribute type 10 has an invalid length. [ 905.264273][T27118] IPVS: set_ctl: invalid protocol: 0 10.1.1.0:20001 [ 905.308831][T27117] syz_tun: entered promiscuous mode [ 905.318238][T27120] netlink: 41 bytes leftover after parsing attributes in process `syz.4.6050'. [ 905.332662][T27120] netlink: 140 bytes leftover after parsing attributes in process `syz.4.6050'. [ 905.372618][T27120] netlink: 41 bytes leftover after parsing attributes in process `syz.4.6050'. [ 905.732611][T27134] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 906.130274][T27141] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 906.661971][T27151] lo speed is unknown, defaulting to 1000 [ 906.670036][T27151] lo speed is unknown, defaulting to 1000 [ 906.706088][T27157] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6064'. [ 907.553732][T27156] netlink: 'syz.1.6065': attribute type 4 has an invalid length. [ 908.407287][T27180] xt_hashlimit: size too large, truncated to 1048576 [ 908.590771][T27190] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6074'. [ 908.712086][T27187] xt_hashlimit: size too large, truncated to 1048576 [ 908.783431][T27187] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 908.937965][T27199] syzkaller0: entered promiscuous mode [ 908.946934][T27199] syzkaller0: entered allmulticast mode [ 908.988036][T27199] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 909.495684][T27217] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6085'. [ 909.547718][T27221] netlink: 'syz.1.6085': attribute type 30 has an invalid length. [ 909.568882][T27221] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6085'. [ 909.760061][T27221] bond13: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4) [ 909.789438][T27221] bond13 (unregistering): Released all slaves [ 909.879943][T27233] x_tables: duplicate underflow at hook 1 [ 910.041197][T27232] syzkaller0: entered promiscuous mode [ 910.059616][T27232] syzkaller0: entered allmulticast mode [ 910.367400][T27245] xt_CT: You must specify a L4 protocol and not use inversions on it [ 910.385496][T27247] netlink: 'syz.1.6092': attribute type 5 has an invalid length. [ 910.729654][T27262] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6099'. [ 911.720405][T27311] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6115'. [ 912.108383][T27320] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6118'. [ 912.130172][T27326] xt_NFQUEUE: number of total queues is 0 [ 912.165520][T27326] bond7: option arp_all_targets: invalid value (3) [ 912.175202][T27326] bond7 (unregistering): Released all slaves [ 912.406331][T27334] Cannot find del_set index 4 as target [ 912.496655][T27337] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6123'. [ 912.549282][T27337] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6123'. [ 912.910165][T27351] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6130'. [ 913.118085][T27374] lo speed is unknown, defaulting to 1000 [ 913.168834][T27378] xt_NFQUEUE: number of total queues is 0 [ 913.203163][T27378] bond10: option arp_all_targets: invalid value (3) [ 913.212168][T27378] bond10 (unregistering): Released all slaves [ 913.682504][T27386] Cannot find set identified by id 65534 to match [ 915.960914][T27367] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 916.233801][T27412] syzkaller0: entered promiscuous mode [ 916.255337][T27412] syzkaller0: entered allmulticast mode [ 916.419845][T27432] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6146'. [ 916.737396][T27446] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 917.106859][T27467] Cannot find del_set index 4 as target [ 917.118386][T27468] lo speed is unknown, defaulting to 1000 [ 917.519177][T27485] netlink: 'syz.3.6160': attribute type 30 has an invalid length. [ 917.527448][T27485] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6160'. [ 917.567082][T27485] bond7: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4) [ 917.581162][T27485] bond7 (unregistering): Released all slaves [ 919.914335][T27455] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 920.056010][T27496] syzkaller0: entered promiscuous mode [ 920.061626][T27496] syzkaller0: entered allmulticast mode [ 920.237719][T27507] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 920.411166][T27509] bond13: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3) [ 920.430299][T27509] bond13 (unregistering): Released all slaves [ 920.621618][T27524] bond13: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 920.639945][T27524] bond13 (unregistering): Released all slaves [ 920.797588][T27524] netlink: 'syz.0.6169': attribute type 15 has an invalid length. [ 921.162978][T27553] syzkaller0: entered promiscuous mode [ 921.175183][T27553] syzkaller0: entered allmulticast mode [ 921.603032][T27569] IPVS: set_ctl: invalid protocol: 51 172.20.20.170:20001 [ 921.740181][T27571] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6185'. [ 921.846467][T27575] netlink: 108 bytes leftover after parsing attributes in process `syz.0.6186'. [ 921.947692][T27578] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6187'. [ 922.655318][T27584] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6189'. [ 922.731176][T27574] syz_tun: left promiscuous mode [ 922.779714][T27574] A link change request failed with some changes committed already. Interface »»»»»» may have been left with an inconsistent configuration, please check. [ 922.958861][T27591] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6190'. [ 923.112733][T27591] nbd11: detected capacity change from 0 to 127 [ 923.307818][T27613] netlink: 108 bytes leftover after parsing attributes in process `syz.4.6197'. [ 923.523797][T27617] syzkaller0: entered promiscuous mode [ 923.542026][T27617] syzkaller0: entered allmulticast mode [ 923.653900][T16054] block nbd11: Receive control failed (result -104) [ 924.282524][T27638] netlink: 'syz.4.6202': attribute type 10 has an invalid length. [ 924.341829][T27638] bridge0: port 1(dummy0) entered disabled state [ 924.381101][T27626] netlink: 'syz.4.6202': attribute type 10 has an invalid length. [ 924.394097][T27646] netlink: 207236 bytes leftover after parsing attributes in process `syz.0.6205'. [ 924.404075][T27638] dummy0: left allmulticast mode [ 924.410512][T27638] dummy0: left promiscuous mode [ 924.418956][T27646] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6205'. [ 924.428709][T27638] bridge0: port 1(dummy0) entered disabled state [ 924.452634][T27638] team0: Port device dummy0 added [ 924.639623][T27626] team0: Port device dummy0 removed [ 924.661656][T27626] : (slave dummy0): Enslaving as an active interface with an up link [ 924.670550][T27626] dummy0: entered promiscuous mode [ 924.868617][T27656] syzkaller0: entered promiscuous mode [ 924.883129][T27656] syzkaller0: entered allmulticast mode [ 925.562849][T27692] Cannot find del_set index 4 as target [ 925.617054][T27696] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6227'. [ 925.694205][T27699] netlink: 'syz.2.6228': attribute type 30 has an invalid length. [ 925.716436][T27699] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6228'. [ 925.854869][T27699] bond7: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4) [ 925.898272][T27699] bond7 (unregistering): Released all slaves [ 926.322284][T27720] netlink: 'syz.4.6235': attribute type 4 has an invalid length. [ 926.389495][T27722] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 926.399161][T27722] IPv6: NLM_F_CREATE should be set when creating new route [ 926.406501][T27722] IPv6: NLM_F_CREATE should be set when creating new route [ 926.494218][T22256] block nbd11: Connection timed out, retrying (0/1 alive) [ 926.501672][T22256] block nbd11: Connection timed out, retrying (0/1 alive) [ 926.509594][T24913] block nbd11: Dead connection, failed to find a fallback [ 926.517043][T24913] block nbd11: shutting down sockets [ 926.522404][T24913] blk_print_req_error: 117 callbacks suppressed [ 926.522423][T24913] I/O error, dev nbd11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 926.538940][T22256] block nbd11: Connection timed out, retrying (0/1 alive) [ 926.546293][T22256] block nbd11: Connection timed out, retrying (0/1 alive) [ 926.554043][T24913] buffer_io_error: 138 callbacks suppressed [ 926.554063][T24913] Buffer I/O error on dev nbd11, logical block 0, async page read [ 926.569642][T24913] I/O