last executing test programs: 2.456691894s ago: executing program 4 (id=7561): socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000006c0)={0x2, 0x4e22, @local}, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="b400000000009900791048000000000039240800000000008daccb72e9d95b78c3e7f02b95000000"], &(0x7f0000000100)='GPL\x00', 0x2, 0xa7, &(0x7f0000000140)=""/167, 0x0, 0x2e, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x669}, 0x94) close(r0) r1 = socket(0x28, 0x5, 0x0) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x5, &(0x7f0000000d80)=0x5, 0x4) r3 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r3, &(0x7f0000000240)={0x28, 0x0, 0x0, @local}, 0x10) listen(r3, 0x4) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000a00)=@broute={'broute\x00', 0x20, 0x3, 0x288, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000340], 0x0, 0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"]}, 0x35c) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet(r3, &(0x7f0000000400)=[{{&(0x7f0000000480)={0x2, 0x4e21, @remote}, 0x10, &(0x7f00000004c0)}}, {{&(0x7f00000004c0)={0x2, 0x4a33, @rand_addr=0x640100fe}, 0x10, &(0x7f0000000580)=[{&(0x7f00000005c0)='[', 0x1}], 0x1}}], 0x2, 0x4000) shutdown(r5, 0x1) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f0000000600)=@sack_info={0x0, 0xfffff801, 0x5}, &(0x7f0000000640)=0xc) connect$vsock_stream(r1, &(0x7f0000000280)={0x28, 0x0, 0x0, @local}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r6}, &(0x7f0000000340), &(0x7f0000000380)=r0}, 0x20) shutdown(r1, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f00000007c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r8, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000880)=ANY=[@ANYBLOB="d4000000", @ANYRES16=r2, @ANYBLOB="010027bd7000ffdbdf251d00000008000300", @ANYRES32=r11, @ANYBLOB="b8002f809000038008000100010000004c00038006000300a0aa00000c00040000000000000000000c0004000201aaaaaaaaaaaa060001000000000006000300a2aa000006000300feff0000060001000100000008000200020000000c000500190000000000000005000200000000000800040004000000050002010000000000000000f9ffffffffffffff0800010001000000080001002d"], 0xd4}}, 0x0) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r7, &(0x7f0000000700)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)=ANY=[@ANYBLOB="20060000", @ANYRES16=r10, @ANYBLOB="080016bd7000fddbdf25110000000c3fb3bc99088a4a1d000000"], 0x20}, 0x1, 0x0, 0x0, 0x24008000}, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000080)={0x0, 0xc8}, 0x8) recvmmsg$unix(r1, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x6cfc686d3553f0e1, 0x0) 2.21695246s ago: executing program 4 (id=7563): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x2) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000008c0)="1b0000001a007f029e", 0x9}], 0x1}, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[], 0x48) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8916, &(0x7f0000000980)={r1}) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, 0x0}, 0x10000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000a80)="1b0000001a007f029e741683c28f7b331d00000000390000000000", 0x1b}], 0x1}, 0x24000080) bind$bt_hci(0xffffffffffffffff, &(0x7f00000007c0)={0x1f, 0xffff, 0x4}, 0x48ba0884ec88e5ff) write(0xffffffffffffffff, &(0x7f0000000b00)="05000000010001", 0x7) write(0xffffffffffffffff, &(0x7f0000000b40)="3000000019000100aaaaaaaaaa110142424242424242424242424242424242", 0x1f) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000100100000100000001000000000000001000000000000000100100000e"], 0x28}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r2, &(0x7f0000000400)="12345678000001000000000100000001000000010101000000000001", 0xffb6, 0x4008000, &(0x7f0000000440)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x4040884, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x16, 0x13, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000fef7ffff000000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000040000000850000007300000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000a8000000850000000600000095"], &(0x7f0000000800)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="300000003f0007012bbd700000000000037c00000400fc800c00018005b41918", @ANYRES32=r0], 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0x20004804) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c00)=ANY=[@ANYBLOB="140000021000010000000000000000000000000a28000000000a0101000000005e1affd5020000288724320008000240000000032c000000030a01030000e6ff00000000020000000900018073797a30000000000900430073797a32000000001400000011000c00000000000000004737a312330dff15eea8d3c5"], 0x7c}, 0x1, 0x0, 0x0, 0x4000090}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a84000000060a0b0400000000000000000200000058000480540001800a0001006d617463680000004400028008000240000000002c000300ebb7551382795afa4d23edfcbe6d55b57cc75e63c15c46395916e2b388abc3d6ce2316334e8278ad0a0001006c696d69740000000900010073797a30000000000900020073797a32"], 0xac}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) 2.110529863s ago: executing program 4 (id=7564): bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)={@map, 0xffffffffffffffff, 0x17, 0x9}, 0x20) socketpair(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) syz_genetlink_get_family_id$nbd(&(0x7f0000000480), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x44, r1, 0x1, 0x70bd2b, 0x1000, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x1d, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x44}}, 0x400400c) 1.934330138s ago: executing program 4 (id=7566): socket$nl_rdma(0x10, 0x3, 0x14) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'syzkaller0\x00', 0x1}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'syzkaller0\x00', 0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="44000000210a010800000000000000000a0000010900020073797a31000000000900010073797a310000000018000380100000800c00018006000100ff"], 0x44}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x675f, 0x9, 0x3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40004}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000004c0)={'syzkaller0\x00', 0x0}) r6 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xc, 0xfff3}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xf, 0xffe0}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x8080) 1.933496527s ago: executing program 2 (id=7567): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newtaction={0x9c, 0x30, 0xb, 0x70bd2d, 0x0, {}, [{0x88, 0x1, [@m_ct={0x84, 0x1, 0x0, 0x0, {{0x7}, {0x5c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000003, 0x0, 0x8, 0x0, 0x480}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @private0={0xfc, 0x0, '\x00', 0x1}}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @local}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x890}, 0x40) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f00000004c0)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r1, 0x5, 0xb68, 0x8d, &(0x7f0000000840)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="5434e400000000000000fd60060c862ebe000007000400000000000900020073797a3100000000050005000a0000000d0003006c6973743a736574000000000c000780080008400000005f"], 0x54}}, 0x2) sendmsg$NFQNL_MSG_VERDICT(r2, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000500)={&(0x7f0000000580)={0x1f8, 0x1, 0x3, 0x101, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFQA_PAYLOAD={0x9, 0xa, "f467110399"}, @NFQA_PAYLOAD={0xa4, 0xa, "2dda2302d7c7627c776e7963b85da5677d8fd7eb52af2f063cfaa037575fcc10ae9d9a8cb7f2e3f07375bd7b06f50f73c7642af3186f8e5909b23dc700fefa147ad623a8b5c7c76517f09c4038cda0a92c8627489adc86018fda1524a11a3550bcf620152c40af23cc10bae3c0449f3e0bd7ab0c8cdbabd3792c46b51630e338bdcb04052ae75eccf7b7934f63537e0d5d92601fea824dca1079b63ca5f22e36"}, @NFQA_CT={0x134, 0xb, 0x0, 0x1, [@CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}}]}, @CTA_SEQ_ADJ_REPLY={0x4c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x20000000}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x366c}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2722}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x3}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7ff}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xa9}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x1}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x9}, @CTA_LABELS_MASK={0x18, 0x17, [0xe, 0x0, 0x7, 0xfffffffe, 0xc9a]}, @CTA_TUPLE_MASTER={0x4c, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_TUPLE_MASTER={0x60, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x801}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}]}]}, 0x1f8}}, 0x10) 1.870306816s ago: executing program 2 (id=7569): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x20, 0x30}, 0xc) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f00000000c0)={0x0, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x17}}, {0x2, 0x4e23, @multicast1}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000080)='veth0_macvtap\x00', 0x0, 0x10, 0x6}) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0xa, @dev={0xfe, 0x80, '\x00', 0x3f}, 0x7fffffff}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfb, 0x4000000}, 0xc) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000c80)="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", 0x34000, 0xbcff, 0x0, 0x0) 1.702545484s ago: executing program 4 (id=7571): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000003c0)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000400)="4b0003000000", 0x6) close(0xffffffffffffffff) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x3}, 0x8) close(0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x2b, 0x1, 0x1) bind$xdp(r3, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x4}, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="18010000", @ANYRES16=r4, @ANYBLOB="0100000020000000000001000000060006004e23000024000300b08073e8d44e91e3da922c22438244bb885c69e269c8e9d835b114293a4ddc6e1400020077673000000000000000000000000000c400088055ff008004000a0001000000060005000100f99e88f3648f79eaf8e90b79d49b7e000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff880009801c000080060001000200000008000200ffffffff050003000000000028000080060001000a0000001400020000000000000000000000ffff64010100050003000300000040000080060001000200000008000200ac1e00010500030000000000060001000a00000014000200ff020000000000000000000000000001050003000200", @ANYBLOB="f0aee0b3e0edeeaac7ba895fd75a1c314b935a48321a41f454704590d166c5a40a8a2851537b86195581879e846fe3ac826ad58f3846aece7ada02b969b28c6de40d64458a8fe16c75ab23d047e48a4d750bf12b1ad26e321728a35f66ad8a9a3302f843523ceded33b4f16d698bf0f930459c61841c57c1fb31ca4864c045dc95a892628642f7218e43efd3c5d736c1999b4f445a2f145e6be688b26689a3138af06e9455f7707e3e398777413cb7b144eabd16cbc2cc176b14dc0c68f6f5a99381e9ce68629ab1604c1e2fbbac0971920031e7087ee0ad1d0ffd3ba67483c95cba34d4", @ANYBLOB="2de1caca3f09623f603cec2ea637e290d9551dc62f4779c65c8459bd9fc4ba99f0ae4901c9b8fec67e3a30685524943b5378878ebdb0f6bcda95846cd07912b3c1316c5f4164a5678f3502da772cdfa66ad266e2addeba411b8d5c6aa98615554b777d33d5f5708681d38eab680d58c6308b2d4e1b36bb21a57db0098269cf30b5a0ce4a48a0f455a2535dd374ebccb0a137ed02d367c2d3981de2", @ANYRES32=r4], 0x118}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) sendmsg$sock(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000300)="4cef371d7f81260a887f400ec8d2025e0be981312403bd7a7c4c831beeaf817ed95540b97570b34e64cdbfd434511e62bd6338d87631df997f3c18eefbd3d300ca90f74f4edb8b2ae3b91160254035d138e0d900d4f6dc0f9da90258d23b06d4f565a99e03c7ce374f1eb8a2f765743d1b2f3bfe903eb55d476eb621a5408ea717b929d17ca87a73b34ab94ee1fa5847a824b16b2ede3b08db3c2ecabaa76fd3f1606fe4228356491ca66d8edbe1ccc94fb6", 0xb2}, {&(0x7f0000000780)="18962ff24e5d8dc6bd222ac5b5ec746794ad27d75525f4bf73a206afa8d21953bbbf489517b1d64c4941088ba5ba1bd8305b1abf2dce6916eae4584c9bd91bc79539758e7a767d60a8dc29685fc0c04a3cab32085d1571e8c8bcdd6d2a89265a0a324e345dabab06e9de3bb63f91f0d8d81b82cc5d103cb26be99f9ba26e1d85f7a1a33a62bde7c067", 0x89}], 0x2, &(0x7f0000000880)=[@timestamping={{0x14, 0x1, 0x25, 0xa}}, @mark={{0x14, 0x1, 0x24, 0x2}}], 0x30}, 0x20008080) readv(r2, &(0x7f00000005c0)=[{&(0x7f0000000040)}, {&(0x7f0000000080)=""/189, 0xbd}, {&(0x7f0000000140)=""/202, 0xca}, {&(0x7f0000000440)=""/169, 0xa9}, {&(0x7f0000000500)=""/138, 0x8a}], 0x5) getsockopt$IP_VS_SO_GET_DAEMON(r3, 0x0, 0x487, &(0x7f0000000640), &(0x7f0000000680)=0x30) 1.258086915s ago: executing program 0 (id=7578): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x6, 0xd, &(0x7f0000002580)=ANY=[@ANYRESDEC=0x0, @ANYBLOB="10d9d5f8be1687bf9ee2e98960187559e58afe3b205dd4897a440fe2619b75877bfcd305bcc4e937e860080cfb9fdee85589e1ced0087cf278eab487329dacd7cae5b65599ae02fbf9821c0dfda47085b5e80d4dba0f44ea8593e581b85ce91b3656d11b0f4d7188aa86537977965d46e48bd062fa3fa46b21d522129c215eddaf95766a2aac258007345a42852fcf356ab3901386ada4e2a60a49bdb75272923c0db84e66f89ea1ad695226e9b59f873f442d8d90a11980edba96dec639996f8e87003ed741a73251a7b6", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000001000000850000003300000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r1, 0x29, 0x21, 0x0, 0x0) syz_emit_ethernet(0x1ea, &(0x7f00000027c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x1b4, 0x2c, 0x0, @remote, @local, {[@fragment={0x0, 0x0, 0x9a, 0x1, 0x0, 0x3, 0x66}, @dstopts={0x0, 0x27, '\x00', [@pad1, @hao={0xc9, 0x10, @private2}, @calipso={0x7, 0x40, {0x3, 0xe, 0x2, 0x800, [0x80000001, 0x362d1200, 0xfffffffeffffffff, 0x9, 0x80000000, 0x9, 0x9]}}, @padn={0x1, 0x2, [0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x2}, @generic={0x7, 0xc9, "d23866234d409c15048a1d62f4c8ba5032c60622bb540ad3af486c6a65c6cc2e20349ea70d0323a045728da761217b6d6a44342ec7ec4686299aadc1001c9e20506d47d47110f0071323405fcdd811d99f33c3d6fddf26323baebd07c2c0ce5a852d2aa499f8cb1bd9f86ddb5780a3a58aac80a4cf4ff8dda27788948311e453db64066d7c1c1ef5cf1728d6f3d08d976dd8ce54c6aad2db1ac3fda1fad55a69118bde3da1a24b9dd8dbfc65cb2b69c097c0d7b0376d90cdba39bb67e4d2c05a8e86f35a3701a01614"}, @hao={0xc9, 0x10, @mcast1}]}, @dstopts={0x33, 0x8, '\x00', [@generic={0x2, 0x30, "e39a74385955b7e5a97b813afbb0bce3215d985d593d1add357cc9e1b048bebf751d129886c87bf8310a5b136c9e8e36"}, @calipso={0x7, 0x10, {0x0, 0x2, 0x7, 0x2, [0x8000000000000000]}}]}], {{0x3a00, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e000000040000000400000010"], 0x48) r3 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000600)={0x0, r0}, 0x8) bpf$TOKEN_CREATE(0x24, &(0x7f0000000640)={0x0, r2}, 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x5, &(0x7f0000000940)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x2, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000800)={0x0, 0x7, 0x8}, 0xc) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b80)=ANY=[@ANYBLOB="140000001c00010027bd7000fbdbdf252d"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x880) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000b00)={'ip6gre0\x00', &(0x7f0000000a80)={'ip6gre0\x00', 0x0, 0x2f, 0x6, 0x4, 0x7ff, 0x10, @private2, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x40, 0x8000, 0xfffff800, 0x8c6}}) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@arena={0x21, 0x0, 0x0, 0x32, 0x30000, r4, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x0, 0x0, @void, @value, @value=r3}, 0x50) vmsplice(r4, &(0x7f0000001100)=[{&(0x7f0000000c80)="94df7d3c2783eadd2775ca39203ed9c67984ab773be70ba1053ead46b78e8748d98c1ec8850b4a988f8fcbfc17bc9d61368ec747bca8b868bda01b64a026e4cd7a2ae57093a0fdd39cbe8d1ee06c5b7e9d3b6ab22ba144d57eca5a04e4f94c9fcb2b4ca82d2fd605d1be94d6", 0x6c}, {&(0x7f00000026c0)="d7d3259e404c6f7595aa2d6b87b420d343fb544730ff8c61273c04bd1bd6a6f91e844b6b3a56b63b5a461972fd5533c6a41b8b8a56d633e4831d1c07c0bb0600299c0b7400000000ec4347d848f13cfea654fb3c7cee5a81b843e8b174895ca44bd467c92d05b45f82fb8076e8eb2060953072a62cc5495c17d1022ce409e1df723ccc2c17652352595b04520041c5b43315934fe17a68758ef56f924ee44e5dd8618b5376e3f3136e125a36a37103360dcdb76e1766c07deebd72058f3a66127b434f790000fad9d74f11e12e60fa16227441f206ab965a009aeae451bb2bd0fa666ebf", 0xe4}, {&(0x7f0000000ec0)="6409dc6053c5286bbd9cf30481f51b6d736b2c08bd54100111e99d63d7d94a6ff44d559bc00cf1fe82343f577fc5ca987cce616d62d8f8b0fbb3a44491896d89e21ef7b084aee3c343e4865e51b689ba70f64b9e16d7b0e4d8f1b6b8382807fae67863bfa77402e40c343302733dcac3859fa4a0769390d1f46cbaa3acd5d6125c15ca8d8fe27117892b8f419ae7a30c2a62cdc4c4fff01591e564", 0x9b}, {&(0x7f0000000f80)="db8dac811438663e18cf447551ece054a4d7d4211c7ddd4fdd6783bf7762a8b7b9b51445f342b78502b318b7a545e18fb4d08aefe82e2bf2e268426addf0959ec9c14f63f8d8198235ad7326136e1b23e6333d62f601080feed0c07392a3b1506646607ac90d472f341f76cac404c4cb822a23", 0x73}, {&(0x7f0000001000)="33f5ab19ae938898c59a46870153e96830403fed2987b4d68316b310e878f9ccd7a8189203c0e2860e0e4c137109ed2af26e22903f8a7fa05b4d27cfc071e63f6d2c674c80e4ffebfe779b56349adcbb31b6d48381977fd498a584869721e316ea49b9d762d78e38e66d89698fb0eb4dcda56995a3b30190a071a2ade681b40bd9ff5806c2b79617f6bbbbe7087eaafec45161185195a27f9ee86cf911f7ec4f8e1c7a73165ee74e41141a48f25fac725310336084a0c6381e27afe3521fb9f433903beef65f90ed371d", 0xca}], 0x5, 0x2) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c80), &(0x7f0000000cc0), 0x11, r8}, 0x38) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000d00)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x300000d, 0x12, r9, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x23}, 0x38) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@arena={0x21, 0x0, 0x0, 0x19, 0x400, r4, 0xb, '\x00', r7, 0xffffffffffffffff, 0x0, 0x5, 0x3}, 0x50) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="61100c0000000000150003000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000050002000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000000000000b7030000000000008500000033000000b70000000200000095"], &(0x7f0000000380)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r11, 0x0, 0xe, 0x0, &(0x7f0000000440)="00112233445566778899aabb0800", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x3, 0x8, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000002400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000002440)={@fallback=r12, r12, 0x2f, 0x0, 0x0, @void, @value=r12}, 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000002480)={@fallback=r12, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000024c0)=ANY=[@ANYRES32=r13, @ANYRES32=r13, @ANYBLOB='/'], 0x20) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80, 0x0, 0x0, 0xf9}, 0x28) 1.131091104s ago: executing program 0 (id=7580): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="0080bb4070150700000000100000111c001a80080002802d", @ANYRES16=r2, @ANYRESHEX=r0], 0x44}}, 0x2000800) r3 = socket(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) 998.430561ms ago: executing program 1 (id=7582): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="a400000010000104080000000300000000000000", @ANYRES32=0x0, @ANYBLOB="fab0817dbcb5f31a70001280110001006272696467655f736c6176650000000058000580050019a103000000050005000000000005000c000700000005000700a100000005000a00ffa1000005000800ffa10000040018000500060001000000060002000100000005001e00000000000500010003000000140003006272696467655f736c6176655f"], 0xa4}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) 997.928784ms ago: executing program 0 (id=7583): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='cgroup.controllers\x00', 0x275a, 0x0) socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r0], 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x10) (fail_nth: 3) 978.619494ms ago: executing program 3 (id=7584): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='cgroup.controllers\x00', 0x275a, 0x0) socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$inet(r0, &(0x7f0000000040)=[{{0x0, 0xd94ea7173a9f1aac, 0x0}}], 0x40001b6, 0x114) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x0, 0x0}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r2, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r1], 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x10) 941.670419ms ago: executing program 2 (id=7585): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xe, 0x16, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000001e00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000001e40), 0x1f1, 0x10, &(0x7f0000001e80), 0x39, 0x0, 0xffffffffffffffff, 0x8}, 0x48) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x4001, 0x3, 0xa48, 0x8e0, 0xb, 0x148, 0x8e0, 0x148, 0x9b0, 0x230, 0x242, 0x9b0, 0x215, 0x3, 0x0, {[{{@ip={@multicast2, @dev={0xac, 0x14, 0x14, 0x30}, 0x0, 0x0, 'batadv_slave_0\x00', 'macvtap0\x00', {}, {0xff}, 0x73, 0x2, 0xa}, 0x0, 0x878, 0x898, 0x0, {0xff0f000000000000}, [@inet=@rpfilter={{0x28}, {0xa}}, @common=@unspec=@u32={{0x7e0}, {[{[{0x0, 0x3}, {0x8}, {0xebd, 0x3}, {0x8, 0x1}, {0x61, 0x2}, {0x80, 0x1}, {0x3ff, 0x2}, {0x10001, 0x2}, {0xed}, {0xa06}, {0xffffffff, 0x1}], [{0x9, 0x1d}, {0x5, 0x4}, {0x4, 0x6}, {0xe4f8, 0x4}, {0x3, 0x1}, {0x401, 0x3}, {0x0, 0x2}, {0x1, 0x6}, {0x940, 0xc}, {0xa, 0x8}, {0x3, 0x2}], 0x4, 0x2}, {[{0x8, 0x1}, {0x3, 0x2}, {0xa48e, 0x1}, {0x2, 0x1}, {0x1e, 0x3}, {0x1}, {0x8001}, {0xfa0}, {0x7, 0x2}, {0x5}, {0x3, 0x2}], [{0x0, 0x6a7}, {0x6, 0xffffffff}, {0x3, 0x41}, {0x20000000, 0x7ff}, {0x4, 0x4}, {0xff800000, 0x1}, {0x6, 0x8}, {0x401, 0x401}, {0x5, 0x5}, {0x7fff, 0x1ff}, {0x6, 0x100}], 0x2, 0x8}, {[{0x8, 0x3}, {0x9, 0x2}, {0x4, 0x2}, {0x6}, {0x40, 0x2}, {0x9, 0x1}, {0x3, 0x7}, {0x1, 0x2}, {0x0, 0x2}, {0x8000, 0x3}, {0xfffffff1}], [{0x5, 0xf7b}, {0x400}, {0x2, 0x8}, {0x6, 0x10000}, {0x4, 0x6}, {0x6, 0xa131}, {0x7, 0x3}, {0xffffffff}, {0x5, 0x40}, {0x0, 0xf8000000}, {0x5}], 0x1, 0x5}, {[{0x4c2f, 0x1}, {0x73, 0x1}, {0x2}, {0x2, 0x1}, {0xc, 0x3}, {0x2, 0x3}, {0x9, 0x2}, {0xd, 0x3}, {0x5, 0x3}, {0x1, 0x2}, {0x7}], [{0x7005d414, 0x3}, {0x9, 0xa}, {0x6, 0x3745}, {0x7fffffff, 0x1}, {0xfffffffd, 0x4}, {0x0, 0x800}, {0xc, 0x3ff}, {0x6, 0xffff5108}, {0xdb, 0x1}, {0xb, 0xc2df}, {0x6, 0x1}], 0x9, 0x3}, {[{0x9, 0x3}, {0x1, 0x2}, {0xb3, 0x3}, {0x8, 0x1}, {0x6, 0x3}, {0x7}, {0x316, 0x3}, {0x4}, {0xfffffff7, 0x1}, {0x6}, {0x1, 0x1}], [{0x3c, 0x5}, {0x8, 0x7}, {0xfffffffb, 0x59de3913}, {0x100, 0x7}, {0x3, 0x5cf0}, {0x8, 0x5}, {0x7, 0x3}, {0xca, 0x5}, {0x80000001, 0x6}, {0xfffffffc, 0x39}, {0x800, 0x9}], 0x5}, {[{0x30000, 0x1}, {0x9, 0x2}, {0x6}, {0x101, 0x2}, {0x5, 0x2}, {0x4c}, {0x6bd, 0x3}, {0x8, 0x1}, {0x8}, {0x7, 0x3}, {0x2, 0x1}], [{0x3, 