last executing test programs: 41.109549244s ago: executing program 4 (id=13045): r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@loopback, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x4e23, 0xfffc, 0x4e23, 0x3, 0xa, 0x80, 0x30}, {0x100000000, 0x2, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff, 0x6, 0x8, 0x800000000001}, {0x9, 0xfffffffffffffffe, 0x0, 0x9}, 0xd6, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x210000, 0x33}, 0x0, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffb}}, 0xe8) r1 = socket(0x10, 0x3, 0x9) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001e00010a00000000000000a42d"], 0x14}}, 0x0) (async) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xffe0) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000000), 0x4) (async, rerun: 32) r2 = socket$netlink(0x10, 0x3, 0x4) (rerun: 32) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfd, 0x2ffffffff}, 0xc) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) socket$netlink(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000c}, 0x94) (async) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) (async, rerun: 64) unshare(0x6a040000) (async, rerun: 64) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) (async, rerun: 64) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) (rerun: 64) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) (async) listen(r5, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="050000000600000008000000ad00000000000000", @ANYRES32, @ANYBLOB="0000000400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r7, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) (async) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r7, 0x84, 0x17, &(0x7f0000000200)=ANY=[@ANYRES32=0x0, @ANYBLOB="04000100df35057a7061e35a4864e81e1be4e93cdc948fd032124359b4109a4774"], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r7, 0x84, 0x19, &(0x7f0000000380)={0x0, 0x6}, 0x8) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0d00000002000000040000000240000005000000", @ANYRES16=r3, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\b\x00'/27], 0x48) 40.946456421s ago: executing program 4 (id=13048): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000102081044e81f782db44b904021d080010000000e8fe55a1180015000600142603600e120500210007000401a8001600a400014020000300036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) 40.850071532s ago: executing program 4 (id=13050): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet(r1, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000740)=[{0x0}], 0x1}}], 0x1, 0x4000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup(r2, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) mkdirat$cgroup(r2, &(0x7f0000000a00)='syz0\x00', 0x1ff) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x30, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x8, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x94}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 40.733330519s ago: executing program 4 (id=13053): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0x4000}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000000), 0x20000328) getsockopt$inet_opts(r2, 0x0, 0x0, 0x0, &(0x7f0000000100)) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x0) shutdown(r1, 0x0) epoll_wait(r0, &(0x7f0000000080), 0x0, 0x5) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000140)={0x2000200b}) 40.170149262s ago: executing program 4 (id=13059): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000080)=0x25, 0x4) r1 = socket(0x400000000010, 0x3, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r3, &(0x7f00000000c0)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10, 0x0}, 0x340440f1) setsockopt$sock_attach_bpf(r3, 0x1, 0x12, &(0x7f00000007c0), 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r5}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x8000000000, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7fffffff, 0xfffffffffffffffc}, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r7 = socket$kcm(0x2, 0x1, 0x0) r8 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r8, 0x89e0, &(0x7f0000000040)={r7}) r9 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r9, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r9, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg$unix(r6, &(0x7f0000005100)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)=""/94, 0x5e}], 0x1}}, {{0x0, 0x0, &(0x7f0000002700)=[{&(0x7f0000002680)=""/70, 0x46}], 0x1}}], 0x2, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000300)={'veth1_to_hsr\x00', &(0x7f0000000600)=@ethtool_flash={0x33, 0x8, './file0\x00'}}) setsockopt$inet6_udp_int(r6, 0x11, 0x65, &(0x7f0000000240)=0x5, 0x4) sendmsg$nl_crypto(r9, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000815}, 0x20000801) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none}, 0xe) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c0000001000040028b57000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="a1000000000000002400128009000100766c06000100030000000600050088a8000008000500"/48, @ANYRES32=r11, @ANYBLOB], 0x4c}, 0x1, 0xba01, 0x0, 0x4004}, 0x880) 39.263673167s ago: executing program 4 (id=13077): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)="d8000000140081044e81f782db44b9040a1d08020a000000040000a118000200ff11000000000e1208000f0100810401a80016ea1f0008400304000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x1c, r8, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x4008004) write$nci(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="414601", @ANYRES32=r6], 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)=@generic={&(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}, 0x18) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x30, r2, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7c9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x8840}, 0x0) 24.494561171s ago: executing program 2 (id=13300): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1800000072009fb3000000000001000007000000035f"], 0x18}}, 0x0) 24.314186539s ago: executing program 2 (id=13303): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000280)={'veth0_macvtap\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x3b, 0x1, [{0x200, 0x5}]}}) r0 = socket(0xa, 0x3, 0x87) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0x0, 0x0, 0x0, 0x40000006, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0xfffffffd}, 0x8}, 0x94) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x890b, &(0x7f0000000000)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) recvfrom$phonet(r2, 0x0, 0x0, 0x40010102, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c4400000000000e0feff00850000000f000000"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r4, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r1}, 0x20) sendmmsg$inet6(r1, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000300)="16", 0x1}], 0x1}}], 0x2, 0x4000050) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$netlink(0x10, 0x3, 0x15) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0x8, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, [@tail_call={{}, {}, {0x85, 0x0, 0x0, 0x21}}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x94) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="640000000206010100000000000000000000000005000400000000000900020073797a30000000000500010007000000050005000a000000140007800800114000000000080012000000ffff16000300686173683a6e65742c706f72742c6e6574"], 0x64}}, 0x0) sendmsg$IPSET_CMD_DEL(r5, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x8c, 0xa, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0xa}, [@IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x401}, @IPSET_ATTR_ADT={0x58, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7fffffff}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0x5, 0x1a, '\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010102}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x6}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x3}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4040800}, 0x40800) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r6) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x2c, r7, 0x400, 0x70bd29, 0x25dfdbff, {}, [@ETHTOOL_A_COALESCE_USE_ADAPTIVE_TX={0x5}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_TX={0x5, 0xc, 0x1}, @ETHTOOL_A_COALESCE_PKT_RATE_HIGH={0x8}]}, 0x2c}}, 0x20000800) socketpair(0x6, 0x80006, 0x0, &(0x7f0000000480)) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x10, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {0x7, 0x0, 0xb, 0x6, 0x0, 0x0, 0xffffff1f}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x2}}, [@alu={0x4, 0x1, 0x9, 0x8, 0x6, 0x1}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 24.219445114s ago: executing program 32 (id=13077): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)="d8000000140081044e81f782db44b9040a1d08020a000000040000a118000200ff11000000000e1208000f0100810401a80016ea1f0008400304000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x1c, r8, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x4008004) write$nci(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="414601", @ANYRES32=r6], 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)=@generic={&(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}, 0x18) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x30, r2, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7c9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x8840}, 0x0) 24.082687948s ago: executing program 2 (id=13307): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB="ffffffff00"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000168fb5227049d100cf4e980f15dc0b40f5254f688c17125e59cedfc44bdd89dd1d9cebcd0d65fc782fc256709f769d7fa7babedcdc5756dbd8b39c2a7a417e912d797e46a168"], 0x50) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, &(0x7f00000022c0)=""/4092, 0x0, 0xffc, 0xb, 0x4}, 0x28) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000"], 0x48) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 23.886885924s ago: executing program 2 (id=13309): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {}, {0x0, 0x6000}, {0xffe0, 0x5}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0x80000001}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20048850) 23.437972901s ago: executing program 2 (id=13316): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000280)={'veth0_macvtap\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x3b, 0x1, [{0x200, 0x5}]}}) r0 = socket(0xa, 0x3, 0x87) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0x0, 0x0, 0x0, 0x40000006, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0xfffffffd}, 0x8}, 0x94) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x890b, &(0x7f0000000000)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) recvfrom$phonet(r2, 0x0, 0x0, 0x40010102, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c4400000000000e0feff00850000000f000000"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r4, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r1}, 0x20) sendmmsg$inet6(r1, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000300)="16", 0x1}], 0x1}}], 0x2, 0x4000050) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$netlink(0x10, 0x3, 0x15) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0x8, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, [@tail_call={{}, {}, {0x85, 0x0, 0x0, 0x21}}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x94) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="640000000206010100000000000000000000000005000400000000000900020073797a30000000000500010007000000050005000a000000140007800800114000000000080012000000ffff16000300686173683a6e65742c706f72742c6e6574"], 0x64}}, 0x0) sendmsg$IPSET_CMD_DEL(r5, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x8c, 0xa, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0xa}, [@IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x401}, @IPSET_ATTR_ADT={0x58, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7fffffff}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0x5, 0x1a, '\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010102}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x6}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x3}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4040800}, 0x40800) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r6) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x2c, r7, 0x400, 0x70bd29, 0x25dfdbff, {}, [@ETHTOOL_A_COALESCE_USE_ADAPTIVE_TX={0x5}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_TX={0x5, 0xc, 0x1}, @ETHTOOL_A_COALESCE_PKT_RATE_HIGH={0x8}]}, 0x2c}}, 0x20000800) socketpair(0x6, 0x80006, 0x0, &(0x7f0000000480)) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x10, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {0x7, 0x0, 0xb, 0x6, 0x0, 0x0, 0xffffff1f}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x2}}, [@alu={0x4, 0x1, 0x9, 0x8, 0x6, 0x1}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 23.376278769s ago: executing program 2 (id=13318): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xcc, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x80010000, 0x0, 0x0, 0x0, 0x0, {0x0, 0x2, 0x0, 0x0, 0xfffe}, {0x0, 0x0, 0x0, 0x0, 0xfffd}}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x1}}]}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0xcc}}, 0x0) listen(r2, 0x8) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r4, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0x7000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) getsockopt(r5, 0x200000000114, 0x271c, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) r6 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x4}, 0x8) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r7, &(0x7f0000001040)={0x27, r9, 0xffffffffffffffff, 0x5, 0x97, 0x0, "a64c77609475b78411e88509de050000000000000000000200000000001900", 0x3c}, 0x60) r10 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r10, &(0x7f0000000080)={0x27, r9, 0x0, 0x3, 0x0, 0x5, "750538440ff92fe2aaf1beea7cdcc151042cd9893bc31f80716a120d8be6d7f81cd81ec275000386e7255f0669b740a5418d69d00000d51de08a00ee1d9a34", 0x400000011}, 0x60) bind$nfc_llcp(r1, &(0x7f00000001c0)={0x27, r9, 0xffffffffffffffff, 0x4, 0x7, 0x8, "615dc243b51d1d9c6c70bdcd740c0f255433c01b91594c9a1a3d8285f9dae0d2118608118f607be85a5e6d45faa8c3602897248097be085af9e76e10b6ee39", 0x29}, 0x60) close(r6) setsockopt$inet6_tcp_buf(r1, 0x6, 0x1f, &(0x7f0000000280)='\x00', 0x1) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, 0x0, 0x2160) listen(r0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$unix(r11, &(0x7f0000000140), &(0x7f00000000c0)=0x6e) setsockopt$SO_ATTACH_FILTER(r11, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) 22.129940234s ago: executing program 1 (id=13329): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3e, &(0x7f00000040c0)=0x7, 0x4) sendmmsg$inet(r0, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x3284b164842c97f7, 0x8014) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000740)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r1, 0x0, 0x36, 0x0, &(0x7f0000001880)="cedfb080cd21d308098e000081007e2286dd2db6cc65938e6cf878a76202992d66a9b3c35fdae0c92d67c45a11b3b285ef0400000000", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r2 = socket$packet(0x11, 0x3, 0x300) recvfrom$packet(r2, &(0x7f0000000100)=""/187, 0xbb, 0x0, 0x0, 0x0) r3 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNDELRESOURCE(r3, 0x89ef, &(0x7f0000000000)=0x7) r4 = socket$inet(0x2, 0x80000, 0x10001) r5 = accept4$inet(r4, &(0x7f00000002c0)={0x2, 0x0, @initdev}, &(0x7f0000000080)=0x10, 0x1800) setsockopt$inet_int(r5, 0x0, 0x7, &(0x7f00000000c0), 0x4) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) setsockopt$sock_int(r0, 0x1, 0x3e, &(0x7f00000040c0)=0x7, 0x4) (async) sendmmsg$inet(r0, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x3284b164842c97f7, 0x8014) (async) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000740)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r1, 0x0, 0x36, 0x0, &(0x7f0000001880)="cedfb080cd21d308098e000081007e2286dd2db6cc65938e6cf878a76202992d66a9b3c35fdae0c92d67c45a11b3b285ef0400000000", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) (async) socket$packet(0x11, 0x3, 0x300) (async) recvfrom$packet(r2, &(0x7f0000000100)=""/187, 0xbb, 0x0, 0x0, 0x0) (async) socket$phonet(0x23, 0x2, 0x1) (async) ioctl$SIOCPNDELRESOURCE(r3, 0x89ef, &(0x7f0000000000)=0x7) (async) socket$inet(0x2, 0x80000, 0x10001) (async) accept4$inet(r4, &(0x7f00000002c0)={0x2, 0x0, @initdev}, &(0x7f0000000080)=0x10, 0x1800) (async) setsockopt$inet_int(r5, 0x0, 0x7, &(0x7f00000000c0), 0x4) (async) 21.986344179s ago: executing program 1 (id=13330): r0 = socket(0x10, 0x3, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000002340)={0x0, 0x0, 0x0}, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, &(0x7f0000007800)=0xffffffff00000041, 0x8) bind$vsock_stream(r2, &(0x7f0000000940), 0x10) listen(r2, 0xfffffffb) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r3, 0x0, 0x0) getsockopt$sock_buf(r3, 0x1, 0x1c, 0x0, &(0x7f0000000200)) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r3, 0x28, 0x6, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r4) sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYRES16=r5, @ANYRES32=r5], 0x1c}}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_opts(r7, 0x29, 0x1d, &(0x7f0000003e00)=@fragment={0x16, 0x0, 0xbc, 0x0, 0x0, 0x6, 0x66}, 0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x9c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0xc025}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x7}, @NFTA_SET_EXPR={0x64, 0x11, 0x0, 0x1, @socket={{0xb}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0xb7}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0xf1}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SOCKET_KEY={0x8}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x9d}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xe}]}}}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @numgen={{0xb}, @void}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xc4}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) syz_emit_ethernet(0x4e, &(0x7f0000000100)=ANY=[@ANYBLOB="e33110495bfdaaaaaaaaaaaa86dd66c2eeed0018110000000000000000000000000000000000fe8000000000000000000000000000aa4e204e2200"], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@bridge_newneigh={0x28, 0x1c, 0x1, 0x70bd29, 0x25dfdbff, {0x7, 0x0, 0x0, r9, 0x80, 0xd7, 0xa}, [@NDA_LLADDR={0xa, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0) 21.576204298s ago: executing program 1 (id=13331): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @loopback}, @in6={0xa, 0x0, 0x0, @private0}], 0x2c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000000)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0x10) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x7105, 0x6, 0xe1, 0x70507, r1, 0xeca4, '\x00', 0x0, r1, 0x3, 0x3, 0x0, 0xb, @void, @value, @value=r2}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r3, &(0x7f0000000140)="430d404cc4191b73066dcbb14ce7290cf662724fe5ef20c72ec65104beda5dc1460a54931db3593f8a3705414587ae89cc8f6cac0290303502410abee51bd5096ac173397fccd048213baf543d6dd19f00549293df41838881c4f04ae20a4dd8e1e042e4e1416a666628257de6c01337ab3070607136359699aafd7f22366606524f54630f4aff3015279bdb431c5e810a97608594451799d6cc13908836aaa52e623916f72b002568e93e4f435f4cc3a739ede11ae6a504e0dcd3b8e5e7e1371c7070a9fb0371b6c4b539bbd658ce1a0e7f7cc9fb96afff", &(0x7f00000000c0)=@udp6=r0, 0x2}, 0x20) 21.505855438s ago: executing program 1 (id=13332): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x3261e) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@map=r0, 0x24, 0x1, 0x6, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@fallback=r0, r0, 0x10, 0x0, 0x0, @void, @value, @void, @void, r1}, 0x20) 21.422288329s ago: executing program 1 (id=13333): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xa, [@ptr, @struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x8, [{0x6, 0x1, 0x3}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, 0x61, 0x0]}}, &(0x7f0000000380)=""/3, 0x46, 0x3, 0x1}, 0x28) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x5c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000001040)={0x98, r2, 0x1, 0x0, 0x3, {}, [@WGDEVICE_A_PEERS={0x68, 0x8, 0x0, 0x1, [{0x64, 0x100, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ALLOWEDIPS={0x3c, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x3}}]}]}]}]}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x98}, 0x1, 0x0, 0x0, 0x4084}, 0x20008040) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r1) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write(r5, &(0x7f0000000000)="0a000000010000", 0x7) r6 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r6, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000140)={0xe0, 0x10, 0x509, 0x0, 0xfffffffd, "", [@generic="6f6d8864d22a3f2ffaa46c88bc", @typed={0xa9, 0x0, 0x0, 0x0, @binary="2b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1f302de337c0004060000000000bf852c8986626691b01b2d44e4ce28712d282d290a9423debbb86f9dba4a2dba4dbe076c02262600c446a567de243ab0d67683f7bb11c9cab3b3eed8a8bef4ff1631aa78acefca03c1a66db4424a8ba100022db228bb7b5eb5100e434db5dd5e995aa0912086d9f4606d2e4cc898739222c5d3a83cb6b707f3336336ebb7d681"}, @generic="60f33653860bc444a2725fc0b4b661c84085a2a8"]}, 0xe0}], 0x1, 0x0, 0x0, 0x800}, 0x40040) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r7) sendmsg$NLBL_CIPSOV4_C_ADD(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x38, r8, 0x1, 0x70bd27, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x80}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x30, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x6}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x30}}, 0x4000000) 20.863427358s ago: executing program 1 (id=13336): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x40201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x14, 