error, dev nbd11, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 926.582903][T24913] Buffer I/O error on dev nbd11, logical block 3, async page read [ 926.590966][T24913] I/O error, dev nbd11, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 926.600415][T24913] Buffer I/O error on dev nbd11, logical block 2, async page read [ 926.608632][T24913] I/O error, dev nbd11, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 926.617947][T24913] Buffer I/O error on dev nbd11, logical block 1, async page read [ 926.626370][T24913] I/O error, dev nbd11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 926.639078][T24913] Buffer I/O error on dev nbd11, logical block 0, async page read [ 926.649088][T24913] Buffer I/O error on dev nbd11, logical block 1, async page read [ 926.657201][T24913] Buffer I/O error on dev nbd11, logical block 2, async page read [ 926.665645][T24913] Buffer I/O error on dev nbd11, logical block 3, async page read [ 926.674100][T24913] I/O error, dev nbd11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 926.683539][T24913] Buffer I/O error on dev nbd11, logical block 0, async page read [ 926.691481][T24913] Buffer I/O error on dev nbd11, logical block 1, async page read [ 926.699853][T24913] I/O error, dev nbd11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 926.709661][T24913] I/O error, dev nbd11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 926.719785][T24913] I/O error, dev nbd11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 926.729969][T24913] I/O error, dev nbd11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 926.739879][T24071] ldm_validate_partition_table(): Disk read failed. [ 926.749662][T24071] Dev nbd11: unable to read RDB block 0 [ 926.766266][T24071] nbd11: unable to read partition table [ 926.825054][T24071] ldm_validate_partition_table(): Disk read failed. [ 926.871601][T27720] bridge0: port 2(bridge_slave_1) entered disabled state [ 926.887941][T24071] Dev nbd11: unable to read RDB block 0 [ 926.916906][T24071] nbd11: unable to read partition table [ 927.077381][T27720] bond_slave_0: left promiscuous mode [ 927.091515][T27720] bond_slave_1: left promiscuous mode [ 927.203661][T27740] netlink: 'syz.3.6243': attribute type 2 has an invalid length. [ 927.229218][T27740] __nla_validate_parse: 3 callbacks suppressed [ 927.229237][T27740] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6243'. [ 927.283044][T27720] bridge3: port 1(veth0_to_bond) entered disabled state [ 927.433875][T27753] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6243'. [ 928.289705][T27720] erspan0: left allmulticast mode [ 929.604226][T27798] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6257'. [ 929.622552][T27798] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6257'. [ 929.827680][T27802] FAULT_INJECTION: forcing a failure. [ 929.827680][T27802] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 929.853453][T27802] CPU: 1 UID: 0 PID: 27802 Comm: syz.1.6259 Not tainted syzkaller #0 PREEMPT(full) [ 929.853484][T27802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 929.853499][T27802] Call Trace: [ 929.853509][T27802] [ 929.853519][T27802] dump_stack_lvl+0xe8/0x150 [ 929.853553][T27802] should_fail_ex+0x40c/0x560 [ 929.853591][T27802] prepare_alloc_pages+0x230/0x650 [ 929.853625][T27802] __alloc_frozen_pages_noprof+0x12f/0x380 [ 929.853655][T27802] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 929.853685][T27802] ? __pfx_policy_nodemask+0x10/0x10 [ 929.853722][T27802] alloc_pages_mpol+0x212/0x380 [ 929.853757][T27802] folio_alloc_mpol_noprof+0x39/0x160 [ 929.853787][T27802] shmem_alloc_and_add_folio+0x43e/0xf60 [ 929.853818][T27802] ? filemap_get_entry+0xcd/0x3f0 [ 929.853859][T27802] ? __pfx_filemap_get_entry+0x10/0x10 [ 929.853890][T27802] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 929.853922][T27802] ? shmem_allowable_huge_orders+0x325/0x6c0 [ 929.853957][T27802] shmem_get_folio_gfp+0x5da/0x16d0 [ 929.854007][T27802] shmem_fallocate+0x962/0xeb0 [ 929.854062][T27802] ? __pfx_shmem_fallocate+0x10/0x10 [ 929.854100][T27802] ? vfs_fallocate+0x5e0/0x7e0 [ 929.854151][T27802] vfs_fallocate+0x65a/0x7e0 [ 929.854188][T27802] ? __pfx_vfs_fallocate+0x10/0x10 [ 929.854229][T27802] file_ioctl+0x564/0x7d0 [ 929.854262][T27802] ? __pfx_file_ioctl+0x10/0x10 [ 929.854307][T27802] ? kasan_quarantine_put+0xbb/0x1f0 [ 929.854352][T27802] ? tomoyo_path_number_perm+0x219/0x5f0 [ 929.854379][T27802] ? tomoyo_path_number_perm+0x219/0x5f0 [ 929.854415][T27802] do_vfs_ioctl+0xc27/0x1530 [ 929.854448][T27802] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 929.854493][T27802] ? hook_file_ioctl+0x1f0/0x5f0 [ 929.854543][T27802] ? __fget_files+0x2a/0x420 [ 929.854569][T27802] ? __fget_files+0x2a/0x420 [ 929.854589][T27802] ? __fget_files+0x3a2/0x420 [ 929.854610][T27802] ? __fget_files+0x2a/0x420 [ 929.854636][T27802] ? bpf_lsm_file_ioctl+0x9/0x20 [ 929.854673][T27802] __se_sys_ioctl+0x82/0x170 [ 929.854701][T27802] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 929.854725][T27802] do_syscall_64+0x174/0x580 [ 929.854747][T27802] ? trace_irq_disable+0x3b/0x140 [ 929.854768][T27802] ? clear_bhb_loop+0x40/0x90 [ 929.854798][T27802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 929.854820][T27802] RIP: 0033:0x7f60fd79ce59 [ 929.854842][T27802] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 929.854862][T27802] RSP: 002b:00007f60fe674028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 929.854891][T27802] RAX: ffffffffffffffda RBX: 00007f60fda15fa0 RCX: 00007f60fd79ce59 [ 929.854908][T27802] RDX: 0000200000000080 RSI: 0000000040305828 RDI: 000000000000000b [ 929.854922][T27802] RBP: 00007f60fe674090 R08: 0000000000000000 R09: 0000000000000000 [ 929.854937][T27802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 929.854950][T27802] R13: 00007f60fda16038 R14: 00007f60fda15fa0 R15: 00007ffd2d236f68 [ 929.854986][T27802] [ 929.856099][T27802] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6259'. [ 930.142722][T27805] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6259'. [ 930.742402][T27824] Cannot find del_set index 4 as target [ 930.870705][T27831] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6267'. [ 930.924916][T27835] netlink: 'syz.0.6268': attribute type 1 has an invalid length. [ 931.149182][T27842] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6269'. [ 931.189446][T27844] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6270'. [ 931.211786][T27834] macsec1: entered promiscuous mode [ 931.391652][T27848] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6272'. [ 931.591139][T27853] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 931.763429][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.772594][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.832374][T27860] xt_NFQUEUE: number of total queues is 0 [ 931.968655][T27860] bond13: option arp_all_targets: invalid value (3) [ 932.008626][T27860] bond13 (unregistering): Released all slaves [ 932.025162][T27865] netlink: 'syz.1.6279': attribute type 1 has an invalid length. [ 932.314237][T27877] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6283'. [ 932.381294][T27881] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6284'. [ 932.410609][T27877] macvtap4: entered promiscuous mode [ 932.426598][T27877] macvtap4: entered allmulticast mode [ 932.453932][T27882] macvtap4: left promiscuous mode [ 932.463285][T27882] macvtap4: left allmulticast mode [ 932.474567][T27880] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6285'. [ 932.683921][T27888] syzkaller0: entered promiscuous mode [ 932.707423][T27888] syzkaller0: entered allmulticast mode [ 932.832326][T27894] FAULT_INJECTION: forcing a failure. [ 932.832326][T27894] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 932.864719][T27894] CPU: 1 UID: 0 PID: 27894 Comm: syz.0.6290 Not tainted syzkaller #0 PREEMPT(full) [ 932.864755][T27894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 932.864770][T27894] Call Trace: [ 932.864780][T27894] [ 932.864792][T27894] dump_stack_lvl+0xe8/0x150 [ 932.864828][T27894] should_fail_ex+0x40c/0x560 [ 932.864870][T27894] _copy_from_user+0x2d/0xb0 [ 932.864898][T27894] ___sys_recvmsg+0x173/0x5a0 [ 932.864936][T27894] ? __pfx____sys_recvmsg+0x10/0x10 [ 932.864971][T27894] ? __fget_files+0x2a/0x420 [ 932.865017][T27894] ? __fget_files+0x3a2/0x420 [ 932.865056][T27894] do_recvmmsg+0x31a/0x7f0 [ 932.865095][T27894] ? __pfx_do_recvmmsg+0x10/0x10 [ 932.865139][T27894] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 932.865180][T27894] ? __fget_files+0x3a2/0x420 [ 932.865218][T27894] __x64_sys_recvmmsg+0x198/0x250 [ 932.865251][T27894] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 932.865291][T27894] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 932.865318][T27894] do_syscall_64+0x174/0x580 [ 932.865340][T27894] ? trace_irq_disable+0x3b/0x140 [ 932.865365][T27894] ? clear_bhb_loop+0x40/0x90 [ 932.865399][T27894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 932.865425][T27894] RIP: 0033:0x7fdb57d9ce59 [ 932.865448][T27894] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 932.865469][T27894] RSP: 002b:00007fdb58b70028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 932.865496][T27894] RAX: ffffffffffffffda RBX: 00007fdb58015fa0 RCX: 00007fdb57d9ce59 [ 932.865515][T27894] RDX: 0000000000000001 RSI: 0000200000000400 RDI: 0000000000000003 [ 932.865539][T27894] RBP: 00007fdb58b70090 R08: 0000000000000000 R09: 0000000000000000 [ 932.865555][T27894] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 932.865571][T27894] R13: 00007fdb58016038 R14: 00007fdb58015fa0 R15: 00007ffe437d6988 [ 932.865611][T27894] [ 933.268915][T27905] IPVS: set_ctl: invalid protocol: 0 10.1.1.0:20001 [ 933.399973][T27908] xt_NFQUEUE: number of total queues is 0 [ 933.474178][T27908] bond7: option arp_all_targets: invalid value (3) [ 933.486781][T27908] bond7 (unregistering): Released all slaves [ 933.577285][T27921] netlink: 'syz.4.6300': attribute type 32 has an invalid length. [ 934.040399][T27953] IPVS: set_ctl: invalid protocol: 0 10.1.1.0:20001 [ 934.115982][T27944] lo speed is unknown, defaulting to 1000 [ 934.556735][T27969] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6315'. [ 934.598640][T27969] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6315'. [ 934.810520][T27987] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6321'. [ 934.904438][T27987] veth37: entered promiscuous mode [ 935.092067][T27997] IPVS: set_ctl: invalid protocol: 0 10.1.1.0:20001 [ 935.200901][T28002] lo speed is unknown, defaulting to 1000 [ 936.149398][T28032] lo speed is unknown, defaulting to 1000 [ 936.205018][T28032] lo speed is unknown, defaulting to 1000 [ 936.315653][T28051] netlink: 168 bytes leftover after parsing attributes in process `syz.0.6336'. [ 936.672975][T28064] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6339'. [ 936.806397][T28060] nbd12: detected capacity change from 0 to 127 [ 936.833554][T16054] block nbd12: Receive control failed (result -104) [ 937.042653][T28084] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6348'. [ 937.497566][T28096] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6353'. [ 938.030940][T28117] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6360'. [ 938.058840][T28112] syzkaller0: entered promiscuous mode [ 938.065192][T28112] syzkaller0: entered allmulticast mode [ 940.083561][ T31] INFO: task kworker/1:1H:4955 blocked for more than 143 seconds. [ 940.091690][ T31] Not tainted syzkaller #0 [ 940.097758][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 940.107326][ T31] task:kworker/1:1H state:D stack:25960 pid:4955 tgid:4955 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 940.119857][ T31] Workqueue: kblockd blk_mq_requeue_work [ 940.125837][ T31] Call Trace: [ 940.129251][ T31] [ 940.132358][ T31] __schedule+0x17d9/0x56c0 [ 940.137125][ T31] ? __lock_acquire+0x683/0x2cf0 [ 940.142238][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 940.147513][ T31] ? __pfx___schedule+0x10/0x10 [ 940.152450][ T31] ? schedule+0x90/0x2b0 [ 940.157194][T24013] block nbd12: Connection timed out, retrying (0/1 alive) [ 940.164641][T24013] block nbd12: Dead connection, failed to find a fallback [ 940.171839][T24013] block nbd12: shutting down sockets [ 940.177443][T24013] blk_print_req_error: 94 callbacks suppressed [ 940.177463][T24013] I/O error, dev nbd12, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 940.192946][T24013] buffer_io_error: 138 callbacks suppressed [ 940.192967][T24013] Buffer I/O error on dev nbd12, logical