last executing test programs: 3.612480523s ago: executing program 2 (id=4723): syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000400)={0xa, 0x2, 0x13, @loopback, 0x9}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000440)=0xfffffffe, 0x4) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f00000002c0)=0xffffffff) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0xfc}, 0x1c) 2.550808679s ago: executing program 2 (id=4742): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x8) bind$ax25(r0, &(0x7f0000000540)={{0x3, @bcast, 0x1}, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) connect$ax25(r0, &(0x7f00000001c0)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x3a) 2.45422288s ago: executing program 2 (id=4746): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x2046}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000800)=""/213, 0xd5}, {&(0x7f0000000900)=""/242, 0xf2}, {&(0x7f0000003e00)=""/4098, 0x1002}], 0x3}, 0x101}, {{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x0, 0x0}, 0x409}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000540)=""/130, 0x82}, {&(0x7f0000001900)=""/229, 0xe5}, {&(0x7f0000001a00)=""/4109, 0x100d}, {&(0x7f0000006080)=""/4085, 0xff5}, {&(0x7f0000000240)=""/112, 0x70}, {&(0x7f0000000040)=""/113, 0x71}], 0x6}, 0x4db}, {{0x0, 0x0, 0x0}, 0x8}], 0x7, 0x40010020, 0x0) 2.295018835s ago: executing program 2 (id=4750): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='kfree\x00'}, 0x18) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xfffff63d, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MAX_AGE={0x8, 0x3, 0x258}]}}}]}, 0x3c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r1) r2 = socket$inet(0x2, 0x3, 0xd) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000005000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtaction={0x64, 0x30, 0xeaa3ef926154e70d, 0x0, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x12}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f00000001c0)={@dev, @local, @broadcast}, &(0x7f0000000080)=0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) 2.201858668s ago: executing program 0 (id=4754): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000000)={'c', ' *:* ', 'w\x00'}, 0x8) openat$cgroup_subtree(r0, &(0x7f0000000040), 0x2, 0x0) 2.071886666s ago: executing program 0 (id=4757): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, @timestamp_reply={0xe, 0x0, 0x0, 0x7fff, 0x1ff, 0xfffffff3, 0xc, 0x8000}}}}}, 0x0) ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000)) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r3) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x0, 0x2}, 0x10) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x44010}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r5, @ANYRES32, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r6, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r7, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c) connect$rose(r7, &(0x7f0000000280)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40) (fail_nth: 2) 1.647803152s ago: executing program 2 (id=4760): pipe(&(0x7f0000000040)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x80000025a5, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xe, 0x5, &(0x7f0000000080)=@framed={{}, [@btf_id={0x18, 0x2, 0x3, 0x0, 0x2}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0xb}, 0x94) 1.352000188s ago: executing program 4 (id=4770): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1d4}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x300f000, 0xe, 0x0, &(0x7f0000000080)="0069c2704ade28eddb0000200000", 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000180), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000001740)={0x0, 0x6, &(0x7f0000001700)={&(0x7f0000000440)={0x30, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x4}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_DOI={0x8}]}, 0x30}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001d00)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8fff7ff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b70500000000e000720a23fe000000008500000012000000b70000000000000095000000000000004e6258941c823b7505608556ba4ababb42684e890d31ae450400373a0a5447a801b8c1c4f0c4bd97c6555e61345400f9bd42abeb9ade0105000000000000a21902ff07000094a2b51c21df74924f5436a6ed89b98f75e800230c49c90fe1336481f3b92a63336c36fcd745d61d7739c6554ca201000000bebbe8282f8b1e26407437a397bf8f50e87ed4d27adfd876bffc402887781979461c4363bc5c9b6202ea471428197ef88bc333fbcec0ea4334f1ddb9d679ae95a90fd41d528f58d305000000435883df6c10ce86188c92292b2d0226082960be682836bdff8b0971f2a5405e453228e7b1005bd73479358a90df3e481947de6453736aa572158af6ea63d6d418fbbd2bba050000001da000ef78df03000000d19913a5fb03c79dac2e489f68127892658115e7ffb588a71dffffff951b8535167ab8069a2c92a3aa18e22517000026637b4c34bf2d0aa304ed42bf70480e9e97203fd169411f37fddd1f7fbe16dbbc0f307bceb5064f388a0350c3dc928b0e638b1e2b2a9d25264233e5d45eb377f56b95241024dbe30f67191c2b56b70328d6d3215dfffe5d89af1d10599bd494d921d1fb2db99b6aba0fa978f41eb1d4c553e5a9326ed550c13f8dd36716a899a1e79234294707c5312b924d142c17b20bb80ee202222c03fa84ccc374e717f694018630366397266090a82343aedfbf7afe892390c2eb775b0d16073da2229958db05de7df6ab7600004000010000006d8081cb3bf251d906c00da0e23b50465f8394820be571e3592d0000c7ef10fdc462e7040e7074ec43aa461fc54401a76406db718d4efd6c1bd10ce1d087cf9bba461162555a95524c84df0952d32093082b7aa71304e0d2d9ec310d1b676b378a5879e47941de1a28c3a8f400000000000000000e032b7d2badd0bc6617a859b7ac273b6304555f664469cec152030f06cc0ca1765838eb5590264736fbccfc3a8f4e3b10daf6a275daf5db2dac7096fe8ac8876acaad043663b3b0fedb05e6d31408fa20140c9d2db1c59ac8a3ce28e489d67d87d3a107ccea3007f58f2c5017e8807107f79ac50cc1d4f546b4443d137eb706b71b1767a10cca7a7c82b76c96e874aff249f36329a6526b354b6e674b08f7ef492b804c4b08fb10de807d79fd782027318cd7632e22d2faa16209272b39b5ec8d239832ea02cc88e249a2e77753a58987547571fbc8de747faab724bebb6401412b496e078fcb6c78ab447e871b76a8b0506f49594aa1d610567e14d739a60ff3ce04d0d2e5681e787c7e1ad25467bb81f2f440128207fe07a83759ec30cf9e0a3fd3f2fcee97fe8d273f8e712a8a64eaf2d89a1fa44554357fcd7ab531ff7a41c27164fca430a62d015b477de61853f5ee2e25b00a63642ec32ece2ff3bb5883deb895f52a923b5c744d8dccdd6a09ded8b90f1eeda8e6e884a4f090edb6ab9fc8107846508d51f3735493d5860cf80200ce31b92eb3563d485b5a7d192092d7a9fd2bc67d305d1d4573aad5f6501d1cd27657ce17330402dacb78d72d776330711645eed7d4c292f4448733c0826c4eb950f3d40457f82d7f792d106518f6bde874aff9e2bea7d73f74bebeeacfc700000000000000000000d40d73be47803297db004264c8c70b7761b22a7114a078a87d63d63b0c9dcc263a5b773bfeba212abef4181ad9e4872e328c0f105d51e3d167a2b717051d7681ba04552eeba18a000000b22b50d76d85040c9000ea68a528049a60d5e26b20455194f4be3b8466fd66d0e6cefcff7891c485d61cb66f4076cd60a22733cb00cf7cc12ca7d9bb864c0e650236a79a5c85349a9b1e6bbc3bace197e72490c566431cd3a08e9d1b641c1ba1f661d01573b904c3fa1427370fa15cecd294ac21fefe3d161fdf58e8bc5957ef145839f4370176e1be88d2e3516a1998c1621a00b4438b85a4dfee6f61827a1e50e158038b037dfda3ffb35069e41fc740ae720800de53948f176c3c15f3a529c02434b920d87f12a6e3420a2fdcb3559e7a5b1ddbb06b7a5977f63bfac701e673bf626d126b213c92e7169a930beb8d76f9db34e8098bea301baa96916d6458c923866dc192928b320738d1b298fb55f2a64500000000000000000000000000509885a38d9d995a46817e7ff7acddcc5f9253c63f86baf33f92820c9ff497cf76b6482c3ab53fb6ecea6d220b91b99b2fb4279ab09ae0645ab92df309000000000000a4868411948f8e3e259b717d722a1eebd3f6860a17f1ae9e10a1178f6aef4951b192d13e9600c1f700ca7b1d127e451034469bf2a8f93dbae6ad8e932e431dc18323794156238625bb9c45c5a76a68a8646e701b29a71ffbd854f50f195823106a5625ff94221f1f04c72525b50aae69081de9626de9847bf53475d90642d9730101d80b1b0000000000000000822b0641698d60160d9157548302dd2636d12c431f96728ae4a45361e6d47a1c4a52d67c0f0a62585c09fcfd70d0f249f87c44b47283c1c6f2430d70c751e4ada9b646e6e7c1719faee476d88a2943c71a21db55b7497dd7ed385ac2e8cb916390a3a0ed52e7371e1a141e69afa07b46ac20f3521fb251b72c82ee1c7eb4f67c0deed5618d0db925ce7a7c50a99835544c540f5d528587d1a26e78df1bc9a8e4d90c57d0b8122eae7b23e4456624f5337c16c42648c7a3d0b799ad409befe0cbe2aa781ba826918df7aa80dff4f62258e54419629eb1d37de7f6a3512bd618781d1ad3a4d4b0da44df9f9a93f0487f79a9b16dfa6f68b06ce6a96ca344d194cded05702c2300d1a4f451b33830765f8131f6c28fada65701851bba089b8a8347900e72d68cea965feb6a06225dd3f0e135323a5bde3b43c9d242b73abf9e05336af040a4a6bb5918146393f1d50705c1d1e986bf2f690de51ee8727d37339df5391db535bb1e9bb3e5dadb6e5a2bb4faa2dcbc6ca9b40ac96e448b9dadeb08fc2cf3a960f22bf20b9e967b7a75687372b8e3edc543896c360674d901a7f56b07ba1479b46eea3d94026a9c7e670ab40bb2c1ca1a7c90299361239bef773140af974c7efc285a64633d21513481b3ac62dec9fa3e8ce6156d76b82baa145bc550b0ccbc0934ccfea45292caa2f0654fe18dc0669a4f2af9fa232a293ad94261f55675cc686db72783a6bacc0df6a1ea943ae266af112f35319980cd681811a369e0d03cf7d22bed7cbe1afe498b88942b1bf7edae441a0d0d88fce65cb4e848793a28cbd7373f6acd3b5a48c034e487750388929d37fa3165f205dab3be5f3e5781a84298687cbf02dcaf0e14a2b260293f349d076eb75a2ddc5382d106f0beea02aa45018fe36d1176cf7704383b6922d10dc80bc7feca3982ae232d4bb47c722c83a7cf6ee8832f038b072eb803a47cd7f753e80c9f6eedb8"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1d4}, 0x48) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x300f000, 0xe, 0x0, &(0x7f0000000080)="0069c2704ade28eddb0000200000", 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) (async) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000180), r0) (async) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000001740)={0x0, 0x6, &(0x7f0000001700)={&(0x7f0000000440)={0x30, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x4}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_DOI={0x8}]}, 0x30}}, 0x0) (async) 1.324637344s ago: executing program 4 (id=4772): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000080095"], &(0x7f0000000040)='GPL\x00'}, 0x80) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@cgroup, r0, 0x11}, 0x14) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r1, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x200001}, {{0x0, 0x0, 0x0}, 0x2046}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000800)=""/213, 0xd5}, {&(0x7f0000000900)=""/242, 0xf2}, {&(0x7f0000003e00)=""/4098, 0x1002}], 0x3}, 0x101}, {{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x0, 0x0}, 0x409}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000540)=""/130, 0x82}, {&(0x7f0000001900)=""/229, 0xe5}, {&(0x7f0000001a00)=""/4109, 0x100d}, {&(0x7f0000006080)=""/4085, 0xff5}, {&(0x7f0000000240)=""/112, 0x70}, {&(0x7f0000000040)=""/113, 0x71}], 0x6}, 0x4db}, {{0x0, 0x0, 0x0}, 0x8}], 0x8, 0x40010020, 0x0) 1.232044726s ago: executing program 4 (id=4774): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x16, 0x0, 0xffffffffffffffff, 0xffffffffffffffc9}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x22, 0x0, &(0x7f00000005c0)="06ff03076844268cb89e14f008000ee0ffff00febabec41177fb86dd1402e000030c", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x6, 0x4}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0xffffffff}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, r5, 0xf21, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)={0x2c8, r6, 0x300, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_SCAN_SUPP_RATES={0x180, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x33, 0x2, "3939d7e10baa279bb38389130f168a13193378f0488ce5475368b707dcca165478bb93d97087518da38eb4d0870227"}, @NL80211_BAND_5GHZ={0x96, 0x1, "6aa9ef38496caaa63077970a4ae111e49d8c725de11fdba3d37695b8f59483437816db7ca3c3d4567d75339e33d00fe5641e24baac98b315e614ad9f527e1678b894dfbae40e5d1d9945177410a43501e22a7626e34863ff16b110660d187882ea265b66846a0f214a3292e77e769d489aa2cbbf33cb898e046b553e19b1546b587eb3465bcd3ed261a9132ede74f4acdead"}, @NL80211_BAND_60GHZ={0xad, 0x2, "10af7183fe24e81833bf287f67a316389af4009339197aeaa0a2dcae2f8c569d4f61ddf1934e256d3c625efdac3d8ccd3df330344447e2180947b26616b6d44db971fb47935d9679d3df3e17582c6a90c76985944c083c512c9c599e9a981e3e8565036bfef2a4b89de0f740c0aeed2b0d7e5b66dd7b1844b46da1b6de1c19cf83cf912d282b7e2990a8868eb21e0a67ffe997fc5a437cc9ef6c3a9c9840d55e6faf07747f9bea48c6"}]}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x8}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0xfaeb}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCAN_SUPP_RATES={0xb4, 0x7d, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xa9, 0x1, "dd7d3311a369fd3fe23c2369358c78af4e3bfc3ae1731d10a13a09ff135b5664d77f92382ef3ef81929d2c7123a2a4db791aa06872fd707517daee48ace3039ba28060c91e475db67c6f407dcc62dccb885b35505b84943af20e849665249ceba655a0f979eafbd75761e6c74d8f41335192b0d4c4a20604483b3175b0ac56cc995454fa899218d4137d77367bee592361e1ee16aff607d4f5a1b66cbfceec7c6753f6df9e"}, @NL80211_BAND_6GHZ={0x4}]}, @NL80211_ATTR_SCAN_SSIDS={0x60, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}, {0x11, 0x0, @random="b309cb04093628502c5b0a18c5"}, {0x21, 0x0, @random="4a8b09ae37bfa253a01c9f74c327c208590c719a53dceb1b1c7167aa49"}, {0x17, 0x0, @random="dcee59b0bf16f3b0150d23a5992da27d031140"}]}]}, 0x2c8}, 0x1, 0x0, 0x0, 0x40000}, 0x4008800) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv6_delroute={0x38, 0x19, 0x1, 0x0, 0x0, {}, [@RTA_PRIORITY={0x8, 0x1e}, @RTA_GATEWAY={0x14, 0x5, @loopback}]}, 0x38}}, 0x0) 1.209541444s ago: executing program 4 (id=4776): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x0, 0xc9, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) openat$ppp(0xffffffffffffff9c, &(0x7f00000006c0), 0x4000, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) recvmmsg(r0, &(0x7f00000037c0)=[{{0x0, 0x0, 0x0}, 0x500}, {{0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1}}], 0x2, 0x40010101, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x0) sendmmsg$inet6(r0, &(0x7f0000001ac0)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x64b, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}, 0x1c, &(0x7f0000001a80)=[{&(0x7f0000001dc0)="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", 0x1000}, {&(0x7f0000000840)="94ec0186033d4403a8451d570115287d1b2d0cb26dac89e312a9ce0a458b8c750bd8bb9d5f7bc6e2fdd89a10457eb8df", 0x30}, {&(0x7f0000001980)="3224eaa472a98e47d2f3c8dd3e54f971250404017b1b59f99c", 0x19}, {&(0x7f00000019c0)="6af29230652049b3279819b70889c2b0c0bbea9a2a6f5fa94ded5f8c421e421499297fdf1d1ff7fac3ba8487dca9088b0e89d72ae38c67a6d6d334f558dd0c1443b914a9f0543c5b3c3c035ec5f199e82a560fcb8bf5f8d98571329279665fa753e4c2ec3dc3997a3454a5a932ed4b0f3e7bfde4170f6d6146362c48a1e7bff98a54d6264c4f216875bf3f289aa29638f3", 0x91}], 0x4}}], 0x1, 0x40080) socket$inet_udplite(0x2, 0x2, 0x88) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x0, 0xc9, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) (async) openat$ppp(0xffffffffffffff9c, &(0x7f00000006c0), 0x4000, 0x0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) recvmmsg(r0, &(0x7f00000037c0)=[{{0x0, 0x0, 0x0}, 0x500}, {{0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1}}], 0x2, 0x40010101, 0x0) (async) syz_emit_ethernet(0x4e, &(0x7f0000000700)=ANY=[@ANYBLOB="0180c200000e0000000000008100200086dd63269fe000143aff20010000000000000000000000000001ff02000000000000000000000000000187009078ff0200000000000800000000000000019f175dbac9e052dabe0360df4da805c3071f7db2bea4523ca8d0f38997d407bc34ef60a1158be48cb2b3a913cf50185bccbedc3c8f430fef0f544539deed27ec5f71fc9c172f8608a2d917346490f7680170170a3cbb025ed28987aa629ee0c35937bd06c3ba44fd968b5cc925fecf9d93ccef3cadfcffb6e949ecf90ead0e6ad860ef360c8bc84d1a19200a0f7607a6e5ce7d3ba77e32200ac7d692b3b12fb9b0c270acd8fc9e53acbab04e96890a3be676321eef28a5c76b1ed3eec44048f75a6c082288fae7d55e1fcc3784ac83"], 0x0) (async) sendmmsg$inet6(r0, &(0x7f0000001ac0)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x64b, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}, 0x1c, &(0x7f0000001a80)=[{&(0x7f0000001dc0)="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", 0x1000}, {&(0x7f0000000840)="94ec0186033d4403a8451d570115287d1b2d0cb26dac89e312a9ce0a458b8c750bd8bb9d5f7bc6e2fdd89a10457eb8df", 0x30}, {&(0x7f0000001980)="3224eaa472a98e47d2f3c8dd3e54f971250404017b1b59f99c", 0x19}, {&(0x7f00000019c0)="6af29230652049b3279819b70889c2b0c0bbea9a2a6f5fa94ded5f8c421e421499297fdf1d1ff7fac3ba8487dca9088b0e89d72ae38c67a6d6d334f558dd0c1443b914a9f0543c5b3c3c035ec5f199e82a560fcb8bf5f8d98571329279665fa753e4c2ec3dc3997a3454a5a932ed4b0f3e7bfde4170f6d6146362c48a1e7bff98a54d6264c4f216875bf3f289aa29638f3", 0x91}], 0x4}}], 0x1, 0x40080) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) 1.207053643s ago: executing program 1 (id=4777): pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x1100000000f336, 0x0) 1.146184615s ago: executing program 4 (id=4778): sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) read(r0, &(0x7f0000000040)=""/59, 0x3b) r1 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x600) r2 = socket$inet6(0xa, 0x3, 0x38) setsockopt$inet6_int(r2, 0x29, 0x7, &(0x7f0000000040)=0xeffe, 0x4) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r1) syz_emit_ethernet(0x66, &(0x7f0000000c00)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00\b', 0x30, 0x3a, 0xff, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, {[], @ndisc_redir={0x87, 0x0, 0x0, '\x00', @local, @private2={0xfc, 0x2, '\x00', 0x1}, [{0xe, 0x1, "2025b07f3c58"}]}}}}}}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010028bd7000fedbdf2514000022688425fb8cf949b35d9e01006e657464657673696d0000000f0002006e657464657673696d300000080008000000000000000b0000000000"], 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4800) sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYRES64=r1], 0x10}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008000) r4 = accept(0xffffffffffffffff, &(0x7f0000000200)=@isdn, &(0x7f0000000300)=0x80) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r1) r6 = socket(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r8) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x24, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtfilter={0x68, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {}, {0xfff1, 0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34}]}}]}, 0x68}}, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r4, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="00042cbd7000ffdbdf250b0000003c000180060005004e2300000500020005000000080006001500000008000700", @ANYRES32=r9, @ANYBLOB="080006000e000000060005004e220000060005004e2300003400068014000400ff01000000000000000000000000000114000400ff0100000000000000000000000000010800060008000000"], 0x84}, 0x1, 0x0, 0x0, 0x20040000}, 0x1) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$unix(0x1, 0x5, 0x0) sendmmsg$unix(r11, &(0x7f0000003440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20000014) sendmsg$nl_generic(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYRES16=r11], 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) 1.087844697s ago: executing program 0 (id=4780): socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000a00)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000003a40)=@newtaction={0x18, 0x30, 0x0, 0x70bd29, 0x25dfdbfb, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x24040001) recvmmsg$unix(r2, &(0x7f00000029c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000002a00)=""/4100, 0x1004}], 0x1}}], 0x1, 0x10000, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000140)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000100"/15], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r3, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000340)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 1.048176972s ago: executing program 0 (id=4781): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x200001}, {{0x0, 0x0, 0x0}, 0x2046}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x1}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000800)=""/213, 0xd5}, {&(0x7f0000000900)=""/242, 0xf2}, {&(0x7f0000003e00)=""/4098, 0x103c}, {&(0x7f00000006c0)=""/229, 0xe5}], 0x4}, 0x101}, {{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x0, 0x0}, 0x409}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000540)=""/130, 0x82}, {&(0x7f0000001900)=""/229, 0xe5}, {&(0x7f0000001a00)=""/4109, 0x100d}, {&(0x7f0000006080)=""/4085, 0xff5}, {&(0x7f0000000240)=""/112, 0x70}, {&(0x7f0000000040)=""/113, 0x71}], 0x6}, 0x4db}, {{0x0, 0x0, 0x0}, 0x8}], 0x8, 0x40010020, 0x0) 967.673329ms ago: executing program 0 (id=4783): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019800)={0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x90) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r1], 0x128}, 0x4040000) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) socket$inet6(0xa, 0x1, 0x100) 740.166667ms ago: executing program 2 (id=4787): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x80, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty, 0x4}], 0x1c) sendto$inet6(r0, &(0x7f0000000040)='l', 0x1, 0x14, &(0x7f0000000100)={0xa, 0x4e23, 0x7, @loopback={0xfe800000}}, 0x1c) 475.98892ms ago: executing program 3 (id=4794): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd28, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {0x0, 0x600}, {0xfff2, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x2, 