last executing test programs: 3.945261527s ago: executing program 1 (id=7229): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x3d, 0x0, 0x2, 0x7}, {0x4, 0x0, 0x10, 0xe4ff}, {0x3, 0xdd}, {0x0, 0x8, 0x0, 0x10000000}, {0x0, 0x0, 0x6b, 0xfffffffe}, {0x0, 0x0, 0xf4}, {0x6, 0x0, 0x6}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0xfffffffc, 0x10000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x4800) 3.885620865s ago: executing program 3 (id=7230): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f00000002c0)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300)=0x8df, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000a40)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c00)={'syzkaller0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x20000000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000c01080000000000000000020000000900010073797a300000000064000000090a010400000000000000000200000008000a40000000010900020073797a31000000000900010073797a300000000008000540000000080800034000000084200009801c0002800c00018008000140000000040c0001800800014000000004540000000c0a01010000000000000000020000000900020073797a31000000000900010073797a30000000002800038024000080100001800c000100e7ffff7effdff20010000a800c000100f8"], 0x100}}, 0x0) 3.6622435s ago: executing program 1 (id=7234): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x8) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x7, @local}, 0x1c) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000180), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000200)=@ccm_128={{0x303}, "63a7d38a4937c1fc", "5f90d5f023d7bd5bd799356c95abffc8", "09fe0891", "0aa3b9dd5fe7a771"}, 0x28) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$tun(r4, &(0x7f0000000280)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f00000002c0)=@ccm_128={{0x303}, "b421eba833d4b156", "56df2295bfda5c4f9fecff61beaa8bb4", "808065e3", "7f1f1c2ab4421d27"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r3, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000009c0)=""/4096, 0x4000}], 0x1}, 0xfff}, {{0x0, 0x0, 0x0}, 0x100}], 0x2, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x7, &(0x7f0000002ac0)=0xffff1884, 0x4) socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000002b00)={'syzkaller1\x00'}) connect$inet6(r1, &(0x7f0000002bc0)={0xa, 0x4e22, 0x0, @remote}, 0x1c) syz_extract_tcp_res$synack(&(0x7f0000002c00), 0x1, 0x0) 2.58794074s ago: executing program 2 (id=7238): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x60, 0x0, 0x0, 0x6400}, {}, {0x3}, {}, {}, {}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0x0, 0x0, 0xffffffff}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4894}, 0x0) 2.504275437s ago: executing program 0 (id=7239): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x3, &(0x7f00000001c0)=0x2, 0x4) bind$inet(r0, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000003040), 0xffffffffffffffff) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, 0x0, &(0x7f0000000040)=0x700) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) close(0x3) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003140)={&(0x7f0000003080)={0x28, r1, 0xe6e964277ae08d57, 0x70bd2d, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8040000}, 0x40080) 2.39929012s ago: executing program 3 (id=7241): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)=ANY=[@ANYBLOB="3801000010000100279d700000000000991801010500cb2499e1e26d0882bc135b66bbcb0000ffffc90000000000fc0200000000000000000000000000000000ecdf000000030000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000032000000640100fe00000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000004000fcffffffffffffff00000000000000000000000000000000000000000000000001000000000000000000008000000000020000000000000010000000000002"], 0x138}}, 0x0) 2.25583295s ago: executing program 2 (id=7242): r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000000)="1c0000001a009b8a140000003b000000000000000000000000010000", 0x1c) 2.143531058s ago: executing program 3 (id=7243): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="60000000020601080000000000000000000000010500010006000000050005000200000005000400000000000900020073797a3100000000140007800800064000000003080013400000040511000300686173683a69702c6d61726b"], 0x60}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e22, 0x2, @empty, 0x7}, 0x1c) listen(r3, 0xfffffffc) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000280)=0x2088, 0x4) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000100)={0x2, 0x4e22, @local}, 0x10) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={'ip6erspan0\x00', {0x2, 0x4e21, @empty=0xfdfdffff}}) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xc, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0x7c}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, 0x94) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'veth0_virt_wifi\x00', {0x2, 0x4e23, @local}}) 2.122804236s ago: executing program 1 (id=7244): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x3d, 0x0, 0x2, 0x7}, {0x4, 0x0, 0x10, 0xe4ff}, {0x3, 0xdd}, {0x0, 0x8, 0x0, 0x10000000}, {0x0, 0x0, 0x6b, 0xfffffffe}, {0x0, 0x0, 0xf4}, {0x6, 0x0, 0x6}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0xfffffffc, 0x10000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x4800) 2.114366637s ago: executing program 0 (id=7245): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[@ANYBLOB="540100001000010426bd70e4ffffffffffffff00", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r1], 0x154}}, 0x0) 1.978626333s ago: executing program 2 (id=7246): socketpair(0x1e, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000000), 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000001200), 0xc, &(0x7f0000001400)={0x0, 0x124}}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xb8, r2, 0x800, 0x70bd26, 0x25dfdbff, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_REG_RULES={0x74, 0x22, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xb81}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8001}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xc2}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x5}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x4}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x2}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x4}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x2}]}]}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x7}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xf}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0xb5d1682b8da98d73}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x9}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x4}]}, 0xb8}, 0x1, 0x0, 0x0, 0x20004848}, 0x11) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000280)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e22, @rand_addr=0x1}, 0x2, 0x4}}, 0x26) ioctl$PPPIOCGL2TPSTATS(r5, 0x40047459, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'pim6reg\x00'}) sendmmsg$alg(r0, &(0x7f0000001340)=[{0x0, 0x0, 0x0}], 0x7, 0x0) sendmsg$nl_route(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}, 0x1, 0x0, 0x0, 0x444}, 0x20000001) 1.972831673s ago: executing program 4 (id=7247): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0101f500000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000038000000030a01040000000000000000010000010900030073797a32000000000c00024000000000000000010900010073797a300000000054000000060a01040000000000000000010000000900010073797a31000000000800"], 0x7904}, 0x1, 0x0, 0x0, 0x4040}, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0xffa3) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) 1.925407687s ago: executing program 0 (id=7248): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x23, 0x4, 0x8, 0xbc0, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x1, 0x3, 0x0, 0x18}, 0x50) 1.826358508s ago: executing program 1 (id=7249): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="b70000008100003bbfa30000003000000703000000feffff720af0fff8ffffff71a4f0ff000000007110be00000000001d400500000000004704000001ed00000f030000000000001d440000000000006b0a00fe000000007313000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff31a8fd3c0fd8b7ff831028e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646c0200000000000000020000e35208b0bb0d2cd829e654400e2438ec649dc76128610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda82fc9c4d7ecc7a803bf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714f62ba7a54f0c33d39000d0bfed3a6a59ff616236fd8f2477184bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06fa2e04cfe0649226c697d9e8eaade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00023ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a83469620c6e74e1f46132559c4f8700a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88f15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a920099c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40fc5d2f55ff07c53147de202ce517b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661061173f359e9052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff26b61aac8aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3ba18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e26534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336dfaa6d5d164301190bc2d4c04087729033342045804a28082abc3b4762302a271722fb515f31e0dd115a292f1e68481a62c49d15ea5460a29c60b1058fb7aa9bf4ee3cbe11b03711a15d730646b72d074dab1e8c429339f3460d324c17a4a8bfc7d7eab45bef00664d6dc82300000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 1.813227741s ago: executing program 0 (id=7250): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x2000c881}, 0x40014) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f00000001c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000280)={0x2, {{0x2, 0x2, @multicast2}}, 0x1, 0x1, [{{0x2, 0x4e21, @empty}}]}, 0x110) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x38, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x24, 0x3, "7339f2f304fdd672bad09dfb040000000000000001f9580dabf95ddc91967c20"}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0x8, 0x1, 'LOG\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x21}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x4050) 1.811036903s ago: executing program 3 (id=7251): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x54, r2, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x93, 0xb, 0xb5a}, {0x6}, {0x8, 0x13, 0x100}, {0x5, 0x14, 0xfd}}]}, 0x54}}, 0xc000) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, 0x0, &(0x7f00000017c0)=0xc00) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000001800), 0xffffffffffffffff) pipe(&(0x7f0000001840)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_devices(r7, &(0x7f0000001880)=ANY=[@ANYBLOB='b '], 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000018c0)='./cgroup.net/syz0\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001900), 0x200002, 0x0) socket$igmp(0x2, 0x3, 0x2) r9 = openat$cgroup_devices(r8, &(0x7f0000001940)='devices.deny\x00', 0x2, 0x0) splice(r6, 0x0, r9, 0x0, 0x5, 0x0) write(r5, 0x0, 0x0) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000001980)={{0x2, 0x4e22, @rand_addr=0x64010101}, {0x306, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}}, 0x5e, {0x2, 0x4e24, @loopback}}) sendmsg$inet(r4, &(0x7f0000001a00)={&(0x7f0000001a40)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10, &(0x7f0000001a80)=[{&(0x7f0000002680)="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", 0x8fa}, {&(0x7f0000003280)="0862899e97101bd1575c54c0fe75a68623e2b5650111f84831df7db3baac4a59bf984621ec0996db94b391a8c253ce0c1838c886684d7d0ebe4078debc65c1d373ebd7ae21d19abb2e6f2f814e4e167df03c21a6e91401300d96e75a16e73255214eb167be6c343965b7414b97ad", 0x6e}, {&(0x7f0000003300)="8feee39bbf7529635d2def04b43a9df6798692582df45e5f27e6e02be6701bb97b35194feadcd89c3e7e275b577c6b97e8f10dadb743f6d98e90159ab0a5f73def4a4d62566fd64e970f30c488bf960fd0b54ea37c50c733cbb2c6899e176d334ac952a3b563649624a0387e5ed9e97c3c62cc86f523dfac575c07c2cacf1346f8ddc83a48e7bc61c9737500d0e1da8e0ae10a4ca645de1979abbdfb4c672acbb144b5fea6", 0xa5}], 0x3}, 0xc000) r10 = socket$kcm(0x2, 0x0, 0x84) openat$ppp(0xffffffffffffff9c, &(0x7f00000033c0), 0x2000, 0x0) sendfile(0xffffffffffffffff, r10, &(0x7f0000003400)=0x7fffffff, 0x86) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000003440)={0x0, 0x0, &(0x7f0000003480)={&(0x7f00000034c0)=ANY=[@ANYBLOB="5c0000000206050000000000000000000000000814000780080011400000004105001500060000000500010006000000050005000a20000005000400000000000900020073797a320000000010000300686173683a69702c6d6163"], 0x5c}, 0x1, 0x0, 0xa00, 0x10}, 0x0) close(0x3) socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$sock_attach_bpf(r10, 0x84, 0x25, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000003580)={0x2, 0x5}, &(0x7f00000035c0)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000003600)={r12, 0x1}, &(0x7f0000003640)=0x8) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, 0x0, 0x800) 1.809072761s ago: executing program 4 (id=7252): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100), 0x200002, 0x0) unshare(0x8040480) preadv(r0, 0x0, 0x0, 0x2, 0x7ff) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x300, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x29, 0x1, 0x0, 0x0, {0xf}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x1}]}, 0x1c}}, 0x0) recvmsg(r1, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x21) 1.754015273s ago: executing program 1 (id=7253): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x3, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="620ac4ff0000000071105d00000000009500000000000039f8f5e51e"], &(0x7f0000000100)='GPL\x00'}, 0x94) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25ffdbfd, {0x0, 0x0, 0x0, 0x0, {0xffff, 0xf}, {0x0, 0xfff3}, {0x2, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x88a8}, @TCA_FLOWER_KEY_VLAN_PRIO={0x5, 0x18, 0x4}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001c40)={'sit0\x00', &(0x7f0000001b80)={'ip_vti0\x00', 0x0, 0x1, 0x7800, 0x80000000, 0x8, {{0x21, 0x4, 0x2, 0x11, 0x84, 0x67, 0x0, 0x2, 0x6, 0x0, @multicast2, @private=0xa010102, {[@timestamp={0x44, 0x20, 0x99, 0x0, 0x4, [0x6, 0x6, 0x0, 0x3, 0x1, 0x0, 0x4]}, @generic={0x88, 0x4, "6dcf"}, @timestamp_prespec={0x44, 0x4c, 0x4c, 0x3, 0x4, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@local, 0x7}, {@loopback, 0x6}, {@rand_addr=0x64010100, 0xa22}, {@loopback, 0xe}, {@rand_addr=0x64010100, 0x9}, {@broadcast, 0xb}, {@rand_addr=0x64010101, 0x1e2}, {@local, 0x200}]}]}}}}}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000002180)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002140)={&(0x7f0000000a40)={0x464, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [{{0x8}, {0x188, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xc5d8}}, {0x8}}}]}}, {{0x8}, {0x26c, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x200}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r2}}}]}}]}, 0x464}}, 0x10) setsockopt$inet6_int(r1, 0x29, 0x33, &(0x7f0000000140)=0x6, 0x4) setsockopt$inet6_int(r1, 0x29, 0x42, &(0x7f0000000180)=0x1f2b, 0x4) getsockopt$inet6_buf(r1, 0x29, 0x6, 0x0, &(0x7f00000001c0)) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000200)={0x3, 0xff, 0x4, 0xe17, 0x2, 0x0, [{0xffffffffffffff00, 0x7f, 0x8, '\x00', 0x880}, {0x8, 0x5, 0x0, '\x00', 0x1}]}) r3 = socket(0x10, 0x803, 0x0) socket$kcm(0x2c, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x503, 0x800000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20e9}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_TLB_DYNAMIC_LB={0x5, 0x1b, 0x8}]}}}]}, 0x3c}}, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000440), r3) sendmsg$IPVS_CMD_GET_INFO(r3, &(0x7f0000000480)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000500)={&(0x7f0000000540)={0xf4, r5, 0x300, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@dev={0xfe, 0x80, '\x00', 0x3d}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xc, 0x15}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2d, 0x11}}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x40}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x18}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0x64010102}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x200}]}, 0xf4}, 0x1, 0x0, 0x0, 0x4000}, 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000640), r3) sendmmsg$inet(r0, &(0x7f0000000680)=[{{&(0x7f00000006c0)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4040880) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000001400078005001400200000000800124008001f000500010006000000050005000200000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x58}}, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000880), r8) sendmsg$NLBL_MGMT_C_ADD(r7, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)={0x2c, r9, 0x220, 0x70bf2c, 0x0, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, ']\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 1.491687379s ago: executing program 4 (id=7254): syz_emit_ethernet(0x52, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x1c, 0x3c, 0x1, @dev={0xfe, 0x80, '\x00', 0x26}, @local, {[@routing={0x87, 0x0, 0x1, 0x1, 0xfffd}], {{0xdc05, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001b80), 0xc0a41, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x5, [@struct={0x0, 0x2, 0x0, 0x13, 0x0, 0x2}]}, {0x0, [0x0, 0x30, 0x5f]}}, &(0x7f0000000140)=""/220, 0x41, 0xdc, 0xa, 0xca6}, 0x28) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001bc0)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000001c00)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000001c40)={@val={0x60, 0x800}, @val={0x7, 0x0, 0x0, 0x300, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x3c, 0x8016, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @broadcast}, {{0xa200, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x1}}}}, 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001440)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xffedfff0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x8, &(0x7f0000001500), 0x8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x303}, "c4833c0b2e07f45f", "43db4d70f03a88b0b1022d822268db68", "b38134af", "060aae0a83c9c542"}, 0x28) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 1.211183087s ago: executing program 1 (id=7255): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'syzkaller0\x00'}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x7, @local}, 0x1c) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000180), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000200)=@ccm_128={{0x303}, "63a7d38a4937c1fc", "5f90d5f023d7bd5bd799356c95abffc8", "09fe0891", "0aa3b9dd5fe7a771"}, 0x28) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$tun(r4, &(0x7f0000000280)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f00000002c0)=@ccm_128={{0x303}, "b421eba833d4b156", "56df2295bfda5c4f9fecff61beaa8bb4", "808065e3", "7f1f1c2ab4421d27"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r3, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000009c0)=""/4096, 0x4000}], 0x1}, 0xfff}, {{0x0, 0x0, 0x0}, 0x100}], 0x2, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x7, &(0x7f0000002ac0)=0xffff1884, 0x4) socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000002b00)={'syzkaller1\x00'}) connect$inet6(r1, &(0x7f0000002bc0)={0xa, 0x4e22, 0x0, @remote}, 0x1c) syz_extract_tcp_res$synack(&(0x7f0000002c00), 0x1, 0x0) 1.200553144s ago: executing program 0 (id=7256): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000080000000000000003000000186700000700000000000000070800009500cdfc442b0000"], &(0x7f0000000100)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41000, 0x70, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f00000003c0)={0xa, 0x4e20, 0xffffffff, @mcast2, 0x7}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000400)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000010000f80700000018000180140002006970766c616e31"], 