0x8}, {0x7e, 0x38000}, {0x1, 0x1}, {0x9, 0x8}, {0x10001}, {0x5, 0x6}, {0x41, 0x100}, {0x10001, 0x3}, {0x8, 0x7fff}, {0x7, 0x4}, {0x81, 0x10000}], 0x4, 0x3}, {[{0x400}, {0x8000}, {0x9}, {0xffffff7f}, {0x9}, {0x7fff, 0x1}, {0x7f}, {0x5, 0x1}, {0x7f, 0x2}, {0x7fff, 0x2}, {0x80000000, 0x3}], [{0x1, 0x8bbb}, {0x6, 0x7}, {0xb, 0x8001}, {0x1000, 0xfffffff9}, {0x80, 0xa}, {0x6, 0xfffff801}, {0x8, 0x5}, {0x0, 0xb8}, {0xfff, 0xfffffffa}, {0x0, 0x3ff}, {0x5, 0x8001}], 0xa, 0x3}, {[{0x1, 0x1}, {0x8}, {0x6cf8, 0x2}, {0x8, 0x1}, {0x9, 0x1}, {0x6, 0x3}, {0x8, 0x1}, {0x6, 0x2}, {0x2, 0x2}, {0x5}, {0x3, 0x3}], [{0x5, 0x81}, {0x7, 0x4}, {0x1, 0x9}, {0x2, 0x5}, {0x5, 0x7}, {0xc0, 0x3}, {0x620, 0x9}, {0x0, 0x5}, {0x6, 0xe7c}, {0x9, 0x8}, {0x6, 0xfffffffc}], 0xb, 0xa}, {[{0x800, 0x2}, {0x80000001}, {}, {0x8, 0x2}, {0x7, 0x1}, {0x8001, 0x3}, {0x0, 0x3}, {0x0, 0x2}, {0xfff, 0x2}, {0xc81}, {0x10, 0x3}], [{0xfb, 0xa58b}, {0x3, 0xffffff19}, {0x3, 0x7}, {0x5, 0x7}, {0x0, 0x8}, {0x7f, 0x6}, {0xadec0000, 0x3}, {0x6, 0x87}, {0x80000000, 0x8}, {0x9, 0x7}, {0x4, 0x6}], 0x6, 0x6}, {[{0x8001, 0x2}, {0x6}, {0x8}, {0x8, 0x3}, {0x1, 0x3}, {0x7, 0x78920b0b5ea67a77}, {0x6cc, 0x2}, {0x100, 0x2}, {0x9}, {0x7, 0x3}, {0x10000}], [{0x6ee6, 0x2}, {0x9, 0x10000}, {0x10, 0x3}, {0x400, 0x3}, {0x7, 0x7}, {0x5, 0x2}, {0x5652, 0x4}, {0xe, 0x10}, {0x5, 0x9}, {0x0, 0x3}, {0x383, 0x8}], 0x6, 0x5}, {[{0x200, 0x3}, {0x5, 0x1}, {0x1, 0x3}, {0xfffffffc}, {0x48000, 0x2}, {0xe, 0x2}, {0x1, 0x2}, {0x4}, {0x9, 0x1}, {0x7, 0x1}, {0xe}], [{0x80000001, 0x3}, {0x4, 0x9}, {0x4, 0x3ff}, {0x1b4d, 0x7fffffff}, {0x80, 0xe0f1}, {0xd, 0xf}, {0x6, 0x4}, {0x7, 0x4}, {0x6, 0x200}, {0x8e, 0x4}, {0x10, 0x86e}], 0xb, 0x8}], 0x3}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x9, 0x7ff, 0x5, 'netbios-ns\x00', 'syz0\x00', {0x1}}}}, {{@uncond, 0xec010000, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x1, 0x6, 0x4, 0x5, 0x8, 0x4], 0x0, 0x5}, {0xfffd, [0x1, 0x0, 0x2, 0x2, 0x3, 0x2], 0x0, 0x7}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xaa8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000280)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001ec0)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x5}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x4}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x30000017}, 0x4000084) 874.360597ms ago: executing program 0 (id=7586): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x2) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000008c0)="1b0000001a007f029e", 0x9}, {0x0}], 0x2}, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[], 0x48) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8916, &(0x7f0000000980)={r1}) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, 0x0}, 0x10000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000a80)="1b0000001a007f029e741683c28f7b331d00000000390000000000", 0x1b}], 0x1}, 0x24000080) bind$bt_hci(0xffffffffffffffff, &(0x7f00000007c0)={0x1f, 0xffff, 0x4}, 0x48ba0884ec88e5ff) write(0xffffffffffffffff, &(0x7f0000000b00)="05000000010001", 0x7) write(0xffffffffffffffff, &(0x7f0000000b40)="3000000019000100aaaaaaaaaa110142424242424242424242424242424242", 0x1f) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000100100000100000001000000000000001000000000000000100100000e"], 0x28}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r2, &(0x7f0000000400)="12345678000001000000000100000001000000010101000000000001", 0xffb6, 0x4008000, &(0x7f0000000440)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x4040884, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x16, 0x13, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000fef7ffff000000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000040000000850000007300000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000a8000000850000000600000095"], &(0x7f0000000800)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="300000003f0007012bbd700000000000037c00000400fc800c00018005b41918", @ANYRES32=r0], 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0x20004804) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c00)=ANY=[@ANYBLOB="140000021000010000000000000000000000000a28000000000a0101000000005e1affd5020000288724320008000240000000032c000000030a01030000e6ff00000000020000000900018073797a30000000000900430073797a32000000001400000011000c00000000000000004737a312330dff15eea8d3c5"], 0x7c}, 0x1, 0x0, 0x0, 0x4000090}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a84000000060a0b0400000000000000000200000058000480540001800a0001006d617463680000004400028008000240000000002c000300ebb7551382795afa4d23edfcbe6d55b57cc75e63c15c46395916e2b388abc3d6ce2316334e8278ad0a0001006c696d69740000000900010073797a30000000000900020073797a32"], 0xac}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) 822.146336ms ago: executing program 3 (id=7587): socket$nl_crypto(0x10, 0x3, 0x15) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000280)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}, 0x1, 0x2000000}, 0x4008054) write$nci(r0, &(0x7f0000000540)=ANY=[@ANYBLOB='p\x00\t'], 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) write$nci(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="400104"], 0x14) socket(0x10, 0x3, 0x0) r4 = socket(0x1e, 0x4, 0x0) write$nci(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="5001", @ANYRES8=r1, @ANYRES16=r4], 0x14) 807.803652ms ago: executing program 1 (id=7588): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000180)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000004c0)="790d52970617acfd9d1713d1c942c9646b3499a8995fa24dbc539ac065999392dd615e9514dcceff6dedf680a439ab08db96c450a1e88fe5ddbba63ad8f6a5f8a88d97df0bed60d1e4ff3330f506000000314c6e4b923c3aa7ffd44721f964ea68d0fe5f8db16eb9ce95a0a6223a4bcbff01b3d08060b8bac8cabcd26323d6909840e004df5a40847cf0993fd8be7cb5b716cbe8", 0x94, 0x2404c081, &(0x7f0000000480)={0xa, 0x2, 0x8000000d, @loopback, 0x9}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="90000000000101060000000000000000020000003400018014000180080001000102030408000200050607081c00028005000100060000000600020004d2000006000300001500003400028014000180080001000506070808000200010203041c000280050001000600000006000200001500000600030004d20000080007000000012c0c0005800800010066"], 0x90}}, 0x24048084) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='illinois', 0x8) shutdown(r0, 0x1) 778.082638ms ago: executing program 2 (id=7589): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3003, 0xffff96aabfff, 0x832, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000002380)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000003000000400001802c00040014000100020000000000000000000000000000001400020002000000ac1414bb00a50d00000000000d0001007564703a73797a3200956b8aeaffe7a117af1a37633b000000"], 0x54}}, 0x4008014) 776.622278ms ago: executing program 4 (id=7590): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x20, 0x30}, 0xc) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0xb, @empty, 0x7}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) close(0x3) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000040)={0x9, {{0xa, 0x4e21, 0xa3f, @mcast1, 0xbfd}}, {{0xa, 0x4e20, 0x5, @remote, 0x40}}}, 0x108) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f00000001c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f00000002c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000300)=0x10) getsockopt$inet6_buf(r1, 0x29, 0x30, &(0x7f0000000340)=""/214, &(0x7f0000000440)=0xd6) sendto$inet6(r0, &(0x7f0000000c80)="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", 0x34000, 0xbcff, 0x0, 0x0) shutdown(r0, 0x1) 762.597776ms ago: executing program 0 (id=7591): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001800290200000000ffdbdf250a00000008000000040000000400088008001e0067"], 0x28}}, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCADDDLCI(r1, 0x8980, &(0x7f0000000040)={'batadv_slave_0\x00', 0x8665}) 557.631262ms ago: executing program 0 (id=7592): getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, 0x0}, 0x7ffffff7) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x9200000000000000) bind$tipc(0xffffffffffffffff, 0x0, 0x0) recvmsg$can_j1939(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f0000001100)=@alg, 0x80, &(0x7f0000001180)}, 0x2001) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000001440)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f00000003c0)=ANY=[@ANYRES64], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x1000000}, 0x8, 0x10, &(0x7f0000000700)={0x0, 0x4}, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r2, 0x2000012, 0xe, 0x0, &(0x7f00000007c0)="257fd3cbb7ba7feb35295a62cd27", 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000800)={r4, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f00000008c0)=0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000900)={r5, @in={{0x2, 0x4e24, @empty}}, 0x7, 0x3, 0xb9, 0x9, 0x80, 0x2, 0x5}, &(0x7f00000009c0)=0x9c) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000a00)=@assoc_value={0x0}, &(0x7f0000000a40)=0x8) r8 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r8, &(0x7f0000000ac0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x40}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000b40)=@assoc_value={r7}, 0x8) setsockopt$inet_sctp_SCTP_AUTH_SUPPORTED(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000b80)={r7, 0x10000}, 0x8) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x100400c1, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000340)='X', 0xfee4, 0x0, &(0x7f0000000380)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 553.088379ms ago: executing program 1 (id=7593): r0 = socket$inet6(0xa, 0x3, 0xff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x2, [{}]}, @union={0x0, 0x0, 0x0, 0x5, 0x0, 0xdfa}]}}, 0x0, 0x3a, 0x0, 0xa, 0x9}, 0x28) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000280)=@filter={'filter\x00', 0xe, 0x4, 0x438, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x368, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty}, 0x0, 0x1a0, 0x1c8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x498) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}, 0xe95}], 0x1, 0x8000, 0x0) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000ec0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01f3ff000000f3ffffff01"], 0x2c}, 0x1, 0x40030000000000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair(0x21, 0x2, 0x45, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000011c0)=ANY=[@ANYBLOB="5e00e30b0c08000000000000006b854c65b6", @ANYRES16=r6, @ANYBLOB="01002cbd7000000000001000000018000180140002006e657464657673696d30000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000f40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WOWLAN(r5, &(0x7f0000001000)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x28, 0x0, 0x400, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x8, 0x1f}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40800}, 0x80) accept4$bt_l2cap(r3, &(0x7f0000000000), &(0x7f0000000180)=0xe, 0x80000) sendmsg$nl_route(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x25dfdbfb, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x4) socket$netlink(0x10, 0x3, 0x9) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x68, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000c00)) r8 = socket$inet6_udp(0xa, 0x2, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000001040)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000001080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000001140)=ANY=[@ANYBLOB="6000000054000500010000000000000007000000", @ANYRES32=r10, @ANYBLOB="20000100", @ANYRES32=r11, @ANYBLOB="01fe0f00ef01010100000000000000000000000086ddffff2800028005000300010000001c0002800c000180080001000a0000010c000180080001"], 0x60}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000800)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0x100, 0x1d0, 0xffffffff, 0xffffffff, 0x100, 0x1d0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@frag={{0x30}, {[0x0, 0x3f3], 0x2}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x3d0) 552.677106ms ago: executing program 2 (id=7594): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newtfilter={0x8c, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {0xa}, {0x1}, {0x300, 0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0x60, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0xffe0, 0x4}}, @TCA_U32_SEL={0x54, 0x5, {0x7, 0x2, 0x4, 0x0, 0x4, 0x0, 0x3, 0xc2d, [{0x5, 0x5, 0x1, 0x5}, {0xfdd, 0x9, 0x6, 0x3}, {0x8, 0x1000, 0x75, 0x402}, {0x400, 0x2658, 0x40000, 0x1}]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4}, 0x0) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000280)="cc", 0x1, 0x4000, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f00000002c0)={0x2, 0x203, 0x2006, 0xffffffff}, 0x10) sendto$inet6(r3, &(0x7f0000000300)='x', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000340)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000380)={0x0, 0x0, 0x3}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f00000003c0)={0x0, 0x2, 0x3}, 0x8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'geneve0\x00'}) socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(0xffffffffffffffff, 0x0) close(0x3) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x82, &(0x7f0000000540)={0x6, 0x1e7, 0x1ff, 0x7}, 0x8) 514.989211ms ago: executing program 3 (id=7595): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=@newlink={0x38, 0x10, 0x401, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6erspan={{0xe}}}]}, 0x38}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x6, &(0x7f0000000300)=ANY=[@ANYBLOB="c762c43b13c4d560df2ded1591f2e2c8e689ffdc", @ANYRES64], &(0x7f0000000340)='GPL\x00', 0x5, 0xfe7, &(0x7f0000001100)=""/4071, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000d00)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010025bd7001fcdbdf25390000000e0001006e657464657480657673696d3000000800030007000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40848}, 0x4004810) r4 = socket$netlink(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x275a, 0x0) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="04002abd7000fbdbdf2503000000080005000a01010008000500ac1414bb0500010000000000140002000000000000000000000000000000000114000200000000000000000000000000000000001400060076657468305f746f5f627269646765007e67dc77284f8cf70782c6680590c56b6c738002d81e6e1998fb31de19675cbda677e5f1660ca9d5dbbdaf7975848e8bc6ee402caa7a36e57649d3a45e0d2a337650b1f258b8745747024d34a7797c425b3cf4b02e5c0e62b9716e8f740b46bb8495a7a1a1575d096f2f07089a80a03a828140b8effcd6854d"], 0x68}, 0x1, 0x0, 0x0, 0x44085}, 0x10) sendmsg$nl_route_sched(r4, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r6, 0x0, 0x482, &(0x7f0000000180)=""/5, &(0x7f00000001c0)=0x5) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000580)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x0, 0x5}, {0xfff1, 0xffff}, {0xfff2, 0x7}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000) sendmsg$nl_route_sched(r6, &(0x7f0000000680)={0x0, 0xffffffffffffff21, &(0x7f00000006c0)={&(0x7f0000000700)=@gettfilter={0x24, 0x2e, 0x101, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x1, 0xfff2}, {0xfff3, 0xffff}, {0x8, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x2400c010) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000740)=@raw={'raw\x00', 0x8, 0x3, 0x3f0, 0x150, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3a0, 0xffffffff, 0xffffffff, 0x3a0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00', {}, {}, 0x0, 0x8, 0x2, 0x21}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@uncond, 0x0, 0x228, 0x250, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x9}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x1, 0x1000, 0x6, 0x3}}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x450) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000dc0)=@filter={'filter\x00', 0xe, 0x4, 0x2b0, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x0, 0x98, 0x218, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@inet=@set4={{0x50}, {{0x0, 0x2, 0x1}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) sendto$inet(r0, 0x0, 0x0, 0x4001800, &(0x7f0000000040)={0x2, 0x1234, @local}, 0x10) 358.076219ms ago: executing program 1 (id=7596): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002080)=0x9, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x10, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006b000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000c400000095"], &(0x7f0000000240)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000020c0)={'lo\x00', 0x0}) recvfrom$packet(r0, &(0x7f0000000000)=""/248, 0xf8, 0x12021, 0x0, 0x0) sendto$packet(r0, &(0x7f0000002100)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x88a8ffff, &(0x7f0000002140)={0x11, 0x88a8, r1}, 0x14) 229.582884ms ago: executing program 2 (id=7597): r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x7fff, @local, 0x8}, 0x80, &(0x7f0000000200)=[{&(0x7f00000002c0)='_', 0x1}], 0x1}, 0x41) setsockopt$sock_attach_bpf(r0, 0x84, 0x1e, &(0x7f0000000180), 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x891c, &(0x7f0000001300)={'\x00', {0x2, 0x0, @empty}}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0x5, &(0x7f0000000f40)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x200000a, 0xc3072, 0xffffffffffffffff, 0x2fd15000) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x2000) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r4, 0x0) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001480)={0x64, r5, 0x400, 0x70bd2c, 0x1000, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x32, 0xa, '\xd2\xb7^7\x8c4\xc0]dJ\x8e\xa2\x19>\x1e\xea\x13\xb0\xd7\xa0\x8fG\xfd\xbbW\f`\x00\x00\x00\x00\x00 \x00'/46}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x5dda974614690250}]}, 0x64}}, 0x4000004) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f0000000380)=0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f00000003c0), r8) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000f80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r7, @ANYBLOB="b75fc9ba0a9276dfff92be60ae037e516f427c39"], 0x1c}}, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000fc0)={0x3, 0x20000027, &(0x7f0000001080)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYRES16=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000000}, 0x94) bpf$ITER_CREATE(0xb, &(0x7f00000001c0), 0x0) socket$kcm(0x29, 0x5, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001440)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x11, 0x14, &(0x7f0000001100)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000075", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3d, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000001240)={0xa, 0xc, &(0x7f0000001300)=ANY=[], &(0x7f0000001340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001380)={r11, 0x2000000, 0xe, 0x0, &(0x7f0000001400)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xe, 0x16, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000000ec0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000f00), 0xffffffffffffffd2}, 0x48) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000004c0)=0x0) sendmsg$NFC_CMD_START_POLL(r3, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000500)={0x3c, r9, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}, @NFC_ATTR_IM_PROTOCOLS={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x10}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x40}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x14}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x4080) 228.105082ms ago: executing program 3 (id=7598): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000ac0)=@broute={'broute\x00', 0x20, 0x3, 0x90, [0x1e01000000000000, 0x0, 0x0, 0x0, 0x0, 0x200000000340], 0x0, 0x0, &(0x7f0000000340)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xfffffffffffffffc}]}, 0x108) 196.994896ms ago: executing program 3 (id=7599): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_REMOTE_UDP_ENCAPS_PORT(r0, 0x84, 0x84, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e20, 0xe, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x8000}}, 0x4e24}, 0x90) r1 = socket$inet6(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="380e0000240001050000000000000000000000000100000000000100ffffffff00000000090001007072696f000000001800020003000000000000000000000000000000000300"], 0xe38}}, 0x0) sendmsg(r1, &(0x7f0000000000)={0x0, 0xfffffd10, &(0x7f0000000040)=[{&(0x7f00000001c0)="5500000020007fafb70000000000000081000000030b47026c26236925000400ff7f0000bd2dca8a9848a3c728f1c4fdffffffdc1338d5e801e0b009000000000100005ae5e8458f58acbb0051a9098383de0dd7d8", 0x55}], 0x1}, 0x20000000) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) socket$netlink(0x10, 0x3, 0x8) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x44, 0x2c, 0xf3f, 0x20bd2b, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0xf, 0xe}, {0x0, 0x1}, {0x4, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_SRC={0xa, 0x6, @local}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x4}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) (async) setsockopt$inet_sctp_SCTP_REMOTE_UDP_ENCAPS_PORT(r0, 0x84, 0x84, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e20, 0xe, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x8000}}, 0x4e24}, 0x90) (async) socket$inet6(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="380e0000240001050000000000000000000000000100000000000100ffffffff00000000090001007072696f000000001800020003000000000000000000000000000000000300"], 0xe38}}, 0x0) (async) sendmsg(r1, &(0x7f0000000000)={0x0, 0xfffffd10, &(0x7f0000000040)=[{&(0x7f00000001c0)="5500000020007fafb70000000000000081000000030b47026c26236925000400ff7f0000bd2dca8a9848a3c728f1c4fdffffffdc1338d5e801e0b009000000000100005ae5e8458f58acbb0051a9098383de0dd7d8", 0x55}], 0x1}, 0x20000000) (async) socket(0x400000000010, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) (async) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) socket$netlink(0x10, 0x3, 0x8) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x44, 0x2c, 0xf3f, 0x20bd2b, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0xf, 0xe}, {0x0, 0x1}, {0x4, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_SRC={0xa, 0x6, @local}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x4}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) (async) 