0xfffffffffffffffd, 0x100000a, 0x8}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x0) 470.445568ms ago: executing program 3 (id=4795): r0 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80003, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7, 0x1}, 0x80, 0x0, 0x0, 0x0, 0x10}}], 0x2, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r1) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r1) syz_genetlink_get_family_id$nl80211(0x0, r1) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2) r3 = socket$netlink(0x10, 0x3, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-160\x00'}, 0x4c) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$ITER_CREATE(0xb, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x14, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x260}, {}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @generic={0x8, 0x5, 0x4, 0xd3eb, 0x7}, @alu={0x4, 0x0, 0x6, 0xb, 0x4, 0xfffffffffffffff8, 0xfffffffffffffffc}, @cb_func={0x18, 0x8}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x810, 0xc5, &(0x7f0000000580)=""/197, 0x41000, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000840)=[{0x2, 0x5, 0x3, 0x3}, {0x1, 0x4, 0xf, 0x5}, {0x0, 0x1, 0xc, 0xc}], 0x10, 0x3ff}, 0x94) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x691, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) 402.438222ms ago: executing program 3 (id=4796): socket(0x10, 0x80002, 0x0) (async) r0 = socket(0x10, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) (async) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) r3 = socket(0x840000000002, 0x3, 0x100) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x801, 0x43, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2202e, 0x11008}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x3}, @IFLA_XDP_FD={0x8, 0x1, r2}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048050}, 0x40014) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000000)=@newtaction={0x60, 0x30, 0x53b, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_simple={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4004010}, 0x0) accept4$tipc(r3, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x100800) (async) r4 = accept4$tipc(r3, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x100800) ioctl$VFAT_IOCTL_READDIR_SHORT(r4, 0x82307202, &(0x7f00000002c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) getsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 332.326301ms ago: executing program 1 (id=4797): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="b702000014000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d640500000000006504040001001f000404000001007d60b7030000000000006a0a00fe00000100850000000d000000b7000000000000009500000000000000c74396c8e3ebbadc20e5a7ef8c9ac1465cbf188ef10871b81ac7553358380b3a1f59916ffc9bf0bdf81524f07fb2819bf5774fedda52e39c90af27db5b56024df96b4673b4e8d5467e114604ea09b290a248a120c9c6cd87cef9000000a39c15a7ef365cc27dfeac7b9b0e9048517354b0ca4f9cf8b59ee6fa003fe1f2c4c15f20a07db4583a462d8be6602186fd68ee14a19ea2eb42122b8635a66ce6b5b92356081bc0f18a0ca83dbc089a9813c1efa26001b3f486ebfaae85c4d0b96778478ae5355e6f923b11056969f486f80a35f7f2339704fa93fa915ab8e1e0d7f31ebd19455e6827cd493907bf9d0000000000000000000000004e1fa60acabcf0553910ca2e5ea499fd5889dde9261f0848a5b8af657bfc96049308e8953431b269053627a1523551c160c813969925a892d266792352ec0204596a37ce8d6d260b32239bddbce2e79f93cb5a0ad897adb53b397d07c50f84b74f2605a565ee149016aa75ea31c0087dcd821b47c8b36efc6da4fb2ea7f1f36c85856b73ac9872babc62149699b6b8c796a79d833eb4b5ca668d430db5653a2b3c5b87e17ca1"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0xb, 0x7, 0x10001, 0x49, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x2f9, 0x403d87c21de2ff3f, &(0x7f0000000040)="b90103606989068c3c270040f0182f9e0ff008001fffffe1ffff86dd632f080686dd00017f020001be", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28) 260.114179ms ago: executing program 4 (id=4798): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, @timestamp_reply={0xe, 0x0, 0x0, 0x7fff, 0x1ff, 0xfffffff3, 0xc, 0x8000}}}}}, 0x0) ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000)) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r3) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) bind$tipc(r4, &(0x7f0000000100)=@id={0x1e, 0x3, 0x3, {0x4e24, 0x4}}, 0x10) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0xd) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r5}, @ldst={0x1, 0x0, 0x3}]}, &(0x7f0000000d40)='syzkaller\x00'}, 0x90) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x0, 0x2}, 0x10) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x44010}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r6, @ANYRES32, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r8, 0x0, 0xca, &(0x7f0000000000)={0x2, 0x0, 0x81, 0x10001, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x2b}, @remote}, 0x10) ioctl$sock_rose_SIOCADDRT(r7, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r9 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r9, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c) connect$rose(r9, &(0x7f0000000280)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40) 259.97809ms ago: executing program 3 (id=4799): socket$packet(0x11, 0x3, 0x300) socket(0x10, 0x803, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c00000010000104000000210000000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000005c001280110001006272696467655f736c617665000000004400058005000500000000000500", @ANYRES8=r0], 0x7c}, 0x1, 0x0, 0x0, 0x40094}, 0x0) 233.672237ms ago: executing program 1 (id=4800): socket$netlink(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x58, 0x0, 0x9, 0x5, 0x0, 0x0, {}, [@NFCTH_PRIV_DATA_LEN={0x8}, @NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_PROTO={0x28, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @loopback}}}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8}}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x58}}, 0x0) 217.888745ms ago: executing program 3 (id=4801): r0 = socket(0x2b, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000300)={0x2d, 0xffffffffffffffff, 0x4001}, 0xc) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SIOCAX25NOUID(r1, 0x89e3, &(0x7f0000000040)=0x8) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r2, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000004740)=""/4090, 0xffa}, {&(0x7f0000000440)=""/91, 0x5b}], 0x2}}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000003740)=""/4072, 0xfe8}], 0x2}, 0x8}], 0x3, 0x2, 0x0) 174.225213ms ago: executing program 1 (id=4802): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x80}}, 0x0) sendmsg$key(r0, &(0x7f00000001c0)={0x4000feff, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002eb0e00000000000000000105000600200000000a00000040010000000500e50000070000001f00001a000000030000a95a6e870200010000e9ff070040000200000000050005000000cc580a"], 0x80}}, 0x4000000) 173.552478ms ago: executing program 3 (id=4803): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000a80)={0x48, r1, 0x1, 0xfffffffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xfb2e77a8993c191f}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}]}, 0x48}, 0x1, 0x40000000}, 0x20000000) 108.256493ms ago: executing program 1 (id=4804): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="034886dd09032800050030000000600000001228290081e949b93897bc3b0000000040007d01ff020000000000000000000000060001"], 0xfdef) 103.210792ms ago: executing program 0 (id=4805): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x70, 0x30, 0x1, 0x70bd28, 0x0, {}, [{0x5c, 0x1, [@m_simple={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x2, 0xfffffff8, 0x1, 0x9, 0x7}}, @TCA_DEF_DATA={0xd, 0x3, ')+@$(:(\\\x00'}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x70, 0x30, 0x1, 0x70bd28, 0x0, {}, [{0x5c, 0x1, [@m_simple={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x2, 0xfffffff8, 0x1, 0x9, 0x7}}, @TCA_DEF_DATA={0xd, 0x3, ')+@$(:(\\\x00'}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x18, r1, 0xcc071acbf25dbf8f, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001240)=ANY=[@ANYBLOB="a800000000010104000000000000000002000000240001801400018008000100e000000108000200ac1e01010c00028005000100000009002400028014000180080001000000010008000200ac1e00010c0002800500010000000000440010800800014000000006080003400000002b080003400000000808000240000000400800014000000000fb0001400000000708000140000044f10800034000000003080007"], 0xa8}}, 0x0) 0s ago: executing program 1 (id=4806): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0x100000, 0x0}, 0x10) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) sendmsg$can_bcm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000001200)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x2b}, @local}, @redirect={0x5, 0x0, 0x0, @multicast2, {0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, @dev, @local, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@rand_addr, 0x4e210000}]}]}}}}}}}, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, &(0x7f00000011c0), 0x4) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0xc, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "c4"}]}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x4}}], {0x14, 0x11, 0x1, 0x0, 0xfffffff5}}, 0x98}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, r5, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x5}, 0x4004080) setsockopt$inet_int(r4, 0x0, 0x6, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000580)=@mangle={'mangle\x00', 0x1f, 0x6, 0xbc8, 0x98, 0xa68, 0x9c8, 0x9c8, 0x918, 0xb30, 0xb30, 0xb30, 0xb30, 0xb30, 0x6, &(0x7f0000000500), {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0x850, 0x880, 0x0, {}, [@common=@unspec=@u32={{0x7e0}, {[{[{0x9, 0x1}, {0x80, 0x1}, {0x10001, 0x2}, {0x101, 0x3}, {0x6}, {0x4}, {0x5, 0x1}, {0x6}, {0xfffffff8, 0x2}, {0x1, 0x1}, {0x60a, 0x1}], [{0x8001, 0x100}, {0x0, 0x1}, {0x1ff}, {0xfffffffb, 0xfffffff9}, {0x7ff, 0x2}, {0xa08a, 0x40}, {0x8, 0x4}, {0x7}, {0x0, 0x2}, {0x24e4, 0x61}, {0x0, 0x2}], 0x81, 0x7}, {[{0xfff, 0x2}, {0x4, 0x2}, {0xff}, {0x2}, {0x0, 0x3}, {0xe, 0x3}, {0x76e, 0x2}, {0x3, 0x2}, {0xb}, {0xc, 0x3}, {0x44b3, 0x3}], [{0xe, 0x5}, {0xffffffff, 0x8}, {0xf3e, 0x7}, {0x7, 0x7}, {0xd, 0x3298a095}, {0xf}, {0x8, 0xfffffff9}, {0x0, 0x8}, {0x5, 0x7}, {0x81, 0xff}, {0x9, 0x80000001}], 0x1, 0xa}, {[{0x4, 0x2}, {0x6, 0x2}, {0xd7, 0x2}, {0x2, 0x3}, {0x9, 0x3}, {0x12d, 0x2}, {0x73b6, 0x2}, {0x8001, 0x1}, {0x8001}, {0x6, 0x1}, {0x4, 0x1}], [{0x80000001, 0x8000}, {0x6b, 0xabe4}, {0x0, 0x434a}, {0x8, 0x2}, {0x6, 0xffff8a07}, {0xf5, 0x7fffffff}, {0x1, 0x5}, {}, {0x3, 0x5}, {0x6, 0x2}, {0x2, 0x5}], 0xa, 0x4}, {[{0x3, 0x1}, {0x2}, {0x1, 0x1}, {0x5}, {0x40, 0x2}, {}, {0x8, 0x3}, {0x1}, {0x5, 0x2}, {0x7}], [{0x2, 0x4}, {0x7, 0x7}, {0x8, 0x7}, {0x4, 0x9cf2}, {0x8001, 0x7fffffff}, {0x3, 0xbf4c}, {0xae, 0x1}, {0x1fd7, 0x5}, {0x5, 0xffff}, {0x800}, {0x800, 0xf}], 0x3, 0x2}, {[{0x6, 0x2}, {0x1, 0x2}, {0x1, 0x2}, {0x480, 0x3}, {0x9, 0x3}, {0x3}, {0xe, 0x2}, {0x1, 0x1}, {0x5}, {0x800, 0x2}, {0x1}], [{0x2, 0x9}, {0x4, 0x5fe27217}, {0x8, 0xffff}, {0x461, 0xfffffff9}, {0xff, 0x4}, {0x8001}, {0x6, 0x8}, {0x0, 0x7}, {0x1ff9, 0x10}, {0x7, 0x3}, {0xcb, 0x9}], 0x0, 0xa}, {[{0x3, 0x2}, {0x400, 0x1}, {0xf37}, {0x0, 0x3}, {0x4, 0x1}, {0x2, 0x3}, {0x7, 0x1}, {0x40, 0x3}, {0x3, 0x3}, {0x400000, 0x3}, {0x81}], [{0x3, 0x8}, {0x7, 0x8}, {0x2, 0xfffffff9}, {0x0, 0xffff0001}, {0x6, 0x8}, {0x4, 0xd01}, {0xde23, 0x3}, {0xcc, 0xe84a}, {0xa3, 0x1}, {0x7, 0x401}, {0x9db, 0x7}], 0xa, 0x8}, {[{0xb, 0x3}, {0xb4f5}, {0x6, 0x2}, {0x1, 0x2}, {0x3, 0x1}, {0xa, 0x2}, {0x1, 0x2}, {0xffff, 0x3}, {0x8, 0x1}, {0x0, 0x1}, {0x5, 0x3}], [{0x7f, 0xab}, {0xa81}, {0x40}, {0x3, 0x5}, {0x7fff, 0x3}, {0x7}, {0x3, 0x5}, {0x3, 0x8}, {0x8, 0x1000000}, {0x6, 0x9}, {0x7, 0x2}], 0x7, 0xb}, {[{0xfff, 0x1}, {0x80000000}, {0x2}, {0x7, 0x3}, {0x9, 0x1}, {0xffff4f61, 0x1}, {0x713, 0x3}, {0x9, 0x1}, {0xd, 0x1}, {0xc3, 0x3}, {0x5}], [{0xffffffff, 0x6}, {0x5, 0x719}, {0x8a, 0x7}, {0x3, 0x9}, {0x1e, 0x100}, {0x9, 0x7}, {0x9, 0x9}, {0x5, 0x9}, {0x80, 0x7}, {0xe, 0x7}, {0x3, 0x191f6aec}], 0x6, 0x2}, {[{0x8, 0x3}, {0xfffffc01, 0x1}, {0x4, 0x2}, {0x3}, {0xb8, 0x1}, {0x8, 0x1}, {0x9, 0x2}, {0x9, 0x2}, {0x0, 0x3}, {0x4, 0x1}, {0x400, 0x2}], [{0x5, 0x59f9}, {0x5, 0xffff}, {0x2, 0x5}, {0x80, 0x4880cf2d}, {0x6, 0x81}, {0xffffffff, 0x4fb}, {0x8, 0x4}, {0xff, 0x10000}, {0x2, 0x7}, {0xdf5, 0x6}, {0x65d, 0x9}], 0x7, 0x6}, {[{0x8, 0x3}, {0xfffffff7, 0x3}, {0x7}, {0xd2, 0x3}, {0xa, 0x1}, {0x0, 0x3}, {0x80000000}, {0x4, 0x475ca58514072223}, {0x2, 0x3}, {0x9}, {0x7, 0x2}], [{0x89, 0x6}, {0x401, 0x6}, {0x4, 0x2}, {0x0, 0x1}, {0x0, 0x9}, {0x5, 0xffff36d4}, {0x7, 0xffd4}, {0xa}, {0x80000001, 0xfffffff9}, {0x4, 0x5}, {0x5, 0xff}], 0x9, 0x6}, {[{0x5, 0x1}, {0x80000001, 0x3}, {0x0, 0x1}, {0x9f, 0x3}, {0x5, 0x2}, {0x9, 0x3}, {0x1, 0x2}, {0x2, 0x1}, {0x400, 0x1}, {0x7}, {0x2, 0x1}], [{0x2, 0x8}, {0x5, 0xb3}, {0x1}, {0x2, 0x8}, {0xab1, 0xb855}, {0xb, 0x5}, {0x4, 0x8d4e}, {0x0, 0x9}, {0x3ff, 0x4}, {0x3, 0x1000}, {0x800, 0x6}], 0xa, 0x3}], 0x4}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x4, 0xfffffff8, @dev={0xac, 0x14, 0x14, 0x3d}, 0x4e24}}}, {{@ip={@local, @dev={0xac, 0x14, 0x14, 0x23}, 0xff, 0x0, 'netdevsim0\x00', 'netdevsim0\x00', {}, {}, 0x62, 0x1}, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x2, 0x8, "9af250011f209d6332c7733cc5fd38dcac09a71bb2aed414c7569bb1f8dc"}}}, {{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x9, 0x80000000, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e24}}}, {{@ip={@rand_addr=0x64010100, @remote, 0x0, 0x0, 'bond_slave_0\x00', 'vlan1\x00', {}, {}, 0x16, 0x0, 0x40}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@addrtype={{0x30}, {0x3e8, 0x74e, 0x1}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xc28) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket(0x200000100000011, 0x803, 0x0) recvmmsg(r7, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}, 0x8798}], 0x1, 0x40001041, 0x0) sendto$inet(r4, &(0x7f00000000c0)="f461830000000000", 0x8, 0x4084, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYRES64=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006261746164760000", @ANYRES32, @ANYBLOB="08001f0004"], 0x44}}, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r3, 0x8008f513, &(0x7f0000000040)) kernel console output (not intermixed with test programs): [ 260.073030][T16597] ? __pfx____ratelimit+0x10/0x10 [ 260.073052][T16597] ? __pfx_dump_stack_lvl+0x10/0x10 [ 260.073069][T16597] ? __pfx__printk+0x10/0x10 [ 260.073091][T16597] ? __pfx___might_resched+0x10/0x10 [ 260.073106][T16597] ? lock_acquire+0x5f/0x360 [ 260.073131][T16597] should_fail_ex+0x414/0x560 [ 260.073156][T16597] should_failslab+0xa8/0x100 [ 260.073181][T16597] __kmalloc_cache_node_noprof+0x73/0x3d0 [ 260.073204][T16597] ? page_pool_create_percpu+0x76/0xbe0 [ 260.073226][T16597] page_pool_create_percpu+0x76/0xbe0 [ 260.073245][T16597] ? __kvmalloc_node_noprof+0x331/0x5f0 [ 260.073266][T16597] ? bpf_test_run_xdp_live+0x1b5/0x1b10 [ 260.073293][T16597] bpf_test_run_xdp_live+0x1ca/0x1b10 [ 260.073318][T16597] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 260.073345][T16597] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 260.073373][T16597] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 260.073395][T16597] ? 0xffffffffa0205140 [ 260.073411][T16597] ? 0xffffffffa0205140 [ 260.073443][T16597] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 260.073469][T16597] ? _copy_from_user+0x94/0xb0 [ 260.073486][T16597] ? bpf_test_init+0x133/0x170 [ 260.073507][T16597] ? xdp_convert_md_to_buff+0x5b/0x330 [ 260.073527][T16597] bpf_prog_test_run_xdp+0x713/0x1000 [ 260.073555][T16597] ? rcu_is_watching+0x15/0xb0 [ 260.073574][T16597] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 260.073597][T16597] ? __fget_files+0x2a/0x420 [ 260.073621][T16597] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 260.073644][T16597] bpf_prog_test_run+0x2c7/0x340 [ 260.073666][T16597] __sys_bpf+0x581/0x870 [ 260.073685][T16597] ? __pfx___sys_bpf+0x10/0x10 [ 260.073709][T16597] ? ksys_write+0x22a/0x250 [ 260.073730][T16597] ? __pfx_ksys_write+0x10/0x10 [ 260.073747][T16597] ? rcu_is_watching+0x15/0xb0 [ 260.073766][T16597] __x64_sys_bpf+0x7c/0x90 [ 260.073784][T16597] do_syscall_64+0xfa/0x3b0 [ 260.073807][T16597] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.073823][T16597] ? clear_bhb_loop+0x60/0xb0 [ 260.073840][T16597] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.073855][T16597] RIP: 0033:0x7fd7dc18ebe9 [ 260.073869][T16597] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 260.073882][T16597] RSP: 002b:00007fd7dcf20038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 260.073901][T16597] RAX: ffffffffffffffda RBX: 00007fd7dc3b5fa0 RCX: 00007fd7dc18ebe9 [ 260.073914][T16597] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 260.073924][T16597] RBP: 00007fd7dcf20090 R08: 0000000000000000 R09: 0000000000000000 [ 260.073935][T16597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 260.073945][T16597] R13: 00007fd7dc3b6038 R14: 00007fd7dc3b5fa0 R15: 00007ffeb1b65868 [ 260.073970][T16597] [ 260.629999][T16622] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3988'. [ 260.760823][T16633] netlink: 'syz.3.3993': attribute type 10 has an invalid length. [ 260.779021][T16633] batman_adv: batadv0: Adding interface: team0 [ 260.788114][T16633] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.832612][T16633] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 261.264962][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 261.272255][ C0] bridge0: topology change detected, propagating [ 261.648028][T16653] nbd31: detected capacity change from 0 to 127 [ 261.679240][ T5862] block nbd31: Receive control failed (result -104) [ 261.992333][T16686] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.265221][T16695] nbd32: detected capacity change from 0 to 127 [ 262.286647][T16706] bond3 (unregistering): Released all slaves [ 262.293033][ T5862] block nbd32: Receive control failed (result -104) [ 262.303162][ T5869] block nbd32: Receive control failed (result -32) [ 262.351460][T16712] FAULT_INJECTION: forcing a failure. [ 262.351460][T16712] name failslab, interval 1, probability 0, space 0, times 0 [ 262.378963][T16712] CPU: 0 UID: 0 PID: 16712 Comm: syz.1.4029 Not tainted syzkaller #0 PREEMPT(full) [ 262.378988][T16712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 262.379000][T16712] Call Trace: [ 262.379015][T16712] [ 262.379023][T16712] dump_stack_lvl+0x189/0x250 [ 262.379048][T16712] ? __pfx____ratelimit+0x10/0x10 [ 262.379070][T16712] ? __pfx_dump_stack_lvl+0x10/0x10 [ 262.379088][T16712] ? __pfx__printk+0x10/0x10 [ 262.379109][T16712] ? __pfx___might_resched+0x10/0x10 [ 262.379125][T16712] ? lock_acquire+0x5f/0x360 [ 262.379147][T16712] should_fail_ex+0x414/0x560 [ 262.379170][T16712] should_failslab+0xa8/0x100 [ 262.379192][T16712] __kmalloc_cache_noprof+0x70/0x3d0 [ 262.379213][T16712] ? __xdp_reg_mem_model+0x1d8/0x5a0 [ 262.379230][T16712] ? rcu_is_watching+0x15/0xb0 [ 262.379247][T16712] __xdp_reg_mem_model+0x1d8/0x5a0 [ 262.379266][T16712] ? __pfx___xdp_reg_mem_model+0x10/0x10 [ 262.379283][T16712] ? page_pool_create_percpu+0x800/0xbe0 [ 262.379307][T16712] xdp_reg_mem_model+0x22/0x40 [ 262.379323][T16712] bpf_test_run_xdp_live+0x215/0x1b10 [ 262.379349][T16712] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 262.379373][T16712] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 262.379401][T16712] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 262.379423][T16712] ? 0xffffffffa0205140 [ 262.379440][T16712] ? 