0x0, 0x200, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8800) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0xffffffffffffff6e, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r5, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r3], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r6, 0x0, 0x0, 0xc015, &(0x7f00000004c0)={0x11, 0x4, r5, 0x1, 0x7, 0x6, @local}, 0x14) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a58000000060a010400000000000000000a0000010900010073797a31000000002c0004802800018007000100637400001c0002800500030001000000080002400000000c08000140000000090900020073797a320000000014000000110001"], 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="001c86dd2000100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000188"], 0xffe) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x8, 0xdd, 0x40}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa10000000000000701"], 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7b}]}, 0x0}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r8}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="750a00000000000061119c000000000018000000000000000000000000000000950000"], &(0x7f0000000000)='GPL\x00'}, 0x94) 18.193221062s ago: executing program 0 (id=13364): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xffffffff, '\x00', 0x0, 0x0}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x95, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 18.122480886s ago: executing program 0 (id=13365): syz_emit_ethernet(0x86, &(0x7f0000001500)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0xd}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x88, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "8908981864d689ac43445c1c26e95299e94ccad8794114ae3061e328af342f99", "e4d0ce57abcb41f7f5c8ab8f63dd38a1", {"bb3ce5a4bbb68671a2892fa0317a823c", "be9d98ca816f77013a778b6c40b49ea9"}}}}}}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000040000000a"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580), &(0x7f00000004c0), 0x1000, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2010000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) (fail_nth: 3) 17.889872831s ago: executing program 0 (id=13366): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f00000003c0)={0x1f, 0xd3, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) listen(r0, 0x9) ioctl$sock_TIOCINQ(r0, 0x541b, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r1) recvmsg$unix(r1, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x102) bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) recvmmsg(r3, &(0x7f0000000080), 0x72a, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r4, 0x400448ca, 0x0) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r4, &(0x7f00000002c0)=ANY=[@ANYBLOB="01422006020607f6", @ANYRESHEX=r4, @ANYRESOCT=r4, @ANYBLOB="96a116664ad74559c53a5c37bf77920a8e24e3f87917904747209a1e7a7bbd4a06345f71398baf73fc4e2138ce24f0e88c777e4ca8b1fa1a97a591f1b018cf14de7f48a08e12d8b4e2d3f376b583963b", @ANYRES8=0x0], 0xa) bind$bt_hci(r4, &(0x7f00000019c0)={0x1f, 0x3, 0x2}, 0x6) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a300000000084000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff00080003400000000838001180090001006c61737400000000280002800c00024000000000000000090800014000000ba308000140000010000800014000003f5e980000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000006c0003806800008008000340000000025c0002800c00028008000340000000024c000280080003400000000408000180fffffffd0800f1d7fffffffd08000340000000030900020073797a3200000000080001"], 0x164}, 0x1, 0x0, 0x0, 0x4000819}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000140)=ANY=[@ANYRESOCT=r6, @ANYRESDEC=r7], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'team0\x00'}) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r0, @ANYRES64=r5], 0x48}}, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000100)='cubic', 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) 17.8438631s ago: executing program 0 (id=13367): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000001a240)=ANY=[@ANYBLOB="240000001900010000000000000000121c060000fe000001000000f7070001"], 0x24}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x1, 0x10, 0x25dfdbff, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACSEC_INC_SCI={0x5, 0xf, 0x1}, @IFLA_MACSEC_WINDOW={0x8, 0x5, 0x5}]}}}]}, 0x44}}, 0x0) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001ec0), r1) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000040)=ANY=[@ANYBLOB="0a0ae1b0d1", @ANYRES16=r5, @ANYBLOB="010029bd7000fedbdf2508000000"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x40000) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r2, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0xdc, 0x0, 0x80, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x12}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x38, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xe}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xc}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x52}, @MPTCP_PM_ATTR_ADDR={0x44, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00'}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xc}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x20004040}, 0x4040000) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r6, 0x10e, 0xc, &(0x7f0000000640)=0x7, 0x4) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000001800dd8d00000000000000000200000000000006000000000600150004000000140016"], 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmmsg(r7, &(0x7f0000000000), 0x4000000000001f2, 0x0) sendmsg$netlink(r6, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000680)={0x2c, 0x12, 0x1, 0x0, 0x0, "", [@nested={0x10, 0x0, 0x0, 0x0, [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}, @nested={0xa, 0x31, 0x0, 0x1, [@generic="84e521df703b"]}]}, 0x2c}], 0x1}, 0x4000800) 17.734597213s ago: executing program 0 (id=13368): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000002700)={{{@in=@empty, @in6=@remote, 0x4e22, 0xfffb, 0x4e21, 0x9, 0x2, 0x20, 0x0, 0x62}, {0x1, 0x7, 0x0, 0x5, 0x7fff, 0x7, 0xfff, 0x70}, {0x8, 0x3, 0x8, 0x100000002cc}, 0xa4ff, 0x20000, 0x0, 0x1, 0x2, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x4d5, 0x32}, 0xa, @in6=@empty, 0xfffffffd, 0x4, 0x0, 0xf8, 0x6, 0x6, 0xaec4}}, 0xe8) 17.734216756s ago: executing program 0 (id=13369): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000004600070128b570000000008f017c0000080004804e2d", @ANYRESOCT=r0], 0x1c}, 0x1, 0x0, 0x0, 0x24040011}, 0xc000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r3, 0x0, 0x4e, 0x0, &(0x7f0000000380)="f6f4e9a1d78ad62ceef1884386dd78bb3fb7dbfc", 0x0, 0xa1b, 0x0, 0x2, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000780)=ANY=[], 0x32658) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r5, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x300060c1) setsockopt$sock_attach_bpf(r5, 0x6, 0x3, &(0x7f00000000c0), 0x4) write$tun(r1, &(0x7f0000000300)={@val={0x0, 0x8863}, @val={0x0, 0x0, 0x3, 0x0, 0x1}, @mpls={[], @ipv4=@gre={{0x6, 0x4, 0x0, 0x0, 0xfc0, 0x0, 0x11, 0x0, 0x21, 0x0, @broadcast, @broadcast, {[@lsrr={0x83, 0x3, 0xb8}]}}, {{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [], "50726483718ba3e6d08f7571cc59e627d3ed353e879da15784c220746fc2eba11f56fe932b544f53b43a34b265bd5d44fd387d1b56b3b8767c382bc52ee2b8fcbbd661f151afd5315d5f502920c297a3916d7ea039eb558ebb06336662367e15363058de9b806035d5c980832248d1fc96c6b2fb2a4dffa91026dd0228974f70bea2a8e3150d9aae345d6e19f2"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [], "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"}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0x5}}}, {}, {0x8, 0x6558, 0x0, "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"}}}}}, 0xfce) 17.002384603s ago: executing program 3 (id=13387): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, 0x0, 0x0) socket(0x26, 0x1, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, 0x0, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r4 = openat$cgroup_devices(r3, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r4, &(0x7f0000000200)=ANY=[], 0xa) syz_genetlink_get_family_id$SEG6(&(0x7f0000000000), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) unshare(0x400) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[], 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000440)=0xa00, 0x4) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, 0x0, 0x5360aed38bd04b79) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c252500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000180100002020702500000000002020207b1ad8ff00000000bfa100000000000007010000f8ffffffb7020000080000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xe, 0xfffffffffffffffd, &(0x7f00000001c0)="186bf7ffffffffffffffef0a3254", 0x0, 0xff, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) close(0xffffffffffffffff) 17.001194874s ago: executing program 3 (id=13388): sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@dstaddrv6={0x20, 0x84, 0x8, @mcast2}], 0x20, 0xe0}, 0x4000000) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x22}}]}, &(0x7f0000000140)=0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)={@ifindex, r1, 0x37}, 0x20) write$cgroup_freezer_state(r1, &(0x7f0000000040)='THAWED\x00', 0x7) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x83, 0x0, 0x0) r2 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$inet6_buf(r2, 0x29, 0x32, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x118}}, 0x0) 16.102045841s ago: executing program 3 (id=13389): r0 = socket(0x2, 0x805, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x8, 0x0) sendfile(r1, r2, 0x0, 0x800) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x20, &(0x7f0000000100)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}, @in={0x2, 0x4e20, @remote}]}, &(0x7f00000007c0)=0x10) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000006800)={&(0x7f0000000300)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="15060000f2ff01000000010000003000018014000400ff010000000000000000000000000001060005004e220000060001000a000000080006000100000200000000000000df98b07ed6c1497842eeab8c9b9bf61024e617f7409f7380f03ebc2cce1ccc2ae0058b1cb678014564d2bb8b574975057cf20738bc7a40cc9f8f9ae1f1da417c85d671588688b7f7837eec565c4efeb0549dc25016b7127ea17c73d52300000000"], 0x44}, 0x5, 0x0, 0x0, 0x40084}, 0x0) sendmsg$MPTCP_PM_CMD_SET_FLAGS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="100029bd7000fcdbdf25070000000580060005004e200000080003007f0000020000000000000000000000000000153a53d22110e7228f6459231d9e449392b054dcbc3a99361e0639161efee3f06b0a0845f859f161068d4b234c3d454f1a1350e2116a361ce68fff05907a2a516734b222781e11d9ec0ec51f9c209ebaccc2df1e88bd93c579d6650228483f"], 0x34}, 0x1, 0x0, 0x0, 0x6000c044}, 0x20000800) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="050300000000000000000700000008000300", @ANYRES32=r7], 0x1c}}, 0x24044080) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000180)={r8, 0x2, 0x6, 0x80000000, 0xa18c, 0x8}, &(0x7f00000001c0)=0x14) getsockname$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @empty}}, &(0x7f00000000c0)=0x1c) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r10, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r10, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000000)=[{0x28, 0x8}, {0x45}, {0x6, 0x7f, 0x0, 0x7}]}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000003c0)={r9, 0xdac6}, 0x8) 16.027843179s ago: executing program 3 (id=13390): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @loopback}, @in6={0xa, 0x0, 0x0, @private0}], 0x2c) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x7105, 0x6, 0xe1, 0x70507, 0xffffffffffffffff, 0xeca4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0xb}, 0x50) 15.971946322s ago: executing program 3 (id=13391): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=@base={0x12, 0x9, 0x4, 0x2, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r1, 0x0}, 0x20) 15.971712713s ago: executing program 3 (id=13392): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x6, @any, 0x0, 0x1}, 0xe) connect$bt_l2cap(r1, &(0x7f0000000680)={0x1f, 0x1020, @none, 0x0, 0x2}, 0xe) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)={0x44, 0x2e, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x119}, @nested={0x30, 0x11, 0x0, 0x1, [@generic="277db5e2ebd3d253375c6d67c6ede3d2923fe64eea90e95a65b7847af6baf7db0be2fea8edf50223c46c790e"]}]}, 0x44}], 0x1, 0x0, 0x0, 0x84}, 0x300) 8.059654171s ago: executing program 33 (id=13318): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xcc, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x80010000, 0x0, 0x0, 0x0, 0x0, {0x0, 0x2, 0x0, 0x0, 0xfffe}, {0x0, 0x0, 0x0, 0x0, 0xfffd}}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x1}}]}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0xcc}}, 0x0) listen(r2, 0x8) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r4, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0x7000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) getsockopt(r5, 0x200000000114, 0x271c, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) r6 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x4}, 0x8) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r7, &(0x7f0000001040)={0x27, r9, 0xffffffffffffffff, 0x5, 0x97, 0x0, "a64c77609475b78411e88509de050000000000000000000200000000001900", 0x3c}, 0x60) r10 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r10, &(0x7f0000000080)={0x27, r9, 0x0, 0x3, 0x0, 0x5, "750538440ff92fe2aaf1beea7cdcc151042cd9893bc31f80716a120d8be6d7f81cd81ec275000386e7255f0669b740a5418d69d00000d51de08a00ee1d9a34", 0x400000011}, 0x60) bind$nfc_llcp(r1, &(0x7f00000001c0)={0x27, r9, 0xffffffffffffffff, 0x4, 0x7, 0x8, "615dc243b51d1d9c6c70bdcd740c0f255433c01b91594c9a1a3d8285f9dae0d2118608118f607be85a5e6d45faa8c3602897248097be085af9e76e10b6ee39", 0x29}, 0x60) close(r6) setsockopt$inet6_tcp_buf(r1, 0x6, 0x1f, &(0x7f0000000280)='\x00', 0x1) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, 0x0, 0x2160) listen(r0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$unix(r11, &(0x7f0000000140), &(0x7f00000000c0)=0x6e) setsockopt$SO_ATTACH_FILTER(r11, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) 5.041975598s ago: executing program 34 (id=13336): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x40201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x14, 0x0, 0x200, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8800) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0xffffffffffffff6e, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r5, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r3], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r6, 0x0, 0x0, 0xc015, &(0x7f00000004c0)={0x11, 0x4, r5, 0x1, 0x7, 0x6, @local}, 0x14) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a58000000060a010400000000000000000a0000010900010073797a31000000002c0004802800018007000100637400001c0002800500030001000000080002400000000c08000140000000090900020073797a320000000014000000110001"], 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="001c86dd2000100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000188"], 0xffe) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x8, 0xdd, 0x40}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa10000000000000701"], 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7b}]}, 0x0}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r8}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="750a00000000000061119c000000000018000000000000000000000000000000950000"], &(0x7f0000000000)='GPL\x00'}, 0x94) 2.019691526s ago: executing program 35 (id=13369): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000004600070128b570000000008f017c0000080004804e2d", @ANYRESOCT=r0], 0x1c}, 0x1, 0x0, 0x0, 0x24040011}, 0xc000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r3, 0x0, 0x4e, 0x0, &(0x7f0000000380)="f6f4e9a1d78ad62ceef1884386dd78bb3fb7dbfc", 0x0, 0xa1b, 0x0, 0x2, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000780)=ANY=[], 0x32658) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r5, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x300060c1) setsockopt$sock_attach_bpf(r5, 0x6, 0x3, &(0x7f00000000c0), 0x4) write$tun(r1, &(0x7f0000000300)={@val={0x0, 0x8863}, @val={0x0, 0x0, 0x3, 0x0, 0x1}, @mpls={[], @ipv4=@gre={{0x6, 0x4, 0x0, 0x0, 0xfc0, 0x0, 0x11, 0x0, 0x21, 0x0, @broadcast, @broadcast, {[@lsrr={0x83, 0x3, 0xb8}]}}, {{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [], "50726483718ba3e6d08f7571cc59e627d3ed353e879da15784c220746fc2eba11f56fe932b544f53b43a34b265bd5d44fd387d1b56b3b8767c382bc52ee2b8fcbbd661f151afd5315d5f502920c297a3916d7ea039eb558ebb06336662367e15363058de9b806035d5c980832248d1fc96c6b2fb2a4dffa91026dd0228974f70bea2a8e3150d9aae345d6e19f2"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [], "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"}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0x5}}}, {}, {0x8, 0x6558, 0x0, "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"}}}}}, 0xfce) 0s ago: executing program 36 (id=13392): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x6, @any, 0x0, 0x1}, 0xe) connect$bt_l2cap(r1, &(0x7f0000000680)={0x1f, 0x1020, @none, 0x0, 0x2}, 0xe) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)={0x44, 0x2e, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x119}, @nested={0x30, 0x11, 0x0, 0x1, [@generic="277db5e2ebd3d253375c6d67c6ede3d2923fe64eea90e95a65b7847af6baf7db0be2fea8edf50223c46c790e"]}]}, 0x44}], 0x1, 0x0, 0x0, 0x84}, 0x300) kernel console output (not intermixed with test programs): 12: 0000000000000001 [ 2392.328611][T29729] R13: 00007f9ec91e6038 R14: 00007f9ec91e5fa0 R15: 00007ffc86ccc068 [ 2392.328645][T29729] [ 2393.000791][T29745] x_tables: duplicate underflow at hook 1 [ 2393.310318][T29767] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12459'. [ 2393.320103][T29767] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12459'. [ 2393.428369][T29774] netlink: 'syz.4.12463': attribute type 10 has an invalid length. [ 2393.450552][T29774] netlink: 'syz.4.12463': attribute type 10 has an invalid length. [ 2393.468998][T29774] dummy0: entered promiscuous mode [ 2393.489261][T29774] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 2393.495279][ T6815] bond0: (slave dummy0): interface is now down [ 2393.523455][ T6815] bond0: (slave dummy0): interface is now down [ 2393.545025][ T6815] bond0: now running without any active interface! [ 2393.545500][T29781] FAULT_INJECTION: forcing a failure. [ 2393.545500][T29781] name failslab, interval 1, probability 0, space 0, times 0 [ 2393.586457][T29781] CPU: 0 UID: 0 PID: 29781 Comm: syz.2.12466 Not tainted syzkaller #0 PREEMPT(full) [ 2393.586480][T29781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2393.586492][T29781] Call Trace: [ 2393.586500][T29781] [ 2393.586509][T29781] dump_stack_lvl+0x189/0x250 [ 2393.586536][T29781] ? __pfx____ratelimit+0x10/0x10 [ 2393.586561][T29781] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2393.586584][T29781] ? __pfx__printk+0x10/0x10 [ 2393.586609][T29781] ? __pfx___might_resched+0x10/0x10 [ 2393.586628][T29781] ? fs_reclaim_acquire+0x7d/0x100 [ 2393.586658][T29781] should_fail_ex+0x414/0x560 [ 2393.586688][T29781] should_failslab+0xa8/0x100 [ 2393.586708][T29781] __kvmalloc_node_noprof+0x158/0x910 [ 2393.586752][T29781] ? xt_alloc_table_info+0x40/0xb0 [ 2393.586783][T29781] xt_alloc_table_info+0x40/0xb0 [ 2393.586806][T29781] do_ipt_set_ctl+0x881/0xcd0 [ 2393.586831][T29781] ? rcu_is_watching+0x15/0xb0 [ 2393.586853][T29781] ? trace_contention_end+0x39/0x120 [ 2393.586874][T29781] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 2393.586919][T29781] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2393.586957][T29781] ? __pfx_aa_sk_perm+0x10/0x10 [ 2393.586986][T29781] nf_setsockopt+0x26f/0x290 [ 2393.587010][T29781] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 2393.587037][T29781] do_sock_setsockopt+0x17c/0x1b0 [ 2393.587062][T29781] __x64_sys_setsockopt+0x13f/0x1b0 [ 2393.587088][T29781] do_syscall_64+0xfa/0xfa0 [ 2393.587110][T29781] ? lockdep_hardirqs_on+0x9c/0x150 [ 2393.587134][T29781] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2393.587153][T29781] ? clear_bhb_loop+0x60/0xb0 [ 2393.587175][T29781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2393.587192][T29781] RIP: 0033:0x7f89a6d8f6c9 [ 2393.587208][T29781] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2393.587223][T29781] RSP: 002b:00007f89a7c3e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2393.587241][T29781] RAX: ffffffffffffffda RBX: 00007f89a6fe5fa0 RCX: 00007f89a6d8f6c9 [ 2393.587255][T29781] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 2393.587266][T29781] RBP: 00007f89a7c3e090 R08: 00000000000003f8 R09: 0000000000000000 [ 2393.587278][T29781] R10: 00002000000006c0 R11: 0000000000000246 R12: 0000000000000001 [ 2393.587290][T29781] R13: 00007f89a6fe6038 R14: 00007f89a6fe5fa0 R15: 00007fff0d808b58 [ 2393.587323][T29781] [ 2394.094109][T26931] Bluetooth: hci4: command 0x0406 tx timeout [ 2394.499463][T29802] netlink: 36 bytes leftover after parsing attributes in process `syz.1.12474'. [ 2395.022089][T29819] wg1 speed is unknown, defaulting to 1000 [ 2395.046734][T29823] sctp: [Deprecated]: syz.0.12479 (pid 29823) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2395.046734][T29823] Use struct sctp_sack_info instead [ 2395.125987][T29819] wg1 speed is unknown, defaulting to 1000 [ 2395.379462][T29832] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 2395.536955][T29813] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12477'. [ 2396.058279][T29857] sctp: [Deprecated]: syz.1.12490 (pid 29857) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2396.058279][T29857] Use struct sctp_sack_info instead [ 2396.312494][T29867] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12494'. [ 2396.405650][T29871] FAULT_INJECTION: forcing a failure. [ 2396.405650][T29871] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2396.422086][T29871] CPU: 