last executing test programs: 2.109503846s ago: executing program 3 (id=5124): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000380)='ns/net\x00') ioctl$NS_GET_USERNS(r1, 0xb701, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a68000000060a01040000000000000000020000003c000480380001800b00010064796e73657400002800028008000940000000a7080004400000000008000340000000000900010073797a30000000000900010073797a30000000000900020073797a32"], 0x90}}, 0x0) 1.965630421s ago: executing program 3 (id=5128): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900433ec5b1dacf010073797a300000000008000240000000034587c03e59f5172c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001b61d26ee50f2e836d1d281fbdf9daf6ce8f2d210085271314114865e423828645878508237d3742435f110752e79d2b7abfacdeb51f0a4fc186e4b31bc07c2ac7b697297faeb5fe8c185578d7864e2c2e8d3b6032b3e933534c47c5bbe49df6a05da9f0684d99a06e9118e3a27ef6431cee83881e2a4de39efda1be711cb148cfc2ab9bde28bc0d6f9ee414508ae779a54e62dc442fe7fd77716be788326efc4992b44d023dce11b0b41a36bc9bb32764cd6b64f815d28b1ac2251b42a604fdbe0fad498ed1780aa6dbe28eebd5fe89b994bc559f2e24b6225e56562c4f39dae9fae24bb7508b7a313476138532ac8738a32afc230544e6f3200b158fb462f5e01315e63a3c4fa743ad7ce3b9eb8b262abb386e3ccdc7dcfafae6da15c4221744ee6f9460f0b62ba3e76af64f79b0275a4a64dcc7eed02572a7d178e0c43cae2ef7291b7c74ec5ccb2f6746ed31e6e58ee51b3cd689115f50efec68685c74e8888a05af99e71c3250bcf50e7ef776a8704b222b967aeed5785a3c6385d8e74074d3e18b74cc901"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x98}}, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f00000000c0)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="62202a2a2aff030000"], 0x9) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) splice(r3, &(0x7f0000000040), r2, 0x0, 0x800000000ff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x200, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4ac2d78a}}, 0x0, 0x0, 0x3f, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback, 0x2}, 0x1c) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x303}, "0100", "acba84f0a6731f234db1cc7f3f382ad796bd667c4000a9959087310300", "129c9707", "ec3fff9afd96e6c0"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$int_in(r4, 0x5421, &(0x7f0000000140)=0x1) writev(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) r5 = socket(0x15, 0x5, 0x0) getsockopt(r5, 0x200000000114, 0x2718, 0x0, &(0x7f0000000000)) setsockopt$inet6_int(r5, 0x29, 0xc8, 0x0, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001800010000000000000200001d01080008000a00", @ANYRES32=r6, @ANYBLOB='\b\x00\t\x00', @ANYRES32=r8], 0x24}}, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0xc}, 0x1c) listen(r9, 0x3) 1.787340399s ago: executing program 1 (id=5131): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x5b, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000], [0x0, 0x4]}, [@TCA_MQPRIO_MODE={0x6, 0x4}]}}}]}, 0x90}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) sendmsg$NL80211_CMD_ASSOCIATE(r3, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000580)={0x88, r4, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x2, 0x19}}}}, [@NL80211_ATTR_PREV_BSSID={0xa}, @NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x1000, {0xf, 0x2, 0x7, 0xc8}}}, @NL80211_ATTR_PREV_BSSID={0xa}, @NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x20000000, {0xfff9, 0x0, 0x3, 0x8}}}, @NL80211_ATTR_PREV_BSSID={0xa, 0x4f, @from_mac=@broadcast}, @NL80211_ATTR_SSID={0x1b, 0x34, @random="eae5d70541d2272e26cf808548cb735e5f963baba444e7"}]}, 0x88}}, 0x4c018) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20-generic\x00'}, 0x58) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x526}, @TCA_SAMPLE_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x70}}, 0x0) 1.649527529s ago: executing program 0 (id=5133): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x51483}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_CREATE_SOCKETS={0x5, 0x5, 0x1}, @IFLA_GTP_LOCAL={0x8, 0x7, @rand_addr=0x64010101}]}}}]}, 0x40}}, 0x8040) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a", 0x27}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80800) read$alg(r3, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'ip6gretap0\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, 0x0) r7 = syz_genetlink_get_family_id$team(&(0x7f0000000240), r6) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYRES64=r7, @ANYBLOB="ef767c", @ANYBLOB="0380000001010000170024006b9c03ae55ded42b8495b6dd0657a7e5e22e470008000500", @ANYRES16, @ANYRESDEC=r3], 0x48}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="50000000100003040000000000000000f2000000", @ANYRES32=0x0, @ANYBLOB="00001000000000002800128009000100766c616e000000001800028006000100010000000c000200540a00001800000008000500", @ANYRES32=r10], 0x50}, 0x1, 0xba01, 0x0, 0x4}, 0x0) 1.550801328s ago: executing program 4 (id=5134): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x38, 0x3d, 0x107, 0x70bd27, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @pid}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x117}]}, @typed={0xc, 0x7, 0x0, 0x0, @u64=0x100}]}, 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) (fail_nth: 13) 1.51019026s ago: executing program 3 (id=5136): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f533d9ec21100a657b0700", 0x10) 1.405755269s ago: executing program 0 (id=5137): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="09000000040000000800000040"], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r0, &(0x7f0000000580), 0x0}, 0x20) 1.247473067s ago: executing program 1 (id=5138): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newsa={0x150, 0x10, 0x413, 0x1c000000, 0x0, {{@in=@multicast1, @in6=@empty, 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x4d4, 0x32}, @in=@empty, {0xfffffffffffffffe, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x3, 0x20000000008, 0xbdf}, {0x0, 0x8, 0xcc}, {0xf6, 0xfffffffe}, 0x0, 0x0, 0xa, 0x1, 0x1}, [@algo_aead={0x5f, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0x98, 0x80, "9f0e05ffa97a205ca8f86e8c52fb1b133b7675"}}]}, 0x150}}, 0x0) 1.247218019s ago: executing program 0 (id=5139): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x2c, r1, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x40}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x110}, 0x0) 1.246660575s ago: executing program 1 (id=5140): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r1, &(0x7f0000000200)}, 0x20) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) select(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) (async) syz_emit_ethernet(0xfc, &(0x7f0000000080)={@local, @local, @void, {@llc_tr={0x11, {@llc={0x0, 0xfc, '>', "b85af9ae59229d66f80b9378750f21a4a701a772d4a20227527df8ad5d07425e6441eff0671197796d08908e0cdac8ab56e22097a5f0dd118b04f2e000369c0a9024863d691622a6308d43b1c45183f04bd798290f289abf1d6ac45c9e57dd646e278148e994206e20c7f872442fc71a2f59efe107b3fa79f7d54c0143f0b6b14bdd8bb51ad6a90bda4812de821af7d9da575a900ae45abc6b464e6c5e5b49b0a0220744e21f7909155b45c3a2334f02dfd72e0eba94eb0b7885bddb02c9c182bfac2782f882915eba9f14701eae02429e710e8d5d19f711e62a005352015d7a053cfdf6c40658503f8878"}}}}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newnexthop={0x2c, 0x68, 0x1, 0x100003, 0x80010000, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008000}, 0x801) 1.219961349s ago: executing program 3 (id=5141): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x1e, 0x1, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x0) close(0x3) connect$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x2, {0x2, 0x1, 0x1}}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)={0x100, r4, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0xb8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x529c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8}]}]}, @TIPC_NLA_MEDIA={0x34, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x60f3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x44000}, 0x24004001) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r1) getsockopt$sock_buf(r1, 0x1, 0x1c, &(0x7f00000000c0)=""/126, &(0x7f0000000040)=0x7e) connect$vsock_stream(r1, &(0x7f0000000040), 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x38, 0x3d, 0x107, 0x70bd27, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @pid}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x117}]}, @typed={0xc, 0x7, 0x0, 0x0, @u64=0x100}]}, 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) 1.043424627s ago: executing program 1 (id=5142): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x2c, 0x11, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_OP={0x8}, @NFTA_EXTHDR_DREG={0x8}]}}}]}], {0x14, 0x10}}, 0xb0}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000000406010200000000000000000200000805000100070000000900020073797a3000000000e57ab249d901e6fcd28f6efdcc4b53b63a24d00c13ceaf8400be42043c09309270c01a4b1b229a0d4037ce28df5afa2820f89424ff50d96d97d034f24cfdfadf0c"], 0x28}, 0x1, 0x0, 0x0, 0x40800}, 0x20040040) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x10, "00000010000000001000000000001010"}}}]}, 0x48}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0xe, &(0x7f0000001880)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', r4, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 968.195237ms ago: executing program 4 (id=5143): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r0 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000001580)={&(0x7f0000001340)=@hci={0x1f, 0xd00, 0xe}, 0x80, &(0x7f0000002540)=[{0x0}], 0x1}, 0x20005) 935.03514ms ago: executing program 2 (id=5144): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x12, 0x3, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002c40)=ANY=[@ANYBLOB="1c0000002400010122bd7000024b715294221d0c0800030047"], 0x1c}, 0x1, 0x0, 0x0, 0x449d7}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r3) sendmsg$IEEE802154_ASSOCIATE_REQ(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r4, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_CHANNEL={0x5}]}, 0x2c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 912.874993ms ago: executing program 3 (id=5145): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000140)=ANY=[@ANYBLOB='-7f'], 0x9) r2 = accept4$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x80800) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0xf}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8035}, @TCA_FLOWER_KEY_ARP_SIP={0x8, 0x39, @broadcast}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000014}, 0x20084084) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000001ac0)=0x0) r8 = socket$inet_icmp(0x2, 0x2, 0x1) sendmmsg$sock(r2, &(0x7f0000003bc0)=[{{&(0x7f0000000280)=@ll={0x11, 0x4, r3, 0x1, 0xe, 0x6, @broadcast}, 0x80, &(0x7f0000001500)=[{&(0x7f0000000300)="b33a1d437e25d0f1d6417a5f1e79e63c7cfbaf3318167e53e457e5936e7ed3dbd488263631af467faeea637c4a8b68a92d441ecd686c3d2b60aa42e061a0aac74a0ec574fe2290e2e333ed9db0c2c4c36660cdf85d06986ef7bc9f88dcd63e3e0f3e8cae8f636ffdf8e44a1c1504f5ec123a348fcac0ce2df124e19d34681b8853e594945b8cb49089135808b6d441", 0x8f}, {&(0x7f0000000100)="cf60f4521247fcfe1b941dea49799d08a7011298cf87efd9ecf33f2f97a361efacaaa8f435dbf82d497c", 0x2a}, {&(0x7f00000003c0)="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", 0x1000}, {&(0x7f00000013c0)="d3b3549feb4a00f4cda9ef4bda5f60a23aa5b6e55a83b284e7bfeaabab98cdad239be5bd64c96104a21ab7683b3ad31ba9de4c7f5da982c72b932657dc19da293f4d18ce60c0ce888678a8c91617553f99c355ab6363c4934174d28da708718bbd9a3f23178409523e81135a9a134d6704446c0026dfbaf1b31dc576509696f8a4112909340c05d9a8cc9531801b32b8584a1824574ccc29a91f856a9856918b6853f27d41d99531a7114958a755b2b4b856467dcee26f1593a32362f9bd7ce6709e94326b90544e4ec745d0cc13ad7f42a6cb4afc22fa5ee9e21bfd1bfe2775cf3ffd607ce9c49cb88656a41b292c7b4debf302d00f5b26ce", 0xf9}, {&(0x7f0000000180)="621730bfae14e772047ee89db34702fa60af8c3295bf5b28fe723db81e95a922719a057a9be2485b3384ad23b4", 0x2d}, {&(0x7f0000000200)="9d", 0x1}, {&(0x7f00000014c0)="7ce348d2d07a6f25b00ce4a37ea84b2e8ba0d567479e71cc17288a45895391b9bec14bc4f4d8abdf9c83", 0x2a}], 0x7}}, {{&(0x7f0000001580)=@xdp={0x2c, 0x7, r6, 0x19}, 0x80, &(0x7f0000001a00)=[{&(0x7f0000001600)="ee95ca26b6b0a3259f43afc417e0bc", 0xf}, {&(0x7f0000001640)="fca4e3f5db8dffe80d", 0x9}, {&(0x7f0000001680)="fc9b6e556cd9d071e72dcdaf9553c8f6b2fe50cb1491f89ac3092c211a34a11a13bf52d2b6f77154fcdcf4fec11c3e71a0de1c211d2d7387c476f34fc7194dfa19cb6daa537d2ccdfc88e7259ef305607c35845aafdf9bcf7d4c", 0x5a}, {&(0x7f0000001700)="6ba179dda9ec07c5ad47843a16fd212e7c3c9fe4d001c1423addfbb52327dd5d5dcf661900b2ec524aa1d89695df5501baaefac19af31a208f2f894f729d5df2c74be452e8007083326f3fbb033c31220c65464e0d9d8af40e6cd7e05b61bc5fa61dfdbd114e07d26c5d6de414e346c10d7c367cb3e77f17944d1b6fd70207b239f810b883e75d7b5563dc9b52673fbd3367afb553e2e9f6df0eb525c922a8b896a088133493264e31e4c119a7df9a93981399ce58a710b97fb3ef43b41456ad47d21e411ba746f3", 0xc8}, {&(0x7f0000001800)="62cd4fcc6944d0f56c971d30c1e84f70ba166bb06c04ef68dab8d3d7631efdd4feedc2556a9f0f309a39b0d5f35329369920f9ba6a581576358009fa89f3fddd642b6211fa0fc5d958a4e6538079efce319cfa839a60ce311f8540d2a07cd61f2d80c43812e123736d4037f2ace1c38bb2c2f62d71d79b5f397df56edbf5920e3538", 0x82}, {&(0x7f00000018c0)="54ee5525bd79eece7017892c6580e476490ebd6da6c29a56893618052f432b2c22baa6c8abb227ada9c5f551b2ab971b205541f1e35454ae9ad98ef3be27b3298f2567a9b44225d53089b7a3b3938bdea129323138e2bc5e0640575103ad9dedc4ef928c256803be1b018875fc56a7a0d449ee7c7390d8b041354f1f93122b3f43ef2024db3852239107c1dc0c978976cfb629045a2ce8577799f29659591a7484e5ac8970c1cf7b4713d862fd", 0xad}, {&(0x7f0000001980)="97fa0ccc098f1dafc3c4116467cf8e0e324ec774854c1e8b828ec0e7914d7c469c2ad899ab769c4bf1ceebab259bbca0d9d16e0f3ba75d0013039b9620d08b5160dc3d3fdaeb8b70d8aec01499e7942176371894bed8a44d76c50f5b8f2a232f4ecdccfe12c53f9b15f551a02a87ae61b3e8f28d6e6804d43485eb", 0x7b}], 0x7, &(0x7f0000001a80)=[@mark={{0x14}}], 0x18}}, {{&(0x7f0000001b00)=@nfc={0x27, r7}, 0x80, &(0x7f0000002d00)=[{&(0x7f0000001b80)="447045bbe0e4b59843e8773fcfc3d6cbcbde21b2b2c00c440ac2ada3db2d3b701c89e59d584318b51d0ac5a264f2a76dfe5da427229ac5643754a7a40b39b4a7866ea313434b54bcde7f6c7ce74422c7652dbebcb80211", 0x57}, {&(0x7f0000001c00)="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", 0x1000}, {&(0x7f0000002c00)="7287466a7f880466ce82cd113395ae304c5471f9e42e6296d677a7cd7c29d33b06ff48cf9f0be9fbc5a795f837f46ef17be4f74d4256002a29bb91adf2812dd4ada6b61486a2de33800f412697718c29f6d74e822b164c1850397161222b4ffc53310139f4b83a2177f851dde0c5a313b69abb12fa126645caa04bf4bdd9fc4ee4577df34c0f8861911eb29670d175ac49d455ca06a35ee838c9b18f9db81821388fcfd0b29718aef6f3a62a0b6c7c4ad3cfee3fe55198ede8ae54e66dd36718966916572473fc0ae9", 0xc9}], 0x3, &(0x7f0000002d40)=[@mark={{0x14, 0x1, 0x24, 0x2}}, @mark={{0x14}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}, @txtime={{0x18, 0x1, 0x3d, 0x1ff}}, @mark={{0x14, 0x1, 0x24, 0x40}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0xf9}}, @txtime={{0x18, 0x1, 0x3d, 0x100000001}}, @txtime={{0x18, 0x1, 0x3d, 0xfffffffffffffffe}}], 0xd8}}, {{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f0000002e40)="d1d72100ae108a241b2e04abb85eaa91400a57d8b9d476adabfee3e11a60a7dd92660bdb519edea77e1128af36ad775227e51b7db45b9a8e84026519b554f3756fbd24569fef98b579563b21a91f202b4902791a4dde9c24f861b96ed05072ea00e280bff99738c29a6a83cc6b922cd2088bb0d7ed04ff5d649ca2918b0b1aa40acc3e6a538f9cc1874e6958e6e0907dd24537ce259459b1782e59dbeb8fb88a4ce1cd0c15fc615ff5183a5b78447216de925787b2c89dfaf0f5fb9f5e88936ac4007f0651df07c5893ab02a08c94f7fdab738447c0ae059ec4d2a", 0xdb}, {&(0x7f0000002f40)="a2266b9447d7ac03f43a6c3596dd7a101b0b1f7f82e362fff9f225c6f0b0b1f7902eb12df37ed80220256a97c1849cceba7419ac962eff9842c8", 0x3a}], 0x2, &(0x7f0000002fc0)=[@mark={{0x14, 0x1, 0x24, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x66}}, @timestamping={{0x14, 0x1, 0x25, 0xffffff01}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}], 0x60}}, {{0x0, 0x0, &(0x7f0000003400)=[{&(0x7f0000003040)="bcabb095ac093104084c4537fcd7b6831f868c39a698ce2144f0fc5bf8201277de1ff9de408877a1ee3c7d98284b9a330e1edc8f1b04a6c819b87d0c53fb009781913a766dc8303ac1ca407f1ec969e9f6aaa7f2a3bbb4c7ac51fc4d6b3e003552d50ef1478c66efd2a36ab6c4f71c6ca734a444a6", 0x75}, {&(0x7f00000030c0)="2aeb6f0d1c08692d6399e9d1747def3cc3f4be57fa9b6963590dea0761e52928df5e82d97b55353684b9d64a398c9ae802154b88adf1c6df3623f2f0898db70453b5094c5ff9e592c30a1fccae8b7003c1352becfe2e35cfe8320a17899e9aa5e5151e005b976e6b367c8e0abe8e8607e0ef7b0779b815fce55ffac9bd4148a2a20701a5e5944f86be03d45ebd15ed32f02bfff41e5a743a9c82914843f28a55a6b7ee04f5d11e60958a32ae94e071a9f21b12fd0a09aa36920d24a4969e3209e2f9945551fcc247de", 0xc9}, {&(0x7f00000031c0)="aa7bac845b80c4585df2daa71593b9eaad1b3f8362a7e6be337a63f76df810c0a8f7af29376a7553ed5bd7b5afa8102f9a66ad9239d41d8404a293416409ed1215f66626ca0d6c2e07b4412bc8ce1cb63c07a9c1454ea49545ff9ac6c8f5af7b926d00cd33ab9cec2d0af1f6bdd3232e30191d17bb474d19ae414a7858647dcedc19454150358215625b5b4587dc447a44f2fd87e1538cb39ec7cb30bfdd2eaa751132046ae59425513a9e34f5702db91387de05e19727bf8484996fe832", 0xbe}, {&(0x7f0000003280)="f7e46e0d364ed952e8898af2f399b1d9cd31f8526faee2561e536760627341fa3a83b907d3ab6ddcf7f143ca2c4cb64b629be6c39fb241fda24c7366c216d1990c190d757d6c22", 0x47}, {&(0x7f0000003300)="83b57d35ea0665a4d54f1b8f621a2a679753c62866f4de1f48d0a8dee295eafe837efa32b6597619f31a34c56e7300d2b6d5a88651b812089cceb66d46cf9fd6a15f41990817bcbf80de4719bf2a074bc2bd02448a7e6d416b8c85cec35fafe991706fe853374735ad1e30f9082b2d3f43cbcbc46abb9709efbb25fe1110cbaef2acfca924c217e2702dbf429f1dcc89bede71aeb9f8342fc17ca0ab874e072a253daae49090", 0xa6}, {&(0x7f00000033c0)="63ecbf0f7a877123eecbba6645ad6fe01b", 0x11}], 0x6, &(0x7f0000003480)=[@timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x18}}, {{&(0x7f00000034c0)=@pppol2tpin6={0x18, 0x1, {0x0, r8, 0x1, 0x4, 0x1, 0x2, {0xa, 0x4e24, 0x9, @dev={0xfe, 0x80, '\x00', 0x25}, 0x9}}}, 0x80, &(0x7f0000003a80)=[{&(0x7f0000003540)="32d2618cd413e1aebb15772351b7b820648689dcf300f39794014e0faebc8f65041ae40e6c587e34c600beacd3b3b34a930eb0a8c697ca200b0f2c32d0781e3664c3f94c1defeb1bea95620bbe4291e7b5ae61ff4484c3411a00a3a076b104af615577ecf1a5bef1a3127243013ec2a6568a8130904be6706d189483e66302e3efecdcfb5ed1682942c4d9a903b4a40c13fc990fbf1a293eac7d99ee4953", 0x9e}, {&(0x7f0000003600)="8cfb28ebc0a1f574102036f187e9cdf31bed2577fd906c6dbc00d8ec1a6b7e2ff611faeb8063c52a286846ce16fcc3bb3410a9ff2c713f4b6da52ce60a2d7d022ada8c05393ad2b246bb30fa74dcbcae19", 0x51}, {&(0x7f0000003680)="0e1299494e634b2641a37f5898ed114a9322d84b13fcfe2baf938287655cffd4cbf750bcf16450753a414313581f3ab6c031ece904af3166cc10f7c5668d2609a7db373b99ab2c88cba5f714c05b66f42933b1e3aac16d2f72c5929d27dacbe52a09f8916802847459e9159c33e44b06a9299990359005bba1199b02287edde0cfc506c14bf054d9ec3c462550bc37890764da8aa1de02f7e636b8b897732eb370da05f8f8311f79a28a456c5495a2267cdaa91cf4965818509f21b553d085a659010d82fadee495a1707b3e6203405dbf333e8a9eb508031a5aaf4afaba7bb6838953814f277a579ac5ee70b8dd346c", 0xf0}, {&(0x7f0000003780)="6c0baf444ab293eb5b74d894843968fc4e53f2437e019f01f958fe58a48f4924fd360d73c6adb3c66d24535357f80203f37933d1af7613621562886f2bd2c72f74d4751222adb58ed9241867770191241b67605c42f2bb4c912fe08a069e874305626eb230d42ecdb76df766abc692ae862151ed674211f764feb4aedec7d9c40e088b533c2d794e9c260fd74bfa41bd9adf453ec14b061db5e637ea355f048b0780f7c4088d36d054d5f983ce54286feab7d3ae7b161d9b7cb2e3901d9e8cc49a5a03f0620b893ff3cd54d926eabdf4aac0950d091dff01772c40c22a654aa51ff4", 0xe2}, {&(0x7f0000003880)="5847c705bf92948b432fa0561e219c6c06fd499c27f6194d1fadcb175af92a2efba7", 0x22}, {&(0x7f00000038c0)="c79d4f9555bb5f05f9", 0x9}, {&(0x7f0000003900)="aae478569cc454262fdd0c6f89e4ca68cf921ce77e755635fbb7e1fd0ffa8d322ce2bd7e1f3fd3bbbd2d2c5cc002e8ab3acf96260b889c9d12139c1a005b1d502ab8b9b3b11ea1b1d3446ad6975ad01eae69655944d1991938d19168ad94f4d4538766a47f42f9ce9edec2831f7d9dfac4985cc1fd887ad51895b67258018e7d708da6bc60c6977ce62bc24a11ab0bd142cc83430c409211963f25b2ac808fae844b90b03ceeac0105", 0xa9}, {&(0x7f00000039c0)="24022040a8bac3567dc9bb26971d2c9cdf78494b202572d7195a834f834e293ac550ae23b80229f50a2192f06c0bf0104817cd5e9f6d18c2f71c9cef1eba4234211983a3beb6e00f55aa892724a5c3497a72ccb841132c80acee192a3e72b0f65e124937cb5f3849dc431d5633b1d7eb531f853be30ef52027db348974865597061214e8e176dd77fad5c25d0e3f7d53d6179dad9aaa87745b779fab7f7f1e4c5f4b0db13b862d92473558", 0xab}], 0x8, &(0x7f0000003b00)=[@mark={{0x14, 0x1, 0x24, 0x5}}, @mark={{0x14, 0x1, 0x24, 0x5}}, @txtime={{0x18, 0x1, 0x3d, 0xfffffffffffffffd}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0x455a}}, @txtime={{0x18, 0x1, 0x3d, 0xfff}}], 0x90}}], 0x6, 0x20040805) syz_emit_ethernet(0x4c, &(0x7f00000001c0)=ANY=[@ANYBLOB="0180c20000006c06e3bcee5586dd6001010000161100fc020000000000000000000000000000fe8000000000000000000000000000aa00000e220006"], 0x0) 864.783508ms ago: executing program 4 (id=5146): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0x401c5820, &(0x7f00000004c0)={0x0, 0x0, 0x5}) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000011c0)={@map, 0x1, 0x1, 0x8001, &(0x7f0000001080)=[0x0], 0x1, 0x0, &(0x7f00000010c0)=[0x0, 0x0], &(0x7f0000001100)=[0x0, 0x0, 0x0], &(0x7f0000001140)=[0x0, 0x0], 0x0}, 0x40) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000001240)={r2, 0x8, 0x100000000, 0x8}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001200)={@fallback=r0, r3, 0x2, 0x4004, 0x0, @void, @value=r5, @void, @void, r4}, 0x20) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r6 = accept4(r2, 0x0, 0x0, 0x80000) recvmmsg(r6, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000680)=""/242, 0xf2}], 0x1}, 0xebea}], 0x1, 