0xffffffffa0205140 [ 262.379472][T16712] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 262.379498][T16712] ? _copy_from_user+0x94/0xb0 [ 262.379518][T16712] ? bpf_test_init+0x133/0x170 [ 262.379539][T16712] ? xdp_convert_md_to_buff+0x5b/0x330 [ 262.379561][T16712] bpf_prog_test_run_xdp+0x713/0x1000 [ 262.379592][T16712] ? rcu_is_watching+0x15/0xb0 [ 262.379610][T16712] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 262.379636][T16712] ? __fget_files+0x2a/0x420 [ 262.379663][T16712] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 262.379687][T16712] bpf_prog_test_run+0x2c7/0x340 [ 262.379713][T16712] __sys_bpf+0x581/0x870 [ 262.379736][T16712] ? __pfx___sys_bpf+0x10/0x10 [ 262.379761][T16712] ? ksys_write+0x22a/0x250 [ 262.379784][T16712] ? __pfx_ksys_write+0x10/0x10 [ 262.379804][T16712] ? rcu_is_watching+0x15/0xb0 [ 262.379824][T16712] __x64_sys_bpf+0x7c/0x90 [ 262.379844][T16712] do_syscall_64+0xfa/0x3b0 [ 262.379869][T16712] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.379888][T16712] ? clear_bhb_loop+0x60/0xb0 [ 262.379907][T16712] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.379925][T16712] RIP: 0033:0x7fe99238ebe9 [ 262.379941][T16712] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 262.379957][T16712] RSP: 002b:00007fe9905f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 262.379977][T16712] RAX: ffffffffffffffda RBX: 00007fe9925b5fa0 RCX: 00007fe99238ebe9 [ 262.379991][T16712] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 262.380003][T16712] RBP: 00007fe9905f6090 R08: 0000000000000000 R09: 0000000000000000 [ 262.380022][T16712] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 262.380033][T16712] R13: 00007fe9925b6038 R14: 00007fe9925b5fa0 R15: 00007ffc4916c828 [ 262.380054][T16712] [ 262.791993][T16719] netlink: 'syz.2.4032': attribute type 8 has an invalid length. [ 262.849805][T16732] netlink: 'syz.3.4037': attribute type 10 has an invalid length. [ 262.925069][T16724] nbd33: detected capacity change from 0 to 14357878102030336 [ 262.964317][ T5869] block nbd33: Receive control failed (result -104) [ 263.054035][T16749] netlink: 'syz.0.4043': attribute type 1 has an invalid length. [ 263.075159][T16749] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 263.080996][T16754] netlink: 'syz.1.4044': attribute type 1 has an invalid length. [ 263.097042][T16758] netlink: 'syz.4.4045': attribute type 4 has an invalid length. [ 263.100523][T16754] netlink: 'syz.1.4044': attribute type 1 has an invalid length. [ 263.242891][T16769] netlink: 'syz.0.4050': attribute type 10 has an invalid length. [ 263.257694][T16769] batman_adv: batadv0: Interface deactivated: team0 [ 263.517674][T16783] tipc: Enabled bearer , priority 0 [ 263.535204][T16783] syzkaller0: entered promiscuous mode [ 263.540743][T16783] syzkaller0: entered allmulticast mode [ 263.585544][T16783] netlink: 'syz.4.4056': attribute type 1 has an invalid length. [ 263.608888][T16783] netlink: 'syz.4.4056': attribute type 4 has an invalid length. [ 263.630433][T16792] FAULT_INJECTION: forcing a failure. [ 263.630433][T16792] name failslab, interval 1, probability 0, space 0, times 0 [ 263.632652][T16783] __nla_validate_parse: 9 callbacks suppressed [ 263.632669][T16783] netlink: 9422 bytes leftover after parsing attributes in process `syz.4.4056'. [ 263.647106][T16792] CPU: 1 UID: 0 PID: 16792 Comm: syz.1.4060 Not tainted syzkaller #0 PREEMPT(full) [ 263.647133][T16792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 263.647144][T16792] Call Trace: [ 263.647152][T16792] [ 263.647167][T16792] dump_stack_lvl+0x189/0x250 [ 263.647195][T16792] ? __pfx____ratelimit+0x10/0x10 [ 263.647219][T16792] ? __pfx_dump_stack_lvl+0x10/0x10 [ 263.647239][T16792] ? __pfx__printk+0x10/0x10 [ 263.647265][T16792] ? __pfx___might_resched+0x10/0x10 [ 263.647282][T16792] ? lock_acquire+0x5f/0x360 [ 263.647307][T16792] should_fail_ex+0x414/0x560 [ 263.647331][T16792] should_failslab+0xa8/0x100 [ 263.647357][T16792] __kmalloc_noprof+0xcb/0x4f0 [ 263.647380][T16792] ? group_cpus_evenly+0x288/0x550 [ 263.647401][T16792] group_cpus_evenly+0x288/0x550 [ 263.647420][T16792] ? __pfx_group_cpus_evenly+0x10/0x10 [ 263.647444][T16792] blk_mq_map_queues+0xab/0x4a0 [ 263.647471][T16792] ? __pfx_blk_mq_map_queues+0x10/0x10 [ 263.647495][T16792] ? blk_mq_update_queue_map+0x37a/0x440 [ 263.647514][T16792] blk_mq_alloc_tag_set+0x83f/0xfd0 [ 263.647537][T16792] nbd_dev_add+0x2d7/0xae0 [ 263.647566][T16792] ? rcu_is_watching+0x15/0xb0 [ 263.647585][T16792] ? __pfx_nbd_dev_add+0x10/0x10 [ 263.647676][T16792] ? bpf_lsm_capable+0x9/0x20 [ 263.647700][T16792] ? security_capable+0x7e/0x2e0 [ 263.647728][T16792] nbd_genl_connect+0x919/0x18f0 [ 263.647756][T16792] ? __pfx_nbd_genl_connect+0x10/0x10 [ 263.647785][T16792] ? __nla_parse+0x40/0x60 [ 263.647812][T16792] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 263.647838][T16792] genl_family_rcv_msg_doit+0x215/0x300 [ 263.647863][T16792] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 263.647889][T16792] ? stack_trace_save+0x9c/0xe0 [ 263.647911][T16792] genl_rcv_msg+0x60e/0x790 [ 263.647933][T16792] ? __pfx_genl_rcv_msg+0x10/0x10 [ 263.647951][T16792] ? __kasan_slab_alloc+0x6c/0x80 [ 263.647974][T16792] ? __pfx_nbd_genl_connect+0x10/0x10 [ 263.647998][T16792] ? __netlink_lookup+0xbd/0x810 [ 263.648013][T16792] ? rcu_is_watching+0x15/0xb0 [ 263.648034][T16792] netlink_rcv_skb+0x208/0x470 [ 263.648058][T16792] ? __pfx_genl_rcv_msg+0x10/0x10 [ 263.648077][T16792] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 263.648106][T16792] ? lock_release+0x4b/0x3e0 [ 263.648130][T16792] ? down_read+0x1ad/0x2e0 [ 263.648148][T16792] genl_rcv+0x28/0x40 [ 263.648166][T16792] netlink_unicast+0x82c/0x9e0 [ 263.648191][T16792] ? __pfx_netlink_unicast+0x10/0x10 [ 263.648212][T16792] ? netlink_sendmsg+0x642/0xb30 [ 263.648235][T16792] ? skb_put+0x11b/0x210 [ 263.648252][T16792] netlink_sendmsg+0x805/0xb30 [ 263.648280][T16792] ? __pfx_netlink_sendmsg+0x10/0x10 [ 263.648305][T16792] ? aa_sock_msg_perm+0xf1/0x1d0 [ 263.648322][T16792] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 263.648341][T16792] ? __pfx_netlink_sendmsg+0x10/0x10 [ 263.648364][T16792] __sock_sendmsg+0x21c/0x270 [ 263.648387][T16792] ____sys_sendmsg+0x505/0x830 [ 263.648408][T16792] ? __pfx_____sys_sendmsg+0x10/0x10 [ 263.648430][T16792] ? import_iovec+0x74/0xa0 [ 263.648450][T16792] ___sys_sendmsg+0x21f/0x2a0 [ 263.648468][T16792] ? __pfx____sys_sendmsg+0x10/0x10 [ 263.648501][T16792] ? __fget_files+0x2a/0x420 [ 263.648525][T16792] ? __fget_files+0x3a0/0x420 [ 263.648552][T16792] __x64_sys_sendmsg+0x19b/0x260 [ 263.648571][T16792] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 263.648593][T16792] ? __pfx_ksys_write+0x10/0x10 [ 263.648614][T16792] ? rcu_is_watching+0x15/0xb0 [ 263.648633][T16792] ? rcu_is_watching+0x15/0xb0 [ 263.648657][T16792] do_syscall_64+0xfa/0x3b0 [ 263.648681][T16792] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.648699][T16792] ? clear_bhb_loop+0x60/0xb0 [ 263.648718][T16792] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.648735][T16792] RIP: 0033:0x7fe99238ebe9 [ 263.648753][T16792] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 263.648768][T16792] RSP: 002b:00007fe9905f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 263.648788][T16792] RAX: ffffffffffffffda RBX: 00007fe9925b5fa0 RCX: 00007fe99238ebe9 [ 263.648802][T16792] RDX: 0000000020000000 RSI: 0000200000001ac0 RDI: 0000000000000004 [ 263.648814][T16792] RBP: 00007fe9905f6090 R08: 0000000000000000 R09: 0000000000000000 [ 263.648825][T16792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 263.648836][T16792] R13: 00007fe9925b6038 R14: 00007fe9925b5fa0 R15: 00007ffc4916c828 [ 263.648857][T16792] [ 263.790452][T16799] netlink: 'syz.0.4061': attribute type 1 has an invalid length. [ 264.123436][T16783] tipc: Resetting bearer [ 264.133227][T16782] tipc: Resetting bearer [ 264.166454][T16792] nbd34: detected capacity change from 0 to 127 [ 264.167486][T16782] tipc: Disabling bearer [ 264.204746][ T5869] block nbd34: Receive control failed (result -104) [ 264.241406][T16805] 8021q: adding VLAN 0 to HW filter on device team0 [ 264.294959][T16805] batman_adv: batadv0: Interface activated: team0 [ 264.321270][T16805] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 264.431359][T16820] bond1: entered promiscuous mode [ 264.448712][T16820] bond1: entered allmulticast mode [ 264.454277][T16820] 8021q: adding VLAN 0 to HW filter on device bond1 [ 264.500143][T16832] batman_adv: batadv0: Interface deactivated: team0 [ 264.595229][T16834] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.4074'. [ 264.607881][T16834] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4074'. [ 264.667436][T16842] netlink: 84 bytes leftover after parsing attributes in process `syz.4.4075'. [ 264.684255][T16842] netlink: 84 bytes leftover after parsing attributes in process `syz.4.4075'. [ 264.893426][T16851] bond5: entered allmulticast mode [ 264.916257][T16851] 8021q: adding VLAN 0 to HW filter on device bond5 [ 264.923822][T16851] bridge0: port 6(bond5) entered blocking state [ 264.930764][T16851] bridge0: port 6(bond5) entered disabled state [ 264.939747][T16851] bond5: entered promiscuous mode [ 264.949022][T16851] bridge0: port 6(bond5) entered blocking state [ 264.955440][T16851] bridge0: port 6(bond5) entered forwarding state [ 265.227252][ T36] bridge0: port 6(bond5) entered disabled state [ 265.309834][T16879] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4088'. [ 265.331866][T16891] FAULT_INJECTION: forcing a failure. [ 265.331866][T16891] name failslab, interval 1, probability 0, space 0, times 0 [ 265.395105][T16891] CPU: 0 UID: 0 PID: 16891 Comm: syz.2.4092 Not tainted syzkaller #0 PREEMPT(full) [ 265.395130][T16891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 265.395141][T16891] Call Trace: [ 265.395149][T16891] [ 265.395156][T16891] dump_stack_lvl+0x189/0x250 [ 265.395181][T16891] ? __pfx____ratelimit+0x10/0x10 [ 265.395206][T16891] ? __pfx_dump_stack_lvl+0x10/0x10 [ 265.395224][T16891] ? __pfx__printk+0x10/0x10 [ 265.395246][T16891] ? fs_reclaim_acquire+0x7d/0x100 [ 265.395270][T16891] ? rcu_is_watching+0x15/0xb0 [ 265.395286][T16891] ? __pfx___might_resched+0x10/0x10 [ 265.395299][T16891] ? lock_acquire+0x5f/0x360 [ 265.395323][T16891] should_fail_ex+0x414/0x560 [ 265.395346][T16891] should_failslab+0xa8/0x100 [ 265.395369][T16891] __kmalloc_cache_node_noprof+0x73/0x3d0 [ 265.395390][T16891] ? blk_mq_init_tags+0x85/0x280 [ 265.395410][T16891] blk_mq_init_tags+0x85/0x280 [ 265.395428][T16891] blk_mq_alloc_map_and_rqs+0xbd/0x9f0 [ 265.395452][T16891] ? kfree+0x18e/0x440 [ 265.395472][T16891] ? blk_mq_map_queues+0x3ff/0x4a0 [ 265.395496][T16891] blk_mq_alloc_set_map_and_rqs+0x1aa/0x880 [ 265.395516][T16891] blk_mq_alloc_tag_set+0x847/0xfd0 [ 265.395536][T16891] nbd_dev_add+0x2d7/0xae0 [ 265.395557][T16891] ? rcu_is_watching+0x15/0xb0 [ 265.395573][T16891] ? __pfx_nbd_dev_add+0x10/0x10 [ 265.395601][T16891] ? bpf_lsm_capable+0x9/0x20 [ 265.395622][T16891] ? security_capable+0x7e/0x2e0 [ 265.395645][T16891] nbd_genl_connect+0x919/0x18f0 [ 265.395670][T16891] ? __pfx_nbd_genl_connect+0x10/0x10 [ 265.395706][T16891] ? __nla_parse+0x40/0x60 [ 265.395730][T16891] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 265.395754][T16891] genl_family_rcv_msg_doit+0x215/0x300 [ 265.395775][T16891] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 265.395799][T16891] ? stack_trace_save+0x9c/0xe0 [ 265.395821][T16891] genl_rcv_msg+0x60e/0x790 [ 265.395843][T16891] ? __pfx_genl_rcv_msg+0x10/0x10 [ 265.395859][T16891] ? __kasan_slab_alloc+0x6c/0x80 [ 265.395880][T16891] ? __pfx_nbd_genl_connect+0x10/0x10 [ 265.395902][T16891] ? __netlink_lookup+0xbd/0x810 [ 265.395917][T16891] ? rcu_is_watching+0x15/0xb0 [ 265.395938][T16891] netlink_rcv_skb+0x208/0x470 [ 265.395962][T16891] ? __pfx_genl_rcv_msg+0x10/0x10 [ 265.395982][T16891] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 265.396009][T16891] ? lock_release+0x4b/0x3e0 [ 265.396034][T16891] ? down_read+0x1ad/0x2e0 [ 265.396053][T16891] genl_rcv+0x28/0x40 [ 265.396070][T16891] netlink_unicast+0x82c/0x9e0 [ 265.396095][T16891] ? __pfx_netlink_unicast+0x10/0x10 [ 265.396117][T16891] ? netlink_sendmsg+0x642/0xb30 [ 265.396143][T16891] ? skb_put+0x11b/0x210 [ 265.396162][T16891] netlink_sendmsg+0x805/0xb30 [ 265.396190][T16891] ? __pfx_netlink_sendmsg+0x10/0x10 [ 265.396214][T16891] ? aa_sock_msg_perm+0xf1/0x1d0 [ 265.396231][T16891] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 265.396250][T16891] ? __pfx_netlink_sendmsg+0x10/0x10 [ 265.396274][T16891] __sock_sendmsg+0x21c/0x270 [ 265.396297][T16891] ____sys_sendmsg+0x505/0x830 [ 265.396317][T16891] ? __pfx_____sys_sendmsg+0x10/0x10 [ 265.396339][T16891] ? import_iovec+0x74/0xa0 [ 265.396360][T16891] ___sys_sendmsg+0x21f/0x2a0 [ 265.396379][T16891] ? __pfx____sys_sendmsg+0x10/0x10 [ 265.396411][T16891] ? __fget_files+0x2a/0x420 [ 265.396435][T16891] ? __fget_files+0x3a0/0x420 [ 265.396461][T16891] __x64_sys_sendmsg+0x19b/0x260 [ 265.396480][T16891] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 265.396502][T16891] ? __pfx_ksys_write+0x10/0x10 [ 265.396523][T16891] ? rcu_is_watching+0x15/0xb0 [ 265.396541][T16891] ? rcu_is_watching+0x15/0xb0 [ 265.396559][T16891] do_syscall_64+0xfa/0x3b0 [ 265.396585][T16891] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.396602][T16891] ? clear_bhb_loop+0x60/0xb0 [ 265.396619][T16891] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.396634][T16891] RIP: 0033:0x7f76ba18ebe9 [ 265.396650][T16891] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 265.396666][T16891] RSP: 002b:00007f76bb081038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 265.396693][T16891] RAX: ffffffffffffffda RBX: 00007f76ba3b5fa0 RCX: 00007f76ba18ebe9 [ 265.396707][T16891] RDX: 0000000020000000 RSI: 0000200000001ac0 RDI: 0000000000000004 [ 265.396720][T16891] RBP: 00007f76bb081090 R08: 0000000000000000 R09: 0000000000000000 [ 265.396732][T16891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 265.396743][T16891] R13: 00007f76ba3b6038 R14: 00007f76ba3b5fa0 R15: 00007ffc3be38a28 [ 265.396763][T16891] [ 265.401396][T16891] blk-mq: reduced tag depth (128 -> 64) [ 265.579942][T16900] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4096'. [ 265.958475][T16891] nbd35: detected capacity change from 0 to 127 [ 265.988827][ T5869] block nbd35: Receive control failed (result -32) [ 265.994065][ T9626] block nbd35: Send control failed (result -32) [ 266.002490][ T9626] block nbd35: Request send failed, requeueing [ 266.012622][ T55] block nbd35: Dead connection, failed to find a fallback [ 266.030533][T16921] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4101'. [ 266.035309][T16919] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4099'. [ 266.052953][ T55] block nbd35: shutting down sockets [ 266.064621][ T55] blk_print_req_error: 138 callbacks suppressed [ 266.064641][ T55] I/O error, dev nbd35, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 266.081786][ T55] buffer_io_error: 138 callbacks suppressed [ 266.081803][ T55] Buffer I/O error on dev nbd35, logical block 0, async page read [ 266.098372][ T9626] I/O error, dev nbd35, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 266.109382][ T9626] Buffer I/O error on dev nbd35, logical block 1, async page read [ 266.127793][ T9626] I/O error, dev nbd35, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 266.137851][ T9626] Buffer I/O error on dev nbd35, logical block 2, async page read [ 266.149057][ T9626] I/O error, dev nbd35, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 266.159534][ T9626] Buffer I/O error on dev nbd35, logical block 3, async page read [ 266.167915][ T9626] I/O error, dev nbd35, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 266.177945][ T9626] Buffer I/O error on dev nbd35, logical block 0, async page read [ 266.187044][ T9626] I/O error, dev nbd35, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 266.196638][ T9626] Buffer I/O error on dev nbd35, logical block 1, async page read [ 266.215184][ T9626] I/O error, dev nbd35, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 266.237523][ T9626] Buffer I/O error on dev nbd35, logical block 2, async page read [ 266.260870][ T9626] I/O error, dev nbd35, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 266.291413][ T9626] Buffer I/O error on dev nbd35, logical block 3, async page read [ 266.314739][ T9626] I/O error, dev nbd35, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 266.340278][ T9626] Buffer I/O error on dev nbd35, logical block 0, async page read [ 266.372695][ T9626] I/O error, dev nbd35, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 266.394992][ T9626] Buffer I/O error on dev nbd35, logical block 1, async page read [ 266.426814][ T9626] ldm_validate_partition_table(): Disk read failed. [ 266.468967][ T9626] Dev nbd35: unable to read RDB block 0 [ 266.507956][ T9626] nbd35: unable to read partition table [ 266.515599][T16944] batman_adv: batadv0: Interface deactivated: team0 [ 266.561563][ T9626] ldm_validate_partition_table(): Disk read failed. [ 266.612162][ T9626] Dev nbd35: unable to read RDB block 0 [ 266.636508][ T9626] nbd35: unable to read partition table [ 266.694137][T16957] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4113'. [ 266.738225][T16960] FAULT_INJECTION: forcing a failure. [ 266.738225][T16960] name failslab, interval 1, probability 0, space 0, times 0 [ 266.750973][T16960] CPU: 0 UID: 0 PID: 16960 Comm: syz.2.4114 Not tainted syzkaller #0 PREEMPT(full) [ 266.750994][T16960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 266.751005][T16960] Call Trace: [ 266.751012][T16960] [ 266.751020][T16960] dump_stack_lvl+0x189/0x250 [ 266.751045][T16960] ? __pfx____ratelimit+0x10/0x10 [ 266.751069][T16960] ? __pfx_dump_stack_lvl+0x10/0x10 [ 266.751088][T16960] ? __pfx__printk+0x10/0x10 [ 266.751109][T16960] ? rcu_is_watching+0x15/0xb0 [ 266.751129][T16960] ? rcu_is_watching+0x15/0xb0 [ 266.751146][T16960] ? lock_release+0x4b/0x3e0 [ 266.751169][T16960] ? is_bpf_text_address+0x292/0x2b0 [ 266.751192][T16960] should_fail_ex+0x414/0x560 [ 266.751216][T16960] should_failslab+0xa8/0x100 [ 266.751241][T16960] __kmalloc_cache_noprof+0x70/0x3d0 [ 266.751264][T16960] ? batadv_bla_get_backbone_gw+0x147/0xed0 [ 266.751284][T16960] ? rcu_is_watching+0x15/0xb0 [ 266.751301][T16960] batadv_bla_get_backbone_gw+0x147/0xed0 [ 266.751322][T16960] ? lock_release+0x4b/0x3e0 [ 266.751343][T16960] ? batadv_primary_if_get_selected+0x7a/0x410 [ 266.751379][T16960] ? batadv_claim_hash_find+0x72e/0x8e0 [ 266.751396][T16960] ? batadv_claim_hash_find+0x298/0x8e0 [ 266.751414][T16960] ? __pfx_batadv_bla_get_backbone_gw+0x10/0x10 [ 266.751433][T16960] ? __pfx_batadv_claim_hash_find+0x10/0x10 [ 266.751448][T16960] ? skb_clone+0x212/0x3a0 [ 266.751463][T16960] ? dev_hard_start_xmit+0x1be/0x830 [ 266.751479][T16960] ? __dev_queue_xmit+0x1b8d/0x3b50 [ 266.751495][T16960] ? __bpf_tx_skb+0x18e/0x260 [ 266.751513][T16960] ? batadv_get_vid+0x183/0x2b0 [ 266.751538][T16960] batadv_bla_tx+0xbdc/0x1390 [ 266.751563][T16960] ? __pfx_batadv_bla_tx+0x10/0x10 [ 266.751580][T16960] ? rcu_is_watching+0x15/0xb0 [ 266.751603][T16960] ? batadv_get_vid+0x183/0x2b0 [ 266.751627][T16960] batadv_interface_tx+0x572/0x14c0 [ 266.751651][T16960] ? rcu_is_watching+0x15/0xb0 [ 266.751672][T16960] ? __pfx_batadv_interface_tx+0x10/0x10 [ 266.751697][T16960] ? dev_queue_xmit_nit+0x2d/0xcc0 [ 266.751718][T16960] dev_hard_start_xmit+0x2d7/0x830 [ 266.751744][T16960] __dev_queue_xmit+0x1b8d/0x3b50 [ 266.751763][T16960] ? do_syscall_64+0xfa/0x3b0 [ 266.751787][T16960] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.751809][T16960] ? __dev_queue_xmit+0x27b/0x3b50 [ 266.751835][T16960] ? __pfx___dev_queue_xmit+0x10/0x10 [ 266.751858][T16960] ? rcu_is_watching+0x15/0xb0 [ 266.751873][T16960] ? skb_release_data+0x2b6/0x7c0 [ 266.751894][T16960] ? pskb_expand_head+0xb00/0x1150 [ 266.751913][T16960] ? __bpf_redirect+0x961/0xe40 [ 266.751938][T16960] __bpf_tx_skb+0x18e/0x260 [ 266.751958][T16960] bpf_clone_redirect+0x272/0x3d0 [ 266.751983][T16960] ? bpf_test_run+0x197/0x7b0 [ 266.752005][T16960] bpf_prog_e97454e6a39c6b06+0x62/0x6b [ 266.752022][T16960] ? ktime_get+0x3e/0x1f0 [ 266.752041][T16960] ? rcu_is_watching+0x15/0xb0 [ 266.752058][T16960] ? ktime_get+0x3e/0x1f0 [ 266.752076][T16960] ? rcu_is_watching+0x15/0xb0 [ 266.752092][T16960] ? ktime_get+0x3e/0x1f0 [ 266.752112][T16960] ? rcu_is_watching+0x15/0xb0 [ 266.752129][T16960] ? ktime_get+0x3e/0x1f0 [ 266.752146][T16960] ? ktime_get+0x3e/0x1f0 [ 266.752163][T16960] ? seqcount_lockdep_reader_access+0x175/0x1c0 [ 266.752184][T16960] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 266.752205][T16960] ? bpf_test_timer_enter+0x1a/0x140 [ 266.752227][T16960] ? rcu_is_watching+0x15/0xb0 [ 266.752245][T16960] ? __local_bh_disable_ip+0xf1/0x190 [ 266.752263][T16960] ? __pfx___cant_migrate+0x10/0x10 [ 266.752280][T16960] ? kasan_save_track+0x4f/0x80 [ 266.752302][T16960] ? read_tsc+0x9/0x20 [ 266.752324][T16960] ? ktime_get+0x1cb/0x1f0 [ 266.752345][T16960] bpf_test_run+0x318/0x7b0 [ 266.752384][T16960] ? __pfx_bpf_test_run+0x10/0x10 [ 266.752417][T16960] ? slab_build_skb+0x273/0x3e0 [ 266.752440][T16960] ? convert___skb_to_skb+0x3d/0x590 [ 266.752465][T16960] bpf_prog_test_run_skb+0xb30/0x1560 [ 266.752495][T16960] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 266.752518][T16960] bpf_prog_test_run+0x2c7/0x340 [ 266.752543][T16960] __sys_bpf+0x581/0x870 [ 266.752565][T16960] ? __pfx___sys_bpf+0x10/0x10 [ 266.752592][T16960] ? ksys_write+0x22a/0x250 [ 266.752612][T16960] ? __pfx_ksys_write+0x10/0x10 [ 266.752633][T16960] ? rcu_is_watching+0x15/0xb0 [ 266.752653][T16960] __x64_sys_bpf+0x7c/0x90 [ 266.752672][T16960] do_syscall_64+0xfa/0x3b0 [ 266.752696][T16960] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.752714][T16960] ? clear_bhb_loop+0x60/0xb0 [ 266.752734][T16960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.752752][T16960] RIP: 0033:0x7f76ba18ebe9 [ 266.752768][T16960] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 266.752784][T16960] RSP: 002b:00007f76bb081038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 266.752805][T16960] RAX: ffffffffffffffda RBX: 00007f76ba3b5fa0 RCX: 00007f76ba18ebe9 [ 266.752819][T16960] RDX: 0000000000000028 RSI: 0000200000000080 RDI: 000000000000000a [ 266.752831][T16960] RBP: 00007f76bb081090 R08: 0000000000000000 R09: 0000000000000000 [ 266.752843][T16960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 