block 0, async page read [ 940.194505][ T31] schedule+0x164/0x2b0 [ 940.199766][T24013] Buffer I/O error on dev nbd12, logical block 1, async page read [ 940.209263][ T31] schedule_timeout+0x152/0x2c0 [ 940.211462][T24013] Buffer I/O error on dev nbd12, logical block 2, async page read [ 940.226568][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 940.232342][T24013] Buffer I/O error on dev nbd12, logical block 3, async page read [ 940.239413][ T31] ? __pfx_process_timeout+0x10/0x10 [ 940.247435][T24013] I/O error, dev nbd12, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 940.252839][ T31] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 940.260463][T24013] Buffer I/O error on dev nbd12, logical block 0, async page read [ 940.268401][ T31] ? prepare_to_wait_event+0x436/0x480 [ 940.274083][T24013] Buffer I/O error on dev nbd12, logical block 1, async page read [ 940.274148][T24013] Buffer I/O error on dev nbd12, logical block 2, async page read [ 940.274275][T24013] Buffer I/O error on dev nbd12, logical block 3, async page read [ 940.284786][ T31] nbd_queue_rq+0x889/0x1150 [ 940.288684][T28142] I/O error, dev nbd12, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 940.317491][T28142] Buffer I/O error on dev nbd12, logical block 0, async page read [ 940.325648][T28142] I/O error, dev nbd12, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 940.335316][T28142] Buffer I/O error on dev nbd12, logical block 1, async page read [ 940.337557][ T31] ? __pfx_nbd_queue_rq+0x10/0x10 [ 940.343342][T28142] I/O error, dev nbd12, sector 4 op 0x0:(READ) flags 0x0 phys_seg 2 prio class 2 [ 940.344103][T28142] I/O error, dev nbd12, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 940.357950][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 940.358013][ T31] blk_mq_dispatch_rq_list+0x499/0x1990 [ 940.367790][T28142] I/O error, dev nbd12, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 940.375633][ T31] ? sbitmap_get+0x229/0x390 [ 940.379860][T28142] I/O error, dev nbd12, sector 4 op 0x0:(READ) flags 0x0 phys_seg 2 prio class 2 [ 940.394047][ T31] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 940.404093][T28142] I/O error, dev nbd12, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 940.413374][ T31] ? __blk_mq_alloc_driver_tag+0x2e7/0x6e0 [ 940.418473][T28142] I/O error, dev nbd12, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 940.429173][ T31] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 940.439264][T24071] ldm_validate_partition_table(): Disk read failed. [ 940.441206][ T31] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 940.454988][ T31] ? blk_mq_hw_queue_need_run+0x134/0x630 [ 940.456252][T24071] Dev nbd12: unable to read RDB block 0 [ 940.461173][ T31] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 940.472490][T24071] nbd12: unable to read partition table [ 940.474554][ T31] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 940.485121][ T31] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 940.491296][ T31] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 940.497629][T24071] ldm_validate_partition_table(): Disk read failed. [ 940.501092][ T31] blk_mq_run_hw_queue+0x348/0x4f0 [ 940.509998][T24071] Dev nbd12: unable to read RDB block 0 [ 940.511955][ T31] blk_mq_run_hw_queues+0x268/0x3f0 [ 940.521657][ T31] blk_mq_requeue_work+0x703/0x760 [ 940.527295][T24071] nbd12: unable to read partition table [ 940.527282][ T31] ? __pfx_blk_mq_requeue_work+0x10/0x10 [ 940.527327][ T31] ? rcu_is_watching+0x15/0xb0 [ 940.545763][ T31] ? process_scheduled_works+0xa20/0x14e0 [ 940.551683][ T31] process_scheduled_works+0xa8e/0x14e0 [ 940.566704][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 940.573039][ T31] ? assign_work+0x3cf/0x5d0 [ 940.578427][ T31] worker_thread+0xa47/0xfb0 [ 940.583379][ T31] ? __kthread_parkme+0x71/0x1f0 [ 940.588419][ T31] kthread+0x388/0x470 [ 940.592513][ T31] ? __pfx_worker_thread+0x10/0x10 [ 940.598237][ T31] ? __pfx_kthread+0x10/0x10 [ 940.602902][ T31] ret_from_fork+0x514/0xb70 [ 940.608857][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 940.614209][ T31] ? __switch_to+0xc89/0x1420 [ 940.619056][ T31] ? __pfx_kthread+0x10/0x10 [ 940.623855][ T31] ret_from_fork_asm+0x1a/0x30 [ 940.628719][ T31] [ 940.632009][ T31] [ 940.632009][ T31] Showing all locks held in the system: [ 940.639880][ T31] 1 lock held by khungtaskd/31: [ 940.644920][ T31] #0: ffffffff8e959c20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 940.654937][ T31] 4 locks held by kworker/u8:9/1181: [ 940.660269][ T31] #0: ffff88801be9e140 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 940.671304][ T31] #1: ffffc90005777c40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 940.684411][ T31] #2: ffffffff8fddc068 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810 [ 940.694812][ T31] #3: ffffffff8fdeac00 (rtnl_mutex){+.+.}-{4:4}, at: cfg802154_pernet_exit+0x18/0xc0 [ 940.705068][ T31] 4 locks held by kworker/1:1H/4955: [ 940.710395][ T31] #0: ffff88801e2cfd40 ((wq_completion)kblockd){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 940.721899][ T31] #1: ffffc900101efc40 ((work_completion)(&(&q->requeue_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 940.735356][ T31] #2: ffff888025ff0918 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x31f/0x4f0 [ 940.745108][ T31] #3: ffff888026aa06b8 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc1/0x1150 [ 940.754401][ T31] 2 locks held by syslogd/4976: [ 940.759405][ T31] #0: ffff8880b863b160 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2d/0x160 [ 940.769601][ T31] #1: ffffffff8e959c20 (rcu_read_lock){....}-{1:3}, at: psi_task_switch+0x57/0x7d0 [ 940.779466][ T31] 2 locks held by getty/5382: [ 940.784339][ T31] #0: ffff8880353700a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 940.794618][ T31] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 940.805142][ T31] 3 locks held by kworker/u8:12/9480: [ 940.810595][ T31] #0: ffff88801ae8c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 940.822600][ T31] #1: ffffc9000378fc40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 940.833893][ T31] #2: ffffffff8fdeac00 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 940.843001][ T31] 1 lock held by udevd/23720: [ 940.847878][ T31] #0: ffff888026919350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70 [ 940.857764][ T31] 2 locks held by syz.2.6360/28111: [ 940.863056][ T31] #0: ffffffff8fdeac00 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 940.872204][ T31] #1: ffffffff8e95ff28 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 940.883435][ T31] 2 locks held by syz.3.6361/28115: [ 940.888720][ T31] #0: ffffffff8fe5b2e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 940.897075][ T31] #1: ffffffff8fdeac00 (rtnl_mutex){+.+.}-{4:4}, at: nl80211_pre_doit+0x5e/0x890 [ 940.906656][ T31] 1 lock held by syz.3.6361/28118: [ 940.911819][ T31] #0: ffffffff8fdeac00 (rtnl_mutex){+.+.}-{4:4}, at: devinet_ioctl+0x2fb/0x1c50 [ 940.921232][ T31] 1 lock held by syz.3.6361/28131: [ 940.926560][ T31] #0: ffffffff8fdeac00 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 940.935727][ T31] 1 lock held by syz.1.6359/28116: [ 940.940889][ T31] #0: ffffffff8fdeac00 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x767/0xc00 [ 940.951122][ T31] 1 lock held by syz.1.6359/28119: [ 940.956387][ T31] #0: ffffffff8fdeac00 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x767/0xc00 [ 940.966055][ T31] 1 lock held by syz.1.6359/28121: [ 940.971233][ T31] #0: ffffffff8fdeac00 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x7a4/0x1150 [ 940.980176][ T31] 1 lock held by syz.0.6362/28126: [ 940.985501][ T31] #0: ffffffff8fdeac00 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x3bc/0x1e10 [ 940.995025][ T31] 1 lock held by syz.0.6362/28130: [ 941.000177][ T31] #0: ffffffff8fdeac00 (rtnl_mutex){+.+.}-{4:4}, at: devinet_ioctl+0x2fb/0x1c50 [ 941.009579][ T31] 2 locks held by syz.0.6362/28134: [ 941.014939][ T31] #0: ffffffff8fe5b2e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 941.023479][ T31] #1: ffffffff8fe5b120 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 941.032593][ T31] 3 locks held by syz.4.6363/28133: [ 941.038140][ T31] #0: ffffffff8fe5b2e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 941.046712][ T31] #1: ffffffff8fe5b120 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 941.055810][ T31] #2: ffffffff8fdeac00 (rtnl_mutex){+.