last executing test programs: 3.408121722s ago: executing program 2 (id=4429): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000005500)={'gre0\x00', &(0x7f00000053c0)={'ip_vti0\x00', 0x0, 0x20, 0x40, 0x6, 0x2, {{0x3a, 0x4, 0x3, 0x3d, 0xe8, 0x66, 0x0, 0x80, 0x29, 0x0, @multicast2, @empty, {[@cipso={0x86, 0x66, 0x1, [{0x0, 0x10, "9401d0e81d37b89c067909a84ecd"}, {0x0, 0x4, "9e7b"}, {0x2, 0x9, "2d3b6bcb27d776"}, {0x1, 0x7, "a9f5f9248f"}, {0x7, 0x7, "599468ddee"}, {0x7, 0xd, "4db270781dbe60186eccf0"}, {0x1, 0x12, "78b961f32547d32a7fe354a31e2091f6"}, {0x6, 0xc, "bf592bf112633c64d27e"}, {0x7, 0x8, "d9f8bbe1f1ea"}, {0x0, 0x2}]}, @timestamp_addr={0x44, 0x34, 0x93, 0x1, 0x6, [{@multicast2, 0xcd90}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x3}, {@empty, 0x8}, {@remote, 0x9}, {@multicast1, 0xfffffff9}, {@loopback}]}, @lsrr={0x83, 0x13, 0xdd, [@dev={0xac, 0x14, 0x14, 0x36}, @local, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp={0x44, 0xc, 0xd, 0x0, 0x9, [0x0, 0x5]}, @lsrr={0x83, 0xb, 0xd2, [@remote, @multicast1]}, @rr={0x7, 0xf, 0xa2, [@empty, @remote, @loopback]}]}}}}}) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000005980)={0x0, @remote, @dev}, &(0x7f00000059c0)=0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@can_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_DST_IF={0x8, 0xa, r4}, @CGW_SRC_IF={0x8, 0x9, r5}]}, 0x24}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@multicast, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @remote, @broadcast}, @timestamp_reply={0x11, 0xe0, 0x0, 0x0, 0x0, 0x810001}}}}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmmsg$inet(r0, &(0x7f0000007080)=[{{&(0x7f0000000040)={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10, &(0x7f0000000440)=[{&(0x7f00000000c0)="c191cac7db593c1a371d2355957c848c9cf34270b4a2f56516e61838f6a71a719ad6888698e760c786988aa527b28c896f3e52e60e27027851603ac745", 0x3d}, {&(0x7f0000000100)="09fca7f078920a7fbdc7d3b647e07902c71a447d530a3cf6fa5da379c680edfe5c4b8bde4337eb9f08e01e929e4f1a0c12", 0x31}, {&(0x7f0000000140)="ac414fb8c1fc3ee5725a57a50611c808437c6fe3e07164fef17b1651ec739e3887f6630c004d989995e78fd7bac7ba81d4a52504b1820fa802565cb34a0ffd536eca2c0d0d905e684024fa7787", 0x4d}, {&(0x7f00000001c0)="73fa0a55383ecd8ea92dda03ba7277be42da9bd3709f81200a7873e1bc0e1a5048e5cb1369fe0874a3d84de02387a78df90d2ef6c19beac1beaac10187d721cd912ff64931e09ee24967ef725af760ffb8cbb80d431195e25b78f4077741adcdaaf3aa3e4ca6ee04827eff420887e5d974180a75bc14425c91a5c90afa98b5c1c76752a658cebf837b7748ac6b27a794e2473887709e88e8c1b0863f5b3012a64bc3544a4b98ef", 0xa7}, {&(0x7f00000002c0)="ec51b8df08b2759269837bb53fe7c4b565e60ca6cd672fe69ff1b20b9b8fdae4ceb6e5372dbe48962019bf4ac84570750615487ed4010665e95d31e6ab38f5619d12b56e165615a1f57a6bb2cc804034600e17f01e3118b95f09823132240f4fdbaa85e83286f44dc2d1ec92500a42af9f3d6806bea0768841e1da54d417ec665c84819d853f5d4f8eb5bdefdb974e4f50b31eb7cac550f2dd1e76131121a1cc640b0e70449a99a050d03ee3dee1970962cb21cd01f85cabe657639a8541a3ac46a2ff33326ea0bbb41f771767d71dbe7126d594fcd8747acf6bf69607e966d84a7e8b94f337ddcbea51fee75523f737b50a3d35ee82ed", 0xf7}, {&(0x7f00000003c0)="a494f41d65463c23339ea1c74941296a3063d0e626d46886274065a09ad65af01b055b6799503fd5245f8cdc8f325ef152ecd2e0f52516d7b38d28a6515216dde093001026ea78ce2f8dfc270c435be4bad56072b8e35ffa5e404d598d0140fe5b8a446bd05b41730bff3dca72687121", 0x70}], 0x6, &(0x7f0000000500)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}], 0x18}}, {{&(0x7f0000000540)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000004080)=[{&(0x7f0000001e00)="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", 0x1000}, {&(0x7f0000002e00)="0f5c566ec1be77634405d68869761ded9b6543694014286a6d338267d6672245bdb54ea991eac7f77e6a3ab240211ccb118624d236920e65c9c0988264b6e688720a9af3c31009a5dd19a3b77865b5edfe159b2b7b769e26cf7d95f6a6837fd93953867e90f81bf44d3213dd45a551714b0ea73060", 0x75}, {&(0x7f0000002e80)="97d4c2eb0d79d6d40be813f2009a9894d37f3a7433ab82c52d51ef189a1a5def4ad43e85f7784079f447be343ae335f9b4598527a27414c19e1f1da89368d1345deb7e91f31db9e0cb0747e13d832d17ed32f7348d34636d9b7ea1d9584ff87aedefc712ce8b77bdb4a48b85fa247ed9a71b2cdff96568b8e2db7c17f484e52a58432db3b97b0b1df1ac7a3a03d2e2fea0ac50d771b0d755fe435360444f5029665c08c569b291164842aff6debc1e7413ade270001f340dfbbf87e980fc8633f80a81644ac2528d7fd804398b623175a0152576252a7345f2c9cdae877594fb", 0xe0}, {&(0x7f0000002f80)="dce75ca4b7b6fcb1d490489c6183f6ce16c79190f1719874e9cd8dd8b8b69d898d627c0751f0b1c02df50d25cbf2fb4275dba4e508ade14587aaf80f5511bb89a2414a72f9d00cc68996fef55d619f24bcdf71de5f25b5ae50e777c7892b15d87e6b2441cc7fd0150eb1f5da144373b002f8868219591cb3ff49ce6e2001e2795f00bc9cbc2f5fe405611d76e00dda3e06c1a7ff82876c963935f51ddecf340fcfc707cc75d9087bdda0623b0441b91a31090eb40b7884c771b4e1666f1dc72f3f1b6f191c6409b5a91e1d53ba8651062fa19fb4e710469e5177f82e526bd8f9d40ab3a97a6586102fe99b02a5ea22c0b2d49a54", 0xf4}, {&(0x7f0000003080)="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", 0x1000}], 0x5, &(0x7f0000004100)=[@ip_ttl={{0x14, 0x0, 0x2, 0x2}}], 0x18}}, {{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f0000004140)}, {&(0x7f0000004180)="3acc0a8592c24018e09b66cae958a2", 0xf}, {&(0x7f00000041c0)="2467a86d75a199e996f10cba8b13cb5ce8d1a016b9756fc11dcf803186cc7db0016f5df3e3ea4215759abe157a32b007105da27f9fe2629e8cc8862a9e89ea952362de37ae8d01cb463f4cd07d93d9c5dcdecc779f2b41f115ee226b233510fb4ba8323f9a50fd29eeda6ec4d844a7aa3a3091ee1db5", 0x76}, {&(0x7f0000004240)="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", 0x1000}, {&(0x7f0000005240)="7c1b12bd8b2edf58270c45c1139f0169ff489a4c56bd84a8056e29388105dfc9bac46326db765aa2c43697e2b3c8e9b4b3f8f7dff2bcd5f63c19b1b20920103783d723889f4350cfabb60d01b8a911214b311cc20c995b5e165434cef57548e0d9bdeb44c12f49594d543cb30bdad78452a1c2e06e9ef592f0d28e9583872862af28beaab66129889113e33177f7145a5ddf246160400be2254f7073d5f454c44ec148360b2bce216979fe9ca3175d7ca898144a63f99e9ba59a0e5e0d0fef276f9146775aac54a5248fa5ccaf84152f6bf1fa7fbf5b222ddc6227a5e5044b0280e31d457662c5cb9eec", 0xea}], 0x5, &(0x7f0000005540)=[@ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xc}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @broadcast, @rand_addr=0x64010100}}}, @ip_retopts={{0x38, 0x0, 0x7, {[@timestamp={0x44, 0x10, 0x2c, 0x0, 0x7, [0x7, 0x5, 0x3]}, @noop, @generic={0x83, 0xe, "846b53c754f14d90758ebfe9"}, @lsrr={0x83, 0x7, 0xa, [@loopback]}]}}}], 0x88}}, {{&(0x7f0000005600)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000005900)=[{&(0x7f0000005640)="2f5000d13f8adaac25420adfc4da416bf852ee866bed9be50c", 0x19}, {&(0x7f0000005680)="eea3843f66a0ef70ac5654a4f903b88d46cf8aabb37f7fe6483f975d133635a17d1c262c1383aef8e9aec4adc2d14434ca2cb2482bbb6446cdcb0837ab58c9990803890d1c5d561ec833358947f4e04ce0039f8eb26999cede4913facf291b8a17f61208f1be1aaa3e5c0fc3981e6f07b1202789ab89e4ee637ad2b4a813c476d238618c62c4df7402e5ea11f9fe521ee30ef48b506bbc9e938958e6d985d2f02dbc9820df971ac93d0d2d6dd017c61ef5b202b0d0a32d3a", 0xb8}, {&(0x7f0000005740)="8263bfe9d84ac601cdb8e8cbac1cb5e59713754a3c70791e2592f7bb0e59d5948bb8a564", 0x24}, {&(0x7f0000005780)="a8b4a1cde9de8e8c1cb71a9f2cefdaee78cf7024ef7c049ff9ea0d9ac7371b30a568426e681b6a15cb979fb558badd7e5e3aed2766c6a606eabc81e825feb6aab2d9ba0032ef5f65fdf776810326", 0x4e}, {&(0x7f0000005800)="6a2c2c1926b14aa2eaf595fcc4171fd0d169bdb10801d91981b4a21723c4fa15ec4a8030d4ee1a8b7662659cba449ce490781529b0038c348b84ba460e28b2f6b28472b0b4148e40bba76ca890d7d4fd717a1c625a324c64e34835f0f9dd76dbc046dd74b52ee394c9a6e2e5b622cb264ec7113a168a1ec73b8a09f1745d111fb16eda5160a995b5515d186cc418a3fb64eed9025c", 0x95}, {&(0x7f00000058c0)="1a02622f5c6e383c8a1fb7601a88f50810", 0x11}], 0x6, &(0x7f0000005a00)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xe}}, @ip_tos_int={{0x14}}, @ip_retopts={{0x38, 0x0, 0x7, {[@lsrr={0x83, 0xb, 0xda, [@loopback, @empty]}, @timestamp_prespec={0x44, 0x4, 0xae, 0x3, 0x8}, @noop, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x14, 0x58, 0x0, 0x0, [0xf, 0x10, 0x55b, 0x8]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}}}, @ip_retopts={{0x10}}, @ip_retopts={{0x14, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}]}}}, @ip_retopts={{0x14, 0x0, 0x7, {[@end]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}], 0x110}}, {{&(0x7f0000005b40)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000006ec0)=[{&(0x7f0000005b80)="ba5bc42b4fde0936336a9963d93c028deba072bd8a1d292cdf622f253b83103b11cff8fd6784f81e9cfb3ce9636cdbbd872fc6b9c15ad8b760df195f9e189665a694096b6f191170888490bdb8594e6fcd1f1de53f2ca7edd3c765d7dc18b92ec6d80295d0c59f4eff2c63ff7206020ecb5eaef721596c5f7d730629bc3320304246a03b05e74a989ebed57bc51e93eb976f2ab61fb0c45fa4c45c791e2361707e94b0d1ebcc59c884ff82390caf8ce441bcaa3e2cca6547438cf6cb1a1bcd1c8142", 0xc2}, {&(0x7f0000005c80)="8aec7cc459e5938dc72132a6066902e07d75e8aaa901f8aa760562f33790f144c1cd378c73ad32c1345ddb3c303885258327a3f30097e414ff3f6d9f19a98d3ca8029843e85ad7ee9160c9c5e09bafc0b90a35505a1ce406c3329889b0b8928d5c86e6dee764083fbc38b3533593f31353ce784f71ea5775d9cf415a4173629e51d2ede111e2a5932a9d51abb5bcbb61229e84203d981efd7400bb175df6f2e2b1a7c4502dfab23bc060ef1ebfb67971900b7cc3b55a46943cade4f381807a1d7020", 0xc2}, {&(0x7f0000005d80)="fd24f0f8be2a21b7a3b15ab65524eafe686b30167bab575b87cdb1839f9d6200cec08a3925c3a0db02e90e75eb11299e8878411c29ccaf2ae97759208a39bae3f04312c48b238f00afacbdc30ee11432f1965560987266aa236af69cf4ff15d7a4a1f65b0cc0c8fe218f92247a209d109ac5ab302bde15013edd58750ba540e98627f88b1c7d36a4337fd8eb837def49586ade", 0x93}, {&(0x7f0000005e40)="59d94849b384743833a90ba8dbceef310e494e101d5680df2afcdd01c765a0ae0e5afbdc2d8fe0096a2c9c2c15fa53e9343dca43aa3561cbe953017d90dbec57ad6fe00b9a6b59d2eebaa1725b0001ec5b8a1b810f0bde86277f5336354cfc72be17bc1dfd69afa778009ebdb370fa3513b93b41d4f62880", 0x78}, {&(0x7f0000005ec0)="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", 0x1000}], 0x5, &(0x7f0000006f40)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xca}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @empty, @loopback}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xe}}, @ip_ttl={{0x14, 0x0, 0x2, 0x81}}, @ip_retopts={{0x90, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x44, 0x90, 0x3, 0x8, [{@local, 0x5}, {@remote, 0x7ff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xf4}, {@multicast2, 0x7}, {@loopback, 0xb}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3834}, {@local, 0xffffffff}, {@dev={0xac, 0x14, 0x14, 0x26}, 0x1}]}, @timestamp_prespec={0x44, 0x1c, 0xe9, 0x3, 0x0, [{@dev={0xac, 0x14, 0x14, 0x3d}, 0x10001}, {@empty, 0x1ff}, {@multicast1, 0x2}]}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x4, 0x52, 0x3, 0x7}, @timestamp_addr={0x44, 0x14, 0xa8, 0x1, 0x9, [{@multicast1, 0x3ff}, {@local, 0x7}]}, @end, @end]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @loopback}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @rand_addr=0x64010102}}}], 0x138}}], 0x5, 0x80c4) sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000b80)="91f8a9848519def38491bbc4173c3c6f357d0272b7319130feaab952ac4703cad04be6890ee50e997fc26e0000ea4feb931647fc5393de25000000000000000000f4922da20bf1f802970c30f03cc271337e892c99bda9475d51361f8b78938a6a68ba85987219000000eb52c9ff439180b413ec4d4fe130b41d113ce7efb5e9838379c5a554eb896f7808d5904cd8da06fd5159085c9275f49e775e92fb106c2f10442d500891e58a3f851ff5c85244beacba25d854577d68ca555e88fc249340ab9bdd8680abbbde02b0307ef45cb7bebc905a984c7bbb7bb3c689ef8daa63ca62e496be091cc1c7d4f371acaaec4333", 0xf1}, {&(0x7f0000000cc0)="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", 0x10b}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000e40)="31fdffffffffffffff74098b2e5e55a1828636f60fbfcfdac56c75f1687f0c562874230300d69f117e766bdbad0c2171ad6227e1173afcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbb9de494c9721d9bf80f2f75c3b4bea78e3", 0x62}], 0x1}}], 0x2, 0x2090) 2.522011726s ago: executing program 2 (id=4441): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000080)={0x9, 0x0, 0x1, 0x2}, 0x10) write(r0, &(0x7f0000000040)="240000a61e005f0214f6fffffffffff8070000000000000000000000080009000d000000", 0x24) 2.398077863s ago: executing program 2 (id=4443): r0 = socket$inet_udp(0x2, 0x2, 0x0) close(0x3) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4) setsockopt$inet_buf(r1, 0x0, 0x2c, &(0x7f0000000080)="270597011cfcd12faf578f3142a805cb7404676b30049dd77ca98a44bb0a44214d9550a70d91d0ce64c3903f962f43f05dd979fc76b1fe8f01f24d6c36435c72db87cb57ef3a3679b8ec2a4a847511990ed04de0ce6c5902ec121756b5775fb2f24d0ab26b5d12920d9d56f288d302a12169b86bd23ce4c1df0d2fec8a5c309d7e88e8d893990d074f7b2843e4ff930bf266ef0b0f2680be430a8a55ce8d4d9a793117b84bb9c301e0d2635fd324ddba69ee", 0xb2) unshare(0x26020480) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind(r2, &(0x7f0000000680)=@hci={0x1f, 0x1, 0x3}, 0x80) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c00010001"], 0x20}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth0_macvtap\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000000000)=[{{&(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000280)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @local, @loopback}}}], 0x20}}], 0x1, 0x0) 2.332968477s ago: executing program 2 (id=4445): r0 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) listen(r0, 0x0) r1 = socket(0x1e, 0x805, 0x0) syz_emit_ethernet(0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="08000141000000d9a1dc1d06b581f747000011f4f4eb7c"], 0x0) sendmsg$tipc(r1, &(0x7f0000000080)={&(0x7f0000000100)=@id={0x1e, 0x3, 0x3, {0x4e23, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40004}, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000, 0x0, 0x2}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, 0x0, 0x0) recvmmsg(r2, &(0x7f0000008d80)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0xfffffffd}, {{0x0, 0x0, 0x0}, 0x8ff}, {{0x0, 0x0, 0x0}, 0x8ffffe}], 0x5, 0x0, 0x0) accept4$nfc_llcp(r0, 0x0, 0x0, 0x0) accept4$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000180)=0x14, 0x80800) sendmsg$tipc(r1, &(0x7f0000000500)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x20040001) 2.156384698s ago: executing program 1 (id=4446): r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000001c40)="817cb4131f080024289a08fa156d", 0x0, 0xc, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff, 0x5}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(r1, 0x8b15, &(0x7f0000000000)={'wlan1\x00'}) 2.061392122s ago: executing program 1 (id=4447): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f00000002c0)=0x9, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x5e21, @empty}, 0x10) close(r1) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x2) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e24, 0x0, @mcast1, 0x7}}, [0x7, 0x4, 0x8000000000000001, 0x4, 0x400, 0x6, 0x2a, 0xf4ed, 0x4, 0x7, 0x1, 0x1d, 0x3, 0x0, 0x100]}, &(0x7f00000005c0)=0x100) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000600)={0x81, 0x20b, 0xfffffffc, 0x3ff, r5}, &(0x7f0000000640)=0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r7, 0x107, 0xd, &(0x7f0000000200)=@req={0x800, 0x0, 0x401, 0x397}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x8d0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newtfilter={0x70, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff2}, {0xfff1, 0x10}}, [@filter_kind_options=@f_bpf={{0x8}, {0x44, 0x2, [@TCA_BPF_ACT={0x34, 0x1, [@m_vlan={0x30, 0x9, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, 0xb, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0xbd5}, [@IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10000000}, 0x40) 2.041546374s ago: executing program 1 (id=4448): connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @broadcast}, 0x10) (async) r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x1000) (async) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c412194fb91c87565bfd5ccb3c4030b6beffecac372b9134e46c6fd91931c3ac696b8547ff1b6273d52581206014f5a3d21"], 0x0, 0x26, 0x0, 0x1, 0xfffffffd}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r2, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001840)=r3, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000081001c00000000009500740000000000"], &(0x7f0000000080)='syzkaller\x00', 0x8, 0xd4, &(0x7f00000000c0)=""/212, 0x0, 0x0, '\x00', 0x0, @sk_msg, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r3}, 0x94) socket$netlink(0x10, 0x3, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYRES64=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = socket$unix(0x1, 0x2, 0x0) bind$unix(r4, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x64) (async) r5 = socket$unix(0x1, 0x2, 0x0) bind$unix(r5, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x1c) (async) connect$unix(r5, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e20}, 0x6e) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r7, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r9, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) (async) listen(r9, 0xec) (async) accept4$bt_l2cap(r9, 0x0, 0x0, 0x800) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r8, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) (async) r10 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_icmp_ICMP_FILTER(r10, 0x1, 0x1, &(0x7f0000000200)={0xfffff000}, 0x4) socket(0x22, 0x800, 0x80000001) 1.760211846s ago: executing program 4 (id=4455): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) recvfrom$inet(r0, 0x0, 0x0, 0x720, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0x12, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) unshare(0x20000400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendto$inet(r2, &(0x7f0000000300)="ab", 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) sendmsg$inet_sctp(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)="f6", 0x1}], 0x1, &(0x7f0000000240)=[@sndinfo={0x20, 0x84, 0x2, {0x4, 0x49, 0x1, 0x5}}, @sndrcv={0x30, 0x84, 0x1, {0x7, 0xfe7, 0x0, 0x5, 0xffffffff, 0x0, 0x0, 0x9e4}}], 0x50, 0x40001}, 0x0) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x1}}}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="000000000100000002cf8bc8b75d"], 0x48}}, 0x0) sendmsg$can_bcm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x7, 0x0, 0xffffffff, {}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x7, 0x0, 0x0, "a464357177330772"}}, 0x48}, 0x1, 0x0, 0x0, 0x200440c3}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) connect$can_bcm(r4, &(0x7f0000000140)={0x1d, r5}, 0x10) sendmmsg$inet(r1, &(0x7f0000003840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x200040c0) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) close(r1) shutdown(r0, 0x0) 1.659424014s ago: executing program 3 (id=4458): syz_emit_ethernet(0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000002340)={0x0, 0x0, &(0x7f0000002300)={&(0x7f00000022c0)={0x38, 0x1, 0x4, 0x801, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x2fdb}, @NFULA_CFG_MODE={0xa, 0x2, {0xfff, 0x1}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x14, 0x36, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="58000000020605000000000000000000000000030c000300686173683a6970000900020073797a32000000000500040000000000050005000a000000050001000600000014000780080006400000000208000c"], 0x58}}, 0x20000000) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r3, &(0x7f0000000780)}, 0x20) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xb0, r4, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x6}}}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x9}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x7c36e2dc}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0xffffffffffffff74}, @NL80211_MESHCONF_POWER_MODE={0x8, 0x1a, 0x1}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0x7}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x6}, @NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0x8a}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0x3}, @NL80211_MESHCONF_GATE_ANNOUNCEMENTS={0x5, 0x11, 0x1}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5, 0x1d, 0x1}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0xffffffffffffff4b}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x2}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x3}]}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x8}]}, 0xb0}, 0x1, 0x0, 0x0, 0x800}, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r5) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000dd618d67930a2812000000180001801400020073797a5f74756e00000000000000000018000280080002000a00000004000100080004"], 0x44}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) 1.602166429s ago: executing program 3 (id=4459): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r1, 0x84, 0x7f, &(0x7f0000000040)="020c0000098011e8", 0x8) 1.435251267s ago: executing program 2 (id=4460): socket(0x400000000010, 0x3, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x5001}) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000200)=0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$kcm(0x2, 0xa, 0x73) socket$kcm(0x2, 0xa, 0x73) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x2f00020b, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7515, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.349731853s ago: executing program 0 (id=4461): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34000000140001000000000000dbdf250a00a100", @ANYRES32=r2, @ANYBLOB="14000100ff05000000000000dfce00000000000108000800026e"], 0x34}}, 0x0) 1.349016199s ago: executing program 2 (id=4462): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001f80), r1) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r2, 