last executing test programs: 3.136625063s ago: executing program 0 (id=4455): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000540)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000000600)={0x1d, r2}, 0x10) sendmmsg$sock(r1, &(0x7f00000042c0)=[{{0x0, 0x0, &(0x7f0000004340)=[{&(0x7f0000004380)="0100000003000000640000000000000000000000000000000000000000000000000000000000000020a10700000000000200000001000000020000000100"/72, 0x48}], 0x1}}, {{0x0, 0x0, &(0x7f0000004400)=[{&(0x7f0000004440)="0100000003000000640000000000000000000000000000000000000000000000000000000000000000000000000000000200000001000000", 0x38}, {0x0}], 0x2}}], 0x2, 0x20004090) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000040)={{r4, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)='%pS \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r5}, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000004480)={0x10, 0xe, &(0x7f0000004540)=ANY=[@ANYBLOB="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"], &(0x7f0000004d00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000004d40), 0x8}, 0x94) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="380000004f34070000000000000070bafc68609ee6a2d7648c785e", @ANYRES16=r7, @ANYBLOB="07000000000000000000050000000c0003800400038004000500180001801400020073797a5f74756e000000000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x4004004}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x11, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b70800000000ff907b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r8, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000004c0)="b9ff03076003008b050000008650", 0x0, 0xfe8, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000003d00)=@raw={'raw\x00', 0x3c1, 0x3, 0x560, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x490, 0x2e8, 0x2e8, 0x490, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'erspan0\x00', 'geneve1\x00', {0xff}}, 0x0, 0x2c0, 0x2f0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x3, 0x2}}, @common=@inet=@policy={{0x158}, {[{@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0x0, 0xffffffff, 0xff000000, 0xffffff00], @ipv4=@rand_addr=0x64010102, [0x0, 0xffffffff, 0xffffffff, 0xff000000], 0x4d4, 0x3503, 0x3c, 0x0, 0x1, 0x4}, {@ipv4=@dev={0xac, 0x14, 0x14, 0x38}, [0x0, 0xffffff00, 0xffffff00, 0xff000000], @ipv6=@loopback, [0xffffff00, 0xff, 0xff000000, 0xff000000], 0x4d5, 0x4000000, 0x0, 0x0, 0x2, 0x2}, {@ipv6=@private1, [0x0, 0xff, 0xff, 0xff], @ipv6=@mcast2, [0xff, 0x0, 0xffffff00, 0xffffff00], 0x4d4, 0x3504, 0x2, 0x0, 0x14, 0x9}, {@ipv6=@local, [0xff, 0xffffffff, 0xffffffff], @ipv4=@empty, [0xffffff00, 0xff], 0x4d3, 0x3505, 0x62, 0x0, 0x7, 0x8}], 0xd9884bcd73343275, 0x1}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@mcast1, @loopback, [0xff, 0xffffff00, 0xffffff00, 0xffffff00], [0x0, 0x0, 0xff000000, 0xff], 'sit0\x00', 'caif0\x00', {}, {}, 0x67, 0x3, 0x0, 0x20}, 0x0, 0x138, 0x1a0, 0x0, {}, [@common=@unspec=@rateest={{0x68}, {'bond0\x00', 'veth1_virt_wifi\x00', 0x0, 0x1}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5c0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x48004}, 0x0) recvmmsg(r0, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000840)=""/132, 0x84}, {&(0x7f0000000900)=""/238, 0xee}, {&(0x7f0000000a00)=""/4092, 0xffc}], 0x3}, 0xfffffffa}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x10001}, {{0x0, 0x0, 0x0}, 0xff}, {{0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f0000001a80)=""/4103, 0x1007}, {&(0x7f0000002ac0)=""/4092, 0xffc}, {&(0x7f0000003ac0)=""/234, 0xea}, {&(0x7f0000003bc0)=""/83, 0x53}, {&(0x7f0000003c40)=""/165, 0xa5}], 0x5}, 0x900000}], 0x7, 0x2, 0x0) 3.002074755s ago: executing program 3 (id=4457): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="440000001000010400000014a100000000000000", @ANYRES32=0x0, @ANYBLOB="0103000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}}, 0x0) 2.820297539s ago: executing program 0 (id=4460): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001040)=@filter={'filter\x00', 0x42, 0x4, 0x3b8, 0xffffffff, 0x238, 0x320, 0x98, 0xffffffff, 0xffffffff, 0x320, 0x320, 0x320, 0xffffffff, 0x5, 0x0, {[{{@uncond, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x0, 0x0, 'wg1\x00', 'ip6tnl0\x00', {}, {}, 0x6c}, 0x287, 0x178, 0x1a0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x2, 0x4, 'bm\x00', "17fe85b2e7794dbf95fa4bbcb6a91c1f280c1999b9e9c91aec32acf40242838b14641ee58ffb2807b1455049d59591426d860cbcf1d58ab1ffbb5187b72db33268933cac58623e417fbdbd0b8753f88cb456e7cd9ef85fd6861f486fb7bab7930c4e57def2f1e72aede0b46c35ed67a0549781a3d3fe2b88393de1719bea5584", 0x7e, 0x2, {0xf}}}, @common=@unspec=@limit={{0x48}, {0x7004, 0x80000, 0x0, 0xb}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x8000, 0x3ff, 0x89f0, 0xfeb9, 0x3f, 0x7f, 0x3}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "81d0042c436dbdac8bebde18b54dd11bf035c1d8b6b0e88ef5aee0eccad7"}}}], {{'\x00', 0x0, 0x70, 0x98, 0x0, {0x0, 0x100000000000000}}, {0x28}}}}, 0x418) 2.738151212s ago: executing program 4 (id=4462): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38010000100033062cbd70000000000064010102000000000000000000000000000000000000000000000000000000000000000500007ffd000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e0000002000000000000000000000000fffffffd32000000ac1414aa0000000000000000000000000100000000000000030000000000000009000000000000000900000000000000020000000000000000000000000000000000000000000000fcffffffffffffff000000000000000000000000000000005f000000000000000a00000000000000010000000000000000000000000100000000000002000000a10000000000000048000200656362286369706865725f6e756c6c2900"/240], 0x138}, 0x1, 0x0, 0x0, 0x20040}, 0x80) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000500)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000540)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0xffff, 0xfffffffffffffffd, 0x2}, {0x1, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x3, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x32}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x39}, 0x0, 0x3, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) write(r2, &(0x7f0000000680)="0e0412b60f0c0df0f2747782bb714a7661", 0xfdef) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a3100000000080005"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a14000000000a050000000000000000000a00fffe38000000090a010300000000000000000700000008000f40000000020900010073797a310000000008000a400000000008000f400000000114"], 0x74}, 0x1, 0x0, 0x0, 0x88000}, 0x20000000) sendmsg$nl_route(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000600012800b00010067656e65766500005000028005000800050000000400380205000900010000000500"], 0x88}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010001fff000000008100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000200012800b00010067656e657665000010000280060005004e24000004000e0008000a00", @ANYRES32=r5], 0x48}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 2.615904502s ago: executing program 2 (id=4464): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="020000000400000006000000aa0b000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000a21c333ea0b8c220fb306e28e7bef555c047", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000008c0), &(0x7f0000000b80), 0x2000005, r0}, 0x38) r1 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000180)={&(0x7f00000001c0)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000300)="80", 0x1}], 0x1}, 0x20000800) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'xfrm0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x2, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x50}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x0, 0x7fffffff, 0x400}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0xe7, 0x1000, 0x2, 0xffffffff, 0xde, 0x5}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0xc888}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b00000000010000fd0000000900000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0xc, r4}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={0x0, &(0x7f0000000040)=""/141, &(0x7f0000000500), &(0x7f0000000280), 0x4, r4}, 0x38) 2.554692414s ago: executing program 1 (id=4465): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$kcm(0x29, 0x5, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="8400000010000305000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="1546010007ef0000540012800c0001006d6163766c616e0044000280060002000100000008000900feefa8000800030003000000080007000500000008000100100000000600020001000000040005800a000400aaaaaaaaaa2e000008000500", @ANYRES16=r0], 0x84}, 0x1, 0x0, 0x0, 0x3000000}, 0x20008040) socket$nl_generic(0x10, 0x3, 0x10) 2.463857518s ago: executing program 0 (id=4466): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x28, 0x0, 0x8, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8809}]}, 0x28}, 0x1, 0x0, 0x0, 0x20024810}, 0x0) (fail_nth: 5) 2.348348185s ago: executing program 0 (id=4467): mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000036c0)=@filter={'filter\x00', 0xe, 0x4, 0x368, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x298, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty}, 0x0, 0xd0, 0xf8, 0x0, {0x800000000000000}, [@common=@inet=@dscp={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c8) 2.266246606s ago: executing program 2 (id=4468): r0 = socket(0x28, 0x5, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000001700)={0x28, 0x0, 0x0, @local}, 0x10) listen(r1, 0x4) connect$vsock_stream(r0, &(0x7f0000001740)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000001780)=[{{0x0, 0x2d, &(0x7f00000017c0)=[{&(0x7f0000001800)="1b", 0x40000}], 0x1}}], 0x51, 0x0) (fail_nth: 75) 2.26077948s ago: executing program 3 (id=4469): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000040900010073797a300000000068000000060a01040000000000000000010000004000048020000180070001007274000014000280080002400000000108000140000000031c0001800b00010072656a65637400000c000280080001400000000108000b40000000000900010073797a300000000014000000110001"], 0xf0}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[], 0x7c}}, 0x2000c450) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000004000000000000001e000003000000000300000002000000000000000000000000000001050000000800000002000000000000070000000000002e"], 0x0, 0x50, 0x0, 0x1}, 0x28) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYRES8=r3], 0x44}, 0x1, 0x0, 0x0, 0x24000005}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRESDEC=r3, @ANYBLOB="01000100000001dcdf24010000000800010040a8775646d18c13b0cf93c0ad6e", @ANYRES32=r3, @ANYBLOB="440002804079"], 0x60}, 0x1, 0x400000000000000, 0x0, 0xc1}, 0x40810) 1.929853742s ago: executing program 0 (id=4470): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xd, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000640000006400000001000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000b6ffffffb702000008000000b703000084200000850000003b00000095"], &(0x7f0000000200)='GPL\x00', 0x6}, 0x94) 1.722670826s ago: executing program 4 (id=4471): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x40000, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000019c0), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000001a00)=0x3) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="4c00000010003df600"/20, @ANYBLOB="00000000000000001400030064766d727009000000000000000000001800128008000100707070000c00028008000100", @ANYRES32=r1], 0x4c}}, 0x0) 1.64230436s ago: executing program 0 (id=4472): syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a35f2", 0x18, 0x2c, 0x0, @remote, @local, {[], {{0x2f00, 0xfff5, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0xffff}, {"6ae0228d"}}}}}}}, 0x0) r0 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000001c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000240), 0x17a, 0x0) recvmmsg(r1, &(0x7f0000000280), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f00000002c0)={0x20000014}) epoll_wait(r0, &(0x7f0000000300)=[{}], 0x1, 0x400) pselect6(0x40, &(0x7f0000000340)={0xa, 0x7ffffffe, 0x2, 0x10000000000006, 0xf, 0x8, 0x80000002, 0x8}, 0x0, 0x0, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000380)=ANY=[], 0x3261e) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) syz_emit_ethernet(0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, 0x0, 0x4048050) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000006c0)=[{{0x0, 0xd94ea7173a9f1aac, 0x0}}], 0x40001b6, 0x114) close(0xffffffffffffffff) r5 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000280)=0x40000) ioctl$PPPIOCSMAXCID(r5, 0x40047451, &(0x7f0000000380)=0x31) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x1f, 0xb, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000040000000000000003000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x38, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xd, &(0x7f0000000540)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @printk={@ld={0x18, 0x0}, {}, {0x5}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}, {0x85, 0x0, 0x0, 0x34}}]}, &(0x7f0000000180)='syzkaller\x00', 0x6}, 0xea) 1.642046265s ago: executing program 2 (id=4473): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000440)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200487bd, &(0x7f0000000140)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='bic', 0x3) sendmmsg$inet(r0, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000580)="91f8a984851bdef38491bbc4173c3c6f357d028feff84ab17c417789f9fc9b8572c98172b7319130feaab952ac4703cad04be6890ee50e997fc26e0000ea4feb931647fc5393de25000000000000000000f4922da20bf1f802970c30f03cc271337e892c99bda9475d51361f8b78938a6a68ba85987219000000eb52c9ff439180b413ec4d4fe130b41d113ce7efb5e9838379c5a554eb896f7808d5904cd8da06fd5159085c9275f49e775e92fb106c2f10442d508891e58a3f117fc203f787901de99a6a1b851ff5c85244beacba25d854577d68ca555e88fc249340ab9bdd8680abbbde02b0307ef45cb7ffffffff984c7bbb7b", 0xf5}], 0x1}}], 0x1, 0x2090) writev(r0, &(0x7f0000000780)=[{&(0x7f00000007c0)="396cf87d08c5a180ab47bb5bf073f86e645bdcec1582ceaa94028bed754c6a0a9ee51723aba90ee33675431670f9548c745b3da48b83d07d7eccc4eb90a1e0e95fa8b02a190ec6899154b7410e1d84c95416f10bf24f7da37249ca1fa786f57c23ba93b389f5220c418523d836", 0x6d}, {0x0}], 0x2) 1.574915899s ago: executing program 1 (id=4474): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000019200)=@raw={'raw\x00', 0x8, 0x3, 0x470, 0x140, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3a0, 0xffffffff, 0xffffffff, 0x3a0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private2, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @inet=@rpfilter={{0x28}, {0x2}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x230, 0x260, 0x0, {}, [@common=@srh={{0x30}, {0x16, 0x7f, 0x8, 0x0, 0x8001, 0x10}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x7ff, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x3a0}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4d0) 1.527017767s ago: executing program 3 (id=4475): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x400000000010, 0x3, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) socket$netlink(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) epoll_create1(0x80000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket(0x28, 0x5, 0x0) socket$netlink(0x10, 0x3, 0xf) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', @ANYRES32=r0], 0x28}, 0x1, 0x4000000, 0x0, 0x24008821}, 0x802) 1.415657695s ago: executing program 1 (id=4476): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000180)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x2, @multicast1}, 0x10) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x2000000c, @loopback}, 0x20) sendmmsg(r1, &(0x7f0000000240), 0x0, 0x40300) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000280)=0x7, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1400000042000b06"], 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r3, 0x0, 0x8008000000010, &(0x7f00000000c0)="17000000020001000003be8c5ee17688a8003c00020300ecff3f000000030000020001000098fc5a53d3f5b7e4a96c6b02009da9c0f8d9485bbb6a880000d6c8db0000dba67e06000000e289c46f8ab8b4028a7a63c900000200df0180000000000100000000000080c457681f009cee4a5a2faa109066d68bdc36e2b68d8eec25a02aff9ee872a936786cf65dc1f39e0c9cfeba06011500394100000000000affff02dfccebf6ba00085d024f0298e9e90554062a80e605", 0xb8) recvmmsg(r2, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000008c0)=""/4096, 0x1000}], 0x1}, 0x6c74a33a}], 0x400000000000103, 0x10102, 0x0) recvmmsg(r0, &(0x7f00000002c0), 0x291962b, 0x45833af92e4b39ff, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40002, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffff}, 0x50) r5 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f0000000000)={{0x2, 0x4e21, @private=0xa010100}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}}, 0x8, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x16}}, 'veth0_to_batadv\x00'}) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000500)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000540)={r6, 0x10, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000005c0)=@bpf_lsm={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f00000006c0)='syzkaller\x00'}, 0x94) r8 = bpf$ITER_CREATE(0xb, &(0x7f0000000700)={r7}, 0x8) close(r8) socket$kcm(0x29, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000019c0)={'netpci0\x00', 0x4000}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x10, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000005086b43ff0007000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000001000000000095000000000000001d0af5ff00000000bf91000000000000b70200000000000085000000850000e64d478407e399f8009500"/97], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0xd}, 0x94) 1.414136441s ago: executing program 4 (id=4477): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) clock_gettime(0x2, &(0x7f0000000500)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000340)={0x1, 0x7fffffff, 0x80, 0x2, 0x9, 0xc, 0x1, 0x7fffffffffffffff}, &(0x7f0000000380)={0x80000001, 0xc1, 0x100000001, 0x1, 0x2, 0x9, 0x9, 0x9}, &(0x7f00000003c0)={0x0, 0x0, 0xf2a, 0x7, 0x8, 0x7f, 0x53, 0x19b}, &(0x7f0000000440)={r1, r2+60000000}, &(0x7f00000004c0)={&(0x7f0000000480)={[0x488]}, 0x8}) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f00000000c0)={0x3, &(0x7f0000000100)=[{0x20, 0x2, 0x81, 0xfffff038}, {0x20, 0xc3, 0x8, 0xffdff00c}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r5, 0x5, 0xb68, 0x560b0007, &(0x7f0000000300)="259a53f271a76d2686dd4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000000)=0x12, 0x4) ioctl$SIOCSIFHWADDR(r0, 0x89a3, &(0x7f0000000040)={'bridge0\x00', @random="1c00"}) 1.304529074s ago: executing program 2 (id=4478): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x275a, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x275a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x4, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="6a0afaff270f0000bfa200000000000007020000f0ffffffb70300000a000000b7040000ffffffffb70500000000000085000000550000001500020000000000bf01000000000000850000005600000095"], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x4, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="6a0afaff270f0000bfa200000000000007020000f0ffffffb70300000a000000b7040000ffffffffb70500000000000085000000550000001500020000000000bf01000000000000850000005600000095"], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={r2, 0x0, 0xe, 0x0, &(0x7f0000000780)='\x00'/14, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={r2, 0x0, 0xe, 0x0, &(0x7f0000000780)='\x00'/14, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r1, @ANYBLOB="06001500030000000c001680080001"], 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x10) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000007c0)=ANY=[@ANYBLOB="4c0000001200010003950000000100000a0900004001"], 0x4c}}, 0x0) (async) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000007c0)=ANY=[@ANYBLOB="4c0000001200010003950000000100000a0900004001"], 0x4c}}, 0x0) accept4$inet(r0, &(0x7f0000000140), &(0x7f0000000180)=0x10, 0x800) (async) accept4$inet(r0, &(0x7f0000000140), &(0x7f0000000180)=0x10, 0x800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x44081}, 0x800) r4 = socket(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f0000000180), 0x4000000000001f2, 0xfff0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000002c0)={0x98}) (async) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000002c0)={0x98}) mmap(&(0x7f000039f000/0x1000)=nil, 0x1000, 0x2000005, 0x11, r0, 0x9cc21000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r6) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r6) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000009c0)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000009c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a80)={0x2c, r7, 0x1, 0x72bd29, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x6, 0x1, [0x48, 0x1b]}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000ac0)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000ac0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TESTMODE(r4, &(0x7f0000000e80)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000e40)={&(0x7f0000000b00)={0x31c, r7, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_TESTDATA={0x6b, 0x45, "9229a53eaa7a1535ec3ee2d7ea9029e12bccea485cc670930bad53ccfd24625a39cc801f6436e1c18eec0ece6a1b8a38a574f0f1dafa2a573deed5b67d828caedcd0ba735f2f5945f6da5ffebb78e1c839cd9361bc12f833524ea2586e551752e17ce027e63e13"}, @NL80211_ATTR_TESTDATA={0x90, 0x45, "1534b7de2a3a4a1180fa2c3c6238255fadc95b8c5ca102e705f67167787965d8cbe816bf30b5b8094c75f01feaa394f1065a0de09af6bb54d802d3d6ca9721f81e0c055f7a8bbb2de186d80f5d5b2baa79a61b1f29864adbb76b42dec489749fc43de907c6da1404af6e980fc5357fce0cb40a12d1af67d1f27d09b0bb4d6500227a679c3af5076601e9ae11"}, @NL80211_ATTR_TESTDATA={0x7d, 0x45, "f94ebd6567b180e7de0b5d60e256bc25b1e6ffdbc5a4b77c3d2408633485475d62da47f35c7cd4a7b29848f2c455431d271b19e4197170b9ed0bdc4981397a0511a3b5ed5fba8869d52d09eab599312d8446353625d492a6948eb61a6c7c49e2f9e5554484e22cbfe990a1e817bc65e6483bc304af78a24a91"}, @NL80211_ATTR_TESTDATA={0xb2, 0x45, "6f73bcf12effba2a4fe071b02bfadb63091431b74a25e412ea07ed814d5f993467b26876f73a2664858633326c7eccbfe886de2883a57f428be66a89fb2bda59c610a58ddd144a85c9928261d11184c258062cb8bfb30655d063f9459c7afa535b30085bde161f21020a8446dcde3ce9fba3d3f46d38a7ab4802bde55991c11f43ff1ba10bd76a259a22a65240cd5b0287d2258d1655cb2e6c9a8d4ffc5e15de6b1e4411cb368a73ebfc0568fc91"}, @NL80211_ATTR_TESTDATA={0xd0, 