266.752855][T16960] R13: 00007f76ba3b6038 R14: 00007f76ba3b5fa0 R15: 00007ffc3be38a28 [ 266.752876][T16960] [ 267.403164][T16962] 8021q: adding VLAN 0 to HW filter on device team0 [ 267.419138][T16962] batman_adv: batadv0: Interface activated: team0 [ 267.486943][T16962] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 267.665368][ T11] block nbd24: Possible stuck request ffff88806115e000: control (read@0,4096B). Runtime 30 seconds [ 267.801658][T17000] FAULT_INJECTION: forcing a failure. [ 267.801658][T17000] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 267.818571][T17000] CPU: 0 UID: 0 PID: 17000 Comm: syz.1.4128 Not tainted syzkaller #0 PREEMPT(full) [ 267.818599][T17000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 267.818610][T17000] Call Trace: [ 267.818616][T17000] [ 267.818624][T17000] dump_stack_lvl+0x189/0x250 [ 267.818649][T17000] ? __pfx____ratelimit+0x10/0x10 [ 267.818673][T17000] ? __pfx_dump_stack_lvl+0x10/0x10 [ 267.818703][T17000] ? __pfx__printk+0x10/0x10 [ 267.818723][T17000] ? __might_fault+0xb0/0x130 [ 267.818746][T17000] ? rcu_is_watching+0x15/0xb0 [ 267.818762][T17000] should_fail_ex+0x414/0x560 [ 267.818787][T17000] _copy_from_iter+0x1db/0x16f0 [ 267.818805][T17000] ? rcu_is_watching+0x15/0xb0 [ 267.818823][T17000] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 267.818846][T17000] ? __pfx__copy_from_iter+0x10/0x10 [ 267.818862][T17000] ? __build_skb_around+0x257/0x3e0 [ 267.818887][T17000] ? netlink_sendmsg+0x642/0xb30 [ 267.818911][T17000] ? skb_put+0x11b/0x210 [ 267.818929][T17000] netlink_sendmsg+0x6b2/0xb30 [ 267.818955][T17000] ? __pfx_netlink_sendmsg+0x10/0x10 [ 267.818979][T17000] ? aa_sock_msg_perm+0xf1/0x1d0 [ 267.818995][T17000] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 267.819013][T17000] ? __pfx_netlink_sendmsg+0x10/0x10 [ 267.819036][T17000] __sock_sendmsg+0x21c/0x270 [ 267.819058][T17000] ____sys_sendmsg+0x505/0x830 [ 267.819077][T17000] ? __pfx_____sys_sendmsg+0x10/0x10 [ 267.819100][T17000] ? import_iovec+0x74/0xa0 [ 267.819121][T17000] ___sys_sendmsg+0x21f/0x2a0 [ 267.819141][T17000] ? __pfx____sys_sendmsg+0x10/0x10 [ 267.819174][T17000] ? __fget_files+0x2a/0x420 [ 267.819208][T17000] ? __fget_files+0x3a0/0x420 [ 267.819233][T17000] __x64_sys_sendmsg+0x19b/0x260 [ 267.819249][T17000] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 267.819267][T17000] ? __pfx_ksys_write+0x10/0x10 [ 267.819287][T17000] ? rcu_is_watching+0x15/0xb0 [ 267.819305][T17000] ? rcu_is_watching+0x15/0xb0 [ 267.819324][T17000] do_syscall_64+0xfa/0x3b0 [ 267.819349][T17000] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.819366][T17000] ? clear_bhb_loop+0x60/0xb0 [ 267.819386][T17000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.819401][T17000] RIP: 0033:0x7fe99238ebe9 [ 267.819419][T17000] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 267.819435][T17000] RSP: 002b:00007fe9905f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 267.819455][T17000] RAX: ffffffffffffffda RBX: 00007fe9925b5fa0 RCX: 00007fe99238ebe9 [ 267.819467][T17000] RDX: 0000000000000004 RSI: 00002000000000c0 RDI: 0000000000000003 [ 267.819478][T17000] RBP: 00007fe9905f6090 R08: 0000000000000000 R09: 0000000000000000 [ 267.819491][T17000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 267.819502][T17000] R13: 00007fe9925b6038 R14: 00007fe9925b5fa0 R15: 00007ffc4916c828 [ 267.819521][T17000] [ 267.833309][T16998] validate_nla: 8 callbacks suppressed [ 267.833337][T16998] netlink: 'syz.3.4127': attribute type 1 has an invalid length. [ 267.909890][T17005] tap0: tun_chr_ioctl cmd 2148553947 [ 267.925659][T17006] FAULT_INJECTION: forcing a failure. [ 267.925659][T17006] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 267.931747][T16998] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 267.961135][T17006] CPU: 1 UID: 0 PID: 17006 Comm: syz.2.4130 Not tainted syzkaller #0 PREEMPT(full) [ 267.961174][T17006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 267.961187][T17006] Call Trace: [ 267.961195][T17006] [ 267.961204][T17006] dump_stack_lvl+0x189/0x250 [ 267.961232][T17006] ? __pfx____ratelimit+0x10/0x10 [ 267.961256][T17006] ? __pfx_dump_stack_lvl+0x10/0x10 [ 267.961276][T17006] ? __pfx__printk+0x10/0x10 [ 267.961298][T17006] ? __might_fault+0xb0/0x130 [ 267.961325][T17006] ? rcu_is_watching+0x15/0xb0 [ 267.961344][T17006] should_fail_ex+0x414/0x560 [ 267.961370][T17006] _copy_from_user+0x2d/0xb0 [ 267.961391][T17006] ___sys_sendmsg+0x158/0x2a0 [ 267.961410][T17006] ? __pfx____sys_sendmsg+0x10/0x10 [ 267.961451][T17006] ? __fget_files+0x2a/0x420 [ 267.961475][T17006] ? __fget_files+0x3a0/0x420 [ 267.961504][T17006] __x64_sys_sendmsg+0x19b/0x260 [ 267.961523][T17006] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 267.961545][T17006] ? __pfx_ksys_write+0x10/0x10 [ 267.961566][T17006] ? rcu_is_watching+0x15/0xb0 [ 267.961585][T17006] ? rcu_is_watching+0x15/0xb0 [ 267.961603][T17006] do_syscall_64+0xfa/0x3b0 [ 267.961628][T17006] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.961644][T17006] ? clear_bhb_loop+0x60/0xb0 [ 267.961663][T17006] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.961680][T17006] RIP: 0033:0x7f76ba18ebe9 [ 267.961698][T17006] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 267.961713][T17006] RSP: 002b:00007f76bb081038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 267.961733][T17006] RAX: ffffffffffffffda RBX: 00007f76ba3b5fa0 RCX: 00007f76ba18ebe9 [ 267.961746][T17006] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000c [ 267.961758][T17006] RBP: 00007f76bb081090 R08: 0000000000000000 R09: 0000000000000000 [ 267.961770][T17006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 267.961781][T17006] R13: 00007f76ba3b6038 R14: 00007f76ba3b5fa0 R15: 00007ffc3be38a28 [ 267.961802][T17006] [ 268.043325][T17011] netlink: 'syz.0.4132': attribute type 13 has an invalid length. [ 268.430717][T17011] 8021q: adding VLAN 0 to HW filter on device team0 [ 268.444032][T17011] batman_adv: batadv0: Interface activated: team0 [ 268.456479][T17011] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 268.734766][T17026] nbd36: detected capacity change from 0 to 127 [ 268.749854][ T5869] block nbd36: Receive control failed (result -32) [ 268.750185][ T9626] block nbd36: Send control failed (result -32) [ 268.780484][ T9626] block nbd36: Request send failed, requeueing [ 268.797478][T17035] __nla_validate_parse: 3 callbacks suppressed [ 268.797504][T17035] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4144'. [ 268.821296][ T55] block nbd36: Dead connection, failed to find a fallback [ 268.828857][ T55] block nbd36: shutting down sockets [ 268.841185][ T9626] ldm_validate_partition_table(): Disk read failed. [ 268.869536][ T9626] Dev nbd36: unable to read RDB block 0 [ 268.884206][ T9626] nbd36: unable to read partition table [ 268.894794][ T9626] ldm_validate_partition_table(): Disk read failed. [ 268.908323][ T9626] Dev nbd36: unable to read RDB block 0 [ 268.917541][ T9626] nbd36: unable to read partition table [ 268.969335][T12128] hid (null): unknown global tag 0xe [ 269.006949][T12128] hid (null): invalid report_size 28719 [ 269.061393][T17056] netlink: 'syz.0.4150': attribute type 13 has an invalid length. [ 269.077782][T17059] FAULT_INJECTION: forcing a failure. [ 269.077782][T17059] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 269.106342][T17059] CPU: 1 UID: 0 PID: 17059 Comm: syz.1.4152 Not tainted syzkaller #0 PREEMPT(full) [ 269.106368][T17059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 269.106379][T17059] Call Trace: [ 269.106385][T17059] [ 269.106392][T17059] dump_stack_lvl+0x189/0x250 [ 269.106416][T17059] ? __pfx____ratelimit+0x10/0x10 [ 269.106437][T17059] ? __pfx_dump_stack_lvl+0x10/0x10 [ 269.106453][T17059] ? __pfx__printk+0x10/0x10 [ 269.106477][T17059] should_fail_ex+0x414/0x560 [ 269.106498][T17059] _copy_to_iter+0x575/0x16f0 [ 269.106516][T17059] ? __pfx__copy_to_iter+0x10/0x10 [ 269.106529][T17059] ? __skb_try_recv_from_queue+0x2b2/0x730 [ 269.106548][T17059] ? __skb_try_recv_datagram+0x3da/0x4e0 [ 269.106565][T17059] __skb_datagram_iter+0xf8/0x990 [ 269.106582][T17059] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 269.106600][T17059] skb_copy_datagram_iter+0xc5/0x230 [ 269.106618][T17059] netlink_recvmsg+0x2ab/0xa30 [ 269.106642][T17059] ? __pfx_netlink_recvmsg+0x10/0x10 [ 269.106662][T17059] ? unwind_next_frame+0xa5/0x2390 [ 269.106678][T17059] ? unwind_next_frame+0xa5/0x2390 [ 269.106693][T17059] ? aa_sock_msg_perm+0xf1/0x1d0 [ 269.106707][T17059] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 269.106723][T17059] ? security_socket_recvmsg+0x7e/0x2e0 [ 269.106739][T17059] ? __pfx_netlink_recvmsg+0x10/0x10 [ 269.106759][T17059] sock_recvmsg_nosec+0x183/0x1c0 [ 269.106778][T17059] ____sys_recvmsg+0x3aa/0x460 [ 269.106796][T17059] ? __pfx_____sys_recvmsg+0x10/0x10 [ 269.106815][T17059] ? import_iovec+0x74/0xa0 [ 269.106830][T17059] ___sys_recvmsg+0x1b5/0x510 [ 269.106847][T17059] ? __pfx____sys_recvmsg+0x10/0x10 [ 269.106864][T17059] ? __fget_files+0x2a/0x420 [ 269.106893][T17059] ? rcu_is_watching+0x15/0xb0 [ 269.106911][T17059] ? lock_release+0x4b/0x3e0 [ 269.106935][T17059] ? __might_fault+0xcc/0x130 [ 269.106955][T17059] do_recvmmsg+0x307/0x770 [ 269.106972][T17059] ? __pfx_do_recvmmsg+0x10/0x10 [ 269.106991][T17059] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 269.107043][T17059] __x64_sys_recvmmsg+0x190/0x240 [ 269.107059][T17059] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 269.107074][T17059] ? rcu_is_watching+0x15/0xb0 [ 269.107089][T17059] ? rcu_is_watching+0x15/0xb0 [ 269.107103][T17059] do_syscall_64+0xfa/0x3b0 [ 269.107123][T17059] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.107136][T17059] ? clear_bhb_loop+0x60/0xb0 [ 269.107152][T17059] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.107166][T17059] RIP: 0033:0x7fe99238ebe9 [ 269.107180][T17059] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 269.107193][T17059] RSP: 002b:00007fe9905f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 269.107210][T17059] RAX: ffffffffffffffda RBX: 00007fe9925b5fa0 RCX: 00007fe99238ebe9 [ 269.107221][T17059] RDX: 0000000000000008 RSI: 0000200000002c00 RDI: 0000000000000003 [ 269.107230][T17059] RBP: 00007fe9905f6090 R08: 0000000000000000 R09: 0000000000000000 [ 269.107240][T17059] R10: 0000000040010020 R11: 0000000000000246 R12: 0000000000000002 [ 269.107249][T17059] R13: 00007fe9925b6038 R14: 00007fe9925b5fa0 R15: 00007ffc4916c828 [ 269.107265][T17059] [ 269.475229][T17056] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 269.760821][T17081] syzkaller1: entered promiscuous mode [ 269.780655][T17081] syzkaller1: entered allmulticast mode [ 269.787634][T17085] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4160'. [ 269.832085][T17085] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4160'. [ 269.915056][T17092] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4162'. [ 270.116376][T17100] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4166'. [ 270.244016][T17107] netlink: 'syz.0.4168': attribute type 1 has an invalid length. [ 270.255425][T17110] netlink: 84 bytes leftover after parsing attributes in process `syz.1.4169'. [ 270.267700][T17110] netlink: 84 bytes leftover after parsing attributes in process `syz.1.4169'. [ 270.321697][T17107] bond2: (slave bridge3): making interface the new active one [ 270.425800][T17107] bond2: (slave bridge3): Enslaving as an active interface with an up link [ 270.638760][T17133] netlink: 'syz.2.4177': attribute type 21 has an invalid length. [ 270.722213][ T6507] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 270.786247][ T6507] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 270.841971][T17136] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4179'. [ 270.867825][ T6507] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 270.899425][ T3850] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 270.930965][T12128] hid-generic 0005:0D45:1012.0002: unknown global tag 0xe [ 270.940400][T12128] hid-generic 0005:0D45:1012.0002: item 0 2 1 14 parsing failed [ 270.948660][T12128] hid-generic 0005:0D45:1012.0002: probe with driver hid-generic failed with error -22 [ 270.964766][T17152] nbd37: detected capacity change from 0 to 127 [ 271.083983][T17165] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4187'. [ 271.099028][T17167] netlink: 'syz.4.4188': attribute type 13 has an invalid length. [ 271.167453][ T5869] block nbd37: Receive control failed (result -104) [ 271.201130][T17167] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 271.563612][T17205] FAULT_INJECTION: forcing a failure. [ 271.563612][T17205] name failslab, interval 1, probability 0, space 0, times 0 [ 271.576308][T17205] CPU: 0 UID: 0 PID: 17205 Comm: syz.3.4201 Not tainted syzkaller #0 PREEMPT(full) [ 271.576331][T17205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 271.576342][T17205] Call Trace: [ 271.576350][T17205] [ 271.576357][T17205] dump_stack_lvl+0x189/0x250 [ 271.576384][T17205] ? __pfx____ratelimit+0x10/0x10 [ 271.576408][T17205] ? __pfx_dump_stack_lvl+0x10/0x10 [ 271.576427][T17205] ? __pfx__printk+0x10/0x10 [ 271.576454][T17205] should_fail_ex+0x414/0x560 [ 271.576478][T17205] should_failslab+0xa8/0x100 [ 271.576502][T17205] __kmalloc_noprof+0xcb/0x4f0 [ 271.576522][T17205] ? hash_netnet4_add+0xe40/0x2770 [ 271.576546][T17205] ? hash_netnet4_add+0x7f/0x2770 [ 271.576567][T17205] hash_netnet4_add+0xe40/0x2770 [ 271.576589][T17205] ? hash_netnet4_add+0x7f/0x2770 [ 271.576622][T17205] hash_netnet4_uadt+0xb0e/0xe40 [ 271.576646][T17205] ? __pfx_hash_netnet4_add+0x10/0x10 [ 271.576668][T17205] ? __pfx_hash_netnet4_uadt+0x10/0x10 [ 271.576689][T17205] ? __nla_validate_parse+0x2400/0x2d40 [ 271.576723][T17205] call_ad+0x178/0xb00 [ 271.576747][T17205] ? __pfx_call_ad+0x10/0x10 [ 271.576778][T17205] ? rcu_is_watching+0x15/0xb0 [ 271.576796][T17205] ? ip_set_pernet+0x23/0x240 [ 271.576819][T17205] ? __nla_parse+0x40/0x60 [ 271.576843][T17205] ip_set_ad+0x791/0x930 [ 271.576868][T17205] ? __pfx_ip_set_ad+0x10/0x10 [ 271.576898][T17205] ? rcu_is_watching+0x15/0xb0 [ 271.576914][T17205] ? lock_release+0x4b/0x3e0 [ 271.576937][T17205] ? __nla_parse+0x40/0x60 [ 271.576962][T17205] nfnetlink_rcv_msg+0xb4d/0x1130 [ 271.576984][T17205] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 271.577012][T17205] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 271.577032][T17205] ? kasan_save_free_info+0x46/0x50 [ 271.577069][T17205] netlink_rcv_skb+0x208/0x470 [ 271.577092][T17205] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 271.577113][T17205] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 271.577139][T17205] ? bpf_lsm_capable+0x9/0x20 [ 271.577161][T17205] ? security_capable+0x7e/0x2e0 [ 271.577187][T17205] nfnetlink_rcv+0x26a/0x2520 [ 271.577209][T17205] ? __dev_queue_xmit+0x1d79/0x3b50 [ 271.577233][T17205] ? __dev_queue_xmit+0x27b/0x3b50 [ 271.577256][T17205] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 271.577276][T17205] ? __pfx___dev_queue_xmit+0x10/0x10 [ 271.577297][T17205] ? ref_tracker_free+0x63a/0x7d0 [ 271.577318][T17205] ? __asan_memcpy+0x40/0x70 [ 271.577335][T17205] ? __pfx_ref_tracker_free+0x10/0x10 [ 271.577355][T17205] ? __skb_clone+0x63/0x7a0 [ 271.577373][T17205] ? __skb_clone+0x483/0x7a0 [ 271.577390][T17205] ? skb_clone+0x246/0x3a0 [ 271.577407][T17205] ? __netlink_deliver_tap+0x807/0x850 [ 271.577428][T17205] ? netlink_deliver_tap+0x2e/0x1b0 [ 271.577449][T17205] ? rcu_is_watching+0x15/0xb0 [ 271.577465][T17205] ? netlink_deliver_tap+0x2e/0x1b0 [ 271.577484][T17205] ? lock_release+0x4b/0x3e0 [ 271.577508][T17205] netlink_unicast+0x82c/0x9e0 [ 271.577528][T17205] ? __pfx_netlink_unicast+0x10/0x10 [ 271.577547][T17205] ? netlink_sendmsg+0x642/0xb30 [ 271.577566][T17205] ? skb_put+0x11b/0x210 [ 271.577580][T17205] netlink_sendmsg+0x805/0xb30 [ 271.577606][T17205] ? __pfx_netlink_sendmsg+0x10/0x10 [ 271.577629][T17205] ? aa_sock_msg_perm+0xf1/0x1d0 [ 271.577646][T17205] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 271.577665][T17205] ? __pfx_netlink_sendmsg+0x10/0x10 [ 271.577688][T17205] __sock_sendmsg+0x21c/0x270 [ 271.577711][T17205] ____sys_sendmsg+0x505/0x830 [ 271.577731][T17205] ? __pfx_____sys_sendmsg+0x10/0x10 [ 271.577750][T17205] ? import_iovec+0x74/0xa0 [ 271.577781][T17205] ___sys_sendmsg+0x21f/0x2a0 [ 271.577799][T17205] ? __pfx____sys_sendmsg+0x10/0x10 [ 271.577828][T17205] ? __fget_files+0x2a/0x420 [ 271.577852][T17205] ? __fget_files+0x3a0/0x420 [ 271.577879][T17205] __x64_sys_sendmsg+0x19b/0x260 [ 271.577898][T17205] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 271.577920][T17205] ? __pfx_ksys_write+0x10/0x10 [ 271.577941][T17205] ? rcu_is_watching+0x15/0xb0 [ 271.577959][T17205] ? rcu_is_watching+0x15/0xb0 [ 271.577977][T17205] do_syscall_64+0xfa/0x3b0 [ 271.578003][T17205] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.578019][T17205] ? clear_bhb_loop+0x60/0xb0 [ 271.578037][T17205] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.578054][T17205] RIP: 0033:0x7f380cf8ebe9 [ 271.578069][T17205] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 271.578084][T17205] RSP: 002b:00007f380de79038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 271.578105][T17205] RAX: ffffffffffffffda RBX: 00007f380d1b5fa0 RCX: 00007f380cf8ebe9 [ 271.578119][T17205] RDX: 0000000000000004 RSI: 00002000000000c0 RDI: 0000000000000003 [ 271.578130][T17205] RBP: 00007f380de79090 R08: 0000000000000000 R09: 0000000000000000 [ 271.578140][T17205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 271.578151][T17205] R13: 00007f380d1b6038 R14: 00007f380d1b5fa0 R15: 00007ffc2e7d66c8 [ 271.578169][T17205] [ 271.590706][T17207] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4203'. [ 271.670730][T17212] netlink: 'syz.3.4206': attribute type 1 has an invalid length. [ 271.893787][T17223] ip6tnl1: entered promiscuous mode [ 272.106599][T17223] ip6tnl1: entered allmulticast mode [ 272.130154][T17220] bond3 (unregistering): Released all slaves [ 272.978861][T17303] netlink: 'syz.3.4241': attribute type 15 has an invalid length. [ 273.926157][T17373] __nla_validate_parse: 9 callbacks suppressed [ 273.926179][T17373] netlink: 156 bytes leftover after parsing attributes in process `syz.2.4271'. [ 274.018999][T17382] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4277'. [ 274.053806][T17384] bond6: entered allmulticast mode [ 274.062174][T17384] 8021q: adding VLAN 0 to HW filter on device bond6 [ 274.072305][T17384] bridge0: port 7(bond6) entered blocking state [ 274.079853][T17384] bridge0: port 7(bond6) entered disabled state [ 274.088372][T17384] bond6: entered promiscuous mode [ 274.093960][T17384] bridge0: port 7(bond6) entered blocking state [ 274.100374][T17384] bridge0: port 7(bond6) entered forwarding state [ 274.181277][ T6507] bridge0: port 7(bond6) entered disabled state [ 274.193671][T17397] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4281'. [ 274.261810][T17403] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4286'. [ 274.475375][T17408] nbd38: detected capacity change from 0 to 127 [ 274.484815][ T5862] block nbd38: Receive control failed (result -32) [ 274.486416][T17413] netlink: 'syz.3.4290': attribute type 13 has an invalid length. [ 274.491492][ T5872] block nbd38: Receive control failed (result -32) [ 274.509398][ T5872] Bluetooth: hci3: link tx timeout [ 274.515093][ T5872] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 274.523861][T17413] 8021q: adding VLAN 0 to HW filter on device team0 [ 274.530852][T17413] batman_adv: batadv0: Interface activated: team0 [ 274.540063][T17413] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 274.599767][T17419] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4292'. [ 275.266113][T17467] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4314'. [ 275.281637][T17469] netlink: 'syz.4.4315': attribute type 10 has an invalid length. [ 275.297150][T17469] batman_adv: batadv0: Adding interface: team0 [ 275.303627][T17469] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.335269][T17469] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 275.352104][T17473] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4316'. [ 275.497759][T17482] netlink: 92 bytes leftover after parsing attributes in process `syz.3.4320'. [ 275.544369][ T5872] Bluetooth: hci3: link tx timeout [ 275.549773][ T5872] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 275.692594][T17501] netlink: 'syz.3.4330': attribute type 10 has an invalid length. [ 275.738874][T17509] netlink: 'syz.0.4328': attribute type 24 has an invalid length. [ 275.753447][T17499] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.788589][T17499] batman_adv: batadv0: Interface deactivated: team0 [ 275.856648][T17499] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 275.868906][T17499] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 275.922837][T17501] batman_adv: batadv0: Interface deactivated: team0 [ 275.943286][ T6510] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 