1 UID: 0 PID: 29871 Comm: syz.0.12495 Not tainted syzkaller #0 PREEMPT(full) [ 2396.422110][T29871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2396.422122][T29871] Call Trace: [ 2396.422130][T29871] [ 2396.422138][T29871] dump_stack_lvl+0x189/0x250 [ 2396.422166][T29871] ? __pfx____ratelimit+0x10/0x10 [ 2396.422190][T29871] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2396.422214][T29871] ? __pfx__printk+0x10/0x10 [ 2396.422246][T29871] should_fail_ex+0x414/0x560 [ 2396.422277][T29871] _copy_to_user+0x31/0xb0 [ 2396.422302][T29871] simple_read_from_buffer+0xe1/0x170 [ 2396.422332][T29871] proc_fail_nth_read+0x1b3/0x220 [ 2396.422357][T29871] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2396.422381][T29871] ? rw_verify_area+0x2a6/0x4d0 [ 2396.422402][T29871] ? __lock_acquire+0xab9/0xd20 [ 2396.422418][T29871] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2396.422442][T29871] vfs_read+0x200/0xa30 [ 2396.422463][T29871] ? fdget_pos+0x247/0x320 [ 2396.422485][T29871] ? __pfx___mutex_lock+0x10/0x10 [ 2396.422503][T29871] ? __pfx_vfs_read+0x10/0x10 [ 2396.422527][T29871] ? __fget_files+0x2a/0x420 [ 2396.422549][T29871] ? __fget_files+0x3a0/0x420 [ 2396.422565][T29871] ? __fget_files+0x2a/0x420 [ 2396.422592][T29871] ksys_read+0x145/0x250 [ 2396.422618][T29871] ? __pfx_ksys_read+0x10/0x10 [ 2396.422645][T29871] ? do_syscall_64+0xbe/0xfa0 [ 2396.422673][T29871] do_syscall_64+0xfa/0xfa0 [ 2396.422696][T29871] ? lockdep_hardirqs_on+0x9c/0x150 [ 2396.422720][T29871] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2396.422738][T29871] ? clear_bhb_loop+0x60/0xb0 [ 2396.422766][T29871] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2396.422784][T29871] RIP: 0033:0x7fef3b98e0dc [ 2396.422800][T29871] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 2396.422815][T29871] RSP: 002b:00007fef3c783030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2396.422835][T29871] RAX: ffffffffffffffda RBX: 00007fef3bbe5fa0 RCX: 00007fef3b98e0dc [ 2396.422848][T29871] RDX: 000000000000000f RSI: 00007fef3c7830a0 RDI: 0000000000000004 [ 2396.422859][T29871] RBP: 00007fef3c783090 R08: 0000000000000000 R09: 0000000000000000 [ 2396.422871][T29871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2396.422882][T29871] R13: 00007fef3bbe6038 R14: 00007fef3bbe5fa0 R15: 00007ffca3945af8 [ 2396.422912][T29871] [ 2396.434187][T29867] netlink: 'syz.1.12494': attribute type 1 has an invalid length. [ 2396.685631][T29868] netlink: 'syz.1.12494': attribute type 1 has an invalid length. [ 2397.072187][T29894] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12503'. [ 2397.222598][T29902] netlink: 'syz.0.12504': attribute type 3 has an invalid length. [ 2397.233142][T29902] netlink: 666 bytes leftover after parsing attributes in process `syz.0.12504'. [ 2397.352878][T29911] tipc: Enabling of bearer rejected, already enabled [ 2397.374482][T29909] wg1 speed is unknown, defaulting to 1000 [ 2397.394743][T29909] wg1 speed is unknown, defaulting to 1000 [ 2398.030959][T29926] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12511'. [ 2398.544263][T29932] netlink: 176 bytes leftover after parsing attributes in process `syz.1.12513'. [ 2398.574945][T29932] netlink: 176 bytes leftover after parsing attributes in process `syz.1.12513'. [ 2398.613979][T29931] wg1 speed is unknown, defaulting to 1000 [ 2398.643743][T29931] wg1 speed is unknown, defaulting to 1000 [ 2399.426992][T29952] netlink: 20 bytes leftover after parsing attributes in process `syz.1.12520'. [ 2399.593221][T29967] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12522'. [ 2399.991410][T29985] tipc: Enabled bearer , priority 0 [ 2400.016134][T29985] netlink: 2 bytes leftover after parsing attributes in process `syz.4.12532'. [ 2400.041026][T29989] FAULT_INJECTION: forcing a failure. [ 2400.041026][T29989] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2400.057756][T29985] tipc: Resetting bearer [ 2400.070366][T29989] CPU: 1 UID: 0 PID: 29989 Comm: syz.1.12534 Not tainted syzkaller #0 PREEMPT(full) [ 2400.070390][T29989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2400.070402][T29989] Call Trace: [ 2400.070410][T29989] [ 2400.070419][T29989] dump_stack_lvl+0x189/0x250 [ 2400.070446][T29989] ? __pfx____ratelimit+0x10/0x10 [ 2400.070470][T29989] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2400.070491][T29989] ? __pfx__printk+0x10/0x10 [ 2400.070510][T29989] ? __might_fault+0xb0/0x130 [ 2400.070546][T29989] should_fail_ex+0x414/0x560 [ 2400.070576][T29989] _copy_from_user+0x2d/0xb0 [ 2400.070599][T29989] sctp_setsockopt+0x19f/0x1200 [ 2400.070618][T29989] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 2400.070645][T29989] do_sock_setsockopt+0x17c/0x1b0 [ 2400.070670][T29989] __x64_sys_setsockopt+0x13f/0x1b0 [ 2400.070695][T29989] do_syscall_64+0xfa/0xfa0 [ 2400.070718][T29989] ? lockdep_hardirqs_on+0x9c/0x150 [ 2400.070747][T29989] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2400.070766][T29989] ? clear_bhb_loop+0x60/0xb0 [ 2400.070787][T29989] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2400.070804][T29989] RIP: 0033:0x7f45abf8f6c9 [ 2400.070824][T29989] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2400.070841][T29989] RSP: 002b:00007f45acd59038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2400.070861][T29989] RAX: ffffffffffffffda RBX: 00007f45ac1e5fa0 RCX: 00007f45abf8f6c9 [ 2400.070875][T29989] RDX: 0000000000000017 RSI: 0000000000000084 RDI: 0000000000000004 [ 2400.070886][T29989] RBP: 00007f45acd59090 R08: 0000000000000009 R09: 0000000000000000 [ 2400.070898][T29989] R10: 0000200000000540 R11: 0000000000000246 R12: 0000000000000001 [ 2400.070910][T29989] R13: 00007f45ac1e6038 R14: 00007f45ac1e5fa0 R15: 00007fffa4aeca78 [ 2400.070942][T29989] [ 2400.365570][T29984] tipc: Disabling bearer [ 2400.535689][T29999] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12539'. [ 2400.728290][T30008] tipc: Enabled bearer , priority 0 [ 2400.738799][T30008] syzkaller0: entered promiscuous mode [ 2400.748452][T30008] syzkaller0: entered allmulticast mode [ 2400.775335][T30004] tipc: Resetting bearer [ 2400.800391][T30004] tipc: Disabling bearer [ 2401.370565][T30041] netlink: 44 bytes leftover after parsing attributes in process `syz.0.12554'. [ 2401.541186][T30049] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12556'. [ 2401.745062][T30055] tipc: Enabled bearer , priority 0 [ 2401.752666][T30055] syzkaller0: entered promiscuous mode [ 2401.758828][T30055] syzkaller0: entered allmulticast mode [ 2401.786009][T30055] tipc: Resetting bearer [ 2401.805094][T30054] tipc: Resetting bearer [ 2401.827013][T30054] tipc: Disabling bearer [ 2401.954091][T30069] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12563'. [ 2402.037057][T30075] sctp: [Deprecated]: syz.3.12566 (pid 30075) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2402.037057][T30075] Use struct sctp_sack_info instead [ 2402.158138][T30085] netlink: 44 bytes leftover after parsing attributes in process `syz.4.12565'. [ 2402.365985][T30099] netlink: 'syz.0.12572': attribute type 3 has an invalid length. [ 2402.400112][T30099] netlink: 32 bytes leftover after parsing attributes in process `syz.0.12572'. [ 2402.446729][T30105] netlink: 20 bytes leftover after parsing attributes in process `syz.4.12573'. [ 2402.481771][T30105] netlink: 60 bytes leftover after parsing attributes in process `syz.4.12573'. [ 2402.667470][T30115] tipc: Enabled bearer , priority 0 [ 2402.675583][T30115] syzkaller0: entered promiscuous mode [ 2402.681059][T30115] syzkaller0: entered allmulticast mode [ 2402.693089][T30115] tipc: Resetting bearer [ 2402.766165][T30112] tipc: Resetting bearer [ 2402.814295][T30112] tipc: Disabling bearer [ 2403.306869][T30148] sctp: [Deprecated]: syz.3.12586 (pid 30148) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2403.306869][T30148] Use struct sctp_sack_info instead [ 2403.494514][T30160] netlink: 'syz.4.12592': attribute type 5 has an invalid length. [ 2404.021755][T30202] nbd: must specify a device to reconfigure [ 2404.048922][T30206] netlink: 'syz.2.12611': attribute type 10 has an invalid length. [ 2404.077162][T30205] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2404.195390][T30208] wg1 speed is unknown, defaulting to 1000 [ 2404.214612][T30208] wg1 speed is unknown, defaulting to 1000 [ 2404.235402][T30219] netlink: 'syz.0.12616': attribute type 21 has an invalid length. [ 2404.924147][T30258] tipc: Enabled bearer , priority 0 [ 2404.931469][T30258] syzkaller0: entered promiscuous mode [ 2404.937113][T30258] syzkaller0: entered allmulticast mode [ 2405.017434][T30249] tipc: Resetting bearer [ 2405.048262][T30263] __nla_validate_parse: 8 callbacks suppressed [ 2405.048278][T30263] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12629'. [ 2405.074401][T30249] tipc: Disabling bearer [ 2405.529497][T30301] FAULT_INJECTION: forcing a failure. [ 2405.529497][T30301] name failslab, interval 1, probability 0, space 0, times 0 [ 2405.597740][T30301] CPU: 0 UID: 0 PID: 30301 Comm: syz.3.12643 Not tainted syzkaller #0 PREEMPT(full) [ 2405.597765][T30301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2405.597776][T30301] Call Trace: [ 2405.597785][T30301] [ 2405.597793][T30301] dump_stack_lvl+0x189/0x250 [ 2405.597821][T30301] ? __pfx____ratelimit+0x10/0x10 [ 2405.597846][T30301] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2405.597869][T30301] ? __pfx__printk+0x10/0x10 [ 2405.597894][T30301] ? __pfx___might_resched+0x10/0x10 [ 2405.597912][T30301] ? fs_reclaim_acquire+0x7d/0x100 [ 2405.597943][T30301] should_fail_ex+0x414/0x560 [ 2405.597971][T30301] should_failslab+0xa8/0x100 [ 2405.597992][T30301] __kvmalloc_node_noprof+0x158/0x910 [ 2405.598014][T30301] ? do_ipt_set_ctl+0x881/0xcd0 [ 2405.598033][T30301] ? nf_setsockopt+0x26f/0x290 [ 2405.598064][T30301] ? translate_table+0x198/0x2000 [ 2405.598083][T30301] ? do_syscall_64+0xfa/0xfa0 [ 2405.598113][T30301] translate_table+0x198/0x2000 [ 2405.598149][T30301] ? __lock_acquire+0xab9/0xd20 [ 2405.598173][T30301] ? __pfx_translate_table+0x10/0x10 [ 2405.598197][T30301] ? __might_fault+0xb0/0x130 [ 2405.598241][T30301] ? _copy_from_user+0x94/0xb0 [ 2405.598269][T30301] do_ipt_set_ctl+0x967/0xcd0 [ 2405.598294][T30301] ? rcu_is_watching+0x15/0xb0 [ 2405.598315][T30301] ? trace_contention_end+0x39/0x120 [ 2405.598337][T30301] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 2405.598381][T30301] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2405.598419][T30301] ? __pfx_aa_sk_perm+0x10/0x10 [ 2405.598448][T30301] nf_setsockopt+0x26f/0x290 [ 2405.598471][T30301] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 2405.598499][T30301] do_sock_setsockopt+0x17c/0x1b0 [ 2405.598523][T30301] __x64_sys_setsockopt+0x13f/0x1b0 [ 2405.598549][T30301] do_syscall_64+0xfa/0xfa0 [ 2405.598571][T30301] ? lockdep_hardirqs_on+0x9c/0x150 [ 2405.598595][T30301] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2405.598612][T30301] ? clear_bhb_loop+0x60/0xb0 [ 2405.598634][T30301] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2405.598651][T30301] RIP: 0033:0x7fee0438f6c9 [ 2405.598667][T30301] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2405.598682][T30301] RSP: 002b:00007fee05274038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2405.598702][T30301] RAX: ffffffffffffffda RBX: 00007fee045e5fa0 RCX: 00007fee0438f6c9 [ 2405.598715][T30301] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 2405.598727][T30301] RBP: 00007fee05274090 R08: 00000000000003f8 R09: 0000000000000000 [ 2405.598739][T30301] R10: 00002000000006c0 R11: 0000000000000246 R12: 0000000000000001 [ 2405.598751][T30301] R13: 00007fee045e6038 R14: 00007fee045e5fa0 R15: 00007fff0a301538 [ 2405.598787][T30301] [ 2405.879978][T30309] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12645'. [ 2405.922445][T30306] tipc: Enabled bearer , priority 0 [ 2405.929926][T30306] syzkaller0: entered promiscuous mode [ 2405.935470][T30306] syzkaller0: entered allmulticast mode [ 2406.034317][ T1301] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 2406.100055][T30304] tipc: Resetting bearer [ 2406.101821][T30317] FAULT_INJECTION: forcing a failure. [ 2406.101821][T30317] name failslab, interval 1, probability 0, space 0, times 0 [ 2406.118599][T30317] CPU: 0 UID: 0 PID: 30317 Comm: syz.3.12650 Not tainted syzkaller #0 PREEMPT(full) [ 2406.118622][T30317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2406.118633][T30317] Call Trace: [ 2406.118640][T30317] [ 2406.118648][T30317] dump_stack_lvl+0x189/0x250 [ 2406.118676][T30317] ? __pfx____ratelimit+0x10/0x10 [ 2406.118701][T30317] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2406.118724][T30317] ? __pfx__printk+0x10/0x10 [ 2406.118745][T30317] ? __pfx___might_resched+0x10/0x10 [ 2406.118764][T30317] ? fs_reclaim_acquire+0x7d/0x100 [ 2406.118794][T30317] should_fail_ex+0x414/0x560 [ 2406.118824][T30317] should_failslab+0xa8/0x100 [ 2406.118844][T30317] __kmalloc_cache_noprof+0x6f/0x6f0 [ 2406.118871][T30317] ? sctp_auth_set_key+0x1bd/0x930 [ 2406.118902][T30317] sctp_auth_set_key+0x1bd/0x930 [ 2406.118924][T30317] ? lockdep_hardirqs_on+0x9c/0x150 [ 2406.118950][T30317] ? __local_bh_enable_ip+0x12d/0x1c0 [ 2406.118969][T30317] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 2406.118990][T30317] sctp_setsockopt_auth_key+0x399/0x640 [ 2406.119025][T30317] sctp_setsockopt+0x506/0x1200 [ 2406.119041][T30317] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 2406.119068][T30317] do_sock_setsockopt+0x17c/0x1b0 [ 2406.119092][T30317] __x64_sys_setsockopt+0x13f/0x1b0 [ 2406.119116][T30317] do_syscall_64+0xfa/0xfa0 [ 2406.119138][T30317] ? lockdep_hardirqs_on+0x9c/0x150 [ 2406.119159][T30317] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2406.119177][T30317] ? clear_bhb_loop+0x60/0xb0 [ 2406.119199][T30317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2406.119217][T30317] RIP: 0033:0x7fee0438f6c9 [ 2406.119234][T30317] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2406.119249][T30317] RSP: 002b:00007fee05274038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2406.119268][T30317] RAX: ffffffffffffffda RBX: 00007fee045e5fa0 RCX: 00007fee0438f6c9 [ 2406.119282][T30317] RDX: 0000000000000017 RSI: 0000000000000084 RDI: 0000000000000004 [ 2406.119293][T30317] RBP: 00007fee05274090 R08: 0000000000000009 R09: 0000000000000000 [ 2406.119305][T30317] R10: 0000200000000540 R11: 0000000000000246 R12: 0000000000000001 [ 2406.119317][T30317] R13: 00007fee045e6038 R14: 00007fee045e5fa0 R15: 00007fff0a301538 [ 2406.119351][T30317] [ 2406.400945][T30321] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12652'. [ 2406.419743][T30304] tipc: Disabling bearer [ 2406.431912][T30323] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12651'. [ 2406.558420][T30330] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12652'. [ 2406.717739][T30343] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12660'. [ 2406.747031][T30343] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12660'. [ 2406.754506][T30348] sctp: [Deprecated]: syz.4.12661 (pid 30348) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2406.754506][T30348] Use struct sctp_sack_info instead [ 2406.931188][T30361] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12664'. [ 2406.962934][T30361] bond10: option ad_actor_sys_prio: invalid value (0) [ 2406.987448][T30361] bond10: option ad_actor_sys_prio: allowed values 1 - 65535 [ 2406.995687][T30365] FAULT_INJECTION: forcing a failure. [ 2406.995687][T30365] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2407.009485][T30365] CPU: 0 UID: 0 PID: 30365 Comm: syz.1.12670 Not tainted syzkaller #0 PREEMPT(full) [ 2407.009509][T30365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2407.009520][T30365] Call Trace: [ 2407.009529][T30365] [ 2407.009537][T30365] dump_stack_lvl+0x189/0x250 [ 2407.009565][T30365] ? __pfx____ratelimit+0x10/0x10 [ 2407.009590][T30365] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2407.009612][T30365] ? __pfx__printk+0x10/0x10 [ 2407.009631][T30365] ? __might_fault+0xb0/0x130 [ 2407.009667][T30365] should_fail_ex+0x414/0x560 [ 2407.009696][T30365] _copy_from_user+0x2d/0xb0 [ 2407.009718][T30365] ___sys_sendmsg+0x158/0x2a0 [ 2407.009742][T30365] ? __pfx____sys_sendmsg+0x10/0x10 [ 2407.009799][T30365] ? __fget_files+0x2a/0x420 [ 2407.009816][T30365] ? __fget_files+0x3a0/0x420 [ 2407.009844][T30365] __x64_sys_sendmsg+0x19b/0x260 [ 2407.009867][T30365] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2407.009897][T30365] ? __pfx_ksys_write+0x10/0x10 [ 2407.009925][T30365] ? do_syscall_64+0xbe/0xfa0 [ 2407.009959][T30365] do_syscall_64+0xfa/0xfa0 [ 2407.009982][T30365] ? lockdep_hardirqs_on+0x9c/0x150 [ 2407.010005][T30365] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2407.010023][T30365] ? clear_bhb_loop+0x60/0xb0 [ 2407.010045][T30365] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2407.010063][T30365] RIP: 0033:0x7f45abf8f6c9 [ 2407.010080][T30365] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2407.010095][T30365] RSP: 002b:00007f45acd59038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2407.010115][T30365] RAX: ffffffffffffffda RBX: 00007f45ac1e5fa0 RCX: 00007f45abf8f6c9 [ 2407.010129][T30365] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 2407.010141][T30365] RBP: 00007f45acd59090 R08: 0000000000000000 R09: 0000000000000000 [ 2407.010152][T30365] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2407.010164][T30365] R13: 00007f45ac1e6038 R14: 00007f45ac1e5fa0 R15: 00007fffa4aeca78 [ 2407.010196][T30365] [ 2407.257723][T30361] bond10 (unregistering): Released all slaves [ 2407.404386][T30375] FAULT_INJECTION: forcing a failure. [ 2407.404386][T30375] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2407.441548][T30375] CPU: 0 UID: 0 PID: 30375 Comm: syz.2.12674 Not tainted syzkaller #0 PREEMPT(full) [ 2407.441572][T30375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2407.441584][T30375] Call Trace: [ 2407.441592][T30375] [ 2407.441601][T30375] dump_stack_lvl+0x189/0x250 [ 2407.441628][T30375] ? __pfx____ratelimit+0x10/0x10 [ 2407.441664][T30375] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2407.441687][T30375] ? __pfx__printk+0x10/0x10 [ 2407.441706][T30375] ? __might_fault+0xb0/0x130 [ 2407.441742][T30375] should_fail_ex+0x414/0x560 [ 2407.441773][T30375] _copy_from_user+0x2d/0xb0 [ 2407.441796][T30375] do_sys_poll+0x242/0x1070 [ 2407.441838][T30375] ? __pfx_do_sys_poll+0x10/0x10 [ 2407.441937][T30375] ? rcu_read_lock_any_held+0xb3/0x120 [ 2407.441959][T30375] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 2407.441983][T30375] ? vfs_write+0x956/0xb30 [ 2407.442034][T30375] ? set_user_sigmask+0xc7/0x1b0 [ 2407.442054][T30375] ? __pfx_set_user_sigmask+0x10/0x10 [ 2407.442075][T30375] ? do_sys_openat2+0x154/0x1c0 [ 2407.442102][T30375] __se_sys_ppoll+0x1ff/0x260 [ 2407.442133][T30375] ? __pfx___se_sys_ppoll+0x10/0x10 [ 2407.442157][T30375] ? __pfx_ksys_write+0x10/0x10 [ 2407.442184][T30375] ? do_syscall_64+0xbe/0xfa0 [ 2407.442206][T30375] ? __x64_sys_ppoll+0x20/0xc0 [ 2407.442231][T30375] do_syscall_64+0xfa/0xfa0 [ 2407.442254][T30375] ? lockdep_hardirqs_on+0x9c/0x150 [ 2407.442278][T30375] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2407.442297][T30375] ? clear_bhb_loop+0x60/0xb0 [ 2407.442319][T30375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2407.442337][T30375] RIP: 0033:0x7f89a6d8f6c9 [ 2407.442353][T30375] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2407.442368][T30375] RSP: 002b:00007f89a7c3e038 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 2407.442388][T30375] RAX: ffffffffffffffda RBX: 00007f89a6fe5fa0 RCX: 00007f89a6d8f6c9 [ 2407.442402][T30375] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000001440 [ 2407.442414][T30375] RBP: 00007f89a7c3e090 R08: 0000000000000000 R09: 0000000000000000 [ 2407.442425][T30375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2407.442437][T30375] R13: 00007f89a6fe6038 R14: 00007f89a6fe5fa0 R15: 00007fff0d808b58 [ 2407.442470][T30375] [ 2407.850583][T30388] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12677'. [ 2408.124575][T30403] netlink: 20 bytes leftover after parsing attributes in process `syz.0.12684'. [ 2408.220212][T30409] netlink: 'syz.2.12688': attribute type 2 has an invalid length. [ 2408.311906][T30417] tipc: Enabled bearer , priority 0 [ 2408.336442][T30411] tipc: Disabling bearer [ 2408.449530][T30427] xt_bpf: check failed: parse error [ 2408.695410][T30435] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 2408.932584][T30446] sctp: [Deprecated]: syz.4.12702 (pid 30446) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2408.932584][T30446] Use struct sctp_sack_info instead [ 2409.061604][T30451] veth0_to_team: left promiscuous mode [ 2409.185614][T30464] tipc: Enabling of bearer rejected, already enabled [ 2409.578026][T30483] sctp: [Deprecated]: syz.3.12717 (pid 30483) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2409.578026][T30483] Use struct sctp_sack_info instead [ 2409.878858][T30499] tipc: Enabling of bearer rejected, failed to enable media [ 2409.919443][T30505] sctp: [Deprecated]: syz.3.12725 (pid 30505) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2409.919443][T30505] Use struct sctp_sack_info instead [ 2410.044033][T30516] FAULT_INJECTION: forcing a failure. [ 2410.044033][T30516] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2410.083818][T30516] CPU: 1 UID: 0 PID: 30516 Comm: syz.0.12729 Not tainted syzkaller #0 PREEMPT(full) [ 2410.083841][T30516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2410.083853][T30516] Call Trace: [ 2410.083861][T30516] [ 2410.083869][T30516] dump_stack_lvl+0x189/0x250 [ 2410.083897][T30516] ? __pfx____ratelimit+0x10/0x10 [ 2410.083922][T30516] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2410.083944][T30516] ? __pfx__printk+0x10/0x10 [ 2410.083964][T30516] ? __might_fault+0xb0/0x130 [ 2410.083998][T30516] should_fail_ex+0x414/0x560 [ 2410.084029][T30516] _copy_from_user+0x2d/0xb0 [ 2410.084052][T30516] __sys_bpf+0x1e3/0x860 [ 2410.084072][T30516] ? __pfx___sys_bpf+0x10/0x10 [ 2410.084107][T30516] ? ksys_write+0x22a/0x250 [ 2410.084133][T30516] ? __pfx_ksys_write+0x10/0x10 [ 2410.084162][T30516] __x64_sys_bpf+0x7c/0x90 [ 2410.084187][T30516] do_syscall_64+0xfa/0xfa0 [ 2410.084209][T30516] ? lockdep_hardirqs_on+0x9c/0x150 [ 2410.084232][T30516] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2410.084249][T30516] ? clear_bhb_loop+0x60/0xb0 [ 2410.084270][T30516] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2410.084287][T30516] RIP: 0033:0x7fef3b98f6c9 [ 2410.084303][T30516] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2410.084319][T30516] RSP: 002b:00007fef3c783038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2410.084338][T30516] RAX: ffffffffffffffda RBX: 00007fef3bbe5fa0 RCX: 00007fef3b98f6c9 [ 2410.084352][T30516] RDX: 0000000000000028 RSI: 0000200000000080 RDI: 0000000000000012 [ 2410.084364][T30516] RBP: 00007fef3c783090 R08: 0000000000000000 R09: 0000000000000000 [ 2410.084376][T30516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2410.084387][T30516] R13: 00007fef3bbe6038 R14: 00007fef3bbe5fa0 R15: 00007ffca3945af8 [ 2410.084419][T30516] [ 2410.671735][T30532] syzkaller0: entered promiscuous mode [ 2410.680236][T30545] FAULT_INJECTION: forcing a failure. [ 2410.680236][T30545] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2410.703988][T30532] syzkaller0: entered allmulticast mode [ 2410.709686][T30545] CPU: 1 UID: 0 PID: 30545 Comm: syz.2.12738 Not tainted syzkaller #0 PREEMPT(full) [ 2410.709709][T30545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2410.709720][T30545] Call Trace: [ 2410.709728][T30545] [ 2410.709736][T30545] dump_stack_lvl+0x189/0x250 [ 2410.709763][T30545] ? __pfx____ratelimit+0x10/0x10 [ 2410.709787][T30545] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2410.709810][T30545] ? __pfx__printk+0x10/0x10 [ 2410.709828][T30545] ? __might_fault+0xb0/0x130 [ 2410.709864][T30545] should_fail_ex+0x414/0x560 [ 2410.709894][T30545] _copy_from_iter+0x1de/0x1790 [ 2410.709921][T30545] ? rcu_is_watching+0x15/0xb0 [ 2410.709946][T30545] ? kmalloc_reserve+0xbd/0x290 [ 2410.709965][T30545] ? __pfx__copy_from_iter+0x10/0x10 [ 2410.709987][T30545] ? __build_skb_around+0x262/0x3f0 [ 2410.710009][T30545] ? netlink_sendmsg+0x642/0xb30 [ 2410.710026][T30545] ? skb_put+0x11b/0x210 [ 2410.710048][T30545] netlink_sendmsg+0x6b2/0xb30 [ 2410.710076][T30545] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2410.710099][T30545] ? aa_sock_msg_perm+0xf1/0x1d0 [ 2410.710125][T30545] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2410.710143][T30545] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2410.710163][T30545] __sock_sendmsg+0x21c/0x270 [ 2410.710191][T30545] ____sys_sendmsg+0x505/0x830 [ 2410.710217][T30545] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2410.710247][T30545] ? import_iovec+0x74/0xa0 [ 2410.710272][T30545] ___sys_sendmsg+0x21f/0x2a0 [ 2410.710295][T30545] ? __pfx____sys_sendmsg+0x10/0x10 [ 2410.710353][T30545] ? __fget_files+0x2a/0x420 [ 2410.710370][T30545] ? __fget_files+0x3a0/0x420 [ 2410.710398][T30545] __x64_sys_sendmsg+0x19b/0x260 [ 2410.710421][T30545] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2410.710451][T30545] ? __pfx_ksys_write+0x10/0x10 [ 2410.710479][T30545] ? do_syscall_64+0xbe/0xfa0 [ 2410.710506][T30545] do_syscall_64+0xfa/0xfa0 [ 2410.710529][T30545] ? lockdep_hardirqs_on+0x9c/0x150 [ 2410.710553][T30545] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2410.710571][T30545] ? clear_bhb_loop+0x60/0xb0 [ 2410.710593][T30545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2410.710610][T30545] RIP: 0033:0x7f89a6d8f6c9 [ 2410.710626][T30545] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2410.710643][T30545] RSP: 002b:00007f89a7c3e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2410.710668][T30545] RAX: ffffffffffffffda RBX: 00007f89a6fe5fa0 RCX: 00007f89a6d8f6c9 [ 2410.710682][T30545] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 2410.710695][T30545] RBP: 00007f89a7c3e090 R08: 0000000000000000 R09: 0000000000000000 [ 2410.710707][T30545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2410.710718][T30545] R13: 00007f89a6fe6038 R14: 00007f89a6fe5fa0 R15: 00007fff0d808b58 [ 2410.710751][T30545] [ 2411.042294][T30554] sctp: [Deprecated]: syz.3.12741 (pid 30554) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2411.042294][T30554] Use struct sctp_sack_info instead [ 2411.168398][T30558] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 2411.176523][T30558] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 2411.281142][T30568] FAULT_INJECTION: forcing a failure. [ 2411.281142][T30568] name failslab, interval 1, probability 0, space 0, times 0 [ 2411.334995][T30568] CPU: 1 UID: 0 PID: 30568 Comm: syz.4.12747 Not tainted syzkaller #0 PREEMPT(full) [ 2411.335019][T30568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2411.335029][T30568] Call Trace: [ 2411.335037][T30568] [ 2411.335045][T30568] dump_stack_lvl+0x189/0x250 [ 2411.335072][T30568] ? __pfx____ratelimit+0x10/0x10 [ 2411.335097][T30568] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2411.335120][T30568] ? __pfx__printk+0x10/0x10 [ 2411.335143][T30568] ? __pfx___might_resched+0x10/0x10 [ 2411.335163][T30568] ? fs_reclaim_acquire+0x7d/0x100 [ 2411.335194][T30568] should_fail_ex+0x414/0x560 [ 2411.335224][T30568] should_failslab+0xa8/0x100 [ 2411.335245][T30568] __kmalloc_cache_noprof+0x6f/0x6f0 [ 2411.335269][T30568] ? nfnetlink_rcv+0xf97/0x2590 [ 2411.335300][T30568] nfnetlink_rcv+0xf97/0x2590 [ 2411.335362][T30568] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 2411.335405][T30568] ? ref_tracker_free+0x63a/0x7d0 [ 2411.335455][T30568] ? __netlink_deliver_tap+0x807/0x850 [ 2411.335474][T30568] ? netlink_deliver_tap+0x2e/0x1b0 [ 2411.335513][T30568] netlink_unicast+0x82f/0x9e0 [ 2411.335548][T30568] ? __pfx_netlink_unicast+0x10/0x10 [ 2411.335575][T30568] ? netlink_sendmsg+0x642/0xb30 [ 2411.335592][T30568] ? skb_put+0x11b/0x210 [ 2411.335621][T30568] netlink_sendmsg+0x805/0xb30 [ 2411.335651][T30568] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2411.335675][T30568] ? aa_sock_msg_perm+0xf1/0x1d0 [ 2411.335702][T30568] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2411.335720][T30568] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2411.335740][T30568] __sock_sendmsg+0x21c/0x270 [ 2411.335768][T30568] ____sys_sendmsg+0x505/0x830 [ 2411.335795][T30568] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2411.335826][T30568] ? import_iovec+0x74/0xa0 [ 2411.335853][T30568] ___sys_sendmsg+0x21f/0x2a0 [ 2411.335876][T30568] ? __pfx____sys_sendmsg+0x10/0x10 [ 2411.335937][T30568] ? __fget_files+0x2a/0x420 [ 2411.335954][T30568] ? __fget_files+0x3a0/0x420 [ 2411.335983][T30568] __x64_sys_sendmsg+0x19b/0x260 [ 2411.336007][T30568] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2411.336039][T30568] ? __pfx_ksys_write+0x10/0x10 [ 2411.336068][T30568] ? do_syscall_64+0xbe/0xfa0 [ 2411.336096][T30568] do_syscall_64+0xfa/0xfa0 [ 2411.336119][T30568] ? lockdep_hardirqs_on+0x9c/0x150 [ 2411.336143][T30568] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2411.336162][T30568] ? clear_bhb_loop+0x60/0xb0 [ 2411.336185][T30568] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2411.336203][T30568] RIP: 0033:0x7f9ec8f8f6c9 [ 2411.336219][T30568] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2411.336235][T30568] RSP: 002b:00007f9ec9efd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2411.336254][T30568] RAX: ffffffffffffffda RBX: 00007f9ec91e5fa0 RCX: 00007f9ec8f8f6c9 [ 2411.336268][T30568] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 2411.336280][T30568] RBP: 00007f9ec9efd090 R08: 0000000000000000 R09: 0000000000000000 [ 2411.336292][T30568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2411.336303][T30568] R13: 00007f9ec91e6038 R14: 00007f9ec91e5fa0 R15: 00007ffc86ccc068 [ 2411.336337][T30568] [ 2411.675543][T30562] wg1 speed is unknown, defaulting to 1000 [ 2411.683032][T30562] wg1 speed is unknown, defaulting to 1000 [ 2412.220658][T30597] netlink: 'syz.2.12756': attribute type 15 has an invalid length. [ 2412.519979][T30604] tipc: Enabled bearer , priority 0 [ 2412.564944][T30604] tipc: Resetting bearer [ 2412.639897][T30603] tipc: Disabling bearer [ 2412.992342][T30647] __nla_validate_parse: 66 callbacks suppressed [ 2412.992360][T30647] netlink: 20 bytes leftover after parsing attributes in process `syz.1.12772'. [ 2413.009704][T30647] netlink: 20 bytes leftover after parsing attributes in process `syz.1.12772'. [ 2413.022810][T30647] : renamed from veth0_to_bond [ 2413.291667][T30660] 8021q: adding VLAN 0 to HW filter on device bond9 [ 2413.330897][T30668] sctp: [Deprecated]: syz.2.12781 (pid 30668) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2413.330897][T30668] Use struct sctp_sack_info instead [ 2413.606566][T30687] netlink: 'syz.2.12788': attribute type 58 has an invalid length. [ 2413.627355][T30687] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12788'. [ 2413.631242][T30688] netlink: 20 bytes leftover after parsing attributes in process `syz.4.12790'. [ 2413.659222][T30688] netlink: 40 bytes leftover after parsing attributes in process `syz.4.12790'. [ 2413.722132][T30698] netlink: 'syz.3.12793': attribute type 10 has an invalid length. [ 2413.738540][T30698] openvswitch: netlink: EtherType 0 is less than min 600 [ 2413.784401][T30699] bond14: option tlb_dynamic_lb: mode dependency failed, not supported in mode active-backup(1) [ 2413.808482][T30699] bond14 (unregistering): Released all slaves [ 2413.878852][T30709] 8021q: adding VLAN 0 to HW filter on device bond10 [ 2414.440580][T30733] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 2414.615599][T30739] 8021q: adding VLAN 0 to HW filter on device bond13 [ 2414.712359][T30750] sctp: [Deprecated]: syz.2.12813 (pid 30750) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2414.712359][T30750] Use struct sctp_sack_info instead [ 2414.845479][T30757] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 2414.899365][T30761] netlink: 20 bytes leftover after parsing attributes in process `syz.1.12818'. [ 2415.095684][T30772] netlink: 20 bytes leftover after parsing attributes in process `syz.0.12824'. [ 2415.175459][T30771] wg1 speed is unknown, defaulting to 1000 [ 2415.182969][T30771] wg1 speed is unknown, defaulting to 1000 [ 2415.593711][T30804] tipc: Enabled bearer , priority 10 [ 2415.730744][T30813] netlink: 'syz.3.12836': attribute type 1 has an invalid length. [ 2415.820202][T30813] 8021q: adding VLAN 0 to HW filter on device bond10 [ 2415.848166][T30819] bond10: (slave wlan0): Enslaving as an active interface with a down link [ 2415.895955][T30821] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12838'. [ 2417.018880][T30877] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12860'. [ 2417.099542][T30883] netlink: 104 bytes leftover after parsing attributes in process `syz.2.12861'. [ 2417.323823][T30894] FAULT_INJECTION: forcing a failure. [ 2417.323823][T30894] name failslab, interval 1, probability 0, space 0, times 0 [ 2417.336653][T30894] CPU: 1 UID: 0 PID: 30894 Comm: syz.0.12866 Not tainted syzkaller #0 PREEMPT(full) [ 2417.336676][T30894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2417.336687][T30894] Call Trace: [ 2417.336695][T30894] [ 2417.336704][T30894] dump_stack_lvl+0x189/0x250 [ 2417.336731][T30894] ? __pfx____ratelimit+0x10/0x10 [ 2417.336755][T30894] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2417.336778][T30894] ? __pfx__printk+0x10/0x10 [ 2417.336803][T30894] ? __pfx___might_resched+0x10/0x10 [ 2417.336822][T30894] ? fs_reclaim_acquire+0x7d/0x100 [ 2417.336852][T30894] should_fail_ex+0x414/0x560 [ 2417.336883][T30894] should_failslab+0xa8/0x100 [ 2417.336904][T30894] kmem_cache_alloc_node_noprof+0x77/0x710 [ 2417.336927][T30894] ? __alloc_skb+0x112/0x2d0 [ 2417.336944][T30894] ? netlink_autobind+0xdb/0x300 [ 2417.336969][T30894] __alloc_skb+0x112/0x2d0 [ 2417.336991][T30894] netlink_sendmsg+0x5c6/0xb30 [ 2417.337020][T30894] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2417.337043][T30894] ? aa_sock_msg_perm+0xf1/0x1d0 [ 2417.337069][T30894] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2417.337086][T30894] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2417.337105][T30894] __sock_sendmsg+0x21c/0x270 [ 2417.337133][T30894] ____sys_sendmsg+0x505/0x830 [ 2417.337159][T30894] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2417.337194][T30894] ? import_iovec+0x74/0xa0 [ 2417.337220][T30894] ___sys_sendmsg+0x21f/0x2a0 [ 2417.337242][T30894] ? __pfx____sys_sendmsg+0x10/0x10 [ 2417.337300][T30894] ? __fget_files+0x2a/0x420 [ 2417.337316][T30894] ? __fget_files+0x3a0/0x420 [ 2417.337344][T30894] __x64_sys_sendmsg+0x19b/0x260 [ 2417.337367][T30894] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2417.337398][T30894] ? __pfx_ksys_write+0x10/0x10 [ 2417.337426][T30894] ? do_syscall_64+0xbe/0xfa0 [ 2417.337454][T30894] do_syscall_64+0xfa/0xfa0 [ 2417.337476][T30894] ? lockdep_hardirqs_on+0x9c/0x150 [ 2417.337500][T30894] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2417.337518][T30894] ? clear_bhb_loop+0x60/0xb0 [ 2417.337540][T30894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2417.337558][T30894] RIP: 0033:0x7fef3b98f6c9 [ 2417.337574][T30894] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2417.337589][T30894] RSP: 002b:00007fef3c783038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2417.337608][T30894] RAX: ffffffffffffffda RBX: 00007fef3bbe5fa0 RCX: 00007fef3b98f6c9 [ 2417.337622][T30894] RDX: 0000000000000080 RSI: 0000200000000140 RDI: 0000000000000003 [ 2417.337638][T30894] RBP: 00007fef3c783090 R08: 0000000000000000 R09: 0000000000000000 [ 2417.337650][T30894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2417.337661][T30894] R13: 00007fef3bbe6038 R14: 00007fef3bbe5fa0 R15: 00007ffca3945af8 [ 2417.337694][T30894] [ 2417.673113][T30896] syzkaller1: entered promiscuous mode [ 2417.700174][T30896] syzkaller1: entered allmulticast mode [ 2417.810496][T30909] netlink: 'syz.4.12871': attribute type 10 has an invalid length. [ 2417.864638][T30909] bond0: (slave dummy0): Releasing backup interface [ 2417.872306][T30909] dummy0: left promiscuous mode [ 2417.878295][T30915] netlink: 'syz.4.12871': attribute type 10 has an invalid length. [ 2417.974520][T30896] block nbd5: shutting down sockets [ 2417.990301][T30915] dummy0: entered promiscuous mode [ 2417.994448][T10161] bond0: (slave dummy0): interface is now down [ 2417.997798][T30915] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 2418.005334][T30909] __nla_validate_parse: 1 callbacks suppressed [ 2418.005348][T30909] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12871'. [ 2418.040842][T10161] bond0: now running without any active interface! [ 2418.076589][T30926] netlink: 56 bytes leftover after parsing attributes in process `syz.1.12872'. [ 2418.194882][T30930] netlink: 120 bytes leftover after parsing attributes in process `syz.1.12873'. [ 2418.345549][T30930] nbd0: detected capacity change from 0 to 63 [ 2418.352177][T30934] block nbd1: NBD_DISCONNECT [ 2418.359372][T30934] block nbd1: Send disconnect failed -32 [ 2418.416950][T26931] block nbd0: Receive control failed (result -104) [ 2418.489611][T30946] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12880'. [ 2418.553954][T30949] netlink: 132 bytes leftover after parsing attributes in process `syz.1.12881'. [ 2418.797672][T30958] netlink: 'syz.0.12883': attribute type 1 has an invalid length. [ 2418.821067][T30960] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12885'. [ 2419.181464][T30981] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12894'. [ 2419.374594][T30991] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12899'. [ 2419.536707][T30999] sctp: [Deprecated]: syz.2.12901 (pid 30999) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2419.536707][T30999] Use struct sctp_sack_info instead [ 2419.795726][T31015] netlink: 316 bytes leftover after parsing attributes in process `syz.4.12907'. [ 2419.811640][T31015] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12907'. [ 2420.248355][T31032] FAULT_INJECTION: forcing a failure. [ 2420.248355][T31032] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2420.273652][T31032] CPU: 1 UID: 0 PID: 31032 Comm: syz.3.12912 Not tainted syzkaller #0 PREEMPT(full) [ 2420.273675][T31032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2420.273686][T31032] Call Trace: [ 2420.273694][T31032] [ 2420.273702][T31032] dump_stack_lvl+0x189/0x250 [ 2420.273730][T31032] ? __pfx____ratelimit+0x10/0x10 [ 2420.273753][T31032] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2420.273776][T31032] ? __pfx__printk+0x10/0x10 [ 2420.273795][T31032] ? __might_fault+0xb0/0x130 [ 2420.273829][T31032] should_fail_ex+0x414/0x560 [ 2420.273860][T31032] _copy_from_user+0x2d/0xb0 [ 2420.273883][T31032] __sys_bpf+0x1e3/0x860 [ 2420.273904][T31032] ? __pfx___sys_bpf+0x10/0x10 [ 2420.273945][T31032] ? ksys_write+0x22a/0x250 [ 2420.273971][T31032] ? __pfx_ksys_write+0x10/0x10 [ 2420.274001][T31032] __x64_sys_bpf+0x7c/0x90 [ 2420.274026][T31032] do_syscall_64+0xfa/0xfa0 [ 2420.274049][T31032] ? lockdep_hardirqs_on+0x9c/0x150 [ 2420.274072][T31032] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2420.274090][T31032] ? clear_bhb_loop+0x60/0xb0 [ 2420.274111][T31032] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2420.274128][T31032] RIP: 0033:0x7fee0438f6c9 [ 2420.274143][T31032] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2420.274158][T31032] RSP: 002b:00007fee05274038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2420.274178][T31032] RAX: ffffffffffffffda RBX: 00007fee045e5fa0 RCX: 00007fee0438f6c9 [ 2420.274192][T31032] RDX: 0000000000000094 RSI: 0000200000000300 RDI: 0000000000000005 [ 2420.274203][T31032] RBP: 00007fee05274090 R08: 0000000000000000 R09: 0000000000000000 [ 2420.274215][T31032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2420.274227][T31032] R13: 00007fee045e6038 R14: 00007fee045e5fa0 R15: 00007fff0a301538 [ 2420.274259][T31032] [ 2422.328600][T31061] FAULT_INJECTION: forcing a failure. [ 2422.328600][T31061] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2422.347545][T31061] CPU: 0 UID: 0 PID: 31061 Comm: syz.4.12921 Not tainted syzkaller #0 PREEMPT(full) [ 2422.347570][T31061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2422.347582][T31061] Call Trace: [ 2422.347590][T31061] [ 2422.347599][T31061] dump_stack_lvl+0x189/0x250 [ 2422.347627][T31061] ? __pfx____ratelimit+0x10/0x10 [ 2422.347652][T31061] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2422.347675][T31061] ? __pfx__printk+0x10/0x10 [ 2422.347695][T31061] ? __might_fault+0xb0/0x130 [ 2422.347730][T31061] should_fail_ex+0x414/0x560 [ 2422.347768][T31061] _copy_from_user+0x2d/0xb0 [ 2422.347792][T31061] ___sys_sendmsg+0x158/0x2a0 [ 2422.347814][T31061] ? __pfx____sys_sendmsg+0x10/0x10 [ 2422.347872][T31061] ? __fget_files+0x2a/0x420 [ 2422.347890][T31061] ? __fget_files+0x3a0/0x420 [ 2422.347919][T31061] __x64_sys_sendmsg+0x19b/0x260 [ 2422.347942][T31061] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2422.347972][T31061] ? __pfx_ksys_write+0x10/0x10 [ 2422.348000][T31061] ? do_syscall_64+0xbe/0xfa0 [ 2422.348028][T31061] do_syscall_64+0xfa/0xfa0 [ 2422.348050][T31061] ? lockdep_hardirqs_on+0x9c/0x150 [ 2422.348074][T31061] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2422.348092][T31061] ? clear_bhb_loop+0x60/0xb0 [ 2422.348115][T31061] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2422.348132][T31061] RIP: 0033:0x7f9ec8f8f6c9 [ 2422.348149][T31061] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2422.348164][T31061] RSP: 002b:00007f9ec9efd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2422.348184][T31061] RAX: ffffffffffffffda RBX: 00007f9ec91e5fa0 RCX: 00007f9ec8f8f6c9 [ 2422.348198][T31061] RDX: 0000000020000884 RSI: 0000200000000000 RDI: 0000000000000003 [ 2422.348210][T31061] RBP: 00007f9ec9efd090 R08: 0000000000000000 R09: 0000000000000000 [ 2422.348222][T31061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2422.348233][T31061] R13: 00007f9ec91e6038 R14: 00007f9ec91e5fa0 R15: 00007ffc86ccc068 [ 2422.348266][T31061] [ 2422.587554][T31063] tipc: Enabling of bearer rejected, failed to enable media [ 2423.078619][T31100] syzkaller0: entered promiscuous mode [ 2423.084487][T31100] syzkaller0: entered allmulticast mode [ 2423.363461][T31108] __nla_validate_parse: 3 callbacks suppressed [ 2423.363478][T31108] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12937'. [ 2423.698700][T31126] netlink: 20 bytes leftover after parsing attributes in process `syz.0.12943'. [ 2423.858992][T31141] netlink: 44 bytes leftover after parsing attributes in process `syz.0.12948'. [ 2423.925894][T31150] FAULT_INJECTION: forcing a failure. [ 2423.925894][T31150] name failslab, interval 1, probability 0, space 0, times 0 [ 2423.985015][T31150] CPU: 0 UID: 0 PID: 31150 Comm: syz.2.12952 Not tainted syzkaller #0 PREEMPT(full) [ 2423.985039][T31150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2423.985050][T31150] Call Trace: [ 2423.985058][T31150] [ 2423.985066][T31150] dump_stack_lvl+0x189/0x250 [ 2423.985094][T31150] ? __pfx____ratelimit+0x10/0x10 [ 2423.985119][T31150] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2423.985142][T31150] ? __pfx__printk+0x10/0x10 [ 2423.985164][T31150] ? __pfx___might_resched+0x10/0x10 [ 2423.985184][T31150] ? fs_reclaim_acquire+0x7d/0x100 [ 2423.985214][T31150] should_fail_ex+0x414/0x560 [ 2423.985245][T31150] should_failslab+0xa8/0x100 [ 2423.985266][T31150] kmem_cache_alloc_noprof+0x74/0x6e0 [ 2423.985290][T31150] ? skb_clone+0x212/0x3a0 [ 2423.985316][T31150] skb_clone+0x212/0x3a0 [ 2423.985334][T31150] ? nfnetlink_rcv+0x4ba/0x2590 [ 2423.985362][T31150] nfnetlink_rcv+0x4ec/0x2590 [ 2423.985387][T31150] ? __dev_queue_xmit+0x284/0x3740 [ 2423.985409][T31150] ? __dev_queue_xmit+0x1bfb/0x3740 [ 2423.985445][T31150] ? __dev_queue_xmit+0x284/0x3740 [ 2423.985477][T31150] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 2423.985520][T31150] ? ref_tracker_free+0x63a/0x7d0 [ 2423.985538][T31150] ? __asan_memcpy+0x40/0x70 [ 2423.985559][T31150] ? __pfx_ref_tracker_free+0x10/0x10 [ 2423.985592][T31150] ? skb_clone+0x246/0x3a0 [ 2423.985616][T31150] ? __netlink_deliver_tap+0x807/0x850 [ 2423.985641][T31150] ? netlink_deliver_tap+0x2e/0x1b0 [ 2423.985678][T31150] netlink_unicast+0x82f/0x9e0 [ 2423.985711][T31150] ? __pfx_netlink_unicast+0x10/0x10 [ 2423.985739][T31150] ? netlink_sendmsg+0x642/0xb30 [ 2423.985756][T31150] ? skb_put+0x11b/0x210 [ 2423.985777][T31150] netlink_sendmsg+0x805/0xb30 [ 2423.985806][T31150] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2423.985830][T31150] ? aa_sock_msg_perm+0xf1/0x1d0 [ 2423.985857][T31150] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2423.985873][T31150] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2423.985893][T31150] __sock_sendmsg+0x21c/0x270 [ 2423.985919][T31150] ____sys_sendmsg+0x505/0x830 [ 2423.985943][T31150] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2423.985976][T31150] ? import_iovec+0x74/0xa0 [ 2423.986002][T31150] ___sys_sendmsg+0x21f/0x2a0 [ 2423.986024][T31150] ? __pfx____sys_sendmsg+0x10/0x10 [ 2423.986082][T31150] ? __fget_files+0x2a/0x420 [ 2423.986099][T31150] ? __fget_files+0x3a0/0x420 [ 2423.986126][T31150] __x64_sys_sendmsg+0x19b/0x260 [ 2423.986149][T31150] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2423.986177][T31150] ? __pfx_ksys_write+0x10/0x10 [ 2423.986205][T31150] ? do_syscall_64+0xbe/0xfa0 [ 2423.986232][T31150] do_syscall_64+0xfa/0xfa0 [ 2423.986253][T31150] ? lockdep_hardirqs_on+0x9c/0x150 [ 2423.986277][T31150] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2423.986295][T31150] ? clear_bhb_loop+0x60/0xb0 [ 2423.986317][T31150] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2423.986334][T31150] RIP: 0033:0x7f89a6d8f6c9 [ 2423.986351][T31150] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2423.986366][T31150] RSP: 002b:00007f89a7c3e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2423.986386][T31150] RAX: ffffffffffffffda RBX: 00007f89a6fe5fa0 RCX: 00007f89a6d8f6c9 [ 2423.986400][T31150] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 2423.986412][T31150] RBP: 00007f89a7c3e090 R08: 0000000000000000 R09: 0000000000000000 [ 2423.986422][T31150] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2423.986432][T31150] R13: 00007f89a6fe6038 R14: 00007f89a6fe5fa0 R15: 00007fff0d808b58 [ 2423.986462][T31150] [ 2424.392036][T31161] tipc: Enabled bearer , priority 0 [ 2424.399654][T31161] syzkaller0: entered promiscuous mode [ 2424.405308][T31161] syzkaller0: entered allmulticast mode [ 2424.430493][T31161] tipc: Resetting bearer [ 2424.441615][T31159] tipc: Resetting bearer [ 2424.469750][T31159] tipc: Disabling bearer [ 2424.496399][T31165] FAULT_INJECTION: forcing a failure. [ 2424.496399][T31165] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2424.509872][T31165] CPU: 0 UID: 0 PID: 31165 Comm: syz.2.12956 Not tainted syzkaller #0 PREEMPT(full) [ 2424.509896][T31165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2424.509908][T31165] Call Trace: [ 2424.509915][T31165] [ 2424.509924][T31165] dump_stack_lvl+0x189/0x250 [ 2424.509952][T31165] ? __pfx____ratelimit+0x10/0x10 [ 2424.509976][T31165] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2424.510000][T31165] ? __pfx__printk+0x10/0x10 [ 2424.510019][T31165] ? __might_fault+0xb0/0x130 [ 2424.510054][T31165] should_fail_ex+0x414/0x560 [ 2424.510084][T31165] _copy_from_user+0x2d/0xb0 [ 2424.510107][T31165] __sys_bpf+0x1e3/0x860 [ 2424.510126][T31165] ? __pfx___sys_bpf+0x10/0x10 [ 2424.510159][T31165] ? ksys_write+0x22a/0x250 [ 2424.510184][T31165] ? __pfx_ksys_write+0x10/0x10 [ 2424.510213][T31165] __x64_sys_bpf+0x7c/0x90 [ 2424.510239][T31165] do_syscall_64+0xfa/0xfa0 [ 2424.510262][T31165] ? lockdep_hardirqs_on+0x9c/0x150 [ 2424.510286][T31165] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2424.510304][T31165] ? clear_bhb_loop+0x60/0xb0 [ 2424.510326][T31165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2424.510343][T31165] RIP: 0033:0x7f89a6d8f6c9 [ 2424.510359][T31165] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2424.510375][T31165] RSP: 002b:00007f89a7c3e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2424.510395][T31165] RAX: ffffffffffffffda RBX: 00007f89a6fe5fa0 RCX: 00007f89a6d8f6c9 [ 2424.510409][T31165] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 0000000000000000 [ 2424.510420][T31165] RBP: 00007f89a7c3e090 R08: 0000000000000000 R09: 0000000000000000 [ 2424.510432][T31165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2424.510443][T31165] R13: 00007f89a6fe6038 R14: 00007f89a6fe5fa0 R15: 00007fff0d808b58 [ 2424.510475][T31165] [ 2424.816075][T31171] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12958'. [ 2424.850458][T31175] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12960'. [ 2424.926125][T31179] tipc: Enabled bearer , priority 0 [ 2424.968934][T31179] netlink: 2 bytes leftover after parsing attributes in process `syz.1.12963'. [ 2424.996519][T31179] tipc: Resetting bearer [ 2425.092826][T31177] tipc: Disabling bearer [ 2425.227749][T31201] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12969'. [ 2425.433301][T31206] netlink: 176 bytes leftover after parsing attributes in process `syz.3.12972'. [ 2428.200198][T31210] FAULT_INJECTION: forcing a failure. [ 2428.200198][T31210] name failslab, interval 1, probability 0, space 0, times 0 [ 2428.213002][T31210] CPU: 0 UID: 0 PID: 31210 Comm: syz.4.12974 Not tainted syzkaller #0 PREEMPT(full) [ 2428.213025][T31210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2428.213037][T31210] Call Trace: [ 2428.213046][T31210] [ 2428.213054][T31210] dump_stack_lvl+0x189/0x250 [ 2428.213082][T31210] ? __pfx____ratelimit+0x10/0x10 [ 2428.213107][T31210] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2428.213129][T31210] ? __pfx__printk+0x10/0x10 [ 2428.213154][T31210] ? __pfx___might_resched+0x10/0x10 [ 2428.213179][T31210] should_fail_ex+0x414/0x560 [ 2428.213211][T31210] should_failslab+0xa8/0x100 [ 2428.213231][T31210] __kmalloc_noprof+0xcb/0x7f0 [ 2428.213258][T31210] ? nft_set_elem_expr_alloc+0x16f/0x590 [ 2428.213289][T31210] nft_set_elem_expr_alloc+0x16f/0x590 [ 2428.213317][T31210] ? __pfx_nft_set_elem_expr_alloc+0x10/0x10 [ 2428.213358][T31210] ? nla_strcmp+0x106/0x140 [ 2428.213374][T31210] ? nla_strcmp+0x106/0x140 [ 2428.213411][T31210] nf_tables_newsetelem+0x1688/0x4330 [ 2428.213478][T31210] ? __pfx_nf_tables_newsetelem+0x10/0x10 [ 2428.213499][T31210] ? __lock_acquire+0xab9/0xd20 [ 2428.213539][T31210] ? nla_validate_array+0xfc/0x260 [ 2428.213589][T31210] ? __pfx___nla_validate_parse+0x10/0x10 [ 2428.213613][T31210] ? __lock_acquire+0xab9/0xd20 [ 2428.213642][T31210] ? nfnl_pernet+0x23/0x240 [ 2428.213676][T31210] ? __nla_parse+0x40/0x60 [ 2428.213700][T31210] nfnetlink_rcv+0x11d9/0x2590 [ 2428.213761][T31210] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 2428.213801][T31210] ? ref_tracker_free+0x63a/0x7d0 [ 2428.213850][T31210] ? __netlink_deliver_tap+0x807/0x850 [ 2428.213869][T31210] ? netlink_deliver_tap+0x2e/0x1b0 [ 2428.213907][T31210] netlink_unicast+0x82f/0x9e0 [ 2428.213941][T31210] ? __pfx_netlink_unicast+0x10/0x10 [ 2428.213969][T31210] ? netlink_sendmsg+0x642/0xb30 [ 2428.213985][T31210] ? skb_put+0x11b/0x210 [ 2428.214007][T31210] netlink_sendmsg+0x805/0xb30 [ 2428.214036][T31210] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2428.214059][T31210] ? aa_sock_msg_perm+0xf1/0x1d0 [ 2428.214085][T31210] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2428.214103][T31210] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2428.214123][T31210] __sock_sendmsg+0x21c/0x270 [ 2428.214149][T31210] ____sys_sendmsg+0x505/0x830 [ 2428.214176][T31210] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2428.214206][T31210] ? import_iovec+0x74/0xa0 [ 2428.214232][T31210] ___sys_sendmsg+0x21f/0x2a0 [ 2428.214254][T31210] ? __pfx____sys_sendmsg+0x10/0x10 [ 2428.214314][T31210] ? __fget_files+0x2a/0x420 [ 2428.214331][T31210] ? __fget_files+0x3a0/0x420 [ 2428.214360][T31210] __x64_sys_sendmsg+0x19b/0x260 [ 2428.214390][T31210] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2428.214421][T31210] ? __pfx_ksys_write+0x10/0x10 [ 2428.214449][T31210] ? do_syscall_64+0xbe/0xfa0 [ 2428.214478][T31210] do_syscall_64+0xfa/0xfa0 [ 2428.214500][T31210] ? lockdep_hardirqs_on+0x9c/0x150 [ 2428.214524][T31210] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2428.214542][T31210] ? clear_bhb_loop+0x60/0xb0 [ 2428.214565][T31210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2428.214582][T31210] RIP: 0033:0x7f9ec8f8f6c9 [ 2428.214599][T31210] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2428.214615][T31210] RSP: 002b:00007f9ec9efd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2428.214635][T31210] RAX: ffffffffffffffda RBX: 00007f9ec91e5fa0 RCX: 00007f9ec8f8f6c9 [ 2428.214649][T31210] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 2428.214662][T31210] RBP: 00007f9ec9efd090 R08: 0000000000000000 R09: 0000000000000000 [ 2428.214673][T31210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2428.214685][T31210] R13: 00007f9ec91e6038 R14: 00007f9ec91e5fa0 R15: 00007ffc86ccc068 [ 2428.214719][T31210] [ 2428.924381][T31232] tipc: Enabled bearer , priority 0 [ 2428.958167][T31241] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12984'. [ 2428.970650][T31232] tipc: Resetting bearer [ 2429.109249][T31229] tipc: Disabling bearer [ 2429.144064][T31247] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 2429.267163][T31258] syzkaller1: entered promiscuous mode [ 2429.284859][T31258] syzkaller1: entered allmulticast mode [ 2429.328858][T31268] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12992'. [ 2429.633797][T31273] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12994'. [ 2429.642835][T31273] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12994'. [ 2429.648109][T31292] FAULT_INJECTION: forcing a failure. [ 2429.648109][T31292] name failslab, interval 1, probability 0, space 0, times 0 [ 2429.694784][T31292] CPU: 1 UID: 0 PID: 31292 Comm: syz.4.12998 Not tainted syzkaller #0 PREEMPT(full) [ 2429.694806][T31292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2429.694818][T31292] Call Trace: [ 2429.694826][T31292] [ 2429.694834][T31292] dump_stack_lvl+0x189/0x250 [ 2429.694861][T31292] ? __pfx____ratelimit+0x10/0x10 [ 2429.694885][T31292] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2429.694908][T31292] ? __pfx__printk+0x10/0x10 [ 2429.694929][T31292] ? __pfx___might_resched+0x10/0x10 [ 2429.694955][T31292] ? fs_reclaim_acquire+0x7d/0x100 [ 2429.694985][T31292] should_fail_ex+0x414/0x560 [ 2429.695015][T31292] should_failslab+0xa8/0x100 [ 2429.695036][T31292] kmem_cache_alloc_noprof+0x74/0x6e0 [ 2429.695060][T31292] ? __kernfs_new_node+0xd7/0x7e0 [ 2429.695088][T31292] __kernfs_new_node+0xd7/0x7e0 [ 2429.695109][T31292] ? __lock_acquire+0xab9/0xd20 [ 2429.695134][T31292] ? __pfx___kernfs_new_node+0x10/0x10 [ 2429.695157][T31292] ? kernfs_root+0x1c/0x230 [ 2429.695184][T31292] ? kernfs_root+0x1c/0x230 [ 2429.695204][T31292] ? kernfs_root+0x1c/0x230 [ 2429.695222][T31292] ? kernfs_root+0x1c/0x230 [ 2429.695247][T31292] kernfs_new_node+0x102/0x210 [ 2429.695274][T31292] __kernfs_create_file+0x4b/0x2e0 [ 2429.695295][T31292] sysfs_add_file_mode_ns+0x238/0x300 [ 2429.695323][T31292] internal_create_group+0x66d/0x1110 [ 2429.695362][T31292] ? __pfx_internal_create_group+0x10/0x10 [ 2429.695396][T31292] sysfs_create_groups+0x59/0x120 [ 2429.695419][T31292] device_add_attrs+0x1c4/0x5a0 [ 2429.695445][T31292] ? __pfx_device_add_attrs+0x10/0x10 [ 2429.695463][T31292] ? kobject_put+0x43f/0x480 [ 2429.695487][T31292] ? device_add_class_symlinks+0x21f/0x240 [ 2429.695510][T31292] device_add+0x496/0xb50 [ 2429.695529][T31292] ? device_initialize+0x24b/0x440 [ 2429.695553][T31292] wakeup_source_sysfs_add+0x1d3/0x2c0 [ 2429.695579][T31292] wakeup_source_register+0x18a/0x380 [ 2429.695604][T31292] ep_modify+0x2c9/0xb20 [ 2429.695627][T31292] ? __pfx_ep_modify+0x10/0x10 [ 2429.695650][T31292] ? apparmor_capable+0x137/0x1b0 [ 2429.695671][T31292] ? bpf_lsm_capable+0x9/0x20 [ 2429.695701][T31292] do_epoll_ctl+0x6b5/0xe80 [ 2429.695728][T31292] __x64_sys_epoll_ctl+0x163/0x1a0 [ 2429.695749][T31292] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 2429.695772][T31292] ? do_syscall_64+0xbe/0xfa0 [ 2429.695800][T31292] do_syscall_64+0xfa/0xfa0 [ 2429.695821][T31292] ? lockdep_hardirqs_on+0x9c/0x150 [ 2429.695845][T31292] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2429.695863][T31292] ? clear_bhb_loop+0x60/0xb0 [ 2429.695885][T31292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2429.695902][T31292] RIP: 0033:0x7f9ec8f8f6c9 [ 2429.695918][T31292] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2429.695940][T31292] RSP: 002b:00007f9ec9edc038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 2429.695960][T31292] RAX: ffffffffffffffda RBX: 00007f9ec91e6090 RCX: 00007f9ec8f8f6c9 [ 2429.695972][T31292] RDX: 0000000000000005 RSI: 0000000000000003 RDI: 0000000000000003 [ 2429.695982][T31292] RBP: 00007f9ec9edc090 R08: 0000000000000000 R09: 0000000000000000 [ 2429.695994][T31292] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000002 [ 2429.696007][T31292] R13: 00007f9ec91e6128 R14: 00007f9ec91e6090 R15: 00007ffc86ccc068 [ 2429.696040][T31292] [ 2430.161403][T31304] pim6reg99999999: entered allmulticast mode [ 2430.733826][T26931] Bluetooth: hci4: command 0x0406 tx timeout [ 2430.983511][T31367] tipc: Enabling of bearer rejected, already enabled [ 2430.997989][T31364] netlink: 2 bytes leftover after parsing attributes in process `syz.3.13023'. [ 2431.178598][T31374] netlink: 44 bytes leftover after parsing attributes in process `syz.1.13027'. [ 2431.270852][T31381] ip6tnl3: entered promiscuous mode [ 2431.367360][T31384] tipc: Enabled bearer , priority 0 [ 2431.369353][T31387] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13032'. [ 2431.410183][T31384] syzkaller0: entered promiscuous mode [ 2431.415822][T31384] syzkaller0: entered allmulticast mode [ 2431.515608][T31384] tipc: Resetting bearer [ 2431.564357][T31382] tipc: Resetting bearer [ 2431.605096][T31382] tipc: Disabling bearer [ 2431.681997][T31405] tipc: Enabled bearer , priority 0 [ 2431.707977][T31405] tipc: Resetting bearer [ 2431.750026][T31397] tipc: Disabling bearer [ 2431.763712][T31410] netlink: 'syz.3.13040': attribute type 3 has an invalid length. [ 2431.771667][T31410] netlink: 666 bytes leftover after parsing attributes in process `syz.3.13040'. [ 2431.832030][T31416] macsec0: entered promiscuous mode [ 2431.853803][T31416] macsec0: entered allmulticast mode [ 2431.864943][T31417] netlink: 44 bytes leftover after parsing attributes in process `syz.4.13042'. [ 2431.937379][T31423] : entered promiscuous mode [ 2431.971441][T31422] wg1 speed is unknown, defaulting to 1000 [ 2431.980138][T31422] wg1 speed is unknown, defaulting to 1000 [ 2432.419785][T31452] netlink: 176 bytes leftover after parsing attributes in process `syz.3.13052'. [ 2432.836928][T31460] x_tables: duplicate underflow at hook 1 [ 2433.290321][T31488] netlink: 'syz.0.13065': attribute type 1 has an invalid length. [ 2433.409707][T31488] bond14: (slave bridge11): making interface the new active one [ 2433.420434][T31488] bond14: (slave bridge11): Enslaving as an active interface with an up link [ 2434.163068][T31538] FAULT_INJECTION: forcing a failure. [ 2434.163068][T31538] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2434.182043][T31538] CPU: 1 UID: 0 PID: 31538 Comm: syz.1.13082 Not tainted syzkaller #0 PREEMPT(full) [ 2434.182067][T31538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2434.182078][T31538] Call Trace: [ 2434.182087][T31538] [ 2434.182095][T31538] dump_stack_lvl+0x189/0x250 [ 2434.182123][T31538] ? __pfx____ratelimit+0x10/0x10 [ 2434.182148][T31538] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2434.182171][T31538] ? __pfx__printk+0x10/0x10 [ 2434.182191][T31538] ? __might_fault+0xb0/0x130 [ 2434.182226][T31538] should_fail_ex+0x414/0x560 [ 2434.182256][T31538] _copy_from_iter+0x1de/0x1790 [ 2434.182284][T31538] ? rcu_is_watching+0x15/0xb0 [ 2434.182308][T31538] ? kmalloc_reserve+0xbd/0x290 [ 2434.182327][T31538] ? __pfx__copy_from_iter+0x10/0x10 [ 2434.182349][T31538] ? __build_skb_around+0x262/0x3f0 [ 2434.182371][T31538] ? netlink_sendmsg+0x642/0xb30 [ 2434.182389][T31538] ? skb_put+0x11b/0x210 [ 2434.182411][T31538] netlink_sendmsg+0x6b2/0xb30 [ 2434.182439][T31538] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2434.182462][T31538] ? aa_sock_msg_perm+0xf1/0x1d0 [ 2434.182489][T31538] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2434.182507][T31538] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2434.182527][T31538] __sock_sendmsg+0x21c/0x270 [ 2434.182553][T31538] ____sys_sendmsg+0x505/0x830 [ 2434.182578][T31538] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2434.182606][T31538] ? import_iovec+0x74/0xa0 [ 2434.182632][T31538] ___sys_sendmsg+0x21f/0x2a0 [ 2434.182655][T31538] ? __pfx____sys_sendmsg+0x10/0x10 [ 2434.182711][T31538] ? __fget_files+0x2a/0x420 [ 2434.182727][T31538] ? __fget_files+0x3a0/0x420 [ 2434.182755][T31538] __x64_sys_sendmsg+0x19b/0x260 [ 2434.182777][T31538] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2434.182808][T31538] ? __pfx_ksys_write+0x10/0x10 [ 2434.182842][T31538] ? do_syscall_64+0xbe/0xfa0 [ 2434.182870][T31538] do_syscall_64+0xfa/0xfa0 [ 2434.182892][T31538] ? lockdep_hardirqs_on+0x9c/0x150 [ 2434.182916][T31538] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2434.182934][T31538] ? clear_bhb_loop+0x60/0xb0 [ 2434.182956][T31538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2434.182973][T31538] RIP: 0033:0x7f45abf8f6c9 [ 2434.182990][T31538] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2434.183006][T31538] RSP: 002b:00007f45acd59038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2434.183026][T31538] RAX: ffffffffffffffda RBX: 00007f45ac1e5fa0 RCX: 00007f45abf8f6c9 [ 2434.183040][T31538] RDX: 0000000000000080 RSI: 0000200000000140 RDI: 0000000000000003 [ 2434.183056][T31538] RBP: 00007f45acd59090 R08: 0000000000000000 R09: 0000000000000000 [ 2434.183068][T31538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2434.183079][T31538] R13: 00007f45ac1e6038 R14: 00007f45ac1e5fa0 R15: 00007fffa4aeca78 [ 2434.183111][T31538] [ 2434.635201][T31547] sctp: [Deprecated]: syz.0.13086 (pid 31547) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2434.635201][T31547] Use struct sctp_sack_info instead [ 2434.688715][T31548] sctp: [Deprecated]: syz.1.13085 (pid 31548) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2434.688715][T31548] Use struct sctp_sack_info instead [ 2434.840729][T31556] sctp: [Deprecated]: syz.2.13089 (pid 31556) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2434.840729][T31556] Use struct sctp_sack_info instead [ 2434.858301][T31557] __nla_validate_parse: 3 callbacks suppressed [ 2434.858316][T31557] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13090'. [ 2435.412498][T31584] wg1: entered promiscuous mode [ 2435.423355][T31584] wg1: entered allmulticast mode [ 2435.502059][T31589] pim6reg1: tun_chr_ioctl cmd 1074025677 [ 2435.510703][T31589] pim6reg1: linktype set to 805 [ 2435.636063][T31598] pim6reg: left allmulticast mode [ 2435.929917][T31608] tipc: Enabling of bearer rejected, already enabled [ 2436.221836][T31626] netlink: 48 bytes leftover after parsing attributes in process `syz.0.13115'. [ 2436.232115][T31617] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13112'. [ 2436.642270][T31644] netlink: 20 bytes leftover after parsing attributes in process `syz.1.13123'. [ 2436.662954][T31646] netlink: 'syz.0.13121': attribute type 10 has an invalid length. [ 2436.690644][T31646] team0: Port device dummy0 added [ 2436.697110][T31646] netlink: 'syz.0.13121': attribute type 10 has an invalid length. [ 2436.708330][T31646] team0: Port device dummy0 removed [ 2436.860473][T31656] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13128'. [ 2436.890397][T31653] netlink: 'syz.1.13125': attribute type 2 has an invalid length. [ 2436.898010][T31656] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13128'. [ 2437.006481][T31661] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13130'. [ 2437.234978][T31678] FAULT_INJECTION: forcing a failure. [ 2437.234978][T31678] name failslab, interval 1, probability 0, space 0, times 0 [ 2437.263970][T31678] CPU: 1 UID: 0 PID: 31678 Comm: syz.3.13137 Not tainted syzkaller #0 PREEMPT(full) [ 2437.263994][T31678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2437.264006][T31678] Call Trace: [ 2437.264014][T31678] [ 2437.264023][T31678] dump_stack_lvl+0x189/0x250 [ 2437.264050][T31678] ? __pfx____ratelimit+0x10/0x10 [ 2437.264074][T31678] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2437.264097][T31678] ? __pfx__printk+0x10/0x10 [ 2437.264121][T31678] ? __pfx___might_resched+0x10/0x10 [ 2437.264140][T31678] ? fs_reclaim_acquire+0x7d/0x100 [ 2437.264170][T31678] should_fail_ex+0x414/0x560 [ 2437.264201][T31678] should_failslab+0xa8/0x100 [ 2437.264221][T31678] kmem_cache_alloc_node_noprof+0x77/0x710 [ 2437.264245][T31678] ? __alloc_skb+0x112/0x2d0 [ 2437.264262][T31678] ? netlink_autobind+0xdb/0x300 [ 2437.264286][T31678] __alloc_skb+0x112/0x2d0 [ 2437.264308][T31678] netlink_sendmsg+0x5c6/0xb30 [ 2437.264336][T31678] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2437.264365][T31678] ? aa_sock_msg_perm+0xf1/0x1d0 [ 2437.264391][T31678] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2437.264409][T31678] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2437.264429][T31678] __sock_sendmsg+0x21c/0x270 [ 2437.264456][T31678] sock_write_iter+0x279/0x360 [ 2437.264481][T31678] ? __pfx_sock_write_iter+0x10/0x10 [ 2437.264526][T31678] do_iter_readv_writev+0x623/0x8c0 [ 2437.264558][T31678] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 