0x43d, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r3) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}]}, 0x34}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x4, 0x8, 0x3d, 0x41}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r5, &(0x7f0000000080), 0x0}, 0x20) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)={0x14, r4, 0x301}, 0x14}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x98}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r3, &(0x7f0000000100)={0x0, 0x61, &(0x7f0000000200)={&(0x7f0000000300)={0x34, r4, 0x1, 0xfffffffc, 0x0, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}]}, 0x34}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb018018"], 0x0, 0x26}, 0x28) unshare(0x6a040000) 1.336273308s ago: executing program 0 (id=4463): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56561, 0x70bd2f, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0xf, 0x8}, {0xc, 0xfffe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x4048090) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) (fail_nth: 10) 1.2095681s ago: executing program 0 (id=4464): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=@newtfilter={0x24, 0x2c, 0x1, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff2}, {0xe, 0xe}, {0x1, 0xffe0}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f646500000000000000000000000000000000000000000000000000000000050003"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4c14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000daf3715ede9ef24200007a000000", @ANYRES32=0x0, @ANYBLOB="00000000081000001c0012800b00010062726964676500000c0002"], 0x3c}, 0x1, 0x0, 0x0, 0x34001843}, 0x4004000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0xf00000000000000) 1.087186644s ago: executing program 1 (id=4465): r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair(0x23, 0x3, 0x5, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={0x0, 0x9, 0x9}, 0xc) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e28, @empty}, 0x10) setsockopt$sock_int(r0, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x11, &(0x7f0000000700)=@framed={{0x18, 0x5, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x40b}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r3, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="882f1242a03c3f98722780b605a7", 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r4, &(0x7f0000000200)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x1c) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) 1.057225959s ago: executing program 0 (id=4466): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x20, 0x10, 0xc3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8008}}, 0x20}, 0x1, 0x0, 0x0, 0x10000}, 0x0) 902.897729ms ago: executing program 0 (id=4467): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4048004) (fail_nth: 5) 769.95197ms ago: executing program 4 (id=4468): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x8084) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001c0001fc28bd7000fcdbdf2507000000", @ANYRES32=r2, @ANYBLOB="8000260b0a0002000180c200"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x20040010) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) ioctl$XFS_IOC_FSCOUNTS(r0, 0x80205871, &(0x7f00000001c0)) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000100), r4) sendmsg$SMC_PNETID_ADD(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)={0x34, r5, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'lo\x00'}]}, 0x34}}, 0x0) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, r5, 0x608, 0x70bd27, 0x25dfdbfb, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'netpci0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'xfrm0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x48800}, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x11, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000006000000000000000900000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000700008500000086000000bf0900000000004100000095000000000000003500fcfffcffffff7d00f8ff00000000bf91000000000000b7020000000000008500000084000000b700000000000000950000006436739e"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x27}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x8084) (async) socket(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) (async) sendmsg$nl_route(r1, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001c0001fc28bd7000fcdbdf2507000000", @ANYRES32=r2, @ANYBLOB="8000260b0a0002000180c200"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x20040010) (async) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) (async) ioctl$XFS_IOC_FSCOUNTS(r0, 0x80205871, &(0x7f00000001c0)) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$smc(&(0x7f0000000100), r4) (async) sendmsg$SMC_PNETID_ADD(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)={0x34, r5, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'lo\x00'}]}, 0x34}}, 0x0) (async) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, r5, 0x608, 0x70bd27, 0x25dfdbfb, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'netpci0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'xfrm0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x48800}, 0x40) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x11, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000006000000000000000900000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000700008500000086000000bf0900000000004100000095000000000000003500fcfffcffffff7d00f8ff00000000bf91000000000000b7020000000000008500000084000000b700000000000000950000006436739e"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x27}, 0x94) (async) 571.413953ms ago: executing program 0 (id=4469): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xe}, 0xe) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, 0x0, 0x40) sendmsg$NFT_BATCH(r2, 0x0, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r5, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20004002, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @rand_addr, 0x6}, 0x1c) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[], 0x54}}, 0x0) accept4(r5, &(0x7f0000000080)=@hci, &(0x7f0000000400)=0x80, 0x0) (fail_nth: 6) 571.020439ms ago: executing program 4 (id=4470): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) write(r0, &(0x7f0000000000)="1c0000001a005f0214f9f4070009010000000000fe03000a00000000", 0x1c) 504.107602ms ago: executing program 3 (id=4471): socket$kcm(0xa, 0x3, 0x87) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x34, 0x41, 0x107, 0x70bd2c, 0x25dfdbfa, {0x3, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0x1c, 0x1, 0x0, 0x1, [@nested={0x18, 0x10, 0x0, 0x1, [@typed={0x14, 0xd, 0x0, 0x0, @ipv6=@loopback}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4c084}, 0xc000) sendmsg$kcm(r2, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e00000022008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000100)=ANY=[@ANYBLOB="0a0000001003000310"], 0x18) pselect6(0x40, &(0x7f0000000140)={0x40007, 0x3, 0x4100000000000000, 0xfffffffffffffff9, 0x8, 0x77, 0x4, 0x2}, 0x0, 0x0, 0x0, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r2) sendmsg$DEVLINK_CMD_TRAP_GET(r3, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x178, r4, 0x400, 0x70bd26, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x178}, 0x1, 0x0, 0x0, 0x40001}, 0x4) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @remote}) nanosleep(&(0x7f00000000c0)={0x0, 0x989680}, 0x0) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd120000e40000140000006000000003088700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x58, r6, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback=0xac1414aa}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @broadcast}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @remote}]}, 0x58}}, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_IFINDEX(r8, 0x113, 0x11, 0xffffffffffffffff, &(0x7f0000000080)) setsockopt(r7, 0x84, 0x14, &(0x7f0000000040)='\t\x00\x00\x00\x00\x00\x00\x00', 0x8) 373.486721ms ago: executing program 4 (id=4472): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000d"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000810000087b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) sendmsg$unix(r5, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x4000) r7 = socket$key(0xf, 0x3, 0x2) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=@newsa={0x150, 0x10, 0x1, 0x70bc2c, 0x0, {{@in6=@private0, @in=@dev={0xac, 0x14, 0x14, 0x2c}, 0x0, 0x3, 0x0, 0x0, 0xa}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x32}, @in=@private=0xa010102, {0xfffffffffffffffe, 0xfffffffffffffffe, 0x1, 0x0, 0x0, 0x6, 0x0, 0x9}, {0x7, 0x400804, 0x9, 0x292}, {0x1cb00000}, 0x0, 0x0, 0xa, 0x4}, [@algo_crypt={0x60, 0x2, {{'cbc(twofish)\x00'}, 0xc0, "1a000b000000366a6a849a739045002400011d0002000010"}}]}, 0x150}, 0x1, 0x0, 0x0, 0x20000880}, 0x44050) write(r7, &(0x7f00000004c0)="3bbb264508eb307021808e679172f9b06743083b19ab173254967c60a18cdd1889dfa43864daf06c621bfb81a64aabbf797551b33354286d1bf5c015d3eab613099ae822b6afe0be987ca40daa69142490853c261dc1fe1a5c555445189eb88f7054e3afdac22439e114a7082bef0cb7a67b875bab48e5451e0a2924a60901602f65f908d85736d75e88ab0dd8c1fc9da17ddb2dafbabd418f05e29ee16f96f11a811efb533df1e5925ddf0cc08ac3a67ba66c9c67c69633c86dbf693a7217590158a792606b3ca35c9246f8", 0xcc) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)={0x34, r1, 0x10, 0x70bd24, 0x25dfdbf6, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}]}]}, 0x34}, 0x1, 0x0, 0x0, 0xaa8960b78de6273e}, 0x8010) 241.949742ms ago: executing program 4 (id=4473): socket(0x400000000010, 0x3, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x5001}) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000200)=0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$kcm(0x2, 0xa, 0x73) socket$kcm(0x2, 0xa, 0x73) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x2f00020b, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7515, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 217.364128ms ago: executing program 3 (id=4474): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_VIF(r3, 0x0, 0x15, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002a40)={0x2c, r1, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x1}, @NL80211_ATTR_SCAN_SUPP_RATES={0x8, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}, 0x2c}}, 0x0) 186.264027ms ago: executing program 4 (id=4475): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000080), 0x8) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000280)=0x2, 0x4) r1 = socket(0x10, 0x3, 0x0) recvmsg$unix(r1, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001a40)=[{&(0x7f00000002c0)=""/101, 0x65}, {&(0x7f00000006c0)=""/239, 0xef}, {&(0x7f0000001800)=""/237, 0xed}, {&(0x7f0000001900)=""/37, 0x25}, {&(0x7f0000001940)=""/44, 0x2c}, {&(0x7f0000001980)=""/179, 0xb3}], 0x6, &(0x7f0000001ac0)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x68}, 0x22) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1f, 0x10, &(0x7f0000000a80)=ANY=[@ANYBLOB="180000000000008000000000aec8000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b70300000000a5bf8500000083000000bf09000000000000550901000000000095000000000000008500000050000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000840)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r3}, 0xc) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20040000}, 0x8800) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) syz_emit_ethernet(0x2c, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xa, 0x0, @opaque='`F'}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2006}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x9}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1, 0x3, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfbc4}}, &(0x7f0000000000)='syzkaller\x00', 0x6, 0x1c, &(0x7f0000000280)=""/28, 0x41000, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r4, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000800)=""/4096, 0x1000}], 0x1}, 0xb}], 0x12, 0x40000021, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0xfffffc}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3000000}, @generic={0x67, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, @exit, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa, 0x0, 0xfffd, 0xfffffff8}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0xc}, 0x94) 117.23724ms ago: executing program 3 (id=4476): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x4084) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x40000002, 0x0, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000600)={@fallback, 0xffffffffffffffff, 0x20, 0xc}, 0x20) sendmsg$netlink(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0x8}, [@CTA_HELP={0x10, 0x5, 0x0, 0x1, {0x9, 0x1, 'snmp\x00'}}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x3}, @CTA_MARK_MASK={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @empty}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0xa9b4d147281cff39}, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r1) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000600)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000302}, 0xc, &(0x7f00000005c0)={&(0x7f0000000340)={0x268, r3, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x93}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6e}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x401}, @TIPC_NLA_MON_REF={0x0, 0x2, 0x8001}]}, @TIPC_NLA_MEDIA={0x64, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NODE={0xc4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xba, 0x3, "4d819b8c38022e3c88f7162546ae1e128ceaf892dbf21139fb937106805394ab70f5cf3c33fdc8ca94a8ee696d47a6dcc120143b5a54818da22c8ac5e63531ec701a810ff2385852bc588cf3fd1e9c9ee993f0a1fc3131dba5f4c2685be0e3e834e759241c582f277c33fcc3cad879befcfae05f030130fad59d443fc58895a7c73b7d743a18fe9cf4e3755060e00ab0d8c106d6d0500fad4f853d84b1e49e48a74f2f2db33440961d55de1c1508ef589c2500fd5e37"}, @TIPC_NLA_NODE_UP={0x2}]}, @TIPC_NLA_MEDIA={0x10, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}]}]}, @TIPC_NLA_NODE={0xd8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x492}, @TIPC_NLA_NODE_ID={0x13, 0x3, "0c49948d4cca76f96a2afad58a93a6"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "2365fa0cd6b5a8fef0590e95eb1d8915e8baa31c9d2d5763e56cc0f270"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x12}, @TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "d1a39f41f6761ffbbf872721e5ca67427f2ce82777124969c1b71f"}}, @TIPC_NLA_NODE_ID={0xe, 0x3, "7899224d7e6729c3fd33"}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x268}}, 0x20008000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x200000, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0xf, &(0x7f0000000640)=@raw=[@cb_func={0x18, 0x1, 0x4, 0x0, 0x6}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffc59}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}], &(0x7f00000006c0)='GPL\x00', 0x8, 0x95, &(0x7f0000000700)=""/149, 0x41000, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000007c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000800)={0x0, 0x0, 0x100, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000840)=[0xffffffffffffffff], 0x0, 0x10, 0x5}, 0x94) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000940)={'batadv0\x00', 0x0}) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000a00)=0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000a40)={r5, r6, 0x25, 0x7, @val=@uprobe_multi={&(0x7f0000000980)='./file0\x00', &(0x7f00000009c0)=[0xa30, 0x3, 0x8000000000000000, 0xfffffffffffffffb, 0x7, 0x1], 0x0, 0xb66, 0x6, 0x0, r7}}, 0x40) write$tun(r4, &(0x7f00000002c0)={@void, @val={0x1, 0x4, 0x2, 0xfffd, 0x9, 0x100}, @llc={@snap={0x155, 0x1, "ad", "13be2d", 0x88be}}}, 0x12) sendmsg$TIPC_NL_KEY_FLUSH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r3, 0x1, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x2400c080) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x800, 0x0, 0x0) 109.33724ms ago: executing program 1 (id=4477): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x20, 0x10, 0xc3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8008}}, 0x20}, 0x1, 0x0, 0x0, 0x10000}, 0x0) 25.039266ms ago: executing program 3 (id=4478): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=ANY=[@ANYBLOB="44d377dce07ef5d3080080000400000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028008001300000000000800120000000000"], 0x44}}, 0x0) sendmsg$sock(r0, &(0x7f0000000880)={&(0x7f00000002c0)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e21, @rand_addr=0x64010102}}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000340)="54d1aa41ea4c477691dddcba6494b40c3249b849cdbd03d5518f9c4ef14b731149c519ae8d433b87e2c7a3b32a404c1a3c4f9524a1089ab409903afb564ed778bcd50eb113a5ab2f338f525e5ec16a8c8eb68c1fbd7e6f7db7ecf4a2eea8d2096b7b525c190fb8d4f1ea0284ffa39743e2ad7b5bc78a2baebf317176b4706a95259180acf404788babc0349ee1a6d86ecebfeb3d4cd48972d6b6dd9a76142372d51fad196bddbde6ba443f9e79e6cf2ca400", 0xb2}, {&(0x7f0000000400)="4d65f5595aee74bcb9cc14d4e04c60ddd0a1f70e6b28c5cb779831017e98ad49f02aab52a53bdc2bda6496e5a96d6368fa931c8f956d85442d1733399d6042ac461e8751d454784c4197217b0f105c6c1c8842b95cc359c28b9b7f972207b8fb04455588ea1cbc3d334068286fca283927c2f0c3148b79c8a26df43589b3ec43272a9b6056bd534b333be564ab9e418f4842f2622f38d773b4629836b5941a33a6c872bec0920117818a46e869d0c29def5584566b4104e0632d3d24804bea0614dd0096778b57455df9911e1f2f02dca5f70325538f6ef6fe9004a9a967d9dfb8ea082bda0b759296aa8e2fcd0d94c8", 0xf0}, {&(0x7f0000000500)="6d1bc12c41e87ecc066c6587b1e49bfc240eaa61d7dcbabe32abd7e6228035db6192d5e3d867ea47a41ddda4f0e3f3282ee3e6aafba6b507da2373f134542109a226ea8210", 0x45}, {&(0x7f0000000580)="afea516abd4280b6292e2596c3cd53ebbcc803feeb986e995d7b07a5d492cdb36869d92422bfec915c7750ab5c4c2a6619b587aaeb7afb713196999b8b45b7c71705a3b9f0172473e234ac0f", 0x4c}, {&(0x7f00000001c0)="8390deb4c36fb91d0e0a0cf1c0710cfd56", 0x11}, {&(0x7f0000000640)="dfab1ab76ad442af6e731466b669e1f77e677a1c5a509b7af796cc8ebc90a1b39e7fa0c4a614f2b73350537577023d2fd92e429bbfc8392bb598917835e0b343d00a765a00945f4fe5bdce774cd9b75a7b7f8be81e977d396937fc223844bcedca13376efe3162bdb0d413f2e94858c87e966ab98ce62692a9046e209d6cae079f714d2ff50dd308895342fc10d824cad1a9696e9fe86381c751d41483c6c561c0c5bdc6f8c07fc0609634670e", 0xad}, {&(0x7f0000000700)="bd477a29", 0x4}, {&(0x7f0000000740)="cc9f7d93f9f7eca036f34c508ec8f44befc45ea0a6a294b5cab6f5c3b6fafc853d1b23f47e2be4b262d09b16254d166d73c475efdc9c7084680cb48434b4084fb9f13cd2a74a20f02161098d416fe35e853e01082e78659c3d19fb335d71c7989c71fa0e94fdd97099", 0x69}], 0x8, &(0x7f0000000840)=[@mark={{0x14, 0x1, 0x24, 0x4}}], 0x18}, 0x4048040) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000001435010026bd0c333c84df250a4022fe", @ANYRES32, @ANYBLOB="140006000000000005"], 0x40}, 0x1, 0x0, 0x0, 0x811}, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x48, 0x14, 0x509, 0x70bd27, 0x25dfdbfd, {0x2, 0x1f, 0x80, 0xcb, r3}, [@IFA_BROADCAST={0x8, 0x4, @rand_addr=0x64010100}, @IFA_LOCAL={0x8, 0x2, @local}, @IFA_BROADCAST={0x8, 0x4, @remote}, @IFA_RT_PRIORITY={0x8, 0x9, 0x6}, @IFA_RT_PRIORITY={0x8, 0x9, 0xffffffff}, @IFA_RT_PRIORITY={0x8, 0x9, 0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000"], 0x18}}, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a18, 0x800, 0x0, 0x4b6ae4f95a5de35b) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000180)={'ip_vti0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x700, 0x80, 0x4, 0x7, {{0x26, 0x4, 0x3, 0x17, 0x98, 0x67, 0x0, 0x3, 0x0, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ra={0x94, 0x4}, @timestamp_addr={0x44, 0x54, 0xda, 0x1, 0xc, [{@empty}, {@dev={0xac, 0x14, 0x14, 0xc}, 0x7}, {@dev={0xac, 0x14, 0x14, 0x12}, 0x5ef1}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@multicast2, 0x8b16}, {@broadcast, 0x5}, {@multicast1, 0xfffffff8}, {@multicast1, 0x800}, {@empty, 0x7}, {@dev={0xac, 0x14, 0x14, 0x36}, 0x82f7}]}, @timestamp={0x44, 0x8, 0x2d, 0x0, 0x7, [0x0]}, @timestamp_prespec={0x44, 0x24, 0xf3, 0x3, 0x6, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@private=0xa010102, 0x58}, {@broadcast, 0x81}, {@loopback, 0x2}]}]}}}}}) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="200000001500000428bd7000fcdbdf25028042c8", @ANYRES32=r4, @ANYBLOB="5874822cf05ac92ec82b49e84ac0715aba9ae8ebe5dee22f39c1"], 0x20}, 0x1, 0x0, 0x0, 0x11}, 0x48010) 0s ago: executing program 1 (id=4479): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x3c, r1, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x16c}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}]}, 0x3c}}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000002000010000000000fcdbdf250a800000000000033200030014000100200100000000000000000000000000010500160087"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x40800) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x88, 0x0, 0x0, 0x0, 0x80}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfeff}, {0x85, 0x0, 0x0, 0x86}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x80000000}}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x500}}}, &(0x7f0000000000)='GPL\x00', 0x3, 0xfed, &(0x7f0000000780)=""/4077, 0x41000, 0x4b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000d}, 0x94) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x439, 0x70bd26, 0x1, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0) kernel console output (not intermixed with test programs): 8211] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 440.821127][T18211] R13: 00007f1389826038 R14: 00007f1389825fa0 R15: 00007ffe02601238 [ 440.821157][T18211] [ 441.259055][T18225] tipc: Started in network mode [ 441.259084][T18225] tipc: Node identity ac1414aa, cluster identity 4711 [ 441.259948][T18225] tipc: Enabled bearer , priority 10 [ 441.367358][T18229] x_tables: duplicate underflow at hook 3 [ 441.483237][T18228] netlink: 810 bytes leftover after parsing attributes in process `syz.0.3712'. [ 441.562371][T18238] FAULT_INJECTION: forcing a failure. [ 441.562371][T18238] name failslab, interval 1, probability 0, space 0, times 0 [ 441.562401][T18238] CPU: 1 UID: 0 PID: 18238 Comm: syz.1.3716 Not tainted syzkaller #0 PREEMPT(full) [ 441.562421][T18238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 441.562432][T18238] Call Trace: [ 441.562440][T18238] [ 441.562448][T18238] dump_stack_lvl+0xe8/0x150 [ 441.562479][T18238] should_fail_ex+0x410/0x560 [ 441.562503][T18238] ? __alloc_skb+0x1db/0x7a0 [ 441.562524][T18238] should_failslab+0xa8/0x100 [ 441.562549][T18238] ? __alloc_skb+0x1db/0x7a0 [ 441.562568][T18238] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 441.562596][T18238] ? __alloc_skb+0x18d/0x7a0 [ 441.562617][T18238] ? __alloc_skb+0x1db/0x7a0 [ 441.562644][T18238] __alloc_skb+0x1db/0x7a0 [ 441.562668][T18238] netlink_sendmsg+0x5d4/0xb40 [ 441.562696][T18238] ? __pfx_netlink_sendmsg+0x10/0x10 [ 441.562721][T18238] ? apparmor_socket_sendmsg+0x98/0x360 [ 441.562742][T18238] ? __pfx_netlink_sendmsg+0x10/0x10 [ 441.562758][T18238] sock_sendmsg_nosec+0x13a/0x180 [ 441.562778][T18238] ____sys_sendmsg+0x54e/0x850 [ 441.562807][T18238] ? __pfx_____sys_sendmsg+0x10/0x10 [ 441.562840][T18238] ? import_iovec+0x73/0xa0 [ 441.562866][T18238] ___sys_sendmsg+0x2a5/0x360 [ 441.562889][T18238] ? __lock_acquire+0x747/0x2de0 [ 441.562913][T18238] ? __pfx____sys_sendmsg+0x10/0x10 [ 441.562935][T18238] ? __lock_acquire+0x747/0x2de0 [ 441.562958][T18238] ? kstrtouint+0x6e/0xe0 [ 441.563033][T18238] __sys_sendmmsg+0x273/0x4d0 [ 441.563062][T18238] ? __pfx___sys_sendmmsg+0x10/0x10 [ 441.563096][T18238] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 441.563134][T18238] ? ksys_write+0x242/0x270 [ 441.563163][T18238] ? __pfx_ksys_write+0x10/0x10 [ 441.563195][T18238] __x64_sys_sendmmsg+0xa0/0xc0 [ 441.563221][T18238] do_syscall_64+0x166/0x520 [ 441.563243][T18238] ? trace_irq_disable+0x3b/0x140 [ 441.563262][T18238] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.563281][T18238] ? clear_bhb_loop+0x70/0xc0 [ 441.563304][T18238] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.563323][T18238] RIP: 0033:0x7f135d99e159 [ 441.563340][T18238] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 441.563356][T18238] RSP: 002b:00007f135e8b2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 441.563377][T18238] RAX: ffffffffffffffda RBX: 00007f135dc25fa0 RCX: 00007f135d99e159 [ 441.563391][T18238] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 441.563404][T18238] RBP: 00007f135e8b2090 R08: 0000000000000000 R09: 0000000000000000 [ 441.563416][T18238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 441.563428][T18238] R13: 00007f135dc26038 R14: 00007f135dc25fa0 R15: 00007fff08a8a688 [ 441.563458][T18238] [ 441.711507][T18244] tap0: tun_chr_ioctl cmd 1074025677 [ 441.711615][T18244] tap0: linktype set to 805 [ 441.766865][T18244] tipc: Failed to remove unknown binding: 66,0,0/0:443381960/443381962 [ 441.766892][T18244] tipc: Failed to remove unknown binding: 66,0,0/0:443381960/443381961 [ 441.774377][T18244] tipc: Failed to remove unknown binding: 66,0,0/0:443381960/443381962 [ 441.777341][T18244] tipc: Failed to remove unknown binding: 66,0,0/0:443381960/443381961 [ 441.949857][T18246] 8021q: adding VLAN 0 to HW filter on device bond0 [ 441.951268][T18246] 8021q: adding VLAN 0 to HW filter on device team0 [ 441.971787][T18246] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 442.016045][T18246] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 442.020901][T18246] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 442.020932][T18246] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 442.060685][T18246] veth1_vlan: left promiscuous mode [ 442.061678][T18246] veth0_vlan: left promiscuous mode [ 442.063089][T18246] veth0_vlan: entered promiscuous mode [ 442.082697][T18246] veth1_vlan: entered promiscuous mode [ 442.093444][T18246] veth1_macvtap: left promiscuous mode [ 442.101114][T18246] veth0_macvtap: left promiscuous mode [ 442.102131][T18246] veth0_macvtap: entered promiscuous mode [ 442.103177][T18246] veth1_macvtap: entered promiscuous mode [ 442.183084][T18246] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 442.191275][T18246] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 442.202123][T18246] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 442.202765][T18246] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 442.243422][ T7028] bridge0: port 1(bridge_slave_0) entered blocking state [ 442.243517][ T7028] bridge0: port 1(bridge_slave_0) entered forwarding state [ 442.245356][ T7028] bridge0: port 2(bridge_slave_1) entered blocking state [ 442.245468][ T7028] bridge0: port 2(bridge_slave_1) entered forwarding state [ 442.370298][T18262] sch_fq: defrate 0 ignored. [ 442.380994][T15271] tipc: Node number set to 2886997162 [ 442.381871][ T7034] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.381917][ T7034] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.381948][ T7034] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.381977][ T7034] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.670825][T18281] netlink: 'syz.1.3731': attribute type 15 has an invalid length. [ 442.699004][T18281] netlink: 'syz.1.3731': attribute type 15 has an invalid length. [ 442.714609][ T7029] netdevsim netdevsim1 netdevsim3: set [0, 1] type 1 family 0 port 2816 - 0 [ 442.714649][ T7029] netdevsim netdevsim1 netdevsim2: set [0, 1] type 1 family 0 port 2816 - 0 [ 442.714680][ T7029] netdevsim netdevsim1 netdevsim1: set [0, 1] type 1 family 0 port 2816 - 0 [ 442.714709][ T7029] netdevsim netdevsim1 netdevsim0: set [0, 1] type 1 family 0 port 2816 - 0 [ 442.912064][T18292] netlink: 'syz.3.3737': attribute type 62 has an invalid length. [ 443.675678][T18330] __nla_validate_parse: 3 callbacks suppressed [ 443.675696][T18330] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3746'. [ 443.932003][T18342] netlink: 'syz.1.3751': attribute type 1 has an invalid length. [ 443.932117][T18342] netlink: 'syz.1.3751': attribute type 1 has an invalid length. [ 444.001755][T18346] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3752'. [ 444.038870][T18346] 8021q: adding VLAN 0 to HW filter on device bond1 [ 444.065997][T18346] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 444.102248][T18346] bond1 (unregistering): (slave geneve2): Releasing backup interface [ 444.117203][T18346] bond1 (unregistering): Released all slaves [ 444.171488][T18349] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3753'. [ 444.171641][T18349] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3753'. [ 444.311495][T18354] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3756'. [ 444.391803][ T5716] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 444.392440][T18356] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 444.439236][ T5716] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 444.452801][T18359] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3757'. [ 444.452824][T18359] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3757'. [ 444.453873][T18359] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3757'. [ 444.485172][ T5622] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 444.485434][ T5622] Bluetooth: hci0: command 0x0411 tx timeout [ 444.635183][T18368] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 444.691545][T18370] netlink: Conntrack attr has 8 unknown bytes [ 444.691579][T18370] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 445.116771][T18384] netlink: 'syz.3.3766': attribute type 1 has an invalid length. [ 445.116792][T18384] netlink: 'syz.3.3766': attribute type 6 has an invalid length. [ 445.187226][T18386] netlink: 17 bytes leftover after parsing attributes in process `syz.1.3768'. [ 445.340457][T18393] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 445.620215][T18403] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3776'. [ 445.855849][T18414] veth0: entered promiscuous mode [ 445.885838][T18414] bond1: up delay (10) is not a multiple of miimon (7), value rounded to 7 ms [ 445.887730][T18414] bond1 (unregistering): Released all slaves [ 446.005820][T18413] veth0: left promiscuous mode [ 446.064044][T18422] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 446.064618][ T6833] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 446.091897][ T6833] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 446.152561][ T6833] hid-generic 0005:0008:0009.0003: hidraw0: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 446.317713][T18425] fido_id[18425]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci0/hci0:200/report_descriptor': No such file or directory [ 446.690354][ T30] audit: type=1804 audit(1790154238.632:15): pid=18450 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.3792" name="/newroot/148/cgroup.controllers" dev="tmpfs" ino=776 res=1 errno=0 [ 446.690627][ T30] audit: type=1800 audit(1790154238.632:16): pid=18450 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3792" name="cgroup.controllers" dev="tmpfs" ino=776 res=0 errno=0 [ 446.998954][T18458] netlink: 'syz.1.3794': attribute type 3 has an invalid length. [ 447.004164][T18458] tipc: Enabling of bearer rejected, failed to enable media [ 448.222584][T18485] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 448.243733][T18485] netlink: 'syz.0.3805': attribute type 5 has an invalid length. [ 448.289884][T18485] netlink: 'syz.0.3805': attribute type 5 has an invalid length. [ 448.297847][ T5615] block nbd1: Receive control failed (result -1) [ 448.299715][ T7034] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 448.300699][ T7034] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 448.300809][ T7034] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 448.300840][ T7034] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 448.494546][T18498] netlink: 'syz.0.3810': attribute type 1 has an invalid length. [ 448.496993][T18495] FAULT_INJECTION: forcing a failure. [ 448.496993][T18495] name failslab, interval 1, probability 0, space 0, times 0 [ 448.497031][T18495] CPU: 1 UID: 0 PID: 18495 Comm: syz.4.3806 Not tainted syzkaller #0 PREEMPT(full) [ 448.497050][T18495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 448.497061][T18495] Call Trace: [ 448.497068][T18495] [ 448.497075][T18495] dump_stack_lvl+0xe8/0x150 [ 448.497106][T18495] should_fail_ex+0x410/0x560 [ 448.497132][T18495] should_failslab+0xa8/0x100 [ 448.497156][T18495] __kmalloc_noprof+0xfe/0x720 [ 448.497171][T18495] ? tls_sw_sendmsg+0x15f/0x2b50 [ 448.497321][T18495] ? tls_sw_sendmsg+0x59b/0x2b50 [ 448.497343][T18495] ? tls_sw_sendmsg+0x59b/0x2b50 [ 448.497373][T18495] tls_sw_sendmsg+0x59b/0x2b50 [ 448.497439][T18495] ? __pfx_tls_sw_sendmsg+0x10/0x10 [ 448.497472][T18495] ? sock_rps_record_flow+0x19/0x350 [ 448.497495][T18495] ? inet_send_prepare+0x5b/0x260 [ 448.497516][T18495] ? inet6_sendmsg+0x101/0x120 [ 448.497577][T18495] ? __pfx_inet6_sendmsg+0x10/0x10 [ 448.497604][T18495] sock_sendmsg_nosec+0x90/0x180 [ 448.497626][T18495] sock_sendmsg+0x1ca/0x2d0 [ 448.497650][T18495] ? __pfx_sock_sendmsg+0x10/0x10 [ 448.497682][T18495] ? __asan_memset+0x22/0x50 [ 448.497709][T18495] ? iov_iter_bvec+0xb8/0x180 [ 448.497734][T18495] splice_to_socket+0xb5e/0x12a0 [ 448.497784][T18495] ? __pfx_splice_to_socket+0x10/0x10 [ 448.497857][T18495] ? __pfx_splice_to_socket+0x10/0x10 [ 448.497885][T18495] direct_splice_actor+0x101/0x160 [ 448.497915][T18495] splice_direct_to_actor+0x57b/0xcb0 [ 448.497962][T18495] ? __pfx_direct_splice_actor+0x10/0x10 [ 448.497989][T18495] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 448.498033][T18495] do_splice_direct+0x195/0x290 [ 448.498062][T18495] ? __pfx_do_splice_direct+0x10/0x10 [ 448.498090][T18495] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 448.498111][T18495] ? bpf_lsm_file_permission+0x9/0x20 [ 448.498136][T18495] ? security_file_permission+0x75/0x260 [ 448.498157][T18495] ? rw_verify_area+0x203/0x4c0 [ 448.498187][T18495] do_sendfile+0x52e/0x7c0 [ 448.498218][T18495] ? __pfx_do_sendfile+0x10/0x10 [ 448.498240][T18495] ? __fget_files+0x3a2/0x420 [ 448.498276][T18495] __se_sys_sendfile64+0x144/0x1a0 [ 448.498300][T18495] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 448.498330][T18495] do_syscall_64+0x166/0x520 [ 448.498353][T18495] ? trace_irq_disable+0x3b/0x140 [ 448.498371][T18495] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.498390][T18495] ? clear_bhb_loop+0x70/0xc0 [ 448.498413][T18495] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.498432][T18495] RIP: 0033:0x7f0e2ff9e159 [ 448.498449][T18495] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 448.498465][T18495] RSP: 002b:00007f0e30e71028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 448.498485][T18495] RAX: ffffffffffffffda RBX: 00007f0e30226180 RCX: 00007f0e2ff9e159 [ 448.498499][T18495] RDX: 0000000000000000 RSI: 000000000000000d RDI: 0000000000000004 [ 448.498510][T18495] RBP: 00007f0e30e71090 R08: 0000000000000000 R09: 0000000000000000 [ 448.498521][T18495] R10: 0000020000000002 R11: 0000000000000246 R12: 0000000000000002 [ 448.498533][T18495] R13: 00007f0e30226218 R14: 00007f0e30226180 R15: 00007ffe18023ea8 [ 448.498564][T18495] [ 448.673498][T18498] 8021q: adding VLAN 0 to HW filter on device bond5 [ 448.835691][T18508] __nla_validate_parse: 14 callbacks suppressed [ 448.835709][T18508] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3809'. [ 448.857965][T18499] bond5: (slave geneve2): making interface the new active one [ 448.881704][T18499] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 448.928141][T18512] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3812'. [ 448.939504][T18511] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3811'. [ 449.034655][ T7026] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.075132][ T7026] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.075174][ T7026] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.075205][ T7026] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.114264][T18516] netlink: 165 bytes leftover after parsing attributes in process `syz.0.3813'. [ 449.229486][T18522] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3818'. [ 449.569617][T18537] Cannot find del_set index 3 as target [ 450.020534][T18519] hsr0 speed is unknown, defaulting to 1000 [ 450.046791][T18536] macsec1: entered promiscuous mode [ 450.053354][T18519] lo speed is unknown, defaulting to 1000 [ 450.099146][T18519] dummy0 speed is unknown, defaulting to 1000 [ 450.293237][T18547] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3823'. [ 450.419738][T18550] sctp: [Deprecated]: syz.1.3825 (pid 18550) Use of struct sctp_assoc_value in delayed_ack socket option. [ 450.419738][T18550] Use struct sctp_sack_info instead [ 450.491474][T18554] xt_hashlimit: size too large, truncated to 1048576 [ 450.578161][T18556] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3828'. [ 450.893980][T18569] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 451.083651][T18568] syzkaller0: entered promiscuous mode [ 451.083691][T18568] syzkaller0: entered allmulticast mode [ 451.092653][T18574] tipc: Enabling of bearer rejected, failed to enable media [ 451.369959][T18585] sctp: [Deprecated]: syz.4.3838 (pid 18585) Use of struct sctp_assoc_value in delayed_ack socket option. [ 451.369959][T18585] Use struct sctp_sack_info instead [ 451.506820][T18587] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3839'. [ 451.506847][T18587] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3839'. [ 451.510938][T18587] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3839'. [ 452.026326][T18607] geneve0: mtu less than device minimum [ 452.194258][ T80] IPVS: starting estimator thread 0... [ 452.274743][T18615] IPVS: using max 27 ests per chain, 64800 per kthread [ 452.482231][T18626] syzkaller0: entered promiscuous mode [ 452.482252][T18626] syzkaller0: entered allmulticast mode [ 452.497274][T18627] syzkaller0: entered promiscuous mode [ 452.497293][T18627] syzkaller0: entered allmulticast mode [ 452.552271][T18627] tipc: Enabling of bearer rejected, failed to enable media [ 452.598453][T18629] hsr0 speed is unknown, defaulting to 1000 [ 452.601577][T18629] lo speed is unknown, defaulting to 1000 [ 452.603435][T18629] dummy0 speed is unknown, defaulting to 1000 [ 452.720007][T18632] sctp: [Deprecated]: syz.2.3850 (pid 18632) Use of struct sctp_assoc_value in delayed_ack socket option. [ 452.720007][T18632] Use struct sctp_sack_info instead [ 452.780279][T18636] syzkaller0: entered promiscuous mode [ 452.780300][T18636] syzkaller0: entered allmulticast mode [ 453.161992][T18650] netlink: 'syz.2.3856': attribute type 3 has an invalid length. [ 453.597316][T18630] netlink: 'syz.1.3849': attribute type 15 has an invalid length. [ 453.731671][T18670] syzkaller0: entered promiscuous mode [ 453.731693][T18670] syzkaller0: entered allmulticast mode [ 454.046847][T18694] bridge_slave_0: left allmulticast mode [ 454.046878][T18694] bridge_slave_0: left promiscuous mode [ 454.047056][T18694] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.053846][T18694] bridge_slave_1: left allmulticast mode [ 454.053869][T18694] bridge_slave_1: left promiscuous mode [ 454.054063][T18694] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.081207][T18694] bond0: (slave bond_slave_0): Releasing backup interface [ 454.108254][T18694] bond0: (slave bond_slave_1): Releasing backup interface [ 454.132275][T18694] team0: Port device team_slave_0 removed [ 454.146508][T18694] team0: Port device team_slave_1 removed [ 454.147161][T18694] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 454.147173][T18694] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 454.177951][T18694] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 454.397141][T18703] tipc: Resetting bearer [ 454.479856][T18717] netlink: 'syz.2.3869': attribute type 4 has an invalid length. [ 454.586389][T18722] __nla_validate_parse: 3 callbacks suppressed [ 454.586406][T18722] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3871'. [ 454.654549][ T80] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 454.654627][ T80] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 454.654658][ T80] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 454.654686][ T80] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 454.904012][T18732] syzkaller0: entered promiscuous mode [ 454.904025][T18732] syzkaller0: entered allmulticast mode [ 455.120688][T18740] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3878'. [ 455.148255][ T80] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 455.148275][ T80] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 455.171489][ T80] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 455.171508][ T80] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 455.252331][T18752] netlink: 'syz.1.3879': attribute type 5 has an invalid length. [ 455.252351][T18752] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3879'. [ 455.253094][T18752] openvswitch: netlink: Flow actions attr not present in new flow. [ 456.050096][T18775] syzkaller0: entered promiscuous mode [ 456.050109][T18775] syzkaller0: entered allmulticast mode [ 456.131363][T18780] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 456.131380][T18780] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 456.461899][T18794] openvswitch: netlink: Flow key attr not present in new flow. [ 458.007930][T18739] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 458.256431][T18804] netlink: 'syz.0.3898': attribute type 12 has an invalid length. [ 458.256452][T18804] netlink: 'syz.0.3898': attribute type 29 has an invalid length. [ 458.256465][T18804] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3898'. [ 458.473722][T18811] x_tables: duplicate underflow at hook 1 [ 458.550816][T18816] FAULT_INJECTION: forcing a failure. [ 458.550816][T18816] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 458.550847][T18816] CPU: 0 UID: 0 PID: 18816 Comm: syz.2.3902 Not tainted syzkaller #0 PREEMPT(full) [ 458.550868][T18816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 458.550877][T18816] Call Trace: [ 458.550886][T18816] [ 458.550894][T18816] dump_stack_lvl+0xe8/0x150 [ 458.550926][T18816] should_fail_ex+0x410/0x560 [ 458.550953][T18816] _copy_to_user+0x31/0xb0 [ 458.550978][T18816] bpf_test_finish+0x1cf/0x690 [ 458.551013][T18816] ? __pfx_bpf_test_finish+0x10/0x10 [ 458.551045][T18816] ? _copy_from_user+0x94/0xb0 [ 458.551067][T18816] ? bpf_test_init+0x113/0x150 [ 458.551094][T18816] bpf_prog_test_run_xdp+0x8bc/0x11d0 [ 458.551136][T18816] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 458.551167][T18816] ? __fget_files+0x2a/0x420 [ 458.551196][T18816] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 458.551224][T18816] bpf_prog_test_run+0x2c5/0x340 [ 458.551249][T18816] __sys_bpf+0xa22/0xd90 [ 458.551277][T18816] ? __pfx___sys_bpf+0x10/0x10 [ 458.551307][T18816] ? __fget_files+0x2a/0x420 [ 458.551345][T18816] ? ksys_write+0x242/0x270 [ 458.551380][T18816] ? __pfx_ksys_write+0x10/0x10 [ 458.551410][T18816] __x64_sys_bpf+0xba/0xd0 [ 458.551431][T18816] do_syscall_64+0x166/0x520 [ 458.551452][T18816] ? trace_irq_disable+0x3b/0x140 [ 