last executing test programs: 2.60378527s ago: executing program 2 (id=2082): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0f000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000f0cd00"], &(0x7f0000000000)='GPL\x00'}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="09000000010000006d05000002"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380), &(0x7f00000003c0), 0xfffffffb, r0}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0), &(0x7f00000005c0), 0x1000, r0}, 0x38) 2.331853391s ago: executing program 0 (id=2085): syz_genetlink_get_family_id$net_dm(0x0, 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) r0 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@in6={0xa, 0x4e23, 0x200b, @loopback={0x91ff, 0x7ffffffe}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefcb) 2.244431065s ago: executing program 1 (id=2086): sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x48, 0xd, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000000) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000004c0)=ANY=[@ANYBLOB="140100002000010000002000fbdbdf25040117800c0003"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 2.164773548s ago: executing program 0 (id=2087): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000200)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_ext={0x1a, 0x4, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0xad}]}, &(0x7f0000000340)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x18, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000480)={{r0}, &(0x7f0000000400), &(0x7f0000000440)='%pI4 \x00'}, 0x20) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="5400000010001b1d00000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="04000000000000002c001280090001006970697000000000d9ff861c000280080003006401010205000a0000000000060012004e20000008001f0005"], 0x54}}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32, @ANYBLOB="2000000000000000000000000000000000000000461f88a66fd8ba396fb4c162a72b89201ec9b711b85fd8a3a1c9e1ddc01ebf86345f573048cf6e0b", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x401, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x2, 0x1c, &(0x7f0000000040)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) 2.012840623s ago: executing program 2 (id=2090): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000100)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="5001", @ANYRES8=r1, @ANYRES16], 0x14) 1.963837046s ago: executing program 1 (id=2091): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000004c0)=0x1, 0x4) connect$inet(r1, &(0x7f0000000500)={0x2, 0x4e24, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000540)=0xffffffffffffffff, 0x4) writev(r0, &(0x7f0000000580)=[{&(0x7f0000000600)}], 0x1) close(r1) 1.963667142s ago: executing program 0 (id=2092): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000200400ae"], 0x18}, 0x1, 0x0, 0x0, 0x841}, 0x0) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000041c0)=[{&(0x7f0000000500)=""/259, 0x103}, {&(0x7f0000000640)=""/4105, 0x1009}, {&(0x7f0000001680)=""/129, 0x81}, {&(0x7f0000001740)=""/4094, 0xffe}, {&(0x7f0000002740)=""/209, 0xd1}, {&(0x7f0000002840)=""/119, 0x77}, {&(0x7f00000028c0)=""/107, 0x6b}, {&(0x7f0000003940)=""/246, 0xf6}, {&(0x7f0000003a40)=""/142, 0x8e}, {&(0x7f0000003b00)=""/24, 0x18}, {&(0x7f0000003b40)=""/55, 0x37}, {&(0x7f0000003b80)=""/214, 0xd6}, {&(0x7f0000004180)=""/28, 0x1c}], 0xd}, 0x40000180) 1.745271624s ago: executing program 1 (id=2093): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b4020000ff020000000000000000f759f500b37e1c55821820d69f369ad13b000004000000000000000000a8d9adf216ae81"], &(0x7f0000000100)='GPL\x00', 0x9, 0xa733, &(0x7f0000000240)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000340), 0x36c, 0x10, &(0x7f0000000380), 0x26}, 0x48) r0 = socket$kcm(0x29, 0x2, 0x0) close(r0) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f00000003c0)={&(0x7f0000000400)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10, 0x0}, 0x30004040) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mtu(r2, 0x29, 0x17, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f0000000440), 0xfe11) close(r0) (fail_nth: 5) 1.731564095s ago: executing program 0 (id=2095): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r0, 0x890b, &(0x7f00000003c0)='\x00\x00\x00\x00\x00\x00\x00') ioctl(r0, 0x8, &(0x7f00000004c0)="e9737c35fcfd7193a3e2a1216830bdee2d95fb50ec05") bind$x25(r0, &(0x7f0000000400), 0x12) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000440)={'bond0\x00', 0x2000}) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0700000004000000800f000057051d0028"], 0x50) syz_emit_ethernet(0x3e, &(0x7f0000000180)={@multicast, @random="382eaf917ff0", @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00', 0x8, 0x3a, 0xff, @local, @loopback, {[], @echo_request={0x80, 0x0, 0x0, 0xb7, 0x9}}}}}}, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r2, 0x5, 0x50, 0x0, &(0x7f0000000380)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0), 0x200002, 0x0) r4 = openat$cgroup_devices(r3, &(0x7f0000000500)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="62202a3a2a206d1b"], 0x8) close(r3) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) 1.706471738s ago: executing program 4 (id=2096): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000004000000000000000300000784"], 0x0, 0x5, 0x0, 0x0, 0x41100, 0x9}, 0x94) r0 = socket$inet(0xa, 0x801, 0x84) listen(r0, 0x8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond_slave_1\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4800000040000701fcffffff00000100017c0000040042800c00018006000600800a0000240002800c000380080009"], 0x48}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000001200b7a325bd7000fddbdf25200f07074a264e22030000002f00000001ffffffc300000006000000000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="de00fbffa611195cc93f034708000000080003"], 0x54}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000002640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002600)={&(0x7f00000013c0)={0x1224, 0x12, 0x400, 0x70bd26, 0x25dfdbff, {0x28, 0xf7, 0x8, 0x1d, {0x4e22, 0x4e24, [0xfffffffc, 0x8, 0xffff8001, 0x8], [0x8000, 0x4, 0x8, 0x3], r1, [0x3, 0x9dfd]}, 0x1, 0xe}, [@INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x9d, 0x1, "b5122812a944763ba0b113849eb25274370143cce7a2ded2d66f70ae59536666db321a6f2dff8ab8dd6b82804b94ee451117e56836391cd7267b345a54f2249066aa1cf6b235b57aef827cc7cce53e3742239c00d28e6aeb708e1f60bc74111303e5322dd88b323721236bf38c1ac5e7ce516ac8c13ce1fc385cda39bc77bf764cf46275d90fe9adc4cdb9fb9538ca70d263717a0234ec2064"}, @INET_DIAG_REQ_BYTECODE={0x43, 0x1, "dc308bd6ec2dfc226f8075be4aded6728d848f3507e1ee207040ce613554a5010a55e19317629d6acf435c9592be705d3a028b75974f4d2c91333d44cacfee"}, @INET_DIAG_REQ_BYTECODE={0xde, 0x1, "abeea76c4d0201ae4642269aab027c25213058c7f4dca817c0bbdec07eef7a53a926a3aca2b14420d0f9fd5b85c4f53a01d09a3f3dc0827260d7047c92833e9b20ce9466d7df053b99f4bdc7f2c5fd3815f6365d4f72d351ad6187e29ddfa5c4b6fdea77d24408f472894aa3f79dfc53aa7fbb23ff04dff865f5dcbaa889baa0291b7e09c2ccf8d597e62d6d486b232698554af6cd8f120a10cc868bbabb68b72736fef2068adf3d8b5cf6d6741271bf992ee14bff83917541a1e220e33cb9d58a162143edb23d94802664af2681ff74d7f830fa37d5a6c62805"}, @INET_DIAG_REQ_BYTECODE={0xe, 0x1, "4093406c1acb235876af"}]}, 0x1224}}, 0x24000080) 1.705001339s ago: executing program 2 (id=2097): syz_genetlink_get_family_id$net_dm(0x0, 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) r0 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@in6={0xa, 0x4e23, 0x200b, @loopback={0xb804, 0x7ffffffe}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefcb) 1.503121073s ago: executing program 1 (id=2098): r0 = socket(0x2, 0x80805, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0xb001, 0x4, 0x3d0, 0x0, 0xe8, 0x1f8, 0x2e8, 0x2e8, 0x2e8, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@uncond, 0xc0, 0x110, 0x0, {0x0, 0x1e03}}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @multicast2, 0x2}}}, {{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pim6reg0\x00', 'netpci0\x00'}, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x420) r3 = socket$inet6(0xa, 0x2, 0xfffffeff) r4 = socket$nl_rdma(0x10, 0x3, 0x14) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000001dc0)=@assoc_value={0x0}, &(0x7f0000001e00)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000001e40)={0x93de, 0x1, 0x0, 0x3, 0x1ff, 0x7, 0xdff8, 0xb, r5}, 0x20) getsockopt$inet_sctp_SCTP_EXPOSE_POTENTIALLY_FAILED_STATE(r0, 0x84, 0x83, &(0x7f0000001e80)={r5, 0x1}, &(0x7f0000001ec0)=0x8) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000200)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000007c0)={&(0x7f0000001980)={0x150, 0x1403, 0x1, 0x70bd26, 0x25dfdbff, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'sit0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syz_tun\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'xfrm0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'batadv0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_team\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'wg0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ipvlan1\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wlan1\x00'}}]}, 0x150}, 0x1, 0x0, 0x0, 0x8010}, 0x4004) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r6, 0x6612) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=ANY=[], 0x128}, 0x0) recvmsg$unix(r9, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000840), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r12, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[], 0x128}, 0x0) recvmsg(r11, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=""/4096, 0x1000}, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f0000000140)={0x2, 'netpci0\x00', {0x6}, 0x200}) close(r11) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(r0, 0x84, 0x7a, &(0x7f0000000840)={0x2, 0xffffffffffffffff, 0x80800}, &(0x7f0000000900)=0xc) ppoll(&(0x7f0000001b00)=[{r11, 0x8000}, {r7, 0x4111}, {r1, 0x1}, {r1}, {r13, 0xb5}], 0x5, &(0x7f0000001b40), &(0x7f0000001b80)={[0xbe08]}, 0x8) pipe(0x0) sendto$inet6(r3, 0x0, 0x0, 0x80fe, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) bind$802154_dgram(r1, &(0x7f0000000280)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) 1.502908847s ago: executing program 4 (id=2099): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000050000000000000000000000711009000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 1.425160542s ago: executing program 2 (id=2100): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0f000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000f0cd00"], &(0x7f0000000000)='GPL\x00'}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="09000000010000006d05000002"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380), &(0x7f00000003c0), 0xfffffffb, r0}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0), &(0x7f00000005c0), 0x1000, r0}, 0x38) 1.307126013s ago: executing program 3 (id=2101): socket$inet6_icmp(0xa, 0x2, 0x3a) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) socket(0x2, 0x80805, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000600)) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x2000c8d1) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000ff070000000000000300000018110000", @ANYRES32, @ANYBLOB="fffffffffffffff6b702040001"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) 1.196336316s ago: executing program 4 (id=2102): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x301, 0x0, 0x2000000, {0x1, 0x0, 0x3}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x48}}, 0x0) 1.195686292s ago: executing program 3 (id=2103): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000004c0)=0x1, 0x4) connect$inet(r1, &(0x7f0000000500)={0x2, 0x4e24, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000540)=0xffffffffffffffff, 0x4) writev(r0, &(0x7f0000000580)=[{&(0x7f0000000600)}], 0x1) close(r1) 993.51965ms ago: executing program 4 (id=2104): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r3, {0x0, 0xfff2}, {0xffff, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x1, 0x6, 0xfffffff9, 0x3, 0xffffffff, 0x20102}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0x7fffffff, 0x155}}]}}}]}, 0x58}}, 0x40000c0) bind$packet(r0, &(0x7f0000000400)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f0000000440)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) 992.269133ms ago: executing program 3 (id=2105): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000200400ae"], 0x18}, 0x1, 0x0, 0x0, 0x841}, 0x0) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000041c0)=[{&(0x7f0000000500)=""/259, 0x103}, {&(0x7f0000000640)=""/4105, 0x1009}, {&(0x7f0000001680)=""/129, 0x81}, {&(0x7f0000001740)=""/4094, 0xffe}, {&(0x7f0000002740)=""/209, 0xd1}, {&(0x7f0000002840)=""/119, 0x77}, {&(0x7f00000028c0)=""/107, 0x6b}, {&(0x7f0000003940)=""/246, 0xf6}, {&(0x7f0000003a40)=""/142, 0x8e}, {&(0x7f0000003b00)=""/24, 0x18}, {&(0x7f0000003b40)=""/55, 0x37}, {&(0x7f0000003b80)=""/214, 0xd6}, {&(0x7f0000004180)=""/28, 0x1c}], 0xd}, 0x40000180) 728.598056ms ago: executing program 0 (id=2106): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x300, 0x70bd27, 0x25dfdbfe, {}, [""]}, 0x1c}}, 0x40) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_TX_POWER(r2, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, 0x0, 0x0, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_TX_POWER={0x8, 0xb, 0x4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0xd320000}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4010}, 0x4048880) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000380), 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000500)={'tunl0\x00', &(0x7f0000000480)={'erspan0\x00', 0x0, 0x8000, 0x1, 0x3ff, 0x80000000, {{0xc, 0x4, 0x3, 0x19, 0x30, 0x67, 0x0, 0x8, 0x4, 0x0, @empty, @empty, {[@lsrr={0x83, 0x1b, 0x6, [@remote, @multicast2, @local, @multicast2, @broadcast, @empty]}, @noop]}}}}}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000006c0)={r0, 0x20, &(0x7f0000000680)={&(0x7f0000000580)=""/181, 0xb5, 0x0, &(0x7f0000000640)=""/5, 0x5}}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x2, 0xf, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8}, [@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xe5}}, @map_idx={0x18, 0x6, 0x5, 0x0, 0x6}]}, &(0x7f0000000440)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x41, '\x00', r5, @fallback=0x2d, r0, 0x8, &(0x7f0000000540)={0x5, 0x5}, 0x8, 0x10, 0x0, 0x0, r6, r0}, 0x94) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r2) sendmsg$IEEE802154_LLSEC_ADD_KEY(r2, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x2c, r8, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040800}, 0xc1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000980)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r2, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x60, 0x0, 0x2, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x8000) recvmmsg(r9, &(0x7f00000021c0)=[{{&(0x7f0000000ac0)=@nfc_llcp, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000b40)=""/106, 0x6a}], 0x1, &(0x7f0000000c00)=""/186, 0xba}, 0x4}, {{&(0x7f0000000cc0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000fc0)=[{&(0x7f0000000d40)=""/91, 0x5b}, {&(0x7f0000000dc0)=""/172, 0xac}, {&(0x7f0000000e80)=""/28, 0x1c}, {&(0x7f0000000ec0)=""/236, 0xec}], 0x4, &(0x7f0000001000)=""/4096, 0x1000}, 0x3}, {{&(0x7f0000002000)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f00000020c0)=[{&(0x7f0000002080)=""/27, 0x1b}], 0x1, &(0x7f0000002100)=""/170, 0xaa}, 0x1}], 0x3, 0x40010003, &(0x7f0000002280)={0x0, 0x3938700}) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002300), r2) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r2, &(0x7f00000023c0)={&(0x7f00000022c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002380)={&(0x7f0000002340)={0x34, r11, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x34}}, 0x4000000) write(r0, &(0x7f0000002400)="c3aae342a85479cd606133e093d90c5c8207f8e830b365149a0ff47a9178055176068ba96afc9361d9b70d0b68326b70f43badd0090eafffe6b3f5133553ad26ee503f6e0bda3329e566c76b0aa95f0b428589e22f654c596ec360d73a7bda8ef39c5a2ec2d861afd3fa4dbb988b96b62c8c1aad325f9dd939f6dc4012474fda9f9f211094c5451b70c98b1f2f350f644dd4f6a03520337050007c5ebc2da110ddd5fd8532a0130610ac4fed1e4ebae37684f09258cc97f796cab0", 0xbb) r12 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000002500), r2) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r2, &(0x7f0000002640)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002600)={&(0x7f0000002540)={0xb0, r12, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:ipmi_device_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x43}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private0}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}]}, 0xb0}}, 0x881) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000002680)={r0, r7, 0x4, r7}, 0x10) bpf$OBJ_GET_MAP(0x7, &(0x7f0000002700)=@o_path={&(0x7f00000026c0)='./file0\x00', 0x0, 0x0, r9}, 0x18) syz_genetlink_get_family_id$nbd(&(0x7f0000002740), r2) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r2, &(0x7f0000002840)={&(0x7f0000002780)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002800)={&(0x7f00000027c0)={0x3c, 0x0, 0x20, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x40) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000002980)={&(0x7f0000002880)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002940)={&(0x7f00000028c0)={0x80, 0x0, 0x204, 0x7f, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x1, 0xfffffff7, 0x1, 0x7, 0x706ddb3c]}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x0]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7fffffff}, @SEG6_ATTR_SECRET={0x14, 0x4, [0x2, 0x6, 0x84cd, 0x6]}]}, 0x80}, 0x1, 0x0, 0x0, 0x2004c800}, 0x801) r13 = socket$inet(0x2, 0x3, 0x80000000) connect$inet(r13, &(0x7f00000029c0)={0x2, 0x4e22, @multicast2}, 0x10) 727.235838ms ago: executing program 2 (id=2107): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x11, 0x12, &(0x7f0000000a40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0xb}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {}, [@jmp={0x5, 0x1, 0xb, 0xa, 0x0, 0xfffffffffffffffc}, @jmp={0x5, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff4, 0xfffffffffffffff0}, @jmp={0x5, 0x1, 0x1, 0x0, 0x9, 0xfffffffffffffff8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000b00)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0xe}, 0x94) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x9, 0x0, 