170.757149ms ago: executing program 1 (id=7600): close(0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(0x3) r1 = socket$inet_tcp(0x2, 0x1, 0x6) setsockopt$inet_tcp_buf(r1, 0x6, 0x1f, &(0x7f0000000540)='espintcp', 0x8) sendmsg$NFT_BATCH(r0, &(0x7f0000000740)={0x0, 0x218, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1.781699ms ago: executing program 1 (id=7601): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001300)=@deltfilter={0xa8, 0x2d, 0x20, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xf, 0xfff2}, {0xe, 0x8}, {0x0, 0xfff2}}, [@filter_kind_options=@f_basic={{0xa}, {0x78, 0x2, [@TCA_BASIC_EMATCHES={0x64, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x58, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x30, 0x1, 0x0, 0x0, {{0x4}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x5}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x6}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}]}}, @TCF_EM_NBYTE={0x14, 0x3, 0x0, 0x0, {{0x7, 0x2, 0x6}, {0x7, 0x4, 0x0, "d07ce477"}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x81cc, 0x8, 0x4}, {0x3, 0x4, 0x5}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffc}}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x10, 0xfff1}}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xffff, 0x10}}]}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0x10, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x8}, {0xa, 0xc}, {0x8, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x80010}, @TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x6}]}}]}, 0x44}}, 0x2000c010) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, 0x0, 0x0) recvmsg$unix(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)}, 0x20) sendmmsg(r0, &(0x7f0000000680)=[{{0x0, 0xa9cc7003, &(0x7f00000006c0)=[{&(0x7f0000000700)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$sock_int(r0, 0x1, 0x21, 0x0, 0x0) close(0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={r1, 0x0, 0x0}, 0x10) socket$netlink(0x10, 0x3, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000000500), 0x4) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000000980)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) setsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f00000009c0)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x36, &(0x7f0000000a00)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @timestamp={0xd, 0x0, 0x0, 0x40, 0xf, 0x3, 0xd7df, 0xbd}}}}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000a80)={@empty=0x1f, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xffffeff7, 0x40, 0x40000006}, 0x3c) 0s ago: executing program 3 (id=7602): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[{0x18, 0x110, 0xc, "aa"}, {0x78, 0x29, 0x5, "cac9f3b1c23ec299e9c4bc006c0d5f815f1e364bbb27aa37c0891ca9f3bdd1091bf0d451b100c0208c1f71ea11b1987683b9fd44db4b20172194a286301b9978fad3018dbbb3b9f002fd0e1a618888252783d8943d8e86940448b433599d517ef641116cc48034"}, {0x1008, 0x88, 0x0, "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"}], 0x1098}, 0x4fc40) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) unshare(0x22020600) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'veth1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@ipv6_newroute={0x44, 0x18, 0x405, 0x0, 0x0, {0xa, 0x80, 0x0, 0x0, 0xfe, 0x3, 0x1, 0x1}, [@RTA_PREF={0x5, 0x14, 0xb}, @RTA_OIF={0x8, 0x4, r5}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x3}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @ILA_ATTR_LOCATOR={0xc, 0x1, 0x2001000000000000}}]}, 0x44}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0xd, &(0x7f0000000380)=ANY=[@ANYBLOB="180100001700000000000000ff00000085000000a800000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) read(r2, &(0x7f0000000440)=""/202, 0xca) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x6}, 0x4) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000006c0)={r8, &(0x7f0000000700), &(0x7f0000000740)=""/155}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x4, &(0x7f0000000800)={{r8}, &(0x7f0000000840)=0x4, &(0x7f0000000880)='%pS \x00'}, 0x20) setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f0000000140)={0x0, 0x0}, 0x10) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001980)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYBLOB="2573fe4e2afe93632872d6ad56ec0d0e2d91bb0920e449cdb3184fd7dc16ec36637aa2139ac3d659db3e98cc833902011e4b860f872632dba7c9b94a1dde91e82192727b02198924f343fac0876e0c07649bf3d6bab4e21d9f957a7bb218c0fa869a5d2a094e92aff160617d077c18275e1fffa612b15e47243f013f9562dc2142d23ea6d540", @ANYRES32], 0x44}, 0x1, 0x0, 0x0, 0x40080c1}, 0x0) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/syz1\x00', 0x200002, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) r10 = openat$cgroup_procs(r9, &(0x7f0000000280)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r10, &(0x7f0000000700), 0x12) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000040)) socket$vsock_stream(0x28, 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001cc0)={r6, 0x0, 0x53, 0xd1, &(0x7f0000001a40)="55dd2c61a29801b6377479af0324a0007a9d5210d773e61147a61c5faa52179b287ba2179da57bfc532eb9bf5878b93a8b5504633c8ff893e380cf811a467304084ddd77d173342d202457510abeb90773100c", &(0x7f0000001ac0)=""/209, 0x10, 0x0, 0xb7, 0x23, &(0x7f0000001bc0)="add16ada409b9e623b6483602a5d50bb33b4305e52a63dbc23123925b7da7b15ee11817d91d44255d9cf0b836ed3247efe8fb1fd6210a81f25e1346a0cd0b25cdcb5879e929f98eda03a17bc876a861332ee38fe0257daa3fae433764148874b7c38251c654940d5262e19a955ecccd4e1a56e9c7241b941bf13b5531034dc6981a7e130433ce192c57e495b2207d9adc94c07ccf8536df7af8d296893d6746cdaae562b197ebcfa035a6d61975ad13089686883c67690", &(0x7f0000001c80)="db882caeb432adff76ab3e04dcdf956b66abfc57a6f4aca2c4f8e2c428eadcddfcbbb9", 0x0, 0x0, 0x4}, 0x50) r11 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r11, &(0x7f0000000600)={0xa, 0x4e20, 0x1, @empty, 0x8}, 0x1c) sendto$inet6(r11, 0x0, 0x0, 0x2409c8c1, &(0x7f0000001d40)={0xa, 0x4e20, 0x6, @mcast1}, 0x1c) kernel console output (not intermixed with test programs): left promiscuous mode [ 795.046997][T29103] veth0_vlan: left promiscuous mode [ 795.057782][T29103] veth0_vlan: entered promiscuous mode [ 795.074166][T29103] veth1_vlan: entered promiscuous mode [ 795.109059][T29103] veth1_macvtap: left promiscuous mode [ 795.121975][T29103] veth0_macvtap: left promiscuous mode [ 795.123525][T29103] veth0_macvtap: entered promiscuous mode [ 795.125740][T29103] veth1_macvtap: entered promiscuous mode [ 795.167241][T29103] 8021q: adding VLAN 0 to HW filter on device bond1 [ 795.185515][T29103] 8021q: adding VLAN 0 to HW filter on device bond2 [ 795.197813][T29103] 8021q: adding VLAN 0 to HW filter on device bond3 [ 795.204031][T29103] 8021q: adding VLAN 0 to HW filter on device bond4 [ 795.262873][T29103] 8021q: adding VLAN 0 to HW filter on device bond5 [ 795.265028][T29103] 8021q: adding VLAN 0 to HW filter on device bond6 [ 795.266807][T29103] 8021q: adding VLAN 0 to HW filter on device bond7 [ 795.268517][T29103] 8021q: adding VLAN 0 to HW filter on device bond8 [ 795.272025][T29103] vlan0: left promiscuous mode [ 795.308032][T29103] 8021q: adding VLAN 0 to HW filter on device bond9 [ 795.317797][T29103] 8021q: adding VLAN 0 to HW filter on device bond10 [ 795.326996][T29103] 8021q: adding VLAN 0 to HW filter on device bond11 [ 795.343724][T29103] 8021q: adding VLAN 0 to HW filter on device bond12 [ 795.364630][T29103] 8021q: adding VLAN 0 to HW filter on device eth0 [ 795.376698][T29103] 8021q: adding VLAN 0 to HW filter on device eth1 [ 795.381192][T29103] 8021q: adding VLAN 0 to HW filter on device eth2 [ 795.395758][T29103] 8021q: adding VLAN 0 to HW filter on device eth3 [ 795.397141][T29107] netlink: 'syz.1.6952': attribute type 3 has an invalid length. [ 795.415266][T18237] bridge0: port 1(bridge_slave_0) entered blocking state [ 795.415388][T18237] bridge0: port 1(bridge_slave_0) entered forwarding state [ 795.418712][T18237] bridge0: port 2(bridge_slave_1) entered blocking state [ 795.418822][T18237] bridge0: port 2(bridge_slave_1) entered forwarding state [ 795.600392][T18592] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 795.600430][T18592] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 795.600512][T18592] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 795.600540][T18592] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 795.600591][T18592] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 795.600620][T18592] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 795.600657][T18592] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 795.600685][T18592] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 795.706957][T29123] bridge0: port 1(bridge_slave_0) entered forwarding state [ 795.856439][T29134] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 796.118582][T29150] netlink: 'syz.2.6969': attribute type 1 has an invalid length. [ 796.191064][T29150] 8021q: adding VLAN 0 to HW filter on device bond6 [ 796.367072][T29155] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 796.386108][T29150] tipc: Enabling of bearer rejected, failed to enable media [ 796.591985][T28192] IPVS: ip_vs_send_async error -101 [ 796.663865][T29168] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6974'. [ 796.787989][T29173] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 796.788031][T29173] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 796.807946][T29169] bridge0: port 1(vlan3) entered blocking state [ 796.808134][T29169] bridge0: port 1(vlan3) entered disabled state [ 796.808300][T29169] vlan3: entered allmulticast mode [ 796.808318][T29169] geneve0: entered allmulticast mode [ 796.835738][T29169] vlan3: entered promiscuous mode [ 796.835762][T29169] geneve0: entered promiscuous mode [ 797.010930][T29181] tipc: New replicast peer: 255.255.255.255 [ 797.011637][T29181] tipc: Enabled bearer , priority 10 [ 797.135329][T29188] bridge0: port 1(bridge_slave_0) entered forwarding state [ 797.634504][T29201] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 797.722837][T29203] netlink: 'syz.4.6985': attribute type 1 has an invalid length. [ 797.757402][T29209] ip_tables: iptables: counters copy to user failed while replacing table [ 797.797622][T29203] 8021q: adding VLAN 0 to HW filter on device bond13 [ 797.832199][T29203] tipc: Enabling of bearer rejected, failed to enable media [ 798.010160][T28952] tipc: Node number set to 1792839940 [ 798.093259][T29225] netlink: 'syz.4.6990': attribute type 1 has an invalid length. [ 798.093287][T29225] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6990'. [ 798.093308][T29225] nbd: must specify at least one socket [ 798.135047][T29224] netlink: 112 bytes leftover after parsing attributes in process `syz.1.6991'. [ 798.278471][T29227] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6990'. [ 798.278509][T29227] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 798.324704][T29233] netlink: zone id is out of range [ 798.324722][T29233] netlink: zone id is out of range [ 798.324732][T29233] netlink: zone id is out of range [ 798.324741][T29233] netlink: zone id is out of range [ 798.324750][T29233] netlink: zone id is out of range [ 798.324760][T29233] netlink: zone id is out of range [ 798.324772][T29233] netlink: zone id is out of range [ 798.324782][T29233] netlink: zone id is out of range [ 798.324791][T29233] netlink: zone id is out of range [ 798.477301][T29237] FAULT_INJECTION: forcing a failure. [ 798.477301][T29237] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 798.477340][T29237] CPU: 0 UID: 0 PID: 29237 Comm: syz.1.6996 Not tainted syzkaller #0 PREEMPT(full) [ 798.477367][T29237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 798.477382][T29237] Call Trace: [ 798.477392][T29237] [ 798.477403][T29237] dump_stack_lvl+0xe8/0x150 [ 798.477442][T29237] should_fail_ex+0x410/0x560 [ 798.477479][T29237] _copy_to_user+0x31/0xb0 [ 798.477514][T29237] bpf_test_finish+0x1cf/0x690 [ 798.477556][T29237] ? __pfx_bpf_test_finish+0x10/0x10 [ 798.477600][T29237] bpf_prog_test_run_skb+0x11fe/0x2230 [ 798.477654][T29237] ? __fget_files+0x3a2/0x420 [ 798.477688][T29237] ? __fget_files+0x2a/0x420 [ 798.477727][T29237] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 798.477759][T29237] bpf_prog_test_run+0x2c5/0x340 [ 798.477794][T29237] __sys_bpf+0xa22/0xd90 [ 798.477840][T29237] ? __pfx___sys_bpf+0x10/0x10 [ 798.477881][T29237] ? __fget_files+0x2a/0x420 [ 798.477935][T29237] ? ksys_write+0x242/0x270 [ 798.477961][T29237] ? __pfx_ksys_write+0x10/0x10 [ 798.477991][T29237] __x64_sys_bpf+0xba/0xd0 [ 798.478107][T29237] do_syscall_64+0x166/0x520 [ 798.478140][T29237] ? trace_irq_disable+0x3b/0x140 [ 798.478165][T29237] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 798.478209][T29237] ? clear_bhb_loop+0x70/0xc0 [ 798.478239][T29237] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 798.478262][T29237] RIP: 0033:0x7f4aab19e2d9 [ 798.478284][T29237] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 798.478305][T29237] RSP: 002b:00007f4aac102028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 798.478329][T29237] RAX: ffffffffffffffda RBX: 00007f4aab425fa0 RCX: 00007f4aab19e2d9 [ 798.478344][T29237] RDX: 0000000000000050 RSI: 0000200000001080 RDI: 000000000000000a [ 798.478360][T29237] RBP: 00007f4aac102090 R08: 0000000000000000 R09: 0000000000000000 [ 798.478375][T29237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 798.478389][T29237] R13: 00007f4aab426038 R14: 00007f4aab425fa0 R15: 00007fffd391eb38 [ 798.478426][T29237] [ 798.850725][T29244] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 799.128823][T29256] netlink: 'syz.4.7001': attribute type 1 has an invalid length. [ 799.217120][T29256] 8021q: adding VLAN 0 to HW filter on device bond14 [ 799.262599][T29256] tipc: Enabling of bearer rejected, failed to enable media [ 799.377568][T29255] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7002'. [ 799.377607][T29255] netlink: 'syz.3.7002': attribute type 7 has an invalid length. [ 799.377623][T29255] netlink: 'syz.3.7002': attribute type 8 has an invalid length. [ 799.377637][T29255] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7002'. [ 799.441322][T29255] netdevsim netdevsim3 netdevsim2: entered promiscuous mode [ 799.466474][T29255] netdevsim netdevsim3 netdevsim1: entered promiscuous mode [ 799.468480][T29255] erspan0: entered promiscuous mode [ 799.484411][T29255] hsr1: Slave A (netdevsim2) is not up; please bring it up to get a fully working HSR network [ 799.484438][T29255] hsr1: Slave B (netdevsim1) is not up; please bring it up to get a fully working HSR network [ 799.485094][T29255] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 799.606714][T29277] ip6tnl1: entered allmulticast mode [ 800.085026][T29296] FAULT_INJECTION: forcing a failure. [ 800.085026][T29296] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 800.085054][T29296] CPU: 1 UID: 0 PID: 29296 Comm: syz.1.7012 Not tainted syzkaller #0 PREEMPT(full) [ 800.085073][T29296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 800.085086][T29296] Call Trace: [ 800.085092][T29296] [ 800.085101][T29296] dump_stack_lvl+0xe8/0x150 [ 800.085130][T29296] should_fail_ex+0x410/0x560 [ 800.085157][T29296] _copy_from_user+0x2d/0xb0 [ 800.085183][T29296] copy_from_bpfptr+0x5c/0x90 [ 800.085204][T29296] bpf_prog_load+0xcdb/0x1c20 [ 800.085233][T29296] ? __pfx_bpf_prog_load+0x10/0x10 [ 800.085272][T29296] __sys_bpf+0xd0d/0xd90 [ 800.085297][T29296] ? __pfx___sys_bpf+0x10/0x10 [ 800.085325][T29296] ? __fget_files+0x2a/0x420 [ 800.085362][T29296] ? ksys_write+0x242/0x270 [ 800.085381][T29296] ? __pfx_ksys_write+0x10/0x10 [ 800.085401][T29296] __x64_sys_bpf+0xba/0xd0 [ 800.085420][T29296] do_syscall_64+0x166/0x520 [ 800.085447][T29296] ? trace_irq_disable+0x3b/0x140 [ 800.085465][T29296] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 800.085481][T29296] ? clear_bhb_loop+0x70/0xc0 [ 800.085502][T29296] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 800.085518][T29296] RIP: 0033:0x7f4aab19e2d9 [ 800.085533][T29296] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 800.085547][T29296] RSP: 002b:00007f4aac102028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 800.085565][T29296] RAX: ffffffffffffffda RBX: 00007f4aab425fa0 RCX: 00007f4aab19e2d9 [ 800.085583][T29296] RDX: 0000000000000094 RSI: 0000200000000280 RDI: 0000000000000005 [ 800.085594][T29296] RBP: 00007f4aac102090 R08: 0000000000000000 R09: 0000000000000000 [ 800.085605][T29296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 800.085615][T29296] R13: 00007f4aab426038 R14: 00007f4aab425fa0 R15: 00007fffd391eb38 [ 800.085641][T29296] [ 800.325814][T29298] FAULT_INJECTION: forcing a failure. [ 800.325814][T29298] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 800.325842][T29298] CPU: 1 UID: 0 PID: 29298 Comm: syz.1.7013 Not tainted syzkaller #0 PREEMPT(full) [ 800.325861][T29298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 800.325872][T29298] Call Trace: [ 800.325879][T29298] [ 800.325886][T29298] dump_stack_lvl+0xe8/0x150 [ 800.325914][T29298] should_fail_ex+0x410/0x560 [ 800.325956][T29298] _copy_to_user+0x31/0xb0 [ 800.325982][T29298] simple_read_from_buffer+0xe1/0x170 [ 800.326012][T29298] proc_fail_nth_read+0x1bb/0x230 [ 800.326029][T29298] ? common_file_perm+0x20e/0x2b0 [ 800.326055][T29298] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 800.326075][T29298] ? rw_verify_area+0x24a/0x4c0 [ 800.326093][T29298] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 800.326110][T29298] vfs_read+0x213/0xa80 [ 800.326132][T29298] ? __pfx___mutex_lock+0x10/0x10 [ 800.326157][T29298] ? __pfx_vfs_read+0x10/0x10 [ 800.326174][T29298] ? __fget_files+0x2a/0x420 [ 800.326202][T29298] ? __fget_files+0x3a2/0x420 [ 800.326226][T29298] ? __fget_files+0x2a/0x420 [ 800.326257][T29298] ksys_read+0x150/0x270 [ 800.326275][T29298] ? __pfx_ksys_read+0x10/0x10 [ 800.326300][T29298] do_syscall_64+0x166/0x520 [ 800.326338][T29298] ? trace_irq_disable+0x3b/0x140 [ 800.326363][T29298] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 800.326386][T29298] ? clear_bhb_loop+0x70/0xc0 [ 800.326418][T29298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 800.326435][T29298] RIP: 0033:0x7f4aab15eb0e [ 800.326450][T29298] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 800.326464][T29298] RSP: 002b:00007f4aac101fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 800.326482][T29298] RAX: ffffffffffffffda RBX: 00007f4aac1026c0 RCX: 00007f4aab15eb0e [ 800.326494][T29298] RDX: 000000000000000f RSI: 00007f4aac1020a0 RDI: 0000000000000004 [ 800.326504][T29298] RBP: 00007f4aac102090 R08: 0000000000000000 R09: 0000000000000000 [ 800.326515][T29298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 800.326525][T29298] R13: 00007f4aab426038 R14: 00007f4aab425fa0 R15: 00007fffd391eb38 [ 800.326551][T29298] [ 800.686513][T29304] netlink: 176 bytes leftover after parsing attributes in process `syz.2.7014'. [ 800.771167][T29304] x_tables: ip6_tables: recent.0 match: invalid size 216 (kernel) != (user) 232 [ 800.905830][T29312] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7014'. [ 801.462193][T29314] veth0_to_team: entered promiscuous mode [ 801.485575][T29314] 8021q: adding VLAN 0 to HW filter on device bond5 [ 802.488448][T29358] netlink: 176 bytes leftover after parsing attributes in process `syz.3.7035'. [ 802.494162][T29356] vlan4: entered promiscuous mode [ 802.494462][T29356] bridge0: entered promiscuous mode [ 802.494950][T29356] vlan4: entered allmulticast mode [ 802.494991][T29356] bridge0: entered allmulticast mode [ 802.528068][T29353] bridge0: port 2(bridge_slave_1) entered disabled state [ 802.567888][T29358] x_tables: ip6_tables: recent.0 match: invalid size 216 (kernel) != (user) 232 [ 802.588894][T29358] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7035'. [ 803.066112][T29363] bond3: left promiscuous mode [ 803.107684][T18599] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 803.412487][ C1] net_ratelimit: 232 callbacks suppressed [ 803.412513][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 803.547498][T29385] netlink: 'syz.3.7045': attribute type 61 has an invalid length. [ 803.547526][T29385] netlink: 'syz.3.7045': attribute type 268 has an invalid length. [ 804.227372][T29407] netlink: 176 bytes leftover after parsing attributes in process `syz.3.7052'. [ 804.327982][T29407] x_tables: ip6_tables: recent.0 match: invalid size 216 (kernel) != (user) 232 [ 804.383487][T29407] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7052'. [ 804.418974][T29383] netlink: 100 bytes leftover after parsing attributes in process `syz.0.7046'. [ 804.442275][T29416] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7054'. [ 804.442314][T29416] netlink: 'syz.2.7054': attribute type 7 has an invalid length. [ 804.442328][T29416] netlink: 'syz.2.7054': attribute type 8 has an invalid length. [ 804.442342][T29416] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7054'. [ 804.447146][T29415] netlink: 'syz.4.7055': attribute type 1 has an invalid length. [ 804.613144][T29415] 8021q: adding VLAN 0 to HW filter on device bond15 [ 804.657582][T29421] tipc: Enabling of bearer rejected, failed to enable media [ 804.809682][T18592] batadv1: left promiscuous mode [ 805.019756][T29429] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7058'. [ 805.071278][T29431] netlink: 'syz.0.7059': attribute type 61 has an invalid length. [ 805.071308][T29431] netlink: 'syz.0.7059': attribute type 268 has an invalid length. [ 805.589809][T29460] netlink: 'syz.0.7068': attribute type 16 has an invalid length. [ 805.589838][T29460] netlink: 'syz.0.7068': attribute type 17 has an invalid length. [ 805.649395][ T5623] Bluetooth: hci4: command 0x0406 tx timeout [ 805.729800][T29460] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 805.748489][T29460] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 807.309655][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 808.149816][T29438] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 808.450220][T29469] netlink: 'syz.3.7072': attribute type 61 has an invalid length. [ 808.677883][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.677947][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.848866][T29476] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7076'. [ 