458.551468][T18816] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.551487][T18816] ? clear_bhb_loop+0x70/0xc0 [ 458.551508][T18816] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.551526][T18816] RIP: 0033:0x7f262d99e159 [ 458.551543][T18816] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 458.551558][T18816] RSP: 002b:00007f262e7f3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 458.551579][T18816] RAX: ffffffffffffffda RBX: 00007f262dc25fa0 RCX: 00007f262d99e159 [ 458.551592][T18816] RDX: 0000000000000021 RSI: 0000200000000680 RDI: 000000000000000a [ 458.551603][T18816] RBP: 00007f262e7f3090 R08: 0000000000000000 R09: 0000000000000000 [ 458.551615][T18816] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 458.551624][T18816] R13: 00007f262dc26038 R14: 00007f262dc25fa0 R15: 00007ffc27458d18 [ 458.551651][T18816] [ 458.938393][T18831] FAULT_INJECTION: forcing a failure. [ 458.938393][T18831] name failslab, interval 1, probability 0, space 0, times 0 [ 458.938433][T18831] CPU: 0 UID: 0 PID: 18831 Comm: syz.3.3906 Not tainted syzkaller #0 PREEMPT(full) [ 458.938453][T18831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 458.938464][T18831] Call Trace: [ 458.938472][T18831] [ 458.938481][T18831] dump_stack_lvl+0xe8/0x150 [ 458.938512][T18831] should_fail_ex+0x410/0x560 [ 458.938538][T18831] should_failslab+0xa8/0x100 [ 458.938563][T18831] __kmalloc_node_track_caller_noprof+0xfb/0x720 [ 458.938584][T18831] ? kobject_set_name_vargs+0x61/0x110 [ 458.938610][T18831] ? kobject_set_name_vargs+0x61/0x110 [ 458.938641][T18831] kstrdup+0x42/0x100 [ 458.938662][T18831] kobject_set_name_vargs+0x61/0x110 [ 458.938690][T18831] dev_set_name+0xe2/0x140 [ 458.938821][T18831] ? __pfx_dev_set_name+0x10/0x10 [ 458.938845][T18831] ? __init_waitqueue_head+0xa8/0x150 [ 458.938873][T18831] ? device_initialize+0x394/0x470 [ 458.938925][T18831] netdev_register_kobject+0xb7/0x350 [ 458.938951][T18831] register_netdevice+0x1433/0x1eb0 [ 458.939024][T18831] ? __pfx_register_netdevice+0x10/0x10 [ 458.939051][T18831] ? __kasan_kmalloc+0x93/0xb0 [ 458.939076][T18831] ? __kmalloc_cache_noprof+0x14d/0x600 [ 458.939094][T18831] ? register_vlan_dev+0x34c/0x830 [ 458.939183][T18831] register_vlan_dev+0x3b3/0x830 [ 458.939212][T18831] vlan_newlink+0x4b2/0x610 [ 458.939237][T18831] ? __pfx_vlan_newlink+0x10/0x10 [ 458.939263][T18831] rtnl_newlink_create+0x305/0x7b0 [ 458.939322][T18831] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 458.939349][T18831] ? __pfx___mutex_lock+0x10/0x10 [ 458.939382][T18831] ? ns_capable+0x89/0xe0 [ 458.939425][T18831] rtnl_newlink+0x167a/0x1c30 [ 458.939463][T18831] ? __pfx_rtnl_newlink+0x10/0x10 [ 458.939483][T18831] ? __lock_acquire+0x747/0x2de0 [ 458.939506][T18831] ? __lock_acquire+0x747/0x2de0 [ 458.939531][T18831] ? __lock_acquire+0x747/0x2de0 [ 458.939565][T18831] ? lock_acquire+0x115/0x350 [ 458.939590][T18831] ? lock_acquire+0x115/0x350 [ 458.939618][T18831] ? is_bpf_text_address+0x26/0x2b0 [ 458.939654][T18831] ? __lock_acquire+0x747/0x2de0 [ 458.939678][T18831] ? __kernel_text_address+0xd/0x30 [ 458.939699][T18831] ? unwind_get_return_address+0x4d/0x90 [ 458.939720][T18831] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 458.939739][T18831] ? arch_stack_walk+0xfb/0x150 [ 458.939795][T18831] ? __pfx_rtnl_newlink+0x10/0x10 [ 458.939816][T18831] rtnetlink_rcv_msg+0x802/0xc00 [ 458.939836][T18831] ? netlink_sendmsg+0x5d4/0xb40 [ 458.939857][T18831] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 458.939879][T18831] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 458.939902][T18831] ? __lock_acquire+0x747/0x2de0 [ 458.939930][T18831] netlink_rcv_skb+0x226/0x4a0 [ 458.939958][T18831] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 458.939982][T18831] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 458.940019][T18831] ? netlink_deliver_tap+0x2e/0x1b0 [ 458.940045][T18831] ? netlink_deliver_tap+0x2e/0x1b0 [ 458.940076][T18831] netlink_unicast+0x7bd/0x940 [ 458.940109][T18831] netlink_sendmsg+0x813/0xb40 [ 458.940135][T18831] ? __pfx_netlink_sendmsg+0x10/0x10 [ 458.940159][T18831] ? apparmor_socket_sendmsg+0x98/0x360 [ 458.940181][T18831] ? __pfx_netlink_sendmsg+0x10/0x10 [ 458.940195][T18831] sock_sendmsg_nosec+0x13a/0x180 [ 458.940215][T18831] ____sys_sendmsg+0x54e/0x850 [ 458.940243][T18831] ? __pfx_____sys_sendmsg+0x10/0x10 [ 458.940274][T18831] ? import_iovec+0x73/0xa0 [ 458.940300][T18831] ___sys_sendmsg+0x2a5/0x360 [ 458.940321][T18831] ? __lock_acquire+0x747/0x2de0 [ 458.940342][T18831] ? __pfx____sys_sendmsg+0x10/0x10 [ 458.940396][T18831] ? __fget_files+0x2a/0x420 [ 458.940426][T18831] ? __fget_files+0x3a2/0x420 [ 458.940459][T18831] __x64_sys_sendmsg+0x1b1/0x290 [ 458.940485][T18831] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 458.940530][T18831] do_syscall_64+0x166/0x520 [ 458.940552][T18831] ? trace_irq_disable+0x3b/0x140 [ 458.940569][T18831] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.940588][T18831] ? clear_bhb_loop+0x70/0xc0 [ 458.940609][T18831] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.940628][T18831] RIP: 0033:0x7f109519e159 [ 458.940645][T18831] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 458.940660][T18831] RSP: 002b:00007f1096080028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 458.940678][T18831] RAX: ffffffffffffffda RBX: 00007f1095425fa0 RCX: 00007f109519e159 [ 458.940691][T18831] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 458.940702][T18831] RBP: 00007f1096080090 R08: 0000000000000000 R09: 0000000000000000 [ 458.940712][T18831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 458.940721][T18831] R13: 00007f1095426038 R14: 00007f1095425fa0 R15: 00007ffd85a96528 [ 458.940747][T18831] [ 459.354048][T18836] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3908'. [ 459.500927][T18841] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3907'. [ 459.543905][T18841] bond2: up delay (10) is not a multiple of miimon (7), value rounded to 7 ms [ 459.557834][T18841] bond2 (unregistering): Released all slaves [ 459.783414][T18848] syzkaller0: entered promiscuous mode [ 459.783435][T18848] syzkaller0: entered allmulticast mode [ 459.842297][T18856] xt_connbytes: Forcing CT accounting to be enabled [ 459.842553][T18856] FAULT_INJECTION: forcing a failure. [ 459.842553][T18856] name failslab, interval 1, probability 0, space 0, times 0 [ 459.842578][T18856] CPU: 0 UID: 0 PID: 18856 Comm: syz.3.3915 Not tainted syzkaller #0 PREEMPT(full) [ 459.842598][T18856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 459.842610][T18856] Call Trace: [ 459.842617][T18856] [ 459.842626][T18856] dump_stack_lvl+0xe8/0x150 [ 459.842657][T18856] should_fail_ex+0x410/0x560 [ 459.842684][T18856] should_failslab+0xa8/0x100 [ 459.842709][T18856] __kvmalloc_node_noprof+0x176/0x820 [ 459.842733][T18856] ? __nf_hook_entries_try_shrink+0x34e/0x720 [ 459.842833][T18856] ? __nf_hook_entries_try_shrink+0x34e/0x720 [ 459.842861][T18856] __nf_hook_entries_try_shrink+0x34e/0x720 [ 459.842893][T18856] __nf_unregister_net_hook+0x4be/0x6d0 [ 459.842924][T18856] nf_unregister_net_hooks+0xcb/0x140 [ 459.842948][T18856] nf_ct_netns_put+0x36d/0x520 [ 459.843011][T18856] ? __pfx_connbytes_mt_destroy+0x10/0x10 [ 459.843084][T18856] cleanup_entry+0x15f/0x360 [ 459.843140][T18856] ? __pfx_cleanup_entry+0x10/0x10 [ 459.843172][T18856] ? _copy_from_user+0x94/0xb0 [ 459.843200][T18856] do_ip6t_set_ctl+0xb9c/0xe30 [ 459.843229][T18856] ? rcu_is_watching+0x16/0xb0 [ 459.843252][T18856] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 459.843290][T18856] ? __mutex_unlock_slowpath+0x731/0x900 [ 459.843320][T18856] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 459.843357][T18856] nf_setsockopt+0x26f/0x290 [ 459.843416][T18856] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 459.843440][T18856] do_sock_setsockopt+0x17c/0x1b0 [ 459.843468][T18856] __x64_sys_setsockopt+0x13d/0x1b0 [ 459.843497][T18856] do_syscall_64+0x166/0x520 [ 459.843519][T18856] ? trace_irq_disable+0x3b/0x140 [ 459.843537][T18856] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.843557][T18856] ? clear_bhb_loop+0x70/0xc0 [ 459.843578][T18856] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.843595][T18856] RIP: 0033:0x7f109519e159 [ 459.843612][T18856] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 459.843627][T18856] RSP: 002b:00007f1096080028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 459.843646][T18856] RAX: ffffffffffffffda RBX: 00007f1095425fa0 RCX: 00007f109519e159 [ 459.843659][T18856] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 459.843669][T18856] RBP: 00007f1096080090 R08: 00000000000003e0 R09: 0000000000000000 [ 459.843681][T18856] R10: 0000200000000a40 R11: 0000000000000246 R12: 0000000000000002 [ 459.843692][T18856] R13: 00007f1095426038 R14: 00007f1095425fa0 R15: 00007ffd85a96528 [ 459.843723][T18856] [ 460.176825][T18855] syzkaller0: entered promiscuous mode [ 460.176847][T18855] syzkaller0: entered allmulticast mode [ 461.632050][T18901] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3928'. [ 462.446006][T18881] vlan2: entered promiscuous mode [ 462.446026][T18881] bridge0: entered promiscuous mode [ 462.616686][T18904] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 462.616898][T18904] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 462.779469][T18919] netlink: 92 bytes leftover after parsing attributes in process `syz.1.3936'. [ 462.797364][T18915] netlink: 'syz.4.3934': attribute type 1 has an invalid length. [ 462.824951][T18915] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3934'. [ 462.903271][T18924] Bluetooth: hci0: invalid length 0, exp 2 for type 22 [ 462.903479][T18920] IPVS: Scheduler module ip_vs_sip not found [ 462.906124][T18924] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 463.203903][T18933] ip6gre1: entered promiscuous mode [ 463.203925][T18933] ip6gre1: entered allmulticast mode [ 463.249533][T18933] xt_connbytes: Forcing CT accounting to be enabled [ 463.259549][T18940] syzkaller0: entered promiscuous mode [ 463.259570][T18940] syzkaller0: entered allmulticast mode [ 463.400212][ T80] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 463.400416][ T80] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 463.420617][T18949] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 463.421992][ T7031] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 463.422009][ T7031] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 463.532141][T18951] sctp: [Deprecated]: syz.4.3946 (pid 18951) Use of struct sctp_assoc_value in delayed_ack socket option. [ 463.532141][T18951] Use struct sctp_sack_info instead [ 463.744612][ T5716] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 464.059799][T18968] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3951'. [ 464.059825][T18968] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3951'. [ 464.069794][T18968] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3951'. [ 464.102121][T18971] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3953'. [ 464.119850][T18972] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3952'. [ 464.207568][T18966] openvswitch: netlink: Flow actions attr not present in new flow. [ 464.407158][ T5716] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 464.442257][ T30] audit: type=1804 audit(1790154256.382:17): pid=18981 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.3955" name="/newroot/185/cgroup.controllers" dev="tmpfs" ino=959 res=1 errno=0 [ 464.442306][ T30] audit: type=1800 audit(1790154256.382:18): pid=18981 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3955" name="cgroup.controllers" dev="tmpfs" ino=959 res=0 errno=0 [ 464.470110][T18981] No such timeout policy "syz0" [ 464.609984][T18987] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3960'. [ 464.610010][T18987] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3960'. [ 464.848424][T18994] netlink: zone id is out of range [ 464.848450][T18994] netlink: zone id is out of range [ 464.848454][T18994] netlink: zone id is out of range [ 464.855742][ T7031] netdevsim netdevsim2 netdevsim3: set [0, 1] type 1 family 0 port 4352 - 0 [ 464.855782][ T7031] netdevsim netdevsim2 netdevsim2: set [0, 1] type 1 family 0 port 4352 - 0 [ 464.855812][ T7031] netdevsim netdevsim2 netdevsim1: set [0, 1] type 1 family 0 port 4352 - 0 [ 464.855840][ T7031] netdevsim netdevsim2 netdevsim0: set [0, 1] type 1 family 0 port 4352 - 0 [ 464.921706][ T7034] IPVS: starting estimator thread 0... [ 464.931539][T18996] FAULT_INJECTION: forcing a failure. [ 464.931539][T18996] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 464.931568][T18996] CPU: 0 UID: 0 PID: 18996 Comm: syz.0.3963 Not tainted syzkaller #0 PREEMPT(full) [ 464.931588][T18996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 464.931599][T18996] Call Trace: [ 464.931617][T18996] [ 464.931625][T18996] dump_stack_lvl+0xe8/0x150 [ 464.931658][T18996] should_fail_ex+0x410/0x560 [ 464.931686][T18996] _copy_from_user+0x2d/0xb0 [ 464.931708][T18996] ___sys_sendmsg+0x1c6/0x360 [ 464.931737][T18996] ? __lock_acquire+0x747/0x2de0 [ 464.931760][T18996] ? __pfx____sys_sendmsg+0x10/0x10 [ 464.931814][T18996] ? __fget_files+0x2a/0x420 [ 464.931838][T18996] ? __fget_files+0x3a2/0x420 [ 464.931870][T18996] __x64_sys_sendmsg+0x1b1/0x290 [ 464.931897][T18996] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 464.931939][T18996] do_syscall_64+0x166/0x520 [ 464.931962][T18996] ? trace_irq_disable+0x3b/0x140 [ 464.931981][T18996] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.932001][T18996] ? clear_bhb_loop+0x70/0xc0 [ 464.932022][T18996] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.932038][T18996] RIP: 0033:0x7f138959e159 [ 464.932055][T18996] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 464.932069][T18996] RSP: 002b:00007f138a542028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 464.932089][T18996] RAX: ffffffffffffffda RBX: 00007f1389825fa0 RCX: 00007f138959e159 [ 464.932102][T18996] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000008 [ 464.932113][T18996] RBP: 00007f138a542090 R08: 0000000000000000 R09: 0000000000000000 [ 464.932123][T18996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 464.932133][T18996] R13: 00007f1389826038 R14: 00007f1389825fa0 R15: 00007ffe02601238 [ 464.932162][T18996] [ 465.017858][T18999] IPVS: using max 32 ests per chain, 76800 per kthread [ 465.487978][T19021] FAULT_INJECTION: forcing a failure. [ 465.487978][T19021] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 465.488008][T19021] CPU: 1 UID: 0 PID: 19021 Comm: syz.4.3970 Not tainted syzkaller #0 PREEMPT(full) [ 465.488027][T19021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 465.488046][T19021] Call Trace: [ 465.488053][T19021] [ 465.488061][T19021] dump_stack_lvl+0xe8/0x150 [ 465.488093][T19021] should_fail_ex+0x410/0x560 [ 465.488119][T19021] prepare_alloc_pages+0x223/0x600 [ 465.488142][T19021] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 465.488186][T19021] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 465.488217][T19021] ? __alloc_frozen_pages_noprof+0x29e/0x5a0 [ 465.488240][T19021] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 465.488263][T19021] ? __pfx_policy_nodemask+0x10/0x10 [ 465.488297][T19021] ? __get_vm_area_node+0x155/0x2f0 [ 465.488321][T19021] ? __vmalloc_node_range_noprof+0x343/0x1540 [ 465.488347][T19021] ? __vmalloc_noprof+0xd2/0x120 [ 465.488374][T19021] __alloc_pages_noprof+0x10/0x100 [ 465.488394][T19021] alloc_pages_bulk_noprof+0x5fa/0x7c0 [ 465.488419][T19021] ? alloc_pages_noprof+0x140/0x2b0 [ 465.488441][T19021] __kasan_populate_vmalloc+0xb7/0x1c0 [ 465.488461][T19021] alloc_vmap_area+0xd1a/0x1420 [ 465.488494][T19021] ? __pfx_alloc_vmap_area+0x10/0x10 [ 465.488513][T19021] ? __kmalloc_cache_node_noprof+0x3d1/0x620 [ 465.488538][T19021] ? __kmalloc_cache_node_noprof+0x1f7/0x620 [ 465.488555][T19021] ? __get_vm_area_node+0x155/0x2f0 [ 465.488579][T19021] __get_vm_area_node+0x200/0x2f0 [ 465.488606][T19021] __vmalloc_node_range_noprof+0x343/0x1540 [ 465.488629][T19021] ? bpf_prog_calc_tag+0x51/0x370 [ 465.488649][T19021] ? __x64_sys_bpf+0xba/0xd0 [ 465.488663][T19021] ? do_syscall_64+0x166/0x520 [ 465.488689][T19021] ? __kasan_kmalloc+0x93/0xb0 [ 465.488709][T19021] ? bpf_prog_load+0x14d6/0x1c20 [ 465.488740][T19021] ? __sys_bpf+0xd0d/0xd90 [ 465.488757][T19021] ? __x64_sys_bpf+0xba/0xd0 [ 465.488783][T19021] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 465.488831][T19021] ? bpf_prog_calc_tag+0x51/0x370 [ 465.488849][T19021] __vmalloc_noprof+0xd2/0x120 [ 465.488888][T19021] ? bpf_prog_calc_tag+0x51/0x370 [ 465.488913][T19021] bpf_prog_calc_tag+0x51/0x370 [ 465.488934][T19021] ? __pfx_cmp_subprogs+0x10/0x10 [ 465.488958][T19021] check_and_resolve_insns+0xbb/0x21d0 [ 465.488981][T19021] ? __pfx_bpf_check_btf_info+0x10/0x10 [ 465.489031][T19021] ? add_subprog+0x2e2/0x3f0 [ 465.489068][T19021] ? __pfx_check_and_resolve_insns+0x10/0x10 [ 465.489101][T19021] bpf_check+0x180a/0x2e10 [ 465.489154][T19021] ? ktime_get_with_offset+0x93/0x2d0 [ 465.489178][T19021] ? __pfx_bpf_check+0x10/0x10 [ 465.489201][T19021] ? bpf_obj_name_cpy+0x194/0x1e0 [ 465.489230][T19021] bpf_prog_load+0x14d6/0x1c20 [ 465.489267][T19021] ? __pfx_bpf_prog_load+0x10/0x10 [ 465.489323][T19021] __sys_bpf+0xd0d/0xd90 [ 465.489363][T19021] ? __pfx___sys_bpf+0x10/0x10 [ 465.489393][T19021] ? __fget_files+0x2a/0x420 [ 465.489435][T19021] ? ksys_write+0x242/0x270 [ 465.489464][T19021] ? __pfx_ksys_write+0x10/0x10 [ 465.489494][T19021] __x64_sys_bpf+0xba/0xd0 [ 465.489516][T19021] do_syscall_64+0x166/0x520 [ 465.489545][T19021] ? trace_irq_disable+0x3b/0x140 [ 465.489578][T19021] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.489597][T19021] ? clear_bhb_loop+0x70/0xc0 [ 465.489619][T19021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.489637][T19021] RIP: 0033:0x7f0e2ff9e159 [ 465.489655][T19021] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 465.489671][T19021] RSP: 002b:00007f0e30eb3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 465.489691][T19021] RAX: ffffffffffffffda RBX: 00007f0e30225fa0 RCX: 00007f0e2ff9e159 [ 465.489705][T19021] RDX: 0000000000000094 RSI: 0000200000000040 RDI: 0000000000000005 [ 465.489716][T19021] RBP: 00007f0e30eb3090 R08: 0000000000000000 R09: 0000000000000000 [ 465.489728][T19021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 465.489739][T19021] R13: 00007f0e30226038 R14: 00007f0e30225fa0 R15: 00007ffe18023ea8 [ 465.489769][T19021] [ 465.489865][T19021] syz.4.3970: vmalloc error: size 32, align 0x1, vm_struct allocation failed, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 465.489924][T19021] CPU: 1 UID: 0 PID: 19021 Comm: syz.4.3970 Not tainted syzkaller #0 PREEMPT(full) [ 465.489944][T19021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 465.489954][T19021] Call Trace: [ 465.489961][T19021] [ 465.489969][T19021] dump_stack_lvl+0xe8/0x150 [ 465.489996][T19021] warn_alloc+0x24d/0x270 [ 465.490016][T19021] ? lockdep_hardirqs_on+0x7b/0x110 [ 465.490040][T19021] ? __pfx_warn_alloc+0x10/0x10 [ 465.490058][T19021] ? kfree+0x1c5/0x650 [ 465.490089][T19021] ? __get_vm_area_node+0x219/0x2f0 [ 465.490121][T19021] __vmalloc_node_range_noprof+0x36b/0x1540 [ 465.490149][T19021] ? __x64_sys_bpf+0xba/0xd0 [ 465.490165][T19021] ? do_syscall_64+0x166/0x520 [ 465.490192][T19021] ? __kasan_kmalloc+0x93/0xb0 [ 465.490212][T19021] ? bpf_prog_load+0x14d6/0x1c20 [ 465.490231][T19021] ? __sys_bpf+0xd0d/0xd90 [ 465.490249][T19021] ? __x64_sys_bpf+0xba/0xd0 [ 465.490277][T19021] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 465.490312][T19021] ? bpf_prog_calc_tag+0x51/0x370 [ 465.490331][T19021] __vmalloc_noprof+0xd2/0x120 [ 465.490356][T19021] ? bpf_prog_calc_tag+0x51/0x370 [ 465.490380][T19021] bpf_prog_calc_tag+0x51/0x370 [ 465.490400][T19021] ? __pfx_cmp_subprogs+0x10/0x10 [ 465.490425][T19021] check_and_resolve_insns+0xbb/0x21d0 [ 465.490449][T19021] ? __pfx_bpf_check_btf_info+0x10/0x10 [ 465.490469][T19021] ? add_subprog+0x2e2/0x3f0 [ 465.490492][T19021] ? __pfx_check_and_resolve_insns+0x10/0x10 [ 465.490530][T19021] bpf_check+0x180a/0x2e10 [ 465.490560][T19021] ? ktime_get_with_offset+0x93/0x2d0 [ 465.490582][T19021] ? __pfx_bpf_check+0x10/0x10 [ 465.490603][T19021] ? bpf_obj_name_cpy+0x194/0x1e0 [ 465.490629][T19021] bpf_prog_load+0x14d6/0x1c20 [ 465.490656][T19021] ? __pfx_bpf_prog_load+0x10/0x10 [ 465.490696][T19021] __sys_bpf+0xd0d/0xd90 [ 465.490722][T19021] ? __pfx___sys_bpf+0x10/0x10 [ 465.490752][T19021] ? __fget_files+0x2a/0x420 [ 465.490791][T19021] ? ksys_write+0x242/0x270 [ 465.490818][T19021] ? __pfx_ksys_write+0x10/0x10 [ 465.490849][T19021] __x64_sys_bpf+0xba/0xd0 [ 465.490870][T19021] do_syscall_64+0x166/0x520 [ 465.490891][T19021] ? trace_irq_disable+0x3b/0x140 [ 465.490908][T19021] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.490926][T19021] ? clear_bhb_loop+0x70/0xc0 [ 465.490948][T19021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.490966][T19021] RIP: 0033:0x7f0e2ff9e159 [ 465.490982][T19021] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 465.490997][T19021] RSP: 002b:00007f0e30eb3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 465.491015][T19021] RAX: ffffffffffffffda RBX: 00007f0e30225fa0 RCX: 00007f0e2ff9e159 [ 465.491028][T19021] RDX: 0000000000000094 RSI: 0000200000000040 RDI: 0000000000000005 [ 465.491040][T19021] RBP: 00007f0e30eb3090 R08: 0000000000000000 R09: 0000000000000000 [ 465.491052][T19021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 465.491063][T19021] R13: 00007f0e30226038 R14: 00007f0e30225fa0 R15: 00007ffe18023ea8 [ 