0x2c}, 0x1, 0x0, 0x0, 0x20000054}, 0x40) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f0000000440)={0x20, r4, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_MODES_OURS={0x4}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x11}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000044}, 0x4) syz_emit_ethernet(0x66, &(0x7f0000000140)={@link_local, @remote, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0xe}, @dev={0xac, 0x14, 0x14, 0xff}}, {{}, {}, {}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0x4}}}}}}}}, 0x0) 1.12429502s ago: executing program 2 (id=7257): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)=@newlink={0x58, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7002}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x28, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x2}, @IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_NF_CALL_IPTABLES={0x5}, @IFLA_BR_MCAST_STATS_ENABLED={0x5, 0x2a, 0x1}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x8880}, 0x410) ioctl$XFS_IOC_SCRUBV_METADATA(r0, 0xc0285840, &(0x7f0000000040)={0xc7ae, 0x6, 0x10000, 0x0, 0xc, 0x1, 0x0, &(0x7f0000000000)=[{0x1b, 0x1ff, 0x6}]}) 822.31516ms ago: executing program 3 (id=7258): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="180000"], &(0x7f00000004c0)='GPL\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) unshare(0x22020600) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout_data(r2, 0x107, 0x16, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1}, &(0x7f0000000900), &(0x7f0000000940)=r3}, 0x20) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000002c0)) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000000)={0x18, 0x0, {0x3, @remote, 'ip6_vti0\x00'}}, 0x1e) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x73, &(0x7f0000000080)={0x0, 0x4, 0x10, 0xfffffffffffffff8, 0x40}, &(0x7f0000000140)=0x18) sendmsg$inet(r5, &(0x7f0000000f40)={&(0x7f00000001c0)={0x2, 0x4e21, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000ec0)}, 0x24040000) ioctl$PPPIOCGCHAN(r4, 0x80047437, &(0x7f0000000040)) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl(r6, 0x40047438, &(0x7f0000000040)) ioctl$PPPIOCCONNECT(r6, 0x4004743a, &(0x7f00000000c0)) socket$nl_route(0x10, 0x3, 0x0) 713.371662ms ago: executing program 0 (id=7259): socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000840)={&(0x7f00000004c0)={0x23c, 0x0, 0x4, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x4, 0x18}}}}, [@NL80211_ATTR_IE={0x1eb, 0x2a, [@channel_switch={0x25, 0x3, {0x0, 0xc, 0x1}}, @challenge={0x10, 0x1, 0x47}, @random_vendor={0xdd, 0xfd, "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"}, @dsss={0x3, 0x1, 0xb3}, @measure_req={0x26, 0xdb, {0x4, 0x4, 0x9, "cb7dc5c57478d9cd13c5e1f02181c19719e6326e36dbb4337b7d05328de1218c6d84c390c3dfdd772db39e5fda92fb06ebf79f214d6a62895e23f703b4c155c13da05d6652225b4a912bd8613691d68a526c070f190e1f43fa123c2e9d4037e5211120ca6123cf8f4bb3b2d936cc8d32beb4413e50f3d8db2a6029541dafcad665796a8de9b39e0e2daee18f135e2c6bef99a5e3d051d93d38cdf2ded023283827d388312b50ca13d718aed1ed17aa9db65b1503c220c179e89d5758ae3b0ed9fda266772f7e7e499d0cb9c5d2c63eda38b0377aee1d5c67"}}]}, @NL80211_ATTR_IE={0x2e, 0x2a, [@link_id={0x65, 0x12, {@initial, @device_b, @device_b}}, @mesh_chsw={0x76, 0x6, {0x0, 0x3, 0x1e, 0x829}}, @channel_switch={0x25, 0x3, {0x0, 0xae, 0x6}}, @challenge={0x10, 0x1, 0x36}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x6, 0xb9, 0x8}}]}]}, 0x23c}, 0x1, 0x0, 0x0, 0x20}, 0x20000000) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000030000042bbd700000000000ff010000000000000000000000000001fe80000000000000000000000000000f00000000000000000a000000000000001134462343b336ab572550c44694f3a063aa6523a6b6f9e400ac9f8fb94bc0a7a4c447533564c525ae5a392ff574890d40c4d39fb8b9ebcf8ad3e7aabf94919c85b99a1cbb593b6afc7e015470f03c35d1eda65c25c23891fcdb67c7f7b618573c05d6f0c3f79a0c8ef81d866e06f6e56477644ca1e58ad328", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000004000000000000000000003c00000000000000ffffffffffffffff000000000020000000000000000000000000000000000000000a00000000000072990000000000000200000000000008010000000000000002000000000000004400050020010000000000000000000000000000000000003c00000002000000fe8000000000000000000000000000bb06000000050107000000000000000000ffffffff"], 0xfc}, 0x1, 0x0, 0x0, 0x5575fb9d55d41c01}, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000180)={0x0, 0xa}, 0x8) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000700)="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", 0x118) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e23, 0x8020000c, @loopback, 0xffffffff}, 0x1c) 660.431651ms ago: executing program 4 (id=7260): r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001800)=[{{&(0x7f0000001840)={0xa, 0x4e22, 0x9, @remote, 0x1}, 0x1c, 0x0, 0x0, &(0x7f0000001880)=ANY=[@ANYBLOB="240000000000000029fe800032"], 0x28}}], 0x1, 0x0) 660.187441ms ago: executing program 2 (id=7261): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=@mpls_delroute={0x1c, 0x18, 0x9, 0x70bd29, 0xfffffffe, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x6, 0x2000}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4880) 353.505509ms ago: executing program 4 (id=7262): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x0, 0x6, 0x7, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) 343.434474ms ago: executing program 2 (id=7263): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0xf, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x43}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000240)='syzkaller\x00', 0xf, 0x0, 0x0, 0x40f00, 0x4d}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000280)={'wpan0\x00'}) sendmsg$nl_route(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=@mpls_delroute={0x1c, 0x18, 0x4, 0x70bd29, 0xfffffffe, {0x1c, 0x80, 0x0, 0xf8, 0xfe, 0x0, 0x0, 0x6, 0x2000}}, 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x4880) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000000), &(0x7f0000000080)=0x68) 140.731657ms ago: executing program 3 (id=7264): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000380)=0x80000001, 0x4) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1}}], 0x1, 0x20008000) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f00000004c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000980)=0x1, 0x12) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000a00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f0000000a40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000d00)={0x1054, r4, 0x400, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x3, 0x51}}}}, [@NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x1004, 0xac, "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"}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x665}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x8, 0xbd, [0x0, 0x1f8a]}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x1000}]}, 0x1054}}, 0x1) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000001d80)={0x40000004}) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000300)=@req={0x9, 0x1, 0xb4, 0x9}, 0x10) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000340)=@req3={0x7813, 0xffffffff, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000007c0)=""/246, 0xf6}], 0x1}, 0x20) sendmmsg(r6, &(0x7f0000004340)=[{{0x0, 0x0, &(0x7f0000003180)=[{&(0x7f00000000c0)="419caf414734ac37c7c7fb7f3c3fd2c3fe2bc9c153b075100ccca4b749dec04c4d30025531da81ca6936d959e678532a3483cd6950fe29", 0x37}, {&(0x7f00000008c0)="d6fd8469309cb8cb1fa3066d87d80f4e1509439f9f0f44af594a0420f613fb8d5737236c85914a0569dafc31766c10e73084e7356c62d33faa99a030bf071fa11f2aeb6a0fd937fcc683905cf4fa1ab503f363de88f5d083f20158fc7e2e39f26d7e48f96a4b69ab19abb8c36aa1a24c61a37717a84b24ad1b70ee90a05adc96c66b486f1b", 0x85}, {&(0x7f0000001dc0)="abefcc298b1654389952d6d6e10d23c7790c5adef7ca1c791b2ab51e21c9012cbf54c874af110f423206d71739bc4b9f2ed8ad7ad95d973d2d2d59129091f57ac704e910045738bd8b1fbf2f93fdff1add4554b3426bf468e60a986d5d32ab78392573cfb173dce5e6893a07fa6499968d503ba2387b8183911b7e486971ec28816b250e2e17ef2dd0b54fa3a80393100d23de0bc7f99e1d9321037cf75b9b1b242888a1caf0443b91e9b55349ef2d3b2104875bf323bd93c50e5d30143d93bb929f5f3276f64c3cda69b4339d4a5e712b837a72d190a5318a5a570092d7", 0xde}, {&(0x7f0000001ec0)="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", 0x1000}, {&(0x7f0000002ec0)="4851f7213e7af0837e82990441ed0d11345c00a9b3b040a0a87d9ab265402e67f635056cfaeb3207f96241ee4ebefbfec219dfc547cd90eb8b8e6568027305624e13bda7480eb09dd08f29d2779349e1cb9aad969a1c71c6278c130d878a604bc52654cc", 0x64}, {&(0x7f0000002f40)="aa0237567f84756a1358e215d9c0164f8915466cf67c340f3ca890590f998f7fadb031915fde26f9c889700ef077b04d54a0d370fd54558be101896d", 0x3c}, {&(0x7f0000002f80)="a68fe96007dae5e71214041a2f0ad7349fb6d5e5a637e66284b1d2b7f8a351adba8c70d382e0d735e9283cb9b34b8abdcc589173c809c1b610d4035a64b56a95fb4256bd73e2499d7c002b7ec45ab3dfe89282886eae4c4adb14ae8470cf492c6a78667eca7504157bedeaeb53c2e9e782e9a6d46b55c0c3240be811a5f99cf764f0ed847352b9e1a3e3b1f85c5947275cc60dec302904cbf404272c9d802ac203362a7a419a74f419a0924648f4c891d7d7a93a84731b665881f5607c83fb2bcd1855c6fa9e9f7dfd59df3df68212dfd8c4", 0xd2}, {&(0x7f0000003080)="a1ffcfe3fc420c9e4080bc9416d88bca5232fb0575c4cd4866aa5314addcd540850d741e8aea55524fa1730c84eacb3c7e2f5859953fcba76d29678fddcf07410eceb982f83a1f07f5aee48b278750368affe8d5a28bee90e195475203cf40964a9f6b1894e83dfc2926ee573fa70a3eb9b510a6d522ba5559469c9dffcd74f4332cd2d4cd5761c2493de326e6b91517aa5336eec07e0680f4323b8c50ea29d28d316fd6ca960e1d91d28087ccabe74ff2db825c4aea0a6e46d0b667f3cb978543aaefe3f48523965af4f6bc512a75a6a1b5d104d4a5ef680d1a74d7857db43eaf", 0xe1}], 0x8, &(0x7f0000003200)=[{0x70, 0x88, 0x6, "433ec66028788cddf60a2f333bcb7696f07960decee4f38ee5aaf16d44e6d126b7e12f60fbcea51522d2e60e11a720a43ef4ccc5385e5488817591755bf0e53d05a7b8195656e92598ebec6c12393310fdd9c30890a31ebb9397"}, {0x1010, 0x10b, 0x7, "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"}, {0xa8, 0x0, 0x5, "d4b21a9ec6393b12d990f75eb501b32a2b25559238662cd5c8d971e5f7d4ffe689399e6bf1444e1dd28e380db2a05a4ee3db305cda1fa9bee197b080e8c7af830fae115ca8bd2fc3dc5eda7e4beb512bd9a5392e7233dc2718c97e0be077cbab58f85bb2276654e9fa14e6bd4159fa9e9ade836a92c310dc1836a194763797430a5a482edff637fba191f2620fdc3923d7af19"}], 0x1128}}], 0x1, 0x9200000024048040) recvmsg$unix(0xffffffffffffffff, 0x0, 0x10000) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000240)) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000003c0)={0x4, 0x3}, 0x4) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="ee7b7826d0aa0abbe71dc9119f2f70dd1c575225ce0bc8966ea8"], &(0x7f0000000540)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r7, 0x5, 0xb68, 0x560b0000, &(0x7f0000000640)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40005}, 0x4000041) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000140affffffff00000000000002000009080003400000000a0900010073797a30000000000c000640000000000000000214000000020a01"], 0x70}}, 0x8000000) sendmsg$nl_netfilter(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0xbc}, 0x1, 0x0, 0x0, 0x4040}, 0x800) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="e0000000000101040000000000000000020000001c00188008200140a08000000800024000000002080003400000000224"], 0xe0}, 0x1, 0x0, 0x0, 0x4}, 0x0) recvmmsg(r0, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000700)=""/170, 0xaa}], 0x1}, 0x200}], 0x1, 0x0, 0x0) 0s ago: executing program 4 (id=7265): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r1) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) bpf$ITER_CREATE(0x21, &(0x7f0000000440)={r4}, 0x8) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)=@gettclass={0x24, 0x2a, 0x800, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x8, 0x9}, {0xfff1}, {0xd, 0x9}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x400c4}, 0x4804) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000068a000000000000041f00181801000020696c2500000000002020207ba1d8ff000000007ba1000000000000040100000400ffffb702000008000000b703000002000000850000002effb00095", @ANYRES32=r0], &(0x7f0000000600)='GPL\x00', 0xa, 0xffa, &(0x7f0000000ac0)=""/4090, 0x0, 0xa8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200000}, 0x94) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r3, 0x800448d2, &(0x7f0000000640)={0x2, &(0x7f00000004c0)=[{}, {@fixed}]}) kernel console output (not intermixed with test programs): .1.6078'. [ 879.044511][T25990] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 879.224356][T25995] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 879.352154][T25995] ksmbd: Unknown IPC event: 8, ignore. [ 879.699915][ T152] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 880.288827][T26018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 880.289676][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 880.334617][T26018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 880.335344][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 881.505434][T26054] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6098'. [ 882.073997][T26071] netlink: zone id is out of range [ 882.074015][T26071] netlink: zone id is out of range [ 882.092205][T26077] netlink: 128 bytes leftover after parsing attributes in process `syz.4.6106'. [ 882.092237][T26077] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6106'. [ 882.092255][T26077] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6106'. [ 882.312300][T26078] netlink: 152 bytes leftover after parsing attributes in process `syz.0.6103'. [ 882.759086][T26096] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6112'. [ 882.901703][ T43] net_ratelimit: 14 callbacks suppressed [ 882.901726][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 883.546376][ T4949] block nbd1: Possible stuck request ffff888027d07000: control (read@0,4096B). Runtime 30 seconds [ 883.764783][T26115] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6117'. [ 883.998583][T26131] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6122'. [ 884.050252][T26131] v: entered promiscuous mode [ 884.057067][T26131] macvlan2: entered allmulticast mode [ 884.057093][T26131] v: entered allmulticast mode [ 884.214583][T26135] netlink: 588 bytes leftover after parsing attributes in process `syz.1.6124'. [ 884.480470][T26142] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6126'. [ 884.739742][T21323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 885.211672][T26154] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6130'. [ 885.994010][T26185] syzkaller1: entered promiscuous mode [ 885.994037][T26185] syzkaller1: entered allmulticast mode [ 887.033193][T26211] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 887.667272][T26233] __nla_validate_parse: 3 callbacks suppressed [ 887.667297][T26233] netlink: 68 bytes leftover after parsing attributes in process `syz.0.6159'. [ 887.846164][T26241] SET target dimension over the limit! [ 888.033433][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 888.347058][T26257] netlink: 'syz.2.6165': attribute type 4 has an invalid length. [ 888.417982][T26257] netlink: 'syz.2.6165': attribute type 4 has an invalid length. [ 888.608472][T26264] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6166'. [ 888.812406][T26271] team0: Port device v removed [ 888.979909][T26271] team0: Port device team_slave_0 removed [ 889.088436][T26271] team0: Port device team_slave_1 removed [ 889.094020][T26271] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 889.094533][T26271] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 889.286483][T26271] team0: Port device netdevsim1 removed [ 889.315164][T26271] bond3: (slave veth3): Releasing backup interface [ 889.435255][T26271] batman_adv: batadv0: Interface deactivated: gretap1 [ 889.435465][T26271] batman_adv: batadv0: Removing interface: gretap1 [ 889.462733][T26271] bond5: (slave gretap2): Releasing active interface [ 889.593067][T26271] bond12: (slave bond13): Releasing backup interface [ 889.648062][T26271] bond18: (slave ip6gre3): Releasing backup interface [ 889.648102][T26271] ip6gre3: left promiscuous mode [ 889.721748][T26271] bond19: (slave bridge12): Releasing backup interface [ 889.721779][T26271] bridge12: left promiscuous mode [ 889.723277][T26271] bridge12: left allmulticast mode [ 889.940426][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 890.092232][T26310] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6173'. [ 890.116472][T26312] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6176'. [ 890.151690][T26313] openvswitch: netlink: Missing key (keys=40, expected=100) [ 890.218192][T26296] syzkaller0: entered promiscuous mode [ 890.218223][T26296] syzkaller0: entered allmulticast mode [ 890.251357][T26302] syzkaller1: entered promiscuous mode [ 890.251569][T26302] syzkaller1: entered allmulticast mode [ 892.422178][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 892.422433][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 892.422649][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 893.788113][ T305] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 894.502985][T26342] syzkaller0: MTU not usable for tipc bearer [ 894.503038][T26342] tipc: Enabling of bearer rejected, failed to enable media [ 895.060030][ T2354] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 895.256821][T26376] bond19: option packets_per_slave: invalid value (134217728) [ 895.256855][T26376] bond19: option packets_per_slave: allowed values 0 - 65535 [ 895.314514][T26376] bond19 (unregistering): Released all slaves [ 896.410857][T26403] syzkaller1: entered promiscuous mode [ 896.410882][T26403] syzkaller1: entered allmulticast mode [ 896.560623][T26408] SET target dimension over the limit! [ 896.591169][T26409] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 896.788932][T26409] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6203'. [ 896.794918][T26410] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6203'. [ 896.795988][T26410] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6203'. [ 897.691233][T26441] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6214'. [ 897.691261][T26441] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6214'. [ 897.753258][T26446] netlink: 128 bytes leftover after parsing attributes in process `syz.0.6215'. [ 897.753301][T26446] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6215'. [ 897.753320][T26446] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6215'. [ 897.893913][T26450] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6219'. [ 897.893942][T26450] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6219'. [ 898.117051][T26457] x_tables: duplicate underflow at hook 1 [ 898.117701][T26457] openvswitch: netlink: IP tunnel attribute has 5393 unknown bytes. [ 898.856149][T26488] tipc: Enabled bearer , priority 4 [ 899.542294][ T2354] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 900.179954][T21323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 902.636052][T26498] workqueue: Failed to create a rescuer kthread for wq "bond19": -EINTR [ 902.673101][T26503] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ç–½mÔ%A¯úéiÆâxà?ZøË_½á†˜ow¾Äº| [ 903.246752][T26525] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 903.605871][T26538] __nla_validate_parse: 4 callbacks suppressed [ 903.605898][T26538] netlink: 27 bytes leftover after parsing attributes in process `syz.2.6243'. [ 903.824757][T26545] xt_REDIRECT: bad rangesize 26624. [ 903.845567][T26545] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6246'. [ 903.902809][T26545] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6246'. [ 904.317578][T26562] ip_tables: iptables: counters copy to user failed while replacing table [ 904.349581][T26562] syzkaller1: entered promiscuous mode [ 904.349608][T26562] syzkaller1: entered allmulticast mode [ 904.405705][T26568] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6255'. [ 