808.969607][T18597] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 808.969773][ T61] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 808.989341][T18597] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 808.997010][ T61] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 809.198140][T29492] ip_tables: iptables: counters copy to user failed while replacing table [ 809.258760][T29490] Cannot find add_set index 4 as target [ 809.313535][T29494] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7083'. [ 809.524903][T29500] FAULT_INJECTION: forcing a failure. [ 809.524903][T29500] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 809.524935][T29500] CPU: 0 UID: 0 PID: 29500 Comm: syz.2.7085 Not tainted syzkaller #0 PREEMPT(full) [ 809.524959][T29500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 809.524973][T29500] Call Trace: [ 809.524982][T29500] [ 809.524992][T29500] dump_stack_lvl+0xe8/0x150 [ 809.525029][T29500] should_fail_ex+0x410/0x560 [ 809.525065][T29500] _copy_to_user+0x31/0xb0 [ 809.525100][T29500] simple_read_from_buffer+0xe1/0x170 [ 809.525141][T29500] proc_fail_nth_read+0x1bb/0x230 [ 809.525164][T29500] ? common_file_perm+0x20e/0x2b0 [ 809.525199][T29500] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 809.525227][T29500] ? rw_verify_area+0x24a/0x4c0 [ 809.525250][T29500] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 809.525275][T29500] vfs_read+0x213/0xa80 [ 809.525295][T29500] ? trace_contention_end+0x3d/0x140 [ 809.525334][T29500] ? __pfx_vfs_read+0x10/0x10 [ 809.525355][T29500] ? rfkill_fop_ioctl+0x1a9/0x240 [ 809.525496][T29500] ? __mutex_unlock_slowpath+0x731/0x900 [ 809.525542][T29500] ksys_read+0x150/0x270 [ 809.525567][T29500] ? __pfx_ksys_read+0x10/0x10 [ 809.525600][T29500] do_syscall_64+0x166/0x520 [ 809.525630][T29500] ? trace_irq_disable+0x3b/0x140 [ 809.525653][T29500] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 809.525676][T29500] ? clear_bhb_loop+0x70/0xc0 [ 809.525703][T29500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 809.525725][T29500] RIP: 0033:0x7ff9cdb5eb0e [ 809.525752][T29500] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 809.525772][T29500] RSP: 002b:00007ff9ceaf4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 809.525796][T29500] RAX: ffffffffffffffda RBX: 00007ff9ceaf56c0 RCX: 00007ff9cdb5eb0e [ 809.525813][T29500] RDX: 000000000000000f RSI: 00007ff9ceaf50a0 RDI: 0000000000000004 [ 809.525828][T29500] RBP: 00007ff9ceaf5090 R08: 0000000000000000 R09: 0000000000000000 [ 809.525842][T29500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 809.525856][T29500] R13: 00007ff9cde26038 R14: 00007ff9cde25fa0 R15: 00007ffd0bde73d8 [ 809.525892][T29500] [ 809.771777][T29503] validate_nla: 1 callbacks suppressed [ 809.771798][T29503] netlink: 'syz.0.7086': attribute type 61 has an invalid length. [ 809.771817][T29503] netlink: 'syz.0.7086': attribute type 268 has an invalid length. [ 810.385091][T29523] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7094'. [ 810.415246][T29529] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7096'. [ 810.548376][T29533] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7098'. [ 810.548436][T29533] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7098'. [ 810.753989][T29549] IPVS: Error joining to the multicast group [ 811.181401][T29566] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7107'. [ 811.215904][T29568] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7108'. [ 811.215947][T29568] netlink: 'syz.2.7108': attribute type 7 has an invalid length. [ 811.215963][T29568] netlink: 'syz.2.7108': attribute type 8 has an invalid length. [ 811.215978][T29568] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7108'. [ 811.398687][T29575] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7110'. [ 811.511842][T29582] FAULT_INJECTION: forcing a failure. [ 811.511842][T29582] name failslab, interval 1, probability 0, space 0, times 0 [ 811.511880][T29582] CPU: 1 UID: 0 PID: 29582 Comm: syz.2.7112 Not tainted syzkaller #0 PREEMPT(full) [ 811.511906][T29582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 811.511920][T29582] Call Trace: [ 811.511929][T29582] [ 811.511939][T29582] dump_stack_lvl+0xe8/0x150 [ 811.511978][T29582] should_fail_ex+0x410/0x560 [ 811.512014][T29582] should_failslab+0xa8/0x100 [ 811.512048][T29582] __kmalloc_node_track_caller_noprof+0xfb/0x720 [ 811.512088][T29582] ? kvrealloc_node_align_noprof+0x7b/0xf0 [ 811.512116][T29582] ? kvrealloc_node_align_noprof+0x7b/0xf0 [ 811.512150][T29582] ? kvrealloc_node_align_noprof+0x7b/0xf0 [ 811.512180][T29582] krealloc_node_align_noprof+0x19a/0x390 [ 811.512208][T29582] ? __kmalloc_cache_noprof+0x14d/0x600 [ 811.512233][T29582] ? bpf_diag_init+0x87/0x140 [ 811.512261][T29582] ? bpf_diag_init+0x87/0x140 [ 811.512291][T29582] kvrealloc_node_align_noprof+0x7b/0xf0 [ 811.512328][T29582] bpf_iarray_realloc+0x34/0xa0 [ 811.512355][T29582] bpf_check+0x148b/0x2ef0 [ 811.512402][T29582] ? __pfx_bpf_check+0x10/0x10 [ 811.512432][T29582] ? bpf_obj_name_cpy+0x194/0x1e0 [ 811.512471][T29582] bpf_prog_load+0x14d6/0x1c20 [ 811.512514][T29582] ? __pfx_bpf_prog_load+0x10/0x10 [ 811.512570][T29582] __sys_bpf+0xd0d/0xd90 [ 811.512608][T29582] ? __pfx___sys_bpf+0x10/0x10 [ 811.512648][T29582] ? __fget_files+0x2a/0x420 [ 811.512704][T29582] ? ksys_write+0x242/0x270 [ 811.512730][T29582] ? __pfx_ksys_write+0x10/0x10 [ 811.512759][T29582] __x64_sys_bpf+0xba/0xd0 [ 811.512788][T29582] do_syscall_64+0x166/0x520 [ 811.512818][T29582] ? trace_irq_disable+0x3b/0x140 [ 811.512842][T29582] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 811.512865][T29582] ? clear_bhb_loop+0x70/0xc0 [ 811.512895][T29582] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 811.512918][T29582] RIP: 0033:0x7ff9cdb9e2d9 [ 811.512940][T29582] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 811.512960][T29582] RSP: 002b:00007ff9ceaf5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 811.512985][T29582] RAX: ffffffffffffffda RBX: 00007ff9cde25fa0 RCX: 00007ff9cdb9e2d9 [ 811.513003][T29582] RDX: 0000000000000048 RSI: 000020000000e000 RDI: 0000000000000005 [ 811.513019][T29582] RBP: 00007ff9ceaf5090 R08: 0000000000000000 R09: 0000000000000000 [ 811.513034][T29582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 811.513048][T29582] R13: 00007ff9cde26038 R14: 00007ff9cde25fa0 R15: 00007ffd0bde73d8 [ 811.513094][T29582] [ 812.065601][T29595] netlink: 'syz.3.7118': attribute type 1 has an invalid length. [ 812.065627][T29595] netlink: 'syz.3.7118': attribute type 2 has an invalid length. [ 812.088751][ T5623] block nbd1: Receive control failed (result -32) [ 812.126771][T29598] ip_tables: iptables: counters copy to user failed while replacing table [ 812.514408][T29616] netlink: Invalid conntrack timeout [ 812.514451][T29616] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 812.772198][T29627] x_tables: ip6_tables: recent.0 match: invalid size 216 (kernel) != (user) 232 [ 812.897066][T29632] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 812.936560][T29631] 8021q: VLANs not supported on wg0 [ 813.095070][T29627] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 813.098086][T18597] bridge0: port 2(bridge_slave_1) entered blocking state [ 813.098199][T18597] bridge0: port 2(bridge_slave_1) entered forwarding state [ 814.174834][T29672] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 814.464695][T29680] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 814.520761][T29688] netlink: 'syz.0.7152': attribute type 1 has an invalid length. [ 814.585951][T29688] 8021q: adding VLAN 0 to HW filter on device bond3 [ 814.616537][T29688] syzkaller0: MTU not usable for tipc bearer [ 814.616574][T29688] tipc: Enabling of bearer rejected, failed to enable media [ 814.847474][T29698] __nla_validate_parse: 4 callbacks suppressed [ 814.847496][T29698] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7155'. [ 814.847517][T29698] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7155'. [ 814.888302][T29702] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7156'. [ 815.121904][T29713] netlink: 176 bytes leftover after parsing attributes in process `syz.3.7160'. [ 815.193120][T29713] x_tables: ip6_tables: recent.0 match: invalid size 216 (kernel) != (user) 232 [ 815.195169][T29721] netlink: 156 bytes leftover after parsing attributes in process `syz.1.7161'. [ 815.197465][T29724] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7163'. [ 815.255827][T29713] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7160'. [ 815.722520][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 815.966347][T29749] netlink: 'syz.4.7170': attribute type 55 has an invalid length. [ 816.264685][T29760] IPv6: Can't replace route, no match found [ 816.767668][T29782] syzkaller0: entered promiscuous mode [ 816.767687][T29782] syzkaller0: entered allmulticast mode [ 816.944079][T29789] netlink: 156 bytes leftover after parsing attributes in process `syz.3.7183'. [ 817.286945][T29792] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 3, id = 0 [ 817.287607][T29791] IPVS: stopping backup sync thread 29792 ... [ 817.549577][T29798] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7185'. [ 817.549789][T29801] syzkaller0: entered promiscuous mode [ 817.549803][T29801] syzkaller0: entered allmulticast mode [ 817.895621][T29811] FAULT_INJECTION: forcing a failure. [ 817.895621][T29811] name failslab, interval 1, probability 0, space 0, times 0 [ 817.895654][T29811] CPU: 1 UID: 0 PID: 29811 Comm: syz.3.7189 Not tainted syzkaller #0 PREEMPT(full) [ 817.895672][T29811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 817.895683][T29811] Call Trace: [ 817.895690][T29811] [ 817.895698][T29811] dump_stack_lvl+0xe8/0x150 [ 817.895726][T29811] should_fail_ex+0x410/0x560 [ 817.895753][T29811] should_failslab+0xa8/0x100 [ 817.895779][T29811] __kmalloc_cache_noprof+0xa3/0x600 [ 817.895799][T29811] ? vlan_vid_add+0x135/0x750 [ 817.895814][T29811] ? vlan_vid_add+0x135/0x750 [ 817.895835][T29811] vlan_vid_add+0x135/0x750 [ 817.895852][T29811] ? __kvmalloc_node_noprof+0x345/0x820 [ 817.895872][T29811] ? alloc_netdev_mqs+0xd5b/0x1240 [ 817.895896][T29811] register_vlan_dev+0x9c/0x830 [ 817.895915][T29811] ? vlan_changelink+0x4ac/0x560 [ 817.895943][T29811] vlan_newlink+0x4b2/0x610 [ 817.895967][T29811] ? __pfx_vlan_newlink+0x10/0x10 [ 817.895992][T29811] rtnl_newlink_create+0x305/0x7b0 [ 817.896041][T29811] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 817.896071][T29811] ? __pfx___mutex_lock+0x10/0x10 [ 817.896115][T29811] ? ns_capable+0x89/0xe0 [ 817.896151][T29811] rtnl_newlink+0x167a/0x1c30 [ 817.896192][T29811] ? __pfx_rtnl_newlink+0x10/0x10 [ 817.896218][T29811] ? __netlink_deliver_tap+0x4f1/0x6e0 [ 817.896239][T29811] ? netlink_deliver_tap+0x19c/0x1b0 [ 817.896259][T29811] ? netlink_unicast+0x781/0x940 [ 817.896276][T29811] ? netlink_sendmsg+0x813/0xb40 [ 817.896296][T29811] ? sock_sendmsg_nosec+0x14e/0x190 [ 817.896316][T29811] ? ____sys_sendmsg+0x54e/0x850 [ 817.896330][T29811] ? ___sys_sendmsg+0x2a5/0x360 [ 817.896345][T29811] ? __x64_sys_sendmsg+0x1b1/0x290 [ 817.896360][T29811] ? do_syscall_64+0x166/0x520 [ 817.896381][T29811] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 817.896426][T29811] ? kasan_quarantine_put+0xbb/0x1f0 [ 817.896444][T29811] ? lockdep_hardirqs_on+0x7b/0x110 [ 817.896469][T29811] ? nlmon_xmit+0xb0/0x100 [ 817.896489][T29811] ? kmem_cache_free+0x182/0x650 [ 817.896514][T29811] ? __lock_acquire+0x747/0x2de0 [ 817.896538][T29811] ? __dev_queue_xmit+0x29b/0x3920 [ 817.896560][T29811] ? __local_bh_enable_ip+0xd6/0x140 [ 817.896581][T29811] ? lockdep_hardirqs_on+0x7b/0x110 [ 817.896622][T29811] ? __pfx_rtnl_newlink+0x10/0x10 [ 817.896637][T29811] rtnetlink_rcv_msg+0x802/0xc00 [ 817.896671][T29811] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 817.896696][T29811] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 817.896724][T29811] ? __copy_skb_header+0xa3/0x4a0 [ 817.896751][T29811] netlink_rcv_skb+0x226/0x4a0 [ 817.896773][T29811] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 817.896800][T29811] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 817.896832][T29811] ? netlink_deliver_tap+0x2e/0x1b0 [ 817.896853][T29811] ? netlink_deliver_tap+0x2e/0x1b0 [ 817.896879][T29811] netlink_unicast+0x7bd/0x940 [ 817.896907][T29811] netlink_sendmsg+0x813/0xb40 [ 817.896936][T29811] ? __pfx_netlink_sendmsg+0x10/0x10 [ 817.896965][T29811] ? apparmor_socket_sendmsg+0x98/0x360 [ 817.896989][T29811] ? __pfx_netlink_sendmsg+0x10/0x10 [ 817.897009][T29811] sock_sendmsg_nosec+0x14e/0x190 [ 817.897033][T29811] ____sys_sendmsg+0x54e/0x850 [ 817.897055][T29811] ? __pfx_____sys_sendmsg+0x10/0x10 [ 817.897079][T29811] ? import_iovec+0x73/0xa0 [ 817.897106][T29811] ___sys_sendmsg+0x2a5/0x360 [ 817.897122][T29811] ? __lock_acquire+0x747/0x2de0 [ 817.897144][T29811] ? __pfx____sys_sendmsg+0x10/0x10 [ 817.897221][T29811] ? __fget_files+0x2a/0x420 [ 817.897256][T29811] ? __fget_files+0x3a2/0x420 [ 817.897303][T29811] __x64_sys_sendmsg+0x1b1/0x290 [ 817.897331][T29811] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 817.897383][T29811] do_syscall_64+0x166/0x520 [ 817.897413][T29811] ? trace_irq_disable+0x3b/0x140 [ 817.897431][T29811] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 817.897447][T29811] ? clear_bhb_loop+0x70/0xc0 [ 817.897467][T29811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 817.897490][T29811] RIP: 0033:0x7fd09619e2d9 [ 817.897505][T29811] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 817.897521][T29811] RSP: 002b:00007fd0970fa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 817.897538][T29811] RAX: ffffffffffffffda RBX: 00007fd096425fa0 RCX: 00007fd09619e2d9 [ 817.897551][T29811] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 817.897562][T29811] RBP: 00007fd0970fa090 R08: 0000000000000000 R09: 0000000000000000 [ 817.897572][T29811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 817.897582][T29811] R13: 00007fd096426038 R14: 00007fd096425fa0 R15: 00007ffca2519038 [ 817.897608][T29811] [ 819.264303][T29763] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 820.192301][ T1705] block nbd0: Possible stuck request ffff8880343d7000: control (read@0,4096B). Runtime 240 seconds [ 820.497867][T29862] tipc: Started in network mode [ 820.497902][T29862] tipc: Node identity 4ab65aab2838, cluster identity 4711 [ 820.498590][T29862] tipc: Enabled bearer , priority 20 [ 820.626607][T29868] IPv6: NLM_F_CREATE should be specified when creating new route [ 820.626707][T29868] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 820.626716][T29868] IPv6: NLM_F_CREATE should be set when creating new route [ 820.627799][T29868] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 820.989765][ T5623] Bluetooth: hci5: command 0x0406 tx timeout [ 821.343214][T29898] FAULT_INJECTION: forcing a failure. [ 821.343214][T29898] name failslab, interval 1, probability 0, space 0, times 0 [ 821.343262][T29898] CPU: 1 UID: 0 PID: 29898 Comm: syz.0.7220 Not tainted syzkaller #0 PREEMPT(full) [ 821.343291][T29898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 821.343307][T29898] Call Trace: [ 821.343318][T29898] [ 821.343330][T29898] dump_stack_lvl+0xe8/0x150 [ 821.343373][T29898] should_fail_ex+0x410/0x560 [ 821.343415][T29898] should_failslab+0xa8/0x100 [ 821.343453][T29898] __kvmalloc_node_noprof+0x176/0x820 [ 821.343486][T29898] ? netdev_alloc_config+0x4f/0xc0 [ 821.343518][T29898] ? netdev_alloc_config+0x4f/0xc0 [ 821.343562][T29898] ? alloc_netdev_mqs+0xd5b/0x1240 [ 821.343591][T29898] ? alloc_netdev_mqs+0xd5b/0x1240 [ 821.343631][T29898] alloc_netdev_mqs+0xd5b/0x1240 [ 821.343671][T29898] rtnl_create_link+0x321/0xd70 [ 821.343711][T29898] rtnl_newlink_create+0x258/0x7b0 [ 821.343750][T29898] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 821.343784][T29898] ? __pfx___mutex_lock+0x10/0x10 [ 821.343831][T29898] ? ns_capable+0x89/0xe0 [ 821.343870][T29898] rtnl_newlink+0x167a/0x1c30 [ 821.343913][T29898] ? __pfx_rtnl_newlink+0x10/0x10 [ 821.343934][T29898] ? __netlink_deliver_tap+0x4f1/0x6e0 [ 821.343965][T29898] ? netlink_deliver_tap+0x19c/0x1b0 [ 821.343995][T29898] ? netlink_unicast+0x781/0x940 [ 821.344021][T29898] ? netlink_sendmsg+0x813/0xb40 [ 821.344052][T29898] ? sock_sendmsg_nosec+0x14e/0x190 [ 821.344081][T29898] ? ____sys_sendmsg+0x54e/0x850 [ 821.344104][T29898] ? ___sys_sendmsg+0x2a5/0x360 [ 821.344145][T29898] ? __sys_sendmmsg+0x273/0x4d0 [ 821.344169][T29898] ? __x64_sys_sendmmsg+0xa0/0xc0 [ 821.344194][T29898] ? do_syscall_64+0x166/0x520 [ 821.344226][T29898] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 821.344308][T29898] ? kasan_quarantine_put+0xbb/0x1f0 [ 821.344338][T29898] ? lockdep_hardirqs_on+0x7b/0x110 [ 821.344377][T29898] ? nlmon_xmit+0xb0/0x100 [ 821.344408][T29898] ? kmem_cache_free+0x182/0x650 [ 821.344449][T29898] ? __lock_acquire+0x747/0x2de0 [ 821.344488][T29898] ? __dev_queue_xmit+0x29b/0x3920 [ 821.344523][T29898] ? __local_bh_enable_ip+0xd6/0x140 [ 821.344558][T29898] ? lockdep_hardirqs_on+0x7b/0x110 [ 821.344625][T29898] ? __pfx_rtnl_newlink+0x10/0x10 [ 821.344649][T29898] rtnetlink_rcv_msg+0x802/0xc00 [ 821.344693][T29898] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 821.344732][T29898] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 821.344777][T29898] ? __copy_skb_header+0xa3/0x4a0 [ 821.344821][T29898] netlink_rcv_skb+0x226/0x4a0 [ 821.344856][T29898] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 821.344899][T29898] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 821.344950][T29898] ? netlink_deliver_tap+0x2e/0x1b0 [ 821.344984][T29898] ? netlink_deliver_tap+0x2e/0x1b0 [ 821.345025][T29898] netlink_unicast+0x7bd/0x940 [ 821.345082][T29898] netlink_sendmsg+0x813/0xb40 [ 821.345128][T29898] ? __pfx_netlink_sendmsg+0x10/0x10 [ 821.345172][T29898] ? apparmor_socket_sendmsg+0x98/0x360 [ 821.345226][T29898] ? __pfx_netlink_sendmsg+0x10/0x10 [ 821.345267][T29898] sock_sendmsg_nosec+0x14e/0x190 [ 821.345305][T29898] ____sys_sendmsg+0x54e/0x850 [ 821.345340][T29898] ? __pfx_____sys_sendmsg+0x10/0x10 [ 821.345380][T29898] ? import_iovec+0x73/0xa0 [ 821.345423][T29898] ___sys_sendmsg+0x2a5/0x360 [ 821.345449][T29898] ? __lock_acquire+0x747/0x2de0 [ 821.345494][T29898] ? __pfx____sys_sendmsg+0x10/0x10 [ 821.345527][T29898] ? kstrtouint+0x6e/0xe0 [ 821.345590][T29898] ? __fget_files+0x2a/0x420 [ 821.345626][T29898] ? __fget_files+0x3a2/0x420 [ 821.345676][T29898] __sys_sendmmsg+0x273/0x4d0 [ 821.345710][T29898] ? __pfx___sys_sendmmsg+0x10/0x10 [ 821.345750][T29898] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 821.345802][T29898] ? ksys_write+0x242/0x270 [ 821.345832][T29898] ? __pfx_ksys_write+0x10/0x10 [ 821.345868][T29898] __x64_sys_sendmmsg+0xa0/0xc0 [ 821.345899][T29898] do_syscall_64+0x166/0x520 [ 821.345932][T29898] ? trace_irq_disable+0x3b/0x140 [ 821.345959][T29898] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 821.345986][T29898] ? clear_bhb_loop+0x70/0xc0 [ 821.346018][T29898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 821.346044][T29898] RIP: 0033:0x7f77be99e2d9 [ 821.346068][T29898] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 821.346091][T29898] RSP: 002b:00007f77bf79b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 821.346119][T29898] RAX: ffffffffffffffda RBX: 00007f77bec25fa0 RCX: 00007f77be99e2d9 [ 821.346138][T29898] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000010 [ 821.346157][T29898] RBP: 00007f77bf79b090 R08: 0000000000000000 R09: 0000000000000000 [ 821.346174][T29898] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000002 [ 821.346191][T29898] R13: 00007f77bec26038 R14: 00007f77bec25fa0 R15: 00007fff6d6119c8 [ 821.346232][T29898] [ 821.630676][T28952] tipc: Node number set to 1653496491 [ 822.180787][T29920] netlink: 'syz.1.7229': attribute type 1 has an invalid length. [ 822.180814][T29920] netlink: 224 bytes leftover after parsing attributes in process `syz.1.7229'. [ 822.433946][T29934] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 822.707186][T29941] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7237'. [ 822.734244][T29943] FAULT_INJECTION: forcing a failure. [ 822.734244][T29943] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 822.734282][T29943] CPU: 0 UID: 0 PID: 29943 Comm: syz.4.7238 Not tainted syzkaller #0 PREEMPT(full) [ 822.734309][T29943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 822.734324][T29943] Call Trace: [ 822.734333][T29943] [ 822.734343][T29943] dump_stack_lvl+0xe8/0x150 [ 822.734387][T29943] should_fail_ex+0x410/0x560 [ 822.734424][T29943] prepare_alloc_pages+0x223/0x600 [ 822.734459][T29943] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 822.734493][T29943] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 822.734527][T29943] ? __pfx_policy_nodemask+0x10/0x10 [ 822.734556][T29943] ? __get_vm_area_node+0x155/0x2f0 [ 822.734589][T29943] ? __vmalloc_node_range_noprof+0x343/0x1540 [ 822.734611][T29943] ? __vmalloc_noprof+0xd2/0x120 [ 822.734632][T29943] ? do_replace+0x297/0x470 [ 822.734663][T29943] ? do_ebt_set_ctl+0x2fb/0x1020 [ 822.734688][T29943] ? do_sock_setsockopt+0x17c/0x1b0 [ 822.734708][T29943] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 822.734728][T29943] ? do_syscall_64+0x166/0x520 [ 822.734757][T29943] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 822.734785][T29943] alloc_pages_mpol+0x21e/0x390 [ 822.734824][T29943] alloc_pages_noprof+0xb1/0x2b0 [ 822.734859][T29943] get_free_pages_noprof+0xf/0x80 [ 822.734887][T29943] __kasan_populate_vmalloc+0x38/0x1c0 [ 822.734913][T29943] ? do_raw_spin_unlock+0xf5/0x200 [ 822.734951][T29943] alloc_vmap_area+0xd1a/0x1420 [ 822.735001][T29943] ? __pfx_alloc_vmap_area+0x10/0x10 [ 822.735033][T29943] ? __kmalloc_cache_node_noprof+0x3d1/0x620 [ 822.735061][T29943] ? __kmalloc_cache_node_noprof+0x1f7/0x620 [ 822.735105][T29943] ? __get_vm_area_node+0x155/0x2f0 [ 822.735146][T29943] __get_vm_area_node+0x200/0x2f0 [ 822.735189][T29943] __vmalloc_node_range_noprof+0x343/0x1540 [ 822.735214][T29943] ? do_replace+0x297/0x470 [ 822.735272][T29943] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 822.735309][T29943] ? do_replace+0x297/0x470 [ 822.735331][T29943] __vmalloc_noprof+0xd2/0x120 [ 822.735353][T29943] ? do_replace+0x297/0x470 [ 822.735381][T29943] do_replace+0x297/0x470 [ 