2437.264580][T31678] ? common_file_perm+0x1b5/0x230 [ 2437.264608][T31678] ? bpf_lsm_file_permission+0x9/0x20 [ 2437.264626][T31678] ? security_file_permission+0x75/0x290 [ 2437.264648][T31678] ? rw_verify_area+0x255/0x4d0 [ 2437.264675][T31678] vfs_writev+0x31a/0x960 [ 2437.264692][T31678] ? vfs_write+0x956/0xb30 [ 2437.264722][T31678] ? __pfx_vfs_writev+0x10/0x10 [ 2437.264738][T31678] ? vfs_write+0x956/0xb30 [ 2437.264772][T31678] ? do_sys_openat2+0x154/0x1c0 [ 2437.264790][T31678] ? kmem_cache_free+0x19b/0x690 [ 2437.264821][T31678] ? do_sys_openat2+0x154/0x1c0 [ 2437.264850][T31678] do_writev+0x14d/0x2d0 [ 2437.264871][T31678] ? __pfx_do_writev+0x10/0x10 [ 2437.264894][T31678] ? do_syscall_64+0xbe/0xfa0 [ 2437.264922][T31678] do_syscall_64+0xfa/0xfa0 [ 2437.264944][T31678] ? lockdep_hardirqs_on+0x9c/0x150 [ 2437.264968][T31678] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2437.264986][T31678] ? clear_bhb_loop+0x60/0xb0 [ 2437.265008][T31678] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2437.265025][T31678] RIP: 0033:0x7fee0438f6c9 [ 2437.265040][T31678] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2437.265054][T31678] RSP: 002b:00007fee05274038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 2437.265072][T31678] RAX: ffffffffffffffda RBX: 00007fee045e5fa0 RCX: 00007fee0438f6c9 [ 2437.265084][T31678] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 0000000000000004 [ 2437.265095][T31678] RBP: 00007fee05274090 R08: 0000000000000000 R09: 0000000000000000 [ 2437.265106][T31678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2437.265117][T31678] R13: 00007fee045e6038 R14: 00007fee045e5fa0 R15: 00007fff0a301538 [ 2437.265149][T31678] [ 2437.665961][T31687] tipc: Enabling of bearer rejected, failed to enable media [ 2438.111735][T31711] tipc: Enabled bearer , priority 0 [ 2438.144034][T31711] tipc: Resetting bearer [ 2438.164363][T31710] tipc: Disabling bearer [ 2438.292515][T31718] x_tables: duplicate underflow at hook 1 [ 2438.316000][T31719] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 2438.395140][T31719] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 2438.461723][T31719] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 2438.544740][T31719] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 2438.642675][ T6818] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 2438.662547][ T68] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 2438.702131][ T68] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 2438.732674][ T68] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 2438.837020][T31747] netlink: 176 bytes leftover after parsing attributes in process `syz.3.13159'. [ 2438.860552][T31748] netlink: 176 bytes leftover after parsing attributes in process `syz.2.13158'. [ 2439.702807][T26931] Bluetooth: hci4: command 0x0406 tx timeout [ 2439.705807][T31772] FAULT_INJECTION: forcing a failure. [ 2439.705807][T31772] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2439.722068][T31772] CPU: 0 UID: 0 PID: 31772 Comm: syz.2.13169 Not tainted syzkaller #0 PREEMPT(full) [ 2439.722091][T31772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2439.722103][T31772] Call Trace: [ 2439.722111][T31772] [ 2439.722120][T31772] dump_stack_lvl+0x189/0x250 [ 2439.722147][T31772] ? __pfx____ratelimit+0x10/0x10 [ 2439.722179][T31772] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2439.722202][T31772] ? __pfx__printk+0x10/0x10 [ 2439.722221][T31772] ? __might_fault+0xb0/0x130 [ 2439.722257][T31772] should_fail_ex+0x414/0x560 [ 2439.722288][T31772] _copy_from_user+0x2d/0xb0 [ 2439.722310][T31772] __sys_bpf+0x1e3/0x860 [ 2439.722331][T31772] ? __pfx___sys_bpf+0x10/0x10 [ 2439.722365][T31772] ? ksys_write+0x22a/0x250 [ 2439.722392][T31772] ? __pfx_ksys_write+0x10/0x10 [ 2439.722421][T31772] __x64_sys_bpf+0x7c/0x90 [ 2439.722446][T31772] do_syscall_64+0xfa/0xfa0 [ 2439.722469][T31772] ? lockdep_hardirqs_on+0x9c/0x150 [ 2439.722493][T31772] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2439.722511][T31772] ? clear_bhb_loop+0x60/0xb0 [ 2439.722533][T31772] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2439.722550][T31772] RIP: 0033:0x7f89a6d8f6c9 [ 2439.722566][T31772] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2439.722582][T31772] RSP: 002b:00007f89a7c3e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2439.722602][T31772] RAX: ffffffffffffffda RBX: 00007f89a6fe5fa0 RCX: 00007f89a6d8f6c9 [ 2439.722616][T31772] RDX: 0000000000000094 RSI: 0000200000000180 RDI: 0000000000000005 [ 2439.722628][T31772] RBP: 00007f89a7c3e090 R08: 0000000000000000 R09: 0000000000000000 [ 2439.722641][T31772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2439.722652][T31772] R13: 00007f89a6fe6038 R14: 00007f89a6fe5fa0 R15: 00007fff0d808b58 [ 2439.722685][T31772] [ 2439.976898][T31776] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13171'. [ 2440.175087][T31781] wg1 speed is unknown, defaulting to 1000 [ 2440.182550][T31781] wg1 speed is unknown, defaulting to 1000 [ 2440.320589][T31804] FAULT_INJECTION: forcing a failure. [ 2440.320589][T31804] name failslab, interval 1, probability 0, space 0, times 0 [ 2440.337114][T31804] CPU: 1 UID: 0 PID: 31804 Comm: syz.0.13178 Not tainted syzkaller #0 PREEMPT(full) [ 2440.337138][T31804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2440.337148][T31804] Call Trace: [ 2440.337156][T31804] [ 2440.337164][T31804] dump_stack_lvl+0x189/0x250 [ 2440.337192][T31804] ? __pfx____ratelimit+0x10/0x10 [ 2440.337216][T31804] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2440.337238][T31804] ? __pfx__printk+0x10/0x10 [ 2440.337261][T31804] ? __pfx___might_resched+0x10/0x10 [ 2440.337280][T31804] ? fs_reclaim_acquire+0x7d/0x100 [ 2440.337308][T31804] should_fail_ex+0x414/0x560 [ 2440.337339][T31804] should_failslab+0xa8/0x100 [ 2440.337366][T31804] kmem_cache_alloc_noprof+0x74/0x6e0 [ 2440.337389][T31804] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 2440.337412][T31804] ? getname_flags+0xb8/0x540 [ 2440.337429][T31804] ? __pfx_vfs_write+0x10/0x10 [ 2440.337455][T31804] getname_flags+0xb8/0x540 [ 2440.337477][T31804] do_sys_openat2+0xbc/0x1c0 [ 2440.337499][T31804] ? __pfx_do_sys_openat2+0x10/0x10 [ 2440.337524][T31804] ? ksys_write+0x22a/0x250 [ 2440.337549][T31804] ? __pfx_ksys_write+0x10/0x10 [ 2440.337575][T31804] __x64_sys_openat+0x138/0x170 [ 2440.337600][T31804] do_syscall_64+0xfa/0xfa0 [ 2440.337623][T31804] ? lockdep_hardirqs_on+0x9c/0x150 [ 2440.337646][T31804] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2440.337664][T31804] ? clear_bhb_loop+0x60/0xb0 [ 2440.337685][T31804] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2440.337703][T31804] RIP: 0033:0x7fef3b98f6c9 [ 2440.337719][T31804] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2440.337734][T31804] RSP: 002b:00007fef3c783038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2440.337754][T31804] RAX: ffffffffffffffda RBX: 00007fef3bbe5fa0 RCX: 00007fef3b98f6c9 [ 2440.337767][T31804] RDX: 0000000000200002 RSI: 0000200000000040 RDI: 0000000000000005 [ 2440.337779][T31804] RBP: 00007fef3c783090 R08: 0000000000000000 R09: 0000000000000000 [ 2440.337791][T31804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2440.337803][T31804] R13: 00007fef3bbe6038 R14: 00007fef3bbe5fa0 R15: 00007ffca3945af8 [ 2440.337835][T31804] [ 2440.789744][T31815] x_tables: duplicate underflow at hook 1 [ 2440.797947][T31817] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13185'. [ 2440.808856][T31817] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13185'. [ 2440.871527][T31818] FAULT_INJECTION: forcing a failure. [ 2440.871527][T31818] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2440.891626][T31818] CPU: 1 UID: 0 PID: 31818 Comm: syz.2.13184 Not tainted syzkaller #0 PREEMPT(full) [ 2440.891650][T31818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2440.891660][T31818] Call Trace: [ 2440.891668][T31818] [ 2440.891676][T31818] dump_stack_lvl+0x189/0x250 [ 2440.891703][T31818] ? __pfx____ratelimit+0x10/0x10 [ 2440.891727][T31818] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2440.891748][T31818] ? __pfx__printk+0x10/0x10 [ 2440.891767][T31818] ? __might_fault+0xb0/0x130 [ 2440.891802][T31818] should_fail_ex+0x414/0x560 [ 2440.891832][T31818] _copy_from_user+0x2d/0xb0 [ 2440.891855][T31818] __sys_bpf+0x1e3/0x860 [ 2440.891875][T31818] ? __pfx___sys_bpf+0x10/0x10 [ 2440.891908][T31818] ? ksys_write+0x22a/0x250 [ 2440.891933][T31818] ? __pfx_ksys_write+0x10/0x10 [ 2440.891961][T31818] __x64_sys_bpf+0x7c/0x90 [ 2440.891985][T31818] do_syscall_64+0xfa/0xfa0 [ 2440.892007][T31818] ? lockdep_hardirqs_on+0x9c/0x150 [ 2440.892032][T31818] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2440.892049][T31818] ? clear_bhb_loop+0x60/0xb0 [ 2440.892081][T31818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2440.892099][T31818] RIP: 0033:0x7f89a6d8f6c9 [ 2440.892115][T31818] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2440.892130][T31818] RSP: 002b:00007f89a7c3e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2440.892149][T31818] RAX: ffffffffffffffda RBX: 00007f89a6fe5fa0 RCX: 00007f89a6d8f6c9 [ 2440.892162][T31818] RDX: 0000000000000010 RSI: 0000200000000040 RDI: 0000000000000011 [ 2440.892173][T31818] RBP: 00007f89a7c3e090 R08: 0000000000000000 R09: 0000000000000000 [ 2440.892185][T31818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2440.892195][T31818] R13: 00007f89a6fe6038 R14: 00007f89a6fe5fa0 R15: 00007fff0d808b58 [ 2440.892227][T31818] [ 2441.140554][T31826] syzkaller0: left promiscuous mode [ 2441.164035][T31826] syzkaller0: left allmulticast mode [ 2441.186702][T31829] FAULT_INJECTION: forcing a failure. [ 2441.186702][T31829] name failslab, interval 1, probability 0, space 0, times 0 [ 2441.199474][T31829] CPU: 1 UID: 0 PID: 31829 Comm: syz.1.13191 Not tainted syzkaller #0 PREEMPT(full) [ 2441.199497][T31829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2441.199506][T31829] Call Trace: [ 2441.199514][T31829] [ 2441.199522][T31829] dump_stack_lvl+0x189/0x250 [ 2441.199548][T31829] ? __pfx____ratelimit+0x10/0x10 [ 2441.199572][T31829] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2441.199594][T31829] ? __pfx__printk+0x10/0x10 [ 2441.199619][T31829] ? __pfx___might_resched+0x10/0x10 [ 2441.199643][T31829] should_fail_ex+0x414/0x560 [ 2441.199672][T31829] should_failslab+0xa8/0x100 [ 2441.199692][T31829] __kmalloc_cache_noprof+0x6f/0x6f0 [ 2441.199715][T31829] ? nft_pernet+0x23/0x240 [ 2441.199736][T31829] ? __nft_trans_set_add+0x5e/0x710 [ 2441.199765][T31829] __nft_trans_set_add+0x5e/0x710 [ 2441.199795][T31829] nf_tables_newset+0x1647/0x2540 [ 2441.199832][T31829] ? __pfx_nf_tables_newset+0x10/0x10 [ 2441.199876][T31829] ? __nla_parse+0x40/0x60 [ 2441.199900][T31829] nfnetlink_rcv+0x11d9/0x2590 [ 2441.199961][T31829] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 2441.200039][T31829] ? netlink_deliver_tap+0x2e/0x1b0 [ 2441.200076][T31829] netlink_unicast+0x82f/0x9e0 [ 2441.200109][T31829] ? __pfx_netlink_unicast+0x10/0x10 [ 2441.200135][T31829] ? netlink_sendmsg+0x642/0xb30 [ 2441.200151][T31829] ? skb_put+0x11b/0x210 [ 2441.200174][T31829] netlink_sendmsg+0x805/0xb30 [ 2441.200203][T31829] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2441.200225][T31829] ? aa_sock_msg_perm+0xf1/0x1d0 [ 2441.200250][T31829] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2441.200268][T31829] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2441.200287][T31829] __sock_sendmsg+0x21c/0x270 [ 2441.200322][T31829] ____sys_sendmsg+0x505/0x830 [ 2441.200348][T31829] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2441.200378][T31829] ? import_iovec+0x74/0xa0 [ 2441.200404][T31829] ___sys_sendmsg+0x21f/0x2a0 [ 2441.200427][T31829] ? __pfx____sys_sendmsg+0x10/0x10 [ 2441.200484][T31829] ? __fget_files+0x2a/0x420 [ 2441.200500][T31829] ? __fget_files+0x3a0/0x420 [ 2441.200526][T31829] __x64_sys_sendmsg+0x19b/0x260 [ 2441.200547][T31829] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2441.200576][T31829] ? __pfx_ksys_write+0x10/0x10 [ 2441.200603][T31829] ? do_syscall_64+0xbe/0xfa0 [ 2441.200630][T31829] do_syscall_64+0xfa/0xfa0 [ 2441.200652][T31829] ? lockdep_hardirqs_on+0x9c/0x150 [ 2441.200675][T31829] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2441.200692][T31829] ? clear_bhb_loop+0x60/0xb0 [ 2441.200713][T31829] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2441.200728][T31829] RIP: 0033:0x7f45abf8f6c9 [ 2441.200745][T31829] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2441.200760][T31829] RSP: 002b:00007f45acd59038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2441.200780][T31829] RAX: ffffffffffffffda RBX: 00007f45ac1e5fa0 RCX: 00007f45abf8f6c9 [ 2441.200793][T31829] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 2441.200803][T31829] RBP: 00007f45acd59090 R08: 0000000000000000 R09: 0000000000000000 [ 2441.200815][T31829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2441.200826][T31829] R13: 00007f45ac1e6038 R14: 00007f45ac1e5fa0 R15: 00007fffa4aeca78 [ 2441.200858][T31829] [ 2441.637896][T31832] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13193'. [ 2441.673206][T31841] tipc: Enabling of bearer rejected, failed to enable media [ 2441.939330][T31854] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13197'. [ 2441.958402][T31854] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13197'. [ 2442.000077][T31858] x_tables: duplicate underflow at hook 1 [ 2442.085333][T31862] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13199'. [ 2442.118088][T31868] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvlan0, syncid = 4, id = 0 [ 2442.366245][T31879] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13207'. [ 2442.597617][T31899] x_tables: duplicate underflow at hook 1 [ 2442.837324][T31910] SET target dimension over the limit! [ 2442.902916][T31916] netlink: 224 bytes leftover after parsing attributes in process `syz.3.13215'. [ 2442.903073][T31917] FAULT_INJECTION: forcing a failure. [ 2442.903073][T31917] name failslab, interval 1, probability 0, space 0, times 0 [ 2442.925545][T31917] CPU: 1 UID: 0 PID: 31917 Comm: syz.2.13218 Not tainted syzkaller #0 PREEMPT(full) [ 2442.925569][T31917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2442.925580][T31917] Call Trace: [ 2442.925588][T31917] [ 2442.925596][T31917] dump_stack_lvl+0x189/0x250 [ 2442.925622][T31917] ? __pfx____ratelimit+0x10/0x10 [ 2442.925647][T31917] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2442.925670][T31917] ? __pfx__printk+0x10/0x10 [ 2442.925692][T31917] ? __pfx___might_resched+0x10/0x10 [ 2442.925711][T31917] ? fs_reclaim_acquire+0x7d/0x100 [ 2442.925740][T31917] should_fail_ex+0x414/0x560 [ 2442.925771][T31917] should_failslab+0xa8/0x100 [ 2442.925791][T31917] __kmalloc_cache_noprof+0x6f/0x6f0 [ 2442.925814][T31917] ? kasan_save_track+0x4f/0x80 [ 2442.925834][T31917] ? rtnl_newlink+0xfb/0x1c80 [ 2442.925849][T31917] ? __kasan_save_free_info+0x46/0x50 [ 2442.925868][T31917] ? __kasan_slab_free+0x5c/0x80 [ 2442.925889][T31917] ? kmem_cache_free+0x19b/0x690 [ 2442.925915][T31917] rtnl_newlink+0xfb/0x1c80 [ 2442.925930][T31917] ? ____sys_sendmsg+0x505/0x830 [ 2442.925948][T31917] ? ___sys_sendmsg+0x21f/0x2a0 [ 2442.925965][T31917] ? __x64_sys_sendmsg+0x19b/0x260 [ 2442.925982][T31917] ? do_syscall_64+0xfa/0xfa0 [ 2442.926005][T31917] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2442.926033][T31917] ? __pfx_rtnl_newlink+0x10/0x10 [ 2442.926072][T31917] ? kasan_quarantine_put+0xdd/0x220 [ 2442.926094][T31917] ? lockdep_hardirqs_on+0x9c/0x150 [ 2442.926125][T31917] ? nlmon_xmit+0xb0/0x100 [ 2442.926144][T31917] ? kmem_cache_free+0x19b/0x690 [ 2442.926184][T31917] ? __local_bh_enable_ip+0x12d/0x1c0 [ 2442.926203][T31917] ? lockdep_hardirqs_on+0x9c/0x150 [ 2442.926228][T31917] ? __local_bh_enable_ip+0x12d/0x1c0 [ 2442.926246][T31917] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 2442.926269][T31917] ? __dev_queue_xmit+0x284/0x3740 [ 2442.926292][T31917] ? __dev_queue_xmit+0x284/0x3740 [ 2442.926312][T31917] ? __dev_queue_xmit+0x1bfb/0x3740 [ 2442.926341][T31917] ? __lock_acquire+0xab9/0xd20 [ 2442.926385][T31917] ? __pfx_rtnl_newlink+0x10/0x10 [ 2442.926403][T31917] rtnetlink_rcv_msg+0x7cf/0xb70 [ 2442.926431][T31917] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 2442.926455][T31917] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2442.926478][T31917] ? ref_tracker_free+0x63a/0x7d0 [ 2442.926496][T31917] ? __asan_memcpy+0x40/0x70 [ 2442.926517][T31917] ? __pfx_ref_tracker_free+0x10/0x10 [ 2442.926548][T31917] netlink_rcv_skb+0x208/0x470 [ 2442.926568][T31917] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2442.926595][T31917] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2442.926625][T31917] ? netlink_deliver_tap+0x2e/0x1b0 [ 2442.926653][T31917] netlink_unicast+0x82f/0x9e0 [ 2442.926687][T31917] ? __pfx_netlink_unicast+0x10/0x10 [ 2442.926713][T31917] ? netlink_sendmsg+0x642/0xb30 [ 2442.926729][T31917] ? skb_put+0x11b/0x210 [ 2442.926750][T31917] netlink_sendmsg+0x805/0xb30 [ 2442.926778][T31917] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2442.926800][T31917] ? aa_sock_msg_perm+0xf1/0x1d0 [ 2442.926826][T31917] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2442.926843][T31917] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2442.926863][T31917] __sock_sendmsg+0x21c/0x270 [ 2442.926890][T31917] ____sys_sendmsg+0x505/0x830 [ 2442.926915][T31917] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2442.926945][T31917] ? import_iovec+0x74/0xa0 [ 2442.926971][T31917] ___sys_sendmsg+0x21f/0x2a0 [ 2442.926993][T31917] ? __pfx____sys_sendmsg+0x10/0x10 [ 2442.927052][T31917] ? __fget_files+0x2a/0x420 [ 2442.927069][T31917] ? __fget_files+0x3a0/0x420 [ 2442.927098][T31917] __x64_sys_sendmsg+0x19b/0x260 [ 2442.927121][T31917] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2442.927151][T31917] ? __pfx_ksys_write+0x10/0x10 [ 2442.927184][T31917] ? do_syscall_64+0xbe/0xfa0 [ 2442.927211][T31917] do_syscall_64+0xfa/0xfa0 [ 2442.927233][T31917] ? lockdep_hardirqs_on+0x9c/0x150 [ 2442.927256][T31917] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2442.927272][T31917] ? clear_bhb_loop+0x60/0xb0 [ 2442.927294][T31917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2442.927312][T31917] RIP: 0033:0x7f89a6d8f6c9 [ 2442.927329][T31917] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2442.927344][T31917] RSP: 002b:00007f89a7c3e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2442.927365][T31917] RAX: ffffffffffffffda RBX: 00007f89a6fe5fa0 RCX: 00007f89a6d8f6c9 [ 2442.927379][T31917] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 2442.927391][T31917] RBP: 00007f89a7c3e090 R08: 0000000000000000 R09: 0000000000000000 [ 2442.927402][T31917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2442.927414][T31917] R13: 00007f89a6fe6038 R14: 00007f89a6fe5fa0 R15: 00007fff0d808b58 [ 2442.927447][T31917] [ 2443.474684][T31923] FAULT_INJECTION: forcing a failure. [ 2443.474684][T31923] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2443.493566][T31923] CPU: 1 UID: 0 PID: 31923 Comm: syz.2.13220 Not tainted syzkaller #0 PREEMPT(full) [ 2443.493589][T31923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2443.493601][T31923] Call Trace: [ 2443.493608][T31923] [ 2443.493617][T31923] dump_stack_lvl+0x189/0x250 [ 2443.493645][T31923] ? __pfx____ratelimit+0x10/0x10 [ 2443.493670][T31923] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2443.493691][T31923] ? __pfx__printk+0x10/0x10 [ 2443.493710][T31923] ? __might_fault+0xb0/0x130 [ 2443.493746][T31923] should_fail_ex+0x414/0x560 [ 2443.493776][T31923] _copy_from_iter+0x1de/0x1790 [ 2443.493802][T31923] ? rcu_is_watching+0x15/0xb0 [ 2443.493826][T31923] ? __alloc_skb+0x142/0x2d0 [ 2443.493843][T31923] ? __pfx__copy_from_iter+0x10/0x10 [ 2443.493864][T31923] ? __build_skb_around+0x262/0x3f0 [ 2443.493885][T31923] ? netlink_sendmsg+0x642/0xb30 [ 2443.493902][T31923] ? skb_put+0x11b/0x210 [ 2443.493923][T31923] netlink_sendmsg+0x6b2/0xb30 [ 2443.493951][T31923] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2443.493972][T31923] ? aa_sock_msg_perm+0xf1/0x1d0 [ 2443.493999][T31923] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2443.494016][T31923] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2443.494036][T31923] __sock_sendmsg+0x21c/0x270 [ 2443.494064][T31923] ____sys_sendmsg+0x505/0x830 [ 2443.494090][T31923] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2443.494126][T31923] ? import_iovec+0x74/0xa0 [ 2443.494151][T31923] ___sys_sendmsg+0x21f/0x2a0 [ 2443.494174][T31923] ? __pfx____sys_sendmsg+0x10/0x10 [ 2443.494232][T31923] ? __fget_files+0x2a/0x420 [ 2443.494249][T31923] ? __fget_files+0x3a0/0x420 [ 2443.494277][T31923] __x64_sys_sendmsg+0x19b/0x260 [ 2443.494300][T31923] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2443.494328][T31923] ? __pfx_ksys_write+0x10/0x10 [ 2443.494356][T31923] ? do_syscall_64+0xbe/0xfa0 [ 2443.494383][T31923] do_syscall_64+0xfa/0xfa0 [ 2443.494405][T31923] ? lockdep_hardirqs_on+0x9c/0x150 [ 2443.494430][T31923] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2443.494447][T31923] ? clear_bhb_loop+0x60/0xb0 [ 2443.494469][T31923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2443.494486][T31923] RIP: 0033:0x7f89a6d8f6c9 [ 2443.494503][T31923] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2443.494518][T31923] RSP: 002b:00007f89a7c3e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2443.494537][T31923] RAX: ffffffffffffffda RBX: 00007f89a6fe5fa0 RCX: 00007f89a6d8f6c9 [ 2443.494551][T31923] RDX: 0000000000000000 RSI: 0000200000001f80 RDI: 0000000000000003 [ 2443.494563][T31923] RBP: 00007f89a7c3e090 R08: 0000000000000000 R09: 0000000000000000 [ 2443.494575][T31923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2443.494586][T31923] R13: 00007f89a6fe6038 R14: 00007f89a6fe5fa0 R15: 00007fff0d808b58 [ 2443.494618][T31923] [ 2443.865925][T31935] FAULT_INJECTION: forcing a failure. [ 