465.491093][T19021] [ 465.491107][T19021] Mem-Info: [ 465.491115][T19021] active_anon:6182 inactive_anon:0 isolated_anon:0 [ 465.491115][T19021] active_file:0 inactive_file:43829 isolated_file:0 [ 465.491115][T19021] unevictable:0 dirty:388 writeback:0 [ 465.491115][T19021] slab_reclaimable:11955 slab_unreclaimable:116210 [ 465.491115][T19021] mapped:30069 shmem:523 pagetables:1334 [ 465.491115][T19021] sec_pagetables:0 bounce:0 [ 465.491115][T19021] kernel_misc_reclaimable:0 [ 465.491115][T19021] free:1248647 free_pcp:11521 free_cma:0 [ 465.491161][T19021] Node 0 active_anon:24728kB inactive_anon:0kB active_file:0kB inactive_file:175116kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:120276kB dirty:1552kB writeback:0kB shmem:2092kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15272kB pagetables:5204kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 465.491209][T19021] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 465.491257][T19021] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 465.491378][T19021] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 465.491413][T19021] Node 0 DMA32 free:1027108kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:24728kB inactive_anon:0kB active_file:0kB inactive_file:175116kB unevictable:0kB writepending:1552kB zspages:0kB present:3129332kB managed:2546920kB mlocked:0kB bounce:0kB free_pcp:46084kB local_pcp:13184kB free_cma:0kB [ 465.491491][T19021] lowmem_reserve[]: 0 0 0 0 0 [ 465.491530][T19021] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 465.491578][T19021] lowmem_reserve[]: 0 0 0 0 0 [ 465.491609][T19021] Node 1 Normal free:3952120kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 465.491659][T19021] lowmem_reserve[]: 0 0 0 0 0 [ 465.491691][T19021] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 465.491795][T19021] Node 0 DMA32: 543*4kB (U) 16*8kB (U) 5*16kB (UM) 26*32kB (UE) 581*64kB (UME) 135*128kB (UE) 25*256kB (UM) 11*512kB (UME) 3*1024kB (ME) 4*2048kB (UME) 231*4096kB (UM) = 1027148kB [ 465.491937][T19021] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 465.492025][T19021] Node 1 Normal: 2*4kB (UM) 2*8kB (UM) 6*16kB (UM) 4*32kB (UM) 6*64kB (UM) 5*128kB (UM) 3*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 963*4096kB (M) = 3952120kB [ 465.492166][T19021] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 465.492181][T19021] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 465.492200][T19021] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 465.492215][T19021] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 465.492229][T19021] 44348 total pagecache pages [ 465.492240][T19021] 0 pages in swap cache [ 465.492247][T19021] Free swap = 124996kB [ 465.492254][T19021] Total swap = 124996kB [ 465.492261][T19021] 2097051 pages RAM [ 465.492268][T19021] 0 pages HighMem/MovableOnly [ 465.492274][T19021] 428705 pages reserved [ 465.492281][T19021] 0 pages cma reserved [ 465.938310][T19031] ip_tables: iptables: counters copy to user failed while replacing table [ 466.338262][T19038] FAULT_INJECTION: forcing a failure. [ 466.338262][T19038] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 466.338293][T19038] CPU: 0 UID: 0 PID: 19038 Comm: syz.4.3974 Not tainted syzkaller #0 PREEMPT(full) [ 466.338314][T19038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 466.338325][T19038] Call Trace: [ 466.338332][T19038] [ 466.338340][T19038] dump_stack_lvl+0xe8/0x150 [ 466.338369][T19038] should_fail_ex+0x410/0x560 [ 466.338395][T19038] prepare_alloc_pages+0x223/0x600 [ 466.338421][T19038] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 466.338444][T19038] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 466.338463][T19038] ? __alloc_frozen_pages_noprof+0x29e/0x5a0 [ 466.338485][T19038] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 466.338508][T19038] ? __pfx_policy_nodemask+0x10/0x10 [ 466.338535][T19038] __alloc_pages_noprof+0x10/0x100 [ 466.338556][T19038] alloc_pages_bulk_noprof+0x5fa/0x7c0 [ 466.338582][T19038] ? alloc_pages_noprof+0x140/0x2b0 [ 466.338607][T19038] __kasan_populate_vmalloc+0xb7/0x1c0 [ 466.338631][T19038] alloc_vmap_area+0xd1a/0x1420 [ 466.338669][T19038] ? __pfx_alloc_vmap_area+0x10/0x10 [ 466.338689][T19038] ? __kmalloc_cache_node_noprof+0x3d1/0x620 [ 466.338709][T19038] ? __kmalloc_cache_node_noprof+0x1f7/0x620 [ 466.338727][T19038] ? __get_vm_area_node+0x155/0x2f0 [ 466.338755][T19038] __get_vm_area_node+0x200/0x2f0 [ 466.338785][T19038] __vmalloc_node_range_noprof+0x343/0x1540 [ 466.338811][T19038] ? bpf_check+0x10ee/0x2e10 [ 466.338854][T19038] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 466.338879][T19038] ? __kasan_kmalloc+0x93/0xb0 [ 466.338900][T19038] ? __kmalloc_cache_noprof+0x321/0x600 [ 466.338918][T19038] ? __kmalloc_cache_noprof+0x14d/0x600 [ 466.338934][T19038] ? bpf_diag_init+0x87/0x140 [ 466.338953][T19038] ? bpf_diag_init+0x87/0x140 [ 466.338974][T19038] ? bpf_check+0x10ee/0x2e10 [ 466.338997][T19038] __vmalloc_noprof+0xd2/0x120 [ 466.339022][T19038] ? bpf_check+0x10ee/0x2e10 [ 466.339042][T19038] bpf_check+0x10ee/0x2e10 [ 466.339073][T19038] ? ktime_get_with_offset+0x93/0x2d0 [ 466.339096][T19038] ? __pfx_bpf_check+0x10/0x10 [ 466.339117][T19038] ? bpf_obj_name_cpy+0x194/0x1e0 [ 466.339145][T19038] bpf_prog_load+0x14d6/0x1c20 [ 466.339176][T19038] ? __pfx_bpf_prog_load+0x10/0x10 [ 466.339218][T19038] __sys_bpf+0xd0d/0xd90 [ 466.339245][T19038] ? __pfx___sys_bpf+0x10/0x10 [ 466.339274][T19038] ? __fget_files+0x2a/0x420 [ 466.339312][T19038] ? ksys_write+0x242/0x270 [ 466.339339][T19038] ? __pfx_ksys_write+0x10/0x10 [ 466.339369][T19038] __x64_sys_bpf+0xba/0xd0 [ 466.339389][T19038] do_syscall_64+0x166/0x520 [ 466.339411][T19038] ? trace_irq_disable+0x3b/0x140 [ 466.339429][T19038] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.339446][T19038] ? clear_bhb_loop+0x70/0xc0 [ 466.339468][T19038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.339484][T19038] RIP: 0033:0x7f0e2ff9e159 [ 466.339502][T19038] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 466.339516][T19038] RSP: 002b:00007f0e30eb3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 466.339535][T19038] RAX: ffffffffffffffda RBX: 00007f0e30225fa0 RCX: 00007f0e2ff9e159 [ 466.339548][T19038] RDX: 0000000000000094 RSI: 0000200000001000 RDI: 0000000000000005 [ 466.339560][T19038] RBP: 00007f0e30eb3090 R08: 0000000000000000 R09: 0000000000000000 [ 466.339571][T19038] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 466.339581][T19038] R13: 00007f0e30226038 R14: 00007f0e30225fa0 R15: 00007ffe18023ea8 [ 466.339609][T19038] [ 467.247567][T19059] __nla_validate_parse: 10 callbacks suppressed [ 467.247585][T19059] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3979'. [ 467.342498][T19059] bond1: up delay (10) is not a multiple of miimon (7), value rounded to 7 ms [ 467.351528][T19059] bond1 (unregistering): Released all slaves [ 467.535959][T19069] sctp: [Deprecated]: syz.1.3982 (pid 19069) Use of struct sctp_assoc_value in delayed_ack socket option. [ 467.535959][T19069] Use struct sctp_sack_info instead [ 467.684668][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 467.870164][T19098] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3989'. [ 467.993934][T19102] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3990'. [ 468.205840][T19105] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3991'. [ 468.418794][T19109] 8021q: adding VLAN 0 to HW filter on device bond0 [ 468.420493][T19109] 8021q: adding VLAN 0 to HW filter on device team0 [ 468.440791][T19110] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3992'. [ 468.448088][T19109] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 468.518160][T19109] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 468.522196][T19109] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 468.535400][T19109] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 468.535423][T19109] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 468.540628][T19109] veth1_vlan: left promiscuous mode [ 468.541728][T19109] veth0_vlan: left promiscuous mode [ 468.546022][T19109] veth0_vlan: entered promiscuous mode [ 468.547473][T19109] veth1_vlan: entered promiscuous mode [ 468.551405][T19109] veth1_macvtap: left promiscuous mode [ 468.552507][T19109] veth0_macvtap: left promiscuous mode [ 468.553561][T19109] veth0_macvtap: entered promiscuous mode [ 468.556092][T19109] veth1_macvtap: entered promiscuous mode [ 468.562254][T19109] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 468.563287][T19109] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 468.564297][T19109] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 468.566186][T19109] A link change request failed with some changes committed already. Interface vxlan0 may have been left with an inconsistent configuration, please check. [ 468.667120][T19110] macsec1: entered promiscuous mode [ 468.667136][T19110] macsec1: entered allmulticast mode [ 468.687562][ T80] bridge0: port 1(bridge_slave_0) entered blocking state [ 468.687661][ T80] bridge0: port 1(bridge_slave_0) entered forwarding state [ 468.691337][ T80] bridge0: port 2(bridge_slave_1) entered blocking state [ 468.691427][ T80] bridge0: port 2(bridge_slave_1) entered forwarding state [ 468.865285][T19117] syzkaller0: entered promiscuous mode [ 468.865309][T19117] syzkaller0: entered allmulticast mode [ 468.872718][T19119] netlink: 244 bytes leftover after parsing attributes in process `syz.0.3995'. [ 468.945939][T19121] FAULT_INJECTION: forcing a failure. [ 468.945939][T19121] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 468.945967][T19121] CPU: 1 UID: 0 PID: 19121 Comm: syz.4.3997 Not tainted syzkaller #0 PREEMPT(full) [ 468.945986][T19121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 468.946001][T19121] Call Trace: [ 468.946008][T19121] [ 468.946016][T19121] dump_stack_lvl+0xe8/0x150 [ 468.946047][T19121] should_fail_ex+0x410/0x560 [ 468.946072][T19121] _copy_to_user+0x31/0xb0 [ 468.946098][T19121] simple_read_from_buffer+0xe1/0x170 [ 468.946128][T19121] proc_fail_nth_read+0x1bb/0x230 [ 468.946155][T19121] ? common_file_perm+0x20e/0x2b0 [ 468.946180][T19121] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 468.946210][T19121] ? rw_verify_area+0x24a/0x4c0 [ 468.946238][T19121] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 468.946265][T19121] vfs_read+0x213/0xa80 [ 468.946292][T19121] ? do_sock_getsockopt+0x4aa/0x640 [ 468.946328][T19121] ? __pfx_vfs_read+0x10/0x10 [ 468.946353][T19121] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 468.946376][T19121] ? do_sys_openat2+0x14e/0x200 [ 468.946396][T19121] ? kmem_cache_free+0x182/0x650 [ 468.946430][T19121] ksys_read+0x150/0x270 [ 468.946458][T19121] ? __pfx_ksys_read+0x10/0x10 [ 468.946483][T19121] ? __x64_sys_getsockopt+0x1a4/0x240 [ 468.946514][T19121] do_syscall_64+0x166/0x520 [ 468.946536][T19121] ? trace_irq_disable+0x3b/0x140 [ 468.946554][T19121] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.946573][T19121] ? clear_bhb_loop+0x70/0xc0 [ 468.946595][T19121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.946613][T19121] RIP: 0033:0x7f0e2ff5e98e [ 468.946630][T19121] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 468.946646][T19121] RSP: 002b:00007f0e30eb2fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 468.946666][T19121] RAX: ffffffffffffffda RBX: 00007f0e30eb36c0 RCX: 00007f0e2ff5e98e [ 468.946679][T19121] RDX: 000000000000000f RSI: 00007f0e30eb30a0 RDI: 0000000000000004 [ 468.946692][T19121] RBP: 00007f0e30eb3090 R08: 0000000000000000 R09: 0000000000000000 [ 468.946703][T19121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 468.946715][T19121] R13: 00007f0e30226038 R14: 00007f0e30225fa0 R15: 00007ffe18023ea8 [ 468.946744][T19121] [ 468.953745][T19119] netlink: 'syz.0.3995': attribute type 1 has an invalid length. [ 469.065428][T19119] 8021q: adding VLAN 0 to HW filter on device bond6 [ 469.193991][T19124] bond6: (slave syz_tun): making interface the new active one [ 469.221949][T19124] bond6: (slave syz_tun): Enslaving as an active interface with an up link [ 469.538753][T19140] netlink: zone id is out of range [ 469.538769][T19140] netlink: zone id is out of range [ 469.538777][T19140] netlink: zone id is out of range [ 469.538785][T19140] netlink: zone id is out of range [ 469.538792][T19140] netlink: zone id is out of range [ 469.538800][T19140] netlink: zone id is out of range [ 469.538811][T19140] netlink: zone id is out of range [ 469.538819][T19140] netlink: zone id is out of range [ 469.538826][T19140] netlink: zone id is out of range [ 470.143176][T19160] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4008'. [ 470.318003][T19172] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4012'. [ 470.528725][T19169] veth0: entered promiscuous mode [ 470.574724][T19172] bond7: up delay (10) is not a multiple of miimon (7), value rounded to 7 ms [ 470.576222][T19172] bond7 (unregistering): Released all slaves [ 470.672418][T19168] veth0: left promiscuous mode [ 470.769269][ T7029] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 470.769303][ T7029] netdevsim netdevsim2 netdevsim3: unset [0, 1] type 1 family 0 port 4352 - 0 [ 470.769326][ T7029] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.785295][ T7029] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 470.785338][ T7029] netdevsim netdevsim2 netdevsim0: unset [0, 1] type 1 family 0 port 4352 - 0 [ 470.785361][ T7029] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.785429][ T7029] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 470.785450][ T7029] netdevsim netdevsim2 netdevsim1: unset [0, 1] type 1 family 0 port 4352 - 0 [ 470.785471][ T7029] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.785531][ T7029] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 470.785552][ T7029] netdevsim netdevsim2 netdevsim2: unset [0, 1] type 1 family 0 port 4352 - 0 [ 470.785572][ T7029] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.037244][T19197] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4020'. [ 471.182616][T19203] xt_hl: Unknown Hop Limit match mode: 4 [ 471.329964][T19207] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4024'. [ 471.390670][T19207] syzkaller1: entered promiscuous mode [ 471.390692][T19207] syzkaller1: entered allmulticast mode [ 471.679041][ T5615] block nbd2: Receive control failed (result -32) [ 471.926202][T19224] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 472.105043][ T7028] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 472.105072][ T7028] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 472.137312][ T7028] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 472.137343][ T7028] netdevsim netdevsim1 netdevsim3: unset [0, 1] type 1 family 0 port 2816 - 0 [ 472.137376][ T7028] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 472.137398][ T7028] netdevsim netdevsim1 netdevsim2: unset [0, 1] type 1 family 0 port 2816 - 0 [ 472.137429][ T7028] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 472.137451][ T7028] netdevsim netdevsim1 netdevsim1: unset [0, 1] type 1 family 0 port 2816 - 0 [ 472.140141][ T7028] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 472.140170][ T7028] netdevsim netdevsim1 netdevsim0: unset [0, 1] type 1 family 0 port 2816 - 0 [ 472.318897][T19247] siw: device registration error -23 [ 472.402169][T19236] vlan2: entered promiscuous mode [ 472.402193][T19236] macvlan0: entered promiscuous mode [ 472.445186][T19249] xt_nat: multiple ranges no longer supported [ 472.640668][T19264] __nla_validate_parse: 4 callbacks suppressed [ 472.640687][T19264] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4044'. [ 472.715397][T19267] netlink: 'syz.1.4045': attribute type 1 has an invalid length. [ 472.715417][T19267] netlink: 'syz.1.4045': attribute type 6 has an invalid length. [ 472.886332][T19273] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4048'. [ 472.888965][T19273] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4048'. [ 473.047826][T19276] hsr0 speed is unknown, defaulting to 1000 [ 473.065722][T19276] lo speed is unknown, defaulting to 1000 [ 473.073869][T19276] dummy0 speed is unknown, defaulting to 1000 [ 473.190017][T19285] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4051'. [ 473.620472][T19298] netlink: 'syz.1.4056': attribute type 1 has an invalid length. [ 473.620492][T19298] netlink: 'syz.1.4056': attribute type 6 has an invalid length. [ 473.631742][T19300] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4057'. [ 473.961769][T19277] netlink: 'syz.3.4047': attribute type 2 has an invalid length. [ 473.961791][T19277] netlink: 232 bytes leftover after parsing attributes in process `syz.3.4047'. [ 474.309966][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880353e4c00: rx timeout, send abort [ 474.590490][ T7026] IPVS: starting estimator thread 0... [ 474.674589][T19333] IPVS: using max 29 ests per chain, 69600 per kthread [ 474.705645][T19337] netlink: 'syz.2.4070': attribute type 1 has an invalid length. [ 474.705665][T19337] netlink: 'syz.2.4070': attribute type 6 has an invalid length. [ 474.810925][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880353e5c00: rx timeout, send abort [ 474.811436][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880353e4c00: abort rx timeout. Force session deactivation [ 475.195050][T19357] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4075'. [ 475.310982][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880353e5c00: abort rx timeout. Force session deactivation [ 475.406210][T19359] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4076'. [ 475.441427][T19359] bond1: up delay (10) is not a multiple of miimon (7), value rounded to 7 ms [ 475.445284][T19359] bond1 (unregistering): Released all slaves [ 475.687471][T19369] netlink: 'syz.1.4078': attribute type 1 has an invalid length. [ 475.687492][T19369] netlink: 244 bytes leftover after parsing attributes in process `syz.1.4078'. [ 475.744676][T19371] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4080'. [ 475.796907][T19375] net_ratelimit: 152 callbacks suppressed [ 475.796927][T19375] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 475.907843][ T7031] veth0: left allmulticast mode [ 475.907868][ T7031] veth0: left promiscuous mode [ 475.908071][ T7031] bridge0: port 1(veth0) entered disabled state [ 475.982316][ T7031] erspan0: left allmulticast mode [ 475.982342][ T7031] erspan0: left promiscuous mode [ 475.985133][ T7031] bridge12: port 1(erspan0) entered disabled state [ 476.012496][ T7031] dvmrp6: left allmulticast mode [ 476.085419][T19388] openvswitch: netlink: IPv4 frag type 228 is out of range max 2 [ 476.118212][ T7031] team0: Port device xfrm0 removed [ 476.227490][ T7031] bond2 (unregistering): (slave gre2): Releasing backup interface [ 476.429185][ T7031] bond3 (unregistering): (slave bridge13): Releasing backup interface [ 476.450745][ T7031] .` (unregistering): Released all slaves [ 476.460321][ T7031] bond1 (unregistering): Released all slaves [ 476.509435][ T7031] bond2 (unregistering): Released all slaves [ 476.521846][ T7030] smbdirect: ib_dev[syz1] removed [ 476.588617][ T7031] bond3 (unregistering): Released all slaves [ 476.610867][ T7031] bond4 (unregistering): Released all slaves [ 476.927761][ T7031] ´: left promiscuous mode [ 477.227664][ T7031] tipc: Left network mode [ 477.402232][T19421] tipc: Started in network mode [ 477.402259][T19421] tipc: Node identity 0693238608dc, cluster identity 4711 [ 477.402404][T19421] tipc: Enabled bearer , priority 0 [ 477.403451][T19421] syzkaller0: entered promiscuous mode [ 477.403469][T19421] syzkaller0: entered allmulticast mode [ 477.524808][T19428] FAULT_INJECTION: forcing a failure. [ 477.524808][T19428] name failslab, interval 1, probability 0, space 0, times 0 [ 477.524857][T19428] CPU: 0 UID: 0 PID: 19428 Comm: syz.0.4095 Not tainted syzkaller #0 PREEMPT(full) [ 477.524871][T19428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 477.524877][T19428] Call Trace: [ 477.524882][T19428] [ 477.524887][T19428] dump_stack_lvl+0xe8/0x150 [ 477.524909][T19428] should_fail_ex+0x410/0x560 [ 477.524924][T19428] should_failslab+0xa8/0x100 [ 477.524937][T19428] ? skb_clone+0x212/0x3a0 [ 477.524952][T19428] kmem_cache_alloc_noprof+0xa1/0x600 [ 477.524974][T19428] ? skb_clone+0x212/0x3a0 [ 477.525002][T19428] skb_clone+0x212/0x3a0 [ 477.525027][T19428] __netlink_deliver_tap+0x355/0x6e0 [ 477.525065][T19428] ? netlink_deliver_tap+0x2e/0x1b0 [ 477.525083][T19428] netlink_deliver_tap+0x19c/0x1b0 [ 477.525099][T19428] netlink_unicast+0x781/0x940 [ 477.525119][T19428] netlink_sendmsg+0x813/0xb40 [ 477.525134][T19428] ? __pfx_netlink_sendmsg+0x10/0x10 [ 477.525148][T19428] ? apparmor_socket_sendmsg+0x98/0x360 [ 477.525163][T19428] ? __pfx_netlink_sendmsg+0x10/0x10 [ 477.525174][T19428] sock_sendmsg_nosec+0x13a/0x180 [ 477.525185][T19428] ____sys_sendmsg+0x54e/0x850 [ 477.525201][T19428] ? __pfx_____sys_sendmsg+0x10/0x10 [ 477.525219][T19428] ? import_iovec+0x73/0xa0 [ 477.525233][T19428] ___sys_sendmsg+0x2a5/0x360 [ 477.525245][T19428] ? __lock_acquire+0x747/0x2de0 [ 477.525258][T19428] ? __pfx____sys_sendmsg+0x10/0x10 [ 477.525288][T19428] ? __fget_files+0x2a/0x420 [ 477.525301][T19428] ? __fget_files+0x3a2/0x420 [ 477.525318][T19428] __x64_sys_sendmsg+0x1b1/0x290 [ 477.525332][T19428] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 477.525356][T19428] do_syscall_64+0x166/0x520 [ 477.525368][T19428] ? trace_irq_disable+0x3b/0x140 [ 477.525378][T19428] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.525388][T19428] ? clear_bhb_loop+0x70/0xc0 [ 477.525400][T19428] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.525410][T19428] RIP: 0033:0x7f138959e159 [ 477.525420][T19428] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 477.525429][T19428] RSP: 002b:00007f138a542028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 477.525440][T19428] RAX: ffffffffffffffda RBX: 00007f1389825fa0 RCX: 00007f138959e159 [ 477.525448][T19428] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 477.525454][T19428] RBP: 00007f138a542090 R08: 0000000000000000 R09: 0000000000000000 [ 477.525460][T19428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 477.525467][T19428] R13: 00007f1389826038 R14: 00007f1389825fa0 R15: 00007ffe02601238 [ 477.525482][T19428] [ 477.818558][T19432] tipc: Resetting bearer [ 477.860474][T19420] tipc: Resetting bearer [ 477.940606][T19437] ip_tables: iptables: counters copy to user failed while replacing table [ 477.956741][T19420] tipc: Disabling bearer [ 477.984279][T19440] __nla_validate_parse: 2 callbacks suppressed [ 477.984296][T19440] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4099'. [ 477.984323][T19440] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4099'. [ 478.101935][T19445] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input10 [ 478.117532][T19445] openvswitch: netlink: Message has 4 unknown bytes. [ 478.203716][T19450] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4102'. [ 478.237263][T19443] tipc: Enabling of bearer rejected, already enabled [ 478.371813][T19452] bridge3: port 1(veth3) entered blocking state [ 478.371913][T19452] bridge3: port 1(veth3) entered disabled state [ 478.372068][T19452] veth3: entered allmulticast mode [ 478.373205][T19452] veth3: entered promiscuous mode [ 478.404315][T19436] syzkaller0: mtu less than device minimum [ 478.436910][T19450] bridge3: port 2(veth5) entered blocking state [ 478.438161][T19450] bridge3: port 2(veth5) entered disabled state [ 478.438292][T19450] veth5: entered allmulticast mode [ 478.440641][T19450] veth5: entered promiscuous mode [ 478.513004][T19464] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 478.986776][ T7031] hsr_slave_0: left promiscuous mode [ 478.987531][ T7031] hsr_slave_1: left promiscuous mode [ 479.313785][ T7026] smbdirect: ib_dev[syz2] removed [ 479.403794][T19487] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4112'. [ 479.760266][ T7026] smbdirect: ib_dev[syz_device_name_32_chars_1234567] removed [ 480.010602][T19500] syzkaller0: entered promiscuous mode [ 480.010620][T19500] syzkaller0: entered allmulticast mode [ 481.596741][T19466] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 482.068276][T19519] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 482.258488][ T7031] IPVS: stop unused estimator thread 0... [ 483.264131][ T7031] vlan2: left allmulticast mode [ 483.264152][ T7031] geneve0: left allmulticast mode [ 483.264170][ T7031] vlan2: left promiscuous mode [ 483.264181][ T7031] geneve0: left promiscuous mode [ 483.287537][ T7031] bridge0: port 3(vlan2) entered disabled state [ 483.317272][ T7031] bridge_slave_1: left allmulticast mode [ 483.317297][ T7031] bridge_slave_1: left promiscuous mode [ 483.317501][ T7031] bridge0: port 2(bridge_slave_1) entered disabled state [ 483.451041][T19563] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4129'. [ 483.614029][T19572] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4133'. [ 483.762816][ T7031] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 483.792473][ T7031] bond2 (unregistering): (slave bridge2): Releasing backup interface [ 483.796060][T19576] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4133'. [ 483.831518][ T7031] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 483.832680][ T7031] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 483.833969][ T7031] bond0 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 483.834973][ T7031] bond0 (unregistering): Released all slaves [ 483.841453][ T7031] bond1 (unregistering): Released all slaves [ 483.864247][ T7031] bond2 (unregistering): Released all slaves [ 483.894280][ T7031] bond3 (unregistering): (slave veth5): Releasing active interface [ 483.894307][ T7031] batadv1: entered promiscuous mode [ 483.909640][ T7031] bond3 (unregistering): (slave batadv1): Releasing active interface [ 483.909670][ T7031] batadv1: left promiscuous mode [ 483.910509][ T7031] bond3 (unregistering): Released all slaves [ 483.942023][ T7031] bond4 (unregistering): Released all slaves [ 483.952560][ T7031] bond5 (unregistering): Released all slaves [ 483.962625][ T7031] bond6 (unregistering): Released all slaves [ 484.232047][T19575] bond2: entered allmulticast mode [ 484.251185][T19576] macvlan0: entered promiscuous mode [ 484.251207][T19576] macvlan0: entered allmulticast mode [ 484.259842][ T7031] tipc: Left network mode [ 484.405008][T19591] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 32, id = 0 [ 484.410628][T19589] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4134'. [ 484.784931][T19603] sctp: [Deprecated]: syz.0.4141 (pid 19603) Use of struct sctp_assoc_value in delayed_ack socket option. [ 484.784931][T19603] Use struct sctp_sack_info instead [ 485.095620][ T7031] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 485.098260][ T7031] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 485.229594][T19619] ip_tables: iptables: counters copy to user failed while replacing table [ 485.270200][ T7031] team0 (unregistering): Port device team_slave_1 removed [ 485.725991][T19634] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4151'. [ 485.753796][ T7031] IPVS: stop unused estimator thread 0... [ 485.787129][T19642] veth0: entered promiscuous mode [ 485.788010][T19641] veth0: left promiscuous mode [ 485.804992][T19637] netlink: 173 bytes leftover after parsing attributes in process `syz.4.4149'. [ 486.342549][T19668] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4163'. [ 486.500922][T19679] IPv6: NLM_F_CREATE should be specified when creating new route [ 486.592850][T19683] FAULT_INJECTION: forcing a failure. [ 486.592850][T19683] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 486.592871][T19683] CPU: 0 UID: 0 PID: 19683 Comm: syz.1.4169 Not tainted syzkaller #0 PREEMPT(full) [ 486.592882][T19683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 486.592889][T19683] Call Trace: [ 486.592894][T19683] [ 486.592898][T19683] dump_stack_lvl+0xe8/0x150 [ 486.592919][T19683] should_fail_ex+0x410/0x560 [ 486.592934][T19683] _copy_from_user+0x2d/0xb0 [ 486.592948][T19683] kstrtouint_from_user+0xd6/0x180 [ 486.592961][T19683] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 486.592976][T19683] ? lock_acquire+0x115/0x350 [ 486.592990][T19683] proc_fail_nth_write+0x8e/0x210 [ 486.593001][T19683] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 486.593014][T19683] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 486.593024][T19683] vfs_write+0x296/0xba0 [ 486.593044][T19683] ? __pfx_vfs_write+0x10/0x10 [ 486.593059][T19683] ? __fget_files+0x2a/0x420 [ 486.593074][T19683] ? __fget_files+0x3a2/0x420 [ 486.593087][T19683] ? __fget_files+0x2a/0x420 [ 486.593104][T19683] ksys_write+0x150/0x270 [ 486.593119][T19683] ? __pfx_ksys_write+0x10/0x10 [ 486.593139][T19683] do_syscall_64+0x166/0x520 [ 486.593152][T19683] ? trace_irq_disable+0x3b/0x140 [ 486.593162][T19683] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.593172][T19683] ? clear_bhb_loop+0x70/0xc0 [ 486.593191][T19683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.593201][T19683] RIP: 0033:0x7f135d95e98e [ 486.593211][T19683] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 486.593219][T19683] RSP: 002b:00007f135e8b1fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 486.593231][T19683] RAX: ffffffffffffffda RBX: 00007f135e8b26c0 RCX: 00007f135d95e98e [ 486.593238][T19683] RDX: 0000000000000001 RSI: 00007f135e8b20a0 RDI: 0000000000000004 [ 486.593244][T19683] RBP: 00007f135e8b2090 R08: 0000000000000000 R09: 0000000000000000 [ 486.593250][T19683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 486.593256][T19683] R13: 00007f135dc26038 R14: 00007f135dc25fa0 R15: 00007fff08a8a688 [ 486.593272][T19683] [ 486.800571][T19689] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4171'. [ 487.073314][T19700] syzkaller0: entered promiscuous mode [ 487.073335][T19700] syzkaller0: entered allmulticast mode [ 487.219846][T19712] FAULT_INJECTION: forcing a failure. [ 487.219846][T19712] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 487.219867][T19712] CPU: 0 UID: 0 PID: 19712 Comm: syz.0.4179 Not tainted syzkaller #0 PREEMPT(full) [ 487.219879][T19712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 487.219886][T19712] Call Trace: [ 487.219890][T19712] [ 487.219895][T19712] dump_stack_lvl+0xe8/0x150 [ 487.219915][T19712] should_fail_ex+0x410/0x560 [ 487.219930][T19712] _copy_from_iter+0x1d3/0x1660 [ 487.219942][T19712] ? __alloc_skb+0x27a/0x7a0 [ 487.219955][T19712] ? __alloc_skb+0x27a/0x7a0 [ 487.219967][T19712] ? __alloc_skb+0x27a/0x7a0 [ 487.219978][T19712] ? __pfx__copy_from_iter+0x10/0x10 [ 487.219988][T19712] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 487.220003][T19712] ? __alloc_skb+0x27a/0x7a0 [ 487.220013][T19712] ? __alloc_skb+0x27a/0x7a0 [ 487.220026][T19712] ? netlink_sendmsg+0x650/0xb40 [ 487.220036][T19712] ? skb_put+0x112/0x210 [ 487.220049][T19712] netlink_sendmsg+0x6c0/0xb40 [ 487.220062][T19712] ? __pfx_netlink_sendmsg+0x10/0x10 [ 487.220075][T19712] ? apparmor_socket_sendmsg+0x98/0x360 [ 487.220086][T19712] ? irqentry_exit+0x218/0x910 [ 487.220099][T19712] ? __pfx_netlink_sendmsg+0x10/0x10 [ 487.220111][T19712] sock_sendmsg_nosec+0x13a/0x180 [ 487.220123][T19712] ____sys_sendmsg+0x54e/0x850 [ 487.220138][T19712] ? __pfx_____sys_sendmsg+0x10/0x10 [ 487.220155][T19712] ? import_iovec+0x73/0xa0 [ 487.220169][T19712] ___sys_sendmsg+0x2a5/0x360 [ 487.220181][T19712] ? __lock_acquire+0x747/0x2de0 [ 487.220194][T19712] ? __pfx____sys_sendmsg+0x10/0x10 [ 487.220223][T19712] ? __fget_files+0x2a/0x420 [ 487.220236][T19712] ? __fget_files+0x3a2/0x420 [ 487.220253][T19712] __x64_sys_sendmsg+0x1b1/0x290 [ 487.220267][T19712] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 487.220294][T19712] do_syscall_64+0x166/0x520 [ 487.220314][T19712] ? trace_irq_disable+0x3b/0x140 [ 487.220330][T19712] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.220340][T19712] ? clear_bhb_loop+0x70/0xc0 [ 487.220352][T19712] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.220362][T19712] RIP: 0033:0x7f138959e159 [ 487.220373][T19712] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 487.220381][T19712] RSP: 002b:00007f138a542028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 487.220393][T19712] RAX: ffffffffffffffda RBX: 00007f1389825fa0 RCX: 00007f138959e159 [ 487.220400][T19712] RDX: 0000000000040010 RSI: 00002000000001c0 RDI: 0000000000000003 [ 487.220407][T19712] RBP: 00007f138a542090 R08: 0000000000000000 R09: 0000000000000000 [ 487.220413][T19712] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 487.220419][T19712] R13: 00007f1389826038 R14: 00007f1389825fa0 R15: 00007ffe02601238 [ 487.220434][T19712] [ 487.269015][T19707] sch_tbf: burst 7 is lower than device syzkaller0 mtu (1500) ! [ 487.270134][T19707] syzkaller0: entered promiscuous mode [ 487.270151][T19707] syzkaller0: entered allmulticast mode [ 487.504584][T19720] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4184'. [ 487.637808][T19725] netlink: 'syz.4.4185': attribute type 1 has an invalid length. [ 487.660192][T19725] bond2: entered promiscuous mode [ 487.660655][T19725] 8021q: adding VLAN 0 to HW filter on device bond2 [ 487.679674][T19725] 8021q: adding VLAN 0 to HW filter on device bond2 [ 487.680052][T19725] bond2: (slave gre1): The slave device specified does not support setting the MAC address [ 487.680071][T19725] bond2: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 487.701791][T19725] bond2: (slave gre1): making interface the new active one [ 487.701824][T19725] gre1: entered promiscuous mode [ 487.723607][T19725] bond2: (slave gre1): Enslaving as an active interface with an up link [ 487.723809][T19728] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4185'. [ 487.758656][T19728] bond2 (unregistering): (slave gre1): Releasing backup interface [ 487.758683][T19728] gre1: left promiscuous mode [ 487.764321][T19728] bond2 (unregistering): Released all slaves [ 488.087747][T19750] bridge: RTM_NEWNEIGH with invalid ether address [ 488.386549][ T7031] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 488.386594][ T7031] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 488.386626][ T7031] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 488.386655][ T7031] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 488.518941][T19764] __nla_validate_parse: 3 callbacks suppressed [ 488.518959][T19764] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4198'. [ 488.728628][ T5626] udevd[5626]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 488.831152][T19777] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4203'. [ 488.831179][T19777] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4203'. [ 488.832671][T19777] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4203'. [ 488.857375][T19775] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4201'. [ 489.033421][T19784] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4206'. [ 489.072013][T19786] FAULT_INJECTION: forcing a failure. [ 489.072013][T19786] name failslab, interval 1, probability 0, space 0, times 0 [ 489.072043][T19786] CPU: 0 UID: 0 PID: 19786 Comm: syz.3.4205 Not tainted syzkaller #0 PREEMPT(full) [ 489.072064][T19786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 489.072075][T19786] Call Trace: [ 489.072082][T19786] [ 489.072091][T19786] dump_stack_lvl+0xe8/0x150 [ 489.072121][T19786] should_fail_ex+0x410/0x560 [ 489.072147][T19786] should_failslab+0xa8/0x100 [ 489.072172][T19786] __kmalloc_noprof+0xfe/0x720 [ 489.072191][T19786] ? security_sk_alloc+0x52/0x360 [ 489.072217][T19786] ? security_sk_alloc+0x52/0x360 [ 489.072249][T19786] security_sk_alloc+0x52/0x360 [ 489.072278][T19786] sk_prot_alloc+0x101/0x210 [ 489.072300][T19786] ? sk_alloc+0x27/0x390 [ 489.072324][T19786] sk_alloc+0x3a/0x390 [ 489.072353][T19786] bpf_prog_test_run_skb+0x3a6/0x2230 [ 489.072381][T19786] ? lock_acquire+0x115/0x350 [ 489.072416][T19786] ? __fget_files+0x3a2/0x420 [ 489.072440][T19786] ? __fget_files+0x2a/0x420 [ 489.072469][T19786] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 489.072497][T19786] bpf_prog_test_run+0x2c5/0x340 [ 489.072523][T19786] __sys_bpf+0xa22/0xd90 [ 489.072551][T19786] ? __pfx___sys_bpf+0x10/0x10 [ 489.072583][T19786] ? __fget_files+0x2a/0x420 [ 489.072629][T19786] ? ksys_write+0x242/0x270 [ 489.072658][T19786] ? __pfx_ksys_write+0x10/0x10 [ 489.072688][T19786] __x64_sys_bpf+0xba/0xd0 [ 489.072710][T19786] do_syscall_64+0x166/0x520 [ 489.072732][T19786] ? trace_irq_disable+0x3b/0x140 [ 489.072751][T19786] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.072770][T19786] ? clear_bhb_loop+0x70/0xc0 [ 489.072792][T19786] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.072811][T19786] RIP: 0033:0x7f109519e159 [ 489.072828][T19786] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 489.072843][T19786] RSP: 002b:00007f1096080028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 489.072864][T19786] RAX: ffffffffffffffda RBX: 00007f1095425fa0 RCX: 00007f109519e159 [ 489.072877][T19786] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 489.072890][T19786] RBP: 00007f1096080090 R08: 0000000000000000 R09: 0000000000000000 [ 489.072901][T19786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 489.072913][T19786] R13: 00007f1095426038 R14: 00007f1095425fa0 R15: 00007ffd85a96528 [ 489.072942][T19786] [ 489.083164][T19783] x_tables: ip_tables: osf match: only valid for protocol 6 [ 489.111211][T19783] netlink: 'syz.0.4204': attribute type 1 has an invalid length. [ 489.169237][T19787] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4204'. [ 489.256002][T19783] 8021q: adding VLAN 0 to HW filter on device bond8 [ 489.426779][ T7031] tipc: Subscription rejected, illegal request [ 489.614688][T19807] netlink: 165 bytes leftover after parsing attributes in process `syz.2.4213'. [ 489.697163][T19796] infiniband syz2: set down [ 489.697185][T19796] infiniband syz2: added team_slave_0 [ 489.720622][T19810] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4214'. [ 489.735203][T19796] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 489.735237][T19796] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 489.735271][T19796] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 489.777144][T19796] RDS/IB: syz2: added [ 489.777217][T19796] smc: adding ib device syz2 with port count 1 [ 489.777235][T19796] smc: ib device syz2 port 1 has no pnetid [ 490.120520][T19823] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4218'. [ 490.247424][T19827] syzkaller0: entered promiscuous mode [ 490.247449][T19827] syzkaller0: entered allmulticast mode [ 490.281968][T19827] tipc: Enabled bearer , priority 0 [ 490.310380][T19826] tipc: Resetting bearer [ 490.368877][T19826] tipc: Disabling bearer [ 490.633952][T19847] FAULT_INJECTION: forcing a failure. [ 490.633952][T19847] name failslab, interval 1, probability 0, space 0, times 0 [ 490.633982][T19847] CPU: 1 UID: 0 PID: 19847 Comm: syz.3.4225 Not tainted syzkaller #0 PREEMPT(full) [ 490.634002][T19847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 490.634014][T19847] Call Trace: [ 490.634022][T19847] [ 490.634031][T19847] dump_stack_lvl+0xe8/0x150 [ 490.634062][T19847] should_fail_ex+0x410/0x560 [ 490.634085][T19847] ? __alloc_skb+0x1db/0x7a0 [ 490.634106][T19847] should_failslab+0xa8/0x100 [ 490.634129][T19847] ? __alloc_skb+0x1db/0x7a0 [ 490.634147][T19847] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 490.634174][T19847] ? __alloc_skb+0x18d/0x7a0 [ 490.634194][T19847] ? __alloc_skb+0x1db/0x7a0 [ 490.634222][T19847] __alloc_skb+0x1db/0x7a0 [ 490.634247][T19847] netlink_sendmsg+0x5d4/0xb40 [ 490.634274][T19847] ? __pfx_netlink_sendmsg+0x10/0x10 [ 490.634298][T19847] ? apparmor_socket_sendmsg+0x98/0x360 [ 490.634320][T19847] ? __pfx_netlink_sendmsg+0x10/0x10 [ 490.634336][T19847] sock_sendmsg_nosec+0x13a/0x180 [ 490.634357][T19847] ____sys_sendmsg+0x54e/0x850 [ 490.634387][T19847] ? __pfx_____sys_sendmsg+0x10/0x10 [ 490.634415][T19847] ? import_iovec+0x73/0xa0 [ 490.634439][T19847] ___sys_sendmsg+0x2a5/0x360 [ 490.634461][T19847] ? __lock_acquire+0x747/0x2de0 [ 490.634485][T19847] ? __pfx____sys_sendmsg+0x10/0x10 [ 490.634539][T19847] ? __fget_files+0x2a/0x420 [ 490.634562][T19847] ? __fget_files+0x3a2/0x420 [ 490.634595][T19847] __x64_sys_sendmsg+0x1b1/0x290 [ 490.634622][T19847] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 490.634665][T19847] do_syscall_64+0x166/0x520 [ 490.634687][T19847] ? trace_irq_disable+0x3b/0x140 [ 490.634706][T19847] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.634725][T19847] ? clear_bhb_loop+0x70/0xc0 [ 490.634747][T19847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.634765][T19847] RIP: 0033:0x7f109519e159 [ 490.634782][T19847] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 490.634798][T19847] RSP: 002b:00007f1096080028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 490.634818][T19847] RAX: ffffffffffffffda RBX: 00007f1095425fa0 RCX: 00007f109519e159 [ 490.634832][T19847] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000004 [ 490.634843][T19847] RBP: 00007f1096080090 R08: 0000000000000000 R09: 0000000000000000 [ 490.634854][T19847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 490.634865][T19847] R13: 00007f1095426038 R14: 00007f1095425fa0 R15: 00007ffd85a96528 [ 490.634900][T19847] [ 491.175685][T19857] FAULT_INJECTION: forcing a failure. [ 491.175685][T19857] name failslab, interval 1, probability 0, space 0, times 0 [ 491.175721][T19857] CPU: 1 UID: 0 PID: 19857 Comm: syz.2.4228 Not tainted syzkaller #0 PREEMPT(full) [ 491.175742][T19857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 491.175753][T19857] Call Trace: [ 491.175760][T19857] [ 491.175769][T19857] dump_stack_lvl+0xe8/0x150 [ 491.175798][T19857] should_fail_ex+0x410/0x560 [ 491.175824][T19857] should_failslab+0xa8/0x100 [ 491.175847][T19857] __kmalloc_cache_noprof+0xa3/0x600 [ 491.175866][T19857] ? __mutex_unlock_slowpath+0x731/0x900 [ 491.175890][T19857] ? __xdp_reg_mem_model+0x1e9/0x5a0 [ 491.176030][T19857] ? __xdp_reg_mem_model+0x1e9/0x5a0 [ 491.176059][T19857] __xdp_reg_mem_model+0x1e9/0x5a0 [ 491.176091][T19857] ? __pfx___xdp_reg_mem_model+0x10/0x10 [ 491.176126][T19857] xdp_reg_mem_model+0x22/0x40 [ 491.176151][T19857] bpf_test_run_xdp_live+0x292/0x1c20 [ 491.176183][T19857] ? bpf_dispatcher_change_prog+0xc4c/0xf20 [ 491.176209][T19857] ? __mutex_unlock_slowpath+0x731/0x900 [ 491.176238][T19857] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 491.176265][T19857] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 491.176293][T19857] ? 