904.773414][T26577] SET target dimension over the limit! [ 905.355411][T26590] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6264'. [ 905.662086][T26600] netlink: 'syz.4.6267': attribute type 1 has an invalid length. [ 905.662334][T26600] netlink: 'syz.4.6267': attribute type 1 has an invalid length. [ 905.662551][T26600] netlink: 'syz.4.6267': attribute type 1 has an invalid length. [ 905.695169][T26600] netlink: 'syz.4.6267': attribute type 1 has an invalid length. [ 905.696383][T26600] netlink: 'syz.4.6267': attribute type 1 has an invalid length. [ 905.708350][T26600] netlink: 'syz.4.6267': attribute type 1 has an invalid length. [ 905.735925][T26600] netlink: 'syz.4.6267': attribute type 1 has an invalid length. [ 905.773700][T26600] netlink: 'syz.4.6267': attribute type 1 has an invalid length. [ 905.798537][T26600] netlink: 'syz.4.6267': attribute type 1 has an invalid length. [ 905.802554][T26600] netlink: 'syz.4.6267': attribute type 1 has an invalid length. [ 906.580957][ T2354] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 906.652206][T26623] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 906.765448][T26622] tun0: tun_chr_ioctl cmd 1074025675 [ 906.765478][T26622] tun0: persist enabled [ 907.182556][T26641] wg2 speed is unknown, defaulting to 1000 [ 907.182633][T26641] wg2 speed is unknown, defaulting to 1000 [ 907.182970][T26637] Bluetooth: hci0: invalid length 0, exp 2 for type 4 [ 907.289478][T26641] wg2 speed is unknown, defaulting to 1000 [ 907.322504][T26641] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 907.322550][T26641] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 907.322597][T26641] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 907.737931][T26641] wg2 speed is unknown, defaulting to 1000 [ 907.775991][T26641] wg2 speed is unknown, defaulting to 1000 [ 907.800083][T26641] wg2 speed is unknown, defaulting to 1000 [ 907.803273][T26661] 8021q: VLANs not supported on ip6_vti0 [ 907.827064][T26641] wg2 speed is unknown, defaulting to 1000 [ 907.848134][T26667] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6282'. [ 907.867009][T26641] wg2 speed is unknown, defaulting to 1000 [ 908.049209][T26670] bond16: option packets_per_slave: invalid value (18446744072702918655) [ 908.049239][T26670] bond16: option packets_per_slave: allowed values 0 - 65535 [ 908.081393][T26670] bond16 (unregistering): Released all slaves [ 908.357633][T26680] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6285'. [ 908.426150][T26687] FAULT_INJECTION: forcing a failure. [ 908.426150][T26687] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 908.426198][T26687] CPU: 1 UID: 0 PID: 26687 Comm: syz.1.6288 Not tainted syzkaller #0 PREEMPT(full) [ 908.426224][T26687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 908.426240][T26687] Call Trace: [ 908.426249][T26687] [ 908.426260][T26687] dump_stack_lvl+0xe8/0x150 [ 908.426298][T26687] should_fail_ex+0x410/0x560 [ 908.426335][T26687] _copy_from_user+0x2d/0xb0 [ 908.426371][T26687] ___sys_sendmsg+0x1c6/0x360 [ 908.426397][T26687] ? __lock_acquire+0x747/0x2de0 [ 908.426427][T26687] ? __pfx____sys_sendmsg+0x10/0x10 [ 908.426491][T26687] ? __fget_files+0x2a/0x420 [ 908.426526][T26687] ? __fget_files+0x3a2/0x420 [ 908.426571][T26687] __x64_sys_sendmsg+0x1b1/0x290 [ 908.426599][T26687] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 908.426647][T26687] do_syscall_64+0x166/0x520 [ 908.426678][T26687] ? trace_irq_disable+0x3b/0x140 [ 908.426702][T26687] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 908.426725][T26687] ? clear_bhb_loop+0x70/0xc0 [ 908.426754][T26687] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 908.426777][T26687] RIP: 0033:0x7f9901f9e2d9 [ 908.426799][T26687] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 908.426820][T26687] RSP: 002b:00007f9902e39028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 908.426848][T26687] RAX: ffffffffffffffda RBX: 00007f9902225fa0 RCX: 00007f9901f9e2d9 [ 908.426864][T26687] RDX: 000000000000e800 RSI: 00002000000001c0 RDI: 0000000000000003 [ 908.426879][T26687] RBP: 00007f9902e39090 R08: 0000000000000000 R09: 0000000000000000 [ 908.426894][T26687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 908.426909][T26687] R13: 00007f9902226038 R14: 00007f9902225fa0 R15: 00007fff3f951ed8 [ 908.426947][T26687] [ 908.895177][T26700] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6290'. [ 909.204999][T26715] netlink: 156 bytes leftover after parsing attributes in process `syz.4.6299'. [ 909.367223][T26721] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6298'. [ 909.367254][T26721] netlink: 59 bytes leftover after parsing attributes in process `syz.1.6298'. [ 909.416547][T26721] nft_compat: unsupported protocol 1 [ 909.545252][T26725] bond19: entered promiscuous mode [ 909.779770][T21323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 909.821435][T26741] FAULT_INJECTION: forcing a failure. [ 909.821435][T26741] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 909.821473][T26741] CPU: 0 UID: 0 PID: 26741 Comm: syz.2.6306 Not tainted syzkaller #0 PREEMPT(full) [ 909.821499][T26741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 909.821513][T26741] Call Trace: [ 909.821522][T26741] [ 909.821533][T26741] dump_stack_lvl+0xe8/0x150 [ 909.821573][T26741] should_fail_ex+0x410/0x560 [ 909.821612][T26741] _copy_from_user+0x2d/0xb0 [ 909.821649][T26741] copy_from_sockptr_offset+0x66/0xa0 [ 909.821794][T26741] do_ipt_set_ctl+0x991/0xe20 [ 909.821831][T26741] ? rcu_is_watching+0x16/0xb0 [ 909.821863][T26741] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 909.821909][T26741] ? __mutex_unlock_slowpath+0x731/0x900 [ 909.821951][T26741] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 909.822001][T26741] nf_setsockopt+0x26f/0x290 [ 909.822039][T26741] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 909.822075][T26741] do_sock_setsockopt+0x17c/0x1b0 [ 909.822103][T26741] __x64_sys_setsockopt+0x13d/0x1b0 [ 909.822132][T26741] do_syscall_64+0x166/0x520 [ 909.822164][T26741] ? trace_irq_disable+0x3b/0x140 [ 909.822193][T26741] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 909.822219][T26741] ? clear_bhb_loop+0x70/0xc0 [ 909.822249][T26741] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 909.822272][T26741] RIP: 0033:0x7f1cbd19e2d9 [ 909.822295][T26741] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 909.822314][T26741] RSP: 002b:00007f1cbdfa9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 909.822340][T26741] RAX: ffffffffffffffda RBX: 00007f1cbd425fa0 RCX: 00007f1cbd19e2d9 [ 909.822358][T26741] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 909.822373][T26741] RBP: 00007f1cbdfa9090 R08: 0000000000000400 R09: 0000000000000000 [ 909.822388][T26741] R10: 0000200000000600 R11: 0000000000000246 R12: 0000000000000001 [ 909.822404][T26741] R13: 00007f1cbd426038 R14: 00007f1cbd425fa0 R15: 00007ffe79797398 [ 909.822443][T26741] [ 910.289882][T26740] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6307'. [ 910.661104][T26759] syzkaller0: entered promiscuous mode [ 910.661131][T26759] syzkaller0: entered allmulticast mode [ 910.731280][T26759] TC_ACT_REPEAT abuse ? [ 910.825604][T26766] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6315'. [ 911.547097][T26784] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6320'. [ 911.579419][T26783] netlink: 128 bytes leftover after parsing attributes in process `syz.4.6321'. [ 911.755480][T26788] nftables ruleset with unbound set [ 912.065794][T26793] ip_tables: iptables: counters copy to user failed while replacing table [ 912.104870][T26795] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6325'. [ 912.344675][ T152] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 912.838258][T26820] bond16: entered promiscuous mode [ 912.885296][T26817] syzkaller0: entered promiscuous mode [ 912.885324][T26817] syzkaller0: entered allmulticast mode [ 913.563206][T26844] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6338'. [ 913.619453][ T4949] block nbd1: Possible stuck request ffff888027d07000: control (read@0,4096B). Runtime 60 seconds [ 913.937558][T26860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 914.014502][T26865] __nla_validate_parse: 2 callbacks suppressed [ 914.014529][T26865] netlink: 180 bytes leftover after parsing attributes in process `syz.2.6349'. [ 914.082442][T26862] vlan3: entered allmulticast mode [ 914.337237][T26877] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6353'. [ 914.457109][T26880] validate_nla: 58 callbacks suppressed [ 914.457135][T26880] netlink: 'syz.1.6355': attribute type 10 has an invalid length. [ 914.477860][T26880] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 914.488143][T26880] team0: Port device netdevsim1 added [ 914.500369][T26883] netlink: 128 bytes leftover after parsing attributes in process `syz.4.6356'. [ 914.500399][T26883] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6356'. [ 914.500416][T26883] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6356'. [ 914.540692][T26884] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6357'. [ 914.548293][T26884] macvlan0: entered allmulticast mode [ 914.588129][T26880] netlink: 'syz.1.6355': attribute type 10 has an invalid length. [ 914.782305][T26888] xt_IDLETIMER: timeout value is zero [ 914.872448][T26895] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 915.478637][T26910] netlink: 'syz.2.6366': attribute type 10 has an invalid length. [ 915.543424][T11693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 915.611713][T26910] netlink: 'syz.2.6366': attribute type 10 has an invalid length. [ 915.616573][T26910] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 915.651184][T26910] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 915.750769][T26926] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6366'. [ 915.756689][T26922] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6371'. [ 915.757249][T26922] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6371'. [ 915.810235][T26925] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6371'. [ 915.896893][T26922] Bluetooth: MGMT ver 1.23 [ 915.935672][T26927] FAULT_INJECTION: forcing a failure. [ 915.935672][T26927] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 915.935711][T26927] CPU: 0 UID: 0 PID: 26927 Comm: syz.1.6369 Not tainted syzkaller #0 PREEMPT(full) [ 915.935738][T26927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 915.935753][T26927] Call Trace: [ 915.935763][T26927] [ 915.935774][T26927] dump_stack_lvl+0xe8/0x150 [ 915.935814][T26927] should_fail_ex+0x410/0x560 [ 915.935852][T26927] _copy_from_user+0x2d/0xb0 [ 915.935890][T26927] sockptr_to_sockopt+0xc0/0x3a0 [ 915.935920][T26927] ? __pfx_sockptr_to_sockopt+0x10/0x10 [ 915.935957][T26927] do_sock_getsockopt+0x36c/0x640 [ 915.935987][T26927] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 915.936037][T26927] ? __fget_files+0x2a/0x420 [ 915.936073][T26927] ? __fget_files+0x3a2/0x420 [ 915.936107][T26927] ? __fget_files+0x2a/0x420 [ 915.936150][T26927] __x64_sys_getsockopt+0x1a4/0x240 [ 915.936185][T26927] do_syscall_64+0x166/0x520 [ 915.936217][T26927] ? trace_irq_disable+0x3b/0x140 [ 915.936242][T26927] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 915.936267][T26927] ? clear_bhb_loop+0x70/0xc0 [ 915.936297][T26927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 915.936320][T26927] RIP: 0033:0x7f9901f9e2d9 [ 915.936344][T26927] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 915.936365][T26927] RSP: 002b:00007f9902e18028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 915.936391][T26927] RAX: ffffffffffffffda RBX: 00007f9902226090 RCX: 00007f9901f9e2d9 [ 915.936410][T26927] RDX: 000000000000271c RSI: 0000200000000114 RDI: 000000000000000d [ 915.936426][T26927] RBP: 00007f9902e18090 R08: 0000200000000000 R09: 0000000000000000 [ 915.936442][T26927] R10: 0000200000c35fff R11: 0000000000000246 R12: 0000000000000001 [ 915.936458][T26927] R13: 00007f9902226128 R14: 00007f9902226090 R15: 00007fff3f951ed8 [ 915.936497][T26927] [ 916.498954][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 916.499222][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 916.499448][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 916.499783][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 916.500041][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 916.500263][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 916.984802][T26956] 8021q: VLANs not supported on ip6gre0 [ 917.165284][ T152] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 918.314083][T26985] ip_tables: iptables: counters copy to user failed while replacing table [ 918.461764][T26995] syzkaller0: entered promiscuous mode [ 918.461790][T26995] syzkaller0: entered allmulticast mode [ 919.403227][T27020] FAULT_INJECTION: forcing a failure. [ 919.403227][T27020] name failslab, interval 1, probability 0, space 0, times 0 [ 919.403272][T27020] CPU: 0 UID: 0 PID: 27020 Comm: syz.1.6402 Not tainted syzkaller #0 PREEMPT(full) [ 919.403302][T27020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 919.403319][T27020] Call Trace: [ 919.403330][T27020] [ 919.403343][T27020] dump_stack_lvl+0xe8/0x150 [ 919.403419][T27020] should_fail_ex+0x410/0x560 [ 919.403463][T27020] should_failslab+0xa8/0x100 [ 919.403500][T27020] ? skb_clone+0x212/0x3a0 [ 919.403531][T27020] kmem_cache_alloc_noprof+0xa1/0x600 [ 919.403563][T27020] ? skb_clone+0x212/0x3a0 [ 919.403601][T27020] skb_clone+0x212/0x3a0 [ 919.403636][T27020] __netlink_deliver_tap+0x355/0x6e0 [ 919.403686][T27020] ? netlink_deliver_tap+0x2e/0x1b0 [ 919.403724][T27020] netlink_deliver_tap+0x19c/0x1b0 [ 919.403762][T27020] netlink_sendskb+0x68/0x140 [ 919.403796][T27020] netlink_rcv_skb+0x2a4/0x4a0 [ 919.403831][T27020] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 919.403864][T27020] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 919.403911][T27020] ? bpf_lsm_capable+0x9/0x20 [ 919.403936][T27020] ? security_capable+0x7e/0x2c0 [ 919.403973][T27020] nfnetlink_rcv+0x2b9/0x28c0 [ 919.404003][T27020] ? __dev_queue_xmit+0x29b/0x3920 [ 919.404030][T27020] ? __local_bh_enable_ip+0xd6/0x140 [ 919.404057][T27020] ? lockdep_hardirqs_on+0x7b/0x110 [ 919.404084][T27020] ? __dev_queue_xmit+0x29b/0x3920 [ 919.404105][T27020] ? __local_bh_enable_ip+0xd6/0x140 [ 919.404131][T27020] ? __dev_queue_xmit+0x29b/0x3920 [ 919.404153][T27020] ? __dev_queue_xmit+0x1efb/0x3920 [ 919.404179][T27020] ? __dev_queue_xmit+0x29b/0x3920 [ 919.404209][T27020] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 919.404242][T27020] ? __pfx___dev_queue_xmit+0x10/0x10 [ 919.404275][T27020] ? __copy_skb_header+0xa3/0x4a0 [ 919.404315][T27020] ? skb_clone+0x246/0x3a0 [ 919.404344][T27020] ? __netlink_deliver_tap+0x681/0x6e0 [ 919.404369][T27020] ? netlink_deliver_tap+0x2e/0x1b0 [ 919.404427][T27020] ? netlink_deliver_tap+0x2e/0x1b0 [ 919.404453][T27020] ? netlink_deliver_tap+0x2e/0x1b0 [ 919.404485][T27020] netlink_unicast+0x7bd/0x940 [ 919.404519][T27020] netlink_sendmsg+0x813/0xb40 [ 919.404555][T27020] ? __pfx_netlink_sendmsg+0x10/0x10 [ 919.404590][T27020] ? apparmor_socket_sendmsg+0x18b/0x360 [ 919.404619][T27020] ? __pfx_netlink_sendmsg+0x10/0x10 [ 919.404645][T27020] sock_sendmsg_nosec+0x14e/0x190 [ 919.404674][T27020] ____sys_sendmsg+0x54e/0x850 [ 919.404700][T27020] ? __pfx_____sys_sendmsg+0x10/0x10 [ 919.404730][T27020] ? import_iovec+0x73/0xa0 [ 919.404764][T27020] ___sys_sendmsg+0x2a5/0x360 [ 919.404784][T27020] ? __lock_acquire+0x747/0x2de0 [ 919.404810][T27020] ? __pfx____sys_sendmsg+0x10/0x10 [ 919.404871][T27020] ? __fget_files+0x2a/0x420 [ 919.404911][T27020] ? __fget_files+0x3a2/0x420 [ 919.404966][T27020] __x64_sys_sendmsg+0x1b1/0x290 [ 919.404999][T27020] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 919.405057][T27020] do_syscall_64+0x166/0x520 [ 919.405091][T27020] ? trace_irq_disable+0x3b/0x140 [ 919.405114][T27020] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 919.405135][T27020] ? clear_bhb_loop+0x70/0xc0 [ 919.405160][T27020] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 919.405180][T27020] RIP: 0033:0x7f9901f9e2d9 [ 919.405199][T27020] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 919.405217][T27020] RSP: 002b:00007f9902e39028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 919.405238][T27020] RAX: ffffffffffffffda RBX: 00007f9902225fa0 RCX: 00007f9901f9e2d9 [ 919.405254][T27020] RDX: 0000000030004884 RSI: 0000200000000b00 RDI: 0000000000000003 [ 919.405267][T27020] RBP: 00007f9902e39090 R08: 0000000000000000 R09: 0000000000000000 [ 919.405280][T27020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 919.405292][T27020] R13: 00007f9902226038 R14: 00007f9902225fa0 R15: 00007fff3f951ed8 [ 919.405324][T27020] [ 919.423459][ T4985] udevd[4985]: worker [25368] /devices/virtual/block/nbd1 is taking a long time [ 919.871797][T27014] 8021q: adding VLAN 0 to HW filter on device bond20 [ 920.462991][T27040] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 920.635931][T27036] __nla_validate_parse: 3 callbacks suppressed [ 920.635958][T27036] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6403'. [ 920.789432][T27045] bond21: entered promiscuous mode [ 920.864250][T27051] netlink: 'syz.0.6413': attribute type 1 has an invalid length. [ 920.864278][T27051] netlink: 'syz.0.6413': attribute type 2 has an invalid length. [ 922.013747][T27075] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6423'. [ 922.254097][T27084] netlink: 'syz.3.6428': attribute type 10 has an invalid length. [ 922.258100][T27085] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6429'. [ 922.313195][T27089] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6426'. [ 922.581017][ T1268] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 922.784493][T27090] vlan3: entered allmulticast mode [ 923.298978][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 923.299223][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 923.299436][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 923.926371][T27114] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6435'. [ 923.978429][T27114] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6435'. [ 924.015594][T27116] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6436'. [ 924.062631][T27118] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 924.064508][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 924.136677][T27119] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6435'. [ 924.936044][T27135] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 925.113905][T27148] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6443'. [ 925.461980][T27146] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6443'. [ 925.650350][T27163] netlink: 'syz.3.6448': attribute type 1 has an invalid length. [ 925.727186][T27163] __nla_validate_parse: 2 callbacks suppressed [ 925.727211][T27163] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6448'. [ 925.921389][T27167] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6448'. [ 925.921427][T27167] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 926.805360][T27206] vcan0: entered allmulticast mode [ 926.806228][T27206] vcan0: left allmulticast mode [ 927.020294][T27214] FAULT_INJECTION: forcing a failure. [ 927.020294][T27214] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 927.020334][T27214] CPU: 0 UID: 0 PID: 27214 Comm: syz.2.6467 Not tainted syzkaller #0 PREEMPT(full) [ 927.020360][T27214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 927.020375][T27214] Call Trace: [ 927.020385][T27214] [ 927.020396][T27214] dump_stack_lvl+0xe8/0x150 [ 927.020436][T27214] should_fail_ex+0x410/0x560 [ 927.020474][T27214] prepare_alloc_pages+0x223/0x600 [ 927.020511][T27214] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 927.020551][T27214] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 927.020585][T27214] ? __pfx_policy_nodemask+0x10/0x10 [ 927.020616][T27214] ? __lock_acquire+0x747/0x2de0 [ 927.020652][T27214] alloc_pages_mpol+0x21e/0x390 [ 927.020692][T27214] alloc_pages_noprof+0xb1/0x2b0 [ 927.020728][T27214] pte_alloc_one+0x22/0x370 [ 927.020759][T27214] __pte_alloc+0x25/0x1a0 [ 927.020791][T27214] do_pte_missing+0x2db7/0x34b0 [ 927.020837][T27214] handle_mm_fault+0x1a53/0x3750 [ 927.020873][T27214] ? mt_find+0x186/0x630 [ 927.020996][T27214] ? handle_mm_fault+0xf1/0x3750 [ 927.021044][T27214] ? __pfx_handle_mm_fault+0x10/0x10 [ 927.021108][T27214] __get_user_pages+0x1675/0x2750 [ 927.021187][T27214] __gup_longterm_locked+0xd52/0x15c0 [ 927.021226][T27214] ? lock_acquire+0x115/0x350 [ 927.021253][T27214] ? gup_fast_fallback+0x20d/0x20e0 [ 927.021289][T27214] ? sanity_check_pinned_pages+0x817/0x8d0 [ 927.021329][T27214] gup_fast_fallback+0x1d92/0x20e0 [ 927.021399][T27214] ? __pfx_gup_fast_fallback+0x10/0x10 [ 927.021432][T27214] ? rds_info_getsockopt+0x254/0x730 [ 927.021519][T27214] ? rcu_is_watching+0x16/0xb0 [ 927.021547][T27214] ? is_valid_gup_args+0x11f/0x200 [ 927.021583][T27214] ? pin_user_pages_fast+0x4d/0xb0 [ 927.021618][T27214] iov_iter_extract_pages+0x3a1/0x690 [ 927.021665][T27214] rds_info_getsockopt+0x289/0x730 [ 927.021705][T27214] ? __pfx_rds_info_getsockopt+0x10/0x10 [ 927.021765][T27214] rds_getsockopt+0x38b/0x600 [ 927.021799][T27214] ? __pfx_rds_getsockopt+0x10/0x10 [ 927.021838][T27214] do_sock_getsockopt+0x40c/0x640 [ 927.021870][T27214] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 927.021911][T27214] ? __fget_files+0x2a/0x420 [ 927.021944][T27214] ? __fget_files+0x3a2/0x420 [ 927.021978][T27214] ? __fget_files+0x2a/0x420 [ 927.022020][T27214] __x64_sys_getsockopt+0x1a4/0x240 [ 927.022055][T27214] do_syscall_64+0x166/0x520 [ 927.022085][T27214] ? trace_irq_disable+0x3b/0x140 [ 927.022109][T27214] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 927.022133][T27214] ? clear_bhb_loop+0x70/0xc0 [ 927.022163][T27214] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 927.022193][T27214] RIP: 0033:0x7f1cbd19e2d9 [ 927.022215][T27214] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 927.022235][T27214] RSP: 002b:00007f1cbdf88028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 927.022260][T27214] RAX: ffffffffffffffda RBX: 00007f1cbd426090 RCX: 00007f1cbd19e2d9 [ 927.022278][T27214] RDX: 000000000000271c RSI: 0000200000000114 RDI: 000000000000000d [ 927.022293][T27214] RBP: 00007f1cbdf88090 R08: 0000200000000000 R09: 0000000000000000 [ 927.022308][T27214] R10: 0000200000c35fff R11: 0000000000000246 R12: 0000000000000001 [ 927.022323][T27214] R13: 00007f1cbd426128 R14: 00007f1cbd426090 R15: 00007ffe79797398 [ 927.022360][T27214] [ 927.396267][T27218] ip_tables: iptables: counters copy to user failed while replacing table [ 927.436316][T27219] netlink: 'syz.3.6465': attribute type 49 has an invalid length. [ 927.512639][T27219] netlink: 128 bytes leftover after parsing attributes in process `syz.3.6465'. [ 928.227289][T27246] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 928.309335][T27247] netlink: 'syz.3.6479': attribute type 2 has an invalid length. [ 928.309363][T27247] nbd: illegal input index -2130444284 [ 928.366368][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 928.931379][T27273] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6488'. [ 928.974519][T27272] vlan3: entered allmulticast mode [ 929.131588][T27278] netlink: 'syz.2.6490': attribute type 10 has an invalid length. [ 929.176201][T27277] netlink: 'syz.1.6489': attribute type 46 has an invalid length. [ 929.411954][T27280] 8021q: adding VLAN 0 to HW filter on device bond27 [ 929.637096][T27288] ip6gretap2: entered allmulticast mode [ 929.905655][T27294] netlink: 200 bytes leftover after parsing attributes in process `syz.0.6495'. [ 929.955672][T27290] vcan0: entered allmulticast mode [ 929.956164][T27290] vcan0: left allmulticast mode [ 929.957576][T27295] netlink: 964 bytes leftover after parsing attributes in process `syz.3.6496'. [ 929.957602][T27295] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 930.357004][T27303] SET target dimension over the limit! [ 930.610894][T27316] FAULT_INJECTION: forcing a failure. [ 930.610894][T27316] name failslab, interval 1, probability 0, space 0, times 0 [ 930.610938][T27316] CPU: 1 UID: 0 PID: 27316 Comm: syz.1.6502 Not tainted syzkaller #0 PREEMPT(full) [ 930.610984][T27316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 930.611009][T27316] Call Trace: [ 930.611024][T27316] [ 930.611036][T27316] dump_stack_lvl+0xe8/0x150 [ 930.611082][T27316] should_fail_ex+0x410/0x560 [ 930.611125][T27316] should_failslab+0xa8/0x100 [ 930.611162][T27316] ? ptlock_alloc+0x20/0x70 [ 930.611201][T27316] kmem_cache_alloc_noprof+0xa1/0x600 [ 930.611232][T27316] ? ptlock_alloc+0x20/0x70 [ 930.611280][T27316] ptlock_alloc+0x20/0x70 [ 930.611320][T27316] pte_alloc_one+0x7a/0x370 [ 930.611355][T27316] __pte_alloc+0x25/0x1a0 [ 930.611390][T27316] do_pte_missing+0x2db7/0x34b0 [ 930.611444][T27316] handle_mm_fault+0x1a53/0x3750 [ 930.611482][T27316] ? mt_find+0x186/0x630 [ 930.611542][T27316] ? handle_mm_fault+0xf1/0x3750 [ 930.611595][T27316] ? __pfx_handle_mm_fault+0x10/0x10 [ 930.611670][T27316] __get_user_pages+0x1675/0x2750 [ 930.611752][T27316] __gup_longterm_locked+0xd52/0x15c0 [ 930.611795][T27316] ? lock_acquire+0x115/0x350 [ 930.611825][T27316] ? gup_fast_fallback+0x20d/0x20e0 [ 930.611865][T27316] ? sanity_check_pinned_pages+0x817/0x8d0 [ 930.611910][T27316] gup_fast_fallback+0x1d92/0x20e0 [ 930.611988][T27316] ? __pfx_gup_fast_fallback+0x10/0x10 [ 930.612025][T27316] ? rds_info_getsockopt+0x254/0x730 [ 930.612063][T27316] ? rcu_is_watching+0x16/0xb0 [ 930.612095][T27316] ? is_valid_gup_args+0x11f/0x200 [ 930.612135][T27316] ? pin_user_pages_fast+0x4d/0xb0 [ 930.612176][T27316] iov_iter_extract_pages+0x3a1/0x690 [ 930.612229][T27316] rds_info_getsockopt+0x289/0x730 [ 930.612274][T27316] ? __pfx_rds_info_getsockopt+0x10/0x10 [ 930.612341][T27316] rds_getsockopt+0x38b/0x600 [ 930.612377][T27316] ? __pfx_rds_getsockopt+0x10/0x10 [ 930.612422][T27316] do_sock_getsockopt+0x40c/0x640 [ 930.612458][T27316] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 930.612505][T27316] ? __fget_files+0x2a/0x420 [ 930.612590][T27316] ? __fget_files+0x3a2/0x420 [ 930.612630][T27316] ? __fget_files+0x2a/0x420 [ 930.612677][T27316] __x64_sys_getsockopt+0x1a4/0x240 [ 930.612715][T27316] do_syscall_64+0x166/0x520 [ 930.612749][T27316] ? trace_irq_disable+0x3b/0x140 [ 930.612775][T27316] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 930.612802][T27316] ? clear_bhb_loop+0x70/0xc0 [ 930.612834][T27316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 930.612860][T27316] RIP: 0033:0x7f9901f9e2d9 [ 930.612884][T27316] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 930.612905][T27316] RSP: 002b:00007f9902e18028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 930.612932][T27316] RAX: ffffffffffffffda RBX: 00007f9902226090 RCX: 00007f9901f9e2d9 [ 930.612951][T27316] RDX: 000000000000271c RSI: 0000200000000114 RDI: 000000000000000d [ 930.612968][T27316] RBP: 00007f9902e18090 R08: 0000200000000000 R09: 0000000000000000 [ 930.612986][T27316] R10: 0000200000c35fff R11: 0000000000000246 R12: 0000000000000001 [ 930.613002][T27316] R13: 00007f9902226128 R14: 00007f9902226090 R15: 00007fff3f951ed8 [ 930.613044][T27316] [ 931.175350][T27319] bond22: entered promiscuous mode [ 931.175866][T27319] 8021q: adding VLAN 0 to HW filter on device bond22 [ 931.473249][T27325] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6506'. [ 931.493581][T27332] netlink: 'syz.0.6507': attribute type 1 has an invalid length. [ 931.510568][T27325] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6506'. [ 931.646491][T27333] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 931.647741][T27336] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 931.883947][T27346] vcan0: entered allmulticast mode [ 931.884925][T27338] vcan0: left allmulticast mode [ 931.885236][T27347] netlink: 72 bytes leftover after parsing attributes in process `syz.0.6513'. [ 931.888494][T27344] syzkaller1: entered promiscuous mode [ 931.894419][T27344] syzkaller1: entered allmulticast mode [ 932.256435][T27353] syzkaller0: entered promiscuous mode [ 932.256463][T27353] syzkaller0: entered allmulticast mode [ 932.604694][T27370] nbd: must specify a size in bytes for the device [ 932.657833][T27374] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 932.658107][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 932.675343][T27374] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 932.675606][ T5622] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 932.675652][ T5622] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 932.837251][T27380] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6526'. [ 933.078598][T27391] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6528'. [ 933.185364][T27391] macvlan3: entered allmulticast mode [ 933.445436][T27397] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 933.477437][T27397] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6530'. [ 933.593445][T27403] net_ratelimit: 3 callbacks suppressed [ 933.593470][T27403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 933.593794][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 934.144240][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 934.147497][T27415] netlink: 92 bytes leftover after parsing attributes in process `syz.1.6537'. [ 934.295781][T27419] syzkaller0: left promiscuous mode [ 934.295972][T27419] syzkaller0: left allmulticast mode [ 934.409304][T27421] netlink: 128 bytes leftover after parsing attributes in process `syz.0.6540'. [ 934.409338][T27421] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6540'. [ 934.409356][T27421] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6540'. [ 934.958413][T27436] tipc: Enabled bearer , priority 0 [ 935.053837][T27436] tipc: Disabling bearer [ 936.512763][T27477] __nla_validate_parse: 2 callbacks suppressed [ 936.513285][T27477] netlink: 72 bytes leftover after parsing attributes in process `syz.0.6559'. [ 936.513796][T27474] macvlan4: entered allmulticast mode [ 936.732812][T27486] netlink: 'syz.0.6562': attribute type 10 has an invalid length. [ 937.057847][T27494] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6564'. [ 937.441881][T27505] IPVS: mh: UDP 127.0.0.1:20000 - no destination available [ 937.442201][T27505] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 937.497668][T27504] gtp1: entered promiscuous mode [ 937.497692][T27504] gtp1: entered allmulticast mode [ 937.936318][T27519] bond17: entered promiscuous mode [ 938.082371][T27527] 8021q: adding VLAN 0 to HW filter on device bond18 [ 938.780944][T27557] FAULT_INJECTION: forcing a failure. [ 938.780944][T27557] name failslab, interval 1, probability 0, space 0, times 0 [ 938.780983][T27557] CPU: 0 UID: 0 PID: 27557 Comm: syz.4.6586 Not tainted syzkaller #0 PREEMPT(full) [ 938.781009][T27557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 938.781024][T27557] Call Trace: [ 938.781035][T27557] [ 938.781045][T27557] dump_stack_lvl+0xe8/0x150 [ 938.781085][T27557] should_fail_ex+0x410/0x560 [ 938.781122][T27557] ? __alloc_skb+0x1db/0x7a0 [ 938.781157][T27557] should_failslab+0xa8/0x100 [ 938.781192][T27557] ? __alloc_skb+0x1db/0x7a0 [ 938.781224][T27557] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 938.781250][T27557] ? __alloc_skb+0x18d/0x7a0 [ 938.781285][T27557] ? __alloc_skb+0x1db/0x7a0 [ 938.781326][T27557] __alloc_skb+0x1db/0x7a0 [ 938.781367][T27557] netlink_sendmsg+0x5d4/0xb40 [ 938.781411][T27557] ? __pfx_netlink_sendmsg+0x10/0x10 [ 938.781453][T27557] ? apparmor_socket_sendmsg+0x98/0x360 [ 938.781487][T27557] ? __pfx_netlink_sendmsg+0x10/0x10 [ 938.781517][T27557] sock_sendmsg_nosec+0x14e/0x190 [ 938.781551][T27557] ____sys_sendmsg+0x54e/0x850 [ 938.781582][T27557] ? __pfx_____sys_sendmsg+0x10/0x10 [ 938.781618][T27557] ? import_iovec+0x73/0xa0 [ 938.781657][T27557] ___sys_sendmsg+0x2a5/0x360 [ 938.781680][T27557] ? __lock_acquire+0x747/0x2de0 [ 938.781711][T27557] ? __pfx____sys_sendmsg+0x10/0x10 [ 938.781776][T27557] ? __fget_files+0x2a/0x420 [ 938.781810][T27557] ? __fget_files+0x3a2/0x420 [ 938.781871][T27557] __x64_sys_sendmsg+0x1b1/0x290 [ 938.781907][T27557] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 938.781959][T27557] do_syscall_64+0x166/0x520 [ 938.781991][T27557] ? trace_irq_disable+0x3b/0x140 [ 938.782016][T27557] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 938.782041][T27557] ? clear_bhb_loop+0x70/0xc0 [ 938.782071][T27557] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 938.782095][T27557] RIP: 0033:0x7f4d6f19e2d9 [ 938.782117][T27557] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 938.782137][T27557] RSP: 002b:00007f4d70004028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 938.782163][T27557] RAX: ffffffffffffffda RBX: 00007f4d6f425fa0 RCX: 00007f4d6f19e2d9 [ 938.782181][T27557] RDX: 0000000000040050 RSI: 0000200000000740 RDI: 0000000000000003 [ 938.782197][T27557] RBP: 00007f4d70004090 R08: 0000000000000000 R09: 0000000000000000 [ 938.782212][T27557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 938.782225][T27557] R13: 00007f4d6f426038 R14: 00007f4d6f425fa0 R15: 00007ffd98887588 [ 938.782261][T27557] [ 939.019781][T27559] netlink: 'syz.1.6587': attribute type 10 has an invalid length. [ 939.101786][T27562] netlink: 'syz.1.6587': attribute type 10 has an invalid length. [ 939.296366][T27563] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6588'. [ 939.525181][T27570] FAULT_INJECTION: forcing a failure. [ 939.525181][T27570] name failslab, interval 1, probability 0, space 0, times 0 [ 939.525220][T27570] CPU: 1 UID: 0 PID: 27570 Comm: syz.4.6591 Not tainted syzkaller #0 PREEMPT(full) [ 939.525246][T27570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 939.525261][T27570] Call Trace: [ 939.525270][T27570] [ 939.525281][T27570] dump_stack_lvl+0xe8/0x150 [ 939.525321][T27570] should_fail_ex+0x410/0x560 [ 939.525359][T27570] should_failslab+0xa8/0x100 [ 939.525393][T27570] __kmalloc_node_track_caller_noprof+0xfb/0x720 [ 939.525427][T27570] ? ovs_nla_get_match+0x3b1/0x1840 [ 939.525460][T27570] ? ovs_nla_get_match+0x3b1/0x1840 [ 939.525500][T27570] kmemdup_noprof+0x2b/0x70 [ 939.525531][T27570] ovs_nla_get_match+0x3b1/0x1840 [ 939.525579][T27570] ? __pfx_ovs_nla_get_match+0x10/0x10 [ 939.525640][T27570] ? __kasan_kmalloc+0x93/0xb0 [ 939.525671][T27570] ? __kmalloc_cache_noprof+0x321/0x600 [ 939.525702][T27570] ? __asan_memset+0x22/0x50 [ 939.525732][T27570] ovs_flow_cmd_new+0x3a5/0xea0 [ 939.525771][T27570] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 939.525858][T27570] ? __kmalloc_noprof+0x38c/0x720 [ 939.525887][T27570] ? __nla_parse+0x40/0x60 [ 939.525933][T27570] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 939.525959][T27570] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 939.525994][T27570] genl_family_rcv_msg_doit+0x233/0x340 [ 939.526026][T27570] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 939.526066][T27570] ? bpf_lsm_capable+0x9/0x20 [ 939.526090][T27570] ? security_capable+0x7e/0x2c0 [ 939.526132][T27570] genl_rcv_msg+0x614/0x7a0 [ 939.526164][T27570] ? __pfx_genl_rcv_msg+0x10/0x10 [ 939.526187][T27570] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 939.526232][T27570] netlink_rcv_skb+0x226/0x4a0 [ 939.526264][T27570] ? __pfx_genl_rcv_msg+0x10/0x10 [ 939.526289][T27570] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 939.526338][T27570] ? down_read+0x2be/0x330 [ 939.526377][T27570] genl_rcv+0x28/0x40 [ 939.526398][T27570] netlink_unicast+0x7bd/0x940 [ 939.526441][T27570] netlink_sendmsg+0x813/0xb40 [ 939.526483][T27570] ? __pfx_netlink_sendmsg+0x10/0x10 [ 939.526523][T27570] ? apparmor_socket_sendmsg+0x98/0x360 [ 939.526556][T27570] ? __pfx_netlink_sendmsg+0x10/0x10 [ 939.526586][T27570] sock_sendmsg_nosec+0x14e/0x190 [ 939.526620][T27570] ____sys_sendmsg+0x54e/0x850 [ 939.526651][T27570] ? __pfx_____sys_sendmsg+0x10/0x10 [ 939.526687][T27570] ? import_iovec+0x73/0xa0 [ 939.526726][T27570] ___sys_sendmsg+0x2a5/0x360 [ 939.526749][T27570] ? __lock_acquire+0x747/0x2de0 [ 939.526779][T27570] ? __pfx____sys_sendmsg+0x10/0x10 [ 939.526846][T27570] ? __fget_files+0x2a/0x420 [ 939.526880][T27570] ? __fget_files+0x3a2/0x420 [ 939.526934][T27570] __x64_sys_sendmsg+0x1b1/0x290 [ 939.526963][T27570] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 939.527014][T27570] do_syscall_64+0x166/0x520 [ 939.527045][T27570] ? trace_irq_disable+0x3b/0x140 [ 939.527070][T27570] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 939.527094][T27570] ? clear_bhb_loop+0x70/0xc0 [ 939.527123][T27570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 939.527146][T27570] RIP: 0033:0x7f4d6f19e2d9 [ 939.527168][T27570] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 939.527188][T27570] RSP: 002b:00007f4d70004028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 939.527213][T27570] RAX: ffffffffffffffda RBX: 00007f4d6f425fa0 RCX: 00007f4d6f19e2d9 [ 939.527231][T27570] RDX: 000000000000e800 RSI: 00002000000001c0 RDI: 0000000000000003 [ 939.527247][T27570] RBP: 00007f4d70004090 R08: 0000000000000000 R09: 0000000000000000 [ 939.527262][T27570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 939.527277][T27570] R13: 00007f4d6f426038 R14: 00007f4d6f425fa0 R15: 00007ffd98887588 [ 939.527314][T27570] [ 939.728563][T27572] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6592'. [ 939.867738][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 940.327927][T27577] bond23: option packets_per_slave: invalid value (18446744073709486848) [ 940.327958][T27577] bond23: option packets_per_slave: allowed values 0 - 65535 [ 940.358604][T27577] bond23 (unregistering): Released all slaves [ 940.528321][T27582] batman_adv: batadv0: Adding interface: syzkaller0 [ 940.528344][T27582] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 940.528570][T27582] batman_adv: batadv0: Interface activated: syzkaller0 [ 940.898132][T27594] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 941.040911][T27597] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 941.376308][T27602] bond28: option packets_per_slave: invalid value (134217728) [ 941.376340][T27602] bond28: option packets_per_slave: allowed values 0 - 65535 [ 941.424986][T27602] bond28 (unregistering): Released all slaves [ 941.602336][T27610] vlan6: entered allmulticast mode [ 941.938773][T27622] Bluetooth: hci0: invalid length 0, exp 2 for type 20 [ 942.078393][T27625] netlink: 'syz.1.6614': attribute type 24 has an invalid length. [ 942.137928][T27630] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6616'. [ 942.196839][T27632] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6617'. [ 943.004742][T27658] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6624'. [ 943.301575][T27662] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6627'. [ 943.550409][T27669] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6630'. [ 943.631683][T27672] netlink: 108 bytes leftover after parsing attributes in process `syz.3.6631'. [ 943.632481][T27673] netlink: Conntrack attr type has unexpected length (type=0, length=2, expected=0) [ 943.632522][T27673] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 943.634052][T27672] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6631'. [ 943.746583][ T4949] block nbd1: Possible stuck request ffff888027d07000: control (read@0,4096B). Runtime 90 seconds [ 943.996513][T27681] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6634'. [ 944.029725][T27684] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 944.029980][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 944.032697][T27684] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 944.032935][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 944.175043][T27690] bond28: entered promiscuous mode [ 