0x40000001, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c000000020201040000549c000000000700000718000a800800014000000000040002800800014000000011"], 0x2c}, 0x1, 0x0, 0x0, 0x874c8455725ed668}, 0x200480cc) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b40), 0x2328}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001000)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xe}, {0x0, 0xffff}, {0xe, 0xfff1}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x4000801) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x40, 0x2c, 0x605, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffe0}, {}, {0x5, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x0, 0x6}}]}}]}, 0x40}}, 0x20004084) r7 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8000}, 0x8) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, 0x0}, 0x20) getsockopt$bt_hci(r8, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) 834.927343ms ago: executing program 0 (id=5147): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_PROTOINFO={0x8, 0x5, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x4}}]}, 0x6c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)={0x34, 0xa, 0xa, 0x101, 0x0, 0x0, {0xc12735cdef08d58c, 0x0, 0x7}, [@NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x41}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_EXPR={0xc, 0x11, 0x0, 0x1, @osf={{0x8}, @void}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24048040}, 0x20000000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0100000000000000000001000000080001005e4e2cbab865352dda7af1b133661ca5cab3", @ANYRES32=0x0, @ANYBLOB="3c00028038000100240001006e6f746966795f70656572735f636f756e74000000000000000000000000000005000300030000000800040000000000"], 0x58}}, 0x20004041) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="140100001400210200000000fcdbdf2502"], 0x114}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, 0x0, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(r5, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'sh\x00', 0x0, 0x60000000, 0xc}, {@rand_addr=0x64010102, 0x4e26, 0x3, 0x0, 0x8001, 0x1}}, 0x44) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x20, 0x2, 0x1, 0x3, 0x0, 0x0, {0x0, 0x0, 0x1}, [@CTA_HELP={0xc, 0x5, 0x0, 0x1, {0x5, 0x1, '\x00'}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1b, 0x3, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x8000000}}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCBRDELBR(r3, 0x89a1, &(0x7f0000000080)='ip6_vti0\x00') sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000049000000080081d2e5b5a3635ebb01006e657464657673696d1600000f0002466e657464657673696d300000"], 0x3c}}, 0x0) 818.460905ms ago: executing program 1 (id=5148): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newsa={0x13c, 0x10, 0x413, 0x0, 0x0, {{@in=@multicast1, @in6=@empty, 0x0, 0x20, 0x4e24, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x4d4, 0x32}, @in=@empty, {0xfffffffffffffffe, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x3, 0x20000000008, 0xbdf}, {0x0, 0x8, 0xcc}, {0xf6, 0xfffffffe}, 0x0, 0x0, 0xa, 0x1, 0x1}, [@algo_aead={0x4c, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 761.613359ms ago: executing program 2 (id=5149): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d5000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0xd7a18000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="14010000350001000000000000000000010100800c00010000000000000000001400030020"], 0x114}], 0x1}, 0x0) mmap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x1000000, 0x12, r1, 0x80001000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x4}}, @TCA_MPLS_BOS={0x5}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r5, 0x0) mmap(&(0x7f0000692000/0x1000)=nil, 0x1000, 0x0, 0x12, r3, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) 760.960256ms ago: executing program 4 (id=5150): bpf$ITER_CREATE(0x21, 0x0, 0x0) (async) bpf$ITER_CREATE(0x21, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000002b80), r0) (async) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000002b80), r0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000002bc0)=ANY=[@ANYBLOB="cc000000", @ANYRES16=r1, @ANYBLOB="01ad00000000fbdbdf25170000000c00058004000280040002805400068004000300080006002000000008000600020000003c00040067636d28616573290000000000000000000000000000000000000000000000001400000050e858cb"], 0xcc}, 0x1, 0x0, 0x0, 0x20000040}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000061115c000000000006000000000000009500000c00000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x3c) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0xc, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1e, 0x7, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xbd5}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}]}, &(0x7f0000000180)='syzkaller\x00', 0x10000, 0x35, &(0x7f00000001c0)=""/53, 0x40f00, 0x5, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2, 0x9, &(0x7f0000000200)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000240)=[{0x4, 0x5, 0xe, 0xa}, {0x3, 0x4, 0x3, 0xc}, {0x1, 0x2, 0x9, 0xb}, {0x2, 0x4, 0xc, 0x1}, {0x3, 0x3, 0xb, 0x4}, {0x2, 0x2, 0xb, 0xc}, {0x0, 0x2, 0x0, 0x4}, {0x4, 0x1, 0xf, 0xb}, {0x4, 0x2, 0xe, 0x6}], 0x10, 0x1}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000100), &(0x7f00000003c0)=r4}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000100), &(0x7f00000003c0)=r4}, 0x20) 698.100953ms ago: executing program 2 (id=5151): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f533d9ec21100a657b0700", 0x10) 620.211683ms ago: executing program 4 (id=5152): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc00006000000080002000500000014000600ff01000a00f2f3f31f000a0000000001"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, 0x0, &(0x7f0000000180)) sendmsg$NLBL_MGMT_C_ADDDEF(r0, 0x0, 0x4040000) 602.784219ms ago: executing program 0 (id=5153): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x38, 0x3d, 0x107, 0x70bd27, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @pid}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x117}]}, @typed={0xc, 0x7, 0x0, 0x0, @u64=0x100}]}, 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) (fail_nth: 14) 598.547979ms ago: executing program 2 (id=5154): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x4000, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r5, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)={0x24, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r7}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="976b64087c6030"]}]}, 0x24}], 0x1}, 0x84) r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000340), 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000300)='sys_enter\x00', r8, 0x0, 0x3}, 0x18) sendmsg$nl_generic(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000002dc0)={0x12d0, 0x2d, 0x400, 0x70bd2d, 0x25dfdbff, {0x6}, [@nested={0x1118, 0xde, 0x0, 0x1, [@nested={0x4, 0x124}, @generic="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", @typed={0x8, 0x79, 0x0, 0x0, @u32=0xffffff00}, @typed={0x8, 0x149, 0x0, 0x0, @uid=r7}, @generic="955df114e08648dc967a271c220622a4ad4f6023b355d6f0a758e5c239932ababf42dc583a4d3e5b0a72bf8c1036dfd0409b7232f80c0daeda8c4e66e046128e45076776b3a93a48ced785624f1f2cb64a665186b0192aedbb3ad86f6dd363887a59449ed479debef7bacc0c2c35f5aaa391887690de2cb8f9fbbe9aff5df1c29509a93d2db76b6b18b86a5a6a35a53566a6d5bb84fe992e3f9101e96a4c5a703be1eaa3a34735b62f224fa1254d5f98aa9e6929bfd3f6bb87a689df27ac8bfdd1e60a442a2a40e8a5749aa2660cf161043357f32a9b92eec5769ae3053f9c546e41e5332eaf135e87867b2c178405", @nested={0x4, 0x125}, @generic="14ae54805943a93f2f", @nested={0x4, 0x145}]}, @generic="1e6d8531c733d68d11742e90be20c5024a81458336e64e3be5ec309d0773c85c312c68e0fc6a9feb273c1f70740374ec68fa3170e6195d1eefadb4da5579a6968767aad642b2c95bbda6fc1338d41d53e069767e872a8ad016b06346b94f80c45d190d50125c03df6698b5", @generic="01332629151b79e3c23579cdb2ef3163a0aacee1180404a3eba4cb4386b1e190dc706abdb454f07b878839e0d685631eae247e8086a65000e1fcb2488b6c39f0c748f3e9c8bc01507edad8bc14b40e58f7ffc6466ce8b4a0f376d137ddc1b02d8b127058541c0d609c2e69817608e04f274315822139a5d4f4b0d8a6d9db764d23916cb6c3309074cf0e49e7b80f40014d2299a46d89557a802e0d5c8f6c", @generic="4ebe7afb4d66da922e482e8cf1ececbf61f75905524a07777d4677d8bf63bf371d53dd1340884ffa84773beb355dc4a8744e61fc0d2f497f9692ee92d45695cafcc729a8080b5c912e18a5f80e5c4c56a408db62c34f2e44d2a258b413de2cadfa43ab0167461f1cee0bcf73a1ffad396bda807bebd539047de6b7984ccf035c9e94c512bc77897688b30025b369274cad0e868a369ee547ce"]}, 0x12d0}, 0x1, 0x0, 0x0, 0x4000094}, 0x4000) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r9, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000100)=ANY=[@ANYRESOCT=r0], 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000002d00)=@newtfilter={0xb4, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_u32={{0x8}, {0x88, 0x2, [@TCA_U32_SEL={0x74, 0x5, {0x5, 0x6, 0x6, 0x5, 0x400, 0x2, 0x1, 0xc, [{0xfffffff9, 0x9df8, 0x5, 0xfffffffe}, {0xfff, 0xabac, 0x5d9, 0x6}, {0x7365, 0x200, 0x2, 0x3}, {0xaa2, 0x80000000, 0xc06f, 0x8001}, {0x9, 0x8001, 0x80, 0x7ff}, {0xc00, 0x23e, 0x10000, 0x2}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0x1, 0xfff3}}, @TCA_U32_LINK={0x8, 0x3, 0x5}]}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x50}, 0x0) bpf$MAP_LOOKUP_ELEM(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, 0x0}, 0x94) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001480)='./cgroup/syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r10, &(0x7f00000000c0)='syz1\x00', 0x1ff) r11 = openat$cgroup_ro(r10, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r11, &(0x7f0000000200)=0x1, 0x12) 524.591253ms ago: executing program 1 (id=5155): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f00000000c0)=0x4, 0x4) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f00000005c0)=ANY=[@ANYBLOB="8510000004000000950000000000000018000000000000000000000000000000950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r3, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, &(0x7f0000001680)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote, r2}, 0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newtfilter={0x2c, 0x11, 0xd27, 0x2000, 0x0, {0x0, 0x0, 0x74, r2, {}, {0xafabc05531515610, 0xfff3}, {0xf, 0x5}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x9}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x1c005}, 0x4008054) setsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000040)={@remote, r2}, 0x14) 499.18496ms ago: executing program 4 (id=5156): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000040000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000015c0)={0x6, 0x0, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x82, 0x1000, &(0x7f00000005c0)=""/4096, 0x41000, 0x28, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x6, 0x4}, 0x8, 0x10, &(0x7f00000002c0)={0x1, 0x5, 0x7ff, 0x4}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000300)=[0x1], &(0x7f0000000400)=[{0x3, 0x3, 0x10, 0xd}, {0x5, 0x4, 0xe, 0x7}, {0x2, 0x1, 0x1, 0x5}, {0x1, 0x1, 0x3}, {0x1, 0x4, 0x2, 0x4}, {0x1, 0x2, 0xc, 0x3}, {0x5, 0x3, 0x9, 0x4}, {0x5, 0x2, 0x6, 0x8}], 0x10, 0x2}, 0x94) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000a80)={0x3c, r3, 0x1, 0xfffffffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xfb2e77a8993c191f}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}]}, 0x3c}}, 0x20000000) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x1c, &(0x7f0000001700)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRES8=r3, @ANYRES32=r0, @ANYRES8, @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000008000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000001b00)={0x14, 0x5, {0x6, @struct={0x54c, 0x100}, 0x0, 0x5, 0xfffffffffffffffe, 0xc, 0x2, 0x5, 0x2, @struct={0x7, 0x2}, 0x7, 0xa, [0x4, 0x8, 0x7, 0x6, 0xfffffffffffffffc, 0x6]}, {0x7ff, @usage=0x1, 0x0, 0xf6, 0x9, 0x7, 0x4, 0x7f, 0xc, @usage=0x6, 0x6, 0x5, [0x6, 0x400, 0x5, 0xbef3, 0x40, 0x2]}, {0x32a0, @usage, 0x0, 0x0, 0x1000, 0xffff, 0x2cc7, 0x57a8, 0x0, @struct={0x4, 0x6}, 0x868, 0x80, [0x8, 0x4, 0x883, 0x2, 0x3, 0x8]}, {0x9, 0x80000001, 0x1}}) ioctl$BTRFS_IOC_SCRUB(r4, 0xc400941b, &(0x7f0000001f00)={r5, 0x4, 0xee}) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYRES8, @ANYRESDEC=r6, @ANYRESOCT=r7, @ANYRES64], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4028844) 489.123131ms ago: executing program 3 (id=5157): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) bind$packet(r0, &(0x7f00000000c0)={0x11, 0x6, r1, 0x1, 0x1, 0x6, @random="8f933f8788bb"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c0001e003000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r1], 0xb4}}, 0x0) setsockopt$PNPIPE_HANDLE(r2, 0x113, 0x3, &(0x7f0000000040)=0x8, 0x4) socket$packet(0x11, 0x2, 0x300) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async) bind$packet(r0, &(0x7f00000000c0)={0x11, 0x6, r1, 0x1, 0x1, 0x6, @random="8f933f8788bb"}, 0x14) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c0001e003000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r1], 0xb4}}, 0x0) (async) setsockopt$PNPIPE_HANDLE(r2, 0x113, 0x3, &(0x7f0000000040)=0x8, 0x4) (async) 352.996906ms ago: executing program 2 (id=5158): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=@newsa={0x15c, 0x10, 0x413, 0x0, 0x0, {{@in=@multicast1, @in6=@empty, 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x4d4, 0x32}, @in=@loopback, {0xfffffffffffffffe, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x3, 0x20000000008, 0xbdf}, {0x0, 0x8, 0xcc}, {0xf6, 0xfffffffe}, 0x0, 0x0, 0xa, 0x1, 0x1}, [@algo_aead={0x5d, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0x88, 0x80, "9f0e05ffa97a205ca8f86e8c52fb1b133b"}}, @offload={0xc}]}, 0x15c}}, 0x0) 349.253118ms ago: executing program 2 (id=5159): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xe0}}, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x3f}, 0x1c) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, 0x0, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002fc0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000003000)={0x14, r3, 0x1}, 0x14}}, 0x0) 0s ago: executing program 0 (id=5160): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000002b40), 0xffffffffffffffff) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) (async) recvmmsg(r2, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}, 0xaf0}, {{0x0, 0x0, 0x0}, 0x2041}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000600)=""/213, 0xd5}, {&(0x7f0000000900)=""/223, 0xdf}, {&(0x7f0000004100)=""/4086, 0xff6}], 0x3}, 0x200ff}, {{0x0, 0x0, 0x0}, 0xb}, {{0x0, 0x0, 0x0}, 0x1ff}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)=""/114, 0x72}, {&(0x7f0000000c00)=""/229, 0xe5}, {&(0x7f0000002a40)=""/4109, 0x100d}, {&(0x7f0000005100)=""/4065, 0xfe1}, {&(0x7f0000000080)=""/110, 0x6e}, {&(0x7f00000004c0)=""/188, 0xbc}], 0x6}, 0x8}, {{0x0, 0x0, 0x0}, 0x9}], 0x8, 0x40010020, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x54, r1, 0x1, 0x70bd2a, 0xfffffffe, {0x6}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x958}, {0x6, 0x16, 0x794}, {0x5}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x24008004) kernel console output (not intermixed with test programs): Possible stuck request ffff888025347380: control (read@2048,1024B). Runtime 120 seconds [ 513.671133][T19298] block nbd1: Possible stuck request ffff8880251ee000: control (read@0,1024B). Runtime 150 seconds [ 513.677954][ T56] block nbd6: Possible stuck request ffff888025347540: control (read@3072,1024B). Runtime 120 seconds [ 513.699674][T19298] block nbd1: Possible stuck request ffff8880251ee1c0: control (read@1024,1024B). Runtime 150 seconds [ 513.699708][T19298] block nbd1: Possible stuck request ffff8880251ee380: control (read@2048,1024B). Runtime 150 seconds [ 513.724481][T19298] block nbd1: Possible stuck request ffff8880251ee540: control (read@3072,1024B). Runtime 150 seconds [ 514.100342][T21142] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4376'. [ 514.134671][T21142] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 514.574910][T21162] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4381'. [ 514.586105][T21163] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 514.605636][T21165] netlink: 'syz.0.4382': attribute type 29 has an invalid length. [ 514.618974][T21165] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4382'. [ 515.067334][T21191] openvswitch: netlink: Message has 143 unknown bytes. [ 515.174222][T21200] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4394'. [ 515.203238][T21202] IPVS: set_ctl: invalid protocol: 2 100.1.1.1:20001 [ 515.236258][T21200] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 515.257098][T21200] batadv_slave_0: entered promiscuous mode [ 515.269505][T21200] batadv_slave_0: entered allmulticast mode [ 515.306157][T21208] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4395'. [ 515.371046][T21200] bridge0: port 4(ipvlan2) entered blocking state [ 515.387978][T21200] bridge0: port 4(ipvlan2) entered disabled state [ 515.409763][T21200] ipvlan2: entered allmulticast mode [ 515.425333][T21200] bridge0: entered allmulticast mode [ 515.446052][T21200] ipvlan2: left allmulticast mode [ 515.455298][T21200] bridge0: left allmulticast mode [ 515.501732][T21216] 8021q: adding VLAN 0 to HW filter on device bond3 [ 515.510793][T21216] bond0: (slave bond3): Enslaving as an active interface with an up link [ 515.663830][T21230] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4402'. [ 515.857745][T21242] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 515.874649][T21244] delete_channel: no stack [ 516.173546][T21268] veth0: entered promiscuous mode [ 516.186509][T21265] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 516.220140][T21267] nbd14: detected capacity change from 0 to 127 [ 516.238159][ T5833] block nbd14: Receive control failed (result -104) [ 516.317079][T21261] veth0: left promiscuous mode [ 516.359138][T21280] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4417'. [ 516.445635][T21285] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4421'. [ 516.527898][T21292] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4423'. [ 516.678052][T21301] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4428'. [ 517.280161][T21340] af_packet: tpacket_rcv: packet too big, clamped from 2906 to 4294967272. macoff=96 [ 517.781129][T21368] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 517.795685][T21367] netlink: 256 bytes leftover after parsing attributes in process `syz.2.4449'. [ 517.808878][T21367] netlink: 'syz.2.4449': attribute type 9 has an invalid length. [ 518.398960][T21386] siw: device registration error -23 [ 518.517227][T21390] macvlan0: entered promiscuous mode [ 518.534272][T21390] batadv0: entered promiscuous mode [ 518.551323][T21390] debugfs: 'hsr1' already exists in 'hsr' [ 518.559008][T21390] Cannot create hsr debugfs directory [ 518.565323][T21390] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 518.576951][T21390] hsr1: entered allmulticast mode [ 518.584955][T21390] macvlan0: entered allmulticast mode [ 518.599738][T21390] veth1_vlan: entered allmulticast mode [ 518.613308][T21390] batadv0: entered allmulticast mode [ 518.624895][T21390] macvlan0: left promiscuous mode [ 518.648191][T21390] batadv0: left promiscuous mode [ 519.465272][T21454] netlink: 'syz.4.4477': attribute type 12 has an invalid length. [ 519.546528][T21454] bond3: option primary_reselect: invalid value (255) [ 519.555928][T21454] bond3 (unregistering): Released all slaves [ 519.654640][ T5148] Bluetooth: hci2: command 0x0405 tx timeout [ 519.800148][T21470] nbd15: detected capacity change from 0 to 127 [ 519.804370][T21473] __nla_validate_parse: 1 callbacks suppressed [ 519.804387][T21473] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4483'. [ 519.810578][ T5833] block nbd15: Receive control failed (result -104) [ 520.046283][T21489] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4490'. [ 520.056029][T19298] block nbd7: Possible stuck request ffff8880253be000: control (read@0,1024B). Runtime 120 seconds [ 520.067319][T19298] block nbd7: Possible stuck request ffff8880253be1c0: control (read@1024,1024B). Runtime 120 seconds [ 520.078739][T19298] block nbd7: Possible stuck request ffff8880253be380: control (read@2048,1024B). Runtime 120 seconds [ 520.086137][T21489] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4490'. [ 520.090632][T19298] block nbd7: Possible stuck request ffff8880253be540: control (read@3072,1024B). Runtime 120 seconds [ 520.195789][T21498] netlink: 'syz.3.4494': attribute type 8 has an invalid length. [ 520.816725][T21542] netlink: 76 bytes leftover after parsing attributes in process `syz.4.4509'. [ 521.251745][T21570] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 521.369790][T21578] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4525'. [ 521.490123][T21580] nbd2: detected capacity change from 0 to 127 [ 521.505284][ T5833] block nbd2: Receive control failed (result -104) [ 521.784697][T21598] bridge0: mtu less than device minimum [ 521.866551][T21600] xt_CT: No such helper "syz1" [ 522.077194][T21617] pimreg3: entered allmulticast mode [ 522.114643][T21617] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4536'. [ 522.153463][T21617] batadv_slave_1: entered promiscuous mode [ 522.188200][T21617] batadv_slave_1: left promiscuous mode [ 522.246447][T21628] netlink: 'syz.1.4541': attribute type 1 has an invalid length. [ 522.270487][T21616] nbd16: detected capacity change from 0 to 127 [ 522.296673][ T5833] block nbd16: Receive control failed (result -104) [ 522.352033][T21628] 8021q: adding VLAN 0 to HW filter on device bond4 [ 522.428670][T21633] veth11: entered promiscuous mode [ 522.452278][T21633] bond4: (slave veth11): Enslaving as an active interface with a down link [ 522.503550][T21629] veth13: entered promiscuous mode [ 522.516037][T21629] bond4: (slave veth13): Enslaving as an active interface with a down link [ 522.683906][T21657] vlan3: entered allmulticast mode [ 522.689077][T21657] hsr0: entered allmulticast mode [ 522.719588][T21657] hsr_slave_0: entered allmulticast mode [ 522.725278][T21657] hsr_slave_1: entered allmulticast mode [ 523.033349][T21678] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4559'. [ 523.161261][T21690] tipc: Started in network mode [ 523.166183][T21690] tipc: Node identity 86dcb8064a4, cluster identity 1 [ 523.191540][T21690] tipc: Enabled bearer , priority 0 [ 523.201319][T21690] syzkaller0: entered promiscuous mode [ 523.211611][T21690] syzkaller0: entered allmulticast mode [ 523.296572][T21690] tipc: Resetting bearer [ 523.312911][T21701] IPVS: Error connecting to the multicast addr [ 523.343708][T21704] IPVS: Error connecting to the multicast addr [ 523.381499][T21690] tipc: Resetting bearer [ 523.405736][T21690] tipc: Disabling bearer [ 523.418394][T21707] lo: entered allmulticast mode [ 523.535723][T21716] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4576'. [ 523.622008][T21720] Bluetooth: MGMT ver 1.23 [ 523.934090][T21743] SET target dimension over the limit! [ 523.960968][T21746] netlink: 'syz.3.4585': attribute type 21 has an invalid length. [ 523.983008][T21746] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4585'. [ 523.998776][T21750] SET target dimension over the limit! [ 524.083329][T21753] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4585'. [ 524.184635][ T1326] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 524.200643][ T6690] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 524.223954][ T6690] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 524.250370][ T6690] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 524.259254][T21766] !