0x45, "7fcc6cad652f7d06963d499ed72e108d8a69315fd77c8bd43573bb7d7c7b3d133cc964f7bbab98826fe3753999c0aeec73e19feac893d2718e04fca52a0ec5cf9da14a52bfca96e46ee63b1ec02015bce369e55964d87d3bdcc00079e615e8ace208fae4818ccf4766a97d6811e5e5ec2baa543e58e0e14d7f08d77afda17ffbd7b44c1f98d8d5d68bdbd3e412ca03be506ae49367ec7a9d6087400f10a43be0d7ee9544b106f5bb8731be4d1de463cebba7b9fcc637db72ab7545e36a1a60bd14e762951222f527dbcee496"}]}, 0x31c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000800) r10 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r10, &(0x7f0000000280)=[{{&(0x7f0000000300)={0x2, 0x4e20, @empty}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000380)="fa7a", 0x2}], 0x1}}], 0x1, 0x8890) r11 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000840), 0x5400, 0x0) ioctl$PPPIOCGIDLE(r11, 0x8010743f, &(0x7f0000000800)) r12 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$int_in(r12, 0x5452, &(0x7f0000000880)=0xffffffffffffffff) poll(&(0x7f0000000940)=[{r12, 0x10}], 0x1, 0xfffff800) setsockopt(r12, 0x1, 0x7, &(0x7f0000000980)="c04bfa0a", 0x4) sendmsg$NFT_BATCH(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000068000000060a010400000000000000000100000008000b4000000000400004802800018007000100637400001c000280080001400000000108000240000000090500030000000000140001800a0001007265646972000000040002800900010073797a30"], 0xdc}, 0x1, 0x0, 0x0, 0x4005094}, 0x4000000) setsockopt$sock_int(r5, 0x1, 0x2f, &(0x7f0000000540)=0x4, 0x4) (async) setsockopt$sock_int(r5, 0x1, 0x2f, &(0x7f0000000540)=0x4, 0x4) 1.22239913s ago: executing program 3 (id=4479): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001300)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x6, 0x10, &(0x7f0000001400)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x4000}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x6, 0x0, 0x0, 0xffffff1f}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x2}}, [@alu={0x4, 0x1, 0x2, 0x8, 0x9}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000001480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.087358686s ago: executing program 1 (id=4480): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0xf, 0x6, 0x400}, 0x10) (async) write(r1, &(0x7f0000000040)="1c0000001a009b8a140000003b00"/28, 0x1c) (async) recvmmsg(r1, &(0x7f0000000080), 0x400000000000ec0, 0x2, &(0x7f00000000c0)={0x77359400}) (async, rerun: 64) sendmsg$nl_xfrm(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0xfffffffd, 0x25dfdbff, {{@in6=@mcast1, @in=@remote, 0x4e20, 0xb, 0xf7ff, 0x0, 0xa, 0xe0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x400000000000000, 0x0, 0xffffffffffffffff, 0x1000}, {0x1, 0x6, 0x80}, 0xfffffffc}}, 0xb8}, 0x1, 0x0, 0x0, 0x20006854}, 0x800) (rerun: 64) 1.028252485s ago: executing program 3 (id=4481): syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x9c, 0x0, @wg}}}}}, 0x0) syz_emit_ethernet(0x9e, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x7c, 0x0, @wg=@data={0x4, 0x0, 0x0, '\x00'/100}}}}}}, 0x0) 833.31652ms ago: executing program 3 (id=4482): r0 = socket$kcm(0x23, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0xa, &(0x7f0000000000), 0x75) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x541b, &(0x7f0000000180)={r0}) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x40) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000001c00), r1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000001dc0), 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000001e00)={'syzkaller1\x00', 0x5001}) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000780)=0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000002e80)={0x0, 0x0, &(0x7f0000002ec0)={&(0x7f0000002f00)=ANY=[], 0x18}}, 0x0) recvmmsg(r4, &(0x7f0000002f40)=[{{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f0000002fc0)=""/97, 0x61}, {&(0x7f0000003040)=""/216, 0xd8}, {0x0}, {&(0x7f0000003140)=""/4096, 0x1000}], 0x4}, 0x257a}], 0x1, 0x20, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000004140)={'syzkaller1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000004180)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40, r6}) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000041c0)={'syzkaller1\x00', 0x41}) bind$inet6(r5, &(0x7f0000004200)={0xa, 0x60e6, 0x4003, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) write$tun(r3, &(0x7f0000004240)=ANY=[@ANYBLOB="010530000a00280006000000600000000030114020010000000000000000000000000001200100000000000000000000000000024e2060e6"], 0x64) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x24040800) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, 0x0, &(0x7f0000004280)) sendmsg$NL80211_CMD_LEAVE_IBSS(r2, 0x0, 0x408c0) r8 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$bt_BT_SNDMTU(r8, 0x112, 0xc, 0x0, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x1, &(0x7f0000000080)=ANY=[@ANYRES32=r7], &(0x7f0000000740)='syzkaller\x00', 0x9, 0xffe, &(0x7f0000001e40)=""/4094, 0x0, 0x64, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x26}, 0x94) sendmsg$kcm(r0, &(0x7f00000018c0)={&(0x7f0000000100)=@tipc=@id={0x1e, 0x3, 0x0, {0x4e23, 0x2}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000001c0)="469bca25d420af21eb250f3514324d5d20f6b1fdf33085ea619a3a21b1433cee8709d39c68909ab4f213b52e7bc88ec6601532caa05f0ffb10ef9ebb019f5519", 0x40}, {&(0x7f0000000200)="7e6461839574a5fc698b0fde6b912f9c36bdb7481a2ecd1afaeb68aa96eafc7af0367701eb33c45fe58e536409415e47b199765ee0aa015093c421b595c0a1503b74687539ac303158d371209b88bff88e411ffe0c1d08", 0x57}, {&(0x7f0000000280)="493fa10d11e21f1ea319ca011fe9067a9738210e852e7be08b62082cbbb2b391677b3e2b4ff7ed9c80c7e1210c796fbbd9ce5b54efff9f6e411153192884cac9026a4f72dc038997eb567f0ee664483beaefab0277360af22d850a9db6d1004e32c41def0f1705fb198ba1fad68b80541ab6999072f5cf3cfd494d", 0x7b}, {&(0x7f0000000340)="88d0be19ab50e95aca1c96c4df746b4ce377f7faae939541d2adec0a4e27f9cc6e85ffcc379cd34b3bbad94ecae496a1f742d606b9de37f884757cc52efd450c72533e879ba4a25881d7c2fc9848c735b2a541fdf8b38f6d1d2a0d304ce38055c00c2d4f4dd8dbe864c10888e7f4bf58ea4acd412c9d8c501d8ea876d05d9d5cbd113a688f0d0b407bcbd2fec6a9b5a52eb57ff633ffda687b6a93814d36dea7efd2c132d5248909fd29ede23fc1ffe78e968428f340cd634669f598fcff", 0xbe}, {&(0x7f0000000400)="0dea5da128464c1b451445e15bbbc3eb87dea5521d913e19b806c3048b0b1537bfc805023f0080169fea91488de22981d550f0ca28dbcf4ae9f0d7b7f63ff8267a74f43595f830eb6bd053e266dc651a04a133eb91579eafd902f1cf9ef537c6251b3733622884a5d89d0573b860a4587ff964237119072e4df3199465aebb7618f2f8f2deed6c0db6c3dae524af4200a2d928e836dec409c513b184a21c649d4240f6f00c68", 0xa6}, {&(0x7f00000004c0)="b9d39061154bf6201c285f3c7697ea04162226354b3ebd4ccd63b6d299f5dc2c6d130800f9d419745a54965d28052be47568e9c223a5dba6b76a29f75ebff7cecf9cc2ac7e90416631a1dcd7741dce1edf82a2e1113b5cf70bbed523722536b88a9021bcf80fe4c50bf67ba93b04cf6485b553f23ddbe28ea0a8a7710797b8b1f028d189ba86f5c222d131bdf2b4117d1a28bd9785cfc5019d3212d6a14a8a24b84b2ca6f5de66678bc80e5d19c3f9edd51fc5be6a66fc065b2142d2f6a0d999c9adf447d4002af4ab25d5ea3329d2d79cbbf583cf659f710b9a5ffafc995c48038caa075b7e", 0xe6}, {&(0x7f00000005c0)="40361df1d4c7251b20507be23713bebc8479d190a8e09f8af326efeeffdc943def8a854e3a6cd5f007fb8a2d83d0f5ec54c53388b151c452e006bcd6438094538641edca1d6b58f29b114d0c6c2757fcf5f939b5aadceee10db1b1f8d54b1da3af", 0x61}, {&(0x7f0000000640)="7cea04ff1b7f42013f9d6eb57e79b7c0d8ded6a7c677623afc852a39385b617390b4de2f5beebf18b5211e2d9b0487eab6d0a2634b5f08986c906184d3a882d982024c323e5fb031a959b7f4f8f5bac7efddfe6059eabc7f14654a2a9073df3ae8b47fbcb4", 0x65}], 0x8, &(0x7f00000042c0)=ANY=[@ANYBLOB="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"], 0x1038}, 0xc000) 832.886634ms ago: executing program 1 (id=4483): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100d0000000fbdbdf25010000001800018014000200766574683100000000000000000000001c0002800c00018008000100030000160c000180080001"], 0x48}, 0x1, 0x0, 0x0, 0x850}, 0x4008800) 715.131466ms ago: executing program 1 (id=4484): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0xa, 0x3, 0xff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$sock(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000006c0)="3000000013000500000000000000000003010000100002007664706173696d5f626c6b000a0004007664706130000000", 0x30}], 0x1}, 0x0) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f00000008c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000880)={&(0x7f0000000780)={0xf8, r3, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_SECCTX={0x20, 0x7, 'system_u:object_r:ptmx_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:mount_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_SECCTX={0x22, 0x7, 'system_u:object_r:shadow_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010100}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_SECCTX={0x22, 0x7, 'system_u:object_r:hwdata_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'pimreg\x00'}]}, 0xf8}, 0x1, 0x0, 0x0, 0x2000c000}, 0x4004800) setsockopt$inet6_int(r1, 0x29, 0x5, &(0x7f0000000540)=0xfffffff9, 0x4) syz_emit_ethernet(0x4e, &(0x7f0000000580)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fe800000000000000000000000000025fe8000000000000000000000000000aaff"], 0x0) setsockopt$inet6_int(r1, 0x29, 0x4, &(0x7f00000005c0)=0x6568, 0x4) recvmmsg(r1, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x40010060, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050000000900010073797a30000000002c000000030a01010000000000000000050000000900010073797a30000000000900030073797a300000000078000000060a010400000000000000000500000008000b400000000050000480240001800b00010074756e6e656c000014000280080001400000000108000240000000092800018008000100667764001c0002800800024000000017080003400000000a08000140000000090900010073797a3000"], 0xec}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x8, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x2, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000300)='GPL\x00'}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000004000000020000000000001103000000ffffffff00000000000000020000000002000000000000080200000000005f"], 0x0, 0x44}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x14, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, r4, 0x0, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[], 0x48) socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001a140100000000000000000008000300000000000800", @ANYRES64=r5], 0x20}, 0x1, 0x0, 0x0, 0x4000015}, 0x0) 576.452247ms ago: executing program 4 (id=4485): ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f00000029c0)={{0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x42c040, &(0x7f0000000040)={@_ha_fsid={[0x6, 0x10000]}, {0x5, 0x4, 0x3}}, 0xf2, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0x56}, 0x8, &(0x7f00000028c0)=[{0x3, 0x2, &(0x7f00000001c0)='{\x00', &(0x7f00000002c0)="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", 0x1000, 0x22}, {0x2, 0x8, &(0x7f00000012c0)='[!\x00', &(0x7f0000001300)="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", 0x1000, 0x30}, {0x3, 0x8, &(0x7f0000002300)='\x00', &(0x7f0000002340)="af96f47e09fae5e9308a29777ba0fd912573a34d473f4e31d05951f4977081bcbb59b720b3fc99c7206b6a781edd46e27d4a17ff1114d1da3723fb41f2c5cad54ca495d1978373b1e58e1762ee22a85bed53205bd2a84df4717a615e125764bcfecc766720371c79f7dced980ee5a2a27a0c6a32ecf09e832dd495cdf2fbab1f62bfc77277ef08c5ff705d25eea4e3ddae61d97b31055890082d1b6ac0631750dab49091ccda389e24ced8bf3d32524a22f7d5e2fe3e045243b89d7b14a9afb7f37d", 0xc2, 0x10}, {0x3, 0x6, &(0x7f0000002440)='GPL\x00', &(0x7f0000002480)="ebccc4c10c381c07a0afe4b0859509d44cec2d3076d872339759191f1a246f319325ace5251eeb7016f6493bdc76192ba527a249f49e02f4eb23923b49bc36944be4b8db9979e809942ed9975b72330b27315c52e6acd8cbd89ff28faf99f22e9521aac3093318190a3fb4690be0780d3a0a9cd107e57d292e3ab2ef46b33b92", 0x80, 0x1a}, {0x2, 0x9, &(0x7f0000002500)='GPL\x00', &(0x7f0000002540)="e05a0ee235aa4f386dee8cd1b5d4ad577b48070884322ccaee4eb1034402c65481add2a5987ecf2f202b2a923c01c4921c6afb018219ae7bd94d2f2dfb290e902ea3029ffebbd3c51c5386fd220ba42de570802dff1fd245a868beb6778999439e5bd4", 0x63, 0x2a}, {0x3, 0x3, &(0x7f00000025c0)='GPL\x00', &(0x7f0000002600)="96dde805962e6cf0b002caa99ae6db5c56fc03b3dcbaa21538ba3c0583b6435f024f67cb8975f32cd079772d20f52f971ca4ad9d030675d1f03ebb68f21a6b6e40a909edce793cd1df9174d170eada65", 0x50, 0x32}, {0x2, 0x9, &(0x7f0000002680)='GPL\x00', &(0x7f00000026c0)="3a31448dd52b7c655e0c3cadd40f49f1d02c093b63b867ab2b17433a7fdc1ab1ee10514bd57c12cf4ad22cbf7b8dcc8284ed9de586afe47a778aface4e07786f841f4887b8b4ace3980fc1c740d9bc824186fc3b8af5350c7ec90e59e7d5ac4850b54f6417a2066c1c3b1185a05d4ed1878572eec18ed2027a3e7329aa3e34056fdb35a680", 0x85, 0x2}, {0x3, 0x6, &(0x7f0000002780)='GPL\x00', &(0x7f00000027c0)="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", 0xfa}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002a40)={0x18, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180500000000000000000000000000001800000020696c2500000000002020207b0af8ff00000000bd510000000000000701000000feffffb702000008000000b703000000000000850000001900000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0xd6, &(0x7f0000003e40)=""/214}, 0x94) socket$nl_route(0x10, 0x3, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r0, 0x80286722, &(0x7f0000000240)={&(0x7f0000000200)}) 466.352749ms ago: executing program 4 (id=4486): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc0000000000000000000000000000000000000000000000000080ffffffffff", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0) 222.276294ms ago: executing program 4 (id=4487): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x6}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x80}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000400)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="000086dd0000110000080000000060ec970005382c00fe8000000000000000000000000000aaff0200000000000000000080080000013a"], 0x6e) 182.477563ms ago: executing program 2 (id=4488): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000440)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200487bd, &(0x7f0000000140)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='bic', 0x3) sendmmsg$inet(r0, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000580)="91f8a984851bdef38491bbc4173c3c6f357d028feff84ab17c417789f9fc9b8572c98172b7319130feaab952ac4703cad04be6890ee50e997fc26e0000ea4feb931647fc5393de25000000000000000000f4922da20bf1f802970c30f03cc271337e892c99bda9475d51361f8b78938a6a68ba85987219000000eb52c9ff439180b413ec4d4fe130b41d113ce7efb5e9838379c5a554eb896f7808d5904cd8da06fd5159085c9275f49e775e92fb106c2f10442d508891e58a3f117fc203f787901de99a6a1b851ff5c85244beacba25d854577d68ca555e88fc249340ab9bdd8680abbbde02b0307ef45cb7ffffffff984c7bbb7b", 0xf5}], 0x1}}], 0x1, 0x2090) writev(r0, &(0x7f0000000780)=[{&(0x7f00000007c0)="396cf87d08c5a180ab47bb5bf073f86e645bdcec1582ceaa94028bed754c6a0a9ee51723aba90ee33675431670f9548c745b3da48b83d07d7eccc4eb90a1e0e95fa8b02a190ec6899154b7410e1d84c95416f10bf24f7da37249ca1fa786f57c23ba93b389f5220c418523d836", 0x6d}, {0x0}], 0x2) 0s ago: executing program 2 (id=4489): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, 0x41, 0x107, 0x70bd30, 0x25dfdbfe, {0x2, 0x7c}, [@nested={0x4, 0xa3}, @nested={0x4, 0x1}, @nested={0xc, 0x9, 0x0, 0x1, [@typed={0x8, 0x33, 0x0, 0x0, @uid}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@enum64={0x6, 0x0, 0x0, 0x13, 0x0, 0x7}]}, {0x0, [0x2e, 0x71, 0x0, 0x5f, 0x5f]}}, 0x0, 0x2b, 0x0, 0x1, 0x6abb}, 0x28) r2 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f00000004c0)={0x6, {{0xa, 0x4e21, 0x75, @mcast2, 0x72}}, 0x1, 0x1, [{{0xa, 0x4e22, 0x9, @loopback, 0xfffffffb}}]}, 0x110) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="06000000040000000800000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x6, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r3, @ANYBLOB="0000000000000000790200000000000095"], &(0x7f0000000780)='syzkaller\x00'}, 0x90) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=@newtaction={0x18, 0x30, 0xffff, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f0000000880)={'filter\x00', 0x0, 0x4, 0x1000, [0x7, 0x3, 0x1, 0x4, 0x1, 0x9], 0x3, &(0x7f0000000900)=[{}, {}, {}], &(0x7f0000000e40)=""/4096}, &(0x7f0000001e40)=0x78) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000001e80)={&(0x7f0000001ec0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001f00)={&(0x7f0000001f40)=@getnetconf={0x14, 0x52, 0xc02, 0x70bd2c, 0x25dfdbfb, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000004) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f80), r2) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000001fc0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_INTERFACE(r2, &(0x7f0000002000)={&(0x7f0000002040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002080)={&(0x7f00000020c0)={0x28, r6, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0xc, 0x2b}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0xc000}, 0x4001) r8 = socket(0x10, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000002100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002140)=0x14) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$x25(0x9, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000002180)=@base={0xf, 0x4, 0x4, 0x1}, 0x48) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000002200)=ANY=[@ANYBLOB="220000000400000010"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002240)={{r10, 0xffffffffffffffff}, &(0x7f0000002280), &(0x7f00000022c0)=r10}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000002300)={r10}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002340)={0x3, 0x8, &(0x7f0000002400)=ANY=[@ANYBLOB="18070000000000000000000000800000851000000300000018110000", @ANYRES32=r11, @ANYBLOB], &(0x7f0000002440)='GPL\x00', 0x2, 0x0, 0x0, 0x41000}, 0x94) sendmsg$nl_route(r8, &(0x7f0000002480)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000002500)=ANY=[@ANYBLOB="4400000010003704000080000000000000000000", @ANYRES32=r9, @ANYBLOB="c324050000000000240012800b00010067656e65766500001400028005000c0001"], 0x44}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmsg$inet(r5, &(0x7f0000002540)={&(0x7f0000002580)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}, 0x200000e0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000002600)={0x0, 0x0, &(0x7f0000002640)={&(0x7f0000002680)=ANY=[@ANYBLOB="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"], 0x248}}, 0x0) close(r0) kernel console output (not intermixed with test programs): 29951][T20142] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 502.730247][T20142] Node 1 Normal: 1*4kB (M) 2*8kB (UM) 5*16kB (UM) 8*32kB (UM) 7*64kB (UM) 5*128kB (UM) 4*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 1*2048kB (U) 959*4096kB (M) = 3937188kB [ 502.730547][T20142] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 502.734762][T20142] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 502.734825][T20142] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 502.734886][T20142] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 502.734939][T20142] 44241 total pagecache pages [ 502.734962][T20142] 0 pages in swap cache [ 502.734991][T20142] Free swap = 124996kB [ 502.735014][T20142] Total swap = 124996kB [ 502.735039][T20142] 2097051 pages RAM [ 502.735061][T20142] 0 pages HighMem/MovableOnly [ 502.735082][T20142] 433592 pages reserved [ 502.735104][T20142] 0 pages cma reserved [ 504.177492][T20186] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.217996][T20189] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3944'. [ 504.285814][T20189] 8021q: adding VLAN 0 to HW filter on device bond13 [ 504.315536][T20189] macvlan7: entered promiscuous mode [ 504.315561][T20189] bond13: entered promiscuous mode [ 504.315738][T20189] macvlan7: entered allmulticast mode [ 504.315754][T20189] bond13: entered allmulticast mode [ 504.316816][T20189] 8021q: adding VLAN 0 to HW filter on device macvlan7 [ 504.348034][T20189] bond13: left allmulticast mode [ 504.348082][T20189] bond13: left promiscuous mode [ 504.525215][T20201] xfrm2: entered allmulticast mode [ 504.860529][T20220] FAULT_INJECTION: forcing a failure. [ 504.860529][T20220] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 504.860566][T20220] CPU: 1 UID: 0 PID: 20220 Comm: syz.0.3950 Not tainted syzkaller #0 PREEMPT(full) [ 504.860600][T20220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 504.860615][T20220] Call Trace: [ 504.860624][T20220] [ 504.860636][T20220] dump_stack_lvl+0xe8/0x150 [ 504.860674][T20220] should_fail_ex+0x410/0x560 [ 504.860711][T20220] _copy_to_user+0x31/0xb0 [ 504.860749][T20220] bpf_verifier_vlog+0x3a2/0x900 [ 504.860788][T20220] bpf_verifier_log_write+0x11d/0x1a0 [ 504.860821][T20220] ? __pfx_bpf_verifier_log_write+0x10/0x10 [ 504.860855][T20220] ? bpf_verifier_log_write+0x11d/0x1a0 [ 504.860884][T20220] print_verifier_state+0x1f5/0x1a40 [ 504.860914][T20220] ? __pfx_bpf_verifier_log_write+0x10/0x10 [ 504.860952][T20220] ? __pfx_print_verifier_state+0x10/0x10 [ 504.860977][T20220] ? bpf_vlog_reset+0x2aa/0x340 [ 504.861005][T20220] ? print_insn_state+0x106/0x170 [ 504.861034][T20220] do_check_insn+0xa2bc/0x17d00 [ 504.861084][T20220] ? lock_acquire+0x115/0x350 [ 504.861120][T20220] ? __pfx_do_check_insn+0x10/0x10 [ 504.861164][T20220] ? _copy_to_user+0x8a/0xb0 [ 504.861200][T20220] ? bpf_verifier_vlog+0x55a/0x900 [ 504.861227][T20220] ? __pfx_verbose+0x10/0x10 [ 504.861257][T20220] ? verbose+0x11d/0x1a0 [ 504.861279][T20220] ? __pfx_bpf_verifier_log_write+0x10/0x10 [ 504.861307][T20220] ? __pfx_verbose+0x10/0x10 [ 504.861339][T20220] ? print_insn_state+0x135/0x170 [ 504.861374][T20220] do_check_common+0x364c/0x5610 [ 504.861448][T20220] ? __pfx_do_check_common+0x10/0x10 [ 504.861478][T20220] ? __pfx_verbose+0x10/0x10 [ 504.861498][T20220] ? __pfx_bpf_disasm_kfunc_name+0x10/0x10 [ 504.861536][T20220] do_check_main+0xa2/0x1f0 [ 504.861568][T20220] bpf_check+0x2775/0x2ef0 [ 504.861621][T20220] ? __pfx_bpf_check+0x10/0x10 [ 504.861651][T20220] ? bpf_obj_name_cpy+0x194/0x1e0 [ 504.861690][T20220] bpf_prog_load+0x14d6/0x1c20 [ 504.861732][T20220] ? __pfx_bpf_prog_load+0x10/0x10 [ 504.861789][T20220] __sys_bpf+0xd0d/0xd90 [ 504.861827][T20220] ? __pfx___sys_bpf+0x10/0x10 [ 504.861867][T20220] ? __fget_files+0x2a/0x420 [ 