+.}-{4:4}, at: tipc_nl_media_set+0x12/0x30 [ 941.082730][ T31] [ 941.093297][ T31] ============================================= [ 941.093297][ T31] [ 941.102173][ T31] NMI backtrace for cpu 0 [ 941.102194][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 941.102215][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 941.102228][ T31] Call Trace: [ 941.102238][ T31] [ 941.102247][ T31] dump_stack_lvl+0xe8/0x150 [ 941.102278][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 941.102401][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 941.102435][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 941.102464][ T31] sys_info+0x135/0x170 [ 941.102484][ T31] watchdog+0xfd7/0x1030 [ 941.102532][ T31] ? watchdog+0x1c7/0x1030 [ 941.102568][ T31] kthread+0x388/0x470 [ 941.102589][ T31] ? __pfx_watchdog+0x10/0x10 [ 941.102616][ T31] ? __pfx_kthread+0x10/0x10 [ 941.102638][ T31] ret_from_fork+0x514/0xb70 [ 941.102663][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 941.102685][ T31] ? __switch_to+0xc89/0x1420 [ 941.102716][ T31] ? __pfx_kthread+0x10/0x10 [ 941.102738][ T31] ret_from_fork_asm+0x1a/0x30 [ 941.102777][ T31] [ 941.102785][ T31] Sending NMI from CPU 0 to CPUs 1: [ 941.214287][ C1] NMI backtrace for cpu 1 [ 941.214306][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 941.214328][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 941.214341][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 941.214378][ C1] Code: 8c 76 02 e9 53 04 03 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d f3 c9 15 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 941.214395][ C1] RSP: 0018:ffffc90000197e40 EFLAGS: 00000242 [ 941.214413][ C1] RAX: 0000000000184879 RBX: ffffffff819ab370 RCX: 0000000080000001 [ 941.214428][ C1] RDX: 0000000000000001 RSI: ffffffff8dfe0307 RDI: ffffffff8c2a9f80 [ 941.214442][ C1] RBP: ffffc90000197f10 R08: ffff8880b87338db R09: 1ffff110170e671b [ 941.214457][ C1] R10: dffffc0000000000 R11: ffffed10170e671c R12: 0000000000000000 [ 941.214471][ C1] R13: 1ffff11003bd4000 R14: 1ffff92000032fd0 R15: dffffc0000000000 [ 941.214486][ C1] FS: 0000000000000000(0000) GS:ffff888125326000(0000) knlGS:0000000000000000 [ 941.214502][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 941.214516][ C1] CR2: 0000555562cf84e8 CR3: 000000007e174000 CR4: 00000000003526f0 [ 941.214533][ C1] Call Trace: [ 941.214542][ C1] [ 941.214549][ C1] default_idle+0x9/0x20 [ 941.214569][ C1] default_idle_call+0x72/0xb0 [ 941.214589][ C1] do_idle+0x2e0/0x540 [ 941.214611][ C1] ? __pfx_do_idle+0x10/0x10 [ 941.214629][ C1] ? do_idle+0x11/0x540 [ 941.214649][ C1] cpu_startup_entry+0x43/0x60 [ 941.214668][ C1] start_secondary+0x101/0x110 [ 941.214688][ C1] common_startup_64+0x13e/0x157 [ 941.214724][ C1] [ 941.380874][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 941.387784][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 941.396949][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 941.407139][ T31] Call Trace: [ 941.410466][ T31] [ 941.413448][ T31] vpanic+0x56c/0xa60 [ 941.417496][ T31] ? __pfx___schedule+0x10/0x10 [ 941.422412][ T31] ? __pfx_vpanic+0x10/0x10 [ 941.426976][ T31] ? nmi_trigger_cpumask_backtrace+0x207/0x380 [ 941.433245][ T31] panic+0xc5/0xd0 [ 941.437030][ T31] ? __pfx_panic+0x10/0x10 [ 941.441479][ T31] ? preempt_schedule_common+0x82/0xd0 [ 941.446977][ T31] ? preempt_schedule_thunk+0x16/0x40 [ 941.452385][ T31] ? nmi_trigger_cpumask_backtrace+0x314/0x380 [ 941.458572][ T31] ? nmi_trigger_cpumask_backtrace+0x319/0x380 [ 941.464762][ T31] watchdog+0x1030/0x1030 [ 941.469147][ T31] ? watchdog+0x1c7/0x1030 [ 941.473607][ T31] kthread+0x388/0x470 [ 941.477706][ T31] ? __pfx_watchdog+0x10/0x10 [ 941.482586][ T31] ? __pfx_kthread+0x10/0x10 [ 941.487216][ T31] ret_from_fork+0x514/0xb70 [ 941.491843][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 941.496980][ T31] ? __switch_to+0xc89/0x1420 [ 941.501696][ T31] ? __pfx_kthread+0x10/0x10 [ 941.506326][ T31] ret_from_fork_asm+0x1a/0x30 [ 941.511232][ T31] [ 941.514886][ T31] Kernel Offset: disabled [ 941.519228][ T31] Rebooting in 86400 seconds..