2443.865925][T31935] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2443.880211][T31935] CPU: 0 UID: 0 PID: 31935 Comm: syz.3.13224 Not tainted syzkaller #0 PREEMPT(full) [ 2443.880235][T31935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2443.880247][T31935] Call Trace: [ 2443.880255][T31935] [ 2443.880263][T31935] dump_stack_lvl+0x189/0x250 [ 2443.880290][T31935] ? __pfx____ratelimit+0x10/0x10 [ 2443.880315][T31935] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2443.880338][T31935] ? __pfx__printk+0x10/0x10 [ 2443.880370][T31935] should_fail_ex+0x414/0x560 [ 2443.880400][T31935] _copy_to_user+0x31/0xb0 [ 2443.880424][T31935] simple_read_from_buffer+0xe1/0x170 [ 2443.880454][T31935] proc_fail_nth_read+0x1b3/0x220 [ 2443.880480][T31935] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2443.880505][T31935] ? rw_verify_area+0x2a6/0x4d0 [ 2443.880526][T31935] ? __lock_acquire+0xab9/0xd20 [ 2443.880542][T31935] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2443.880566][T31935] vfs_read+0x200/0xa30 [ 2443.880587][T31935] ? fdget_pos+0x247/0x320 [ 2443.880609][T31935] ? __pfx___mutex_lock+0x10/0x10 [ 2443.880627][T31935] ? __pfx_vfs_read+0x10/0x10 [ 2443.880651][T31935] ? __fget_files+0x2a/0x420 [ 2443.880672][T31935] ? __fget_files+0x3a0/0x420 [ 2443.880688][T31935] ? __fget_files+0x2a/0x420 [ 2443.880715][T31935] ksys_read+0x145/0x250 [ 2443.880741][T31935] ? __pfx_ksys_read+0x10/0x10 [ 2443.880768][T31935] ? do_syscall_64+0xbe/0xfa0 [ 2443.880796][T31935] do_syscall_64+0xfa/0xfa0 [ 2443.880819][T31935] ? lockdep_hardirqs_on+0x9c/0x150 [ 2443.880851][T31935] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2443.880869][T31935] ? clear_bhb_loop+0x60/0xb0 [ 2443.880892][T31935] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2443.880910][T31935] RIP: 0033:0x7fee0438e0dc [ 2443.880926][T31935] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 2443.880942][T31935] RSP: 002b:00007fee05274030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2443.880962][T31935] RAX: ffffffffffffffda RBX: 00007fee045e5fa0 RCX: 00007fee0438e0dc [ 2443.880976][T31935] RDX: 000000000000000f RSI: 00007fee052740a0 RDI: 0000000000000004 [ 2443.880988][T31935] RBP: 00007fee05274090 R08: 0000000000000000 R09: 0000000000000000 [ 2443.881000][T31935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2443.881012][T31935] R13: 00007fee045e6038 R14: 00007fee045e5fa0 R15: 00007fff0a301538 [ 2443.881046][T31935] [ 2444.136167][T31949] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2444.188094][T31952] netlink: 212360 bytes leftover after parsing attributes in process `syz.3.13230'. [ 2444.390071][T31964] netlink: 'syz.0.13233': attribute type 1 has an invalid length. [ 2444.434741][T31964] 8021q: adding VLAN 0 to HW filter on device bond15 [ 2444.448698][T31961] wg1 speed is unknown, defaulting to 1000 [ 2444.456934][T31961] wg1 speed is unknown, defaulting to 1000 [ 2444.629124][T31976] tipc: Enabling of bearer rejected, already enabled [ 2444.998792][T31999] __nla_validate_parse: 7 callbacks suppressed [ 2444.998809][T31999] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13244'. [ 2445.596939][T32029] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13256'. [ 2445.648722][T32031] netlink: 'syz.2.13257': attribute type 4 has an invalid length. [ 2445.864057][T32038] netlink: 96 bytes leftover after parsing attributes in process `syz.2.13257'. [ 2445.985180][T32052] FAULT_INJECTION: forcing a failure. [ 2445.985180][T32052] name failslab, interval 1, probability 0, space 0, times 0 [ 2446.004275][T32052] CPU: 0 UID: 0 PID: 32052 Comm: syz.0.13261 Not tainted syzkaller #0 PREEMPT(full) [ 2446.004300][T32052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2446.004310][T32052] Call Trace: [ 2446.004318][T32052] [ 2446.004326][T32052] dump_stack_lvl+0x189/0x250 [ 2446.004354][T32052] ? __pfx____ratelimit+0x10/0x10 [ 2446.004378][T32052] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2446.004401][T32052] ? __pfx__printk+0x10/0x10 [ 2446.004423][T32052] ? __pfx___might_resched+0x10/0x10 [ 2446.004443][T32052] ? fs_reclaim_acquire+0x7d/0x100 [ 2446.004473][T32052] should_fail_ex+0x414/0x560 [ 2446.004504][T32052] should_failslab+0xa8/0x100 [ 2446.004524][T32052] kmem_cache_alloc_noprof+0x74/0x6e0 [ 2446.004549][T32052] ? __kernfs_new_node+0xd7/0x7e0 [ 2446.004577][T32052] __kernfs_new_node+0xd7/0x7e0 [ 2446.004598][T32052] ? __lock_acquire+0xab9/0xd20 [ 2446.004624][T32052] ? __pfx___kernfs_new_node+0x10/0x10 [ 2446.004647][T32052] ? kernfs_root+0x1c/0x230 [ 2446.004670][T32052] ? kernfs_root+0x1c/0x230 [ 2446.004690][T32052] ? kernfs_root+0x1c/0x230 [ 2446.004708][T32052] ? kernfs_root+0x1c/0x230 [ 2446.004733][T32052] kernfs_new_node+0x102/0x210 [ 2446.004761][T32052] __kernfs_create_file+0x4b/0x2e0 [ 2446.004780][T32052] sysfs_add_file_mode_ns+0x238/0x300 [ 2446.004807][T32052] internal_create_group+0x66d/0x1110 [ 2446.004852][T32052] ? __pfx_internal_create_group+0x10/0x10 [ 2446.004886][T32052] sysfs_create_groups+0x59/0x120 [ 2446.004909][T32052] device_add_attrs+0x1c4/0x5a0 [ 2446.004943][T32052] ? __pfx_device_add_attrs+0x10/0x10 [ 2446.004961][T32052] ? kobject_put+0x43f/0x480 [ 2446.004983][T32052] ? device_add_class_symlinks+0x21f/0x240 [ 2446.005006][T32052] device_add+0x496/0xb50 [ 2446.005024][T32052] ? device_initialize+0x24b/0x440 [ 2446.005045][T32052] wakeup_source_sysfs_add+0x1d3/0x2c0 [ 2446.005071][T32052] wakeup_source_register+0x18a/0x380 [ 2446.005096][T32052] ep_modify+0x2c9/0xb20 [ 2446.005120][T32052] ? __pfx_ep_modify+0x10/0x10 [ 2446.005143][T32052] ? apparmor_capable+0x137/0x1b0 [ 2446.005166][T32052] ? bpf_lsm_capable+0x9/0x20 [ 2446.005196][T32052] do_epoll_ctl+0x6b5/0xe80 [ 2446.005222][T32052] __x64_sys_epoll_ctl+0x163/0x1a0 [ 2446.005243][T32052] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 2446.005265][T32052] ? do_syscall_64+0xbe/0xfa0 [ 2446.005291][T32052] do_syscall_64+0xfa/0xfa0 [ 2446.005312][T32052] ? lockdep_hardirqs_on+0x9c/0x150 [ 2446.005334][T32052] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2446.005352][T32052] ? clear_bhb_loop+0x60/0xb0 [ 2446.005373][T32052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2446.005391][T32052] RIP: 0033:0x7fef3b98f6c9 [ 2446.005407][T32052] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2446.005421][T32052] RSP: 002b:00007fef3c762038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 2446.005441][T32052] RAX: ffffffffffffffda RBX: 00007fef3bbe6090 RCX: 00007fef3b98f6c9 [ 2446.005453][T32052] RDX: 0000000000000005 RSI: 0000000000000003 RDI: 0000000000000003 [ 2446.005464][T32052] RBP: 00007fef3c762090 R08: 0000000000000000 R09: 0000000000000000 [ 2446.005476][T32052] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000002 [ 2446.005488][T32052] R13: 00007fef3bbe6128 R14: 00007fef3bbe6090 R15: 00007ffca3945af8 [ 2446.005521][T32052] [ 2446.729336][T32085] tipc: Enabled bearer , priority 0 [ 2446.739702][T32085] netlink: 2 bytes leftover after parsing attributes in process `syz.1.13273'. [ 2446.740090][T32087] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 2446.752724][T32085] tipc: Resetting bearer [ 2446.782418][T32084] tipc: Disabling bearer [ 2446.803045][T32089] netlink: 128 bytes leftover after parsing attributes in process `syz.2.13275'. [ 2446.812698][T32089] A link change request failed with some changes committed already. Interface ` may have been left with an inconsistent configuration, please check. [ 2446.938362][T32094] netlink: 176 bytes leftover after parsing attributes in process `syz.1.13277'. [ 2447.109292][T32103] wg1 speed is unknown, defaulting to 1000 [ 2447.117942][T32103] wg1 speed is unknown, defaulting to 1000 [ 2447.169324][T32104] wg1 speed is unknown, defaulting to 1000 [ 2447.176429][T32104] wg1 speed is unknown, defaulting to 1000 [ 2447.441246][T32112] bond11: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 2447.456576][T32112] bond11 (unregistering): Released all slaves [ 2447.523560][T32116] netlink: 'syz.0.13285': attribute type 13 has an invalid length. [ 2447.592491][ T6815] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2447.611265][ T6815] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2447.623421][ T6815] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2447.631905][ T6815] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2447.750400][T32124] pim6reg1: entered promiscuous mode [ 2447.819955][T32124] pim6reg1: entered allmulticast mode [ 2447.984720][T32120] delete_channel: no stack [ 2448.116590][T32131] netlink: 'syz.1.13290': attribute type 1 has an invalid length. [ 2448.897377][ T25] block nbd0: Possible stuck request ffff888079587000: control (read@0,1024B). Runtime 30 seconds [ 2448.908404][ T25] block nbd0: Possible stuck request ffff8880795871c0: control (read@1024,1024B). Runtime 30 seconds [ 2448.919450][ T25] block nbd0: Possible stuck request ffff888079587380: control (read@2048,1024B). Runtime 30 seconds [ 2448.932021][ T25] block nbd0: Possible stuck request ffff888079587540: control (read@3072,1024B). Runtime 30 seconds [ 2449.055718][T32162] tipc: Enabled bearer , priority 0 [ 2449.104756][T32162] netlink: 2 bytes leftover after parsing attributes in process `syz.1.13306'. [ 2449.145797][T32167] tipc: Resetting bearer [ 2449.294366][T32161] tipc: Disabling bearer [ 2449.444852][T32178] x_tables: duplicate underflow at hook 1 [ 2449.461641][T32179] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 2449.752553][T32196] netlink: 'syz.2.13318': attribute type 3 has an invalid length. [ 2449.791533][T32196] netlink: 'syz.2.13318': attribute type 3 has an invalid length. [ 2450.827258][T32220] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 2451.513612][T32123] syz.0.13288: vmalloc error: size 536870912, failed to allocated page array size 1048576, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 2451.532270][T32123] CPU: 1 UID: 0 PID: 32123 Comm: syz.0.13288 Not tainted syzkaller #0 PREEMPT(full) [ 2451.532294][T32123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2451.532306][T32123] Call Trace: [ 2451.532315][T32123] [ 2451.532323][T32123] dump_stack_lvl+0x189/0x250 [ 2451.532355][T32123] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2451.532379][T32123] ? __pfx__printk+0x10/0x10 [ 2451.532399][T32123] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 2451.532425][T32123] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 2451.532451][T32123] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 2451.532478][T32123] warn_alloc+0x214/0x310 [ 2451.532509][T32123] ? __pfx_warn_alloc+0x10/0x10 [ 2451.532547][T32123] ? __get_vm_area_node+0x28f/0x300 [ 2451.532572][T32123] ? translate_table+0x198/0x2000 [ 2451.532598][T32123] __vmalloc_node_range_noprof+0x690/0x12d0 [ 2451.532650][T32123] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 2451.532675][T32123] ? translate_table+0x198/0x2000 [ 2451.532700][T32123] ? rcu_is_watching+0x15/0xb0 [ 2451.532722][T32123] ? translate_table+0x198/0x2000 [ 2451.532744][T32123] __kvmalloc_node_noprof+0x674/0x910 [ 2451.532771][T32123] ? translate_table+0x198/0x2000 [ 2451.532790][T32123] ? do_ipt_set_ctl+0x881/0xcd0 [ 2451.532810][T32123] ? nf_setsockopt+0x26f/0x290 [ 2451.532832][T32123] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 2451.532851][T32123] ? do_syscall_64+0xfa/0xfa0 [ 2451.532883][T32123] translate_table+0x198/0x2000 [ 2451.532916][T32123] ? __lock_acquire+0xab9/0xd20 [ 2451.532939][T32123] ? __pfx_translate_table+0x10/0x10 [ 2451.532963][T32123] ? __might_fault+0xb0/0x130 [ 2451.533007][T32123] ? _copy_from_user+0x94/0xb0 [ 2451.533037][T32123] do_ipt_set_ctl+0x967/0xcd0 [ 2451.533062][T32123] ? rcu_is_watching+0x15/0xb0 [ 2451.533083][T32123] ? trace_contention_end+0x39/0x120 [ 2451.533104][T32123] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 2451.533147][T32123] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2451.533185][T32123] ? __pfx_aa_sk_perm+0x10/0x10 [ 2451.533216][T32123] nf_setsockopt+0x26f/0x290 [ 2451.533244][T32123] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 2451.533278][T32123] do_sock_setsockopt+0x17c/0x1b0 [ 2451.533302][T32123] __x64_sys_setsockopt+0x13f/0x1b0 [ 2451.533327][T32123] do_syscall_64+0xfa/0xfa0 [ 2451.533352][T32123] ? lockdep_hardirqs_on+0x9c/0x150 [ 2451.533375][T32123] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2451.533391][T32123] ? clear_bhb_loop+0x60/0xb0 [ 2451.533410][T32123] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2451.533427][T32123] RIP: 0033:0x7fef3b98f6c9 [ 2451.533445][T32123] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2451.533461][T32123] RSP: 002b:00007fef3c783038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2451.533479][T32123] RAX: ffffffffffffffda RBX: 00007fef3bbe5fa0 RCX: 00007fef3b98f6c9 [ 2451.533494][T32123] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 2451.533505][T32123] RBP: 00007fef3ba11f91 R08: 00000000000003f8 R09: 0000000000000000 [ 2451.533516][T32123] R10: 00002000000006c0 R11: 0000000000000246 R12: 0000000000000000 [ 2451.533527][T32123] R13: 00007fef3bbe6038 R14: 00007fef3bbe5fa0 R15: 00007ffca3945af8 [ 2451.533560][T32123] [ 2451.847136][T32123] Mem-Info: [ 2451.850263][T32123] active_anon:12638 inactive_anon:0 isolated_anon:0 [ 2451.850263][T32123] active_file:3980 inactive_file:40809 isolated_file:0 [ 2451.850263][T32123] unevictable:768 dirty:396 writeback:0 [ 2451.850263][T32123] slab_reclaimable:12687 slab_unreclaimable:196461 [ 2451.850263][T32123] mapped:35071 shmem:1368 pagetables:1164 [ 2451.850263][T32123] sec_pagetables:0 bounce:0 [ 2451.850263][T32123] kernel_misc_reclaimable:0 [ 2451.850263][T32123] free:1171106 free_pcp:28560 free_cma:0 [ 2451.896335][T32123] Node 0 active_anon:50552kB inactive_anon:0kB active_file:15920kB inactive_file:163032kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:140284kB dirty:1580kB writeback:0kB shmem:3936kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12604kB pagetables:4512kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 2451.929465][T32123] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 2451.959564][T32123] Node 0 DMA free:15292kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:68kB local_pcp:0kB free_cma:0kB [ 2451.989655][T32123] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 2451.996519][T32123] Node 0 DMA32 free:760732kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:50452kB inactive_anon:0kB active_file:15920kB inactive_file:163032kB unevictable:1536kB writepending:1580kB zspages:0kB present:3129332kB managed:2565140kB mlocked:0kB bounce:0kB free_pcp:114156kB local_pcp:66692kB free_cma:0kB [ 2452.031526][T32123] lowmem_reserve[]: 0 0 0 0 0 [ 2452.036398][T32123] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2452.065841][T32123] lowmem_reserve[]: 0 0 0 0 0 [ 2452.070966][T32123] Node 1 Normal free:3908600kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2452.079488][T32247] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13334'. [ 2452.102857][T32123] lowmem_reserve[]: 0 0 0 0 0 [ 2452.116894][T32123] Node 0 DMA: 1*4kB (U) 1*8kB (U) 1*16kB (U) 1*32kB (U) 0*64kB 1*128kB (U) 1*256kB (U) 1*512kB (U) 2*1024kB (U) 2*2048kB (UM) 2*4096kB (M) = 15292kB [ 2452.133929][T32123] Node 0 DMA32: 3310*4kB (UME) 1965*8kB (UME) 1257*16kB (UME) 443*32kB (UME) 419*64kB (UME) 298*128kB (UME) 349*256kB (UM) 227*512kB (UME) 135*1024kB (UM) 27*2048kB (UM) 57*4096kB (UM) = 760784kB [ 2452.161413][T32123] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2452.173135][T32123] Node 1 Normal: 220*4kB (UME) 69*8kB (UME) 56*16kB (UME) 225*32kB (UME) 117*64kB (UME) 39*128kB (UME) 14*256kB (UME) 8*512kB (UME) 2*1024kB (UM) 3*2048kB (UE) 945*4096kB (UM) = 3908600kB [ 2452.201877][T32123] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2452.211483][T32123] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 2452.220879][T32123] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2452.230503][T32123] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 2452.239863][T32123] 46154 total pagecache pages [ 2452.244571][T32123] 0 pages in swap cache [ 2452.248717][T32123] Free swap = 124996kB [ 2452.252869][T32123] Total swap = 124996kB [ 2452.257613][T32123] 2097051 pages RAM [ 2452.263289][T32123] 0 pages HighMem/MovableOnly [ 2452.267969][T32123] 424124 pages reserved [ 2452.272115][T32123] 0 pages cma reserved [ 2452.382620][T32259] 8021q: VLANs not supported on ip6_vti0 [ 2452.487655][T32262] FAULT_INJECTION: forcing a failure. [ 2452.487655][T32262] name failslab, interval 1, probability 0, space 0, times 0 [ 2452.505593][T32262] CPU: 1 UID: 0 PID: 32262 Comm: syz.3.13338 Not tainted syzkaller #0 PREEMPT(full) [ 2452.505616][T32262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2452.505626][T32262] Call Trace: [ 2452.505633][T32262] [ 2452.505641][T32262] dump_stack_lvl+0x189/0x250 [ 2452.505669][T32262] ? __pfx____ratelimit+0x10/0x10 [ 2452.505692][T32262] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2452.505714][T32262] ? __pfx__printk+0x10/0x10 [ 2452.505735][T32262] ? __pfx___might_resched+0x10/0x10 [ 2452.505753][T32262] ? fs_reclaim_acquire+0x7d/0x100 [ 2452.505783][T32262] should_fail_ex+0x414/0x560 [ 2452.505813][T32262] should_failslab+0xa8/0x100 [ 2452.505832][T32262] __kmalloc_cache_noprof+0x6f/0x6f0 [ 2452.505855][T32262] ? nfnetlink_rcv+0xf97/0x2590 [ 2452.505877][T32262] ? __nla_parse+0x40/0x60 [ 2452.505901][T32262] nfnetlink_rcv+0xf97/0x2590 [ 2452.505963][T32262] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 2452.506005][T32262] ? ref_tracker_free+0x63a/0x7d0 [ 2452.506054][T32262] ? __netlink_deliver_tap+0x807/0x850 [ 2452.506073][T32262] ? netlink_deliver_tap+0x2e/0x1b0 [ 2452.506111][T32262] netlink_unicast+0x82f/0x9e0 [ 2452.506145][T32262] ? __pfx_netlink_unicast+0x10/0x10 [ 2452.506172][T32262] ? netlink_sendmsg+0x642/0xb30 [ 2452.506195][T32262] ? skb_put+0x11b/0x210 [ 2452.506218][T32262] netlink_sendmsg+0x805/0xb30 [ 2452.506246][T32262] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2452.506269][T32262] ? aa_sock_msg_perm+0xf1/0x1d0 [ 2452.506296][T32262] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2452.506314][T32262] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2452.506334][T32262] __sock_sendmsg+0x21c/0x270 [ 2452.506361][T32262] ____sys_sendmsg+0x505/0x830 [ 2452.506387][T32262] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2452.506417][T32262] ? import_iovec+0x74/0xa0 [ 2452.506443][T32262] ___sys_sendmsg+0x21f/0x2a0 [ 2452.506465][T32262] ? __pfx____sys_sendmsg+0x10/0x10 [ 2452.506524][T32262] ? __fget_files+0x2a/0x420 [ 2452.506540][T32262] ? __fget_files+0x3a0/0x420 [ 2452.506569][T32262] __x64_sys_sendmsg+0x19b/0x260 [ 2452.506592][T32262] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2452.506623][T32262] ? __pfx_ksys_write+0x10/0x10 [ 2452.506651][T32262] ? do_syscall_64+0xbe/0xfa0 [ 2452.506678][T32262] do_syscall_64+0xfa/0xfa0 [ 2452.506700][T32262] ? lockdep_hardirqs_on+0x9c/0x150 [ 2452.506723][T32262] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2452.506741][T32262] ? clear_bhb_loop+0x60/0xb0 [ 2452.506761][T32262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2452.506779][T32262] RIP: 0033:0x7fee0438f6c9 [ 2452.506795][T32262] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2452.506810][T32262] RSP: 002b:00007fee05274038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2452.506829][T32262] RAX: ffffffffffffffda RBX: 00007fee045e5fa0 RCX: 00007fee0438f6c9 [ 2452.506842][T32262] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 2452.506853][T32262] RBP: 00007fee05274090 R08: 0000000000000000 R09: 0000000000000000 [ 2452.506863][T32262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2452.506874][T32262] R13: 00007fee045e6038 R14: 00007fee045e5fa0 R15: 00007fff0a301538 [ 2452.506907][T32262] [ 2453.047993][T32273] FAULT_INJECTION: forcing a failure. [ 2453.047993][T32273] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2453.066236][T32273] CPU: 0 UID: 0 PID: 32273 Comm: syz.0.13341 Not tainted syzkaller #0 PREEMPT(full) [ 2453.066261][T32273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2453.066272][T32273] Call Trace: [ 2453.066280][T32273] [ 2453.066289][T32273] dump_stack_lvl+0x189/0x250 [ 2453.066316][T32273] ? __pfx____ratelimit+0x10/0x10 [ 2453.066341][T32273] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2453.066364][T32273] ? __pfx__printk+0x10/0x10 [ 2453.066383][T32273] ? __might_fault+0xb0/0x130 [ 2453.066425][T32273] should_fail_ex+0x414/0x560 [ 2453.066456][T32273] _copy_from_user+0x2d/0xb0 [ 2453.066480][T32273] __sys_bpf+0x1e3/0x860 [ 2453.066500][T32273] ? __pfx___sys_bpf+0x10/0x10 [ 2453.066535][T32273] ? ksys_write+0x22a/0x250 [ 2453.066561][T32273] ? __pfx_ksys_write+0x10/0x10 [ 2453.066591][T32273] __x64_sys_bpf+0x7c/0x90 [ 2453.066615][T32273] do_syscall_64+0xfa/0xfa0 [ 2453.066644][T32273] ? lockdep_hardirqs_on+0x9c/0x150 [ 2453.066668][T32273] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2453.066685][T32273] ? clear_bhb_loop+0x60/0xb0 [ 2453.066711][T32273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2453.066729][T32273] RIP: 0033:0x7fef3b98f6c9 [ 2453.066745][T32273] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2453.066761][T32273] RSP: 002b:00007fef3c783038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2453.066780][T32273] RAX: ffffffffffffffda RBX: 00007fef3bbe5fa0 RCX: 00007fef3b98f6c9 [ 2453.066794][T32273] RDX: 0000000000000020 RSI: 0000200000000100 RDI: 0000000000000004 [ 2453.066806][T32273] RBP: 00007fef3c783090 R08: 0000000000000000 R09: 0000000000000000 [ 2453.066817][T32273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2453.066828][T32273] R13: 00007fef3bbe6038 R14: 00007fef3bbe5fa0 R15: 00007ffca3945af8 [ 2453.066861][T32273] [ 2453.430610][T32282] netlink: 44 bytes leftover after parsing attributes in process `syz.0.13344'. [ 2453.512863][T32287] netlink: 44 bytes leftover after parsing attributes in process `syz.0.13346'. [ 2453.522199][T32287] netlink: 35 bytes leftover after parsing attributes in process `syz.0.13346'. [ 