822.735408][T29943] ? __pfx_do_replace+0x10/0x10 [ 822.735446][T29943] ? bpf_lsm_capable+0x9/0x20 [ 822.735469][T29943] ? security_capable+0x7e/0x2c0 [ 822.735509][T29943] do_ebt_set_ctl+0x2fb/0x1020 [ 822.735538][T29943] ? __lock_acquire+0x747/0x2de0 [ 822.735564][T29943] ? __pfx_do_ebt_set_ctl+0x10/0x10 [ 822.735591][T29943] ? kstrtouint+0x6e/0xe0 [ 822.735615][T29943] ? begin_current_label_crit_section+0x2a3/0x830 [ 822.735654][T29943] ? __pfx_begin_current_label_crit_section+0x10/0x10 [ 822.735697][T29943] ? get_pid_task+0x20/0x1f0 [ 822.735727][T29943] ? __mutex_trylock_common+0x15f/0x270 [ 822.735761][T29943] ? __pfx___mutex_trylock_common+0x10/0x10 [ 822.735794][T29943] ? rcu_is_watching+0x16/0xb0 [ 822.735824][T29943] ? trace_contention_end+0x3d/0x140 [ 822.735866][T29943] ? nf_setsockopt+0x221/0x290 [ 822.735896][T29943] ? __mutex_unlock_slowpath+0x731/0x900 [ 822.735934][T29943] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 822.735988][T29943] nf_setsockopt+0x26f/0x290 [ 822.736014][T29943] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 822.736049][T29943] do_sock_setsockopt+0x17c/0x1b0 [ 822.736076][T29943] __x64_sys_setsockopt+0x13d/0x1b0 [ 822.736104][T29943] do_syscall_64+0x166/0x520 [ 822.736134][T29943] ? trace_irq_disable+0x3b/0x140 [ 822.736157][T29943] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 822.736181][T29943] ? clear_bhb_loop+0x70/0xc0 [ 822.736209][T29943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 822.736232][T29943] RIP: 0033:0x7f027579e2d9 [ 822.736253][T29943] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 822.736272][T29943] RSP: 002b:00007f0276698028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 822.736297][T29943] RAX: ffffffffffffffda RBX: 00007f0275a25fa0 RCX: 00007f027579e2d9 [ 822.736315][T29943] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000003 [ 822.736329][T29943] RBP: 00007f0276698090 R08: 0000000000000378 R09: 0000000000000000 [ 822.736344][T29943] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 822.736359][T29943] R13: 00007f0275a26038 R14: 00007f0275a25fa0 R15: 00007fff5e23a968 [ 822.736396][T29943] [ 822.774294][T29943] warn_alloc: 1 callbacks suppressed [ 822.774314][T29943] syz.4.7238: vmalloc error: size 768, align 0x1, vm_struct allocation failed, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 822.774379][T29943] CPU: 0 UID: 0 PID: 29943 Comm: syz.4.7238 Not tainted syzkaller #0 PREEMPT(full) [ 822.774404][T29943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 822.774418][T29943] Call Trace: [ 822.774427][T29943] [ 822.774437][T29943] dump_stack_lvl+0xe8/0x150 [ 822.774474][T29943] warn_alloc+0x24d/0x270 [ 822.774500][T29943] ? lockdep_hardirqs_on+0x7b/0x110 [ 822.774533][T29943] ? __pfx_warn_alloc+0x10/0x10 [ 822.774557][T29943] ? kfree+0x1c5/0x650 [ 822.774584][T29943] ? __get_vm_area_node+0x219/0x2f0 [ 822.774627][T29943] __vmalloc_node_range_noprof+0x36b/0x1540 [ 822.774687][T29943] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 822.774724][T29943] ? do_replace+0x297/0x470 [ 822.774746][T29943] __vmalloc_noprof+0xd2/0x120 [ 822.774769][T29943] ? do_replace+0x297/0x470 [ 822.774795][T29943] do_replace+0x297/0x470 [ 822.774822][T29943] ? __pfx_do_replace+0x10/0x10 [ 822.774859][T29943] ? bpf_lsm_capable+0x9/0x20 [ 822.774881][T29943] ? security_capable+0x7e/0x2c0 [ 822.774919][T29943] do_ebt_set_ctl+0x2fb/0x1020 [ 822.774948][T29943] ? __lock_acquire+0x747/0x2de0 [ 822.774973][T29943] ? __pfx_do_ebt_set_ctl+0x10/0x10 [ 822.775001][T29943] ? kstrtouint+0x6e/0xe0 [ 822.775025][T29943] ? begin_current_label_crit_section+0x2a3/0x830 [ 822.775063][T29943] ? __pfx_begin_current_label_crit_section+0x10/0x10 [ 822.775116][T29943] ? get_pid_task+0x20/0x1f0 [ 822.775145][T29943] ? __mutex_trylock_common+0x15f/0x270 [ 822.775179][T29943] ? __pfx___mutex_trylock_common+0x10/0x10 [ 822.775212][T29943] ? rcu_is_watching+0x16/0xb0 [ 822.775240][T29943] ? trace_contention_end+0x3d/0x140 [ 822.775280][T29943] ? nf_setsockopt+0x221/0x290 [ 822.775310][T29943] ? __mutex_unlock_slowpath+0x731/0x900 [ 822.775348][T29943] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 822.775395][T29943] nf_setsockopt+0x26f/0x290 [ 822.775421][T29943] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 822.775457][T29943] do_sock_setsockopt+0x17c/0x1b0 [ 822.775484][T29943] __x64_sys_setsockopt+0x13d/0x1b0 [ 822.775513][T29943] do_syscall_64+0x166/0x520 [ 822.775542][T29943] ? trace_irq_disable+0x3b/0x140 [ 822.775566][T29943] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 822.775590][T29943] ? clear_bhb_loop+0x70/0xc0 [ 822.775617][T29943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 822.775640][T29943] RIP: 0033:0x7f027579e2d9 [ 822.775670][T29943] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 822.775689][T29943] RSP: 002b:00007f0276698028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 822.775712][T29943] RAX: ffffffffffffffda RBX: 00007f0275a25fa0 RCX: 00007f027579e2d9 [ 822.775730][T29943] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000003 [ 822.775744][T29943] RBP: 00007f0276698090 R08: 0000000000000378 R09: 0000000000000000 [ 822.775759][T29943] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 822.775773][T29943] R13: 00007f0275a26038 R14: 00007f0275a25fa0 R15: 00007fff5e23a968 [ 822.775806][T29943] [ 822.775815][T29943] Mem-Info: [ 822.775825][T29943] active_anon:5468 inactive_anon:0 isolated_anon:0 [ 822.775825][T29943] active_file:0 inactive_file:44456 isolated_file:0 [ 822.775825][T29943] unevictable:0 dirty:256 writeback:0 [ 822.775825][T29943] slab_reclaimable:11901 slab_unreclaimable:118000 [ 822.775825][T29943] mapped:30189 shmem:526 pagetables:1233 [ 822.775825][T29943] sec_pagetables:0 bounce:0 [ 822.775825][T29943] kernel_misc_reclaimable:0 [ 822.775825][T29943] free:1257746 free_pcp:10990 free_cma:0 [ 822.775879][T29943] Node 0 active_anon:21872kB inactive_anon:0kB active_file:0kB inactive_file:177628kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:120756kB dirty:1024kB writeback:0kB shmem:2104kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15560kB pagetables:4792kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 822.775938][T29943] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 822.792081][T29943] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 822.792150][T29943] lowmem_reserve[]: 0 2468 2468 2468 2468 [ 822.792193][T29943] Node 0 DMA32 free:1082400kB boost:0kB min:33984kB low:42480kB high:50976kB reserved_highatomic:0kB free_highatomic:0kB active_anon:21872kB inactive_anon:0kB active_file:0kB inactive_file:177628kB unevictable:0kB writepending:1024kB zspages:0kB present:3129332kB managed:2527708kB mlocked:0kB bounce:0kB free_pcp:43856kB local_pcp:20908kB free_cma:0kB [ 822.792353][T29943] lowmem_reserve[]: 0 0 0 0 0 [ 822.792464][T29943] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 822.792623][T29943] lowmem_reserve[]: 0 0 0 0 0 [ 822.792730][T29943] Node 1 Normal free:3933224kB boost:0kB min:55916kB low:69892kB high:83868kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 822.792889][T29943] lowmem_reserve[]: 0 0 0 0 0 [ 822.792989][T29943] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 822.793341][T29943] Node 0 DMA32: 2611*4kB (UME) 824*8kB (UME) 734*16kB (UM) 701*32kB (UME) 309*64kB (UME) 180*128kB (UME) 75*256kB (UME) 37*512kB (UM) 12*1024kB (UME) 4*2048kB (UME) 227*4096kB (UM) = 1082444kB [ 822.793835][T29943] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 822.831139][T29943] Node 1 Normal: 2*4kB (M) 2*8kB (UM) 11*16kB (UM) 5*32kB (UM) 9*64kB (UM) 5*128kB (UM) 2*256kB (M) 4*512kB (UM) 1*1024kB (M) 0*2048kB 959*4096kB (M) = 3933224kB [ 822.831587][T29943] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 822.831637][T29943] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 822.831703][T29943] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 822.831745][T29943] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 822.831858][T29943] 44978 total pagecache pages [ 822.831880][T29943] 0 pages in swap cache [ 822.831902][T29943] Free swap = 124996kB [ 822.831931][T29943] Total swap = 124996kB [ 822.831953][T29943] 2097051 pages RAM [ 822.831980][T29943] 0 pages HighMem/MovableOnly [ 822.832001][T29943] 433508 pages reserved [ 822.832022][T29943] 0 pages cma reserved [ 823.942531][T29954] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7243'. [ 823.942953][T29954] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7243'. [ 824.418015][T29977] netlink: 156 bytes leftover after parsing attributes in process `syz.0.7251'. [ 824.634774][T29985] netlink: 'syz.0.7254': attribute type 1 has an invalid length. [ 824.665365][T29988] SET target dimension over the limit! [ 824.681267][T29985] 8021q: adding VLAN 0 to HW filter on device bond4 [ 824.703988][T29985] syzkaller0: MTU not usable for tipc bearer [ 824.704030][T29985] tipc: Enabling of bearer rejected, failed to enable media [ 825.112358][T29997] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7258'. [ 825.378508][T30015] netlink: 156 bytes leftover after parsing attributes in process `syz.2.7264'. [ 825.415107][T30019] FAULT_INJECTION: forcing a failure. [ 825.415107][T30019] name failslab, interval 1, probability 0, space 0, times 0 [ 825.415145][T30019] CPU: 1 UID: 0 PID: 30019 Comm: syz.4.7265 Not tainted syzkaller #0 PREEMPT(full) [ 825.415170][T30019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 825.415185][T30019] Call Trace: [ 825.415195][T30019] [ 825.415206][T30019] dump_stack_lvl+0xe8/0x150 [ 825.415246][T30019] should_fail_ex+0x410/0x560 [ 825.415283][T30019] should_failslab+0xa8/0x100 [ 825.415316][T30019] __kmalloc_noprof+0xfe/0x720 [ 825.415342][T30019] ? lock_acquire+0x115/0x350 [ 825.415365][T30019] ? nft_set_elem_init+0xa8/0x7e0 [ 825.415491][T30019] ? nft_set_elem_init+0xa8/0x7e0 [ 825.415532][T30019] nft_set_elem_init+0xa8/0x7e0 [ 825.415574][T30019] nf_tables_newsetelem+0x2428/0x4200 [ 825.415651][T30019] ? __pfx_nf_tables_newsetelem+0x10/0x10 [ 825.415681][T30019] ? lock_acquire+0x115/0x350 [ 825.415719][T30019] ? nla_validate_array+0xfc/0x260 [ 825.415775][T30019] ? __pfx___nla_validate_parse+0x10/0x10 [ 825.415816][T30019] ? __pfx_nf_tables_newset+0x10/0x10 [ 825.415849][T30019] ? lock_acquire+0x115/0x350 [ 825.415874][T30019] ? nfnl_pernet+0x23/0x240 [ 825.415911][T30019] ? __nla_parse+0x40/0x60 [ 825.415951][T30019] nfnetlink_rcv+0x1288/0x28c0 [ 825.416018][T30019] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 825.416094][T30019] ? skb_clone+0x246/0x3a0 [ 825.416136][T30019] ? netlink_deliver_tap+0x2e/0x1b0 [ 825.416168][T30019] ? netlink_deliver_tap+0x2e/0x1b0 [ 825.416205][T30019] netlink_unicast+0x7bd/0x940 [ 825.416245][T30019] netlink_sendmsg+0x813/0xb40 [ 825.416287][T30019] ? __pfx_netlink_sendmsg+0x10/0x10 [ 825.416325][T30019] ? apparmor_socket_sendmsg+0x18b/0x360 [ 825.416357][T30019] ? __pfx_netlink_sendmsg+0x10/0x10 [ 825.416386][T30019] sock_sendmsg_nosec+0x14e/0x190 [ 825.416420][T30019] ____sys_sendmsg+0x54e/0x850 [ 825.416460][T30019] ? __pfx_____sys_sendmsg+0x10/0x10 [ 825.416494][T30019] ? import_iovec+0x73/0xa0 [ 825.416532][T30019] ___sys_sendmsg+0x2a5/0x360 [ 825.416554][T30019] ? __lock_acquire+0x747/0x2de0 [ 825.416583][T30019] ? __pfx____sys_sendmsg+0x10/0x10 [ 825.416647][T30019] ? __fget_files+0x2a/0x420 [ 825.416682][T30019] ? __fget_files+0x3a2/0x420 [ 825.416728][T30019] __x64_sys_sendmsg+0x1b1/0x290 [ 825.416756][T30019] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 825.416806][T30019] do_syscall_64+0x166/0x520 [ 825.416838][T30019] ? trace_irq_disable+0x3b/0x140 [ 825.416862][T30019] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 825.416885][T30019] ? clear_bhb_loop+0x70/0xc0 [ 825.416914][T30019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 825.416936][T30019] RIP: 0033:0x7f027579e2d9 [ 825.416959][T30019] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 825.416979][T30019] RSP: 002b:00007f0276698028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 825.417005][T30019] RAX: ffffffffffffffda RBX: 00007f0275a25fa0 RCX: 00007f027579e2d9 [ 825.417022][T30019] RDX: 0000000020008844 RSI: 0000200000000740 RDI: 0000000000000003 [ 825.417038][T30019] RBP: 00007f0276698090 R08: 0000000000000000 R09: 0000000000000000 [ 825.417053][T30019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 825.417067][T30019] R13: 00007f0275a26038 R14: 00007f0275a25fa0 R15: 00007fff5e23a968 [ 825.417105][T30019] [ 825.553668][T18597] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x1 [ 825.575688][T30016] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7263'. [ 826.004902][T30030] FAULT_INJECTION: forcing a failure. [ 826.004902][T30030] name failslab, interval 1, probability 0, space 0, times 0 [ 826.004938][T30030] CPU: 1 UID: 0 PID: 30030 Comm: syz.4.7269 Not tainted syzkaller #0 PREEMPT(full) [ 826.004964][T30030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 826.004979][T30030] Call Trace: [ 826.004987][T30030] [ 826.004998][T30030] dump_stack_lvl+0xe8/0x150 [ 826.005049][T30030] should_fail_ex+0x410/0x560 [ 826.005084][T30030] should_failslab+0xa8/0x100 [ 826.005117][T30030] __kvmalloc_node_noprof+0x176/0x820 [ 826.005142][T30030] ? __kmalloc_cache_noprof+0x14d/0x600 [ 826.005167][T30030] ? bpf_diag_init+0x87/0x140 [ 826.005196][T30030] ? bpf_check+0x165c/0x2ef0 [ 826.005220][T30030] ? bpf_check+0x165c/0x2ef0 [ 826.005252][T30030] bpf_check+0x165c/0x2ef0 [ 826.005296][T30030] ? __pfx_bpf_check+0x10/0x10 [ 826.005325][T30030] ? bpf_obj_name_cpy+0x194/0x1e0 [ 826.005362][T30030] bpf_prog_load+0x14d6/0x1c20 [ 826.005421][T30030] ? __pfx_bpf_prog_load+0x10/0x10 [ 826.005484][T30030] __sys_bpf+0xd0d/0xd90 [ 826.005521][T30030] ? __pfx___sys_bpf+0x10/0x10 [ 826.005564][T30030] ? __fget_files+0x2a/0x420 [ 826.005616][T30030] ? ksys_write+0x242/0x270 [ 826.005642][T30030] ? __pfx_ksys_write+0x10/0x10 [ 826.005671][T30030] __x64_sys_bpf+0xba/0xd0 [ 826.005698][T30030] do_syscall_64+0x166/0x520 [ 826.005728][T30030] ? trace_irq_disable+0x3b/0x140 [ 826.005752][T30030] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 826.005776][T30030] ? clear_bhb_loop+0x70/0xc0 [ 826.005804][T30030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 826.005827][T30030] RIP: 0033:0x7f027579e2d9 [ 826.005849][T30030] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 826.005870][T30030] RSP: 002b:00007f0276698028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 826.005895][T30030] RAX: ffffffffffffffda RBX: 00007f0275a25fa0 RCX: 00007f027579e2d9 [ 826.005912][T30030] RDX: 0000000000000048 RSI: 0000200000000000 RDI: 0000000000000005 [ 826.005927][T30030] RBP: 00007f0276698090 R08: 0000000000000000 R09: 0000000000000000 [ 826.005941][T30030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 826.005955][T30030] R13: 00007f0275a26038 R14: 00007f0275a25fa0 R15: 00007fff5e23a968 [ 826.005992][T30030] [ 826.136380][T26185] Bluetooth: hci1: command 0x0406 tx timeout [ 826.733467][T30046] netlink: 9 bytes leftover after parsing attributes in process `syz.3.7274'. [ 826.753786][T30046] netlink: 9 bytes leftover after parsing attributes in process `syz.3.7274'. [ 827.033601][T30061] sch_tbf: burst 0 is lower than device ip6tnl0 mtu (1452) ! [ 827.103169][T30063] syzkaller0: entered promiscuous mode [ 827.103196][T30063] syzkaller0: entered allmulticast mode [ 827.111532][T30065] FAULT_INJECTION: forcing a failure. [ 827.111532][T30065] name failslab, interval 1, probability 0, space 0, times 0 [ 827.111561][T30065] CPU: 0 UID: 0 PID: 30065 Comm: syz.3.7281 Not tainted syzkaller #0 PREEMPT(full) [ 827.111583][T30065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 827.111595][T30065] Call Trace: [ 827.111602][T30065] [ 827.111611][T30065] dump_stack_lvl+0xe8/0x150 [ 827.111641][T30065] should_fail_ex+0x410/0x560 [ 827.111674][T30065] should_failslab+0xa8/0x100 [ 827.111712][T30065] __kmalloc_cache_noprof+0xa3/0x600 [ 827.111733][T30065] ? register_netdevice+0x58d/0x2280 [ 827.111752][T30065] ? register_netdevice+0x58d/0x2280 [ 827.111778][T30065] register_netdevice+0x58d/0x2280 [ 827.111803][T30065] ? alloc_netdev_mqs+0xd5b/0x1240 [ 827.111824][T30065] ? __kvmalloc_node_noprof+0x52f/0x820 [ 827.111847][T30065] ? __kvmalloc_node_noprof+0x345/0x820 [ 827.111877][T30065] ? __pfx_register_netdevice+0x10/0x10 [ 827.111902][T30065] ? validate_linkmsg+0x809/0xa50 [ 827.111933][T30065] br_dev_newlink+0x6a/0x150 [ 827.111952][T30065] ? rtnl_newlink_create+0x2f2/0x7b0 [ 827.111970][T30065] ? __pfx_br_dev_newlink+0x10/0x10 [ 827.111991][T30065] rtnl_newlink_create+0x305/0x7b0 [ 827.112016][T30065] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 827.112039][T30065] ? __pfx___mutex_lock+0x10/0x10 [ 827.112072][T30065] ? ns_capable+0x89/0xe0 [ 827.112099][T30065] rtnl_newlink+0x167a/0x1c30 [ 827.112129][T30065] ? __pfx_rtnl_newlink+0x10/0x10 [ 827.112144][T30065] ? __netlink_deliver_tap+0x4f1/0x6e0 [ 827.112167][T30065] ? netlink_deliver_tap+0x19c/0x1b0 [ 827.112187][T30065] ? netlink_unicast+0x781/0x940 [ 827.112206][T30065] ? netlink_sendmsg+0x813/0xb40 [ 827.112228][T30065] ? sock_sendmsg_nosec+0x14e/0x190 [ 827.112249][T30065] ? ____sys_sendmsg+0x54e/0x850 [ 827.112266][T30065] ? ___sys_sendmsg+0x2a5/0x360 [ 827.112282][T30065] ? __x64_sys_sendmsg+0x1b1/0x290 [ 827.112299][T30065] ? do_syscall_64+0x166/0x520 [ 827.112321][T30065] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 827.112373][T30065] ? kasan_quarantine_put+0xbb/0x1f0 [ 827.112395][T30065] ? lockdep_hardirqs_on+0x7b/0x110 [ 827.112422][T30065] ? nlmon_xmit+0xb0/0x100 [ 827.112444][T30065] ? kmem_cache_free+0x182/0x650 [ 827.112473][T30065] ? __lock_acquire+0x747/0x2de0 [ 827.112499][T30065] ? __dev_queue_xmit+0x29b/0x3920 [ 827.112523][T30065] ? __local_bh_enable_ip+0xd6/0x140 [ 827.112547][T30065] ? lockdep_hardirqs_on+0x7b/0x110 [ 827.112593][T30065] ? __pfx_rtnl_newlink+0x10/0x10 [ 827.112609][T30065] rtnetlink_rcv_msg+0x802/0xc00 [ 827.112642][T30065] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 827.112670][T30065] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 827.112720][T30065] ? __copy_skb_header+0xa3/0x4a0 [ 827.112752][T30065] netlink_rcv_skb+0x226/0x4a0 [ 827.112779][T30065] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 827.112812][T30065] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 827.112852][T30065] ? netlink_deliver_tap+0x2e/0x1b0 [ 827.112891][T30065] ? netlink_deliver_tap+0x2e/0x1b0 [ 827.112921][T30065] netlink_unicast+0x7bd/0x940 [ 827.112952][T30065] netlink_sendmsg+0x813/0xb40 [ 827.112985][T30065] ? __pfx_netlink_sendmsg+0x10/0x10 [ 827.113016][T30065] ? apparmor_socket_sendmsg+0x98/0x360 [ 827.113043][T30065] ? __pfx_netlink_sendmsg+0x10/0x10 [ 827.113068][T30065] sock_sendmsg_nosec+0x14e/0x190 [ 827.113098][T30065] ____sys_sendmsg+0x54e/0x850 [ 827.113125][T30065] ? __pfx_____sys_sendmsg+0x10/0x10 [ 827.113157][T30065] ? import_iovec+0x73/0xa0 [ 827.113195][T30065] ___sys_sendmsg+0x2a5/0x360 [ 827.113217][T30065] ? __lock_acquire+0x747/0x2de0 [ 827.113246][T30065] ? __pfx____sys_sendmsg+0x10/0x10 [ 827.113311][T30065] ? __fget_files+0x2a/0x420 [ 827.113344][T30065] ? __fget_files+0x3a2/0x420 [ 827.113389][T30065] __x64_sys_sendmsg+0x1b1/0x290 [ 827.113416][T30065] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 827.113464][T30065] do_syscall_64+0x166/0x520 [ 827.113494][T30065] ? trace_irq_disable+0x3b/0x140 [ 827.113519][T30065] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 827.113543][T30065] ? clear_bhb_loop+0x70/0xc0 [ 827.113572][T30065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 827.113596][T30065] RIP: 0033:0x7fd09619e2d9 [ 827.113618][T30065] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 827.113639][T30065] RSP: 002b:00007fd0970fa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 827.113665][T30065] RAX: ffffffffffffffda RBX: 00007fd096425fa0 RCX: 00007fd09619e2d9 [ 827.113682][T30065] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 827.113698][T30065] RBP: 00007fd0970fa090 R08: 0000000000000000 R09: 0000000000000000 [ 827.113713][T30065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 827.113727][T30065] R13: 00007fd096426038 R14: 00007fd096425fa0 R15: 00007ffca2519038 [ 827.113765][T30065] [ 827.398104][T30066] __nla_validate_parse: 2 callbacks suppressed [ 827.398129][T30066] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7280'. [ 827.760276][T30073] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7282'. [ 828.206162][T30095] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7290'. [ 828.292783][T30101] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7292'. [ 829.002271][T30135] tipc: Enabling of bearer rejected, already enabled [ 829.105184][T30140] xt_LOG: prefix is not null-terminated [ 829.112160][T30139] xt_LOG: prefix is not null-terminated [ 829.693522][T30167] syzkaller0: left promiscuous mode [ 829.693548][T30167] syzkaller0: left allmulticast mode [ 829.695539][T30167] netlink: 84 bytes leftover after parsing attributes in process `syz.0.7314'. [ 829.703211][T30168] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7312'. [ 829.738133][T30168] netlink: 224 bytes leftover after parsing attributes in process `syz.2.7312'. [ 829.937067][T30178] netlink: 156 bytes leftover after parsing attributes in process `syz.0.7316'. [ 829.993971][T30183] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7318'. [ 830.034828][T30186] netlink: 15678 bytes leftover after parsing attributes in process `syz.0.7320'. [ 830.439164][T30208] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 830.439236][T30208] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 830.646153][ T5623] Bluetooth: hci5: unexpected event for opcode 0x203d [ 830.810307][T30212] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 830.836019][T30212] bond0 (unregistering): Released all slaves [ 830.917217][T30219] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 831.094460][T30235] openvswitch: netlink: Geneve opt len 2 is not a multiple of 4. [ 831.339903][T30248] openvswitch: netlink: Missing valid actions attribute. [ 831.339959][T30248] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 831.380050][T30251] netlink: 'syz.3.7340': attribute type 1 has an invalid length. [ 831.416828][T30251] 8021q: adding VLAN 0 to HW filter on device bond3 [ 831.434704][T30256] FAULT_INJECTION: forcing a failure. [ 831.434704][T30256] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 831.434743][T30256] CPU: 0 UID: 0 PID: 30256 Comm: syz.4.7341 Not tainted syzkaller #0 PREEMPT(full) [ 831.434773][T30256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 831.434787][T30256] Call Trace: [ 831.434797][T30256] [ 831.434808][T30256] dump_stack_lvl+0xe8/0x150 [ 831.434845][T30256] should_fail_ex+0x410/0x560 [ 831.434887][T30256] _copy_from_user+0x2d/0xb0 [ 831.434920][T30256] ___sys_sendmsg+0x1c6/0x360 [ 831.434945][T30256] ? __lock_acquire+0x747/0x2de0 [ 831.434974][T30256] ? __pfx____sys_sendmsg+0x10/0x10 [ 831.435035][T30256] ? __fget_files+0x2a/0x420 [ 831.435069][T30256] ? __fget_files+0x3a2/0x420 [ 831.435113][T30256] __x64_sys_sendmsg+0x1b1/0x290 [ 831.435141][T30256] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 831.435188][T30256] do_syscall_64+0x166/0x520 [ 831.435218][T30256] ? trace_irq_disable+0x3b/0x140 [ 831.435242][T30256] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 831.435265][T30256] ? clear_bhb_loop+0x70/0xc0 [ 831.435294][T30256] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 831.435316][T30256] RIP: 0033:0x7f027579e2d9 [ 831.435337][T30256] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 831.435357][T30256] RSP: 002b:00007f0276677028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 831.435378][T30256] RAX: ffffffffffffffda RBX: 00007f0275a26090 RCX: 00007f027579e2d9 [ 831.435394][T30256] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 831.435409][T30256] RBP: 00007f0276677090 R08: 0000000000000000 R09: 0000000000000000 [ 831.435420][T30256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 831.435440][T30256] R13: 00007f0275a26128 R14: 00007f0275a26090 R15: 00007fff5e23a968 [ 831.435470][T30256] [ 831.450333][T30251] tipc: Enabling of bearer rejected, failed to enable media [ 831.709546][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 831.892901][T30269] ip_tables: iptables: counters copy to user failed while replacing table [ 831.893387][T30269] C: renamed from lo (while UP) [ 831.920418][T30269] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 832.006630][T30274] FAULT_INJECTION: forcing a failure. [ 832.006630][T30274] name failslab, interval 1, probability 0, space 0, times 0 [ 832.006667][T30274] CPU: 1 UID: 0 PID: 30274 Comm: syz.3.7348 Not tainted syzkaller #0 PREEMPT(full) [ 832.006692][T30274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 832.006706][T30274] Call Trace: [ 832.006715][T30274] [ 832.006725][T30274] dump_stack_lvl+0xe8/0x150 [ 832.006762][T30274] should_fail_ex+0x410/0x560 [ 832.006810][T30274] should_failslab+0xa8/0x100 [ 832.006843][T30274] __kmalloc_cache_noprof+0xa3/0x600 [ 832.006888][T30274] ? __kmalloc_cache_noprof+0x14d/0x600 [ 832.006913][T30274] ? sctp_add_bind_addr+0x8c/0x370 [ 832.006946][T30274] ? sctp_add_bind_addr+0x8c/0x370 [ 832.006987][T30274] sctp_add_bind_addr+0x8c/0x370 [ 832.007026][T30274] sctp_copy_local_addr_list+0x31a/0x4e0 [ 832.007064][T30274] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 832.007100][T30274] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 832.007139][T30274] ? sctp_v6_is_any+0x64/0x80 [ 832.007163][T30274] ? sctp_copy_one_addr+0x93/0x360 [ 832.007202][T30274] sctp_bind_addr_copy+0xb3/0x3c0 [ 832.007238][T30274] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 832.007273][T30274] sctp_connect_new_asoc+0x2ff/0x6b0 [ 832.007303][T30274] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 832.007337][T30274] ? __local_bh_enable_ip+0xd6/0x140 [ 832.007366][T30274] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 832.007400][T30274] ? security_sctp_bind_connect+0x7e/0x2c0 [ 832.007432][T30274] sctp_sendmsg+0x159b/0x2d00 [ 832.007470][T30274] ? kstrtouint+0x6e/0xe0 [ 832.007497][T30274] ? __pfx_sctp_sendmsg+0x10/0x10 [ 832.007521][T30274] ? lock_acquire+0x115/0x350 [ 832.007546][T30274] ? get_pid_task+0x20/0x1f0 [ 832.007587][T30274] ? aa_sock_msg_perm+0xf5/0x210 [ 832.007619][T30274] ? sock_rps_record_flow+0x19/0x350 [ 832.007658][T30274] ? inet_sendmsg+0x298/0x320 [ 832.007695][T30274] ? __pfx_inet_sendmsg+0x10/0x10 [ 832.007728][T30274] sock_sendmsg_nosec+0x10f/0x190 [ 832.007764][T30274] __sys_sendto+0x408/0x5a0 [ 832.007805][T30274] ? ksys_write+0x1e6/0x270 [ 832.007833][T30274] ? __pfx___sys_sendto+0x10/0x10 [ 832.007865][T30274] ? __mutex_unlock_slowpath+0x731/0x900 [ 832.007930][T30274] ? __pfx_ksys_write+0x10/0x10 [ 832.007960][T30274] __x64_sys_sendto+0xde/0x100 [ 832.007998][T30274] do_syscall_64+0x166/0x520 [ 832.008027][T30274] ? trace_irq_disable+0x3b/0x140 [ 832.008050][T30274] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 832.008074][T30274] ? clear_bhb_loop+0x70/0xc0 [ 832.008102][T30274] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 832.008125][T30274] RIP: 0033:0x7fd09619e2d9 [ 832.008146][T30274] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 832.008167][T30274] RSP: 002b:00007fd0970fa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 832.008192][T30274] RAX: ffffffffffffffda RBX: 00007fd096425fa0 RCX: 00007fd09619e2d9 [ 832.008210][T30274] RDX: 0000000000000001 RSI: 0000200000000180 RDI: 0000000000000004 [ 832.008225][T30274] RBP: 00007fd0970fa090 R08: 00002000000001c0 R09: 000000000000001c [ 832.008242][T30274] R10: 0000000004048000 R11: 0000000000000246 R12: 0000000000000002 [ 832.008257][T30274] R13: 00007fd096426038 R14: 00007fd096425fa0 R15: 00007ffca2519038 [ 832.008295][T30274] [ 832.064706][T30272] vlan0: entered promiscuous mode [ 832.372181][T30272] team0: Port device vlan0 added [ 832.431941][T30280] netlink: 'syz.2.7350': attribute type 5 has an invalid length. [ 832.521340][T30282] tipc: Enabled bearer , priority 0 [ 832.522253][T30282] +: renamed from syzkaller0 [ 832.524687][T30282] FAULT_INJECTION: forcing a failure. [ 832.524687][T30282] name failslab, interval 1, probability 0, space 0, times 0 [ 832.524720][T30282] CPU: 1 UID: 0 PID: 30282 Comm: syz.3.7351 Not tainted syzkaller #0 PREEMPT(full) [ 832.524753][T30282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 832.524767][T30282] Call Trace: [ 832.524777][T30282] [ 832.524787][T30282] dump_stack_lvl+0xe8/0x150 [ 832.524825][T30282] should_fail_ex+0x410/0x560 [ 832.524861][T30282] should_failslab+0xa8/0x100 [ 832.524894][T30282] __kmalloc_node_track_caller_noprof+0xfb/0x720 [ 832.524922][T30282] ? neigh_sysctl_register+0xae/0xa90 [ 832.524944][T30282] ? neigh_sysctl_register+0xae/0xa90 [ 832.524975][T30282] kmemdup_noprof+0x2b/0x70 [ 832.525004][T30282] neigh_sysctl_register+0xae/0xa90 [ 832.525030][T30282] ? __pfx_neigh_sysctl_register+0x10/0x10 [ 832.525059][T30282] ? kasan_quarantine_put+0xbb/0x1f0 [ 832.525083][T30282] ? lockdep_hardirqs_on+0x7b/0x110 [ 832.525121][T30282] devinet_sysctl_register+0xad/0x200 [ 832.525157][T30282] inetdev_event+0xdc4/0x1610 [ 832.525187][T30282] ? __pfx_ib_device_get_by_netdev+0x10/0x10 [ 832.525221][T30282] ? __pfx_inetdev_event+0x10/0x10 [ 832.525263][T30282] notifier_call_chain+0x1a5/0x3d0 [ 832.525306][T30282] netif_change_name+0x5f3/0x970 [ 832.525341][T30282] ? dev_change_name+0x101/0x220 [ 832.525379][T30282] ? __pfx_netif_change_name+0x10/0x10 [ 832.525407][T30282] ? full_name_hash+0x92/0xe0 [ 832.525443][T30282] ? __dev_get_by_name+0xe5/0x130 [ 832.525476][T30282] dev_change_name+0x101/0x220 [ 832.525513][T30282] dev_ioctl+0x5ec/0x1150 [ 832.525553][T30282] sock_do_ioctl+0x23e/0x320 [ 832.525586][T30282] ? __pfx_sock_do_ioctl+0x10/0x10 [ 832.525631][T30282] ? hook_file_ioctl+0x1f2/0x600 [ 832.525680][T30282] sock_ioctl+0x57a/0x7e0 [ 832.525711][T30282] ? __pfx_sock_ioctl+0x10/0x10 [ 832.525748][T30282] ? __fget_files+0x2a/0x420 [ 832.525782][T30282] ? __fget_files+0x3a2/0x420 [ 832.525815][T30282] ? __fget_files+0x2a/0x420 [ 832.525853][T30282] ? bpf_lsm_file_ioctl+0x9/0x20 [ 832.525887][T30282] ? __pfx_sock_ioctl+0x10/0x10 [ 832.525915][T30282] __se_sys_ioctl+0xfc/0x170 [ 832.525948][T30282] do_syscall_64+0x166/0x520 [ 832.525979][T30282] ? trace_irq_disable+0x3b/0x140 [ 832.526002][T30282] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 832.526026][T30282] ? clear_bhb_loop+0x70/0xc0 [ 832.526056][T30282] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 832.526079][T30282] RIP: 0033:0x7fd09619e2d9 [ 832.526101][T30282] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 832.526121][T30282] RSP: 002b:00007fd0970fa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 832.526146][T30282] RAX: ffffffffffffffda RBX: 00007fd096425fa0 RCX: 00007fd09619e2d9 [ 832.526163][T30282] RDX: 0000200000002280 RSI: 0000000000008923 RDI: 0000000000000004 [ 832.526178][T30282] RBP: 00007fd0970fa090 R08: 0000000000000000 R09: 0000000000000000 [ 832.526193][T30282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 832.526207][T30282] R13: 00007fd096426038 R14: 00007fd096425fa0 R15: 00007ffca2519038 [ 832.526245][T30282] [ 832.542488][T30282] tipc: Disabling bearer [ 832.884925][T30288] __nla_validate_parse: 7 callbacks suppressed [ 832.884947][T30288] netlink: 260 bytes leftover after parsing attributes in process `syz.4.7354'. [ 832.932781][T30284] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7353'. [ 832.932825][T30284] netlink: 'syz.0.7353': attribute type 7 has an invalid length. [ 832.932841][T30284] netlink: 'syz.0.7353': attribute type 8 has an invalid length. [ 832.932856][T30284] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7353'. [ 832.994663][T30284] netdevsim netdevsim0 netdevsim3: entered promiscuous mode [ 832.996780][T30284] netdevsim netdevsim0 netdevsim2: entered promiscuous mode [ 832.998901][T30284] erspan0: entered promiscuous mode [ 833.026522][T30284] debugfs: 'hsr1' already exists in 'hsr' [ 833.026556][T30284] Cannot create hsr debugfs directory [ 833.027272][T30284] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 833.048543][T30293] netlink: 260 bytes leftover after parsing attributes in process `syz.4.7356'. [ 833.138068][T30300] netlink: 'syz.3.7358': attribute type 1 has an invalid length. [ 833.175899][T30299] netlink: 156 bytes leftover after parsing attributes in process `syz.1.7355'. [ 833.203807][T30300] 8021q: adding VLAN 0 to HW filter on device bond4 [ 833.212582][T30300] tipc: Enabling of bearer rejected, failed to enable media [ 833.326618][T30305] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7361'. [ 833.432267][T30312] netlink: 'syz.0.7360': attribute type 11 has an invalid length. [ 833.518168][T30316] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 833.865876][T30333] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7369'. [ 834.150152][T30340] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 834.155639][T30340] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 834.186507][T30340] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 834.188364][T30340] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 834.214288][T30340] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 834.216885][T30340] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 834.240929][T30340] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 834.242655][T30340] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 834.244434][T30340] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 834.246007][T30340] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 834.247784][T30340] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 834.305309][T30340] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 834.306872][T30340] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 834.308461][T30340] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 834.341024][T30340] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 834.342714][T30340] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 834.344420][T30340] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 834.345993][T30340] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 834.347837][T30340] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 834.391473][T30340] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 834.415757][T30340] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 834.425852][T30340] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 834.437657][T30340] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 834.460969][T30340] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 834.462752][T30340] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 834.464717][T30340] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 834.466616][T30340] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 834.468213][T30340] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 834.522036][T30340] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 834.523603][T30340] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 834.525030][T30340] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 834.526422][T30340] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 834.527846][T30340] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 834.578174][T30340] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 834.607475][T30340] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 834.638717][T30340] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 834.648699][T30340] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 834.662355][T30340] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 834.700303][T30340] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 834.725856][T30340] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 834.726863][T30340] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 834.755351][T30340] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 834.766100][T30340] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 834.783359][T30340] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 834.792923][T30340] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 834.822691][T30340] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 834.831223][T30340] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 834.856878][T30340] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 834.873585][T30340] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 834.904237][T30340] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 834.905230][T30340] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 834.906089][T30340] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 834.944134][T30340] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 834.945459][T30340] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 834.946921][T30340] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 834.948333][T30340] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 834.992592][T30340] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 834.993967][T30340] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 834.995290][T30340] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 834.996580][T30340] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 835.042352][T30340] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 835.043854][T30340] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 835.045270][T30340] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 835.047543][T30340] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 835.048943][T30340] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 835.523786][T30361] block nbd2: server does not support multiple connections per device. [ 835.524118][T30361] block nbd2: shutting down sockets [ 836.325074][T30382] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7382'. [ 836.726362][T30366] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 836.726385][T30366] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 836.807531][T30366] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 836.807555][T30366] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 836.990312][T30366] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 836.990337][T30366] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 837.072340][T30366] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 837.072376][T30366] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 837.313535][T30424] netlink: 'syz.3.7390': attribute type 8 has an invalid length. [ 837.482416][T30433] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7393'. [ 837.631817][T30444] FAULT_INJECTION: forcing a failure. [ 837.631817][T30444] name failslab, interval 1, probability 0, space 0, times 0 [ 837.631854][T30444] CPU: 0 UID: 0 PID: 30444 Comm: syz.4.7395 Not tainted syzkaller #0 PREEMPT(full) [ 837.631879][T30444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 837.631897][T30444] Call Trace: [ 837.631907][T30444] [ 837.631917][T30444] dump_stack_lvl+0xe8/0x150 [ 837.631955][T30444] should_fail_ex+0x410/0x560 [ 837.631992][T30444] should_failslab+0xa8/0x100 [ 837.632039][T30444] __kmalloc_cache_noprof+0xa3/0x600 [ 837.632064][T30444] ? bpf_prog_alloc_no_stats+0xd8/0x560 [ 837.632090][T30444] ? bpf_prog_alloc_no_stats+0xd8/0x560 [ 837.632124][T30444] bpf_prog_alloc_no_stats+0xd8/0x560 [ 837.632150][T30444] ? bpf_prog_alloc+0x2a/0x1a0 [ 837.632180][T30444] bpf_prog_alloc+0x3c/0x1a0 [ 837.632210][T30444] bpf_prog_load+0x7f8/0x1c20 [ 837.632251][T30444] ? __pfx_bpf_prog_load+0x10/0x10 [ 837.632307][T30444] __sys_bpf+0xd0d/0xd90 [ 837.632351][T30444] ? __pfx___sys_bpf+0x10/0x10 [ 837.632390][T30444] ? __fget_files+0x2a/0x420 [ 837.632442][T30444] ? ksys_write+0x242/0x270 [ 837.632467][T30444] ? __pfx_ksys_write+0x10/0x10 [ 837.632495][T30444] __x64_sys_bpf+0xba/0xd0 [ 837.632522][T30444] do_syscall_64+0x166/0x520 [ 837.632553][T30444] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 837.632576][T30444] ? clear_bhb_loop+0x70/0xc0 [ 837.632604][T30444] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 837.632626][T30444] RIP: 0033:0x7f027579e2d9 [ 837.632646][T30444] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 837.632667][T30444] RSP: 002b:00007f0276698028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 837.632692][T30444] RAX: ffffffffffffffda RBX: 00007f0275a25fa0 RCX: 00007f027579e2d9 [ 837.632709][T30444] RDX: 0000000000000094 RSI: 0000200000000840 RDI: 0000000000000005 [ 837.632724][T30444] RBP: 00007f0276698090 R08: 0000000000000000 R09: 0000000000000000 [ 837.632739][T30444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 837.632752][T30444] R13: 00007f0275a26038 R14: 00007f0275a25fa0 R15: 00007fff5e23a968 [ 837.632787][T30444] [ 838.090787][T30456] netlink: 176 bytes leftover after parsing attributes in process `syz.4.7397'. [ 838.130046][T30458] smc: net device vlan1 applied user defined pnetid SYZ1 [ 838.206978][T30456] x_tables: ip6_tables: recent.0 match: invalid size 216 (kernel) != (user) 232 [ 838.260930][T30456] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7397'. [ 838.294617][T30456] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 838.423473][T30469] netlink: 'syz.1.7400': attribute type 3 has an invalid length. [ 838.423495][T30469] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7400'. [ 838.984840][T30492] Dead loop on virtual device lo (net 1235), fix it urgently! [ 838.985000][T30492] Dead loop on virtual device lo (net 1235), fix it urgently! [ 838.985140][T30492] Dead loop on virtual device lo (net 1235), fix it urgently! [ 839.335337][T30511] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 839.702110][T30526] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 839.937741][T30514] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7413'. [ 839.937768][T30514] openvswitch: netlink: Flow actions attr not present in new flow. [ 840.031414][T30540] block nbd0: reconnected socket [ 840.031436][T30540] nbd: socks must be embedded in a SOCK_ITEM attr [ 840.118735][T30540] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7421'. [ 840.217734][ T61] bridge_slave_1: left promiscuous mode [ 840.217975][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 840.252817][ T61] bridge_slave_0: left allmulticast mode [ 840.252843][ T61] bridge_slave_0: left promiscuous mode [ 840.253059][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 840.728495][ T5623] block nbd0: Receive control failed (result -32) [ 840.840744][ T61] erspan0 (unregistering): left promiscuous mode [ 840.855082][T30578] ip_tables: iptables: counters copy to user failed while replacing table [ 840.876797][ T61] bond14 (unregistering): (slave gretap3): Releasing active interface [ 841.003671][ T61] geneve1 (unregistering): left promiscuous mode [ 841.088881][ T61] bond16 (unregistering): (slave bridge4): Releasing backup interface [ 841.088909][ T61] bridge4 (unregistering): left promiscuous mode [ 841.112067][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 841.114374][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 841.116317][ T61] bond0 (unregistering): Released all slaves [ 841.147948][ T61] bond1 (unregistering): Released all slaves [ 841.166710][ T61] bond2 (unregistering): Released all slaves [ 841.183173][ T61] bond3 (unregistering): Released all slaves [ 841.197255][ T61] bond4 (unregistering): Released all slaves [ 841.215106][ T61] bond5 (unregistering): Released all slaves [ 841.242093][ T61] bond6 (unregistering): Released all slaves [ 841.256106][ T61] bond7 (unregistering): Released all slaves [ 841.270549][ T61] bond8 (unregistering): Released all slaves [ 841.291122][ T61] bond9 (unregistering): Released all slaves [ 841.307214][ T61] bond10 (unregistering): Released all slaves [ 841.327072][ T61] bond11 (unregistering): Released all slaves [ 841.348981][ T61] bond12 (unregistering): Released all slaves [ 841.364993][ T61] bond13 (unregistering): Released all slaves [ 841.378954][ T61] bond14 (unregistering): Released all slaves [ 841.399957][ T61] bond15 (unregistering): (slave veth3): Releasing backup interface [ 841.401319][ T61] bond15 (unregistering): Released all slaves [ 841.422914][ T61] bond16 (unregistering): Released all slaves [ 841.444146][ T61] bond17 (unregistering): Released all slaves [ 841.491266][T30562] bridge: RTM_NEWNEIGH with invalid state 0x20 [ 841.602200][T30563] syzkaller0: entered promiscuous mode [ 841.602227][T30563] syzkaller0: entered allmulticast mode [ 841.789035][T30588] xt_TPROXY: Can be used only with -p tcp or -p udp [ 841.818915][ T61] tipc: Disabling bearer [ 841.819054][ T61] tipc: Left network mode [ 841.835401][T30586] team_slave_1: entered