504.861922][T20220] ? ksys_write+0x242/0x270 [ 504.861949][T20220] ? __pfx_ksys_write+0x10/0x10 [ 504.861977][T20220] __x64_sys_bpf+0xba/0xd0 [ 504.862005][T20220] do_syscall_64+0x166/0x520 [ 504.862038][T20220] ? trace_irq_disable+0x3b/0x140 [ 504.862062][T20220] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.862086][T20220] ? clear_bhb_loop+0x70/0xc0 [ 504.862114][T20220] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.862148][T20220] RIP: 0033:0x7f8f3b79f559 [ 504.862171][T20220] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 504.862191][T20220] RSP: 002b:00007f8f3c741028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 504.862215][T20220] RAX: ffffffffffffffda RBX: 00007f8f3ba25fa0 RCX: 00007f8f3b79f559 [ 504.862233][T20220] RDX: 0000000000000070 RSI: 0000200000000100 RDI: 0000000000000005 [ 504.862247][T20220] RBP: 00007f8f3c741090 R08: 0000000000000000 R09: 0000000000000000 [ 504.862262][T20220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 504.862275][T20220] R13: 00007f8f3ba26038 R14: 00007f8f3ba25fa0 R15: 00007fff78f282d8 [ 504.862312][T20220] [ 505.291314][T20226] FAULT_INJECTION: forcing a failure. [ 505.291314][T20226] name failslab, interval 1, probability 0, space 0, times 0 [ 505.291350][T20226] CPU: 1 UID: 0 PID: 20226 Comm: syz.0.3953 Not tainted syzkaller #0 PREEMPT(full) [ 505.291377][T20226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 505.291390][T20226] Call Trace: [ 505.291400][T20226] [ 505.291410][T20226] dump_stack_lvl+0xe8/0x150 [ 505.291449][T20226] should_fail_ex+0x410/0x560 [ 505.291487][T20226] should_failslab+0xa8/0x100 [ 505.291522][T20226] __kmalloc_node_noprof+0x100/0x720 [ 505.291548][T20226] ? __get_vm_area_node+0x200/0x2f0 [ 505.291582][T20226] ? __get_vm_area_node+0x283/0x2f0 [ 505.291615][T20226] ? __vmalloc_node_range_noprof+0x5b4/0x1540 [ 505.291638][T20226] ? __vmalloc_node_range_noprof+0x5b4/0x1540 [ 505.291670][T20226] __vmalloc_node_range_noprof+0x5b4/0x1540 [ 505.291712][T20226] ? lruvec_stat_mod_folio+0x6e/0x3e0 [ 505.291762][T20226] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 505.291789][T20226] ? apparmor_capable+0x126/0x170 [ 505.291818][T20226] ? bpf_lsm_capable+0x9/0x20 [ 505.291841][T20226] ? security_capable+0x7e/0x2c0 [ 505.291875][T20226] ? bpf_check+0x115b/0x2ef0 [ 505.291901][T20226] __vmalloc_noprof+0xd2/0x120 [ 505.291928][T20226] ? bpf_check+0x115b/0x2ef0 [ 505.291958][T20226] bpf_check+0x115b/0x2ef0 [ 505.292013][T20226] ? __pfx_bpf_check+0x10/0x10 [ 505.292043][T20226] ? bpf_obj_name_cpy+0x194/0x1e0 [ 505.292083][T20226] bpf_prog_load+0x14d6/0x1c20 [ 505.292126][T20226] ? __pfx_bpf_prog_load+0x10/0x10 [ 505.292202][T20226] __sys_bpf+0xd0d/0xd90 [ 505.292240][T20226] ? __pfx___sys_bpf+0x10/0x10 [ 505.292280][T20226] ? __fget_files+0x2a/0x420 [ 505.292336][T20226] ? ksys_write+0x242/0x270 [ 505.292362][T20226] ? __pfx_ksys_write+0x10/0x10 [ 505.292392][T20226] __x64_sys_bpf+0xba/0xd0 [ 505.292420][T20226] do_syscall_64+0x166/0x520 [ 505.292452][T20226] ? trace_irq_disable+0x3b/0x140 [ 505.292476][T20226] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.292500][T20226] ? clear_bhb_loop+0x70/0xc0 [ 505.292529][T20226] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.292552][T20226] RIP: 0033:0x7f8f3b79f559 [ 505.292574][T20226] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 505.292594][T20226] RSP: 002b:00007f8f3c741028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 505.292618][T20226] RAX: ffffffffffffffda RBX: 00007f8f3ba25fa0 RCX: 00007f8f3b79f559 [ 505.292634][T20226] RDX: 0000000000000094 RSI: 0000200000001340 RDI: 0000000000000005 [ 505.292649][T20226] RBP: 00007f8f3c741090 R08: 0000000000000000 R09: 0000000000000000 [ 505.292663][T20226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 505.292677][T20226] R13: 00007f8f3ba26038 R14: 00007f8f3ba25fa0 R15: 00007fff78f282d8 [ 505.292713][T20226] [ 505.864159][T20235] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3956'. [ 505.903682][T20235] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 506.295546][T20246] TC_ACT_REPEAT abuse ? [ 506.635833][T20258] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3964'. [ 506.721977][T20263] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3965'. [ 506.760447][T20268] netlink: 'syz.4.3968': attribute type 7 has an invalid length. [ 507.059203][T20279] syzkaller0: entered promiscuous mode [ 507.059230][T20279] syzkaller0: entered allmulticast mode [ 507.165143][T20286] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3974'. [ 507.192729][T20279] geneve0: Caught tx_queue_len zero misconfig [ 507.233882][T20286] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3974'. [ 507.258657][ T31] audit: type=1804 audit(1792631850.757:11): pid=20291 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.3974" name="/newroot/761/cgroup.controllers" dev="tmpfs" ino=3883 res=1 errno=0 [ 507.259119][ T31] audit: type=1800 audit(1792631850.757:12): pid=20291 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3974" name="cgroup.controllers" dev="tmpfs" ino=3883 res=0 errno=0 [ 507.265037][T20294] FAULT_INJECTION: forcing a failure. [ 507.265037][T20294] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 507.265069][T20294] CPU: 1 UID: 0 PID: 20294 Comm: syz.1.3976 Not tainted syzkaller #0 PREEMPT(full) [ 507.265092][T20294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 507.265106][T20294] Call Trace: [ 507.265115][T20294] [ 507.265125][T20294] dump_stack_lvl+0xe8/0x150 [ 507.265162][T20294] should_fail_ex+0x410/0x560 [ 507.265193][T20294] _copy_to_user+0x31/0xb0 [ 507.265226][T20294] bpf_verifier_vlog+0x3a2/0x900 [ 507.265261][T20294] bpf_verifier_log_write+0x11d/0x1a0 [ 507.265286][T20294] ? __pfx_bpf_verifier_log_write+0x10/0x10 [ 507.265317][T20294] ? bpf_verifier_log_write+0x11d/0x1a0 [ 507.265343][T20294] print_verifier_state+0x1e6/0x1a40 [ 507.265368][T20294] ? __pfx_bpf_verifier_log_write+0x10/0x10 [ 507.265399][T20294] ? __pfx_print_verifier_state+0x10/0x10 [ 507.265438][T20294] ? print_insn_state+0x135/0x170 [ 507.265462][T20294] do_check_common+0x2770/0x5610 [ 507.265528][T20294] ? __pfx_do_check_common+0x10/0x10 [ 507.265567][T20294] do_check_main+0xa2/0x1f0 [ 507.265594][T20294] bpf_check+0x2775/0x2ef0 [ 507.265632][T20294] ? __pfx_bpf_check+0x10/0x10 [ 507.265658][T20294] ? bpf_obj_name_cpy+0x194/0x1e0 [ 507.265694][T20294] bpf_prog_load+0x14d6/0x1c20 [ 507.265733][T20294] ? __pfx_bpf_prog_load+0x10/0x10 [ 507.265784][T20294] __sys_bpf+0xd0d/0xd90 [ 507.265842][T20294] ? __pfx___sys_bpf+0x10/0x10 [ 507.265880][T20294] ? __fget_files+0x2a/0x420 [ 507.265933][T20294] ? ksys_write+0x242/0x270 [ 507.265959][T20294] ? __pfx_ksys_write+0x10/0x10 [ 507.265986][T20294] __x64_sys_bpf+0xba/0xd0 [ 507.266014][T20294] do_syscall_64+0x166/0x520 [ 507.266044][T20294] ? trace_irq_disable+0x3b/0x140 [ 507.266067][T20294] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.266090][T20294] ? clear_bhb_loop+0x70/0xc0 [ 507.266118][T20294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.266141][T20294] RIP: 0033:0x7f64a3b9f559 [ 507.266162][T20294] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 507.266181][T20294] RSP: 002b:00007f64a4a4f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 507.266205][T20294] RAX: ffffffffffffffda RBX: 00007f64a3e25fa0 RCX: 00007f64a3b9f559 [ 507.266222][T20294] RDX: 0000000000000070 RSI: 0000200000000100 RDI: 0000000000000005 [ 507.266237][T20294] RBP: 00007f64a4a4f090 R08: 0000000000000000 R09: 0000000000000000 [ 507.266251][T20294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 507.266264][T20294] R13: 00007f64a3e26038 R14: 00007f64a3e25fa0 R15: 00007ffd57fdc7b8 [ 507.266299][T20294] [ 507.315564][ T87] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 507.316308][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 507.734789][T20288] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3975'. [ 507.802474][T20296] can: request_module (can-proto-0) failed. [ 508.020581][T20312] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3979'. [ 508.020849][T20311] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3979'. [ 508.632187][T20346] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.649245][T20346] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3986'. [ 508.721970][T20349] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3986'. [ 508.803433][T20349] syz_tun: left promiscuous mode [ 508.952085][T20349] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 509.266694][T20363] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3991'. [ 509.574514][T20385] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3996'. [ 509.990551][T20402] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4000'. [ 510.244526][T20409] netlink: 'syz.3.4002': attribute type 17 has an invalid length. [ 510.361200][T20413] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4004'. [ 510.805169][T20428] batman_adv: batadv0: Adding interface: syz_tun [ 510.805189][T20428] batman_adv: batadv0: The MTU of interface syz_tun is too small (1282) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 510.805224][T20428] batman_adv: batadv0: Interface activated: syz_tun [ 511.591434][T20458] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4016'. [ 511.643453][T20463] FAULT_INJECTION: forcing a failure. [ 511.643453][T20463] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 511.643490][T20463] CPU: 1 UID: 0 PID: 20463 Comm: syz.4.4017 Not tainted syzkaller #0 PREEMPT(full) [ 511.643520][T20463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 511.643535][T20463] Call Trace: [ 511.643545][T20463] [ 511.643555][T20463] dump_stack_lvl+0xe8/0x150 [ 511.643593][T20463] should_fail_ex+0x410/0x560 [ 511.643633][T20463] _copy_to_user+0x31/0xb0 [ 511.643671][T20463] bpf_verifier_vlog+0x3a2/0x900 [ 511.643709][T20463] verbose+0x11d/0x1a0 [ 511.643740][T20463] ? __pfx_verbose+0x10/0x10 [ 511.643765][T20463] ? bpf_push_jmp_history+0x27d/0x6d0 [ 511.643804][T20463] do_check_common+0x27f5/0x5610 [ 511.643878][T20463] ? __pfx_do_check_common+0x10/0x10 [ 511.643908][T20463] ? __pfx_verbose+0x10/0x10 [ 511.643929][T20463] ? __pfx_bpf_disasm_kfunc_name+0x10/0x10 [ 511.643967][T20463] do_check_main+0xa2/0x1f0 [ 511.643996][T20463] bpf_check+0x2775/0x2ef0 [ 511.644039][T20463] ? __pfx_bpf_check+0x10/0x10 [ 511.644079][T20463] ? bpf_obj_name_cpy+0x194/0x1e0 [ 511.644117][T20463] bpf_prog_load+0x14d6/0x1c20 [ 511.644158][T20463] ? __pfx_bpf_prog_load+0x10/0x10 [ 511.644216][T20463] __sys_bpf+0xd0d/0xd90 [ 511.644254][T20463] ? __pfx___sys_bpf+0x10/0x10 [ 511.644295][T20463] ? __fget_files+0x2a/0x420 [ 511.644350][T20463] ? ksys_write+0x242/0x270 [ 511.644378][T20463] ? __pfx_ksys_write+0x10/0x10 [ 511.644407][T20463] __x64_sys_bpf+0xba/0xd0 [ 511.644436][T20463] do_syscall_64+0x166/0x520 [ 511.644467][T20463] ? trace_irq_disable+0x3b/0x140 [ 511.644491][T20463] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.644514][T20463] ? clear_bhb_loop+0x70/0xc0 [ 511.644542][T20463] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.644566][T20463] RIP: 0033:0x7f691759f559 [ 511.644588][T20463] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 511.644609][T20463] RSP: 002b:00007f69184a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 511.644634][T20463] RAX: ffffffffffffffda RBX: 00007f6917825fa0 RCX: 00007f691759f559 [ 511.644650][T20463] RDX: 0000000000000070 RSI: 0000200000000100 RDI: 0000000000000005 [ 511.644665][T20463] RBP: 00007f69184a6090 R08: 0000000000000000 R09: 0000000000000000 [ 511.644680][T20463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 511.644693][T20463] R13: 00007f6917826038 R14: 00007f6917825fa0 R15: 00007ffec6ca1b18 [ 511.644728][T20463] [ 511.786928][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 512.799556][T20467] 8021q: adding VLAN 0 to HW filter on device bond14 [ 512.814359][T20483] sock: sock_timestamping_bind_phc: sock not bind to device [ 512.814388][T20483] sock: sock_timestamping_bind_phc: sock not bind to device [ 512.814407][T20483] sock: sock_timestamping_bind_phc: sock not bind to device [ 512.814425][T20483] sock: sock_timestamping_bind_phc: sock not bind to device [ 512.814443][T20483] sock: sock_timestamping_bind_phc: sock not bind to device [ 512.814461][T20483] sock: sock_timestamping_bind_phc: sock not bind to device [ 512.814478][T20483] sock: sock_timestamping_bind_phc: sock not bind to device [ 512.814496][T20483] sock: sock_timestamping_bind_phc: sock not bind to device [ 512.814513][T20483] sock: sock_timestamping_bind_phc: sock not bind to device [ 512.814531][T20483] sock: sock_timestamping_bind_phc: sock not bind to device [ 512.814548][T20483] sock: sock_timestamping_bind_phc: sock not bind to device [ 512.814566][T20483] sock: sock_timestamping_bind_phc: sock not bind to device [ 512.814583][T20483] sock: sock_timestamping_bind_phc: sock not bind to device [ 512.814600][T20483] sock: sock_timestamping_bind_phc: sock not bind to device [ 512.815262][T20483] sock: sock_timestamping_bind_phc: sock not bind to device [ 512.815282][T20483] sock: sock_timestamping_bind_phc: sock not bind to device [ 512.815300][T20483] sock: sock_timestamping_bind_phc: sock not bind to device [ 512.815317][T20483] sock: sock_timestamping_bind_phc: sock not bind to device [ 512.815335][T20483] sock: sock_timestamping_bind_phc: sock not bind to device [ 512.815353][T20483] sock: sock_timestamping_bind_phc: sock not bind to device [ 512.815370][T20483] sock: sock_timestamping_bind_phc: sock not bind to device [ 512.815414][T20483] sock: sock_timestamping_bind_phc: sock not bind to device [ 512.815432][T20483] sock: sock_timestamping_bind_phc: sock not bind to device [ 512.815449][T20483] sock: sock_timestamping_bind_phc: sock not bind to device [ 512.815467][T20483] sock: sock_timestamping_bind_phc: sock not bind to device [ 512.815484][T20483] sock: sock_timestamping_bind_phc: sock not bind to device [ 512.815502][T20483] sock: sock_timestamping_bind_phc: sock not bind to device [ 512.815519][T20483] sock: sock_timestamping_bind_phc: sock not bind to device [ 512.815537][T20483] sock: sock_timestamping_bind_phc: sock not bind to device [ 512.815554][T20483] sock: sock_timestamping_bind_phc: sock not bind to device [ 512.815572][T20483] sock: sock_timestamping_bind_phc: sock not bind to device [ 512.815590][T20483] sock: sock_timestamping_bind_phc: sock not bind to device [ 512.815608][T20483] sock: sock_timestamping_bind_phc: sock not bind to device [ 513.027418][T20469] macvlan7: entered promiscuous mode [ 513.027485][T20469] bond14: entered promiscuous mode [ 513.037086][T20469] macvlan7: entered allmulticast mode [ 513.037144][T20469] bond14: entered allmulticast mode [ 513.048007][T20469] 8021q: adding VLAN 0 to HW filter on device macvlan7 [ 513.064783][ T1286] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 513.065431][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 513.328436][T20469] bond14: left allmulticast mode [ 513.328475][T20469] bond14: left promiscuous mode [ 513.683973][T20503] __nla_validate_parse: 2 callbacks suppressed [ 513.683995][T20503] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4026'. [ 513.756540][T20507] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4026'. [ 513.869110][T20516] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 513.894704][T20522] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4031'. [ 513.911940][T20510] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4027'. [ 513.979048][T20525] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4032'. [ 514.044289][T20527] FAULT_INJECTION: forcing a failure. [ 514.044289][T20527] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 514.044327][T20527] CPU: 0 UID: 0 PID: 20527 Comm: syz.1.4034 Not tainted syzkaller #0 PREEMPT(full) [ 514.044353][T20527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 514.044367][T20527] Call Trace: [ 514.044377][T20527] [ 514.044387][T20527] dump_stack_lvl+0xe8/0x150 [ 514.044424][T20527] should_fail_ex+0x410/0x560 [ 514.044461][T20527] _copy_from_user+0x2d/0xb0 [ 514.044497][T20527] bpf_test_init+0xd8/0x150 [ 514.044527][T20527] bpf_prog_test_run_xdp+0x4cc/0x11d0 [ 514.044568][T20527] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 514.044598][T20527] ? __fget_files+0x2a/0x420 [ 514.044639][T20527] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 514.044666][T20527] bpf_prog_test_run+0x2c5/0x340 [ 514.044701][T20527] __sys_bpf+0xa22/0xd90 [ 514.044738][T20527] ? __pfx___sys_bpf+0x10/0x10 [ 514.044779][T20527] ? __fget_files+0x2a/0x420 [ 514.044832][T20527] ? ksys_write+0x242/0x270 [ 514.044858][T20527] ? __pfx_ksys_write+0x10/0x10 [ 514.044888][T20527] __x64_sys_bpf+0xba/0xd0 [ 514.044915][T20527] do_syscall_64+0x166/0x520 [ 514.044948][T20527] ? trace_irq_disable+0x3b/0x140 [ 514.044984][T20527] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.045007][T20527] ? clear_bhb_loop+0x70/0xc0 [ 514.045036][T20527] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.045059][T20527] RIP: 0033:0x7f64a3b9f559 [ 514.045081][T20527] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 514.045100][T20527] RSP: 002b:00007f64a4a4f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 514.045126][T20527] RAX: ffffffffffffffda RBX: 00007f64a3e25fa0 RCX: 00007f64a3b9f559 [ 514.045143][T20527] RDX: 0000000000000050 RSI: 0000200000000280 RDI: 000000000000000a [ 514.045158][T20527] RBP: 00007f64a4a4f090 R08: 0000000000000000 R09: 0000000000000000 [ 514.045173][T20527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 514.045187][T20527] R13: 00007f64a3e26038 R14: 00007f64a3e25fa0 R15: 00007ffd57fdc7b8 [ 514.045221][T20527] [ 514.428980][T20538] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4036'. [ 514.636177][T20543] syzkaller0: entered promiscuous mode [ 514.636202][T20543] syzkaller0: entered allmulticast mode [ 514.652102][T20550] FAULT_INJECTION: forcing a failure. [ 514.652102][T20550] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 514.652170][T20550] CPU: 1 UID: 0 PID: 20550 Comm: syz.4.4041 Not tainted syzkaller #0 PREEMPT(full) [ 514.652242][T20550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 514.652269][T20550] Call Trace: [ 514.652299][T20550] [ 514.652329][T20550] dump_stack_lvl+0xe8/0x150 [ 514.652384][T20550] should_fail_ex+0x410/0x560 [ 514.652481][T20550] _copy_to_user+0x31/0xb0 [ 514.652578][T20550] bpf_verifier_vlog+0x3a2/0x900 [ 514.652677][T20550] bpf_verifier_log_write+0x11d/0x1a0 [ 514.652743][T20550] ? __pfx_reg_type_str+0x10/0x10 [ 514.652819][T20550] ? __pfx_bpf_verifier_log_write+0x10/0x10 [ 514.652922][T20550] print_reg_state+0x394/0x1a30 [ 514.653018][T20550] ? __pfx_print_reg_state+0x10/0x10 [ 514.653074][T20550] ? _copy_to_user+0x8a/0xb0 [ 514.653163][T20550] ? bpf_verifier_vlog+0x55a/0x900 [ 514.653261][T20550] ? bpf_verifier_log_write+0x11d/0x1a0 [ 514.653339][T20550] ? __pfx_bpf_verifier_log_write+0x10/0x10 [ 514.653419][T20550] ? bpf_verifier_log_write+0x11d/0x1a0 [ 514.653495][T20550] print_verifier_state+0x205/0x1a40 [ 514.653562][T20550] ? __pfx_bpf_verifier_log_write+0x10/0x10 [ 514.653662][T20550] ? __pfx_print_verifier_state+0x10/0x10 [ 514.653755][T20550] ? print_insn_state+0x135/0x170 [ 514.653831][T20550] do_check_common+0x2770/0x5610 [ 514.654006][T20550] ? __pfx_do_check_common+0x10/0x10 [ 514.654124][T20550] do_check_main+0xa2/0x1f0 [ 514.654202][T20550] bpf_check+0x2775/0x2ef0 [ 514.654321][T20550] ? __pfx_bpf_check+0x10/0x10 [ 514.654388][T20550] ? bpf_obj_name_cpy+0x194/0x1e0 [ 514.654487][T20550] bpf_prog_load+0x14d6/0x1c20 [ 514.654597][T20550] ? __pfx_bpf_prog_load+0x10/0x10 [ 514.654739][T20550] __sys_bpf+0xd0d/0xd90 [ 514.654837][T20550] ? __pfx___sys_bpf+0x10/0x10 [ 514.654948][T20550] ? __fget_files+0x2a/0x420 [ 514.655111][T20550] ? ksys_write+0x242/0x270 [ 514.655170][T20550] ? __pfx_ksys_write+0x10/0x10 [ 514.655259][T20550] __x64_sys_bpf+0xba/0xd0 [ 514.655327][T20550] do_syscall_64+0x166/0x520 [ 514.655407][T20550] ? trace_irq_disable+0x3b/0x140 [ 514.655465][T20550] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.655529][T20550] ? clear_bhb_loop+0x70/0xc0 [ 514.655605][T20550] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.655662][T20550] RIP: 0033:0x7f691759f559 [ 514.655718][T20550] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 514.655765][T20550] RSP: 002b:00007f69184a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 514.655829][T20550] RAX: ffffffffffffffda RBX: 00007f6917825fa0 RCX: 00007f691759f559 [ 514.655883][T20550] RDX: 0000000000000070 RSI: 0000200000000100 RDI: 0000000000000005 [ 514.655926][T20550] RBP: 00007f69184a6090 R08: 0000000000000000 R09: 0000000000000000 [ 514.655960][T20550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 514.656001][T20550] R13: 00007f6917826038 R14: 00007f6917825fa0 R15: 00007ffec6ca1b18 [ 514.656091][T20550] [ 514.977279][T20551] rdma_rxe: rxe_newlink: failed to add bond0 [ 514.998813][T20551] tipc: Enabled bearer , priority 0 [ 515.045772][T20542] tipc: Resetting bearer [ 515.139279][T20542] tipc: Disabling bearer [ 515.867953][T20596] FAULT_INJECTION: forcing a failure. [ 515.867953][T20596] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 515.867992][T20596] CPU: 0 UID: 0 PID: 20596 Comm: syz.0.4052 Not tainted syzkaller #0 PREEMPT(full) [ 515.868019][T20596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 515.868033][T20596] Call Trace: [ 515.868042][T20596] [ 515.868052][T20596] dump_stack_lvl+0xe8/0x150 [ 515.868091][T20596] should_fail_ex+0x410/0x560 [ 515.868131][T20596] _copy_from_user+0x2d/0xb0 [ 515.868169][T20596] generic_map_update_batch+0x662/0xae0 [ 515.868218][T20596] ? __pfx_generic_map_update_batch+0x10/0x10 [ 515.868255][T20596] ? __fget_files+0x2a/0x420 [ 515.868299][T20596] ? __pfx_generic_map_update_batch+0x10/0x10 [ 515.868335][T20596] bpf_map_do_batch+0x391/0x630 [ 515.868372][T20596] __sys_bpf+0xbe5/0xd90 [ 515.868408][T20596] ? __pfx___sys_bpf+0x10/0x10 [ 515.868447][T20596] ? __fget_files+0x2a/0x420 [ 515.868496][T20596] ? ksys_write+0x242/0x270 [ 515.868522][T20596] ? __pfx_ksys_write+0x10/0x10 [ 515.868550][T20596] __x64_sys_bpf+0xba/0xd0 [ 515.868576][T20596] do_syscall_64+0x166/0x520 [ 515.868607][T20596] ? trace_irq_disable+0x3b/0x140 [ 515.868629][T20596] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.868652][T20596] ? clear_bhb_loop+0x70/0xc0 [ 515.868679][T20596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.868702][T20596] RIP: 