2453.531860][T32287] netlink: 'syz.0.13346': attribute type 5 has an invalid length. [ 2453.540247][T32287] netlink: 'syz.0.13346': attribute type 6 has an invalid length. [ 2453.548127][T32287] netlink: 35 bytes leftover after parsing attributes in process `syz.0.13346'. [ 2453.895968][T32310] netlink: 'syz.0.13354': attribute type 33 has an invalid length. [ 2453.903969][T32310] netlink: 152 bytes leftover after parsing attributes in process `syz.0.13354'. [ 2453.926460][T32310] wg1 speed is unknown, defaulting to 1000 [ 2453.933226][T32310] wg1 speed is unknown, defaulting to 1000 [ 2454.548647][T32317] netlink: 44 bytes leftover after parsing attributes in process `syz.3.13356'. [ 2454.928606][T32337] FAULT_INJECTION: forcing a failure. [ 2454.928606][T32337] name failslab, interval 1, probability 0, space 0, times 0 [ 2454.941460][T32337] CPU: 1 UID: 0 PID: 32337 Comm: syz.0.13365 Not tainted syzkaller #0 PREEMPT(full) [ 2454.941483][T32337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2454.941494][T32337] Call Trace: [ 2454.941502][T32337] [ 2454.941510][T32337] dump_stack_lvl+0x189/0x250 [ 2454.941528][T32337] ? __pfx____ratelimit+0x10/0x10 [ 2454.941542][T32337] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2454.941555][T32337] ? __pfx__printk+0x10/0x10 [ 2454.941567][T32337] ? __pfx___might_resched+0x10/0x10 [ 2454.941578][T32337] ? fs_reclaim_acquire+0x7d/0x100 [ 2454.941596][T32337] should_fail_ex+0x414/0x560 [ 2454.941613][T32337] should_failslab+0xa8/0x100 [ 2454.941625][T32337] __kmalloc_cache_noprof+0x6f/0x6f0 [ 2454.941638][T32337] ? bpf_raw_tp_link_attach+0x24e/0x6c0 [ 2454.941650][T32337] ? bpf_get_raw_tracepoint+0xa9/0x270 [ 2454.941666][T32337] bpf_raw_tp_link_attach+0x24e/0x6c0 [ 2454.941681][T32337] ? __pfx_bpf_raw_tp_link_attach+0x10/0x10 [ 2454.941699][T32337] ? __fget_files+0x2a/0x420 [ 2454.941714][T32337] bpf_raw_tracepoint_open+0x1b2/0x220 [ 2454.941726][T32337] __sys_bpf+0x73e/0x860 [ 2454.941736][T32337] ? __pfx___sys_bpf+0x10/0x10 [ 2454.941754][T32337] ? ksys_write+0x22a/0x250 [ 2454.941768][T32337] ? __pfx_ksys_write+0x10/0x10 [ 2454.941785][T32337] __x64_sys_bpf+0x7c/0x90 [ 2454.941798][T32337] do_syscall_64+0xfa/0xfa0 [ 2454.941811][T32337] ? lockdep_hardirqs_on+0x9c/0x150 [ 2454.941824][T32337] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2454.941834][T32337] ? clear_bhb_loop+0x60/0xb0 [ 2454.941846][T32337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2454.941855][T32337] RIP: 0033:0x7fef3b98f6c9 [ 2454.941864][T32337] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2454.941873][T32337] RSP: 002b:00007fef3c783038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2454.941884][T32337] RAX: ffffffffffffffda RBX: 00007fef3bbe5fa0 RCX: 00007fef3b98f6c9 [ 2454.941892][T32337] RDX: 0000000000000010 RSI: 0000200000000040 RDI: 0000000000000011 [ 2454.941898][T32337] RBP: 00007fef3c783090 R08: 0000000000000000 R09: 0000000000000000 [ 2454.941904][T32337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2454.941910][T32337] R13: 00007fef3bbe6038 R14: 00007fef3bbe5fa0 R15: 00007ffca3945af8 [ 2454.941927][T32337] [ 2455.202585][T32339] netlink: 44 bytes leftover after parsing attributes in process `syz.0.13366'. [ 2455.240506][T32341] netlink: 'syz.0.13367': attribute type 1 has an invalid length. [ 2455.251383][T32341] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13367'. [ 2455.261009][T32341] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13367'. [ 2455.273033][T32341] netlink: 'syz.0.13367': attribute type 49 has an invalid length. [ 2455.961350][T32383] netlink: 'syz.3.13385': attribute type 21 has an invalid length. [ 2455.969400][T32383] netlink: 'syz.3.13385': attribute type 5 has an invalid length. [ 2455.977337][T32383] netlink: 'syz.3.13385': attribute type 6 has an invalid length. [ 2457.116056][T32400] workqueue: name exceeds WQ_NAME_LEN. Truncating to: '}S7\mgҒ?NZez [ 2467.455791][ T1301] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 2478.974057][ T25] block nbd0: Possible stuck request ffff888079587000: control (read@0,1024B). Runtime 60 seconds [ 2478.984799][ T25] block nbd0: Possible stuck request ffff8880795871c0: control (read@1024,1024B). Runtime 60 seconds [ 2478.995702][ T25] block nbd0: Possible stuck request ffff888079587380: control (read@2048,1024B). Runtime 60 seconds [ 2479.006610][ T25] block nbd0: Possible stuck request ffff888079587540: control (read@3072,1024B). Runtime 60 seconds [ 2481.157108][ T5197] udevd[5197]: worker [30571] /devices/virtual/block/nbd0 is taking a long time [ 2509.054090][ T25] block nbd0: Possible stuck request ffff888079587000: control (read@0,1024B). Runtime 90 seconds [ 2509.064977][ T25] block nbd0: Possible stuck request ffff8880795871c0: control (read@1024,1024B). Runtime 90 seconds [ 2509.076585][ T25] block nbd0: Possible stuck request ffff888079587380: control (read@2048,1024B). Runtime 90 seconds [ 2509.087639][ T25] block nbd0: Possible stuck request ffff888079587540: control (read@3072,1024B). Runtime 90 seconds [ 2528.895769][ T1301] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 2539.153600][ T25] block nbd0: Possible stuck request ffff888079587000: control (read@0,1024B). Runtime 120 seconds [ 2539.173289][ T25] block nbd0: Possible stuck request ffff8880795871c0: control (read@1024,1024B). Runtime 120 seconds [ 2539.184323][ T25] block nbd0: Possible stuck request ffff888079587380: control (read@2048,1024B). Runtime 120 seconds [ 2539.195365][ T25] block nbd0: Possible stuck request ffff888079587540: control (read@3072,1024B). Runtime 120 seconds [ 2569.214619][ T25] block nbd0: Possible stuck request ffff888079587000: control (read@0,1024B). Runtime 150 seconds [ 2569.225574][ T25] block nbd0: Possible stuck request ffff8880795871c0: control (read@1024,1024B). Runtime 150 seconds [ 2569.236578][ T25] block nbd0: Possible stuck request ffff888079587380: control (read@2048,1024B). Runtime 150 seconds [ 2569.247723][ T25] block nbd0: Possible stuck request ffff888079587540: control (read@3072,1024B). Runtime 150 seconds [ 2587.133626][ T31] INFO: task kworker/0:2:980 blocked for more than 143 seconds. [ 2587.141303][ T31] Not tainted syzkaller #0 [ 2587.146279][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2587.155070][ T31] task:kworker/0:2 state:D stack:22544 pid:980 tgid:980 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 2587.167114][ T31] Workqueue: events rfkill_sync_work [ 2587.172391][ T31] Call Trace: [ 2587.175789][ T31] [ 2587.178725][ T31] __schedule+0x1798/0x4cc0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 2587.183229][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 2587.188653][ T31] ? __pfx___schedule+0x10/0x10 [ 2587.193697][ T31] ? schedule+0x91/0x360 [ 2587.197959][ T31] schedule+0x165/0x360 [ 2587.202123][ T31] schedule_preempt_disabled+0x13/0x30 [ 2587.207997][ T31] __mutex_lock+0x7e6/0x1350 [ 2587.212826][ T31] ? __mutex_lock+0x5bb/0x1350 [ 2587.217901][ T31] ? nfc_rfkill_set_block+0x50/0x2e0 [ 2587.223203][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 2587.228350][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 2587.233812][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 2587.239715][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 2587.246088][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 2587.251811][ T31] nfc_rfkill_set_block+0x50/0x2e0 [ 2587.256965][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 2587.262691][ T31] rfkill_set_block+0x1d2/0x440 [ 2587.267596][ T31] rfkill_sync_work+0x114/0x200 [ 2587.272452][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 2587.278242][ T31] process_scheduled_works+0xae1/0x17b0 [ 2587.283869][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 2587.289873][ T31] worker_thread+0x8a0/0xda0 [ 2587.294538][ T31] kthread+0x711/0x8a0 [ 2587.298629][ T31] ? __pfx_worker_thread+0x10/0x10 [ 2587.303777][ T31] ? __pfx_kthread+0x10/0x10 [ 2587.308378][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2587.313670][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 2587.318875][ T31] ? __pfx_kthread+0x10/0x10 [ 2587.323517][ T31] ret_from_fork+0x4bc/0x870 [ 2587.328112][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2587.333312][ T31] ? __switch_to_asm+0x39/0x70 [ 2587.338077][ T31] ? __switch_to_asm+0x33/0x70 [ 2587.342836][ T31] ? __pfx_kthread+0x10/0x10 [ 2587.347655][ T31] ret_from_fork_asm+0x1a/0x30 [ 2587.352443][ T31] [ 2587.355584][ T31] INFO: task kworker/0:10:6766 blocked for more than 143 seconds. [ 2587.363420][ T31] Not tainted syzkaller #0 [ 2587.368350][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2587.377094][ T31] task:kworker/0:10 state:D stack:21976 pid:6766 tgid:6766 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 2587.389170][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 2587.412580][ T31] Call Trace: [ 2587.416041][ T31] [ 2587.418987][ T31] __schedule+0x1798/0x4cc0 [ 2587.439848][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 2587.445355][ T31] ? __pfx___schedule+0x10/0x10 [ 2587.450235][ T31] ? schedule+0x91/0x360 [ 2587.458361][ T31] schedule+0x165/0x360 [ 2587.462551][ T31] schedule_preempt_disabled+0x13/0x30 [ 2587.468132][ T31] __mutex_lock+0x7e6/0x1350 [ 2587.472745][ T31] ? __mutex_lock+0x5bb/0x1350 [ 2587.477697][ T31] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 2587.484031][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 2587.489045][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 2587.494905][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 2587.500655][ T31] rfkill_global_led_trigger_worker+0x27/0xd0 [ 2587.506883][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 2587.512604][ T31] process_scheduled_works+0xae1/0x17b0 [ 2587.518214][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 2587.524220][ T31] worker_thread+0x8a0/0xda0 [ 2587.528806][ T31] kthread+0x711/0x8a0 [ 2587.532880][ T31] ? __pfx_worker_thread+0x10/0x10 [ 2587.538123][ T31] ? __pfx_kthread+0x10/0x10 [ 2587.542714][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2587.548020][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 2587.553222][ T31] ? __pfx_kthread+0x10/0x10 [ 2587.557899][ T31] ret_from_fork+0x4bc/0x870 [ 2587.562470][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2587.567675][ T31] ? __switch_to_asm+0x39/0x70 [ 2587.572433][ T31] ? __switch_to_asm+0x33/0x70 [ 2587.577255][ T31] ? __pfx_kthread+0x10/0x10 [ 2587.581853][ T31] ret_from_fork_asm+0x1a/0x30 [ 2587.586685][ T31] [ 2587.589744][ T31] INFO: task syz.4.13077:31520 blocked for more than 143 seconds. [ 2587.598802][ T31] Not tainted syzkaller #0 [ 2587.603809][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2587.612455][ T31] task:syz.4.13077 state:D stack:25608 pid:31520 tgid:31520 ppid:5823 task_flags:0x400040 flags:0x00080003 [ 2587.624423][ T31] Call Trace: [ 2587.627686][ T31] [ 2587.630600][ T31] __schedule+0x1798/0x4cc0 [ 2587.635135][ T31] ? __kernel_text_address+0xd/0x40 [ 2587.640317][ T31] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 2587.646535][ T31] ? arch_stack_walk+0xfc/0x150 [ 2587.651376][ T31] ? __lock_acquire+0xab9/0xd20 [ 2587.656393][ T31] ? __pfx___schedule+0x10/0x10 [ 2587.661258][ T31] ? schedule+0x91/0x360 [ 2587.665609][ T31] schedule+0x165/0x360 [ 2587.669782][ T31] schedule_timeout+0x9a/0x270 [ 2587.674602][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 2587.679980][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2587.685251][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 2587.690440][ T31] ? wait_for_completion+0x267/0x5d0 [ 2587.695840][ T31] wait_for_completion+0x2bf/0x5d0 [ 2587.700976][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 2587.706728][ T31] ? __flush_work+0xd2/0xbc0 [ 2587.711325][ T31] ? __flush_work+0xd2/0xbc0 [ 2587.715951][ T31] __flush_work+0x9b9/0xbc0 [ 2587.720457][ T31] ? __flush_work+0xd2/0xbc0 [ 2587.725105][ T31] ? __pfx___flush_work+0x10/0x10 [ 2587.730121][ T31] ? __pfx_wq_barrier_func+0x10/0x10 [ 2587.735427][ T31] ? __pfx___cancel_work+0x10/0x10 [ 2587.740540][ T31] ? nfc_genl_device_removed+0x23c/0x330 [ 2587.746221][ T31] __cancel_work_sync+0xbe/0x110 [ 2587.751142][ T31] rfkill_unregister+0x92/0x220 [ 2587.756019][ T31] nfc_unregister_device+0x96/0x2a0 [ 2587.761222][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 2587.767005][ T31] virtual_ncidev_close+0x56/0x90 [ 2587.772013][ T31] __fput+0x44c/0xa70 [ 2587.776723][ T31] task_work_run+0x1d4/0x260 [ 2587.781327][ T31] ? __pfx_task_work_run+0x10/0x10 [ 2587.786509][ T31] ? exit_to_user_mode_loop+0x40/0x130 [ 2587.791955][ T31] exit_to_user_mode_loop+0xe9/0x130 [ 2587.797292][ T31] do_syscall_64+0x2bd/0xfa0 [ 2587.801897][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 2587.807148][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2587.813195][ T31] ? clear_bhb_loop+0x60/0xb0 [ 2587.817887][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2587.823825][ T31] RIP: 0033:0x7f9ec8f8f6c9 [ 2587.828240][ T31] RSP: 002b:00007ffc86ccc1c8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 2587.836657][ T31] RAX: 0000000000000000 RBX: 0000000000252333 RCX: 00007f9ec8f8f6c9 [ 2587.844681][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 2587.852663][ T31] RBP: 00007f9ec91e7da0 R08: 0000000000000001 R09: 0000001186ccc4bf [ 2587.860654][ T31] R10: 0000001b2fc20000 R11: 0000000000000246 R12: 00007f9ec91e5fac [ 2587.868886][ T31] R13: 00007f9ec91e5fa0 R14: ffffffffffffffff R15: 00007ffc86ccc2e0 [ 2587.876927][ T31] [ 2587.879973][ T31] [ 2587.879973][ T31] Showing all locks held in the system: [ 2587.888661][ T31] 5 locks held by kworker/u8:1/13: [ 2587.896424][ T31] #0: ffff8880b893a018 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 2587.906401][ T31] #1: ffff8880b8924048 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 2587.915286][ T31] #2: ffff8880b8925958 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x1ae/0xf30 [ 2587.924290][ T31] #3: ffffffff99a8bb50 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0xbb/0x420 [ 2587.934573][ T31] #4: ffffffff8df3d660 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xa5/0x2390 [ 2587.944449][ T31] 1 lock held by khungtaskd/31: [ 2587.949290][ T31] #0: ffffffff8df3d660 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 2587.959135][ T31] 4 locks held by kworker/0:2/980: [ 2587.964321][ T31] #0: ffff88801a055948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 2587.975291][ T31] #1: ffffc9000365fba0 ((work_completion)(&rfkill->sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 2587.987768][ T31] #2: ffffffff8f5ab568 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_sync_work+0x2e/0x200 [ 2587.998151][ T31] #3: ffff88807c9aa100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0 [ 2588.008044][ T31] 2 locks held by getty/5585: [ 2588.012704][ T31] #0: ffff8880332f80a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 2588.022502][ T31] #1: ffffc900036c62f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 2588.032778][ T31] 3 locks held by kworker/0:10/6766: [ 2588.038091][ T31] #0: ffff88801a055948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 2588.049097][ T31] #1: ffffc90002fc7ba0 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 2588.062582][ T31] #2: ffffffff8f5ab568 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 2588.073948][ T31] 1 lock held by udevd/30571: [ 2588.078600][ T31] #0: ffff88807472a358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 2588.087843][ T31] 1 lock held by syz.4.13077/31520: [ 2588.093016][ T31] #0: ffff88807c9aa100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0 [ 2588.102818][ T31] 2 locks held by syz-executor/32175: [ 2588.108186][ T31] #0: ffff888032a94918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 2588.118256][ T31] #1: ffffffff8f5ab568 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 2588.128241][ T31] 3 locks held by syz.2.13318/32196: [ 2588.133626][ T31] #0: ffffffff8e775428 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 2588.142058][ T31] #1: ffff888021f64100 (&dev->mutex){....}-{4:4}, at: nfc_register_device+0xa1/0x320 [ 2588.151762][ T31] #2: ffffffff8f5ab568 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 2588.161799][ T31] 1 lock held by syz.1.13336/32251: [ 2588.167013][ T31] #0: ffffffff8e775428 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 2588.175513][ T31] 1 lock held by syz.0.13369/32345: [ 2588.180710][ T31] #0: ffffffff8e775428 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 2588.189337][ T31] 3 locks held by syz.3.13392/32400: [ 2588.194652][ T31] #0: ffffffff8f331bb0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 2588.202836][ T31] #1: ffffffff8f3319c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 2588.211800][ T31] #2: ffffffff8f5ab568 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 2588.221836][ T31] 1 lock held by syz-executor/32402: [ 2588.227154][ T31] #0: ffffffff8e775428 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 2588.235689][ T31] 1 lock held by syz-executor/32404: [ 2588.240947][ T31] #0: ffffffff8e775428 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 2588.249463][ T31] 1 lock held by syz-executor/32406: [ 2588.254895][ T31] #0: ffffffff8e775428 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 2588.263372][ T31] 1 lock held by syz-executor/32408: [ 2588.268631][ T31] #0: ffffffff8e775428 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 2588.277062][ T31] 1 lock held by syz-executor/32410: [ 2588.282322][ T31] #0: ffffffff8e775428 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 2588.290792][ T31] 1 lock held by syz-executor/32412: [ 2588.296134][ T31] #0: ffffffff8e775428 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 2588.304627][ T31] 1 lock held by syz-executor/32414: [ 2588.309910][ T31] #0: ffffffff8e775428 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 2588.318379][ T31] 1 lock held by syz-executor/32416: [ 2588.323676][ T31] #0: ffffffff8e775428 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 2588.332092][ T31] 1 lock held by syz-executor/32418: [ 2588.337380][ T31] #0: ffffffff8e775428 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 2588.345830][ T31] 1 lock held by syz-executor/32420: [ 2588.351088][ T31] #0: ffffffff8e775428 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 2588.359627][ T31] 1 lock held by syz-executor/32422: [ 2588.364916][ T31] #0: ffffffff8e775428 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 2588.373378][ T31] [ 2588.375697][ T31] ============================================= [ 2588.375697][ T31] [ 2588.384240][ T31] NMI backtrace for cpu 1 [ 2588.384251][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 2588.384262][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2588.384268][ T31] Call Trace: [ 2588.384273][ T31] [ 2588.384277][ T31] dump_stack_lvl+0x189/0x250 [ 2588.384294][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2588.384307][ T31] ? __pfx__printk+0x10/0x10 [ 2588.384323][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 2588.384337][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 2588.384349][ T31] ? __pfx__printk+0x10/0x10 [ 2588.384361][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2588.384377][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 2588.384390][ T31] watchdog+0xf60/0xfa0 [ 2588.384403][ T31] ? watchdog+0x1e2/0xfa0 [ 2588.384416][ T31] kthread+0x711/0x8a0 [ 2588.384430][ T31] ? __pfx_watchdog+0x10/0x10 [ 2588.384439][ T31] ? __pfx_kthread+0x10/0x10 [ 2588.384452][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2588.384465][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 2588.384477][ T31] ? __pfx_kthread+0x10/0x10 [ 2588.384490][ T31] ret_from_fork+0x4bc/0x870 [ 2588.384502][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2588.384515][ T31] ? __switch_to_asm+0x39/0x70 [ 2588.384523][ T31] ? __switch_to_asm+0x33/0x70 [ 2588.384530][ T31] ? __pfx_kthread+0x10/0x10 [ 2588.384542][ T31] ret_from_fork_asm+0x1a/0x30 [ 2588.384559][ T31] [ 2588.384563][ T31] Sending NMI from CPU 1 to CPUs 0: [ 2588.529265][ C0] NMI backtrace for cpu 0 [ 2588.529279][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 2588.529296][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2588.529306][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 2588.529330][ C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d f3 a1 21 00 f3 0f 1e fa fb f4 c8 e6 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 2588.529343][ C0] RSP: 0018:ffffffff8dc07d80 EFLAGS: 000002c6 [ 2588.529358][ C0] RAX: d585e371fcf32900 RBX: ffffffff81967bf7 RCX: d585e371fcf32900 [ 2588.529370][ C0] RDX: 0000000000000001 RSI: ffffffff8d70e901 RDI: ffffffff8bbf0760 [ 2588.529382][ C0] RBP: ffffffff8dc07ea8 R08: ffff8880b8832fdb R09: 1ffff110171065fb [ 2588.529394][ C0] R10: dffffc0000000000 R11: ffffed10171065fc R12: ffffffff8f7ce570 [ 2588.529406][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1b92a40 [ 2588.529416][ C0] FS: 0000000000000000(0000) GS:ffff88812613b000(0000) knlGS:0000000000000000 [ 2588.529429][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2588.529441][ C0] CR2: 00007f1d6f917d60 CR3: 000000000dd38000 CR4: 00000000003526f0 [ 2588.529455][ C0] Call Trace: [ 2588.529462][ C0] [ 2588.529468][ C0] default_idle+0x13/0x20 [ 2588.529484][ C0] default_idle_call+0x73/0xb0 [ 2588.529500][ C0] do_idle+0x1e7/0x510 [ 2588.529516][ C0] ? asm_sysvec_call_function_single+0x1a/0x20 [ 2588.529533][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 2588.529554][ C0] ? __pfx_do_idle+0x10/0x10 [ 2588.529576][ C0] ? do_idle+0x5/0x510 [ 2588.529592][ C0] cpu_startup_entry+0x44/0x60 [ 2588.529608][ C0] rest_init+0x2de/0x300 [ 2588.529625][ C0] start_kernel+0x3ae/0x410 [ 2588.529649][ C0] x86_64_start_reservations+0x24/0x30 [ 2588.529669][ C0] x86_64_start_kernel+0x143/0x1c0 [ 2588.529689][ C0] common_startup_64+0x13e/0x147 [ 2588.529718][ C0] [ 2590.335594][ T1301] aoe: packet could not be sent on bond0. consider increasing tx_queue_len