allmulticast mode [ 841.860133][T30586] A link change request failed with some changes committed already. Interface team_slave_1 may have been left with an inconsistent configuration, please check. [ 841.933759][T30592] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7431'. [ 841.936134][T30592] netlink: 92 bytes leftover after parsing attributes in process `syz.4.7431'. [ 841.936185][T30592] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7431'. [ 842.190920][T30599] FAULT_INJECTION: forcing a failure. [ 842.190920][T30599] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 842.190953][T30599] CPU: 0 UID: 0 PID: 30599 Comm: syz.2.7433 Not tainted syzkaller #0 PREEMPT(full) [ 842.190976][T30599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 842.190989][T30599] Call Trace: [ 842.190998][T30599] [ 842.191007][T30599] dump_stack_lvl+0xe8/0x150 [ 842.191041][T30599] should_fail_ex+0x410/0x560 [ 842.191075][T30599] _copy_from_user+0x2d/0xb0 [ 842.191107][T30599] do_tcp_setsockopt+0x504/0x1f80 [ 842.191222][T30599] ? __pfx_do_tcp_setsockopt+0x10/0x10 [ 842.191255][T30599] ? __pfx___mutex_lock+0x10/0x10 [ 842.191313][T30599] ? aa_sk_perm+0x713/0x900 [ 842.191342][T30599] ? sock_common_setsockopt+0x36/0xc0 [ 842.191370][T30599] ? tcp_setsockopt+0x3d/0xe0 [ 842.191397][T30599] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 842.191436][T30599] smc_setsockopt+0x232/0xb40 [ 842.191470][T30599] ? __pfx_smc_setsockopt+0x10/0x10 [ 842.191500][T30599] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 842.191530][T30599] ? __pfx_smc_setsockopt+0x10/0x10 [ 842.191557][T30599] do_sock_setsockopt+0x17c/0x1b0 [ 842.191585][T30599] __x64_sys_setsockopt+0x13d/0x1b0 [ 842.191613][T30599] do_syscall_64+0x166/0x520 [ 842.191642][T30599] ? trace_irq_disable+0x3b/0x140 [ 842.191665][T30599] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 842.191688][T30599] ? clear_bhb_loop+0x70/0xc0 [ 842.191715][T30599] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 842.191737][T30599] RIP: 0033:0x7ff9cdb9e2d9 [ 842.191758][T30599] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 842.191777][T30599] RSP: 002b:00007ff9ceaf5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 842.191801][T30599] RAX: ffffffffffffffda RBX: 00007ff9cde25fa0 RCX: 00007ff9cdb9e2d9 [ 842.191817][T30599] RDX: 0000000000000012 RSI: 0000000000000006 RDI: 0000000000000003 [ 842.191831][T30599] RBP: 00007ff9ceaf5090 R08: 0000000000000004 R09: 0000000000000000 [ 842.191845][T30599] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001 [ 842.191859][T30599] R13: 00007ff9cde26038 R14: 00007ff9cde25fa0 R15: 00007ffd0bde73d8 [ 842.191899][T30599] [ 842.294296][T30605] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7435'. [ 842.505499][T30605] bridge0: port 3(veth0) entered blocking state [ 842.505616][T30605] bridge0: port 3(veth0) entered disabled state [ 842.505762][T30605] veth0: entered allmulticast mode [ 842.516574][T30605] bridge0: port 3(veth0) entered blocking state [ 842.516688][T30605] bridge0: port 3(veth0) entered forwarding state [ 842.707953][ T31] audit: type=1804 audit(1791909540.209:12): pid=30611 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.7437" name="/newroot/276/cgroup.controllers" dev="tmpfs" ino=1413 res=1 errno=0 [ 842.708003][ T31] audit: type=1800 audit(1791909540.209:13): pid=30611 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.7437" name="cgroup.controllers" dev="tmpfs" ino=1413 res=0 errno=0 [ 843.225046][T30619] syzkaller0: left promiscuous mode [ 843.225069][T30619] syzkaller0: left allmulticast mode [ 843.274296][T30621] IPv6: NLM_F_CREATE should be specified when creating new route [ 843.380269][T30626] FAULT_INJECTION: forcing a failure. [ 843.380269][T30626] name failslab, interval 1, probability 0, space 0, times 0 [ 843.380315][T30626] CPU: 1 UID: 0 PID: 30626 Comm: syz.0.7444 Not tainted syzkaller #0 PREEMPT(full) [ 843.380339][T30626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 843.380354][T30626] Call Trace: [ 843.380364][T30626] [ 843.380375][T30626] dump_stack_lvl+0xe8/0x150 [ 843.380414][T30626] should_fail_ex+0x410/0x560 [ 843.380450][T30626] should_failslab+0xa8/0x100 [ 843.380484][T30626] __kmalloc_cache_noprof+0xa3/0x600 [ 843.380510][T30626] ? __kmalloc_cache_noprof+0x14d/0x600 [ 843.380534][T30626] ? sctp_add_bind_addr+0x8c/0x370 [ 843.380567][T30626] ? sctp_add_bind_addr+0x8c/0x370 [ 843.380606][T30626] sctp_add_bind_addr+0x8c/0x370 [ 843.380647][T30626] sctp_copy_local_addr_list+0x31a/0x4e0 [ 843.380684][T30626] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 843.380719][T30626] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 843.380766][T30626] ? sctp_v6_is_any+0x64/0x80 [ 843.380789][T30626] ? sctp_copy_one_addr+0x93/0x360 [ 843.380826][T30626] sctp_bind_addr_copy+0xb3/0x3c0 [ 843.380862][T30626] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 843.380898][T30626] sctp_connect_new_asoc+0x2ff/0x6b0 [ 843.380929][T30626] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 843.380965][T30626] ? __local_bh_enable_ip+0xd6/0x140 [ 843.380999][T30626] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 843.381033][T30626] ? security_sctp_bind_connect+0x7e/0x2c0 [ 843.381064][T30626] sctp_sendmsg+0x159b/0x2d00 [ 843.381101][T30626] ? kstrtouint+0x6e/0xe0 [ 843.381129][T30626] ? __pfx_sctp_sendmsg+0x10/0x10 [ 843.381154][T30626] ? lock_acquire+0x115/0x350 [ 843.381179][T30626] ? get_pid_task+0x20/0x1f0 [ 843.381221][T30626] ? aa_sock_msg_perm+0xf5/0x210 [ 843.381253][T30626] ? sock_rps_record_flow+0x19/0x350 [ 843.381299][T30626] ? inet_sendmsg+0x298/0x320 [ 843.381337][T30626] ? __pfx_inet_sendmsg+0x10/0x10 [ 843.381369][T30626] sock_sendmsg_nosec+0x10f/0x190 [ 843.381403][T30626] __sys_sendto+0x408/0x5a0 [ 843.381436][T30626] ? ksys_write+0x1e6/0x270 [ 843.381463][T30626] ? __pfx___sys_sendto+0x10/0x10 [ 843.381494][T30626] ? __mutex_unlock_slowpath+0x731/0x900 [ 843.381559][T30626] ? __pfx_ksys_write+0x10/0x10 [ 843.381588][T30626] __x64_sys_sendto+0xde/0x100 [ 843.381626][T30626] do_syscall_64+0x166/0x520 [ 843.381655][T30626] ? trace_irq_disable+0x3b/0x140 [ 843.381679][T30626] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 843.381702][T30626] ? clear_bhb_loop+0x70/0xc0 [ 843.381730][T30626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 843.381752][T30626] RIP: 0033:0x7f77be99e2d9 [ 843.381773][T30626] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 843.381792][T30626] RSP: 002b:00007f77bf79b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 843.381816][T30626] RAX: ffffffffffffffda RBX: 00007f77bec25fa0 RCX: 00007f77be99e2d9 [ 843.381833][T30626] RDX: 0000000000034000 RSI: 0000200000000640 RDI: 0000000000000003 [ 843.381849][T30626] RBP: 00007f77bf79b090 R08: 0000200000000680 R09: 000000000000001c [ 843.381865][T30626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 843.381880][T30626] R13: 00007f77bec26038 R14: 00007f77bec25fa0 R15: 00007fff6d6119c8 [ 843.381918][T30626] [ 843.643111][T30624] FAULT_INJECTION: forcing a failure. [ 843.643111][T30624] name failslab, interval 1, probability 0, space 0, times 0 [ 843.643144][T30624] CPU: 0 UID: 0 PID: 30624 Comm: syz.2.7442 Not tainted syzkaller #0 PREEMPT(full) [ 843.643168][T30624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 843.643182][T30624] Call Trace: [ 843.643191][T30624] [ 843.643200][T30624] dump_stack_lvl+0xe8/0x150 [ 843.643237][T30624] should_fail_ex+0x410/0x560 [ 843.643282][T30624] should_failslab+0xa8/0x100 [ 843.643312][T30624] __kmalloc_cache_noprof+0xa3/0x600 [ 843.643333][T30624] ? vlan_vid_add+0x303/0x750 [ 843.643348][T30624] ? vlan_vid_add+0x303/0x750 [ 843.643388][T30624] vlan_vid_add+0x303/0x750 [ 843.643414][T30624] register_vlan_dev+0x9c/0x830 [ 843.643435][T30624] ? vlan_changelink+0x4ac/0x560 [ 843.643464][T30624] vlan_newlink+0x4b2/0x610 [ 843.643490][T30624] ? __pfx_vlan_newlink+0x10/0x10 [ 843.643516][T30624] rtnl_newlink_create+0x305/0x7b0 [ 843.643543][T30624] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 843.643567][T30624] ? __pfx___mutex_lock+0x10/0x10 [ 843.643602][T30624] ? ns_capable+0x89/0xe0 [ 843.643631][T30624] rtnl_newlink+0x167a/0x1c30 [ 843.643674][T30624] ? __pfx_rtnl_newlink+0x10/0x10 [ 843.643689][T30624] ? __netlink_deliver_tap+0x4f1/0x6e0 [ 843.643711][T30624] ? netlink_deliver_tap+0x19c/0x1b0 [ 843.643731][T30624] ? netlink_unicast+0x781/0x940 [ 843.643749][T30624] ? netlink_sendmsg+0x813/0xb40 [ 843.643783][T30624] ? sock_sendmsg_nosec+0x14e/0x190 [ 843.643804][T30624] ? ____sys_sendmsg+0x54e/0x850 [ 843.643820][T30624] ? ___sys_sendmsg+0x2a5/0x360 [ 843.643835][T30624] ? __x64_sys_sendmsg+0x1b1/0x290 [ 843.643851][T30624] ? do_syscall_64+0x166/0x520 [ 843.643873][T30624] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 843.643922][T30624] ? kasan_quarantine_put+0xbb/0x1f0 [ 843.643942][T30624] ? lockdep_hardirqs_on+0x7b/0x110 [ 843.643968][T30624] ? nlmon_xmit+0xb0/0x100 [ 843.643989][T30624] ? kmem_cache_free+0x182/0x650 [ 843.644016][T30624] ? __lock_acquire+0x747/0x2de0 [ 843.644041][T30624] ? __dev_queue_xmit+0x29b/0x3920 [ 843.644065][T30624] ? __local_bh_enable_ip+0xd6/0x140 [ 843.644088][T30624] ? lockdep_hardirqs_on+0x7b/0x110 [ 843.644133][T30624] ? __pfx_rtnl_newlink+0x10/0x10 [ 843.644150][T30624] rtnetlink_rcv_msg+0x802/0xc00 [ 843.644180][T30624] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 843.644206][T30624] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 843.644234][T30624] ? __copy_skb_header+0xa3/0x4a0 [ 843.644263][T30624] netlink_rcv_skb+0x226/0x4a0 [ 843.644289][T30624] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 843.644318][T30624] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 843.644351][T30624] ? netlink_deliver_tap+0x2e/0x1b0 [ 843.644374][T30624] ? netlink_deliver_tap+0x2e/0x1b0 [ 843.644401][T30624] netlink_unicast+0x7bd/0x940 [ 843.644431][T30624] netlink_sendmsg+0x813/0xb40 [ 843.644463][T30624] ? __pfx_netlink_sendmsg+0x10/0x10 [ 843.644496][T30624] ? apparmor_socket_sendmsg+0x98/0x360 [ 843.644521][T30624] ? __pfx_netlink_sendmsg+0x10/0x10 [ 843.644544][T30624] sock_sendmsg_nosec+0x14e/0x190 [ 843.644570][T30624] ____sys_sendmsg+0x54e/0x850 [ 843.644593][T30624] ? __pfx_____sys_sendmsg+0x10/0x10 [ 843.644620][T30624] ? import_iovec+0x73/0xa0 [ 843.644648][T30624] ___sys_sendmsg+0x2a5/0x360 [ 843.644665][T30624] ? __lock_acquire+0x747/0x2de0 [ 843.644688][T30624] ? __pfx____sys_sendmsg+0x10/0x10 [ 843.644738][T30624] ? __fget_files+0x2a/0x420 [ 843.644763][T30624] ? __fget_files+0x3a2/0x420 [ 843.644805][T30624] __x64_sys_sendmsg+0x1b1/0x290 [ 843.644826][T30624] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 843.644881][T30624] do_syscall_64+0x166/0x520 [ 843.644906][T30624] ? trace_irq_disable+0x3b/0x140 [ 843.644925][T30624] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 843.644945][T30624] ? clear_bhb_loop+0x70/0xc0 [ 843.644968][T30624] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 843.644986][T30624] RIP: 0033:0x7ff9cdb9e2d9 [ 843.645004][T30624] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 843.645021][T30624] RSP: 002b:00007ff9ceaf5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 843.645041][T30624] RAX: ffffffffffffffda RBX: 00007ff9cde25fa0 RCX: 00007ff9cdb9e2d9 [ 843.645055][T30624] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000010 [ 843.645067][T30624] RBP: 00007ff9ceaf5090 R08: 0000000000000000 R09: 0000000000000000 [ 843.645078][T30624] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 843.645089][T30624] R13: 00007ff9cde26038 R14: 00007ff9cde25fa0 R15: 00007ffd0bde73d8 [ 843.645120][T30624] [ 844.189056][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 844.189079][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 844.257593][ T61] veth0_macvtap: left promiscuous mode [ 844.257791][ T61] veth1_vlan: left promiscuous mode [ 844.257866][ T61] veth0_vlan: left promiscuous mode [ 844.514522][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 844.572925][T30652] x_tables: duplicate underflow at hook 1 [ 844.682309][ T61] smc: removing net device veth1_vlan with user defined pnetid SYZ1 [ 844.823156][ T61] team0 (unregistering): Port device team_slave_1 removed [ 844.844388][ T61] team0 (unregistering): Port device team_slave_0 removed [ 845.165389][T30663] netlink: 1 bytes leftover after parsing attributes in process `syz.2.7454'. [ 845.230649][T30672] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7457'. [ 845.237066][T30672] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7457'. [ 845.263076][T30668] syz_tun: entered allmulticast mode [ 845.328111][T30677] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7456'. [ 845.367007][T30667] netlink: 276 bytes leftover after parsing attributes in process `syz.4.7455'. [ 845.441653][T30666] syz_tun: left allmulticast mode [ 845.615177][T30685] netlink: 176 bytes leftover after parsing attributes in process `syz.3.7459'. [ 845.707037][T30685] x_tables: ip6_tables: recent.0 match: invalid size 216 (kernel) != (user) 232 [ 845.761075][T30685] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7459'. [ 845.761825][T30693] FAULT_INJECTION: forcing a failure. [ 845.761825][T30693] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 845.761858][T30693] CPU: 1 UID: 0 PID: 30693 Comm: syz.0.7462 Not tainted syzkaller #0 PREEMPT(full) [ 845.761884][T30693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 845.761898][T30693] Call Trace: [ 845.761909][T30693] [ 845.761919][T30693] dump_stack_lvl+0xe8/0x150 [ 845.761957][T30693] should_fail_ex+0x410/0x560 [ 845.761993][T30693] _copy_from_iter+0x1d3/0x1660 [ 845.762024][T30693] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 845.762059][T30693] ? __pfx_policy_nodemask+0x10/0x10 [ 845.762092][T30693] ? lock_acquire+0x115/0x350 [ 845.762116][T30693] ? __pfx__copy_from_iter+0x10/0x10 [ 845.762150][T30693] ? alloc_pages_mpol+0x256/0x390 [ 845.762192][T30693] copy_page_from_iter+0x219/0x2d0 [ 845.762228][T30693] tun_get_user+0x20b7/0x4450 [ 845.762272][T30693] ? tun_get_user+0x6de/0x4450 [ 845.762316][T30693] ? aa_file_perm+0x4ed/0x15f0 [ 845.762351][T30693] ? __pfx_tun_get_user+0x10/0x10 [ 845.762382][T30693] ? __lock_acquire+0x747/0x2de0 [ 845.762421][T30693] ? ref_tracker_alloc+0x172/0x530 [ 845.762451][T30693] ? lock_acquire+0x115/0x350 [ 845.762476][T30693] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 845.762522][T30693] ? lock_acquire+0x115/0x350 [ 845.762544][T30693] ? tun_get+0x1c/0x2f0 [ 845.762580][T30693] ? tun_get+0x1c/0x2f0 [ 845.762605][T30693] ? tun_get+0x1c/0x2f0 [ 845.762635][T30693] tun_chr_write_iter+0x113/0x200 [ 845.762664][T30693] vfs_write+0x612/0xba0 [ 845.762694][T30693] ? __pfx_vfs_write+0x10/0x10 [ 845.762725][T30693] ? __fget_files+0x2a/0x420 [ 845.762766][T30693] ksys_write+0x150/0x270 [ 845.762789][T30693] ? __pfx_ksys_write+0x10/0x10 [ 845.762822][T30693] do_syscall_64+0x166/0x520 [ 845.762859][T30693] ? trace_irq_disable+0x3b/0x140 [ 845.762880][T30693] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 845.762900][T30693] ? clear_bhb_loop+0x70/0xc0 [ 845.762924][T30693] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 845.762944][T30693] RIP: 0033:0x7f77be95eb0e [ 845.762962][T30693] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 845.762979][T30693] RSP: 002b:00007f77bf79afb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 845.763000][T30693] RAX: ffffffffffffffda RBX: 00007f77bf79b6c0 RCX: 00007f77be95eb0e [ 845.763015][T30693] RDX: 0000000000000011 RSI: 00002000000003c0 RDI: 00000000000000c8 [ 845.763029][T30693] RBP: 00007f77bf79b090 R08: 0000000000000000 R09: 0000000000000000 [ 845.763042][T30693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 845.763054][T30693] R13: 00007f77bec26038 R14: 00007f77bec25fa0 R15: 00007fff6d6119c8 [ 845.763084][T30693] [ 846.145634][T30685] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 846.184713][T30698] syzkaller0: entered promiscuous mode [ 846.184735][T30698] syzkaller0: entered allmulticast mode [ 846.211416][T30698] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7465'. [ 846.579169][T30721] netlink: 'syz.3.7473': attribute type 1 has an invalid length. [ 846.579193][T30721] netlink: 'syz.3.7473': attribute type 2 has an invalid length. [ 847.075226][T30744] netlink: 404 bytes leftover after parsing attributes in process `syz.0.7478'. [ 847.197402][T30744] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7478'. [ 847.399409][T30765] netlink: 'syz.0.7484': attribute type 61 has an invalid length. [ 847.868495][T30788] IPv6: Can't replace route, no match found [ 848.431129][T30813] syz_tun: entered allmulticast mode [ 848.450677][T30813] syz_tun: left allmulticast mode [ 848.738517][T30829] FAULT_INJECTION: forcing a failure. [ 848.738517][T30829] name failslab, interval 1, probability 0, space 0, times 0 [ 848.738554][T30829] CPU: 1 UID: 0 PID: 30829 Comm: syz.4.7505 Not tainted syzkaller #0 PREEMPT(full) [ 848.738579][T30829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 848.738593][T30829] Call Trace: [ 848.738602][T30829] [ 848.738612][T30829] dump_stack_lvl+0xe8/0x150 [ 848.738650][T30829] should_fail_ex+0x410/0x560 [ 848.738686][T30829] should_failslab+0xa8/0x100 [ 848.738720][T30829] __kmalloc_noprof+0xfe/0x720 [ 848.738746][T30829] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 848.738771][T30829] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 848.738804][T30829] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 848.738837][T30829] genl_family_rcv_msg_doit+0xda/0x340 [ 848.738873][T30829] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 848.738907][T30829] ? apparmor_capable+0x126/0x170 [ 848.738934][T30829] ? bpf_lsm_capable+0x9/0x20 [ 848.738957][T30829] ? security_capable+0x7e/0x2c0 [ 848.738994][T30829] genl_rcv_msg+0x614/0x7a0 [ 848.739025][T30829] ? __pfx_genl_rcv_msg+0x10/0x10 [ 848.739047][T30829] ? __pfx_ovs_packet_cmd_execute+0x10/0x10 [ 848.739171][T30829] netlink_rcv_skb+0x226/0x4a0 [ 848.739202][T30829] ? __pfx_genl_rcv_msg+0x10/0x10 [ 848.739227][T30829] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 848.739272][T30829] ? down_read+0x2be/0x330 [ 848.739310][T30829] genl_rcv+0x28/0x40 [ 848.739338][T30829] netlink_unicast+0x7bd/0x940 [ 848.739379][T30829] netlink_sendmsg+0x813/0xb40 [ 848.739420][T30829] ? __pfx_netlink_sendmsg+0x10/0x10 [ 848.739460][T30829] ? apparmor_socket_sendmsg+0x98/0x360 [ 848.739493][T30829] ? __pfx_netlink_sendmsg+0x10/0x10 [ 848.739522][T30829] sock_sendmsg_nosec+0x14e/0x190 [ 848.739555][T30829] ____sys_sendmsg+0x54e/0x850 [ 848.739586][T30829] ? __pfx_____sys_sendmsg+0x10/0x10 [ 848.739620][T30829] ? import_iovec+0x73/0xa0 [ 848.739668][T30829] ___sys_sendmsg+0x2a5/0x360 [ 848.739690][T30829] ? __lock_acquire+0x747/0x2de0 [ 848.739717][T30829] ? __pfx____sys_sendmsg+0x10/0x10 [ 848.739777][T30829] ? __fget_files+0x2a/0x420 [ 848.739808][T30829] ? __fget_files+0x3a2/0x420 [ 848.739850][T30829] __x64_sys_sendmsg+0x1b1/0x290 [ 848.739876][T30829] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 848.739922][T30829] do_syscall_64+0x166/0x520 [ 848.739950][T30829] ? trace_irq_disable+0x3b/0x140 [ 848.739971][T30829] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 848.739993][T30829] ? clear_bhb_loop+0x70/0xc0 [ 848.740020][T30829] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 848.740041][T30829] RIP: 0033:0x7f027579e2d9 [ 848.740061][T30829] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 848.740078][T30829] RSP: 002b:00007f0276698028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 848.740101][T30829] RAX: ffffffffffffffda RBX: 00007f0275a25fa0 RCX: 00007f027579e2d9 [ 848.740118][T30829] RDX: 0000000004000000 RSI: 0000200000000180 RDI: 0000000000000004 [ 848.740132][T30829] RBP: 00007f0276698090 R08: 0000000000000000 R09: 0000000000000000 [ 848.740145][T30829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 848.740158][T30829] R13: 00007f0275a26038 R14: 00007f0275a25fa0 R15: 00007fff5e23a968 [ 848.740193][T30829] [ 849.339245][T30842] netlink: 'syz.3.7509': attribute type 1 has an invalid length. [ 849.395496][T30842] 8021q: adding VLAN 0 to HW filter on device bond5 [ 849.423606][T30842] tipc: Enabling of bearer rejected, failed to enable media [ 849.503054][T30849] FAULT_INJECTION: forcing a failure. [ 849.503054][T30849] name failslab, interval 1, probability 0, space 0, times 0 [ 849.503086][T30849] CPU: 0 UID: 0 PID: 30849 Comm: syz.1.7510 Not tainted syzkaller #0 PREEMPT(full) [ 849.503108][T30849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 849.503120][T30849] Call Trace: [ 849.503128][T30849] [ 849.503137][T30849] dump_stack_lvl+0xe8/0x150 [ 849.503170][T30849] should_fail_ex+0x410/0x560 [ 849.503202][T30849] should_failslab+0xa8/0x100 [ 849.503235][T30849] __kmalloc_cache_noprof+0xa3/0x600 [ 849.503258][T30849] ? __kmalloc_cache_noprof+0x14d/0x600 [ 849.503285][T30849] ? sctp_add_bind_addr+0x8c/0x370 [ 849.503313][T30849] ? sctp_add_bind_addr+0x8c/0x370 [ 849.503348][T30849] sctp_add_bind_addr+0x8c/0x370 [ 849.503381][T30849] sctp_copy_local_addr_list+0x31a/0x4e0 [ 849.503413][T30849] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 849.503444][T30849] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 849.503475][T30849] ? sctp_v6_is_any+0x64/0x80 [ 849.503496][T30849] ? sctp_copy_one_addr+0x93/0x360 [ 849.503528][T30849] sctp_bind_addr_copy+0xb3/0x3c0 [ 849.503558][T30849] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 849.503587][T30849] sctp_connect_new_asoc+0x2ff/0x6b0 [ 849.503611][T30849] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 849.503639][T30849] ? __local_bh_enable_ip+0xd6/0x140 [ 849.503664][T30849] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 849.503693][T30849] ? security_sctp_bind_connect+0x7e/0x2c0 [ 849.503720][T30849] sctp_sendmsg+0x159b/0x2d00 [ 849.503756][T30849] ? __pfx_sctp_sendmsg+0x10/0x10 [ 849.503782][T30849] ? __lock_acquire+0x747/0x2de0 [ 849.503816][T30849] ? aa_sock_msg_perm+0xf5/0x210 [ 849.503843][T30849] ? sock_rps_record_flow+0x19/0x350 [ 849.503895][T30849] ? inet_sendmsg+0x298/0x320 [ 849.503928][T30849] ? __pfx_inet_sendmsg+0x10/0x10 [ 849.503959][T30849] sock_sendmsg_nosec+0x10f/0x190 [ 849.503989][T30849] ____sys_sendmsg+0x54e/0x850 [ 849.504017][T30849] ? __pfx_____sys_sendmsg+0x10/0x10 [ 849.504049][T30849] ? import_iovec+0x73/0xa0 [ 