944.210240][T27693] ip6gretap0: entered promiscuous mode [ 944.215852][T27693] macsec2: entered allmulticast mode [ 944.215878][T27693] ip6gretap0: entered allmulticast mode [ 944.230416][T27695] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6639'. [ 944.835711][T27710] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 945.442674][T27720] netlink: 'syz.3.6646': attribute type 11 has an invalid length. [ 945.448461][T27720] netlink: Conntrack attr type has unexpected length (type=0, length=2, expected=0) [ 945.448506][T27720] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 945.620805][ T2354] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 946.001079][T27740] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6651'. [ 946.287082][T27746] netlink: 'syz.3.6653': attribute type 219 has an invalid length. [ 946.864438][T27767] netlink: Conntrack attr type has unexpected length (type=0, length=2, expected=0) [ 946.864483][T27767] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 947.015415][T27775] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 947.242775][T27774] ip_tables: iptables: counters copy to user failed while replacing table [ 947.394201][T27789] bond22: entered promiscuous mode [ 947.574005][T27794] bond23: option packets_per_slave: invalid value (134217728) [ 947.574035][T27794] bond23: option packets_per_slave: allowed values 0 - 65535 [ 947.673111][T27794] bond23 (unregistering): Released all slaves [ 947.955670][T27798] Bluetooth: hci0: unsupported parameter 5161 [ 947.955695][T27798] Bluetooth: hci0: unsupported parameter 8192 [ 947.955710][T27798] Bluetooth: hci0: unsupported parameter 5161 [ 947.955725][T27798] Bluetooth: hci0: unsupported parameter 8192 [ 948.371110][T27807] __nla_validate_parse: 3 callbacks suppressed [ 948.371137][T27807] netlink: 72 bytes leftover after parsing attributes in process `syz.4.6671'. [ 951.379731][ T152] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 951.718282][T27833] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6681'. [ 951.782226][T27834] 8021q: adding VLAN 0 to HW filter on device bond19 [ 952.234191][T27854] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6684'. [ 952.482854][T27862] netlink: 200 bytes leftover after parsing attributes in process `syz.2.6689'. [ 953.018718][T27874] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6692'. [ 953.253987][T27880] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6694'. [ 953.548408][T27889] SET target dimension over the limit! [ 953.618624][T27893] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6701'. [ 953.867530][T27904] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6702'. [ 953.935568][T27900] bond23: option packets_per_slave: invalid value (134217728) [ 953.935600][T27900] bond23: option packets_per_slave: allowed values 0 - 65535 [ 953.979285][T27900] bond23 (unregistering): Released all slaves [ 954.173731][T27904] macvlan4: entered allmulticast mode [ 954.483863][T27915] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6708'. [ 954.502856][T27915] netlink: 116 bytes leftover after parsing attributes in process `syz.4.6708'. [ 954.611048][T27921] netlink: 72 bytes leftover after parsing attributes in process `syz.2.6710'. [ 954.611079][T27921] netlink: 72 bytes leftover after parsing attributes in process `syz.2.6710'. [ 954.770408][T27926] 8021q: adding VLAN 0 to HW filter on device bond23 [ 955.077406][T27934] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6713'. [ 955.232286][T27937] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6714'. [ 955.313886][T27948] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6714'. [ 955.430702][T27947] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 955.851891][T27959] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 956.782098][T27984] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6725'. [ 957.147536][ T152] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 957.435645][T27995] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 957.436067][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 958.501227][T28008] netlink: Conntrack attr type has unexpected length (type=0, length=2, expected=0) [ 958.501272][T28008] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 958.501364][T28008] FAULT_INJECTION: forcing a failure. [ 958.501364][T28008] name failslab, interval 1, probability 0, space 0, times 0 [ 958.501441][T28008] CPU: 0 UID: 0 PID: 28008 Comm: syz.4.6730 Not tainted syzkaller #0 PREEMPT(full) [ 958.501468][T28008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 958.501483][T28008] Call Trace: [ 958.501493][T28008] [ 958.501504][T28008] dump_stack_lvl+0xe8/0x150 [ 958.501544][T28008] should_fail_ex+0x410/0x560 [ 958.501587][T28008] ? __alloc_skb+0x1db/0x7a0 [ 958.501624][T28008] should_failslab+0xa8/0x100 [ 958.501659][T28008] ? __alloc_skb+0x1db/0x7a0 [ 958.501692][T28008] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 958.501719][T28008] ? __alloc_skb+0x18d/0x7a0 [ 958.501757][T28008] ? __alloc_skb+0x1db/0x7a0 [ 958.501801][T28008] __alloc_skb+0x1db/0x7a0 [ 958.501840][T28008] netlink_ack+0x136/0xb30 [ 958.501869][T28008] ? __pfx_genl_rcv_msg+0x10/0x10 [ 958.501913][T28008] netlink_rcv_skb+0x2a4/0x4a0 [ 958.501946][T28008] ? __pfx_genl_rcv_msg+0x10/0x10 [ 958.501971][T28008] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 958.502021][T28008] ? down_read+0x2be/0x330 [ 958.502060][T28008] genl_rcv+0x28/0x40 [ 958.502081][T28008] netlink_unicast+0x7bd/0x940 [ 958.502124][T28008] netlink_sendmsg+0x813/0xb40 [ 958.502167][T28008] ? __pfx_netlink_sendmsg+0x10/0x10 [ 958.502209][T28008] ? apparmor_socket_sendmsg+0x98/0x360 [ 958.502243][T28008] ? __pfx_netlink_sendmsg+0x10/0x10 [ 958.502274][T28008] sock_sendmsg_nosec+0x14e/0x190 [ 958.502310][T28008] ____sys_sendmsg+0x54e/0x850 [ 958.502343][T28008] ? __pfx_____sys_sendmsg+0x10/0x10 [ 958.502379][T28008] ? import_iovec+0x73/0xa0 [ 958.502419][T28008] ___sys_sendmsg+0x2a5/0x360 [ 958.502443][T28008] ? __lock_acquire+0x747/0x2de0 [ 958.502475][T28008] ? __pfx____sys_sendmsg+0x10/0x10 [ 958.502542][T28008] ? __fget_files+0x2a/0x420 [ 958.502584][T28008] ? __fget_files+0x3a2/0x420 [ 958.502639][T28008] __x64_sys_sendmsg+0x1b1/0x290 [ 958.502669][T28008] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 958.502721][T28008] do_syscall_64+0x166/0x520 [ 958.502754][T28008] ? trace_irq_disable+0x3b/0x140 [ 958.502780][T28008] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 958.502806][T28008] ? clear_bhb_loop+0x70/0xc0 [ 958.502835][T28008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 958.502860][T28008] RIP: 0033:0x7f4d6f19e2d9 [ 958.502883][T28008] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 958.502904][T28008] RSP: 002b:00007f4d70004028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 958.502930][T28008] RAX: ffffffffffffffda RBX: 00007f4d6f425fa0 RCX: 00007f4d6f19e2d9 [ 958.502948][T28008] RDX: 000000000000e800 RSI: 00002000000001c0 RDI: 0000000000000003 [ 958.502964][T28008] RBP: 00007f4d70004090 R08: 0000000000000000 R09: 0000000000000000 [ 958.502980][T28008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 958.502995][T28008] R13: 00007f4d6f426038 R14: 00007f4d6f425fa0 R15: 00007ffd98887588 [ 958.503033][T28008] [ 959.619219][T28015] __nla_validate_parse: 2 callbacks suppressed [ 959.619246][T28015] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6732'. [ 959.675750][T28019] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6732'. [ 959.740506][T28020] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6733'. [ 960.295341][T28031] netlink: 68 bytes leftover after parsing attributes in process `syz.4.6737'. [ 960.685697][T28046] sctp: [Deprecated]: syz.4.6741 (pid 28046) Use of int in max_burst socket option. [ 960.685697][T28046] Use struct sctp_assoc_value instead [ 960.913868][T28055] syzkaller1: entered promiscuous mode [ 960.913895][T28055] syzkaller1: entered allmulticast mode [ 961.240815][T28060] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6746'. [ 961.241378][T28058] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6747'. [ 961.300392][T28062] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6747'. [ 961.634993][T28075] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6749'. [ 962.137597][T28082] netlink: 104 bytes leftover after parsing attributes in process `syz.1.6751'. [ 962.193683][T28084] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6752'. [ 962.910237][ T2354] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 963.047154][T28111] syzkaller1: entered promiscuous mode [ 963.047184][T28111] syzkaller1: entered allmulticast mode [ 963.739660][T28140] FAULT_INJECTION: forcing a failure. [ 963.739660][T28140] name failslab, interval 1, probability 0, space 0, times 0 [ 963.739700][T28140] CPU: 0 UID: 0 PID: 28140 Comm: syz.4.6766 Not tainted syzkaller #0 PREEMPT(full) [ 963.739730][T28140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 963.739745][T28140] Call Trace: [ 963.739754][T28140] [ 963.739766][T28140] dump_stack_lvl+0xe8/0x150 [ 963.739804][T28140] should_fail_ex+0x410/0x560 [ 963.739840][T28140] should_failslab+0xa8/0x100 [ 963.739873][T28140] __kmalloc_cache_node_noprof+0xaa/0x620 [ 963.739902][T28140] ? bpf_test_run_xdp_live+0x220/0x1c20 [ 963.739934][T28140] ? page_pool_create_percpu+0x73/0xc70 [ 963.740055][T28140] ? page_pool_create_percpu+0x73/0xc70 [ 963.740097][T28140] page_pool_create_percpu+0x73/0xc70 [ 963.740130][T28140] ? page_pool_create+0xd/0x20 [ 963.740181][T28140] bpf_test_run_xdp_live+0x23a/0x1c20 [ 963.740217][T28140] ? __pfx_stack_trace_save+0x10/0x10 [ 963.740241][T28140] ? __lock_acquire+0x747/0x2de0 [ 963.740270][T28140] ? stack_depot_save_flags+0x33/0x7f0 [ 963.740316][T28140] ? kasan_save_track+0x4f/0x80 [ 963.740342][T28140] ? kasan_save_track+0x3e/0x80 [ 963.740367][T28140] ? __kasan_kmalloc+0x93/0xb0 [ 963.740394][T28140] ? __kmalloc_noprof+0x36b/0x720 [ 963.740422][T28140] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 963.740453][T28140] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 963.740521][T28140] ? lock_acquire+0x115/0x350 [ 963.740558][T28140] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 963.740600][T28140] ? _copy_from_user+0x94/0xb0 [ 963.740636][T28140] ? bpf_test_init+0x113/0x150 [ 963.740664][T28140] ? xdp_convert_md_to_buff+0x5b/0x330 [ 963.740698][T28140] bpf_prog_test_run_xdp+0x7d8/0x11d0 [ 963.740746][T28140] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 963.740784][T28140] ? __fget_files+0x2a/0x420 [ 963.740825][T28140] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 963.740858][T28140] bpf_prog_test_run+0x2c5/0x340 [ 963.740893][T28140] __sys_bpf+0xa22/0xd90 [ 963.740930][T28140] ? __pfx___sys_bpf+0x10/0x10 [ 963.740970][T28140] ? __fget_files+0x2a/0x420 [ 963.741023][T28140] ? ksys_write+0x242/0x270 [ 963.741051][T28140] ? __pfx_ksys_write+0x10/0x10 [ 963.741082][T28140] __x64_sys_bpf+0xba/0xd0 [ 963.741110][T28140] do_syscall_64+0x166/0x520 [ 963.741142][T28140] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 963.741165][T28140] ? clear_bhb_loop+0x70/0xc0 [ 963.741194][T28140] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 963.741218][T28140] RIP: 0033:0x7f4d6f19e2d9 [ 963.741240][T28140] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 963.741259][T28140] RSP: 002b:00007f4d70004028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 963.741284][T28140] RAX: ffffffffffffffda RBX: 00007f4d6f425fa0 RCX: 00007f4d6f19e2d9 [ 963.741310][T28140] RDX: 0000000000000050 RSI: 0000200000000380 RDI: 000000000000000a [ 963.741325][T28140] RBP: 00007f4d70004090 R08: 0000000000000000 R09: 0000000000000000 [ 963.741340][T28140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 963.741354][T28140] R13: 00007f4d6f426038 R14: 00007f4d6f425fa0 R15: 00007ffd98887588 [ 963.741391][T28140] [ 963.744202][T28143] netlink: 'syz.1.6765': attribute type 2 has an invalid length. [ 963.744431][T28143] netlink: 'syz.1.6765': attribute type 2 has an invalid length. [ 963.746330][T28143] netlink: 'syz.1.6765': attribute type 2 has an invalid length. [ 963.746617][T28143] netlink: 'syz.1.6765': attribute type 2 has an invalid length. [ 963.746815][T28143] netlink: 'syz.1.6765': attribute type 2 has an invalid length. [ 963.747021][T28143] netlink: 'syz.1.6765': attribute type 2 has an invalid length. [ 963.747219][T28143] netlink: 'syz.1.6765': attribute type 2 has an invalid length. [ 963.747449][T28143] netlink: 'syz.1.6765': attribute type 2 has an invalid length. [ 963.747649][T28143] netlink: 'syz.1.6765': attribute type 2 has an invalid length. [ 963.747847][T28143] netlink: 'syz.1.6765': attribute type 2 has an invalid length. [ 964.702772][T28156] bond17: option packets_per_slave: invalid value (134217728) [ 964.702801][T28156] bond17: option packets_per_slave: allowed values 0 - 65535 [ 964.706875][T28156] bond17 (unregistering): Released all slaves [ 964.766892][T28158] x_tables: duplicate underflow at hook 1 [ 965.546897][T28179] __nla_validate_parse: 4 callbacks suppressed [ 965.546921][T28179] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6776'. [ 965.628316][T28183] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6776'. [ 965.966738][T28190] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6779'. [ 966.002701][T28175] syzkaller1: entered promiscuous mode [ 966.002729][T28175] syzkaller1: entered allmulticast mode [ 966.664507][T28207] veth0_to_bond: entered promiscuous mode [ 967.576370][T28231] vcan0: entered allmulticast mode [ 967.581477][T28231] vcan0: left allmulticast mode [ 967.598285][T28235] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6793'. [ 967.641476][T28236] netlink: 72 bytes leftover after parsing attributes in process `syz.4.6794'. [ 968.027936][T28244] vlan3: entered allmulticast mode [ 968.646300][T28257] netlink: 594 bytes leftover after parsing attributes in process `syz.1.6800'. [ 968.665223][ T305] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 968.727586][T28257] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6800'. [ 968.752497][T28256] 8021q: adding VLAN 0 to HW filter on device bond29 [ 968.935866][T28259] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6799'. [ 968.935894][T28259] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6799'. [ 969.043901][T28259] veth5: entered allmulticast mode [ 969.197860][T28273] netlink: 80 bytes leftover after parsing attributes in process `syz.2.6804'. [ 969.627221][T28282] vcan0: entered allmulticast mode [ 969.628323][T28282] vcan0: left allmulticast mode [ 970.846359][T28306] 8021q: adding VLAN 0 to HW filter on device bond11 [ 970.933604][T28306] __nla_validate_parse: 2 callbacks suppressed [ 970.933632][T28306] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6816'. [ 970.933649][T28306] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6816'. [ 971.101451][T28306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 971.121387][T28306] bond11: (slave bond0): Enslaving as an active interface with a down link [ 971.218386][T28306] bond11 (unregistering): (slave bond0): Releasing active interface [ 971.274621][T28306] bond11 (unregistering): Released all slaves [ 971.342719][T28307] validate_nla: 25 callbacks suppressed [ 971.342744][T28307] netlink: 'syz.4.6816': attribute type 2 has an invalid length. [ 971.342761][T28307] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6816'. [ 971.571357][T28307] : entered promiscuous mode [ 971.572698][T28323] sch_tbf: burst 7 is lower than device bridge0 mtu (32783) ! [ 971.927371][T28327] vcan0: entered allmulticast mode [ 971.934734][T28327] vcan0: left allmulticast mode [ 972.056169][T28320] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6821'. [ 972.168908][T28332] FAULT_INJECTION: forcing a failure. [ 972.168908][T28332] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 972.168951][T28332] CPU: 0 UID: 0 PID: 28332 Comm: syz.4.6823 Not tainted syzkaller #0 PREEMPT(full) [ 972.168981][T28332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 972.168998][T28332] Call Trace: [ 972.169009][T28332] [ 972.169022][T28332] dump_stack_lvl+0xe8/0x150 [ 972.169069][T28332] should_fail_ex+0x410/0x560 [ 972.169114][T28332] prepare_alloc_pages+0x223/0x600 [ 972.169155][T28332] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 972.169193][T28332] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 972.169233][T28332] ? __pfx_policy_nodemask+0x10/0x10 [ 972.169284][T28332] ? __lock_acquire+0x747/0x2de0 [ 972.169317][T28332] alloc_pages_mpol+0x21e/0x390 [ 972.169363][T28332] folio_alloc_mpol_noprof+0x39/0x160 [ 972.169404][T28332] vma_alloc_folio_noprof+0xe1/0x1e0 [ 972.169446][T28332] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 972.169486][T28332] ? lock_acquire+0x115/0x350 [ 972.169524][T28332] do_pte_missing+0x173a/0x34b0 [ 972.169578][T28332] handle_mm_fault+0x1a53/0x3750 [ 972.169632][T28332] ? handle_mm_fault+0xf1/0x3750 [ 972.169711][T28332] ? __pfx_handle_mm_fault+0x10/0x10 [ 972.169753][T28332] ? follow_page_pte+0x748/0xf10 [ 972.169806][T28332] ? __pfx_follow_page_pte+0x10/0x10 [ 972.169862][T28332] __get_user_pages+0x1675/0x2750 [ 972.169942][T28332] __gup_longterm_locked+0xd52/0x15c0 [ 972.169986][T28332] ? lock_acquire+0x115/0x350 [ 972.170017][T28332] ? gup_fast_fallback+0x20d/0x20e0 [ 972.170057][T28332] ? sanity_check_pinned_pages+0x817/0x8d0 [ 972.170104][T28332] gup_fast_fallback+0x1d92/0x20e0 [ 972.170184][T28332] ? __pfx_gup_fast_fallback+0x10/0x10 [ 972.170221][T28332] ? rds_info_getsockopt+0x254/0x730 [ 972.170266][T28332] ? rcu_is_watching+0x16/0xb0 [ 972.170299][T28332] ? is_valid_gup_args+0x11f/0x200 [ 972.170339][T28332] ? pin_user_pages_fast+0x4d/0xb0 [ 972.170380][T28332] iov_iter_extract_pages+0x3a1/0x690 [ 972.170433][T28332] rds_info_getsockopt+0x289/0x730 [ 972.170480][T28332] ? __pfx_rds_info_getsockopt+0x10/0x10 [ 972.170550][T28332] rds_getsockopt+0x38b/0x600 [ 972.170587][T28332] ? __pfx_rds_getsockopt+0x10/0x10 [ 972.170632][T28332] do_sock_getsockopt+0x40c/0x640 [ 972.170669][T28332] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 972.170717][T28332] ? __fget_files+0x2a/0x420 [ 972.170756][T28332] ? __fget_files+0x3a2/0x420 [ 972.170794][T28332] ? __fget_files+0x2a/0x420 [ 972.170843][T28332] __x64_sys_getsockopt+0x1a4/0x240 [ 972.170883][T28332] do_syscall_64+0x166/0x520 [ 972.170919][T28332] ? trace_irq_disable+0x3b/0x140 [ 972.170947][T28332] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 972.170975][T28332] ? clear_bhb_loop+0x70/0xc0 [ 972.171009][T28332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 972.171036][T28332] RIP: 0033:0x7f4d6f19e2d9 [ 972.171061][T28332] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 972.171084][T28332] RSP: 002b:00007f4d6ffe3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 972.171113][T28332] RAX: ffffffffffffffda RBX: 00007f4d6f426090 RCX: 00007f4d6f19e2d9 [ 972.171133][T28332] RDX: 000000000000271c RSI: 0000200000000114 RDI: 000000000000000d [ 972.171152][T28332] RBP: 00007f4d6ffe3090 R08: 0000200000000000 R09: 0000000000000000 [ 972.171170][T28332] R10: 0000200000c35fff R11: 0000000000000246 R12: 0000000000000002 [ 972.171188][T28332] R13: 00007f4d6f426128 R14: 00007f4d6f426090 R15: 00007ffd98887588 [ 972.171232][T28332] [ 972.783504][T28336] batman_adv: batadv0: Adding interface: syzkaller0 [ 972.783527][T28336] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 972.783568][T28336] batman_adv: batadv0: Interface activated: syzkaller0 [ 972.888393][T28340] vlan6: entered allmulticast mode [ 973.125373][T28343] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6827'. [ 973.751984][T28336] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 973.784007][ T4949] block nbd1: Possible stuck request ffff888027d07000: control (read@0,4096B). Runtime 120 seconds [ 973.863240][T28336] batman_adv: batadv0: Removing interface: syzkaller0 [ 974.070229][T28349] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6829'. [ 