275.967942][ T6510] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.991446][ T6516] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 276.003662][ T5872] Bluetooth: hci3: link tx timeout [ 276.009063][ T5872] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 276.024700][ T6516] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.033884][ T6516] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 276.045711][ T6516] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.056558][ T6516] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 276.065920][ T6516] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.085222][T17512] lo speed is unknown, defaulting to 1000 [ 276.501294][T17553] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4346'. [ 276.569740][T17555] FAULT_INJECTION: forcing a failure. [ 276.569740][T17555] name failslab, interval 1, probability 0, space 0, times 0 [ 276.585736][T17555] CPU: 1 UID: 0 PID: 17555 Comm: syz.3.4345 Not tainted syzkaller #0 PREEMPT(full) [ 276.585765][T17555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 276.585776][T17555] Call Trace: [ 276.585784][T17555] [ 276.585794][T17555] dump_stack_lvl+0x189/0x250 [ 276.585821][T17555] ? __pfx____ratelimit+0x10/0x10 [ 276.585845][T17555] ? __pfx_dump_stack_lvl+0x10/0x10 [ 276.585864][T17555] ? __pfx__printk+0x10/0x10 [ 276.585886][T17555] ? trace_contention_end+0x39/0x120 [ 276.585925][T17555] ? rcu_is_watching+0x15/0xb0 [ 276.585946][T17555] should_fail_ex+0x414/0x560 [ 276.585970][T17555] should_failslab+0xa8/0x100 [ 276.585995][T17555] kmem_cache_alloc_noprof+0x73/0x3c0 [ 276.586017][T17555] ? skb_clone+0x212/0x3a0 [ 276.586038][T17555] skb_clone+0x212/0x3a0 [ 276.586058][T17555] __netlink_deliver_tap+0x404/0x850 [ 276.586087][T17555] ? netlink_deliver_tap+0x2e/0x1b0 [ 276.586111][T17555] netlink_deliver_tap+0x19c/0x1b0 [ 276.586134][T17555] netlink_dump+0x92b/0xe90 [ 276.586161][T17555] ? __pfx_netlink_dump+0x10/0x10 [ 276.586189][T17555] ? kmem_cache_free+0x18f/0x400 [ 276.586242][T17555] netlink_recvmsg+0x676/0xa30 [ 276.586269][T17555] ? __pfx_netlink_recvmsg+0x10/0x10 [ 276.586292][T17555] ? unwind_next_frame+0xa5/0x2390 [ 276.586313][T17555] ? unwind_next_frame+0xa5/0x2390 [ 276.586330][T17555] ? aa_sock_msg_perm+0xf1/0x1d0 [ 276.586348][T17555] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 276.586366][T17555] ? security_socket_recvmsg+0x7e/0x2e0 [ 276.586386][T17555] ? __pfx_netlink_recvmsg+0x10/0x10 [ 276.586410][T17555] sock_recvmsg+0x22c/0x270 [ 276.586433][T17555] ____sys_recvmsg+0x1c9/0x460 [ 276.586455][T17555] ? __pfx_____sys_recvmsg+0x10/0x10 [ 276.586480][T17555] ? import_iovec+0x74/0xa0 [ 276.586500][T17555] ___sys_recvmsg+0x1b5/0x510 [ 276.586521][T17555] ? __pfx____sys_recvmsg+0x10/0x10 [ 276.586541][T17555] ? __fget_files+0x2a/0x420 [ 276.586564][T17555] ? rcu_is_watching+0x15/0xb0 [ 276.586587][T17555] ? __fget_files+0x3a0/0x420 [ 276.586615][T17555] do_recvmmsg+0x307/0x770 [ 276.586638][T17555] ? __pfx_do_recvmmsg+0x10/0x10 [ 276.586664][T17555] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 276.586696][T17555] __x64_sys_recvmmsg+0x190/0x240 [ 276.586716][T17555] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 276.586737][T17555] ? rcu_is_watching+0x15/0xb0 [ 276.586756][T17555] do_syscall_64+0xfa/0x3b0 [ 276.586780][T17555] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.586798][T17555] ? clear_bhb_loop+0x60/0xb0 [ 276.586817][T17555] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.586835][T17555] RIP: 0033:0x7f380cf8ebe9 [ 276.586851][T17555] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 276.586867][T17555] RSP: 002b:00007f380de58038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 276.586886][T17555] RAX: ffffffffffffffda RBX: 00007f380d1b6090 RCX: 00007f380cf8ebe9 [ 276.586900][T17555] RDX: 0000000000000008 RSI: 0000200000002c00 RDI: 0000000000000003 [ 276.586911][T17555] RBP: 00007f380de58090 R08: 0000000000000000 R09: 0000000000000000 [ 276.586922][T17555] R10: 0000000040010020 R11: 0000000000000246 R12: 0000000000000001 [ 276.586933][T17555] R13: 00007f380d1b6128 R14: 00007f380d1b6090 R15: 00007ffc2e7d66c8 [ 276.586954][T17555] [ 276.915382][ T5872] Bluetooth: hci3: command 0x0405 tx timeout [ 277.062745][T17557] netlink: 'syz.4.4346': attribute type 2 has an invalid length. [ 277.230540][T17576] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4354'. [ 277.272937][T17576] tc_dump_action: action bad kind [ 277.328697][T17576] gre2: entered promiscuous mode [ 277.333701][T17576] gre2: entered allmulticast mode [ 277.910051][T17635] FAULT_INJECTION: forcing a failure. [ 277.910051][T17635] name failslab, interval 1, probability 0, space 0, times 0 [ 277.933454][T17635] CPU: 1 UID: 0 PID: 17635 Comm: syz.1.4374 Not tainted syzkaller #0 PREEMPT(full) [ 277.933480][T17635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 277.933491][T17635] Call Trace: [ 277.933499][T17635] [ 277.933507][T17635] dump_stack_lvl+0x189/0x250 [ 277.933533][T17635] ? __pfx____ratelimit+0x10/0x10 [ 277.933555][T17635] ? __pfx_dump_stack_lvl+0x10/0x10 [ 277.933574][T17635] ? __pfx__printk+0x10/0x10 [ 277.933595][T17635] ? fs_reclaim_acquire+0x7d/0x100 [ 277.933618][T17635] ? rcu_is_watching+0x15/0xb0 [ 277.933636][T17635] ? __pfx___might_resched+0x10/0x10 [ 277.933651][T17635] ? lock_acquire+0x5f/0x360 [ 277.933673][T17635] should_fail_ex+0x414/0x560 [ 277.933697][T17635] should_failslab+0xa8/0x100 [ 277.933720][T17635] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 277.933741][T17635] ? __alloc_skb+0x112/0x2d0 [ 277.933766][T17635] __alloc_skb+0x112/0x2d0 [ 277.933791][T17635] netlink_sendmsg+0x5c6/0xb30 [ 277.933820][T17635] ? __pfx_netlink_sendmsg+0x10/0x10 [ 277.933843][T17635] ? aa_sock_msg_perm+0xf1/0x1d0 [ 277.933860][T17635] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 277.933876][T17635] ? __pfx_netlink_sendmsg+0x10/0x10 [ 277.933898][T17635] __sock_sendmsg+0x21c/0x270 [ 277.933922][T17635] sock_sendmsg+0x158/0x230 [ 277.933943][T17635] ? __pfx_sock_sendmsg+0x10/0x10 [ 277.933968][T17635] ? __asan_memset+0x22/0x50 [ 277.933985][T17635] ? iov_iter_bvec+0xb8/0x180 [ 277.934005][T17635] splice_to_socket+0x8ff/0xf10 [ 277.934036][T17635] ? __pfx_splice_to_socket+0x10/0x10 [ 277.934066][T17635] ? get_pid_task+0x20/0x1f0 [ 277.934086][T17635] ? rcu_is_watching+0x15/0xb0 [ 277.934101][T17635] ? get_pid_task+0x20/0x1f0 [ 277.934124][T17635] ? bpf_lsm_file_permission+0x9/0x20 [ 277.934144][T17635] ? security_file_permission+0x75/0x290 [ 277.934167][T17635] ? rw_verify_area+0x255/0x4d0 [ 277.934202][T17635] ? __pfx_splice_to_socket+0x10/0x10 [ 277.934224][T17635] do_splice+0xc79/0x1660 [ 277.934248][T17635] ? __fget_files+0x2a/0x420 [ 277.934273][T17635] ? rcu_is_watching+0x15/0xb0 [ 277.934290][T17635] ? __pfx_vfs_write+0x10/0x10 [ 277.934310][T17635] ? __pfx_do_splice+0x10/0x10 [ 277.934337][T17635] __se_sys_splice+0x2e1/0x460 [ 277.934361][T17635] ? __pfx___se_sys_splice+0x10/0x10 [ 277.934382][T17635] ? rcu_is_watching+0x15/0xb0 [ 277.934403][T17635] ? __x64_sys_splice+0x21/0xf0 [ 277.934424][T17635] do_syscall_64+0xfa/0x3b0 [ 277.934448][T17635] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.934464][T17635] ? clear_bhb_loop+0x60/0xb0 [ 277.934481][T17635] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.934497][T17635] RIP: 0033:0x7fe99238ebe9 [ 277.934513][T17635] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 277.934528][T17635] RSP: 002b:00007fe9905f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 277.934548][T17635] RAX: ffffffffffffffda RBX: 00007fe9925b5fa0 RCX: 00007fe99238ebe9 [ 277.934562][T17635] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 277.934573][T17635] RBP: 00007fe9905f6090 R08: 001100000000f336 R09: 0000000000000000 [ 277.934586][T17635] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 277.934597][T17635] R13: 00007fe9925b6038 R14: 00007fe9925b5fa0 R15: 00007ffc4916c828 [ 277.934617][T17635] [ 278.323121][T17642] FAULT_INJECTION: forcing a failure. [ 278.323121][T17642] name failslab, interval 1, probability 0, space 0, times 0 [ 278.341333][T17644] netlink: 'syz.2.4377': attribute type 13 has an invalid length. [ 278.354766][T17642] CPU: 0 UID: 0 PID: 17642 Comm: syz.0.4376 Not tainted syzkaller #0 PREEMPT(full) [ 278.354792][T17642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 278.354804][T17642] Call Trace: [ 278.354811][T17642] [ 278.354820][T17642] dump_stack_lvl+0x189/0x250 [ 278.354847][T17642] ? __pfx____ratelimit+0x10/0x10 [ 278.354872][T17642] ? __pfx_dump_stack_lvl+0x10/0x10 [ 278.354893][T17642] ? __pfx__printk+0x10/0x10 [ 278.354918][T17642] ? fs_reclaim_acquire+0x7d/0x100 [ 278.354944][T17642] ? rcu_is_watching+0x15/0xb0 [ 278.354962][T17642] ? __pfx___might_resched+0x10/0x10 [ 278.354979][T17642] ? lock_acquire+0x5f/0x360 [ 278.355005][T17642] should_fail_ex+0x414/0x560 [ 278.355030][T17642] should_failslab+0xa8/0x100 [ 278.355056][T17642] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 278.355080][T17642] ? __alloc_skb+0x112/0x2d0 [ 278.355120][T17642] __alloc_skb+0x112/0x2d0 [ 278.355146][T17642] netlink_dump+0x1b7/0xe90 [ 278.355176][T17642] ? __pfx_netlink_dump+0x10/0x10 [ 278.355206][T17642] ? kmem_cache_free+0x18f/0x400 [ 278.355232][T17642] netlink_recvmsg+0x676/0xa30 [ 278.355260][T17642] ? __pfx_netlink_recvmsg+0x10/0x10 [ 278.355285][T17642] ? unwind_next_frame+0xa5/0x2390 [ 278.355307][T17642] ? unwind_next_frame+0xa5/0x2390 [ 278.355324][T17642] ? aa_sock_msg_perm+0xf1/0x1d0 [ 278.355340][T17642] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 278.355358][T17642] ? security_socket_recvmsg+0x7e/0x2e0 [ 278.355377][T17642] ? __pfx_netlink_recvmsg+0x10/0x10 [ 278.355402][T17642] sock_recvmsg_nosec+0x183/0x1c0 [ 278.355427][T17642] ____sys_recvmsg+0x3aa/0x460 [ 278.355450][T17642] ? __pfx_____sys_recvmsg+0x10/0x10 [ 278.355475][T17642] ? import_iovec+0x74/0xa0 [ 278.355493][T17642] ___sys_recvmsg+0x1b5/0x510 [ 278.355511][T17642] ? __pfx____sys_recvmsg+0x10/0x10 [ 278.355530][T17642] ? __fget_files+0x2a/0x420 [ 278.355563][T17642] ? rcu_is_watching+0x15/0xb0 [ 278.355579][T17642] ? lock_release+0x4b/0x3e0 [ 278.355603][T17642] ? __might_fault+0xcc/0x130 [ 278.355626][T17642] do_recvmmsg+0x307/0x770 [ 278.355649][T17642] ? __pfx_do_recvmmsg+0x10/0x10 [ 278.355673][T17642] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 278.355707][T17642] __x64_sys_recvmmsg+0x190/0x240 [ 278.355727][T17642] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 278.355745][T17642] ? rcu_is_watching+0x15/0xb0 [ 278.355762][T17642] ? rcu_is_watching+0x15/0xb0 [ 278.355779][T17642] do_syscall_64+0xfa/0x3b0 [ 278.355803][T17642] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.355821][T17642] ? clear_bhb_loop+0x60/0xb0 [ 278.355841][T17642] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.355858][T17642] RIP: 0033:0x7fb024d8ebe9 [ 278.355876][T17642] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 278.355893][T17642] RSP: 002b:00007fb025c34038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 278.355914][T17642] RAX: ffffffffffffffda RBX: 00007fb024fb5fa0 RCX: 00007fb024d8ebe9 [ 278.355927][T17642] RDX: 0000000000000008 RSI: 0000200000002c00 RDI: 0000000000000003 [ 278.355937][T17642] RBP: 00007fb025c34090 R08: 0000000000000000 R09: 0000000000000000 [ 278.355947][T17642] R10: 0000000040010020 R11: 0000000000000246 R12: 0000000000000001 [ 278.355958][T17642] R13: 00007fb024fb6038 R14: 00007fb024fb5fa0 R15: 00007ffef2c5d8d8 [ 278.355977][T17642] [ 278.690126][T17644] 8021q: adding VLAN 0 to HW filter on device team0 [ 278.702099][T17644] batman_adv: batadv0: Interface activated: team0 [ 278.743689][T17644] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 278.796679][T17652] netlink: 'syz.2.4383': attribute type 13 has an invalid length. [ 278.813691][T17652] veth0_macvtap: left promiscuous mode [ 278.871571][T17652] macvtap0: entered allmulticast mode [ 278.894199][T17652] macvtap0: refused to change device tx_queue_len [ 279.226175][T17697] __nla_validate_parse: 2 callbacks suppressed [ 279.226195][T17697] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4401'. [ 279.242042][T17697] FAULT_INJECTION: forcing a failure. [ 279.242042][T17697] name failslab, interval 1, probability 0, space 0, times 0 [ 279.258938][T17697] CPU: 1 UID: 0 PID: 17697 Comm: syz.2.4401 Not tainted syzkaller #0 PREEMPT(full) [ 279.258977][T17697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 279.258990][T17697] Call Trace: [ 279.258997][T17697] [ 279.259005][T17697] dump_stack_lvl+0x189/0x250 [ 279.259033][T17697] ? __pfx____ratelimit+0x10/0x10 [ 279.259056][T17697] ? __pfx_dump_stack_lvl+0x10/0x10 [ 279.259076][T17697] ? __pfx__printk+0x10/0x10 [ 279.259098][T17697] ? genl_rcv+0x28/0x40 [ 279.259117][T17697] ? ____sys_sendmsg+0x505/0x830 [ 279.259135][T17697] ? __x64_sys_sendmsg+0x19b/0x260 [ 279.259152][T17697] ? do_syscall_64+0xfa/0x3b0 [ 279.259174][T17697] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.259195][T17697] should_fail_ex+0x414/0x560 [ 279.259220][T17697] should_failslab+0xa8/0x100 [ 279.259245][T17697] kmem_cache_alloc_noprof+0x73/0x3c0 [ 279.259267][T17697] ? skb_clone+0x212/0x3a0 [ 279.259287][T17697] skb_clone+0x212/0x3a0 [ 279.259307][T17697] __netlink_deliver_tap+0x404/0x850 [ 279.259336][T17697] ? netlink_deliver_tap+0x2e/0x1b0 [ 279.259360][T17697] netlink_deliver_tap+0x19c/0x1b0 [ 279.259384][T17697] netlink_sendskb+0x68/0x140 [ 279.259405][T17697] netlink_unicast+0x397/0x9e0 [ 279.259425][T17697] ? __asan_memcpy+0x40/0x70 [ 279.259447][T17697] ? __pfx_netlink_unicast+0x10/0x10 [ 279.259472][T17697] netlink_rcv_skb+0x28c/0x470 [ 279.259496][T17697] ? __pfx_genl_rcv_msg+0x10/0x10 [ 279.259515][T17697] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 279.259543][T17697] ? lock_release+0x4b/0x3e0 [ 279.259568][T17697] ? down_read+0x1ad/0x2e0 [ 279.259585][T17697] genl_rcv+0x28/0x40 [ 279.259601][T17697] netlink_unicast+0x82c/0x9e0 [ 279.259623][T17697] ? __pfx_netlink_unicast+0x10/0x10 [ 279.259643][T17697] ? netlink_sendmsg+0x642/0xb30 [ 279.259665][T17697] ? skb_put+0x11b/0x210 [ 279.259680][T17697] netlink_sendmsg+0x805/0xb30 [ 279.259706][T17697] ? __pfx_netlink_sendmsg+0x10/0x10 [ 279.259728][T17697] ? aa_sock_msg_perm+0xf1/0x1d0 [ 279.259744][T17697] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 279.259763][T17697] ? __pfx_netlink_sendmsg+0x10/0x10 [ 279.259784][T17697] __sock_sendmsg+0x21c/0x270 [ 279.259806][T17697] ____sys_sendmsg+0x505/0x830 [ 279.259826][T17697] ? __pfx_____sys_sendmsg+0x10/0x10 [ 279.259847][T17697] ? import_iovec+0x74/0xa0 [ 279.259867][T17697] ___sys_sendmsg+0x21f/0x2a0 [ 279.259885][T17697] ? __pfx____sys_sendmsg+0x10/0x10 [ 279.259915][T17697] ? __fget_files+0x2a/0x420 [ 279.259939][T17697] ? __fget_files+0x3a0/0x420 [ 279.259975][T17697] __x64_sys_sendmsg+0x19b/0x260 [ 279.259993][T17697] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 279.260016][T17697] ? __pfx_ksys_write+0x10/0x10 [ 279.260037][T17697] ? rcu_is_watching+0x15/0xb0 [ 279.260056][T17697] ? rcu_is_watching+0x15/0xb0 [ 279.260074][T17697] do_syscall_64+0xfa/0x3b0 [ 279.260100][T17697] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.260118][T17697] ? clear_bhb_loop+0x60/0xb0 [ 279.260137][T17697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.260155][T17697] RIP: 0033:0x7f76ba18ebe9 [ 279.260172][T17697] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 279.260188][T17697] RSP: 002b:00007f76bb081038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 279.260208][T17697] RAX: ffffffffffffffda RBX: 00007f76ba3b5fa0 RCX: 00007f76ba18ebe9 [ 279.260222][T17697] RDX: 0000000000040000 RSI: 00002000000002c0 RDI: 0000000000000004 [ 279.260234][T17697] RBP: 00007f76bb081090 R08: 0000000000000000 R09: 0000000000000000 [ 279.260245][T17697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 279.260257][T17697] R13: 00007f76ba3b6038 R14: 00007f76ba3b5fa0 R15: 00007ffc3be38a28 [ 279.260277][T17697] [ 279.669524][T17699] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 279.786137][T17714] netlink: 84 bytes leftover after parsing attributes in process `syz.4.4407'. [ 279.814524][T17714] netlink: 84 bytes leftover after parsing attributes in process `syz.4.4407'. [ 279.938111][T17726] netlink: 'syz.0.4409': attribute type 13 has an invalid length. [ 280.073663][T17726] 8021q: adding VLAN 0 to HW filter on device bond0 [ 280.086984][T17726] 8021q: adding VLAN 0 to HW filter on device team0 [ 280.094123][T17726] batman_adv: batadv0: Interface activated: team0 [ 280.109818][T17726] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 280.121805][T17742] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4416'. [ 280.173680][T17738] bond2 (unregistering): Released all slaves [ 280.624785][T17768] nbd39: detected capacity change from 0 to 127 [ 280.633677][ T5872] block nbd39: Receive control failed (result -32) [ 280.633677][ T5869] block nbd39: Receive control failed (result -32) [ 280.725732][T17791] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.850721][T17801] bond3 (unregistering): Released all slaves [ 280.870339][T17793] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4434'. [ 281.057859][T17822] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.4443'. [ 281.070034][T17822] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4443'. [ 281.255995][T17838] FAULT_INJECTION: forcing a failure. [ 281.255995][T17838] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 281.315148][T17838] CPU: 0 UID: 0 PID: 17838 Comm: syz.2.4449 Not tainted syzkaller #0 PREEMPT(full) [ 281.315178][T17838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 281.315190][T17838] Call Trace: [ 281.315199][T17838] [ 281.315208][T17838] dump_stack_lvl+0x189/0x250 [ 281.315235][T17838] ? __pfx____ratelimit+0x10/0x10 [ 281.315261][T17838] ? __pfx_dump_stack_lvl+0x10/0x10 [ 281.315280][T17838] ? __pfx__printk+0x10/0x10 [ 281.315303][T17838] ? __might_fault+0xb0/0x130 [ 281.315330][T17838] ? rcu_is_watching+0x15/0xb0 [ 281.315350][T17838] should_fail_ex+0x414/0x560 [ 281.315376][T17838] _copy_from_user+0x2d/0xb0 [ 281.315396][T17838] __sys_bpf+0x1ed/0x870 [ 281.315420][T17838] ? __pfx___sys_bpf+0x10/0x10 [ 281.315446][T17838] ? ksys_write+0x22a/0x250 [ 281.315470][T17838] ? __pfx_ksys_write+0x10/0x10 [ 281.315494][T17838] __x64_sys_bpf+0x7c/0x90 [ 281.315514][T17838] do_syscall_64+0xfa/0x3b0 [ 281.315539][T17838] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.315557][T17838] ? clear_bhb_loop+0x60/0xb0 [ 281.315577][T17838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.315595][T17838] RIP: 0033:0x7f76ba18ebe9 [ 281.315611][T17838] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 281.315627][T17838] RSP: 002b:00007f76bb081038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 281.315648][T17838] RAX: ffffffffffffffda RBX: 00007f76ba3b5fa0 RCX: 00007f76ba18ebe9 [ 281.315662][T17838] RDX: 0000000000000050 RSI: 0000200000000840 RDI: 0000000000000000 [ 281.315674][T17838] RBP: 00007f76bb081090 R08: 0000000000000000 R09: 0000000000000000 [ 281.315686][T17838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 281.315697][T17838] R13: 00007f76ba3b6038 R14: 00007f76ba3b5fa0 R15: 00007ffc3be38a28 [ 281.315718][T17838] [ 281.739613][T17866] FAULT_INJECTION: forcing a failure. [ 281.739613][T17866] name failslab, interval 1, probability 0, space 0, times 0 [ 281.770729][ T55] block nbd1: Possible stuck request ffff88802583e000: control (read@0,1024B). Runtime 150 seconds [ 281.781977][ T55] block nbd1: Possible stuck request ffff88802583e1c0: control (read@1024,1024B). Runtime 150 seconds [ 281.794777][T17866] CPU: 0 UID: 0 PID: 17866 Comm: syz.3.4457 Not tainted syzkaller #0 PREEMPT(full) [ 281.794804][T17866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 281.794815][T17866] Call Trace: [ 281.794822][T17866] [ 281.794830][T17866] dump_stack_lvl+0x189/0x250 [ 281.794857][T17866] ? __pfx____ratelimit+0x10/0x10 [ 281.794881][T17866] ? __pfx_dump_stack_lvl+0x10/0x10 [ 281.794900][T17866] ? __pfx__printk+0x10/0x10 [ 281.794921][T17866] ? trace_contention_end+0x39/0x120 [ 281.794940][T17866] ? rcu_is_watching+0x15/0xb0 [ 281.794960][T17866] should_fail_ex+0x414/0x560 [ 281.794984][T17866] should_failslab+0xa8/0x100 [ 281.795008][T17866] kmem_cache_alloc_noprof+0x73/0x3c0 [ 281.795030][T17866] ? skb_clone+0x212/0x3a0 [ 281.795051][T17866] skb_clone+0x212/0x3a0 [ 281.795070][T17866] __netlink_deliver_tap+0x404/0x850 [ 281.795099][T17866] ? netlink_deliver_tap+0x2e/0x1b0 [ 281.795123][T17866] netlink_deliver_tap+0x19c/0x1b0 [ 281.795147][T17866] netlink_dump+0x92b/0xe90 [ 281.795174][T17866] ? __pfx_netlink_dump+0x10/0x10 [ 281.795203][T17866] ? kmem_cache_free+0x18f/0x400 [ 281.795225][T17866] netlink_recvmsg+0x676/0xa30 [ 281.795253][T17866] ? __pfx_netlink_recvmsg+0x10/0x10 [ 281.795276][T17866] ? unwind_next_frame+0xa5/0x2390 [ 281.795297][T17866] ? unwind_next_frame+0xa5/0x2390 [ 281.795315][T17866] ? aa_sock_msg_perm+0xf1/0x1d0 [ 281.795333][T17866] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 281.795352][T17866] ? security_socket_recvmsg+0x7e/0x2e0 [ 281.795372][T17866] ? __pfx_netlink_recvmsg+0x10/0x10 [ 281.795396][T17866] sock_recvmsg_nosec+0x183/0x1c0 [ 281.795421][T17866] ____sys_recvmsg+0x3aa/0x460 [ 281.795443][T17866] ? __pfx_____sys_recvmsg+0x10/0x10 [ 281.795468][T17866] ? import_iovec+0x74/0xa0 [ 281.795489][T17866] ___sys_recvmsg+0x1b5/0x510 [ 281.795510][T17866] ? __pfx____sys_recvmsg+0x10/0x10 [ 281.795530][T17866] ? __fget_files+0x2a/0x420 [ 281.795561][T17866] ? rcu_is_watching+0x15/0xb0 [ 281.795579][T17866] ? lock_release+0x4b/0x3e0 [ 281.795602][T17866] ? __might_fault+0xcc/0x130 [ 281.795625][T17866] do_recvmmsg+0x307/0x770 [ 281.795647][T17866] ? __pfx_do_recvmmsg+0x10/0x10 [ 281.795671][T17866] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 281.795711][T17866] __x64_sys_recvmmsg+0x190/0x240 [ 281.795732][T17866] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 281.795750][T17866] ? rcu_is_watching+0x15/0xb0 [ 281.795769][T17866] ? rcu_is_watching+0x15/0xb0 [ 281.795787][T17866] do_syscall_64+0xfa/0x3b0 [ 281.795812][T17866] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.795830][T17866] ? clear_bhb_loop+0x60/0xb0 [ 281.795850][T17866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.795867][T17866] RIP: 0033:0x7f380cf8ebe9 [ 281.795884][T17866] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 281.795901][T17866] RSP: 002b:00007f380de79038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 281.795921][T17866] RAX: ffffffffffffffda RBX: 00007f380d1b5fa0 RCX: 00007f380cf8ebe9 [ 281.795935][T17866] RDX: 0000000000000008 RSI: 0000200000002c00 RDI: 0000000000000003 [ 281.795946][T17866] RBP: 00007f380de79090 R08: 0000000000000000 R09: 0000000000000000 [ 281.795958][T17866] R10: 0000000040010020 R11: 0000000000000246 R12: 0000000000000001 [ 281.795970][T17866] R13: 00007f380d1b6038 R14: 00007f380d1b5fa0 R15: 00007ffc2e7d66c8 [ 281.795990][T17866] [ 282.238853][T17882] netlink: 'syz.4.4463': attribute type 10 has an invalid length. [ 282.385191][ T11] block nbd25: Connection timed out, retrying (0/2 alive) [ 282.392462][ T11] block nbd25: Connection timed out, retrying (0/2 alive) [ 282.400287][ T11] block nbd25: Connection timed out, retrying (0/2 alive) [ 282.407527][ T11] block nbd25: Connection timed out, retrying (0/2 alive) [ 282.414810][ T11] block nbd25: Dead connection, failed to find a fallback [ 282.421951][ T11] block nbd25: shutting down sockets [ 282.427933][ T11] blk_print_req_error: 286 callbacks suppressed [ 282.427953][ T11] I/O error, dev nbd25, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 282.443425][ T11] buffer_io_error: 286 callbacks suppressed [ 282.443442][ T11] Buffer I/O error on dev nbd25, logical block 3, async page read [ 282.457422][ T11] I/O error, dev nbd25, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 282.466720][ T11] Buffer I/O error on dev nbd25, logical block 2, async page read [ 282.474746][ T11] I/O error, dev nbd25, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 282.483888][ T11] Buffer I/O error on dev nbd25, logical block 1, async page read [ 282.491913][ T11] I/O error, dev nbd25, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 282.501618][ T11] Buffer I/O error on dev nbd25, logical block 0, async page read [ 282.510916][ T7735] I/O error, dev nbd25, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 282.522796][ T7735] Buffer I/O error on dev nbd25, logical block 0, async page read [ 282.534706][ T7735] I/O error, dev nbd25, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 282.543978][ T7735] Buffer I/O error on dev nbd25, logical block 1, async page read [ 282.552075][ T7735] I/O error, dev nbd25, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 282.561342][ T7735] Buffer I/O error on dev nbd25, logical block 2, async page read [ 282.569457][ T7735] I/O error, dev nbd25, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 282.578719][ T7735] Buffer I/O error on dev nbd25, logical block 3, async page read [ 282.587730][ T7735] I/O error, dev nbd25, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 282.597112][ T7735] Buffer I/O error on dev nbd25, logical block 0, async page read [ 282.605879][ T7735] I/O error, dev nbd25, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 282.615095][ T7735] Buffer I/O error on dev nbd25, logical block 1, async page read [ 282.624702][ T7735] ldm_validate_partition_table(): Disk read failed. [ 282.632564][ T7735] Dev nbd25: unable to read RDB block 0 [ 282.639545][ T7735] nbd25: unable to read partition table [ 282.651125][ T7735] ldm_validate_partition_table(): Disk read failed. [ 282.659463][ T7735] Dev nbd25: unable to read RDB block 0 [ 282.673939][ T7735] nbd25: unable to read partition table [ 282.932664][T17907] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4474'. [ 282.965265][T17902] nbd40: detected capacity change from 0 to 127 [ 282.986204][ T5872] block nbd40: Receive control failed (result -32) [ 282.986204][ T5869] block nbd40: Receive control failed (result -32) [ 282.993205][T17910] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4473'. [ 283.028013][T17913] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4476'. [ 283.092778][T17917] netlink: 'syz.3.4478': attribute type 13 has an invalid length. [ 283.112050][T17917] 8021q: adding VLAN 0 to HW filter on device team0 [ 283.134779][T17917] batman_adv: batadv0: Interface activated: team0 [ 283.143252][T17917] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 283.191085][T17915] bond3: (slave vcan1): The slave device specified does not support setting the MAC address [ 283.203397][T17915] bond3: (slave vcan1): Error -95 calling set_mac_address [ 283.290319][T17915] bond3: (slave vcan1): The slave device specified does not support setting the MAC address [ 283.305328][T17915] bond3: (slave vcan1): Error -95 calling set_mac_address [ 283.307008][ T7735] block nbd38: Dead connection, failed to find a fallback [ 283.336815][ T7735] block nbd38: shutting down sockets [ 283.352271][ T7735] ldm_validate_partition_table(): Disk read failed. [ 283.366252][ T7735] Dev nbd38: unable to read RDB block 0 [ 283.379994][T17915] bond3: (slave vcan1): The slave device specified does not support setting the MAC address [ 283.402101][ T7735] nbd38: unable to read partition table [ 283.409499][T17915] bond3: (slave vcan1): Error -95 calling set_mac_address [ 283.433587][ T7735] ldm_validate_partition_table(): Disk read failed. [ 283.448568][ T7735] Dev nbd38: unable to read RDB block 0 [ 283.461112][ T7735] nbd38: unable to read partition table [ 283.482323][ T7735] ldm_validate_partition_table(): Disk read failed. [ 283.491383][ T7735] Dev nbd38: unable to read RDB block 0 [ 283.493475][T17915] bond3: (slave vcan1): The slave device specified does not support setting the MAC address [ 283.499461][ T7735] nbd38: unable to read partition table [ 283.539420][ T7735] ldm_validate_partition_table(): Disk read failed. [ 283.549854][ T7735] Dev nbd38: unable to read RDB block 0 [ 283.557771][ T7735] nbd38: unable to read partition table [ 283.564251][T17915] bond3: (slave vcan1): Error -95 calling set_mac_address [ 283.609557][T17944] netlink: 'syz.4.4487': attribute type 10 has an invalid length. [ 283.626040][ T7735] ldm_validate_partition_table(): Disk read failed. [ 283.656108][ T7735] Dev nbd38: unable to read RDB block 0 [ 283.665606][ T55] block nbd26: Possible stuck request ffff88806a9fe000: control (read@0,1024B). Runtime 30 seconds [ 283.679486][ T55] block nbd26: Possible stuck request ffff88806a9fe1c0: control (read@1024,1024B). Runtime 30 seconds [ 283.690752][ T55] block nbd26: Possible stuck request ffff88806a9fe380: control (read@2048,1024B). Runtime 30 seconds [ 283.701956][ T55] block nbd26: Possible stuck request ffff88806a9fe540: control (read@3072,1024B). Runtime 30 seconds [ 283.725258][ T7735] nbd38: unable to read partition table [ 283.740783][ T7735] ldm_validate_partition_table(): Disk read failed. [ 283.746294][T17915] bond3: (slave vcan1): The slave device specified does not support setting the MAC address [ 283.749298][ T7735] Dev nbd38: unable to read RDB block 0 [ 283.766597][ T7735] nbd38: unable to read partition table [ 283.809700][T17915] bond3: (slave vcan1): Error -95 calling set_mac_address [ 284.306257][ T11] block nbd27: Possible stuck request ffff888053995080: control (read@0,1024B). Runtime 30 seconds [ 284.317315][ T11] block nbd27: Possible stuck request ffff888053995240: control (read@1024,1024B). Runtime 30 seconds [ 284.328668][ T11] block nbd27: Possible stuck request ffff888053995400: control (read@2048,1024B). Runtime 30 seconds [ 284.339927][ T11] block nbd27: Possible stuck request ffff8880539955c0: control (read@3072,1024B). Runtime 30 seconds [ 284.363063][ T7735] block nbd39: Dead connection, failed to find a fallback [ 284.379128][ T7735] block nbd39: shutting down sockets [ 284.399299][ T7735] ldm_validate_partition_table(): Disk read failed. [ 284.410421][ T7735] Dev nbd39: unable to read RDB block 0 [ 284.419998][ T7735] nbd39: unable to read partition table [ 284.430654][ T7735] ldm_validate_partition_table(): Disk read failed. [ 284.441242][ T7735] Dev nbd39: unable to read RDB block 0 [ 284.449178][ T7735] nbd39: unable to read partition table [ 284.470558][ T7735] ldm_validate_partition_table(): Disk read failed. [ 284.486355][ T7735] Dev nbd39: unable to read RDB block 0 [ 284.493351][ T7735] nbd39: unable to read partition table [ 284.516935][ T7735] ldm_validate_partition_table(): Disk read failed. [ 284.526766][ T7735] Dev nbd39: unable to read RDB block 0 [ 284.534068][ T7735] nbd39: unable to read partition table [ 284.563263][ T7735] ldm_validate_partition_table(): Disk read failed. [ 284.580579][T17990] openvswitch: netlink: VXLAN extension message has 11 unknown bytes. [ 284.590669][ T7735] Dev nbd39: unable to read RDB block 0 [ 284.600081][ T7735] nbd39: unable to read partition table [ 284.607709][T17990] __nla_validate_parse: 3 callbacks suppressed [ 284.607727][T17990] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4507'. [ 284.628426][ T7735] ldm_validate_partition_table(): Disk read failed. [ 284.636421][ T7735] Dev nbd39: unable to read RDB block 0 [ 284.643259][ T7735] nbd39: unable to read partition table [ 284.645318][T17995] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4509'. [ 284.736880][T17999] FAULT_INJECTION: forcing a failure. [ 284.736880][T17999] name failslab, interval 1, probability 0, space 0, times 0 [ 284.761315][T17999] CPU: 1 UID: 0 PID: 17999 Comm: syz.0.4511 Not tainted syzkaller #0 PREEMPT(full) [ 284.761351][T17999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 284.761364][T17999] Call Trace: [ 284.761372][T17999] [ 284.761380][T17999] dump_stack_lvl+0x189/0x250 [ 284.761406][T17999] ? __pfx____ratelimit+0x10/0x10 [ 284.761430][T17999] ? __pfx_dump_stack_lvl+0x10/0x10 [ 284.761449][T17999] ? __pfx__printk+0x10/0x10 [ 284.761473][T17999] ? fs_reclaim_acquire+0x7d/0x100 [ 284.761499][T17999] ? rcu_is_watching+0x15/0xb0 [ 284.761517][T17999] ? __pfx___might_resched+0x10/0x10 [ 284.761534][T17999] ? lock_acquire+0x5f/0x360 [ 284.761559][T17999] should_fail_ex+0x414/0x560 [ 284.761584][T17999] should_failslab+0xa8/0x100 [ 284.761609][T17999] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 284.761632][T17999] ? __alloc_skb+0x112/0x2d0 [ 284.761658][T17999] __alloc_skb+0x112/0x2d0 [ 284.761684][T17999] netlink_dump+0x1b7/0xe90 [ 284.761713][T17999] ? __pfx_netlink_dump+0x10/0x10 [ 284.761744][T17999] ? kmem_cache_free+0x18f/0x400 [ 284.761768][T17999] netlink_recvmsg+0x676/0xa30 [ 284.761796][T17999] ? __pfx_netlink_recvmsg+0x10/0x10 [ 284.761820][T17999] ? unwind_next_frame+0xa5/0x2390 [ 284.761842][T17999] ? unwind_next_frame+0xa5/0x2390 [ 284.761860][T17999] ? aa_sock_msg_perm+0xf1/0x1d0 [ 284.761878][T17999] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 284.761897][T17999] ? security_socket_recvmsg+0x7e/0x2e0 [ 284.761917][T17999] ? __pfx_netlink_recvmsg+0x10/0x10 [ 284.761942][T17999] sock_recvmsg_nosec+0x183/0x1c0 [ 284.761967][T17999] ____sys_recvmsg+0x3aa/0x460 [ 284.761990][T17999] ? __pfx_____sys_recvmsg+0x10/0x10 [ 284.762015][T17999] ? import_iovec+0x74/0xa0 [ 284.762036][T17999] ___sys_recvmsg+0x1b5/0x510 [ 284.762056][T17999] ? __pfx____sys_recvmsg+0x10/0x10 [ 284.762077][T17999] ? __fget_files+0x2a/0x420 [ 284.762108][T17999] ? rcu_is_watching+0x15/0xb0 [ 284.762125][T17999] ? lock_release+0x4b/0x3e0 [ 284.762148][T17999] ? __might_fault+0xcc/0x130 [ 284.762172][T17999] do_recvmmsg+0x307/0x770 [ 284.762194][T17999] ? __pfx_do_recvmmsg+0x10/0x10 [ 284.762218][T17999] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 284.762251][T17999] __x64_sys_recvmmsg+0x190/0x240 [ 284.762271][T17999] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 284.762293][T17999] ? rcu_is_watching+0x15/0xb0 [ 284.762312][T17999] ? rcu_is_watching+0x15/0xb0 [ 284.762330][T17999] do_syscall_64+0xfa/0x3b0 [ 284.762366][T17999] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.762385][T17999] ? clear_bhb_loop+0x60/0xb0 [ 284.762404][T17999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.762423][T17999] RIP: 0033:0x7fb024d8ebe9 [ 284.762439][T17999] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 284.762455][T17999] RSP: 002b:00007fb025c34038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 284.762481][T17999] RAX: ffffffffffffffda RBX: 00007fb024fb5fa0 RCX: 00007fb024d8ebe9 [ 284.762496][T17999] RDX: 0000000000000008 RSI: 0000200000002c00 RDI: 0000000000000003 [ 284.762508][T17999] RBP: 00007fb025c34090 R08: 0000000000000000 R09: 0000000000000000 [ 284.762519][T17999] R10: 0000000040010020 R11: 0000000000000246 R12: 0000000000000002 [ 284.762531][T17999] R13: 00007fb024fb6038 R14: 00007fb024fb5fa0 R15: 00007ffef2c5d8d8 [ 284.762552][T17999] [ 284.933087][ T7735] block nbd40: Dead connection, failed to find a fallback [ 285.180370][ T7735] block nbd40: shutting down sockets [ 285.192206][ T7735] ldm_validate_partition_table(): Disk read failed. [ 285.200911][ T7735] Dev nbd40: unable to read RDB block 0 [ 285.208150][ T7735] nbd40: unable to read partition table [ 285.225682][T18017] netlink: 'syz.4.4517': attribute type 10 has an invalid length. [ 285.238637][ T7735] ldm_validate_partition_table(): Disk read failed. [ 285.252009][ T7735] Dev nbd40: unable to read RDB block 0 [ 285.267579][ T7735] nbd40: unable to read partition table [ 285.289059][T18019] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4519'. [ 285.310154][ T7735] ldm_validate_partition_table(): Disk read failed. [ 285.330817][ T7735] Dev nbd40: unable to read RDB block 0 [ 285.357607][ T7735] nbd40: unable to read partition table [ 285.379430][T18026] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4523'. [ 285.381890][ T7735] ldm_validate_partition_table(): Disk read failed. [ 285.416114][ T7735] Dev nbd40: unable to read RDB block 0 [ 285.423162][ T7735] nbd40: unable to read partition table [ 285.428143][T18026] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4523'. [ 285.470066][ T7735] ldm_validate_partition_table(): Disk read failed. [ 285.507345][ T7735] Dev nbd40: unable to read RDB block 0 [ 285.523770][T18035] netlink: 'syz.1.4526': attribute type 1 has an invalid length. [ 285.524075][ T7735] nbd40: unable to read partition table [ 285.541320][T18032] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4524'. [ 285.558898][ T7735] ldm_validate_partition_table(): Disk read failed. [ 285.567697][ T7735] Dev nbd40: unable to read RDB block 0 [ 285.576591][ T7735] nbd40: unable to read partition table [ 285.633441][T18036] bond7 (unregistering): Released all slaves [ 285.659755][T18035] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 285.665741][T18048] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 285.774870][T18038] nbd41: detected capacity change from 0 to 127 [ 285.786610][ T5869] block nbd41: Receive control failed (result -32) [ 285.793341][ T5872] block nbd41: Receive control failed (result -32) [ 285.811887][ T7735] block nbd41: Dead connection, failed to find a fallback [ 285.825336][T18052] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4530'. [ 285.861821][ T7735] block nbd41: shutting down sockets [ 285.872042][T18055] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4530'. [ 285.888753][ T7735] ldm_validate_partition_table(): Disk read failed. [ 285.898908][T18059] netlink: 'syz.0.4533': attribute type 10 has an invalid length. [ 285.906456][ T7735] Dev nbd41: unable to read RDB block 0 [ 285.916186][T18059] batman_adv: batadv0: Interface deactivated: team0 [ 285.927693][ T7735] nbd41: unable to read partition table [ 285.949024][ T7735] ldm_validate_partition_table(): Disk read failed. [ 285.954698][T18061] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4534'. [ 285.957183][ T7735] Dev nbd41: unable to read RDB block 0 [ 285.971725][ T7735] nbd41: unable to read partition table [ 285.983826][T18070] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4534'. [ 286.514552][T18103] nbd42: detected capacity change from 0 to 127 [ 286.526508][ T5869] block nbd42: Receive control failed (result -32) [ 286.533211][ T5872] block nbd42: Receive control failed (result -32) [ 286.545622][ T7735] block nbd42: Dead connection, failed to find a fallback [ 286.552915][ T7735] block nbd42: shutting down sockets [ 286.560865][ T7735] ldm_validate_partition_table(): Disk read failed. [ 286.569271][ T7735] Dev nbd42: unable to read RDB block 0 [ 286.576449][ T7735] nbd42: unable to read partition table [ 286.588445][ T7735] ldm_validate_partition_table(): Disk read failed. [ 286.627652][T18116] bond3 (unregistering): Released all slaves [ 286.630160][ T7735] Dev nbd42: unable to read RDB block 0 [ 286.692159][ T7735] nbd42: unable to read partition table [ 286.924299][T18136] IPv6: sit1: Disabled Multicast RS [ 286.930643][T18136] sit1: entered allmulticast mode [ 287.210843][T18161] bond4 (unregistering): Released all slaves [ 287.512031][ T55] block nbd29: Connection timed out, retrying (0/2 alive) [ 287.520362][ T55] block nbd29: Connection timed out, retrying (0/2 alive) [ 287.527966][T14761] block nbd29: Dead connection, failed to find a fallback [ 287.535734][T14761] block nbd29: shutting down sockets [ 287.541265][T14761] blk_print_req_error: 1766 callbacks suppressed [ 287.541281][T14761] I/O error, dev nbd29, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 287.557668][ T55] block nbd29: Connection timed out, retrying (0/2 alive) [ 287.565828][ T55] block nbd29: Connection timed out, retrying (0/2 alive) [ 287.573258][T14761] buffer_io_error: 1766 callbacks suppressed [ 287.573276][T14761] Buffer I/O error on dev nbd29, logical block 0, async page read [ 287.587703][T14761] I/O error, dev nbd29, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 287.597960][T14761] Buffer I/O error on dev nbd29, logical block 3, async page read [ 287.606424][T14761] I/O error, dev nbd29, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 287.616021][T14761] Buffer I/O error on dev nbd29, logical block 2, async page read [ 287.625397][T14761] I/O error, dev nbd29, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 287.634822][T14761] Buffer I/O error on dev nbd29, logical block 1, async page read [ 287.642968][T10000] I/O error, dev nbd29, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 287.652442][T10000] Buffer I/O error on dev nbd29, logical block 0, async page read [ 287.661092][T10000] I/O error, dev nbd29, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 287.674562][T10000] Buffer I/O error on dev nbd29, logical block 1, async page read [ 287.683119][T10000] I/O error, dev nbd29, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 287.692967][T10000] Buffer I/O error on dev nbd29, logical block 2, async page read [ 287.701270][T10000] I/O error, dev nbd29, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 287.714117][T10000] Buffer I/O error on dev nbd29, logical block 3, async page read [ 287.720539][T18186] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 287.723728][T10000] I/O error, dev nbd29, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 287.747503][T10000] Buffer I/O error on dev nbd29, logical block 0, async page read [ 287.755807][T10000] I/O error, dev nbd29, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 287.768245][T10000] Buffer I/O error on dev nbd29, logical block 1, async page read [ 287.778375][T10000] ldm_validate_partition_table(): Disk read failed. [ 287.786302][T10000] Dev nbd29: unable to read RDB block 0 [ 287.793164][T10000] nbd29: unable to read partition table [ 287.803614][T10000] ldm_validate_partition_table(): Disk read failed. [ 287.812070][T10000] Dev nbd29: unable to read RDB block 0 [ 287.819058][T10000] nbd29: unable to read partition table [ 288.016933][T18199] A link change request failed with some changes committed already. Interface team_slave_1 may have been left with an inconsistent configuration, please check. [ 288.042860][T18204] FAULT_INJECTION: forcing a failure. [ 288.042860][T18204] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 288.092553][T18204] CPU: 0 UID: 0 PID: 18204 Comm: syz.1.4596 Not tainted syzkaller #0 PREEMPT(full) [ 288.092579][T18204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 288.092590][T18204] Call Trace: [ 288.092598][T18204] [ 288.092606][T18204] dump_stack_lvl+0x189/0x250 [ 288.092632][T18204] ? __pfx____ratelimit+0x10/0x10 [ 288.092656][T18204] ? __pfx_dump_stack_lvl+0x10/0x10 [ 288.092675][T18204] ? __pfx__printk+0x10/0x10 [ 288.092698][T18204] ? lock_acquire+0x5f/0x360 [ 288.092725][T18204] should_fail_ex+0x414/0x560 [ 288.092750][T18204] prepare_alloc_pages+0x213/0x610 [ 288.092770][T18204] __alloc_frozen_pages_noprof+0x123/0x370 [ 288.092790][T18204] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 288.092810][T18204] ? kasan_save_track+0x4f/0x80 [ 288.092835][T18204] alloc_pages_bulk_noprof+0x560/0x710 [ 288.092856][T18204] ? alloc_pages_noprof+0xbe/0x190 [ 288.092882][T18204] kasan_populate_vmalloc+0xba/0x1a0 [ 288.092904][T18204] alloc_vmap_area+0xd51/0x1490 [ 288.092930][T18204] ? __pfx_alloc_vmap_area+0x10/0x10 [ 288.092951][T18204] ? __kasan_kmalloc+0x93/0xb0 [ 288.092972][T18204] ? __kmalloc_cache_node_noprof+0x234/0x3d0 [ 288.092996][T18204] ? __get_vm_area_node+0x13f/0x300 [ 288.093029][T18204] ? prealloc_init+0x123/0x630 [ 288.093053][T18204] __get_vm_area_node+0x1f8/0x300 [ 288.093078][T18204] __vmalloc_node_range_noprof+0x301/0x12f0 [ 288.093102][T18204] ? prealloc_init+0x123/0x630 [ 288.093124][T18204] ? lock_release+0x4b/0x3e0 [ 288.093150][T18204] ? do_raw_spin_lock+0x121/0x290 [ 288.093175][T18204] ? do_raw_spin_lock+0x121/0x290 [ 288.093196][T18204] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 288.093221][T18204] ? rcu_is_watching+0x15/0xb0 [ 288.093241][T18204] bpf_map_area_alloc+0x12d/0x180 [ 288.093265][T18204] ? prealloc_init+0x123/0x630 [ 288.093287][T18204] prealloc_init+0x123/0x630 [ 288.093310][T18204] ? __percpu_counter_init_many+0x364/0x380 [ 288.093334][T18204] htab_map_alloc+0x6ce/0xc70 [ 288.093358][T18204] map_create+0xaa0/0x14d0 [ 288.093380][T18204] ? __might_fault+0xcc/0x130 [ 288.093403][T18204] ? security_bpf+0x7e/0x300 [ 288.093427][T18204] __sys_bpf+0x60f/0x870 [ 288.093449][T18204] ? __pfx___sys_bpf+0x10/0x10 [ 288.093475][T18204] ? ksys_write+0x22a/0x250 [ 288.093498][T18204] ? __pfx_ksys_write+0x10/0x10 [ 288.093522][T18204] __x64_sys_bpf+0x7c/0x90 [ 288.093542][T18204] do_syscall_64+0xfa/0x3b0 [ 288.093572][T18204] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.093591][T18204] ? clear_bhb_loop+0x60/0xb0 [ 288.093610][T18204] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.093628][T18204] RIP: 0033:0x7fe99238ebe9 [ 288.093644][T18204] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 288.093662][T18204] RSP: 002b:00007fe9905f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 288.093683][T18204] RAX: ffffffffffffffda RBX: 00007fe9925b5fa0 RCX: 00007fe99238ebe9 [ 288.093697][T18204] RDX: 0000000000000050 RSI: 0000200000000840 RDI: 0000000000000000 [ 288.093710][T18204] RBP: 00007fe9905f6090 R08: 0000000000000000 R09: 0000000000000000 [ 288.093722][T18204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 288.093734][T18204] R13: 00007fe9925b6038 R14: 00007fe9925b5fa0 R15: 00007ffc4916c828 [ 288.093754][T18204] [ 288.493959][T18215] FAULT_INJECTION: forcing a failure. [ 288.493959][T18215] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 288.507607][T18215] CPU: 0 UID: 0 PID: 18215 Comm: syz.1.4601 Not tainted syzkaller #0 PREEMPT(full) [ 288.507634][T18215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 288.507645][T18215] Call Trace: [ 288.507653][T18215] [ 288.507661][T18215] dump_stack_lvl+0x189/0x250 [ 288.507688][T18215] ? __pfx____ratelimit+0x10/0x10 [ 288.507713][T18215] ? __pfx_dump_stack_lvl+0x10/0x10 [ 288.507732][T18215] ? __pfx__printk+0x10/0x10 [ 288.507753][T18215] ? __might_fault+0xb0/0x130 [ 288.507778][T18215] ? rcu_is_watching+0x15/0xb0 [ 288.507795][T18215] should_fail_ex+0x414/0x560 [ 288.507819][T18215] _copy_from_user+0x2d/0xb0 [ 288.507839][T18215] __sys_bpf+0x1ed/0x870 [ 288.507870][T18215] ? __pfx___sys_bpf+0x10/0x10 [ 288.507897][T18215] ? ksys_write+0x22a/0x250 [ 288.507920][T18215] ? __pfx_ksys_write+0x10/0x10 [ 288.507948][T18215] ? rcu_is_watching+0x15/0xb0 [ 288.507967][T18215] __x64_sys_bpf+0x7c/0x90 [ 288.507986][T18215] do_syscall_64+0xfa/0x3b0 [ 288.508010][T18215] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.508028][T18215] ? clear_bhb_loop+0x60/0xb0 [ 288.508046][T18215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.508063][T18215] RIP: 0033:0x7fe99238ebe9 [ 288.508079][T18215] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 288.508095][T18215] RSP: 002b:00007fe9905f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 288.508114][T18215] RAX: ffffffffffffffda RBX: 00007fe9925b5fa0 RCX: 00007fe99238ebe9 [ 288.508128][T18215] RDX: 0000000000000028 RSI: 0000200000000080 RDI: 000000000000000a [ 288.508139][T18215] RBP: 00007fe9905f6090 R08: 0000000000000000 R09: 0000000000000000 [ 288.508150][T18215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 288.508161][T18215] R13: 00007fe9925b6038 R14: 00007fe9925b5fa0 R15: 00007ffc4916c828 [ 288.508181][T18215] [ 288.769638][T18220] netlink: 'syz.1.4603': attribute type 10 has an invalid length. [ 288.792409][T18220] batman_adv: batadv0: Interface deactivated: team0 [ 289.078823][T18250] netlink: 'syz.1.4616': attribute type 10 has an invalid length. [ 289.180695][T18246] bond3 (unregistering): Released all slaves [ 289.239403][T18259] bond2: entered allmulticast mode [ 289.245747][T18259] 8021q: adding VLAN 0 to HW filter on device bond2 [ 289.253327][T18259] bridge0: port 3(bond2) entered blocking state [ 289.262814][T18259] bridge0: port 3(bond2) entered disabled state [ 289.272190][T18259] bond2: entered promiscuous mode [ 289.280025][T18259] bridge0: port 3(bond2) entered blocking state [ 289.286476][T18259] bridge0: port 3(bond2) entered listening state [ 289.335253][T18266] FAULT_INJECTION: forcing a failure. [ 289.335253][T18266] name failslab, interval 1, probability 0, space 0, times 0 [ 289.365054][T18266] CPU: 1 UID: 0 PID: 18266 Comm: syz.3.4623 Not tainted syzkaller #0 PREEMPT(full) [ 289.365080][T18266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 289.365091][T18266] Call Trace: [ 289.365099][T18266] [ 289.365116][T18266] dump_stack_lvl+0x189/0x250 [ 289.365142][T18266] ? __pfx____ratelimit+0x10/0x10 [ 289.365165][T18266] ? __pfx_dump_stack_lvl+0x10/0x10 [ 289.365183][T18266] ? __pfx__printk+0x10/0x10 [ 289.365205][T18266] ? fs_reclaim_acquire+0x7d/0x100 [ 289.365231][T18266] ? __pfx___might_resched+0x10/0x10 [ 289.365248][T18266] ? lock_acquire+0x5f/0x360 [ 289.365272][T18266] should_fail_ex+0x414/0x560 [ 289.365297][T18266] should_failslab+0xa8/0x100 [ 289.365320][T18266] __kmalloc_noprof+0xcb/0x4f0 [ 289.365342][T18266] ? bpf_test_init+0xc2/0x170 [ 289.365366][T18266] bpf_test_init+0xc2/0x170 [ 289.365390][T18266] bpf_prog_test_run_skb+0x1e9/0x1560 [ 289.365413][T18266] ? rcu_is_watching+0x15/0xb0 [ 289.365433][T18266] ? __fget_files+0x2a/0x420 [ 289.365460][T18266] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 289.365484][T18266] bpf_prog_test_run+0x2c7/0x340 [ 289.365510][T18266] __sys_bpf+0x581/0x870 [ 289.365530][T18266] ? __pfx___sys_bpf+0x10/0x10 [ 289.365557][T18266] ? ksys_write+0x22a/0x250 [ 289.365580][T18266] ? __pfx_ksys_write+0x10/0x10 [ 289.365599][T18266] ? rcu_is_watching+0x15/0xb0 [ 289.365619][T18266] __x64_sys_bpf+0x7c/0x90 [ 289.365639][T18266] do_syscall_64+0xfa/0x3b0 [ 289.365665][T18266] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.365683][T18266] ? clear_bhb_loop+0x60/0xb0 [ 289.365702][T18266] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.365721][T18266] RIP: 0033:0x7f380cf8ebe9 [ 289.365739][T18266] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 289.365754][T18266] RSP: 002b:00007f380de79038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 289.365775][T18266] RAX: ffffffffffffffda RBX: 00007f380d1b5fa0 RCX: 00007f380cf8ebe9 [ 289.365789][T18266] RDX: 0000000000000028 RSI: 0000200000000080 RDI: 000000000000000a [ 289.365802][T18266] RBP: 00007f380de79090 R08: 0000000000000000 R09: 0000000000000000 [ 289.365814][T18266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 289.365823][T18266] R13: 00007f380d1b6038 R14: 00007f380d1b5fa0 R15: 00007ffc2e7d66c8 [ 289.365842][T18266] [ 289.616433][ T11] block nbd30: Possible stuck request ffff88805d595080: control (read@0,1024B). Runtime 30 seconds [ 289.627311][ T11] block nbd30: Possible stuck request ffff88805d595240: control (read@1024,1024B). Runtime 30 seconds [ 289.630568][T18272] openvswitch: netlink: IPv4 tun info is not correct [ 289.638455][ T11] block nbd30: Possible stuck request ffff88805d595400: control (read@2048,1024B). Runtime 30 seconds [ 289.638490][ T11] block nbd30: Possible stuck request ffff88805d5955c0: control (read@3072,1024B). Runtime 30 seconds [ 289.726230][T18274] veth0: entered promiscuous mode [ 289.734786][T18273] veth0: left promiscuous mode [ 289.861426][T18282] __nla_validate_parse: 10 callbacks suppressed [ 289.861448][T18282] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4630'. [ 289.871958][T18288] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4631'. [ 289.940646][T18290] openvswitch: netlink: IPv4 frag type 255 is out of range max 2 [ 290.009288][T18296] tc_dump_action: action bad kind [ 290.183220][T18310] netlink: 84 bytes leftover after parsing attributes in process `syz.3.4639'. [ 290.201987][T18310] netlink: 84 bytes leftover after parsing attributes in process `syz.3.4639'. [ 290.236813][ T6524] bridge0: port 3(bond2) entered disabled state [ 290.320289][T18320] IPVS: set_ctl: invalid protocol: 0 100.1.1.1:20003 [ 290.329998][T18321] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 290.422739][T18329] netlink: 'syz.1.4649': attribute type 21 has an invalid length. [ 290.433252][T18329] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4649'. [ 290.478561][T18329] IPv6: NLM_F_CREATE should be specified when creating new route [ 290.548636][T18339] bond7 (unregistering): Released all slaves [ 290.572056][T18343] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4653'. [ 290.692481][T18348] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4655'. [ 290.711869][T18352] netlink: 284 bytes leftover after parsing attributes in process `syz.2.4657'. [ 290.779849][T18360] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4657'. [ 290.800150][T18359] netlink: 'syz.3.4660': attribute type 1 has an invalid length. [ 290.817039][T18359] netlink: 'syz.3.4660': attribute type 1 has an invalid length. [ 290.826947][T18359] netlink: 'syz.3.4660': attribute type 1 has an invalid length. [ 290.847589][T18359] netlink: 'syz.3.4660': attribute type 2 has an invalid length. [ 290.872496][T18359] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4660'. [ 291.161719][T18386] netlink: 'syz.2.4671': attribute type 10 has an invalid length. [ 291.173449][T18386] batman_adv: batadv0: Interface deactivated: team0 [ 291.181297][T18390] FAULT_INJECTION: forcing a failure. [ 291.181297][T18390] name failslab, interval 1, probability 0, space 0, times 0 [ 291.194700][T18390] CPU: 0 UID: 0 PID: 18390 Comm: syz.3.4673 Not tainted syzkaller #0 PREEMPT(full) [ 291.194728][T18390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 291.194740][T18390] Call Trace: [ 291.194748][T18390] [ 291.194756][T18390] dump_stack_lvl+0x189/0x250 [ 291.194783][T18390] ? __pfx____ratelimit+0x10/0x10 [ 291.194807][T18390] ? __pfx_dump_stack_lvl+0x10/0x10 [ 291.194828][T18390] ? __pfx__printk+0x10/0x10 [ 291.194850][T18390] ? fs_reclaim_acquire+0x7d/0x100 [ 291.194875][T18390] ? rcu_is_watching+0x15/0xb0 [ 291.194892][T18390] ? __pfx___might_resched+0x10/0x10 [ 291.194909][T18390] ? lock_acquire+0x5f/0x360 [ 291.194933][T18390] should_fail_ex+0x414/0x560 [ 291.194958][T18390] should_failslab+0xa8/0x100 [ 291.194982][T18390] __kmalloc_noprof+0xcb/0x4f0 [ 291.195003][T18390] ? sk_prot_alloc+0xe7/0x220 [ 291.195020][T18390] ? lock_release+0x4b/0x3e0 [ 291.195044][T18390] sk_prot_alloc+0xe7/0x220 [ 291.195059][T18390] ? sk_alloc+0x24/0x370 [ 291.195076][T18390] sk_alloc+0x3a/0x370 [ 291.195091][T18390] ? bpf_ctx_init+0x167/0x1d0 [ 291.195116][T18390] bpf_prog_test_run_skb+0x2ed/0x1560 [ 291.195136][T18390] ? rcu_is_watching+0x15/0xb0 [ 291.195155][T18390] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 291.195174][T18390] bpf_prog_test_run+0x2c7/0x340 [ 291.195195][T18390] __sys_bpf+0x581/0x870 [ 291.195215][T18390] ? __pfx___sys_bpf+0x10/0x10 [ 291.195239][T18390] ? ksys_write+0x22a/0x250 [ 291.195261][T18390] ? __pfx_ksys_write+0x10/0x10 [ 291.195281][T18390] ? rcu_is_watching+0x15/0xb0 [ 291.195299][T18390] __x64_sys_bpf+0x7c/0x90 [ 291.195318][T18390] do_syscall_64+0xfa/0x3b0 [ 291.195340][T18390] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.195357][T18390] ? clear_bhb_loop+0x60/0xb0 [ 291.195374][T18390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.195391][T18390] RIP: 0033:0x7f380cf8ebe9 [ 291.195409][T18390] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 291.195425][T18390] RSP: 002b:00007f380de79038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 291.195446][T18390] RAX: ffffffffffffffda RBX: 00007f380d1b5fa0 RCX: 00007f380cf8ebe9 [ 291.195460][T18390] RDX: 0000000000000028 RSI: 0000200000000080 RDI: 000000000000000a [ 291.195472][T18390] RBP: 00007f380de79090 R08: 0000000000000000 R09: 0000000000000000 [ 291.195488][T18390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 291.195500][T18390] R13: 00007f380d1b6038 R14: 00007f380d1b5fa0 R15: 00007ffc2e7d66c8 [ 291.195521][T18390] [ 291.730506][T18412] FAULT_INJECTION: forcing a failure. [ 291.730506][T18412] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 291.744852][T18412] CPU: 1 UID: 0 PID: 18412 Comm: syz.4.4683 Not tainted syzkaller #0 PREEMPT(full) [ 291.744875][T18412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 291.744886][T18412] Call Trace: [ 291.744893][T18412] [ 291.744901][T18412] dump_stack_lvl+0x189/0x250 [ 291.744926][T18412] ? __pfx____ratelimit+0x10/0x10 [ 291.744949][T18412] ? __pfx_dump_stack_lvl+0x10/0x10 [ 291.744968][T18412] ? __pfx__printk+0x10/0x10 [ 291.744990][T18412] ? __might_fault+0xb0/0x130 [ 291.745017][T18412] ? rcu_is_watching+0x15/0xb0 [ 291.745036][T18412] should_fail_ex+0x414/0x560 [ 291.745065][T18412] _copy_from_user+0x2d/0xb0 [ 291.745084][T18412] ___sys_sendmsg+0x158/0x2a0 [ 291.745105][T18412] ? __pfx____sys_sendmsg+0x10/0x10 [ 291.745137][T18412] ? __fget_files+0x2a/0x420 [ 291.745162][T18412] ? __fget_files+0x3a0/0x420 [ 291.745188][T18412] __x64_sys_sendmsg+0x19b/0x260 [ 291.745208][T18412] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 291.745229][T18412] ? __pfx_ksys_write+0x10/0x10 [ 291.745251][T18412] ? rcu_is_watching+0x15/0xb0 [ 291.745269][T18412] ? rcu_is_watching+0x15/0xb0 [ 291.745287][T18412] do_syscall_64+0xfa/0x3b0 [ 291.745312][T18412] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.745329][T18412] ? clear_bhb_loop+0x60/0xb0 [ 291.745348][T18412] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.745366][T18412] RIP: 0033:0x7fd7dc18ebe9 [ 291.745383][T18412] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 291.745398][T18412] RSP: 002b:00007fd7dcf20038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 291.745418][T18412] RAX: ffffffffffffffda RBX: 00007fd7dc3b5fa0 RCX: 00007fd7dc18ebe9 [ 291.745432][T18412] RDX: 0000000004000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 291.745444][T18412] RBP: 00007fd7dcf20090 R08: 0000000000000000 R09: 0000000000000000 [ 291.745456][T18412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 291.745467][T18412] R13: 00007fd7dc3b6038 R14: 00007fd7dc3b5fa0 R15: 00007ffeb1b65868 [ 291.745487][T18412] [ 291.993519][ T11] block nbd31: Possible stuck request ffff888062520000: control (read@0,1024B). Runtime 30 seconds [ 292.004605][ T11] block nbd31: Possible stuck request ffff8880625201c0: control (read@1024,1024B). Runtime 30 seconds [ 292.015681][ T11] block nbd31: Possible stuck request ffff888062520380: control (read@2048,1024B). Runtime 30 seconds [ 292.027401][ T11] block nbd31: Possible stuck request ffff888062520540: control (read@3072,1024B). Runtime 30 seconds [ 292.149466][T18429] netlink: 'syz.1.4688': attribute type 10 has an invalid length. [ 292.213260][T18415] bond3 (unregistering): Released all slaves [ 292.524298][T18457] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.560050][T18461] netlink: 'syz.1.4704': attribute type 29 has an invalid length. [ 292.617070][T18461] nbd: must specify a size in bytes for the device [ 292.638750][ T11] block nbd32: Connection timed out, retrying (0/2 alive) [ 292.646086][ T11] block nbd32: Connection timed out, retrying (0/2 alive) [ 292.653271][ T11] block nbd32: Connection timed out, retrying (0/2 alive) [ 292.660548][T12179] block nbd32: Dead connection, failed to find a fallback [ 292.669573][T12179] block nbd32: shutting down sockets [ 292.675008][T12179] blk_print_req_error: 138 callbacks suppressed [ 292.675024][T12179] I/O error, dev nbd32, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 292.690631][ T11] block nbd32: Connection timed out, retrying (0/2 alive) [ 292.697981][T12179] buffer_io_error: 138 callbacks suppressed [ 292.697999][T12179] Buffer I/O error on dev nbd32, logical block 1, async page read [ 292.712349][T12179] I/O error, dev nbd32, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 292.721601][T12179] Buffer I/O error on dev nbd32, logical block 0, async page read [ 292.729643][T12179] I/O error, dev nbd32, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 292.738879][T12179] Buffer I/O error on dev nbd32, logical block 3, async page read [ 292.747636][T12179] I/O error, dev nbd32, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 292.756913][T12179] Buffer I/O error on dev nbd32, logical block 2, async page read [ 292.766626][T10468] I/O error, dev nbd32, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 292.787058][T10468] Buffer I/O error on dev nbd32, logical block 0, async page read [ 292.819225][T10468] I/O error, dev nbd32, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 292.856758][T10468] Buffer I/O error on dev nbd32, logical block 1, async page read [ 292.865191][T10468] I/O error, dev nbd32, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 292.874578][T10468] Buffer I/O error on dev nbd32, logical block 2, async page read [ 292.882818][T10468] I/O error, dev nbd32, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 292.903613][T10468] Buffer I/O error on dev nbd32, logical block 3, async page read [ 292.929094][T10468] I/O error, dev nbd32, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 292.952915][T10468] Buffer I/O error on dev nbd32, logical block 0, async page read [ 292.980462][T10468] I/O error, dev nbd32, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 292.999670][T10468] Buffer I/O error on dev nbd32, logical block 1, async page read [ 293.005583][T18475] nbd43: detected capacity change from 0 to 127 [ 293.022637][T10468] ldm_validate_partition_table(): Disk read failed. [ 293.040634][T10468] Dev nbd32: unable to read RDB block 0 [ 293.050831][ T5872] block nbd43: Receive control failed (result -104) [ 293.053406][T10468] nbd32: unable to read partition table [ 293.057624][ T5869] block nbd43: Receive control failed (result -32) [ 293.120796][T10468] ldm_validate_partition_table(): Disk read failed. [ 293.145832][T10468] Dev nbd32: unable to read RDB block 0 [ 293.153452][T10468] nbd32: unable to read partition table [ 293.266607][T12179] block nbd33: Possible stuck request ffff88805c840000: control (read@0,4096B). Runtime 30 seconds [ 294.047779][T18556] bridge0: port 3(syz_tun) entered blocking state [ 294.056296][T18556] bridge0: port 3(syz_tun) entered disabled state [ 294.062980][T18556] syz_tun: entered allmulticast mode [ 294.076539][T18556] syz_tun: entered promiscuous mode [ 294.082264][T18556] bridge0: port 3(syz_tun) entered blocking state [ 294.088864][T18556] bridge0: port 3(syz_tun) entered listening state [ 294.107125][T18559] FAULT_INJECTION: forcing a failure. [ 294.107125][T18559] name failslab, interval 1, probability 0, space 0, times 0 [ 294.120912][T18559] CPU: 0 UID: 0 PID: 18559 Comm: syz.4.4741 Not tainted syzkaller #0 PREEMPT(full) [ 294.120939][T18559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 294.120951][T18559] Call Trace: [ 294.120958][T18559] [ 294.120967][T18559] dump_stack_lvl+0x189/0x250 [ 294.120994][T18559] ? __pfx____ratelimit+0x10/0x10 [ 294.121017][T18559] ? __pfx_dump_stack_lvl+0x10/0x10 [ 294.121037][T18559] ? __pfx__printk+0x10/0x10 [ 294.121058][T18559] ? trace_contention_end+0x39/0x120 [ 294.121079][T18559] ? rcu_is_watching+0x15/0xb0 [ 294.121101][T18559] should_fail_ex+0x414/0x560 [ 294.121125][T18559] should_failslab+0xa8/0x100 [ 294.121150][T18559] kmem_cache_alloc_noprof+0x73/0x3c0 [ 294.121173][T18559] ? skb_clone+0x212/0x3a0 [ 294.121194][T18559] skb_clone+0x212/0x3a0 [ 294.121213][T18559] __netlink_deliver_tap+0x404/0x850 [ 294.121243][T18559] ? netlink_deliver_tap+0x2e/0x1b0 [ 294.121267][T18559] netlink_deliver_tap+0x19c/0x1b0 [ 294.121287][T18559] netlink_dump+0x92b/0xe90 [ 294.121313][T18559] ? __pfx_netlink_dump+0x10/0x10 [ 294.121344][T18559] ? kmem_cache_free+0x18f/0x400 [ 294.121376][T18559] netlink_recvmsg+0x676/0xa30 [ 294.121403][T18559] ? __pfx_netlink_recvmsg+0x10/0x10 [ 294.121427][T18559] ? unwind_next_frame+0xa5/0x2390 [ 294.121448][T18559] ? unwind_next_frame+0xa5/0x2390 [ 294.121466][T18559] ? aa_sock_msg_perm+0xf1/0x1d0 [ 294.121484][T18559] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 294.121502][T18559] ? security_socket_recvmsg+0x7e/0x2e0 [ 294.121523][T18559] ? __pfx_netlink_recvmsg+0x10/0x10 [ 294.121547][T18559] sock_recvmsg_nosec+0x183/0x1c0 [ 294.121570][T18559] ____sys_recvmsg+0x3aa/0x460 [ 294.121593][T18559] ? __pfx_____sys_recvmsg+0x10/0x10 [ 294.121617][T18559] ? import_iovec+0x74/0xa0 [ 294.121638][T18559] ___sys_recvmsg+0x1b5/0x510 [ 294.121659][T18559] ? __pfx____sys_recvmsg+0x10/0x10 [ 294.121679][T18559] ? __fget_files+0x2a/0x420 [ 294.121710][T18559] ? rcu_is_watching+0x15/0xb0 [ 294.121727][T18559] ? lock_release+0x4b/0x3e0 [ 294.121751][T18559] ? __might_fault+0xcc/0x130 [ 294.121775][T18559] do_recvmmsg+0x307/0x770 [ 294.121797][T18559] ? __pfx_do_recvmmsg+0x10/0x10 [ 294.121821][T18559] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 294.121853][T18559] __x64_sys_recvmmsg+0x190/0x240 [ 294.121873][T18559] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 294.121892][T18559] ? rcu_is_watching+0x15/0xb0 [ 294.121911][T18559] ? rcu_is_watching+0x15/0xb0 [ 294.121929][T18559] do_syscall_64+0xfa/0x3b0 [ 294.121953][T18559] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.121972][T18559] ? clear_bhb_loop+0x60/0xb0 [ 294.121992][T18559] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.122009][T18559] RIP: 0033:0x7fd7dc18ebe9 [ 294.122027][T18559] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 294.122043][T18559] RSP: 002b:00007fd7dcf20038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 294.122065][T18559] RAX: ffffffffffffffda RBX: 00007fd7dc3b5fa0 RCX: 00007fd7dc18ebe9 [ 294.122079][T18559] RDX: 0000000000000008 RSI: 0000200000002c00 RDI: 0000000000000003 [ 294.122091][T18559] RBP: 00007fd7dcf20090 R08: 0000000000000000 R09: 0000000000000000 [ 294.122103][T18559] R10: 0000000040010020 R11: 0000000000000246 R12: 0000000000000002 [ 294.122116][T18559] R13: 00007fd7dc3b6038 R14: 00007fd7dc3b5fa0 R15: 00007ffeb1b65868 [ 294.122136][T18559] [ 294.546807][T14761] block nbd34: Possible stuck request ffff88805c030000: control (read@0,1024B). Runtime 30 seconds [ 294.558216][T14761] block nbd34: Possible stuck request ffff88805c0301c0: control (read@1024,1024B). Runtime 30 seconds [ 294.569806][T14761] block nbd34: Possible stuck request ffff88805c030380: control (read@2048,1024B). Runtime 30 seconds [ 294.589344][T14761] block nbd34: Possible stuck request ffff88805c030540: control (read@3072,1024B). Runtime 30 seconds [ 294.663066][T18572] bond3 (unregistering): Released all slaves [ 294.870251][T18592] __nla_validate_parse: 6 callbacks suppressed [ 294.870276][T18592] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4753'. [ 295.059643][T18602] FAULT_INJECTION: forcing a failure. [ 295.059643][T18602] name failslab, interval 1, probability 0, space 0, times 0 [ 295.072470][T18602] CPU: 1 UID: 0 PID: 18602 Comm: syz.0.4757 Not tainted syzkaller #0 PREEMPT(full) [ 295.072495][T18602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 295.072505][T18602] Call Trace: [ 295.072514][T18602] [ 295.072522][T18602] dump_stack_lvl+0x189/0x250 [ 295.072545][T18602] ? __pfx____ratelimit+0x10/0x10 [ 295.072566][T18602] ? __pfx_dump_stack_lvl+0x10/0x10 [ 295.072583][T18602] ? __pfx__printk+0x10/0x10 [ 295.072604][T18602] ? rcu_is_watching+0x15/0xb0 [ 295.072622][T18602] ? rcu_is_watching+0x15/0xb0 [ 295.072639][T18602] should_fail_ex+0x414/0x560 [ 295.072665][T18602] should_failslab+0xa8/0x100 [ 295.072690][T18602] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 295.072714][T18602] ? __alloc_skb+0x112/0x2d0 [ 295.072738][T18602] __alloc_skb+0x112/0x2d0 [ 295.072763][T18602] rose_write_internal+0x100/0x1ac0 [ 295.072787][T18602] ? __local_bh_enable_ip+0x12d/0x1c0 [ 295.072806][T18602] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 295.072824][T18602] ? __pfx_rose_write_internal+0x10/0x10 [ 295.072846][T18602] ? rose_route_free_lci+0x140/0x170 [ 295.072865][T18602] ? rose_connect+0x69c/0x10a0 [ 295.072891][T18602] rose_connect+0x909/0x10a0 [ 295.072921][T18602] ? __pfx_rose_connect+0x10/0x10 [ 295.072943][T18602] ? vfs_write+0x956/0xb30 [ 295.072963][T18602] ? aa_af_perm+0x290/0x2c0 [ 295.072987][T18602] ? tomoyo_socket_connect_permission+0x164/0x290 [ 295.073005][T18602] ? lock_release+0x4b/0x3e0 [ 295.073028][T18602] ? __might_fault+0xb0/0x130 [ 295.073051][T18602] ? bpf_lsm_socket_connect+0x9/0x20 [ 295.073071][T18602] __sys_connect+0x316/0x440 [ 295.073094][T18602] ? __fget_files+0x3a0/0x420 [ 295.073117][T18602] ? __pfx___sys_connect+0x10/0x10 [ 295.073144][T18602] ? __pfx_ksys_write+0x10/0x10 [ 295.073164][T18602] ? rcu_is_watching+0x15/0xb0 [ 295.073184][T18602] __x64_sys_connect+0x7a/0x90 [ 295.073206][T18602] do_syscall_64+0xfa/0x3b0 [ 295.073231][T18602] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.073249][T18602] ? clear_bhb_loop+0x60/0xb0 [ 295.073267][T18602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.073298][T18602] RIP: 0033:0x7fb024d8ebe9 [ 295.073314][T18602] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 295.073330][T18602] RSP: 002b:00007fb025c34038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 295.073348][T18602] RAX: ffffffffffffffda RBX: 00007fb024fb5fa0 RCX: 00007fb024d8ebe9 [ 295.073361][T18602] RDX: 0000000000000040 RSI: 0000200000000280 RDI: 000000000000000b [ 295.073373][T18602] RBP: 00007fb025c34090 R08: 0000000000000000 R09: 0000000000000000 [ 295.073385][T18602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 295.073396][T18602] R13: 00007fb024fb6038 R14: 00007fb024fb5fa0 R15: 00007ffef2c5d8d8 [ 295.073417][T18602] [ 295.444096][T18610] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4758'. [ 295.465785][T18610] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 295.591285][T18623] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4766'. [ 295.661006][T18631] validate_nla: 4 callbacks suppressed [ 295.661029][T18631] netlink: 'syz.4.4770': attribute type 3 has an invalid length. [ 295.679935][T18633] netlink: 'syz.4.4770': attribute type 3 has an invalid length. [ 295.783023][T18643] veth0: entered promiscuous mode [ 295.790563][T18643] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4775'. [ 295.809539][T18641] veth0: left promiscuous mode [ 295.927783][T18656] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4778'. [ 295.939483][T18656] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4778'. [ 296.039060][T18660] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4782'. [ 296.490950][T18690] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4793'. [ 296.582384][T18694] netlink: 'syz.3.4795': attribute type 13 has an invalid length. [ 296.596497][T18694] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 296.657602][T18696] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.664813][T18696] bridge0: port 1(bridge_slave_0) entered forwarding state [ 296.672905][T18696] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 296.769048][T18704] lo: entered allmulticast mode [ 296.792563][T18701] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4799'. [ 296.823524][T18706] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4800'. [ 297.075618][T18712] nbd44: detected capacity change from 0 to 127 [ 297.087233][ T5869] block nbd44: Receive control failed (result -104) [ 297.093941][ T5872] block nbd44: Receive control failed (result -32) [ 297.107767][ C1] ------------[ cut here ]------------ [ 297.113278][ C1] ODEBUG: free active (active state 0) object: ffff888056fa4c90 object type: timer_list hint: rose_t0timer_expiry+0x0/0x350 [ 297.126873][ C1] WARNING: CPU: 1 PID: 18718 at lib/debugobjects.c:615 debug_print_object+0x16b/0x1e0 [ 297.136511][ C1] Modules linked in: [ 297.140431][ C1] CPU: 1 UID: 0 PID: 18718 Comm: syz.0.4805 Not tainted syzkaller #0 PREEMPT(full) [ 297.149882][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 297.160056][ C1] RIP: 0010:debug_print_object+0x16b/0x1e0 [ 297.165944][ C1] Code: 4c 89 ff e8 97 e8 52 fd 4d 8b 0f 48 c7 c7 20 40 e3 8b 48 8b 34 24 4c 89 ea 89 e9 4d 89 f0 41 54 e8 2a 1e b3 fc 48 83 c4 08 90 <0f> 0b 90 90 ff 05 67 8a d3 0a 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 [ 297.185634][ C1] RSP: 0018:ffffc90000a08a10 EFLAGS: 00010292 [ 297.191745][ C1] RAX: 6e94c8f6e10bb200 RBX: dffffc0000000000 RCX: ffff8880295bbc00 [ 297.199801][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 297.207836][ C1] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 297.215892][ C1] R10: dffffc0000000000 R11: fffffbfff1bfa1ec R12: ffffffff8a6c9760 [ 297.223884][ C1] R13: ffffffff8be341a0 R14: ffff888056fa4c90 R15: ffffffff8b8cdfa0 [ 297.231936][ C1] FS: 0000000000000000(0000) GS:ffff888125d1b000(0000) knlGS:0000000000000000 [ 297.240944][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 297.247590][ C1] CR2: 000000110c3c5d68 CR3: 000000000df36000 CR4: 00000000003526f0 [ 297.255629][ C1] Call Trace: [ 297.258921][ C1] [ 297.261759][ C1] debug_check_no_obj_freed+0x3a2/0x470 [ 297.267362][ C1] ? do_raw_spin_lock+0x121/0x290 [ 297.272416][ C1] ? rose_timer_expiry+0x4cb/0x600 [ 297.277579][ C1] kfree+0x112/0x440 [ 297.281506][ C1] rose_timer_expiry+0x4cb/0x600 [ 297.286527][ C1] call_timer_fn+0x17e/0x5f0 [ 297.291185][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 297.296708][ C1] ? call_timer_fn+0xbe/0x5f0 [ 297.301409][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 297.306599][ C1] ? rcu_is_watching+0x15/0xb0 [ 297.311394][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 297.316931][ C1] __run_timer_base+0x61a/0x860 [ 297.321813][ C1] ? ktime_get+0x3e/0x1f0 [ 297.326222][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 297.331618][ C1] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 297.337926][ C1] run_timer_softirq+0xb7/0x180 [ 297.342802][ C1] handle_softirqs+0x283/0x870 [ 297.347644][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 297.352429][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 297.357763][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 297.362982][ C1] __irq_exit_rcu+0xca/0x1f0 [ 297.367621][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 297.372850][ C1] irq_exit_rcu+0x9/0x30 [ 297.377146][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 297.382863][ C1] [ 297.385833][ C1] [ 297.388773][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 297.394793][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x18/0x70 [ 297.400980][ C1] Code: cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 04 24 65 48 8b 0c 25 08 50 a0 92 65 8b 15 e8 a4 e0 10 <81> e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 35 83 b9 3c 16 00 00 [ 297.420732][ C1] RSP: 0018:ffffc9000de772c8 EFLAGS: 00000202 [ 297.426866][ C1] RAX: ffffffff8211c111 RBX: ffffea00016c7280 RCX: ffff8880295bbc00 [ 297.434919][ C1] RDX: 0000000080000001 RSI: 0000000000012a45 RDI: 000000000005b1ca [ 297.442919][ C1] RBP: 0000000000000001 R08: ffffea00016c7287 R09: 1ffffd40002d8e50 [ 297.451069][ C1] R10: dffffc0000000000 R11: fffff940002d8e51 R12: 000000000005b1ca [ 297.459109][ C1] R13: 0000000000012a45 R14: 800000005b1ca000 R15: ffffea00016c7280 [ 297.467196][ C1] ? __folio_rmap_sanity_checks+0xd1/0x7d0 [ 297.473040][ C1] ? rcu_is_watching+0x15/0xb0 [ 297.477881][ C1] __folio_rmap_sanity_checks+0xd1/0x7d0 [ 297.483553][ C1] folio_remove_rmap_ptes+0x3b/0xaf0 [ 297.488915][ C1] ? page_table_check_clear+0x187/0x700 [ 297.494526][ C1] ? page_table_check_clear+0x4f3/0x700 [ 297.500104][ C1] ? page_table_check_clear+0x187/0x700 [ 297.505739][ C1] unmap_page_range+0x1f7f/0x4370 [ 297.510815][ C1] ? __pfx_unmap_page_range+0x10/0x10 [ 297.516279][ C1] ? mas_find+0xb0e/0xd30 [ 297.520648][ C1] unmap_vmas+0x399/0x580 [ 297.525077][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 297.529969][ C1] exit_mmap+0x248/0xb50 [ 297.534265][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 297.539123][ C1] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 297.544836][ C1] ? __pfx_exit_aio+0x10/0x10 [ 297.549567][ C1] ? uprobe_clear_state+0x274/0x290 [ 297.554876][ C1] __mmput+0x118/0x420 [ 297.558974][ C1] exit_mm+0x1da/0x2c0 [ 297.563091][ C1] ? __pfx_exit_mm+0x10/0x10 [ 297.567755][ C1] ? rcu_is_watching+0x15/0xb0 [ 297.572536][ C1] do_exit+0x648/0x2300 [ 297.576735][ C1] ? do_raw_spin_lock+0x121/0x290 [ 297.581784][ C1] ? __pfx_do_exit+0x10/0x10 [ 297.586423][ C1] ? rcu_is_watching+0x15/0xb0 [ 297.591205][ C1] do_group_exit+0x21c/0x2d0 [ 297.595858][ C1] get_signal+0x1286/0x1340 [ 297.600402][ C1] arch_do_signal_or_restart+0x9a/0x750 [ 297.606033][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 297.612237][ C1] ? rcu_is_watching+0x15/0xb0 [ 297.617138][ C1] ? rcu_is_watching+0x15/0xb0 [ 297.621929][ C1] exit_to_user_mode_loop+0x75/0x110 [ 297.627295][ C1] do_syscall_64+0x2bd/0x3b0 [ 297.631923][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.638075][ C1] ? clear_bhb_loop+0x60/0xb0 [ 297.642776][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.648761][ C1] RIP: 0033:0x7fb024d8ebe9 [ 297.653204][ C1] Code: Unable to access opcode bytes at 0x7fb024d8ebbf. [ 297.660294][ C1] RSP: 002b:00007fb025c130e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 297.668766][ C1] RAX: fffffffffffffe00 RBX: 00007fb024fb6098 RCX: 00007fb024d8ebe9 [ 297.676786][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fb024fb6098 [ 297.684809][ C1] RBP: 00007fb024fb6090 R08: 0000000000000000 R09: 0000000000000000 [ 297.692788][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 297.700818][ C1] R13: 00007fb024fb6128 R14: 00007ffef2c5d7f0 R15: 00007ffef2c5d8d8 [ 297.708841][ C1] [ 297.711862][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 297.719139][ C1] CPU: 1 UID: 0 PID: 18718 Comm: syz.0.4805 Not tainted syzkaller #0 PREEMPT(full) [ 297.728522][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 297.738569][ C1] Call Trace: [ 297.741845][ C1] [ 297.744685][ C1] dump_stack_lvl+0x99/0x250 [ 297.749281][ C1] ? __asan_memcpy+0x40/0x70 [ 297.753875][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 297.759081][ C1] ? __pfx__printk+0x10/0x10 [ 297.763740][ C1] vpanic+0x281/0x750 [ 297.767735][ C1] ? __pfx__printk+0x10/0x10 [ 297.772360][ C1] ? __pfx_vpanic+0x10/0x10 [ 297.776874][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 297.782175][ C1] panic+0xb9/0xc0 [ 297.785902][ C1] ? __pfx_panic+0x10/0x10 [ 297.790326][ C1] __warn+0x31b/0x4b0 [ 297.794310][ C1] ? debug_print_object+0x16b/0x1e0 [ 297.799517][ C1] ? debug_print_object+0x16b/0x1e0 [ 297.804719][ C1] report_bug+0x2be/0x4f0 [ 297.809059][ C1] ? debug_print_object+0x16b/0x1e0 [ 297.814266][ C1] ? debug_print_object+0x16b/0x1e0 [ 297.819479][ C1] ? debug_print_object+0x16d/0x1e0 [ 297.824684][ C1] handle_bug+0x84/0x160 [ 297.828932][ C1] exc_invalid_op+0x1a/0x50 [ 297.833434][ C1] asm_exc_invalid_op+0x1a/0x20 [ 297.838291][ C1] RIP: 0010:debug_print_object+0x16b/0x1e0 [ 297.844107][ C1] Code: 4c 89 ff e8 97 e8 52 fd 4d 8b 0f 48 c7 c7 20 40 e3 8b 48 8b 34 24 4c 89 ea 89 e9 4d 89 f0 41 54 e8 2a 1e b3 fc 48 83 c4 08 90 <0f> 0b 90 90 ff 05 67 8a d3 0a 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 [ 297.863713][ C1] RSP: 0018:ffffc90000a08a10 EFLAGS: 00010292 [ 297.869787][ C1] RAX: 6e94c8f6e10bb200 RBX: dffffc0000000000 RCX: ffff8880295bbc00 [ 297.877759][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 297.885730][ C1] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 297.893706][ C1] R10: dffffc0000000000 R11: fffffbfff1bfa1ec R12: ffffffff8a6c9760 [ 297.901684][ C1] R13: ffffffff8be341a0 R14: ffff888056fa4c90 R15: ffffffff8b8cdfa0 [ 297.909664][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 297.915318][ C1] debug_check_no_obj_freed+0x3a2/0x470 [ 297.920879][ C1] ? do_raw_spin_lock+0x121/0x290 [ 297.925917][ C1] ? rose_timer_expiry+0x4cb/0x600 [ 297.931038][ C1] kfree+0x112/0x440 [ 297.934956][ C1] rose_timer_expiry+0x4cb/0x600 [ 297.939989][ C1] call_timer_fn+0x17e/0x5f0 [ 297.944596][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 297.950070][ C1] ? call_timer_fn+0xbe/0x5f0 [ 297.954757][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 297.959894][ C1] ? rcu_is_watching+0x15/0xb0 [ 297.964686][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 297.970183][ C1] __run_timer_base+0x61a/0x860 [ 297.975045][ C1] ? ktime_get+0x3e/0x1f0 [ 297.979407][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 297.984783][ C1] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 297.991041][ C1] run_timer_softirq+0xb7/0x180 [ 297.995902][ C1] handle_softirqs+0x283/0x870 [ 298.000677][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 298.005440][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 298.010726][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 298.015956][ C1] __irq_exit_rcu+0xca/0x1f0 [ 298.020548][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 298.025754][ C1] irq_exit_rcu+0x9/0x30 [ 298.030010][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 298.035667][ C1] [ 298.038609][ C1] [ 298.041544][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 298.047533][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x18/0x70 [ 298.053704][ C1] Code: cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 04 24 65 48 8b 0c 25 08 50 a0 92 65 8b 15 e8 a4 e0 10 <81> e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 35 83 b9 3c 16 00 00 [ 298.073322][ C1] RSP: 0018:ffffc9000de772c8 EFLAGS: 00000202 [ 298.079399][ C1] RAX: ffffffff8211c111 RBX: ffffea00016c7280 RCX: ffff8880295bbc00 [ 298.087375][ C1] RDX: 0000000080000001 RSI: 0000000000012a45 RDI: 000000000005b1ca [ 298.095350][ C1] RBP: 0000000000000001 R08: ffffea00016c7287 R09: 1ffffd40002d8e50 [ 298.103326][ C1] R10: dffffc0000000000 R11: fffff940002d8e51 R12: 000000000005b1ca [ 298.111301][ C1] R13: 0000000000012a45 R14: 800000005b1ca000 R15: ffffea00016c7280 [ 298.119287][ C1] ? __folio_rmap_sanity_checks+0xd1/0x7d0 [ 298.125112][ C1] ? rcu_is_watching+0x15/0xb0 [ 298.129875][ C1] __folio_rmap_sanity_checks+0xd1/0x7d0 [ 298.135516][ C1] folio_remove_rmap_ptes+0x3b/0xaf0 [ 298.140810][ C1] ? page_table_check_clear+0x187/0x700 [ 298.146369][ C1] ? page_table_check_clear+0x4f3/0x700 [ 298.151923][ C1] ? page_table_check_clear+0x187/0x700 [ 298.157479][ C1] unmap_page_range+0x1f7f/0x4370 [ 298.162528][ C1] ? __pfx_unmap_page_range+0x10/0x10 [ 298.167915][ C1] ? mas_find+0xb0e/0xd30 [ 298.172274][ C1] unmap_vmas+0x399/0x580 [ 298.176615][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 298.181477][ C1] exit_mmap+0x248/0xb50 [ 298.185741][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 298.190507][ C1] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 298.196155][ C1] ? __pfx_exit_aio+0x10/0x10 [ 298.200848][ C1] ? uprobe_clear_state+0x274/0x290 [ 298.206055][ C1] __mmput+0x118/0x420 [ 298.210131][ C1] exit_mm+0x1da/0x2c0 [ 298.214204][ C1] ? __pfx_exit_mm+0x10/0x10 [ 298.218803][ C1] ? rcu_is_watching+0x15/0xb0 [ 298.223573][ C1] do_exit+0x648/0x2300 [ 298.227737][ C1] ? do_raw_spin_lock+0x121/0x290 [ 298.232770][ C1] ? __pfx_do_exit+0x10/0x10 [ 298.237408][ C1] ? rcu_is_watching+0x15/0xb0 [ 298.242177][ C1] do_group_exit+0x21c/0x2d0 [ 298.246777][ C1] get_signal+0x1286/0x1340 [ 298.251296][ C1] arch_do_signal_or_restart+0x9a/0x750 [ 298.256853][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 298.263027][ C1] ? rcu_is_watching+0x15/0xb0 [ 298.267800][ C1] ? rcu_is_watching+0x15/0xb0 [ 298.272597][ C1] exit_to_user_mode_loop+0x75/0x110 [ 298.277899][ C1] do_syscall_64+0x2bd/0x3b0 [ 298.282506][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.288577][ C1] ? clear_bhb_loop+0x60/0xb0 [ 298.293266][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.299168][ C1] RIP: 0033:0x7fb024d8ebe9 [ 298.303585][ C1] Code: Unable to access opcode bytes at 0x7fb024d8ebbf. [ 298.310598][ C1] RSP: 002b:00007fb025c130e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 298.319016][ C1] RAX: fffffffffffffe00 RBX: 00007fb024fb6098 RCX: 00007fb024d8ebe9 [ 298.326996][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fb024fb6098 [ 298.334969][ C1] RBP: 00007fb024fb6090 R08: 0000000000000000 R09: 0000000000000000 [ 298.342945][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 298.350933][ C1] R13: 00007fb024fb6128 R14: 00007ffef2c5d7f0 R15: 00007ffef2c5d8d8 [ 298.358924][ C1] [ 298.362257][ C1] Kernel Offset: disabled [ 298.366608][ C1] Rebooting in 86400 seconds..