0033:0x7f8f3b79f559 [ 515.868723][T20596] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 515.868742][T20596] RSP: 002b:00007f8f3c720028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 515.868775][T20596] RAX: ffffffffffffffda RBX: 00007f8f3ba26090 RCX: 00007f8f3b79f559 [ 515.868791][T20596] RDX: 0000000000000038 RSI: 0000200000000180 RDI: 000000000000001a [ 515.868807][T20596] RBP: 00007f8f3c720090 R08: 0000000000000000 R09: 0000000000000000 [ 515.868821][T20596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 515.868834][T20596] R13: 00007f8f3ba26128 R14: 00007f8f3ba26090 R15: 00007fff78f282d8 [ 515.868870][T20596] [ 516.218700][T20590] syzkaller0: entered promiscuous mode [ 516.218726][T20590] syzkaller0: entered allmulticast mode [ 516.267444][ T1730] block nbd0: Possible stuck request ffff8880283ce000: control (read@0,1024B). Runtime 240 seconds [ 516.267493][ T1730] block nbd0: Possible stuck request ffff8880283ce1c0: control (read@1024,1024B). Runtime 240 seconds [ 516.267524][ T1730] block nbd0: Possible stuck request ffff8880283ce380: control (read@2048,1024B). Runtime 240 seconds [ 516.267554][ T1730] block nbd0: Possible stuck request ffff8880283ce540: control (read@3072,1024B). Runtime 240 seconds [ 516.332492][T20595] netlink: 164 bytes leftover after parsing attributes in process `syz.1.4054'. [ 518.097841][ T61] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 518.098041][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 518.939568][T20629] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4064'. [ 519.059303][T20636] x_tables: duplicate underflow at hook 2 [ 519.060727][T20636] FAULT_INJECTION: forcing a failure. [ 519.060727][T20636] name failslab, interval 1, probability 0, space 0, times 0 [ 519.060762][T20636] CPU: 1 UID: 0 PID: 20636 Comm: syz.1.4066 Not tainted syzkaller #0 PREEMPT(full) [ 519.060789][T20636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 519.060804][T20636] Call Trace: [ 519.060813][T20636] [ 519.060824][T20636] dump_stack_lvl+0xe8/0x150 [ 519.060862][T20636] should_fail_ex+0x410/0x560 [ 519.060898][T20636] ? __alloc_skb+0x1db/0x7a0 [ 519.060931][T20636] should_failslab+0xa8/0x100 [ 519.060972][T20636] ? __alloc_skb+0x1db/0x7a0 [ 519.060999][T20636] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 519.061026][T20636] ? __alloc_skb+0x18d/0x7a0 [ 519.061055][T20636] ? __alloc_skb+0x1db/0x7a0 [ 519.061091][T20636] __alloc_skb+0x1db/0x7a0 [ 519.061126][T20636] alloc_skb_with_frags+0xc6/0x760 [ 519.061160][T20636] ? __lock_acquire+0x747/0x2de0 [ 519.061201][T20636] sock_alloc_send_pskb+0xb66/0xc90 [ 519.061255][T20636] ? lock_acquire+0x115/0x350 [ 519.061284][T20636] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 519.061324][T20636] ? sock_def_readable+0xae/0x550 [ 519.061354][T20636] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 519.061394][T20636] unix_dgram_sendmsg+0x4da/0x17b0 [ 519.061448][T20636] ? __lock_acquire+0x747/0x2de0 [ 519.061474][T20636] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 519.061509][T20636] ? aa_sock_msg_perm+0x129/0x210 [ 519.061556][T20636] ? apparmor_socket_sendmsg+0x98/0x360 [ 519.061589][T20636] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 519.061619][T20636] sock_sendmsg_nosec+0x14e/0x190 [ 519.061647][T20636] ____sys_sendmsg+0x54e/0x850 [ 519.061687][T20636] ? __pfx_____sys_sendmsg+0x10/0x10 [ 519.061731][T20636] ? import_iovec+0x73/0xa0 [ 519.061770][T20636] ___sys_sendmsg+0x2a5/0x360 [ 519.061810][T20636] ? __pfx____sys_sendmsg+0x10/0x10 [ 519.061840][T20636] ? __lock_acquire+0x747/0x2de0 [ 519.061920][T20636] __sys_sendmmsg+0x273/0x4d0 [ 519.061961][T20636] ? __pfx___sys_sendmmsg+0x10/0x10 [ 519.062004][T20636] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 519.062054][T20636] ? ksys_write+0x242/0x270 [ 519.062080][T20636] ? __pfx_ksys_write+0x10/0x10 [ 519.062112][T20636] __x64_sys_sendmmsg+0xa0/0xc0 [ 519.062147][T20636] do_syscall_64+0x166/0x520 [ 519.062178][T20636] ? trace_irq_disable+0x3b/0x140 [ 519.062212][T20636] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.062235][T20636] ? clear_bhb_loop+0x70/0xc0 [ 519.062264][T20636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.062287][T20636] RIP: 0033:0x7f64a3b9f559 [ 519.062308][T20636] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 519.062329][T20636] RSP: 002b:00007f64a4a4f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 519.062355][T20636] RAX: ffffffffffffffda RBX: 00007f64a3e25fa0 RCX: 00007f64a3b9f559 [ 519.062372][T20636] RDX: 0400000000000247 RSI: 00002000000bd000 RDI: 0000000000000007 [ 519.062387][T20636] RBP: 00007f64a4a4f090 R08: 0000000000000000 R09: 0000000000000000 [ 519.062402][T20636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 519.062416][T20636] R13: 00007f64a3e26038 R14: 00007f64a3e25fa0 R15: 00007ffd57fdc7b8 [ 519.062454][T20636] [ 519.071700][T20634] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4067'. [ 519.127278][T20634] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4067'. [ 519.433457][T20642] FAULT_INJECTION: forcing a failure. [ 519.433457][T20642] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 519.433496][T20642] CPU: 1 UID: 0 PID: 20642 Comm: syz.3.4068 Not tainted syzkaller #0 PREEMPT(full) [ 519.433520][T20642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 519.433533][T20642] Call Trace: [ 519.433543][T20642] [ 519.433554][T20642] dump_stack_lvl+0xe8/0x150 [ 519.433596][T20642] should_fail_ex+0x410/0x560 [ 519.433635][T20642] _copy_from_iter+0x1d3/0x1660 [ 519.433682][T20642] ? __pfx__copy_from_iter+0x10/0x10 [ 519.433719][T20642] ? rcu_is_watching+0x16/0xb0 [ 519.433749][T20642] ? __alloc_frozen_pages_noprof+0x29e/0x5a0 [ 519.433783][T20642] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 519.433817][T20642] copy_page_from_iter+0x219/0x2d0 [ 519.433855][T20642] skb_copy_datagram_from_iter+0x2f4/0x720 [ 519.433907][T20642] skb_copy_datagram_from_iter_full+0x103/0x190 [ 519.433950][T20642] ? __pfx_skb_copy_datagram_from_iter_full+0x10/0x10 [ 519.433998][T20642] ? skb_set_owner_w+0x263/0x3d0 [ 519.434042][T20642] virtio_transport_alloc_skb+0x8d7/0x13e0 [ 519.434090][T20642] ? __pfx_virtio_transport_alloc_skb+0x10/0x10 [ 519.434122][T20642] ? queue_work_on+0x159/0x1d0 [ 519.434154][T20642] ? __local_bh_enable_ip+0xd6/0x140 [ 519.434193][T20642] virtio_transport_send_pkt_info+0x8e0/0x12b0 [ 519.434245][T20642] ? __pfx_virtio_transport_send_pkt_info+0x10/0x10 [ 519.434276][T20642] ? virtio_transport_seqpacket_enqueue+0x11b/0x250 [ 519.434305][T20642] ? __local_bh_enable_ip+0xd6/0x140 [ 519.434342][T20642] virtio_transport_seqpacket_enqueue+0x1b4/0x250 [ 519.434371][T20642] ? __pfx_virtio_transport_seqpacket_enqueue+0x10/0x10 [ 519.434408][T20642] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 519.434444][T20642] vsock_connectible_sendmsg+0xac2/0x1070 [ 519.434493][T20642] ? __pfx_vsock_connectible_sendmsg+0x10/0x10 [ 519.434522][T20642] ? __lock_acquire+0x747/0x2de0 [ 519.434548][T20642] ? __pfx_aa_sk_perm+0x10/0x10 [ 519.434580][T20642] ? __pfx_woken_wake_function+0x10/0x10 [ 519.434615][T20642] ? aa_sock_msg_perm+0x144/0x210 [ 519.434654][T20642] ? apparmor_socket_sendmsg+0x98/0x360 [ 519.434688][T20642] ? __pfx_vsock_connectible_sendmsg+0x10/0x10 [ 519.434717][T20642] sock_sendmsg_nosec+0x14e/0x190 [ 519.434745][T20642] ____sys_sendmsg+0x54e/0x850 [ 519.434786][T20642] ? __pfx_____sys_sendmsg+0x10/0x10 [ 519.434830][T20642] ? import_iovec+0x73/0xa0 [ 519.434869][T20642] ___sys_sendmsg+0x2a5/0x360 [ 519.434900][T20642] ? __lock_acquire+0x747/0x2de0 [ 519.434931][T20642] ? __pfx____sys_sendmsg+0x10/0x10 [ 519.434970][T20642] ? kstrtouint+0x6e/0xe0 [ 519.435036][T20642] ? __fget_files+0x2a/0x420 [ 519.435070][T20642] ? __fget_files+0x3a2/0x420 [ 519.435118][T20642] __sys_sendmmsg+0x273/0x4d0 [ 519.435158][T20642] ? __pfx___sys_sendmmsg+0x10/0x10 [ 519.435203][T20642] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 519.435254][T20642] ? ksys_write+0x242/0x270 [ 519.435282][T20642] ? __pfx_ksys_write+0x10/0x10 [ 519.435313][T20642] __x64_sys_sendmmsg+0xa0/0xc0 [ 519.435350][T20642] do_syscall_64+0x166/0x520 [ 519.435382][T20642] ? trace_irq_disable+0x3b/0x140 [ 519.435406][T20642] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.435431][T20642] ? clear_bhb_loop+0x70/0xc0 [ 519.435460][T20642] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.435483][T20642] RIP: 0033:0x7fd19b39f559 [ 519.435505][T20642] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 519.435525][T20642] RSP: 002b:00007fd19c291028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 519.435550][T20642] RAX: ffffffffffffffda RBX: 00007fd19b625fa0 RCX: 00007fd19b39f559 [ 519.435569][T20642] RDX: 0000000000000051 RSI: 0000200000001780 RDI: 0000000000000003 [ 519.435583][T20642] RBP: 00007fd19c291090 R08: 0000000000000000 R09: 0000000000000000 [ 519.435597][T20642] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 519.435611][T20642] R13: 00007fd19b626038 R14: 00007fd19b625fa0 R15: 00007ffd5eb8e978 [ 519.435649][T20642] [ 520.148958][T20656] tipc: Failed to remove unknown binding: 66,0,0/0:1356692482/1356692483 [ 520.165651][T20656] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4073'. [ 520.181850][T20656] tipc: Failed to remove unknown binding: 66,0,0/0:1356692482/1356692483 [ 520.528226][T20670] TC_ACT_REPEAT abuse ? [ 520.699422][ T5629] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.708483][T20682] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.742817][T20684] netlink: 'syz.0.4080': attribute type 7 has an invalid length. [ 520.929351][T20658] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4072'. [ 521.047412][T20682] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.047734][T20682] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.047952][T20682] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.048294][T20682] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.174671][T20702] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4084'. [ 521.209301][T20696] bridge0: port 3(batadv0) entered disabled state [ 521.215798][T20696] bridge0: port 1(bridge_slave_0) entered disabled state [ 521.234264][T20696] bridge0: port 2(bridge_slave_1) entered disabled state [ 521.284676][T20696] macsec0: left promiscuous mode [ 521.295883][T20696] mac80211_hwsim hwsim9 wlan1: left promiscuous mode [ 521.304260][T20696] bond8: left promiscuous mode [ 521.304403][T20696] bridge2: left promiscuous mode [ 521.326927][T20696] ip6tnl2: left promiscuous mode [ 521.386335][T20682] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.633403][T20696] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4082'. [ 522.115607][T20739] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 522.167282][T20728] syzkaller0: entered promiscuous mode [ 522.167309][T20728] syzkaller0: entered allmulticast mode [ 522.318250][T20743] netlink: 'syz.3.4093': attribute type 7 has an invalid length. [ 523.938710][ T1286] net_ratelimit: 4 callbacks suppressed [ 523.938729][ T1286] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 523.938943][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 524.657827][T20754] sit0: entered promiscuous mode [ 524.665083][T20754] netlink: 'syz.1.4095': attribute type 1 has an invalid length. [ 524.665112][T20754] netlink: 1 bytes leftover after parsing attributes in process `syz.1.4095'. [ 524.665203][T20757] ¬0Ù: renamed from bond_slave_1 (while UP) [ 525.152136][T20778] netlink: 'syz.2.4104': attribute type 2 has an invalid length. [ 525.253565][T20778] syzkaller0: entered promiscuous mode [ 525.253593][T20778] syzkaller0: entered allmulticast mode [ 525.280047][T20787] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4106'. [ 525.394400][T20787] IPVS: set_ctl: invalid protocol: 0 172.30.0.2:20000 [ 525.523689][T20797] netlink: 'syz.0.4108': attribute type 7 has an invalid length. [ 525.580202][T20801] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4109'. [ 525.879057][T20815] ip_tables: iptables: counters copy to user failed while replacing table [ 525.879457][T20814] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4114'. [ 525.925707][T20816] netlink: 'syz.0.4113': attribute type 4 has an invalid length. [ 525.951061][ T5740] lo speed is unknown, defaulting to 1000 [ 525.951106][ T5740] syz0: Port: 1 Link DOWN [ 525.968853][ T5740] lo speed is unknown, defaulting to 1000 [ 526.007392][T20820] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.277998][T20836] x_tables: duplicate underflow at hook 2 [ 526.281135][T20836] FAULT_INJECTION: forcing a failure. [ 526.281135][T20836] name failslab, interval 1, probability 0, space 0, times 0 [ 526.282380][T20836] CPU: 0 UID: 0 PID: 20836 Comm: syz.1.4120 Not tainted syzkaller #0 PREEMPT(full) [ 526.282408][T20836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 526.282422][T20836] Call Trace: [ 526.282431][T20836] [ 526.282441][T20836] dump_stack_lvl+0xe8/0x150 [ 526.282481][T20836] should_fail_ex+0x410/0x560 [ 526.282516][T20836] ? __alloc_skb+0x1db/0x7a0 [ 526.282545][T20836] should_failslab+0xa8/0x100 [ 526.282578][T20836] ? __alloc_skb+0x1db/0x7a0 [ 526.282604][T20836] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 526.282629][T20836] ? __alloc_skb+0x18d/0x7a0 [ 526.282658][T20836] ? __alloc_skb+0x1db/0x7a0 [ 526.282694][T20836] __alloc_skb+0x1db/0x7a0 [ 526.282728][T20836] alloc_skb_with_frags+0xc6/0x760 [ 526.282761][T20836] ? __lock_acquire+0x747/0x2de0 [ 526.282817][T20836] sock_alloc_send_pskb+0xb66/0xc90 [ 526.282872][T20836] ? lock_acquire+0x115/0x350 [ 526.282900][T20836] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 526.282939][T20836] ? sock_def_readable+0xae/0x550 [ 526.282970][T20836] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 526.283008][T20836] unix_dgram_sendmsg+0x4da/0x17b0 [ 526.283064][T20836] ? __lock_acquire+0x747/0x2de0 [ 526.283088][T20836] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 526.283130][T20836] ? aa_sock_msg_perm+0x129/0x210 [ 526.283171][T20836] ? apparmor_socket_sendmsg+0x98/0x360 [ 526.283205][T20836] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 526.283235][T20836] sock_sendmsg_nosec+0x14e/0x190 [ 526.283262][T20836] ____sys_sendmsg+0x54e/0x850 [ 526.283301][T20836] ? __pfx_____sys_sendmsg+0x10/0x10 [ 526.283344][T20836] ? import_iovec+0x73/0xa0 [ 526.283382][T20836] ___sys_sendmsg+0x2a5/0x360 [ 526.283422][T20836] ? __pfx____sys_sendmsg+0x10/0x10 [ 526.283453][T20836] ? __lock_acquire+0x747/0x2de0 [ 526.283533][T20836] __sys_sendmmsg+0x273/0x4d0 [ 526.283570][T20836] ? __pfx___sys_sendmmsg+0x10/0x10 [ 526.283612][T20836] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 526.283662][T20836] ? ksys_write+0x242/0x270 [ 526.283688][T20836] ? __pfx_ksys_write+0x10/0x10 [ 526.283719][T20836] __x64_sys_sendmmsg+0xa0/0xc0 [ 526.283755][T20836] do_syscall_64+0x166/0x520 [ 526.283787][T20836] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 526.283811][T20836] ? clear_bhb_loop+0x70/0xc0 [ 526.283840][T20836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 526.283863][T20836] RIP: 0033:0x7f64a3b9f559 [ 526.283884][T20836] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 526.283904][T20836] RSP: 002b:00007f64a4a4f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 526.283929][T20836] RAX: ffffffffffffffda RBX: 00007f64a3e25fa0 RCX: 00007f64a3b9f559 [ 526.283946][T20836] RDX: 0400000000000247 RSI: 00002000000bd000 RDI: 0000000000000007 [ 526.283963][T20836] RBP: 00007f64a4a4f090 R08: 0000000000000000 R09: 0000000000000000 [ 526.283977][T20836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 526.283991][T20836] R13: 00007f64a3e26038 R14: 00007f64a3e25fa0 R15: 00007ffd57fdc7b8 [ 526.284027][T20836] [ 526.936860][T20854] netlink: 'syz.2.4124': attribute type 10 has an invalid length. [ 526.992101][T20854] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 527.065344][T20854] team0: Port device netdevsim1 added [ 527.350867][T20854] netlink: 'syz.2.4124': attribute type 10 has an invalid length. [ 527.449710][T20854] team0: Port device netdevsim1 removed [ 527.455080][T20854] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 528.172873][T20898] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4134'. [ 528.490544][T20916] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 528.699410][T20922] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4140'. [ 529.300634][T20953] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 530.199046][T20978] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4155'. [ 530.899506][T21006] netlink: 'syz.0.4165': attribute type 13 has an invalid length. [ 530.899535][T21006] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4165'. [ 530.899562][T21006] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 530.977254][ T61] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.977499][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.205292][T21014] FAULT_INJECTION: forcing a failure. [ 531.205292][T21014] name failslab, interval 1, probability 0, space 0, times 0 [ 531.205328][T21014] CPU: 1 UID: 0 PID: 21014 Comm: syz.0.4167 Not tainted syzkaller #0 PREEMPT(full) [ 531.205354][T21014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 531.205368][T21014] Call Trace: [ 531.205378][T21014] [ 531.205388][T21014] dump_stack_lvl+0xe8/0x150 [ 531.205426][T21014] should_fail_ex+0x410/0x560 [ 531.205464][T21014] should_failslab+0xa8/0x100 [ 531.205499][T21014] __kmalloc_cache_noprof+0xa3/0x600 [ 531.205524][T21014] ? __netlink_dump_start+0xf4/0x7b0 [ 531.205550][T21014] ? __inet_diag_dump_start+0x90/0xbb0 [ 531.205587][T21014] ? __inet_diag_dump_start+0x90/0xbb0 [ 531.205624][T21014] __inet_diag_dump_start+0x90/0xbb0 [ 531.205656][T21014] ? netlink_lookup+0x30/0x200 [ 531.205680][T21014] ? netlink_lookup+0x30/0x200 [ 531.205711][T21014] __netlink_dump_start+0x442/0x7b0 [ 531.205744][T21014] inet_diag_rcv_msg_compat+0x214/0x420 [ 531.205780][T21014] ? __pfx_inet_diag_rcv_msg_compat+0x10/0x10 [ 531.205819][T21014] ? lock_acquire+0x115/0x350 [ 531.205843][T21014] ? __pfx_inet_diag_dump_start_compat+0x10/0x10 [ 531.205873][T21014] ? __pfx_inet_diag_dump_compat+0x10/0x10 [ 531.205904][T21014] ? __pfx_inet_diag_dump_done+0x10/0x10 [ 531.205941][T21014] ? sock_diag_rcv_msg+0x184/0x5f0 [ 531.205975][T21014] sock_diag_rcv_msg+0x4b0/0x5f0 [ 531.206010][T21014] netlink_rcv_skb+0x226/0x4a0 [ 531.206036][T21014] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 531.206070][T21014] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 531.206110][T21014] ? netlink_deliver_tap+0x2e/0x1b0 [ 531.206132][T21014] ? netlink_deliver_tap+0x2e/0x1b0 [ 531.206157][T21014] netlink_unicast+0x8ef/0xa80 [ 531.206189][T21014] netlink_sendmsg+0x813/0xb40 [ 531.206218][T21014] ? __pfx_netlink_sendmsg+0x10/0x10 [ 531.206253][T21014] ? apparmor_socket_sendmsg+0x98/0x360 [ 531.206281][T21014] ? __pfx_netlink_sendmsg+0x10/0x10 [ 531.206300][T21014] sock_sendmsg_nosec+0x14e/0x190 [ 531.206322][T21014] ____sys_sendmsg+0x54e/0x850 [ 531.206352][T21014] ? __pfx_____sys_sendmsg+0x10/0x10 [ 531.206386][T21014] ? import_iovec+0x73/0xa0 [ 531.206416][T21014] ___sys_sendmsg+0x2a5/0x360 [ 531.206440][T21014] ? __lock_acquire+0x747/0x2de0 [ 531.206463][T21014] ? __pfx____sys_sendmsg+0x10/0x10 [ 531.206520][T21014] ? __fget_files+0x2a/0x420 [ 531.206546][T21014] ? __fget_files+0x3a2/0x420 [ 531.206583][T21014] __x64_sys_sendmsg+0x1b1/0x290 [ 531.206611][T21014] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 531.206656][T21014] do_syscall_64+0x166/0x520 [ 531.206681][T21014] ? trace_irq_disable+0x3b/0x140 [ 531.206700][T21014] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.206719][T21014] ? clear_bhb_loop+0x70/0xc0 [ 531.206743][T21014] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.206761][T21014] RIP: 0033:0x7f8f3b79f559 [ 531.206779][T21014] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 531.206795][T21014] RSP: 002b:00007f8f3c741028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 531.206816][T21014] RAX: ffffffffffffffda RBX: 00007f8f3ba25fa0 RCX: 00007f8f3b79f559 [ 531.206830][T21014] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003 [ 531.206842][T21014] RBP: 00007f8f3c741090 R08: 0000000000000000 R09: 0000000000000000 [ 531.206854][T21014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 531.206865][T21014] R13: 00007f8f3ba26038 R14: 00007f8f3ba25fa0 R15: 00007fff78f282d8 [ 531.206894][T21014] [ 531.708625][T21017] netlink: 'syz.1.4168': attribute type 3 has an invalid length. [ 531.724453][T21017] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4168'. [ 532.154894][T21037] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4173'. [ 532.942079][T21058] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 533.127823][T21063] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4181'. [ 533.147293][T21063] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4181'. [ 533.149217][T21063] netlink: 'syz.1.4181': attribute type 29 has an invalid length. [ 533.173200][T21063] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 533.213073][T21070] FAULT_INJECTION: forcing a failure. [ 533.213073][T21070] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 533.213118][T21070] CPU: 0 UID: 0 PID: 21070 Comm: syz.4.4184 Not tainted syzkaller #0 PREEMPT(full) [ 533.213144][T21070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 533.213158][T21070] Call Trace: [ 533.213168][T21070] [ 533.213178][T21070] dump_stack_lvl+0xe8/0x150 [ 533.213216][T21070] should_fail_ex+0x410/0x560 [ 533.213253][T21070] _copy_to_user+0x31/0xb0 [ 533.213291][T21070] bpf_test_finish+0x52e/0x690 [ 533.213329][T21070] ? __pfx_bpf_test_finish+0x10/0x10 [ 533.213362][T21070] ? _copy_from_user+0x94/0xb0 [ 533.213397][T21070] ? bpf_test_init+0x113/0x150 [ 533.213424][T21070] bpf_prog_test_run_xdp+0x8bc/0x11d0 [ 533.213470][T21070] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 533.213503][T21070] ? __fget_files+0x2a/0x420 [ 533.213543][T21070] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 533.213571][T21070] bpf_prog_test_run+0x2c5/0x340 [ 533.213606][T21070] __sys_bpf+0xa22/0xd90 [ 533.213648][T21070] ? __pfx___sys_bpf+0x10/0x10 [ 533.213688][T21070] ? __fget_files+0x2a/0x420 [ 533.213740][T21070] ? ksys_write+0x242/0x270 [ 533.213765][T21070] ? __pfx_ksys_write+0x10/0x10 [ 533.213793][T21070] __x64_sys_bpf+0xba/0xd0 [ 533.213821][T21070] do_syscall_64+0x166/0x520 [ 533.213853][T21070] ? trace_irq_disable+0x3b/0x140 [ 533.213876][T21070] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.213907][T21070] ? clear_bhb_loop+0x70/0xc0 [ 533.213936][T21070] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.213959][T21070] RIP: 0033:0x7f691759f559 [ 533.213980][T21070] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 533.214004][T21070] RSP: 002b:00007f69184a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 533.214027][T21070] RAX: ffffffffffffffda RBX: 00007f6917825fa0 RCX: 00007f691759f559 [ 533.214044][T21070] RDX: 0000000000000050 RSI: 0000200000000f40 RDI: 000000000000000a [ 533.214058][T21070] RBP: 00007f69184a6090 R08: 0000000000000000 R09: 0000000000000000 [ 533.214071][T21070] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 533.214084][T21070] R13: 00007f6917826038 R14: 00007f6917825fa0 R15: 00007ffec6ca1b18 [ 533.214129][T21070] [ 533.775582][T21081] netlink: 'syz.2.4188': attribute type 1 has an invalid length. [ 534.033110][T21092] netlink: 'syz.4.4191': attribute type 13 has an invalid length. [ 534.033134][T21092] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4191'. [ 534.951492][T21137] sctp: [Deprecated]: syz.1.4203 (pid 21137) Use of int in max_burst socket option. [ 534.951492][T21137] Use struct sctp_assoc_value instead [ 535.425179][T21151] x_tables: duplicate underflow at hook 2 [ 535.671250][T21161] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4212'. [ 535.671282][T21161] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4212'. [ 535.826099][T21169] netlink: 'syz.2.4214': attribute type 1 has an invalid length. [ 535.826125][T21169] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4214'. [ 535.975319][T21178] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4220'. [ 536.098232][ T3390] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.098486][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.251676][T21196] sctp: [Deprecated]: syz.3.4221 (pid 21196) Use of int in max_burst socket option. [ 536.251676][T21196] Use struct sctp_assoc_value instead [ 537.247022][T21242] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 537.343902][ T425] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.344160][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.510974][T21255] FAULT_INJECTION: forcing a failure. [ 537.510974][T21255] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 537.511011][T21255] CPU: 1 UID: 0 PID: 21255 Comm: syz.0.4236 Not tainted syzkaller #0 PREEMPT(full) [ 537.511037][T21255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 537.511051][T21255] Call Trace: [ 537.511060][T21255] [ 537.511071][T21255] dump_stack_lvl+0xe8/0x150 [ 537.511110][T21255] should_fail_ex+0x410/0x560 [ 537.511149][T21255] _copy_to_user+0x31/0xb0 [ 537.511188][T21255] bpf_verifier_vlog+0x3a2/0x900 [ 537.511227][T21255] bpf_verifier_log_write+0x11d/0x1a0 [ 537.511260][T21255] ? __pfx_bpf_verifier_log_write+0x10/0x10 [ 537.511294][T21255] ? bpf_verifier_log_write+0x11d/0x1a0 [ 537.511324][T21255] print_verifier_state+0x1f5/0x1a40 [ 537.511351][T21255] ? __pfx_bpf_verifier_log_write+0x10/0x10 [ 537.511384][T21255] ? __pfx_print_verifier_state+0x10/0x10 [ 537.511409][T21255] ? bpf_vlog_reset+0x2aa/0x340 [ 537.511437][T21255] ? print_insn_state+0x106/0x170 [ 537.511466][T21255] do_check_insn+0xa2bc/0x17d00 [ 537.511518][T21255] ? lock_acquire+0x115/0x350 [ 537.511557][T21255] ? __pfx_do_check_insn+0x10/0x10 [ 537.511601][T21255] ? _copy_to_user+0x8a/0xb0 [ 537.511637][T21255] ? bpf_verifier_vlog+0x55a/0x900 [ 537.511665][T21255] ? __pfx_verbose+0x10/0x10 [ 537.511693][T21255] ? verbose+0x11d/0x1a0 [ 537.511723][T21255] ? __pfx_verbose+0x10/0x10 [ 537.511748][T21255] ? bpf_push_jmp_history+0x27d/0x6d0 [ 537.511794][T21255] do_check_common+0x364c/0x5610 [ 537.511870][T21255] ? __pfx_do_check_common+0x10/0x10 [ 537.511901][T21255] ? __pfx_verbose+0x10/0x10 [ 537.511922][T21255] ? __pfx_bpf_disasm_kfunc_name+0x10/0x10 [ 537.511960][T21255] do_check_main+0xa2/0x1f0 [ 537.511991][T21255] bpf_check+0x2775/0x2ef0 [ 537.512038][T21255] ? __pfx_bpf_check+0x10/0x10 [ 537.512068][T21255] ? bpf_obj_name_cpy+0x194/0x1e0 [ 537.512109][T21255] bpf_prog_load+0x14d6/0x1c20 [ 537.512151][T21255] ? __pfx_bpf_prog_load+0x10/0x10 [ 537.512209][T21255] __sys_bpf+0xd0d/0xd90 [ 537.512246][T21255] ? __pfx___sys_bpf+0x10/0x10 [ 537.512314][T21255] ? rcu_is_watching+0x16/0xb0 [ 537.512352][T21255] __x64_sys_bpf+0xba/0xd0 [ 537.512381][T21255] do_syscall_64+0x166/0x520 [ 537.512414][T21255] ? trace_irq_disable+0x3b/0x140 [ 537.512438][T21255] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.512462][T21255] ? clear_bhb_loop+0x70/0xc0 [ 537.512492][T21255] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.512516][T21255] RIP: 0033:0x7f8f3b79f559 [ 537.512538][T21255] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 537.512560][T21255] RSP: 002b:00007f8f3c741028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 537.512586][T21255] RAX: ffffffffffffffda RBX: 00007f8f3ba25fa0 RCX: 00007f8f3b79f559 [ 537.512604][T21255] RDX: 0000000000000070 RSI: 0000200000000100 RDI: 0000000000000005 [ 537.512619][T21255] RBP: 00007f8f3c741090 R08: 0000000000000000 R09: 0000000000000000 [ 537.512635][T21255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 537.512649][T21255] R13: 00007f8f3ba26038 R14: 00007f8f3ba25fa0 R15: 00007fff78f282d8 [ 537.512719][T21255] [ 537.992822][T21265] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.993515][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 538.014229][T21265] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4239'. [ 538.316211][T21273] netlink: 80 bytes leftover after parsing attributes in process `syz.3.4241'. [ 538.563995][T21289] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4247'. [ 538.695362][T21289] 8021q: adding VLAN 0 to HW filter on device bond18 [ 538.759665][T21295] macvlan3: entered promiscuous mode [ 538.759690][T21295] bond18: entered promiscuous mode [ 538.759870][T21295] macvlan3: entered allmulticast mode [ 538.759885][T21295] bond18: entered allmulticast mode [ 538.791922][T21295] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 538.810310][T21295] bond18: left allmulticast mode [ 538.810361][T21295] bond18: left promiscuous mode [ 538.813609][T21301] sctp: [Deprecated]: syz.4.4249 (pid 21301) Use of int in maxseg socket option. [ 538.813609][T21301] Use struct sctp_assoc_value instead [ 539.121974][T21316] FAULT_INJECTION: forcing a failure. [ 539.121974][T21316] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 539.122013][T21316] CPU: 0 UID: 0 PID: 21316 Comm: syz.4.4254 Not tainted syzkaller #0 PREEMPT(full) [ 539.122046][T21316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 539.122066][T21316] Call Trace: [ 539.122075][T21316] [ 539.122085][T21316] dump_stack_lvl+0xe8/0x150 [ 539.122124][T21316] should_fail_ex+0x410/0x560 [ 539.122164][T21316] _copy_to_user+0x31/0xb0 [ 539.122199][T21316] bpf_verifier_vlog+0x3a2/0x900 [ 539.122248][T21316] bpf_verifier_log_write+0x11d/0x1a0 [ 539.122280][T21316] ? __pfx_bpf_verifier_log_write+0x10/0x10 [ 539.122314][T21316] ? bpf_verifier_log_write+0x11d/0x1a0 [ 539.122343][T21316] print_verifier_state+0x1f5/0x1a40 [ 539.122369][T21316] ? __pfx_bpf_verifier_log_write+0x10/0x10 [ 539.122400][T21316] ? __pfx_print_verifier_state+0x10/0x10 [ 539.122423][T21316] ? bpf_vlog_reset+0x2aa/0x340 [ 539.122452][T21316] ? print_insn_state+0x106/0x170 [ 539.122481][T21316] do_check_insn+0xa2bc/0x17d00 [ 539.122532][T21316] ? lock_acquire+0x115/0x350 [ 539.122568][T21316] ? __pfx_do_check_insn+0x10/0x10 [ 539.122611][T21316] ? _copy_to_user+0x8a/0xb0 [ 539.122649][T21316] ? bpf_verifier_vlog+0x55a/0x900 [ 539.122675][T21316] ? __pfx_verbose+0x10/0x10 [ 539.122704][T21316] ? verbose+0x11d/0x1a0 [ 539.122733][T21316] ? __pfx_verbose+0x10/0x10 [ 539.122757][T21316] ? bpf_push_jmp_history+0x27d/0x6d0 [ 539.122830][T21316] do_check_common+0x364c/0x5610 [ 539.122901][T21316] ? __pfx_do_check_common+0x10/0x10 [ 539.122932][T21316] ? __pfx_verbose+0x10/0x10 [ 539.122953][T21316] ? __pfx_bpf_disasm_kfunc_name+0x10/0x10 [ 539.122991][T21316] do_check_main+0xa2/0x1f0 [ 539.123023][T21316] bpf_check+0x2775/0x2ef0 [ 539.123071][T21316] ? __pfx_bpf_check+0x10/0x10 [ 539.123101][T21316] ? bpf_obj_name_cpy+0x194/0x1e0 [ 539.123140][T21316] bpf_prog_load+0x14d6/0x1c20 [ 539.123184][T21316] ? __pfx_bpf_prog_load+0x10/0x10 [ 539.123249][T21316] __sys_bpf+0xd0d/0xd90 [ 539.123289][T21316] ? __pfx___sys_bpf+0x10/0x10 [ 539.123329][T21316] ? __fget_files+0x2a/0x420 [ 539.123385][T21316] ? ksys_write+0x242/0x270 [ 539.123412][T21316] ? __pfx_ksys_write+0x10/0x10 [ 539.123443][T21316] __x64_sys_bpf+0xba/0xd0 [ 539.123472][T21316] do_syscall_64+0x166/0x520 [ 539.123504][T21316] ? trace_irq_disable+0x3b/0x140 [ 539.123528][T21316] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.123552][T21316] ? clear_bhb_loop+0x70/0xc0 [ 539.123579][T21316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.123602][T21316] RIP: 0033:0x7f691759f559 [ 539.123624][T21316] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 539.123643][T21316] RSP: 002b:00007f69184a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 539.123668][T21316] RAX: ffffffffffffffda RBX: 00007f6917825fa0 RCX: 00007f691759f559 [ 539.123686][T21316] RDX: 0000000000000070 RSI: 0000200000000100 RDI: 0000000000000005 [ 539.123701][T21316] RBP: 00007f69184a6090 R08: 0000000000000000 R09: 0000000000000000 [ 539.123715][T21316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 539.123728][T21316] R13: 00007f6917826038 R14: 00007f6917825fa0 R15: 00007ffec6ca1b18 [ 539.123765][T21316] [ 539.534029][T21320] FAULT_INJECTION: forcing a failure. [ 539.534029][T21320] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 539.534068][T21320] CPU: 0 UID: 0 PID: 21320 Comm: syz.1.4257 Not tainted syzkaller #0 PREEMPT(full) [ 539.534094][T21320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 539.534109][T21320] Call Trace: [ 539.534119][T21320] [ 539.534129][T21320] dump_stack_lvl+0xe8/0x150 [ 539.534167][T21320] should_fail_ex+0x410/0x560 [ 539.534206][T21320] _copy_from_iter+0x1d3/0x1660 [ 539.534261][T21320] ? __pfx__copy_from_iter+0x10/0x10 [ 539.534298][T21320] ? rcu_is_watching+0x16/0xb0 [ 539.534328][T21320] ? __alloc_frozen_pages_noprof+0x29e/0x5a0 [ 539.534362][T21320] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 539.534396][T21320] copy_page_from_iter+0x219/0x2d0 [ 539.534434][T21320] skb_copy_datagram_from_iter+0x2f4/0x720 [ 539.534483][T21320] skb_copy_datagram_from_iter_full+0x103/0x190 [ 539.534527][T21320] ? __pfx_skb_copy_datagram_from_iter_full+0x10/0x10 [ 539.534576][T21320] ? skb_set_owner_w+0x263/0x3d0 [ 539.534613][T21320] virtio_transport_alloc_skb+0x8d7/0x13e0 [ 539.534647][T21320] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 539.534690][T21320] ? __pfx_virtio_transport_alloc_skb+0x10/0x10 [ 539.534722][T21320] ? queue_work_on+0x159/0x1d0 [ 539.534753][T21320] ? __local_bh_enable_ip+0xd6/0x140 [ 539.534792][T21320] virtio_transport_send_pkt_info+0x8e0/0x12b0 [ 539.534843][T21320] ? __pfx_virtio_transport_send_pkt_info+0x10/0x10 [ 539.534873][T21320] ? virtio_transport_seqpacket_enqueue+0x11b/0x250 [ 539.534901][T21320] ? __local_bh_enable_ip+0xd6/0x140 [ 539.534938][T21320] virtio_transport_seqpacket_enqueue+0x1b4/0x250 [ 539.534968][T21320] ? __pfx_virtio_transport_seqpacket_enqueue+0x10/0x10 [ 539.535005][T21320] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 539.535040][T21320] vsock_connectible_sendmsg+0xac2/0x1070 [ 539.535090][T21320] ? __pfx_vsock_connectible_sendmsg+0x10/0x10 [ 539.535119][T21320] ? __lock_acquire+0x747/0x2de0 [ 539.535143][T21320] ? __pfx_aa_sk_perm+0x10/0x10 [ 539.535176][T21320] ? __pfx_woken_wake_function+0x10/0x10 [ 539.535211][T21320] ? aa_sock_msg_perm+0x144/0x210 [ 539.535259][T21320] ? apparmor_socket_sendmsg+0x98/0x360 [ 539.535293][T21320] ? __pfx_vsock_connectible_sendmsg+0x10/0x10 [ 539.535323][T21320] sock_sendmsg_nosec+0x14e/0x190 [ 539.535352][T21320] ____sys_sendmsg+0x54e/0x850 [ 539.535391][T21320] ? __pfx_____sys_sendmsg+0x10/0x10 [ 539.535436][T21320] ? import_iovec+0x73/0xa0 [ 539.535475][T21320] ___sys_sendmsg+0x2a5/0x360 [ 539.535507][T21320] ? __lock_acquire+0x747/0x2de0 [ 539.535537][T21320] ? __pfx____sys_sendmsg+0x10/0x10 [ 539.535578][T21320] ? kstrtouint+0x6e/0xe0 [ 539.535638][T21320] ? __fget_files+0x2a/0x420 [ 539.535673][T21320] ? __fget_files+0x3a2/0x420 [ 539.535720][T21320] __sys_sendmmsg+0x273/0x4d0 [ 539.535761][T21320] ? __pfx___sys_sendmmsg+0x10/0x10 [ 539.535805][T21320] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 539.535856][T21320] ? ksys_write+0x242/0x270 [ 539.535883][T21320] ? __pfx_ksys_write+0x10/0x10 [ 539.535915][T21320] __x64_sys_sendmmsg+0xa0/0xc0 [ 539.535950][T21320] do_syscall_64+0x166/0x520 [ 539.535980][T21320] ? trace_irq_disable+0x3b/0x140 [ 539.536005][T21320] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.536029][T21320] ? clear_bhb_loop+0x70/0xc0 [ 539.536057][T21320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.536080][T21320] RIP: 0033:0x7f64a3b9f559 [ 539.536101][T21320] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 539.536122][T21320] RSP: 002b:00007f64a4a4f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 539.536147][T21320] RAX: ffffffffffffffda RBX: 00007f64a3e25fa0 RCX: 00007f64a3b9f559 [ 539.536164][T21320] RDX: 0000000000000051 RSI: 0000200000001780 RDI: 0000000000000003 [ 539.536177][T21320] RBP: 00007f64a4a4f090 R08: 0000000000000000 R09: 0000000000000000 [ 539.536191][T21320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 539.536204][T21320] R13: 00007f64a3e26038 R14: 00007f64a3e25fa0 R15: 00007ffd57fdc7b8 [ 539.536249][T21320] [ 540.185197][T21330] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 540.596377][T21350] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4263'. [ 540.598301][T21351] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 540.598532][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 540.598759][T21351] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 540.881811][ T31] audit: type=1804 audit(1792631884.377:13): pid=21364 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.4271" name="/newroot/912/cgroup.controllers" dev="tmpfs" ino=4646 res=1 errno=0 [ 540.882096][ T31] audit: type=1800 audit(1792631884.377:14): pid=21364 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4271" name="cgroup.controllers" dev="tmpfs" ino=4646 res=0 errno=0 [ 541.015531][T21367] tipc: Failed to remove unknown binding: 66,0,0/2100802853:3886988208/3886988209 [ 541.033044][T21367] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4272'. [ 541.049038][T21367] tipc: Failed to remove unknown binding: 66,0,0/2100802853:3886988208/3886988209 [ 541.106335][T21351] net_ratelimit: 755 callbacks suppressed [ 541.106361][T21351] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.106559][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.106888][T21351] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.107105][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.108156][T21351] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.108355][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.108698][T21351] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.108887][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.109101][T21351] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.109281][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.273090][T21373] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 541.475865][T21379] netlink: 'syz.0.4273': attribute type 10 has an invalid length. [ 541.511066][T21384] FAULT_INJECTION: forcing a failure. [ 541.511066][T21384] name failslab, interval 1, probability 0, space 0, times 0 [ 541.511104][T21384] CPU: 1 UID: 0 PID: 21384 Comm: syz.2.4277 Not tainted syzkaller #0 PREEMPT(full) [ 541.511131][T21384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 541.511146][T21384] Call Trace: [ 541.511156][T21384] [ 541.511166][T21384] dump_stack_lvl+0xe8/0x150 [ 541.511205][T21384] should_fail_ex+0x410/0x560 [ 541.511243][T21384] should_failslab+0xa8/0x100 [ 541.511277][T21384] __kvmalloc_node_noprof+0x176/0x820 [ 541.511308][T21384] ? __kvmalloc_node_noprof+0x345/0x820 [ 541.511337][T21384] ? bpf_compute_scc+0x106/0xb10 [ 541.511361][T21384] ? bpf_compute_scc+0x106/0xb10 [ 541.511393][T21384] bpf_compute_scc+0x106/0xb10 [ 541.511441][T21384] bpf_check+0x271e/0x2ef0 [ 541.511490][T21384] ? __pfx_bpf_check+0x10/0x10 [ 541.511521][T21384] ? bpf_obj_name_cpy+0x194/0x1e0 [ 541.511568][T21384] bpf_prog_load+0x14d6/0x1c20 [ 541.511611][T21384] ? __pfx_bpf_prog_load+0x10/0x10 [ 541.511669][T21384] __sys_bpf+0xd0d/0xd90 [ 541.511707][T21384] ? __pfx___sys_bpf+0x10/0x10 [ 541.511748][T21384] ? __fget_files+0x2a/0x420 [ 541.511803][T21384] ? ksys_write+0x242/0x270 [ 541.511831][T21384] ? __pfx_ksys_write+0x10/0x10 [ 541.511861][T21384] __x64_sys_bpf+0xba/0xd0 [ 541.511890][T21384] do_syscall_64+0x166/0x520 [ 541.511926][T21384] ? trace_irq_disable+0x3b/0x140 [ 541.511951][T21384] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 541.511974][T21384] ? clear_bhb_loop+0x70/0xc0 [ 541.512003][T21384] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 541.512027][T21384] RIP: 0033:0x7f73d159f559 [ 541.512049][T21384] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 541.512070][T21384] RSP: 002b:00007f73d24ac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 541.512096][T21384] RAX: ffffffffffffffda RBX: 00007f73d1825fa0 RCX: 00007f73d159f559 [ 541.512113][T21384] RDX: 0000000000000094 RSI: 0000200000001340 RDI: 0000000000000005 [ 541.512128][T21384] RBP: 00007f73d24ac090 R08: 0000000000000000 R09: 0000000000000000 [ 541.512142][T21384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 541.512156][T21384] R13: 00007f73d1826038 R14: 00007f73d1825fa0 R15: 00007ffc7f867458 [ 541.512194][T21384] [ 541.607499][T21379] sctp: [Deprecated]: syz.0.4273 (pid 21379) Use of int in max_burst socket option. [ 541.607499][T21379] Use struct sctp_assoc_value instead [ 541.790535][T21379] netlink: 'syz.0.4273': attribute type 10 has an invalid length. [ 542.100660][T21397] FAULT_INJECTION: forcing a failure. [ 542.100660][T21397] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 542.100696][T21397] CPU: 1 UID: 0 PID: 21397 Comm: syz.4.4279 Not tainted syzkaller #0 PREEMPT(full) [ 542.100722][T21397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 542.100737][T21397] Call Trace: [ 542.100746][T21397] [ 542.100757][T21397] dump_stack_lvl+0xe8/0x150 [ 542.100794][T21397] should_fail_ex+0x410/0x560 [ 542.100833][T21397] _copy_to_user+0x31/0xb0 [ 542.100870][T21397] bpf_verifier_vlog+0x3a2/0x900 [ 542.100912][T21397] bpf_verifier_log_write+0x11d/0x1a0 [ 542.100938][T21397] ? __pfx_reg_type_str+0x10/0x10 [ 542.100966][T21397] ? __pfx_bpf_verifier_log_write+0x10/0x10 [ 542.101006][T21397] print_reg_state+0x1716/0x1a30 [ 542.101043][T21397] ? __pfx_print_reg_state+0x10/0x10 [ 542.101066][T21397] ? _copy_to_user+0x8a/0xb0 [ 542.101102][T21397] ? bpf_verifier_vlog+0x55a/0x900 [ 542.101139][T21397] ? bpf_verifier_log_write+0x11d/0x1a0 [ 542.101171][T21397] ? __pfx_bpf_verifier_log_write+0x10/0x10 [ 542.101205][T21397] ? bpf_verifier_log_write+0x11d/0x1a0 [ 542.101234][T21397] print_verifier_state+0x205/0x1a40 [ 542.101261][T21397] ? __pfx_bpf_verifier_log_write+0x10/0x10 [ 542.101294][T21397] ? __pfx_print_verifier_state+0x10/0x10 [ 542.101319][T21397] ? bpf_vlog_reset+0x2aa/0x340 [ 542.101346][T21397] ? print_insn_state+0x106/0x170 [ 542.101375][T21397] do_check_insn+0xa2bc/0x17d00 [ 542.101426][T21397] ? lock_acquire+0x115/0x350 [ 542.101461][T21397] ? __pfx_do_check_insn+0x10/0x10 [ 542.101505][T21397] ? _copy_to_user+0x8a/0xb0 [ 542.101548][T21397] ? bpf_verifier_vlog+0x55a/0x900 [ 542.101575][T21397] ? __pfx_verbose+0x10/0x10 [ 542.101605][T21397] ? verbose+0x11d/0x1a0 [ 542.101635][T21397] ? __pfx_verbose+0x10/0x10 [ 542.101660][T21397] ? bpf_push_jmp_history+0x27d/0x6d0 [ 542.101698][T21397] do_check_common+0x364c/0x5610 [ 542.101771][T21397] ? __pfx_do_check_common+0x10/0x10 [ 542.101802][T21397] ? __pfx_verbose+0x10/0x10 [ 542.101822][T21397] ? __pfx_bpf_disasm_kfunc_name+0x10/0x10 [ 542.101862][T21397] do_check_main+0xa2/0x1f0 [ 542.101893][T21397] bpf_check+0x2775/0x2ef0 [ 542.101939][T21397] ? __pfx_bpf_check+0x10/0x10 [ 542.101968][T21397] ? bpf_obj_name_cpy+0x194/0x1e0 [ 542.102005][T21397] bpf_prog_load+0x14d6/0x1c20 [ 542.102047][T21397] ? __pfx_bpf_prog_load+0x10/0x10 [ 542.102105][T21397] __sys_bpf+0xd0d/0xd90 [ 542.102142][T21397] ? __pfx___sys_bpf+0x10/0x10 [ 542.102183][T21397] ? __fget_files+0x2a/0x420 [ 542.102237][T21397] ? ksys_write+0x242/0x270 [ 542.102264][T21397] ? __pfx_ksys_write+0x10/0x10 [ 542.102294][T21397] __x64_sys_bpf+0xba/0xd0 [ 542.102323][T21397] do_syscall_64+0x166/0x520 [ 542.102355][T21397] ? trace_irq_disable+0x3b/0x140 [ 542.102380][T21397] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.102404][T21397] ? clear_bhb_loop+0x70/0xc0 [ 542.102433][T21397] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.102456][T21397] RIP: 0033:0x7f691759f559 [ 542.102478][T21397] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 542.102498][T21397] RSP: 002b:00007f69184a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 542.102529][T21397] RAX: ffffffffffffffda RBX: 00007f6917825fa0 RCX: 00007f691759f559 [ 542.102547][T21397] RDX: 0000000000000070 RSI: 0000200000000100 RDI: 0000000000000005 [ 542.102562][T21397] RBP: 00007f69184a6090 R08: 0000000000000000 R09: 0000000000000000 [ 542.102577][T21397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 542.102591][T21397] R13: 00007f6917826038 R14: 00007f6917825fa0 R15: 00007ffec6ca1b18 [ 542.102629][T21397] [ 542.747085][T21415] FAULT_INJECTION: forcing a failure. [ 542.747085][T21415] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 542.747124][T21415] CPU: 0 UID: 0 PID: 21415 Comm: syz.2.4285 Not tainted syzkaller #0 PREEMPT(full) [ 542.747150][T21415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 542.747165][T21415] Call Trace: [ 542.747174][T21415] [ 542.747185][T21415] dump_stack_lvl+0xe8/0x150 [ 542.747224][T21415] should_fail_ex+0x410/0x560 [ 542.747262][T21415] _copy_from_iter+0x1d3/0x1660 [ 542.747309][T21415] ? __pfx__copy_from_iter+0x10/0x10 [ 542.747346][T21415] ? rcu_is_watching+0x16/0xb0 [ 542.747377][T21415] ? __alloc_frozen_pages_noprof+0x29e/0x5a0 [ 542.747410][T21415] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 542.747448][T21415] copy_page_from_iter+0x219/0x2d0 [ 542.747486][T21415] skb_copy_datagram_from_iter+0x2f4/0x720 [ 542.747536][T21415] skb_copy_datagram_from_iter_full+0x103/0x190 [ 542.747579][T21415] ? __pfx_skb_copy_datagram_from_iter_full+0x10/0x10 [ 542.747627][T21415] ? skb_set_owner_w+0x263/0x3d0 [ 542.747665][T21415] virtio_transport_alloc_skb+0x8d7/0x13e0 [ 542.747724][T21415] ? __pfx_virtio_transport_alloc_skb+0x10/0x10 [ 542.747754][T21415] ? queue_work_on+0x159/0x1d0 [ 542.747786][T21415] ? __local_bh_enable_ip+0xd6/0x140 [ 542.747824][T21415] virtio_transport_send_pkt_info+0x8e0/0x12b0 [ 542.747876][T21415] ? __pfx_virtio_transport_send_pkt_info+0x10/0x10 [ 542.747906][T21415] ? virtio_transport_seqpacket_enqueue+0x11b/0x250 [ 542.747935][T21415] ? __local_bh_enable_ip+0xd6/0x140 [ 542.747978][T21415] virtio_transport_seqpacket_enqueue+0x1b4/0x250 [ 542.748008][T21415] ? __pfx_virtio_transport_seqpacket_enqueue+0x10/0x10 [ 542.748045][T21415] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 542.748082][T21415] vsock_connectible_sendmsg+0xac2/0x1070 [ 542.748132][T21415] ? __pfx_vsock_connectible_sendmsg+0x10/0x10 [ 542.748161][T21415] ? __lock_acquire+0x747/0x2de0 [ 542.748186][T21415] ? __pfx_aa_sk_perm+0x10/0x10 [ 542.748218][T21415] ? __pfx_woken_wake_function+0x10/0x10 [ 542.748254][T21415] ? aa_sock_msg_perm+0x144/0x210 [ 542.748295][T21415] ? apparmor_socket_sendmsg+0x98/0x360 [ 542.748328][T21415] ? __pfx_vsock_connectible_sendmsg+0x10/0x10 [ 542.748359][T21415] sock_sendmsg_nosec+0x14e/0x190 [ 542.748388][T21415] ____sys_sendmsg+0x54e/0x850 [ 542.748427][T21415] ? __pfx_____sys_sendmsg+0x10/0x10 [ 542.748472][T21415] ? import_iovec+0x73/0xa0 [ 542.748511][T21415] ___sys_sendmsg+0x2a5/0x360 [ 542.748543][T21415] ? __lock_acquire+0x747/0x2de0 [ 542.748573][T21415] ? __pfx____sys_sendmsg+0x10/0x10 [ 542.748612][T21415] ? kstrtouint+0x6e/0xe0 [ 542.748670][T21415] ? __fget_files+0x2a/0x420 [ 542.748704][T21415] ? __fget_files+0x3a2/0x420 [ 542.748751][T21415] __sys_sendmmsg+0x273/0x4d0 [ 542.748791][T21415] ? __pfx___sys_sendmmsg+0x10/0x10 [ 542.748836][T21415] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 542.748888][T21415] ? ksys_write+0x242/0x270 [ 542.748915][T21415] ? __pfx_ksys_write+0x10/0x10 [ 542.748947][T21415] __x64_sys_sendmmsg+0xa0/0xc0 [ 542.748992][T21415] do_syscall_64+0x166/0x520 [ 542.749024][T21415] ? trace_irq_disable+0x3b/0x140 [ 542.749049][T21415] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.749074][T21415] ? clear_bhb_loop+0x70/0xc0 [ 542.749103][T21415] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.749127][T21415] RIP: 0033:0x7f73d159f559 [ 542.749149][T21415] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 542.749169][T21415] RSP: 002b:00007f73d24ac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 542.749194][T21415] RAX: ffffffffffffffda RBX: 00007f73d1825fa0 RCX: 00007f73d159f559 [ 542.749212][T21415] RDX: 0000000000000051 RSI: 0000200000001780 RDI: 0000000000000003 [ 542.749228][T21415] RBP: 00007f73d24ac090 R08: 0000000000000000 R09: 0000000000000000 [ 542.749243][T21415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 542.749258][T21415] R13: 00007f73d1826038 R14: 00007f73d1825fa0 R15: 00007ffc7f867458 [ 542.749296][T21415] [ 542.883876][T21416] netlink: 260 bytes leftover after parsing attributes in process `syz.4.4284'. [ 543.143979][T21418] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4284'. [ 543.668990][T21443] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4291'. [ 543.882661][T21443] xt_IDLETIMER: timeout value is zero [ 544.010866][T21459] x_tables: duplicate underflow at hook 2 [ 544.043279][T21459] FAULT_INJECTION: forcing a failure. [ 544.043279][T21459] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 544.043316][T21459] CPU: 1 UID: 0 PID: 21459 Comm: syz.1.4296 Not tainted syzkaller #0 PREEMPT(full) [ 544.043341][T21459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 544.043356][T21459] Call Trace: [ 544.043365][T21459] [ 544.043375][T21459] dump_stack_lvl+0xe8/0x150 [ 544.043422][T21459] should_fail_ex+0x410/0x560 [ 544.043459][T21459] _copy_from_user+0x2d/0xb0 [ 544.043495][T21459] ___sys_sendmsg+0x1c6/0x360 [ 544.043535][T21459] ? __pfx____sys_sendmsg+0x10/0x10 [ 544.043566][T21459] ? __lock_acquire+0x747/0x2de0 [ 544.043648][T21459] __sys_sendmmsg+0x273/0x4d0 [ 544.043688][T21459] ? __pfx___sys_sendmmsg+0x10/0x10 [ 544.043731][T21459] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 544.043782][T21459] ? ksys_write+0x242/0x270 [ 544.043809][T21459] ? __pfx_ksys_write+0x10/0x10 [ 544.043841][T21459] __x64_sys_sendmmsg+0xa0/0xc0 [ 544.043876][T21459] do_syscall_64+0x166/0x520 [ 544.043912][T21459] ? trace_irq_disable+0x3b/0x140 [ 544.043937][T21459] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.043960][T21459] ? clear_bhb_loop+0x70/0xc0 [ 544.043989][T21459] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.044012][T21459] RIP: 0033:0x7f64a3b9f559 [ 544.044033][T21459] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 544.044054][T21459] RSP: 002b:00007f64a4a4f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 544.044079][T21459] RAX: ffffffffffffffda RBX: 00007f64a3e25fa0 RCX: 00007f64a3b9f559 [ 544.044097][T21459] RDX: 0400000000000247 RSI: 00002000000bd000 RDI: 0000000000000007 [ 544.044113][T21459] RBP: 00007f64a4a4f090 R08: 0000000000000000 R09: 0000000000000000 [ 544.044127][T21459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 544.044141][T21459] R13: 00007f64a3e26038 R14: 00007f64a3e25fa0 R15: 00007ffd57fdc7b8 [ 544.044179][T21459] [ 544.292041][T12375] udevd[12375]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 544.423433][T21464] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4297'. [ 544.471070][T21472] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4300'. [ 544.471102][T21472] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4300'. [ 544.471122][T21472] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4300'. [ 544.475137][T21464] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4297'. [ 544.817119][T21489] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4305'. [ 545.215792][T21511] x_tables: duplicate underflow at hook 2 [ 545.232321][T21511] FAULT_INJECTION: forcing a failure. [ 545.232321][T21511] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 545.232358][T21511] CPU: 0 UID: 0 PID: 21511 Comm: syz.0.4313 Not tainted syzkaller #0 PREEMPT(full) [ 545.232404][T21511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 545.232427][T21511] Call Trace: [ 545.232437][T21511] [ 545.232447][T21511] dump_stack_lvl+0xe8/0x150 [ 545.232486][T21511] should_fail_ex+0x410/0x560 [ 545.232524][T21511] _copy_from_user+0x2d/0xb0 [ 545.232561][T21511] ___sys_sendmsg+0x1c6/0x360 [ 545.232601][T21511] ? __pfx____sys_sendmsg+0x10/0x10 [ 545.232631][T21511] ? __lock_acquire+0x747/0x2de0 [ 545.232710][T21511] __sys_sendmmsg+0x273/0x4d0 [ 545.232748][T21511] ? __pfx___sys_sendmmsg+0x10/0x10 [ 545.232791][T21511] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 545.232839][T21511] ? ksys_write+0x242/0x270 [ 545.232865][T21511] ? __pfx_ksys_write+0x10/0x10 [ 545.232896][T21511] __x64_sys_sendmmsg+0xa0/0xc0 [ 545.232932][T21511] do_syscall_64+0x166/0x520 [ 545.232963][T21511] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 545.232986][T21511] ? clear_bhb_loop+0x70/0xc0 [ 545.233014][T21511] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 545.233037][T21511] RIP: 0033:0x7f8f3b79f559 [ 545.233058][T21511] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 545.233077][T21511] RSP: 002b:00007f8f3c741028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 545.233101][T21511] RAX: ffffffffffffffda RBX: 00007f8f3ba25fa0 RCX: 00007f8f3b79f559 [ 545.233118][T21511] RDX: 0400000000000247 RSI: 00002000000bd000 RDI: 0000000000000007 [ 545.233134][T21511] RBP: 00007f8f3c741090 R08: 0000000000000000 R09: 0000000000000000 [ 545.233148][T21511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 545.233162][T21511] R13: 00007f8f3ba26038 R14: 00007f8f3ba25fa0 R15: 00007fff78f282d8 [ 545.233199][T21511] [ 546.038595][T21547] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4326'. [ 546.044452][T21548] FAULT_INJECTION: forcing a failure. [ 546.044452][T21548] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 546.044489][T21548] CPU: 1 UID: 0 PID: 21548 Comm: syz.2.4327 Not tainted syzkaller #0 PREEMPT(full) [ 546.044513][T21548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 546.044527][T21548] Call Trace: [ 546.044537][T21548] [ 546.044547][T21548] dump_stack_lvl+0xe8/0x150 [ 546.044586][T21548] should_fail_ex+0x410/0x560 [ 546.044625][T21548] _copy_from_iter+0x1d3/0x1660 [ 546.044669][T21548] ? __pfx__copy_from_iter+0x10/0x10 [ 546.044705][T21548] ? rcu_is_watching+0x16/0xb0 [ 546.044735][T21548] ? __alloc_frozen_pages_noprof+0x29e/0x5a0 [ 546.044769][T21548] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 546.044801][T21548] copy_page_from_iter+0x219/0x2d0 [ 546.044839][T21548] skb_copy_datagram_from_iter+0x2f4/0x720 [ 546.044890][T21548] skb_copy_datagram_from_iter_full+0x103/0x190 [ 546.044935][T21548] ? __pfx_skb_copy_datagram_from_iter_full+0x10/0x10 [ 546.044984][T21548] ? skb_set_owner_w+0x263/0x3d0 [ 546.045020][T21548] virtio_transport_alloc_skb+0x8d7/0x13e0 [ 546.045068][T21548] ? __pfx_virtio_transport_alloc_skb+0x10/0x10 [ 546.045098][T21548] ? queue_work_on+0x159/0x1d0 [ 546.045129][T21548] ? __local_bh_enable_ip+0xd6/0x140 [ 546.045168][T21548] virtio_transport_send_pkt_info+0x8e0/0x12b0 [ 546.045220][T21548] ? __pfx_virtio_transport_send_pkt_info+0x10/0x10 [ 546.045258][T21548] ? virtio_transport_seqpacket_enqueue+0x11b/0x250 [ 546.045287][T21548] ? __local_bh_enable_ip+0xd6/0x140 [ 546.045323][T21548] virtio_transport_seqpacket_enqueue+0x1b4/0x250 [ 546.045351][T21548] ? __pfx_virtio_transport_seqpacket_enqueue+0x10/0x10 [ 546.045386][T21548] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 546.045419][T21548] vsock_connectible_sendmsg+0xac2/0x1070 [ 546.045468][T21548] ? __pfx_vsock_connectible_sendmsg+0x10/0x10 [ 546.045496][T21548] ? __lock_acquire+0x747/0x2de0 [ 546.045520][T21548] ? __pfx_aa_sk_perm+0x10/0x10 [ 546.045551][T21548] ? __pfx_woken_wake_function+0x10/0x10 [ 546.045585][T21548] ? aa_sock_msg_perm+0x144/0x210 [ 546.045623][T21548] ? apparmor_socket_sendmsg+0x98/0x360 [ 546.045655][T21548] ? __pfx_vsock_connectible_sendmsg+0x10/0x10 [ 546.045684][T21548] sock_sendmsg_nosec+0x14e/0x190 [ 546.045713][T21548] ____sys_sendmsg+0x54e/0x850 [ 546.045752][T21548] ? __pfx_____sys_sendmsg+0x10/0x10 [ 546.045793][T21548] ? import_iovec+0x73/0xa0 [ 546.045833][T21548] ___sys_sendmsg+0x2a5/0x360 [ 546.045864][T21548] ? __lock_acquire+0x747/0x2de0 [ 546.045893][T21548] ? __pfx____sys_sendmsg+0x10/0x10 [ 546.045930][T21548] ? kstrtouint+0x6e/0xe0 [ 546.045989][T21548] ? __fget_files+0x2a/0x420 [ 546.046022][T21548] ? __fget_files+0x3a2/0x420 [ 546.046068][T21548] __sys_sendmmsg+0x273/0x4d0 [ 546.046109][T21548] ? __pfx___sys_sendmmsg+0x10/0x10 [ 546.046153][T21548] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 546.046204][T21548] ? ksys_write+0x242/0x270 [ 546.046238][T21548] ? __pfx_ksys_write+0x10/0x10 [ 546.046270][T21548] __x64_sys_sendmmsg+0xa0/0xc0 [ 546.046306][T21548] do_syscall_64+0x166/0x520 [ 546.046339][T21548] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 546.046363][T21548] ? clear_bhb_loop+0x70/0xc0 [ 546.046393][T21548] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 546.046417][T21548] RIP: 0033:0x7f73d159f559 [ 546.046438][T21548] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 546.046458][T21548] RSP: 002b:00007f73d24ac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 546.046483][T21548] RAX: ffffffffffffffda RBX: 00007f73d1825fa0 RCX: 00007f73d159f559 [ 546.046501][T21548] RDX: 0000000000000051 RSI: 0000200000001780 RDI: 0000000000000003 [ 546.046516][T21548] RBP: 00007f73d24ac090 R08: 0000000000000000 R09: 0000000000000000 [ 546.046531][T21548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 546.046546][T21548] R13: 00007f73d1826038 R14: 00007f73d1825fa0 R15: 00007ffc7f867458 [ 546.046584][T21548] [ 546.340645][ T1730] block nbd0: Possible stuck request ffff8880283ce000: control (read@0,1024B). Runtime 270 seconds [ 546.340691][ T1730] block nbd0: Possible stuck request ffff8880283ce1c0: control (read@1024,1024B). Runtime 270 seconds [ 546.340729][ T1730] block nbd0: Possible stuck request ffff8880283ce380: control (read@2048,1024B). Runtime 270 seconds [ 546.340757][ T1730] block nbd0: Possible stuck request ffff8880283ce540: control (read@3072,1024B). Runtime 270 seconds [ 546.686674][T21561] net_ratelimit: 1289 callbacks suppressed [ 546.686698][T21561] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.700540][T21564] netlink: 'syz.1.4330': attribute type 61 has an invalid length. [ 546.700613][T21564] netlink: 'syz.1.4330': attribute type 268 has an invalid length. [ 546.766196][T21562] pimreg0: tun_chr_ioctl cmd 1074025677 [ 546.766335][T21562] pimreg0: linktype set to 0 [ 546.985509][T21578] openvswitch: netlink: Flow actions attr not present in new flow. [ 547.182953][T21587] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4341'. [ 547.569138][T21609] netlink: 'syz.3.4348': attribute type 29 has an invalid length. [ 547.569167][T21609] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4348'. [ 547.618005][T16501] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.618197][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 548.122355][T21620] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4351'. [ 548.171325][T21620] macvlan3: entered allmulticast mode [ 548.186715][ T61] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 548.186960][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 548.491354][T21633] syzkaller0: entered promiscuous mode [ 548.491380][T21633] syzkaller0: entered allmulticast mode [ 548.509188][T21638] FAULT_INJECTION: forcing a failure. [ 548.509188][T21638] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 548.509276][T21638] CPU: 1 UID: 0 PID: 21638 Comm: syz.3.4356 Not tainted syzkaller #0 PREEMPT(full) [ 548.509366][T21638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 548.509400][T21638] Call Trace: [ 548.509429][T21638] [ 548.509453][T21638] dump_stack_lvl+0xe8/0x150 [ 548.509549][T21638] should_fail_ex+0x410/0x560 [ 548.509652][T21638] _copy_from_iter+0x1d3/0x1660 [ 548.509778][T21638] ? __pfx__copy_from_iter+0x10/0x10 [ 548.509864][T21638] ? rcu_is_watching+0x16/0xb0 [ 548.509945][T21638] ? __alloc_frozen_pages_noprof+0x29e/0x5a0 [ 548.510030][T21638] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 548.510107][T21638] copy_page_from_iter+0x219/0x2d0 [ 548.510195][T21638] skb_copy_datagram_from_iter+0x2f4/0x720 [ 548.510341][T21638] skb_copy_datagram_from_iter_full+0x103/0x190 [ 548.510461][T21638] ? __pfx_skb_copy_datagram_from_iter_full+0x10/0x10 [ 548.510579][T21638] ? skb_set_owner_w+0x263/0x3d0 [ 548.510665][T21638] virtio_transport_alloc_skb+0x8d7/0x13e0 [ 548.510791][T21638] ? __pfx_virtio_transport_alloc_skb+0x10/0x10 [ 548.510855][T21638] ? queue_work_on+0x162/0x1d0 [ 548.510943][T21638] ? __local_bh_enable_ip+0xd6/0x140 [ 548.511041][T21638] virtio_transport_send_pkt_info+0x8e0/0x12b0 [ 548.511167][T21638] ? __pfx_virtio_transport_send_pkt_info+0x10/0x10 [ 548.511245][T21638] ? virtio_transport_seqpacket_enqueue+0x11b/0x250 [ 548.511319][T21638] ? __local_bh_enable_ip+0xd6/0x140 [ 548.511407][T21638] virtio_transport_seqpacket_enqueue+0x1b4/0x250 [ 548.511483][T21638] ? __pfx_virtio_transport_seqpacket_enqueue+0x10/0x10 [ 548.511570][T21638] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 548.511621][T21638] vsock_connectible_sendmsg+0xac2/0x1070 [ 548.511669][T21638] ? __pfx_vsock_connectible_sendmsg+0x10/0x10 [ 548.511723][T21638] ? __lock_acquire+0x747/0x2de0 [ 548.511803][T21638] ? __pfx_aa_sk_perm+0x10/0x10 [ 548.511890][T21638] ? __pfx_woken_wake_function+0x10/0x10 [ 548.511985][T21638] ? aa_sock_msg_perm+0x144/0x210 [ 548.512082][T21638] ? apparmor_socket_sendmsg+0x98/0x360 [ 548.512166][T21638] ? __pfx_vsock_connectible_sendmsg+0x10/0x10 [ 548.512229][T21638] sock_sendmsg_nosec+0x14e/0x190 [ 548.512302][T21638] ____sys_sendmsg+0x54e/0x850 [ 548.512400][T21638] ? __pfx_____sys_sendmsg+0x10/0x10 [ 548.512509][T21638] ? import_iovec+0x73/0xa0 [ 548.512611][T21638] ___sys_sendmsg+0x2a5/0x360 [ 548.512696][T21638] ? __lock_acquire+0x747/0x2de0 [ 548.512763][T21638] ? __pfx____sys_sendmsg+0x10/0x10 [ 548.512868][T21638] ? kstrtouint+0x6e/0xe0 [ 548.513007][T21638] ? __fget_files+0x2a/0x420 [ 548.513092][T21638] ? __fget_files+0x3a2/0x420 [ 548.513216][T21638] __sys_sendmmsg+0x273/0x4d0 [ 548.513329][T21638] ? __pfx___sys_sendmmsg+0x10/0x10 [ 548.513437][T21638] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 548.513563][T21638] ? ksys_write+0x242/0x270 [ 548.513637][T21638] ? __pfx_ksys_write+0x10/0x10 [ 548.513712][T21638] __x64_sys_sendmmsg+0xa0/0xc0 [ 548.513797][T21638] do_syscall_64+0x166/0x520 [ 548.513879][T21638] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 548.513936][T21638] ? clear_bhb_loop+0x70/0xc0 [ 548.514010][T21638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 548.514071][T21638] RIP: 0033:0x7fd19b39f559 [ 548.514125][T21638] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 548.514176][T21638] RSP: 002b:00007fd19c291028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 548.514226][T21638] RAX: ffffffffffffffda RBX: 00007fd19b625fa0 RCX: 00007fd19b39f559 [ 548.514267][T21638] RDX: 0000000000000051 RSI: 0000200000001780 RDI: 0000000000000003 [ 548.514308][T21638] RBP: 00007fd19c291090 R08: 0000000000000000 R09: 0000000000000000 [ 548.514342][T21638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 548.514375][T21638] R13: 00007fd19b626038 R14: 00007fd19b625fa0 R15: 00007ffd5eb8e978 [ 548.514470][T21638] [ 549.170857][T21658] netlink: 'syz.0.4359': attribute type 1 has an invalid length. [ 549.678230][T21680] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4369'. [ 549.753023][T21680] 8021q: adding VLAN 0 to HW filter on device bond12 [ 549.809181][T21689] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4373'. [ 549.815689][T21680] macvlan12: entered promiscuous mode [ 549.815714][T21680] bond12: entered promiscuous mode [ 549.836564][T21680] macvlan12: entered allmulticast mode [ 549.836589][T21680] bond12: entered allmulticast mode [ 549.837086][T21680] 8021q: adding VLAN 0 to HW filter on device macvlan12 [ 549.843226][T21680] bond12: left allmulticast mode [ 549.843276][T21680] bond12: left promiscuous mode [ 549.920416][T21686] netlink: 596 bytes leftover after parsing attributes in process `syz.4.4372'. [ 550.006286][T21693] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4374'. [ 550.006314][T21693] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4374'. [ 550.006342][T21693] netlink: 'syz.1.4374': attribute type 11 has an invalid length. [ 550.006357][T21693] netlink: 'syz.1.4374': attribute type 13 has an invalid length. [ 550.137988][T21695] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4375'. [ 550.303267][T21706] tipc: Enabled bearer , priority 0 [ 550.303971][T21706] syzkaller0: entered promiscuous mode [ 550.303994][T21706] syzkaller0: entered allmulticast mode [ 550.327781][T21706] tipc: Resetting bearer [ 550.330932][T21705] tipc: Resetting bearer [ 550.390771][T21705] tipc: Disabling bearer [ 550.554057][T21721] tipc: Failed to remove unknown binding: 66,0,0/2130706433:264959365/264959366 [ 550.582430][T21721] tipc: Failed to remove unknown binding: 66,0,0/2130706433:264959365/264959366 [ 550.885878][T21738] geneve5: entered promiscuous mode [ 551.132772][T21743] openvswitch: netlink: Flow actions attr not present in new flow. [ 551.398342][T21760] tipc: Enabled bearer , priority 0 [ 551.400404][T21760] syzkaller0: entered promiscuous mode [ 551.400427][T21760] syzkaller0: entered allmulticast mode [ 551.440766][T21760] tipc: Resetting bearer [ 551.467971][T21759] tipc: Resetting bearer [ 551.490744][T21765] __nla_validate_parse: 2 callbacks suppressed [ 551.490770][T21765] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4394'. [ 551.542082][T21759] tipc: Disabling bearer [ 552.093112][T21782] netlink: 'syz.0.4399': attribute type 1 has an invalid length. [ 552.181147][T21792] block nbd0: reconnected socket [ 552.205484][T21782] bond13: entered promiscuous mode [ 552.208010][T21782] 8021q: adding VLAN 0 to HW filter on device bond13 [ 552.219757][T21794] FAULT_INJECTION: forcing a failure. [ 552.219757][T21794] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 552.219792][T21794] CPU: 0 UID: 0 PID: 21794 Comm: syz.3.4402 Not tainted syzkaller #0 PREEMPT(full) [ 552.219817][T21794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 552.219831][T21794] Call Trace: [ 552.219841][T21794] [ 552.219850][T21794] dump_stack_lvl+0xe8/0x150 [ 552.219888][T21794] should_fail_ex+0x410/0x560 [ 552.219927][T21794] _copy_from_iter+0x1d3/0x1660 [ 552.219973][T21794] ? __pfx__copy_from_iter+0x10/0x10 [ 552.220010][T21794] ? rcu_is_watching+0x16/0xb0 [ 552.220037][T21794] ? __alloc_frozen_pages_noprof+0x29e/0x5a0 [ 552.220070][T21794] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 552.220109][T21794] copy_page_from_iter+0x219/0x2d0 [ 552.220152][T21794] skb_copy_datagram_from_iter+0x2f4/0x720 [ 552.220202][T21794] skb_copy_datagram_from_iter_full+0x103/0x190 [ 552.220241][T21794] ? __pfx_skb_copy_datagram_from_iter_full+0x10/0x10 [ 552.220288][T21794] ? skb_set_owner_w+0x263/0x3d0 [ 552.220381][T21794] virtio_transport_alloc_skb+0x8d7/0x13e0 [ 552.220428][T21794] ? __pfx_virtio_transport_alloc_skb+0x10/0x10 [ 552.220458][T21794] ? queue_work_on+0x159/0x1d0 [ 552.220486][T21794] ? __local_bh_enable_ip+0xd6/0x140 [ 552.220523][T21794] virtio_transport_send_pkt_info+0x8e0/0x12b0 [ 552.220570][T21794] ? __pfx_virtio_transport_send_pkt_info+0x10/0x10 [ 552.220598][T21794] ? virtio_transport_seqpacket_enqueue+0x11b/0x250 [ 552.220626][T21794] ? __local_bh_enable_ip+0xd6/0x140 [ 552.220661][T21794] virtio_transport_seqpacket_enqueue+0x1b4/0x250 [ 552.220690][T21794] ? __pfx_virtio_transport_seqpacket_enqueue+0x10/0x10 [ 552.220727][T21794] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 