974.142991][T28352] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6829'. [ 974.423767][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 974.874463][T28373] netlink: 'syz.3.6835': attribute type 10 has an invalid length. [ 974.876409][T28370] bond30: option packets_per_slave: invalid value (134217728) [ 974.876434][T28370] bond30: option packets_per_slave: allowed values 0 - 65535 [ 974.926301][T28374] netlink: 'syz.3.6835': attribute type 10 has an invalid length. [ 974.978178][T28370] bond30 (unregistering): Released all slaves [ 975.417180][T28380] bond20: option packets_per_slave: invalid value (134217728) [ 975.417212][T28380] bond20: option packets_per_slave: allowed values 0 - 65535 [ 975.501380][T28380] bond20 (unregistering): Released all slaves [ 976.066701][T28404] netlink: Conntrack attr type has unexpected length (type=0, length=2, expected=0) [ 976.066747][T28404] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 976.109606][T28405] SET target dimension over the limit! [ 976.148073][T28406] FAULT_INJECTION: forcing a failure. [ 976.148073][T28406] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 976.148114][T28406] CPU: 0 UID: 0 PID: 28406 Comm: syz.3.6845 Not tainted syzkaller #0 PREEMPT(full) [ 976.148140][T28406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 976.148155][T28406] Call Trace: [ 976.148165][T28406] [ 976.148176][T28406] dump_stack_lvl+0xe8/0x150 [ 976.148218][T28406] should_fail_ex+0x410/0x560 [ 976.148259][T28406] prepare_alloc_pages+0x223/0x600 [ 976.148296][T28406] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 976.148339][T28406] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 976.148375][T28406] ? __pfx_policy_nodemask+0x10/0x10 [ 976.148414][T28406] ? __lock_acquire+0x747/0x2de0 [ 976.148444][T28406] alloc_pages_mpol+0x21e/0x390 [ 976.148490][T28406] folio_alloc_mpol_noprof+0x39/0x160 [ 976.148530][T28406] vma_alloc_folio_noprof+0xe1/0x1e0 [ 976.148567][T28406] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 976.148605][T28406] ? lock_acquire+0x115/0x350 [ 976.148637][T28406] do_pte_missing+0x173a/0x34b0 [ 976.148682][T28406] handle_mm_fault+0x1a53/0x3750 [ 976.148728][T28406] ? handle_mm_fault+0xf1/0x3750 [ 976.148775][T28406] ? __pfx_handle_mm_fault+0x10/0x10 [ 976.148810][T28406] ? follow_page_pte+0x748/0xf10 [ 976.148855][T28406] ? __pfx_follow_page_pte+0x10/0x10 [ 976.148902][T28406] __get_user_pages+0x1675/0x2750 [ 976.148971][T28406] __gup_longterm_locked+0xd52/0x15c0 [ 976.149009][T28406] ? lock_acquire+0x115/0x350 [ 976.149035][T28406] ? gup_fast_fallback+0x20d/0x20e0 [ 976.149067][T28406] ? sanity_check_pinned_pages+0x817/0x8d0 [ 976.149106][T28406] gup_fast_fallback+0x1d92/0x20e0 [ 976.149174][T28406] ? __pfx_gup_fast_fallback+0x10/0x10 [ 976.149205][T28406] ? rds_info_getsockopt+0x254/0x730 [ 976.149237][T28406] ? rcu_is_watching+0x16/0xb0 [ 976.149266][T28406] ? is_valid_gup_args+0x11f/0x200 [ 976.149300][T28406] ? pin_user_pages_fast+0x4d/0xb0 [ 976.149343][T28406] iov_iter_extract_pages+0x3a1/0x690 [ 976.149391][T28406] rds_info_getsockopt+0x289/0x730 [ 976.149433][T28406] ? __pfx_rds_info_getsockopt+0x10/0x10 [ 976.149495][T28406] rds_getsockopt+0x38b/0x600 [ 976.149528][T28406] ? __pfx_rds_getsockopt+0x10/0x10 [ 976.149570][T28406] do_sock_getsockopt+0x40c/0x640 [ 976.149602][T28406] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 976.149645][T28406] ? __fget_files+0x2a/0x420 [ 976.149679][T28406] ? __fget_files+0x3a2/0x420 [ 976.149712][T28406] ? __fget_files+0x2a/0x420 [ 976.149755][T28406] __x64_sys_getsockopt+0x1a4/0x240 [ 976.149790][T28406] do_syscall_64+0x166/0x520 [ 976.149821][T28406] ? trace_irq_disable+0x3b/0x140 [ 976.149847][T28406] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 976.149870][T28406] ? clear_bhb_loop+0x70/0xc0 [ 976.149899][T28406] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 976.149922][T28406] RIP: 0033:0x7f374319e2d9 [ 976.149945][T28406] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 976.149964][T28406] RSP: 002b:00007f3744054028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 976.149989][T28406] RAX: ffffffffffffffda RBX: 00007f3743426090 RCX: 00007f374319e2d9 [ 976.150007][T28406] RDX: 000000000000271c RSI: 0000200000000114 RDI: 000000000000000d [ 976.150022][T28406] RBP: 00007f3744054090 R08: 0000200000000000 R09: 0000000000000000 [ 976.150038][T28406] R10: 0000200000c35fff R11: 0000000000000246 R12: 0000000000000002 [ 976.150054][T28406] R13: 00007f3743426128 R14: 00007f3743426090 R15: 00007ffc20fd1d08 [ 976.150091][T28406] [ 976.648396][T28410] bond20: entered promiscuous mode [ 976.656249][T28411] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6849'. [ 976.719823][T28412] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6849'. [ 977.387477][T28443] syzkaller1: entered promiscuous mode [ 977.387506][T28443] syzkaller1: entered allmulticast mode [ 977.716259][T28448] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6859'. [ 977.918061][T28456] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 977.918739][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 977.952485][T28457] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6863'. [ 977.975820][T28461] netlink: 'syz.1.6864': attribute type 10 has an invalid length. [ 978.016093][T28450] netlink: 15672 bytes leftover after parsing attributes in process `syz.0.6861'. [ 978.016126][T28450] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6861'. [ 978.016147][T28450] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6861'. [ 978.016164][T28450] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6861'. [ 978.142357][T28453] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6860'. [ 978.142402][T28453] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6860'. [ 978.492826][T28471] syzkaller0: entered promiscuous mode [ 978.492853][T28471] syzkaller0: entered allmulticast mode [ 978.923379][T28490] SET target dimension over the limit! [ 979.705002][T28518] netlink: 'syz.3.6879': attribute type 10 has an invalid length. [ 979.798395][T28518] netlink: 'syz.3.6879': attribute type 10 has an invalid length. [ 979.889849][T28520] syzkaller0: entered promiscuous mode [ 979.889877][T28520] syzkaller0: entered allmulticast mode [ 979.897486][T28520] tipc: Enabled bearer , priority 0 [ 979.951636][T28519] tipc: Resetting bearer [ 980.180291][ T152] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 980.238641][T28519] tipc: Disabling bearer [ 980.868481][T28542] syzkaller1: entered promiscuous mode [ 980.868517][T28542] syzkaller1: entered allmulticast mode [ 980.887072][T28545] ip_tables: iptables: counters copy to user failed while replacing table [ 980.930404][T28542] syzkaller1: left promiscuous mode [ 980.930613][T28542] syzkaller1: left allmulticast mode [ 981.014712][T28551] No such timeout policy "syz1" [ 981.030246][T28550] No such timeout policy "syz1" [ 981.655442][T28573] netlink: 'syz.1.6895': attribute type 1 has an invalid length. [ 981.696894][T28576] FAULT_INJECTION: forcing a failure. [ 981.696894][T28576] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 981.696933][T28576] CPU: 1 UID: 0 PID: 28576 Comm: syz.2.6894 Not tainted syzkaller #0 PREEMPT(full) [ 981.696959][T28576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 981.696979][T28576] Call Trace: [ 981.696989][T28576] [ 981.697000][T28576] dump_stack_lvl+0xe8/0x150 [ 981.697038][T28576] should_fail_ex+0x410/0x560 [ 981.697075][T28576] _copy_from_iter+0x1d3/0x1660 [ 981.697117][T28576] ? __lock_acquire+0x747/0x2de0 [ 981.697143][T28576] ? __pfx__copy_from_iter+0x10/0x10 [ 981.697191][T28576] tun_get_user+0x506/0x4450 [ 981.697325][T28576] ? aa_file_perm+0x18b/0x15f0 [ 981.697367][T28576] ? aa_file_perm+0x4ed/0x15f0 [ 981.697400][T28576] ? __pfx_tun_get_user+0x10/0x10 [ 981.697432][T28576] ? __lock_acquire+0x747/0x2de0 [ 981.697459][T28576] ? kstrtoull+0x137/0x1d0 [ 981.697501][T28576] ? ref_tracker_alloc+0x172/0x530 [ 981.697532][T28576] ? lock_acquire+0x115/0x350 [ 981.697557][T28576] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 981.697591][T28576] ? lock_acquire+0x115/0x350 [ 981.697615][T28576] ? tun_get+0x1c/0x2f0 [ 981.697648][T28576] ? tun_get+0x1c/0x2f0 [ 981.697674][T28576] ? tun_get+0x1c/0x2f0 [ 981.697705][T28576] tun_chr_write_iter+0x113/0x200 [ 981.697734][T28576] vfs_write+0x612/0xba0 [ 981.697768][T28576] ? __pfx_vfs_write+0x10/0x10 [ 981.697800][T28576] ? __fget_files+0x2a/0x420 [ 981.697844][T28576] ksys_write+0x150/0x270 [ 981.697869][T28576] ? __pfx_ksys_write+0x10/0x10 [ 981.697905][T28576] do_syscall_64+0x166/0x520 [ 981.697937][T28576] ? trace_irq_disable+0x3b/0x140 [ 981.697960][T28576] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 981.697983][T28576] ? clear_bhb_loop+0x70/0xc0 [ 981.698011][T28576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 981.698032][T28576] RIP: 0033:0x7f1cbd19e2d9 [ 981.698053][T28576] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 981.698071][T28576] RSP: 002b:00007f1cbdf88028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 981.698094][T28576] RAX: ffffffffffffffda RBX: 00007f1cbd426090 RCX: 00007f1cbd19e2d9 [ 981.698111][T28576] RDX: 000000000000fdef RSI: 0000200000001c40 RDI: 0000000000000005 [ 981.698126][T28576] RBP: 00007f1cbdf88090 R08: 0000000000000000 R09: 0000000000000000 [ 981.698139][T28576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 981.698153][T28576] R13: 00007f1cbd426128 R14: 00007f1cbd426090 R15: 00007ffe79797398 [ 981.698187][T28576] [ 981.969100][T28570] syzkaller1: entered promiscuous mode [ 981.969125][T28570] syzkaller1: entered allmulticast mode [ 982.037608][T28573] 8021q: adding VLAN 0 to HW filter on device bond23 [ 982.117133][T28574] bond23: (slave veth13): Enslaving as an active interface with a down link [ 982.492405][T28594] __nla_validate_parse: 5 callbacks suppressed [ 982.492428][T28594] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6900'. [ 982.834563][T28603] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6905'. [ 982.838293][T28603] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 982.838334][T28603] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 982.993570][T28612] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6910'. [ 983.131216][T28612] ip6tnl3: entered allmulticast mode [ 983.185437][T28618] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6911'. [ 983.185473][T28618] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6911'. [ 983.282464][T28618] macvlan5: entered allmulticast mode [ 983.580495][T28632] FAULT_INJECTION: forcing a failure. [ 983.580495][T28632] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 983.580537][T28632] CPU: 1 UID: 0 PID: 28632 Comm: syz.3.6913 Not tainted syzkaller #0 PREEMPT(full) [ 983.580563][T28632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 983.580578][T28632] Call Trace: [ 983.580588][T28632] [ 983.580598][T28632] dump_stack_lvl+0xe8/0x150 [ 983.580637][T28632] should_fail_ex+0x410/0x560 [ 983.580674][T28632] _copy_to_iter+0x1e4/0x1810 [ 983.580703][T28632] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 983.580785][T28632] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 983.580814][T28632] ? __skb_try_recv_datagram+0x3de/0x4e0 [ 983.580889][T28632] ? __pfx__copy_to_iter+0x10/0x10 [ 983.580923][T28632] ? packet_recvmsg+0x294/0x1690 [ 983.580999][T28632] ? packet_recvmsg+0x294/0x1690 [ 983.581030][T28632] packet_recvmsg+0x642/0x1690 [ 983.581053][T28632] ? __lock_acquire+0x747/0x2de0 [ 983.581089][T28632] ? __pfx_packet_recvmsg+0x10/0x10 [ 983.581113][T28632] ? __pfx_aa_sk_perm+0x10/0x10 [ 983.581142][T28632] ? lock_acquire+0x115/0x350 [ 983.581169][T28632] ? aa_sock_msg_perm+0x144/0x210 [ 983.581207][T28632] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 983.581238][T28632] ? security_socket_recvmsg+0x7e/0x2c0 [ 983.581284][T28632] ? __pfx_packet_recvmsg+0x10/0x10 [ 983.581309][T28632] sock_recvmsg+0x196/0x1e0 [ 983.581344][T28632] ____sys_recvmsg+0x1e6/0x4a0 [ 983.581386][T28632] ? __pfx_____sys_recvmsg+0x10/0x10 [ 983.581429][T28632] ? import_iovec+0x73/0xa0 [ 983.581466][T28632] ___sys_recvmsg+0x213/0x5a0 [ 983.581498][T28632] ? __pfx____sys_recvmsg+0x10/0x10 [ 983.581530][T28632] ? lock_acquire+0x115/0x350 [ 983.581572][T28632] ? __fget_files+0x3a2/0x420 [ 983.581619][T28632] do_recvmmsg+0x31a/0x7f0 [ 983.581655][T28632] ? __pfx_do_recvmmsg+0x10/0x10 [ 983.581694][T28632] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 983.581728][T28632] ? __fget_files+0x3a2/0x420 [ 983.581774][T28632] __x64_sys_recvmmsg+0x198/0x250 [ 983.581804][T28632] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 983.581844][T28632] do_syscall_64+0x166/0x520 [ 983.581875][T28632] ? trace_irq_disable+0x3b/0x140 [ 983.581900][T28632] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 983.581925][T28632] ? clear_bhb_loop+0x70/0xc0 [ 983.581954][T28632] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 983.581977][T28632] RIP: 0033:0x7f374319e2d9 [ 983.581999][T28632] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 983.582019][T28632] RSP: 002b:00007f3744054028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 983.582044][T28632] RAX: ffffffffffffffda RBX: 00007f3743426090 RCX: 00007f374319e2d9 [ 983.582062][T28632] RDX: 0000000000000001 RSI: 0000200000000680 RDI: 0000000000000003 [ 983.582078][T28632] RBP: 00007f3744054090 R08: 0000000000000000 R09: 0000000000000000 [ 983.582092][T28632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 983.582107][T28632] R13: 00007f3743426128 R14: 00007f3743426090 R15: 00007ffc20fd1d08 [ 983.582144][T28632] [ 984.214871][T28641] netlink: 104 bytes leftover after parsing attributes in process `syz.4.6918'. [ 984.403481][T28655] IPVS: set_ctl: invalid protocol: 58 127.0.0.1:20001 [ 984.763411][T28665] netlink: 72 bytes leftover after parsing attributes in process `syz.3.6928'. [ 985.167762][T28671] wg2 speed is unknown, defaulting to 1000 [ 985.373699][ T152] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 985.581603][T28686] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6933'. [ 985.581827][T28686] veth0_vlan: left promiscuous mode [ 986.107522][T28711] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6937'. [ 986.107555][T28711] netlink: 'syz.2.6937': attribute type 2 has an invalid length. [ 986.107571][T28711] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6937'. [ 986.222764][T28712] syzkaller1: entered promiscuous mode [ 986.222792][T28712] syzkaller1: entered allmulticast mode [ 987.294275][T28717] syzkaller1: entered promiscuous mode [ 987.294305][T28717] syzkaller1: entered allmulticast mode [ 987.763445][T28747] __nla_validate_parse: 3 callbacks suppressed [ 987.763469][T28747] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.6948'. [ 987.794898][T28752] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.6948'. [ 988.413274][T28773] netlink: 'syz.3.6954': attribute type 24 has an invalid length. [ 988.817383][ T31] audit: type=1800 audit(1791960274.552:9): pid=28785 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.6956" name=680B20 dev="tmpfs" ino=7064 res=0 errno=0 [ 989.195058][T28787] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6958'. [ 989.262535][T28795] FAULT_INJECTION: forcing a failure. [ 989.262535][T28795] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 989.262583][T28795] CPU: 0 UID: 0 PID: 28795 Comm: syz.0.6959 Not tainted syzkaller #0 PREEMPT(full) [ 989.262610][T28795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 989.262627][T28795] Call Trace: [ 989.262637][T28795] [ 989.262648][T28795] dump_stack_lvl+0xe8/0x150 [ 989.262688][T28795] should_fail_ex+0x410/0x560 [ 989.262730][T28795] prepare_alloc_pages+0x223/0x600 [ 989.262769][T28795] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 989.262804][T28795] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 989.262840][T28795] ? __pfx_policy_nodemask+0x10/0x10 [ 989.262878][T28795] ? __lock_acquire+0x747/0x2de0 [ 989.262908][T28795] alloc_pages_mpol+0x21e/0x390 [ 989.262948][T28795] folio_alloc_mpol_noprof+0x39/0x160 [ 989.262985][T28795] vma_alloc_folio_noprof+0xe1/0x1e0 [ 989.263023][T28795] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 989.263059][T28795] ? lock_acquire+0x115/0x350 [ 989.263092][T28795] do_pte_missing+0x173a/0x34b0 [ 989.263141][T28795] handle_mm_fault+0x1a53/0x3750 [ 989.263190][T28795] ? handle_mm_fault+0xf1/0x3750 [ 989.263238][T28795] ? __pfx_handle_mm_fault+0x10/0x10 [ 989.263275][T28795] ? follow_page_pte+0x748/0xf10 [ 989.263322][T28795] ? __pfx_follow_page_pte+0x10/0x10 [ 989.263372][T28795] __get_user_pages+0x1675/0x2750 [ 989.263445][T28795] __gup_longterm_locked+0xd52/0x15c0 [ 989.263484][T28795] ? lock_acquire+0x115/0x350 [ 989.263512][T28795] ? gup_fast_fallback+0x20d/0x20e0 [ 989.263554][T28795] ? sanity_check_pinned_pages+0x817/0x8d0 [ 989.263596][T28795] gup_fast_fallback+0x1d92/0x20e0 [ 989.263669][T28795] ? __pfx_gup_fast_fallback+0x10/0x10 [ 989.263703][T28795] ? rds_info_getsockopt+0x254/0x730 [ 989.263737][T28795] ? rcu_is_watching+0x16/0xb0 [ 989.263767][T28795] ? is_valid_gup_args+0x11f/0x200 [ 989.263804][T28795] ? pin_user_pages_fast+0x4d/0xb0 [ 989.263841][T28795] iov_iter_extract_pages+0x3a1/0x690 [ 989.263889][T28795] rds_info_getsockopt+0x289/0x730 [ 989.263932][T28795] ? __pfx_rds_info_getsockopt+0x10/0x10 [ 989.263994][T28795] rds_getsockopt+0x38b/0x600 [ 989.264026][T28795] ? __pfx_rds_getsockopt+0x10/0x10 [ 989.264067][T28795] do_sock_getsockopt+0x40c/0x640 [ 989.264100][T28795] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 989.264142][T28795] ? __fget_files+0x2a/0x420 [ 989.264178][T28795] ? __fget_files+0x3a2/0x420 [ 989.264212][T28795] ? __fget_files+0x2a/0x420 [ 989.264256][T28795] __x64_sys_getsockopt+0x1a4/0x240 [ 989.264291][T28795] do_syscall_64+0x166/0x520 [ 989.264324][T28795] ? trace_irq_disable+0x3b/0x140 [ 989.264350][T28795] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 989.264375][T28795] ? clear_bhb_loop+0x70/0xc0 [ 989.264405][T28795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 989.264429][T28795] RIP: 0033:0x7fce1a99e2d9 [ 989.264451][T28795] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 989.264470][T28795] RSP: 002b:00007fce1b7f1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 989.264496][T28795] RAX: ffffffffffffffda RBX: 00007fce1ac26090 RCX: 00007fce1a99e2d9 [ 989.264514][T28795] RDX: 000000000000271c RSI: 0000200000000114 RDI: 000000000000000d [ 989.264530][T28795] RBP: 00007fce1b7f1090 R08: 0000200000000000 R09: 0000000000000000 [ 989.264574][T28795] R10: 0000200000c35fff R11: 0000000000000246 R12: 0000000000000002 [ 989.264590][T28795] R13: 00007fce1ac26128 R14: 00007fce1ac26090 R15: 00007ffc53d34658 [ 989.264629][T28795] [ 990.276184][T28802] FAULT_INJECTION: forcing a failure. [ 990.276184][T28802] name failslab, interval 1, probability 0, space 0, times 0 [ 990.276223][T28802] CPU: 0 UID: 0 PID: 28802 Comm: syz.0.6961 Not tainted syzkaller #0 PREEMPT(full) [ 990.276249][T28802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 990.276265][T28802] Call Trace: [ 990.276275][T28802] [ 990.276286][T28802] dump_stack_lvl+0xe8/0x150 [ 990.276325][T28802] should_fail_ex+0x410/0x560 [ 990.276372][T28802] should_failslab+0xa8/0x100 [ 990.276407][T28802] __kmalloc_cache_node_noprof+0xaa/0x620 [ 990.276438][T28802] ? __get_vm_area_node+0x155/0x2f0 [ 990.276474][T28802] ? __get_vm_area_node+0x155/0x2f0 [ 990.276516][T28802] __get_vm_area_node+0x155/0x2f0 [ 990.276551][T28802] ? lapic_next_event+0x11/0x20 [ 990.276583][T28802] __vmalloc_node_range_noprof+0x343/0x1540 [ 990.276609][T28802] ? do_replace+0x22f/0x470 [ 990.276702][T28802] ? irqentry_exit+0x218/0x920 [ 990.276741][T28802] ? lock_acquire+0x115/0x350 [ 990.276772][T28802] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 990.276810][T28802] ? do_replace+0x22f/0x470 [ 990.276833][T28802] __vmalloc_noprof+0xd2/0x120 [ 