0xffffffffa0404480 [ 491.176356][T19857] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 491.176411][T19857] ? _copy_from_user+0x94/0xb0 [ 491.176435][T19857] ? bpf_test_init+0x113/0x150 [ 491.176458][T19857] ? xdp_convert_md_to_buff+0x5b/0x330 [ 491.176488][T19857] bpf_prog_test_run_xdp+0x7d8/0x11d0 [ 491.176530][T19857] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 491.176562][T19857] ? __fget_files+0x2a/0x420 [ 491.176592][T19857] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 491.176620][T19857] bpf_prog_test_run+0x2c5/0x340 [ 491.176645][T19857] __sys_bpf+0xa22/0xd90 [ 491.176673][T19857] ? __pfx___sys_bpf+0x10/0x10 [ 491.176703][T19857] ? __fget_files+0x2a/0x420 [ 491.176742][T19857] ? ksys_write+0x242/0x270 [ 491.176770][T19857] ? __pfx_ksys_write+0x10/0x10 [ 491.176800][T19857] __x64_sys_bpf+0xba/0xd0 [ 491.176822][T19857] do_syscall_64+0x166/0x520 [ 491.176843][T19857] ? trace_irq_disable+0x3b/0x140 [ 491.176862][T19857] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.176879][T19857] ? clear_bhb_loop+0x70/0xc0 [ 491.176899][T19857] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.176916][T19857] RIP: 0033:0x7f262d99e159 [ 491.176932][T19857] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 491.176954][T19857] RSP: 002b:00007f262e7f3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 491.176973][T19857] RAX: ffffffffffffffda RBX: 00007f262dc25fa0 RCX: 00007f262d99e159 [ 491.176986][T19857] RDX: 0000000000000050 RSI: 0000200000000a00 RDI: 000000000000000a [ 491.176996][T19857] RBP: 00007f262e7f3090 R08: 0000000000000000 R09: 0000000000000000 [ 491.177007][T19857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 491.177018][T19857] R13: 00007f262dc26038 R14: 00007f262dc25fa0 R15: 00007ffc27458d18 [ 491.177045][T19857] [ 491.187413][T19851] bridge0: port 2(bridge_slave_1) entered disabled state [ 491.187883][T19851] bridge0: port 1(bridge_slave_0) entered disabled state [ 491.597170][T19851] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 491.603519][T19851] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 491.691622][T19870] FAULT_INJECTION: forcing a failure. [ 491.691622][T19870] name failslab, interval 1, probability 0, space 0, times 0 [ 491.691652][T19870] CPU: 1 UID: 0 PID: 19870 Comm: syz.1.4232 Not tainted syzkaller #0 PREEMPT(full) [ 491.691672][T19870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 491.691682][T19870] Call Trace: [ 491.691689][T19870] [ 491.691697][T19870] dump_stack_lvl+0xe8/0x150 [ 491.691728][T19870] should_fail_ex+0x410/0x560 [ 491.691755][T19870] should_failslab+0xa8/0x100 [ 491.691778][T19870] __kvmalloc_node_noprof+0x176/0x820 [ 491.691802][T19870] ? page_pool_create_percpu+0x2ef/0xc70 [ 491.691896][T19870] ? page_pool_create_percpu+0x2ef/0xc70 [ 491.691929][T19870] page_pool_create_percpu+0x2ef/0xc70 [ 491.691952][T19870] bpf_test_run_xdp_live+0x23a/0x1c20 [ 491.691981][T19870] ? bpf_dispatcher_change_prog+0xc4c/0xf20 [ 491.692003][T19870] ? __mutex_unlock_slowpath+0x731/0x900 [ 491.692034][T19870] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 491.692061][T19870] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 491.692087][T19870] ? 0xffffffffa0404480 [ 491.692144][T19870] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 491.692171][T19870] ? _copy_from_user+0x94/0xb0 [ 491.692194][T19870] ? bpf_test_init+0x113/0x150 [ 491.692216][T19870] ? xdp_convert_md_to_buff+0x5b/0x330 [ 491.692246][T19870] bpf_prog_test_run_xdp+0x7d8/0x11d0 [ 491.692288][T19870] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 491.692317][T19870] ? __fget_files+0x2a/0x420 [ 491.692347][T19870] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 491.692375][T19870] bpf_prog_test_run+0x2c5/0x340 [ 491.692399][T19870] __sys_bpf+0xa22/0xd90 [ 491.692423][T19870] ? __pfx___sys_bpf+0x10/0x10 [ 491.692451][T19870] ? __fget_files+0x2a/0x420 [ 491.692489][T19870] ? ksys_write+0x242/0x270 [ 491.692516][T19870] ? __pfx_ksys_write+0x10/0x10 [ 491.692546][T19870] __x64_sys_bpf+0xba/0xd0 [ 491.692566][T19870] do_syscall_64+0x166/0x520 [ 491.692586][T19870] ? trace_irq_disable+0x3b/0x140 [ 491.692603][T19870] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.692622][T19870] ? clear_bhb_loop+0x70/0xc0 [ 491.692641][T19870] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.692657][T19870] RIP: 0033:0x7f135d99e159 [ 491.692671][T19870] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 491.692687][T19870] RSP: 002b:00007f135e8b2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 491.692708][T19870] RAX: ffffffffffffffda RBX: 00007f135dc25fa0 RCX: 00007f135d99e159 [ 491.692721][T19870] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 491.692733][T19870] RBP: 00007f135e8b2090 R08: 0000000000000000 R09: 0000000000000000 [ 491.692744][T19870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 491.692754][T19870] R13: 00007f135dc26038 R14: 00007f135dc25fa0 R15: 00007fff08a8a688 [ 491.692781][T19870] [ 491.692942][T19870] page_pool_create_percpu() gave up with errno -12 [ 492.032997][T19851] tipc: Resetting bearer [ 492.111695][T19873] syzkaller1: entered promiscuous mode [ 492.111717][T19873] syzkaller1: entered allmulticast mode [ 492.185773][ T80] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 492.185806][ T80] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.185840][ T80] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 492.185869][ T80] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.185898][ T80] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 492.185921][ T80] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.185950][ T80] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 492.185972][ T80] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.354118][T19886] syzkaller0: entered promiscuous mode [ 492.354138][T19886] syzkaller0: entered allmulticast mode [ 492.390659][T19886] TC_ACT_REPEAT abuse ? [ 492.906165][T19899] tipc: Enabling of bearer rejected, failed to enable media [ 493.063308][T19914] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1500) ! [ 493.072660][T19914] syzkaller0: entered promiscuous mode [ 493.072679][T19914] syzkaller0: entered allmulticast mode [ 493.073653][T19917] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 493.165159][T19923] xt_hashlimit: size too large, truncated to 1048576 [ 493.287881][ T5615] Bluetooth: hci4: command 0x0406 tx timeout [ 493.722622][T19941] __nla_validate_parse: 7 callbacks suppressed [ 493.722640][T19941] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4255'. [ 493.722657][T19941] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4255'. [ 493.752376][T19941] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4255'. [ 494.277322][T19968] ip_tables: iptables: counters copy to user failed while replacing table [ 494.333357][T19970] netlink: 165 bytes leftover after parsing attributes in process `syz.0.4264'. [ 494.363637][T19968] netlink: 'syz.2.4263': attribute type 10 has an invalid length. [ 495.011366][T19997] netlink: 'syz.0.4274': attribute type 1 has an invalid length. [ 495.038949][T19997] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4274'. [ 495.137621][T20005] FAULT_INJECTION: forcing a failure. [ 495.137621][T20005] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 495.137652][T20005] CPU: 1 UID: 0 PID: 20005 Comm: syz.2.4277 Not tainted syzkaller #0 PREEMPT(full) [ 495.137673][T20005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 495.137684][T20005] Call Trace: [ 495.137692][T20005] [ 495.137701][T20005] dump_stack_lvl+0xe8/0x150 [ 495.137732][T20005] should_fail_ex+0x410/0x560 [ 495.137758][T20005] _copy_to_user+0x31/0xb0 [ 495.137786][T20005] bpf_test_finish+0x4ea/0x690 [ 495.137824][T20005] ? __pfx_bpf_test_finish+0x10/0x10 [ 495.137863][T20005] bpf_prog_test_run_skb+0x11fe/0x2230 [ 495.137910][T20005] ? __fget_files+0x3a2/0x420 [ 495.137934][T20005] ? __fget_files+0x2a/0x420 [ 495.137963][T20005] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 495.137991][T20005] bpf_prog_test_run+0x2c5/0x340 [ 495.138016][T20005] __sys_bpf+0xa22/0xd90 [ 495.138044][T20005] ? __pfx___sys_bpf+0x10/0x10 [ 495.138074][T20005] ? __fget_files+0x2a/0x420 [ 495.138115][T20005] ? ksys_write+0x242/0x270 [ 495.138150][T20005] ? __pfx_ksys_write+0x10/0x10 [ 495.138181][T20005] __x64_sys_bpf+0xba/0xd0 [ 495.138202][T20005] do_syscall_64+0x166/0x520 [ 495.138223][T20005] ? trace_irq_disable+0x3b/0x140 [ 495.138240][T20005] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.138258][T20005] ? clear_bhb_loop+0x70/0xc0 [ 495.138280][T20005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.138298][T20005] RIP: 0033:0x7f262d99e159 [ 495.138315][T20005] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 495.138330][T20005] RSP: 002b:00007f262e7f3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 495.138350][T20005] RAX: ffffffffffffffda RBX: 00007f262dc25fa0 RCX: 00007f262d99e159 [ 495.138364][T20005] RDX: 000000000000004c RSI: 0000200000000240 RDI: 000000000000000a [ 495.138376][T20005] RBP: 00007f262e7f3090 R08: 0000000000000000 R09: 0000000000000000 [ 495.138388][T20005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 495.138399][T20005] R13: 00007f262dc26038 R14: 00007f262dc25fa0 R15: 00007ffc27458d18 [ 495.138428][T20005] [ 495.211293][T20000] netlink: 165 bytes leftover after parsing attributes in process `syz.1.4275'. [ 495.372369][T20009] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4278'. [ 495.372393][T20009] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4278'. [ 495.382371][T20009] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4278'. [ 496.060059][T20039] syzkaller0: entered promiscuous mode [ 496.060081][T20039] syzkaller0: entered allmulticast mode [ 496.082839][T20035] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4288'. [ 496.082872][T20035] netlink: 'syz.4.4288': attribute type 10 has an invalid length. [ 496.082887][T20035] netlink: 'syz.4.4288': attribute type 5 has an invalid length. [ 496.082977][T20039] TC_ACT_REPEAT abuse ? [ 496.112671][T20035] geneve2: entered promiscuous mode [ 496.112692][T20035] geneve2: entered allmulticast mode [ 496.124790][ T49] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 48275 - 0 [ 496.124831][ T49] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 48275 - 0 [ 496.124860][ T49] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 48275 - 0 [ 496.124889][ T49] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 48275 - 0 [ 496.845854][T20079] netlink: 'syz.1.4297': attribute type 1 has an invalid length. [ 497.972809][T20108] openvswitch: netlink: IPv4 tun info is not correct [ 498.463195][T20131] syzkaller0: left promiscuous mode [ 498.463215][T20131] syzkaller0: left allmulticast mode [ 498.516314][T20132] netlink: 'syz.0.4313': attribute type 2 has an invalid length. [ 498.574011][T20143] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 499.285164][T20171] syzkaller0: entered promiscuous mode [ 499.285177][T20171] syzkaller0: entered allmulticast mode [ 499.531237][T20178] FAULT_INJECTION: forcing a failure. [ 499.531237][T20178] name failslab, interval 1, probability 0, space 0, times 0 [ 499.531256][T20178] CPU: 1 UID: 0 PID: 20178 Comm: syz.1.4325 Not tainted syzkaller #0 PREEMPT(full) [ 499.531268][T20178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 499.531274][T20178] Call Trace: [ 499.531278][T20178] [ 499.531283][T20178] dump_stack_lvl+0xe8/0x150 [ 499.531303][T20178] should_fail_ex+0x410/0x560 [ 499.531317][T20178] ? __alloc_skb+0x1db/0x7a0 [ 499.531330][T20178] should_failslab+0xa8/0x100 [ 499.531343][T20178] ? __alloc_skb+0x1db/0x7a0 [ 499.531353][T20178] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 499.531368][T20178] ? __alloc_skb+0x18d/0x7a0 [ 499.531379][T20178] ? __alloc_skb+0x1db/0x7a0 [ 499.531401][T20178] __alloc_skb+0x1db/0x7a0 [ 499.531414][T20178] netlink_ack+0x136/0xb30 [ 499.531440][T20178] netlink_rcv_skb+0x2a4/0x4a0 [ 499.531455][T20178] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 499.531470][T20178] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 499.531489][T20178] ? bpf_lsm_capable+0x9/0x20 [ 499.531499][T20178] ? security_capable+0x7e/0x2c0 [ 499.531525][T20178] nfnetlink_rcv+0x2b9/0x28c0 [ 499.531550][T20178] ? kernel_text_address+0xa5/0xe0 [ 499.531571][T20178] ? __kernel_text_address+0xd/0x30 [ 499.531590][T20178] ? unwind_get_return_address+0x4d/0x90 [ 499.531611][T20178] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 499.531624][T20178] ? arch_stack_walk+0xfb/0x150 [ 499.531641][T20178] ? stack_trace_save+0xa9/0x100 [ 499.531652][T20178] ? __lock_acquire+0x747/0x2de0 [ 499.531662][T20178] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 499.531678][T20178] ? __kasan_slab_alloc+0x6c/0x80 [ 499.531688][T20178] ? kmem_cache_alloc_node_noprof+0x354/0x610 [ 499.531702][T20178] ? __alloc_skb+0x27a/0x7a0 [ 499.531712][T20178] ? netlink_sendmsg+0x5d4/0xb40 [ 499.531720][T20178] ? sock_sendmsg_nosec+0x13a/0x180 [ 499.531729][T20178] ? ____sys_sendmsg+0x54e/0x850 [ 499.531745][T20178] ? __lock_acquire+0x747/0x2de0 [ 499.531760][T20178] ? __netlink_lookup+0xc6/0x8b0 [ 499.531775][T20178] ? lock_acquire+0x115/0x350 [ 499.531784][T20178] ? netlink_deliver_tap+0x2e/0x1b0 [ 499.531802][T20178] ? netlink_deliver_tap+0x2e/0x1b0 [ 499.531815][T20178] ? netlink_deliver_tap+0x2e/0x1b0 [ 499.531831][T20178] netlink_unicast+0x7bd/0x940 [ 499.531851][T20178] netlink_sendmsg+0x813/0xb40 [ 499.531864][T20178] ? __pfx_netlink_sendmsg+0x10/0x10 [ 499.531877][T20178] ? apparmor_socket_sendmsg+0x18b/0x360 [ 499.531890][T20178] ? __pfx_netlink_sendmsg+0x10/0x10 [ 499.531902][T20178] sock_sendmsg_nosec+0x13a/0x180 [ 499.531913][T20178] ____sys_sendmsg+0x54e/0x850 [ 499.531928][T20178] ? __pfx_____sys_sendmsg+0x10/0x10 [ 499.531945][T20178] ? import_iovec+0x73/0xa0 [ 499.531959][T20178] ___sys_sendmsg+0x2a5/0x360 [ 499.531971][T20178] ? __lock_acquire+0x747/0x2de0 [ 499.531983][T20178] ? __pfx____sys_sendmsg+0x10/0x10 [ 499.532012][T20178] ? __fget_files+0x2a/0x420 [ 499.532025][T20178] ? __fget_files+0x3a2/0x420 [ 499.532042][T20178] __x64_sys_sendmsg+0x1b1/0x290 [ 499.532056][T20178] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 499.532079][T20178] do_syscall_64+0x166/0x520 [ 499.532092][T20178] ? trace_irq_disable+0x3b/0x140 [ 499.532102][T20178] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.532113][T20178] ? clear_bhb_loop+0x70/0xc0 [ 499.532125][T20178] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.532135][T20178] RIP: 0033:0x7f135d99e159 [ 499.532144][T20178] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 499.532153][T20178] RSP: 002b:00007f135e8b2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 499.532164][T20178] RAX: ffffffffffffffda RBX: 00007f135dc25fa0 RCX: 00007f135d99e159 [ 499.532171][T20178] RDX: 0000000024008084 RSI: 0000200000000300 RDI: 0000000000000003 [ 499.532178][T20178] RBP: 00007f135e8b2090 R08: 0000000000000000 R09: 0000000000000000 [ 499.532184][T20178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 499.532190][T20178] R13: 00007f135dc26038 R14: 00007f135dc25fa0 R15: 00007fff08a8a688 [ 499.532205][T20178] [ 499.628870][T20180] syzkaller0: entered promiscuous mode [ 499.628888][T20180] syzkaller0: entered allmulticast mode [ 499.632380][T20180] TC_ACT_REPEAT abuse ? [ 500.358231][T20202] __nla_validate_parse: 11 callbacks suppressed [ 500.358245][T20202] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4334'. [ 500.488942][ T5626] udevd[5626]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 500.603618][T20213] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4336'. [ 500.815594][T20222] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 500.882250][T20224] tipc: Can't bind to reserved service type 0 [ 501.112120][T20237] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4345'. [ 501.112144][T20237] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4345'. [ 501.344721][T20248] sch_tbf: burst 0 is lower than device syzkaller0 mtu (65589) ! [ 501.369581][T20248] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4350'. [ 501.691559][T20259] FAULT_INJECTION: forcing a failure. [ 501.691559][T20259] name failslab, interval 1, probability 0, space 0, times 0 [ 501.691589][T20259] CPU: 1 UID: 0 PID: 20259 Comm: syz.3.4354 Not tainted syzkaller #0 PREEMPT(full) [ 501.691610][T20259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 501.691622][T20259] Call Trace: [ 501.691629][T20259] [ 501.691637][T20259] dump_stack_lvl+0xe8/0x150 [ 501.691669][T20259] should_fail_ex+0x410/0x560 [ 501.691695][T20259] should_failslab+0xa8/0x100 [ 501.691718][T20259] ? skb_clone+0x212/0x3a0 [ 501.691743][T20259] kmem_cache_alloc_noprof+0xa1/0x600 [ 501.691771][T20259] ? __pfx__copy_from_iter+0x10/0x10 [ 501.691793][T20259] ? skb_clone+0x212/0x3a0 [ 501.691824][T20259] skb_clone+0x212/0x3a0 [ 501.691852][T20259] pfkey_sendmsg+0x4d6/0x11d0 [ 501.691893][T20259] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 501.691940][T20259] ? aa_sock_msg_perm+0x144/0x210 [ 501.691969][T20259] ? apparmor_socket_sendmsg+0x18b/0x360 [ 501.691991][T20259] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 501.692016][T20259] sock_sendmsg_nosec+0x13a/0x180 [ 501.692038][T20259] ____sys_sendmsg+0x54e/0x850 [ 501.692068][T20259] ? __pfx_____sys_sendmsg+0x10/0x10 [ 501.692101][T20259] ? import_iovec+0x73/0xa0 [ 501.692127][T20259] ___sys_sendmsg+0x2a5/0x360 [ 501.692150][T20259] ? __lock_acquire+0x747/0x2de0 [ 501.692173][T20259] ? __pfx____sys_sendmsg+0x10/0x10 [ 501.692231][T20259] ? __fget_files+0x2a/0x420 [ 501.692254][T20259] ? __fget_files+0x3a2/0x420 [ 501.692296][T20259] __x64_sys_sendmsg+0x1b1/0x290 [ 501.692323][T20259] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 501.692367][T20259] do_syscall_64+0x166/0x520 [ 501.692388][T20259] ? trace_irq_disable+0x3b/0x140 [ 501.692405][T20259] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.692424][T20259] ? clear_bhb_loop+0x70/0xc0 [ 501.692447][T20259] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.692465][T20259] RIP: 0033:0x7f109519e159 [ 501.692482][T20259] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 501.692497][T20259] RSP: 002b:00007f1096080028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 501.692517][T20259] RAX: ffffffffffffffda RBX: 00007f1095425fa0 RCX: 00007f109519e159 [ 501.692531][T20259] RDX: 0000000020008004 RSI: 00002000000001c0 RDI: 0000000000000003 [ 501.692543][T20259] RBP: 00007f1096080090 R08: 0000000000000000 R09: 0000000000000000 [ 501.692555][T20259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 501.692566][T20259] R13: 00007f1095426038 R14: 00007f1095425fa0 R15: 00007ffd85a96528 [ 501.692597][T20259] [ 502.469520][T20282] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4360'. [ 502.486430][T20282] macsec2: entered promiscuous mode [ 502.490627][T20282] netlink: 'syz.2.4360': attribute type 39 has an invalid length. [ 502.623529][T20299] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4366'. [ 502.781119][T20307] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4371'. [ 502.781152][T20307] netlink: 'syz.3.4371': attribute type 22 has an invalid length. [ 502.781163][T20307] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4371'. [ 502.782224][T20308] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4369'. [ 502.834670][T20307] netlink: 'syz.3.4371': attribute type 22 has an invalid length. [ 502.905124][ T7031] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 502.905179][ T7031] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 48275 - 0 [ 502.905211][ T7031] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 48275 - 0 [ 502.905241][ T7031] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 48275 - 0 [ 502.905272][ T7031] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 48275 - 0 [ 502.905302][ T7031] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 502.905331][ T7031] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 502.905361][ T7031] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 503.420662][T20334] netlink: 'syz.2.4378': attribute type 21 has an invalid length. [ 503.420722][T20334] netlink: 'syz.2.4378': attribute type 6 has an invalid length. [ 503.830135][T20343] bridge0: port 3(bond0) entered blocking state [ 503.830217][T20343] bridge0: port 3(bond0) entered disabled state [ 503.865873][T20343] bond0: entered allmulticast mode [ 503.865893][T20343] bond_slave_0: entered allmulticast mode [ 503.865908][T20343] bond_slave_1: entered allmulticast mode [ 503.874045][T20343] bond0: entered promiscuous mode [ 503.874065][T20343] bond_slave_0: entered promiscuous mode [ 503.874234][T20343] bond_slave_1: entered promiscuous mode [ 503.962493][T20347] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1500) ! [ 503.982223][T20347] syzkaller0: entered promiscuous mode [ 503.982257][T20347] syzkaller0: entered allmulticast mode [ 504.007429][T20355] syzkaller0: entered promiscuous mode [ 504.007451][T20355] syzkaller0: entered allmulticast mode [ 504.278073][T20359] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 505.541116][T20426] __nla_validate_parse: 11 callbacks suppressed [ 505.541136][T20426] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4402'. [ 505.800467][T20432] C: renamed from veth1_to_team [ 505.817950][ T30] audit: type=1800 audit(1790154297.762:19): pid=20425 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4400" name="memory.events" dev="tmpfs" ino=1352 res=0 errno=0 [ 505.822144][T20432] netlink: 'syz.1.4404': attribute type 1 has an invalid length. [ 505.822163][T20432] netlink: 116 bytes leftover after parsing attributes in process `syz.1.4404'. [ 505.822179][T20432] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 505.993276][T20439] bond5: entered allmulticast mode [ 506.150737][T20439] 8021q: adding VLAN 0 to HW filter on device bond6 [ 506.168152][T20439] bond6: entered allmulticast mode [ 506.170325][T20439] bond5: (slave bond6): Enslaving as an active interface with an up link [ 506.245633][T20439] netlink: 248 bytes leftover after parsing attributes in process `syz.3.4405'. [ 506.560702][T20461] netlink: 'syz.4.4410': attribute type 4 has an invalid length. [ 506.560723][T20461] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4410'. [ 506.590614][T20461] 8021q: adding VLAN 0 to HW filter on device bond0 [ 506.591984][T20464] netlink: 'syz.0.4411': attribute type 1 has an invalid length. [ 506.592002][T20464] netlink: 'syz.0.4411': attribute type 6 has an invalid length. [ 506.967639][T20486] ip_tables: iptables: counters copy to user failed while replacing table [ 508.529234][T20531] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4430'. [ 508.536188][T20531] netlink: 'syz.0.4430': attribute type 4 has an invalid length. [ 508.644813][ T5615] Bluetooth: hci2: command 0x0401 tx timeout [ 508.846100][T20547] SET target dimension over the limit! [ 509.288741][T20567] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 509.536615][T20580] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4447'. [ 509.736200][T20592] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4450'. [ 509.986294][T20608] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4458'. [ 510.325731][T20624] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 510.348117][T20624] FAULT_INJECTION: forcing a failure. [ 510.348117][T20624] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 510.348145][T20624] CPU: 0 UID: 0 PID: 20624 Comm: syz.0.4463 Not tainted syzkaller #0 PREEMPT(full) [ 510.348164][T20624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 510.348175][T20624] Call Trace: [ 510.348182][T20624] [ 510.348189][T20624] dump_stack_lvl+0xe8/0x150 [ 510.348218][T20624] should_fail_ex+0x410/0x560 [ 510.348241][T20624] _copy_from_iter+0x1d3/0x1660 [ 510.348267][T20624] ? _copy_from_iter+0x21b/0x1660 [ 510.348288][T20624] ? __pfx__copy_from_iter+0x10/0x10 [ 510.348310][T20624] ? __pfx__copy_from_iter+0x10/0x10 [ 510.348334][T20624] copy_page_from_iter+0x219/0x2d0 [ 510.348356][T20624] skb_copy_datagram_from_iter+0x2f4/0x720 [ 510.348396][T20624] packet_sendmsg+0x35e2/0x4f80 [ 510.348414][T20624] ? up_write+0x19d/0x4a0 [ 510.348448][T20624] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 510.348484][T20624] ? lock_acquire+0x115/0x350 [ 510.348505][T20624] ? __lock_acquire+0x747/0x2de0 [ 510.348530][T20624] ? __pfx_packet_sendmsg+0x10/0x10 [ 510.348548][T20624] ? aa_sk_perm+0x713/0x900 [ 510.348567][T20624] ? __lock_acquire+0x747/0x2de0 [ 510.348589][T20624] ? debug_mutex_wake_waiter+0x56/0x230 [ 510.348613][T20624] ? __pfx_aa_sk_perm+0x10/0x10 [ 510.348644][T20624] ? aa_sock_msg_perm+0x144/0x210 [ 510.348670][T20624] ? apparmor_socket_sendmsg+0x98/0x360 [ 510.348691][T20624] ? __pfx_packet_sendmsg+0x10/0x10 [ 510.348708][T20624] sock_sendmsg_nosec+0x13a/0x180 [ 510.348728][T20624] ____sys_sendmsg+0x54e/0x850 [ 510.348755][T20624] ? __pfx_____sys_sendmsg+0x10/0x10 [ 510.348787][T20624] ? import_iovec+0x73/0xa0 [ 510.348811][T20624] ___sys_sendmsg+0x2a5/0x360 [ 510.348833][T20624] ? __lock_acquire+0x747/0x2de0 [ 510.348855][T20624] ? __pfx____sys_sendmsg+0x10/0x10 [ 510.348909][T20624] ? __fget_files+0x2a/0x420 [ 510.348933][T20624] ? __fget_files+0x3a2/0x420 [ 510.348966][T20624] __x64_sys_sendmsg+0x1b1/0x290 [ 510.348993][T20624] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 510.349034][T20624] do_syscall_64+0x166/0x520 [ 510.349056][T20624] ? trace_irq_disable+0x3b/0x140 [ 510.349075][T20624] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.349095][T20624] ? clear_bhb_loop+0x70/0xc0 [ 510.349117][T20624] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.349133][T20624] RIP: 0033:0x7f138959e159 [ 510.349150][T20624] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 510.349165][T20624] RSP: 002b:00007f138a542028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 510.349186][T20624] RAX: ffffffffffffffda RBX: 00007f1389825fa0 RCX: 00007f138959e159 [ 510.349200][T20624] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005 [ 510.349212][T20624] RBP: 00007f138a542090 R08: 0000000000000000 R09: 0000000000000000 [ 510.349223][T20624] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 510.349234][T20624] R13: 00007f1389826038 R14: 00007f1389825fa0 R15: 00007ffe02601238 [ 510.349261][T20624] [ 510.469304][T20627] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4464'. [ 510.469333][T20627] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4464'. [ 510.527496][T20625] dummy0 speed is unknown, defaulting to 1000 [ 510.787489][T20635] __nla_validate_parse: 2 callbacks suppressed [ 510.787507][T20635] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4467'. [ 510.790972][T20635] FAULT_INJECTION: forcing a failure. [ 510.790972][T20635] name failslab, interval 1, probability 0, space 0, times 0 [ 510.791000][T20635] CPU: 0 UID: 0 PID: 20635 Comm: syz.0.4467 Not tainted syzkaller #0 PREEMPT(full) [ 510.791020][T20635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 510.791031][T20635] Call Trace: [ 510.791038][T20635] [ 510.791047][T20635] dump_stack_lvl+0xe8/0x150 [ 510.791081][T20635] should_fail_ex+0x410/0x560 [ 510.791107][T20635] should_failslab+0xa8/0x100 [ 510.791130][T20635] __kmalloc_cache_noprof+0xa3/0x600 [ 510.791151][T20635] ? netdevice_event+0x3aa/0x8a0 [ 510.791283][T20635] ? netdevice_event+0x3aa/0x8a0 [ 510.791309][T20635] netdevice_event+0x3aa/0x8a0 [ 510.791334][T20635] ? rcu_is_watching+0x16/0xb0 [ 510.791355][T20635] ? __up_read+0x29c/0x930 [ 510.791376][T20635] ? __pfx_netdevice_event+0x10/0x10 [ 510.791400][T20635] ? __pfx_del_netdev_ips+0x10/0x10 [ 510.791423][T20635] ? __pfx_pass_all_filter+0x10/0x10 [ 510.791465][T20635] notifier_call_chain+0x1a5/0x3d0 [ 510.791500][T20635] unregister_netdevice_many_notify+0x17f9/0x2140 [ 510.791545][T20635] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 510.791575][T20635] ? unregister_netdevice_queue+0x17d/0x340 [ 510.791603][T20635] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 510.791632][T20635] ? __nla_parse+0x40/0x60 [ 510.791656][T20635] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 510.791682][T20635] rtnl_dellink+0x5bc/0x810 [ 510.791707][T20635] ? __pfx_rtnl_dellink+0x10/0x10 [ 510.791752][T20635] ? lock_acquire+0x115/0x350 [ 510.791825][T20635] ? lock_acquire+0x115/0x350 [ 510.791843][T20635] ? __pfx_rtnl_dellink+0x10/0x10 [ 510.791877][T20635] ? __pfx_rtnl_dellink+0x10/0x10 [ 510.791900][T20635] rtnetlink_rcv_msg+0x802/0xc00 [ 510.791920][T20635] ? netlink_sendmsg+0x5d4/0xb40 [ 510.791940][T20635] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 510.791961][T20635] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 510.791984][T20635] ? __lock_acquire+0x747/0x2de0 [ 510.792015][T20635] netlink_rcv_skb+0x226/0x4a0 [ 510.792042][T20635] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 510.792067][T20635] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 510.792105][T20635] ? netlink_deliver_tap+0x2e/0x1b0 [ 510.792131][T20635] ? netlink_deliver_tap+0x2e/0x1b0 [ 510.792163][T20635] netlink_unicast+0x7bd/0x940 [ 510.792198][T20635] netlink_sendmsg+0x813/0xb40 [ 510.792225][T20635] ? __pfx_netlink_sendmsg+0x10/0x10 [ 510.792248][T20635] ? apparmor_socket_sendmsg+0x98/0x360 [ 510.792271][T20635] ? __pfx_netlink_sendmsg+0x10/0x10 [ 510.792286][T20635] sock_sendmsg_nosec+0x13a/0x180 [ 510.792308][T20635] ____sys_sendmsg+0x54e/0x850 [ 510.792338][T20635] ? __pfx_____sys_sendmsg+0x10/0x10 [ 510.792371][T20635] ? import_iovec+0x73/0xa0 [ 510.792397][T20635] ___sys_sendmsg+0x2a5/0x360 [ 510.792420][T20635] ? __lock_acquire+0x747/0x2de0 [ 510.792443][T20635] ? __pfx____sys_sendmsg+0x10/0x10 [ 510.792502][T20635] ? __fget_files+0x2a/0x420 [ 510.792526][T20635] ? __fget_files+0x3a2/0x420 [ 510.792559][T20635] __x64_sys_sendmsg+0x1b1/0x290 [ 510.792586][T20635] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 510.792631][T20635] do_syscall_64+0x166/0x520 [ 510.792653][T20635] ? trace_irq_disable+0x3b/0x140 [ 510.792672][T20635] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.792691][T20635] ? clear_bhb_loop+0x70/0xc0 [ 510.792713][T20635] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.792731][T20635] RIP: 0033:0x7f138959e159 [ 510.792755][T20635] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 510.792771][T20635] RSP: 002b:00007f138a542028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 510.792791][T20635] RAX: ffffffffffffffda RBX: 00007f1389825fa0 RCX: 00007f138959e159 [ 510.792803][T20635] RDX: 0000000004048004 RSI: 00002000000001c0 RDI: 0000000000000003 [ 510.792815][T20635] RBP: 00007f138a542090 R08: 0000000000000000 R09: 0000000000000000 [ 510.792827][T20635] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 510.792838][T20635] R13: 00007f1389826038 R14: 00007f1389825fa0 R15: 00007ffe02601238 [ 510.792868][T20635] [ 510.915635][T20637] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4468'. [ 510.917245][T20637] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4468'. [ 510.939316][T20637] smc: net device lo applied user defined pnetid SYZ0 [ 510.947087][T20637] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4468'. [ 510.949029][T20637] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4468'. [ 511.273610][T20646] openvswitch: netlink: IP tunnel TTL not specified. [ 511.282778][T20646] syzkaller1: entered allmulticast mode [ 511.713683][T20664] nbd3: detected capacity change from 0 to 63 [ 511.716060][ T2041] [ 511.724469][ T2041] ====================================================== [ 511.731494][ T2041] WARNING: possible circular locking dependency detected [ 511.738525][ T2041] syzkaller #0 Not tainted [ 511.742946][ T2041] ------------------------------------------------------ [ 511.749961][ T2041] kworker/1:1H/2041 is trying to acquire lock: [ 511.752149][T20667] netlink: 7 bytes leftover after parsing attributes in process `syz.3.4478'. [ 511.764940][ T2041] ffff88802a0e6c68 (&nsock->tx_lock){+.+.}-{4:4}, at: nbd_queue_rq+0x373/0xff0 [ 511.774019][ T2041] [ 511.774019][ T2041] but task is already holding lock: [ 511.781389][ T2041] ffff8880275a7178 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc1/0xff0 [ 511.789849][ T2041] [ 511.789849][ T2041] which lock already depends on the new lock. [ 511.789849][ T2041] [ 511.800260][ T2041] [ 511.800260][ T2041] the existing dependency chain (in reverse order) is: [ 511.809365][ T2041] [ 511.809365][ T2041] -> #6 (&cmd->lock){+.+.}-{4:4}: [ 511.816585][ T2041] __mutex_lock+0x19d/0x1550 [ 511.821718][ T2041] nbd_queue_rq+0xc1/0xff0 [ 511.826665][ T2041] blk_mq_dispatch_rq_list+0x499/0x1990 [ 511.832831][ T2041] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 511.839776][ T2041] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 511.846288][ T2041] blk_mq_run_work_fn+0x16c/0x300 [ 511.851840][ T2041] process_scheduled_works+0xc3d/0x1630 [ 511.857931][ T2041] worker_thread+0xa47/0xfb0 [ 511.863058][ T2041] kthread+0x38b/0x480 [ 511.867657][ T2041] ret_from_fork+0x514/0xb70 [ 511.872770][ T2041] ret_from_fork_asm+0x1a/0x30 [ 511.878069][ T2041] [ 511.878069][ T2041] -> #5 (set->srcu){.+.+}-{0:0}: [ 511.885204][ T2041] __synchronize_srcu+0xc9/0x2f0 [ 511.890665][ T2041] elevator_switch+0x1e8/0x7b0 [ 511.896015][ T2041] elevator_change+0x2fa/0x480 [ 511.901298][ T2041] elevator_set_default+0x375/0x440 [ 511.907016][ T2041] blk_register_queue+0x3f3/0x4e0 [ 511.912640][ T2041] __add_disk+0x6b8/0xdb0 [ 511.917499][ T2041] add_disk_fwnode+0x100/0x3a0 [ 511.922779][ T2041] nbd_dev_add+0x733/0xb60 [ 511.925415][ T5622] block nbd3: Receive control failed (result -32) [ 511.934100][ T2041] nbd_init+0x168/0x1f0 [ 511.938900][ T2041] do_one_initcall+0x250/0x870 [ 511.944201][ T2041] do_initcall_level+0x10a/0x1a0 [ 511.949788][ T2041] do_initcalls+0x59/0xa0 [ 511.954646][ T2041] kernel_init_freeable+0x29d/0x3e0 [ 511.960375][ T2041] kernel_init+0x22/0x1d0 [ 511.965237][ T2041] ret_from_fork+0x514/0xb70 [ 511.970349][ T2041] ret_from_fork_asm+0x1a/0x30 [ 511.975652][ T2041] [ 511.975652][ T2041] -> #4 (&q->elevator_lock){+.+.}-{4:4}: [ 511.983472][ T2041] __mutex_lock+0x19d/0x1550 [ 511.988585][ T2041] elevator_change+0x1af/0x480 [ 511.993862][ T2041] elevator_set_none+0xb5/0x140 [ 511.999220][ T2041] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 512.005537][ T2041] nbd_start_device+0x189/0xb30 [ 512.010902][ T2041] nbd_genl_connect+0x167d/0x1cd0 [ 512.016436][ T2041] genl_family_rcv_msg_doit+0x233/0x340 [ 512.022488][ T2041] genl_rcv_msg+0x614/0x7a0 [ 512.027498][ T2041] netlink_rcv_skb+0x226/0x4a0 [ 512.032773][ T2041] genl_rcv+0x28/0x40 [ 512.037260][ T2041] netlink_unicast+0x7bd/0x940 [ 512.042532][ T2041] netlink_sendmsg+0x813/0xb40 [ 512.047799][ T2041] sock_sendmsg_nosec+0x13a/0x180 [ 512.053328][ T2041] ____sys_sendmsg+0x54e/0x850 [ 512.058600][ T2041] ___sys_sendmsg+0x2a5/0x360 [ 512.063783][ T2041] __x64_sys_sendmsg+0x1b1/0x290 [ 512.069227][ T2041] do_syscall_64+0x166/0x520 [ 512.074324][ T2041] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.080726][ T2041] [ 512.080726][ T2041] -> #3 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 512.089321][ T2041] blk_alloc_queue+0x544/0x690 [ 512.094598][ T2041] __blk_mq_alloc_disk+0x194/0x390 [ 512.100215][ T2041] nbd_dev_add+0x494/0xb60 [ 512.105134][ T2041] nbd_init+0x168/0x1f0 [ 512.109802][ T2041] do_one_initcall+0x250/0x870 [ 512.115077][ T2041] do_initcall_level+0x10a/0x1a0 [ 512.120521][ T2041] do_initcalls+0x59/0xa0 [ 512.125358][ T2041] kernel_init_freeable+0x29d/0x3e0 [ 512.131068][ T2041] kernel_init+0x22/0x1d0 [ 512.135908][ T2041] ret_from_fork+0x514/0xb70 [ 512.141001][ T2041] ret_from_fork_asm+0x1a/0x30 [ 512.146273][ T2041] [ 512.146273][ T2041] -> #2 (fs_reclaim){+.+.}-{0:0}: [ 512.153468][ T2041] fs_reclaim_acquire+0x71/0x100 [ 512.158915][ T2041] __kmalloc_noprof+0xbc/0x720 [ 512.164180][ T2041] tls_sw_sendmsg+0x59b/0x2b50 [ 512.169454][ T2041] sock_sendmsg_nosec+0x90/0x180 [ 512.174897][ T2041] sock_sendmsg+0x1ca/0x2d0 [ 512.179913][ T2041] splice_to_socket+0xb5e/0x12a0 [ 512.185363][ T2041] direct_splice_actor+0x101/0x160 [ 512.190983][ T2041] splice_direct_to_actor+0x57b/0xcb0 [ 512.196862][ T2041] do_splice_direct+0x195/0x290 [ 512.202226][ T2041] do_sendfile+0x52e/0x7c0 [ 512.207151][ T2041] __se_sys_sendfile64+0x144/0x1a0 [ 512.212767][ T2041] do_syscall_64+0x166/0x520 [ 512.217865][ T2041] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.224266][ T2041] [ 512.224266][ T2041] -> #1 (sk_lock-AF_INET6-NBD){+.+.}-{0:0}: [ 512.232334][ T2041] lock_sock_nested+0x41/0x100 [ 512.237614][ T2041] inet_shutdown+0x6a/0x390 [ 512.242624][ T2041] nbd_mark_nsock_dead+0x2cb/0x550 [ 512.248313][ T2041] recv_work+0x1cee/0x1e10 [ 512.253235][ T2041] process_scheduled_works+0xc3d/0x1630 [ 512.259289][ T2041] worker_thread+0xa47/0xfb0 [ 512.264388][ T2041] kthread+0x38b/0x480 [ 512.268962][ T2041] ret_from_fork+0x514/0xb70 [ 512.274052][ T2041] ret_from_fork_asm+0x1a/0x30 [ 512.279328][ T2041] [ 512.279328][ T2041] -> #0 (&nsock->tx_lock){+.+.}-{4:4}: [ 512.286956][ T2041] __lock_acquire+0x164c/0x2de0 [ 512.292312][ T2041] lock_acquire+0x115/0x350 [ 512.297320][ T2041] __mutex_lock+0x19d/0x1550 [ 512.302418][ T2041] nbd_queue_rq+0x373/0xff0 [ 512.307429][ T2041] blk_mq_dispatch_rq_list+0x499/0x1990 [ 512.313480][ T2041] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 512.320317][ T2041] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 512.326803][ T2041] blk_mq_run_work_fn+0x16c/0x300 [ 512.332342][ T2041] process_scheduled_works+0xc3d/0x1630 [ 512.338394][ T2041] worker_thread+0xa47/0xfb0 [ 512.343493][ T2041] kthread+0x38b/0x480 [ 512.348069][ T2041] ret_from_fork+0x514/0xb70 [ 512.353164][ T2041] ret_from_fork_asm+0x1a/0x30 [ 512.358437][ T2041] [ 512.358437][ T2041] other info that might help us debug this: [ 512.358437][ T2041] [ 512.368647][ T2041] Chain exists of: [ 512.368647][ T2041] &nsock->tx_lock --> set->srcu --> &cmd->lock [ 512.368647][ T2041] [ 512.380710][ T2041] Possible unsafe locking scenario: [ 512.380710][ T2041] [ 512.388143][ T2041] CPU0 CPU1 [ 512.393489][ T2041] ---- ---- [ 512.398835][ T2041] lock(&cmd->lock); [ 512.402804][ T2041] lock(set->srcu); [ 512.409201][ T2041] lock(&cmd->lock); [ 512.415684][ T2041] lock(&nsock->tx_lock); [ 512.420082][ T2041] [ 512.420082][ T2041] *** DEADLOCK *** [ 512.420082][ T2041] [ 512.428206][ T2041] locks held by kworker/1:1H/2041: 4, last CPU#1: [ 512.434602][ T2041] #0: ffff88801eef4940 ((wq_completion)kblockd){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 512.445726][ T2041] #1: ffffc9000686fc40 ((work_completion)(&(&hctx->run_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 512.458580][ T2041] #2: ffff8880273ce518 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_work_fn+0x144/0x300 [ 512.467988][ T2041] #3: ffff8880275a7178 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc1/0xff0 [ 512.476848][ T2041] [ 512.476848][ T2041] stack backtrace: [ 512.482722][ T2041] CPU: 1 UID: 0 PID: 2041 Comm: kworker/1:1H Not tainted syzkaller #0 PREEMPT(full) [ 512.492160][ T2041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 512.502200][ T2041] Workqueue: kblockd blk_mq_run_work_fn [ 512.507743][ T2041] Call Trace: [ 512.511011][ T2041] [ 512.513925][ T2041] dump_stack_lvl+0xe8/0x150 [ 512.518506][ T2041] print_circular_bug+0x2e2/0x300 [ 512.523522][ T2041] check_noncircular+0x12f/0x150 [ 512.528458][ T2041] __lock_acquire+0x164c/0x2de0 [ 512.533306][ T2041] lock_acquire+0x115/0x350 [ 512.537792][ T2041] ? nbd_queue_rq+0x373/0xff0 [ 512.542463][ T2041] __mutex_lock+0x19d/0x1550 [ 512.547045][ T2041] ? nbd_queue_rq+0x373/0xff0 [ 512.551707][ T2041] ? ret_from_fork_asm+0x1a/0x30 [ 512.556633][ T2041] ? unwind_next_frame+0x8f/0x2550 [ 512.561738][ T2041] ? nbd_queue_rq+0x373/0xff0 [ 512.566404][ T2041] ? __pfx___mutex_lock+0x10/0x10 [ 512.571416][ T2041] ? ret_from_fork_asm+0x1a/0x30 [ 512.576396][ T2041] ? stack_trace_save+0xa9/0x100 [ 512.581321][ T2041] ? __pfx_stack_trace_save+0x10/0x10 [ 512.586679][ T2041] nbd_queue_rq+0x373/0xff0 [ 512.591169][ T2041] ? __lock_acquire+0x1511/0x2de0 [ 512.596177][ T2041] ? __pfx_nbd_queue_rq+0x10/0x10 [ 512.601200][ T2041] blk_mq_dispatch_rq_list+0x499/0x1990 [ 512.606735][ T2041] ? sbitmap_get+0x229/0x390 [ 512.611387][ T2041] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 512.617353][ T2041] ? __blk_mq_alloc_driver_tag+0x2e7/0x6e0 [ 512.623148][ T2041] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 512.629470][ T2041] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 512.636222][ T2041] ? lock_acquire+0x115/0x350 [ 512.640888][ T2041] ? process_scheduled_works+0x97a/0x1630 [ 512.646598][ T2041] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 512.652565][ T2041] ? blk_mq_run_work_fn+0x144/0x300 [ 512.657752][ T2041] blk_mq_run_work_fn+0x16c/0x300 [ 512.662767][ T2041] ? process_scheduled_works+0x97a/0x1630 [ 512.668473][ T2041] process_scheduled_works+0xc3d/0x1630 [ 512.674020][ T2041] ? __pfx_process_scheduled_works+0x10/0x10 [ 512.679994][ T2041] ? assign_work+0x3cf/0x5d0 [ 512.684573][ T2041] worker_thread+0xa47/0xfb0 [ 512.689158][ T2041] ? __kthread_parkme+0x71/0x1f0 [ 512.694086][ T2041] kthread+0x38b/0x480 [ 512.698137][ T2041] ? __pfx_worker_thread+0x10/0x10 [ 512.703234][ T2041] ? __pfx_kthread+0x10/0x10 [ 512.707805][ T2041] ret_from_fork+0x514/0xb70 [ 512.712379][ T2041] ? __pfx_ret_from_fork+0x10/0x10 [ 512.717483][ T2041] ? __switch_to+0xc89/0x1420 [ 512.722151][ T2041] ? __pfx_kthread+0x10/0x10 [ 512.726728][ T2041] ret_from_fork_asm+0x1a/0x30 [ 512.731491][ T2041] [ 512.759955][ T2041] block nbd3: Dead connection, failed to find a fallback [ 512.759973][ T2041] block nbd3: shutting down sockets [ 512.759987][ T2041] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 512.760010][ T2041] Buffer I/O error on dev nbd3, logical block 0, async page read [ 512.760059][ T2041] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 3 prio class 2 [ 512.760078][ T2041] Buffer I/O error on dev nbd3, logical block 1, async page read [ 512.760089][ T2041] Buffer I/O error on dev nbd3, logical block 2, async page read [ 512.760101][ T2041] Buffer I/O error on dev nbd3, logical block 3, async page read [ 512.773265][ T2011] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 512.773295][ T2011] Buffer I/O error on dev nbd3, logical block 0, async page read [ 512.773308][ T2011] Buffer I/O error on dev nbd3, logical block 1, async page read [ 512.773320][ T2011] Buffer I/O error on dev nbd3, logical block 2, async page read [ 512.773332][ T2011] Buffer I/O error on dev nbd3, logical block 3, async page read [ 512.773460][ T2011] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 512.773480][ T2011] Buffer I/O error on dev nbd3, logical block 0, async page read [ 512.773492][ T2011] Buffer I/O error on dev nbd3, logical block 1, async page read [ 512.773580][ T2011] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 512.773680][ T2011] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 512.773790][ T2011] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 512.773896][ T2011] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 512.774013][ T2011] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 512.774074][ T5626] ldm_validate_partition_table(): Disk read failed. [ 512.774172][ T2011] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 512.774549][ T5626] Dev nbd3: unable to read RDB block 0 [ 512.774987][ T5626] nbd3: unable to read partition table [ 512.931365][ T5626] ldm_validate_partition_table(): Disk read failed. [ 512.931699][ T5626] Dev nbd3: unable to read RDB block 0 [ 512.932111][ T5626] nbd3: unable to read partition table