€ÿ: renamed from bond_slave_0 (while UP) [ 524.308366][T21764] netlink: 'syz.1.4591': attribute type 28 has an invalid length. [ 524.334017][T21764] netlink: 'syz.1.4591': attribute type 3 has an invalid length. [ 524.421014][T21771] IPVS: length: 239 != 24 [ 524.442401][T21764] syzkaller0: entered promiscuous mode [ 524.451595][T21764] syzkaller0: entered allmulticast mode [ 524.976812][T21801] __nla_validate_parse: 6 callbacks suppressed [ 524.976832][T21801] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4603'. [ 525.162424][T19298] block nbd9: Possible stuck request ffff888025840000: control (read@0,1024B). Runtime 120 seconds [ 525.173474][T19298] block nbd9: Possible stuck request ffff8880258401c0: control (read@1024,1024B). Runtime 120 seconds [ 525.184529][T19298] block nbd9: Possible stuck request ffff888025840380: control (read@2048,1024B). Runtime 120 seconds [ 525.196013][T19298] block nbd9: Possible stuck request ffff888025840540: control (read@3072,1024B). Runtime 120 seconds [ 525.730257][ T5148] Bluetooth: hci2: command 0x0405 tx timeout [ 525.730681][ T5833] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 526.351787][T21804] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4604'. [ 526.524435][T21814] xt_NFQUEUE: number of total queues is 0 [ 526.628522][T21819] netlink: 'syz.2.4610': attribute type 3 has an invalid length. [ 526.896488][T21838] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4617'. [ 526.925472][T21840] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4619'. [ 527.146397][T21852] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4622'. [ 527.191198][T21856] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4623'. [ 527.301702][T21850] nbd17: detected capacity change from 0 to 127 [ 527.313543][ T5148] block nbd17: Receive control failed (result -32) [ 527.651754][T21884] batadv_slave_1: entered allmulticast mode [ 527.692256][T21888] FAULT_INJECTION: forcing a failure. [ 527.692256][T21888] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 527.724164][T21884] batadv_slave_1: left allmulticast mode [ 527.770384][T21888] CPU: 1 UID: 0 PID: 21888 Comm: syz.3.4631 Not tainted syzkaller #0 PREEMPT(full) [ 527.770409][T21888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 527.770420][T21888] Call Trace: [ 527.770427][T21888] [ 527.770435][T21888] dump_stack_lvl+0x189/0x250 [ 527.770459][T21888] ? __pfx____ratelimit+0x10/0x10 [ 527.770485][T21888] ? __pfx_dump_stack_lvl+0x10/0x10 [ 527.770504][T21888] ? __pfx__printk+0x10/0x10 [ 527.770522][T21888] ? __might_fault+0xb0/0x130 [ 527.770552][T21888] should_fail_ex+0x414/0x560 [ 527.770582][T21888] _copy_from_user+0x2d/0xb0 [ 527.770605][T21888] ___sys_sendmsg+0x158/0x2a0 [ 527.770626][T21888] ? __pfx____sys_sendmsg+0x10/0x10 [ 527.770678][T21888] ? __fget_files+0x2a/0x420 [ 527.770698][T21888] ? __fget_files+0x3a0/0x420 [ 527.770728][T21888] __x64_sys_sendmsg+0x19b/0x260 [ 527.770748][T21888] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 527.770775][T21888] ? __pfx_ksys_write+0x10/0x10 [ 527.770797][T21888] ? do_syscall_64+0xbe/0xfa0 [ 527.770818][T21888] do_syscall_64+0xfa/0xfa0 [ 527.770834][T21888] ? lockdep_hardirqs_on+0x9c/0x150 [ 527.770851][T21888] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.770868][T21888] ? clear_bhb_loop+0x60/0xb0 [ 527.770889][T21888] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.770906][T21888] RIP: 0033:0x7fab1b78efc9 [ 527.770921][T21888] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 527.770936][T21888] RSP: 002b:00007fab1c64d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 527.770955][T21888] RAX: ffffffffffffffda RBX: 00007fab1b9e5fa0 RCX: 00007fab1b78efc9 [ 527.770966][T21888] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 527.770976][T21888] RBP: 00007fab1c64d090 R08: 0000000000000000 R09: 0000000000000000 [ 527.770987][T21888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 527.770998][T21888] R13: 00007fab1b9e6038 R14: 00007fab1b9e5fa0 R15: 00007ffd8534b8f8 [ 527.771028][T21888] [ 528.268029][T21916] netlink: 100 bytes leftover after parsing attributes in process `syz.0.4644'. [ 528.388083][T21923] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4645'. [ 528.424489][T21925] netlink: 'syz.1.4646': attribute type 1 has an invalid length. [ 528.433100][T21925] netlink: 184 bytes leftover after parsing attributes in process `syz.1.4646'. [ 528.444933][T21925] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4646'. [ 528.521523][T21931] FAULT_INJECTION: forcing a failure. [ 528.521523][T21931] name failslab, interval 1, probability 0, space 0, times 0 [ 528.535730][T21931] CPU: 0 UID: 0 PID: 21931 Comm: syz.3.4648 Not tainted syzkaller #0 PREEMPT(full) [ 528.535755][T21931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 528.535765][T21931] Call Trace: [ 528.535772][T21931] [ 528.535780][T21931] dump_stack_lvl+0x189/0x250 [ 528.535804][T21931] ? __pfx____ratelimit+0x10/0x10 [ 528.535828][T21931] ? __pfx_dump_stack_lvl+0x10/0x10 [ 528.535844][T21931] ? __pfx__printk+0x10/0x10 [ 528.535866][T21931] ? __pfx___might_resched+0x10/0x10 [ 528.535886][T21931] ? fs_reclaim_acquire+0x7d/0x100 [ 528.535911][T21931] should_fail_ex+0x414/0x560 [ 528.535940][T21931] should_failslab+0xa8/0x100 [ 528.535963][T21931] kmem_cache_alloc_node_noprof+0x77/0x710 [ 528.535981][T21931] ? __alloc_skb+0x112/0x2d0 [ 528.536012][T21931] ? netlink_autobind+0xdb/0x300 [ 528.536041][T21931] __alloc_skb+0x112/0x2d0 [ 528.536067][T21931] netlink_sendmsg+0x5c6/0xb30 [ 528.536100][T21931] ? __pfx_netlink_sendmsg+0x10/0x10 [ 528.536126][T21931] ? aa_sock_msg_perm+0xf1/0x1d0 [ 528.536148][T21931] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 528.536168][T21931] ? __pfx_netlink_sendmsg+0x10/0x10 [ 528.536193][T21931] __sock_sendmsg+0x21c/0x270 [ 528.536216][T21931] ____sys_sendmsg+0x505/0x830 [ 528.536247][T21931] ? __pfx_____sys_sendmsg+0x10/0x10 [ 528.536281][T21931] ? import_iovec+0x74/0xa0 [ 528.536306][T21931] ___sys_sendmsg+0x21f/0x2a0 [ 528.536325][T21931] ? __pfx____sys_sendmsg+0x10/0x10 [ 528.536379][T21931] ? __fget_files+0x2a/0x420 [ 528.536398][T21931] ? __fget_files+0x3a0/0x420 [ 528.536430][T21931] __x64_sys_sendmsg+0x19b/0x260 [ 528.536449][T21931] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 528.536480][T21931] ? __pfx_ksys_write+0x10/0x10 [ 528.536502][T21931] ? do_syscall_64+0xbe/0xfa0 [ 528.536523][T21931] do_syscall_64+0xfa/0xfa0 [ 528.536538][T21931] ? lockdep_hardirqs_on+0x9c/0x150 [ 528.536556][T21931] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 528.536572][T21931] ? clear_bhb_loop+0x60/0xb0 [ 528.536594][T21931] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 528.536610][T21931] RIP: 0033:0x7fab1b78efc9 [ 528.536626][T21931] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 528.536640][T21931] RSP: 002b:00007fab1c64d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 528.536658][T21931] RAX: ffffffffffffffda RBX: 00007fab1b9e5fa0 RCX: 00007fab1b78efc9 [ 528.536671][T21931] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 528.536682][T21931] RBP: 00007fab1c64d090 R08: 0000000000000000 R09: 0000000000000000 [ 528.536692][T21931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 528.536702][T21931] R13: 00007fab1b9e6038 R14: 00007fab1b9e5fa0 R15: 00007ffd8534b8f8 [ 528.536733][T21931] [ 529.160506][ T5148] Bluetooth: hci2: command 0x0405 tx timeout [ 529.325333][T21960] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 529.498186][T21960] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 529.649957][ T56] block nbd3: Possible stuck request ffff88802528b440: control (read@0,1024B). Runtime 30 seconds [ 529.661417][ T56] block nbd3: Possible stuck request ffff88802528b600: control (read@1024,1024B). Runtime 30 seconds [ 529.675405][ T56] block nbd3: Possible stuck request ffff88802528b7c0: control (read@2048,1024B). Runtime 30 seconds [ 529.687148][ T56] block nbd3: Possible stuck request ffff88802528b980: control (read@3072,1024B). Runtime 30 seconds [ 529.687567][T21986] delete_channel: no stack [ 529.898170][T21998] netlink: 'syz.1.4673': attribute type 3 has an invalid length. [ 529.907662][T21996] team0: Device wireguard1 is of different type [ 530.231266][T22017] __nla_validate_parse: 10 callbacks suppressed [ 530.231283][T22017] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4682'. [ 530.402984][T22033] netlink: 'syz.0.4683': attribute type 1 has an invalid length. [ 530.515205][T22033] 8021q: adding VLAN 0 to HW filter on device bond9 [ 530.536132][T22038] : entered promiscuous mode [ 530.563797][T22039] vlan0: entered promiscuous mode [ 530.607033][T22039] vlan0: entered allmulticast mode [ 530.630412][T22039] gretap0: entered allmulticast mode [ 530.661457][T22043] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4688'. [ 530.768859][T22043] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4688'. [ 530.778543][ T1326] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 530.794623][ T1326] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 530.824944][T22056] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4691'. [ 530.840914][ T6701] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 530.875028][ T1326] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 530.925062][T22062] FAULT_INJECTION: forcing a failure. [ 530.925062][T22062] name failslab, interval 1, probability 0, space 0, times 0 [ 530.957252][T22062] CPU: 1 UID: 0 PID: 22062 Comm: syz.4.4693 Not tainted syzkaller #0 PREEMPT(full) [ 530.957274][T22062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 530.957284][T22062] Call Trace: [ 530.957290][T22062] [ 530.957297][T22062] dump_stack_lvl+0x189/0x250 [ 530.957319][T22062] ? __pfx____ratelimit+0x10/0x10 [ 530.957343][T22062] ? __pfx_dump_stack_lvl+0x10/0x10 [ 530.957358][T22062] ? __pfx__printk+0x10/0x10 [ 530.957379][T22062] ? __pfx___might_resched+0x10/0x10 [ 530.957400][T22062] ? fs_reclaim_acquire+0x7d/0x100 [ 530.957426][T22062] should_fail_ex+0x414/0x560 [ 530.957457][T22062] should_failslab+0xa8/0x100 [ 530.957481][T22062] kmem_cache_alloc_node_noprof+0x77/0x710 [ 530.957501][T22062] ? __alloc_skb+0x112/0x2d0 [ 530.957523][T22062] ? netlink_autobind+0xdb/0x300 [ 530.957551][T22062] __alloc_skb+0x112/0x2d0 [ 530.957578][T22062] netlink_sendmsg+0x5c6/0xb30 [ 530.957611][T22062] ? __pfx_netlink_sendmsg+0x10/0x10 [ 530.957639][T22062] ? aa_sock_msg_perm+0xf1/0x1d0 [ 530.957661][T22062] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 530.957682][T22062] ? __pfx_netlink_sendmsg+0x10/0x10 [ 530.957706][T22062] __sock_sendmsg+0x21c/0x270 [ 530.957730][T22062] ____sys_sendmsg+0x505/0x830 [ 530.957761][T22062] ? __pfx_____sys_sendmsg+0x10/0x10 [ 530.957804][T22062] ? import_iovec+0x74/0xa0 [ 530.957831][T22062] ___sys_sendmsg+0x21f/0x2a0 [ 530.957850][T22062] ? __pfx____sys_sendmsg+0x10/0x10 [ 530.957901][T22062] ? __fget_files+0x2a/0x420 [ 530.957920][T22062] ? __fget_files+0x3a0/0x420 [ 530.957952][T22062] __x64_sys_sendmsg+0x19b/0x260 [ 530.957971][T22062] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 530.958002][T22062] ? __pfx_ksys_write+0x10/0x10 [ 530.958024][T22062] ? do_syscall_64+0xbe/0xfa0 [ 530.958045][T22062] do_syscall_64+0xfa/0xfa0 [ 530.958061][T22062] ? lockdep_hardirqs_on+0x9c/0x150 [ 530.958078][T22062] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.958095][T22062] ? clear_bhb_loop+0x60/0xb0 [ 530.958117][T22062] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.958132][T22062] RIP: 0033:0x7f74cf98efc9 [ 530.958148][T22062] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 530.958163][T22062] RSP: 002b:00007f74d0808038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 530.958181][T22062] RAX: ffffffffffffffda RBX: 00007f74cfbe5fa0 RCX: 00007f74cf98efc9 [ 530.958194][T22062] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 530.958206][T22062] RBP: 00007f74d0808090 R08: 0000000000000000 R09: 0000000000000000 [ 530.958216][T22062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 530.958226][T22062] R13: 00007f74cfbe6038 R14: 00007f74cfbe5fa0 R15: 00007ffc6f5b8708 [ 530.958257][T22062] [ 530.962834][T22063] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4694'. [ 531.147993][T22071] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4697'. [ 531.267794][T22077] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4697'. [ 531.367399][T22079] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4700'. [ 531.451774][T22079] bond5: option packets_per_slave: invalid value (18446744073709551615) [ 531.493323][T22079] bond5: option packets_per_slave: allowed values 0 - 65535 [ 531.503517][T22079] bond5 (unregistering): Released all slaves [ 531.657329][T22086] nbd18: detected capacity change from 0 to 127 [ 531.670877][ T5148] block nbd18: Receive control failed (result -32) [ 531.787133][T22105] sock: sock_set_timeout: `syz.3.4709' (pid 22105) tries to set negative timeout [ 531.833970][T22105] vxcan1: tx drop: invalid da for name 0x0000000000000002 [ 531.866471][T22105] tipc: Enabling of bearer rejected, failed to enable media [ 531.881578][T22112] FAULT_INJECTION: forcing a failure. [ 531.881578][T22112] name failslab, interval 1, probability 0, space 0, times 0 [ 531.898787][T22112] CPU: 1 UID: 0 PID: 22112 Comm: syz.0.4711 Not tainted syzkaller #0 PREEMPT(full) [ 531.898812][T22112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 531.898823][T22112] Call Trace: [ 531.898830][T22112] [ 531.898839][T22112] dump_stack_lvl+0x189/0x250 [ 531.898860][T22112] ? __pfx____ratelimit+0x10/0x10 [ 531.898885][T22112] ? __pfx_dump_stack_lvl+0x10/0x10 [ 531.898903][T22112] ? __pfx__printk+0x10/0x10 [ 531.898927][T22112] ? __pfx___might_resched+0x10/0x10 [ 531.898963][T22112] should_fail_ex+0x414/0x560 [ 531.898993][T22112] should_failslab+0xa8/0x100 [ 531.899016][T22112] kmem_cache_alloc_node_noprof+0x77/0x710 [ 531.899034][T22112] ? __alloc_skb+0x112/0x2d0 [ 531.899063][T22112] __alloc_skb+0x112/0x2d0 [ 531.899090][T22112] netlink_ack+0x146/0xa50 [ 531.899115][T22112] ? rcu_is_watching+0x15/0xb0 [ 531.899140][T22112] ? trace_contention_end+0x39/0x120 [ 531.899176][T22112] netlink_rcv_skb+0x28c/0x470 [ 531.899201][T22112] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 531.899220][T22112] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 531.899258][T22112] ? netlink_deliver_tap+0x2e/0x1b0 [ 531.899281][T22112] ? netlink_deliver_tap+0x2e/0x1b0 [ 531.899306][T22112] xfrm_netlink_rcv+0x79/0x90 [ 531.899325][T22112] netlink_unicast+0x82f/0x9e0 [ 531.899355][T22112] ? __pfx_netlink_unicast+0x10/0x10 [ 531.899379][T22112] ? netlink_sendmsg+0x642/0xb30 [ 531.899402][T22112] ? skb_put+0x11b/0x210 [ 531.899427][T22112] netlink_sendmsg+0x805/0xb30 [ 531.899458][T22112] ? __pfx_netlink_sendmsg+0x10/0x10 [ 531.899487][T22112] ? aa_sock_msg_perm+0xf1/0x1d0 [ 531.899510][T22112] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 531.899532][T22112] ? __pfx_netlink_sendmsg+0x10/0x10 [ 531.899558][T22112] __sock_sendmsg+0x21c/0x270 [ 531.899584][T22112] ____sys_sendmsg+0x505/0x830 [ 531.899616][T22112] ? __pfx_____sys_sendmsg+0x10/0x10 [ 531.899653][T22112] ? import_iovec+0x74/0xa0 [ 531.899681][T22112] ___sys_sendmsg+0x21f/0x2a0 [ 531.899701][T22112] ? __pfx____sys_sendmsg+0x10/0x10 [ 531.899758][T22112] ? __fget_files+0x2a/0x420 [ 531.899778][T22112] ? __fget_files+0x3a0/0x420 [ 531.899811][T22112] __x64_sys_sendmsg+0x19b/0x260 [ 531.899832][T22112] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 531.899861][T22112] ? __pfx_ksys_write+0x10/0x10 [ 531.899885][T22112] ? do_syscall_64+0xbe/0xfa0 [ 531.899907][T22112] do_syscall_64+0xfa/0xfa0 [ 531.899923][T22112] ? lockdep_hardirqs_on+0x9c/0x150 [ 531.899942][T22112] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.899966][T22112] ? clear_bhb_loop+0x60/0xb0 [ 531.899987][T22112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.900003][T22112] RIP: 0033:0x7f900158efc9 [ 531.900019][T22112] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 531.900033][T22112] RSP: 002b:00007f90023f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 531.900053][T22112] RAX: ffffffffffffffda RBX: 00007f90017e5fa0 RCX: 00007f900158efc9 [ 531.900067][T22112] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 531.900079][T22112] RBP: 00007f90023f7090 R08: 0000000000000000 R09: 0000000000000000 [ 531.900090][T22112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 531.900102][T22112] R13: 00007f90017e6038 R14: 00007f90017e5fa0 R15: 00007ffee2de7928 [ 531.900135][T22112] [ 531.948557][T22114] netlink: 'syz.1.4712': attribute type 3 has an invalid length. [ 532.134862][T22120] netlink: 'syz.4.4714': attribute type 62 has an invalid length. [ 532.137235][T22114] netlink: 666 bytes leftover after parsing attributes in process `syz.1.4712'. [ 532.204326][ T5148] Bluetooth: hci2: command 0x0405 tx timeout [ 532.328792][T22119] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4714'. [ 532.417184][T22137] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 532.818832][T22162] netlink: 'syz.4.4725': attribute type 7 has an invalid length. [ 533.274201][T22185] netlink: 'syz.1.4736': attribute type 3 has an invalid length. [ 533.512142][T22195] netlink: 'syz.1.4739': attribute type 7 has an invalid length. [ 533.613677][T22199] netlink: 'syz.4.4741': attribute type 4 has an invalid length. [ 533.654619][T22199] netlink: 'syz.4.4741': attribute type 4 has an invalid length. [ 533.680183][T22207] IPVS: sync thread started: state = MASTER, mcast_ifn = sit0, syncid = 1, id = 0 [ 533.940609][T22219] FAULT_INJECTION: forcing a failure. [ 533.940609][T22219] name failslab, interval 1, probability 0, space 0, times 0 [ 533.954264][T22219] CPU: 1 UID: 0 PID: 22219 Comm: syz.2.4747 Not tainted syzkaller #0 PREEMPT(full) [ 533.954287][T22219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 533.954298][T22219] Call Trace: [ 533.954306][T22219] [ 533.954314][T22219] dump_stack_lvl+0x189/0x250 [ 533.954339][T22219] ? __pfx____ratelimit+0x10/0x10 [ 533.954367][T22219] ? __pfx_dump_stack_lvl+0x10/0x10 [ 533.954386][T22219] ? __pfx__printk+0x10/0x10 [ 533.954410][T22219] ? __lock_acquire+0xab9/0xd20 [ 533.954440][T22219] should_fail_ex+0x414/0x560 [ 533.954491][T22219] should_failslab+0xa8/0x100 [ 533.954523][T22219] kmem_cache_alloc_noprof+0x74/0x6e0 [ 533.954543][T22219] ? skb_clone+0x212/0x3a0 [ 533.954568][T22219] skb_clone+0x212/0x3a0 [ 533.954590][T22219] __netlink_deliver_tap+0x404/0x850 [ 533.954632][T22219] ? netlink_deliver_tap+0x2e/0x1b0 [ 533.954658][T22219] netlink_deliver_tap+0x19c/0x1b0 [ 533.954684][T22219] netlink_unicast+0x7fa/0x9e0 [ 533.954717][T22219] ? __pfx_netlink_unicast+0x10/0x10 [ 533.954742][T22219] ? netlink_sendmsg+0x642/0xb30 [ 533.954764][T22219] ? skb_put+0x11b/0x210 [ 533.954793][T22219] netlink_sendmsg+0x805/0xb30 [ 533.954827][T22219] ? __pfx_netlink_sendmsg+0x10/0x10 [ 533.954855][T22219] ? aa_sock_msg_perm+0xf1/0x1d0 [ 533.954879][T22219] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 533.954900][T22219] ? __pfx_netlink_sendmsg+0x10/0x10 [ 533.954926][T22219] __sock_sendmsg+0x21c/0x270 [ 533.954951][T22219] ____sys_sendmsg+0x505/0x830 [ 533.954984][T22219] ? __pfx_____sys_sendmsg+0x10/0x10 [ 533.955020][T22219] ? import_iovec+0x74/0xa0 [ 533.955046][T22219] ___sys_sendmsg+0x21f/0x2a0 [ 533.955066][T22219] ? __pfx____sys_sendmsg+0x10/0x10 [ 533.955120][T22219] ? __fget_files+0x2a/0x420 [ 533.955141][T22219] ? __fget_files+0x3a0/0x420 [ 533.955173][T22219] __x64_sys_sendmsg+0x19b/0x260 [ 533.955194][T22219] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 533.955224][T22219] ? __pfx_ksys_write+0x10/0x10 [ 533.955248][T22219] ? do_syscall_64+0xbe/0xfa0 [ 533.955270][T22219] do_syscall_64+0xfa/0xfa0 [ 533.955287][T22219] ? lockdep_hardirqs_on+0x9c/0x150 [ 533.955306][T22219] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.955324][T22219] ? clear_bhb_loop+0x60/0xb0 [ 533.955347][T22219] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.955365][T22219] RIP: 0033:0x7ff3d638efc9 [ 533.955382][T22219] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 533.955398][T22219] RSP: 002b:00007ff3d7237038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 533.955419][T22219] RAX: ffffffffffffffda RBX: 00007ff3d65e5fa0 RCX: 00007ff3d638efc9 [ 533.955432][T22219] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 533.955444][T22219] RBP: 00007ff3d7237090 R08: 0000000000000000 R09: 0000000000000000 [ 533.955456][T22219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 533.955467][T22219] R13: 00007ff3d65e6038 R14: 00007ff3d65e5fa0 R15: 00007ffda3f5b548 [ 533.955505][T22219] [ 534.115652][T22223] IPv6: NLM_F_CREATE should be specified when creating new route [ 534.500753][T22227] nbd19: detected capacity change from 0 to 127 [ 534.518801][ T5148] block nbd19: Receive control failed (result -32) [ 534.529109][T22234] netlink: 'syz.4.4752': attribute type 1 has an invalid length. [ 534.810308][T22250] vlan1: entered promiscuous mode [ 534.848959][T22251] bridge7: entered promiscuous mode [ 534.864761][T22251] bridge7: entered allmulticast mode [ 534.936922][T22260] FAULT_INJECTION: forcing a failure. [ 534.936922][T22260] name failslab, interval 1, probability 0, space 0, times 0 [ 534.960671][T22260] CPU: 1 UID: 0 PID: 22260 Comm: syz.2.4760 Not tainted syzkaller #0 PREEMPT(full) [ 534.960696][T22260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 534.960708][T22260] Call Trace: [ 534.960716][T22260] [ 534.960724][T22260] dump_stack_lvl+0x189/0x250 [ 534.960749][T22260] ? __pfx____ratelimit+0x10/0x10 [ 534.960773][T22260] ? __pfx_dump_stack_lvl+0x10/0x10 [ 534.960790][T22260] ? __pfx__printk+0x10/0x10 [ 534.960814][T22260] ? __nla_validate_parse+0x2400/0x2d40 [ 534.960841][T22260] should_fail_ex+0x414/0x560 [ 534.960871][T22260] should_failslab+0xa8/0x100 [ 534.960894][T22260] kmem_cache_alloc_noprof+0x74/0x6e0 [ 534.960913][T22260] ? xfrm_state_alloc+0x24/0x2f0 [ 534.960934][T22260] ? kasan_quarantine_put+0xdd/0x220 [ 534.960957][T22260] xfrm_state_alloc+0x24/0x2f0 [ 534.960979][T22260] xfrm_add_sa+0x17d1/0x41d0 [ 534.961007][T22260] ? __pfx_xfrm_add_sa+0x10/0x10 [ 534.961023][T22260] ? apparmor_capable+0x137/0x1b0 [ 534.961052][T22260] ? __nla_parse+0x40/0x60 [ 534.961077][T22260] xfrm_user_rcv_msg+0x7a3/0xab0 [ 534.961102][T22260] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 534.961157][T22260] ? __pfx___mutex_trylock_common+0x10/0x10 [ 534.961187][T22260] ? rcu_is_watching+0x15/0xb0 [ 534.961209][T22260] ? trace_contention_end+0x39/0x120 [ 534.961232][T22260] ? __mutex_lock+0x335/0x1350 [ 534.961256][T22260] netlink_rcv_skb+0x208/0x470 [ 534.961281][T22260] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 534.961300][T22260] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 534.961336][T22260] ? netlink_deliver_tap+0x2e/0x1b0 [ 534.961358][T22260] ? netlink_deliver_tap+0x2e/0x1b0 [ 534.961382][T22260] xfrm_netlink_rcv+0x79/0x90 [ 534.961399][T22260] netlink_unicast+0x82f/0x9e0 [ 534.961440][T22260] ? __pfx_netlink_unicast+0x10/0x10 [ 534.961462][T22260] ? netlink_sendmsg+0x642/0xb30 [ 534.961480][T22260] ? skb_put+0x11b/0x210 [ 534.961502][T22260] netlink_sendmsg+0x805/0xb30 [ 534.961532][T22260] ? __pfx_netlink_sendmsg+0x10/0x10 [ 534.961558][T22260] ? aa_sock_msg_perm+0xf1/0x1d0 [ 534.961580][T22260] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 534.961600][T22260] ? __pfx_netlink_sendmsg+0x10/0x10 [ 534.961623][T22260] __sock_sendmsg+0x21c/0x270 [ 534.961653][T22260] ____sys_sendmsg+0x505/0x830 [ 534.961683][T22260] ? __pfx_____sys_sendmsg+0x10/0x10 [ 534.961718][T22260] ? import_iovec+0x74/0xa0 [ 534.961742][T22260] ___sys_sendmsg+0x21f/0x2a0 [ 534.961762][T22260] ? __pfx____sys_sendmsg+0x10/0x10 [ 534.961816][T22260] ? __fget_files+0x2a/0x420 [ 534.961837][T22260] ? __fget_files+0x3a0/0x420 [ 534.961871][T22260] __x64_sys_sendmsg+0x19b/0x260 [ 534.961892][T22260] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 534.961921][T22260] ? __pfx_ksys_write+0x10/0x10 [ 534.961945][T22260] ? do_syscall_64+0xbe/0xfa0 [ 534.961968][T22260] do_syscall_64+0xfa/0xfa0 [ 534.961984][T22260] ? lockdep_hardirqs_on+0x9c/0x150 [ 534.962002][T22260] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.962020][T22260] ? clear_bhb_loop+0x60/0xb0 [ 534.962042][T22260] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.962058][T22260] RIP: 0033:0x7ff3d638efc9 [ 534.962076][T22260] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 534.962091][T22260] RSP: 002b:00007ff3d7237038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 534.962111][T22260] RAX: ffffffffffffffda RBX: 00007ff3d65e5fa0 RCX: 00007ff3d638efc9 [ 534.962124][T22260] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 534.962135][T22260] RBP: 00007ff3d7237090 R08: 0000000000000000 R09: 0000000000000000 [ 534.962146][T22260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 534.962158][T22260] R13: 00007ff3d65e6038 R14: 00007ff3d65e5fa0 R15: 00007ffda3f5b548 [ 534.962187][T22260] [ 535.372060][T22250] bridge7: entered promiscuous mode [ 535.373793][T22269] netlink: 'syz.0.4762': attribute type 11 has an invalid length. [ 535.385921][T22269] netlink: 'syz.0.4762': attribute type 11 has an invalid length. [ 535.394909][T22269] __nla_validate_parse: 16 callbacks suppressed [ 535.394928][T22269] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4762'. [ 535.395518][T22250] bridge7: entered allmulticast mode [ 535.424287][ T56] block nbd12: Possible stuck request ffff88802594e000: control (read@0,1024B). Runtime 30 seconds [ 535.436179][ T56] block nbd12: Possible stuck request ffff88802594e1c0: control (read@1024,1024B). Runtime 30 seconds [ 535.448584][ T56] block nbd12: Possible stuck request ffff88802594e380: control (read@2048,1024B). Runtime 30 seconds [ 535.461376][ T56] block nbd12: Possible stuck request ffff88802594e540: control (read@3072,1024B). Runtime 30 seconds [ 535.469321][T22274] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4763'. [ 535.582619][T22268] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 535.583404][T22271] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4763'. [ 535.612478][T22274] vlan3: entered allmulticast mode [ 535.617668][T22274] mac80211_hwsim hwsim45 wlan0: entered allmulticast mode [ 535.708671][T22286] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4771'. [ 535.718779][T22286] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4771'. [ 535.803572][T22290] netlink: 64985 bytes leftover after parsing attributes in process `syz.1.4770'. [ 535.817250][T22288] validate_nla: 3 callbacks suppressed [ 535.817270][T22288] netlink: 'syz.3.4769': attribute type 1 has an invalid length. [ 536.028668][T22304] vlan1: left promiscuous mode [ 536.317494][T22321] FAULT_INJECTION: forcing a failure. [ 536.317494][T22321] name failslab, interval 1, probability 0, space 0, times 0 [ 536.335655][T22321] CPU: 0 UID: 0 PID: 22321 Comm: syz.3.4783 Not tainted syzkaller #0 PREEMPT(full) [ 536.335682][T22321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 536.335693][T22321] Call Trace: [ 536.335702][T22321] [ 536.335710][T22321] dump_stack_lvl+0x189/0x250 [ 536.335735][T22321] ? __pfx____ratelimit+0x10/0x10 [ 536.335762][T22321] ? __pfx_dump_stack_lvl+0x10/0x10 [ 536.335781][T22321] ? __pfx__printk+0x10/0x10 [ 536.335803][T22321] ? __pfx___might_resched+0x10/0x10 [ 536.335828][T22321] ? fs_reclaim_acquire+0x7d/0x100 [ 536.335854][T22321] should_fail_ex+0x414/0x560 [ 536.335886][T22321] should_failslab+0xa8/0x100 [ 536.335911][T22321] __kmalloc_node_noprof+0xd2/0x800 [ 536.335931][T22321] ? crypto_create_tfm_node+0x83/0x3f0 [ 536.335965][T22321] crypto_create_tfm_node+0x83/0x3f0 [ 536.335997][T22321] crypto_alloc_tfm_node+0x172/0x3f0 [ 536.336026][T22321] esp6_init_state+0x36b/0x1140 [ 536.336048][T22321] ? __sock_sendmsg+0x21c/0x270 [ 536.336067][T22321] ? ____sys_sendmsg+0x505/0x830 [ 536.336090][T22321] ? ___sys_sendmsg+0x21f/0x2a0 [ 536.336107][T22321] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.336135][T22321] ? __pfx_esp6_init_state+0x10/0x10 [ 536.336166][T22321] ? __lock_acquire+0xab9/0xd20 [ 536.336213][T22321] ? __xfrm_init_state+0x7ef/0x13f0 [ 536.336236][T22321] __xfrm_init_state+0xa76/0x13f0 [ 536.336253][T22321] ? __xfrm_init_state+0x7ef/0x13f0 [ 536.336275][T22321] xfrm_add_sa+0x3066/0x41d0 [ 536.336301][T22321] ? __pfx_xfrm_add_sa+0x10/0x10 [ 536.336315][T22321] ? apparmor_capable+0x137/0x1b0 [ 536.336342][T22321] ? __nla_parse+0x40/0x60 [ 536.336364][T22321] xfrm_user_rcv_msg+0x7a3/0xab0 [ 536.336388][T22321] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 536.336440][T22321] ? __pfx___mutex_trylock_common+0x10/0x10 [ 536.336469][T22321] ? rcu_is_watching+0x15/0xb0 [ 536.336493][T22321] ? trace_contention_end+0x39/0x120 [ 536.336519][T22321] ? __mutex_lock+0x335/0x1350 [ 536.336552][T22321] netlink_rcv_skb+0x208/0x470 [ 536.336577][T22321] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 536.336598][T22321] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 536.336636][T22321] ? netlink_deliver_tap+0x2e/0x1b0 [ 536.336660][T22321] ? netlink_deliver_tap+0x2e/0x1b0 [ 536.336686][T22321] xfrm_netlink_rcv+0x79/0x90 [ 536.336704][T22321] netlink_unicast+0x82f/0x9e0 [ 536.336736][T22321] ? __pfx_netlink_unicast+0x10/0x10 [ 536.336761][T22321] ? netlink_sendmsg+0x642/0xb30 [ 536.336783][T22321] ? skb_put+0x11b/0x210 [ 536.336811][T22321] netlink_sendmsg+0x805/0xb30 [ 536.336846][T22321] ? __pfx_netlink_sendmsg+0x10/0x10 [ 536.336871][T22321] ? aa_sock_msg_perm+0xf1/0x1d0 [ 536.336892][T22321] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 536.336914][T22321] ? __pfx_netlink_sendmsg+0x10/0x10 [ 536.336939][T22321] __sock_sendmsg+0x21c/0x270 [ 536.336964][T22321] ____sys_sendmsg+0x505/0x830 [ 536.336995][T22321] ? __pfx_____sys_sendmsg+0x10/0x10 [ 536.337031][T22321] ? import_iovec+0x74/0xa0 [ 536.337058][T22321] ___sys_sendmsg+0x21f/0x2a0 [ 536.337077][T22321] ? __pfx____sys_sendmsg+0x10/0x10 [ 536.337132][T22321] ? __fget_files+0x2a/0x420 [ 536.337152][T22321] ? __fget_files+0x3a0/0x420 [ 536.337184][T22321] __x64_sys_sendmsg+0x19b/0x260 [ 536.337204][T22321] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 536.337231][T22321] ? __pfx_ksys_write+0x10/0x10 [ 536.337255][T22321] ? do_syscall_64+0xbe/0xfa0 [ 536.337276][T22321] do_syscall_64+0xfa/0xfa0 [ 536.337293][T22321] ? lockdep_hardirqs_on+0x9c/0x150 [ 536.337311][T22321] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.337329][T22321] ? clear_bhb_loop+0x60/0xb0 [ 536.337350][T22321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.337367][T22321] RIP: 0033:0x7fab1b78efc9 [ 536.337384][T22321] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 536.337400][T22321] RSP: 002b:00007fab1c64d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 536.337420][T22321] RAX: ffffffffffffffda RBX: 00007fab1b9e5fa0 RCX: 00007fab1b78efc9 [ 536.337434][T22321] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 536.337446][T22321] RBP: 00007fab1c64d090 R08: 0000000000000000 R09: 0000000000000000 [ 536.337458][T22321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 536.337469][T22321] R13: 00007fab1b9e6038 R14: 00007fab1b9e5fa0 R15: 00007ffd8534b8f8 [ 536.337502][T22321] [ 536.819119][T22328] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4787'. [ 536.893801][T19298] block nbd11: Possible stuck request ffff8880258a7000: control (read@0,1024B). Runtime 120 seconds [ 536.906770][T19298] block nbd11: Possible stuck request ffff8880258a71c0: control (read@1024,1024B). Runtime 120 seconds [ 536.938938][T19298] block nbd11: Possible stuck request ffff8880258a7380: control (read@2048,1024B). Runtime 120 seconds [ 536.951169][T19298] block nbd11: Possible stuck request ffff8880258a7540: control (read@3072,1024B). Runtime 120 seconds [ 537.077743][T22340] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4791'. [ 537.118506][T22346] netlink: 'syz.2.4792': attribute type 1 has an invalid length. [ 537.127547][T22346] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4792'. [ 537.138972][T22341] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 537.162490][T22340] syzkaller1: entered promiscuous mode [ 537.168247][T22340] syzkaller1: entered allmulticast mode [ 537.461322][T22363] netlink: 'syz.4.4798': attribute type 1 has an invalid length. [ 537.667463][T22370] tipc: Enabling of bearer rejected, failed to enable media [ 538.136551][T22396] netlink: 'syz.2.4810': attribute type 21 has an invalid length. [ 538.156511][T22396] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4810'. [ 538.214017][T22396] bond4: option xmit_hash_policy: invalid value (64) [ 538.223267][T22396] bond4 (unregistering): Released all slaves [ 538.306419][T22411] FAULT_INJECTION: forcing a failure. [ 538.306419][T22411] name failslab, interval 1, probability 0, space 0, times 0 [ 538.389998][T22411] CPU: 0 UID: 0 PID: 22411 Comm: syz.1.4816 Not tainted syzkaller #0 PREEMPT(full) [ 538.390024][T22411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 538.390036][T22411] Call Trace: [ 538.390043][T22411] [ 538.390053][T22411] dump_stack_lvl+0x189/0x250 [ 538.390077][T22411] ? __pfx____ratelimit+0x10/0x10 [ 538.390103][T22411] ? __pfx_dump_stack_lvl+0x10/0x10 [ 538.390123][T22411] ? __pfx__printk+0x10/0x10 [ 538.390145][T22411] ? __pfx___might_resched+0x10/0x10 [ 538.390167][T22411] ? fs_reclaim_acquire+0x7d/0x100 [ 538.390192][T22411] should_fail_ex+0x414/0x560 [ 538.390222][T22411] should_failslab+0xa8/0x100 [ 538.390246][T22411] kmem_cache_alloc_node_noprof+0x77/0x710 [ 538.390266][T22411] ? __alloc_skb+0x112/0x2d0 [ 538.390289][T22411] ? netlink_autobind+0xdb/0x300 [ 538.390318][T22411] __alloc_skb+0x112/0x2d0 [ 538.390354][T22411] netlink_sendmsg+0x5c6/0xb30 [ 538.390387][T22411] ? __pfx_netlink_sendmsg+0x10/0x10 [ 538.390414][T22411] ? aa_sock_msg_perm+0xf1/0x1d0 [ 538.390436][T22411] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 538.390459][T22411] ? __pfx_netlink_sendmsg+0x10/0x10 [ 538.390484][T22411] __sock_sendmsg+0x21c/0x270 [ 538.390509][T22411] ____sys_sendmsg+0x505/0x830 [ 538.390540][T22411] ? __pfx_____sys_sendmsg+0x10/0x10 [ 538.390576][T22411] ? import_iovec+0x74/0xa0 [ 538.390603][T22411] ___sys_sendmsg+0x21f/0x2a0 [ 538.390623][T22411] ? __pfx____sys_sendmsg+0x10/0x10 [ 538.390675][T22411] ? __fget_files+0x2a/0x420 [ 538.390697][T22411] ? __fget_files+0x3a0/0x420 [ 538.390729][T22411] __x64_sys_sendmsg+0x19b/0x260 [ 538.390750][T22411] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 538.390775][T22411] ? __pfx_ksys_write+0x10/0x10 [ 538.390800][T22411] ? do_syscall_64+0xbe/0xfa0 [ 538.390821][T22411] do_syscall_64+0xfa/0xfa0 [ 538.390838][T22411] ? lockdep_hardirqs_on+0x9c/0x150 [ 538.390855][T22411] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 538.390872][T22411] ? clear_bhb_loop+0x60/0xb0 [ 538.390893][T22411] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 538.390910][T22411] RIP: 0033:0x7effcfb8efc9 [ 538.390927][T22411] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 538.390942][T22411] RSP: 002b:00007effd0aa6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 538.390961][T22411] RAX: ffffffffffffffda RBX: 00007effcfde5fa0 RCX: 00007effcfb8efc9 [ 538.390975][T22411] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 538.390987][T22411] RBP: 00007effd0aa6090 R08: 0000000000000000 R09: 0000000000000000 [ 538.390999][T22411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 538.391010][T22411] R13: 00007effcfde6038 R14: 00007effcfde5fa0 R15: 00007fff40c74c58 [ 538.391041][T22411] [ 538.396504][T22414] openvswitch: netlink: Key type 112 is out of range max 32 [ 539.397597][T22475] netlink: 'syz.4.4833': attribute type 1 has an invalid length. [ 539.441903][T22475] 8021q: adding VLAN 0 to HW filter on device bond3 [ 539.474609][T22475] veth5: entered promiscuous mode [ 539.520986][T22472] nbd20: detected capacity change from 0 to 127 [ 539.530338][ T5833] block nbd20: Receive control failed (result -32) [ 539.641979][T22494] FAULT_INJECTION: forcing a failure. [ 539.641979][T22494] name failslab, interval 1, probability 0, space 0, times 0 [ 539.666091][T22494] CPU: 1 UID: 0 PID: 22494 Comm: syz.2.4839 Not tainted syzkaller #0 PREEMPT(full) [ 539.666118][T22494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 539.666129][T22494] Call Trace: [ 539.666137][T22494] [ 539.666146][T22494] dump_stack_lvl+0x189/0x250 [ 539.666171][T22494] ? __pfx____ratelimit+0x10/0x10 [ 539.666197][T22494] ? __pfx_dump_stack_lvl+0x10/0x10 [ 539.666215][T22494] ? __pfx__printk+0x10/0x10 [ 539.666237][T22494] ? __pfx___might_resched+0x10/0x10 [ 539.666270][T22494] ? fs_reclaim_acquire+0x7d/0x100 [ 539.666297][T22494] should_fail_ex+0x414/0x560 [ 539.666329][T22494] should_failslab+0xa8/0x100 [ 539.666353][T22494] __kmalloc_node_noprof+0xd2/0x800 [ 539.666373][T22494] ? __pfx___up_read+0x10/0x10 [ 539.666388][T22494] ? crypto_create_tfm_node+0x83/0x3f0 [ 539.666420][T22494] crypto_create_tfm_node+0x83/0x3f0 [ 539.666452][T22494] crypto_spawn_tfm2+0x5c/0x90 [ 539.666474][T22494] crypto_ccm_init_tfm+0x4a/0x1f0 [ 539.666492][T22494] crypto_create_tfm_node+0x18c/0x3f0 [ 539.666521][T22494] crypto_spawn_tfm2+0x5c/0x90 [ 539.666541][T22494] crypto_rfc4309_init_tfm+0x45/0x150 [ 539.666562][T22494] crypto_create_tfm_node+0x18c/0x3f0 [ 539.666589][T22494] crypto_spawn_tfm2+0x5c/0x90 [ 539.666608][T22494] aead_init_geniv+0x169/0x240 [ 539.666635][T22494] crypto_create_tfm_node+0x18c/0x3f0 [ 539.666663][T22494] crypto_alloc_tfm_node+0x172/0x3f0 [ 539.666686][T22494] esp6_init_state+0x36b/0x1140 [ 539.666705][T22494] ? __sock_sendmsg+0x21c/0x270 [ 539.666722][T22494] ? ____sys_sendmsg+0x505/0x830 [ 539.666743][T22494] ? ___sys_sendmsg+0x21f/0x2a0 [ 539.666758][T22494] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.666785][T22494] ? __pfx_esp6_init_state+0x10/0x10 [ 539.666815][T22494] ? __lock_acquire+0xab9/0xd20 [ 539.666858][T22494] ? __xfrm_init_state+0x7ef/0x13f0 [ 539.666880][T22494] __xfrm_init_state+0xa76/0x13f0 [ 539.666897][T22494] ? __xfrm_init_state+0x7ef/0x13f0 [ 539.666919][T22494] xfrm_add_sa+0x3066/0x41d0 [ 539.666944][T22494] ? __pfx_xfrm_add_sa+0x10/0x10 [ 539.666959][T22494] ? apparmor_capable+0x137/0x1b0 [ 539.666988][T22494] ? __nla_parse+0x40/0x60 [ 539.667013][T22494] xfrm_user_rcv_msg+0x7a3/0xab0 [ 539.667035][T22494] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 539.667087][T22494] ? __pfx___mutex_trylock_common+0x10/0x10 [ 539.667116][T22494] ? rcu_is_watching+0x15/0xb0 [ 539.667140][T22494] ? trace_contention_end+0x39/0x120 [ 539.667165][T22494] ? __mutex_lock+0x335/0x1350 [ 539.667191][T22494] netlink_rcv_skb+0x208/0x470 [ 539.667216][T22494] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 539.667235][T22494] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 539.667279][T22494] ? netlink_deliver_tap+0x2e/0x1b0 [ 539.667302][T22494] ? netlink_deliver_tap+0x2e/0x1b0 [ 539.667326][T22494] xfrm_netlink_rcv+0x79/0x90 [ 539.667344][T22494] netlink_unicast+0x82f/0x9e0 [ 539.667373][T22494] ? __pfx_netlink_unicast+0x10/0x10 [ 539.667397][T22494] ? netlink_sendmsg+0x642/0xb30 [ 539.667419][T22494] ? skb_put+0x11b/0x210 [ 539.667447][T22494] netlink_sendmsg+0x805/0xb30 [ 539.667479][T22494] ? __pfx_netlink_sendmsg+0x10/0x10 [ 539.667507][T22494] ? aa_sock_msg_perm+0xf1/0x1d0 [ 539.667528][T22494] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 539.667550][T22494] ? __pfx_netlink_sendmsg+0x10/0x10 [ 539.667575][T22494] __sock_sendmsg+0x21c/0x270 [ 539.667600][T22494] ____sys_sendmsg+0x505/0x830 [ 539.667629][T22494] ? __pfx_____sys_sendmsg+0x10/0x10 [ 539.667662][T22494] ? import_iovec+0x74/0xa0 [ 539.667689][T22494] ___sys_sendmsg+0x21f/0x2a0 [ 539.667709][T22494] ? __pfx____sys_sendmsg+0x10/0x10 [ 539.667766][T22494] ? __fget_files+0x2a/0x420 [ 539.667787][T22494] ? __fget_files+0x3a0/0x420 [ 539.667818][T22494] __x64_sys_sendmsg+0x19b/0x260 [ 539.667839][T22494] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 539.667867][T22494] ? __pfx_ksys_write+0x10/0x10 [ 539.667889][T22494] ? do_syscall_64+0xbe/0xfa0 [ 539.667910][T22494] do_syscall_64+0xfa/0xfa0 [ 539.667926][T22494] ? lockdep_hardirqs_on+0x9c/0x150 [ 539.667944][T22494] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.667961][T22494] ? clear_bhb_loop+0x60/0xb0 [ 539.667983][T22494] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.668005][T22494] RIP: 0033:0x7ff3d638efc9 [ 539.668019][T22494] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 539.668032][T22494] RSP: 002b:00007ff3d7237038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 539.668048][T22494] RAX: ffffffffffffffda RBX: 00007ff3d65e5fa0 RCX: 00007ff3d638efc9 [ 539.668059][T22494] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 539.668071][T22494] RBP: 00007ff3d7237090 R08: 0000000000000000 R09: 0000000000000000 [ 539.668082][T22494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 539.668094][T22494] R13: 00007ff3d65e6038 R14: 00007ff3d65e5fa0 R15: 00007ffda3f5b548 [ 539.668127][T22494] [ 540.159596][ T5833] Bluetooth: hci2: command 0x0405 tx timeout [ 540.444740][T22511] __nla_validate_parse: 10 callbacks suppressed [ 540.444761][T22511] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4847'. [ 540.548724][T22515] xt_bpf: check failed: parse error [ 540.779913][T22523] nbd21: detected capacity change from 0 to 127 [ 540.802653][T22541] FAULT_INJECTION: forcing a failure. [ 540.802653][T22541] name failslab, interval 1, probability 0, space 0, times 0 [ 540.821547][ T5148] block nbd21: Receive control failed (result -32) [ 540.832030][T22541] CPU: 0 UID: 0 PID: 22541 Comm: syz.3.4853 Not tainted syzkaller #0 PREEMPT(full) [ 540.832057][T22541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 540.832068][T22541] Call Trace: [ 540.832085][T22541] [ 540.832094][T22541] dump_stack_lvl+0x189/0x250 [ 540.832119][T22541] ? __pfx____ratelimit+0x10/0x10 [ 540.832147][T22541] ? __pfx_dump_stack_lvl+0x10/0x10 [ 540.832166][T22541] ? __pfx__printk+0x10/0x10 [ 540.832191][T22541] ? __pfx___might_resched+0x10/0x10 [ 540.832220][T22541] should_fail_ex+0x414/0x560 [ 540.832253][T22541] should_failslab+0xa8/0x100 [ 540.832278][T22541] __kmalloc_node_noprof+0xd2/0x800 [ 540.832298][T22541] ? crypto_create_tfm_node+0x83/0x3f0 [ 540.832329][T22541] crypto_create_tfm_node+0x83/0x3f0 [ 540.832358][T22541] crypto_ahash_init_tfm+0x162/0x770 [ 540.832382][T22541] ? __pfx___up_read+0x10/0x10 [ 540.832396][T22541] ? crypto_create_tfm_node+0x83/0x3f0 [ 540.832428][T22541] crypto_create_tfm_node+0x18c/0x3f0 [ 540.832457][T22541] crypto_spawn_tfm2+0x5c/0x90 [ 540.832478][T22541] crypto_ccm_init_tfm+0x4a/0x1f0 [ 540.832500][T22541] crypto_create_tfm_node+0x18c/0x3f0 [ 540.832531][T22541] crypto_spawn_tfm2+0x5c/0x90 [ 540.832552][T22541] crypto_rfc4309_init_tfm+0x45/0x150 [ 540.832573][T22541] crypto_create_tfm_node+0x18c/0x3f0 [ 540.832604][T22541] crypto_spawn_tfm2+0x5c/0x90 [ 540.832625][T22541] aead_init_geniv+0x169/0x240 [ 540.832652][T22541] crypto_create_tfm_node+0x18c/0x3f0 [ 540.832683][T22541] crypto_alloc_tfm_node+0x172/0x3f0 [ 540.832709][T22541] esp6_init_state+0x36b/0x1140 [ 540.832731][T22541] ? __sock_sendmsg+0x21c/0x270 [ 540.832749][T22541] ? ____sys_sendmsg+0x505/0x830 [ 540.832773][T22541] ? ___sys_sendmsg+0x21f/0x2a0 [ 540.832789][T22541] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 540.832816][T22541] ? __pfx_esp6_init_state+0x10/0x10 [ 540.832855][T22541] ? __lock_acquire+0xab9/0xd20 [ 540.832901][T22541] ? __xfrm_init_state+0x7ef/0x13f0 [ 540.832925][T22541] __xfrm_init_state+0xa76/0x13f0 [ 540.832942][T22541] ? __xfrm_init_state+0x7ef/0x13f0 [ 540.832965][T22541] xfrm_add_sa+0x3066/0x41d0 [ 540.832994][T22541] ? __pfx_xfrm_add_sa+0x10/0x10 [ 540.833010][T22541] ? apparmor_capable+0x137/0x1b0 [ 540.833039][T22541] ? __nla_parse+0x40/0x60 [ 540.833064][T22541] xfrm_user_rcv_msg+0x7a3/0xab0 [ 540.833095][T22541] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 540.833151][T22541] ? __pfx___mutex_trylock_common+0x10/0x10 [ 540.833191][T22541] ? rcu_is_watching+0x15/0xb0 [ 540.833216][T22541] ? trace_contention_end+0x39/0x120 [ 540.833242][T22541] ? __mutex_lock+0x335/0x1350 [ 540.833269][T22541] netlink_rcv_skb+0x208/0x470 [ 540.833295][T22541] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 540.833316][T22541] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 540.833356][T22541] ? netlink_deliver_tap+0x2e/0x1b0 [ 540.833379][T22541] ? netlink_deliver_tap+0x2e/0x1b0 [ 540.833405][T22541] xfrm_netlink_rcv+0x79/0x90 [ 540.833424][T22541] netlink_unicast+0x82f/0x9e0 [ 540.833456][T22541] ? __pfx_netlink_unicast+0x10/0x10 [ 540.833480][T22541] ? netlink_sendmsg+0x642/0xb30 [ 540.833503][T22541] ? skb_put+0x11b/0x210 [ 540.833531][T22541] netlink_sendmsg+0x805/0xb30 [ 540.833566][T22541] ? __pfx_netlink_sendmsg+0x10/0x10 [ 540.833594][T22541] ? aa_sock_msg_perm+0xf1/0x1d0 [ 540.833616][T22541] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 540.833638][T22541] ? __pfx_netlink_sendmsg+0x10/0x10 [ 540.833664][T22541] __sock_sendmsg+0x21c/0x270 [ 540.833689][T22541] ____sys_sendmsg+0x505/0x830 [ 540.833721][T22541] ? __pfx_____sys_sendmsg+0x10/0x10 [ 540.833757][T22541] ? import_iovec+0x74/0xa0 [ 540.833783][T22541] ___sys_sendmsg+0x21f/0x2a0 [ 540.833801][T22541] ? __pfx____sys_sendmsg+0x10/0x10 [ 540.833874][T22541] ? __fget_files+0x2a/0x420 [ 540.833894][T22541] ? __fget_files+0x3a0/0x420 [ 540.833926][T22541] __x64_sys_sendmsg+0x19b/0x260 [ 540.833945][T22541] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 540.833973][T22541] ? __pfx_ksys_write+0x10/0x10 [ 540.833996][T22541] ? do_syscall_64+0xbe/0xfa0 [ 540.834015][T22541] do_syscall_64+0xfa/0xfa0 [ 540.834030][T22541] ? lockdep_hardirqs_on+0x9c/0x150 [ 540.834047][T22541] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 540.834063][T22541] ? clear_bhb_loop+0x60/0xb0 [ 540.834091][T22541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 540.834108][T22541] RIP: 0033:0x7fab1b78efc9 [ 540.834124][T22541] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 540.834139][T22541] RSP: 002b:00007fab1c64d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 540.834158][T22541] RAX: ffffffffffffffda RBX: 00007fab1b9e5fa0 RCX: 00007fab1b78efc9 [ 540.834172][T22541] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 540.834183][T22541] RBP: 00007fab1c64d090 R08: 0000000000000000 R09: 0000000000000000 [ 540.834195][T22541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 540.834206][T22541] R13: 00007fab1b9e6038 R14: 00007fab1b9e5fa0 R15: 00007ffd8534b8f8 [ 540.834237][T22541] [ 541.417662][T22545] netlink: 576 bytes leftover after parsing attributes in process `syz.4.4857'. [ 541.581323][T22559] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4860'. [ 541.584849][T22561] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 541.655851][T22561] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 541.706167][T22567] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4863'. [ 541.735872][T22569] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 541.914653][T22576] FAULT_INJECTION: forcing a failure. [ 541.914653][T22576] name failslab, interval 1, probability 0, space 0, times 0 [ 541.936332][T22576] CPU: 1 UID: 0 PID: 22576 Comm: syz.0.4868 Not tainted syzkaller #0 PREEMPT(full) [ 541.936358][T22576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 541.936370][T22576] Call Trace: [ 541.936378][T22576] [ 541.936388][T22576] dump_stack_lvl+0x189/0x250 [ 541.936413][T22576] ? __pfx____ratelimit+0x10/0x10 [ 541.936440][T22576] ? __pfx_dump_stack_lvl+0x10/0x10 [ 541.936459][T22576] ? __pfx__printk+0x10/0x10 [ 541.936484][T22576] ? __pfx___might_resched+0x10/0x10 [ 541.936506][T22576] ? fs_reclaim_acquire+0x7d/0x100 [ 541.936532][T22576] should_fail_ex+0x414/0x560 [ 541.936563][T22576] should_failslab+0xa8/0x100 [ 541.936587][T22576] __kmalloc_noprof+0xcb/0x7f0 [ 541.936605][T22576] ? __crypto_alloc_tfmgfp+0x130/0x3e0 [ 541.936639][T22576] __crypto_alloc_tfmgfp+0x130/0x3e0 [ 541.936670][T22576] crypto_spawn_tfm+0x72/0xd0 [ 541.936694][T22576] cbcmac_init_tfm+0x4c/0xa0 [ 541.936729][T22576] crypto_create_tfm_node+0x279/0x3f0 [ 541.936762][T22576] crypto_ahash_init_tfm+0x162/0x770 [ 541.936787][T22576] ? __pfx___up_read+0x10/0x10 [ 541.936802][T22576] ? crypto_create_tfm_node+0x83/0x3f0 [ 541.936834][T22576] crypto_create_tfm_node+0x18c/0x3f0 [ 541.936866][T22576] crypto_spawn_tfm2+0x5c/0x90 [ 541.936888][T22576] crypto_ccm_init_tfm+0x4a/0x1f0 [ 541.936910][T22576] crypto_create_tfm_node+0x18c/0x3f0 [ 541.936941][T22576] crypto_spawn_tfm2+0x5c/0x90 [ 541.936963][T22576] crypto_rfc4309_init_tfm+0x45/0x150 [ 541.936985][T22576] crypto_create_tfm_node+0x18c/0x3f0 [ 541.937017][T22576] crypto_spawn_tfm2+0x5c/0x90 [ 541.937038][T22576] aead_init_geniv+0x169/0x240 [ 541.937067][T22576] crypto_create_tfm_node+0x18c/0x3f0 [ 541.937099][T22576] crypto_alloc_tfm_node+0x172/0x3f0 [ 541.937128][T22576] esp6_init_state+0x36b/0x1140 [ 541.937150][T22576] ? __sock_sendmsg+0x21c/0x270 [ 541.937168][T22576] ? ____sys_sendmsg+0x505/0x830 [ 541.937191][T22576] ? ___sys_sendmsg+0x21f/0x2a0 [ 541.937208][T22576] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 541.937235][T22576] ? __pfx_esp6_init_state+0x10/0x10 [ 541.937267][T22576] ? __lock_acquire+0xab9/0xd20 [ 541.937313][T22576] ? __xfrm_init_state+0x7ef/0x13f0 [ 541.937338][T22576] __xfrm_init_state+0xa76/0x13f0 [ 541.937355][T22576] ? __xfrm_init_state+0x7ef/0x13f0 [ 541.937378][T22576] xfrm_add_sa+0x3066/0x41d0 [ 541.937406][T22576] ? __pfx_xfrm_add_sa+0x10/0x10 [ 541.937422][T22576] ? apparmor_capable+0x137/0x1b0 [ 541.937451][T22576] ? __nla_parse+0x40/0x60 [ 541.937475][T22576] xfrm_user_rcv_msg+0x7a3/0xab0 [ 541.937500][T22576] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 541.937552][T22576] ? __pfx___mutex_trylock_common+0x10/0x10 [ 541.937581][T22576] ? rcu_is_watching+0x15/0xb0 [ 541.937603][T22576] ? trace_contention_end+0x39/0x120 [ 541.937628][T22576] ? __mutex_lock+0x335/0x1350 [ 541.937653][T22576] netlink_rcv_skb+0x208/0x470 [ 541.937679][T22576] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 541.937700][T22576] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 541.937745][T22576] ? netlink_deliver_tap+0x2e/0x1b0 [ 541.937768][T22576] ? netlink_deliver_tap+0x2e/0x1b0 [ 541.937794][T22576] xfrm_netlink_rcv+0x79/0x90 [ 541.937813][T22576] netlink_unicast+0x82f/0x9e0 [ 541.937845][T22576] ? __pfx_netlink_unicast+0x10/0x10 [ 541.937869][T22576] ? netlink_sendmsg+0x642/0xb30 [ 541.937891][T22576] ? skb_put+0x11b/0x210 [ 541.937919][T22576] netlink_sendmsg+0x805/0xb30 [ 541.937953][T22576] ? __pfx_netlink_sendmsg+0x10/0x10 [ 541.937981][T22576] ? aa_sock_msg_perm+0xf1/0x1d0 [ 541.938004][T22576] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 541.938025][T22576] ? __pfx_netlink_sendmsg+0x10/0x10 [ 541.938051][T22576] __sock_sendmsg+0x21c/0x270 [ 541.938073][T22576] ____sys_sendmsg+0x505/0x830 [ 541.938102][T22576] ? __pfx_____sys_sendmsg+0x10/0x10 [ 541.938138][T22576] ? import_iovec+0x74/0xa0 [ 541.938165][T22576] ___sys_sendmsg+0x21f/0x2a0 [ 541.938184][T22576] ? __pfx____sys_sendmsg+0x10/0x10 [ 541.938242][T22576] ? __fget_files+0x2a/0x420 [ 541.938262][T22576] ? __fget_files+0x3a0/0x420 [ 541.938294][T22576] __x64_sys_sendmsg+0x19b/0x260 [ 541.938315][T22576] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 541.938344][T22576] ? __pfx_ksys_write+0x10/0x10 [ 541.938368][T22576] ? do_syscall_64+0xbe/0xfa0 [ 541.938389][T22576] do_syscall_64+0xfa/0xfa0 [ 541.938406][T22576] ? lockdep_hardirqs_on+0x9c/0x150 [ 541.938424][T22576] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 541.938443][T22576] ? clear_bhb_loop+0x60/0xb0 [ 541.938464][T22576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 541.938482][T22576] RIP: 0033:0x7f900158efc9 [ 541.938500][T22576] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 541.938516][T22576] RSP: 002b:00007f90023f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 541.938536][T22576] RAX: ffffffffffffffda RBX: 00007f90017e5fa0 RCX: 00007f900158efc9 [ 541.938551][T22576] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 541.938563][T22576] RBP: 00007f90023f7090 R08: 0000000000000000 R09: 0000000000000000 [ 541.938575][T22576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 541.938585][T22576] R13: 00007f90017e6038 R14: 00007f90017e5fa0 R15: 00007ffee2de7928 [ 541.938619][T22576] [ 542.521978][T22592] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4873'. [ 542.532072][T22592] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4873'. [ 542.546645][T22592] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4873'. [ 542.557468][T22592] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4873'. [ 542.582329][T22578] nbd22: detected capacity change from 0 to 127 [ 542.598993][ T5148] block nbd22: Receive control failed (result -32) [ 542.800994][T22605] FAULT_INJECTION: forcing a failure. [ 542.800994][T22605] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 542.814970][T22605] CPU: 1 UID: 0 PID: 22605 Comm: syz.4.4877 Not tainted syzkaller #0 PREEMPT(full) [ 542.814996][T22605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 542.815007][T22605] Call Trace: [ 542.815015][T22605] [ 542.815023][T22605] dump_stack_lvl+0x189/0x250 [ 542.815048][T22605] ? __pfx____ratelimit+0x10/0x10 [ 542.815072][T22605] ? __pfx_dump_stack_lvl+0x10/0x10 [ 542.815088][T22605] ? __pfx__printk+0x10/0x10 [ 542.815105][T22605] ? __might_fault+0xb0/0x130 [ 542.815134][T22605] should_fail_ex+0x414/0x560 [ 542.815163][T22605] _copy_from_user+0x2d/0xb0 [ 542.815186][T22605] ___sys_sendmsg+0x158/0x2a0 [ 542.815206][T22605] ? __pfx____sys_sendmsg+0x10/0x10 [ 542.815259][T22605] ? __fget_files+0x2a/0x420 [ 542.815279][T22605] ? __fget_files+0x3a0/0x420 [ 542.815310][T22605] __x64_sys_sendmsg+0x19b/0x260 [ 542.815330][T22605] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 542.815357][T22605] ? __pfx_ksys_write+0x10/0x10 [ 542.815379][T22605] ? do_syscall_64+0xbe/0xfa0 [ 542.815400][T22605] do_syscall_64+0xfa/0xfa0 [ 542.815417][T22605] ? lockdep_hardirqs_on+0x9c/0x150 [ 542.815436][T22605] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.815453][T22605] ? clear_bhb_loop+0x60/0xb0 [ 542.815476][T22605] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.815491][T22605] RIP: 0033:0x7f74cf98efc9 [ 542.815506][T22605] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 542.815520][T22605] RSP: 002b:00007f74d0808038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 542.815540][T22605] RAX: ffffffffffffffda RBX: 00007f74cfbe5fa0 RCX: 00007f74cf98efc9 [ 542.815554][T22605] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 542.815565][T22605] RBP: 00007f74d0808090 R08: 0000000000000000 R09: 0000000000000000 [ 542.815576][T22605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 542.815587][T22605] R13: 00007f74cfbe6038 R14: 00007f74cfbe5fa0 R15: 00007ffc6f5b8708 [ 542.815618][T22605] [ 543.056887][T22609] netdevsim netdevsim2: Firmware load for './file0/../file0' refused, path contains '..' component [ 543.098534][T22611] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4880'. [ 543.722879][T19298] block nbd1: Possible stuck request ffff8880251ee000: control (read@0,1024B). Runtime 180 seconds [ 543.727172][ T56] block nbd6: Possible stuck request ffff888025347000: control (read@0,1024B). Runtime 150 seconds [ 543.733695][T19298] block nbd1: Possible stuck request ffff8880251ee1c0: control (read@1024,1024B). Runtime 180 seconds [ 543.733725][T19298] block nbd1: Possible stuck request ffff8880251ee380: control (read@2048,1024B). Runtime 180 seconds [ 543.770305][ T56] block nbd6: Possible stuck request ffff8880253471c0: control (read@1024,1024B). Runtime 150 seconds [ 543.782139][ T56] block nbd6: Possible stuck request ffff888025347380: control (read@2048,1024B). Runtime 150 seconds [ 543.793156][T19298] block nbd1: Possible stuck request ffff8880251ee540: control (read@3072,1024B). Runtime 180 seconds [ 543.805518][ T56] block nbd6: Possible stuck request ffff888025347540: control (read@3072,1024B). Runtime 150 seconds [ 543.895653][T22643] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 543.987302][T22646] netlink: 316 bytes leftover after parsing attributes in process `syz.2.4893'. [ 544.001358][T22647] FAULT_INJECTION: forcing a failure. [ 544.001358][T22647] name failslab, interval 1, probability 0, space 0, times 0 [ 544.039015][T22647] CPU: 1 UID: 0 PID: 22647 Comm: syz.3.4894 Not tainted syzkaller #0 PREEMPT(full) [ 544.039041][T22647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 544.039052][T22647] Call Trace: [ 544.039060][T22647] [ 544.039069][T22647] dump_stack_lvl+0x189/0x250 [ 544.039094][T22647] ? __pfx____ratelimit+0x10/0x10 [ 544.039120][T22647] ? __pfx_dump_stack_lvl+0x10/0x10 [ 544.039139][T22647] ? __pfx__printk+0x10/0x10 [ 544.039163][T22647] ? __pfx___might_resched+0x10/0x10 [ 544.039185][T22647] ? fs_reclaim_acquire+0x7d/0x100 [ 544.039211][T22647] should_fail_ex+0x414/0x560 [ 544.039241][T22647] should_failslab+0xa8/0x100 [ 544.039265][T22647] kmem_cache_alloc_node_noprof+0x77/0x710 [ 544.039284][T22647] ? __alloc_skb+0x112/0x2d0 [ 544.039307][T22647] ? netlink_autobind+0xdb/0x300 [ 544.039336][T22647] __alloc_skb+0x112/0x2d0 [ 544.039360][T22647] netlink_sendmsg+0x5c6/0xb30 [ 544.039395][T22647] ? __pfx_netlink_sendmsg+0x10/0x10 [ 544.039420][T22647] ? aa_sock_msg_perm+0xf1/0x1d0 [ 544.039441][T22647] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 544.039463][T22647] ? __pfx_netlink_sendmsg+0x10/0x10 [ 544.039488][T22647] __sock_sendmsg+0x21c/0x270 [ 544.039513][T22647] ____sys_sendmsg+0x505/0x830 [ 544.039546][T22647] ? __pfx_____sys_sendmsg+0x10/0x10 [ 544.039581][T22647] ? import_iovec+0x74/0xa0 [ 544.039608][T22647] ___sys_sendmsg+0x21f/0x2a0 [ 544.039629][T22647] ? __pfx____sys_sendmsg+0x10/0x10 [ 544.039684][T22647] ? __fget_files+0x2a/0x420 [ 544.039704][T22647] ? __fget_files+0x3a0/0x420 [ 544.039736][T22647] __x64_sys_sendmsg+0x19b/0x260 [ 544.039757][T22647] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 544.039785][T22647] ? __pfx_ksys_write+0x10/0x10 [ 544.039809][T22647] ? do_syscall_64+0xbe/0xfa0 [ 544.039831][T22647] do_syscall_64+0xfa/0xfa0 [ 544.039855][T22647] ? lockdep_hardirqs_on+0x9c/0x150 [ 544.039873][T22647] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.039891][T22647] ? clear_bhb_loop+0x60/0xb0 [ 544.039914][T22647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.039932][T22647] RIP: 0033:0x7fab1b78efc9 [ 544.039949][T22647] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 544.039963][T22647] RSP: 002b:00007fab1c64d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 544.039980][T22647] RAX: ffffffffffffffda RBX: 00007fab1b9e5fa0 RCX: 00007fab1b78efc9 [ 544.039993][T22647] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 544.040004][T22647] RBP: 00007fab1c64d090 R08: 0000000000000000 R09: 0000000000000000 [ 544.040014][T22647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 544.040025][T22647] R13: 00007fab1b9e6038 R14: 00007fab1b9e5fa0 R15: 00007ffd8534b8f8 [ 544.040055][T22647] [ 544.697964][T22675] erspan0: entered promiscuous mode [ 544.704979][T22675] erspan0: entered allmulticast mode [ 545.273164][T22704] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 545.584097][T22725] __nla_validate_parse: 4 callbacks suppressed [ 545.584115][T22725] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4921'. [ 545.593460][T22724] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4923'. [ 545.625712][T22726] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4922'. [ 545.926501][T22742] netlink: 'syz.1.4930': attribute type 1 has an invalid length. [ 545.937934][T22742] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4930'. [ 546.005894][T22748] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4934'. [ 546.045383][T22748] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 546.067702][T22755] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4935'. [ 546.144258][T22757] FAULT_INJECTION: forcing a failure. [ 546.144258][T22757] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 546.169168][T22757] CPU: 1 UID: 0 PID: 22757 Comm: syz.2.4937 Not tainted syzkaller #0 PREEMPT(full) [ 546.169194][T22757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 546.169206][T22757] Call Trace: [ 546.169214][T22757] [ 546.169223][T22757] dump_stack_lvl+0x189/0x250 [ 546.169249][T22757] ? __pfx____ratelimit+0x10/0x10 [ 546.169275][T22757] ? __pfx_dump_stack_lvl+0x10/0x10 [ 546.169294][T22757] ? __pfx__printk+0x10/0x10 [ 546.169313][T22757] ? __might_fault+0xb0/0x130 [ 546.169341][T22757] should_fail_ex+0x414/0x560 [ 546.169370][T22757] _copy_from_user+0x2d/0xb0 [ 546.169397][T22757] ___sys_sendmsg+0x158/0x2a0 [ 546.169416][T22757] ? __pfx____sys_sendmsg+0x10/0x10 [ 546.169467][T22757] ? __fget_files+0x2a/0x420 [ 546.169488][T22757] ? __fget_files+0x3a0/0x420 [ 546.169520][T22757] __x64_sys_sendmsg+0x19b/0x260 [ 546.169541][T22757] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 546.169570][T22757] ? __pfx_ksys_write+0x10/0x10 [ 546.169593][T22757] ? do_syscall_64+0xbe/0xfa0 [ 546.169616][T22757] do_syscall_64+0xfa/0xfa0 [ 546.169632][T22757] ? lockdep_hardirqs_on+0x9c/0x150 [ 546.169656][T22757] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 546.169675][T22757] ? clear_bhb_loop+0x60/0xb0 [ 546.169698][T22757] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 546.169716][T22757] RIP: 0033:0x7ff3d638efc9 [ 546.169733][T22757] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 546.169749][T22757] RSP: 002b:00007ff3d7237038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 546.169770][T22757] RAX: ffffffffffffffda RBX: 00007ff3d65e5fa0 RCX: 00007ff3d638efc9 [ 546.169784][T22757] RDX: 0000000000004040 RSI: 0000200000000000 RDI: 0000000000000003 [ 546.169796][T22757] RBP: 00007ff3d7237090 R08: 0000000000000000 R09: 0000000000000000 [ 546.169808][T22757] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 546.169820][T22757] R13: 00007ff3d65e6038 R14: 00007ff3d65e5fa0 R15: 00007ffda3f5b548 [ 546.169853][T22757] [ 546.374580][ T56] block nbd14: Possible stuck request ffff8880259e0000: control (read@0,1024B). Runtime 30 seconds [ 546.386001][ T56] block nbd14: Possible stuck request ffff8880259e01c0: control (read@1024,1024B). Runtime 30 seconds [ 546.393491][T22762] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4939'. [ 546.397857][ T56] block nbd14: Possible stuck request ffff8880259e0380: control (read@2048,1024B). Runtime 30 seconds [ 546.418125][ T56] block nbd14: Possible stuck request ffff8880259e0540: control (read@3072,1024B). Runtime 30 seconds [ 546.556785][T22773] netlink: 'syz.1.4940': attribute type 32 has an invalid length. [ 546.566327][T22773] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4940'. [ 546.577366][T22774] netlink: 'syz.0.4942': attribute type 19 has an invalid length. [ 546.617142][T22773] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 546.843269][T22781] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 546.866751][T22794] FAULT_INJECTION: forcing a failure. [ 546.866751][T22794] name failslab, interval 1, probability 0, space 0, times 0 [ 546.880610][T22794] CPU: 0 UID: 0 PID: 22794 Comm: syz.1.4951 Not tainted syzkaller #0 PREEMPT(full) [ 546.880633][T22794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 546.880642][T22794] Call Trace: [ 546.880648][T22794] [ 546.880655][T22794] dump_stack_lvl+0x189/0x250 [ 546.880676][T22794] ? __pfx____ratelimit+0x10/0x10 [ 546.880697][T22794] ? __pfx_dump_stack_lvl+0x10/0x10 [ 546.880712][T22794] ? __pfx__printk+0x10/0x10 [ 546.880731][T22794] ? __pfx___might_resched+0x10/0x10 [ 546.880749][T22794] ? fs_reclaim_acquire+0x7d/0x100 [ 546.880770][T22794] should_fail_ex+0x414/0x560 [ 546.880795][T22794] should_failslab+0xa8/0x100 [ 546.880814][T22794] kmem_cache_alloc_node_noprof+0x77/0x710 [ 546.880829][T22794] ? __alloc_skb+0x112/0x2d0 [ 546.880848][T22794] ? netlink_autobind+0xdb/0x300 [ 546.880872][T22794] __alloc_skb+0x112/0x2d0 [ 546.880893][T22794] netlink_sendmsg+0x5c6/0xb30 [ 546.880919][T22794] ? __pfx_netlink_sendmsg+0x10/0x10 [ 546.880942][T22794] ? aa_sock_msg_perm+0xf1/0x1d0 [ 546.880959][T22794] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 546.880977][T22794] ? __pfx_netlink_sendmsg+0x10/0x10 [ 546.880996][T22794] __sock_sendmsg+0x21c/0x270 [ 546.881015][T22794] ____sys_sendmsg+0x505/0x830 [ 546.881040][T22794] ? __pfx_____sys_sendmsg+0x10/0x10 [ 546.881067][T22794] ? import_iovec+0x74/0xa0 [ 546.881088][T22794] ___sys_sendmsg+0x21f/0x2a0 [ 546.881106][T22794] ? __pfx____sys_sendmsg+0x10/0x10 [ 546.881150][T22794] ? __fget_files+0x2a/0x420 [ 546.881166][T22794] ? __fget_files+0x3a0/0x420 [ 546.881191][T22794] __x64_sys_sendmsg+0x19b/0x260 [ 546.881207][T22794] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 546.881235][T22794] ? __pfx_ksys_write+0x10/0x10 [ 546.881253][T22794] ? do_syscall_64+0xbe/0xfa0 [ 546.881270][T22794] do_syscall_64+0xfa/0xfa0 [ 546.881283][T22794] ? lockdep_hardirqs_on+0x9c/0x150 [ 546.881296][T22794] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 546.881310][T22794] ? clear_bhb_loop+0x60/0xb0 [ 546.881328][T22794] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 546.881341][T22794] RIP: 0033:0x7effcfb8efc9 [ 546.881355][T22794] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 546.881368][T22794] RSP: 002b:00007effd0aa6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 546.881384][T22794] RAX: ffffffffffffffda RBX: 00007effcfde5fa0 RCX: 00007effcfb8efc9 [ 546.881395][T22794] RDX: 0000000000004040 RSI: 0000200000000000 RDI: 0000000000000003 [ 546.881404][T22794] RBP: 00007effd0aa6090 R08: 0000000000000000 R09: 0000000000000000 [ 546.881413][T22794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 546.881422][T22794] R13: 00007effcfde6038 R14: 00007effcfde5fa0 R15: 00007fff40c74c58 [ 546.881446][T22794] [ 547.363012][T22812] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4956'. [ 547.433004][T22821] netlink: 'syz.0.4957': attribute type 2 has an invalid length. [ 547.442155][T22821] netlink: 'syz.0.4957': attribute type 8 has an invalid length. [ 547.451862][T22821] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4957'. [ 547.540659][T22818] syz.0.4957 (22818) used greatest stack depth: 17832 bytes left [ 547.803459][T22826] syzkaller1: entered promiscuous mode [ 547.809267][T22826] syzkaller1: entered allmulticast mode [ 548.131176][T22852] nbd23: detected capacity change from 0 to 127 [ 548.148170][ T5148] block nbd23: Receive control failed (result -32) [ 548.378557][T22881] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 548.508587][T22889] FAULT_INJECTION: forcing a failure. [ 548.508587][T22889] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 548.522742][T22889] CPU: 0 UID: 0 PID: 22889 Comm: syz.0.4979 Not tainted syzkaller #0 PREEMPT(full) [ 548.522768][T22889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 548.522779][T22889] Call Trace: [ 548.522788][T22889] [ 548.522796][T22889] dump_stack_lvl+0x189/0x250 [ 548.522821][T22889] ? __pfx____ratelimit+0x10/0x10 [ 548.522847][T22889] ? __pfx_dump_stack_lvl+0x10/0x10 [ 548.522864][T22889] ? __pfx__printk+0x10/0x10 [ 548.522883][T22889] ? __might_fault+0xb0/0x130 [ 548.522911][T22889] should_fail_ex+0x414/0x560 [ 548.522941][T22889] _copy_from_iter+0x1de/0x1790 [ 548.522966][T22889] ? rcu_is_watching+0x15/0xb0 [ 548.522995][T22889] ? kmalloc_reserve+0xbd/0x290 [ 548.523020][T22889] ? __pfx__copy_from_iter+0x10/0x10 [ 548.523042][T22889] ? __build_skb_around+0x262/0x3f0 [ 548.523067][T22889] ? netlink_sendmsg+0x642/0xb30 [ 548.523088][T22889] ? skb_put+0x11b/0x210 [ 548.523121][T22889] netlink_sendmsg+0x6b2/0xb30 [ 548.523152][T22889] ? __pfx_netlink_sendmsg+0x10/0x10 [ 548.523178][T22889] ? aa_sock_msg_perm+0xf1/0x1d0 [ 548.523200][T22889] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 548.523220][T22889] ? __pfx_netlink_sendmsg+0x10/0x10 [ 548.523242][T22889] __sock_sendmsg+0x21c/0x270 [ 548.523265][T22889] ____sys_sendmsg+0x505/0x830 [ 548.523297][T22889] ? __pfx_____sys_sendmsg+0x10/0x10 [ 548.523332][T22889] ? import_iovec+0x74/0xa0 [ 548.523357][T22889] ___sys_sendmsg+0x21f/0x2a0 [ 548.523378][T22889] ? __pfx____sys_sendmsg+0x10/0x10 [ 548.523432][T22889] ? __fget_files+0x2a/0x420 [ 548.523453][T22889] ? __fget_files+0x3a0/0x420 [ 548.523482][T22889] __x64_sys_sendmsg+0x19b/0x260 [ 548.523503][T22889] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 548.523529][T22889] ? __pfx_ksys_write+0x10/0x10 [ 548.523549][T22889] ? do_syscall_64+0xbe/0xfa0 [ 548.523569][T22889] do_syscall_64+0xfa/0xfa0 [ 548.523584][T22889] ? lockdep_hardirqs_on+0x9c/0x150 [ 548.523599][T22889] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 548.523663][T22889] ? clear_bhb_loop+0x60/0xb0 [ 548.523683][T22889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 548.523700][T22889] RIP: 0033:0x7f900158efc9 [ 548.523717][T22889] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 548.523730][T22889] RSP: 002b:00007f90023f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 548.523753][T22889] RAX: ffffffffffffffda RBX: 00007f90017e5fa0 RCX: 00007f900158efc9 [ 548.523765][T22889] RDX: 0000000000004040 RSI: 0000200000000000 RDI: 0000000000000003 [ 548.523776][T22889] RBP: 00007f90023f7090 R08: 0000000000000000 R09: 0000000000000000 [ 548.523787][T22889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 548.523797][T22889] R13: 00007f90017e6038 R14: 00007f90017e5fa0 R15: 00007ffee2de7928 [ 548.523827][T22889] [ 549.005033][T22902] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 549.061834][T22902] gtp0: entered promiscuous mode [ 549.066833][T22902] gtp0: entered allmulticast mode [ 549.076854][T22902] tipc: Enabled bearer , priority 0 [ 549.212824][T22914] FAULT_INJECTION: forcing a failure. [ 549.212824][T22914] name failslab, interval 1, probability 0, space 0, times 0 [ 549.233189][T22914] CPU: 0 UID: 0 PID: 22914 Comm: syz.0.4989 Not tainted syzkaller #0 PREEMPT(full) [ 549.233215][T22914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 549.233226][T22914] Call Trace: [ 549.233234][T22914] [ 549.233243][T22914] dump_stack_lvl+0x189/0x250 [ 549.233268][T22914] ? __pfx____ratelimit+0x10/0x10 [ 549.233294][T22914] ? __pfx_dump_stack_lvl+0x10/0x10 [ 549.233314][T22914] ? __pfx__printk+0x10/0x10 [ 549.233338][T22914] ? __pfx___might_resched+0x10/0x10 [ 549.233367][T22914] should_fail_ex+0x414/0x560 [ 549.233399][T22914] should_failslab+0xa8/0x100 [ 549.233423][T22914] kmem_cache_alloc_node_noprof+0x77/0x710 [ 549.233443][T22914] ? __alloc_skb+0x112/0x2d0 [ 549.233474][T22914] __alloc_skb+0x112/0x2d0 [ 549.233501][T22914] netlink_ack+0x146/0xa50 [ 549.233520][T22914] ? __pfx_genl_rcv_msg+0x10/0x10 [ 549.233537][T22914] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 549.233558][T22914] ? __pfx_nl80211_post_doit+0x10/0x10 [ 549.233582][T22914] ? __asan_memcpy+0x40/0x70 [ 549.233598][T22914] ? __pfx_ref_tracker_free+0x10/0x10 [ 549.233624][T22914] netlink_rcv_skb+0x28c/0x470 [ 549.233645][T22914] ? __lock_acquire+0xab9/0xd20 [ 549.233668][T22914] ? __pfx_genl_rcv_msg+0x10/0x10 [ 549.233688][T22914] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 549.233729][T22914] ? down_read+0x1ad/0x2e0 [ 549.233750][T22914] genl_rcv+0x28/0x40 [ 549.233767][T22914] netlink_unicast+0x82f/0x9e0 [ 549.233798][T22914] ? __pfx_netlink_unicast+0x10/0x10 [ 549.233823][T22914] ? netlink_sendmsg+0x642/0xb30 [ 549.233843][T22914] ? skb_put+0x11b/0x210 [ 549.233870][T22914] netlink_sendmsg+0x805/0xb30 [ 549.233902][T22914] ? __pfx_netlink_sendmsg+0x10/0x10 [ 549.233930][T22914] ? aa_sock_msg_perm+0xf1/0x1d0 [ 549.233953][T22914] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 549.233975][T22914] ? __pfx_netlink_sendmsg+0x10/0x10 [ 549.234001][T22914] __sock_sendmsg+0x21c/0x270 [ 549.234033][T22914] ____sys_sendmsg+0x505/0x830 [ 549.234065][T22914] ? __pfx_____sys_sendmsg+0x10/0x10 [ 549.234099][T22914] ? import_iovec+0x74/0xa0 [ 549.234127][T22914] ___sys_sendmsg+0x21f/0x2a0 [ 549.234147][T22914] ? __pfx____sys_sendmsg+0x10/0x10 [ 549.234201][T22914] ? __fget_files+0x2a/0x420 [ 549.234222][T22914] ? __fget_files+0x3a0/0x420 [ 549.234253][T22914] __x64_sys_sendmsg+0x19b/0x260 [ 549.234274][T22914] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 549.234303][T22914] ? __pfx_ksys_write+0x10/0x10 [ 549.234327][T22914] ? do_syscall_64+0xbe/0xfa0 [ 549.234350][T22914] do_syscall_64+0xfa/0xfa0 [ 549.234366][T22914] ? lockdep_hardirqs_on+0x9c/0x150 [ 549.234385][T22914] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.234403][T22914] ? clear_bhb_loop+0x60/0xb0 [ 549.234425][T22914] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.234443][T22914] RIP: 0033:0x7f900158efc9 [ 549.234460][T22914] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 549.234475][T22914] RSP: 002b:00007f90023f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 549.234495][T22914] RAX: ffffffffffffffda RBX: 00007f90017e5fa0 RCX: 00007f900158efc9 [ 549.234509][T22914] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 549.234520][T22914] RBP: 00007f90023f7090 R08: 0000000000000000 R09: 0000000000000000 [ 549.234532][T22914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 549.234543][T22914] R13: 00007f90017e6038 R14: 00007f90017e5fa0 R15: 00007ffee2de7928 [ 549.234576][T22914] [ 549.708195][T22926] xt_NFQUEUE: number of total queues is 0 [ 549.796582][T22935] FAULT_INJECTION: forcing a failure. [ 549.796582][T22935] name failslab, interval 1, probability 0, space 0, times 0 [ 549.811236][T22935] CPU: 0 UID: 0 PID: 22935 Comm: syz.3.4998 Not tainted syzkaller #0 PREEMPT(full) [ 549.811260][T22935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 549.811279][T22935] Call Trace: [ 549.811288][T22935] [ 549.811297][T22935] dump_stack_lvl+0x189/0x250 [ 549.811321][T22935] ? __pfx____ratelimit+0x10/0x10 [ 549.811349][T22935] ? __pfx_dump_stack_lvl+0x10/0x10 [ 549.811368][T22935] ? __pfx__printk+0x10/0x10 [ 549.811393][T22935] ? __lock_acquire+0xab9/0xd20 [ 549.811423][T22935] should_fail_ex+0x414/0x560 [ 549.811455][T22935] should_failslab+0xa8/0x100 [ 549.811479][T22935] kmem_cache_alloc_noprof+0x74/0x6e0 [ 549.811499][T22935] ? skb_clone+0x212/0x3a0 [ 549.811523][T22935] skb_clone+0x212/0x3a0 [ 549.811545][T22935] __netlink_deliver_tap+0x404/0x850 [ 549.811584][T22935] ? netlink_deliver_tap+0x2e/0x1b0 [ 549.811608][T22935] netlink_deliver_tap+0x19c/0x1b0 [ 549.811633][T22935] netlink_unicast+0x7fa/0x9e0 [ 549.811665][T22935] ? __pfx_netlink_unicast+0x10/0x10 [ 549.811690][T22935] ? netlink_sendmsg+0x642/0xb30 [ 549.811712][T22935] ? skb_put+0x11b/0x210 [ 549.811739][T22935] netlink_sendmsg+0x805/0xb30 [ 549.811773][T22935] ? __pfx_netlink_sendmsg+0x10/0x10 [ 549.811802][T22935] ? aa_sock_msg_perm+0xf1/0x1d0 [ 549.811825][T22935] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 549.811847][T22935] ? __pfx_netlink_sendmsg+0x10/0x10 [ 549.811873][T22935] __sock_sendmsg+0x21c/0x270 [ 549.811907][T22935] ____sys_sendmsg+0x505/0x830 [ 549.811939][T22935] ? __pfx_____sys_sendmsg+0x10/0x10 [ 549.811975][T22935] ? import_iovec+0x74/0xa0 [ 549.812003][T22935] ___sys_sendmsg+0x21f/0x2a0 [ 549.812022][T22935] ? __pfx____sys_sendmsg+0x10/0x10 [ 549.812079][T22935] ? __fget_files+0x2a/0x420 [ 549.812100][T22935] ? __fget_files+0x3a0/0x420 [ 549.812132][T22935] __x64_sys_sendmsg+0x19b/0x260 [ 549.812153][T22935] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 549.812182][T22935] ? __pfx_ksys_write+0x10/0x10 [ 549.812206][T22935] ? do_syscall_64+0xbe/0xfa0 [ 549.812228][T22935] do_syscall_64+0xfa/0xfa0 [ 549.812245][T22935] ? lockdep_hardirqs_on+0x9c/0x150 [ 549.812263][T22935] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.812287][T22935] ? clear_bhb_loop+0x60/0xb0 [ 549.812309][T22935] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.812328][T22935] RIP: 0033:0x7fab1b78efc9 [ 549.812346][T22935] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 549.812362][T22935] RSP: 002b:00007fab1c64d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 549.812383][T22935] RAX: ffffffffffffffda RBX: 00007fab1b9e5fa0 RCX: 00007fab1b78efc9 [ 549.812396][T22935] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000003 [ 549.812407][T22935] RBP: 00007fab1c64d090 R08: 0000000000000000 R09: 0000000000000000 [ 549.812417][T22935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 549.812429][T22935] R13: 00007fab1b9e6038 R14: 00007fab1b9e5fa0 R15: 00007ffd8534b8f8 [ 549.812460][T22935] [ 550.296197][T19298] block nbd15: Possible stuck request ffff888025a47000: control (read@0,1024B). Runtime 30 seconds [ 550.314828][ T39] block nbd7: Possible stuck request ffff8880253be000: control (read@0,1024B). Runtime 150 seconds [ 550.325856][T19298] block nbd15: Possible stuck request ffff888025a471c0: control (read@1024,1024B). Runtime 30 seconds [ 550.336983][ T39] block nbd7: Possible stuck request ffff8880253be1c0: control (read@1024,1024B). Runtime 150 seconds [ 550.352810][T19298] block nbd15: Possible stuck request ffff888025a47380: control (read@2048,1024B). Runtime 30 seconds [ 550.364813][ T39] block nbd7: Possible stuck request ffff8880253be380: control (read@2048,1024B). Runtime 150 seconds [ 550.379963][T19298] block nbd15: Possible stuck request ffff888025a47540: control (read@3072,1024B). Runtime 30 seconds [ 550.391299][ T39] block nbd7: Possible stuck request ffff8880253be540: control (read@3072,1024B). Runtime 150 seconds [ 550.563340][T22964] netlink: 'syz.3.5009': attribute type 13 has an invalid length. [ 550.591581][T22964] __nla_validate_parse: 3 callbacks suppressed [ 550.591600][T22964] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5009'. [ 550.629956][T22964] netlink: 'syz.3.5009': attribute type 13 has an invalid length. [ 550.637816][T22964] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5009'. [ 550.695439][T22973] FAULT_INJECTION: forcing a failure. [ 550.695439][T22973] name failslab, interval 1, probability 0, space 0, times 0 [ 550.741727][T22973] CPU: 0 UID: 0 PID: 22973 Comm: syz.2.5014 Not tainted syzkaller #0 PREEMPT(full) [ 550.741753][T22973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 550.741765][T22973] Call Trace: [ 550.741773][T22973] [ 550.741781][T22973] dump_stack_lvl+0x189/0x250 [ 550.741806][T22973] ? __pfx____ratelimit+0x10/0x10 [ 550.741833][T22973] ? __pfx_dump_stack_lvl+0x10/0x10 [ 550.741851][T22973] ? __pfx__printk+0x10/0x10 [ 550.741874][T22973] ? __pfx___might_resched+0x10/0x10 [ 550.741902][T22973] should_fail_ex+0x414/0x560 [ 550.741935][T22973] should_failslab+0xa8/0x100 [ 550.741960][T22973] __kmalloc_noprof+0xcb/0x7f0 [ 550.741978][T22973] ? rcu_read_lock_any_held+0xb3/0x120 [ 550.742002][T22973] ? kernfs_fop_write_iter+0x158/0x540 [ 550.742022][T22973] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 550.742053][T22973] kernfs_fop_write_iter+0x158/0x540 [ 550.742082][T22973] vfs_write+0x5c9/0xb30 [ 550.742106][T22973] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 550.742135][T22973] ? __pfx_vfs_write+0x10/0x10 [ 550.742167][T22973] ? __fget_files+0x2a/0x420 [ 550.742197][T22973] ksys_write+0x145/0x250 [ 550.742220][T22973] ? __pfx_ksys_write+0x10/0x10 [ 550.742242][T22973] ? do_syscall_64+0xbe/0xfa0 [ 550.742264][T22973] do_syscall_64+0xfa/0xfa0 [ 550.742280][T22973] ? lockdep_hardirqs_on+0x9c/0x150 [ 550.742298][T22973] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 550.742316][T22973] ? clear_bhb_loop+0x60/0xb0 [ 550.742336][T22973] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 550.742353][T22973] RIP: 0033:0x7ff3d638efc9 [ 550.742369][T22973] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 550.742384][T22973] RSP: 002b:00007ff3d7237038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 550.742404][T22973] RAX: ffffffffffffffda RBX: 00007ff3d65e5fa0 RCX: 00007ff3d638efc9 [ 550.742418][T22973] RDX: 0000000000000012 RSI: 0000200000000200 RDI: 0000000000000004 [ 550.742429][T22973] RBP: 00007ff3d7237090 R08: 0000000000000000 R09: 0000000000000000 [ 550.742439][T22973] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 550.742449][T22973] R13: 00007ff3d65e6038 R14: 00007ff3d65e5fa0 R15: 00007ffda3f5b548 [ 550.742482][T22973] [ 551.081226][T22983] netlink: 'syz.1.5019': attribute type 7 has an invalid length. [ 551.152865][T22983] : entered promiscuous mode [ 551.271660][T22994] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5024'. [ 551.300311][T22994] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 551.317878][T22994] netlink: 'syz.3.5024': attribute type 2 has an invalid length. [ 551.344295][T22994] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.5024'. [ 551.358861][T22994] nbd: must specify a device to reconfigure [ 551.429664][T23007] mac80211_hwsim hwsim41 syzkaller0: entered promiscuous mode [ 551.459692][T23007] mac80211_hwsim hwsim41 syzkaller0: entered allmulticast mode [ 551.468326][T23007] tipc: Resetting bearer [ 551.545320][T23018] netlink: 'syz.3.5033': attribute type 7 has an invalid length. [ 551.558542][T23017] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5031'. [ 551.585966][T23018] FAULT_INJECTION: forcing a failure. [ 551.585966][T23018] name failslab, interval 1, probability 0, space 0, times 0 [ 551.600004][T23003] nbd24: detected capacity change from 0 to 127 [ 551.616229][ T5148] block nbd24: Receive control failed (result -32) [ 551.643505][T23018] CPU: 1 UID: 0 PID: 23018 Comm: syz.3.5033 Not tainted syzkaller #0 PREEMPT(full) [ 551.643532][T23018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 551.643544][T23018] Call Trace: [ 551.643552][T23018] [ 551.643560][T23018] dump_stack_lvl+0x189/0x250 [ 551.643585][T23018] ? __pfx____ratelimit+0x10/0x10 [ 551.643611][T23018] ? __pfx_dump_stack_lvl+0x10/0x10 [ 551.643629][T23018] ? __pfx__printk+0x10/0x10 [ 551.643654][T23018] ? __pfx___might_resched+0x10/0x10 [ 551.643677][T23018] ? fs_reclaim_acquire+0x7d/0x100 [ 551.643704][T23018] should_fail_ex+0x414/0x560 [ 551.643737][T23018] should_failslab+0xa8/0x100 [ 551.643762][T23018] kmem_cache_alloc_node_noprof+0x77/0x710 [ 551.643782][T23018] ? __alloc_skb+0x112/0x2d0 [ 551.643805][T23018] ? __pfx___nla_validate_parse+0x10/0x10 [ 551.643830][T23018] __alloc_skb+0x112/0x2d0 [ 551.643857][T23018] ovs_dp_cmd_new+0x167/0xaf0 [ 551.643898][T23018] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 551.643931][T23018] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 551.643962][T23018] genl_family_rcv_msg_doit+0x215/0x300 [ 551.643990][T23018] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 551.644024][T23018] ? bpf_lsm_capable+0x9/0x20 [ 551.644134][T23018] ? security_capable+0x7e/0x2e0 [ 551.644166][T23018] genl_rcv_msg+0x60e/0x790 [ 551.644195][T23018] ? __pfx_genl_rcv_msg+0x10/0x10 [ 551.644214][T23018] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 551.644240][T23018] ? __asan_memcpy+0x40/0x70 [ 551.644257][T23018] ? __pfx_ref_tracker_free+0x10/0x10 [ 551.644284][T23018] netlink_rcv_skb+0x208/0x470 [ 551.644306][T23018] ? __lock_acquire+0xab9/0xd20 [ 551.644329][T23018] ? __pfx_genl_rcv_msg+0x10/0x10 [ 551.644351][T23018] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 551.644394][T23018] ? down_read+0x1ad/0x2e0 [ 551.644418][T23018] genl_rcv+0x28/0x40 [ 551.644436][T23018] netlink_unicast+0x82f/0x9e0 [ 551.644467][T23018] ? __pfx_netlink_unicast+0x10/0x10 [ 551.644492][T23018] ? netlink_sendmsg+0x642/0xb30 [ 551.644513][T23018] ? skb_put+0x11b/0x210 [ 551.644544][T23018] netlink_sendmsg+0x805/0xb30 [ 551.644578][T23018] ? __pfx_netlink_sendmsg+0x10/0x10 [ 551.644605][T23018] ? aa_sock_msg_perm+0xf1/0x1d0 [ 551.644628][T23018] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 551.644649][T23018] ? __pfx_netlink_sendmsg+0x10/0x10 [ 551.644674][T23018] __sock_sendmsg+0x21c/0x270 [ 551.644700][T23018] ____sys_sendmsg+0x505/0x830 [ 551.644743][T23018] ? __pfx_____sys_sendmsg+0x10/0x10 [ 551.644776][T23018] ? import_iovec+0x74/0xa0 [ 551.644798][T23018] ___sys_sendmsg+0x21f/0x2a0 [ 551.644814][T23018] ? __pfx____sys_sendmsg+0x10/0x10 [ 551.644872][T23018] ? __fget_files+0x2a/0x420 [ 551.644894][T23018] ? __fget_files+0x3a0/0x420 [ 551.644927][T23018] __x64_sys_sendmsg+0x19b/0x260 [ 551.644949][T23018] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 551.644987][T23018] ? do_syscall_64+0xbe/0xfa0 [ 551.645017][T23018] do_syscall_64+0xfa/0xfa0 [ 551.645034][T23018] ? lockdep_hardirqs_on+0x9c/0x150 [ 551.645053][T23018] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 551.645071][T23018] ? clear_bhb_loop+0x60/0xb0 [ 551.645094][T23018] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 551.645111][T23018] RIP: 0033:0x7fab1b78efc9 [ 551.645130][T23018] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 551.645146][T23018] RSP: 002b:00007fab1c64d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 551.645165][T23018] RAX: ffffffffffffffda RBX: 00007fab1b9e5fa0 RCX: 00007fab1b78efc9 [ 551.645179][T23018] RDX: 0000000000004040 RSI: 0000200000000000 RDI: 0000000000000003 [ 551.645191][T23018] RBP: 00007fab1c64d090 R08: 0000000000000000 R09: 0000000000000000 [ 551.645203][T23018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 551.645214][T23018] R13: 00007fab1b9e6038 R14: 00007fab1b9e5fa0 R15: 00007ffd8534b8f8 [ 551.645249][T23018] [ 552.053974][T19298] block nbd2: Possible stuck request ffff888049ab7000: control (read@0,1024B). Runtime 30 seconds [ 552.064882][T19298] block nbd2: Possible stuck request ffff888049ab71c0: control (read@1024,1024B). Runtime 30 seconds [ 552.076079][T19298] block nbd2: Possible stuck request ffff888049ab7380: control (read@2048,1024B). Runtime 30 seconds [ 552.087837][T19298] block nbd2: Possible stuck request ffff888049ab7540: control (read@3072,1024B). Runtime 30 seconds [ 552.187113][T23032] FAULT_INJECTION: forcing a failure. [ 552.187113][T23032] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 552.202350][T23034] nbd: must specify a device to reconfigure [ 552.223821][ T43] tipc: Resetting bearer [ 552.227526][T23032] CPU: 1 UID: 0 PID: 23032 Comm: syz.1.5036 Not tainted syzkaller #0 PREEMPT(full) [ 552.227551][T23032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 552.227562][T23032] Call Trace: [ 552.227569][T23032] [ 552.227577][T23032] dump_stack_lvl+0x189/0x250 [ 552.227603][T23032] ? __pfx____ratelimit+0x10/0x10 [ 552.227630][T23032] ? __pfx_dump_stack_lvl+0x10/0x10 [ 552.227649][T23032] ? __pfx__printk+0x10/0x10 [ 552.227668][T23032] ? __might_fault+0xb0/0x130 [ 552.227699][T23032] should_fail_ex+0x414/0x560 [ 552.227738][T23032] _copy_from_iter+0x1de/0x1790 [ 552.227776][T23032] ? __pfx__copy_from_iter+0x10/0x10 [ 552.227799][T23032] ? rcu_is_watching+0x15/0xb0 [ 552.227824][T23032] ? trace_kmalloc+0x1f/0xd0 [ 552.227841][T23032] ? __kmalloc_noprof+0x432/0x7f0 [ 552.227857][T23032] ? rcu_read_lock_any_held+0xb3/0x120 [ 552.227883][T23032] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 552.227913][T23032] kernfs_fop_write_iter+0x19b/0x540 [ 552.227942][T23032] vfs_write+0x5c9/0xb30 [ 552.227966][T23032] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 552.227988][T23032] ? __pfx_vfs_write+0x10/0x10 [ 552.228018][T23032] ? __fget_files+0x2a/0x420 [ 552.228048][T23032] ksys_write+0x145/0x250 [ 552.228069][T23032] ? __pfx_ksys_write+0x10/0x10 [ 552.228092][T23032] ? do_syscall_64+0xbe/0xfa0 [ 552.228113][T23032] do_syscall_64+0xfa/0xfa0 [ 552.228130][T23032] ? lockdep_hardirqs_on+0x9c/0x150 [ 552.228145][T23032] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.228162][T23032] ? clear_bhb_loop+0x60/0xb0 [ 552.228184][T23032] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.228202][T23032] RIP: 0033:0x7effcfb8efc9 [ 552.228219][T23032] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 552.228238][T23032] RSP: 002b:00007effd0aa6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 552.228258][T23032] RAX: ffffffffffffffda RBX: 00007effcfde5fa0 RCX: 00007effcfb8efc9 [ 552.228271][T23032] RDX: 0000000000000012 RSI: 0000200000000200 RDI: 0000000000000004 [ 552.228283][T23032] RBP: 00007effd0aa6090 R08: 0000000000000000 R09: 0000000000000000 [ 552.228294][T23032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 552.228305][T23032] R13: 00007effcfde6038 R14: 00007effcfde5fa0 R15: 00007fff40c74c58 [ 552.228337][T23032] [ 552.568078][T23048] bond5: option lp_interval: invalid value (0) [ 552.625871][T23048] bond5: option lp_interval: allowed values 1 - 2147483647 [ 552.641880][T23048] bond5 (unregistering): Released all slaves [ 552.683372][T19298] block nbd16: Possible stuck request ffff888063e55080: control (read@0,4096B). Runtime 30 seconds [ 552.704698][T23058] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5046'. [ 552.777248][T23049] bond5: option lp_interval: invalid value (0) [ 552.783631][T23049] bond5: option lp_interval: allowed values 1 - 2147483647 [ 552.800306][T23055] nbd25: detected capacity change from 0 to 127 [ 552.800596][T23049] bond5 (unregistering): Released all slaves [ 552.811128][ T5148] block nbd25: Receive control failed (result -32) [ 552.845097][T23067] netlink: 'syz.0.5049': attribute type 1 has an invalid length. [ 552.878724][T23067] netlink: 'syz.0.5049': attribute type 10 has an invalid length. [ 552.889030][T23067] netlink: 236 bytes leftover after parsing attributes in process `syz.0.5049'. [ 552.975027][T23064] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 553.004927][T23081] nbd: must specify a device to reconfigure [ 553.006060][T23064] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 553.111751][T23073] macvlan2: entered promiscuous mode [ 553.136655][T23073] macvlan2: entered allmulticast mode [ 553.173241][T23073] bond4: (slave macvlan2): Error -98 calling set_mac_address [ 553.216552][T23079] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5050'. [ 553.682189][T23126] TCP: TCP_TX_DELAY enabled [ 553.703784][T23117] nbd26: detected capacity change from 0 to 127 [ 553.721889][ T5148] block nbd26: Receive control failed (result -32) [ 553.819506][T23133] netlink: 'syz.2.5065': attribute type 21 has an invalid length. [ 553.827428][T23133] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5065'. [ 553.888038][T23138] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5068'. [ 554.319089][T23172] netlink: 'syz.0.5081': attribute type 7 has an invalid length. [ 554.328016][T23172] FAULT_INJECTION: forcing a failure. [ 554.328016][T23172] name failslab, interval 1, probability 0, space 0, times 0 [ 554.342442][T23172] CPU: 0 UID: 0 PID: 23172 Comm: syz.0.5081 Not tainted syzkaller #0 PREEMPT(full) [ 554.342468][T23172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 554.342478][T23172] Call Trace: [ 554.342486][T23172] [ 554.342494][T23172] dump_stack_lvl+0x189/0x250 [ 554.342517][T23172] ? __pfx____ratelimit+0x10/0x10 [ 554.342542][T23172] ? __pfx_dump_stack_lvl+0x10/0x10 [ 554.342560][T23172] ? __pfx__printk+0x10/0x10 [ 554.342585][T23172] ? __pfx___might_resched+0x10/0x10 [ 554.342607][T23172] ? fs_reclaim_acquire+0x7d/0x100 [ 554.342633][T23172] should_fail_ex+0x414/0x560 [ 554.342664][T23172] should_failslab+0xa8/0x100 [ 554.342686][T23172] __kmalloc_cache_noprof+0x6f/0x6f0 [ 554.342706][T23172] ? ovs_flow_tbl_init+0x57/0x7f0 [ 554.342734][T23172] ovs_flow_tbl_init+0x57/0x7f0 [ 554.342755][T23172] ? ovs_dp_cmd_new+0x1ac/0xaf0 [ 554.342787][T23172] ? __alloc_skb+0x1bc/0x2d0 [ 554.342823][T23172] ovs_dp_cmd_new+0x24b/0xaf0 [ 554.342860][T23172] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 554.342888][T23172] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 554.342914][T23172] genl_family_rcv_msg_doit+0x215/0x300 [ 554.342941][T23172] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 554.342973][T23172] ? bpf_lsm_capable+0x9/0x20 [ 554.342988][T23172] ? security_capable+0x7e/0x2e0 [ 554.343014][T23172] genl_rcv_msg+0x60e/0x790 [ 554.343041][T23172] ? __pfx_genl_rcv_msg+0x10/0x10 [ 554.343057][T23172] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 554.343082][T23172] ? __asan_memcpy+0x40/0x70 [ 554.343099][T23172] ? __pfx_ref_tracker_free+0x10/0x10 [ 554.343126][T23172] netlink_rcv_skb+0x208/0x470 [ 554.343146][T23172] ? __lock_acquire+0xab9/0xd20 [ 554.343168][T23172] ? __pfx_genl_rcv_msg+0x10/0x10 [ 554.343189][T23172] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 554.343231][T23172] ? down_read+0x1ad/0x2e0 [ 554.343253][T23172] genl_rcv+0x28/0x40 [ 554.343269][T23172] netlink_unicast+0x82f/0x9e0 [ 554.343301][T23172] ? __pfx_netlink_unicast+0x10/0x10 [ 554.343324][T23172] ? netlink_sendmsg+0x642/0xb30 [ 554.343344][T23172] ? skb_put+0x11b/0x210 [ 554.343372][T23172] netlink_sendmsg+0x805/0xb30 [ 554.343407][T23172] ? __pfx_netlink_sendmsg+0x10/0x10 [ 554.343435][T23172] ? aa_sock_msg_perm+0xf1/0x1d0 [ 554.343459][T23172] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 554.343480][T23172] ? __pfx_netlink_sendmsg+0x10/0x10 [ 554.343505][T23172] __sock_sendmsg+0x21c/0x270 [ 554.343529][T23172] ____sys_sendmsg+0x505/0x830 [ 554.343562][T23172] ? __pfx_____sys_sendmsg+0x10/0x10 [ 554.343598][T23172] ? import_iovec+0x74/0xa0 [ 554.343625][T23172] ___sys_sendmsg+0x21f/0x2a0 [ 554.343646][T23172] ? __pfx____sys_sendmsg+0x10/0x10 [ 554.343700][T23172] ? __fget_files+0x2a/0x420 [ 554.343720][T23172] ? __fget_files+0x3a0/0x420 [ 554.343752][T23172] __x64_sys_sendmsg+0x19b/0x260 [ 554.343771][T23172] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 554.343804][T23172] ? __pfx_ksys_write+0x10/0x10 [ 554.343827][T23172] ? do_syscall_64+0xbe/0xfa0 [ 554.343849][T23172] do_syscall_64+0xfa/0xfa0 [ 554.343863][T23172] ? lockdep_hardirqs_on+0x9c/0x150 [ 554.343882][T23172] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 554.343899][T23172] ? clear_bhb_loop+0x60/0xb0 [ 554.343921][T23172] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 554.343939][T23172] RIP: 0033:0x7f900158efc9 [ 554.343956][T23172] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 554.343972][T23172] RSP: 002b:00007f90023f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 554.343993][T23172] RAX: ffffffffffffffda RBX: 00007f90017e5fa0 RCX: 00007f900158efc9 [ 554.344006][T23172] RDX: 0000000000004040 RSI: 0000200000000000 RDI: 0000000000000003 [ 554.344018][T23172] RBP: 00007f90023f7090 R08: 0000000000000000 R09: 0000000000000000 [ 554.344030][T23172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 554.344041][T23172] R13: 00007f90017e6038 R14: 00007f90017e5fa0 R15: 00007ffee2de7928 [ 554.344075][T23172] [ 554.800707][T23166] nbd27: detected capacity change from 0 to 127 [ 554.821584][ T5148] block nbd27: Receive control failed (result -32) [ 554.986206][T23187] FAULT_INJECTION: forcing a failure. [ 554.986206][T23187] name failslab, interval 1, probability 0, space 0, times 0 [ 555.045284][T23187] CPU: 1 UID: 0 PID: 23187 Comm: syz.4.5088 Not tainted syzkaller #0 PREEMPT(full) [ 555.045310][T23187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 555.045322][T23187] Call Trace: [ 555.045330][T23187] [ 555.045339][T23187] dump_stack_lvl+0x189/0x250 [ 555.045364][T23187] ? __pfx____ratelimit+0x10/0x10 [ 555.045389][T23187] ? __pfx_dump_stack_lvl+0x10/0x10 [ 555.045407][T23187] ? __pfx__printk+0x10/0x10 [ 555.045431][T23187] ? __pfx___might_resched+0x10/0x10 [ 555.045481][T23187] should_fail_ex+0x414/0x560 [ 555.045511][T23187] should_failslab+0xa8/0x100 [ 555.045534][T23187] kmem_cache_alloc_node_noprof+0x77/0x710 [ 555.045554][T23187] ? __alloc_skb+0x112/0x2d0 [ 555.045583][T23187] __alloc_skb+0x112/0x2d0 [ 555.045610][T23187] netlink_ack+0x146/0xa50 [ 555.045632][T23187] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 555.045672][T23187] netlink_rcv_skb+0x28c/0x470 [ 555.045693][T23187] ? __lock_acquire+0xab9/0xd20 [ 555.045715][T23187] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 555.045740][T23187] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 555.045777][T23187] ? netlink_deliver_tap+0x2e/0x1b0 [ 555.045809][T23187] netlink_unicast+0x82f/0x9e0 [ 555.045841][T23187] ? __pfx_netlink_unicast+0x10/0x10 [ 555.045869][T23187] ? netlink_sendmsg+0x642/0xb30 [ 555.045891][T23187] ? skb_put+0x11b/0x210 [ 555.045918][T23187] netlink_sendmsg+0x805/0xb30 [ 555.045952][T23187] ? __pfx_netlink_sendmsg+0x10/0x10 [ 555.045979][T23187] ? aa_sock_msg_perm+0xf1/0x1d0 [ 555.046003][T23187] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 555.046025][T23187] ? __pfx_netlink_sendmsg+0x10/0x10 [ 555.046051][T23187] __sock_sendmsg+0x21c/0x270 [ 555.046076][T23187] ____sys_sendmsg+0x505/0x830 [ 555.046108][T23187] ? __pfx_____sys_sendmsg+0x10/0x10 [ 555.046143][T23187] ? import_iovec+0x74/0xa0 [ 555.046171][T23187] ___sys_sendmsg+0x21f/0x2a0 [ 555.046191][T23187] ? __pfx____sys_sendmsg+0x10/0x10 [ 555.046246][T23187] ? __fget_files+0x2a/0x420 [ 555.046268][T23187] ? __fget_files+0x3a0/0x420 [ 555.046299][T23187] __x64_sys_sendmsg+0x19b/0x260 [ 555.046321][T23187] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 555.046350][T23187] ? __pfx_ksys_write+0x10/0x10 [ 555.046374][T23187] ? do_syscall_64+0xbe/0xfa0 [ 555.046397][T23187] do_syscall_64+0xfa/0xfa0 [ 555.046413][T23187] ? lockdep_hardirqs_on+0x9c/0x150 [ 555.046431][T23187] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 555.046457][T23187] ? clear_bhb_loop+0x60/0xb0 [ 555.046480][T23187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 555.046498][T23187] RIP: 0033:0x7f74cf98efc9 [ 555.046515][T23187] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 555.046531][T23187] RSP: 002b:00007f74d0808038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 555.046551][T23187] RAX: ffffffffffffffda RBX: 00007f74cfbe5fa0 RCX: 00007f74cf98efc9 [ 555.046565][T23187] RDX: 0000000000004804 RSI: 0000200000000300 RDI: 0000000000000003 [ 555.046578][T23187] RBP: 00007f74d0808090 R08: 0000000000000000 R09: 0000000000000000 [ 555.046590][T23187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 555.046602][T23187] R13: 00007f74cfbe6038 R14: 00007f74cfbe5fa0 R15: 00007ffc6f5b8708 [ 555.046634][T23187] [ 555.425163][T19298] block nbd9: Possible stuck request ffff888025840000: control (read@0,1024B). Runtime 150 seconds [ 555.437054][T19298] block nbd9: Possible stuck request ffff8880258401c0: control (read@1024,1024B). Runtime 150 seconds [ 555.448081][T19298] block nbd9: Possible stuck request ffff888025840380: control (read@2048,1024B). Runtime 150 seconds [ 555.459364][T19298] block nbd9: Possible stuck request ffff888025840540: control (read@3072,1024B). Runtime 150 seconds [ 555.638911][T23208] netlink: 'syz.3.5095': attribute type 5 has an invalid length. [ 555.866369][T23225] netlink: 'syz.1.5102': attribute type 7 has an invalid length. [ 555.951343][T23229] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 556.123953][T23237] netlink: 'syz.3.5109': attribute type 12 has an invalid length. [ 556.160192][T23237] netlink: 'syz.3.5109': attribute type 29 has an invalid length. [ 556.175753][T23237] __nla_validate_parse: 1 callbacks suppressed [ 556.175772][T23237] netlink: 148 bytes leftover after parsing attributes in process `syz.3.5109'. [ 556.256140][T23244] bond0: (slave macvlan2): Error -22 calling dev_set_mtu [ 556.321039][T23248] netlink: 'syz.3.5109': attribute type 3 has an invalid length. [ 556.338026][T23248] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5109'. [ 556.358354][T23252] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5113'. [ 556.422927][T23252] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5113'. [ 556.504945][T23260] netlink: 'syz.2.5116': attribute type 7 has an invalid length. [ 556.541482][T23260] FAULT_INJECTION: forcing a failure. [ 556.541482][T23260] name failslab, interval 1, probability 0, space 0, times 0 [ 556.571519][T23260] CPU: 0 UID: 0 PID: 23260 Comm: syz.2.5116 Not tainted syzkaller #0 PREEMPT(full) [ 556.571546][T23260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 556.571558][T23260] Call Trace: [ 556.571566][T23260] [ 556.571582][T23260] dump_stack_lvl+0x189/0x250 [ 556.571607][T23260] ? __pfx____ratelimit+0x10/0x10 [ 556.571634][T23260] ? __pfx_dump_stack_lvl+0x10/0x10 [ 556.571654][T23260] ? __pfx__printk+0x10/0x10 [ 556.571680][T23260] ? __pfx___might_resched+0x10/0x10 [ 556.571703][T23260] ? fs_reclaim_acquire+0x7d/0x100 [ 556.571747][T23260] should_fail_ex+0x414/0x560 [ 556.571780][T23260] should_failslab+0xa8/0x100 [ 556.571805][T23260] __kmalloc_cache_noprof+0x6f/0x6f0 [ 556.571826][T23260] ? ovs_flow_tbl_init+0x1f6/0x7f0 [ 556.571856][T23260] ovs_flow_tbl_init+0x1f6/0x7f0 [ 556.571881][T23260] ? __alloc_skb+0x1bc/0x2d0 [ 556.571910][T23260] ovs_dp_cmd_new+0x24b/0xaf0 [ 556.571950][T23260] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 556.571984][T23260] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 556.572014][T23260] genl_family_rcv_msg_doit+0x215/0x300 [ 556.572043][T23260] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 556.572076][T23260] ? bpf_lsm_capable+0x9/0x20 [ 556.572093][T23260] ? security_capable+0x7e/0x2e0 [ 556.572119][T23260] genl_rcv_msg+0x60e/0x790 [ 556.572146][T23260] ? __pfx_genl_rcv_msg+0x10/0x10 [ 556.572165][T23260] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 556.572192][T23260] ? __asan_memcpy+0x40/0x70 [ 556.572210][T23260] ? __pfx_ref_tracker_free+0x10/0x10 [ 556.572237][T23260] netlink_rcv_skb+0x208/0x470 [ 556.572258][T23260] ? __lock_acquire+0xab9/0xd20 [ 556.572300][T23260] ? __pfx_genl_rcv_msg+0x10/0x10 [ 556.572321][T23260] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 556.572366][T23260] ? down_read+0x1ad/0x2e0 [ 556.572389][T23260] genl_rcv+0x28/0x40 [ 556.572406][T23260] netlink_unicast+0x82f/0x9e0 [ 556.572438][T23260] ? __pfx_netlink_unicast+0x10/0x10 [ 556.572463][T23260] ? netlink_sendmsg+0x642/0xb30 [ 556.572485][T23260] ? skb_put+0x11b/0x210 [ 556.572513][T23260] netlink_sendmsg+0x805/0xb30 [ 556.572547][T23260] ? __pfx_netlink_sendmsg+0x10/0x10 [ 556.572580][T23260] ? aa_sock_msg_perm+0xf1/0x1d0 [ 556.572603][T23260] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 556.572624][T23260] ? __pfx_netlink_sendmsg+0x10/0x10 [ 556.572650][T23260] __sock_sendmsg+0x21c/0x270 [ 556.572675][T23260] ____sys_sendmsg+0x505/0x830 [ 556.572707][T23260] ? __pfx_____sys_sendmsg+0x10/0x10 [ 556.572743][T23260] ? import_iovec+0x74/0xa0 [ 556.572770][T23260] ___sys_sendmsg+0x21f/0x2a0 [ 556.572790][T23260] ? __pfx____sys_sendmsg+0x10/0x10 [ 556.572848][T23260] ? __fget_files+0x2a/0x420 [ 556.572869][T23260] ? __fget_files+0x3a0/0x420 [ 556.572902][T23260] __x64_sys_sendmsg+0x19b/0x260 [ 556.572923][T23260] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 556.572951][T23260] ? __pfx_ksys_write+0x10/0x10 [ 556.572976][T23260] ? do_syscall_64+0xbe/0xfa0 [ 556.572998][T23260] do_syscall_64+0xfa/0xfa0 [ 556.573015][T23260] ? lockdep_hardirqs_on+0x9c/0x150 [ 556.573033][T23260] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.573051][T23260] ? clear_bhb_loop+0x60/0xb0 [ 556.573074][T23260] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.573092][T23260] RIP: 0033:0x7ff3d638efc9 [ 556.573110][T23260] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 556.573125][T23260] RSP: 002b:00007ff3d7237038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 556.573146][T23260] RAX: ffffffffffffffda RBX: 00007ff3d65e5fa0 RCX: 00007ff3d638efc9 [ 556.573160][T23260] RDX: 0000000000004040 RSI: 0000200000000000 RDI: 0000000000000003 [ 556.573173][T23260] RBP: 00007ff3d7237090 R08: 0000000000000000 R09: 0000000000000000 [ 556.573185][T23260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 556.573196][T23260] R13: 00007ff3d65e6038 R14: 00007ff3d65e5fa0 R15: 00007ffda3f5b548 [ 556.573230][T23260] [ 556.998350][T23271] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5121'. [ 557.160009][T23277] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5122'. [ 557.291896][T23288] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5128'. [ 557.304531][T23288] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5128'. [ 557.424178][T23297] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5131'. [ 557.713418][T23312] netlink: 'syz.4.5134': attribute type 7 has an invalid length. [ 557.760147][T23312] FAULT_INJECTION: forcing a failure. [ 557.760147][T23312] name failslab, interval 1, probability 0, space 0, times 0 [ 557.809015][T23312] CPU: 1 UID: 0 PID: 23312 Comm: syz.4.5134 Not tainted syzkaller #0 PREEMPT(full) [ 557.809041][T23312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 557.809053][T23312] Call Trace: [ 557.809061][T23312] [ 557.809070][T23312] dump_stack_lvl+0x189/0x250 [ 557.809095][T23312] ? __pfx____ratelimit+0x10/0x10 [ 557.809122][T23312] ? __pfx_dump_stack_lvl+0x10/0x10 [ 557.809140][T23312] ? __pfx__printk+0x10/0x10 [ 557.809166][T23312] ? __pfx___might_resched+0x10/0x10 [ 557.809188][T23312] ? fs_reclaim_acquire+0x7d/0x100 [ 557.809223][T23312] should_fail_ex+0x414/0x560 [ 557.809254][T23312] should_failslab+0xa8/0x100 [ 557.809279][T23312] __kmalloc_cache_noprof+0x6f/0x6f0 [ 557.809298][T23312] ? ovs_flow_tbl_init+0x21b/0x7f0 [ 557.809320][T23312] ? ovs_flow_tbl_init+0x3d1/0x7f0 [ 557.809349][T23312] ovs_flow_tbl_init+0x3d1/0x7f0 [ 557.809376][T23312] ? __alloc_skb+0x1bc/0x2d0 [ 557.809402][T23312] ovs_dp_cmd_new+0x24b/0xaf0 [ 557.809440][T23312] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 557.809474][T23312] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 557.809504][T23312] genl_family_rcv_msg_doit+0x215/0x300 [ 557.809532][T23312] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 557.809566][T23312] ? bpf_lsm_capable+0x9/0x20 [ 557.809583][T23312] ? security_capable+0x7e/0x2e0 [ 557.809610][T23312] genl_rcv_msg+0x60e/0x790 [ 557.809637][T23312] ? __pfx_genl_rcv_msg+0x10/0x10 [ 557.809657][T23312] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 557.809698][T23312] netlink_rcv_skb+0x208/0x470 [ 557.809720][T23312] ? __lock_acquire+0xab9/0xd20 [ 557.809743][T23312] ? __pfx_genl_rcv_msg+0x10/0x10 [ 