990.276858][T28802] ? do_replace+0x22f/0x470 [ 990.276887][T28802] do_replace+0x22f/0x470 [ 990.276917][T28802] ? __pfx_do_replace+0x10/0x10 [ 990.276957][T28802] ? bpf_lsm_capable+0x9/0x20 [ 990.276984][T28802] ? security_capable+0x7e/0x2c0 [ 990.277025][T28802] do_ebt_set_ctl+0x2fb/0x1020 [ 990.277056][T28802] ? __lock_acquire+0x747/0x2de0 [ 990.277081][T28802] ? __pfx_do_ebt_set_ctl+0x10/0x10 [ 990.277115][T28802] ? ip4_datagram_release_cb+0xa2/0xbe0 [ 990.277156][T28802] ? ip4_datagram_release_cb+0x976/0xbe0 [ 990.277197][T28802] ? __mutex_trylock_common+0x15f/0x270 [ 990.277232][T28802] ? __pfx___mutex_trylock_common+0x10/0x10 [ 990.277267][T28802] ? rcu_is_watching+0x16/0xb0 [ 990.277298][T28802] ? trace_contention_end+0x3d/0x140 [ 990.277340][T28802] ? nf_setsockopt+0x221/0x290 [ 990.277378][T28802] ? __mutex_unlock_slowpath+0x731/0x900 [ 990.277418][T28802] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 990.277468][T28802] nf_setsockopt+0x26f/0x290 [ 990.277496][T28802] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 990.277533][T28802] do_sock_setsockopt+0x17c/0x1b0 [ 990.277562][T28802] __x64_sys_setsockopt+0x13d/0x1b0 [ 990.277592][T28802] do_syscall_64+0x166/0x520 [ 990.277623][T28802] ? trace_irq_disable+0x3b/0x140 [ 990.277648][T28802] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 990.277673][T28802] ? clear_bhb_loop+0x70/0xc0 [ 990.277703][T28802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 990.277726][T28802] RIP: 0033:0x7fce1a99e2d9 [ 990.277749][T28802] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 990.277769][T28802] RSP: 002b:00007fce1b812028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 990.277796][T28802] RAX: ffffffffffffffda RBX: 00007fce1ac25fa0 RCX: 00007fce1a99e2d9 [ 990.277814][T28802] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000003 [ 990.277829][T28802] RBP: 00007fce1b812090 R08: 0000000000000108 R09: 0000000000000000 [ 990.277844][T28802] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000001 [ 990.277860][T28802] R13: 00007fce1ac26038 R14: 00007fce1ac25fa0 R15: 00007ffc53d34658 [ 990.277898][T28802] [ 990.592021][T28802] syz.0.6961: vmalloc error: size 384, align 0x1, vm_struct allocation failed, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 990.592095][T28802] CPU: 0 UID: 0 PID: 28802 Comm: syz.0.6961 Not tainted syzkaller #0 PREEMPT(full) [ 990.592121][T28802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 990.592136][T28802] Call Trace: [ 990.592146][T28802] [ 990.592156][T28802] dump_stack_lvl+0xe8/0x150 [ 990.592196][T28802] warn_alloc+0x24d/0x270 [ 990.592223][T28802] ? __kasan_kmalloc+0x22/0xb0 [ 990.592258][T28802] ? __pfx_warn_alloc+0x10/0x10 [ 990.592282][T28802] ? __get_vm_area_node+0x155/0x2f0 [ 990.592327][T28802] ? __get_vm_area_node+0x2a9/0x2f0 [ 990.592371][T28802] ? lapic_next_event+0x11/0x20 [ 990.592406][T28802] __vmalloc_node_range_noprof+0x36b/0x1540 [ 990.592449][T28802] ? irqentry_exit+0x218/0x920 [ 990.592488][T28802] ? lock_acquire+0x115/0x350 [ 990.592517][T28802] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 990.592556][T28802] ? do_replace+0x22f/0x470 [ 990.592580][T28802] __vmalloc_noprof+0xd2/0x120 [ 990.592605][T28802] ? do_replace+0x22f/0x470 [ 990.592633][T28802] do_replace+0x22f/0x470 [ 990.592663][T28802] ? __pfx_do_replace+0x10/0x10 [ 990.592703][T28802] ? bpf_lsm_capable+0x9/0x20 [ 990.592727][T28802] ? security_capable+0x7e/0x2c0 [ 990.592768][T28802] do_ebt_set_ctl+0x2fb/0x1020 [ 990.592798][T28802] ? __lock_acquire+0x747/0x2de0 [ 990.592824][T28802] ? __pfx_do_ebt_set_ctl+0x10/0x10 [ 990.592858][T28802] ? ip4_datagram_release_cb+0xa2/0xbe0 [ 990.592896][T28802] ? ip4_datagram_release_cb+0x976/0xbe0 [ 990.592937][T28802] ? __mutex_trylock_common+0x15f/0x270 [ 990.592972][T28802] ? __pfx___mutex_trylock_common+0x10/0x10 [ 990.593006][T28802] ? rcu_is_watching+0x16/0xb0 [ 990.593036][T28802] ? trace_contention_end+0x3d/0x140 [ 990.593080][T28802] ? nf_setsockopt+0x221/0x290 [ 990.593110][T28802] ? __mutex_unlock_slowpath+0x731/0x900 [ 990.593151][T28802] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 990.593200][T28802] nf_setsockopt+0x26f/0x290 [ 990.593228][T28802] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 990.593268][T28802] do_sock_setsockopt+0x17c/0x1b0 [ 990.593298][T28802] __x64_sys_setsockopt+0x13d/0x1b0 [ 990.593328][T28802] do_syscall_64+0x166/0x520 [ 990.593364][T28802] ? trace_irq_disable+0x3b/0x140 [ 990.593390][T28802] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 990.593415][T28802] ? clear_bhb_loop+0x70/0xc0 [ 990.593444][T28802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 990.593468][T28802] RIP: 0033:0x7fce1a99e2d9 [ 990.593491][T28802] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 990.593510][T28802] RSP: 002b:00007fce1b812028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 990.593535][T28802] RAX: ffffffffffffffda RBX: 00007fce1ac25fa0 RCX: 00007fce1a99e2d9 [ 990.593553][T28802] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000003 [ 990.593567][T28802] RBP: 00007fce1b812090 R08: 0000000000000108 R09: 0000000000000000 [ 990.593583][T28802] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000001 [ 990.593598][T28802] R13: 00007fce1ac26038 R14: 00007fce1ac25fa0 R15: 00007ffc53d34658 [ 990.593636][T28802] [ 990.775481][T28802] Mem-Info: [ 990.775500][T28802] active_anon:7671 inactive_anon:0 isolated_anon:0 [ 990.775500][T28802] active_file:193 inactive_file:43863 isolated_file:0 [ 990.775500][T28802] unevictable:1077 dirty:178 writeback:0 [ 990.775500][T28802] slab_reclaimable:11531 slab_unreclaimable:124612 [ 990.775500][T28802] mapped:32006 shmem:1631 pagetables:1282 [ 990.775500][T28802] sec_pagetables:0 bounce:0 [ 990.775500][T28802] kernel_misc_reclaimable:0 [ 990.775500][T28802] free:1285551 free_pcp:9735 free_cma:0 [ 990.775560][T28802] Node 0 active_anon:30684kB inactive_anon:0kB active_file:772kB inactive_file:175252kB unevictable:4308kB isolated(anon):0kB isolated(file):0kB mapped:128024kB dirty:712kB writeback:0kB shmem:6524kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15304kB pagetables:5000kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 990.775615][T28802] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 990.775675][T28802] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 990.775745][T28802] lowmem_reserve[]: 0 2468 2468 2468 2468 [ 990.775790][T28802] Node 0 DMA32 free:1196616kB boost:0kB min:33984kB low:42480kB high:50976kB reserved_highatomic:0kB free_highatomic:0kB active_anon:30684kB inactive_anon:0kB active_file:772kB inactive_file:175252kB unevictable:4308kB writepending:712kB zspages:0kB present:3129332kB managed:2527704kB mlocked:4312kB bounce:0kB free_pcp:38940kB local_pcp:21704kB free_cma:0kB [ 990.775859][T28802] lowmem_reserve[]: 0 0 0 0 0 [ 990.775899][T28802] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 990.775960][T28802] lowmem_reserve[]: 0 0 0 0 0 [ 990.776001][T28802] Node 1 Normal free:3930228kB boost:0kB min:55916kB low:69892kB high:83868kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 990.776061][T28802] lowmem_reserve[]: 0 0 0 0 0 [ 990.776098][T28802] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 990.776227][T28802] Node 0 DMA32: 2*4kB (UM) 192*8kB (U) 1220*16kB (UME) 776*32kB (UME) 703*64kB (UM) 261*128kB (UME) 113*256kB (UM) 76*512kB (UM) 41*1024kB (UM) 20*2048kB (UM) 225*4096kB (UM) = 1196680kB [ 990.776429][T28802] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 990.776521][T28802] Node 1 Normal: 3*4kB (UM) 3*8kB (UM) 3*16kB (UM) 9*32kB (UM) 6*64kB (UM) 7*128kB (UM) 4*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 2*2048kB (U) 957*4096kB (UM) = 3930228kB [ 990.776665][T28802] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 990.776681][T28802] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 990.776697][T28802] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 990.776712][T28802] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 990.776728][T28802] 45683 total pagecache pages [ 990.776736][T28802] 0 pages in swap cache [ 990.776743][T28802] Free swap = 124996kB [ 990.776750][T28802] Total swap = 124996kB [ 990.776759][T28802] 2097051 pages RAM [ 990.776766][T28802] 0 pages HighMem/MovableOnly [ 990.776773][T28802] 433509 pages reserved [ 990.776780][T28802] 0 pages cma reserved [ 991.185030][ T2345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 991.808032][T28813] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 992.032755][T28815] FAULT_INJECTION: forcing a failure. [ 992.032755][T28815] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 992.032806][T28815] CPU: 0 UID: 0 PID: 28815 Comm: syz.0.6967 Not tainted syzkaller #0 PREEMPT(full) [ 992.032837][T28815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 992.032853][T28815] Call Trace: [ 992.032865][T28815] [ 992.032877][T28815] dump_stack_lvl+0xe8/0x150 [ 992.032921][T28815] should_fail_ex+0x410/0x560 [ 992.032966][T28815] _copy_to_user+0x31/0xb0 [ 992.033010][T28815] simple_read_from_buffer+0xe1/0x170 [ 992.033059][T28815] proc_fail_nth_read+0x1bb/0x230 [ 992.033089][T28815] ? common_file_perm+0x20e/0x2b0 [ 992.033131][T28815] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 992.033166][T28815] ? rw_verify_area+0x24a/0x4c0 [ 992.033195][T28815] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 992.033224][T28815] vfs_read+0x213/0xa80 [ 992.033258][T28815] ? __pfx___mutex_lock+0x10/0x10 [ 992.033296][T28815] ? __pfx_vfs_read+0x10/0x10 [ 992.033325][T28815] ? __fget_files+0x2a/0x420 [ 992.033371][T28815] ? __fget_files+0x3a2/0x420 [ 992.033410][T28815] ? __fget_files+0x2a/0x420 [ 992.033465][T28815] ksys_read+0x150/0x270 [ 992.033495][T28815] ? __pfx_ksys_read+0x10/0x10 [ 992.033519][T28815] ? fput+0xa0/0xd0 [ 992.033568][T28815] do_syscall_64+0x166/0x520 [ 992.033603][T28815] ? trace_irq_disable+0x3b/0x140 [ 992.033632][T28815] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 992.033660][T28815] ? clear_bhb_loop+0x70/0xc0 [ 992.033692][T28815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 992.033720][T28815] RIP: 0033:0x7fce1a95eb0e [ 992.033744][T28815] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 992.033767][T28815] RSP: 002b:00007fce1b811fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 992.033803][T28815] RAX: ffffffffffffffda RBX: 00007fce1b8126c0 RCX: 00007fce1a95eb0e [ 992.033823][T28815] RDX: 000000000000000f RSI: 00007fce1b8120a0 RDI: 0000000000000004 [ 992.033841][T28815] RBP: 00007fce1b812090 R08: 0000000000000000 R09: 0000000000000000 [ 992.033859][T28815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 992.033875][T28815] R13: 00007fce1ac26038 R14: 00007fce1ac25fa0 R15: 00007ffc53d34658 [ 992.033919][T28815] [ 992.548373][T28819] netlink: 964 bytes leftover after parsing attributes in process `syz.0.6969'. [ 992.548404][T28819] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 992.725661][T28817] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6968'. [ 992.789785][T28817] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 994.224730][T28865] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6983'. [ 994.883129][T28872] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6984'. [ 995.057922][T28875] wg2 speed is unknown, defaulting to 1000 [ 996.838390][ T1268] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 997.105197][T28906] openvswitch: netlink: Message has 8 unknown bytes. [ 997.475587][T28919] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6999'. [ 997.535778][T28912] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6997'. [ 998.213759][T28918] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6997'. [ 998.213797][T28918] nbd: nbd64 already in use [ 998.881338][T25387] udevd[25387]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 998.915941][T28938] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7004'. [ 999.081420][T28941] Bluetooth: hci0: unsupported parameter 5161 [ 999.081449][T28941] Bluetooth: hci0: unsupported parameter 8192 [ 999.081466][T28941] Bluetooth: hci0: unsupported parameter 5161 [ 999.081512][T28941] Bluetooth: hci0: unsupported parameter 8192 [ 1001.472840][T28958] syzkaller0: entered promiscuous mode [ 1001.472866][T28958] syzkaller0: entered allmulticast mode [ 1001.495154][T28958] TC_ACT_REPEAT abuse ? [ 1002.183220][ T2345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1002.490434][T28961] netlink: 'syz.1.7011': attribute type 1 has an invalid length. [ 1002.496382][T28962] netlink: 104 bytes leftover after parsing attributes in process `syz.3.7012'. [ 1002.552323][T28963] netlink: 'syz.1.7011': attribute type 1 has an invalid length. [ 1002.552350][T28963] netlink: 'syz.1.7011': attribute type 2 has an invalid length. [ 1002.633776][T28961] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7011'. [ 1002.748751][ C1] sched: DL replenish lagged too much [ 1003.292811][T28976] vlan6: entered promiscuous mode [ 1003.292839][T28976] syz_tun: entered promiscuous mode [ 1003.565236][T28982] syzkaller1: entered promiscuous mode [ 1003.565267][T28982] syzkaller1: entered allmulticast mode [ 1003.827177][T28991] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1003.827418][T28991] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1003.827743][T28991] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1003.863803][ T4949] block nbd1: Possible stuck request ffff888027d07000: control (read@0,4096B). Runtime 150 seconds [ 1003.866816][T28993] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7021'. [ 1003.905658][ T305] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1003.906053][ T305] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1003.985668][T28985] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7020'. [ 1003.986185][T28985] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1004.247607][T28997] Bluetooth: hci0: unsupported parameter 5161 [ 1004.247633][T28997] Bluetooth: hci0: unsupported parameter 8192 [ 1004.247649][T28997] Bluetooth: hci0: unsupported parameter 5161 [ 1004.247664][T28997] Bluetooth: hci0: unsupported parameter 8192 [ 1004.519498][T28988] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1004.524816][T28988] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1004.865975][T29006] netlink: 'syz.3.7025': attribute type 4 has an invalid length. [ 1007.660562][T29010] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7027'. [ 1009.395904][T29048] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 1009.562075][T29048] batman_adv: batadv0: Removing interface: syzkaller0 [ 1009.774900][T29059] Bluetooth: hci0: unsupported parameter 5161 [ 1009.774928][T29059] Bluetooth: hci0: unsupported parameter 8192 [ 1009.774944][T29059] Bluetooth: hci0: unsupported parameter 5161 [ 1009.774959][T29059] Bluetooth: hci0: unsupported parameter 8192 [ 1013.265192][T29070] tipc: Enabling of bearer rejected, failed to enable media [ 1013.532211][T29084] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7044'. [ 1013.677355][T29092] netlink: 'syz.3.7047': attribute type 10 has an invalid length. [ 1014.122786][T29104] syzkaller0: entered promiscuous mode [ 1014.122812][T29104] syzkaller0: entered allmulticast mode [ 1014.190374][T29104] TC_ACT_REPEAT abuse ? [ 1014.884648][T29138] netlink: 'syz.2.7056': attribute type 4 has an invalid length. [ 1014.884674][T29138] netlink: 152 bytes leftover after parsing attributes in process `syz.2.7056'. [ 1014.936340][T29136] netlink: 104 bytes leftover after parsing attributes in process `syz.0.7059'. [ 1015.016780][T29136] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7059'. [ 1015.107454][T29144] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 1015.128248][T29144] netlink: Conntrack attr type has unexpected length (type=0, length=2, expected=0) [ 1015.128507][T29144] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1015.191799][T29135] bond18: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 1015.293293][T29135] bond18 (unregistering): Released all slaves [ 1015.364433][T29138] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1015.492061][T29151] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7059'. [ 1015.832337][T29158] bond22: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 1015.921403][T29158] bond22 (unregistering): Released all slaves [ 1016.278288][T29179] netlink: 128 bytes leftover after parsing attributes in process `syz.4.7064'. [ 1016.701212][T29187] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7068'. [ 1016.701253][T29187] openvswitch: netlink: Missing key (keys=c0, expected=480) [ 1016.704517][T29187] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7068'. [ 1016.857198][T29190] syzkaller0: entered promiscuous mode [ 1016.857411][T29190] syzkaller0: entered allmulticast mode [ 1016.942482][T29186] TC_ACT_REPEAT abuse ? [ 1017.108026][T29198] bond31: entered promiscuous mode [ 1017.234716][T29200] bond22: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 1017.274882][T29200] bond22 (unregistering): Released all slaves [ 1017.617335][T29215] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7074'. [ 1017.847336][T29223] syzkaller1: entered promiscuous mode [ 1017.847362][T29223] syzkaller1: entered allmulticast mode [ 1018.274915][T29235] netlink: 'syz.1.7084': attribute type 10 has an invalid length. [ 1018.717007][T29235] team0: Port device v added [ 1018.770788][T29238] syzkaller1: entered promiscuous mode [ 1018.770886][T29238] syzkaller1: entered allmulticast mode [ 1019.063654][T29244] bond18: option packets_per_slave: invalid value (134217728) [ 1019.063685][T29244] bond18: option packets_per_slave: allowed values 0 - 65535 [ 1019.066181][T29244] bond18 (unregistering): Released all slaves [ 1019.218423][T29250] bond32: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 1019.277039][T29250] bond32 (unregistering): Released all slaves [ 1019.497891][T29263] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7090'. [ 1019.576263][T29264] 8021q: adding VLAN 0 to HW filter on device bond22 [ 1019.705759][T29264] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7091'. [ 1019.705785][T29264] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7091'. [ 1019.972571][T29264] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1020.033300][T29264] bond22: (slave bond0): making interface the new active one [ 1020.049989][T29264] bond22: (slave bond0): Enslaving as an active interface with an up link [ 1020.227104][T29283] netlink: 72 bytes leftover after parsing attributes in process `syz.4.7096'. [ 1020.548944][T29301] netlink: 'syz.4.7100': attribute type 1 has an invalid length. [ 1020.604017][T29301] ipip0: entered promiscuous mode [ 1020.663543][T29307] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7101'. [ 1021.189923][T29322] bond23: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 1021.215005][T29322] bond23 (unregistering): Released all slaves [ 1021.367164][T29336] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7110'. [ 1021.395110][T29336] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7110'. [ 1021.482345][T29348] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7112'. [ 1022.065706][T29363] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7114'. [ 1022.221301][T29363] netlink: 56 bytes leftover after parsing attributes in process `syz.1.7114'. [ 1023.169317][ T43] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1023.169419][ T43] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1023.169540][ T43] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1023.169664][ T43] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1023.717720][T29399] bond18: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 1023.751677][T29399] bond18 (unregistering): Released all slaves [ 1023.983239][T29411] sctp: [Deprecated]: syz.2.7129 (pid 29411) Use of int in max_burst socket option. [ 1023.983239][T29411] Use struct sctp_assoc_value instead [ 1024.747223][T29445] __nla_validate_parse: 