0xffffffffffffffff, 0x1ff}, 0x50) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r3, &(0x7f0000000300)=[{&(0x7f0000000340)="d64a4084c3fb97b2527b91a366375d46eab01f92ba26e2a671dfc2413f0e6c8353e4ef36eb31b31d8c0a239785a53d74a25693d00b327086f8ba1348a4191fd4b30a021e0db8834c02d249ab", 0x4c}, {0x0}], 0x2, 0x5, 0x401) (async) close(r3) (async) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000700)=@updsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in6=@private0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {@in6=@local, 0x0, 0x2b}, @in6=@mcast2, {}, {}, {}, 0x0, 0x0, 0x2, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) (async) sendfile(r3, r2, 0x0, 0xf03a0005) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x1c, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x200}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@generic={0x7, 0x6, 0xf, 0x9, 0x7fff00}, @ldst={0x2, 0x2, 0x0, 0x1, 0x1, 0x18, 0xfffffffffffffffc}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @jmp={0x5, 0x0, 0x6, 0x0, 0x6, 0x80, 0x10}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000180)='syzkaller\x00', 0xfffffff8, 0xab, &(0x7f00000001c0)=""/171, 0x40f00, 0x62, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000003c0)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0x2, 0x600, 0x7}, 0x10, 0x0, 0x0, 0x5, &(0x7f00000004c0)=[r0, r0, r0], &(0x7f0000000500)=[{0x2, 0x3, 0xd, 0xb}, {0x4, 0x4, 0x8, 0xb}, {0x5, 0x2, 0x1, 0x4}, {0x2, 0x4, 0x7, 0x1}, {0x4, 0x4, 0x0, 0x4}], 0x10, 0x67b}, 0x94) 720.580534ms ago: executing program 3 (id=2108): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b4020000ff020000000000000000f759f500b37e1c55821820d69f369ad13b000004000000000000000000a8d9adf216ae81"], &(0x7f0000000100)='GPL\x00', 0x9, 0xa733, &(0x7f0000000240)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000340), 0x36c, 0x10, &(0x7f0000000380), 0x26}, 0x48) r0 = socket$kcm(0x29, 0x2, 0x0) close(r0) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f00000003c0)={&(0x7f0000000400)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10, 0x0}, 0x30004040) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mtu(r2, 0x29, 0x17, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f0000000440), 0xfe11) close(r0) (fail_nth: 6) 635.700269ms ago: executing program 4 (id=2109): syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "000100", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000001c0)=0x474c, 0x4) bind$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f00000002c0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000300)=0xfffffffc, 0x4) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000340)=0x101, 0x4) recvmmsg(r0, &(0x7f0000000380)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/33, 0x21}, 0x4}], 0x3d5, 0x45833af92e4b38ff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x405, 0xfffffffc, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x45502, 0x4}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x2}, @IFLA_IPVLAN_MODE={0x6, 0x1, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 613.337864ms ago: executing program 3 (id=2110): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@restrict]}}, 0x0, 0x26, 0x0, 0x1}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x2, &(0x7f0000000180)=@raw=[@map_idx_val={0x18, 0xb, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x100, 0x49, '\x00', 0x0, 0x25, r0, 0x8, &(0x7f0000000200)={0x9, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8e}, 0x90) write(0xca, &(0x7f0000000080)="040e0a0160200003000a00020a", 0xd) 507.335316ms ago: executing program 1 (id=2111): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001b00)=ANY=[@ANYBLOB="150100001900010400000000000000007f000001000000000000000000000000ac1e000100000000000000000000000000000000000000000200102000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000001000000000009c58ebe000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f00020000005400080050000800003f48"], 0x120}}, 0x0) (fail_nth: 6) 351.747583ms ago: executing program 3 (id=2112): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'syz_tun\x00'}) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x3, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="b702000000000000b703000000000000b7040000000000008500000098000000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000340)={@ifindex=r4, r6, 0x2e, 0x0, 0x0, @void, @value=0x0}, 0x20) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r7, {}, {0x5}, {0xfff3}}}, 0x24}}, 0x0) 351.402825ms ago: executing program 4 (id=2113): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x5001}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x85000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="a4000000", @ANYRES16=0x0, @ANYBLOB="08002dbd7000fedbdf25040000003c00018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="14000200776731000000000000000000000000001400020067656e657665310000000000000000005400018008000300020000000800030000000000140002006e657464657673696d3000000000000008000300020000001400020076657468305f746f5f6272696467650008000100", @ANYRES32=0x0, @ANYBLOB="2000030000000000"], 0xa4}, 0x1, 0x0, 0x0, 0x4000805}, 0x880) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newtfilter={0x48, 0x2c, 0x601, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, r4, {0x1ffee, 0x7}, {0xfff1, 0xffff}, {0x300, 0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x4a, 0x1, 0x2}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0xffffffffffffff72}]}]}}]}, 0x48}}, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r6, &(0x7f00000004c0)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r6, 0x6d5) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000500)={0x28, 0x0, 0x0, @local}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000800)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=@newqdisc={0x14c, 0x24, 0x3fe3aa0262d8c783, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0x8}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x34004, 0x0, 0xffffffff, 0x0, 0x1}}]}}]}, 0x14c}}, 0x0) r11 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r11, &(0x7f00000007c0)={0x28, 0x0, 0x0, @local}, 0x10) close(0x3) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r5) getsockname$packet(r5, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x44) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x439, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r12, 0x9901, 0x49a41}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}, @IFLA_IPTUN_TTL={0x5}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x2}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20060094}, 0x0) sendto$packet(r0, &(0x7f00000001c0)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x404c891, &(0x7f0000000200)={0x11, 0x86dd, r12, 0x1, 0x4, 0x6, @local}, 0x14) r13 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r13, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}}}, 0xb8}}, 0x2c000010) r14 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r14, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x4, {{@in6=@local, @in, 0x0, 0x0, 0x0, 0x8000, 0xa, 0x0, 0x0, 0x67}, {0x0, 0xfffffffffffffffc, 0x0, 0x2, 0xffffffffffffffff, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2, 0x3, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) 315.255906ms ago: executing program 2 (id=2114): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x301, 0x0, 0x8000000, {0x1, 0x0, 0x3}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x48}}, 0x0) 87.407448ms ago: executing program 0 (id=2115): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x0, 0xe, 0x0, &(0x7f0000000400)='\x00'/14, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000440)={0x2, 0x4e23, @remote}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, 0x0, 0x0) write(r1, 0x0, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2d}, 0x90) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000600)={'syzkaller1\x00', 0x0}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000640)={0x3, 0x0}, 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000680)={r2, r4, 0x25, 0x0, @val=@target_btf_id=r5}, 0x14) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', r4, @fallback=0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000040)={0x5}, 0x10, r5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) syz_genetlink_get_family_id$mptcp(&(0x7f0000000480), r3) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r6, 0xe0, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff1d, 0x0, 0x0, 0x0, 0x0}}, 0x10) 0s ago: executing program 1 (id=2116): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x14, 0x23, 0x301, 0x270bda5, 0x259fdbfa, {0x1}}, 0x14}, 0x1, 0x0, 0xffffffa6}, 0x80) kernel console output (not intermixed with test programs): 79748][ T9075] ? add_subprog+0x40b/0x550 [ 199.379777][ T9075] ? bpf_check+0x1934/0x34e0 [ 199.379798][ T9075] ? __pfx_check_and_resolve_insns+0x10/0x10 [ 199.379817][ T9075] ? check_subprogs+0x413/0x540 [ 199.379847][ T9075] bpf_check+0x1c12/0x34e0 [ 199.379878][ T9075] ? ktime_get_with_offset+0x93/0x2d0 [ 199.379903][ T9075] ? ktime_get_with_offset+0x93/0x2d0 [ 199.379928][ T9075] ? __pfx_bpf_check+0x10/0x10 [ 199.379951][ T9075] ? bpf_obj_name_cpy+0x194/0x1e0 [ 199.379978][ T9075] bpf_prog_load+0x14da/0x1c60 [ 199.380009][ T9075] ? __pfx_bpf_prog_load+0x10/0x10 [ 199.380044][ T9075] ? __might_fault+0xaf/0x130 [ 199.380071][ T9075] __sys_bpf+0xd86/0xe00 [ 199.380098][ T9075] ? __pfx___sys_bpf+0x10/0x10 [ 199.380128][ T9075] ? __fget_files+0x2a/0x420 [ 199.380168][ T9075] ? ksys_write+0x242/0x270 [ 199.380196][ T9075] ? __pfx_ksys_write+0x10/0x10 [ 199.380226][ T9075] __x64_sys_bpf+0xba/0xd0 [ 199.380254][ T9075] do_syscall_64+0x166/0x520 [ 199.380277][ T9075] ? trace_irq_disable+0x3b/0x140 [ 199.380300][ T9075] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.380318][ T9075] ? clear_bhb_loop+0x70/0xc0 [ 199.380340][ T9075] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.380359][ T9075] RIP: 0033:0x7faefffa8f19 [ 199.380377][ T9075] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 199.380392][ T9075] RSP: 002b:00007faf00e18028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 199.380412][ T9075] RAX: ffffffffffffffda RBX: 00007faf00225fa0 RCX: 00007faefffa8f19 [ 199.380425][ T9075] RDX: 0000000000000094 RSI: 0000200000000140 RDI: 0000000000000005 [ 199.380437][ T9075] RBP: 00007faf00e18090 R08: 0000000000000000 R09: 0000000000000000 [ 199.380448][ T9075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 199.380458][ T9075] R13: 00007faf00226038 R14: 00007faf00225fa0 R15: 00007ffcce4c0918 [ 199.380489][ T9075] [ 199.435971][ T9075] syz.3.1071: vmalloc error: size 32, align 0x1, vm_struct allocation failed, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 199.436188][ T9075] CPU: 0 UID: 0 PID: 9075 Comm: syz.3.1071 Not tainted syzkaller #0 PREEMPT(full) [ 199.436207][ T9075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 199.436228][ T9075] Call Trace: [ 199.436235][ T9075] [ 199.436242][ T9075] dump_stack_lvl+0xe8/0x150 [ 199.436276][ T9075] warn_alloc+0x24d/0x270 [ 199.436298][ T9075] ? lockdep_hardirqs_on+0x7b/0x110 [ 199.436323][ T9075] ? __pfx_warn_alloc+0x10/0x10 [ 199.436340][ T9075] ? kfree+0x1c5/0x650 [ 199.436365][ T9075] ? __get_vm_area_node+0x219/0x2f0 [ 199.436389][ T9075] __vmalloc_node_range_noprof+0x396/0x16f0 [ 199.436416][ T9075] ? __sys_bpf+0xcf1/0xe00 [ 199.436432][ T9075] ? __x64_sys_bpf+0xba/0xd0 [ 199.436455][ T9075] ? do_syscall_64+0x166/0x520 [ 199.436481][ T9075] ? kasan_save_track+0x4f/0x80 [ 199.436504][ T9075] ? kasan_save_track+0x3e/0x80 [ 199.436526][ T9075] ? __kvmalloc_node_noprof+0x50a/0x820 [ 199.436552][ T9075] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.436581][ T9075] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 199.436614][ T9075] ? bpf_prog_calc_tag+0x51/0x370 [ 199.436631][ T9075] __vmalloc_noprof+0xd2/0x120 [ 199.436651][ T9075] ? bpf_prog_calc_tag+0x51/0x370 [ 199.436668][ T9075] bpf_prog_calc_tag+0x51/0x370 [ 199.436688][ T9075] check_and_resolve_insns+0xc0/0x28e0 [ 199.436707][ T9075] ? __asan_memset+0x22/0x50 [ 199.436726][ T9075] ? add_subprog+0x40b/0x550 [ 199.436745][ T9075] ? bpf_check+0x1934/0x34e0 [ 199.436763][ T9075] ? __pfx_check_and_resolve_insns+0x10/0x10 [ 199.436780][ T9075] ? check_subprogs+0x413/0x540 [ 199.436808][ T9075] bpf_check+0x1c12/0x34e0 [ 199.436838][ T9075] ? ktime_get_with_offset+0x93/0x2d0 [ 199.436861][ T9075] ? ktime_get_with_offset+0x93/0x2d0 [ 199.436884][ T9075] ? __pfx_bpf_check+0x10/0x10 [ 199.436904][ T9075] ? bpf_obj_name_cpy+0x194/0x1e0 [ 199.436930][ T9075] bpf_prog_load+0x14da/0x1c60 [ 199.436960][ T9075] ? __pfx_bpf_prog_load+0x10/0x10 [ 199.436993][ T9075] ? __might_fault+0xaf/0x130 [ 199.437016][ T9075] __sys_bpf+0xd86/0xe00 [ 199.437039][ T9075] ? __pfx___sys_bpf+0x10/0x10 [ 199.437067][ T9075] ? __fget_files+0x2a/0x420 [ 199.437107][ T9075] ? ksys_write+0x242/0x270 [ 199.437135][ T9075] ? __pfx_ksys_write+0x10/0x10 [ 199.437165][ T9075] __x64_sys_bpf+0xba/0xd0 [ 199.437199][ T9075] do_syscall_64+0x166/0x520 [ 199.437229][ T9075] ? trace_irq_disable+0x3b/0x140 [ 199.437257][ T9075] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.437275][ T9075] ? clear_bhb_loop+0x70/0xc0 [ 199.437298][ T9075] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.437315][ T9075] RIP: 0033:0x7faefffa8f19 [ 199.437333][ T9075] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 199.437348][ T9075] RSP: 002b:00007faf00e18028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 199.437366][ T9075] RAX: ffffffffffffffda RBX: 00007faf00225fa0 RCX: 00007faefffa8f19 [ 199.437380][ T9075] RDX: 0000000000000094 RSI: 0000200000000140 RDI: 0000000000000005 [ 199.437391][ T9075] RBP: 00007faf00e18090 R08: 0000000000000000 R09: 0000000000000000 [ 199.437402][ T9075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 199.437413][ T9075] R13: 00007faf00226038 R14: 00007faf00225fa0 R15: 00007ffcce4c0918 [ 199.437443][ T9075] [ 199.462471][ T9077] netlink: 'syz.0.1069': attribute type 28 has an invalid length. [ 199.462517][ T9077] netlink: 'syz.0.1069': attribute type 3 has an invalid length. [ 199.473589][ T9077] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 199.508379][ T9079] netlink: 'syz.0.1069': attribute type 28 has an invalid length. [ 199.508397][ T9079] netlink: 'syz.0.1069': attribute type 3 has an invalid length. [ 199.512668][ T9081] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 199.546152][ T9075] Mem-Info: [ 199.546168][ T9075] active_anon:8856 inactive_anon:0 isolated_anon:0 [ 199.546168][ T9075] active_file:0 inactive_file:43246 isolated_file:0 [ 199.546168][ T9075] unevictable:0 dirty:180 writeback:0 [ 199.546168][ T9075] slab_reclaimable:11068 slab_unreclaimable:101069 [ 199.546168][ T9075] mapped:30086 shmem:3519 pagetables:1205 [ 199.546168][ T9075] sec_pagetables:0 bounce:0 [ 199.546168][ T9075] kernel_misc_reclaimable:0 [ 199.546168][ T9075] free:1321435 free_pcp:7607 free_cma:0 [ 199.546222][ T9075] Node 0 active_anon:35424kB inactive_anon:0kB active_file:0kB inactive_file:172780kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:120344kB dirty:720kB writeback:0kB shmem:14076kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12316kB pagetables:4676kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 199.546273][ T9075] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 199.546320][ T9075] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 199.546373][ T9075] lowmem_reserve[]: 0 2463 2465 2465 2465 [ 199.546405][ T9075] Node 0 DMA32 free:1336968kB boost:0kB min:33920kB low:42400kB high:50880kB reserved_highatomic:0kB free_highatomic:0kB active_anon:35424kB inactive_anon:0kB active_file:0kB inactive_file:172780kB unevictable:0kB writepending:720kB zspages:0kB present:3129332kB managed:2522820kB mlocked:0kB bounce:0kB free_pcp:30428kB local_pcp:16112kB free_cma:0kB [ 199.546458][ T9075] lowmem_reserve[]: 0 0 1 1 1 [ 199.546488][ T9075] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1392kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 199.546537][ T9075] lowmem_reserve[]: 0 0 0 0 0 [ 199.546567][ T9075] Node 1 Normal free:3933412kB boost:0kB min:55960kB low:69948kB high:83936kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 199.546618][ T9075] lowmem_reserve[]: 0 0 0 0 0 [ 199.546647][ T9075] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 199.546776][ T9075] Node 0 DMA32: 126*4kB (UME) 272*8kB (UME) 285*16kB (UME) 420*32kB (UM) 57*64kB (UM) 31*128kB (UME) 10*256kB (UME) 5*512kB (UM) 7*1024kB (ME) 3*2048kB (UME) 315*4096kB (UM) = 1336968kB [ 199.546912][ T9075] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 199.546994][ T9075] Node 1 Normal: 3*4kB (UM) 5*8kB (UM) 9*16kB (UM) 7*32kB (UM) 7*64kB (UM) 5*128kB (UM) 3*256kB (UM) 2*512kB (M) 2*1024kB (UM) 0*2048kB 959*4096kB (M) = 3933412kB [ 199.547123][ T9075] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 199.547138][ T9075] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 199.547153][ T9075] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 199.547166][ T9075] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 199.547179][ T9075] 46761 total pagecache pages [ 199.547189][ T9075] 0 pages in swap cache [ 199.547195][ T9075] Free swap = 124996kB [ 199.547202][ T9075] Total swap = 124996kB [ 199.547209][ T9075] 2097051 pages RAM [ 199.547215][ T9075] 0 pages HighMem/MovableOnly [ 199.547221][ T9075] 434382 pages reserved [ 199.547227][ T9075] 0 pages cma reserved [ 200.433816][ T9102] netdevsim netdevsim3: Firmware load for './file0/../file0' refused, path contains '..' component [ 200.719150][ T9114] __nla_validate_parse: 6 callbacks suppressed [ 200.719172][ T9114] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1083'. [ 200.719229][ T9114] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1083'. [ 200.773280][ T9118] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1085'. [ 201.135894][ T9136] netlink: 1132 bytes leftover after parsing attributes in process `syz.3.1091'. [ 201.155277][ T9142] FAULT_INJECTION: forcing a failure. [ 201.155277][ T9142] name failslab, interval 1, probability 0, space 0, times 0 [ 201.155307][ T9142] CPU: 1 UID: 0 PID: 9142 Comm: syz.0.1095 Not tainted syzkaller #0 PREEMPT(full) [ 201.155328][ T9142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 201.155339][ T9142] Call Trace: [ 201.155347][ T9142] [ 201.155355][ T9142] dump_stack_lvl+0xe8/0x150 [ 201.155390][ T9142] should_fail_ex+0x3eb/0x540 [ 201.155418][ T9142] should_failslab+0xa8/0x100 [ 201.155449][ T9142] __kmalloc_node_noprof+0xfb/0x720 [ 201.155476][ T9142] ? __get_vm_area_node+0x200/0x2f0 [ 201.155495][ T9142] ? __get_vm_area_node+0x283/0x2f0 [ 201.155513][ T9142] ? __vmalloc_node_range_noprof+0x5d1/0x16f0 [ 201.155533][ T9142] ? __vmalloc_node_range_noprof+0x5d1/0x16f0 [ 201.155562][ T9142] __vmalloc_node_range_noprof+0x5d1/0x16f0 [ 201.155595][ T9142] ? __sys_bpf+0xcf1/0xe00 [ 201.155618][ T9142] ? __x64_sys_bpf+0xba/0xd0 [ 201.155642][ T9142] ? do_syscall_64+0x166/0x520 [ 201.155669][ T9142] ? kasan_save_track+0x4f/0x80 [ 201.155692][ T9142] ? kasan_save_track+0x3e/0x80 [ 201.155735][ T9142] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 201.155776][ T9142] ? bpf_prog_calc_tag+0x51/0x370 [ 201.155793][ T9142] __vmalloc_noprof+0xd2/0x120 [ 201.155814][ T9142] ? bpf_prog_calc_tag+0x51/0x370 [ 201.155835][ T9142] bpf_prog_calc_tag+0x51/0x370 [ 201.155858][ T9142] check_and_resolve_insns+0xc0/0x28e0 [ 201.155880][ T9142] ? __asan_memset+0x22/0x50 [ 201.155903][ T9142] ? add_subprog+0x40b/0x550 [ 201.155925][ T9142] ? bpf_check+0x1934/0x34e0 [ 201.155946][ T9142] ? __pfx_check_and_resolve_insns+0x10/0x10 [ 201.155966][ T9142] ? check_subprogs+0x413/0x540 [ 201.155996][ T9142] bpf_check+0x1c12/0x34e0 [ 201.156028][ T9142] ? ktime_get_with_offset+0x93/0x2d0 [ 201.156057][ T9142] ? ktime_get_with_offset+0x93/0x2d0 [ 201.156083][ T9142] ? __pfx_bpf_check+0x10/0x10 [ 201.156106][ T9142] ? bpf_obj_name_cpy+0x194/0x1e0 [ 201.156127][ T9142] bpf_prog_load+0x14da/0x1c60 [ 201.156162][ T9142] ? __pfx_bpf_prog_load+0x10/0x10 [ 201.156198][ T9142] ? __might_fault+0xaf/0x130 [ 201.156225][ T9142] __sys_bpf+0xd86/0xe00 [ 201.156253][ T9142] ? __pfx___sys_bpf+0x10/0x10 [ 201.156284][ T9142] ? __fget_files+0x2a/0x420 [ 201.156327][ T9142] ? ksys_write+0x242/0x270 [ 201.156355][ T9142] ? __pfx_ksys_write+0x10/0x10 [ 201.156387][ T9142] __x64_sys_bpf+0xba/0xd0 [ 201.156416][ T9142] do_syscall_64+0x166/0x520 [ 201.156439][ T9142] ? trace_irq_disable+0x3b/0x140 [ 201.156464][ T9142] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.156483][ T9142] ? clear_bhb_loop+0x70/0xc0 [ 201.156506][ T9142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.156525][ T9142] RIP: 0033:0x7f2819da8f19 [ 201.156543][ T9142] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 201.156559][ T9142] RSP: 002b:00007f281ac55028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 201.156579][ T9142] RAX: ffffffffffffffda RBX: 00007f281a025fa0 RCX: 00007f2819da8f19 [ 201.156593][ T9142] RDX: 0000000000000094 RSI: 0000200000000140 RDI: 0000000000000005 [ 201.156613][ T9142] RBP: 00007f281ac55090 R08: 0000000000000000 R09: 0000000000000000 [ 201.156624][ T9142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 201.156635][ T9142] R13: 00007f281a026038 R14: 00007f281a025fa0 R15: 00007ffe3e94f798 [ 201.156665][ T9142] [ 201.628775][ T9152] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1097'. [ 201.657736][ T9150] tipc: Enabling of bearer rejected, failed to enable media [ 202.059064][ T9184] FAULT_INJECTION: forcing a failure. [ 202.059064][ T9184] name failslab, interval 1, probability 0, space 0, times 0 [ 202.059097][ T9184] CPU: 0 UID: 0 PID: 9184 Comm: syz.1.1108 Not tainted syzkaller #0 PREEMPT(full) [ 202.059119][ T9184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 202.059130][ T9184] Call Trace: [ 202.059137][ T9184] [ 202.059146][ T9184] dump_stack_lvl+0xe8/0x150 [ 202.059181][ T9184] should_fail_ex+0x3eb/0x540 [ 202.059209][ T9184] should_failslab+0xa8/0x100 [ 202.059238][ T9184] __kvmalloc_node_noprof+0x171/0x820 [ 202.059261][ T9184] ? kasan_save_track+0x3e/0x80 [ 202.059282][ T9184] ? kasan_save_free_info+0x40/0x50 [ 202.059301][ T9184] ? __kasan_slab_free+0x5c/0x80 [ 202.059324][ T9184] ? bpf_check_cfg+0x14f/0x4860 [ 202.059349][ T9184] ? bpf_check_cfg+0x14f/0x4860 [ 202.059379][ T9184] ? __x64_sys_bpf+0xba/0xd0 [ 202.059409][ T9184] bpf_check_cfg+0x14f/0x4860 [ 202.059469][ T9184] ? __pfx_bpf_check_cfg+0x10/0x10 [ 202.059496][ T9184] ? lockdep_hardirqs_on+0x7b/0x110 [ 202.059531][ T9184] ? kfree+0x1c5/0x650 [ 202.059547][ T9184] ? bpf_prog_calc_tag+0x310/0x370 [ 202.059562][ T9184] ? vfree+0x426/0x490 [ 202.059588][ T9184] ? bpf_prog_calc_tag+0x310/0x370 [ 202.059604][ T9184] ? resolve_func_ptrs+0xc7c/0xe50 [ 202.059628][ T9184] ? check_and_resolve_insns+0x231a/0x28e0 [ 202.059659][ T9184] ? __pfx_resolve_func_ptrs+0x10/0x10 [ 202.059677][ T9184] ? check_subprogs+0x413/0x540 [ 202.059699][ T9184] ? add_kfuncs+0x251/0x2e0 [ 202.059731][ T9184] bpf_check+0x294f/0x34e0 [ 202.059762][ T9184] ? ktime_get_with_offset+0x93/0x2d0 [ 202.059788][ T9184] ? ktime_get_with_offset+0x93/0x2d0 [ 202.059814][ T9184] ? __pfx_bpf_check+0x10/0x10 [ 202.059836][ T9184] ? bpf_obj_name_cpy+0x194/0x1e0 [ 202.059863][ T9184] bpf_prog_load+0x14da/0x1c60 [ 202.059895][ T9184] ? __pfx_bpf_prog_load+0x10/0x10 [ 202.059928][ T9184] ? __might_fault+0xaf/0x130 [ 202.059954][ T9184] __sys_bpf+0xd86/0xe00 [ 202.059981][ T9184] ? __pfx___sys_bpf+0x10/0x10 [ 202.060010][ T9184] ? __fget_files+0x2a/0x420 [ 202.060051][ T9184] ? ksys_write+0x242/0x270 [ 202.060078][ T9184] ? __pfx_ksys_write+0x10/0x10 [ 202.060114][ T9184] __x64_sys_bpf+0xba/0xd0 [ 202.060144][ T9184] do_syscall_64+0x166/0x520 [ 202.060167][ T9184] ? trace_irq_disable+0x3b/0x140 [ 202.060212][ T9184] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.060230][ T9184] ? clear_bhb_loop+0x70/0xc0 [ 202.060254][ T9184] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.060272][ T9184] RIP: 0033:0x7f20c5ba8f19 [ 202.060289][ T9184] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 202.060306][ T9184] RSP: 002b:00007f20c6ad5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 202.060325][ T9184] RAX: ffffffffffffffda RBX: 00007f20c5e25fa0 RCX: 00007f20c5ba8f19 [ 202.060343][ T9184] RDX: 0000000000000094 RSI: 0000200000000140 RDI: 0000000000000005 [ 202.060354][ T9184] RBP: 00007f20c6ad5090 R08: 0000000000000000 R09: 0000000000000000 [ 202.060370][ T9184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 202.060381][ T9184] R13: 00007f20c5e26038 R14: 00007f20c5e25fa0 R15: 00007ffe09b66828 [ 202.060416][ T9184] [ 202.327480][ T9190] netlink: 'syz.1.1110': attribute type 10 has an invalid length. [ 202.412992][ T9193] siw: device registration error -23 [ 202.645894][ T9204] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1116'. [ 202.648545][ T9204] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1116'. [ 202.685000][ T9203] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1113'. [ 202.713029][ T9203] Cannot find add_set index 4 as target [ 202.861460][ T9213] Unsupported ieee802154 address type: 0 [ 202.905202][ T9221] FAULT_INJECTION: forcing a failure. [ 202.905202][ T9221] name failslab, interval 1, probability 0, space 0, times 0 [ 202.905231][ T9221] CPU: 1 UID: 0 PID: 9221 Comm: syz.1.1120 Not tainted syzkaller #0 PREEMPT(full) [ 202.905253][ T9221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 202.905272][ T9221] Call Trace: [ 202.905280][ T9221] [ 202.905289][ T9221] dump_stack_lvl+0xe8/0x150 [ 202.905323][ T9221] should_fail_ex+0x3eb/0x540 [ 202.905352][ T9221] should_failslab+0xa8/0x100 [ 202.905389][ T9221] __kvmalloc_node_noprof+0x171/0x820 [ 202.905417][ T9221] ? __kvmalloc_node_noprof+0x340/0x820 [ 202.905441][ T9221] ? bpf_check_cfg+0x1c4/0x4860 [ 202.905465][ T9221] ? bpf_check_cfg+0x1c4/0x4860 [ 202.905497][ T9221] bpf_check_cfg+0x1c4/0x4860 [ 202.905557][ T9221] ? __pfx_bpf_check_cfg+0x10/0x10 [ 202.905582][ T9221] ? lockdep_hardirqs_on+0x7b/0x110 [ 202.905611][ T9221] ? kfree+0x1c5/0x650 [ 202.905630][ T9221] ? bpf_prog_calc_tag+0x310/0x370 [ 202.905647][ T9221] ? vfree+0x426/0x490 [ 202.905670][ T9221] ? bpf_prog_calc_tag+0x310/0x370 [ 202.905686][ T9221] ? resolve_func_ptrs+0xc7c/0xe50 [ 202.905711][ T9221] ? check_and_resolve_insns+0x231a/0x28e0 [ 202.905742][ T9221] ? __pfx_resolve_func_ptrs+0x10/0x10 [ 202.905760][ T9221] ? check_subprogs+0x413/0x540 [ 202.905783][ T9221] ? add_kfuncs+0x251/0x2e0 [ 202.905812][ T9221] bpf_check+0x294f/0x34e0 [ 202.905843][ T9221] ? ktime_get_with_offset+0x93/0x2d0 [ 202.905872][ T9221] ? ktime_get_with_offset+0x93/0x2d0 [ 202.905897][ T9221] ? __pfx_bpf_check+0x10/0x10 [ 202.905919][ T9221] ? bpf_obj_name_cpy+0x194/0x1e0 [ 202.905947][ T9221] bpf_prog_load+0x14da/0x1c60 [ 202.905979][ T9221] ? __pfx_bpf_prog_load+0x10/0x10 [ 202.906013][ T9221] ? __might_fault+0xaf/0x130 [ 202.906038][ T9221] __sys_bpf+0xd86/0xe00 [ 202.906063][ T9221] ? __pfx___sys_bpf+0x10/0x10 [ 202.906091][ T9221] ? __fget_files+0x2a/0x420 [ 202.906127][ T9221] ? ksys_write+0x242/0x270 [ 202.906150][ T9221] ? __pfx_ksys_write+0x10/0x10 [ 202.906175][ T9221] __x64_sys_bpf+0xba/0xd0 [ 202.906200][ T9221] do_syscall_64+0x166/0x520 [ 202.906218][ T9221] ? trace_irq_disable+0x3b/0x140 [ 202.906239][ T9221] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.906254][ T9221] ? clear_bhb_loop+0x70/0xc0 [ 202.906273][ T9221] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.906289][ T9221] RIP: 0033:0x7f20c5ba8f19 [ 202.906303][ T9221] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 202.906316][ T9221] RSP: 002b:00007f20c6ad5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 202.906333][ T9221] RAX: ffffffffffffffda RBX: 00007f20c5e25fa0 RCX: 00007f20c5ba8f19 [ 202.906356][ T9221] RDX: 0000000000000094 RSI: 0000200000000140 RDI: 0000000000000005 [ 202.906366][ T9221] RBP: 00007f20c6ad5090 R08: 0000000000000000 R09: 0000000000000000 [ 202.906376][ T9221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 202.906390][ T9221] R13: 00007f20c5e26038 R14: 00007f20c5e25fa0 R15: 00007ffe09b66828 [ 202.906416][ T9221] [ 203.677968][ T9259] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1132'. [ 203.724992][ T9259] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1132'. [ 203.845329][ T9259] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.195507][ T9281] netlink: 'syz.1.1140': attribute type 1 has an invalid length. [ 205.751806][ T9281] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 205.932109][ T9324] __nla_validate_parse: 4 callbacks suppressed [ 205.932132][ T9324] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1155'. [ 206.256984][ T9332] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 206.516518][ T9362] netlink: 'syz.3.1161': attribute type 21 has an invalid length. [ 206.516543][ T9362] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1161'. [ 206.516624][ T9362] netlink: 'syz.3.1161': attribute type 4 has an invalid length. [ 206.516637][ T9362] netlink: 'syz.3.1161': attribute type 5 has an invalid length. [ 206.516647][ T9362] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1161'. [ 206.631691][ T9373] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1165'. [ 206.631721][ T9373] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1165'. [ 206.631736][ T9373] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1165'. [ 206.753245][ T9378] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1168'. [ 206.965259][ T9391] netlink: 'syz.3.1172': attribute type 21 has an invalid length. [ 206.974977][ T9393] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1167'. [ 207.634229][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.634251][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.674171][ T9429] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 207.707407][ T9429] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 207.909525][ T9443] gretap0: entered promiscuous mode [ 207.909951][ T9443] vlan2: entered promiscuous mode [ 208.249661][ T9467] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1201'. [ 208.423856][ T9470] syzkaller1: entered promiscuous mode [ 208.423879][ T9470] syzkaller1: entered allmulticast mode [ 208.610551][ T9489] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1209'. [ 209.013590][ T9512] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 209.278671][ T9528] netlink: 'syz.2.1222': attribute type 2 has an invalid length. [ 209.305344][ T9529] syzkaller0: entered promiscuous mode [ 209.305365][ T9529] syzkaller0: entered allmulticast mode [ 209.328363][ T9531] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 210.210257][ T9582] gtp2: entered promiscuous mode [ 210.210279][ T9582] gtp2: entered allmulticast mode [ 210.349017][ T9590] netlink: 'syz.0.1241': attribute type 21 has an invalid length. [ 210.479003][ T9597] netlink: 'syz.0.1244': attribute type 3 has an invalid length. [ 211.086032][ T9622] netlink: 'syz.2.1253': attribute type 21 has an invalid length. [ 211.257364][ T9636] __nla_validate_parse: 5 callbacks suppressed [ 211.257386][ T9636] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1255'. [ 211.698481][ T9657] netlink: 'syz.1.1260': attribute type 21 has an invalid length. [ 211.698507][ T9657] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1260'. [ 211.698602][ T9657] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1260'. [ 211.761220][ T9657] team0: Port device dummy0 removed [ 211.798429][ T9662] netlink: 'syz.1.1260': attribute type 21 has an invalid length. [ 211.798455][ T9662] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1260'. [ 211.808074][ T9657] bond0: (slave bond_slave_0): Releasing backup interface [ 211.859340][ T9657] bond0: (slave bond_slave_1): Releasing backup interface [ 211.917666][ T9657] team0: Port device team_slave_0 removed [ 211.956712][ T9657] team0: Port device team_slave_1 removed [ 211.957609][ T9657] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 211.957628][ T9657] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 211.998924][ T9657] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 212.005550][ T9662] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1260'. [ 212.105227][ T9661] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 212.268496][ T9678] warn_alloc: 1 callbacks suppressed [ 212.268518][ T9678] syz.2.1265: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 212.268616][ T9678] CPU: 1 UID: 0 PID: 9678 Comm: syz.2.1265 Not tainted syzkaller #0 PREEMPT(full) [ 212.268638][ T9678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 212.268649][ T9678] Call Trace: [ 212.268657][ T9678] [ 212.268665][ T9678] dump_stack_lvl+0xe8/0x150 [ 212.268702][ T9678] warn_alloc+0x24d/0x270 [ 212.268726][ T9678] ? stack_depot_save_flags+0x33/0x810 [ 212.268758][ T9678] ? __pfx_warn_alloc+0x10/0x10 [ 212.268781][ T9678] ? kasan_save_track+0x4f/0x80 [ 212.268807][ T9678] ? __kasan_kmalloc+0x93/0xb0 [ 212.268834][ T9678] ? xsk_init_queue+0x8a/0xe0 [ 212.268855][ T9678] ? xsk_setsockopt+0x52a/0x960 [ 212.268877][ T9678] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.268914][ T9678] __vmalloc_node_range_noprof+0x12c/0x16f0 [ 212.268968][ T9678] ? rcu_is_watching+0x16/0xb0 [ 212.269002][ T9678] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 212.269023][ T9678] ? __kmalloc_cache_noprof+0x31c/0x600 [ 212.269063][ T9678] ? __kmalloc_cache_noprof+0x148/0x600 [ 212.269087][ T9678] ? xskq_create+0x56/0x220 [ 212.269116][ T9678] xskq_create+0x148/0x220 [ 212.269139][ T9678] ? xsk_init_queue+0x8a/0xe0 [ 212.269165][ T9678] xsk_init_queue+0x8a/0xe0 [ 212.269191][ T9678] xsk_setsockopt+0x52a/0x960 [ 212.269218][ T9678] ? __pfx_xsk_setsockopt+0x10/0x10 [ 212.269241][ T9678] ? __pfx_aa_sk_perm+0x10/0x10 [ 212.269281][ T9678] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 212.269307][ T9678] ? __pfx_xsk_setsockopt+0x10/0x10 [ 212.269332][ T9678] do_sock_setsockopt+0x17c/0x1b0 [ 212.269358][ T9678] __x64_sys_setsockopt+0x13d/0x1b0 [ 212.269386][ T9678] do_syscall_64+0x166/0x520 [ 212.269412][ T9678] ? trace_irq_disable+0x3b/0x140 [ 212.269439][ T9678] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.269457][ T9678] ? clear_bhb_loop+0x70/0xc0 [ 212.269481][ T9678] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.269499][ T9678] RIP: 0033:0x7f7434fa8f19 [ 212.269515][ T9678] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 212.269531][ T9678] RSP: 002b:00007f7435e5b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 212.269550][ T9678] RAX: ffffffffffffffda RBX: 00007f7435225fa0 RCX: 00007f7434fa8f19 [ 212.269563][ T9678] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 212.269574][ T9678] RBP: 00007f7435037f6d R08: 0000000000000004 R09: 0000000000000000 [ 212.269586][ T9678] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 212.269598][ T9678] R13: 00007f7435226038 R14: 00007f7435225fa0 R15: 00007fff28cba828 [ 212.269631][ T9678] [ 212.386104][ T9680] netlink: 'syz.3.1266': attribute type 21 has an invalid length. [ 212.389643][ T9678] Mem-Info: [ 212.389657][ T9678] active_anon:7459 inactive_anon:0 isolated_anon:0 [ 212.389657][ T9678] active_file:0 inactive_file:43252 isolated_file:0 [ 212.389657][ T9678] unevictable:0 dirty:223 writeback:0 [ 212.389657][ T9678] slab_reclaimable:11340 slab_unreclaimable:103144 [ 212.389657][ T9678] mapped:31039 shmem:2222 pagetables:1228 [ 212.389657][ T9678] sec_pagetables:0 bounce:0 [ 212.389657][ T9678] kernel_misc_reclaimable:0 [ 212.389657][ T9678] free:1319443 free_pcp:8191 free_cma:0 [ 212.389709][ T9678] Node 0 active_anon:29836kB inactive_anon:0kB active_file:0kB inactive_file:172804kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:124156kB dirty:892kB writeback:0kB shmem:8888kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12512kB pagetables:4768kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 212.389782][ T9678] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 212.391249][ T9678] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 212.391310][ T9678] lowmem_reserve[]: 0 2463 2465 2465 2465 [ 212.391340][ T9678] Node 0 DMA32 free:1329000kB boost:0kB min:33920kB low:42400kB high:50880kB reserved_highatomic:0kB free_highatomic:0kB active_anon:29836kB inactive_anon:0kB active_file:0kB inactive_file:172804kB unevictable:0kB writepending:892kB zspages:0kB present:3129332kB managed:2522820kB mlocked:0kB bounce:0kB free_pcp:32764kB local_pcp:14200kB free_cma:0kB [ 212.391488][ T9678] lowmem_reserve[]: 0 0 1 1 1 [ 212.391521][ T9678] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1392kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 212.391572][ T9678] lowmem_reserve[]: 0 0 0 0 0 [ 212.391603][ T9678] Node 1 Normal free:3933412kB boost:0kB min:55960kB low:69948kB high:83936kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 212.391658][ T9678] lowmem_reserve[]: 0 0 0 0 0 [ 212.391688][ T9678] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 212.391793][ T9678] Node 0 DMA32: 2*4kB (ME) 484*8kB (UM) 288*16kB (UM) 336*32kB (UM) 55*64kB (UM) 31*128kB (UM) 7*256kB (UM) 6*512kB (UM) 7*1024kB (ME) 2*2048kB (ME) 314*4096kB (UM) = 1329000kB [ 212.391935][ T9678] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 212.406918][ T9678] Node 1 Normal: 3*4kB (UM) 5*8kB (UM) 9*16kB (UM) 7*32kB (UM) 7*64kB (UM) 5*128kB (UM) 3*256kB (UM) 2*512kB (M) 2*1024kB (UM) 0*2048kB 959*4096kB (M) = 3933412kB [ 212.407080][ T9678] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 212.407096][ T9678] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 212.407111][ T9678] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 212.407126][ T9678] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 212.407141][ T9678] 45520 total pagecache pages [ 212.407148][ T9678] 0 pages in swap cache [ 212.407154][ T9678] Free swap = 124996kB [ 212.407187][ T9678] Total swap = 124996kB [ 212.407196][ T9678] 2097051 pages RAM [ 212.407202][ T9678] 0 pages HighMem/MovableOnly [ 212.407209][ T9678] 434382 pages reserved [ 212.407216][ T9678] 0 pages cma reserved [ 212.803975][ T9692] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1268'. [ 212.907257][ T9686] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1267'. [ 213.175350][ T9707] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1274'. [ 213.183930][ T9707] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1274'. [ 213.492022][ T9727] netlink: 220 bytes leftover after parsing attributes in process `syz.2.1278'. [ 213.586420][ T9733] netlink: 'syz.0.1281': attribute type 21 has an invalid length. [ 213.610055][ T53] Bluetooth: hci2: command 0x0401 tx timeout [ 213.610097][ T53] Bluetooth: hci1: command 0x0406 tx timeout [ 213.619609][ T4950] Bluetooth: hci3: command 0x0406 tx timeout [ 213.971494][ T9705] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -512 0 [ 214.084773][ T9753] lo: entered allmulticast mode [ 214.203876][ T9762] netlink: 'syz.4.1294': attribute type 21 has an invalid length. [ 214.203902][ T9762] IPv6: NLM_F_CREATE should be specified when creating new route [ 214.236665][ T9764] FAULT_INJECTION: forcing a failure. [ 214.236665][ T9764] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 214.236695][ T9764] CPU: 0 UID: 0 PID: 9764 Comm: syz.1.1293 Not tainted syzkaller #0 PREEMPT(full) [ 214.236715][ T9764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 214.236725][ T9764] Call Trace: [ 214.236733][ T9764] [ 214.236741][ T9764] dump_stack_lvl+0xe8/0x150 [ 214.236776][ T9764] should_fail_ex+0x3eb/0x540 [ 214.236804][ T9764] _copy_from_user+0x2d/0xb0 [ 214.236829][ T9764] do_tcp_getsockopt+0x22c/0x2b60 [ 214.236864][ T9764] ? __pfx_do_tcp_getsockopt+0x10/0x10 [ 214.236882][ T9764] ? sock_common_getsockopt+0x20/0xb0 [ 214.236913][ T9764] ? lock_acquire+0x115/0x350 [ 214.236937][ T9764] ? begin_current_label_crit_section+0x299/0x830 [ 214.236961][ T9764] ? __pfx_begin_current_label_crit_section+0x10/0x10 [ 214.236992][ T9764] ? aa_inet_opt_perm+0x94d/0xcd0 [ 214.237021][ T9764] ? __lock_acquire+0x747/0x2de0 [ 214.237051][ T9764] ? lock_acquire+0x115/0x350 [ 214.237074][ T9764] ? get_pid_task+0x20/0x1f0 [ 214.237106][ T9764] ? lock_acquire+0x115/0x350 [ 214.237141][ T9764] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 214.237168][ T9764] tcp_getsockopt+0x83/0x130 [ 214.237185][ T9764] ? sock_common_getsockopt+0x20/0xb0 [ 214.237211][ T9764] ? sock_common_getsockopt+0x20/0xb0 [ 214.237238][ T9764] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 214.237265][ T9764] do_sock_getsockopt+0x4aa/0x640 [ 214.237292][ T9764] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 214.237328][ T9764] ? __fget_files+0x3a2/0x420 [ 214.237351][ T9764] ? __fget_files+0x2a/0x420 [ 214.237381][ T9764] __x64_sys_getsockopt+0x1a4/0x240 [ 214.237418][ T9764] do_syscall_64+0x166/0x520 [ 214.237442][ T9764] ? trace_irq_disable+0x3b/0x140 [ 214.237467][ T9764] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.237486][ T9764] ? clear_bhb_loop+0x70/0xc0 [ 214.237509][ T9764] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.237527][ T9764] RIP: 0033:0x7f20c5ba8f19 [ 214.237544][ T9764] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 214.237560][ T9764] RSP: 002b:00007f20c6ad5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 214.237580][ T9764] RAX: ffffffffffffffda RBX: 00007f20c5e25fa0 RCX: 00007f20c5ba8f19 [ 214.237594][ T9764] RDX: 0000000000000023 RSI: 0000000000000006 RDI: 0000000000000003 [ 214.237605][ T9764] RBP: 00007f20c6ad5090 R08: 0000200000000980 R09: 0000000000000000 [ 214.237617][ T9764] R10: 0000200000000940 R11: 0000000000000246 R12: 0000000000000001 [ 214.237630][ T9764] R13: 00007f20c5e26038 R14: 00007f20c5e25fa0 R15: 00007ffe09b66828 [ 214.237662][ T9764] [ 214.545279][ T9771] netlink: 'syz.4.1298': attribute type 1 has an invalid length. [ 214.833709][ T9771] bond3: (slave veth0_to_bond): making interface the new active one [ 214.856404][ T9771] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 215.004462][ T9712] udevd[9712]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 215.195552][ T9824] FAULT_INJECTION: forcing a failure. [ 215.195552][ T9824] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 215.195582][ T9824] CPU: 0 UID: 0 PID: 9824 Comm: syz.0.1308 Not tainted syzkaller #0 PREEMPT(full) [ 215.195603][ T9824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 215.195614][ T9824] Call Trace: [ 215.195622][ T9824] [ 215.195630][ T9824] dump_stack_lvl+0xe8/0x150 [ 215.195664][ T9824] should_fail_ex+0x3eb/0x540 [ 215.195693][ T9824] _copy_from_user+0x2d/0xb0 [ 215.195718][ T9824] copy_from_sockptr_offset+0x66/0xa0 [ 215.195742][ T9824] do_tcp_getsockopt+0xd58/0x2b60 [ 215.195770][ T9824] ? __pfx_do_tcp_getsockopt+0x10/0x10 [ 215.195788][ T9824] ? sock_common_getsockopt+0x20/0xb0 [ 215.195817][ T9824] ? lock_acquire+0x115/0x350 [ 215.195839][ T9824] ? begin_current_label_crit_section+0x299/0x830 [ 215.195862][ T9824] ? __pfx_begin_current_label_crit_section+0x10/0x10 [ 215.195892][ T9824] ? aa_inet_opt_perm+0x94d/0xcd0 [ 215.195920][ T9824] ? __lock_acquire+0x747/0x2de0 [ 215.195954][ T9824] ? lock_acquire+0x115/0x350 [ 215.195976][ T9824] ? get_pid_task+0x20/0x1f0 [ 215.196023][ T9824] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 215.196050][ T9824] tcp_getsockopt+0x83/0x130 [ 215.196068][ T9824] ? sock_common_getsockopt+0x20/0xb0 [ 215.196094][ T9824] ? sock_common_getsockopt+0x20/0xb0 [ 215.196118][ T9824] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 215.196143][ T9824] do_sock_getsockopt+0x4aa/0x640 [ 215.196171][ T9824] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 215.196203][ T9824] ? __fget_files+0x3a2/0x420 [ 215.196227][ T9824] ? __fget_files+0x2a/0x420 [ 215.196256][ T9824] __x64_sys_getsockopt+0x1a4/0x240 [ 215.196283][ T9824] do_syscall_64+0x166/0x520 [ 215.196305][ T9824] ? trace_irq_disable+0x3b/0x140 [ 215.196329][ T9824] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.196349][ T9824] ? clear_bhb_loop+0x70/0xc0 [ 215.196371][ T9824] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.196389][ T9824] RIP: 0033:0x7f2819da8f19 [ 215.196405][ T9824] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 215.196421][ T9824] RSP: 002b:00007f281ac55028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 215.196441][ T9824] RAX: ffffffffffffffda RBX: 00007f281a025fa0 RCX: 00007f2819da8f19 [ 215.196459][ T9824] RDX: 0000000000000023 RSI: 0000000000000006 RDI: 0000000000000003 [ 215.196477][ T9824] RBP: 00007f281ac55090 R08: 0000200000000980 R09: 0000000000000000 [ 215.196487][ T9824] R10: 0000200000000940 R11: 0000000000000246 R12: 0000000000000001 [ 215.196496][ T9824] R13: 00007f281a026038 R14: 00007f281a025fa0 R15: 00007ffe3e94f798 [ 215.196526][ T9824] [ 215.644593][ T9845] netlink: 'syz.4.1312': attribute type 1 has an invalid length. [ 215.644616][ T9845] netlink: 'syz.4.1312': attribute type 2 has an invalid length. [ 215.843183][ T9858] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 215.843388][ T9858] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 215.843557][ T9858] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 215.843848][ T9858] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 215.844041][ T9858] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 215.844226][ T9858] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 215.844475][ T9858] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 215.844666][ T9858] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 215.844959][ T9858] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 215.845136][ T9858] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 215.845314][ T9858] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 215.845491][ T9858] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 215.845661][ T9858] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 215.845856][ T9858] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 215.846252][ T9858] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 215.846448][ T9858] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 215.846707][ T9858] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 215.846899][ T9858] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 215.847117][ T9858] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 215.847291][ T9858] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 215.847496][ T9858] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 215.847734][ T9858] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 215.847919][ T9858] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 215.848089][ T9858] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 215.848286][ T9858] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 215.848508][ T9858] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 215.848692][ T9858] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 215.848881][ T9858] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 215.849054][ T9858] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 215.849237][ T9858] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 215.849409][ T9858] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 215.852673][ T9858] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 215.852846][ T9858] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 216.884315][ C1] vcan0: j1939_tp_rxtimer: 0xffff888029fdd800: rx timeout, send abort [ 216.884458][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888029fdd800: 0x2ff01: (3) A timeout occurred and this is the connection abort to close the session. [ 243.737081][ T9891] netlink: 'syz.0.1326': attribute type 1 has an invalid length. [ 243.737103][ T9891] netlink: 'syz.0.1326': attribute type 3 has an invalid length. [ 243.737112][ T9891] __nla_validate_parse: 7 callbacks suppressed [ 243.737121][ T9891] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1326'. [ 244.267660][ T9919] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1338'. [ 244.289455][ T9923] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1340'. [ 244.396474][ T9927] : entered promiscuous mode [ 244.455533][ T9935] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1345'. [ 244.455697][ T9938] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1346'. [ 244.487223][ T9938] veth1_to_team: entered promiscuous mode [ 244.498770][ T9938] veth1_to_team: left promiscuous mode [ 244.534288][ T9946] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1347'. [ 244.546818][ T9946] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1347'. [ 244.556879][ T12] nci: nci_rx_work: unknown MT 0x1 [ 246.724123][ T9985] bond2: option arp_validate: mode dependency failed, not supported in mode balance-tlb(5) [ 246.725328][ T9985] bond2 (unregistering): Released all slaves [ 246.803197][ T9988] netlink: 'syz.2.1359': attribute type 21 has an invalid length. [ 247.429611][ T9935] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 247.720273][T10010] FAULT_INJECTION: forcing a failure. [ 247.720273][T10010] name failslab, interval 1, probability 0, space 0, times 0 [ 247.720323][T10010] CPU: 0 UID: 0 PID: 10010 Comm: syz.3.1367 Not tainted syzkaller #0 PREEMPT(full) [ 247.720344][T10010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 247.720360][T10010] Call Trace: [ 247.720368][T10010] [ 247.720376][T10010] dump_stack_lvl+0xe8/0x150 [ 247.720409][T10010] should_fail_ex+0x3eb/0x540 [ 247.720438][T10010] should_failslab+0xa8/0x100 [ 247.720469][T10010] __kmalloc_noprof+0xf9/0x710 [ 247.720491][T10010] ? sk_prot_alloc+0x57/0x210 [ 247.720512][T10010] ? security_sk_alloc+0x52/0x360 [ 247.720532][T10010] ? security_sk_alloc+0x52/0x360 [ 247.720555][T10010] ? kmem_cache_alloc_noprof+0x151/0x600 [ 247.720581][T10010] security_sk_alloc+0x52/0x360 [ 247.720607][T10010] sk_prot_alloc+0x101/0x210 [ 247.720630][T10010] sk_alloc+0x3a/0x390 [ 247.720653][T10010] inet6_create+0x81a/0x1270 [ 247.720677][T10010] ? inet6_create+0x80/0x1270 [ 247.720704][T10010] __sock_create+0x4b5/0xac0 [ 247.720739][T10010] mptcp_subflow_create_socket+0xfd/0x810 [ 247.720760][T10010] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 247.720776][T10010] ? process_measurement+0x7b2/0x1c10 [ 247.720799][T10010] ? begin_current_label_crit_section+0x299/0x830 [ 247.720833][T10010] __mptcp_nmpc_sk+0x155/0x770 [ 247.720853][T10010] ? do_raw_spin_lock+0x12b/0x2f0 [ 247.720873][T10010] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 247.720891][T10010] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 247.720915][T10010] mptcp_sendmsg_fastopen+0xce/0x540 [ 247.720939][T10010] ? mptcp_rps_record_subflows+0x1d/0x400 [ 247.720970][T10010] mptcp_sendmsg+0x1a4a/0x1cf0 [ 247.721011][T10010] ? __lock_acquire+0x747/0x2de0 [ 247.721035][T10010] ? __lock_acquire+0x747/0x2de0 [ 247.721058][T10010] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 247.721078][T10010] ? sock_rps_record_flow+0x19/0x350 [ 247.721102][T10010] ? inet_send_prepare+0xb2/0x260 [ 247.721124][T10010] ? inet6_sendmsg+0x101/0x120 [ 247.721144][T10010] ? __pfx_inet6_sendmsg+0x10/0x10 [ 247.721162][T10010] sock_sendmsg_nosec+0x90/0x190 [ 247.721187][T10010] ____sys_sendmsg+0x54e/0x850 [ 247.721212][T10010] ? __pfx_____sys_sendmsg+0x10/0x10 [ 247.721238][T10010] ? import_iovec+0x73/0xa0 [ 247.721265][T10010] ___sys_sendmsg+0x2a5/0x360 [ 247.721282][T10010] ? __lock_acquire+0x747/0x2de0 [ 247.721308][T10010] ? __pfx____sys_sendmsg+0x10/0x10 [ 247.721366][T10010] ? __fget_files+0x3a2/0x420 [ 247.721386][T10010] ? __fget_files+0x2a/0x420 [ 247.721418][T10010] __x64_sys_sendmsg+0x1b1/0x290 [ 247.721442][T10010] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 247.721486][T10010] do_syscall_64+0x166/0x520 [ 247.721509][T10010] ? trace_irq_disable+0x3b/0x140 [ 247.721533][T10010] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.721551][T10010] ? clear_bhb_loop+0x70/0xc0 [ 247.721573][T10010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.721591][T10010] RIP: 0033:0x7faefffa8f19 [ 247.721608][T10010] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 247.721625][T10010] RSP: 002b:00007faf00e18028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 247.721645][T10010] RAX: ffffffffffffffda RBX: 00007faf00225fa0 RCX: 00007faefffa8f19 [ 247.721659][T10010] RDX: e07e872420dfefcb RSI: 0000200000000000 RDI: 0000000000000005 [ 247.721672][T10010] RBP: 00007faf00e18090 R08: 0000000000000000 R09: 0000000000000000 [ 247.721684][T10010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 247.721696][T10010] R13: 00007faf00226038 R14: 00007faf00225fa0 R15: 00007ffcce4c0918 [ 247.721729][T10010] [ 248.007708][T10020] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 248.081860][T10019] netlink: 300 bytes leftover after parsing attributes in process `syz.1.1370'. [ 248.181871][T10028] netlink: 'syz.0.1372': attribute type 4 has an invalid length. [ 248.281855][T10028] netlink: 'syz.0.1372': attribute type 4 has an invalid length. [ 248.295346][T10038] FAULT_INJECTION: forcing a failure. [ 248.295346][T10038] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 248.295376][T10038] CPU: 0 UID: 0 PID: 10038 Comm: syz.4.1376 Not tainted syzkaller #0 PREEMPT(full) [ 248.295398][T10038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 248.295409][T10038] Call Trace: [ 248.295416][T10038] [ 248.295424][T10038] dump_stack_lvl+0xe8/0x150 [ 248.295458][T10038] should_fail_ex+0x3eb/0x540 [ 248.295485][T10038] _copy_from_user+0x2d/0xb0 [ 248.295510][T10038] copy_from_sockptr_offset+0x66/0xa0 [ 248.295534][T10038] do_tcp_getsockopt+0x1c8a/0x2b60 [ 248.295561][T10038] ? __pfx_do_tcp_getsockopt+0x10/0x10 [ 248.295579][T10038] ? sock_common_getsockopt+0x20/0xb0 [ 248.295610][T10038] ? lock_acquire+0x115/0x350 [ 248.295633][T10038] ? begin_current_label_crit_section+0x299/0x830 [ 248.295656][T10038] ? __pfx_begin_current_label_crit_section+0x10/0x10 [ 248.295686][T10038] ? aa_inet_opt_perm+0x94d/0xcd0 [ 248.295713][T10038] ? __lock_acquire+0x747/0x2de0 [ 248.295743][T10038] ? lock_acquire+0x115/0x350 [ 248.295765][T10038] ? get_pid_task+0x20/0x1f0 [ 248.295810][T10038] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 248.295840][T10038] tcp_getsockopt+0x83/0x130 [ 248.295857][T10038] ? sock_common_getsockopt+0x20/0xb0 [ 248.295882][T10038] ? sock_common_getsockopt+0x20/0xb0 [ 248.295908][T10038] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 248.295934][T10038] do_sock_getsockopt+0x4aa/0x640 [ 248.295961][T10038] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 248.295997][T10038] ? __fget_files+0x3a2/0x420 [ 248.296018][T10038] ? __fget_files+0x2a/0x420 [ 248.296048][T10038] __x64_sys_getsockopt+0x1a4/0x240 [ 248.296078][T10038] do_syscall_64+0x166/0x520 [ 248.296100][T10038] ? trace_irq_disable+0x3b/0x140 [ 248.296130][T10038] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.296149][T10038] ? clear_bhb_loop+0x70/0xc0 [ 248.296171][T10038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.296189][T10038] RIP: 0033:0x7eff901a8f19 [ 248.296205][T10038] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 248.296221][T10038] RSP: 002b:00007eff90fab028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 248.296242][T10038] RAX: ffffffffffffffda RBX: 00007eff90425fa0 RCX: 00007eff901a8f19 [ 248.296255][T10038] RDX: 0000000000000023 RSI: 0000000000000006 RDI: 0000000000000003 [ 248.296266][T10038] RBP: 00007eff90fab090 R08: 0000200000000980 R09: 0000000000000000 [ 248.296278][T10038] R10: 0000200000000940 R11: 0000000000000246 R12: 0000000000000001 [ 248.296289][T10038] R13: 00007eff90426038 R14: 00007eff90425fa0 R15: 00007ffdf30f2728 [ 248.296320][T10038] [ 248.666303][T10054] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1381'. [ 248.875718][T10073] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1386'. [ 249.139362][T10087] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1393'. [ 249.139379][T10087] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1393'. [ 249.445356][T10106] netlink: 'syz.2.1392': attribute type 1 has an invalid length. [ 249.445378][T10106] netlink: 228 bytes leftover after parsing attributes in process `syz.2.1392'. [ 249.471828][T10113] tipc: Enabling of bearer rejected, failed to enable media [ 249.702355][T10125] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1405'. [ 249.846810][T10131] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1407'. [ 249.911815][T10141] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1409'. [ 249.943207][T10131] 8021q: adding VLAN 0 to HW filter on device team1 [ 250.150701][T10149] netlink: 'syz.1.1414': attribute type 83 has an invalid length. [ 250.223947][T10157] xt_ecn: cannot match TCP bits for non-tcp packets [ 250.421042][T10169] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1423'. [ 250.451569][T10170] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1422'. [ 250.451597][T10170] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1422'. [ 251.414177][T10212] bond0: entered promiscuous mode [ 252.491655][T10292] netlink: 'syz.2.1456': attribute type 1 has an invalid length. [ 255.642539][T10342] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma? [ 255.884062][T10352] x_tables: duplicate underflow at hook 3 [ 255.942128][T10360] bond0: option miimon: invalid value (18446744071829782528) [ 255.942152][T10360] bond0: option miimon: allowed values 0 - 2147483647 [ 256.201825][T10376] __nla_validate_parse: 10 callbacks suppressed [ 256.201846][T10376] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.1483'. [ 256.315258][T10385] netlink: 'syz.4.1487': attribute type 75 has an invalid length. [ 256.328196][ T5646] Bluetooth: hci2: unexpected event for opcode 0x2060 [ 256.624496][T10402] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1495'. [ 256.624795][T10404] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1495'. [ 256.862830][T10413] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.1498'. [ 257.146539][T10432] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1505'. [ 257.344949][T10445] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.1511'. [ 257.436613][T10452] x_tables: duplicate underflow at hook 1 [ 257.566752][T10460] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1517'. [ 257.612062][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.456313][T10520] SET target dimension over the limit! [ 258.695334][T10540] netlink: 'syz.4.1539': attribute type 2 has an invalid length. [ 258.695895][T10527] 8021q: adding VLAN 0 to HW filter on device bond5 [ 258.795976][T10527] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1536'. [ 258.795997][T10527] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1536'. [ 258.888509][T10527] 8021q: adding VLAN 0 to HW filter on device bond0 [ 258.914320][T10527] bond5: (slave bond0): making interface the new active one [ 258.930764][T10527] bond5: (slave bond0): Enslaving as an active interface with an up link [ 258.975853][T10543] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1541'. [ 259.357897][T10577] ip6t_srh: unknown srh invflags 4000 [ 259.506193][T10585] IPv6: NLM_F_CREATE should be specified when creating new route [ 259.506438][T10585] netlink: 'syz.2.1553': attribute type 1 has an invalid length. [ 259.563453][T10588] syzkaller1: entered promiscuous mode [ 259.563476][T10588] syzkaller1: entered allmulticast mode [ 259.569192][T10588] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 259.617863][T10590] x_tables: duplicate underflow at hook 3 [ 259.666138][T10594] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 259.675500][T10596] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 260.087095][T10625] netlink: 'syz.4.1565': attribute type 3 has an invalid length. [ 260.151441][T10625] netlink: 'syz.4.1565': attribute type 3 has an invalid length. [ 260.174468][T10628] bond6: Unable to set peer notification delay as MII monitoring is disabled [ 260.178832][T10628] bond6 (unregistering): Released all slaves [ 260.301196][T10638] xt_NFQUEUE: number of total queues is 0 [ 260.307236][T10640] xt_NFQUEUE: number of total queues is 0 [ 260.541702][ T1129] IPVS: starting estimator thread 0... [ 260.631108][T10658] IPVS: using max 33 ests per chain, 79200 per kthread [ 260.795264][T10676] veth1_to_hsr: entered allmulticast mode [ 260.982692][T10689] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 261.642550][T10737] syzkaller0: entered promiscuous mode [ 261.642573][T10737] syzkaller0: entered allmulticast mode [ 261.823442][T10743] ip6t_hbh: too many supported opts specified [ 261.855934][T10747] __nla_validate_parse: 11 callbacks suppressed [ 261.855955][T10747] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1598'. [ 261.855974][T10747] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1598'. [ 261.855988][T10747] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1598'. [ 261.965832][T10753] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1600'. [ 261.965982][T10753] netlink: 6 bytes leftover after parsing attributes in process `syz.4.1600'. [ 261.968620][T10753] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 261.968644][T10753] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 261.971772][T10753] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 261.971793][T10753] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 262.061600][T10755] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 262.195028][T10767] netlink: 'syz.1.1601': attribute type 5 has an invalid length. [ 264.462944][T10722] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 264.477067][T10751] netlink: 'syz.3.1599': attribute type 2 has an invalid length. [ 264.740746][T10785] ip6t_rpfilter: unknown options [ 264.787993][T10774] bridge3: entered promiscuous mode [ 264.788070][T10774] bridge3: entered allmulticast mode [ 265.058288][T10831] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1610'. [ 265.058314][T10831] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1610'. [ 265.058330][T10831] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1610'. [ 265.334766][T10877] netlink: 'syz.1.1615': attribute type 1 has an invalid length. [ 265.409930][T10884] netlink: 'syz.4.1617': attribute type 12 has an invalid length. [ 265.614839][T10923] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1621'. [ 265.617459][T10923] netlink: 'syz.2.1621': attribute type 1 has an invalid length. [ 265.639326][T10923] Cannot find add_set index 0 as target [ 265.826973][T10927] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1624'. [ 265.847726][T10929] netlink: 'syz.2.1626': attribute type 3 has an invalid length. [ 266.363427][T10949] IPv6: NLM_F_CREATE should be specified when creating new route [ 266.376091][T10951] IPv6: NLM_F_CREATE should be specified when creating new route [ 266.629240][T10961] ip_tables: iptables: counters copy to user failed while replacing table [ 266.678620][T10961] syzkaller1: entered promiscuous mode [ 266.678644][T10961] syzkaller1: entered allmulticast mode [ 266.895081][T10972] FAULT_INJECTION: forcing a failure. [ 266.895081][T10972] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 266.895111][T10972] CPU: 0 UID: 0 PID: 10972 Comm: syz.2.1643 Not tainted syzkaller #0 PREEMPT(full) [ 266.895131][T10972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 266.895143][T10972] Call Trace: [ 266.895151][T10972] [ 266.895159][T10972] dump_stack_lvl+0xe8/0x150 [ 266.895192][T10972] should_fail_ex+0x3eb/0x540 [ 266.895221][T10972] _copy_to_iter+0x1e4/0x17e0 [ 266.895256][T10972] ? __pfx__copy_to_iter+0x10/0x10 [ 266.895282][T10972] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 266.895307][T10972] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 266.895332][T10972] __skb_datagram_iter+0xf8/0x980 [ 266.895353][T10972] ? __pfx_sk_busy_loop_end+0x10/0x10 [ 266.895379][T10972] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 266.895411][T10972] skb_copy_datagram_iter+0xb5/0x240 [ 266.895438][T10972] netlink_recvmsg+0x2c8/0xa70 [ 266.895465][T10972] ? __pfx_netlink_recvmsg+0x10/0x10 [ 266.895499][T10972] ? aa_sock_msg_perm+0x144/0x210 [ 266.895532][T10972] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 266.895554][T10972] ? security_socket_recvmsg+0x7e/0x2c0 [ 266.895576][T10972] ? __pfx_netlink_recvmsg+0x10/0x10 [ 266.895603][T10972] sock_recvmsg+0x196/0x1e0 [ 266.895632][T10972] __sys_recvfrom+0x231/0x3a0 [ 266.895657][T10972] ? __pfx___sys_recvfrom+0x10/0x10 [ 266.895703][T10972] ? do_user_addr_fault+0xd3f/0x1480 [ 266.895731][T10972] __x64_sys_recvfrom+0xde/0x100 [ 266.895761][T10972] do_syscall_64+0x166/0x520 [ 266.895782][T10972] ? trace_irq_disable+0x3b/0x140 [ 266.895805][T10972] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.895823][T10972] ? clear_bhb_loop+0x70/0xc0 [ 266.895850][T10972] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.895872][T10972] RIP: 0033:0x7f7434f6974e [ 266.895889][T10972] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 266.895905][T10972] RSP: 002b:00007f7435e59e28 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 266.895924][T10972] RAX: ffffffffffffffda RBX: 00007f7435e5b6c0 RCX: 00007f7434f6974e [ 266.895937][T10972] RDX: 0000000000001000 RSI: 00007f7435e59fe0 RDI: 0000000000000004 [ 266.895949][T10972] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 266.895959][T10972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 266.895970][T10972] R13: 00007f7435e59ef8 R14: 00007f7435e59fe0 R15: 0000000000000000 [ 266.896000][T10972] [ 267.442681][T10999] openvswitch: netlink: Unknown key attributes 2 [ 267.639299][T11013] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 267.820658][T11020] __nla_validate_parse: 4 callbacks suppressed [ 267.820678][T11020] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1661'. [ 268.019645][T11032] FAULT_INJECTION: forcing a failure. [ 268.019645][T11032] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 268.019675][T11032] CPU: 1 UID: 0 PID: 11032 Comm: syz.3.1665 Not tainted syzkaller #0 PREEMPT(full) [ 268.019695][T11032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 268.019707][T11032] Call Trace: [ 268.019714][T11032] [ 268.019722][T11032] dump_stack_lvl+0xe8/0x150 [ 268.019757][T11032] should_fail_ex+0x3eb/0x540 [ 268.019783][T11032] prepare_alloc_pages+0x21e/0x5f0 [ 268.019812][T11032] __alloc_frozen_pages_noprof+0x17c/0x410 [ 268.019835][T11032] ? __lock_acquire+0x747/0x2de0 [ 268.019858][T11032] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 268.019886][T11032] ? __kmalloc_cache_node_noprof+0x3cc/0x620 [ 268.019912][T11032] ? __get_vm_area_node+0x155/0x2f0 [ 268.019930][T11032] ? __vmalloc_node_range_noprof+0x36e/0x16f0 [ 268.019952][T11032] ? policy_nodemask+0x31b/0x980 [ 268.019966][T11032] ? __x64_sys_bpf+0xba/0xd0 [ 268.019988][T11032] ? do_syscall_64+0x166/0x520 [ 268.020010][T11032] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.020038][T11032] alloc_pages_mpol+0x21e/0x390 [ 268.020061][T11032] alloc_pages_noprof+0xb1/0x2b0 [ 268.020081][T11032] get_free_pages_noprof+0xf/0x80 [ 268.020106][T11032] __kasan_populate_vmalloc+0x38/0x1c0 [ 268.020128][T11032] ? do_raw_spin_unlock+0xf5/0x200 [ 268.020149][T11032] alloc_vmap_area+0xd10/0x1410 [ 268.020182][T11032] ? __pfx_alloc_vmap_area+0x10/0x10 [ 268.020199][T11032] ? __kmalloc_cache_node_noprof+0x3cc/0x620 [ 268.020222][T11032] ? __kmalloc_cache_node_noprof+0x1f2/0x620 [ 268.020245][T11032] ? __get_vm_area_node+0x155/0x2f0 [ 268.020270][T11032] __get_vm_area_node+0x200/0x2f0 [ 268.020296][T11032] __vmalloc_node_range_noprof+0x36e/0x16f0 [ 268.020316][T11032] ? bpf_prog_alloc_no_stats+0x47/0x550 [ 268.020335][T11032] ? lock_acquire+0x115/0x350 [ 268.020359][T11032] ? __lock_acquire+0x747/0x2de0 [ 268.020393][T11032] ? hook_capable+0x1c3/0x5e0 [ 268.020420][T11032] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 268.020449][T11032] ? bpf_prog_alloc_no_stats+0x47/0x550 [ 268.020466][T11032] __vmalloc_noprof+0xd2/0x120 [ 268.020494][T11032] ? bpf_prog_alloc_no_stats+0x47/0x550 [ 268.020516][T11032] bpf_prog_alloc_no_stats+0x47/0x550 [ 268.020532][T11032] ? bpf_prog_alloc+0x2a/0x1a0 [ 268.020552][T11032] bpf_prog_alloc+0x3c/0x1a0 [ 268.020573][T11032] bpf_prog_load+0x7f8/0x1c60 [ 268.020603][T11032] ? __pfx_bpf_prog_load+0x10/0x10 [ 268.020637][T11032] ? __might_fault+0xaf/0x130 [ 268.020664][T11032] __sys_bpf+0xd86/0xe00 [ 268.020690][T11032] ? __pfx___sys_bpf+0x10/0x10 [ 268.020718][T11032] ? __fget_files+0x2a/0x420 [ 268.020756][T11032] ? ksys_write+0x242/0x270 [ 268.020783][T11032] ? __pfx_ksys_write+0x10/0x10 [ 268.020813][T11032] __x64_sys_bpf+0xba/0xd0 [ 268.020841][T11032] do_syscall_64+0x166/0x520 [ 268.020864][T11032] ? trace_irq_disable+0x3b/0x140 [ 268.020888][T11032] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.020907][T11032] ? clear_bhb_loop+0x70/0xc0 [ 268.020929][T11032] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.020947][T11032] RIP: 0033:0x7faefffa8f19 [ 268.020965][T11032] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 268.020981][T11032] RSP: 002b:00007faf00e18028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 268.021001][T11032] RAX: ffffffffffffffda RBX: 00007faf00225fa0 RCX: 00007faefffa8f19 [ 268.021014][T11032] RDX: 0000000000000094 RSI: 0000200000000500 RDI: 0000000000000005 [ 268.021026][T11032] RBP: 00007faf00e18090 R08: 0000000000000000 R09: 0000000000000000 [ 268.021038][T11032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 268.021049][T11032] R13: 00007faf00226038 R14: 00007faf00225fa0 R15: 00007ffcce4c0918 [ 268.021079][T11032] [ 268.025639][T11032] syz.3.1665: vmalloc error: size 4096, align 0x1, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 268.025704][T11032] CPU: 1 UID: 0 PID: 11032 Comm: syz.3.1665 Not tainted syzkaller #0 PREEMPT(full) [ 268.025723][T11032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 268.025734][T11032] Call Trace: [ 268.025741][T11032] [ 268.025749][T11032] dump_stack_lvl+0xe8/0x150 [ 268.025778][T11032] warn_alloc+0x24d/0x270 [ 268.025802][T11032] ? lockdep_hardirqs_on+0x7b/0x110 [ 268.025826][T11032] ? __pfx_warn_alloc+0x10/0x10 [ 268.025846][T11032] ? kfree+0x1c5/0x650 [ 268.025872][T11032] ? __get_vm_area_node+0x219/0x2f0 [ 268.025899][T11032] __vmalloc_node_range_noprof+0x396/0x16f0 [ 268.025922][T11032] ? lock_acquire+0x115/0x350 [ 268.025946][T11032] ? __lock_acquire+0x747/0x2de0 [ 268.025981][T11032] ? hook_capable+0x1c3/0x5e0 [ 268.026008][T11032] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 268.026040][T11032] ? bpf_prog_alloc_no_stats+0x47/0x550 [ 268.026056][T11032] __vmalloc_noprof+0xd2/0x120 [ 268.026076][T11032] ? bpf_prog_alloc_no_stats+0x47/0x550 [ 268.026095][T11032] bpf_prog_alloc_no_stats+0x47/0x550 [ 268.026111][T11032] ? bpf_prog_alloc+0x2a/0x1a0 [ 268.026128][T11032] bpf_prog_alloc+0x3c/0x1a0 [ 268.026147][T11032] bpf_prog_load+0x7f8/0x1c60 [ 268.026175][T11032] ? __pfx_bpf_prog_load+0x10/0x10 [ 268.026206][T11032] ? __might_fault+0xaf/0x130 [ 268.026232][T11032] __sys_bpf+0xd86/0xe00 [ 268.026257][T11032] ? __pfx___sys_bpf+0x10/0x10 [ 268.026285][T11032] ? __fget_files+0x2a/0x420 [ 268.026323][T11032] ? ksys_write+0x242/0x270 [ 268.026349][T11032] ? __pfx_ksys_write+0x10/0x10 [ 268.026378][T11032] __x64_sys_bpf+0xba/0xd0 [ 268.026408][T11032] do_syscall_64+0x166/0x520 [ 268.026431][T11032] ? trace_irq_disable+0x3b/0x140 [ 268.026454][T11032] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.026472][T11032] ? clear_bhb_loop+0x70/0xc0 [ 268.026502][T11032] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.026520][T11032] RIP: 0033:0x7faefffa8f19 [ 268.026535][T11032] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 268.026549][T11032] RSP: 002b:00007faf00e18028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 268.026567][T11032] RAX: ffffffffffffffda RBX: 00007faf00225fa0 RCX: 00007faefffa8f19 [ 268.026580][T11032] RDX: 0000000000000094 RSI: 0000200000000500 RDI: 0000000000000005 [ 268.026591][T11032] RBP: 00007faf00e18090 R08: 0000000000000000 R09: 0000000000000000 [ 268.026605][T11032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 268.026616][T11032] R13: 00007faf00226038 R14: 00007faf00225fa0 R15: 00007ffcce4c0918 [ 268.026646][T11032] [ 268.026663][T11032] Mem-Info: [ 268.026672][T11032] active_anon:5777 inactive_anon:0 isolated_anon:0 [ 268.026672][T11032] active_file:0 inactive_file:44151 isolated_file:0 [ 268.026672][T11032] unevictable:0 dirty:921 writeback:0 [ 268.026672][T11032] slab_reclaimable:11548 slab_unreclaimable:103669 [ 268.026672][T11032] mapped:30003 shmem:527 pagetables:1219 [ 268.026672][T11032] sec_pagetables:0 bounce:0 [ 268.026672][T11032] kernel_misc_reclaimable:0 [ 268.026672][T11032] free:1315044 free_pcp:12347 free_cma:0 [ 268.026718][T11032] Node 0 active_anon:23108kB inactive_anon:0kB active_file:0kB inactive_file:176400kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:120012kB dirty:3684kB writeback:0kB shmem:2108kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12452kB pagetables:4732kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 268.026768][T11032] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 268.026820][T11032] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 268.026874][T11032] lowmem_reserve[]: 0 2463 2465 2465 2465 [ 268.026905][T11032] Node 0 DMA32 free:1313472kB boost:0kB min:33920kB low:42400kB high:50880kB reserved_highatomic:0kB free_highatomic:0kB active_anon:23108kB inactive_anon:0kB active_file:0kB inactive_file:176400kB unevictable:0kB writepending:3684kB zspages:0kB present:3129332kB managed:2522820kB mlocked:0kB bounce:0kB free_pcp:47360kB local_pcp:22968kB free_cma:0kB [ 268.026958][T11032] lowmem_reserve[]: 0 0 1 1 1 [ 268.026994][T11032] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1392kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 268.027044][T11032] lowmem_reserve[]: 0 0 0 0 0 [ 268.027075][T11032] Node 1 Normal free:3931344kB boost:0kB min:55960kB low:69948kB high:83936kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:1992kB local_pcp:748kB free_cma:0kB [ 268.171578][T11032] lowmem_reserve[]: 0 0 0 0 0 [ 268.171611][T11032] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 268.171713][T11032] Node 0 DMA32: 1166*4kB (UME) 650*8kB (UME) 441*16kB (UME) 450*32kB (UME) 142*64kB (UM) 23*128kB (UM) 11*256kB (UM) 6*512kB (UM) 3*1024kB (M) 3*2048kB (UME) 306*4096kB (UM) = 1311832kB [ 268.171850][T11032] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 268.171940][T11032] Node 1 Normal: 3*4kB (UM) 3*8kB (UM) 2*16kB (UM) 2*32kB (UM) 2*64kB (UM) 2*128kB (UM) 3*256kB (UM) 2*512kB (M) 1*1024kB (M) 0*2048kB 959*4096kB (M) = 3931396kB [ 268.172078][T11032] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 268.172094][T11032] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 268.172109][T11032] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 268.172124][T11032] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 268.172138][T11032] 44675 total pagecache pages [ 268.172145][T11032] 0 pages in swap cache [ 268.172151][T11032] Free swap = 124996kB [ 268.172156][T11032] Total swap = 124996kB [ 268.172163][T11032] 2097051 pages RAM [ 268.172169][T11032] 0 pages HighMem/MovableOnly [ 268.172176][T11032] 434382 pages reserved [ 268.172182][T11032] 0 pages cma reserved [ 268.216916][T11041] netlink: 'syz.1.1669': attribute type 1 has an invalid length. [ 268.381709][T11045] netlink: 'syz.1.1669': attribute type 10 has an invalid length. [ 268.477554][T11041] bond3: entered promiscuous mode [ 268.478805][T11041] 8021q: adding VLAN 0 to HW filter on device bond3 [ 268.887655][T11040] bond3: (slave bridge3): making interface the new active one [ 268.887689][T11040] bridge3: entered promiscuous mode [ 269.003053][T11040] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 269.104291][T11042] bond3: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 269.104315][T11042] bond3: (slave ipvlan3): The slave device specified does not support setting the MAC address [ 269.157353][T11061] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 269.185941][T11062] Bluetooth: hci0: unsupported parameter 5135 [ 269.185972][T11062] Bluetooth: hci0: unsupported parameter 8192 [ 269.185983][T11062] Bluetooth: hci0: unsupported parameter 5135 [ 269.185993][T11062] Bluetooth: hci0: unsupported parameter 8192 [ 269.203496][T11061] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1675'. [ 269.429875][T11074] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1682'. [ 269.429909][T11074] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1682'. [ 269.429925][T11074] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1682'. [ 269.546115][T11082] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1683'. [ 269.644186][T11093] netlink: 'syz.2.1688': attribute type 10 has an invalid length. [ 269.644211][T11093] netlink: 55 bytes leftover after parsing attributes in process `syz.2.1688'. [ 269.978141][T11113] netlink: 'syz.4.1691': attribute type 1 has an invalid length. [ 270.114356][T11113] 8021q: adding VLAN 0 to HW filter on device bond4 [ 270.131726][T11114] bond3: (slave veth0_to_bond): Releasing active interface [ 270.158505][T11114] bond4: (slave veth0_to_bond): making interface the new active one [ 270.170649][T11114] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 270.211668][T11111] macvlan2: entered promiscuous mode [ 270.211694][T11111] macvlan2: entered allmulticast mode [ 270.214060][T11111] bond4: entered promiscuous mode [ 270.214082][T11111] veth0_to_bond: entered promiscuous mode [ 270.214949][T11111] bond4: entered allmulticast mode [ 270.214965][T11111] veth0_to_bond: entered allmulticast mode [ 270.216120][T11111] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 270.218026][T11111] bond4: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 270.218280][T11111] bond4: left allmulticast mode [ 270.218294][T11111] veth0_to_bond: left allmulticast mode [ 270.218333][T11111] bond4: left promiscuous mode [ 270.218346][T11111] veth0_to_bond: left promiscuous mode [ 270.472088][T11121] SET target dimension over the limit! [ 270.575682][T11136] syzkaller1: entered promiscuous mode [ 270.575708][T11136] syzkaller1: entered allmulticast mode [ 270.994046][T11159] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1704'. [ 271.040642][T11159] ipvlan2: entered allmulticast mode [ 271.040665][T11159] virt_wifi0: entered allmulticast mode [ 271.053879][T11159] batman_adv: batadv0: Adding interface: ipvlan2 [ 271.053898][T11159] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 271.053927][T11159] batman_adv: batadv0: Interface activated: ipvlan2 [ 271.607620][T11210] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1722'. [ 271.608451][T11210] ip_tables: iptables: counters copy to user failed while replacing table [ 271.624719][T11210] nfnetlink_queue: nf_queue: full at 0 entries, dropping packets(s) [ 271.816190][T11221] xt_hashlimit: size too large, truncated to 1048576 [ 272.001737][T11236] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1727'. [ 274.060201][T11289] FAULT_INJECTION: forcing a failure. [ 274.060201][T11289] name failslab, interval 1, probability 0, space 0, times 0 [ 274.060230][T11289] CPU: 1 UID: 0 PID: 11289 Comm: syz.3.1743 Not tainted syzkaller #0 PREEMPT(full) [ 274.060250][T11289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 274.060260][T11289] Call Trace: [ 274.060266][T11289] [ 274.060274][T11289] dump_stack_lvl+0xe8/0x150 [ 274.060306][T11289] should_fail_ex+0x3eb/0x540 [ 274.060334][T11289] should_failslab+0xa8/0x100 [ 274.060363][T11289] __kmalloc_cache_noprof+0x9e/0x600 [ 274.060389][T11289] ? bpf_prog_alloc_no_stats+0xd8/0x550 [ 274.060407][T11289] ? bpf_prog_alloc_no_stats+0xd8/0x550 [ 274.060432][T11289] bpf_prog_alloc_no_stats+0xd8/0x550 [ 274.060449][T11289] ? bpf_prog_alloc+0x2a/0x1a0 [ 274.060468][T11289] bpf_prog_alloc+0x3c/0x1a0 [ 274.060492][T11289] bpf_prog_load+0x7f8/0x1c60 [ 274.060523][T11289] ? __pfx_bpf_prog_load+0x10/0x10 [ 274.060555][T11289] ? __might_fault+0xaf/0x130 [ 274.060579][T11289] __sys_bpf+0xd86/0xe00 [ 274.060607][T11289] ? __pfx___sys_bpf+0x10/0x10 [ 274.060635][T11289] ? __fget_files+0x2a/0x420 [ 274.060685][T11289] ? ksys_write+0x242/0x270 [ 274.060712][T11289] ? __pfx_ksys_write+0x10/0x10 [ 274.060740][T11289] __x64_sys_bpf+0xba/0xd0 [ 274.060770][T11289] do_syscall_64+0x166/0x520 [ 274.060793][T11289] ? trace_irq_disable+0x3b/0x140 [ 274.060816][T11289] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.060834][T11289] ? clear_bhb_loop+0x70/0xc0 [ 274.060856][T11289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.060873][T11289] RIP: 0033:0x7faefffa8f19 [ 274.060890][T11289] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 274.060907][T11289] RSP: 002b:00007faf00e18028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 274.060927][T11289] RAX: ffffffffffffffda RBX: 00007faf00225fa0 RCX: 00007faefffa8f19 [ 274.060941][T11289] RDX: 0000000000000094 RSI: 0000200000000500 RDI: 0000000000000005 [ 274.060952][T11289] RBP: 00007faf00e18090 R08: 0000000000000000 R09: 0000000000000000 [ 274.060964][T11289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 274.060975][T11289] R13: 00007faf00226038 R14: 00007faf00225fa0 R15: 00007ffcce4c0918 [ 274.061008][T11289] [ 274.842366][T11327] netlink: 'syz.0.1761': attribute type 12 has an invalid length. [ 274.967558][T11332] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1763'. [ 275.105201][T11344] tipc: Started in network mode [ 275.105244][T11344] tipc: Node identity e0000001, cluster identity 4711 [ 275.105296][T11344] tipc: Enabling of bearer rejected, failed to enable media [ 275.454064][T11368] tc_dump_action: action bad kind [ 275.456776][T11371] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1778'. [ 275.476207][T11372] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1777'. [ 275.626260][T11385] FAULT_INJECTION: forcing a failure. [ 275.626260][T11385] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 275.626290][T11385] CPU: 0 UID: 0 PID: 11385 Comm: syz.1.1781 Not tainted syzkaller #0 PREEMPT(full) [ 275.626310][T11385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 275.626320][T11385] Call Trace: [ 275.626328][T11385] [ 275.626335][T11385] dump_stack_lvl+0xe8/0x150 [ 275.626378][T11385] should_fail_ex+0x3eb/0x540 [ 275.626406][T11385] _copy_from_user+0x2d/0xb0 [ 275.626430][T11385] __sys_bpf+0x2e7/0xe00 [ 275.626457][T11385] ? __pfx___sys_bpf+0x10/0x10 [ 275.626487][T11385] ? __fget_files+0x2a/0x420 [ 275.626527][T11385] ? ksys_write+0x242/0x270 [ 275.626554][T11385] ? __pfx_ksys_write+0x10/0x10 [ 275.626583][T11385] __x64_sys_bpf+0xba/0xd0 [ 275.626611][T11385] do_syscall_64+0x166/0x520 [ 275.626633][T11385] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.626650][T11385] ? clear_bhb_loop+0x70/0xc0 [ 275.626672][T11385] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.626690][T11385] RIP: 0033:0x7f20c5ba8f19 [ 275.626707][T11385] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 275.626724][T11385] RSP: 002b:00007f20c6ad5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 275.626746][T11385] RAX: ffffffffffffffda RBX: 00007f20c5e25fa0 RCX: 00007f20c5ba8f19 [ 275.626759][T11385] RDX: 0000000000000094 RSI: 0000200000000140 RDI: 0000000000000005 [ 275.626771][T11385] RBP: 00007f20c6ad5090 R08: 0000000000000000 R09: 0000000000000000 [ 275.626782][T11385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 275.626794][T11385] R13: 00007f20c5e26038 R14: 00007f20c5e25fa0 R15: 00007ffe09b66828 [ 275.626825][T11385] [ 275.694581][T11388] FAULT_INJECTION: forcing a failure. [ 275.694581][T11388] name failslab, interval 1, probability 0, space 0, times 0 [ 275.694610][T11388] CPU: 1 UID: 0 PID: 11388 Comm: syz.4.1782 Not tainted syzkaller #0 PREEMPT(full) [ 275.694631][T11388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 275.694642][T11388] Call Trace: [ 275.694649][T11388] [ 275.694661][T11388] dump_stack_lvl+0xe8/0x150 [ 275.694695][T11388] should_fail_ex+0x3eb/0x540 [ 275.694723][T11388] should_failslab+0xa8/0x100 [ 275.694753][T11388] __kmalloc_noprof+0xf9/0x710 [ 275.694775][T11388] ? rcu_is_watching+0x16/0xb0 [ 275.694801][T11388] ? tomoyo_realpath_from_path+0xf2/0x640 [ 275.694819][T11388] ? tomoyo_realpath_from_path+0xf2/0x640 [ 275.694845][T11388] tomoyo_realpath_from_path+0xf2/0x640 [ 275.694875][T11388] ? tomoyo_path_number_perm+0x219/0x5f0 [ 275.694909][T11388] tomoyo_path_number_perm+0x246/0x5f0 [ 275.694938][T11388] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 275.694961][T11388] ? __lock_acquire+0x747/0x2de0 [ 275.695002][T11388] ? __asan_memcpy+0x40/0x70 [ 275.695043][T11388] ? __fget_files+0x2a/0x420 [ 275.695069][T11388] ? __fget_files+0x2a/0x420 [ 275.695091][T11388] ? __fget_files+0x2a/0x420 [ 275.695117][T11388] security_file_ioctl+0xc3/0x2a0 [ 275.695144][T11388] __se_sys_ioctl+0x47/0x170 [ 275.695173][T11388] do_syscall_64+0x166/0x520 [ 275.695196][T11388] ? trace_irq_disable+0x3b/0x140 [ 275.695219][T11388] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.695238][T11388] ? clear_bhb_loop+0x70/0xc0 [ 275.695261][T11388] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.695279][T11388] RIP: 0033:0x7eff901a8bab [ 275.695296][T11388] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 275.695314][T11388] RSP: 002b:00007eff90fa9e00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 275.695333][T11388] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007eff901a8bab [ 275.695347][T11388] RDX: 00007eff90fa9e60 RSI: 0000000000008933 RDI: 0000000000000005 [ 275.695359][T11388] RBP: 0000000000000026 R08: 00007eff90fa9f70 R09: 0000000000000000 [ 275.695370][T11388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 275.695381][T11388] R13: 00007eff90fa9f90 R14: 00007eff90fa9f90 R15: 00002000000000c0 [ 275.695412][T11388] [ 275.696652][T11388] ERROR: Out of memory at tomoyo_realpath_from_path. [ 275.698458][ T1129] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.698476][ T1129] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 276.126651][T11399] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 276.157684][T11405] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1790'. [ 276.157722][T11405] netlink: 'syz.1.1790': attribute type 6 has an invalid length. [ 276.157735][T11405] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1790'. [ 276.224564][ T5646] Bluetooth: hci4: link tx timeout [ 276.224586][ T5646] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 276.225889][ T5648] Bluetooth: hci4: link tx timeout [ 276.225903][ T5648] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 276.226078][ T5648] Bluetooth: hci4: link tx timeout [ 276.226090][ T5648] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 276.226112][ T5648] Bluetooth: hci4: link tx timeout [ 276.226122][ T5648] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 276.226187][ T5648] Bluetooth: hci4: link tx timeout [ 276.226198][ T5648] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 276.226219][ T5648] Bluetooth: hci4: link tx timeout [ 276.226229][ T5648] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 276.226296][ T5648] Bluetooth: hci4: link tx timeout [ 276.226306][ T5648] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 276.226327][ T5648] Bluetooth: hci4: link tx timeout [ 276.226337][ T5648] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 276.226391][ T5648] Bluetooth: hci4: link tx timeout [ 276.226402][ T5648] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 276.226423][ T5648] Bluetooth: hci4: link tx timeout [ 276.226433][ T5648] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 276.226496][ T5648] Bluetooth: hci4: link tx timeout [ 276.226507][ T5648] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 276.226528][ T5648] Bluetooth: hci4: link tx timeout [ 276.226537][ T5648] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 276.226591][ T5648] Bluetooth: hci4: link tx timeout [ 276.226607][ T5648] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 276.226630][ T5648] Bluetooth: hci4: link tx timeout [ 276.226640][ T5648] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 276.226705][ T5648] Bluetooth: hci4: link tx timeout [ 276.226714][ T5648] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 276.235470][ T5648] Bluetooth: hci4: link tx timeout [ 276.235487][ T5648] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 276.243349][ T5648] Bluetooth: hci4: link tx timeout [ 276.243371][ T5648] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 276.248593][ T5648] Bluetooth: hci4: link tx timeout [ 276.248609][ T5648] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 276.256382][ T5648] Bluetooth: hci4: link tx timeout [ 276.256402][ T5648] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 276.261678][ T5648] Bluetooth: hci4: link tx timeout [ 276.261693][ T5648] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 276.261719][ T5648] Bluetooth: hci4: link tx timeout [ 276.261729][ T5648] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 276.261750][ T5648] Bluetooth: hci4: link tx timeout [ 276.261760][ T5648] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 276.269517][ T5648] Bluetooth: hci4: link tx timeout [ 276.269531][ T5648] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 276.282471][ T5648] Bluetooth: hci4: link tx timeout [ 276.282488][ T5648] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 276.295404][ T5648] Bluetooth: hci4: link tx timeout [ 276.295421][ T5648] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 276.300634][ T5648] Bluetooth: hci4: link tx timeout [ 276.300650][ T5648] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 276.578430][T11416] xt_ecn: cannot match TCP bits for non-tcp packets [ 277.003369][T11448] FAULT_INJECTION: forcing a failure. [ 277.003369][T11448] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 277.003399][T11448] CPU: 0 UID: 0 PID: 11448 Comm: syz.1.1805 Not tainted syzkaller #0 PREEMPT(full) [ 277.003419][T11448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 277.003430][T11448] Call Trace: [ 277.003437][T11448] [ 277.003445][T11448] dump_stack_lvl+0xe8/0x150 [ 277.003479][T11448] should_fail_ex+0x3eb/0x540 [ 277.003510][T11448] _copy_from_user+0x2d/0xb0 [ 277.003534][T11448] __sys_sendto+0x2a9/0x5a0 [ 277.003560][T11448] ? __pfx___sys_sendto+0x10/0x10 [ 277.003591][T11448] ? fput_close_sync+0x11f/0x240 [ 277.003613][T11448] ? kmem_cache_free+0x471/0x650 [ 277.003647][T11448] ? __pfx_fput_close_sync+0x10/0x10 [ 277.003670][T11448] ? do_raw_spin_unlock+0xf5/0x200 [ 277.003696][T11448] __x64_sys_sendto+0xde/0x100 [ 277.003719][T11448] do_syscall_64+0x166/0x520 [ 277.003741][T11448] ? trace_irq_disable+0x3b/0x140 [ 277.003766][T11448] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.003785][T11448] ? clear_bhb_loop+0x70/0xc0 [ 277.003808][T11448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.003827][T11448] RIP: 0033:0x7f20c5b6974e [ 277.003844][T11448] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 277.003860][T11448] RSP: 002b:00007f20c6ad3de8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 277.003881][T11448] RAX: ffffffffffffffda RBX: 00007f20c6ad56c0 RCX: 00007f20c5b6974e [ 277.003895][T11448] RDX: 0000000000000024 RSI: 00007f20c6ad3fe0 RDI: 0000000000000004 [ 277.003907][T11448] RBP: 0000000000000000 R08: 00007f20c6ad3e64 R09: 000000000000000c [ 277.003919][T11448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 277.003937][T11448] R13: 0000000000000000 R14: 00007f20c6ad3fe0 R15: 0000000000000000 [ 277.003973][T11448] [ 277.157830][T11452] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1807'. [ 277.275935][T11458] syzkaller0: MTU not usable for tipc bearer [ 277.275972][T11458] tipc: Enabling of bearer rejected, failed to enable media [ 277.278137][T11458] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1810'. [ 277.319085][T11459] syzkaller0: MTU not usable for tipc bearer [ 277.319123][T11459] tipc: Enabling of bearer rejected, failed to enable media [ 277.325802][T11458] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1810'. [ 277.376110][T11467] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1812'. [ 277.385320][T11467] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1812'. [ 277.627280][T11470] netlink: 'syz.4.1813': attribute type 1 has an invalid length. [ 277.956363][T11500] openvswitch: netlink: EtherType 520 is less than min 600 [ 278.028837][T11504] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 278.077789][T11506] gretap0: entered promiscuous mode [ 278.178768][T11507] 0ªî{X¹¦: renamed from gretap0 [ 278.202318][T11507] 0ªî{X¹¦: left promiscuous mode [ 278.202341][T11507] 0ªî{X¹¦: entered allmulticast mode [ 278.218596][T11507] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 278.250200][ T5648] Bluetooth: hci4: command 0x0406 tx timeout [ 278.998377][T11581] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 279.994608][T11603] xt_MASQUERADE: bad MAP_IPS. [ 280.162474][T11612] netlink: 'syz.4.1864': attribute type 1 has an invalid length. [ 280.188786][T11612] 8021q: adding VLAN 0 to HW filter on device bond5 [ 280.199235][T11612] __nla_validate_parse: 10 callbacks suppressed [ 280.199249][T11612] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1864'. [ 280.231259][T11612] bond5: (slave bridge1): making interface the new active one [ 280.232509][T11612] bond5: (slave bridge1): Enslaving as an active interface with an up link [ 280.457904][T11626] TCP: TCP_TX_DELAY enabled [ 280.526723][T11630] netlink: 'syz.4.1869': attribute type 21 has an invalid length. [ 281.530142][T11536] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 281.697358][T11635] netlink: 'syz.3.1874': attribute type 1 has an invalid length. [ 281.729962][T11635] 8021q: adding VLAN 0 to HW filter on device bond6 [ 281.827929][T11635] bond6: (slave geneve2): making interface the new active one [ 281.848184][T11635] bond6: (slave geneve2): Enslaving as an active interface with an up link [ 281.968699][T11653] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1876'. [ 282.164810][T11665] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1881'. [ 282.205501][T11666] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1881'. [ 282.205523][T11666] netlink: 5740 bytes leftover after parsing attributes in process `syz.0.1881'. [ 282.206036][T11665] netlink: 'syz.0.1881': attribute type 3 has an invalid length. [ 282.208871][T11667] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 282.209177][T11667] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 282.234473][T11674] netlink: 'syz.1.1882': attribute type 21 has an invalid length. [ 282.234498][T11674] IPv6: NLM_F_CREATE should be specified when creating new route [ 282.244690][T11667] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 282.323211][T11679] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1883'. [ 282.345883][T11681] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1884'. [ 282.657180][T11699] x_tables: duplicate underflow at hook 1 [ 282.975299][T11723] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 282.975324][T11723] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 283.105369][T11728] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 283.198366][T11736] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1901'. [ 283.199191][T11736] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1901'. [ 283.224156][T11738] netlink: 'syz.4.1902': attribute type 1 has an invalid length. [ 283.423307][T11752] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1907'. [ 284.094538][T11794] bond3 (unregistering): Released all slaves [ 284.145478][T11796] skbuff: bad partial csum: csum=65535/2 headroom=178 headlen=65543 [ 284.514590][T11811] syzkaller1: entered promiscuous mode [ 284.514615][T11811] syzkaller1: entered allmulticast mode [ 284.588915][T11824] netlink: 'syz.0.1932': attribute type 1 has an invalid length. [ 284.615607][T11824] 8021q: adding VLAN 0 to HW filter on device bond3 [ 284.660985][T11824] bond3: (slave veth3): Enslaving as a backup interface with a down link [ 284.860004][T11840] netlink: 'syz.2.1938': attribute type 12 has an invalid length. [ 284.865048][T11839] ip_tables: iptables: counters copy to user failed while replacing table [ 285.270520][T11862] syzkaller0: MTU not usable for tipc bearer [ 285.270560][T11862] tipc: Enabling of bearer rejected, failed to enable media [ 285.272233][T11862] syzkaller0: entered promiscuous mode [ 285.272249][T11862] syzkaller0: entered allmulticast mode [ 285.275002][T11862] syzkaller0: mtu less than device minimum [ 285.328793][T11868] FAULT_INJECTION: forcing a failure. [ 285.328793][T11868] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 285.328823][T11868] CPU: 0 UID: 0 PID: 11868 Comm: syz.0.1950 Not tainted syzkaller #0 PREEMPT(full) [ 285.328845][T11868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 285.328856][T11868] Call Trace: [ 285.328864][T11868] [ 285.328872][T11868] dump_stack_lvl+0xe8/0x150 [ 285.328910][T11868] should_fail_ex+0x3eb/0x540 [ 285.328938][T11868] _copy_from_user+0x2d/0xb0 [ 285.328961][T11868] bpf_check_core_relo+0x2ca/0x5d0 [ 285.328989][T11868] ? btf_is_kernel+0xd/0x50 [ 285.329015][T11868] ? bpf_check+0x1934/0x34e0 [ 285.329034][T11868] ? __pfx_bpf_check_core_relo+0x10/0x10 [ 285.329061][T11868] ? bpf_check+0x1934/0x34e0 [ 285.329090][T11868] ? __kvmalloc_node_noprof+0x340/0x820 [ 285.329115][T11868] ? bpf_check+0x1934/0x34e0 [ 285.329135][T11868] ? bpf_check+0x1934/0x34e0 [ 285.329159][T11868] bpf_check+0x1b6c/0x34e0 [ 285.329188][T11868] ? ktime_get_with_offset+0x93/0x2d0 [ 285.329214][T11868] ? ktime_get_with_offset+0x93/0x2d0 [ 285.329239][T11868] ? __pfx_bpf_check+0x10/0x10 [ 285.329262][T11868] ? bpf_obj_name_cpy+0x194/0x1e0 [ 285.329295][T11868] bpf_prog_load+0x14da/0x1c60 [ 285.329325][T11868] ? __pfx_bpf_prog_load+0x10/0x10 [ 285.329360][T11868] ? __might_fault+0xaf/0x130 [ 285.329387][T11868] __sys_bpf+0xd86/0xe00 [ 285.329414][T11868] ? __pfx___sys_bpf+0x10/0x10 [ 285.329443][T11868] ? __fget_files+0x2a/0x420 [ 285.329480][T11868] ? ksys_write+0x242/0x270 [ 285.329504][T11868] ? __pfx_ksys_write+0x10/0x10 [ 285.329536][T11868] __x64_sys_bpf+0xba/0xd0 [ 285.329563][T11868] do_syscall_64+0x166/0x520 [ 285.329585][T11868] ? trace_irq_disable+0x3b/0x140 [ 285.329610][T11868] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.329628][T11868] ? clear_bhb_loop+0x70/0xc0 [ 285.329651][T11868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.329670][T11868] RIP: 0033:0x7f2819da8f19 [ 285.329688][T11868] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 285.329704][T11868] RSP: 002b:00007f281ac55028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 285.329724][T11868] RAX: ffffffffffffffda RBX: 00007f281a025fa0 RCX: 00007f2819da8f19 [ 285.329738][T11868] RDX: 0000000000000094 RSI: 0000200000000500 RDI: 0000000000000005 [ 285.329751][T11868] RBP: 00007f281ac55090 R08: 0000000000000000 R09: 0000000000000000 [ 285.329762][T11868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 285.329773][T11868] R13: 00007f281a026038 R14: 00007f281a025fa0 R15: 00007ffe3e94f798 [ 285.329805][T11868] [ 285.478184][T11870] 8021q: VLANs not supported on ip_vti0 [ 285.542836][T11877] netlink: 'syz.4.1953': attribute type 12 has an invalid length. [ 285.813105][T11891] FAULT_INJECTION: forcing a failure. [ 285.813105][T11891] name failslab, interval 1, probability 0, space 0, times 0 [ 285.813135][T11891] CPU: 0 UID: 0 PID: 11891 Comm: syz.0.1960 Not tainted syzkaller #0 PREEMPT(full) [ 285.813155][T11891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 285.813167][T11891] Call Trace: [ 285.813174][T11891] [ 285.813183][T11891] dump_stack_lvl+0xe8/0x150 [ 285.813217][T11891] should_fail_ex+0x3eb/0x540 [ 285.813265][T11891] should_failslab+0xa8/0x100 [ 285.813296][T11891] __kmalloc_cache_noprof+0x9e/0x600 [ 285.813321][T11891] ? __raw_spin_lock_init+0x45/0x100 [ 285.813338][T11891] ? bpf_prog_stream_init+0x24c/0x4a0 [ 285.813360][T11891] ? bpf_prog_stream_init+0x24c/0x4a0 [ 285.813395][T11891] bpf_prog_stream_init+0x24c/0x4a0 [ 285.813423][T11891] bpf_prog_load+0xcb8/0x1c60 [ 285.813455][T11891] ? __pfx_bpf_prog_load+0x10/0x10 [ 285.813491][T11891] ? __might_fault+0xaf/0x130 [ 285.813519][T11891] __sys_bpf+0xd86/0xe00 [ 285.813547][T11891] ? __pfx___sys_bpf+0x10/0x10 [ 285.813577][T11891] ? __fget_files+0x2a/0x420 [ 285.813619][T11891] ? ksys_write+0x242/0x270 [ 285.813654][T11891] ? __pfx_ksys_write+0x10/0x10 [ 285.813685][T11891] __x64_sys_bpf+0xba/0xd0 [ 285.813714][T11891] do_syscall_64+0x166/0x520 [ 285.813738][T11891] ? trace_irq_disable+0x3b/0x140 [ 285.813764][T11891] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.813783][T11891] ? clear_bhb_loop+0x70/0xc0 [ 285.813807][T11891] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.813825][T11891] RIP: 0033:0x7f2819da8f19 [ 285.813843][T11891] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 285.813860][T11891] RSP: 002b:00007f281ac55028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 285.813881][T11891] RAX: ffffffffffffffda RBX: 00007f281a025fa0 RCX: 00007f2819da8f19 [ 285.813895][T11891] RDX: 0000000000000094 RSI: 0000200000000140 RDI: 0000000000000005 [ 285.813907][T11891] RBP: 00007f281ac55090 R08: 0000000000000000 R09: 0000000000000000 [ 285.813922][T11891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 285.813932][T11891] R13: 00007f281a026038 R14: 00007f281a025fa0 R15: 00007ffe3e94f798 [ 285.813962][T11891] [ 285.956169][T11898] syzkaller0: entered promiscuous mode [ 285.956190][T11898] syzkaller0: entered allmulticast mode [ 285.991554][T11898] netlink: ct family unspecified [ 286.107605][T11909] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 286.152817][T11909] SET target dimension over the limit! [ 286.304920][T11917] netlink: 'syz.2.1969': attribute type 12 has an invalid length. [ 286.420605][T11921] __nla_validate_parse: 9 callbacks suppressed [ 286.420628][T11921] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1970'. [ 286.472680][T11921] 8021q: adding VLAN 0 to HW filter on device team1 [ 286.488181][T11929] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 286.502249][T11928] syzkaller0: entered promiscuous mode [ 286.502270][T11928] syzkaller0: entered allmulticast mode [ 286.647821][T11940] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1975'. [ 286.883426][T11957] netlink: 'syz.2.1982': attribute type 12 has an invalid length. [ 286.941152][T11962] FAULT_INJECTION: forcing a failure. [ 286.941152][T11962] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 286.941183][T11962] CPU: 0 UID: 0 PID: 11962 Comm: syz.3.1984 Not tainted syzkaller #0 PREEMPT(full) [ 286.941204][T11962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 286.941216][T11962] Call Trace: [ 286.941223][T11962] [ 286.941230][T11962] dump_stack_lvl+0xe8/0x150 [ 286.941265][T11962] should_fail_ex+0x3eb/0x540 [ 286.941293][T11962] strncpy_from_user+0x36/0x2c0 [ 286.941320][T11962] bpf_prog_load+0xf5b/0x1c60 [ 286.941353][T11962] ? __pfx_bpf_prog_load+0x10/0x10 [ 286.941388][T11962] ? __might_fault+0xaf/0x130 [ 286.941416][T11962] __sys_bpf+0xd86/0xe00 [ 286.941443][T11962] ? __pfx___sys_bpf+0x10/0x10 [ 286.941473][T11962] ? __fget_files+0x2a/0x420 [ 286.941514][T11962] ? ksys_write+0x242/0x270 [ 286.941542][T11962] ? __pfx_ksys_write+0x10/0x10 [ 286.941573][T11962] __x64_sys_bpf+0xba/0xd0 [ 286.941603][T11962] do_syscall_64+0x166/0x520 [ 286.941625][T11962] ? trace_irq_disable+0x3b/0x140 [ 286.941648][T11962] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.941667][T11962] ? clear_bhb_loop+0x70/0xc0 [ 286.941690][T11962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.941708][T11962] RIP: 0033:0x7faefffa8f19 [ 286.941730][T11962] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 286.941746][T11962] RSP: 002b:00007faf00e18028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 286.941766][T11962] RAX: ffffffffffffffda RBX: 00007faf00225fa0 RCX: 00007faefffa8f19 [ 286.941780][T11962] RDX: 0000000000000094 RSI: 0000200000000140 RDI: 0000000000000005 [ 286.941792][T11962] RBP: 00007faf00e18090 R08: 0000000000000000 R09: 0000000000000000 [ 286.941804][T11962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 286.941815][T11962] R13: 00007faf00226038 R14: 00007faf00225fa0 R15: 00007ffcce4c0918 [ 286.941847][T11962] [ 287.598594][T11997] netlink: 288 bytes leftover after parsing attributes in process `syz.2.1994'. [ 287.666155][T12002] netlink: 'syz.3.1995': attribute type 12 has an invalid length. [ 288.144547][T12032] Bluetooth: hci0: unsupported parameter 5135 [ 288.144569][T12032] Bluetooth: hci0: unsupported parameter 8192 [ 288.144581][T12032] Bluetooth: hci0: unsupported parameter 5135 [ 288.144592][T12032] Bluetooth: hci0: unsupported parameter 8192 [ 288.144802][T12032] Bluetooth: hci0: unsupported parameter 5135 [ 288.144813][T12032] Bluetooth: hci0: unsupported parameter 8192 [ 288.144824][T12032] Bluetooth: hci0: unsupported parameter 5135 [ 288.144835][T12032] Bluetooth: hci0: unsupported parameter 8192 [ 288.145052][T12032] Bluetooth: hci0: unsupported parameter 5135 [ 288.145064][T12032] Bluetooth: hci0: unsupported parameter 8192 [ 288.145075][T12032] Bluetooth: hci0: unsupported parameter 5135 [ 288.145086][T12032] Bluetooth: hci0: unsupported parameter 8192 [ 288.145294][T12032] Bluetooth: hci0: unsupported parameter 5135 [ 288.145305][T12032] Bluetooth: hci0: unsupported parameter 8192 [ 288.145314][T12032] Bluetooth: hci0: unsupported parameter 5135 [ 288.145325][T12032] Bluetooth: hci0: unsupported parameter 8192 [ 288.145507][T12032] Bluetooth: hci0: unsupported parameter 5135 [ 288.145519][T12032] Bluetooth: hci0: unsupported parameter 8192 [ 288.145529][T12032] Bluetooth: hci0: unsupported parameter 5135 [ 288.145540][T12032] Bluetooth: hci0: unsupported parameter 8192 [ 288.149291][T12032] Bluetooth: hci0: unsupported parameter 5135 [ 288.149310][T12032] Bluetooth: hci0: unsupported parameter 8192 [ 288.149320][T12032] Bluetooth: hci0: unsupported parameter 5135 [ 288.149330][T12032] Bluetooth: hci0: unsupported parameter 8192 [ 288.151696][T12033] netlink: 'syz.0.2009': attribute type 64 has an invalid length. [ 288.154347][T12032] Bluetooth: hci0: unsupported parameter 5135 [ 288.154363][T12032] Bluetooth: hci0: unsupported parameter 8192 [ 288.154374][T12032] Bluetooth: hci0: unsupported parameter 5135 [ 288.155168][T12032] Bluetooth: hci0: unsupported parameter 8192 [ 288.155378][T12032] Bluetooth: hci0: unsupported parameter 5135 [ 288.155390][T12032] Bluetooth: hci0: unsupported parameter 8192 [ 288.155400][T12032] Bluetooth: hci0: unsupported parameter 5135 [ 288.155410][T12032] Bluetooth: hci0: unsupported parameter 8192 [ 288.155613][T12032] Bluetooth: hci0: unsupported parameter 5135 [ 288.155624][T12032] Bluetooth: hci0: unsupported parameter 8192 [ 288.155634][T12032] Bluetooth: hci0: unsupported parameter 5135 [ 288.155645][T12032] Bluetooth: hci0: unsupported parameter 8192 [ 288.155850][T12032] Bluetooth: hci0: unsupported parameter 5135 [ 288.155861][T12032] Bluetooth: hci0: unsupported parameter 8192 [ 288.155871][T12032] Bluetooth: hci0: unsupported parameter 5135 [ 288.155881][T12032] Bluetooth: hci0: unsupported parameter 8192 [ 288.156069][T12032] Bluetooth: hci0: unsupported parameter 5135 [ 288.156081][T12032] Bluetooth: hci0: unsupported parameter 8192 [ 288.156091][T12032] Bluetooth: hci0: unsupported parameter 5135 [ 288.156100][T12032] Bluetooth: hci0: unsupported parameter 8192 [ 288.156293][T12032] Bluetooth: hci0: unsupported parameter 5135 [ 288.156304][T12032] Bluetooth: hci0: unsupported parameter 8192 [ 288.156314][T12032] Bluetooth: hci0: unsupported parameter 5135 [ 288.156325][T12032] Bluetooth: hci0: unsupported parameter 8192 [ 288.156523][T12032] Bluetooth: hci0: unsupported parameter 5135 [ 288.156534][T12032] Bluetooth: hci0: unsupported parameter 8192 [ 288.156545][T12032] Bluetooth: hci0: unsupported parameter 5135 [ 288.156555][T12032] Bluetooth: hci0: unsupported parameter 8192 [ 288.157337][T12032] Bluetooth: hci0: unsupported parameter 5135 [ 288.157352][T12032] Bluetooth: hci0: unsupported parameter 8192 [ 288.157362][T12032] Bluetooth: hci0: unsupported parameter 5135 [ 288.157373][T12032] Bluetooth: hci0: unsupported parameter 8192 [ 288.158430][T12032] Bluetooth: hci0: unsupported parameter 5135 [ 288.158444][T12032] Bluetooth: hci0: unsupported parameter 8192 [ 288.158454][T12032] Bluetooth: hci0: unsupported parameter 5135 [ 288.158465][T12032] Bluetooth: hci0: unsupported parameter 8192 [ 288.158655][T12032] Bluetooth: hci0: unsupported parameter 5135 [ 288.158666][T12032] Bluetooth: hci0: unsupported parameter 8192 [ 288.158676][T12032] Bluetooth: hci0: unsupported parameter 5135 [ 288.158685][T12032] Bluetooth: hci0: unsupported parameter 8192 [ 288.158889][T12032] Bluetooth: hci0: unsupported parameter 5135 [ 288.158900][T12032] Bluetooth: hci0: unsupported parameter 8192 [ 288.158910][T12032] Bluetooth: hci0: unsupported parameter 5135 [ 288.158921][T12032] Bluetooth: hci0: unsupported parameter 8192 [ 288.161311][T12032] Bluetooth: hci0: unsupported parameter 5135 [ 288.161326][T12032] Bluetooth: hci0: unsupported parameter 8192 [ 288.161337][T12032] Bluetooth: hci0: unsupported parameter 5135 [ 288.161346][T12032] Bluetooth: hci0: unsupported parameter 8192 [ 288.161544][T12032] Bluetooth: hci0: unsupported parameter 5135 [ 288.161555][T12032] Bluetooth: hci0: unsupported parameter 8192 [ 288.161565][T12032] Bluetooth: hci0: unsupported parameter 5135 [ 288.161576][T12032] Bluetooth: hci0: unsupported parameter 8192 [ 288.161798][T12032] Bluetooth: hci0: unsupported parameter 5135 [ 288.161810][T12032] Bluetooth: hci0: unsupported parameter 8192 [ 288.161820][T12032] Bluetooth: hci0: unsupported parameter 5135 [ 288.161830][T12032] Bluetooth: hci0: unsupported parameter 8192 [ 288.162029][T12032] Bluetooth: hci0: unsupported parameter 5135 [ 288.162039][T12032] Bluetooth: hci0: unsupported parameter 8192 [ 288.162049][T12032] Bluetooth: hci0: unsupported parameter 5135 [ 288.162059][T12032] Bluetooth: hci0: unsupported parameter 8192 [ 288.162244][T12032] Bluetooth: hci0: unsupported parameter 5135 [ 288.162256][T12032] Bluetooth: hci0: unsupported parameter 8192 [ 288.162266][T12032] Bluetooth: hci0: unsupported parameter 5135 [ 288.162277][T12032] Bluetooth: hci0: unsupported parameter 8192 [ 288.162476][T12032] Bluetooth: hci0: unsupported parameter 5135 [ 288.162487][T12032] Bluetooth: hci0: unsupported parameter 8192 [ 288.162496][T12032] Bluetooth: hci0: unsupported parameter 5135 [ 288.162505][T12032] Bluetooth: hci0: unsupported parameter 8192 [ 288.162705][T12032] Bluetooth: hci0: unsupported parameter 5135 [ 288.169040][T12032] Bluetooth: hci0: unsupported parameter 8192 [ 288.169053][T12032] Bluetooth: hci0: unsupported parameter 5135 [ 288.169064][T12032] Bluetooth: hci0: unsupported parameter 8192 [ 288.169276][T12032] Bluetooth: hci0: unsupported parameter 5135 [ 288.169288][T12032] Bluetooth: hci0: unsupported parameter 8192 [ 288.169298][T12032] Bluetooth: hci0: unsupported parameter 5135 [ 288.169309][T12032] Bluetooth: hci0: unsupported parameter 8192 [ 288.176205][T12032] Bluetooth: hci0: unsupported parameter 5135 [ 288.176222][T12032] Bluetooth: hci0: unsupported parameter 8192 [ 288.176233][T12032] Bluetooth: hci0: unsupported parameter 5135 [ 288.176244][T12032] Bluetooth: hci0: unsupported parameter 8192 [ 288.178955][T12032] Bluetooth: hci0: unsupported parameter 5135 [ 288.178973][T12032] Bluetooth: hci0: unsupported parameter 8192 [ 288.178984][T12032] Bluetooth: hci0: unsupported parameter 5135 [ 288.178995][T12032] Bluetooth: hci0: unsupported parameter 8192 [ 288.179191][T12032] Bluetooth: hci0: unsupported parameter 5135 [ 288.179202][T12032] Bluetooth: hci0: unsupported parameter 8192 [ 288.179213][T12032] Bluetooth: hci0: unsupported parameter 5135 [ 288.179224][T12032] Bluetooth: hci0: unsupported parameter 8192 [ 288.179439][T12032] Bluetooth: hci0: unsupported parameter 5135 [ 288.184997][T12032] Bluetooth: hci0: unsupported parameter 8192 [ 288.185012][T12032] Bluetooth: hci0: unsupported parameter 5135 [ 288.185022][T12032] Bluetooth: hci0: unsupported parameter 8192 [ 288.185288][T12032] Bluetooth: hci0: unsupported parameter 5135 [ 288.185301][T12032] Bluetooth: hci0: unsupported parameter 8192 [ 288.185312][T12032] Bluetooth: hci0: unsupported parameter 5135 [ 288.185324][T12032] Bluetooth: hci0: unsupported parameter 8192 [ 288.185521][T12032] Bluetooth: hci0: unsupported parameter 5135 [ 288.185534][T12032] Bluetooth: hci0: unsupported parameter 8192 [ 288.207922][T12032] Bluetooth: hci0: unsupported parameter 5135 [ 288.207939][T12032] Bluetooth: hci0: unsupported parameter 8192 [ 288.208170][T12032] Bluetooth: hci0: unsupported parameter 5135 [ 288.208183][T12032] Bluetooth: hci0: unsupported parameter 8192 [ 288.208192][T12032] Bluetooth: hci0: unsupported parameter 5135 [ 288.208201][T12032] Bluetooth: hci0: unsupported parameter 8192 [ 288.208400][T12032] Bluetooth: hci0: unsupported parameter 5135 [ 288.208412][T12032] Bluetooth: hci0: unsupported parameter 8192 [ 288.208422][T12032] Bluetooth: hci0: unsupported parameter 5135 [ 288.208433][T12032] Bluetooth: hci0: unsupported parameter 8192 [ 288.405487][T12044] siw: device registration error -23 [ 288.675087][T12052] netlink: 'syz.3.2015': attribute type 3 has an invalid length. [ 288.675111][T12052] netlink: 'syz.3.2015': attribute type 1 has an invalid length. [ 288.675124][T12052] netlink: 204 bytes leftover after parsing attributes in process `syz.3.2015'. [ 288.683762][T12053] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2016'. [ 288.683817][T12053] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2016'. [ 289.462612][T12087] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2028'. [ 289.477439][ T5646] Bluetooth: hci2: unexpected event for opcode 0x0000 [ 289.735860][T12116] netlink: 'syz.4.2039': attribute type 3 has an invalid length. [ 289.735876][T12116] netlink: 'syz.4.2039': attribute type 1 has an invalid length. [ 289.735883][T12116] netlink: 204 bytes leftover after parsing attributes in process `syz.4.2039'. [ 289.802496][T12121] ip_tables: iptables: counters copy to user failed while replacing table [ 289.803656][T12117] bond7: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 289.806269][T12117] bond7 (unregistering): Released all slaves [ 289.807398][T12121] ip_tables: iptables: counters copy to user failed while replacing table [ 289.848876][T12119] netlink: 'syz.2.2034': attribute type 1 has an invalid length. [ 289.918112][T12119] 8021q: adding VLAN 0 to HW filter on device bond2 [ 289.920711][T12121] syzkaller1: entered promiscuous mode [ 289.920733][T12121] syzkaller1: entered allmulticast mode [ 289.959521][T12122] bond2: (slave veth0_to_bond): making interface the new active one [ 289.962312][T12122] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 289.967110][T12121] lo speed is unknown, defaulting to 1000 [ 289.971636][T12119] ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 290.002105][T12121] lo speed is unknown, defaulting to 1000 [ 290.006023][T12121] lo speed is unknown, defaulting to 1000 [ 290.149054][T12134] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 290.167550][T12134] netlink: 6 bytes leftover after parsing attributes in process `syz.3.2045'. [ 290.172199][T12134] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 290.189316][T12135] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 290.191717][T12136] netlink: 6 bytes leftover after parsing attributes in process `syz.3.2045'. [ 290.197312][T12136] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 290.395146][T12121] infiniband syz0: set active [ 290.396057][ T5641] lo speed is unknown, defaulting to 1000 [ 290.397609][T12121] infiniband syz0: added lo [ 290.421553][T12121] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 290.421591][T12121] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 290.421631][T12121] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 290.505147][T12121] RDS/IB: syz0: added [ 290.505204][T12121] smc: adding ib device syz0 with port count 1 [ 290.505224][T12121] smc: ib device syz0 port 1 has no pnetid [ 290.505307][ T5641] lo speed is unknown, defaulting to 1000 [ 290.518920][T12121] lo speed is unknown, defaulting to 1000 [ 290.576821][T12151] FAULT_INJECTION: forcing a failure. [ 290.576821][T12151] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 290.576851][T12151] CPU: 0 UID: 0 PID: 12151 Comm: syz.3.2049 Not tainted syzkaller #0 PREEMPT(full) [ 290.576872][T12151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 290.576883][T12151] Call Trace: [ 290.576889][T12151] [ 290.576897][T12151] dump_stack_lvl+0xe8/0x150 [ 290.576930][T12151] should_fail_ex+0x3eb/0x540 [ 290.576959][T12151] _copy_from_user+0x2d/0xb0 [ 290.576984][T12151] ___sys_sendmsg+0x1c6/0x360 [ 290.577004][T12151] ? __lock_acquire+0x747/0x2de0 [ 290.577032][T12151] ? __pfx____sys_sendmsg+0x10/0x10 [ 290.577089][T12151] ? __fget_files+0x3a2/0x420 [ 290.577117][T12151] ? __fget_files+0x2a/0x420 [ 290.577147][T12151] __x64_sys_sendmsg+0x1b1/0x290 [ 290.577169][T12151] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 290.577209][T12151] do_syscall_64+0x166/0x520 [ 290.577241][T12151] ? trace_irq_disable+0x3b/0x140 [ 290.577265][T12151] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.577283][T12151] ? clear_bhb_loop+0x70/0xc0 [ 290.577305][T12151] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.577322][T12151] RIP: 0033:0x7faefffa8f19 [ 290.577339][T12151] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 290.577355][T12151] RSP: 002b:00007faf00e18028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 290.577375][T12151] RAX: ffffffffffffffda RBX: 00007faf00225fa0 RCX: 00007faefffa8f19 [ 290.577388][T12151] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 290.577400][T12151] RBP: 00007faf00e18090 R08: 0000000000000000 R09: 0000000000000000 [ 290.577412][T12151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 290.577424][T12151] R13: 00007faf00226038 R14: 00007faf00225fa0 R15: 00007ffcce4c0918 [ 290.577456][T12151] [ 291.318078][T12121] lo speed is unknown, defaulting to 1000 [ 291.637745][T12197] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 291.751067][T12121] lo speed is unknown, defaulting to 1000 [ 291.906761][T12210] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2071'. [ 292.096397][T12212] validate_nla: 2 callbacks suppressed [ 292.096416][T12212] netlink: 'syz.0.2072': attribute type 3 has an invalid length. [ 292.096429][T12212] netlink: 'syz.0.2072': attribute type 1 has an invalid length. [ 292.096441][T12212] netlink: 204 bytes leftover after parsing attributes in process `syz.0.2072'. [ 292.096796][T12222] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2075'. [ 292.347393][T12121] lo speed is unknown, defaulting to 1000 [ 292.453796][T11907] udevd[11907]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 292.814407][T12248] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 292.878903][T12121] lo speed is unknown, defaulting to 1000 [ 293.212825][T12198] siw: device registration error -23 [ 293.325461][T12263] netlink: 'syz.1.2086': attribute type 3 has an invalid length. [ 293.325483][T12263] netlink: 'syz.1.2086': attribute type 1 has an invalid length. [ 293.325496][T12263] netlink: 204 bytes leftover after parsing attributes in process `syz.1.2086'. [ 293.357968][T12264] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2087'. [ 293.357990][T12264] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2087'. [ 293.458930][T12271] 8021q: VLANs not supported on ip6tnl0 [ 293.835252][T12292] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 294.089251][T12307] siw: device registration error -23 Stopping sshd: [ 294.566064][T12330] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2104'. stopped /usr/sbin/sshd (pid 5389) OK Stopping crond: [ 294.950195][ T5646] Bluetooth: hci4: unexpected event for opcode 0x2060 [ 295.094048][T12353] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2111'. [ 295.094070][T12353] FAULT_INJECTION: forcing a failure. [ 295.094070][T12353] name failslab, interval 1, probability 0, space 0, times 0 [ 295.094091][T12353] CPU: 1 UID: 0 PID: 12353 Comm: syz.1.2111 Not tainted syzkaller #0 PREEMPT(full) [ 295.094110][T12353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 295.094119][T12353] Call Trace: [ 295.094126][T12353] [ 295.094135][T12353] dump_stack_lvl+0xe8/0x150 [ 295.094168][T12353] should_fail_ex+0x3eb/0x540 [ 295.094195][T12353] should_failslab+0xa8/0x100 [ 295.094227][T12353] __kmalloc_cache_noprof+0x9e/0x600 [ 295.094252][T12353] ? xfrm_policy_alloc+0x78/0x2b0 [ 295.094271][T12353] ? xfrm_policy_alloc+0x78/0x2b0 [ 295.094298][T12353] xfrm_policy_alloc+0x78/0x2b0 [ 295.094321][T12353] xfrm_policy_construct+0x39/0x6b0 [ 295.094357][T12353] xfrm_add_policy+0x303/0x760 [ 295.094388][T12353] ? __pfx_xfrm_add_policy+0x10/0x10 stopped /usr/sbi[ 295.094411][T12353] ? apparmor_capable+0x126/0x170 n/crond (pid 537[ 295.094439][T12353] ? __nla_parse+0x40/0x60 3)[ 295.094470][T12353] xfrm_user_rcv_msg+0x7a8/0xf30 [ 295.094501][T12353] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 295.094558][T12353] ? __mutex_trylock_common+0x15f/0x270 [ 295.094590][T12353] ? __pfx___mutex_trylock_common+0x10/0x10 [ 295.094621][T12353] ? rcu_is_watching+0x16/0xb0 [ 295.094649][T12353] ? trace_contention_end+0x3d/0x140 [ 295.094685][T12353] netlink_rcv_skb+0x226/0x4a0 [ 295.094715][T12353] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 295.094741][T12353] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 295.094796][T12353] ? netlink_deliver_tap+0x2e/0x1b0 [ 295.094823][T12353] ? netlink_deliver_tap+0x2e/0x1b0 [ 295.094854][T12353] xfrm_netlink_rcv+0x79/0x90 [ 295.094878][T12353] netlink_unicast+0x8ef/0xa80 [ 295.094921][T12353] netlink_sendmsg+0x7f0/0xb20 [ 295.094955][T12353] ? __pfx_netlink_sendmsg+0x10/0x10 [ 295.094984][T12353] ? aa_sock_msg_perm+0x144/0x210 [ 295.095015][T12353] ? apparmor_socket_sendmsg+0x98/0x360 [ 295.095043][T12353] ? __pfx_netlink_sendmsg+0x10/0x10 [ 295.095069][T12353] sock_sendmsg_nosec+0x14e/0x190 [ 295.095099][T12353] ____sys_sendmsg+0x54e/0x850 [ 295.095127][T12353] ? __pfx_____sys_sendmsg+0x10/0x10 [ 295.095157][T12353] ? import_iovec+0x73/0xa0 [ 295.095184][T12353] ___sys_sendmsg+0x2a5/0x360 [ 295.095203][T12353] ? __lock_acquire+0x747/0x2de0 [ 295.095231][T12353] ? __pfx____sys_sendmsg+0x10/0x10 [ 295.095287][T12353] ? __fget_files+0x3a2/0x420 [ 295.095309][T12353] ? __fget_files+0x2a/0x420 [ 295.095340][T12353] __x64_sys_sendmsg+0x1b1/0x290 [ 295.095364][T12353] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 295.095402][T12353] do_syscall_64+0x166/0x520 [ 295.095423][T12353] ? trace_irq_disable+0x3b/0x140 [ 295.095447][T12353] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.095466][T12353] ? clear_bhb_loop+0x70/0xc0 [ 295.095490][T12353] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.095507][T12353] RIP: 0033:0x7f20c5ba8f19 [ 295.095525][T12353] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 OK [ 295.095542][T12353] RSP: 002b:00007f20c6ad5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 295.095563][T12353] RAX: ffffffffffffffda RBX: 00007f20c5e25fa0 RCX: 00007f20c5ba8f19 [ 295.095577][T12353] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 295.095589][T12353] RBP: 00007f20c6ad5090 R08: 0000000000000000 R09: 0000000000000000 [ 295.095601][T12353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 295.095612][T12353] R13: 00007f20c5e26038 R14: 00007f20c5e25fa0 R15: 00007ffe09b66828 [ 295.095643][T12353] [ 295.532974][ C0] ------------[ cut here ]------------ [ 295.532990][ C0] !rcu_read_lock_held() [ 295.533002][ C0] WARNING: ./include/net/dst.h:326 at xfrm_output_resume+0x41d9/0x64e0, CPU#0: ksoftirqd/0/15 [ 295.553133][ C0] Modules linked in: [ 295.557069][ C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted syzkaller #0 PREEMPT(full) [ 295.566315][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 295.576422][ C0] RIP: 0010:xfrm_output_resume+0x41d9/0x64e0 [ 295.582467][ C0] Code: be b5 01 00 00 48 c7 c2 c0 fa 53 8d e8 40 1b 07 f7 e9 aa fc ff ff e8 96 c9 2b f7 90 0f 0b 90 e9 7e ed ff ff e8 88 c9 2b f7 90 <0f> 0b 90 e9 44 e0 ff ff 48 89 df e8 87 25 52 fa 84 c0 0f 84 e1 00 [ 295.602157][ C0] RSP: 0018:ffffc90000147660 EFLAGS: 00010246 [ 295.608253][ C0] RAX: ffffffff8a9d47e8 RBX: 0000000000000000 RCX: ffff88801f281f40 [ 295.616299][ C0] RDX: 8000000000000100 RSI: 0000000000000100 RDI: 0000000000000000 [ 295.624331][ C0] RBP: ffffc900001478f0 R08: 0000000000000100 R09: 1ffffffff237bf97 [ 295.632403][ C0] R10: dffffc0000000000 R11: fffffbfff237bf98 R12: dffffc0000000000 [ 295.640423][ C0] R13: ffff88807ff862d8 R14: ffff8880347a5cd0 R15: ffff888035093380 [ 295.648415][ C0] FS: 0000000000000000(0000) GS:ffff888123409000(0000) knlGS:0000000000000000 [ 295.657424][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 295.664078][ C0] CR2: 00007fcbbb3bdfe8 CR3: 0000000078214000 CR4: 00000000003526f0 [ 295.672105][ C0] Call Trace: [ 295.675429][ C0] [ 295.678477][ C0] ? __pfx_xfrm_output_resume+0x10/0x10 [ 295.684092][ C0] ? iptfs_get_inner_mtu+0xa0/0x210 [ 295.689326][ C0] ? __asan_memset+0x22/0x50 [ 295.693989][ C0] ? xfrm_output+0xa03/0x1ca0 [ 295.698729][ C0] iptfs_delay_timer+0x3803/0x4310 [ 295.703939][ C0] ? __pfx_iptfs_delay_timer+0x10/0x10 [ 295.709479][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 295.714527][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 295.719972][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 295.725804][ C0] ? __pfx_iptfs_delay_timer+0x10/0x10 [ 295.731335][ C0] __hrtimer_run_queues+0x3bc/0xa10 [ 295.736585][ C0] hrtimer_run_softirq+0x1e3/0x2e0 [ 295.741758][ C0] handle_softirqs+0x265/0x8d0 [ 295.746557][ C0] run_ksoftirqd+0x36/0x60 [ 295.751031][ C0] smpboot_thread_fn+0x5f8/0xb30 [ 295.755987][ C0] ? smpboot_thread_fn+0x4e/0xb30 [ 295.761119][ C0] kthread+0x38b/0x480 [ 295.765222][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 295.770927][ C0] ? __pfx_kthread+0x10/0x10 [ 295.775539][ C0] ret_from_fork+0x514/0xb70 [ 295.777655][T12369] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2112'. [ 295.789068][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 295.794260][ C0] ? __switch_to+0xc78/0x1410 [ 295.798970][ C0] ? __pfx_kthread+0x10/0x10 [ 295.803646][ C0] ret_from_fork_asm+0x1a/0x30 [ 295.808461][ C0] [ 295.811557][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 295.818849][ C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted syzkaller #0 PREEMPT(full) [ 295.828057][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 295.838123][ C0] Call Trace: [ 295.841419][ C0] [ 295.844373][ C0] vpanic+0x26f/0x710 [ 295.848378][ C0] panic+0xc5/0xd0 [ 295.852119][ C0] ? __pfx_panic+0x10/0x10 [ 295.856565][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 295.861531][ C0] __warn+0x315/0x4c0 [ 295.865530][ C0] ? xfrm_output_resume+0x41d9/0x64e0 [ 295.870941][ C0] ? xfrm_output_resume+0x41d9/0x64e0 [ 295.876341][ C0] __report_bug+0x276/0x570 [ 295.880873][ C0] ? xfrm_output_resume+0x41d9/0x64e0 [ 295.886271][ C0] ? __pfx___report_bug+0x10/0x10 [ 295.891322][ C0] ? lockdep_hardirqs_on+0x7b/0x110 [ 295.896556][ C0] ? irqentry_exit+0x2a0/0x9b0 [ 295.901339][ C0] ? trace_irq_disable+0x3b/0x140 [ 295.906403][ C0] ? xfrm_output_resume+0x41db/0x64e0 [ 295.911803][ C0] ? xfrm_output_resume+0x41d9/0x64e0 [ 295.917208][ C0] report_bug+0x16b/0x220 [ 295.921565][ C0] ? xfrm_output_resume+0x41d9/0x64e0 [ 295.926973][ C0] ? xfrm_output_resume+0x41db/0x64e0 [ 295.932379][ C0] handle_bug+0x9c/0x200 [ 295.936650][ C0] exc_invalid_op+0x1a/0x50 [ 295.941186][ C0] asm_exc_invalid_op+0x1a/0x20 [ 295.946055][ C0] RIP: 0010:xfrm_output_resume+0x41d9/0x64e0 [ 295.952104][ C0] Code: be b5 01 00 00 48 c7 c2 c0 fa 53 8d e8 40 1b 07 f7 e9 aa fc ff ff e8 96 c9 2b f7 90 0f 0b 90 e9 7e ed ff ff e8 88 c9 2b f7 90 <0f> 0b 90 e9 44 e0 ff ff 48 89 df e8 87 25 52 fa 84 c0 0f 84 e1 00 [ 295.971733][ C0] RSP: 0018:ffffc90000147660 EFLAGS: 00010246 [ 295.977824][ C0] RAX: ffffffff8a9d47e8 RBX: 0000000000000000 RCX: ffff88801f281f40 [ 295.985817][ C0] RDX: 8000000000000100 RSI: 0000000000000100 RDI: 0000000000000000 [ 295.993807][ C0] RBP: ffffc900001478f0 R08: 0000000000000100 R09: 1ffffffff237bf97 [ 296.001797][ C0] R10: dffffc0000000000 R11: fffffbfff237bf98 R12: dffffc0000000000 [ 296.009790][ C0] R13: ffff88807ff862d8 R14: ffff8880347a5cd0 R15: ffff888035093380 [ 296.017785][ C0] ? xfrm_output_resume+0x41d8/0x64e0 [ 296.023229][ C0] ? __pfx_xfrm_output_resume+0x10/0x10 [ 296.028801][ C0] ? iptfs_get_inner_mtu+0xa0/0x210 [ 296.034029][ C0] ? __asan_memset+0x22/0x50 [ 296.038642][ C0] ? xfrm_output+0xa03/0x1ca0 [ 296.043359][ C0] iptfs_delay_timer+0x3803/0x4310 [ 296.048533][ C0] ? __pfx_iptfs_delay_timer+0x10/0x10 [ 296.054023][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 296.059075][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 296.064501][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 296.070334][ C0] ? __pfx_iptfs_delay_timer+0x10/0x10 [ 296.075828][ C0] __hrtimer_run_queues+0x3bc/0xa10 [ 296.081073][ C0] hrtimer_run_softirq+0x1e3/0x2e0 [ 296.086217][ C0] handle_softirqs+0x265/0x8d0 [ 296.091022][ C0] run_ksoftirqd+0x36/0x60 [ 296.095545][ C0] smpboot_thread_fn+0x5f8/0xb30 [ 296.100506][ C0] ? smpboot_thread_fn+0x4e/0xb30 [ 296.105560][ C0] kthread+0x38b/0x480 [ 296.109650][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 296.115126][ C0] ? __pfx_kthread+0x10/0x10 [ 296.119736][ C0] ret_from_fork+0x514/0xb70 [ 296.124359][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 296.129492][ C0] ? __switch_to+0xc78/0x1410 [ 296.134197][ C0] ? __pfx_kthread+0x10/0x10 [ 296.138813][ C0] ret_from_fork_asm+0x1a/0x30 [ 296.143617][ C0] [ 296.146934][ C0] Kernel Offset: disabled [ 296.151256][ C0] Rebooting in 86400 seconds..