849.504083][T30849] ___sys_sendmsg+0x2a5/0x360 [ 849.504103][T30849] ? __lock_acquire+0x747/0x2de0 [ 849.504130][T30849] ? __pfx____sys_sendmsg+0x10/0x10 [ 849.504200][T30849] ? __fget_files+0x2a/0x420 [ 849.504226][T30849] ? __fget_files+0x3a2/0x420 [ 849.504265][T30849] __x64_sys_sendmsg+0x1b1/0x290 [ 849.504296][T30849] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 849.504339][T30849] do_syscall_64+0x166/0x520 [ 849.504364][T30849] ? trace_irq_disable+0x3b/0x140 [ 849.504385][T30849] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 849.504406][T30849] ? clear_bhb_loop+0x70/0xc0 [ 849.504430][T30849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 849.504450][T30849] RIP: 0033:0x7f4aab19e2d9 [ 849.504468][T30849] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 849.504485][T30849] RSP: 002b:00007f4aac102028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 849.504506][T30849] RAX: ffffffffffffffda RBX: 00007f4aab425fa0 RCX: 00007f4aab19e2d9 [ 849.504521][T30849] RDX: 0000000024000052 RSI: 0000200000000000 RDI: 0000000000000003 [ 849.504534][T30849] RBP: 00007f4aac102090 R08: 0000000000000000 R09: 0000000000000000 [ 849.504546][T30849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 849.504558][T30849] R13: 00007f4aab426038 R14: 00007f4aab425fa0 R15: 00007fffd391eb38 [ 849.504589][T30849] [ 849.896304][T30856] syz_tun: entered allmulticast mode [ 849.896772][T30856] syz_tun: left allmulticast mode [ 850.034915][T30862] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 850.213774][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 850.270454][ T1705] block nbd0: Possible stuck request ffff8880343d7000: control (read@0,4096B). Runtime 270 seconds [ 850.275112][ T1705] block nbd0: Dead connection, failed to find a fallback [ 850.275137][ T1705] block nbd0: shutting down sockets [ 850.275152][ T1705] blk_print_req_error: 104 callbacks suppressed [ 850.275166][ T1705] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 850.275207][ T1705] buffer_io_error: 138 callbacks suppressed [ 850.275221][ T1705] Buffer I/O error on dev nbd0, logical block 0, async page read [ 850.275375][ T1705] Buffer I/O error on dev nbd0, logical block 1, async page read [ 850.275394][ T1705] Buffer I/O error on dev nbd0, logical block 2, async page read [ 850.275411][ T1705] Buffer I/O error on dev nbd0, logical block 3, async page read [ 850.293460][ T1705] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 850.293490][ T1705] Buffer I/O error on dev nbd0, logical block 0, async page read [ 850.293519][ T1705] Buffer I/O error on dev nbd0, logical block 1, async page read [ 850.293534][ T1705] Buffer I/O error on dev nbd0, logical block 2, async page read [ 850.293548][ T1705] Buffer I/O error on dev nbd0, logical block 3, async page read [ 850.293740][ T1705] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 850.293764][ T1705] Buffer I/O error on dev nbd0, logical block 0, async page read [ 850.293779][ T1705] Buffer I/O error on dev nbd0, logical block 1, async page read [ 850.293940][ T1705] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 850.294146][ T1705] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 850.326041][ T1705] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 850.339918][ T4948] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 850.340319][ T4948] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 850.340738][ T4948] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 850.341232][ T4948] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 850.346824][T21914] ldm_validate_partition_table(): Disk read failed. [ 850.383400][T21914] Dev nbd0: unable to read RDB block 0 [ 850.395888][T21914] nbd0: unable to read partition table [ 850.527714][ T4984] udevd[4984]: worker [21914] terminated by signal 9 (Killed) [ 850.527761][ T4984] udevd[4984]: worker [21914] failed while handling '/devices/virtual/block/nbd0' [ 850.684184][T30885] syz_tun: entered allmulticast mode [ 850.684472][T30885] syz_tun: left allmulticast mode [ 850.751684][T30887] __nla_validate_parse: 9 callbacks suppressed [ 850.751700][T30887] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7526'. [ 850.896040][T30892] netlink: 56 bytes leftover after parsing attributes in process `syz.0.7528'. [ 850.919621][T30892] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7528'. [ 851.173762][T30907] netlink: 'syz.3.7533': attribute type 1 has an invalid length. [ 851.211346][T30907] bond6: entered promiscuous mode [ 851.211880][T30907] 8021q: adding VLAN 0 to HW filter on device bond6 [ 851.260972][T30910] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7535'. [ 851.261216][T30912] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7534'. [ 851.269635][T30907] 8021q: adding VLAN 0 to HW filter on device bond6 [ 851.272377][T30913] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7534'. [ 851.288111][T30907] bond6: (slave xfrm1): The slave device specified does not support setting the MAC address [ 851.288143][T30907] bond6: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 851.328944][T30907] bond6: (slave xfrm1): making interface the new active one [ 851.328968][T30907] xfrm1: entered promiscuous mode [ 851.352543][T30907] xfrm1: left promiscuous mode [ 851.443880][T30918] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7537'. [ 851.679876][T30931] netlink: 64 bytes leftover after parsing attributes in process `syz.4.7543'. [ 851.723671][T30931] netlink: 964 bytes leftover after parsing attributes in process `syz.4.7543'. [ 851.868205][T30936] tc_dump_action: action bad kind [ 851.925941][T30938] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7546'. [ 852.075846][T30945] netlink: 'syz.3.7548': attribute type 61 has an invalid length. [ 852.075873][T30945] netlink: 'syz.3.7548': attribute type 62 has an invalid length. [ 852.104172][T30950] netlink: 'syz.2.7549': attribute type 21 has an invalid length. [ 852.594380][T30967] FAULT_INJECTION: forcing a failure. [ 852.594380][T30967] name failslab, interval 1, probability 0, space 0, times 0 [ 852.594414][T30967] CPU: 1 UID: 0 PID: 30967 Comm: syz.3.7556 Not tainted syzkaller #0 PREEMPT(full) [ 852.594438][T30967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 852.594451][T30967] Call Trace: [ 852.594460][T30967] [ 852.594469][T30967] dump_stack_lvl+0xe8/0x150 [ 852.594504][T30967] should_fail_ex+0x410/0x560 [ 852.594557][T30967] should_failslab+0xa8/0x100 [ 852.594587][T30967] ? __nf_conntrack_alloc+0x81/0x3e0 [ 852.594611][T30967] kmem_cache_alloc_noprof+0xa1/0x600 [ 852.594633][T30967] ? nf_ct_pernet+0x45/0x270 [ 852.594656][T30967] ? __nf_conntrack_alloc+0x81/0x3e0 [ 852.594685][T30967] __nf_conntrack_alloc+0x81/0x3e0 [ 852.594715][T30967] init_conntrack+0x170/0x1080 [ 852.594749][T30967] ? __pfx_init_conntrack+0x10/0x10 [ 852.594782][T30967] ? __pfx___nf_conntrack_find_get+0x10/0x10 [ 852.594805][T30967] ? do_xdp_generic+0x168/0x12f0 [ 852.594833][T30967] ? __siphash_unaligned+0x25c/0x3e0 [ 852.594871][T30967] nf_conntrack_in+0xc12/0x15f0 [ 852.594919][T30967] ? __pfx_nf_conntrack_in+0x10/0x10 [ 852.594953][T30967] ? ipt_do_table+0x2b9/0x15d0 [ 852.594990][T30967] ? ipv4_conntrack_defrag+0x2a0/0x5b0 [ 852.595021][T30967] ? ip_sabotage_in+0x57/0x270 [ 852.595051][T30967] ? __pfx_ipv4_conntrack_in+0x10/0x10 [ 852.595075][T30967] nf_hook_slow+0xc5/0x220 [ 852.595113][T30967] NF_HOOK+0x21f/0x3c0 [ 852.595143][T30967] ? __pfx_ip_rcv_finish+0x10/0x10 [ 852.595168][T30967] ? NF_HOOK+0x9e/0x3c0 [ 852.595193][T30967] ? __pfx_NF_HOOK+0x10/0x10 [ 852.595220][T30967] ? __pfx_ip_rcv_finish+0x10/0x10 [ 852.595253][T30967] ? netif_receive_skb+0x102/0xbf0 [ 852.595280][T30967] ? __pfx_ip_rcv+0x10/0x10 [ 852.595304][T30967] netif_receive_skb+0x45b/0xbf0 [ 852.595338][T30967] ? __pfx_netif_receive_skb+0x10/0x10 [ 852.595371][T30967] ? rcu_is_watching+0x16/0xb0 [ 852.595397][T30967] ? tun_rx_batched+0x185/0x790 [ 852.595426][T30967] tun_rx_batched+0x1de/0x790 [ 852.595459][T30967] ? __pfx_tun_rx_batched+0x10/0x10 [ 852.595487][T30967] ? lock_acquire+0x115/0x350 [ 852.595516][T30967] ? tun_get_user+0x1d3f/0x4450 [ 852.595549][T30967] ? __local_bh_enable_ip+0xd6/0x140 [ 852.595583][T30967] tun_get_user+0x2bb1/0x4450 [ 852.595616][T30967] ? tun_get_user+0x27a6/0x4450 [ 852.595656][T30967] ? aa_file_perm+0x4ed/0x15f0 [ 852.595688][T30967] ? __pfx_tun_get_user+0x10/0x10 [ 852.595717][T30967] ? __lock_acquire+0x747/0x2de0 [ 852.595755][T30967] ? ref_tracker_alloc+0x172/0x530 [ 852.595784][T30967] ? lock_acquire+0x115/0x350 [ 852.595807][T30967] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 852.595839][T30967] ? lock_acquire+0x115/0x350 [ 852.595860][T30967] ? tun_get+0x1c/0x2f0 [ 852.595891][T30967] ? tun_get+0x1c/0x2f0 [ 852.595916][T30967] ? tun_get+0x1c/0x2f0 [ 852.595946][T30967] tun_chr_write_iter+0x113/0x200 [ 852.595975][T30967] vfs_write+0x612/0xba0 [ 852.596005][T30967] ? __pfx_vfs_write+0x10/0x10 [ 852.596037][T30967] ? __fget_files+0x2a/0x420 [ 852.596095][T30967] ksys_write+0x150/0x270 [ 852.596121][T30967] ? __pfx_ksys_write+0x10/0x10 [ 852.596158][T30967] do_syscall_64+0x166/0x520 [ 852.596186][T30967] ? trace_irq_disable+0x3b/0x140 [ 852.596210][T30967] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 852.596234][T30967] ? clear_bhb_loop+0x70/0xc0 [ 852.596273][T30967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 852.596294][T30967] RIP: 0033:0x7fd09615eb0e [ 852.596314][T30967] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 852.596332][T30967] RSP: 002b:00007fd0970f9fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 852.596355][T30967] RAX: ffffffffffffffda RBX: 00007fd0970fa6c0 RCX: 00007fd09615eb0e [ 852.596370][T30967] RDX: 000000000000002a RSI: 0000200000000000 RDI: 00000000000000c8 [ 852.596384][T30967] RBP: 00007fd0970fa090 R08: 0000000000000000 R09: 0000000000000000 [ 852.596397][T30967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 852.596409][T30967] R13: 00007fd096426038 R14: 00007fd096425fa0 R15: 00007ffca2519038 [ 852.596442][T30967] [ 853.307589][T30969] batadv_slave_1: entered promiscuous mode [ 853.370878][T30985] IPVS: set_ctl: invalid protocol: 0 10.1.1.1:20004 [ 853.490637][T30968] batadv_slave_1: left promiscuous mode [ 854.306484][T31039] Bluetooth: MGMT ver 1.23 [ 854.749812][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 854.863690][T31074] IPv6: NLM_F_CREATE should be specified when creating new route [ 854.872325][T31072] tipc: Enabling of bearer rejected, already enabled [ 855.022769][T31079] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 855.138822][T31079] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 855.184077][T31086] ip_tables: iptables: counters copy to user failed while replacing table [ 855.417637][T31098] netlink: 'syz.3.7599': attribute type 4 has an invalid length. [ 855.445039][T31102] netlink: 'syz.3.7599': attribute type 4 has an invalid length. [ 855.587077][T31110] bond2: entered allmulticast mode [ 855.606890][T31107] [ 855.609251][T31107] ====================================================== [ 855.616278][T31107] WARNING: possible circular locking dependency detected [ 855.623317][T31107] syzkaller #0 Not tainted [ 855.627749][T31107] ------------------------------------------------------ [ 855.634790][T31107] syz.3.7602/31107 is trying to acquire lock: [ 855.640897][T31107] ffff88801d2f7a10 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_iop_permission+0x7f/0x430 [ 855.651444][T31107] [ 855.651444][T31107] but task is already holding lock: [ 855.658824][T31107] ffffffff8fbe9970 (cpu_hotplug_lock){++++}-{0:0}, at: cgroup_procs_write_start+0x539/0x900 [ 855.668935][T31107] [ 855.668935][T31107] which lock already depends on the new lock. [ 855.668935][T31107] [ 855.679355][T31107] [ 855.679355][T31107] the existing dependency chain (in reverse order) is: [ 855.688395][T31107] [ 855.688395][T31107] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 855.696139][T31107] cpus_read_lock+0x42/0x160 [ 855.701280][T31107] static_key_slow_inc+0x12/0x30 [ 855.706817][T31107] nbd_genl_reconnect_sock_cb+0x69a/0xbb0 [ 855.713181][T31107] nbd_genl_foreach_sock+0x265/0x450 [ 855.719025][T31107] nbd_genl_reconfigure+0xbbb/0x1040 [ 855.724870][T31107] genl_family_rcv_msg_doit+0x233/0x340 [ 855.730971][T31107] genl_rcv_msg+0x614/0x7a0 [ 855.736016][T31107] netlink_rcv_skb+0x226/0x4a0 [ 855.741414][T31107] genl_rcv+0x28/0x40 [ 855.745939][T31107] netlink_unicast+0x7bd/0x940 [ 855.751248][T31107] netlink_sendmsg+0x813/0xb40 [ 855.756580][T31107] sock_sendmsg_nosec+0x14e/0x190 [ 855.762172][T31107] ____sys_sendmsg+0x54e/0x850 [ 855.767500][T31107] ___sys_sendmsg+0x2a5/0x360 [ 855.772729][T31107] __x64_sys_sendmsg+0x1b1/0x290 [ 855.778200][T31107] do_syscall_64+0x166/0x520 [ 855.783333][T31107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 855.789785][T31107] [ 855.789785][T31107] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 855.797448][T31107] __mutex_lock+0x19d/0x1550 [ 855.802577][T31107] nbd_queue_rq+0x373/0xff0 [ 855.807619][T31107] blk_mq_dispatch_rq_list+0x499/0x1990 [ 855.813720][T31107] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 855.820666][T31107] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 855.827200][T31107] blk_mq_run_work_fn+0x16c/0x300 [ 855.832779][T31107] process_scheduled_works+0xc3d/0x1630 [ 855.838865][T31107] worker_thread+0xa47/0xfb0 [ 855.843997][T31107] kthread+0x38b/0x480 [ 855.848627][T31107] ret_from_fork+0x514/0xb70 [ 855.853774][T31107] ret_from_fork_asm+0x1a/0x30 [ 855.859092][T31107] [ 855.859092][T31107] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 855.866328][T31107] __mutex_lock+0x19d/0x1550 [ 855.871479][T31107] nbd_queue_rq+0xc1/0xff0 [ 855.876440][T31107] blk_mq_dispatch_rq_list+0x499/0x1990 [ 855.882555][T31107] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 855.889431][T31107] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 855.895959][T31107] blk_mq_run_work_fn+0x16c/0x300 [ 855.901548][T31107] process_scheduled_works+0xc3d/0x1630 [ 855.907649][T31107] worker_thread+0xa47/0xfb0 [ 855.912789][T31107] kthread+0x38b/0x480 [ 855.917398][T31107] ret_from_fork+0x514/0xb70 [ 855.922546][T31107] ret_from_fork_asm+0x1a/0x30 [ 855.927868][T31107] [ 855.927868][T31107] -> #4 (set->srcu){.+.+}-{0:0}: [ 855.935026][T31107] __synchronize_srcu+0xc9/0x2f0 [ 855.940504][T31107] elevator_switch+0x1e8/0x7b0 [ 855.945884][T31107] elevator_change+0x2fa/0x480 [ 855.951213][T31107] elevator_set_default+0x375/0x440 [ 855.956956][T31107] blk_register_queue+0x3f3/0x4e0 [ 855.962564][T31107] __add_disk+0x6b8/0xdb0 [ 855.967445][T31107] add_disk_fwnode+0x100/0x3a0 [ 855.972756][T31107] nbd_dev_add+0x733/0xb60 [ 855.977724][T31107] nbd_init+0x168/0x1f0 [ 855.982480][T31107] do_one_initcall+0x250/0x870 [ 855.987802][T31107] do_initcall_level+0x10a/0x1a0 [ 855.993340][T31107] do_initcalls+0x59/0xa0 [ 855.998218][T31107] kernel_init_freeable+0x29d/0x3e0 [ 856.003989][T31107] kernel_init+0x22/0x1d0 [ 856.008874][T31107] ret_from_fork+0x514/0xb70 [ 856.014029][T31107] ret_from_fork_asm+0x1a/0x30 [ 856.019351][T31107] [ 856.019351][T31107] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 856.027210][T31107] __mutex_lock+0x19d/0x1550 [ 856.032349][T31107] elevator_change+0x1af/0x480 [ 856.037685][T31107] elevator_set_none+0xb5/0x140 [ 856.043110][T31107] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 856.049479][T31107] nbd_start_device+0x189/0xb30 [ 856.054888][T31107] nbd_genl_connect+0x167d/0x1cd0 [ 856.060473][T31107] genl_family_rcv_msg_doit+0x233/0x340 [ 856.066564][T31107] genl_rcv_msg+0x614/0x7a0 [ 856.071635][T31107] netlink_rcv_skb+0x226/0x4a0 [ 856.076945][T31107] genl_rcv+0x28/0x40 [ 856.081485][T31107] netlink_unicast+0x7bd/0x940 [ 856.086802][T31107] netlink_sendmsg+0x813/0xb40 [ 856.092115][T31107] sock_sendmsg_nosec+0x14e/0x190 [ 856.097713][T31107] ____sys_sendmsg+0x54e/0x850 [ 856.103055][T31107] ___sys_sendmsg+0x2a5/0x360 [ 856.108282][T31107] __x64_sys_sendmsg+0x1b1/0x290 [ 856.113762][T31107] do_syscall_64+0x166/0x520 [ 856.118923][T31107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 856.125375][T31107] [ 856.125375][T31107] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 856.134011][T31107] blk_alloc_queue+0x544/0x690 [ 856.139333][T31107] __blk_mq_alloc_disk+0x194/0x390 [ 856.145008][T31107] nbd_dev_add+0x494/0xb60 [ 856.149974][T31107] nbd_init+0x168/0x1f0 [ 856.154670][T31107] do_one_initcall+0x250/0x870 [ 856.160065][T31107] do_initcall_level+0x10a/0x1a0 [ 856.165550][T31107] do_initcalls+0x59/0xa0 [ 856.170452][T31107] kernel_init_freeable+0x29d/0x3e0 [ 856.176205][T31107] kernel_init+0x22/0x1d0 [ 856.181077][T31107] ret_from_fork+0x514/0xb70 [ 856.186223][T31107] ret_from_fork_asm+0x1a/0x30 [ 856.191546][T31107] [ 856.191546][T31107] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 856.198790][T31107] fs_reclaim_acquire+0x71/0x100 [ 856.204275][T31107] kmem_cache_alloc_noprof+0x5f/0x600 [ 856.210191][T31107] __kernfs_iattrs+0xdd/0x380 [ 856.215409][T31107] kernfs_iop_setattr+0xe6/0x3f0 [ 856.220886][T31107] notify_change+0xbba/0xea0 [ 856.226017][T31107] do_truncate+0x1c2/0x250 [ 856.230972][T31107] path_openat+0x15b5/0x1d60 [ 856.236100][T31107] do_file_open+0x23e/0x4a0 [ 856.241145][T31107] do_sys_openat2+0x115/0x200 [ 856.246364][T31107] __x64_sys_openat+0x138/0x170 [ 856.251776][T31107] do_syscall_64+0x166/0x520 [ 856.256910][T31107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 856.263343][T31107] [ 856.263343][T31107] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 856.271881][T31107] __lock_acquire+0x164c/0x2de0 [ 856.277275][T31107] lock_acquire+0x115/0x350 [ 856.282322][T31107] down_read+0x4a/0x330 [ 856.287024][T31107] kernfs_iop_permission+0x7f/0x430 [ 856.292754][T31107] inode_permission+0x3de/0x5f0 [ 856.298145][T31107] cgroup_attach_permissions+0x28e/0x9f0 [ 856.304340][T31107] __cgroup_procs_write+0x24b/0x320 [ 856.310077][T31107] cgroup_threads_write+0x24/0x50 [ 856.315634][T31107] cgroup_file_write+0x331/0x8f0 [ 856.321116][T31107] kernfs_fop_write_iter+0x3a4/0x540 [ 856.326952][T31107] vfs_write+0x612/0xba0 [ 856.331737][T31107] ksys_write+0x150/0x270 [ 856.336606][T31107] do_syscall_64+0x166/0x520 [ 856.341745][T31107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 856.348185][T31107] [ 856.348185][T31107] other info that might help us debug this: [ 856.348185][T31107] [ 856.358433][T31107] Chain exists of: [ 856.358433][T31107] &root->kernfs_iattr_rwsem --> &nsock->tx_lock --> cpu_hotplug_lock [ 856.358433][T31107] [ 856.372456][T31107] Possible unsafe locking scenario: [ 856.372456][T31107] [ 856.379944][T31107] CPU0 CPU1 [ 856.385316][T31107] ---- ---- [ 856.390683][T31107] rlock(cpu_hotplug_lock); [ 856.395286][T31107] lock(&nsock->tx_lock); [ 856.402235][T31107] lock(cpu_hotplug_lock); [ 856.409275][T31107] rlock(&root->kernfs_iattr_rwsem); [ 856.414668][T31107] [ 856.414668][T31107] *** DEADLOCK *** [ 856.414668][T31107] [ 856.422827][T31107] locks held by syz.3.7602/31107: 4, last CPU#0: [ 856.429164][T31107] #0: ffff88803459e460 (sb_writers#9){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 856.438086][T31107] #1: ffff888055651880 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d8/0x540 [ 856.447866][T31107] #2: ffffffff8fd9c7a0 (cgroup_mutex){+.+.}-{4:4}, at: cgroup_kn_lock_live+0x13c/0x230 [ 856.457668][T31107] #3: ffffffff8fbe9970 (cpu_hotplug_lock){++++}-{0:0}, at: cgroup_procs_write_start+0x539/0x900 [ 856.468223][T31107] [ 856.468223][T31107] stack backtrace: [ 856.474127][T31107] CPU: 0 UID: 0 PID: 31107 Comm: syz.3.7602 Not tainted syzkaller #0 PREEMPT(full) [ 856.483521][T31107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 856.493592][T31107] Call Trace: [ 856.496898][T31107] [ 856.499844][T31107] dump_stack_lvl+0xe8/0x150 [ 856.504461][T31107] print_circular_bug+0x2e2/0x300 [ 856.509507][T31107] check_noncircular+0x12f/0x150 [ 856.514496][T31107] __lock_acquire+0x164c/0x2de0 [ 856.519376][T31107] ? __lock_acquire+0x747/0x2de0 [ 856.524340][T31107] lock_acquire+0x115/0x350 [ 856.528856][T31107] ? kernfs_iop_permission+0x7f/0x430 [ 856.534251][T31107] ? __pfx_kernfs_iop_permission+0x10/0x10 [ 856.540073][T31107] ? __pfx_kernfs_iop_permission+0x10/0x10 [ 856.545893][T31107] down_read+0x4a/0x330 [ 856.550089][T31107] ? kernfs_iop_permission+0x7f/0x430 [ 856.555497][T31107] ? __pfx_kernfs_iop_permission+0x10/0x10 [ 856.561326][T31107] kernfs_iop_permission+0x7f/0x430 [ 856.566549][T31107] ? __pfx_kernfs_iop_permission+0x10/0x10 [ 856.572384][T31107] inode_permission+0x3de/0x5f0 [ 856.577290][T31107] cgroup_attach_permissions+0x28e/0x9f0 [ 856.582949][T31107] __cgroup_procs_write+0x24b/0x320 [ 856.588175][T31107] cgroup_threads_write+0x24/0x50 [ 856.593228][T31107] ? __pfx_cgroup_threads_write+0x10/0x10 [ 856.598984][T31107] cgroup_file_write+0x331/0x8f0 [ 856.603970][T31107] ? __pfx_cgroup_file_write+0x10/0x10 [ 856.609454][T31107] ? __kmalloc_noprof+0x38c/0x720 [ 856.614496][T31107] ? __pfx_cgroup_file_write+0x10/0x10 [ 856.619974][T31107] kernfs_fop_write_iter+0x3a4/0x540 [ 856.625287][T31107] vfs_write+0x612/0xba0 [ 856.629552][T31107] ? __pfx_vfs_write+0x10/0x10 [ 856.634345][T31107] ? __pfx_do_futex+0x10/0x10 [ 856.639043][T31107] ? kmem_cache_free+0x182/0x650 [ 856.644032][T31107] ksys_write+0x150/0x270 [ 856.648384][T31107] ? __pfx_ksys_write+0x10/0x10 [ 856.653272][T31107] do_syscall_64+0x166/0x520 [ 856.657891][T31107] ? trace_irq_disable+0x3b/0x140 [ 856.662930][T31107] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 856.669012][T31107] ? clear_bhb_loop+0x70/0xc0 [ 856.673713][T31107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 856.679630][T31107] RIP: 0033:0x7fd09619e2d9 [ 856.684064][T31107] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 856.703700][T31107] RSP: 002b:00007fd0970fa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 856.712146][T31107] RAX: ffffffffffffffda RBX: 00007fd096425fa0 RCX: 00007fd09619e2d9 [ 856.720147][T31107] RDX: 0000000000000012 RSI: 0000200000000700 RDI: 000000000000000a [ 856.728136][T31107] RBP: 00007fd096235888 R08: 0000000000000000 R09: 0000000000000000 [ 856.736130][T31107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 856.744120][T31107] R13: 00007fd096426038 R14: 00007fd096425fa0 R15: 00007ffca2519038 [ 856.752146][T31107] [ 864.359329][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!