552.220763][T21794] vsock_connectible_sendmsg+0xac2/0x1070 [ 552.220812][T21794] ? __pfx_vsock_connectible_sendmsg+0x10/0x10 [ 552.220840][T21794] ? __lock_acquire+0x747/0x2de0 [ 552.220865][T21794] ? __pfx_aa_sk_perm+0x10/0x10 [ 552.220897][T21794] ? __pfx_woken_wake_function+0x10/0x10 [ 552.220931][T21794] ? aa_sock_msg_perm+0x144/0x210 [ 552.220975][T21794] ? apparmor_socket_sendmsg+0x98/0x360 [ 552.221007][T21794] ? __pfx_vsock_connectible_sendmsg+0x10/0x10 [ 552.221034][T21794] sock_sendmsg_nosec+0x14e/0x190 [ 552.221062][T21794] ____sys_sendmsg+0x54e/0x850 [ 552.221100][T21794] ? __pfx_____sys_sendmsg+0x10/0x10 [ 552.221145][T21794] ? import_iovec+0x73/0xa0 [ 552.221183][T21794] ___sys_sendmsg+0x2a5/0x360 [ 552.221222][T21794] ? __lock_acquire+0x747/0x2de0 [ 552.221252][T21794] ? __pfx____sys_sendmsg+0x10/0x10 [ 552.221290][T21794] ? kstrtouint+0x6e/0xe0 [ 552.221357][T21794] ? __fget_files+0x2a/0x420 [ 552.221390][T21794] ? __fget_files+0x3a2/0x420 [ 552.221428][T21794] __sys_sendmmsg+0x273/0x4d0 [ 552.221459][T21794] ? __pfx___sys_sendmmsg+0x10/0x10 [ 552.221492][T21794] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 552.221531][T21794] ? ksys_write+0x242/0x270 [ 552.221552][T21794] ? __pfx_ksys_write+0x10/0x10 [ 552.221576][T21794] __x64_sys_sendmmsg+0xa0/0xc0 [ 552.221604][T21794] do_syscall_64+0x166/0x520 [ 552.221628][T21794] ? trace_irq_disable+0x3b/0x140 [ 552.221647][T21794] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.221665][T21794] ? clear_bhb_loop+0x70/0xc0 [ 552.221687][T21794] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.221705][T21794] RIP: 0033:0x7fd19b39f559 [ 552.221723][T21794] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 552.221739][T21794] RSP: 002b:00007fd19c291028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 552.221758][T21794] RAX: ffffffffffffffda RBX: 00007fd19b625fa0 RCX: 00007fd19b39f559 [ 552.221772][T21794] RDX: 0000000000000051 RSI: 0000200000001780 RDI: 0000000000000003 [ 552.221784][T21794] RBP: 00007fd19c291090 R08: 0000000000000000 R09: 0000000000000000 [ 552.221795][T21794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 552.221807][T21794] R13: 00007fd19b626038 R14: 00007fd19b625fa0 R15: 00007ffd5eb8e978 [ 552.221837][T21794] [ 552.437401][T21797] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4403'. [ 552.642934][ T5629] block nbd0: Receive control failed (result -32) [ 552.683227][T21782] 8021q: adding VLAN 0 to HW filter on device bond13 [ 552.688060][T21782] bond13: (slave xfrm1): The slave device specified does not support setting the MAC address [ 552.688127][T21782] bond13: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 552.724029][T21782] bond13: (slave xfrm1): making interface the new active one [ 552.724472][T21782] xfrm1: entered promiscuous mode [ 552.744245][T16501] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.744657][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.766955][T21782] xfrm1: left promiscuous mode [ 552.830118][T21805] netlink: 'syz.3.4405': attribute type 13 has an invalid length. [ 552.830141][T21805] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4405'. [ 552.830601][T21805] bond0: left allmulticast mode [ 552.831067][T21805] 8021q: adding VLAN 0 to HW filter on device bond0 [ 553.076049][T21809] ip6gre3: entered allmulticast mode [ 553.217036][ T435] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.217287][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.321999][T21826] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4411'. [ 553.435810][T21826] 8021q: adding VLAN 0 to HW filter on device bond22 [ 553.450388][T21834] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4413'. [ 553.479577][T21831] macvlan4: entered promiscuous mode [ 553.479605][T21831] bond22: entered promiscuous mode [ 553.479808][T21831] macvlan4: entered allmulticast mode [ 553.479828][T21831] bond22: entered allmulticast mode [ 553.480605][T21831] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 553.484536][T21834] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4413'. [ 553.502449][T21831] bond22: left allmulticast mode [ 553.502499][T21831] bond22: left promiscuous mode [ 553.744093][T21854] FAULT_INJECTION: forcing a failure. [ 553.744093][T21854] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 553.744131][T21854] CPU: 0 UID: 0 PID: 21854 Comm: syz.1.4419 Not tainted syzkaller #0 PREEMPT(full) [ 553.744157][T21854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 553.744171][T21854] Call Trace: [ 553.744180][T21854] [ 553.744190][T21854] dump_stack_lvl+0xe8/0x150 [ 553.744228][T21854] should_fail_ex+0x410/0x560 [ 553.744267][T21854] _copy_from_iter+0x1d3/0x1660 [ 553.744312][T21854] ? __pfx__copy_from_iter+0x10/0x10 [ 553.744348][T21854] ? rcu_is_watching+0x16/0xb0 [ 553.744378][T21854] ? __alloc_frozen_pages_noprof+0x29e/0x5a0 [ 553.744412][T21854] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 553.744445][T21854] copy_page_from_iter+0x219/0x2d0 [ 553.744482][T21854] skb_copy_datagram_from_iter+0x2f4/0x720 [ 553.744532][T21854] skb_copy_datagram_from_iter_full+0x103/0x190 [ 553.744574][T21854] ? __pfx_skb_copy_datagram_from_iter_full+0x10/0x10 [ 553.744621][T21854] ? skb_set_owner_w+0x263/0x3d0 [ 553.744659][T21854] virtio_transport_alloc_skb+0x8d7/0x13e0 [ 553.744692][T21854] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 553.744731][T21854] ? __pfx_virtio_transport_alloc_skb+0x10/0x10 [ 553.744761][T21854] ? queue_work_on+0x159/0x1d0 [ 553.744803][T21854] ? __local_bh_enable_ip+0xd6/0x140 [ 553.744841][T21854] virtio_transport_send_pkt_info+0x8e0/0x12b0 [ 553.744892][T21854] ? __pfx_virtio_transport_send_pkt_info+0x10/0x10 [ 553.744922][T21854] ? virtio_transport_seqpacket_enqueue+0x11b/0x250 [ 553.744951][T21854] ? __local_bh_enable_ip+0xd6/0x140 [ 553.744987][T21854] virtio_transport_seqpacket_enqueue+0x1b4/0x250 [ 553.745016][T21854] ? __pfx_virtio_transport_seqpacket_enqueue+0x10/0x10 [ 553.745053][T21854] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 553.745089][T21854] vsock_connectible_sendmsg+0xac2/0x1070 [ 553.745139][T21854] ? __pfx_vsock_connectible_sendmsg+0x10/0x10 [ 553.745168][T21854] ? __lock_acquire+0x747/0x2de0 [ 553.745193][T21854] ? __pfx_aa_sk_perm+0x10/0x10 [ 553.745225][T21854] ? __pfx_woken_wake_function+0x10/0x10 [ 553.745260][T21854] ? aa_sock_msg_perm+0x144/0x210 [ 553.745301][T21854] ? apparmor_socket_sendmsg+0x98/0x360 [ 553.745334][T21854] ? __pfx_vsock_connectible_sendmsg+0x10/0x10 [ 553.745364][T21854] sock_sendmsg_nosec+0x14e/0x190 [ 553.745392][T21854] ____sys_sendmsg+0x54e/0x850 [ 553.745431][T21854] ? __pfx_____sys_sendmsg+0x10/0x10 [ 553.745475][T21854] ? import_iovec+0x73/0xa0 [ 553.745513][T21854] ___sys_sendmsg+0x2a5/0x360 [ 553.745545][T21854] ? __lock_acquire+0x747/0x2de0 [ 553.745574][T21854] ? __pfx____sys_sendmsg+0x10/0x10 [ 553.745614][T21854] ? kstrtouint+0x6e/0xe0 [ 553.745673][T21854] ? __fget_files+0x2a/0x420 [ 553.745706][T21854] ? __fget_files+0x3a2/0x420 [ 553.745752][T21854] __sys_sendmmsg+0x273/0x4d0 [ 553.745798][T21854] ? __pfx___sys_sendmmsg+0x10/0x10 [ 553.745842][T21854] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 553.745894][T21854] ? ksys_write+0x242/0x270 [ 553.745919][T21854] ? __pfx_ksys_write+0x10/0x10 [ 553.745950][T21854] __x64_sys_sendmmsg+0xa0/0xc0 [ 553.745985][T21854] do_syscall_64+0x166/0x520 [ 553.746015][T21854] ? trace_irq_disable+0x3b/0x140 [ 553.746039][T21854] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.746063][T21854] ? clear_bhb_loop+0x70/0xc0 [ 553.746092][T21854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.746115][T21854] RIP: 0033:0x7f64a3b9f559 [ 553.746137][T21854] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 553.746157][T21854] RSP: 002b:00007f64a4a4f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 553.746182][T21854] RAX: ffffffffffffffda RBX: 00007f64a3e25fa0 RCX: 00007f64a3b9f559 [ 553.746199][T21854] RDX: 0000000000000051 RSI: 0000200000001780 RDI: 0000000000000003 [ 553.746213][T21854] RBP: 00007f64a4a4f090 R08: 0000000000000000 R09: 0000000000000000 [ 553.746228][T21854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 553.746243][T21854] R13: 00007f64a3e26038 R14: 00007f64a3e25fa0 R15: 00007ffd57fdc7b8 [ 553.746281][T21854] [ 554.168437][T21857] netlink: 'syz.4.4417': attribute type 1 has an invalid length. [ 554.251761][T21862] netlink: 'syz.3.4420': attribute type 4 has an invalid length. [ 554.251786][T21862] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4420'. [ 554.251965][T21857] 8021q: adding VLAN 0 to HW filter on device bond15 [ 554.301083][T21862] .`: renamed from  (while UP) [ 554.322043][T21865] x_tables: duplicate underflow at hook 2 [ 554.323785][T21865] FAULT_INJECTION: forcing a failure. [ 554.323785][T21865] name failslab, interval 1, probability 0, space 0, times 0 [ 554.323820][T21865] CPU: 0 UID: 0 PID: 21865 Comm: syz.0.4421 Not tainted syzkaller #0 PREEMPT(full) [ 554.323855][T21865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 554.323870][T21865] Call Trace: [ 554.323880][T21865] [ 554.323891][T21865] dump_stack_lvl+0xe8/0x150 [ 554.323930][T21865] should_fail_ex+0x410/0x560 [ 554.323967][T21865] ? __alloc_skb+0x1db/0x7a0 [ 554.323997][T21865] should_failslab+0xa8/0x100 [ 554.324031][T21865] ? __alloc_skb+0x1db/0x7a0 [ 554.324058][T21865] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 554.324083][T21865] ? __alloc_skb+0x18d/0x7a0 [ 554.324112][T21865] ? __alloc_skb+0x1db/0x7a0 [ 554.324149][T21865] __alloc_skb+0x1db/0x7a0 [ 554.324182][T21865] alloc_skb_with_frags+0xc6/0x760 [ 554.324217][T21865] ? __lock_acquire+0x747/0x2de0 [ 554.324250][T21865] sock_alloc_send_pskb+0xb66/0xc90 [ 554.324302][T21865] ? lock_acquire+0x115/0x350 [ 554.324331][T21865] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 554.324372][T21865] ? sock_def_readable+0xae/0x550 [ 554.324409][T21865] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 554.324448][T21865] unix_dgram_sendmsg+0x4da/0x17b0 [ 554.324501][T21865] ? __lock_acquire+0x747/0x2de0 [ 554.324525][T21865] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 554.324560][T21865] ? aa_sock_msg_perm+0x129/0x210 [ 554.324600][T21865] ? apparmor_socket_sendmsg+0x98/0x360 [ 554.324633][T21865] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 554.324663][T21865] sock_sendmsg_nosec+0x14e/0x190 [ 554.324691][T21865] ____sys_sendmsg+0x54e/0x850 [ 554.324730][T21865] ? __pfx_____sys_sendmsg+0x10/0x10 [ 554.324773][T21865] ? import_iovec+0x73/0xa0 [ 554.324811][T21865] ___sys_sendmsg+0x2a5/0x360 [ 554.324851][T21865] ? __pfx____sys_sendmsg+0x10/0x10 [ 554.324880][T21865] ? __lock_acquire+0x747/0x2de0 [ 554.324957][T21865] __sys_sendmmsg+0x273/0x4d0 [ 554.324997][T21865] ? __pfx___sys_sendmmsg+0x10/0x10 [ 554.325039][T21865] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 554.325086][T21865] ? ksys_write+0x242/0x270 [ 554.325113][T21865] ? __pfx_ksys_write+0x10/0x10 [ 554.325158][T21865] __x64_sys_sendmmsg+0xa0/0xc0 [ 554.325212][T21865] do_syscall_64+0x166/0x520 [ 554.325243][T21865] ? trace_irq_disable+0x3b/0x140 [ 554.325268][T21865] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 554.325292][T21865] ? clear_bhb_loop+0x70/0xc0 [ 554.325321][T21865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 554.325345][T21865] RIP: 0033:0x7f8f3b79f559 [ 554.325367][T21865] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 554.325396][T21865] RSP: 002b:00007f8f3c741028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 554.325421][T21865] RAX: ffffffffffffffda RBX: 00007f8f3ba25fa0 RCX: 00007f8f3b79f559 [ 554.325438][T21865] RDX: 0400000000000247 RSI: 00002000000bd000 RDI: 0000000000000007 [ 554.325454][T21865] RBP: 00007f8f3c741090 R08: 0000000000000000 R09: 0000000000000000 [ 554.325468][T21865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 554.325480][T21865] R13: 00007f8f3ba26038 R14: 00007f8f3ba25fa0 R15: 00007fff78f282d8 [ 554.325516][T21865] [ 554.559215][T21857] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4417'. [ 554.693528][T21859] pim6reg: entered allmulticast mode [ 554.768412][T21857] bond15: (slave geneve3): making interface the new active one [ 554.771257][T21857] bond15: (slave geneve3): Enslaving as an active interface with an up link [ 554.801416][T21869] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4424'. [ 554.850275][T21869] macvlan12: entered allmulticast mode [ 555.227774][T21888] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4430'. [ 555.292005][T21894] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 555.420273][T21894] xt_CT: No such helper "netbios-ns" [ 555.472176][T21894] netlink: 'syz.3.4430': attribute type 1 has an invalid length. [ 556.160859][T21919] x_tables: duplicate underflow at hook 2 [ 556.325789][T21926] netlink: 'syz.3.4438': attribute type 1 has an invalid length. [ 556.498102][T21926] bond23: entered promiscuous mode [ 556.499399][T21926] 8021q: adding VLAN 0 to HW filter on device bond23 [ 556.523307][T21941] __nla_validate_parse: 2 callbacks suppressed [ 556.523329][T21941] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4442'. [ 556.566568][T21941] 8021q: adding VLAN 0 to HW filter on device bond19 [ 556.591022][T21941] macvlan3: entered promiscuous mode [ 556.591047][T21941] bond19: entered promiscuous mode [ 556.591483][T21941] macvlan3: entered allmulticast mode [ 556.591501][T21941] bond19: entered allmulticast mode [ 556.593714][T21941] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 556.619595][T21941] bond19: left allmulticast mode [ 556.619659][T21941] bond19: left promiscuous mode [ 557.005329][T21953] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4444'. [ 557.109438][T21953] syzkaller0: entered promiscuous mode [ 557.109466][T21953] syzkaller0: entered allmulticast mode [ 557.114022][T21955] netlink: 'syz.3.4446': attribute type 1 has an invalid length. [ 557.238820][T21968] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4449'. [ 557.262330][T21955] bond24: entered promiscuous mode [ 557.262785][T21955] 8021q: adding VLAN 0 to HW filter on device bond24 [ 557.348708][T21963] bond24: (slave bridge7): making interface the new active one [ 557.348739][T21963] bridge7: entered promiscuous mode [ 557.352777][T21963] bond24: (slave bridge7): Enslaving as an active interface with an up link [ 557.450854][T21979] FAULT_INJECTION: forcing a failure. [ 557.450854][T21979] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 557.450890][T21979] CPU: 0 UID: 0 PID: 21979 Comm: syz.1.4451 Not tainted syzkaller #0 PREEMPT(full) [ 557.450913][T21979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 557.450926][T21979] Call Trace: [ 557.450935][T21979] [ 557.450944][T21979] dump_stack_lvl+0xe8/0x150 [ 557.450980][T21979] should_fail_ex+0x410/0x560 [ 557.451013][T21979] _copy_from_iter+0x1d3/0x1660 [ 557.451055][T21979] ? __pfx__copy_from_iter+0x10/0x10 [ 557.451086][T21979] ? rcu_is_watching+0x16/0xb0 [ 557.451112][T21979] ? __alloc_frozen_pages_noprof+0x29e/0x5a0 [ 557.451142][T21979] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 557.451170][T21979] copy_page_from_iter+0x219/0x2d0 [ 557.451203][T21979] skb_copy_datagram_from_iter+0x2f4/0x720 [ 557.451248][T21979] skb_copy_datagram_from_iter_full+0x103/0x190 [ 557.451284][T21979] ? __pfx_skb_copy_datagram_from_iter_full+0x10/0x10 [ 557.451326][T21979] ? skb_set_owner_w+0x263/0x3d0 [ 557.451358][T21979] virtio_transport_alloc_skb+0x8d7/0x13e0 [ 557.451394][T21979] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 557.451429][T21979] ? __pfx_virtio_transport_alloc_skb+0x10/0x10 [ 557.451455][T21979] ? queue_work_on+0x159/0x1d0 [ 557.451482][T21979] ? __local_bh_enable_ip+0xd6/0x140 [ 557.451520][T21979] virtio_transport_send_pkt_info+0x8e0/0x12b0 [ 557.451572][T21979] ? __pfx_virtio_transport_send_pkt_info+0x10/0x10 [ 557.451597][T21979] ? virtio_transport_seqpacket_enqueue+0x11b/0x250 [ 557.451622][T21979] ? __local_bh_enable_ip+0xd6/0x140 [ 557.451653][T21979] virtio_transport_seqpacket_enqueue+0x1b4/0x250 [ 557.451679][T21979] ? __pfx_virtio_transport_seqpacket_enqueue+0x10/0x10 [ 557.451712][T21979] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 557.451743][T21979] vsock_connectible_sendmsg+0xac2/0x1070 [ 557.451787][T21979] ? __pfx_vsock_connectible_sendmsg+0x10/0x10 [ 557.451812][T21979] ? __lock_acquire+0x747/0x2de0 [ 557.451834][T21979] ? __pfx_aa_sk_perm+0x10/0x10 [ 557.451862][T21979] ? __pfx_woken_wake_function+0x10/0x10 [ 557.451893][T21979] ? aa_sock_msg_perm+0x144/0x210 [ 557.451929][T21979] ? apparmor_socket_sendmsg+0x98/0x360 [ 557.451958][T21979] ? __pfx_vsock_connectible_sendmsg+0x10/0x10 [ 557.451984][T21979] sock_sendmsg_nosec+0x14e/0x190 [ 557.452010][T21979] ____sys_sendmsg+0x54e/0x850 [ 557.452044][T21979] ? __pfx_____sys_sendmsg+0x10/0x10 [ 557.452084][T21979] ? import_iovec+0x73/0xa0 [ 557.452118][T21979] ___sys_sendmsg+0x2a5/0x360 [ 557.452145][T21979] ? __lock_acquire+0x747/0x2de0 [ 557.452171][T21979] ? __pfx____sys_sendmsg+0x10/0x10 [ 557.452206][T21979] ? kstrtouint+0x6e/0xe0 [ 557.452259][T21979] ? __fget_files+0x2a/0x420 [ 557.452288][T21979] ? __fget_files+0x3a2/0x420 [ 557.452329][T21979] __sys_sendmmsg+0x273/0x4d0 [ 557.452364][T21979] ? __pfx___sys_sendmmsg+0x10/0x10 [ 557.452402][T21979] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 557.452447][T21979] ? ksys_write+0x242/0x270 [ 557.452470][T21979] ? __pfx_ksys_write+0x10/0x10 [ 557.452498][T21979] __x64_sys_sendmmsg+0xa0/0xc0 [ 557.452540][T21979] do_syscall_64+0x166/0x520 [ 557.452567][T21979] ? trace_irq_disable+0x3b/0x140 [ 557.452589][T21979] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.452610][T21979] ? clear_bhb_loop+0x70/0xc0 [ 557.452636][T21979] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.452656][T21979] RIP: 0033:0x7f64a3b9f559 [ 557.452675][T21979] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 557.452693][T21979] RSP: 002b:00007f64a4a4f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 557.452715][T21979] RAX: ffffffffffffffda RBX: 00007f64a3e25fa0 RCX: 00007f64a3b9f559 [ 557.452730][T21979] RDX: 0000000000000051 RSI: 0000200000001780 RDI: 0000000000000003 [ 557.452744][T21979] RBP: 00007f64a4a4f090 R08: 0000000000000000 R09: 0000000000000000 [ 557.452757][T21979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 557.452769][T21979] R13: 00007f64a3e26038 R14: 00007f64a3e25fa0 R15: 00007ffd57fdc7b8 [ 557.452803][T21979] [ 558.225814][T21996] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4457'. [ 558.441251][T21996] 8021q: adding VLAN 0 to HW filter on device bond25 [ 558.497046][ T435] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.497259][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.499606][T16501] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.499801][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.555788][T22000] macvlan4: entered promiscuous mode [ 558.555816][T22000] bond25: entered promiscuous mode [ 558.556503][T22000] macvlan4: entered allmulticast mode [ 558.556561][T22000] bond25: entered allmulticast mode [ 558.570365][T22000] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 558.591552][T22012] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4462'. [ 558.591591][T22012] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4462'. [ 558.624414][T22000] bond25: left allmulticast mode [ 558.624465][T22000] bond25: left promiscuous mode [ 558.653093][T22016] netlink: 'syz.4.4462': attribute type 1 has an invalid length. [ 558.693131][T22020] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4465'. [ 558.708320][T22012] geneve4: entered promiscuous mode [ 558.708347][T22012] geneve4: entered allmulticast mode [ 558.894206][T22029] FAULT_INJECTION: forcing a failure. [ 558.894206][T22029] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 558.894244][T22029] CPU: 0 UID: 0 PID: 22029 Comm: syz.2.4468 Not tainted syzkaller #0 PREEMPT(full) [ 558.894271][T22029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 558.894285][T22029] Call Trace: [ 558.894294][T22029] [ 558.894304][T22029] dump_stack_lvl+0xe8/0x150 [ 558.894343][T22029] should_fail_ex+0x410/0x560 [ 558.894380][T22029] _copy_from_iter+0x1d3/0x1660 [ 558.894428][T22029] ? __pfx__copy_from_iter+0x10/0x10 [ 558.894465][T22029] ? rcu_is_watching+0x16/0xb0 [ 558.894495][T22029] ? __alloc_frozen_pages_noprof+0x29e/0x5a0 [ 558.894530][T22029] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 558.894563][T22029] copy_page_from_iter+0x219/0x2d0 [ 558.894602][T22029] skb_copy_datagram_from_iter+0x2f4/0x720 [ 558.894654][T22029] skb_copy_datagram_from_iter_full+0x103/0x190 [ 558.894696][T22029] ? __pfx_skb_copy_datagram_from_iter_full+0x10/0x10 [ 558.894745][T22029] ? skb_set_owner_w+0x263/0x3d0 [ 558.894782][T22029] virtio_transport_alloc_skb+0x8d7/0x13e0 [ 558.894830][T22029] ? __pfx_virtio_transport_alloc_skb+0x10/0x10 [ 558.894861][T22029] ? queue_work_on+0x159/0x1d0 [ 558.894901][T22029] ? __local_bh_enable_ip+0xd6/0x140 [ 558.894941][T22029] virtio_transport_send_pkt_info+0x8e0/0x12b0 [ 558.895007][T22029] ? __pfx_virtio_transport_send_pkt_info+0x10/0x10 [ 558.895038][T22029] ? virtio_transport_seqpacket_enqueue+0x11b/0x250 [ 558.895075][T22029] ? __local_bh_enable_ip+0xd6/0x140 [ 558.895114][T22029] virtio_transport_seqpacket_enqueue+0x1b4/0x250 [ 558.895144][T22029] ? __pfx_virtio_transport_seqpacket_enqueue+0x10/0x10 [ 558.895182][T22029] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 558.895218][T22029] vsock_connectible_sendmsg+0xac2/0x1070 [ 558.895269][T22029] ? __pfx_vsock_connectible_sendmsg+0x10/0x10 [ 558.895298][T22029] ? __lock_acquire+0x747/0x2de0 [ 558.895323][T22029] ? __pfx_aa_sk_perm+0x10/0x10 [ 558.895356][T22029] ? __pfx_woken_wake_function+0x10/0x10 [ 558.895390][T22029] ? aa_sock_msg_perm+0x144/0x210 [ 558.895430][T22029] ? apparmor_socket_sendmsg+0x98/0x360 [ 558.895464][T22029] ? __pfx_vsock_connectible_sendmsg+0x10/0x10 [ 558.895494][T22029] sock_sendmsg_nosec+0x14e/0x190 [ 558.895523][T22029] ____sys_sendmsg+0x54e/0x850 [ 558.895563][T22029] ? __pfx_____sys_sendmsg+0x10/0x10 [ 558.895607][T22029] ? import_iovec+0x73/0xa0 [ 558.895646][T22029] ___sys_sendmsg+0x2a5/0x360 [ 558.895678][T22029] ? __lock_acquire+0x747/0x2de0 [ 558.895708][T22029] ? __pfx____sys_sendmsg+0x10/0x10 [ 558.895748][T22029] ? kstrtouint+0x6e/0xe0 [ 558.895806][T22029] ? __fget_files+0x2a/0x420 [ 558.895840][T22029] ? __fget_files+0x3a2/0x420 [ 558.895896][T22029] __sys_sendmmsg+0x273/0x4d0 [ 558.895934][T22029] ? __pfx___sys_sendmmsg+0x10/0x10 [ 558.895977][T22029] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 558.896026][T22029] ? ksys_write+0x242/0x270 [ 558.896053][T22029] ? __pfx_ksys_write+0x10/0x10 [ 558.896085][T22029] __x64_sys_sendmmsg+0xa0/0xc0 [ 558.896120][T22029] do_syscall_64+0x166/0x520 [ 558.896151][T22029] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 558.896175][T22029] ? clear_bhb_loop+0x70/0xc0 [ 558.896203][T22029] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 558.896226][T22029] RIP: 0033:0x7f73d159f559 [ 558.896247][T22029] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 558.896266][T22029] RSP: 002b:00007f73d24ac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 558.896290][T22029] RAX: ffffffffffffffda RBX: 00007f73d1825fa0 RCX: 00007f73d159f559 [ 558.896306][T22029] RDX: 0000000000000051 RSI: 0000200000001780 RDI: 0000000000000003 [ 558.896321][T22029] RBP: 00007f73d24ac090 R08: 0000000000000000 R09: 0000000000000000 [ 558.896336][T22029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 558.896347][T22029] R13: 00007f73d1826038 R14: 00007f73d1825fa0 R15: 00007ffc7f867458 [ 558.896384][T22029] [ 559.305697][T22020] macvlan3: entered allmulticast mode [ 559.324937][T22021] bond16: (slave geneve5): making interface the new active one [ 559.325863][T22021] bond16: (slave geneve5): Enslaving as an active interface with an up link [ 559.396980][T16136] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 559.397479][T16136] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 559.397523][T16136] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 559.397559][T16136] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 559.485227][T22035] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4471'. [ 559.592858][T22042] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 559.778485][T22050] netlink: 'syz.3.4475': attribute type 17 has an invalid length. [ 560.739770][T22093] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4486'. [ 561.158844][T22103] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 561.192048][T22103] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4489'. [ 561.207604][T22084] virtio_blk virtio5: 1/0/0 default/read/poll queues [ 561.213637][T22084] virtio_blk virtio5: [vda] 262144 512-byte logical blocks (134 MB/128 MiB) [ 561.284132][T22084] [ 561.286540][T22084] ====================================================== [ 561.293614][T22084] WARNING: possible circular locking dependency detected [ 561.300684][T22084] syzkaller #0 Not tainted [ 561.305136][T22084] ------------------------------------------------------ [ 561.312186][T22084] syz.1.4484/22084 is trying to acquire lock: [ 561.318290][T22084] ffff88801d2d4980 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x41/0x6f0 [ 561.327785][T22084] [ 561.327785][T22084] but task is already holding lock: [ 561.335200][T22084] ffffffff908044c0 (gdp_mutex){+.