557.809765][T23312] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 557.809809][T23312] ? down_read+0x1ad/0x2e0 [ 557.809833][T23312] genl_rcv+0x28/0x40 [ 557.809851][T23312] netlink_unicast+0x82f/0x9e0 [ 557.809883][T23312] ? __pfx_netlink_unicast+0x10/0x10 [ 557.809908][T23312] ? netlink_sendmsg+0x642/0xb30 [ 557.809930][T23312] ? skb_put+0x11b/0x210 [ 557.809955][T23312] netlink_sendmsg+0x805/0xb30 [ 557.809987][T23312] ? __pfx_netlink_sendmsg+0x10/0x10 [ 557.810014][T23312] ? aa_sock_msg_perm+0xf1/0x1d0 [ 557.810035][T23312] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 557.810056][T23312] ? __pfx_netlink_sendmsg+0x10/0x10 [ 557.810079][T23312] __sock_sendmsg+0x21c/0x270 [ 557.810103][T23312] ____sys_sendmsg+0x505/0x830 [ 557.810133][T23312] ? __pfx_____sys_sendmsg+0x10/0x10 [ 557.810169][T23312] ? import_iovec+0x74/0xa0 [ 557.810195][T23312] ___sys_sendmsg+0x21f/0x2a0 [ 557.810221][T23312] ? __pfx____sys_sendmsg+0x10/0x10 [ 557.810275][T23312] ? __fget_files+0x2a/0x420 [ 557.810295][T23312] ? __fget_files+0x3a0/0x420 [ 557.810325][T23312] __x64_sys_sendmsg+0x19b/0x260 [ 557.810345][T23312] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 557.810371][T23312] ? __pfx_ksys_write+0x10/0x10 [ 557.810395][T23312] ? do_syscall_64+0xbe/0xfa0 [ 557.810416][T23312] do_syscall_64+0xfa/0xfa0 [ 557.810432][T23312] ? lockdep_hardirqs_on+0x9c/0x150 [ 557.810449][T23312] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.810466][T23312] ? clear_bhb_loop+0x60/0xb0 [ 557.810489][T23312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.810506][T23312] RIP: 0033:0x7f74cf98efc9 [ 557.810523][T23312] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 557.810538][T23312] RSP: 002b:00007f74d0808038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 557.810559][T23312] RAX: ffffffffffffffda RBX: 00007f74cfbe5fa0 RCX: 00007f74cf98efc9 [ 557.810572][T23312] RDX: 0000000000004040 RSI: 0000200000000000 RDI: 0000000000000003 [ 557.810585][T23312] RBP: 00007f74d0808090 R08: 0000000000000000 R09: 0000000000000000 [ 557.810596][T23312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 557.810607][T23312] R13: 00007f74cfbe6038 R14: 00007f74cfbe5fa0 R15: 00007ffc6f5b8708 [ 557.810639][T23312] [ 558.001291][T23326] nbd: must specify a device to reconfigure [ 558.187914][T23330] netlink: 'syz.3.5141': attribute type 7 has an invalid length. [ 558.410783][T23345] netlink: 'syz.2.5149': attribute type 3 has an invalid length. [ 558.419029][T23345] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5149'. [ 558.705319][T23362] netlink: 'syz.0.5153': attribute type 7 has an invalid length. [ 558.732972][T23362] FAULT_INJECTION: forcing a failure. [ 558.732972][T23362] name failslab, interval 1, probability 0, space 0, times 0 [ 558.767905][T23362] CPU: 0 UID: 0 PID: 23362 Comm: syz.0.5153 Not tainted syzkaller #0 PREEMPT(full) [ 558.767930][T23362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 558.767942][T23362] Call Trace: [ 558.767950][T23362] [ 558.767959][T23362] dump_stack_lvl+0x189/0x250 [ 558.767984][T23362] ? __pfx____ratelimit+0x10/0x10 [ 558.768011][T23362] ? __pfx_dump_stack_lvl+0x10/0x10 [ 558.768029][T23362] ? __pfx__printk+0x10/0x10 [ 558.768053][T23362] ? __pfx___might_resched+0x10/0x10 [ 558.768074][T23362] ? fs_reclaim_acquire+0x7d/0x100 [ 558.768098][T23362] should_fail_ex+0x414/0x560 [ 558.768130][T23362] should_failslab+0xa8/0x100 [ 558.768153][T23362] __kmalloc_cache_noprof+0x6f/0x6f0 [ 558.768190][T23362] ? ovs_flow_tbl_init+0x21b/0x7f0 [ 558.768211][T23362] ? ovs_flow_tbl_init+0x3d1/0x7f0 [ 558.768239][T23362] ovs_flow_tbl_init+0x3d1/0x7f0 [ 558.768263][T23362] ? __alloc_skb+0x1bc/0x2d0 [ 558.768291][T23362] ovs_dp_cmd_new+0x24b/0xaf0 [ 558.768328][T23362] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 558.768360][T23362] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 558.768386][T23362] genl_family_rcv_msg_doit+0x215/0x300 [ 558.768425][T23362] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 558.768459][T23362] ? bpf_lsm_capable+0x9/0x20 [ 558.768476][T23362] ? security_capable+0x7e/0x2e0 [ 558.768502][T23362] genl_rcv_msg+0x60e/0x790 [ 558.768529][T23362] ? __pfx_genl_rcv_msg+0x10/0x10 [ 558.768548][T23362] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 558.768575][T23362] ? __asan_memcpy+0x40/0x70 [ 558.768593][T23362] ? __pfx_ref_tracker_free+0x10/0x10 [ 558.768621][T23362] netlink_rcv_skb+0x208/0x470 [ 558.768643][T23362] ? __lock_acquire+0xab9/0xd20 [ 558.768666][T23362] ? __pfx_genl_rcv_msg+0x10/0x10 [ 558.768687][T23362] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 558.768732][T23362] ? down_read+0x1ad/0x2e0 [ 558.768755][T23362] genl_rcv+0x28/0x40 [ 558.768773][T23362] netlink_unicast+0x82f/0x9e0 [ 558.768805][T23362] ? __pfx_netlink_unicast+0x10/0x10 [ 558.768829][T23362] ? netlink_sendmsg+0x642/0xb30 [ 558.768852][T23362] ? skb_put+0x11b/0x210 [ 558.768880][T23362] netlink_sendmsg+0x805/0xb30 [ 558.768915][T23362] ? __pfx_netlink_sendmsg+0x10/0x10 [ 558.768943][T23362] ? aa_sock_msg_perm+0xf1/0x1d0 [ 558.768966][T23362] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 558.768987][T23362] ? __pfx_netlink_sendmsg+0x10/0x10 [ 558.769013][T23362] __sock_sendmsg+0x21c/0x270 [ 558.769039][T23362] ____sys_sendmsg+0x505/0x830 [ 558.769072][T23362] ? __pfx_____sys_sendmsg+0x10/0x10 [ 558.769108][T23362] ? import_iovec+0x74/0xa0 [ 558.769135][T23362] ___sys_sendmsg+0x21f/0x2a0 [ 558.769156][T23362] ? __pfx____sys_sendmsg+0x10/0x10 [ 558.769214][T23362] ? __fget_files+0x2a/0x420 [ 558.769235][T23362] ? __fget_files+0x3a0/0x420 [ 558.769268][T23362] __x64_sys_sendmsg+0x19b/0x260 [ 558.769289][T23362] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 558.769319][T23362] ? __pfx_ksys_write+0x10/0x10 [ 558.769343][T23362] ? do_syscall_64+0xbe/0xfa0 [ 558.769366][T23362] do_syscall_64+0xfa/0xfa0 [ 558.769384][T23362] ? lockdep_hardirqs_on+0x9c/0x150 [ 558.769406][T23362] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 558.769422][T23362] ? clear_bhb_loop+0x60/0xb0 [ 558.769443][T23362] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 558.769460][T23362] RIP: 0033:0x7f900158efc9 [ 558.769477][T23362] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 558.769492][T23362] RSP: 002b:00007f90023f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 558.769512][T23362] RAX: ffffffffffffffda RBX: 00007f90017e5fa0 RCX: 00007f900158efc9 [ 558.769525][T23362] RDX: 0000000000004040 RSI: 0000200000000000 RDI: 0000000000000003 [ 558.769538][T23362] RBP: 00007f90023f7090 R08: 0000000000000000 R09: 0000000000000000 [ 558.769549][T23362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 558.769560][T23362] R13: 00007f90017e6038 R14: 00007f90017e5fa0 R15: 00007ffee2de7928 [ 558.769593][T23362] [ 559.164542][ T31] INFO: task kworker/1:1H:1075 blocked for more than 143 seconds. [ 559.173162][ T31] Not tainted syzkaller #0 [ 559.178112][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 559.187663][ T31] task:kworker/1:1H state:D stack:25656 pid:1075 tgid:1075 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 559.200493][ T31] Workqueue: kblockd blk_mq_requeue_work [ 559.206178][ T31] Call Trace: [ 559.210276][ T31] [ 559.213239][ T31] __schedule+0x1798/0x4cc0 [ 559.217803][ T31] ? preempt_schedule+0xae/0xc0 [ 559.223848][ T31] ? __pfx___schedule+0x10/0x10 [ 559.228743][ T31] ? preempt_schedule_common+0x83/0xd0 [ 559.234580][ T31] ? __pfx_preempt_schedule+0x10/0x10 [ 559.240661][ T31] ? schedule+0x91/0x360 [ 559.244917][ T31] schedule+0x165/0x360 [ 559.249083][ T31] schedule_timeout+0x12b/0x270 [ 559.254282][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 559.260092][ T31] ? __pfx_process_timeout+0x10/0x10 [ 559.265405][ T31] ? prepare_to_wait_event+0x437/0x480 [ 559.271508][ T31] nbd_queue_rq+0x662/0xf10 [ 559.276048][ T31] ? __pfx_nbd_queue_rq+0x10/0x10 [ 559.281679][ T31] ? mod_delayed_work_on+0x1ac/0x200 [ 559.286998][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 559.293394][ T31] blk_mq_dispatch_rq_list+0x4c0/0x1900 [ 559.298945][ T31] ? sbitmap_find_bit+0x47f/0x520 [ 559.304567][ T31] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 559.310841][ T31] ? __blk_mq_alloc_driver_tag+0x2e7/0x6e0 [ 559.316671][ T31] __blk_mq_sched_dispatch_requests+0xda4/0x1570 [ 559.323635][ T31] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 559.330606][ T31] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 559.335950][ T31] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 559.343570][ T31] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 559.349186][ T31] blk_mq_run_hw_queue+0x348/0x4f0 [ 559.354664][ T31] blk_mq_run_hw_queues+0x33e/0x430 [ 559.360706][ T31] ? __pfx_blk_mq_run_hw_queues+0x10/0x10 [ 559.366542][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 559.372601][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 559.377859][ T31] blk_mq_requeue_work+0x717/0x760 [ 559.383625][ T31] ? __pfx_blk_mq_requeue_work+0x10/0x10 [ 559.389310][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 559.395461][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 559.401797][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 559.407565][ T31] process_scheduled_works+0xae1/0x17b0 [ 559.413805][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 559.420848][ T31] worker_thread+0x8a0/0xda0 [ 559.426138][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 559.433189][ T31] ? __kthread_parkme+0x7b/0x200 [ 559.438176][ T31] kthread+0x711/0x8a0 [ 559.442758][ T31] ? __pfx_worker_thread+0x10/0x10 [ 559.448098][ T31] ? __pfx_kthread+0x10/0x10 [ 559.453285][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 559.458724][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 559.464413][ T31] ? __pfx_kthread+0x10/0x10 [ 559.469173][ T31] ret_from_fork+0x4bc/0x870 [ 559.474258][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 559.480446][ T31] ? __switch_to_asm+0x39/0x70 [ 559.485296][ T31] ? __switch_to_asm+0x33/0x70 [ 559.490423][ T31] ? __pfx_kthread+0x10/0x10 [ 559.495012][ T31] ret_from_fork_asm+0x1a/0x30 [ 559.500377][ T31] [ 559.503553][ T31] INFO: task kworker/1:2H:19211 blocked for more than 143 seconds. [ 559.512433][ T31] Not tainted syzkaller #0 [ 559.517387][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 559.527172][ T31] task:kworker/1:2H state:D stack:28360 pid:19211 tgid:19211 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 559.540139][ T31] Workqueue: kblockd blk_mq_timeout_work [ 559.545820][ T31] Call Trace: [ 559.549100][ T31] [ 559.552446][ T31] __schedule+0x1798/0x4cc0 [ 559.557003][ T31] ? do_raw_spin_lock+0x121/0x290 [ 559.563249][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 559.568703][ T31] ? __pfx___schedule+0x10/0x10 [ 559.574258][ T31] ? schedule+0x91/0x360 [ 559.578690][ T31] schedule+0x165/0x360 [ 559.583640][ T31] schedule_timeout+0x9a/0x270 [ 559.588576][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 559.594430][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 559.601074][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 559.606361][ T31] ? wait_for_completion+0x267/0x5d0 [ 559.611955][ T31] wait_for_completion+0x2bf/0x5d0 [ 559.617095][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 559.624678][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 559.631224][ T31] __synchronize_srcu+0x30e/0x3a0 [ 559.636298][ T31] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 559.642500][ T31] ? __pfx___synchronize_srcu+0x10/0x10 [ 559.648046][ T31] ? __pfx_wakeme_after_rcu+0x10/0x10 [ 559.653532][ T31] ? ktime_get_mono_fast_ns+0x2af/0x2d0 [ 559.659102][ T31] ? synchronize_srcu+0x295/0x2c0 [ 559.664261][ T31] blk_mq_timeout_work+0x1b6/0x3e0 [ 559.669714][ T31] ? __pfx_blk_mq_timeout_work+0x10/0x10 [ 559.675378][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 559.680708][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 559.686509][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 559.692275][ T31] process_scheduled_works+0xae1/0x17b0 [ 559.697835][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 559.704523][ T31] worker_thread+0x8a0/0xda0 [ 559.709222][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 559.715976][ T31] ? __kthread_parkme+0x7b/0x200 [ 559.720705][ T56] block nbd3: Possible stuck request ffff88802528b440: control (read@0,1024B). Runtime 60 seconds [ 559.721305][ T31] kthread+0x711/0x8a0 [ 559.733332][ T56] block nbd3: Possible stuck request ffff88802528b600: control (read@1024,1024B). Runtime 60 seconds [ 559.736649][ T31] ? __pfx_worker_thread+0x10/0x10 [ 559.748204][ T56] block nbd3: Possible stuck request ffff88802528b7c0: control (read@2048,1024B). Runtime 60 seconds [ 559.752867][ T31] ? __pfx_kthread+0x10/0x10 [ 559.752900][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 559.752930][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 559.752948][ T31] ? __pfx_kthread+0x10/0x10 [ 559.752970][ T31] ret_from_fork+0x4bc/0x870 [ 559.752999][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 559.753032][ T31] ? __switch_to_asm+0x39/0x70 [ 559.753054][ T31] ? __switch_to_asm+0x33/0x70 [ 559.753075][ T31] ? __pfx_kthread+0x10/0x10 [ 559.753097][ T31] ret_from_fork_asm+0x1a/0x30 [ 559.753138][ T31] [ 559.753369][ T31] [ 559.753369][ T31] Showing all locks held in the system: [ 559.753385][ T31] 1 lock held by khungtaskd/31: [ 559.753399][ T31] #0: ffffffff8e13d2e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 559.753467][ T31] 7 locks held by kworker/0:1H/56: [ 559.753489][ T31] 4 locks held by kworker/1:1H/1075: [ 559.753501][ T31] #0: ffff88801d2c5548 ((wq_completion)kblockd){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 559.753558][ T31] #1: ffffc90003f8fba0 [ 559.765283][ T56] block nbd3: Possible stuck request ffff88802528b980: control (read@3072,1024B). Runtime 60 seconds [ 559.791690][T23369] vlan5: entered allmulticast mode [ 559.814889][ T31] ( [ 559.816265][T23369] mac80211_hwsim hwsim54 wlan0: entered allmulticast mode [ 559.818608][ T31] (work_completion)(&(&q->requeue_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 559.909329][ T31] #2: ffff8880249e3a10 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x31f/0x4f0 [ 559.919079][ T31] #3: ffff8880251be6b8 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc8/0xf10 [ 559.928165][ T31] 5 locks held by kworker/u8:8/1334: [ 559.933774][ T31] 2 locks held by getty/5592: [ 559.939092][ T31] #0: ffff8880305760a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 559.949312][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 559.960473][ T31] 1 lock held by udevd/11598: [ 559.965143][ T31] #0: ffff888076867358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 559.974669][ T31] 1 lock held by udevd/11604: [ 559.979339][ T31] #0: ffff888025128358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 559.989297][ T31] 1 lock held by udevd/11641: [ 559.994448][ T31] #0: ffff8880798e0358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 560.004116][ T31] 1 lock held by udevd/11645: [ 560.008785][ T31] #0: ffff888142741358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 560.018443][ T31] 1 lock held by udevd/11647: [ 560.023634][ T31] #0: ffff88802512a358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 560.033244][ T31] 1 lock held by udevd/11771: [ 560.038526][ T31] #0: ffff88802524d358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 560.048247][ T31] 1 lock held by udevd/17094: [ 560.053733][ T31] #0: ffff88802524b358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 560.063491][ T31] 1 lock held by udevd/18727: [ 560.068249][ T31] #0: ffff88802511b358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 560.077915][ T31] 1 lock held by udevd/18729: [ 560.083094][ T31] #0: ffff88802516d358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 560.092625][ T31] 1 lock held by udevd/18731: [ 560.097289][ T31] #0: ffff888025307358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 560.106923][ T31] 2 locks held by kworker/1:2H/19211: [ 560.112729][ T31] #0: ffff88801d2c5548 ((wq_completion)kblockd){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 560.124324][ T31] #1: ffffc9000bf0fba0 ((work_completion)(&q->timeout_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 560.136794][ T31] 1 lock held by udevd/20843: [ 560.143167][ T31] #0: ffff888025923358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 560.152762][ T31] 1 lock held by udevd/20845: [ 560.157429][ T31] #0: ffff888142743358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 560.167159][ T31] 1 lock held by syz.1.5155/23366: [ 560.173143][ T31] #0: ffffffff8e142c40 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 560.183718][ T31] 2 locks held by syz.3.5157/23367: [ 560.188928][ T31] #0: ffff8880588a2488 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 560.200088][ T31] #1: ffffffff8e142d78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 560.211140][ T31] [ 560.213484][ T31] ============================================= [ 560.213484][ T31] [ 560.222468][ T31] NMI backtrace for cpu 0 [ 560.222489][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 560.222510][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 560.222521][ T31] Call Trace: [ 560.222529][ T31] [ 560.222538][ T31] dump_stack_lvl+0x189/0x250 [ 560.222565][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 560.222585][ T31] ? __pfx__printk+0x10/0x10 [ 560.222617][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 560.222643][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 560.222669][ T31] ? __pfx__printk+0x10/0x10 [ 560.222692][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 560.222718][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 560.222744][ T31] watchdog+0xf60/0xfa0 [ 560.222772][ T31] ? watchdog+0x1e2/0xfa0 [ 560.222800][ T31] kthread+0x711/0x8a0 [ 560.222822][ T31] ? __pfx_watchdog+0x10/0x10 [ 560.222843][ T31] ? __pfx_kthread+0x10/0x10 [ 560.222864][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 560.222889][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 560.222905][ T31] ? __pfx_kthread+0x10/0x10 [ 560.222925][ T31] ret_from_fork+0x4bc/0x870 [ 560.222959][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 560.222989][ T31] ? __switch_to_asm+0x39/0x70 [ 560.223008][ T31] ? __switch_to_asm+0x33/0x70 [ 560.223025][ T31] ? __pfx_kthread+0x10/0x10 [ 560.223043][ T31] ret_from_fork_asm+0x1a/0x30 [ 560.223077][ T31] [ 560.223083][ T31] Sending NMI from CPU 0 to CPUs 1: [ 560.377541][ C1] NMI backtrace for cpu 1 [ 560.377561][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 560.377580][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 560.377590][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 560.377612][ C1] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 33 11 1c 00 f3 0f 1e fa fb f4 c8 e6 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 560.377626][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6 [ 560.377642][ C1] RAX: f7714d51633eda00 RBX: ffffffff8196bc07 RCX: f7714d51633eda00 [ 560.377656][ C1] RDX: 0000000000000001 RSI: ffffffff8d7e847d RDI: ffffffff8bc077e0 [ 560.377667][ C1] RBP: ffffc90000197f10 R08: ffff8880b8732fdb R09: 1ffff110170e65fb [ 560.377680][ C1] R10: dffffc0000000000 R11: ffffed10170e65fc R12: ffffffff8f9e1470 [ 560.377693][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff110038d7b58 [ 560.377704][ C1] FS: 0000000000000000(0000) GS:ffff888125e0c000(0000) knlGS:0000000000000000 [ 560.377717][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 560.377729][ C1] CR2: 00007effcfdb4198 CR3: 000000007ba06000 CR4: 00000000003526f0 [ 560.377747][ C1] Call Trace: [ 560.377756][ C1] [ 560.377763][ C1] default_idle+0x13/0x20 [ 560.377782][ C1] default_idle_call+0x73/0xb0 [ 560.377801][ C1] do_idle+0x1e7/0x510 [ 560.377825][ C1] ? __pfx_do_idle+0x10/0x10 [ 560.377855][ C1] cpu_startup_entry+0x44/0x60 [ 560.377875][ C1] start_secondary+0x101/0x110 [ 560.377893][ C1] common_startup_64+0x13e/0x147 [ 560.377920][ C1] [ 560.378691][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 560.544537][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 560.553673][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 560.563721][ T31] Call Trace: [ 560.567015][ T31] [ 560.569939][ T31] dump_stack_lvl+0x99/0x250 [ 560.574528][ T31] ? __asan_memcpy+0x40/0x70 [ 560.579135][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 560.584346][ T31] ? __pfx__printk+0x10/0x10 [ 560.588936][ T31] vpanic+0x237/0x6d0 [ 560.592921][ T31] ? __pfx_vpanic+0x10/0x10 [ 560.597428][ T31] ? preempt_schedule_common+0x83/0xd0 [ 560.602892][ T31] panic+0xb9/0xc0 [ 560.606711][ T31] ? __pfx_panic+0x10/0x10 [ 560.611124][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 560.616504][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 560.622663][ T31] watchdog+0xf9f/0xfa0 [ 560.626833][ T31] ? watchdog+0x1e2/0xfa0 [ 560.631158][ T31] kthread+0x711/0x8a0 [ 560.635231][ T31] ? __pfx_watchdog+0x10/0x10 [ 560.639902][ T31] ? __pfx_kthread+0x10/0x10 [ 560.644481][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 560.649674][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 560.654859][ T31] ? __pfx_kthread+0x10/0x10 [ 560.659443][ T31] ret_from_fork+0x4bc/0x870 [ 560.664035][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 560.669146][ T31] ? __switch_to_asm+0x39/0x70 [ 560.673922][ T31] ? __switch_to_asm+0x33/0x70 [ 560.678695][ T31] ? __pfx_kthread+0x10/0x10 [ 560.683292][ T31] ret_from_fork_asm+0x1a/0x30 [ 560.688116][ T31] [ 560.691461][ T31] Kernel Offset: disabled [ 560.695781][ T31] Rebooting in 86400 seconds..