5 callbacks suppressed [ 1024.747248][T29445] netlink: 72 bytes leftover after parsing attributes in process `syz.4.7137'. [ 1025.469821][T29468] netlink: 'syz.4.7145': attribute type 3 has an invalid length. [ 1026.935029][T29523] netlink: Conntrack attr type has unexpected length (type=0, length=2, expected=0) [ 1026.935071][T29523] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1026.936433][T29519] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7163'. [ 1027.523753][T29545] Bluetooth: hci0: unsupported parameter 5135 [ 1027.523783][T29545] Bluetooth: hci0: unsupported parameter 8192 [ 1027.523799][T29545] Bluetooth: hci0: unsupported parameter 5135 [ 1027.523813][T29545] Bluetooth: hci0: unsupported parameter 8192 [ 1027.844578][T29556] netlink: 44 bytes leftover after parsing attributes in process `syz.0.7176'. [ 1027.935546][T29561] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7179'. [ 1028.531802][T29576] netlink: 21 bytes leftover after parsing attributes in process `syz.1.7182'. [ 1028.909935][T29599] netlink: 420 bytes leftover after parsing attributes in process `syz.2.7187'. [ 1028.909972][T29599] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7187'. [ 1029.400887][T29605] FAULT_INJECTION: forcing a failure. [ 1029.400887][T29605] name failslab, interval 1, probability 0, space 0, times 0 [ 1029.400927][T29605] CPU: 0 UID: 0 PID: 29605 Comm: syz.4.7190 Not tainted syzkaller #0 PREEMPT(full) [ 1029.400953][T29605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1029.400969][T29605] Call Trace: [ 1029.400979][T29605] [ 1029.400990][T29605] dump_stack_lvl+0xe8/0x150 [ 1029.401030][T29605] should_fail_ex+0x410/0x560 [ 1029.401069][T29605] should_failslab+0xa8/0x100 [ 1029.401102][T29605] ? ep_ptable_queue_proc+0x5c/0x200 [ 1029.401134][T29605] kmem_cache_alloc_noprof+0xa1/0x600 [ 1029.401162][T29605] ? ep_ptable_queue_proc+0x5c/0x200 [ 1029.401201][T29605] ep_ptable_queue_proc+0x5c/0x200 [ 1029.401232][T29605] ? __pfx_ep_ptable_queue_proc+0x10/0x10 [ 1029.401264][T29605] unix_dgram_poll+0x80/0x680 [ 1029.401311][T29605] sock_poll+0x338/0x3f0 [ 1029.401341][T29605] ? ep_insert+0xbf3/0x1af0 [ 1029.401370][T29605] ? __pfx_sock_poll+0x10/0x10 [ 1029.401398][T29605] ep_insert+0x11da/0x1af0 [ 1029.401443][T29605] ? __pfx_ep_insert+0x10/0x10 [ 1029.401469][T29605] ? __pfx___mutex_lock+0x10/0x10 [ 1029.401508][T29605] ? __pfx_ep_ptable_queue_proc+0x10/0x10 [ 1029.401554][T29605] do_epoll_ctl_file+0x8c2/0xee0 [ 1029.401593][T29605] ? __pfx_do_epoll_ctl_file+0x10/0x10 [ 1029.401624][T29605] ? __fget_files+0x3a2/0x420 [ 1029.401666][T29605] ? __fget_files+0x2a/0x420 [ 1029.401712][T29605] __se_sys_epoll_ctl+0x162/0x230 [ 1029.401744][T29605] ? __pfx___se_sys_epoll_ctl+0x10/0x10 [ 1029.401786][T29605] do_syscall_64+0x166/0x520 [ 1029.401817][T29605] ? trace_irq_disable+0x3b/0x140 [ 1029.401842][T29605] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1029.401867][T29605] ? clear_bhb_loop+0x70/0xc0 [ 1029.401896][T29605] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1029.401920][T29605] RIP: 0033:0x7f4d6f19e2d9 [ 1029.401943][T29605] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1029.401964][T29605] RSP: 002b:00007f4d6ffe3028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 1029.401990][T29605] RAX: ffffffffffffffda RBX: 00007f4d6f426090 RCX: 00007f4d6f19e2d9 [ 1029.402008][T29605] RDX: 0000000000000005 RSI: 0000000000000001 RDI: 0000000000000003 [ 1029.402022][T29605] RBP: 00007f4d6ffe3090 R08: 0000000000000000 R09: 0000000000000000 [ 1029.402038][T29605] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001 [ 1029.402053][T29605] R13: 00007f4d6f426128 R14: 00007f4d6f426090 R15: 00007ffd98887588 [ 1029.402093][T29605] [ 1029.954311][T29606] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7189'. [ 1030.633115][T29630] netlink: 72 bytes leftover after parsing attributes in process `syz.3.7196'. [ 1030.820492][T29634] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7195'. [ 1031.720699][T29645] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7199'. [ 1032.290197][T29655] netlink: 128 bytes leftover after parsing attributes in process `syz.0.7202'. [ 1032.431063][T29651] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7200'. [ 1032.581880][T29662] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1032.847162][T29673] FAULT_INJECTION: forcing a failure. [ 1032.847162][T29673] name failslab, interval 1, probability 0, space 0, times 0 [ 1032.847199][T29673] CPU: 0 UID: 0 PID: 29673 Comm: syz.2.7208 Not tainted syzkaller #0 PREEMPT(full) [ 1032.847224][T29673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1032.847239][T29673] Call Trace: [ 1032.847248][T29673] [ 1032.847258][T29673] dump_stack_lvl+0xe8/0x150 [ 1032.847298][T29673] should_fail_ex+0x410/0x560 [ 1032.847333][T29673] ? __alloc_skb+0x1db/0x7a0 [ 1032.847367][T29673] should_failslab+0xa8/0x100 [ 1032.847400][T29673] ? __alloc_skb+0x1db/0x7a0 [ 1032.847432][T29673] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 1032.847457][T29673] ? __alloc_skb+0x18d/0x7a0 [ 1032.847498][T29673] ? __alloc_skb+0x1db/0x7a0 [ 1032.847539][T29673] __alloc_skb+0x1db/0x7a0 [ 1032.847577][T29673] netlink_sendmsg+0x5d4/0xb40 [ 1032.847620][T29673] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1032.847661][T29673] ? apparmor_socket_sendmsg+0x18b/0x360 [ 1032.847694][T29673] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1032.847724][T29673] sock_sendmsg_nosec+0x14e/0x190 [ 1032.847758][T29673] ____sys_sendmsg+0x54e/0x850 [ 1032.847789][T29673] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1032.847824][T29673] ? import_iovec+0x73/0xa0 [ 1032.847862][T29673] ___sys_sendmsg+0x2a5/0x360 [ 1032.847885][T29673] ? __lock_acquire+0x747/0x2de0 [ 1032.847915][T29673] ? __pfx____sys_sendmsg+0x10/0x10 [ 1032.847979][T29673] ? __fget_files+0x2a/0x420 [ 1032.848012][T29673] ? __fget_files+0x3a2/0x420 [ 1032.848058][T29673] __x64_sys_sendmsg+0x1b1/0x290 [ 1032.848086][T29673] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1032.848135][T29673] do_syscall_64+0x166/0x520 [ 1032.848169][T29673] ? trace_irq_disable+0x3b/0x140 [ 1032.848194][T29673] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1032.848216][T29673] ? clear_bhb_loop+0x70/0xc0 [ 1032.848243][T29673] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1032.848263][T29673] RIP: 0033:0x7f1cbd19e2d9 [ 1032.848283][T29673] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1032.848302][T29673] RSP: 002b:00007f1cbdfa9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1032.848327][T29673] RAX: ffffffffffffffda RBX: 00007f1cbd425fa0 RCX: 00007f1cbd19e2d9 [ 1032.848345][T29673] RDX: 0000000020008080 RSI: 0000200000001240 RDI: 0000000000000003 [ 1032.848360][T29673] RBP: 00007f1cbdfa9090 R08: 0000000000000000 R09: 0000000000000000 [ 1032.848374][T29673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1032.848386][T29673] R13: 00007f1cbd426038 R14: 00007f1cbd425fa0 R15: 00007ffe79797398 [ 1032.848423][T29673] [ 1033.234636][T29672] syzkaller0: entered promiscuous mode [ 1033.234664][T29672] syzkaller0: entered allmulticast mode [ 1033.345216][T29680] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7210'. [ 1033.939380][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 1033.947827][ T4949] block nbd1: Possible stuck request ffff888027d07000: control (read@0,4096B). Runtime 180 seconds [ 1034.223862][T29696] netlink: 44 bytes leftover after parsing attributes in process `syz.0.7216'. [ 1034.612972][T29704] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7218'. [ 1035.525970][T29720] bond24: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 1035.554514][T29720] bond24 (unregistering): Released all slaves [ 1036.357693][T29745] netlink: 64 bytes leftover after parsing attributes in process `syz.2.7226'. [ 1036.460963][T29746] Bluetooth: hci0: unsupported parameter 5161 [ 1036.460989][T29746] Bluetooth: hci0: unsupported parameter 8192 [ 1036.461004][T29746] Bluetooth: hci0: unsupported parameter 5161 [ 1036.461020][T29746] Bluetooth: hci0: unsupported parameter 8192 [ 1038.630949][ T4985] udevd[4985]: worker [25368] /devices/virtual/block/nbd1 timeout; kill it [ 1038.632605][ T4985] udevd[4985]: seq 24032 '/devices/virtual/block/nbd1' killed [ 1039.333568][T29747] ip6gretap3: entered allmulticast mode [ 1039.762651][T29766] syzkaller0: MTU not usable for tipc bearer [ 1039.762706][T29766] tipc: Enabling of bearer rejected, failed to enable media [ 1041.448302][T29804] netlink: 108 bytes leftover after parsing attributes in process `syz.4.7240'. [ 1041.569743][T29807] netlink: 72 bytes leftover after parsing attributes in process `syz.3.7241'. [ 1041.790822][T29815] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7245'. [ 1041.918910][T29821] netlink: 44 bytes leftover after parsing attributes in process `syz.4.7247'. [ 1042.163601][T29827] bond24: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 1042.166879][T29827] bond24 (unregistering): Released all slaves [ 1042.214645][T29835] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7251'. [ 1042.377229][T29834] xt_LOG: level 115 >= 8 [ 1042.639895][T29843] syzkaller1: entered promiscuous mode [ 1042.639921][T29843] syzkaller1: entered allmulticast mode [ 1042.904943][T29851] bridge13: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1043.932150][T29873] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7265'. [ 1043.962402][T29870] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7264'. [ 1044.075381][T29870] netlink: 140 bytes leftover after parsing attributes in process `syz.3.7264'. [ 1044.181902][ C0] [ 1044.184293][ C0] ============================================ [ 1044.190549][ C0] WARNING: possible recursive locking detected [ 1044.196790][ C0] syzkaller #0 Not tainted [ 1044.201221][ C0] -------------------------------------------- [ 1044.207393][ C0] syz.4.7265/29875 is trying to acquire lock: [ 1044.213479][ C0] ffff88807bdb0d58 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 1044.223464][ C0] [ 1044.223464][ C0] but task is already holding lock: [ 1044.230846][ C0] ffff888056b4b958 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 1044.240736][ C0] [ 1044.240736][ C0] other info that might help us debug this: [ 1044.248828][ C0] Possible unsafe locking scenario: [ 1044.248828][ C0] [ 1044.256366][ C0] CPU0 [ 1044.259673][ C0] ---- [ 1044.263016][ C0] lock(&qdisc_xmit_lock_key#4); [ 1044.268115][ C0] lock(&qdisc_xmit_lock_key#4); [ 1044.273187][ C0] [ 1044.273187][ C0] *** DEADLOCK *** [ 1044.273187][ C0] [ 1044.281382][ C0] May be due to missing lock nesting notation [ 1044.281382][ C0] [ 1044.289797][ C0] locks held by syz.4.7265/29875: 12, last CPU#0: [ 1044.296336][ C0] #0: ffff8880354b0340 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 1044.305457][ C0] #1: ffffc90000007cc0 ((&ndev->rs_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd5/0x5f0 [ 1044.315432][ C0] #2: ffffffff8fd5c8a0 (rcu_read_lock){....}-{1:3}, at: ndisc_send_skb+0x203/0x1650 [ 1044.325000][ C0] #3: ffffffff8fd5c8a0 (rcu_read_lock){....}-{1:3}, at: ip6_output+0x11e/0x540 [ 1044.334110][ C0] #4: ffffffff8fd5c900 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x29b/0x3920 [ 1044.344159][ C0] #5: ffff888055591228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#5){+...}-{3:3}, at: __dev_queue_xmit+0x114e/0x3920 [ 1044.356860][ C0] #6: ffff888056b4b958 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 1044.367202][ C0] #7: ffffffff8fd5c8a0 (rcu_read_lock){....}-{1:3}, at: ip_output+0x5a/0x450 [ 1044.376247][ C0] #8: ffffffff8fd5c8a0 (rcu_read_lock){....}-{1:3}, at: ip_finish_output2+0x3de/0x10b0 [ 1044.386071][ C0] #9: ffffffff8fd5c8a0 (rcu_read_lock){....}-{1:3}, at: arp_xmit+0x23/0x270 [ 1044.394941][ C0] #10: ffffffff8fd5c900 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x29b/0x3920 [ 1044.405030][ C0] #11: ffff888022abe228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#5){+...}-{3:3}, at: __dev_queue_xmit+0x114e/0x3920 [ 1044.417818][ C0] [ 1044.417818][ C0] stack backtrace: [ 1044.423857][ C0] CPU: 0 UID: 0 PID: 29875 Comm: syz.4.7265 Not tainted syzkaller #0 PREEMPT(full) [ 1044.433254][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1044.443343][ C0] Call Trace: [ 1044.446660][ C0] [ 1044.449546][ C0] dump_stack_lvl+0xe8/0x150 [ 1044.454204][ C0] print_deadlock_bug+0x27a/0x290 [ 1044.459286][ C0] __lock_acquire+0x25db/0x2de0 [ 1044.464180][ C0] ? __pfx___netif_skb_features+0x10/0x10 [ 1044.469931][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 1044.475178][ C0] ? __lock_acquire+0x747/0x2de0 [ 1044.480148][ C0] lock_acquire+0x115/0x350 [ 1044.484788][ C0] ? sch_direct_xmit+0x15f/0x4c0 [ 1044.489770][ C0] _raw_spin_lock+0x2e/0x40 [ 1044.494322][ C0] ? sch_direct_xmit+0x15f/0x4c0 [ 1044.499291][ C0] sch_direct_xmit+0x15f/0x4c0 [ 1044.504090][ C0] ? __pfx_sch_direct_xmit+0x10/0x10 [ 1044.509402][ C0] ? arp_solicit+0xbb0/0xe40 [ 1044.514038][ C0] __dev_queue_xmit+0x179a/0x3920 [ 1044.519114][ C0] ? __dev_queue_xmit+0x29b/0x3920 [ 1044.524304][ C0] ? lockdep_hardirqs_on+0x7b/0x110 [ 1044.529576][ C0] ? __lock_acquire+0x747/0x2de0 [ 1044.534581][ C0] ? arpt_do_table+0x25b/0x1f90 [ 1044.539502][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1044.545065][ C0] ? __pfx_arpt_do_table+0x10/0x10 [ 1044.550248][ C0] ? NF_HOOK+0xa2/0x3c0 [ 1044.554465][ C0] NF_HOOK+0x33a/0x3c0 [ 1044.558587][ C0] ? __pfx_arp_xmit_finish+0x10/0x10 [ 1044.563926][ C0] ? NF_HOOK+0xa2/0x3c0 [ 1044.568127][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 1044.572772][ C0] ? lock_acquire+0x115/0x350 [ 1044.577481][ C0] ? __pfx_arp_xmit_finish+0x10/0x10 [ 1044.582809][ C0] ? inet_addr_type_dev_table+0x25/0x190 [ 1044.588498][ C0] arp_xmit+0x16c/0x270 [ 1044.592703][ C0] ? arp_xmit+0x23/0x270 [ 1044.597001][ C0] arp_solicit+0xbdc/0xe40 [ 1044.601471][ C0] ? __pfx_arp_solicit+0x10/0x10 [ 1044.606474][ C0] ? __neigh_event_send+0xea4/0x1510 [ 1044.611813][ C0] ? __pfx_arp_solicit+0x10/0x10 [ 1044.616799][ C0] __neigh_event_send+0xf0c/0x1510 [ 1044.621987][ C0] neigh_resolve_output+0x1a1/0x720 [ 1044.627247][ C0] ? __pfx_ip_neigh_gw4+0x10/0x10 [ 1044.632318][ C0] ? ip_finish_output2+0x3de/0x10b0 [ 1044.637545][ C0] ip_finish_output2+0xc4b/0x10b0 [ 1044.642606][ C0] ? ip_skb_dst_mtu+0x811/0xa50 [ 1044.647534][ C0] ? ip_finish_output2+0x3de/0x10b0 [ 1044.652787][ C0] ? ip_finish_output+0x40b/0x530 [ 1044.657878][ C0] ip_output+0x29f/0x450 [ 1044.662168][ C0] ? ip_output+0x5a/0x450 [ 1044.666542][ C0] iptunnel_xmit+0x626/0xd10 [ 1044.671166][ C0] ip_tunnel_xmit+0x195b/0x2040 [ 1044.676065][ C0] ? __pfx_ip_tunnel_xmit+0x10/0x10 [ 1044.681329][ C0] ? __gre_xmit+0x106/0x1a0 [ 1044.685935][ C0] erspan_xmit+0xb6a/0x1620 [ 1044.690492][ C0] ? __pfx_erspan_xmit+0x10/0x10 [ 1044.695480][ C0] ? __lock_acquire+0x747/0x2de0 [ 1044.700461][ C0] dev_hard_start_xmit+0x2cd/0x830 [ 1044.705654][ C0] sch_direct_xmit+0x257/0x4c0 [ 1044.710923][ C0] ? __pfx_sch_direct_xmit+0x10/0x10 [ 1044.716260][ C0] __dev_queue_xmit+0x179a/0x3920 [ 1044.721331][ C0] ? __dev_queue_xmit+0x29b/0x3920 [ 1044.726671][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1044.732094][ C0] ? lock_acquire+0x115/0x350 [ 1044.736812][ C0] ? ip6_output+0x337/0x540 [ 1044.741363][ C0] ? ip6_finish_output2+0xc1c/0x1460 [ 1044.746702][ C0] ? ip6_output+0x11e/0x540 [ 1044.751247][ C0] ip6_output+0x337/0x540 [ 1044.755611][ C0] ? __pfx_ip6_output+0x10/0x10 [ 1044.760497][ C0] ndisc_send_skb+0xcb2/0x1650 [ 1044.765316][ C0] ? ndisc_send_skb+0x203/0x1650 [ 1044.770302][ C0] ? __pfx_ndisc_send_skb+0x10/0x10 [ 1044.775557][ C0] ? __pfx_dst_output+0x10/0x10 [ 1044.780482][ C0] addrconf_rs_timer+0x2d2/0x6c0 [ 1044.785459][ C0] ? lock_acquire+0x115/0x350 [ 1044.790180][ C0] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 1044.795697][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1044.801136][ C0] call_timer_fn+0x18d/0x5f0 [ 1044.805788][ C0] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 1044.811280][ C0] ? call_timer_fn+0xd5/0x5f0 [ 1044.816003][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 1044.821148][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1044.826389][ C0] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 1044.831883][ C0] __run_timer_base+0x652/0x8b0 [ 1044.836809][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 1044.842241][ C0] ? ktime_get+0x1f5/0x220 [ 1044.846799][ C0] ? lapic_next_event+0x11/0x20 [ 1044.851724][ C0] run_timer_softirq+0xb7/0x170 [ 1044.856625][ C0] handle_softirqs+0x226/0x860 [ 1044.861446][ C0] ? __irq_exit_rcu+0xcb/0x220 [ 1044.866263][ C0] __irq_exit_rcu+0xcb/0x220 [ 1044.870891][ C0] irq_exit_rcu+0x9/0x30 [ 1044.875177][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1044.880864][ C0] [ 1044.883826][ C0] [ 1044.886802][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1044.892827][ C0] RIP: 0010:free_pages_and_swap_cache+0x295/0x490 [ 1044.899314][ C0] Code: 30 4e 8d 3c f8 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 ff e8 ca 0c 09 00 4d 89 37 45 0f b6 f4 bf 1f 00 00 00 44 89 f6 06 2f 98 ff 41 80 fe 1f 75 1c e8 7b 2b 98 ff 4c 8d 7c 24 60 4c [ 1044.918971][ C0] RSP: 0018:ffffc900047670a0 EFLAGS: 00000246 [ 1044.925083][ C0] RAX: 1ffff920008ece32 RBX: 0000000000000147 RCX: ffff888043eb9f40 [ 1044.933075][ C0] RDX: 0000000000000000 RSI: 0000000000000012 RDI: 000000000000001f [ 1044.941074][ C0] RBP: ffffc90004767328 R08: ffffea0001875407 R09: 1ffffd400030ea80 [ 1044.949086][ C0] R10: dffffc0000000000 R11: fffff9400030ea81 R12: 0000000000000012 [ 1044.957091][ C0] R13: dffffc0000000000 R14: 0000000000000012 R15: ffffc90004767190 [ 1044.965122][ C0] ? __pfx_free_pages_and_swap_cache+0x10/0x10 [ 1044.971344][ C0] ? __zap_vma_range+0x4162/0x4f80 [ 1044.976509][ C0] tlb_flush_mmu+0x6d3/0xa30 [ 1044.981131][ C0] ? __zap_vma_range+0x4162/0x4f80 [ 1044.986311][ C0] ? __zap_vma_range+0x4162/0x4f80 [ 1044.991453][ C0] __zap_vma_range+0x418d/0x4f80 [ 1044.996463][ C0] ? __pfx___zap_vma_range+0x10/0x10 [ 1045.001809][ C0] ? mas_find+0x6d6/0xcb0 [ 1045.006191][ C0] unmap_vmas+0x390/0x550 [ 1045.010563][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 1045.015441][ C0] ? mas_next_slot+0xc91/0xd70 [ 1045.020277][ C0] exit_mmap+0x293/0x9f0 [ 1045.024557][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 1045.029366][ C0] ? __pfx_exit_aio+0x10/0x10 [ 1045.034083][ C0] ? uprobe_clear_state+0x2a4/0x3d0 [ 1045.039333][ C0] __mmput+0x118/0x420 [ 1045.043450][ C0] exit_mm+0x18e/0x240 [ 1045.047583][ C0] do_exit+0x6cd/0x2360 [ 1045.051770][ C0] ? __pfx_do_exit+0x10/0x10 [ 1045.056383][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 1045.061462][ C0] do_group_exit+0x22d/0x2f0 [ 1045.066087][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1045.071351][ C0] get_signal+0x121b/0x12c0 [ 1045.075904][ C0] arch_do_signal_or_restart+0xbb/0x860 [ 1045.081511][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1045.087731][ C0] exit_to_user_mode_loop+0x10e/0x770 [ 1045.093144][ C0] ? rcu_is_watching+0x16/0xb0 [ 1045.097963][ C0] do_syscall_64+0x328/0x520 [ 1045.102601][ C0] ? trace_irq_disable+0x3b/0x140 [ 1045.107652][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1045.114010][ C0] ? clear_bhb_loop+0x70/0xc0 [ 1045.118720][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1045.124641][ C0] RIP: 0033:0x7f4d6f19e2d9 [ 1045.129074][ C0] Code: Unable to access opcode bytes at 0x7f4d6f19e2af. [ 1045.136192][ C0] RSP: 002b:00007f4d6ffe30e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1045.144645][ C0] RAX: fffffffffffffe00 RBX: 00007f4d6f426098 RCX: 00007f4d6f19e2d9 [ 1045.152649][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f4d6f426098 [ 1045.160654][ C0] RBP: 00007f4d6f426090 R08: 0000000000000000 R09: 0000000000000000 [ 1045.168653][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1045.176678][ C0] R13: 00007f4d6f426128 R14: 00007ffd988874a0 R15: 00007ffd98887588 [ 1045.184710][ C0]