+.}-{4:4}, at: get_device_parent+0x16f/0x3a0 [ 561.344344][T22084] [ 561.344344][T22084] which lock already depends on the new lock. [ 561.344344][T22084] [ 561.354789][T22084] [ 561.354789][T22084] the existing dependency chain (in reverse order) is: [ 561.363849][T22084] [ 561.363849][T22084] -> #9 (gdp_mutex){+.+.}-{4:4}: [ 561.371057][T22084] __mutex_lock+0x19d/0x1550 [ 561.376230][T22084] get_device_parent+0x16f/0x3a0 [ 561.381753][T22084] device_add+0x2d4/0xb80 [ 561.386655][T22084] device_create+0x269/0x300 [ 561.391834][T22084] msr_device_create+0x33/0x50 [ 561.397176][T22084] cpuhp_invoke_callback+0x434/0x810 [ 561.403079][T22084] cpuhp_thread_fun+0x362/0x780 [ 561.408604][T22084] smpboot_thread_fn+0x565/0xa70 [ 561.414115][T22084] kthread+0x38b/0x480 [ 561.418744][T22084] ret_from_fork+0x514/0xb70 [ 561.423906][T22084] ret_from_fork_asm+0x1a/0x30 [ 561.429254][T22084] [ 561.429254][T22084] -> #8 (cpuhp_state-up){+.+.}-{0:0}: [ 561.436841][T22084] cpuhp_thread_fun+0x127/0x780 [ 561.442425][T22084] smpboot_thread_fn+0x565/0xa70 [ 561.447917][T22084] kthread+0x38b/0x480 [ 561.452531][T22084] ret_from_fork+0x514/0xb70 [ 561.457675][T22084] ret_from_fork_asm+0x1a/0x30 [ 561.462992][T22084] [ 561.462992][T22084] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 561.470771][T22084] cpus_read_lock+0x42/0x160 [ 561.475909][T22084] static_key_slow_inc+0x12/0x30 [ 561.481404][T22084] nbd_genl_reconnect_sock_cb+0x69a/0xbb0 [ 561.487682][T22084] nbd_genl_foreach_sock+0x265/0x450 [ 561.493549][T22084] nbd_genl_reconfigure+0xbbb/0x1040 [ 561.499436][T22084] genl_family_rcv_msg_doit+0x233/0x340 [ 561.505571][T22084] genl_rcv_msg+0x614/0x7a0 [ 561.510649][T22084] netlink_rcv_skb+0x226/0x4a0 [ 561.515976][T22084] genl_rcv+0x28/0x40 [ 561.521043][T22084] netlink_unicast+0x8ef/0xa80 [ 561.526362][T22084] netlink_sendmsg+0x813/0xb40 [ 561.531775][T22084] sock_sendmsg_nosec+0x14e/0x190 [ 561.537360][T22084] ____sys_sendmsg+0x54e/0x850 [ 561.542690][T22084] ___sys_sendmsg+0x2a5/0x360 [ 561.547933][T22084] __x64_sys_sendmsg+0x1b1/0x290 [ 561.553440][T22084] do_syscall_64+0x166/0x520 [ 561.558613][T22084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.565056][T22084] [ 561.565056][T22084] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 561.572730][T22084] __mutex_lock+0x19d/0x1550 [ 561.577884][T22084] nbd_queue_rq+0x373/0xff0 [ 561.582945][T22084] blk_mq_dispatch_rq_list+0x499/0x1990 [ 561.589054][T22084] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 561.595945][T22084] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 561.602609][T22084] blk_mq_run_work_fn+0x16c/0x300 [ 561.608204][T22084] process_scheduled_works+0xc3d/0x1630 [ 561.614313][T22084] worker_thread+0xa47/0xfb0 [ 561.619461][T22084] kthread+0x38b/0x480 [ 561.624081][T22084] ret_from_fork+0x514/0xb70 [ 561.629233][T22084] ret_from_fork_asm+0x1a/0x30 [ 561.634555][T22084] [ 561.634555][T22084] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 561.641810][T22084] __mutex_lock+0x19d/0x1550 [ 561.646966][T22084] nbd_queue_rq+0xc1/0xff0 [ 561.651946][T22084] blk_mq_dispatch_rq_list+0x499/0x1990 [ 561.658073][T22084] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 561.664969][T22084] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 561.671512][T22084] blk_mq_run_work_fn+0x16c/0x300 [ 561.677106][T22084] process_scheduled_works+0xc3d/0x1630 [ 561.683230][T22084] worker_thread+0xa47/0xfb0 [ 561.688378][T22084] kthread+0x38b/0x480 [ 561.693014][T22084] ret_from_fork+0x514/0xb70 [ 561.698175][T22084] ret_from_fork_asm+0x1a/0x30 [ 561.703505][T22084] [ 561.703505][T22084] -> #4 (set->srcu){.+.+}-{0:0}: [ 561.710667][T22084] __synchronize_srcu+0xc9/0x2f0 [ 561.716158][T22084] elevator_switch+0x1e8/0x7b0 [ 561.721479][T22084] elevator_change+0x2fa/0x480 [ 561.726799][T22084] elevator_set_default+0x375/0x440 [ 561.732566][T22084] blk_register_queue+0x3f3/0x4e0 [ 561.738235][T22084] __add_disk+0x6b8/0xdb0 [ 561.743120][T22084] add_disk_fwnode+0x100/0x3a0 [ 561.748445][T22084] nbd_dev_add+0x733/0xb60 [ 561.754902][T22084] nbd_init+0x168/0x1f0 [ 561.759892][T22084] do_one_initcall+0x250/0x870 [ 561.765259][T22084] do_initcall_level+0x10a/0x1a0 [ 561.770831][T22084] do_initcalls+0x59/0xa0 [ 561.775720][T22084] kernel_init_freeable+0x29d/0x3e0 [ 561.781554][T22084] kernel_init+0x22/0x1d0 [ 561.786440][T22084] ret_from_fork+0x514/0xb70 [ 561.791778][T22084] ret_from_fork_asm+0x1a/0x30 [ 561.797117][T22084] [ 561.797117][T22084] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 561.805006][T22084] __mutex_lock+0x19d/0x1550 [ 561.810161][T22084] elevator_change+0x1af/0x480 [ 561.815548][T22084] elevator_set_none+0xb5/0x140 [ 561.820954][T22084] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 561.827326][T22084] nbd_start_device+0x189/0xb30 [ 561.832776][T22084] nbd_genl_connect+0x167d/0x1cd0 [ 561.838357][T22084] genl_family_rcv_msg_doit+0x233/0x340 [ 561.844457][T22084] genl_rcv_msg+0x614/0x7a0 [ 561.849513][T22084] netlink_rcv_skb+0x226/0x4a0 [ 561.854849][T22084] genl_rcv+0x28/0x40 [ 561.859385][T22084] netlink_unicast+0x8ef/0xa80 [ 561.864697][T22084] netlink_sendmsg+0x813/0xb40 [ 561.870003][T22084] sock_sendmsg_nosec+0x14e/0x190 [ 561.875586][T22084] ____sys_sendmsg+0x54e/0x850 [ 561.880922][T22084] ___sys_sendmsg+0x2a5/0x360 [ 561.886163][T22084] __x64_sys_sendmsg+0x1b1/0x290 [ 561.891849][T22084] do_syscall_64+0x166/0x520 [ 561.897001][T22084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.903440][T22084] [ 561.903440][T22084] -> #2 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 561.912077][T22084] blk_alloc_queue+0x544/0x690 [ 561.917409][T22084] __blk_mq_alloc_disk+0x194/0x390 [ 561.923160][T22084] nbd_dev_add+0x494/0xb60 [ 561.928121][T22084] nbd_init+0x168/0x1f0 [ 561.932820][T22084] do_one_initcall+0x250/0x870 [ 561.938132][T22084] do_initcall_level+0x10a/0x1a0 [ 561.943616][T22084] do_initcalls+0x59/0xa0 [ 561.948506][T22084] kernel_init_freeable+0x29d/0x3e0 [ 561.954254][T22084] kernel_init+0x22/0x1d0 [ 561.959150][T22084] ret_from_fork+0x514/0xb70 [ 561.964299][T22084] ret_from_fork_asm+0x1a/0x30 [ 561.969619][T22084] [ 561.969619][T22084] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 561.976859][T22084] fs_reclaim_acquire+0x71/0x100 [ 561.982346][T22084] kmem_cache_alloc_lru_noprof+0x65/0x5f0 [ 561.988619][T22084] alloc_inode+0xb8/0x1b0 [ 561.993520][T22084] iget_locked+0x131/0x6a0 [ 561.998473][T22084] kernfs_get_inode+0x4f/0x770 [ 562.003775][T22084] kernfs_get_tree+0x5cd/0x980 [ 562.009187][T22084] vfs_get_tree+0x92/0x2a0 [ 562.014160][T22084] do_new_mount+0x325/0xb00 [ 562.019218][T22084] __se_sys_mount+0x31d/0x420 [ 562.024593][T22084] do_syscall_64+0x166/0x520 [ 562.029732][T22084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 562.036257][T22084] [ 562.036257][T22084] -> #0 (&root->kernfs_rwsem){++++}-{4:4}: [ 562.044361][T22084] __lock_acquire+0x164c/0x2de0 [ 562.049777][T22084] lock_acquire+0x115/0x350 [ 562.054833][T22084] down_write+0x96/0x200 [ 562.059632][T22084] kernfs_add_one+0x41/0x6f0 [ 562.064807][T22084] kernfs_create_dir_ns+0x1a1/0x230 [ 562.070559][T22084] sysfs_create_dir_ns+0x12f/0x2a0 [ 562.076216][T22084] kobject_add_internal+0x622/0xcd0 [ 562.082132][T22084] kobject_add+0x163/0x240 [ 562.087266][T22084] get_device_parent+0x316/0x3a0 [ 562.092890][T22084] device_add+0x2d4/0xb80 [ 562.097783][T22084] __add_disk+0x517/0xdb0 [ 562.102672][T22084] add_disk_fwnode+0x100/0x3a0 [ 562.108021][T22084] virtblk_probe+0x1c7f/0x23c0 [ 562.113343][T22084] virtio_dev_probe+0xdf6/0x10c0 [ 562.118867][T22084] really_probe+0x254/0xae0 [ 562.124053][T22084] __driver_probe_device+0x1e8/0x360 [ 562.130629][T22084] driver_probe_device+0x4f/0x240 [ 562.136818][T22084] __device_attach_driver+0x270/0x410 [ 562.142768][T22084] bus_for_each_drv+0x258/0x2f0 [ 562.148169][T22084] __device_attach+0x2c4/0x450 [ 562.153539][T22084] device_initial_probe+0xa1/0xd0 [ 562.159132][T22084] bus_probe_device+0x12a/0x220 [ 562.164547][T22084] device_add+0x7d7/0xb80 [ 562.169427][T22084] register_virtio_device+0x4c2/0x6d0 [ 562.175374][T22084] virtio_vdpa_probe+0x239/0x2f0 [ 562.180871][T22084] really_probe+0x254/0xae0 [ 562.185936][T22084] __driver_probe_device+0x1e8/0x360 [ 562.191868][T22084] driver_probe_device+0x4f/0x240 [ 562.197449][T22084] __device_attach_driver+0x270/0x410 [ 562.203389][T22084] bus_for_each_drv+0x258/0x2f0 [ 562.208789][T22084] __device_attach+0x2c4/0x450 [ 562.214119][T22084] device_initial_probe+0xa1/0xd0 [ 562.219730][T22084] bus_probe_device+0x12a/0x220 [ 562.225220][T22084] device_add+0x7d7/0xb80 [ 562.230102][T22084] vdpasim_blk_dev_add+0x1df/0x2a0 [ 562.235761][T22084] vdpa_nl_cmd_dev_add_set_doit+0xa8b/0xbd0 [ 562.242203][T22084] genl_family_rcv_msg_doit+0x233/0x340 [ 562.248310][T22084] genl_rcv_msg+0x614/0x7a0 [ 562.253374][T22084] netlink_rcv_skb+0x226/0x4a0 [ 562.258700][T22084] genl_rcv+0x28/0x40 [ 562.263235][T22084] netlink_unicast+0x8ef/0xa80 [ 562.268543][T22084] netlink_sendmsg+0x813/0xb40 [ 562.273853][T22084] sock_sendmsg_nosec+0x14e/0x190 [ 562.279419][T22084] ____sys_sendmsg+0x54e/0x850 [ 562.284728][T22084] ___sys_sendmsg+0x2a5/0x360 [ 562.289953][T22084] __x64_sys_sendmsg+0x1b1/0x290 [ 562.295462][T22084] do_syscall_64+0x166/0x520 [ 562.300601][T22084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 562.307063][T22084] [ 562.307063][T22084] other info that might help us debug this: [ 562.307063][T22084] [ 562.317303][T22084] Chain exists of: [ 562.317303][T22084] &root->kernfs_rwsem --> cpuhp_state-up --> gdp_mutex [ 562.317303][T22084] [ 562.330117][T22084] Possible unsafe locking scenario: [ 562.330117][T22084] [ 562.337707][T22084] CPU0 CPU1 [ 562.343103][T22084] ---- ---- [ 562.348519][T22084] lock(gdp_mutex); [ 562.352452][T22084] lock(cpuhp_state-up); [ 562.359328][T22084] lock(gdp_mutex); [ 562.365764][T22084] lock(&root->kernfs_rwsem); [ 562.370549][T22084] [ 562.370549][T22084] *** DEADLOCK *** [ 562.370549][T22084] [ 562.378795][T22084] locks held by syz.1.4484/22084: 7, last CPU#0: [ 562.385158][T22084] #0: ffffffff912c05e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 562.393378][T22084] #1: ffffffff912c0420 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 562.402465][T22084] #2: ffffffff9066c068 (vdpa_dev_lock){++++}-{4:4}, at: vdpa_nl_cmd_dev_add_set_doit+0x582/0xbd0 [ 562.413114][T22084] #3: ffff888079923128 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 562.422374][T22084] #4: ffff88807f1ea1b0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 562.431629][T22084] #5: ffff888068ba6a58 (&set->update_nr_hwq_lock){++++}-{4:4}, at: add_disk_fwnode+0xea/0x3a0 [ 562.442025][T22084] #6: ffffffff908044c0 (gdp_mutex){+.+.}-{4:4}, at: get_device_parent+0x16f/0x3a0 [ 562.451385][T22084] [ 562.451385][T22084] stack backtrace: [ 562.457384][T22084] CPU: 0 UID: 0 PID: 22084 Comm: syz.1.4484 Not tainted syzkaller #0 PREEMPT(full) [ 562.466796][T22084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 562.476961][T22084] Call Trace: [ 562.480260][T22084] [ 562.483245][T22084] dump_stack_lvl+0xe8/0x150 [ 562.487880][T22084] print_circular_bug+0x2e2/0x300 [ 562.492946][T22084] check_noncircular+0x12f/0x150 [ 562.498034][T22084] __lock_acquire+0x164c/0x2de0 [ 562.502948][T22084] ? __lock_acquire+0x747/0x2de0 [ 562.507918][T22084] ? do_raw_spin_lock+0x12b/0x2f0 [ 562.512979][T22084] lock_acquire+0x115/0x350 [ 562.517512][T22084] ? kernfs_add_one+0x41/0x6f0 [ 562.522312][T22084] down_write+0x96/0x200 [ 562.526583][T22084] ? kernfs_add_one+0x41/0x6f0 [ 562.531370][T22084] ? __pfx_down_write+0x10/0x10 [ 562.536254][T22084] ? kernfs_root+0x1c/0x230 [ 562.540782][T22084] ? kernfs_root+0x1c/0x230 [ 562.545311][T22084] ? kernfs_root+0x1c/0x230 [ 562.549861][T22084] ? kernfs_root+0x1ea/0x230 [ 562.554581][T22084] kernfs_add_one+0x41/0x6f0 [ 562.559200][T22084] kernfs_create_dir_ns+0x1a1/0x230 [ 562.564436][T22084] sysfs_create_dir_ns+0x12f/0x2a0 [ 562.569591][T22084] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 562.575259][T22084] ? do_raw_spin_unlock+0xf5/0x200 [ 562.580412][T22084] kobject_add_internal+0x622/0xcd0 [ 562.585647][T22084] kobject_add+0x163/0x240 [ 562.590089][T22084] ? rcu_is_watching+0x16/0xb0 [ 562.594885][T22084] ? __pfx_kobject_add+0x10/0x10 [ 562.599953][T22084] ? __kmalloc_cache_noprof+0x14d/0x600 [ 562.605632][T22084] ? kobject_init+0x7f/0x1e0 [ 562.610622][T22084] get_device_parent+0x316/0x3a0 [ 562.615712][T22084] device_add+0x2d4/0xb80 [ 562.620077][T22084] __add_disk+0x517/0xdb0 [ 562.624437][T22084] add_disk_fwnode+0x100/0x3a0 [ 562.629240][T22084] virtblk_probe+0x1c7f/0x23c0 [ 562.634048][T22084] ? __pfx_virtblk_probe+0x10/0x10 [ 562.639202][T22084] ? __pfx___mutex_trylock_common+0x10/0x10 [ 562.645129][T22084] ? rcu_is_watching+0x16/0xb0 [ 562.649922][T22084] ? trace_contention_end+0x3d/0x140 [ 562.655235][T22084] ? virtinput_restore+0x161/0x360 [ 562.660383][T22084] ? __mutex_unlock_slowpath+0x731/0x900 [ 562.666070][T22084] ? up_write+0x19d/0x4a0 [ 562.670433][T22084] ? __pfx_virtio_vdpa_set_status+0x10/0x10 [ 562.676363][T22084] ? vdpasim_get_status+0x4b/0x70 [ 562.681426][T22084] ? virtio_features_ok+0x1f5/0x270 [ 562.686680][T22084] virtio_dev_probe+0xdf6/0x10c0 [ 562.691656][T22084] ? __pfx_virtio_dev_probe+0x10/0x10 [ 562.697071][T22084] ? sysfs_do_create_link_sd+0xe0/0x110 [ 562.702647][T22084] ? driver_sysfs_add+0x1fe/0x210 [ 562.707718][T22084] ? __pfx_virtio_dev_probe+0x10/0x10 [ 562.713152][T22084] really_probe+0x254/0xae0 [ 562.717750][T22084] __driver_probe_device+0x1e8/0x360 [ 562.723084][T22084] driver_probe_device+0x4f/0x240 [ 562.728158][T22084] __device_attach_driver+0x270/0x410 [ 562.733582][T22084] bus_for_each_drv+0x258/0x2f0 [ 562.738479][T22084] ? __pfx___device_attach_driver+0x10/0x10 [ 562.744417][T22084] ? __pfx_bus_for_each_drv+0x10/0x10 [ 562.749821][T22084] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 562.755684][T22084] __device_attach+0x2c4/0x450 [ 562.760495][T22084] ? __pfx___device_attach+0x10/0x10 [ 562.765824][T22084] ? do_raw_spin_unlock+0xf5/0x200 [ 562.770990][T22084] ? _raw_spin_unlock+0x28/0x50 [ 562.775883][T22084] device_initial_probe+0xa1/0xd0 [ 562.780970][T22084] bus_probe_device+0x12a/0x220 [ 562.785854][T22084] device_add+0x7d7/0xb80 [ 562.790222][T22084] ? __pfx_virtio_vdpa_set_status+0x10/0x10 [ 562.796169][T22084] register_virtio_device+0x4c2/0x6d0 [ 562.801592][T22084] ? rcu_is_watching+0x16/0xb0 [ 562.806401][T22084] ? __pfx_register_virtio_device+0x10/0x10 [ 562.812359][T22084] ? __kasan_kmalloc+0x93/0xb0 [ 562.817163][T22084] ? __kmalloc_cache_noprof+0x321/0x600 [ 562.822765][T22084] ? __kmalloc_cache_noprof+0x14d/0x600 [ 562.828366][T22084] ? virtio_vdpa_probe+0x74/0x2f0 [ 562.833465][T22084] virtio_vdpa_probe+0x239/0x2f0 [ 562.838451][T22084] ? __pfx_vdpa_dev_probe+0x10/0x10 [ 562.843680][T22084] really_probe+0x254/0xae0 [ 562.848233][T22084] __driver_probe_device+0x1e8/0x360 [ 562.853558][T22084] driver_probe_device+0x4f/0x240 [ 562.858666][T22084] __device_attach_driver+0x270/0x410 [ 562.864090][T22084] bus_for_each_drv+0x258/0x2f0 [ 562.868978][T22084] ? __pfx___device_attach_driver+0x10/0x10 [ 562.874917][T22084] ? __pfx_bus_for_each_drv+0x10/0x10 [ 562.880333][T22084] __device_attach+0x2c4/0x450 [ 562.885137][T22084] ? __pfx___device_attach+0x10/0x10 [ 562.890633][T22084] ? do_raw_spin_unlock+0xf5/0x200 [ 562.895794][T22084] ? _raw_spin_unlock+0x28/0x50 [ 562.900708][T22084] device_initial_probe+0xa1/0xd0 [ 562.905779][T22084] bus_probe_device+0x12a/0x220 [ 562.910661][T22084] device_add+0x7d7/0xb80 [ 562.915036][T22084] vdpasim_blk_dev_add+0x1df/0x2a0 [ 562.920174][T22084] ? __pfx_vdpasim_blk_dev_add+0x10/0x10 [ 562.925843][T22084] ? __pfx_vdpasim_blk_work+0x10/0x10 [ 562.931249][T22084] ? __pfx_vdpasim_blk_get_config+0x10/0x10 [ 562.937170][T22084] ? __pfx_vdpasim_blk_free+0x10/0x10 [ 562.942572][T22084] ? vdpa_mgmtdev_get_from_attr+0x26c/0x280 [ 562.948516][T22084] vdpa_nl_cmd_dev_add_set_doit+0xa8b/0xbd0 [ 562.954457][T22084] ? __pfx_vdpa_nl_cmd_dev_add_set_doit+0x10/0x10 [ 562.960913][T22084] ? __nla_parse+0x40/0x60 [ 562.965378][T22084] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 562.971746][T22084] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 562.978120][T22084] genl_family_rcv_msg_doit+0x233/0x340 [ 562.983729][T22084] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 562.989872][T22084] ? bpf_lsm_capable+0x9/0x20 [ 562.994587][T22084] ? security_capable+0x7e/0x2c0 [ 562.999658][T22084] genl_rcv_msg+0x614/0x7a0 [ 563.004199][T22084] ? __pfx_genl_rcv_msg+0x10/0x10 [ 563.009276][T22084] ? __pfx_vdpa_nl_cmd_dev_add_set_doit+0x10/0x10 [ 563.015741][T22084] netlink_rcv_skb+0x226/0x4a0 [ 563.020548][T22084] ? __pfx_genl_rcv_msg+0x10/0x10 [ 563.025614][T22084] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 563.030933][T22084] ? down_read+0x2be/0x330 [ 563.035387][T22084] genl_rcv+0x28/0x40 [ 563.039397][T22084] netlink_unicast+0x8ef/0xa80 [ 563.044184][T22084] netlink_sendmsg+0x813/0xb40 [ 563.048977][T22084] ? __pfx_netlink_sendmsg+0x10/0x10 [ 563.054294][T22084] ? apparmor_socket_sendmsg+0x98/0x360 [ 563.059867][T22084] ? __pfx_netlink_sendmsg+0x10/0x10 [ 563.065184][T22084] sock_sendmsg_nosec+0x14e/0x190 [ 563.070323][T22084] ____sys_sendmsg+0x54e/0x850 [ 563.075128][T22084] ? __pfx_____sys_sendmsg+0x10/0x10 [ 563.080449][T22084] ? import_iovec+0x73/0xa0 [ 563.084982][T22084] ___sys_sendmsg+0x2a5/0x360 [ 563.089690][T22084] ? __lock_acquire+0x747/0x2de0 [ 563.094657][T22084] ? __pfx____sys_sendmsg+0x10/0x10 [ 563.099884][T22084] ? futex_wait+0x2a2/0x390 [ 563.104428][T22084] ? __fget_files+0x2a/0x420 [ 563.109048][T22084] ? __fget_files+0x3a2/0x420 [ 563.113767][T22084] __x64_sys_sendmsg+0x1b1/0x290 [ 563.118734][T22084] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 563.124319][T22084] do_syscall_64+0x166/0x520 [ 563.128956][T22084] ? trace_irq_disable+0x3b/0x140 [ 563.134006][T22084] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.140099][T22084] ? clear_bhb_loop+0x70/0xc0 [ 563.144800][T22084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.150738][T22084] RIP: 0033:0x7f64a3b9f559 [ 563.155178][T22084] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 563.174808][T22084] RSP: 002b:00007f64a4a4f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 563.183250][T22084] RAX: ffffffffffffffda RBX: 00007f64a3e25fa0 RCX: 00007f64a3b9f559 [ 563.191249][T22084] RDX: 0000000000000000 RSI: 0000200000000640 RDI: 0000000000000007 [ 563.199252][T22084] RBP: 00007f64a3c36b20 R08: 0000000000000000 R09: 0000000000000000 [ 563.207595][T22084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 563.215692][T22084] R13: 00007f64a3e26038 R14: 00007f64a3e25fa0 R15: 00007ffd57fdc7b8 [ 563.223711][T22084] [ 563.303540][T22084] Dev vda: unable to read RDB block 8 [ 563.303714][T22084] vda: unable to read partition table [ 564.259400][ T1286] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 564.259589][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 564.260079][ T1286] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 564.260242][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 569.376981][ T61] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 569.377140][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 569.380066][T16136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 569.380220][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog